Function at 0x415cf0
Capabilities:
Check if file exists
Get file attributes
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4f1989
mov eax, dword fs:[0]
push eax
sub esp, 0xfc
mov eax, dword [0x53ba20]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 0x10]
mov ebx, dword [ebp + 0xc]
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp + 8]
push 2
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x9c], ebx
mov dword [ebp - 0x88], 0
call fcn.004c8c9a
xor ecx, ecx
mov dword [ebp - 0x68], eax
mov word [eax], cx
push 2
mov dword [ebp - 4], ecx
call fcn.004c8c9a
xor ecx, ecx
mov dword [ebp - 0xd8], eax
mov word [eax], cx
push 2
call fcn.004c8c9a
xor ecx, ecx
mov dword [ebp - 0x70], eax
mov word [eax], cx
push 2
call fcn.004c8c9a
xor ecx, ecx
mov dword [ebp - 0x74], eax
mov word [eax], cx
push 2
call fcn.004c8c9a
xor ecx, ecx
mov dword [ebp - 0xbc], eax
mov word [eax], cx
push 2
call fcn.004c8c9a
mov edi, eax
xor eax, eax
mov dword [ebp - 0xec], edi
mov word [edi], ax
push 2
call fcn.004c8c9a
xor ecx, ecx
mov dword [ebp - 0x8c], eax
mov word [eax], cx
push 2
call fcn.004c8c9a
xor ecx, ecx
mov dword [ebp - 0xb4], eax
mov word [eax], cx
push 2
call fcn.004c8c9a
xor ecx, ecx
mov dword [ebp - 0xb0], eax
mov word [eax], cx
push 2
call fcn.004c8c9a
xor ecx, ecx
mov dword [ebp - 0xc0], eax
mov word [eax], cx
push 2
call fcn.004c8c9a
xor ecx, ecx
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x98], eax
mov word [eax], cx
push 2
call fcn.004c8c9a
xor ecx, ecx
mov dword [ebp - 0xc4], eax
mov word [eax], cx
cmp ebx, dword [reloc.ACLUI.dll_CreateSecurityPage]
mov ecx, 0x4fbe6c
mov eax, 0x4fbe60
mov byte [ebp - 4], 0xb
cmovne eax, ecx
push eax
call fcn.004c8c20
mov ebx, eax
push 0
mov dword [ebp - 0xac], ebx
call fcn.004c8c7f
push 0x4fbdfc
call fcn.004c8c20
push 0
mov esi, eax
call fcn.004c8c7f
add esp, 0x40
mov eax, 0x4fbd20
test ebx, ebx
cmovne eax, ebx
push eax
call fcn.004c8c20
push 0
mov dword [ebp - 0x5c], eax
call fcn.004c8c7f
add esp, 8
lea ecx, [ebp - 0x5c]
push esi
call fcn.00405090
push esi
call fcn.004c8c7f
mov ecx, dword [ebp - 0xcc]
mov eax, 0x4fbd20
test ecx, ecx
cmovne eax, ecx
push eax
mov dword [ebp - 0xb8], eax
call fcn.004c8c20
push 0
mov esi, eax
call fcn.004c8c7f
mov ecx, dword [ebp - 0x5c]
mov eax, 0x4fbd20
test ecx, ecx
cmovne eax, ecx
push eax
call fcn.004c8c20
push 0
mov dword [ebp - 0x60], eax
call fcn.004c8c7f
add esp, 0x14
lea ecx, [ebp - 0x60]
push esi
call fcn.00405090
push esi
call fcn.004c8c7f
mov ebx, dword [ebp - 0x60]
mov eax, 0x4fbd20
mov esi, dword [ebp - 0x70]
test ebx, ebx
cmovne eax, ebx
push eax
call fcn.004c8c20
push esi
mov dword [ebp - 0x70], eax
call fcn.004c8c7f
push ebx
call fcn.004c8c7f
push dword [ebp - 0x5c]
call fcn.004c8c7f
push dword [ebp - 0xac]
call fcn.004c8c7f
add esp, 0x18
cmp dword [ebp + 0x14], 0xffffffff
jne 0x41604f
push 0x4fbd20
mov dword [ebp - 0x6c], 0
call fcn.004c8c20
push 0
mov dword [ebp - 0x6c], eax
call fcn.004c8c7f
push 0x4fbd20
mov dword [ebp - 0x84], 0
call fcn.004c8c20
push 0
mov dword [ebp - 0x84], eax
call fcn.004c8c7f
push 0x4fbd20
mov dword [ebp - 0x80], 0
call fcn.004c8c20
push 0
mov dword [ebp - 0x80], eax
call fcn.004c8c7f
push 0x4fbd20
mov dword [ebp - 0x50], 0
call fcn.004c8c20
push 0
mov dword [ebp - 0x50], eax
call fcn.004c8c7f
push 0x4fbd20
mov dword [ebp - 0x64], 0
call fcn.004c8c20
push 0
mov dword [ebp - 0x64], eax
call fcn.004c8c7f
push 0x4fbd20
mov dword [ebp - 0x5c], 0
call fcn.004c8c20
push 0
mov dword [ebp - 0x5c], eax
call fcn.004c8c7f
mov bl, byte [ebp + 0x18]
lea eax, [ebp - 0x6c]
push 0xffffffffffffffff
push 0
push 0
push eax
movzx eax, bl
push eax
push 0
lea eax, [ebp - 0x84]
mov byte [ebp - 4], 0x11
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x70]
push eax
push eax
push 0
push 0xffffffffffffffff
push 0
push dword [ebp - 0x94]
call fcn.00405510
add esp, 0x74
mov dword [ebp + 0x14], eax
push dword [ebp - 0x5c]
call fcn.004c8c7f
push dword [ebp - 0x64]
call fcn.004c8c7f
push dword [ebp - 0x50]
call fcn.004c8c7f
push dword [ebp - 0x80]
call fcn.004c8c7f
push dword [ebp - 0x84]
call fcn.004c8c7f
push dword [ebp - 0x6c]
mov byte [ebp - 4], 0xb
call fcn.004c8c7f
add esp, 0x18
jmp 0x416052
mov bl, byte [ebp + 0x18]
push dword [ebp - 0xb8]
invalid