Function at 0x2c8c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0x200
push esi
call fcn.000171e8
jmp 0x2ca01
mov edi, edi
push ebp
mov ebp, esp
push ecx
push ecx
push ebx
push esi
push edi
lea eax, [ebp - 4]
push eax
mov eax, dword [ebp + 8]
push dword [eax]
call fcn.00016bbe
mov edi, eax
xor ebx, ebx
cmp edi, ebx
je 0x2cdd8
mov esi, dword [edi + 8]
cmp esi, ebx
je 0x3dfb5
lea ecx, [esi + 4]
mov dword [ebp - 8], ecx
call dword [sym.imp.HAL.dll_KfAcquireSpinLock]
mov ecx, dword [edi + 0x3c]
mov dl, al
call dword [sym.imp.HAL.dll_KfReleaseSpinLock]
mov edi, dword [ebp + 0xc]
mov al, byte [esi + 0x1c]
xor ecx, ecx
cmp al, 4
mov cx, word [edi]
mov dword [ebp + 0xc], ecx
jb 0x3deee
cmp al, 6
ja 0x3deee
test byte [esi + 0x1e], 1
jne 0x2cdd1
call fcn.00017264
cmp eax, ebx
je 0x2cdca
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
mov dword [eax + 4], edx
mov ecx, dword [ecx + 8]
mov edx, dword [ebp + 0xc]
mov dword [eax + 8], ecx
mov ecx, dword [ebp + 0x14]
mov dword [eax + 0x20], ecx
mov ecx, dword [ebp + 0x10]
mov ecx, dword [ecx]
mov dword [eax + 0x18], ecx
movzx ecx, dx
mov dword [eax + 0x14], ecx
mov cl, dl
and cl, 0x60
cmp cl, 0x40
mov dword [eax + 0x1c], edi
mov dword [eax + 0x10], ebx
mov dword [eax + 0xc], ebx
je 0x3df7a
mov dword [eax], ebx
cmp dword [esi + 0xa0], ebx
jne 0x3df26
mov dword [esi + 0xa0], eax
mov dword [esi + 0xa4], eax
cmp dword [eax + 0x18], ebx
je 0x3df37
test dl, 0x40
jne 0x3df6c
cmp dword [esi + 0x70], ebx
jne 0x2cdb2
test byte [esi + 0x78], 0x80
mov dword [esi + 0x70], eax
jne 0x2cdb2
lea ecx, [esi + 0xac]
mov edi, dword [ecx]
cmp edi, ebx
mov dword [esi + 0x80], fcn.00018530
je 0x2cdb2
inc dword [esi + 8]
lea eax, [esi + 0xa8]
mov edx, dword [eax]
push edx
push edi
push 0x800
push esi
mov dword [ecx], ebx
mov dword [eax], ebx
call fcn.00018530
mov edi, dword [esi + 0x28]
push esi
call fcn.0001473e
cmp edi, eax
jne 0x2bf74
push 2
push esi
call fcn.00013d9a
push ebx
push 2
call fcn.0001095b
mov cl, byte [ebp - 4]
call dword [sym.imp.HAL.dll_KfLowerIrql]
mov eax, 0x103
pop edi
pop esi
pop ebx
leave
ret 0x10
mov esi, 0x103
mov dl, byte [ebp - 4]
mov ecx, dword [ebp - 8]
call dword [sym.imp.HAL.dll_KfReleaseSpinLock]
mov eax, esi
jmp 0x2ca1f
mov esi, 0xc000009a
jmp 0x2cdb7
mov esi, 0xc0000184
jmp 0x2cdb7
mov eax, 0xc000023a
jmp 0x2ca1f
cmp dword [esi + 0xa8], ebx
je 0x3deff
test cl, 0x20
jne 0x2c924
cmp dword [esi + 0x110], ebx
je 0x3df10
test cl, 0x40
jne 0x2c924
cmp dword [esi + 0x74], ebx
je 0x2cdd1
cmp al, 7
je 0x2c924
jmp 0x2cdd1
lea ecx, [esi + 0xa4]
mov edi, dword [ecx]
mov dword [edi], eax
mov dword [ecx], eax
jmp 0x2c992
inc dword [esi + 8]
or byte [eax + 0x17], 0x80
test dh, 0x20
je 0x3df54
cmp dword [esi + 0xa0], eax
jne 0x3df54
test byte [esi + 0x78], 0x80
jne 0x3df54
mov dword [esi + 0x74], ebx
lea eax, [ebp - 4]
push eax
push esi
call fcn.000183a7
mov ecx, dword [ebp - 8]
call dword [sym.imp.HAL.dll_KfAcquireSpinLock]
mov byte [ebp - 4], al
jmp 0x3dfa7
cmp dword [esi + 0x110], ebx
je 0x2c9a4
jmp 0x3df98
lea ecx, [esi + 0x108]
jmp 0x3df84
mov ecx, dword [ecx]
cmp dword [ecx], ebx
jne 0x3df82
mov dword [eax], ebx
mov dword [ecx], eax
cmp dword [esi + 0x10c], ebx
je 0x2cdb2
inc dword [esi + 8]
lea eax, [ebp - 4]
push eax
push ebx
push ebx
push esi
call fcn.0004e8be
push dword [ebp - 4]
push esi
call fcn.00013d9a
jmp 0x2ca1a
mov dl, byte [ebp - 4]
mov ecx, dword [edi + 0x3c]
call dword [sym.imp.HAL.dll_KfReleaseSpinLock]
mov eax, 0xc0000184
jmp 0x2ca1f