Function at 0x41b2cf
Capabilities:
Read .ini file

Disassembly:
push 0x24c
mov eax, 0x566131
call fcn.0053cea9
mov eax, dword [ebp + 8]
mov dword [ebp - 0x240], eax
xor edi, edi
mov dword [ebp - 4], edi
call fcn.00437a9e
push eax
lea ecx, [ebp - 0x248]
call fcn.00402723
mov byte [ebp - 4], 1
call fcn.004120c2
mov eax, dword [eax]
push str.Resources
push eax
lea eax, [ebp - 0x248]
push 0x59a28c
push eax
call fcn.0040a0e9
mov dword [ebp - method.CLcMgrStub.virtual_0], vtable.CLcMgrStub.0
mov dword [ebp - 0x24c], edi
add esp, 0xc
mov byte [ebp - 4], 2
mov ecx, esp
mov dword [ebp - 0x23c], esp
push str.string
call fcn.0040235d
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x248]
push ecx
add eax, 0xfffffff0
mov dword [ebp - 0x244], esp
mov esi, esp
push eax
mov dword [ebp - 0x244], eax
call fcn.00402431
add eax, 0x10
mov dword [esi], eax
pop ecx
lea esi, [ebp - 0x250]
mov byte [ebp - 4], 2
call fcn.00416e97
mov dword [ebp - 0x234], edi
call fcn.00437a9e
push eax
lea ecx, [ebp - 0x220]
call fcn.00402723
push str.Menu.TaskMonitor.OpenMonitoredFolder
lea ebx, [ebp - 0x228]
mov byte [ebp - 4], 4
call fcn.00416eec
push eax
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 5
call fcn.0040248f
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x228]
add ecx, 0xfffffff0
call fcn.0040274b
mov edi, 0x80e8
mov dword [ebp - 0x228], 3
mov esi, 0x104
call fcn.00437a9e
push eax
lea ecx, [ebp - 0x230]
call fcn.00402723
lea eax, [edi - 0x7530]
push eax
push 0x59b670
lea eax, [ebp - 0x230]
push str._s_d
push eax
mov byte [ebp - 4], 6
call fcn.0040a0e9
push esi
xor ebx, ebx
lea eax, [ebp - 0x218]
push ebx
push eax
call fcn.00538530
lea ecx, [ebp - 0x258]
call fcn.00412182
push str.EventSetting.ini
push eax
lea eax, [ebp - 0x238]
push eax
mov byte [ebp - 4], 7
call fcn.0040193e
add esp, 0x28
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x258]
add ecx, 0xfffffff0
call fcn.0040274b
push dword [ebp - 0x238]
lea eax, [ebp - 0x218]
push esi
push eax
push 0x598e70
push str.FolderPath
push dword [ebp - 0x230]
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x21c]
call fcn.0040235d
mov byte [ebp - 4], 0xa
call fcn.00437a9e
push eax
lea ecx, [ebp - 0x224]
call fcn.00402723
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x21c]
cmp dword [eax - 0xc], ebx
je 0x41b5dc
push 0x5c
push eax
call fcn.0053b4f5
pop ecx
pop ecx
mov ecx, dword [ebp - 0x21c]
cmp eax, ebx
jne 0x41b4cf
or edx, 0xffffffff
jmp 0x41b4d5
sub eax, ecx
sar eax, 1
mov edx, eax
mov eax, dword [ecx - 0xc]
cmp eax, 3
jle 0x41b51b
sub eax, edx
dec eax
push eax
lea eax, [ebp - 0x254]
push eax
lea ecx, [ebp - 0x21c]
call fcn.0040ea6c
push eax
lea ecx, [ebp - 0x21c]
mov byte [ebp - 4], 0xc
call fcn.0040248f
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x254]
add ecx, 0xfffffff0
call fcn.0040274b
mov ecx, dword [ebp - 0x21c]
cmp dword [ecx - 0xc], 0x23
jle 0x41b59e
push 0x23
lea eax, [ebp - 0x22c]
push eax
lea ecx, [ebp - 0x21c]
call fcn.00409e7e
push str.......
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x23c]
push eax
mov byte [ebp - 4], 0xd
call fcn.0040193e
add esp, 0xc
push eax
lea ecx, [ebp - 0x22c]
mov byte [ebp - 4], 0xe
call fcn.0040248f
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x23c]
add ecx, 0xfffffff0
call fcn.0040274b
mov ebx, dword [ebp - 0x22c]
push ebx
push dword [ebp - 0x220]
lea eax, [ebp - 0x224]
push eax
call fcn.0040a0e9
add esp, 0xc
lea ecx, [ebx - 0x10]
call fcn.0040274b
xor ebx, ebx
jmp 0x41b5b4
push ecx
push dword [ebp - 0x220]
lea eax, [ebp - 0x224]
push eax
call fcn.0040a0e9
add esp, 0xc
inc dword [ebp - 0x234]
lea ecx, [ebp - 0x21c]
call fcn.00402673
push dword [ebp - 0x224]
mov eax, dword [ebp - 0x240]
push edi
push ebx
push dword [eax + 4]
call dword [sym.imp.USER32.dll_AppendMenuW]
mov ecx, dword [ebp - 0x224]
add ecx, 0xfffffff0
call fcn.0040274b
mov ecx, dword [ebp - 0x21c]
add ecx, 0xfffffff0
call fcn.0040274b
mov ecx, dword [ebp - 0x238]
add ecx, 0xfffffff0
call fcn.0040274b
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x230]
add ecx, 0xfffffff0
call fcn.0040274b
inc edi
dec dword [ebp - 0x228]
jne 0x41b3e0
cmp dword [ebp - 0x234], ebx
jle 0x41b643
mov eax, dword [ebp - 0x240]
push ebx
push ebx
push 0x800
push dword [eax + 4]
call dword [sym.imp.USER32.dll_AppendMenuW]
mov ecx, dword [ebp - 0x220]
add ecx, 0xfffffff0
call fcn.0040274b
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 1
call fcn.00416e86
mov ecx, dword [ebp - 0x244]
call fcn.0040274b
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.0040274b
call fcn.0053cf2c
ret 8