Function at 0x6bad7c1f
Capabilities:
Access the windows event log
Clear windows event logs
Set current directory

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x4c
cmp dword [0x6bb7ad60], 0
je 0x6bad83e5
mov dword [esp], 0x1a67fe0e
call fcn.6badcbb4
mov dword [esp], 0xcd1d9b0e
mov dword [esp + 4], 0
mov dword [0x6bb7af68], eax
mov dword [0x6bb7ae7c], 0xd4b85873
call fcn.6badcbb4
mov dword [esp], 0xa9419a28
mov dword [esp + 4], 0
mov dword [0x6bb7af10], eax
call fcn.6badcbb4
mov dword [esp], str.Suscipit_vero_aliquid_quisquam_sint_eum_non_sit
mov dword [0x6bb7adfc], eax
mov eax, dword [sym.imp.KERNEL32.dll_lstrlenA]
mov dword [ebp - 0x20], eax
call eax
push eax
mov eax, dword [0x6bb7adfc]
mov dword [esp], eax
call fcn.6badcbb4
mov ebx, dword [sym.imp.KERNEL32.dll_GetCommModemStatus]
mov dword [esp + 4], 0
mov dword [0x6bb7af30], eax
mov eax, dword [0x6bb7af10]
mov dword [esp], 0
mov dword [str.sYEMr], eax
call ebx
mov eax, dword [sym.imp.KERNEL32.dll_SetLastError]
push edx
push edx
mov dword [ebp - 0x24], eax
mov dword [esp], 0
call eax
mov eax, dword [0x6bb7af6c]
mov esi, dword [sym.imp.ADVAPI32.dll_ClearEventLogA]
push ecx
mov dword [0x6bb7b050], eax
mov dword [esp + 4], str.Veritatis_voluptatibus_ad_vel_nobis_sapiente_hic_ex_maiores_nobis_dolorum
mov dword [esp], 0
call esi
push edi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GetFileType]
mov dword [esp], 0
call edi
mov edx, dword [sym.imp.KERNEL32.dll_OpenEventA]
push eax
mov dword [ebp - 0x34], edx
mov dword [esp + 8], str.OcieKessler
mov dword [esp + 4], 0
mov dword [esp], 0
call edx
mov eax, dword [0x6bb7af58]
mov dword [0x6bb7ae30], 0x2c28a91d
sub esp, 0xc
mov dword [0x6bb7ae80], eax
mov eax, dword [0x6bb7b060]
mov dword [esp], eax
call fcn.6badcbb4
mov dword [esp + 4], 0
mov dword [0x6bb7afa0], eax
mov dword [esp], 0
call ebx
push eax
push eax
mov dword [esp], 0xa21614db
mov dword [esp + 4], 0
call fcn.6badcbb4
mov dword [esp], 0x89e45d18
mov dword [esp + 4], 0
mov dword [0x6bb7af90], eax
call fcn.6badcbb4
mov dword [esp], str.Aut_aliquam_sit_eos_aut_quia_vitae
mov dword [0x6bb7aee0], eax
mov eax, dword [ebp - 0x20]
call eax
mov dword [0x6bb7b000], 0x4acb17cc
push eax
mov dword [esp], 0x3cbfae5d
call fcn.6badcbb4
mov dword [esp + 0x10], 0
mov dword [0x6bb7aef4], eax
mov eax, dword [sym.imp.KERNEL32.dll_ReadConsoleW]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
mov dword [ebp - 0x28], eax
call eax
sub esp, 0x14
mov dword [esp + 4], 0
mov dword [esp], 0
call ebx
push eax
push eax
mov dword [esp + 4], str.Quod_dolores_sit_delectus_quae_atque
mov dword [esp], 0
call esi
push eax
push eax
mov dword [esp + 4], str.JaylonOKeefe
mov dword [esp], 0
call esi
push edx
push edx
mov dword [esp], 0
call edi
push ecx
mov dword [esp], 0x283d362b
call fcn.6badcbb4
mov dword [esp + 4], 0
mov dword [0x6bb7afc0], eax
mov eax, dword [sym.imp.KERNEL32.dll_SetCommMask]
mov dword [esp], 0
mov dword [ebp - 0x1c], eax
call eax
push eax
push eax
mov eax, dword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
mov dword [ebp - 0x30], eax
mov dword [esp], 0
call eax
push eax
mov eax, dword [ebp - 0x28]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call eax
mov eax, dword [ebp - 0x24]
mov dword [0x6bb7af2c], 0xe21aba99
sub esp, 0x14
mov dword [esp], 0
call eax
mov dword [0x6bb7afec], 0x24093246
push eax
mov dword [esp], 0x1826999e
call fcn.6badcbb4
mov dword [0x6bb7af44], eax
mov eax, dword [0x6bb7ad94]
mov dword [esp], eax
call fcn.6badcbb4
mov dword [esp + 4], str.Et_minima_et_reiciendis_temporibus
mov dword [0x6bb7b054], eax
mov dword [esp], 0
call esi
push eax
push eax
mov eax, dword [ebp - 0x1c]
mov dword [esp + 4], 0
mov dword [esp], 0
call eax
mov dword [0x6bb7ae90], 0x627a6552
push eax
push eax
mov eax, dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
mov dword [ebp - 0x2c], eax
mov dword [esp], str.HudsonSpinkaMD
call eax
mov eax, dword [ebp - 0x20]
mov dword [0x6bb7ade4], 0x7abc1ab6
push edx
mov dword [esp], str.Sed_et_quo
call eax
mov eax, dword [ebp - 0x24]
push ecx
mov dword [esp], 0
call eax
push eax
mov dword [esp], 0xcd044d4
call fcn.6badcbb4
mov dword [esp + 4], str.JacksonWisoky
mov dword [0x6bb7af40], eax
mov dword [esp], 0
call esi
mov dword [0x6bb7ae14], 0xeb27b35
push eax
push eax
mov eax, dword [0x6bb7aeb8]
mov dword [0x6bb7add0], 0x23179bab
mov dword [0x6bb7af74], eax
mov eax, dword [0x6bb7ae78]
mov dword [0x6bb7ae1c], eax
mov eax, dword [0x6bb7af64]
mov dword [0x6bb7af28], eax
mov eax, dword [0x6bb7b034]
mov dword [esp], eax
call fcn.6badcbb4
mov dword [esp], 0
mov dword [0x6bb7add4], eax
call edi
push eax
mov eax, dword [ebp - 0x20]
mov dword [esp], str.Architecto_id_aut
call eax
mov dword [0x6bb7ada0], 0xecc2500a
push eax
mov eax, dword [0x6bb7af40]
mov dword [esp], eax
call fcn.6badcbb4
mov dword [esp + 0x10], 0
mov dword [0x6bb7b050], eax
mov eax, dword [ebp - 0x28]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call eax
mov eax, dword [ebp - 0x30]
mov dword [0x6bb7ae8c], 0xdf32c31a
sub esp, 0x14
mov dword [esp], 0
call eax
mov ecx, dword [sym.imp.ADVAPI32.dll_RegisterEventSourceA]
push eax
mov dword [ebp - 0x38], ecx
mov dword [esp + 4], str.DrAverySchaeferDVM
mov dword [esp], str.GustHarris
call ecx
mov dword [0x6bb7afec], 0xa42f2051
push edx
push edx
mov edx, dword [ebp - 0x34]
mov dword [esp + 8], str.RicardoArmstrong
mov dword [esp + 4], 0
mov dword [esp], 0
call edx
sub esp, 0xc
mov dword [esp], 0xee2f455b
mov dword [esp + 4], 0
call fcn.6badcbb4
mov dword [esp + 4], str.Qui_nihil_modi_harum_eveniet_ullam_reprehenderit
mov dword [0x6bb7af98], eax
mov dword [esp], 0
call esi
mov eax, dword [ebp - 0x28]
push ecx
push ecx
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call eax
mov eax, dword [ebp - 0x30]
sub esp, 0x14
mov dword [esp], 0
call eax
push eax
mov dword [esp + 4], 0
mov dword [esp], 0
call ebx
mov dword [0x6bb7aff8], 0xb6def25d
push eax
push eax
mov eax, dword [0x6bb7b024]
mov dword [0x6bb7ae1c], eax
mov eax, dword [ebp - 0x20]
mov dword [esp], str.Omnis_enim_dolores_ut
call eax
push eax
mov eax, dword [0x6bb7b01c]
mov dword [esp], eax
call fcn.6badcbb4
mov dword [esp], str.JefferyThompson
mov dword [0x6bb7af18], eax
mov eax, dword [0x6bb7af38]
mov dword [0x6bb7aedc], eax
mov eax, dword [ebp - 0x2c]
call eax
push eax
mov eax, dword [ebp - 0x2c]
mov dword [esp], str.ProfOriePadbergJr
call eax
push eax
mov eax, dword [ebp - 0x28]
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], 0
call eax
mov eax, dword [0x6bb7af70]
mov dword [0x6bb7ad90], 0x15a9ca70
sub esp, 0x14
mov dword [0x6bb7aeb0], eax
mov eax, dword [0x6bb7ae48]
mov dword [esp], 0
mov dword [0x6bb7afa8], eax
call edi
mov ecx, dword [ebp - 0x38]
push edx
mov dword [esp + 4], str.Consequuntur_voluptates_adipisci_quibusdam_eum_ipsa
mov dword [esp], str.MsLonieOKonMD
call ecx
mov edx, dword [ebp - 0x34]
push ecx
push ecx
mov dword [esp + 8], str.Quia_et_ab_dolor_consequuntur_pariatur
mov dword [esp + 4], 0
mov dword [esp], 0
call edx
mov eax, dword [0x6bb7af24]
mov dword [0x6bb7ad8c], 0x40c870f4
sub esp, 0xc
mov dword [0x6bb7b02c], eax
mov eax, dword [0x6bb7afb4]
mov dword [0x6bb7b000], eax
mov eax, dword [0x6bb7ad88]
mov dword [esp], eax
call fcn.6badcbb4
mov dword [esp], str.Et_id_optio_ea_maxime_ut_qui_vel_qui_sint_numquam_eaque
mov dword [0x6bb7ae04], eax
mov eax, dword [ebp - 0x2c]
call eax
mov dword [0x6bb7adb4], 0xc22c9628
push eax
mov eax, dword [0x6bb7afd4]
mov dword [str.qCeHV], 0xcf8d5c03
mov dword [0x6bb7b068], 0x52780ba4
mov dword [esp], eax
call fcn.6badcbb4
mov dword [esp], 0
mov dword [0x6bb7ae98], eax
mov eax, dword [ebp - 0x24]
call eax
push eax
mov eax, dword [0x6bb7adcc]
mov dword [esp], eax
call fcn.6badcbb4
mov dword [0x6bb7ae40], eax
mov eax, dword [0x6bb7ae60]
mov dword [0x6bb7aec4], eax
mov eax, dword [0x6bb7aec0]
mov dword [esp], eax
call fcn.6badcbb4
mov dword [esp + 4], 0
mov dword [0x6bb7afb0], eax
mov dword [esp], 0
call ebx
push eax
push eax
mov dword [esp], 0
call edi
push eax
mov eax, dword [0x6bb7af94]
mov dword [0x6bb7b044], eax
mov eax, dword [ebp - 0x1c]
mov dword [esp + 4], 0
mov dword [esp], 0
call eax
push eax
push eax
mov dword [esp], 0x495f64b2
call fcn.6badcbb4
mov dword [esp + 4], 0
mov dword [0x6bb7b014], eax
mov eax, dword [ebp - 0x1c]
mov dword [esp], 0
call eax
mov eax, dword [ebp - 0x2c]
push edx
push edx
mov dword [esp], str.Aut_et_dolore_ut_totam_nostrum_consequatur
call eax
mov eax, dword [ebp - 0x1c]
push ecx
mov dword [esp + 4], 0
mov dword [esp], 0
call eax
push eax
push eax
mov eax, dword [0x6bb7af2c]
mov dword [0x6bb7afd4], eax
mov eax, dword [ebp - 0x1c]
mov dword [esp + 4], 0
mov dword [esp], 0
call eax
push eax
push eax
mov eax, dword [0x6bb7af84]
mov dword [0x6bb7aff4], eax
mov eax, dword [0x6bb7aedc]
mov dword [esp], eax
call fcn.6badcbb4
mov dword [esp], 0
mov dword [0x6bb7afd4], eax
mov eax, dword [0x6bb7af0c]
mov dword [0x6bb7af10], eax
mov eax, dword [ebp - 0x30]
call eax
mov dword [0x6bb7afa8], 0x2d4f0865
push eax
mov eax, dword [0x6bb7b058]
mov dword [0x6bb7ae40], 0x1073359f
mov dword [0x6bb7aea0], eax
mov eax, dword [0x6bb7af0c]
mov dword [esp], 0x8eb82a8e
mov dword [esp + 4], 0
mov dword [0x6bb7af40], eax
call fcn.6badcbb4
mov dword [esp], 0
mov dword [0x6bb7afcc], eax
call edi
mov dword [0x6bb7aeb4], 0x43f8ea81
push eax
mov dword [esp + 4], str.Vel_sequi_officia_nemo_mollitia_et
mov dword [esp], 0
call esi
push eax
push eax
mov eax, dword [ebp - 0x24]
mov dword [esp], 0
call eax
push edx
mov dword [esp + 4], 0
mov dword [esp], 0
call ebx
push ecx
push ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov edx, dword [ebp + 0x14]
mov dword [esp], eax
mov dword [esp + 0x10], edx
mov edx, dword [ebp + 0x10]
mov dword [esp + 0xc], edx
mov edx, dword [ebp + 0xc]
mov dword [esp + 8], edx
mov edx, dword [ebp + 8]
mov dword [esp + 4], edx
call fcn.6bad7600
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret