Function at 0x1800081a0
Capabilities:
Prepare http request
Receive http response

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x1090
call fcn.180024010
sub rsp, rax
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x1080], rax
mov r15d, r9d
mov rdi, rcx
mov r13, qword [rsp + 0x10f0]
mov rax, qword [rsp + 0x10f8]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0x1100]
mov qword [rsp + 0x68], rax
xor sil, sil
xor ebx, ebx
mov qword [rsp + 0x58], rbx
mov r14d, ebx
mov qword [rsp + 0x50], rbx
xor r9d, r9d
mov rcx, qword [rcx + 0x30]
call qword [sym.imp.WINHTTP.dll_WinHttpConnect]
mov r12, rax
mov qword [rsp + 0x58], rax
test rax, rax
jne 0x180008231
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, str.Unable_to_connect_to_the_service
jmp 0x180008397
bts r15d, 8
mov dword [rsp + 0x30], r15d
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
xor r9d, r9d
mov r8, r13
xor edx, edx
mov rcx, rax
call qword [sym.imp.WINHTTP.dll_WinHttpOpenRequest]
mov r14, rax
mov qword [rsp + 0x50], rax
test rax, rax
jne 0x180008275
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, str.Unable_to_create_the_request
jmp 0x180008397
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], ebx
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, rax
call qword [sym.imp.WINHTTP.dll_WinHttpSendRequest]
test eax, eax
jne 0x1800082a9
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, str.Unable_to_send_the_request
jmp 0x180008397
xor edx, edx
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpReceiveResponse]
test eax, eax
je 0x18000838a
mov edi, 0x1000
mov dword [rsp + 0x40], edi
mov ecx, edi
call qword [sym.imp.ProcessHacker.exe_PhAllocate]
mov rsi, rax
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x44], ebx
nop dword [rax]
lea r9, [rsp + 0x70]
mov r8d, 0x1000
lea rdx, [rsp + 0x80]
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpReadData]
test eax, eax
je 0x18000834b
mov ecx, dword [rsp + 0x70]
test ecx, ecx
je 0x18000834b
lea eax, [rcx + rbx]
cmp edi, eax
jae 0x18000832c
add edi, edi
mov dword [rsp + 0x40], edi
mov edx, edi
mov rcx, rsi
call qword [sym.imp.ProcessHacker.exe_PhReAllocate]
mov rsi, rax
mov qword [rsp + 0x48], rax
mov ecx, dword [rsp + 0x70]
mov r8d, ecx
mov ecx, ebx
add rcx, rsi
lea rdx, [rsp + 0x80]
call fcn.180024080
add ebx, dword [rsp + 0x70]
mov dword [rsp + 0x44], ebx
jmp 0x1800082e0
lea eax, [rbx + 1]
cmp edi, eax
jae 0x18000836b
inc edi
mov dword [rsp + 0x40], edi
mov edx, edi
mov rcx, rsi
call qword [sym.imp.ProcessHacker.exe_PhReAllocate]
mov rsi, rax
mov qword [rsp + 0x48], rax
mov eax, ebx
mov byte [rax + rsi], 0
mov rax, qword [rsp + 0x60]
mov qword [rax], rsi
mov rax, qword [rsp + 0x68]
test rax, rax
je 0x180008385
mov dword [rax], ebx
mov sil, 1
jmp 0x1800083a3
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, str.Unable_to_receive_the_response
mov r8d, eax
mov rcx, rdi
call fcn.180008150
nop
test r14, r14
je 0x1800083b1
mov rcx, r14
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
test r12, r12
je 0x1800083bf
mov rcx, r12
call qword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
movzx eax, sil
mov rcx, qword [rsp + 0x1080]
xor rcx, rsp
call fcn.18000a000
add rsp, 0x1090
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret