Function at 0x10046c36
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x160
push ebp
push esi
push edi
push str.RenderMenu__
call fcn.1005cbc3
mov eax, dword fs:[0x2c]
pop ecx
mov ecx, dword [0x1016be8c]
mov esi, dword [eax + ecx*4]
mov eax, dword [0x1016b8cc]
cmp eax, dword [esi + 4]
jg 0x10047282
mov eax, dword [0x1016b8d4]
cmp eax, dword [esi + 4]
jg 0x100472d9
push 8
pop ecx
mov esi, str.Karaambar_Reborn_ft._erosland_:_
lea edi, [esp + 0x6c]
rep movsd dword es:[edi], dword [esi]
push 0xdf
xor ebp, ebp
lea eax, [esp + 0x91]
push ebp
push eax
movsb byte es:[edi], byte [esi]
call fcn.10060630
mov edi, dword [0x10135168]
add esp, 0xc
test edi, edi
je 0x10047278
mov ecx, edi
mov edx, dword [ecx]
test edx, edx
je 0x10046cc2
mov eax, dword [edx]
mov ecx, edx
mov edx, eax
test eax, eax
jne 0x10046cb8
mov eax, dword [ecx + 0xc]
test eax, eax
js 0x10046d19
cmp eax, dword [ecx + 8]
jge 0x10046d19
imul esi, eax, 0x18
add esi, dword [ecx + 0x14]
cmp dword [esi], ebp
je 0x10046d19
cmp ecx, edi
je 0x10046d19
lea ecx, [esp + 0x6c]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10046ce3
push dword [esi + 8]
sub ecx, edx
mov eax, 0x100
sub eax, ecx
push str.____s
push eax
lea eax, [esp + 0x78]
add eax, ecx
push eax
call fcn.100073eb
mov ecx, dword [esi]
add esp, 0x10
test ecx, ecx
je 0x10046d19
mov edi, dword [0x10135168]
jmp 0x10046cc2
mov edi, dword [0x101660e8]
lea eax, [esp + 0x6c]
sub edi, dword [0x1016b8d0]
sub edi, dword [0x1016b8c8]
mov ecx, dword [0x10166138]
sub edi, 0x18
push ebx
mov ebx, dword [0x101660e4]
push ebp
shr ebx, 1
push eax
sub ebx, 0xc8
call fcn.100430d2
fsub dword [0x100945b0]
lea eax, [ebx - 0x2d]
movd xmm0, eax
lea eax, [esp + 0x28]
push eax
cvtdq2ps xmm0, xmm0
push ecx
and dword [esp], ebp
lea eax, [esp + 0x38]
push ebp
push ebp
push ecx
and dword [esp], ebp
movss dword [esp + 0x3c], xmm0
movss xmm0, dword [esp + 0x34]
addss xmm0, dword [0x10098558]
push ebp
push eax
fstp dword [esp + 0x2c]
movss dword [esp + 0x48], xmm0
call sub.d3dx9_43.dll_D3DXMatrixTransformation2D
mov eax, dword [0x101660b4]
push 0x10
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
mov eax, dword [0x101660b4]
lea edx, [esp + 0x30]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov eax, dword [0x101660b4]
push 0xffffffffffffffff
push ebp
push ebp
mov ecx, dword [eax]
push ebp
push dword [0x101660b0]
push eax
call dword [ecx + 0x24]
mov eax, dword [0x101660b4]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
movss xmm0, dword [esp + 0x10]
lea eax, [esp + 0x70]
maxss xmm0, dword [0x100842b4]
push ebp
push ecx
mov ecx, dword [0x10166138]
movss dword [esp], xmm0
push eax
call fcn.100434b6
mov ebp, eax
test ebp, ebp
jle 0x10046e00
inc ebp
mov edx, dword [0x100e3b60]
mov ecx, dword [edx + 4]
movzx esi, byte [edx + 8]
movzx eax, byte [edx + 0xc]
shl ecx, 8
or esi, ecx
mov ecx, dword [0x10166134]
shl esi, 8
or esi, eax
movzx eax, byte [edx + 0x10]
shl esi, 8
or esi, eax
mov eax, dword [0x1016b8c8]
push esi
push 0xdf5b5b5b
add eax, 2
push eax
push 0x190
push edi
push ebx
call fcn.10042dbe
lea eax, [esp + 0x70]
add eax, ebp
push eax
lea eax, [edi + 1]
movd xmm0, eax
lea eax, [ebx + 1]
cvtdq2ps xmm0, xmm0
push 0xfffafafa
push ecx
push ecx
mov ecx, dword [0x10166138]
movss dword [esp + 4], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
call fcn.100442b2
mov ecx, dword [0x100e3b64]
mov ebx, dword [0x101660e8]
mov esi, dword [0x1016b8d0]
sub ebx, esi
mov ebp, dword [0x101660e4]
sub ebx, 0x15
mov eax, dword [ecx + 4]
movzx edx, byte [ecx + 8]
shl eax, 8
or edx, eax
shr ebp, 1
movzx eax, byte [ecx + 0xc]
sub ebp, 0xc8
shl edx, 8
or edx, eax
movzx eax, byte [ecx + 0x10]
mov ecx, dword [0x10166134]
shl edx, 8
or edx, eax
push edx
push 0xdf3f3f3f
push esi
push 0x190
push ebx
push ebp
call fcn.10042dbe
mov edx, dword [0x10135168]
mov esi, dword [edx + 0xc]
mov edi, esi
mov dword [esp + 0x10], esi
lea eax, [esi - 0xc]
cmp eax, dword [edx + 0x10]
lea ecx, [esi - 0xb]
cmovl ecx, dword [edx + 0x10]
cmp esi, ecx
cmovge edi, ecx
test edi, edi
jns 0x10046f02
xor edi, edi
jmp 0x10046f0c
mov eax, dword [edx + 8]
cmp edi, eax
jl 0x10046f0c
lea edi, [eax - 1]
movd xmm0, ebx
lea eax, [edi + 0xc]
mov dword [edx + 0x10], edi
mov dword [esp + 0x20], eax
cvtdq2ps xmm0, xmm0
movss dword [esp + 0x14], xmm0
cmp edi, eax
jge 0x10047277
mov ecx, dword [0x10135168]
imul eax, edi, 0x18
mov dword [esp + 0x1c], eax
test edi, edi
js 0x1004724e
cmp edi, dword [ecx + 8]
jge 0x1004724e
mov ebx, dword [ecx + 0x14]
add ebx, eax
push ebx
push 0
call dword [ecx + 0x18]
mov dword [esp + 0x20], eax
pop ecx
pop ecx
cmp edi, esi
jne 0x10046ffa
movss xmm4, dword [esp + 0x14]
movss xmm3, dword [0x100945c4]
movaps xmm0, xmm4
movss xmm1, dword [0x10095ef8]
andps xmm3, xmm4
mov edx, dword [0x100e3b68]
xorps xmm0, xmm3
cmpltss xmm0, xmm1
movaps xmm2, xmm4
push 0
mov ecx, dword [edx + 4]
movzx esi, byte [edx + 8]
movzx eax, byte [edx + 0xc]
andps xmm1, xmm0
orps xmm1, xmm3
shl ecx, 8
addss xmm2, xmm1
or esi, ecx
mov ecx, dword [0x10166134]
shl esi, 8
or esi, eax
movzx eax, byte [edx + 0x10]
shl esi, 8
subss xmm2, xmm1
or esi, eax
movss xmm1, dword [0x100842cc]
mov eax, dword [0x1016b8c8]
push esi
inc eax
movaps xmm0, xmm2
subss xmm0, xmm4
push eax
push 0x18f
cmpnless xmm0, xmm3
andps xmm0, xmm1
subss xmm2, xmm0
cvttss2si eax, xmm2
inc eax
push eax
lea eax, [ebp + 1]
push eax
call fcn.10042e0a
cmp edi, dword [0x100e30b0]
jne 0x100470a3
movss xmm4, dword [esp + 0x14]
movss xmm3, dword [0x100945c4]
movaps xmm0, xmm4
movss xmm1, dword [0x10095ef8]
andps xmm3, xmm4
mov esi, dword [0x100e3b68]
xorps xmm0, xmm3
cmpltss xmm0, xmm1
movaps xmm2, xmm4
push 0
mov eax, dword [esi + 4]
movzx ecx, byte [esi + 8]
andps xmm1, xmm0
cdq
orps xmm1, xmm3
sub eax, edx
addss xmm2, xmm1
sar eax, 1
shl eax, 8
or eax, ecx
movzx ecx, byte [esi + 0xc]
shl eax, 8
or eax, ecx
movzx ecx, byte [esi + 0x10]
subss xmm2, xmm1
shl eax, 8
movss xmm1, dword [0x100842cc]
or eax, ecx
mov ecx, dword [0x10166134]
push eax
mov eax, dword [0x1016b8c8]
movaps xmm0, xmm2
inc eax
subss xmm0, xmm4
push eax
push 0x18f
cmpnless xmm0, xmm3
andps xmm0, xmm1
subss xmm2, xmm0
cvttss2si eax, xmm2
inc eax
push eax
lea eax, [ebp + 1]
push eax
call fcn.10042e0a
mov esi, dword [ebx + 8]
cmp byte [esi], 9
jne 0x1004717b
movss xmm0, dword [esp + 0x14]
lea eax, [esi + 1]
push eax
push dword [ebx + 0x10]
lea esi, [ebp + 2]
push ecx
push ecx
mov ecx, dword [0x10166138]
movss dword [esp + 4], xmm0
movd xmm0, esi
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
call fcn.100442b2
mov eax, dword [ebx + 8]
mov ecx, dword [0x10166138]
inc eax
push 0
push eax
call fcn.100430d2
push ecx
push ecx
fstp qword [esp]
call fcn.1006bbd0
movss xmm4, dword [esp + 0x1c]
movss xmm3, dword [0x100945c4]
movaps xmm0, xmm4
movss xmm1, dword [0x10095ef8]
andps xmm3, xmm4
xorps xmm0, xmm3
movaps xmm2, xmm4
cmpltss xmm0, xmm1
pop ecx
pop ecx
fstp dword [esp + 0x18]
cvttss2si eax, dword [esp + 0x18]
push 0
push 0xbf7f7f7f
push 1
andps xmm1, xmm0
orps xmm1, xmm3
addss xmm2, xmm1
push eax
mov eax, dword [0x1016b8c8]
dec eax
subss xmm2, xmm1
movss xmm1, dword [0x100842cc]
movaps xmm0, xmm2
subss xmm0, xmm4
cmpnless xmm0, xmm3
andps xmm0, xmm1
subss xmm2, xmm0
cvttss2si ecx, xmm2
add eax, ecx
mov ecx, dword [0x10166134]
push eax
push esi
call fcn.10042e0a
jmp 0x100471d2
cmp dword [esp + 0x18], 0
je 0x100471a5
mov ecx, dword [0x100e3b6c]
mov edx, dword [ecx + 8]
movzx eax, byte [ecx + 0xc]
or edx, 0xffffff00
shl edx, 8
or edx, eax
movzx eax, byte [ecx + 0x10]
shl edx, 8
or edx, eax
jmp 0x100471a8
mov edx, dword [ebx + 0x10]
movss xmm0, dword [esp + 0x14]
push esi
push edx
push ecx
push ecx
mov ecx, dword [0x10166138]
lea esi, [ebp + 2]
movss dword [esp + 4], xmm0
movd xmm0, esi
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
call fcn.100442b2
cmp dword [ebx], 0
movss xmm0, dword [esp + 0x14]
je 0x10047240
mov ebx, 0x100968e8
push ebx
push 0xbf7f7f7f
push ecx
mov ecx, dword [0x10166138]
movss dword [esp], xmm0
movd xmm0, esi
cvtdq2ps xmm0, xmm0
push 0
push ebx
addss xmm0, dword [0x100945b0]
movss dword [esp + 0x2c], xmm0
call fcn.100430d2
movss xmm0, dword [esp + 0x24]
fstp dword [esp + 0x30]
subss xmm0, dword [esp + 0x30]
push ecx
mov ecx, dword [0x10166138]
subss xmm0, dword [0x100984d8]
movss dword [esp], xmm0
call fcn.100442b2
movss xmm0, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov eax, dword [esp + 0x1c]
mov ecx, dword [0x10135168]
add eax, 0x18
inc edi
mov dword [esp + 0x1c], eax
mov eax, dword [0x10166138]
addss xmm0, dword [eax + 0xe45]
mov eax, dword [esp + 0x1c]
movss dword [esp + 0x14], xmm0
cmp edi, dword [esp + 0x20]
jl 0x10046f38
pop ebx
pop edi
pop esi
pop ebp
add esp, 0x160
ret
mov edi, 0x1016b8cc
push edi
call fcn.1005e2da
cmp dword [0x1016b8cc], 0xffffffff
pop ecx
jne 0x10046c6a
mov eax, dword [0x10166138]
push ecx
push ecx
movss xmm0, dword [eax + 0xe45]
movss dword [esp + 0x14], xmm0
fld dword [esp + 0x14]
fstp qword [esp]
call fcn.1006bbd0
fstp dword [esp + 0x14]
cvttss2si eax, dword [esp + 0x14]
push edi
mov dword [0x1016b8c8], eax
call fcn.1005e290
add esp, 0xc
jmp 0x10046c6a
mov esi, 0x1016b8d4
push esi
call fcn.1005e2da
cmp dword [0x1016b8d4], 0xffffffff
pop ecx
jne 0x10046c7b
mov eax, dword [0x10166138]
push ecx
push ecx
movss xmm0, dword [eax + 0xe45]
mulss xmm0, dword [0x1008a9fc]
movss dword [esp + 0x14], xmm0
fld dword [esp + 0x14]
fstp qword [esp]
call fcn.1006bbd0
fstp dword [esp + 0x14]
cvttss2si eax, dword [esp + 0x14]
push esi
add eax, 2
mov dword [0x1016b8d0], eax
call fcn.1005e290
add esp, 0xc
jmp 0x10046c7b