Function at 0x4e5500
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xd0]
cmp eax, dword [ecx + 8]
jbe 0x4e5bc9
sub esp, 0x150
mov eax, dword [esp + 0x154]
mov dword [esp], eax
mov eax, dword [esp + 0x158]
mov dword [esp + 4], eax
call dbg._/C_/Go/src/winxpMonitor/utils.ConvertCsv
mov eax, dword [esp + 0xc]
mov dword [esp + 0x4c], eax
mov ecx, dword [esp + 8]
mov dword [esp + 0x60], ecx
mov dword [esp + 0x54], eax
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], 0
lea edx, [0x503e00]
mov dword [esp + 0x7c], edx
lea ebx, [0x53eff0]
mov dword [esp + 0x80], ebx
lea ebx, [0x5036c0]
mov dword [esp], ebx
lea ebx, [esp + 0x54]
mov dword [esp + 4], ebx
call dbg.runtime.convT2E32
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x84], eax
mov dword [esp + 0x88], ecx
lea eax, [esp + 0x7c]
mov dword [esp], eax
mov dword [esp + 4], 2
mov dword [esp + 8], 2
call dbg.log.Println
lea edi, [esp + 0x114]
xor eax, eax
call fcn.0044ad11
lea ecx, [esp + 0x10]
mov dword [esp + 0x68], ecx
xor edx, edx
mov ebx, dword [esp + 0x60]
jmp 0x4e560b
mov ebp, dword [esp + 0x64]
lea ebx, [ebp + 0x30]
mov ebp, dword [esp + 0x50]
lea edx, [ebp + 1]
xor eax, eax
mov ecx, dword [esp + 0x68]
mov ebp, dword [esp + 0x4c]
cmp edx, ebp
jge 0x4e5bc2
mov dword [esp + 0x50], edx
mov dword [esp + 0x64], ebx
lea edi, [esp + 0xe4]
mov esi, ebx
call fcn.0044b1b8
lea edi, [esp + 0xb4]
lea esi, [esp + 0xe4]
call fcn.0044b1b8
mov eax, dword [esp + 0xbc]
mov ecx, dword [esp + 0xc0]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x5249f0]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0xffffffff
call dbg.strings.Replace
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0xbc], ecx
mov dword [esp + 0xc0], eax
mov eax, dword [esp + 0xcc]
mov ecx, dword [esp + 0xd0]
mov dword [esp], eax
mov dword [esp + 4], ecx
lea eax, [0x5249f0]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0xffffffff
call dbg.strings.Replace
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0xcc], eax
mov dword [esp + 0xd0], ecx
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0xb4]
mov dword [esp], ecx
mov dword [esp + 4], eax
lea eax, [0x5249f0]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0xffffffff
call dbg.strings.Replace
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x58], ecx
lea edi, [esp + 0xa0]
mov edx, eax
xor eax, eax
call fcn.0044ad1b
lea ecx, [0x527a28]
mov dword [esp], ecx
mov dword [esp + 4], 0x13
mov ebx, dword [esp + 0x58]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], edx
call dbg.time.Parse
lea edi, [esp + 0xa0]
mov esi, dword [esp + 0x68]
call fcn.0044b1fe
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x5c], ecx
lea edi, [esp + 0x8c]
lea esi, [esp + 0xa0]
call fcn.0044b1fe
test eax, eax
je 0x4e580a
je 0x4e57ae
mov eax, dword [eax + 4]
mov dword [esp + 0x6c], 0
mov dword [esp + 0x70], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
lea ecx, [0x503e00]
mov dword [esp + 0x6c], ecx
lea edx, [0x53eff8]
mov dword [esp + 0x70], edx
mov dword [esp + 0x74], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x78], eax
lea eax, [esp + 0x6c]
mov dword [esp], eax
mov dword [esp + 4], 2
mov dword [esp + 8], 2
call dbg.fmt.Println
mov edi, esp
lea esi, [esp + 0x8c]
call fcn.0044b1fe
lea eax, [0x5298db]
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], 0x19
call dbg.time.Time.Format
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], ecx
mov eax, dword [esp + 0xbc]
mov ecx, dword [esp + 0xc0]
cmp ecx, 3
jne 0x4e586f
movzx ecx, word [eax]
cmp cx, 0x3836
jne 0x4e586f
movzx eax, byte [eax + 2]
cmp al, 0x32
je 0x4e5ac5
mov eax, dword [esp + 0xbc]
mov ecx, dword [esp + 0xc0]
cmp ecx, 3
jne 0x4e5899
movzx ecx, word [eax]
cmp cx, 0x3836
jne 0x4e5899
movzx eax, byte [eax + 2]
cmp al, 0x33
je 0x4e59c8
mov eax, dword [esp + 0xbc]
mov ecx, dword [esp + 0xc0]
cmp ecx, 3
jne 0x4e55f7
movzx ecx, word [eax]
cmp cx, 0x3235
jne 0x4e55f7
movzx eax, byte [eax + 2]
cmp al, 0x39
jne 0x4e55f7
mov dword [esp + 0x114], 0x13a
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0xb8]
mov dword [esp + 0x134], eax
mov dword [esp + 0x138], ecx
mov eax, dword [esp + 0xcc]
mov ecx, dword [esp + 0xd0]
mov dword [esp + 0x118], eax
mov dword [esp + 0x11c], ecx
mov dword [esp + 0x13c], 1
lea eax, [0x5253f8]
mov dword [esp + 0x140], eax
mov dword [esp + 0x144], 7
mov ecx, dword [esp + 0xd4]
mov edx, dword [esp + 0xd8]
mov dword [esp + 0x148], ecx
mov dword [esp + 0x14c], edx
mov dword [esp + 0x120], 0
mov ecx, dword [esp + 0xdc]
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x12c], ecx
mov dword [esp + 0x130], edx
lea ecx, [0x52525b]
mov dword [esp + 0x124], ecx
mov dword [esp + 0x128], 7
mov edi, esp
lea esi, [esp + 0x114]
call fcn.0044b19a
mov ecx, dword [esp + 0x15c]
mov dword [esp + 0x3c], ecx
mov edx, dword [esp + 0x160]
mov dword [esp + 0x40], edx
call dbg._/C_/Go/src/winxpMonitor/core.reportToSandbox
mov eax, dword [esp + 0x44]
test eax, eax
je 0x4e55f7
add esp, 0x150
ret
mov dword [esp + 0x114], 0x13a
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0xb8]
mov dword [esp + 0x134], eax
mov dword [esp + 0x138], ecx
mov eax, dword [esp + 0xcc]
mov ecx, dword [esp + 0xd0]
mov dword [esp + 0x118], eax
mov dword [esp + 0x11c], ecx
mov dword [esp + 0x13c], 2
lea eax, [0x5253f8]
mov dword [esp + 0x140], eax
mov dword [esp + 0x144], 7
mov ecx, dword [esp + 0xd4]
mov edx, dword [esp + 0xd8]
mov dword [esp + 0x148], ecx
mov dword [esp + 0x14c], edx
mov dword [esp + 0x120], 0
mov ecx, dword [esp + 0xdc]
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x12c], ecx
mov dword [esp + 0x130], edx
lea ecx, [0x525254]
mov dword [esp + 0x124], ecx
mov dword [esp + 0x128], 7
mov edi, esp
lea esi, [esp + 0x114]
call fcn.0044b19a
mov ecx, dword [esp + 0x15c]
mov dword [esp + 0x3c], ecx
mov edx, dword [esp + 0x160]
mov dword [esp + 0x40], edx
call dbg._/C_/Go/src/winxpMonitor/core.reportToSandbox
mov eax, dword [esp + 0x44]
test eax, eax
je 0x4e5899
add esp, 0x150
ret
mov dword [esp + 0x114], 0x13a
mov eax, dword [esp + 0xb4]
mov ecx, dword [esp + 0xb8]
mov dword [esp + 0x134], eax
mov dword [esp + 0x138], ecx
mov eax, dword [esp + 0xcc]
mov ecx, dword [esp + 0xd0]
mov dword [esp + 0x118], eax
mov dword [esp + 0x11c], ecx
mov dword [esp + 0x13c], 0
lea eax, [0x5253f8]
mov dword [esp + 0x140], eax
mov dword [esp + 0x144], 7
mov ecx, dword [esp + 0xd4]
mov edx, dword [esp + 0xd8]
mov dword [esp + 0x148], ecx
mov dword [esp + 0x14c], edx
mov dword [esp + 0x120], 0
mov ecx, dword [esp + 0xdc]
mov edx, dword [esp + 0xe0]
mov dword [esp + 0x12c], ecx
mov dword [esp + 0x130], edx
lea ecx, [0x52524d]
mov dword [esp + 0x124], ecx
mov dword [esp + 0x128], 7
mov edi, esp
lea esi, [esp + 0x114]
call fcn.0044b19a
mov ecx, dword [esp + 0x15c]
mov dword [esp + 0x3c], ecx
mov edx, dword [esp + 0x160]
mov dword [esp + 0x40], edx
call dbg._/C_/Go/src/winxpMonitor/core.reportToSandbox
mov eax, dword [esp + 0x44]
test eax, eax
je 0x4e586f
add esp, 0x150
ret
add esp, 0x150
ret
call dbg.runtime.morestack_noctxt
jmp dbg._/C_/Go/src/winxpMonitor/core.sendCsvMsg