Function at 0x440fd0
Capabilities:
Capture webcam image
Copy file
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x63a808
mov eax, dword fs:[0]
push eax
sub esp, 0x58
mov eax, dword [0x6eed24]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x54], ebx
lea edi, [ebx + 0x10]
mov dword [ebx + 0x2f4], 8
push 8
mov ecx, edi
mov dword [ebp - 0x64], edi
call fcn.00431300
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x58], 0
lea eax, [ebp - 0x60]
mov dword [ebp - 4], 0
push eax
mov ecx, edi
call fcn.0042f4b0
mov ecx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x60]
test ecx, ecx
je 0x44144b
lea esi, [ecx - 1]
lea esi, [eax + esi*2]
cmp esi, eax
jb 0x44106c
mov ecx, 0x5c
lea ecx, [ecx]
cmp cx, word [esi]
je 0x44106c
sub esi, 2
cmp esi, eax
jae 0x441060
sub esi, eax
sar esi, 1
js 0x44144b
inc esi
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 2
push eax
mov ecx, edi
call fcn.0042fa70
mov edi, dword [ebp - 0x5c]
mov eax, 0x649aa0
mov ecx, dword [ebp - 0x60]
sub edi, esi
test ecx, ecx
je 0x4410ae
mov eax, ecx
lea ebx, [eax + esi*2]
test edi, edi
jns 0x4410d3
test ebx, ebx
je 0x441147
mov edi, ebx
lea edx, [edi + 2]
mov ax, word [edi]
add edi, 2
test ax, ax
jne 0x4410c2
sub edi, edx
sar edi, 1
test edi, edi
je 0x441147
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x4c]
sub eax, ecx
cmp edi, eax
jbe 0x44111b
lea esi, [ecx + 0x20]
add esi, edi
and esi, 0xffffffe0
lea eax, [esi + esi]
push eax
push dword [ebp - 0x50]
call fcn.00446560
mov edx, eax
add esp, 8
test edx, edx
je 0x441144
cmp dword [ebp - 0x50], 0
jne 0x44110d
mov ecx, dword [ebp - 0x4c]
xor eax, eax
mov word [edx + ecx*2], ax
mov ecx, dword [ebp - 0x4c]
lea eax, [esi - 1]
mov dword [ebp - 0x50], edx
mov dword [ebp - 0x48], eax
jmp 0x44111e
mov edx, dword [ebp - 0x50]
lea esi, [edx + ecx*2]
test edi, edi
jle 0x441139
lea eax, [edi + edi]
push eax
push ebx
push esi
call fcn.004b3b20
mov ecx, dword [ebp - 0x4c]
add esp, 0xc
mov edx, dword [ebp - 0x50]
add ecx, edi
xor eax, eax
mov dword [ebp - 0x4c], ecx
mov word [edx + ecx*2], ax
mov ecx, dword [ebp - 0x60]
mov edi, dword [ebp - 0x5c]
test ecx, ecx
jne 0x441153
mov ecx, 0x649aa0
mov eax, dword [ebp - 0x50]
mov esi, dword [ebp - 0x4c]
test eax, eax
jne 0x441162
mov eax, 0x649aa0
mov edx, esi
cmp esi, edi
jl 0x44116a
mov edx, edi
test eax, eax
jne 0x441174
neg ecx
sbb ecx, ecx
jmp 0x44118c
test ecx, ecx
jne 0x44117f
mov ecx, 1
jmp 0x4411a0
push edx
push ecx
push eax
call fcn.004b9332
add esp, 0xc
mov ecx, eax
test ecx, ecx
jne 0x4411a8
sub esi, edi
xor eax, eax
test esi, esi
setg al
shr esi, 0x1f
sub eax, esi
mov ecx, eax
test ecx, ecx
je 0x441379
mov esi, dword [0x6f8c64]
xor eax, eax
push 0x10
push 1
push esi
mov dword [ebp - 0x44], 4
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], eax
call dword [sym.imp.KERNEL32.dll_FindResourceW]
test eax, eax
je 0x4411f2
push eax
push esi
call dword [sym.imp.KERNEL32.dll_LoadResource]
test eax, eax
je 0x4411f2
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
test eax, eax
je 0x4411f2
push eax
lea ecx, [ebp - 0x44]
call fcn.00409bd0
xor eax, eax
mov dword [ebp - 0x30], 4
mov dword [ebp - 0x2c], eax
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x50]
push eax
call fcn.00409c80
mov esi, dword [ebp - 0x44]
cmp esi, 4
jne 0x44123d
cmp dword [ebp - 0x30], esi
jne 0x4412a6
xor eax, eax
mov ecx, dword [ebp + eax*4 - 0x40]
sub ecx, dword [ebp + eax*4 - 0x2c]
jne 0x441236
inc eax
cmp eax, 4
jb 0x441226
test ecx, ecx
setg al
jmp 0x44129e
cmp dword [ebp - 0x30], 4
je 0x44139d
shl esi, 2
lea ecx, [ebp - 0x40]
lea edx, [ebp - 0x2c]
sub esi, 4
jb 0x441266
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x44126b
add ecx, 4
add edx, 4
sub esi, 4
jae 0x441255
cmp esi, 0xfffffffc
je 0x44129c
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x441298
cmp esi, 0xfffffffd
je 0x44129c
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x441298
cmp esi, 0xfffffffe
je 0x44129c
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x441298
cmp esi, 0xffffffff
je 0x44129c
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x44129c
mov al, 1
jmp 0x44129e
xor al, al
test al, al
je 0x44139d
mov eax, dword [ebp - 0x50]
test eax, eax
jne 0x4412b2
mov eax, 0x649aa0
mov ecx, dword [ebp - 0x60]
test ecx, ecx
jne 0x4412be
mov ecx, 0x649aa0
push 0
push 0
push 0
push 0
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_CopyFileExW]
test eax, eax
jne 0x44139d
mov edi, dword [ebp - 0x64]
lea eax, [ebp - 0x18]
push 2
push eax
push 6
mov ecx, edi
call fcn.0042e390
push 0xffffffffffffffff
lea eax, [ebp - 0x18]
mov ecx, edi
push eax
call fcn.004031a0
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp - 0x50]
mov edx, eax
test ecx, ecx
jne 0x441309
mov ecx, 0x649aa0
mov eax, dword [ebp - 0x60]
test eax, eax
jne 0x441315
mov eax, 0x649aa0
push edx
push ecx
push eax
push str.Cant_copy_self_from__s_to__s._ErrorCode:0x_X
push 1
push 0x490
push str.e:workprgpdf5_builds_rc.328_trackerupdateworkspace.cpp
call fcn.00431810
add esp, 0x1c
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 3
test eax, eax
je 0x441345
push eax
call fcn.00446420
add esp, 4
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x4c], 0
mov eax, dword [ebp - 0x60]
mov dword [ebp - 4], 4
test eax, eax
je 0x441371
push eax
call fcn.00446420
add esp, 4
mov ebx, dword [ebp - 0x54]
jmp 0x44145f
mov ebx, dword [ebp - 0x54]
mov ecx, ebx
call fcn.0043dbd0
test eax, eax
je 0x4413a0
mov ecx, ebx
call fcn.00444070
mov esi, eax
and esi, 0xc0000000
neg esi
sbb esi, esi
inc esi
jmp 0x4413bf
mov ebx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x50]
test eax, eax
jne 0x4413ac
mov eax, 0x649aa0
push eax
push 1
mov ecx, ebx
call fcn.0043cf40
test al, al
je 0x441406
mov esi, 1
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 5
test eax, eax
je 0x4413d3
push eax
call fcn.00446420
add esp, 4
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x4c], 0
mov eax, dword [ebp - 0x60]
mov dword [ebp - 4], 6
test eax, eax
je 0x4413ff
push eax
call fcn.00446420
add esp, 4
mov eax, esi
jmp 0x441508
mov eax, dword [ebp - 0x50]
mov byte [ebp - 4], 7
test eax, eax
je 0x44141a
push eax
call fcn.00446420
add esp, 4
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x4c], 0
mov eax, dword [ebp - 0x60]
mov dword [ebp - 4], 8
test eax, eax
je 0x441446
push eax
call fcn.00446420
add esp, 4
lea edi, [ebx + 0x10]
jmp 0x44145f
mov dword [ebp - 4], 1
test eax, eax
je 0x44145f
push eax
call fcn.00446420
add esp, 4
push 6
mov ecx, edi
mov dword [ebp - 4], 0xffffffff
mov dword [ebx + 0x2f4], 6
call fcn.00431300
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0x419
push dword [ebx + 0x3ec]
call esi
mov ecx, ebx
call fcn.0043dbd0
test eax, eax
jne 0x441506
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x1c]
mov dword [ebp - 4], 9
push eax
lea ecx, [ebx + 0x1c8]
push 0x74
call fcn.004102a0
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x4414c8
mov eax, 0x649aa0
push 0xffffffffffffffff
push eax
lea ecx, [ebp - 0x1c]
call fcn.00403940
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x4414df
mov eax, 0x649aa0
push 0
push eax
push 0x406
push dword [ebx + 0x3ec]
call esi
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 4], 0xa
test eax, eax
je 0x441506
push eax
call fcn.00446420
add esp, 4
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004b2558
mov esp, ebp
pop ebp
ret