Function at 0x6c28890c
Capabilities:
Encrypt data using rc4 ksa
Resolve function by parsing pe exports

Disassembly:
mov eax, dword [esp + 4]
mov dword [0x6c4b3348], 0
mov dword [0x6c4b3358], eax
add eax, dword [esp + 8]
mov dword [0x6c4b3360], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0xc]
jmp fcn.6c287f7c
push ebp
push edi
push esi
push ebx
sub esp, 0x3c
mov ebx, dword [esp + 0x50]
mov esi, dword [esp + 0x54]
mov edx, dword [esp + 0x58]
mov dword [esp + 0x24], edx
mov edx, dword [esp + 0x5c]
mov dword [esp + 0x28], edx
mov edx, dword [esp + 0x60]
mov dword [esp + 0x2c], edx
mov ebp, dword [esp + 0x64]
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.6c285950
test eax, eax
jne 0x6c288a38
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.6c286c2c
test eax, eax
jne 0x6c288a08
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.6c286c94
test eax, eax
jne 0x6c288a98
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.6c287960
test eax, eax
jne 0x6c288a68
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.6c28750c
test eax, eax
jne 0x6c288b1c
mov edx, dword [0x6c4b3344]
test edx, edx
jle 0x6c288ac8
xor edi, edi
jmp 0x6c2889bd
inc edi
cmp dword [0x6c4b3344], edi
jle 0x6c288ac8
mov eax, dword [edi*4 + 0x6c4b8440]
mov dword [esp + 4], esi
mov dword [esp], ebx
call dword [eax]
test eax, eax
je 0x6c2889b0
mov eax, dword [edi*4 + 0x6c4b8440]
mov dword [esp + 0x64], ebp
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x60], edx
mov edx, dword [esp + 0x28]
mov dword [esp + 0x5c], edx
mov edx, dword [esp + 0x24]
mov dword [esp + 0x58], edx
mov dword [esp + 0x54], esi
mov dword [esp + 0x50], ebx
mov eax, dword [eax + 4]
add esp, 0x3c
pop ebx
pop esi
pop edi
pop ebp
jmp eax
mov dword [esp + 0x64], ebp
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x60], edx
mov edx, dword [esp + 0x28]
mov dword [esp + 0x5c], edx
mov edx, dword [esp + 0x24]
mov dword [esp + 0x58], edx
mov dword [esp + 0x54], esi
mov dword [esp + 0x50], ebx
add esp, 0x3c
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.6c2869d0
mov dword [esp + 0x64], ebp
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x60], edx
mov edx, dword [esp + 0x28]
mov dword [esp + 0x5c], edx
mov edx, dword [esp + 0x24]
mov dword [esp + 0x58], edx
mov dword [esp + 0x54], esi
mov dword [esp + 0x50], ebx
add esp, 0x3c
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.6c284abc
mov dword [esp + 0x64], ebp
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x60], edx
mov edx, dword [esp + 0x28]
mov dword [esp + 0x5c], edx
mov edx, dword [esp + 0x24]
mov dword [esp + 0x58], edx
mov dword [esp + 0x54], esi
mov dword [esp + 0x50], ebx
add esp, 0x3c
pop ebx
pop esi
pop edi
pop ebp
jmp 0x6c2888d4
mov dword [esp + 0x64], ebp
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x60], edx
mov edx, dword [esp + 0x28]
mov dword [esp + 0x5c], edx
mov edx, dword [esp + 0x24]
mov dword [esp + 0x58], edx
mov dword [esp + 0x54], esi
mov dword [esp + 0x50], ebx
add esp, 0x3c
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.6c286cb8
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.6c286e3c
test eax, eax
je 0x6c288b08
mov dword [esp + 0x64], ebp
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x60], edx
mov edx, dword [esp + 0x28]
mov dword [esp + 0x5c], edx
mov edx, dword [esp + 0x24]
mov dword [esp + 0x58], edx
mov dword [esp + 0x54], esi
mov dword [esp + 0x50], ebx
add esp, 0x3c
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.6c286e60
mov dword [0x6c4b3340], str.Image_not_of_any_known_type__or_corrupt
xor eax, eax
add esp, 0x3c
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp + 0x14], ebp
mov edx, dword [esp + 0x2c]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x28]
mov dword [esp + 0xc], edx
mov edx, dword [esp + 0x24]
mov dword [esp + 8], edx
mov dword [esp + 4], esi
mov dword [esp], ebx
call fcn.6c2875c0
test ebp, ebp
jne 0x6c288b4e
mov ebx, dword [esp + 0x2c]
mov ebp, dword [ebx]
mov dword [esp + 0x50], ebp
mov edx, dword [esp + 0x28]
mov ecx, dword [edx]
mov ebx, dword [esp + 0x24]
mov edx, dword [ebx]
add esp, 0x3c
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.6c281a58