Function at 0x140016520
Capabilities:
Capture webcam image

Disassembly:
jmp 0x140198900
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x300
lea rdi, [rsp + 0x40]
mov ecx, 0xb0
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x310]
mov rax, qword [0x1405dc580]
xor rax, rsp
mov qword [rsp + 0x2f0], rax
mov rax, qword [rsp + 0x310]
mov eax, dword [rax + 0x18]
mov dword [rsp + 0x2d0], eax
cmp dword [rsp + 0x2d0], 1
je 0x140198966
cmp dword [rsp + 0x2d0], 0x10001
je 0x140198970
jmp 0x140198e43
mov eax, 0x30
jmp 0x140198e45
mov dword [rsp + 0x48], 0x30
mov dword [rsp + 0x4c], 0x2d
lea rax, [rsp + 0x50]
mov rdi, rax
xor eax, eax
mov ecx, 0x28
rep stosb byte [rdi], al
mov edx, 1
mov rax, qword [rsp + 0x310]
mov rcx, qword [rax + 0x20]
call qword [sym.imp.GDI32.dll_SetBkMode]
xor r9d, r9d
mov rax, qword [rsp + 0x310]
mov r8, qword [rax + 0x38]
mov edx, 0x419
mov rax, qword [rsp + 0x310]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [rsp + 0x84], eax
xor r9d, r9d
xor r8d, r8d
mov edx, 0x447
mov rax, qword [rsp + 0x310]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_SendMessageW]
mov ecx, dword [rsp + 0x84]
cmp rax, rcx
jne 0x140198a09
mov dword [rsp + 0x2d4], 1
jmp 0x140198a14
mov dword [rsp + 0x2d4], 0
movzx eax, byte [rsp + 0x2d4]
mov byte [rsp + 0x88], al
xor r9d, r9d
mov rax, qword [rsp + 0x310]
mov r8, qword [rax + 0x38]
mov edx, 0x40b
mov rax, qword [rsp + 0x310]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_SendMessageW]
test rax, rax
jne 0x140198a5a
mov dword [rsp + 0x2d8], 1
jmp 0x140198a65
mov dword [rsp + 0x2d8], 0
movzx eax, byte [rsp + 0x2d8]
mov byte [rsp + 0x89], al
xor r9d, r9d
mov rax, qword [rsp + 0x310]
mov r8, qword [rax + 0x38]
mov edx, 0x409
mov rax, qword [rsp + 0x310]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_SendMessageW]
test rax, rax
je 0x140198aab
mov dword [rsp + 0x2dc], 1
jmp 0x140198ab6
mov dword [rsp + 0x2dc], 0
movzx eax, byte [rsp + 0x2dc]
mov byte [rsp + 0x8a], al
mov rax, qword [rsp + 0x310]
mov eax, dword [rax + 0x38]
lea r9, [rsp + 0x48]
mov r8d, eax
mov edx, 0x43f
mov rax, qword [rsp + 0x310]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp rax, 0xffffffffffffffff
jne 0x140198af9
jmp 0x140198e43
movzx eax, byte [rsp + 0x88]
test eax, eax
je 0x140198b65
mov edx, dword [0x1405d627c]
mov rax, qword [rsp + 0x310]
mov rcx, qword [rax + 0x20]
call qword [sym.imp.GDI32.dll_SetTextColor]
mov edx, 0x808080
mov rax, qword [rsp + 0x310]
mov rcx, qword [rax + 0x20]
call qword [sym.imp.GDI32.dll_SetDCBrushColor]
mov ecx, 0x12
call qword [sym.imp.GDI32.dll_GetStockObject]
mov rcx, qword [rsp + 0x310]
add rcx, 0x28
mov r8, rax
mov rdx, rcx
mov rax, qword [rsp + 0x310]
mov rcx, qword [rax + 0x20]
call qword [sym.imp.USER32.dll_FillRect]
jmp 0x140198bc4
mov edx, dword [0x1405d627c]
mov rax, qword [rsp + 0x310]
mov rcx, qword [rax + 0x20]
call qword [sym.imp.GDI32.dll_SetTextColor]
mov edx, dword [0x1405d6278]
mov rax, qword [rsp + 0x310]
mov rcx, qword [rax + 0x20]
call qword [sym.imp.GDI32.dll_SetDCBrushColor]
mov ecx, 0x12
call qword [sym.imp.GDI32.dll_GetStockObject]
mov rcx, qword [rsp + 0x310]
add rcx, 0x28
mov r8, rax
mov rdx, rcx
mov rax, qword [rsp + 0x310]
mov rcx, qword [rax + 0x20]
call qword [sym.imp.USER32.dll_FillRect]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x31
mov rax, qword [rsp + 0x310]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdx, rax
mov rax, qword [rsp + 0x310]
mov rcx, qword [rax + 0x20]
call qword [sym.imp.GDI32.dll_SelectObject]
cmp dword [rsp + 0x54], 0xffffffff
je 0x140198d73
xor r9d, r9d
xor r8d, r8d
mov edx, 0x431
mov rax, qword [rsp + 0x310]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_SendMessageW]
mov qword [rsp + 0x90], rax
cmp qword [rsp + 0x90], 0
je 0x140198d73
movzx eax, byte [rsp + 0x59]
and eax, 0x40
test eax, eax
je 0x140198ca1
mov rax, qword [rsp + 0x310]
mov eax, dword [rax + 0x28]
add eax, 5
mov rcx, qword [rsp + 0x310]
mov dword [rcx + 0x28], eax
mov rax, qword [rsp + 0x310]
mov eax, dword [rax + 0x28]
mov dword [rsp + 0x98], eax
mov rax, qword [rsp + 0x310]
mov rcx, qword [rsp + 0x310]
mov ecx, dword [rcx + 0x2c]
mov eax, dword [rax + 0x34]
sub eax, ecx
sub eax, dword [0x1405d619c]
cdq
sub eax, edx
sar eax, 1
mov rcx, qword [rsp + 0x310]
add eax, dword [rcx + 0x2c]
mov dword [rsp + 0x9c], eax
jmp 0x140198d0b
mov rax, qword [rsp + 0x310]
mov rcx, qword [rsp + 0x310]
mov ecx, dword [rcx + 0x28]
mov eax, dword [rax + 0x30]
sub eax, ecx
sub eax, dword [0x1405d6198]
cdq
sub eax, edx
sar eax, 1
mov rcx, qword [rsp + 0x310]
add eax, dword [rcx + 0x28]
mov dword [rsp + 0x98], eax
mov rax, qword [rsp + 0x310]
mov rcx, qword [rsp + 0x310]
mov ecx, dword [rcx + 0x2c]
mov eax, dword [rax + 0x34]
sub eax, ecx
sub eax, dword [0x1405d619c]
cdq
sub eax, edx
sar eax, 1
mov rcx, qword [rsp + 0x310]
add eax, dword [rcx + 0x2c]
mov dword [rsp + 0x9c], eax
movzx eax, byte [rsp + 0x8a]
test eax, eax
jne 0x140198d24
mov dword [rsp + 0x2e0], 1
jmp 0x140198d2f
mov dword [rsp + 0x2e0], 0
movzx eax, byte [rsp + 0x2e0]
mov byte [rsp + 0x30], al
mov dword [rsp + 0x28], 0
mov eax, dword [rsp + 0x9c]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x98]
mov rax, qword [rsp + 0x310]
mov r8, qword [rax + 0x20]
mov edx, dword [rsp + 0x54]
mov rcx, qword [rsp + 0x90]
call sym.ProcessHacker.exe_PhImageListDrawIcon
movzx eax, byte [rsp + 0x59]
and eax, 0x40
test eax, eax
je 0x140198e3c
movzx eax, word [0x1403c77e4]
mov word [rsp + 0xb0], ax
lea rax, [rsp + 0xb2]
mov rdi, rax
xor eax, eax
mov ecx, 0x206
rep stosb byte [rdi], al
mov rax, qword [rsp + 0x310]
mov eax, dword [rax + 0x38]
lea r9, [rsp + 0xb0]
mov r8d, eax
mov edx, 0x44b
mov rax, qword [rsp + 0x310]
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [rsp + 0x310]
mov eax, dword [rax + 0x28]
add eax, 0xa
mov rcx, qword [rsp + 0x310]
mov dword [rcx + 0x28], eax
mov rax, qword [rsp + 0x310]
add rax, 0x28
mov qword [rsp + 0x2e8], rax
lea rcx, [rsp + 0xb0]
call sym.ProcessHacker.exe_PhCountStringZ
mov dword [rsp + 0x20], 0x100025
mov rcx, qword [rsp + 0x2e8]
mov r9, rcx
mov r8d, eax
lea rdx, [rsp + 0xb0]
mov rax, qword [rsp + 0x310]
mov rcx, qword [rax + 0x20]
call qword [sym.imp.USER32.dll_DrawTextW]
mov eax, 4
jmp 0x140198e45
xor eax, eax
mov rdi, rax
mov rcx, rsp
lea rdx, [0x1404e8070]
call fcn.140015750
mov rax, rdi
mov rcx, qword [rsp + 0x2f0]
xor rcx, rsp
call fcn.14000d430
add rsp, 0x300
pop rdi
ret