Function at 0x411689
Capabilities:
Read .ini file

Disassembly:
push 0x24c
mov eax, 0x555be6
call fcn.0052faf2
mov eax, dword [ebp + 8]
mov dword [ebp - 0x240], eax
xor edi, edi
mov dword [ebp - 4], edi
call fcn.0042b589
push eax
lea ecx, [ebp - 0x248]
call fcn.0040217f
mov byte [ebp - 4], 1
call fcn.00409b98
mov eax, dword [eax]
push str.Resources
push eax
lea eax, [ebp - 0x248]
push 0x588938
push eax
call fcn.004034f1
mov dword [ebp - method.CLcMgrStub.virtual_0], vtable.CLcMgrStub.0
mov dword [ebp - 0x24c], edi
add esp, 0xc
mov byte [ebp - 4], 2
mov ecx, esp
mov dword [ebp - 0x23c], esp
push str.string
call fcn.00401daf
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x248]
push ecx
add eax, 0xfffffff0
mov dword [ebp - 0x244], esp
mov esi, esp
push eax
mov dword [ebp - 0x244], eax
call fcn.00401e83
add eax, 0x10
mov dword [esi], eax
pop ecx
lea esi, [ebp - 0x250]
mov byte [ebp - 4], 2
call fcn.0040da1c
mov dword [ebp - 0x234], edi
call fcn.0042b589
push eax
lea ecx, [ebp - 0x220]
call fcn.0040217f
push str.Menu.TaskMonitor.OpenMonitoredFolder
lea ebx, [ebp - 0x228]
mov byte [ebp - 4], 4
call fcn.0040da71
push eax
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 5
call fcn.00401ee1
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x228]
add ecx, 0xfffffff0
call fcn.004021a7
mov edi, 0x80e8
mov dword [ebp - 0x228], 3
mov esi, 0x104
call fcn.0042b589
push eax
lea ecx, [ebp - 0x230]
call fcn.0040217f
lea eax, [edi - 0x7530]
push eax
push 0x589618
lea eax, [ebp - 0x230]
push str._s_d
push eax
mov byte [ebp - 4], 6
call fcn.004034f1
push esi
xor ebx, ebx
lea eax, [ebp - 0x218]
push ebx
push eax
call fcn.0052bfd0
lea ecx, [ebp - 0x258]
call fcn.00409c58
push str.EventSetting.ini
push eax
lea eax, [ebp - 0x238]
push eax
mov byte [ebp - 4], 7
call fcn.004016d7
add esp, 0x28
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x258]
add ecx, 0xfffffff0
call fcn.004021a7
push dword [ebp - 0x238]
lea eax, [ebp - 0x218]
push esi
push eax
push 0x587cac
push str.FolderPath
push dword [ebp - 0x230]
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x21c]
call fcn.00401daf
mov byte [ebp - 4], 0xa
call fcn.0042b589
push eax
lea ecx, [ebp - 0x224]
call fcn.0040217f
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x21c]
cmp dword [eax - 0xc], ebx
je 0x411996
push 0x5c
push eax
call fcn.0052c71c
pop ecx
pop ecx
mov ecx, dword [ebp - 0x21c]
cmp eax, ebx
jne 0x411889
or edx, 0xffffffff
jmp 0x41188f
sub eax, ecx
sar eax, 1
mov edx, eax
mov eax, dword [ecx - 0xc]
cmp eax, 3
jle 0x4118d5
sub eax, edx
dec eax
push eax
lea eax, [ebp - 0x254]
push eax
lea ecx, [ebp - 0x21c]
call fcn.00406fff
push eax
lea ecx, [ebp - 0x21c]
mov byte [ebp - 4], 0xc
call fcn.00401ee1
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x254]
add ecx, 0xfffffff0
call fcn.004021a7
mov ecx, dword [ebp - 0x21c]
cmp dword [ecx - 0xc], 0x23
jle 0x411958
push 0x23
lea eax, [ebp - 0x22c]
push eax
lea ecx, [ebp - 0x21c]
call fcn.00403286
push str.......
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x23c]
push eax
mov byte [ebp - 4], 0xd
call fcn.004016d7
add esp, 0xc
push eax
lea ecx, [ebp - 0x22c]
mov byte [ebp - 4], 0xe
call fcn.00401ee1
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x23c]
add ecx, 0xfffffff0
call fcn.004021a7
mov ebx, dword [ebp - 0x22c]
push ebx
push dword [ebp - 0x220]
lea eax, [ebp - 0x224]
push eax
call fcn.004034f1
add esp, 0xc
lea ecx, [ebx - 0x10]
call fcn.004021a7
xor ebx, ebx
jmp 0x41196e
push ecx
push dword [ebp - 0x220]
lea eax, [ebp - 0x224]
push eax
call fcn.004034f1
add esp, 0xc
inc dword [ebp - 0x234]
lea ecx, [ebp - 0x21c]
call fcn.004020c5
push dword [ebp - 0x224]
mov eax, dword [ebp - 0x240]
push edi
push ebx
push dword [eax + 4]
call dword [sym.imp.USER32.dll_AppendMenuW]
mov ecx, dword [ebp - 0x224]
add ecx, 0xfffffff0
call fcn.004021a7
mov ecx, dword [ebp - 0x21c]
add ecx, 0xfffffff0
call fcn.004021a7
mov ecx, dword [ebp - 0x238]
add ecx, 0xfffffff0
call fcn.004021a7
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x230]
add ecx, 0xfffffff0
call fcn.004021a7
inc edi
dec dword [ebp - 0x228]
jne 0x41179a
cmp dword [ebp - 0x234], ebx
jle 0x4119fd
mov eax, dword [ebp - 0x240]
push ebx
push ebx
push 0x800
push dword [eax + 4]
call dword [sym.imp.USER32.dll_AppendMenuW]
mov ecx, dword [ebp - 0x220]
add ecx, 0xfffffff0
call fcn.004021a7
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 1
call fcn.0040da0b
mov ecx, dword [ebp - 0x244]
call fcn.004021a7
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.004021a7
call fcn.0052fb75
ret 8