Function at 0x41b990
Capabilities:
Get process heap force flags
Hash data with md5

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x51cc11
mov eax, dword fs:[0]
push eax
sub esp, 0x120
mov eax, dword [0x54735c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov eax, dword [ebp + 8]
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x128], eax
lea eax, [ebx + 0x48]
push eax
lea eax, [ebp - 0xb8]
push eax
call fcn.00409d70
mov dword [ebp - 0x128], eax
lea eax, [ebx + 0x30]
mov dword [ebp - 4], 0
push eax
lea eax, [ebp - 0xa0]
push eax
call fcn.00409d70
mov edi, eax
lea eax, [ebx + 0x18]
mov byte [ebp - 4], 1
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.00409d70
mov esi, eax
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 2
push ebx
push eax
call fcn.00409d70
push esi
mov edx, eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x58]
call fcn.0041bd20
push edi
mov edx, eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x40]
call fcn.0041bd20
push dword [ebp - 0x128]
mov edx, eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x28]
call fcn.0041bd20
add esp, 0x2c
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x2c]
cmp edx, 0x10
jb 0x41ba8f
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41ba85
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41bcf6
push edx
push ecx
call fcn.004f2ead
add esp, 8
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
mov byte [ebp - 4], 8
mov edx, dword [ebp - 0x44]
cmp edx, 0x10
jb 0x41bad9
mov ecx, dword [ebp - 0x58]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41bacf
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41bcfb
push edx
push ecx
call fcn.004f2ead
add esp, 8
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x5c]
cmp edx, 0x10
jb 0x41bb23
mov ecx, dword [ebp - 0x70]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41bb19
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41bd00
push edx
push ecx
call fcn.004f2ead
add esp, 8
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], 0
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x74]
cmp edx, 0x10
jb 0x41bb70
mov ecx, dword [ebp - 0x88]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41bb66
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41bd05
push edx
push ecx
call fcn.004f2ead
add esp, 8
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0xf
mov byte [ebp - 0x88], 0
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x8c]
cmp edx, 0x10
jb 0x41bbc3
mov ecx, dword [ebp - 0xa0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41bbb9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41bd0a
push edx
push ecx
call fcn.004f2ead
add esp, 8
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 0xf
mov byte [ebp - 0xa0], 0
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0xa4]
cmp edx, 0x10
jb 0x41bc1c
mov ecx, dword [ebp - 0xb8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41bc12
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41bd0f
push edx
push ecx
call fcn.004f2ead
add esp, 8
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
push dword [ebp - 0x18]
cmovae eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x124]
push eax
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0xf
mov byte [ebp - 0xb8], 0
mov byte [ebp - 0xbc], 0
mov dword [ebp - 0x110], 0
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x124], 0x67452301
mov dword [ebp - 0x120], 0xefcdab89
mov dword [ebp - 0x11c], 0x98badcfe
mov dword [ebp - 0x118], 0x10325476
call fcn.00419c20
mov esi, dword [ebp - 0x12c]
lea ecx, [ebp - 0x124]
push esi
call fcn.0041a3f0
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x41bcd6
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41bccc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41bd14
push edx
push ecx
call fcn.004f2ead
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004f313b
mov esp, ebp
pop ebp
ret 4
call fcn.004f855c
call fcn.004f855c
call fcn.004f855c
call fcn.004f855c
call fcn.004f855c
call fcn.004f855c
call fcn.004f855c
int3