Function at 0x4ee3f0
Capabilities:
Access peb ldr_data
Get process heap flags
Get process heap force flags

Disassembly:
push 0xffffffffffffffff
push 0x6b1caa
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
xor ebx, ebx
push ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x10], esi
mov dword [esi + 4], ebx
mov dword [esi + 8], ebx
mov dword [esi + 0xc], ebx
mov dword [esi + 0x10], ebx
mov dword [esi + 0x14], ebx
mov dword [esi + 0x18], ebx
mov dword [esi + 0x1c], ebx
mov dword [esi + 0x20], 1
mov dword [esi + 0x24], ebx
mov dword [esi + 0x28], ebx
mov dword [esi], 0x6c3998
mov dword [esp + 0x1c], ebx
mov dword [esi + 0x34], ebx
mov dword [esi + 0x30], ebx
mov dword [esi + 0x38], ebx
mov dword [esi + 0x3c], ebx
mov dword [esi + 0x44], ebx
mov dword [esi + 0x40], ebx
mov dword [esi + 0x48], ebx
mov dword [esi + 0x4c], ebx
mov dword [esi + 0x54], ebx
mov dword [esi + 0x50], ebx
mov dword [esi + 0x58], ebx
mov dword [esi + 0x5c], ebx
lea ebp, [esi + 0x60]
mov ecx, ebp
mov byte [esp + 0x1c], 3
call fcn.00527000
push fcn.0052b980
push fcn.0052b880
push 2
push 0x125c
lea eax, [esi + 0x644]
push eax
mov byte [esp + 0x30], 4
call fcn.005ce6bb
push fcn.00527170
push fcn.00527000
push 2
push 0x5d8
lea ecx, [esi + 0x2b00]
push ecx
mov byte [esp + 0x30], 5
call fcn.005ce6bb
lea ecx, [esi + 0x36b0]
mov byte [esp + 0x1c], 6
call fcn.00527000
lea ecx, [esi + 0x3c88]
mov byte [esp + 0x1c], 7
call fcn.00527000
lea ecx, [esi + 0x4260]
mov byte [esp + 0x1c], 8
call fcn.00527000
lea ecx, [esi + 0x4838]
mov byte [esp + 0x1c], 9
call fcn.00527000
lea ecx, [esi + 0x4e10]
mov byte [esp + 0x1c], 0xa
call fcn.00527000
push fcn.00527170
mov byte [esp + 0x20], 0xb
push fcn.00527000
push 5
push 0x5d8
lea edx, [esi + 0x53e8]
push edx
call fcn.005ce6bb
push fcn.00527170
push fcn.00527000
push 3
push 0x5d8
lea eax, [esi + 0x7120]
push eax
mov byte [esp + 0x30], 0xc
call fcn.005ce6bb
lea ecx, [esi + 0x82a8]
mov byte [esp + 0x1c], 0xd
call fcn.00527000
lea ecx, [esi + 0x8880]
mov byte [esp + 0x1c], 0xe
call fcn.00527000
lea ecx, [esi + 0x8e58]
mov byte [esp + 0x1c], 0xf
call fcn.00527000
lea ecx, [esi + 0x9430]
mov byte [esp + 0x1c], 0x10
call fcn.00527000
lea ecx, [esi + 0x9a08]
mov byte [esp + 0x1c], 0x11
call fcn.00527000
lea ecx, [esi + 0x9fe0]
mov byte [esp + 0x1c], 0x12
call fcn.00527000
lea ecx, [esi + 0xa5b8]
mov byte [esp + 0x1c], 0x13
call fcn.00527000
mov dword [esi + 0xac00], ebx
mov dword [esi + 0xabfc], ebx
mov dword [esi + 0xac04], ebx
mov dword [esi + 0xac08], ebx
mov dword [esi + 0xac10], ebx
mov dword [esi + 0xac0c], ebx
mov dword [esi + 0xac14], ebx
mov dword [esi + 0xac18], ebx
lea ecx, [esi + 0xac20]
mov byte [esp + 0x1c], 0x16
call fcn.00527000
lea ecx, [esi + 0xb1f8]
mov byte [esp + 0x1c], 0x17
call fcn.00527000
lea ecx, [esi + 0xb7d0]
mov byte [esp + 0x1c], 0x18
call fcn.00527000
lea ecx, [esi + 0xbda8]
mov byte [esp + 0x1c], 0x19
call fcn.00527000
lea ecx, [esi + 0xc380]
mov byte [esp + 0x1c], 0x1a
call fcn.00527000
mov dword [esi + 0x2c], ebx
mov dword [esi + 0x20], ebx
mov ecx, dword [0x70859c]
add ecx, 0xfffffea2
mov byte [esp + 0x1c], 0x1b
mov dword [esi + 4], ecx
mov dword [esi + 8], ebx
mov dword [esi + 0xc], 0x14a
mov dword [esi + 0x10], 0x200
mov byte [esi + 0x638], bl
mov dword [esi + 0x640], ebx
mov dword [esi + 0x63c], ebx
mov dword [esi + 0xab90], ebx
mov dword [esi + 0xab94], ebx
mov dword [esi + 0xab98], 0xffffffff
mov dword [esi + 0x2afc], ebx
mov dword [esi + 0xabf4], ebx
mov dword [esi + 0xabf8], ebx
xor edx, edx
lea eax, [esi + 0xab9c]
mov dword [eax], edx
mov dword [eax + 4], edx
mov dword [eax + 8], edx
mov dword [eax + 0xc], edx
mov dword [eax + 0x10], edx
mov byte [eax + 0x14], dl
xor eax, eax
mov ecx, 0xc
lea edi, [esi + 0xabb1]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
mov edx, dword [esi]
mov ecx, esi
mov dword [esi + 0xabe4], ebx
mov dword [esi + 0xabe8], ebx
mov dword [esi + 0xabec], ebx
mov dword [esi + 0xabf0], ebx
call dword [edx + 0xc]
mov ecx, esi
call fcn.00526820
push ebx
fld dword [0x70a284]
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push 0x3f800000
push ebx
push 0x3f400000
push 0x3f000000
push 0x3f800000
push ebx
push 0x3f000000
push 0x3e800000
push 0x3f800000
push ebx
push 0x3e800000
push ebx
push 1
push 0x20
push 0x80
push str.talk1_close_button.tga
push ebx
push 0x16
push 0x16
push 0x20
push 0x20
call fcn.005cd414
fld dword [0x70a280]
push eax
call fcn.005cd414
mov ecx, dword [esi + 4]
push eax
mov eax, dword [esi + 8]
push eax
push ecx
mov ecx, ebp
call fcn.00528830
pop edi
mov byte [esi + 0xac1c], 1
mov eax, esi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 4]
mov dword fs:[0], ecx
add esp, 0x10
ret