Function at 0x180070670
Capabilities:
Access peb ldr_data

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push r12
push r13
push r14
push r15
sub rsp, 0x20
mov r14, qword [rdx]
mov r12, rdx
mov ecx, dword [0x1800e0278]
mov rbp, r9
mov rax, qword gs:[0x58]
mov rbx, r14
mov qword [r8], r14
mov rsi, r14
movzx r15d, byte [r14]
mov r13d, 2
mov qword [rsp + 0x68], rdi
lea rdx, [rax + rcx*8]
mov qword [rsp + 0x60], rdx
mov r9d, 0x14
movabs r8, 0x100002600
test rbp, rbp
jne 0x180070789
movzx ecx, byte [rbx]
cmp cl, 0x3b
je 0x180070789
cmp cl, 0x23
je 0x180070789
cmp byte [rsp + 0x80], bpl
je 0x1800708f5
xor edx, edx
mov rsi, rbx
cmp cl, 0x20
ja 0x180070747
movsx rax, cl
bt r8, rax
jae 0x180070747
cmp cl, 0xa
je 0x18007072a
cmp cl, 0xd
je 0x18007072a
movzx ecx, byte [rbx + 1]
inc rbx
jmp 0x180070705
inc edx
cmp cl, 0xd
jne 0x18007073a
cmp byte [rbx + 1], 0xa
mov rax, r13
je 0x18007073f
mov eax, 1
add rbx, rax
movzx ecx, byte [rbx]
jmp 0x180070705
cmp cl, 0x3b
je 0x180070755
cmp cl, 0x23
jne 0x1800708f5
test edx, edx
jle 0x18007077b
mov edi, edx
mov rcx, r14
mov r8d, edx
mov dl, 0xa
call sub.VCRUNTIME140.dll_memset
add r14, rdi
mov r9d, 0x14
movabs r8, 0x100002600
mov rdx, qword [rsp + 0x60]
mov qword [r12], rbx
jmp 0x1800706d7
movzx eax, byte [rbx]
test al, al
je 0x1800707ae
mov rcx, rbx
cmp al, 0xa
je 0x1800707ae
cmp al, 0xd
je 0x1800707ae
movzx eax, byte [rcx + 1]
lea rsi, [rcx + 1]
mov qword [r12], rsi
mov rcx, rsi
test al, al
jne 0x180070793
cmp r14, rbx
jae 0x1800707e1
mov rdi, rsi
mov rdx, rbx
sub rdi, rbx
mov rcx, r14
mov r8, rdi
call sub.VCRUNTIME140.dll_memmove
mov rdx, qword [rsp + 0x60]
movabs r8, 0x100002600
mov r9d, 0x14
mov byte [rdi + r14], 0
movzx r15d, byte [rsi]
mov byte [rsi], 0
test rbp, rbp
je 0x1800708a7
dec rsi
cmp rsi, r14
jbe 0x180070816
nop dword [rax]
movsx rax, byte [rsi]
cmp al, 0x20
ja 0x180070816
bt r8, rax
jae 0x180070816
dec rsi
cmp rsi, r14
ja 0x180070800
movzx ebp, byte [rsi + 1]
mov edi, r9d
add rdi, qword [rdx]
mov byte [rsi + 1], 0
mov eax, dword [rdi]
cmp dword [0x1800e0290], eax
jle 0x18007084f
lea rcx, [0x1800e0290]
call fcn.180071670
cmp dword [0x1800e0290], 0xffffffff
jne 0x18007084f
lea rcx, [0x1800e0290]
call fcn.180071604
mov rdx, qword [rsp + 0x78]
mov rcx, r14
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsicmp]
test eax, eax
js 0x18007089e
mov eax, dword [rdi]
cmp dword [0x1800e0290], eax
jle 0x18007088c
lea rcx, [0x1800e0290]
call fcn.180071670
cmp dword [0x1800e0290], 0xffffffff
jne 0x18007088c
lea rcx, [0x1800e0290]
call fcn.180071604
mov rcx, qword [rsp + 0x78]
mov rdx, r14
call qword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsicmp]
test eax, eax
jns 0x1800708f0
mov byte [rsi + 1], bpl
mov rbp, qword [rsp + 0x78]
test r15b, r15b
je 0x180070939
mov rcx, qword [r12]
mov rax, rcx
sub rax, rbx
add r14, rax
mov byte [rcx], r15b
cmp r15b, 0xd
jne 0x1800708cf
cmp byte [rcx + 1], 0xa
mov rax, r13
je 0x1800708d4
mov eax, 1
mov rdx, qword [rsp + 0x60]
lea rbx, [rcx + rax]
mov byte [r14], 0xa
mov rsi, rbx
mov qword [r12], rbx
inc r14
jmp 0x1800706c7
mov rbp, qword [rsp + 0x78]
mov r8, qword [rsp + 0x70]
mov rax, qword [r12]
cmp qword [r8], rax
jne 0x18007090e
mov qword [r8], 0
xor al, al
jmp 0x18007093b
mov byte [r14 - 1], 0
test rbp, rbp
je 0x180070939
test r15b, r15b
je 0x180070939
mov byte [rax], r15b
cmp r15b, 0xd
jne 0x18007092c
cmp byte [rax + 1], 0xa
je 0x180070932
mov r13d, 1
add rax, r13
mov qword [r12], rax
mov al, 1
mov rdi, qword [rsp + 0x68]
add rsp, 0x20
pop r15
pop r14
pop r13
pop r12
pop rsi
pop rbp
pop rbx
ret