Function at 0x40efd0
Capabilities:
Encode data using xor

Disassembly:
sub esp, 0x38
mov eax, dword [0x429a14]
push ebx
push ebp
xor ebx, ebx
or ebp, 0xffffffff
push esi
cmp eax, ebx
push edi
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x1c], ebp
mov dword [esp + 0x14], ebp
je 0x40f136
mov eax, dword [0x429a08]
mov edi, dword [eax]
add eax, 4
cmp edi, ebx
mov dword [0x429a08], eax
je 0x40f0b9
push 2
push 5
call fcn.00403990
add esp, 8
cmp eax, ebx
je 0x40f031
cmp byte [eax], 0
je 0x40f031
push ebx
push edi
call fcn.00403eb0
push eax
call fcn.00401f40
add esp, 0xc
mov eax, dword [0x429a04]
mov esi, dword [0x429a00]
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], ebx
fild qword [esp + 0x38]
mov dword [esp + 0x38], esi
mov dword [esp + 0x3c], ebx
fild qword [esp + 0x38]
fmul qword [0x421558]
fdiv st(1)
call fcn.00419ff4
mov edx, dword [edi + 0x20]
mov dword [esp + 0x3c], ebx
add esi, edx
mov ebp, eax
mov dword [esp + 0x38], esi
mov dword [0x429a00], esi
fild qword [esp + 0x38]
fmul qword [0x421558]
fdiv st(1)
call fcn.00419ff4
push eax
push ebp
push edi
fstp st(0)
call fcn.0040ebd0
add esp, 0xc
cmp eax, 0xffffffff
jne 0x40f0a3
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x38
ret
push eax
call fcn.00401380
add esp, 4
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x38
ret
mov esi, dword [0x429ac0]
mov edi, dword [sym.imp.USER32.dll_GetDlgItem]
cmp esi, ebx
mov dword [0x429afc], ebx
mov dword [0x429a14], ebx
je 0x40f0f3
push 1
push 5
call fcn.00403990
add esp, 8
push eax
push 0x417
push esi
call edi
push eax
call fcn.00407180
add esp, 8
mov esi, dword [0x429a38]
cmp esi, ebx
je 0x40f11b
push 3
push 5
call fcn.00403990
add esp, 8
push eax
push 0x3e9
push esi
call edi
push eax
call fcn.00407180
add esp, 8
cmp dword [0x429708], ebx
jne 0x40f12d
pop edi
pop esi
pop ebp
xor eax, eax
pop ebx
add esp, 0x38
ret
push ebx
call fcn.00401ec0
add esp, 4
mov ecx, dword [0x42967c]
mov dword [esp + 0x10], ebp
mov byte [ecx], 0
mov ecx, dword [0x42970c]
mov eax, dword [0x429694]
cmp ecx, ebx
je 0x40f164
lea eax, [eax + eax*4 + 5]
xor edx, edx
lea eax, [eax + eax*4]
shl eax, 2
div ecx
mov dword [esp + 0x18], eax
mov eax, dword [0x429694]
mov ecx, dword [0x42970c]
inc eax
cmp eax, ecx
mov dword [0x429694], eax
jae 0x40fc92
mov eax, dword [0x429690]
mov ebp, eax
push eax
mov dword [esp + 0x28], ebp
call fcn.00403aa0
mov dword [0x429690], eax
xor eax, eax
mov ax, word [ebp + 4]
push ebp
mov dword [esp + 0x30], eax
mov word [ebp + 4], 0
call fcn.0040d520
mov ecx, dword [0x429680]
mov ebx, eax
add esp, 8
mov dword [esp + 0x34], ebx
cmp byte [ecx], 0
je 0x40f164
test byte [esp + 0x28], 2
je 0x40f263
mov edx, dword [0x429678]
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x40f1ce
mov ecx, dword [0x429680]
mov edx, dword [0x429674]
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x40f1e4
mov edx, dword [0x429674]
push 0x5c
push edx
call fcn.00418f90
add esp, 8
test eax, eax
je 0x40f207
mov byte [eax + 1], 0
mov eax, dword [0x4299d8]
test byte [eax], 0x10
je 0x40f263
mov ecx, dword [0x429680]
push 0
push ecx
call fcn.00401100
mov esi, eax
add esp, 8
cmp esi, 0xffffffff
je 0x40f25b
push 0xfffffffffffffff8
push esi
call fcn.00401260
lea edx, [esp + 0x48]
push 8
push edx
push esi
call fcn.00401180
push esi
call fcn.00401380
add esp, 0x18
cmp word [esp + 0x40], 0x7f7f
jne 0x40f25b
test byte [esp + 0x42], 2
jne 0x40f164
mov eax, dword [0x429678]
mov byte [eax], 0x30
mov eax, dword [0x429694]
xor edx, edx
lea eax, [eax + eax*4 + 5]
lea eax, [eax + eax*4]
shl eax, 2
div dword [0x42970c]
mov dword [esp + 0x20], eax
mov eax, dword [ebp + 8]
test ah, 1
jne 0x40fc3d
test dword [0x429a88], eax
je 0x40fc3d
test ah, 2
jne 0x40f427
test al, 0x40
mov edi, 1
je 0x40f2c9
mov ecx, dword [0x429680]
push 0
push ecx
call fcn.00401100
add esp, 8
cmp eax, 0xffffffff
je 0x40f2c9
push eax
call fcn.00401380
add esp, 4
jmp 0x40f324
test ebx, ebx
je 0x40f326
mov edx, dword [0x429680]
push 0
push edx
mov dword [esp + 0x38], 0
call fcn.00401100
mov esi, eax
add esp, 8
cmp esi, 0xffffffff
je 0x40f319
push esi
call fcn.00401280
mov ecx, dword [ebp + 0x18]
add esp, 4
cmp eax, ecx
jne 0x40f310
lea eax, [esp + 0x38]
lea ecx, [esp + 0x30]
push eax
push ecx
push esi
call fcn.00405560
add esp, 0xc
push esi
call fcn.00401380
add esp, 4
mov edx, dword [esp + 0x30]
mov eax, dword [ebp + 0x14]
cmp edx, eax
jne 0x40f326
xor edi, edi
test edi, edi
mov dword [0x429afc], 0
je 0x40f43a
mov eax, dword [0x4299dc]
test eax, eax
je 0x40f164
push 2
push 5
call fcn.00403990
add esp, 8
test eax, eax
je 0x40f369
cmp byte [eax], 0
je 0x40f369
mov ecx, dword [0x429680]
push ecx
call fcn.00401f40
add esp, 4
mov edx, dword [0x429680]
push edx
call fcn.00402370
mov ecx, dword [0x429680]
mov edx, dword [0x42967c]
add esp, 4
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x40f384
mov eax, dword [0x42967c]
push str..__A
push eax
call fcn.00402060
mov ecx, dword [0x42967c]
push 0
push ecx
call fcn.00401100
add esp, 0x10
cmp eax, 0xffffffff
je 0x40f3f4
push eax
call fcn.00401380
mov esi, dword [0x42967c]
or ecx, 0xffffffff
mov edi, esi
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, esi
push eax
mov dl, byte [ecx + esi - 1]
or ecx, 0xffffffff
inc dl
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov byte [ecx + esi - 1], dl
mov eax, dword [0x42967c]
push eax
call fcn.00401100
add esp, 0xc
cmp eax, 0xffffffff
jne 0x40f3b4
mov eax, dword [ebp + 8]
test al, 0x20
je 0x40f445
push 0
push ebp
call fcn.00403eb0
mov ecx, dword [0x429b04]
mov edx, dword [0x42967c]
push eax
push ecx
push edx
call fcn.0040eef0
add esp, 0x14
test eax, eax
je 0x40fc92
jmp 0x40fa3f
mov eax, dword [0x429680]
push eax
call fcn.00402370
add esp, 4
jmp 0x40fc3d
mov word [ebp + 4], 0x1f5
jmp 0x40fb6e
test eax, 0x200000
je 0x40f47a
mov esi, dword [esp + 0x20]
mov eax, dword [esp + 0x18]
sub esi, eax
shr esi, 1
add esi, eax
push esi
push eax
push ebp
call fcn.0040ebd0
add esp, 0xc
cmp eax, 0xffffffff
mov dword [esp + 0x1c], eax
je 0x40fc92
mov ebx, esi
mov dword [esp + 0x18], ebx
jmp 0x40f47e
mov ebx, dword [esp + 0x18]
mov eax, dword [0x42967c]
push eax
call fcn.00401150
mov esi, eax
add esp, 4
cmp esi, 0xffffffff
mov dword [esp + 0x10], esi
jne 0x40f4b2
mov ecx, dword [0x42967c]
mov dword [0x429afc], 0x11
push ecx
call fcn.00409860
jmp 0x40fc63
mov al, byte [esp + 0x28]
test al, 1
je 0x40f7b6
mov eax, dword [ebp + 0x28]
xor edx, edx
mov dx, word [ebp + 0x2c]
mov edi, dword [edx*4 + 0x429998]
add edi, 4
test eax, eax
jle 0x40f4e5
mov edx, eax
push edi
call fcn.00403aa0
add esp, 4
dec edx
mov edi, eax
jne 0x40f4d7
mov eax, dword [edi + 8]
test al, 0x20
je 0x40f525
push esi
call fcn.00401380
push 0
push ebp
mov dword [esp + 0x1c], 0xffffffff
call fcn.00403eb0
mov ecx, dword [0x42967c]
push eax
mov eax, dword [0x429b04]
push eax
push ecx
call fcn.0040eef0
add esp, 0x18
test eax, eax
je 0x40fc66
jmp 0x40f6cc
test eax, 0x200000
je 0x40f554
mov esi, dword [esp + 0x20]
sub esi, ebx
shr esi, 1
add esi, ebx
push esi
push ebx
push edi
call fcn.0040ebd0
add esp, 0xc
cmp eax, 0xffffffff
mov dword [esp + 0x14], eax
je 0x40fc66
mov dword [esp + 0x18], esi
jmp 0x40f56d
mov edx, dword [edi + 0x1c]
push edx
call fcn.0040a8b0
add esp, 4
mov dword [0x429afc], eax
test eax, eax
jne 0x40fc66
mov ecx, dword [0x4296e8]
xor eax, eax
mov ax, word [ebp + 0x2c]
xor edx, edx
cmp ecx, edx
mov eax, dword [eax*4 + 0x429958]
mov ebx, dword [eax + 8]
mov ax, word [eax + 2]
mov dword [0x4296d0], edx
mov dword [0x4296cc], edx
mov byte [0x4296a8], 0x39
je 0x40f612
cmp ax, dx
je 0x40f612
cmp ebx, 2
je 0x40f612
mov esi, 5
test ebx, ebx
mov dword [0x4296cc], esi
jne 0x40f5de
xor eax, eax
mov edx, 1
mov al, byte [ecx]
mov esi, eax
xor esi, 0x6a
inc ecx
cmp esi, 0x1f
mov dword [0x4296cc], esi
jle 0x40f5de
mov esi, 0x1f
mov dword [0x4296cc], esi
xor eax, eax
test esi, esi
jle 0x40f607
mov ebp, ecx
sub ebp, 0x4296ac
mov bl, byte [eax + ebp + 0x4296ac]
mov cl, dl
add cl, al
xor bl, cl
xor bl, 0x6a
mov byte [eax + 0x4296ac], bl
inc eax
cmp eax, esi
jl 0x40f5ec
mov ebp, dword [esp + 0x24]
mov byte [esi + 0x4296ac], 0
mov eax, dword [esp + 0x14]
cmp eax, 0xffffffff
jne 0x40f620
mov eax, dword [0x42426c]
mov ebx, dword [esp + 0x10]
lea edx, [esp + 0x38]
push edx
mov edx, dword [edi + 0x20]
lea ecx, [esp + 0x34]
push ecx
push edx
push eax
push ebx
call fcn.00403490
mov esi, eax
mov eax, dword [0x429a78]
add esp, 0x14
test esi, esi
je 0x40f67b
cmp eax, 2
je 0x40fc52
push 0
push edi
call fcn.00403eb0
add esp, 8
push eax
push 0
push edi
call fcn.00403eb0
add esp, 8
push eax
push esi
call fcn.0040aab0
add esp, 0xc
mov dword [0x429afc], eax
jmp 0x40fc52
cmp eax, 2
je 0x40fc52
mov eax, dword [esp + 0x14]
or esi, 0xffffffff
cmp eax, esi
je 0x40f69c
push eax
call fcn.00401380
add esp, 4
mov dword [esp + 0x14], esi
push ebx
call fcn.00401380
mov eax, dword [esp + 0x34]
mov ecx, dword [edi + 0x18]
add esp, 4
cmp eax, ecx
mov dword [esp + 0x10], esi
jne 0x40f6bf
mov ecx, dword [esp + 0x38]
mov eax, dword [edi + 0x14]
cmp ecx, eax
je 0x40f6cc
call fcn.0040dc30
test eax, eax
je 0x40fc52
mov eax, dword [0x4299d8]
mov ecx, dword [0x4296e8]
xor edx, edx
mov edi, dword [eax + 8]
mov ax, word [eax + 2]
cmp ecx, edx
mov dword [0x4296d0], edx
mov dword [0x4296cc], edx
mov byte [0x4296a8], 0x39
je 0x40f769
test ax, ax
je 0x40f769
cmp edi, 2
je 0x40f769
mov esi, 5
test edi, edi
mov dword [0x4296cc], esi
jne 0x40f735
xor eax, eax
mov edx, 1
mov al, byte [ecx]
mov esi, eax
xor esi, 0x6a
inc ecx
cmp esi, 0x1f
mov dword [0x4296cc], esi
jle 0x40f735
mov esi, 0x1f
mov dword [0x4296cc], esi
xor eax, eax
test esi, esi
jle 0x40f75e
mov edi, ecx
sub edi, 0x4296ac
mov bl, byte [edi + eax + 0x4296ac]
mov cl, dl
add cl, al
xor bl, cl
xor bl, 0x6a
mov byte [eax + 0x4296ac], bl
inc eax
cmp eax, esi
jl 0x40f743
mov ebp, dword [esp + 0x24]
mov byte [esi + 0x4296ac], 0
mov esi, dword [esp + 0x1c]
cmp esi, 0xffffffff
je 0x40f780
mov edi, dword [0x42426c]
mov dword [0x42426c], esi
jmp 0x40f784
mov edi, dword [esp + 0x38]
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x18]
mov ecx, dword [0x42967c]
push edx
push eax
push ecx
push ebp
call fcn.0040dcb0
add esp, 0x10
cmp esi, 0xffffffff
je 0x40f7a9
mov dword [0x42426c], edi
test eax, eax
je 0x40fc52
jmp 0x40fa3f
test al, 2
je 0x40f8b7
mov ecx, dword [0x4299e4]
test ecx, ecx
je 0x40fa3f
mov eax, dword [0x4299e0]
test eax, eax
je 0x40fa3f
mov edx, dword [esp + 0x10]
push eax
push ecx
push edx
call fcn.004011c0
add esp, 0xc
mov dword [0x429afc], eax
test eax, eax
jne 0x40fc66
mov eax, dword [ebp + 0x1c]
push eax
call fcn.0040a8b0
add esp, 4
mov dword [0x429afc], eax
test eax, eax
jne 0x40fc66
mov ecx, dword [0x4242a0]
lea edx, [ecx - 0x738580]
or ecx, 0xffffffff
mov edi, edx
repne scasb al, byte es:[edi]
not ecx
add ecx, 0xfffffffe
cmp ecx, 0x14
jl 0x40f831
cmp byte [ecx + edx], 0xf7
je 0x40f844
mov edx, dword [0x429acc]
push 0
push 0x64
push 0xb
push edx
call dword [sym.imp.USER32.dll_SetTimer]
mov ecx, dword [0x42426c]
mov edi, dword [esp + 0x10]
xor ebx, ebx
mov byte [0x4296a8], 0x39
mov dword [0x4296d0], ebx
mov dword [0x4296cc], ebx
mov eax, dword [ebp + 0x20]
push ebx
push ebx
push eax
push ecx
push edi
call fcn.00403490
mov esi, eax
mov eax, dword [0x429a78]
add esp, 0x14
cmp esi, ebx
je 0x40f898
cmp eax, 2
je 0x40fc66
push ebx
push ebp
call fcn.00403eb0
add esp, 8
push eax
push ebx
jmp 0x40f9c4
cmp eax, 2
je 0x40fc66
push edi
call fcn.00401380
add esp, 4
mov dword [esp + 0x10], 0xffffffff
jmp 0x40fa3f
cmp dword [esp + 0x1c], 0xffffffff
jne 0x40f8d7
mov edx, dword [ebp + 0x1c]
push edx
call fcn.0040a8b0
add esp, 4
mov dword [0x429afc], eax
test eax, eax
jne 0x40fc78
mov esi, dword [0x4296e8]
xor eax, eax
mov ax, word [ebp + 0x2c]
xor ebx, ebx
cmp esi, ebx
mov eax, dword [eax*4 + 0x429958]
mov edi, dword [eax + 8]
mov ax, word [eax + 2]
mov dword [0x4296d0], ebx
mov dword [0x4296cc], ebx
mov byte [0x4296a8], 0x39
je 0x40f978
cmp ax, bx
je 0x40f978
cmp edi, 2
je 0x40f978
xor edx, edx
mov ecx, 5
cmp edi, ebx
mov dword [0x4296cc], ecx
jne 0x40f948
xor ecx, ecx
mov edx, 1
mov cl, byte [esi]
xor ecx, 0x6a
inc esi
cmp ecx, 0x1f
mov dword [0x4296cc], ecx
jle 0x40f948
mov ecx, 0x1f
mov dword [0x4296cc], ecx
xor eax, eax
cmp ecx, ebx
jle 0x40f96d
sub esi, 0x4296ac
mov bl, dl
add bl, al
xor bl, byte [esi + eax + 0x4296ac]
xor bl, 0x6a
mov byte [eax + 0x4296ac], bl
inc eax
cmp eax, ecx
jl 0x40f954
mov ebp, dword [esp + 0x24]
mov byte [ecx + 0x4296ac], 0
mov eax, dword [esp + 0x1c]
cmp eax, 0xffffffff
jne 0x40f986
mov eax, dword [0x42426c]
mov edi, dword [esp + 0x10]
lea ecx, [esp + 0x30]
push ecx
mov ecx, dword [ebp + 0x20]
lea edx, [esp + 0x3c]
push edx
push ecx
push eax
push edi
call fcn.00403490
mov esi, eax
mov eax, dword [0x429a78]
add esp, 0x14
test esi, esi
je 0x40f9e1
cmp eax, 2
je 0x40fc66
push 0
push ebp
call fcn.00403eb0
add esp, 8
push eax
push 0
push ebp
call fcn.00403eb0
add esp, 8
push eax
push esi
call fcn.0040aab0
add esp, 0xc
mov dword [0x429afc], eax
jmp 0x40fc66
cmp eax, 2
je 0x40fc66
mov eax, dword [ebp + 8]
test al, 8
je 0x40fa0b
test al, 6
lea eax, [ebp + 0x42]
jne 0x40f9fb
lea eax, [ebp + 0x2e]
lea edx, [eax + 0x10]
lea ecx, [eax + 8]
push edx
push ecx
push eax
push edi
call dword [sym.imp.KERNEL32.dll_SetFileTime]
push edi
call fcn.00401380
mov edx, dword [esp + 0x3c]
mov eax, dword [ebp + 0x18]
add esp, 4
cmp edx, eax
mov dword [esp + 0x10], 0xffffffff
jne 0x40fa32
mov eax, dword [esp + 0x30]
mov ecx, dword [ebp + 0x14]
cmp eax, ecx
je 0x40fa3f
call fcn.0040dc30
test eax, eax
je 0x40fc66
cmp dword [ebp + 0x10], 3
jne 0x40fa7f
mov ecx, dword [0x429680]
push 0
push ecx
call fcn.00401100
add esp, 8
cmp eax, 0xffffffff
je 0x40fa7f
push eax
call fcn.00401380
mov edx, dword [0x429680]
push edx
call fcn.00402b10
mov eax, dword [0x429680]
push eax
call fcn.00401390
add esp, 0xc
mov dword [esp + 0x34], eax
cmp dword [ebp + 0x10], 2
je 0x40fb3a
mov eax, dword [ebp + 8]
mov esi, 0x1000
test esi, eax
jne 0x40fb3a
mov eax, dword [esp + 0x34]
test eax, eax
je 0x40fad5
mov ecx, dword [0x42967c]
mov edx, dword [0x429680]
push ecx
push edx
call fcn.00411320
add esp, 8
test eax, eax
je 0x40facd
mov dword [0x429af4], 1
mov word [ebp + 4], 0x1f4
jmp 0x40fae4
mov word [ebp + 4], 0x1b
jmp 0x40fae4
mov eax, dword [0x42967c]
push eax
push ebp
call fcn.0040d820
add esp, 8
mov ax, word [ebp + 4]
cmp ax, 0x1b
jne 0x40fb09
mov ecx, dword [0x429680]
mov dword [0x429afc], 0x16
push ecx
call fcn.00409860
jmp 0x40fc4f
test dword [ebp + 0xc], esi
je 0x40fb6e
cmp ax, 0x1f4
push 0x100
jne 0x40fb2a
mov edx, dword [0x42967c]
push edx
call fcn.00418dfc
add esp, 8
jmp 0x40fb6e
mov eax, dword [0x429680]
push eax
call fcn.00418dfc
add esp, 8
jmp 0x40fb6e
mov edi, dword [0x42967c]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
inc ecx
push ecx
call fcn.004190e0
mov dword [ebp + 0x24], eax
mov ecx, dword [0x42967c]
add esp, 4
mov edx, eax
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x40fb5e
mov word [ebp + 4], 0x1f6
mov eax, dword [0x429afc]
test eax, eax
jne 0x40fc52
mov ecx, dword [0x42967c]
mov al, byte [esp + 0x28]
test al, 2
mov byte [ecx], 0
je 0x40fb92
mov word [ebp + 4], 0
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x40fbc2
mov eax, dword [ebp + 8]
test ah, 4
je 0x40fbc2
mov ax, word [ebp + 4]
cmp ax, 0x17
je 0x40fbbd
cmp ax, 0x19
je 0x40fbbd
cmp ax, 0x1f5
je 0x40fbbd
cmp ax, 0x1f4
jne 0x40fbc2
call fcn.0040e7b0
cmp dword [ebp + 0x10], 3
jne 0x40fbe7
mov ax, word [ebp + 4]
cmp ax, 0x17
je 0x40fbd8
cmp ax, 0x19
jne 0x40fbe7
mov edx, dword [0x429680]
push edx
call fcn.00402820
add esp, 4
mov eax, dword [ebp + 8]
test ah, 0x10
je 0x40fc1f
mov eax, dword [0x429a2c]
test eax, eax
je 0x40fc00
cmp word [ebp + 4], 0x1f5
je 0x40fc16
mov ax, word [ebp + 4]
cmp ax, 0x17
je 0x40fc16
cmp ax, 0x19
je 0x40fc16
cmp ax, 0x1f4
jne 0x40fc1f
push ebp
call fcn.0040c980
add esp, 4
mov eax, dword [ebp + 8]
test ah, 8
je 0x40fc2d
mov dword [0x4296a4], ebp
test byte [ebp + 8], 0x10
je 0x40fc3d
mov dword [0x429a44], 1
mov eax, dword [esp + 0x20]
push eax
call fcn.00401ec0
mov dword [esp + 0x30], 1
add esp, 4
mov eax, dword [esp + 0x14]
cmp eax, 0xffffffff
je 0x40fc66
mov ecx, eax
push ecx
call fcn.00401380
add esp, 4
mov eax, dword [esp + 0x1c]
cmp eax, 0xffffffff
je 0x40fc78
push eax
call fcn.00401380
add esp, 4
mov eax, dword [esp + 0x10]
cmp eax, 0xffffffff
je 0x40fc8a
push eax
call fcn.00401380
add esp, 4
mov eax, dword [esp + 0x2c]
test eax, eax
jne 0x40fca5
mov eax, dword [0x42967c]
cmp byte [eax], 0
je 0x40fca5
push eax
call fcn.00419510
add esp, 4
mov eax, dword [esp + 0x2c]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x38
ret