Function at 0x421910
Capabilities:
Get uefi variable

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x270
mov rax, qword [0x004fb010]
xor rax, rsp
mov qword [rsp + 0x260], rax
lea rdx, [0x004fb5f0]
cmp qword [0x004fb608], 8
cmovae rdx, qword [0x004fb5f0]
lea rcx, [0x004fb630]
cmp qword [0x004fb648], 8
cmovae rcx, qword [0x004fb630]
mov r9d, reloc.OLEAUT32.dll_SafeArrayGetDim
lea r8, [rsp + 0x48]
call qword [sym.imp.api_ms_win_core_firmware_l1_1_0.dll_GetFirmwareEnvironmentVariableW]
test eax, eax
jne 0x4219b6
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov edi, eax
mov edx, 0x79
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceBIOSBIAgent.cpp
call fcn.004036d0
lea rbx, [0x004bc570]
lea rdx, [rbx + rax*2]
mov dword [rsp + 0x20], edi
lea r9, str.BIOSBIAgent:SendBI_UEFI_UerAsusSecurity_GetFirmwareEnvironmentVariableW_error_:_d
mov ecx, 1
mov r8d, 0x111
call fcn.0044a600
jmp 0x4222fc
mov edx, 0x79
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceBIOSBIAgent.cpp
cmp eax, 0x10
je 0x4219f3
call fcn.004036d0
lea rbx, [0x004bc570]
lea rdx, [rbx + rax*2]
lea r9, str.BIOSBIAgent:SendBI_UEFI_UerAsusSecurity_GetFirmwareEnvironmentVariableW_Size_error_
mov ecx, 1
mov r8d, 0x117
call fcn.0044a600
jmp 0x4222fc
call fcn.004036d0
lea rbx, [0x004bc570]
lea rdx, [rbx + rax*2]
lea r9, str.BIOSBIAgent:SendBI_UEFI_UerAsusSecurity:
mov ecx, 1
mov r8d, 0x11b
call fcn.0044a600
mov edx, 0x79
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceBIOSBIAgent.cpp
call fcn.004036d0
movzx ecx, byte [rsp + 0x48]
lea rdx, [rbx + rax*2]
mov dword [rsp + 0x20], ecx
lea r9, str.BIOSBIAgent:SendBI_UEFI_UerAsusSecurity:_u
mov ecx, 1
mov r8d, 0x11c
call fcn.0044a600
mov edx, 0x79
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceBIOSBIAgent.cpp
call fcn.004036d0
movzx ecx, byte [rsp + 0x49]
lea rdx, [rbx + rax*2]
mov dword [rsp + 0x20], ecx
lea r9, str.BIOSBIAgent:SendBI_UEFI_UerAsusSecurity:_u
mov ecx, 1
mov r8d, 0x11d
call fcn.0044a600
mov edx, 0x79
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceBIOSBIAgent.cpp
call fcn.004036d0
movzx ecx, byte [rsp + 0x4a]
lea rdx, [rbx + rax*2]
mov dword [rsp + 0x20], ecx
lea r9, str.BIOSBIAgent:SendBI_UEFI_UerAsusSecurity:_u
mov ecx, 1
mov r8d, 0x11e
call fcn.0044a600
mov edx, 0x79
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceBIOSBIAgent.cpp
call fcn.004036d0
movzx ecx, byte [rsp + 0x4b]
lea rdx, [rbx + rax*2]
mov dword [rsp + 0x20], ecx
lea r9, str.BIOSBIAgent:SendBI_UEFI_UerAsusSecurity:_u
mov ecx, 1
mov r8d, 0x11f
call fcn.0044a600
mov edx, 0x79
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceBIOSBIAgent.cpp
call fcn.004036d0
movzx ecx, byte [rsp + 0x4c]
lea rdx, [rbx + rax*2]
mov dword [rsp + 0x20], ecx
lea r9, str.BIOSBIAgent:SendBI_UEFI_UerAsusSecurity:_u
mov ecx, 1
mov r8d, 0x120
call fcn.0044a600
mov edx, 0x79
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceBIOSBIAgent.cpp
call fcn.004036d0
movzx ecx, byte [rsp + 0x4d]
lea rdx, [rbx + rax*2]
mov dword [rsp + 0x20], ecx
lea r9, str.BIOSBIAgent:SendBI_UEFI_UerAsusSecurity:_u
mov ecx, 1
mov r8d, 0x121
call fcn.0044a600
mov edx, 0x79
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceBIOSBIAgent.cpp
call fcn.004036d0
movzx ecx, byte [rsp + 0x4e]
lea rdx, [rbx + rax*2]
mov dword [rsp + 0x20], ecx
lea r9, str.BIOSBIAgent:SendBI_UEFI_UerAsusSecurity:_u
mov ecx, 1
mov r8d, 0x122
call fcn.0044a600
mov edx, 0x79
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceBIOSBIAgent.cpp
call fcn.004036d0
movzx ecx, word [rsp + 0x4f]
lea rdx, [rbx + rax*2]
mov dword [rsp + 0x20], ecx
lea r9, str.BIOSBIAgent:SendBI_UEFI_UerAsusSecurity:_u
mov ecx, 1
mov r8d, 0x123
call fcn.0044a600
mov edx, 0x79
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceBIOSBIAgent.cpp
call fcn.004036d0
movzx ecx, byte [rsp + 0x51]
lea rdx, [rbx + rax*2]
mov dword [rsp + 0x20], ecx
lea r9, str.BIOSBIAgent:SendBI_UEFI_UerAsusSecurity:_u
mov ecx, 1
mov r8d, 0x124
call fcn.0044a600
mov edx, 0x79
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceBIOSBIAgent.cpp
call fcn.004036d0
movzx ecx, byte [rsp + 0x52]
lea rdx, [rbx + rax*2]
mov dword [rsp + 0x20], ecx
lea r9, str.BIOSBIAgent:SendBI_UEFI_UerAsusSecurity:_u
mov ecx, 1
mov r8d, 0x125
call fcn.0044a600
mov edx, 0x79
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceBIOSBIAgent.cpp
call fcn.004036d0
movzx ecx, byte [rsp + 0x53]
lea rdx, [rbx + rax*2]
mov dword [rsp + 0x20], ecx
lea r9, str.BIOSBIAgent:SendBI_UEFI_UerAsusSecurity:_u
mov ecx, 1
mov r8d, 0x126
call fcn.0044a600
mov edx, 0x79
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceBIOSBIAgent.cpp
call fcn.004036d0
movzx ecx, byte [rsp + 0x54]
lea rdx, [rbx + rax*2]
mov dword [rsp + 0x20], ecx
lea r9, str.BIOSBIAgent:SendBI_UEFI_UerAsusSecurity:_u
mov ecx, 1
mov r8d, 0x127
call fcn.0044a600
mov edx, 0x79
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceBIOSBIAgent.cpp
call fcn.004036d0
movzx ecx, byte [rsp + 0x55]
lea rdx, [rbx + rax*2]
mov dword [rsp + 0x20], ecx
lea r9, str.BIOSBIAgent:SendBI_UEFI_UerAsusSecurity:_u
mov ecx, 1
mov r8d, pe_nt_image_headers64
call fcn.0044a600
mov edx, 0x79
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceBIOSBIAgent.cpp
call fcn.004036d0
movzx ecx, byte [rsp + 0x56]
lea rdx, [rbx + rax*2]
mov dword [rsp + 0x20], ecx
lea r9, str.BIOSBIAgent:SendBI_UEFI_UerAsusSecurity:_u
mov ecx, 1
mov r8d, 0x129
call fcn.0044a600
mov edx, 0x79
lea rcx, str.C:Usersjk_kanDesktopGerritSWMgrAsusSoftwareManagerAsusSoftwareManagerGiftBoxServiceGiftBoxServiceBIOSBIAgent.cpp
call fcn.004036d0
movzx ecx, byte [rsp + 0x57]
lea rdx, [rbx + rax*2]
mov dword [rsp + 0x20], ecx
lea r9, str.BIOSBIAgent:SendBI_UEFI_UerAsusSecurity:_u
mov ecx, 1
mov r8d, 0x12a
call fcn.0044a600
xor edx, edx
mov r8d, 0x1fe
lea rcx, [rsp + 0x60]
call fcn.004a2370
movzx r8d, byte [rsp + 0x48]
lea rdx, str.UEFI_Security_Version:_u
lea rcx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_wsprintfW]
mov rax, qword [0x005022c8]
test rax, rax
jne 0x421d8d
lea ecx, [rax + 8]
call fcn.0047970c
mov qword [rsp + 0x40], rax
xor ecx, ecx
mov qword [rax], rcx
mov rcx, rax
call fcn.00418520
nop
mov qword [0x005022c8], rax
mov dword [rsp + 0x38], 1
lea rbx, [0x004b993c]
mov qword [rsp + 0x30], rbx
lea rdi, [0x004bc964]
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0x30da5
mov r9d, reloc.OLEAUT32.dll_SafeArrayLock
lea r8, [rsp + 0x60]
mov edx, 0x4e2a
mov rcx, qword [rax]
call qword [sym.imp.AsusBusinessIntelligenceCPPLib.dll_public:_void___cdecl_BusinessIntelligenceCollection::BITrackingManager::BISendEventExt_W_enum_BusinessIntelligenceCollection::BI_SUBJECTS__wchar_t_const____ptr64__enum_BusinessIntelligenceCollection::BI_BEHAVIOR__enum_BusinessIntelligenceCollection::BI_PAGES__char_const____ptr64__wchar_t_const____ptr64__unsigned_int____ptr64]
movzx r8d, byte [rsp + 0x49]
lea rdx, str.UEFI_Security_KeyStatus:_u
lea rcx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_wsprintfW]
mov rax, qword [0x005022c8]
test rax, rax
jne 0x421e14
lea ecx, [rax + 8]
call fcn.0047970c
mov qword [rsp + 0x40], rax
xor ecx, ecx
mov qword [rax], rcx
mov rcx, rax
call fcn.00418520
nop
mov qword [0x005022c8], rax
mov dword [rsp + 0x38], 1
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0x30da5
mov r9d, reloc.OLEAUT32.dll_SafeArrayLock
lea r8, [rsp + 0x60]
mov edx, 0x4e2a
mov rcx, qword [rax]
call qword [sym.imp.AsusBusinessIntelligenceCPPLib.dll_public:_void___cdecl_BusinessIntelligenceCollection::BITrackingManager::BISendEventExt_W_enum_BusinessIntelligenceCollection::BI_SUBJECTS__wchar_t_const____ptr64__enum_BusinessIntelligenceCollection::BI_BEHAVIOR__enum_BusinessIntelligenceCollection::BI_PAGES__char_const____ptr64__wchar_t_const____ptr64__unsigned_int____ptr64]
movzx r8d, byte [rsp + 0x4a]
lea rdx, str.UEFI_Security_MAMGVerifyFailCount:_u
lea rcx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_wsprintfW]
mov rax, qword [0x005022c8]
test rax, rax
jne 0x421e8d
lea ecx, [rax + 8]
call fcn.0047970c
mov qword [rsp + 0x40], rax
xor ecx, ecx
mov qword [rax], rcx
mov rcx, rax
call fcn.00418520
nop
mov qword [0x005022c8], rax
mov dword [rsp + 0x38], 1
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0x30da5
mov r9d, reloc.OLEAUT32.dll_SafeArrayLock
lea r8, [rsp + 0x60]
mov edx, 0x4e2a
mov rcx, qword [rax]
call qword [sym.imp.AsusBusinessIntelligenceCPPLib.dll_public:_void___cdecl_BusinessIntelligenceCollection::BITrackingManager::BISendEventExt_W_enum_BusinessIntelligenceCollection::BI_SUBJECTS__wchar_t_const____ptr64__enum_BusinessIntelligenceCollection::BI_BEHAVIOR__enum_BusinessIntelligenceCollection::BI_PAGES__char_const____ptr64__wchar_t_const____ptr64__unsigned_int____ptr64]
movzx r8d, byte [rsp + 0x4b]
lea rdx, str.UEFI_Security_SDMGVerifyFailCount:_u
lea rcx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_wsprintfW]
mov rax, qword [0x005022c8]
test rax, rax
jne 0x421f06
lea ecx, [rax + 8]
call fcn.0047970c
mov qword [rsp + 0x40], rax
xor ecx, ecx
mov qword [rax], rcx
mov rcx, rax
call fcn.00418520
nop
mov qword [0x005022c8], rax
mov dword [rsp + 0x38], 1
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0x30da5
mov r9d, reloc.OLEAUT32.dll_SafeArrayLock
lea r8, [rsp + 0x60]
mov edx, 0x4e2a
mov rcx, qword [rax]
call qword [sym.imp.AsusBusinessIntelligenceCPPLib.dll_public:_void___cdecl_BusinessIntelligenceCollection::BITrackingManager::BISendEventExt_W_enum_BusinessIntelligenceCollection::BI_SUBJECTS__wchar_t_const____ptr64__enum_BusinessIntelligenceCollection::BI_BEHAVIOR__enum_BusinessIntelligenceCollection::BI_PAGES__char_const____ptr64__wchar_t_const____ptr64__unsigned_int____ptr64]
movzx r8d, byte [rsp + 0x4c]
lea rdx, str.UEFI_Security_WRMGVerifyFailCount:_u
lea rcx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_wsprintfW]
mov rax, qword [0x005022c8]
test rax, rax
jne 0x421f7f
lea ecx, [rax + 8]
call fcn.0047970c
mov qword [rsp + 0x40], rax
xor ecx, ecx
mov qword [rax], rcx
mov rcx, rax
call fcn.00418520
nop
mov qword [0x005022c8], rax
mov dword [rsp + 0x38], 1
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0x30da5
mov r9d, reloc.OLEAUT32.dll_SafeArrayLock
lea r8, [rsp + 0x60]
mov edx, 0x4e2a
mov rcx, qword [rax]
call qword [sym.imp.AsusBusinessIntelligenceCPPLib.dll_public:_void___cdecl_BusinessIntelligenceCollection::BITrackingManager::BISendEventExt_W_enum_BusinessIntelligenceCollection::BI_SUBJECTS__wchar_t_const____ptr64__enum_BusinessIntelligenceCollection::BI_BEHAVIOR__enum_BusinessIntelligenceCollection::BI_PAGES__char_const____ptr64__wchar_t_const____ptr64__unsigned_int____ptr64]
movzx r8d, byte [rsp + 0x4d]
lea rdx, str.UEFI_Security_FirmwareUpdateEnterCount:_u
lea rcx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_wsprintfW]
mov rax, qword [0x005022c8]
test rax, rax
jne 0x421ff8
lea ecx, [rax + 8]
call fcn.0047970c
mov qword [rsp + 0x40], rax
xor ecx, ecx
mov qword [rax], rcx
mov rcx, rax
call fcn.00418520
nop
mov qword [0x005022c8], rax
mov dword [rsp + 0x38], 1
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0x30da5
mov r9d, 3
lea r8, [rsp + 0x60]
mov edx, 0x4e2a
mov rcx, qword [rax]
call qword [sym.imp.AsusBusinessIntelligenceCPPLib.dll_public:_void___cdecl_BusinessIntelligenceCollection::BITrackingManager::BISendEventExt_W_enum_BusinessIntelligenceCollection::BI_SUBJECTS__wchar_t_const____ptr64__enum_BusinessIntelligenceCollection::BI_BEHAVIOR__enum_BusinessIntelligenceCollection::BI_PAGES__char_const____ptr64__wchar_t_const____ptr64__unsigned_int____ptr64]
movzx r8d, byte [rsp + 0x4e]
lea rdx, str.UEFI_Security_FirmwareUpdateFinishedCount:_u
lea rcx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_wsprintfW]
mov rax, qword [0x005022c8]
test rax, rax
jne 0x422071
lea ecx, [rax + 8]
call fcn.0047970c
mov qword [rsp + 0x40], rax
xor ecx, ecx
mov qword [rax], rcx
mov rcx, rax
call fcn.00418520
nop
mov qword [0x005022c8], rax
mov dword [rsp + 0x38], 1
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0x30da5
mov r9d, reloc.OLEAUT32.dll_SafeArrayLock
lea r8, [rsp + 0x60]
mov edx, 0x4e2a
mov rcx, qword [rax]
call qword [sym.imp.AsusBusinessIntelligenceCPPLib.dll_public:_void___cdecl_BusinessIntelligenceCollection::BITrackingManager::BISendEventExt_W_enum_BusinessIntelligenceCollection::BI_SUBJECTS__wchar_t_const____ptr64__enum_BusinessIntelligenceCollection::BI_BEHAVIOR__enum_BusinessIntelligenceCollection::BI_PAGES__char_const____ptr64__wchar_t_const____ptr64__unsigned_int____ptr64]
movzx r8d, word [rsp + 0x4f]
lea rdx, str.UEFI_Security_FirmwareUpdateSpentTime:_u
lea rcx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_wsprintfW]
mov rax, qword [0x005022c8]
test rax, rax
jne 0x4220ea
lea ecx, [rax + 8]
call fcn.0047970c
mov qword [rsp + 0x40], rax
xor ecx, ecx
mov qword [rax], rcx
mov rcx, rax
call fcn.00418520
nop
mov qword [0x005022c8], rax
mov dword [rsp + 0x38], 1
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0x30da5
mov r9d, reloc.OLEAUT32.dll_SafeArrayLock
lea r8, [rsp + 0x60]
mov edx, 0x4e2a
mov rcx, qword [rax]
call qword [sym.imp.AsusBusinessIntelligenceCPPLib.dll_public:_void___cdecl_BusinessIntelligenceCollection::BITrackingManager::BISendEventExt_W_enum_BusinessIntelligenceCollection::BI_SUBJECTS__wchar_t_const____ptr64__enum_BusinessIntelligenceCollection::BI_BEHAVIOR__enum_BusinessIntelligenceCollection::BI_PAGES__char_const____ptr64__wchar_t_const____ptr64__unsigned_int____ptr64]
movzx r8d, byte [rsp + 0x51]
lea rdx, str.UEFI_Security_SETUPPasswordModCount:_u
lea rcx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_wsprintfW]
mov rax, qword [0x005022c8]
test rax, rax
jne 0x422163
lea ecx, [rax + 8]
call fcn.0047970c
mov qword [rsp + 0x40], rax
xor ecx, ecx
mov qword [rax], rcx
mov rcx, rax
call fcn.00418520
nop
mov qword [0x005022c8], rax
mov dword [rsp + 0x38], 1
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0x30da5
mov r9d, reloc.OLEAUT32.dll_SafeArrayLock
lea r8, [rsp + 0x60]
mov edx, 0x4e2a
mov rcx, qword [rax]
call qword [sym.imp.AsusBusinessIntelligenceCPPLib.dll_public:_void___cdecl_BusinessIntelligenceCollection::BITrackingManager::BISendEventExt_W_enum_BusinessIntelligenceCollection::BI_SUBJECTS__wchar_t_const____ptr64__enum_BusinessIntelligenceCollection::BI_BEHAVIOR__enum_BusinessIntelligenceCollection::BI_PAGES__char_const____ptr64__wchar_t_const____ptr64__unsigned_int____ptr64]
movzx r8d, byte [rsp + 0x52]
lea rdx, str.UEFI_Security_HDDPasswordModCount:_u
lea rcx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_wsprintfW]
mov rax, qword [0x005022c8]
test rax, rax
jne 0x4221dc
lea ecx, [rax + 8]
call fcn.0047970c
mov qword [rsp + 0x40], rax
xor ecx, ecx
mov qword [rax], rcx
mov rcx, rax
call fcn.00418520
nop
mov qword [0x005022c8], rax
mov dword [rsp + 0x38], 1
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0x30da5
mov r9d, reloc.OLEAUT32.dll_SafeArrayLock
lea r8, [rsp + 0x60]
mov edx, 0x4e2a
mov rcx, qword [rax]
call qword [sym.imp.AsusBusinessIntelligenceCPPLib.dll_public:_void___cdecl_BusinessIntelligenceCollection::BITrackingManager::BISendEventExt_W_enum_BusinessIntelligenceCollection::BI_SUBJECTS__wchar_t_const____ptr64__enum_BusinessIntelligenceCollection::BI_BEHAVIOR__enum_BusinessIntelligenceCollection::BI_PAGES__char_const____ptr64__wchar_t_const____ptr64__unsigned_int____ptr64]
movzx r8d, byte [rsp + 0x53]
lea rdx, str.UEFI_Security_PropertyNoteSetCount:_u
lea rcx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_wsprintfW]
mov rax, qword [0x005022c8]
test rax, rax
jne 0x422255
lea ecx, [rax + 8]
call fcn.0047970c
mov qword [rsp + 0x40], rax
xor ecx, ecx
mov qword [rax], rcx
mov rcx, rax
call fcn.00418520
nop
mov qword [0x005022c8], rax
mov dword [rsp + 0x38], 1
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0x30da5
mov r9d, reloc.OLEAUT32.dll_SafeArrayLock
lea r8, [rsp + 0x60]
mov edx, 0x4e2a
mov rcx, qword [rax]
call qword [sym.imp.AsusBusinessIntelligenceCPPLib.dll_public:_void___cdecl_BusinessIntelligenceCollection::BITrackingManager::BISendEventExt_W_enum_BusinessIntelligenceCollection::BI_SUBJECTS__wchar_t_const____ptr64__enum_BusinessIntelligenceCollection::BI_BEHAVIOR__enum_BusinessIntelligenceCollection::BI_PAGES__char_const____ptr64__wchar_t_const____ptr64__unsigned_int____ptr64]
lea rdx, str.UEFI_Security_Reserved
lea rcx, [rsp + 0x60]
call qword [sym.imp.USER32.dll_wsprintfW]
mov rax, qword [0x005022c8]
test rax, rax
jne 0x4222c8
lea ecx, [rax + 8]
call fcn.0047970c
mov qword [rsp + 0x40], rax
xor ecx, ecx
mov qword [rax], rcx
mov rcx, rax
call fcn.00418520
nop
mov qword [0x005022c8], rax
mov dword [rsp + 0x38], 1
mov qword [rsp + 0x30], rbx
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0x30da5
mov r9d, reloc.OLEAUT32.dll_SafeArrayLock
lea r8, [rsp + 0x60]
mov edx, 0x4e2a
mov rcx, qword [rax]
call qword [sym.imp.AsusBusinessIntelligenceCPPLib.dll_public:_void___cdecl_BusinessIntelligenceCollection::BITrackingManager::BISendEventExt_W_enum_BusinessIntelligenceCollection::BI_SUBJECTS__wchar_t_const____ptr64__enum_BusinessIntelligenceCollection::BI_BEHAVIOR__enum_BusinessIntelligenceCollection::BI_PAGES__char_const____ptr64__wchar_t_const____ptr64__unsigned_int____ptr64]
nop
mov rcx, qword [rsp + 0x260]
xor rcx, rsp
call fcn.00479310
mov rbx, qword [rsp + 0x280]
add rsp, 0x270
pop rdi
ret