Function at 0x463d50
Capabilities:
Capture webcam image
Get common file path

Disassembly:
sub esp, 0x58
push ebx
push ebp
push esi
push edi
mov ebp, ecx
push str.shell32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
mov edi, eax
mov eax, dword [ebp + 0x7c]
push 0
push 0
push 0x431
push eax
call ebx
push 0
push 6
mov ecx, ebp
mov dword [esp + 0x1c], eax
call fcn.00463c70
push 0
push ecx
mov ecx, esp
push str..dll
mov dword [ebp + 0x64], eax
call fcn.0040ea20
mov ecx, ebp
call fcn.00463c30
mov esi, eax
push 0x800b
push esi
mov ecx, ebp
call fcn.00463c90
push 0x8049
push esi
mov ecx, ebp
call fcn.00463c90
push 0
push 0
mov ecx, ebp
call fcn.00463c70
push 0
push 0x10
push 0x10
push 1
push 0x18
push edi
mov dword [ebp + 0x68], eax
call dword [sym.imp.USER32.dll_LoadImageW]
mov ecx, dword [ebp + 0x7c]
push 0
push 0xe146
push 0x419
push ecx
mov dword [ebp + 0x6c], eax
call ebx
mov edx, dword [ebp + 0x6c]
add eax, 0xfffffffc
push edx
push eax
mov eax, dword [esp + 0x1c]
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
mov ecx, dword [ebp + 0x6c]
push 0xe146
push ecx
mov ecx, ebp
call fcn.00463c90
mov edx, dword [ebp + 0x7c]
push 0
push 0x8024
push 0x419
push edx
call ebx
add eax, 0xfffffffc
push esi
push eax
mov eax, dword [esp + 0x1c]
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_ReplaceIcon]
push 0x8024
push esi
mov ecx, ebp
call fcn.00463c90
push 0
push 0
call fcn.004106e0
add esp, 8
mov dword [0x4ea774], eax
push 0
push 0x10
push 0x10
push 1
push 0xe
push edi
call dword [sym.imp.USER32.dll_LoadImageW]
mov esi, eax
xor eax, eax
push eax
push 0x10
push 0x10
push 1
push 0x109
push edi
mov dword [esp + 0x34], esi
mov dword [esp + 0x3c], eax
mov dword [esp + 0x30], eax
call dword [sym.imp.USER32.dll_LoadImageW]
test eax, eax
mov dword [esp + 0x18], eax
jne 0x46406b
mov eax, dword [0x4d9540]
mov edx, 0x400
mov dword [esp + 0x10], eax
mov edi, dword [eax - 0xc]
lea ecx, [eax - 0xc]
cmp edi, 1
mov dword [esp + 0x14], ecx
jg 0x463eb8
cmp dword [eax - 4], edx
jge 0x463f24
mov edi, dword [eax - 8]
cmp edi, edx
mov dword [esp + 0x20], edi
jle 0x463ec5
mov edx, edi
push edx
lea ecx, [esp + 0x14]
call fcn.004012f0
test eax, eax
je 0x463f24
mov edx, dword [esp + 0x14]
lea ecx, [edi + edi + 2]
mov edi, dword [esp + 0x10]
mov eax, ecx
lea esi, [edx + 0xc]
mov edx, dword [esp + 0x20]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x10]
mov esi, dword [esp + 0x14]
mov dword [ecx - 8], edx
mov eax, dword [0x4d9544]
cmp esi, eax
je 0x463f1c
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x463f1c
push esi
call fcn.004c5432
add esp, 4
mov eax, dword [esp + 0x10]
mov esi, dword [esp + 0x1c]
push 0x400
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
lea ecx, [esp + 0x10]
call fcn.00401380
mov eax, dword [esp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [esp + 0x10]
mov dword [ecx - 8], eax
mov edx, dword [esp + 0x10]
mov ecx, str.__sendmail.dll
mov word [edx + eax*2], 0
mov eax, dword [0x4d9540]
test ecx, ecx
mov dword [esp + 0x14], eax
je 0x463fbc
push ecx
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov edi, eax
test edi, edi
je 0x463fbc
push edi
lea ecx, [esp + 0x18]
call fcn.004012f0
test eax, eax
je 0x463fbc
mov ecx, dword [esp + 0x14]
lea eax, [edi + 1]
test eax, eax
mov edi, ecx
jne 0x463f93
test ecx, ecx
jne 0x463fb1
push eax
push ecx
push 0xffffffffffffffff
push str.__sendmail.dll
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
test eax, eax
jle 0x463fb1
mov word [edi + eax*2 - 2], 0
push 0xffffffffffffffff
lea ecx, [esp + 0x18]
call fcn.00401970
mov eax, dword [esp + 0x14]
lea ecx, [esp + 0x10]
push eax
mov edx, dword [eax - 8]
push edx
call fcn.00401850
mov eax, dword [esp + 0x14]
mov edx, dword [0x4d9544]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x463ffd
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x463ffd
mov edx, dword [esp + 0x14]
add edx, 0xfffffff4
push edx
call fcn.004c5432
add esp, 4
mov edx, dword [esp + 0x10]
lea eax, [esp + 0x18]
push 1
lea ecx, [esp + 0x28]
push eax
push ecx
push 0
push edx
call dword [sym.imp.SHELL32.dll_ExtractIconExW]
test eax, eax
je 0x464020
mov edi, dword [esp + 0x18]
jmp 0x464038
push 0
push ecx
mov ecx, esp
push str..mapimail
call fcn.0040ea20
mov ecx, ebp
call fcn.00463c30
mov edi, eax
mov eax, dword [esp + 0x10]
mov edx, dword [0x4d9544]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x464067
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x464067
mov edx, dword [esp + 0x10]
add edx, 0xfffffff4
push edx
call fcn.004c5432
add esp, 4
test edi, edi
je 0x46408d
mov eax, dword [esp + 0x18]
push 0x8031
push eax
mov ecx, ebp
call fcn.00463c90
mov ecx, dword [esp + 0x18]
push 0x8032
push ecx
mov ecx, ebp
call fcn.00463c90
push 0x800c
push esi
mov ecx, ebp
call fcn.00463c90
push 0x800f
push esi
mov ecx, ebp
call fcn.00463c90
push 0x852c
push esi
mov ecx, ebp
call fcn.00463c90
push 0x8593
push esi
mov ecx, ebp
call fcn.00463c90
push 0x800d
push esi
mov ecx, ebp
call fcn.00463c90
mov edi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0
push 0x32
call edi
push eax
push 0x31
call edi
mov edx, dword [0x4ee0bc]
push eax
push 1
push 0x14c
push edx
call dword [sym.imp.USER32.dll_LoadImageW]
push 0x808f
push eax
mov ecx, ebp
call fcn.00463c90
push 0x851b
push esi
mov ecx, ebp
call fcn.00463c90
push 0x800e
push esi
mov ecx, ebp
call fcn.00463c90
mov ecx, 7
xor eax, eax
lea edi, [esp + 0x2c]
mov esi, 0x20
rep stosd dword es:[edi], eax
mov ecx, dword [ebp + 0x7c]
lea eax, [esp + 0x28]
push eax
push 0x8496
push 0x440
push ecx
mov dword [esp + 0x38], esi
mov byte [esp + 0x49], 8
mov dword [esp + 0x3c], 8
call ebx
mov eax, dword [ebp + 0x7c]
lea edx, [esp + 0x28]
push edx
push 0x806a
push 0x440
push eax
call ebx
mov edx, dword [ebp + 0x7c]
mov ecx, 7
xor eax, eax
lea edi, [esp + 0x4c]
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x48]
mov dword [esp + 0x48], esi
push ecx
push 0x8496
push 0x440
push edx
mov byte [esp + 0x69], 0x80
mov dword [esp + 0x5c], 8
call ebx
mov ecx, 7
xor eax, eax
lea edi, [esp + 0x4c]
rep stosd dword es:[edi], eax
mov ecx, dword [ebp + 0x7c]
lea eax, [esp + 0x48]
push eax
push 0x16
push 0x440
push ecx
mov dword [esp + 0x58], esi
mov dword [esp + 0x5c], 4
mov byte [esp + 0x68], 0x10
call ebx
mov eax, dword [ebp + 0x7c]
lea edx, [esp + 0x48]
push edx
push 0x17
push 0x440
push eax
call ebx
push 0x80
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call dword [sym.imp.USER32.dll_LoadIconW]
push 0xe140
push eax
mov ecx, ebp
mov dword [ebp + 0x70], eax
call fcn.00463c90
mov ecx, dword [ebp + 0x7c]
push 0
push 0xe151
push 0x419
push ecx
call ebx
mov esi, eax
add esi, 4
xor edi, edi
mov eax, dword [ebp + 0x7c]
mov edx, esi
sub edx, edi
push 0
push edx
push 0x416
push eax
call ebx
inc edi
cmp edi, 5
jl 0x46421a
mov ecx, dword [ebp + 0x7c]
push 0
push 0
push 0x439
push ecx
call ebx
mov edx, dword [ebp + 0x7c]
or ah, 0x10
push eax
push 0
push 0x438
push edx
call ebx
push 0
push ecx
mov ecx, esp
push str.i_net_
call fcn.004014f0
mov ecx, ebp
call fcn.00463820
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x58