Function at 0x1000af20
Capabilities:
Check if file exists
Copy file
Create directory
Delete file
Get file attributes
Set file attributes
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xe40
mov eax, dword [0x1002e008]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov ebx, ecx
push 0x1002b370
call edi
mov esi, dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
cmp eax, 0xffffffff
je 0x1000af6e
test al, 0x10
jne 0x1000af8e
test al, 1
je 0x1000af63
and eax, 0xfffffffe
push eax
push 0x1002b370
call esi
push 0x1002b370
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
call fcn.10001910
push eax
push 0x1002b370
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
test eax, eax
je 0x1000b19b
push 0x1002b370
call edi
cmp eax, 6
je 0x1000af9c
push 6
push 0x1002b370
call esi
push 0x208
lea eax, [ebp - 0x824]
push 0
push eax
call fcn.1000e420
push 0x208
lea eax, [ebp - 0x20c]
push 0
push eax
call fcn.1000e420
push 0x208
lea eax, [ebp - 0x414]
push 0
push eax
call fcn.1000e420
push 0x208
lea eax, [ebp - 0xe3c]
push 0
push eax
call fcn.1000e420
push 0x208
lea eax, [ebp - 0xc34]
push 0
push eax
call fcn.1000e420
push 0x208
lea eax, [ebp - 0xa2c]
push 0
push eax
call fcn.1000e420
add esp, 0x48
lea eax, [ebp - 0x61c]
push 0x208
push 0
push eax
call fcn.1000e420
push 0
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0xc34]
push eax
lea eax, [ebp - 0xe3c]
push eax
push ebx
call fcn.1000fc49
push ebx
lea eax, [ebp - 0x824]
push 0x1002b3a0
push eax
call fcn.1000a950
lea eax, [ebp - 0x414]
push eax
push 0x1002b370
lea eax, [ebp - 0x20c]
push str._s_s.sys
push eax
call fcn.1000a950
mov esi, dword [sym.imp.KERNEL32.dll_CopyFileW]
lea eax, [ebp - 0x20c]
add esp, 0x3c
push 0
push eax
lea eax, [ebp - 0x824]
push eax
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x1000b0c5
call edi
cmp eax, 5
jne 0x1000b19b
lea ecx, [ebp - 0x20c]
call fcn.1000acb0
push 0
lea ecx, [ebp - 0x20c]
push ecx
lea ecx, [ebp - 0x824]
push ecx
call esi
test eax, eax
je 0x1000b19b
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0xc34]
push eax
lea eax, [ebp - 0xe3c]
push eax
lea eax, [ebp - 0xa2c]
push str._s_s_s.cat
push eax
call fcn.1000a950
lea eax, [ebp - 0x414]
push eax
push 0x1002b370
lea eax, [ebp - 0x61c]
push str._s_s.cat
push eax
call fcn.1000a950
add esp, 0x24
lea eax, [ebp - 0x61c]
push 0
push eax
lea eax, [ebp - 0xa2c]
push eax
call esi
test eax, eax
jne 0x1000b149
call edi
cmp eax, 5
jne 0x1000b19b
lea ecx, [ebp - 0x61c]
call fcn.1000acb0
push 0
lea eax, [ebp - 0x61c]
push eax
lea eax, [ebp - 0xa2c]
push eax
call esi
test eax, eax
je 0x1000b19b
push str.Tnfcap.inf
push 0x1002b370
lea eax, [ebp - 0x20c]
push 0x1002b400
push eax
call fcn.1000a950
add esp, 0x10
lea eax, [ebp - 0x20c]
push 0
push 0x80
push 2
push 0
push 1
push 0x40000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
cmp esi, 0xffffffff
jne 0x1000b1ae
push eax
push str.PrepareInstallDirectory_1_0x_lx_n
call fcn.1000a8f0
add esp, 8
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1000c02f
mov esp, ebp
pop ebp
ret
push 0
lea eax, [ebp - 0xe40]
mov dword [ebp - 0xe40], 0
push eax
push 0x12f7
push str.___________________________________________________________________________r_n__TNFCAP.INF____Tnfcap_NDIS_6.x_LightWeight_Filter_Driver_r_n__r_n__Copyright_c__2020__TEC_Solutions_Limited_Com_LLC.All_rights_reserved._r_n___________________________________________________________________________r_n_version__r_nSignature____Windows_NT___r_nClass__NetService_r_nClassGUID4D36E974_E325_11CE_BFC1_08002BE10318_r_nCatalogFile_NPF_DriverName_.cat_r_nProvider_Insecure__r_nDriverVer__05_15_2015_14.48.38.905_r_n_r_n_r_n_Manufacturer__r_n_Insecure_Insecure_NTx86_NTia64_NTamd64_r_n_r_n_Insecure.NTx86__r_n_NPF_Desc_Standard_FilterStandard_TNFCAP_r_n_NPF_Desc_WiFi_FilterWiFi_TNFCAP_WIFI_r_n_r_n_Insecure.NTia64__r_n_NPF_Desc_Standard_FilterStandard_TNFCAP_r_n_NPF_Desc_WiFi_FilterWiFi_TNFCAP_WIFI_r_n_r_n_Insecure.NTamd64__r_n_NPF_Desc_Standard_FilterStandard__TNFCAP_r_n_NPF_Desc_WiFi_FilterWiFi_TNFCAP_WIFI_r_n_r_n___________________________________________________________________________r_n__Installation_Section_r_n___________________________________________________________________________r_n_FilterStandard__r_nNetCfgInstanceId__ffff2ac8_e9f6_4765_a842_f1f5d2501341__r_nCopyfilesnpf.copyfiles.sys_r_nCharacteristics0x40000_r_nAddRegFilterStandard.reg_r_n_r_n_FilterWiFi__r_nNetCfgInstanceId_ffff2ac8_e9f6_4765_a842_f1f5d2501351__r_nCharacteristics0x40000_r_nAddRegFilterWiFi.reg_r_n_r_n_SourceDisksNames__r_n1_NPF_Desc_Standard_________r_n_r_n_SourceDisksFiles__r_ntnfcap.sys1_r_n_r_n_DestinationDirs__r_nDefaultDestDir12_r_nnpf.copyfiles.sys12_r_n_r_n_npf.copyfiles.sys__r_n_NPF_DriverName_.sys______2_r_n_r_n_r_n____________________________________________________________________________r_n__Ndi_installation_support_for_the_standard_filter_r_n____________________________________________________________________________r_n_FilterStandard.reg__r_nHKR__Ndi__Service_____NPF_Filter_Name_Standard__r_nHKR__Ndi__CoServices__0x00010000___NPF_Filter_Name_Standard__r_nHKR__Ndi__HelpText_____NPF_HelpText_Standard__r_nHKR__Ndi__FilterClass____compression_r_n_r_nHKR__Ndi__FilterType__0x00010001__2_r_n_r_nHKR__NdiInterfaces__UpperRange____noupper_r_nHKR__NdiInterfaces__LowerRange_____nolower__ndis5__r_n_r_nHKR__NdiInterfaces__FilterMediaTypes_____ethernet__fddi__wan__ppip__wlan__bluetooth__ndis5__vwifi__flpp4__flpp6__vchannel__nolower__r_n_r_nHKR__Ndi__FilterRunType__0x00010001__2__Optional_filter_r_n_r_n_____________________________________________________________________________r_n__Ndi_installation_support_for_the_WiFi_filter_r_n_____________________________________________________________________________r_n_FilterWiFi.reg__r_nHKR__Ndi__Service_____NPF_Filter_Name_WiFi__r_nHKR__Ndi__CoServices__0x00010000___NPF_Filter_Name_WiFi__r_nHKR__Ndi__HelpText_____NPF_HelpText_WiFi__r_nHKR__Ndi__FilterClass____ms_medium_converter_128_r_nHKR__Ndi__FilterType__0x00010001__2_r_nHKR__NdiInterfaces__UpperRange____noupper_r_nHKR__NdiInterfaces__LowerRange____nolower_r_n_r_nHKR__NdiInterfaces__FilterMediaTypes_____wlan__r_n_r_nHKR__Ndi__FilterRunType__0x00010001__2__Optional_filter_r_n_r_n_____________________________________________________________________________r_n__Service_installation_support_r_n_____________________________________________________________________________r_n_FilterStandard.Services__r_nAddService___NPF_Filter_Name_Standard_____FilterStandard.svc_r_n_r_n_FilterWiFi.Services__r_nAddService___NPF_Filter_Name_WiFi_____FilterWiFi.svc_r_n_r_n_FilterStandard.svc__r_nDisplayName___NPF_Desc_Standard__r_nServiceType__1__SERVICE_KERNEL_DRIVER_r_nStartType__1__SERVICE_DEMAND_START_r_nErrorControl__1__SERVICE_ERROR_NORMAL_r_nServiceBinary___12__NPF_DriverName_.sys_r_nLoadOrderGroup__NDIS_r_nDescription___NPF_Desc_Standard__r_nAddReg__Common.Params.reg__NdisImPlatformBindingOptions.reg_r_n_r_n_FilterWiFi.svc__r_nDisplayName___NPF_Desc_WiFi__r_nServiceType__1__SERVICE_KERNEL_DRIVER_r_nStartType__1__SERVICE_DEMAND_START_r_nErrorControl__1__SERVICE_ERROR_NORMAL_r_nServiceBinary___12__NPF_DriverName_.sys_r_nLoadO
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 4]
mov eax, 1
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1000c02f
mov esp, ebp
pop ebp
ret