Function at 0x41a6d8
Capabilities:
Copy file
Delete file

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff0
push 0x44fffc
call fcn.004415f8
pop ecx
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 4
jle 0x41a77e
push str..rtf
mov eax, 0x44fff8
add eax, dword [ebp - 8]
push eax
call fcn.004417dc
add esp, 8
test eax, eax
jne 0x41a77e
push 0x44fffc
push 0x679f44
call fcn.004417dc
add esp, 8
test eax, eax
je 0x41aa03
push 0
push 0x44fffc
push 0x679f44
call sub.KERNEL32.DLL_CopyFileA
test eax, eax
jne 0x41aa03
push 0x44fffc
push 0x450450
push 0x10
push dword [0x44f8dc]
call fcn.0041124c
add esp, 0x10
push 0x44fffc
push str._________EditFile_CantWrite___s__r_n
call fcn.0040391c
add esp, 8
mov dword [0x450da4], 1
jmp 0x41aa03
cmp dword [0x46a11c], 0
je 0x41a85d
mov dword [0x450da4], 1
call fcn.00404c14
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x41a7db
push str.pcdocxls.dll
push 0x457fc7
push 0x10
push dword [0x44f8dc]
call fcn.0041124c
add esp, 0x10
cmp dword [ebp - 0xc], 0
je 0x41a7cb
push dword [ebp - 0xc]
call sub.KERNEL32.DLL_FreeLibrary
push 0x457ff2
call fcn.0040391c
pop ecx
jmp 0x41aa03
push str.MSWordDialogPrint
push dword [ebp - 0xc]
call sub.KERNEL32.DLL_GetProcAddress
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x41a7a3
push 0x44fffc
mov edx, 2
cmp dword [0x46a11c], 2
je 0x41a807
add edx, 0xfffffffe
push edx
push 0x679f44
call dword [ebp - 0x10]
test eax, eax
jne 0x41a835
push 0x458028
push str.MS_Word
push 0x4506b0
push 0x10
push dword [0x44f8dc]
call fcn.0041124c
add esp, 0x14
jmp 0x41a83d
xor ecx, ecx
mov dword [0x450da4], ecx
cmp byte [0x44fffc], 0
je 0x41a850
push 0x679f44
call sub.KERNEL32.DLL_DeleteFileA
push dword [ebp - 0xc]
call sub.KERNEL32.DLL_FreeLibrary
jmp 0x41aa03
cmp dword [0x44ffac], 1
jle 0x41a882
push str.FORMS.EXE
push 0x674cf3
call fcn.004415c8
add esp, 8
call fcn.00419b4c
jmp 0x41aa03
movsx eax, byte [0xf446dc]
dec eax
jle 0x41a8be
mov byte [0x674ce8], 0xff
push 0
push sym.htpwrdoc.exe__EditSelProcDlg_qqsp6HWND__uiuil
push dword [0x44f8dc]
push 0x4bf
push dword [0x44f8e0]
call sub.USER32.DLL_DialogBoxParamA
cmp byte [0x674ce8], 0
jge 0x41a8c5
jmp 0x41aa03
mov byte [0x674ce8], 0
movsx edx, byte [0x674ce8]
mov dword [0x457698], edx
mov cl, byte [0x674ce8]
cmp cl, byte [0xf446dc]
jl 0x41a8ee
xor eax, eax
mov byte [0x674df9], al
mov byte [0x674ce9], al
jmp 0x41a8f6
push 0
call fcn.0041a19c
pop ecx
cmp byte [0x674df9], 0
je 0x41a91a
cmp byte [0x674ce9], 0
je 0x41a91a
cmp dword [0x450104], 1
je 0x41a91a
cmp byte [0x450c9c], 0
je 0x41a924
call fcn.00419b4c
jmp 0x41aa03
xor edx, edx
mov dword [0x186c41c], edx
xor ecx, ecx
mov dword [0x45769c], ecx
xor eax, eax
mov dword [0x4576a0], eax
xor edx, edx
mov dword [0x4576a4], edx
xor ecx, ecx
mov dword [0x4576a8], ecx
xor eax, eax
mov dword [0x4576b0], eax
push 0
push dword [0x44f8e0]
push 0
push 0
push 0x64
push 0x64
push 0x64
push 0x64
push 0x3cf0000
push str.PcdClient
push str.CliMainInstWClass
push 0
call sub.USER32.DLL_CreateWindowExA
mov dword [0x186c424], eax
cmp dword [0x186c424], 0
je 0x41a9fe
call fcn.0041af00
cmp dword [0x4576a4], 0
jne 0x41a9c4
push str.SYSTEM
push 0x674ce9
call fcn.0041aff0
add esp, 8
mov dword [0x186c428], eax
test eax, eax
je 0x41a9c4
push dword [0x186c428]
call fcn.0041b588
pop ecx
mov dword [0x4576ac], eax
cmp dword [0x4576a4], 0
jne 0x41a9f1
push 0
push 0xc8
push dword [0x186c424]
push dword [0x186c424]
call sub.USER32.DLL_SetTimer
mov dword [0x186c420], 1
jmp 0x41aa03
push dword [0x186c424]
call sub.USER32.DLL_DestroyWindow
jmp 0x41aa03
call fcn.00419b4c
mov esp, ebp
pop ebp
ret