Function at 0x16114
Capabilities:
Complete processing asynchronous io request

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
mov r13, rcx
mov rcx, r9
mov rsi, r9
mov rdi, r8
mov rbp, rdx
call fcn.00010308
movzx r11d, byte [rdi + 1]
xor r12d, r12d
cmp r11d, r12d
je 0x164d5
lea ebx, [r12 + 1]
sub r11d, ebx
je 0x164a5
sub r11d, ebx
je 0x163b0
sub r11d, ebx
je 0x163aa
sub r11d, ebx
je 0x16371
sub r11d, ebx
je 0x16362
sub r11d, ebx
je 0x1634d
sub r11d, ebx
je 0x16201
cmp r11d, 0x10
jne 0x164b6
mov eax, dword [rsi + 0xc]
mov rcx, rsi
mov dword [rsi + 0xc], 5
mov dword [rsi + 0x10], eax
call fcn.000165b8
lea rcx, [rsi + 0x48]
call qword [sym.imp.ntoskrnl.exe_ExAcquireFastMutex]
lea r11, [rsi + 0x30]
mov r9, qword [r11]
mov r10, qword [r9]
jmp 0x161ed
mov rax, qword [r9 + 8]
mov rdx, qword [r9]
mov qword [rax], rdx
mov qword [rdx + 8], rax
mov qword [r9 + 8], r9
mov qword [r9], r9
mov qword [r9 - 0x18], r12
mov byte [r9 + 0x11], bl
mov r9, r10
mov r10, qword [r10]
cmp r9, r11
jne 0x161ca
lea rcx, [rsi + 0x48]
call qword [sym.imp.ntoskrnl.exe_ExReleaseFastMutex]
jmp 0x164b2
cmp dword [rdi + 8], r12d
jne 0x164b6
mov rax, qword [r13 + 0x40]
cmp dword [rax + 0xc8], r12d
jle 0x16228
lock add dword [rax + 0xc8], 0xffffffff
mov rcx, r13
call fcn.000181c0
lea rcx, [rsi + 0x48]
call qword [sym.imp.ntoskrnl.exe_ExAcquireFastMutex]
mov r14, qword [rbp + 0x38]
cmp r14, r12
je 0x16253
mov r13d, dword [r14]
cmp dword [rsi + 0x40], r12d
jne 0x16256
lea rcx, [rsi + 0x48]
call qword [sym.imp.ntoskrnl.exe_ExReleaseFastMutex]
jmp 0x164b6
mov r13d, r12d
mov ecx, r12d
lea r12, [rsi + 0x30]
mov rax, qword [r12]
jmp 0x1626e
cmp byte [rax + 0x10], 0
je 0x1626b
add ecx, ebx
mov rax, qword [rax]
cmp rax, r12
jne 0x16263
lea edi, [rcx + r13]
mov r8d, 0x62735556
mov ecx, ebx
lea edx, [rdi*8 + 0xf]
call qword [sym.imp.ntoskrnl.exe_ExAllocatePoolWithTag]
mov qword [rsp + 0x90], rax
test rax, rax
jne 0x162c3
lea rcx, [rsi + 0x48]
call qword [sym.imp.ntoskrnl.exe_ExReleaseFastMutex]
mov ebx, 0xc000009a
xor edx, edx
mov rcx, rbp
mov dword [rbp + 0x30], ebx
call qword [sym.imp.ntoskrnl.exe_IofCompleteRequest]
mov rcx, rsi
call fcn.00010338
jmp 0x1649e
test r13d, r13d
je 0x162e4
mov r8d, r13d
lea rdx, [r14 + 8]
lea rcx, [rax + 8]
shl r8, 3
call fcn.000127a0
mov rax, qword [rsp + 0x90]
mov dword [rax], edi
mov rdi, qword [r12]
movsxd rcx, r13d
cmp rdi, r12
je 0x16320
lea r13, [rax + rcx*8 + 8]
cmp byte [rdi + 0x10], 0
je 0x16315
mov rax, qword [rdi - 0x38]
mov qword [r13], rax
mov rcx, qword [rdi - 0x38]
call qword [sym.imp.ntoskrnl.exe_ObfReferenceObject]
add r13, 8
jmp 0x16318
mov byte [rdi + 0x11], bl
mov rdi, qword [rdi]
cmp rdi, r12
jne 0x162f7
test r14, r14
je 0x1632e
mov rcx, r14
call qword [sym.imp.ntoskrnl.exe_ExFreePool]
mov rax, qword [rsp + 0x90]
lea rcx, [rsi + 0x48]
mov qword [rbp + 0x38], rax
call qword [sym.imp.ntoskrnl.exe_ExReleaseFastMutex]
and dword [rbp + 0x30], 0
jmp 0x164b6
cmp dword [rsi + 0xc], 2
jne 0x164b2
mov eax, dword [rsi + 0x10]
mov dword [rsi + 0xc], eax
jmp 0x164b2
mov eax, dword [rsi + 0xc]
mov dword [rsi + 0xc], 2
jmp 0x164af
mov rcx, rsi
call fcn.00010338
lea rcx, [rsi + 0xa0]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], r12
call qword [sym.imp.ntoskrnl.exe_KeWaitForSingleObject]
mov rcx, rsi
call fcn.00010308
mov eax, dword [rsi + 0xc]
mov dword [rsi + 0xc], 3
jmp 0x164af
cmp dword [rsi + 0xc], 4
jmp 0x16351
cmp dword [rsi + 0xc], 5
je 0x163be
mov rcx, rsi
call fcn.000165b8
mov eax, dword [rsi + 0xc]
mov rcx, rsi
mov dword [rsi + 0xc], 6
mov dword [rsi + 0x10], eax
call fcn.00010338
mov rcx, rsi
call fcn.00010338
lea rcx, [rsi + 0x88]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], r12
call qword [sym.imp.ntoskrnl.exe_KeWaitForSingleObject]
lea rcx, [rsi + 0x48]
call qword [sym.imp.ntoskrnl.exe_ExAcquireFastMutex]
lea r15, [rsi + 0x30]
mov rdi, qword [r15]
mov r12, qword [rdi]
jmp 0x1645e
mov rax, qword [rdi + 8]
mov rcx, qword [rdi]
mov rdx, rdi
mov qword [rax], rcx
mov qword [rcx + 8], rax
cmp dword [rdi - 0x2c], 5
jne 0x16433
mov qword [rdi + 8], rdx
mov qword [rdi], rdx
and qword [rdi - 0x18], 0
mov byte [rdi + 0x11], bl
jmp 0x16457
dec dword [rsi + 0x40]
mov rcx, qword [rdi - 0x10]
mov r14, qword [rdi - 0x38]
test rcx, rcx
je 0x1644e
call qword [sym.imp.ntoskrnl.exe_ExFreePool]
and qword [rdi - 0x10], 0
mov rcx, r14
call qword [sym.imp.ntoskrnl.exe_IoDeleteDevice]
mov rdi, r12
mov r12, qword [r12]
cmp rdi, r15
jne 0x1640b
lea rcx, [rsi + 0x48]
call qword [sym.imp.ntoskrnl.exe_ExReleaseFastMutex]
and dword [rbp + 0x30], 0
add byte [rbp + 0x43], bl
add qword [rbp + 0xb8], 0x48
mov rcx, qword [rsi + 0x28]
mov rdx, rbp
call qword [sym.imp.ntoskrnl.exe_IofCallDriver]
mov rcx, qword [rsi + 0x28]
mov ebx, eax
call qword [sym.imp.ntoskrnl.exe_IoDetachDevice]
mov rcx, r13
call qword [sym.imp.ntoskrnl.exe_IoDeleteDevice]
mov eax, ebx
jmp 0x16594
mov eax, dword [rsi + 0xc]
mov dword [rsi + 0xc], 4
mov dword [rsi + 0x10], eax
mov dword [rbp + 0x30], r12d
add byte [rbp + 0x43], bl
add qword [rbp + 0xb8], 0x48
mov rcx, qword [rsi + 0x28]
mov rdx, rbp
call qword [sym.imp.ntoskrnl.exe_IofCallDriver]
mov ebx, eax
jmp 0x162b6
mov rdi, qword [rsi + 0x28]
lea rcx, [rsp + 0x30]
xor r8d, r8d
xor edx, edx
call qword [sym.imp.ntoskrnl.exe_KeInitializeEvent]
mov rdx, qword [rbp + 0xb8]
mov r8d, 0x38
lea rbx, [rdx - 0x48]
mov rcx, rbx
call fcn.000127a0
mov byte [rbx + 3], r12b
mov rax, qword [rbp + 0xb8]
lea rcx, [0x00010390]
mov rdx, rbp
mov byte [rax - 0x45], 0xe0
mov qword [rax - 0x10], rcx
lea rcx, [rsp + 0x30]
mov qword [rax - 8], rcx
mov rcx, rdi
call qword [sym.imp.ntoskrnl.exe_IofCallDriver]
mov edi, eax
cmp eax, 0x103
jne 0x16555
lea rcx, [rsp + 0x30]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov qword [rsp + 0x20], r12
call qword [sym.imp.ntoskrnl.exe_KeWaitForSingleObject]
mov edi, dword [rbp + 0x30]
cmp edi, r12d
jl 0x1657c
mov ebx, 1
lea rcx, [rsi + 0xb8]
mov dl, bl
call qword [sym.imp.ntoskrnl.exe_IoSetDeviceInterfaceState]
mov ecx, dword [rsi + 0xc]
mov dword [rsi + 0x1c], ebx
mov dword [rsi + 0x10], ecx
mov edi, eax
mov dword [rsi + 0xc], ebx
xor edx, edx
mov rcx, rbp
mov dword [rbp + 0x30], edi
call qword [sym.imp.ntoskrnl.exe_IofCompleteRequest]
mov rcx, rsi
call fcn.00010338
mov eax, edi
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret