Function at 0x100057d0
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x380
mov eax, dword [0x1000d00c]
xor eax, ebp
mov dword [ebp - 4], eax
mov al, byte [ebp + 8]
push ebx
push esi
push edi
cmp al, 0x62
je 0x10005c15
cmp al, 0x42
je 0x10005c15
cmp al, 0x74
je 0x10005bb7
cmp al, 0x54
je 0x10005bb7
cmp al, 0x6f
je 0x10005af9
cmp al, 0x4f
je 0x10005af9
cmp al, 0x66
je 0x10005825
cmp al, 0x46
jne 0x100059ef
mov eax, dword ds:[0x13c1aac]
add eax, 0x6ec
mov ecx, 0xbd
lea edi, [ebp - 0x378]
mov esi, eax
rep movsd dword es:[edi], dword [esi]
mov ebx, dword [ebp - 0xac]
test bx, bx
je 0x10005a8d
mov eax, dword [0x1000dcb8]
xor edi, edi
movzx ecx, bx
mov dword [0x1000dcbc], eax
mov eax, ecx
mov byte [0x1000d6da], 0
cmp ecx, 0xbd3
ja 0x100058fa
je case.0x10005a10.6421
cmp ecx, 0x956
ja 0x100058de
je case.0x10005a10.6421
cmp ecx, 0x242
ja 0x100058b0
je case.0x10005a10.6421
sub eax, 0x19c
cmp eax, 0x46
ja case.default.0x10005a10
movzx eax, byte [eax + 0x10005ca0]
jmp dword [eax*4 + 0x10005c98]
cmp ecx, 0x6cb
ja case.default.0x10005a10
je case.0x10005a10.6421
sub eax, 0x309
cmp eax, 8
ja case.default.0x10005a10
movzx eax, byte [eax + 0x10005cec]
jmp dword [eax*4 + 0x10005ce8]
sub eax, 0x957
cmp eax, 0x39
ja case.default.0x10005a10
movzx eax, byte [eax + 0x10005d00]
jmp dword [eax*4 + 0x10005cf8]
cmp ecx, 0xcee
ja 0x1000591e
je case.0x10005a10.6421
sub eax, 0xbd4
cmp eax, 0xb5
ja case.default.0x10005a10
movzx eax, byte [eax + 0x10005d44]
jmp dword [eax*4 + 0x10005d3c]
cmp ecx, 0xfaa
ja 0x10005940
je case.0x10005a10.6421
sub eax, 0xcf2
cmp eax, 0x51
ja case.default.0x10005a10
movzx eax, byte [eax + 0x10005e04]
jmp dword [eax*4 + 0x10005dfc]
cmp ecx, 0x17d5
ja 0x10005964
je case.0x10005a10.6421
sub eax, 0xfab
cmp eax, 0x89
ja case.default.0x10005a10
movzx eax, byte [eax + 0x10005e60]
jmp dword [eax*4 + 0x10005e58]
cmp ecx, 0x1914
ja 0x10005a02
je case.0x10005a10.6421
sub eax, 0x17d6
je case.0x10005a10.6421
sub eax, 3
jne case.default.0x10005a10
mov edi, ecx
cmp ecx, edi
je 0x10005a17
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x49099a
mov dword [ebp - 0x37c], str.Item_incorreto.
mov dword [ebp - 8], 0x40
call esi
mov dword [0x49099b], 0xffff0000
mov eax, dword [0x684bb0]
mov dword [ebp - 0x380], eax
push dword [ebp - 0x37c]
mov ecx, dword [ebp - 0x380]
call dword [0x1000d024]
lea eax, [ebp - 8]
mov dword [0x49099b], 0xffffaaaa
push eax
push dword [ebp - 8]
push 4
push 0x49099a
call esi
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10007863
mov esp, ebp
pop ebp
ret
sub eax, 0x1915
cmp eax, 3
ja case.default.0x10005a10
jmp dword [eax*4 + 0x10005eec]
xor esi, esi
nop dword [eax]
movzx eax, word [ebp + esi*8 - 0x29c]
cmp eax, edi
jne 0x10005a35
mov edx, ebx
mov ecx, esi
call fcn.100033e0
inc esi
cmp esi, 0x3f
jl 0x10005a20
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x49099a
mov dword [ebp - 0x380], str.Item_agrupado_com_sucesso.
mov dword [ebp - 8], 0x40
call esi
mov dword [0x49099b], 0xffffff00
mov eax, dword [0x684bb0]
mov dword [ebp - 0x37c], eax
push dword [ebp - 0x380]
mov ecx, dword [ebp - 0x37c]
call dword [0x1000d024]
jmp 0x100059d5
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 8]
push eax
push 0x40
push 4
push 0x49099a
mov dword [ebp - 0x380], str.Coloque_o_item_no_ultimo_slot.
mov dword [ebp - 8], 0x40
call esi
mov dword [0x49099b], 0xffffff00
mov eax, dword [0x684bb0]
mov dword [ebp - 0x37c], eax
push dword [ebp - 0x380]
mov ecx, dword [ebp - 0x37c]
call dword [0x1000d024]
lea eax, [ebp - 8]
mov dword [0x49099b], 0xffffaaaa
push eax
push dword [ebp - 8]
push 4
push 0x49099a
call esi
jmp 0x10005c82
cmp dword [0x1000d800], 0
lea eax, [ebp - 8]
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
push eax
push 0x40
push 4
mov dword [ebp - 8], 0x40
push 0x49099a
je 0x10005b5b
mov dword [0x1000d800], 0
mov dword [ebp - 0x380], str.Camera_Zoom_Desativada
call esi
mov dword [0x49099b], 0xffff0000
mov eax, dword [0x684bb0]
mov dword [ebp - 0x37c], eax
push dword [ebp - 0x380]
mov ecx, dword [ebp - 0x37c]
call dword [0x1000d024]
jmp 0x10005b98
mov dword [0x1000d800], 1
mov dword [ebp - 0x380], str.Camera_Zoom_Ativada
call esi
mov dword [0x49099b], 0xffffff00
mov eax, dword [0x684bb0]
mov dword [ebp - 0x37c], eax
push dword [ebp - 0x380]
mov ecx, dword [ebp - 0x37c]
call dword [0x1000d024]
lea eax, [ebp - 8]
mov dword [0x49099b], 0xffffaaaa
push eax
push dword [ebp - 8]
push 4
push 0x49099a
call esi
jmp 0x10005c82
mov ecx, dword ds:[0x13c1aac]
add ecx, 0xdfc
xor eax, eax
mov ax, word ds:[ecx]
mov eax, dword ds:[0x13c1aac]
add eax, 0x6ec
mov eax, 0x7c
mov word [ebp - 0x84], ax
mov eax, 0x334
mov word [ebp - 0x80], ax
mov ecx, dword ds:[0x13c1aac]
add ecx, 0xdfc
xor eax, eax
mov ax, word ds:[ecx]
mov word [ebp - 0x7e], ax
mov eax, dword [str._carg]
mov dword [ebp - 0x78], eax
mov ax, word [0x1000a370]
mov word [ebp - 0x74], ax
jmp 0x10005c6f
mov ecx, dword ds:[0x13c1aac]
add ecx, 0xdfc
xor eax, eax
mov ax, word ds:[ecx]
mov eax, dword ds:[0x13c1aac]
add eax, 0x6ec
mov eax, 0x7c
mov word [ebp - 0x84], ax
mov eax, 0x334
mov word [ebp - 0x80], ax
mov ecx, dword ds:[0x13c1aac]
add ecx, 0xdfc
xor eax, eax
mov ax, word ds:[ecx]
mov word [ebp - 0x7e], ax
mov eax, dword [str._bag]
mov dword [ebp - 0x78], eax
mov al, byte [0x1000a368]
mov byte [ebp - 0x74], al
lea eax, [ebp - 0x84]
push 0x7c
push eax
mov eax, 0x569b76
call eax
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, 1
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.10007863
mov esp, ebp
pop ebp
ret