Function at 0x6da8f0
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov dword [rsp + 0x10], edx
mov dword [rsp + 8], ecx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x98
mov r11, qword [r8]
mov rax, qword [r9]
mov r15, qword [rsp + 0x138]
mov r13, qword [rsp + 0x140]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x130]
mov qword [rsp + 0x78], rax
mov esi, ecx
mov ecx, dword [rsp + 0x118]
lea eax, [rcx + 6]
xor r14d, r14d
mov qword [rsp + 0x80], r11
mov dword [rsp + 0x130], eax
lea eax, [rcx + 3]
mov byte [r11 + 1], r14b
movsxd rcx, eax
mov byte [r11 + 2], r14b
mov r12d, dword [r15 + 0x58]
mov rbx, r11
mov qword [rsp + 0x70], r11
add r11, rcx
lea rcx, [rsp + 0x130]
test r13, r13
mov edi, 0xfffffffe
cmove rcx, r14
mov eax, r12d
mov ebp, edi
mov qword [rsp + 0x68], rcx
mov dword [rsp + 0x50], eax
cmp dword [rsp + 0x110], 0
mov qword [rsp + 0x58], r11
je 0x6da9ad
mov dword [r15 + 0x58], eax
mov eax, esi
and eax, 7
cmp eax, edx
je 0x6da9d3
mov byte [r11], 0x19
and sil, 7
add r11, 2
mov byte [r11 - 1], sil
add dword [rsp + 0x130], 2
mov qword [rsp + 0x58], r11
cmp dword [rsp + 0x108], 0
je 0x6daa00
mov byte [r11], 0x5c
mov byte [r11 + 1], 0
mov byte [r11 + 2], 0
lea r14, [r11 + 1]
add r11, 3
add dword [rsp + 0x130], 3
mov qword [rsp + 0x58], r11
mov r9, qword [rsp + 0x100]
mov qword [rsp + 0x40], rcx
mov qword [rsp + 0x38], r15
lea rax, [rsp + 0x78]
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x58]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x138]
lea rcx, [rsp + 0xe0]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0x140]
mov qword [rsp + 0x20], rax
call fcn.006d6830
test eax, eax
je 0x6dab9b
mov eax, dword [r15 + 0x58]
mov esi, dword [rsp + 0xe0]
mov r11, qword [rsp + 0x58]
cmp eax, r12d
cmovg r12d, eax
test r13, r13
jne 0x6dab03
cmp byte [rbx], 0x54
je 0x6daa8a
mov ebp, dword [rsp + 0x140]
mov edi, dword [rsp + 0x138]
jmp 0x6daad4
mov eax, dword [rsp + 0x140]
test ebp, ebp
js 0x6daaa1
cmp ebp, eax
je 0x6daaba
test edi, edi
cmovs edi, ebp
or ebp, 0xffffffff
test eax, eax
js 0x6daaba
mov ecx, dword [rsp + 0x138]
test ecx, ecx
cmovs ecx, eax
mov dword [rsp + 0x138], ecx
jmp 0x6daac1
mov ecx, dword [rsp + 0x138]
mov eax, ecx
xor eax, edi
btr eax, 9
test eax, eax
je 0x6daad2
or edi, 0xffffffff
jmp 0x6daad4
or edi, ecx
cmp dword [rsp + 0x108], 0
je 0x6dab03
mov edx, esi
mov rcx, rbx
mov byte [r11], 0
call fcn.006d52e0
mov r10d, eax
test eax, eax
js 0x6dab80
mov ecx, eax
mov byte [r14 + 1], al
sar ecx, 8
mov byte [r14], cl
mov rdx, qword [rsp + 0x60]
cmp byte [rdx], 0x7c
jne 0x6dabc1
test r13, r13
je 0x6dab38
mov rax, qword [rsp + 0xf0]
movsxd rcx, dword [rsp + 0x118]
add dword [rsp + 0x130], 3
mov rax, qword [rax]
lea r11, [rcx + rax + 3]
jmp 0x6dab63
mov byte [r11], 0x54
mov rax, r11
sub rax, rbx
sar rax, 8
mov byte [r11 + 1], al
movzx eax, r11b
sub al, bl
mov rbx, r11
mov byte [r11 + 2], al
mov qword [rsp + 0x80], r11
add r11, 3
mov eax, dword [rsp + 0x50]
mov rcx, qword [rsp + 0x68]
inc rdx
mov qword [rsp + 0x60], rdx
mov edx, dword [rsp + 0xe8]
jmp 0x6da99a
mov ecx, 0x24
mov eax, 0x19
cmp r10d, 0xfffffffe
cmove eax, ecx
mov rcx, qword [rsp + 0x100]
mov dword [rcx], eax
mov r8, qword [rsp + 0xf8]
mov rax, qword [rsp + 0x60]
mov qword [r8], rax
xor eax, eax
add rsp, 0x98
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
test r13, r13
jne 0x6dabf7
mov r8d, r11d
sub r8d, ebx
nop dword [rax]
movzx eax, byte [rbx + 2]
movzx ecx, byte [rbx + 1]
mov byte [rbx + 2], r8b
shl ecx, 8
or ecx, eax
mov eax, r8d
sar eax, 8
mov r8d, ecx
mov byte [rbx + 1], al
movsxd rax, ecx
sub rbx, rax
test ecx, ecx
jg 0x6dabd0
mov rcx, qword [rsp + 0x70]
mov byte [r11], 0x55
mov rax, r11
sub rax, rcx
and esi, 7
sar rax, 8
mov byte [r11 + 1], al
movzx eax, r11b
add r11, 3
sub al, cl
mov byte [r11 - 1], al
mov eax, dword [rsp + 0xe8]
cmp esi, eax
je 0x6dac47
cmp byte [rdx], 0x29
jne 0x6dac47
mov byte [r11], 0x19
mov byte [r11 + 1], al
mov ecx, dword [rsp + 0x130]
add r11, 2
add ecx, 2
jmp 0x6dac4e
mov ecx, dword [rsp + 0x130]
mov rax, qword [rsp + 0xf0]
mov r8, qword [rsp + 0xf8]
mov dword [r15 + 0x58], r12d
mov qword [rax], r11
mov rax, qword [rsp + 0x120]
mov qword [r8], rdx
mov dword [rax], ebp
mov rax, qword [rsp + 0x128]
mov dword [rax], edi
test r13, r13
je 0x6dacaa
mov edx, dword [r13]
mov eax, 0x7fffffeb
sub eax, edx
cmp eax, ecx
jge 0x6daca3
mov rax, qword [rsp + 0x100]
mov dword [rax], reloc.WS2_32.dll_sendto
jmp 0x6dabab
lea eax, [rdx + rcx]
mov dword [r13], eax
mov eax, 1
jmp 0x6dabad