Function at 0x32c78
Capabilities:
Complete processing asynchronous io request
Enumerate pe sections

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
mov r14, qword [rcx + 0x40]
xor r15d, r15d
mov r12, r8
mov r8b, byte [r8 + 1]
mov rbp, rdx
mov dword [rax + 0x20], r15d
cmp r8b, 3
jne 0x32cc2
mov rax, qword [r12 + 0x30]
cmp qword [rax + 0x20], 2
jne 0x32cc2
mov r8, r12
call fcn.00033134
jmp 0x32f23
cmp r8b, 9
je 0x32cd8
cmp r8b, 0xa
jne 0x32eae
cmp r8b, 9
jne 0x32ce7
mov rax, qword [r12 + 0x10]
mov rdx, qword [rax + 0x28]
add rdx, 4
jmp 0x32cef
mov rdx, qword [rsp + 0x90]
cmp r8b, 0xa
jne 0x32d02
mov rax, qword [r12 + 0x10]
mov rdx, qword [rax + 0x28]
add rdx, 4
cmp rdx, r15
je 0x32eae
movzx eax, word [rdx + 2]
cmp eax, 2
je 0x32dda
cmp eax, 0x17
jne 0x32dc8
movzx r13d, word [rdx + 4]
mov rax, cr8
cmp al, r15b
movzx eax, word [rdx + 0x18]
movzx esi, r13w
ror ax, 8
mov dword [rsp + 0x48], esi
movzx edi, ax
movzx eax, word [rdx + 0x16]
ror ax, 8
mov dword [rsp + 0x40], edi
movzx ebx, ax
movzx eax, word [rdx + 0x14]
ror ax, 8
mov dword [rsp + 0x38], ebx
movzx r11d, ax
movzx eax, word [rdx + 0x12]
ror ax, 8
mov dword [rsp + 0x30], r11d
movzx r10d, ax
movzx eax, word [rdx + 0x10]
ror ax, 8
mov dword [rsp + 0x28], r10d
movzx ecx, ax
movzx eax, word [rdx + 0xe]
ror ax, 8
mov dword [rsp + 0x20], ecx
lea rcx, [0x00095ab0]
movzx r9d, ax
movzx eax, word [rdx + 0xc]
ror ax, 8
movzx r8d, ax
movzx eax, word [rdx + 0xa]
ror ax, 8
movzx edx, ax
jne 0x32db7
call fcn.0004505c
jmp 0x32dbc
call fcn.00045224
mov ebx, dword [rsp + 0xa0]
jmp 0x32e54
mov ebx, dword [rsp + 0xa0]
mov r13w, word [rsp + 0x90]
jmp 0x32e54
movzx ecx, word [rdx + 4]
mov ebx, dword [rdx + 6]
mov word [rsp + 0x90], r15w
movzx eax, cx
mov byte [rsp + 0x91], cl
mov dword [rsp + 0xa0], ebx
shr ax, 8
mov byte [rsp + 0x90], al
mov r13w, word [rsp + 0x90]
mov rax, cr8
movzx r9d, byte [rsp + 0xa1]
movzx r8d, byte [rsp + 0xa2]
movzx edx, byte [rsp + 0xa3]
movzx ecx, bl
cmp al, r15b
movzx eax, r13w
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], ecx
lea rcx, [0x00095a80]
jne 0x32e4f
call fcn.0004505c
jmp 0x32e54
call fcn.00045224
lea r9, [rsp + 0xa8]
mov ecx, 2
movzx r8d, r13w
mov edx, ebx
call fcn.000338a4
cmp al, r15b
je 0x32e91
mov ebx, dword [rsp + 0xa8]
xor edx, edx
mov rcx, rbp
mov dword [rbp + 0x30], ebx
mov qword [rbp + 0x38], r15
call qword [sym.imp.ntoskrnl.exe_IofCompleteRequest]
mov eax, ebx
jmp 0x32f23
lea r9, [rsp + 0xa8]
mov ecx, 2
movzx r8d, r13w
mov edx, ebx
call fcn.00033594
cmp al, r15b
jne 0x32e71
cmp byte [r12 + 1], 0xb
jne 0x32f0c
mov rcx, qword [r12 + 0x30]
cmp qword [rcx + 0x20], 1
jne 0x32f0c
call fcn.00032c04
cmp rax, r15
je 0x32f0c
cmp dword [r12 + 8], 4
jne 0x32f0c
mov rcx, qword [r12 + 0x30]
lea rdx, [rax + 0x60]
mov qword [rax + 8], rcx
mov rax, qword [r12 + 0x30]
mov qword [rdx], rax
mov rax, qword [r12 + 0x10]
mov qword [rdx + 8], rax
mov rax, qword [r12 + 0x18]
mov qword [rdx + 0x10], rax
lea rax, [0x0003288c]
mov qword [r12 + 0x18], rdx
mov qword [r12 + 0x10], rax
inc byte [rbp + 0x43]
add qword [rbp + 0xb8], 0x48
mov rcx, qword [r14]
mov rdx, rbp
call qword [sym.imp.ntoskrnl.exe_IofCallDriver]
mov rbx, qword [rsp + 0x98]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret