Function at 0x2c894
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0x200
push esi
call fcn.000171e8
jmp 0x2c9d5
mov edi, edi
push ebp
mov ebp, esp
push ecx
push ecx
push ebx
push esi
push edi
lea eax, [ebp - 4]
push eax
mov eax, dword [ebp + 8]
push dword [eax]
call fcn.00016bbe
mov edi, eax
xor ebx, ebx
cmp edi, ebx
je 0x2cdac
mov esi, dword [edi + 8]
cmp esi, ebx
je 0x3e035
lea ecx, [esi + 4]
mov dword [ebp - 8], ecx
call dword [sym.imp.HAL.dll_KfAcquireSpinLock]
mov ecx, dword [edi + 0x3c]
mov dl, al
call dword [sym.imp.HAL.dll_KfReleaseSpinLock]
mov edi, dword [ebp + 0xc]
mov al, byte [esi + 0x1c]
xor ecx, ecx
cmp al, 4
mov cx, word [edi]
mov dword [ebp + 0xc], ecx
jb 0x3df6e
cmp al, 6
ja 0x3df6e
test byte [esi + 0x1e], 1
jne 0x2cda5
call fcn.00017264
cmp eax, ebx
je 0x2cd9e
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
mov dword [eax + 4], edx
mov ecx, dword [ecx + 8]
mov edx, dword [ebp + 0xc]
mov dword [eax + 8], ecx
mov ecx, dword [ebp + 0x14]
mov dword [eax + 0x20], ecx
mov ecx, dword [ebp + 0x10]
mov ecx, dword [ecx]
mov dword [eax + 0x18], ecx
movzx ecx, dx
mov dword [eax + 0x14], ecx
mov cl, dl
and cl, 0x60
cmp cl, 0x40
mov dword [eax + 0x1c], edi
mov dword [eax + 0x10], ebx
mov dword [eax + 0xc], ebx
je 0x3dffa
mov dword [eax], ebx
cmp dword [esi + 0xa0], ebx
jne 0x3dfa6
mov dword [esi + 0xa0], eax
mov dword [esi + 0xa4], eax
cmp dword [eax + 0x18], ebx
je 0x3dfb7
test dl, 0x40
jne 0x3dfec
cmp dword [esi + 0x70], ebx
jne 0x2cd86
test byte [esi + 0x78], 0x80
mov dword [esi + 0x70], eax
jne 0x2cd86
lea ecx, [esi + 0xac]
mov edi, dword [ecx]
cmp edi, ebx
mov dword [esi + 0x80], fcn.00018533
je 0x2cd86
inc dword [esi + 8]
lea eax, [esi + 0xa8]
mov edx, dword [eax]
push edx
push edi
push 0x800
push esi
mov dword [ecx], ebx
mov dword [eax], ebx
call fcn.00018533
mov edi, dword [esi + 0x28]
push esi
call fcn.0001473e
cmp edi, eax
jne 0x2bf48
push 2
push esi
call fcn.00013d9a
push ebx
push 2
call fcn.0001095b
mov cl, byte [ebp - 4]
call dword [sym.imp.HAL.dll_KfLowerIrql]
mov eax, 0x103
pop edi
pop esi
pop ebx
leave
ret 0x10
mov esi, 0x103
mov dl, byte [ebp - 4]
mov ecx, dword [ebp - 8]
call dword [sym.imp.HAL.dll_KfReleaseSpinLock]
mov eax, esi
jmp 0x2c9f3
mov esi, 0xc000009a
jmp 0x2cd8b
mov esi, 0xc0000184
jmp 0x2cd8b
mov eax, 0xc000023a
jmp 0x2c9f3
cmp dword [esi + 0xa8], ebx
je 0x3df7f
test cl, 0x20
jne 0x2c8f8
cmp dword [esi + 0x110], ebx
je 0x3df90
test cl, 0x40
jne 0x2c8f8
cmp dword [esi + 0x74], ebx
je 0x2cda5
cmp al, 7
je 0x2c8f8
jmp 0x2cda5
lea ecx, [esi + 0xa4]
mov edi, dword [ecx]
mov dword [edi], eax
mov dword [ecx], eax
jmp 0x2c966
inc dword [esi + 8]
or byte [eax + 0x17], 0x80
test dh, 0x20
je 0x3dfd4
cmp dword [esi + 0xa0], eax
jne 0x3dfd4
test byte [esi + 0x78], 0x80
jne 0x3dfd4
mov dword [esi + 0x74], ebx
lea eax, [ebp - 4]
push eax
push esi
call fcn.000183aa
mov ecx, dword [ebp - 8]
call dword [sym.imp.HAL.dll_KfAcquireSpinLock]
mov byte [ebp - 4], al
jmp 0x3e027
cmp dword [esi + 0x110], ebx
je 0x2c978
jmp 0x3e018
lea ecx, [esi + 0x108]
jmp 0x3e004
mov ecx, dword [ecx]
cmp dword [ecx], ebx
jne 0x3e002
mov dword [eax], ebx
mov dword [ecx], eax
cmp dword [esi + 0x10c], ebx
je 0x2cd86
inc dword [esi + 8]
lea eax, [ebp - 4]
push eax
push ebx
push ebx
push esi
call fcn.0004e93e
push dword [ebp - 4]
push esi
call fcn.00013d9a
jmp 0x2c9ee
mov dl, byte [ebp - 4]
mov ecx, dword [edi + 0x3c]
call dword [sym.imp.HAL.dll_KfReleaseSpinLock]
mov eax, 0xc0000184
jmp 0x2c9f3