Function at 0x1001d8e1
Capabilities:
Accept command line arguments
Delete file

Disassembly:
push ebp
lea ebp, [esp - 0x294]
sub esp, 0x380
mov eax, dword [0x1009d600]
xor eax, ebp
mov dword [ebp + 0x290], eax
mov eax, dword [ebp + 0x29c]
push ebx
push esi
push edi
push eax
mov esi, 0x100a1e08
push esi
call fcn.100015b4
mov edi, 0x100868d0
push edi
push esi
call fcn.100096a7
test eax, eax
jne 0x1001d92e
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
push esi
call fcn.100015b4
call fcn.1005308e
test al, al
je 0x1001d94e
push str.TxDl_Main_enter...
push 0xd2
push str..QQImeDownload.cpp
call fcn.10052f1d
add esp, 0xc
push ecx
mov eax, esp
mov dword [ebp + 0x80], esp
push str.Enter_WinMain
push eax
call fcn.1000134a
call fcn.1000981b
lea eax, [ebp + 0x80]
mov dword [esp], str.Kernel32.dll
push eax
call fcn.1000134a
lea eax, [ebp + 0x80]
push eax
call fcn.1000116c
mov esi, eax
mov eax, dword [ebp + 0x80]
pop ecx
add eax, 0xfffffff0
call fcn.10001981
test esi, esi
je 0x1001d9b4
push str.SetDllDirectoryW
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
je 0x1001d9b4
push edi
call eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
and word [ebp + 0x84], 0
push 0x208
lea eax, [ebp + 0x86]
push 0
push eax
call fcn.10054f10
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
add esp, 0xc
call esi
push eax
push str.QQPCDownload_PropData__d
push 0xffffffffffffffff
mov edi, 0x104
lea eax, [ebp + 0x84]
push edi
push eax
call fcn.100591bb
add esp, 0x14
call dword [sym.imp.USER32.dll_GetDesktopWindow]
test eax, eax
je 0x1001dacd
push 5
push eax
call dword [sym.imp.USER32.dll_GetWindow]
mov ebx, dword [sym.imp.USER32.dll_IsWindow]
jmp 0x1001da3b
lea eax, [ebp + 0x84]
push eax
push dword [ebp + 0x80]
call dword [sym.imp.USER32.dll_GetPropW]
test eax, eax
jne 0x1001da81
push 2
push dword [ebp + 0x80]
call dword [sym.imp.USER32.dll_GetWindow]
push eax
mov dword [ebp + 0x80], eax
call ebx
test eax, eax
jne 0x1001da16
and dword [ebp + 0x80], eax
cmp dword [ebp + 0x80], 0
je 0x1001dacd
push dword [ebp + 0x80]
call ebx
test eax, eax
je 0x1001dacd
push dword [ebp + 0x80]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x1001da8f
push dword [ebp + 0x80]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x1001daa4
mov eax, dword [ebp + 0x80]
mov dword [ebp + 0x80], eax
jmp 0x1001da4e
push 0
push 0
push 0xd68
push dword [ebp + 0x80]
call dword [sym.imp.USER32.dll_PostMessageW]
call fcn.1005308e
test al, al
je 0x1001dbe3
push str.TxDl_Main_leave__QQPCDownload_already_run
push 0xd2
push str..QQImeDownload.cpp
call fcn.10052f1d
add esp, 0xc
jmp 0x1001dbe3
call fcn.1001b1eb
lea eax, [ebp - 0xec]
push eax
call fcn.10013c54
lea ebx, [ebp - 0xec]
call fcn.1001ee43
push dword [ebp - 0xe8]
call dword [sym.imp.USER32.dll_BringWindowToTop]
call esi
push eax
push str.QQPCDownload_PropData__d
push 0xffffffffffffffff
lea eax, [ebp + 0x84]
push edi
push eax
call fcn.100591bb
add esp, 0x14
push dword [ebp - 0xe8]
lea eax, [ebp + 0x84]
push eax
push dword [ebp - 0xe8]
call dword [sym.imp.USER32.dll_SetPropW]
mov esi, dword [sym.imp.USER32.dll_GetMessageW]
xor edi, edi
jmp 0x1001db52
cmp dword [ebp + 0x68], 0x20
je 0x1001db52
cmp dword [ebp + 0x68], 0xd
je 0x1001db52
lea eax, [ebp + 0x60]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp + 0x60]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
push edi
push edi
push edi
lea eax, [ebp + 0x60]
push eax
call esi
test eax, eax
jne 0x1001db32
call fcn.1001b27a
call fcn.1001ed99
call fcn.100029f8
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
push str.dr.ini
lea ecx, [ebp + 0x80]
call fcn.1001a697
lea ecx, [ebp + 0x7c]
push ecx
mov ecx, eax
call fcn.10009b0b
mov eax, dword [ebp + 0x80]
pop ecx
pop ecx
add eax, 0xfffffff0
call fcn.10001981
push dword [ebp + 0x7c]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
call fcn.1005308e
test al, al
je 0x1001dbcd
push str.TxDl_Main_leave...
push 0xd2
push str..QQImeDownload.cpp
call fcn.10052f1d
add esp, 0xc
mov eax, dword [ebp + 0x7c]
add eax, 0xfffffff0
call fcn.10001981
lea ecx, [ebp - 0xec]
call fcn.10013e32
mov ecx, dword [ebp + 0x290]
pop edi
pop esi
xor ecx, ebp
xor eax, eax
pop ebx
call fcn.10054c7d
add ebp, 0x294
leave
ret 4