Function at 0x18900
Capabilities:
Complete processing asynchronous io request

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0x188
mov rax, qword [0x0002b100]
xor rax, rsp
mov qword [rsp + 0x170], rax
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x48], 0
call fcn.0001fa00
movzx eax, al
test eax, eax
jne 0x18979
mov rcx, qword [rsp + 0x1a0]
call fcn.000164e0
mov rdx, qword [rsp + 0x1a0]
mov rcx, qword [rsp + 0x1b0]
call qword [sym.imp.ntoskrnl.exe_IofCallDriver]
jmp 0x18df4
mov rax, qword [rsp + 0x1a0]
movsx eax, byte [rax + 0x43]
cmp eax, 1
jne 0x189b2
mov rcx, qword [rsp + 0x1a0]
call fcn.000164e0
mov rdx, qword [rsp + 0x1a0]
mov rcx, qword [rsp + 0x1b0]
call qword [sym.imp.ntoskrnl.exe_IofCallDriver]
jmp 0x18df4
mov rax, qword [rsp + 0x1a8]
add rax, 8
mov qword [rsp + 0xc0], rax
cmp qword [rsp + 0xc0], 0
je 0x18a0e
mov rax, qword [rsp + 0xc0]
cmp qword [rax + 8], 0
je 0x18a0e
mov rax, qword [rsp + 0xc0]
mov rax, qword [rax + 8]
cmp qword [rax + 0x28], 0
je 0x18a0e
mov rax, qword [rsp + 0xc0]
mov rax, qword [rax + 8]
mov rax, qword [rax + 0x28]
add rax, 4
mov qword [rsp + 0x58], rax
jmp 0x18a41
lea rdi, [rsp + 0x70]
xor eax, eax
mov ecx, 0x4b
rep stosb byte [rdi], al
lea rax, [rsp + 0x70]
mov qword [rsp + 0x58], rax
mov ecx, 0xe
mov rax, qword [rsp + 0x58]
mov word [rax], cx
mov ecx, 2
mov rax, qword [rsp + 0x58]
mov word [rax + 2], cx
lea rcx, [0x0002d0a0]
call qword [sym.imp.ntoskrnl.exe_KeAcquireSpinLockRaiseToDpc]
mov byte [rsp + 0x30], al
mov rdx, qword [rsp + 0x1a8]
mov rdx, qword [rdx + 0x30]
mov rcx, qword [0x0002d0b8]
call fcn.00015c10
mov qword [rsp + 0x40], rax
cmp qword [rsp + 0x40], 0
je 0x18ae4
mov rax, qword [rsp + 0x40]
sub rax, 0x10
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x58]
movzx eax, word [rax]
cmp rax, 0x4b
jbe 0x18a95
jmp 0x18ab8
mov rax, qword [rsp + 0x58]
movzx ecx, word [rax]
add rcx, 2
mov rsi, qword [rsp + 0x58]
add rsi, 2
mov rdi, qword [rsp + 0x48]
add rdi, 0x9b
rep movsb byte [rdi], byte [rsi]
mov rax, qword [rsp + 0x48]
mov byte [rax + 0xe6], 2
mov rax, qword [rsp + 0x48]
mov byte [rax + 0xe7], 1
mov rcx, qword [rsp + 0x48]
call fcn.000227f0
mov edx, eax
mov rax, qword [rsp + 0x48]
mov dword [rax + 0x48], edx
cmp qword [rsp + 0x48], 0
je 0x18af8
call fcn.0001fa00
movzx eax, al
test eax, eax
jne 0x18b37
movzx edx, byte [rsp + 0x30]
lea rcx, [0x0002d0a0]
call qword [sym.imp.ntoskrnl.exe_KeReleaseSpinLock]
mov rcx, qword [rsp + 0x1a0]
call fcn.000164e0
mov rdx, qword [rsp + 0x1a0]
mov rcx, qword [rsp + 0x1b0]
call qword [sym.imp.ntoskrnl.exe_IofCallDriver]
jmp 0x18df4
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x48]
and eax, 0x10
test eax, eax
je 0x18cba
mov rax, qword [rsp + 0x48]
mov ecx, dword [rax + 0x4c]
call fcn.00018780
movzx eax, al
test eax, eax
jne 0x18cba
mov rcx, qword [rsp + 0x1a0]
call fcn.00016ac0
mov rcx, qword [rsp + 0x48]
add rcx, 0x190
call qword [sym.imp.ntoskrnl.exe_KeAcquireSpinLockRaiseToDpc]
mov byte [rsp + 0x50], al
mov rdx, qword [rsp + 0x1a0]
add rdx, 0xa8
mov rcx, qword [rsp + 0x48]
add rcx, 0x160
call fcn.00015d90
mov rcx, qword [rsp + 0x48]
add rcx, 0x190
movzx edx, byte [rsp + 0x50]
call qword [sym.imp.ntoskrnl.exe_KeReleaseSpinLock]
mov rax, qword [rsp + 0x1a0]
add rax, 0x68
lea rcx, [0x00019940]
xchg qword [rax], rcx
mov rax, rcx
mov qword [rsp + 0xc8], rax
mov rax, qword [rsp + 0x1a0]
mov dword [rax + 0x30], 0x103
mov rdx, qword [rsp + 0x48]
lea rcx, [rsp + 0xd0]
call fcn.00017b50
mov r9d, 0x43
lea r8, [rsp + 0xd0]
mov rdx, qword [rsp + 0x48]
mov rdx, qword [rdx + 0x30]
mov ecx, 0x13
call fcn.0001f860
test eax, eax
jl 0x18c3f
movzx edx, byte [rsp + 0x30]
lea rcx, [0x0002d0a0]
call qword [sym.imp.ntoskrnl.exe_KeReleaseSpinLock]
mov eax, 0x103
jmp 0x18df4
mov rcx, qword [rsp + 0x48]
add rcx, 0x190
call qword [sym.imp.ntoskrnl.exe_KeAcquireSpinLockRaiseToDpc]
mov byte [rsp + 0x50], al
mov rcx, qword [rsp + 0x1a0]
add rcx, 0xa8
call fcn.00011050
mov rcx, qword [rsp + 0x1a0]
add rcx, 0xa8
call fcn.00015d10
mov rcx, qword [rsp + 0x48]
add rcx, 0x190
movzx edx, byte [rsp + 0x50]
call qword [sym.imp.ntoskrnl.exe_KeReleaseSpinLock]
mov rax, qword [rsp + 0x1a0]
add rax, 0x68
mov rcx, qword [rsp + 0xc8]
xchg qword [rax], rcx
mov rax, qword [rsp + 0x1a0]
mov dword [rax + 0x30], 0
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x48]
and eax, 1
test eax, eax
je 0x18d14
movzx edx, byte [rsp + 0x30]
lea rcx, [0x0002d0a0]
call qword [sym.imp.ntoskrnl.exe_KeReleaseSpinLock]
mov rdx, qword [rsp + 0x1a0]
mov dword [rdx + 0x30], 0xc00000bc
mov rax, qword [rsp + 0x1a0]
mov qword [rax + 0x38], 0
xor edx, edx
mov rcx, qword [rsp + 0x1a0]
call qword [sym.imp.ntoskrnl.exe_IofCompleteRequest]
mov eax, 0xc00000bc
jmp 0x18df4
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x48]
and eax, 0xa
cmp eax, 0xa
jne 0x18d99
mov rdx, qword [rsp + 0x48]
lea rcx, [rsp + 0x120]
call fcn.00017b50
mov r9d, 0x43
lea r8, [rsp + 0x120]
mov rdx, qword [rsp + 0x48]
mov rdx, qword [rdx + 0x30]
xor ecx, ecx
call fcn.0001f860
movzx edx, byte [rsp + 0x30]
lea rcx, [0x0002d0a0]
call qword [sym.imp.ntoskrnl.exe_KeReleaseSpinLock]
mov rdx, qword [rsp + 0x1a0]
mov dword [rdx + 0x30], 0
mov rax, qword [rsp + 0x1a0]
mov qword [rax + 0x38], 0
xor edx, edx
mov rcx, qword [rsp + 0x1a0]
call qword [sym.imp.ntoskrnl.exe_IofCompleteRequest]
xor eax, eax
jmp 0x18df4
movzx edx, byte [rsp + 0x30]
lea rcx, [0x0002d0a0]
call qword [sym.imp.ntoskrnl.exe_KeReleaseSpinLock]
mov rcx, qword [rsp + 0x1a0]
call fcn.000161f0
mov byte [rsp + 0x28], 1
mov byte [rsp + 0x20], 1
mov r9b, 1
mov r8, qword [rsp + 0x48]
lea rdx, [0x00018540]
mov rcx, qword [rsp + 0x1a0]
call fcn.00011110
mov rdx, qword [rsp + 0x1a0]
mov rcx, qword [rsp + 0x1b0]
call qword [sym.imp.ntoskrnl.exe_IofCallDriver]
mov rcx, qword [rsp + 0x170]
xor rcx, rsp
call fcn.000246f0
add rsp, 0x188
pop rdi
pop rsi
ret