Function at 0x401000
Capabilities:
Create directory
Create process on windows
Delete directory
Delete file
Enumerate files on windows
Get common file path
Query environment variable
Set environment variable

Disassembly:
sub esp, 0xf40
lea eax, [esp + 0x200]
push esi
push edi
push eax
push 0x100
mov edi, 1
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
lea ecx, [esp + 0x208]
lea edx, [esp + 0x208]
push ecx
push str._sPRESOFFLINE
push edx
call fcn.004019a0
lea eax, [esp + 0x214]
lea ecx, [esp + 0x14]
push eax
push str._s.
push ecx
call fcn.004019a0
add esp, 0x18
lea edx, [esp + 0x748]
push 0x800
push edx
push str.PATH
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
lea eax, [esp + 0x208]
lea ecx, [esp + 0x748]
push eax
push ecx
lea edx, [esp + 0x750]
push str._s__s
push edx
call fcn.004019a0
add esp, 0x10
lea eax, [esp + 0x748]
push eax
push str.PATH
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableA]
lea ecx, [esp + 0x608]
lea edx, [esp + 8]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x40113b
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_FindNextFileA]
push ebp
mov ebp, dword [sym.imp.KERNEL32.dll_DeleteFileA]
test byte [esp + 0x610], 0x10
jne 0x401105
lea eax, [esp + 0x63c]
lea ecx, [esp + 0x210]
push eax
push ecx
lea edx, [esp + 0x18]
push 0x40824c
push edx
call fcn.004019a0
add esp, 0x10
lea eax, [esp + 0x10]
push eax
call ebp
test eax, eax
jne 0x401105
xor edi, edi
lea ecx, [esp + 0x610]
push ecx
push esi
call ebx
test eax, eax
jne 0x4010cc
push esi
call dword [sym.imp.KERNEL32.dll_FindClose]
pop ebp
pop ebx
test edi, edi
je 0x40149c
lea edx, [esp + 0x208]
push edx
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
test eax, eax
je 0x40149c
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea eax, [esp + 0x208]
push 0
push eax
call esi
mov edi, dword [sym.imp.USER32.dll_MessageBoxA]
test eax, eax
jne 0x40119f
lea ecx, [esp + 0x208]
lea edx, [esp + 0x408]
push ecx
push str.Non
push edx
call fcn.004019a0
add esp, 0xc
lea eax, [esp + 0x408]
push 0x2015
push str.Errore_
push eax
push 0
call edi
cmp eax, 2
je 0x40119f
lea ecx, [esp + 0x208]
push 0
push ecx
call esi
test eax, eax
je 0x401157
lea edx, [esp + 0x208]
push str.sunzip.dll
push edx
lea eax, [esp + 0x10]
push 0x40824c
push eax
call fcn.004019a0
mov esi, dword [esp + 0xf5c]
push 0
lea ecx, [esp + 0x21c]
push 0
push ecx
push 0x6a
lea edx, [esp + 0x28]
push esi
push edx
call fcn.00401550
add esp, 0x28
test eax, eax
je 0x4014dd
lea eax, [esp + 8]
push eax
call fcn.004016e0
add esp, 4
test eax, eax
je 0x4014dd
call fcn.00401960
test eax, eax
jne 0x401244
lea ecx, [esp + 0x208]
push 0x4081e4
push ecx
lea edx, [esp + 0x10]
push 0x40824c
push edx
call fcn.004019a0
push 0
lea eax, [esp + 0x21c]
push 1
push eax
push 0x69
lea ecx, [esp + 0x28]
push esi
push ecx
call fcn.00401550
add esp, 0x28
test eax, eax
je 0x4014dd
lea edx, [esp + 0x208]
push 0x4081d0
push edx
lea eax, [esp + 0x10]
push 0x40824c
push eax
call fcn.004019a0
push 0
lea ecx, [esp + 0x21c]
push 1
push ecx
push 0x67
lea edx, [esp + 0x28]
push esi
push edx
call fcn.00401550
add esp, 0x28
test eax, eax
je 0x4014dd
lea eax, [esp + 0x208]
push str.anagrafica.txt
push eax
lea ecx, [esp + 0x10]
push 0x40824c
push ecx
call fcn.004019a0
push 1
lea edx, [esp + 0x21c]
push 1
push edx
push 0x6c
lea eax, [esp + 0x28]
push esi
push eax
call fcn.00401550
add esp, 0x28
test eax, eax
je 0x4014dd
lea ecx, [esp + 0x208]
push str.Storage.dat
push ecx
lea edx, [esp + 0x10]
push 0x40824c
push edx
call fcn.004019a0
push 1
lea eax, [esp + 0x21c]
push 1
push eax
push 0x6b
lea ecx, [esp + 0x28]
push esi
push ecx
call fcn.00401550
add esp, 0x28
test eax, eax
je 0x4014dd
lea edx, [esp + 0x208]
push str.vanagdipcodice.txt
push edx
lea eax, [esp + 0x10]
push 0x40824c
push eax
call fcn.004019a0
push 1
lea ecx, [esp + 0x21c]
push 1
push ecx
push 0x6d
lea edx, [esp + 0x28]
push esi
push edx
call fcn.00401550
add esp, 0x28
test eax, eax
je 0x4014dd
lea eax, [esp + 0x208]
push str.vanagdipcognome.txt
push eax
lea ecx, [esp + 0x10]
push 0x40824c
push ecx
call fcn.004019a0
push 1
lea edx, [esp + 0x21c]
push 1
push edx
push 0x6e
lea eax, [esp + 0x28]
push esi
push eax
call fcn.00401550
add esp, 0x28
test eax, eax
je 0x4014dd
lea ecx, [esp + 0x208]
push str.veventinonperiodici.txt
push ecx
lea edx, [esp + 0x10]
push 0x40824c
push edx
call fcn.004019a0
push 1
lea eax, [esp + 0x21c]
push 1
push eax
push 0x6f
lea ecx, [esp + 0x28]
push esi
push ecx
call fcn.00401550
add esp, 0x28
test eax, eax
je 0x4014dd
lea edx, [esp + 0x208]
push str.veventiperiodici.txt
push edx
lea eax, [esp + 0x10]
push 0x40824c
push eax
call fcn.004019a0
push 1
lea ecx, [esp + 0x21c]
push 1
push ecx
push 0x70
lea edx, [esp + 0x28]
push esi
push edx
call fcn.00401550
add esp, 0x28
test eax, eax
je 0x4014dd
lea eax, [esp + 0x208]
push str.vtipocessazione.txt
push eax
lea ecx, [esp + 0x10]
push 0x40824c
push ecx
call fcn.004019a0
push 1
lea edx, [esp + 0x21c]
push 1
push edx
push 0x68
lea eax, [esp + 0x28]
push esi
push eax
call fcn.00401550
add esp, 0x28
test eax, eax
je 0x4014dd
lea ecx, [esp + 0x208]
push 0x4081d0
push ecx
lea edx, [esp + 0x10]
push 0x40824c
push edx
call fcn.004019a0
add esp, 0x10
lea eax, [esp + 0x208]
lea ecx, [esp + 8]
push 5
push eax
push 0
push ecx
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp eax, 0x20
jl 0x40150b
call fcn.00401720
pop edi
xor eax, eax
pop esi
add esp, 0xf40
ret 0x10
lea edx, [esp + 0x408]
push str.Impossibile_avviare_unaltra_istanza_del_programma._Chiudere_prima_le_precedenti.
push edx
call fcn.004019a0
add esp, 8
lea eax, [esp + 0x408]
push 0x2010
push str.Attenzione_
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
call fcn.00401720
pop edi
xor eax, eax
pop esi
add esp, 0xf40
ret 0x10
lea ecx, [esp + 8]
lea edx, [esp + 0x408]
push ecx
push 0x408084
push edx
call fcn.004019a0
add esp, 0xc
lea eax, [esp + 0x408]
push 0x2010
push str.Errore_
push eax
jmp 0x401532
lea ecx, [esp + 0x408]
push 0x408030
push ecx
call fcn.004019a0
add esp, 8
lea edx, [esp + 0x408]
push 0x2010
push str.Errore_
push edx
push 0
call edi
call fcn.00401720
pop edi
xor eax, eax
pop esi
add esp, 0xf40
ret 0x10