Function at 0x140078ee0
Capabilities:
Hide graphical window
Terminate process

Disassembly:
sub rsp, 0x158
mov rax, qword [0x140155080]
xor rax, rsp
mov qword [rsp + 0x140], rax
mov ecx, 0xfffffff5
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
mov qword [rsp + 0x78], rax
mov dx, 1
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov dword [rsp + 0xc0], 0x50
mov dword [rsp + 0xc4], 0x40
lea rax, [0x140072880]
mov qword [rsp + 0xc8], rax
mov dword [rsp + 0xd0], 0
mov dword [rsp + 0xd4], 0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0xe0], 0
mov qword [rsp + 0xe8], 0
mov qword [rsp + 0xf0], 0
mov qword [rsp + 0xf8], 0
lea rax, [0x140114f60]
mov qword [rsp + 0x100], rax
mov qword [rsp + 0x108], 0
lea rcx, [rsp + 0xc0]
call qword [sym.imp.USER32.dll_RegisterClassExW]
mov qword [rsp + 0x58], 0
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], 0
mov qword [rsp + 0x40], 0
mov dword [rsp + 0x38], reloc.WLDAP32.dll_Ordinal_50
mov dword [rsp + 0x30], reloc.WLDAP32.dll_Ordinal_50
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r9d, 0xcf0000
lea r8, str.Spoofy.gg
mov rdx, qword [rsp + 0x100]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [rsp + 0x68], rax
mov rcx, qword [rsp + 0x68]
call fcn.140072700
movzx eax, al
test eax, eax
jne 0x14007905c
call fcn.1400727e0
mov rdx, qword [rsp + 0xd8]
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_UnregisterClassW]
mov eax, 1
jmp 0x140079438
call qword [sym.imp.KERNEL32.dll_GetConsoleWindow]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov qword [rsp + 0x30], 2
mov qword [rsp + 0x28], reloc.WS2_32.dll_sendto
mov qword [rsp + 0x20], reloc.WS2_32.dll_recv
mov r9d, 8
mov r8d, 0x3dc
mov edx, 0x1550
lea rcx, str.1.80_WIP
call fcn.14001c8c0
xor ecx, ecx
call fcn.14000c500
call fcn.14000c6d0
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x60]
mov rax, qword [rax + 0xa0]
mov qword [rsp + 0x80], rax
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
movss xmm3, dword [0x140146fc8]
mov r8d, 0x41f54
lea rdx, [0x1402ab6b0]
mov rcx, qword [rsp + 0x80]
call fcn.14004c140
mov rax, qword [rsp + 0x60]
mov eax, dword [rax]
bts eax, 0xa
mov rcx, qword [rsp + 0x60]
mov dword [rcx], eax
mov rax, qword [rsp + 0x60]
mov qword [rax + 0x18], 0
mov rax, qword [rsp + 0x60]
mov qword [rax + 0x20], 0
mov rdx, qword [rsp + 0x60]
lea rcx, [0x140364718]
call fcn.140078ac0
call fcn.140008bc0
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x60]
mov eax, dword [rax]
and eax, 0x400
test eax, eax
je 0x140079191
mov rax, qword [rsp + 0x70]
movss xmm0, dword [0x140146f94]
movss dword [rax + 0xc], xmm0
mov eax, reloc.WS2_32.dll_recv
imul rax, rax, 2
mov rcx, qword [rsp + 0x70]
movss xmm0, dword [0x140146f3c]
movss dword [rcx + rax + 0xc8], xmm0
mov rcx, qword [rsp + 0x68]
call fcn.140055c90
mov rcx, qword [0x140364f30]
call fcn.140054f60
call fcn.1400765d0
movzx eax, byte [reloc.WS2_32.dll_accept]
test eax, eax
je 0x1400793ff
mov dword [rsp + 0x20], 1
xor r9d, r9d
xor r8d, r8d
xor edx, edx
lea rcx, [rsp + 0x110]
call qword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x14007920c
lea rcx, [rsp + 0x110]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rsp + 0x110]
call qword [sym.imp.USER32.dll_DispatchMessageW]
cmp dword [rsp + 0x118], 0x12
jne 0x14007920a
mov byte [reloc.WS2_32.dll_accept], 0
jmp 0x1400791bb
movzx eax, byte [reloc.WS2_32.dll_accept]
test eax, eax
jne 0x14007921c
jmp 0x1400793ff
call fcn.140008bc0
mov qword [rsp + 0xb0], rax
call fcn.140055310
call fcn.140056b40
call fcn.14000e9b0
movzx eax, byte [reloc.WS2_32.dll_accept]
test eax, eax
je 0x14007924f
call fcn.140078ce0
call fcn.140076880
jmp 0x140079257
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
call fcn.140010a50
mov rax, qword [0x140364f30]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0x88], rax
xor r8d, r8d
mov edx, 7
mov rcx, qword [0x140364f30]
call qword [rsp + 0x88]
mov rax, qword [0x140364f30]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0x90], rax
xor r8d, r8d
mov edx, reloc.WLDAP32.dll_Ordinal_27
mov rcx, qword [0x140364f30]
call qword [rsp + 0x90]
mov rax, qword [0x140364f30]
mov rax, qword [rax]
mov rax, qword [rax + 0x1c8]
mov qword [rsp + 0x98], rax
xor r8d, r8d
mov edx, 0xae
mov rcx, qword [0x140364f30]
call qword [rsp + 0x98]
mov rax, qword [0x140364f30]
mov rax, qword [rax]
mov rax, qword [rax + 0x158]
mov qword [rsp + 0xa0], rax
mov dword [rsp + 0x30], 0
movss xmm0, dword [0x140146f3c]
movss dword [rsp + 0x28], xmm0
mov dword [rsp + 0x20], 0
mov r9d, 3
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x140364f30]
call qword [rsp + 0xa0]
mov rax, qword [0x140364f30]
mov rax, qword [rax]
mov rcx, qword [0x140364f30]
call qword [rax + 0x148]
test eax, eax
jl 0x14007937d
call fcn.140010e80
call fcn.14000c6f0
mov rcx, rax
call fcn.1400545c0
mov rax, qword [0x140364f30]
mov rax, qword [rax]
mov rcx, qword [0x140364f30]
call qword [rax + 0x150]
mov rax, qword [rsp + 0x60]
mov eax, dword [rax]
and eax, 0x400
test eax, eax
je 0x14007939b
call fcn.140029950
xor edx, edx
xor ecx, ecx
call fcn.14002a050
mov rax, qword [0x140364f30]
mov rax, qword [rax]
mov rax, qword [rax + 0x88]
mov qword [rsp + 0xa8], rax
mov qword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [0x140364f30]
call qword [rsp + 0xa8]
cmp eax, 0x88760868
jne 0x1400793fa
mov rax, qword [0x140364f30]
mov rax, qword [rax]
mov rcx, qword [0x140364f30]
call qword [rax + Ordinal_26]
cmp eax, 0x88760869
jne 0x1400793fa
call fcn.140072840
jmp 0x1400791ac
call fcn.140054ff0
call fcn.140055f70
xor ecx, ecx
call fcn.14000c5b0
call fcn.1400727e0
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.USER32.dll_DestroyWindow]
mov rdx, qword [rsp + 0xd8]
mov rcx, qword [rsp + 0x100]
call qword [sym.imp.USER32.dll_UnregisterClassW]
xor eax, eax
mov rcx, qword [rsp + 0x140]
xor rcx, rsp
call fcn.1400ea150
add rsp, 0x158
ret