Function at 0x10034be0
Capabilities:
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10154e90
mov eax, dword fs:[0]
push eax
sub esp, 0x258
mov eax, dword [0x101ac034]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x120], ecx
push str.AutoScreenshotEvent:Start_Screenshot
push 1
push 0x117
push 0x10169b00
push 0x10169a44
call fcn.10145f00
add esp, 0x14
mov eax, dword [0x101b4318]
and eax, 1
jne 0x10034c6e
mov ecx, dword [0x101b4318]
or ecx, 1
mov dword [0x101b4318], ecx
mov dword [ebp - 4], 0
mov ecx, 0x101b431c
call fcn.10003f70
push 0x1015fbb0
call fcn.101507af
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov ecx, 0x101b431c
call fcn.10001f20
movzx edx, al
test edx, edx
je 0x10034cf5
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1e8], esp
push 0x10169b40
call fcn.10003d50
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x198], eax
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x204]
push ecx
call fcn.100241b0
mov dword [ebp - 4], 0xffffffff
mov ecx, eax
call fcn.10024410
mov dword [ebp - 0x12c], eax
mov edx, dword [ebp - 0x12c]
mov dword [ebp - 0x140], edx
mov eax, dword [ebp - 0x140]
push eax
mov ecx, 0x101b431c
call fcn.10003480
lea ecx, [ebp - 0x204]
call fcn.10003e00
xor ecx, ecx
mov word [ebp - 0x114], cx
xor edx, edx
mov dword [ebp - 0x112], edx
mov dword [ebp - 0x10e], edx
mov dword [ebp - 0x10a], edx
mov word [ebp - 0x106], dx
lea eax, [ebp - 0x114]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movzx ecx, word [ebp - 0x108]
push ecx
movzx edx, word [ebp - 0x10a]
push edx
movzx eax, word [ebp - 0x10c]
push eax
movzx ecx, word [ebp - 0x10e]
push ecx
movzx edx, word [ebp - 0x112]
push edx
movzx eax, word [ebp - 0x114]
push eax
push 0x10169b64
lea ecx, [ebp - 0x5c]
push ecx
call fcn.1007cf90
add esp, 0x20
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x5c]
call fcn.10002bf0
push eax
mov ecx, 0x101b431c
call fcn.10002bf0
push eax
push 0x10169ba0
lea edx, [ebp - 0x2c]
push edx
call fcn.1007cf90
add esp, 0x10
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x104]
call fcn.10035390
mov byte [ebp - 4], 4
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x100]
call fcn.100035f0
lea ecx, [ebp - 0x264]
push ecx
call fcn.100fd7a0
add esp, 4
mov dword [ebp - 0x148], eax
mov edx, dword [ebp - 0x148]
push edx
lea ecx, [ebp - 0xe8]
call fcn.10003480
lea ecx, [ebp - 0x264]
call fcn.10003e00
lea ecx, [ebp - 0x11]
call fcn.100026d0
mov byte [ebp - 4], 5
push 0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1a0], esp
lea eax, [ebp - 0x2c]
push eax
call fcn.10004030
mov dword [ebp - 0x1a8], eax
lea ecx, [ebp - 0x11]
call fcn.100791f0
mov byte [ebp - 0x117], al
movzx ecx, byte [ebp - 0x117]
test ecx, ecx
je 0x1003530a
lea edx, [ebp - 0x24c]
push edx
call fcn.100fd8b0
add esp, 4
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x158], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x5c]
call fcn.10002bf0
push eax
mov ecx, dword [ebp - 0x158]
call fcn.10002bf0
push eax
push str._s_ScreenShot__s.jpg
lea ecx, [ebp - 0x74]
push ecx
call fcn.1007cf90
add esp, 0x10
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x24c]
call fcn.10003e00
lea edx, [ebp - 0x74]
push edx
lea ecx, [ebp - 0xd0]
call fcn.100035f0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1b0], esp
lea eax, [ebp - 0x2c]
push eax
call fcn.10004030
mov dword [ebp - 0x1b8], eax
call fcn.100ff3f0
add esp, 0x18
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], edx
mov ecx, dword [ebp - 0x138]
mov dword [ebp - 0xb4], ecx
mov edx, dword [ebp - 0x134]
mov dword [ebp - 0xb0], edx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1c0], esp
lea eax, [ebp - 0x74]
push eax
call fcn.10004030
mov dword [ebp - 0x1c8], eax
lea ecx, [ebp - 0x234]
call fcn.1007d260
add esp, 0x18
mov dword [ebp - 0x160], eax
mov ecx, dword [ebp - 0x160]
mov dword [ebp - 0x168], ecx
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x168]
call fcn.10001f00
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1d0], esp
push eax
call fcn.100029e0
mov dword [ebp - 0x170], eax
mov edx, dword [ebp - 0x170]
mov dword [ebp - 0x174], edx
mov byte [ebp - 4], 0xa
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x17c], esp
lea eax, [ebp - 0x2c]
push eax
call fcn.10004030
mov dword [ebp - 0x1e0], eax
lea ecx, [ebp - 0x21c]
call fcn.1007d260
add esp, 0x18
mov dword [ebp - 0x124], eax
mov ecx, dword [ebp - 0x124]
mov dword [ebp - 0x130], ecx
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x130]
call fcn.10001f00
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x184], esp
push eax
call fcn.100029e0
mov dword [ebp - 0x154], eax
mov edx, dword [ebp - 0x154]
mov dword [ebp - 0x1c4], edx
mov byte [ebp - 4], 0xc
call dword [sym.imp.NetCommHelper.dll_public:_static_class_CNetManager____cdecl_CNetManager::GetInstance_void_]
mov byte [ebp - 4], 0xd
mov ecx, eax
call dword [sym.imp.NetCommHelper.dll_public:_bool___thiscall_CNetManager::UploadFile_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char____class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___]
mov byte [ebp - 0x116], al
mov al, byte [ebp - 0x116]
mov byte [ebp - 0x118], al
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x21c]
call fcn.10001f50
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x234]
call fcn.10001f50
movzx ecx, byte [ebp - 0x118]
test ecx, ecx
je 0x100352c8
call fcn.10104c10
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0
je 0x10035115
sub esp, 0x18
mov edx, esp
mov dword [ebp - 0x18c], esp
push edx
call fcn.100fd8b0
add esp, 4
mov dword [ebp - 0x1d8], eax
lea ecx, [ebp - 0x104]
call fcn.10033180
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x13c]
push eax
mov ecx, dword [ebp - 0x11c]
push ecx
call fcn.10104ae0
add esp, 8
lea ecx, [ebp - 0x44]
call fcn.1000d8b0
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x11c]
push edx
lea eax, [ebp - 0x44]
push eax
call fcn.100fd720
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x100350e2
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x194], esp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1cc], esp
lea edx, [ebp - 0x44]
push edx
call fcn.1000d6d0
mov dword [ebp - 0x19c], eax
mov ecx, esi
call fcn.1007d520
add esp, 0x18
mov dword [ebp - 0x164], eax
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x1dc], eax
mov byte [ebp - 4], 0xf
call dword [sym.imp.NetCommHelper.dll_public:_static_class_CNetManager____cdecl_CNetManager::GetInstance_void_]
mov byte [ebp - 4], 0xe
mov ecx, eax
call dword [sym.imp.NetCommHelper.dll_public:_void___thiscall_CNetManager::AddData_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___]
call dword [sym.imp.NetCommHelper.dll_public:_static_class_CNetManager____cdecl_CNetManager::GetInstance_void_]
mov ecx, eax
call dword [sym.imp.NetCommHelper.dll_public:_void___thiscall_CNetManager::HandleData_void_]
mov ecx, dword [ebp - 0x11c]
push ecx
call fcn.10102380
add esp, 4
mov dword [ebp - 0x11c], 0
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x44]
call fcn.10001f50
movzx edx, word [ebp - 0x108]
push edx
movzx eax, word [ebp - 0x10a]
push eax
movzx ecx, word [ebp - 0x10c]
push ecx
movzx edx, word [ebp - 0x10e]
push edx
movzx eax, word [ebp - 0x112]
push eax
movzx ecx, word [ebp - 0x114]
push ecx
push 0x10169be0
lea edx, [ebp - 0xa4]
push edx
call fcn.1007cf90
add esp, 0x20
mov byte [ebp - 4], 0x10
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1a4], esp
lea eax, [ebp - 0xa4]
push eax
call fcn.10004030
mov dword [ebp - 0x1d4], eax
lea ecx, [ebp - 0x8c]
call fcn.1007d260
add esp, 0x18
mov dword [ebp - 0x1ac], eax
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x8c]
call fcn.10001f00
push eax
push str.The_Current_Screenshot_Time_is:_s
push 1
push 0x146
push 0x10169c40
push 0x10169c80
call fcn.10145f00
add esp, 0x18
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1e4], esp
lea edx, [ebp - 0x8c]
push edx
call fcn.1000d6d0
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x1b4], eax
mov byte [ebp - 4], 0x12
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x1ec], esp
push 0x10169cac
call fcn.100029e0
mov dword [ebp - 0x15c], eax
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x1bc], ecx
mov byte [ebp - 4], 0x13
call fcn.100017e0
mov byte [ebp - 4], 0x11
mov ecx, eax
call fcn.100f9bf0
mov edx, dword [ebp - 0x120]
mov eax, dword [edx + 0xc]
add eax, 1
mov ecx, dword [ebp - 0x120]
mov dword [ecx + 0xc], eax
sub esp, 0x18
mov edx, esp
mov dword [ebp - 0x178], esp
mov eax, dword [ebp - 0x120]
mov ecx, dword [eax + 0xc]
push ecx
push edx
call fcn.10035640
add esp, 8
mov dword [ebp - 0x14c], eax
mov edx, dword [ebp - 0x14c]
mov dword [ebp - 0x180], edx
mov byte [ebp - 4], 0x14
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x188], esp
push str.AutoSrceenCount
call fcn.100029e0
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x190], eax
mov byte [ebp - 4], 0x15
call fcn.100017e0
mov byte [ebp - 4], 0x11
mov ecx, eax
call fcn.100f9bf0
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x8c]
call fcn.10001f50
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xa4]
call fcn.10003e00
jmp 0x100352ef
lea ecx, [ebp - 0x2c]
call fcn.10002bf0
push eax
push 0x10169cd0
push 1
push 0x14d
push 0x10169d10
push 0x10169d90
call fcn.10146290
add esp, 0x18
lea ecx, [ebp - 0x2c]
call fcn.10002bf0
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x74]
call fcn.10003e00
push str.AutoScreenshot_end
push 1
push 0x151
push str..._srcMoniterHelperEventExecuteHandleAutoScreenshotEvent.cpp
push str.CHandleAutoScreenshotEvent::StartScreenshot
call fcn.10145f00
add esp, 0x14
mov byte [ebp - 0x115], 1
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x11]
call fcn.10021d10
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x104]
call fcn.10035400
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x2c]
call fcn.10003e00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5c]
call fcn.10003e00
mov al, byte [ebp - 0x115]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.101506bb
mov esp, ebp
pop ebp
ret