Function at 0x14000415c
Capabilities:
Complete processing asynchronous io request
Print debug messages

Disassembly:
push rbx
sub rsp, 0x20
mov al, byte [rcx + 0x40]
xor edx, edx
mov ebx, edx
mov r9, r8
mov r10, rcx
test al, al
jne 0x14000417a
mov ebx, 0xc0000001
jmp 0x14000419d
mov r8, qword [r8 + 0xb8]
movzx ecx, byte [r8]
test ecx, ecx
je 0x1400041ef
sub ecx, 2
je 0x1400041df
sub ecx, 1
je 0x1400041c6
sub ecx, 1
je 0x1400041c6
cmp ecx, 0xa
je 0x1400041b6
mov rcx, r9
mov qword [r9 + 0x38], rdx
mov dword [r9 + 0x30], edx
call qword [sym.imp.ntoskrnl.exe_IofCompleteRequest]
mov eax, ebx
add rsp, 0x20
pop rbx
ret
mov rdx, r9
mov rcx, r10
add rsp, 0x20
pop rbx
jmp 0x140004290
mov rcx, r9
mov qword [r9 + 0x38], rdx
mov dword [r9 + 0x30], edx
call qword [sym.imp.ntoskrnl.exe_IofCompleteRequest]
xor eax, eax
add rsp, 0x20
pop rbx
ret
mov rdx, r9
mov rcx, r10
add rsp, 0x20
pop rbx
jmp 0x140004200
mov rdx, r9
mov rcx, r10
add rsp, 0x20
pop rbx
jmp 0x140004a90
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
mov rbx, qword [rcx + 0xb8]
mov rdi, rdx
and qword [rcx + 0xb8], 0
mov rsi, rcx
test rbx, rbx
je 0x14000423e
mov rcx, rbx
call fcn.140001458
mov edx, 0x20
mov rcx, rbx
call fcn.14001343c
mov rbx, qword [rsi + 0xc0]
and qword [rsi + 0xc0], 0
test rbx, rbx
je 0x140004267
mov rcx, rbx
call fcn.14000e1dc
mov edx, 8
mov rcx, rbx
call fcn.14001343c
and qword [rdi + 0x38], 0
xor edx, edx
and dword [rdi + 0x30], 0
mov rcx, rdi
call qword [sym.imp.ntoskrnl.exe_IofCompleteRequest]
mov rbx, qword [rsp + 0x30]
xor eax, eax
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
mov qword [rsp + 0x20], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xf0
mov rax, qword [0x14001c030]
xor rax, rsp
mov qword [rbp + 0x1f], rax
mov qword [rsp + 0x40], r8
mov r12, rdx
mov r13, rcx
and qword [rbp - 0x71], 0
mov r15d, 0xf
mov qword [rbp - 0x69], r15
mov byte [rsp + 0x48], 0
lea r9, [rsp + 0x48]
call fcn.140003f54
mov edi, eax
test eax, eax
js 0x1400049f6
lfence
mov rcx, qword [r12 + 0xb8]
mov rdx, qword [rcx + 0x30]
mov r14, qword [rdx + 0x18]
test r14, r14
je 0x1400049f1
xor r14, 0x7869616e
je 0x1400049f1
cmp qword [r13 + 0xc0], r14
jne 0x1400049f1
lea rbx, [rsp + 0x48]
cmp qword [rbp - 0x69], 0x10
cmovae rbx, qword [rsp + 0x48]
mov eax, dword [rbx + 8]
cmp rax, qword [rbp - 0x71]
jbe 0x140004346
mov edi, 0xc0000023
jmp 0x1400049f6
mov r9, qword [rsp + 0x40]
cmp dword [r9 + 0x18], 0x19912005
je 0x14000435f
mov edi, 0xc0000010
jmp 0x1400049d4
mov ecx, dword [rbx]
lea eax, [rcx - 1]
cmp eax, 7
jbe 0x14000437e
lea eax, [rcx - 0xc9]
cmp eax, 0x62
jbe 0x14000437e
mov edi, 0xc00000e5
jmp 0x1400049d4
mov esi, 1
lock add dword [r13 + 0xf0], esi
mov rcx, r14
call fcn.14000e1f8
test al, al
jne 0x1400043a6
cmp dword [rbx], 3
je 0x1400043a6
mov edi, 0xc0000022
jmp 0x1400049d4
mov ecx, dword [rbx]
cmp ecx, 7
jg 0x1400045c8
je 0x140004572
sub ecx, esi
je 0x14000456a
sub ecx, esi
je 0x1400044fa
sub ecx, esi
je 0x14000449e
sub ecx, esi
je 0x140004488
sub ecx, esi
je 0x140004435
cmp ecx, esi
jne 0x1400049d4
mov edx, dword [rbx + 4]
mov rcx, r14
call fcn.14000e270
mov edi, eax
test eax, eax
js 0x1400049d4
mov eax, dword [0x14001c900]
test sil, al
jne 0x140004424
or eax, esi
mov dword [0x14001c900], eax
lea rcx, [0x14001c680]
call fcn.14000b518
lea rcx, [0x140017de0]
call fcn.140014100
nop
lea rcx, [0x14001c680]
call fcn.14000d544
jmp 0x1400049d4
mov edx, dword [rbx + 4]
mov rcx, r14
call fcn.14000e270
mov edi, eax
test eax, eax
js 0x1400049d4
mov eax, dword [0x14001c900]
test sil, al
jne 0x140004476
or eax, esi
mov dword [0x14001c900], eax
lea rcx, [0x14001c680]
call fcn.14000b518
lea rcx, [0x140017de0]
call fcn.140014100
nop
lea rdx, [rbx + 0xc]
lea rcx, [0x14001c680]
call fcn.14000c95c
jmp 0x140004497
lea r8, [rbx + 0xc]
mov rdx, r12
mov rcx, r14
call fcn.14000e22c
mov edi, eax
jmp 0x1400049d4
lea rdx, [rbx + 0xc]
mov rcx, r14
call fcn.14000e204
mov edi, eax
test eax, eax
js 0x1400049d4
mov eax, dword [0x14001c9f0]
test sil, al
jne 0x1400044e0
or eax, esi
mov dword [0x14001c9f0], eax
lea rcx, [0x14001c990]
call fcn.14000867c
lea rcx, [0x140017e40]
call fcn.140014100
nop
call qword [sym.imp.ntoskrnl.exe_IoGetCurrentProcess]
mov rdx, rax
lea rcx, [0x14001c990]
call fcn.140008a2c
jmp 0x1400049d4
mov edx, dword [rbx + 4]
mov rcx, r14
call fcn.14000e23c
mov edi, eax
test eax, eax
js 0x1400049d4
mov eax, dword [0x14001c900]
test sil, al
jne 0x14000453b
or eax, esi
mov dword [0x14001c900], eax
lea rcx, [0x14001c680]
call fcn.14000b518
lea rcx, [0x140017de0]
call fcn.140014100
nop
lea rdx, [rbx + 0xc]
lea rcx, [0x14001c680]
call fcn.14000c6b4
cmp dword [rbx + 0xc], 0
jge 0x1400049d4
xchg byte [r13 + 0x41], sil
lea rcx, [0x140016f30]
call sub.ntoskrnl.exe_DbgPrint
jmp 0x1400049d4
mov dword [rbx + 0xc], esi
jmp 0x1400049d4
mov edx, dword [rbx + 4]
mov rcx, r14
call fcn.14000e270
mov edi, eax
test eax, eax
js 0x1400049d4
mov eax, dword [0x14001c980]
test sil, al
jne 0x1400045b3
or eax, esi
mov dword [0x14001c980], eax
lea rcx, [0x14001c960]
call fcn.140002cd0
lea rcx, [0x140017e10]
call fcn.140014100
nop
lea rdx, [rbx + 0xc]
lea rcx, [0x14001c960]
call fcn.140002d2c
jmp 0x1400049d4
sub ecx, 8
je 0x14000497e
sub ecx, 0xc1
je 0x14000489c
sub ecx, esi
je 0x1400047bc
sub ecx, esi
je 0x1400046dc
cmp ecx, esi
jne 0x1400049d4
mov edx, dword [rbx + 4]
mov rcx, r14
call fcn.14000e23c
mov edi, eax
test eax, eax
js 0x1400049d4
lea r14, [rbx + 0x53]
mov eax, dword [rbx + 8]
cmp dword [r14], eax
ja 0x1400048bd
lfence
and qword [rbp - 0x51], 0
mov qword [rbp - 0x49], r15
mov byte [rbp - 0x61], 0
lea rax, [rbp - 0x61]
mov qword [rsp + 0x20], rax
mov r9d, dword [rbx + 0x4f]
mov r8, qword [rbx + 0x47]
mov rdx, qword [rbx + 0x3f]
mov rcx, qword [r13 + 0xb0]
call fcn.140001808
mov edi, eax
mov r15, qword [rbp - 0x49]
mov rsi, qword [rbp - 0x61]
test eax, eax
js 0x1400046a0
mov r8d, dword [r14]
mov rdx, qword [rbp - 0x51]
mov eax, edx
cmp r8, rdx
jb 0x140004698
mov dword [rsp + 0x30], edx
lea rcx, [rsp + 0x30]
cmp eax, r8d
cmovae rcx, r14
mov r8d, dword [rcx]
cmp rdx, r8
cmovb r8, rdx
lea rdx, [rbp - 0x61]
cmp r15, 0x10
cmovae rdx, rsi
lea rcx, [rbx + 0x57]
call fcn.1400169c0
jmp 0x1400046a0
mov dword [r14], eax
mov edi, 0xc0000004
cmp r15, 0x10
jb 0x1400049d4
lea rdx, [r15 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140004974
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004a78
jmp 0x140004974
mov edx, dword [rbx + 4]
mov rcx, r14
call fcn.14000e23c
mov edi, eax
test eax, eax
js 0x1400049d4
lea r14, [rbx + 0x3a]
mov eax, dword [rbx + 8]
cmp dword [r14], eax
ja 0x1400048bd
and qword [rbp - 0x31], 0
mov qword [rbp - 0x29], r15
mov byte [rbp - 0x41], 0
lea r9, [rbp - 0x41]
mov r8d, dword [rbx + 0x2e]
mov rdx, qword [rbx + 0x32]
mov rcx, qword [r13 + 0xb0]
call fcn.140001710
mov edi, eax
mov r15, qword [rbp - 0x29]
mov rsi, qword [rbp - 0x41]
test eax, eax
js 0x140004780
mov r8d, dword [r14]
mov rdx, qword [rbp - 0x31]
mov eax, edx
cmp r8, rdx
jb 0x140004778
mov dword [rsp + 0x34], edx
lea rcx, [rsp + 0x34]
cmp eax, r8d
cmovae rcx, r14
mov eax, dword [rcx]
mov dword [r14], eax
mov r8d, eax
cmp rdx, rax
cmovb r8, rdx
lea rdx, [rbp - 0x41]
cmp r15, 0x10
cmovae rdx, rsi
lea rcx, [rbx + 0x3e]
call fcn.1400169c0
jmp 0x140004780
mov dword [r14], eax
mov edi, 0xc0000004
cmp r15, 0x10
jb 0x1400049d4
lea rdx, [r15 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140004974
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004a7e
jmp 0x140004974
mov edx, dword [rbx + 4]
mov rcx, r14
call fcn.14000e23c
mov edi, eax
test eax, eax
js 0x1400049d4
lea r14, [rbx + 0x29]
mov eax, dword [rbx + 8]
cmp dword [r14], eax
ja 0x1400048bd
and qword [rbp - 0x11], 0
mov qword [rbp - 9], r15
mov byte [rbp - 0x21], 0
lea r9, [rbp - 0x21]
mov r8d, dword [rbx + 0x1d]
mov rdx, qword [rbx + 0x21]
mov rcx, qword [r13 + 0xb0]
call fcn.14000160c
mov edi, eax
mov r15, qword [rbp - 9]
mov rsi, qword [rbp - 0x21]
test eax, eax
js 0x140004860
mov r8d, dword [r14]
mov rdx, qword [rbp - 0x11]
mov eax, edx
cmp r8, rdx
jb 0x140004858
mov dword [rsp + 0x38], edx
lea rcx, [rsp + 0x38]
cmp eax, r8d
cmovae rcx, r14
mov eax, dword [rcx]
mov dword [r14], eax
mov r8d, eax
cmp rdx, rax
cmovb r8, rdx
lea rdx, [rbp - 0x21]
cmp r15, 0x10
cmovae rdx, rsi
lea rcx, [rbx + 0x2d]
call fcn.1400169c0
jmp 0x140004860
mov dword [r14], eax
mov edi, 0xc0000004
cmp r15, 0x10
jb 0x1400049d4
lea rdx, [r15 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140004974
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004a84
jmp 0x140004974
mov edx, dword [rbx + 4]
mov rcx, r14
call fcn.14000e23c
mov edi, eax
test eax, eax
js 0x1400049d4
lea r14, [rbx + 0x18]
mov eax, dword [rbx + 8]
cmp dword [r14], eax
jbe 0x1400048c7
mov edi, 0x80000005
jmp 0x1400049d4
and qword [rbp + 0xf], 0
mov qword [rbp + 0x17], r15
mov byte [rbp - 1], 0
lea r8, [rbp - 1]
mov edx, dword [rbx + 0xc]
mov rcx, qword [r13 + 0xb0]
call fcn.140001704
mov edi, eax
mov r15, qword [rbp + 0x17]
mov rsi, qword [rbp - 1]
test eax, eax
js 0x140004941
mov r8d, dword [r14]
mov rdx, qword [rbp + 0xf]
mov eax, edx
cmp r8, rdx
jb 0x140004939
mov dword [rsp + 0x3c], edx
lea rcx, [rsp + 0x3c]
cmp eax, r8d
cmovae rcx, r14
mov eax, dword [rcx]
mov dword [r14], eax
mov r8d, eax
cmp rdx, rax
cmovb r8, rdx
lea rdx, [rbp - 1]
cmp r15, 0x10
cmovae rdx, rsi
lea rcx, [rbx + 0x1c]
call fcn.1400169c0
jmp 0x140004941
mov dword [r14], eax
mov edi, 0xc0000004
cmp r15, 0x10
jb 0x1400049d4
lea rdx, [r15 + 1]
mov rax, rsi
cmp rdx, 0x1000
jb 0x140004974
add rdx, 0x27
mov rsi, qword [rsi - 8]
sub rax, rsi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004a8a
mov rcx, rsi
call fcn.14001343c
jmp 0x1400049d4
mov edx, dword [rbx + 4]
mov rcx, r14
call fcn.14000e270
mov edi, eax
test eax, eax
js 0x1400049d4
mov eax, dword [0x14001c980]
test sil, al
jne 0x1400049bb
or eax, esi
mov dword [0x14001c980], eax
lea rcx, [0x14001c960]
call fcn.140002cd0
lea rcx, [0x140017e10]
call fcn.140014100
nop
lea rcx, [0x14001c960]
call fcn.1400019a0
movups xmm0, xmmword [rax]
movups xmmword [rbx + 0xc], xmm0
mov eax, dword [rax + 0x10]
mov dword [rbx + 0x1c], eax
lea r9, [rsp + 0x48]
mov r8, qword [rsp + 0x40]
mov rdx, r12
mov rcx, r13
call fcn.140004ea4
test eax, eax
jns 0x1400049f6
mov edi, eax
jmp 0x1400049f6
mov edi, 0xc0000022
mov rax, qword [rbp - 0x71]
mov qword [r12 + 0x38], rax
and dword [r12 + 0x30], 0
xor edx, edx
mov rcx, r12
call qword [sym.imp.ntoskrnl.exe_IofCompleteRequest]
nop
mov rdx, qword [rbp - 0x69]
cmp rdx, 0x10
jb 0x140004a49
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004a44
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004a72
call fcn.14001343c
mov eax, edi
mov rcx, qword [rbp + 0x1f]
xor rcx, rsp
call fcn.1400167f0
mov rbx, qword [rsp + 0x148]
add rsp, 0xf0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14001344c
nop
call fcn.14001344c
nop
call fcn.14001344c
int3
call fcn.14001344c
int3
call fcn.14001344c
int3
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x27]
sub rsp, 0xf0
mov rax, qword [0x14001c030]
xor rax, rsp
mov qword [rbp + 0x17], rax
mov rsi, rdx
mov r14, rcx
add rcx, 0x100
call fcn.14000f388
mov r12d, eax
xor r15d, r15d
test eax, eax
js 0x140004e5a
mov rdx, qword [rsi + 0xb8]
mov r13, qword [rdx + 0x30]
mov rdi, qword [rdx + 8]
lea ecx, [r15 + 0x28]
call fcn.140013434
mov rbx, rax
test rax, rax
je 0x140004b08
mov qword [rax + 0x14], r15
mov qword [rax + 0x1c], r15
mov dword [rax + 0x24], r15d
jmp 0x140004b0b
mov rbx, r15
mov qword [rsp + 0x38], rbx
mov eax, 1
mov dword [rbx], eax
mov dword [rbx + 4], eax
mov qword [rbx + 8], 0x14
mov dword [rbx + 0x10], r15d
mov rdx, qword [rdi + 8]
add rdx, 0x20
mov r8b, byte [rsi + 0x40]
mov rcx, rbx
call qword [sym.imp.ntoskrnl.exe_SePrivilegeCheck]
test al, al
jne 0x140004b4a
mov r12d, 0xc0000061
jmp 0x140004e52
lfence
lea rdx, [r14 + 0x18c]
mov qword [rbp - 0x59], r15
mov edi, 7
mov qword [rbp - 0x51], rdi
mov word [rbp - 0x69], r15w
or r8, 0xffffffffffffffff
inc r8
cmp word [rdx + r8*2], r15w
jne 0x140004b6a
lea rcx, [rbp - 0x69]
call fcn.140005a24
nop
lea rdx, [rbp - 0x69]
lea rcx, [rsp + 0x40]
call fcn.14001086c
nop
mov rdx, qword [rbp - 0x51]
cmp rdx, 8
jb 0x140004bcd
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x69]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004bc8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004e9d
call fcn.14001343c
mov qword [rbp - 0x59], r15
mov qword [rbp - 0x51], rdi
mov word [rbp - 0x69], r15w
cmp qword [rbp - 0x79], r15
jne 0x140004c0b
mov r12d, 0xc0000033
mov rdx, qword [rbp - 0x71]
cmp rdx, 8
jb 0x140004e44
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
call fcn.140001064
jmp 0x140004e44
lea rcx, [rsp + 0x20]
call fcn.140003248
lea r8, [r14 + 0xb0]
cmp r8, rax
je 0x140004c46
lfence
mov rdx, qword [rax]
mov qword [rax], r15
mov rcx, qword [r8]
mov qword [r8], rdx
test rcx, rcx
je 0x140004c46
mov rax, qword [rcx]
mov edx, 1
mov rax, qword [rax]
call qword [0x1400184d0]
mov rcx, qword [rsp + 0x20]
test rcx, rcx
je 0x140004c61
mov rax, qword [rcx]
mov edx, 1
mov rax, qword [rax]
call qword [0x1400184d0]
lea rcx, [rsp + 0x28]
call fcn.140003280
lea r15, [r14 + 0xc0]
cmp r15, rax
je 0x140004ca1
lfence
mov rdx, qword [rax]
and qword [rax], 0
mov rdi, qword [r15]
mov qword [r15], rdx
test rdi, rdi
je 0x140004ca1
mov rcx, rdi
call fcn.14000e1dc
mov edx, 8
mov rcx, rdi
call fcn.14001343c
mov rdi, qword [rsp + 0x28]
test rdi, rdi
je 0x140004cc0
mov rcx, rdi
call fcn.14000e1dc
mov edx, 8
mov rcx, rdi
call fcn.14001343c
call qword [sym.imp.ntoskrnl.exe_PsGetCurrentProcessId]
mov edx, eax
lea rcx, [rbp - 9]
call fcn.1400031d8
nop
lea r8, [rsp + 0x40]
lea rdx, [rbp - 9]
lea rcx, [rbp - 0x29]
call fcn.140002ddc
nop
xor edx, edx
mov rcx, rax
cmp qword [rax + 0x18], 8
jb 0x140004cf4
mov rcx, qword [rax]
mov r8, rax
jb 0x140004cfc
mov r8, qword [rax]
mov rax, qword [rax + 0x10]
lea r9, [r8 + rax*2]
jmp 0x140004d0f
movzx eax, word [rcx]
add edx, eax
add rcx, 2
cmp rcx, r9
jne 0x140004d06
xor edx, 0x7869616e
lea rcx, [rbp - 0x49]
call fcn.140003184
nop
lea rdx, [rbp - 0x49]
lea rcx, [rsp + 0x30]
call fcn.1400032b8
lea rcx, [r14 + 0xb8]
xor r14d, r14d
cmp rcx, rax
je 0x140004d69
lfence
mov rdx, qword [rax]
mov qword [rax], r14
mov rdi, qword [rcx]
mov qword [rcx], rdx
test rdi, rdi
je 0x140004d69
mov rcx, rdi
call fcn.140001458
lea edx, [r14 + 0x20]
mov rcx, rdi
call fcn.14001343c
mov rdi, qword [rsp + 0x30]
test rdi, rdi
je 0x140004d89
mov rcx, rdi
call fcn.140001458
mov edx, 0x20
mov rcx, rdi
call fcn.14001343c
nop
mov rdx, qword [rbp - 0x31]
cmp rdx, 0x10
jb 0x140004d9f
inc rdx
mov rcx, qword [rbp - 0x49]
call fcn.140001064
mov qword [rbp - 0x39], r14
mov qword [rbp - 0x31], 0xf
mov byte [rbp - 0x49], r14b
mov rdx, qword [rbp - 0x11]
cmp rdx, 8
jb 0x140004dca
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x29]
call fcn.140001064
mov qword [rbp - 0x19], r14
mov edi, 7
mov qword [rbp - 0x11], rdi
mov word [rbp - 0x29], r14w
mov rdx, qword [rbp + 0xf]
cmp rdx, 8
jb 0x140004df7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 9]
call fcn.140001064
mov rax, qword [r15]
xor rax, 0x7869616e
mov qword [r13 + 0x18], rax
mov rdx, qword [rbp - 0x71]
cmp rdx, 8
jb 0x140004e41
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004e3c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140004e97
call fcn.14001343c
xor r15d, r15d
mov word [rsp + 0x40], r15w
mov qword [rbp - 0x71], rdi
mov qword [rbp - 0x79], r15
mov rcx, rbx
call fcn.14001343c
mov qword [rsi + 0x38], r15
mov dword [rsi + 0x30], r15d
xor edx, edx
mov rcx, rsi
call qword [sym.imp.ntoskrnl.exe_IofCompleteRequest]
mov eax, r12d
mov rcx, qword [rbp + 0x17]
xor rcx, rsp
call fcn.1400167f0
mov rbx, qword [rsp + 0x140]
add rsp, 0xf0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.14001344c
nop
call fcn.14001344c
int3