Function at 0x40ec20
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4b1f66
push eax
mov eax, dword [esp + 0x10]
mov dword fs:[0], esp
sub esp, 0xa0
test eax, 0xffff0000
push ebx
push ebp
push esi
push edi
mov ebp, ecx
je 0x40ec4f
shr eax, 0x10
mov esi, dword [ebp + 4]
lea ecx, [esp + 0x10]
push esi
mov edi, eax
call fcn.0040d8f0
xor ebx, ebx
push edi
push esi
lea ecx, [esp + 0x18]
mov dword [esp + 0x18], vtable.GIPCServerConnection.0
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
call fcn.0040d9c0
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x10]
mov dword [esp + 0xb8], ebx
call dword [eax]
test al, al
je 0x40ecf0
lea ecx, [esp + 0x10]
call fcn.0040d990
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x10]
call dword [edx]
test al, al
je 0x40ecc0
mov ecx, dword [esp + 0x20]
call fcn.004554b0
lea ecx, [esp + 0x10]
mov esi, eax
call fcn.0040d990
cmp esi, 1
jge 0x40ed3c
mov ecx, dword [esp + 0x20]
or eax, 0xffffffff
cmp ecx, ebx
mov dword [esp + 0xb8], eax
mov dword [esp + 0x10], vtable.GIPCConnection.0
jne 0x40ece0
cmp dword [esp + 0x1c], eax
je 0x40ece9
lea ecx, [esp + 0x10]
call fcn.0040d990
mov al, 1
jmp 0x40f114
mov edx, dword [0x4fa100]
mov ecx, dword [esp + 0x18]
push ecx
mov eax, dword [edx + 0x3ef4]
push eax
call fcn.00467380
mov ecx, dword [esp + 0x28]
mov bl, al
add esp, 8
or eax, 0xffffffff
test ecx, ecx
mov dword [esp + 0xb8], eax
mov dword [esp + 0x10], vtable.GIPCConnection.0
jne 0x40ed2c
cmp dword [esp + 0x1c], eax
je 0x40ed35
lea ecx, [esp + 0x10]
call fcn.0040d990
mov al, bl
jmp 0x40f114
mov ecx, 0xe
xor eax, eax
lea edi, [esp + 0x40]
push 0x11
rep stosd dword es:[edi], eax
lea eax, [esp + 0x44]
push 0x4d7690
push eax
mov dword [esp + 0x80], 0x3e6fe7ba
call fcn.004625f0
push 0x11
lea ecx, [esp + 0x61]
push 0x4d7690
push ecx
call fcn.004625f0
push 0x11
lea edx, [esp + 0x7e]
push 0x4d7690
push edx
call fcn.004625f0
mov eax, dword [esp + 0x34]
add esp, 0x24
lea ecx, [esp + 0x10]
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x74], ebx
call dword [eax]
test al, al
jne 0x40eda8
mov ecx, dword [esp + 0x18]
mov eax, ecx
jmp 0x40ee0a
mov ecx, dword [esp + 0x20]
lea eax, [esp + 0x30]
push 0xffffffffffffffff
push eax
lea eax, [esp + 0x34]
mov dword [esp + 0x38], ebx
mov edx, dword [ecx]
push eax
push ebx
push ebx
push 0x10008
call dword [edx + 0x28]
lea ecx, [esp + 0x10]
mov ebx, eax
call fcn.0040d990
mov eax, dword [esp + 0x30]
test eax, eax
je 0x40edf7
mov ecx, dword [esp + 0x2c]
test ecx, ecx
jbe 0x40edf7
mov edx, ecx
mov esi, eax
lea edi, [esp + 0x40]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
push eax
call sub.MFC42.DLL_operatordelete
mov ecx, ebx
add esp, 4
mov eax, ebx
mov dword [esp + 0x18], ecx
xor ebx, ebx
cmp eax, ebx
jne 0x40f0d0
cmp dword [esp + 0x2c], 0x38
jne 0x40f0d0
cmp dword [esp + 0x74], 0x3e6fe7ba
jne 0x40f0d0
mov al, byte [esp + 0x40]
test al, al
je 0x40ef8d
cmp dword [ebp + 8], ebx
jne 0x40ee56
lea eax, [esp + 0x40]
lea ecx, [ebp + 0x2d]
push eax
push ecx
call dword [sym.imp.MSVCRT.dll__stricmp]
add esp, 8
test eax, eax
je 0x40ef8d
mov ecx, dword [ebp + 4]
push ebx
call fcn.00459860
push eax
lea ecx, [esp + 0x3c]
call sub.MFC42.DLL_CSingleLock::CSingleLock
push 0xffffffffffffffff
lea ecx, [esp + 0x38]
mov byte [esp + 0xbc], 1
call sub.MFC42.DLL_CSingleLock::Lock
mov ecx, dword [ebp + 4]
mov edi, 1
push edi
push ebx
call fcn.00459870
mov esi, eax
cmp esi, ebx
je 0x40eed2
mov ecx, esi
call fcn.004554b0
test eax, eax
jne 0x40eebe
lea edx, [esp + 0x40]
lea eax, [esp + 0x9c]
push edx
push eax
mov ecx, esi
call fcn.00455470
push eax
call dword [sym.imp.MSVCRT.dll__stricmp]
add esp, 8
test eax, eax
je 0x40eed2
mov ecx, dword [ebp + 4]
mov eax, edi
push 1
push eax
inc edi
call fcn.00459870
mov esi, eax
cmp esi, ebx
jne 0x40ee91
lea ecx, [esp + 0x34]
call sub.MFC42.DLL_CSingleLock::Unlock
mov al, byte [esp + 0xc4]
test al, al
jne 0x40eeea
cmp esi, ebx
jmp 0x40ef3c
cmp esi, ebx
jne 0x40ef7c
lea ecx, [esp + 0x78]
test ecx, ecx
jne 0x40eefe
xor eax, eax
jmp 0x40ef2c
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x10]
mov byte [esp + 0x78], 0
call dword [edx]
test al, al
lea eax, [esp + 0x78]
je 0x40ef2c
mov ecx, dword [esp + 0x20]
push eax
call fcn.004553b0
lea ecx, [esp + 0x10]
call fcn.0040d990
lea eax, [esp + 0x78]
lea ecx, [esp + 0x40]
push eax
push ecx
call fcn.00461830
add esp, 8
test al, al
jne 0x40ef7c
lea ecx, [esp + 0x34]
mov byte [esp + 0xb8], 0
call sub.MFC42.DLL_CSingleLock::Unlock
mov ecx, dword [esp + 0x20]
or eax, 0xffffffff
cmp ecx, ebx
mov dword [esp + 0xb8], eax
mov dword [esp + 0x10], vtable.GIPCConnection.0
jne 0x40f109
cmp dword [esp + 0x1c], eax
je 0x40f112
jmp 0x40f109
lea ecx, [esp + 0x34]
mov byte [esp + 0xb8], 0
call sub.MFC42.DLL_CSingleLock::Unlock
cmp dword [ebp + 8], 3
jne 0x40efba
lea edi, [esp + 0x40]
or ecx, 0xffffffff
xor eax, eax
lea edx, [ebp + 0x2d]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov dword [ebp + 8], ebx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x10]
call dword [edx]
test al, al
je 0x40eff1
mov ecx, dword [esp + 0x20]
push ebx
call fcn.00455540
mov eax, dword [esp + 0x1c]
cmp eax, 0xffffffff
je 0x40efe5
mov ecx, dword [esp + 0x14]
push eax
call fcn.00459210
mov dword [esp + 0x1c], 0xffffffff
mov dword [esp + 0x20], ebx
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x10]
call dword [eax]
test al, al
je 0x40f02c
mov ecx, dword [esp + 0x20]
push str.ADMIN
call fcn.00455500
mov eax, dword [esp + 0x1c]
cmp eax, 0xffffffff
je 0x40f020
mov ecx, dword [esp + 0x14]
push eax
call fcn.00459210
mov dword [esp + 0x1c], 0xffffffff
mov dword [esp + 0x20], ebx
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x10]
call dword [edx]
test al, al
je 0x40f051
mov ecx, dword [esp + 0x20]
lea eax, [esp + 0x40]
push eax
call fcn.004554c0
lea ecx, [esp + 0x10]
call fcn.0040d990
mov ecx, dword [0x4fa100]
mov eax, dword [ecx + 0x6bc]
cmp eax, ebx
jne 0x40f066
mov eax, 0x4d7690
push 0x41
push eax
push 0x4f07d0
call fcn.004625f0
push eax
call fcn.00462680
push 0x4f07d0
call fcn.004634a0
add esp, 0x14
mov esi, eax
call fcn.0041ee40
mov edx, dword [eax + 0x20]
push 2
push esi
push 0x456
push edx
call dword [sym.imp.USER32.dll_PostMessageA]
mov ecx, dword [esp + 0x20]
or eax, 0xffffffff
cmp ecx, ebx
mov byte [ebp + 0x3e], 1
mov dword [esp + 0xb8], eax
mov dword [esp + 0x10], vtable.GIPCConnection.0
jne 0x40f0c3
cmp dword [esp + 0x1c], eax
je 0x40f0cc
lea ecx, [esp + 0x10]
call fcn.0040d990
mov al, 1
jmp 0x40f114
cmp ecx, ebx
je 0x40f0e9
mov eax, dword [0x4fa100]
push ecx
mov ecx, dword [eax + 0x3ef4]
push ecx
call fcn.00467380
add esp, 8
mov ecx, dword [esp + 0x20]
or eax, 0xffffffff
cmp ecx, ebx
mov dword [esp + 0xb8], eax
mov dword [esp + 0x10], vtable.GIPCConnection.0
jne 0x40f109
cmp dword [esp + 0x1c], eax
je 0x40f112
lea ecx, [esp + 0x10]
call fcn.0040d990
xor al, al
mov ecx, dword [esp + 0xb0]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0xac
ret 8