Function at 0x14b30
Capabilities:
Complete processing asynchronous io request

Disassembly:
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rsi
push rdi
sub rsp, 0x188
mov rax, qword [0x0002c100]
xor rax, rsp
mov qword [rsp + 0x170], rax
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x48], 0
call fcn.0001bc70
movzx eax, al
test eax, eax
jne 0x14ba9
mov rcx, qword [rsp + 0x1a0]
call fcn.00012660
mov rdx, qword [rsp + 0x1a0]
mov rcx, qword [rsp + 0x1b0]
call qword [sym.imp.ntoskrnl.exe_IofCallDriver]
jmp 0x15024
mov rax, qword [rsp + 0x1a0]
movsx eax, byte [rax + 0x43]
cmp eax, 1
jne 0x14be2
mov rcx, qword [rsp + 0x1a0]
call fcn.00012660
mov rdx, qword [rsp + 0x1a0]
mov rcx, qword [rsp + 0x1b0]
call qword [sym.imp.ntoskrnl.exe_IofCallDriver]
jmp 0x15024
mov rax, qword [rsp + 0x1a8]
add rax, 8
mov qword [rsp + 0xc0], rax
cmp qword [rsp + 0xc0], 0
je 0x14c3e
mov rax, qword [rsp + 0xc0]
cmp qword [rax + 8], 0
je 0x14c3e
mov rax, qword [rsp + 0xc0]
mov rax, qword [rax + 8]
cmp qword [rax + 0x28], 0
je 0x14c3e
mov rax, qword [rsp + 0xc0]
mov rax, qword [rax + 8]
mov rax, qword [rax + 0x28]
add rax, 4
mov qword [rsp + 0x58], rax
jmp 0x14c71
lea rdi, [rsp + 0x70]
xor eax, eax
mov ecx, 0x4b
rep stosb byte [rdi], al
lea rax, [rsp + 0x70]
mov qword [rsp + 0x58], rax
mov ecx, 0xe
mov rax, qword [rsp + 0x58]
mov word [rax], cx
mov ecx, 2
mov rax, qword [rsp + 0x58]
mov word [rax + 2], cx
lea rcx, [0x0002de00]
call qword [sym.imp.ntoskrnl.exe_KeAcquireSpinLockRaiseToDpc]
mov byte [rsp + 0x30], al
mov rdx, qword [rsp + 0x1a8]
mov rdx, qword [rdx + 0x30]
mov rcx, qword [0x0002de18]
call fcn.00011d40
mov qword [rsp + 0x40], rax
cmp qword [rsp + 0x40], 0
je 0x14d14
mov rax, qword [rsp + 0x40]
sub rax, 0x10
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x58]
movzx eax, word [rax]
cmp rax, 0x4b
jbe 0x14cc5
jmp 0x14ce8
mov rax, qword [rsp + 0x58]
movzx ecx, word [rax]
add rcx, 2
mov rsi, qword [rsp + 0x58]
add rsi, 2
mov rdi, qword [rsp + 0x48]
add rdi, 0x9b
rep movsb byte [rdi], byte [rsi]
mov rax, qword [rsp + 0x48]
mov byte [rax + 0xe6], 2
mov rax, qword [rsp + 0x48]
mov byte [rax + 0xe7], 1
mov rcx, qword [rsp + 0x48]
call fcn.00020450
mov edx, eax
mov rax, qword [rsp + 0x48]
mov dword [rax + 0x48], edx
cmp qword [rsp + 0x48], 0
je 0x14d28
call fcn.0001bc70
movzx eax, al
test eax, eax
jne 0x14d67
movzx edx, byte [rsp + 0x30]
lea rcx, [0x0002de00]
call qword [sym.imp.ntoskrnl.exe_KeReleaseSpinLock]
mov rcx, qword [rsp + 0x1a0]
call fcn.00012660
mov rdx, qword [rsp + 0x1a0]
mov rcx, qword [rsp + 0x1b0]
call qword [sym.imp.ntoskrnl.exe_IofCallDriver]
jmp 0x15024
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x48]
and eax, 0x10
test eax, eax
je 0x14eea
mov rax, qword [rsp + 0x48]
mov ecx, dword [rax + 0x4c]
call fcn.000149b0
movzx eax, al
test eax, eax
jne 0x14eea
mov rcx, qword [rsp + 0x1a0]
call fcn.00012c40
mov rcx, qword [rsp + 0x48]
add rcx, 0x190
call qword [sym.imp.ntoskrnl.exe_KeAcquireSpinLockRaiseToDpc]
mov byte [rsp + 0x50], al
mov rdx, qword [rsp + 0x1a0]
add rdx, 0xa8
mov rcx, qword [rsp + 0x48]
add rcx, 0x160
call fcn.00011ef0
mov rcx, qword [rsp + 0x48]
add rcx, 0x190
movzx edx, byte [rsp + 0x50]
call qword [sym.imp.ntoskrnl.exe_KeReleaseSpinLock]
mov rax, qword [rsp + 0x1a0]
add rax, 0x68
lea rcx, [0x00017030]
xchg qword [rax], rcx
mov rax, rcx
mov qword [rsp + 0xc8], rax
mov rax, qword [rsp + 0x1a0]
mov dword [rax + 0x30], 0x103
mov rdx, qword [rsp + 0x48]
lea rcx, [rsp + 0xd0]
call fcn.00013d80
mov r9d, 0x43
lea r8, [rsp + 0xd0]
mov rdx, qword [rsp + 0x48]
mov rdx, qword [rdx + 0x30]
mov ecx, 0x13
call fcn.0001bad0
test eax, eax
jl 0x14e6f
movzx edx, byte [rsp + 0x30]
lea rcx, [0x0002de00]
call qword [sym.imp.ntoskrnl.exe_KeReleaseSpinLock]
mov eax, 0x103
jmp 0x15024
mov rcx, qword [rsp + 0x48]
add rcx, 0x190
call qword [sym.imp.ntoskrnl.exe_KeAcquireSpinLockRaiseToDpc]
mov byte [rsp + 0x50], al
mov rcx, qword [rsp + 0x1a0]
add rcx, 0xa8
call fcn.00011010
mov rcx, qword [rsp + 0x1a0]
add rcx, 0xa8
call fcn.00011e40
mov rcx, qword [rsp + 0x48]
add rcx, 0x190
movzx edx, byte [rsp + 0x50]
call qword [sym.imp.ntoskrnl.exe_KeReleaseSpinLock]
mov rax, qword [rsp + 0x1a0]
add rax, 0x68
mov rcx, qword [rsp + 0xc8]
xchg qword [rax], rcx
mov rax, qword [rsp + 0x1a0]
mov dword [rax + 0x30], 0
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x48]
and eax, 1
test eax, eax
je 0x14f44
movzx edx, byte [rsp + 0x30]
lea rcx, [0x0002de00]
call qword [sym.imp.ntoskrnl.exe_KeReleaseSpinLock]
mov rdx, qword [rsp + 0x1a0]
mov dword [rdx + 0x30], 0xc00000bc
mov rax, qword [rsp + 0x1a0]
mov qword [rax + 0x38], 0
xor edx, edx
mov rcx, qword [rsp + 0x1a0]
call qword [sym.imp.ntoskrnl.exe_IofCompleteRequest]
mov eax, 0xc00000bc
jmp 0x15024
mov rax, qword [rsp + 0x48]
mov eax, dword [rax + 0x48]
and eax, 0xa
cmp eax, 0xa
jne 0x14fc9
mov rdx, qword [rsp + 0x48]
lea rcx, [rsp + 0x120]
call fcn.00013d80
mov r9d, 0x43
lea r8, [rsp + 0x120]
mov rdx, qword [rsp + 0x48]
mov rdx, qword [rdx + 0x30]
xor ecx, ecx
call fcn.0001bad0
movzx edx, byte [rsp + 0x30]
lea rcx, [0x0002de00]
call qword [sym.imp.ntoskrnl.exe_KeReleaseSpinLock]
mov rdx, qword [rsp + 0x1a0]
mov dword [rdx + 0x30], 0
mov rax, qword [rsp + 0x1a0]
mov qword [rax + 0x38], 0
xor edx, edx
mov rcx, qword [rsp + 0x1a0]
call qword [sym.imp.ntoskrnl.exe_IofCompleteRequest]
xor eax, eax
jmp 0x15024
movzx edx, byte [rsp + 0x30]
lea rcx, [0x0002de00]
call qword [sym.imp.ntoskrnl.exe_KeReleaseSpinLock]
mov rcx, qword [rsp + 0x1a0]
call fcn.00012370
mov byte [rsp + 0x28], 1
mov byte [rsp + 0x20], 1
mov r9b, 1
mov r8, qword [rsp + 0x48]
lea rdx, [0x00014770]
mov rcx, qword [rsp + 0x1a0]
call fcn.00012c80
mov rdx, qword [rsp + 0x1a0]
mov rcx, qword [rsp + 0x1b0]
call qword [sym.imp.ntoskrnl.exe_IofCallDriver]
mov rcx, qword [rsp + 0x170]
xor rcx, rsp
call fcn.00027090
add rsp, 0x188
pop rdi
pop rsi
ret