Function at 0x1000ab92
Capabilities:
Copy file
Create directory
Write file on windows

Disassembly:
push ecx
jmp 0x10006415
jmp 0x1000e363
pop ebp
jmp 0x10002661
push 0x80
push 3
jmp 0x1001880b
ret
push 2
push 0
push 0
push 0x40000000
jmp 0x10003cd4
mov eax, dword [ebp + 0x14]
push eax
push ebp
sub dword [esp], 0x20
jmp 0x1000f379
push 0x80
push 3
push 0
push 1
push 0x80000000
mov eax, dword [ebp + 0x10]
jmp 0x100140e7
mov ecx, dword [ebp + 0x10]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
jmp 0x10006834
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
jmp 0x10003331
mov eax, dword [ebp + 0x10]
mov byte [eax], 0
jmp 0x10014af0
cmp dword [ebp - 0x24], 0xffffffff
je 0x10017ef4
mov ecx, dword [ebp - 0x24]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x230], 1
jmp 0x10017ef4
push 0x80
jmp 0x10002964
cmp dword [ebp + 0xc], 0
je 0x1000b2b4
cmp dword [ebp + 0x10], 0
je 0x1000b2b4
cmp dword [ebp + 0x14], 0
jne 0x1001707a
jmp 0x1000b2b4
lea edx, [ebp - 0x14]
jmp 0x10013d28
cmp dword [ebp + 8], 0
je 0x10002e6e
mov eax, dword [ebp + 0x14]
jmp 0x1000a307
call fcn.10006be7
mov ecx, dword [ebp + 0x10]
push ecx
jmp 0x1000b513
mov dword [ebp - 0x24], 0xffffffff
push 0
mov eax, dword [ebp + 0x10]
push eax
jmp 0x10006720
cmp dword [ebp - 0x234], 0xffffffff
je 0x10018699
push 0x2000
jmp 0x100190d7
push ecx
call fcn.1000f4d4
add esp, 0xc
jmp 0x10010034
lea edx, [ebp - 0x228]
jmp 0x10018812
call 0x1000765b
test eax, eax
je 0x10015e5c
cmp dword [ebp - 0x14], 0
je 0x10015e5c
push 0
jmp 0x10006582
lea edx, [ebp - 0x14]
jmp 0x1001648d
lea ecx, [ebp - 0x228]
push ecx
jmp 0x100103e1
call dword [sym.imp.KERNEL32.dll_CreateFileA]
jmp 0x100132f4
mov dword [ebp - 0x24], eax
jmp 0x10011afc
push eax
call fcn.1000f4d4
add esp, 0xc
mov ecx, dword [ebp + 0x14]
push ecx
jmp 0x10017359
push edx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
jmp 0x1000541b
push edx
jmp 0x10013037
mov eax, dword [ebp - 0x230]
jmp 0x10009cb9
add esp, 0xc
push 0
jmp 0x10005149
mov ecx, dword [ebp + 0x10]
push ecx
jmp 0x1001017b
push 1
push 0x1001da5c
call fcn.10006be7
mov eax, dword [ebp + 0x10]
push eax
call fcn.1000f4d4
add esp, 0xc
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp + 0x10]
push eax
jmp 0x10011e3e
mov esp, ebp
jmp 0x10001571
add esp, 0xc
test eax, eax
je 0x10006837
cmp dword [ebp + 8], 0
je 0x1000ccbb
mov edx, dword [ebp + 0x14]
push edx
push ebp
sub dword [esp], 8
jmp 0x100098cb
push eax
mov ecx, dword [ebp + 0x10]
push ecx
push ebp
sub dword [esp], 0x10
push 2
push 0x1001e1cc
jmp 0x10012461
push eax
push ebp
sub dword [esp], 4
push 1
push 0x1001d5e0
jmp 0x10018635
push ebp
jmp 0x1000bc95
call fcn.1000f4d4
jmp 0x1000dd17
mov eax, dword [ebp - 0x230]
jmp 0x10009cb9
call fcn.1000f4d4
add esp, 0xc
jmp 0x1000fd06
mov ebp, esp
sub esp, 0x238
mov dword [ebp - 0x230], 0
jmp 0x100052b4
add esp, 0xc
test eax, eax
jne 0x10016a5e
mov eax, dword [ebp - 0x230]
jmp 0x10009cb9
push edx
jmp 0x100067c2
mov eax, dword [ebp + 0x10]
jmp 0x1001632d
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
mov edx, dword [ebp + 0x14]
jmp 0x10007740
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
jmp 0x10013713
mov edx, dword [ebp + 0x14]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp + 0x10]
jmp 0x100060d4
add esp, 0xc
jmp 0x10013d47
mov edx, dword [ebp + 0x10]
jmp 0x100076fd
push 0
jmp 0x100053dc
push 1
push 0x1001d620
jmp 0x1000551c
mov eax, dword [ebp - 0x14]
push eax
jmp 0x10015bc0
mov edx, dword [ebp + 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
jmp 0x10002e6e
mov eax, dword [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x234]
jmp 0x100013fd
mov edx, dword [ebp + 0x14]
push edx
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
jmp 0x1000b173
push 0
jmp 0x1000f986
push ebp
sub dword [esp], 0x1c
push 2
push 0x1001dea8
jmp 0x100105f4
call dword [sym.imp.KERNEL32.dll_CopyFileA]
cmp dword [ebp - 0x24], 0xffffffff
je 0x10003f2c
mov edx, dword [ebp - 0x24]
jmp 0x10010b5a
mov eax, dword [ebp + 0x10]
jmp 0x10006af8
call fcn.10006be7
call fcn.10018e95
jmp 0x1000a028
push edx
jmp 0x10003f26
push 0
jmp 0x1000de86
push eax
jmp 0x1000d0a8
cmp dword [ebp - 0x24], 0xffffffff
jne 0x10014477
jmp 0x100079d5
call fcn.1000f4d4
add esp, 0xc
push 0
jmp 0x100126ef
push ecx
jmp 0x1000ccb5
call fcn.10006be7
call fcn.10018e95
jmp 0x1000bcd3
mov ecx, dword [ebp + 0x10]
jmp 0x100121b2
mov edx, dword [ebp - 0x24]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x10001409
mov dword [ebp - 0x234], eax
jmp 0x100059cc
push ebp
sub dword [esp], 0x22c
jmp 0x10017616
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffff
jne 0x10006837
jmp 0x10004744
test eax, eax
je 0x100103e7
jmp 0x10017bfc
push ecx
call fcn.1000f4d4
add esp, 0xc
jmp 0x1000d1a1
push edx
push 0x2000
jmp 0x1000fa6b
push 0
push 0x80
push 2
push 0
jmp 0x10016eae
push 1
push 0x80000000
lea ecx, [ebp - 0x228]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
jmp 0x10012cd0
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x24], eax
jmp 0x100048ef
push 0x200
jmp 0x100062ec
push 0x400
jmp 0x1000969f
mov ecx, dword [ebp - 0x28]
push ecx
jmp 0x100129f3
push 0x40000000
mov edx, dword [ebp + 0x10]
jmp 0x1000c2b1
mov eax, dword [ebp - 0x28]
push eax
call fcn.100025b3
add esp, 4
mov ecx, dword [ebp - 0x234]
jmp 0x1001826b
push eax
jmp 0x1001692a
push edx
jmp 0x1000f4e5
call fcn.1000f4d4
jmp 0x1000843e
jmp 0x10010f99
push 0
jmp 0x10015c4f
mov eax, dword [ebp + 0x14]
jmp 0x1000a080
mov edx, dword [ebp + 0xc]
push edx
jmp 0x1000cacc
push 1
push 0x1001d1b0
call fcn.10006be7
jmp 0x10010490
push 0
jmp 0x100023fd
mov eax, dword [ebp - 0x230]
jmp 0x10009cb9
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
je 0x10015e68
jmp 0x10001409
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x100103e7
call fcn.10006be7
mov ecx, dword [ebp + 0x10]
jmp 0x100137ac
mov edx, dword [ebp - 0x24]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x10005557
push 0
jmp 0x10013f92
push edx
mov eax, dword [0x1001e12c]
jmp 0x10011072
call fcn.10015393
add esp, 4
jmp 0x10017f06