Function at 0x401170
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x402db8
mov eax, dword fs:[0]
push eax
sub esp, 0xc0
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 0xc]
lea ecx, [ebp - 0x58]
push 0x4031f0
mov dword [ebp - 0xc0], esi
call fcn.00401680
push 0x4031f0
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0
call fcn.00401680
mov edi, dword [ebp + 8]
mov byte [ebp - 4], 1
cmp edi, 1
jne 0x401291
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.004018c0
mov esi, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
push 0xa
mov eax, dword [esi]
mov ecx, dword [eax + 4]
add ecx, esi
call dword [sym.imp.MSVCP140.dll_public:_char___thiscall_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const]
movzx eax, al
lea edx, [ebp - 0x58]
push eax
mov ecx, esi
call fcn.00401e30
add esp, 4
cmp dword [ebp - 0x44], 0xf
lea ecx, [ebp - 0x58]
mov edi, dword [ebp - 0x58]
mov esi, dword [ebp - 0x48]
cmova ecx, edi
cmp esi, 7
jne 0x401577
mov edx, str.HUYDQ54
sub esi, 4
jb 0x401241
nop dword [eax + eax]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x40124a
add ecx, 4
add edx, 4
sub esi, 4
jae 0x401230
cmp esi, 0xfffffffc
je 0x4014fa
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x401287
cmp esi, 0xfffffffd
je 0x4014fa
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x401287
cmp esi, 0xfffffffe
je 0x4014fa
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x401287
cmp esi, 0xffffffff
je 0x4014fa
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x4014fa
sbb eax, eax
or eax, 1
jmp 0x4014fc
jle 0x4012b9
mov edx, dword [esi + 4]
mov ecx, edx
lea esi, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4012a0
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x58]
call fcn.00401790
mov esi, dword [ebp - 0xc0]
cmp edi, 2
jle 0x401208
mov eax, 2
mov dword [ebp - 0xbc], eax
nop dword [eax]
push dword [esi + eax*4]
lea ecx, [ebp - 0x40]
call fcn.00401680
mov byte [ebp - 4], 2
mov eax, 0x7fffffff
mov ecx, dword [ebp - 0x30]
sub eax, ecx
cmp eax, 1
jb 0x401624
cmp dword [ebp - 0x2c], 0xf
lea edx, [ebp - 0x40]
mov eax, dword [ebp - 0x40]
lea edi, [ebp - 0xb4]
cmova edx, eax
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xc8], edx
mov esi, 0xf
lea edx, [ecx + 1]
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0xa0], 0
xorps xmm0, xmm0
mov dword [ebp - 0xb8], edx
movups xmmword [ebp - 0xb4], xmm0
cmp edx, esi
jbe 0x4013c8
mov esi, edx
or esi, 0xf
cmp esi, 0x7fffffff
jbe 0x401361
mov ecx, 0x80000000
mov esi, 0x7fffffff
add ecx, 0x23
jmp 0x401381
cmp esi, 0x16
mov eax, 0x16
cmovb esi, eax
lea eax, [esi + 1]
cmp eax, 0x1000
jb 0x4013a6
lea ecx, [eax + 0x23]
cmp ecx, eax
jbe 0x40161f
push ecx
call fcn.0040203f
add esp, 4
test eax, eax
je 0x4015f2
mov ecx, dword [ebp - 0x30]
lea edi, [eax + 0x23]
mov edx, dword [ebp - 0xb8]
and edi, 0xffffffe0
mov dword [edi - 4], eax
jmp 0x4013c2
test eax, eax
je 0x4013c0
push eax
call fcn.0040203f
mov ecx, dword [ebp - 0x30]
add esp, 4
mov edx, dword [ebp - 0xb8]
mov edi, eax
jmp 0x4013c2
xor edi, edi
mov dword [ebp - 0xb4], edi
push ecx
push dword [ebp - 0xc8]
mov dword [ebp - 0xa4], edx
push edi
mov dword [ebp - 0xa0], esi
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [ebp - 0x30]
add esp, 0xc
mov byte [eax + edi], 0x20
mov byte [edi + eax + 1], 0
mov byte [ebp - 4], 3
lea edx, [ebp - 0xb4]
cmp dword [ebp - 0xa0], 0xf
mov edi, dword [ebp - 0xb4]
mov eax, dword [ebp - 0x14]
cmova edx, edi
mov esi, dword [ebp - 0x18]
sub eax, esi
mov ecx, dword [ebp - 0xa4]
push ecx
push edx
cmp ecx, eax
ja 0x401446
cmp dword [ebp - 0x14], 0xf
lea eax, [esi + ecx]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
add esi, eax
push esi
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [ebp - 0xa4]
add esp, 0xc
mov byte [eax + esi], 0
jmp 0x401462
mov byte [ebp - 0xcc], 0
push dword [ebp - 0xcc]
push ecx
lea ecx, [ebp - 0x28]
call fcn.00401c10
mov edi, dword [ebp - 0xb4]
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0xa0]
cmp eax, 0xf
jbe 0x40149c
lea ecx, [eax + 1]
mov eax, edi
cmp ecx, 0x1000
jb 0x401492
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4015f2
push ecx
push edi
call fcn.0040206f
add esp, 8
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x2c]
cmp eax, 0xf
jbe 0x4014d9
mov edx, dword [ebp - 0xc4]
lea ecx, [eax + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x4014cf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4015f2
push ecx
push edx
call fcn.0040206f
add esp, 8
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp eax, dword [ebp + 8]
jge 0x401208
mov esi, dword [ebp - 0xc0]
jmp 0x4012d0
xor eax, eax
test eax, eax
jne 0x401577
push 0x40
push eax
lea eax, [ebp - 0x98]
mov dword [ebp - 0x9c], 0x44
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea ecx, [ebp - 0xac]
cmp dword [ebp - 0x14], 0xf
lea eax, [ebp - 0x28]
cmova eax, dword [ebp - 0x28]
push ecx
lea ecx, [ebp - 0x9c]
push ecx
push 0
push 0
push 0
push 1
push 0
push 0
push eax
push str.TVREMOTE_EXTRA.EXE
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x40158b
push 0xffffffffffffffff
push dword [ebp - 0xac]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [ebp - 0xac]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp - 0xa8]
call esi
jmp 0x40158b
push 0x41000
push 0
push str.WRONG_PASSWORD
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x4015bb
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4015b1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4015f2
push ecx
push edx
call fcn.0040206f
add esp, 8
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
cmp eax, 0xf
jbe 0x401602
lea ecx, [eax + 1]
mov eax, edi
cmp ecx, 0x1000
jb 0x4015f8
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4015f8
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edi
call fcn.0040206f
add esp, 8
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00402031
mov esp, ebp
pop ebp
ret
call fcn.004010c0
call fcn.00401160
int3