Function at 0x438a6f
Capabilities:
Identify system language via api
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
push ebx
push esi
push edi
call fcn.00460f7c
mov ecx, eax
call fcn.00460ecc
mov eax, dword [0xefc0e0]
xor ebx, ebx
mov edi, ebx
cmp byte [eax + 0x181], bl
je 0x438ab2
call fcn.00437062
mov ecx, dword [0xefc0e0]
mov edi, eax
cmp byte [ecx + 0x183], bl
mov ecx, edi
sete dl
call fcn.005b39c8
push str.______________Starting_SumatraPDF_installation_n
call fcn.005b3949
pop ecx
push 0x4c
call fcn.006f40bd
pop ecx
xor ecx, ecx
mov dword [eax + 0x38], ecx
lea ecx, [eax + 0x40]
mov dword [eax + 0x44], ebx
mov dword [eax + 0x48], ebx
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
mov dword [eax + 0x14], ebx
mov dword [eax + 0x18], ebx
mov dword [eax + 0x1c], ebx
mov dword [eax + 0x20], ebx
mov dword [eax + 0x24], ebx
mov dword [eax + 0x28], ebx
mov dword [eax + 0x2c], ebx
mov dword [eax + 0x30], ebx
mov dword [eax + 0x34], ebx
mov dword [eax + 0x3c], ebx
mov dword [ecx], ebx
mov dword [ecx + 4], ebx
mov word [ecx + 8], bx
mov dword [0xefd4f4], eax
call fcn.0043907c
mov esi, dword [0xefc0e0]
cmp dword [esi + 0x178], ebx
jne 0x438b39
mov cl, byte [esi + 0x182]
xor dl, dl
call fcn.00437dde
mov esi, dword [0xefc0e0]
mov dword [esi + 0x178], eax
mov esi, dword [esi + 0x178]
lea ecx, [ebp - 0xc]
call fcn.005b6ca0
push esi
push dword [eax]
push str.Running_s_installing_into_dir__s_n
call fcn.005b3a54
mov eax, dword [0xefc0e0]
add esp, 0xc
cmp byte [eax + 0xe9], bl
jne 0x438b74
call fcn.0043895c
test al, al
je 0x438b74
xor eax, eax
jmp 0x438d15
call fcn.00438852
test al, al
jne 0x438b85
xor eax, eax
inc eax
jmp 0x438d15
mov ecx, str.Thank_you_for_choosing_SumatraPDF_
call fcn.00460e8f
mov ecx, dword [0xefc0e0]
mov dword [0xefc0d0], eax
mov al, byte [ecx + 0x183]
mov byte [ebp - 1], al
test al, al
jne 0x438bcf
mov edx, dword [0xefd4f4]
cmp byte [ecx + 0x17e], bl
jne 0x438bbe
mov al, byte [edx + 0x48]
mov byte [ecx + 0x17e], al
cmp byte [ecx + 0x17f], bl
jne 0x438bcf
mov al, byte [edx + 0x49]
mov byte [ecx + 0x17f], al
movzx eax, byte [ecx + 0x17f]
push eax
movzx eax, byte [ecx + 0x17e]
push eax
movzx eax, byte [ebp - 1]
push eax
push str.RunInstaller:_gCli__runInstallNow___d__gCli__withFilter___d__gCli__withPreview___d_n
call fcn.005b3949
add esp, 0x10
call fcn.0044317a
call fcn.00442efc
mov eax, dword [0xefc0e0]
cmp byte [eax + 0xe9], bl
je 0x438c4b
cmp byte [eax + 0x182], bl
je 0x438c2f
call fcn.005b716f
test al, al
jne 0x438c2f
mov ecx, str.allUsers_but_not_elevated:_re_starting_as_elevated_n
call fcn.005b392f
call fcn.0043753b
push ebx
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push ebx
mov byte [0xefd48f], 1
call fcn.004373eb
mov eax, dword [0xefd4f4]
xor ebx, ebx
cmp byte [eax + 0x39], bl
setne bl
ret
jmp 0x438c76
call fcn.00438694
test al, al
jne 0x438c5d
push 0x1f
push str.CreateInstallerWindow___failed_n
jmp 0x438cca
mov eax, dword [0xefd4f4]
push dword [eax]
call dword [sym.imp.USER32.dll_BringWindowToTop]
call fcn.0043874c
mov ebx, eax
mov eax, dword [0xefd4f4]
cmp byte [eax + 0x48], 0
je 0x438c9f
push 0x1d
push str.re_registering_search_filter_n
call fcn.005b37b7
mov eax, dword [0xefc0e0]
pop ecx
pop ecx
mov cl, byte [eax + 0x182]
call fcn.0043939b
mov eax, dword [0xefd4f4]
cmp byte [eax + 0x49], 0
je 0x438cc3
push 0x19
push str.re_registering_previewer_n
call fcn.005b37b7
mov eax, dword [0xefc0e0]
pop ecx
pop ecx
mov cl, byte [eax + 0x182]
call fcn.0043945b
push 0x13
push str.Installer_finished_n
call fcn.005b37b7
pop ecx
pop ecx
test edi, edi
jne 0x438cf9
mov eax, dword [0xefc0e0]
cmp byte [eax + 0xe9], 0
jne 0x438d00
test ebx, ebx
je 0x438d00
call fcn.00437062
mov edi, eax
mov ecx, edi
call fcn.005b39fc
test al, al
je 0x438d00
mov ecx, edi
call fcn.004227ed
push edi
call fcn.00702f96
pop ecx
push dword [0xefc0d8]
call fcn.00702f96
pop ecx
mov eax, ebx
pop edi
pop esi
pop ebx
leave
ret