Function at 0x41c160
Capabilities:
Contain obfuscated stackstrings
Parse pe header
Query environment variable

Disassembly:
push 0xffffffffffffffff
push 0x51e67d
mov eax, dword fs:[0]
push eax
sub esp, 0xee8
mov eax, dword [0x5b339c]
xor eax, esp
mov dword [esp + 0xee4], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x5b339c]
xor eax, esp
push eax
lea eax, [esp + 0xefc]
mov dword fs:[0], eax
mov ebp, ecx
mov dword [esp + 0xf04], 0
call fcn.00413590
mov dword [ebp + 0x27c], eax
test eax, eax
je 0x41c1c9
mov ecx, ebp
call fcn.00417100
mov ecx, dword [ebp + 0x27c]
call fcn.004f6830
mov ecx, ebp
call fcn.004153e0
cmp byte [ebp + 0x434], 0
je 0x41c1eb
mov ecx, ebp
call fcn.00417ae0
mov ecx, dword [ebp + 0x478]
call fcn.004bc7e0
lea ecx, [esp + 0xe8]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_void_]
mov byte [esp + 0xf04], 1
lea ecx, [esp + 0xb0]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_void_]
mov byte [esp + 0xf04], 2
lea ecx, [esp + 0xcc]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_void_]
mov byte [esp + 0xf04], 3
push 0x104
lea eax, [esp + 0x8f4]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea ecx, [esp + 0x120]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_void_]
mov byte [esp + 0xf04], 4
lea ecx, [esp + 0x158]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_void_]
mov byte [esp + 0xf04], 5
lea ecx, [esp + 0x8f0]
push ecx
lea ecx, [esp + 0x124]
call dword [sym.imp.MSVCP90.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_wchar_t_const__]
mov edx, dword [sym.imp.MSVCP90.dll_unsigned_int_const_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::npos]
mov eax, dword [edx]
push eax
push 0x5c
lea ecx, [esp + 0x128]
call dword [sym.imp.MSVCP90.dll_public:_unsigned_int___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::rfind_wchar_t__unsigned_int_const]
mov ecx, dword [sym.imp.MSVCP90.dll_unsigned_int_const_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::npos]
mov edx, dword [ecx]
push edx
inc eax
push eax
lea eax, [esp + 0x24]
push eax
lea ecx, [esp + 0x12c]
call dword [sym.imp.MSVCP90.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::substr_unsigned_int__unsigned_int_]
mov byte [esp + 0xf04], 6
push eax
lea ecx, [esp + 0x15c]
call dword [sym.imp.MSVCP90.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
mov byte [esp + 0xf04], 5
lea ecx, [esp + 0x1c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov esi, dword [sym.imp.ole32.dll_StringFromGUID2]
push 0x80
lea ecx, [esp + 0x7f0]
lea eax, [ebp + 0x118]
push ecx
push eax
call esi
lea edx, [esp + 0x7ec]
push edx
lea ecx, [esp + 0xec]
call dword [sym.imp.MSVCP90.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_wchar_t_const__]
push 0x80
lea eax, [esp + 0x7f0]
push eax
lea ecx, [ebp + 0x128]
push ecx
call esi
lea edx, [esp + 0x7ec]
push edx
lea ecx, [esp + 0xb4]
call dword [sym.imp.MSVCP90.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_wchar_t_const__]
push 0x80
lea eax, [esp + 0x7f0]
push eax
lea ecx, [ebp + 0x138]
push ecx
call esi
lea edx, [esp + 0x7ec]
push edx
lea ecx, [esp + 0xd0]
call dword [sym.imp.MSVCP90.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_wchar_t_const__]
mov edi, dword [sym.imp.MSVCP90.dll_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____cdecl_std::operator_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___wchar_t_const___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
lea eax, [esp + 0xcc]
push eax
lea ecx, [esp + 0x20]
push str.APPID_
push ecx
call edi
mov byte [esp + 0xf10], 7
push eax
push bind
call fcn.00517ea0
add esp, 0x14
mov byte [esp + 0xf04], 5
lea ecx, [esp + 0x1c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea edx, [esp + 0xcc]
push edx
lea eax, [esp + 0x20]
push str.AppID_
push eax
call edi
mov byte [esp + 0xf10], 8
lea esi, [ebp + 0x180]
push esi
push eax
push bind
call fcn.00517a70
add esp, 0x18
mov byte [esp + 0xf04], 5
lea ecx, [esp + 0x1c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
push str.AppID
lea ecx, [esp + 0x7c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
mov bl, 9
mov byte [esp + 0xf04], bl
lea ecx, [esp + 0x158]
push ecx
lea edx, [esp + 0x20]
push str.AppID_
push edx
call edi
mov byte [esp + 0xf10], 0xa
lea ecx, [esp + 0xd8]
push ecx
lea edx, [esp + 0x88]
push edx
push eax
push bind
call fcn.00517bf0
add esp, 0x1c
mov byte [esp + 0xf04], bl
lea ecx, [esp + 0x1c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], 5
lea ecx, [esp + 0x78]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
push str.AuthenticationLevel
lea ecx, [esp + 0x7c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
mov bl, 0xb
mov byte [esp + 0xf04], bl
lea eax, [esp + 0xcc]
push eax
lea ecx, [esp + 0x20]
push str.AppID_
push ecx
call edi
mov byte [esp + 0xf10], 0xc
push 2
lea edx, [esp + 0x88]
push edx
push eax
push bind
call fcn.00517c80
add esp, 0x1c
mov byte [esp + 0xf04], bl
lea ecx, [esp + 0x1c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], 5
lea ecx, [esp + 0x78]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
cmp byte [esp + 0xf28], 0
lea ecx, [esp + 0x78]
je 0x41c5f6
push str.LocalService
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
mov bl, 0xd
mov byte [esp + 0xf04], bl
lea eax, [esp + 0xcc]
push eax
lea ecx, [esp + 0x20]
push str.AppID_
push ecx
call edi
mov byte [esp + 0xf10], 0xe
push esi
lea edx, [esp + 0x88]
push edx
push eax
push bind
call fcn.00517bf0
add esp, 0x1c
mov byte [esp + 0xf04], bl
lea ecx, [esp + 0x1c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], 5
lea ecx, [esp + 0x78]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
push str._Service
lea ecx, [esp + 0x20]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
mov byte [esp + 0xf04], 0xf
push str.ServiceParameters
lea ecx, [esp + 0x7c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
mov bl, 0x10
mov byte [esp + 0xf04], bl
lea eax, [esp + 0xcc]
push eax
lea ecx, [esp + 0x3c]
push str.AppID_
push ecx
call edi
mov byte [esp + 0xf10], 0x11
lea edx, [esp + 0x28]
push edx
lea ecx, [esp + 0x88]
push ecx
push eax
push bind
call fcn.00517bf0
add esp, 0x1c
mov byte [esp + 0xf04], bl
lea ecx, [esp + 0x38]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], 0xf
lea ecx, [esp + 0x78]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], 5
lea ecx, [esp + 0x1c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea edx, [esp + 0xf0c]
push edx
mov ecx, ebp
call fcn.00415230
jmp 0x41c68d
push str.Interactive_User
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
mov byte [esp + 0xf04], 0x12
push str.RunAs
lea ecx, [esp + 0x20]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
mov bl, 0x13
mov byte [esp + 0xf04], bl
lea eax, [esp + 0xcc]
push eax
lea ecx, [esp + 0x3c]
push str.AppID_
push ecx
call edi
mov byte [esp + 0xf10], 0x14
lea edx, [esp + 0x84]
push edx
lea ecx, [esp + 0x2c]
push ecx
push eax
push bind
call fcn.00517bf0
add esp, 0x1c
mov byte [esp + 0xf04], bl
lea ecx, [esp + 0x38]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], 0x12
lea ecx, [esp + 0x1c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], 5
lea ecx, [esp + 0x78]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
push esi
lea ebx, [ebp + 0x164]
push ebx
push bind
call fcn.00517a70
mov esi, dword [sym.imp.MSVCP90.dll_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____cdecl_std::operator_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___wchar_t_const__]
push str.CLSID
lea edx, [esp + 0x48]
push ebx
push edx
call esi
mov byte [esp + 0xf1c], 0x15
lea ecx, [esp + 0x100]
push ecx
push eax
push bind
call fcn.00517a70
add esp, 0x24
mov byte [esp + 0xf04], 5
lea ecx, [esp + 0x38]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
push str.CurVer
lea edx, [esp + 0x3c]
push ebx
push edx
call esi
mov byte [esp + 0xf10], 0x16
lea ecx, [ebp + 0x148]
push ecx
push eax
push bind
call fcn.00517a70
add esp, 0x18
mov byte [esp + 0xf04], 5
lea ecx, [esp + 0x38]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov al, byte [ebp + 0x380]
test al, al
je 0x41c835
push 0x57ea28
lea ecx, [esp + 0x20]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
mov byte [esp + 0xf04], 0x17
push str.OPC
lea eax, [esp + 0x3c]
push ebx
push eax
call esi
mov byte [esp + 0xf10], 0x18
lea ecx, [esp + 0x28]
push ecx
push eax
push bind
call fcn.00517a70
add esp, 0x18
mov byte [esp + 0xf04], 0x17
lea ecx, [esp + 0x38]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], 5
lea ecx, [esp + 0x1c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
push str.Vendor
lea ecx, [esp + 0x20]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
mov byte [esp + 0xf04], 0x19
push str.OPC
lea edx, [esp + 0x3c]
push ebx
push edx
call esi
mov byte [esp + 0xf10], 0x1a
lea ecx, [ebp + 0x19c]
push ecx
lea ecx, [esp + 0x2c]
push ecx
push eax
push bind
call fcn.00517bf0
add esp, 0x1c
mov byte [esp + 0xf04], 0x19
lea ecx, [esp + 0x38]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], 5
lea ecx, [esp + 0x1c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
push str.OPCVendor
lea edx, [esp + 0x3c]
push ebx
push edx
call esi
mov byte [esp + 0xf10], 0x1b
lea ecx, [ebp + 0x19c]
push ecx
push eax
push bind
call fcn.00517a70
add esp, 0x18
mov byte [esp + 0xf04], 5
lea ecx, [esp + 0x38]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea eax, [ebp + 0x180]
push eax
lea eax, [ebp + 0x148]
push eax
push bind
call fcn.00517a70
push str.CLSID
lea eax, [ebp + 0x148]
push eax
lea eax, [esp + 0x4c]
push eax
call esi
mov byte [esp + 0xf1c], 0x1c
lea ecx, [esp + 0x100]
push ecx
push eax
push bind
call fcn.00517a70
add esp, 0x24
mov byte [esp + 0xf04], 5
lea ecx, [esp + 0x38]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
cmp byte [ebp + 0x380], 0
je 0x41c94f
push str.Vendor
lea ecx, [esp + 0x20]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
mov byte [esp + 0xf04], 0x1d
push str.OPC
lea eax, [ebp + 0x148]
push eax
lea edx, [esp + 0x40]
push edx
call esi
mov byte [esp + 0xf10], 0x1e
lea ecx, [ebp + 0x19c]
push ecx
lea ecx, [esp + 0x2c]
push ecx
push eax
push bind
call fcn.00517bf0
add esp, 0x1c
mov byte [esp + 0xf04], 0x1d
lea ecx, [esp + 0x38]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], 5
lea ecx, [esp + 0x1c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
push str.OPCVendor
lea eax, [ebp + 0x148]
push eax
lea edx, [esp + 0x40]
push edx
call esi
mov byte [esp + 0xf10], 0x1f
lea ecx, [ebp + 0x19c]
push ecx
push eax
push bind
call fcn.00517a70
add esp, 0x18
mov byte [esp + 0xf04], 5
lea ecx, [esp + 0x38]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea eax, [esp + 0xe8]
push eax
lea ecx, [esp + 0x3c]
push str.CLSID_
push ecx
call edi
mov byte [esp + 0xf10], 0x20
lea ecx, [ebp + 0x180]
push ecx
push eax
push bind
call fcn.00517a70
add esp, 0x18
mov byte [esp + 0xf04], 5
lea ecx, [esp + 0x38]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea edx, [esp + 0xe8]
push edx
lea eax, [esp + 0x20]
push str.CLSID_
push eax
call edi
mov byte [esp + 0xf10], 0x21
push str.ProgID
push eax
lea ecx, [esp + 0x4c]
push ecx
call esi
mov byte [esp + 0xf1c], 0x22
lea ecx, [ebp + 0x148]
push ecx
push eax
push bind
call fcn.00517a70
add esp, 0x24
mov byte [esp + 0xf04], 0x21
lea ecx, [esp + 0x38]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], 5
lea ecx, [esp + 0x1c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea edx, [esp + 0xe8]
push edx
lea eax, [esp + 0x20]
push str.CLSID_
push eax
call edi
mov byte [esp + 0xf10], 0x23
push str.VersionIndependentProgID
push eax
lea ecx, [esp + 0x4c]
push ecx
call esi
mov byte [esp + 0xf1c], 0x24
push ebx
push eax
push bind
call fcn.00517a70
add esp, 0x24
mov byte [esp + 0xf04], 0x23
lea ecx, [esp + 0x38]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], 5
lea ecx, [esp + 0x1c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea edx, [esp + 0xe8]
push edx
lea eax, [esp + 0x20]
push str.CLSID_
push eax
call edi
mov bl, 0x25
mov byte [esp + 0xf10], bl
push str.LocalServer32
push eax
lea ecx, [esp + 0x4c]
push ecx
call esi
mov byte [esp + 0xf1c], 0x26
lea edx, [esp + 0x138]
push edx
push eax
push bind
call fcn.00517a70
add esp, 0x24
mov byte [esp + 0xf04], bl
lea ecx, [esp + 0x38]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], 5
lea ecx, [esp + 0x1c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea eax, [esp + 0x18]
push eax
push 0x57e88c
push 0x17
push 0
push 0x57e87c
mov dword [esp + 0x2c], 0
call dword [sym.imp.ole32.dll_CoCreateInstance]
test eax, eax
jl 0x41ce0c
mov al, byte [ebp + 0x380]
mov ebx, dword [sym.imp.MSVCR90.dll_wcsncpy_s]
test al, al
je 0x41cd6c
mov edx, dword [0x540bbc]
mov ecx, dword [0x540bb8]
mov eax, dword [0x540bc0]
push 0xffffffffffffffff
push str.OPC_Data_Access_Servers_Version_1.0
mov dword [esp + 0x294], edx
mov dword [esp + 0x290], ecx
mov ecx, dword [0x540bc4]
lea edx, [esp + 0x2a4]
push 0x80
push edx
mov dword [esp + 0x2a0], eax
mov dword [esp + 0x2a4], ecx
mov dword [esp + 0x2a8], 0x409
call ebx
mov ecx, dword [0x540bcc]
mov eax, dword [0x540bc8]
mov edx, dword [0x540bd0]
push 0xffffffffffffffff
push str.OPC_Data_Access_Servers_Version_2.0
mov dword [esp + 0x3b8], ecx
mov dword [esp + 0x3b4], eax
mov eax, dword [0x540bd4]
lea ecx, [esp + 0x3c8]
push 0x80
push ecx
mov dword [esp + 0x3c4], edx
mov dword [esp + 0x3c8], eax
mov dword [esp + 0x3cc], 0x409
call ebx
mov eax, dword [0x540bdc]
mov edx, dword [0x540bd8]
mov ecx, dword [0x540be0]
push 0xffffffffffffffff
push str.OPC_Data_Access_Servers_Version_3.0
mov dword [esp + 0x4dc], eax
mov dword [esp + 0x4d8], edx
mov edx, dword [0x540be4]
lea eax, [esp + 0x4ec]
push 0x80
push eax
mov dword [esp + 0x4e8], ecx
mov dword [esp + 0x4ec], edx
mov dword [esp + 0x4f0], 0x409
call ebx
mov edx, dword [0x540d3c]
mov ecx, dword [0x540d38]
mov eax, dword [0x540d40]
push 0xffffffffffffffff
push str.OPC_History_Data_Access_Servers_Version_1.0
mov dword [esp + 0x600], edx
mov dword [esp + 0x5fc], ecx
mov ecx, dword [0x540d44]
lea edx, [esp + 0x610]
push 0x80
push edx
mov dword [esp + 0x60c], eax
mov dword [esp + 0x610], ecx
mov dword [esp + 0x614], 0x409
call ebx
mov ecx, dword [0x540adc]
mov eax, dword [0x540ad8]
mov edx, dword [0x540ae0]
add esp, 0x40
push 0xffffffffffffffff
push str.OPC_Alarm__Event_Server_Version_1.0
mov dword [esp + 0x6e4], ecx
mov dword [esp + 0x6e0], eax
mov eax, dword [0x540ae4]
lea ecx, [esp + 0x6f4]
push 0x80
push ecx
mov dword [esp + 0x6f0], edx
mov dword [esp + 0x6f4], eax
mov dword [esp + 0x6f8], 0x409
call ebx
mov eax, dword [esp + 0x28]
mov edx, dword [eax]
add esp, 0x10
lea ecx, [esp + 0x288]
push ecx
mov edx, dword [edx + 0xc]
push 5
push eax
call edx
cmp byte [ebp + 0x37c], 0
je 0x41cd26
mov eax, dword [esp + 0x18]
mov edx, dword [eax]
push 0x540bb8
push 1
lea ecx, [ebp + 0x118]
push ecx
push eax
mov eax, dword [edx + 0x14]
call eax
mov eax, dword [esp + 0x18]
mov edx, dword [eax]
push 0x540bc8
push 1
lea ecx, [ebp + 0x118]
push ecx
push eax
mov eax, dword [edx + 0x14]
call eax
cmp byte [ebp + 0x37f], 0
je 0x41cd26
mov eax, dword [esp + 0x18]
mov edx, dword [eax]
push 0x540bd8
push 1
lea ecx, [ebp + 0x118]
push ecx
push eax
mov eax, dword [edx + 0x14]
call eax
cmp byte [ebp + 0x37d], 0
je 0x41cd49
mov ecx, dword [esp + 0x18]
mov edx, dword [ecx]
push 0x540ad8
push 1
lea eax, [ebp + 0x118]
push eax
mov eax, dword [edx + 0x14]
push ecx
call eax
cmp byte [ebp + 0x37e], 0
je 0x41cd6c
mov ecx, dword [esp + 0x18]
mov edx, dword [ecx]
push 0x540d38
push 1
lea eax, [ebp + 0x118]
push eax
mov eax, dword [edx + 0x14]
push ecx
call eax
cmp byte [ebp + 0x381], 0
je 0x41ce00
mov edx, dword [0x540efc]
mov ecx, dword [0x540ef8]
mov eax, dword [0x540f00]
push 0xffffffffffffffff
push str.MatrikonOPC_Data_Servers_Version_1.0
mov dword [esp + 0x180], edx
mov dword [esp + 0x17c], ecx
mov ecx, dword [0x540f04]
lea edx, [esp + 0x190]
push 0x80
push edx
mov dword [esp + 0x18c], eax
mov dword [esp + 0x190], ecx
mov dword [esp + 0x194], 0x409
call ebx
mov eax, dword [esp + 0x28]
mov ecx, dword [eax]
add esp, 0x10
lea edx, [esp + 0x174]
push edx
push 1
push eax
mov eax, dword [ecx + 0xc]
call eax
mov ecx, dword [esp + 0x18]
mov edx, dword [ecx]
push 0x540ef8
push 1
lea eax, [ebp + 0x118]
push eax
mov eax, dword [edx + 0x14]
push ecx
call eax
mov eax, dword [esp + 0x18]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
push str.AppID
lea ecx, [esp + 0x20]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
mov bl, 0x27
mov byte [esp + 0xf04], bl
lea eax, [esp + 0xe8]
push eax
lea ecx, [esp + 0x3c]
push str.CLSID_
push ecx
call edi
mov byte [esp + 0xf10], 0x28
lea edx, [esp + 0xd8]
push edx
lea ecx, [esp + 0x2c]
push ecx
push eax
push bind
call fcn.00517bf0
add esp, 0x1c
mov byte [esp + 0xf04], bl
lea ecx, [esp + 0x38]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], 5
lea ecx, [esp + 0x1c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
push 0x57ea28
lea ecx, [esp + 0x20]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
mov byte [esp + 0xf04], 0x29
lea edx, [esp + 0xe8]
push edx
lea eax, [esp + 0x7c]
push str.CLSID_
push eax
call edi
mov bl, 0x2a
mov byte [esp + 0xf10], bl
push str.DefaultConfig
push eax
lea ecx, [esp + 0x4c]
push ecx
call esi
mov byte [esp + 0xf1c], 0x2b
lea edx, [esp + 0x34]
push edx
push eax
push bind
call fcn.00517a70
add esp, 0x24
mov byte [esp + 0xf04], bl
lea ecx, [esp + 0x38]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], 0x29
lea ecx, [esp + 0x78]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], 5
lea ecx, [esp + 0x1c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea eax, [ebp + 0x148]
push eax
lea ebx, [ebp + 0x384]
lea eax, [esp + 0x3c]
push ebx
push eax
call dword [sym.imp.MSVCP90.dll_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____cdecl_std::operator_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
mov byte [esp + 0xf10], 0x2c
lea ecx, [ebp + 0x180]
push ecx
push eax
push bind
call fcn.00517a70
add esp, 0x18
mov byte [esp + 0xf04], 5
lea ecx, [esp + 0x38]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea eax, [ebp + 0x148]
push eax
lea ecx, [esp + 0x20]
push ebx
push ecx
call dword [sym.imp.MSVCP90.dll_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____cdecl_std::operator_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
mov bl, 0x2d
mov byte [esp + 0xf10], bl
push str.CLSID
push eax
lea edx, [esp + 0x4c]
push edx
call esi
mov byte [esp + 0xf1c], 0x2e
lea ecx, [esp + 0xc8]
push ecx
push eax
push bind
call fcn.00517a70
add esp, 0x24
mov byte [esp + 0xf04], bl
lea ecx, [esp + 0x38]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], 5
lea ecx, [esp + 0x1c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea ecx, [esp + 0x13c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_void_]
mov bl, 0x2f
mov byte [esp + 0xf04], bl
lea edx, [esp + 0x13c]
push edx
lea eax, [ebp + 0x384]
push eax
push bind
call fcn.00517b20
add esp, 0xc
lea ecx, [esp + 0x13c]
call dword [sym.imp.MSVCP90.dll_public:_unsigned_int___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::length_void_const]
test eax, eax
jne 0x41d037
lea eax, [esp + 0x38]
push eax
mov ecx, ebp
call fcn.00414990
mov byte [esp + 0xf04], 0x30
push eax
lea ecx, [esp + 0x140]
call dword [sym.imp.MSVCP90.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
mov byte [esp + 0xf04], bl
lea ecx, [esp + 0x38]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea eax, [ebp + 0x148]
push eax
lea eax, [ebp + 0x384]
push eax
lea ecx, [esp + 0x24]
push ecx
call dword [sym.imp.MSVCP90.dll_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____cdecl_std::operator_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
mov byte [esp + 0xf10], 0x31
push str.ShellPath
push eax
lea edx, [esp + 0x4c]
push edx
call esi
mov byte [esp + 0xf1c], 0x32
lea ecx, [esp + 0x154]
push ecx
push eax
push bind
call fcn.00517a70
add esp, 0x24
mov byte [esp + 0xf04], 0x31
lea ecx, [esp + 0x38]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], bl
lea ecx, [esp + 0x1c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea edx, [esp + 0x5c]
push edx
call fcn.00517990
mov byte [esp + 0xf08], 0x33
push 0x53bbe4
push eax
lea eax, [esp + 0xa0]
push eax
call esi
mov byte [esp + 0xf14], 0x34
lea ecx, [ebp + 0x228]
push ecx
push eax
lea edx, [esp + 0x90]
push edx
call dword [sym.imp.MSVCP90.dll_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____cdecl_std::operator_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
mov dword [esp + 0x30], eax
mov byte [esp + 0xf20], 0x35
lea eax, [ebp + 0x148]
push eax
lea eax, [ebp + 0x384]
push eax
lea eax, [esp + 0x40]
push eax
call dword [sym.imp.MSVCP90.dll_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____cdecl_std::operator_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
mov byte [esp + 0xf2c], 0x36
push str.HelpFile
push eax
lea ecx, [esp + 0x68]
push ecx
call esi
mov byte [esp + 0xf38], 0x37
mov edx, dword [esp + 0x48]
push edx
push eax
push bind
call fcn.00517a70
add esp, 0x40
mov byte [esp + 0xf04], 0x36
lea ecx, [esp + 0x38]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], 0x35
lea ecx, [esp + 0x1c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], 0x34
lea ecx, [esp + 0x78]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], 0x33
lea ecx, [esp + 0x94]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], bl
lea ecx, [esp + 0x5c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x60]
push str.CLSID_
push ecx
call edi
mov byte [esp + 0xf10], 0x38
lea ecx, [ebp + 0x180]
push ecx
push eax
push bind
call fcn.00517a70
add esp, 0x18
mov byte [esp + 0xf04], bl
lea ecx, [esp + 0x5c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea eax, [ebp + 0x148]
push eax
lea eax, [ebp + 0x384]
push eax
lea edx, [esp + 0x40]
push edx
call dword [sym.imp.MSVCP90.dll_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____cdecl_std::operator_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
mov dword [esp + 0x20], eax
mov byte [esp + 0xf10], 0x39
lea eax, [esp + 0xbc]
push eax
lea ecx, [esp + 0xa4]
push str.CLSID_
push ecx
call edi
mov byte [esp + 0xf1c], 0x3a
push str.ProgID
push eax
lea edx, [esp + 0x7c]
push edx
call esi
mov byte [esp + 0xf28], 0x3b
mov ecx, dword [esp + 0x38]
push ecx
push eax
push bind
call fcn.00517a70
add esp, 0x30
mov byte [esp + 0xf04], 0x3a
lea ecx, [esp + 0x5c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], 0x39
lea ecx, [esp + 0x94]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], bl
lea ecx, [esp + 0x38]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea edx, [esp + 0xb0]
push edx
lea eax, [esp + 0x98]
push str.CLSID_
push eax
call edi
mov byte [esp + 0xf10], 0x3c
push str.LocalServer32
push eax
lea ecx, [esp + 0x70]
push ecx
call esi
mov byte [esp + 0xf1c], 0x3d
lea edx, [esp + 0x138]
push edx
push eax
push bind
call fcn.00517a70
add esp, 0x24
mov byte [esp + 0xf04], 0x3c
lea ecx, [esp + 0x5c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], bl
lea ecx, [esp + 0x94]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
push str.AppID
lea ecx, [esp + 0x20]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
mov byte [esp + 0xf04], 0x3e
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x60]
push str.CLSID_
push ecx
call edi
mov byte [esp + 0xf10], 0x3f
lea edx, [esp + 0xd8]
push edx
lea ecx, [esp + 0x2c]
push ecx
push eax
push bind
call fcn.00517bf0
add esp, 0x1c
mov byte [esp + 0xf04], 0x3e
lea ecx, [esp + 0x5c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], bl
lea ecx, [esp + 0x1c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
push 0x53c220
lea ecx, [esp + 0x7c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
mov byte [esp + 0xf04], 0x40
push str.DDECapable
lea ecx, [esp + 0x20]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
mov byte [esp + 0xf04], 0x41
lea edx, [esp + 0xb0]
push edx
lea eax, [esp + 0x98]
push str.CLSID_
push eax
call edi
mov byte [esp + 0xf10], 0x42
push 0x53ec84
push eax
lea ecx, [esp + 0x70]
push ecx
call esi
mov byte [esp + 0xf1c], 0x43
lea edx, [esp + 0x90]
push edx
lea ecx, [esp + 0x38]
push ecx
push eax
push bind
call fcn.00517bf0
add esp, 0x28
mov byte [esp + 0xf04], 0x42
lea ecx, [esp + 0x5c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], 0x41
lea ecx, [esp + 0x94]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], 0x40
lea ecx, [esp + 0x1c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], bl
lea ecx, [esp + 0x78]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
push str.DDEServiceName
lea ecx, [esp + 0x20]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
mov byte [esp + 0xf04], 0x44
lea edx, [esp + 0xb0]
push edx
lea eax, [esp + 0x98]
push str.CLSID_
push eax
call edi
mov byte [esp + 0xf10], 0x45
push 0x53ec84
push eax
lea ecx, [esp + 0x70]
push ecx
call esi
mov byte [esp + 0xf1c], 0x46
lea edx, [ebp + 0x2fc]
push edx
lea ecx, [esp + 0x38]
push ecx
push eax
push bind
call fcn.00517bf0
add esp, 0x28
mov byte [esp + 0xf04], 0x45
lea ecx, [esp + 0x5c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], 0x44
lea ecx, [esp + 0x94]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], bl
lea ecx, [esp + 0x1c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
push str.DDEItemDelimiter
lea ecx, [esp + 0x20]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
mov byte [esp + 0xf04], 0x47
lea edx, [esp + 0xb0]
push edx
lea eax, [esp + 0x98]
push str.CLSID_
push eax
call edi
mov byte [esp + 0xf10], 0x48
push 0x53ec84
push eax
lea ecx, [esp + 0x70]
push ecx
call esi
mov byte [esp + 0xf1c], 0x49
lea edx, [ebp + 0x318]
push edx
lea ecx, [esp + 0x38]
push ecx
push eax
push bind
call fcn.00517bf0
add esp, 0x28
mov byte [esp + 0xf04], 0x48
lea ecx, [esp + 0x5c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], 0x47
lea ecx, [esp + 0x94]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], bl
lea ecx, [esp + 0x1c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
cmp byte [ebp + 0x489], 1
jne 0x41d633
push 0x57ea28
lea ecx, [esp + 0x7c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
mov byte [esp + 0xf04], 0x4a
push str.Security
lea ecx, [esp + 0x20]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
mov byte [esp + 0xf04], 0x4b
lea edx, [esp + 0xb0]
push edx
lea eax, [esp + 0x98]
push str.CLSID_
push eax
call edi
mov byte [esp + 0xf10], 0x4c
push 0x53ec84
push eax
lea ecx, [esp + 0x70]
push ecx
call esi
mov byte [esp + 0xf1c], 0x4d
lea edx, [esp + 0x90]
push edx
lea ecx, [esp + 0x38]
push ecx
push eax
push bind
call fcn.00517bf0
add esp, 0x28
mov byte [esp + 0xf04], 0x4c
lea ecx, [esp + 0x5c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], 0x4b
lea ecx, [esp + 0x94]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], 0x4a
lea ecx, [esp + 0x1c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], bl
lea ecx, [esp + 0x78]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
push str.File
lea edi, [ebp + 0x384]
lea edx, [esp + 0x60]
push edi
push edx
call esi
mov byte [esp + 0xf10], 0x4e
push eax
lea eax, [ebp + 0x3a0]
push eax
push bind
call fcn.00517a70
add esp, 0x18
mov byte [esp + 0xf04], bl
lea ecx, [esp + 0x5c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
push str._Configuration_File
lea ecx, [ebp + 0x20c]
push ecx
lea edx, [esp + 0x9c]
push edx
call esi
mov dword [esp + 0x20], eax
mov byte [esp + 0xf10], 0x4f
push str.File
lea eax, [esp + 0x6c]
push edi
push eax
call esi
mov byte [esp + 0xf1c], 0x50
mov ecx, dword [esp + 0x2c]
push ecx
push eax
push bind
call fcn.00517a70
add esp, 0x24
mov byte [esp + 0xf04], 0x4f
lea ecx, [esp + 0x5c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], bl
lea ecx, [esp + 0x94]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea edx, [esp + 0x38]
push edx
mov ecx, ebp
call fcn.00414a80
mov byte [esp + 0xf04], 0x51
push 0x53ec48
push eax
lea eax, [esp + 0x9c]
push eax
call esi
mov dword [esp + 0x20], eax
mov byte [esp + 0xf10], 0x52
push str.FileDefaultIcon
lea ecx, [esp + 0x6c]
push edi
push ecx
call esi
mov byte [esp + 0xf1c], 0x53
mov edx, dword [esp + 0x2c]
push edx
push eax
push bind
call fcn.00517a70
add esp, 0x24
mov byte [esp + 0xf04], 0x52
lea ecx, [esp + 0x5c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], 0x51
lea ecx, [esp + 0x94]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], bl
lea ecx, [esp + 0x38]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
xor edi, edi
jmp 0x41d780
mov eax, dword [edi + 0x5b05b8]
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x30], esp
push eax
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
mov byte [esp + 0xf20], 0x54
mov edx, dword [edi + 0x5b05b0]
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x90], esp
push edx
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
mov byte [esp + 0xf3c], 0x55
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0xa8], esp
push 0x57ea28
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
mov byte [esp + 0xf58], 0x56
mov byte [esp + 0xf58], bl
mov ecx, ebp
call fcn.004163a0
add edi, 0xc
cmp edi, 0x300
jb 0x41d780
cmp byte [ebp + 0x434], 0
je 0x41d8ce
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x70], esp
push 0x53c220
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
mov byte [esp + 0xf20], 0x57
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x90], esp
push str.LoadOnStartup
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
mov byte [esp + 0xf3c], 0x58
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x68], esp
push 0x57ea28
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
mov byte [esp + 0xf58], 0x59
mov byte [esp + 0xf58], bl
mov ecx, ebp
call fcn.004163a0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x70], esp
push 0x53ec00
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
mov byte [esp + 0xf20], 0x5a
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x90], esp
push 0x53dfe4
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
mov byte [esp + 0xf3c], 0x5b
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x68], esp
push 0x57ea28
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
mov byte [esp + 0xf58], 0x5c
mov byte [esp + 0xf58], bl
mov ecx, ebp
call fcn.004163a0
push 0x57ea28
lea ecx, [esp + 0x108]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
mov byte [esp + 0xf04], 0x5d
push 0x200
lea eax, [esp + 0xafc]
push eax
push str.CommonProgramFiles
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
test eax, eax
je 0x41d92d
lea ecx, [esp + 0xaf8]
push ecx
lea ecx, [esp + 0x108]
call dword [sym.imp.MSVCP90.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_wchar_t_const__]
push str.MatrikonOPCCommon_
lea ecx, [esp + 0x108]
call dword [0x539464]
jmp 0x41d98f
lea edx, [esp + 0x94]
push edx
call fcn.00517990
mov byte [esp + 0xf08], 0x5e
push 0x53bbe4
push eax
lea eax, [esp + 0x68]
push eax
call esi
add esp, 0x10
mov byte [esp + 0xf04], 0x5f
push eax
lea ecx, [esp + 0x108]
call dword [sym.imp.MSVCP90.dll_public:_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t______thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::operator_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
mov byte [esp + 0xf04], 0x5e
lea ecx, [esp + 0x5c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], 0x5d
lea ecx, [esp + 0x94]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
lea edi, [ebp + 0x148]
push edi
lea eax, [ebp + 0x384]
push eax
lea ecx, [esp + 0x9c]
push ecx
call dword [sym.imp.MSVCP90.dll_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t_____cdecl_std::operator_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
mov byte [esp + 0xf10], 0x60
push str..LOG
push eax
lea edx, [esp + 0x70]
push edx
call esi
add esp, 0x18
mov byte [esp + 0xf04], 0x61
push eax
lea ecx, [esp + 0x108]
call dword [0x539434]
mov byte [esp + 0xf04], 0x60
lea ecx, [esp + 0x5c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], 0x5d
lea ecx, [esp + 0x94]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
sub esp, 0x1c
lea eax, [esp + 0x120]
mov ecx, esp
mov dword [esp + 0x70], esp
push eax
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
mov byte [esp + 0xf20], 0x62
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x90], esp
push str.LogFilename
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
mov byte [esp + 0xf3c], 0x63
mov edx, dword [str.Logging]
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x68], esp
push edx
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
mov byte [esp + 0xf58], 0x64
mov byte [esp + 0xf58], 0x5d
mov ecx, ebp
call fcn.004163a0
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x70], esp
push edi
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const__]
mov byte [esp + 0xf20], 0x65
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x90], esp
push str.DDEServiceName
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
mov byte [esp + 0xf3c], 0x66
mov eax, dword [0x5b0558]
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x68], esp
push eax
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::constructor_wchar_t_const__]
mov byte [esp + 0xf58], 0x67
mov byte [esp + 0xf58], 0x5d
mov ecx, ebp
call fcn.004163a0
mov byte [esp + 0xf04], bl
lea ecx, [esp + 0x104]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], 5
lea ecx, [esp + 0x13c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], 4
lea ecx, [esp + 0x158]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], 3
lea ecx, [esp + 0x120]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], 2
lea ecx, [esp + 0xcc]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], 1
lea ecx, [esp + 0xb0]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov byte [esp + 0xf04], 0
lea ecx, [esp + 0xe8]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov dword [esp + 0xf04], 0xffffffff
lea ecx, [esp + 0xf0c]
call dword [sym.imp.MSVCP90.dll_public:_void___thiscall_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__::destructor_void_]
mov ecx, dword [esp + 0xefc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xee4]
xor ecx, esp
call fcn.0051973e
add esp, 0xef4
ret 0x20