Function at 0x692cb380
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push ebx
lea eax, [ebp - 0xf4]
lea ebx, [ebp - 0x14c]
sub esp, 0x164
mov dword [esp + 4], eax
mov eax, dword [ebp + 8]
mov dword [esp + 8], 0x692d53a0
mov dword [esp], eax
call dword [sym.imp.rpcrt4.dll_NdrServerInitializeNew]
xor eax, eax
mov dword [ebp - 0x148], sym.___widl_exception_handler
mov dword [ebp - 0x144], sym.___server_filter
sub esp, 0xc
mov dword [ebp - 0x140], sym.___finally_atsvc_NetrJobDel
mov word [ebp - 0xf8], ax
mov byte [ebp - 0xf6], 0
mov dword [ebp - 0x14], 0
mov eax, dword fs:[0]
mov dword [ebx], eax
mov dword fs:[0], ebx
movzx eax, byte [ebp - 0xf7]
mov dword [esp + 4], ebx
add eax, 1
mov byte [ebp - 0xf6], al
lea eax, [ebp - 0x13c]
mov dword [esp], eax
call sym.___wine_setjmpex
test eax, eax
jne 0x692cb5ef
movzx eax, byte [ebp - 0xf6]
test al, al
je 0x692cb5b0
add eax, 1
mov byte [ebp - 0xf7], al
mov eax, dword [ebp + 8]
cmp word [eax + 4], 0x10
je 0x692cb45b
lea eax, [ebp - 0xf4]
mov dword [esp + 4], 0x692d5490
mov dword [esp], eax
call dword [sym.imp.rpcrt4.dll_NdrConvert]
sub esp, 8
lea eax, [ebp - 0x14]
mov dword [esp + 0xc], 0
mov dword [esp + 4], eax
lea eax, [ebp - 0xf4]
mov dword [esp + 8], 0x692d5552
mov dword [esp], eax
call dword [sym.imp.rpcrt4.dll_NdrPointerUnmarshall]
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0xe8]
sub esp, 0x10
add eax, 3
and eax, 0xfffffffc
lea edx, [eax + 4]
mov dword [ebp - 0xf0], eax
cmp edx, ecx
ja 0x692cb5ef
mov edx, dword [eax]
add eax, 4
lea ebx, [eax + 4]
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0x10], edx
cmp ecx, ebx
jb 0x692cb5ef
mov eax, dword [eax]
cmp byte [ebp - 0xf6], 0
mov dword [ebp - 0xf0], ebx
mov dword [ebp - 0xc], eax
je 0x692cb5d8
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x14]
mov dword [esp + 4], edx
mov dword [esp], eax
mov byte [ebp - 0xf7], 0
call sym._NetrJobDel
mov dword [ebp - 0xe0], 8
mov dword [ebp - 0x18], eax
mov eax, dword [ebp + 8]
mov dword [eax + 0xc], 8
mov dword [esp], eax
call dword [sym.imp.rpcrt4.dll_I_RpcGetBuffer]
sub esp, 4
test eax, eax
jne 0x692cb5fc
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 8]
mov eax, ecx
mov dword [ebp - 0xf0], ecx
neg eax
and eax, 3
je 0x692cb53f
xor edx, edx
mov byte [ecx + edx], 0
add edx, 1
cmp edx, eax
jb 0x692cb534
mov eax, dword [ebp - 0xf0]
mov edx, dword [ebp - 0x18]
add eax, 3
and eax, 0xfffffffc
mov dword [ebp - 0xf0], eax
mov dword [eax], edx
add dword [ebp - 0xf0], 4
cmp byte [ebp - 0xf7], 0
jne 0x692cb572
mov eax, dword [ebp - 0x14c]
mov dword fs:[0], eax
mov eax, dword [ebp - 0x14]
mov byte [ebp - 0xf6], 0
mov dword [esp + 8], 0x692d5552
mov dword [esp + 4], eax
lea eax, [ebp - 0xf4]
mov dword [esp], eax
call dword [sym.imp.rpcrt4.dll_NdrPointerFree]
mov ebx, dword [ebp + 8]
mov eax, dword [ebp - 0xf0]
sub esp, 0xc
sub eax, dword [ebx + 8]
mov dword [ebx + 0xc], eax
mov ebx, dword [ebp - 4]
leave
ret 4
lea eax, [ebp - 0x14c]
mov edx, dword fs:[0]
mov dword [eax], edx
mov dword fs:[0], eax
movzx eax, byte [ebp - 0xf6]
jmp 0x692cb42e
mov eax, dword [ebp - 0x14c]
mov dword fs:[0], eax
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 0x10]
jmp 0x692cb4d8
mov dword [esp], 0x6f7
call dword [sym.imp.rpcrt4.dll_RpcRaiseException]
mov dword [esp], eax
call dword [sym.imp.rpcrt4.dll_RpcRaiseException]
lea esi, [esi]
lea edi, [edi]