Function at 0x10007280
Capabilities:
Allocate or change rwx memory
Create thread
Execute shellcode via indirect call
Log keystrokes via application hook
Spawn thread to rwx shellcode

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x108
mov eax, dword [0x10016018]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov ebx, 0x100a0378
call fcn.1000d190
test al, al
je 0x10007e78
mov esi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x6b6654
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x6b6654], 0xa0
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x6b6654
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x4b4305
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x4b4305], 0xeb
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x4b4305
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x4b47fe
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x4b47fe], 0x75
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x4b47fe
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x4b4856
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x4b4856], 0xe9
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x4b4856
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x4b4857
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x4b4857], 0xa6
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x4b4857
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x4b4858
call esi
lea ecx, [ebp - 0x108]
mov byte [0x4b4858], 0
mov edx, dword [ebp - 0x108]
push ecx
push edx
push 1
push 0x4b4858
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x4b485b
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x4b485b], 0x90
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x4b485b
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x4bea9f
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x4bea9f], 0xeb
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x4bea9f
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x4519f8
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x4519f8], 2
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x4519f8
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x509f1b
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x509f1b], 0xd
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x509f1b
call esi
mov bl, byte [0x100a03e0]
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x6b7248
inc bl
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x6b7248], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x6b7248
call esi
mov bl, byte [0x100a03e2]
lea eax, [ebp - 0x108]
push eax
add bl, 2
push 0x40
push 1
push 0x6b7249
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x6b7249], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x6b7249
call esi
mov bl, byte [0x100a03e3]
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x6b724a
add bl, 3
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x6b724a], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x6b724a
call esi
mov bl, byte [0x100a03e5]
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x6b724b
add bl, 4
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x6b724b], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x6b724b
call esi
mov bl, byte [0x100a03e6]
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x6b724c
add bl, 5
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x6b724c], bl
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x6b724c
call esi
mov di, word [0x100a03de]
lea eax, [ebp - 0x108]
push eax
push 0x40
push 2
push 0x6c41bc
call esi
lea ecx, [ebp - 0x108]
push ecx
mov word [0x6c41bc], di
mov edx, dword [ebp - 0x108]
push edx
push 2
push 0x6c41bc
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 4
push 0x628b89
call esi
mov dword [0x628b89], 0x100a0419
mov edx, dword [ebp - 0x108]
lea ecx, [ebp - 0x108]
push ecx
push edx
push 4
push 0x628b89
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 4
push 0x6a74fc
call esi
lea ecx, [ebp - 0x108]
push ecx
mov dword [0x6a74fc], 0x100070c0
mov edx, dword [ebp - 0x108]
push edx
push 4
push 0x6a74fc
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 4
push 0x6a74d0
call esi
lea ecx, [ebp - 0x108]
push ecx
mov dword [0x6a74d0], 0x100070e0
mov edx, dword [ebp - 0x108]
push edx
push 4
push 0x6a74d0
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 4
push 0x6a74ac
call esi
lea ecx, [ebp - 0x108]
push ecx
mov dword [0x6a74ac], 0x100071b0
mov edx, dword [ebp - 0x108]
push edx
push 4
push 0x6a74ac
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 4
push 0x6a74f8
call esi
lea ecx, [ebp - 0x108]
push ecx
mov dword [0x6a74f8], 0x100071d0
mov edx, dword [ebp - 0x108]
push edx
push 4
push 0x6a74f8
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 4
push 0x548b61
call esi
lea ecx, [ebp - 0x108]
push ecx
mov dword [0x548b61], 0x400
mov edx, dword [ebp - 0x108]
push edx
push 4
push 0x548b61
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 1
push 0x46ad4f
call esi
lea ecx, [ebp - 0x108]
push ecx
mov byte [0x46ad4f], 0xeb
mov edx, dword [ebp - 0x108]
push edx
push 1
push 0x46ad4f
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 0x1d
push 0x41dbb0
call esi
mov eax, 0x90909090
mov ecx, 0x41dbb0
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], eax
mov dword [ecx + 0x18], eax
mov byte [ecx + 0x1c], al
mov edx, dword [ebp - 0x108]
lea ecx, [ebp - 0x108]
push ecx
push edx
push 0x1d
push 0x41dbb0
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 5
push 0x4bbab3
call esi
mov eax, 0x90909090
mov ecx, 0x4bbab3
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 0x108]
lea ecx, [ebp - 0x108]
push ecx
push edx
push 5
push 0x4bbab3
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 6
push 0x4cbc66
call esi
mov eax, 0x90909090
mov ecx, 0x4cbc66
mov dword [ecx], eax
mov word [ecx + 4], ax
mov edx, dword [ebp - 0x108]
lea ecx, [ebp - 0x108]
push ecx
push edx
push 6
push 0x4cbc66
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 0x1e
push 0x4ecaa0
call esi
mov eax, 0x90909090
mov ecx, 0x4ecaa0
mov dword [ecx], eax
mov dword [ecx + 4], eax
mov dword [ecx + 8], eax
mov dword [ecx + 0xc], eax
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], eax
mov dword [ecx + 0x18], eax
mov word [ecx + 0x1c], ax
mov edx, dword [ebp - 0x108]
lea ecx, [ebp - 0x108]
push ecx
push edx
push 0x1e
push 0x4ecaa0
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 5
push 0x62594a
call esi
mov eax, 0x90909090
mov ecx, 0x62594a
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 0x108]
lea ecx, [ebp - 0x108]
push ecx
push edx
push 5
push 0x62594a
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 5
push 0x625996
call esi
mov eax, 0x90909090
mov ecx, 0x625996
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 0x108]
lea ecx, [ebp - 0x108]
push ecx
push edx
push 5
push 0x625996
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 5
push 0x6259e2
call esi
mov eax, 0x90909090
mov ecx, 0x6259e2
mov dword [ecx], eax
mov byte [ecx + 4], al
mov edx, dword [ebp - 0x108]
lea ecx, [ebp - 0x108]
push ecx
push edx
push 5
push 0x6259e2
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 0x23b0
push 0x4b61d6
call esi
push 0x23b0
push 0x90
push 0x4b61d6
call sub.MSVCR100.dll_memset
mov edx, dword [ebp - 0x108]
add esp, 0xc
lea ecx, [ebp - 0x108]
push ecx
push edx
push 0x23b0
push 0x4b61d6
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 6
push 0x40d661
call esi
mov eax, 0x90909090
mov ecx, 0x40d661
mov dword [ecx], eax
mov word [ecx + 4], ax
mov edx, dword [ebp - 0x108]
lea ecx, [ebp - 0x108]
push ecx
push edx
push 6
push 0x40d661
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 6
push 0x40d6ed
call esi
mov eax, 0x90909090
mov ecx, 0x40d6ed
mov dword [ecx], eax
mov word [ecx + 4], ax
mov edx, dword [ebp - 0x108]
lea ecx, [ebp - 0x108]
push ecx
push edx
push 6
push 0x40d6ed
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 0x20
push 0x6b6694
call esi
push 0x20
push 0x100a03bd
push 0x6b6694
call sub.MSVCR100.dll_memcpy
mov edx, dword [ebp - 0x108]
add esp, 0xc
lea ecx, [ebp - 0x108]
push ecx
push edx
push 0x20
push 0x6b6694
call esi
lea eax, [ebp - 0x108]
push eax
push 0x40
push 0x11
push 0x6b7250
call esi
mov ecx, dword [0x100a03e8]
mov eax, 0x6b7250
mov dword [eax], ecx
mov edx, dword [0x100a03ec]
mov dword [eax + 4], edx
mov ecx, dword [0x100a03f0]
mov dword [eax + 8], ecx
mov edx, dword [0x100a03f4]
mov dword [eax + 0xc], edx
mov cl, byte [0x100a03f8]
lea edx, [ebp - 0x108]
push edx
mov byte [eax + 0x10], cl
mov eax, dword [ebp - 0x108]
push eax
push 0x11
push 0x6b7250
call esi
push 0x10004ab0
push 0x596cea
mov bl, 0xe8
call fcn.10011cc0
push fcn.1000d5e0
push 0x4db63d
or bl, 0xff
call fcn.10011cc0
add esp, 0x10
mov eax, 0x100a0708
call fcn.10002830
mov eax, 0x100c7808
call fcn.100028b0
mov eax, 0x100c7e48
call fcn.10002930
mov edx, 0x100e1488
call fcn.10002a00
mov eax, 0x100e1f78
call fcn.10002ac0
mov eax, 0x100e6118
call fcn.10002ba0
mov eax, 0x100e8008
call fcn.10002c00
mov eax, 0x100e9ef8
call fcn.10002c60
mov eax, 0x100ebde8
call fcn.10002db0
mov eax, 0x100fbfb8
call fcn.10002e40
mov edx, 0x10126f38
call fcn.10002ec0
mov ecx, 0x10129e18
call fcn.10010510
push 0
push str.DataEnc1.dat
call fcn.1000bc00
push 1
push str.DataDec2.dat
call fcn.1000bc00
cmp byte [0x100a0538], 0
je 0x10007b1d
push 0x10008980
push 0x6198cf
mov bl, 0xe9
call fcn.10011cc0
push 0x100089e0
push 0x6119af
call fcn.10011cc0
add esp, 0x10
call fcn.10001e90
call fcn.100021c0
push 0x10003230
push 0x4dee30
mov bl, 0xe9
call fcn.10011cc0
push 0x100036e0
push 0x4df360
call fcn.10011cc0
add esp, 0x10
call fcn.10003960
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 4
push 0x6a7374
call esi
lea edx, [ebp - 0x108]
push edx
mov dword [0x6a7374], 0x10003b70
mov eax, dword [ebp - 0x108]
push eax
push 4
push 0x6a7374
call esi
call fcn.10003d80
call fcn.10003fd0
call fcn.10004840
push 0x10005000
push 0x5069a2
or bl, 0xff
call fcn.10011cc0
push 0x10005000
push 0x5f8445
or bl, 0xff
call fcn.10011cc0
push 0x10005040
push 0x50074d
mov bl, 0xe8
call fcn.10011cc0
push 0x10005040
push 0x5fa6bb
call fcn.10011cc0
call fcn.10005f30
call fcn.10006660
push 0x10005220
push 0x402b39
mov bl, 0xe9
call fcn.10011cc0
push 0x10005250
push 0x5a3a4f
call fcn.10011cc0
push 0x100052e0
push 0x5d041c
call fcn.10011cc0
push 0x10005310
push 0x5cf916
call fcn.10011cc0
add esp, 0x40
call fcn.10004d30
call fcn.10006ac0
call fcn.10004da0
call fcn.10007eb0
push 0x64
push 0
push 0x10130d98
call sub.MSVCR100.dll_memset
push 0x100080a0
push 0x607015
or bl, 0xff
call fcn.10011cc0
push 0x100080b0
push 0x604ad4
mov bl, 0xe8
call fcn.10011cc0
push 0x10008160
push 0x598fb9
or bl, 0xff
call fcn.10011cc0
call fcn.100081b0
call fcn.1000c3b0
push 0x1000ee60
push 0x4b3aae
mov bl, 0xe9
call fcn.10011cc0
push 0x1000ef80
push 0x4b4d54
call fcn.10011cc0
push 0x1000f030
push 0x443154
call fcn.10011cc0
push 0x1000f060
push 0x443b65
call fcn.10011cc0
add esp, 0x44
call fcn.1000e300
call fcn.1000f080
push fcn.1000f1f0
push 0x5a12f0
call fcn.10011cc0
push 0x1000f300
push 0x5a0be0
call fcn.10011cc0
push 0x1000f5e0
push 0x541be0
call fcn.10011cc0
call fcn.10010970
push 0x10010560
push 0x60f128
mov bl, 0xe8
call fcn.10011cc0
push 0x10010560
push 0x60f145
call fcn.10011cc0
push 0x10010950
push 0x5fa7a0
mov bl, 0xe9
call fcn.10011cc0
add esp, 0x30
cmp byte [0x100a053b], 0
je 0x10007d5c
push 0x10012040
push 0x5e5800
call fcn.10011cc0
push 0x10012390
push 0x5d5c70
call fcn.10011cc0
add esp, 0x10
lea ecx, [ebp - 0x108]
push ecx
push 0x40
push 4
push 0x4b36eb
call esi
lea edx, [ebp - 0x108]
push edx
mov dword [0x4b36eb], 0x10011c00
mov eax, dword [ebp - 0x108]
push eax
push 4
push 0x4b36eb
call esi
test byte [0x100a039c], 1
mov esi, dword [sym.imp.KERNEL32.dll_OpenMutexA]
je 0x10007db5
push 0x100a039d
push 0
push 0x1f0001
call esi
test eax, eax
jne 0x10007db5
call fcn.1000d5c0
test byte [0x100a039c], 2
je 0x10007dfd
push 0x100a03bd
lea ecx, [ebp - 0x104]
push str.SSEMU_MAIN_S1KOR__s
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x104]
push edx
push 0
push 0x1f0001
call esi
test eax, eax
jne 0x10007db0
lea eax, [ebp - 0x104]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov edi, 0x100a0378
call fcn.1000d330
push edi
call fcn.1000d440
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
call esi
mov ecx, dword [0x10130d8c]
mov edi, dword [sym.imp.USER32.dll_SetWindowsHookExA]
push eax
push ecx
push 0x10006ed0
push 2
call edi
mov dword [0x10130d94], eax
call esi
mov edx, dword [0x10130d8c]
push eax
push edx
push 0x10006fd0
push 7
call edi
cmp byte [0x100a053d], 0
pop edi
pop esi
mov dword [0x10130d90], eax
pop ebx
je 0x10007e6a
push 0
push 0
push 0
push 0x10007170
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10012abd
mov esp, ebp
pop ebp
ret
push str.Could_not_load_ServerInfo.sse_
call fcn.10011d90
add esp, 4
call fcn.1000d5c0
int3