Function at 0x40fb5b
Capabilities:
Encode data using xor

Disassembly:
sub esp, 0x8c
push ebx
push ebp
push esi
push edi
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x5ae7a8]
and dword [eax + 0x20], 0
call fcn.0040734a
call fcn.004097ef
cmp dword [0x5ae808], 0xf
mov ecx, 0x5ae7f4
push 0x80e2
cmova ecx, dword [0x5ae7f4]
xor edx, edx
call fcn.00434882
pop ecx
push dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x7a]
call fcn.004150a0
push ecx
push 0x11
lea ecx, [esp + 0x30]
mov esi, eax
call fcn.00412319
xor edx, edx
mov ax, word [esi + edx + 2]
xor ax, word [esi]
cmp dword [esp + 0x3c], 7
movzx ecx, ax
lea eax, [esp + 0x28]
cmova eax, dword [esp + 0x28]
mov word [eax + edx], cx
add edx, 2
cmp edx, 0x22
jb 0x40fbbe
cmp dword [esp + 0x3c], 7
lea ecx, [esp + 0x28]
cmova ecx, dword [esp + 0x28]
call fcn.0041c46c
lea ecx, [esp + 0x28]
mov bl, al
call fcn.004128ca
test bl, bl
je 0x4102de
mov eax, dword [0x5ae7a8]
mov eax, dword [eax + 0x3e48]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0x18]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], eax
call fcn.0043701f
mov esi, eax
call fcn.00430599
call fcn.004305b6
movss xmm2, dword [esp + 0x10]
lea ecx, [esp + 0x40]
movss xmm1, dword [esp + 0x14]
movaps xmm0, xmm2
xorps xmm3, xmm3
addss xmm0, xmm3
movss dword [esp + 0x18], xmm0
movaps xmm0, xmm1
addss xmm0, xmm3
movss dword [esp + 0x1c], xmm0
movss xmm0, dword [0x523fd8]
addss xmm2, xmm0
addss xmm1, xmm0
movaps xmm0, xmmword [0x524240]
movups xmmword [esp + 0x40], xmm0
movaps xmm0, xmmword [0x524280]
movups xmmword [esp + 0x50], xmm0
movaps xmm0, xmmword [0x5242c0]
movups xmmword [esp + 0x60], xmm0
movaps xmm0, xmmword [0x524240]
movss dword [esp + 0x10], xmm2
movss dword [esp + 0x14], xmm1
movups xmmword [esp + 0x28], xmm0
call fcn.0042d410
push eax
lea ecx, [esp + 0x54]
call fcn.0042d410
push eax
lea ecx, [esp + 0x68]
call fcn.0042d410
push eax
lea ecx, [esp + 0x34]
call fcn.0042d410
push eax
lea eax, [esp + 0x20]
mov ecx, esi
push eax
lea eax, [esp + 0x2c]
push eax
call fcn.004480fb
call fcn.00404e6a
movss xmm1, dword [0x523e80]
xor ecx, ecx
call fcn.0042e3d4
push 0
push ecx
xor ebx, ebx
mov dword [esp + 0x20], 0x43eb0000
lea eax, [esp + 0x20]
mov dword [esp + 0x24], 0x43c80000
inc ebx
xor ecx, ecx
push eax
mov edx, ebx
call fcn.004322f2
add esp, 0xc
mov esi, 0x5b01c0
mov edi, 0x5ad988
push 3
pop ebp
test al, al
je 0x40ff52
movss xmm0, dword [0x523f7c]
call fcn.004392d6
push esi
mov ecx, edi
mov dword [esp + 0x1c], 0x428c0000
mov dword [esp + 0x20], 0x420c0000
call fcn.0041614b
xor edx, edx
mov byte [esp + 0x14], 0
push 0x7e
pop ecx
div ecx
inc dl
mov al, dl
mov byte [esp + 0x10], dl
xor al, 0xef
mov byte [esp + 0x11], al
mov al, dl
xor al, 0x8e
mov byte [esp + 0x12], al
mov al, dl
xor al, 0x92
xor ecx, ecx
mov byte [esp + 0x13], al
mov al, byte [esp + ecx + 0x11]
xor al, dl
mov byte [ecx + 0x5aedb8], al
inc ecx
cmp ecx, ebp
jb 0x40fd82
push ecx
lea edx, [esp + 0x1c]
mov byte [0x5aedbb], 0
mov ecx, 0x5aedb8
call fcn.00450bac
pop ecx
test al, al
je 0x40fdb4
mov dword [0x52c370], ebx
movss xmm1, dword [0x524028]
xorps xmm0, xmm0
call fcn.004391f5
push esi
mov ecx, edi
mov dword [esp + 0x1c], 0x428c0000
mov dword [esp + 0x20], 0x420c0000
call fcn.0041614b
xor edx, edx
mov byte [esp + 0x14], 0
push 0x7e
pop ecx
div ecx
inc dl
mov al, dl
mov byte [esp + 0x10], dl
xor al, 0xef
mov byte [esp + 0x11], al
mov al, dl
xor al, 0x95
mov byte [esp + 0x12], al
mov al, dl
xor al, 0x84
xor ecx, ecx
mov byte [esp + 0x13], al
mov al, byte [esp + ecx + 0x11]
xor al, dl
mov byte [ecx + 0x5b0170], al
inc ecx
cmp ecx, ebp
jb 0x40fe08
push ecx
lea edx, [esp + 0x1c]
mov byte [0x5b0173], 0
mov ecx, 0x5b0170
call fcn.00450bac
pop ecx
test al, al
je 0x40fe3e
mov dword [0x52c370], 2
movss xmm1, dword [0x524028]
xorps xmm0, xmm0
call fcn.004391f5
push esi
mov ecx, edi
mov dword [esp + 0x1c], 0x428c0000
mov dword [esp + 0x20], 0x420c0000
call fcn.0041614b
xor edx, edx
mov byte [esp + 0x14], 0
push 0x7e
pop ecx
div ecx
inc dl
mov al, dl
mov byte [esp + 0x10], dl
xor al, 0xef
mov byte [esp + 0x11], al
mov al, dl
xor al, 0x84
mov byte [esp + 0x12], al
mov al, dl
xor al, 0x9b
xor ecx, ecx
mov byte [esp + 0x13], al
mov al, byte [esp + ecx + 0x11]
xor al, dl
mov byte [ecx + 0x5aed4c], al
inc ecx
cmp ecx, ebp
jb 0x40fe92
push ecx
lea edx, [esp + 0x1c]
mov byte [0x5aed4f], 0
mov ecx, 0x5aed4c
call fcn.00450bac
pop ecx
test al, al
je 0x40fec8
mov dword [0x52c370], 5
movss xmm1, dword [0x524028]
xorps xmm0, xmm0
call fcn.004391f5
push esi
mov ecx, edi
mov dword [esp + 0x1c], 0x428c0000
mov dword [esp + 0x20], 0x420c0000
call fcn.0041614b
xor edx, edx
mov byte [esp + 0x14], 0
push 0x7e
pop ecx
div ecx
inc dl
mov al, dl
mov byte [esp + 0x10], dl
xor al, 0xef
mov byte [esp + 0x11], al
mov al, dl
xor al, 0x80
mov byte [esp + 0x12], al
mov al, dl
xor al, 0x93
xor ecx, ecx
mov byte [esp + 0x13], al
mov al, byte [esp + ecx + 0x11]
xor al, dl
mov byte [ecx + 0x5aed14], al
inc ecx
cmp ecx, ebp
jb 0x40ff1c
push ecx
lea edx, [esp + 0x1c]
mov byte [0x5aed17], 0
mov ecx, 0x5aed14
call fcn.00450bac
pop ecx
test al, al
je 0x40ff52
mov dword [0x52c370], 6
call fcn.00432505
push 0
push ecx
lea eax, [esp + 0x20]
mov dword [esp + 0x20], 0x43eb0000
push eax
mov edx, ebx
mov dword [esp + 0x28], 0x43c80000
xor ecx, ecx
call fcn.004322f2
add esp, 0xc
test al, al
je 0x4101c6
xorps xmm0, xmm0
call fcn.00439344
mov eax, dword [0x52c370]
cmp eax, ebx
jne 0x40ff9e
call fcn.004194dc
jmp 0x4101c6
cmp eax, 2
jne 0x4101b0
push esi
mov ecx, edi
call fcn.0041614b
mov ecx, 0x5b15dc
mov byte [0x5b15dc], 0
call fcn.0045295c
push dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x20]
call fcn.00415151
xor edx, edx
mov cl, byte [eax + edx + 1]
xor cl, byte [eax]
mov byte [edx + 0x5aed78], cl
inc edx
cmp edx, 6
jb 0x40ffd0
push 0x5ad670
push 0x5aed78
mov byte [0x5aed7e], 0
call fcn.0046094a
cmp byte [0x5ad670], 0
je 0x410195
push ecx
push ecx
push 0
push 0x40
mov edx, 0x5ae918
mov ecx, str.Filter
call fcn.004548f2
add esp, 0x10
test al, al
je 0x410029
mov byte [0x5ad45c], bl
jmp 0x41002f
mov bl, byte [0x5ad45c]
test bl, bl
je 0x41003f
call fcn.00409a20
mov byte [0x5ad45c], 0
mov eax, dword [0x5ae95c]
push ecx
mov ecx, dword [0x5ae958]
sub eax, ecx
sar eax, 2
push eax
push ecx
push ecx
mov ecx, str.Select_Character
call fcn.0045ca1a
add esp, 0x10
mov ecx, edi
push esi
call fcn.0041614b
xor edx, edx
mov byte [esp + 0x16], 0
push 0x7e
pop ecx
div ecx
inc dl
mov al, dl
mov byte [esp + 0x10], dl
xor al, 0x43
mov cl, dl
mov byte [esp + 0x11], al
xor cl, 0x6f
mov al, dl
mov byte [esp + 0x12], cl
xor al, 0x6d
mov byte [esp + 0x15], cl
mov byte [esp + 0x13], al
mov al, dl
xor al, 0x62
xor ecx, ecx
mov byte [esp + 0x14], al
mov al, byte [esp + ecx + 0x11]
xor al, dl
mov byte [ecx + 0x5b0178], al
inc ecx
cmp ecx, 5
jb 0x4100a1
mov ecx, 0x5b0178
mov byte [0x5b017d], 0
call fcn.0045295c
lea edx, [esp + 0x18]
mov dword [esp + 0x18], 0x42be0000
mov ecx, 0x5ad678
mov dword [esp + 0x1c], 0x41e00000
call fcn.00407c0b
call fcn.00436be1
push esi
mov ecx, edi
call fcn.0041614b
mov ecx, 0x5aecac
mov byte [0x5aecac], 0
call fcn.0045295c
push dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x20]
call fcn.00413ebb
xor edx, edx
mov cl, byte [eax + edx + 1]
xor cl, byte [eax]
mov byte [edx + 0x5b1590], cl
inc edx
cmp edx, 0xb
jb 0x410110
push 0x5ae9ed
push 0x5b1590
mov byte [0x5b159b], 0
call fcn.0046094a
cmp byte [0x5ae9ed], 0
je 0x410148
mov byte [0x5ae9e4], 0
push dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x20]
call fcn.00413f2b
xor edx, edx
mov cl, byte [eax + edx + 1]
xor cl, byte [eax]
mov byte [edx + 0x5b15d4], cl
inc edx
cmp edx, 7
jb 0x410158
push 0x5ae9e4
push 0x5b15d4
mov byte [0x5b15db], 0
call fcn.0046094a
cmp byte [0x5ae9e4], 0
je 0x410190
mov byte [0x5ae9ed], 0
call fcn.00436c35
push esi
mov ecx, edi
call fcn.0041614b
mov ecx, 0x5b15a4
mov byte [0x5b15a4], 0
call fcn.0045295c
jmp 0x4101c6
cmp eax, 5
jne 0x4101bc
call fcn.004186b8
jmp 0x4101c6
cmp eax, 6
jne 0x4101c6
call fcn.0041875e
call fcn.00432505
push 0
push ecx
lea eax, [esp + 0x20]
mov dword [esp + 0x20], 0x43eb0000
push eax
mov edx, ebp
mov dword [esp + 0x28], 0x42a00000
xor ecx, ecx
call fcn.004322f2
add esp, 0xc
test al, al
je 0x4102ca
lea ecx, [esp + 0x18]
call fcn.004395d3
movss xmm1, dword [eax + 4]
mov eax, dword [0x5ae7a8]
subss xmm1, dword [0x523f74]
mov eax, dword [eax + 0x3e48]
mulss xmm1, dword [0x523e40]
movss xmm0, dword [eax + 0xf4]
subss xmm0, dword [eax + 0x18]
addss xmm0, dword [eax + 0x7c]
addss xmm0, xmm1
call fcn.0043930d
call fcn.00409126
call fcn.0045227e
push esi
mov ecx, edi
mov dword [esp + 0x1c], 0x42200000
mov dword [esp + 0x20], 0x41f00000
call fcn.0041614b
xor edx, edx
mov byte [esp + 0x14], 0
push 0x7e
pop ecx
div ecx
inc dl
mov al, dl
mov byte [esp + 0x10], dl
xor al, 0xef
mov byte [esp + 0x11], al
mov al, dl
xor al, 0x80
mov byte [esp + 0x12], al
mov al, dl
xor al, 0x91
xor ecx, ecx
mov byte [esp + 0x13], al
mov al, byte [esp + ecx + 0x11]
xor al, dl
mov byte [ecx + 0x5aecf4], al
inc ecx
cmp ecx, ebp
jb 0x410289
push ecx
lea edx, [esp + 0x1c]
mov byte [0x5aecf7], 0
mov ecx, 0x5aecf4
call fcn.00450bac
pop ecx
test al, al
jne 0x4102de
movss xmm1, dword [0x524028]
xorps xmm0, xmm0
call fcn.004391f5
call fcn.00408986
call fcn.00432505
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x8c
jmp fcn.00436659
call fcn.00409045
int3