Function at 0x1000c490
Capabilities:
Create thread
Get graphical window text
Set file attributes
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1003f68b
mov eax, dword fs:[0]
push eax
sub esp, 0x26c
mov eax, dword [0x10057050]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor edi, edi
lea ebx, [edi + edi*4]
xor esi, esi
shl ebx, 2
lea eax, [esi + esi*4]
shl eax, 2
push ebx
push eax
call dword [sym.imp.USER32.dll_WindowFromPoint]
push 0xe1
lea ecx, [ebp - 0x110]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
push 0x3e8
mov dword [0x1005d74c], 1
call dword [sym.imp.KERNEL32.dll_Sleep]
lea eax, [ebp - 0x110]
push str.First_Scan
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Memory_Wiew
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push 0x1004d028
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.FORM1
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Procces
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.FORM2
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Form1
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Form2
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Form3
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Form4
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.form1
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.form2
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.XANA
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Suspender
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push 0x1004ce2c
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push 0x1004ce0c
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push 0x1004ce34
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push 0x1004ce24
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push 0x1004ce14
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Auto_Suspend
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.auto_Suspend
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.AUTO_SUSPEND
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push 0x1004ce14
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push 0x1004cc40
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push 0x1004cc48
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push 0x1004d0b0
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push 0x1004cd18
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push 0x1004cd10
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push 0x1004cd78
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Hile
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Cheat
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push 0x1004cd98
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Bypass
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.bypass
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push 0x1004cbdc
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push 0x1004ef90
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.bypas
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.BYPASS
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.BYPAS
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push 0x1004cbdc
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.schwann
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.starter
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.bypass
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.TheHectoR
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Com2
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.TheHectoR
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.hacker
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.TheHector
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.theHector
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.thehector
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str._TheHectoR_
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.TheHectoR
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Bypass
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Pause
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Process
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Process
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Processs
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Processs
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Process_Hacker
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Process_Hacker
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Process_Haxor
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Process_hacker
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_5.1
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_5.1.1
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_5.2
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_5.3
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_5.4
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_5.5
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_5.6
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_5.6.1
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_6.0
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_6.2
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_6.1
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_6.3
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_6.4
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_1
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_2
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_3
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_4
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_5
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_6
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_7
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_8
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_9
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Cheat_Engine_0
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Referenced_functions
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Cheat_Engine
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Cheat_engine
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.cheat_engine
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Next_Scan
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.First_Scan
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Thread
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.path
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Path
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.thread
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Coldzer0
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.SetSkill
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.GetAutoPotionInfo
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.RegisterEffect
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.GetMainCharacterPosition
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.CanAttackInstance
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.SetUpVisual
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Simhi_Hack
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.IP_Scanner
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.ip_scanner
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Ip_scanner
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Port_Scanner
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.port_scanner
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Port_scanner
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.FastResolver
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.IP_Finder
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.IP_finder
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.ip_finder
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.FastResolver
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.IP_Hider
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.ip_hider
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.SafeIP
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.IPInfoOffline
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Surf_Anonymous
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Hide_Ip
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.IP_Tool
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.IP_List
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.IP___Mac_Tara
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Advanced
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.netstat
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.IP_Changer
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.IP_changer
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.ip_changer
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
lea eax, [ebp - 0x110]
push str.Serial_Port
push eax
call fcn.1001d950
add esp, 8
test eax, eax
jne 0x1000d5a2
push 0x1004ee90
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
cmp dword [0x1005ca14], 1
jne 0x1000d64d
sub esp, 0xc
lea ecx, [ebp - 0x278]
push str.OpenGuard.txt
call fcn.10004170
mov edx, str._nH_Scan:
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x278]
call fcn.10005630
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0x278]
call fcn.10005630
lea ecx, [ebp - 0x274]
call fcn.10004900
test eax, eax
jne 0x1000d63b
mov eax, dword [ebp - 0x278]
lea ecx, [ebp - 0x278]
push 0
mov eax, dword [eax + 4]
add ecx, eax
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push eax
call fcn.10001d70
lea ecx, [ebp - 0x278]
mov dword [ebp - 4], 0xffffffff
call fcn.100030f0
cmp dword [0x1005ca24], 1
jne 0x1000d73a
lea eax, [ebp - 0x118]
push eax
call fcn.10021a7f
add esp, 4
lea eax, [ebp - 0x118]
push eax
call fcn.10021d6c
sub esp, 8
lea ecx, [ebp - 0x1c8]
mov esi, eax
push 0x1004d0d0
call fcn.10004170
mov edx, str._nLocal_Time:
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x1c8]
call fcn.10005630
push esi
call fcn.10022798
add esp, 4
lea ecx, [ebp - 0x1c8]
mov edx, eax
call fcn.10005630
mov edx, str.H_Scan:
lea ecx, [ebp - 0x1c8]
call fcn.10005630
lea edx, [ebp - 0x110]
lea ecx, [ebp - 0x1c8]
call fcn.10005630
mov edx, str._n__________________
lea ecx, [ebp - 0x1c8]
call fcn.10005630
lea ecx, [ebp - 0x1c4]
call fcn.10004900
test eax, eax
jne 0x1000d722
mov eax, dword [ebp - 0x1c8]
lea ecx, [ebp - 0x1c8]
push 0
mov eax, dword [eax + 4]
add ecx, eax
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push eax
call fcn.10001d70
push 2
push 0x1004d0d0
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
lea ecx, [ebp - 0x1c8]
call fcn.100030f0
mov eax, dword [0x1005ca18]
push 0
push 0
push 0
cmp eax, 1
jne 0x1000d76c
push 0x10007d90
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
cmp eax, 2
jne 0x1000d793
push 0x1000c430
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
cmp eax, 3
jne 0x1000d79f
push 0x1000c460
jmp 0x1000d74f
push 0x1000c420
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
jmp 0x1000d764