I believe it was just one, but taxing my memory that one stemmed from several wallets combined, taking him a tad while to configure whatever he was doing to accomplish the task. I had no reason to believe that whatever he was doing, something nefarious was afoot.
No worry. I understand that it's hard to remember something done in 2012.
It's just that the more information we get, the more we'll have a chance to retrieve one of these transactions.
In my first search, I've looked for 1 transaction with 1 output value between 1100 and 1200 btc and I think Nicolas did something similar.
But if it was done with several tx, this search won't give us the right tx and we'll need to search in another way.