Function at 0x5b3840
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x65d4d0
mov eax, dword fs:[0]
push eax
sub esp, 0x70
mov eax, dword [0x74f8a0]
xor eax, esp
mov dword [esp + 0x6c], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x74f8a0]
xor eax, esp
push eax
lea eax, [esp + 0x84]
mov dword fs:[0], eax
mov esi, dword [esp + 0x94]
mov edi, ecx
mov dword [esp + 0x24], edi
mov dword [esp + 0x1c], esi
mov eax, dword [edi + 0x54]
test eax, eax
jne 0x5b3890
lea eax, [edi + 0x58]
push eax
mov ecx, esi
call fcn.004011e0
push eax
call fcn.0061d58a
add esp, 8
test eax, eax
je 0x5b4248
lea ecx, [esp + 0x14]
call fcn.00402500
mov dword [esp + 0x8c], 0
mov eax, dword [edi + 0x54]
test eax, eax
jne 0x5b38c7
lea eax, [edi + 0x58]
push 1
push eax
call fcn.004a58e0
add esp, 8
test eax, eax
je 0x5b3941
mov eax, dword [edi + 0x54]
test eax, eax
jne 0x5b38e0
lea eax, [edi + 0x58]
push eax
lea ecx, [esp + 0x1c]
call fcn.00418120
mov byte [esp + 0x8c], 1
mov eax, dword [esp + 0x18]
push eax
lea ecx, [esp + 0x18]
push str.Delete_old_file__s_n
push ecx
call fcn.00402f70
mov edx, dword [esp + 0x20]
add esp, 0xc
push edx
lea ecx, [edi + 0x51c]
call fcn.00564020
mov byte [esp + 0x8c], 0
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x5b3941
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [edi + 0x54]
test eax, eax
jne 0x5b394b
lea eax, [edi + 0x58]
push 1
push eax
mov ecx, esi
call fcn.004011e0
push eax
call fcn.004a5470
add esp, 0xc
test eax, eax
jne 0x5b4166
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, eax
cmp ebp, 0x7b
jne 0x5b39f1
mov eax, dword [edi + 0x54]
test eax, eax
jne 0x5b3981
lea eax, [edi + 0x58]
push 0x5c
push eax
call fcn.00617b92
add esp, 8
test eax, eax
je 0x5b39f1
mov ecx, eax
xor bl, bl
lea esi, [ecx + 2]
mov dx, word [ecx]
add ecx, 2
test dx, dx
jne 0x5b3997
sub ecx, esi
sar ecx, 1
mov esi, ecx
mov edx, 1
cmp esi, edx
jle 0x5b39f1
cmp word [eax + edx*2], 0x20
jae 0x5b39c3
mov ecx, 0x2d
mov word [eax + edx*2], cx
mov bl, 1
inc edx
cmp edx, esi
jl 0x5b39b1
test bl, bl
je 0x5b39f1
lea ecx, [edi + 0x20]
call fcn.005c4310
mov dword [esp + 0x8c], 0xffffffff
lea ecx, [esp + 0x14]
call fcn.00402570
mov esi, dword [esp + 0x1c]
jmp 0x5b3886
mov eax, dword [edi + 0x54]
lea esi, [edi + 0x54]
test eax, eax
jne 0x5b39fe
lea eax, [esi + 4]
push 0x678190
push eax
call fcn.0061a38b
add esp, 8
test eax, eax
je 0x5b3ad9
mov eax, dword [esi]
test eax, eax
jne 0x5b3a1d
lea eax, [esi + 4]
push 0x678190
push eax
call fcn.0061a38b
add esp, 8
test eax, eax
je 0x5b3a42
push 0x670988
push 0x678190
mov ecx, esi
call fcn.0043bdf0
jmp 0x5b3a14
mov eax, dword [esi]
test eax, eax
jne 0x5b3a4b
lea eax, [esi + 4]
push 1
push eax
call fcn.004a58e0
add esp, 8
test eax, eax
je 0x5b3aad
mov eax, dword [esi]
test eax, eax
jne 0x5b3a63
lea eax, [esi + 4]
push eax
lea ecx, [esp + 0x1c]
call fcn.00418120
mov byte [esp + 0x8c], 3
mov edx, dword [esp + 0x18]
push edx
lea eax, [esp + 0x18]
push str.Delete_old_file__s_n
push eax
call fcn.00402f70
mov ecx, dword [esp + 0x20]
add esp, 0xc
push ecx
lea ecx, [edi + 0x51c]
call fcn.00564020
mov byte [esp + 0x8c], 0
lea ecx, [esp + 0x18]
call fcn.00402570
mov eax, dword [esi]
mov ecx, eax
test eax, eax
jne 0x5b3ab8
lea ecx, [esi + 4]
mov edx, dword [esp + 0x1c]
mov eax, dword [edx]
test eax, eax
jne 0x5b3ac5
lea eax, [edx + 4]
push 1
push ecx
push eax
call fcn.004a5470
add esp, 0xc
test eax, eax
jne 0x5b4166
mov eax, dword [esi]
test eax, eax
jne 0x5b3ae2
lea eax, [esi + 4]
push 0
push eax
lea edx, [esp + 0x20]
push edx
call fcn.00402a70
add esp, 0xc
mov byte [esp + 0x8c], 4
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
test eax, eax
jne 0x5b3b07
lea eax, [ecx + 4]
xor ebx, ebx
push ebx
push eax
lea eax, [esp + 0x30]
push eax
call fcn.00402a70
mov byte [esp + 0x98], 5
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x34]
mov eax, dword [0x755954]
push ecx
push edx
push eax
lea ecx, [esp + 0x2c]
push ecx
call fcn.00402f70
mov esi, dword [esp + 0x40]
mov edx, dword [esp + 0x30]
add esp, 0x1c
lea edi, [esi + 0x51c]
push edx
mov ecx, edi
call fcn.00564020
xor eax, eax
mov dword [esp + 0x50], ebx
mov dword [esp + 0x58], ebx
mov word [esp + 0x54], ax
mov byte [esp + 0x8c], 6
mov eax, dword [esi + 0x54]
add esi, 0x54
cmp eax, ebx
jne 0x5b3b74
lea eax, [esi + 4]
mov edx, dword [esp + 0x1c]
mov ecx, dword [edx]
cmp ecx, ebx
jne 0x5b3b81
lea ecx, [edx + 4]
mov edx, dword [0x754d20]
push edx
push eax
mov eax, dword [0x755954]
push ecx
push eax
lea ecx, [esp + 0x60]
call fcn.00402320
push ebx
push ebx
lea ecx, [esp + 0x3c]
push ecx
push 0x400
push ebp
push ebx
push 0x1100
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
push str._r_n_r_n
lea ecx, [esp + 0x54]
call fcn.00405340
xor edx, edx
mov dword [esp + 0x68], ebx
mov dword [esp + 0x70], ebx
mov word [esp + 0x6c], dx
mov byte [esp + 0x8c], 7
mov eax, dword [0x754d20]
mov ecx, dword [0x755eb4]
push eax
push ecx
lea ecx, [esp + 0x70]
call fcn.00401980
mov eax, dword [esp + 0x68]
cmp eax, ebx
jne 0x5b3bf9
lea eax, [esp + 0x6c]
push eax
lea ecx, [esp + 0x54]
call fcn.00405340
mov eax, dword [esp + 0x50]
cmp eax, ebx
jne 0x5b3c0f
lea eax, [esp + 0x54]
xor edx, edx
push eax
lea ecx, [esp + 0x60]
mov dword [esp + 0x60], ebx
mov dword [esp + 0x68], ebx
mov word [esp + 0x64], dx
call fcn.004017f0
mov byte [esp + 0x8c], 8
push 0x670980
lea ecx, [esp + 0x54]
call fcn.00405340
mov eax, dword [esp + 0x34]
push eax
lea ecx, [esp + 0x54]
call fcn.00405340
mov ecx, dword [esp + 0x34]
push ecx
call dword [sym.imp.KERNEL32.dll_LocalFree]
push ebp
lea edx, [esp + 0x18]
push str.__errno___ld_n
push edx
call fcn.00402f70
mov eax, dword [esp + 0x20]
add esp, 0xc
push eax
mov ecx, edi
call fcn.00564020
mov eax, dword [esi]
cmp eax, ebx
jne 0x5b3c7f
lea eax, [esi + 4]
xor ecx, ecx
mov word [esp + 0x48], cx
push eax
lea ecx, [esp + 0x48]
mov dword [esp + 0x48], ebx
mov dword [esp + 0x50], ebx
call fcn.004017f0
mov byte [esp + 0x8c], 9
mov eax, dword [esp + 0x44]
cmp eax, ebx
jne 0x5b3cac
lea eax, [esp + 0x48]
push 0x5c
push eax
call fcn.00617b92
add esp, 8
cmp eax, ebx
je 0x5b3feb
add eax, 2
xor edx, edx
mov word [eax], dx
mov eax, dword [esp + 0x44]
cmp eax, ebx
jne 0x5b3cd3
lea eax, [esp + 0x48]
push 1
push eax
call fcn.004a5a80
add esp, 8
test eax, eax
jne 0x5b3feb
push str.Folder_does_not_exist__Creating..._n
mov ecx, edi
call fcn.00564020
mov eax, dword [esp + 0x44]
cmp eax, ebx
jne 0x5b3cfe
lea eax, [esp + 0x48]
add eax, 6
push 0x5c
push eax
call fcn.00619bf0
mov esi, eax
add esp, 8
cmp esi, ebx
jne 0x5b3dc6
mov eax, dword [esp + 0x44]
cmp eax, ebx
jne 0x5b3d22
lea eax, [esp + 0x48]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x5b3d25
sub eax, edx
sar eax, 1
cmp eax, 3
jne 0x5b3fb5
push str.Drive_is_not_available_n
mov ecx, edi
call fcn.00564020
mov eax, dword [esp + 0x5c]
cmp eax, ebx
jne 0x5b3d55
lea eax, [esp + 0x60]
push eax
lea ecx, [esp + 0x54]
call fcn.004017f0
xor eax, eax
mov dword [esp + 0x38], ebx
mov dword [esp + 0x40], ebx
mov word [esp + 0x3c], ax
mov byte [esp + 0x8c], 0xa
mov eax, dword [esp + 0x44]
cmp eax, ebx
jne 0x5b3d82
lea eax, [esp + 0x48]
mov ecx, dword [0x754d20]
mov edx, dword [0x756798]
push ecx
push eax
push edx
lea ecx, [esp + 0x44]
call fcn.004021b0
mov eax, dword [esp + 0x38]
cmp eax, ebx
jne 0x5b3da6
lea eax, [esp + 0x3c]
push eax
lea ecx, [esp + 0x54]
call fcn.00405340
mov byte [esp + 0x8c], 9
lea ecx, [esp + 0x38]
call fcn.00401210
jmp 0x5b3fb5
mov eax, dword [esp + 0x44]
cmp eax, ebx
jne 0x5b3dd2
lea eax, [esp + 0x48]
xor ecx, ecx
mov word [esp + 0x3c], cx
push eax
lea ecx, [esp + 0x3c]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x44], ebx
call fcn.004017f0
mov byte [esp + 0x8c], 0xb
mov eax, dword [esp + 0x38]
mov ecx, eax
cmp eax, ebx
jne 0x5b3e01
lea ecx, [esp + 0x3c]
mov eax, dword [esp + 0x44]
cmp eax, ebx
jne 0x5b3e0d
lea eax, [esp + 0x48]
mov edx, esi
sub edx, eax
xor eax, eax
sar edx, 1
mov word [ecx + edx*2], ax
mov eax, dword [esp + 0x38]
cmp eax, ebx
jne 0x5b3e25
lea eax, [esp + 0x3c]
push 1
push eax
call fcn.004a5a80
add esp, 8
test eax, eax
jne 0x5b3e4f
mov eax, dword [esp + 0x38]
cmp eax, ebx
jne 0x5b3e40
lea eax, [esp + 0x3c]
push 1
push eax
call fcn.004a5c60
add esp, 8
test eax, eax
je 0x5b3e7d
push 0x5c
add esi, 2
push esi
call fcn.00619bf0
add esp, 8
mov esi, eax
mov byte [esp + 0x8c], 9
lea ecx, [esp + 0x38]
call fcn.00401210
cmp esi, ebx
jne 0x5b3dc6
jmp 0x5b3fb5
mov eax, dword [esp + 0x38]
cmp eax, ebx
jne 0x5b3e89
lea eax, [esp + 0x3c]
push eax
lea ecx, [esp + 0x24]
call fcn.00418120
mov bl, 0xc
mov byte [esp + 0x8c], bl
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [esp + 0x20]
push eax
push ecx
lea edx, [esp + 0x1c]
push str.Can_not_create_folder__s__error___ld_n
push edx
call fcn.00402f70
mov eax, dword [esp + 0x24]
add esp, 0x10
push eax
mov ecx, edi
call fcn.00564020
mov eax, dword [esp + 0x38]
xor esi, esi
cmp eax, esi
jne 0x5b3ed4
lea eax, [esp + 0x3c]
push 0x5c
push eax
call fcn.00619bf0
add esp, 8
cmp eax, esi
je 0x5b3f91
xor ecx, ecx
mov word [eax], cx
mov eax, dword [esp + 0x38]
cmp eax, esi
jne 0x5b3ef8
lea eax, [esp + 0x3c]
push 1
push eax
call fcn.004a5a80
add esp, 8
test eax, eax
jne 0x5b3f91
push str.Drive_is_not_available_n
mov ecx, edi
call fcn.00564020
mov eax, dword [esp + 0x5c]
cmp eax, esi
jne 0x5b3f23
lea eax, [esp + 0x60]
push eax
lea ecx, [esp + 0x54]
call fcn.004017f0
xor edx, edx
mov dword [esp + 0x74], esi
mov dword [esp + 0x7c], esi
mov word [esp + 0x78], dx
mov byte [esp + 0x8c], 0xd
mov eax, dword [esp + 0x38]
cmp eax, esi
jne 0x5b3f50
lea eax, [esp + 0x3c]
mov ecx, dword [0x754d20]
mov edx, dword [0x756798]
push ecx
push eax
push edx
lea ecx, [esp + 0x80]
call fcn.004021b0
mov eax, dword [esp + 0x74]
cmp eax, esi
jne 0x5b3f77
lea eax, [esp + 0x78]
push eax
lea ecx, [esp + 0x54]
call fcn.00405340
mov byte [esp + 0x8c], bl
lea ecx, [esp + 0x74]
call fcn.00401210
mov byte [esp + 0x8c], 0xb
lea ecx, [esp + 0x20]
call fcn.00402570
mov byte [esp + 0x8c], 9
lea ecx, [esp + 0x38]
call fcn.00401210
xor ebx, ebx
mov ecx, dword [esp + 0x24]
mov eax, dword [ecx + 0x54]
add ecx, 0x54
cmp eax, ebx
je 0x5b3fc7
mov ecx, eax
jmp 0x5b3fca
add ecx, 4
mov edx, dword [esp + 0x1c]
mov eax, dword [edx]
cmp eax, ebx
jne 0x5b3fd7
lea eax, [edx + 4]
push 1
push ecx
push eax
call fcn.004a5470
add esp, 0xc
cmp eax, ebx
jne 0x5b40fc
mov eax, dword [esp + 0x50]
cmp eax, ebx
jne 0x5b3ff7
lea eax, [esp + 0x54]
push eax
lea ecx, [esp + 0x24]
call fcn.00418120
mov byte [esp + 0x8c], 0xe
mov edi, dword [esp + 0x24]
mov eax, dword [esp + 0x20]
lea esi, [edi + 0x20]
push eax
mov ecx, esi
call fcn.005ae800
cmp dword [edi + 8], ebx
jne 0x5b4046
mov eax, dword [esp + 0x50]
cmp eax, ebx
jne 0x5b402d
lea eax, [esp + 0x54]
mov ecx, dword [0x755ea8]
mov edx, dword [edi + 0x14]
push 0x50010
push ecx
push eax
push edx
call fcn.0046f650
add esp, 0x10
push ebx
mov ecx, edi
call fcn.005aef40
mov ecx, dword [esp + 0x1c]
mov byte [edi + 0xaea], 1
mov eax, dword [ecx]
cmp eax, ebx
jne 0x5b4062
lea eax, [ecx + 4]
push eax
mov ecx, esi
call fcn.005c6090
mov byte [esp + 0x8c], 9
lea ecx, [esp + 0x20]
call fcn.00402570
mov byte [esp + 0x8c], 8
lea ecx, [esp + 0x44]
call fcn.00401210
mov byte [esp + 0x8c], 7
lea ecx, [esp + 0x5c]
call fcn.00401210
mov byte [esp + 0x8c], 6
lea ecx, [esp + 0x68]
call fcn.00401210
mov byte [esp + 0x8c], 5
lea ecx, [esp + 0x50]
call fcn.00401210
mov byte [esp + 0x8c], 4
lea ecx, [esp + 0x28]
call fcn.00402570
mov byte [esp + 0x8c], 0
lea ecx, [esp + 0x18]
call fcn.00402570
mov dword [esp + 0x8c], 0xffffffff
lea ecx, [esp + 0x14]
call fcn.00402570
xor eax, eax
jmp 0x5b4266
mov byte [esp + 0x8c], 8
lea ecx, [esp + 0x44]
call fcn.00401210
mov byte [esp + 0x8c], 7
lea ecx, [esp + 0x5c]
call fcn.00401210
mov byte [esp + 0x8c], 6
lea ecx, [esp + 0x68]
call fcn.00401210
mov byte [esp + 0x8c], 5
lea ecx, [esp + 0x50]
call fcn.00401210
mov byte [esp + 0x8c], 4
lea ecx, [esp + 0x28]
call fcn.00402570
mov byte [esp + 0x8c], 0
lea ecx, [esp + 0x18]
call fcn.00402570
mov edi, dword [esp + 0x24]
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx]
test eax, eax
jne 0x5b4173
lea eax, [ecx + 4]
push eax
lea ecx, [esp + 0x34]
call fcn.00418120
mov bl, 0xf
mov byte [esp + 0x8c], bl
mov eax, dword [edi + 0x54]
test eax, eax
jne 0x5b4190
lea eax, [edi + 0x58]
push eax
lea ecx, [esp + 0x30]
call fcn.00418120
mov byte [esp + 0x8c], 0x10
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x30]
push eax
push ecx
lea edx, [esp + 0x1c]
push str.Rename_temp_file__s_to__s._n
push edx
call fcn.00402f70
mov eax, dword [esp + 0x24]
add esp, 0x10
push eax
lea ecx, [edi + 0x51c]
call fcn.00564020
mov byte [esp + 0x8c], bl
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x5b41f5
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x8c], 0
mov eax, dword [esp + 0x30]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x5b421d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x8c], 0xffffffff
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x5b4248
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [edi + 0x4e8]
push ecx
lea ecx, [edi + 0x20]
mov dword [edi + 0xcc], 1
call fcn.005c7bf0
mov eax, 1
mov ecx, dword [esp + 0x84]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x6c]
xor ecx, esp
call fcn.0061807e
add esp, 0x7c
ret 4