Function at 0x10056560
Capabilities:
Encode data using xor
Encrypt data using aes

Disassembly:
push ebp
mov ebp, esp
push ecx
mov edx, dword [ebp + 0x10]
push ebx
mov ebx, dword [ebp + 8]
test ebx, ebx
je 0x10056a4c
test edx, edx
je 0x10056a4c
push edi
mov edi, dword [ebp + 0xc]
cmp edi, 0x80
je 0x100565aa
cmp edi, 0xc0
je 0x100565a2
cmp edi, 0x100
je 0x100565a2
pop edi
mov eax, 0xfffffffe
pop ebx
mov esp, ebp
pop ebp
ret
cmp edi, 0x80
jne 0x100565b6
mov dword [edx + 0xf0], 0xa
jmp 0x100565ce
xor eax, eax
cmp edi, 0xc0
setne al
lea eax, [eax*2 + 0xc]
mov dword [edx + 0xf0], eax
mov eax, dword [ebx]
mov ecx, eax
ror ecx, 8
rol eax, 8
and ecx, 0xff00ff00
and eax, 0xff00ff
or ecx, eax
mov dword [edx], ecx
mov dword [ebp + 8], ecx
mov ecx, dword [ebx + 4]
mov eax, ecx
ror eax, 8
rol ecx, 8
and eax, 0xff00ff00
and ecx, 0xff00ff
or eax, ecx
mov dword [edx + 4], eax
mov ecx, dword [ebx + 8]
mov eax, ecx
push esi
lea esi, [edx + 4]
ror eax, 8
rol ecx, 8
and eax, 0xff00ff00
and ecx, 0xff00ff
or eax, ecx
mov dword [edx + 8], eax
mov eax, dword [ebx + 0xc]
mov ecx, eax
ror ecx, 8
rol eax, 8
and ecx, 0xff00ff00
and eax, 0xff00ff
or ecx, eax
mov dword [ebp - 4], ecx
mov dword [edx + 0xc], ecx
cmp edi, 0x80
jne 0x10056745
mov ebx, dword [ebp - 4]
mov eax, ecx
shr eax, 0x10
mov edi, 0x10209234
movzx eax, al
mov ecx, dword [eax*4 + 0x10207930]
mov eax, ebx
shr eax, 8
xor ecx, 0x1000000
movzx eax, al
and ecx, 0xff000000
mov eax, dword [eax*4 + 0x10207d30]
and eax, 0xff0000
xor ecx, eax
mov eax, ebx
shr eax, 0x18
movzx eax, byte [eax*4 + 0x10207530]
xor ecx, eax
movzx eax, bl
mov eax, dword [eax*4 + 0x10207130]
and eax, 0xff00
xor ecx, eax
mov eax, dword [esi]
xor ecx, dword [ebp + 8]
xor eax, ecx
mov dword [edx + 0x10], ecx
mov ecx, dword [edx + 8]
xor ecx, eax
mov dword [edx + 0x14], eax
mov dword [edx + 0x18], ecx
xor ecx, ebx
mov dword [edx + 0x1c], ecx
mov ecx, dword [esi + 0x18]
lea esi, [esi + 0x10]
mov eax, ecx
shr eax, 8
movzx eax, al
mov edx, dword [eax*4 + 0x10207d30]
mov eax, ecx
shr eax, 0x10
and edx, 0xff0000
movzx eax, al
mov eax, dword [eax*4 + 0x10207930]
and eax, 0xff000000
xor edx, eax
mov eax, ecx
shr eax, 0x18
movzx eax, byte [eax*4 + 0x10207530]
xor edx, eax
movzx eax, cl
mov eax, dword [eax*4 + 0x10207130]
and eax, 0xff00
xor edx, eax
xor edx, dword [esi - 4]
xor edx, dword [edi]
add edi, 4
mov dword [esi + 0xc], edx
mov eax, dword [esi]
xor eax, edx
mov dword [esi + 0x10], eax
mov ecx, dword [esi + 4]
xor ecx, eax
mov dword [esi + 0x14], ecx
mov eax, dword [esi + 8]
xor eax, ecx
mov dword [esi + 0x18], eax
cmp edi, str.KillList
jne 0x100566c1
pop esi
pop edi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebx + 0x10]
mov eax, ecx
ror eax, 8
rol ecx, 8
and eax, 0xff00ff00
and ecx, 0xff00ff
or eax, ecx
mov dword [edx + 0x10], eax
mov eax, dword [ebx + 0x14]
mov ecx, eax
ror ecx, 8
rol eax, 8
and ecx, 0xff00ff00
and eax, 0xff00ff
or ecx, eax
mov dword [ebp - 4], ecx
mov dword [edx + 0x14], ecx
cmp edi, 0xc0
jne 0x1005689f
mov ebx, dword [ebp - 4]
mov eax, ecx
shr eax, 0x10
mov edi, 0x10209234
movzx eax, al
mov ecx, dword [eax*4 + 0x10207930]
mov eax, ebx
shr eax, 8
xor ecx, 0x1000000
movzx eax, al
and ecx, 0xff000000
mov eax, dword [eax*4 + 0x10207d30]
and eax, 0xff0000
xor ecx, eax
mov eax, ebx
shr eax, 0x18
movzx eax, byte [eax*4 + 0x10207530]
xor ecx, eax
movzx eax, bl
mov eax, dword [eax*4 + 0x10207130]
and eax, 0xff00
xor ecx, eax
mov eax, dword [esi]
xor ecx, dword [ebp + 8]
xor eax, ecx
mov dword [edx + 0x18], ecx
mov ecx, dword [edx + 8]
xor ecx, eax
mov dword [edx + 0x1c], eax
mov eax, dword [edx + 0xc]
xor eax, ecx
mov dword [edx + 0x20], ecx
mov dword [edx + 0x24], eax
lea eax, [edx + 0x28]
mov edx, dword [eax - 0x18]
lea eax, [eax + 0x18]
xor edx, dword [eax - 0x1c]
mov ecx, dword [eax - 0x2c]
xor ecx, edx
mov dword [eax - 0x18], edx
mov dword [eax - 0x14], ecx
mov edx, dword [eax - 0x14]
mov ecx, edx
shr ecx, 8
movzx ecx, cl
mov esi, dword [ecx*4 + 0x10207d30]
mov ecx, edx
shr ecx, 0x10
and esi, 0xff0000
movzx ecx, cl
mov ecx, dword [ecx*4 + 0x10207930]
and ecx, 0xff000000
xor esi, ecx
mov ecx, edx
shr ecx, 0x18
movzx ecx, byte [ecx*4 + 0x10207530]
xor esi, ecx
movzx ecx, dl
mov ecx, dword [ecx*4 + 0x10207130]
and ecx, 0xff00
xor esi, ecx
xor esi, dword [eax - 0x28]
xor esi, dword [edi]
add edi, 4
mov dword [eax - 0x10], esi
mov ecx, dword [eax - 0x24]
xor ecx, esi
mov dword [eax - 0xc], ecx
mov edx, dword [eax - 0x20]
xor edx, ecx
mov dword [eax - 8], edx
mov ecx, dword [eax - 0x1c]
xor ecx, edx
mov dword [eax - 4], ecx
cmp edi, 0x10209250
jne 0x10056803
pop esi
pop edi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebx + 0x18]
mov eax, ecx
ror eax, 8
and eax, 0xff00ff00
rol ecx, 8
and ecx, 0xff00ff
or eax, ecx
mov dword [edx + 0x18], eax
mov eax, dword [ebx + 0x1c]
mov ebx, eax
ror ebx, 8
rol eax, 8
and ebx, 0xff00ff00
and eax, 0xff00ff
or ebx, eax
mov dword [edx + 0x1c], ebx
cmp edi, 0x100
jne 0x10056a43
mov eax, ebx
mov edi, 0x10209234
shr eax, 0x10
movzx eax, al
mov ecx, dword [eax*4 + 0x10207930]
mov eax, ebx
shr eax, 8
xor ecx, 0x1000000
movzx eax, al
and ecx, 0xff000000
mov eax, dword [eax*4 + 0x10207d30]
and eax, 0xff0000
xor ecx, eax
mov eax, ebx
shr eax, 0x18
movzx eax, byte [eax*4 + 0x10207530]
xor ecx, eax
movzx eax, bl
mov eax, dword [eax*4 + 0x10207130]
and eax, 0xff00
xor ecx, eax
mov eax, dword [esi]
xor ecx, dword [ebp + 8]
lea esi, [edx + 0x30]
xor eax, ecx
mov dword [edx + 0x20], ecx
mov ecx, dword [edx + 8]
xor ecx, eax
mov dword [edx + 0x24], eax
mov eax, dword [edx + 0xc]
xor eax, ecx
mov dword [edx + 0x28], ecx
mov dword [edx + 0x2c], eax
mov ecx, dword [esi - 4]
lea esi, [esi + 0x20]
mov eax, ecx
shr eax, 0x10
movzx eax, al
mov edx, dword [eax*4 + 0x10207d30]
mov eax, ecx
shr eax, 8
and edx, 0xff0000
movzx eax, al
mov eax, dword [eax*4 + 0x10207130]
and eax, 0xff00
xor edx, eax
mov eax, ecx
shr eax, 0x18
mov eax, dword [eax*4 + 0x10207930]
and eax, 0xff000000
xor edx, eax
movzx eax, cl
mov ecx, dword [esi - 0x38]
movzx eax, byte [eax*4 + 0x10207530]
xor edx, eax
mov eax, dword [esi - 0x3c]
xor edx, dword [esi - 0x40]
xor eax, edx
mov dword [esi - 0x20], edx
mov dword [esi - 0x1c], eax
xor ecx, eax
mov eax, dword [esi - 0x34]
xor eax, ecx
mov dword [esi - 0x18], ecx
mov dword [esi - 0x14], eax
mov ecx, dword [esi - 0x14]
mov eax, ecx
shr eax, 8
movzx eax, al
mov edx, dword [eax*4 + 0x10207d30]
mov eax, ecx
shr eax, 0x10
and edx, 0xff0000
movzx eax, al
mov eax, dword [eax*4 + 0x10207930]
and eax, 0xff000000
xor edx, eax
mov eax, ecx
shr eax, 0x18
movzx eax, byte [eax*4 + 0x10207530]
xor edx, eax
movzx eax, cl
mov eax, dword [eax*4 + 0x10207130]
and eax, 0xff00
xor edx, eax
xor edx, dword [esi - 0x30]
xor edx, dword [edi]
add edi, 4
mov dword [esi - 0x10], edx
mov eax, dword [esi - 0x2c]
xor eax, edx
mov dword [esi - 0xc], eax
mov ecx, dword [esi - 0x28]
xor ecx, eax
mov dword [esi - 8], ecx
mov eax, dword [esi - 0x24]
xor eax, ecx
mov dword [esi - 4], eax
cmp edi, 0x1020924c
jne 0x10056957
pop esi
pop edi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret
or eax, 0xffffffff
pop ebx
mov esp, ebp
pop ebp
ret