Function at 0x158f0
Capabilities:
Complete processing asynchronous io request

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rdx
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x60
mov rbx, rdx
mov r14, qword [rdx + 0xb8]
mov qword [rsp + 0x40], r14
mov byte [rsp + 0xa0], 1
and qword [rax - 0x78], 0
xor r13d, r13d
mov dword [rax + 0x18], r13d
mov r15d, dword [r14 + 0x10]
xor edi, edi
mov qword [rsp + 0x30], rdi
xor esi, esi
mov qword [rsp + 0x38], rsi
and dword [rsp + 0xb8], esi
mov rcx, qword [rcx + 0x40]
mov qword [rsp + 0x28], rcx
cmp byte [0x0004c2fc], sil
je 0x15971
inc byte [rdx + 0x43]
lea rax, [r14 + 0x48]
mov qword [rdx + 0xb8], rax
mov rcx, qword [rcx + 0x13]
call qword [sym.imp.ntoskrnl.exe_IofCallDriver]
jmp 0x15d21
cmp byte [0x0004754e], sil
jne 0x15d09
cmp byte [0x0004c8a2], 1
jne 0x15d09
xor ecx, ecx
call qword [sym.imp.ntoskrnl.exe_IoIs32bitProcess]
test al, al
je 0x15a3c
mov r12, qword [r14 + 0x20]
mov rdx, r15
mov r8d, 4
mov rcx, r12
call qword [sym.imp.ntoskrnl.exe_ProbeForRead]
nop
movsxd rsi, dword [r12]
mov qword [rsp + 0x38], rsi
mov eax, dword [r12 + 8]
mov dword [rsp + 0xb8], eax
movsxd rdx, dword [rsi]
movsxd rcx, dword [rsi + 4]
mov r8d, 1
call qword [sym.imp.ntoskrnl.exe_ProbeForRead]
nop
jmp 0x15a2b
mov al, byte [rsp + 0xa0]
mov r15, qword [rsp + 0x28]
jmp 0x15ad1
mov r12, qword [r14 + 0x20]
mov rdx, r15
mov r8d, 4
mov rcx, r12
call qword [sym.imp.ntoskrnl.exe_ProbeForRead]
nop
mov rdi, qword [r12]
mov qword [rsp + 0x30], rdi
mov eax, dword [r12 + 0xc]
mov dword [rsp + 0xb8], eax
mov r8d, 1
mov rdx, qword [rdi]
mov rcx, qword [rdi + 8]
call qword [sym.imp.ntoskrnl.exe_ProbeForRead]
nop
mov al, 1
mov r15, qword [rsp + 0x28]
jmp 0x15ad1
cmp al, 1
je 0x15af2
inc byte [rbx + 0x43]
add qword [rbx + 0xb8], 0x48
mov rdx, rbx
mov rcx, qword [r15 + 0x13]
call qword [sym.imp.ntoskrnl.exe_IofCallDriver]
jmp 0x15d21
test rsi, rsi
je 0x15b19
movsxd rcx, dword [rsi + 4]
lea r9, [rsp + 0xb0]
lea r8, [rsp + 0x20]
mov edx, dword [rsi]
call fcn.0001b75c
mov r13d, dword [rsp + 0xb0]
jmp 0x15b3e
test rdi, rdi
je 0x15b3e
lea r9, [rsp + 0xb0]
lea r8, [rsp + 0x20]
mov edx, dword [rdi]
mov rcx, qword [rdi + 8]
call fcn.0001b75c
mov r13d, dword [rsp + 0xb0]
mov r12, qword [rsp + 0x20]
test r12, r12
je 0x15c27
test r13d, r13d
je 0x15c27
mov r8d, r13d
mov rdx, r12
mov rcx, qword [r14 + 0x30]
call fcn.00014778
cmp dword [rsp + 0xb8], 0
je 0x15b9e
and dword [rbx + 0x30], 0
test rsi, rsi
je 0x15b80
movsxd rax, dword [rsi]
mov qword [rbx + 0x38], rax
jmp 0x15b8c
test rdi, rdi
je 0x15b8c
mov rax, qword [rdi]
mov qword [rbx + 0x38], rax
mov dl, 2
mov rcx, rbx
call qword [sym.imp.ntoskrnl.exe_IofCompleteRequest]
xor eax, eax
jmp 0x15d21
test rsi, rsi
je 0x15bd4
movsxd r8, dword [rsi]
movsxd rcx, dword [rsi + 4]
xor edx, edx
call fcn.0003bc80
cmp dword [rsi], 0x20
jl 0x15c0a
movsxd rcx, dword [rsi + 4]
lea rdx, str.HEAD__index.htm_HTTP_1.1_r_n_r_n
mov r8d, 0x20
call fcn.0003a6f0
mov dword [rsi], 0x1c
jmp 0x15c0a
test rdi, rdi
je 0x15c0a
mov r8, qword [rdi]
xor edx, edx
mov rcx, qword [rdi + 8]
call fcn.0003bc80
cmp qword [rdi], 0x20
jl 0x15c0a
mov rcx, qword [rdi + 8]
lea rdx, str.HEAD__index.htm_HTTP_1.1_r_n_r_n
mov r8d, 0x20
call fcn.0003a6f0
mov qword [rdi], 0x1c
inc byte [rbx + 0x43]
add qword [rbx + 0xb8], 0x48
mov rdx, rbx
mov rcx, qword [r15 + 0x13]
call qword [sym.imp.ntoskrnl.exe_IofCallDriver]
jmp 0x15d21
test rsi, rsi
je 0x15c4e
movsxd rcx, dword [rsi + 4]
lea r9, [rsp + 0xb0]
lea r8, [rsp + 0x20]
mov edx, dword [rsi]
call fcn.0001b7c0
mov r13d, dword [rsp + 0xb0]
jmp 0x15c73
test rdi, rdi
je 0x15c73
lea r9, [rsp + 0xb0]
lea r8, [rsp + 0x20]
mov edx, dword [rdi]
mov rcx, qword [rdi + 8]
call fcn.0001b7c0
mov r13d, dword [rsp + 0xb0]
mov r12, qword [rsp + 0x20]
test r12, r12
je 0x15cda
test r13d, r13d
je 0x15cda
test rsi, rsi
je 0x15cae
cmp dword [rsi], r13d
jb 0x15cda
mov r8d, dword [rsi]
movsxd rcx, dword [rsi + 4]
xor edx, edx
call fcn.0003bc80
mov dword [rsi], r13d
mov r8d, r13d
movsxd rcx, dword [rsi + 4]
mov rdx, r12
call fcn.0003a6f0
jmp 0x15cda
test rdi, rdi
je 0x15cda
cmp dword [rdi], r13d
jb 0x15cda
mov r8d, dword [rdi]
xor edx, edx
mov rcx, qword [rdi + 8]
call fcn.0003bc80
mov r8d, r13d
mov qword [rdi], r8
mov rdx, qword [rsp + 0x20]
mov rcx, qword [rdi + 8]
call fcn.0003a6f0
mov r12, qword [rsp + 0x20]
test r12, r12
je 0x15cef
xor edx, edx
mov rcx, r12
call qword [sym.imp.ntoskrnl.exe_ExFreePoolWithTag]
inc byte [rbx + 0x43]
add qword [rbx + 0xb8], 0x48
mov rdx, rbx
mov rcx, qword [r15 + 0x13]
call qword [sym.imp.ntoskrnl.exe_IofCallDriver]
jmp 0x15d21
inc byte [rdx + 0x43]
lea rax, [r14 + 0x48]
mov qword [rdx + 0xb8], rax
mov rcx, qword [rcx + 0x13]
call qword [sym.imp.ntoskrnl.exe_IofCallDriver]
add rsp, 0x60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret