Function at 0x410b00
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push edi
push 0x3e8
call esi
mov edi, dword [ebp + 8]
push 0x3e8
lea eax, [ebp - 1]
mov bl, 0xcc
push 1
push eax
mov ecx, edi
mov byte [ebp - 1], bl
call fcn.00413670
push 0x3e8
call esi
mov ecx, dword [ebp + 0xc]
lea edx, [ebp - 0x34]
push ecx
push 0x2b
push edx
mov ecx, edi
call fcn.004135c0
cmp eax, 0xd
jb 0x410dc7
xor edi, edi
cmp byte [ebp + edi - 0x34], bl
je 0x410b5f
inc edi
cmp edi, 0x2b
jl 0x410b53
cmp edi, 0x2b
je 0x410dc7
push str.TestDemo__LiuYong
mov ecx, 0x469b50
call fcn.004353f3
inc edi
xor eax, eax
xor ecx, ecx
xor edx, edx
mov al, byte [ebp + edi - 0x34]
mov cl, byte [ebp + edi - 0x33]
mov dl, byte [ebp + edi - 0x32]
shl eax, 8
add eax, ecx
xor ecx, ecx
mov cl, byte [ebp + edi - 0x31]
shl eax, 8
add eax, edx
shl eax, 8
add eax, ecx
mov ecx, 0x46fe88
mov dword [0x469b44], eax
call fcn.00435241
lea esi, [edi + 4]
cmp edi, esi
jge 0x410be2
mov bl, byte [ebp + edi - 0x34]
mov ecx, 0x46fe88
mov dl, bl
shr dl, 4
add dl, 0x30
push edx
call fcn.0043566d
and bl, 0xf
mov ecx, 0x46fe88
add bl, 0x30
push ebx
call fcn.0043566d
inc edi
cmp edi, esi
jl 0x410bb5
mov al, byte [0x46565d]
mov cl, byte [0x4657cd]
mov dl, byte [0x46594e]
xor al, 0xcc
mov byte [ebp - 8], al
mov al, byte [0x465a18]
xor cl, 0x72
xor dl, 0x46
xor al, 0x3d
mov byte [ebp - 7], cl
mov ecx, dword [0x469b44]
mov byte [ebp - 6], dl
mov byte [ebp - 5], al
mov eax, dword [ebp - 8]
cmp ecx, eax
mov byte [ebp - 4], 0
jne 0x410db9
xor al, al
xor ecx, ecx
mov bl, byte [ecx + 0x46563c]
xor al, bl
inc ecx
cmp ecx, 0x19d
jl 0x410c27
mov ecx, 0x19e
mov bl, byte [ecx + 0x46563c]
xor al, bl
inc ecx
cmp ecx, 0x3e8
jl 0x410c3d
mov bl, byte [0x46573a]
mov dl, bl
xor dl, al
xor al, al
add dl, 8
xor ecx, ecx
add al, byte [ecx + 0x46563c]
inc ecx
cmp ecx, 0xfe
jl 0x410c5f
mov ecx, 0xff
add al, byte [ecx + 0x46563c]
inc ecx
cmp ecx, 0x3e8
jl 0x410c73
cmp dl, byte [0x4657d9]
jne 0x410db9
xor al, 0xab
cmp al, bl
jne 0x410db9
mov eax, 0x469b24
mov bl, byte [ebp + esi - 0x34]
xor edx, edx
cmp bl, 1
sete dl
mov dword [eax], edx
add eax, 4
inc esi
cmp eax, 0x469b44
jl 0x410c9d
xor eax, eax
mov cl, byte [ebp + esi - 0x34]
and cl, 0x7f
inc esi
mov byte [ebp + eax - 8], cl
inc eax
cmp eax, 4
jl 0x410cb8
lea edx, [ebp - 8]
mov byte [ebp - 4], 0
push edx
call fcn.0042a451
add esp, 4
mov word [0x469b56], ax
xor eax, eax
mov cl, byte [ebp + esi - 0x34]
and cl, 0x7f
inc esi
mov byte [ebp + eax - 8], cl
inc eax
cmp eax, 2
jl 0x410ce2
lea edx, [ebp - 8]
mov byte [ebp - 6], 0
push edx
call fcn.0042a451
add esp, 4
mov word [0x469b58], ax
xor eax, eax
mov cl, byte [ebp + esi - 0x34]
and cl, 0x7f
inc esi
mov byte [ebp + eax - 8], cl
inc eax
cmp eax, 2
jl 0x410d0c
lea edx, [ebp - 8]
mov byte [ebp - 6], 0
push edx
call fcn.0042a451
mov dl, byte [ebp + esi - 0x34]
add esp, 4
cmp dl, 0xb0
mov word [0x469b5a], ax
setne al
add eax, 0x11
mov byte [ebp + 0xf], 2
mov byte [0x469b54], al
mov edx, 0x46413c
xor eax, eax
mov cl, byte [edx + eax]
mov byte [ebp + 0xb], cl
mov cl, byte [ebp + 0xf]
ror byte [ebp + 0xb], cl
mov cl, byte [ebp + 0xb]
mov byte [edx + eax], cl
inc eax
cmp eax, 0x40
jl 0x410d51
add edx, 0x40
cmp edx, 0x46433c
jl 0x410d4f
mov edx, 0x46483c
xor eax, eax
mov cl, byte [edx + eax]
mov byte [ebp + 0xb], cl
mov cl, byte [ebp + 0xf]
ror byte [ebp + 0xb], cl
mov cl, byte [ebp + 0xb]
mov byte [edx + eax], cl
inc eax
cmp eax, 0x100
jl 0x410d7b
add edx, 0x100
cmp edx, 0x46503c
jl 0x410d79
call fcn.00410710
mov eax, 1
pop edi
pop esi
mov dword [0x469ba0], eax
pop ebx
mov esp, ebp
pop ebp
ret
push 0
push 0
push 0x46533c
call fcn.0043fac9
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret