Function at 0x403270
Capabilities:
Create thread
Enumerate process modules
Inject dll
Inject thread

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2138
call fcn.00417ea0
mov eax, dword [0x421004]
xor eax, ebp
mov dword [ebp - 8], eax
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
lea eax, [ebp - 0x2114]
push 0x1000
mov ebx, ecx
mov dword [ebp - 0x2130], edx
push 0
push eax
mov dword [ebp - 0x211c], ebx
mov dword [ebp - 0x2128], edi
call fcn.00405d00
add esp, 0xc
lea eax, [ebp - 0x212c]
push eax
push 0x1000
lea eax, [ebp - 0x2114]
push eax
push ebx
call dword [sym.imp.PSAPI.DLL_EnumProcessModules]
test eax, eax
je 0x40356c
mov eax, dword [ebp - 0x212c]
shr eax, 2
mov dword [ebp - 0x2124], eax
lea eax, [edi + 0x10c]
push eax
mov dword [ebp - 0x2134], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov esi, dword [edi + 0x124]
cmp esi, dword [edi + 0x128]
je 0x403560
nop dword [eax]
mov edi, dword [esi]
xor ebx, ebx
mov dword [ebp - 0x2118], edi
mov dword [ebp - 0x2120], ebx
cmp dword [ebp - 0x2124], ebx
jbe 0x40340f
nop dword [eax]
push 0x104
lea eax, [ebp - 0x114]
push 0
push eax
call fcn.00405d00
add esp, 0xc
lea eax, [ebp - 0x114]
push 0x104
push eax
push dword [ebp + ebx*4 - 0x2114]
push dword [ebp - 0x211c]
call dword [sym.imp.PSAPI.DLL_GetModuleFileNameExA]
test eax, eax
je 0x4033fc
mov edx, edi
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x403372
sub edx, ecx
lea ecx, [ebp - 0x114]
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x403384
sub ecx, edi
cmp edx, ecx
jne 0x4033ee
mov ecx, dword [ebp - 0x2118]
xor edx, edx
lea edi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4033a0
sub ecx, edi
je 0x40354b
mov edi, dword [ebp - 0x2118]
lea eax, [ebp - 0x114]
mov ebx, edi
sub ebx, eax
nop
lea ecx, [ebp - 0x114]
add ecx, edx
mov al, byte [ebx + ecx]
cmp al, byte [ecx]
jne 0x4033f6
mov eax, edi
inc edx
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4033d5
sub eax, edi
cmp edx, eax
jae 0x40354b
mov edi, dword [ebp - 0x2118]
jmp 0x4033c0
mov edi, dword [ebp - 0x2118]
jmp 0x4033fc
mov ebx, dword [ebp - 0x2120]
inc ebx
mov dword [ebp - 0x2120], ebx
cmp ebx, dword [ebp - 0x2124]
jb 0x403330
push 0x1000
lea eax, [ebp - 0x1114]
push 0
push eax
call fcn.00405d00
add esp, 0xc
lea eax, [ebp - 0x1114]
push edi
push dword [ebp - 0x2130]
push dword [ebp - 0x2128]
push str._r_nTarget_Process:__s_r_nTarget_Process_ID:__d_r_nTarget_DLL:__s_r_n
push eax
call fcn.00401040
add esp, 0x14
lea ecx, [ebp - 0x1114]
call fcn.00403580
push 0x1000
lea eax, [ebp - 0x1114]
push 0
push eax
call fcn.00405d00
add esp, 0xc
push str.LoadLibraryA
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edi, eax
mov eax, dword [ebp - 0x2118]
lea edx, [eax + 1]
nop dword [eax]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x403490
push 4
sub eax, edx
push 0x3000
inc eax
push eax
push 0
push dword [ebp - 0x211c]
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ebx, eax
mov eax, dword [ebp - 0x2118]
lea edx, [eax + 1]
nop dword [eax + eax]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4034c0
push 0
sub eax, edx
inc eax
push eax
push dword [ebp - 0x2118]
push ebx
push dword [ebp - 0x211c]
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0
push ebx
push edi
push 0
push 0
push dword [ebp - 0x211c]
call dword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov edi, eax
test edi, edi
jne 0x403524
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [ebp - 0x1114]
push str.Injection_failed___CreateRemoteThread___exited_with_error_code__d_r_n
push eax
call fcn.00401040
add esp, 0xc
lea ecx, [ebp - 0x1114]
call fcn.00403580
jmp 0x403537
mov ecx, str.Injection_Success__r_n
call fcn.00403580
push 0xffffffffffffffff
push edi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push 0x8000
push 0
push ebx
push dword [ebp - 0x211c]
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov eax, dword [ebp - 0x2128]
add esi, 4
cmp esi, dword [eax + 0x128]
jne 0x403310
push dword [ebp - 0x2134]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004047c0
mov esp, ebp
pop ebp
ret