Function at 0x10010790
Capabilities:
Allocate or change rwx memory
Create thread
Execute shellcode via indirect call
Spawn thread to rwx shellcode

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100169b5
mov eax, dword fs:[0]
push eax
sub esp, 0x24
push ebx
push esi
push edi
mov eax, dword [0x1001c008]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ebx, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
call ebx
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov esi, eax
lea eax, [ebp - 0x18]
push eax
push 4
push 5
push 0x4505f5
push esi
call edi
mov ecx, 0x10010420
mov byte [0x4505f5], 0xe8
lea eax, [ebp - 0x20]
sub ecx, 0x4505fa
push eax
mov dword [0x4505f6], ecx
push dword [ebp - 0x18]
push 5
push 0x4505f5
push esi
call edi
call ebx
mov esi, eax
lea eax, [ebp - 0x18]
push eax
push 4
push 5
push 0x4111d1
push esi
call edi
mov ecx, 0x10010370
mov byte [0x4111d1], 0xe8
lea eax, [ebp - 0x20]
sub ecx, 0x4111d6
push eax
mov dword [0x4111d2], ecx
push dword [ebp - 0x18]
push 5
push 0x4111d1
push esi
call edi
call ebx
mov esi, eax
lea eax, [ebp - 0x18]
push eax
push 4
push 5
push 0x41158b
push esi
call edi
mov ecx, 0x100102e0
mov byte [0x41158b], 0xe8
lea eax, [ebp - 0x20]
sub ecx, 0x411590
push eax
mov dword [0x41158c], ecx
push dword [ebp - 0x18]
push 5
push 0x41158b
push esi
call edi
call ebx
mov esi, eax
lea eax, [ebp - 0x18]
push eax
push 4
push 5
push 0x40fa72
push esi
call edi
mov ecx, 0x100103d0
mov byte [0x40fa72], 0xe8
lea eax, [ebp - 0x20]
sub ecx, 0x40fa77
push eax
mov dword [0x40fa73], ecx
push dword [ebp - 0x18]
push 5
push 0x40fa72
push esi
call edi
call ebx
mov esi, eax
lea eax, [ebp - 0x18]
push eax
push 4
push 5
push 0x40d65a
push esi
call edi
mov edi, 0x10010380
mov byte [0x40d65a], 0xe8
lea eax, [ebp - 0x20]
push eax
lea ecx, [edi - 0x40d65f]
mov dword [0x40d65b], ecx
push dword [ebp - 0x18]
push 5
push 0x40d65a
push esi
call dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
call ebx
mov esi, eax
lea eax, [ebp - 0x18]
push eax
push 4
push 5
push 0x40d933
push esi
call dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
lea eax, [ebp - 0x20]
mov byte [0x40d933], 0xe8
push eax
sub edi, 0x40d938
mov dword [0x40d934], edi
push dword [ebp - 0x18]
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
push 5
push 0x40d933
push esi
call edi
call ebx
mov esi, eax
lea eax, [ebp - 0x18]
push eax
push 4
push 5
push 0x40faa4
push esi
call edi
mov ecx, 0x100102f0
mov byte [0x40faa4], 0xe8
lea eax, [ebp - 0x20]
sub ecx, 0x40faa9
push eax
mov dword [0x40faa5], ecx
push dword [ebp - 0x18]
push 5
push 0x40faa4
push esi
call edi
call ebx
mov esi, eax
lea eax, [ebp - 0x18]
push eax
push 4
push 5
push 0x40fee6
push esi
call edi
mov ecx, 0x10010310
mov byte [0x40fee6], 0xe8
lea eax, [ebp - 0x20]
sub ecx, 0x40feeb
push eax
mov dword [0x40fee7], ecx
push dword [ebp - 0x18]
push 5
push 0x40fee6
push esi
call edi
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x414c9d
call edi
lea eax, [ebp - 0x20]
mov byte [0x414c9d], 4
push eax
push dword [ebp - 0x18]
push 1
push 0x414c9d
call edi
lea eax, [ebp - 0x18]
push eax
push 0x40
push 1
push 0x415311
call edi
lea eax, [ebp - 0x20]
mov byte [0x415311], 4
push eax
push dword [ebp - 0x18]
push 1
push 0x415311
call edi
push 4
call fcn.1001517a
add esp, 4
mov dword [ebp - 0x20], eax
mov dword [eax], fcn.1000e200
lea ecx, [ebp - 0x28]
mov dword [ebp - 4], 0
push ecx
push 0
push eax
push 0x100113e0
push 0
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
add esp, 0x18
mov dword [ebp - 0x2c], eax
test eax, eax
je 0x10010b3c
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0x28]
test ecx, ecx
jne 0x10010a63
push 1
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
push ecx
push eax
call dword [sym.imp.MSVCP140.dll__Thrd_detach]
add esp, 8
test eax, eax
je 0x10010a79
push eax
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_C_error_int_]
lea eax, [ebp - 0x10]
mov dword [ebp - 0x2c], 0
push eax
push 4
push 4
mov esi, 0x5975d4
mov dword [ebp - 0x28], 0
push esi
call edi
lea eax, [ebp - 0x14]
mov dword [esi], 0x1000ee80
push eax
push dword [ebp - 0x10]
push 4
push esi
call edi
lea eax, [ebp - 0x10]
mov esi, 0x597600
push eax
push 4
push 4
push esi
call edi
lea eax, [ebp - 0x14]
mov dword [esi], 0x1000eee0
push eax
push dword [ebp - 0x10]
push 4
push esi
call edi
lea eax, [ebp - 0x10]
mov esi, 0x597578
push eax
push 4
push 4
push esi
call edi
lea eax, [ebp - 0x14]
mov dword [esi], 0x1000ee00
push eax
push dword [ebp - 0x10]
push 4
push esi
call edi
lea eax, [ebp - 0x1c]
mov esi, 0x1000f400
push eax
push 0x80
push 4
push 0x44e846
sub esi, 0x44e84a
call edi
mov eax, dword [0x44e846]
add eax, 0x44e84a
mov dword [0x1001c730], eax
mov eax, 0x44e846
mov dword [eax], esi
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x1c]
push 5
push 0x44e846
call edi
cmp dword [ebp - 0x28], 0
je 0x10010b4b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
push 6
mov dword [ebp - 0x28], 0
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret