Function at 0x421b60
Capabilities:
Hide graphical window
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x154
mov eax, dword [0x4b9430]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x4c7008]
push ebx
push esi
xor esi, esi
push edi
mov edi, dword [0x4c7004]
mov dword [ebp - 0x124], eax
cmp dword [0x4c5c9c], esi
je 0x421b95
xor ebx, ebx
jmp 0x421b9c
call fcn.00421ae0
mov ebx, eax
push 0x30
lea ecx, [ebp - 0x154]
push esi
push ecx
call fcn.00463ac0
mov edx, dword [0x4c7124]
add esp, 0xc
push esi
mov dword [ebp - 0x154], 0x30
mov dword [ebp - 0x150], 8
mov dword [ebp - 0x14c], 0x422640
mov dword [ebp - 0x148], esi
mov dword [ebp - 0x144], esi
mov dword [ebp - 0x140], edi
mov dword [ebp - 0x13c], edx
mov dword [ebp - 0x138], esi
mov dword [ebp - 0x134], esi
mov dword [ebp - 0x130], 0x67
mov dword [ebp - 0x12c], str.AdbybyLogWindow
call dword [sym.imp.GDI32.dll_GetStockObject]
mov dword [ebp - 0x134], eax
lea eax, [ebp - 0x154]
push eax
call dword [sym.imp.USER32.dll_RegisterClassExA]
push esi
push edi
push esi
push ebx
push accept
push accept
push accept
push accept
push 0xcf0000
push 0x4c5b30
push str.AdbybyLogWindow
push 0x40000
call dword [sym.imp.USER32.dll_CreateWindowExA]
lea ecx, [ebp - 0x120]
mov ebx, eax
push ecx
push ebx
call dword [sym.imp.USER32.dll_GetClientRect]
call fcn.00421ec0
cmp dword [0x4c5cb8], 0x100
mov eax, str.RichEdit
je 0x421c81
mov eax, str.RichEdit20A
mov edx, dword [ebp - 0x114]
mov ecx, dword [ebp - 0x118]
push esi
push edi
push esi
push ebx
push edx
mov edx, dword [ebp - 0x11c]
push ecx
mov ecx, dword [ebp - 0x120]
push edx
push ecx
push 0x50300144
push 0x4ab595
push eax
push esi
call dword [sym.imp.USER32.dll_CreateWindowExA]
push 0xfffffffffffffffc
push eax
mov dword [0x4c5a9c], eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
mov edx, dword [0x4c5a9c]
push 0x422590
push 0xfffffffffffffffc
push edx
mov dword [0x4c5aa0], eax
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov eax, dword [ebp - 0x124]
cmp dword [0x4c5c9c], esi
jne 0x421cff
cmp eax, 2
je 0x421cf7
cmp eax, 6
je 0x421cf7
cmp eax, 7
jne 0x421cff
mov dword [0x4c1cbc], esi
mov eax, esi
push eax
push ebx
call dword [sym.imp.USER32.dll_ShowWindow]
push ebx
call dword [sym.imp.USER32.dll_UpdateWindow]
mov ecx, dword [0x4c7128]
lea eax, [ebp - 0x120]
push eax
push ecx
call dword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [ebp - 0x11c]
mov edx, dword [ebp - 0x114]
mov ecx, dword [ebp - 0x120]
push 4
sub edx, eax
push edx
mov edx, dword [ebp - 0x118]
sub edx, ecx
push edx
push eax
mov eax, dword [0x4c5a9c]
push ecx
push esi
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
call fcn.00422a50
push 0x104
lea ecx, [ebp - 0x10f]
push esi
push ecx
mov dword [0x4c1cc0], eax
mov byte [ebp - 0x110], 0
call fcn.00463ac0
add esp, 0xc
push 0x104
lea edx, [ebp - 0x110]
push edx
push esi
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x110]
push 0x5c
push eax
call fcn.0045e830
mov byte [eax], 0
lea eax, [ebp - 0x110]
add esp, 8
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x421da5
mov ecx, dword [str._adhook.ini]
mov edx, dword [0x4ab8f8]
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntA]
mov dword [eax], ecx
mov ecx, dword [0x4ab8fc]
mov dword [eax + 4], edx
lea edx, [ebp - 0x110]
push edx
mov edi, 1
push edi
push str.ShowAnimation
push 0x4ab9f4
mov dword [eax + 8], ecx
call esi
mov dword [0x4c1cb8], eax
lea eax, [ebp - 0x110]
push eax
push edi
push str.AutoUpdate
push 0x4ab9f4
call esi
lea ecx, [ebp - 0x110]
push ecx
push 0
push str.ShowPopupDlg
push 0x4ab9f4
mov dword [0x4c1cc8], eax
call esi
lea edx, [ebp - 0x110]
push edx
push 0
push str.SplitHost
push 0x4ab9f4
mov dword [0x4c5c94], eax
call esi
mov dword [0x4c5c98], eax
lea eax, [ebp - 0x110]
push eax
push edi
push str.ShowTrayTips
push 0x4ab9f4
call esi
lea ecx, [ebp - 0x110]
push ecx
push edi
push str.AutoRun
push 0x4ab9f4
mov dword [0x4c1cc4], eax
call esi
cmp dword [0x4c1cc0], eax
je 0x421e78
call fcn.004228e0
mov dword [0x4c1cc0], edi
lea edx, [ebp - 0x110]
push edx
push edi
push str.ShowTrayIcon
push 0x4ab9f4
call esi
test eax, eax
je 0x421ea0
mov ecx, dword [0x4c5ac4]
mov esi, 0x4c5b30
call fcn.004235a0
mov ecx, dword [ebp - 4]
pop edi
pop esi
mov eax, ebx
xor ecx, ebp
pop ebx
call fcn.0045d3b4
mov esp, ebp
pop ebp
ret