Function at 0x4316e8
Capabilities:
Create thread

Disassembly:
push 0x28c
mov eax, 0x52c12f
call fcn.004e41bf
push 0x208
xor ebx, ebx
lea eax, [ebp - 0x21c]
push ebx
push eax
call fcn.004fce20
add esp, 0xc
lea eax, [ebp - 0x21c]
push 0x104
push eax
push ebx
call dword [sym.imp.KERNEL32.DLL_GetModuleFileNameW]
lea edx, [ebp - 0x21c]
lea ecx, [ebp - 0x234]
call fcn.0042dd0c
push eax
mov ecx, 0x57b1f4
call fcn.00409b66
push ebx
push 1
lea ecx, [ebp - 0x234]
call fcn.0040bfcb
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x294]
call fcn.0040996a
mov esi, 0x55bd28
mov dword [ebp - 4], ebx
push esi
call fcn.00401903
pop ecx
push eax
push ecx
push esi
lea ecx, [ebp - 0x294]
call fcn.0042625d
push 0xffffffffffffffff
inc eax
lea ecx, [ebp - 0x294]
push eax
lea eax, [ebp - 0x27c]
push eax
call fcn.00402110
mov esi, 0x55cd04
mov byte [ebp - 4], 1
push esi
call fcn.00401903
pop ecx
push eax
push ecx
push esi
lea ecx, [ebp - 0x27c]
call fcn.0042625d
mov esi, eax
cmp esi, 0xffffffff
je 0x431814
mov edi, 0x557ec4
push edi
call fcn.00401903
pop ecx
push eax
push ecx
push edi
lea ecx, [ebp - 0x27c]
call fcn.0042625d
cmp eax, 0xffffffff
je 0x431814
sub esp, 0x18
sub eax, esi
mov ecx, esp
dec eax
push eax
lea eax, [esi + 1]
push eax
push ecx
lea ecx, [ebp - 0x27c]
call fcn.00402110
lea ecx, [ebp - 0x234]
call fcn.0042d890
add esp, 0x18
mov ecx, 0x57b1c4
push eax
call fcn.00409b66
push ebx
push 1
lea ecx, [ebp - 0x234]
call fcn.0040bfcb
call fcn.0042d0bf
and dword [ebp - 0x298], 0
lea edx, [ebp - 0x298]
lea ecx, [ebp - 0x24c]
mov esi, eax
call fcn.0042c339
mov edx, str._32bit
mov byte [ebp - 4], 2
test esi, esi
mov ecx, str._64bit
cmove ecx, edx
mov edx, eax
push ecx
lea ecx, [ebp - 0x234]
call fcn.00412c28
pop ecx
push eax
mov ecx, 0x57b1dc
call fcn.00409b66
push ebx
push 1
lea ecx, [ebp - 0x234]
call fcn.0040bfcb
push ebx
push 1
lea ecx, [ebp - 0x24c]
mov byte [ebp - 4], 1
call fcn.0040bfcb
lea ecx, [ebp - 0x264]
call fcn.0042c5cc
mov esi, 0x560058
mov byte [ebp - 4], 3
push esi
call fcn.00402c84
pop ecx
push eax
push ebx
push esi
lea ecx, [ebp - 0x264]
call fcn.0040c054
mov esi, eax
cmp esi, 0xffffffff
jne 0x4318dd
mov esi, str.Unknown
push esi
call fcn.00402c84
pop ecx
push eax
push esi
mov ecx, 0x57b194
call fcn.0040c4f2
push esi
call fcn.00402c84
pop ecx
push eax
push esi
mov ecx, 0x57b17c
call fcn.0040c4f2
jmp 0x43193b
push esi
push ebx
lea eax, [ebp - 0x24c]
push eax
lea ecx, [ebp - 0x264]
call fcn.004099c9
push eax
mov ecx, 0x57b17c
call fcn.00409b66
push ebx
push 1
lea ecx, [ebp - 0x24c]
call fcn.0040bfcb
push 0xffffffffffffffff
lea eax, [esi + 1]
push eax
lea eax, [ebp - 0x24c]
push eax
lea ecx, [ebp - 0x264]
call fcn.004099c9
push eax
mov ecx, 0x57b194
call fcn.00409b66
push ebx
push 1
lea ecx, [ebp - 0x24c]
call fcn.0040bfcb
xor eax, eax
mov word [0x581c24], bx
inc eax
mov dword [0x580e0c], ebx
mov byte [0x580e11], al
mov dword [0x581c28], eax
mov dword [0x581c2c], eax
call sym.Setup.exe_CreateExportObj
cmp dword [0x580e48], 0
mov esi, dword [sym.imp.KERNEL32.DLL_CreateEventW]
mov dword [0x580e4c], eax
jne 0x431984
push str.UserLogGA4Mutex
push 1
push 1
push ebx
call esi
mov dword [0x580e48], eax
cmp dword [0x580e14], 0
jne 0x43199e
push str.UserLogFunnelMutex
push 1
push 1
push ebx
call esi
mov dword [0x580e14], eax
call fcn.0042fa15
mov esi, 0x581c24
test al, al
jne 0x4319c1
push ebx
push ebx
push esi
push 0x4321d5
push ebx
push ebx
call dword [sym.imp.KERNEL32.DLL_CreateThread]
mov dword [0x580e18], eax
push ebx
push 1
lea ecx, [ebp - 0x264]
call fcn.0040bfcb
push ebx
push 1
lea ecx, [ebp - 0x27c]
call fcn.004021c6
push ebx
push 1
lea ecx, [ebp - 0x294]
call fcn.004021c6
mov eax, esi
call fcn.004e4169
ret