Function at 0x409b20
Capabilities:
Complete processing asynchronous io request

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa4
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 0xc]
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, dword [ebp + 0x10]
mov dword [ebp - 0xa4], edi
call fcn.00401baa
test al, al
jne 0x409969
mov ecx, edi
jmp 0x409afb
lea eax, [ebx + 4]
push 0x4b
pop edx
test eax, eax
je 0x409986
mov eax, dword [eax + 4]
test eax, eax
je 0x409986
mov edi, dword [eax + 0x14]
test edi, edi
je 0x409986
add edi, 4
jmp 0x4099a6
push edx
lea eax, [ebp - 0x50]
push 0
push eax
call sub.ntoskrnl.exe_memset
add esp, 0xc
lea edi, [ebp - 0x50]
push 0xe
pop eax
push 2
mov word [ebp - 0x50], ax
pop eax
mov word [ebp - 0x4e], ax
mov ecx, 0x40e338
call dword [sym.imp.HAL.dll_KfAcquireSpinLock]
mov byte [ebp - 0x95], al
mov eax, dword [ebx + 0x18]
cdq
push edx
push eax
push dword [0x40e360]
call fcn.00405666
test eax, eax
je 0x409ae4
push 0x4b
lea ebx, [eax - 8]
movzx eax, word [edi]
pop ecx
add edi, 2
cmp ax, cx
ja 0x4099f2
add eax, 2
push eax
lea eax, [ebx + 0x7b]
push edi
push eax
call sub.ntoskrnl.exe_memcpy
add esp, 0xc
push edi
push 2
pop eax
push eax
push ebx
call fcn.00405b9c
mov dword [ebx + 0x24], eax
test al, 0x10
je 0x409ae4
mov eax, dword [esi + 0x60]
or byte [eax + 3], 1
lea eax, [ebx + 0x3ac]
mov ecx, eax
mov dword [ebp - 0x9c], eax
call dword [sym.imp.HAL.dll_KfAcquireSpinLock]
lea ecx, [ebx + 0x1a4]
mov edx, dword [ecx + 4]
lea edi, [esi + 0x58]
cmp dword [edx], ecx
jne 0x409b1b
mov dword [edi], ecx
mov dword [edi + 4], edx
mov dword [edx], edi
mov dl, al
mov dword [ecx + 4], edi
lea ecx, [ebx + 0x3ac]
call dword [sym.imp.HAL.dll_KfReleaseSpinLock]
lea ecx, [esi + 0x38]
mov eax, 0x409b20
xchg dword [ecx], eax
mov dword [ebp - 0xa0], eax
lea eax, [ebp - 0x94]
push ebx
push eax
mov dword [esi + 0x18], 0x103
call fcn.00409bc8
push 0x42
lea eax, [ebp - 0x94]
push eax
push dword [ebx + 0x1c]
push dword [ebx + 0x18]
push 0x14
call fcn.00403980
test eax, eax
js 0x409aa5
mov dl, byte [ebp - 0x95]
mov ecx, 0x40e338
call dword [sym.imp.HAL.dll_KfReleaseSpinLock]
mov eax, 0x103
jmp 0x409b0a
mov ebx, dword [ebp - 0x9c]
mov ecx, ebx
call dword [sym.imp.HAL.dll_KfAcquireSpinLock]
mov ecx, dword [edi]
cmp dword [ecx + 4], edi
jne 0x409b1b
mov edx, dword [edi + 4]
cmp dword [edx], edi
jne 0x409b1b
mov dword [edx], ecx
mov dword [ecx + 4], edx
mov dl, al
mov ecx, ebx
mov dword [edi + 4], edi
mov dword [edi], edi
call dword [sym.imp.HAL.dll_KfReleaseSpinLock]
mov eax, dword [ebp - 0xa0]
lea ecx, [esi + 0x38]
xchg dword [ecx], eax
and dword [esi + 0x18], 0
mov dl, byte [ebp - 0x95]
mov ecx, 0x40e338
call dword [sym.imp.HAL.dll_KfReleaseSpinLock]
mov ecx, dword [ebp - 0xa4]
inc byte [esi + 0x23]
mov edx, esi
add dword [esi + 0x60], 0x24
call dword [sym.imp.ntoskrnl.exe_IofCallDriver]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0040aeb4
leave
ret 0xc
push 3
pop ecx
int 0x29
push ebp
mov ebp, esp
push ecx
push ebx
push esi
push edi
mov edi, dword [ebp + 0xc]
mov ecx, 0x40e338
xor bl, bl
mov esi, dword [edi + 0x60]
call dword [sym.imp.HAL.dll_KfAcquireSpinLock]
mov byte [ebp - 1], al
mov eax, dword [esi + 0x18]
cdq
push edx
push eax
push dword [0x40e360]
call fcn.00405666
test eax, eax
je 0x409b8d
lea esi, [eax + 0x3a4]
mov ecx, esi
call dword [sym.imp.HAL.dll_KfAcquireSpinLock]
lea ecx, [edi + 0x58]
mov bh, al
mov edx, dword [ecx]
cmp edx, ecx
je 0x409b83
cmp dword [edx + 4], ecx
jne 0x409bc2
mov eax, dword [ecx + 4]
cmp dword [eax], ecx
jne 0x409bc2
mov dword [eax], edx
inc bl
mov dword [edx + 4], eax
mov dword [ecx + 4], ecx
mov dword [ecx], ecx
mov dl, bh
mov ecx, esi
call dword [sym.imp.HAL.dll_KfReleaseSpinLock]
mov dl, byte [ebp - 1]
mov ecx, 0x40e338
call dword [sym.imp.HAL.dll_KfReleaseSpinLock]
movzx eax, byte [edi + 0x25]
push eax
call dword [sym.imp.ntoskrnl.exe_IoReleaseCancelSpinLock]
test bl, bl
je 0x409bbb
xor dl, dl
mov dword [edi + 0x18], 0xc0000120
mov ecx, edi
call dword [sym.imp.ntoskrnl.exe_IofCompleteRequest]
pop edi
pop esi
pop ebx
leave
ret 8
push 3
pop ecx
int 0x29
int3