Function at 0x18006f230
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r14
push r15
sub rsp, 0x20
mov rax, qword [rdx + 0x10]
xor ebx, ebx
mov rsi, qword [rdx]
mov r14, rdx
mov edi, 0xffffffff
mov r9d, ebx
movsxd rbp, dword [rax + 0x14]
mov r10, qword [rax]
mov dword [rcx + 0x14fc], ebx
mov dword [rcx + 0x1500], 0x23d
test ebp, ebp
jle 0x18006f2bd
mov r8d, ebx
nop word [rax + rax]
cmp word [rsi + r8*4], bx
je 0x18006f2ac
movsxd rdx, dword [rcx + 0x14fc]
mov edi, r9d
lea eax, [rdx + 1]
mov dword [rcx + 0x14fc], eax
mov dword [rcx + rdx*4 + 0xc0c], r9d
mov byte [rcx + r8 + 0x1504], bl
jmp 0x18006f2b2
mov word [rsi + r8*4 + 2], bx
inc r9d
inc r8
cmp r8, rbp
jl 0x18006f280
mov r8d, dword [rcx + 0x14fc]
mov r15d, 1
cmp r8d, 2
jge 0x18006f32a
cmp edi, 2
lea eax, [r8 + 1]
mov dword [rcx + 0x14fc], eax
lea edx, [rdi + 1]
movsxd rax, r8d
mov r9d, edx
cmovge edx, ebx
cmovge r9d, edi
mov dword [rcx + rax*4 + 0xc0c], edx
movsxd rax, edx
mov word [rsi + rax*4], r15w
mov byte [rax + rcx + 0x1504], bl
dec dword [rcx + 0x175c]
test r10, r10
je 0x18006f31a
movzx eax, word [r10 + rax*4 + 2]
sub dword [rcx + 0x1760], eax
mov r8d, dword [rcx + 0x14fc]
mov edi, r9d
cmp r8d, 2
jl 0x18006f2d0
mov dword [r14 + 8], edi
mov r8d, dword [rcx + 0x14fc]
mov eax, r8d
cdq
sub eax, edx
sar eax, 1
mov ebx, eax
cmp eax, r15d
jl 0x18006f360
mov r8d, ebx
mov rdx, rsi
call fcn.18006fe20
dec ebx
cmp ebx, r15d
jge 0x18006f344
mov r8d, dword [rcx + 0x14fc]
nop dword [rax]
movsxd rbx, dword [rcx + 0xc0c]
movsxd rax, r8d
mov edx, dword [rcx + rax*4 + 0xc08]
lea eax, [r8 - 1]
mov dword [rcx + 0xc0c], edx
mov r8d, r15d
mov rdx, rsi
mov dword [rcx + 0x14fc], eax
call fcn.18006fe20
movsxd rdx, dword [rcx + 0x1500]
movsxd r8, dword [rcx + 0xc0c]
mov r9, r8
movsxd r10, ebp
lea eax, [rdx - 1]
mov dword [rcx + 0x1500], eax
mov dword [rcx + rdx*4 + 0xc04], ebx
movsxd rdx, dword [rcx + 0x1500]
lea eax, [rdx - 1]
mov dword [rcx + 0x1500], eax
mov dword [rcx + rdx*4 + 0xc04], r8d
mov rdx, rsi
movzx eax, word [rsi + r8*4]
add ax, word [rsi + rbx*4]
mov word [rsi + r10*4], ax
movzx r8d, byte [rbx + rcx + 0x1504]
movzx eax, byte [r9 + rcx + 0x1504]
cmp r8b, al
cmovb r8d, eax
inc r8b
mov byte [rcx + r10 + 0x1504], r8b
mov r8d, r15d
mov word [rsi + r9*4 + 2], bp
mov word [rsi + rbx*4 + 2], bp
mov dword [rcx + 0xc0c], ebp
inc ebp
call fcn.18006fe20
mov r8d, dword [rcx + 0x14fc]
cmp r8d, 2
jge 0x18006f360
movsxd r8, dword [rcx + 0x1500]
mov rdx, r14
lea eax, [r8 - 1]
mov dword [rcx + 0x1500], eax
mov eax, dword [rcx + 0xc0c]
mov dword [rcx + r8*4 + 0xc04], eax
call fcn.18006f8f0
lea r8, [rcx + 0xbe8]
mov edx, edi
mov rcx, rsi
mov rbx, qword [rsp + 0x40]
mov rbp, qword [rsp + 0x48]
mov rsi, qword [rsp + 0x50]
add rsp, 0x20
pop r15
pop r14
pop rdi
jmp 0x18006fb00
sub rsp, 0x38
mov rax, qword [0x180a43b80]
xor rax, rsp
mov qword [rsp + 0x20], rax
movzx eax, word [r8]
mov r11, rcx
movzx r9d, word [r8 + 2]
add eax, eax
movzx ecx, word [r8 + 6]
add r9d, eax
mov word [rsp + 2], ax
add r9d, r9d
movzx eax, word [r8 + 4]
add eax, r9d
mov word [rsp + 4], r9w
add eax, eax
movsxd r10, edx
add ecx, eax
mov word [rsp + 6], ax
movzx eax, word [r8 + 8]
add ecx, ecx
add eax, ecx
mov word [rsp + 8], cx
movzx ecx, word [r8 + 0xa]
add eax, eax
add ecx, eax
mov word [rsp + 0xa], ax
movzx eax, word [r8 + 0xc]
add ecx, ecx
add eax, ecx
mov word [rsp + 0xc], cx
movzx ecx, word [r8 + 0xe]
add eax, eax
add ecx, eax
mov word [rsp + 0xe], ax
movzx eax, word [r8 + 0x10]
add ecx, ecx
add eax, ecx
mov word [rsp + 0x10], cx
movzx ecx, word [r8 + 0x12]
add eax, eax
add ecx, eax
mov word [rsp + 0x12], ax
movzx eax, word [r8 + 0x14]
add ecx, ecx
add eax, ecx
mov word [rsp + 0x14], cx
movzx ecx, word [r8 + 0x16]
add eax, eax
add ecx, eax
mov word [rsp + 0x16], ax
movzx eax, word [r8 + 0x18]
add ecx, ecx
add eax, ecx
mov word [rsp + 0x18], cx
movzx ecx, word [r8 + 0x1a]
add eax, eax
add ecx, eax
mov word [rsp + 0x1a], ax
movzx eax, word [r8 + 0x1c]
add ecx, ecx
add eax, ecx
mov word [rsp + 0x1c], cx
add eax, eax
mov word [rsp + 0x1e], ax
test edx, edx
js 0x18006fc35
xor r9d, r9d
movzx edx, word [r11 + r9*4 + 2]
test edx, edx
je 0x18006fc2d
lea rcx, [rsp]
movzx r8d, word [rcx + rdx*2]
lea rcx, [rcx + rdx*2]
lea eax, [r8 + 1]
mov word [rcx], ax
xor eax, eax
mov ecx, r8d
dec edx
and ecx, 1
shr r8d, 1
or eax, ecx
add eax, eax
test edx, edx
jg 0x18006fc13
shr eax, 1
mov word [r11 + r9*4], ax
inc r9
cmp r9, r10
jle 0x18006fbf3
mov rcx, qword [rsp + 0x20]
xor rcx, rsp
call fcn.1800731b0
add rsp, 0x38
ret