Function at 0x5b052a
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x100
mov eax, dword [0x7024bc]
xor eax, ebp
mov dword [esp + 0xf8], eax
mov eax, dword [ecx + 8]
mov dword [esp + 0x1c], eax
mov dword [esp + 4], ecx
mov eax, dword [ecx + 0xc]
mov dword [esp + 0x20], eax
mov ebx, dword [ebp + 0xc]
mov dword [esp + 0x24], 1
mov edi, dword [ebp + 8]
lea esi, [esp + 0x14]
lea ecx, [esp + 0x80]
push str.prod
call fcn.00402558
lea ecx, [esp + 0x8c]
push edi
call fcn.0048da6e
lea ecx, [esp + 0x98]
push 0x6c3437
call fcn.00402558
lea ecx, [esp + 0xa4]
push ebx
call fcn.0048da6e
lea ecx, [esp + 0xb0]
push 0x6c343b
call fcn.00402558
lea ecx, [esp + 0xbc]
push dword [ebp + 0x10]
call fcn.0048da6e
lea ecx, [esp + 0xc8]
push str.plat
call fcn.00402558
lea ecx, [esp + 0xd4]
push str.Win32
call fcn.00402558
lea ecx, [esp + 0xe0]
push 0x6c358f
call fcn.00402558
lea ecx, [esp + 0xec]
push dword [ebp + 0x14]
call fcn.0048da6e
xor edi, edi
mov dword [esi], edi
mov dword [esi + 4], edi
mov dword [esi - 4], esi
lea ebx, [esp + 0x4c]
lea eax, [esp + edi]
add eax, 0x80
lea ecx, [esp + 0x10]
push eax
push eax
push esi
push ebx
call fcn.0052731e
add edi, 0x18
cmp edi, 0x78
jne 0x5b0617
mov esi, pe_nt_image_headers32
cmp byte [esp + esi + 0x7f], 0
jns 0x5b064c
push dword [esp + esi + 0x74]
call fcn.006417be
add esp, 4
cmp byte [esp + esi + 0x73], 0
jns 0x5b065f
push dword [esp + esi + 0x68]
call fcn.006417be
add esp, 4
add esi, 0xffffffe8
jne 0x5b0639
xor esi, esi
mov dword [esp + 0x74], esi
mov dword [esp + 0x70], esi
xorps xmm0, xmm0
movups xmmword [esp + 0x60], xmm0
movups xmmword [esp + 0x50], xmm0
mov edi, 0x2c
mov dword [esp + 0x4c], edi
mov ecx, dword [esp + 4]
call fcn.004b9120
push edi
push ebx
push eax
call sub.KERNEL32.dll_K32GetProcessMemoryInfo
test eax, eax
mov edi, dword [ebp + 0x10]
je 0x5b082b
mov eax, dword [esp + 0x74]
shr eax, 0xc
lea ebx, [esp + 0x38]
push esi
push eax
push ebx
call fcn.004a3870
add esp, 0xc
mov dword [esp + 0x80], str.ProcessPrivateUsage
movsd xmm0, qword [ebx]
movsd qword [esp + 0x84], xmm0
mov eax, dword [ebx + 8]
mov dword [esp + 0x8c], eax
mov dword [ebx], esi
mov dword [ebx + 4], esi
mov dword [ebx + 8], esi
lea esi, [esp + 0x28]
lea ecx, [esp + 0x10]
lea eax, [esp + 0x80]
push eax
push esi
call fcn.005b0a94
cmp byte [esp + 0x8f], 0
jns 0x5b070f
push dword [esp + 0x84]
call fcn.006417be
add esp, 4
cmp byte [esp + 0x43], 0
jns 0x5b0722
push dword [esp + 0x38]
call fcn.006417be
add esp, 4
mov eax, dword [esp + 0x54]
shr eax, 0xc
xor edi, edi
push edi
push eax
push ebx
call fcn.004a3870
add esp, 0xc
mov dword [esp + 0x80], str.ProcessPeakWorkingSetSize
movsd xmm0, qword [esp + 0x38]
movsd qword [esp + 0x84], xmm0
mov eax, dword [esp + 0x40]
mov dword [esp + 0x8c], eax
mov dword [esp + 0x38], edi
mov dword [esp + 0x3c], edi
mov dword [esp + 0x40], edi
lea ecx, [esp + 0x10]
lea eax, [esp + 0x80]
push eax
push esi
call fcn.005b0a94
cmp byte [esp + 0x8f], 0
jns 0x5b0792
push dword [esp + 0x84]
call fcn.006417be
add esp, 4
cmp byte [esp + 0x43], 0
jns 0x5b07a5
push dword [esp + 0x38]
call fcn.006417be
add esp, 4
mov eax, dword [esp + 0x70]
shr eax, 0xc
xor edi, edi
push edi
push eax
push ebx
call fcn.004a3870
add esp, 0xc
mov dword [esp + 0x80], str.ProcessPeakPagefileUsage
movsd xmm0, qword [esp + 0x38]
movsd qword [esp + 0x84], xmm0
mov eax, dword [esp + 0x40]
mov dword [esp + 0x8c], eax
mov dword [esp + 0x38], edi
mov dword [esp + 0x3c], edi
mov dword [esp + 0x40], edi
lea ecx, [esp + 0x10]
lea eax, [esp + 0x80]
push eax
push esi
call fcn.005b0a94
cmp byte [esp + 0x8f], 0
jns 0x5b0815
push dword [esp + 0x84]
call fcn.006417be
add esp, 4
cmp byte [esp + 0x43], 0
mov edi, dword [ebp + 0x10]
jns 0x5b082b
push dword [esp + 0x38]
call fcn.006417be
add esp, 4
xorps xmm0, xmm0
movups xmmword [esp + 0xa4], xmm0
movups xmmword [esp + 0x94], xmm0
movups xmmword [esp + 0x84], xmm0
mov dword [esp + 0xb4], 0
mov eax, 0x38
mov dword [esp + 0x80], eax
push eax
lea eax, [esp + 0x84]
push eax
call sub.KERNEL32.dll_K32GetPerformanceInfo
test eax, eax
je 0x5b0955
mov eax, dword [esp + 0x88]
sub eax, dword [esp + 0x84]
lea ebx, [esp + 0x28]
push eax
push ebx
call fcn.004a33b0
add esp, 8
lea esi, [esp + 0x38]
mov dword [esi], str.SystemCommitRemaining
movsd xmm0, qword [ebx]
movsd qword [esi + 4], xmm0
mov eax, dword [ebx + 8]
mov dword [esi + 0xc], eax
xor eax, eax
mov dword [ebx], eax
mov dword [ebx + 4], eax
mov dword [ebx + 8], eax
lea eax, [esp + 0x78]
lea ecx, [esp + 0x10]
push esi
push eax
call fcn.005b0a94
cmp byte [esi + 0xf], 0
jns 0x5b08d3
push dword [esp + 0x3c]
call fcn.006417be
add esp, 4
cmp byte [esp + 0x33], 0
jns 0x5b08e6
push dword [esp + 0x28]
call fcn.006417be
add esp, 4
push dword [esp + 0x88]
push ebx
call fcn.004a33b0
add esp, 8
mov dword [esp + 0x38], str.SystemCommitLimit
movsd xmm0, qword [esp + 0x28]
movsd qword [esp + 0x3c], xmm0
mov eax, dword [esp + 0x30]
mov dword [esp + 0x44], eax
xor eax, eax
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], eax
mov dword [esp + 0x30], eax
lea ecx, [esp + 0x10]
push esi
lea eax, [esp + 0x7c]
push eax
call fcn.005b0a94
cmp byte [esp + 0x47], 0
jns 0x5b0942
push dword [esp + 0x3c]
call fcn.006417be
add esp, 4
cmp byte [esp + 0x33], 0
jns 0x5b0955
push dword [esp + 0x28]
call fcn.006417be
add esp, 4
movzx ebx, byte [edi + 0xb]
test bl, bl
jns 0x5b0962
mov ebx, dword [edi + 4]
mov edi, dword [edi]
lea esi, [edi + ebx]
cmp ebx, 6
jge 0x5b09de
cmp ebx, 3
jge 0x5b0a21
mov ebx, 0x1920
mov eax, dword [ebp + 0x18]
mov ecx, eax
add eax, 4
mov dword [esp + 0xc], eax
mov eax, dword [ecx]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xc]
mov edx, dword [esp + 8]
lea esi, [esp + 0x10]
mov ecx, esi
push eax
push edx
call fcn.005272c2
mov edx, dword [esp + 4]
lea eax, [edx + 0x10]
lea ecx, [esp + 0x1c]
push eax
push esi
push ecx
push ebx
push edx
call fcn.005af564
add esp, 0x14
mov ebx, eax
mov ecx, esi
push dword [esp + 0x14]
call fcn.0044a3fe
mov ecx, dword [esp + 0xf8]
xor ecx, ebp
call fcn.0064180a
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 0x14
mov ecx, ebx
mov eax, edi
add ecx, 0xfffffffb
je 0x5b096a
push ecx
push 0x63
push eax
call fcn.00644310
add esp, 0xc
test eax, eax
je 0x5b096a
mov ecx, dword [eax]
mov edx, 0x616e6163
xor ecx, edx
movzx edx, word [eax + 4]
xor edx, 0x7972
or edx, ecx
je 0x5b0a64
inc eax
mov ecx, esi
sub ecx, eax
cmp ecx, 6
jge 0x5b09e2
jmp 0x5b096a
mov eax, edi
add ebx, 0xfffffffe
je 0x5b0973
push ebx
push 0x64
push eax
call fcn.00644310
add esp, 0xc
test eax, eax
je 0x5b0973
movzx ecx, word [eax]
xor ecx, 0x6564
movzx edx, byte [eax + 2]
xor edx, 0x76
or dx, cx
je 0x5b0a75
inc eax
mov ebx, esi
sub ebx, eax
cmp ebx, 3
jge 0x5b0a23
jmp 0x5b0973
cmp eax, esi
je 0x5b096a
cmp eax, edi
je 0x5b0a8a
jmp 0x5b096a
cmp eax, esi
mov ebx, 0x1920
je 0x5b0978
cmp eax, edi
jne 0x5b0978
mov ebx, 0x1960
jmp 0x5b0978