Function at 0x6199d0
Capabilities:
Encode data using xor
Encrypt data using rc4 prga

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
mov esi, pe_nt_image_headers32
push ebx
and esp, 0xfffffff0
sub esp, 0x20
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0x14]
cmp dword [ebp + 0xc], esi
mov edx, dword [ebp + 0x10]
mov byte [eax], 0
cmovle esi, dword [ebp + 0xc]
test ecx, ecx
jle 0x619c48
mov ebx, 0x400
mov edi, pe_nt_image_headers32
cmp ecx, ebx
cmovg ecx, ebx
lea ebx, [ecx + 7]
neg ecx
sar ebx, 3
and ecx, 7
sub edi, ebx
mov dword [esp + 0x1c], edi
add edi, eax
mov dword [esp + 0x18], edi
mov edi, 0xff
sar edi, cl
mov ecx, 0x7f
sub ecx, ebx
mov dword [esp + 0x14], edi
mov dword [esp + 0x10], ecx
mov ecx, dword [ebp + 0xc]
test ecx, ecx
jle 0x619c74
cmp dword [ebp + 0xc], 3
jle 0x619c7e
lea ecx, [edx + 1]
mov edi, eax
sub edi, ecx
xor ecx, ecx
cmp edi, 0xe
ja 0x619b12
mov edi, ebx
lea esi, [esi]
movzx ebx, byte [edx + ecx]
mov byte [eax + ecx], bl
add ecx, 1
cmp esi, ecx
jg 0x619a68
mov ebx, edi
cmp dword [ebp + 0xc], 0x7f
movzx edx, byte [eax + esi - 1]
jg 0x619aab
mov edi, eax
mov dword [esp + 0xc], ebx
mov ecx, eax
sub edi, esi
sub edi, 0xffffff80
add dl, byte [ecx]
add ecx, 1
movzx edx, dl
movzx edx, byte [edx + 0x6d1560]
mov byte [ecx + esi - 1], dl
cmp ecx, edi
jne 0x619a90
mov ebx, dword [esp + 0xc]
mov edi, dword [esp + 0x18]
mov esi, dword [esp + 0x14]
movzx edx, byte [edi]
and edx, esi
mov esi, dword [esp + 0x10]
movzx ecx, byte [edx + 0x6d1560]
mov edx, dword [esp + 0x1c]
add esi, eax
mov byte [edi], cl
test edx, edx
je 0x619ae9
nop
movzx edx, byte [esi + ebx]
mov edi, esi
sub esi, 1
xor ecx, edx
movzx ecx, byte [ecx + 0x6d1560]
mov byte [esi + 1], cl
cmp eax, edi
jne 0x619ad0
mov edx, 0x7f
nop
movzx ecx, byte [eax + edx]
movzx ebx, byte [eax + edx - 1]
shl ecx, 8
or ecx, ebx
mov dword [eax + edx*2 - 2], ecx
sub edx, 2
cmp edx, 0xffffffff
jne 0x619af0
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
cmp dword [ebp + 0xc], 0xf
mov dword [esp + 0xc], esi
jle 0x619c87
movdqu xmm1, xmmword [edx]
mov ecx, esi
shr ecx, 4
movups xmmword [eax], xmm1
cmp ecx, 1
je 0x619b93
movdqu xmm2, xmmword [edx + 0x10]
movups xmmword [eax + 0x10], xmm2
cmp ecx, 2
je 0x619b93
movdqu xmm3, xmmword [edx + 0x20]
movups xmmword [eax + 0x20], xmm3
cmp ecx, 3
je 0x619b93
movdqu xmm4, xmmword [edx + 0x30]
movups xmmword [eax + 0x30], xmm4
cmp ecx, 4
je 0x619b93
movdqu xmm5, xmmword [edx + 0x40]
movups xmmword [eax + 0x40], xmm5
cmp ecx, 5
je 0x619b93
movdqu xmm6, xmmword [edx + 0x50]
movups xmmword [eax + 0x50], xmm6
cmp ecx, 6
je 0x619b93
movdqu xmm7, xmmword [edx + 0x60]
movups xmmword [eax + 0x60], xmm7
cmp ecx, 8
jne 0x619b93
movdqu xmm0, xmmword [edx + 0x70]
movups xmmword [eax + 0x70], xmm0
jmp 0x619a78
mov edi, esi
and edi, 0xfffffff0
mov dword [esp + 4], edi
mov ecx, edi
mov dword [esp + 8], edi
cmp edi, esi
je 0x619a78
mov edi, esi
sub edi, ecx
mov dword [esp + 0xc], edi
sub edi, 1
cmp edi, 2
jbe 0x619c10
mov edi, dword [esp + 0xc]
mov ecx, dword [esp + 8]
shr edi, 2
add ecx, eax
mov dword [esp], edi
mov edi, dword [esp + 8]
add edi, edx
cmp dword [esp], 1
movd xmm0, dword [edi]
movd dword [ecx], xmm0
je 0x619bf8
movd xmm0, dword [edi + 4]
cmp dword [esp], 2
movd dword [ecx + 4], xmm0
je 0x619bf8
movd xmm0, dword [edi + 8]
movd dword [ecx + 8], xmm0
mov edi, dword [esp + 0xc]
mov ecx, edi
and ecx, 0xfffffffc
add dword [esp + 4], ecx
mov ecx, edi
and ecx, 3
je 0x619a78
mov edi, dword [esp + 4]
movzx ecx, byte [edx + edi]
mov byte [eax + edi], cl
lea ecx, [edi + 1]
cmp esi, ecx
jle 0x619a78
movzx ecx, byte [edx + edi + 1]
mov byte [eax + edi + 1], cl
lea ecx, [edi + 2]
cmp esi, ecx
jle 0x619a78
movzx edx, byte [edx + edi + 2]
mov byte [eax + edi + 2], dl
jmp 0x619a78
mov ecx, dword [ebp + 0xc]
mov dword [esp + 0x18], eax
mov ebx, pe_nt_image_headers32
mov dword [esp + 0x10], 0xffffffff
mov dword [esp + 0x14], 0xff
mov dword [esp + 0x1c], 0
test ecx, ecx
jg 0x619a43
movzx edx, byte [eax + esi - 1]
jmp 0x619a83
xor ecx, ecx
mov edi, ebx
jmp 0x619a68
mov dword [esp + 4], 0
mov dword [esp + 8], 0
jmp 0x619bba