Function at 0x4b28f6
Capabilities:
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffc0
push ebx
push esi
push edi
mov eax, dword [ebp + 0xc]
mov esi, 3
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x334]
movzx edx, word [ecx + 0x16]
add edx, 8
mov dword [ebp - 8], edx
xor ecx, ecx
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x334]
movzx edx, word [ecx + 0x7c]
mov dword [ebp - 0x10], edx
xor ecx, ecx
mov dword [ebp - 0x14], ecx
xor edx, edx
mov dword [ebp - 0x1c], edx
test al, 6
setne cl
and ecx, 1
mov dword [ebp - 0x24], ecx
xor edx, edx
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x24], 0
jne 0x4b295b
test al, 8
jne 0x4b295b
mov eax, dword [ebp - 0x28]
jmp 0x4b31a1
mov ecx, dword [ebp + 8]
cmp dword [ecx + 0x330], 0
je 0x4b2992
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x330]
cmp dword [edx + 0x330], 0
je 0x4b2992
push 0
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x330]
push dword [eax + 0x330]
call fcn.004b1d29
add esp, 8
mov edx, dword [ebp + 8]
cmp esi, dword [edx + 0x10]
jge 0x4b29ad
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x14]
mov edx, esi
sar edx, 1
jns 0x4b29a9
adc edx, 0
cmp eax, edx
jg 0x4b29b4
xor ecx, ecx
mov dword [ebp - 4], ecx
jmp 0x4b29e4
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x14]
mov ecx, esi
sar ecx, 1
add edx, ecx
mov eax, dword [ebp + 8]
cmp edx, dword [eax + 0x10]
jl 0x4b29d5
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x10]
sub ecx, esi
mov dword [ebp - 4], ecx
jmp 0x4b29e4
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x14]
mov ecx, esi
sar ecx, 1
sub edx, ecx
mov dword [ebp - 4], edx
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x10]
sub edx, dword [ebp - 4]
cmp esi, edx
jle 0x4b29fe
mov ecx, dword [ebp + 8]
mov esi, dword [ecx + 0x10]
sub esi, dword [ebp - 4]
or dword [ebp - 0x28], 8
cmp dword [ebp - 0x24], 0
jne 0x4b2a11
cmp esi, 2
jge 0x4b2a11
mov eax, dword [ebp - 0x28]
jmp 0x4b31a1
xor ebx, ebx
cmp esi, ebx
jle 0x4b2b22
mov eax, dword [ebp - 4]
add eax, ebx
push eax
push dword [ebp + 8]
call fcn.004b0d1a
add esp, 8
mov edi, eax
mov eax, dword [ebp + 8]
cmp dword [eax + 0x330], 0
je 0x4b2a61
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x330]
cmp edi, dword [ecx]
jne 0x4b2a61
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x330]
mov dword [ebp + ebx*4 - 0x40], edx
mov ecx, dword [ebp + 8]
xor eax, eax
mov dword [ecx + 0x330], eax
jmp 0x4b2a7a
push edi
push dword [ebp + 8]
mov edx, dword [ebp + 8]
push dword [edx + 0x334]
call fcn.004b1bdf
add esp, 0xc
mov dword [ebp + ebx*4 - 0x40], eax
test ebx, ebx
jle 0x4b2ae3
mov ecx, dword [ebp + ebx*4 - 0x40]
mov eax, dword [ecx]
mov edx, dword [ebp + ebx*4 - 0x44]
cmp eax, dword [edx + 8]
jne 0x4b2a9c
mov ecx, dword [ebp + ebx*4 - 0x40]
mov eax, dword [ecx + 4]
mov edx, dword [ebp + ebx*4 - 0x44]
cmp eax, dword [edx]
je 0x4b2ae3
mov ecx, dword [ebp + ebx*4 - 0x40]
push dword [ecx + 4]
push ebx
mov eax, dword [ebp + ebx*4 - 0x40]
push dword [eax]
push ebx
mov edx, dword [ebp + ebx*4 - 0x44]
push dword [edx + 8]
lea ecx, [ebx - 1]
push ecx
mov eax, dword [ebp + ebx*4 - 0x44]
push dword [eax]
lea edx, [ebx - 1]
push edx
push str._r_nchilds__d___Page_lx__childs__d___Right_lx__childs__d___Page_lx__childs__d___Left_lx
call fcn.004dbabc
add esp, 0x24
push 0x7241e8
call fcn.004dad10
pop ecx
push str.hb_cdxPageKeyIntBalance:_index_corrupted.
call fcn.004aeb80
pop ecx
mov ecx, dword [ebp + ebx*4 - 0x40]
mov eax, dword [ecx + 0x10]
add dword [ebp - 0xc], eax
mov edx, dword [ebp + ebx*4 - 0x40]
mov ecx, dword [edx + 0x10]
cmp ecx, dword [ebp - 0x14]
jle 0x4b2b03
mov eax, dword [ebp + ebx*4 - 0x40]
mov edx, dword [eax + 0x10]
mov dword [ebp - 0x14], edx
mov ecx, dword [ebp + ebx*4 - 0x40]
mov eax, dword [ecx + 0x10]
cmp eax, dword [ebp - 0x10]
jge 0x4b2b19
mov edx, dword [ebp + ebx*4 - 0x40]
mov ecx, dword [edx + 0x10]
mov dword [ebp - 0x10], ecx
inc ebx
cmp esi, ebx
jg 0x4b2a1b
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x334]
movzx eax, word [edx + 0x7c]
add eax, dword [ebp - 0xc]
dec eax
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x334]
movzx edx, word [ecx + 0x7c]
mov ecx, edx
cdq
idiv ecx
mov edi, eax
cmp edi, 1
jne 0x4b2b86
cmp esi, 1
jle 0x4b2b86
mov eax, dword [ebp - 0x40]
cmp dword [eax + 4], 0xffffffff
je 0x4b2b86
mov edx, dword [ebp + esi*4 - 0x44]
cmp dword [edx + 8], 0xffffffff
je 0x4b2b86
cmp dword [ebp - 0xc], 6
jl 0x4b2b86
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x334]
movzx edx, word [eax + 0x7c]
lea ecx, [edx + edx*2]
sar ecx, 1
cmp ecx, dword [ebp - 0xc]
jge 0x4b2b86
mov edi, 2
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x10]
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x334]
movzx edx, word [ecx + 0x7c]
sar edx, 1
sub eax, edx
inc eax
mov ecx, esi
sub ecx, edi
cmp eax, ecx
jle 0x4b2bc0
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x10]
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x334]
movzx edx, word [ecx + 0x7c]
sar edx, 1
sub eax, edx
inc eax
jmp 0x4b2bc4
mov eax, esi
sub eax, edi
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0xc], 0
jle 0x4b2d9d
cmp dword [ebp - 0x18], 2
jge 0x4b2be1
cmp dword [ebp - 0x24], 0
je 0x4b2d9d
cmp esi, 1
jne 0x4b2c61
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x334]
movzx edx, word [eax + 0x7c]
cmp edx, dword [ebp - 0xc]
jge 0x4b2c61
mov ecx, dword [ebp - 0x40]
cmp dword [ecx + 8], 0xffffffff
je 0x4b2c61
mov eax, dword [ebp - 0x40]
push dword [eax + 8]
push dword [ebp + 8]
mov edx, dword [ebp + 8]
push dword [edx + 0x334]
call fcn.004b1bdf
add esp, 0xc
mov ecx, dword [eax + 0x10]
add dword [ebp - 0xc], ecx
mov dword [ebp + esi*4 - 0x40], eax
inc esi
mov eax, dword [ebp - 4]
add eax, esi
mov edx, dword [ebp + 8]
cmp eax, dword [edx + 0x10]
jle 0x4b2c37
or dword [ebp - 0x28], 1
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x334]
movzx eax, word [eax + 0x7c]
add eax, dword [ebp - 0xc]
dec eax
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x334]
movzx edx, word [ecx + 0x7c]
mov ecx, edx
cdq
idiv ecx
mov edi, eax
jmp 0x4b2d9d
mov eax, dword [ebp - 0xc]
cdq
idiv edi
cmp eax, 2
jle 0x4b2c74
mov eax, dword [ebp - 0xc]
cdq
idiv edi
jmp 0x4b2c79
mov eax, 2
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0xc]
add eax, edi
dec eax
cdq
idiv edi
cmp eax, dword [ebp - 0x10]
jle 0x4b2c95
mov eax, dword [ebp - 0xc]
add eax, edi
dec eax
cdq
idiv edi
jmp 0x4b2c98
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x14], eax
lea ebx, [esi - 1]
jmp 0x4b2cf4
mov eax, dword [ebp + ebx*4 - 0x40]
mov edx, dword [eax + 0x10]
sub dword [ebp - 0xc], edx
push 0
push dword [ebp + ebx*4 - 0x40]
call fcn.004b1d29
add esp, 8
dec esi
mov eax, dword [ebp - 0xc]
cdq
idiv edi
cmp eax, 2
jle 0x4b2ccc
mov eax, dword [ebp - 0xc]
cdq
idiv edi
jmp 0x4b2cd1
mov eax, 2
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0xc]
add eax, edi
dec eax
cdq
idiv edi
cmp eax, dword [ebp - 0x10]
jle 0x4b2ced
mov eax, dword [ebp - 0xc]
add eax, edi
dec eax
cdq
idiv edi
jmp 0x4b2cf0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x14], eax
dec ebx
cmp ebx, 1
jle 0x4b2d7e
mov edx, dword [ebp + ebx*4 - 0x40]
mov ecx, dword [edx + 0x10]
cmp ecx, dword [ebp - 0x10]
jl 0x4b2d7e
mov eax, dword [ebp + ebx*4 - 0x40]
mov edx, dword [eax + 0x10]
cmp edx, dword [ebp - 0x14]
jle 0x4b2ca0
jmp 0x4b2d7e
mov ecx, dword [ebp - 0x40]
mov eax, dword [ecx + 0x10]
sub dword [ebp - 0xc], eax
push 0
push dword [ebp - 0x40]
call fcn.004b1d29
add esp, 8
dec esi
inc dword [ebp - 4]
xor ebx, ebx
cmp esi, ebx
jle 0x4b2d44
mov eax, dword [ebp + ebx*4 - 0x3c]
mov dword [ebp + ebx*4 - 0x40], eax
inc ebx
cmp esi, ebx
jg 0x4b2d37
mov eax, dword [ebp - 0xc]
cdq
idiv edi
cmp eax, 2
jle 0x4b2d57
mov eax, dword [ebp - 0xc]
cdq
idiv edi
jmp 0x4b2d5c
mov eax, 2
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0xc]
add eax, edi
dec eax
cdq
idiv edi
cmp eax, dword [ebp - 0x10]
jle 0x4b2d78
mov eax, dword [ebp - 0xc]
add eax, edi
dec eax
cdq
idiv edi
jmp 0x4b2d7b
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x14], eax
cmp esi, 2
jle 0x4b2d9d
mov edx, dword [ebp - 0x40]
mov ecx, dword [edx + 0x10]
cmp ecx, dword [ebp - 0x10]
jl 0x4b2d9d
mov eax, dword [ebp - 0x40]
mov edx, dword [eax + 0x10]
cmp edx, dword [ebp - 0x14]
jle 0x4b2d17
cmp dword [ebp - 0x24], 0
jne 0x4b2dcf
cmp esi, 2
jl 0x4b2dae
cmp dword [ebp - 0x18], 2
jge 0x4b2dcf
xor ebx, ebx
cmp esi, ebx
jle 0x4b2dc7
push 0
push dword [ebp + ebx*4 - 0x40]
call fcn.004b1d29
add esp, 8
inc ebx
cmp esi, ebx
jg 0x4b2db4
mov eax, dword [ebp - 0x28]
jmp 0x4b31a1
cmp dword [ebp - 0xc], 0
jle 0x4b2e2b
mov edx, dword [ebp - 0xc]
imul edx, dword [ebp - 8]
push edx
call sym.SISCOM.EXE__hb_xgrab
pop ecx
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], eax
xor ebx, ebx
cmp esi, ebx
jle 0x4b2e2b
mov eax, dword [ebp + ebx*4 - 0x40]
cmp dword [eax + 0x10], 0
jle 0x4b2e26
mov edx, dword [ebp + ebx*4 - 0x40]
mov ecx, dword [edx + 0x10]
imul ecx, dword [ebp - 8]
push ecx
mov eax, dword [ebp + ebx*4 - 0x40]
add eax, 0x3c
push eax
push dword [ebp - 0x20]
call fcn.004d9148
add esp, 0xc
mov edx, dword [ebp + ebx*4 - 0x40]
mov ecx, dword [edx + 0x10]
imul ecx, dword [ebp - 8]
add dword [ebp - 0x20], ecx
inc ebx
cmp esi, ebx
jg 0x4b2def
cmp esi, edi
jge 0x4b2f1f
cmp esi, 2
jge 0x4b2e3c
mov ebx, esi
jmp 0x4b2e47
lea ebx, [esi - 1]
mov eax, dword [ebp + ebx*4 - 0x40]
mov dword [ebp + esi*4 - 0x40], eax
push 0
push dword [ebp + 8]
mov edx, dword [ebp + 8]
push dword [edx + 0x334]
call fcn.004b1bdf
add esp, 0xc
mov dword [ebp + ebx*4 - 0x40], eax
mov ecx, dword [ebp + ebx*4 - 0x40]
mov byte [ecx + 0xc], 0
mov eax, dword [ebp + ebx*4 - 0x40]
xor edx, edx
mov dword [eax + 0x10], edx
mov ecx, dword [ebp + ebx*4 - 0x40]
mov dword [ecx + 0x18], 1
mov eax, dword [ebp + esi*4 - 0x40]
push dword [eax]
push 0
push 0
push 1
mov edx, dword [ebp - 4]
add edx, ebx
push edx
push dword [ebp + 8]
call fcn.004b1878
add esp, 0x18
mov ecx, dword [ebp + ebx*4 - 0x44]
mov eax, dword [ecx]
mov edx, dword [ebp + ebx*4 - 0x40]
mov dword [edx + 4], eax
mov ecx, dword [ebp + ebx*4 - 0x44]
mov eax, dword [ecx + 8]
mov edx, dword [ebp + ebx*4 - 0x40]
mov dword [edx + 8], eax
mov ecx, dword [ebp + ebx*4 - 0x40]
mov eax, dword [ecx]
mov edx, dword [ebp + ebx*4 - 0x44]
mov dword [edx + 8], eax
cmp esi, ebx
jle 0x4b2ed5
mov ecx, dword [ebp + ebx*4 - 0x40]
mov eax, dword [ecx]
mov edx, dword [ebp + ebx*4 - 0x3c]
mov dword [edx + 4], eax
jmp 0x4b2f15
mov ecx, dword [ebp + ebx*4 - 0x40]
cmp dword [ecx + 8], 0xffffffff
je 0x4b2f15
mov eax, dword [ebp + esi*4 - 0x40]
push dword [eax + 8]
push dword [ebp + 8]
mov edx, dword [ebp + 8]
push dword [edx + 0x334]
call fcn.004b1bdf
add esp, 0xc
mov ecx, dword [ebp + ebx*4 - 0x40]
mov edx, dword [ecx]
mov dword [eax + 4], edx
mov dword [eax + 0x18], 1
push 0
push eax
call fcn.004b1d29
add esp, 8
inc esi
or dword [ebp - 0x28], 8
jmp 0x4b307c
cmp esi, edi
jle 0x4b307c
cmp edi, 1
jle 0x4b2f5b
mov eax, dword [ebp + esi*4 - 0x44]
mov ecx, dword [eax]
mov eax, dword [ebp + edi*4 - 0x48]
mov dword [eax + 8], ecx
mov edx, dword [ebp + edi*4 - 0x48]
mov ecx, dword [edx]
mov eax, dword [ebp + esi*4 - 0x44]
mov dword [eax + 4], ecx
mov eax, dword [ebp + esi*4 - 0x44]
mov edx, dword [ebp + edi*4 - 0x44]
mov dword [ebp + esi*4 - 0x44], edx
mov dword [ebp + edi*4 - 0x44], eax
jmp 0x4b300f
test edi, edi
jle 0x4b2f85
mov ecx, dword [ebp - 0x40]
cmp dword [ecx + 4], 0xffffffff
jne 0x4b2f85
mov eax, dword [ebp + esi*4 - 0x44]
mov edx, dword [ebp - 0x40]
mov dword [ebp + esi*4 - 0x44], edx
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x40]
mov dword [ecx + 4], 0xffffffff
jmp 0x4b300f
mov eax, dword [ebp + esi*4 - 0x44]
mov edx, dword [eax + 8]
mov dword [ebp - 0x2c], edx
test edi, edi
jle 0x4b2fa5
mov ecx, dword [ebp + edi*4 - 0x44]
mov ebx, dword [ecx]
mov eax, dword [ebp + edi*4 - 0x44]
mov edx, dword [ebp - 0x2c]
mov dword [eax + 8], edx
jmp 0x4b2fdd
mov ecx, dword [ebp - 0x40]
mov ebx, dword [ecx + 4]
cmp ebx, 0xffffffff
je 0x4b2fdd
push ebx
push dword [ebp + 8]
mov eax, dword [ebp + 8]
push dword [eax + 0x334]
call fcn.004b1bdf
add esp, 0xc
mov edx, dword [ebp - 0x2c]
mov dword [eax + 8], edx
mov dword [eax + 0x18], 1
push 0
push eax
call fcn.004b1d29
add esp, 8
cmp dword [ebp - 0x2c], 0xffffffff
je 0x4b300f
push dword [ebp - 0x2c]
push dword [ebp + 8]
mov ecx, dword [ebp + 8]
push dword [ecx + 0x334]
call fcn.004b1bdf
add esp, 0xc
mov dword [eax + 4], ebx
mov dword [eax + 0x18], 1
push 0
push eax
call fcn.004b1d29
add esp, 8
lea ebx, [esi - 1]
cmp edi, ebx
jg 0x4b3076
mov eax, dword [ebp - 4]
add eax, ebx
push eax
push dword [ebp + 8]
call fcn.004b19ac
add esp, 8
mov edx, dword [ebp + ebx*4 - 0x40]
xor ecx, ecx
mov dword [edx + 0x32c], ecx
mov eax, dword [ebp + ebx*4 - 0x40]
xor edx, edx
mov dword [eax + 0x18], edx
mov ecx, dword [ebp + ebx*4 - 0x40]
mov byte [ecx + 0xc], 0xff
mov eax, dword [ebp + ebx*4 - 0x40]
mov dword [eax + 4], 0xffffffff
mov edx, dword [ebp + ebx*4 - 0x40]
mov dword [edx + 8], 0xffffffff
mov ecx, dword [ebp + ebx*4 - 0x40]
xor eax, eax
mov dword [ecx + 0x10], eax
push 0
push dword [ebp + ebx*4 - 0x40]
call fcn.004b1d29
add esp, 8
dec ebx
cmp edi, ebx
jle 0x4b3016
mov esi, edi
or dword [ebp - 0x28], 8
cmp dword [ebp - 0xc], 0
jle 0x4b3179
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
xor ebx, ebx
cmp esi, ebx
jle 0x4b3170
mov eax, dword [ebp - 0xc]
add eax, esi
sub eax, ebx
dec eax
mov edx, esi
sub edx, ebx
mov ecx, edx
cdq
idiv ecx
mov edi, eax
mov eax, dword [ebp + 8]
mov edx, dword [eax + 0x334]
movzx ecx, word [edx + 0x7c]
cmp edi, ecx
jle 0x4b30c5
push str.hb_cdxPageKeyIntBalance:_iNodeKeys_calculated_wrong_.
call fcn.004aeb80
pop ecx
mov eax, edi
imul dword [ebp - 8]
push eax
push dword [ebp - 0x20]
mov edx, dword [ebp + ebx*4 - 0x40]
add edx, 0x3c
push edx
call fcn.004d9148
add esp, 0xc
mov ecx, dword [ebp + ebx*4 - 0x40]
mov dword [ecx + 0x10], edi
mov eax, dword [ebp + ebx*4 - 0x40]
mov dword [eax + 0x18], 1
mov edx, edi
imul edx, dword [ebp - 8]
add dword [ebp - 0x20], edx
sub dword [ebp - 0xc], edi
mov ecx, dword [ebp - 4]
add ecx, ebx
mov eax, dword [ebp + 8]
cmp ecx, dword [eax + 0x10]
jge 0x4b3159
mov edx, dword [ebp + ebx*4 - 0x40]
push dword [edx]
mov ecx, dword [ebp - 0x20]
xor eax, eax
mov al, byte [ecx - 8]
shl eax, 0x18
mov edx, dword [ebp - 0x20]
xor ecx, ecx
mov cl, byte [edx - 7]
shl ecx, 0x10
or eax, ecx
mov edx, dword [ebp - 0x20]
xor ecx, ecx
mov cl, byte [edx - 6]
shl ecx, 8
or eax, ecx
mov edx, dword [ebp - 0x20]
xor ecx, ecx
mov cl, byte [edx - 5]
or eax, ecx
push eax
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 8]
push eax
push 0
mov eax, dword [ebp - 4]
add eax, ebx
push eax
push dword [ebp + 8]
call fcn.004b1878
add esp, 0x18
push 0
push dword [ebp + ebx*4 - 0x40]
call fcn.004b1d29
add esp, 8
inc ebx
cmp esi, ebx
jg 0x4b3096
push dword [ebp - 0x1c]
call sym.SISCOM.EXE__hb_xfree
pop ecx
mov edx, dword [ebp + 8]
mov dword [edx + 0x18], 1
mov ecx, dword [ebp + 8]
mov eax, dword [ecx + 0x10]
mov edx, dword [ebp + 8]
mov ecx, dword [edx + 0x334]
movzx edx, word [ecx + 0x7c]
cmp eax, edx
jle 0x4b319e
or dword [ebp - 0x28], 2
mov eax, dword [ebp - 0x28]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret