Function at 0x7ddece59
Capabilities:
Get file attributes
Set file attributes

Disassembly:
push 0xc4
push 0x7dded130
call fcn.7dd715c0
xor edi, edi
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x20], edi
or esi, 0xffffffff
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x28], esi
xor eax, eax
mov word [ebp - 0x4c], ax
mov word [ebp - 0x4a], ax
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x38], edi
mov word [ebp - 0x44], ax
mov word [ebp - 0x42], ax
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x30], edi
mov byte [ebp - 0x29], 1
mov dword [ebp - 4], edi
mov dword [ebp - 0x34], 0x82
test byte [ebp + 0x10], 1
je 0x7ddeceb2
mov dword [ebp - 0x34], 0x10082
mov ebx, dword [sym.imp.ntdll.dll_RtlFreeHeap]
push 0x400000
push 7
push dword [ebp - 0x34]
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x4c]
push eax
push dword [ebp + 8]
call fcn.7ddecca9
mov dword [ebp - 0x1c], eax
cmp eax, edi
jge 0x7ddecf37
test byte [ebp - 0x34], 2
je 0x7ddecf2f
test byte [ebp + 0x10], 2
je 0x7ddecf2f
cmp dword [ebp - 0x38], edi
je 0x7ddecf0a
mov eax, dword fs:[0x18]
push dword [ebp - 0x38]
push edi
mov eax, dword [eax + 0x30]
push dword [eax + 0x18]
call ebx
mov dword [ebp - 0x38], edi
cmp dword [ebp - 0x24], esi
je 0x7ddecf1b
push dword [ebp - 0x24]
call dword [sym.imp.ntdll.dll_NtClose]
mov dword [ebp - 0x24], esi
and dword [ebp - 0x34], 0xfffffffd
cmp dword [ebp - 0x20], edi
jl 0x7ddecf2a
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], edi
jmp 0x7ddeceb8
cmp eax, edi
jl 0x7dded07c
mov esi, 0x100
mov dword [ebp - 0x3c], esi
mov eax, dword [ebp - 0x34]
and eax, 2
mov dword [ebp + 8], eax
je 0x7ddecf51
mov dword [ebp - 0x3c], 0x102
push 0x400000
push 7
mov eax, dword [ebp + 8]
or eax, esi
push eax
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x44]
push eax
push dword [ebp + 0xc]
call fcn.7ddecca9
mov dword [ebp - 0x1c], eax
cmp eax, edi
jge 0x7ddecfd5
test byte [ebp - 0x3c], 2
je 0x7ddecfcd
test byte [ebp + 0x10], 2
je 0x7ddecfcd
cmp dword [ebp - 0x30], edi
je 0x7ddecfa6
mov eax, dword fs:[0x18]
push dword [ebp - 0x30]
push edi
mov eax, dword [eax + 0x30]
push dword [eax + 0x18]
call ebx
mov dword [ebp - 0x30], edi
cmp dword [ebp - 0x28], 0xffffffff
je 0x7ddecfb9
push dword [ebp - 0x28]
call dword [sym.imp.ntdll.dll_NtClose]
or dword [ebp - 0x28], 0xffffffff
and dword [ebp - 0x3c], 0xfffffffd
cmp dword [ebp - 0x20], edi
jl 0x7ddecfc8
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], edi
jmp 0x7ddecf51
cmp eax, edi
jl 0x7dded07c
push 4
push 0x28
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0x24]
call dword [sym.imp.ntdll.dll_NtQueryInformationFile]
mov dword [ebp - 0x1c], eax
cmp eax, edi
jl 0x7dded02a
push 0xa
pop ecx
xor eax, eax
lea edi, [ebp - 0x7c]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x78], eax
push 4
push 0x28
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0x28]
call dword [sym.imp.ntdll.dll_NtSetInformationFile]
mov dword [ebp - 0x1c], eax
xor edi, edi
mov eax, dword [ebp - 0x1c]
cmp eax, edi
jge 0x7dded042
test byte [ebp + 0x10], 2
je 0x7dded07c
cmp dword [ebp - 0x20], edi
jl 0x7dded03f
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], edi
test byte [ebp - 0x3c], 2
je 0x7dded07c
cmp dword [ebp + 8], edi
je 0x7dded07c
lea eax, [ebp - 0x44]
push eax
push dword [ebp - 0x28]
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.7ddeca31
mov dword [ebp - 0x1c], eax
cmp eax, edi
jge 0x7dded07c
test byte [ebp + 0x10], 2
je 0x7dded07c
cmp dword [ebp - 0x20], edi
jl 0x7dded079
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], edi
mov dword [ebp - 4], 0xfffffffe
call fcn.7dded0e0
cmp dword [ebp - 0x1c], edi
jl 0x7dded0ab
test byte [ebp + 0x10], 1
je 0x7dded0ab
push 0xd
push 1
lea eax, [ebp - 0x29]
push eax
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0x24]
call dword [sym.imp.ntdll.dll_NtSetInformationFile]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x28], 0xffffffff
je 0x7dded0ba
push dword [ebp - 0x28]
call dword [sym.imp.ntdll.dll_NtClose]
cmp dword [ebp - 0x24], 0xffffffff
je 0x7dded0c9
push dword [ebp - 0x24]
call dword [sym.imp.ntdll.dll_NtClose]
cmp dword [ebp - 0x1c], edi
jge 0x7dded10f
push dword [ebp - 0x1c]
jmp 0x7dded117
cmp dword [ebp - 0x20], edi
jge 0x7dded11c
push dword [ebp - 0x20]
call sym.KERNEL32.dll_BaseSetLastNTError
xor eax, eax
cmp dword [ebp - 0x1c], edi
setge al
call fcn.7dd71605
ret 0xc