Function at 0x1406dc8e0
Capabilities:
Execute anti-debugging instructions

Disassembly:
mov dword [rsp + 0x20], r9d
shrd rax, rbp, 0xc
mov qword [rsp + 0x18], r8
shld eax, r14d, 0x86
xchg ah, ah
mov qword [rsp + 0x10], rdx
cmc
adc eax, 0x12278f2f
mov qword [rsp + 8], rcx
sub rsp, 0xd8
mov ax, r13w
lahf
mov dword [rsp + 0x9c], 1
movzx ax, dil
mov eax, 0xf4996591
mov rax, qword [rsp + 0xe0]
jmp 0x1406dc934
mov eax, dword [rax + 0x24]
mov dword [rsp + 0xa8], eax
mov rax, qword [rsp + 0xe0]
jmp 0x1406dc94b
mov eax, dword [rax + 0x28]
mov dword [rsp + 0xac], eax
mov dword [rsp + 0x78], 0
mov dword [rsp + 0x58], 0
jmp 0x1406dc96a
jmp 0x1406dc987
mov eax, dword [rsp + 0x58]
jmp 0x1406dc978
inc eax
test rax, rbp
cmc
mov dword [rsp + 0x58], eax
sub ax, si
shl al, cl
mov eax, dword [rsp + 0xf8]
cmp r13, 0x108551b5
cmp dword [rsp + 0x58], eax
jmp 0x1406dc99e
jge 0x1406dd67a
movsxd rax, dword [rsp + 0x58]
bswap cx
adc rcx, 0x5db01089
imul rax, rax, 0x28
movzx ecx, cx
movsxd rcx, esp
movzx rcx, si
mov rcx, qword [rsp + 0xf0]
jmp 0x1406dc9ce
movss xmm0, dword [rcx + rax]
jmp 0x1406dc9d8
movss dword [rsp + 0x70], xmm0
jmp 0x1406dc9e3
movss xmm0, dword [rsp + 0x70]
jmp 0x1406dc9ee
comiss xmm0, dword [0x1400c197c]
jbe 0x1406dca25
movss xmm1, dword [rsp + 0x70]
movsx cx, sil
mov cx, r15w
movzx ecx, cx
mov rcx, qword [rsp + 0xe8]
call fcn.1406d5fab
movss dword [rsp + 0x7c], xmm0
jmp 0x1406dca5a
movss xmm0, dword [rsp + 0x70]
mov cl, 0xf
xorps xmm0, xmmword [0x1400c1c00]
movsx cx, sil
movaps xmm1, xmm0
movzx ecx, r14w
mov rcx, qword [rsp + 0xe8]
call fcn.1406d607a
movss dword [rsp + 0x7c], xmm0
and rcx, 0xffffffffc01a2206
movss xmm0, dword [rsp + 0x7c]
jmp 0x1406dca68
movss dword [rsp + 0x64], xmm0
cmp dil, 0x93
movzx rcx, r11w
add cx, bp
movsxd rax, dword [rsp + 0x58]
imul rax, rax, 0x28
test r9b, r8b
sub ch, 0x17
cmp ch, bl
mov rcx, qword [rsp + 0xf0]
movzx eax, byte [rcx + rax + 0x20]
mov rcx, qword [rsp + 0xe0]
test r13b, sil
mov dword [rcx + 0x24], eax
cmp sp, 0xd7bf
clc
movsxd rax, dword [rsp + 0x58]
bts cx, r15w
inc ch
imul rax, rax, 0x28
movzx cx, cl
bswap ecx
movsxd rcx, edi
mov rcx, qword [rsp + 0xf0]
jmp 0x1406dcad1
movzx eax, byte [rcx + rax + 0x21]
movsx ecx, cx
mov rcx, qword [rsp + 0xe0]
jmp 0x1406dcae6
mov dword [rcx + 0x28], eax
movsx rax, cx
jmp 0x1406dcaf5
mov rax, qword [rsp + 0xe0]
mov eax, dword [rax + 0x24]
cvtsi2ss xmm0, rax
movss xmm1, dword [0x1400c1a58]
jmp 0x1406dcb12
divss xmm1, xmm0
movaps xmm0, xmm1
bswap rax
movss dword [rsp + 0x88], xmm0
mov rax, qword [rsp + 0xe0]
jmp 0x1406dcb32
mov eax, dword [rax + 0x28]
jmp 0x1406dcb3a
cvtsi2ss xmm0, rax
movss xmm1, dword [0x1400c1a58]
divss xmm1, xmm0
movaps xmm0, xmm1
movsx ax, dl
movzx eax, cx
movsx ecx, r10w
movss dword [rsp + 0x94], xmm0
lahf
jmp 0x1406dcb69
mov rax, qword [rsp + 0xe0]
movzx cx, r14b
mov ecx, dword [rax + 0x24]
jmp 0x1406dcb7e
call fcn.14037b000
movss dword [rsp + 0x8c], xmm0
cbw
mov al, spl
mov rax, qword [rsp + 0xe0]
xchg ch, cl
cmovae cx, dx
mov ecx, dword [rax + 0x28]
jmp 0x1406dcba7
call fcn.14037b000
movss dword [rsp + 0x98], xmm0
mov dword [rsp + 0x60], 0
jmp 0x1406dcbc2
jmp 0x1406dcbe0
mov eax, dword [rsp + 0x60]
inc eax
bsr rcx, r9
rcl ch, cl
mov dword [rsp + 0x60], eax
movzx ax, sil
bt ax, si
movsxd rax, dword [rsp + 0x58]
rcr cx, cl
movzx ecx, r14w
imul rax, rax, 0x28
rcl cx, 0x1c
mov rcx, qword [rsp + 0xf0]
mov eax, dword [rcx + rax + 0x10]
jmp 0x1406dcc08
cmp dword [rsp + 0x60], eax
jmp 0x1406dcc11
jge 0x1406dd675
movsxd rax, dword [rsp + 0x78]
sar rcx, cl
inc cl
imul rax, rax, 0x10
sub cl, r9b
mov cl, ah
mov rcx, qword [rsp + 0x100]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x50], rax
bt eax, 0xa0
mov rax, qword [rsp + 0x50]
cmp dword [rax + 0xc], 0
jmp 0x1406dcc4f
je 0x1406dd651
mov rax, qword [rsp + 0x50]
jmp 0x1406dcc62
movzx eax, word [rax + 4]
test eax, eax
jmp 0x1406dcc6d
je 0x1406dd651
mov rax, qword [rsp + 0x50]
cmp spl, spl
jmp 0x1406dcc80
movzx eax, word [rax + 6]
test r15d, ebx
test r15b, 0x11
test eax, eax
jmp 0x1406dcc92
je 0x1406dd651
movsxd rax, dword [rsp + 0x58]
adc dl, r12b
sub cl, r14b
rol dl, cl
imul rax, rax, 0x28
ror cl, cl
bts rdx, r8
sar dl, 0x3f
movsxd rcx, dword [rsp + 0x60]
bt rdx, 0x9c
movsx edx, r11w
imul rcx, rcx, 0x1c
bts rdx, r11
mov rdx, qword [rsp + 0xf0]
jmp 0x1406dccd5
add rcx, qword [rdx + rax + 0x18]
shr al, 0xaa
test r11b, 0x1d
mov rax, rcx
mov qword [rsp + 0x68], rax
shr ax, 0xb8
movsxd rax, dword [rsp + 0x58]
imul rax, rax, 0x28
mov rcx, qword [rsp + 0xf0]
cmp sil, r15b
test dh, 8
cmp qword [rcx + rax + 8], 0
jne 0x1406dcd4b
movsxd rax, dword [rsp + 0x58]
bts ecx, esp
bswap cx
movsxd rcx, ebp
imul rax, rax, 0x28
adc ch, 0x36
mov rcx, qword [rsp + 0xf0]
stc
test ebx, edx
cmc
mov eax, dword [rcx + rax + 4]
stc
add eax, dword [rsp + 0x60]
mov dword [rsp + 0x80], eax
jmp 0x1406dcd46
jmp 0x1406dcdaa
movsxd rax, dword [rsp + 0x58]
add dh, 0x35
dec cx
stc
imul rax, rax, 0x28
movsx edx, r14w
cmovs rdx, r8
mov dx, r15w
movsxd rcx, dword [rsp + 0x60]
jmp 0x1406dcd7a
mov rdx, qword [rsp + 0xf0]
jmp 0x1406dcd87
mov rax, qword [rdx + rax + 8]
movzx rdx, sp
jmp 0x1406dcd99
mov eax, dword [rax + rcx*4]
mov dword [rsp + 0x80], eax
not ax
movsx rdx, r15w
mov eax, dword [rsp + 0x80]
mov dword [rsp + 0xa0], eax
movzx cx, r11b
movzx rcx, si
jmp 0x1406dcdc6
mov edx, dword [rsp + 0xa0]
bswap rcx
mov rcx, qword [rsp + 0xe8]
jmp 0x1406dcddd
call fcn.1406cf0ef
mov dword [rsp + 0x74], eax
rcl ecx, 0x2e
mov rax, qword [rsp + 0xe0]
movzx eax, word [rax + 0x1c]
or edx, r8d
rcl r9w, cl
rcr ch, 0xae
mov word [rsp + 0x5c], ax
cdq
bsf rax, r11
rol r9d, 0x8b
movzx eax, word [rsp + 0x5c]
bt rdx, 0x95
or r8b, bl
rcr dh, cl
mov rcx, qword [rsp + 0x50]
sub dx, cx
movzx ecx, word [rcx + 8]
movzx r9d, r9w
add ecx, eax
btr r8w, r11w
mov eax, ecx
mov dh, ch
sal dx, 0x2d
xadd r9b, r8b
mov rcx, qword [rsp + 0x50]
sar dl, cl
shl r9b, 1
clc
mov word [rcx + 8], ax
movzx eax, word [rsp + 0x5c]
rol rcx, 0x21
shrd edx, r14d, 0x23
mov rcx, qword [rsp + 0x50]
movzx ecx, word [rcx + 0xa]
cwd
adc r8b, 0x1b
add ecx, eax
movzx r8w, r12b
movsxd r9, esp
mov eax, ecx
bsf r8w, r12w
btc ecx, 0xb1
mov rcx, qword [rsp + 0x50]
mov word [rcx + 0xa], ax
movzx eax, word [rsp + 0x5c]
mov rcx, qword [rsp + 0x50]
sub r9b, bl
bt r8, 8
movzx ecx, word [rcx + 4]
bsr r8, r14
add r9b, r11b
sub ecx, eax
rol eax, 0x94
mov eax, ecx
mov r9b, 0x35
sar rcx, 0x21
mov rcx, qword [rsp + 0x50]
xchg r8b, r9b
add dl, r14b
sub r9, 0x782f9b2a
mov word [rcx + 4], ax
movzx eax, word [rsp + 0x5c]
or ch, ah
sub r9b, 0x95
mov rcx, qword [rsp + 0x50]
mov rdx, r8
movzx ecx, word [rcx + 6]
movzx r8d, bx
setns r9b
sbb dh, 0
sub ecx, eax
bswap dx
mov r8, 0xffffffff9ca47f0e
cdq
mov eax, ecx
mov rcx, qword [rsp + 0x50]
cwd
xchg r8b, dl
movsx r9d, ax
mov word [rcx + 6], ax
movzx r8, r8w
xchg cx, cx
cqo
lea r9, [rsp + 0xb0]
lea r8, [rsp + 0xa4]
mov edx, dword [rsp + 0x74]
movsx cx, r9b
xchg ch, ch
mov ecx, esp
mov rcx, qword [rsp + 0xe8]
jmp 0x1406dcf40
call fcn.1406d5b89
mov rax, qword [rsp + 0xe0]
jmp 0x1406dcf52
mov eax, dword [rax + 0x28]
jmp 0x1406dcf5a
cvtsi2ss xmm0, rax
movss xmm1, dword [rsp + 0x64]
mulss xmm1, xmm0
movaps xmm0, xmm1
movsx eax, r11w
lahf
mov rax, qword [rsp + 0xe0]
mov eax, dword [rax + 0x24]
jmp 0x1406dcf81
cvtsi2ss xmm1, rax
movss xmm2, dword [rsp + 0x64]
jmp 0x1406dcf91
mulss xmm2, xmm1
movaps xmm1, xmm2
lea rax, [rsp + 0xb4]
mov qword [rsp + 0x38], rax
rdtsc
lea rax, [rsp + 0xb8]
mov rcx, 0xffffffffafb18b36
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x90]
mov qword [rsp + 0x28], rax
rdtsc
lea rax, [rsp + 0x84]
movsx rcx, di
mov qword [rsp + 0x20], rax
movaps xmm3, xmm0
seto cl
not dh
movzx cx, spl
movaps xmm2, xmm1
mov edx, dword [rsp + 0x74]
cmovbe rcx, rsi
movzx rcx, r13w
movsx ecx, r13w
mov rcx, qword [rsp + 0xe8]
jmp 0x1406dd008
call fcn.1406d63c3
mov rax, qword [rsp + 0xe0]
jmp 0x1406dd01a
mov eax, dword [rax + 0x28]
jmp 0x1406dd022
cvtsi2ss xmm0, rax
movss xmm1, dword [rsp + 0x64]
mulss xmm1, xmm0
movaps xmm0, xmm1
movzx ax, r8b
mov rax, qword [rsp + 0xe0]
jmp 0x1406dd046
mov eax, dword [rax + 0x24]
jmp 0x1406dd04e
cvtsi2ss xmm1, rax
movss xmm2, dword [rsp + 0x64]
jmp 0x1406dd05e
mulss xmm2, xmm1
movaps xmm1, xmm2
bts r8w, si
cmc
bsr edx, esp
mov rax, qword [rsp + 0x50]
movzx eax, word [rax + 6]
cdq
mov rcx, qword [rsp + 0xe0]
bsr r8w, r10w
mov dl, r10b
sub eax, dword [rcx + 0x28]
setne ch
xchg r8b, r9b
inc eax
mov r9w, 0xb735
mov rcx, qword [rsp + 0x50]
movzx ecx, word [rcx + 4]
sal edx, cl
sub r9b, r13b
bsr r9, r8
mov rdx, qword [rsp + 0xe0]
sub ecx, dword [rdx + 0x24]
movsx dx, r8b
cqo
cwd
inc ecx
cmc
xor r8, 0x6108f9a
mov rdx, qword [rsp + 0x50]
bsf r9w, bp
movzx edx, word [rdx + 8]
shl r9b, 0x1e
bts r8w, r10w
mov r8, qword [rsp + 0xe0]
shr r9b, cl
shld r9, r13, 0x33
mov r8, qword [r8 + 0x30]
and r9b, 0x8e
add r8, rdx
btr dx, 0x3c
mov r9b, 0x9d
mov rdx, r8
rcr r9w, cl
mov r8, qword [rsp + 0x50]
movzx r8d, word [r8 + 0xa]
mov r9, qword [rsp + 0xe0]
imul r8d, dword [r9 + 0x18]
seto r9b
btr r9w, ax
movsxd r8, r8d
add rdx, r8
not r8b
mov r8d, dword [rsp + 0x74]
movsx r9w, dil
mov dword [rsp + 0x48], r8d
setne r9b
jmp 0x1406dd14a
xorps xmm2, xmm2
movsxd r9, r10d
movss dword [rsp + 0x40], xmm2
movsxd r9, r9d
xorps xmm2, xmm2
xchg r9w, r9w
movss dword [rsp + 0x38], xmm2
movss dword [rsp + 0x30], xmm0
mov r8, r15
movsx r9w, dl
movss dword [rsp + 0x28], xmm1
mov r8, qword [rsp + 0xe0]
mov r9d, 0xc18faf1d
setnp r9b
movzx r9w, cl
mov r8d, dword [r8 + 0x18]
bswap r9
movzx r9d, di
mov r9b, 0xb8
mov dword [rsp + 0x20], r8d
mov r9w, ax
setb r9b
movsx r9w, dil
mov r9d, eax
movzx r8d, r9w
mov r8b, 0xa5
mov r8d, ecx
movzx rcx, r11w
mov rcx, qword [rsp + 0xe8]
jmp 0x1406dd1cf
call fcn.1406db14a
mov rax, qword [rsp + 0xe0]
cmp dword [rax + 0x24], 1
jmp 0x1406dd1e5
jbe 0x1406dd2fa
mov rax, qword [rsp + 0x50]
movzx eax, word [rax + 6]
test di, 0x5cb3
btr r8w, r10w
mov rcx, qword [rsp + 0x50]
cmp r9w, 0x40ad
bsr r8w, r12w
cmove r9d, esi
movzx ecx, word [rcx + 4]
mov r8w, 0x1438
not dh
jmp 0x1406dd222
mov rdx, qword [rsp + 0x50]
shl r8b, 0x95
movzx edx, word [rdx + 8]
movzx r8w, dil
movsx r8, si
adc r8b, 4
mov r8, qword [rsp + 0xe0]
inc r9w
mov r8, qword [r8 + 0x30]
add r8, rdx
rcr r9b, 0x8c
stc
mov rdx, r8
xadd r8b, r8b
shr r8, cl
bts r8w, r9w
mov r8, qword [rsp + 0x50]
movzx r9d, si
or r9, r11
movzx r8d, word [r8 + 0xa]
mov r9, qword [rsp + 0xe0]
clc
test r12b, r13b
jmp 0x1406dd285
imul r8d, dword [r9 + 0x18]
movsxd r8, r8d
add rdx, r8
mov qword [rsp + 0xc0], rdx
cqo
not r8b
mov r8, qword [rsp + 0xe0]
movzx r9, r13w
mov r9b, bpl
mov r8d, dword [r8 + 0x24]
movsx rdx, r13w
not r9b
mov dword [rsp + 0x20], r8d
mov r8, qword [rsp + 0xe0]
cmovle r9d, esi
movsxd rdx, esp
cqo
mov r9d, dword [r8 + 0x18]
mov r8d, eax
movsxd rax, r11d
mov edx, ecx
movzx rax, r13w
movsx eax, r14w
movsx rcx, cx
mov rax, qword [rsp + 0xc0]
mov rcx, rax
jmp 0x1406dd2f5
call fcn.1406db785
mov rax, qword [rsp + 0xe0]
jmp 0x1406dd30a
cmp dword [rax + 0x28], 1
jmp 0x1406dd313
jbe 0x1406dd45b
mov rax, qword [rsp + 0x50]
test r15w, 0x4319
and r9, 0xffffffffdc8f0d30
movzx eax, word [rax + 6]
adc dl, spl
mov rcx, qword [rsp + 0x50]
xor r8w, r14w
bswap r8w
xadd edx, r9d
movzx ecx, word [rcx + 4]
mov rdx, qword [rsp + 0x50]
movsx r9, bp
cmc
movzx edx, word [rdx + 8]
btc r8w, 0xa4
sub r9b, 0x98
mov r8, qword [rsp + 0xe0]
and r9b, 0x94
bts r9d, edi
mov r8, qword [r8 + 0x30]
and r9d, 0x8382318d
movsx r9, sp
movsxd r9, edi
add r8, rdx
adc r9b, 4
or dl, bl
mov rdx, r8
rcr r9b, cl
movzx r8, r14w
cmp r14w, 0x2280
mov r8, qword [rsp + 0x50]
rcr r9b, 0x85
add r9w, bp
bswap r9d
movzx r8d, word [r8 + 0xa]
adc r9b, dl
bts r9w, r13w
mov r9, qword [rsp + 0xe0]
imul r8d, dword [r9 + 0x18]
cmc
sbb r9d, 0x6ca72499
movsxd r8, r8d
xor r9w, 0xfeb8
bsr r9, rcx
add rdx, r8
mov qword [rsp + 0xc8], rdx
sets dl
cqo
movzx r8w, r9b
mov r8, qword [rsp + 0xe0]
mov r8d, dword [r8 + 0x28]
xchg r9b, dl
movsx dx, r11b
jmp 0x1406dd407
mov dword [rsp + 0x20], r8d
movzx dx, r14b
mov r8, 0xfffffffff29d60a7
bswap rdx
mov r8, qword [rsp + 0xe0]
xchg r9b, r9b
movsxd r9, r15d
movsx r9d, si
mov r9d, dword [r8 + 0x18]
sete r8b
bswap dx
mov r8d, eax
mov edx, ecx
xchg ah, ch
not al
movsx eax, sp
mov rax, qword [rsp + 0xc8]
not cl
mov rcx, rax
jmp 0x1406dd456
call fcn.1406dbfd9
mov rax, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x50]
jmp 0x1406dd46b
movzx ecx, word [rcx + 8]
cmp sp, r11w
test r10w, r12w
stc
mov word [rax], cx
xor al, 0x9e
mov rax, qword [rsp + 0x68]
and ecx, 0xbc242937
sbb cx, 0x8587
mov rcx, qword [rsp + 0x50]
cmp r13b, 0x34
cmc
test r10d, esi
movzx ecx, word [rcx + 0xa]
test bpl, 0x37
stc
mov word [rax + 2], cx
mov rcx, r9
mov rax, qword [rsp + 0x50]
movzx eax, word [rax + 8]
mov rcx, qword [rsp + 0x50]
test r8b, r13b
movzx ecx, word [rcx + 4]
clc
cmc
cmp cl, cl
add eax, ecx
rcr ecx, 0x3c
mov rcx, 0x57a4b303
mov rcx, qword [rsp + 0x68]
jmp 0x1406dd4da
mov word [rcx + 4], ax
mov rax, qword [rsp + 0x50]
movzx eax, word [rax + 0xa]
shr cx, 0x91
mov rcx, qword [rsp + 0x50]
movzx ecx, word [rcx + 6]
add eax, ecx
mov cl, bpl
bswap rcx
mov rcx, qword [rsp + 0x68]
jmp 0x1406dd506
mov word [rcx + 6], ax
cvtsi2ss xmm0, dword [rsp + 0xa4]
movss xmm1, dword [rsp + 0x64]
jmp 0x1406dd51e
mulss xmm1, xmm0
movaps xmm0, xmm1
cwde
mov rax, qword [rsp + 0x68]
jmp 0x1406dd530
movss dword [rax + 0x10], xmm0
cvtsi2ss xmm0, dword [rsp + 0x84]
mulss xmm0, dword [rsp + 0x88]
addss xmm0, dword [rsp + 0x8c]
movzx ax, dh
lahf
cdqe
mov rax, qword [rsp + 0x68]
movss dword [rax + 8], xmm0
jmp 0x1406dd566
cvtsi2ss xmm0, dword [rsp + 0x90]
mulss xmm0, dword [rsp + 0x94]
addss xmm0, dword [rsp + 0x98]
movsxd rcx, r10d
mov rax, qword [rsp + 0x68]
shrd cx, r10w, 0xae
movss dword [rax + 0xc], xmm0
mov rax, qword [rsp + 0x50]
inc cx
movzx eax, word [rax + 4]
movsx rcx, r9w
mov ecx, dword [rsp + 0x84]
jmp 0x1406dd5b0
add ecx, eax
not rax
cwde
setg al
mov eax, ecx
jmp 0x1406dd5c0
cvtsi2ss xmm0, eax
mulss xmm0, dword [rsp + 0x88]
addss xmm0, dword [rsp + 0x8c]
mov rax, qword [rsp + 0x68]
movss dword [rax + 0x14], xmm0
movzx ax, spl
bswap ax
xadd ah, ch
mov rax, qword [rsp + 0x50]
movzx eax, word [rax + 6]
adc rcx, 0x361bca93
movsx ecx, r11w
mov ecx, dword [rsp + 0x90]
test ax, 0xf732
cmp r9, 0x69ba283e
add ecx, eax
bswap eax
mov eax, eax
mov eax, ecx
jmp 0x1406dd61e
cvtsi2ss xmm0, eax
mulss xmm0, dword [rsp + 0x94]
addss xmm0, dword [rsp + 0x98]
movsx rax, r9w
mov rax, qword [rsp + 0x68]
jmp 0x1406dd642
movss dword [rax + 0x18], xmm0
jmp 0x1406dd64c
jmp 0x1406dd65c
mov dword [rsp + 0x9c], 0
mov eax, dword [rsp + 0x78]
inc eax
jmp 0x1406dd667
mov dword [rsp + 0x78], eax
jmp 0x1406dd670
jmp 0x1406dcbc7
jmp 0x1406dc96f
mov rax, qword [rsp + 0xe0]
clc
movsx ecx, ax
mov ecx, dword [rsp + 0xa8]
cmc
cmp al, 0x3e
mov dword [rax + 0x24], ecx
mov rax, qword [rsp + 0xe0]
movzx cx, ah
shl cl, 0x91
mov ecx, dword [rsp + 0xac]
test r15d, r10d
mov dword [rax + 0x28], ecx
mov eax, dword [rsp + 0x9c]
add rsp, 0xd8
jmp 0x1406dd6c2
ret