Function at 0x100477d1
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x160
push ebp
push esi
push edi
push str.RenderMenu__
call fcn.1005de2e
mov eax, dword fs:[0x2c]
pop ecx
mov ecx, dword [0x10404728]
mov esi, dword [eax + ecx*4]
mov eax, dword [0x1040419c]
cmp eax, dword [esi + 4]
jg 0x10047e1a
mov eax, dword [0x104041a4]
cmp eax, dword [esi + 4]
jg 0x10047e71
mov esi, str.NESH_REWORKED_
lea edi, [esp + 0x6c]
push 0xf1
xor ebp, ebp
lea eax, [esp + 0x7f]
push ebp
movsd dword es:[edi], dword [esi]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
call fcn.10061850
mov edi, dword [0x10171b70]
add esp, 0xc
test edi, edi
je 0x10047e10
mov ecx, edi
mov edx, dword [ecx]
test edx, edx
je 0x1004785a
mov eax, dword [edx]
mov ecx, edx
mov edx, eax
test eax, eax
jne 0x10047850
mov eax, dword [ecx + 0xc]
test eax, eax
js 0x100478b1
cmp eax, dword [ecx + 8]
jge 0x100478b1
imul esi, eax, 0x18
add esi, dword [ecx + 0x14]
cmp dword [esi], ebp
je 0x100478b1
cmp ecx, edi
je 0x100478b1
lea ecx, [esp + 0x6c]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1004787b
push dword [esi + 8]
sub ecx, edx
mov eax, 0x100
sub eax, ecx
push str.____s
push eax
lea eax, [esp + 0x78]
add eax, ecx
push eax
call fcn.10009387
mov ecx, dword [esi]
add esp, 0x10
test ecx, ecx
je 0x100478b1
mov edi, dword [0x10171b70]
jmp 0x1004785a
mov edi, dword [0x103fe88c]
lea eax, [esp + 0x6c]
sub edi, dword [0x104041a0]
sub edi, dword [0x10404198]
mov ecx, dword [0x103fe9ec]
sub edi, 0x18
push ebx
mov ebx, dword [0x103fe888]
push ebp
shr ebx, 1
push eax
sub ebx, 0xc8
call fcn.10043be7
fsub dword [0x1009ce90]
lea eax, [ebx - 0x2d]
movd xmm0, eax
lea eax, [esp + 0x28]
push eax
cvtdq2ps xmm0, xmm0
push ecx
and dword [esp], ebp
lea eax, [esp + 0x38]
push ebp
push ebp
push ecx
and dword [esp], ebp
movss dword [esp + 0x3c], xmm0
movss xmm0, dword [esp + 0x34]
addss xmm0, dword [0x1009ce94]
push ebp
push eax
fstp dword [esp + 0x2c]
movss dword [esp + 0x48], xmm0
call sub.d3dx9_43.dll_D3DXMatrixTransformation2D
mov eax, dword [0x103fe9b8]
push 0x10
push eax
mov ecx, dword [eax]
call dword [ecx + 0x20]
mov eax, dword [0x103fe9b8]
lea edx, [esp + 0x30]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov eax, dword [0x103fe9b8]
push 0xffffffffffffffff
push ebp
push ebp
mov ecx, dword [eax]
push ebp
push dword [0x103fe9b4]
push eax
call dword [ecx + 0x24]
mov eax, dword [0x103fe9b8]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
movss xmm0, dword [esp + 0x10]
lea eax, [esp + 0x70]
maxss xmm0, dword [0x10089f84]
push ebp
push ecx
mov ecx, dword [0x103fe9ec]
movss dword [esp], xmm0
push eax
call fcn.10043fcb
mov ebp, eax
test ebp, ebp
jle 0x10047998
inc ebp
mov edx, dword [0x100e89d8]
mov ecx, dword [edx + 4]
movzx esi, byte [edx + 8]
movzx eax, byte [edx + 0xc]
shl ecx, 8
or esi, ecx
mov ecx, dword [0x103fe9e8]
shl esi, 8
or esi, eax
movzx eax, byte [edx + 0x10]
shl esi, 8
or esi, eax
mov eax, dword [0x10404198]
push esi
push 0xdfff00ef
add eax, 2
push eax
push 0x190
push edi
push ebx
call fcn.100438d3
lea eax, [esp + 0x70]
add eax, ebp
push eax
lea eax, [edi + 1]
movd xmm0, eax
lea eax, [ebx + 1]
cvtdq2ps xmm0, xmm0
push 0xffff00ef
push ecx
push ecx
mov ecx, dword [0x103fe9ec]
movss dword [esp + 4], xmm0
movd xmm0, eax
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
call fcn.10044dc7
mov ecx, dword [0x100e89dc]
mov ebx, dword [0x103fe88c]
mov esi, dword [0x104041a0]
sub ebx, esi
mov ebp, dword [0x103fe888]
sub ebx, 0x15
mov eax, dword [ecx + 4]
movzx edx, byte [ecx + 8]
shl eax, 8
or edx, eax
shr ebp, 1
movzx eax, byte [ecx + 0xc]
sub ebp, 0xc8
shl edx, 8
or edx, eax
movzx eax, byte [ecx + 0x10]
mov ecx, dword [0x103fe9e8]
shl edx, 8
or edx, eax
push edx
push 0xdfff00ef
push esi
push 0x190
push ebx
push ebp
call fcn.100438d3
mov edx, dword [0x10171b70]
mov esi, dword [edx + 0xc]
mov edi, esi
mov dword [esp + 0x10], esi
lea eax, [esi - 0xc]
cmp eax, dword [edx + 0x10]
lea ecx, [esi - 0xb]
cmovl ecx, dword [edx + 0x10]
cmp esi, ecx
cmovge edi, ecx
test edi, edi
jns 0x10047a9a
xor edi, edi
jmp 0x10047aa4
mov eax, dword [edx + 8]
cmp edi, eax
jl 0x10047aa4
lea edi, [eax - 1]
movd xmm0, ebx
lea eax, [edi + 0xc]
mov dword [edx + 0x10], edi
mov dword [esp + 0x20], eax
cvtdq2ps xmm0, xmm0
movss dword [esp + 0x14], xmm0
cmp edi, eax
jge 0x10047e0f
mov ecx, dword [0x10171b70]
imul eax, edi, 0x18
mov dword [esp + 0x1c], eax
test edi, edi
js 0x10047de6
cmp edi, dword [ecx + 8]
jge 0x10047de6
mov ebx, dword [ecx + 0x14]
add ebx, eax
push ebx
push 0
call dword [ecx + 0x18]
mov dword [esp + 0x20], eax
pop ecx
pop ecx
cmp edi, esi
jne 0x10047b92
movss xmm4, dword [esp + 0x14]
movss xmm3, dword [0x1009962c]
movaps xmm0, xmm4
movss xmm1, dword [0x10099628]
andps xmm3, xmm4
mov edx, dword [0x100e89e0]
xorps xmm0, xmm3
cmpltss xmm0, xmm1
movaps xmm2, xmm4
push 0
mov ecx, dword [edx + 4]
movzx esi, byte [edx + 8]
movzx eax, byte [edx + 0xc]
andps xmm1, xmm0
orps xmm1, xmm3
shl ecx, 8
addss xmm2, xmm1
or esi, ecx
mov ecx, dword [0x103fe9e8]
shl esi, 8
or esi, eax
movzx eax, byte [edx + 0x10]
shl esi, 8
subss xmm2, xmm1
or esi, eax
movss xmm1, dword [0x10089f9c]
mov eax, dword [0x10404198]
push esi
inc eax
movaps xmm0, xmm2
subss xmm0, xmm4
push eax
push 0x18f
cmpnless xmm0, xmm3
andps xmm0, xmm1
subss xmm2, xmm0
cvttss2si eax, xmm2
inc eax
push eax
lea eax, [ebp + 1]
push eax
call fcn.1004391f
cmp edi, dword [0x100e7ff4]
jne 0x10047c3b
movss xmm4, dword [esp + 0x14]
movss xmm3, dword [0x1009962c]
movaps xmm0, xmm4
movss xmm1, dword [0x10099628]
andps xmm3, xmm4
mov esi, dword [0x100e89e0]
xorps xmm0, xmm3
cmpltss xmm0, xmm1
movaps xmm2, xmm4
push 0
mov eax, dword [esi + 4]
movzx ecx, byte [esi + 8]
andps xmm1, xmm0
cdq
orps xmm1, xmm3
sub eax, edx
addss xmm2, xmm1
sar eax, 1
shl eax, 8
or eax, ecx
movzx ecx, byte [esi + 0xc]
shl eax, 8
or eax, ecx
movzx ecx, byte [esi + 0x10]
subss xmm2, xmm1
shl eax, 8
movss xmm1, dword [0x10089f9c]
or eax, ecx
mov ecx, dword [0x103fe9e8]
push eax
mov eax, dword [0x10404198]
movaps xmm0, xmm2
inc eax
subss xmm0, xmm4
push eax
push 0x18f
cmpnless xmm0, xmm3
andps xmm0, xmm1
subss xmm2, xmm0
cvttss2si eax, xmm2
inc eax
push eax
lea eax, [ebp + 1]
push eax
call fcn.1004391f
mov esi, dword [ebx + 8]
cmp byte [esi], 9
jne 0x10047d13
movss xmm0, dword [esp + 0x14]
lea eax, [esi + 1]
push eax
push dword [ebx + 0x10]
lea esi, [ebp + 2]
push ecx
push ecx
mov ecx, dword [0x103fe9ec]
movss dword [esp + 4], xmm0
movd xmm0, esi
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
call fcn.10044dc7
mov eax, dword [ebx + 8]
mov ecx, dword [0x103fe9ec]
inc eax
push 0
push eax
call fcn.10043be7
push ecx
push ecx
fstp qword [esp]
call fcn.1006fa20
movss xmm4, dword [esp + 0x1c]
movss xmm3, dword [0x1009962c]
movaps xmm0, xmm4
movss xmm1, dword [0x10099628]
andps xmm3, xmm4
xorps xmm0, xmm3
movaps xmm2, xmm4
cmpltss xmm0, xmm1
pop ecx
pop ecx
fstp dword [esp + 0x18]
cvttss2si eax, dword [esp + 0x18]
push 0
push 0xbf7f7f7f
push 1
andps xmm1, xmm0
orps xmm1, xmm3
addss xmm2, xmm1
push eax
mov eax, dword [0x10404198]
dec eax
subss xmm2, xmm1
movss xmm1, dword [0x10089f9c]
movaps xmm0, xmm2
subss xmm0, xmm4
cmpnless xmm0, xmm3
andps xmm0, xmm1
subss xmm2, xmm0
cvttss2si ecx, xmm2
add eax, ecx
mov ecx, dword [0x103fe9e8]
push eax
push esi
call fcn.1004391f
jmp 0x10047d6a
cmp dword [esp + 0x18], 0
je 0x10047d3d
mov ecx, dword [0x100e89e4]
mov edx, dword [ecx + 8]
movzx eax, byte [ecx + 0xc]
or edx, 0xffffff00
shl edx, 8
or edx, eax
movzx eax, byte [ecx + 0x10]
shl edx, 8
or edx, eax
jmp 0x10047d40
mov edx, dword [ebx + 0x10]
movss xmm0, dword [esp + 0x14]
push esi
push edx
push ecx
push ecx
mov ecx, dword [0x103fe9ec]
lea esi, [ebp + 2]
movss dword [esp + 4], xmm0
movd xmm0, esi
cvtdq2ps xmm0, xmm0
movss dword [esp], xmm0
call fcn.10044dc7
cmp dword [ebx], 0
movss xmm0, dword [esp + 0x14]
je 0x10047dd8
mov ebx, 0x1009a8f4
push ebx
push 0xbf7f7f7f
push ecx
mov ecx, dword [0x103fe9ec]
movss dword [esp], xmm0
movd xmm0, esi
cvtdq2ps xmm0, xmm0
push 0
push ebx
addss xmm0, dword [0x1009ce90]
movss dword [esp + 0x2c], xmm0
call fcn.10043be7
movss xmm0, dword [esp + 0x24]
fstp dword [esp + 0x30]
subss xmm0, dword [esp + 0x30]
push ecx
mov ecx, dword [0x103fe9ec]
subss xmm0, dword [0x1009cdd4]
movss dword [esp], xmm0
call fcn.10044dc7
movss xmm0, dword [esp + 0x14]
mov esi, dword [esp + 0x10]
mov eax, dword [esp + 0x1c]
mov ecx, dword [0x10171b70]
add eax, 0x18
inc edi
mov dword [esp + 0x1c], eax
mov eax, dword [0x103fe9ec]
addss xmm0, dword [eax + 0xe45]
mov eax, dword [esp + 0x1c]
movss dword [esp + 0x14], xmm0
cmp edi, dword [esp + 0x20]
jl 0x10047ad0
pop ebx
pop edi
pop esi
pop ebp
add esp, 0x160
ret
mov edi, 0x1040419c
push edi
call fcn.1005f2e4
cmp dword [0x1040419c], 0xffffffff
pop ecx
jne 0x10047805
mov eax, dword [0x103fe9ec]
push ecx
push ecx
movss xmm0, dword [eax + 0xe45]
movss dword [esp + 0x14], xmm0
fld dword [esp + 0x14]
fstp qword [esp]
call fcn.1006fa20
fstp dword [esp + 0x14]
cvttss2si eax, dword [esp + 0x14]
push edi
mov dword [0x10404198], eax
call fcn.1005f29a
add esp, 0xc
jmp 0x10047805
mov esi, 0x104041a4
push esi
call fcn.1005f2e4
cmp dword [0x104041a4], 0xffffffff
pop ecx
jne 0x10047816
mov eax, dword [0x103fe9ec]
push ecx
push ecx
movss xmm0, dword [eax + 0xe45]
mulss xmm0, dword [0x1008f8f4]
movss dword [esp + 0x14], xmm0
fld dword [esp + 0x14]
fstp qword [esp]
call fcn.1006fa20
fstp dword [esp + 0x14]
cvttss2si eax, dword [esp + 0x14]
push esi
add eax, 2
mov dword [0x104041a0], eax
call fcn.1005f29a
add esp, 0xc
jmp 0x10047816