Function at 0xc00730
Capabilities:
Access peb ldr_data

Disassembly:
push 0xffffffffffffffff
push 0xd798f0
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
mov eax, dword [0xde16ec]
xor eax, esp
mov dword [esp + 0x18], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0xde16ec]
xor eax, esp
push eax
lea eax, [esp + 0x30]
mov dword fs:[0], eax
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x40]
xor esi, esi
mov dword [esp + 0x20], esi
mov eax, dword [ecx + 0xc]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x24], esi
mov dword [esp + 0x18], eax
cmp eax, esi
jle 0xc00805
mov edx, dword [edx + 8]
mov eax, dword [edx + 0x14]
mov ebp, dword [edx + 0x10]
mov ebx, dword [ecx + 8]
mov dword [esp + 0x28], edx
mov dword [esp + 0x20], eax
jmp 0xc007a4
mov edx, dword [esp + 0x28]
cmp dword [esp + 0x20], 0x10
mov edi, dword [ebx]
mov eax, dword [edi + 8]
jb 0xc007b2
mov edx, dword [edx]
mov esi, dword [eax + 0x10]
mov ecx, esi
cmp ecx, esi
jae 0xc007bb
mov ecx, esi
cmp esi, ebp
jb 0xc007c3
mov ecx, ebp
cmp dword [eax + 0x14], 0x10
jb 0xc007cb
mov eax, dword [eax]
push ecx
push edx
push eax
call fcn.00bca9d0
add esp, 0xc
test eax, eax
jne 0xc007eb
cmp esi, ebp
jb 0xc007eb
cmp esi, ebp
setne al
test eax, eax
je 0xc00873
mov eax, dword [esp + 0x24]
inc eax
add ebx, 4
mov dword [esp + 0x24], eax
cmp eax, dword [esp + 0x18]
jl 0xc007a0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
xor edi, edi
test eax, eax
jle 0xc00914
mov eax, dword [ecx + 8]
mov esi, dword [eax + edi*4]
mov eax, dword [esi + 0x34]
mov edx, eax
shr edx, 0xa
test dl, 1
je 0xc0090a
or eax, 0x400
cmp dword [esi + 0x2c], 0
mov dword [esi + 0x34], eax
jne 0xc008f1
push 0x34
call fcn.00d08a50
xor ecx, ecx
add esp, 4
cmp eax, ecx
je 0xc008ec
mov dword [eax], vtable.ipc::proto::CommandList.0
mov dword [eax + 4], ecx
lea edx, [eax + 0x18]
mov dword [eax + 8], edx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], 4
mov dword [eax + 0x2c], ecx
mov dword [eax + 0x28], ecx
mov dword [eax + 0x30], ecx
jmp 0xc008ee
mov eax, dword [esp + 0x1c]
mov ecx, edi
call fcn.00be5880
mov eax, dword [edi + 0x34]
mov ecx, eax
shr ecx, 0xa
test cl, 1
je 0xc008e8
or eax, 0x400
xor esi, esi
mov dword [edi + 0x34], eax
cmp dword [edi + 0x2c], esi
jne 0xc008d4
push 0x34
call fcn.00d08a50
add esp, 4
cmp eax, esi
je 0xc008cf
mov dword [eax], vtable.ipc::proto::CommandList.0
mov dword [eax + 4], esi
lea edx, [eax + 0x18]
mov dword [eax + 8], edx
mov dword [eax + 0xc], esi
mov dword [eax + 0x10], esi
mov dword [eax + 0x14], 4
mov dword [eax + 0x2c], esi
mov dword [eax + 0x28], esi
mov dword [eax + 0x30], esi
jmp 0xc008d1
xor eax, eax
mov dword [edi + 0x2c], eax
mov eax, dword [edi + 0x2c]
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx + 0x28]
push eax
push edx
call fcn.00c00650
add esp, 8
mov al, 1
jmp 0xc00916
xor eax, eax
mov dword [esi + 0x2c], eax
mov esi, dword [esi + 0x2c]
mov eax, dword [esp + 0x1c]
push esi
push eax
call fcn.00c00730
add esp, 8
test al, al
jne 0xc008e8
mov ecx, dword [esp + 0x14]
inc edi
cmp edi, dword [ecx + 0xc]
jl 0xc0080f
xor al, al
mov ecx, dword [esp + 0x30]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x18]
xor ecx, esp
call fcn.00d08a41
add esp, 0x28
ret