Function at 0x4a919a
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffc0
push ebx
push esi
push edi
mov eax, dword [ebp + 0xc]
mov esi, 3
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x334]
movzx edx, word [ecx + 0x16]
add edx, 8
mov dword [ebp - 8], edx
xor ecx, ecx
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x334]
movzx edx, word [ecx + 0x7c]
mov dword [ebp - 0x10], edx
xor ecx, ecx
mov dword [ebp - 0x14], ecx
xor edx, edx
mov dword [ebp - 0x1c], edx
test al, 6
setne cl
and ecx, 1
mov dword [ebp - 0x24], ecx
xor edx, edx
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x24], 0
jne 0x4a91ff
test al, 8
jne 0x4a91ff
mov eax, dword [ebp - 0x28]
jmp 0x4a9a45
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x330], 0
je 0x4a9236
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x330]
cmp dword [edx + 0x330], 0
je 0x4a9236
push 0
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x330]
push dword [eax + 0x330]
call fcn.004a85cd
add esp, 8
mov edx, dword [ebp + 8]
cmp esi, dword [edx + 0x10]
jge 0x4a9251
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x14]
mov edx, esi
sar edx, 1
jns 0x4a924d
adc edx, 0
cmp eax, edx
jg 0x4a9258
xor ecx, ecx
mov dword [ebp - 4], ecx
jmp 0x4a9288
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x14]
mov ecx, esi
sar ecx, 1
add edx, ecx
mov eax, dword [ebp + 8]
cmp edx, dword [eax + 0x10]
jl 0x4a9279
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
sub ecx, esi
mov dword [ebp - 4], ecx
jmp 0x4a9288
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x14]
mov ecx, esi
sar ecx, 1
sub edx, ecx
mov dword [ebp - 4], edx
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x10]
sub edx, dword [ebp - 4]
cmp esi, edx
jle 0x4a92a2
mov ecx, dword [ebp + 8]
mov esi, dword [ecx + 0x10]
sub esi, dword [ebp - 4]
or dword [ebp - 0x28], 8
cmp dword [ebp - 0x24], 0
jne 0x4a92b5
cmp esi, 2
jge 0x4a92b5
mov eax, dword [ebp - 0x28]
jmp 0x4a9a45
xor ebx, ebx
cmp esi, ebx
jle 0x4a93c6
mov eax, dword [ebp - 4]
add eax, ebx
push eax
push dword [ebp + 8]
call fcn.004a75be
add esp, 8
mov edi, eax
mov eax, dword [ebp + 8]
cmp dword [eax + 0x330], 0
je 0x4a9305
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x330]
cmp edi, dword [ecx]
jne 0x4a9305
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x330]
mov dword [ebp + ebx*4 - 0x40], edx
mov ecx, dword [ebp + 8]
xor eax, eax
mov dword [ecx + 0x330], eax
jmp 0x4a931e
push edi
push dword [ebp + 8]
mov edx, dword [ebp + 8]
push dword [edx + 0x334]
call fcn.004a8483
add esp, 0xc
mov dword [ebp + ebx*4 - 0x40], eax
test ebx, ebx
jle 0x4a9387
mov ecx, dword [ebp + ebx*4 - 0x40]
mov eax, dword [ecx]
mov edx, dword [ebp + ebx*4 - 0x44]
cmp eax, dword [edx + 8]
jne 0x4a9340
mov ecx, dword [ebp + ebx*4 - 0x40]
mov eax, dword [ecx + 4]
mov edx, dword [ebp + ebx*4 - 0x44]
cmp eax, dword [edx]
je 0x4a9387
mov ecx, dword [ebp + ebx*4 - 0x40]
push dword [ecx + 4]
push ebx
mov eax, dword [ebp + ebx*4 - 0x40]
push dword [eax]
push ebx
mov edx, dword [ebp + ebx*4 - 0x44]
push dword [edx + 8]
lea ecx, [ebx - 1]
push ecx
mov eax, dword [ebp + ebx*4 - 0x44]
push dword [eax]
lea edx, [ebx - 1]
push edx
push str._r_nchilds__d___Page_lx__childs__d___Right_lx__childs__d___Page_lx__childs__d___Left_lx
call fcn.004d2360
add esp, 0x24
push 0x755730
call fcn.004d15b4
pop ecx
push str.hb_cdxPageKeyIntBalance:_index_corrupted.
call fcn.004a5424
pop ecx
mov ecx, dword [ebp + ebx*4 - 0x40]
mov eax, dword [ecx + 0x10]
add dword [ebp - 0xc], eax
mov edx, dword [ebp + ebx*4 - 0x40]
mov ecx, dword [edx + 0x10]
cmp ecx, dword [ebp - 0x14]
jle 0x4a93a7
mov eax, dword [ebp + ebx*4 - 0x40]
mov edx, dword [eax + 0x10]
mov dword [ebp - 0x14], edx
mov ecx, dword [ebp + ebx*4 - 0x40]
mov eax, dword [ecx + 0x10]
cmp eax, dword [ebp - 0x10]
jge 0x4a93bd
mov edx, dword [ebp + ebx*4 - 0x40]
mov ecx, dword [edx + 0x10]
mov dword [ebp - 0x10], ecx
inc ebx
cmp esi, ebx
jg 0x4a92bf
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x334]
movzx eax, word [edx + 0x7c]
add eax, dword [ebp - 0xc]
dec eax
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x334]
movzx edx, word [ecx + 0x7c]
mov ecx, edx
cdq
idiv ecx
mov edi, eax
cmp edi, 1
jne 0x4a942a
cmp esi, 1
jle 0x4a942a
mov eax, dword [ebp - 0x40]
cmp dword [eax + 4], 0xffffffff
je 0x4a942a
mov edx, dword [ebp + esi*4 - 0x44]
cmp dword [edx + 8], 0xffffffff
je 0x4a942a
cmp dword [ebp - 0xc], 6
jl 0x4a942a
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x334]
movzx edx, word [eax + 0x7c]
lea ecx, [edx + edx*2]
sar ecx, 1
cmp ecx, dword [ebp - 0xc]
jge 0x4a942a
mov edi, 2
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x10]
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x334]
movzx edx, word [ecx + 0x7c]
sar edx, 1
sub eax, edx
inc eax
mov ecx, esi
sub ecx, edi
cmp eax, ecx
jle 0x4a9464
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x10]
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x334]
movzx edx, word [ecx + 0x7c]
sar edx, 1
sub eax, edx
inc eax
jmp 0x4a9468
mov eax, esi
sub eax, edi
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0xc], 0
jle 0x4a9641
cmp dword [ebp - 0x18], 2
jge 0x4a9485
cmp dword [ebp - 0x24], 0
je 0x4a9641
cmp esi, 1
jne 0x4a9505
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x334]
movzx edx, word [eax + 0x7c]
cmp edx, dword [ebp - 0xc]
jge 0x4a9505
mov ecx, dword [ebp - 0x40]
cmp dword [ecx + 8], 0xffffffff
je 0x4a9505
mov eax, dword [ebp - 0x40]
push dword [eax + 8]
push dword [ebp + 8]
mov edx, dword [ebp + 8]
push dword [edx + 0x334]
call fcn.004a8483
add esp, 0xc
mov ecx, dword [eax + 0x10]
add dword [ebp - 0xc], ecx
mov dword [ebp + esi*4 - 0x40], eax
inc esi
mov eax, dword [ebp - 4]
add eax, esi
mov edx, dword [ebp + 8]
cmp eax, dword [edx + 0x10]
jle 0x4a94db
or dword [ebp - 0x28], 1
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x334]
movzx eax, word [eax + 0x7c]
add eax, dword [ebp - 0xc]
dec eax
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x334]
movzx edx, word [ecx + 0x7c]
mov ecx, edx
cdq
idiv ecx
mov edi, eax
jmp 0x4a9641
mov eax, dword [ebp - 0xc]
cdq
idiv edi
cmp eax, 2
jle 0x4a9518
mov eax, dword [ebp - 0xc]
cdq
idiv edi
jmp 0x4a951d
mov eax, 2
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0xc]
add eax, edi
dec eax
cdq
idiv edi
cmp eax, dword [ebp - 0x10]
jle 0x4a9539
mov eax, dword [ebp - 0xc]
add eax, edi
dec eax
cdq
idiv edi
jmp 0x4a953c
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x14], eax
lea ebx, [esi - 1]
jmp 0x4a9598
mov eax, dword [ebp + ebx*4 - 0x40]
mov edx, dword [eax + 0x10]
sub dword [ebp - 0xc], edx
push 0
push dword [ebp + ebx*4 - 0x40]
call fcn.004a85cd
add esp, 8
dec esi
mov eax, dword [ebp - 0xc]
cdq
idiv edi
cmp eax, 2
jle 0x4a9570
mov eax, dword [ebp - 0xc]
cdq
idiv edi
jmp 0x4a9575
mov eax, 2
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0xc]
add eax, edi
dec eax
cdq
idiv edi
cmp eax, dword [ebp - 0x10]
jle 0x4a9591
mov eax, dword [ebp - 0xc]
add eax, edi
dec eax
cdq
idiv edi
jmp 0x4a9594
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x14], eax
dec ebx
cmp ebx, 1
jle 0x4a9622
mov edx, dword [ebp + ebx*4 - 0x40]
mov ecx, dword [edx + 0x10]
cmp ecx, dword [ebp - 0x10]
jl 0x4a9622
mov eax, dword [ebp + ebx*4 - 0x40]
mov edx, dword [eax + 0x10]
cmp edx, dword [ebp - 0x14]
jle 0x4a9544
jmp 0x4a9622
mov ecx, dword [ebp - 0x40]
mov eax, dword [ecx + 0x10]
sub dword [ebp - 0xc], eax
push 0
push dword [ebp - 0x40]
call fcn.004a85cd
add esp, 8
dec esi
inc dword [ebp - 4]
xor ebx, ebx
cmp esi, ebx
jle 0x4a95e8
mov eax, dword [ebp + ebx*4 - 0x3c]
mov dword [ebp + ebx*4 - 0x40], eax
inc ebx
cmp esi, ebx
jg 0x4a95db
mov eax, dword [ebp - 0xc]
cdq
idiv edi
cmp eax, 2
jle 0x4a95fb
mov eax, dword [ebp - 0xc]
cdq
idiv edi
jmp 0x4a9600
mov eax, 2
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0xc]
add eax, edi
dec eax
cdq
idiv edi
cmp eax, dword [ebp - 0x10]
jle 0x4a961c
mov eax, dword [ebp - 0xc]
add eax, edi
dec eax
cdq
idiv edi
jmp 0x4a961f
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x14], eax
cmp esi, 2
jle 0x4a9641
mov edx, dword [ebp - 0x40]
mov ecx, dword [edx + 0x10]
cmp ecx, dword [ebp - 0x10]
jl 0x4a9641
mov eax, dword [ebp - 0x40]
mov edx, dword [eax + 0x10]
cmp edx, dword [ebp - 0x14]
jle 0x4a95bb
cmp dword [ebp - 0x24], 0
jne 0x4a9673
cmp esi, 2
jl 0x4a9652
cmp dword [ebp - 0x18], 2
jge 0x4a9673
xor ebx, ebx
cmp esi, ebx
jle 0x4a966b
push 0
push dword [ebp + ebx*4 - 0x40]
call fcn.004a85cd
add esp, 8
inc ebx
cmp esi, ebx
jg 0x4a9658
mov eax, dword [ebp - 0x28]
jmp 0x4a9a45
cmp dword [ebp - 0xc], 0
jle 0x4a96cf
mov edx, dword [ebp - 0xc]
imul edx, dword [ebp - 8]
push edx
call sym.SISCOM.EXE__hb_xgrab
pop ecx
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], eax
xor ebx, ebx
cmp esi, ebx
jle 0x4a96cf
mov eax, dword [ebp + ebx*4 - 0x40]
cmp dword [eax + 0x10], 0
jle 0x4a96ca
mov edx, dword [ebp + ebx*4 - 0x40]
mov ecx, dword [edx + 0x10]
imul ecx, dword [ebp - 8]
push ecx
mov eax, dword [ebp + ebx*4 - 0x40]
add eax, 0x3c
push eax
push dword [ebp - 0x20]
call fcn.004cf9ec
add esp, 0xc
mov edx, dword [ebp + ebx*4 - 0x40]
mov ecx, dword [edx + 0x10]
imul ecx, dword [ebp - 8]
add dword [ebp - 0x20], ecx
inc ebx
cmp esi, ebx
jg 0x4a9693
cmp esi, edi
jge 0x4a97c3
cmp esi, 2
jge 0x4a96e0
mov ebx, esi
jmp 0x4a96eb
lea ebx, [esi - 1]
mov eax, dword [ebp + ebx*4 - 0x40]
mov dword [ebp + esi*4 - 0x40], eax
push 0
push dword [ebp + 8]
mov edx, dword [ebp + 8]
push dword [edx + 0x334]
call fcn.004a8483
add esp, 0xc
mov dword [ebp + ebx*4 - 0x40], eax
mov ecx, dword [ebp + ebx*4 - 0x40]
mov byte [ecx + 0xc], 0
mov eax, dword [ebp + ebx*4 - 0x40]
xor edx, edx
mov dword [eax + 0x10], edx
mov ecx, dword [ebp + ebx*4 - 0x40]
mov dword [ecx + 0x18], 1
mov eax, dword [ebp + esi*4 - 0x40]
push dword [eax]
push 0
push 0
push 1
mov edx, dword [ebp - 4]
add edx, ebx
push edx
push dword [ebp + 8]
call fcn.004a811c
add esp, 0x18
mov ecx, dword [ebp + ebx*4 - 0x44]
mov eax, dword [ecx]
mov edx, dword [ebp + ebx*4 - 0x40]
mov dword [edx + 4], eax
mov ecx, dword [ebp + ebx*4 - 0x44]
mov eax, dword [ecx + 8]
mov edx, dword [ebp + ebx*4 - 0x40]
mov dword [edx + 8], eax
mov ecx, dword [ebp + ebx*4 - 0x40]
mov eax, dword [ecx]
mov edx, dword [ebp + ebx*4 - 0x44]
mov dword [edx + 8], eax
cmp esi, ebx
jle 0x4a9779
mov ecx, dword [ebp + ebx*4 - 0x40]
mov eax, dword [ecx]
mov edx, dword [ebp + ebx*4 - 0x3c]
mov dword [edx + 4], eax
jmp 0x4a97b9
mov ecx, dword [ebp + ebx*4 - 0x40]
cmp dword [ecx + 8], 0xffffffff
je 0x4a97b9
mov eax, dword [ebp + esi*4 - 0x40]
push dword [eax + 8]
push dword [ebp + 8]
mov edx, dword [ebp + 8]
push dword [edx + 0x334]
call fcn.004a8483
add esp, 0xc
mov ecx, dword [ebp + ebx*4 - 0x40]
mov edx, dword [ecx]
mov dword [eax + 4], edx
mov dword [eax + 0x18], 1
push 0
push eax
call fcn.004a85cd
add esp, 8
inc esi
or dword [ebp - 0x28], 8
jmp 0x4a9920
cmp esi, edi
jle 0x4a9920
cmp edi, 1
jle 0x4a97ff
mov eax, dword [ebp + esi*4 - 0x44]
mov ecx, dword [eax]
mov eax, dword [ebp + edi*4 - 0x48]
mov dword [eax + 8], ecx
mov edx, dword [ebp + edi*4 - 0x48]
mov ecx, dword [edx]
mov eax, dword [ebp + esi*4 - 0x44]
mov dword [eax + 4], ecx
mov eax, dword [ebp + esi*4 - 0x44]
mov edx, dword [ebp + edi*4 - 0x44]
mov dword [ebp + esi*4 - 0x44], edx
mov dword [ebp + edi*4 - 0x44], eax
jmp 0x4a98b3
test edi, edi
jle 0x4a9829
mov ecx, dword [ebp - 0x40]
cmp dword [ecx + 4], 0xffffffff
jne 0x4a9829
mov eax, dword [ebp + esi*4 - 0x44]
mov edx, dword [ebp - 0x40]
mov dword [ebp + esi*4 - 0x44], edx
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x40]
mov dword [ecx + 4], 0xffffffff
jmp 0x4a98b3
mov eax, dword [ebp + esi*4 - 0x44]
mov edx, dword [eax + 8]
mov dword [ebp - 0x2c], edx
test edi, edi
jle 0x4a9849
mov ecx, dword [ebp + edi*4 - 0x44]
mov ebx, dword [ecx]
mov eax, dword [ebp + edi*4 - 0x44]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 8], edx
jmp 0x4a9881
mov ecx, dword [ebp - 0x40]
mov ebx, dword [ecx + 4]
cmp ebx, 0xffffffff
je 0x4a9881
push ebx
push dword [ebp + 8]
mov eax, dword [ebp + 8]
push dword [eax + 0x334]
call fcn.004a8483
add esp, 0xc
mov edx, dword [ebp - 0x2c]
mov dword [eax + 8], edx
mov dword [eax + 0x18], 1
push 0
push eax
call fcn.004a85cd
add esp, 8
cmp dword [ebp - 0x2c], 0xffffffff
je 0x4a98b3
push dword [ebp - 0x2c]
push dword [ebp + 8]
mov ecx, dword [ebp + 8]
push dword [ecx + 0x334]
call fcn.004a8483
add esp, 0xc
mov dword [eax + 4], ebx
mov dword [eax + 0x18], 1
push 0
push eax
call fcn.004a85cd
add esp, 8
lea ebx, [esi - 1]
cmp edi, ebx
jg 0x4a991a
mov eax, dword [ebp - 4]
add eax, ebx
push eax
push dword [ebp + 8]
call fcn.004a8250
add esp, 8
mov edx, dword [ebp + ebx*4 - 0x40]
xor ecx, ecx
mov dword [edx + 0x32c], ecx
mov eax, dword [ebp + ebx*4 - 0x40]
xor edx, edx
mov dword [eax + 0x18], edx
mov ecx, dword [ebp + ebx*4 - 0x40]
mov byte [ecx + 0xc], 0xff
mov eax, dword [ebp + ebx*4 - 0x40]
mov dword [eax + 4], 0xffffffff
mov edx, dword [ebp + ebx*4 - 0x40]
mov dword [edx + 8], 0xffffffff
mov ecx, dword [ebp + ebx*4 - 0x40]
xor eax, eax
mov dword [ecx + 0x10], eax
push 0
push dword [ebp + ebx*4 - 0x40]
call fcn.004a85cd
add esp, 8
dec ebx
cmp edi, ebx
jle 0x4a98ba
mov esi, edi
or dword [ebp - 0x28], 8
cmp dword [ebp - 0xc], 0
jle 0x4a9a1d
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
xor ebx, ebx
cmp esi, ebx
jle 0x4a9a14
mov eax, dword [ebp - 0xc]
add eax, esi
sub eax, ebx
dec eax
mov edx, esi
sub edx, ebx
mov ecx, edx
cdq
idiv ecx
mov edi, eax
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x334]
movzx ecx, word [edx + 0x7c]
cmp edi, ecx
jle 0x4a9969
push str.hb_cdxPageKeyIntBalance:_iNodeKeys_calculated_wrong_.
call fcn.004a5424
pop ecx
mov eax, edi
imul dword [ebp - 8]
push eax
push dword [ebp - 0x20]
mov edx, dword [ebp + ebx*4 - 0x40]
add edx, 0x3c
push edx
call fcn.004cf9ec
add esp, 0xc
mov ecx, dword [ebp + ebx*4 - 0x40]
mov dword [ecx + 0x10], edi
mov eax, dword [ebp + ebx*4 - 0x40]
mov dword [eax + 0x18], 1
mov edx, edi
imul edx, dword [ebp - 8]
add dword [ebp - 0x20], edx
sub dword [ebp - 0xc], edi
mov ecx, dword [ebp - 4]
add ecx, ebx
mov eax, dword [ebp + 8]
cmp ecx, dword [eax + 0x10]
jge 0x4a99fd
mov edx, dword [ebp + ebx*4 - 0x40]
push dword [edx]
mov ecx, dword [ebp - 0x20]
xor eax, eax
mov al, byte [ecx - 8]
shl eax, 0x18
mov edx, dword [ebp - 0x20]
xor ecx, ecx
mov cl, byte [edx - 7]
shl ecx, 0x10
or eax, ecx
mov edx, dword [ebp - 0x20]
xor ecx, ecx
mov cl, byte [edx - 6]
shl ecx, 8
or eax, ecx
mov edx, dword [ebp - 0x20]
xor ecx, ecx
mov cl, byte [edx - 5]
or eax, ecx
push eax
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 8]
push eax
push 0
mov eax, dword [ebp - 4]
add eax, ebx
push eax
push dword [ebp + 8]
call fcn.004a811c
add esp, 0x18
push 0
push dword [ebp + ebx*4 - 0x40]
call fcn.004a85cd
add esp, 8
inc ebx
cmp esi, ebx
jg 0x4a993a
push dword [ebp - 0x1c]
call sym.SISCOM.EXE__hb_xfree
pop ecx
mov edx, dword [ebp + 8]
mov dword [edx + 0x18], 1
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x10]
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x334]
movzx edx, word [ecx + 0x7c]
cmp eax, edx
jle 0x4a9a42
or dword [ebp - 0x28], 2
mov eax, dword [ebp - 0x28]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret