Function at 0x4e7250
Capabilities:
Access peb ldr_data
Get ntdll base address

Disassembly:
push 0xffffffffffffffff
push 0x69f4ec
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebx
push ebp
xor ebp, ebp
push esi
mov esi, ecx
push edi
mov dword [esp + 0x10], esi
mov dword [esi + 4], ebp
mov dword [esi + 8], ebp
mov dword [esi + 0xc], ebp
mov dword [esi + 0x10], ebp
mov dword [esi + 0x14], ebp
mov dword [esi + 0x18], ebp
mov dword [esi + 0x1c], ebp
mov dword [esi + 0x20], 1
mov dword [esi + 0x24], ebp
mov dword [esi], 0x6b0470
mov dword [esp + 0x1c], ebp
mov dword [esi + 0x2c], ebp
mov dword [esi + 0x28], ebp
mov dword [esi + 0x30], ebp
mov dword [esi + 0x34], ebp
lea ebx, [esi + 0x38]
mov ecx, ebx
mov byte [esp + 0x1c], 1
call fcn.00511260
lea ecx, [esi + 0x50c]
mov byte [esp + 0x1c], 2
call fcn.00511260
push fcn.005113d0
push fcn.00511260
push 9
push 0x4d4
lea eax, [esi + 0x9f0]
push eax
mov byte [esp + 0x30], 3
call fcn.005bbc4b
push fcn.005113d0
push fcn.00511260
push 0xa
push 0x4d4
lea ecx, [esi + 0x3564]
push ecx
mov byte [esp + 0x30], 4
call fcn.005bbc4b
push fcn.005113d0
push fcn.00511260
push 9
push 0x4d4
lea edx, [esi + 0x65ac]
push edx
mov byte [esp + 0x30], 5
call fcn.005bbc4b
push fcn.005113d0
push fcn.00511260
push 2
push 0x4d4
lea eax, [esi + 0x9120]
push eax
mov byte [esp + 0x30], 6
call fcn.005bbc4b
push fcn.005113d0
push fcn.00511260
push 0x10
push 0x4d4
lea ecx, [esi + 0x9ac8]
push ecx
mov byte [esp + 0x30], 7
call fcn.005bbc4b
push fcn.00515fc0
mov byte [esp + 0x20], 8
push fcn.00514f30
push 4
push 0xf50
lea edx, [esi + 0xe808]
push edx
call fcn.005bbc4b
push fcn.00515fc0
push fcn.00514f30
push 3
push 0xf50
lea eax, [esi + 0x12548]
push eax
mov byte [esp + 0x30], 9
call fcn.005bbc4b
push fcn.00515fc0
push fcn.00514f30
push 1
push 0xf50
lea ecx, [esi + 0x15338]
push ecx
mov byte [esp + 0x30], 0xa
call fcn.005bbc4b
push fcn.0041e5d0
push 0x41dff0
push 5
push 0x10
lea edx, [esi + 0x16288]
push edx
mov byte [esp + 0x30], 0xb
call fcn.005bbc4b
mov dword [esi + 0x20], ebp
mov eax, dword [0x6f355c]
add eax, 0xfffffeec
mov ecx, esi
mov byte [esp + 0x1c], 0xc
mov dword [esi + 4], eax
mov dword [esi + 8], ebp
mov dword [esi + 0xc], 0xfa
mov dword [esi + 0x10], 0x1ce
call fcn.004e6de0
push ebp
push ebp
push ebp
push ebp
push ebp
push ebp
push ebp
push ebp
push 0x3f800000
push ebp
push 0x3f400000
push 0x3f000000
push 0x3f800000
push ebp
push 0x3f000000
push 0x3e800000
push 0x3f800000
push ebp
push 0x3e800000
push ebp
push 1
push 0x20
push 0x80
push str.talk1_close_button.tga
push ebp
push 0x16
xor eax, eax
mov ecx, 0x40
mov edi, 0x21ecfe0
rep stosd dword es:[edi], eax
push 0x16
mov ecx, 0x40
mov edi, 0x21eced8
push 0x20
rep stosd dword es:[edi], eax
mov dword [0x21ecfd8], ebp
mov dword [0x21ed0e0], 0xffffffff
push 0x20
mov ecx, dword [esi + 8]
mov edx, dword [esi + 4]
push 1
push 0xe4
push ecx
push edx
mov ecx, ebx
call fcn.00512a00
push ebp
push ebp
push ebp
push ebp
push ebp
push ebp
push ebp
push ebp
push 0x3f800000
push ebp
push 0x3f400000
push 0x3f000000
push 0x3f800000
push ebp
push 0x3f000000
push 0x3e800000
push 0x3f800000
push ebp
push 0x3e800000
push ebp
push 1
push 0x20
push 0x80
push str.talk1_close_button.tga
push ebp
push 0x16
push 0x16
push 0x20
push 0x20
push ebp
push ebp
push ebp
push ebp
lea ecx, [esi + 0x50c]
call fcn.00512a00
mov eax, dword [0x6f3558]
cmp eax, 1
je 0x4e751a
cmp eax, 3
jne 0x4e75dd
mov eax, 0x11
mov dword [0x6f4b78], 0x1e
mov dword [0x6f4b7c], eax
mov dword [0x6f4b80], 0x10
mov dword [0x6f4b84], 0x13
mov dword [0x6f4b88], 0x2d
mov dword [0x6f4b8c], 0x20
mov dword [0x6f4b90], 0x1f
mov dword [0x6f4b94], 0x12
mov dword [0x6f4b98], eax
mov dword [0x6f4b9c], 0x39
mov dword [0x6f4ba0], 0x2e
mov dword [0x6f4ba4], 0x25
mov dword [0x6f4ba8], 0x16
mov dword [0x6f4bac], 0x30
mov dword [0x6f4bb0], 0x2f
mov dword [0x6f4bb4], 0x17
mov dword [0x6f4bb8], 0x24
mov dword [0x6f4bbc], 0x22
mov dword [0x6f4bc0], 0x32
mov dword [0x6f4bc4], 1
mov ecx, dword [esp + 0x14]
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x10
ret