Function at 0xa5bb80
Capabilities:
Check http status code
Check mutex and terminate process on windows
Check mutex on windows
Read file via mapping
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x164
push str.injected_
call fcn.00a632d0
add esp, 4
mov dword [ebp - 0x120], 0x114
lea eax, [ebp - 0x120]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
mov ecx, 5
cmp ecx, dword [ebp - 0x11c]
sbb edx, edx
add edx, 1
mov byte [0xa68a36], dl
call fcn.00a5c080
mov dword [0xa68cb8], 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [0xa68ccc], eax
mov eax, dword [0xa68ccc]
push eax
call fcn.00a51bf0
add esp, 4
test eax, eax
jne 0xa5bc22
push 0x7b1c204b
push 0x1a
push 0xa649a4
call fcn.00a517f0
add esp, 0xc
push eax
push 1
push 0x170
push str.injlib_remote_thread.cpp
push str.RemoteThread
call fcn.00a51920
add esp, 0x14
jmp 0xa5c002
push 0xa690d8
push 0
push 0x100000
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [0xa68cbc], eax
cmp dword [0xa68cbc], 0
jne 0xa5bc75
push 0x7cea3366
push 0x12
push 0xa649dc
call fcn.00a517f0
add esp, 0xc
push eax
push 2
push 0x179
push str.injlib_remote_thread.cpp
push str.RemoteThread
call fcn.00a51920
add esp, 0x14
jmp 0xa5c002
push 0xa68cd8
push 0
push 4
call dword [sym.imp.KERNEL32.dll_OpenFileMappingW]
mov dword [0xa68cc4], eax
cmp dword [0xa68cc4], 0
jne 0xa5bcc5
push 0x8020c824
push 0x14
push 0xa649f0
call fcn.00a517f0
add esp, 0xc
push eax
push 2
push 0x182
push str.injlib_remote_thread.cpp
push str.RemoteThread
call fcn.00a51920
add esp, 0x14
jmp 0xa5c002
push 0
push 0
push 0
push 4
mov ecx, dword [0xa68cc4]
push ecx
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [0xa68cc8], eax
cmp dword [0xa68cc8], 0
jne 0xa5bd1b
push 0xde81f2b5
push 0x15
push 0xa64a08
call fcn.00a517f0
add esp, 0xc
push eax
push 2
push 0x18b
push str.injlib_remote_thread.cpp
push str.RemoteThread
call fcn.00a51920
add esp, 0x14
jmp 0xa5c002
push 0xa692d8
push 0
push 6
call dword [sym.imp.KERNEL32.dll_OpenFileMappingW]
mov dword [0xa68cd0], eax
cmp dword [0xa68cd0], 0
jne 0xa5bd6b
push 0xc34af627
push 0x13
push str.Ikm_a
call fcn.00a517f0
add esp, 0xc
push eax
push 2
push 0x194
push str.injlib_remote_thread.cpp
push str.RemoteThread
call fcn.00a51920
add esp, 0x14
jmp 0xa5c002
push 0
push 0
push 0
push 6
mov edx, dword [0xa68cd0]
push edx
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [0xa69568], eax
cmp dword [0xa69568], 0
jne 0xa5bdc1
push 0xae381e4f
push 0x14
push 0xa64a34
call fcn.00a517f0
add esp, 0xc
push eax
push 2
push 0x19d
push str.injlib_remote_thread.cpp
push str.RemoteThread
call fcn.00a51920
add esp, 0x14
jmp 0xa5c002
call fcn.00a5dfb0
push 0
push 0
push 0
push 0xffffffffffffffff
lea eax, [ebp - 0x13c]
push eax
call dword [sym.imp.USER32.dll_PeekMessageW]
lea ecx, [ebp - 4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
call dword [sym.imp.USER32.dll_GetThreadDesktop]
push eax
call fcn.00a5ae30
add esp, 8
movzx edx, al
test edx, edx
je 0xa5be1b
mov eax, dword [ebp - 4]
push eax
push str.IsVNC___x
call fcn.00a632d0
add esp, 8
mov ecx, dword [ebp - 4]
push ecx
call fcn.00a5b280
jmp 0xa5bffa
push 0xa68ed8
push 0
push 0x1f0003
call dword [sym.imp.KERNEL32.dll_OpenEventW]
mov dword [0xa68cc0], eax
cmp dword [0xa68cc0], 0
jne 0xa5be6e
push 0x5b7f9aa6
push 0xf
push 0xa64a60
call fcn.00a517f0
add esp, 0xc
push eax
push 2
push 0x1b2
push str.injlib_remote_thread.cpp
push str.RemoteThread
call fcn.00a51920
add esp, 0x14
jmp 0xa5c002
call fcn.00a5c3b0
mov edx, dword [0xa69568]
push edx
push 0
push 0x100000
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0
jne 0xa5bec9
push 0xb0cdb1bf
push 0x1f
push 0xa64a70
call fcn.00a517f0
add esp, 0xc
push eax
push 2
push 0x1bd
push str.injlib_remote_thread.cpp
push str.RemoteThread
call fcn.00a51920
add esp, 0x14
jmp 0xa5c002
push 0xffffffffffffffff
mov eax, dword [ebp - 0x140]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov ecx, dword [0xa69568]
add ecx, 0x78
mov dword [ebp - 0x144], ecx
mov dword [ebp - 0x148], 0
jmp 0xa5bf02
mov edx, dword [ebp - 0x148]
add edx, 1
mov dword [ebp - 0x148], edx
cmp dword [ebp - 0x148], 0x190
jae 0xa5bf59
mov eax, dword [ebp - 0x148]
imul eax, eax, 0x18
mov ecx, dword [ebp - 0x144]
cmp dword [ecx + eax + 8], 0
jne 0xa5bf57
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edx, dword [ebp - 0x148]
imul edx, edx, 0x18
mov ecx, dword [ebp - 0x144]
mov dword [ecx + edx], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov edx, dword [ebp - 0x148]
imul edx, edx, 0x18
mov ecx, dword [ebp - 0x144]
mov dword [ecx + edx + 8], eax
jmp 0xa5bf59
jmp 0xa5bef3
mov edx, dword [ebp - 0x140]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 1
mov eax, dword [0xa68cc0]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0xa5bfde
lea ecx, [ebp - 0x164]
push ecx
call fcn.00a62e20
add esp, 4
test eax, eax
je 0xa5bfdc
push 0
lea edx, [ebp - 0x164]
push edx
call fcn.00a63020
add esp, 8
cmp dword [ebp - 0x160], 1
jne 0xa5bfdc
mov byte [0xa695d0], 1
mov eax, dword [ebp - 0x15c]
push eax
push str.enter__X
call fcn.00a632d0
add esp, 8
mov ecx, dword [ebp - 0x15c]
push ecx
call fcn.00a5b280
push str.leave
call fcn.00a632d0
add esp, 4
jmp 0xa5bf66
mov edx, dword [ebp - 0x140]
push edx
call fcn.00a51ba0
add esp, 4
call fcn.00a5c440
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
jne 0xa5bb96
call fcn.00a5dfe0
cmp dword [0xa68cb8], 0
je 0xa5c018
push 1
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov ecx, dword [0xa69568]
push ecx
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov edx, dword [0xa68cd0]
push edx
call fcn.00a51ba0
add esp, 4
mov eax, dword [0xa68cc0]
push eax
call fcn.00a51ba0
add esp, 4
mov ecx, dword [0xa68cbc]
push ecx
call fcn.00a51ba0
add esp, 4
mov edx, dword [0xa68cc8]
push edx
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov eax, dword [0xa68cc4]
push eax
call fcn.00a51ba0
add esp, 4
mov esp, ebp
pop ebp
ret 4