Function at 0x401000
Capabilities:
Allocate thread local storage

Disassembly:
push 0x1e0
push 0
push 0x432184
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleW
mov dword [0x432188], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x432184], eax
call section..text
mov eax, 0x4300e0
mov dword [0x43220c], eax
call fcn.00415773
call fcn.00428830
call fcn.00427c61
call fcn.00427970
call fcn.00425d80
call fcn.00423ebc
call fcn.00423760
call fcn.00422fbf
call fcn.00422614
call fcn.004223e6
call fcn.0042230d
call fcn.00422088
call fcn.0042182b
call fcn.0042115b
call fcn.00420c40
call fcn.0041ff6a
call fcn.0041e39f
call fcn.00418b24
call fcn.00418879
call fcn.004184d3
call fcn.004176a0
call fcn.00416c11
call fcn.004164f9
call fcn.00415bbc
call fcn.004158d6
mov dword [0x43231c], 0x302
mov dword [0x432230], 0x1fe
mov dword [0x4321f8], 0
push edx
call fcn.00428880
pop edx
push eax
push 0x25
call fcn.00409695
push 0x432238
call fcn.004288c0
push edx
call fcn.00428880
pop edx
push eax
push 0x24
call fcn.00409695
push 0x4322f0
call fcn.004288c0
mov edx, dword [0x432238]
push edx
call fcn.00428880
pop edx
push eax
push edx
call fcn.00428950
lea eax, [0x4321dc]
push 2
push eax
call fcn.004289b0
push edx
call fcn.00428880
pop edx
push eax
push edx
call fcn.00428880
pop edx
push eax
call fcn.004200f6
mov edx, str.EasyWinSetupWimGAPI.log
push edx
call fcn.00428950
push 0x432334
call fcn.004288c0
push edx
call fcn.00428880
pop edx
push eax
push edx
call fcn.00428880
pop edx
push eax
push edx
call fcn.00428880
pop edx
push eax
push edx
call fcn.00428880
pop edx
push eax
call fcn.00416c40
call fcn.004153d2
add dword [esp], edx
call fcn.00420131
mov edx, str.EWS_xSET.ini
push edx
call fcn.00428950
push 0x432204
call fcn.004288c0
mov byte [0x432344], 0
mov byte [0x432347], 0
mov byte [0x432340], 0
mov byte [0x432342], 0
mov byte [0x432348], 0
mov byte [0x432343], 0
mov dword [0x4321ac], 0
mov byte [0x432346], 3
mov byte [0x432341], 0
mov byte [0x432345], 0
mov word [0x43233c], 0xffff
mov dword [0x432224], 0
mov edx, str.Consolas
lea ecx, [0x43229c]
call fcn.00415068
mov word [0x43233e], 0xfff5
mov dword [0x432234], 0
mov dword [0x432194], 0
mov dword [0x4322bc], 0
mov dword [0x4321b8], 0
mov dword [0x432318], 0
mov dword [0x4321e8], 0
push 0x43234c
push 0
push 0xa
push 3
push 0x208
call fcn.004220b1
push 0x432354
push 0x430084
push 8
push 3
push 4
call fcn.004220b1
mov ebp, dword [0x43234c]
lea eax, [ebp]
mov edx, 0x42c02e
push edx
push 0x104
push eax
call fcn.004289f0
lea eax, [ebp + 0x208]
mov edx, 0x42c02e
push edx
push 0x104
push eax
call fcn.004289f0
mov ebp, dword [0x432354]
mov edx, 0x42c02e
lea ecx, [ebp]
call fcn.00415068
mov edx, 0x42c02e
lea ecx, [ebp + 4]
call fcn.00415068
push 8
push 0x430084
lea eax, [0x43235c]
push eax
push 4
call fcn.00422633
mov dword [0x432250], 0xffffffff
push 0x73
push 0xd7
push 0x96
call fcn.00422319
mov dword [0x43224c], eax
push 0xb4
push 0x5a
push 0x73
call fcn.00422319
mov dword [0x4322ec], eax
mov dword [0x4322e4], 0xffffffff
mov dword [0x432264], 0xffffffff
push 0xdf
push 0xe8
push 0xe1
call fcn.00422319
mov dword [0x432260], eax
mov dword [0x432298], 0xffffffff
mov dword [0x432294], 0xc0fecb
mov dword [0x4321a4], 0xffffffff
push 0xdc
push 0xe1
push 0xe1
call fcn.00422319
mov dword [0x43219c], eax
mov dword [0x432270], 0xffffffff
push 0xe1
push 0xfe
push 0xfe
call fcn.00422319
mov dword [0x432268], eax
mov dword [0x43228c], 0xffffffff
push 0xe1
push 0xfe
push 0xfe
call fcn.00422319
mov dword [0x432288], eax
mov dword [0x432218], 0xffffffff
push 0xe0
push 0xf5
push 0xfe
call fcn.00422319
mov dword [0x432214], eax
mov dword [0x4321cc], 0xffffffff
push 0xf6
push 0xfa
push 0xfb
call fcn.00422319
mov dword [0x4321c4], eax
mov edx, 0x42c02e
lea ecx, [0x432304]
call fcn.00415068
mov edx, dword [0x432304]
push edx
call fcn.00428880
pop edx
push eax
push edx
call fcn.00428950
mov edx, str.EasyWinSetup___20H1_ADK___WimGAPI_v
push edx
call fcn.00428950
push edx
call fcn.00428880
pop edx
push eax
push 0
push 0x40
mov edx, dword [0x432238]
push edx
call fcn.00428880
pop edx
push eax
push edx
call fcn.00428950
mov edx, str.wimgapi.dll
push edx
call fcn.00428950
call fcn.004153d2
add dword [esp], edx
call fcn.0040e24e
pop eax
push 0x432304
call fcn.004288c0
call fcn.00410483
push dword [0x432304]
mov eax, str.EasyWinSetupA222BF37_F016_4763_9C46_A95167A9BBBA
push eax
call fcn.0040a1ec
call fcn.004098c3
push dword [0x432230]
push dword [0x43231c]
push 0
push 0
call fcn.0040c2a2
mov dword [0x4321e8], eax
mov ebx, dword [0x4321e8]
and ebx, ebx
jne 0x4014fe
call fcn.00406cb9
call fcn.0040e875
call fcn.00404cc8
movsx ebx, byte [0x432346]
cmp ebx, 2
jge 0x401521
movsx eax, byte [0x432346]
push eax
call fcn.00404a03
push dword [0x4321e8]
jmp 0x40152e
call 0x401548
call fcn.00428860
push dword [0x432184]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess
call fcn.00415894
call fcn.0041768e
call fcn.0041886d
call fcn.00418ace
call fcn.0041e37c
call fcn.0041ff69
call fcn.004201b0
call fcn.00420c30
call fcn.0042113d
call fcn.004223da
call fcn.00422fbe
call fcn.00425da0
call fcn.00427cef
call fcn.00427e34
call fcn.00427960
ret