Function at 0x180084920
Capabilities:
Encode data using xor
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xe0
mov rax, qword [0x1803435b8]
xor rax, rsp
mov qword [rbp + 0x27], rax
call fcn.180088e40
test al, al
je 0x180084c6b
mov rax, qword [0x180345e28]
mov rcx, qword [rax]
test rcx, rcx
je 0x180084979
cmp qword [rcx + 8], 0
jne 0x180084cad
mov rdi, qword [0x180345d90]
test rdi, rdi
jne 0x1800849bc
call fcn.180086920
mov rcx, qword [rax + 0x10]
mov rax, qword [0x180345d98]
mov rdi, qword [rcx + rax*8]
test rdi, rdi
jne 0x1800849b5
lea r8d, [rdi + 0x63]
lea rdx, str.D:ClientesSharkMenu1111111111coreclient_sharedRegistry.h
lea rcx, str.instance___nullptr
call sub.api_ms_win_crt_runtime_l1_1_0.dll__wassert
mov qword [0x180345d90], rdi
mov qword [0x180345dd8], rdi
mov rbx, qword [0x180345e00]
mov rsi, qword [0x180345e08]
xor r14d, r14d
cmp rbx, rsi
je 0x180084a67
nop dword [rax]
mov rax, qword [rdi]
mov qword [rsp + 0x20], r14
lea r9, [rsp + 0x20]
mov r8, rbx
lea rdx, [rsp + 0x28]
mov rcx, rdi
call qword [rax + 0x58]
mov rdi, rax
mov rcx, qword [rbx + 0x40]
test rcx, rcx
je 0x180084a0d
mov rdx, qword [rcx]
call qword [rdx + reloc.WS2_32.dll_recv]
mov rcx, qword [rdi]
mov qword [rbx + 0x40], rcx
test rcx, rcx
je 0x180084a20
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_htonl]
nop
mov rcx, qword [rsp + 0x28]
test rcx, rcx
je 0x180084a39
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
test al, al
je 0x180084a39
mov qword [rsp + 0x28], r14
mov rcx, qword [rsp + 0x20]
test rcx, rcx
je 0x180084a52
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
test al, al
je 0x180084a52
mov qword [rsp + 0x20], r14
add rbx, 0x48
cmp rbx, rsi
je 0x180084a67
mov rdi, qword [0x180345dd8]
jmp 0x1800849e0
cmp byte [0x180345618], 0
jne 0x180084c64
lea r13, [0x180345860]
movabs r15, 0x7fffffffffffffff
mov r12d, reloc.WLDAP32.dll_Ordinal_22
nop dword [rax + rax]
call fcn.180019830
test al, al
je 0x180084c57
lea rax, [rbp - 0x59]
mov qword [rsp + 0x28], rax
mov dword [rbp - 0x39], 0xcacdc4c0
mov dword [rbp - 0x35], 0xd7c2de
mov byte [rbp - 0x31], 1
mov rcx, r14
nop dword [rax + rax]
lea eax, [rcx - 0x54]
xor byte [rbp + rcx - 0x39], al
inc rcx
cmp rcx, 7
jb 0x180084ac0
mov byte [rbp - 0x31], 0
xorps xmm0, xmm0
movups xmmword [rbp - 0x59], xmm0
mov qword [rbp - 0x49], r14
mov qword [rbp - 0x41], r14
lea rax, [rbp - 0x39]
mov r8, 0xffffffffffffffff
nop
inc r8
cmp byte [rax + r8], 0
jne 0x180084af0
lea rdx, [rbp - 0x39]
lea rcx, [rbp - 0x59]
call fcn.18005bb80
nop
mov rdx, r13
cmp qword [0x180345878], 0x10
cmovae rdx, qword [0x180345860]
xorps xmm0, xmm0
movups xmmword [rbp - 0x29], xmm0
mov qword [rbp - 0x19], r14
mov qword [rbp - 0x11], r14
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rdx + r8], 0
jne 0x180084b31
lea rcx, [rbp - 0x29]
call fcn.18005bb80
nop
lea r8, [rbp - 0x59]
lea rdx, [rbp - 0x29]
lea rcx, [rbp + 7]
call fcn.180089e20
nop
lea rax, [rbp - 0x79]
xorps xmm0, xmm0
movups xmmword [rbp - 0x79], xmm0
mov qword [rbp - 0x69], r14
mov qword [rbp - 0x61], r14
mov rdi, qword [rbp + 0x17]
lea rsi, [rbp + 7]
cmp qword [rbp + 0x1f], 0x10
cmovae rsi, qword [rbp + 7]
cmp rdi, r15
ja 0x180084ca7
mov qword [rbp - 0x61], reloc.WS2_32.dll_ntohs
cmp rdi, 0x10
jae 0x180084ba0
mov qword [rbp - 0x69], rdi
movups xmm0, xmmword [rsi]
movups xmmword [rbp - 0x79], xmm0
jmp 0x180084be1
mov rbx, rdi
or rbx, 0xf
cmp rbx, r15
jbe 0x180084bb1
mov rbx, r15
jmp 0x180084bb9
cmp rbx, 0x16
cmovb rbx, r12
lea rdx, [rbx + 1]
lea rcx, [rbp - 0x79]
call fcn.18000aa80
mov qword [rbp - 0x79], rax
mov qword [rbp - 0x69], rdi
mov qword [rbp - 0x61], rbx
lea r8, [rdi + 1]
mov rdx, rsi
mov rcx, rax
call sub.VCRUNTIME140.dll_memcpy
lea rdx, [rbp - 0x79]
lea rcx, [0x180345240]
call fcn.180006190
cmp byte [0x180345478], 0
je 0x180084c9f
cmp byte [0x1803451d4], 0
je 0x180084c20
lea rdx, [0x180095ff0]
lea rcx, [0x180345c20]
call fcn.180019c70
mov byte [0x180345618], al
mov rdx, qword [rbp + 0x1f]
cmp rdx, 0x10
jb 0x180084c57
inc rdx
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180084c52
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x180084c98
call fcn.1800ef630
cmp byte [0x180345618], 0
je 0x180084a90
mov byte [reloc.WS2_32.dll_accept], 0
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.1800ef750
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
xor ecx, ecx
call sub.api_ms_win_crt_runtime_l1_1_0.dll_exit
int3
call fcn.1800025d0
nop
movdqa xmm0, xmmword [0x180125280]
movdqu xmmword [rbp - 0x29], xmm0
movdqa xmm1, xmmword [0x180125130]
movdqu xmmword [rbp - 0x19], xmm1
mov dword [rbp - 9], 0xbdabbeec
mov dword [rbp - 5], 0xf2a0b4a6
mov word [rbp - 1], 0x100
lea rcx, [rbp - 0x29]
call fcn.1800907a0
mov rdx, rax
mov r9d, reloc.WS2_32.dll_recv
lea r8, str.Erro
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
xor ecx, ecx
call sub.api_ms_win_crt_runtime_l1_1_0.dll_exit
int3