joyce8/EMBER2024-capa huggingface dataset:
Function at 0x463700
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x80b088]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x463860
sub esp, 0x1c
mov eax, dword [esp + 0x20]
test byte [eax], al
lea ecx, [eax + 0x18]
mov dword [esp + 0x18], ecx
nop
mov dword [esp], ecx
call sym.runtime.lock2
mov eax, dword [esp + 0x20]
movzx ecx, byte [eax + 0x1c]
test cl, cl
jne 0x463849
mov byte [eax + 0x1c], 1
inc dword [eax + 0x24]
inc dword [eax + 0x60]
mov dword [esp], eax
call sym.runtime._pollDesc_.publishInfo
mov eax, dword [esp + 0x20]
mov dword [esp], eax
mov dword [esp + 4], 0x72
mov byte [esp + 8], 0
call sym.runtime.netpollunblock
mov eax, dword [esp + 0xc]
mov dword [esp + 0x14], eax
mov ecx, dword [esp + 0x20]
mov dword [esp], ecx
mov dword [esp + 4], 0x77
mov byte [esp + 8], 0
call sym.runtime.netpollunblock
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 0x3c]
mov edx, dword [esp + 0xc]
mov dword [esp + 0x10], edx
test ecx, ecx
je 0x4637d0
lea ecx, [eax + 0x28]
mov dword [esp], ecx
call sym.runtime.deltimer
mov eax, dword [0x80b220]
test eax, eax
jne 0x4637b7
mov eax, dword [esp + 0x20]
jmp 0x4637c5
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 0x3c]
call sym.runtime.gcWriteBarrier1
mov dword [edi], ecx
mov dword [eax + 0x3c], 0
mov edx, dword [esp + 0x10]
mov ecx, dword [eax + 0x78]
test ecx, ecx
je 0x463807
lea ecx, [eax + 0x64]
mov dword [esp], ecx
call sym.runtime.deltimer
mov eax, dword [0x80b220]
test eax, eax
jne 0x4637f2
mov eax, dword [esp + 0x20]
jmp 0x463800
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 0x78]
call sym.runtime.gcWriteBarrier1
mov dword [edi], ecx
mov dword [eax + 0x78], 0
nop
nop
mov eax, dword [esp + 0x18]
mov dword [esp], eax
call sym.runtime.unlock2
mov eax, dword [esp + 0x14]
test eax, eax
je 0x46382d
mov dword [esp], eax
mov dword [esp + 4], 3
call sym.runtime.netpollgoready
mov eax, dword [esp + 0x10]
test eax, eax
je 0x463845
mov dword [esp], eax
mov dword [esp + 4], 3
call sym.runtime.netpollgoready
add esp, 0x1c
ret
lea eax, [0x648fd6]
mov dword [esp], eax
mov dword [esp + 4], 0x24
call sym.runtime.throw
nop
call sym.runtime.morestack_noctxt
jmp sym.internal_poll.runtime_pollUnblock
Function at 0x4670b0
Capabilities:
Encrypt data using aes via x86 extensions

Disassembly:
cmp byte [0x80af28], 0
je 0x4670ca
mov eax, dword [esp + 4]
mov ebx, dword [esp + 0xc]
lea edx, [esp + 0x10]
jmp sym.aeshashbody
jmp sym.runtime.memhashFallback

Function at 0x4670d0
Capabilities:
Encrypt data using aes via x86 extensions

Disassembly:
cmp byte [0x80af28], 0
je 0x4670eb
mov eax, dword [esp + 4]
mov ebx, dword [eax + 4]
mov eax, dword [eax]
lea edx, [esp + 0xc]
jmp sym.aeshashbody
jmp sym.runtime.strhashFallback

Function at 0x467f70
Capabilities:
Allocate thread local storage

Disassembly:
mov ebp, esp
mov eax, dword [sym.imp.kernel32.dll_TlsAlloc]
call eax
mov esp, ebp
mov ecx, eax
cmp ecx, 0x40
jb 0x467f8a
mov ecx, 0x14
jmp 0x467f93
shl ecx, 2
add ecx, 0xe10
mov dword [0x80b088], ecx
ret
Function at 0x4a1bd0
Capabilities:
Enumerate pe sections

Disassembly:
mov ecx, dword [0x80b088]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4a1dba
sub esp, 0x48
mov eax, dword [0x7ddbe8]
mov ecx, dword [esp + 0x50]
movzx edx, word [ecx + 0xa]
movzx ebx, word [ecx + 0xc]
movzx ebp, word [ecx + 2]
movzx esi, word [ecx + 8]
mov edi, dword [esp + 0x4c]
mov dword [esp], edi
mov dword [esp + 4], ebp
mov dword [esp + 8], 1
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edx
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], eax
call sym.time.Date
lea edi, [esp + 0x34]
lea esi, [esp + 0x20]
call fcn.004678be
lea edi, [esp]
lea esi, [esp + 0x34]
call fcn.004678be
call sym.time.Time.abs
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
add eax, 0x15180
adc ecx, 0
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x93a80
call sym.runtime.uint64mod
mov eax, dword [esp + 0x50]
movzx ecx, word [eax + 4]
mov edx, dword [esp + 0x10]
mov ebx, eax
mov eax, 0xc22e4507
mov ebp, edx
imul edx
lea eax, [ebp + edx]
sar eax, 0x10
sar ebp, 0x1f
sub eax, ebp
sub ecx, eax
test ecx, ecx
jge 0x4a1ca7
add ecx, 7
movzx edx, word [ebx + 6]
lea ebp, [edx - 1]
cmp ebp, 4
jge 0x4a1cc1
lea ebx, [edx + edx*2]
lea edx, [edx + ebx*2]
lea ecx, [ecx + edx - 6]
mov edx, ecx
jmp 0x4a1d38
movzx eax, word [ebx + 2]
cmp eax, 2
jne 0x4a1d0e
mov edx, dword [esp + 0x4c]
test edx, 3
jne 0x4a1d0a
mov ebx, edx
sar edx, 0x1f
mov ebp, eax
mov eax, 0x51eb851f
mov esi, edx
imul ebx
mov edi, edx
sar edx, 5
sub edx, esi
imul edx, edx, 0x64
cmp ebx, edx
jne 0x4a1d03
sar edi, 7
sub edi, esi
imul edx, edi, 0x190
cmp ebx, edx
jne 0x4a1d10
mov ebx, 0x1d
jmp 0x4a1d2e
mov ebp, eax
jmp 0x4a1d10
mov ebp, eax
cmp ebp, 0xd
jae 0x4a1dad
lea eax, [ebp - 1]
lea edx, [0x7b4700]
mov ebx, dword [edx + ebp*4]
cmp eax, 0xd
jae 0x4a1da3
sub ebx, dword [edx + ebp*4 - 4]
lea edx, [ecx + 0x1d]
cmp ebx, edx
jge 0x4a1d38
lea edx, [ecx + 0x16]
mov ecx, dword [esp + 0x38]
test ecx, 0x80000000
je 0x4a1d6a
mov ebx, dword [esp + 0x34]
shl ecx, 1
mov ebp, ebx
shl ebx, 1
shr ebp, 0x1f
or ebp, ecx
mov ecx, ebp
shl ebp, 1
shr ecx, 0x1f
shr ebx, 0x1f
or ebp, ebx
add ebp, 0xd7b17f80
adc ecx, 0xd
jmp 0x4a1d72
mov ebp, dword [esp + 0x3c]
mov ecx, dword [esp + 0x40]
lea eax, [edx - 1]
mov edx, eax
sar edx, 0x1f
mov ebx, 0x15180
mov esi, edx
mul ebx
imul ebx, esi, 0x15180
add edx, ebx
add eax, ebp
adc edx, ecx
add eax, 0x886e0900
adc edx, 0xfffffff1
mov dword [esp + 0x58], edx
mov dword [esp + 0x54], eax
add esp, 0x48
ret
mov ecx, 0xd
call sym.runtime.panicIndex
mov eax, ebp
mov ecx, 0xd
call sym.runtime.panicIndex
nop
call sym.runtime.morestack_noctxt
jmp sym.time.pseudoUnix
Function at 0x4b97d0
Capabilities:
Enumerate pe sections

Disassembly:
mov ecx, dword [0x80b088]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4b9871
sub esp, 0x10
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
mov edx, dword [esp + 0x18]
cmp dword [edx], ecx
jne 0x4b9867
movzx ecx, byte [eax + 4]
cmp byte [edx + 4], cl
jne 0x4b9867
movzx ecx, byte [eax + 5]
cmp byte [edx + 5], cl
jne 0x4b9867
movzx ecx, byte [eax + 6]
cmp byte [edx + 6], cl
jne 0x4b9867
movzx ecx, byte [eax + 7]
cmp byte [edx + 7], cl
jne 0x4b9867
movzx ecx, byte [eax + 8]
cmp byte [edx + 8], cl
jne 0x4b9867
movzx ecx, byte [eax + 9]
cmp byte [edx + 9], cl
jne 0x4b9867
movzx ecx, byte [eax + 0xa]
cmp byte [edx + 0xa], cl
jne 0x4b9867
movzx ecx, byte [eax + 0xb]
cmp byte [edx + 0xb], cl
jne 0x4b9867
movzx ecx, byte [eax + 0xc]
cmp byte [edx + 0xc], cl
jne 0x4b9867
add eax, 0x10
mov dword [esp], eax
lea eax, [edx + 0x10]
mov dword [esp + 4], eax
mov dword [esp + 8], 0x4c
call sym.runtime.memequal
movzx eax, byte [esp + 0xc]
jmp 0x4b9869
xor eax, eax
mov byte [esp + 0x1c], al
add esp, 0x10
ret
call sym.runtime.morestack_noctxt
jmp sym.type:.eq.fmt.fmt
Function at 0x4cfd30
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [0x80b088]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4cfe74
sub esp, 0x1c
mov eax, dword [esp + 0x24]
test eax, eax
je 0x4cfd57
mov ecx, dword [esp + 0x20]
xor edx, edx
jmp 0x4cfd60
mov byte [esp + 0x28], 0
add esp, 0x1c
ret
cmp eax, edx
jle 0x4cfe6b
movzx ebx, byte [ecx + edx]
cmp ebx, 0x80
jge 0x4cfd77
inc edx
jmp 0x4cfd97
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call sym.runtime.decoderune
mov ebx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x18], edx
cmp ebx, 0xff
ja 0x4cfdc2
movzx ebp, bl
lea esi, [0x7b6740]
movzx ebp, byte [esi + ebp]
xchg ebp, eax
test al, 0x60
xchg ebp, eax
xchg ebp, ebx
setne bl
xchg ebp, ebx
jmp 0x4cfdef
mov eax, dword [0x7dd8a0]
mov dword [esp], eax
mov dword [esp + 4], ebx
call sym.unicode.isExcludingLatin
movzx ebp, byte [esp + 8]
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
lea esi, [0x7b6740]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4cfdf9
xor ebp, ebp
jmp 0x4cfe46
cmp ebx, 0xff
jg 0x4cfe16
cmp ebx, 0x30
jl 0x4cfe12
cmp ebx, 0x39
xchg ebp, ebx
setle bl
xchg ebp, ebx
jmp 0x4cfe43
xor ebp, ebp
jmp 0x4cfe43
mov eax, dword [0x7dd898]
mov dword [esp], eax
mov dword [esp + 4], ebx
call sym.unicode.isExcludingLatin
movzx ebp, byte [esp + 8]
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
lea esi, [0x7b6740]
xor ebp, 1
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4cfd60
cmp ebx, 0x5f
je 0x4cfd60
cmp ebx, 0x2e
je 0x4cfd60
mov byte [esp + 0x28], 0
add esp, 0x1c
ret
mov byte [esp + 0x28], 1
add esp, 0x1c
ret
call sym.runtime.morestack_noctxt
jmp sym.go_build_constraint.isValidTag
Function at 0x4d3c00
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x80b088]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4d3dc7
sub esp, 0x34
mov eax, 0
mov dword [esp + 0x30], eax
mov byte [esp + 0x13], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x40], 0
mov eax, dword [esp + 0x38]
movzx ecx, byte [eax + 0x50]
mov byte [esp + 0x12], cl
test cl, cl
je 0x4d3cf5
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
lea eax, [0x63dc56]
mov dword [esp], eax
mov dword [esp + 4], 4
call sym.runtime.convTstring
mov eax, dword [esp + 8]
lea ecx, [0x601a80]
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], ecx
lea eax, [0x68b650]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x38]
mov dword [esp], eax
lea ecx, [esp + 0x20]
mov dword [esp + 4], ecx
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call sym.go_parser._parser_.printTrace
mov eax, dword [esp + 0x38]
inc dword [eax + 0x54]
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
lea ecx, [sym.go_parser._parser_.parseType.func1]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], eax
lea ecx, [esp + 0x18]
mov dword [esp + 0x30], ecx
mov byte [esp + 0x13], 1
mov dword [esp], eax
call sym.go_parser._parser_.tryIdentOrType
mov eax, dword [esp + 4]
test eax, eax
je 0x4d3d32
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x40], ecx
movzx eax, byte [esp + 0x12]
test al, 1
je 0x4d3d2e
and eax, 0xfffffffe
mov byte [esp + 0x13], al
mov edx, dword [esp + 0x30]
mov eax, dword [edx]
call eax
add esp, 0x34
ret
mov eax, dword [esp + 0x38]
mov ecx, dword [eax + 0x78]
mov dword [esp + 0x14], ecx
mov dword [esp], eax
mov dword [esp + 4], ecx
lea edx, [0x63dc5a]
mov dword [esp + 8], edx
mov dword [esp + 0xc], 4
call sym.go_parser._parser_.errorExpected
mov eax, dword [0x7e52d0]
mov ecx, dword [esp + 0x38]
mov dword [esp], ecx
mov dword [esp + 4], eax
call sym.go_parser._parser_.advance
lea eax, [0x60f520]
mov dword [esp], eax
call sym.runtime.newobject
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x14]
mov dword [eax], ecx
mov ecx, dword [esp + 0x38]
mov ecx, dword [ecx + 0x78]
mov dword [eax + 4], ecx
lea ecx, [0x68d84c]
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x40], eax
movzx eax, byte [esp + 0x12]
test al, 1
je 0x4d3dba
and eax, 0xfffffffe
mov byte [esp + 0x13], al
mov edx, dword [esp + 0x30]
mov eax, dword [edx]
call eax
add esp, 0x34
ret
call sym.runtime.morestack_noctxt
jmp sym.go_parser._parser_.parseType
Function at 0x4d8aa0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x80b088]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4d8ca6
sub esp, 0x44
mov eax, 0
mov dword [esp + 0x40], eax
mov byte [esp + 0x13], 0
mov dword [esp + 0x4c], 0
mov eax, dword [esp + 0x48]
movzx ecx, byte [eax + 0x50]
mov byte [esp + 0x12], cl
test cl, cl
je 0x4d8b92
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0
mov dword [esp + 0x38], 0
mov dword [esp + 0x3c], 0
lea eax, [0x63ea95]
mov dword [esp], eax
mov dword [esp + 4], 8
call sym.runtime.convTstring
mov eax, dword [esp + 8]
lea ecx, [0x601a80]
mov dword [esp + 0x30], ecx
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], ecx
lea eax, [0x68b650]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x48]
mov dword [esp], eax
lea ecx, [esp + 0x30]
mov dword [esp + 4], ecx
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call sym.go_parser._parser_.printTrace
mov eax, dword [esp + 0x48]
inc dword [eax + 0x54]
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
lea ecx, [sym.go_parser._parser_.parseChanType.func1]
mov dword [esp + 0x28], ecx
mov dword [esp + 0x2c], eax
lea ecx, [esp + 0x28]
mov dword [esp + 0x40], ecx
mov byte [esp + 0x13], 1
movzx ecx, byte [esp + 0x12]
mov edx, dword [eax + 0x78]
mov dword [esp + 0x14], edx
cmp dword [eax + 0x7c], 0x3f
jne 0x4d8bd8
mov dword [esp], eax
call sym.go_parser._parser_.next
mov eax, dword [esp + 0x48]
cmp dword [eax + 0x7c], 0x24
je 0x4d8bba
xor ecx, ecx
mov edx, 3
jmp 0x4d8c11
mov ecx, dword [eax + 0x78]
mov dword [esp + 0x1c], ecx
mov dword [esp], eax
call sym.go_parser._parser_.next
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x1c]
mov edx, 1
jmp 0x4d8c11
mov dword [esp], eax
mov dword [esp + 4], 0x24
call sym.go_parser._parser_.expect
mov eax, dword [esp + 8]
mov dword [esp + 0x1c], eax
mov ecx, dword [esp + 0x48]
mov dword [esp], ecx
mov dword [esp + 4], 0x3f
call sym.go_parser._parser_.expect
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x1c]
mov edx, 2
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x18], edx
mov dword [esp], eax
call sym.go_parser._parser_.parseType
mov eax, dword [esp + 4]
mov dword [esp + 0x24], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x20], ecx
lea edx, [0x61f360]
mov dword [esp], edx
call sym.runtime.newobject
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x14]
mov dword [eax], ecx
mov ecx, dword [esp + 0x1c]
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x18]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x24]
mov dword [eax + 0xc], ecx
mov ecx, dword [0x80b220]
test ecx, ecx
jne 0x4d8c6e
mov ecx, dword [esp + 0x20]
jmp 0x4d8c79
call sym.runtime.gcWriteBarrier1
mov ecx, dword [esp + 0x20]
mov dword [edi], ecx
mov dword [eax + 0x10], ecx
mov dword [esp + 0x4c], eax
movzx eax, byte [esp + 0x12]
test al, 1
je 0x4d8c99
and eax, 0xfffffffe
mov byte [esp + 0x13], al
mov edx, dword [esp + 0x40]
mov eax, dword [edx]
call eax
add esp, 0x44
ret
call sym.runtime.morestack_noctxt
jmp sym.go_parser._parser_.parseChanType
Function at 0x4db5e0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x80b088]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4db7c0
sub esp, 0x44
mov eax, 0
mov dword [esp + 0x40], eax
mov byte [esp + 0x13], 0
mov dword [esp + 0x4c], 0
mov dword [esp + 0x50], 0
mov eax, dword [esp + 0x48]
movzx ecx, byte [eax + 0x50]
mov byte [esp + 0x12], cl
test cl, cl
je 0x4db6d5
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0
mov dword [esp + 0x38], 0
mov dword [esp + 0x3c], 0
lea eax, [0x63e5b8]
mov dword [esp], eax
mov dword [esp + 4], 7
call sym.runtime.convTstring
mov eax, dword [esp + 8]
lea ecx, [0x601a80]
mov dword [esp + 0x30], ecx
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], ecx
lea eax, [0x68b650]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x48]
mov dword [esp], eax
lea ecx, [esp + 0x30]
mov dword [esp + 4], ecx
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call sym.go_parser._parser_.printTrace
mov eax, dword [esp + 0x48]
inc dword [eax + 0x54]
mov dword [esp + 0x28], 0
mov dword [esp + 0x2c], 0
lea ecx, [sym.go_parser._parser_.parseElement.func1]
mov dword [esp + 0x28], ecx
mov dword [esp + 0x2c], eax
lea ecx, [esp + 0x28]
mov dword [esp + 0x40], ecx
mov byte [esp + 0x13], 1
mov dword [esp], eax
call sym.go_parser._parser_.parseValue
mov eax, dword [esp + 8]
mov ecx, dword [esp + 4]
mov edx, dword [esp + 0x48]
cmp dword [edx + 0x7c], 0x3a
jne 0x4db792
mov dword [esp + 0x18], eax
mov eax, dword [esp + 4]
mov dword [esp + 0x24], eax
mov ecx, dword [edx + 0x78]
mov dword [esp + 0x14], ecx
mov dword [esp], edx
call sym.go_parser._parser_.next
mov eax, dword [esp + 0x48]
mov dword [esp], eax
call sym.go_parser._parser_.parseValue
mov eax, dword [esp + 8]
mov dword [esp + 0x20], eax
mov ecx, dword [esp + 4]
mov dword [esp + 0x1c], ecx
lea edx, [0x616f00]
mov dword [esp], edx
call sym.runtime.newobject
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x24]
mov dword [eax], ecx
mov ecx, dword [0x80b220]
test ecx, ecx
jne 0x4db752
mov ecx, dword [esp + 0x18]
jmp 0x4db75d
call sym.runtime.gcWriteBarrier1
mov ecx, dword [esp + 0x18]
mov dword [edi], ecx
mov dword [eax + 4], ecx
mov ecx, dword [esp + 0x14]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x1c]
mov dword [eax + 0xc], ecx
mov ecx, dword [0x80b220]
test ecx, ecx
jne 0x4db77e
mov ecx, dword [esp + 0x20]
jmp 0x4db789
call sym.runtime.gcWriteBarrier1
mov ecx, dword [esp + 0x20]
mov dword [edi], ecx
mov dword [eax + 0x10], ecx
lea ecx, [0x68d45c]
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x50], eax
movzx eax, byte [esp + 0x12]
test al, 1
je 0x4db7b3
and eax, 0xfffffffe
mov byte [esp + 0x13], al
mov edx, dword [esp + 0x40]
mov eax, dword [edx]
call eax
add esp, 0x44
ret
call sym.runtime.morestack_noctxt
jmp sym.go_parser._parser_.parseElement
Function at 0x4ddf40
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x80b088]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4de120
sub esp, 0x40
mov eax, 0
mov dword [esp + 0x3c], eax
mov byte [esp + 0x13], 0
mov dword [esp + 0x48], 0
mov eax, dword [esp + 0x44]
movzx ecx, byte [eax + 0x50]
mov byte [esp + 0x12], cl
test cl, cl
je 0x4de02d
mov dword [esp + 0x2c], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0
mov dword [esp + 0x38], 0
lea eax, [0x63f448]
mov dword [esp], eax
mov dword [esp + 4], 0xa
call sym.runtime.convTstring
mov eax, dword [esp + 8]
lea ecx, [0x601a80]
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], ecx
lea eax, [0x68b650]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x44]
mov dword [esp], eax
lea ecx, [esp + 0x2c]
mov dword [esp + 4], ecx
mov dword [esp + 8], 2
mov dword [esp + 0xc], 2
call sym.go_parser._parser_.printTrace
mov eax, dword [esp + 0x44]
inc dword [eax + 0x54]
mov dword [esp + 0x24], 0
mov dword [esp + 0x28], 0
lea ecx, [sym.go_parser._parser_.parseReturnStmt.func1]
mov dword [esp + 0x24], ecx
mov dword [esp + 0x28], eax
lea ecx, [esp + 0x24]
mov dword [esp + 0x3c], ecx
mov byte [esp + 0x13], 1
mov ecx, dword [eax + 0x78]
mov dword [esp + 0x1c], ecx
mov dword [esp], eax
mov dword [esp + 4], 0x50
call sym.go_parser._parser_.expect
mov eax, dword [esp + 0x44]
mov ecx, dword [eax + 0x7c]
cmp ecx, 0x39
je 0x4de098
cmp ecx, 0x38
jne 0x4de05d
xor edx, edx
xor ecx, ecx
xor ebx, ebx
jmp 0x4de09e
movzx ecx, byte [eax + 0x94]
mov byte [esp + 0x11], cl
mov byte [eax + 0x94], 1
mov dword [esp], eax
call sym.go_parser._parser_.parseExprList
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0xc]
movzx ebx, byte [esp + 0x11]
mov ebp, dword [esp + 0x44]
mov byte [ebp + 0x94], bl
mov ebx, eax
mov eax, ebp
jmp 0x4de09e
xor edx, edx
xor ecx, ecx
xor ebx, ebx
mov dword [esp + 0x18], edx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x20], ebx
mov dword [esp], eax
call sym.go_parser._parser_.expectSemi
lea eax, [0x60f940]
mov dword [esp], eax
call sym.runtime.newobject
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x1c]
mov dword [eax], ecx
mov ecx, dword [esp + 0x14]
mov dword [eax + 8], ecx
mov ecx, dword [esp + 0x18]
mov dword [eax + 0xc], ecx
mov ecx, dword [0x80b220]
test ecx, ecx
jne 0x4de0e8
mov ecx, dword [esp + 0x20]
jmp 0x4de0f3
call sym.runtime.gcWriteBarrier1
mov ecx, dword [esp + 0x20]
mov dword [edi], ecx
mov dword [eax + 4], ecx
mov dword [esp + 0x48], eax
movzx eax, byte [esp + 0x12]
test al, 1
je 0x4de113
and eax, 0xfffffffe
mov byte [esp + 0x13], al
mov edx, dword [esp + 0x3c]
mov eax, dword [edx]
call eax
add esp, 0x40
ret
call sym.runtime.morestack_noctxt
jmp sym.go_parser._parser_.parseReturnStmt
Function at 0x4fdd70
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword [0x80b088]
mov ecx, dword fs:[ecx]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x4fdf35
sub esp, 0x30
mov eax, dword [esp + 0x34]
movzx ecx, byte [eax + 0x28]
test cl, cl
je 0x4fddc5
movzx ecx, byte [esp + 0x38]
cmp cl, 0xa
ja 0x4fdda9
cmp cl, 9
je 0x4fddae
cmp cl, 0xa
je 0x4fddba
jmp 0x4fddca
cmp cl, 0xb
jne 0x4fddb5
mov ecx, 0x20
jmp 0x4fddca
cmp cl, 0xc
jne 0x4fddca
mov byte [eax + 0x28], 0
mov ecx, 0xc
jmp 0x4fddca
movzx ecx, byte [esp + 0x38]
mov byte [esp + 0x23], cl
cmp dword [eax + 0x7c], 1
jne 0x4fdde5
mov edx, dword [eax + 8]
add edx, dword [eax + 0x1c]
mov dword [esp + 0x24], edx
xor ebx, ebx
jmp 0x4fdeaa
mov edx, dword [esp + 0x3c]
xor ebx, ebx
jmp 0x4fddf5
mov dword [eax + 0x14], esi
mov byte [esi + edi - 1], cl
inc ebx
cmp edx, ebx
jle 0x4fde72
mov ebp, dword [eax + 0x18]
mov esi, dword [eax + 0x14]
inc esi
mov edi, dword [eax + 0x10]
cmp ebp, esi
jae 0x4fdded
mov dword [esp + 0x2c], ebx
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x601dc0]
mov dword [esp + 0x10], eax
call sym.runtime.growslice
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x34]
mov dword [ebx + 0x18], eax
mov eax, dword [0x80b220]
test eax, eax
je 0x4fde57
call sym.runtime.gcWriteBarrier2
mov dword [edi], ecx
mov eax, dword [ebx + 0x10]
mov dword [edi + 4], eax
mov dword [ebx + 0x10], ecx
mov eax, ebx
mov ebx, dword [esp + 0x2c]
mov esi, edx
mov edi, ecx
movzx ecx, byte [esp + 0x23]
mov edx, dword [esp + 0x3c]
jmp 0x4fdded
add dword [eax + 0x60], edx
cmp cl, 0xa
je 0x4fde7f
cmp cl, 0xc
jne 0x4fde97
add dword [eax + 0x64], edx
add dword [eax + 0x78], edx
mov dword [eax + 0x68], 1
mov dword [eax + 0x7c], 1
add esp, 0x30
ret
add dword [eax + 0x68], edx
add dword [eax + 0x7c], edx
add esp, 0x30
ret
mov dword [eax + 0x14], esi
mov byte [esi + edi - 1], 9
inc ebx
cmp ebx, edx
jge 0x4fdf27
mov ebp, dword [eax + 0x18]
mov esi, dword [eax + 0x14]
inc esi
mov edi, dword [eax + 0x10]
cmp ebp, esi
jae 0x4fdea1
mov dword [esp + 0x28], ebx
mov dword [esp], edi
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], 1
lea eax, [0x601dc0]
mov dword [esp + 0x10], eax
call sym.runtime.growslice
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x18]
mov ebx, dword [esp + 0x34]
mov dword [ebx + 0x18], eax
mov eax, dword [0x80b220]
test eax, eax
je 0x4fdf0c
call sym.runtime.gcWriteBarrier2
mov dword [edi], ecx
mov eax, dword [ebx + 0x10]
mov dword [edi + 4], eax
mov dword [ebx + 0x10], ecx
mov eax, ebx
mov ebx, dword [esp + 0x28]
mov esi, edx
mov edi, ecx
movzx ecx, byte [esp + 0x23]
mov edx, dword [esp + 0x24]
jmp 0x4fdea1
add dword [eax + 0x60], edx
add dword [eax + 0x68], edx
add dword [eax + 0x7c], edx
jmp 0x4fdde5
call sym.runtime.morestack_noctxt
jmp sym.go_printer._printer_.writeByte