Function at 0x140007650
Capabilities:
Move file
Set file attributes

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
mov r15, rdx
mov r13d, 1
xor edx, edx
mov edi, r13d
mov rsi, r9
mov r14, r8
mov rbx, rcx
call qword [sym.imp.KERNEL32.dll_SetFileAttributesA]
mov r9d, r13d
lea rdx, str.everyone
mov r8d, 0xe0000000
mov rcx, rbx
call fcn.140008de8
xor r12d, r12d
test eax, eax
jne 0x1400076c9
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, str.ChangLnkFile:_SetFileAccountPrivilege_failed_everyone_rw_error_d__r_n
mov ecx, r13d
mov r8d, eax
call fcn.1400191e0
mov edi, r12d
mov qword [rbp - 8], reloc.WSOCK32.dll_ntohs
mov qword [rbp - 0x10], r12
mov byte [rbp - 0x20], r12b
cmp byte [rbx], r12b
jne 0x1400076e3
mov rax, r12
jmp 0x1400076eb
mov rcx, rbx
call fcn.140045e50
mov r8, rax
lea rcx, [rbp - 0x20]
mov rdx, rbx
call fcn.140004d8c
mov r9d, r13d
lea rcx, [rbp - 0x20]
mov r8, rsi
mov rdx, r15
call fcn.140008ef4
test eax, eax
jne 0x14000772b
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, str.ChangeLnkFile:_SetShortcutTarget_failed_error_d__r_n
mov ecx, r13d
mov r8d, eax
call fcn.1400191e0
mov edi, r12d
cmp qword [r14 + 0x10], r12
jbe 0x140007879
mov edx, 0x5c
mov rcx, rbx
call fcn.14003b1c4
mov rsi, rax
test rax, rax
je 0x140007879
mov byte [rax], r12b
mov r15d, reloc.WSOCK32.dll_ntohs
mov qword [rbp - 8], r15
mov qword [rbp - 0x10], r12
mov byte [rbp - 0x20], r12b
cmp byte [rbx], r12b
jne 0x14000776d
mov rax, r12
jmp 0x140007775
mov rcx, rbx
call fcn.140045e50
mov r8, rax
lea rcx, [rbp - 0x20]
mov rdx, rbx
call fcn.140004d8c
lea rcx, [0x14009db0c]
call fcn.140045e50
mov r8, rax
lea rdx, [0x14009db0c]
lea rcx, [rbp - 0x20]
call fcn.140004b2c
mov rdx, rax
mov qword [rbp - 0x48], r15
lea rcx, [rbp - 0x60]
mov qword [rbp - 0x50], r12
mov byte [rbp - 0x60], r12b
call fcn.140004354
or r9, 0xffffffffffffffff
lea rcx, [rbp - 0x60]
xor r8d, r8d
mov rdx, r14
call fcn.140004a10
mov rdx, rax
mov qword [rbp - 0x28], r15
lea rcx, [rbp - 0x40]
mov qword [rbp - 0x30], r12
mov byte [rbp - 0x40], r12b
call fcn.140004354
mov rdx, qword [rbp - 0x48]
cmp rdx, 0x10
jb 0x1400077ff
mov rcx, qword [rbp - 0x60]
inc rdx
mov r8, r13
call fcn.140004554
mov rdx, qword [rbp - 8]
mov qword [rbp - 0x48], r15
mov qword [rbp - 0x50], r12
mov byte [rbp - 0x60], r12b
cmp rdx, 0x10
jb 0x140007824
mov rcx, qword [rbp - 0x20]
inc rdx
mov r8, r13
call fcn.140004554
cmp qword [rbp - 0x28], 0x10
lea rdx, [rbp - 0x40]
mov rcx, rbx
mov byte [rsi], 0x5c
cmovae rdx, qword [rbp - 0x40]
call qword [sym.imp.KERNEL32.dll_MoveFileA]
test eax, eax
jne 0x140007860
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r9, rbx
lea rdx, str.ChangLnkFile:_MoveFile_failed_error_d__s__r_n
mov r8d, eax
mov ecx, r13d
call fcn.1400191e0
mov edi, r12d
mov rdx, qword [rbp - 0x28]
cmp rdx, 0x10
jb 0x140007879
mov rcx, qword [rbp - 0x40]
inc rdx
mov r8, r13
call fcn.140004554
mov edx, r13d
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SetFileAttributesA]
test eax, eax
jne 0x1400078a4
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, str.ChangLnkFile:_SetFileAttributes_failed_error_d__r_n
mov ecx, r13d
mov r8d, eax
call fcn.1400191e0
mov edi, r12d
mov esi, 2
lea rdx, str.everyone
mov r14d, 0xa0000000
mov r9d, esi
mov r8d, r14d
mov rcx, rbx
call fcn.140008de8
test eax, eax
jne 0x1400078e3
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, str.ChangLnkFile:_SetFileAccountPrivilege_failed_everyone_error_d__r_n
mov ecx, r13d
mov r8d, eax
call fcn.1400191e0
mov edi, r12d
mov r9d, esi
lea rdx, str.Administrator
mov r8d, r14d
mov rcx, rbx
call fcn.140008de8
test eax, eax
jne 0x140007917
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, str.ChangLnkFile:_SetFileAccountPrivilege_failed_admin_error_d__r_n
mov ecx, r13d
mov r8d, eax
call fcn.1400191e0
mov edi, r12d
mov esi, 3
lea rdx, str.Administrator
mov r14d, 0x116
mov r9d, esi
mov r8d, r14d
mov rcx, rbx
call fcn.140008de8
test eax, eax
jne 0x140007956
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, str.ChangLnkFile:_SetFileAccountPrivilege_failed_admin_deny_error_d__r_n
mov ecx, r13d
mov r8d, eax
call fcn.1400191e0
mov edi, r12d
mov r9d, esi
lea rdx, str.everyone
mov r8d, r14d
mov rcx, rbx
call fcn.140008de8
test eax, eax
jne 0x14000798a
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, str.ChangLnkFile:_SetFileAccountPrivilege_failed_everyone_deny_error_d__r_n
mov ecx, r13d
mov r8d, eax
call fcn.1400191e0
mov edi, r12d
lea r11, [rsp + 0x80]
mov eax, edi
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret