Function at 0x42bde0
Capabilities:
Get geographical location

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x553504
mov eax, dword fs:[0]
push eax
sub esp, 0x2a4
mov eax, dword [0x59de30]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, ecx
mov dword [ebp - 0x298], eax
mov ebx, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov dword [ebp - 4], 0
test ebx, ebx
je 0x42c4ea
test esi, esi
je 0x42c4ea
push str.Preparing_Data_For_CFU_started
push 0
push 4
push str.AdobeGCUpdaterCFU
push dword [eax + 4]
call fcn.0044d8e0
add esp, 0x14
mov ecx, esi
call fcn.00434a30
mov edx, dword [ebx + 4]
test edx, edx
je 0x42be6f
cmp byte [edx], 0
je 0x42be74
mov ecx, edx
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42be64
sub ecx, edi
jmp 0x42be76
mov edx, 0x57dfd1
xor ecx, ecx
push ecx
push edx
lea ecx, [esi + 0x18]
call fcn.004014f0
mov edx, dword [ebx + 8]
test edx, edx
je 0x42be9c
cmp byte [edx], 0
je 0x42bea1
mov ecx, edx
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42be91
sub ecx, edi
jmp 0x42bea3
mov edx, 0x57dfd1
xor ecx, ecx
push ecx
push edx
lea ecx, [esi + 0x30]
call fcn.004014f0
push 0x103
lea eax, [ebp - 0x247]
push 0
push eax
mov byte [ebp - 0x248], 0
call fcn.004de2a0
add esp, 0xc
lea edx, [ebp - 0x248]
xor ecx, ecx
call fcn.00404e80
cmp byte [ebp - 0x248], 0
je 0x42befe
sub esp, 0x18
lea eax, [ebp - 0x248]
mov ecx, esp
push eax
call fcn.00401410
call fcn.004339e0
add esp, 0x18
movzx eax, al
jmp 0x42bf00
xor eax, eax
xor ecx, ecx
mov word [esi + 0x48], ax
cmp byte [str.ADOBE_GC_UPDATER], cl
mov eax, 0x10
cmove eax, ecx
push eax
push str.ADOBE_GC_UPDATER
lea ecx, [esi + 0x4c]
call fcn.004014f0
push 0x103
lea eax, [ebp - 0x13f]
push 0
push eax
mov byte [ebp - 0x140], 0
call fcn.004de2a0
add esp, 0xc
lea eax, [ebp - 0x140]
push 1
push eax
call fcn.004050f0
add esp, 8
mov ecx, 0x104
lea eax, [ebp - 0x140]
jmp 0x42bf60
cmp byte [eax], 0
mov edi, 0x104
je 0x42bf70
inc eax
dec ecx
jne 0x42bf60
jmp 0x42bf90
test ecx, ecx
je 0x42bf90
push ecx
push 0x57d56c
mov eax, edi
sub eax, ecx
push ecx
mov edx, edi
lea ecx, [ebp - 0x140]
sub edx, eax
add ecx, eax
call fcn.004042f0
mov ecx, edi
lea eax, [ebp - 0x140]
cmp byte [eax], 0
je 0x42bfa3
inc eax
dec ecx
jne 0x42bf98
jmp 0x42bfc3
test ecx, ecx
je 0x42bfc3
push ecx
push 0x57d584
mov eax, edi
sub eax, ecx
push ecx
mov edx, edi
lea ecx, [ebp - 0x140]
sub edx, eax
add ecx, eax
call fcn.004042f0
mov ecx, edi
lea eax, [ebp - 0x140]
jmp 0x42bfd0
cmp byte [eax], 0
je 0x42bfdb
inc eax
dec ecx
jne 0x42bfd0
jmp 0x42bffb
test ecx, ecx
je 0x42bffb
push ecx
push 0x57d56c
mov eax, edi
sub eax, ecx
push ecx
mov edx, edi
lea ecx, [ebp - 0x140]
sub edx, eax
add ecx, eax
call fcn.004042f0
mov ecx, edi
lea eax, [ebp - 0x140]
cmp byte [eax], 0
je 0x42c00e
inc eax
dec ecx
jne 0x42c003
jmp 0x42c02e
test ecx, ecx
je 0x42c02e
push ecx
mov eax, edi
sub eax, ecx
push str.AdobeGCUpdater.dll
push ecx
sub edi, eax
lea ecx, [ebp - 0x140]
add ecx, eax
mov edx, edi
call fcn.004042f0
cmp byte [ebp - 0x140], 0
je 0x42c059
lea eax, [ebp - 0x140]
push eax
call fcn.004048a0
add esp, 4
test eax, eax
je 0x42c059
push 0x5798b8
lea ecx, [esi + 0x64]
call fcn.004014a0
jmp 0x42c068
push 0
push 0x57dfd1
lea ecx, [esi + 0x64]
call fcn.004014f0
cmp byte [ebp - 0x140], 0
je 0x42c08f
sub esp, 0x18
lea eax, [ebp - 0x140]
mov ecx, esp
push eax
call fcn.00401410
call fcn.004339e0
add esp, 0x18
movzx eax, al
jmp 0x42c091
xor eax, eax
xor ecx, ecx
mov word [esi + 0x7c], ax
cmp byte [str.ADOBE_GC_CLIENT_APP], cl
mov eax, 0x13
cmove eax, ecx
push eax
push str.ADOBE_GC_CLIENT_APP
lea ecx, [esi + 0x80]
call fcn.004014f0
cmp dword [ebp + 0x20], 0
je 0x42c3e0
mov dword [ebp - 0x27c], 0xf
mov dword [ebp - 0x280], 0
mov byte [ebp - 0x290], 0
mov byte [ebp - 4], 1
cmp dword [ebx], 1
jne 0x42c21a
sub esp, 0x18
mov ecx, esp
push 0xffffffffffffffff
push 0
lea eax, [ebp + 0x10]
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.00401630
lea ecx, [ebp - 0x290]
call fcn.00434570
mov dword [ebp - 0x24c], 0xf
mov dword [ebp - 0x250], 0
mov byte [ebp - 0x260], 0
add esp, 0x14
lea ecx, [ebp + 0x10]
push 0x57d56c
mov byte [ebp - 4], 2
xor bl, bl
call fcn.00428130
cmp eax, 0xffffffff
je 0x42c1b7
push eax
push 0
lea eax, [ebp - 0x2b0]
push eax
lea ecx, [ebp + 0x10]
call fcn.00421c60
push eax
lea ecx, [ebp - 0x260]
call fcn.00412ea0
lea ecx, [ebp - 0x2b0]
call fcn.00401470
push 0x57d56c
lea ecx, [ebp - 0x260]
call fcn.00412ee0
push str.adobe_caps.dll
lea ecx, [ebp - 0x260]
call fcn.00412ee0
cmp dword [ebp - 0x24c], 0x10
lea eax, [ebp - 0x260]
cmovae eax, dword [ebp - 0x260]
push eax
call fcn.004048a0
add esp, 4
test eax, eax
setne bl
sub esp, 0x18
mov ecx, esp
push 0xffffffffffffffff
push 0
lea eax, [ebp + 0x10]
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.00401630
call fcn.004339e0
add esp, 0x18
test al, al
setne al
test al, al
je 0x42c206
test bl, bl
je 0x42c206
mov eax, 1
mov word [esi + 0xb0], ax
lea ecx, [ebp - 0x260]
jmp 0x42c3a0
xor eax, eax
mov word [esi + 0xb0], ax
lea ecx, [ebp - 0x260]
jmp 0x42c3a0
mov dword [ebp - 0x264], 0xf
mov dword [ebp - 0x268], 0
mov byte [ebp - 0x278], 0
push 0xffffffffffffffff
push 0
lea eax, [ebp + 0x10]
push eax
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 3
call fcn.00401630
push 0x57d56c
lea ecx, [ebp - 0x278]
call fcn.00412ee0
push str.AdobeGCClient.exe
lea ecx, [ebp - 0x278]
call fcn.00412ee0
sub esp, 0x18
mov ecx, esp
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x278]
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.00401630
lea ecx, [ebp - 0x290]
call fcn.00434570
mov dword [ebp - 0x24c], 0xf
mov dword [ebp - 0x250], 0
mov byte [ebp - 0x260], 0
add esp, 0x14
lea ecx, [ebp - 0x278]
push 0x57d56c
mov byte [ebp - 4], 4
xor bl, bl
call fcn.00428130
cmp eax, 0xffffffff
je 0x42c344
push eax
push 0
lea eax, [ebp - 0x2b0]
push eax
lea ecx, [ebp - 0x278]
call fcn.00421c60
push eax
lea ecx, [ebp - 0x260]
call fcn.00412ea0
lea ecx, [ebp - 0x2b0]
call fcn.00401470
push 0x57d56c
lea ecx, [ebp - 0x260]
call fcn.00412ee0
push str.adobe_caps.dll
lea ecx, [ebp - 0x260]
call fcn.00412ee0
cmp dword [ebp - 0x24c], 0x10
lea eax, [ebp - 0x260]
cmovae eax, dword [ebp - 0x260]
push eax
call fcn.004048a0
add esp, 4
test eax, eax
setne bl
sub esp, 0x18
mov ecx, esp
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x278]
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.00401630
call fcn.004339e0
add esp, 0x18
test al, al
setne al
test al, al
je 0x42c386
test bl, bl
je 0x42c386
mov eax, 1
jmp 0x42c388
xor eax, eax
lea ecx, [ebp - 0x260]
mov word [esi + 0xb0], ax
call fcn.00401470
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 1
call fcn.00401470
lea ecx, [esi + 0x98]
lea eax, [ebp - 0x290]
cmp ecx, eax
je 0x42c3c3
push 0xffffffffffffffff
push 0
push eax
call fcn.00401630
mov byte [ebp - 4], 0
cmp dword [ebp - 0x27c], 0x10
jb 0x42c3e9
push dword [ebp - 0x290]
call fcn.004daf24
add esp, 4
jmp 0x42c3e9
xor eax, eax
mov word [esi + 0xb0], ax
xor ecx, ecx
cmp byte [0x580938], cl
mov eax, 3
cmove eax, ecx
push eax
push 0x580938
lea ecx, [esi + 0xb4]
call fcn.004014f0
xorps xmm0, xmm0
lea ecx, [ebp - 0x38]
mov byte [ebp - 0x38], 0
movq qword [ebp - 0x37], xmm0
movq qword [ebp - 0x2f], xmm0
movq qword [ebp - 0x27], xmm0
mov dword [ebp - 0x1f], 0
mov word [ebp - 0x1b], 0
mov byte [ebp - 0x19], 0
call fcn.00434960
cmp byte [ebp - 0x38], 0
jne 0x42c443
xor ecx, ecx
jmp 0x42c459
lea ecx, [ebp - 0x38]
lea edx, [ecx + 1]
lea esp, [esp]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42c450
sub ecx, edx
push ecx
lea eax, [ebp - 0x38]
push eax
lea ecx, [esi + 0xcc]
call fcn.004014f0
mov edi, dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
xor eax, eax
push 8
mov dword [ebp - 0x17], eax
mov word [ebp - 0x13], ax
mov byte [ebp - 0x11], al
lea eax, [ebp - 0x18]
push eax
push 0x59
push 0x400
mov byte [ebp - 0x18], 0
call edi
lea ecx, [eax - 2]
cmp ecx, 5
ja 0x42c4aa
push 8
lea eax, [ebp + eax - 0x18]
push eax
push 0x5a
push 0x400
mov byte [eax - 1], 0x5f
call edi
cmp byte [ebp - 0x18], 0
jne 0x42c4b4
xor ecx, ecx
jmp 0x42c4c9
lea ecx, [ebp - 0x18]
lea edx, [ecx + 1]
lea ebx, [ebx]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42c4c0
sub ecx, edx
push ecx
lea eax, [ebp - 0x18]
push eax
lea ecx, [esi + 0xe4]
call fcn.004014f0
mov eax, dword [ebp - 0x298]
push str.Preparing_Data_For_CFU_started
push 0
push 4
jmp 0x42c4f3
push str.No_memory_to_fill_for_update_check_data
push 0
push 5
push str.AdobeGCUpdaterCFU
push dword [eax + 4]
call fcn.0044d8e0
add esp, 0x14
cmp dword [ebp + 0x24], 0x10
jb 0x42c514
push dword [ebp + 0x10]
call fcn.004daf24
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004da4c1
mov esp, ebp
pop ebp
ret 0x20