Function at 0x1238a
Capabilities:
Complete processing asynchronous io request

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x38
mov eax, dword [0x160b4]
and dword [ebp - 0x2c], 0
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov eax, dword [eax + 0x28]
push ebx
mov ebx, dword [ebp + 0xc]
push esi
mov esi, dword [ebx + 0x60]
push edi
mov dword [ebp - 0x30], eax
mov eax, dword [ebx + 0xc]
lea ecx, [esi - 0x24]
mov dword [ebp - 0x38], eax
mov byte [ebp - 0x24], 0
xor eax, eax
mov dword [ebp - 0x34], ecx
push 7
pop ecx
lea edi, [ebp - 0x23]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov al, byte [esi]
test al, al
mov edi, dword [esi + 0x18]
je 0x123e4
cmp al, 2
je 0x123e4
cmp al, 6
jne 0x123ea
cmp dword [esi + 8], 0xa
jne 0x123ea
push edi
call fcn.000137d6
mov eax, dword [ebp - 0x30]
cmp byte [eax + 0xc], 0
je 0x12642
call dword [sym.imp.ntoskrnl.exe_PsGetCurrentProcessId]
cmp eax, dword [0x160f0]
je 0x12642
movzx eax, byte [esi]
sub eax, 0
je 0x125d6
sub eax, 3
je 0x125b4
dec eax
je 0x12529
dec eax
dec eax
je 0x12478
sub eax, 0xc
jne 0x12642
call fcn.00012d56
test al, al
je 0x12642
push dword [ebp - 0x30]
push edi
push 1
call fcn.00014480
test eax, eax
mov dword [ebp - 0x2c], eax
je 0x12642
push eax
call fcn.000130b2
test al, al
je 0x12642
push dword [ebp - 0x2c]
call fcn.0001310a
test al, al
je 0x12642
jmp 0x12504
mov al, byte [esi + 8]
mov byte [ebp - 0x25], al
call fcn.00014978
cmp al, 1
jne 0x124a9
cmp byte [ebp - 0x25], 0xa
jne 0x124a9
push dword [ebp - 0x30]
push edi
push 0
call fcn.00014480
push eax
push dword [ebp - 0x38]
mov dword [ebp - 0x2c], eax
call fcn.000144d4
jmp 0x1263a
cmp byte [0x160e5], 1
jne 0x12642
cmp byte [ebp - 0x25], 0xd
je 0x124c6
cmp byte [ebp - 0x25], 0xa
jne 0x12642
push dword [ebp - 0x30]
push edi
push 0
call fcn.00014480
push eax
mov dword [ebp - 0x2c], eax
call fcn.00014b42
test al, al
je 0x12642
lea eax, [ebp - 0x24]
push eax
call fcn.00012ac4
test al, al
je 0x12642
lea eax, [ebp - 0x24]
push eax
call fcn.00014c38
test al, al
jne 0x12642
and dword [ebx + 0x1c], 0
mov esi, 0xc0000022
xor dl, dl
mov ecx, ebx
mov dword [ebx + 0x18], esi
call dword [sym.imp.ntoskrnl.exe_IofCompleteRequest]
push dword [ebp - 0x2c]
call fcn.000144b2
mov eax, esi
jmp 0x12675
cmp byte [0x160e4], 0
jne 0x1253f
call fcn.00012d56
test al, al
je 0x12642
push dword [ebp - 0x30]
push edi
push 0
call fcn.00014480
xor edi, edi
cmp eax, edi
mov dword [ebp - 0x2c], eax
je 0x12642
call fcn.00012d56
test al, al
je 0x12571
push dword [ebp - 0x2c]
call fcn.000130b2
test al, al
je 0x12571
mov dword [ebx + 0x1c], edi
jmp 0x12508
cmp byte [0x160e4], 0
je 0x12642
mov eax, dword [ebx + 4]
cmp eax, edi
je 0x125a0
test byte [eax + 6], 5
je 0x12590
mov eax, dword [eax + 0xc]
jmp 0x125a3
push 0x10
push edi
push edi
push 1
push edi
push eax
call dword [sym.imp.ntoskrnl.exe_MmMapLockedPagesSpecifyCache]
jmp 0x125a3
mov eax, dword [ebx + 0x3c]
push dword [esi + 4]
push eax
push dword [ebp - 0x2c]
call fcn.00011006
jmp 0x12642
call fcn.00012d56
test al, al
je 0x12642
push dword [ebp - 0x30]
push edi
push 0
call fcn.00014480
mov dword [ebp - 0x2c], eax
test eax, eax
jmp 0x1245d
mov al, byte [esi + 0xb]
mov byte [ebp - 0x25], al
call fcn.00012d56
test al, al
jne 0x125fa
call fcn.00014978
test al, al
je 0x12642
cmp byte [ebp - 0x25], 2
je 0x125fa
cmp byte [ebp - 0x25], 5
jne 0x12642
push dword [ebp - 0x30]
push edi
push 1
call fcn.00014480
test eax, eax
mov dword [ebp - 0x2c], eax
je 0x12642
call fcn.00012d56
test al, al
je 0x12625
push dword [ebp - 0x2c]
call fcn.0001310a
test al, al
jne 0x12504
call fcn.00014978
test al, al
je 0x12642
cmp byte [ebp - 0x25], 2
je 0x1263a
cmp byte [ebp - 0x25], 5
jne 0x12642
push dword [ebp - 0x2c]
call fcn.000149ea
push dword [ebp - 0x2c]
call fcn.000144b2
mov edi, dword [ebp - 0x34]
push 9
pop ecx
rep movsd dword es:[edi], dword [esi]
mov eax, dword [ebx + 0x60]
and dword [eax - 4], 0
sub eax, 0x24
mov dword [eax + 0x1c], 0x12368
mov byte [eax + 3], 0
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax + 4]
mov edx, ebx
call dword [sym.imp.ntoskrnl.exe_IofCallDriver]
mov ecx, dword [ebp - 4]
pop edi
pop esi
pop ebx
call fcn.00014d59
leave
ret 8