Function at 0x4046a1
Capabilities:
Create process on windows
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x564
mov al, byte [0x42868c]
push ebx
push esi
mov esi, ecx
push edi
mov byte [ebp - 0x460], al
mov ecx, 0xff
xor eax, eax
lea edi, [ebp - 0x45f]
push 0x42a664
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [ebp - 0x460]
push eax
call fcn.0040bb40
lea eax, [ebp - 0x460]
push str._setup.exe__f__i
push eax
call fcn.0040bb40
add esp, 0x10
lea eax, [esi + 8]
push eax
push 0x42a358
lea eax, [ebp - 0x460]
push str.__s_s_
push eax
call fcn.0040c0a0
pop ecx
lea eax, [ebp + eax - 0x460]
push eax
call fcn.0040becd
lea eax, [ebp - 0x460]
push str._T_NTN_InstallMode__install
push eax
call fcn.0040bb40
lea eax, [ebp - 0x460]
push str._T_NTN_Origination__install
push eax
call fcn.0040bb40
lea eax, [ebp - 0x460]
push str._T_EnableDHCPFlag__1
push eax
call fcn.0040bb40
add esp, 0x28
lea eax, [esi + 0x210]
push eax
lea eax, [ebp - 0x460]
push str._T_NTN_InfOption___s
push eax
call fcn.0040c0a0
pop ecx
lea eax, [ebp + eax - 0x460]
push eax
call fcn.0040becd
add esp, 0xc
mov edi, 0x42a254
lea eax, [ebp - 0x460]
push edi
push str._T_NTN_SRCPATH____s_
push eax
call fcn.0040c0a0
pop ecx
lea eax, [ebp + eax - 0x460]
push eax
call fcn.0040becd
add esp, 0xc
lea eax, [ebp - 0x460]
push 0x42a560
push edi
push str._T_NTN_Infname____s_s_
push eax
call fcn.0040c0a0
pop ecx
lea eax, [ebp + eax - 0x460]
push eax
call fcn.0040becd
lea eax, [ebp - 0x460]
push str._T_STF_GUI_UNATTENDED__YES
push eax
call fcn.0040bb40
lea eax, [ebp - 0x460]
push str._T_STF_UNATTENDED__YES
push eax
call fcn.0040bb40
push 0x44
xor ebx, ebx
pop edi
lea eax, [ebp - 0x60]
push edi
push ebx
push eax
mov dword [ebp - 0xc], ebx
call fcn.0040ba40
push 0x10
lea eax, [ebp - 0x1c]
push ebx
push eax
mov dword [ebp - 0x60], edi
call fcn.0040ba40
add esp, 0x38
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x60]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x460]
push ebx
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x40487b
lea eax, [ebp - 0x460]
push eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str._Fail_CreateProcess_:_u__s
call fcn.004013fd
add esp, 0xc
lea eax, [ebp - 0x564]
push 0x104
push eax
push 0xc35f
push ebx
call dword [sym.imp.USER32.dll_LoadStringA]
push 0x40
lea eax, [ebp - 0x564]
push 0x425048
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
push 1
call fcn.0040be8d
push 0xffffffffffffffff
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea eax, [ebp - 0xc]
push eax
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
push dword [ebp - 0x1c]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
push dword [ebp - 0x18]
call edi
lea eax, [esi + 0x10c]
mov ecx, esi
push eax
call fcn.00404e0d
mov dword [ebp - 4], eax
mov dword [ebp - 8], ebx
push eax
mov edi, str.__CWinNT4::dwCheckServiceAvailable___:_d
push edi
call fcn.004013fd
cmp dword [ebp - 4], ebx
pop ecx
pop ecx
jne 0x4048f2
cmp dword [ebp - 8], 0x28
jge 0x4048f2
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [esi + 0x10c]
mov ecx, esi
push eax
call fcn.00404e0d
inc dword [ebp - 8]
mov dword [ebp - 4], eax
push eax
jmp 0x4048bd
push 0x2710
call dword [sym.imp.KERNEL32.dll_Sleep]
pop edi
pop esi
xor eax, eax
pop ebx
leave
ret