Function at 0x140006ef0
Capabilities:
Execute command
Set console window title
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rsp - 0x40]
sub rsp, 0x140
mov rax, qword [0x1400a20c0]
xor rax, rsp
mov qword [rbp + 0x38], rax
xor r12d, r12d
mov dword [rsp + 0x20], r12d
xorps xmm0, xmm0
movups xmmword [rbp + 0x18], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 0x28], xmm1
mov r8d, 0xbc
lea rdx, str.https:__cdn.discordapp.com_attachments_1279857047680319572_1293586789012996156_merryspoofer.exe_ex6707ea14is67069894hm432d45b380763f65d995bd201d84a9188d2c5f47537f17613d8d286b525c25f1
lea rcx, [rbp + 0x18]
call fcn.14000d320
nop
lea rcx, [rbp - 0x28]
call fcn.140006890
nop
mov r14, qword [rbp - 0x18]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, r14
cmp rax, 0xb
jb 0x1400073e1
lea r15, [rbp - 0x28]
cmp qword [rbp - 0x10], 0xf
cmova r15, qword [rbp - 0x28]
xorps xmm0, xmm0
movups xmmword [rbp - 8], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp + 8], xmm1
lea rsi, [r14 + 0xb]
mov ebx, reloc.WS2_32.dll_ntohs
lea rdi, [rbp - 8]
cmp rsi, rbx
jbe 0x140007022
mov rbx, rsi
or rbx, 0xf
cmp rbx, rcx
jbe 0x140006fe4
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.14007f0a0
test rax, rax
je 0x1400072f9
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x14000701e
mov eax, reloc.WLDAP32.dll_Ordinal_22
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x140006ffe
mov rdi, r12
jmp 0x14000701e
cmp rcx, 0x1000
jb 0x140007016
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x1400073e7
jmp 0x140006fc5
call fcn.14007f0a0
mov rdi, rax
mov qword [rbp - 8], rdi
mov qword [rbp + 8], rsi
mov qword [rbp + 0x10], rbx
movsd xmm0, qword [str.C:Windows_]
movsd qword [rdi], xmm0
movzx ecx, word [0x140091b08]
mov word [rdi + 8], cx
movzx eax, byte [0x140091b0a]
mov byte [rdi + 0xa], al
lea rcx, [rdi + 0xb]
mov r8, r14
mov rdx, r15
call sub.VCRUNTIME140.dll_memcpy
mov byte [rdi + rsi], 0
mov dword [rsp + 0x20], 2
lea rdx, [rbp - 8]
lea rcx, [rbp + 0x18]
call fcn.1400069e0
lea rcx, str.Merry_Empire__Loader
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea rcx, [0x140091a38]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
lea rdx, str._n__________________________n____________n_________________________________n________________________n_______________________________n____________________________n______________________________________n___________________________________________________________________________________n
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14000c7c0
mov rcx, rax
call fcn.14000c5f0
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rax, [rsp + 0x40]
mov qword [rbp - 0x60], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
mov r8d, 2
lea rdx, [0x140091974]
lea rcx, [rsp + 0x40]
call fcn.14000d320
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], r12
mov r8d, reloc.WS2_32.dll_send
lea rdx, str._n__1__Load_Spoofer
lea rcx, [rsp + 0x60]
call fcn.14000d320
nop
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0x60]
lea rcx, [rbp - 0x58]
call fcn.14000f0e0
nop
lea rax, [rbp - 0x58]
mov qword [rbp - 0x80], rax
lea rax, [rbp - 0x30]
mov qword [rbp - 0x78], rax
movaps xmm0, xmmword [rbp - 0x80]
movdqa xmmword [rbp - 0x70], xmm0
lea rdx, [rbp - 0x70]
lea rcx, [rsp + 0x30]
call fcn.14000e800
mov dword [rsp + 0x20], 6
lea r9, [fcn.140006400]
mov edx, Ordinal_41
mov r8d, 1
lea rcx, [rbp - 0x58]
call fcn.14007f0dc
lea rdx, [rsp + 0x30]
mov rcx, rbx
call fcn.14000c990
mov dword [rsp + 0x20], 2
lea rcx, [rsp + 0x30]
call fcn.140008740
mov rbx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea rax, [rsp + 0x60]
mov qword [rbp - 0x80], rax
xorps xmm0, xmm0
movups xmmword [rsp + 0x60], xmm0
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], r12
mov r8d, 2
lea rdx, [0x1400919c8]
lea rcx, [rsp + 0x60]
call fcn.14000d320
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r12
mov qword [rsp + 0x58], r12
mov r8d, 2
lea rdx, [0x140091c84]
lea rcx, [rsp + 0x40]
call fcn.14000d320
nop
lea r8, [rsp + 0x60]
lea rdx, [rsp + 0x40]
lea rcx, [rbp - 0x58]
call fcn.14000f0e0
nop
lea rax, [rbp - 0x58]
mov qword [rsp + 0x30], rax
lea rax, [rbp - 0x30]
mov qword [rsp + 0x38], rax
movaps xmm0, xmmword [rsp + 0x30]
movdqa xmmword [rsp + 0x30], xmm0
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x70]
call fcn.14000e800
mov dword [rsp + 0x20], 0xa
lea r9, [fcn.140006400]
mov edx, Ordinal_41
mov r8d, 1
lea rcx, [rbp - 0x58]
call fcn.14007f0dc
lea rdx, [rbp - 0x70]
mov rcx, rbx
call fcn.14000c990
nop
lea rcx, [rbp - 0x70]
call fcn.140008740
lea rdx, [rbp - 0x30]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_istream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_istream_char__struct_std::char_traits_char__::operator___int____ptr64____ptr64]
mov edx, dword [rbp - 0x30]
sub edx, 1
je 0x1400073bf
sub edx, 1
je 0x1400072b4
sub edx, 1
je 0x1400072ab
cmp edx, 4
jne 0x1400072c7
lea rcx, [0x140091a38]
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x1400072c1
lea rcx, str.start
jmp 0x1400072bb
lea rcx, str.start_merrychecker.bat
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.140006ef0
nop
mov rdx, qword [rbp + 0x10]
cmp rdx, 0xf
jbe 0x140007306
inc rdx
mov rcx, qword [rbp - 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140007300
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140007300
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007f3f4
nop
mov rdx, qword [rbp - 0x10]
cmp rdx, 0xf
jbe 0x140007344
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000733f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000733f
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007f3f4
mov qword [rbp - 0x18], r12
mov qword [rbp - 0x10], reloc.WS2_32.dll_ntohs
mov byte [rbp - 0x28], 0
mov rdx, qword [rbp + 0x30]
cmp rdx, 0xf
jbe 0x140007392
inc rdx
mov rcx, qword [rbp + 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000738d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14000738d
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14007f3f4
mov rcx, qword [rbp + 0x38]
xor rcx, rsp
call fcn.14007f080
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret
lea rcx, [rbp - 8]
call fcn.140006d40
call fcn.140006ef0
mov ecx, 0x3e8
call qword [sym.imp.KERNEL32.dll_Sleep]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
nop
call fcn.1400029e0
int3
call fcn.140002940
int3