Function at 0x41b320
Capabilities:
Copy file
Delete file

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff0
push 0x452ff4
call fcn.0044438c
pop ecx
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 4
jle 0x41b3c6
push str..rtf
mov eax, 0x452ff0
add eax, dword [ebp - 8]
push eax
call fcn.00444570
add esp, 8
test eax, eax
jne 0x41b3c6
push 0x452ff4
push 0x67d974
call fcn.00444570
add esp, 8
test eax, eax
je 0x41b64b
push 0
push 0x452ff4
push 0x67d974
call sub.KERNEL32.DLL_CopyFileA
test eax, eax
jne 0x41b64b
push 0x452ff4
push 0x45353c
push 0x10
push dword [0x4528dc]
call fcn.00411b5c
add esp, 0x10
push 0x452ff4
push str._________EditFile_CantWrite___s__r_n
call fcn.00403934
add esp, 8
mov dword [0x453e90], 1
jmp 0x41b64b
cmp dword [0x46db4c], 0
je 0x41b4a5
mov dword [0x453e90], 1
call fcn.00404c2c
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x41b423
push str.pcdocxls.dll
push 0x45b207
push 0x10
push dword [0x4528dc]
call fcn.00411b5c
add esp, 0x10
cmp dword [ebp - 0xc], 0
je 0x41b413
push dword [ebp - 0xc]
call sub.KERNEL32.DLL_FreeLibrary
push 0x45b232
call fcn.00403934
pop ecx
jmp 0x41b64b
push str.MSWordDialogPrint
push dword [ebp - 0xc]
call sub.KERNEL32.DLL_GetProcAddress
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x41b3eb
push 0x452ff4
mov edx, 2
cmp dword [0x46db4c], 2
je 0x41b44f
add edx, 0xfffffffe
push edx
push 0x67d974
call dword [ebp - 0x10]
test eax, eax
jne 0x41b47d
push 0x45b268
push str.MS_Word
push 0x45379c
push 0x10
push dword [0x4528dc]
call fcn.00411b5c
add esp, 0x14
jmp 0x41b485
xor ecx, ecx
mov dword [0x453e90], ecx
cmp byte [0x452ff4], 0
je 0x41b498
push 0x67d974
call sub.KERNEL32.DLL_DeleteFileA
push dword [ebp - 0xc]
call sub.KERNEL32.DLL_FreeLibrary
jmp 0x41b64b
cmp dword [0x452fa4], 1
jle 0x41b4ca
push str.FORMS.EXE
push 0x678723
call fcn.0044435c
add esp, 8
call fcn.0041a794
jmp 0x41b64b
movsx eax, byte [0xf480a6]
dec eax
jle 0x41b506
mov byte [0x678718], 0xff
push 0
push sym.PCDOCW.exe__EditSelProcDlg_qqsp6HWND__uiuil
push dword [0x4528dc]
push 0x4bf
push dword [0x4528e0]
call sub.USER32.DLL_DialogBoxParamA
cmp byte [0x678718], 0
jge 0x41b50d
jmp 0x41b64b
mov byte [0x678718], 0
movsx edx, byte [0x678718]
mov dword [0x45a8b4], edx
mov cl, byte [0x678718]
cmp cl, byte [0xf480a6]
jl 0x41b536
xor eax, eax
mov byte [0x678829], al
mov byte [0x678719], al
jmp 0x41b53e
push 0
call fcn.0041ade4
pop ecx
cmp byte [0x678829], 0
je 0x41b562
cmp byte [0x678719], 0
je 0x41b562
cmp dword [0x4530fc], 1
je 0x41b562
cmp byte [0x453d88], 0
je 0x41b56c
call fcn.0041a794
jmp 0x41b64b
xor edx, edx
mov dword [0x186fee8], edx
xor ecx, ecx
mov dword [0x45a8b8], ecx
xor eax, eax
mov dword [0x45a8bc], eax
xor edx, edx
mov dword [0x45a8c0], edx
xor ecx, ecx
mov dword [0x45a8c4], ecx
xor eax, eax
mov dword [0x45a8cc], eax
push 0
push dword [0x4528e0]
push 0
push 0
push 0x64
push 0x64
push 0x64
push 0x64
push 0x3cf0000
push str.PcdClient
push str.CliMainInstWClass
push 0
call sub.USER32.DLL_CreateWindowExA
mov dword [0x186fef0], eax
cmp dword [0x186fef0], 0
je 0x41b646
call fcn.0041bb48
cmp dword [0x45a8c0], 0
jne 0x41b60c
push str.SYSTEM
push 0x678719
call fcn.0041bc38
add esp, 8
mov dword [0x186fef4], eax
test eax, eax
je 0x41b60c
push dword [0x186fef4]
call fcn.0041c1d0
pop ecx
mov dword [0x45a8c8], eax
cmp dword [0x45a8c0], 0
jne 0x41b639
push 0
push 0xc8
push dword [0x186fef0]
push dword [0x186fef0]
call sub.USER32.DLL_SetTimer
mov dword [0x186feec], 1
jmp 0x41b64b
push dword [0x186fef0]
call sub.USER32.DLL_DestroyWindow
jmp 0x41b64b
call fcn.0041a794
mov esp, ebp
pop ebp
ret