Function at 0xb10730
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0xc898f0
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
mov eax, dword [0xcf16ec]
xor eax, esp
mov dword [esp + 0x18], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0xcf16ec]
xor eax, esp
push eax
lea eax, [esp + 0x30]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x40]
xor esi, esi
mov dword [esp + 0x20], esi
mov eax, dword [ecx + 0xc]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x24], esi
mov dword [esp + 0x18], eax
cmp eax, esi
jle 0xb10805
mov edx, dword [edx + 8]
mov eax, dword [edx + 0x14]
mov ebp, dword [edx + 0x10]
mov ebx, dword [ecx + 8]
mov dword [esp + 0x28], edx
mov dword [esp + 0x20], eax
jmp 0xb107a4
mov edx, dword [esp + 0x28]
cmp dword [esp + 0x20], 0x10
mov edi, dword [ebx]
mov eax, dword [edi + 8]
jb 0xb107b2
mov edx, dword [edx]
mov esi, dword [eax + 0x10]
mov ecx, esi
cmp ecx, esi
jae 0xb107bb
mov ecx, esi
cmp esi, ebp
jb 0xb107c3
mov ecx, ebp
cmp dword [eax + 0x14], 0x10
jb 0xb107cb
mov eax, dword [eax]
push ecx
push edx
push eax
call fcn.00ada9d0
add esp, 0xc
test eax, eax
jne 0xb107eb
cmp esi, ebp
jb 0xb107eb
cmp esi, ebp
setne al
test eax, eax
je 0xb10873
mov eax, dword [esp + 0x24]
inc eax
add ebx, 4
mov dword [esp + 0x24], eax
cmp eax, dword [esp + 0x18]
jl 0xb107a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
xor edi, edi
test eax, eax
jle 0xb10914
mov eax, dword [ecx + 8]
mov esi, dword [eax + edi*4]
mov eax, dword [esi + 0x34]
mov edx, eax
shr edx, 0xa
test dl, 1
je 0xb1090a
or eax, 0x400
cmp dword [esi + 0x2c], 0
mov dword [esi + 0x34], eax
jne 0xb108f1
push 0x34
call fcn.00c18a50
xor ecx, ecx
add esp, 4
cmp eax, ecx
je 0xb108ec
mov dword [eax], vtable.ipc::proto::CommandList.0
mov dword [eax + 4], ecx
lea edx, [eax + 0x18]
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], 4
mov dword [eax + 0x2c], ecx
mov dword [eax + 0x28], ecx
mov dword [eax + 0x30], ecx
jmp 0xb108ee
mov eax, dword [esp + 0x1c]
mov ecx, edi
call fcn.00af5880
mov eax, dword [edi + 0x34]
mov ecx, eax
shr ecx, 0xa
test cl, 1
je 0xb108e8
or eax, 0x400
xor esi, esi
mov dword [edi + 0x34], eax
cmp dword [edi + 0x2c], esi
jne 0xb108d4
push 0x34
call fcn.00c18a50
add esp, 4
cmp eax, esi
je 0xb108cf
mov dword [eax], vtable.ipc::proto::CommandList.0
mov dword [eax + 4], esi
lea edx, [eax + 0x18]
mov dword [eax + 8], edx
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], esi
mov dword [eax + 0x14], 4
mov dword [eax + 0x2c], esi
mov dword [eax + 0x28], esi
mov dword [eax + 0x30], esi
jmp 0xb108d1
xor eax, eax
mov dword [edi + 0x2c], eax
mov eax, dword [edi + 0x2c]
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx + 0x28]
push eax
push edx
call fcn.00b10650
add esp, 8
mov al, 1
jmp 0xb10916
xor eax, eax
mov dword [esi + 0x2c], eax
mov esi, dword [esi + 0x2c]
mov eax, dword [esp + 0x1c]
push esi
push eax
call fcn.00b10730
add esp, 8
test al, al
jne 0xb108e8
mov ecx, dword [esp + 0x14]
inc edi
cmp edi, dword [ecx + 0xc]
jl 0xb1080f
xor al, al
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x18]
xor ecx, esp
call fcn.00c18a41
add esp, 0x28
ret