Function at 0x41fda0
Capabilities:
Capture webcam image
Create process on windows

Disassembly:
sub esp, 0x94
call fcn.00448810
mov eax, dword [0x477390]
test eax, eax
je 0x41fdd5
push 0
call fcn.00447dd0
push 1
mov eax, dword [esp + 0xa0]
push eax
call fcn.00447fe0
xor eax, eax
add esp, 0x94
ret 0xc
push ebx
push ebp
mov ebx, dword [sym.imp.USER32.dll_GetSubMenu]
mov ebp, dword [sym.imp.USER32.dll_GetMenu]
push esi
mov esi, dword [esp + 0xa8]
push edi
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
lea eax, [esi - 0x9c41]
cmp eax, 0xd1
ja case.0x41fe0b.40041
xor ecx, ecx
mov cl, byte [eax + 0x420880]
jmp dword [ecx*4 + 0x4207dc]
mov edx, dword [esp + 0xa8]
push edx
call fcn.00414fa0
jmp case.0x41fe0b.40041
call dword [sym.imp.USER32.dll_GetFocus]
push eax
call fcn.0040af20
jmp case.0x41fe0b.40041
call fcn.00409550
jmp case.0x41fe0b.40041
mov eax, dword [esp + 0xa8]
push eax
call fcn.0041c4f0
jmp case.0x41fe0b.40041
mov ecx, dword [0x477358]
push ecx
call fcn.0040eed0
jmp case.0x41fe0b.40041
call fcn.0041c030
jmp case.0x41fe0b.40041
mov edx, dword [esp + 0xa8]
push 0
push 0
push 0x10
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
jmp case.0x41fe0b.40041
mov eax, dword [0x4773e0]
push 0
push 0
push 0x2b00
push eax
call edi
mov ecx, dword [0x4773e0]
mov al, 0xff
push ecx
mov byte [0x477428], al
mov byte [0x477354], al
call fcn.00433610
mov edx, dword [0x477358]
push 1
push 2
push edx
call dword [sym.imp.USER32.dll_GetMenu]
push eax
call ebx
push eax
call ebx
mov ebp, eax
mov esi, 0x9c54
xor eax, eax
cmp esi, 0x9c54
setne al
dec eax
and eax, 8
push eax
push esi
push ebp
call dword [sym.imp.USER32.dll_CheckMenuItem]
inc esi
cmp esi, 0x9c56
jbe 0x41fecc
mov ecx, dword [0x477358]
push 2
push 2
push ecx
call dword [sym.imp.USER32.dll_GetMenu]
push eax
call ebx
push eax
call ebx
mov ebp, eax
mov esi, 0x9ca4
xor edx, edx
cmp esi, 0x9ca4
setne dl
dec edx
and edx, 8
push edx
push esi
push ebp
call dword [sym.imp.USER32.dll_CheckMenuItem]
inc esi
cmp esi, 0x9caa
jbe 0x41ff0b
jmp case.0x41fe0b.40041
mov eax, dword [0x4773e0]
push 0
push 0
push 0x2b00
push eax
call edi
mov ecx, dword [0x477358]
push 1
push 2
push ecx
call dword [sym.imp.USER32.dll_GetMenu]
push eax
call ebx
push eax
call ebx
mov ebp, eax
mov esi, 0x9c54
mov eax, dword [esp + 0xac]
xor edx, edx
cmp eax, esi
setne dl
dec edx
and edx, 8
push edx
push esi
push ebp
call dword [sym.imp.USER32.dll_CheckMenuItem]
inc esi
cmp esi, 0x9c57
jle 0x41ff60
mov eax, dword [esp + 0xac]
add eax, 0xffff63ac
cmp eax, 3
ja case.default.0x41ff95
jmp dword [eax*4 + 0x420954]
mov ecx, dword [0x4773e0]
mov byte [0x477428], 0xff
push ecx
call fcn.00433610
jmp case.0x41fe0b.40041
mov ecx, dword [0x4773e0]
mov byte [0x477428], 0x20
push ecx
call fcn.00433610
jmp case.0x41fe0b.40041
mov ecx, dword [0x4773e0]
mov byte [0x477428], 0x10
push ecx
call fcn.00433610
jmp case.0x41fe0b.40041
mov byte [0x477428], 0x40
mov ecx, dword [0x4773e0]
push ecx
call fcn.00433610
jmp case.0x41fe0b.40041
mov edx, dword [0x4773e0]
push 0
push 0
push 0x2b00
push edx
call edi
mov eax, dword [0x477358]
push 2
push 2
push eax
call dword [sym.imp.USER32.dll_GetMenu]
push eax
call ebx
push eax
call ebx
mov ebp, eax
mov esi, 0x9ca4
mov eax, dword [esp + 0xac]
xor ecx, ecx
cmp eax, esi
setne cl
dec ecx
and ecx, 8
push ecx
push esi
push ebp
call dword [sym.imp.USER32.dll_CheckMenuItem]
inc esi
cmp esi, 0x9caa
jbe 0x42002b
mov edx, dword [esp + 0xac]
lea eax, [edx - 0x9ca4]
cmp eax, 6
ja case.default.0x420065
jmp dword [eax*4 + 0x420964]
mov eax, dword [0x4773e0]
mov byte [0x477354], 0xff
push eax
call fcn.00433610
jmp case.0x41fe0b.40041
mov eax, dword [0x4773e0]
mov byte [0x477354], 1
push eax
call fcn.00433610
jmp case.0x41fe0b.40041
mov eax, dword [0x4773e0]
mov byte [0x477354], 4
push eax
call fcn.00433610
jmp case.0x41fe0b.40041
mov eax, dword [0x4773e0]
mov byte [0x477354], 0x20
push eax
call fcn.00433610
jmp case.0x41fe0b.40041
mov eax, dword [0x4773e0]
mov byte [0x477354], 0x10
push eax
call fcn.00433610
jmp case.0x41fe0b.40041
mov eax, dword [0x4773e0]
mov byte [0x477354], 8
push eax
call fcn.00433610
jmp case.0x41fe0b.40041
mov byte [0x477354], 0x40
mov eax, dword [0x4773e0]
push eax
call fcn.00433610
jmp case.0x41fe0b.40041
mov ecx, dword [esp + 0xa8]
push ecx
call fcn.0040e350
jmp case.0x41fe0b.40041
mov edx, dword [0x477450]
push 0
push 0
push 0x184
push edx
call edi
jmp case.0x41fe0b.40041
push esi
push 0x45a7f4
push 0x1069
call fcn.004409f0
lea eax, [esi - 0x9c6f]
cmp eax, 6
ja case.default.0x420151
jmp dword [eax*4 + 0x420980]
mov eax, 0xffff
jmp 0x42018d
mov eax, 0xc
jmp 0x42018d
mov eax, 0x12
jmp 0x42018d
mov eax, 0x18
jmp 0x42018d
mov eax, 0x24
jmp 0x42018d
mov eax, 0x30
jmp 0x42018d
mov eax, 0x3c
jmp 0x42018d
mov eax, dword [esp + 0x20]
push 0
push eax
mov eax, dword [0x477450]
push 0x2d55
push eax
call edi
jmp case.0x41fe0b.40041
mov ecx, dword [0x477450]
push 0
push 0
push 0x2d57
push ecx
call edi
jmp case.0x41fe0b.40041
mov eax, dword [0x4773fc]
lea edx, [esp + 0x24]
push 0x80
push edx
push 0x1f7
push eax
call dword [sym.imp.USER32.dll_LoadStringA]
mov edx, dword [0x477450]
lea ecx, [esp + 0x24]
push ecx
push 0
push 0x2d53
push edx
call edi
jmp case.0x41fe0b.40041
call fcn.0040cb20
jmp case.0x41fe0b.40041
call fcn.0041a4a0
jmp case.0x41fe0b.40041
call fcn.0041a6c0
jmp case.0x41fe0b.40041
call dword [sym.imp.USER32.dll_GetFocus]
cmp eax, dword [0x477450]
je case.0x41fe0b.40041
push 0xffffffffffffffff
push 1
push 0x185
push eax
call edi
jmp case.0x41fe0b.40041
mov eax, dword [0x477450]
push 0
push 0
push 0x184
push eax
call edi
call fcn.00447a50
test eax, eax
je 0x420253
call fcn.00435970
jmp case.0x41fe0b.40041
mov ecx, dword [0x4773cc]
push 0
push 0
push 0x190
push ecx
call edi
test eax, eax
je 0x420273
call fcn.00408b50
jmp case.0x41fe0b.40041
mov edx, dword [0x4773dc]
push 0
push 0
push 0x190
push edx
call edi
test eax, eax
je case.0x41fe0b.40041
call fcn.0040b410
jmp case.0x41fe0b.40041
call fcn.00435540
jmp case.0x41fe0b.40041
mov eax, dword [0x477418]
test eax, eax
je 0x4202b9
push 0x45a8b8
call fcn.0042ae80
jmp case.0x41fe0b.40041
mov eax, dword [0x45a898]
test eax, eax
je 0x4206f6
jmp 0x4206e3
mov eax, dword [0x477418]
test eax, eax
je 0x4202e3
push 0x45a8b8
call fcn.0042ae80
jmp case.0x41fe0b.40041
mov eax, dword [0x45a898]
test eax, eax
je 0x420303
call fcn.0042aec0
test eax, eax
mov dword [0x45a898], 0
je case.0x41fe0b.40041
mov ecx, dword [esp + 0xa8]
push 0
push ecx
call fcn.004233c0
jmp case.0x41fe0b.40041
mov eax, dword [0x477418]
test eax, eax
je 0x42032f
push 0x45a8b8
call fcn.0042ae80
jmp case.0x41fe0b.40041
mov eax, dword [0x45a898]
test eax, eax
je 0x42034f
call fcn.0042aec0
test eax, eax
mov dword [0x45a898], 0
je case.0x41fe0b.40041
push 8
call fcn.0044c0d4
mov ecx, dword [esp + 0xac]
xor edx, edx
add esp, 4
mov esi, eax
mov dword [eax], edx
push edx
push esi
mov dword [eax + 4], edx
push ecx
mov dword [esi], edx
call fcn.0042d460
push esi
call fcn.004299f0
jmp case.0x41fe0b.40041
push 0
push 0
call fcn.00447fe0
jmp case.0x41fe0b.40041
call dword [sym.imp.USER32.dll_GetFocus]
mov edx, dword [0x4773cc]
mov ebp, dword [sym.imp.USER32.dll_GetWindowLongA]
push 0xffffffffffffffeb
push edx
mov esi, eax
call ebp
test eax, eax
je 0x4203c2
cmp eax, esi
jne 0x4203c2
push 0
push 0xd
push 0x102
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
jmp case.0x41fe0b.40041
test esi, esi
je case.0x41fe0b.40041
push 0xfffffffffffffff4
push esi
call ebp
sub eax, 0x69
je 0x4203f5
sub eax, 2
je 0x4203ec
dec eax
je 0x4203e3
mov eax, dword [0x4773e0]
jmp 0x4203fa
mov ecx, dword [0x4773f4]
push ecx
jmp 0x4203fb
mov edx, dword [0x4773dc]
push edx
jmp 0x4203fb
mov eax, dword [0x4773cc]
push eax
call dword [sym.imp.USER32.dll_SetFocus]
mov ecx, dword [0x4773e0]
push 0xffffffffffffffff
push 0
push 0x185
push ecx
call edi
mov edx, dword [0x4773cc]
push 0xffffffffffffffff
push 0
push 0x185
push edx
call edi
mov eax, dword [0x4773dc]
push 0xffffffffffffffff
push 0
push 0x185
push eax
call edi
mov ecx, dword [0x477370]
push 0
push 0x9d0e
push 0x401
push ecx
call edi
mov edx, dword [0x477370]
push 0
push 0x9d10
push 0x401
push edx
call edi
mov eax, dword [0x477370]
push 0
push 0x9d0d
push 0x401
push eax
call edi
mov ecx, dword [0x477450]
push 0
push 0
push 0x184
push ecx
call edi
jmp case.0x41fe0b.40041
call fcn.00437a00
jmp case.0x41fe0b.40041
mov edx, dword [esp + 0xa8]
push 5
push 0x464964
push 0
push 0x45a89c
push 0
push edx
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
cmp eax, 0x21
jae case.0x41fe0b.40041
push 0x30
push 0x87
push 0
call fcn.00448b60
jmp case.0x41fe0b.40041
mov eax, dword [esp + 0xa8]
push eax
call fcn.0040dc90
jmp case.0x41fe0b.40041
call fcn.00406180
jmp case.0x41fe0b.40041
mov ecx, dword [0x4773e0]
push 0
push 0
push 0x2b00
push ecx
call edi
mov edx, dword [0x4773e0]
mov al, 0xff
push edx
mov byte [0x477428], al
mov byte [0x477354], al
call fcn.00433610
mov eax, dword [0x477358]
push 1
push 2
push eax
call dword [sym.imp.USER32.dll_GetMenu]
push eax
call ebx
push eax
call ebx
mov ebp, eax
mov esi, 0x9c54
xor ecx, ecx
cmp esi, 0x9c54
setne cl
dec ecx
and ecx, 8
push ecx
push esi
push ebp
call dword [sym.imp.USER32.dll_CheckMenuItem]
inc esi
cmp esi, 0x9c56
jbe 0x420532
mov edx, dword [0x477358]
push 2
push 2
push edx
call dword [sym.imp.USER32.dll_GetMenu]
push eax
call ebx
push eax
call ebx
mov ebp, eax
mov esi, 0x9ca4
xor eax, eax
cmp esi, 0x9ca4
setne al
dec eax
and eax, 8
push eax
push esi
push ebp
call dword [sym.imp.USER32.dll_CheckMenuItem]
inc esi
cmp esi, 0x9caa
jbe 0x420571
jmp case.0x41fe0b.40041
mov ecx, dword [0x4773e0]
push 0
push 0
push 0x2b00
push ecx
call edi
mov edx, dword [0x477370]
push 0
push 0x9d0b
push 0x419
push edx
call edi
mov edx, dword [0x477370]
lea ecx, [esp + 0x10]
push ecx
push eax
push 0x41d
push edx
call edi
mov ecx, dword [0x477370]
lea eax, [esp + 0x10]
push 2
push eax
push 0
push ecx
call dword [sym.imp.USER32.dll_MapWindowPoints]
mov edx, dword [0x477358]
push 1
push 2
push edx
call ebp
push eax
call ebx
push eax
call ebx
mov ecx, dword [0x477358]
push 0
mov edx, dword [esp + 0x20]
push ecx
mov ecx, dword [esp + 0x18]
push 0
push edx
push ecx
push 2
push eax
call dword [sym.imp.USER32.dll_TrackPopupMenu]
jmp case.0x41fe0b.40041
mov edx, dword [0x4773e0]
push 0
push 0
push 0x2b00
push edx
call edi
mov eax, dword [0x477370]
push 0
push 0x9d0c
push 0x419
push eax
call edi
mov edx, dword [0x477370]
lea ecx, [esp + 0x10]
push ecx
push eax
push 0x41d
push edx
call edi
mov ecx, dword [0x477370]
lea eax, [esp + 0x10]
push 2
push eax
push 0
push ecx
call dword [sym.imp.USER32.dll_MapWindowPoints]
mov edx, dword [0x477358]
push 2
push 2
push edx
call ebp
push eax
call ebx
push eax
call ebx
mov ecx, dword [0x477358]
push 0
mov edx, dword [esp + 0x20]
push ecx
mov ecx, dword [esp + 0x18]
push 0
push edx
push ecx
push 2
push eax
call dword [sym.imp.USER32.dll_TrackPopupMenu]
jmp case.0x41fe0b.40041
call fcn.004072a0
jmp case.0x41fe0b.40041
call fcn.004209a0
jmp case.0x41fe0b.40041
call fcn.00421060
jmp case.0x41fe0b.40041
mov edx, dword [esp + 0xa8]
push edx
call fcn.0041c4f0
jmp case.0x41fe0b.40041
mov eax, dword [0x477418]
test eax, eax
je 0x4206da
push 0x45a8b8
call fcn.0042ae80
jmp case.0x41fe0b.40041
mov eax, dword [0x45a898]
test eax, eax
je 0x4206f6
call fcn.0042aec0
test eax, eax
mov dword [0x45a898], 0
je case.0x41fe0b.40041
mov eax, dword [esp + 0xa8]
push 1
push eax
call fcn.004233c0
jmp case.0x41fe0b.40041
call fcn.00447c90
mov eax, dword [esp + 0xac]
cmp eax, 0x9c6f
jl 0x4207ca
cmp eax, 0x9c75
jg 0x4207ca
mov ecx, dword [0x477358]
push 7
push 2
push ecx
call dword [sym.imp.USER32.dll_GetMenu]
push eax
call ebx
push eax
call ebx
mov ebp, dword [sym.imp.USER32.dll_CheckMenuItem]
mov ebx, eax
mov esi, 0x9c6f
push 0
push esi
push ebx
call ebp
inc esi
cmp esi, 0x9c75
jbe 0x42074d
mov edx, dword [0x477450]
push 0
push 0
push 0x2d56
push edx
call edi
cmp eax, 0x24
jg 0x4207a0
je 0x420799
cmp eax, 0xc
je 0x420792
cmp eax, 0x12
je 0x42078b
cmp eax, 0x18
jne 0x4207c4
mov esi, 0x9c72
jmp 0x4207c4
mov esi, 0x9c71
jmp 0x4207c4
mov esi, 0x9c70
jmp 0x4207c4
mov esi, 0x9c73
jmp 0x4207c4
cmp eax, 0x30
je 0x4207bf
cmp eax, 0x3c
je 0x4207b8
cmp eax, 0xffff
jne 0x4207c4
mov esi, 0x9c6f
jmp 0x4207c4
mov esi, 0x9c75
jmp 0x4207c4
mov esi, 0x9c74
push 8
push esi
push ebx
call ebp
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x94
ret 0xc