Function at 0x10035ad0
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10150eb5
mov eax, dword fs:[0]
push eax
sub esp, 0x240
mov eax, dword [0x101a5034]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x108], ecx
push str.AutoScreenshotEvent:Start_Screenshot
push 1
push 0x117
push 0x10164cd8
push 0x10164c1c
call fcn.101426f0
add esp, 0x14
mov eax, dword [0x101aca98]
and eax, 1
jne 0x10035b5e
mov ecx, dword [0x101aca98]
or ecx, 1
mov dword [0x101aca98], ecx
mov dword [ebp - 4], 0
mov ecx, 0x101aca9c
call fcn.10002fa0
push 0x1015b620
call fcn.1014c76b
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov ecx, 0x101aca9c
call fcn.10003ae0
movzx edx, al
test edx, edx
je 0x10035be5
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x164], esp
push 0x10164d18
call fcn.10002c60
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x188], eax
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x1ec]
push ecx
call fcn.100255e0
mov dword [ebp - 4], 0xffffffff
mov ecx, eax
call fcn.10025840
mov dword [ebp - 0x11c], eax
mov edx, dword [ebp - 0x11c]
mov dword [ebp - 0x130], edx
mov eax, dword [ebp - 0x130]
push eax
mov ecx, 0x101aca9c
call fcn.10002230
lea ecx, [ebp - 0x1ec]
call fcn.10002d10
xor ecx, ecx
mov word [ebp - 0xfc], cx
xor edx, edx
mov dword [ebp - 0xfa], edx
mov dword [ebp - 0xf6], edx
mov dword [ebp - 0xf2], edx
mov word [ebp - 0xee], dx
lea eax, [ebp - 0xfc]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx ecx, word [ebp - 0xf0]
push ecx
movzx edx, word [ebp - 0xf2]
push edx
movzx eax, word [ebp - 0xf4]
push eax
movzx ecx, word [ebp - 0xf6]
push ecx
movzx edx, word [ebp - 0xfa]
push edx
movzx eax, word [ebp - 0xfc]
push eax
push 0x10164d3c
lea ecx, [ebp - 0x5c]
push ecx
call fcn.1007b7d0
add esp, 0x20
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x5c]
call fcn.10001960
push eax
mov ecx, 0x101aca9c
call fcn.10001960
push eax
push 0x10164d78
lea edx, [ebp - 0x2c]
push edx
call fcn.1007b7d0
add esp, 0x10
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xec]
call fcn.10036240
mov byte [ebp - 4], 4
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.100023a0
lea ecx, [ebp - 0x24c]
push ecx
call fcn.100fa750
add esp, 4
mov dword [ebp - 0x138], eax
mov edx, dword [ebp - 0x138]
push edx
lea ecx, [ebp - 0xd0]
call fcn.10002230
lea ecx, [ebp - 0x24c]
call fcn.10002d10
lea ecx, [ebp - 0x11]
call fcn.10002e60
mov byte [ebp - 4], 5
push 0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x190], esp
lea eax, [ebp - 0x2c]
push eax
call fcn.10003060
mov dword [ebp - 0x198], eax
lea ecx, [ebp - 0x11]
call fcn.10077a70
mov byte [ebp - 0x100], al
movzx ecx, byte [ebp - 0x100]
test ecx, ecx
je 0x100361c5
lea edx, [ebp - 0x234]
push edx
call fcn.100fa860
add esp, 4
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x148], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x5c]
call fcn.10001960
push eax
mov ecx, dword [ebp - 0x148]
call fcn.10001960
push eax
push str._s_ScreenShot__s.jpg
lea ecx, [ebp - 0x44]
push ecx
call fcn.1007b7d0
add esp, 0x10
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x234]
call fcn.10002d10
lea edx, [ebp - 0x44]
push edx
lea ecx, [ebp - 0xb8]
call fcn.100023a0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1a0], esp
lea eax, [ebp - 0x2c]
push eax
call fcn.10003060
mov dword [ebp - 0x1a8], eax
call fcn.100fc3a0
add esp, 0x18
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x124], edx
mov ecx, dword [ebp - 0x128]
mov dword [ebp - 0x9c], ecx
mov edx, dword [ebp - 0x124]
mov dword [ebp - 0x98], edx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1b0], esp
lea eax, [ebp - 0x44]
push eax
call fcn.10003060
mov dword [ebp - 0x1b8], eax
lea ecx, [ebp - 0x21c]
call fcn.1007baa0
add esp, 0x18
mov dword [ebp - 0x150], eax
mov ecx, dword [ebp - 0x150]
mov dword [ebp - 0x158], ecx
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x158]
call fcn.1000c9b0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1d0], esp
push eax
call fcn.1000ccc0
mov dword [ebp - 0x154], eax
mov edx, dword [ebp - 0x154]
mov dword [ebp - 0x15c], edx
mov byte [ebp - 4], 0xa
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1c8], esp
lea eax, [ebp - 0x2c]
push eax
call fcn.10003060
mov dword [ebp - 0x16c], eax
lea ecx, [ebp - 0x204]
call fcn.1007baa0
add esp, 0x18
mov dword [ebp - 0x10c], eax
mov ecx, dword [ebp - 0x10c]
mov dword [ebp - 0x13c], ecx
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x13c]
call fcn.1000c9b0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1ac], esp
push eax
call fcn.1000ccc0
mov dword [ebp - 0x120], eax
mov edx, dword [ebp - 0x120]
mov dword [ebp - 0x174], edx
mov byte [ebp - 4], 0xc
call dword [sym.imp.NetCommHelper.dll_public:_static_class_CNetManager____cdecl_CNetManager::GetInstance_void_]
mov byte [ebp - 4], 0xd
mov ecx, eax
call dword [sym.imp.NetCommHelper.dll_public:_bool___thiscall_CNetManager::UploadFile_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char____class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___]
mov byte [ebp - 0xfe], al
mov al, byte [ebp - 0xfe]
mov byte [ebp - 0xfd], al
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x204]
call fcn.1000cd00
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x21c]
call fcn.1000cd00
movzx ecx, byte [ebp - 0xfd]
test ecx, ecx
je 0x10036183
call fcn.10101c50
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0
je 0x10035fdc
sub esp, 0x18
mov edx, esp
mov dword [ebp - 0x1c0], esp
push edx
call fcn.100fa860
add esp, 4
mov dword [ebp - 0x17c], eax
lea ecx, [ebp - 0xec]
call fcn.10034070
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x14c]
push eax
mov ecx, dword [ebp - 0x104]
push ecx
call fcn.10101b20
add esp, 8
mov edx, dword [ebp - 0x104]
push edx
call fcn.101005f0
add esp, 0xffffffec
mov esi, esp
mov dword [ebp - 0x1b4], esp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x184], esp
push eax
call fcn.1000ccc0
mov dword [ebp - 0x1c4], eax
mov ecx, esi
call fcn.1007bd60
add esp, 0x18
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x18c], eax
mov byte [ebp - 4], 0xe
call dword [sym.imp.NetCommHelper.dll_public:_static_class_CNetManager____cdecl_CNetManager::GetInstance_void_]
mov byte [ebp - 4], 8
mov ecx, eax
call dword [sym.imp.NetCommHelper.dll_public:_void___thiscall_CNetManager::AddData_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___]
call dword [sym.imp.NetCommHelper.dll_public:_static_class_CNetManager____cdecl_CNetManager::GetInstance_void_]
mov ecx, eax
call dword [sym.imp.NetCommHelper.dll_public:_void___thiscall_CNetManager::HandleData_void_]
mov ecx, dword [ebp - 0x104]
push ecx
call fcn.100ff3c0
add esp, 4
mov dword [ebp - 0x104], 0
movzx edx, word [ebp - 0xf0]
push edx
movzx eax, word [ebp - 0xf2]
push eax
movzx ecx, word [ebp - 0xf4]
push ecx
movzx edx, word [ebp - 0xf6]
push edx
movzx eax, word [ebp - 0xfa]
push eax
movzx ecx, word [ebp - 0xfc]
push ecx
push 0x10164db8
lea edx, [ebp - 0x8c]
push edx
call fcn.1007b7d0
add esp, 0x20
mov byte [ebp - 4], 0xf
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1bc], esp
lea eax, [ebp - 0x8c]
push eax
call fcn.10003060
mov dword [ebp - 0x194], eax
lea ecx, [ebp - 0x74]
call fcn.1007baa0
add esp, 0x18
mov dword [ebp - 0x1cc], eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x74]
call fcn.1000c9b0
push eax
push str.The_Current_Screenshot_Time_is:_s
push 1
push 0x142
push 0x10164e18
push 0x10164e58
call fcn.101426f0
add esp, 0x18
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x19c], esp
lea edx, [ebp - 0x74]
push edx
call fcn.1000c9d0
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x1d4], eax
mov byte [ebp - 4], 0x11
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1a4], esp
push 0x10164e84
call fcn.1000ccc0
mov dword [ebp - 0x134], eax
mov ecx, dword [ebp - 0x134]
mov dword [ebp - 0x160], ecx
mov byte [ebp - 4], 0x12
call fcn.10033810
mov byte [ebp - 4], 0x10
mov ecx, eax
call fcn.1011d740
mov edx, dword [ebp - 0x108]
mov eax, dword [edx + 0xc]
add eax, 1
mov ecx, dword [ebp - 0x108]
mov dword [ecx + 0xc], eax
sub esp, 0x18
mov edx, esp
mov dword [ebp - 0x168], esp
mov eax, dword [ebp - 0x108]
mov ecx, dword [eax + 0xc]
push ecx
push edx
call fcn.10036550
add esp, 8
mov dword [ebp - 0x110], eax
mov edx, dword [ebp - 0x110]
mov dword [ebp - 0x170], edx
mov byte [ebp - 4], 0x13
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x178], esp
push str.AutoSrceenCount
call fcn.1000ccc0
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x180], eax
mov byte [ebp - 4], 0x14
call fcn.10033810
mov byte [ebp - 4], 0x10
mov ecx, eax
call fcn.1011d740
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x74]
call fcn.1000cd00
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x8c]
call fcn.10002d10
jmp 0x100361aa
lea ecx, [ebp - 0x2c]
call fcn.10001960
push eax
push 0x10164ea8
push 1
push 0x149
push 0x10164ee8
push 0x10164f68
call fcn.10142a80
add esp, 0x18
lea ecx, [ebp - 0x2c]
call fcn.10001960
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x44]
call fcn.10002d10
push str.AutoScreenshot_end
push 1
push 0x14d
push str..._srcMoniterHelperEventExecuteHandleAutoScreenshotEvent.cpp
push str.CHandleAutoScreenshotEvent::StartScreenshot
call fcn.101426f0
add esp, 0x14
mov byte [ebp - 0xff], 1
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x11]
call fcn.10023580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xec]
call fcn.100362b0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2c]
call fcn.10002d10
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5c]
call fcn.10002d10
mov al, byte [ebp - 0xff]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1014c66b
mov esp, ebp
pop ebp
ret