Function at 0x140002b50
Capabilities:
Capture webcam image
Query environment variable
Set environment variable

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
mov eax, 0x10450
call fcn.140024ca0
sub rsp, rax
mov rax, qword [0x140030f90]
xor rax, rsp
mov qword [rsp + 0x10440], rax
movsxd rdi, ecx
mov rcx, qword [0x1400320f0]
movsxd rbp, edx
mov edx, 0x418
movzx r12d, r8b
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
mov r8, rdi
mov rcx, rax
mov edx, 0x14e
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, qword [0x1400320f0]
mov edx, 0x419
call qword [sym.imp.USER32.dll_GetDlgItem]
xor r9d, r9d
xor r8d, r8d
mov rcx, rax
mov edx, 0x14b
mov rsi, rax
call qword [sym.imp.USER32.dll_SendMessageW]
lea r13, section..data
mov r13, qword [r13 + rdi*8]
add edi, 0x40000264
sub edi, 0x40000264
je 0x140002d38
sub edi, 1
je 0x140002d06
sub edi, 1
je 0x140002cd8
sub edi, 1
je 0x140002c75
cmp edi, 1
jne 0x140002d31
mov ecx, 0x4000026f
call fcn.140002530
xor r8d, r8d
mov edx, 0x14a
mov r9, rax
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rdi, [0x140026c00]
test ebp, ebp
cmovne rdi, qword [rsp + 0x30]
mov ecx, 0x40000270
call fcn.140002530
mov edx, 0x14a
mov r8d, 1
mov r9, rax
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
cmp ebp, 1
jne 0x140002d94
lea rdi, str.Post
jmp 0x140002d94
mov ecx, 0x4000026d
call fcn.140002530
xor r8d, r8d
mov edx, 0x14a
mov r9, rax
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rdi, str.Change
test ebp, ebp
cmovne rdi, qword [rsp + 0x30]
mov ecx, 0x4000026e
call fcn.140002530
mov edx, 0x14a
mov r8d, 1
mov r9, rax
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
cmp ebp, 1
jne 0x140002d94
lea rdi, str.Resume
jmp 0x140002d94
mov ecx, 0x4000026c
call fcn.140002530
xor r8d, r8d
mov edx, 0x14a
mov r9, rax
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
test ebp, ebp
jne 0x140002d31
lea rdi, str.Post
jmp 0x140002d94
mov ecx, 0x4000026b
call fcn.140002530
xor r8d, r8d
mov edx, 0x14a
mov r9, rax
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
test ebp, ebp
jne 0x140002d31
lea rdi, [0x140026c00]
jmp 0x140002d94
mov rdi, qword [rsp + 0x30]
jmp 0x140002d94
mov ecx, 0x40000269
call fcn.140002530
xor r8d, r8d
mov edx, 0x14a
mov r9, rax
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rbx, [0x140026c00]
test ebp, ebp
cmovne rbx, qword [rsp + 0x30]
mov ecx, 0x4000026a
call fcn.140002530
mov edx, 0x14a
mov r8d, 1
mov r9, rax
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea rdi, str.Post
cmp ebp, 1
cmovne rdi, rbx
mov r8, rbp
xor r9d, r9d
mov edx, 0x14e
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageW]
lea r9, str.NSSM_HOOK__s__s
lea rcx, [rsp + 0x40]
or r8, 0xffffffffffffffff
mov edx, 0x200
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], r13
call fcn.140018170
cmp word [rsp + 0x40], 0
je 0x140002e4d
test r12b, r12b
je 0x140002e0e
mov rcx, qword [0x1400320f0]
lea r8, [rsp + 0x440]
mov r9d, 0x8000
mov edx, 0x41a
call qword [sym.imp.USER32.dll_GetDlgItemTextW]
lea rdx, [rsp + 0x440]
lea rcx, [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
jmp 0x140002e4d
lea rdx, [rsp + 0x440]
lea rcx, [rsp + 0x40]
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
jne 0x140002e33
mov word [rsp + 0x440], ax
mov rcx, qword [0x1400320f0]
lea r8, [rsp + 0x440]
mov edx, 0x41a
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov rcx, qword [rsp + 0x10440]
xor rcx, rsp
call fcn.140018800
mov rbx, qword [rsp + 0x10490]
add rsp, 0x10450
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret