Function at 0x401000
Capabilities:
Allocate thread local storage

Disassembly:
push 0x1ec
push 0
push 0x432438
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleW
mov dword [0x43243c], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x432438], eax
call section..text
mov eax, 0x43035c
mov dword [0x4324c4], eax
call fcn.00415793
call fcn.00428860
call fcn.00427c91
call fcn.004279a0
call fcn.00425db0
call fcn.00423eec
call fcn.00423790
call fcn.00422fef
call fcn.00422644
call fcn.00422416
call fcn.0042233d
call fcn.004220b8
call fcn.0042185b
call fcn.0042118b
call fcn.00420c70
call fcn.0041ff92
call fcn.0041e3c7
call fcn.00418b4c
call fcn.00418899
call fcn.004184f3
call fcn.004176c0
call fcn.00416c31
call fcn.00416519
call fcn.00415bdc
call fcn.004158f6
mov dword [0x4325d8], 0x302
mov dword [0x4324e8], 0x208
mov dword [0x4324b0], 0
push edx
call fcn.004288b0
pop edx
push eax
push 0x25
call fcn.00409b75
push 0x4324f0
call fcn.004288f0
push edx
call fcn.004288b0
pop edx
push eax
push 0x24
call fcn.00409b75
push 0x4325ac
call fcn.004288f0
mov edx, dword [0x4324f0]
push edx
call fcn.004288b0
pop edx
push eax
push edx
call fcn.00428980
lea eax, [0x432494]
push 2
push eax
call fcn.004289e0
push edx
call fcn.004288b0
pop edx
push eax
push edx
call fcn.004288b0
pop edx
push eax
call fcn.0042011e
mov edx, str.EasyWinSetupWimGAPI.log
push edx
call fcn.00428980
push 0x4325f4
call fcn.004288f0
push edx
call fcn.004288b0
pop edx
push eax
push edx
call fcn.004288b0
pop edx
push eax
push edx
call fcn.004288b0
pop edx
push eax
push edx
call fcn.004288b0
pop edx
push eax
call fcn.00416c60
call fcn.004153e2
add dword [esp], edx
call fcn.00420159
mov edx, str.EWS_xSET.ini
push edx
call fcn.00428980
push 0x4324bc
call fcn.004288f0
mov byte [0x432604], 0
mov byte [0x432607], 0
mov byte [0x432600], 0
mov byte [0x432602], 0
mov byte [0x432608], 0
mov byte [0x432603], 0
mov dword [0x432460], 0
mov byte [0x432606], 3
mov byte [0x432601], 0
mov byte [0x432605], 0
mov word [0x4325fc], 0xffff
mov dword [0x4324dc], 0
mov edx, str.Consolas
lea ecx, [0x432558]
call fcn.00415068
mov word [0x4325fe], 0xfff5
mov dword [0x4324ec], 0
mov dword [0x432448], 0
mov dword [0x432578], 0
mov dword [0x432470], 0
mov dword [0x4325d4], 0
mov dword [0x4324a0], 0
push 0x43260c
push 0
push 0xa
push 3
push 0x208
call fcn.004220e1
push 0x432614
push 0x430300
push 8
push 3
push 4
call fcn.004220e1
mov ebp, dword [0x43260c]
lea eax, [ebp]
mov edx, 0x42c02e
push edx
push 0x104
push eax
call fcn.00428a20
lea eax, [ebp + 0x208]
mov edx, 0x42c02e
push edx
push 0x104
push eax
call fcn.00428a20
mov ebp, dword [0x432614]
mov edx, 0x42c02e
lea ecx, [ebp]
call fcn.00415068
mov edx, 0x42c02e
lea ecx, [ebp + 4]
call fcn.00415068
push 8
push 0x430300
lea eax, [0x43261c]
push eax
push 4
call fcn.00422663
mov dword [0x43250c], 0xffffffff
push 0x73
push 0xd7
push 0x96
call fcn.00422349
mov dword [0x432508], eax
push 0xb4
push 0x5a
push 0x73
call fcn.00422349
mov dword [0x4325a8], eax
mov dword [0x4325a0], 0xffffffff
mov dword [0x432520], 0xffffffff
push 0xdf
push 0xe8
push 0xe1
call fcn.00422349
mov dword [0x43251c], eax
mov dword [0x432554], 0xffffffff
mov dword [0x432550], 0xc0fecb
mov dword [0x432458], 0xffffffff
push 0xdc
push 0xe1
push 0xe1
call fcn.00422349
mov dword [0x432450], eax
mov dword [0x43252c], 0xffffffff
push 0xe1
push 0xfe
push 0xfe
call fcn.00422349
mov dword [0x432524], eax
mov dword [0x432548], 0xffffffff
push 0xe1
push 0xfe
push 0xfe
call fcn.00422349
mov dword [0x432544], eax
mov dword [0x4324d0], 0xffffffff
push 0xe0
push 0xf5
push 0xfe
call fcn.00422349
mov dword [0x4324cc], eax
mov dword [0x432484], 0xffffffff
push 0xf6
push 0xfa
push 0xfb
call fcn.00422349
mov dword [0x43247c], eax
mov edx, 0x42c02e
lea ecx, [0x4325c0]
call fcn.00415068
mov edx, dword [0x4325c0]
push edx
call fcn.004288b0
pop edx
push eax
push edx
call fcn.00428980
mov edx, str.EasyWinSetup___20H1_ADK___WimGAPI_v
push edx
call fcn.00428980
push edx
call fcn.004288b0
pop edx
push eax
push 0
push 0x40
mov edx, dword [0x4324f0]
push edx
call fcn.004288b0
pop edx
push eax
push edx
call fcn.00428980
mov edx, str.wimgapi.dll
push edx
call fcn.00428980
call fcn.004153e2
add dword [esp], edx
call fcn.0040ec8b
pop eax
push 0x4325c0
call fcn.004288f0
call fcn.00410e96
push dword [0x4325c0]
mov eax, str.EasyWinSetupA222BF37_F016_4763_9C46_A95167A9BBBA
push eax
call fcn.0040a975
call fcn.0040a04c
push dword [0x4324e8]
push dword [0x4325d8]
push 0
push 0
call fcn.0040cc10
mov dword [0x4324a0], eax
mov ebx, dword [0x4324a0]
and ebx, ebx
jne 0x4014fe
call fcn.00407077
call fcn.0040f297
call fcn.00405086
movsx ebx, byte [0x432606]
cmp ebx, 2
jge 0x401521
movsx eax, byte [0x432606]
push eax
call fcn.00404dc1
push dword [0x4324a0]
jmp 0x40152e
call 0x401548
call fcn.00428890
push dword [0x432438]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess
call fcn.004158b4
call fcn.004176ae
call fcn.0041888d
call fcn.00418af6
call fcn.0041e3a4
call fcn.0041ff91
call fcn.004201d8
call fcn.00420c60
call fcn.0042116d
call fcn.0042240a
call fcn.00422fee
call fcn.00425dd0
call fcn.00427d1f
call fcn.00427e64
call fcn.00427990
ret