Function at 0x692ce410
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push esi
push ebx
lea eax, [ebp - 0xf4]
lea ebx, [ebp - 0x14c]
sub esp, 0x160
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp + 8], str._V_ip
mov dword [esp], eax
call dword [sym.imp.rpcrt4.dll_NdrServerInitializeNew]
xor eax, eax
mov dword [ebp - 0x148], sym.___widl_exception_handler_1
mov dword [ebp - 0x144], sym.___server_filter_1
sub esp, 0xc
mov dword [ebp - 0x140], sym.___finally_ITaskSchedulerService_SchRpcRename
mov word [ebp - 0xf8], ax
mov byte [ebp - 0xf6], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0
mov eax, dword fs:[0]
mov dword [ebx], eax
mov dword fs:[0], ebx
movzx eax, byte [ebp - 0xf7]
mov dword [esp + 4], ebx
add eax, 1
mov byte [ebp - 0xf6], al
lea eax, [ebp - 0x13c]
mov dword [esp], eax
call sym.___wine_setjmpex
test eax, eax
jne 0x692ce67c
movzx eax, byte [ebp - 0xf6]
test al, al
je 0x692ce640
add eax, 1
mov byte [ebp - 0xf7], al
mov eax, dword [ebp + 8]
cmp word [eax + 4], 0x10
je 0x692ce4f3
lea eax, [ebp - 0xf4]
mov dword [esp + 4], 0x692d57cc
mov dword [esp], eax
call dword [sym.imp.rpcrt4.dll_NdrConvert]
sub esp, 8
lea eax, [ebp - 0x14]
lea esi, [ebp - 0xf4]
mov ebx, dword [sym.imp.rpcrt4.dll_NdrConformantStringUnmarshall]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x692d5a1c
mov dword [esp + 4], eax
mov dword [esp], esi
call ebx
lea eax, [ebp - 0x10]
sub esp, 0x10
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x692d5a20
mov dword [esp + 4], eax
mov dword [esp], esi
call ebx
mov eax, dword [ebp - 0xf0]
sub esp, 0x10
add eax, 3
and eax, 0xfffffffc
mov dword [ebp - 0xf0], eax
lea edx, [eax + 4]
cmp edx, dword [ebp - 0xe8]
ja 0x692ce67c
mov eax, dword [eax]
cmp byte [ebp - 0xf6], 0
mov dword [ebp - 0xf0], edx
mov dword [ebp - 0xc], eax
je 0x692ce668
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x10]
mov byte [ebp - 0xf7], 0
mov dword [esp + 4], eax
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
call sym._SchRpcRename
mov dword [ebp - 0xe0], 8
mov dword [ebp - 0x18], eax
mov eax, dword [ebp + 8]
mov dword [eax + 0xc], 8
mov dword [esp], eax
call dword [sym.imp.rpcrt4.dll_I_RpcGetBuffer]
sub esp, 4
test eax, eax
jne 0x692ce689
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
mov eax, ecx
mov dword [ebp - 0xf0], ecx
neg eax
and eax, 3
je 0x692ce5e0
xor edx, edx
mov byte [ecx + edx], 0
add edx, 1
cmp edx, eax
jb 0x692ce5d5
mov eax, dword [ebp - 0xf0]
mov edx, dword [ebp - 0x18]
add eax, 3
and eax, 0xfffffffc
mov dword [ebp - 0xf0], eax
mov dword [eax], edx
add dword [ebp - 0xf0], 4
cmp byte [ebp - 0xf7], 0
jne 0x692ce613
mov eax, dword [ebp - 0x14c]
mov dword fs:[0], eax
lea eax, [ebp - 0x14c]
mov byte [ebp - 0xf6], 0
mov dword [esp], eax
call sym.___finally_ITaskSchedulerService_SchRpcRename
mov esi, dword [ebp + 8]
mov eax, dword [ebp - 0xf0]
sub eax, dword [esi + 8]
mov dword [esi + 0xc], eax
lea esp, [ebp - 8]
pop ebx
pop esi
pop ebp
ret 4
lea eax, [ebp - 0x14c]
mov edx, dword fs:[0]
mov dword [eax], edx
mov dword fs:[0], eax
movzx eax, byte [ebp - 0xf6]
jmp 0x692ce4c6
mov eax, dword [ebp - 0x14c]
mov dword fs:[0], eax
mov eax, dword [ebp - 0xc]
jmp 0x692ce576
mov dword [esp], 0x6f7
call dword [sym.imp.rpcrt4.dll_RpcRaiseException]
mov dword [esp], eax
call dword [sym.imp.rpcrt4.dll_RpcRaiseException]
lea esi, [esi]
lea edi, [edi]