Function at 0x100165a0
Capabilities:
Initialize winhttp library
Prepare http request
Receive http response
Resolve function by parsing pe exports
Set http header

Disassembly:
push 0xffffffffffffffff
push 0x1003a470
mov eax, dword fs:[0]
push eax
sub esp, 0xb4
mov eax, dword [0x10043330]
xor eax, esp
mov dword [esp + 0xb0], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x10043330]
xor eax, esp
push eax
lea eax, [esp + 0xc8]
mov dword fs:[0], eax
mov eax, dword [esp + 0xd8]
mov edi, edx
mov dword [esp + 0x1c], eax
mov esi, ecx
mov dword [esp + 0x30], edi
xor ebx, ebx
mov dword [esp + 0xd0], ebx
call fcn.10016af0
push 0x38
lea ecx, [esp + 0x3c]
push ebx
push ecx
mov dword [esp + 0x38], ebx
mov dword [esp + 0x24], ebx
xor ebp, ebp
call fcn.1002fb20
or edi, 0xffffffff
add esp, 0xc
push edi
push ebx
lea edx, [esp + 0xe4]
push edx
lea ecx, [esp + 0x98]
mov dword [esp + 0x40], 0x3c
mov dword [esp + 0x48], edi
mov dword [esp + 0x54], edi
mov dword [esp + 0x70], edi
mov dword [esp + 0x78], edi
mov dword [esp + 0xb0], 0xf
mov dword [esp + 0xac], ebx
mov byte [esp + 0x9c], bl
call fcn.10002de0
mov byte [esp + 0xd0], 1
cmp dword [esp + 0xa4], 0x10
jb 0x1001667f
mov eax, dword [esp + 0x90]
mov dword [esp + 0x20], eax
jmp 0x1001668a
lea ecx, [esp + 0x90]
mov dword [esp + 0x20], ecx
mov eax, esi
lea edx, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x10016690
sub eax, edx
lea edx, [esp + 0x34]
push edx
push ebx
sar eax, 1
push eax
push esi
call dword [sym.imp.WINHTTP.dll_WinHttpCrackUrl]
test eax, eax
jne 0x10016708
mov esi, 0x10
cmp dword [esp + 0xa4], esi
jb 0x100166cf
mov eax, dword [esp + 0x90]
push eax
call fcn.1002b322
add esp, 4
cmp dword [esp + 0xf4], esi
mov dword [esp + 0xa4], 0xf
mov dword [esp + 0xa0], ebx
mov byte [esp + 0x90], bl
jb 0x10016701
mov ecx, dword [esp + 0xe0]
push ecx
call fcn.1002b322
add esp, 4
xor al, al
jmp 0x10016abf
push ebx
push ebx
push ebx
push ebx
push str.User_Agent
call dword [sym.imp.WINHTTP.dll_WinHttpOpen]
cmp eax, ebx
mov dword [esp + 0x24], eax
jne 0x10016776
mov esi, 0x10
cmp dword [esp + 0xa4], esi
jb 0x1001673d
mov edx, dword [esp + 0x90]
push edx
call fcn.1002b322
add esp, 4
cmp dword [esp + 0xf4], esi
mov dword [esp + 0xa4], 0xf
mov dword [esp + 0xa0], ebx
mov byte [esp + 0x90], bl
jb 0x10016701
mov eax, dword [esp + 0xe0]
push eax
call fcn.1002b322
add esp, 4
xor al, al
jmp 0x10016abf
push ebx
push ebx
push 0x1388
push 0x1388
push eax
call dword [sym.imp.WINHTTP.dll_WinHttpSetTimeouts]
mov edx, dword [esp + 0x44]
mov eax, edx
mov dword [esp + 0xc0], 7
mov dword [esp + 0xbc], ebx
mov word [esp + 0xac], bx
lea esi, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x100167b0
sub eax, esi
sar eax, 1
push eax
push edx
lea esi, [esp + 0xb0]
call fcn.100031f0
mov ecx, esi
mov byte [esp + 0xd0], 2
push ecx
mov ecx, dword [esp + 0x4c]
lea esi, [esp + 0x74]
call fcn.10016b90
push edi
push ebx
lea ecx, [esp + 0xb0]
mov byte [esp + 0xd8], 3
call fcn.10003860
mov edi, 8
mov byte [esp + 0xd0], 2
cmp dword [esp + 0x88], edi
jb 0x1001681e
mov edx, dword [esp + 0x74]
push edx
call fcn.1002b322
add esp, 4
cmp dword [esp + 0xc0], edi
mov eax, dword [esp + 0xac]
jae 0x10016835
lea eax, [esp + 0xac]
mov ecx, dword [esp + 0x4c]
mov edx, dword [esp + 0x24]
push ebx
push ecx
push eax
push edx
call dword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov esi, eax
cmp esi, ebx
mov dword [esp + 0x28], esi
je 0x100169e3
xor eax, eax
cmp word [esp + 0x4c], 0x1bb
setne al
sub eax, 1
and eax, 0x800000
push eax
mov eax, dword [esp + 0x64]
push ebx
push ebx
push str.HTTP_1.1
push eax
push str.POST
push esi
call dword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov edi, eax
cmp edi, ebx
je 0x100169d7
push str.Content_type:_application_x_www_form_urlencoded_r_n
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push 0x20000000
push eax
push str.Content_type:_application_x_www_form_urlencoded_r_n
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0x20]
push ebx
push eax
push eax
push ecx
push ebx
push ebx
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
jne 0x100168d8
mov esi, dword [esp + 0x1c]
push str.WinHttpControl::PostWebData:_can_not_send_request._r_n
call fcn.10028b30
jmp 0x100169c9
push ebx
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
jne 0x100168f7
mov esi, dword [esp + 0x1c]
push str.WinHttpControl::PostWebData:_can_not_receive_response._r_n
call fcn.10028b30
jmp 0x100169c9
mov esi, dword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
lea ecx, [ecx]
lea edx, [esp + 0x18]
push edx
push edi
mov dword [esp + 0x20], ebx
call esi
test eax, eax
je 0x100169a2
mov eax, dword [esp + 0x18]
cmp eax, ebx
je 0x10016a82
add ebp, eax
cmp ebp, 0x1000
mov dword [esp + 0x20], ebp
jae 0x100169cc
add eax, 0x10
push eax
push 1
call fcn.1002c883
mov ebp, eax
add esp, 8
cmp ebp, ebx
je 0x100169cc
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x2c]
push eax
push ecx
push ebp
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpReadData]
test eax, eax
je 0x100169b2
cmp dword [esp + 0x2c], ebx
je 0x10016a79
mov eax, ebp
lea edx, [eax + 1]
nop
mov cl, byte [eax]
add eax, 1
cmp cl, bl
jne 0x10016970
sub eax, edx
push eax
mov eax, dword [esp + 0x34]
push ebp
call fcn.10015ee0
push ebp
call fcn.1002c6d7
add esp, 4
cmp dword [esp + 0x18], ebx
jbe 0x10016a82
mov ebp, dword [esp + 0x20]
jmp 0x10016900
mov esi, dword [esp + 0x1c]
push str.WinHttpControl::PostWebData:_can_not_query_data_available._r_n
call fcn.10028b30
jmp 0x100169c9
mov esi, dword [esp + 0x1c]
push str.WinHttpControl::PostWebData:_can_not_read_data._r_n
call fcn.10028b30
add esp, 4
push ebp
call fcn.1002c6d7
add esp, 4
push edi
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov esi, dword [esp + 0x28]
push esi
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov edi, 8
mov edx, dword [esp + 0x24]
push edx
call dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
cmp dword [esp + 0xc0], edi
jb 0x10016a07
mov eax, dword [esp + 0xac]
push eax
call fcn.1002b322
add esp, 4
mov esi, 0x10
cmp dword [esp + 0xa4], esi
mov dword [esp + 0xc0], 7
mov dword [esp + 0xbc], ebx
mov word [esp + 0xac], bx
jb 0x10016a3f
mov ecx, dword [esp + 0x90]
push ecx
call fcn.1002b322
add esp, 4
cmp dword [esp + 0xf4], esi
mov dword [esp + 0xa4], 0xf
mov dword [esp + 0xa0], ebx
mov byte [esp + 0x90], bl
jb 0x10016701
mov edx, dword [esp + 0xe0]
push edx
call fcn.1002b322
add esp, 4
xor al, al
jmp 0x10016abf
push ebp
call fcn.1002c6d7
add esp, 4
mov esi, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
push edi
call esi
mov eax, dword [esp + 0x28]
push eax
call esi
mov ecx, dword [esp + 0x24]
push ecx
call esi
lea esi, [esp + 0xa8]
call fcn.10003e00
lea ecx, [esp + 0x8c]
call fcn.10002be0
lea ecx, [esp + 0xdc]
call fcn.10002be0
mov al, 1
mov ecx, dword [esp + 0xc8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0xb0]
xor ecx, esp
call fcn.1002b6af
add esp, 0xc0
ret 0x20