Function at 0x403bb0
Capabilities:
Allocate or change rwx memory
Create thread
Execute shellcode via indirect call
Inject thread
Spawn thread to rwx shellcode

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x20
mov eax, dword [0x40c014]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
push ebx
mov dword [ebp - 0x18], ecx
push dword [eax + 8]
mov byte [ebp - 0xd], 0
push 0
push 0x43a
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov ebx, eax
test ebx, ebx
je 0x403d87
push esi
push edi
push 0x40
push 0x1000
push 0x2000
push 0
push ebx
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov esi, eax
mov dword [ebp - 0x14], esi
test esi, esi
je 0x403d5d
push str.LoadLibraryA
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edi, eax
push esi
push str.hookBase___08X
mov dword [ebp - 0x1c], edi
call fcn.00401210
push edi
push str.loadLibraryAAddr___08X
call fcn.00401210
mov edx, dword [ebp - 0x18]
add esp, 0x10
mov ecx, edx
lea edi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x403c50
sub ecx, edi
lea eax, [ebp - 0x20]
push eax
lea edi, [esi + 5]
mov esi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
lea eax, [ecx + 1]
push eax
push edx
push edi
push ebx
call esi
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x1c]
sub ecx, eax
mov byte [ebp - 0xc], 0xe9
sub ecx, 5
mov dword [ebp - 0xb], ecx
lea ecx, [ebp - 0x20]
push ecx
push 5
lea ecx, [ebp - 0xc]
push ecx
push eax
push ebx
call esi
mov esi, dword [ebp - 0x14]
push 0
push 0
push edi
push esi
push 0
push 0
push ebx
call dword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov edi, eax
test edi, edi
je 0x403d1a
cmp byte [ebp + 0x10], 0
je 0x403d0b
push dword [0x40c03c]
push edi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x403cfe
cmp eax, 0x80
je 0x403ce6
cmp eax, 0x102
jne 0x403d0f
push str.Process::InstallHook:_waiting_for_thread__WAIT_TIMEOUT
call fcn.00403af0
add esp, 4
push edi
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
jmp 0x403d34
push str.Process::InstallHook:_waiting_for_thread__WAIT_ABANDONED
call fcn.00403af0
add esp, 4
push edi
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
jmp 0x403d34
push str.hook_thread_complete
call fcn.00401210
add esp, 4
mov byte [ebp - 0xd], 1
push edi
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
jmp 0x403d34
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.CreateRemoteThread_failed___d_
call fcn.00403af0
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
add esp, 8
push 0x8000
push 0x2000
push esi
push ebx
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
push ebx
call edi
mov al, byte [ebp - 0xd]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0040674b
mov esp, ebp
pop ebp
ret
push str.Process::InstallHook:_couldnt_allocate_memory_in_target_process
call fcn.00403af0
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
add esp, 4
push ebx
call edi
mov al, byte [ebp - 0xd]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0040674b
mov esp, ebp
pop ebp
ret
push str.Process::InstallHook:_couldnt_get_process_handle
call fcn.00403af0
mov ecx, dword [ebp - 4]
add esp, 4
mov al, byte [ebp - 0xd]
xor ecx, ebp
pop ebx
call fcn.0040674b
mov esp, ebp
pop ebp
ret