Function at 0x41a720
Capabilities:
Clear windows event logs

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
cmp esp, dword [ecx + 8]
jbe 0x41ac6e
sub esp, 0x60
movzx edx, byte [0x6573b4]
test dl, dl
je 0x41ac57
mov edx, dword fs:[0x14]
mov edx, dword [edx]
mov edx, dword [edx + 0x18]
mov edx, dword [edx + 0x4c]
mov ebx, dword [esp + 0x64]
mov ebp, dword [ebx + 0x10]
mov esi, dword [ebx + 0x14]
mov edi, dword [esp + 0x68]
test edi, 0xc
je 0x41a7dc
mov eax, ebp
add ebp, 0x186a0
mov ecx, esi
adc esi, 0
test edi, 4
je 0x41a79a
mov dword [esp + 0x40], eax
lea eax, [0x556228]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x40]
jmp 0x41a7c4
test edi, 8
je 0x41a7b6
mov dword [esp + 0x48], eax
lea eax, [0x556224]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x48]
jmp 0x41a7c4
mov dword [esp + 0x50], eax
xor eax, eax
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x50]
mov dword [esp + 0x38], eax
mov eax, ebp
mov ebp, dword [esp + 0x38]
mov ebp, esi
mov esi, ecx
mov ecx, eax
mov eax, ebp
mov ebp, dword [esp + 0x38]
jmp 0x41a7f1
mov eax, 0x7fffffff
mov ecx, 0xffffffff
xor eax, eax
mov dword [esp + 0x5c], eax
mov eax, 0x7fffffff
mov dword [esp + 0x58], edx
mov ebx, dword [0x6313b0]
cmp dword [0x6313b4], ebx
jbe 0x41a825
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], eax
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], esi
test edi, 2
setne bl
mov byte [esp + 0x17], bl
jmp 0x41ab74
mov ebx, dword [esp + 0x64]
jmp 0x41a83f
mov edi, dword [esp + 0x68]
mov edx, dword [esp + 0x58]
mov ebp, ecx
mov ecx, esi
mov esi, eax
mov eax, ebx
mov ebx, dword [esp + 0x64]
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], esi
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], eax
movzx edx, byte [edx + 0x65]
test dl, dl
je 0x41a899
test edi, 1
je 0x41a866
mov edx, 1
jmp 0x41a89b
lea eax, [0x631c70]
mov dword [esp], eax
call fcn.00401c10
mov eax, dword [esp + 4]
test eax, eax
setne al
mov ecx, dword [esp + 0x20]
mov ebx, dword [esp + 0x64]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x68]
mov edx, eax
mov eax, dword [esp + 0x24]
jmp 0x41a89b
xor edx, edx
test dl, dl
jne 0x41aac4
mov edx, dword [0x631344]
test edx, edx
sete dl
mov edi, dword [0x631340]
test edi, edi
xchg edi, ebx
sete bl
xchg edi, ebx
and edx, edi
test dl, dl
je 0x41a8df
mov dword [esp], ebx
call fcn.004230e0
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
mov ebx, dword [esp + 0x64]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov edx, dword [ebx]
test edx, edx
je 0x41a90c
mov edi, dword [edx + 0xc]
test edi, edi
jne 0x41a8f0
xor edx, edx
jmp 0x41a90e
lea ebp, [edi - 1]
mov dword [edx + 0xc], ebp
cmp ebp, 0x1fc
jae 0x41ab47
mov edx, dword [edx + edi*4 + 0xc]
mov ebp, dword [esp + 0x18]
jmp 0x41a90e
xor edx, edx
test edx, edx
jne 0x41a95c
mov dword [esp], ebx
call fcn.00422f00
mov eax, dword [esp + 4]
test eax, eax
jne 0x41a946
mov dword [esp], 0
mov dword [esp + 4], 0
call fcn.0042d4a0
mov eax, dword [esp + 0x64]
mov dword [esp], eax
call fcn.00422f00
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x20]
mov ebx, dword [esp + 0x64]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov edx, eax
mov eax, dword [esp + 0x24]
test edx, edx
je 0x41aac0
mov dword [esp], edx
mov dword [esp + 4], ebx
call fcn.0041b070
mov eax, dword [esp + 0x64]
mov ecx, dword [eax + 0x14]
test ecx, ecx
sete dl
setg bl
mov ebp, dword [eax + 0x10]
cmp ebp, 0x7d0
xchg esi, ebx
setae bl
xchg esi, ebx
and esi, edx
or esi, ebx
xchg esi, eax
test al, al
xchg esi, eax
jne 0x41a9b4
mov edx, eax
mov ebp, dword [esp + 0x5c]
mov ebx, dword [esp + 0x24]
mov esi, dword [esp + 0x20]
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
jmp 0x41a82b
nop
lea eax, [0x657aa8]
mov dword [esp], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], ebp
call fcn.00401d00
mov eax, dword [esp + 0x68]
test eax, 2
jne 0x41a9e0
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
jmp 0x41aa06
mov eax, dword [esp + 0x64]
mov ecx, dword [eax + 0x10]
mov edx, dword [esp + 0x18]
sub ecx, edx
mov edx, dword [eax + 0x14]
mov ebx, dword [esp + 0x1c]
sbb edx, ebx
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00419a20
xor eax, eax
xor ecx, ecx
mov ebx, dword [esp + 0x64]
mov ebp, dword [ebx + 0x10]
mov esi, dword [esp + 0x20]
sub esi, ebp
mov ebp, dword [ebx + 0x14]
mov dword [ebx + 0x10], 0
mov dword [ebx + 0x14], 0
mov edi, dword [esp + 0x24]
sbb edi, ebp
mov dword [esp + 0x24], edi
test edi, edi
xchg ebp, ebx
sete bl
xchg ebp, ebx
mov edx, ebx
setl bl
test esi, esi
xchg edi, ebx
setbe bl
xchg edi, ebx
and edi, ebp
or ebx, edi
test bl, bl
je 0x41aaa7
add esi, 0x186a0
mov ebx, dword [esp + 0x24]
adc ebx, 0
mov ebp, dword [esp + 0x5c]
test ebp, ebp
jne 0x41aa66
xor edi, edi
jmp 0x41aa9b
mov dword [esp + 0x34], ecx
mov dword [esp + 0x30], eax
mov dword [esp + 0x2c], esi
mov dword [esp + 0x28], ebx
mov eax, dword [ebp]
mov edx, ebp
call eax
movzx eax, byte [esp]
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x64]
mov ebx, dword [esp + 0x28]
mov ebp, dword [esp + 0x5c]
mov esi, dword [esp + 0x2c]
mov edi, eax
mov eax, dword [esp + 0x30]
xchg edi, eax
test al, al
xchg edi, eax
je 0x41a82b
jmp 0x41aab4
mov ebp, dword [esp + 0x5c]
mov ebx, dword [esp + 0x24]
jmp 0x41a82b
mov ebx, edx
mov edi, dword [esp + 0x68]
mov esi, eax
mov ebp, ecx
jmp 0x41aac4
mov edi, dword [esp + 0x68]
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], esi
mov eax, dword [ebx + 0x14]
test eax, eax
sete cl
setg dl
mov esi, dword [ebx + 0x10]
test esi, esi
xchg ebp, ebx
seta bl
xchg ebp, ebx
and ebp, ecx
or ebp, edx
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x41ab43
nop
lea ecx, [0x657aa8]
mov dword [esp], ecx
mov dword [esp + 8], eax
mov dword [esp + 4], esi
call fcn.00401d00
mov eax, dword [esp + 0x68]
test eax, 2
je 0x41ab31
mov eax, dword [esp + 0x64]
mov ecx, dword [eax + 0x10]
mov edx, dword [esp + 0x18]
sub ecx, edx
mov edx, dword [eax + 0x14]
mov ebx, dword [esp + 0x1c]
sbb edx, ebx
mov dword [esp + 4], edx
mov dword [esp], ecx
call fcn.00419a20
mov eax, dword [esp + 0x64]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
add esp, 0x60
ret
mov eax, ebp
mov ecx, 0x1fc
call fcn.0045f450
mov edi, dword [esp + 0x68]
mov eax, dword [esp + 0x58]
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
mov edx, dword [esp + 0x58]
movzx ebx, byte [esp + 0x17]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
movzx edx, byte [edx + 0x65]
test dl, dl
je 0x41abbf
test edi, 1
je 0x41ab8b
mov edx, 1
jmp 0x41abc1
lea eax, [0x631c70]
mov dword [esp], eax
call fcn.00401c10
mov eax, dword [esp + 4]
test eax, eax
setne al
mov ecx, dword [esp + 0x20]
movzx ebx, byte [esp + 0x17]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x68]
mov edx, eax
mov eax, dword [esp + 0x24]
jmp 0x41abc1
xor edx, edx
test dl, dl
jne 0x41ac4e
lea eax, [0x6313b0]
mov dword [esp], eax
mov dword [esp + 4], 1
call fcn.00401d60
mov eax, dword [esp + 8]
dec eax
cmp dword [0x6313b4], eax
jbe 0x41ac3a
mov ecx, dword [esp + 0x64]
mov dword [esp], ecx
mov dword [esp + 4], eax
movzx eax, byte [esp + 0x17]
mov byte [esp + 8], al
call fcn.00418520
mov edx, dword [esp + 0x5c]
test edx, edx
jne 0x41ac11
xor eax, eax
jmp 0x41ac1d
mov eax, dword [edx]
call eax
movzx eax, byte [esp]
mov edx, dword [esp + 0x5c]
test al, al
je 0x41ab53
mov ebx, dword [esp + 0x64]
mov edi, dword [esp + 0x68]
mov esi, dword [esp + 0x1c]
mov ebp, dword [esp + 0x18]
jmp 0x41aac4
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x20]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x68]
mov edx, dword [esp + 0x58]
jmp 0x41a825
lea eax, [0x54d061]
mov dword [esp], eax
mov dword [esp + 4], 0x17
call fcn.00433a00
nop
call fcn.0045e000
jmp fcn.0041a720