Function at 0x443bb0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x4dc
push ebx
push ebp
mov ebp, ecx
push esi
mov ecx, dword [esp + 0x4ec]
push edi
xor edx, edx
mov dword [esp + 0x44], str.MMB_CLOSE
lea eax, [ecx + ecx*4]
mov dword [esp + 0x48], str.MMB_AUTO
shl eax, 8
sub eax, ecx
mov ecx, 0x3c3
mov dword [esp + 0x4c], str.MMB_SKIP
mov dword [esp + 0x50], str.MMB_JUMP
lea eax, [eax + eax*4]
mov dword [esp + 0x54], str.MMB_RETURN
mov dword [esp + 0x58], str.MMB_BACKLOG
mov dword [esp + 0x5c], str.MMB_SYSTEM
lea esi, [ebp + eax*8]
xor eax, eax
mov dword [esp + 0x60], str.MMB_SYSTEM2
mov dword [esp + 0x64], str.MMB_VOICE
lea edi, [esi + 0x9e94d3]
mov dword [esi + 0x9e94cb], edx
rep stosd dword es:[edi], eax
lea eax, [esi + 0x9ea3f1]
xor ecx, ecx
lea ebx, [esi + 0x9ea3df]
lea edi, [esi + 0x9ea411]
mov dword [eax], ecx
mov dword [esp + 0x68], str.MMB_SAVE
mov dword [esp + 0x6c], str.MMB_LOAD
mov dword [esp + 0x70], str.MMB_QSAVE
mov dword [eax + 4], ecx
mov dword [esp + 0x74], str.MMB_QLOAD
mov dword [esp + 0x78], str.MMB_MENU
mov dword [esp + 0x7c], str.MMB_TITLE
mov dword [eax + 8], ecx
mov dword [esp + 0x80], str.MMB_EXIT
mov dword [esp + 0x84], str.MMB_SCENE_BACK
mov dword [esp + 0x88], 0x200204
mov dword [eax + 0xc], ecx
mov word [ebx], dx
mov word [esi + 0x9ea3e5], dx
mov word [esi + 0x9ea3e7], dx
mov word [esi + 0x9ea3e9], dx
mov word [esi + 0x9ea3eb], dx
mov word [esi + 0x9ea3ed], dx
mov word [esi + 0x9ea3ef], dx
mov eax, dword [ebp + 0x5a6f04]
mov dword [esp + 0x8c], 0x200102
mov dword [esi + 0x9ea405], eax
mov ecx, dword [ebp + 0x5a6f04]
mov dword [esi + 0x9ea409], ecx
mov ecx, 0x3c3
xor eax, eax
mov dword [esi + 0x9ea40d], edx
rep stosd dword es:[edi], eax
lea eax, [esi + 0x9eb32f]
xor ecx, ecx
mov dword [esp + 0x90], 0x200101
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
mov word [esi + 0x9eb31d], dx
mov word [esi + 0x9eb323], dx
mov word [esi + 0x9eb325], dx
lea eax, [esi + 0x9eb32b]
mov word [esi + 0x9eb327], dx
mov word [esi + 0x9eb329], dx
mov dword [esp + 0x1c], eax
mov word [eax], dx
lea eax, [esi + 0x9eb32d]
mov dword [esp + 0x18], eax
mov word [eax], dx
mov edx, dword [ebp + 0x5a6f04]
mov dword [esi + 0x9eb343], edx
mov eax, dword [ebp + 0x5a6f04]
mov dword [esi + 0x9eb347], eax
mov eax, 0x200304
lea edi, [ebp + 0x2a9e62]
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], eax
lea eax, [esi + 0x9e94cf]
mov ecx, edi
push eax
push str.MODE_MENU_TYPE01
push str.MAPMENU03
mov dword [esp + 0xa0], 0x200103
mov dword [esp + 0xa4], 0x200104
mov dword [esp + 0xa8], 0x200303
mov dword [esp + 0xb4], 0x200201
mov dword [esp + 0xb8], 0x200301
mov dword [esp + 0xbc], 0x200302
mov dword [esp + 0xc0], 0x200202
mov dword [esp + 0xc4], 0x200203
mov dword [esp + 0xc8], 0x200305
mov dword [esp + 0xcc], 0x2002fe
mov dword [esp + 0xd0], 0x2002ff
mov dword [esp + 0xd4], 0x2002fb
call fcn.00407dc0
push ebx
push str.MODE_MENU_TYPE01
push str.MAPMENU03
mov ecx, edi
call fcn.00407d60
lea eax, [esi + 0x9ea3ed]
mov ecx, edi
push eax
push str.MMB_WIDTH01
push str.MAPMENU03
call fcn.00407d60
lea edi, [esi + 0x9ea3ef]
lea ecx, [ebp + 0x2a9e62]
push edi
push str.MMB_HEIGHT01
push str.MAPMENU03
call fcn.00407d60
xor eax, eax
mov ax, word [ebx]
dec eax
cmp eax, 3
ja case.default.0x443fbd
jmp dword [eax*4 + 0x444704]
xor eax, eax
mov word [esi + 0x9ea3e5], ax
mov word [esi + 0x9ea3e9], ax
mov word [esi + 0x9ea3e7], ax
mov cx, word [edi]
neg cx
mov word [esi + 0x9ea3eb], cx
jmp 0x443f37
mov dx, word [ebp + 0x2aa7d2]
sub dx, word [esi + 0x9ea3ed]
xor eax, eax
mov word [esi + 0x9ea3e5], dx
mov word [esi + 0x9ea3e9], ax
mov cx, word [ebp + 0x2aa7d2]
mov word [esi + 0x9ea3e7], cx
jmp 0x443f30
xor eax, eax
mov word [esi + 0x9ea3e5], ax
mov dx, word [ebp + 0x2aa7d4]
sub dx, word [edi]
mov word [esi + 0x9ea3e9], dx
mov word [esi + 0x9ea3e7], ax
mov ax, word [ebp + 0x2aa7d4]
jmp 0x443f30
xor eax, eax
mov word [esi + 0x9ea3e5], ax
mov cx, word [ebp + 0x2aa7d4]
sub cx, word [edi]
mov word [esi + 0x9ea3e9], cx
mov dx, word [esi + 0x9ea3ed]
neg dx
mov word [esi + 0x9ea3e7], dx
mov word [esi + 0x9ea3eb], ax
movsx edx, word [esi + 0x9ea3e9]
xor eax, eax
xor ecx, ecx
mov ax, word [edi]
mov cx, word [esi + 0x9ea3ed]
push eax
push ecx
movsx eax, word [esi + 0x9ea3e5]
push edx
push eax
lea eax, [esi + 0x9ea3f1]
push eax
call dword [sym.imp.USER32.dll_SetRect]
lea ebx, [esi + 0x9eb31d]
lea edi, [ebp + 0x2a9e62]
push ebx
push str.MODE_MENU_TYPE02
push str.MAPMENU03
mov ecx, edi
call fcn.00407d60
mov ecx, dword [esp + 0x1c]
push ecx
push str.MMB_WIDTH02
push str.MAPMENU03
mov ecx, edi
call fcn.00407d60
mov edx, dword [esp + 0x18]
mov ecx, edi
push edx
push str.MMB_HEIGHT02
push str.MAPMENU03
call fcn.00407d60
xor eax, eax
mov ax, word [ebx]
dec eax
cmp eax, 3
ja case.default.0x443fbd
jmp dword [eax*4 + 0x444714]
xor eax, eax
mov word [esi + 0x9eb323], ax
mov word [esi + 0x9eb327], ax
mov word [esi + 0x9eb325], ax
mov eax, dword [esp + 0x18]
mov cx, word [eax]
neg cx
mov word [esi + 0x9eb329], cx
jmp 0x44408a
mov eax, dword [esp + 0x1c]
mov dx, word [ebp + 0x2aa7d2]
sub dx, word [eax]
xor eax, eax
mov word [esi + 0x9eb323], dx
mov word [esi + 0x9eb327], ax
mov cx, word [ebp + 0x2aa7d2]
mov word [esi + 0x9eb325], cx
jmp 0x444083
mov ecx, dword [esp + 0x18]
xor eax, eax
mov word [esi + 0x9eb323], ax
mov dx, word [ebp + 0x2aa7d4]
sub dx, word [ecx]
mov word [esi + 0x9eb327], dx
mov word [esi + 0x9eb325], ax
mov dx, word [ebp + 0x2aa7d4]
mov word [esi + 0x9eb329], dx
jmp 0x44408a
mov edx, dword [esp + 0x18]
xor eax, eax
mov word [esi + 0x9eb323], ax
mov cx, word [ebp + 0x2aa7d4]
sub cx, word [edx]
mov word [esi + 0x9eb327], cx
mov ecx, dword [esp + 0x1c]
mov dx, word [ecx]
neg dx
mov word [esi + 0x9eb325], dx
mov word [esi + 0x9eb329], ax
mov ecx, dword [esp + 0x18]
xor eax, eax
xor edx, edx
mov ax, word [ecx]
movsx ecx, word [esi + 0x9eb327]
push eax
mov eax, dword [esp + 0x20]
mov dx, word [eax]
lea eax, [esi + 0x9eb32f]
push edx
push ecx
movsx edx, word [esi + 0x9eb323]
push edx
push eax
call dword [sym.imp.USER32.dll_SetRect]
mov edi, dword [ebp + 0x7a0fcd]
test edi, edi
jne 0x44412b
push edi
mov edi, dword [esp + 0x4f8]
push 3
push edi
push str.sys_mode_menu_base_a
mov ecx, ebp
call fcn.004197a0
test eax, eax
je case.default.0x443fbd
lea eax, [edi + 1]
push 0
push 3
push eax
push str.sys_mode_menu_base_b
mov ecx, ebp
mov dword [esp + 0x50], eax
call fcn.004197a0
test eax, eax
je case.default.0x443fbd
lea eax, [edi + 2]
push 0
push 3
push eax
push str.sys_mode_menu_button
mov ecx, ebp
mov dword [esp + 0x48], eax
call fcn.004197a0
test eax, eax
jne 0x4441d9
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x4dc
ret 8
mov ebx, dword [sym.imp.USER32.dll_wsprintfA]
push edi
lea eax, [esp + 0xd0]
push str.sys_mode_menu_base_a_02d
push eax
call ebx
mov ecx, dword [esp + 0x500]
add esp, 0xc
lea edx, [esp + 0xcc]
push 0
push 3
push ecx
push edx
mov ecx, ebp
call fcn.004197a0
test eax, eax
je case.default.0x443fbd
push edi
lea eax, [esp + 0xd0]
push str.sys_mode_menu_base_b_02d
push eax
call ebx
mov ecx, dword [esp + 0x500]
add esp, 0xc
lea edx, [esp + 0xcc]
lea eax, [ecx + 1]
push 0
push 3
push eax
push edx
mov ecx, ebp
mov dword [esp + 0x50], eax
call fcn.004197a0
test eax, eax
je case.default.0x443fbd
push edi
lea eax, [esp + 0xd0]
push str.sys_mode_menu_button_02d
push eax
call ebx
mov ecx, dword [esp + 0x500]
add esp, 0xc
lea edx, [esp + 0xcc]
lea eax, [ecx + 2]
push 0
push 3
push eax
push edx
mov ecx, ebp
mov dword [esp + 0x48], eax
call fcn.004197a0
test eax, eax
je case.default.0x443fbd
xor eax, eax
mov dword [esp + 0x14], eax
mov ebx, dword [esp + eax + 0x44]
lea eax, [esp + 0xec]
push 0x400
push eax
push ebx
push str.MAPMENU03
lea ecx, [ebp + 0x2a9e62]
call fcn.00407ce0
test eax, eax
je 0x4443ae
mov edi, str.MMB_SCENE_BACK
mov eax, ebx
mov dl, byte [eax]
mov bl, byte [edi]
mov cl, dl
cmp dl, bl
jne 0x444238
test cl, cl
je 0x444234
mov dl, byte [eax + 1]
mov bl, byte [edi + 1]
mov cl, dl
cmp dl, bl
jne 0x444238
add eax, 2
add edi, 2
test cl, cl
jne 0x444210
xor eax, eax
jmp 0x44423d
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x44424f
mov eax, dword [ebp + 0xadf98f]
test eax, eax
je 0x4443ae
lea eax, [esp + 0x34]
lea ecx, [esp + 0xec]
push eax
push 0x2c
push 0
push ecx
call fcn.00402990
mov eax, dword [esp + 0x44]
add esp, 0x10
cmp eax, 1
jne 0x4443ae
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + edx + 0x88]
cmp ebx, 0x200301
je 0x4442a0
cmp ebx, 0x200302
je 0x4442a0
cmp ebx, 0x200202
je 0x4442a0
cmp ebx, 0x200203
jne 0x4442ae
mov al, byte [ebp + 0x5a7380]
test al, al
je 0x4443ae
lea eax, [esp + 0x10]
lea ecx, [esp + 0xec]
push eax
push 0x2c
push 1
push ecx
call fcn.00402990
lea edx, [esp + 0x38]
lea eax, [esp + 0xfc]
push edx
push 0x2c
push 2
push eax
call fcn.00402990
lea ecx, [esp + 0x44]
lea edx, [esp + 0x10c]
push ecx
push 0x2c
push 3
push edx
call fcn.00402990
lea eax, [esp + 0x60]
lea ecx, [esp + 0x11c]
push eax
push 0x2c
push 4
push ecx
call fcn.00402990
add esp, 0x40
lea edx, [esp + 0x20]
lea eax, [esp + 0xec]
push edx
push 0x2c
push 5
push eax
call fcn.00402990
lea ecx, [esp + 0x4c]
lea edx, [esp + 0xfc]
push ecx
push 0x2c
push 6
push edx
call fcn.00402990
lea eax, [esp + 0x4c]
lea ecx, [esp + 0x10c]
push eax
push 0x2c
push 1
push ecx
call fcn.00402990
mov edx, dword [esp + 0x5c]
add esp, 0x30
mov ecx, ebp
lea edi, [edx + 0x100]
call fcn.004206a0
lea eax, [esi + 0x9e94d3]
mov ecx, dword [esp + 0x3c]
push 0
mov edx, dword [esp + 0x24]
push eax
mov eax, dword [esp + 0x40]
push 1
push ebx
push edi
push eax
mov eax, dword [esp + 0x48]
push 1
push 1
push 0x200
push ecx
mov ecx, dword [esp + 0x4c]
push edx
mov edx, dword [esp + 0x54]
push eax
mov eax, dword [esp + 0x40]
push ecx
push edx
push eax
mov ecx, ebp
call fcn.004206e0
push 1
push 0
push 0
push 0
mov ecx, ebp
call fcn.00420a50
mov eax, dword [esp + 0x14]
add eax, 4
cmp eax, 0x44
mov dword [esp + 0x14], eax
jl 0x4441df
mov edx, dword [esp + 0x4f4]
mov ebx, 1
mov dword [esi + 0x9e94cb], ebx
mov ecx, dword [ebp + 0x5a6f04]
lea edi, [esi + 0x9e94d3]
mov dword [esi + 0x9ea409], ecx
push ebx
mov ecx, edi
mov dword [esi + 0x9ea401], edx
call fcn.00416750
movsx eax, word [esi + 0x9ea3eb]
push 0
mov dword [esp + 0x14], eax
fild dword [esp + 0x14]
push ecx
movsx ecx, word [esi + 0x9ea3e7]
fstp dword [esp]
mov dword [esp + 0x18], ecx
push ecx
fild dword [esp + 0x1c]
mov ecx, edi
fstp dword [esp]
call fcn.00416e30
push 0
push 0
push 0
mov ecx, edi
call fcn.00416e30
xor edx, edx
xor eax, eax
mov dx, word [esi + 0x9ea3ef]
mov ax, word [esi + 0x9ea3ed]
push edx
push eax
push 0
push 0
mov ecx, edi
call fcn.00417080
push 0
push 0
mov ecx, edi
call fcn.00417050
cmp dword [esi + 0x9e94cf], ebx
jle 0x4446f0
mov ecx, dword [ebp + 0x5a6f04]
xor eax, eax
mov dword [esi + 0x9eb343], ecx
mov dword [esp + 0x14], eax
mov ebx, dword [esp + eax + 0x44]
lea edx, [esp + 0xec]
push 0x400
push edx
push ebx
push str.MAPMENU03
lea ecx, [ebp + 0x2a9e62]
call fcn.00407ce0
test eax, eax
je 0x444647
mov edi, str.MMB_SCENE_BACK
mov eax, ebx
mov dl, byte [eax]
mov bl, byte [edi]
mov cl, dl
cmp dl, bl
jne 0x4444d1
test cl, cl
je 0x4444cd
mov dl, byte [eax + 1]
mov bl, byte [edi + 1]
mov cl, dl
cmp dl, bl
jne 0x4444d1
add eax, 2
add edi, 2
test cl, cl
jne 0x4444a9
xor eax, eax
jmp 0x4444d6
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x4444e8
mov eax, dword [ebp + 0xadf98f]
test eax, eax
je 0x444647
lea eax, [esp + 0x10]
lea ecx, [esp + 0xec]
push eax
push 0x2c
push 0
push ecx
call fcn.00402990
mov eax, dword [esp + 0x20]
add esp, 0x10
cmp eax, 2
jne 0x444647
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + edx + 0x88]
cmp ebx, 0x200301
je 0x444539
cmp ebx, 0x200302
je 0x444539
cmp ebx, 0x200202
je 0x444539
cmp ebx, 0x200203
jne 0x444547
mov al, byte [ebp + 0x5a7380]
test al, al
je 0x444647
lea eax, [esp + 0x34]
lea ecx, [esp + 0xec]
push eax
push 0x2c
push 1
push ecx
call fcn.00402990
lea edx, [esp + 0x3c]
lea eax, [esp + 0xfc]
push edx
push 0x2c
push 2
push eax
call fcn.00402990
lea ecx, [esp + 0x5c]
lea edx, [esp + 0x10c]
push ecx
push 0x2c
push 3
push edx
call fcn.00402990
lea eax, [esp + 0x50]
lea ecx, [esp + 0x11c]
push eax
push 0x2c
push 4
push ecx
call fcn.00402990
add esp, 0x40
lea edx, [esp + 0x30]
lea eax, [esp + 0xec]
push edx
push 0x2c
push 5
push eax
call fcn.00402990
lea ecx, [esp + 0x34]
lea edx, [esp + 0xfc]
push ecx
push 0x2c
push 6
push edx
call fcn.00402990
lea eax, [esp + 0x48]
lea ecx, [esp + 0x10c]
push eax
push 0x2c
push 1
push ecx
call fcn.00402990
mov edx, dword [esp + 0x58]
add esp, 0x30
mov ecx, ebp
lea edi, [edx + 0x100]
call fcn.004206a0
lea eax, [esi + 0x9ea411]
mov ecx, dword [esp + 0x24]
push 0
mov edx, dword [esp + 0x34]
push eax
mov eax, dword [esp + 0x40]
push 1
push ebx
push edi
push eax
mov eax, dword [esp + 0x38]
push 1
push 1
push 0x200
push ecx
mov ecx, dword [esp + 0x64]
push edx
mov edx, dword [esp + 0x58]
push eax
mov eax, dword [esp + 0x64]
push ecx
push edx
push eax
mov ecx, ebp
call fcn.004206e0
push 1
push 0
push 0
push 0
mov ecx, ebp
call fcn.00420a50
mov eax, dword [esp + 0x14]
add eax, 4
cmp eax, 0x44
mov dword [esp + 0x14], eax
jl 0x444478
mov edx, dword [esp + 0x40]
mov dword [esi + 0x9ea40d], 1
mov ecx, dword [ebp + 0x5a6f04]
lea edi, [esi + 0x9ea411]
mov dword [esi + 0x9eb347], ecx
push 1
mov ecx, edi
mov dword [esi + 0x9eb33f], edx
call fcn.00416750
movsx eax, word [esi + 0x9eb329]
push 0
mov dword [esp + 0x14], eax
fild dword [esp + 0x14]
push ecx
movsx ecx, word [esi + 0x9eb325]
fstp dword [esp]
mov dword [esp + 0x18], ecx
push ecx
fild dword [esp + 0x1c]
mov ecx, edi
fstp dword [esp]
call fcn.00416e30
push 0
push 0
push 0
mov ecx, edi
call fcn.00416e30
mov eax, dword [esp + 0x18]
xor edx, edx
xor ecx, ecx
mov dx, word [eax]
push edx
mov edx, dword [esp + 0x20]
mov cx, word [edx]
push ecx
push 0
push 0
mov ecx, edi
call fcn.00417080
push 0
push 0
mov ecx, edi
call fcn.00417050
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x4dc
ret 8