Function at 0x10004d70
Capabilities:
Allocate or change rwx memory
Create thread
Execute shellcode via indirect call
Spawn thread to rwx shellcode

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10007e35
mov eax, dword fs:[0]
push eax
sub esp, 0x24
push ebx
push esi
push edi
mov eax, dword [0x1000b008]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0x10009750
push str.main.log
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
add esp, 8
mov dword [0x1000b50c], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov ebx, dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov esi, eax
lea eax, [ebp - 0x18]
push eax
push 4
push 5
push 0x4505f5
push esi
call ebx
mov ecx, 0x10004b80
mov byte [0x4505f5], 0xe8
lea eax, [ebp - 0x1c]
sub ecx, 0x4505fa
push eax
mov dword [0x4505f6], ecx
push dword [ebp - 0x18]
push 5
push 0x4505f5
push esi
call ebx
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x18]
push eax
push 0x40
push 5
push 0x5ad298
call edi
mov ecx, str.Osiem
mov edx, 0x5ad298
sub edx, ecx
jmp 0x10004e20
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edx + ecx - 1], al
test al, al
jne 0x10004e20
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 0x18]
push 5
push 0x5ad298
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 9
push 0x5ad2a0
call edi
mov eax, str.Osiem.cfg
mov edx, 0x5ad2a0
sub edx, eax
jmp 0x10004e60
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edx + eax - 1], cl
test cl, cl
jne 0x10004e60
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x18]
push 9
push 0x5ad2a0
call edi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov esi, eax
lea eax, [ebp - 0x18]
push eax
push 4
push 5
push 0x4bf8a4
push esi
call ebx
mov ecx, 0x10003ee0
mov byte [0x4bf8a4], 0xe8
lea eax, [ebp - 0x20]
sub ecx, 0x4bf8a9
push eax
mov dword [0x4bf8a5], ecx
push dword [ebp - 0x18]
push 5
push 0x4bf8a4
push esi
call ebx
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x53a1c2
call edi
lea eax, [ebp - 0x20]
mov byte [0x53a1c2], 0xd
push eax
push dword [ebp - 0x18]
push 1
push 0x53a1c2
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x53a202
call edi
lea eax, [ebp - 0x20]
mov byte [0x53a202], 0xd
push eax
push dword [ebp - 0x18]
push 1
push 0x53a202
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x53a240
call edi
lea eax, [ebp - 0x20]
mov byte [0x53a240], 0xd
push eax
push dword [ebp - 0x18]
push 1
push 0x53a240
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x53a280
call edi
lea eax, [ebp - 0x20]
mov byte [0x53a280], 0xd
push eax
push dword [ebp - 0x18]
push 1
push 0x53a280
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x53a0ab
call edi
lea eax, [ebp - 0x20]
mov byte [0x53a0ab], 0xd
push eax
push dword [ebp - 0x18]
push 1
push 0x53a0ab
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x53a0eb
call edi
lea eax, [ebp - 0x20]
mov byte [0x53a0eb], 0xd
push eax
push dword [ebp - 0x18]
push 1
push 0x53a0eb
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x53a129
call edi
lea eax, [ebp - 0x20]
mov byte [0x53a129], 0xd
push eax
push dword [ebp - 0x18]
push 1
push 0x53a129
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x53a169
call edi
lea eax, [ebp - 0x20]
mov byte [0x53a169], 0xd
push eax
push dword [ebp - 0x18]
push 1
push 0x53a169
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 2
push 0x414c9d
call edi
lea eax, [ebp - 0x20]
mov esi, 0x320
push eax
mov word [0x414c9d], si
push dword [ebp - 0x18]
push 2
push 0x414c9d
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 2
push 0x415311
call edi
lea eax, [ebp - 0x20]
mov word [0x415311], si
push eax
push dword [ebp - 0x18]
push 2
push 0x415311
call edi
push 4
call fcn.10006a31
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [eax], 0x10002700
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0
push ecx
push 0
push eax
push 0x10005900
push 0
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
add esp, 0x18
mov dword [ebp - 0x2c], eax
test eax, eax
je 0x1000516c
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0x28]
test ecx, ecx
jne 0x10005093
push 1
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
push ecx
push eax
call dword [sym.imp.MSVCP140.dll__Thrd_detach]
add esp, 8
test eax, eax
je 0x100050a9
push eax
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_]
lea eax, [ebp - 0x10]
mov dword [ebp - 0x2c], 0
push eax
push 4
push 4
mov esi, 0x5975d4
mov dword [ebp - 0x28], 0
push esi
call edi
lea eax, [ebp - 0x14]
mov dword [esi], 0x100030c0
push eax
push dword [ebp - 0x10]
push 4
push esi
call edi
lea eax, [ebp - 0x10]
mov esi, 0x597600
push eax
push 4
push 4
push esi
call edi
lea eax, [ebp - 0x14]
mov dword [esi], 0x10003120
push eax
push dword [ebp - 0x10]
push 4
push esi
call edi
lea eax, [ebp - 0x10]
mov esi, 0x597578
push eax
push 4
push 4
push esi
call edi
lea eax, [ebp - 0x14]
mov dword [esi], 0x10003020
push eax
push dword [ebp - 0x10]
push 4
push esi
call edi
lea eax, [ebp - 0x1c]
mov esi, 0x10003c00
push eax
push 0x80
push 4
push 0x44e846
sub esi, 0x44e84a
call edi
mov eax, dword [0x44e846]
add eax, 0x44e84a
mov dword [0x1000b4a8], eax
mov eax, 0x44e846
mov dword [eax], esi
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x1c]
push 5
push 0x44e846
call edi
cmp dword [ebp - 0x28], 0
je 0x1000517b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
push 6
mov dword [ebp - 0x28], 0
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret