Function at 0x401000
Capabilities:
Allocate thread local storage

Disassembly:
push 0x1d4
push 0
push 0x42f518
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleW
mov dword [0x42f51c], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x42f518], eax
call section..text
mov eax, 0x42d63c
mov dword [0x42f5a0], eax
call fcn.004146c3
call fcn.00426ba0
call fcn.00425fd1
call fcn.00425ce0
call fcn.00424310
call fcn.0042244c
call fcn.00421cf0
call fcn.00421522
call fcn.00420b39
call fcn.0042090b
call fcn.0042080a
call fcn.00420585
call fcn.0041fda3
call fcn.0041f6d3
call fcn.0041ea62
call fcn.0041d120
call fcn.00417a18
call fcn.00417789
call fcn.0041744d
call fcn.0041661a
call fcn.00415b4e
call fcn.00415449
call fcn.00414b0c
call fcn.00414826
mov dword [0x42f6a4], 0x302
mov dword [0x42f58c], 0
push edx
call fcn.00426bf0
pop edx
push eax
push edx
call fcn.00426bf0
pop edx
push eax
mov eax, str.SYSTEMROOT
push eax
call fcn.00415b7d
lea eax, [0x42f5e0]
push eax
call fcn.00426c30
push edx
call fcn.00426bf0
pop edx
push eax
push edx
call fcn.00426bf0
pop edx
push eax
mov eax, str.SYSTEMDRIVE
push eax
call fcn.00415b7d
lea eax, [0x42f570]
push 2
push eax
call fcn.00426cc0
push edx
call fcn.00426bf0
pop edx
push eax
push edx
call fcn.00426bf0
pop edx
push eax
call fcn.0041ebee
mov edx, str.EasyWinSetupWimGAPI.log
push edx
call fcn.00426d30
lea eax, [0x42f6bc]
push eax
call fcn.00426c30
push edx
call fcn.00426bf0
pop edx
push eax
push edx
call fcn.00426bf0
pop edx
push eax
push edx
call fcn.00426bf0
pop edx
push eax
push edx
call fcn.00426bf0
pop edx
push eax
call fcn.00415bba
call fcn.00414322
add dword [esp], edx
call fcn.0041ec51
mov edx, str.EWS_xSET.ini
push edx
call fcn.00426d30
lea eax, [0x42f598]
push eax
call fcn.00426c30
mov byte [0x42f6cc], 0
mov byte [0x42f6cf], 0
mov byte [0x42f6c8], 0
mov byte [0x42f6ca], 0
mov byte [0x42f6d0], 0
mov byte [0x42f6cb], 0
mov dword [0x42f540], 0
mov byte [0x42f6ce], 3
mov byte [0x42f6c9], 0
mov byte [0x42f6cd], 0
mov word [0x42f6c4], 0xffff
mov dword [0x42f5b4], 0
mov edx, str.Consolas
lea ecx, [0x42f624]
call fcn.00414068
mov word [0x42f6c6], 0xfff5
mov dword [0x42f5c0], 0
mov dword [0x42f528], 0
mov dword [0x42f644], 0
mov dword [0x42f54c], 0
mov dword [0x42f6a0], 0
mov dword [0x42f57c], 0
push 0x42f6d4
push 0
push 0xa
push 3
push 0x208
call fcn.004205ae
push 0x42f6dc
push 0x42d5e8
push 8
push 3
push 4
call fcn.004205ae
mov ebp, dword [0x42f6d4]
lea eax, [ebp]
mov edx, 0x42a02e
push edx
push 0x104
push eax
call fcn.00426d00
lea eax, [ebp + 0x208]
mov edx, 0x42a02e
push edx
push 0x104
push eax
call fcn.00426d00
mov ebp, dword [0x42f6dc]
mov edx, 0x42a02e
lea ecx, [ebp]
call fcn.00414068
mov edx, 0x42a02e
lea ecx, [ebp + 4]
call fcn.00414068
push 8
push 0x42d5e8
lea eax, [0x42f6e4]
push eax
push 4
call fcn.00420b58
mov dword [0x42f5d8], 0xffffffff
push 0x73
push 0xd7
push 0x96
call fcn.00420816
mov dword [0x42f5d4], eax
push 0xb4
push 0x5a
push 0x73
call fcn.00420816
mov dword [0x42f678], eax
mov dword [0x42f670], 0xffffffff
mov dword [0x42f5f0], 0xffffffff
push 0xdf
push 0xe8
push 0xe1
call fcn.00420816
mov dword [0x42f5ec], eax
mov dword [0x42f620], 0xffffffff
mov dword [0x42f61c], 0xc0fecb
mov dword [0x42f538], 0xffffffff
push 0xdc
push 0xe1
push 0xe1
call fcn.00420816
mov dword [0x42f530], eax
mov dword [0x42f5fc], 0xffffffff
push 0xe1
push 0xfe
push 0xfe
call fcn.00420816
mov dword [0x42f5f4], eax
mov dword [0x42f614], 0xffffffff
push 0xe1
push 0xfe
push 0xfe
call fcn.00420816
mov dword [0x42f610], eax
mov dword [0x42f5ac], 0xffffffff
push 0xe0
push 0xf5
push 0xfe
call fcn.00420816
mov dword [0x42f5a8], eax
mov dword [0x42f560], 0xffffffff
push 0xf6
push 0xfa
push 0xfb
call fcn.00420816
mov dword [0x42f558], eax
mov edx, 0x42a02e
lea ecx, [0x42f68c]
call fcn.00414068
mov edx, dword [0x42f68c]
push edx
call fcn.00426bf0
pop edx
push eax
push edx
call fcn.00426d30
mov edx, str.EasyWinSetup___20H1_ADK___WimGAPI_v
push edx
call fcn.00426d30
push edx
call fcn.00426bf0
pop edx
push eax
push 0
push 1
mov edx, dword [0x42f5e0]
push edx
call fcn.00426bf0
pop edx
push eax
push edx
call fcn.00426d30
mov edx, 0x42cc74
push edx
call fcn.00426d30
call fcn.00414322
add dword [esp], edx
call fcn.0040e8ef
pop eax
lea eax, [0x42f68c]
push eax
call fcn.00426c30
call fcn.00410b45
push dword [0x42f68c]
mov eax, str.EasyWinSetupA222BF37_F016_4763_9C46_A95167A9BBBA
push eax
call fcn.004093da
call fcn.00408aa1
push 0x1fe
push dword [0x42f6a4]
push 0
push 0
call fcn.0040c9c4
mov dword [0x42f57c], eax
mov ebx, dword [0x42f57c]
and ebx, ebx
jne 0x4014ea
call fcn.0040646d
call fcn.0040ef24
call fcn.004049ee
movsx ebx, byte [0x42f6ce]
cmp ebx, 2
jge 0x40150d
movsx eax, byte [0x42f6ce]
push eax
call fcn.00404729
push dword [0x42f57c]
jmp 0x40151a
call 0x401534
call fcn.00426bd0
push dword [0x42f518]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess
call fcn.004147e4
call fcn.00416608
call fcn.0041777d
call fcn.004179c2
call fcn.0041d0fd
call fcn.0041ea51
call fcn.0041ecd0
call fcn.0041f6b5
call fcn.004208ff
call fcn.00421515
call fcn.00424330
call fcn.0042605f
call fcn.004261a4
call fcn.00425cd0
ret