Function at 0x38eb0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x84
push ebx
push ebp
mov ebp, dword [esp + 0x98]
push esi
mov esi, ecx
push edi
mov ebx, eax
xor eax, eax
mov ecx, 0x17
lea edi, [esp + 0x14]
rep stosd dword es:[edi], eax
mov ecx, dword [esi + 0xa8]
mov eax, dword [esi + ebx*4 + 0xb6c]
and ecx, 0xff
push ecx
mov dword [esp + 0x14], eax
call fcn.00028630
mov edx, dword [esi + ebx*4 + 0xb6c]
mov dword [esp + 0x14], eax
xor eax, eax
xor edi, edi
cmp ebx, edi
setne al
mov dword [esp + 0x18], edx
add eax, 1
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x10]
test eax, 0xff0000
je 0x38f47
mov ecx, dword [esi + 0xca0]
shl ebx, 4
mov dword [esp + 0x1c], 4
mov edx, dword [ecx + ebx + 0x1fc]
mov ecx, dword [esp + 0x9c]
xor eax, eax
cmp byte [ecx + 0x1a], al
mov dword [esp + 0x2c], 0x20
jmp 0x38f91
test al, al
mov dword [esp + 0x1c], 1
je 0x38f74
mov eax, dword [esp + 0x98]
xor edx, edx
cmp byte [eax + 0x1a], dl
mov dword [esp + 0x24], edi
setne dl
mov dword [esp + 0x2c], 0x30
mov dword [esp + 0x28], edx
jmp 0x38f9c
mov ecx, dword [esi + 0xca0]
shl ebx, 4
mov edx, dword [ecx + ebx + 0x1fc]
xor eax, eax
cmp dword [ebp + 0x58], edi
mov dword [esp + 0x2c], 0x30
setne al
mov dword [esp + 0x24], edx
mov dword [esp + 0x28], eax
mov ecx, dword [ebp + 4]
mov edx, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
and ecx, 0xffff
add ecx, 1
mov dword [esp + 0x40], ecx
mov ecx, dword [ebp]
and edx, 0xffff
and ecx, 0xffff
add edx, 1
and eax, 0xffff
mov dword [esp + 0x4c], ecx
movzx ecx, word [ebp + 0xe]
mov dword [esp + 0x44], edx
movzx edx, word [ebp + 6]
add eax, 1
mov dword [esp + 0x48], eax
movzx eax, word [ebp + 0xa]
add ecx, 1
add edx, 1
mov dword [esp + 0x58], ecx
mov ecx, dword [ebp + 0x10]
mov dword [esp + 0x50], edx
movzx edx, word [ebp + 2]
add eax, 1
mov dword [esp + 0x54], eax
movzx eax, word [ebp + 0x12]
and ecx, 0xffff
mov dword [esp + 0x64], edx
mov edx, dword [esi + 0xca0]
mov dword [esp + 0x60], ecx
mov ecx, dword [esi + 0xa4]
mov dword [esp + 0x5c], eax
mov dword [esp + 0x30], edi
mov dword [esp + 0x38], edi
mov dword [esp + 0x34], edi
mov dword [esp + 0x3c], edi
mov eax, dword [edx + 0x2e4]
mov dword [esp + 0x70], ecx
mov dword [esp + 0x68], eax
lea ecx, [esp + 0x90]
push ecx
mov ecx, dword [esi + 8]
push 0x20
lea edx, [esp + 0x1c]
lea eax, [esp + 0x78]
mov dword [esp + 0x88], edx
mov edx, eax
push edx
push 4
mov dword [esp + 0x20], eax
lea eax, [esp + 0x20]
push eax
push 0x80362000
push ecx
mov dword [esp + 0x90], 0x880f1000
mov dword [esp + 0x94], 0x100a000
mov dword [esp + 0xa0], edi
mov dword [esp + 0xa4], 0x5c
call sub.WIN32K.SYS_EngDeviceIoControl
cmp dword [esp + 0x8c], edi
jne 0x3915b
mov edx, dword [esp + 0x50]
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x54]
add edx, 0xffffffff
and edx, 0x7fff
add eax, 0xffffffff
shl edx, 0x10
and eax, 0x7fff
or edx, eax
mov eax, dword [esp + 0x58]
mov dword [ebp + 4], edx
mov edx, dword [esp + 0x44]
add ecx, 0xffffffff
and ecx, 0x7fff
add edx, 0xffffffff
and edx, 0x7fff
shl ecx, 0x10
or ecx, edx
mov edx, dword [esp + 0x64]
add eax, 0xffffffff
mov dword [ebp + 8], ecx
mov ecx, dword [esp + 0x48]
and eax, 0x7fff
shl eax, 0x10
add ecx, 0xffffffff
and ecx, 0x7fff
or eax, ecx
mov dword [ebp + 0xc], eax
mov eax, dword [esp + 0x4c]
and edx, 0x7fff
shl edx, 0x10
and eax, 0x7fff
or edx, eax
cmp dword [esp + 0x28], 1
mov dword [ebp], edx
jne 0x3914c
mov ecx, dword [esp + 0x5c]
mov edx, dword [esp + 0x60]
and ecx, 0x7fff
shl ecx, 0x10
and edx, 0x7fff
or ecx, edx
mov dword [ebp + 0x10], ecx
mov eax, 0x10624dd3
mul dword [esp + 0x6c]
shr edx, 6
mov dword [ebp + 0x18], edx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x84
ret 0xc