Function at 0x100270c
Capabilities:
Listen for remote procedure calls

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xec
mov eax, dword [0x100a068]
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 4], eax
inc ebx
push ebx
lea eax, [ebp - 0x18]
xor esi, esi
push eax
mov dword [ebp - 0xe0], ecx
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0xec], 0xc
mov dword [ebp - 0xe8], 4
mov dword [ebp - 0xe4], esi
call dword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
test eax, eax
je 0x100277d
lea eax, [ebp - 0x1c]
push eax
call fcn.0100261e
test eax, eax
je 0x100277d
push esi
push dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
push ebx
push eax
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorDacl]
test eax, eax
jne 0x1002867
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
mov eax, dword [0x100a1e4]
cmp eax, esi
je 0x100285f
cmp dword [eax + 0xe4], esi
jge 0x10027bb
cmp dword [eax + 4], esi
je 0x100285f
push esi
push 0x1104
call sym.ISMSERV.EXE_DoLogOverride
test eax, eax
je 0x100285f
mov eax, dword [0x100a1e4]
mov dword [ebp - 0xdc], esi
mov eax, dword [eax + 0xe0]
mov dword [ebp - 0xd4], eax
lea eax, [ebp - 0x90]
mov dword [ebp - 0x98], eax
lea eax, [ebp - 0x80]
mov dword [ebp - 0x88], eax
lea eax, [ebp - 0xdc]
push eax
mov dword [ebp - 0xd0], esi
mov dword [ebp - 0xd8], 0xc000071a
mov dword [ebp - 0xc8], esi
mov dword [ebp - 0xc4], ebx
mov dword [ebp - 0x9c], 0xa
mov dword [ebp - 0x90], edi
mov dword [ebp - 0x8c], 5
mov dword [ebp - 0x80], edi
mov dword [ebp - 0xdc], 2
mov dword [ebp - 0xb0], esi
mov dword [ebp - 0xb4], esi
mov dword [ebp - 0xc0], ebx
mov dword [ebp - 0xbc], esi
mov dword [ebp - 0xb8], 0x1104
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0xa4], esi
call sym.ISMSERV.EXE_DoLogEventAndTrace
cmp edi, esi
jne 0x100296c
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0x18]
push eax
push dword [0x100a04c]
push 0x4d2
push 0x1001674
call dword [sym.imp.RPCRT4.dll_RpcServerUseProtseqEpExA]
mov edi, eax
cmp edi, esi
je 0x100296c
mov eax, dword [0x100a1e4]
cmp eax, esi
je 0x100296c
cmp dword [eax + 0xe4], esi
jge 0x10028c8
cmp dword [eax + 4], esi
je 0x100296c
push esi
push 0x1104
call sym.ISMSERV.EXE_DoLogOverride
test eax, eax
je 0x100296c
mov eax, dword [0x100a1e4]
mov dword [ebp - 0xdc], esi
mov eax, dword [eax + 0xe0]
mov dword [ebp - 0xd4], eax
lea eax, [ebp - 0x90]
mov dword [ebp - 0x98], eax
lea eax, [ebp - 0x80]
mov dword [ebp - 0x88], eax
lea eax, [ebp - 0xdc]
push eax
mov dword [ebp - 0xd0], esi
mov dword [ebp - 0xd8], 0xc000071b
mov dword [ebp - 0xc8], esi
mov dword [ebp - 0xc4], ebx
mov dword [ebp - 0x9c], 0xa
mov dword [ebp - 0x90], edi
mov dword [ebp - 0x8c], 5
mov dword [ebp - 0x80], edi
mov dword [ebp - 0xdc], 2
mov dword [ebp - 0xb0], esi
mov dword [ebp - 0xb4], esi
mov dword [ebp - 0xc0], ebx
mov dword [ebp - 0xbc], esi
mov dword [ebp - 0xb8], 0x1104
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0xa4], esi
call sym.ISMSERV.EXE_DoLogEventAndTrace
cmp dword [ebp - 0x1c], esi
je 0x1002982
push dword [ebp - 0x1c]
push esi
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
cmp edi, esi
jne 0x1002b44
push esi
push esi
push dword [0x100a03c]
call dword [sym.imp.RPCRT4.dll_RpcServerRegisterIf]
mov edi, eax
cmp edi, esi
je 0x1002a81
mov eax, dword [0x100a1e4]
cmp eax, esi
je 0x1002b44
cmp dword [eax + 0xe4], esi
jge 0x10029d8
cmp dword [eax + 4], esi
je 0x1002b44
push esi
push 0x1104
call sym.ISMSERV.EXE_DoLogOverride
test eax, eax
je 0x1002b44
mov eax, dword [0x100a1e4]
mov dword [ebp - 0xdc], esi
mov eax, dword [eax + 0xe0]
mov dword [ebp - 0xd8], 0xc000071c
mov dword [ebp - 0xd4], eax
lea eax, [ebp - 0x90]
mov dword [ebp - 0x98], eax
lea eax, [ebp - 0x80]
mov dword [ebp - 0x88], eax
lea eax, [ebp - 0xdc]
push eax
mov dword [ebp - 0xd0], esi
mov dword [ebp - 0xc8], esi
mov dword [ebp - 0xc4], ebx
mov dword [ebp - 0x9c], 0xa
mov dword [ebp - 0x90], edi
mov dword [ebp - 0x8c], 5
mov dword [ebp - 0x80], edi
mov dword [ebp - 0xdc], 2
mov dword [ebp - 0xb0], esi
mov dword [ebp - 0xb4], esi
mov dword [ebp - 0xc0], ebx
mov dword [ebp - 0xbc], esi
mov dword [ebp - 0xb8], 0x1104
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0xa4], esi
call sym.ISMSERV.EXE_DoLogEventAndTrace
jmp 0x1002b44
push esi
push esi
push 0xa
push esi
call dword [sym.imp.RPCRT4.dll_RpcServerRegisterAuthInfoA]
mov edi, eax
cmp edi, esi
je 0x1002ae3
mov eax, dword [0x100a1e4]
cmp eax, esi
je 0x1002b44
cmp dword [eax + 0xe4], esi
jge 0x1002ac8
cmp dword [eax + 4], esi
je 0x1002b44
push esi
push 0x1104
call sym.ISMSERV.EXE_DoLogOverride
test eax, eax
je 0x1002b44
mov eax, dword [0x100a1e4]
mov dword [ebp - 0xdc], esi
mov eax, dword [eax + 0xe0]
mov dword [ebp - 0xd8], 0xc0000745
jmp 0x10029ee
push ebx
push 0x4d2
push ebx
call dword [sym.imp.RPCRT4.dll_RpcServerListen]
mov edi, eax
cmp edi, esi
je 0x1002b3b
mov eax, dword [0x100a1e4]
cmp eax, esi
je 0x1002b44
cmp dword [eax + 0xe4], esi
jge 0x1002b20
cmp dword [eax + 4], esi
je 0x1002b44
push esi
push 0x1104
call sym.ISMSERV.EXE_DoLogOverride
test eax, eax
je 0x1002b44
mov eax, dword [0x100a1e4]
mov dword [ebp - 0xdc], esi
mov eax, dword [eax + 0xe0]
mov dword [ebp - 0xd8], 0xc000071d
jmp 0x10029ee
mov eax, dword [ebp - 0xe0]
mov dword [eax + 0x7c], ebx
mov ecx, dword [ebp - 4]
mov eax, edi
pop edi
pop esi
pop ebx
call fcn.01006e5a
leave
ret