Function at 0x41441b
Capabilities:
Get geographical location
Set uefi variable

Disassembly:
push 0xe4
mov eax, 0x441330
call fcn.0042bb26
xor edi, edi
push edi
mov ebx, ecx
call fcn.0042a8e7
pop ecx
mov ecx, dword [ebx + 0x134]
cmp ecx, edx
jl 0x414456
jg 0x41444b
mov ecx, dword [ebx + 0x130]
cmp ecx, eax
jbe 0x414456
mov eax, 0x80004005
call fcn.0042bba9
ret
cmp dword [ebx + 0x39c], edi
jne 0x414484
push ebx
call fcn.004147b2
cmp eax, edi
jge 0x414484
push edi
call fcn.0042a8e7
add eax, 0x12c
adc edx, edi
pop ecx
mov dword [ebx + 0x130], eax
mov dword [ebx + 0x134], edx
jmp 0x41444b
push 0xf
pop esi
push edi
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x34], esi
call fcn.00403957
lea eax, [ebp - 0x4c]
push eax
mov dword [ebp - 4], edi
call fcn.00413fd3
xor edi, edi
push edi
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x18], esi
call fcn.00403957
mov byte [ebp - 4], 1
call fcn.0040965a
test eax, eax
je 0x4144bf
call fcn.0040c04e
lea eax, [ebp - 0x30]
lea ecx, [ebx + 0xe0]
push eax
mov dword [ebp - 0x74], ecx
call fcn.004028c6
cmp eax, edi
jge 0x414604
push ebx
call fcn.004147b2
cmp eax, edi
jge 0x414518
push edi
call fcn.0042a8e7
add eax, 0x12c
adc edx, edi
pop ecx
mov dword [ebx + 0x130], eax
mov dword [ebx + 0x134], edx
push edi
push 1
lea ecx, [ebp - 0x30]
call fcn.004035bd
push edi
push 1
lea ecx, [ebp - 0x4c]
call fcn.004035bd
jmp 0x41444b
mov esi, dword [ebx + 0xf8]
call fcn.004011bd
test eax, eax
je 0x41452c
call fcn.0040201f
push esi
lea eax, [ebp - 0x94]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x78], esp
push 0x29
push str.926_Q_RYOXq___6S
call fcn.004081ed
lea edi, [ebp - 0xf0]
call fcn.00427366
mov byte [ebp - 4], 2
call fcn.004273d9
mov byte [ebp - 4], 3
cmp dword [eax + 0x18], 0x10
jb 0x41456b
mov eax, dword [eax + 4]
jmp 0x41456e
add eax, 4
push eax
push 1
call fcn.0040eded
add esp, 0xc
xor edi, edi
push edi
push 1
lea ecx, [ebp - 0x94]
call fcn.004035bd
lea esi, [ebp - 0xf0]
mov byte [ebp - 4], 1
call fcn.00404654
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
push edi
shr esi, 0x18
call fcn.0042a8e7
imul eax, eax, 0x63
pop ecx
cmp esi, eax
jbe 0x4145f7
push edi
push edi
push edi
push edi
push edi
call dword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
call dword [sym.imp.USER32.dll_GetActiveWindow]
call dword [sym.imp.USER32.dll_GetCapture]
call dword [sym.imp.USER32.dll_GetClipboardOwner]
push 4
lea eax, [ebp - 0x78]
push eax
push 0x20001009
mov esi, 0x400
push esi
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
push 0x20
lea eax, [ebp - 0x98]
push eax
push 0x58
push esi
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
mov ecx, dword [ebp - 0x74]
call fcn.004023c7
jmp 0x4144fd
push edi
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x50], esi
call fcn.00403957
lea eax, [ebp - 0x68]
push eax
sub esp, 0x1c
mov byte [ebp - 4], 4
lea eax, [ebp - 0x4c]
mov ecx, esp
mov dword [ebp - 0x78], esp
push eax
call fcn.004031b5
sub esp, 0x1c
lea eax, [ebp - 0x30]
mov ecx, esp
mov dword [ebp - 0x70], esp
push eax
mov byte [ebp - 4], 5
call fcn.004031b5
mov ecx, ebx
mov byte [ebp - 4], 4
call fcn.00415044
cmp eax, edi
jge 0x41474e
push ebx
call fcn.004147b2
cmp eax, edi
jge 0x414693
push edi
call fcn.0042a8e7
add eax, 0x12c
adc edx, edi
pop ecx
mov dword [ebx + 0x130], eax
mov dword [ebx + 0x134], edx
call fcn.0040472c
test eax, eax
je 0x414683
call fcn.0040c095
push edi
push 1
lea ecx, [ebp - 0x68]
call fcn.004035bd
jmp 0x4144fd
cmp dword [ebp - 0x34], 0x10
mov eax, dword [ebp - 0x48]
jae 0x41469f
lea eax, [ebp - 0x48]
cmp dword [ebp - 0x18], 0x10
push eax
mov eax, dword [ebp - 0x2c]
jae 0x4146ac
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x94]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x70], esp
push 0x2f
push 0x4493b0
call fcn.004081ed
lea edi, [ebp - 0xf0]
call fcn.00427366
mov byte [ebp - 4], 6
call fcn.00427666
mov byte [ebp - 4], 7
cmp dword [eax + 0x18], 0x10
jb 0x4146eb
mov eax, dword [eax + 4]
jmp 0x4146ee
add eax, 4
push eax
push 1
call fcn.0040eded
add esp, 0x10
push 0
push 1
lea ecx, [ebp - 0x94]
call fcn.004035bd
lea esi, [ebp - 0xf0]
mov byte [ebp - 4], 4
call fcn.00404654
mov ecx, dword [ebp - 0x74]
call fcn.004023c7
mov esi, 0x80004005
xor edi, edi
push edi
push 1
lea ecx, [ebp - 0x68]
call fcn.004035bd
push edi
push 1
lea ecx, [ebp - 0x30]
call fcn.004035bd
push edi
push 1
lea ecx, [ebp - 0x4c]
call fcn.004035bd
mov eax, esi
jmp 0x414450
mov ecx, dword [ebp - 0x74]
call fcn.00402271
call dword [sym.imp.KERNEL32.dll_GetTickCount]
dec eax
dec eax
je 0x414769
dec eax
dec eax
je 0x414769
sub eax, 4
jne 0x414773
push edi
push edi
push edi
push edi
call dword [sym.imp.KERNEL32.dll_SetFirmwareEnvironmentVariableA]
lea eax, [ebp - 0x69]
mov dword [ebp - 4], 4
mov byte [ebp - 0x69], 0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x414784
sub eax, edx
je 0x414794
call fcn.0040c0f4
sub esp, 0x1c
lea eax, [ebp - 0x68]
mov ecx, esp
mov dword [ebp - 0x70], esp
push eax
call fcn.004031b5
push ebx
call fcn.00415969
xor esi, esi
jmp 0x414726