Function at 0x140007700
Capabilities:
Capture webcam image
Query environment variable
Set environment variable

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
mov eax, 0x10450
call fcn.140023f70
sub rsp, rax
mov rax, qword [0x14002dda0]
xor rax, rsp
mov qword [rsp + 0x10440], rax
movsxd rdi, ecx
mov rcx, qword [0x14002ee70]
movsxd rbp, edx
mov edx, 0x418
movzx r12d, r8b
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
mov r8, rdi
mov rcx, rax
mov edx, 0x14e
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [0x14002ee70]
mov edx, 0x419
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
mov edx, 0x14b
mov rsi, rax
call qword [sym.imp.USER32.dll_SendMessageW]
lea r13, section..data
mov r13, qword [r13 + rdi*8]
add edi, 0x40000264
sub edi, 0x40000264
je 0x1400078e8
sub edi, 1
je 0x1400078b6
sub edi, 1
je 0x140007888
sub edi, 1
je 0x140007825
cmp edi, 1
jne 0x1400078e1
mov ecx, 0x4000026f
call fcn.1400070d0
xor r8d, r8d
mov edx, 0x14a
mov r9, rax
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rdi, [0x140025af0]
test ebp, ebp
cmovne rdi, qword [rsp + 0x30]
mov ecx, 0x40000270
call fcn.1400070d0
mov edx, 0x14a
mov r8d, 1
mov r9, rax
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
cmp ebp, 1
jne 0x140007944
lea rdi, str.Post
jmp 0x140007944
mov ecx, 0x4000026d
call fcn.1400070d0
xor r8d, r8d
mov edx, 0x14a
mov r9, rax
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rdi, str.Change
test ebp, ebp
cmovne rdi, qword [rsp + 0x30]
mov ecx, 0x4000026e
call fcn.1400070d0
mov edx, 0x14a
mov r8d, 1
mov r9, rax
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
cmp ebp, 1
jne 0x140007944
lea rdi, str.Resume
jmp 0x140007944
mov ecx, 0x4000026c
call fcn.1400070d0
xor r8d, r8d
mov edx, 0x14a
mov r9, rax
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
test ebp, ebp
jne 0x1400078e1
lea rdi, str.Post
jmp 0x140007944
mov ecx, 0x4000026b
call fcn.1400070d0
xor r8d, r8d
mov edx, 0x14a
mov r9, rax
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
test ebp, ebp
jne 0x1400078e1
lea rdi, [0x140025af0]
jmp 0x140007944
mov rdi, qword [rsp + 0x30]
jmp 0x140007944
mov ecx, 0x40000269
call fcn.1400070d0
xor r8d, r8d
mov edx, 0x14a
mov r9, rax
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rbx, [0x140025af0]
test ebp, ebp
cmovne rbx, qword [rsp + 0x30]
mov ecx, 0x4000026a
call fcn.1400070d0
mov edx, 0x14a
mov r8d, 1
mov r9, rax
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rdi, str.Post
cmp ebp, 1
cmovne rdi, rbx
mov r8, rbp
xor r9d, r9d
mov edx, 0x14e
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea r9, str.NSSM_HOOK__s__s
lea rcx, [rsp + 0x40]
or r8, 0xffffffffffffffff
mov edx, 0x200
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r13
call fcn.140019e88
cmp word [rsp + 0x40], 0
je 0x1400079f1
test r12b, r12b
je 0x1400079be
mov rcx, qword [0x14002ee70]
lea r8, [rsp + 0x440]
mov r9d, 0x8000
mov edx, 0x41a
call qword [sym.imp.USER32.dll_GetDlgItemTextW]
lea rdx, [rsp + 0x440]
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.DLL_SetEnvironmentVariableW]
jmp 0x1400079f1
lea rdx, [rsp + 0x440]
lea rcx, [rsp + 0x40]
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.DLL_GetEnvironmentVariableW]
mov rcx, qword [0x14002ee70]
lea r8, [rsp + 0x440]
mov edx, 0x41a
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [rsp + 0x10440]
xor rcx, rsp
call fcn.14001a490
mov rbx, qword [rsp + 0x10490]
add rsp, 0x10450
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret