Function at 0x416210
Capabilities:
Capture webcam image
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xac
push ebx
push esi
mov esi, ecx
push edi
mov ebx, 0x208
xor edi, edi
push ebx
lea eax, [esi + 0x38]
push edi
push eax
mov dword [esi + 0x6c4], edi
mov dword [esi + 0x34], edi
call sub.MSVCRT.dll_memset
push ebx
lea eax, [esi + 0x240]
push edi
push eax
call sub.MSVCRT.dll_memset
add esp, 0x18
mov dword [esi + 0x6c0], edi
mov dword [esi + 0xdfc], edi
mov dword [esi + 0x464], edi
push 0xfffffffffffffff0
mov dword [esi + 0xe0c], edi
push dword [esi + 4]
mov dword [esi + 0x460], edi
call dword [sym.imp.USER32.dll_GetWindowLongW]
or eax, 0x20000
push eax
push 0xfffffffffffffff0
push dword [esi + 4]
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov ebx, dword [sym.imp.USER32.dll_GetDlgItem]
push 0x3e8
push dword [esi + 4]
call ebx
lea ecx, [esi + 0x8d8]
push eax
call fcn.00417bf0
test eax, eax
je 0x4162af
lea ecx, [esi + 0x8d8]
call fcn.00417a3b
push 0x3e9
push dword [esi + 4]
call ebx
lea ecx, [esi + 0x944]
push eax
call fcn.00417bf0
test eax, eax
je 0x4162d4
lea ecx, [esi + 0x944]
call fcn.00417a3b
push 0x414
push dword [esi + 4]
call ebx
lea ecx, [esi + 0x9b0]
push eax
call fcn.00417bf0
test eax, eax
je 0x4162f9
lea ecx, [esi + 0x9b0]
call fcn.00417a3b
push 0x407
push dword [esi + 4]
call ebx
push eax
lea ecx, [esi + 0xa20]
call fcn.00417c25
mov dword [esi + 0xa40], 0x51a851
call fcn.0041a1dd
mov eax, dword [eax + 0xc]
push 0x3fe
mov dword [esi + 0xa44], eax
push dword [esi + 4]
call ebx
push eax
lea ecx, [esi + 0xa48]
call fcn.00417c25
mov dword [esi + 0xa68], edi
call fcn.0041a1dd
mov eax, dword [eax]
mov dword [esi + 0xa6c], eax
push dword [0x44226c]
push dword [esi + 0xa4c]
call dword [sym.imp.USER32.dll_SetWindowTextW]
push 0x409
push dword [esi + 4]
call ebx
lea ecx, [esi + 0xd40]
push eax
call fcn.00417c25
push 4
mov ebx, dword [sym.imp.USER32.dll_SetWindowPos]
push 0xe
push 0x12c
push 8
push 0xd0
push edi
mov dword [esi + 0x93c], 5
push dword [esi + 0xa4c]
call ebx
push 4
push 0x37
push 0x8c
push 0x109
push 0xfa
push edi
push dword [esi + 0x8dc]
call ebx
push 4
push 0xf
push 0x5c
push 0x15e
push 0x1e
push edi
push dword [esi + 0x948]
call ebx
push 4
push 0xf
push 0x5c
push 0x122
push 0x18b
push edi
push dword [esi + 0xd44]
call ebx
push 4
mov eax, 0x15e
push 0x16
push eax
push eax
push 0x8c
push edi
push dword [esi + 0xa24]
call ebx
push 4
push 0x1b
push 0x2a
push 1
push 0x23c
push edi
push dword [esi + 0x9b4]
call ebx
call fcn.0041a1dd
mov eax, dword [eax]
lea ecx, [esi + 0xd64]
push ecx
push 0x5c
push eax
call dword [sym.imp.GDI32.dll_GetObjectW]
lea ecx, [esi + 0xd40]
call fcn.00417930
lea eax, [esi + 0xdc0]
mov ecx, 0x7f7f7f
cmp dword [eax], ecx
je 0x416461
push 0x105
push edi
push edi
mov dword [eax], ecx
push dword [esi + 0xd44]
call dword [sym.imp.USER32.dll_RedrawWindow]
push 1
push 1
lea ecx, [esi + 0xd40]
call fcn.004177d6
mov ecx, eax
call fcn.00417824
call fcn.0041a1dd
mov eax, dword [eax + 8]
push 1
push eax
push 0x30
push dword [esi + 0x8dc]
call dword [sym.imp.USER32.dll_SendMessageW]
call fcn.0041a1dd
mov eax, dword [eax + 0xc]
push 1
push eax
push 0x30
push dword [esi + 0x948]
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [esi + 0x9d0], 1
call fcn.0041a1dd
mov ecx, eax
call fcn.0041ab43
push dword [eax]
lea ecx, [esi + 0x9b0]
call fcn.00417855
push 1
lea eax, [esi + 0x9b0]
pop ecx
mov dword [eax + 0x28], edi
mov dword [eax + 0x2c], 2
mov dword [eax + 0x30], ecx
mov dword [eax + 0x34], edi
mov dword [esi + 0x8f8], ecx
call fcn.0041a1dd
mov ecx, eax
call fcn.0041aac6
push dword [eax]
lea ecx, [esi + 0x8d8]
call fcn.00417855
push 1
lea eax, [esi + 0x8d8]
pop ecx
mov dword [eax + 0x28], edi
mov dword [eax + 0x2c], 2
mov dword [eax + 0x30], ecx
mov dword [eax + 0x34], edi
mov dword [esi + 0x940], ecx
mov dword [esi + 0x964], ecx
call fcn.0041a1dd
mov ecx, eax
call fcn.0041ac37
push dword [eax]
lea ecx, [esi + 0x944]
call fcn.00417855
push 1
lea eax, [esi + 0x944]
pop ecx
mov dword [ebp - 0x4c], edi
push 0x20
mov dword [eax + 0x28], edi
mov dword [eax + 0x2c], 2
mov dword [eax + 0x30], ecx
mov dword [eax + 0x34], edi
pop eax
mov dword [esi + 0x9ac], ecx
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], eax
mov eax, dword [esi + 4]
mov dword [esi + 0x450], 0x18b
mov dword [esi + 0x454], 0x11e
mov dword [esi + 0x458], 0x1ab
mov dword [esi + 0x45c], 0x13e
cmp dword [str.STATIC], edi
mov dword [ebp - 0x48], edi
mov dword [ebp - 8], eax
jne 0x4165ac
mov dword [str.STATIC], edi
lea eax, [esi + 0x640]
push eax
push 0x43c6c0
push 0x4421d8
call fcn.0040fb01
push edi
push eax
push edi
push edi
push 0x56000000
lea eax, [ebp - 0x4c]
push edi
push eax
push dword [ebp - 8]
lea ecx, [esi + 0x624]
call fcn.0040fdd7
push 0x43c6b8
push 0xeb
lea ecx, [esi + 0x624]
call fcn.0041b420
push edi
push dword [esi + 0x628]
call dword [sym.imp.USER32.dll_ShowWindow]
push 0x3fc
push dword [esi + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
lea ecx, [esi + 0x50c]
push eax
call fcn.00417c25
call fcn.0041a1dd
mov eax, dword [eax]
lea ecx, [esi + 0x530]
push ecx
push 0x5c
push eax
call dword [sym.imp.GDI32.dll_GetObjectW]
lea ecx, [esi + 0x50c]
call fcn.00417930
lea eax, [esi + 0x58c]
mov ecx, 0xe6a251
cmp dword [eax], ecx
je 0x41665f
push 0x105
mov dword [eax], ecx
push edi
push edi
lea ecx, [esi + 0x510]
call fcn.004177bf
push 1
push 1
lea ecx, [esi + 0x50c]
call fcn.004177d6
mov ecx, eax
call fcn.00417824
push 4
push 0x23
push 0x32
push 0x14c
push 0x159
push edi
push dword [esi + 0x510]
call ebx
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x3c], edi
push eax
mov dword [ebp - 0x38], edi
push dword [esi + 4]
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x30], edi
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x1c], edi
push eax
mov dword [ebp - 0x18], edi
push dword [esi + 4]
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], edi
call dword [sym.imp.USER32.dll_GetClientRect]
push 0x3ef
push dword [esi + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [esi + 0xd30], eax
call fcn.0041a1dd
mov eax, dword [eax]
push 1
push eax
push 0x30
push dword [esi + 0xd30]
call dword [sym.imp.USER32.dll_SendMessageW]
push 4
push 0x14
push 0xf
push 0x14b
push 0xf9
push edi
push dword [esi + 0xd30]
call ebx
lea eax, [ebp - 0x1c]
push eax
push dword [esi + 0xd30]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x1c]
push 2
push eax
push dword [esi + 4]
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MapWindowPoints]
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.0041a1dd
mov ecx, eax
call fcn.0041a972
push edi
push 1
push 0xf1
mov dword [esi + 0xd34], eax
push dword [esi + 0xd30]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x419
push dword [esi + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [esi + 0xd38], eax
push 4
push 0x14
push 0x4c
push 0x14d
push 0x10b
push edi
push eax
call ebx
call fcn.004238fe
xor ecx, ecx
push 0xd
cmp eax, 7
pop eax
push 0x21
mov dword [ebp - 0xac], eax
pop edx
mov dword [ebp - 0xa0], eax
push 0x11
mov dword [ebp - 0xc], str.Tahoma
setge cl
pop eax
mov dword [ebp - 8], 0x43c69c
push dword [ebp + ecx*4 - 0xc]
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x88], eax
mov eax, 0x2bc
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x6c], eax
push edi
mov eax, 0x384
push edi
push edi
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x50], eax
push edi
lea eax, [ecx + ecx*2]
push edi
push edi
push edi
shl eax, 3
push edi
mov dword [ebp - 0x7c], edi
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x64], edi
mov dword [ebp - 0x60], edi
mov dword [ebp - 0x5c], edi
mov dword [ebp - 0x58], edi
mov dword [ebp - 0x54], edi
push dword [ebp + eax - 0x7c]
mov dword [ebp - 0xa8], 0x10
mov dword [ebp - 0xa4], 0x15
mov dword [ebp - 0x9c], edx
push edi
push edi
push edi
mov dword [ebp - 0x98], 0xf
mov dword [ebp - 0x90], 0x14
mov dword [ebp - 0x8c], 0x18
mov dword [ebp - 0x84], edx
mov dword [ebp - 0x80], 0x13
push dword [ebp + eax - 0xac]
call dword [sym.imp.GDI32.dll_CreateFontW]
push 1
push eax
push 0x30
push dword [esi + 0xd38]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x418
push dword [esi + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
push 4
push 0x13d
push 0x218
push 0x28
push 0x28
push edi
push eax
mov dword [esi + 0x5b4], eax
call ebx
call fcn.0041a1dd
mov eax, dword [eax]
push 1
push eax
push 0x30
push dword [esi + 0x5b4]
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x418
push dword [esi + 4]
call dword [sym.imp.USER32.dll_GetDlgItem]
push edi
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 0x43fcc4
lea ecx, [ebp - 4]
call fcn.0040470e
mov ebx, 0x43c604
mov eax, ebx
test eax, eax
je 0x4168e8
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push ebx
push eax
lea ecx, [ebp - 4]
call fcn.00404d0d
mov ecx, 0x43c508
mov eax, ecx
test eax, eax
jne 0x416905
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenW]
jmp 0x416913
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenW]
push ecx
call ebx
mov ecx, 0x43c508
push ecx
push eax
lea ecx, [ebp - 4]
call fcn.00404d0d
mov ecx, 0x43c38c
mov eax, ecx
test eax, eax
je 0x416930
push ecx
call ebx
mov ecx, 0x43c38c
push ecx
push eax
lea ecx, [ebp - 4]
call fcn.00404d0d
mov ecx, 0x43c2d8
mov eax, ecx
test eax, eax
je 0x41694d
push ecx
call ebx
mov ecx, 0x43c2d8
push ecx
push eax
lea ecx, [ebp - 4]
call fcn.00404d0d
mov ecx, 0x43c210
mov eax, ecx
test eax, eax
je 0x41696a
push ecx
call ebx
mov ecx, 0x43c210
push ecx
push eax
lea ecx, [ebp - 4]
call fcn.00404d0d
mov ecx, 0x43c0cc
mov eax, ecx
test eax, eax
je 0x416987
push ecx
call ebx
mov ecx, 0x43c0cc
push ecx
push eax
lea ecx, [ebp - 4]
call fcn.00404d0d
mov ecx, 0x43bed0
mov eax, ecx
test eax, eax
je 0x4169a4
push ecx
call ebx
mov ecx, 0x43bed0
push ecx
push eax
lea ecx, [ebp - 4]
call fcn.00404d0d
mov ecx, 0x43bdb4
mov eax, ecx
test eax, eax
je 0x4169c1
push ecx
call ebx
mov ecx, 0x43bdb4
push ecx
push eax
lea ecx, [ebp - 4]
call fcn.00404d0d
mov ecx, 0x43bd44
mov eax, ecx
test eax, eax
je 0x4169de
push ecx
call ebx
mov ecx, 0x43bd44
push ecx
push eax
lea ecx, [ebp - 4]
call fcn.00404d0d
push dword [ebp - 4]
push dword [esi + 0x5b4]
call dword [sym.imp.USER32.dll_SetWindowTextW]
mov ecx, esi
call fcn.00416ba8
mov ecx, esi
call fcn.004155b4
lea ecx, [ebp - 4]
call fcn.00404bf2
pop edi
pop esi
pop ebx
leave
ret