Function at 0x105b560
Capabilities:
Encode data using xor
Encrypt data using aes
Encrypt data using aes via x86 extensions
Reference aes constants

Disassembly:
sub esp, 0x18
mov dword [esp + 0x10], ebp
mov dword [esp + 8], edi
mov dword [esp + 0xc], esi
mov dword [esp + 0x14], ebx
mov esi, dword [ecx + reloc.Secur32.dll_LsaDeregisterLogonProcess]
add esi, ecx
mov dword [esp + 4], esi
test byte [0x10630a8], 0xff
jne 0x105b7a3
mov eax, dword [edx]
mov ebx, dword [edx + 4]
mov ebp, dword [edx + 0xc]
mov edx, dword [edx + 8]
xor eax, dword [ecx]
xor ebx, dword [ecx + 4]
xor edx, dword [ecx + 8]
xor ebp, dword [ecx + 0xc]
lea ecx, [ecx + 0x10]
mov dword [esp], ecx
lea esp, [esp]
nop
push ebp
movzx ecx, al
mov ecx, dword [ecx*4 + reloc.Secur32.dll_LsaDeregisterLogonProcess]
movzx esi, ah
shr eax, 0x10
mov ebp, dword [esi*4 + reloc.Secur32.dll_LsaDeregisterLogonProcess]
movzx edi, ah
mov edi, dword [edi*4 + reloc.Secur32.dll_LsaDeregisterLogonProcess]
movzx eax, al
mov eax, dword [eax*4 + reloc.Secur32.dll_LsaDeregisterLogonProcess]
movzx esi, bl
xor edi, dword [esi*4 + reloc.Secur32.dll_LsaDeregisterLogonProcess]
movzx esi, bh
shr ebx, 0x10
xor ecx, dword [esi*4 + reloc.Secur32.dll_LsaDeregisterLogonProcess]
movzx esi, bl
xor ebp, dword [esi*4 + reloc.Secur32.dll_LsaDeregisterLogonProcess]
movzx ebx, bh
xor eax, dword [ebx*4 + reloc.Secur32.dll_LsaDeregisterLogonProcess]
pop ebx
movzx esi, dl
xor eax, dword [esi*4 + reloc.Secur32.dll_LsaDeregisterLogonProcess]
movzx esi, dh
xor edi, dword [esi*4 + reloc.Secur32.dll_LsaDeregisterLogonProcess]
shr edx, 0x10
movzx esi, dl
xor ecx, dword [esi*4 + reloc.Secur32.dll_LsaDeregisterLogonProcess]
movzx edx, dh
xor ebp, dword [edx*4 + reloc.Secur32.dll_LsaDeregisterLogonProcess]
mov esi, dword [esp]
movzx edx, bl
xor ebp, dword [edx*4 + reloc.Secur32.dll_LsaDeregisterLogonProcess]
movzx edx, bh
xor eax, dword [edx*4 + reloc.Secur32.dll_LsaDeregisterLogonProcess]
shr ebx, 0x10
movzx edx, bl
xor edi, dword [edx*4 + reloc.Secur32.dll_LsaDeregisterLogonProcess]
movzx ebx, bh
xor ecx, dword [ebx*4 + reloc.Secur32.dll_LsaDeregisterLogonProcess]
mov edx, dword [esi + 8]
xor edx, eax
mov eax, dword [esi]
xor eax, ecx
xor ebp, dword [esi + 0xc]
mov ebx, dword [esi + 4]
xor ebx, edi
add esi, 0x10
cmp esi, dword [esp + 4]
mov dword [esp], esi
jb 0x105b5b0
push ebp
movzx ecx, al
movzx ecx, byte [ecx + 0x1010400]
movzx esi, ah
shr eax, 0x10
movzx ebp, byte [esi + 0x1010400]
movzx edi, ah
shl ebp, 8
movzx edi, byte [edi + 0x1010400]
movzx eax, al
shl edi, 0x18
movzx eax, byte [eax + 0x1010400]
shl eax, 0x10
movzx esi, bl
movzx esi, byte [esi + 0x1010400]
or edi, esi
movzx esi, bh
shr ebx, 0x10
movzx esi, byte [esi + 0x1010400]
shl esi, 8
or ecx, esi
movzx esi, bl
movzx esi, byte [esi + 0x1010400]
movzx ebx, bh
shl esi, 0x10
movzx ebx, byte [ebx + 0x1010400]
or ebp, esi
shl ebx, 0x18
or eax, ebx
movzx esi, dl
movzx esi, byte [esi + 0x1010400]
movzx ebx, dh
shr edx, 0x10
movzx ebx, byte [ebx + 0x1010400]
or eax, esi
shl ebx, 8
movzx esi, dl
movzx esi, byte [esi + 0x1010400]
or edi, ebx
pop ebx
movzx edx, dh
movzx edx, byte [edx + 0x1010400]
shl esi, 0x10
or ecx, esi
shl edx, 0x18
or ebp, edx
movzx esi, bl
movzx esi, byte [esi + 0x1010400]
movzx edx, bh
shr ebx, 0x10
movzx edx, byte [edx + 0x1010400]
or ebp, esi
shl edx, 8
or eax, edx
mov edx, dword [esp]
movzx esi, bl
movzx esi, byte [esi + 0x1010400]
movzx ebx, bh
movzx ebx, byte [ebx + 0x1010400]
shl esi, 0x10
shl ebx, 0x18
or edi, esi
or ecx, ebx
xor ecx, dword [edx]
xor edi, dword [edx + 4]
xor eax, dword [edx + 8]
xor ebp, dword [edx + 0xc]
mov ebx, dword [esp + 0x1c]
mov dword [ebx], ecx
mov dword [ebx + 4], edi
mov dword [ebx + 8], eax
mov dword [ebx + 0xc], ebp
mov dword [esp - 4], ebx
mov ebp, dword [esp + 0x10]
mov edi, dword [esp + 8]
mov esi, dword [esp + 0xc]
mov ebx, dword [esp + 0x14]
add esp, 0x18
ret 4
movups xmm0, xmmword [edx]
movups xmm1, xmmword [ecx]
pxor xmm0, xmm1
add ecx, 0x10
movups xmm1, xmmword [ecx]
aesenc xmm0, xmm1
add ecx, 0x10
cmp ecx, esi
jb 0x105b7b0
movups xmm1, xmmword [esi]
aesenclast xmm0, xmm1
mov ebx, dword [esp + 0x1c]
movups xmmword [ebx], xmm0
jmp 0x105b78d