Function at 0x403dd0
Capabilities:
Access the windows event log
Clear windows event logs

Disassembly:
sub esp, 0x84
cmp dword [0x4a9e7c], 0x84
jne 0x403dec
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_ClearEventLogA]
mov dword [esp + 0x2c], 0x79f4d4d0
mov dword [esp + 0x1c], 0x1a73c5c4
mov dword [esp + 0x3c], 0x2cf3e6eb
mov dword [esp + 0x28], 0x45643c9f
mov dword [esp + 0x38], 0x7849c97b
mov dword [esp + 0x14], 0x1164ad9f
mov dword [esp + 0x44], 0x65c8bb02
mov dword [esp + 0x50], 0x5ebd1bf1
mov dword [esp + 4], 0x4829b15f
mov dword [esp + 0x5c], 0x44a0b1b8
mov dword [esp + 0x68], 0x1a68c519
mov dword [esp + 0x48], 0x7f67fd83
mov dword [esp + 0x10], 0x5c46969d
mov dword [esp + 0x4c], 0x4fe0fb
mov dword [esp + 0x54], 0x1b5a048
mov dword [esp + 0x40], 0x96c51cf
mov dword [esp + 0x70], 0x434afd87
mov dword [esp + 0x64], 0x78ed3bde
mov dword [esp + 0xc], 0x3b86f317
mov dword [esp + 0x34], 0x247d35dd
mov dword [esp + 8], 0x2cc909f9
mov dword [esp + 0x60], 0x66e04314
mov dword [esp + 0x24], 0x1d858c58
mov dword [esp], 0x3b9da37c
mov dword [esp + 0x78], 0x64f554a4
mov dword [esp + 0x6c], 0xf43e686
mov dword [esp + 0x58], 0x765d061
mov dword [esp + 0x20], 0x28d9417
mov dword [esp + 0x7c], 0x17ff0cc5
mov dword [esp + 0x80], 0x1b5cdd7c
mov dword [esp + 0x18], 0x2a8c0156
mov dword [esp + 0x74], 0x33e7d972
mov dword [esp + 0x30], 0x2f069356
sub dword [esp + 0x2c], 0x35aa4d05
mov eax, 0x653b8f0d
mul dword [esp + 0x2c]
mov eax, dword [esp + 0x2c]
mov eax, 0xbacc586
mul dword [esp + 0x1c]
mov eax, dword [esp + 0x1c]
sub dword [esp + 0x3c], 0x4bc7588f
add dword [esp + 0x2c], 0x26cf440d
add dword [esp + 0x38], 0x2b400892
sub dword [esp + 0x2c], 0x1227b8f3
sub dword [esp + 0x38], 0x4793bee6
mov eax, 0x24c4abd6
mul dword [esp + 0x28]
mov eax, dword [esp + 0x28]
mov eax, 0x55bb5578
mul dword [esp + 0x1c]
mov eax, dword [esp + 0x1c]
add dword [esp + 0x5c], 0x28d4ec9b
add dword [esp + 0x14], 0x1d0bb871
add dword [esp + 0x50], 0x5ba5f0d4
mov eax, 0x4ae90c8
mul dword [esp + 4]
mov eax, dword [esp + 4]
mov eax, 0x53e60be
mul dword [esp + 4]
mov eax, dword [esp + 4]
mov eax, 0x42d76359
mul dword [esp + 0x38]
mov eax, dword [esp + 0x38]
add dword [esp + 0x44], 0x11463e84
mov eax, 0x3a001853
mul dword [esp + 0x14]
mov eax, dword [esp + 0x14]
mov eax, 0x4bb2c743
mul dword [esp + 0x50]
mov eax, dword [esp + 0x50]
mov eax, 0x6f873973
mul dword [esp + 0x28]
mov eax, dword [esp + 0x28]
sub dword [esp + 0x1c], 0x34a36c0
sub dword [esp + 0x5c], 0x5e53a60f
sub dword [esp + 0x38], 0x69621a5b
mov eax, 0x4670fec3
mul dword [esp + 0x50]
mov eax, dword [esp + 0x50]
mov eax, 0x4c8b19d6
mul dword [esp + 0x28]
mov eax, dword [esp + 0x28]
add dword [esp + 0x28], 0x46a2270d
sub dword [esp + 0x38], 0x3237b345
sub dword [esp + 0x1c], 0x27873fd2
add dword [esp + 0x2c], 0x6a3dccbb
add dword [esp + 0x68], 0x4382b430
sub dword [esp + 0x3c], 0x38e0bb52
add dword [esp + 0x10], 0x31420cbe
sub dword [esp + 0x50], 0x4b6bca49
mov eax, 0x488e5e1a
mul dword [esp + 0x50]
mov eax, dword [esp + 0x50]
add dword [esp + 0x28], 0x550e78d0
mov eax, 0x1b9983ed
mul dword [esp + 0x54]
mov eax, dword [esp + 0x54]
sub dword [esp + 0x10], 0x7cd59ead
mov eax, 0x6dfb50cb
mul dword [esp + 0x28]
mov eax, dword [esp + 0x28]
mov eax, 0x5d88cf55
mul dword [esp + 0x38]
mov eax, dword [esp + 0x38]
mov eax, 0x52d58544
mul dword [esp + 0x1c]
mov eax, dword [esp + 0x1c]
mov eax, 0xf8606f5
mul dword [esp + 0x70]
mov eax, dword [esp + 0x70]
add dword [esp + 0x64], 0x54247810
sub dword [esp + 4], 0x6af48725
mov eax, 0x60fd58aa
mul dword [esp + 0x3c]
mov eax, dword [esp + 0x3c]
mov eax, 0x27bc6be9
mul dword [esp + 0x34]
mov eax, dword [esp + 0x34]
add dword [esp + 0x5c], 0x2e7da576
mov eax, 0x22c17a1d
mul dword [esp + 0x14]
mov eax, dword [esp + 0x14]
add dword [esp + 0x1c], 0x7d29240f
sub dword [esp + 0x5c], 0x48bc3b63
sub dword [esp + 0x44], 0x70e577f5
sub dword [esp + 0x44], 0x4449ec74
mov eax, 0x2d5b9095
mul dword [esp + 0x24]
mov eax, dword [esp + 0x24]
sub dword [esp + 0x20], 0x3e35d27f
sub dword [esp + 0x48], 0x335d5fe
add dword [esp + 8], 0x42ab54d8
add dword [esp + 0x38], 0x68d5970
add dword [esp + 0x50], 0x7415923b
add dword [esp + 0x10], 0x62063c8c
mov eax, 0xc160130
mul dword [esp + 0x18]
mov eax, dword [esp + 0x18]
mov eax, 0x45cd4597
mul dword [esp + 0x68]
mov eax, dword [esp + 0x68]
sub dword [esp + 0x7c], 0x2d6c6663
sub dword [esp + 0x68], 0x22129c35
mov eax, 0x19addd2
mul dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov eax, 0x2d8da6ae
mul dword [esp]
mov eax, dword [esp]
sub dword [esp + 0x1c], 0x5c2abeb2
mov eax, 0x1e90af4b
mul dword [esp + 0x3c]
mov eax, dword [esp + 0x3c]
mov eax, 0x7a94a63e
mul dword [esp + 0x48]
mov eax, dword [esp + 0x48]
mov eax, dword [0x43efbc]
mov ecx, dword [0x43ef90]
mov dword [0x4a9e7c], eax
mov dword [0x4aa81c], ecx
call fcn.00403580
xor eax, eax
add esp, 0x84
ret 0x10