Function at 0x140001500
Capabilities:
Check if file exists
Download url
Get file attributes
Receive data

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r14
push r15
sub rsp, 0x60
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x58], rax
mov rsi, rcx
xor r15d, r15d
mov rbp, qword [rcx + 0x10]
movabs rcx, 0x7fffffffffffffff
mov rax, rcx
sub rax, rbp
cmp rax, 0xa
jb 0x140001772
cmp qword [rsi + 0x18], 0xf
jbe 0x140001555
mov rsi, qword [rsi]
xorps xmm0, xmm0
movups xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x50], r15
lea r14, [rbp + 0xa]
mov ebx, 0xf
lea rdi, [rsp + 0x38]
cmp r14, rbx
jbe 0x1400015f5
mov rbx, r14
or rbx, 0xf
cmp rbx, rcx
jbe 0x1400015b6
mov rbx, rcx
movabs rax, 0x8000000000000000
add rax, 0x27
mov rcx, rax
call fcn.140002290
test rax, rax
je 0x14000173c
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x1400015f0
mov eax, 0x16
cmp rbx, rax
cmovb rbx, rax
lea rcx, [rbx + 1]
test rcx, rcx
jne 0x1400015d0
mov rdi, r15
jmp 0x1400015f0
cmp rcx, 0x1000
jb 0x1400015e8
lea rax, [rcx + 0x27]
cmp rax, rcx
jbe 0x140001778
jmp 0x140001597
call fcn.140002290
mov rdi, rax
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x48], r14
mov qword [rsp + 0x50], rbx
mov r8, rbp
mov rdx, rsi
mov rcx, rdi
call sub.VCRUNTIME140.dll_memcpy
movsd xmm0, qword [str._stack.exe]
movsd qword [rdi + rbp], xmm0
movzx eax, word [0x140004478]
mov word [rdi + rbp + 8], ax
mov byte [rdi + r14], r15b
lea rcx, [rsp + 0x38]
cmp qword [rsp + 0x50], 0xf
cmova rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
cmp eax, 0xffffffff
jne 0x1400016cc
lea rdx, str.Downloading_stack.exe...
call fcn.140001c80
mov rcx, rax
lea rdx, [0x140001e60]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea r8, [rsp + 0x38]
cmp qword [rsp + 0x50], 0xf
cmova r8, qword [rsp + 0x38]
mov qword [rsp + 0x20], r15
xor r9d, r9d
lea rdx, str.https:__raw.githubusercontent.com_ElenaMod_stack_refs_heads_main_stack.exe
xor ecx, ecx
call qword [sym.imp.urlmon.dll_URLDownloadToFileA]
test eax, eax
js 0x1400016a5
lea rdx, str.Downloaded_stack.exe_to:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
jmp 0x1400016d3
lea rdx, str.Failed_to_download_stack.exe.
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.140001c80
mov rcx, rax
lea rdx, [0x140001e60]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
xor bl, bl
jmp 0x140001708
lea rdx, str.stack.exe_already_exists_at:
call fcn.140001c80
lea rdx, [rsp + 0x38]
cmp qword [rsp + 0x50], 0xf
mov r8, qword [rsp + 0x48]
cmova rdx, qword [rsp + 0x38]
mov rcx, rax
call fcn.1400020a0
lea rdx, [0x140001e60]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov bl, 1
mov rdx, qword [rsp + 0x50]
cmp rdx, 0xf
jbe 0x140001748
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140001743
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001743
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.1400022cc
movzx eax, bl
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.140002270
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x28]
mov rbp, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rdi
ret
call fcn.1400011a0
int3
call fcn.140001100
int3