Exactly like in 99f9609, which fixed the same issue in CallExpression, the spec tells us to *first* evaluate the arguments, if any, and *then* check if the provided value is a constructor function.
99f9609