Function at 0x10005a90
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x10016648
mov eax, dword fs:[0]
push eax
sub esp, 0x50
push ebx
push esi
push edi
mov eax, dword [0x1001b2a8]
xor eax, esp
push eax
lea eax, [esp + 0x60]
mov dword fs:[0], eax
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x74]
xor ebx, ebx
mov byte [esp + 0x4a], bl
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], eax
mov word [esp + 0x48], 0x101
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x68], ebx
cmp eax, 1
jl 0x10005bed
mov al, byte [ecx]
test al, al
movzx eax, al
jns 0x10005afd
movzx ecx, byte [ecx + 1]
and eax, 0x7f
shl eax, 0x10
or eax, ecx
sub eax, ebx
je 0x10005bf5
dec eax
jne 0x10005d1c
lea esi, [esp + 0x10]
xor edx, edx
lea edi, [esp + 0x3c]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], ebx
call fcn.100045f0
test al, al
je 0x10005d1c
cmp dword [esp + 0x10], 0x73948f50
jne 0x10005d1c
push 0x100
mov dword [esp + 0x30], ebx
mov byte [esp + 0x2a], bl
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x24], 0x100
mov dword [esp + 0x20], ebx
call fcn.1000c32b
add esp, 4
mov dword [esp + 0x18], eax
push 1
lea eax, [esp + 0x1c]
mov byte [esp + 0x28], bl
call fcn.100046b0
mov ebx, 5
lea esi, [esp + 0x18]
mov byte [esp + 0x68], 2
call fcn.10004780
test al, al
je 0x10005bad
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x18]
mov byte [edx + eax], 0x87
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
inc eax
mov dword [esp + 0x1c], eax
mov dword [eax + ecx], 1
add dword [esp + 0x1c], 4
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x70]
push edx
call fcn.10003c20
cmp byte [esp + 0x24], 0
jne 0x10005d1c
mov eax, dword [esp + 0x18]
test eax, eax
je 0x10005d1c
cmp byte [esp + 0x26], 0
je 0x10005d0f
mov ecx, dword [esp + 0x20]
push ecx
push 0
jmp 0x10005d02
or eax, 0xffffffff
jmp 0x10005afd
lea esi, [esp + 0x10]
xor edx, edx
lea edi, [esp + 0x3c]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], ebx
call fcn.100045f0
test al, al
je 0x10005d1c
cmp dword [esp + 0x10], 0x73948f50
jne 0x10005d1c
push 0x100
mov dword [esp + 0x30], ebx
mov byte [esp + 0x2a], bl
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x24], 0x100
mov dword [esp + 0x20], ebx
call fcn.1000c32b
add esp, 4
mov dword [esp + 0x18], eax
push ebx
lea eax, [esp + 0x1c]
mov byte [esp + 0x28], bl
call fcn.100046b0
mov byte [esp + 0x68], 1
lea esi, [esp + 0x10]
mov edx, 3
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], ebx
call fcn.100045f0
test al, al
je 0x10005cd6
mov eax, dword [esp + 0x10]
cmp eax, ebx
jle 0x10005cd6
cmp eax, 1
jg 0x10005cd6
call dword [sym.imp.SHELL32.dll_IsUserAnAdmin]
test eax, eax
jne 0x10005cb2
lea edx, [esp + 0x74]
push edx
lea eax, [esp + 0x7c]
push eax
push 8
mov dword [esp + 0x84], ebx
mov dword [esp + 0x80], ebx
call fcn.10004800
test eax, eax
jne 0x10005cd6
mov ebx, 1
lea esi, [esp + 0x18]
call fcn.10004780
test al, al
je 0x10005cd4
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
mov byte [ecx + edx], 6
inc dword [esp + 0x1c]
xor ebx, ebx
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
push eax
mov eax, dword [esp + 0x74]
call fcn.10003c20
cmp byte [esp + 0x24], bl
jne 0x10005d1c
mov eax, dword [esp + 0x18]
cmp eax, ebx
je 0x10005d1c
cmp byte [esp + 0x26], bl
je 0x10005d0f
mov ecx, dword [esp + 0x20]
push ecx
push ebx
push eax
call fcn.10012d20
mov eax, dword [esp + 0x24]
add esp, 0xc
sub eax, dword [esp + 0x28]
push eax
call fcn.1000c2f1
add esp, 4
mov ecx, dword [esp + 0x60]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
add esp, 0x5c
ret 0xc