Function at 0x494200
Capabilities:
Access peb ldr_data
Get ntdll base address
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x4ec63d
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push ebp
push esi
push edi
mov eax, dword [0x670f1c]
xor eax, esp
push eax
lea eax, [esp + 0x18]
mov dword fs:[0], eax
mov esi, ecx
mov dword [esp + 0x14], esi
mov dword [esi], vtable.CWzSysInfo.0
call fcn.004b978a
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x49424b
push 0x80004005
call fcn.004069a0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esi + 4], eax
mov dword [esp + 0x20], 0
call fcn.004b978a
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x49427c
push 0x80004005
call fcn.004069a0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esi + 8], eax
mov byte [esp + 0x20], 1
call fcn.004b978a
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4942aa
push 0x80004005
call fcn.004069a0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esi + 0xc], eax
mov byte [esp + 0x20], 2
call fcn.004b978a
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4942d8
push 0x80004005
call fcn.004069a0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esi + 0x10], eax
mov byte [esp + 0x20], 3
call fcn.004b978a
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x494306
push 0x80004005
call fcn.004069a0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esi + 0x14], eax
mov byte [esp + 0x20], 4
call fcn.004b978a
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x494334
push 0x80004005
call fcn.004069a0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esi + 0x18], eax
mov byte [esp + 0x20], 5
call fcn.004b978a
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x494362
push 0x80004005
call fcn.004069a0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esi + 0x1c], eax
mov byte [esp + 0x20], 6
call fcn.004b978a
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x494390
push 0x80004005
call fcn.004069a0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esi + 0x20], eax
mov byte [esp + 0x20], 7
call fcn.004b978a
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4943be
push 0x80004005
call fcn.004069a0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esi + 0x24], eax
mov byte [esp + 0x20], 8
call fcn.004b978a
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4943ec
push 0x80004005
call fcn.004069a0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esi + 0x28], eax
mov byte [esp + 0x20], 9
call fcn.004b978a
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x49441a
push 0x80004005
call fcn.004069a0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esi + 0x2c], eax
mov byte [esp + 0x20], 0xa
call fcn.004b978a
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x494448
push 0x80004005
call fcn.004069a0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esi + 0x30], eax
mov byte [esp + 0x20], 0xb
call fcn.004b978a
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x494476
push 0x80004005
call fcn.004069a0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esi + 0x34], eax
mov byte [esp + 0x20], 0xc
call fcn.004b978a
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4944a4
push 0x80004005
call fcn.004069a0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esi + 0x38], eax
mov byte [esp + 0x20], 0xd
call fcn.004b978a
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4944d2
push 0x80004005
call fcn.004069a0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esi + 0x3c], eax
mov byte [esp + 0x20], 0xe
call fcn.004b978a
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x494500
push 0x80004005
call fcn.004069a0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esi + 0x40], eax
mov byte [esp + 0x20], 0xf
lea ebp, [esi + 0x44]
call fcn.004b978a
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x494531
push 0x80004005
call fcn.004069a0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebp], eax
mov byte [esp + 0x20], 0x10
lea ebx, [esi + 0x48]
call fcn.004b978a
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x494562
push 0x80004005
call fcn.004069a0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [ebx], eax
mov byte [esp + 0x20], 0x11
lea edi, [esi + 0x4c]
call fcn.004b978a
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x494592
push 0x80004005
call fcn.004069a0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [edi], eax
mov byte [esp + 0x20], 0x12
call fcn.004b978a
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4945bf
push 0x80004005
call fcn.004069a0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esi + 0x19c], eax
mov byte [esp + 0x20], 0x13
call fcn.004b978a
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x4945f0
push 0x80004005
call fcn.004069a0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
add eax, 0x10
mov dword [esi + 0x1a0], eax
push 0
push 0x508190
lea ecx, [esi + 4]
mov byte [esp + 0x28], 0x14
call fcn.00406c90
push 0
push 0x508194
lea ecx, [esi + 8]
call fcn.00406c90
push 0
push 0x508198
lea ecx, [esi + 0xc]
call fcn.00406c90
push 0
push 0x50819c
lea ecx, [esi + 0x10]
call fcn.00406c90
push 0
push 0x5081a0
lea ecx, [esi + 0x14]
call fcn.00406c90
push 0
push 0x5081a4
lea ecx, [esi + 0x18]
call fcn.00406c90
push 0
push 0x5081a8
lea ecx, [esi + 0x1c]
call fcn.00406c90
push 0
push 0x5081ac
lea ecx, [esi + 0x20]
call fcn.00406c90
push 0
push 0x5081b0
lea ecx, [esi + 0x24]
call fcn.00406c90
push 0
push 0x5081b4
lea ecx, [esi + 0x28]
call fcn.00406c90
push 0
push 0x5081b8
lea ecx, [esi + 0x2c]
call fcn.00406c90
push 0
push 0x5081bc
lea ecx, [esi + 0x30]
call fcn.00406c90
push 0
push 0x5081c0
lea ecx, [esi + 0x34]
call fcn.00406c90
push 0
push 0x5081c4
lea ecx, [esi + 0x38]
call fcn.00406c90
push 0
push 0x5081c8
lea ecx, [esi + 0x3c]
call fcn.00406c90
push 0
push 0x5081cc
lea ecx, [esi + 0x40]
call fcn.00406c90
push 0
push 0x5081d0
mov ecx, ebp
call fcn.00406c90
push 0
push 0x5081d4
mov ecx, ebx
call fcn.00406c90
push 0
push 0x5081d8
mov ecx, edi
call fcn.00406c90
mov eax, esi
mov ecx, dword [esp + 0x18]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret