Function at 0x10007240
Capabilities:
Allocate or change rwx memory
Create thread
Execute shellcode via indirect call
Inject thread
Query or enumerate registry value
Spawn thread to rwx shellcode

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x11c
mov eax, dword [0x10033ad8]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea eax, [ebp - 0x110]
push esi
push edi
push eax
push 1
lea eax, [ebp - 0x109]
mov byte [ebp - 0x109], 0xe9
push eax
push 0x5251d5
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push eax
call esi
mov eax, 0x10005d00
sub eax, 0x5251da
mov dword [ebp - 0x114], eax
lea eax, [ebp - 0x110]
push eax
push 4
lea eax, [ebp - 0x114]
push eax
push 0x5251d6
call ebx
push eax
call esi
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x11c]
push eax
push 0x40
push 1
push 0x5251da
call edi
mov eax, 0x5251da
mov byte [eax], 0x90
lea eax, [ebp - 0x118]
push eax
push dword [ebp - 0x11c]
push 1
push 0x5251da
call edi
push 0
push 0
push 0
push 0x1000a720
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
push 0xa
push esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [ebp - 0x114]
mov byte [ebp - 0x109], 0xe9
push eax
push 1
lea eax, [ebp - 0x109]
push eax
push 0x40cee4
call ebx
mov esi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push eax
call esi
mov eax, 0x10004970
sub eax, 0x40cee9
mov dword [ebp - 0x110], eax
lea eax, [ebp - 0x114]
push eax
push 4
lea eax, [ebp - 0x110]
push eax
push 0x40cee5
call ebx
push eax
call esi
lea eax, [ebp - 0x11c]
push eax
push 0x40
push 1
push 0x40cee9
call edi
mov eax, 0x40cee9
mov byte [eax], 0x90
lea eax, [ebp - 0x118]
push eax
push dword [ebp - 0x11c]
push 1
push 0x40cee9
call edi
lea eax, [ebp - 0x114]
mov byte [ebp - 0x109], 0xe9
push eax
push 1
lea eax, [ebp - 0x109]
push eax
push 0x51c5ca
call ebx
push eax
call esi
mov eax, 0x10003520
sub eax, 0x51c5cf
mov dword [ebp - 0x110], eax
lea eax, [ebp - 0x114]
push eax
push 4
lea eax, [ebp - 0x110]
push eax
push 0x51c5cb
call ebx
push eax
call esi
lea eax, [ebp - 0x114]
mov byte [ebp - 0x109], 0xe9
push eax
push 1
lea eax, [ebp - 0x109]
push eax
push 0x51c611
call ebx
push eax
call esi
mov eax, 0x10003500
sub eax, 0x51c616
mov dword [ebp - 0x110], eax
lea eax, [ebp - 0x114]
push eax
push 4
lea eax, [ebp - 0x110]
push eax
push 0x51c612
call ebx
push eax
call esi
push 0x104
lea eax, [ebp - 0x108]
push 0
push eax
call fcn.10010ba0
add esp, 0xc
mov dword [ebp - 0x114], 0x104
lea eax, [ebp - 0x110]
push eax
push 0x20019
push 0
push str.SOFTWAREVooblyVooblygame13_v1.5_RC
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x100075be
mov ebx, dword [sym.imp.ADVAPI32.dll_RegQueryValueExA]
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x118]
push eax
push 0
push str.Auto_Save
push dword [ebp - 0x110]
call ebx
mov ecx, str.true
lea eax, [ebp - 0x108]
nop dword [eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x100074c0
test dl, dl
je 0x100074bc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x100074c0
add eax, 2
add ecx, 2
test dl, dl
jne 0x100074a0
xor esi, esi
jmp 0x100074c5
sbb esi, esi
or esi, 1
push dword [ebp - 0x110]
mov edi, dword [sym.imp.ADVAPI32.dll_RegCloseKey]
call edi
test esi, esi
jne 0x100075b2
push 0x104
lea eax, [ebp - 0x108]
push esi
push eax
call fcn.10010ba0
add esp, 0xc
mov dword [ebp - 0x114], 0x104
lea eax, [ebp - 0x110]
push eax
push 0x20019
push esi
push str.SOFTWAREVooblyVooblygame13
push 0x80000001
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x10007581
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0x118]
push eax
push esi
push str.launchtosingle
push dword [ebp - 0x110]
call ebx
mov ecx, str.true
lea eax, [ebp - 0x108]
nop dword [eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10007570
test dl, dl
je 0x1000756c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10007570
add eax, 2
add ecx, 2
test dl, dl
jne 0x10007550
xor esi, esi
jmp 0x10007575
sbb esi, esi
or esi, 1
push dword [ebp - 0x110]
call edi
test esi, esi
je 0x100075b2
push 0
push 0
push 0
push 0x10004990
push 0
push 0
mov dword [0x10046704], 1
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
push 0xa
push esi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov esi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea eax, [ebp - 0x114]
mov byte [ebp - 0x109], 0xe9
push eax
push 1
lea eax, [ebp - 0x109]
push eax
push 0x520a8f
call ebx
push eax
call esi
mov eax, 0x10006000
sub eax, 0x520a94
mov dword [ebp - 0x110], eax
lea eax, [ebp - 0x114]
push eax
push 4
lea eax, [ebp - 0x110]
push eax
push 0x520a90
call ebx
push eax
call esi
lea eax, [ebp - 0x114]
mov byte [ebp - 0x109], 0xe9
push eax
push 1
lea eax, [ebp - 0x109]
push eax
push 0x602d69
call ebx
push eax
call esi
mov eax, 0x10006140
sub eax, 0x602d6e
mov dword [ebp - 0x110], eax
lea eax, [ebp - 0x114]
push eax
push 4
lea eax, [ebp - 0x110]
push eax
push 0x602d6a
call ebx
push eax
call esi
lea eax, [ebp - 0x114]
mov byte [ebp - 0x109], 0xe9
push eax
push 1
lea eax, [ebp - 0x109]
push eax
push 0x519389
call ebx
push eax
call esi
mov eax, 0x10006c50
sub eax, 0x51938e
mov dword [ebp - 0x110], eax
lea eax, [ebp - 0x114]
push eax
push 4
lea eax, [ebp - 0x110]
push eax
push 0x51938a
call ebx
push eax
call esi
lea eax, [ebp - 0x114]
mov byte [ebp - 0x109], 0xe9
push eax
push 1
lea eax, [ebp - 0x109]
push eax
push 0x44231b
call ebx
push eax
call esi
mov eax, 0x10006fe0
sub eax, 0x442320
mov dword [ebp - 0x110], eax
lea eax, [ebp - 0x114]
push eax
push 4
lea eax, [ebp - 0x110]
push eax
push 0x44231c
call ebx
push eax
call esi
lea eax, [ebp - 0x114]
mov byte [ebp - 0x109], 0xe9
push eax
push 1
lea eax, [ebp - 0x109]
push eax
push 0x521f23
call ebx
push eax
call esi
mov eax, 0x10003be0
sub eax, 0x521f28
mov dword [ebp - 0x110], eax
lea eax, [ebp - 0x114]
push eax
push 4
lea eax, [ebp - 0x110]
push eax
push 0x521f24
call ebx
push eax
call esi
lea eax, [ebp - 0x114]
mov byte [ebp - 0x109], 0xe9
push eax
push 1
lea eax, [ebp - 0x109]
push eax
push 0x452914
call ebx
push eax
call esi
mov eax, 0x10006da0
sub eax, 0x452919
mov dword [ebp - 0x110], eax
lea eax, [ebp - 0x114]
push eax
push 4
lea eax, [ebp - 0x110]
push eax
push 0x452915
call ebx
push eax
call esi
lea eax, [ebp - 0x114]
mov byte [ebp - 0x109], 0xe9
push eax
push 1
lea eax, [ebp - 0x109]
push eax
push 0x44023f
call ebx
push eax
call esi
mov eax, 0x10006d70
sub eax, 0x440244
mov dword [ebp - 0x110], eax
lea eax, [ebp - 0x114]
push eax
push 4
lea eax, [ebp - 0x110]
push eax
push 0x440240
call ebx
push eax
call esi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1000fe79
mov esp, ebp
pop ebp
ret