Function at 0xbb0730
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0xd298f0
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
mov eax, dword [0xd916ec]
xor eax, esp
mov dword [esp + 0x18], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0xd916ec]
xor eax, esp
push eax
lea eax, [esp + 0x30]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x40]
xor esi, esi
mov dword [esp + 0x20], esi
mov eax, dword [ecx + 0xc]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x24], esi
mov dword [esp + 0x18], eax
cmp eax, esi
jle 0xbb0805
mov edx, dword [edx + 8]
mov eax, dword [edx + 0x14]
mov ebp, dword [edx + 0x10]
mov ebx, dword [ecx + 8]
mov dword [esp + 0x28], edx
mov dword [esp + 0x20], eax
jmp 0xbb07a4
mov edx, dword [esp + 0x28]
cmp dword [esp + 0x20], 0x10
mov edi, dword [ebx]
mov eax, dword [edi + 8]
jb 0xbb07b2
mov edx, dword [edx]
mov esi, dword [eax + 0x10]
mov ecx, esi
cmp ecx, esi
jae 0xbb07bb
mov ecx, esi
cmp esi, ebp
jb 0xbb07c3
mov ecx, ebp
cmp dword [eax + 0x14], 0x10
jb 0xbb07cb
mov eax, dword [eax]
push ecx
push edx
push eax
call fcn.00b7a9d0
add esp, 0xc
test eax, eax
jne 0xbb07eb
cmp esi, ebp
jb 0xbb07eb
cmp esi, ebp
setne al
test eax, eax
je 0xbb0873
mov eax, dword [esp + 0x24]
inc eax
add ebx, 4
mov dword [esp + 0x24], eax
cmp eax, dword [esp + 0x18]
jl 0xbb07a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
xor edi, edi
test eax, eax
jle 0xbb0914
mov eax, dword [ecx + 8]
mov esi, dword [eax + edi*4]
mov eax, dword [esi + 0x34]
mov edx, eax
shr edx, 0xa
test dl, 1
je 0xbb090a
or eax, 0x400
cmp dword [esi + 0x2c], 0
mov dword [esi + 0x34], eax
jne 0xbb08f1
push 0x34
call fcn.00cb8a50
xor ecx, ecx
add esp, 4
cmp eax, ecx
je 0xbb08ec
mov dword [eax], vtable.ipc::proto::CommandList.0
mov dword [eax + 4], ecx
lea edx, [eax + 0x18]
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], 4
mov dword [eax + 0x2c], ecx
mov dword [eax + 0x28], ecx
mov dword [eax + 0x30], ecx
jmp 0xbb08ee
mov eax, dword [esp + 0x1c]
mov ecx, edi
call fcn.00b95880
mov eax, dword [edi + 0x34]
mov ecx, eax
shr ecx, 0xa
test cl, 1
je 0xbb08e8
or eax, 0x400
xor esi, esi
mov dword [edi + 0x34], eax
cmp dword [edi + 0x2c], esi
jne 0xbb08d4
push 0x34
call fcn.00cb8a50
add esp, 4
cmp eax, esi
je 0xbb08cf
mov dword [eax], vtable.ipc::proto::CommandList.0
mov dword [eax + 4], esi
lea edx, [eax + 0x18]
mov dword [eax + 8], edx
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], esi
mov dword [eax + 0x14], 4
mov dword [eax + 0x2c], esi
mov dword [eax + 0x28], esi
mov dword [eax + 0x30], esi
jmp 0xbb08d1
xor eax, eax
mov dword [edi + 0x2c], eax
mov eax, dword [edi + 0x2c]
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx + 0x28]
push eax
push edx
call fcn.00bb0650
add esp, 8
mov al, 1
jmp 0xbb0916
xor eax, eax
mov dword [esi + 0x2c], eax
mov esi, dword [esi + 0x2c]
mov eax, dword [esp + 0x1c]
push esi
push eax
call fcn.00bb0730
add esp, 8
test al, al
jne 0xbb08e8
mov ecx, dword [esp + 0x14]
inc edi
cmp edi, dword [ecx + 0xc]
jl 0xbb080f
xor al, al
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x18]
xor ecx, esp
call fcn.00cb8a41
add esp, 0x28
ret