Function at 0x180015b40
Capabilities:
Capture webcam image

Disassembly:
jmp 0x180188700
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x300
lea rdi, [rsp + 0x40]
mov ecx, 0xb0
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x310]
mov rax, qword [0x1805a6200]
xor rax, rsp
mov qword [rsp + 0x2f0], rax
mov rax, qword [rsp + 0x310]
mov eax, dword [rax + 0x18]
mov dword [rsp + 0x2d0], eax
cmp dword [rsp + 0x2d0], 1
je 0x180188766
cmp dword [rsp + 0x2d0], 0x10001
je 0x180188770
jmp 0x180188c43
mov eax, 0x30
jmp 0x180188c45
mov dword [rsp + 0x48], 0x30
mov dword [rsp + 0x4c], 0x2d
lea rax, [rsp + 0x50]
mov rdi, rax
xor eax, eax
mov ecx, 0x28
rep stosb byte [rdi], al
mov edx, 1
mov rax, qword [rsp + 0x310]
mov rcx, qword [rax + 0x20]
call qword [sym.imp.GDI32.dll_SetBkMode]
xor r9d, r9d
mov rax, qword [rsp + 0x310]
mov r8, qword [rax + 0x38]
mov edx, 0x419
mov rax, qword [rsp + 0x310]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [rsp + 0x84], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x447
mov rax, qword [rsp + 0x310]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [rsp + 0x84]
cmp rax, rcx
jne 0x180188809
mov dword [rsp + 0x2d4], 1
jmp 0x180188814
mov dword [rsp + 0x2d4], 0
movzx eax, byte [rsp + 0x2d4]
mov byte [rsp + 0x88], al
xor r9d, r9d
mov rax, qword [rsp + 0x310]
mov r8, qword [rax + 0x38]
mov edx, 0x40b
mov rax, qword [rsp + 0x310]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_SendMessageW]
test rax, rax
jne 0x18018885a
mov dword [rsp + 0x2d8], 1
jmp 0x180188865
mov dword [rsp + 0x2d8], 0
movzx eax, byte [rsp + 0x2d8]
mov byte [rsp + 0x89], al
xor r9d, r9d
mov rax, qword [rsp + 0x310]
mov r8, qword [rax + 0x38]
mov edx, 0x409
mov rax, qword [rsp + 0x310]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_SendMessageW]
test rax, rax
je 0x1801888ab
mov dword [rsp + 0x2dc], 1
jmp 0x1801888b6
mov dword [rsp + 0x2dc], 0
movzx eax, byte [rsp + 0x2dc]
mov byte [rsp + 0x8a], al
mov rax, qword [rsp + 0x310]
mov eax, dword [rax + 0x38]
lea r9, [rsp + 0x48]
mov r8d, eax
mov edx, 0x43f
mov rax, qword [rsp + 0x310]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp rax, 0xffffffffffffffff
jne 0x1801888f9
jmp 0x180188c43
movzx eax, byte [rsp + 0x88]
test eax, eax
je 0x180188965
mov edx, dword [0x18059ff24]
mov rax, qword [rsp + 0x310]
mov rcx, qword [rax + 0x20]
call qword [sym.imp.GDI32.dll_SetTextColor]
mov edx, 0x808080
mov rax, qword [rsp + 0x310]
mov rcx, qword [rax + 0x20]
call qword [sym.imp.GDI32.dll_SetDCBrushColor]
mov ecx, 0x12
call qword [sym.imp.GDI32.dll_GetStockObject]
mov rcx, qword [rsp + 0x310]
add rcx, 0x28
mov r8, rax
mov rdx, rcx
mov rax, qword [rsp + 0x310]
mov rcx, qword [rax + 0x20]
call qword [sym.imp.USER32.dll_FillRect]
jmp 0x1801889c4
mov edx, dword [0x18059ff24]
mov rax, qword [rsp + 0x310]
mov rcx, qword [rax + 0x20]
call qword [sym.imp.GDI32.dll_SetTextColor]
mov edx, dword [0x18059ff20]
mov rax, qword [rsp + 0x310]
mov rcx, qword [rax + 0x20]
call qword [sym.imp.GDI32.dll_SetDCBrushColor]
mov ecx, 0x12
call qword [sym.imp.GDI32.dll_GetStockObject]
mov rcx, qword [rsp + 0x310]
add rcx, 0x28
mov r8, rax
mov rdx, rcx
mov rax, qword [rsp + 0x310]
mov rcx, qword [rax + 0x20]
call qword [sym.imp.USER32.dll_FillRect]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x31
mov rax, qword [rsp + 0x310]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdx, rax
mov rax, qword [rsp + 0x310]
mov rcx, qword [rax + 0x20]
call qword [sym.imp.GDI32.dll_SelectObject]
cmp dword [rsp + 0x54], 0xffffffff
je 0x180188b73
xor r9d, r9d
xor r8d, r8d
mov edx, 0x431
mov rax, qword [rsp + 0x310]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_SendMessageW]
mov qword [rsp + 0x90], rax
cmp qword [rsp + 0x90], 0
je 0x180188b73
movzx eax, byte [rsp + 0x59]
and eax, 0x40
test eax, eax
je 0x180188aa1
mov rax, qword [rsp + 0x310]
mov eax, dword [rax + 0x28]
add eax, 5
mov rcx, qword [rsp + 0x310]
mov dword [rcx + 0x28], eax
mov rax, qword [rsp + 0x310]
mov eax, dword [rax + 0x28]
mov dword [rsp + 0x98], eax
mov rax, qword [rsp + 0x310]
mov rcx, qword [rsp + 0x310]
mov ecx, dword [rcx + 0x2c]
mov eax, dword [rax + 0x34]
sub eax, ecx
sub eax, dword [0x18059fe6c]
cdq
sub eax, edx
sar eax, 1
mov rcx, qword [rsp + 0x310]
add eax, dword [rcx + 0x2c]
mov dword [rsp + 0x9c], eax
jmp 0x180188b0b
mov rax, qword [rsp + 0x310]
mov rcx, qword [rsp + 0x310]
mov ecx, dword [rcx + 0x28]
mov eax, dword [rax + 0x30]
sub eax, ecx
sub eax, dword [0x18059fe68]
cdq
sub eax, edx
sar eax, 1
mov rcx, qword [rsp + 0x310]
add eax, dword [rcx + 0x28]
mov dword [rsp + 0x98], eax
mov rax, qword [rsp + 0x310]
mov rcx, qword [rsp + 0x310]
mov ecx, dword [rcx + 0x2c]
mov eax, dword [rax + 0x34]
sub eax, ecx
sub eax, dword [0x18059fe6c]
cdq
sub eax, edx
sar eax, 1
mov rcx, qword [rsp + 0x310]
add eax, dword [rcx + 0x2c]
mov dword [rsp + 0x9c], eax
movzx eax, byte [rsp + 0x8a]
test eax, eax
jne 0x180188b24
mov dword [rsp + 0x2e0], 1
jmp 0x180188b2f
mov dword [rsp + 0x2e0], 0
movzx eax, byte [rsp + 0x2e0]
mov byte [rsp + 0x30], al
mov dword [rsp + 0x28], 0
mov eax, dword [rsp + 0x9c]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x98]
mov rax, qword [rsp + 0x310]
mov r8, qword [rax + 0x20]
mov edx, dword [rsp + 0x54]
mov rcx, qword [rsp + 0x90]
call sym.ProcessMonitor.dll_PhImageListDrawIcon
movzx eax, byte [rsp + 0x59]
and eax, 0x40
test eax, eax
je 0x180188c3c
movzx eax, word [0x18039c4c4]
mov word [rsp + 0xb0], ax
lea rax, [rsp + 0xb2]
mov rdi, rax
xor eax, eax
mov ecx, 0x206
rep stosb byte [rdi], al
mov rax, qword [rsp + 0x310]
mov eax, dword [rax + 0x38]
lea r9, [rsp + 0xb0]
mov r8d, eax
mov edx, 0x44b
mov rax, qword [rsp + 0x310]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [rsp + 0x310]
mov eax, dword [rax + 0x28]
add eax, 0xa
mov rcx, qword [rsp + 0x310]
mov dword [rcx + 0x28], eax
mov rax, qword [rsp + 0x310]
add rax, 0x28
mov qword [rsp + 0x2e8], rax
lea rcx, [rsp + 0xb0]
call sym.ProcessMonitor.dll_PhCountStringZ
mov dword [rsp + 0x20], 0x100025
mov rcx, qword [rsp + 0x2e8]
mov r9, rcx
mov r8d, eax
lea rdx, [rsp + 0xb0]
mov rax, qword [rsp + 0x310]
mov rcx, qword [rax + 0x20]
call qword [sym.imp.USER32.dll_DrawTextW]
mov eax, 4
jmp 0x180188c45
xor eax, eax
mov rdi, rax
mov rcx, rsp
lea rdx, [0x1804b8040]
call fcn.180014e20
mov rax, rdi
mov rcx, qword [rsp + 0x2f0]
xor rcx, rsp
call fcn.18000ce90
add rsp, 0x300
pop rdi
ret