Function at 0x7ddeccd1
Capabilities:
Get file attributes
Set file attributes

Disassembly:
push 0xc4
push 0x7ddecfa8
call fcn.7dd715c0
xor edi, edi
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x20], edi
or esi, 0xffffffff
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x28], esi
xor eax, eax
mov word [ebp - 0x4c], ax
mov word [ebp - 0x4a], ax
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x38], edi
mov word [ebp - 0x44], ax
mov word [ebp - 0x42], ax
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x30], edi
mov byte [ebp - 0x29], 1
mov dword [ebp - 4], edi
mov dword [ebp - 0x34], 0x82
test byte [ebp + 0x10], 1
je 0x7ddecd2a
mov dword [ebp - 0x34], 0x10082
mov ebx, dword [sym.imp.ntdll.dll_RtlFreeHeap]
push 0x400000
push 7
push dword [ebp - 0x34]
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x4c]
push eax
push dword [ebp + 8]
call fcn.7ddecb21
mov dword [ebp - 0x1c], eax
cmp eax, edi
jge 0x7ddecdaf
test byte [ebp - 0x34], 2
je 0x7ddecda7
test byte [ebp + 0x10], 2
je 0x7ddecda7
cmp dword [ebp - 0x38], edi
je 0x7ddecd82
mov eax, dword fs:[0x18]
push dword [ebp - 0x38]
push edi
mov eax, dword [eax + 0x30]
push dword [eax + 0x18]
call ebx
mov dword [ebp - 0x38], edi
cmp dword [ebp - 0x24], esi
je 0x7ddecd93
push dword [ebp - 0x24]
call dword [sym.imp.ntdll.dll_NtClose]
mov dword [ebp - 0x24], esi
and dword [ebp - 0x34], 0xfffffffd
cmp dword [ebp - 0x20], edi
jl 0x7ddecda2
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], edi
jmp 0x7ddecd30
cmp eax, edi
jl 0x7ddecef4
mov esi, 0x100
mov dword [ebp - 0x3c], esi
mov eax, dword [ebp - 0x34]
and eax, 2
mov dword [ebp + 8], eax
je 0x7ddecdc9
mov dword [ebp - 0x3c], 0x102
push 0x400000
push 7
mov eax, dword [ebp + 8]
or eax, esi
push eax
lea eax, [ebp - 0xd4]
push eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x44]
push eax
push dword [ebp + 0xc]
call fcn.7ddecb21
mov dword [ebp - 0x1c], eax
cmp eax, edi
jge 0x7ddece4d
test byte [ebp - 0x3c], 2
je 0x7ddece45
test byte [ebp + 0x10], 2
je 0x7ddece45
cmp dword [ebp - 0x30], edi
je 0x7ddece1e
mov eax, dword fs:[0x18]
push dword [ebp - 0x30]
push edi
mov eax, dword [eax + 0x30]
push dword [eax + 0x18]
call ebx
mov dword [ebp - 0x30], edi
cmp dword [ebp - 0x28], 0xffffffff
je 0x7ddece31
push dword [ebp - 0x28]
call dword [sym.imp.ntdll.dll_NtClose]
or dword [ebp - 0x28], 0xffffffff
and dword [ebp - 0x3c], 0xfffffffd
cmp dword [ebp - 0x20], edi
jl 0x7ddece40
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], edi
jmp 0x7ddecdc9
cmp eax, edi
jl 0x7ddecef4
push 4
push 0x28
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0x24]
call dword [sym.imp.ntdll.dll_NtQueryInformationFile]
mov dword [ebp - 0x1c], eax
cmp eax, edi
jl 0x7ddecea2
push 0xa
pop ecx
xor eax, eax
lea edi, [ebp - 0x7c]
rep stosd dword es:[edi], eax
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x78], eax
push 4
push 0x28
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0x28]
call dword [sym.imp.ntdll.dll_NtSetInformationFile]
mov dword [ebp - 0x1c], eax
xor edi, edi
mov eax, dword [ebp - 0x1c]
cmp eax, edi
jge 0x7ddeceba
test byte [ebp + 0x10], 2
je 0x7ddecef4
cmp dword [ebp - 0x20], edi
jl 0x7ddeceb7
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], edi
test byte [ebp - 0x3c], 2
je 0x7ddecef4
cmp dword [ebp + 8], edi
je 0x7ddecef4
lea eax, [ebp - 0x44]
push eax
push dword [ebp - 0x28]
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.7ddec8a9
mov dword [ebp - 0x1c], eax
cmp eax, edi
jge 0x7ddecef4
test byte [ebp + 0x10], 2
je 0x7ddecef4
cmp dword [ebp - 0x20], edi
jl 0x7ddecef1
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], edi
mov dword [ebp - 4], 0xfffffffe
call fcn.7ddecf58
cmp dword [ebp - 0x1c], edi
jl 0x7ddecf23
test byte [ebp + 0x10], 1
je 0x7ddecf23
push 0xd
push 1
lea eax, [ebp - 0x29]
push eax
lea eax, [ebp - 0x54]
push eax
push dword [ebp - 0x24]
call dword [sym.imp.ntdll.dll_NtSetInformationFile]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x28], 0xffffffff
je 0x7ddecf32
push dword [ebp - 0x28]
call dword [sym.imp.ntdll.dll_NtClose]
cmp dword [ebp - 0x24], 0xffffffff
je 0x7ddecf41
push dword [ebp - 0x24]
call dword [sym.imp.ntdll.dll_NtClose]
cmp dword [ebp - 0x1c], edi
jge 0x7ddecf87
push dword [ebp - 0x1c]
jmp 0x7ddecf8f
cmp dword [ebp - 0x20], edi
jge 0x7ddecf94
push dword [ebp - 0x20]
call sym.KERNEL32.dll_BaseSetLastNTError
xor eax, eax
cmp dword [ebp - 0x1c], edi
setge al
call fcn.7dd71605
ret 0xc