Function at 0x1400c01a3
Capabilities:
Query service status

Disassembly:
push rax
pushf
mov eax, 0xd81030f3
pushf
not eax
add eax, 0xedc10a65
xor eax, 0xa3590b96
rol eax, 0x8a
popf
pushf
not eax
add eax, 0xc09f04a4
xor eax, 0xf779775e
rol eax, 8
popf
pushf
not eax
add eax, 0xf5970b93
xor eax, 0xcb8474a4
rol eax, 0x39
popf
cmp eax, 4
jne 0x1400c01f3
popf
pop rax
jmp 0x1400c0b6a
cmp eax, 0
jne 0x1400c0202
popf
pop rax
jmp 0x1400c025c
cmp eax, 3
jne 0x1400c0211
popf
pop rax
jmp 0x1400c080f
cmp eax, 1
jne 0x1400c0220
popf
pop rax
jmp 0x1400c032b
cmp eax, 5
jne 0x1400c022f
popf
pop rax
jmp 0x1400c0bf9
cmp eax, 7
jne 0x1400c023e
popf
pop rax
jmp 0x1400c1102
cmp eax, 6
jne 0x1400c024d
popf
pop rax
jmp 0x1400c10a1
cmp eax, 2
jne 0x1400c025c
popf
pop rax
jmp 0x1400c0784
mov qword [rsp + 0x18], rbx
mov qword [rsp + 0x20], rdi
push rbp
lea rbp, [rsp - 0x57]
sub rsp, 0xb0
mov rax, qword [0x140084080]
xor rax, rsp
mov qword [rbp + 0x47], rax
xor edx, edx
mov rbx, rcx
xor ecx, ecx
lea r8d, [rdx + 1]
jmp 0x1400c028d
call qword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov rdi, rax
test rax, rax
jne 0x1400c02d2
push rax
pushf
mov eax, 0x47df88c6
pushf
not eax
add eax, 0x807a0d4c
xor eax, 0xc282a98e
rol eax, 0x41
popf
pushf
not eax
add eax, 0xdf6798fd
xor eax, 0xeb273ee5
rol eax, 0x2c
popf
jmp 0x1400c01e4
push rax
pushf
mov eax, 0xdea3224e
pushf
not eax
add eax, 0xdaa70962
xor eax, 0x95c02c64
rol eax, 0x4a
popf
pushf
not eax
add eax, 0xe8f737b8
xor eax, 0xca4450be
rol eax, 0x15
popf
pushf
not eax
add eax, 0xb6215fa9
xor eax, 0xc11a5502
rol eax, 0x19
popf
pushf
not eax
add eax, 0xf939cd20
xor eax, 0xfdf743a9
rol eax, 0x45
popf
jmp 0x1400c01e4
movabs rdx, 0x9a7ebf826c4bd9c4
pushf
not rdx
add rdx, 0x460cae0c
xor rdx, 0x4bbf8a01
rol rdx, 0x72
popf
pushf
not rdx
add rdx, 0x5c341973
xor rdx, 0x58891460
rol rdx, 0xfc
popf
pushf
not rdx
add rdx, 0x63e69e98
xor rdx, 0x5e909fe9
rol rdx, 0xdc
popf
movabs rax, 0xd90421a8168aee1d
pushf
not rax
add rax, 0x7c5608af
xor rax, 0x7cb67b9f
rol rax, 0xa0
popf
pushf
not rax
add rax, 0x72bf873b
xor rax, 0x5d9e3dcd
rol rax, 0x92
popf
pushf
not rax
add rax, 0x7fdf8c62
xor rax, 0x630a6e60
rol rax, 0xb5
popf
mov qword [rbp - 0x19], rax
movabs rcx, 0x217cb439431b5d98
pushf
not rcx
add rcx, 0x4f99dd05
xor rcx, 0x6521b3bd
rol rcx, 3
popf
pushf
not rcx
add rcx, 0x4cf38b62
xor rcx, 0x5bfee817
rol rcx, 0x41
popf
pushf
not rcx
add rcx, 0x7fea0bdb
xor rcx, 0x7d78001a
rol rcx, 0x42
popf
pushf
not rcx
add rcx, 0x50ad46e1
xor rcx, 0x6dd17b82
rol rcx, 0x84
popf
mov qword [rbp + 0x17], rcx
movabs rax, 0x3c64587c22b6d3a1
pushf
not rax
add rax, 0x61a2a092
xor rax, 0x46d1261e
rol rax, 0xc1
popf
pushf
not rax
add rax, 0x7b208945
xor rax, 0x7c2484c2
rol rax, 0x48
popf
pushf
not rax
add rax, 0x7e52d9a6
xor rax, 0x559240ad
rol rax, 0x23
popf
mov qword [rbp - 0x11], rax
movabs rcx, 0x7479cd7c1ddb84f0
pushf
not rcx
add rcx, 0x6b2984a5
xor rcx, 0x77c15ff2
rol rcx, 0x90
popf
pushf
not rcx
add rcx, 0x5507db61
xor rcx, 0x544e42bc
rol rcx, 0x6f
popf
pushf
not rcx
add rcx, 0x64f82fe2
xor rcx, 0x6e3a7077
rol rcx, 0xf3
popf
movdqa xmm0, xmmword [rbp - 0x19]
movabs rax, 0x95d3cb9386476103
pushf
not rax
add rax, 0x625e919e
xor rax, 0x4d20af0e
rol rax, 0x60
popf
pushf
not rax
add rax, 0x599572c9
xor rax, 0x69e61f51
rol rax, 0xf9
popf
mov qword [rbp - 9], rax
movabs r8, 0x4a2884d897fcfe68
pushf
not r8
add r8, 0x57b17eed
xor r8, 0x738e68c0
rol r8, 0x3a
popf
pushf
not r8
add r8, 0x50196359
xor r8, 0x7758ff49
rol r8, 0x2b
popf
pushf
not r8
add r8, 0x59361946
xor r8, 0x4f2a47a6
rol r8, 0xc2
popf
mov qword [rbp + 0x1f], rcx
movabs rax, 0x1f657f85f99bdc7d
pushf
not rax
add rax, 0x789843fe
xor rax, 0x5c0b8c63
rol rax, 0x1d
popf
pushf
not rax
add rax, 0x762797d7
xor rax, 0x4266dfcc
rol rax, 0x26
popf
pushf
not rax
add rax, 0x71406102
xor rax, 0x4d834e1b
rol rax, 0x21
popf
xorps xmm0, xmmword [rbp + 0x17]
movabs rcx, 0x9380bfbf29bc0f28
pushf
not rcx
add rcx, 0x5bc92b66
xor rcx, 0x7985223f
rol rcx, 0x51
popf
pushf
not rcx
add rcx, 0x7b90a730
xor rcx, 0x6150c7e7
rol rcx, 0xba
popf
mov qword [rbp - 1], rax
movabs rax, 0xa9c2237af41fbfa0
pushf
not rax
add rax, 0x45029d6a
xor rax, 0x78fed980
rol rax, 0xde
popf
pushf
not rax
add rax, 0x4b738c5f
xor rax, 0x541cd319
rol rax, 0x73
popf
pushf
not rax
add rax, 0x6e56dd93
xor rax, 0x7db45114
rol rax, 0
popf
movdqa xmm1, xmmword [rbp - 9]
mov qword [rbp + 7], rax
movabs rax, 0x29327188324c76ec
pushf
not rax
add rax, 0x703fe8a6
xor rax, 0x473c4aba
rol rax, 0x54
popf
pushf
not rax
add rax, 0x6e1e0e09
xor rax, 0x64785a1f
rol rax, 0x1d
popf
pushf
not rax
add rax, 0x44d8d4c0
xor rax, 0x5fffa2d3
rol rax, 0x4a
popf
pushf
not rax
add rax, 0x5b1dc1d9
xor rax, 0x6a37f501
rol rax, 0x84
popf
mov qword [rbp + 0xf], rdx
movdqa xmmword [rbp - 0x19], xmm0
movdqa xmm0, xmmword [rbp + 7]
mov qword [rbp + 0x27], rcx
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov qword [rbp + 0x3f], rdx
lea rdx, [rbp - 0x19]
mov qword [rbp + 0x2f], rax
xorps xmm1, xmmword [rbp + 0x27]
mov qword [rbp + 0x37], r8
xorps xmm0, xmmword [rbp + 0x37]
movdqa xmmword [rbp - 9], xmm1
movdqa xmmword [rbp + 7], xmm0
call fcn.1400b8cc6
mov rbx, rax
jmp 0x1400c071c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
jmp 0x1400c0728
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x1898c35f7]
pushf
sub rdx, 0x498bb5d7
popf
jmp 0x1400c0744
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor al, al
jmp 0x1400c110a
mov r8d, 0x67dbb548
pushf
not r8d
add r8d, 0x9d24405e
xor r8d, 0x81d4f380
rol r8d, 0x52
popf
pushf
not r8d
add r8d, 0xe5975654
xor r8d, 0x8b69d1d3
rol r8d, 0xe5
popf
pushf
not r8d
add r8d, 0xb11fc046
xor r8d, 0xac581265
rol r8d, 0xc9
popf
pushf
not r8d
add r8d, 0xf69af93d
xor r8d, 0x93ca172d
rol r8d, 0x87
popf
mov qword [rsp + 0xc8], rsi
mov rdx, rbx
mov rcx, rdi
jmp 0x1400c07fd
call qword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov rsi, rax
test rax, rax
jne 0x1400c0b6a
movabs rax, 0x6664a22c21b9e4e
pushf
not rax
add rax, 0x55d59c79
xor rax, 0x713cfaf2
rol rax, 0xc2
popf
pushf
not rax
add rax, 0x5c2c82b4
xor rax, 0x6968e2ca
rol rax, 0xe9
popf
pushf
not rax
add rax, 0x5c02e34d
xor rax, 0x764b4924
rol rax, 0x68
popf
pushf
not rax
add rax, 0x43056d71
xor rax, 0x53d00283
rol rax, 0x8f
popf
lea rdx, [rbp + 0x17]
mov qword [rbp + 0x17], rax
movabs rcx, 0xc110ee381460c9d7
pushf
not rcx
add rcx, 0x64f72712
xor rcx, 0x43175a20
rol rcx, 0xe7
popf
pushf
not rcx
add rcx, 0x574eaa54
xor rcx, 0x6516ea8d
rol rcx, 0x99
popf
pushf
not rcx
add rcx, 0x7b2d73f6
xor rcx, 0x5672feaf
rol rcx, 0xa1
popf
pushf
not rcx
add rcx, 0x661c2583
xor rcx, 0x66d0b976
rol rcx, 0xae
popf
mov qword [rbp - 0x19], rcx
movabs rax, 0x34d9dff87cea88f4
pushf
not rax
add rax, 0x6a0c5e88
xor rax, 0x53568670
rol rax, 0xe3
popf
pushf
not rax
add rax, 0x71b7d815
xor rax, 0x459a9272
rol rax, 0x3d
popf
pushf
not rax
add rax, 0x69b0429a
xor rax, 0x5eef4e13
rol rax, 0xf0
popf
pushf
not rax
add rax, 0x7e7c8769
xor rax, 0x5e1871ca
rol rax, 0xd3
popf
mov qword [rbp + 0x1f], rax
movabs rcx, 0x6ce33e160d55f360
pushf
not rcx
add rcx, 0x406bde40
xor rcx, 0x6cc10d2e
rol rcx, 0xbd
popf
pushf
not rcx
add rcx, 0x4afdc99a
xor rcx, 0x7e876681
rol rcx, 0xee
popf
pushf
not rcx
add rcx, 0x53232339
xor rcx, 0x7bde8698
rol rcx, 0x3b
popf
movdqa xmm0, xmmword [rbp + 0x17]
movabs rax, 0xf232e8c9a4164c3a
pushf
not rax
add rax, 0x6c7580e1
xor rax, 0x722e8474
rol rax, 0xe0
popf
pushf
not rax
add rax, 0x67ccd24d
xor rax, 0x4227c306
rol rax, 0xd3
popf
pushf
not rax
add rax, 0x6c66d8c0
xor rax, 0x482ccc26
rol rax, 0x19
popf
mov qword [rbp + 0x27], rax
movabs rax, 0x947720e0fe480a72
pushf
not rax
add rax, 0x472f06da
xor rax, 0x4c34dd51
rol rax, 0x8f
popf
pushf
not rax
add rax, 0x67ca06be
xor rax, 0x7ed7723d
rol rax, 0x82
popf
pushf
not rax
add rax, 0x4745628b
xor rax, 0x7f0a9c1b
rol rax, 0xd
popf
pushf
not rax
add rax, 0x586abdbd
xor rax, 0x68c2e793
rol rax, 0x3d
popf
mov qword [rbp - 0x11], rcx
movabs rcx, 0xb30105404062e3a1
pushf
not rcx
add rcx, 0x739a9498
xor rcx, 0x4adc0292
rol rcx, 0x45
popf
pushf
not rcx
add rcx, 0x61cb6f39
xor rcx, 0x7a227f25
rol rcx, 0xb4
popf
pushf
not rcx
add rcx, 0x7226da51
xor rcx, 0x50ae89b7
rol rcx, 0x88
popf
xorps xmm0, xmmword [rbp - 0x19]
mov qword [rbp + 0x2f], rax
movdqa xmm1, xmmword [rbp + 0x27]
mov qword [rbp - 9], rcx
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov qword [rbp - 1], rax
xorps xmm1, xmmword [rbp - 9]
movdqa xmmword [rbp + 0x27], xmm1
movdqa xmmword [rbp + 0x17], xmm0
call fcn.1400b8cc6
mov rbx, rax
jmp 0x1400c0af8
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
jmp 0x1400c0b04
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x18dc5c718]
pushf
sub rdx, 0x4dc546f8
popf
jmp 0x1400c0b20
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rdi
jmp 0x1400c0b2a
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
xor al, al
jmp 0x1400c1102
lea rdx, [rbp - 0x39]
mov rcx, rsi
jmp 0x1400c0b72
call qword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
test eax, eax
jne 0x1400c0bb3
push rax
pushf
mov eax, 0xfba8e415
pushf
not eax
add eax, 0xd2e95391
xor eax, 0xf195aade
rol eax, 0x45
popf
pushf
not eax
add eax, 0x86b69670
xor eax, 0xebfde1ca
rol eax, 0xa2
popf
jmp 0x1400c01e4
push rax
pushf
mov eax, 0x83814fc9
pushf
not eax
add eax, 0xac86487c
xor eax, 0xdceddfab
rol eax, 0x22
popf
pushf
not eax
add eax, 0x9c1c6cfa
xor eax, 0x8a768a09
rol eax, 0xb1
popf
pushf
not eax
add eax, 0x891fa106
xor eax, 0xd3e88503
rol eax, 0xb2
popf
jmp 0x1400c01e4
movabs r8, 0x10e4dd547f173120
pushf
not r8
add r8, 0x5e47341c
xor r8, 0x4c980a74
rol r8, 0x2d
popf
pushf
not r8
add r8, 0x5aa843ee
xor r8, 0x40edb7ae
rol r8, 0x83
popf
pushf
not r8
add r8, 0x725125f6
xor r8, 0x66f3489d
rol r8, 0x79
popf
pushf
not r8
add r8, 0x6d68a4e6
xor r8, 0x6adf6b64
rol r8, 0xc8
popf
movabs rdx, 0x8c57a1ba2a58655a
pushf
not rdx
add rdx, 0x5e01dc4f
xor rdx, 0x5ef91714
rol rdx, 0xa4
popf
pushf
not rdx
add rdx, 0x47f6b6a9
xor rdx, 0x74589323
rol rdx, 0x79
popf
pushf
not rdx
add rdx, 0x61d656bb
xor rdx, 0x78ffa003
rol rdx, 0x53
popf
pushf
not rdx
add rdx, 0x781ad1b9
xor rdx, 0x74813e3f
rol rdx, 0x2b
popf
mov qword [rbp + 0xf], rdx
movabs rax, 0x7f39a0b5a74a57fc
pushf
not rax
add rax, 0x50451977
xor rax, 0x733d5df4
rol rax, 0x96
popf
pushf
not rax
add rax, 0x5e58364e
xor rax, 0x775c3952
rol rax, 0xa8
popf
pushf
not rax
add rax, 0x60b4e3d1
xor rax, 0x5282c04d
rol rax, 0xfe
popf
mov qword [rbp - 0x19], rax
movabs rcx, 0x4bb87fbb69381f96
pushf
not rcx
add rcx, 0x4b2a35b9
xor rcx, 0x6c1b1527
rol rcx, 0x5c
popf
pushf
not rcx
add rcx, 0x7ddace0e
xor rcx, 0x5a8c9713
rol rcx, 0x7e
popf
pushf
not rcx
add rcx, 0x441c5aa4
xor rcx, 0x58abf041
rol rcx, 0xab
popf
mov qword [rbp + 0x17], rcx
movabs rax, 0xffc122b313ef4bde
pushf
not rax
add rax, 0x4f50adcd
xor rax, 0x5fee1608
rol rax, 0x66
popf
pushf
not rax
add rax, 0x7360b78b
xor rax, 0x5b8c644a
rol rax, 0x86
popf
pushf
not rax
add rax, 0x50775eae
xor rax, 0x43fac24a
rol rax, 0xd7
popf
pushf
not rax
add rax, 0x615ecca5
xor rax, 0x579f4795
rol rax, 0xa6
popf
mov qword [rbp - 0x11], rax
movabs rcx, 0x8d385867192b52c4
pushf
not rcx
add rcx, 0x61f6980f
xor rcx, 0x768aa801
rol rcx, 0x6c
popf
pushf
not rcx
add rcx, 0x6d193391
xor rcx, 0x67f08e06
rol rcx, 0xe7
popf
pushf
not rcx
add rcx, 0x7e85b12e
xor rcx, 0x4a9e3166
rol rcx, 0x5d
popf
pushf
not rcx
add rcx, 0x78583e0d
xor rcx, 0x7aac6ade
rol rcx, 0x59
popf
movdqa xmm0, xmmword [rbp - 0x19]
movabs rax, 0x25a4acdf86ac6fb6
pushf
not rax
add rax, 0x7581693d
xor rax, 0x7ffdcc26
rol rax, 0xb1
popf
pushf
not rax
add rax, 0x6a779322
xor rax, 0x6d89c73b
rol rax, 0x57
popf
pushf
not rax
add rax, 0x557abc3e
xor rax, 0x7e61bb7a
rol rax, 0x6e
popf
mov qword [rbp - 9], rax
movabs rax, 0x79d6ac4df6afe4e0
pushf
not rax
add rax, 0x56553673
xor rax, 0x602561d9
rol rax, 0x59
popf
pushf
not rax
add rax, 0x7b5f08cd
xor rax, 0x685e9927
rol rax, 0x16
popf
mov qword [rbp + 0x1f], rcx
movabs rcx, 0x2719f204e4baf03d
pushf
not rcx
add rcx, 0x51217e1c
xor rcx, 0x78d959a8
rol rcx, 0x59
popf
pushf
not rcx
add rcx, 0x60027922
xor rcx, 0x599bf65d
rol rcx, 0xf7
popf
pushf
not rcx
add rcx, 0x5029c368
xor rcx, 0x7d94f39c
rol rcx, 0x43
popf
pushf
not rcx
add rcx, 0x5d196a2a
xor rcx, 0x617c468c
rol rcx, 0x90
popf
xorps xmm0, xmmword [rbp + 0x17]
mov qword [rbp - 1], rax
movabs rax, 0x823de11815b9b5f4
pushf
not rax
add rax, 0x7f14ccce
xor rax, 0x5189495c
rol rax, 0x22
popf
pushf
not rax
add rax, 0x628230b0
xor rax, 0x557c99e9
rol rax, 0x1d
popf
pushf
not rax
add rax, 0x59d04c21
xor rax, 0x5c1f180f
rol rax, 0xb1
popf
movdqa xmm1, xmmword [rbp - 9]
mov qword [rbp + 7], r8
movdqa xmmword [rbp - 0x19], xmm0
movdqa xmm0, xmmword [rbp + 7]
mov qword [rbp + 0x27], rcx
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
mov qword [rbp + 0x3f], rdx
lea rdx, [rbp - 0x19]
mov qword [rbp + 0x2f], rax
xorps xmm1, xmmword [rbp + 0x27]
mov qword [rbp + 0x37], r8
xorps xmm0, xmmword [rbp + 0x37]
movdqa xmmword [rbp - 9], xmm1
movdqa xmmword [rbp + 7], xmm0
call fcn.1400b8cc6
mov rbx, rax
jmp 0x1400c0fff
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
mov rcx, rbx
jmp 0x1400c100b
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int____ptr64]
mov rcx, rax
lea rdx, [0x1a707e36b]
pushf
sub rdx, 0x6707634b
popf
jmp 0x1400c1027
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rsi
jmp 0x1400c1031
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov rcx, rdi
jmp 0x1400c103b
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
xor al, al
jmp 0x1400c1102
mov rcx, rsi
jmp 0x1400c10a5
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov rcx, rdi
jmp 0x1400c10af
call qword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
cmp dword [rbp - 0x35], 4
sete al
push rax
pushf
mov eax, 0xfcc24c97
pushf
not eax
add eax, 0xce6136f3
xor eax, 0xe68531c7
rol eax, 0xb2
popf
pushf
not eax
add eax, 0x8206505c
xor eax, 0xf7ef726f
rol eax, 0xfa
popf
pushf
not eax
add eax, 0xe862580d
xor eax, 0xd8de7006
rol eax, 0x4f
popf
jmp 0x1400c01e4
mov rsi, qword [rsp + 0xc8]
mov rcx, qword [rbp + 0x47]
xor rcx, rsp
call fcn.1400e231b
lea r11, [rsp + 0xb0]
mov rbx, qword [r11 + 0x20]
mov rdi, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret