Function at 0x1337c0e92de0
Capabilities:
Get windows directory from kuser_shared_data

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 8], rcx
push rbp
lea rbp, [rax - 0x5f]
sub rsp, 0xf0
movaps xmmword [rax - 0x18], xmm6
movaps xmmword [rax - 0x28], xmm7
xor ebx, ebx
mov dword [rbp + 0x6b], 4
mov dword [rbp + 0x67], 0x3a2ef189
lea rdx, [rbp + 0x67]
lea rcx, [rbp - 0x19]
call fcn.1337c0e87a10
nop
cmp byte [rbp + 7], bl
je 0x1337c0e92ee4
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x39], xmm0
mov qword [rbp - 0x29], rbx
lea rax, [rbp - 0x19]
cmp qword [rbp - 1], 7
cmova rax, qword [rbp - 0x19]
mov qword [rbp - 0x59], rax
mov rax, qword [rbp - 9]
mov qword [rbp - 0x51], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp - 0x39]
lea rcx, [rbp - 0x59]
call fcn.1337c0e855c0
nop
mov r10, qword [rbp - 0x39]
test r10, r10
je 0x1337c0e92ee4
dec r10
and r10, 0xfffffffffe000000
mov rcx, qword gs:[0x30]
mov rax, qword [r10 + 0x100]
cmp rcx, rax
sete cl
mov r9, qword [rbp - 0x39]
mov rax, r9
sub rax, r10
shr rax, 0x10
lea rax, [rax + rax*4]
shl rax, 4
lea rdx, [r10 + 0x108]
add rdx, rax
mov eax, dword [rdx + 4]
sub rdx, rax
test cl, cl
je 0x1337c0e92ed8
cmp byte [rdx + 0xe], bl
jne 0x1337c0e92ed3
mov rax, qword [rdx + 0x20]
mov qword [r9], rax
mov qword [rdx + 0x20], r9
add dword [rdx + 0x18], 0xffffffff
jne 0x1337c0e92ee4
mov rcx, rdx
call fcn.1337c0ee0230
jmp 0x1337c0e92ee4
mov r8b, 1
jmp 0x1337c0e92edb
xor r8d, r8d
mov rcx, r10
call fcn.1337c0edf330
nop
cmp byte [rbp + 7], 0
je 0x1337c0e92ef3
lea rcx, [rbp - 0x19]
call fcn.1337c0e6bd20
mov dword [rbp + 0x6b], 7
mov dword [rbp + 0x67], 0x38cfd13a
lea rdx, [rbp + 0x67]
lea rcx, [rbp - 0x19]
call fcn.1337c0e87a10
nop
cmp byte [rbp + 7], 0
je 0x1337c0e93038
lea rdx, [0x1337c11cf4f0]
lea rcx, [rbp - 0x39]
call fcn.1337c0e7d2c0
nop
lea rdx, [rbp - 0x39]
cmp qword [rbp - 0x21], 7
cmova rdx, qword [rbp - 0x39]
mov r8, qword [rbp - 0x29]
lea rcx, [rbp - 0x19]
call fcn.1337c0e8b320
nop
lea rcx, [rbp - 0x39]
call fcn.1337c0e6bd20
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x59], xmm0
mov qword [rbp - 0x49], rbx
mov edx, 8
lea ecx, [rdx - 7]
call fcn.1337c0edf950
mov qword [rbp - 0x59], rax
lea rcx, [rax + 8]
mov qword [rbp - 0x49], rcx
mov dword [rax], 0x4037f21a
mov dword [rax + 4], 0x29
mov qword [rbp - 0x51], rcx
lea rax, [rbp - 0x19]
cmp qword [rbp - 1], 7
cmova rax, qword [rbp - 0x19]
mov qword [rbp - 0x79], rax
mov rax, qword [rbp - 9]
mov qword [rbp - 0x71], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp - 0x59]
lea rcx, [rbp - 0x79]
call fcn.1337c0e855c0
nop
mov r10, qword [rbp - 0x59]
test r10, r10
je 0x1337c0e93038
dec r10
and r10, 0xfffffffffe000000
mov rcx, qword gs:[0x30]
mov rax, qword [r10 + 0x100]
cmp rcx, rax
sete cl
mov r9, qword [rbp - 0x59]
mov rax, r9
sub rax, r10
shr rax, 0x10
lea rax, [rax + rax*4]
shl rax, 4
lea rdx, [r10 + 0x108]
add rdx, rax
mov eax, dword [rdx + 4]
sub rdx, rax
test cl, cl
je 0x1337c0e9302c
cmp byte [rdx + 0xe], 0
jne 0x1337c0e93027
mov rax, qword [rdx + 0x20]
mov qword [r9], rax
mov qword [rdx + 0x20], r9
add dword [rdx + 0x18], 0xffffffff
jne 0x1337c0e93038
mov rcx, rdx
call fcn.1337c0ee0230
jmp 0x1337c0e93038
mov r8b, 1
jmp 0x1337c0e9302f
xor r8d, r8d
mov rcx, r10
call fcn.1337c0edf330
nop
cmp byte [rbp + 7], 0
je 0x1337c0e93047
lea rcx, [rbp - 0x19]
call fcn.1337c0e6bd20
xorps xmm0, xmm0
movups xmmword [rbp - 0x59], xmm0
mov qword [rbp - 0x49], rbx
mov qword [rbp - 0x41], rbx
mov edx, 0x7ffe0030
mov r8, 0xffffffffffffffff
inc r8
cmp word [rdx + r8*2], 0
jne 0x1337c0e93062
lea rcx, [rbp - 0x59]
call fcn.1337c0e7d600
nop
lea rdx, [0x1337c11cf538]
lea rcx, [rbp - 0x19]
call fcn.1337c0e7d2c0
nop
lea r8, [rbp - 0x59]
cmp qword [rbp - 0x41], 7
cmova r8, qword [rbp - 0x59]
mov r9, qword [rbp - 0x49]
xor edx, edx
lea rcx, [rbp - 0x19]
call fcn.1337c0e740a0
xorps xmm0, xmm0
movups xmmword [rbp - 0x79], xmm0
mov qword [rbp - 0x69], rbx
mov qword [rbp - 0x61], rbx
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x79], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 0x69], xmm1
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 7
mov word [rax], bx
lea rcx, [rbp - 0x19]
call fcn.1337c0e6bd20
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x39], xmm0
mov qword [rbp - 0x29], rbx
lea rax, [rbp - 0x79]
cmp qword [rbp - 0x61], 7
cmova rax, qword [rbp - 0x79]
mov qword [rbp + 0xf], rax
mov rax, qword [rbp - 0x69]
mov qword [rbp + 0x17], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp - 0x39]
lea rcx, [rbp + 0xf]
call fcn.1337c0e855c0
nop
lea rcx, [rbp - 0x39]
call fcn.1337c0e55710
lea rdx, [0x1337c11cf560]
lea rcx, [rbp - 0x39]
call fcn.1337c0e7d2c0
nop
lea r8, [rbp - 0x59]
cmp qword [rbp - 0x41], 7
cmova r8, qword [rbp - 0x59]
mov r9, qword [rbp - 0x49]
xor edx, edx
lea rcx, [rbp - 0x39]
call fcn.1337c0e740a0
movups xmm6, xmmword [rax]
movups xmm7, xmmword [rax + 0x10]
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 7
mov word [rax], bx
lea rcx, [rbp - 0x79]
call fcn.1337c0e6bd20
movups xmmword [rbp - 0x79], xmm6
movups xmmword [rbp - 0x69], xmm7
lea rcx, [rbp - 0x39]
call fcn.1337c0e6bd20
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x39], xmm0
mov qword [rbp - 0x29], rbx
lea rax, [rbp - 0x79]
cmp qword [rbp - 0x61], 7
cmova rax, qword [rbp - 0x79]
mov qword [rbp + 0x1f], rax
mov rax, qword [rbp - 0x69]
mov qword [rbp + 0x27], rax
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp - 0x39]
lea rcx, [rbp + 0x1f]
call fcn.1337c0e855c0
nop
lea rcx, [rbp - 0x39]
call fcn.1337c0e55710
nop
cmp qword [rbp - 0x61], 7
jbe 0x1337c0e93253
mov r10, qword [rbp - 0x79]
test r10, r10
je 0x1337c0e93253
dec r10
and r10, 0xfffffffffe000000
mov rcx, qword gs:[0x30]
mov rax, qword [r10 + 0x100]
cmp rcx, rax
sete cl
mov r9, qword [rbp - 0x79]
mov rax, r9
sub rax, r10
shr rax, 0x10
lea rax, [rax + rax*4]
shl rax, 4
lea rdx, [r10 + 0x108]
add rdx, rax
mov eax, dword [rdx + 4]
sub rdx, rax
test cl, cl
je 0x1337c0e93248
cmp byte [rdx + 0xe], 0
jne 0x1337c0e93243
mov rax, qword [rdx + 0x20]
mov qword [r9], rax
mov qword [rdx + 0x20], r9
add dword [rdx + 0x18], 0xffffffff
jne 0x1337c0e93253
mov rcx, rdx
call fcn.1337c0ee0230
jmp 0x1337c0e93253
mov r8b, 1
jmp 0x1337c0e9324b
xor r8d, r8d
mov rcx, r10
call fcn.1337c0edf330
mov qword [rbp - 0x69], rbx
mov qword [rbp - 0x61], 7
mov word [rbp - 0x79], bx
lea rcx, [rbp - 0x59]
call fcn.1337c0e6bd20
lea r11, [rsp + 0xf0]
mov rbx, qword [r11 + 0x18]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
mov rsp, r11
pop rbp
ret