Function at 0x4ebc70
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x69d5dc
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push ebp
xor ebp, ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x10], esi
mov dword [esi + 4], ebp
mov dword [esi + 8], ebp
mov dword [esi + 0xc], ebp
mov dword [esi + 0x10], ebp
mov dword [esi + 0x14], ebp
mov dword [esi + 0x18], ebp
mov dword [esi + 0x1c], ebp
mov dword [esi + 0x20], 1
mov dword [esi + 0x24], ebp
mov dword [esi], 0x6af594
mov dword [esp + 0x1c], ebp
mov dword [esi + 0x2c], ebp
mov dword [esi + 0x28], ebp
mov dword [esi + 0x30], ebp
mov dword [esi + 0x34], ebp
lea ebx, [esi + 0x38]
mov ecx, ebx
mov byte [esp + 0x1c], 1
call fcn.005167e0
lea ecx, [esi + 0x50c]
mov byte [esp + 0x1c], 2
call fcn.005167e0
push fcn.00516950
push fcn.005167e0
push 9
push 0x4d4
lea eax, [esi + 0x9f0]
push eax
mov byte [esp + 0x30], 3
call fcn.005b9dbb
push fcn.00516950
push fcn.005167e0
push 0xa
push 0x4d4
lea ecx, [esi + 0x3564]
push ecx
mov byte [esp + 0x30], 4
call fcn.005b9dbb
push fcn.00516950
push fcn.005167e0
push 9
push 0x4d4
lea edx, [esi + 0x65ac]
push edx
mov byte [esp + 0x30], 5
call fcn.005b9dbb
push fcn.00516950
push fcn.005167e0
push 2
push 0x4d4
lea eax, [esi + 0x9120]
push eax
mov byte [esp + 0x30], 6
call fcn.005b9dbb
push fcn.00516950
push fcn.005167e0
push 0x10
push 0x4d4
lea ecx, [esi + 0x9ac8]
push ecx
mov byte [esp + 0x30], 7
call fcn.005b9dbb
push fcn.0051b2f0
mov byte [esp + 0x20], 8
push fcn.0051a260
push 4
push 0xf50
lea edx, [esi + 0xe808]
push edx
call fcn.005b9dbb
push fcn.0051b2f0
push fcn.0051a260
push 3
push 0xf50
lea eax, [esi + 0x12548]
push eax
mov byte [esp + 0x30], 9
call fcn.005b9dbb
push fcn.0051b2f0
push fcn.0051a260
push 1
push 0xf50
lea ecx, [esi + 0x15338]
push ecx
mov byte [esp + 0x30], 0xa
call fcn.005b9dbb
push fcn.0041dfc0
push 0x41d9e0
push 5
push 0x10
lea edx, [esi + 0x16288]
push edx
mov byte [esp + 0x30], 0xb
call fcn.005b9dbb
mov dword [esi + 0x20], ebp
mov eax, dword [0x6f355c]
add eax, 0xfffffeec
mov ecx, esi
mov byte [esp + 0x1c], 0xc
mov dword [esi + 4], eax
mov dword [esi + 8], ebp
mov dword [esi + 0xc], 0xfa
mov dword [esi + 0x10], 0x1ce
call fcn.004eb800
push ebp
push ebp
push ebp
push ebp
push ebp
push ebp
push ebp
push ebp
push 0x3f800000
push ebp
push 0x3f400000
push 0x3f000000
push 0x3f800000
push ebp
push 0x3f000000
push 0x3e800000
push 0x3f800000
push ebp
push 0x3e800000
xor eax, eax
push ebp
mov ecx, 0x40
mov edi, 0x21eacb0
rep stosd dword es:[edi], eax
mov ecx, 0x40
mov edi, 0x21eaba8
rep stosd dword es:[edi], eax
mov edi, 1
push edi
push 0x20
push 0x80
push str.talk1_close_button.tga
push ebp
push 0x16
push 0x16
mov dword [0x21eaca8], ebp
mov dword [0x21eadb0], 0xffffffff
push 0x20
mov ecx, dword [esi + 8]
mov edx, dword [esi + 4]
push 0x20
push edi
push 0xe4
push ecx
push edx
mov ecx, ebx
call fcn.00517f80
push ebp
push ebp
push ebp
push ebp
push ebp
push ebp
push ebp
push ebp
push 0x3f800000
push ebp
push 0x3f400000
push 0x3f000000
push 0x3f800000
push ebp
push 0x3f000000
push 0x3e800000
push 0x3f800000
push ebp
push 0x3e800000
push ebp
push edi
push 0x20
push 0x80
push str.talk1_close_button.tga
push ebp
push 0x16
push 0x16
push 0x20
push 0x20
push ebp
push ebp
push ebp
push ebp
lea ecx, [esi + 0x50c]
call fcn.00517f80
cmp dword [0x6f3558], edi
jne 0x4ebff4
mov eax, 0x11
mov dword [0x6f4b78], 0x1e
mov dword [0x6f4b7c], eax
mov dword [0x6f4b80], 0x10
mov dword [0x6f4b84], 0x13
mov dword [0x6f4b88], 0x2d
mov dword [0x6f4b8c], 0x20
mov dword [0x6f4b90], 0x1f
mov dword [0x6f4b94], 0x12
mov dword [0x6f4b98], eax
mov dword [0x6f4b9c], 0x39
mov dword [0x6f4ba0], 0x2e
mov dword [0x6f4ba4], 0x25
mov dword [0x6f4ba8], 0x16
mov dword [0x6f4bac], 0x30
mov dword [0x6f4bb0], 0x2f
mov dword [0x6f4bb4], 0x17
mov dword [0x6f4bb8], 0x24
mov dword [0x6f4bbc], 0x22
mov dword [0x6f4bc0], 0x32
mov dword [0x6f4bc4], edi
mov ecx, dword [esp + 0x14]
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret