Function at 0x40fb5b
Capabilities:
Encode data using xor

Disassembly:
sub esp, 0x8c
push ebx
push ebp
push esi
push edi
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [0x5077a8]
and dword [eax + 0x20], 0
call fcn.0040734d
call fcn.004097f2
cmp dword [0x507808], 0xf
mov ecx, 0x5077f4
push 0x80e2
cmova ecx, dword [0x5077f4]
xor edx, edx
call fcn.00433e6f
pop ecx
push dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x7a]
call fcn.004150a0
push ecx
push 0x11
lea ecx, [esp + 0x30]
mov esi, eax
call fcn.0041230e
xor edx, edx
mov ax, word [esi + edx + 2]
xor ax, word [esi]
cmp dword [esp + 0x3c], 7
movzx ecx, ax
lea eax, [esp + 0x28]
cmova eax, dword [esp + 0x28]
mov word [eax + edx], cx
add edx, 2
cmp edx, 0x22
jb 0x40fbbe
cmp dword [esp + 0x3c], 7
lea ecx, [esp + 0x28]
cmova ecx, dword [esp + 0x28]
call fcn.0041befc
lea ecx, [esp + 0x28]
mov bl, al
call fcn.004128ca
test bl, bl
je 0x4102de
mov eax, dword [0x5077a8]
mov eax, dword [eax + 0x3e48]
mov ecx, dword [eax + 0x14]
mov eax, dword [eax + 0x18]
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], eax
call fcn.0043660c
mov esi, eax
call fcn.0042fb89
call fcn.0042fba6
movss xmm2, dword [esp + 0x10]
lea ecx, [esp + 0x40]
movss xmm1, dword [esp + 0x14]
movaps xmm0, xmm2
xorps xmm3, xmm3
addss xmm0, xmm3
movss dword [esp + 0x18], xmm0
movaps xmm0, xmm1
addss xmm0, xmm3
movss dword [esp + 0x1c], xmm0
movss xmm0, dword [0x47d7f8]
addss xmm2, xmm0
addss xmm1, xmm0
movaps xmm0, xmmword [0x47da60]
movups xmmword [esp + 0x40], xmm0
movaps xmm0, xmmword [0x47daa0]
movups xmmword [esp + 0x50], xmm0
movaps xmm0, xmmword [0x47dae0]
movups xmmword [esp + 0x60], xmm0
movaps xmm0, xmmword [0x47da60]
movss dword [esp + 0x10], xmm2
movss dword [esp + 0x14], xmm1
movups xmmword [esp + 0x28], xmm0
call fcn.0042ca00
push eax
lea ecx, [esp + 0x54]
call fcn.0042ca00
push eax
lea ecx, [esp + 0x68]
call fcn.0042ca00
push eax
lea ecx, [esp + 0x34]
call fcn.0042ca00
push eax
lea eax, [esp + 0x20]
mov ecx, esi
push eax
lea eax, [esp + 0x2c]
push eax
call fcn.004476eb
call fcn.00404e6d
movss xmm1, dword [0x47d6a0]
xor ecx, ecx
call fcn.0042d9c4
push 0
push ecx
xor ebx, ebx
mov dword [esp + 0x20], 0x43eb0000
lea eax, [esp + 0x20]
mov dword [esp + 0x24], 0x43c80000
inc ebx
xor ecx, ecx
push eax
mov edx, ebx
call fcn.004318e2
add esp, 0xc
mov esi, 0x5091c0
mov edi, 0x506988
push 3
pop ebp
test al, al
je 0x40ff52
movss xmm0, dword [0x47d79c]
call fcn.004388c3
push esi
mov ecx, edi
mov dword [esp + 0x1c], 0x428c0000
mov dword [esp + 0x20], 0x420c0000
call fcn.0041614b
xor edx, edx
mov byte [esp + 0x14], 0
push 0x7e
pop ecx
div ecx
inc dl
mov al, dl
mov byte [esp + 0x10], dl
xor al, 0xef
mov byte [esp + 0x11], al
mov al, dl
xor al, 0x8e
mov byte [esp + 0x12], al
mov al, dl
xor al, 0x92
xor ecx, ecx
mov byte [esp + 0x13], al
mov al, byte [esp + ecx + 0x11]
xor al, dl
mov byte [ecx + 0x507db8], al
inc ecx
cmp ecx, ebp
jb 0x40fd82
push ecx
lea edx, [esp + 0x1c]
mov byte [0x507dbb], 0
mov ecx, 0x507db8
call fcn.0045019c
pop ecx
test al, al
je 0x40fdb4
mov dword [0x485370], ebx
movss xmm1, dword [0x47d848]
xorps xmm0, xmm0
call fcn.004387e2
push esi
mov ecx, edi
mov dword [esp + 0x1c], 0x428c0000
mov dword [esp + 0x20], 0x420c0000
call fcn.0041614b
xor edx, edx
mov byte [esp + 0x14], 0
push 0x7e
pop ecx
div ecx
inc dl
mov al, dl
mov byte [esp + 0x10], dl
xor al, 0xef
mov byte [esp + 0x11], al
mov al, dl
xor al, 0x95
mov byte [esp + 0x12], al
mov al, dl
xor al, 0x84
xor ecx, ecx
mov byte [esp + 0x13], al
mov al, byte [esp + ecx + 0x11]
xor al, dl
mov byte [ecx + 0x509170], al
inc ecx
cmp ecx, ebp
jb 0x40fe08
push ecx
lea edx, [esp + 0x1c]
mov byte [0x509173], 0
mov ecx, 0x509170
call fcn.0045019c
pop ecx
test al, al
je 0x40fe3e
mov dword [0x485370], 2
movss xmm1, dword [0x47d848]
xorps xmm0, xmm0
call fcn.004387e2
push esi
mov ecx, edi
mov dword [esp + 0x1c], 0x428c0000
mov dword [esp + 0x20], 0x420c0000
call fcn.0041614b
xor edx, edx
mov byte [esp + 0x14], 0
push 0x7e
pop ecx
div ecx
inc dl
mov al, dl
mov byte [esp + 0x10], dl
xor al, 0xef
mov byte [esp + 0x11], al
mov al, dl
xor al, 0x84
mov byte [esp + 0x12], al
mov al, dl
xor al, 0x9b
xor ecx, ecx
mov byte [esp + 0x13], al
mov al, byte [esp + ecx + 0x11]
xor al, dl
mov byte [ecx + 0x507d4c], al
inc ecx
cmp ecx, ebp
jb 0x40fe92
push ecx
lea edx, [esp + 0x1c]
mov byte [0x507d4f], 0
mov ecx, 0x507d4c
call fcn.0045019c
pop ecx
test al, al
je 0x40fec8
mov dword [0x485370], 5
movss xmm1, dword [0x47d848]
xorps xmm0, xmm0
call fcn.004387e2
push esi
mov ecx, edi
mov dword [esp + 0x1c], 0x428c0000
mov dword [esp + 0x20], 0x420c0000
call fcn.0041614b
xor edx, edx
mov byte [esp + 0x14], 0
push 0x7e
pop ecx
div ecx
inc dl
mov al, dl
mov byte [esp + 0x10], dl
xor al, 0xef
mov byte [esp + 0x11], al
mov al, dl
xor al, 0x80
mov byte [esp + 0x12], al
mov al, dl
xor al, 0x93
xor ecx, ecx
mov byte [esp + 0x13], al
mov al, byte [esp + ecx + 0x11]
xor al, dl
mov byte [ecx + 0x507d14], al
inc ecx
cmp ecx, ebp
jb 0x40ff1c
push ecx
lea edx, [esp + 0x1c]
mov byte [0x507d17], 0
mov ecx, 0x507d14
call fcn.0045019c
pop ecx
test al, al
je 0x40ff52
mov dword [0x485370], 6
call fcn.00431af5
push 0
push ecx
lea eax, [esp + 0x20]
mov dword [esp + 0x20], 0x43eb0000
push eax
mov edx, ebx
mov dword [esp + 0x28], 0x43c80000
xor ecx, ecx
call fcn.004318e2
add esp, 0xc
test al, al
je 0x4101c6
xorps xmm0, xmm0
call fcn.00438931
mov eax, dword [0x485370]
cmp eax, ebx
jne 0x40ff9e
call fcn.004194dc
jmp 0x4101c6
cmp eax, 2
jne 0x4101b0
push esi
mov ecx, edi
call fcn.0041614b
mov ecx, 0x50a5dc
mov byte [0x50a5dc], 0
call fcn.00451f4c
push dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x20]
call fcn.00415151
xor edx, edx
mov cl, byte [eax + edx + 1]
xor cl, byte [eax]
mov byte [edx + 0x507d78], cl
inc edx
cmp edx, 6
jb 0x40ffd0
push 0x506670
push 0x507d78
mov byte [0x507d7e], 0
call fcn.0045ff3a
cmp byte [0x506670], 0
je 0x410195
push ecx
push ecx
push 0
push 0x40
mov edx, 0x507918
mov ecx, str.Filter
call fcn.00453ee2
add esp, 0x10
test al, al
je 0x410029
mov byte [0x50645c], bl
jmp 0x41002f
mov bl, byte [0x50645c]
test bl, bl
je 0x41003f
call fcn.00409a23
mov byte [0x50645c], 0
mov eax, dword [0x50795c]
push ecx
mov ecx, dword [0x507958]
sub eax, ecx
sar eax, 2
push eax
push ecx
push ecx
mov ecx, str.Select_Character
call fcn.0045c00a
add esp, 0x10
mov ecx, edi
push esi
call fcn.0041614b
xor edx, edx
mov byte [esp + 0x16], 0
push 0x7e
pop ecx
div ecx
inc dl
mov al, dl
mov byte [esp + 0x10], dl
xor al, 0x43
mov cl, dl
mov byte [esp + 0x11], al
xor cl, 0x6f
mov al, dl
mov byte [esp + 0x12], cl
xor al, 0x6d
mov byte [esp + 0x15], cl
mov byte [esp + 0x13], al
mov al, dl
xor al, 0x62
xor ecx, ecx
mov byte [esp + 0x14], al
mov al, byte [esp + ecx + 0x11]
xor al, dl
mov byte [ecx + 0x509178], al
inc ecx
cmp ecx, 5
jb 0x4100a1
mov ecx, 0x509178
mov byte [0x50917d], 0
call fcn.00451f4c
lea edx, [esp + 0x18]
mov dword [esp + 0x18], 0x42be0000
mov ecx, 0x506678
mov dword [esp + 0x1c], 0x41e00000
call fcn.00407c0e
call fcn.004361ce
push esi
mov ecx, edi
call fcn.0041614b
mov ecx, 0x507cac
mov byte [0x507cac], 0
call fcn.00451f4c
push dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x20]
call fcn.00413ebb
xor edx, edx
mov cl, byte [eax + edx + 1]
xor cl, byte [eax]
mov byte [edx + 0x50a590], cl
inc edx
cmp edx, 0xb
jb 0x410110
push 0x5079ed
push 0x50a590
mov byte [0x50a59b], 0
call fcn.0045ff3a
cmp byte [0x5079ed], 0
je 0x410148
mov byte [0x5079e4], 0
push dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x20]
call fcn.00413f2b
xor edx, edx
mov cl, byte [eax + edx + 1]
xor cl, byte [eax]
mov byte [edx + 0x50a5d4], cl
inc edx
cmp edx, 7
jb 0x410158
push 0x5079e4
push 0x50a5d4
mov byte [0x50a5db], 0
call fcn.0045ff3a
cmp byte [0x5079e4], 0
je 0x410190
mov byte [0x5079ed], 0
call fcn.00436222
push esi
mov ecx, edi
call fcn.0041614b
mov ecx, 0x50a5a4
mov byte [0x50a5a4], 0
call fcn.00451f4c
jmp 0x4101c6
cmp eax, 5
jne 0x4101bc
call fcn.004186b8
jmp 0x4101c6
cmp eax, 6
jne 0x4101c6
call fcn.0041875e
call fcn.00431af5
push 0
push ecx
lea eax, [esp + 0x20]
mov dword [esp + 0x20], 0x43eb0000
push eax
mov edx, ebp
mov dword [esp + 0x28], 0x42a00000
xor ecx, ecx
call fcn.004318e2
add esp, 0xc
test al, al
je 0x4102ca
lea ecx, [esp + 0x18]
call fcn.00438bc0
movss xmm1, dword [eax + 4]
mov eax, dword [0x5077a8]
subss xmm1, dword [0x47d794]
mov eax, dword [eax + 0x3e48]
mulss xmm1, dword [0x47d660]
movss xmm0, dword [eax + 0xf4]
subss xmm0, dword [eax + 0x18]
addss xmm0, dword [eax + 0x7c]
addss xmm0, xmm1
call fcn.004388fa
call fcn.00409129
call fcn.0045186e
push esi
mov ecx, edi
mov dword [esp + 0x1c], 0x42200000
mov dword [esp + 0x20], 0x41f00000
call fcn.0041614b
xor edx, edx
mov byte [esp + 0x14], 0
push 0x7e
pop ecx
div ecx
inc dl
mov al, dl
mov byte [esp + 0x10], dl
xor al, 0xef
mov byte [esp + 0x11], al
mov al, dl
xor al, 0x80
mov byte [esp + 0x12], al
mov al, dl
xor al, 0x91
xor ecx, ecx
mov byte [esp + 0x13], al
mov al, byte [esp + ecx + 0x11]
xor al, dl
mov byte [ecx + 0x507cf4], al
inc ecx
cmp ecx, ebp
jb 0x410289
push ecx
lea edx, [esp + 0x1c]
mov byte [0x507cf7], 0
mov ecx, 0x507cf4
call fcn.0045019c
pop ecx
test al, al
jne 0x4102de
movss xmm1, dword [0x47d848]
xorps xmm0, xmm0
call fcn.004387e2
call fcn.00408989
call fcn.00431af5
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x8c
jmp fcn.00435c46
call fcn.00409048
int3