Function at 0x42fa75
Capabilities:
Check if file exists
Create process on windows
Delete file
Get file attributes
Get graphical window text
Hide graphical window
Read .ini file

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffdc4
push ebx
push esi
push 0x45cd1a
push 0
push str.nAsm
push 0x44feb7
call sub.kernel32.dll_GetPrivateProfileIntA
mov dword [ebp - 0x23c], eax
mov dword [0x4aad2e], 0
mov dword [ebp - 0x238], 0
call sub.user32.dll_GetCursor
push eax
push 0x7f02
push 0
call sub.user32.dll_LoadCursorA
push eax
call sub.user32.dll_SetCursor
push 1
call fcn.0042ec60
cmp dword [0x45c9fe], 0
je 0x42fae3
mov edx, dword [ebp + 8]
xor eax, eax
mov ah, byte [edx]
mov al, 0x31
mov dword [edx], eax
mov dword [ebp - 0x210], 0
mov dword [0x4aa50e], 0
cmp dword [0x44f32d], 0
je 0x42fb48
push 0x45cb12
push 0x104
push 0x45ca0e
push 0x44ef8c
push dword [ebp + 8]
push str.MakeDef
call sub.kernel32.dll_GetPrivateProfileStringA
or eax, eax
jne 0x42fb69
push 0x45cd1a
push 0x104
push 0x45ca0e
push 0x44ef8c
push dword [ebp + 8]
push 0x45c93e
call sub.kernel32.dll_GetPrivateProfileStringA
jmp 0x42fb69
push 0x45cd1a
push 0x104
push 0x45ca0e
push 0x44ef8c
push dword [ebp + 8]
push str.MakeDefNoProject
call sub.kernel32.dll_GetPrivateProfileStringA
push 0x463932
push 0x45ca0e
call fcn.0040cd48
movzx eax, byte [0x463932]
push eax
cmp al, 0x30
je 0x42fc1a
push eax
mov edx, dword [0x463933]
push edx
cmp al, 0x30
jb 0x42fbbd
cmp al, 0x39
ja 0x42fbbd
push 0x45cb12
push 0x4000
push 0x463932
push 0x44ef8c
push 0x463932
push str.MakeFiles
call sub.kernel32.dll_GetPrivateProfileStringA
jmp 0x42fbc2
call fcn.00430309
pop edx
and edx, 0x5f5f5fff
pop eax
cmp al, 0x2a
jne 0x42fbf2
cmp edx, 0x4a424f2e
jne 0x42fbf2
push 0x463932
call fcn.004010ef
jmp 0x42fbe3
dec eax
cmp byte [eax + 0x463931], 0x5c
je 0x42fbf4
or eax, eax
jne 0x42fbe2
jmp 0x42fbf4
xor eax, eax
lea eax, [eax + 0x463932]
push eax
lea eax, [ebp - 0x208]
push eax
call fcn.004010a7
mov eax, dword [ebp + 0xc]
cmp dword [eax], 0x39393939
jne 0x42fc1a
xor eax, eax
pop esi
pop ebx
leave
ret 8
push 0x463932
push 0x45ca0e
call fcn.0040cd48
movzx ebx, word [0x463932]
cmp bl, 0x30
jne 0x42fc5a
push 0x46ba3e
push 0x45ca0e
call fcn.0040cd48
push 0x46ba3e
call fcn.00408490
push 0x46ba3e
call fcn.0042ece7
jmp 0x42fc7d
push 0x4aa50e
push 0x45ca0e
call fcn.0040cd48
push 0x4aa50e
call fcn.00408490
push 0x4aa50e
call fcn.0042ece7
mov byte [0x463933], 0
push 0x463932
push 0x45ca0e
call fcn.0040cd48
mov ax, word [0x463932]
or ax, ax
je 0x42fd7e
cmp bh, 0x4e
je 0x42fcac
cmp bh, 0x3b
jne 0x42fcb8
mov dword [ebp - 0x210], 0
jmp 0x42fcc2
mov dword [ebp - 0x210], 1
cmp al, 0x31
jb 0x42fcce
cmp al, 0x39
ja 0x42fcce
or ah, ah
je 0x42fce8
cmp ah, 0x30
jb 0x42fd74
cmp ah, 0x39
ja 0x42fd74
cmp al, 0x31
jne 0x42fd74
push eax
push 0x45cb12
push 0x4000
push 0x463932
push 0x44ef8c
push 0x463932
push str.MakeFiles
call sub.kernel32.dll_GetPrivateProfileStringA
call fcn.00430309
pop eax
cmp ax, 0x33
je 0x42fd1e
cmp ax, 0x3331
jne 0x42fd6f
mov dword [ebp - 0x20c], 1
jmp 0x42fd63
push dword [ebp - 0x20c]
call fcn.004275b1
or eax, eax
je 0x42fd5d
push eax
push 0x463932
call fcn.004010a7
push str..obj
push 0x463932
call fcn.0040ccb3
cmp eax, 0xffffffff
je 0x42fd5d
call fcn.00430309
inc dword [ebp - 0x20c]
cmp dword [ebp - 0x20c], 0x3e9
jb 0x42fd2a
jmp 0x42fc7d
call fcn.00430309
jmp 0x42fc7d
call fcn.00430577
cmp bh, 0x3b
jne 0x42fd9b
push 0x4aa50e
call fcn.004010ef
mov word [eax + 0x4aa50e], 0x3b
cmp bl, 0x4f
jne 0x42ff2e
call fcn.0042ed4b
cmp dword [ebp - 0x238], 0
je 0x42fdc2
mov eax, 1
pop esi
pop ebx
leave
ret 8
lea eax, [ebp - 0x208]
push eax
call sub.kernel32.dll_GetFileAttributesA
cmp eax, 0xffffffff
je 0x42fead
lea eax, [ebp - 0x208]
push eax
call sub.kernel32.dll_DeleteFileA
or eax, eax
jne 0x42fead
push 0x7f00
push 0
call sub.user32.dll_LoadCursorA
push eax
call sub.user32.dll_SetCursor
mov dword [ebp - 0x218], 0xffffffff
mov dword [ebp - 0x214], 0xffffffff
lea eax, [ebp - 0x218]
push eax
push 0
push 0x437
push dword [0x453920]
call sub.user32.dll_SendMessageA
push 0x44e6ed
push 0
push 0xc2
push dword [0x453920]
call sub.user32.dll_SendMessageA
lea eax, [ebp - 0x208]
push eax
call fcn.004010ef
lea esi, [ebp - 0x208]
add esi, eax
mov ax, 0xd
mov word [esi], ax
mov dword [ebp - 0x218], 0xffffffff
mov dword [ebp - 0x214], 0xffffffff
lea eax, [ebp - 0x218]
push eax
push 0
push 0x437
push dword [0x453920]
call sub.user32.dll_SendMessageA
lea eax, [ebp - 0x208]
push eax
push 0
push 0xc2
push dword [0x453920]
call sub.user32.dll_SendMessageA
mov eax, 1
pop esi
pop ebx
leave
ret 8
push dword [0x4538b0]
call sub.user32.dll_SetFocus
xor eax, eax
call fcn.004300ec
mov dword [ebp - 0x218], 0xffffffff
mov dword [ebp - 0x214], 0xffffffff
lea eax, [ebp - 0x218]
push eax
push 0
push 0x437
push dword [0x453920]
call sub.user32.dll_SendMessageA
push 0
push 0
push 0x43f
push dword [0x453920]
call sub.user32.dll_SendMessageA
push 0
push 0
push 0xb7
push dword [0x453920]
call sub.user32.dll_SendMessageA
push dword [0x453920]
call sub.user32.dll_SetFocus
mov dword [0x44f349], 1
jmp 0x43006e
cmp bl, 0x43
jne 0x42ff47
pop eax
push 0x30
push 0xa
push 0x4aa50e
call sub.kernel32.dll_WinExec
jmp 0x43006e
cmp bl, 0x30
jne 0x43006e
mov dword [0x4aad2e], 1
cmp dword [0x44f32d], 0
je 0x430055
cmp byte [0x4aa510], 0
je 0x42ffe9
cmp bh, 0x4e
je 0x42ff7a
cmp bh, 0x3b
jne 0x42ff7f
xor ax, ax
jmp 0x42ff83
mov ax, 0x22
mov word [0x463932], ax
cmp byte [0x4aa511], 0x3a
je 0x42ffa1
push 0x45de5e
push 0x463932
call fcn.004010c5
mov eax, 2
cmp bh, 0x4e
je 0x42ffb0
cmp bh, 0x3b
jne 0x42ffb1
dec eax
lea eax, [eax + 0x4aa50e]
push eax
push 0x463932
call fcn.004010c5
cmp byte [0x46ba3e], 0
je 0x42ffda
push str.__.___t
push 0x46ba3e
call fcn.004010c5
push 0x463932
push 0x46ba3e
call fcn.004010c5
push 0x46ba3e
push 0x4aa50e
call fcn.004010a7
call fcn.00430577
push 0x44e7a1
call fcn.00430605
cmp dword [0x45c4d0], 0
je 0x430047
push 6
push dword [0x4538b0]
call sub.user32.dll_ShowWindow
mov eax, 0
call fcn.004300ec
push dword [0x4538b0]
call sub.user32.dll_IsIconic
or eax, eax
je 0x430043
push 9
push dword [0x4538b0]
call sub.user32.dll_ShowWindow
xor eax, eax
jmp 0x430051
mov eax, 1
call fcn.004300ec
jmp 0x4300c4
call fcn.00430577
push 0x44e7a1
call fcn.00430605
mov eax, 2
call fcn.004300ec
pop eax
cmp al, 0x30
je 0x4300c2
cmp dword [0x4aad2a], 0x4d2
je 0x4300a4
lea eax, [ebp - 0x208]
push eax
call sub.kernel32.dll_GetFileAttributesA
cmp eax, 0xffffffff
je 0x430099
cmp dword [ebp - 0x20c], 0
je 0x4300a0
mov eax, 1
jmp 0x4300c4
xor eax, eax
jmp 0x4300c4
push 0x44e78b
push 0
push 0xc2
push dword [0x453920]
call sub.user32.dll_SendMessageA
mov eax, 0x4d2
jmp 0x4300c4
xor eax, eax
pop edx
push eax
push edx
call sub.user32.dll_SetCursor
pop eax
or eax, eax
jne 0x4300e6
cmp dword [ebp - 0x23c], 0x62
jne 0x4300e6
push 0x463932
call fcn.0042ed6e
xor eax, eax
pop esi
pop ebx
leave
ret 8