Function at 0x180035370
Capabilities:
Create directory
Delete file
Get common file path
Write file on windows

Disassembly:
push rsi
push rdi
push r12
push r13
push r14
mov eax, 0x1040
call fcn.18006ba40
sub rsp, rax
mov qword [rsp + 0xa0], 0xfffffffffffffffe
mov qword [rsp + 0x1080], rbx
mov qword [rsp + 0x1088], rbp
mov rax, qword [0x1800964f0]
xor rax, rsp
mov qword [rsp + 0x1030], rax
mov r12, rdx
mov rbp, rcx
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rbp
repne scasb al, byte [rdi]
not rcx
dec rcx
cmp rcx, 5
jb 0x180035b24
mov byte [rsp + 0x430], al
xor edx, edx
mov r8d, 0x3ff
lea rcx, [rsp + 0x431]
call fcn.180055310
mov byte [rsp + 0x320], 0
xor edx, edx
mov r8d, 0x103
lea rcx, [rsp + 0x321]
call fcn.180055310
lea rdx, str.www.baidu.com
mov rcx, rbp
call fcn.180051948
xor ebx, ebx
test rax, rax
je 0x1800354dc
mov qword [rsp + select0], 0xf
mov qword [rsp + 0xe8], rbx
mov byte [rsp + 0xd8], bl
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rbp
repne scasb al, byte [rdi]
not rcx
lea r8, [rcx - 1]
mov rdx, rbp
lea rcx, [rsp + 0xd0]
call fcn.1800026a0
nop
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0xa8]
call fcn.1800365f0
nop
cmp qword [rsp + 0xf0], 0x10
jb 0x180035494
mov rcx, qword [rsp + 0xd8]
call fcn.180050528
lea r8, [rsp + 0xb0]
cmp qword [rsp + 0xc8], 0x10
cmovae r8, qword [rsp + 0xb0]
lea rdx, str.http:__api.t.sina.com.cn_short_url_shorten.xml_source3271760578url_long_s
lea rcx, [rsp + 0x320]
call fcn.18005151c
cmp qword [rsp + 0xc8], 0x10
jb 0x1800354f3
mov rcx, qword [rsp + 0xb0]
call fcn.180050528
jmp 0x1800354f3
mov r8, rbp
lea rdx, str.http:__api.t.sina.com.cn_short_url_shorten.xml_source3271760578url_long_s
lea rcx, [rsp + 0x320]
call fcn.18005151c
lea rdx, [rsp + 0x430]
lea rcx, [rsp + 0x320]
call fcn.180035200
test eax, eax
je 0x1800359b6
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x430]
repne scasb al, byte [rdi]
not rcx
dec rcx
cmp rcx, 5
jbe 0x1800359b6
mov byte [rsp + 0x210], al
xor edx, edx
mov r8d, 0x103
lea rcx, [rsp + 0x211]
call fcn.180055310
mov byte [rsp + 0xd0], 0
xor eax, eax
mov qword [rsp + 0xd1], rax
mov qword [rsp + 0xd9], rax
mov word [rsp + 0xe1], ax
mov byte [rsp + 0xe3], al
mov byte [rsp + 0x100], al
xor edx, edx
mov r8d, 0x103
lea rcx, [rsp + 0x101]
call fcn.180055310
lea rdx, [rsp + 0x100]
mov qword [rsp + 0x20], rdx
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x1a]
xor ecx, ecx
call qword [sym.imp.SHELL32.dll_SHGetFolderPathA]
test eax, eax
jns 0x1800355c9
lea rdx, [rsp + 0x100]
mov ecx, 0x104
call qword [sym.imp.KERNEL32.dll_GetTempPathA]
jmp 0x180035619
lea rdi, [rsp + 0x100]
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
mov eax, dword [str._tmep_]
mov dword [rdi - 1], eax
movzx eax, word [0x1800830e8]
mov word [rdi + 3], ax
movzx eax, byte [0x1800830ea]
mov byte [rdi + 5], al
lea rcx, [rsp + 0x100]
call qword [sym.imp.SHLWAPI.dll_PathIsDirectoryA]
test eax, eax
jne 0x180035619
xor edx, edx
lea rcx, [rsp + 0x100]
call qword [sym.imp.KERNEL32.dll_CreateDirectoryA]
lea rcx, [rsp + 0xd0]
call fcn.180034630
lea rdi, [rsp + 0xd0]
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
mov eax, dword [str..xml]
mov dword [rdi - 1], eax
movzx eax, byte [0x180080e70]
mov byte [rdi + 3], al
mov rcx, rbx
nop dword [rax]
movzx eax, byte [rsp + rcx + 0x100]
mov byte [rsp + rcx + 0x210], al
inc rcx
test al, al
jne 0x180035650
lea rdi, [rsp + 0x210]
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
lea rdx, [rsp + 0xd0]
xor ecx, ecx
movzx eax, byte [rdx + rcx]
mov byte [rdi + rcx - 1], al
inc rcx
test al, al
jne 0x180035680
lea rdx, [0x180082eb0]
lea rcx, [rsp + 0x210]
call fcn.180050a28
mov rsi, rax
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x430]
repne scasb al, byte [rdi]
not rcx
lea r8, [rcx - 1]
mov r9, rsi
lea edx, [rax + 1]
lea rcx, [rsp + 0x430]
call fcn.180050ccc
mov rcx, rsi
call fcn.1800511e8
mov dword [rsp + 0x3c], 0xffffffff
mov dword [rsp + 0x38], 0xffffffff
mov qword [rsp + 0x40], rbx
lea r13, [0x1800a6a08]
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x48], rbx
mov dword [rsp + 0x50], ebx
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x60], rbx
mov qword [rsp + 0x70], rbx
mov qword [rsp + 0x78], rbx
lea r14, vtable.TiXmlDocument.0
mov qword [rsp + 0x30], r14
mov qword [rsp + 0x88], r13
mov dword [rsp + 0x98], 0xffffffff
mov dword [rsp + 0x94], 0xffffffff
mov dword [rsp + 0x90], 4
mov byte [rsp + 0x9c], 0
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x210]
repne scasb al, byte [rdi]
not rcx
lea r8, [rcx - 1]
lea rdx, [rsp + 0x210]
lea rcx, [rsp + 0x68]
call fcn.180037e70
mov byte [rsp + 0x80], 0
mov dword [rsp + 0x84], ebx
xor r8d, r8d
lea rdx, [0x18007584f]
lea rcx, [rsp + 0x88]
call fcn.180037e70
mov dword [rsp + 0x98], ebx
mov dword [rsp + 0x94], ebx
mov rdx, qword [rsp + 0x68]
add rdx, 0x10
xor r8d, r8d
lea rcx, [rsp + 0x30]
call fcn.1800390c0
test al, al
je 0x180035950
mov rdi, qword [rsp + 0x58]
test rdi, rdi
je 0x180035950
nop dword [rax]
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x30]
test rax, rax
jne 0x1800357fc
mov rdi, qword [rdi + 0x48]
test rdi, rdi
jne 0x1800357e0
jmp 0x180035950
mov rax, qword [rdi]
mov rcx, rdi
call qword [rax + 0x30]
test rax, rax
je 0x180035950
mov rdx, qword [rax + 0x28]
test rdx, rdx
je 0x180035950
nop dword [rax + rax]
mov rsi, qword [rdx + 0x38]
add rsi, 0x10
lea rdi, [0x180082eb4]
mov ecx, 4
repe cmpsb byte [rsi], byte [rdi]
je 0x180035846
mov rdx, qword [rdx + 0x48]
test rdx, rdx
jne 0x180035820
jmp 0x180035950
test rdx, rdx
je 0x180035950
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + 0x28]
mov rdx, qword [rax + 0x28]
test rdx, rdx
je 0x180035950
nop word [rax + rax]
mov rsi, qword [rdx + 0x38]
add rsi, 0x10
lea rdi, str.url_short
mov ecx, 0xa
repe cmpsb byte [rsi], byte [rdi]
je 0x180035896
mov rdx, qword [rdx + 0x48]
test rdx, rdx
jne 0x180035870
jmp 0x180035950
test rdx, rdx
je 0x180035950
mov rax, qword [rdx]
mov rcx, rdx
call qword [rax + 0x28]
mov rcx, qword [rax + 0x28]
test rcx, rcx
je 0x1800358c4
mov rax, qword [rcx]
call qword [rax + 0x60]
test rax, rax
je 0x1800358c4
mov rbx, qword [rax + 0x38]
add rbx, 0x10
sub r12, rbx
nop word [rax + rax]
movzx eax, byte [rbx]
mov byte [rbx + r12], al
inc rbx
test al, al
jne 0x1800358d0
lea rcx, [rsp + 0x210]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
nop
mov qword [rsp + 0x30], r14
mov rcx, qword [rsp + 0x88]
cmp rcx, r13
je 0x180035904
call fcn.1800515dc
lea rax, vtable.TiXmlNode.0
mov qword [rsp + 0x30], rax
mov rdi, qword [rsp + 0x58]
test rdi, rdi
je 0x180035936
nop word [rax + rax]
mov rcx, rdi
mov rdi, qword [rdi + 0x48]
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
test rdi, rdi
jne 0x180035920
mov rcx, qword [rsp + 0x68]
cmp rcx, r13
je 0x180035946
call fcn.1800515dc
nop
mov eax, 1
jmp 0x180035b24
lea rcx, [rsp + 0x210]
call qword [sym.imp.KERNEL32.dll_DeleteFileA]
nop
mov qword [rsp + 0x30], r14
mov rcx, qword [rsp + 0x88]
cmp rcx, r13
je 0x180035976
call fcn.1800515dc
lea rax, vtable.TiXmlNode.0
mov qword [rsp + 0x30], rax
mov rdi, qword [rsp + 0x58]
test rdi, rdi
je 0x1800359a6
nop dword [rax]
mov rcx, rdi
mov rdi, qword [rdi + 0x48]
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
test rdi, rdi
jne 0x180035990
mov rcx, qword [rsp + 0x68]
cmp rcx, r13
je 0x1800359b6
call fcn.1800515dc
nop
mov byte [rsp + 0x830], 0
xor edx, edx
mov r8d, 0x3ff
lea rcx, [rsp + 0x831]
call fcn.180055310
mov byte [rsp + 0x100], 0
xor edx, edx
mov r8d, 0x103
lea rcx, [rsp + 0x101]
call fcn.180055310
mov r8, rbp
lea rdx, str.http:__api.t.sina.com.cn_short_url_shorten.json_source3271760578url_long_s
lea rcx, [rsp + 0x100]
call fcn.18005151c
lea rdx, [rsp + 0x830]
lea rcx, [rsp + 0x100]
call fcn.180035200
test eax, eax
je 0x180035b22
lea rdx, str.error
lea rcx, [rsp + 0x830]
call qword [sym.imp.SHLWAPI.dll_StrStrIA]
test rax, rax
jne 0x180035b22
lea rcx, [rsp + 0xc30]
mov rax, qword [str._url_long_:_]
mov qword [rcx], rax
mov eax, dword [0x180082f30]
mov dword [rcx + 8], eax
movzx eax, byte [0x180082f34]
mov byte [rcx + 0xc], al
xor edx, edx
mov r8d, 0x3f3
lea rcx, [rsp + 0xc3d]
call fcn.180055310
lea rdi, [rsp + 0xc30]
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
xor edx, edx
nop
movzx eax, byte [rdx + rbp]
mov byte [rdi + rdx - 1], al
inc rdx
test al, al
jne 0x180035a90
lea rdi, [rsp + 0xc30]
xor eax, eax
or rcx, 0xffffffffffffffff
repne scasb al, byte [rdi]
movzx eax, word [0x18008047c]
mov word [rdi - 1], ax
lea rdx, [rsp + 0xc30]
lea rcx, [rsp + 0x830]
call qword [sym.imp.SHLWAPI.dll_StrStrIA]
test rax, rax
je 0x180035b22
lea rdx, str._url_short_:_
lea rcx, [rsp + 0x830]
call qword [sym.imp.SHLWAPI.dll_StrStrIA]
mov rdi, rax
test rax, rax
je 0x180035b22
add rdi, 0xd
mov edx, 0x22
mov rcx, rdi
call qword [sym.imp.SHLWAPI.dll_StrChrIA]
sub rax, rdi
cmp rax, 0x13
jne 0x180035b22
mov r8, rax
mov rdx, rdi
mov rcx, r12
call fcn.180051c00
mov eax, 1
jmp 0x180035b24
xor eax, eax
mov rcx, qword [rsp + 0x1030]
xor rcx, rsp
call fcn.180050540
lea r11, [rsp + 0x1040]
mov rbx, qword [r11 + 0x40]
mov rbp, qword [r11 + 0x48]
mov rsp, r11
pop r14
pop r13
pop r12
pop rdi
pop rsi
ret