Function at 0x426ac0
Capabilities:
Accept command line arguments
Create thread
Enumerate device drivers on windows
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x555b3d
mov eax, dword fs:[0]
push eax
sub esp, 0x58c
mov eax, dword [0x61308c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov edx, eax
mov dword [ebp - 0x42c], 0
xor eax, eax
mov dword [ebp - 0x428], 0
mov dword [ebp - 0x428], 7
mov dword [ebp - 0x42c], 0
mov word [ebp - 0x43c], ax
mov dword [ebp - 4], eax
cmp word [edx], ax
jne 0x426b36
xor ecx, ecx
jmp 0x426b4f
mov ecx, edx
lea esi, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x426b40
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x43c]
call fcn.00404d30
mov dword [ebp - 4], 1
push ecx
call fcn.00427360
mov ecx, eax
call fcn.00410130
push 0x11
push 0
push str._start_to_service
lea ecx, [ebp - 0x43c]
call fcn.004080c0
cmp eax, 0xffffffff
jne 0x42719c
push 0x18
push 0
push str._update_start_to_service
lea ecx, [ebp - 0x43c]
call fcn.004080c0
cmp eax, 0xffffffff
jne 0x42719c
call fcn.004118a0
call fcn.00426760
test al, al
je 0x427145
call fcn.00415660
mov al, byte [eax + 4]
mov byte [ebp - 0x594], al
push dword [ebp - 0x594]
sub esp, 0xc
call fcn.004266a0
test al, al
je 0x427145
call fcn.00427250
cmp dword [eax + 8], 0
jne 0x426bfe
push ecx
push eax
sub esp, 0xc
mov dword [eax + 0x14], 0
mov ecx, eax
call fcn.0040f050
lea ecx, [ebp - 0x480]
call fcn.0042c8d0
mov byte [ebp - 4], 3
lea eax, [ebp - 0x218]
push 0x208
push 0
push eax
call fcn.0052d340
mov edi, dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x218]
add esp, 0xc
push 0x104
push eax
push 0
call edi
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
push str.libDriverSearch.dll
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push ecx
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x480]
call fcn.0042ca50
mov dword [ebp - 0x58c], 0
mov byte [ebp - 4], 5
lea eax, [ebp - 0x480]
mov dword [ebp - 0x58c], eax
mov ecx, dword [ebp - 0x460]
test ecx, ecx
je 0x426ca7
lea eax, [ebp - 0x590]
push eax
push str.9D60E7E4_D4AE_486a_8232_87F3250275D2
call ecx
mov eax, dword [ebp - 0x58c]
test eax, eax
je 0x426d03
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.QueryInterface
push dword [eax + 0x18]
call esi
test eax, eax
je 0x426cd3
push 0xb2fef521
call eax
test eax, eax
je 0x426cd3
push str.https:__driverquery2.drivethelife.com_
push dword [ebp - 0x590]
call eax
mov eax, dword [ebp - 0x58c]
test eax, eax
je 0x426d03
push str.QueryInterface
push dword [eax + 0x18]
call esi
test eax, eax
je 0x426d03
push 0x459948ac
call eax
test eax, eax
je 0x426d03
push str.https:__logstat.drivethelife.com_
push dword [ebp - 0x590]
call eax
lea ecx, [ebp - 0x590]
call fcn.0042cb60
call fcn.0044aa30
lea ecx, [ebp - 0x454]
call fcn.004470f0
mov byte [ebp - 4], 6
cmp dword [eax + 0x14], 8
jb 0x426d2a
mov eax, dword [eax]
mov ecx, eax
call fcn.0044b500
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x454]
call fcn.00409540
call fcn.00415660
mov esi, eax
lea eax, [ebp - 0x424]
push 0x104
push eax
push 0
call edi
push ecx
lea eax, [ebp - 0x424]
push eax
lea ecx, [esi + 0xc]
call fcn.00405470
mov ecx, esi
call fcn.00445070
call fcn.004272d0
push 0
push 0
mov esi, eax
push esi
push 0x4ec200
push 0
push 0
call fcn.005360e3
add esp, 0x18
mov dword [esi], eax
call fcn.004a6970
call fcn.0053bd97
cmp dword [eax], 1
jne 0x426dac
push 0x58fc34
lea ecx, [ebp - 0x43c]
call fcn.0040cb70
cmp dword [ebp - 0x428], 8
lea edx, [ebp - 0x43c]
push 0
cmovae edx, dword [ebp - 0x43c]
xor ecx, ecx
call fcn.00411230
lea eax, [ebp - 0x598]
mov dword [ebp - 0x598], 0x5d6ffc
push eax
call dword [sym.imp.DTLUI.dll_public:_static_void___cdecl_DuiLib::CPaintManagerUI::SetLanInstance_class_DuiLib::ILanguageUI__]
push ebx
call dword [sym.imp.DTLUI.dll_public:_static_void___cdecl_DuiLib::CPaintManagerUI::SetInstance_struct_HINSTANCE____]
lea eax, [ebp - 0x588]
push eax
call dword [sym.imp.DTLUI.dll_public:_static_class_DuiLib::CDuiString___cdecl_DuiLib::CPaintManagerUI::GetInstancePath_void_]
add esp, 0x10
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x504]
push str.skin_
push ecx
mov ecx, eax
call dword [sym.imp.DTLUI.dll_public:_class_DuiLib::CDuiString___thiscall_DuiLib::CDuiString::operator_wchar_t_const__]
mov byte [ebp - 4], 8
mov ecx, eax
call dword [sym.imp.DTLUI.dll_public:_wchar_t_const____thiscall_DuiLib::CDuiString::operator_wchar_t_const__void_const]
push eax
call dword [sym.imp.DTLUI.dll_public:_static_void___cdecl_DuiLib::CPaintManagerUI::SetResourcePath_wchar_t_const__]
add esp, 4
mov byte [ebp - 4], 7
mov esi, dword [sym.imp.DTLUI.dll_public:_void___thiscall_DuiLib::CDuiString::destructor_void_]
lea ecx, [ebp - 0x504]
call esi
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x588]
call esi
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
test eax, eax
js 0x427100
call fcn.004b01f0
sub esp, 0xc
call fcn.00427660
push 0x1514
call fcn.005120b2
add esp, 4
mov dword [ebp - 0x594], eax
mov byte [ebp - 4], 0xa
mov ecx, eax
call fcn.004655b0
mov edi, eax
mov byte [ebp - 4], 5
test edi, edi
je 0x427100
mov edx, dword [edi]
mov ecx, edi
push 1
push 0x58fc48
push 0x87
push 0x58fc50
push 2
call dword [edx + 0x88]
call fcn.00446e70
push eax
mov ecx, edi
call fcn.0046d5a0
mov eax, dword [edi]
mov ecx, edi
push str.driverlife_xmlmain_frame.xml
call dword [eax + 0x1c]
mov edx, dword [edi]
lea eax, [edi + 0x328]
push 0x100
push 0x800a0000
push eax
push 0x58fc90
push 0
mov ecx, edi
call dword [edx + 0x20]
push 0
push 0
mov edx, 0x58fcac
lea ecx, [ebp - 0x454]
call fcn.0044b7f0
add esp, 8
mov byte [ebp - 4], 0xc
cmp dword [eax + 0x14], 8
jb 0x426f04
mov eax, dword [eax]
push eax
mov ecx, edi
call dword [sym.imp.DTLUI.dll_public:_struct_HWND______thiscall_DuiLib::CWindowWnd::operator_struct_HWND____void_const]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x454]
call fcn.00409540
mov ecx, edi
call dword [sym.imp.DTLUI.dll_public:_void___thiscall_DuiLib::CWindowWnd::CenterWindow_void_]
call fcn.004a7540
test al, al
jne 0x426f61
call fcn.00415660
mov al, byte [eax + 4]
test al, al
je 0x426f61
push str.IsAutoStart_true_r_n
push 0xc2
push 0x58fd14
push 8
call fcn.0040a150
push eax
call fcn.0040a3e0
add esp, 0x14
jmp 0x426fb5
push str.post_UM_SETFOREGROUNDWINDOW_r_n
push 0xbb
push 0x58fcec
push 8
call fcn.0040a150
push eax
call fcn.0040a3e0
mov esi, dword [sym.imp.DTLUI.dll_public:_struct_HWND______thiscall_DuiLib::CWindowWnd::GetHWND_void_const]
add esp, 0x14
mov ecx, edi
push 0
push 0xf120
push 0x112
call esi
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
push 5
mov ecx, edi
call esi
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, edi
call esi
push eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov ecx, edi
call fcn.00466110
mov eax, dword [edi]
mov ecx, edi
push 1
call dword [eax + 0x18]
call dword [sym.imp.DTLUI.dll_public:_static_void___cdecl_DuiLib::CPaintManagerUI::Term_void_]
call fcn.004274c0
call dword [sym.imp.ole32.dll_CoUninitialize]
call dword [sym.imp.DTLUI.dll_public:_static_void___cdecl_DuiLib::WindowImplBaseNew::Cleanup_void_]
mov eax, dword [0x61dd54]
test eax, eax
je 0x426fe7
call eax
mov eax, dword [0x618d4c]
test eax, eax
je 0x426ff2
call eax
call fcn.0040ffc0
call fcn.00415660
mov al, byte [eax + 6]
test al, al
je 0x42706d
push str.MOD_INST_CGlobalDataCon___IsReadyUpdate___r_n
push 0xd4
push 0x58fd54
push 8
call fcn.0040a150
push eax
call fcn.0040a3e0
add esp, 0x14
push 0x58fd68
push 1
push 0x1f0003
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
mov esi, eax
test esi, esi
je 0x42707e
push str.MOD_INST_CGlobalDataCon___IsReadyUpdate___OpenSemaphore_succ_r_n
push 0xd8
push 0x58fe14
push 8
call fcn.0040a150
push eax
call fcn.0040a3e0
add esp, 0x14
push 0
push 1
push esi
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x42707e
call fcn.00415660
mov al, byte [eax + 7]
test al, al
je 0x42707e
call fcn.004128d0
call fcn.00426740
push str.g_singleton.UnInit__
push 0xe6
push 0x58fe40
push 8
call fcn.0040a150
push eax
call fcn.0040a3e0
add esp, 0x14
call fcn.00415660
mov esi, dword [0x61e774]
test esi, esi
je 0x4270d0
mov dword [ebp - 0x594], esi
mov byte [ebp - 4], 5
mov ecx, esi
call fcn.00442f00
push 0x2a8
push esi
call fcn.00512108
add esp, 8
push str.CGlobalDataCon::Destroy___r_n
push 0xea
push str.DriverTalent.cpp
push 8
call fcn.0040a150
push eax
call fcn.0040a3e0
add esp, 0x14
call fcn.00411ad0
call fcn.00427360
mov ecx, eax
call fcn.00410220
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x58c]
test eax, eax
je 0x427131
mov eax, dword [eax + 0x24]
test eax, eax
je 0x42711d
push dword [ebp - 0x590]
call eax
mov dword [ebp - 0x590], 0
mov dword [ebp - 0x58c], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x480]
call fcn.0042c9b0
jmp 0x4271ee
mov eax, dword [0x618d28]
test eax, eax
jne 0x427172
push 0x70
call fcn.005120b2
add esp, 4
mov dword [ebp - 0x594], eax
mov byte [ebp - 4], 2
mov ecx, eax
call fcn.00409ee0
mov byte [ebp - 4], 1
mov dword [0x618d28], eax
push str._IsNeedStartApp___exit_r_n
push 0x63
push 0x58fb64
push 8
push eax
call fcn.0040a3e0
add esp, 0x14
call fcn.00411ad0
call fcn.00427360
mov ecx, eax
call fcn.00410220
jmp 0x4271ee
call fcn.00427360
mov eax, dword [eax + 0xc]
test eax, eax
je 0x4271aa
call eax
call fcn.00427360
mov esi, eax
mov eax, dword [esi]
mov dword [esi + 4], 0
mov dword [esi + 8], 0
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
mov dword [esi + 0x18], 0
test eax, eax
je 0x4271ee
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [esi], 0
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x428]
cmp eax, 8
jb 0x427213
inc eax
lea ecx, [ebp - 0x43c]
push eax
push dword [ebp - 0x43c]
call fcn.00404be0
xor eax, eax
mov dword [ebp - 0x428], 7
mov dword [ebp - 0x42c], 0
mov word [ebp - 0x43c], ax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005120a1
mov esp, ebp
pop ebp
ret 0x10