Function at 0x409ec6
Capabilities:
Create process on windows
Delete file
Get common file path
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa64
push ebx
push esi
push edi
xor ebx, ebx
push dword [ebp + 0x10]
mov dword [0x423588], ebx
call fcn.0040a8c3
test eax, eax
pop ecx
je 0x409f05
push str.DEBUG
push dword [ebp + 0x10]
call fcn.0040ae58
pop ecx
test eax, eax
pop ecx
jne 0x409f05
push 1
pop edi
mov dword [0x423588], edi
jmp 0x409f08
push 1
pop edi
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
push str.RICHED32.DLL
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov esi, 0x423380
mov dword [ebp + 0x10], eax
mov eax, dword [ebp + 8]
push esi
push 0x104
mov dword [0x424988], edi
mov dword [0x41f328], ebx
mov dword [0x4386d0], eax
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
cmp dword [0x423588], ebx
je 0x409fba
push esi
call fcn.00401ae4
push eax
mov esi, 0x423a00
push str._skonvertor.log
push esi
call fcn.0040a73b
push 0x41e140
push esi
call fcn.0040ae45
add esp, 0x18
cmp eax, ebx
mov dword [0x4239e4], eax
jne 0x409f90
push 0x10
push str.Install_DEBUG_MODE
push str.Error_while_creating_the_log_file__r_nAborting_
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
push edi
call fcn.0040a99d
push esi
lea eax, [ebp - 0xa64]
push str._s_n_created.
push eax
call fcn.0040a73b
add esp, 0xc
lea eax, [ebp - 0xa64]
push 0x10
push 0x41e098
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0x5c
lea eax, [ebp - 0x5c]
push ebx
push eax
call fcn.0040a180
lea eax, [ebp - 0x40]
push str.ArialUNI.ttf
push eax
call fcn.0040a94b
mov esi, dword [sym.imp.GDI32.dll_CreateFontIndirectW]
add esp, 0x14
lea eax, [ebp - 0x5c]
mov edi, 0x190
push eax
mov byte [ebp - 0x48], bl
mov byte [ebp - 0x47], bl
mov byte [ebp - 0x46], bl
mov dword [ebp - 0x5c], 0xe
mov dword [ebp - 0x4c], edi
mov dword [0x438b08], ebx
call esi
cmp eax, ebx
mov dword [0x438b08], eax
jne 0x40a045
push 0x5c
lea eax, [ebp - 0x5c]
push ebx
push eax
call fcn.0040a180
lea eax, [ebp - 0x40]
push str.I_10146.ttf
push eax
call fcn.0040a94b
add esp, 0x14
lea eax, [ebp - 0x5c]
mov byte [ebp - 0x48], bl
mov byte [ebp - 0x47], bl
push eax
mov byte [ebp - 0x46], bl
mov dword [ebp - 0x5c], 0xe
mov dword [ebp - 0x4c], edi
call esi
mov dword [0x438b08], eax
cmp dword [0x423588], ebx
mov esi, 0x423b20
je 0x40a099
cmp eax, ebx
jne 0x40a062
push str.Could_not_create_the_UNICODE_font
push 0x41e03c
jmp 0x40a06c
push str.UNICODE_font_created
push str._s_r_n
push esi
call fcn.0040a73b
add esp, 0xc
push dword [0x4239e4]
push esi
call fcn.0040a6c0
pop ecx
push eax
push 1
push esi
call fcn.0040a583
push dword [0x4239e4]
call fcn.0040a41d
add esp, 0x14
push dword [0x4386d0]
push ebx
call fcn.00409dbb
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
pop ecx
pop ecx
push 0x438900
call edi
push 0x424780
call edi
cmp dword [0x423588], ebx
je 0x40a105
push str.Install_OK
push str._s_r_n
push esi
call fcn.0040a73b
add esp, 0xc
push dword [0x4239e4]
push esi
call fcn.0040a6c0
pop ecx
push eax
push 1
push esi
call fcn.0040a583
push dword [0x4239e4]
call fcn.0040a41d
push dword [0x4239e4]
call fcn.0040a1d8
add esp, 0x18
mov eax, dword [0x438b08]
cmp eax, ebx
je 0x40a115
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp dword [ebp + 0x10], ebx
je 0x40a123
push dword [ebp + 0x10]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp dword [0x41f328], ebx
je 0x40a168
push 0x424540
lea eax, [ebp - 0x264]
push str._skonvertor.exe
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
lea eax, [ebp - 0x264]
push eax
call fcn.00401a51
add esp, 0x10
lea eax, [ebp - 0x264]
push 3
push ebx
push ebx
push eax
push str.open
push ebx
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
push 1
pop eax
pop edi
pop esi
pop ebx
leave
ret 0x10