Function at 0xec126a
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
push ebx
push esi
push edi
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov edi, eax
xor edx, edx
mov ecx, edi
mov ebx, dword [edi + 0x3c]
add ebx, edi
sub eax, dword [0xec101c]
mov dword [ebp - 0xc], eax
sbb edx, edx
neg eax
mov dword [ebp - 8], edx
movzx esi, word [ebx + 0x14]
adc edx, 0
neg edx
mov dword [ebp - 0x10], esi
push edx
mov edx, dword [ebx + 0xa0]
push eax
mov eax, dword [esi + ebx + 0x24]
add eax, dword [0xec1028]
push eax
push dword [ebx + 0xa4]
call fcn.00ec1048
mov edx, dword [esi + ebx + 0x28]
add esp, 0x10
mov eax, dword [0xec1028]
sub edx, eax
cmp edx, 1
jbe 0xec12e0
mov ecx, dword [esi + ebx + 0x24]
add ecx, eax
add ecx, edi
call fcn.00ec11d2
mov eax, dword [0xec1020]
add esi, 0x40
add esi, ebx
cmp eax, 1
jbe 0xec1315
mov edx, dword [esi + 0x10]
sub edx, dword [0xec102c]
cmp edx, 1
jbe 0xec1312
mov ecx, dword [esi + 0xc]
add ecx, dword [0xec102c]
add ecx, edi
call fcn.00ec11d2
mov eax, dword [0xec1020]
add esi, 0x28
cmp eax, 2
jbe 0xec1340
mov edx, dword [esi + 0x10]
sub edx, dword [0xec1030]
cmp edx, 1
jbe 0xec133d
mov ecx, dword [esi + 0xc]
add ecx, dword [0xec1030]
add ecx, edi
call fcn.00ec11d2
mov eax, dword [0xec1020]
add esi, 0x28
cmp eax, 3
jbe 0xec136b
mov edx, dword [esi + 0x10]
sub edx, dword [0xec1034]
cmp edx, 1
jbe 0xec1368
mov ecx, dword [esi + 0xc]
add ecx, dword [0xec1034]
add ecx, edi
call fcn.00ec11d2
mov eax, dword [0xec1020]
add esi, 0x28
cmp eax, 4
jbe 0xec1396
mov edx, dword [esi + 0x10]
sub edx, dword [0xec1038]
cmp edx, 1
jbe 0xec1393
mov ecx, dword [esi + 0xc]
add ecx, dword [0xec1038]
add ecx, edi
call fcn.00ec11d2
mov eax, dword [0xec1020]
add esi, 0x28
cmp eax, 5
jbe 0xec13c1
mov edx, dword [esi + 0x10]
sub edx, dword [0xec103c]
cmp edx, 1
jbe 0xec13be
mov ecx, dword [esi + 0xc]
add ecx, dword [0xec103c]
add ecx, edi
call fcn.00ec11d2
mov eax, dword [0xec1020]
add esi, 0x28
cmp eax, 6
jbe 0xec13ec
mov edx, dword [esi + 0x10]
sub edx, dword [0xec1040]
cmp edx, 1
jbe 0xec13e9
mov ecx, dword [esi + 0xc]
add ecx, dword [0xec1040]
add ecx, edi
call fcn.00ec11d2
mov eax, dword [0xec1020]
add esi, 0x28
cmp eax, 7
jbe 0xec140c
mov edx, dword [esi + 0x10]
mov eax, dword [0xec1044]
sub edx, eax
cmp edx, 1
jbe 0xec140c
mov ecx, dword [esi + 0xc]
add ecx, eax
add ecx, edi
call fcn.00ec11d2
cmp dword [0xec1014], 0
je 0xec1455
lea eax, [ebx + 0x88]
cmp dword [eax], 0
je 0xec1455
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea ecx, [ebp - 4]
push ecx
push 4
push 8
push eax
call esi
mov eax, dword [0xec1014]
lea ecx, [ebx + 0x88]
mov dword [ecx], eax
mov eax, dword [0xec1018]
mov dword [ebx + 0x8c], eax
lea eax, [ebp - 4]
push eax
push dword [ebp - 4]
push 8
push ecx
call esi
mov eax, dword [ebp - 0x10]
mov ecx, edi
push dword [ebp - 8]
mov edx, dword [ebx + 0xa0]
push dword [ebp - 0xc]
mov eax, dword [eax + ebx + 0x24]
add eax, dword [0xec1028]
push eax
push dword [ebx + 0xa4]
call fcn.00ec1048
mov edx, dword [0xec1004]
add esp, 0x10
push dword [0xec1010]
push dword [0xec100c]
push ecx
mov ecx, edi
call fcn.00ec110c
mov eax, dword [section..text]
add esp, 0xc
add eax, edi
call eax
push eax
call dword [sym.imp.KERNEL32.dll_ExitProcess]