Function at 0x5337a0
Capabilities:
Access peb ldr_data
Get ntdll base address
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x7799c0
mov eax, dword fs:[0]
push eax
sub esp, 0x64
push ebx
push ebp
push esi
push edi
mov eax, dword [0x84dea4]
xor eax, esp
push eax
lea eax, [esp + 0x78]
mov dword fs:[0], eax
mov edi, ecx
fldz
mov esi, dword [esp + 0x90]
fstp dword [esp + 0x34]
lea eax, [esp + 0x90]
fld dword [esi + 4]
push eax
lea ecx, [esp + 0x18]
fstp dword [esp + 0x30]
fld dword [esi]
push ecx
mov ecx, dword [edi + 0xe0]
fstp dword [esp + 0x38]
lea edx, [esp + 0x34]
push edx
call fcn.005dcf00
fld dword [esi + 0xc]
lea eax, [esp + 0x1c]
fstp dword [esp + 0x2c]
fld dword [esi + 8]
push eax
lea ecx, [esp + 0x1c]
fstp dword [esp + 0x34]
push ecx
mov ecx, dword [edi + 0xe0]
lea edx, [esp + 0x34]
push edx
call fcn.005dcf00
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
sub eax, dword [esp + 0x90]
sub ecx, dword [esp + 0x14]
add eax, 1
add ecx, 1
imul eax, ecx
mov esi, eax
mov eax, dword [esp + 0x94]
cmp esi, dword [eax + 4]
mov dword [esp + 0x28], ecx
jbe 0x533895
cmp esi, dword [eax]
jbe 0x533895
mov ecx, dword [eax + 0xc]
xor ebp, ebp
cmp ecx, ebp
jne 0x53386d
push esi
mov ecx, eax
call fcn.0040dfe0
mov ecx, eax
xor edx, edx
mov eax, esi
div ecx
mov ebx, esi
cmp edx, ebp
je 0x53387f
sub ecx, edx
add ecx, esi
mov ebx, ecx
mov ecx, dword [esp + 0x94]
push ebx
call fcn.0040d600
mov eax, dword [esp + 0x94]
jmp 0x533897
xor ebp, ebp
push esi
mov dword [eax + 4], esi
mov eax, dword [eax + 8]
push ebp
push eax
call sub.MSVCR80.dll_memset
mov eax, dword [esp + 0x94]
mov esi, dword [esp + 0x98]
xor ecx, ecx
xor ebx, ebx
add esp, 0xc
cmp dword [eax + 0xa0], ebp
mov dword [esp + 0x20], ebx
setg cl
xor edx, edx
cmp dword [esi + 0xa0], ebp
mov dword [esp + 0x48], ebp
setg dl
mov dword [esp + 0x4c], ebp
mov dword [esp + 0x50], ebp
mov dword [esp + 0x88], ecx
mov dword [esp + 0x54], ebp
mov dword [esp + 0x24], edx
lea ecx, [esp + 0x48]
push ecx
push eax
lea edx, [esp + 0x60]
push edx
mov ecx, edi
mov dword [esp + 0x8c], ebp
call fcn.00532ab0
mov dword [esp + 0x38], ebp
mov dword [esp + 0x3c], ebp
mov dword [esp + 0x40], ebp
mov dword [esp + 0x44], ebp
lea eax, [esp + 0x38]
push eax
push esi
lea ecx, [esp + 0x70]
push ecx
mov ecx, edi
mov byte [esp + 0x8c], 1
call fcn.00532ab0
mov ebp, dword [esp + 0x90]
cmp ebp, dword [esp + 0x1c]
jg 0x533a4f
mov eax, dword [esp + 0x68]
mov ebx, ebp
sub ebx, eax
sub eax, dword [esp + 0x58]
mov dword [esp + 0x8c], eax
jmp 0x533960
mov esi, dword [esp + 0x14]
cmp esi, dword [esp + 0x18]
jg 0x533a3b
cmp dword [esp + 0x88], 0
mov edi, 1
je 0x5339bd
mov eax, dword [esp + 0x5c]
cmp esi, eax
jl 0x5339bb
mov ecx, dword [esp + 0x64]
cmp esi, ecx
jge 0x5339bb
cmp ebp, dword [esp + 0x58]
jl 0x5339bb
cmp ebp, dword [esp + 0x60]
jge 0x5339bb
mov edx, dword [esp + 0x8c]
add edx, ebx
sub ecx, eax
imul edx, ecx
sub edx, eax
mov eax, dword [esp + 0x50]
add edx, esi
lea ecx, [eax + edx*4]
call fcn.005dc940
mov edi, eax
jmp 0x5339bd
xor edi, edi
cmp dword [esp + 0x24], 0
mov eax, 1
je 0x5339fe
mov eax, dword [esp + 0x6c]
cmp esi, eax
jl 0x5339fc
mov ecx, dword [esp + 0x74]
cmp esi, ecx
jge 0x5339fc
cmp ebp, dword [esp + 0x68]
jl 0x5339fc
cmp ebp, dword [esp + 0x70]
jge 0x5339fc
mov edx, dword [esp + 0x40]
sub ecx, eax
imul ecx, ebx
sub ecx, eax
add ecx, esi
lea ecx, [edx + ecx*4]
call fcn.005dc940
jmp 0x5339fe
xor eax, eax
test edi, edi
je 0x533a2e
test eax, eax
je 0x533a2e
mov ecx, dword [esp + 0x94]
mov eax, ebp
sub eax, dword [esp + 0x90]
mov dword [esp + 0x20], 1
imul eax, dword [esp + 0x28]
sub eax, dword [esp + 0x14]
add eax, dword [ecx + 8]
mov byte [eax + esi], 0xff
add esi, 1
cmp esi, dword [esp + 0x18]
jle 0x53396e
add ebp, 1
add ebx, 1
cmp ebp, dword [esp + 0x1c]
jle 0x533960
mov ebx, dword [esp + 0x20]
mov eax, dword [esp + 0x40]
test eax, eax
je 0x533a66
push 0
push 0xfffffffffffffffe
push str.._AVCImVector_NTempest__
push eax
call sub.Storm.dll_Ordinal_403
mov eax, dword [esp + 0x50]
test eax, eax
je 0x533a7d
push 0
push 0xfffffffffffffffe
push str.._AVCImVector_NTempest__
push eax
call sub.Storm.dll_Ordinal_403
mov eax, ebx
mov ecx, dword [esp + 0x78]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x70
ret 0x10