Function at 0x1000ec90
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1002ab1a
mov eax, dword fs:[0]
push eax
sub esp, 0x180
push esi
push edi
mov eax, dword [0x10039340]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], 0
sub dword [ebp + 0xc], 1
jne 0x1000ef0e
call fcn.100078d0
mov eax, dword [0x1003aae0]
cmp eax, dword [0x1003aae4]
jne 0x1000ef0e
mov esi, dword [section..data]
lea ecx, [ebp - 0x58]
mov dword [ebp - 0xc0], 0x1002c798
call fcn.10004920
mov eax, dword [ebp - 0xc0]
push 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x10], 1
mov eax, dword [eax + 4]
mov dword [ebp + eax - 0xc0], vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0xc0]
mov ecx, dword [eax + 4]
lea eax, [ecx - 8]
mov dword [ebp + ecx - 0xc4], eax
lea ecx, [ebp - 0xc0]
mov eax, dword [ebp - 0xc0]
add ecx, dword [eax + 4]
lea eax, [ebp - 0xbc]
push eax
call fcn.1000d400
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 4], 2
mov eax, dword [eax + 4]
mov dword [ebp + eax - 0xc0], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0xc0]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0xc4], eax
lea ecx, [ebp - 0xbc]
call fcn.100047d0
push 0x40
push 0x22
push esi
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 3
call fcn.1000d810
test eax, eax
jne 0x1000edd8
mov eax, dword [ebp - 0xc0]
mov ecx, dword [eax + 4]
xor eax, eax
cmp dword [ebp + ecx - 0x88], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ebp + ecx - 0xb4]
and eax, 0x17
mov dword [ebp + ecx - 0xb4], eax
mov ecx, dword [ebp + ecx - 0xb0]
and ecx, eax
jne 0x1000ef26
lea eax, [ebp - 0xc0]
mov dword [ebp - 4], 4
push 0x1002c7a8
push eax
call fcn.10001290
add esp, 8
lea eax, [ebp - 0xc0]
lea ecx, [ebp - 0x18c]
push 1
push eax
call fcn.100049a0
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 6
call fcn.10006730
mov esi, dword [str.This_file_only_does_anything_when_the__Regex_Replacer__extension_is_used._nReplacement_commands_must_be_formatted_like_this:_nREGEXregular_expressionBECOMESreplacement_textMODIFIERmodifiersEND_nreplacement_text_can_reference_capture_groups_with_a___followed_by_their_number__e.g.__1_references_first_capture_group_._nmodifiers_can_contain_the_following:_n_g__the_replacement_is_global._n_i__the_replacement_ignores_the_case._nIf_empty_the_replacement_is_only_for_the_first_match_and_case_sensitive._nAll_text_in_this_file_outside_of_a_replacement_command_is_ignored._nThis_file_must_be_encoded_in_Unicode__UTF_16_Little_Endian_._nLearn__build___test_Regular_Expressions:_https:__regexr.com_]
mov ecx, esi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1000ee21
sub ecx, edx
sar ecx, 1
lea edi, [esi + ecx*2]
cmp esi, edi
je 0x1000ee70
movzx ecx, word [esi]
mov eax, ecx
mov dword [ebp + 0xc], eax
cmp ecx, 0xa
jne 0x1000ee50
mov eax, 0x1002c7ac
mov ecx, 4
jmp 0x1000ee58
lea eax, [ebp + 0xc]
mov ecx, 2
push ecx
push eax
lea eax, [ebp - 0x18c]
push eax
call fcn.10002100
add esi, 2
add esp, 0xc
cmp esi, edi
jne 0x1000ee37
push 1
call fcn.10025e67
add esp, 4
push 0
push 0
push eax
push 0x10001160
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x18c]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ofstream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x18c]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x190], eax
lea ecx, [ebp - 0x188]
call fcn.10005bf0
mov eax, dword [ebp - 0x18c]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_ostream_char__struct_std::char_traits_char__.virtual_0], vtable.std::basic_ostream_char__struct_std::char_traits_char__.0
mov eax, dword [ebp - 0x18c]
mov ecx, dword [eax + 4]
lea eax, [ecx - 8]
mov dword [ebp + ecx - 0x190], eax
lea eax, [ebp - 0x124]
mov dword [ebp - 4], 7
push eax
mov dword [ebp - method.std::ios_base.virtual_0], vtable.std::ios_base.0
call fcn.10010247
add esp, 4
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0xc
test cl, 4
je 0x1000ef32
mov esi, str.ios_base::badbit_set
jmp 0x1000ef42
test cl, 2
mov esi, str.ios_base::failbit_set
mov eax, str.ios_base::eofbit_set
cmove esi, eax
lea eax, [ebp - 0xc8]
push 1
push eax
call fcn.1000d5f0
add esp, 8
lea ecx, [ebp - 0xdc]
push eax
push esi
call fcn.100053a0
push 0x10036270
lea eax, [ebp - 0xdc]
push eax
call sub.msvcrt.dll__CxxThrowException
int3