Function at 0x524270
Capabilities:
Clear windows event logs

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0xa4]
cmp eax, dword [ecx + 8]
jbe 0x524821
sub esp, 0x124
mov eax, dword [0x630cc0]
mov ecx, dword [0x630cc4]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00524ca0
mov eax, dword [0x630cc8]
mov ecx, dword [0x630ccc]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x40], edx
mov ebx, dword [esp + 0x18]
mov dword [esp + 0xe0], ebx
mov ebp, dword [esp + 8]
mov dword [esp + 0xe4], ebp
mov esi, dword [esp + 0xc]
mov dword [esp + 0x44], esi
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00524ca0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 8]
mov dword [esp + 0xdc], edx
mov ebx, dword [esp + 0xc]
mov dword [esp + 0x3c], ebx
mov ebp, dword [esp + 0x40]
test ebp, ebp
je 0x5243db
mov dword [esp + 0xd8], ecx
mov dword [esp + 0x38], eax
mov eax, dword [ebp + 0x10]
mov ecx, dword [esp + 0xe0]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0xec], 0
mov dword [esp + 0xf0], 0
mov dword [esp], 0
lea edx, [0x54b2db]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x12
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044ce20
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408c10
mov eax, dword [esp + 8]
lea ecx, [0x535040]
mov dword [esp + 0xec], ecx
mov dword [esp + 0xf0], eax
lea eax, [esp + 0xec]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004b5200
mov dword [esp], 0
call fcn.0048fdd0
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0xd8]
mov edx, dword [esp + 0xdc]
mov ebx, dword [esp + 0x3c]
test eax, eax
je 0x524486
mov eax, dword [eax + 0x10]
mov dword [esp], ecx
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov dword [esp + 0xec], 0
mov dword [esp + 0xf0], 0
mov dword [esp], 0
lea edx, [0x54b92f]
mov dword [esp + 4], edx
mov dword [esp + 8], 0x13
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0044ce20
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00408c10
mov eax, dword [esp + 8]
lea ecx, [0x535040]
mov dword [esp + 0xec], ecx
mov dword [esp + 0xf0], eax
lea eax, [esp + 0xec]
mov dword [esp], eax
mov dword [esp + 4], 1
mov dword [esp + 8], 1
call fcn.004b5200
mov dword [esp], 0
call fcn.0048fdd0
mov eax, dword [0x62c700]
mov ecx, dword [0x62c704]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00523fc0
mov eax, dword [esp + 8]
mov dword [esp + 0xe8], eax
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x4c], ecx
lea edx, [0x535200]
mov dword [esp], edx
mov ebx, dword [esp + 0x44]
shl ebx, 1
mov dword [esp + 0x30], ebx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebx
call fcn.00447510
mov eax, dword [esp + 0xc]
nop
mov ecx, dword [esp + 0x44]
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0xe4]
xor ebp, ebp
xor esi, esi
jmp 0x524500
mov byte [esi + eax + 1], bl
mov edi, dword [esp + 0x48]
lea ebp, [edi + 1]
add esi, 2
mov ebx, dword [esp + 0xe4]
cmp ebp, ecx
jge 0x52454f
movzx edi, byte [ebp + ebx]
xchg edi, eax
mov byte [esp + 0x1f], al
xchg edi, eax
xchg edi, eax
shr al, 4
xchg edi, eax
xchg edi, eax
movzx eax, al
xchg edi, eax
lea ebx, [0x54a82a]
movzx edi, byte [edi + ebx]
cmp esi, edx
jae 0x524817
mov dword [esp + 0x48], ebp
xchg edi, ebx
mov byte [eax + esi], bl
xchg edi, ebx
lea edi, [esi + 1]
movzx ebp, byte [esp + 0x1f]
and ebp, 0xf
movzx ebx, byte [ebp + ebx]
cmp edx, edi
ja 0x5244eb
jmp 0x52480e
lea ecx, [esp + 0xb0]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.0044d0d0
mov eax, dword [esp + 0xc]
mov dword [esp + 0xd0], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x24], ecx
lea edx, [0x535200]
mov dword [esp], edx
mov ebx, dword [esp + 0x3c]
shl ebx, 1
mov dword [esp + 0x2c], ebx
mov dword [esp + 4], ebx
mov dword [esp + 8], ebx
call fcn.00447510
mov eax, dword [esp + 0xc]
nop
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x2c]
mov ebx, dword [esp + 0xdc]
xor ebp, ebp
xor esi, esi
jmp 0x5245c8
mov byte [esi + eax + 1], bl
mov edi, dword [esp + 0x48]
lea ebp, [edi + 1]
add esi, 2
mov ebx, dword [esp + 0xdc]
cmp ebp, ecx
jge 0x524617
movzx edi, byte [ebp + ebx]
xchg edi, eax
mov byte [esp + 0x1e], al
xchg edi, eax
xchg edi, eax
shr al, 4
xchg edi, eax
xchg edi, eax
movzx eax, al
xchg edi, eax
lea ebx, [0x54a82a]
movzx edi, byte [edi + ebx]
cmp esi, edx
jae 0x524805
mov dword [esp + 0x48], ebp
xchg edi, ebx
mov byte [eax + esi], bl
xchg edi, ebx
lea edi, [esi + 1]
movzx ebp, byte [esp + 0x1e]
and ebp, 0xf
movzx ebx, byte [ebp + ebx]
cmp edx, edi
ja 0x5245b3
jmp 0x5247fc
lea ecx, [esp + 0x90]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.0044d0d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x20], ecx
lea edi, [esp + 0xf4]
mov edx, eax
xor eax, eax
call fcn.0045f5e4
lea eax, [0x5481b6]
mov dword [esp + 0xf4], eax
mov dword [esp + 0xf8], 4
mov eax, dword [esp + 0xe8]
mov dword [esp + 0xfc], eax
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x100], eax
lea eax, [0x547e1b]
mov dword [esp + 0x104], eax
mov dword [esp + 0x108], 1
mov ecx, dword [esp + 0xd0]
mov dword [esp + 0x10c], ecx
mov ecx, dword [esp + 0x24]
mov dword [esp + 0x110], ecx
mov dword [esp + 0x114], eax
mov dword [esp + 0x118], 1
mov dword [esp + 0x11c], edx
mov eax, dword [esp + 0x20]
mov dword [esp + 0x120], eax
lea eax, [esp + 0x50]
mov dword [esp], eax
lea eax, [esp + 0xf4]
mov dword [esp + 4], eax
mov dword [esp + 8], 6
mov dword [esp + 0xc], 6
call fcn.0044cc00
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x70]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0044d230
mov eax, dword [esp + 0xc]
mov dword [esp + 0xd4], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x34], ecx
lea edx, [0x535200]
mov dword [esp], edx
shl ecx, 1
mov dword [esp + 0x28], ecx
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
call fcn.00447510
mov eax, dword [esp + 0xc]
nop
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x28]
mov ebx, dword [esp + 0xd4]
xor ebp, ebp
xor esi, esi
jmp 0x524771
mov byte [esi + eax + 1], bl
mov edi, dword [esp + 0x4c]
lea ebp, [edi + 1]
add esi, 2
mov ebx, dword [esp + 0xd4]
cmp ebp, ecx
jge 0x5247b9
movzx edi, byte [ebp + ebx]
xchg edi, eax
mov byte [esp + 0x1d], al
xchg edi, eax
xchg edi, eax
shr al, 4
xchg edi, eax
xchg edi, eax
movzx eax, al
xchg edi, eax
lea ebx, [0x54a82a]
movzx edi, byte [edi + ebx]
cmp esi, edx
jae 0x5247f3
mov dword [esp + 0x4c], ebp
xchg edi, ebx
mov byte [eax + esi], bl
xchg edi, ebx
lea edi, [esi + 1]
movzx ebp, byte [esp + 0x1d]
and ebp, 0xf
movzx ebx, byte [ebp + ebx]
cmp edx, edi
ja 0x52475c
jmp 0x5247ea
mov dword [esp], 0
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.0044d0d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x128], eax
mov dword [esp + 0x12c], ecx
add esp, 0x124
ret
mov eax, edi
mov ecx, edx
call fcn.0045f450
mov eax, esi
mov ecx, edx
call fcn.0045f450
mov eax, edi
mov ecx, edx
call fcn.0045f450
mov eax, esi
mov ecx, edx
call fcn.0045f450
mov eax, edi
mov ecx, edx
call fcn.0045f450
mov eax, esi
mov ecx, edx
call fcn.0045f450
nop
call fcn.0045e000
jmp fcn.00524270