Function at 0x55aeb0
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Get ntdll base address
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x68b4bb
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x30
push ebx
push ebp
push esi
mov ebp, ecx
push edi
mov dword [esp + 0x18], ebp
call fcn.00629290
lea esi, [ebp + 0x54]
xor edi, edi
mov dword [esp + 0x48], edi
mov dword [esi], vtable.CArray_struct_CTDLAttributeListBox::ATTRIBVIS__struct_CTDLAttributeListBox::ATTRIBVIS__.0
mov dword [esi + 4], edi
mov dword [esi + 0x10], edi
mov dword [esi + 0xc], edi
mov dword [esi + 8], edi
mov ebx, 1
lea ecx, [esp + 0x2c]
mov byte [esp + 0x48], bl
mov dword [ebp], vtable.CTDLAttributeListBox.0
call fcn.004115d0
lea ecx, [esp + 0x30]
mov byte [esp + 0x48], 2
call sub.MFC42u.DLL_CString::CString_5
push edi
push 0xc5f6
lea ecx, [esp + 0x34]
mov byte [esp + 0x50], 3
call fcn.00411880
mov dword [esp + 0x34], 7
mov dword [esp + 0x38], edi
mov eax, dword [esi + 8]
lea ecx, [esp + 0x2c]
push ecx
push eax
mov ecx, esi
mov byte [esp + 0x50], 4
call fcn.0055c390
lea ecx, [esp + 0x30]
mov byte [esp + 0x48], 5
call sub.MFC42u.DLL_CString::CString
lea ecx, [esp + 0x2c]
mov byte [esp + 0x48], bl
call fcn.004116d0
lea ecx, [esp + 0x2c]
call fcn.004115d0
lea ecx, [esp + 0x30]
mov byte [esp + 0x48], 6
call sub.MFC42u.DLL_CString::CString_5
push edi
push 0xc5f5
lea ecx, [esp + 0x34]
mov byte [esp + 0x50], 7
call fcn.00411880
mov dword [esp + 0x34], 6
mov dword [esp + 0x38], ebx
mov eax, dword [esi + 8]
lea edx, [esp + 0x2c]
push edx
push eax
mov ecx, esi
mov byte [esp + 0x50], 8
call fcn.0055c390
lea ecx, [esp + 0x30]
mov byte [esp + 0x48], 9
call sub.MFC42u.DLL_CString::CString
lea ecx, [esp + 0x2c]
mov byte [esp + 0x48], bl
call fcn.004116d0
lea ecx, [esp + 0x2c]
call fcn.004115d0
lea ecx, [esp + 0x30]
mov byte [esp + 0x48], 0xa
call sub.MFC42u.DLL_CString::CString_5
push edi
push 0xc5fc
lea ecx, [esp + 0x34]
mov byte [esp + 0x50], 0xb
call fcn.00411880
mov dword [esp + 0x34], 9
mov dword [esp + 0x38], edi
mov eax, dword [esi + 8]
lea ecx, [esp + 0x2c]
push ecx
push eax
mov ecx, esi
mov byte [esp + 0x50], 0xc
call fcn.0055c390
lea ecx, [esp + 0x30]
mov byte [esp + 0x48], 0xd
call sub.MFC42u.DLL_CString::CString
lea ecx, [esp + 0x2c]
mov byte [esp + 0x48], bl
call fcn.004116d0
lea ecx, [esp + 0x2c]
call fcn.004115d0
lea ecx, [esp + 0x30]
mov byte [esp + 0x48], 0xe
call sub.MFC42u.DLL_CString::CString_5
push edi
push 0xc73a
lea ecx, [esp + 0x34]
mov byte [esp + 0x50], 0xf
call fcn.00411880
mov dword [esp + 0x34], 0xe
mov dword [esp + 0x38], edi
mov eax, dword [esi + 8]
lea edx, [esp + 0x2c]
push edx
push eax
mov ecx, esi
mov byte [esp + 0x50], 0x10
call fcn.0055c390
lea ecx, [esp + 0x30]
mov byte [esp + 0x48], 0x11
call sub.MFC42u.DLL_CString::CString
lea ecx, [esp + 0x2c]
mov byte [esp + 0x48], bl
call fcn.004116d0
lea ecx, [esp + 0x2c]
call fcn.004115d0
lea ecx, [esp + 0x30]
mov byte [esp + 0x48], 0x12
call sub.MFC42u.DLL_CString::CString_5
push edi
push 0xc718
lea ecx, [esp + 0x34]
mov byte [esp + 0x50], 0x13
call fcn.00411880
mov dword [esp + 0x34], 0x15
mov dword [esp + 0x38], edi
mov eax, dword [esi + 8]
lea ecx, [esp + 0x2c]
push ecx
push eax
mov ecx, esi
mov byte [esp + 0x50], 0x14
call fcn.0055c390
lea ecx, [esp + 0x30]
mov byte [esp + 0x48], 0x15
call sub.MFC42u.DLL_CString::CString
lea ecx, [esp + 0x2c]
mov byte [esp + 0x48], bl
call fcn.004116d0
lea ecx, [esp + 0x2c]
call fcn.004115d0
lea ecx, [esp + 0x30]
mov byte [esp + 0x48], 0x16
call sub.MFC42u.DLL_CString::CString_5
push edi
push 0xc723
lea ecx, [esp + 0x34]
mov byte [esp + 0x50], 0x17
call fcn.00411880
mov dword [esp + 0x34], 0x16
mov dword [esp + 0x38], edi
mov eax, dword [esi + 8]
lea edx, [esp + 0x2c]
push edx
push eax
mov ecx, esi
mov byte [esp + 0x50], 0x18
call fcn.0055c390
lea ecx, [esp + 0x30]
mov byte [esp + 0x48], 0x19
call sub.MFC42u.DLL_CString::CString
lea ecx, [esp + 0x2c]
mov byte [esp + 0x48], bl
call fcn.004116d0
lea ecx, [esp + 0x2c]
call fcn.004115d0
lea ecx, [esp + 0x30]
mov byte [esp + 0x48], 0x1a
call sub.MFC42u.DLL_CString::CString_5
push edi
push 0xc5f7
lea ecx, [esp + 0x34]
mov byte [esp + 0x50], 0x1b
call fcn.00411880
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], edi
mov eax, dword [esi + 8]
lea ecx, [esp + 0x2c]
push ecx
push eax
mov ecx, esi
mov byte [esp + 0x50], 0x1c
call fcn.0055c390
lea ecx, [esp + 0x30]
mov byte [esp + 0x48], 0x1d
call sub.MFC42u.DLL_CString::CString
lea ecx, [esp + 0x2c]
mov byte [esp + 0x48], bl
call fcn.004116d0
lea ecx, [esp + 0x2c]
call fcn.004115d0
lea ecx, [esp + 0x30]
mov byte [esp + 0x48], 0x1e
call sub.MFC42u.DLL_CString::CString_5
push edi
push 0xc5f8
lea ecx, [esp + 0x34]
mov byte [esp + 0x50], 0x1f
call fcn.00411880
mov dword [esp + 0x34], 2
mov dword [esp + 0x38], ebx
mov eax, dword [esi + 8]
lea edx, [esp + 0x2c]
push edx
mov byte [esp + 0x4c], 0x20
push eax
mov ecx, esi
call fcn.0055c390
lea ecx, [esp + 0x30]
mov byte [esp + 0x48], 0x21
call sub.MFC42u.DLL_CString::CString
lea ecx, [esp + 0x2c]
mov byte [esp + 0x48], bl
call fcn.004116d0
lea ecx, [esp + 0x2c]
call fcn.004115d0
lea ecx, [esp + 0x30]
mov byte [esp + 0x48], 0x22
call sub.MFC42u.DLL_CString::CString_5
push edi
push 0xc6a3
lea ecx, [esp + 0x34]
mov byte [esp + 0x50], 0x23
call fcn.00411880
mov dword [esp + 0x34], 0x14
mov dword [esp + 0x38], edi
mov eax, dword [esi + 8]
lea ecx, [esp + 0x2c]
push ecx
push eax
mov ecx, esi
mov byte [esp + 0x50], 0x24
call fcn.0055c390
lea ecx, [esp + 0x30]
mov byte [esp + 0x48], 0x25
call sub.MFC42u.DLL_CString::CString
lea ecx, [esp + 0x2c]
mov byte [esp + 0x48], bl
call fcn.004116d0
lea ecx, [esp + 0x2c]
call fcn.004115d0
lea ecx, [esp + 0x30]
mov byte [esp + 0x48], 0x26
call sub.MFC42u.DLL_CString::CString_5
push edi
push 0xc603
lea ecx, [esp + 0x34]
mov byte [esp + 0x50], 0x27
call fcn.00411880
mov dword [esp + 0x34], 0xd
mov dword [esp + 0x38], edi
mov eax, dword [esi + 8]
lea edx, [esp + 0x2c]
push edx
push eax
mov ecx, esi
mov byte [esp + 0x50], 0x28
call fcn.0055c390
lea ecx, [esp + 0x30]
mov byte [esp + 0x48], 0x29
call sub.MFC42u.DLL_CString::CString
lea ecx, [esp + 0x2c]
mov byte [esp + 0x48], bl
call fcn.004116d0
lea ecx, [esp + 0x2c]
call fcn.004115d0
lea ecx, [esp + 0x30]
mov byte [esp + 0x48], 0x2a
call sub.MFC42u.DLL_CString::CString_5
push edi
push 0xc604
lea ecx, [esp + 0x34]
mov byte [esp + 0x50], 0x2b
call fcn.00411880
mov dword [esp + 0x34], 0x10
mov dword [esp + 0x38], edi
mov eax, dword [esi + 8]
lea ecx, [esp + 0x2c]
push ecx
push eax
mov ecx, esi
mov byte [esp + 0x50], 0x2c
call fcn.0055c390
lea ecx, [esp + 0x30]
mov byte [esp + 0x48], 0x2d
call sub.MFC42u.DLL_CString::CString
lea ecx, [esp + 0x2c]
mov byte [esp + 0x48], bl
call fcn.004116d0
lea ecx, [esp + 0x2c]
call fcn.004115d0
lea ecx, [esp + 0x30]
mov byte [esp + 0x48], 0x2e
call sub.MFC42u.DLL_CString::CString_5
push edi
push 0xc602
lea ecx, [esp + 0x34]
mov byte [esp + 0x50], 0x2f
call fcn.00411880
mov dword [esp + 0x34], 0xa
mov dword [esp + 0x38], ebx
mov eax, dword [esi + 8]
lea edx, [esp + 0x2c]
push edx
push eax
mov ecx, esi
mov byte [esp + 0x50], 0x30
call fcn.0055c390
lea ecx, [esp + 0x30]
mov byte [esp + 0x48], 0x31
call sub.MFC42u.DLL_CString::CString
lea ecx, [esp + 0x2c]
mov byte [esp + 0x48], bl
call fcn.004116d0
push ebx
push 4
push 0xc5f4
lea ecx, [esp + 0x38]
call fcn.0055b7c0
mov ecx, dword [esi + 8]
push eax
push ecx
mov ecx, esi
mov byte [esp + 0x50], 0x32
call fcn.0055c390
lea ecx, [esp + 0x2c]
mov byte [esp + 0x48], bl
call fcn.0055b850
push edi
push 0x17
push 0xc74f
lea ecx, [esp + 0x38]
call fcn.0055b7c0
push eax
mov ecx, esi
mov byte [esp + 0x4c], 0x33
call fcn.0055bed0
lea ecx, [esp + 0x2c]
mov byte [esp + 0x48], bl
call fcn.0055b850
push edi
push 0x13
push 0xc6a2
lea ecx, [esp + 0x38]
call fcn.0055b7c0
mov byte [esp + 0x48], 0x34
push eax
mov ecx, esi
call fcn.0055bed0
lea ecx, [esp + 0x2c]
mov byte [esp + 0x48], bl
call fcn.0055b850
push edi
push 3
push 0xc5f9
lea ecx, [esp + 0x38]
call fcn.0055b7c0
push eax
mov ecx, esi
mov byte [esp + 0x4c], 0x35
call fcn.0055bed0
lea ecx, [esp + 0x2c]
mov byte [esp + 0x48], bl
call fcn.0055b850
push edi
push 8
push 0xc5fd
lea ecx, [esp + 0x38]
call fcn.0055b7c0
push eax
mov ecx, esi
mov byte [esp + 0x4c], 0x36
call fcn.0055bed0
lea ecx, [esp + 0x2c]
mov byte [esp + 0x48], bl
call fcn.0055b850
push edi
push 0x20
push 0xc75f
lea ecx, [esp + 0x38]
call fcn.0055b7c0
push eax
mov ecx, esi
mov byte [esp + 0x4c], 0x37
call fcn.0055bed0
lea ecx, [esp + 0x2c]
mov byte [esp + 0x48], bl
call fcn.0055b850
push edi
push 0xb
push 0xc5fa
lea ecx, [esp + 0x38]
call fcn.0055b7c0
push eax
mov ecx, esi
mov byte [esp + 0x4c], 0x38
call fcn.0055bed0
lea ecx, [esp + 0x2c]
mov byte [esp + 0x48], bl
call fcn.0055b850
push edi
push 0xc
push 0xc5fb
lea ecx, [esp + 0x38]
call fcn.0055b7c0
push eax
mov ecx, esi
mov byte [esp + 0x4c], 0x39
call fcn.0055bed0
lea ecx, [esp + 0x2c]
mov byte [esp + 0x48], bl
call fcn.0055b850
push edi
push 0x18
push 0xc750
lea ecx, [esp + 0x38]
call fcn.0055b7c0
push eax
mov ecx, esi
mov byte [esp + 0x4c], 0x3a
call fcn.0055bed0
mov byte [esp + 0x48], bl
lea ecx, [esp + 0x2c]
call fcn.0055b850
cmp dword [esp + 0x54], edi
je 0x55b690
push edi
push 0x11
push 0xc5fe
lea ecx, [esp + 0x38]
call fcn.0055b7c0
push eax
mov ecx, esi
mov byte [esp + 0x4c], 0x3b
call fcn.0055bed0
lea ecx, [esp + 0x2c]
mov byte [esp + 0x48], bl
call fcn.0055b850
push edi
push 0x12
push 0xc5ff
lea ecx, [esp + 0x38]
call fcn.0055b7c0
push eax
mov ecx, esi
mov byte [esp + 0x4c], 0x3c
call fcn.0055bed0
lea ecx, [esp + 0x2c]
mov byte [esp + 0x48], bl
call fcn.0055b850
push edi
push 0x1b
push 0xc6a1
lea ecx, [esp + 0x38]
call fcn.0055b7c0
push eax
mov ecx, esi
mov byte [esp + 0x4c], 0x3d
call fcn.0055bed0
lea ecx, [esp + 0x2c]
mov byte [esp + 0x48], bl
call fcn.0055b850
push edi
push 0x78
push 0xc977
lea ecx, [esp + 0x38]
call fcn.0055b7c0
push eax
mov ecx, esi
mov byte [esp + 0x4c], 0x3e
call fcn.0055bed0
lea ecx, [esp + 0x2c]
mov byte [esp + 0x48], bl
call fcn.0055b850
push ebx
push 0x19
push 0xc601
lea ecx, [esp + 0x38]
call fcn.0055b7c0
push eax
mov ecx, esi
mov byte [esp + 0x4c], 0x3f
call fcn.0055bed0
lea ecx, [esp + 0x2c]
mov byte [esp + 0x48], bl
call fcn.0055b850
push edi
push 0x74
push 0xc8c5
lea ecx, [esp + 0x38]
call fcn.0055b7c0
push eax
mov ecx, esi
mov byte [esp + 0x4c], 0x40
call fcn.0055bed0
lea ecx, [esp + 0x2c]
mov byte [esp + 0x48], bl
call fcn.0055b850
push edi
push 0x1a
push 0xc815
lea ecx, [esp + 0x38]
call fcn.0055b7c0
push eax
mov ecx, esi
mov byte [esp + 0x4c], 0x41
call fcn.0055bed0
lea ecx, [esp + 0x2c]
mov byte [esp + 0x48], bl
call fcn.0055b850
mov eax, dword [esp + 0x50]
mov ecx, dword [eax + 8]
mov dword [esp + 0x54], ecx
lea ecx, [esp + 0x1c]
call fcn.0055b760
mov eax, dword [esp + 0x54]
mov byte [esp + 0x48], 0x42
mov edx, eax
dec eax
test edx, edx
je 0x55b72e
lea ecx, [eax*8]
sub ecx, eax
shl ecx, 4
inc eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x50]
mov eax, dword [eax + 4]
add eax, ecx
mov dword [esp + 0x14], eax
cmp dword [eax + 0x3c], edi
je 0x55b71a
mov ecx, dword [eax + 8]
lea edx, [esp + 0x1c]
push ecx
push 0xc862
push edx
call fcn.004117b0
mov eax, dword [esp + 0x20]
add esp, 0xc
mov ecx, dword [eax + 0x48]
push eax
mov dword [esp + 0x28], ecx
lea ecx, [esp + 0x24]
call sub.MFC42u.DLL_CString::operator_2
lea eax, [esp + 0x1c]
mov ecx, esi
push eax
mov dword [esp + 0x2c], ebx
call fcn.0055bed0
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x54]
sub ecx, 0x70
dec eax
mov dword [esp + 0x10], ecx
cmp eax, edi
mov dword [esp + 0x54], eax
ja 0x55b6c9
lea ecx, [esp + 0x1c]
mov byte [esp + 0x48], bl
call fcn.0055b850
mov ecx, dword [esp + 0x40]
pop edi
mov eax, ebp
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x3c
ret 8