Function at 0x1400604d0
Capabilities:
Access peb ldr_data
Get ntdll base address
Get number of processors
Get process filename
Get uefi variable

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0xb8
vmovaps xmmword [rsp + 0xa0], xmm7
vmovaps xmmword [rsp + 0x90], xmm6
mov r15, r9
mov r14, r8
mov rsi, rcx
mov rax, qword [0x1400c1548]
xor rax, rsp
mov qword [rsp + 0x88], rax
mov rax, qword [rcx + 0x38]
mov qword [rsp + 0x30], rdx
mov qword [rsp + 0x38], r9
vmovaps xmm0, xmmword [0x140073310]
vmovups xmmword [rsp + 0x40], xmm0
vmovaps xmm6, xmmword [0x140073300]
vmovups xmmword [rsp + 0x58], xmm6
mov qword [rsp + 0x28], 0
lea rdi, [rsp + 0x28]
mov qword [rsp + 0x50], rdi
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rbp, qword [rcx + 0x20]
mov qword [rbp + 0x18], rax
lea r12, [rsp + 0x30]
mov qword [rbp + 0x10], r12
lea rdx, str.uefi_interface
lea rbx, [rsp + 0x78]
mov rcx, rbx
call sub.ntdll.dll_RtlInitUnicodeString
mov byte [rsp + 0x77], 0
mov dword [rsp + 0x70], 1
mov dword [rsp + 0x6c], 0
lea r13, [rsp + 0x6c]
mov qword [rsp + 0x20], r13
lea r8, [rsp + 0x77]
lea r9, [rsp + 0x70]
mov rcx, rbx
mov rdx, rsi
call sub.ntdll.dll_NtQuerySystemEnvironmentValueEx
test eax, eax
jns 0x1400605cb
mov rax, qword [rbp + 0x18]
mov qword [rsi + 0x268], rax
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rbp + 0x10], xmm0
mov rbp, qword [rsi + 0x268]
mov rax, qword [rsi + 0x60]
mov qword [rsp + 0x30], rbp
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x40], r15
mov qword [rsp + 0x48], 0
vmovups xmmword [rsp + 0x58], xmm6
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x50], rdi
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov r14, rdi
mov rdi, qword [rcx + 0x20]
mov qword [rdi + 0x18], rax
mov qword [rdi + 0x10], r12
lea rdx, str.uefi_interface
lea rbx, [rsp + 0x78]
mov rcx, rbx
call sub.ntdll.dll_RtlInitUnicodeString
mov byte [rsp + 0x77], 0
mov dword [rsp + 0x70], 1
mov dword [rsp + 0x6c], 0
mov qword [rsp + 0x20], r13
lea r8, [rsp + 0x77]
lea r9, [rsp + 0x70]
mov rcx, rbx
mov rdx, rsi
call sub.ntdll.dll_NtQuerySystemEnvironmentValueEx
test eax, eax
jns 0x140060679
mov rax, qword [rdi + 0x18]
mov qword [rsi + 0x268], rax
vxorps xmm0, xmm0, xmm0
vmovups xmmword [rdi + 0x10], xmm0
mov rax, qword [rsi + 0x40]
mov qword [rsp + 0x30], rbp
mov qword [rsp + 0x38], r15
vxorps xmm7, xmm7, xmm7
vmovups xmmword [rsp + 0x40], xmm7
vmovups xmmword [rsp + 0x58], xmm6
mov qword [rsp + 0x28], 0
mov qword [rsp + 0x50], r14
mov rcx, qword gs:[0x60]
mov rcx, qword [rcx + 0x18]
mov rbx, qword [rcx + 0x20]
mov qword [rbx + 0x18], rax
mov qword [rbx + 0x10], r12
lea rdx, str.uefi_interface
lea rdi, [rsp + 0x78]
mov rcx, rdi
call sub.ntdll.dll_RtlInitUnicodeString
mov byte [rsp + 0x77], 0
mov dword [rsp + 0x70], 1
mov dword [rsp + 0x6c], 0
mov qword [rsp + 0x20], r13
lea r8, [rsp + 0x77]
lea r9, [rsp + 0x70]
mov rcx, rdi
mov rdx, rsi
call sub.ntdll.dll_NtQuerySystemEnvironmentValueEx
test eax, eax
jns 0x140060715
mov rax, qword [rbx + 0x18]
mov qword [rsi + 0x268], rax
vmovups xmmword [rbx + 0x10], xmm7
mov rcx, qword [rsp + 0x88]
xor rcx, rsp
call fcn.140067310
mov al, 1
vmovaps xmm6, xmmword [rsp + 0x90]
vmovaps xmm7, xmmword [rsp + 0xa0]
add rsp, 0xb8
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret