Function at 0x401000
Capabilities:
Allocate thread local storage

Disassembly:
push 0x244
push 0
push 0x435800
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleW
mov dword [0x435804], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x435800], eax
call section..text
mov eax, 0x4333dc
mov dword [0x435890], eax
call fcn.004167d9
call fcn.0042bba0
call fcn.0042afc1
call fcn.0042acd0
call fcn.004290e0
call fcn.0042721c
call fcn.00426ac0
call fcn.0042631f
call fcn.00425974
call fcn.00425746
call fcn.0042566d
call fcn.004253e8
call fcn.00424b8b
call fcn.004244bb
call fcn.00423fa0
call fcn.004232ce
call fcn.004216f1
call fcn.004199f0
call fcn.00419759
call fcn.004193b9
call fcn.00418586
call fcn.00417af7
call fcn.0041755f
call fcn.00416c22
call fcn.0041693c
push 0x4359ec
mov eax, str.DC1C5A9C_E88A_4dde_A5A1_60F82A20AEF7
push eax
call sub.ole32.dll_CLSIDFromString
push 0x4359fc
mov eax, str.d57c7288_d4ad_4768_be02_9d969532d960
push eax
call sub.ole32.dll_IIDFromString
push 0x435a1c
mov eax, str.43826d1e_e718_42ee_bc55_a1e261c37bfe
push eax
call sub.ole32.dll_IIDFromString
push 0x435a0c
mov eax, str.1CF2B120_547D_101B_8E65_08002B2BD119
push eax
call sub.ole32.dll_IIDFromString
mov dword [0x4359b0], 0x302
mov dword [0x4358bc], 0x208
mov dword [0x4359d0], 0
push edx
call fcn.0042bbf0
pop edx
push eax
push 0x25
call fcn.00409c44
push 0x4358c4
call fcn.0042bc30
push edx
call fcn.0042bbf0
pop edx
push eax
push 0x24
call fcn.00409c44
push 0x435984
call fcn.0042bc30
mov edx, dword [0x4358c4]
push edx
call fcn.0042bbf0
pop edx
push eax
push edx
call fcn.0042bcc0
lea eax, [0x435860]
push 2
push eax
call fcn.0042bd20
push edx
call fcn.0042bbf0
pop edx
push eax
push edx
call fcn.0042bbf0
pop edx
push eax
call fcn.0042345a
mov edx, str.EasyWinSetupWimGAPI.log
push edx
call fcn.0042bcc0
push 0x4359d4
call fcn.0042bc30
push edx
call fcn.0042bbf0
pop edx
push eax
push edx
call fcn.0042bbf0
pop edx
push eax
push edx
call fcn.0042bbf0
pop edx
push eax
push edx
call fcn.0042bbf0
pop edx
push eax
call fcn.00417b26
call fcn.00416402
add dword [esp], edx
call fcn.00423495
mov edx, str.EWS_xSET.ini
push edx
call fcn.0042bcc0
push 0x435884
call fcn.0042bc30
mov byte [0x4359e4], 0
mov byte [0x4359e7], 0
mov byte [0x4359e0], 0
mov byte [0x4359e2], 0
mov byte [0x4359e8], 0
mov byte [0x4359e3], 0
mov dword [0x435828], 0
mov byte [0x4359e6], 3
mov byte [0x4359e1], 0
mov byte [0x4359e5], 0
mov word [0x4359dc], 0xffff
mov dword [0x4358b0], 0
mov edx, str.Consolas
lea ecx, [0x435930]
call fcn.00416068
mov word [0x4359de], 0xfff5
mov dword [0x4358c0], 0
mov dword [0x435810], 0
mov dword [0x435950], 0
mov dword [0x43583c], 0
mov dword [0x4359ac], 0
mov dword [0x43586c], 0
push 0x435a2c
push 0
push 0xa
push 3
push 0x208
call fcn.00425411
push 0x435a34
push 0x433380
push 8
push 3
push 4
call fcn.00425411
mov ebp, dword [0x435a2c]
lea eax, [ebp]
mov edx, 0x42f02e
push edx
push 0x104
push eax
call fcn.0042bd60
lea eax, [ebp + 0x208]
mov edx, 0x42f02e
push edx
push 0x104
push eax
call fcn.0042bd60
mov ebp, dword [0x435a34]
mov edx, 0x42f02e
lea ecx, [ebp]
call fcn.00416068
mov edx, 0x42f02e
lea ecx, [ebp + 4]
call fcn.00416068
push 8
push 0x433380
lea eax, [0x435a3c]
push eax
push 4
call fcn.00425993
mov dword [0x4358e4], 0xffffffff
push 0x73
push 0xd7
push 0x96
call fcn.00425679
mov dword [0x4358e0], eax
push 0xb4
push 0x5a
push 0x73
call fcn.00425679
mov dword [0x435980], eax
mov dword [0x435978], 0xffffffff
mov dword [0x4358f8], 0xffffffff
push 0xdf
push 0xe8
push 0xe1
call fcn.00425679
mov dword [0x4358f4], eax
mov dword [0x43592c], 0xffffffff
mov dword [0x435928], 0xc0fecb
mov dword [0x435820], 0xffffffff
push 0xdc
push 0xe1
push 0xe1
call fcn.00425679
mov dword [0x435818], eax
mov dword [0x435904], 0xffffffff
push 0xe1
push 0xfe
push 0xfe
call fcn.00425679
mov dword [0x4358fc], eax
mov dword [0x435920], 0xffffffff
push 0xe1
push 0xfe
push 0xfe
call fcn.00425679
mov dword [0x43591c], eax
mov dword [0x4358a4], 0xffffffff
push 0xe0
push 0xf5
push 0xfe
call fcn.00425679
mov dword [0x4358a0], eax
mov dword [0x435850], 0xffffffff
push 0xf6
push 0xfa
push 0xfb
call fcn.00425679
mov dword [0x435848], eax
mov edx, 0x42f02e
lea ecx, [0x435998]
call fcn.00416068
mov edx, dword [0x435998]
push edx
call fcn.0042bbf0
pop edx
push eax
push edx
call fcn.0042bcc0
mov edx, str.EasyWinSetup___20H1_ADK___WimGAPI_v
push edx
call fcn.0042bcc0
push edx
call fcn.0042bbf0
pop edx
push eax
push 0
push 0x40
mov edx, dword [0x4358c4]
push edx
call fcn.0042bbf0
pop edx
push eax
push edx
call fcn.0042bcc0
mov edx, str.wimgapi.dll
push edx
call fcn.0042bcc0
call fcn.00416402
add dword [esp], edx
call fcn.0040f0cf
pop eax
push 0x435998
call fcn.0042bc30
call fcn.00411671
push dword [0x435998]
mov eax, str.EasyWinSetupA222BF37_F016_4763_9C46_A95167A9BBBA
push eax
call fcn.0040aa99
call fcn.0040a16f
push dword [0x4358bc]
push dword [0x4359b0]
push 0
push 0
call fcn.0040cff1
mov dword [0x43586c], eax
mov ebx, dword [0x43586c]
and ebx, ebx
jne 0x40153e
call fcn.00407183
call fcn.0040f64e
call fcn.004050cb
movsx ebx, byte [0x4359e6]
cmp ebx, 2
jge 0x401561
movsx eax, byte [0x4359e6]
push eax
call fcn.00404e06
push dword [0x43586c]
jmp 0x40156e
call 0x401588
call fcn.0042bbd0
push dword [0x435800]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess
call fcn.004168fa
call fcn.00418574
call fcn.0041974d
call fcn.0041999a
call fcn.004216ce
call fcn.004232cd
call fcn.00423514
call fcn.00423f90
call fcn.0042449d
call fcn.0042573a
call fcn.0042631e
call fcn.00429100
call fcn.0042b04f
call fcn.0042b194
call fcn.0042acc0
ret