Function at 0x41d690
Capabilities:
Get geographical location
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xe4c
cmp dword [ebp + 8], 0
je 0x41d6a5
mov eax, dword [ebp + 8]
mov byte [eax], 0
cmp dword [ebp + 0xc], 0
je 0x41d6b1
mov ecx, dword [ebp + 0xc]
mov byte [ecx], 0
cmp dword [ebp + 0x10], 0
je 0x41d6bd
mov edx, dword [ebp + 0x10]
mov byte [edx], 0
lea eax, [ebp - 8]
push eax
push 0x20019
push 0
push str.SoftwareMicrosoftWindowsCurrentVersionTelephonyLocations
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x41d6e6
jmp 0x41d94b
mov dword [ebp - 0x420], 0
mov dword [ebp - 0x41c], 0x3e8
lea ecx, [ebp - 0x14]
push ecx
push 0
push 0
push 0
lea edx, [ebp - 0x41c]
push edx
lea eax, [ebp - 0x418]
push eax
mov ecx, dword [ebp - 0x420]
push ecx
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExA]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x41d937
lea eax, [ebp - 0x428]
push eax
push 0x20019
push 0
lea ecx, [ebp - 0x418]
push ecx
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0x424], eax
cmp dword [ebp - 0x424], 0
jne 0x41d928
mov dword [ebp - 0x430], 0x3e8
lea eax, [ebp - 0x430]
push eax
lea ecx, [ebp - 0x830]
push ecx
lea edx, [ebp - 0x834]
push edx
push 0
push str.AreaCode
mov eax, dword [ebp - 0x428]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x42c], 0
jne 0x41d7bd
cmp dword [ebp + 0xc], 0
je 0x41d7bd
lea ecx, [ebp - 0x830]
push ecx
mov edx, dword [ebp + 0xc]
push edx
call fcn.00423c20
add esp, 8
mov dword [ebp - 0x430], 0x3e8
lea eax, [ebp - 0x430]
push eax
lea ecx, [ebp - 0x830]
push ecx
lea edx, [ebp - 0x834]
push edx
push 0
push str.Country
mov eax, dword [ebp - 0x428]
push eax
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x42c], 0
jne 0x41d91b
mov ecx, dword [ebp - 0x830]
push ecx
push str.SoftwareMicrosoftWindowsCurrentVersionTelephonyCountry_List_ld
lea edx, [ebp - 0xc40]
push edx
call fcn.00423db8
add esp, 0xc
lea eax, [ebp - 0x838]
push eax
push 0x20019
push 0
lea ecx, [ebp - 0xc40]
push ecx
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0x83c], eax
cmp dword [ebp - 0x83c], 0
jne 0x41d91b
mov dword [ebp - 0xc44], 0x200
lea edx, [ebp - 0xc44]
push edx
lea eax, [ebp - 0xe48]
push eax
lea ecx, [ebp - 0x834]
push ecx
push 0
push 0x4353c8
mov edx, dword [ebp - 0x838]
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 0xe4c], eax
cmp dword [ebp - 0xe4c], 0
jne 0x41d8ac
cmp dword [ebp + 0x10], 0
je 0x41d8ac
lea eax, [ebp - 0xe48]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
call fcn.00423c20
add esp, 8
mov dword [ebp - 0xc44], 0x200
lea edx, [ebp - 0xc44]
push edx
lea eax, [ebp - 0xe48]
push eax
lea ecx, [ebp - 0x834]
push ecx
push 0
push 0x4353d0
mov edx, dword [ebp - 0x838]
push edx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
mov dword [ebp - 0xe4c], eax
cmp dword [ebp - 0xe4c], 0
jne 0x41d90e
cmp dword [ebp + 8], 0
je 0x41d907
lea eax, [ebp - 0xe48]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00423c20
add esp, 8
mov dword [ebp - 0xc], 1
mov edx, dword [ebp - 0x838]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x428]
push eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [ebp - 0x420]
add ecx, 1
mov dword [ebp - 0x420], ecx
cmp dword [ebp - 0xc], 0
je 0x41d6fa
mov edx, dword [ebp - 8]
push edx
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov esp, ebp
pop ebp
ret