Function at 0x43f170
Capabilities:
Check for software breakpoints
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x294
mov ebx, dword [esp + 0x2b4]
mov dword [esp + 0x7b], 0xe48040
mov dword [esp + 0x78], 0x4010ec83
mov dword [esp + 0x74], 0x48e78948
mov dword [esp + 0x70], 0xce8948fc
lea edi, [esp + 0x94]
lea eax, [esp + 0x70]
mov ecx, 3
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edi, [esp + 0xa0]
lea eax, [esp + 0x7c]
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
movzx eax, byte [esp + 0x7e]
mov byte [esp + 0xa2], al
mov dword [esp], ebx
cmp ebx, 4
jb 0x43f1e5
mov dword [esp], 4
lea ebp, [esp + 0xa3]
test ebx, ebx
je 0x43f4d8
xor eax, eax
jmp 0x43f20a
inc eax
cmp eax, dword [esp]
je 0x43f472
cmp eax, 3
ja case.default.0x43f20f
jmp dword [eax*4 + 0x443b00]
mov dword [esp + 8], 0x5140c284
mov dword [esp + 0xc], 0
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, ecx
add dl, 0xd
xor dl, byte [esp + ecx + 8]
add dl, 0xbf
mov byte [esp + ecx + 8], dl
inc ecx
cmp ecx, 8
jne 0x43f230
lea esi, [esp + 8]
mov edx, esi
xor ecx, ecx
mov edi, ebp
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
mov edx, esi
mov edi, ebp
mov ecx, 1
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
movzx ecx, byte [esp + 0xa]
mov byte [ebp + 2], cl
add ebp, 3
jmp case.default.0x43f20f
mov dword [esp + 8], 0x1fd496d4
mov byte [esp + 0xc], 0xc
lea ecx, [esp + 0xc]
mov word [ecx + 5], 0
mov dword [ecx + 1], 0
mov ecx, 0xc2
mov edi, 0x3d
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, byte [esp + ecx - 0xba]
mov edx, edi
xor edx, ecx
and edx, esi
xor edx, ecx
add dl, 0x36
mov byte [esp + ecx - 0xba], dl
inc ecx
dec edi
cmp ecx, 0xcd
jne 0x43f2b0
lea edx, [esp + 8]
mov edi, ebp
mov ecx, 1
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
add ebp, 4
lea edx, [esp + 0xc]
mov edi, ebp
xor ecx, ecx
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
jmp case.default.0x43f20f
mov dword [esp + 8], 0x675c1654
mov byte [esp + 0xc], 0x8c
lea ecx, [esp + 0xc]
mov word [ecx + 5], 0
mov dword [ecx + 1], 0
xor ecx, ecx
movzx edx, byte [esp + ecx + 8]
mov esi, 0x65d4359d
sub esi, ecx
or esi, edx
not esi
mov edi, 0x9d
sub edi, ecx
and edi, edx
or edi, esi
add edi, 0xfd250c15
mov edx, edi
and edx, 1
xor edi, 1
lea edx, [edi + edx*2]
mov byte [esp + ecx + 8], dl
mov edx, ecx
not edx
or edx, 1
lea edi, [ecx + edx]
inc edi
mov edx, edi
and edx, 0xfffffffd
mov esi, edi
and esi, 2
or edi, 2
imul edi, esi
xor esi, 2
imul esi, edx
lea edx, [ecx + ecx]
and edx, 2
neg edx
add ecx, edx
inc ecx
add ecx, edi
add ecx, esi
cmp ecx, 0xb
jb 0x43f320
lea edx, [esp + 8]
mov edi, ebp
mov ecx, 1
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
add ebp, 4
lea edx, [esp + 0xc]
xor ecx, ecx
mov edi, ebp
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
jmp case.default.0x43f20f
mov dword [esp + 8], 0x29e8a2e4
mov byte [esp + 0xc], 0x10
lea ecx, [esp + 0xc]
mov word [ecx + 5], 0
mov dword [ecx + 1], 0
xor ecx, ecx
nop
nop
nop
movzx ebx, byte [esp + ecx + 8]
lea edx, [ecx - 0x5fd792bb]
mov edi, edx
and edi, ebx
lea esi, [ecx + ebx]
add esi, 0xa0286d45
not esi
lea esi, [esi + edi*2]
and esi, edx
add esi, esi
neg esi
lea edi, [ecx + esi]
add edi, 0xa0286d45
add edi, ebx
mov ebx, edi
and ebx, 0xdf35dda4
mov edx, edi
and edx, 2
mov esi, edx
xor esi, 2
imul esi, ebx
or ebx, 2
imul ebx, edx
mov edx, edi
xor edx, 0xa6
add edx, esi
add edx, ebx
and edi, 1
xor edx, 1
or edx, edi
add edx, edi
mov byte [esp + ecx + 8], dl
mov edx, ecx
and edx, 1
xor ecx, 1
lea ecx, [ecx + edx*2]
cmp ecx, 0xb
jb 0x43f3d0
lea edx, [esp + 8]
mov edi, ebp
mov ecx, 1
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
add ebp, 4
lea edx, [esp + 0xc]
mov edi, ebp
xor ecx, ecx
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
mov ebx, dword [esp + 0x2b4]
jmp case.default.0x43f20f
cmp ebx, 3
jbe 0x43f4d8
test bl, 1
je 0x43f49f
mov eax, 0x444035
mov edx, 0x444035
mov edi, ebp
xor ecx, ecx
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
mov edi, ebp
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
add ebp, 2
mov ecx, ebx
and ecx, 8
mov eax, ebx
or eax, 8
imul eax, ecx
xor ecx, 8
mov edx, ebx
and edx, 0xfffffff7
imul edx, ecx
add eax, edx
mov esi, 0xffffffff
mov edx, 0xffffffff
cmp eax, 0x7ffffffe
ja 0x43fad4
dec ebx
cmp ebx, 4
jae 0x43f68c
mov ebx, dword [esp + 0x2a8]
mov dword [esp + 8], 0x6f52ceb0
lea edx, [esp + 0xc]
mov byte [esp + 0xc], 0x4c
mov dword [esp + 0xd], 0
mov dword [esp + 0x10], 0
mov ecx, 0x6f978a12
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx esi, byte [esp + ecx - 0x6f978a0a]
xor esi, ecx
add esi, 0xd20a4da5
mov edi, esi
and edi, 1
xor esi, 1
lea eax, [esi + edi*2]
mov byte [esp + ecx - 0x6f978a0a], al
inc ecx
cmp ecx, 0x6f978a1e
jne 0x43f510
lea eax, [esp + 8]
mov edi, ebp
mov ecx, 1
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea esi, [ebp + 4]
mov edi, esi
xor ecx, ecx
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
mov dword [esp + 0x8f], 0xc3fc8948
mov dword [esp + 0x8c], 0x48d2ff41
mov dword [esp + 0x80], 0xba49c031
mov dword [esp + 0x84], ebx
mov eax, dword [esp + 0x2ac]
mov dword [esp + 0x88], eax
lea eax, [esp + 0x80]
mov edi, esi
mov ecx, 4
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea edi, [ebp + 0x14]
lea eax, [esp + 0x90]
mov ecx, 1
xchg esi, eax
rep movsw word es:[edi], word [esi]
xchg esi, eax
movzx eax, byte [esp + 0x92]
mov byte [ebp + 0x16], al
lea ecx, [esp + 0x94]
mov eax, ecx
neg eax
add eax, ebp
add eax, 0x17
mov dword [esp], eax
sub ebp, ecx
mov dword [esp + 4], 0
add ebp, 0x71
mov dword [esp + 0x6c], ebp
mov dword [esp + 8], 0xd4d5cacb
mov byte [esp + 0xc], 0
mov eax, 0x4e
mov ecx, 0xb1
nop
nop
nop
nop
nop
nop
movzx esi, byte [esp + eax - 0x46]
mov edx, eax
and edx, esi
mov edi, edx
and edi, 2
mov ebx, edx
or edx, 2
imul edx, edi
xor edi, 2
and ebx, 0x5d
imul ebx, edi
add edx, ebx
lea edi, [eax + esi]
mov ebx, ecx
sub ebx, esi
and ebx, edx
not edx
and edx, edi
sub edx, ebx
add dl, 0x7a
mov byte [esp + eax - 0x46], dl
inc eax
dec ecx
cmp eax, 0x53
jne 0x43f600
mov esi, dword [esp + 8]
mov eax, dword [0x44c010]
test eax, eax
je 0x43f808
xor ecx, ecx
mov edx, dword [0x44c014]
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [edx + ecx*8], 0x3e416e49
je 0x43f7d8
inc ecx
cmp eax, ecx
jne 0x43f660
jmp 0x43f808
mov ebx, eax
dec ebx
cmp ebx, 3
jbe 0x43f4d8
mov ecx, ebx
and ecx, 0xfffffff7
mov esi, ebx
and esi, 8
mov eax, ebx
or ebx, 8
imul ebx, esi
xor esi, 8
imul esi, ecx
add ebx, esi
cmp ebx, 0x7e
ja 0x43f750
mov dword [esp + 8], 0x735c1a58
mov word [esp + 0xc], 0x9d2c
lea ecx, [esp + 0x10]
mov byte [ecx + 2], 0
mov dword [ecx - 2], 0
mov edi, 0xe4
mov edx, 0xb
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, edx
and esi, 0xb
mov ecx, edi
and ecx, 0x94
or ecx, esi
xor cl, byte [esp + edi - 0xdc]
xor cl, 0x6b
add cl, 0x8c
mov byte [esp + edi - 0xdc], cl
inc edi
dec edx
cmp edi, 0xef
jne 0x43f6e0
lea edx, [esp + 8]
mov ecx, 1
mov edi, ebp
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
lea edi, [ebp + 4]
lea edx, [esp + 0xc]
xor ecx, ecx
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
movzx ecx, byte [esp + 0xc]
mov byte [ebp + 4], cl
mov byte [ebp + 3], bl
add ebp, 5
jmp 0x43f680
mov dword [esp + 8], 0x83848ac8
mov dword [esp + 0xc], 0xd7060504
mov byte [esp + 0x10], 8
lea ecx, [esp + 0x10]
mov word [ecx + 5], 0
mov dword [ecx + 1], 0
mov ecx, 0x780b2f40
nop
nop
nop
nop
nop
movzx edx, byte [esp + ecx - 0x780b2f38]
xor edx, ecx
add edx, 0xa7c813bf
mov esi, edx
and esi, 1
xor edx, 1
lea edx, [edx + esi*2]
mov byte [esp + ecx - 0x780b2f38], dl
inc ecx
cmp ecx, 0x780b2f4f
jne 0x43f780
lea edx, [esp + 8]
mov ecx, 2
mov edi, ebp
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
lea esi, [ebp + 8]
lea edx, [esp + 0x10]
mov edi, esi
xor ecx, ecx
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
mov dword [ebp + 3], ebx
mov ebp, esi
jmp 0x43f680
mov eax, dword [edx + ecx*8 + 4]
cmp eax, esi
je 0x43f808
lea ecx, [esp + 0x6c]
lea edx, [esp + 4]
push 0x40
push 0x3000
push ecx
push 0
push edx
push 0xffffffffffffffff
push 6
push eax
push dword [0x44c018]
call fcn.0043d120
add esp, 0x24
mov esi, eax
test esi, esi
js 0x43faa0
mov dword [esp + 8], 0x4ddb80b5
mov dword [esp + 0xc], 0xfb6f824f
mov dword [esp + 0x10], 0xd70a4487
mov dword [esp + 0x14], 0xfbfafdfc
mov dword [esp + 0x18], 0x31a67640
mov dword [esp + 0x1c], 0x6aeaf16b
mov dword [esp + 0x20], 0xe320aace
mov dword [esp + 0x24], 0xebeaed33
mov dword [esp + 0x28], 0x25fee761
mov dword [esp + 0x2c], 0x79d2d5d4
mov dword [esp + 0x30], 0xeeace8a4
mov dword [esp + 0x34], 0x78269153
mov dword [esp + 0x38], 0xcf887c7a
mov dword [esp + 0x3c], 0x2f06b2c4
mov dword [esp + 0x40], 0x1e0617c3
mov dword [esp + 0x44], 0xf1c9768c
mov dword [esp + 0x48], 0x7bfd796b
mov dword [esp + 0x4c], 0xb35db958
mov dword [esp + 0x50], 0x7b37b1b0
mov dword [esp + 0x54], 0xf5337550
mov dword [esp + 0x58], 0xe66ef959
mov dword [esp + 0x5c], 0x77a145b2
lea edx, [esp + 0x60]
mov word [esp + 0x60], 0xa14c
mov dword [esp + 0x62], 0
xor eax, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, eax
add cl, 0x7e
xor cl, byte [esp + eax + 8]
add cl, 0x8a
mov byte [esp + eax + 8], cl
inc eax
cmp eax, 0x5e
jne 0x43f8e0
mov eax, dword [esp + 4]
lea esi, [esp + 8]
mov ecx, 0x16
mov edi, eax
xchg esi, esi
rep movsd dword es:[edi], dword [esi]
xchg esi, esi
lea edi, [eax + 0x58]
xor ecx, ecx
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
movzx ecx, byte [esp + 0x60]
mov byte [eax + 0x58], cl
mov eax, dword [esp + 4]
mov dword [esp + 8], 0x93929179
mov ecx, 0x6594ad5c
movzx edx, byte [esp + ecx - 0x6594ad54]
xor edx, ecx
mov esi, edx
and esi, 0x33
xor edx, 0x4189d33
lea ebx, [edx + esi*2]
and edx, 1
xor ebx, 1
or ebx, edx
add ebx, edx
mov byte [esp + ecx - 0x6594ad54], bl
inc ecx
cmp ecx, 0x6594ad60
jne 0x43f930
add eax, dword [esp + 8]
mov ebx, dword [esp]
mov ecx, ebx
shr ecx, 2
lea edx, [esp + 0x94]
mov edi, eax
xchg esi, edx
rep movsd dword es:[edi], dword [esi]
xchg esi, edx
mov ecx, ebx
and ecx, 0xfffffffc
add eax, ecx
lea edx, [esp + ecx]
add edx, 0x94
mov ecx, ebx
shr ecx, 1
and ecx, 1
mov esi, edx
mov edi, eax
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
test bl, 1
je 0x43f9ae
and ebx, 2
movzx ecx, byte [edx + ebx]
mov byte [eax + ebx], cl
mov eax, dword [esp + 4]
mov dword [esp + 8], 0xc9cacbab
mov dword [esp + 0xc], 0
xor ecx, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, ecx
add dl, 0x53
xor dl, byte [esp + ecx + 8]
add dl, 0x61
mov byte [esp + ecx + 8], dl
mov edx, ecx
and edx, 1
xor ecx, 1
lea ecx, [ecx + edx*2]
cmp ecx, 8
jb 0x43f9d0
mov ecx, dword [esp + 8]
add ecx, eax
push dword [esp + 0x2b0]
push ecx
call eax
mov esi, eax
mov dword [esp], edx
mov dword [esp + 0x68], 0
mov dword [esp + 8], 0xd4d5cacb
mov byte [esp + 0xc], 0
mov eax, 0x4e
mov ecx, 0xb1
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebx, byte [esp + eax - 0x46]
mov edx, eax
and edx, ebx
mov ebp, edx
and ebp, 2
mov edi, edx
or edx, 2
imul edx, ebp
xor ebp, 2
and edi, 0x5d
imul edi, ebp
add edx, edi
lea edi, [eax + ebx]
mov ebp, ecx
sub ebp, ebx
and ebp, edx
not edx
and edx, edi
sub edx, ebp
add dl, 0x7a
mov byte [esp + eax - 0x46], dl
inc eax
dec ecx
cmp eax, 0x53
jne 0x43fa30
mov eax, dword [0x44c010]
test eax, eax
je 0x43fad1
mov ecx, dword [esp + 8]
xor edx, edx
mov ebx, dword [0x44c014]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp dword [ebx + edx*8], 0x16194952
je 0x43faa7
inc edx
cmp eax, edx
jne 0x43fa90
jmp 0x43fad1
mov edx, esi
sar edx, 0x1f
jmp 0x43fad4
mov eax, dword [ebx + edx*8 + 4]
cmp eax, ecx
je 0x43fad1
lea ecx, [esp + 0x68]
lea edx, [esp + 4]
push 0x8000
push ecx
push edx
push 0xffffffffffffffff
push 4
push eax
push dword [0x44c018]
call fcn.0043d120
add esp, 0x1c
mov edx, dword [esp]
mov eax, esi
add esp, 0x294
pop esi
pop edi
pop ebx
pop ebp
ret 0x10