Function at 0x402a00
Capabilities:
Listen for remote procedure calls

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff0
push dword [ecx - 4]
push ebp
mov ebp, esp
push edi
push esi
push ebx
push ecx
sub esp, 0x58
test byte [0x4091a0], 8
jne 0x402c68
mov eax, dword [0x4091e0]
mov dword [ebp - 0x3c], eax
mov eax, dword [0x409220]
mov dword [ebp - 0x30], eax
mov eax, dword [0x409254]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x3c]
mov edi, dword [sym.imp.rpcrt4.dll_RpcServerRegisterIf]
xor ebx, ebx
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call edi
sub esp, 0xc
mov esi, eax
test eax, eax
jne 0x402c20
add ebx, 1
cmp ebx, 3
je 0x402a78
mov eax, dword [ebp + ebx*4 - 0x34]
jmp 0x402a44
mov edi, dword [sym.imp.rpcrt4.dll_RpcServerUseProtseqEpW]
mov ecx, str.ncacn_np
mov eax, str.pipeepmapper
mov dword [esp + 0xc], 0
mov dword [esp + 8], eax
mov dword [esp + 4], 0xa
mov dword [esp], ecx
call edi
sub esp, 0x10
test eax, eax
jne 0x402be8
add esi, 1
cmp esi, 4
je 0x402ac8
mov eax, dword [esi*8 + 0x40a3e4]
mov ecx, dword [esi*8 + 0x40a3e0]
jmp 0x402a88
mov dword [esp + 8], 1
mov dword [esp + 4], 0x4d2
mov dword [esp], 1
call dword [sym.imp.rpcrt4.dll_RpcServerListen]
sub esp, 0xc
mov esi, eax
test eax, eax
jne 0x402bea
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 1
mov dword [esp], 0
call dword [sym.imp.kernel32.dll_CreateEventW]
sub esp, 0x10
mov dword [0x40d00c], eax
mov dword [esp + 8], 0
mov dword [esp + 4], dbg.service_handler
mov dword [esp], str.RpcSs
call dword [sym.imp.advapi32.dll_RegisterServiceCtrlHandlerExW]
mov dword [0x40d008], eax
sub esp, 0xc
test eax, eax
je 0x402bd7
lea esi, [ebp - 0x34]
mov ebx, dword [sym.imp.advapi32.dll_SetServiceStatus]
mov dword [ebp - 0x34], 0x30
mov dword [ebp - 0x30], 4
mov dword [ebp - 0x2c], 5
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0x2710
mov dword [esp + 4], esi
mov dword [esp], eax
call ebx
mov eax, dword [0x40d00c]
sub esp, 8
mov dword [esp + 4], 0xffffffff
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_WaitForSingleObject]
mov eax, dword [0x40d008]
mov dword [ebp - 0x30], 1
sub esp, 8
mov dword [ebp - 0x2c], 0
mov dword [esp + 4], esi
mov dword [esp], eax
call ebx
sub esp, 8
test byte [0x4091a0], 8
jne 0x402ce0
lea esp, [ebp - 0x10]
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret 8
mov esi, eax
xor edi, edi
mov eax, dword [ebp - 0x3c]
mov dword [esp + 8], 0
add edi, 1
mov dword [esp + 4], 0
mov dword [esp], eax
call dword [sym.imp.rpcrt4.dll_RpcServerUnregisterIf]
sub esp, 0xc
cmp edi, ebx
jge 0x402c24
mov eax, dword [ebp + edi*4 - 0x34]
mov dword [ebp - 0x3c], eax
jmp 0x402bec
test ebx, ebx
jne 0x402bea
test byte [0x4091a0], 4
je 0x402bd7
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], str.Failed_to_initialize_rpc_interfaces__status__ld._n
mov dword [esp + 8], global___func__
mov dword [esp + 4], 0x4091a0
mov dword [esp], 2
call sym._wine_dbg_log.constprop.0_2
lea esp, [ebp - 0x10]
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret 8
mov dword [esp + 0xc], str.starting_service_n
mov dword [esp + 8], global___func__
mov dword [esp + 4], 0x4091a0
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0_2
mov eax, dword [0x4091e0]
mov dword [ebp - 0x3c], eax
mov eax, dword [0x409220]
mov dword [ebp - 0x30], eax
mov eax, dword [0x409254]
mov dword [ebp - 0x2c], eax
test byte [0x4091a0], 8
je 0x402a39
mov dword [esp + 0xc], 0x40a372
mov dword [esp + 8], str.RPCSS_Initialize
mov dword [esp + 4], 0x4091a0
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0_2
jmp 0x402a39
mov dword [esp + 0xc], str.service_stopped_n
mov dword [esp + 8], global___func__
mov dword [esp + 4], 0x4091a0
mov dword [esp], 3
call sym._wine_dbg_log.constprop.0_2
lea esp, [ebp - 0x10]
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret 8