Function at 0x14005e8a0
Capabilities:
Get uefi variable

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x60
mov rax, qword [0x14010b010]
xor rax, rsp
mov qword [rsp + 0x50], rax
mov rdi, rdx
mov byte [rdx], 0
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea r8, [rsp + 0x30]
mov edx, 0x28
mov rcx, rax
call qword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
jne 0x14005e93e
lea rbx, str.C:Userspaul1_leeDesktopAsusAppServiceAsusAppServiceAsusAppServiceVirtualDeviceInstaller.cpp
mov rcx, rbx
lea edx, [rax + 0x5c]
call fcn.14008d398
test rax, rax
je 0x14005e904
mov edx, 0x5c
mov rcx, rbx
call fcn.14008d398
lea rbx, [rax + 1]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x28], eax
mov r9d, 2
lea r8, str.RasiePrivileges
mov edx, 0xaa
lea rax, str.RasiePrivileges_OpenProcessToken_failed_with_0x_x
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.140015dc0
mov eax, 1
jmp 0x14005eb03
lea r8, [rsp + 0x44]
xor ecx, ecx
lea rdx, str.SeSystemEnvironmentPrivilege
call qword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
mov rcx, qword [rsp + 0x30]
lea rax, [rsp + 0x3c]
mov qword [rsp + 0x28], rax
lea r8, [rsp + 0x40]
xor r9d, r9d
mov qword [rsp + 0x20], 0
xor edx, edx
mov dword [rsp + 0x40], 1
mov dword [rsp + 0x4c], 2
call qword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rbx, str.C:Userspaul1_leeDesktopAsusAppServiceAsusAppServiceAsusAppServiceVirtualDeviceInstaller.cpp
mov edx, 0x5c
mov rcx, rbx
test eax, eax
je 0x14005e9ee
call fcn.14008d398
test rax, rax
je 0x14005e9be
mov edx, 0x5c
mov rcx, rbx
call fcn.14008d398
lea rbx, [rax + 1]
lea rcx, str.RasiePrivileges_AdjustTokenPrivileges_failed
mov r9d, 2
mov qword [rsp + 0x20], rcx
lea r8, str.RasiePrivileges
mov rcx, rbx
mov edx, 0xb6
call fcn.140015dc0
mov eax, 1
jmp 0x14005eb03
call fcn.14008d398
test rax, rax
je 0x14005ea0a
mov edx, 0x5c
mov rcx, rbx
call fcn.14008d398
inc rax
jmp 0x14005ea0d
mov rax, rbx
lea r9, str.RasiePrivileges_successed
mov edx, 0xba
lea r8, str.RasiePrivileges
mov rcx, rax
call fcn.140015b90
mov r9d, 1
lea r8, [rsp + 0x38]
lea rdx, str.607005D5_3F75_4B2E_98F0_85BA66797A3E
lea rcx, str.MyasusAutoInstall
call qword [sym.imp.KERNEL32.dll_GetFirmwareEnvironmentVariableW]
mov edx, 0x5c
mov rcx, rbx
test eax, eax
jne 0x14005eaa5
call fcn.14008d398
test rax, rax
je 0x14005ea6e
mov edx, 0x5c
mov rcx, rbx
call fcn.14008d398
lea rbx, [rax + 1]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x28], eax
mov r9d, 1
lea r8, str.IsEnableAutoInstallUWP
mov edx, 0x96
lea rax, str.Read_NVRam_failed__return_Code__d
mov rcx, rbx
mov qword [rsp + 0x20], rax
call fcn.140015dc0
mov eax, 1
jmp 0x14005eb03
call fcn.14008d398
test rax, rax
je 0x14005eac0
mov edx, 0x5c
mov rcx, rbx
call fcn.14008d398
lea rbx, [rax + 1]
cmp byte [rsp + 0x38], 0
lea rcx, [0x1400dbe28]
lea rax, [0x1400dbe38]
mov edx, 0x9a
cmovne rax, rcx
lea r9, str.Read_NVRam_Success__IsEnableAutoInstallUWP___s
mov rcx, rbx
mov qword [rsp + 0x20], rax
lea r8, str.IsEnableAutoInstallUWP
call fcn.140015b90
cmp byte [rsp + 0x38], 1
jne 0x14005eb01
mov byte [rdi], 1
xor eax, eax
mov rcx, qword [rsp + 0x50]
xor rcx, rsp
call fcn.1400612f0
mov rbx, qword [rsp + 0x70]
add rsp, 0x60
pop rdi
ret