Function at 0x422320
Capabilities:
Get uefi variable

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x260
mov rax, qword [0x004fb010]
xor rax, rsp
mov qword [rsp + 0x250], rax
lea rdx, [0x004fb5d0]
cmp qword [0x004fb5e8], 8
cmovae rdx, qword [0x004fb5d0]
lea rcx, [0x004fb670]
cmp qword [0x004fb688], 8
cmovae rcx, qword [0x004fb670]
mov r9d, 8
lea r8, [rsp + 0x48]
call qword [sym.imp.api_ms_win_core_firmware_l1_1_0.dll_GetFirmwareEnvironmentVariableW]
test eax, eax
jne 0x4223c6
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov edi, eax
mov edx, 0x79
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceBIOSBIAgent.cpp
call fcn.004036d0
lea rbx, [0x004bc570]
lea rdx, [rbx + rax*2]
mov dword [rsp + 0x20], edi
lea r9, str.BIOSBIAgent:SendBI_UEFI_UerCloudRecovery_GetFirmwareEnvironmentVariableW_error_:_d
mov ecx, 1
mov r8d, 0x16d
call fcn.0044a600
jmp 0x42293c
mov edx, 0x79
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceBIOSBIAgent.cpp
cmp eax, 8
je 0x422403
call fcn.004036d0
lea rbx, [0x004bc570]
lea rdx, [rbx + rax*2]
lea r9, str.BIOSBIAgent:SendBI_UEFI_UerCloudRecovery_GetFirmwareEnvironmentVariableW_Size_error_
mov ecx, 1
mov r8d, 0x173
call fcn.0044a600
jmp 0x42293c
call fcn.004036d0
lea rbx, [0x004bc570]
lea rdx, [rbx + rax*2]
lea r9, str.BIOSBIAgent:SendBI_UEFI_UerCloudRecovery:
mov ecx, 1
mov r8d, 0x177
call fcn.0044a600
mov edx, 0x79
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceBIOSBIAgent.cpp
call fcn.004036d0
movzx ecx, byte [rsp + 0x48]
lea rdx, [rbx + rax*2]
mov dword [rsp + 0x20], ecx
lea r9, str.BIOSBIAgent:SendBI_UEFI_UerCloudRecovery:_u
mov ecx, 1
mov r8d, 0x178
call fcn.0044a600
mov edx, 0x79
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceBIOSBIAgent.cpp
call fcn.004036d0
movzx ecx, byte [rsp + 0x49]
lea rdx, [rbx + rax*2]
mov dword [rsp + 0x20], ecx
lea r9, str.BIOSBIAgent:SendBI_UEFI_UerCloudRecovery:_u
mov ecx, 1
mov r8d, 0x179
call fcn.0044a600
mov edx, 0x79
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceBIOSBIAgent.cpp
call fcn.004036d0
movzx ecx, byte [rsp + 0x4a]
lea rdx, [rbx + rax*2]
mov dword [rsp + 0x20], ecx
lea r9, str.BIOSBIAgent:SendBI_UEFI_UerCloudRecovery:_u
mov ecx, 1
mov r8d, 0x17a
call fcn.0044a600
mov edx, 0x79
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceBIOSBIAgent.cpp
call fcn.004036d0
movzx ecx, byte [rsp + 0x4b]
lea rdx, [rbx + rax*2]
mov dword [rsp + 0x20], ecx
lea r9, str.BIOSBIAgent:SendBI_UEFI_UerCloudRecovery:_u
mov ecx, 1
mov r8d, 0x17b
call fcn.0044a600
mov edx, 0x79
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceBIOSBIAgent.cpp
call fcn.004036d0
movzx ecx, byte [rsp + 0x4c]
lea rdx, [rbx + rax*2]
mov dword [rsp + 0x20], ecx
lea r9, str.BIOSBIAgent:SendBI_UEFI_UerCloudRecovery:_u
mov ecx, 1
mov r8d, 0x17c
call fcn.0044a600
mov edx, 0x79
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceBIOSBIAgent.cpp
call fcn.004036d0
movzx ecx, byte [rsp + 0x4d]
lea rdx, [rbx + rax*2]
mov dword [rsp + 0x20], ecx
lea r9, str.BIOSBIAgent:SendBI_UEFI_UerCloudRecovery:_u
mov ecx, 1
mov r8d, 0x17d
call fcn.0044a600
mov edx, 0x79
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceBIOSBIAgent.cpp
call fcn.004036d0
movzx ecx, byte [rsp + 0x4e]
lea rdx, [rbx + rax*2]
mov dword [rsp + 0x20], ecx
lea r9, str.BIOSBIAgent:SendBI_UEFI_UerCloudRecovery:_u
mov ecx, 1
mov r8d, 0x17e
call fcn.0044a600
mov edx, 0x79
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceBIOSBIAgent.cpp
call fcn.004036d0
movzx ecx, byte [rsp + 0x4f]
lea rdx, [rbx + rax*2]
mov dword [rsp + 0x20], ecx
lea r9, str.BIOSBIAgent:SendBI_UEFI_UerCloudRecovery:_u
mov ecx, 1
mov r8d, 0x17f
call fcn.0044a600
xor edx, edx
mov r8d, 0x1fe
lea rcx, [rsp + 0x50]
call fcn.004a2370
movzx r8d, byte [rsp + 0x48]
lea rdx, str.UEFI_Cloud_Recovery_Version:_u
lea rcx, [rsp + 0x50]
call qword [sym.imp.USER32.dll_wsprintfW]
mov rax, qword [0x005022c8]
test rax, rax
jne 0x42262a
lea ecx, [rax + 8]
call fcn.0047970c
mov qword [rsp + 0x40], rax
xor ecx, ecx
mov qword [rax], rcx
mov rcx, rax
call fcn.00418520
nop
mov qword [0x005022c8], rax
mov dword [rsp + 0x38], 1
lea rbx, [0x004b993c]
mov qword [rsp + 0x30], rbx
lea rdi, [0x004bc964]
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0x30da7
mov r9d, reloc.OLEAUT32.dll_SafeArrayLock
lea r8, [rsp + 0x50]
mov edx, 0x4e2a
mov rcx, qword [rax]
call qword [sym.imp.AsusBusinessIntelligenceCPPLib.dll_public:_void___cdecl_BusinessIntelligenceCollection::BITrackingManager::BISendEventExt_W_enum_BusinessIntelligenceCollection::BI_SUBJECTS__wchar_t_const____ptr64__enum_BusinessIntelligenceCollection::BI_BEHAVIOR__enum_BusinessIntelligenceCollection::BI_PAGES__char_const____ptr64__wchar_t_const____ptr64__unsigned_int____ptr64]
movzx r8d, byte [rsp + 0x49]
lea rdx, str.UEFI_Cloud_Recovery_WIFIDriverFailCount:_u
lea rcx, [rsp + 0x50]
call qword [sym.imp.USER32.dll_wsprintfW]
mov rax, qword [0x005022c8]
test rax, rax
jne 0x4226b1
lea ecx, [rax + 8]
call fcn.0047970c
mov qword [rsp + 0x40], rax
xor ecx, ecx
mov qword [rax], rcx
mov rcx, rax
call fcn.00418520
nop
mov qword [0x005022c8], rax
mov dword [rsp + 0x38], 1
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0x30da7
mov r9d, reloc.OLEAUT32.dll_SafeArrayLock
lea r8, [rsp + 0x50]
mov edx, 0x4e2a
mov rcx, qword [rax]
call qword [sym.imp.AsusBusinessIntelligenceCPPLib.dll_public:_void___cdecl_BusinessIntelligenceCollection::BITrackingManager::BISendEventExt_W_enum_BusinessIntelligenceCollection::BI_SUBJECTS__wchar_t_const____ptr64__enum_BusinessIntelligenceCollection::BI_BEHAVIOR__enum_BusinessIntelligenceCollection::BI_PAGES__char_const____ptr64__wchar_t_const____ptr64__unsigned_int____ptr64]
movzx r8d, byte [rsp + 0x4a]
lea rdx, str.UEFI_Cloud_Recovery_EnterCount:_u
lea rcx, [rsp + 0x50]
call qword [sym.imp.USER32.dll_wsprintfW]
mov rax, qword [0x005022c8]
test rax, rax
jne 0x42272a
lea ecx, [rax + 8]
call fcn.0047970c
mov qword [rsp + 0x40], rax
xor ecx, ecx
mov qword [rax], rcx
mov rcx, rax
call fcn.00418520
nop
mov qword [0x005022c8], rax
mov dword [rsp + 0x38], 1
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0x30da7
mov r9d, reloc.OLEAUT32.dll_SafeArrayLock
lea r8, [rsp + 0x50]
mov edx, 0x4e2a
mov rcx, qword [rax]
call qword [sym.imp.AsusBusinessIntelligenceCPPLib.dll_public:_void___cdecl_BusinessIntelligenceCollection::BITrackingManager::BISendEventExt_W_enum_BusinessIntelligenceCollection::BI_SUBJECTS__wchar_t_const____ptr64__enum_BusinessIntelligenceCollection::BI_BEHAVIOR__enum_BusinessIntelligenceCollection::BI_PAGES__char_const____ptr64__wchar_t_const____ptr64__unsigned_int____ptr64]
movzx r8d, byte [rsp + 0x4b]
lea rdx, str.UEFI_Cloud_Recovery_WWConnectCount:_u
lea rcx, [rsp + 0x50]
call qword [sym.imp.USER32.dll_wsprintfW]
mov rax, qword [0x005022c8]
test rax, rax
jne 0x4227a3
lea ecx, [rax + 8]
call fcn.0047970c
mov qword [rsp + 0x40], rax
xor ecx, ecx
mov qword [rax], rcx
mov rcx, rax
call fcn.00418520
nop
mov qword [0x005022c8], rax
mov dword [rsp + 0x38], 1
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0x30da7
mov r9d, reloc.OLEAUT32.dll_SafeArrayLock
lea r8, [rsp + 0x50]
mov edx, 0x4e2a
mov rcx, qword [rax]
call qword [sym.imp.AsusBusinessIntelligenceCPPLib.dll_public:_void___cdecl_BusinessIntelligenceCollection::BITrackingManager::BISendEventExt_W_enum_BusinessIntelligenceCollection::BI_SUBJECTS__wchar_t_const____ptr64__enum_BusinessIntelligenceCollection::BI_BEHAVIOR__enum_BusinessIntelligenceCollection::BI_PAGES__char_const____ptr64__wchar_t_const____ptr64__unsigned_int____ptr64]
movzx r8d, byte [rsp + 0x4c]
lea rdx, str.UEFI_Cloud_Recovery_CNConnectCount:_u
lea rcx, [rsp + 0x50]
call qword [sym.imp.USER32.dll_wsprintfW]
mov rax, qword [0x005022c8]
test rax, rax
jne 0x42281c
lea ecx, [rax + 8]
call fcn.0047970c
mov qword [rsp + 0x40], rax
xor ecx, ecx
mov qword [rax], rcx
mov rcx, rax
call fcn.00418520
nop
mov qword [0x005022c8], rax
mov dword [rsp + 0x38], 1
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0x30da7
mov r9d, reloc.OLEAUT32.dll_SafeArrayLock
lea r8, [rsp + 0x50]
mov edx, 0x4e2a
mov rcx, qword [rax]
call qword [sym.imp.AsusBusinessIntelligenceCPPLib.dll_public:_void___cdecl_BusinessIntelligenceCollection::BITrackingManager::BISendEventExt_W_enum_BusinessIntelligenceCollection::BI_SUBJECTS__wchar_t_const____ptr64__enum_BusinessIntelligenceCollection::BI_BEHAVIOR__enum_BusinessIntelligenceCollection::BI_PAGES__char_const____ptr64__wchar_t_const____ptr64__unsigned_int____ptr64]
movzx r8d, byte [rsp + 0x4d]
lea rdx, str.UEFI_Cloud_Recovery_ISORunCount:_u
lea rcx, [rsp + 0x50]
call qword [sym.imp.USER32.dll_wsprintfW]
mov rax, qword [0x005022c8]
test rax, rax
jne 0x422895
lea ecx, [rax + 8]
call fcn.0047970c
mov qword [rsp + 0x40], rax
xor ecx, ecx
mov qword [rax], rcx
mov rcx, rax
call fcn.00418520
nop
mov qword [0x005022c8], rax
mov dword [rsp + 0x38], 1
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0x30da7
mov r9d, reloc.OLEAUT32.dll_SafeArrayLock
lea r8, [rsp + 0x50]
mov edx, 0x4e2a
mov rcx, qword [rax]
call qword [sym.imp.AsusBusinessIntelligenceCPPLib.dll_public:_void___cdecl_BusinessIntelligenceCollection::BITrackingManager::BISendEventExt_W_enum_BusinessIntelligenceCollection::BI_SUBJECTS__wchar_t_const____ptr64__enum_BusinessIntelligenceCollection::BI_BEHAVIOR__enum_BusinessIntelligenceCollection::BI_PAGES__char_const____ptr64__wchar_t_const____ptr64__unsigned_int____ptr64]
lea rdx, str.UEFI_Cloud_Recovery_Reserved
lea rcx, [rsp + 0x50]
call qword [sym.imp.USER32.dll_wsprintfW]
mov rax, qword [0x005022c8]
test rax, rax
jne 0x422908
lea ecx, [rax + 8]
call fcn.0047970c
mov qword [rsp + 0x40], rax
xor ecx, ecx
mov qword [rax], rcx
mov rcx, rax
call fcn.00418520
nop
mov qword [0x005022c8], rax
mov dword [rsp + 0x38], 1
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0x30da7
mov r9d, reloc.OLEAUT32.dll_SafeArrayLock
lea r8, [rsp + 0x50]
mov edx, 0x4e2a
mov rcx, qword [rax]
call qword [sym.imp.AsusBusinessIntelligenceCPPLib.dll_public:_void___cdecl_BusinessIntelligenceCollection::BITrackingManager::BISendEventExt_W_enum_BusinessIntelligenceCollection::BI_SUBJECTS__wchar_t_const____ptr64__enum_BusinessIntelligenceCollection::BI_BEHAVIOR__enum_BusinessIntelligenceCollection::BI_PAGES__char_const____ptr64__wchar_t_const____ptr64__unsigned_int____ptr64]
nop
mov rcx, qword [rsp + 0x250]
xor rcx, rsp
call fcn.00479310
mov rbx, qword [rsp + 0x270]
add rsp, 0x260
pop rdi
ret