Function at 0x140001750
Capabilities:
Create process on windows

Disassembly:
push rbp
sub rsp, 0x100
lea rbp, [rsp + 0x50]
mov qword [rbp + 0xc0], rbx
mov qword [rbp + 0xc8], rsi
mov qword [rbp + 0xd0], rdi
mov qword [rbp + 0xd8], r14
mov rax, qword [0x14003f198]
xor rax, rbp
mov qword [rbp + 0xa0], rax
mov r14, rcx
xor edi, edi
mov ebx, edi
test rcx, rcx
je 0x140001a51
mov rcx, qword [rcx + 8]
call qword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x140001a2f
xor ecx, ecx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rdi
lea r9d, [rdi - 1]
lea r8, [0x14002e6bc]
xor edx, edx
lea ecx, [rdi + 3]
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov esi, eax
lea edx, [rax - 1]
xor ecx, ecx
call qword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov rbx, rax
test rax, rax
je 0x140001810
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], rax
lea r9d, [rdi - 1]
lea r8, [0x14002e6bc]
xor edx, edx
lea ecx, [rdi + 3]
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp eax, esi
jne 0x140001a90
mov qword [rbp], rbx
test rbx, rbx
je 0x140001a9d
mov rsi, qword [r14 + 8]
mov rcx, rsi
call qword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x140001856
mov qword [rbp + 8], rdi
lea r8, [rbp + 8]
mov rdx, rsi
mov rcx, rbx
call sub.OLEAUT32.dll_VarBstrCmp
test eax, eax
js 0x140001856
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rax, qword [rbp + 8]
mov qword [rbp], rax
lea rdx, [0x14002e6c0]
lea rcx, [rbp]
call fcn.1400015d0
mov rbx, qword [r14 + 0x10]
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x1400018a5
mov qword [rbp + 8], rdi
lea r8, [rbp + 8]
mov rdx, rbx
mov rbx, qword [rbp]
mov rcx, rbx
call sub.OLEAUT32.dll_VarBstrCmp
test eax, eax
js 0x1400018a9
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rbx, qword [rbp + 8]
mov qword [rbp], rbx
jmp 0x1400018a9
mov rbx, qword [rbp]
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x140001a2f
call fcn.140008b30
test eax, eax
je 0x1400018cd
call fcn.1400092b0
jmp 0x140001a2f
call fcn.140009930
test eax, eax
je 0x1400018e0
call fcn.1400096f0
jmp 0x140001a0e
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbp + 0x30], xmm0
movups xmmword [rbp + 0x40], xmm0
movups xmmword [rbp + 0x50], xmm0
movups xmmword [rbp + 0x60], xmm0
movups xmmword [rbp + 0x70], xmm0
movups xmmword [rbp + 0x80], xmm0
mov qword [rbp + 0x90], rax
movups xmmword [rbp + 0x10], xmm0
mov qword [rbp + 0x20], rax
mov dword [rbp + 0x30], 0x68
mov eax, 5
mov word [rbp + 0x70], ax
test rbx, rbx
je 0x1400019b0
mov rax, 0xffffffffffffffff
nop
inc rax
cmp word [rbx + rax*2], 0
jne 0x140001930
lea edx, [rax + 1]
cmp edx, 0x3fffffff
jg 0x1400019b0
cdqe
lea rax, [rax*2 + 2]
lea rcx, [rax + 0xf]
cmp rcx, rax
ja 0x140001962
movabs rcx, 0xffffffffffffff0
and rcx, 0xfffffffffffffff0
mov rax, rcx
call fcn.14000a160
sub rsp, rcx
lea rsi, [rsp + 0x50]
test rsi, rsi
je 0x1400019b0
mov byte [rsi], 0
lea eax, [rdx + rdx]
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], eax
mov qword [rsp + 0x20], rsi
mov r9d, 0xffffffff
mov r8, rbx
xor edx, edx
lea ecx, [rdx + 3]
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
cmove rsi, rdi
jmp 0x1400019b3
mov rsi, rdi
lea rax, [rbp + 0x10]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0x30]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x20], edi
xor r9d, r9d
xor r8d, r8d
mov rdx, rsi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
mov edi, eax
cmp qword [rbp + 0x10], 0
je 0x140001a0a
mov rcx, qword [rbp + 0x18]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x10]
test rcx, rcx
je 0x140001a0a
call qword [sym.imp.KERNEL32.dll_CloseHandle]
test edi, edi
jne 0x140001a2f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9d, eax
lea r8, str.Launching_iTunes_FAILED__Last_error___d
lea rdx, str.LaunchApp__
mov ecx, 4
call fcn.1400065b0
mov rcx, qword [r14 + 0x10]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov rcx, qword [r14 + 8]
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov edx, 0x18
mov rcx, r14
call fcn.140009dac
nop
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, edi
mov rcx, qword [rbp + 0xa0]
xor rcx, rbp
call fcn.14000a0a0
mov rbx, qword [rbp + 0xc0]
mov rsi, qword [rbp + 0xc8]
mov rdi, qword [rbp + 0xd0]
mov r14, qword [rbp + 0xd8]
lea rsp, [rbp + 0xb0]
pop rbp
ret
mov rcx, rbx
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
mov qword [rbp], rdi
mov ecx, 0x8007000e
call fcn.140001720
int3