Function at 0x1400109b0
Capabilities:
Encode data using xor
Execute command

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x50
xor ebx, ebx
mov dword [rbp - 0x30], 0x379e3790
mov word [rbp - 0x10], bx
mov ecx, ebx
mov dword [rbp - 0x2c], 0x37e6379a
mov edi, 0x37d9
mov dword [rbp - 0x28], 0x378f37fd
mov dword [rbp - 0x24], 0x378937aa
mov dword [rbp - 0x20], 0x37893782
mov dword [rbp - 0x1c], 0x379737c3
mov dword [rbp - 0x18], 0x37873791
mov dword [rbp - 0x14], 0x379c3795
mov byte [rbp - 0xe], 1
nop dword [rax + rax]
lea eax, [rdi + rcx]
xor word [rbp + rcx*2 - 0x30], ax
inc rcx
cmp rcx, 0x10
jb 0x140010a20
lea rdx, [rbp - 0x30]
mov byte [rbp - 0xe], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x140010a57
lea rcx, str.start_https:__www.youtube.com_watch_vKdadkQRazso
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.140002c30
mov dword [rbp - 0x30], 0x37bf3794
mov rcx, rbx
mov dword [rbp - 0x2c], 0x37b337b6
mov dword [rbp - 0x28], 0x37a737af
mov dword [rbp - 0x24], 0x37b637ff
mov dword [rbp - 0x20], 0x37873788
mov dword [rbp - 0x1c], 0x37813794
mov dword [rbp - 0x18], 0x3797
mov byte [rbp - 0x14], 1
nop
lea eax, [rdi + rcx]
xor word [rbp + rcx*2 - 0x30], ax
inc rcx
cmp rcx, 0xd
jb 0x140010a90
lea rdx, [rbp - 0x30]
mov byte [rbp - 0x14], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x140010ac7
lea rcx, str.start_https:__www.youtube.com_watch_vKdadkQRazso
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.140002c30
mov dword [rbp - 0x30], 0x37a83789
mov rcx, rbx
mov dword [rbp - 0x2c], 0x37bf37b4
mov dword [rbp - 0x28], 0x37ad37b8
mov dword [rbp - 0x24], 0x37c037ac
mov dword [rbp - 0x20], 0x378b37ad
mov dword [rbp - 0x1c], 0x37903790
mov word [rbp - 0x18], bx
mov byte [rbp - 0x16], 1
nop dword [rax]
lea eax, [rdi + rcx]
xor word [rbp + rcx*2 - 0x30], ax
inc rcx
cmp rcx, 0xc
jb 0x140010b00
lea rdx, [rbp - 0x30]
mov byte [rbp - 0x16], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x140010b37
lea rcx, str.start_https:__www.youtube.com_watch_vKdadkQRazso
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.140002c30
mov dword [rbp - 0x30], 0x37a93792
mov rcx, rbx
mov dword [rbp - 0x2c], 0x37a9379f
mov dword [rbp - 0x28], 0x37ae37b0
mov dword [rbp - 0x24], 0x379237ba
mov word [rbp - 0x20], bx
mov byte [rbp - 0x1e], 1
nop
lea eax, [rdi + rcx]
xor word [rbp + rcx*2 - 0x30], ax
inc rcx
cmp rcx, 8
jb 0x140010b60
lea rdx, [rbp - 0x30]
mov byte [rbp - 0x1e], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x140010b97
call fcn.140002c30
lea rcx, str.start_https:__www.youtube.com_watch_vKdadkQRazso
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
mov dword [rbp - 0x30], 0x37b2379a
mov rcx, rbx
mov dword [rbp - 0x2c], 0x37bd37be
mov dword [rbp - 0x28], 0x37fe37a9
mov dword [rbp - 0x24], 0x378e379a
mov dword [rbp - 0x20], 0x378b3786
mov dword [rbp - 0x1c], 0x3781378d
mov dword [rbp - 0x18], 0x37d137c5
mov dword [rbp - 0x14], 0x37da37c9
mov word [rbp - 0x10], bx
mov byte [rbp - 0xe], 1
nop word [rax + rax]
lea eax, [rdi + rcx]
xor word [rbp + rcx*2 - 0x30], ax
inc rcx
cmp rcx, 0x10
jb 0x140010be0
lea rdx, [rbp - 0x30]
mov byte [rbp - 0xe], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x140010c17
lea rcx, str.start_https:__www.youtube.com_watch_vKdadkQRazso
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.140002c30
mov dword [rbp - 0x30], 0x37b2379a
mov rcx, rbx
mov dword [rbp - 0x2c], 0x37bd37be
mov dword [rbp - 0x28], 0x37fe37a9
mov dword [rbp - 0x24], 0x378e379a
mov dword [rbp - 0x20], 0x378b3786
mov dword [rbp - 0x1c], 0x3781378d
mov dword [rbp - 0x18], 0x37d137c5
mov dword [rbp - 0x14], 0x37db37c9
mov word [rbp - 0x10], bx
mov byte [rbp - 0xe], 1
nop word [rax + rax]
lea eax, [rdi + rcx]
xor word [rbp + rcx*2 - 0x30], ax
inc rcx
cmp rcx, 0x10
jb 0x140010c60
lea rdx, [rbp - 0x30]
mov byte [rbp - 0xe], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x140010c97
lea rcx, str.start_https:__www.youtube.com_watch_vKdadkQRazso
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.140002c30
mov dword [rbp - 0x30], 0x37b2379a
mov rcx, rbx
mov dword [rbp - 0x2c], 0x37bd37be
mov dword [rbp - 0x28], 0x37fe37a9
mov dword [rbp - 0x24], 0x378e379a
mov dword [rbp - 0x20], 0x378b3786
mov dword [rbp - 0x1c], 0x3781378d
mov dword [rbp - 0x18], 0x37d137c5
mov dword [rbp - 0x14], 0x37dc37c9
mov word [rbp - 0x10], bx
mov byte [rbp - 0xe], 1
nop word [rax + rax]
lea eax, [rdi + rcx]
xor word [rbp + rcx*2 - 0x30], ax
inc rcx
cmp rcx, 0x10
jb 0x140010ce0
lea rdx, [rbp - 0x30]
mov byte [rbp - 0xe], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x140010d17
lea rcx, str.start_https:__www.youtube.com_watch_vKdadkQRazso
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.140002c30
mov dword [rbp - 0x30], 0x37b2379a
mov rcx, rbx
mov dword [rbp - 0x2c], 0x37bd37be
mov dword [rbp - 0x28], 0x37fe37a9
mov dword [rbp - 0x24], 0x378e379a
mov dword [rbp - 0x20], 0x378b3786
mov dword [rbp - 0x1c], 0x3781378d
mov dword [rbp - 0x18], 0x37d137c5
mov dword [rbp - 0x14], 0x37dd37c9
mov word [rbp - 0x10], bx
mov byte [rbp - 0xe], 1
nop word [rax + rax]
lea eax, [rdi + rcx]
xor word [rbp + rcx*2 - 0x30], ax
inc rcx
cmp rcx, 0x10
jb 0x140010d60
lea rdx, [rbp - 0x30]
mov byte [rbp - 0xe], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x140010d97
lea rcx, str.start_https:__www.youtube.com_watch_vKdadkQRazso
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.140002c30
mov dword [rbp - 0x30], 0x37b2379a
mov rcx, rbx
mov dword [rbp - 0x2c], 0x37bd37be
mov dword [rbp - 0x28], 0x37fe37a9
mov dword [rbp - 0x24], 0x378e379a
mov dword [rbp - 0x20], 0x378b3786
mov dword [rbp - 0x1c], 0x3781378d
mov dword [rbp - 0x18], 0x37d137c5
mov dword [rbp - 0x14], 0x37de37c9
mov word [rbp - 0x10], bx
mov byte [rbp - 0xe], 1
nop word [rax + rax]
lea eax, [rdi + rcx]
xor word [rbp + rcx*2 - 0x30], ax
inc rcx
cmp rcx, 0x10
jb 0x140010de0
lea rdx, [rbp - 0x30]
mov byte [rbp - 0xe], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x140010e17
lea rcx, str.start_https:__www.youtube.com_watch_vKdadkQRazso
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.140002c30
mov dword [rbp - 0x30], 0x37b2379a
mov rcx, rbx
mov dword [rbp - 0x2c], 0x37bd37be
mov dword [rbp - 0x28], 0x37fe37a9
mov dword [rbp - 0x24], 0x378e379a
mov dword [rbp - 0x20], 0x378b3786
mov dword [rbp - 0x1c], 0x3781378d
mov dword [rbp - 0x18], 0x37d137c5
mov dword [rbp - 0x14], 0x37df37c9
mov word [rbp - 0x10], bx
mov byte [rbp - 0xe], 1
nop word [rax + rax]
lea eax, [rdi + rcx]
xor word [rbp + rcx*2 - 0x30], ax
inc rcx
cmp rcx, 0x10
jb 0x140010e60
lea rdx, [rbp - 0x30]
mov byte [rbp - 0xe], bl
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x140010e97
lea rcx, str.start_https:__www.youtube.com_watch_vKdadkQRazso
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.140002c30
mov dword [rbp - 0x30], 0x37b2379a
mov dword [rbp - 0x2c], 0x37bd37be
mov dword [rbp - 0x28], 0x37fe37a9
mov dword [rbp - 0x24], 0x378e379a
mov dword [rbp - 0x20], 0x378b3786
mov dword [rbp - 0x1c], 0x3781378d
mov dword [rbp - 0x18], 0x37d137c5
mov dword [rbp - 0x14], 0x37d037c9
mov word [rbp - 0x10], bx
mov byte [rbp - 0xe], 1
nop word [rax + rax]
lea eax, [rdi + rbx]
xor word [rbp + rbx*2 - 0x30], ax
inc rbx
cmp rbx, 0x10
jb 0x140010ee0
lea rdx, [rbp - 0x30]
mov byte [rbp - 0xe], 0
xor ecx, ecx
call qword [sym.imp.USER32.dll_FindWindowW]
test rax, rax
je 0x140010f18
lea rcx, str.start_https:__www.youtube.com_watch_vKdadkQRazso
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
call fcn.140002c30
lea r11, [rsp + 0x50]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret