Function at 0x140005cc0
Capabilities:
Capture webcam image
Query environment variable
Set environment variable

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r14
push r15
mov eax, 0x10450
call fcn.140018110
sub rsp, rax
mov rax, qword [0x14003ebd8]
xor rax, rsp
mov qword [rsp + 0x10440], rax
movsxd rbp, edx
movzx r14d, r8b
movsxd rdi, ecx
mov edx, 0x418
mov rcx, qword [0x14003f6e0]
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
mov r8, rdi
mov rcx, rax
mov edx, 0x14e
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [0x14003f6e0]
mov edx, 0x419
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
mov edx, 0x14b
mov rsi, rax
call qword [sym.imp.USER32.dll_SendMessageW]
lea r15, section..data
mov r15, qword [r15 + rdi*8]
add edi, 0x40000264
sub edi, 0x40000264
je 0x140005ea7
sub edi, 1
je 0x140005e75
sub edi, 1
je 0x140005e47
sub edi, 1
je 0x140005de4
cmp edi, 1
jne 0x140005ea0
mov ecx, 0x4000026f
call fcn.1400026f0
mov r9, rax
xor r8d, r8d
mov edx, 0x14a
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
test ebp, ebp
lea rdi, [0x14002ec50]
mov ecx, 0x40000270
cmovne rdi, qword [rsp + 0x30]
call fcn.1400026f0
mov r9, rax
mov edx, 0x14a
mov r8d, 1
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
cmp ebp, 1
jne 0x140005f03
lea rdi, str.Post
jmp 0x140005f03
mov ecx, 0x4000026d
call fcn.1400026f0
mov r9, rax
xor r8d, r8d
mov edx, 0x14a
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
test ebp, ebp
lea rdi, str.Change
mov ecx, 0x4000026e
cmovne rdi, qword [rsp + 0x30]
call fcn.1400026f0
mov r9, rax
mov edx, 0x14a
mov r8d, 1
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
cmp ebp, 1
jne 0x140005f03
lea rdi, str.Resume
jmp 0x140005f03
mov ecx, 0x4000026c
call fcn.1400026f0
mov r9, rax
xor r8d, r8d
mov edx, 0x14a
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
test ebp, ebp
jne 0x140005ea0
lea rdi, str.Post
jmp 0x140005f03
mov ecx, 0x4000026b
call fcn.1400026f0
mov r9, rax
xor r8d, r8d
mov edx, 0x14a
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
test ebp, ebp
jne 0x140005ea0
lea rdi, [0x14002ec50]
jmp 0x140005f03
mov rdi, qword [rsp + 0x30]
jmp 0x140005f03
mov ecx, 0x40000269
call fcn.1400026f0
mov r9, rax
xor r8d, r8d
mov edx, 0x14a
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
test ebp, ebp
lea rbx, [0x14002ec50]
mov ecx, 0x4000026a
cmovne rbx, qword [rsp + 0x30]
call fcn.1400026f0
mov r9, rax
mov edx, 0x14a
mov r8d, 1
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
cmp ebp, 1
lea rdi, str.Post
cmovne rdi, rbx
mov r8, rbp
xor r9d, r9d
mov edx, 0x14e
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea r9, str.NSSM_HOOK__s__s
mov qword [rsp + 0x28], rdi
mov edx, 0x200
mov qword [rsp + 0x20], r15
mov r8, 0xffffffffffffffff
lea rcx, [rsp + 0x40]
call fcn.140001d80
cmp word [rsp + 0x40], 0
je 0x140005fbf
test r14b, r14b
je 0x140005f80
mov rcx, qword [0x14003f6e0]
lea r8, [rsp + 0x440]
mov r9d, 0x8000
mov edx, 0x41a
call qword [sym.imp.USER32.dll_GetDlgItemTextW]
lea rdx, [rsp + 0x440]
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
jmp 0x140005fbf
mov r8d, 0x8000
lea rdx, [rsp + 0x440]
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
jne 0x140005fa5
mov word [rsp + 0x440], ax
mov rcx, qword [0x14003f6e0]
lea r8, [rsp + 0x440]
mov edx, 0x41a
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [rsp + 0x10440]
xor rcx, rsp
call fcn.1400180d0
mov rbx, qword [rsp + 0x10490]
add rsp, 0x10450
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret