Function at 0x4c67f4
Capabilities:
Acquire debug privileges

Disassembly:
push ebp
mov ebp, esp
mov ecx, 7
push 0
push 0
dec ecx
jne 0x4c67fc
push ebx
xor eax, eax
push ebp
push 0x4c6ab9
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, 0x4c6ac8
call fcn.004601d4
mov eax, 0x4e42d4
call fcn.004069a8
mov eax, 0x4e42dc
call fcn.004069a8
mov eax, 0x4e42e0
call fcn.004069a8
mov dl, 1
mov eax, dword [0x45e298]
call fcn.0045e450
mov dword [0x4e42c4], eax
mov dl, 1
mov eax, dword [0x43059c]
call fcn.0043c2ac
mov dword [ebp - 8], eax
mov dl, 1
mov eax, dword [0x4318cc]
call fcn.00404ee0
mov dword [0x4e42cc], eax
mov eax, dword [0x4e42c4]
mov edx, dword [eax + 0xc]
lea eax, [ebp - 0x10]
mov ecx, 0x4c6af8
call fcn.004075a8
mov ecx, dword [ebp - 0x10]
mov dl, 1
mov eax, dword [0x447994]
call fcn.00447d48
mov dword [0x4e42c8], eax
lea edx, [ebp - 0x14]
mov eax, dword [0x4e1c38]
call fcn.00420564
mov edx, dword [ebp - 0x14]
mov eax, dword [0x4e42cc]
call fcn.0043cb74
call fcn.004047a8
mov eax, 0xfa
call fcn.004047d0
mov dword [ebp - 0xc], eax
mov eax, dword [0x4e42cc]
mov edx, dword [eax]
call dword [edx]
push edx
push eax
mov eax, dword [0x4e42cc]
call fcn.0043c32c
lea edx, [ebp - 0xc]
mov ecx, 4
mov eax, dword [0x4e42cc]
call fcn.0043c5c0
push 0x4c6b2c
lea eax, [ebp - 0x18]
push eax
mov ecx, 0x4c6b60
mov edx, 0x4c6b74
mov eax, dword [0x4e42c8]
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x18]
mov eax, 0x4e42d0
call fcn.00406d58
push 0x4c6b88
lea eax, [ebp - 0x1c]
push eax
mov edx, 0x4c6b74
mov ecx, 0x4c6c20
mov eax, dword [0x4e42c8]
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x1c]
mov eax, 0x4e42d4
call fcn.00406d58
lea edx, [ebp - 0x20]
mov eax, dword [0x4e42d4]
call fcn.0041a8d8
mov edx, dword [ebp - 0x20]
mov eax, 0x4e42d8
call fcn.00406d58
mov eax, 0x4e42dc
mov ecx, 0x4c6c3c
mov edx, dword [0x4e42d8]
call fcn.004075a8
push 0x4c6c60
lea eax, [ebp - 0x24]
push eax
mov edx, 0x4c6b74
mov ecx, 0x4c6cec
mov eax, dword [0x4e42c8]
mov ebx, dword [eax]
call dword [ebx + 4]
mov edx, dword [ebp - 0x24]
mov eax, 0x4e42e0
call fcn.00406d58
mov eax, dword [0x4e42c4]
mov edx, dword [eax + 4]
lea eax, [ebp - 4]
mov ecx, 0x4c6d04
call fcn.004075a8
mov dl, 1
mov eax, dword [ebp - 4]
call fcn.0041a598
test al, al
je 0x4c6a35
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x68]
movzx eax, byte [0x4c6d38]
push eax
lea eax, [ebp - 0x28]
push eax
lea edx, [ebp - 0x2c]
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov eax, dword [ebp - 0x2c]
mov ecx, 0x4c6d48
mov edx, 0x4c6d80
call fcn.004200d4
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
movzx eax, byte [0x4c6d38]
push eax
lea eax, [ebp - 0x30]
push eax
lea edx, [ebp - 0x34]
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x1c]
mov eax, dword [ebp - 0x34]
mov ecx, 0x4c6d48
mov edx, 0x4c6db8
call fcn.004200d4
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 0x7c]
lea edx, [ebp - 0x38]
xor eax, eax
call fcn.00404748
mov eax, dword [ebp - 0x38]
lea edx, [ebp - 4]
call fcn.0041a974
mov edx, 0x4c6df0
mov eax, dword [ebp - 4]
call fcn.00419a4c
test al, al
je 0x4c6a6c
call fcn.004c5ff4
mov dl, 1
mov eax, dword [0x4c5350]
call fcn.00442f08
mov edx, 0x4c6e18
mov eax, dword [ebp - 4]
call fcn.00419a4c
test al, al
je 0x4c6a89
mov dl, 1
mov eax, dword [0x4c5bc8]
call fcn.00442f08
mov eax, dword [ebp - 8]
xor edx, edx
mov dword [ebp - 8], edx
call fcn.00404f10
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4c6ac0
lea eax, [ebp - 0x38]
mov edx, 0xb
call fcn.00406a08
lea eax, [ebp - 4]
call fcn.004069a8
ret