Function at 0x1400587b0
Capabilities:
Encode data using xor

Disassembly:
push rbx
sub rsp, 0x50
call fcn.140046ee0
test al, al
jne 0x140058909
mov byte [0x1401b54d6], al
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x167c
mov eax, dword [rdx + rcx]
mov ebx, 0x15cc
add rbx, rcx
test al, 1
jne 0x14005880c
or eax, 1
mov dword [rdx + rcx], eax
mov word [rbx + 5], 0x19b
mov dword [rbx], 0xba0df38a
mov byte [rbx + 4], Ordinal_45
lea rcx, [0x1400f0dc0]
call fcn.1400e75cc
nop
cmp byte [rbx + 6], 0
je 0x1400588c1
xor r8d, r8d
cmp dword [reloc.WS2_32.dll_accept], 5
jl 0x140058890
movdqa xmm2, xmmword [0x140111430]
movdqa xmm3, xmmword [reloc.WS2_32.dll_getsockopt]
movdqa xmm4, xmmword [0x140112410]
movdqa xmm5, xmmword [0x140111590]
nop dword [rax]
nop word [rax + rax]
movq xmm0, r8
punpcklqdq xmm0, xmm0
paddq xmm0, xmm2
andps xmm0, xmm3
psllq xmm0, 3
vpsrlvq xmm1, xmm4, xmm0
pshufb xmm1, xmm5
movzx eax, word [rbx + r8]
movd xmm0, eax
xorps xmm1, xmm0
movd eax, xmm1
mov word [rbx + r8], ax
add r8, 2
cmp r8, 6
jb 0x140058850
jmp 0x1400588bd
movabs r9, 0xd1f79b59d57f81cf
nop word [rax + rax]
movzx ecx, r8b
and cl, 7
shl cl, 3
mov rdx, r9
shr rdx, cl
xor byte [rbx + r8], dl
inc r8
cmp r8, 6
jb 0x1400588a0
mov byte [rbx + 6], 0
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rbx + r8], 0
jne 0x1400588d0
mov rdx, rbx
lea rcx, [0x1401b3b90]
call fcn.140071f10
cmp byte [reloc.WS2_32.dll_accept], 0
jne 0x140058ab1
mov edx, 0x1f4
mov ecx, edx
add rsp, 0x50
pop rbx
jmp qword [sym.imp.KERNEL32.dll_Beep]
cmp byte [0x1401b537d], 0
sete al
mov byte [0x1401b537d], al
test al, al
je 0x1400589c2
mov byte [0x1401b54d6], 1
lea rdx, [0x1401b5bc0]
lea rcx, [rsp + 0x20]
call fcn.14006c690
mov rdx, rax
call fcn.1400474c0
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0x1538
mov eax, dword [rdx + rcx]
mov ebx, 0xb18
add rbx, rcx
test al, 1
jne 0x14005898b
or eax, 1
mov dword [rdx + rcx], eax
mov word [rbx + 9], 0x1ed
mov dword [rbx], 0x12258e34
mov dword [rbx + 4], 0x5cdbf20d
mov byte [rbx + 8], reloc.WS2_32.dll_recvfrom
lea rcx, [0x1400f0d90]
call fcn.1400e75cc
nop
cmp byte [rbx + 0xa], 0
je 0x1400589ac
mov edx, 0xa
movabs r8, 0x39af937b7b51ed75
mov rcx, rbx
call fcn.140046a30
mov byte [rbx + 0xa], 0
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rbx + r8], 0
jne 0x1400589b3
jmp 0x140058a9d
mov byte [0x1401b54d6], 0
mov dword [rsp + 0x20], 1
xor r8d, r8d
mov qword [rsp + 0x28], 0x7b
mov dword [rsp + 0x30], r8d
mov qword [rsp + 0x38], r8
mov r8d, Ordinal_45
lea rdx, [rsp + 0x20]
mov ecx, 1
call qword [sym.imp.USER32.dll_SendInput]
mov dword [rsp + 0x2c], 2
mov r8d, Ordinal_45
lea rdx, [rsp + 0x20]
mov ecx, 1
call qword [sym.imp.USER32.dll_SendInput]
mov rax, qword gs:[0x58]
mov rcx, qword [rax]
mov edx, 0xa78
mov eax, dword [rdx + rcx]
mov ebx, 0x1268
add rbx, rcx
test al, 1
jne 0x140058a6b
or eax, 1
mov dword [rdx + rcx], eax
mov word [rbx + 0xb], 0x1c5
mov dword [rbx], 0xa632c6b1
mov dword [rbx + 4], 0x7a9d50b5
mov word [rbx + 8], 0xc681
mov byte [rbx + 0xa], gethostname
lea rcx, [0x1400f0d70]
call fcn.1400e75cc
nop
cmp byte [rbx + 0xc], 0
je 0x140058a8c
mov edx, ntohl
movabs r8, 0x1beb39c1c553a3f5
mov rcx, rbx
call fcn.140046a30
mov byte [rbx + 0xc], 0
mov r8, 0xffffffffffffffff
inc r8
cmp byte [rbx + r8], 0
jne 0x140058a93
mov rdx, rbx
lea rcx, [0x1401b3b90]
add rsp, 0x50
pop rbx
jmp fcn.140071f10
add rsp, 0x50
pop rbx
ret