Function at 0x40ac90
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x423a56
mov eax, dword fs:[0]
push eax
sub esp, 0xc88
mov eax, dword [0x432150]
xor eax, esp
mov dword [esp + 0xc80], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x432150]
xor eax, esp
push eax
lea eax, [esp + 0xc9c]
mov dword fs:[0], eax
xor eax, eax
mov esi, ecx
mov dword [esp + 0x1c], eax
mov dword [esp + 0xca4], eax
lea eax, [esp + 0x16c]
push eax
call fcn.004176a0
add esp, 4
lea ecx, [esp + 0x118]
push ecx
lea ebx, [esp + 0x170]
mov byte [esp + 0xca8], 1
call fcn.0041d7a0
add esp, 4
push str.DataFileVersion.xml
lea ecx, [esp + 0x11c]
mov byte [esp + 0xca8], 2
call dword [0x425260]
lea ecx, [esp + 0x7c]
call fcn.00418c30
mov byte [esp + 0xca4], 3
cmp dword [esp + 0x130], 0x10
mov eax, dword [esp + 0x11c]
jae 0x40ad4c
lea eax, [esp + 0x11c]
push 0
push eax
lea ecx, [esp + 0x84]
call fcn.004198b0
push str.filelist
lea ecx, [esp + 0x80]
call fcn.004181c0
test eax, eax
mov dword [esp + 0x28], eax
je 0x40b6b6
mov ebx, dword [0x425410]
lea edi, [esi + 0x14]
mov esi, dword [edi + 4]
cmp esi, dword [edi + 8]
mov dword [esp + 0x18], edi
jbe 0x40ad8f
call ebx
mov dword [esp + 0x2c], edi
mov ebp, esi
mov esi, dword [edi + 8]
cmp dword [edi + 4], esi
mov dword [esp + 0x30], ebp
jbe 0x40ada3
call ebx
cmp edi, edi
je 0x40ada9
call ebx
cmp ebp, esi
je 0x40b691
cmp ebp, dword [edi + 8]
jb 0x40adb8
call ebx
cmp dword [ebp + 0xb0], 0
je 0x40b671
cmp ebp, dword [edi + 8]
jb 0x40adcc
call ebx
cmp dword [ebp + 0x88], 0
je 0x40ae43
cmp ebp, dword [edi + 8]
jb 0x40addc
call ebx
lea edx, [ebp + 0x38]
push edx
lea eax, [esp + 0xcb0]
push eax
lea ecx, [esp + 0x104]
push ecx
call dword [0x42526c]
add esp, 0xc
mov esi, eax
mov byte [esp + 0xca4], 4
or dword [esp + 0x1c], 1
cmp ebp, dword [edi + 8]
jb 0x40ae0f
call ebx
mov eax, 8
cmp dword [ebp + 0x8c], eax
jb 0x40ae21
mov ebx, dword [ebp + 0x78]
jmp 0x40ae24
lea ebx, [ebp + 0x78]
cmp dword [esi + 0x18], eax
jb 0x40ae2e
mov esi, dword [esi + 4]
jmp 0x40ae31
add esi, 4
push esi
call fcn.0040df00
add esp, 4
test eax, eax
mov byte [esp + 0x23], 0
jne 0x40ae48
mov byte [esp + 0x23], 1
mov dword [esp + 0xca4], 3
mov ebx, dword [esp + 0x1c]
test bl, 1
je 0x40ae70
and ebx, 0xfffffffe
lea ecx, [esp + 0xfc]
mov dword [esp + 0x1c], ebx
call dword [0x4252f0]
cmp byte [esp + 0x23], 0
je 0x40ae91
cmp ebp, dword [edi + 8]
jb 0x40ae82
call dword [0x425410]
mov dword [ebp + 0xb0], 0
jmp 0x40b671
cmp ebp, dword [edi + 8]
jb 0x40ae9c
call dword [0x425410]
push 0
lea edi, [ebp + 0x54]
push 0x427ca0
mov ecx, edi
call dword [0x4252b0]
test eax, eax
jne 0x40b671
lea ecx, [esp + 0x150]
call dword [0x4252e4]
mov edx, dword [esp + 0x18]
mov byte [esp + 0xca4], 5
cmp ebp, dword [edx + 8]
jb 0x40aeda
call dword [0x425410]
cmp dword [edi + 0x18], 8
jb 0x40aee5
mov esi, dword [edi + 4]
jmp 0x40aee8
lea esi, [edi + 4]
mov eax, dword [esp + 0x18]
cmp ebp, dword [eax + 8]
jb 0x40aef7
call dword [0x425410]
push 0
push 0x5c
mov ecx, edi
call dword [0x425238]
lea ecx, [esi + eax*2]
push ecx
lea ecx, [esp + 0x154]
call dword [0x4252c8]
lea edx, [esp + 0x150]
push edx
lea eax, [esp + 0x170]
push eax
lea ecx, [esp + 0xe8]
push ecx
call dword [0x42526c]
add esp, 0xc
mov byte [esp + 0xca4], 6
cmp dword [esp + 0xf8], 8
mov eax, dword [esp + 0xe4]
jae 0x40af55
lea eax, [esp + 0xe4]
push eax
call dword [0x4251e4]
cmp eax, 0xffffffff
je 0x40af65
test al, 0x10
jne 0x40af86
cmp dword [esp + 0xf8], 8
mov eax, dword [esp + 0xe4]
jae 0x40af7d
lea eax, [esp + 0xe4]
push eax
call fcn.0040a950
add esp, 4
mov edx, dword [esp + 0x18]
cmp ebp, dword [edx + 8]
jb 0x40af95
call dword [0x425410]
lea edi, [ebp + 0x38]
lea esi, [esp + 0x188]
call fcn.0041d560
mov eax, esi
push str..qdk
push eax
mov byte [esp + 0xcac], 7
call dword [0x425254]
add esp, 8
test al, al
je 0x40b1cb
sub esp, 0x1c
lea edx, [esp + 0xfc]
mov ecx, esp
mov dword [esp + 0x40], esp
push edx
call dword [0x4252d8]
mov eax, dword [esp + 0x34]
mov byte [esp + 0xcc0], 8
cmp ebp, dword [eax + 8]
jb 0x40aff3
call dword [0x425410]
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x78], esp
lea esi, [ebp + 0x38]
push esi
lea edx, [esp + 0xce8]
push edx
push ecx
call dword [0x42526c]
add esp, 0xc
mov byte [esp + 0xcdc], 7
call fcn.0040c150
mov edi, eax
test edi, edi
je 0x40b632
mov eax, dword [esp + 0x18]
cmp ebp, dword [eax + 8]
jb 0x40b038
call dword [0x425410]
push esi
lea ecx, [esp + 0xcb0]
push ecx
lea edx, [esp + 0x104]
push edx
call dword [0x42526c]
add esp, 0xc
cmp dword [eax + 0x18], 8
jb 0x40b05d
mov eax, dword [eax + 4]
jmp 0x40b060
add eax, 4
push eax
call dword [0x4251fc]
lea ecx, [esp + 0xfc]
call dword [0x4252f0]
push 0
push str._apps
lea ecx, [esp + 0x158]
call dword [0x4252b0]
test eax, eax
jne 0x40b389
xor ebx, ebx
push 0xaec
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], eax
lea eax, [esp + 0x1ac]
push ebx
push eax
mov dword [esp + 0x40], ebx
mov dword [esp + 0x1b0], ebx
call fcn.0041c8b6
add esp, 0xc
push ebx
push str..qdk
lea esi, [esp + 0x34]
call fcn.0040dce0
mov ecx, eax
add ecx, 0x38
call dword [0x4252b0]
push eax
push ebx
lea ecx, [esp + 0x68]
push ecx
call fcn.0040dce0
mov ecx, eax
add ecx, 0x38
call dword [0x4252b8]
push 0x42610c
push eax
lea edx, [esp + 0x13c]
mov byte [esp + 0xcac], 9
mov esi, dword [0x425240]
push edx
call esi
add esp, 0xc
lea ecx, [esp + 0x60]
mov byte [esp + 0xca4], 0xb
call dword [0x4252f0]
push str.app.xml
lea eax, [esp + 0xe4]
push eax
lea ecx, [esp + 0x104]
push ecx
call esi
mov eax, dword [esp + 0x10c]
add esp, 0xc
cmp dword [esp + 0x114], 8
jae 0x40b151
lea eax, [esp + 0x100]
push eax
lea edx, [esp + 0x1ac]
push 0x104
push edx
call dword [0x42546c]
add esp, 0xc
push ebx
lea eax, [esp + 0x1a8]
push str.TXQDesk:21D89F74_3709_4c77_81BA_96E6DFA15498
mov dword [esp + 0x3c], 3
mov dword [esp + 0x40], 0xaf0
mov dword [esp + 0x44], eax
call dword [0x4255b8]
cmp eax, ebx
je 0x40b1aa
push ebx
push 0xbb8
push 1
lea ecx, [esp + 0x40]
push ecx
push ebx
push 0x4a
push eax
call dword [0x4255d8]
lea ecx, [esp + 0xfc]
call dword [0x4252f0]
mov byte [esp + 0xca4], 7
lea ecx, [esp + 0x134]
jmp 0x40b383
mov edx, dword [esp + 0x18]
cmp ebp, dword [edx + 8]
jb 0x40b1da
call dword [0x425410]
mov edi, dword [0x42526c]
lea eax, [ebp + 0x38]
push eax
lea eax, [esp + 0xe4]
push eax
lea ecx, [esp + 0x4c]
push ecx
call edi
add esp, 0xc
mov esi, eax
mov edx, dword [esp + 0x18]
mov byte [esp + 0xca4], 0xc
or ebx, 2
cmp ebp, dword [edx + 8]
mov dword [esp + 0x1c], ebx
jb 0x40b216
call dword [0x425410]
lea eax, [ebp + 0x38]
push eax
lea eax, [esp + 0xcb0]
push eax
lea ecx, [esp + 0x104]
push ecx
call edi
add esp, 0xc
mov dword [esp + 0xca4], 0xd
or ebx, 4
cmp dword [esi + 0x18], 8
mov dword [esp + 0x1c], ebx
jb 0x40b24c
mov esi, dword [esi + 4]
jmp 0x40b24f
add esi, 4
cmp dword [eax + 0x18], 8
jb 0x40b25a
mov eax, dword [eax + 4]
jmp 0x40b25d
add eax, 4
push 3
push esi
push eax
call dword [0x425204]
test eax, eax
jne 0x40b305
mov edx, dword [esp + 0x18]
cmp ebp, dword [edx + 8]
jb 0x40b27e
call dword [0x425410]
lea eax, [ebp + 0x38]
push eax
lea eax, [esp + 0xe4]
push eax
lea ecx, [esp + 0x68]
push ecx
call edi
add esp, 0xc
mov esi, eax
mov edx, dword [esp + 0x18]
mov dword [esp + 0xca4], 0xe
or ebx, 8
cmp ebp, dword [edx + 8]
mov dword [esp + 0x1c], ebx
jb 0x40b2b7
call dword [0x425410]
lea eax, [ebp + 0x38]
push eax
lea eax, [esp + 0xcb0]
push eax
lea ecx, [esp + 0x13c]
push ecx
call edi
or ebx, 0x10
add esp, 0xc
cmp dword [esi + 0x18], 8
mov dword [esp + 0x1c], ebx
jb 0x40b2e2
mov esi, dword [esi + 4]
jmp 0x40b2e5
add esi, 4
cmp dword [eax + 0x18], 8
jb 0x40b2f0
mov eax, dword [eax + 4]
jmp 0x40b2f3
add eax, 4
push 5
push esi
push eax
call dword [0x425204]
test eax, eax
jne 0x40b305
xor edi, edi
jmp 0x40b30a
mov edi, 1
test bl, 0x10
je 0x40b323
and ebx, 0xffffffef
lea ecx, [esp + 0x134]
mov dword [esp + 0x1c], ebx
call dword [0x4252f0]
test bl, 8
mov dword [esp + 0xca4], 0xd
je 0x40b344
and ebx, 0xfffffff7
lea ecx, [esp + 0x60]
mov dword [esp + 0x1c], ebx
call dword [0x4252f0]
test bl, 4
mov dword [esp + 0xca4], 0xc
je 0x40b368
and ebx, 0xfffffffb
lea ecx, [esp + 0xfc]
mov dword [esp + 0x1c], ebx
call dword [0x4252f0]
test bl, 2
mov dword [esp + 0xca4], 7
je 0x40b389
and ebx, 0xfffffffd
mov dword [esp + 0x1c], ebx
lea ecx, [esp + 0x44]
call dword [0x4252f0]
xor ebx, ebx
cmp edi, ebx
je 0x40b632
mov ecx, dword [esp + 0x28]
push str.file
call fcn.004181c0
mov edi, dword [esp + 0x18]
mov esi, eax
cmp esi, ebx
je 0x40b3ee
jmp 0x40b3b0
lea edx, [esp + 0x24]
push edx
push 0x426c28
mov ecx, esi
mov dword [esp + 0x2c], ebx
call fcn.00418ac0
cmp ebp, dword [edi + 8]
jb 0x40b3d0
call dword [0x425410]
mov eax, dword [esp + 0x24]
cmp eax, dword [ebp + 0xac]
je 0x40b41f
push str.file
mov ecx, esi
call fcn.00418200
mov esi, eax
cmp esi, ebx
jne 0x40b3b0
push 0x50
call fcn.0041ba2e
add esp, 4
mov dword [esp + 0x40], eax
cmp eax, ebx
mov byte [esp + 0xca4], 0x12
je 0x40b506
push str.file
mov ecx, eax
call fcn.00419660
mov esi, eax
jmp 0x40b508
cmp ebp, dword [edi + 8]
jb 0x40b435
call dword [0x425410]
cmp ebp, dword [edi + 8]
jb 0x40b435
call dword [0x425410]
lea eax, [ebp + 0x38]
push eax
lea eax, [ebp + 0x54]
push eax
lea ecx, [esp + 0x13c]
push ecx
call dword [0x42526c]
add esp, 0xc
lea edx, [esp + 0x44]
push edx
mov ebx, eax
mov byte [esp + 0xca8], 0xf
call fcn.0041d7a0
add esp, 4
mov ecx, 0x10
mov byte [esp + 0xca4], cl
cmp dword [eax + 0x18], ecx
jb 0x40b47b
mov eax, dword [eax + 4]
jmp 0x40b47e
add eax, 4
push eax
push str.name
mov ecx, esi
call fcn.00419770
lea ecx, [esp + 0x44]
mov byte [esp + 0xca4], 0xf
call dword [0x4252c4]
lea ecx, [esp + 0x134]
mov byte [esp + 0xca4], 7
call dword [0x4252f0]
cmp ebp, dword [edi + 8]
jb 0x40b4bd
call dword [0x425410]
lea eax, [esp + 0x44]
push eax
mov ebx, ebp
call fcn.0041d7a0
add esp, 4
mov byte [esp + 0xca4], 0x11
cmp dword [eax + 0x18], 0x10
jb 0x40b4df
mov eax, dword [eax + 4]
jmp 0x40b4e2
add eax, 4
push eax
push str.version
mov ecx, esi
call fcn.00419770
lea ecx, [esp + 0x44]
mov byte [esp + 0xca4], 7
call dword [0x4252c4]
jmp 0x40b61d
xor esi, esi
mov byte [esp + 0xca4], 7
cmp ebp, dword [edi + 8]
jb 0x40b526
call dword [0x425410]
cmp ebp, dword [edi + 8]
jb 0x40b526
call dword [0x425410]
lea eax, [ebp + 0x38]
push eax
lea eax, [ebp + 0x54]
push eax
lea ecx, [esp + 0x13c]
push ecx
call dword [0x42526c]
add esp, 0xc
lea edx, [esp + 0x44]
push edx
mov ebx, eax
mov byte [esp + 0xca8], 0x13
call fcn.0041d7a0
add esp, 4
mov byte [esp + 0xca4], 0x14
cmp dword [eax + 0x18], 0x10
jb 0x40b569
mov eax, dword [eax + 4]
jmp 0x40b56c
add eax, 4
push eax
push str.name
mov ecx, esi
call fcn.00419770
lea ecx, [esp + 0x44]
mov byte [esp + 0xca4], 0x13
call dword [0x4252c4]
lea ecx, [esp + 0x134]
mov byte [esp + 0xca4], 7
call dword [0x4252f0]
cmp ebp, dword [edi + 8]
jb 0x40b5ab
call dword [0x425410]
mov eax, dword [ebp + 0xac]
push eax
push 0x426c28
mov ecx, esi
call fcn.00419750
cmp ebp, dword [edi + 8]
jb 0x40b5c9
call dword [0x425410]
lea ecx, [esp + 0xc4]
push ecx
mov ebx, ebp
call fcn.0041d7a0
add esp, 4
mov byte [esp + 0xca4], 0x15
cmp dword [eax + 0x18], 0x10
jb 0x40b5ee
mov eax, dword [eax + 4]
jmp 0x40b5f1
add eax, 4
push eax
push str.version
mov ecx, esi
call fcn.00419770
lea ecx, [esp + 0xc4]
mov byte [esp + 0xca4], 7
call dword [0x4252c4]
mov ecx, dword [esp + 0x28]
push esi
call fcn.004189f0
cmp ebp, dword [edi + 8]
jb 0x40b628
call dword [0x425410]
mov dword [ebp + 0xb0], 0
lea ecx, [esp + 0x188]
mov byte [esp + 0xca4], 6
call dword [0x4252f0]
lea ecx, [esp + 0xe0]
mov byte [esp + 0xca4], 5
call dword [0x4252f0]
lea ecx, [esp + 0x150]
mov byte [esp + 0xca4], 3
call dword [0x4252f0]
mov edi, dword [esp + 0x18]
cmp ebp, dword [edi + 8]
jb 0x40b680
call dword [0x425410]
mov ebx, dword [0x425410]
add ebp, 0xb4
jmp 0x40ad95
cmp dword [esp + 0x130], 0x10
mov eax, dword [esp + 0x11c]
jae 0x40b6a9
lea eax, [esp + 0x11c]
push eax
lea ecx, [esp + 0x80]
call fcn.00418cb0
mov byte [esp + 0xca4], 2
mov eax, dword [esp + 0xb0]
cmp eax, 0x433730
mov dword [esp + 0x7c], vtable.TiXmlDocument.0
je 0x40b6dd
push eax
call fcn.0041b970
add esp, 4
lea ecx, [esp + 0x7c]
call fcn.00418970
lea ecx, [esp + 0x118]
mov byte [esp + 0xca4], 1
call dword [0x4252c4]
lea ecx, [esp + 0x16c]
mov byte [esp + 0xca4], 0
call dword [0x4252f0]
lea ecx, [esp + 0xcac]
mov dword [esp + 0xca4], 0xffffffff
call dword [0x4252f0]
mov ecx, dword [esp + 0xc9c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xc80]
xor ecx, esp
call fcn.0041b911
add esp, 0xc94
ret 0x1c