Function at 0x431d01
Capabilities:
Create thread

Disassembly:
push 0x28c
mov eax, 0x52a8be
call fcn.004e27d2
push 0x208
xor ebx, ebx
lea eax, [ebp - 0x21c]
push ebx
push eax
call fcn.004fb430
add esp, 0xc
lea eax, [ebp - 0x21c]
push 0x104
push eax
push ebx
call dword [sym.imp.KERNEL32.DLL_GetModuleFileNameW]
lea edx, [ebp - 0x21c]
lea ecx, [ebp - 0x234]
call fcn.0042e319
push eax
mov ecx, 0x5791c4
call fcn.00409bd9
push ebx
push 1
lea ecx, [ebp - 0x234]
call fcn.0040c02b
lea eax, [ebp - 0x21c]
push eax
lea ecx, [ebp - 0x294]
call fcn.004099b0
mov esi, 0x559cf0
mov dword [ebp - 4], ebx
push esi
call fcn.00401963
pop ecx
push eax
push ecx
push esi
lea ecx, [ebp - 0x294]
call fcn.0042681d
push 0xffffffffffffffff
inc eax
lea ecx, [ebp - 0x294]
push eax
lea eax, [ebp - 0x27c]
push eax
call fcn.00402170
mov esi, 0x55accc
mov byte [ebp - 4], 1
push esi
call fcn.00401963
pop ecx
push eax
push ecx
push esi
lea ecx, [ebp - 0x27c]
call fcn.0042681d
mov esi, eax
cmp esi, 0xffffffff
je 0x431e2d
mov edi, 0x555e8c
push edi
call fcn.00401963
pop ecx
push eax
push ecx
push edi
lea ecx, [ebp - 0x27c]
call fcn.0042681d
cmp eax, 0xffffffff
je 0x431e2d
sub esp, 0x18
sub eax, esi
mov ecx, esp
dec eax
push eax
lea eax, [esi + 1]
push eax
push ecx
lea ecx, [ebp - 0x27c]
call fcn.00402170
lea ecx, [ebp - 0x234]
call fcn.0042de96
add esp, 0x18
mov ecx, 0x579194
push eax
call fcn.00409bd9
push ebx
push 1
lea ecx, [ebp - 0x234]
call fcn.0040c02b
call fcn.0042d6c5
and dword [ebp - 0x298], 0
lea edx, [ebp - 0x298]
lea ecx, [ebp - 0x24c]
mov esi, eax
call fcn.0042c93c
mov edx, str._32bit
mov byte [ebp - 4], 2
test esi, esi
mov ecx, str._64bit
cmove ecx, edx
push ecx
push eax
lea eax, [ebp - 0x234]
push eax
call fcn.00412cab
add esp, 0xc
mov ecx, 0x5791ac
push eax
call fcn.00409bd9
push ebx
push 1
lea ecx, [ebp - 0x234]
call fcn.0040c02b
push ebx
push 1
lea ecx, [ebp - 0x24c]
mov byte [ebp - 4], 1
call fcn.0040c02b
lea ecx, [ebp - 0x264]
call fcn.0042cbce
mov esi, 0x55e188
mov byte [ebp - 4], 3
push esi
call fcn.00402ce5
pop ecx
push eax
push ebx
push esi
lea ecx, [ebp - 0x264]
call fcn.0040c0b4
mov esi, eax
cmp esi, 0xffffffff
jne 0x431ef8
mov esi, str.Unknown
push esi
call fcn.00402ce5
pop ecx
push eax
push esi
mov ecx, 0x579164
call fcn.0040c552
push esi
call fcn.00402ce5
pop ecx
push eax
push esi
mov ecx, 0x57914c
call fcn.0040c552
jmp 0x431f56
push esi
push ebx
lea eax, [ebp - 0x24c]
push eax
lea ecx, [ebp - 0x264]
call fcn.00409a0f
push eax
mov ecx, 0x57914c
call fcn.00409bd9
push ebx
push 1
lea ecx, [ebp - 0x24c]
call fcn.0040c02b
push 0xffffffffffffffff
lea eax, [esi + 1]
push eax
lea eax, [ebp - 0x24c]
push eax
lea ecx, [ebp - 0x264]
call fcn.00409a0f
push eax
mov ecx, 0x579164
call fcn.00409bd9
push ebx
push 1
lea ecx, [ebp - 0x24c]
call fcn.0040c02b
xor eax, eax
mov word [0x57fc1c], bx
inc eax
mov dword [0x57ee04], ebx
mov byte [0x57ee09], al
mov dword [0x57fc20], eax
mov dword [0x57fc24], eax
call sym.Setup.exe_CreateExportObj
cmp dword [0x57ee40], 0
mov esi, dword [sym.imp.KERNEL32.DLL_CreateEventW]
mov dword [0x57ee44], eax
jne 0x431f9f
push str.UserLogGA4Mutex
push 1
push 1
push ebx
call esi
mov dword [0x57ee40], eax
cmp dword [0x57ee0c], 0
jne 0x431fb9
push str.UserLogFunnelMutex
push 1
push 1
push ebx
call esi
mov dword [0x57ee0c], eax
call fcn.0043002b
mov esi, 0x57fc1c
test al, al
jne 0x431fdc
push ebx
push ebx
push esi
push 0x4327fb
push ebx
push ebx
call dword [sym.imp.KERNEL32.DLL_CreateThread]
mov dword [0x57ee10], eax
push ebx
push 1
lea ecx, [ebp - 0x264]
call fcn.0040c02b
push ebx
push 1
lea ecx, [ebp - 0x27c]
call fcn.00402226
push ebx
push 1
lea ecx, [ebp - 0x294]
call fcn.00402226
mov eax, esi
call fcn.004e277c
ret