Function at 0x6fa172b0
Capabilities:
Hash data with md5

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x2c
mov esi, dword [esp + 0x40]
mov ebx, dword [esp + 0x48]
test esi, esi
je 0x6fa173cc
mov eax, dword [esp + 0x44]
test eax, eax
je 0x6fa173e8
mov eax, dword [esi + 0x18]
mov ecx, 0x10
cmp eax, 0x40
ja 0x6fa172f6
mov edx, dword [esi]
mov ecx, dword [esi + 4]
mov edi, ebx
xor ebp, ebp
add edi, edx
adc ebp, ecx
cmp ecx, ebp
jbe 0x6fa17300
mov ecx, 0x19
add esp, 0x2c
mov eax, ecx
pop ebx
pop esi
pop edi
pop ebp
ret
jae 0x6fa173b2
lea edx, [esi + 0x1c]
test ebx, ebx
mov ebp, dword [esp + 0x44]
mov dword [esp + 0x1c], edx
jne 0x6fa17358
jmp 0x6fa17382
mov edi, 0x40
mov dword [esp + 4], ebp
sub edi, eax
cmp edi, ebx
cmova edi, ebx
add eax, dword [esp + 0x1c]
mov dword [esp + 8], edi
add ebp, edi
sub ebx, edi
mov dword [esp], eax
call fcn.6faa4e90
mov eax, dword [esi + 0x18]
add eax, edi
cmp eax, 0x40
mov dword [esi + 0x18], eax
je 0x6fa17390
test ebx, ebx
je 0x6fa17382
mov eax, dword [esi + 0x18]
test eax, eax
jne 0x6fa17320
cmp ebx, 0x3f
jbe 0x6fa17320
mov edx, ebp
mov eax, esi
call fcn.6fa168c0
test eax, eax
jne 0x6fa173c0
add dword [esi], 0x200
adc dword [esi + 4], 0
sub ebx, 0x40
add ebp, 0x40
test ebx, ebx
jne 0x6fa17355
add esp, 0x2c
xor ecx, ecx
pop ebx
mov eax, ecx
pop esi
pop edi
pop ebp
ret
mov edx, dword [esp + 0x1c]
mov eax, esi
call fcn.6fa168c0
test eax, eax
jne 0x6fa173c0
add dword [esi], 0x200
mov dword [esi + 0x18], 0
adc dword [esi + 4], 0
jmp 0x6fa17351
cmp edx, edi
ja 0x6fa172f1
jmp 0x6fa17306
add esp, 0x2c
mov ecx, eax
pop ebx
mov eax, ecx
pop esi
pop edi
pop ebp
ret
mov dword [esp + 8], 0xfa
mov dword [esp + 4], str.src_hashes_md5.c
mov dword [esp], 0x6fab1131
call fcn.6fa1c540
mov dword [esp + 8], 0xfa
mov dword [esp + 4], str.src_hashes_md5.c
mov dword [esp], 0x6fab1148
call fcn.6fa1c540
lea esi, [esi]
lea edi, [edi]
push ebp
push edi
mov ebp, 0x40
push esi
push ebx
mov esi, 0x6fab1153
sub esp, 0x1ec
mov dword [esp + 0x2c], 0x6fab1224
mov dword [esp + 0x28], 0
mov dword [esp], esi
mov dword [esp + 0x48], 0x67452301
mov dword [esp + 0x4c], 0xefcdab89
mov dword [esp + 0x50], 0x98badcfe
mov dword [esp + 0x54], 0x10325476
mov dword [esp + 0x58], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
call fcn.6faa4e40
mov ebx, eax
xor eax, eax
test ebx, ebx
jne 0x6fa174bb
jmp 0x6fa177d0
mov edi, ebp
lea ecx, [esp + 0x5c]
mov dword [esp + 4], esi
sub edi, eax
cmp edi, ebx
cmova edi, ebx
add eax, ecx
mov dword [esp + 8], edi
mov dword [esp], eax
add esi, edi
call fcn.6faa4e90
mov eax, dword [esp + 0x58]
sub ebx, edi
add eax, edi
cmp eax, 0x40
mov dword [esp + 0x58], eax
je 0x6fa17760
test ebx, ebx
je 0x6fa174f2
cmp ebx, 0x3f
jbe 0x6fa17481
test eax, eax
jne 0x6fa17481
lea eax, [esp + 0x40]
mov edx, esi
call fcn.6fa168c0
test eax, eax
jne 0x6fa177a0
add dword [esp + 0x40], 0x200
mov eax, dword [esp + 0x58]
adc dword [esp + 0x44], 0
sub ebx, 0x40
add esi, 0x40
test ebx, ebx
jne 0x6fa174bb
cmp eax, 0x3f
ja 0x6fa17700
xor edi, edi
lea ecx, [eax*8]
add ecx, dword [esp + 0x40]
adc edi, dword [esp + 0x44]
lea edx, [eax + 1]
mov byte [esp + eax + 0x5c], pe_nt_image_headers32
cmp edx, 0x38
mov dword [esp + 0x58], edx
mov dword [esp + 0x40], ecx
mov dword [esp + 0x44], edi
jbe 0x6fa17790
cmp edx, 0x40
je 0x6fa175d4
mov edi, ebp
lea esi, [esp + eax + 0x5d]
sub edi, edx
je 0x6fa175d0
mov ecx, edi
xor eax, eax
and ecx, 7
je 0x6fa1759d
cmp ecx, 1
je 0x6fa17592
cmp ecx, 2
je 0x6fa1758b
cmp ecx, 3
je 0x6fa17584
cmp ecx, 4
je 0x6fa1757d
cmp ecx, 5
je 0x6fa17576
cmp ecx, 6
je 0x6fa1756f
mov byte [esi], 0
mov eax, 1
mov byte [esi + eax], 0
add eax, 1
mov byte [esi + eax], 0
add eax, 1
mov byte [esi + eax], 0
add eax, 1
mov byte [esi + eax], 0
add eax, 1
mov byte [esi + eax], 0
add eax, 1
mov byte [esi + eax], 0
add eax, 1
cmp eax, edi
jae 0x6fa175d0
mov byte [esi + eax], 0
mov byte [esi + eax + 1], 0
mov byte [esi + eax + 2], 0
mov byte [esi + eax + 3], 0
mov byte [esi + eax + 4], 0
mov byte [esi + eax + 5], 0
mov byte [esi + eax + 6], 0
mov byte [esi + eax + 7], 0
add eax, 8
cmp eax, edi
jb 0x6fa1759d
nop
lea esi, [esi]
mov dword [esp + 0x58], ebp
lea ebx, [esp + 0x5c]
lea eax, [esp + 0x40]
mov edx, ebx
call fcn.6fa168c0
xor edx, edx
mov esi, edx
neg esi
and esi, 7
je 0x6fa17645
cmp esi, 1
je 0x6fa17638
cmp esi, 2
je 0x6fa17630
cmp esi, 3
je 0x6fa17628
cmp esi, 4
je 0x6fa17620
cmp esi, 5
je 0x6fa17618
cmp esi, 6
jne 0x6fa177b0
mov byte [esp + edx + 0x5c], 0
add edx, 1
mov byte [esp + edx + 0x5c], 0
add edx, 1
mov byte [esp + edx + 0x5c], 0
add edx, 1
mov byte [esp + edx + 0x5c], 0
add edx, 1
mov byte [esp + edx + 0x5c], 0
add edx, 1
add edx, 1
cmp edx, 0x38
mov byte [esp + edx + 0x5b], 0
je 0x6fa17675
mov byte [esp + edx + 0x5c], 0
mov byte [esp + edx + 0x5d], 0
mov byte [esp + edx + 0x5e], 0
mov byte [esp + edx + 0x5f], 0
mov byte [esp + edx + 0x60], 0
mov byte [esp + edx + 0x61], 0
mov byte [esp + edx + 0x62], 0
add edx, 8
cmp edx, 0x38
mov byte [esp + edx + 0x5b], 0
jne 0x6fa17645
mov ecx, dword [esp + 0x40]
mov edi, dword [esp + 0x44]
mov dword [esp + 0x58], 0x38
mov eax, edi
mov edx, edi
mov byte [esp + 0x95], ch
shr eax, 0x10
shr edx, 0x18
mov byte [esp + 0x94], cl
mov byte [esp + 0x9a], al
mov eax, ecx
mov byte [esp + 0x9b], dl
shrd eax, edi, 0x18
mov edx, edi
mov byte [esp + 0x97], al
mov eax, ecx
mov byte [esp + 0x99], dh
shrd eax, edi, 0x10
mov byte [esp + 0x98], dl
mov edx, ebx
mov byte [esp + 0x96], al
lea eax, [esp + 0x40]
call fcn.6fa168c0
mov ebx, dword [esp + 0x48]
mov esi, dword [esp + 0x4c]
mov eax, dword [esp + 0x50]
mov edi, dword [esp + 0x54]
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], esi
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], edi
mov ebx, dword [esp + 0x28]
mov esi, dword [esp + 0x2c]
lea edx, [esp + 0x30]
mov dword [esp + 0x10], 0x6fab1154
mov dword [esp + 0xc], 0x10
mov dword [esp + 4], 0x10
mov dword [esp], edx
mov dword [esp + 0x14], ebx
mov dword [esp + 8], esi
call fcn.6fa1c510
test eax, eax
jne 0x6fa177c0
add esi, 0x14
add ebx, 1
mov dword [esp + 0x2c], esi
mov esi, dword [esi - 4]
mov dword [esp + 0x28], ebx
test esi, esi
jne 0x6fa17434
add esp, 0x1ec
pop ebx
pop esi
pop edi
pop ebp
ret
lea edx, [esp + 0x5c]
lea eax, [esp + 0x40]
call fcn.6fa168c0
test eax, eax
jne 0x6fa177a0
add dword [esp + 0x40], 0x200
mov dword [esp + 0x58], 0
adc dword [esp + 0x44], 0
xor eax, eax
jmp 0x6fa174b7
lea ebx, [esp + 0x5c]
jne 0x6fa175e5
jmp 0x6fa17685
mov eax, dword [esp + 0x58]
jmp 0x6fa174f2
mov byte [esp + edx + 0x5c], 0
add edx, 1
jmp 0x6fa17610
add esp, 0x1ec
mov eax, 5
pop ebx
pop esi
pop edi
pop ebp
ret
mov byte [esp + 0x5c], pe_nt_image_headers32
mov edx, 1
lea ebx, [esp + 0x5c]
jmp 0x6fa175e5