Function at 0x1429e
Capabilities:
Packed with generic packer

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
push ebx
push esi
push edi
push ebx
and ebx, ecx
and ebx, 0x5f2d
or bh, cl
cmp bx, si
test ebx, 0x15c2
test bl, 0x53
add bl, ah
pop ebx
push dword [ebp + 8]
lea eax, [ebp - 0xc]
push eax
call dword [sym.imp.ntoskrnl.exe_RtlInitUnicodeString]
pushal
dec bx
test di, cx
or si, bx
and ch, dh
sub cx, 0x3744
or ah, 0x2d
xor bl, cl
and ah, 0x28
and al, ch
cmp cx, bx
popal
mov edi, dword [ebp + 0xc]
xor esi, esi
lea eax, [ebp - 0xc]
cmp edi, 1
mov dword [ebp - 0x2c], 0x18
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x20], 0x240
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], esi
jne 0x1431a
mov ecx, 0x80000000
jmp 0x14328
cmp edi, 2
jne 0x143e0
mov ecx, 0x10000
jo 0x14349
push ax
pop ax
jno 0x14349
mov byte [ebx - 0x10], ch
inc edx
pop edx
fld xword [edx]
cmp edi, dword [ebx + 0x412fb812]
cwde
sbb dword [ebp + 0x75], esi
mov eax, dword [0x16c20]
cmp eax, esi
jne 0x14357
mov eax, dword [0x16bd8]
jo 0x14373
mov bh, bh
mov bx, bx
jno 0x14373
adc ebx, dword [eax]
add ebp, ecx
xchg dl, dh
sbb cl, bl
stosb byte es:[edi], al
jmp 0x143aa
push esi
push esi
push 0x40
push 1
push 1
push 0x80
lea edx, [ebp - 0x14]
push esi
push edx
lea edx, [ebp - 0x2c]
push edx
push ecx
lea ecx, [ebp - 4]
push ecx
call eax
cmp eax, esi
jl 0x143e5
jo 0x143b5
push esi
pop esi
jno 0x143b5
lahf
leave
jnp 0x143a8
push es
ficomp word [ebx + eax*8 + 0x5d7ee898]
dec ecx
wait
pushfd
ret
cwde
call 0x9b4aa12e
push ebp
inc edi
add dword [edi - 0x7c], 0xffffff8b
dec ebp
adc byte [ebx + 0x1189fc55], cl
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp - 4]
mov dword [ecx], edx
mov dword [ecx + 4], edi
jp 0x143de
xchg cx, cx
jnp 0x143de
mov gs, esi
jae 0x143fc
test eax, 0x4ae9aff1
test eax, 0x3fe7e9fa
jmp 0x143e5
jmp 0x143e5
mov eax, 0xc0000001
pop edi
pop esi
pop ebx
leave
ret 0xc
cmp dx, bx
xor dh, 0x74
or dh, bl
xor dl, ah
dec dh
pop edx
lea eax, [ebp - 0xc]
push 0x16118
push eax
call dword [sym.imp.ntoskrnl.exe_RtlInitUnicodeString]
push edx
push ax
push bx
xor dh, 0x61
and dl, cl
inc edx
test cl, dh
test al, 0x79
xor al, bl
cmp dh, 0x50
or bx, ax
pop bx
pop ax
pop edx
xor esi, esi
lea eax, [ebp - 0xc]
mov dword [ebp - 0x2c], 0x18
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x20], 0x240
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], esi
jb 0x1446a
push edi
mov di, 0xf403
pop edi
jae 0x1446a
jecxz 0x144ba
out dx, al
jb 0x14402
cwde
sbb al, byte [ebx + 0x4ad860f0]
aam 0x56
push esi
push esi
push 0x21
push 1
push 1
push 0x80
lea eax, [ebp - 0x14]
push esi
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 4]
push 0x100080
push eax
call dword [0x16bd8]
mov ebx, eax
cmp ebx, esi
jl 0x1449e
push dword [ebp - 4]
call dword [0x16bd4]
push edi
add di, dx
cmp edi, edx
add di, cx
pop edi
pop edi
mov eax, ebx
pop esi
pop ebx
leave
ret
inc dword [eax + eax*8 + 0x52661574]
push ecx
mov dl, bh
cmp cx, bx
sub dh, 0x32
pop ecx
pop dx
call fcn.00013a88
jmp 0x144ec
mov cl, al
push eax
push ebx
push edx
xor ax, 0x507e
sub eax, eax
or dl, bh
test ah, bl
add dl, bh
sub al, 0x1a
inc dl
add eax, esi
mov edx, 0x5ac0
test ah, 0x47
pop edx
pop ebx
pop eax
mov al, cl
pop ebx
ret