Function at 0x43b630
Capabilities:
Check for peb ntglobalflag flag

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4a6d44
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xf38
mov eax, dword [0x5015f0]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xf34], ecx
push sym.MANAGER.exe_public_virtual:_void___thiscall_WireTapStr::destructor_void_
push sym.MANAGER.exe____FWireTapStr__QAEXXZ
push 5
push 8
mov eax, dword [ebp - 0xf34]
push eax
call fcn.004a3a7c
mov dword [ebp - 4], 0
push 0
mov ecx, dword [ebp - 0xf34]
add ecx, 0x28
call sym.MANAGER.exe_public:_void___thiscall_WireTapStr::constructor_char_const__
mov byte [ebp - 4], 1
push 0
mov ecx, dword [ebp - 0xf34]
add ecx, 0x30
call sym.MANAGER.exe_public:_void___thiscall_WireTapStr::constructor_char_const__
mov byte [ebp - 4], 2
push 0
mov ecx, dword [ebp - 0xf34]
add ecx, 0x38
call sym.MANAGER.exe_public:_void___thiscall_WireTapStr::constructor_char_const__
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0xf34]
mov dword [ecx + 0x40], 0
mov edx, dword [ebp - 0xf34]
mov dword [edx + 0x44], 0
mov eax, dword [ebp - 0xf34]
mov dword [eax + 0x48], 0
mov ecx, dword [ebp - 0xf34]
mov dword [ecx + 0x4c], 0
mov edx, dword [ebp - 0xf34]
mov dword [edx + 0x50], 0
mov eax, dword [ebp - 0xf34]
mov dword [eax + 0x54], 0
push 0
mov ecx, dword [ebp - 0xf34]
add ecx, 0x58
call sym.MANAGER.exe_public:_void___thiscall_WireTapStr::constructor_char_const__
mov byte [ebp - 4], 4
push 0
mov ecx, dword [ebp - 0xf34]
add ecx, 0x60
call sym.MANAGER.exe_public:_void___thiscall_WireTapStr::constructor_char_const__
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0xf34]
mov dword [ecx + 0x68], 0
mov edx, dword [ebp - 0xf34]
mov dword [edx + 0x6c], 0
mov eax, dword [ebp - 0xf34]
mov dword [eax + 0x70], 0
mov ecx, dword [ebp - 0xf34]
mov dword [ecx + 0x74], 0
push 0
mov ecx, dword [ebp - 0xf34]
add ecx, 0x78
call sym.MANAGER.exe_public:_void___thiscall_WireTapStr::constructor_char_const__
mov byte [ebp - 4], 6
push 0
mov ecx, dword [ebp - 0xf34]
add ecx, 0x80
call sym.MANAGER.exe_public:_void___thiscall_WireTapStr::constructor_char_const__
mov byte [ebp - 4], 7
push 0
call dword [0x4b0778]
add esp, 4
mov edx, dword [ebp - 0xf34]
mov dword [edx + 0x88], eax
mov eax, dword [ebp - 0xf34]
mov dword [eax + 0x8c], 0
mov ecx, dword [ebp - 0xf34]
mov dword [ecx + 0x90], 0
lea ecx, [ebp - 0x48]
call dword [0x4b06b0]
mov byte [ebp - 4], 8
lea edx, [ebp - 0x48]
push edx
mov eax, dword [str.Hostname]
push eax
mov ecx, dword [ebp + 8]
call fcn.0043ac90
movzx ecx, al
test ecx, ecx
jne 0x43b83a
push 0x4b811c
push 0x62
lea ecx, [ebp - 0x85c]
call sym.MANAGER.exe_public:_void___thiscall_WireTap::CoException::constructor_int__char_const__
mov dword [ebp - 0xf38], eax
mov edx, dword [ebp - 0xf38]
mov dword [ebp - 0xf3c], edx
mov byte [ebp - 4], 9
push 0
push str.Stream_does_not_contain_a_hostname.
mov eax, dword [ebp - 0xf3c]
push eax
call sym.MANAGER.exe_public:_void___cdecl_WireTap::CoException::fire_char_const___char_const__
add esp, 0xc
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x85c]
call sym.MANAGER.exe_public_virtual:_void___thiscall_WireTap::CoException::destructor_void_
jmp 0x43b852
lea ecx, [ebp - 0x48]
call dword [0x4b069c]
push eax
mov ecx, dword [ebp - 0xf34]
add ecx, 0x28
call sym.MANAGER.exe_public:_class_WireTapStr____thiscall_WireTapStr::operator_char_const__
mov dword [ebp - 0xbc], 0
jmp 0x43b86d
mov ecx, dword [ebp - 0xbc]
add ecx, 1
mov dword [ebp - 0xbc], ecx
cmp dword [ebp - 0xbc], 5
jge 0x43b910
mov edx, dword [ebp - 0xbc]
push edx
push str.FrameIP
push 0x4b816c
lea eax, [ebp - 0xec]
push eax
call dword [0x4b07b4]
add esp, 0x10
lea ecx, [ebp - 0xd8]
call dword [0x4b06b0]
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xd8]
push ecx
lea edx, [ebp - 0xec]
push edx
mov ecx, dword [ebp + 8]
call fcn.0043ac90
movzx eax, al
test eax, eax
jne 0x43b8da
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xd8]
call dword [0x4b0504]
jmp 0x43b910
lea ecx, [ebp - 0xd8]
call dword [0x4b069c]
push eax
mov ecx, dword [ebp - 0xbc]
mov edx, dword [ebp - 0xf34]
lea ecx, [edx + ecx*8]
call sym.MANAGER.exe_public:_class_WireTapStr____thiscall_WireTapStr::operator_char_const__
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xd8]
call dword [0x4b0504]
jmp 0x43b85e
lea ecx, [ebp - 0x9c]
call dword [0x4b06b0]
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x9c]
push eax
mov ecx, dword [str.DisplayName]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0043ac90
movzx edx, al
cmp edx, 1
jne 0x43b95b
lea ecx, [ebp - 0x9c]
call dword [0x4b069c]
push eax
mov ecx, dword [ebp - 0xf34]
add ecx, 0x30
call sym.MANAGER.exe_public:_class_WireTapStr____thiscall_WireTapStr::operator_char_const__
jmp 0x43b973
mov eax, dword [ebp - 0xf34]
add eax, 0x28
push eax
mov ecx, dword [ebp - 0xf34]
add ecx, 0x30
call sym.MANAGER.exe_public:_class_WireTapStr____thiscall_WireTapStr::operator_class_WireTapStr_const__
lea ecx, [ebp - 0xb8]
call dword [0x4b06b0]
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xb8]
push ecx
mov edx, dword [str.Database]
push edx
mov ecx, dword [ebp + 8]
call fcn.0043ac90
movzx eax, al
cmp eax, 1
jne 0x43b9bc
lea ecx, [ebp - 0xb8]
call dword [0x4b069c]
push eax
mov ecx, dword [ebp - 0xf34]
add ecx, 0x38
call sym.MANAGER.exe_public:_class_WireTapStr____thiscall_WireTapStr::operator_char_const__
mov ecx, dword [ebp - 0xf34]
add ecx, 0x40
push ecx
mov edx, dword [0x501d2c]
push edx
mov ecx, dword [ebp + 8]
call fcn.0043a830
mov eax, dword [ebp - 0xf34]
add eax, 0x44
push eax
mov ecx, dword [0x501d30]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0043a830
mov edx, dword [ebp - 0xf34]
add edx, 0x48
push edx
mov eax, dword [str.VersionMajor]
push eax
mov ecx, dword [ebp + 8]
call fcn.0043a830
movzx ecx, al
test ecx, ecx
je 0x43ba2c
mov edx, dword [ebp - 0xf34]
add edx, 0x4c
push edx
mov eax, dword [str.VersionMinor]
push eax
mov ecx, dword [ebp + 8]
call fcn.0043a830
movzx ecx, al
test ecx, ecx
jne 0x43ba7c
push str.wiretap_srcclient_apiWireTapDaemonInfo.C
push 0x91
lea ecx, [ebp - 0xf30]
call sym.MANAGER.exe_public:_void___thiscall_WireTap::CoException::constructor_int__char_const__
mov dword [ebp - 0xf40], eax
mov edx, dword [ebp - 0xf40]
mov dword [ebp - 0xf44], edx
mov byte [ebp - 4], 0xd
push 0
push str.Stream_does_not_contain_version_information.
mov eax, dword [ebp - 0xf44]
push eax
call sym.MANAGER.exe_public:_void___cdecl_WireTap::CoException::fire_char_const___char_const__
add esp, 0xc
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xf30]
call sym.MANAGER.exe_public_virtual:_void___thiscall_WireTap::CoException::destructor_void_
mov ecx, dword [ebp - 0xf34]
add ecx, 0x50
push ecx
mov edx, dword [str.VersionMaint]
push edx
mov ecx, dword [ebp + 8]
call fcn.0043a830
mov eax, dword [ebp - 0xf34]
add eax, 0x54
push eax
mov ecx, dword [str.VersionBuild]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0043a830
lea ecx, [ebp - 0x80]
call dword [0x4b06b0]
mov byte [ebp - 4], 0xe
lea edx, [ebp - 0x80]
push edx
mov eax, dword [str.Product]
push eax
mov ecx, dword [ebp + 8]
call fcn.0043ac90
movzx ecx, al
test ecx, ecx
je 0x43baee
lea ecx, [ebp - 0x80]
call dword [0x4b069c]
push eax
mov ecx, dword [ebp - 0xf34]
add ecx, 0x58
call sym.MANAGER.exe_public:_class_WireTapStr____thiscall_WireTapStr::operator_char_const__
jmp 0x43bb01
push 0x4b81d0
mov ecx, dword [ebp - 0xf34]
add ecx, 0x58
call sym.MANAGER.exe_public:_class_WireTapStr____thiscall_WireTapStr::operator_char_const__
lea ecx, [ebp - 0x2c]
call dword [0x4b06b0]
mov byte [ebp - 4], 0xf
lea edx, [ebp - 0x2c]
push edx
mov eax, dword [str.Vendor]
push eax
mov ecx, dword [ebp + 8]
call fcn.0043ac90
movzx ecx, al
test ecx, ecx
je 0x43bb41
lea ecx, [ebp - 0x2c]
call dword [0x4b069c]
push eax
mov ecx, dword [ebp - 0xf34]
add ecx, 0x60
call sym.MANAGER.exe_public:_class_WireTapStr____thiscall_WireTapStr::operator_char_const__
jmp 0x43bb54
push 0x4b81d8
mov ecx, dword [ebp - 0xf34]
add ecx, 0x60
call sym.MANAGER.exe_public:_class_WireTapStr____thiscall_WireTapStr::operator_char_const__
mov edx, dword [ebp - 0xf34]
add edx, 0x68
push edx
mov eax, dword [str.ProductVersionMajor]
push eax
mov ecx, dword [ebp + 8]
call fcn.0043a830
mov ecx, dword [ebp - 0xf34]
add ecx, 0x6c
push ecx
mov edx, dword [str.ProductVersionMinor]
push edx
mov ecx, dword [ebp + 8]
call fcn.0043a830
mov eax, dword [ebp - 0xf34]
add eax, 0x70
push eax
mov ecx, dword [str.ProductVersionMaint]
push ecx
mov ecx, dword [ebp + 8]
call fcn.0043a830
mov edx, dword [ebp - 0xf34]
add edx, 0x74
push edx
mov eax, dword [str.ProductBuild]
push eax
mov ecx, dword [ebp + 8]
call fcn.0043a830
lea ecx, [ebp - 0x64]
call dword [0x4b06b0]
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x64]
push ecx
mov edx, dword [str.ProductVersionStr]
push edx
mov ecx, dword [ebp + 8]
call fcn.0043ac90
movzx eax, al
test eax, eax
jne 0x43bc25
mov ecx, dword [ebp - 0xf34]
mov edx, dword [ecx + 0x70]
push edx
mov eax, dword [ebp - 0xf34]
mov ecx, dword [eax + 0x6c]
push ecx
mov edx, dword [ebp - 0xf34]
mov eax, dword [edx + 0x68]
push eax
push 0x4b81e0
push 0x80
lea ecx, [ebp - 0x16c]
push ecx
call dword [0x4b08c4]
add esp, 0x18
lea edx, [ebp - 0x16c]
push edx
lea ecx, [ebp - 0x64]
call dword [0x4b06b4]
lea ecx, [ebp - 0x64]
call dword [0x4b069c]
push eax
mov ecx, dword [ebp - 0xf34]
add ecx, 0x78
call sym.MANAGER.exe_public:_class_WireTapStr____thiscall_WireTapStr::operator_char_const__
mov eax, dword [ebp - 0xf34]
cmp dword [eax + 0x48], 3
jl 0x43bcbe
lea ecx, [ebp - 0x188]
call dword [0x4b06b0]
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x188]
push ecx
mov edx, dword [str.StorageId]
push edx
mov ecx, dword [ebp + 8]
call fcn.0043ac90
movzx eax, al
test eax, eax
je 0x43bc96
lea ecx, [ebp - 0x188]
call dword [0x4b069c]
push eax
mov ecx, dword [ebp - 0xf34]
add ecx, 0x80
call sym.MANAGER.exe_public:_class_WireTapStr____thiscall_WireTapStr::operator_char_const__
jmp 0x43bcac
push 0x4b81ec
mov ecx, dword [ebp - 0xf34]
add ecx, 0x80
call sym.MANAGER.exe_public:_class_WireTapStr____thiscall_WireTapStr::operator_char_const__
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x188]
call dword [0x4b0504]
jmp 0x43bcd9
mov ecx, dword [ebp - 0xf34]
add ecx, 0x28
push ecx
mov ecx, dword [ebp - 0xf34]
add ecx, 0x80
call sym.MANAGER.exe_public:_class_WireTapStr____thiscall_WireTapStr::operator_class_WireTapStr_const__
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x64]
call dword [0x4b0504]
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x2c]
call dword [0x4b0504]
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x80]
call dword [0x4b0504]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xb8]
call dword [0x4b0504]
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x9c]
call dword [0x4b0504]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x48]
call dword [0x4b0504]
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0xf34]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
call fcn.0041c9ce
mov esp, ebp
pop ebp
ret 4