Function at 0x10008280
Capabilities:
Allocate or change rwx memory
Create thread
Execute shellcode via indirect call
Spawn thread to rwx shellcode

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x2c
mov eax, dword [0x100a5064]
xor eax, esp
mov dword [esp + 0x28], eax
sub dword [ebp + 0xc], 1
push ebx
push esi
push edi
jne 0x10008563
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [0x100a865c], eax
call fcn.100232e0
push str.zh_cn
push 0
call fcn.100609ae
add esp, 8
call fcn.10007330
mov ecx, dword [0x100a865c]
mov ebx, dword [sym.imp.KERNEL32.dll_VirtualQuery]
push 0x1c
mov eax, dword [ecx + 0x3c]
mov esi, dword [eax + ecx + 0x50]
lea eax, [esp + 0x14]
push eax
push ecx
call ebx
neg eax
mov edx, esi
push 0xb
sbb eax, eax
and eax, dword [esp + 0x18]
push 0x1009759c
mov ecx, eax
call fcn.10021990
add esp, 8
test eax, eax
je 0x1000857c
mov edi, dword [sym.imp.KERNEL32.dll_VirtualProtect]
lea esi, [eax + 9]
lea eax, [esp + 0x2c]
push eax
push 0x40
push 1
push esi
call edi
test eax, eax
je 0x10008586
lea eax, [esp + 0x2c]
mov byte [esi], 0xc8
push eax
push dword [esp + 0x30]
push 1
push esi
call edi
mov ecx, dword [0x100a865c]
push 0x1c
mov eax, dword [ecx + 0x3c]
mov esi, dword [eax + ecx + 0x50]
lea eax, [esp + 0x14]
push eax
push ecx
call ebx
neg eax
mov edx, esi
push 0xb
sbb eax, eax
and eax, dword [esp + 0x18]
push str.steam_yes_
mov ecx, eax
call fcn.10021990
mov esi, eax
add esp, 8
test esi, esi
je 0x100083a5
lea eax, [esp + 0x2c]
push eax
push 0x40
push 0xc
push esi
call edi
test eax, eax
je 0x10008586
movq xmm0, qword [str.sbeam_yes_]
movq qword [esi], xmm0
mov eax, dword [0x10096544]
mov dword [esi + 8], eax
lea eax, [esp + 0x2c]
push eax
push dword [esp + 0x30]
push 0xc
push esi
call edi
jmp 0x100083b2
push str._WARN_Failed_to_find_signature__n
call fcn.10001400
add esp, 4
mov ecx, dword [0x100a865c]
push 0x1c
mov eax, dword [ecx + 0x3c]
mov esi, dword [eax + ecx + 0x50]
lea eax, [esp + 0x14]
push eax
push ecx
call ebx
neg eax
mov edx, esi
push 0x20
sbb eax, eax
and eax, dword [esp + 0x18]
push 0x1009639c
mov ecx, eax
call fcn.10021990
mov ecx, dword [0x100a865c]
add esp, 8
mov dword [0x100a85d8], eax
mov eax, dword [ecx + 0x3c]
push 0x1c
mov esi, dword [eax + ecx + 0x50]
lea eax, [esp + 0x14]
push eax
push ecx
call ebx
neg eax
mov edx, esi
push 0x26
sbb eax, eax
and eax, dword [esp + 0x18]
push 0x100963c0
mov ecx, eax
call fcn.10021990
add esp, 8
mov dword [0x100a85e4], eax
cmp dword [0x100a85d8], 0
je 0x1000842d
test eax, eax
jne 0x100084a1
push 0x100963e8
push 0x100a7540
call fcn.1000e510
add esp, 8
cmp dword [0x100a85d8], 0
jne 0x1000845a
push str.new
push 0x100a7540
call fcn.1000e510
add esp, 8
cmp dword [0x100a85e4], 0
jne 0x10008475
push str.delete
push 0x100a7540
call fcn.1000e510
add esp, 8
push 0x10096414
push 0x100a7540
call fcn.1000e510
push eax
call fcn.1000e470
add esp, 0xc
mov dword [0x100a85d8], 0x100695b1
mov dword [0x100a85e4], 0x10068cb5
mov ecx, dword [0x100a865c]
mov dword [0x100a8668], 0x10007120
push 0x1c
mov eax, dword [ecx + 0x3c]
mov esi, dword [eax + ecx + 0x50]
lea eax, [esp + 0x14]
push eax
push ecx
call ebx
neg eax
mov edx, esi
push 0xf
sbb eax, eax
and eax, dword [esp + 0x18]
push 0x10096554
mov ecx, eax
call fcn.10021990
add esp, 8
test eax, eax
je 0x1000857c
lea esi, [eax + 0xf]
lea eax, [esp + 0x2c]
push eax
push 0x40
push 4
push esi
call edi
test eax, eax
je 0x10008586
lea eax, [esp + 0x2c]
mov dword [esi], 0x100a8668
push eax
push dword [esp + 0x30]
push 4
push esi
call edi
mov eax, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [0x100a8664], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov ecx, eax
call fcn.10022990
call fcn.100224b0
sub esp, 0xc
mov edx, 0x10008250
mov ecx, 0x100a8664
call fcn.10022a00
call fcn.10022550
lea eax, [esp + 0x30]
mov dword [esp + 0x30], 0
push eax
push 0
push 0
push 0x100085a0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [esp + 0x34]
mov eax, 1
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.1005b901
mov esp, ebp
pop ebp
ret 0xc
push str.Failed_to_find_signature__n
call fcn.10021c10
push esi
push str.Failed_to_modify_protection_at__08X__
call fcn.10021c10
int3