Function at 0x401000
Capabilities:
Allocate thread local storage

Disassembly:
push 0x1ec
push 0
push 0x43245c
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleW
mov dword [0x432460], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x43245c], eax
call section..text
mov eax, 0x43035c
mov dword [0x4324e8], eax
call fcn.004157a3
call fcn.00428870
call fcn.00427ca1
call fcn.004279b0
call fcn.00425dc0
call fcn.00423efc
call fcn.004237a0
call fcn.00422fff
call fcn.00422654
call fcn.00422426
call fcn.0042234d
call fcn.004220c8
call fcn.0042186b
call fcn.0042119b
call fcn.00420c80
call fcn.0041ffa2
call fcn.0041e3d7
call fcn.00418b5c
call fcn.004188a9
call fcn.00418503
call fcn.004176d0
call fcn.00416c41
call fcn.00416529
call fcn.00415bec
call fcn.00415906
mov dword [0x4325fc], 0x302
mov dword [0x43250c], 0x208
mov dword [0x4324d4], 0
push edx
call fcn.004288c0
pop edx
push eax
push 0x25
call fcn.00409b75
push 0x432514
call fcn.00428900
push edx
call fcn.004288c0
pop edx
push eax
push 0x24
call fcn.00409b75
push 0x4325d0
call fcn.00428900
mov edx, dword [0x432514]
push edx
call fcn.004288c0
pop edx
push eax
push edx
call fcn.00428990
lea eax, [0x4324b8]
push 2
push eax
call fcn.004289f0
push edx
call fcn.004288c0
pop edx
push eax
push edx
call fcn.004288c0
pop edx
push eax
call fcn.0042012e
mov edx, str.EasyWinSetupWimGAPI.log
push edx
call fcn.00428990
push 0x432618
call fcn.00428900
push edx
call fcn.004288c0
pop edx
push eax
push edx
call fcn.004288c0
pop edx
push eax
push edx
call fcn.004288c0
pop edx
push eax
push edx
call fcn.004288c0
pop edx
push eax
call fcn.00416c70
call fcn.004153f2
add dword [esp], edx
call fcn.00420169
mov edx, str.EWS_xSET.ini
push edx
call fcn.00428990
push 0x4324e0
call fcn.00428900
mov byte [0x432628], 0
mov byte [0x43262b], 0
mov byte [0x432624], 0
mov byte [0x432626], 0
mov byte [0x43262c], 0
mov byte [0x432627], 0
mov dword [0x432484], 0
mov byte [0x43262a], 3
mov byte [0x432625], 0
mov byte [0x432629], 0
mov word [0x432620], 0xffff
mov dword [0x432500], 0
mov edx, str.Consolas
lea ecx, [0x43257c]
call fcn.00415068
mov word [0x432622], 0xfff5
mov dword [0x432510], 0
mov dword [0x43246c], 0
mov dword [0x43259c], 0
mov dword [0x432494], 0
mov dword [0x4325f8], 0
mov dword [0x4324c4], 0
push 0x432630
push 0
push 0xa
push 3
push 0x208
call fcn.004220f1
push 0x432638
push 0x430300
push 8
push 3
push 4
call fcn.004220f1
mov ebp, dword [0x432630]
lea eax, [ebp]
mov edx, 0x42c02e
push edx
push 0x104
push eax
call fcn.00428a30
lea eax, [ebp + 0x208]
mov edx, 0x42c02e
push edx
push 0x104
push eax
call fcn.00428a30
mov ebp, dword [0x432638]
mov edx, 0x42c02e
lea ecx, [ebp]
call fcn.00415068
mov edx, 0x42c02e
lea ecx, [ebp + 4]
call fcn.00415068
push 8
push 0x430300
lea eax, [0x432640]
push eax
push 4
call fcn.00422673
mov dword [0x432530], 0xffffffff
push 0x73
push 0xd7
push 0x96
call fcn.00422359
mov dword [0x43252c], eax
push 0xb4
push 0x5a
push 0x73
call fcn.00422359
mov dword [0x4325cc], eax
mov dword [0x4325c4], 0xffffffff
mov dword [0x432544], 0xffffffff
push 0xdf
push 0xe8
push 0xe1
call fcn.00422359
mov dword [0x432540], eax
mov dword [0x432578], 0xffffffff
mov dword [0x432574], 0xc0fecb
mov dword [0x43247c], 0xffffffff
push 0xdc
push 0xe1
push 0xe1
call fcn.00422359
mov dword [0x432474], eax
mov dword [0x432550], 0xffffffff
push 0xe1
push 0xfe
push 0xfe
call fcn.00422359
mov dword [0x432548], eax
mov dword [0x43256c], 0xffffffff
push 0xe1
push 0xfe
push 0xfe
call fcn.00422359
mov dword [0x432568], eax
mov dword [0x4324f4], 0xffffffff
push 0xe0
push 0xf5
push 0xfe
call fcn.00422359
mov dword [0x4324f0], eax
mov dword [0x4324a8], 0xffffffff
push 0xf6
push 0xfa
push 0xfb
call fcn.00422359
mov dword [0x4324a0], eax
mov edx, 0x42c02e
lea ecx, [0x4325e4]
call fcn.00415068
mov edx, dword [0x4325e4]
push edx
call fcn.004288c0
pop edx
push eax
push edx
call fcn.00428990
mov edx, str.EasyWinSetup___20H1_ADK___WimGAPI_v
push edx
call fcn.00428990
push edx
call fcn.004288c0
pop edx
push eax
push 0
push 0x40
mov edx, dword [0x432514]
push edx
call fcn.004288c0
pop edx
push eax
push edx
call fcn.00428990
mov edx, str.wimgapi.dll
push edx
call fcn.00428990
call fcn.004153f2
add dword [esp], edx
call fcn.0040ecdf
pop eax
push 0x4325e4
call fcn.00428900
call fcn.00410eea
push dword [0x4325e4]
mov eax, str.EasyWinSetupA222BF37_F016_4763_9C46_A95167A9BBBA
push eax
call fcn.0040a9c9
call fcn.0040a0a0
push dword [0x43250c]
push dword [0x4325fc]
push 0
push 0
call fcn.0040cc64
mov dword [0x4324c4], eax
mov ebx, dword [0x4324c4]
and ebx, ebx
jne 0x4014fe
call fcn.00407077
call fcn.0040f2eb
call fcn.00405086
movsx ebx, byte [0x43262a]
cmp ebx, 2
jge 0x401521
movsx eax, byte [0x43262a]
push eax
call fcn.00404dc1
push dword [0x4324c4]
jmp 0x40152e
call 0x401548
call fcn.004288a0
push dword [0x43245c]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess
call fcn.004158c4
call fcn.004176be
call fcn.0041889d
call fcn.00418b06
call fcn.0041e3b4
call fcn.0041ffa1
call fcn.004201e8
call fcn.00420c70
call fcn.0042117d
call fcn.0042241a
call fcn.00422ffe
call fcn.00425de0
call fcn.00427d2f
call fcn.00427e74
call fcn.004279a0
ret