Function at 0x4519aa
Capabilities:
Access peb ldr_data
Contain obfuscated stackstrings
Get process heap flags
Get process heap force flags

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x505a6a
mov eax, dword fs:[0]
push eax
push ecx
push ecx
push ebx
push esi
mov eax, dword [0x570074]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x10], esi
mov dword [ebp - 4], 0x12
lea ecx, [esi + 0x58]
mov dword [ebp - 0x14], ecx
mov byte [ebp - 4], 0x12
mov ecx, dword [ecx]
push 0x10
pop ebx
sub ecx, ebx
call fcn.0040cf54
mov byte [ebp - 4], 0x11
lea ecx, [esi + 0x54]
mov dword [ebp - 0x14], ecx
mov byte [ebp - 4], 0x11
mov ecx, dword [ecx]
sub ecx, ebx
call fcn.0040cf54
mov byte [ebp - 4], bl
lea ecx, [esi + 0x50]
mov dword [ebp - 0x14], ecx
mov byte [ebp - 4], bl
mov ecx, dword [ecx]
sub ecx, ebx
call fcn.0040cf54
mov byte [ebp - 4], 0xf
lea ecx, [esi + 0x4c]
mov dword [ebp - 0x14], ecx
mov byte [ebp - 4], 0xf
mov ecx, dword [ecx]
sub ecx, ebx
call fcn.0040cf54
mov byte [ebp - 4], 0xe
lea ecx, [esi + 0x48]
mov dword [ebp - 0x14], ecx
mov byte [ebp - 4], 0xe
mov ecx, dword [ecx]
sub ecx, ebx
call fcn.0040cf54
mov byte [ebp - 4], 0xd
lea ecx, [esi + 0x40]
mov dword [ebp - 0x14], ecx
mov byte [ebp - 4], 0xd
mov ecx, dword [ecx]
sub ecx, ebx
call fcn.0040cf54
mov byte [ebp - 4], 0xc
lea ecx, [esi + 0x3c]
mov dword [ebp - 0x14], ecx
mov byte [ebp - 4], 0xc
mov ecx, dword [ecx]
sub ecx, ebx
call fcn.0040cf54
mov byte [ebp - 4], 0xb
lea ecx, [esi + 0x38]
mov dword [ebp - 0x14], ecx
mov byte [ebp - 4], 0xb
mov ecx, dword [ecx]
sub ecx, ebx
call fcn.0040cf54
mov byte [ebp - 4], 0xa
lea ecx, [esi + 0x34]
mov dword [ebp - 0x14], ecx
mov byte [ebp - 4], 0xa
mov ecx, dword [ecx]
sub ecx, ebx
call fcn.0040cf54
mov byte [ebp - 4], 9
lea ecx, [esi + 0x30]
mov dword [ebp - 0x14], ecx
mov byte [ebp - 4], 9
mov ecx, dword [ecx]
sub ecx, ebx
call fcn.0040cf54
mov byte [ebp - 4], 8
lea ecx, [esi + 0x24]
mov dword [ebp - 0x14], ecx
mov byte [ebp - 4], 8
mov ecx, dword [ecx]
sub ecx, ebx
call fcn.0040cf54
mov byte [ebp - 4], 7
lea ecx, [esi + 0x20]
mov dword [ebp - 0x14], ecx
mov byte [ebp - 4], 7
mov ecx, dword [ecx]
sub ecx, ebx
call fcn.0040cf54
mov byte [ebp - 4], 6
lea ecx, [esi + 0x1c]
mov dword [ebp - 0x14], ecx
mov byte [ebp - 4], 6
mov ecx, dword [ecx]
sub ecx, ebx
call fcn.0040cf54
mov byte [ebp - 4], 5
lea ecx, [esi + 0x18]
mov dword [ebp - 0x14], ecx
mov byte [ebp - 4], 5
mov ecx, dword [ecx]
sub ecx, ebx
call fcn.0040cf54
mov byte [ebp - 4], 4
lea ecx, [esi + 0x14]
mov dword [ebp - 0x14], ecx
mov byte [ebp - 4], 4
mov ecx, dword [ecx]
sub ecx, ebx
call fcn.0040cf54
mov byte [ebp - 4], 3
lea ecx, [esi + 0x10]
mov dword [ebp - 0x14], ecx
mov byte [ebp - 4], 3
mov ecx, dword [ecx]
sub ecx, ebx
call fcn.0040cf54
mov byte [ebp - 4], 2
lea ecx, [esi + 0xc]
mov dword [ebp - 0x14], ecx
mov byte [ebp - 4], 2
mov ecx, dword [ecx]
sub ecx, ebx
call fcn.0040cf54
mov byte [ebp - 4], 1
lea ecx, [esi + 8]
mov dword [ebp - 0x14], ecx
mov byte [ebp - 4], 1
mov ecx, dword [ecx]
sub ecx, ebx
call fcn.0040cf54
mov byte [ebp - 4], 0
lea ecx, [esi + 4]
mov dword [ebp - 0x14], ecx
mov byte [ebp - 4], 0
mov ecx, dword [ecx]
sub ecx, ebx
call fcn.0040cf54
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x14], esi
or dword [ebp - 4], 0xffffffff
mov ecx, dword [esi]
sub ecx, ebx
call fcn.0040cf54
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
mov esp, ebp
pop ebp
ret