Function at 0x1000cfb0
Capabilities:
Create thread
Get graphical window text
Set file attributes
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100418fb
mov eax, dword fs:[0]
push eax
sub esp, 0x26c
mov eax, dword [0x1005a050]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor edi, edi
lea ebx, [edi + edi*4]
xor esi, esi
shl ebx, 2
lea eax, [esi + esi*4]
shl eax, 2
push ebx
push eax
call dword [sym.imp.USER32.dll_WindowFromPoint]
push 0xe1
lea ecx, [ebp - 0x110]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
push 0x3e8
mov dword [0x10060754], 1
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0x110]
push str.First_Scan
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Memory_Wiew
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push 0x1004f448
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.FORM1
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Procces
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.FORM2
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Form1
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Form2
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Form3
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Form4
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.form1
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.form2
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.XANA
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Suspender
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push 0x1004f24c
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push 0x1004f22c
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push 0x1004f254
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push 0x1004f244
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push 0x1004f234
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Auto_Suspend
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.auto_Suspend
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.AUTO_SUSPEND
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push 0x1004f234
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push 0x1004f060
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push 0x1004f068
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push 0x1004f4d0
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push 0x1004f138
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push 0x1004f130
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push 0x1004f198
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Hile
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Cheat
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push 0x1004f1b8
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Bypass
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.bypass
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push 0x1004effc
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push 0x10051668
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.bypas
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.BYPASS
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.BYPAS
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push 0x1004effc
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.schwann
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.starter
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.bypass
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.TheHectoR
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Com2
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.TheHectoR
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.hacker
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.TheHector
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.theHector
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.thehector
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str._TheHectoR_
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.TheHectoR
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Bypass
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Pause
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Process
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Process
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Processs
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Processs
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Process_Hacker
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Process_Hacker
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Process_Haxor
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Process_hacker
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_5.1
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_5.1.1
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_5.2
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_5.3
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_5.4
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_5.5
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_5.6
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_5.6.1
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_6.0
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_6.2
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_6.1
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_6.3
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_6.4
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_1
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_2
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_3
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_4
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_5
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_6
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_7
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_8
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_9
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_0
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Referenced_functions
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Cheat_Engine
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Cheat_engine
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.cheat_engine
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Next_Scan
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.First_Scan
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Thread
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.path
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Path
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.thread
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Coldzer0
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.SetSkill
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.GetAutoPotionInfo
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.RegisterEffect
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.GetMainCharacterPosition
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.CanAttackInstance
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.SetUpVisual
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Simhi_Hack
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.IP_Scanner
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.ip_scanner
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Ip_scanner
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Port_Scanner
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.port_scanner
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Port_scanner
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.FastResolver
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.IP_Finder
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.IP_finder
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.ip_finder
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.FastResolver
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.IP_Hider
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.ip_hider
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.SafeIP
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.IPInfoOffline
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Surf_Anonymous
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Hide_Ip
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.IP_Tool
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.IP_List
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.IP___Mac_Tara
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Advanced
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.netstat
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.IP_Changer
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.IP_changer
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.ip_changer
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
lea eax, [ebp - 0x110]
push str.Serial_Port
push eax
call fcn.1001f870
add esp, 8
test eax, eax
jne 0x1000e0c2
push 0x10051568
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp dword [0x1005fa1c], 1
jne 0x1000e16d
sub esp, 0xc
lea ecx, [ebp - 0x278]
push str.OpenGuard.txt
call fcn.10004170
mov edx, str._nH_Scan:
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x278]
call fcn.10005910
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0x278]
call fcn.10005910
lea ecx, [ebp - 0x274]
call fcn.10004900
test eax, eax
jne 0x1000e15b
mov eax, dword [ebp - 0x278]
lea ecx, [ebp - 0x278]
push 0
mov eax, dword [eax + 4]
add ecx, eax
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push eax
call fcn.10001d70
lea ecx, [ebp - 0x278]
mov dword [ebp - 4], 0xffffffff
call fcn.100030f0
cmp dword [0x1005fa2c], 1
jne 0x1000e25a
lea eax, [ebp - 0x118]
push eax
call fcn.1002399f
add esp, 4
lea eax, [ebp - 0x118]
push eax
call fcn.10023c8c
sub esp, 8
lea ecx, [ebp - 0x1c8]
mov esi, eax
push 0x1004f4f0
call fcn.10004170
mov edx, str._nLocal_Time:
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x1c8]
call fcn.10005910
push esi
call fcn.100246b8
add esp, 4
lea ecx, [ebp - 0x1c8]
mov edx, eax
call fcn.10005910
mov edx, str.H_Scan:
lea ecx, [ebp - 0x1c8]
call fcn.10005910
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0x1c8]
call fcn.10005910
mov edx, str._n__________________
lea ecx, [ebp - 0x1c8]
call fcn.10005910
lea ecx, [ebp - 0x1c4]
call fcn.10004900
test eax, eax
jne 0x1000e242
mov eax, dword [ebp - 0x1c8]
lea ecx, [ebp - 0x1c8]
push 0
mov eax, dword [eax + 4]
add ecx, eax
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push eax
call fcn.10001d70
push 2
push 0x1004f4f0
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea ecx, [ebp - 0x1c8]
call fcn.100030f0
mov eax, dword [0x1005fa20]
push 0
push 0
push 0
cmp eax, 1
jne 0x1000e28c
push 0x100088a0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
cmp eax, 2
jne 0x1000e2b3
push 0x1000cf50
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
cmp eax, 3
jne 0x1000e2bf
push 0x1000cf80
jmp 0x1000e26f
push 0x1000cf40
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
jmp 0x1000e284