defeat an anti-sandbox measure used in a recent asprox sample -- through some control flow and data flow obfuscation, was using the value of nShowCmd passed to WinMain as a decider for whether to unpack/load