Function at 0x1b7b4
Capabilities:
Complete processing asynchronous io request

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x30
mov rdi, rdx
mov rdx, qword [rdx + 0xb8]
mov r8d, 0x70014
mov eax, dword [rdx + 0x18]
xor esi, esi
cmp eax, r8d
ja 0x1b9a7
je 0x1b976
mov r8d, 0x24054
cmp eax, r8d
ja 0x1b8f3
je 0x1b8ae
sub eax, sym.imp.ntoskrnl.exe_ExFreePoolWithTag
je 0x1b888
sub eax, 0x38
je 0x1b859
sub eax, 6
je 0x1b84c
sub eax, 0xe
je 0x1b917
cmp eax, 4
jne 0x1b9f2
cmp dword [rdx + 8], 0x28
jb 0x1ba79
mov rax, qword [rcx]
mov rdx, qword [rdi + 0x18]
call qword [rax + 0x110]
cmp eax, esi
jne 0x1badc
mov qword [rdi + 0x38], 0x28
jmp 0x1b880
mov rdx, rdi
call fcn.0001bb20
jmp 0x1bb09
cmp dword [rdx + 8], 0xc
jb 0x1ba79
mov rax, qword [rcx]
mov rdx, qword [rdi + 0x18]
call qword [rax + 0x170]
cmp eax, esi
jne 0x1badc
mov qword [rdi + 0x38], 0xc
mov rcx, rdi
jmp 0x1ba39
mov ebx, 0x324
cmp dword [rdx + 8], ebx
jb 0x1ba79
mov rax, qword [rcx]
mov rdx, qword [rdi + 0x18]
call qword [rax + 0x160]
jmp 0x1bad4
mov qword [rdi + 0x38], rbx
jmp 0x1b880
mov r8d, dword [rdx + 0x10]
cmp r8d, 4
jb 0x1b97c
mov r9d, dword [rdx + 8]
cmp r9d, 4
jb 0x1ba79
mov rax, qword [rcx]
lea rdx, [rsp + 0x48]
mov qword [rsp + 0x20], rdx
mov rdx, qword [rdi + 0x18]
call qword [rax + 0x168]
cmp eax, esi
jne 0x1badc
mov eax, dword [rsp + 0x48]
mov qword [rdi + 0x38], rax
jmp 0x1b880
cmp eax, 0x24800
je 0x1ba4b
cmp eax, 0x41018
je 0x1b950
cmp eax, 0x4d014
je 0x1b943
cmp eax, 0x70000
jne 0x1b9f2
cmp dword [rdx + 8], 0x18
jb 0x1ba79
mov rax, qword [rcx]
mov rdx, qword [rdi + 0x18]
call qword [rax + 0x108]
cmp eax, esi
jne 0x1badc
mov qword [rdi + 0x38], 0x18
jmp 0x1b880
mov rdx, rdi
call fcn.0001bd78
jmp 0x1bb09
cmp dword [rdx + 8], 8
jb 0x1ba79
mov r8d, dword [rdx + 8]
mov rcx, qword [rdi + 0x18]
xor edx, edx
call fcn.00022550
mov qword [rdi + 0x38], 8
jmp 0x1b880
cmp dword [rdx + 0x10], 0x10
jae 0x1b989
mov ebx, 0xc0000004
mov dword [rdi + 0x30], ebx
jmp 0x1bae1
mov rax, qword [rcx]
mov rdx, qword [rdi + 0x18]
call qword [rax + 0x150]
cmp eax, esi
jne 0x1badc
mov qword [rdi + 0x38], rsi
jmp 0x1b880
sub eax, 0x70024
je 0x1baea
sub eax, 0x24
je 0x1babd
sub eax, 0x58
je 0x1b823
sub eax, 0x3f64
je 0x1ba99
sub eax, 0x58
je 0x1ba73
sub eax, 0x7a4
je 0x1ba4b
sub eax, 4
je 0x1ba1f
sub eax, 0x7804
je 0x1ba03
cmp eax, 0x2587f8
je 0x1ba4b
mov rax, qword [rcx]
mov rdx, rdi
call qword [rax + pe_nt_image_headers64]
jmp 0x1bb09
cmp dword [rdx + 0x10], 1
jb 0x1b97c
mov rax, qword [rcx]
mov rdx, qword [rdi + 0x18]
call qword [rax + 0x158]
jmp 0x1b996
mov rax, qword [rcx]
call qword [rax + 0x138]
mov qword [rdi + 0x38], rsi
mov rcx, rdi
mov ebx, eax
cmp eax, esi
jne 0x1bafc
mov dl, 1
mov dword [rdi + 0x30], esi
call qword [sym.imp.ntoskrnl.exe_IofCompleteRequest]
xor eax, eax
jmp 0x1bb09
cmp dword [rdx + 8], 4
jne 0x1b99e
mov rax, qword [rcx]
mov rdx, qword [rdi + 0x18]
call qword [rax + 0x148]
cmp eax, esi
jne 0x1badc
mov qword [rdi + 0x38], 4
jmp 0x1b880
cmp dword [rdx + 8], 8
jae 0x1ba83
mov ebx, 0xc0000023
jmp 0x1b981
mov rax, qword [rcx]
mov rdx, qword [rdi + 0x18]
call qword [rax + 0x100]
cmp eax, esi
jne 0x1badc
jmp 0x1b969
cmp dword [rdx + 8], 0x20
jb 0x1ba79
mov rax, qword [rcx]
mov rdx, qword [rdi + 0x18]
call qword [rax + 0x120]
cmp eax, esi
jne 0x1badc
mov qword [rdi + 0x38], 0x20
jmp 0x1b880
mov ebx, 0x90
cmp dword [rdx + 8], ebx
jb 0x1ba79
mov rax, qword [rcx]
mov rdx, qword [rdi + 0x18]
call qword [rax + 0x118]
cmp eax, esi
je 0x1b8a8
mov ebx, eax
mov dword [rdi + 0x30], eax
mov qword [rdi + 0x38], rsi
mov rcx, rdi
jmp 0x1baff
mov rax, qword [rcx]
call qword [rax + 0x140]
mov qword [rdi + 0x38], rsi
mov rcx, rdi
mov ebx, eax
mov dword [rdi + 0x30], eax
xor edx, edx
call qword [sym.imp.ntoskrnl.exe_IofCompleteRequest]
mov eax, ebx
mov rbx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x50]
add rsp, 0x30
pop rdi
ret