Function at 0x1400974e0
Capabilities:
Get uefi variable

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x118
lea rbp, [rsp + 0x80]
vmovaps xmmword [rbp + 0x80], xmm6
and rsp, 0xffffffffffffffe0
mov rax, qword [0x140114500]
xor rax, rbp
mov qword [rsp + 0xf8], rax
cmp qword [rdx + 0x10], 0
je 0x1400979d0
mov rbx, rdx
mov rdi, rcx
cmp qword [rdx + 0x18], 8
jb 0x140097534
mov rbx, qword [rbx]
vxorps xmm0, xmm0, xmm0
vmovaps ymmword [rsp + 0x60], ymm0
mov rcx, rbx
vzeroupper
call sub.api_ms_win_crt_string_l1_1_0.dll_wcslen
lea rsi, [rsp + 0x60]
mov rcx, rsi
mov rdx, rbx
mov r8, rax
call fcn.140009160
mov rdx, rsi
call fcn.140097f40
mov ebx, eax
mov rax, qword [rsp + 0x78]
cmp rax, 8
jb 0x1400975ae
mov rcx, qword [rsp + 0x60]
lea rdx, [rax*2 + 2]
cmp rdx, 0x1000
jb 0x1400975a9
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x140097f39
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
call fcn.1400a1ca8
test ebx, ebx
je 0x1400979d7
mov rcx, rdi
mov edx, ebx
call fcn.140098030
test rax, rax
je 0x1400979d0
mov dword [rsp + 0x2c], ebx
lea rdx, [rax + 0x550]
mov qword [rsp + 0x48], 0
mov rcx, qword [rdi + 0x38]
lea r8, [rsp + 0x48]
mov qword [rsp + 0x60], r8
mov qword [rsp + 0x68], rdx
mov qword [rsp + 0x70], 8
mov qword [rsp + 0x78], 2
mov qword [rsp + 0xb0], 0
lea r13, [rsp + 0xb0]
mov qword [rsp + 0x80], r13
mov rbx, qword gs:[0x30]
mov qword [rbx + 0x870], rsi
mov qword [rbx + 0x858], 0xdead
mov qword [rbx + 0x860], 0x8461028
mov qword [rbx + 0x5b8], rcx
lea rdx, str.SecureBoot
mov r12, rax
lea r15, [rsp + 0xc0]
mov rcx, r15
call sub.ntdll.dll_RtlInitUnicodeString
mov byte [rsp + 0x5f], 0
mov dword [rsp + 0x58], 1
mov dword [rsp + 0x54], 0
lea r14, [rsp + 0x54]
mov qword [rsp + 0x20], r14
lea r8, [rsp + 0x5f]
lea r9, [rsp + 0x58]
mov rcx, r15
mov rdx, rdi
call sub.ntdll.dll_NtQuerySystemEnvironmentValueEx
mov rax, qword [rbx + 0x5b8]
mov qword [rdi + 0x270], rax
mov qword [rbx + 0x870], 0
mov qword [rbx + 0x5b8], 0
mov rax, qword [rsp + 0x48]
mov qword [rdi + 0x20], rax
test rax, rax
je 0x140097a9d
mov qword [rsp + 0x48], 0
lea rax, [r12 + 0x520]
mov rcx, qword [rdi + 0x38]
lea rdx, [rsp + 0x48]
mov qword [rsp + 0x60], rdx
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], 8
mov qword [rsp + 0x78], 2
mov qword [rsp + 0xb0], 0
mov qword [rsp + 0x80], r13
mov rbx, qword gs:[0x30]
mov qword [rbx + 0x870], rsi
mov qword [rbx + 0x858], 0xdead
mov qword [rbx + 0x860], 0x8461028
mov qword [rbx + 0x5b8], rcx
lea rdx, str.SecureBoot
lea r15, [rsp + 0xc0]
mov rcx, r15
call sub.ntdll.dll_RtlInitUnicodeString
mov byte [rsp + 0x5f], 0
mov dword [rsp + 0x58], 1
mov dword [rsp + 0x54], 0
mov qword [rsp + 0x20], r14
lea r8, [rsp + 0x5f]
lea r9, [rsp + 0x58]
mov rcx, r15
mov rdx, rdi
call sub.ntdll.dll_NtQuerySystemEnvironmentValueEx
mov rax, qword [rbx + 0x5b8]
mov qword [rdi + 0x270], rax
mov qword [rbx + 0x870], 0
mov qword [rbx + 0x5b8], 0
cmp qword [rsp + 0xb0], 8
jne 0x140097b63
mov r14, qword [rsp + 0x48]
test r14, r14
je 0x140097b63
mov rbx, r12
call sub.MSVCP140.dll__Query_perf_frequency
mov r13, rax
call sub.MSVCP140.dll__Query_perf_counter
mov rcx, rax
cmp r13, 0x989680
jne 0x140097dc3
imul r13, rcx, 0x64
mov rcx, rdi
mov rdx, r14
call fcn.1400984a0
test rax, rax
je 0x140097c88
mov qword [rsp + 0x38], rax
call sub.MSVCP140.dll__Query_perf_frequency
mov r12, rax
call sub.MSVCP140.dll__Query_perf_counter
mov rcx, rax
cmp r12, 0x989680
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x30], rbx
jne 0x140097e31
imul rdx, rcx, 0x64
sub rdx, r13
vcvtsi2ss xmm0, xmm1, rdx
vmulss xmm6, xmm0, dword [0x1400afb90]
vcvtss2sd xmm3, xmm6, xmm6
movabs rax, 0xff1eaf26b1e9deed
mov qword [rsp + 0xc0], rax
movabs rax, 0xc04b5543675ba730
mov qword [rsp + 0xc8], rax
movabs rax, 0xd6b10a6636da5abc
mov qword [rsp + 0xd0], rax
movabs r15, 0x9b375c5d6d8b8c72
mov qword [rsp + 0xd8], r15
movabs r14, 0x9b7bd94ade9abb9f
mov qword [rsp + 0x60], r14
movabs r13, 0xe0253c635429c410
mov qword [rsp + 0x68], r13
movabs r12, 0xd6b10a6c45b73c99
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], r15
mov rax, rsi
vmovaps ymm0, ymmword [rsp + 0xc0]
vxorps ymm0, ymm0, ymmword [rax]
vmovaps ymmword [rsp + 0xc0], ymm0
lea rbx, str.dependenciescommunicationedk.cpp
lea r8, [rsp + 0xc0]
mov rcx, rbx
mov edx, 0x98
vmovq r9, xmm3
vzeroupper
call fcn.140098930
movabs rax, 0xe914ad29bbe8d2fb
mov qword [rsp + 0xc0], rax
movabs rax, 0xc0405001355de469
mov qword [rsp + 0xc8], rax
movabs rax, 0xba942a5620c45dfb
mov qword [rsp + 0xd0], rax
movabs rax, 0x9b375c5d6d81f41e
mov qword [rsp + 0xd8], rax
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], r12
mov qword [rsp + 0x78], r15
vmovaps ymm0, ymmword [rsp + 0xc0]
vxorps ymm0, ymm0, ymmword [rsi]
vmovaps ymmword [rsp + 0xc0], ymm0
lea r8, [rsp + 0xc0]
mov rcx, rbx
mov edx, 0x99
mov rsi, qword [rsp + 0x38]
mov r9, rsi
vzeroupper
call fcn.140098bc0
mov rax, qword [0x1401145e0]
mov byte [rax + 0x198], 1
vmovss dword [rax + 0x19c], xmm6
mov eax, dword [rsp + 0x2c]
mov dword [rdi + 0x10], eax
mov rax, qword [rsp + 0x30]
mov qword [rdi + 0x28], rax
mov rax, qword [rsp + 0x40]
mov qword [rdi + 0x278], rax
mov qword [rdi + 0x18], rsi
mov sil, 1
jmp 0x140097c5a
xor esi, esi
jmp 0x140097c5a
movabs rax, 0x9b7bd938b1e8c9da
mov qword [rsp + 0xb0], rax
movabs rax, 0xe0253c635429c410
mov qword [rsp + 0xb8], rax
movabs rcx, 0x9b7bd94ade9abb9f
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x68], rax
mov rdx, rsi
vmovaps xmm0, xmmword [rsp + 0xb0]
vxorps xmm0, xmm0, xmmword [rdx]
vmovaps xmmword [rsp + 0xb0], xmm0
movabs rdx, 0xef5bbd2fb2f3dad9
mov qword [rsp + 0xc0], rdx
movabs rdx, 0x8705580d3d4fe47f
mov qword [rsp + 0xc8], rdx
movabs rdx, 0xb5de781c65d251f8
mov qword [rsp + 0xd0], rdx
movabs rdx, 0x9b375c5743f8ff17
mov qword [rsp + 0xd8], rdx
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x68], rax
movabs rax, 0xd6b10a6c45b73c99
mov qword [rsp + 0x70], rax
movabs rax, 0x9b375c5d6d8b8c72
mov qword [rsp + 0x78], rax
jmp 0x140097c24
movabs rax, 0x9b7bd938b1e8c9da
mov qword [rsp + 0xb0], rax
movabs rax, 0xe0253c635429c410
mov qword [rsp + 0xb8], rax
movabs rcx, 0x9b7bd94ade9abb9f
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x68], rax
mov rdx, rsi
vmovaps xmm0, xmmword [rsp + 0xb0]
vxorps xmm0, xmm0, xmmword [rdx]
vmovaps xmmword [rsp + 0xb0], xmm0
movabs rdx, 0xef5bbd2fb2f3dad9
mov qword [rsp + 0xc0], rdx
movabs rdx, 0xb005580d3d4fe47f
mov qword [rsp + 0xc8], rdx
movabs rdx, 0xb7c579022c977edc
mov qword [rsp + 0xd0], rdx
movabs rdx, 0x9b375c5d43eeef1c
mov qword [rsp + 0xd8], rdx
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x68], rax
movabs rax, 0xd6b10a6c45b73c99
mov qword [rsp + 0x70], rax
movabs rax, 0x9b375c5d6d8b8c72
mov qword [rsp + 0x78], rax
jmp 0x140097c24
movabs rax, 0x9b7bd938b1e8c9da
mov qword [rsp + 0xb0], rax
movabs rax, 0xe0253c635429c410
mov qword [rsp + 0xb8], rax
movabs rcx, 0x9b7bd94ade9abb9f
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x68], rax
mov rdx, rsi
vmovaps xmm0, xmmword [rsp + 0xb0]
vxorps xmm0, xmm0, xmmword [rdx]
vmovaps xmmword [rsp + 0xb0], xmm0
movabs rdx, 0xef5bbd2fb2f3dad9
mov qword [rsp + 0xc0], rdx
movabs rdx, 0x8205580d3d4fe47f
mov qword [rsp + 0xc8], rdx
movabs rdx, 0xa4d56e0d65d24ff8
mov qword [rsp + 0xd0], rdx
movabs rdx, 0x9b375c5d43f8ff17
mov qword [rsp + 0xd8], rdx
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x68], rax
movabs rax, 0xd6b10a6c45b73c99
mov qword [rsp + 0x70], rax
movabs rax, 0x9b375c5d6d8b8c72
mov qword [rsp + 0x78], rax
vmovaps ymm0, ymmword [rsp + 0xc0]
vxorps ymm0, ymm0, ymmword [rsi]
vmovaps ymmword [rsp + 0xc0], ymm0
xor esi, esi
lea rdx, [rsp + 0xc0]
lea r8, [rsp + 0xb0]
xor ecx, ecx
xor r9d, r9d
vzeroupper
call qword [sym.imp.USER32.dll_MessageBoxA]
mov rcx, qword [rsp + 0xf8]
xor rcx, rbp
call fcn.1400a1e40
mov eax, esi
vmovaps xmm6, xmmword [rbp + 0x80]
lea rsp, [rbp + 0x98]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
movabs rax, 0x9b7bd938b1e8c9da
mov qword [rsp + 0xb0], rax
movabs rax, 0xe0253c635429c410
mov qword [rsp + 0xb8], rax
movabs rcx, 0x9b7bd94ade9abb9f
mov qword [rsp + 0x60], rcx
mov qword [rsp + 0x68], rax
vmovaps xmm0, xmmword [rsp + 0xb0]
vxorps xmm0, xmm0, xmmword [rsi]
vmovaps xmmword [rsp + 0xb0], xmm0
movabs rdx, 0xef5bbd2fb2f3dad9
mov qword [rsp + 0x60], rdx
movabs rdx, 0x96495310315be47f
mov qword [rsp + 0x68], rdx
movabs rdx, 0xbfd52a092dc31cfc
mov qword [rsp + 0x70], rdx
movabs rdx, 0xbb4e2e3219e8e900
mov qword [rsp + 0x78], rdx
movabs rdx, 0x72f220358c45cb7
mov qword [rsp + 0x80], rdx
movabs rdx, 0x2d95411f45d302c7
mov qword [rsp + 0x88], rdx
mov qword [rsp + 0xc0], rcx
mov qword [rsp + 0xc8], rax
movabs rax, 0xd6b10a6c45b73c99
mov qword [rsp + 0xd0], rax
movabs rax, 0x9b375c5d6d8b8c72
mov qword [rsp + 0xd8], rax
movabs rax, 0x664d026634a63dc3
mov qword [rsp + 0xe0], rax
movabs rax, 0x2d95411f45fd67b4
mov qword [rsp + 0xe8], rax
vmovaps ymm0, ymmword [rsp + 0x60]
vxorps ymm0, ymm0, ymmword [r15]
vmovaps ymmword [rsp + 0x60], ymm0
vmovaps xmm0, xmmword [rsp + 0x80]
vxorps xmm0, xmm0, xmmword [r15 + 0x20]
vmovaps xmmword [rsp + 0x80], xmm0
xor esi, esi
lea rdx, [rsp + 0x60]
jmp 0x140097c44
mov r10, rbx
cmp r13, 0x16e3600
jne 0x140097e95
movabs r9, 0xb2f4fc0794908cf3
mov rax, rcx
imul r9
mov r8, rdx
add r8, rcx
mov rax, r8
shr rax, 0x3f
sar r8, 0x18
add r8, rax
imul rax, r8, 0x16e3600
sub rcx, rax
imul rcx, rcx, 0x3b9aca00
mov rax, rcx
imul r9
mov r13, rdx
imul rax, r8, 0x3b9aca00
add r13, rcx
mov rcx, r13
shr rcx, 0x3f
sar r13, 0x18
add r13, rcx
add r13, rax
jmp 0x140097ef7
cmp r12, 0x16e3600
jne 0x140097eab
movabs r9, 0xb2f4fc0794908cf3
mov rax, rcx
imul r9
mov r8, rdx
add r8, rcx
mov rax, r8
shr rax, 0x3f
sar r8, 0x18
add r8, rax
imul rax, r8, 0x16e3600
sub rcx, rax
imul rcx, rcx, 0x3b9aca00
mov rax, rcx
imul r9
imul rax, r8, 0x3b9aca00
add rdx, rcx
mov rcx, rdx
shr rcx, 0x3f
sar rdx, 0x18
add rdx, rcx
add rdx, rax
jmp 0x140097835
mov rax, rcx
or rax, r13
shr rax, 0x20
je 0x140097ec1
mov rax, rcx
cqo
idiv r13
jmp 0x140097ec8
mov rax, rcx
or rax, r12
shr rax, 0x20
je 0x140097eff
mov rax, rcx
cqo
idiv r12
jmp 0x140097f06
mov eax, ecx
xor edx, edx
div r13d
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
mov rdx, r13
or rdx, rax
shr rdx, 0x20
je 0x140097eec
cqo
idiv r13
mov r13, rax
jmp 0x140097ef4
xor edx, edx
div r13d
mov r13d, eax
add r13, rcx
mov rbx, r10
jmp 0x1400977f1
mov eax, ecx
xor edx, edx
div r12d
imul rcx, rax, 0x3b9aca00
imul rax, rdx, 0x3b9aca00
mov rdx, r12
or rdx, rax
shr rdx, 0x20
je 0x140097f2a
cqo
idiv r12
mov rdx, rax
jmp 0x140097f31
xor edx, edx
div r12d
mov edx, eax
add rdx, rcx
jmp 0x140097835
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3