Function at 0x10019080
Capabilities:
Create thread
Terminate process
Terminate thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x220
mov eax, dword [ebp + 0xc]
push ebx
xor ebx, ebx
push esi
sub eax, ebx
push edi
je 0x100192e3
dec eax
jne 0x10019399
mov eax, dword [ebp + 8]
push eax
mov dword [0x10033e6c], eax
call dword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
cmp dword [0x10033ecc], ebx
jne 0x100190de
call dword [sym.imp.USER32.dll_GetCursor]
push ebx
push ebx
push ebx
call dword [sym.imp.GDI32.dll_GetPixel]
push ebx
call dword [sym.imp.GDI32.dll_GetBkColor]
push ebx
call dword [sym.imp.GDI32.dll_GetBkMode]
mov dword [0x10033ecc], 1
mov ecx, 0x46
xor eax, eax
lea edi, [ebp - 0x21c]
mov dword [ebp - 0x220], ebx
rep stosd dword es:[edi], eax
call dword [sym.imp.KERNEL32.dll_GetACP]
mov esi, eax
lea eax, [ebp - 0x220]
push eax
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_GetCPInfoExA]
test eax, eax
je 0x10019116
cmp esi, dword [ebp - 0x20c]
je 0x1001911d
push ebx
call dword [sym.imp.KERNEL32.dll_ExitThread]
lea ecx, [ebp - 0x104]
push 0x104
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea edx, [ebp - 0x104]
push edx
call fcn.10028d7c
add esp, 4
lea eax, [ebp - 0x104]
push 0x5c
push eax
call fcn.100194f0
lea edi, [eax + 1]
mov esi, 0x10003ea0
mov dword [ebp + 8], edi
push edi
push esi
call fcn.10019410
test eax, eax
jne 0x100191cd
add esi, 0x38
cmp esi, 0x10004990
jl 0x10019158
mov edi, dword [sym.imp.KERNEL32.dll_OpenEventA]
push 0x10004b4c
push ebx
push 0x1f0003
call edi
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
cmp eax, ebx
mov dword [0x10033eb0], eax
jne 0x100191d4
push 0x10004a8c
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventA]
lea ecx, [ebp + 0xc]
mov dword [0x10033eb0], eax
push ecx
push ebx
push ebx
push 0x10018f20
push ebx
push ebx
call esi
lea edx, [ebp + 0xc]
mov dword [0x10033e8c], eax
push edx
push ebx
push ebx
push 0x10019040
push ebx
push ebx
call esi
mov dword [0x10033e90], eax
jmp 0x100191e1
push ebx
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [0x10033eb0], ebx
cmp dword [0x10033ec8], ebx
jne 0x100191f3
mov dword [0x10033ec8], 1
mov eax, dword [ebp + 8]
push 0x10004ab4
push eax
call fcn.10019410
test eax, eax
je 0x100192bb
lea ecx, [ebp + 0xc]
push ecx
push ebx
push ebx
push 0x100189f0
push ebx
push ebx
call esi
push 0x10004b24
push ebx
push 0x1f0003
mov dword [0x10033e7c], eax
call edi
cmp eax, ebx
mov dword [0x10033ea8], eax
jne 0x100192ce
push 0x10004b24
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov dword [0x10033ea8], eax
mov eax, dword [0x10033e80]
cmp eax, ebx
jne 0x10019267
lea edx, [ebp + 0xc]
push edx
push ebx
push ebx
push 0x10018d90
push ebx
push ebx
call esi
mov dword [0x10033e80], eax
cmp dword [0x10033e84], ebx
jne 0x10019283
lea eax, [ebp + 0xc]
push eax
push ebx
push ebx
push 0x10018df0
push ebx
push ebx
call esi
mov dword [0x10033e84], eax
cmp dword [0x10033e78], ebx
jne 0x1001929f
lea ecx, [ebp + 0xc]
push ecx
push ebx
push ebx
push 0x10018e50
push ebx
push ebx
call esi
mov dword [0x10033e78], eax
cmp dword [0x10033e74], ebx
jne 0x100192bb
lea edx, [ebp + 0xc]
push edx
push ebx
push ebx
push 0x100189e0
push ebx
push ebx
call esi
mov dword [0x10033e74], eax
call fcn.100183b0
pop edi
pop esi
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret 0xc
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
pop esi
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret 0xc
lea eax, sym.imp.KERNEL32.dll_ResumeThread
lea eax, sym.imp.KERNEL32.dll_SetComputerNameW
lea eax, sym.imp.KERNEL32.dll_SetConsoleTitleW
lea eax, sym.imp.KERNEL32.dll_SetEndOfFile
mov eax, dword [0x10033e74]
mov esi, dword [sym.imp.KERNEL32.dll_TerminateThread]
cmp eax, ebx
je 0x10019314
push ebx
push eax
call esi
mov dword [0x10033e74], ebx
mov eax, dword [0x10033e78]
cmp eax, ebx
je 0x10019327
push ebx
push eax
call esi
mov dword [0x10033e78], ebx
mov eax, dword [0x10033e88]
cmp eax, ebx
je 0x1001933a
push ebx
push eax
call esi
mov dword [0x10033e88], ebx
mov eax, dword [0x10033e80]
cmp eax, ebx
je 0x1001934d
push ebx
push eax
call esi
mov dword [0x10033e80], ebx
mov eax, dword [0x10033e8c]
cmp eax, ebx
je 0x10019360
push ebx
push eax
call esi
mov dword [0x10033e8c], ebx
mov eax, dword [0x10033e7c]
cmp eax, ebx
je 0x10019373
push ebx
push eax
call esi
mov dword [0x10033e7c], ebx
mov eax, dword [0x10033e84]
cmp eax, ebx
je 0x10019386
push ebx
push eax
call esi
mov dword [0x10033e84], ebx
mov eax, dword [0x10033e90]
cmp eax, ebx
je 0x10019399
push ebx
push eax
call esi
mov dword [0x10033e90], ebx
pop edi
pop esi
mov eax, 1
pop ebx
mov esp, ebp
pop ebp
ret 0xc