Function at 0x1000ba20
Capabilities:
Create thread
Get graphical window text
Set file attributes
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1003ea6b
mov eax, dword fs:[0]
push eax
sub esp, 0x26c
mov eax, dword [0x10056050]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor edi, edi
lea ebx, [edi + edi*4]
xor esi, esi
shl ebx, 2
lea eax, [esi + esi*4]
shl eax, 2
push ebx
push eax
call dword [sym.imp.USER32.dll_WindowFromPoint]
push 0xe1
lea ecx, [ebp - 0x110]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
push 0x3e8
mov dword [0x1005c6b0], 1
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0x110]
push str.First_Scan
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Memory_Wiew
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push 0x1004c3a8
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.FORM1
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Procces
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.FORM2
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Form1
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Form2
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Form3
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Form4
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.form1
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.form2
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.XANA
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Suspender
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push 0x1004c1ac
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push 0x1004c18c
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push 0x1004c1b4
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push 0x1004c1a4
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push 0x1004c194
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Auto_Suspend
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.auto_Suspend
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.AUTO_SUSPEND
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push 0x1004c194
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push 0x1004bfc0
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push 0x1004bfc8
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push 0x1004c430
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push 0x1004c098
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push 0x1004c090
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push 0x1004c0f8
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Hile
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Cheat
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push 0x1004c118
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Bypass
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.bypass
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push 0x1004bf5c
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push 0x1004e1a0
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.bypas
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.BYPASS
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.BYPAS
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push 0x1004bf5c
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.schwann
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.starter
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.bypass
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.TheHectoR
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Com2
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.TheHectoR
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.hacker
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.TheHector
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.theHector
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.thehector
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str._TheHectoR_
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.TheHectoR
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Bypass
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Pause
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Process
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Process
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Processs
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Processs
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Process_Hacker
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Process_Hacker
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Process_Haxor
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Process_hacker
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Cheat_Engine_5.1
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Cheat_Engine_5.1.1
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Cheat_Engine_5.2
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Cheat_Engine_5.3
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Cheat_Engine_5.4
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Cheat_Engine_5.5
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Cheat_Engine_5.6
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Cheat_Engine_5.6.1
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Cheat_Engine_6.0
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Cheat_Engine_6.2
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Cheat_Engine_6.1
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Cheat_Engine_6.3
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Cheat_Engine_6.4
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Cheat_Engine_1
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Cheat_Engine_2
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Cheat_Engine_3
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Cheat_Engine_4
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Cheat_Engine_5
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Cheat_Engine_6
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Cheat_Engine_7
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Cheat_Engine_8
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Cheat_Engine_9
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Cheat_Engine_0
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Referenced_functions
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Cheat_Engine
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Cheat_engine
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.cheat_engine
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Next_Scan
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.First_Scan
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Thread
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.path
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Path
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.thread
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Coldzer0
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.SetSkill
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.GetAutoPotionInfo
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.RegisterEffect
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.GetMainCharacterPosition
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.CanAttackInstance
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.SetUpVisual
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Simhi_Hack
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.IP_Scanner
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.ip_scanner
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Ip_scanner
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Port_Scanner
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.port_scanner
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Port_scanner
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.FastResolver
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.IP_Finder
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.IP_finder
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.ip_finder
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.FastResolver
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.IP_Hider
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.ip_hider
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.SafeIP
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.IPInfoOffline
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Surf_Anonymous
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Hide_Ip
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.IP_Tool
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.IP_List
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.IP___Mac_Tara
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Advanced
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.netstat
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.IP_Changer
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.IP_changer
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.ip_changer
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
lea eax, [ebp - 0x110]
push str.Serial_Port
push eax
call fcn.1001ce60
add esp, 8
test eax, eax
jne 0x1000cb32
push 0x1004e0a0
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp dword [0x1005b97c], 1
jne 0x1000cbdd
sub esp, 0xc
lea ecx, [ebp - 0x278]
push str.OpenGuard.txt
call fcn.10004170
mov edx, str._nH_Scan:
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x278]
call fcn.10005930
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0x278]
call fcn.10005930
lea ecx, [ebp - 0x274]
call fcn.10004900
test eax, eax
jne 0x1000cbcb
mov eax, dword [ebp - 0x278]
lea ecx, [ebp - 0x278]
push 0
mov eax, dword [eax + 4]
add ecx, eax
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push eax
call fcn.10001d70
lea ecx, [ebp - 0x278]
mov dword [ebp - 4], 0xffffffff
call fcn.100030f0
cmp dword [0x1005b98c], 1
jne 0x1000ccca
lea eax, [ebp - 0x118]
push eax
call fcn.10020f8f
add esp, 4
lea eax, [ebp - 0x118]
push eax
call fcn.1002127c
sub esp, 8
lea ecx, [ebp - 0x1c8]
mov esi, eax
push 0x1004c450
call fcn.10004170
mov edx, str._nLocal_Time:
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x1c8]
call fcn.10005930
push esi
call fcn.10021ca8
add esp, 4
lea ecx, [ebp - 0x1c8]
mov edx, eax
call fcn.10005930
mov edx, str.H_Scan:
lea ecx, [ebp - 0x1c8]
call fcn.10005930
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0x1c8]
call fcn.10005930
mov edx, str._n__________________
lea ecx, [ebp - 0x1c8]
call fcn.10005930
lea ecx, [ebp - 0x1c4]
call fcn.10004900
test eax, eax
jne 0x1000ccb2
mov eax, dword [ebp - 0x1c8]
lea ecx, [ebp - 0x1c8]
push 0
mov eax, dword [eax + 4]
add ecx, eax
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push eax
call fcn.10001d70
push 2
push 0x1004c450
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea ecx, [ebp - 0x1c8]
call fcn.100030f0
mov eax, dword [0x1005b980]
push 0
push 0
push 0
cmp eax, 1
jne 0x1000ccfc
push 0x100072e0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
cmp eax, 2
jne 0x1000cd23
push 0x1000b9c0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
cmp eax, 3
jne 0x1000cd2f
push 0x1000b9f0
jmp 0x1000ccdf
push 0x1000b9b0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
jmp 0x1000ccf4