Function at 0x43f7f0
Capabilities:
Clear windows event logs

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x43ff4a
sub esp, 0x60
mov eax, dword [0x657224]
test eax, eax
jl 0x43ff33
mov ecx, dword [esp + 0x64]
test ecx, ecx
jle 0x43ff33
mov dword [esp + 0x24], eax
movzx edx, byte [0x63b848]
test dl, dl
je 0x43f877
nop
mov dword [esp + 0x44], 0
mov dword [esp + 0x48], 0
mov dword [esp + 0x44], ecx
sar ecx, 0x1f
mov dword [esp + 0x48], ecx
mov byte [esp], 4
mov dword [esp + 4], 1
lea ecx, [esp + 0x44]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.00453000
nop
call fcn.00460210
mov eax, dword [0x631c94]
test eax, eax
setne cl
mov edx, dword [0x631c98]
test edx, edx
setne bl
or ebx, ecx
mov ecx, dword [esp + 4]
mov ebp, dword [esp + 4]
mov dword [esp + 0x20], ebp
mov esi, dword [esp]
test bl, bl
je 0x43f905
mov dword [esp + 0x40], edx
mov ebx, esi
sub esi, eax
mov edi, eax
mov eax, dword [esp + 0x24]
mul esi
mov dword [esp + 0x3c], edx
mov ebp, dword [0x631c9c]
mov dword [esp + 0x38], ebp
add ebp, eax
mov edx, dword [0x631ca0]
mov dword [0x631c9c], ebp
mov ebp, ebx
sub ebx, edi
mov ebx, dword [esp + 0x40]
sbb ecx, ebx
mov ebx, dword [esp + 0x24]
mov edi, ebx
sar ebx, 0x1f
imul ebx, esi
mov esi, dword [esp + 0x3c]
add ebx, esi
imul ecx, edi
add ebx, ecx
mov esi, dword [esp + 0x38]
add esi, eax
adc edx, ebx
mov dword [0x631ca0], edx
jmp 0x43f90b
mov ebp, esi
mov edi, dword [esp + 0x24]
mov edx, dword [esp + 0x20]
mov dword [0x631c98], edx
mov dword [0x631c94], ebp
mov edx, dword [esp + 0x64]
lea ebx, [edx + 0x1f]
sar ebx, 0x1f
shr ebx, 0x1b
lea ebx, [ebx + edx + 0x1f]
sar ebx, 5
mov dword [esp + 0x28], ebx
cmp dword [0x630fd4], edx
jge 0x43faef
nop
lea eax, [0x6571c8]
mov dword [esp], eax
call fcn.00409140
mov eax, dword [esp + 0x64]
lea ecx, [0x630fd0]
cmp dword [ecx + 8], eax
jl 0x43f968
mov dword [0x630fd4], eax
jmp 0x43f9f3
lea ecx, [0x538a20]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], eax
call fcn.00447510
mov eax, dword [esp + 0xc]
mov dword [esp + 0x5c], eax
mov ecx, dword [0x630fd0]
mov edx, dword [0x630fd8]
lea ebx, [0x538a20]
mov dword [esp], ebx
mov dword [esp + 4], eax
mov ebx, dword [esp + 0x64]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], edx
call fcn.0040f3b0
mov eax, dword [esp + 0x64]
mov dword [0x630fd4], eax
mov dword [0x630fd8], eax
mov ecx, dword [0x6573b0]
test ecx, ecx
jne 0x43f9da
mov ebx, dword [esp + 0x5c]
mov dword [0x630fd0], ebx
jmp 0x43f9ed
lea edi, [0x630fd0]
mov ecx, eax
mov eax, dword [esp + 0x5c]
call fcn.0045f3d0
mov eax, ecx
lea ecx, [0x630fd0]
mov edx, dword [0x631008]
mov ebx, dword [0x631000]
mov ebp, dword [0x631004]
mov esi, dword [esp + 0x28]
cmp edx, esi
jl 0x43fa32
jb 0x43ff2c
mov dword [0x631004], esi
mov edx, dword [0x631028]
cmp edx, esi
jb 0x43ff25
mov dword [0x631024], esi
jmp 0x43fad4
lea eax, [0x535180]
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], ebp
mov dword [esp + 0xc], ebx
call fcn.004473c0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x28]
mov dword [0x631004], ecx
mov dword [0x631008], ecx
mov edx, dword [0x6573b0]
test edx, edx
jne 0x43fa72
mov dword [0x631000], eax
jmp 0x43fa7d
lea edi, [0x631000]
call fcn.0045f3d0
mov eax, dword [0x631020]
mov edx, dword [0x631024]
lea ebx, [0x535180]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], eax
call fcn.004473c0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x28]
mov dword [0x631024], ecx
mov dword [0x631028], ecx
mov edx, dword [0x6573b0]
test edx, edx
jne 0x43fac9
mov dword [0x631020], eax
jmp 0x43fad4
lea edi, [0x631020]
call fcn.0045f3d0
nop
lea eax, [0x6571c8]
mov dword [esp], eax
call fcn.00409340
mov edx, dword [esp + 0x64]
mov ebx, dword [esp + 0x28]
mov edi, dword [esp + 0x24]
mov eax, edi
jmp 0x43fb1d
lea eax, [eax + edx*4]
mov dword [esp], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 4], eax
call fcn.00403410
mov eax, dword [esp + 0x34]
lea edi, [eax + 1]
mov eax, dword [esp + 0x64]
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x64]
mov ebx, dword [esp + 0x28]
cmp edx, edi
jle 0x43fb84
mov ecx, dword [0x630fd4]
mov ebp, dword [0x630fd0]
cmp edi, ecx
jae 0x43ff1e
mov dword [esp + 0x34], edi
mov ecx, dword [ebp + edi*4]
test ecx, ecx
jne 0x43fb57
lea eax, [0x5447a0]
mov dword [esp], eax
call fcn.0040b1a0
mov ecx, dword [esp + 4]
mov edi, dword [esp + 0x34]
mov dword [esp + 0x50], ecx
mov dword [esp], ecx
mov dword [esp + 4], edi
call fcn.0043f2a0
mov ecx, dword [0x630fd4]
mov eax, dword [0x630fd0]
mov edx, dword [esp + 0x34]
cmp edx, ecx
jb 0x43faf3
jmp 0x43ff17
mov ebp, dword fs:[0x14]
mov ebp, dword [ebp]
mov dword [esp + 0x54], ebp
mov esi, dword [ebp + 0x18]
mov esi, dword [esi + 0x54]
test esi, esi
je 0x43fc39
mov edi, esi
cmp dword [esi], edx
jl 0x43fc1f
test edi, edi
je 0x43fc39
movzx esi, byte [0x63b848]
xchg esi, eax
test al, al
xchg esi, eax
je 0x43fc10
nop
mov dword [ebp + 0x94], edi
mov byte [esp], 0x11
mov dword [esp + 4], 1
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
call fcn.00453000
mov eax, dword [esp + 0x54]
mov ecx, dword [eax + 0x18]
mov ecx, dword [ecx + 0x54]
mov dword [esp], ecx
call fcn.00453ec0
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x64]
mov ebx, dword [esp + 0x28]
mov ebp, dword [esp + 0x54]
mov esi, dword [ebp + 0x18]
mov esi, dword [esi + 0x54]
mov dword [esi + 0x2c], 0
jmp 0x43fc39
mov dword [esi + 4], 1
mov eax, dword [ebp + 0x18]
mov eax, dword [eax + 0x54]
mov eax, dword [eax + 0x30]
mov dword [esp], eax
call fcn.00412670
jmp 0x43fc7f
mov esi, dword [ebp + 0x18]
mov dword [esi + 0x54], 0
mov ecx, dword [0x630fd4]
mov esi, dword [0x630fd0]
test ecx, ecx
jbe 0x43ff10
mov eax, dword [esi]
mov dword [eax + 0x2c], 0
mov dword [eax + 4], 0
mov dword [esp], eax
call fcn.0043ff60
movzx eax, byte [0x63b848]
test al, al
je 0x43fc7f
call fcn.00454270
mov dword [0x657234], 0
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x64]
mov eax, ebx
jmp 0x43fcb8
mov dword [esp + 0x30], ebx
mov eax, dword [ebp + ebx*4]
mov dword [esp], eax
call fcn.0043f420
mov eax, dword [esp + 0x30]
lea ebx, [eax + 1]
mov eax, dword [esp + 0x24]
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0x24]
cmp ebx, edx
jge 0x43fcd1
mov ecx, dword [0x630fd4]
mov ebp, dword [0x630fd0]
cmp ebx, ecx
jb 0x43fc95
jmp 0x43ff09
lea edx, [0x630fd0]
cmp dword [edx + 4], eax
je 0x43fd42
nop
lea eax, [0x6571c8]
mov dword [esp], eax
call fcn.00409140
mov edx, dword [0x630fd8]
mov ecx, dword [esp + 0x64]
cmp ecx, edx
ja 0x43ff04
mov dword [0x630fd4], ecx
mov edx, dword [0x631008]
mov eax, dword [esp + 0x28]
cmp edx, eax
jb 0x43fefd
mov dword [0x631004], eax
mov edx, dword [0x631028]
cmp edx, eax
jb 0x43fef6
mov dword [0x631024], eax
nop
lea eax, [0x6571c8]
mov dword [esp], eax
call fcn.00409340
mov eax, dword [esp + 0x64]
lea edx, [eax - 1]
mov ebx, dword [esp + 0x54]
xor ecx, ecx
jmp 0x43fd4e
dec edx
mov dword [esp + 0x4c], ecx
test edx, edx
jl 0x43fdeb
mov ebp, dword [0x630fd4]
mov esi, dword [0x630fd0]
cmp edx, ebp
jae 0x43feed
mov ebp, dword [ebx + 0x18]
mov esi, dword [esi + edx*4]
mov ebp, dword [ebp + 0x54]
cmp ebp, esi
je 0x43fd4d
mov dword [esp + 0x2c], edx
mov dword [esp + 0x58], esi
mov dword [esi + 4], 0
mov dword [esp], esi
call fcn.00442120
movzx eax, byte [esp + 4]
test al, al
jne 0x43fdca
nop
mov edx, dword [0x631bfc]
test edx, edx
je 0x43fdb8
mov ebx, dword [edx + 0xb8]
mov dword [0x631bfc], ebx
dec dword [0x631c00]
nop
mov ecx, dword [esp + 0x58]
mov dword [ecx + 0x2c], edx
nop
mov edx, dword [esp + 0x4c]
mov dword [ecx + 8], edx
jmp 0x43fdda
mov eax, dword [esp + 0x58]
mov dword [esp], eax
call fcn.00441f40
mov ecx, dword [esp + 0x4c]
mov eax, dword [esp + 0x64]
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x54]
jmp 0x43fd4d
nop
mov dword [0x631060], eax
mov dword [0x631068], 0
mov edx, 1
jmp 0x43fe0c
lea edx, [ebx + 1]
mov eax, ebp
mov ecx, dword [esp + 0x4c]
cmp eax, edx
jb 0x43feba
mov ebx, edx
mov ebp, eax
jmp 0x43fee4
cmp edx, 1
jne 0x43feb3
mov edx, dword [0x631068]
lea esi, [edx + 1]
mov edi, dword [0x631064]
mov eax, ecx
mov ecx, dword [0x63106c]
cmp ecx, esi
jae 0x43fea2
mov dword [esp + 0x3c], ebx
lea eax, [0x535180]
mov dword [esp], eax
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], esi
call fcn.004475d0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov dword [0x63106c], edx
mov edx, dword [0x6573b0]
test edx, edx
jne 0x43fe87
mov dword [0x631064], eax
jmp 0x43fe92
lea edi, [0x631064]
call fcn.0045f3d0
mov ebx, dword [esp + 0x3c]
mov ebp, dword [esp + 0x64]
mov edx, ecx
mov edi, eax
mov eax, dword [esp + 0x4c]
lea ecx, [edx + 1]
mov dword [0x631068], ecx
mov dword [edi + edx*4], ebx
jmp 0x43fe03
mov eax, ecx
jmp 0x43fe03
lea ecx, [0x657224]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.00401e20
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x68], eax
add esp, 0x60
ret
mov esi, eax
mov eax, edx
xor edx, edx
div esi
mov eax, edx
mov edx, esi
test eax, eax
jne 0x43fed8
jmp 0x43fe1d
mov eax, edx
mov ecx, ebp
call fcn.0045f450
mov ecx, eax
call fcn.0045f490
mov ecx, eax
call fcn.0045f490
call fcn.0045f490
mov eax, ebx
call fcn.0045f450
xor eax, eax
call fcn.0045f450
mov eax, edx
call fcn.0045f450
mov eax, edi
call fcn.0045f450
mov ecx, esi
call fcn.0045f490
mov ecx, esi
call fcn.0045f490
lea eax, [0x54d175]
mov dword [esp], eax
mov dword [esp + 4], 0x17
call fcn.00433a00
nop
call fcn.0045e000
jmp fcn.0043f7f0