Function at 0x4b1b20
Capabilities:
Run powershell expression

Disassembly:
lea r12, [rsp - 0x68]
cmp r12, qword [r14 + 0x10]
jbe 0x4b214c
push rbp
mov rbp, rsp
sub rsp, 0xe0
mov qword [rsp + 0x108], rdi
mov qword [rsp + 0x110], rsi
mov qword [rsp + 0xf0], rax
mov qword [rsp + 0xf8], rbx
mov qword [rsp + 0x100], rcx
lea rcx, [0x004d847d]
mov edi, 3
call sym.strings.IndexAny
test rax, rax
jge 0x4b1d45
lea rax, [0x004df70d]
mov ebx, 0x22
call sym.syscall.Getenv
test cl, cl
je 0x4b1b9e
xor eax, eax
xor ecx, ecx
xor edx, edx
xor ebx, ebx
jmp 0x4b1cf5
movups xmmword [rsp + 0xa8], xmm15
movups xmmword [rsp + 0xb8], xmm15
mov qword [rsp + 0xb0], 1
lea rdx, [0x004d841b]
mov qword [rsp + 0xa8], rdx
mov rdx, qword [rsp + 0xf8]
mov qword [rsp + 0xc0], rdx
mov rsi, qword [rsp + 0xf0]
mov qword [rsp + 0xb8], rsi
lea rax, [rsp + 0xa8]
mov ebx, 2
mov rcx, rbx
nop dword [rax + rax]
call sym.path_filepath.join
mov rcx, qword [rsp + 0x100]
mov rdi, qword [rsp + 0x108]
mov rsi, qword [rsp + 0x110]
nop dword [rax]
call sym.os_exec.findExecutable
test rcx, rcx
je 0x4b1c37
xor eax, eax
xor ecx, ecx
xor edx, edx
xor ebx, ebx
jmp 0x4b1cf5
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x78], rax
mov rax, qword [0x0058f4b0]
call sym.internal_godebug._Setting_.Value
cmp rbx, 1
jne 0x4b1c7c
cmp byte [rax], 0x30
jne 0x4b1c7c
mov rax, qword [0x0058f4b0]
nop
call sym.internal_godebug._Setting_.IncNonDefault
mov rax, qword [rsp + 0x78]
mov rbx, qword [rsp + 0x40]
xor ecx, ecx
xor edi, edi
add rsp, 0xe0
pop rbp
ret
lea rax, [0x004c62a0]
call sym.runtime.newobject
mov rcx, qword [rsp + 0xf8]
mov qword [rax + 8], rcx
cmp dword [0x0061c240], 0
jne 0x4b1ca7
mov rdx, qword [rsp + 0xf0]
jmp 0x4b1cb7
call sym.runtime.gcWriteBarrier1
mov rdx, qword [rsp + 0xf0]
mov qword [r11], rdx
mov qword [rax], rdx
mov rsi, qword [0x0058f710]
mov rdi, qword [0x0058f718]
mov qword [rax + 0x10], rsi
cmp dword [0x0061c240], 0
je 0x4b1cdd
call sym.runtime.gcWriteBarrier1
mov qword [r11], rdi
mov qword [rax + 0x18], rdi
mov rcx, rax
mov rdx, qword [rsp + 0x40]
mov rbx, qword [rsp + 0x78]
lea rax, [0x00501da8]
mov qword [rsp + 0x40], rdx
mov qword [rsp + 0x78], rbx
mov qword [rsp + 0x80], rcx
mov qword [rsp + 0x48], rax
lea rax, [0x004d85bc]
mov ebx, 4
call sym.os.Getenv
nop dword [rax]
call sym.path_filepath.splitList
mov rcx, qword [rsp + 0x78]
mov rdx, qword [rsp + 0x40]
mov rsi, qword [rsp + 0x80]
mov rdi, qword [rsp + 0x48]
nop dword [rax]
jmp 0x4b1e05
mov rax, qword [rsp + 0xf0]
mov rbx, qword [rsp + 0xf8]
mov rcx, qword [rsp + 0x100]
mov rdi, qword [rsp + 0x108]
mov rsi, qword [rsp + 0x110]
call sym.os_exec.findExecutable
test rcx, rcx
je 0x4b1df1
mov qword [rsp + 0x68], rdi
mov qword [rsp + 0x28], rcx
lea rax, [0x004c62a0]
call sym.runtime.newobject
mov rcx, qword [rsp + 0xf8]
mov qword [rax + 8], rcx
cmp dword [0x0061c240], 0
jne 0x4b1db1
mov rdx, qword [rsp + 0xf0]
mov rsi, qword [rsp + 0x68]
jmp 0x4b1dca
call sym.runtime.gcWriteBarrier2
mov rdx, qword [rsp + 0xf0]
mov qword [r11], rdx
mov rsi, qword [rsp + 0x68]
mov qword [r11 + 8], rsi
mov qword [rax], rdx
mov rdx, qword [rsp + 0x28]
mov qword [rax + 0x10], rdx
mov qword [rax + 0x18], rsi
xor ebx, ebx
lea rcx, [0x00501da8]
mov rdi, rax
xor eax, eax
add rsp, 0xe0
pop rbp
ret
xor ecx, ecx
xor edi, edi
add rsp, 0xe0
pop rbp
ret
add rax, 0x10
dec rbx
test rbx, rbx
jle 0x4b20b6
mov r8, qword [rax + 8]
test r8, r8
je 0x4b1dfe
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0xd8], rcx
mov qword [rsp + 0xd0], rsi
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x50], rbx
mov qword [rsp + 0xc8], rax
mov rdx, qword [rax]
movups xmmword [rsp + 0x88], xmm15
movups xmmword [rsp + 0x98], xmm15
mov qword [rsp + 0x90], r8
mov qword [rsp + 0x88], rdx
mov rdx, qword [rsp + 0xf8]
mov qword [rsp + 0xa0], rdx
mov rsi, qword [rsp + 0xf0]
mov qword [rsp + 0x98], rsi
mov ebx, 2
mov rcx, rbx
lea rax, [rsp + 0x88]
call sym.path_filepath.join
mov rcx, qword [rsp + 0x100]
mov rdi, qword [rsp + 0x108]
mov rsi, qword [rsp + 0x110]
call sym.os_exec.findExecutable
test rcx, rcx
je 0x4b1ee6
mov rax, qword [rsp + 0xc8]
mov rbx, qword [rsp + 0x50]
mov rdi, qword [rsp + 0x58]
mov rsi, qword [rsp + 0xd0]
mov rdx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0xd8]
jmp 0x4b1dfe
mov qword [rsp + 0x78], rax
mov qword [rsp + 0x40], rbx
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x4b1f72
mov rax, qword [rsp + 0xd8]
mov rbx, qword [rsp + 0x60]
call sym.os.Lstat
mov qword [rsp + 0x30], rcx
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x70], rbx
mov rax, qword [rsp + 0x78]
mov rbx, qword [rsp + 0x40]
call sym.os.Lstat
mov rdx, qword [rsp + 0x30]
test rdx, rdx
jne 0x4b2093
nop dword [rax + rax]
test rcx, rcx
jne 0x4b2093
mov rcx, rax
mov rdi, rbx
mov rax, qword [rsp + 0x38]
mov rbx, qword [rsp + 0x70]
call sym.os.SameFile
nop
test al, al
je 0x4b2093
mov rax, qword [rsp + 0x78]
mov rbx, qword [rsp + 0x40]
call sym.path_filepath.IsAbs
test al, al
jne 0x4b207c
mov rax, qword [0x0058f4b0]
call sym.internal_godebug._Setting_.Value
cmp rbx, 1
je 0x4b1f9b
mov rdx, qword [rsp + 0x58]
test rdx, rdx
jmp 0x4b1fae
cmp byte [rax], 0x30
nop
je 0x4b2070
mov rdx, qword [rsp + 0x58]
test rdx, rdx
je 0x4b1fdc
mov rcx, qword [rsp + 0xf8]
mov rdx, qword [rsp + 0xf0]
mov rbx, qword [rsp + 0x58]
mov rax, qword [rsp + 0xd0]
mov rsi, qword [rsp + 0x60]
mov rdi, qword [rsp + 0xd8]
jmp 0x4b2052
lea rax, [0x004c62a0]
call sym.runtime.newobject
mov rcx, qword [rsp + 0xf8]
mov qword [rax + 8], rcx
cmp dword [0x0061c240], 0
jne 0x4b2007
mov rdx, qword [rsp + 0xf0]
jmp 0x4b2017
call sym.runtime.gcWriteBarrier1
mov rdx, qword [rsp + 0xf0]
mov qword [r11], rdx
mov qword [rax], rdx
mov rsi, qword [0x0058f710]
mov r8, qword [0x0058f718]
mov qword [rax + 0x10], rsi
cmp dword [0x0061c240], 0
je 0x4b203d
call sym.runtime.gcWriteBarrier1
mov qword [r11], r8
mov qword [rax + 0x18], r8
lea rbx, [0x00501da8]
mov rsi, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x78]
mov rdx, rsi
mov rcx, rdi
mov rdi, rbx
mov rsi, rax
mov rax, qword [rsp + 0xc8]
mov rbx, qword [rsp + 0x50]
jmp 0x4b1dfe
mov rax, qword [0x0058f4b0]
call sym.internal_godebug._Setting_.IncNonDefault
mov rax, qword [rsp + 0x78]
mov rbx, qword [rsp + 0x40]
xor ecx, ecx
xor edi, edi
add rsp, 0xe0
pop rbp
ret
mov rax, qword [rsp + 0xd8]
mov rbx, qword [rsp + 0x60]
mov rcx, qword [rsp + 0x58]
mov rdi, qword [rsp + 0xd0]
add rsp, 0xe0
pop rbp
ret
test rdi, rdi
jne 0x4b2137
lea rax, [0x004c62a0]
call sym.runtime.newobject
mov rcx, qword [rsp + 0xf8]
mov qword [rax + 8], rcx
cmp dword [0x0061c240], 0
jne 0x4b20e6
mov rdx, qword [rsp + 0xf0]
jmp 0x4b20f6
call sym.runtime.gcWriteBarrier1
mov rdx, qword [rsp + 0xf0]
mov qword [r11], rdx
mov qword [rax], rdx
mov rdx, qword [0x0058f720]
mov rsi, qword [0x0058f728]
mov qword [rax + 0x10], rdx
cmp dword [0x0061c240], 0
je 0x4b211c
call sym.runtime.gcWriteBarrier1
mov qword [r11], rsi
mov qword [rax + 0x18], rsi
xor ebx, ebx
lea rcx, [0x00501da8]
mov rdi, rax
xor eax, eax
add rsp, 0xe0
pop rbp
ret
mov rax, rcx
mov rbx, rdx
mov rcx, rdi
mov rdi, rsi
add rsp, 0xe0
pop rbp
ret
mov qword [rsp + 8], rax
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rcx
mov qword [rsp + 0x20], rdi
mov qword [rsp + 0x28], rsi
call sym.runtime.morestack_noctxt.abi0
mov rax, qword [rsp + 8]
mov rbx, qword [rsp + 0x10]
mov rcx, qword [rsp + 0x18]
mov rdi, qword [rsp + 0x20]
mov rsi, qword [rsp + 0x28]
jmp sym.os_exec.lookPath