Function at 0x402a50
Capabilities:
Check if file exists
Create thread
Get file attributes
Get graphical window text
Inject dll
Inject thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1ac
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [sym.imp.USER32.dll_GetDlgItem]
push edi
push 0x3ed
push dword [0x41f368]
call esi
push 0x9c54
push dword [0x41f368]
mov edi, eax
call esi
push 0x9c65
push dword [0x41f368]
mov dword [ebp - 0x194], eax
call esi
push 0x103
mov ebx, eax
mov byte [ebp - 0x110], 0
lea eax, [ebp - 0x10f]
push 0
push eax
call fcn.00405160
add esp, 0xc
call fcn.004028e0
push edi
call dword [sym.imp.USER32.dll_UpdateWindow]
test edi, edi
je 0x402b15
mov esi, dword [ebp - 0x194]
test esi, esi
je 0x402b15
test ebx, ebx
je 0x402b15
mov edi, dword [sym.imp.USER32.dll_SetWindowTextA]
push 0x41ba36
push ebx
call edi
push 0x104
lea eax, [ebp - 0x110]
push eax
push esi
call dword [sym.imp.USER32.dll_GetWindowTextA]
test eax, eax
jne 0x402b28
push 0x30
push str.Error
push str.No_DLL_selected
push dword [0x41f368]
call dword [sym.imp.USER32.dll_MessageBoxA]
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00403e69
mov esp, ebp
pop ebp
ret
cmp dword [0x6a2d7c], 0
jne 0x402b3f
push 0x30
push str.Error
push str.No_target_process_selected
jmp 0x402b09
lea eax, [ebp - 0x194]
push eax
push dword [0x6a2370]
push 0
push 0x400
call dword [sym.imp.KERNEL32.dll_OpenProcess]
push eax
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
cmp dword [ebp - 0x194], 0x103
je 0x402b7a
push 0x30
push str.Error
push str.Target_process_is_not_running
jmp 0x402b09
lea eax, [ebp - 0x110]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
jne 0x402b9d
push 0x30
push str.Error
push str.Selected_DLL_does_not_exist
jmp 0x402b09
lea ecx, [ebp - 0x110]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x402ba6
sub ecx, edx
lea eax, [ebp - 0x110]
add ecx, eax
cmp ecx, eax
jbe 0x402bd8
nop dword [eax + eax]
mov al, byte [ecx]
cmp al, 0x5c
je 0x402bd7
cmp al, 0x2f
je 0x402bd7
dec ecx
lea eax, [ebp - 0x110]
cmp ecx, eax
ja 0x402bc0
jmp 0x402bd8
inc ecx
mov edx, dword [0x6a2370]
lea eax, [ebp - 0x194]
push eax
call fcn.00402130
add esp, 4
test eax, eax
je 0x402c36
mov eax, dword [ebp - 0x194]
push eax
push str.Module_already_loaded_at_base__p
mov dword [0x41e8cc], eax
lea eax, [ebp - 0x190]
push 0x80
push eax
call fcn.00401010
add esp, 0x10
lea eax, [ebp - 0x190]
push eax
push ebx
call edi
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00403e69
mov esp, ebp
pop ebp
ret
push str.Injecting...
push ebx
call edi
push ebx
call dword [sym.imp.USER32.dll_UpdateWindow]
mov eax, dword [0x6a2370]
or esi, 0xffffffff
push eax
push 0
push 0x1fffff
mov dword [ebp - 0x1a8], eax
mov dword [ebp - 0x19c], esi
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov edi, eax
test edi, edi
je 0x402daf
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test eax, eax
je 0x402da8
push str.LoadLibraryA
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x198], eax
test eax, eax
je 0x402da8
lea ecx, [ebp - 0x110]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x402ca7
sub ecx, edx
push 4
push 0x3000
lea eax, [ecx + 1]
push eax
push 0
push edi
mov dword [ebp - 0x1a0], eax
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov dword [ebp - 0x194], eax
test eax, eax
je 0x402da8
lea ecx, [ebp - 0x1a4]
push ecx
push dword [ebp - 0x1a0]
lea ecx, [ebp - 0x110]
push ecx
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
cmp dword [ebp - 0x1a4], 0
je 0x402d94
push 0
push 0
push dword [ebp - 0x194]
push dword [ebp - 0x198]
push 0
push 0
push edi
call dword [sym.imp.KERNEL32.dll_CreateRemoteThread]
mov dword [ebp - 0x198], eax
test eax, eax
je 0x402d94
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0xffffffff
je 0x402d88
lea ecx, [ebp - 0x110]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x402d40
sub ecx, edx
lea eax, [ebp - 0x110]
add ecx, eax
cmp ecx, eax
jbe 0x402d6d
mov al, byte [ecx]
cmp al, 0x5c
je 0x402d6c
cmp al, 0x2f
je 0x402d6c
dec ecx
lea eax, [ebp - 0x110]
cmp ecx, eax
ja 0x402d55
jmp 0x402d6d
inc ecx
mov edx, dword [ebp - 0x1a8]
lea eax, [ebp - 0x19c]
push eax
call fcn.00402130
mov esi, dword [ebp - 0x19c]
add esp, 4
push dword [ebp - 0x198]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x8000
push 0
push dword [ebp - 0x194]
push edi
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp esi, 0xffffffff
jne 0x402def
mov eax, dword [sym.imp.USER32.dll_SetWindowTextA]
push str.Injection_failed
push ebx
call eax
push 0x30
push str.Error
push str.Injection_Failed
push dword [0x41f368]
call dword [sym.imp.USER32.dll_MessageBoxA]
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00403e69
mov esp, ebp
pop ebp
ret
test esi, esi
jne 0x402e14
mov eax, dword [sym.imp.USER32.dll_SetWindowTextA]
push str.DLL_initialization_failed
push ebx
call eax
lea eax, [esi + 1]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00403e69
mov esp, ebp
pop ebp
ret
push esi
push str.Successfully_injected_at_base_0x_p
lea eax, [ebp - 0x190]
mov dword [0x41e8cc], esi
push 0x80
push eax
call fcn.00401010
add esp, 0x10
lea eax, [ebp - 0x190]
push eax
mov eax, dword [sym.imp.USER32.dll_SetWindowTextA]
push ebx
call eax
mov ecx, dword [ebp - 4]
mov eax, 1
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00403e69
mov esp, ebp
pop ebp
ret