Function at 0x1d8dd
Capabilities:
Complete processing asynchronous io request

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push esi
mov esi, dword [ebp + 0xc]
mov eax, dword [esi + 0x28]
mov ebx, dword [eax + 0x18]
add ebx, dword [eax + 0x10]
push edi
mov edi, dword [esi + 0x10]
lea eax, [ebp - 0xc]
push eax
push ebx
lea eax, [ebp - 4]
push eax
push dword [ebp + 0x18]
xor ecx, ecx
push dword [ebp + 0x14]
mov dword [ebp - 4], ecx
push dword [ebp + 0x10]
mov dword [ebp - 8], ebx
push esi
push ecx
mov dword [ebp - 0xc], ecx
mov dword [edi + 0x54], ecx
call fcn.00011166
cmp dword [esi + 0x10], 0
je 0x23c2a
push dword [ebx]
call fcn.00011270
mov ecx, dword [esi + 0x54]
mov edx, dword [ebp - 4]
add eax, 4
cmp edx, ecx
ja 0x1dbed
movzx ebx, dx
sub ecx, ebx
mov dword [esi + 0x54], ecx
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x1dbaa
push dword [ebp + 0x18]
mov eax, dword [edi + 0x50]
push dword [ebp + 0x14]
and dword [edi + 0x50], 0
mov dword [ebp + 0x10], eax
lea eax, [ebp - 4]
push eax
push dword [ebp - 8]
push ebx
push esi
call fcn.00011467
mov ecx, dword [ebx + 0x60]
mov eax, dword [ebp + 0x14]
mov edx, dword [ebp - 4]
sub ecx, 0x20
mov dword [ebp - 0xc], ecx
mov ecx, dword [ecx]
sub eax, edx
cmp ecx, eax
mov dword [ebp + 0x18], ecx
jbe 0x23c37
lea ecx, [ebp + 0xc]
push ecx
push 0
push dword [ebx + 4]
push eax
push edx
push dword [ebp - 8]
call sub.TDI.SYS_TdiCopyBufferToMdl
mov eax, dword [ebx + 4]
mov ecx, dword [ebp + 0x14]
mov dword [esi + 0x2c], eax
mov eax, dword [ebx + 4]
mov dword [edi + 0x40], eax
xor edx, edx
mov dword [edi + 0x3c], edx
mov eax, dword [ebp + 0xc]
add dword [edi + 0x54], eax
mov eax, dword [ebp + 0x1c]
mov dword [eax], ecx
mov eax, dword [ebp + 0x18]
sub eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x10]
cmp eax, ecx
mov dword [esi + 0x54], edx
mov dword [edi + 0x50], ecx
jb 0x1ddfd
mov dword [edi + 0x50], edx
mov ecx, dword [ebp - 0xc]
mov word [esi + 0x1c], 2
mov dword [esi + 0x50], 0x2a198
mov dword [esi + 0x58], edx
mov dword [ecx], eax
mov eax, dword [ebp + 0xc]
sub dword [edi + 0x4c], eax
push dword [ebp + 0xc]
push ebx
push edi
call fcn.0001de9f
cmp dword [ebp + 8], 0
mov eax, dword [ebp + 0x24]
mov dword [eax], ebx
jne 0x1df32
lea edi, [esi + 0x5c]
mov ecx, edi
call dword [sym.imp.ntoskrnl.exe_KefReleaseSpinLockFromDpcLevel]
push dword [esi + 0x30]
call dword [sym.imp.ntoskrnl.exe_IoGetRelatedDeviceObject]
mov edx, ebx
mov ecx, eax
call dword [sym.imp.ntoskrnl.exe_IofCallDriver]
mov ecx, edi
call dword [sym.imp.ntoskrnl.exe_KefAcquireSpinLockAtDpcLevel]
mov eax, 0xc0000016
pop edi
pop esi
pop ebx
leave
ret 0x20
mov ebx, dword [ebp + 0x1c]
mov dword [ebx], edx
lea ecx, [edx - 4]
add dword [esi + 0x40], ecx
adc dword [esi + 0x44], 0
cmp edx, dword [ebp + 0x14]
ja 0x23cd0
cmp word [esi + 0x1c], 3
je 0x1dbe6
cmp edx, eax
jne 0x1dbf6
xor eax, eax
cmp dword [edi + 0x50], eax
jne 0x23cf3
mov word [esi + 0x1c], ax
mov dword [esi + 0x50], 0x2a198
mov dword [esi + 0x58], eax
xor eax, eax
jmp 0x1da3a
and dword [esi + 0x54], 0
jmp 0x1d948
cmp edx, dword [ebp + 0x18]
jne 0x23d5d
jmp 0x1dbe6
sub ecx, eax
mov dword [edi + 0x50], ecx
jmp 0x1d9db
dec byte [ebx + 0x23]
add dword [ebx + 0x60], 0xffffffdc
jmp 0x1da35
mov eax, dword [ebp + 0x1c]
mov ecx, dword [ebp + 0x18]
mov dword [eax], ecx
jmp 0x1dbe6
mov eax, dword [ebp + 0x10]
mov dword [edi + 0x50], eax
mov eax, dword [ebx + 4]
test eax, eax
je 0x23c61
test ecx, ecx
je 0x23c61
lea edi, [ebp + 0xc]
push edi
push 0
push eax
push ecx
push edx
push dword [ebp - 8]
call sub.TDI.SYS_TdiCopyBufferToMdl
mov eax, dword [ebp + 0xc]
mov edx, dword [ebp - 4]
jmp 0x23c66
xor eax, eax
mov dword [ebp + 0xc], eax
mov edi, dword [ebp + 0x1c]
movzx ecx, ax
sub dword [esi + 0x54], ecx
lea ecx, [eax + edx]
mov dword [edi], ecx
mov dword [ebx + 0x1c], eax
xor eax, eax
mov dword [ebx + 0x18], eax
dec byte [ebx + 0x23]
add dword [ebx + 0x60], 0xffffffdc
cmp dword [esi + 0x54], eax
je 0x23c96
mov eax, dword [ebp + 0xc]
add eax, edx
push eax
push esi
call fcn.0002a352
jmp 0x23ca4
mov word [esi + 0x1c], ax
mov dword [esi + 0x50], 0x2a198
mov dword [esi + 0x58], eax
lea edi, [esi + 0x5c]
mov ecx, edi
call dword [sym.imp.ntoskrnl.exe_KefReleaseSpinLockFromDpcLevel]
mov dl, 2
mov ecx, ebx
call dword [sym.imp.ntoskrnl.exe_IofCompleteRequest]
mov ecx, edi
call dword [sym.imp.ntoskrnl.exe_KefAcquireSpinLockAtDpcLevel]
xor eax, eax
add esi, 0xc
inc eax
lock xadd dword [esi], eax
jmp 0x1dbe6
lea edi, [esi + 0x5c]
mov ecx, edi
call dword [sym.imp.ntoskrnl.exe_KefReleaseSpinLockFromDpcLevel]
push esi
call fcn.0002a474
mov ecx, edi
call dword [sym.imp.ntoskrnl.exe_KefAcquireSpinLockAtDpcLevel]
mov eax, dword [ebp + 0x18]
mov dword [ebx], eax
jmp 0x1dbe6
push 0x7374624e
push 0x20
push eax
call dword [sym.imp.ntoskrnl.exe_ExAllocatePoolWithTag]
mov edi, eax
test edi, edi
je 0x23d3f
push esi
push 0x1d8b6
push edi
call dword [sym.imp.ntoskrnl.exe_KeInitializeDpc]
and dword [esi + 0x58], 0
xor eax, eax
mov word [esi + 0x1c], 1
mov dword [esi + 0x50], 0x1df9b
add esi, 0xc
inc eax
lock xadd dword [esi], eax
push 4
push 0
push edi
call dword [sym.imp.ntoskrnl.exe_KeInsertQueueDpc]
jmp 0x1dbe6
lea edi, [esi + 0x5c]
mov ecx, edi
call dword [sym.imp.ntoskrnl.exe_KefReleaseSpinLockFromDpcLevel]
push esi
call fcn.0002a474
mov ecx, edi
call dword [sym.imp.ntoskrnl.exe_KefAcquireSpinLockAtDpcLevel]
jmp 0x1dbe6
mov ebx, dword [edi + 0x50]
push eax
push edx
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push esi
call fcn.0002484a
test edx, edx
mov dword [edi + 0x50], ebx
je 0x1dbe6
push edx
push esi
call fcn.0002a352
jmp 0x1dbe6