Function at 0x401000
Capabilities:
Allocate thread local storage

Disassembly:
push 0x1dc
push 0
push 0x4306b4
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleW
mov dword [0x4306b8], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x4306b4], eax
call section..text
mov eax, 0x42e6fc
mov dword [0x43073c], eax
call fcn.00414703
call fcn.00427050
call fcn.00426481
call fcn.00426190
call fcn.004247c0
call fcn.004228fc
call fcn.004221a0
call fcn.004219d5
call fcn.00420fec
call fcn.00420dbe
call fcn.00420cbd
call fcn.00420a38
call fcn.004201db
call fcn.0041fb0b
call fcn.0041ee9a
call fcn.0041d2c6
call fcn.00417a74
call fcn.004177c9
call fcn.0041748d
call fcn.0041665a
call fcn.00415b8e
call fcn.00415489
call fcn.00414b4c
call fcn.00414866
mov dword [0x430848], 0x302
mov dword [0x430760], 0x1fe
mov dword [0x430728], 0
push edx
call fcn.004270a0
pop edx
push eax
push edx
call fcn.004270a0
pop edx
push eax
mov eax, str.SYSTEMROOT
push eax
call fcn.00415bbd
push 0x430784
call fcn.004270e0
push edx
call fcn.004270a0
pop edx
push eax
push edx
call fcn.004270a0
pop edx
push eax
mov eax, str.SYSTEMDRIVE
push eax
call fcn.00415bbd
lea eax, [0x43070c]
push 2
push eax
call fcn.00427170
push edx
call fcn.004270a0
pop edx
push eax
push edx
call fcn.004270a0
pop edx
push eax
call fcn.0041f026
mov edx, str.EasyWinSetupWimGAPI.log
push edx
call fcn.004271e0
push 0x430860
call fcn.004270e0
push edx
call fcn.004270a0
pop edx
push eax
push edx
call fcn.004270a0
pop edx
push eax
push edx
call fcn.004270a0
pop edx
push eax
push edx
call fcn.004270a0
pop edx
push eax
call fcn.00415bfa
call fcn.00414362
add dword [esp], edx
call fcn.0041f089
mov edx, str.EWS_xSET.ini
push edx
call fcn.004271e0
push 0x430734
call fcn.004270e0
mov byte [0x430870], 0
mov byte [0x430873], 0
mov byte [0x43086c], 0
mov byte [0x43086e], 0
mov byte [0x430874], 0
mov byte [0x43086f], 0
mov dword [0x4306dc], 0
mov byte [0x430872], 3
mov byte [0x43086d], 0
mov byte [0x430871], 0
mov word [0x430868], 0xffff
mov dword [0x430754], 0
mov edx, str.Consolas
lea ecx, [0x4307cc]
call fcn.00414068
mov word [0x43086a], 0xfff5
mov dword [0x430764], 0
mov dword [0x4306c4], 0
mov dword [0x4307ec], 0
mov dword [0x4306e8], 0
mov dword [0x430844], 0
mov dword [0x430718], 0
push 0x430878
push 0
push 0xa
push 3
push 0x208
call fcn.00420a61
push 0x430880
push 0x42e6a0
push 8
push 3
push 4
call fcn.00420a61
mov ebp, dword [0x430878]
lea eax, [ebp]
mov edx, 0x42b02e
push edx
push 0x104
push eax
call fcn.004271b0
lea eax, [ebp + 0x208]
mov edx, 0x42b02e
push edx
push 0x104
push eax
call fcn.004271b0
mov ebp, dword [0x430880]
mov edx, 0x42b02e
lea ecx, [ebp]
call fcn.00414068
mov edx, 0x42b02e
lea ecx, [ebp + 4]
call fcn.00414068
push 8
push 0x42e6a0
lea eax, [0x430888]
push eax
push 4
call fcn.0042100b
mov dword [0x43077c], 0xffffffff
push 0x73
push 0xd7
push 0x96
call fcn.00420cc9
mov dword [0x430778], eax
push 0xb4
push 0x5a
push 0x73
call fcn.00420cc9
mov dword [0x43081c], eax
mov dword [0x430814], 0xffffffff
mov dword [0x430794], 0xffffffff
push 0xdf
push 0xe8
push 0xe1
call fcn.00420cc9
mov dword [0x430790], eax
mov dword [0x4307c8], 0xffffffff
mov dword [0x4307c4], 0xc0fecb
mov dword [0x4306d4], 0xffffffff
push 0xdc
push 0xe1
push 0xe1
call fcn.00420cc9
mov dword [0x4306cc], eax
mov dword [0x4307a0], 0xffffffff
push 0xe1
push 0xfe
push 0xfe
call fcn.00420cc9
mov dword [0x430798], eax
mov dword [0x4307bc], 0xffffffff
push 0xe1
push 0xfe
push 0xfe
call fcn.00420cc9
mov dword [0x4307b8], eax
mov dword [0x430748], 0xffffffff
push 0xe0
push 0xf5
push 0xfe
call fcn.00420cc9
mov dword [0x430744], eax
mov dword [0x4306fc], 0xffffffff
push 0xf6
push 0xfa
push 0xfb
call fcn.00420cc9
mov dword [0x4306f4], eax
mov edx, 0x42b02e
lea ecx, [0x430830]
call fcn.00414068
mov edx, dword [0x430830]
push edx
call fcn.004270a0
pop edx
push eax
push edx
call fcn.004271e0
mov edx, str.EasyWinSetup___20H1_ADK___WimGAPI_v
push edx
call fcn.004271e0
push edx
call fcn.004270a0
pop edx
push eax
push 0
push 1
mov edx, dword [0x430784]
push edx
call fcn.004270a0
pop edx
push eax
push edx
call fcn.004271e0
mov edx, 0x42dd54
push edx
call fcn.004271e0
call fcn.00414362
add dword [esp], edx
call fcn.0040edf8
pop eax
push 0x430830
call fcn.004270e0
call fcn.0041102d
push dword [0x430830]
mov eax, str.EasyWinSetupA222BF37_F016_4763_9C46_A95167A9BBBA
push eax
call fcn.004096ea
call fcn.00408dc1
push dword [0x430760]
push dword [0x430848]
push 0
push 0
call fcn.0040ce92
mov dword [0x430718], eax
mov ebx, dword [0x430718]
and ebx, ebx
jne 0x4014ed
call fcn.00406587
call fcn.0040f41f
call fcn.00404ade
movsx ebx, byte [0x430872]
cmp ebx, 2
jge 0x401510
movsx eax, byte [0x430872]
push eax
call fcn.00404819
push dword [0x430718]
jmp 0x40151d
call 0x401537
call fcn.00427080
push dword [0x4306b4]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess
call fcn.00414824
call fcn.00416648
call fcn.004177bd
call fcn.00417a1e
call fcn.0041d2a3
call fcn.0041ee89
call fcn.0041f108
call fcn.0041faed
call fcn.00420db2
call fcn.004219c8
call fcn.004247e0
call fcn.0042650f
call fcn.00426654
call fcn.00426180
ret