Function at 0x6fa170c0
Capabilities:
Hash data with md5

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x2c
mov esi, dword [esp + 0x40]
mov ebx, dword [esp + 0x48]
test esi, esi
je 0x6fa171dc
mov eax, dword [esp + 0x44]
test eax, eax
je 0x6fa171f8
mov eax, dword [esi + 0x18]
mov ecx, 0x10
cmp eax, 0x40
ja 0x6fa17106
mov edx, dword [esi]
mov ecx, dword [esi + 4]
mov edi, ebx
xor ebp, ebp
add edi, edx
adc ebp, ecx
cmp ecx, ebp
jbe 0x6fa17110
mov ecx, 0x19
add esp, 0x2c
mov eax, ecx
pop ebx
pop esi
pop edi
pop ebp
ret
jae 0x6fa171c2
lea edx, [esi + 0x1c]
test ebx, ebx
mov ebp, dword [esp + 0x44]
mov dword [esp + 0x1c], edx
jne 0x6fa17168
jmp 0x6fa17192
mov edi, 0x40
mov dword [esp + 4], ebp
sub edi, eax
cmp edi, ebx
cmova edi, ebx
add eax, dword [esp + 0x1c]
mov dword [esp + 8], edi
add ebp, edi
sub ebx, edi
mov dword [esp], eax
call fcn.6faa4ca0
mov eax, dword [esi + 0x18]
add eax, edi
cmp eax, 0x40
mov dword [esi + 0x18], eax
je 0x6fa171a0
test ebx, ebx
je 0x6fa17192
mov eax, dword [esi + 0x18]
test eax, eax
jne 0x6fa17130
cmp ebx, 0x3f
jbe 0x6fa17130
mov edx, ebp
mov eax, esi
call fcn.6fa166d0
test eax, eax
jne 0x6fa171d0
add dword [esi], 0x200
adc dword [esi + 4], 0
sub ebx, 0x40
add ebp, 0x40
test ebx, ebx
jne 0x6fa17165
add esp, 0x2c
xor ecx, ecx
pop ebx
mov eax, ecx
pop esi
pop edi
pop ebp
ret
mov edx, dword [esp + 0x1c]
mov eax, esi
call fcn.6fa166d0
test eax, eax
jne 0x6fa171d0
add dword [esi], 0x200
mov dword [esi + 0x18], 0
adc dword [esi + 4], 0
jmp 0x6fa17161
cmp edx, edi
ja 0x6fa17101
jmp 0x6fa17116
add esp, 0x2c
mov ecx, eax
pop ebx
mov eax, ecx
pop esi
pop edi
pop ebp
ret
mov dword [esp + 8], 0xfa
mov dword [esp + 4], str.src_hashes_md5.c
mov dword [esp], 0x6fab1131
call fcn.6fa1c350
mov dword [esp + 8], 0xfa
mov dword [esp + 4], str.src_hashes_md5.c
mov dword [esp], 0x6fab1148
call fcn.6fa1c350
lea esi, [esi]
lea edi, [edi]
push ebp
push edi
mov ebp, 0x40
push esi
push ebx
mov esi, 0x6fab1153
sub esp, 0x1ec
mov dword [esp + 0x2c], 0x6fab1224
mov dword [esp + 0x28], 0
mov dword [esp], esi
mov dword [esp + 0x48], 0x67452301
mov dword [esp + 0x4c], 0xefcdab89
mov dword [esp + 0x50], 0x98badcfe
mov dword [esp + 0x54], 0x10325476
mov dword [esp + 0x58], 0
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 0
call fcn.6faa4c50
mov ebx, eax
xor eax, eax
test ebx, ebx
jne 0x6fa172cb
jmp 0x6fa175e0
mov edi, ebp
lea ecx, [esp + 0x5c]
mov dword [esp + 4], esi
sub edi, eax
cmp edi, ebx
cmova edi, ebx
add eax, ecx
mov dword [esp + 8], edi
mov dword [esp], eax
add esi, edi
call fcn.6faa4ca0
mov eax, dword [esp + 0x58]
sub ebx, edi
add eax, edi
cmp eax, 0x40
mov dword [esp + 0x58], eax
je 0x6fa17570
test ebx, ebx
je 0x6fa17302
cmp ebx, 0x3f
jbe 0x6fa17291
test eax, eax
jne 0x6fa17291
lea eax, [esp + 0x40]
mov edx, esi
call fcn.6fa166d0
test eax, eax
jne 0x6fa175b0
add dword [esp + 0x40], 0x200
mov eax, dword [esp + 0x58]
adc dword [esp + 0x44], 0
sub ebx, 0x40
add esi, 0x40
test ebx, ebx
jne 0x6fa172cb
cmp eax, 0x3f
ja 0x6fa17510
xor edi, edi
lea ecx, [eax*8]
add ecx, dword [esp + 0x40]
adc edi, dword [esp + 0x44]
lea edx, [eax + 1]
mov byte [esp + eax + 0x5c], pe_nt_image_headers32
cmp edx, 0x38
mov dword [esp + 0x58], edx
mov dword [esp + 0x40], ecx
mov dword [esp + 0x44], edi
jbe 0x6fa175a0
cmp edx, 0x40
je 0x6fa173e4
mov edi, ebp
lea esi, [esp + eax + 0x5d]
sub edi, edx
je 0x6fa173e0
mov ecx, edi
xor eax, eax
and ecx, 7
je 0x6fa173ad
cmp ecx, 1
je 0x6fa173a2
cmp ecx, 2
je 0x6fa1739b
cmp ecx, 3
je 0x6fa17394
cmp ecx, 4
je 0x6fa1738d
cmp ecx, 5
je 0x6fa17386
cmp ecx, 6
je 0x6fa1737f
mov byte [esi], 0
mov eax, 1
mov byte [esi + eax], 0
add eax, 1
mov byte [esi + eax], 0
add eax, 1
mov byte [esi + eax], 0
add eax, 1
mov byte [esi + eax], 0
add eax, 1
mov byte [esi + eax], 0
add eax, 1
mov byte [esi + eax], 0
add eax, 1
cmp eax, edi
jae 0x6fa173e0
mov byte [esi + eax], 0
mov byte [esi + eax + 1], 0
mov byte [esi + eax + 2], 0
mov byte [esi + eax + 3], 0
mov byte [esi + eax + 4], 0
mov byte [esi + eax + 5], 0
mov byte [esi + eax + 6], 0
mov byte [esi + eax + 7], 0
add eax, 8
cmp eax, edi
jb 0x6fa173ad
nop
lea esi, [esi]
mov dword [esp + 0x58], ebp
lea ebx, [esp + 0x5c]
lea eax, [esp + 0x40]
mov edx, ebx
call fcn.6fa166d0
xor edx, edx
mov esi, edx
neg esi
and esi, 7
je 0x6fa17455
cmp esi, 1
je 0x6fa17448
cmp esi, 2
je 0x6fa17440
cmp esi, 3
je 0x6fa17438
cmp esi, 4
je 0x6fa17430
cmp esi, 5
je 0x6fa17428
cmp esi, 6
jne 0x6fa175c0
mov byte [esp + edx + 0x5c], 0
add edx, 1
mov byte [esp + edx + 0x5c], 0
add edx, 1
mov byte [esp + edx + 0x5c], 0
add edx, 1
mov byte [esp + edx + 0x5c], 0
add edx, 1
mov byte [esp + edx + 0x5c], 0
add edx, 1
add edx, 1
cmp edx, 0x38
mov byte [esp + edx + 0x5b], 0
je 0x6fa17485
mov byte [esp + edx + 0x5c], 0
mov byte [esp + edx + 0x5d], 0
mov byte [esp + edx + 0x5e], 0
mov byte [esp + edx + 0x5f], 0
mov byte [esp + edx + 0x60], 0
mov byte [esp + edx + 0x61], 0
mov byte [esp + edx + 0x62], 0
add edx, 8
cmp edx, 0x38
mov byte [esp + edx + 0x5b], 0
jne 0x6fa17455
mov ecx, dword [esp + 0x40]
mov edi, dword [esp + 0x44]
mov dword [esp + 0x58], 0x38
mov eax, edi
mov edx, edi
mov byte [esp + 0x95], ch
shr eax, 0x10
shr edx, 0x18
mov byte [esp + 0x94], cl
mov byte [esp + 0x9a], al
mov eax, ecx
mov byte [esp + 0x9b], dl
shrd eax, edi, 0x18
mov edx, edi
mov byte [esp + 0x97], al
mov eax, ecx
mov byte [esp + 0x99], dh
shrd eax, edi, 0x10
mov byte [esp + 0x98], dl
mov edx, ebx
mov byte [esp + 0x96], al
lea eax, [esp + 0x40]
call fcn.6fa166d0
mov ebx, dword [esp + 0x48]
mov esi, dword [esp + 0x4c]
mov eax, dword [esp + 0x50]
mov edi, dword [esp + 0x54]
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], esi
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], edi
mov ebx, dword [esp + 0x28]
mov esi, dword [esp + 0x2c]
lea edx, [esp + 0x30]
mov dword [esp + 0x10], 0x6fab1154
mov dword [esp + 0xc], 0x10
mov dword [esp + 4], 0x10
mov dword [esp], edx
mov dword [esp + 0x14], ebx
mov dword [esp + 8], esi
call fcn.6fa1c320
test eax, eax
jne 0x6fa175d0
add esi, 0x14
add ebx, 1
mov dword [esp + 0x2c], esi
mov esi, dword [esi - 4]
mov dword [esp + 0x28], ebx
test esi, esi
jne 0x6fa17244
add esp, 0x1ec
pop ebx
pop esi
pop edi
pop ebp
ret
lea edx, [esp + 0x5c]
lea eax, [esp + 0x40]
call fcn.6fa166d0
test eax, eax
jne 0x6fa175b0
add dword [esp + 0x40], 0x200
mov dword [esp + 0x58], 0
adc dword [esp + 0x44], 0
xor eax, eax
jmp 0x6fa172c7
lea ebx, [esp + 0x5c]
jne 0x6fa173f5
jmp 0x6fa17495
mov eax, dword [esp + 0x58]
jmp 0x6fa17302
mov byte [esp + edx + 0x5c], 0
add edx, 1
jmp 0x6fa17420
add esp, 0x1ec
mov eax, 5
pop ebx
pop esi
pop edi
pop ebp
ret
mov byte [esp + 0x5c], pe_nt_image_headers32
mov edx, 1
lea ebx, [esp + 0x5c]
jmp 0x6fa173f5