Function at 0x409570
Capabilities:
Check for sandbox and av modules

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov dword [ebp - 8], ecx
mov dword [ebp - 0xc], str.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
mov dword [ebp - 0x10], str.B54OxYefzFMN68Brf7fQ5ukK0WxEXcKbXyRVASn4I5KUuCacsS8QgiVdjrjxqEkM7VF1uTKdoodauN2GFgTtznW1dLOTcdy4SB8JoffutkTrudOpfjHM6t7gR90NpGDwDMk0MKWIU5sqMxQn4W85e2lYwbJ3W8w9jDR0vU9KKavArD96C2cVI6MiuQScBEPvraJcHQlp7yB7otsC1hocDnNicyeBWATC9jqkPjeybyiYo9dvRiGWmaW754voomM47RPlIIH6dS1U0UyOqBtABtWRKxrpbvcUBxmwu7SSyFds
mov dword [ebp - 0x14], str.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
mov dword [ebp - 0x18], str.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
push str.sbiedll.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test eax, eax
je 0x4095ad
mov dword [ebp - 4], 1
jmp 0x4095b4
mov dword [ebp - 4], 0
mov al, byte [ebp - 4]
mov esp, ebp
pop ebp
ret