Function at 0x51bda0
Capabilities:
Encode data using xor

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x68
mov rdi, r8
mov rbx, rdx
mov qword [rsp + 0x28], rcx
mov r15d, 0xd
xor r13d, r13d
lea r14, [0x00901310]
mov r12d, 0xd
jmp 0x51bdec
mov r12, r15
sub r15, r13
jbe 0x51bfd2
shr r15, 1
add r15, r13
mov rsi, r15
shl rsi, 5
mov rcx, qword [rsi + r14]
mov r8, qword [rsi + r14 + 8]
mov rbp, r8
sub rbp, rdi
cmovae r8, rdi
mov rdx, rbx
call sub.msvcrt.dll_memcmp
cdqe
test eax, eax
cmovne rbp, rax
xor eax, eax
test rbp, rbp
setne al
mov ecx, 0xff
cmovs eax, ecx
cmp al, 1
je 0x51bde0
movzx eax, al
cmp eax, 0xff
jne 0x51be4d
inc r15
mov r13, r15
mov r15, r12
sub r15, r13
ja 0x51bdec
jmp 0x51bfd2
mov rbx, qword [rsi + r14 + 0x18]
test rbx, rbx
je 0x51bf80
mov r14, qword [rsi + r14 + 0x10]
lea rdi, [rbx*8]
movzx eax, byte [0x009bf181]
mov rcx, qword [0x009bf100]
test rcx, rcx
jne 0x51be93
call sub.KERNEL32.dll_GetProcessHeap
test rax, rax
je 0x51c094
mov rcx, rax
mov qword [0x009bf100], rax
xor edx, edx
mov r8, rdi
call sub.KERNEL32.dll_HeapAlloc
test rax, rax
je 0x51c094
cmp rbx, 0x14
jb 0x51bef0
lea rdx, [rax + rbx*8]
add rdx, 0xfffffffffffffff8
xor ecx, ecx
cmp rdx, rax
jb 0x51bef2
lea rdx, [rax + 4]
lea r8, [rax + rbx*8]
add r8, 0xfffffffffffffffc
cmp r8, rdx
jb 0x51bef2
lea rdx, [rbx - 1]
shr rdx, 0x3d
jne 0x51bef2
lea rcx, [r14 + rbx*8]
cmp rax, rcx
jae 0x51c01c
lea rcx, [rax + rbx*8]
cmp r14, rcx
jae 0x51c01c
xor ecx, ecx
mov rdx, rcx
or rdx, 1
test bl, 1
je 0x51bf21
mov r8d, dword [r14 + rcx*8]
mov r9d, dword [r14 + rcx*8 + 4]
cmp r8d, r9d
mov r10d, r9d
cmovb r10d, r8d
cmova r9d, r8d
mov dword [rax + rcx*8], r10d
mov dword [rax + rcx*8 + 4], r9d
mov rcx, rdx
cmp rbx, rdx
je 0x51bf7b
nop word cs:[rax + rax]
mov edx, dword [r14 + rcx*8]
mov r8d, dword [r14 + rcx*8 + 4]
cmp edx, r8d
mov r9d, r8d
cmovb r9d, edx
cmova r8d, edx
mov dword [rax + rcx*8], r9d
mov dword [rax + rcx*8 + 4], r8d
mov edx, dword [r14 + rcx*8 + 8]
mov r8d, dword [r14 + rcx*8 + 0xc]
cmp edx, r8d
mov r9d, r8d
cmovb r9d, edx
cmova r8d, edx
mov dword [rax + rcx*8 + 8], r9d
mov dword [rax + rcx*8 + 0xc], r8d
add rcx, 2
cmp rbx, rcx
jne 0x51bf30
mov rcx, rbx
jmp 0x51bf87
mov eax, 4
xor ecx, ecx
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x40], rcx
lea rcx, [rsp + 0x48]
lea rdx, [rsp + 0x30]
call fcn.00507780
movups xmm0, xmmword [rsp + 0x48]
movaps xmmword [rsp + 0x30], xmm0
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x40], rax
movzx eax, byte [rsp + 0x60]
mov ecx, dword [rsp + 0x61]
mov dword [rsp + 0x20], ecx
mov ecx, dword [rsp + 0x64]
mov dword [rsp + 0x23], ecx
cmp al, 2
jne 0x51bfef
mov rax, qword [rsp + 0x28]
mov byte [rax], 1
mov byte [rax + 0x18], 2
add rsp, 0x68
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov rcx, qword [rsp + 0x40]
mov r8, qword [rsp + 0x28]
mov qword [r8 + 0x10], rcx
movaps xmm0, xmmword [rsp + 0x30]
movups xmmword [r8], xmm0
mov ecx, dword [rsp + 0x20]
mov edx, dword [rsp + 0x23]
mov dword [r8 + 0x19], ecx
mov dword [r8 + 0x1c], edx
mov byte [r8 + 0x18], al
jmp 0x51bfde
mov rcx, rbx
and rcx, 0xfffffffffffffffe
xor edx, edx
movdqa xmm0, xmmword [0x0086e780]
nop dword [rax]
movdqu xmm1, xmmword [r14 + rdx*8]
pshufd xmm2, xmm1, 0xe8
pshufd xmm1, xmm1, 0xed
movdqa xmm3, xmm2
pxor xmm3, xmm0
movdqa xmm4, xmm1
pxor xmm4, xmm0
pcmpgtd xmm4, xmm3
movdqa xmm3, xmm4
pandn xmm3, xmm1
movdqa xmm5, xmm4
pandn xmm5, xmm2
pand xmm2, xmm4
por xmm2, xmm3
pand xmm4, xmm1
por xmm4, xmm5
punpckldq xmm2, xmm4
movdqu xmmword [rax + rdx*8], xmm2
add rdx, 2
cmp rcx, rdx
jne 0x51c030
cmp rbx, rcx
je 0x51bf7b
jmp 0x51bef2
mov ecx, 4
mov rdx, rdi
call fcn.0044dfd0
ud2