Function at 0x416df3
Capabilities:
Hash data with md5

Disassembly:
push ebp
sub esp, 0x50
mov eax, 0x438cdc
call fcn.00436808
sub esp, 0x150
push ebx
mov dword [ebp + 0x20], ecx
mov eax, edx
and dword [ebp + 0x50], 0
mov dword [ebp + 0x44], eax
mov dword [ebp + 0x24], 0x7d801c11
mov byte [ebp + 0x28], 0xbb
mov dword [ebp + 0x2a], 0x201f31c0
mov dword [ebp + 0x2e], 0x6df139e1
mov dword [ebp + 0x32], 0xc957d708
mov dword [ebp + 0x36], 0xbeee0fd3
mov dword [ebp + 0x3a], 0x43b2837c
mov dword [ebp + 0x3e], 0x6e240962
mov word [ebp + 0x42], 0x461d
push esi
push edi
push 0xc
pop ebx
mov byte [ebp + 0x29], bl
test eax, eax
je 0x416f43
mov eax, dword [ebp + 0x5c]
test eax, eax
je 0x416f43
cmp eax, 0x10
jbe 0x416f43
push eax
call fcn.0041a40d
mov esi, eax
lea eax, [ebp - 0x15c]
push 0xf4
push 0
push eax
mov dword [ebp + 0x48], esi
call fcn.0041d850
lea eax, [ebp - 0x15c]
push eax
lea eax, [ebp + 0x24]
push pe_nt_image_headers32
push eax
call fcn.00404450
xor eax, eax
mov ecx, dword [ebp + 0x44]
and dword [ebp + 0x4c], 0
lea edi, [ebp]
stosd dword es:[edi], eax
add esp, 0x18
mov edx, esi
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp + 0x4c]
push eax
lea eax, [ebp]
push eax
lea eax, [ebp - 0x15c]
push eax
push dword [ebp + 0x5c]
call fcn.00417759
xor eax, eax
lea edi, [ebp + 0x10]
stosd dword es:[edi], eax
push 0x5c
push 0
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x68]
push eax
call fcn.0041d850
mov edi, dword [ebp + 0x5c]
lea ecx, [ebp - 0x68]
mov edx, esi
mov dword [ebp - 0x68], 0x67452301
mov dword [ebp - 0x64], 0xefcdab89
mov dword [ebp - 0x60], 0x98badcfe
lea eax, [edi - 0x10]
mov dword [ebp - 0x5c], 0x10325476
push eax
call fcn.0041758b
lea edx, [ebp - 0x68]
lea ecx, [ebp + 0x10]
call fcn.00417650
lea eax, [edi - 0x10]
add eax, esi
push 0x10
push eax
lea eax, [ebp + 0x10]
push eax
call fcn.0041c014
add esp, 0x30
test eax, eax
je 0x417001
push esi
call fcn.0041a3ca
pop ecx
and dword [ebp + 0x4c], 0
push 3
pop ecx
mov dword [ebp - 4], ecx
xor edi, edi
push 4
pop eax
mov dword [ebp + 0x4c], edi
and dword [ebp + 0x48], edi
mov dword [ebp + 0x50], eax
lea edx, [ebp + 0x48]
mov dword [ebp - 4], eax
mov dword [ebp + 0x50], ebx
xor eax, eax
mov esi, dword [ebp + 0x4c]
and dword [edx], 0
mov edx, dword [ebp + 0x20]
mov dword [edx], eax
or ebx, 0x10
mov dword [ebp + 0x50], ebx
mov dword [ebp - 4], ecx
test bl, 8
je 0x416f94
and ebx, 0xfffffff7
mov dword [ebp + 0x50], ebx
cmp dword [ebp + 0x48], 0
je 0x416f94
push dword [ebp + 0x48]
call fcn.0041a3ca
pop ecx
mov dword [ebp - 4], 2
test bl, 4
je 0x416fb1
and ebx, 0xfffffffb
mov dword [ebp + 0x50], ebx
test edi, edi
je 0x416fb1
push edi
call fcn.0041a3ca
pop ecx
mov dword [ebp - 4], 1
test bl, 2
je 0x416fd2
and ebx, 0xfffffffd
mov dword [ebp + 0x50], ebx
cmp dword [ebp + 0x44], 0
je 0x416fd2
push dword [ebp + 0x44]
call fcn.0041a3ca
pop ecx
and dword [ebp - 4], 0
test bl, 1
je 0x416fec
and ebx, 0xfffffffe
mov dword [ebp + 0x50], ebx
test esi, esi
je 0x416fec
push esi
call fcn.0041a3ca
pop ecx
mov eax, dword [ebp + 0x20]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
add ebp, 0x54
leave
ret
mov dword [ebp + 0x4c], esi
xor eax, eax
inc eax
mov dword [ebp - 4], eax
xor esi, esi
mov dword [ebp + 0x4c], esi
mov dword [ebp + 0x50], eax
mov eax, dword [ebp + 0x48]
mov dword [ebp + 0x44], eax
lea edx, [ebp + 0x44]
mov dword [ebp - 4], 2
push 3
pop ecx
mov ebx, ecx
mov dword [ebp + 0x50], ebx
mov edi, dword [ebp + 0x4c]
jmp 0x416f69