Function at 0x180035970
Capabilities:
Read file on windows
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x20], r9
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x260
lea ebx, [r8 + 0xb]
mov rdi, r9
mov dword [rsp + 0x40], ebx
mov r15d, r8d
mov r13, rdx
mov rsi, rcx
cmp r8d, ebx
jae case.0x1800359e7.3
mov r14, qword [rsp + 0x2d0]
lea r12d, [r8 - 0x104]
mov rbx, qword [rsp + 0x2c8]
lea rdx, [0x180000000]
mov eax, dword [rsp + 0x40]
xor ebp, ebp
cmp r12d, 0x17
ja case.default.0x1800359e7
mov ecx, dword [rdx + r12*4 + 0x35d94]
add rcx, rdx
jmp rcx
mov eax, dword [rbx + 0x9c]
xor r8d, r8d
mov rdx, qword [rsp + 0x50]
mov rcx, qword [rbx]
add rdx, 4
add rdx, rax
call fcn.18005fa78
test eax, eax
jne 0x180035c41
lea rdx, [0x180000000]
jmp case.0x1800359e7.4
mov r8, qword [rsp + 0x58]
lea rdx, str.InternetGetCookie__p_n
lea rcx, [rsp + 0x60]
call fcn.180052790
lea rdx, [0x180000000]
mov byte [rsp + 0x44], 1
jmp case.0x1800359e7.4
mov eax, dword [rbx]
cmp eax, dword [r14]
jne 0x180035c58
jmp case.0x1800359e7.4
mov eax, dword [rbx + 0x90]
mov rax, qword [rbx + rax*8 + 0x60]
mov qword [rsp + 0x50], rax
jmp case.0x1800359e7.4
mov r9, qword [rbx + 8]
lea rax, [rbx + 0x58]
mov r8, r14
mov qword [rsp + 0x20], rax
mov edx, 0xa4
mov rcx, r13
call fcn.18004f210
test eax, eax
je 0x180035c58
cmp dword [rbx + 0x50], ebp
je 0x180035aa3
mov rcx, qword [rbx + 8]
lea rdx, [rbx + 0x18]
mov r8d, 0xb
call fcn.180048440
mov eax, ebp
lea rcx, [rsp + 0x48]
cmp dword [rbx + 0x54], eax
mov r9d, 0x112
mov r8, rbx
sete al
xor edx, edx
mov dword [rsp + 0x48], eax
call fcn.180048890
test eax, eax
je 0x180035c58
lea rdx, [0x180000000]
jmp case.0x1800359e7.4
mov r9, qword [r14]
lea rdx, [rbx + 0x58]
mov r8, qword [rbx]
mov ecx, 0x123
call fcn.180036910
test eax, eax
je 0x180035c92
cmp dword [rdi], ebp
je 0x180035b85
mov rdx, qword [rsi]
xor r8d, r8d
mov rcx, qword [r14]
call fcn.18005fa78
test eax, eax
jne 0x180035c41
mov r9, qword [r14]
lea rcx, [rsp + 0x2b0]
mov edx, 1
mov r8d, edx
call fcn.18005f73c
cmp rax, 1
jne 0x180035c77
movzx eax, byte [rsp + 0x2b0]
cmp dword [rdi], ebp
jle 0x180035b44
and al, 0x7f
jmp 0x180035b46
or al, 0x80
mov rdx, qword [rsi]
xor r8d, r8d
mov rcx, qword [r14]
mov byte [rsp + 0x2b0], al
call fcn.18005fa78
test eax, eax
jne 0x180035c41
mov r9, qword [r14]
lea rcx, [rsp + 0x2b0]
mov edx, 1
mov r8d, edx
call fcn.18006018c
cmp rax, 1
jne 0x180035c5c
mov rcx, qword [rbx]
call fcn.18005f1d8
lea rdx, [0x180000000]
jmp case.0x1800359e7.4
mov byte [0x18009e178], 1
jmp case.0x1800359e7.4
mov rax, qword [sym.imp.WININET.dll_InternetGetCookieA]
mov rdi, rbp
mov qword [rsp + 0x58], rax
mov byte [0x18009e178], bpl
nop word [rax + rax]
mov rax, qword [rbx]
lea rsi, [rdi + 1]
mov r8, rsi
mov qword [rsp + 0x48], rax
mov edx, 0x117
lea rcx, [rsp + 0x48]
call fcn.18002bae0
lea rdx, [0x180000000]
mov qword [rdx + rdi*8 + 0x9e148], rax
test rax, rax
je 0x180035ca6
mov rdi, rsi
cmp rsi, 6
jb 0x180035bc0
mov rdi, qword [rsp + 0x2b8]
mov rsi, qword [rsp + 0x2a0]
mov eax, dword [rsp + 0x40]
inc r15d
inc r12d
cmp r15d, eax
jb 0x1800359d2
mov eax, dword [rsp + 0x44]
mov rbx, qword [rsp + 0x2a8]
add rsp, 0x260
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
mov r8, r14
mov rdx, r13
mov ecx, 0xf7
call fcn.180025490
mov dword [rbx + 0x58], 7
mov eax, ebp
jmp 0x180035c26
mov r8, r14
mov rdx, r13
mov ecx, 0xf7
call fcn.180025490
mov eax, ebp
mov dword [rbx + 0x58], 8
jmp 0x180035c26
mov r8, r14
mov rdx, r13
mov ecx, 0xf7
call fcn.180025490
mov eax, ebp
mov dword [rbx + 0x58], 6
jmp 0x180035c26
mov r8, r14
mov rdx, r13
mov ecx, 0xf7
call fcn.180025490
mov eax, ebp
jmp 0x180035c26
mov byte [rsp + 0x44], bpl
jmp case.0x1800359e7.3
mov rax, qword [rsp + 0x2c0]
cmp dword [rax], ebp
je 0x180035d21
mov eax, dword [rbx + 0x90]
mov ecx, dword [rbx + 0x9c]
mov rdi, qword [rsp + 0x50]
add rcx, 4
mov rax, qword [rbx + rax*8 + 0x60]
add rcx, rax
cmp rcx, rdi
jge 0x180035d17
nop
mov r9d, 0xb
mov r8, rbx
xor edx, edx
xor ecx, ecx
call fcn.18000e820
test eax, eax
je 0x180035c58
mov eax, dword [rbx + 0x90]
mov ecx, dword [rbx + 0x9c]
add rcx, 4
mov rax, qword [rbx + rax*8 + 0x60]
add rcx, rax
cmp rcx, rdi
jl 0x180035ce0
mov eax, 1
jmp 0x180035c26
mov rax, qword [rsp + 0x50]
xor r9d, r9d
mov qword [rbx + 0x60], rax
xor r8d, r8d
inc dword [rbx + 0x90]
mov edx, 0xf7
mov qword [rsp + 0x30], rbp
xor ecx, ecx
mov qword [rsp + 0x28], rbp
mov qword [rsp + 0x20], rbx
call fcn.180049120
jmp 0x180035c26
mov rax, qword [rbx + 8]
test rax, rax
je 0x180035d85
mov rdx, qword [r14 + 8]
test rdx, rdx
je 0x180035d85
mov r8d, dword [r13]
mov rcx, rax
sub r8, 4
call fcn.1800556f0
test eax, eax
sete bpl
mov eax, ebp
jmp 0x180035c26
cmp rax, qword [r14 + 8]
sete bpl
mov eax, ebp
jmp 0x180035c26