Function at 0x12800
Capabilities:
Create device object

Disassembly:
mov r11, rsp
mov qword [r11 + 8], rbx
mov qword [r11 + 0x18], rbp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x50
mov rsi, qword [rdx + 0x240]
xor r14d, r14d
lea rax, [r11 - 0x38]
mov qword [r11 - 0x48], rax
mov r13b, r9b
mov rdi, r8
mov rbx, rdx
mov byte [r11 - 0x50], r14b
lea r9d, [r14 + 0x32]
xor r8d, r8d
xor edx, edx
mov r12, r14
mov qword [r11 - 0x38], r14
mov dword [rsp + 0x20], 0x80
call qword [sym.imp.ntoskrnl.exe_IoCreateDevice]
cmp eax, r14d
jl 0x12be5
cmp r13b, r14b
je 0x12889
mov eax, dword [rbx]
bt rax, 0x14
jb 0x12886
mov rcx, rdi
call qword [sym.imp.ntoskrnl.exe_IoGetAttachedDeviceReference]
cmp rax, r14
mov r12, rax
jne 0x12889
mov ebp, 0xc000000e
jmp 0x12950
mov r13b, r14b
movabs rax, 0x2000000000
test qword [rbx], rax
je 0x12969
mov rax, qword [rsi + 0x18]
cmp rax, r14
je 0x12962
cmp dword [rax + 0x20], 0x5352435f
je 0x128cd
mov rcx, qword [rax + 0x10]
cmp rcx, r14
je 0x128c5
mov rax, qword [rax + 8]
cmp qword [rcx + 0x18], rax
jne 0x128c8
mov rax, r14
cmp rax, r14
jne 0x128a9
cmp rax, r14
je 0x12962
mov byte [rbx + 0xb0], 1
mov edi, r14d
mov rsi, r14
mov eax, edi
mov rcx, rbx
lea r8, [rbx + rax*8 + 0xb8]
lea rax, [0x00045598]
mov edx, dword [rax + rsi*4]
call fcn.0004bc44
cmp eax, r14d
mov ebp, eax
jl 0x12914
add edi, 1
add rsi, 1
cmp edi, 3
jb 0x128e3
jmp 0x12969
cmp edi, r14d
je 0x12950
lea rsi, [rbx + rsi*8 + 0xb8]
sub rsi, 8
add edi, 0xffffffff
mov rbx, qword [rsi]
cmp byte [rbx + 0x80], r14b
je 0x12940
lea rcx, [rbx + 0x88]
call fcn.0005aa64
xor edx, edx
mov rcx, rbx
call qword [sym.imp.ntoskrnl.exe_ExFreePoolWithTag]
cmp edi, r14d
jne 0x12921
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.ntoskrnl.exe_IoDeleteDevice]
mov eax, ebp
jmp 0x12be5
mov byte [rbx + 0xb0], r14b
lea rcx, [0x00047198]
call qword [sym.imp.ntoskrnl.exe_KeAcquireSpinLockRaiseToDpc]
mov rcx, qword [rsp + 0x40]
mov qword [rcx + 0x40], rbx
mov rcx, qword [rsp + 0x40]
mov bpl, al
mov qword [rbx + 0x248], rcx
mov qword [rbx + 0x258], rcx
lock add dword [rbx + 0x224], 1
mov rax, qword [rbx]
mov rcx, rax
mov rdx, rax
and rcx, 0xfffffffffffffc00
lock cmpxchg qword [rbx], rcx
cmp rdx, rax
jne 0x129a0
mov rax, qword [rbx]
mov rcx, rax
mov rdx, rax
or rcx, 0x20
lock cmpxchg qword [rbx], rcx
cmp rdx, rax
jne 0x129ba
cmp r13b, r14b
mov eax, dword [rbx + 0x130]
mov dword [rbx + 0x130], r14d
mov dword [rbx + 0x134], eax
lea rax, [0x00044c60]
mov qword [rbx + 0x10], rax
je 0x12a50
mov rax, qword [rbx]
mov qword [rbx + 0x250], r12
mov rcx, rax
mov rdx, rax
or rcx, 0x40
lock cmpxchg qword [rbx], rcx
cmp rdx, rax
jne 0x129fb
lea rax, [0x000449a0]
mov qword [rbx + 0x10], rax
mov cl, byte [r12 + 0x4c]
mov rax, qword [rsp + 0x40]
add cl, 1
mov byte [rax + 0x4c], cl
mov rax, qword [rsp + 0x40]
mov ecx, dword [r12 + 0x98]
mov dword [rax + 0x98], ecx
bt dword [r12 + 0x30], 0xd
jae 0x12a50
mov rax, qword [rsp + 0x40]
bts dword [rax + 0x30], 0xd
movabs rax, 0x1000000000
test qword [rbx], rax
je 0x12a68
lea rax, [0x00044ce0]
jmp 0x12ac7
movabs rax, 0x200000000000
test qword [rbx], rax
je 0x12acb
cmp qword [str.ACPI0004], r14
mov edi, r14d
mov rsi, r14
je 0x12acb
lea r12, str.ACPI0004
mov rax, r12
mov rdx, qword [rax]
mov rcx, qword [rbx + 0x200]
call qword [sym.imp.ntoskrnl.exe_strstr]
cmp rax, r14
jne 0x12abd
add rsi, 1
add edi, 1
mov rax, rsi
shl rax, 4
add rax, r12
cmp qword [rax], r14
jne 0x12a90
jmp 0x12acb
mov eax, edi
add rax, rax
mov rax, qword [r12 + rax*8 + 8]
mov qword [rbx + 0x10], rax
bt qword [rbx], 0x12
jae 0x12af3
movabs rax, 0x8000000000000
test qword [rbx], rax
mov rax, qword [0x000472f8]
cmovne rax, qword [rsp + 0x40]
mov qword [0x000472f8], rax
lea rcx, [0x00047198]
mov dl, bpl
call qword [sym.imp.ntoskrnl.exe_KeReleaseSpinLock]
cmp qword [rbx + 0x240], r14
je 0x12bc1
mov eax, dword [rbx]
bt rax, 0x19
jae 0x12bc1
xor eax, eax
lock cmpxchg dword [rbx + 0xb0], r14d
test al, 0x10
jne 0x12bc1
lea rdi, [rbx + 0x128]
xor eax, eax
mov dword [rdi], eax
lock or dword [rbx + 0xb0], 0x10
bt dword [0x00047190], 0xd
jb 0x12bc1
mov dword [rsp + 0x88], eax
lea rax, [rsp + 0x88]
lea r9, [0x00044190]
lea r8, [0x000440a4]
mov dl, 1
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.00023ef8
cmp eax, r14d
jl 0x12bc1
lock or dword [rbx + 0xb0], 8
mov eax, dword [rsp + 0x88]
cmp dword [0x00044190], eax
je 0x12ba3
cmp eax, 0x15
cmovne eax, r14d
mov dword [rsp + 0x88], eax
lea r9, [rsp + 0x88]
lea r8, [0x000440a4]
xor edx, edx
mov rcx, rbx
mov qword [rsp + 0x20], rdi
call fcn.00023ef8
mov rax, qword [rsp + 0x40]
btr dword [rax + 0x30], 7
movabs rax, 0x10000000000000
test qword [rbx], rax
je 0x12be3
mov rax, qword [rsp + 0x40]
or dword [rax + 0x30], 8
xor eax, eax
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r14
pop r13
pop r12
pop rdi
pop rsi
ret