Function at 0x180043c80
Capabilities:
Allocate or change rwx memory
Create thread
Execute shellcode via indirect call
Spawn thread to rwx shellcode

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x40
mov rax, qword [0x180055040]
xor rax, rsp
mov qword [rsp + 0x38], rax
xor ebx, ebx
mov esi, 1
mov edi, ebx
xor eax, eax
lock cmpxchg dword [0x180055a90], esi
je 0x180043cd4
cmp rdi, 0x20
jae 0x180043cbd
xor ecx, ecx
jmp 0x180043cbf
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_Sleep]
inc rdi
xor eax, eax
lock cmpxchg dword [0x180055a90], esi
jne 0x180043cb3
cmp qword [0x180055a98], rbx
je 0x180044205
xor ecx, ecx
call fcn.180044924
mov ecx, ebx
xchg dword [0x180055a90], ecx
test eax, eax
jne 0x18004420b
mov rdi, rbx
lock cmpxchg dword [0x180055a90], esi
je 0x180043d26
cmp rdi, 0x20
jae 0x180043d0f
xor ecx, ecx
jmp 0x180043d11
mov ecx, esi
call qword [sym.imp.KERNEL32.dll_Sleep]
inc rdi
xor eax, eax
lock cmpxchg dword [0x180055a90], esi
jne 0x180043d05
cmp qword [0x180055a98], rbx
je 0x180044205
xor ecx, ecx
call fcn.180044924
test eax, eax
jne 0x180044205
mov rcx, qword [0x180055b10]
mov qword [0x180055b10], rbx
test rcx, rcx
je 0x180043d6e
mov rdi, qword [rcx]
xor edx, edx
mov r8d, 0x8000
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rcx, rdi
test rdi, rdi
jne 0x180043d55
mov r8, qword [0x180055b20]
xor edx, edx
mov rcx, qword [0x180055a98]
call qword [sym.imp.KERNEL32.dll_HeapFree]
mov rcx, qword [0x180055a98]
call qword [sym.imp.KERNEL32.dll_HeapDestroy]
mov eax, ebx
mov qword [0x180055a98], rbx
mov qword [0x180055b20], rbx
lea r9, [rsp + 0x30]
mov qword [0x180055b28], rbx
mov edx, 0xf
xchg dword [0x180055a90], eax
mov rdi, qword [0x180055aa8]
mov r8d, 0x40
add rdi, 0x104a9c0
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
movsd xmm0, qword [0x18004e1e8]
lea r9, [rsp + 0x34]
mov r8d, dword [rsp + 0x30]
mov edx, 0xf
movsd qword [rdi], xmm0
mov rcx, rdi
mov eax, dword [0x18004e1f0]
mov dword [rdi + 8], eax
movzx eax, word [0x18004e1f4]
mov word [rdi + 0xc], ax
movzx eax, byte [0x18004e1f6]
mov byte [rdi + 0xe], al
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov rdi, qword [0x180055aa8]
lea r9, [rsp + 0x30]
add rdi, 0x104a9cf
mov edx, 0xf
mov rcx, rdi
mov r8d, 0x40
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
movsd xmm0, qword [str.AVAWH]
lea r9, [rsp + 0x34]
mov r8d, dword [rsp + 0x30]
mov edx, 0xf
movsd qword [rdi], xmm0
mov rcx, rdi
mov eax, dword [0x18004e200]
mov dword [rdi + 8], eax
movzx eax, word [0x18004e204]
mov word [rdi + 0xc], ax
movzx eax, byte [0x18004e206]
mov byte [rdi + 0xe], al
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov rdi, qword [0x180055aa8]
lea r9, [rsp + 0x30]
mov edx, 0xe
mov r8d, 0x40
lea rcx, [rdi + 0x10c3c12]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
movsd xmm0, qword [0x18004e208]
lea r9, [rsp + 0x34]
mov r8d, dword [rsp + 0x30]
lea rcx, [rdi + 0x10c3c12]
movsd qword [rdi + 0x10c3c12], xmm0
mov edx, 0xe
mov eax, dword [0x18004e210]
mov dword [rdi + 0x10c3c1a], eax
movzx eax, word [0x18004e214]
mov word [rdi + 0x10c3c1e], ax
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov rdi, qword [0x180055aa8]
lea r9, [rsp + 0x30]
mov edx, 0xe
mov r8d, 0x40
lea rcx, [rdi + 0xffcf90]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
movsd xmm0, qword [0x18004e218]
lea r9, [rsp + 0x34]
movsd qword [rdi + 0xffcf90], xmm0
mov eax, dword [0x18004e220]
mov dword [rdi + 0xffcf98], eax
movzx eax, word [0x18004e224]
mov word [rdi + 0xffcf9c], ax
mov r8d, dword [rsp + 0x30]
lea rcx, [rdi + 0xffcf90]
mov edx, 0xe
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov rdi, qword [0x180055aa8]
lea r9, [rsp + 0x30]
mov edx, 0xe
mov r8d, 0x40
lea rcx, [rdi + 0x100e20f]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
movsd xmm0, qword [0x18004e228]
lea r9, [rsp + 0x34]
mov r8d, dword [rsp + 0x30]
lea rcx, [rdi + 0x100e20f]
movsd qword [rdi + 0x100e20f], xmm0
mov edx, 0xe
mov eax, dword [0x18004e230]
mov dword [rdi + 0x100e217], eax
movzx eax, word [0x18004e234]
mov word [rdi + 0x100e21b], ax
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov rdi, qword [0x180055aa8]
lea r9, [rsp + 0x30]
mov edx, 0x10
mov r8d, 0x40
lea rcx, [rdi + 0xfd5965]
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
movups xmm0, xmmword [0x18004e238]
mov r8d, dword [rsp + 0x30]
lea r9, [rsp + 0x34]
mov edx, 0x10
lea rcx, [rdi + 0xfd5965]
movups xmmword [rdi + 0xfd5965], xmm0
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov rdi, qword [0x180055aa8]
lea r9, [rsp + 0x30]
add rdi, 0x1ab4c10
mov edx, 0xf
mov rcx, rdi
mov r8d, 0x40
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
movsd xmm0, qword [0x18004e250]
lea r9, [rsp + 0x34]
mov r8d, dword [rsp + 0x30]
mov edx, 0xf
movsd qword [rdi], xmm0
mov rcx, rdi
mov eax, dword [0x18004e258]
mov dword [rdi + 8], eax
movzx eax, word [0x18004e25c]
mov word [rdi + 0xc], ax
movzx eax, byte [0x18004e25e]
mov byte [rdi + 0xe], al
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov rsi, qword [0x1800559b8]
test rsi, rsi
je 0x18004408a
mov rdi, qword [rsi + 0x98]
jmp 0x18004408d
mov rdi, rbx
call fcn.18002cbe0
mov rcx, qword [rdi + 0x10]
test rcx, rcx
je 0x1800440a1
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rdi]
test rcx, rcx
je 0x1800440af
mov rax, qword [rcx]
call qword [rax + 0x10]
mov rcx, qword [rdi + 8]
test rcx, rcx
je 0x1800440be
mov rax, qword [rcx]
call qword [rax + 0x10]
and dword [rsi + 0xc], 0xfffffff7
mov rax, qword [0x1800559b8]
mov qword [rsi + 0x88], rbx
mov qword [rsi + 0x98], rbx
test rax, rax
je 0x1800440e2
dec dword [rax + 0xf0]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rax, qword [0x1800559b8]
test rax, rax
je 0x180044100
mov rsi, qword [rax + 0x90]
jmp 0x180044103
mov rsi, rbx
mov rcx, qword [rsi + 0x30]
lea rdi, [rax + 8]
test rcx, rcx
je 0x18004411d
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov rax, qword [0x1800559b8]
and dword [rdi + 4], 0xfffffff8
mov qword [rdi + 0x78], rbx
mov qword [rdi + 0x88], rbx
test rax, rax
je 0x180044137
dec dword [rax + 0xf0]
mov rcx, rsi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rdi, qword [0x1800559b8]
mov qword [0x1800559b8], rdi
call fcn.180005c10
mov qword [0x1800559b8], rbx
test rdi, rdi
je 0x180044182
mov rcx, rdi
call fcn.18001b9b0
mov rax, qword [0x1800559b8]
test rax, rax
je 0x180044179
dec dword [rax + 0xf0]
mov rcx, rdi
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov rcx, qword [0x180055a10]
test rcx, rcx
je 0x18004419b
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x180055a10], rbx
mov rcx, qword [0x1800559f0]
test rcx, rcx
je 0x1800441b4
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x1800559f0], rbx
mov rcx, qword [0x1800559c8]
test rcx, rcx
je 0x1800441cd
mov rax, qword [rcx]
call qword [rax + 0x10]
mov qword [0x1800559c8], rbx
mov r8, qword [0x180055a58]
mov edx, 0xfffffffc
mov rcx, qword [0x180055a30]
call qword [sym.imp.USER32.dll_SetWindowLongPtrW]
xor r9d, r9d
mov qword [rsp + 0x28], rbx
lea r8, [0x180043c60]
mov dword [rsp + 0x20], ebx
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
jmp 0x18004420b
xchg dword [0x180055a90], ebx
mov rcx, qword [rsp + 0x38]
xor rcx, rsp
call fcn.180045a60
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x58]
add rsp, 0x40
pop rdi
ret