Function at 0x140063d40
Capabilities:
Write file on windows

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push r14
sub rsp, 0x438
mov r9, qword [0x140175020]
mov r14, rdx
movsxd rdx, dword [0x1401bb164]
mov rbp, rcx
imul r8, rdx, 0x38
test byte [r8 + r9 + 0x18], 0x40
je 0x140063da2
mov r8, qword [r8 + r9]
lea rcx, str._s_MONITOR:_s:
mov rdx, qword [section..data]
call fcn.140002310
mov rdx, r14
lea rcx, str.Processing_input_line___s__n
call fcn.140001fb0
mov r9, qword [0x140175020]
mov edx, dword [0x1401bb164]
movzx eax, byte [r14]
test al, al
je 0x1400641e4
cmp al, 0x3b
je 0x1400641e4
mov qword [rsp + 0x458], rbx
mov rcx, r14
mov qword [rsp + 0x460], rsi
mov qword [rsp + 0x468], rdi
cmp al, 0x23
jne 0x140063f4f
mov r8d, 9
lea rdx, [0x14018c1b0]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
test eax, eax
jne 0x140063f0a
movzx eax, byte [r14 + 9]
lea rdi, [r14 + 9]
lea rbx, [rsp + 0x20]
test al, al
je 0x140063e8b
mov rbp, 0xffffffffffffffff
cmp al, 0x24
jne 0x140063e6f
cmp byte [rdi + 1], 0x7b
jne 0x140063e6f
mov edx, 0x7d
lea rcx, [rdi + 2]
call sub.VCRUNTIME140.dll_strchr
mov rsi, rax
test rax, rax
je 0x140063eec
lea rcx, [rdi + 2]
mov byte [rax], 0
call fcn.14001c820
test rax, rax
je 0x140063e77
mov rdx, rbx
sub rdx, rax
nop dword [rax]
movzx ecx, byte [rax]
mov byte [rdx + rax], cl
lea rax, [rax + 1]
test cl, cl
jne 0x140063e50
mov rax, rbp
inc rax
cmp byte [rbx + rax], 0
jne 0x140063e61
add rbx, rax
jmp 0x140063e77
mov byte [rbx], al
mov rsi, rdi
inc rbx
movzx eax, byte [rsi + 1]
lea rdi, [rsi + 1]
test al, al
jne 0x140063e11
mov rbp, qword [rsp + 0x450]
mov byte [rbx], 0
cmp byte [rsp + 0x20], 0
je 0x140063fbd
movsxd rax, dword [0x1401bb164]
imul rdx, rax, 0x38
mov rax, qword [0x140175020]
test byte [rdx + rax + 0x18], 0x40
je 0x140063eda
mov r8, qword [rdx + rax]
lea rcx, str._s_MONITOR:_s:
mov rdx, qword [section..data]
call fcn.140002310
lea rdx, [rsp + 0x20]
lea rcx, str.Including_file___s__n
call fcn.140001fb0
lea rdx, [rsp + 0x20]
mov rcx, rbp
call fcn.140064560
jmp 0x140063fbd
mov r9, r14
lea r8, str.Badly_formatted_registry_include_file_name__missing__in___s__n
mov edx, 1
mov ecx, 0xbce
call fcn.140001480
jmp 0x140063fbd
movsxd rax, dword [0x1401bb164]
imul rcx, rax, 0x38
mov rax, qword [0x140175020]
test byte [rcx + rax + 0x18], 0x40
je 0x140063fbd
mov r8, qword [rcx + rax]
lea rcx, str._s_MONITOR:_s:
mov rdx, qword [section..data]
call fcn.140002310
mov rdx, r14
lea rcx, str.Ignoring_line_as_it_has_unknown_registry_directive___s__n
call fcn.140001fb0
jmp 0x140063fbd
mov edx, 0x3d
call sub.VCRUNTIME140.dll_strchr
mov rsi, rax
test rax, rax
jne 0x140063f71
mov r8b, 1
mov rdx, r14
mov rcx, rbp
call fcn.140064bf0
jmp 0x140063fbd
mov edx, 0x2f
mov qword [rsp + 0x420], r15
mov rcx, r14
mov byte [rax], 0
inc rsi
call fcn.1401570ce
mov r15, rax
test rax, rax
je 0x140063fe0
mov r8b, 1
mov byte [rax], 0
mov rdx, r14
mov rcx, rbp
inc r15
call fcn.140064bf0
mov qword [rsp + 0x450], rax
test rax, rax
jne 0x140063fe3
mov r15, qword [rsp + 0x420]
mov rsi, qword [rsp + 0x460]
mov rbx, qword [rsp + 0x458]
mov rdi, qword [rsp + 0x468]
add rsp, 0x438
pop r14
pop rbp
ret
mov r15, r14
mov qword [rsp + 0x430], r12
lea rdx, [0x14018c17c]
mov rcx, rsi
mov qword [rsp + 0x428], r13
call sub.VCRUNTIME140.dll_strstr
test rax, rax
je 0x140064137
lea rdx, [0x14018c178]
mov rcx, rsi
call sub.VCRUNTIME140.dll_strstr
mov r13, rax
test rax, rax
je 0x140064137
mov edx, 0x7d
mov rcx, rsi
call sub.VCRUNTIME140.dll_strchr
mov r12, rax
test rax, rax
je 0x140064137
mov rbx, rax
sub rbx, r13
mov rcx, rbx
call fcn.140001bb0
lea r8, [rbx - 2]
mov rcx, rax
lea rdx, [r13 + 2]
mov rdi, rax
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
mov rcx, rdi
sub rcx, r13
mov byte [rcx + r12 - 2], 0
mov rcx, rdi
call fcn.14001c820
mov rcx, rax
mov rbx, rax
call fcn.140013c10
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
test rbx, rbx
je 0x140064137
mov rbp, 0xffffffffffffffff
mov rcx, rbp
nop dword [rax]
inc rcx
cmp byte [rbx + rcx], 0
jne 0x1400640a0
nop dword [rax]
inc rbp
cmp byte [rsi + rbp], 0
jne 0x1400640b0
inc rcx
add rcx, rbp
call fcn.140001bb0
sub r13, rsi
mov rdx, rsi
mov r8, r13
mov rcx, rax
mov r14, rax
mov byte [rax], 0
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncpy]
lea rcx, [r14 - 1]
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x1400640e0
xor edx, edx
nop dword [rax]
movzx eax, byte [rbx + rdx]
mov byte [rcx + rdx], al
lea rdx, [rdx + 1]
test al, al
jne 0x1400640f0
lea rcx, [r14 - 1]
cmp byte [rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x140064103
xor edx, edx
nop
movzx eax, byte [r12 + rdx + 1]
mov byte [rcx + rdx], al
lea rdx, [rdx + 1]
test al, al
jne 0x140064110
mov rcx, r14
call fcn.1400642e0
mov rcx, r14
mov rdi, rax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x14006418a
mov rbp, 0xffffffffffffffff
nop
cmp byte [rsi + rbp + 1], 0
lea rbp, [rbp + 1]
jne 0x140064140
lea rcx, [rbp + 1]
call fcn.140001bb0
mov rdi, rax
mov rdx, rax
movzx eax, byte [rsi]
test al, al
je 0x140064187
mov r8, rsi
movzx ecx, al
cmp al, 0x5c
jne 0x14006416f
movzx ecx, byte [rsi + 1]
mov byte [rdx], cl
inc rdx
inc rsi
cmp al, 0x5c
cmovne rsi, r8
inc rsi
movzx eax, byte [rsi]
test al, al
jne 0x140064161
mov byte [rdx], 0
mov rsi, qword [rsp + 0x450]
mov rdx, r15
mov rcx, rsi
call fcn.1400a1090
mov r13, qword [rsp + 0x428]
mov rbx, rax
mov r12, qword [rsp + 0x430]
test rax, rax
jne 0x1400641cb
mov rcx, r15
call fcn.1400a1210
mov rdx, rax
mov rcx, rsi
mov rbx, rax
call fcn.1400a0d90
mov rdx, rdi
mov rcx, rbx
call fcn.140012060
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x140063fb5
movsxd rax, edx
imul rcx, rax, 0x38
test byte [rcx + r9 + 0x18], 0x40
je 0x140063fd5
mov r8, qword [rcx + r9]
lea rcx, str._s_MONITOR:_s:
mov rdx, qword [section..data]
call fcn.140002310
mov rdx, r14
lea rcx, str.Ignoring_line_n
add rsp, 0x438
pop r14
pop rbp
jmp fcn.140001fb0