Function at 0x41b9c4
Capabilities:
Read .ini file

Disassembly:
push 0x24c
mov eax, 0x566ce1
call fcn.0053da79
mov eax, dword [ebp + 8]
mov dword [ebp - 0x240], eax
xor edi, edi
mov dword [ebp - 4], edi
call fcn.00438647
push eax
lea ecx, [ebp - 0x248]
call fcn.0042a80d
mov byte [ebp - 4], 1
call fcn.00412720
mov eax, dword [eax]
push str.Resources
push eax
lea eax, [ebp - 0x248]
push 0x59a4bc
push eax
call fcn.0040a7c3
mov dword [ebp - method.CLcMgrStub.virtual_0], vtable.CLcMgrStub.0
mov dword [ebp - 0x24c], edi
add esp, 0xc
mov byte [ebp - 4], 2
mov ecx, esp
mov dword [ebp - 0x23c], esp
push str.string
call fcn.0040235d
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x248]
push ecx
add eax, 0xfffffff0
mov dword [ebp - 0x244], esp
mov esi, esp
push eax
mov dword [ebp - 0x244], eax
call fcn.00402431
add eax, 0x10
mov dword [esi], eax
pop ecx
lea esi, [ebp - 0x250]
mov byte [ebp - 4], 2
call fcn.004174d7
mov dword [ebp - 0x234], edi
call fcn.00438647
push eax
lea ecx, [ebp - 0x220]
call fcn.0042a80d
push str.Menu.TaskMonitor.OpenMonitoredFolder
lea ebx, [ebp - 0x228]
mov byte [ebp - 4], 4
call fcn.0041752c
push eax
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 5
call fcn.0040248f
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x228]
add ecx, 0xfffffff0
call fcn.00402722
mov edi, 0x80e8
mov dword [ebp - 0x228], 3
mov esi, 0x104
call fcn.00438647
push eax
lea ecx, [ebp - 0x230]
call fcn.0042a80d
lea eax, [edi - 0x7530]
push eax
push 0x59b8a0
lea eax, [ebp - 0x230]
push str._s_d
push eax
mov byte [ebp - 4], 6
call fcn.0040a7c3
push esi
xor ebx, ebx
lea eax, [ebp - 0x218]
push ebx
push eax
call fcn.00539100
lea ecx, [ebp - 0x258]
call fcn.004127e0
push str.EventSetting.ini
push eax
lea eax, [ebp - 0x238]
push eax
mov byte [ebp - 4], 7
call fcn.0040193e
add esp, 0x28
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x258]
add ecx, 0xfffffff0
call fcn.00402722
push dword [ebp - 0x238]
lea eax, [ebp - 0x218]
push esi
push eax
push 0x5990a0
push str.FolderPath
push dword [ebp - 0x230]
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea eax, [ebp - 0x218]
push eax
lea ecx, [ebp - 0x21c]
call fcn.0040235d
mov byte [ebp - 4], 0xa
call fcn.00438647
push eax
lea ecx, [ebp - 0x224]
call fcn.0042a80d
mov byte [ebp - 4], 0xb
mov eax, dword [ebp - 0x21c]
cmp dword [eax - 0xc], ebx
je 0x41bcd1
push 0x5c
push eax
call fcn.0053c0c5
pop ecx
pop ecx
mov ecx, dword [ebp - 0x21c]
cmp eax, ebx
jne 0x41bbc4
or edx, 0xffffffff
jmp 0x41bbca
sub eax, ecx
sar eax, 1
mov edx, eax
mov eax, dword [ecx - 0xc]
cmp eax, 3
jle 0x41bc10
sub eax, edx
dec eax
push eax
lea eax, [ebp - 0x254]
push eax
lea ecx, [ebp - 0x21c]
call fcn.0040f0c6
push eax
lea ecx, [ebp - 0x21c]
mov byte [ebp - 4], 0xc
call fcn.0040248f
mov byte [ebp - 4], 0xb
mov ecx, dword [ebp - 0x254]
add ecx, 0xfffffff0
call fcn.00402722
mov ecx, dword [ebp - 0x21c]
cmp dword [ecx - 0xc], 0x23
jle 0x41bc93
push 0x23
lea eax, [ebp - 0x22c]
push eax
lea ecx, [ebp - 0x21c]
call fcn.0040a558
push str.......
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x23c]
push eax
mov byte [ebp - 4], 0xd
call fcn.0040193e
add esp, 0xc
push eax
lea ecx, [ebp - 0x22c]
mov byte [ebp - 4], 0xe
call fcn.0040248f
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x23c]
add ecx, 0xfffffff0
call fcn.00402722
mov ebx, dword [ebp - 0x22c]
push ebx
push dword [ebp - 0x220]
lea eax, [ebp - 0x224]
push eax
call fcn.0040a7c3
add esp, 0xc
lea ecx, [ebx - 0x10]
call fcn.00402722
xor ebx, ebx
jmp 0x41bca9
push ecx
push dword [ebp - 0x220]
lea eax, [ebp - 0x224]
push eax
call fcn.0040a7c3
add esp, 0xc
inc dword [ebp - 0x234]
lea ecx, [ebp - 0x21c]
call fcn.00402668
push dword [ebp - 0x224]
mov eax, dword [ebp - 0x240]
push edi
push ebx
push dword [eax + 4]
call dword [sym.imp.USER32.dll_AppendMenuW]
mov ecx, dword [ebp - 0x224]
add ecx, 0xfffffff0
call fcn.00402722
mov ecx, dword [ebp - 0x21c]
add ecx, 0xfffffff0
call fcn.00402722
mov ecx, dword [ebp - 0x238]
add ecx, 0xfffffff0
call fcn.00402722
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x230]
add ecx, 0xfffffff0
call fcn.00402722
inc edi
dec dword [ebp - 0x228]
jne 0x41bad5
cmp dword [ebp - 0x234], ebx
jle 0x41bd38
mov eax, dword [ebp - 0x240]
push ebx
push ebx
push 0x800
push dword [eax + 4]
call dword [sym.imp.USER32.dll_AppendMenuW]
mov ecx, dword [ebp - 0x220]
add ecx, 0xfffffff0
call fcn.00402722
lea ecx, [ebp - 0x250]
mov byte [ebp - 4], 1
call fcn.004174c6
mov ecx, dword [ebp - 0x244]
call fcn.00402722
mov ecx, dword [ebp + 0xc]
add ecx, 0xfffffff0
call fcn.00402722
call fcn.0053dafc
ret 8