Function at 0x407230
Capabilities:
Capture webcam image
Set registry value

Disassembly:
sub esp, 0xc
mov eax, dword [0x413d04]
push ebx
push ebp
push esi
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
xor ebp, ebp
push edi
push ebp
push ebp
push pe_nt_image_headers32
push 0x410
push eax
xor ebx, ebx
call esi
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push eax
call edi
test eax, eax
je 0x40727a
fld qword [0x410230]
fld qword [0x4102f8]
call fcn.00408c10
call fcn.00408be4
mov ebx, eax
mov ecx, dword [0x413d04]
push ebp
push ebp
push pe_nt_image_headers32
push 0x411
push ecx
call esi
push eax
call edi
test eax, eax
je 0x4072bc
fld qword [0x410230]
fld qword [0x4102f0]
call fcn.00408c10
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebp
fild qword [esp + 0x14]
faddp st(1)
call fcn.00408be4
mov ebx, eax
mov edx, dword [0x413d04]
push ebp
push ebp
push pe_nt_image_headers32
push 0x412
push edx
call esi
push eax
call edi
test eax, eax
je 0x4072fe
fld qword [0x410230]
fld qword [0x410230]
call fcn.00408c10
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebp
fild qword [esp + 0x14]
faddp st(1)
call fcn.00408be4
mov ebx, eax
mov eax, dword [0x413d04]
push ebp
push ebp
push pe_nt_image_headers32
push 0x413
push eax
call esi
push eax
call edi
test eax, eax
je 0x40733f
fld qword [0x410230]
fld qword [0x4102e8]
call fcn.00408c10
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebp
fild qword [esp + 0x14]
faddp st(1)
call fcn.00408be4
mov ebx, eax
mov ecx, dword [0x413d04]
push ebp
push ebp
push pe_nt_image_headers32
push 0x414
push ecx
call esi
push eax
call edi
test eax, eax
je 0x407381
fld qword [0x410230]
fld qword [0x4102e0]
call fcn.00408c10
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebp
fild qword [esp + 0x14]
faddp st(1)
call fcn.00408be4
mov ebx, eax
mov edx, dword [0x413d04]
push ebp
push ebp
push pe_nt_image_headers32
push 0x415
push edx
call esi
push eax
call edi
test eax, eax
je 0x4073c3
fld qword [0x410230]
fld qword [0x4102d8]
call fcn.00408c10
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebp
fild qword [esp + 0x14]
faddp st(1)
call fcn.00408be4
mov ebx, eax
mov eax, dword [0x413d04]
push ebp
push ebp
push pe_nt_image_headers32
push 0x416
push eax
call esi
push eax
call edi
test eax, eax
je 0x407404
fld qword [0x410230]
fld qword [0x4102d0]
call fcn.00408c10
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebp
fild qword [esp + 0x14]
faddp st(1)
call fcn.00408be4
mov ebx, eax
mov ecx, dword [0x413d04]
push ebp
push ebp
push pe_nt_image_headers32
push 0x419
push ecx
call esi
push eax
call edi
test eax, eax
je 0x407446
fld qword [0x410230]
fld qword [0x4102c8]
call fcn.00408c10
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebp
fild qword [esp + 0x14]
faddp st(1)
call fcn.00408be4
mov ebx, eax
mov edx, dword [0x413d04]
push ebp
push ebp
push pe_nt_image_headers32
push 0x41a
push edx
call esi
push eax
call edi
test eax, eax
je 0x407488
fld qword [0x410230]
fld qword [0x4102c0]
call fcn.00408c10
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebp
fild qword [esp + 0x14]
faddp st(1)
call fcn.00408be4
mov ebx, eax
mov eax, dword [0x413d04]
push ebp
push ebp
push pe_nt_image_headers32
push 0x41b
push eax
call esi
push eax
call edi
test eax, eax
je 0x4074c9
fld qword [0x410230]
fld qword [0x4102b8]
call fcn.00408c10
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebp
fild qword [esp + 0x14]
faddp st(1)
call fcn.00408be4
mov ebx, eax
mov ecx, dword [0x413d04]
push ebp
push ebp
push pe_nt_image_headers32
push 0x41e
push ecx
call esi
push eax
call edi
test eax, eax
je 0x40750b
fld qword [0x410230]
fld qword [0x4102b0]
call fcn.00408c10
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebp
fild qword [esp + 0x14]
faddp st(1)
call fcn.00408be4
mov ebx, eax
mov edx, dword [0x413d04]
push ebp
push ebp
push pe_nt_image_headers32
push 0x41f
push edx
call esi
push eax
call edi
test eax, eax
je 0x40754d
fld qword [0x410230]
fld qword [0x4102a8]
call fcn.00408c10
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebp
fild qword [esp + 0x14]
faddp st(1)
call fcn.00408be4
mov ebx, eax
mov eax, dword [0x413d04]
push ebp
push ebp
push pe_nt_image_headers32
push 0x420
push eax
call esi
push eax
call edi
test eax, eax
je 0x40758e
fld qword [0x410230]
fld qword [0x4102a0]
call fcn.00408c10
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebp
fild qword [esp + 0x14]
faddp st(1)
call fcn.00408be4
mov ebx, eax
mov ecx, dword [0x413d04]
push ebp
push ebp
push pe_nt_image_headers32
push 0x421
push ecx
call esi
push eax
call edi
test eax, eax
je 0x4075d0
fld qword [0x410230]
fld qword [0x410298]
call fcn.00408c10
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebp
fild qword [esp + 0x14]
faddp st(1)
call fcn.00408be4
mov ebx, eax
mov edx, dword [0x413d04]
push ebp
push ebp
push pe_nt_image_headers32
push 0x422
push edx
call esi
push eax
call edi
test eax, eax
je 0x407612
fld qword [0x410230]
fld qword [0x410290]
call fcn.00408c10
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebp
fild qword [esp + 0x14]
faddp st(1)
call fcn.00408be4
mov ebx, eax
mov eax, dword [0x413d04]
push ebp
push ebp
push pe_nt_image_headers32
push 0x423
push eax
call esi
push eax
call edi
test eax, eax
je 0x407653
fld qword [0x410230]
fld qword [0x410288]
call fcn.00408c10
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebp
fild qword [esp + 0x14]
faddp st(1)
call fcn.00408be4
mov ebx, eax
mov ecx, dword [0x413d04]
push ebp
push ebp
push pe_nt_image_headers32
push 0x424
push ecx
call esi
push eax
call edi
test eax, eax
je 0x407695
fld qword [0x410230]
fld qword [0x410280]
call fcn.00408c10
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebp
fild qword [esp + 0x14]
faddp st(1)
call fcn.00408be4
mov ebx, eax
mov edx, dword [0x413d04]
push ebp
push ebp
push pe_nt_image_headers32
push 0x425
push edx
call esi
push eax
call edi
test eax, eax
je 0x4076d7
fld qword [0x410230]
fld qword [0x410278]
call fcn.00408c10
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebp
fild qword [esp + 0x14]
faddp st(1)
call fcn.00408be4
mov ebx, eax
mov eax, dword [0x413d04]
push ebp
push ebp
push pe_nt_image_headers32
push 0x426
push eax
call esi
push eax
call edi
test eax, eax
je 0x407718
fld qword [0x410230]
fld qword [0x410270]
call fcn.00408c10
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebp
fild qword [esp + 0x14]
faddp st(1)
call fcn.00408be4
mov ebx, eax
mov ecx, dword [0x413d04]
push ebp
push ebp
push pe_nt_image_headers32
push 0x427
push ecx
call esi
push eax
call edi
test eax, eax
je 0x40775a
fld qword [0x410230]
fld qword [0x410268]
call fcn.00408c10
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebp
fild qword [esp + 0x14]
faddp st(1)
call fcn.00408be4
mov ebx, eax
mov edx, dword [0x413d04]
push ebp
push ebp
push pe_nt_image_headers32
push 0x428
push edx
call esi
push eax
call edi
test eax, eax
je 0x40779c
fld qword [0x410230]
fld qword [0x410260]
call fcn.00408c10
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebp
fild qword [esp + 0x14]
faddp st(1)
call fcn.00408be4
mov ebx, eax
mov eax, dword [0x413d04]
push ebp
push ebp
push pe_nt_image_headers32
push 0x429
push eax
call esi
push eax
call edi
test eax, eax
je 0x4077dd
fld qword [0x410230]
fld qword [0x410258]
call fcn.00408c10
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebp
fild qword [esp + 0x14]
faddp st(1)
call fcn.00408be4
mov ebx, eax
mov ecx, dword [0x413d04]
push ebp
push ebp
push pe_nt_image_headers32
push 0x42a
push ecx
call esi
push eax
call edi
test eax, eax
je 0x40781f
fld qword [0x410230]
fld qword [0x410250]
call fcn.00408c10
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebp
fild qword [esp + 0x14]
faddp st(1)
call fcn.00408be4
mov ebx, eax
mov edx, dword [0x413d04]
push ebp
push ebp
push pe_nt_image_headers32
push 0x42b
push edx
call esi
push eax
call edi
test eax, eax
je 0x407861
fld qword [0x410230]
fld qword [0x410248]
call fcn.00408c10
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebp
fild qword [esp + 0x14]
faddp st(1)
call fcn.00408be4
mov ebx, eax
mov eax, dword [0x413d04]
push ebp
push ebp
push pe_nt_image_headers32
push 0x42c
push eax
call esi
push eax
call edi
test eax, eax
je 0x4078a2
fld qword [0x410230]
fld qword [0x410240]
call fcn.00408c10
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebp
fild qword [esp + 0x14]
faddp st(1)
call fcn.00408be4
mov ebx, eax
mov ecx, dword [0x413d04]
push ebp
push ebp
push pe_nt_image_headers32
push 0x42d
push ecx
call esi
push eax
call edi
test eax, eax
je 0x4078e4
fld qword [0x410230]
fld qword [0x410238]
call fcn.00408c10
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], ebp
fild qword [esp + 0x14]
faddp st(1)
call fcn.00408be4
mov ebx, eax
push 4
call fcn.00408b84
mov esi, eax
add esp, 4
mov byte [esi], bl
shr ebx, 8
mov eax, ebx
mov byte [esi + 1], al
cdq
and edx, 0xff
add eax, edx
sar eax, 8
mov byte [esi + 2], al
cdq
and edx, 0xff
add eax, edx
lea edx, [esp + 0x10]
push edx
push 0x20006
push ebp
push str.SoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer
sar eax, 8
push 0x80000001
mov byte [esi + 3], al
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov eax, dword [esp + 0x10]
push 4
push esi
push 3
push ebp
push str.Nodrives
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExA]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xc
ret