Function at 0x174b4
Capabilities:
Complete processing asynchronous io request

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
mov r12, rcx
mov rcx, r9
mov rsi, r9
mov rdi, r8
mov rbp, rdx
call fcn.00012ddc
movzx r11d, byte [rdi + 1]
xor r13d, r13d
cmp r11d, r13d
je 0x17872
lea ebx, [r13 + 1]
sub r11d, ebx
je 0x17842
sub r11d, ebx
je 0x1774c
sub r11d, ebx
je 0x17746
sub r11d, ebx
je 0x1770d
sub r11d, ebx
je 0x176fe
sub r11d, ebx
je 0x176e9
sub r11d, ebx
je 0x175a0
cmp r11d, 0x10
jne 0x17853
mov eax, dword [rsi + 0xc]
mov rcx, rsi
mov dword [rsi + 0xc], 5
mov dword [rsi + 0x10], eax
call fcn.00017958
lea rcx, [rsi + 0x48]
call qword [sym.imp.ntoskrnl.exe_ExAcquireFastMutex]
lea r11, [rsi + 0x30]
mov r9, qword [r11]
mov r10, qword [r9]
jmp 0x1758c
mov rax, qword [r9 + 8]
mov rdx, qword [r9]
mov qword [rax], rdx
mov qword [rdx + 8], rax
mov qword [r9 + 8], r9
mov qword [r9], r9
mov qword [r9 - 0x18], r13
mov byte [r9 + 0x11], bl
mov r9, r10
mov r10, qword [r10]
cmp r9, r11
jne 0x17569
lea rcx, [rsi + 0x48]
call qword [sym.imp.ntoskrnl.exe_ExReleaseFastMutex]
jmp 0x1784f
cmp dword [rdi + 8], r13d
jne 0x17853
mov rax, qword [r12 + 0x40]
cmp dword [rax + 0xc8], r13d
jle 0x175c8
lock add dword [rax + 0xc8], 0xffffffff
mov rcx, r12
call fcn.0001fd5c
lea rcx, [rsi + 0x48]
call qword [sym.imp.ntoskrnl.exe_ExAcquireFastMutex]
mov r14, qword [rbp + 0x38]
cmp r14, r13
je 0x175f3
cmp dword [rsi + 0x40], 0
mov r13d, dword [r14]
jne 0x175f3
lea rcx, [rsi + 0x48]
call qword [sym.imp.ntoskrnl.exe_ExReleaseFastMutex]
jmp 0x17853
lea r12, [rsi + 0x30]
xor ecx, ecx
mov rax, qword [r12]
jmp 0x1760a
cmp byte [rax + 0x10], 0
je 0x17607
add ecx, ebx
mov rax, qword [rax]
cmp rax, r12
jne 0x175ff
lea edi, [rcx + r13]
mov r8d, 0x62735556
mov ecx, ebx
lea edx, [rdi*8 + 0xf]
call qword [sym.imp.ntoskrnl.exe_ExAllocatePoolWithTag]
mov qword [rsp + 0x90], rax
test rax, rax
jne 0x1765f
lea rcx, [rsi + 0x48]
call qword [sym.imp.ntoskrnl.exe_ExReleaseFastMutex]
mov ebx, 0xc000009a
xor edx, edx
mov rcx, rbp
mov dword [rbp + 0x30], ebx
call qword [sym.imp.ntoskrnl.exe_IofCompleteRequest]
mov rcx, rsi
call fcn.00012e0c
jmp 0x1783b
test r13d, r13d
je 0x17680
mov r8d, r13d
lea rdx, [r14 + 8]
lea rcx, [rax + 8]
shl r8, 3
call fcn.00016020
mov rax, qword [rsp + 0x90]
mov dword [rax], edi
mov rdi, qword [r12]
movsxd rcx, r13d
cmp rdi, r12
je 0x176bc
lea r13, [rax + rcx*8 + 8]
cmp byte [rdi + 0x10], 0
je 0x176b1
mov rax, qword [rdi - 0x38]
mov qword [r13], rax
mov rcx, qword [rdi - 0x38]
call qword [sym.imp.ntoskrnl.exe_ObfReferenceObject]
add r13, 8
jmp 0x176b4
mov byte [rdi + 0x11], bl
mov rdi, qword [rdi]
cmp rdi, r12
jne 0x17693
test r14, r14
je 0x176ca
mov rcx, r14
call qword [sym.imp.ntoskrnl.exe_ExFreePool]
mov rax, qword [rsp + 0x90]
lea rcx, [rsi + 0x48]
mov qword [rbp + 0x38], rax
call qword [sym.imp.ntoskrnl.exe_ExReleaseFastMutex]
and dword [rbp + 0x30], 0
jmp 0x17853
cmp dword [rsi + 0xc], 2
jne 0x1784f
mov eax, dword [rsi + 0x10]
mov dword [rsi + 0xc], eax
jmp 0x1784f
mov eax, dword [rsi + 0xc]
mov dword [rsi + 0xc], 2
jmp 0x1784c
mov rcx, rsi
call fcn.00012e0c
lea rcx, [rsi + 0xa0]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], r13
call qword [sym.imp.ntoskrnl.exe_KeWaitForSingleObject]
mov rcx, rsi
call fcn.00012ddc
mov eax, dword [rsi + 0xc]
mov dword [rsi + 0xc], 3
jmp 0x1784c
cmp dword [rsi + 0xc], 4
jmp 0x176ed
cmp dword [rsi + 0x40], r13d
jne 0x1775c
mov eax, 0xc000000e
jmp 0x17931
cmp dword [rsi + 0xc], 5
je 0x1776a
mov rcx, rsi
call fcn.00017958
mov eax, dword [rsi + 0xc]
mov rcx, rsi
mov dword [rsi + 0xc], 6
mov dword [rsi + 0x10], eax
call fcn.00012e0c
mov rcx, rsi
call fcn.00012e0c
lea rcx, [rsi + 0x88]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], r13
call qword [sym.imp.ntoskrnl.exe_KeWaitForSingleObject]
lea rcx, [rsi + 0x48]
call qword [sym.imp.ntoskrnl.exe_ExAcquireFastMutex]
lea r13, [rsi + 0x30]
mov rax, qword [r13]
mov rdi, qword [rax]
jmp 0x177fb
lea r8, [rax - 0x38]
lea rdx, [r8 + 0x38]
mov rax, qword [rdx + 8]
mov rcx, qword [rdx]
mov qword [rax], rcx
mov qword [rcx + 8], rax
cmp dword [r8 + 0xc], 5
jne 0x177e7
mov qword [rdx + 8], rdx
mov qword [rdx], rdx
and qword [r8 + 0x20], 0
mov byte [r8 + 0x49], bl
jmp 0x177f5
dec dword [rsi + 0x40]
mov rcx, qword [r8]
mov rdx, r8
call fcn.000179b0
mov rax, rdi
mov rdi, qword [rdi]
cmp rax, r13
jne 0x177b8
lea rcx, [rsi + 0x48]
call qword [sym.imp.ntoskrnl.exe_ExReleaseFastMutex]
and dword [rbp + 0x30], 0
add byte [rbp + 0x43], bl
add qword [rbp + 0xb8], 0x48
mov rcx, qword [rsi + 0x28]
mov rdx, rbp
call qword [sym.imp.ntoskrnl.exe_IofCallDriver]
mov rcx, qword [rsi + 0x28]
mov ebx, eax
call qword [sym.imp.ntoskrnl.exe_IoDetachDevice]
mov rcx, r12
call qword [sym.imp.ntoskrnl.exe_IoDeleteDevice]
mov eax, ebx
jmp 0x17931
mov eax, dword [rsi + 0xc]
mov dword [rsi + 0xc], 4
mov dword [rsi + 0x10], eax
mov dword [rbp + 0x30], r13d
add byte [rbp + 0x43], bl
add qword [rbp + 0xb8], 0x48
mov rcx, qword [rsi + 0x28]
mov rdx, rbp
call qword [sym.imp.ntoskrnl.exe_IofCallDriver]
mov ebx, eax
jmp 0x17652
mov rdi, qword [rsi + 0x28]
lea rcx, [rsp + 0x30]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.ntoskrnl.exe_KeInitializeEvent]
mov rdx, qword [rbp + 0xb8]
mov r8d, 0x38
lea rbx, [rdx - 0x48]
mov rcx, rbx
call fcn.00016020
mov byte [rbx + 3], r13b
mov rax, qword [rbp + 0xb8]
lea rcx, [0x00012e64]
mov rdx, rbp
mov byte [rax - 0x45], 0xe0
mov qword [rax - 0x10], rcx
lea rcx, [rsp + 0x30]
mov qword [rax - 8], rcx
mov rcx, rdi
call qword [sym.imp.ntoskrnl.exe_IofCallDriver]
mov edi, eax
cmp eax, 0x103
jne 0x178f2
lea rcx, [rsp + 0x30]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], r13
call qword [sym.imp.ntoskrnl.exe_KeWaitForSingleObject]
mov edi, dword [rbp + 0x30]
cmp edi, r13d
jl 0x17919
mov ebx, 1
lea rcx, [rsi + 0xb8]
mov dl, bl
call qword [sym.imp.ntoskrnl.exe_IoSetDeviceInterfaceState]
mov ecx, dword [rsi + 0xc]
mov dword [rsi + 0x1c], ebx
mov dword [rsi + 0x10], ecx
mov edi, eax
mov dword [rsi + 0xc], ebx
xor edx, edx
mov rcx, rbp
mov dword [rbp + 0x30], edi
call qword [sym.imp.ntoskrnl.exe_IofCompleteRequest]
mov rcx, rsi
call fcn.00012e0c
mov eax, edi
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret