Function at 0x402210
Capabilities:
Check for sandbox and av modules

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov dword [ebp - 8], ecx
mov dword [ebp - 0xc], str.LnfdSCmAhclkae9nP7QsRIRyRMYsigCzMPbUbEfTN5bqW2inQ6BwTJLoBX7DjxfYqsbIWgGvwxlGhAIr458K0fAFoVnutvxPmphLm0TnzTVtaPAp
mov dword [ebp - 0x10], str.KcHTK6rAlyEVk2lEDKpAMJMRJK9tmw2s1WxWJTzn22FGxGxKUNdEvbc3U3XHweXEsyGPuyC6d7dP04SMUCYBJedm2eJ2Rr4B5wCp5CkO2SDmvI8TgMgusk0Vy9yoUoggDTqmYWJdPskETYRpijadac3wbGD5e2iJygJk8EfCbWKtTYuI3MmzMP8xPHeQg7JiYDNOW5A2Ovv0ezgphg8jFuo2B6GNraYlKDpchRN3GgcMvodcolkXFFjFMMrr8pinqnVMqUhVYoxLmRhWz9l33aENUGYDHUH7erlK9pGA25lil9aDEicVz2yoGJUHou7k8Yb9EK6xpws5YbrqbUrRozt21URiuGe1LDzWBFQXSVQgIEsyrGh2anaY3aBt9PBfwAb086EHqyxlY3qt
mov dword [ebp - 0x14], str.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
mov dword [ebp - 0x18], str.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
mov dword [ebp - 0x1c], str.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
push str.sbiedll.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
test eax, eax
je 0x402254
mov dword [ebp - 4], 1
jmp 0x40225b
mov dword [ebp - 4], 0
mov al, byte [ebp - 4]
mov esp, ebp
pop ebp
ret