Function at 0x41a120
Capabilities:
Allocate thread local storage
Resolve function by parsing pe exports

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0xec
mov dword [esp], 0
call sub.KERNEL32.dll_GetModuleHandleW
sub esp, 4
mov dword [0x441c0c], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0x1000
mov dword [esp], 0
call sub.KERNEL32.dll_HeapCreate
sub esp, 0xc
mov dword [0x441c10], eax
call fcn.0041c6e9
call fcn.00431d20
call fcn.004315c0
call fcn.00430891
call fcn.0042edc0
call fcn.0042cefc
call fcn.0042c7a0
call fcn.0042bff2
call fcn.0042b78c
call fcn.0042b419
call fcn.0042b355
call fcn.0042b0bb
call fcn.0042a8d9
call fcn.0042a2e5
call fcn.0042a040
call fcn.00429344
call fcn.004283b3
call fcn.004260dd
call fcn.0041f236
call fcn.0041ed93
call fcn.0041e4a2
call fcn.0041dbaa
call fcn.0041d221
call fcn.0041ce53
call fcn.0041c7cb
mov dword [esp + 4], 0x441b94
mov dword [esp], str.DC1C5A9C_E88A_4dde_A5A1_60F82A20AEF7
call sub.ole32.dll_CLSIDFromString
sub esp, 8
mov dword [esp + 4], 0x441b80
mov dword [esp], str.d57c7288_d4ad_4768_be02_9d969532d960
call sub.ole32.dll_CLSIDFromString
sub esp, 8
mov dword [esp + 4], 0x441afc
mov dword [esp], str.43826d1e_e718_42ee_bc55_a1e261c37bfe
call sub.ole32.dll_CLSIDFromString
sub esp, 8
mov dword [esp + 4], 0x441b50
mov dword [esp], str.1CF2B120_547D_101B_8E65_08002B2BD119
call sub.ole32.dll_CLSIDFromString
sub esp, 8
mov dword [0x441bf0], 0
mov dword [0x441bf4], 0
mov dword [0x441be8], 0
mov dword [0x441bec], 0
mov dword [esp + 4], 0x441b70
mov dword [esp], str.00000000_0000_0000_0000_000000000000
call sub.ole32.dll_CLSIDFromString
sub esp, 8
mov dword [esp + 4], 0x441b3c
mov dword [esp], str.88d96a05_f192_11d4_a65f_0040963251e5
call sub.ole32.dll_CLSIDFromString
sub esp, 8
mov dword [esp + 4], 0x441b20
mov dword [esp], str.2933BF96_7B36_11d2_B20E_00C04F983E60
call sub.ole32.dll_CLSIDFromString
sub esp, 8
mov byte [0x441be4], 0
mov dword [esp + 4], str.WimgApi.dll
mov dword [esp], 0x441b38
call fcn.00431a20
sub esp, 8
mov dword [0x441b6c], 0
mov dword [0x441bc8], 0
mov dword [esp + 0xc], 8
mov dword [esp + 8], 0x43c020
mov dword [esp + 4], 0x441c20
mov dword [esp], 4
call fcn.0042b7ab
sub esp, 0x10
mov dword [esp + 0xc], 8
mov dword [esp + 8], 0x43c020
mov dword [esp + 4], 0x441c18
mov dword [esp], 4
call fcn.0042b7ab
sub esp, 0x10
mov dword [esp + 4], str.INDEX:R:
mov dword [esp], 0x441b10
call fcn.00431a20
sub esp, 8
mov dword [esp + 4], 0x43f0f8
mov eax, dword [0x441b10]
mov dword [esp], eax
call fcn.0042ffd0
sub esp, 8
add eax, 1
mov dword [0x441b60], eax
mov dword [esp + 4], str.NAME:L:
mov dword [esp], 0x441bd0
call fcn.00431a20
sub esp, 8
mov dword [esp + 4], 0x43f0f8
mov eax, dword [0x441bd0]
mov dword [esp], eax
call fcn.0042ffd0
sub esp, 8
add eax, 1
mov dword [0x441b18], eax
mov dword [esp + 4], str.HardwareDescription:L:
mov dword [esp], 0x441af8
call fcn.00431a20
sub esp, 8
mov dword [esp + 4], 0x43f0f8
mov eax, dword [0x441af8]
mov dword [esp], eax
call fcn.0042ffd0
sub esp, 8
add eax, 1
mov dword [0x441b4c], eax
call fcn.00431730
call fcn.00431730
call fcn.00431780
mov dword [esp + 4], eax
mov dword [esp], 0x24
call fcn.00401120
sub esp, 8
call fcn.00431780
mov dword [esp + 4], eax
mov dword [esp], 0x441b0c
call fcn.00431900
sub esp, 8
call fcn.00431730
call fcn.00431730
call fcn.00431780
mov dword [esp + 4], eax
mov dword [esp], 0x25
call fcn.00401120
sub esp, 8
call fcn.00431780
mov dword [esp + 4], eax
mov dword [esp], 0x441b90
call fcn.00431900
sub esp, 8
call fcn.00431730
mov eax, dword [0x441b0c]
mov dword [esp], eax
call fcn.00431990
sub esp, 4
call fcn.00431780
mov dword [esp + 8], eax
mov dword [esp + 4], 3
mov dword [esp], 0x441bb0
call fcn.00431b90
sub esp, 0xc
call fcn.00431730
mov eax, dword [0x441b90]
mov dword [esp], eax
call fcn.00431990
sub esp, 4
mov dword [esp], str.Shell32.dll
call fcn.00431990
sub esp, 4
call fcn.00431780
mov dword [esp + 4], eax
mov dword [esp], 0x441bcc
call fcn.00431900
sub esp, 8
call fcn.00431730
call fcn.00431730
call fcn.00431730
call fcn.00431730
call fcn.00431780
mov dword [esp], eax
call fcn.0041e414
sub esp, 4
call fcn.00431880
mov ebx, eax
call fcn.00431780
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.0042996b
sub esp, 8
mov dword [esp], str.x86libwim_15.dll
call fcn.00431990
sub esp, 4
call fcn.00431780
mov dword [esp + 4], eax
mov dword [esp], 0x441bd4
call fcn.00431900
sub esp, 8
call fcn.00431730
call fcn.00431730
call fcn.00431730
call fcn.00431730
call fcn.00431780
mov dword [esp], eax
call fcn.0041e414
sub esp, 4
call fcn.00431880
mov ebx, eax
call fcn.00431780
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.0042996b
sub esp, 8
mov dword [esp], str.Wiminfo.icl
call fcn.00431990
sub esp, 4
call fcn.00431780
mov dword [esp + 4], eax
mov dword [esp], 0x441bdc
call fcn.00431900
sub esp, 8
mov eax, dword [0x441bdc]
mov dword [esp], eax
call fcn.004294d0
sub esp, 4
not eax
not edx
or edx, eax
je 0x41ac10
mov dword [0x441b64], 0
mov dword [esp + 0x10], 0x441bfc
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0xa
mov dword [esp + 4], 3
mov dword [esp], 0x208
call fcn.0042b0e4
sub esp, 0x14
mov dword [esp + 0x10], 0x441bf8
mov dword [esp + 0xc], 0x43f868
mov dword [esp + 8], 8
mov dword [esp + 4], 3
mov dword [esp], 4
call fcn.0042b0e4
sub esp, 0x14
mov dword [esp + 8], 0x441c28
mov dword [esp + 4], 0x104
mov eax, dword [0x441bfc]
mov dword [esp], eax
call fcn.00431bd0
sub esp, 0xc
mov dword [esp + 8], 0x441c28
mov dword [esp + 4], 0x104
mov eax, dword [0x441bfc]
add eax, 0x208
mov dword [esp], eax
call fcn.00431bd0
sub esp, 0xc
mov dword [esp + 4], 0x441c28
mov eax, dword [0x441bf8]
mov dword [esp], eax
call fcn.00431a20
sub esp, 8
mov dword [esp + 4], 0x441c28
mov eax, dword [0x441bf8]
add eax, 4
mov dword [esp], eax
call fcn.00431a20
sub esp, 8
mov dword [esp + 0x5c], str.5b6748d6_2392_4836_ae12_642e90f59183
call fcn.00431690
mov eax, dword [esp + 0x5c]
mov dword [esp + 4], eax
lea eax, [esp + 0x5c]
mov dword [esp], eax
call fcn.00431ad0
sub esp, 8
mov eax, dword [esp + 0x5c]
mov dword [esp + 8], eax
mov dword [esp + 4], 0
mov dword [esp], 0
call sub.KERNEL32.dll_CreateMutexW
sub esp, 0xc
mov ebx, eax
call sub.KERNEL32.dll_GetLastError
test ebx, ebx
je 0x41a6d3
cmp eax, 0xb7
je 0x41ac48
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
call fcn.004319f0
sub esp, 4
call fcn.00431730
call fcn.00431730
call fcn.00431730
call fcn.00431780
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x43e150
mov dword [esp + 4], str.SoftwareWimInfoREG
mov dword [esp], SysReAllocString
call fcn.0040dbd0
sub esp, 0x10
call fcn.00431880
mov dword [esp], eax
call fcn.0042f1f0
sub esp, 4
mov ebp, eax
call fcn.004317e0
call fcn.00431730
call fcn.00431730
call fcn.00431730
call fcn.00431780
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x43e05c
mov dword [esp + 4], str.SoftwareWimInfoREG
mov dword [esp], SysReAllocString
call fcn.0040dbd0
sub esp, 0x10
call fcn.00431880
mov dword [esp], eax
call fcn.0042f1f0
sub esp, 4
mov ebx, eax
call fcn.004317e0
call fcn.00431730
call fcn.00431730
call fcn.00431730
call fcn.00431780
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x43e04c
mov dword [esp + 4], str.SoftwareWimInfoREG
mov dword [esp], SysReAllocString
call fcn.0040dbd0
sub esp, 0x10
call fcn.00431880
mov dword [esp], eax
call fcn.0042f1f0
sub esp, 4
mov edi, eax
call fcn.004317e0
call fcn.00431730
call fcn.00431730
call fcn.00431730
call fcn.00431780
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x43e054
mov dword [esp + 4], str.SoftwareWimInfoREG
mov dword [esp], SysReAllocString
call fcn.0040dbd0
sub esp, 0x10
call fcn.00431880
mov dword [esp], eax
call fcn.0042f1f0
sub esp, 4
mov esi, eax
call fcn.004317e0
mov dword [esp + 0x24], ebp
call fcn.00431690
call fcn.00431690
mov dword [esp + 0x70], 0
mov dword [esp + 0x74], 0
mov dword [esp + 0x78], 0
mov dword [esp + 0x7c], 0
call sub.USER32.dll_GetDesktopWindow
lea edx, [esp + 0x70]
mov dword [esp + 4], edx
mov dword [esp], eax
call sub.USER32.dll_GetWindowRect
sub esp, 8
mov edx, dword [esp + 0x78]
mov ecx, dword [esp + 0x7c]
test esi, esi
setle al
mov ebp, eax
test edi, edi
setle al
or eax, ebp
lea ebp, [ebx + esi]
cmp ebp, edx
setg dl
or dl, al
jne 0x41a892
mov eax, dword [esp + 0x24]
lea edx, [eax + edi]
mov eax, 0x90cf0000
cmp edx, ecx
jle 0x41a8a8
mov eax, 0x90cf0001
mov dword [esp + 0x24], 0x258
mov ebx, 0x366
xor edi, edi
xor esi, esi
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], str.Wim_Info_v0.9.1.0_x86
mov eax, dword [esp + 0x24]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], ebx
mov dword [esp + 8], edi
mov dword [esp + 4], esi
mov dword [esp], 0
call fcn.00427f3b
sub esp, 0x1c
test eax, eax
jne 0x41ac70
call fcn.00431690
mov dword [esp + 0x58], 0
mov eax, dword [0x441b60]
mov dword [esp + 8], eax
mov eax, dword [0x441b10]
mov dword [esp + 4], eax
mov dword [esp], 3
call fcn.004019f0
sub esp, 0xc
mov eax, dword [0x441b18]
mov dword [esp + 8], eax
mov eax, dword [0x441bd0]
mov dword [esp + 4], eax
mov dword [esp], 4
call fcn.004019f0
sub esp, 0xc
mov dword [esp + 0xc], 1
mov eax, dword [0x441b60]
mov dword [esp + 8], eax
mov eax, dword [0x441b10]
mov dword [esp + 4], eax
mov dword [esp], 3
call fcn.0040d890
sub esp, 0x10
mov dword [esp + 0xc], 1
mov eax, dword [0x441b18]
mov dword [esp + 8], eax
mov eax, dword [0x441bd0]
mov dword [esp + 4], eax
mov dword [esp], 4
call fcn.0040d890
sub esp, 0x10
mov dword [esp], 1
call fcn.00401bf0
sub esp, 4
mov dword [esp], str.QueryCancelAutoPlay
call sub.USER32.dll_RegisterWindowMessageW
sub esp, 4
mov dword [0x441b64], eax
mov dword [esp + 4], 1
mov dword [esp], eax
call sub.USER32.dll_ChangeWindowMessageFilter
sub esp, 8
mov dword [esp + 4], 1
mov dword [esp], 0x233
call sub.USER32.dll_ChangeWindowMessageFilter
sub esp, 8
mov dword [esp + 4], 1
mov dword [esp], 0x4a
call sub.USER32.dll_ChangeWindowMessageFilter
sub esp, 8
mov dword [esp + 4], 1
mov dword [esp], 0x49
call sub.USER32.dll_ChangeWindowMessageFilter
sub esp, 8
mov dword [esp + 4], 0xffffffec
mov eax, dword [0x441af4]
mov dword [esp], eax
call sub.USER32.dll_GetWindowLongW
sub esp, 8
or eax, 0x10
mov dword [esp + 8], eax
mov dword [esp + 4], 0xffffffec
mov eax, dword [0x441af4]
mov dword [esp], eax
call sub.USER32.dll_SetWindowLongW
sub esp, 0xc
mov dword [esp + 4], 0
mov dword [esp], 0x401720
call fcn.004282c0
sub esp, 8
mov dword [esp + 4], 2
mov dword [esp], str.SeRestorePrivilege
call fcn.00404f50
sub esp, 8
mov dword [esp + 4], 2
mov dword [esp], str.SeBackupPrivilege
call fcn.00404f50
sub esp, 8
mov dword [esp], 5
call fcn.0041f65d
sub esp, 4
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x31
mov dword [esp], eax
call sub.USER32.dll_SendMessageW
sub esp, 0x10
mov dword [0x441be0], eax
call fcn.00431730
call fcn.00431730
call fcn.00431780
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.FontName
mov dword [esp + 4], str.SoftwareWimInfoREG
mov dword [esp], SysReAllocString
call fcn.0040dbd0
sub esp, 0x10
call fcn.00431780
mov dword [esp + 4], eax
lea eax, [esp + 0x58]
mov dword [esp], eax
call fcn.00431900
sub esp, 8
mov eax, dword [esp + 0x58]
mov dword [esp + 4], eax
mov dword [esp], 0x441c28
call fcn.00431b50
mov ebx, eax
test eax, eax
je 0x41b510
lea eax, [esp + 0x68]
mov dword [esp + 0x24], eax
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.0042857f
sub esp, 8
call fcn.00431690
mov dword [esp + 0x60], 0
mov dword [esp + 0x64], 0
mov dword [esp + 0x68], 0
mov dword [esp + 4], 0x441c28
lea esi, [esp + 0x60]
mov dword [esp], esi
call fcn.00431a20
sub esp, 8
mov dword [esp + 4], 0x441c28
lea edi, [esp + 0x64]
mov dword [esp], edi
call fcn.00431a20
sub esp, 8
mov dword [esp + 4], 0x441c28
mov eax, dword [esp + 0x24]
mov dword [esp], eax
call fcn.00431a20
sub esp, 8
xor ebx, ebx
lea esi, [esi]
call fcn.0041e636
cmp eax, ebx
jle 0x41b638
call fcn.00431730
mov eax, dword [esp + 0x64]
mov dword [esp], eax
call fcn.00431990
sub esp, 4
call fcn.00431730
call fcn.00431730
call fcn.00431780
mov dword [esp + 4], eax
mov dword [esp], ebx
call fcn.0041e64a
sub esp, 8
call fcn.00431780
mov dword [esp], 0x43f0f8
call fcn.00431990
sub esp, 4
call fcn.00431780
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.00431900
sub esp, 8
add ebx, 1
jmp 0x41aba0
call fcn.00431730
mov eax, dword [0x441bcc]
mov dword [esp], eax
call fcn.00431990
sub esp, 4
call fcn.00431780
mov dword [esp + 4], eax
mov dword [esp], 0x441bdc
call fcn.00431900
sub esp, 8
jmp 0x41a59a
mov dword [esp], ebx
call sub.KERNEL32.dll_CloseHandle
sub esp, 4
mov dword [0x441c14], 0xb7
call fcn.0041a0a0
mov dword [esp], 0
call fcn.00427f1f
sub esp, 4
mov dword [0x441af4], eax
mov dword [esp], eax
call sub.USER32.dll_GetDC
sub esp, 4
mov dword [0x441b34], eax
mov dword [esp + 4], 0x58
mov dword [esp], eax
call sub.GDI32.dll_GetDeviceCaps
sub esp, 8
mov dword [esp + 0x28], eax
fild dword [esp + 0x28]
fdiv dword [0x434398]
fstp dword [esp + 0x28]
fld dword [esp + 0x28]
fld st(0)
fstp qword [esp + 0x48]
mov dword [esp + 8], 2
fmul dword [0x4343a4]
fstp qword [esp]
call fcn.004315e0
sub esp, 0xc
fstp qword [esp + 0x68]
fld qword [esp + 0x68]
fistp qword [esp + 0x80]
mov esi, dword [esp + 0x80]
mov dword [esp + 8], esi
mov dword [esp + 4], 0xffffffd2
mov eax, dword [0x441bdc]
mov dword [esp], eax
call fcn.00401550
sub esp, 0xc
mov edi, eax
mov dword [esp + 8], esi
mov dword [esp + 4], 0xffffbe87
mov eax, dword [0x441bdc]
mov dword [esp], eax
call fcn.00401550
sub esp, 0xc
mov ebp, eax
mov dword [esp + 8], esi
mov dword [esp + 4], 0xffffff0e
mov eax, dword [0x441bdc]
mov dword [esp], eax
call fcn.00401550
sub esp, 0xc
mov dword [esp + 0x28], eax
mov dword [esp + 8], esi
mov dword [esp + 4], 0xffffff0f
mov eax, dword [0x441bdc]
mov dword [esp], eax
call fcn.00401550
sub esp, 0xc
mov dword [esp + 0x2c], eax
mov dword [esp + 8], esi
mov dword [esp + 4], 0xffffff0d
mov eax, dword [0x441bdc]
mov dword [esp], eax
call fcn.00401550
sub esp, 0xc
mov dword [esp + 0x30], eax
mov dword [esp + 8], esi
mov dword [esp + 4], 0xffffff1e
mov eax, dword [0x441bdc]
mov dword [esp], eax
call fcn.00401550
sub esp, 0xc
mov dword [esp + 0x34], eax
mov dword [esp + 8], esi
mov dword [esp + 4], 0xffffbe94
mov eax, dword [0x441bdc]
mov dword [esp], eax
call fcn.00401550
sub esp, 0xc
mov dword [esp + 0x38], eax
mov dword [esp + 8], esi
mov dword [esp + 4], 0xffffff07
mov eax, dword [0x441bdc]
mov dword [esp], eax
call fcn.00401550
sub esp, 0xc
mov dword [esp + 0x3c], eax
mov dword [esp + 8], esi
mov dword [esp + 4], 0xffffffd9
mov eax, dword [0x441bdc]
mov dword [esp], eax
call fcn.00401550
sub esp, 0xc
mov dword [esp + 0x40], eax
call fcn.00431730
call fcn.00431730
call fcn.00431730
call fcn.00431780
mov dword [esp], eax
call fcn.0041e414
sub esp, 4
call fcn.00431880
mov dword [esp + 8], esi
mov dword [esp + 4], 0xffffffff
mov dword [esp], eax
call fcn.00401550
sub esp, 0xc
mov dword [esp + 0x44], eax
call fcn.004317e0
mov dword [esp], 0
call fcn.00427f1f
sub esp, 4
mov dword [esp + 4], eax
mov dword [esp], 0
call fcn.0041c9af
sub esp, 8
mov dword [esp], 0
call fcn.0041c705
sub esp, 4
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x431
mov dword [esp], eax
call sub.USER32.dll_SendMessageW
sub esp, 0x10
mov dword [esp + 8], esi
mov dword [esp + 4], esi
mov dword [esp], eax
call sub.COMCTL32.dll_ImageList_SetIconSize
sub esp, 0xc
mov dword [esp], 0
call fcn.0041c705
sub esp, 4
mov edx, eax
mov ecx, esi
shl ecx, 0x10
mov eax, ecx
or eax, esi
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], 0x41f
mov dword [esp], edx
call sub.USER32.dll_SendMessageW
sub esp, 0x10
mov dword [esp], 0
call fcn.0041c705
sub esp, 4
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x421
mov dword [esp], eax
call sub.USER32.dll_SendMessageW
sub esp, 0x10
mov dword [esp + 4], edi
mov dword [esp], 0
call fcn.0041cc65
sub esp, 8
mov dword [esp + 4], ebp
mov dword [esp], 1
call fcn.0041cc65
sub esp, 8
call fcn.0041cc77
mov ecx, dword [esp + 0x28]
mov dword [esp + 4], ecx
mov dword [esp], 2
call fcn.0041cc65
sub esp, 8
mov edx, dword [esp + 0x2c]
mov dword [esp + 4], edx
mov dword [esp], 3
call fcn.0041cc65
sub esp, 8
mov esi, dword [esp + 0x30]
mov dword [esp + 4], esi
mov dword [esp], 4
call fcn.0041cc65
sub esp, 8
call fcn.0041cc77
mov ecx, dword [esp + 0x34]
mov dword [esp + 4], ecx
mov dword [esp], 5
call fcn.0041cc65
sub esp, 8
call fcn.0041cc77
mov edx, dword [esp + 0x38]
mov dword [esp + 4], edx
mov dword [esp], 6
call fcn.0041cc65
sub esp, 8
call fcn.0041cc77
mov esi, dword [esp + 0x3c]
mov dword [esp + 4], esi
mov dword [esp], 7
call fcn.0041cc65
sub esp, 8
call fcn.0041cc77
mov eax, dword [esp + 0x40]
mov dword [esp + 4], eax
mov dword [esp], 8
call fcn.0041cc65
sub esp, 8
mov ecx, dword [esp + 0x44]
mov dword [esp + 4], ecx
mov dword [esp], 9
call fcn.0041cc65
sub esp, 8
mov dword [esp + 8], str.Open_WIM
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.0041ccae
sub esp, 0xc
mov dword [esp + 8], str.Save_XML
mov dword [esp + 4], 1
mov dword [esp], 0
call fcn.0041ccae
sub esp, 0xc
mov dword [esp + 8], 0x43c258
mov dword [esp + 4], 2
mov dword [esp], 0
call fcn.0041ccae
sub esp, 0xc
mov dword [esp + 8], str.Export
mov dword [esp + 4], 3
mov dword [esp], 0
call fcn.0041ccae
sub esp, 0xc
mov dword [esp + 8], str.Capture
mov dword [esp + 4], 5
mov dword [esp], 0
call fcn.0041ccae
sub esp, 0xc
mov dword [esp + 8], 0x43d90c
mov dword [esp + 4], 4
mov dword [esp], 0
call fcn.0041ccae
sub esp, 0xc
mov dword [esp + 8], str.Mount
mov dword [esp + 4], 6
mov dword [esp], 0
call fcn.0041ccae
sub esp, 0xc
mov dword [esp + 8], str.Dism_Driver
mov dword [esp + 4], 7
mov dword [esp], 0
call fcn.0041ccae
sub esp, 0xc
mov dword [esp + 8], str.Font
mov dword [esp + 4], 8
mov dword [esp], 0
call fcn.0041ccae
sub esp, 0xc
mov dword [esp + 8], 0x43dd30
mov dword [esp + 4], 9
mov dword [esp], 0
call fcn.0041ccae
sub esp, 0xc
mov dword [esp], 0
call fcn.00427f1f
sub esp, 4
mov dword [esp + 4], eax
mov dword [esp], 0
call fcn.0041d056
sub esp, 8
mov dword [esp], 0x5a
call fcn.0041d595
sub esp, 4
mov dword [esp + 0xc], 5
mov dword [esp + 8], str.Image_Count
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.0041cece
sub esp, 0x10
mov dword [esp], 0x28
call fcn.0041d595
sub esp, 4
mov dword [esp], 0x5a
call fcn.0041d595
sub esp, 4
mov dword [esp + 0xc], 5
mov dword [esp + 8], 0x43f450
mov dword [esp + 4], 2
mov dword [esp], 0
call fcn.0041cece
sub esp, 0x10
mov dword [esp], 0x28
call fcn.0041d595
sub esp, 4
mov dword [esp], 0x32
call fcn.0041d595
sub esp, 4
mov dword [esp + 0xc], 5
mov dword [esp + 8], 0x43e984
mov dword [esp + 4], 4
mov dword [esp], 0
call fcn.0041cece
sub esp, 0x10
mov dword [esp], 0x46
call fcn.0041d595
sub esp, 4
mov dword [esp], 0x32
call fcn.0041d595
sub esp, 4
mov dword [esp + 0xc], 5
mov dword [esp + 8], 0x43de6c
mov dword [esp + 4], 6
mov dword [esp], 0
call fcn.0041cece
sub esp, 0x10
mov dword [esp], 0xffff0001
call fcn.0041d595
sub esp, 4
mov dword [esp + 0x18], 0x40
mov dword [esp + 0x14], 0x441c28
mov dword [esp + 0x10], 0x18
mov dword [esp + 0xc], 0x19
mov dword [esp + 8], 0x20
mov dword [esp + 4], 5
mov dword [esp], 1
call fcn.00422147
sub esp, 0x1c
mov dword [esp + 0x18], 0x800
mov dword [esp + 0x14], 0x441c28
mov dword [esp + 0x10], 0x18
lea eax, [ebx - 0x23]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x20
mov dword [esp + 4], 0x1e
mov dword [esp], 2
call fcn.00422a6d
sub esp, 0x1c
sub ebx, 0xa
mov esi, dword [esp + 0x24]
sub esi, 0x52
mov dword [esp + 0x1c], 0x4000000c
mov dword [esp + 0x18], 0x1ae
mov dword [esp + 0x14], 0x43ed90
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 0x39
mov dword [esp + 4], 5
mov dword [esp], 4
call fcn.004247cc
sub esp, 0x20
mov dword [esp + 0x14], 0x800
mov dword [esp + 0x10], 0x14
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 0x20
mov dword [esp + 4], 5
mov dword [esp], 5
call fcn.00421a43
sub esp, 0x18
mov dword [esp + 0x1c], 0x4000000c
mov dword [esp + 0x18], 0x64
mov dword [esp + 0x14], 0x43e2b8
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 0x39
mov dword [esp + 4], 5
mov dword [esp], 3
call fcn.004247cc
sub esp, 0x20
mov dword [esp + 8], 2
fld qword [esp + 0x48]
fmul dword [0x43439c]
fstp qword [esp]
call fcn.004315e0
sub esp, 0xc
fstp qword [esp + 0x68]
fld qword [esp + 0x68]
fistp qword [esp + 0x80]
mov eax, dword [esp + 0x80]
mov dword [esp + 8], eax
mov dword [esp + 4], 0xffffff01
mov eax, dword [0x441bdc]
mov dword [esp], eax
call fcn.00401550
sub esp, 0xc
mov ebx, eax
mov dword [esp], 1
call fcn.0041f65d
sub esp, 4
mov dword [esp + 0xc], ebx
mov dword [esp + 8], 1
mov dword [esp + 4], 0xf7
mov dword [esp], eax
call sub.USER32.dll_SendMessageW
sub esp, 0x10
mov dword [esp + 4], 0x43df5c
mov dword [esp], 1
call fcn.004251e8
sub esp, 8
mov dword [esp], ebx
call sub.USER32.dll_DestroyIcon
sub esp, 4
mov dword [esp], edi
call sub.USER32.dll_DestroyIcon
sub esp, 4
mov dword [esp], ebp
call sub.USER32.dll_DestroyIcon
sub esp, 4
mov ecx, dword [esp + 0x28]
mov dword [esp], ecx
call sub.USER32.dll_DestroyIcon
sub esp, 4
mov edx, dword [esp + 0x2c]
mov dword [esp], edx
call sub.USER32.dll_DestroyIcon
sub esp, 4
mov ecx, dword [esp + 0x34]
mov dword [esp], ecx
call sub.USER32.dll_DestroyIcon
sub esp, 4
mov esi, dword [esp + 0x30]
mov dword [esp], esi
call sub.USER32.dll_DestroyIcon
sub esp, 4
mov edx, dword [esp + 0x38]
mov dword [esp], edx
call sub.USER32.dll_DestroyIcon
sub esp, 4
mov esi, dword [esp + 0x3c]
mov dword [esp], esi
call sub.USER32.dll_DestroyIcon
sub esp, 4
mov eax, dword [esp + 0x40]
mov dword [esp], eax
call sub.USER32.dll_DestroyIcon
sub esp, 4
mov ecx, dword [esp + 0x44]
mov dword [esp], ecx
call sub.USER32.dll_DestroyIcon
sub esp, 4
mov dword [esp + 4], str.WimFiles
mov dword [esp], 5
call fcn.0040dfa0
sub esp, 8
jmp 0x41a8df
mov eax, dword [esp + 0x58]
mov dword [esp + 0x68], eax
call fcn.00431690
mov eax, dword [esp + 0x68]
mov dword [esp + 4], eax
lea eax, [esp + 0x68]
mov dword [esp + 0x24], eax
mov dword [esp], eax
call fcn.00431ad0
sub esp, 8
lea edi, [esp + 0x80]
mov ecx, 0x17
mov eax, ebx
rep stosd dword es:[edi], eax
mov byte [esp + 0x97], 1
mov byte [esp + 0x98], 4
mov byte [esp + 0x9b], 0
mov eax, dword [esp + 0x68]
mov dword [esp + 4], eax
lea ebx, [esp + 0x80]
lea eax, [esp + 0x9c]
mov dword [esp], eax
call fcn.00431460
sub esp, 8
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0x401000
mov dword [esp + 4], ebx
mov eax, dword [0x441b34]
mov dword [esp], eax
call sub.GDI32.dll_EnumFontFamiliesExW
sub esp, 0x14
mov ebx, eax
mov eax, dword [esp + 0x68]
mov dword [esp], eax
call fcn.004319f0
sub esp, 4
test ebx, ebx
je 0x41ab1e
call fcn.00431730
call fcn.00431730
call fcn.00431730
call fcn.00431780
mov dword [esp + 0xc], eax
mov dword [esp + 8], str.FontSize
mov dword [esp + 4], str.SoftwareWimInfoREG
mov dword [esp], SysReAllocString
call fcn.0040dbd0
sub esp, 0x10
call fcn.00431880
mov dword [esp], eax
call fcn.0042f1f0
sub esp, 4
mov ebx, eax
call fcn.004317e0
mov dword [esp + 8], ebx
mov eax, dword [esp + 0x58]
mov dword [esp + 4], eax
mov eax, dword [0x441af4]
mov dword [esp], eax
call fcn.00401e10
sub esp, 0xc
jmp 0x41ab1e
call fcn.00431730
call fcn.00431730
call fcn.00431780
mov dword [esp + 8], eax
mov dword [esp + 4], 0x43f0f8
mov eax, dword [esp + 0x64]
mov dword [esp], eax
call fcn.0042f330
sub esp, 0xc
call fcn.00431780
mov dword [esp + 4], eax
mov dword [esp], edi
call fcn.00431900
sub esp, 8
mov ebx, 1
xor edi, edi
jmp 0x41b713
call fcn.00431730
call fcn.00431730
call fcn.00431780
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 1
mov dword [esp + 8], 0x441c28
mov dword [esp + 4], str._ImageFile:
mov eax, dword [esp + 0x60]
mov dword [esp], eax
call fcn.0042f460
sub esp, 0x14
call fcn.00431780
mov dword [esp + 4], eax
mov eax, dword [esp + 0x24]
mov dword [esp], eax
call fcn.00431900
sub esp, 8
mov eax, dword [esp + 0x68]
mov dword [esp], eax
call fcn.004294d0
sub esp, 4
cmp edi, eax
mov eax, edi
sbb eax, edx
jge 0x41b710
mov dword [esp + 8], str.WIM_files__.wim__.esd__.iso_.wim__.esd__.iso
mov dword [esp + 4], 0
mov eax, dword [esp + 0x68]
mov dword [esp], eax
call fcn.004135a0
sub esp, 0xc
add ebx, 1
mov dword [esp + 4], 0x43f0f8
mov eax, dword [esp + 0x64]
mov dword [esp], eax
call fcn.0042ffd0
sub esp, 8
add eax, 1
cmp eax, ebx
jl 0x41b870
call fcn.00431730
call fcn.00431730
call fcn.00431780
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x43f0f8
mov dword [esp + 4], ebx
mov eax, dword [esp + 0x64]
mov dword [esp], eax
call fcn.0042f0c0
sub esp, 0x10
call fcn.00431780
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.00431900
sub esp, 8
call fcn.00431730
call fcn.00431730
call fcn.00431730
call fcn.00431730
call fcn.00431780
mov dword [esp + 4], eax
mov eax, dword [esp + 0x60]
mov dword [esp], eax
call fcn.0042f3d0
sub esp, 8
call fcn.00431880
mov ebp, eax
call fcn.00431780
mov dword [esp + 4], eax
mov dword [esp], ebp
call fcn.00430530
sub esp, 8
call fcn.00431780
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.00431900
sub esp, 8
mov dword [esp + 0xc], 1
mov dword [esp + 8], 1
mov dword [esp + 4], str._ImageFile:
mov eax, dword [esp + 0x60]
mov dword [esp], eax
call fcn.004300b0
sub esp, 0x10
test eax, eax
jne 0x41b688
mov dword [esp + 0xc], 1
mov dword [esp + 8], 1
mov dword [esp + 4], str._RunCap
mov eax, dword [esp + 0x60]
mov dword [esp], eax
call fcn.004300b0
sub esp, 0x10
test eax, eax
je 0x41b710
mov dword [esp], 0
call fcn.00402a20
sub esp, 4
mov dword [esp + 0xc], 0x258
mov dword [esp + 8], 0x2fd
mov dword [esp + 4], 0
mov dword [esp], 0
call fcn.0040e140
sub esp, 0x10
jmp 0x41b710
mov eax, dword [esp + 0x60]
mov dword [esp], eax
call fcn.004319f0
sub esp, 4
mov eax, dword [esp + 0x64]
mov dword [esp], eax
call fcn.004319f0
sub esp, 4
mov eax, dword [esp + 0x68]
mov dword [esp], eax
call fcn.004319f0
sub esp, 4
mov eax, dword [esp + 0x58]
mov dword [esp], eax
call fcn.004319f0
sub esp, 4
call fcn.00415870
mov dword [esp + 4], str.WimFiles
mov dword [esp], 5
call fcn.00405f30
sub esp, 8
mov eax, dword [0x441b34]
mov dword [esp + 4], eax
mov eax, dword [0x441af4]
mov dword [esp], eax
call sub.USER32.dll_ReleaseDC
sub esp, 8
mov eax, dword [0x441b30]
mov dword [esp], eax
call sub.GDI32.dll_DeleteObject
sub esp, 4
mov eax, dword [0x441be0]
mov dword [esp], eax
call sub.GDI32.dll_DeleteObject
sub esp, 4
mov eax, dword [0x441c20]
mov dword [esp], eax
call fcn.0042b83d
sub esp, 4
mov eax, dword [0x441c18]
mov dword [esp], eax
call fcn.0042b83d
sub esp, 4
call fcn.00431730
call fcn.00431730
mov eax, dword [0x441bf8]
mov ebx, dword [eax]
call fcn.00431780
mov dword [esp + 8], eax
mov dword [esp + 4], 2
mov dword [esp], ebx
call fcn.00403e60
sub esp, 0xc
call fcn.004317e0
call fcn.00431730
call fcn.00431730
mov eax, dword [0x441bf8]
mov ebx, dword [eax + 4]
call fcn.00431780
mov dword [esp + 8], eax
mov dword [esp + 4], 2
mov dword [esp], ebx
call fcn.00403e60
sub esp, 0xc
call fcn.004317e0
call fcn.00431730
call fcn.00431730
call fcn.00431730
mov dword [esp], 0
call fcn.00428612
sub esp, 4
mov ebx, eax
call fcn.00431780
mov dword [esp + 8], eax
mov dword [esp], ebx
sar ebx, 0x1f
mov dword [esp + 4], ebx
call fcn.0042f860
sub esp, 0xc
call fcn.00431b20
call fcn.00431880
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x43e054
mov dword [esp + 4], str.SoftwareWimInfoREG
mov dword [esp], SysReAllocString
call fcn.00405cf0
sub esp, 0x14
call fcn.004317e0
call fcn.00431730
call fcn.00431730
call fcn.00431730
mov dword [esp], 0
call fcn.00428681
sub esp, 4
mov ebx, eax
call fcn.00431780
mov dword [esp + 8], eax
mov dword [esp], ebx
sar ebx, 0x1f
mov dword [esp + 4], ebx
call fcn.0042f860
sub esp, 0xc
call fcn.00431b20
call fcn.00431880
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x43e04c
mov dword [esp + 4], str.SoftwareWimInfoREG
mov dword [esp], SysReAllocString
call fcn.00405cf0
sub esp, 0x14
call fcn.004317e0
call fcn.00431730
call fcn.00431730
call fcn.00431730
mov dword [esp], 0
call fcn.00427bc0
sub esp, 4
mov ebx, eax
call fcn.00431780
mov dword [esp + 8], eax
mov dword [esp], ebx
sar ebx, 0x1f
mov dword [esp + 4], ebx
call fcn.0042f860
sub esp, 0xc
call fcn.00431b20
call fcn.00431880
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x43e05c
mov dword [esp + 4], str.SoftwareWimInfoREG
mov dword [esp], SysReAllocString
call fcn.00405cf0
sub esp, 0x14
call fcn.004317e0
call fcn.00431730
call fcn.00431730
call fcn.00431730
mov dword [esp], 0
call fcn.00427c3d
sub esp, 4
mov ebx, eax
call fcn.00431780
mov dword [esp + 8], eax
mov dword [esp], ebx
sar ebx, 0x1f
mov dword [esp + 4], ebx
call fcn.0042f860
sub esp, 0xc
call fcn.00431b20
call fcn.00431880
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x43e150
mov dword [esp + 4], str.SoftwareWimInfoREG
mov dword [esp], SysReAllocString
call fcn.00405cf0
sub esp, 0x14
call fcn.004317e0
mov dword [esp], 0
call fcn.00428316
sub esp, 4
mov dword [0x441c14], 0
call fcn.0041a0a0