Function at 0x692ce740
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push esi
push ebx
lea eax, [ebp - 0x10c]
lea ebx, [ebp - 0x164]
sub esp, 0x180
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp + 8], str._V_ip
mov dword [esp], eax
call dword [sym.imp.rpcrt4.dll_NdrServerInitializeNew]
xor eax, eax
mov dword [ebp - 0x160], sym.___widl_exception_handler_1
mov dword [ebp - 0x15c], sym.___server_filter_1
sub esp, 0xc
mov dword [ebp - 0x158], sym.___finally_ITaskSchedulerService_SchRpcScheduledRuntimes
mov word [ebp - 0x110], ax
mov byte [ebp - 0x10e], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0xc], 0
mov eax, dword fs:[0]
mov dword [ebx], eax
mov dword fs:[0], ebx
movzx eax, byte [ebp - 0x10f]
mov dword [esp + 4], ebx
add eax, 1
mov byte [ebp - 0x10e], al
lea eax, [ebp - 0x154]
mov dword [esp], eax
call sym.___wine_setjmpex
test eax, eax
jne 0x692ceacf
movzx eax, byte [ebp - 0x10e]
test al, al
je 0x692cea90
add eax, 1
mov byte [ebp - 0x10f], al
mov eax, dword [ebp + 8]
cmp word [eax + 4], 0x10
je 0x692ce838
lea eax, [ebp - 0x10c]
mov dword [esp + 4], 0x692d57d8
mov dword [esp], eax
call dword [sym.imp.rpcrt4.dll_NdrConvert]
sub esp, 8
lea ebx, [ebp - 0x10c]
lea eax, [ebp - 0x2c]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x692d5a24
mov dword [esp + 4], eax
mov dword [esp], ebx
call dword [sym.imp.rpcrt4.dll_NdrConformantStringUnmarshall]
lea eax, [ebp - 0x28]
mov esi, dword [sym.imp.rpcrt4.dll_NdrPointerUnmarshall]
sub esp, 0x10
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x692d5a34
mov dword [esp + 4], eax
mov dword [esp], ebx
call esi
lea eax, [ebp - 0x24]
sub esp, 0x10
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x692d5a38
mov dword [esp + 4], eax
mov dword [esp], ebx
call esi
mov eax, dword [ebp - 0x108]
mov ecx, dword [ebp - 0x100]
sub esp, 0x10
add eax, 3
and eax, 0xfffffffc
lea edx, [eax + 4]
mov dword [ebp - 0x108], eax
cmp edx, ecx
ja 0x692ceacf
mov edx, dword [eax]
add eax, 4
lea ebx, [eax + 4]
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x20], edx
cmp ecx, ebx
jb 0x692ceacf
mov eax, dword [eax]
cmp byte [ebp - 0x10e], 0
mov dword [ebp - 0x108], ebx
mov dword [ebp - 0x1c], eax
je 0x692ceab8
mov dword [esp + 0x10], eax
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x18]
lea ebx, [ebp - 0x10]
mov dword [esp + 0x14], ecx
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x28]
mov dword [esp + 0xc], edx
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x2c]
mov dword [esp + 0x18], ebx
mov dword [esp], eax
mov dword [ebp - 0x14], ecx
mov byte [ebp - 0x10f], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0xc], ebx
mov dword [ebp - 0x10], 0
call sym._SchRpcScheduledRuntimes
mov dword [ebp - 0xf8], 0x10
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov dword [esp + 8], 0x692d5a52
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xc]
mov dword [esp + 4], eax
lea eax, [ebp - 0x10c]
mov dword [esp], eax
call dword [sym.imp.rpcrt4.dll_NdrPointerBufferSize]
mov esi, dword [ebp + 8]
mov eax, dword [ebp - 0xf8]
sub esp, 0xc
mov dword [esi + 0xc], eax
mov dword [esp], esi
call dword [sym.imp.rpcrt4.dll_I_RpcGetBuffer]
sub esp, 4
test eax, eax
jne 0x692ceadc
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
mov eax, ecx
mov dword [ebp - 0x108], ecx
neg eax
and eax, 3
je 0x692ce9be
xor edx, edx
mov byte [ecx + edx], 0
add edx, 1
cmp edx, eax
jb 0x692ce9b3
mov eax, dword [ebp - 0x108]
mov edx, dword [ebp - 0x14]
add eax, 3
and eax, 0xfffffffc
mov dword [ebp - 0x108], eax
mov edx, dword [edx]
mov dword [eax], edx
mov eax, dword [ebp - 0x14]
add dword [ebp - 0x108], 4
mov eax, dword [eax]
mov dword [esp + 8], 0x692d5a52
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xc]
mov dword [esp + 4], eax
lea eax, [ebp - 0x10c]
mov dword [esp], eax
call dword [sym.imp.rpcrt4.dll_NdrPointerMarshall]
mov ecx, dword [ebp - 0x108]
sub esp, 0xc
mov eax, ecx
neg eax
and eax, 3
mov edx, eax
je 0x692cea28
xor eax, eax
mov byte [ecx + eax], 0
add eax, 1
cmp eax, edx
jb 0x692cea1d
mov eax, dword [ebp - 0x108]
mov edx, dword [ebp - 0x30]
add eax, 3
and eax, 0xfffffffc
mov dword [ebp - 0x108], eax
mov dword [eax], edx
add dword [ebp - 0x108], 4
cmp byte [ebp - 0x10f], 0
jne 0x692cea5b
mov eax, dword [ebp - 0x164]
mov dword fs:[0], eax
lea eax, [ebp - 0x164]
mov byte [ebp - 0x10e], 0
mov dword [esp], eax
call sym.___finally_ITaskSchedulerService_SchRpcScheduledRuntimes
mov esi, dword [ebp + 8]
mov eax, dword [ebp - 0x108]
sub eax, dword [esi + 8]
mov dword [esi + 0xc], eax
lea esp, [ebp - 8]
pop ebx
pop esi
pop ebp
ret 4
lea eax, [ebp - 0x164]
mov edx, dword fs:[0]
mov dword [eax], edx
mov dword fs:[0], eax
movzx eax, byte [ebp - 0x10e]
jmp 0x692ce80b
mov eax, dword [ebp - 0x164]
mov dword fs:[0], eax
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
jmp 0x692ce8f9
mov dword [esp], 0x6f7
call dword [sym.imp.rpcrt4.dll_RpcRaiseException]
mov dword [esp], eax
call dword [sym.imp.rpcrt4.dll_RpcRaiseException]
lea esi, [esi]
lea edi, [edi]