Function at 0x180054d20
Capabilities:
Download url
Query environment variable
Receive data
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rsp - 0x3b0]
sub rsp, 0x4b0
mov rax, qword [0x1801d1038]
xor rax, rsp
mov qword [rbp + 0x3a0], rax
xor r14d, r14d
xorps xmm0, xmm0
movups xmmword [rbp + 0x30], xmm0
mov qword [rbp + 0x40], r14
mov qword [rbp + 0x48], reloc.WS2_32.dll_ntohs
mov byte [rbp + 0x30], r14b
xor edx, edx
mov r8d, 0x108
lea rcx, [rbp + 0x290]
call sub.VCRUNTIME140.dll_memset
lea rcx, [rbp + 0x290]
call fcn.1800516f0
nop
lea rcx, [0x180167718]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov rsi, 0xffffffffffffffff
mov rdi, rsi
nop dword [rax + rax]
inc rdi
cmp byte [rax + rdi], 0
jne 0x180054db0
mov rcx, qword [rbp + 0x48]
cmp rdi, rcx
ja 0x180054de7
lea rbx, [rbp + 0x30]
cmp rcx, 0x10
cmovae rbx, qword [rbp + 0x30]
mov qword [rbp + 0x40], rdi
mov r8, rdi
mov rdx, rax
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rbx + rdi], 0
jmp 0x180054df6
mov r9, rax
mov rdx, rdi
lea rcx, [rbp + 0x30]
call fcn.18000e180
lea rdx, str.appdata
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.180051860
lea rdx, [rbp + 0x30]
cmp qword [rbp + 0x48], 0x10
cmovae rdx, qword [rbp + 0x30]
mov r8, qword [rbp + 0x40]
mov rcx, rax
call fcn.18000ef00
lea rdx, [0x180051a30]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov r8d, 8
lea rdx, str.VX_Menu
lea rcx, [rbp + 0x30]
call fcn.18000ce10
lea rdx, str.path
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.180051860
lea rdx, [rbp + 0x30]
cmp qword [rbp + 0x48], 0x10
cmovae rdx, qword [rbp + 0x30]
mov r8, qword [rbp + 0x40]
mov rcx, rax
call fcn.18000ef00
lea rdx, [0x180051a30]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rdi, qword [rbp + 0x40]
lea r9, [rbp + 0x30]
cmp qword [rbp + 0x48], 0x10
cmovae r9, qword [rbp + 0x30]
mov rax, qword [0x180263a08]
cmp rdi, rax
ja 0x180054ed2
lea rbx, [0x1802639f0]
cmp rax, 0x10
cmovae rbx, qword [0x1802639f0]
mov qword [0x180263a00], rdi
mov r8, rdi
mov rdx, r9
mov rcx, rbx
call sub.VCRUNTIME140.dll_memmove
mov byte [rdi + rbx], 0
jmp 0x180054ee1
mov rdx, rdi
lea rcx, [0x1802639f0]
call fcn.18000e180
lea rcx, [0x180167718]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov qword [rsp + 0x40], rax
mov rcx, rsi
inc rcx
cmp byte [rax + rcx], 0
jne 0x180054ef6
mov qword [rsp + 0x48], rcx
call fcn.1800f5cf0
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x60], xmm0
lea r8, [rsp + 0x60]
mov edx, eax
lea rcx, [rbp + 0x50]
call fcn.180051f10
nop
lea rbx, [0x1801773a8]
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], 7
call fcn.1800f5cf0
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x70], xmm0
lea r8, [rsp + 0x70]
mov edx, eax
lea rcx, [rbp - 0x30]
call fcn.180051f10
nop
lea rdx, [rbp - 0x30]
lea rcx, [rbp + 0x50]
call fcn.180052530
nop
lea rcx, [rbp - 0x30]
call fcn.180053820
lea rcx, [rbp + 0x50]
call fcn.180053640
test al, al
jne 0x180054fa6
lea rcx, [rbp + 0x50]
cmp qword [rbp + 0x68], 8
cmovae rcx, qword [rbp + 0x50]
call fcn.1800f5e2c
shr rax, 0x20
test eax, eax
je 0x180054fa6
lea r8, [rbp + 0x50]
mov edx, eax
call fcn.180052780
int3
lea rax, str.Textures
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], 8
call fcn.1800f5cf0
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rbp - 0x80], xmm0
lea r8, [rbp - 0x80]
mov edx, eax
lea rcx, [rbp - 0x10]
call fcn.180051f10
nop
lea rdx, [rbp - 0x10]
lea rcx, [rbp + 0x50]
call fcn.180052530
nop
lea rcx, [rbp - 0x10]
call fcn.180053820
lea rcx, [rbp + 0x50]
call fcn.180053640
test al, al
jne 0x1800550bf
lea rcx, [rbp + 0x50]
cmp qword [rbp + 0x68], 8
cmovae rcx, qword [rbp + 0x50]
call fcn.1800f5e2c
shr rax, 0x20
test eax, eax
je 0x180055029
lea r8, [rbp + 0x50]
mov edx, eax
call fcn.180052780
int3
lea rcx, [0x180167718]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
xorps xmm0, xmm0
movups xmmword [rbp + 0x90], xmm0
mov qword [rbp + 0xa0], r14
mov qword [rbp + 0xa8], r14
mov r8, rsi
inc r8
cmp byte [rax + r8], 0
jne 0x180055051
mov rdx, rax
lea rcx, [rbp + 0x90]
call fcn.18000de60
nop
mov r8d, reloc.WLDAP32.dll_Ordinal_33
lea rdx, str.VX_MenuTexturesVirtual_X_T.ytd
lea rcx, [rbp + 0x90]
call fcn.18000ce10
lea r8, [rbp + 0x90]
cmp qword [rbp + 0xa8], 0x10
cmovae r8, qword [rbp + 0x90]
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea rdx, str.https:__cdn.discordapp.com_attachments_1095374572083220646_1178007681819234434_Virtual_X_T.ytd_ex65749425is65621f25hmd361ae1ec845972e87f69cb1c46f1fb887ab5b74c3688d4a73c847088d374e32
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
nop
lea rcx, [rbp + 0x90]
call fcn.18000cdb0
lea rcx, [0x180167718]
call qword [sym.imp.api_ms_win_crt_environment_l1_1_0.dll_getenv]
mov qword [rsp + 0x40], rax
mov rcx, rsi
inc rcx
cmp byte [rax + rcx], 0
jne 0x1800550d4
mov qword [rsp + 0x48], rcx
call fcn.1800f5cf0
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rbp - 0x70], xmm0
lea r8, [rbp - 0x70]
mov edx, eax
lea rcx, [rbp + 0x70]
call fcn.180051f10
nop
mov qword [rsp + 0x40], rbx
mov qword [rsp + 0x48], 7
call fcn.1800f5cf0
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rbp - 0x60], xmm0
lea r8, [rbp - 0x60]
mov edx, eax
lea rcx, [rbp + 0x10]
call fcn.180051f10
nop
lea rdx, [rbp + 0x10]
lea rcx, [rbp + 0x70]
call fcn.180052530
nop
lea rcx, [rbp + 0x10]
call fcn.180053820
lea rcx, [rbp + 0x70]
call fcn.180053640
test al, al
jne 0x18005517c
lea rcx, [rbp + 0x70]
cmp qword [rbp + 0x88], 8
cmovae rcx, qword [rbp + 0x70]
call fcn.1800f5e2c
shr rax, 0x20
test eax, eax
je 0x18005517c
lea r8, [rbp + 0x70]
mov edx, eax
call fcn.180052780
int3
lea rax, str.Outfits
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], 7
call fcn.1800f5cf0
movaps xmm0, xmmword [rsp + 0x40]
movdqa xmmword [rsp + 0x40], xmm0
lea r8, [rsp + 0x40]
mov edx, eax
lea rcx, [rbp - 0x50]
call fcn.180051f10
nop
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x70]
call fcn.180052530
nop
lea rcx, [rbp - 0x50]
call fcn.180053820
lea rcx, [rbp + 0x70]
call fcn.180053640
test al, al
jne 0x180055200
lea rcx, [rbp + 0x70]
cmp qword [rbp + 0x88], 8
cmovae rcx, qword [rbp + 0x70]
call fcn.1800f5e2c
shr rax, 0x20
test eax, eax
je 0x180055200
lea r8, [rbp + 0x70]
mov edx, eax
call fcn.180052780
int3
mov ecx, 0x3a8
call fcn.1800f6468
mov rbx, rax
mov qword [rsp + 0x30], rax
xor edx, edx
mov r8d, 0x3a8
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov rcx, rbx
call fcn.180050e80
nop
mov rdx, rax
call fcn.180056ad0
mov ecx, 0x440
call fcn.1800f6468
mov rbx, rax
mov qword [rsp + 0x30], rax
xor edx, edx
mov r8d, 0x440
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov rcx, rbx
call fcn.180053c60
nop
mov rbx, qword [0x1801ef950]
mov qword [0x1801ef950], rax
test rbx, rbx
je 0x180055286
mov rcx, rbx
call fcn.180054a00
mov edx, 0x440
mov rcx, rbx
call fcn.1800f6340
lea rcx, [0x1802639e0]
call fcn.180063fe0
mov ecx, 0x189
call fcn.1800f6468
mov rbx, rax
mov qword [rsp + 0x30], rax
xor edx, edx
mov r8d, 0x189
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
mov rcx, rbx
call fcn.1800125e0
nop
mov rcx, qword [0x1801ef918]
mov qword [0x1801ef918], rax
test rcx, rcx
je 0x1800552da
mov edx, 0x189
call fcn.1800f6340
mov ecx, 0x4a
call fcn.1800f6468
mov qword [rsp + 0x30], rax
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rax], xmm0
movups xmmword [rax + 0x10], xmm0
movups xmmword [rax + 0x20], xmm0
movups xmmword [rax + 0x30], xmm0
mov qword [rax + 0x40], rcx
mov word [rax + 0x48], cx
mov rcx, rax
call fcn.180011ed0
nop
mov rcx, qword [0x1801ef8e8]
mov qword [0x1801ef8e8], rax
test rcx, rcx
je 0x18005532b
mov edx, 0x4a
call fcn.1800f6340
call qword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov edx, eax
and edx, 1
shl rdx, 5
lea rax, [0x1802633f0]
add rdx, rax
cmp qword [rdx + 0x18], 0x10
jb 0x18005534e
mov rdx, qword [rdx]
mov rax, qword [0x1801ef8e8]
mov rcx, qword [rax + 0x18]
call qword [sym.imp.USER32.dll_SetWindowTextA]
mov rax, qword [0x1801ef8e8]
mov rcx, qword [rax + 8]
cmp dword [rcx], 0
je 0x1800553fe
movabs rdi, 0x7fffffffffffffff
movabs r15, 0x7fffffff4d2fa1ff
mov r12d, 0xb2d05e00
nop dword [rax]
call qword [sym.imp.MSVCP140.dll__Query_perf_frequency]
mov rbx, rax
call qword [sym.imp.MSVCP140.dll__Query_perf_counter]
cmp rbx, 0x989680
jne 0x1800553ae
imul rax, rax, 0x64
jmp 0x1800553c9
cqo
idiv rbx
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
cqo
idiv rbx
add rax, rcx
cmp rax, r15
jge 0x1800553d9
lea rcx, [rax + r12]
mov qword [rsp + 0x30], rcx
jmp 0x1800553de
mov qword [rsp + 0x30], rdi
lea rcx, [rsp + 0x30]
call fcn.180058690
call qword [sym.imp.MSVCP140.dll__Thrd_yield]
mov rax, qword [0x1801ef8e8]
mov rcx, qword [rax + 8]
cmp dword [rcx], 0
jne 0x180055390
mov ecx, 0x450
call fcn.1800f6468
mov rbx, rax
mov qword [rsp + 0x58], rax
xor edx, edx
mov r8d, 0x450
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
xorps xmm0, xmm0
movups xmmword [rbx + 0xe0], xmm0
movups xmmword [rbx + 0xf0], xmm0
movups xmmword [rbx + 0x100], xmm0
movups xmmword [rbx + 0x110], xmm0
movups xmmword [rbx + 0x120], xmm0
lea rcx, [rbx + 0x130]
xor edx, edx
mov r8d, 0x320
call sub.VCRUNTIME140.dll_memset
mov rcx, rbx
call fcn.180006370
mov rcx, qword [0x1801ef8e0]
mov qword [0x1801ef8e0], rbx
test rcx, rcx
je 0x18005547f
mov edx, 0x450
call fcn.1800f6340
mov ecx, 0x40
call fcn.1800f6468
mov rbx, rax
mov qword [rsp + 0x58], rax
xorps xmm1, xmm1
movups xmmword [rax], xmm1
movups xmmword [rax + 0x10], xmm1
movups xmmword [rax + 0x20], xmm1
movups xmmword [rax + 0x30], xmm1
mov qword [rsp + 0x50], rax
mov dword [rax], r14d
mov qword [rax + 8], r14
mov qword [rax + 0x10], r14
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1800f6468
mov qword [rax], rax
mov qword [rax + 8], rax
mov qword [rbx + 8], rax
lea rcx, [rbx + 0x18]
mov qword [rcx], r14
mov qword [rcx + 8], r14
mov qword [rcx + 0x10], r14
mov qword [rbx + 0x30], 7
mov qword [rbx + 0x38], 8
mov dword [rbx], 0x3f800000
mov r8, qword [rbx + 8]
mov edx, reloc.WS2_32.dll_recv
call fcn.180010e70
nop
mov rdi, qword [0x1801ef858]
mov qword [0x1801ef858], rbx
test rdi, rdi
je 0x180055524
mov rcx, rdi
call fcn.18000ced0
mov edx, 0x40
mov rcx, rdi
call fcn.1800f6340
mov ecx, Ordinal_27
call fcn.1800f6468
mov qword [rsp + 0x50], rax
xorps xmm0, xmm0
xor ecx, ecx
movups xmmword [rax], xmm0
mov qword [rax + 0x10], rcx
mov rcx, rax
call fcn.180010fb0
nop
mov rdx, qword [0x1801ef910]
mov qword [0x1801ef910], rax
test rdx, rdx
je 0x180055560
call fcn.18000c720
mov ecx, 0xf57
call fcn.1800f6468
mov rbx, rax
mov qword [rsp + 0x50], rax
xor edx, edx
mov r8d, 0xf57
mov rcx, rax
call sub.VCRUNTIME140.dll_memset
xor edx, edx
mov r8d, 0xf57
mov rcx, rbx
call sub.VCRUNTIME140.dll_memset
mov rcx, rbx
call fcn.180057a20
nop
mov rdx, qword [0x1801ef8d0]
mov qword [0x1801ef8d0], rax
test rdx, rdx
je 0x1800555b3
call fcn.18000c650
mov ecx, Ordinal_217
call fcn.1800f6468
mov dword [rax], 0x1010000
mov word [rax + 4], 0x101
lea rcx, str.windbg.exe
mov qword [rax + 6], rcx
lea rcx, str.reshacker.exe
mov qword [rax + 0xe], rcx
lea rcx, str.ida64.exe
mov qword [rax + 0x16], rcx
lea rcx, str.idag.exe
mov qword [rax + 0x1e], rcx
lea rcx, str.idag64.exe
mov qword [rax + 0x26], rcx
lea rcx, str.idaw.exe
mov qword [rax + 0x2e], rcx
lea rcx, str.idaw64.exe
mov qword [rax + 0x36], rcx
lea rcx, str.idaq.exe
mov qword [rax + 0x3e], rcx
lea rcx, str.idaq64.exe
mov qword [rax + 0x46], rcx
lea rcx, str.idau.exe
mov qword [rax + 0x4e], rcx
lea rcx, str.idau64.exe
mov qword [rax + 0x56], rcx
lea rcx, str.scylla.exe
mov qword [rax + 0x5e], rcx
lea rcx, str.scylla_x64.exe
mov qword [rax + 0x66], rcx
lea rcx, str.scylla_x86.exe
mov qword [rax + 0x6e], rcx
lea rcx, str.protection_id.exe
mov qword [rax + 0x76], rcx
lea rcx, str.ollydbg.exe
mov qword [rax + 0x7e], rcx
lea rcx, str.ida.exe
mov qword [rax + 0x86], rcx
lea rcx, str.x64dbg.exe
mov qword [rax + 0x8e], rcx
lea rcx, str.x32dbg.exe
mov qword [rax + 0x96], rcx
xor ecx, ecx
mov qword [rax + 0x9e], rcx
lea rcx, [0x1801779d4]
mov qword [rax + 0xa6], rcx
lea rcx, str.x64dbg
mov qword [rax + 0xae], rcx
lea rcx, str.x32dbg
mov qword [rax + 0xb6], rcx
lea rcx, str.OLLYDBG
mov qword [rax + 0xbe], rcx
lea rcx, str.scylla
mov qword [rax + 0xc6], rcx
lea rcx, str.WinDbg
mov qword [rax + 0xce], rcx
mov rcx, qword [0x1801ed5e8]
mov qword [0x1801ed5e8], rax
test rcx, rcx
je 0x18005571d
mov edx, Ordinal_217
call fcn.1800f6340
mov ecx, 0x68
call fcn.1800f6468
mov rbx, rax
mov qword [rsp + 0x50], rax
xorps xmm0, xmm0
xor eax, eax
movups xmmword [rbx], xmm0
movups xmmword [rbx + 0x10], xmm0
movups xmmword [rbx + 0x20], xmm0
movups xmmword [rbx + 0x30], xmm0
movups xmmword [rbx + 0x40], xmm0
movups xmmword [rbx + 0x50], xmm0
mov qword [rbx + 0x60], rax
lea edx, [rax + 2]
mov rcx, rbx
call qword [sym.imp.MSVCP140.dll__Mtx_init_in_situ]
mov qword [rbx + 0x50], r14
mov qword [rbx + 0x58], r14
mov qword [rbx + 0x60], r14
mov rdx, qword [0x1801ef8d8]
mov qword [0x1801ef8d8], rbx
test rdx, rdx
je 0x18005577f
call fcn.18000c7e0
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1800f6468
mov qword [rsp + 0x50], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
lea rcx, vtable.std::_Ref_count_obj2_class_VX::MainScript_.0
mov qword [rax], rcx
lea rcx, [rax + 0x10]
lea rdx, vtable.VX::MainScript.0
mov qword [rcx], rdx
mov byte [rcx + 8], 0
mov qword [0x1801ef930], rcx
mov rbx, qword [0x1801ef938]
mov qword [0x1801ef938], rax
test rbx, rbx
je 0x180055801
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x180055801
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
mov eax, esi
lock xadd dword [rbx + 0xc], eax
cmp eax, 1
jne 0x180055801
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_htonl]
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call fcn.1800f6468
mov qword [rsp + 0x50], rax
xorps xmm0, xmm0
movups xmmword [rax], xmm0
mov dword [rax + 8], 1
mov dword [rax + 0xc], 1
lea rcx, vtable.std::_Ref_count_obj2_class_VX::LogScript_.0
mov qword [rax], rcx
lea rcx, [rax + 0x10]
lea rdx, vtable.VX::LogScript.0
mov qword [rcx], rdx
mov byte [rcx + 8], 0
mov qword [0x1801ef940], rcx
mov rbx, qword [0x1801ef948]
mov qword [0x1801ef948], rax
test rbx, rbx
je 0x180055881
mov eax, esi
lock xadd dword [rbx + 8], eax
cmp eax, 1
jne 0x180055881
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax]
lock xadd dword [rbx + 0xc], esi
cmp esi, 1
jne 0x180055881
mov rax, qword [rbx]
mov rcx, rbx
call qword [rax + reloc.WS2_32.dll_htonl]
call fcn.180054b20
test al, al
je 0x1800558c0
call fcn.18000aa80
lea rdx, str.Acces_denied_New_Update_is_available
mov rcx, rax
call fcn.180051370
xor r9d, r9d
lea r8, str.Virtual_X
lea rdx, str.A_new_update_is_available_go_in_discord
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3
call fcn.18000aa80
lea rdx, str.Acces_Authorized
mov rcx, rax
call fcn.180051370
lea rcx, [rbp - 0x60]
call fcn.180057650
mov rdx, rax
call fcn.180056680
lea rcx, [rbp - 0x60]
call fcn.180009fc0
lea rcx, [rbp - 0x70]
call fcn.1800576d0
mov rdx, rax
call fcn.180056890
lea rcx, [rbp - 0x70]
call fcn.180009fc0
call fcn.180017440
mov r8, rax
lea rcx, [rbp - 0x80]
call fcn.180057760
mov rdx, rax
mov rcx, r8
call fcn.180076d70
call fcn.180017440
mov r8, rax
lea rcx, [rsp + 0x70]
call fcn.1800577a0
mov rdx, rax
mov rcx, r8
call fcn.180076d70
call fcn.180017440
mov r8, rax
lea rcx, [rsp + 0x60]
call fcn.1800577e0
mov rdx, rax
mov rcx, r8
call fcn.180076d70
call fcn.180017440
mov r8, rax
lea rcx, [rbp + 0x90]
call fcn.180057820
mov rdx, rax
mov rcx, r8
call fcn.180076d70
lea rcx, [rsp + 0x30]
call fcn.180057860
mov rdx, rax
call fcn.1800578b0
lea rcx, [rsp + 0x30]
call fcn.180009fb0
call fcn.180017450
mov rcx, rax
call fcn.1800173d0
call fcn.180011b40
call fcn.18000aa80
lea rdx, str.Header_loaded_successfully
mov rcx, rax
call fcn.180051270
call fcn.180055d20
mov rcx, rax
call fcn.1800541a0
call fcn.18000aa80
lea rdx, str.VX_Version_:_FREE
mov rcx, rax
call fcn.180051370
lea rcx, [rbp + 0xb0]
call fcn.180055c00
lea rcx, [rbp + 0xb0]
call fcn.180055c30
nop
lea rdx, str.Initialize_Virtual_X
lea rcx, [rbp + 0xb0]
call fcn.180051860
mov rcx, rax
lea rdx, str.2.5X1
call fcn.180051860
call fcn.18000aa80
mov rbx, rax
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0xb0]
call fcn.180055c10
nop
mov rcx, rax
call fcn.18000b8c0
mov rdx, rax
mov rcx, rbx
call fcn.180051370
nop
lea rcx, [rbp - 0x50]
call fcn.18000b8f0
lea rcx, [rbp + 0x1a0]
call fcn.180055c00
lea rcx, [rbp + 0x1a0]
call fcn.180055c30
nop
lea rdx, str.Welcome
lea rcx, [rbp + 0x1a0]
call fcn.180051860
mov rbx, rax
call fcn.1800065d0
mov ecx, eax
call fcn.180006560
mov rdx, rax
mov rcx, rbx
call fcn.180051860
call fcn.18000aa80
mov rbx, rax
lea rdx, [rbp - 0x50]
lea rcx, [rbp + 0x1a0]
call fcn.180055c10
nop
mov rcx, rax
call fcn.18000b8c0
mov rdx, rax
mov rcx, rbx
call fcn.180051370
nop
lea rcx, [rbp - 0x50]
call fcn.18000b8f0
nop dword [rax]
lea rcx, reloc.WS2_32.dll_accept
call fcn.180011b30
test al, al
jne 0x180055ad0
call fcn.180011ba0
mov edx, 0x1f4
lea rcx, [rsp + 0x58]
call fcn.180053890
mov rcx, rax
call fcn.1800578f0
call fcn.180017450
mov rcx, rax
call fcn.180017400
xor edx, edx
call fcn.180056850
call fcn.180056770
call fcn.180056710
call fcn.180056620
xor edx, edx
call fcn.1800567d0
xor edx, edx
call fcn.1800567f0
xor edx, edx
call fcn.180056810
xor edx, edx
call fcn.180056920
mov edx, 0x1f4
lea rcx, [rsp + 0x40]
call fcn.180053890
mov rcx, rax
call fcn.1800578f0
xor edx, edx
call fcn.180056870
xor edx, edx
call fcn.180055ce0
xor edx, edx
call fcn.180056960
xor edx, edx
call fcn.180056940
xor edx, edx
call fcn.180056ad0
xor edx, edx
mov rcx, qword [0x1802635b0]
call qword [sym.imp.KERNEL32.dll_FreeLibraryAndExitThread]