Function at 0x10006b00
Capabilities:
Make an http request with a cookie
Send data
Send http request
Set http header

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x3834
call fcn.10023320
cmp dword [ebp + 0xc], 0x11
push ebx
push edi
mov ebx, ecx
jae 0x10006b1e
xor eax, eax
jmp 0x10006e87
push esi
push 0xfff
lea eax, [ebp - 0x1833]
mov dword [ebp - 4], 0x1000
push 0
push eax
mov byte [ebp - 0x1834], 0
call fcn.10017e80
pop ecx
pop ecx
mov ecx, dword [ebp + 8]
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0x1834]
push eax
push 0x11
pop edx
call fcn.10001bf7
add esp, 0xc
test eax, eax
je 0x10006e84
mov esi, dword [ebp - 4]
test esi, esi
jle 0x10006e84
xor eax, eax
push 0x1ffe
push eax
mov word [ebp - 0x3834], ax
lea eax, [ebp - 0x3832]
push eax
call fcn.10017e80
add esi, 0x200
xor ecx, ecx
push 2
pop edx
mov eax, esi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1001afe8
push esi
mov ecx, eax
mov dword [ebp - 8], eax
call fcn.1000525c
push 9
xor eax, eax
lea edi, [ebp - 0x32]
pop ecx
mov word [ebp - 0x34], ax
rep stosd dword es:[edi], eax
push 0
xor ecx, ecx
push 4
pop edx
inc ecx
stosw word es:[edi], ax
call fcn.1000531a
push 0
lea edx, [ebp - 0x34]
mov ecx, eax
call fcn.1000534b
lea eax, [ebp - 0x34]
push eax
push str.Cookie:__s
mov eax, 0x1000
push eax
push eax
lea eax, [ebp - 0x3834]
push eax
call fcn.100188f7
push 0xa
pop ecx
xor eax, eax
lea edi, [ebp - 0x34]
rep stosd dword es:[edi], eax
mov edi, dword [ebp - 8]
lea eax, [ebp - 0x3834]
push eax
push esi
push edi
call fcn.10018ee3
add esp, 0x3c
lea eax, [ebp - 0x3834]
push 0x1000
push eax
push dword [ebp - 4]
lea eax, [ebp - 0x1834]
push eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
xor ecx, ecx
mov word [ebp + eax*2 - 0x3834], cx
lea eax, [ebp - 0x3834]
push eax
push esi
push edi
call fcn.1001af77
add esp, 0xc
push 0x80000000
push 0xffffffffffffffff
push str.Cookie:
push dword [ebx + 0x278]
mov esi, dword [sym.imp.WINHTTP.dll_WinHttpAddRequestHeaders]
call esi
push 0xa0000000
push edi
call fcn.10018631
pop ecx
push eax
push edi
push dword [ebx + 0x278]
call esi
test eax, eax
je 0x10006e84
push edi
call fcn.1001afe3
xor eax, eax
mov dword [esp], 0x7fe
push eax
mov word [ebp - 0x834], ax
lea eax, [ebp - 0x832]
push eax
call fcn.10017e80
mov eax, dword [ebp + 0xc]
add eax, 0xffffffef
push eax
push str.Content_Length:__d
push 0x32
lea eax, [ebp - 0x834]
push 0x32
push eax
call fcn.100188f7
add esp, 0x20
lea eax, [ebp - 0x834]
push 0xa0000000
push eax
call fcn.10018631
pop ecx
push eax
lea eax, [ebp - 0x834]
push eax
push dword [ebx + 0x278]
call esi
test eax, eax
je 0x10006e84
xor eax, eax
lea edi, [ebp - 0x834]
mov ecx, 0x200
push str.Content_Type:_application_octet_stream__charsetutf_8
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x834]
push 0x80
push eax
call fcn.10018ee3
add esp, 0xc
lea eax, [ebp - 0x834]
push 0xa0000000
push eax
call fcn.10018631
pop ecx
push eax
lea eax, [ebp - 0x834]
push eax
push dword [ebx + 0x278]
call esi
test eax, eax
je 0x10006e84
xor eax, eax
lea edi, [ebp - 0x834]
mov ecx, 0x200
push str.Content_Encoding:_gzip
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x834]
push 0x80
push eax
call fcn.10018ee3
add esp, 0xc
lea eax, [ebp - 0x834]
push 0xa0000000
push eax
call fcn.10018631
pop ecx
push eax
lea eax, [ebp - 0x834]
push eax
push dword [ebx + 0x278]
call esi
test eax, eax
je 0x10006e84
xor eax, eax
lea edi, [ebp - 0x834]
mov ecx, 0x200
push str.Cache_Control:_no_cache
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x834]
push 0x80
push eax
call fcn.10018ee3
add esp, 0xc
lea eax, [ebp - 0x834]
push 0xa0000000
push eax
call fcn.10018631
pop ecx
push eax
lea eax, [ebp - 0x834]
push eax
push dword [ebx + 0x278]
call esi
test eax, eax
je 0x10006e84
xor eax, eax
lea edi, [ebp - 0x834]
mov ecx, 0x200
rep stosd dword es:[edi], eax
push str.User_Agent:
mov edi, 0x400
lea eax, [ebp - 0x834]
push edi
push eax
call fcn.10018ee3
lea eax, [ebx + 0x64]
push eax
lea eax, [ebp - 0x834]
push edi
push eax
call fcn.1001af77
add esp, 0x18
lea eax, [ebp - 0x834]
push 0xa0000000
push eax
call fcn.10018631
pop ecx
push eax
lea eax, [ebp - 0x834]
push eax
push dword [ebx + 0x274]
call esi
test eax, eax
je 0x10006e84
mov esi, dword [ebp + 0xc]
xor ecx, ecx
push ecx
add esi, 0xffffffef
push esi
push ecx
push ecx
push ecx
push ecx
push dword [ebx + 0x278]
call dword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
je 0x10006e84
and dword [ebp - 0xc], 0
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp + 8]
push esi
add eax, 0x11
push eax
push dword [ebx + 0x278]
call dword [sym.imp.WINHTTP.dll_WinHttpWriteData]
jmp 0x10006e86
xor eax, eax
pop esi
pop edi
pop ebx
mov esp, ebp
pop ebp
ret 8