Function at 0xbd0730
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0xd498f0
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
mov eax, dword [str._Sk]
xor eax, esp
mov dword [esp + 0x18], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [str._Sk]
xor eax, esp
push eax
lea eax, [esp + 0x30]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x40]
xor esi, esi
mov dword [esp + 0x20], esi
mov eax, dword [ecx + 0xc]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x24], esi
mov dword [esp + 0x18], eax
cmp eax, esi
jle 0xbd0805
mov edx, dword [edx + 8]
mov eax, dword [edx + 0x14]
mov ebp, dword [edx + 0x10]
mov ebx, dword [ecx + 8]
mov dword [esp + 0x28], edx
mov dword [esp + 0x20], eax
jmp 0xbd07a4
mov edx, dword [esp + 0x28]
cmp dword [esp + 0x20], 0x10
mov edi, dword [ebx]
mov eax, dword [edi + 8]
jb 0xbd07b2
mov edx, dword [edx]
mov esi, dword [eax + 0x10]
mov ecx, esi
cmp ecx, esi
jae 0xbd07bb
mov ecx, esi
cmp esi, ebp
jb 0xbd07c3
mov ecx, ebp
cmp dword [eax + 0x14], 0x10
jb 0xbd07cb
mov eax, dword [eax]
push ecx
push edx
push eax
call fcn.00b9a9d0
add esp, 0xc
test eax, eax
jne 0xbd07eb
cmp esi, ebp
jb 0xbd07eb
cmp esi, ebp
setne al
test eax, eax
je 0xbd0873
mov eax, dword [esp + 0x24]
inc eax
add ebx, 4
mov dword [esp + 0x24], eax
cmp eax, dword [esp + 0x18]
jl 0xbd07a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
xor edi, edi
test eax, eax
jle 0xbd0914
mov eax, dword [ecx + 8]
mov esi, dword [eax + edi*4]
mov eax, dword [esi + 0x34]
mov edx, eax
shr edx, 0xa
test dl, 1
je 0xbd090a
or eax, 0x400
cmp dword [esi + 0x2c], 0
mov dword [esi + 0x34], eax
jne 0xbd08f1
push 0x34
call fcn.00cd8a50
xor ecx, ecx
add esp, 4
cmp eax, ecx
je 0xbd08ec
mov dword [eax], vtable.ipc::proto::CommandList.0
mov dword [eax + 4], ecx
lea edx, [eax + 0x18]
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], 4
mov dword [eax + 0x2c], ecx
mov dword [eax + 0x28], ecx
mov dword [eax + 0x30], ecx
jmp 0xbd08ee
mov eax, dword [esp + 0x1c]
mov ecx, edi
call fcn.00bb5880
mov eax, dword [edi + 0x34]
mov ecx, eax
shr ecx, 0xa
test cl, 1
je 0xbd08e8
or eax, 0x400
xor esi, esi
mov dword [edi + 0x34], eax
cmp dword [edi + 0x2c], esi
jne 0xbd08d4
push 0x34
call fcn.00cd8a50
add esp, 4
cmp eax, esi
je 0xbd08cf
mov dword [eax], vtable.ipc::proto::CommandList.0
mov dword [eax + 4], esi
lea edx, [eax + 0x18]
mov dword [eax + 8], edx
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], esi
mov dword [eax + 0x14], 4
mov dword [eax + 0x2c], esi
mov dword [eax + 0x28], esi
mov dword [eax + 0x30], esi
jmp 0xbd08d1
xor eax, eax
mov dword [edi + 0x2c], eax
mov eax, dword [edi + 0x2c]
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx + 0x28]
push eax
push edx
call fcn.00bd0650
add esp, 8
mov al, 1
jmp 0xbd0916
xor eax, eax
mov dword [esi + 0x2c], eax
mov esi, dword [esi + 0x2c]
mov eax, dword [esp + 0x1c]
push esi
push eax
call fcn.00bd0730
add esp, 8
test al, al
jne 0xbd08e8
mov ecx, dword [esp + 0x14]
inc edi
cmp edi, dword [ecx + 0xc]
jl 0xbd080f
xor al, al
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x18]
xor ecx, esp
call fcn.00cd8a41
add esp, 0x28
ret