Function at 0x41731e
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x100
push esi
push 0xfe
push dword [ebp + 8]
lea eax, [ebp - 0x100]
push eax
call fcn.00438c34
add esp, 0xc
lea eax, [ebp - 0x100]
push eax
call dword [sym.imp.USER32.dll_CharLowerA]
cmp byte [ebp - 0x100], 0x61
jne 0x41817b
cmp byte [ebp - 0xff], 0x5f
jne 0x41817b
lea esi, [ebp - 0xfe]
mov eax, esi
push str.index
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417386
push 0x67
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.yyyy
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
je 0x418177
lea eax, [ebp - 0xfe]
push str.year
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
je 0x418177
lea eax, [ebp - 0xfe]
push str.mmmm
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x4173da
push 0xa
jmp 0x418194
lea eax, [ebp - 0xfe]
push 0x458aa4
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x4173f8
push 0xb
jmp 0x418194
lea eax, [ebp - 0xfe]
push 0x458aa0
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
je 0x418173
lea eax, [ebp - 0xfe]
push 0x458a9c
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
je 0x418173
lea eax, [ebp - 0xfe]
push str.dddd
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x41744c
push 0x10
jmp 0x418194
lea eax, [ebp - 0xfe]
push 0x458a90
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x41746a
push 0x11
jmp 0x418194
lea eax, [ebp - 0xfe]
push 0x458a8c
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
je 0x41816f
lea eax, [ebp - 0xfe]
push str.mday
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
je 0x41816f
lea eax, [ebp - 0xfe]
push str.wday
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x4174be
push 0xf
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.yday
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x4174dc
push 0xd
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.yweek
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x4174fa
push 0xe
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.hour
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417518
push 0x12
jmp 0x418194
lea eax, [ebp - 0xfe]
push 0x458a60
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417536
push 0x13
jmp 0x418194
lea eax, [ebp - 0xfe]
push 0x458a5c
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417554
push 0x14
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.msec
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417572
push 0x15
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.tickcount
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417590
push 0x16
jmp 0x418194
lea eax, [ebp - 0xfe]
push 0x458a44
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x4175ae
push 0x17
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.nowutc
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x4175cc
push 0x18
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.workingdir
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x4175ea
push 0x19
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.scriptname
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417608
push 0x4c
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.scriptdir
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417626
push 0x4d
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.scriptfullpath
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417644
push 0x4e
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.linenumber
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417662
push 0x4f
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.linefile
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417680
push 0x50
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.iscompiled
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x41769e
push 0x51
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.batchlines
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
je 0x41816b
lea eax, [ebp - 0xfe]
push str.numbatchlines
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
je 0x41816b
lea eax, [ebp - 0xfe]
push str.titlematchmode
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x4176f2
push 0x1b
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.titlematchmodespeed
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417710
push 0x1c
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.detecthiddenwindows
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x41772e
push 0x1d
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.detecthiddentext
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x41774c
push 0x1e
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.autotrim
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x41776a
push 0x1f
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.stringcasesense
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417788
push 0x20
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.formatinteger
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x4177a6
push 0x21
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.formatfloat
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x4177c4
push 0x22
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.keydelay
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x4177e2
push 0x23
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.windelay
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417800
push 0x24
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.controldelay
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x41781e
push 0x25
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.mousedelay
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x41783c
push 0x26
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.defaultmousespeed
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x41785a
push 0x27
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.issuspended
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417878
push 0x28
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.iconhidden
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417896
push 0x29
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.icontip
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x4178b4
push 0x2a
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.iconfile
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x4178d2
push 0x2b
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.iconnumber
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x4178f0
push 0x2c
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.exitreason
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x41790e
push 0x2d
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.ostype
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x41792c
push 0x2e
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.osversion
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x41794a
push 0x2f
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.language
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417968
push 0x30
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.computername
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417986
push 0x31
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.username
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x4179a4
push 0x32
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.windir
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x4179c2
push 0x34
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.temp
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x4179e0
push 0x35
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.programfiles
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x4179fe
push 0x36
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.appdata
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417a1c
push 0x37
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.appdatacommon
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417a3a
push 0x38
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.desktop
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417a58
push 0x39
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.desktopcommon
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417a76
push 0x3a
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.startmenu
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417a94
push 0x3b
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.startmenucommon
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417ab2
push 0x3c
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.programs
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417ad0
push 0x3d
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.programscommon
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417aee
push 0x3e
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.startup
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417b0c
push 0x3f
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.startupcommon
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417b2a
push 0x40
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.mydocuments
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417b48
push 0x41
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.isadmin
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417b66
push 0x42
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.cursor
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417b84
push 0x43
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.caretx
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417ba2
push 0x44
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.carety
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417bc0
push 0x45
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.screenwidth
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417bde
push 0x46
jmp 0x418194
lea eax, [ebp - 0xfe]
push str.screenheight
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417bfc
push 0x47
jmp 0x418194
push 9
lea eax, [ebp - 0xfe]
push str.ipaddress
push eax
call fcn.00454370
add esp, 0xc
test eax, eax
jne 0x417c5e
cmp byte [ebp - 0xf5], al
je 0x417c57
cmp byte [ebp - 0xf4], al
jne 0x417c57
movsx eax, byte [ebp - 0xf5]
sub eax, 0x31
je 0x417c50
dec eax
je 0x417c49
dec eax
je 0x417c42
dec eax
jne 0x417c57
push 0x4b
jmp 0x418194
push 0x4a
jmp 0x418194
push 0x49
jmp 0x418194
push 0x48
jmp 0x418194
push 3
jmp 0x418194
push 4
lea eax, [ebp - 0xfe]
push str.loop
push eax
call fcn.00454370
add esp, 0xc
test eax, eax
jne 0x417f34
lea esi, [ebp - 0xfa]
mov eax, esi
push str.readline
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417c9c
push 0x65
jmp 0x418194
lea eax, [ebp - 0xfa]
push str.field
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417cba
push 0x66
jmp 0x418194
push 4
lea eax, [ebp - 0xfa]
push str.file
push eax
call fcn.00454370
add esp, 0xc
test eax, eax
jne 0x417e7e
lea eax, [ebp - 0xf6]
push str.name
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417cf6
push 0x52
jmp 0x418194
lea eax, [ebp - 0xf6]
push str.shortname
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417d14
push 0x53
jmp 0x418194
lea eax, [ebp - 0xf6]
push 0x45874c
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417d32
push 0x54
jmp 0x418194
lea eax, [ebp - 0xf6]
push 0x458748
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417d50
push 0x55
jmp 0x418194
lea eax, [ebp - 0xf6]
push str.fullpath
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417d6e
push 0x56
jmp 0x418194
lea eax, [ebp - 0xf6]
push str.longpath
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417d8c
push 0x57
jmp 0x418194
lea eax, [ebp - 0xf6]
push str.shortpath
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417daa
push 0x58
jmp 0x418194
lea eax, [ebp - 0xf6]
push str.timemodified
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417dc8
push 0x59
jmp 0x418194
lea eax, [ebp - 0xf6]
push str.timecreated
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417de6
push 0x5a
jmp 0x418194
lea eax, [ebp - 0xf6]
push str.timeaccessed
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417e04
push 0x5b
jmp 0x418194
lea eax, [ebp - 0xf6]
push str.attrib
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417e22
push 0x5c
jmp 0x418194
lea eax, [ebp - 0xf6]
push str.size
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417e40
push 0x5d
jmp 0x418194
lea eax, [ebp - 0xf6]
push str.sizekb
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417e5e
push 0x5e
jmp 0x418194
lea eax, [ebp - 0xf6]
push str.sizemb
push eax
call fcn.00453840
neg eax
sbb eax, eax
and eax, 0xffffffa4
add eax, 0x5f
jmp 0x418221
push 3
lea eax, [ebp - 0xfa]
push 0x457c18
push eax
call fcn.00454370
add esp, 0xc
test eax, eax
jne 0x417f34
lea eax, [ebp - 0xf7]
push str.type
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417eba
push 0x60
jmp 0x418194
lea eax, [ebp - 0xf7]
push 0x4586cc
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417ed8
push 0x61
jmp 0x418194
lea eax, [ebp - 0xf7]
push str.subkey
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417ef6
push 0x62
jmp 0x418194
lea eax, [ebp - 0xf7]
push str.name
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417f14
push 0x63
jmp 0x418194
lea eax, [ebp - 0xf7]
push str.timemodified
push eax
call fcn.00453840
neg eax
sbb eax, eax
and eax, 0xffffff9f
add eax, 0x64
jmp 0x418221
push str.thismenuitem
push esi
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417f4c
push 0x68
jmp 0x418194
push str.thismenuitempos
push esi
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417f64
push 0x69
jmp 0x418194
push str.thismenu
push esi
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417f7c
push 0x6a
jmp 0x418194
push str.thishotkey
push esi
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417f94
push 0x6b
jmp 0x418194
push str.priorhotkey
push esi
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417fac
push 0x6c
jmp 0x418194
push str.timesincethishotkey
push esi
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417fc4
push 0x6d
jmp 0x418194
push str.timesincepriorhotkey
push esi
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417fdc
push 0x6e
jmp 0x418194
push str.endchar
push esi
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x417ff4
push 0x6f
jmp 0x418194
push str.lasterror
push esi
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x41800c
push 0x70
jmp 0x418194
push 0x45863c
push esi
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x418024
push 0x71
jmp 0x418194
push str.guicontrol
push esi
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x41803c
push 0x72
jmp 0x418194
push str.guicontrolevent
push esi
call fcn.00453840
test eax, eax
pop ecx
pop ecx
je 0x418167
push str.guievent
push esi
call fcn.00453840
test eax, eax
pop ecx
pop ecx
je 0x418167
push str.eventinfo
push esi
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x41807e
push 0x74
jmp 0x418194
push str.guiwidth
push esi
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x418096
push 0x75
jmp 0x418194
push str.guiheight
push esi
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x4180ae
push 0x76
jmp 0x418194
push str.guix
push esi
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x4180c6
push 0x77
jmp 0x418194
push str.guiy
push esi
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x4180de
push 0x78
jmp 0x418194
push str.timeidle
push esi
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x4180f6
push 0x79
jmp 0x418194
push str.timeidlephysical
push esi
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x41810e
push 0x7a
jmp 0x418194
push str.space
push esi
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x418123
push 0x7b
jmp 0x418194
push 0x4585b4
push esi
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x418138
push 0x7c
jmp 0x418194
push str.ahkversion
push esi
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x41814d
push 0x7d
jmp 0x418194
push str.ahkpath
push esi
call fcn.00453840
neg eax
sbb eax, eax
and eax, 0xffffff85
add eax, 0x7e
jmp 0x418221
push 0x73
jmp 0x418194
push 0x1a
jmp 0x418194
push 0xc
jmp 0x418194
push 9
jmp 0x418194
push 8
jmp 0x418194
lea eax, [ebp - 0x100]
push str.true
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x41819a
push 6
pop eax
jmp 0x418223
lea eax, [ebp - 0x100]
push str.false
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x4181b5
push 7
jmp 0x418194
lea eax, [ebp - 0x100]
push str.clipboard
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x4181d0
push 4
jmp 0x418194
lea eax, [ebp - 0x100]
push str.clipboardall
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x4181eb
push 5
jmp 0x418194
lea eax, [ebp - 0x100]
push str.comspec
push eax
call fcn.00453840
test eax, eax
pop ecx
pop ecx
jne 0x418206
push 0x33
jmp 0x418194
lea eax, [ebp - 0x100]
push str.programfiles
push eax
call fcn.00453840
neg eax
sbb eax, eax
and eax, 0xffffffcd
add eax, 0x36
pop ecx
pop ecx
pop esi
leave
ret