Function at 0x1401b9450
Capabilities:
Allocate or change rwx memory
Check for time delay via queryperformancecounter
Execute shellcode via indirect call

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x278]
sub rsp, 0x350
movaps xmmword [rax - 0x38], xmm6
movaps xmmword [rax - 0x48], xmm7
movaps xmmword [rax - 0x58], xmm8
movaps xmmword [rax - 0x68], xmm9
movaps xmmword [rax - 0x78], xmm10
movaps xmmword [rax - 0x88], xmm11
movaps xmmword [rax - 0x98], xmm12
movaps xmmword [rax - 0xa8], xmm13
mov rax, qword [0x1405ec140]
xor rax, rsp
mov qword [rbp + 0x1c0], rax
mov rcx, qword [0x140888938]
test rcx, rcx
jne 0x1401b94e2
mov ecx, 0x110
call fcn.1403ff3a0
mov qword [rbp - 0x80], rax
mov rcx, rax
call fcn.1400830e0
mov rcx, rax
mov qword [0x140888938], rax
mov rax, qword [rcx]
call qword [rax + 0x88]
xor r14d, r14d
mov edi, r14d
mov ecx, 2
cmp rax, rcx
cmova edi, ecx
mov rcx, qword [0x140888938]
test rcx, rcx
jne 0x1401b9528
mov ecx, 0x110
call fcn.1403ff3a0
mov qword [rbp - 0x80], rax
mov rcx, rax
call fcn.1400830e0
mov rcx, rax
mov qword [0x140888938], rax
mov rax, qword [rcx]
call qword [rax + 0xf0]
mov rsi, rax
mov rbx, r14
nop word [rax + rax]
mov edx, 3
mov rcx, rsi
call fcn.1403ea3c0
lea ecx, [rax + 2]
cmp ecx, 1
jbe 0x1401b9581
test rbx, rbx
jne 0x1401b956c
xor r8d, r8d
mov edx, eax
mov rcx, rsi
call fcn.1403ea190
mov rbx, rax
jmp 0x1401b9575
cmp dword [rbx + 0x30], eax
jne 0x1401b9581
mov rbx, qword [rbx + 0x38]
test rbx, rbx
je 0x1401b9581
cmp dword [rbx + 0x10], edi
jne 0x1401b9540
jmp 0x1401b9584
mov rbx, r14
mov qword [rbp - 0x78], r14
mov r9d, 1
lea r8, [rbp - 0x78]
mov rdx, rbx
mov rcx, rsi
call fcn.1403ea030
mov rax, qword [rbp - 0x78]
test rax, rax
je 0x1401b95c2
mov r15d, dword [rax + 0x10]
mov dword [rsp + 0x58], r15d
cmp r15d, edi
jae 0x1401b95c9
mov eax, edi
mov edi, r15d
mov r15d, eax
mov dword [rsp + 0x58], eax
jmp 0x1401b95c9
mov r15d, edi
mov dword [rsp + 0x58], edi
mov ecx, edi
call fcn.1400c7890
call qword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov rcx, rax
mov edx, 1
call qword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov r12d, 0x200000
mov edx, r12d
xor ecx, ecx
call fcn.14016df20
mov ecx, 0x28
call fcn.1403ff3a0
mov r13, rax
mov qword [rbp - 0x80], rax
mov qword [rax], 0x1000000
mov dword [rax + 8], r14d
mov qword [rax + 0x10], 0x1000000
xor eax, eax
mov dword [r13 + 0x18], eax
mov qword [r13 + 0x20], r14
mov rcx, r13
call fcn.1400c7a80
test al, al
jne 0x1401b9640
mov edx, 0x40
mov rcx, qword [r13]
call fcn.1404113f8
mov qword [r13 + 0x20], rax
mov rbx, qword [0x140888938]
test rbx, rbx
jne 0x1401b966d
mov ecx, 0x110
call fcn.1403ff3a0
mov qword [rsp + 0x50], rax
mov rcx, rax
call fcn.1400830e0
mov rbx, rax
mov qword [0x140888938], rax
mov rsi, rbx
test rbx, rbx
jne 0x1401b9696
mov ecx, 0x110
call fcn.1403ff3a0
mov qword [rsp + 0x50], rax
mov rcx, rax
call fcn.1400830e0
mov rsi, rax
mov qword [0x140888938], rax
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0xb8]
mov rbx, rax
shr rbx, 0x16
mov rdx, qword [rsi]
mov rcx, rsi
call qword [rdx + 0xa8]
cmp rbx, rax
jbe 0x1401b96c5
mov r12d, 0x800000
jmp 0x1401b9746
mov rbx, qword [0x140888938]
test rbx, rbx
jne 0x1401b96f2
mov ecx, 0x110
call fcn.1403ff3a0
mov qword [rsp + 0x50], rax
mov rcx, rax
call fcn.1400830e0
mov rbx, rax
mov qword [0x140888938], rax
mov rsi, rbx
test rbx, rbx
jne 0x1401b971b
mov ecx, 0x110
call fcn.1403ff3a0
mov qword [rsp + 0x50], rax
mov rcx, rax
call fcn.1400830e0
mov rsi, rax
mov qword [0x140888938], rax
mov rdx, qword [rbx]
mov rcx, rbx
call qword [rdx + 0xb8]
mov rbx, rax
shr rbx, 0x16
mov rdx, qword [rsi]
mov rcx, rsi
call qword [rdx + 0xa8]
mov ecx, 0x400000
cmp rbx, rax
cmovae r12, rcx
mov qword [rsp + 0x38], r12
cmp dword [0x140882f80], 0
jbe 0x1401b9793
test byte [r13 + 0x18], 1
lea rdx, [0x1405a6960]
lea rcx, [0x1405a695c]
cmovne rcx, rdx
mov rax, r12
shr rax, 0x14
mov qword [rsp + 0x28], rcx
mov qword [rsp + 0x20], rax
mov r9d, r15d
mov r8d, edi
lea rdx, str.Running_GhostRider_benchmark_on_logical_CPUs__u_and__u__max_scratchpad_size__zu_MB__huge_pages__s_
mov ecx, 6
call fcn.140026a00
mov rdi, qword [r13 + 0x20]
mov edx, 0x1000
mov ecx, 0x1c0
call fcn.1404113f8
mov rbx, rax
mov qword [rax + 0xe0], rdi
mov edx, 0x4000
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rbx + 0x118], rax
mov dword [rbx + 0x120], r14d
mov qword [rbx + 0x128], 0xffffffffffffffff
mov qword [rbp + 0x30], rbx
mov edx, 0x1000
mov ecx, 0x1c0
call fcn.1404113f8
mov rbx, rax
lea rcx, [rdi + 0x200000]
mov qword [rax + 0xe0], rcx
mov edx, 0x4000
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rbx + 0x118], rax
mov dword [rbx + 0x120], r14d
mov qword [rbx + 0x128], 0xffffffffffffffff
mov qword [rbp + 0x38], rbx
mov edx, 0x1000
mov ecx, 0x1c0
call fcn.1404113f8
mov rbx, rax
lea rcx, [rdi + 0x400000]
mov qword [rax + 0xe0], rcx
mov edx, 0x4000
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rbx + 0x118], rax
mov dword [rbx + 0x120], r14d
mov qword [rbx + 0x128], 0xffffffffffffffff
mov qword [rbp + 0x40], rbx
mov edx, 0x1000
mov ecx, 0x1c0
call fcn.1404113f8
mov rbx, rax
lea rcx, [rdi + 0x600000]
mov qword [rax + 0xe0], rcx
mov edx, 0x4000
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rbx + 0x118], rax
mov dword [rbx + 0x120], r14d
mov qword [rbx + 0x128], 0xffffffffffffffff
mov qword [rbp + 0x48], rbx
mov edx, 0x1000
mov ecx, 0x1c0
call fcn.1404113f8
mov rbx, rax
lea rcx, [rdi + 0x800000]
mov qword [rax + 0xe0], rcx
mov edx, 0x4000
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rbx + 0x118], rax
mov dword [rbx + 0x120], r14d
mov qword [rbx + 0x128], 0xffffffffffffffff
mov qword [rbp + 0x50], rbx
mov edx, 0x1000
mov ecx, 0x1c0
call fcn.1404113f8
mov rbx, rax
lea rcx, [rdi + 0xa00000]
mov qword [rax + 0xe0], rcx
mov edx, 0x4000
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rbx + 0x118], rax
mov dword [rbx + 0x120], r14d
mov qword [rbx + 0x128], 0xffffffffffffffff
mov qword [rbp + 0x58], rbx
mov edx, 0x1000
mov ecx, 0x1c0
call fcn.1404113f8
mov rbx, rax
lea rcx, [rdi + 0xc00000]
mov qword [rax + 0xe0], rcx
mov edx, 0x4000
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rbx + 0x118], rax
mov dword [rbx + 0x120], r14d
mov qword [rbx + 0x128], 0xffffffffffffffff
mov qword [rbp + 0x60], rbx
mov edx, 0x1000
mov ecx, 0x1c0
call fcn.1404113f8
mov rbx, rax
lea rcx, [rdi + 0xe00000]
mov qword [rax + 0xe0], rcx
mov edx, 0x4000
xor ecx, ecx
lea r9d, [rcx + 0x40]
mov r8d, 0x3000
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rbx + 0x118], rax
mov dword [rbx + 0x120], r14d
mov qword [rbx + 0x128], 0xffffffffffffffff
mov qword [rbp + 0x68], rbx
mov rcx, qword [0x140888938]
test rcx, rcx
jne 0x1401b9a5d
mov ecx, 0x110
call fcn.1403ff3a0
mov qword [rsp + 0x50], rax
mov rcx, rax
call fcn.1400830e0
mov rcx, rax
mov qword [0x140888938], rax
mov rax, qword [rcx]
call qword [rax + 0x20]
lea rcx, [0x140558b10]
lea r9, [0x140558ac0]
test al, al
cmovne r9, rcx
mov qword [rsp + 0x60], r9
cmp dword [0x140882f80], 0
jbe 0x1401b9abc
lea r8, str.Algorithm
lea rdx, str._24s___N___Hashrate
mov ecx, 6
call fcn.140026a00
cmp dword [0x140882f80], 0
jbe 0x1401b9ab7
lea rdx, str.___________________________________________
mov ecx, 6
call fcn.140026a00
mov r9, qword [rsp + 0x60]
lea rax, [0x140558b30]
mov qword [rsp + 0x78], rax
mov rdx, rax
mov qword [rsp + 0x48], rax
mov rcx, r14
mov qword [rsp + 0x40], rcx
mov rsi, r14
mov qword [rsp + 0x68], 6
movsd xmm7, qword [0x1405a6c20]
movsd xmm13, qword [0x1405a6c50]
movsd xmm10, qword [0x1405a6c00]
nop
mov dword [rbp + 0x10], 1
mov dword [rbp + 0x14], 2
mov dword [rbp + 0x18], 4
lea r13, [rbp + 0x10]
nop dword [rax]
lea r8, [0x140000000]
movsxd rax, dword [r13]
mov dword [rsp + 0x30], eax
mov rdi, rax
mov r15, rax
imul r15, qword [rcx + r8 + 0x558ae0]
cmp r15, r12
ja 0x1401b9d1a
mov eax, dword [rdx]
mov dword [rsp + 0x70], eax
mov r8d, 1
mov edx, dword [r9 + rdi*4]
lea rcx, [rsp + 0x70]
call fcn.1400d20c0
mov r12, rax
lea rcx, [rbp - 0x68]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
lea rcx, [rbp - 0x70]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
xorps xmm8, xmm8
cvtsi2sd xmm8, qword [rbp - 0x70]
mulsd xmm8, xmm7
xorps xmm0, xmm0
cvtsi2sd xmm0, qword [rbp - 0x68]
divsd xmm8, xmm0
movaps xmm9, xmm13
mov ebx, r14d
nop dword [rax]
lea rcx, [rbp - 0x58]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
lea rcx, [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
xorps xmm6, xmm6
cvtsi2sd xmm6, qword [rbp - 0x60]
mulsd xmm6, xmm7
xorps xmm0, xmm0
cvtsi2sd xmm0, qword [rbp - 0x58]
divsd xmm6, xmm0
cmp ebx, 0xa
jb 0x1401b9be2
movaps xmm0, xmm6
subsd xmm0, xmm8
comisd xmm0, xmm10
jae 0x1401b9c40
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0x30]
lea r8, [rbp + 0xc0]
mov edx, 0x50
lea rcx, [rbp + 0x70]
call r12
lea rcx, [rbp - 0x48]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
lea rcx, [rbp - 0x50]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
xorps xmm1, xmm1
cvtsi2sd xmm1, qword [rbp - 0x50]
mulsd xmm1, xmm7
xorps xmm0, xmm0
cvtsi2sd xmm0, qword [rbp - 0x48]
divsd xmm1, xmm0
subsd xmm1, xmm6
minsd xmm1, xmm9
movaps xmm9, xmm1
inc ebx
jmp 0x1401b9ba0
xorps xmm6, xmm6
test rdi, rdi
js 0x1401b9c4f
cvtsi2sd xmm6, rdi
jmp 0x1401b9c67
mov rcx, rdi
shr rcx, 1
mov rax, rdi
and eax, 1
or rcx, rax
cvtsi2sd xmm6, rcx
addsd xmm6, xmm6
mulsd xmm6, xmm7
divsd xmm6, xmm9
cmp dword [0x140882f80], 0
jbe 0x1401b9ca9
movsd qword [rsp + 0x20], xmm6
mov r9, rdi
mov r8, qword [rsp + 0x40]
lea rdi, [0x140000000]
mov r8, qword [r8 + rdi + 0x558a90]
lea rdx, str._24s___llux1___.2f_h_s
mov ecx, 6
call fcn.140026a00
jmp 0x1401b9cb0
lea rdi, [0x140000000]
mov eax, dword [rsp + 0x30]
comisd xmm6, xmmword [rsi + rdi + 0x5f2d00]
jbe 0x1401b9cda
movsd qword [rsi + rdi + 0x5f2d00], xmm6
mov dword [rsi + rdi + 0x5f2d08], eax
mov dword [rsi + rdi + 0x5f2d0c], 1
mov rcx, qword [rsp + 0x40]
mov rdx, qword [rsp + 0x48]
mov r12, qword [rsp + 0x38]
cmp r15, 0x800000
jae 0x1401b9d21
comisd xmm6, xmmword [rsi + rdi + 0x5f2d60]
jbe 0x1401b9d21
movsd qword [rsi + rdi + 0x5f2d60], xmm6
mov dword [rsi + rdi + 0x5f2d68], eax
mov dword [rsi + rdi + 0x5f2d6c], 1
jmp 0x1401b9d21
lea rdi, [0x140000000]
add r13, 4
lea rax, [rbp + 0x1c]
cmp r13, rax
mov r9, qword [rsp + 0x60]
jne 0x1401b9b20
add rcx, 8
mov qword [rsp + 0x40], rcx
add rdx, 4
mov qword [rsp + 0x48], rdx
add rsi, 0x10
sub qword [rsp + 0x68], 1
jne 0x1401b9b00
call fcn.1403eb920
mov rbx, rax
mov edx, dword [rsp + 0x58]
mov rcx, rax
call fcn.1403ed330
mov ecx, 0x290
call fcn.1403ff3a0
mov qword [rsp + 0x50], rax
xor r9d, r9d
lea r8d, [r9 + 3]
mov rdx, rbx
mov rcx, rax
call fcn.1401b9020
mov rbx, rax
mov r13, r14
mov rsi, r14
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x58], 6
movsd xmm10, qword [0x1405a6c08]
movsd xmm11, qword [0x1405a6c28]
movsd xmm12, qword [0x1405a6bc8]
mov dword [rbp + 0x20], 1
mov dword [rbp + 0x24], 2
mov dword [rbp + 0x28], 4
lea r12, [rbp + 0x20]
mov rax, qword [rsp + 0x38]
nop
movsxd rdx, dword [r12]
mov qword [rsp + 0x48], rdx
mov r15, rdx
imul r15, qword [rdi + r13 + 0x558ae0]
add r15, r15
cmp r15, rax
ja 0x1401ba081
mov rax, qword [rsp + 0x78]
mov eax, dword [rax]
mov dword [rsp + 0x30], eax
mov r8d, 1
mov rax, qword [rsp + 0x60]
mov edx, dword [rax + rdx*4]
lea rcx, [rsp + 0x30]
call fcn.1400d20c0
mov qword [rsp + 0x68], rax
lea rcx, [rbp - 0x38]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
lea rcx, [rbp - 0x40]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
xorps xmm9, xmm9
cvtsi2sd xmm9, qword [rbp - 0x40]
mulsd xmm9, xmm7
xorps xmm0, xmm0
cvtsi2sd xmm0, qword [rbp - 0x38]
divsd xmm9, xmm0
movaps xmm8, xmm13
mov edi, r14d
lea rsi, vtable.xmrig::ghostrider::HelperThread::Task_class__lambda_356cd37bf7b3bf206324a1122a9e08f6__.0
nop dword [rax + rax]
lea rcx, [rbp - 0x28]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
lea rcx, [rbp - 0x30]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
xorps xmm6, xmm6
cvtsi2sd xmm6, qword [rbp - 0x30]
mulsd xmm6, xmm7
xorps xmm0, xmm0
cvtsi2sd xmm0, qword [rbp - 0x28]
divsd xmm6, xmm0
cmp edi, 0xa
jb 0x1401b9eb6
movaps xmm0, xmm6
subsd xmm0, xmm9
comisd xmm0, xmm10
jae 0x1401b9fb3
lea rax, [rsp + 0x68]
mov qword [rbp - 0x18], rax
lea rax, [rbp + 0x70]
mov qword [rbp - 0x10], rax
lea rax, [rbp + 0xc0]
mov qword [rbp - 8], rax
lea rax, [rbp + 0x30]
mov qword [rbp], rax
lea rax, [rsp + 0x48]
mov qword [rbp + 8], rax
mov rcx, rbx
call sub.KERNEL32.dll_EnterCriticalSection
mov ecx, dword [rbx + 0x270]
shl rcx, 7
mov eax, dword [rbx + 0x270]
inc eax
mov dword [rbx + 0x270], eax
mov qword [rcx + rbx + 0x70], rsi
movups xmm0, xmmword [rbp - 0x18]
movups xmmword [rcx + rbx + 0x78], xmm0
movups xmm1, xmmword [rbp - 8]
movups xmmword [rcx + rbx + 0x88], xmm1
movsd xmm0, qword [rbp + 8]
movsd qword [rcx + rbx + 0x98], xmm0
lea rcx, [rbx + 0x28]
call sub.KERNEL32.dll_WakeConditionVariable
mov rcx, rbx
call sub.KERNEL32.dll_LeaveCriticalSection
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0x30]
lea r8, [rbp + 0xc0]
mov edx, 0x50
lea rcx, [rbp + 0x70]
call qword [rsp + 0x68]
mov eax, dword [rbx + 0x270]
test eax, eax
je 0x1401b9f6f
pause
mov eax, dword [rbx + 0x270]
test eax, eax
jne 0x1401b9f63
lea rcx, [rsp + 0x50]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
lea rcx, [rbp - 0x20]
call qword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
xorps xmm1, xmm1
cvtsi2sd xmm1, qword [rbp - 0x20]
mulsd xmm1, xmm7
xorps xmm0, xmm0
cvtsi2sd xmm0, qword [rsp + 0x50]
divsd xmm1, xmm0
subsd xmm1, xmm6
minsd xmm1, xmm8
movaps xmm8, xmm1
inc edi
jmp 0x1401b9e70
mov rdx, qword [rsp + 0x48]
xorps xmm6, xmm6
test rdx, rdx
js 0x1401b9fc7
cvtsi2sd xmm6, rdx
jmp 0x1401b9fdf
mov rcx, rdx
shr rcx, 1
mov rax, rdx
and eax, 1
or rcx, rax
cvtsi2sd xmm6, rcx
addsd xmm6, xmm6
mulsd xmm6, xmm11
divsd xmm6, xmm8
mulsd xmm6, xmm12
cmp dword [0x140882f80], 0
mov rsi, qword [rsp + 0x40]
lea rdi, [0x140000000]
jbe 0x1401ba02a
movsd qword [rsp + 0x20], xmm6
mov r9, rdx
mov r8, qword [rdi + r13 + 0x558a90]
lea rdx, str._24s___llux2___.2f_h_s
mov ecx, 6
call fcn.140026a00
mov rdx, qword [rsp + 0x48]
mov eax, 2
comisd xmm6, xmmword [rsi + rdi + 0x5f2d00]
jbe 0x1401ba051
movsd qword [rsi + rdi + 0x5f2d00], xmm6
mov dword [rsi + rdi + 0x5f2d08], edx
mov dword [rsi + rdi + 0x5f2d0c], eax
cmp r15, 0x800000
jae 0x1401ba07c
comisd xmm6, xmmword [rsi + rdi + 0x5f2d60]
jbe 0x1401ba07c
movsd qword [rsi + rdi + 0x5f2d60], xmm6
mov dword [rsi + rdi + 0x5f2d68], edx
mov dword [rsi + rdi + 0x5f2d6c], eax
mov rax, qword [rsp + 0x38]
add r12, 4
lea rcx, [rbp + 0x2c]
cmp r12, rcx
jne 0x1401b9de0
add r13, 8
add qword [rsp + 0x78], 4
add rsi, 0x10
mov qword [rsp + 0x40], rsi
sub qword [rsp + 0x58], 1
jne 0x1401b9dc0
test rbx, rbx
je 0x1401ba0be
mov rcx, rbx
call fcn.1401ba140
cmp qword [rbp + 0x30], 0
je 0x1401ba0d8
mov rcx, qword [rbp + r14*8 + 0x30]
call fcn.1404113dc
inc r14
cmp r14, 8
jb 0x1401ba0c5
mov rcx, qword [rbp - 0x80]
call fcn.140080a50
mov rcx, qword [rbp + 0x1c0]
xor rcx, rsp
call fcn.1403ff380
lea r11, [rsp + 0x350]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
movaps xmm10, xmmword [r11 - 0x50]
movaps xmm11, xmmword [r11 - 0x60]
movaps xmm12, xmmword [r11 - 0x70]
movaps xmm13, xmmword [r11 - 0x80]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret