Function at 0x4c3930
Capabilities:
Create process on windows
Create thread
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x4b0
mov eax, dword [0x5f3418]
xor eax, ebp
mov dword [esp + 0x4a8], eax
xor edi, edi
mov dword [esp + 0x84], edi
mov dword [esp + 0x80], edi
mov dword [esp + 0x88], edi
lea eax, [esp + 0x2a0]
push 0x208
push edi
push eax
call fcn.005191b0
add esp, 0xc
mov ecx, dword [0x6bedd8]
push str.chromeshell
call fcn.004fd6b0
mov byte [esp + 7], al
test al, al
je 0x4c3c1f
push str.chrome.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test eax, eax
je 0x4c3e40
mov esi, eax
lea edi, [esp + 0x90]
push 0x208
push 0
push edi
call fcn.005191b0
add esp, 0xc
push 0x103
push edi
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov ebx, eax
xor eax, eax
dec eax
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], eax
mov dword [esp + 0x78], eax
cmp ebx, 0x7ffffff0
jae 0x4c4538
cmp ebx, 4
ja 0x4c39fa
lea eax, [esp + 0x70]
mov byte [eax + 0xb], bl
jmp 0x4c3a24
mov esi, ebx
or esi, 7
inc esi
js 0x4c4551
lea eax, [esi + esi]
push eax
call fcn.00510d64
add esp, 4
mov dword [esp + 0x70], eax
or esi, 0x80000000
mov dword [esp + 0x78], esi
mov dword [esp + 0x74], ebx
lea esi, [eax + ebx*2]
cmp esi, edi
setbe cl
cmp eax, edi
ja 0x4c3a38
test cl, cl
je 0x4c454e
test ebx, ebx
je 0x4c3a49
add ebx, ebx
push ebx
push edi
push eax
call fcn.00518c30
add esp, 0xc
mov word [esi], 0
lea edi, [esp + 0x70]
mov ecx, edi
push 0xffffffffffffffff
push 0x5c
call fcn.00562920
lea ebx, [esp + 0x7c]
lea ecx, [esp + 0x20]
push ebx
push eax
push 0
push edi
call fcn.0040e560
cmp byte [ebx - 1], 0
jns 0x4c3a81
push dword [esp + 0x70]
call fcn.0050fc7c
add esp, 4
lea esi, [esp + 0x20]
mov eax, dword [esi + 8]
mov dword [esp + 0x78], eax
movsd xmm0, qword [esi]
movsd qword [esp + 0x70], xmm0
mov ecx, edi
push 0xffffffffffffffff
push 0x5c
call fcn.00562920
mov ecx, esi
push ebx
push eax
push 0
push edi
call fcn.0040e560
cmp byte [esp + 0x7b], 0
jns 0x4c3ac0
push dword [esp + 0x70]
call fcn.0050fc7c
add esp, 4
mov eax, dword [esp + 0x28]
mov dword [esp + 0x78], eax
movq xmm0, qword [esp + 0x20]
movq qword [esp + 0x70], xmm0
xor eax, eax
dec eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov dword [esp + 0x6c], eax
movzx eax, byte [esp + 0x7b]
test al, al
jns 0x4c3af6
mov edi, dword [esp + 0x70]
mov eax, dword [esp + 0x74]
jmp 0x4c3af9
and eax, 0x7f
lea ebx, [esp + 0x64]
mov ecx, ebx
push eax
push edi
call fcn.0040e660
xor edi, edi
mov ecx, ebx
push edi
push edi
call fcn.00501f10
xor ebx, ebx
dec ebx
cmp eax, ebx
jne 0x4c453d
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], ebx
mov dword [esp + 0x60], ebx
mov dword [esp + 0x24], edi
mov dword [esp + 0x20], edi
mov dword [esp + 0x28], edi
push esi
push 0xd
push str.360secore.exe
call fcn.004fe880
add esp, 0xc
movzx eax, byte [esp + 0x2b]
test al, al
jns 0x4c3b57
mov esi, dword [esp + 0x20]
mov eax, dword [esp + 0x24]
jmp 0x4c3b5a
and eax, 0x7f
lea edi, [esp + 0x58]
lea ecx, [esp + 0x64]
push eax
push esi
push edi
call fcn.00410a10
cmp byte [esp + 0x2b], 0
jns 0x4c3b7d
push dword [esp + 0x20]
call fcn.0050fc7c
add esp, 4
push edi
call fcn.00420f30
add esp, 4
test al, al
jne 0x4c3c91
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x50], ebx
mov dword [esp + 0x54], ebx
xor eax, eax
lea esi, [esp + 0x20]
mov dword [esi + 4], eax
mov dword [esi], eax
mov dword [esi + 8], eax
push esi
push 0xd
push str.360coreupdate
call fcn.004fe880
add esp, 0xc
movzx eax, byte [esi + 0xb]
test al, al
jns 0x4c3bca
mov esi, dword [esp + 0x20]
mov eax, dword [esp + 0x24]
jmp 0x4c3bcd
and eax, 0x7f
lea edi, [esp + 0x4c]
lea ecx, [esp + 0x64]
push eax
push esi
push edi
call fcn.00410a10
cmp byte [esp + 0x2b], 0
jns 0x4c3bf0
push dword [esp + 0x20]
call fcn.0050fc7c
add esp, 4
push edi
call fcn.00420f30
add esp, 4
test al, al
jne 0x4c3cea
xor ebx, ebx
cmp byte [esp + 0x57], 0
jns 0x4c3d60
push dword [esp + 0x4c]
call fcn.0050fc7c
add esp, 4
jmp 0x4c3d60
push 0x104
lea ebx, [esp + 0x2a4]
push ebx
push edi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push ebx
call fcn.00510eb5
add esp, 4
lea esi, [esp + 0x90]
mov ecx, esi
push eax
push ebx
call fcn.0040e660
mov ecx, esi
push edi
push edi
call fcn.00501f10
cmp eax, 0xffffffff
jne 0x4c456d
cmp byte [esp + 0x8b], 0
js 0x4c415c
mov eax, dword [esp + 0x98]
mov dword [esp + 0x88], eax
movq xmm0, qword [esp + 0x90]
movq qword [esp + 0x80], xmm0
jmp 0x4c3e71
cmp byte [esp + 0x63], 0
jns 0x4c3c9c
mov edi, dword [esp + 0x58]
push edi
push 0x5d847a
push 0x103
lea eax, [esp + 0x2ac]
push eax
call fcn.0054fe30
add esp, 0x10
cmp byte [esp + 0x8b], 0
movzx eax, byte [esp + 0x63]
js 0x4c4581
test al, al
js 0x4c3d4a
mov eax, dword [esp + 0x60]
mov dword [esp + 0x88], eax
movq xmm0, qword [esp + 0x58]
movq qword [esp + 0x80], xmm0
jmp 0x4c3d5e
cmp byte [esp + 0x57], 0
jns 0x4c3cf5
mov edi, dword [esp + 0x4c]
push edi
push 0x5d847a
push 0x103
lea eax, [esp + 0x2ac]
push eax
call fcn.0054fe30
add esp, 0x10
cmp byte [esp + 0x8b], 0
movzx eax, byte [esp + 0x57]
js 0x4c45a6
test al, al
js 0x4c3eef
mov eax, dword [esp + 0x54]
mov dword [esp + 0x88], eax
movq xmm0, qword [esp + 0x4c]
movq qword [esp + 0x80], xmm0
jmp 0x4c3f03
lea ecx, [esp + 0x80]
push dword [esp + 0x5c]
push dword [esp + 0x5c]
call fcn.00407e20
mov bl, 1
xor eax, eax
dec eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], eax
xor eax, eax
lea esi, [esp + 0x20]
mov dword [esi + 4], eax
mov dword [esi], eax
mov dword [esi + 8], eax
push esi
push 0x11
push str.new_360secore.exe
call fcn.004fe880
add esp, 0xc
movzx eax, byte [esi + 0xb]
test al, al
jns 0x4c3d9f
mov esi, dword [esp + 0x20]
mov eax, dword [esp + 0x24]
jmp 0x4c3da2
and eax, 0x7f
lea edi, [esp + 0x4c]
lea ecx, [esp + 0x64]
push eax
push esi
push edi
call fcn.00410a10
cmp byte [esp + 0x2b], 0
jns 0x4c3dc5
push dword [esp + 0x20]
call fcn.0050fc7c
add esp, 4
push edi
call fcn.00420f30
add esp, 4
test al, al
je 0x4c3dee
lea eax, [esp + 0x20]
mov dword [eax], 0
lea ecx, [esp + 0x80]
push eax
push ecx
push edi
call fcn.0056d640
add esp, 0xc
cmp byte [esp + 0x57], 0
jns 0x4c3e01
push dword [esp + 0x4c]
call fcn.0050fc7c
add esp, 4
cmp byte [esp + 0x63], 0
jns 0x4c3e14
push dword [esp + 0x58]
call fcn.0050fc7c
add esp, 4
cmp byte [esp + 0x6f], 0
jns 0x4c3e27
push dword [esp + 0x64]
call fcn.0050fc7c
add esp, 4
cmp byte [esp + 0x7b], 0
jns 0x4c3e3a
push dword [esp + 0x70]
call fcn.0050fc7c
add esp, 4
xor edi, edi
test bl, bl
jne 0x4c3e71
cmp byte [esp + 0x8b], 0
jns 0x4c3e59
push dword [esp + 0x80]
call fcn.0050fc7c
add esp, 4
mov ecx, dword [esp + 0x4a8]
xor ecx, ebp
call fcn.00512ee3
mov eax, edi
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
xor ebx, ebx
dec ebx
lea eax, [esp + 0x70]
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
lea ecx, [esp + 0x80]
push eax
call fcn.0041a7b0
xor edi, edi
lea esi, [esp + 0x64]
mov dword [esi], edi
mov dword [esi + 4], edi
mov dword [esi + 8], edi
mov ecx, esi
push 0x20019
push str.Software360360se6UpdateClients02E720BD_2B50_4404_947C_65DBE64F6970
push 0x80000001
call fcn.004d2650
mov dword [esp + 0x5c], edi
mov dword [esp + 0x58], edi
mov dword [esp + 0x60], edi
cmp dword [esi], edi
je 0x4c3f61
lea edi, [esp + 0x58]
lea ecx, [esp + 0x64]
push edi
push 0x5d8972
call fcn.00408690
test eax, eax
jne 0x4c3f61
movzx ecx, byte [esp + 0x63]
test cl, cl
jns 0x4c3f0a
mov eax, dword [esp + 0x5c]
jmp 0x4c3f0f
lea ecx, [esp + 0x80]
push dword [esp + 0x50]
push dword [esp + 0x50]
call fcn.00407e20
mov bl, 1
jmp 0x4c3c03
mov eax, ecx
and eax, 0x7f
test eax, eax
je 0x4c3f61
test cl, cl
jns 0x4c3f1b
mov edi, dword [esp + 0x58]
lea edx, [esp + 0x90]
lea esi, [esp + 0x70]
mov ecx, esi
push eax
push edi
push edx
call fcn.00410a10
cmp byte [esi + 0xb], 0
js 0x4c4527
mov eax, dword [esp + 0x98]
lea edx, [esp + 0x70]
mov dword [edx + 8], eax
movq xmm0, qword [esp + 0x90]
movq qword [edx], xmm0
lea ecx, [esp + 0x80]
call fcn.0054f430
lea edi, [esp + 0x4c]
mov dword [edi], ebx
mov dword [edi + 4], ebx
mov dword [edi + 8], ebx
mov ecx, edi
push 0x5d8978
call fcn.005477d0
mov dword [esp + 0x40], ebx
mov dword [esp + 0x44], ebx
mov dword [esp + 0x48], ebx
cmp byte [esp + 0x7b], 0
js 0x4c4170
mov eax, dword [esp + 0x78]
mov dword [esp + 0x48], eax
movq xmm0, qword [esp + 0x70]
movq qword [esp + 0x40], xmm0
lea ebx, [esp + 0x90]
lea esi, [esp + 0x40]
mov ecx, esi
push 0xa
push str.sesafe.dll
push ebx
call fcn.00410a10
cmp byte [esi + 0xb], 0
js 0x4c414b
mov eax, dword [esp + 0x98]
mov dword [esp + 0x48], eax
movq xmm0, qword [esp + 0x90]
movq qword [esp + 0x40], xmm0
xor eax, eax
mov dword [esp + 0x3c], eax
cmp byte [esp + 0x4b], 0
jns 0x4c3ff3
mov esi, dword [esp + 0x40]
lea ecx, [esp + 0x3c]
push ecx
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
test eax, eax
je 0x4c43b0
cmp dword [esp + 0x3c], 0
je 0x4c43b0
lea ecx, [esp + 0x4c]
push 9
push str.___flag1
call fcn.00547750
xor ecx, ecx
inc ecx
xor esi, esi
mov eax, 0
mov edx, dword [ebp + 8]
test dl, 0x10
jne 0x4c4186
mov dword [esp + 0x34], esi
mov dword [esp + 0x30], esi
mov dword [esp + 0x38], esi
test dl, 4
jne 0x4c419b
test dl, 0x10
jne 0x4c42dd
mov ecx, edx
and ecx, 0xc
cmp ecx, 4
je 0x4c43c4
mov cl, byte [esp + 7]
xor cl, 1
and dl, cl
jne 0x4c43c4
test eax, eax
je 0x4c40b4
pcmpeqd xmm0, xmm0
movdqu xmmword [esp + 0x9c], xmm0
movdqa xmmword [esp + 0x90], xmm0
xor edi, edi
push edi
push edi
push eax
push ebx
mov esi, eax
call dword [sym.imp.USER32.dll_GetMessageW]
test eax, eax
je 0x4c40b6
push ebx
call dword [sym.imp.USER32.dll_TranslateMessage]
push ebx
call dword [sym.imp.USER32.dll_DispatchMessageW]
push edi
push edi
push esi
push ebx
jmp 0x4c4096
xor edi, edi
cmp byte [esp + 0x3b], 0
jns 0x4c40c9
push dword [esp + 0x30]
call fcn.0050fc7c
add esp, 4
cmp byte [esp + 0x4b], 0
jns 0x4c40dc
push dword [esp + 0x40]
call fcn.0050fc7c
add esp, 4
cmp byte [esp + 0x57], 0
jns 0x4c40ef
push dword [esp + 0x4c]
call fcn.0050fc7c
add esp, 4
cmp byte [esp + 0x63], 0
jns 0x4c4102
push dword [esp + 0x58]
call fcn.0050fc7c
add esp, 4
mov eax, dword [esp + 0x64]
test eax, eax
je 0x4c411b
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
xor eax, eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], eax
mov esi, dword [esp + 0x6c]
mov dword [esp + 0x6c], 0
test esi, esi
jne 0x4c4556
cmp byte [esp + 0x7b], 0
jns 0x4c3e40
push dword [esp + 0x70]
call fcn.0050fc7c
add esp, 4
jmp 0x4c3e40
push dword [esp + 0x40]
call fcn.0050fc7c
add esp, 4
jmp 0x4c3fc8
push dword [esp + 0x80]
call fcn.0050fc7c
add esp, 4
jmp 0x4c3c6c
lea ecx, [esp + 0x40]
push dword [esp + 0x74]
push dword [esp + 0x74]
call fcn.0040ccc0
jmp 0x4c3fa4
mov dword [esp + 0xc], ecx
call fcn.0054fd70
mov ecx, dword [esp + 0xc]
mov edx, dword [ebp + 8]
jmp 0x4c4039
mov dword [esp + 0xc], ecx
mov ecx, str.__secore_update
mov esi, 0x5d7d84
cmp byte [esp + 7], 0
cmovne esi, ecx
mov dword [esp + 8], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push esi
push eax
push dword [esp + 0x10]
lea eax, [esp + 0x2ac]
push eax
push str.__ls____typeseupdate__360seautoupdate___v3Wnd_d___v3seProcId_d__ls__prefetch:8
push ebx
call fcn.0056bf50
add esp, 0x18
cmp byte [esp + 0x3b], 0
jns 0x4c41ea
push dword [esp + 0x30]
call fcn.0050fc7c
add esp, 4
mov eax, dword [esp + 0x98]
lea ecx, [esp + 0x30]
mov dword [ecx + 8], eax
movsd xmm0, qword [esp + 0x90]
movsd qword [ecx], xmm0
xorps xmm0, xmm0
movups xmmword [esp + 0xc4], xmm0
movups xmmword [esp + 0xb4], xmm0
movups xmmword [esp + 0xa4], xmm0
movups xmmword [esp + 0x94], xmm0
mov dword [esp + 0x90], 0x44
movzx eax, byte [esp + 0x57]
mov edx, eax
and edx, 0x7f
test al, al
cmovs edx, dword [esp + 0x50]
movaps xmmword [esp + 0x20], xmm0
cmovs edi, dword [esp + 0x4c]
push edx
push edi
call fcn.00410600
xor edi, edi
lea ebx, [esp + 0x10]
mov dword [ebx], edi
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push ebx
push edi
push edi
push 0x4c4d00
push edi
push edi
call esi
mov dword [0x65b258], eax
mov dword [ebx], edi
push ebx
push edi
push dword [esp + 0x14]
push 0x5501c0
push edi
push edi
call esi
lea ecx, [esp + 0x30]
mov dword [0x5f845c], eax
cmp byte [ecx + 0xb], 0
jns 0x4c4298
mov ecx, dword [esp + 0x30]
sub esp, 0x28
lea eax, [esp + 0x48]
mov dword [esp + 0x24], eax
lea ebx, [esp + 0xb8]
mov dword [esp + 0x20], ebx
mov dword [esp + 0x1c], edi
mov dword [esp + 0x18], edi
movdqa xmm0, xmmword [0x5d7ad0]
movdqu xmmword [esp + 8], xmm0
mov dword [esp + 4], ecx
mov dword [esp], edi
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov eax, dword [esp + 8]
mov edx, dword [ebp + 8]
jmp 0x4c404e
mov dword [esp + 8], eax
xor eax, eax
lea edi, [esp + 0x10]
mov dword [edi + 4], eax
mov dword [edi], eax
mov dword [edi + 8], eax
push edi
push 0x3ea
call fcn.0041a930
add esp, 8
mov eax, str.__secore_update
mov esi, 0x5d7d84
cmp byte [esp + 7], 0
cmovne esi, eax
cmp byte [edi + 0xb], 0
jns 0x4c4319
mov edi, dword [esp + 0x10]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push esi
push edi
push eax
push dword [esp + 0x14]
lea eax, [esp + 0x2b0]
push eax
push str.__ls____typeseupdate__360seautoupdate___v3Wnd_d___v3seProcId_d___v3manual___user_data__ls___ls__prefetch:8
push ebx
call fcn.0056bf50
add esp, 0x1c
cmp byte [esp + 0x3b], 0
jns 0x4c434f
push dword [esp + 0x30]
call fcn.0050fc7c
add esp, 4
mov eax, dword [esp + 0x98]
mov dword [esp + 0x38], eax
movsd xmm0, qword [esp + 0x90]
movsd qword [esp + 0x30], xmm0
xorps xmm0, xmm0
movups xmmword [esp + 0xc4], xmm0
movups xmmword [esp + 0xb4], xmm0
movups xmmword [esp + 0xa4], xmm0
movups xmmword [esp + 0x94], xmm0
mov dword [esp + 0x90], 0x44
movaps xmmword [esp + 0x20], xmm0
cmp byte [esp + 0x3b], 0
jns 0x4c4466
mov eax, dword [esp + 0x30]
jmp 0x4c446a
call fcn.0054fe90
xor ecx, ecx
test al, al
je 0x4c4013
jmp 0x4c4026
mov ecx, str.__secore_update
mov esi, 0x5d7d84
cmp byte [esp + 7], 0
cmovne esi, ecx
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push esi
push eax
mov esi, edi
push edi
lea eax, [esp + 0x2ac]
push eax
push str.__ls____typeseupdate__360se_safe_browsing_autoupdate___v3Wnd_d___v3seProcId_d__ls__prefetch:8
push ebx
call fcn.0056bf50
add esp, 0x18
cmp byte [esp + 0x3b], 0
jns 0x4c440c
push dword [esp + 0x30]
call fcn.0050fc7c
add esp, 4
mov eax, dword [esp + 0x98]
mov dword [esp + 0x38], eax
movsd xmm0, qword [esp + 0x90]
movsd qword [esp + 0x30], xmm0
xorps xmm0, xmm0
movups xmmword [esp + 0xc4], xmm0
movups xmmword [esp + 0xb4], xmm0
movups xmmword [esp + 0xa4], xmm0
movups xmmword [esp + 0x94], xmm0
mov dword [esp + 0x90], 0x44
movaps xmmword [esp + 0x20], xmm0
cmp byte [esp + 0x3b], 0
jns 0x4c44c9
mov eax, dword [esp + 0x30]
jmp 0x4c44cd
lea eax, [esp + 0x30]
sub esp, 0x28
lea ecx, [esp + 0x48]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x20], ebx
xor ecx, ecx
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x18], ecx
movdqa xmm0, xmmword [0x5d7ad0]
movdqu xmmword [esp + 8], xmm0
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x4c4508
push 0xffffffffffffffff
push dword [esp + 0x24]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp byte [esp + 0x1b], 0
jns 0x4c44c1
push dword [esp + 0x10]
call fcn.0050fc7c
add esp, 4
xor edi, edi
inc edi
jmp 0x4c40b6
lea eax, [esp + 0x30]
sub esp, 0x28
lea ecx, [esp + 0x48]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x20], ebx
xor ecx, ecx
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x18], ecx
movdqa xmm0, xmmword [0x5d7ad0]
movdqu xmmword [esp + 8], xmm0
mov dword [esp + 4], eax
mov dword [esp], ecx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
mov eax, esi
jmp 0x4c4074
cmp byte [esp + 0x1b], 0
jns 0x4c451b
push dword [esp + 0x10]
call fcn.0050fc7c
add esp, 4
mov eax, dword [esp + 8]
mov edx, dword [ebp + 8]
jmp 0x4c4057
push dword [esp + 0x70]
call fcn.0050fc7c
add esp, 4
jmp 0x4c3f3a
call fcn.0052ce30
lea ecx, [esp + 0x64]
push 0xffffffffffffffff
push eax
call fcn.00561c50
jmp 0x4c3b1c
int3
call fcn.00549f00
mov eax, dword [esi]
mov ebx, dword [eax]
mov ecx, ebx
call dword [section..00cfg]
mov ecx, esi
push 1
call ebx
jmp 0x4c412f
lea ecx, [esp + 0x90]
push 0xffffffffffffffff
push eax
call fcn.00561c50
jmp 0x4c3c5e
mov edx, eax
and edx, 0x7f
test al, al
lea eax, [esp + 0x58]
cmovs edx, dword [eax + 4]
cmovs eax, dword [eax]
lea ecx, [esp + 0x80]
push edx
push eax
call fcn.004d18b0
jmp 0x4c3d5e
mov edx, eax
and edx, 0x7f
test al, al
lea eax, [esp + 0x4c]
cmovs edx, dword [eax + 4]
cmovs eax, dword [eax]
lea ecx, [esp + 0x80]
push edx
push eax
call fcn.004d18b0
jmp 0x4c3f03