Function at 0x4080e0
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
push ebx
push esi
push edi
push 0
push str.Illkjmuueghu__d
call fcn.00408080
add esp, 8
xor si, 0x2ed
mul si
shl esi, 0x60
sub dx, cx
inc ecx
imul eax
dec cx
add cx, 0x341
add di, 0x329
shr edi, 0xda
rol si, 0xe6
inc di
inc bx
xor cx, 0x3d7
rcl ax, 0x2b
or edx, eax
mul ebx
dec edx
shr di, 0x9e
shl bx, 0x55
rol cx, 0x10
rcr eax, 7
jb 0x408156
test ebx, 0x15
jb 0x408183
add ax, 0x3bf
shl cx, 0xde
mul edi
movzx ebx, dx
jmp 0x408162
ror ebx, 0xdf
rol ebx, 0xc0
and edi, 0x1ca
add esi, eax
jne 0x408183
cmp edx, 0x36
jae 0x4081b3
shl cx, 0xb1
xor edx, 0x18d
add edx, 0x16a
ror esi, 0xb7
imul ax
jmp 0x40818d
imul di
rol si, 0xc8
imul cx
mul cx
rcr bx, 0x61
rcl esi, 0xcc
mul edi
rcr bx, 0x40
rcl bx, 0x61
sub ax, 0x3c1
jne 0x4081b3
movzx ebx, bx
imul ax
shr bx, 0xf8
jmp 0x4081c5
xor edx, ebx
inc edi
inc ax
or si, 0x1cc
movsx esi, bx
imul cx
imul eax
sub ecx, 0x373
rcr edx, 0x85
ror ecx, 0xa5
mov si, 0xb9
movzx esi, si
dec bx
mul si
shr bx, 0xb4
dec cx
je 0x4081ff
cmp ecx, 0x17
jb 0x408244
rcr si, 0xcf
dec di
and si, ax
shl esi, 0xf9
shr si, 0x31
shr edi, 0x6b
jmp 0x40820a
dec esi
inc cx
inc eax
rol bx, 0xfe
rol edi, 0xc4
xor dx, cx
sub ebx, 0x1a1
rcl eax, 0xe0
and bx, 0xf3
shr edx, 0x25
jne 0x408244
shl esi, 0x84
sub esi, esi
rcl dx, 0x75
imul ax
dec edi
shr cx, 0xc6
xor edi, 0x17a
add dx, 0x189
rol edx, 0x5e
rcl eax, 0xf1
jmp 0x408251
rcr di, 0x4c
shl ebx, 0x96
imul ebx
shr cx, 0x62
dec ax
ror ecx, 0x44
mul dx
sub bx, 0x247
shr edx, 0x49
jne 0x40827e
imul edx
and eax, 0x38
add cx, 0x2c0
mul ebx
shl edx, 0xd7
sub dx, di
mov cx, cx
inc esi
rcr ebx, 0x41
jmp 0x408294
mov di, di
rol di, 0x22
rcl edi, 0x81
mov di, 0x2fe
imul di
and cx, 0x21d
or edx, 0x3dc
ror bx, 0xff
dec bx
ror dx, 0xaa
imul edx
mov ebx, 0x209
rcr di, 0x15
sub cx, 0x349
dec ebx
jae 0x4082d7
test edx, 0x47
jne 0x408328
shl eax, 0xa4
rol ebx, 0x67
rol cx, 0x9e
add si, si
movsx ecx, si
mov cx, 0x25b
and ecx, ecx
jmp 0x4082ec
inc ax
mul ecx
rcl si, 0xc4
rcl ax, 0x81
rcl ecx, 0x2a
ror edi, 0xd9
shr edi, 0x6e
inc ecx
rcr ax, 0x10
add dx, 0x38c
dec bx
rcr edx, 0x7d
inc ax
inc cx
shr di, 0x39
mul ecx
rcl cx, 9
jne 0x408328
mul ecx
rcl eax, 0xf9
rcl dx, 0x2c
mov dx, 0x3e0
shr cx, 0x6b
sub di, 0x13e
ror edi, 0x93
mul edx
jmp 0x408344
imul dx
ror cx, 0x7f
imul esi
rcr ebx, 0x15
shl edx, 0xb2
xor esi, 0x6d
mul ax
inc cx
xor di, bx
mul esi
ror ecx, 0x1f
dec ecx
jb 0x40835c
test ecx, 0x42
jb 0x40838c
and bx, 0x173
imul si
jmp 0x408364
imul si
imul ax
mul ecx
shr ecx, 0xec
jae 0x40838c
test eax, 0x22
jb 0x4083b1
rcr eax, 0x58
dec eax
xor ax, dx
dec edi
mov si, 0x245
rcl cx, 0xa4
mov ax, 0x2d5
inc cx
and eax, eax
imul ebx
jmp 0x40838f
ror edx, 0x75
imul edi
rol si, 0xfc
mov edx, 0x332
mul cx
ja 0x4083b1
cmp ecx, 0x2c
jb 0x408403
and eax, 0x225
movzx esi, bh
imul dx
jmp 0x4083cc
dec di
add si, 0x6c
imul di
and eax, 0x60
add dx, 0x1a3
dec si
inc edx
shl ax, 0xe2
sub dx, di
imul ax
inc edx
and esi, eax
rol ebx, 0x4a
and ebx, 0x2df
je 0x408403
shr ecx, 0xfa
or ecx, 0x2eb
xor cx, 0x3bd
xor esi, ecx
xor bx, 0x18c
rcl esi, 0x69
mov eax, ebx
mul dx
mov ax, bx
rcr bx, 0xd1
jmp 0x408419
imul bx
or si, 0x365
or edx, 0x63
rol eax, 0xd5
mov si, 0x9a
rcl ax, 0xba
mov esi, edx
add dx, ax
mul edi
rcl eax, 0x61
shr edi, 0x26
shr cx, 0x20
push 4
call fcn.0040ab06
add esp, 4
test eax, eax
je 0x408440
mov dword [eax], 0x406db0
jmp 0x408442
xor eax, eax
lea ecx, [ebp - 4]
push ecx
push 0
push eax
push 0x402020
push 0
push 0
call fcn.004145d6
add esp, 0x18
mov dword [ebp - 8], eax
test eax, eax
je 0x408576
cmp dword [ebp - 4], 0
je 0x408584
call sub.KERNEL32.dll_GetCurrentThreadId
mov ecx, dword [ebp - 4]
cmp ecx, eax
je 0x40858b
push 0
push ecx
push dword [ebp - 8]
call fcn.004087d6
add esp, 0xc
test eax, eax
jne 0x408592
push eax
xorps xmm0, xmm0
push eax
movlpd qword [ebp - 8], xmm0
call dword [sym.imp.ADVAPI32.dll_GetNumberOfEventLogRecords]
dec edi
mul si
or ebx, ecx
movsx edi, dl
ror ecx, 0xc5
mul cx
movzx esi, al
sub cx, 0x3c6
dec edi
dec cx
movsx edx, bl
mul edi
or ax, si
movsx ecx, bh
add edx, 0x2ea
ror edx, 0x4b
shl esi, 0x13
sub si, di
imul si
and edi, edx
ror ax, 0xf4
jae 0x408503
mul ecx
mul eax
or edx, edx
dec dx
mov ecx, ecx
add di, 0x30c
mov edx, 0xdd
ror edi, 0x11
or esi, 0xfa
jmp 0x408517
shl di, 0x27
mul edi
shr edx, 0xe3
ror bx, 0x41
dec dx
ror ecx, 0x57
dec bx
rol edx, 0x7d
imul bx
jae 0x408525
shr bx, 2
jmp 0x408538
rol ebx, 0xbf
add eax, 0x32
mov ebx, ecx
imul edi
or ax, cx
mov si, 0x3a8
mov ecx, ebx
add eax, ebx
imul edi
rol esi, 0x48
inc ecx
xor ebx, 0x11f
dec ecx
and eax, 0xed
movsx ebx, cl
rcl dx, 0xbd
push 0
call dword [sym.imp.USER32.dll_DestroyWindow]
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_DeleteAce]
cmp dword [ebp - 4], 0
jne 0x408599
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0x10
push 6
mov dword [ebp - 4], 0
call fcn.00408916
push 1
call fcn.00408916
push 5
call fcn.00408916
push 2
call fcn.00408916
call fcn.00414416
int3