Function at 0x61041a00
Capabilities:
Delete file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push edi
mov edi, 0xffffffff
push esi
push ebx
sub esp, 0x42c
mov ebx, dword [ebp + 0xc]
mov esi, dword [ebp + 8]
cmp word [ebx], 1
je 0x61041a61
mov eax, dword [esi]
mov dword [esp], esi
call dword [eax + 0xc0]
mov edx, dword [eax]
mov eax, dword [ebp + 0x10]
mov dword [esp + 4], ebx
mov dword [esp], edx
mov dword [esp + 8], eax
call fcn.610ff108
sub esp, 0xc
test eax, eax
jne 0x61041a50
xor edi, edi
lea esp, [ebp - 0xc]
mov eax, edi
pop ebx
pop esi
pop edi
pop ebp
ret
mov edx, 0x1db
mov eax, 0x61041970
call fcn.6105a160
jmp 0x61041a46
add ebx, 2
mov ecx, 0x10
mov dword [ebp - 0x40c], ecx
mov dword [ebp - 0x414], ebx
mov dword [esp], ebx
call sym.cygwin1.dll__strlen
cmp eax, 0x6b
ja 0x61041e56
mov dword [ebp - 0x24], 0x100007f
lea ebx, [ebp - 0x28]
mov eax, dword [esi]
mov word [ebp - 0x28], 2
mov dword [esp], esi
mov word [ebp - 0x26], 0
call dword [eax + 0xc0]
mov edx, dword [eax]
mov eax, dword [ebp - 0x40c]
mov dword [esp + 4], ebx
mov dword [esp], edx
mov dword [esp + 8], eax
call fcn.610ff108
sub esp, 0xc
test eax, eax
je 0x61041b10
mov edx, dword [0x610f08a0]
test edx, edx
jne 0x61041ada
mov edx, 0x19d
jmp 0x61041a55
call sym.cygwin1.dll___errno
mov eax, dword [eax]
mov dword [esp + 0xc], 0x61041975
mov dword [esp + 8], 0x61041940
mov dword [esp + 0x10], eax
mov dword [esp + 4], 0x10
mov dword [esp], 0x610f089c
call fcn.6108fd50
jmp 0x61041ad0
mov eax, dword [esi]
mov dword [esp], esi
call dword [eax + 0xc0]
mov edx, dword [eax]
lea eax, [ebp - 0x40c]
mov dword [esp + 8], eax
mov dword [esp + 4], ebx
mov dword [esp], edx
call fcn.610ff298
sub esp, 0xc
test eax, eax
jne 0x61041e12
movzx eax, word [ebp - 0x26]
xchg ah, al
mov word [ebp - 0x2a], ax
movzx eax, ax
mov edx, eax
mov word [ebp - 0x26], ax
mov eax, dword [0x610f08a0]
test eax, eax
jne 0x61041de2
mov dword [esp], 0
mov edx, dword [ebp - 0x414]
lea eax, [ebp - 0x388]
mov ecx, 0x21
call fcn.610620e0
mov eax, dword [ebp - 0x160]
test eax, eax
jne 0x61041dd0
cmp dword [ebp - 0x388], 0xffffffff
jne 0x61041dc0
mov eax, dword [0x610ed768]
mov ebx, 4
mov edx, dword [eax + 0x16c]
not edx
and edx, 0x1ff
test dl, 0x92
jne 0x61041bb8
mov ebx, 5
mov eax, dword [0x610ef77c]
mov dword [ebp - 0x398], eax
mov eax, dword [0x610ef780]
mov dword [ebp - 0x394], eax
mov eax, dword [0x610ef784]
mov dword [ebp - 0x390], eax
xor eax, eax
mov dword [ebp - 0x3a8], eax
xor eax, eax
cmp byte [0x61146ea0], 0
mov dword [ebp - 0x3a4], eax
je 0x61041c00
mov eax, dword [ebp - 0x168]
test eax, eax
js 0x61041d9f
mov dword [esp + 0x18], 0
lea eax, [ebp - 0x398]
mov dword [esp + 0xc], eax
lea eax, [ebp - 0x13c]
mov dword [esp + 0x14], ebx
mov dword [esp + 0x10], 1
mov dword [esp + 8], 0
mov dword [esp + 4], 0x40000000
mov dword [esp], eax
call sub.KERNEL32.dll_CreateFileA
mov dword [ebp - 0x418], eax
sub esp, 0x1c
inc eax
je 0x61041d6f
mov dword [esp], esi
lea ebx, [ebp - 0x408]
call fcn.61040940
movzx eax, word [ebp - 0x26]
mov dword [esp + 8], 0x6104198e
mov dword [esp + 4], 0x61041999
mov dword [esp], ebx
mov dword [esp + 0xc], eax
call fcn.6108c610
xor eax, eax
mov edx, ebx
mov ah, al
mov al, byte [edx]
cmp al, ah
je 0x61041c8d
inc edx
test al, al
jne 0x61041c80
xor edx, edx
mov eax, edx
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.61040a40
mov ecx, ebx
lea esi, [esi]
mov eax, dword [ecx]
add ecx, 4
lea edx, [eax - 0x1010101]
not eax
and edx, eax
and edx, 0x80808080
je 0x61041ca0
test edx, 0x8080
jne 0x61041cc5
shr edx, 0x10
add ecx, 2
mov dword [esp + 0x10], 0
add dl, dl
lea edx, [ebp - 0x410]
sbb ecx, 3
sub ecx, ebx
lea eax, [ecx + 1]
mov dword [ebp - 0x410], eax
mov dword [esp + 8], eax
mov eax, dword [ebp - 0x418]
mov dword [esp + 0xc], edx
mov dword [esp + 4], ebx
mov dword [esp], eax
call sub.KERNEL32.dll_WriteFile
sub esp, 0x14
test eax, eax
jne 0x61041d48
mov edx, 0x1ce
mov eax, 0x61040500
call fcn.61022e70
mov eax, dword [ebp - 0x418]
mov dword [esp], eax
call sub.KERNEL32.dll_CloseHandle
sub esp, 4
lea eax, [ebp - 0x13c]
mov dword [esp], eax
call sub.KERNEL32.dll_DeleteFileA
sub esp, 4
lea eax, [ebp - 0x3a8]
mov dword [esp], eax
call fcn.61078650
jmp 0x61041a46
mov eax, dword [ebp - 0x418]
xor edi, edi
mov dword [esp], eax
call sub.KERNEL32.dll_CloseHandle
mov eax, dword [ebp - 0x414]
sub esp, 4
mov dword [esp], esi
mov dword [esp + 4], eax
call fcn.61043ad0
jmp 0x61041d35
call sub.KERNEL32.dll_GetLastError
cmp eax, 0xb7
je 0x61041d8f
mov edx, 0x1c3
mov eax, 0x61040500
call fcn.61022e70
jmp 0x61041c4c
call sym.cygwin1.dll___errno
mov dword [eax], 0x70
jmp 0x61041c4c
mov dword [esp], edx
lea eax, [ebp - 0x3a8]
mov dword [esp + 8], eax
lea eax, [ebp - 0x398]
mov dword [esp + 4], eax
call fcn.6107e910
jmp 0x61041c00
call sym.cygwin1.dll___errno
mov dword [eax], 0x70
jmp 0x61041a46
call sym.cygwin1.dll___errno
mov edx, dword [ebp - 0x160]
mov dword [eax], edx
jmp 0x61041a46
mov dword [esp + 0xc], 0x610419a0
movzx eax, dx
mov dword [esp + 0x10], eax
mov dword [esp + 8], 0x61041940
mov dword [esp + 4], 0x40
mov dword [esp], 0x610f089c
call fcn.6108fd50
jmp 0x61041b5e
mov eax, dword [0x610f08a0]
test eax, eax
jne 0x61041e25
mov edx, 0x1a3
jmp 0x61041a55
call sym.cygwin1.dll___errno
mov eax, dword [eax]
mov dword [esp + 0xc], 0x610419e0
mov dword [esp + 8], 0x61041940
mov dword [esp + 0x10], eax
mov dword [esp + 4], 0x10
mov dword [esp], 0x610f089c
call fcn.6108fd50
jmp 0x61041e1b
call sym.cygwin1.dll___errno
mov dword [eax], 0x5b
jmp 0x61041a46