Function at 0x434920
Capabilities:
Run powershell expression

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x50
mov rcx, qword [sym.imp.kernel32.dll_CreateThread]
lea rdx, [sym.runtime.tstart_stdcall.abi0]
mov qword [rsp], rcx
movups xmmword [rsp + 8], xmm15
mov qword [rsp + 0x18], rdx
mov qword [rsp + 0x20], rax
movups xmmword [rsp + 0x28], xmm15
call sym.runtime.stdcall6.abi0
xorps xmm15, xmm15
mov r14, qword [0x0061c200]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov rax, qword [rsp + 0x38]
test rax, rax
je 0x43499e
mov rcx, qword [sym.imp.kernel32.dll_CloseHandle]
mov qword [rsp], rcx
mov qword [rsp + 8], rax
call sym.runtime.stdcall1.abi0
xorps xmm15, xmm15
mov r14, qword [0x0061c200]
mov r14, qword gs:[r14]
mov r14, qword [r14]
add rsp, 0x50
pop rbp
ret
mov ecx, dword [0x0061c028]
test ecx, ecx
jne 0x434a4c
mov rax, qword [0x005985d0]
sub rax, qword [0x005985e0]
movsxd rax, eax
mov qword [rsp + 0x48], rax
call sym.runtime.getlasterror.abi0
xorps xmm15, xmm15
mov r14, qword [0x0061c200]
mov r14, qword gs:[r14]
mov r14, qword [r14]
mov eax, dword [rsp]
mov qword [rsp + 0x40], rax
call sym.runtime.printlock
lea rax, [0x004e1835]
mov ebx, 0x2e
call sym.runtime.printstring
mov rax, qword [rsp + 0x48]
nop dword [rax]
call sym.runtime.printint
lea rax, str._already__errno_nruntime_stack:_ninvalid_g_statuscastogscanstatusbad_g_transitionschedule:_in_cgoreflect_mismatch_untyped_locals_missing_stackmapbad_symbol_tablenon_Go_function_n_not_in_ranges:_ninvalid_exchangeno_route_to_hostinvalid_argumentmessage_too_longobject_is_remoteremote_I_O_errorSetFilePointerExOpenProcessTokenRegQueryInfoKeyWRegQueryValueExWDnsNameCompare_WCreateDirectoryWFlushFileBuffersGetComputerNameWGetFullPathNameWGetLongPathNameWRemoveDirectoryWNetApiBufferFreeGODEBUG:_value__0123456789ABCDEFX0123456789abcdefxreflect.Value.Intexec:_killing_Cmdexec:_not_started1192092895507812559604644775390625unknown_type_kindreflect:_call_of_reflect.Value.Lengoroutine_profileAllThreadsSyscallGC_assist_markingselect__no_cases_sync.RWMutex.Lockwait_for_GC_cycletrace_proc_status:_missing_method_notetsleepg_on_g0bad_TinySizeClassruntime:_pointer_g_already_scannedmark___bad_statusscanobject_n__0swept_cached_spanmarkBits_overflowruntime:_summary_runtime:_level____p.searchAddr__RtlGetCurrentPeb
mov ebx, 0x10
call sym.runtime.printstring
mov rax, qword [rsp + 0x40]
nop dword [rax + rax]
call sym.runtime.printuint
lea rax, [0x004d8449]
mov ebx, 2
call sym.runtime.printstring
call sym.runtime.printunlock
lea rax, str.runtime.newosprocruntime_internal_thread_exhaustionlocked_m0_woke_upentersyscallblock_spinningthreadsgp.waiting___nilunknown_caller_pcstack:_framesp:runtime:_nameOff_runtime:_typeOff_runtime:_textOff_permission_deniedwrong_medium_typeno_data_availableexec_format_errorLookupAccountSidWDnsRecordListFreeGetCurrentProcessGetShortPathNameWWSAEnumProtocolsWGTB_Standard_TimeFLE_Standard_TimeGMT_Standard_TimemultipartmaxpartsRegLoadMUIStringWreflect.Value.UintGetExitCodeProcess298023223876953125reflect.Value.Elemreflect.Value.TypeQueryServiceStatusGetComputerNameExWGetModuleFileNameWdontfreezetheworldtracebackancestorsadaptivestackstarttraceadvanceperiodgarbage_collectionsync.RWMutex.RLockGC_worker__active_stopping_the_worldbad_lfnode_addresssystem_page_size____but_memory_size__gc_pauses:seconds_because_dotdotdotruntime:_npages__runtime:_range__index_out_of_rangeruntime:___gp:_gpruntime:_getg:__gforEachP:_not_done_in_async_preempt_nbad_manualFreeListruntime:_textAddr_cleantimers:_bad_p_frames_elided..._n__locked_to_threadruntime.semacreateruntime.semawakeupsegmentation_faultoperation_canceledno_child_processesconnection_refusedRFS_specific_erroridentifier_removedinput_output_errormultihop_attemptedfile_name_too_longno_locks_availablestreams_pipe_errorLookupAccountNameWCreateFileMappingWGetFileAttributesWSetFileAttributesWCommandLineToArgvWuse_of_closed_fileCuba_Standard_TimeOmsk_Standard_TimeArab_Standard_TimeIran_Standard_TimeRussia_Time_Zone_3Fiji_Standard_Timereflect.Value.IsNilreflect.Value.FloatWaitForSingleObjectexec:_canceling_Cmd14901161193847656257450580596923828125reflect.Value.Bytesreflect.Value.Fieldreflect.Value.Indexskip_this_directorySetTokenInformationMultiByteToWideCharGC_mark_terminationpanicwrap:_no___in_panicwrap:_no___in__called_using_nil_unknown_wait_reasonnotesleep_not_on_g0GC_work_not_flushed_gc_scan_heap:bytes_gc_heap_goal:bytes_gc_heap_live:bytesbad_kind_in_runfinqmarkroot:_bad_indexnwait___work.nprocs__gp__atomicstatusmarking_free_object_KiB_work__eager_____controller_reset_mspan.sweep:_statesysMemStat_overflowbad_sequence_numberntdll.dll_not_foundwinmm.dll_not_foundruntime:_g0_stack__panic_during_mallocpanic_holding_locksmissing_deferreturnunexpected_gp.parampanic_during_panic_n___g__atomicstatusunexpected_g_statusbad_runtimemstartm_not_found_in_allmstopm_holding_lockssemaRoot_rotateLeftbad_notifyList_sizeruntime:_preempt_g0runtime:_pcdata_is_bad_ABI_descriptiondodeltimer:_wrong_Padjusttimers:_bad_pillegal_instructionbad_file_descriptordisk_quota_exceededtoo_many_open_filesdevice_not_a_streamdirectory_not_emptyCryptReleaseContextGetTokenInformationCreateSymbolicLinkWGetCurrentProcessIdEgypt_Standard_TimeSudan_Standard_TimeLibya_Standard_TimeBahia_Standard_TimeHaiti_Standard_TimeYukon_Standard_TimeAltai_Standard_TimeIndia_Standard_TimeSyria_Standard_TimeRussia_Time_Zone_11Nepal_Standard_TimeKorea_Standard_TimeChina_Standard_TimeRussia_Time_Zone_10Tokyo_Standard_TimeTomsk_Standard_TimeSamoa_Standard_TimeTonga_Standard_Timefile_already_existsfile_does_not_existfile_already_closedmultipartmaxheaders37252902984619140625invalid_write_resultGetAdaptersAddressesGetProcessMemoryInfobcryptprimitives.dllfloating_point_errorGC_sweep_terminationResetDebugLog__test_chan_send__nil_chan_flushing_proc_cachesmalloc_during_signalclose_of_nil_channelinconsistent_lockedmnotetsleep_not_on_g0bad_system_page_size_to_unallocated_span_gc_scan_stack:bytes_gc_scan_total:bytes_gc_heap_frees:bytes_gc_gomemlimit:bytesp_mcache_not_flushed_markroot_jobs_done_npacer:_assist_ratioworkbuf_is_not_emptybad_use_of_bucket.mpbad_use_of_bucket.bpruntime:_double_waitws2_32.dll_not_foundpreempt_off_reason:_forcegc:_phase_errorgopark:_bad_g_statusgo_of_nil_func_valueselectgo:_bad_wakeupsemaRoot_rotateRightreflect.makeFuncStubdodeltimer0:_wrong_Ptrace:_out_of_memorywirep:_already_in_goinvalid_request_codebad_font_file_formatis_a_named_type_filekey_has_been_revokedconnection_timed_outCreateProcessAsUserWCryptAcquireContextWCertOpenSystemStoreWGetCurrentDirectoryWGetFileAttributesExWSetCurrentDirectoryWSetHandleInformationGetAcceptE
mov ebx, 0x11
call sym.runtime.throw
nop
nop
lea rax, [0x0061c130]
call sym.runtime.lock2
nop
nop
lea rax, [0x0061c130]
call sym.runtime.lock2
jmp 0x4349ac