Function at 0x4245e9
Capabilities:
Check if file exists
Get file attributes

Disassembly:
push 0x1f0
mov eax, 0x46a035
call fcn.00467994
mov ebx, edx
mov edi, ecx
mov esi, dword [ebp + 8]
xor eax, eax
mov byte [edi], al
test ebx, ebx
je 0x424609
mov byte [ebx], al
test esi, esi
je 0x42460f
mov byte [esi], al
mov byte [ebp - 0x17d], al
lea ecx, [ebp - 0x17d]
mov dword [ebp - 4], eax
call fcn.0042485e
test al, al
je 0x4246cd
call dword [sym.imp.ext_ms_win_edputil_policy_l1_1_0.dll_EdpGetIsManaged]
test eax, eax
setne al
mov byte [edi], al
test ebx, ebx
jne 0x424644
test esi, esi
je 0x4246cd
push ecx
push 0x20019
push 0x404a78
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x17c]
call fcn.0043f9f4
lea ecx, [ebp - 0xb4]
call fcn.004233d4
mov eax, ecx
mov byte [ebp - 4], 3
push eax
push 0x404d8c
lea ecx, [ebp - 0x17c]
call fcn.0043fe8b
test eax, eax
jne 0x4246e4
mov ecx, dword [ebp + 4]
mov edx, 0xad
push 0x8000ffff
push 0x409bd4
call fcn.00478527
lea eax, [ebp - 0xa4]
mov dword [ebp - 0xb4], 0x401604
push eax
lea ecx, [ebp - 0xb4]
call fcn.00434927
lea ecx, [ebp - 0x17c]
mov dword [ebp - 0xb4], 0x401b08
call fcn.004233f9
cmp byte [ebp - 0x17d], 0
je 0x4246dc
call dword [sym.imp.api_ms_win_security_base_l1_1_0.dll_RevertToSelf]
call fcn.004678ce
ret 4
lea ecx, [ebp - 0xb4]
call fcn.0047e871
push 0x409c14
lea ecx, [ebp - 0xb4]
call fcn.004338e0
test esi, esi
je 0x4247ed
push 0x68
lea eax, [ebp - 0x1f8]
push 0
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_memset
add esp, 0xc
mov dword [ebp - 0x1fc], 0x6c
xor eax, eax
lea edi, [ebp - 0xd8]
push 9
pop ecx
rep stosd dword es:[edi], eax
lea eax, [ebp - 0xd8]
xor edi, edi
push eax
push edi
push dword [ebp - 0xb0]
call dword [sym.imp.api_ms_win_core_file_l1_1_0.dll_GetFileAttributesExW]
test eax, eax
je 0x424763
mov eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0xd0]
mov dword [ebp - 0x1f8], eax
mov dword [ebp - 0x1f4], ecx
lea ecx, [ebp - 0x184]
mov dword [ebp - 0x184], edi
call fcn.00445601
test eax, eax
js 0x4247ed
lea eax, [ebp - 0x188]
mov dword [ebp - 0x188], edi
mov edi, dword [ebp - 0x184]
push eax
lea eax, [ebp - 0x1fc]
push eax
push edi
push 0
push 2
call dword [sym.imp.FeClient.dll_EdpQueryCredServiceInfo]
test eax, eax
jns 0x4247bc
mov ecx, dword [ebp + 4]
mov edx, 0xca
push eax
push 0x409bd4
call fcn.00475b3c
mov edi, dword [ebp - 0x184]
jmp 0x4247dd
mov eax, dword [ebp - 0x188]
cmp dword [eax + 0x10], 0
jne 0x4247d2
cmp dword [eax + 0xc], 0
jne 0x4247d2
xor cl, cl
jmp 0x4247d4
mov cl, 1
push eax
mov byte [esi], cl
call dword [sym.imp.FeClient.dll_EdpFree]
push edi
push 0
call dword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
push eax
call dword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
test ebx, ebx
je 0x42469c
push dword [ebp - 0xb0]
call dword [sym.imp.api_ms_win_core_file_l1_1_0.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x42469c
test al, 0x10
je 0x42469c
lea eax, [ebp - 0x184]
push eax
push dword [ebp - 0xb0]
call dword [sym.imp.efswrt.dll_EnterpriseDataGetStatus]
test eax, eax
jns 0x424841
mov ecx, dword [ebp + 4]
mov edx, 0xe3
push eax
push 0x409bd4
call fcn.00475b3c
jmp 0x42469c
cmp dword [ebp - 0x184], 3
sete al
mov byte [ebx], al
jmp 0x42469c