Function at 0x1400028b0
Capabilities:
Get file size
Read file on windows

Disassembly:
push rbx
push r14
sub rsp, 0x78
mov rax, qword [0x14003b040]
xor rax, rsp
mov qword [rsp + 0x68], rax
mov r14, rdx
mov ebx, ecx
lea rdx, str._n_n___________________________________________________________________________________________________________________n___________________________________________________________________________________________________________________n___________________________________________________________________________________________________________________n___________________________________________________________________________________________________________________n___________________________________________________________________________________________________________________n___________________________________________________________________________________________________________________n___________________________________________________________________________________________________________________n___________________________________________________________________________________________________________________n___________________________________________________________________________________________________________________n_t
lea rcx, [0x14003c1b0]
call fcn.1400030d0
mov rcx, rax
lea rdx, str._t_t_t_t_t_t_t_t_t_t_t_tBY_ORCA10K__n
call fcn.1400030d0
cmp ebx, 3
je 0x140002954
mov rdx, qword [r14]
lea rcx, str.____Usage:__s__payload_file_path___Option__n
call fcn.140001160
lea rcx, str._i__Option_Can_Be_:__n
call fcn.140001160
lea rcx, str._t_1___MacFuscation____mac__:::_Output_The_Shellcode_As_A_Array_Of_Mac_Addresses__FC_48_83_E4_F0_E8__n
call fcn.140001160
lea rcx, str._t_2___Ipv4Fuscation____ipv4__:::_Output_The_Shellcode_As_A_Array_Of_ipv4_Addresses__252.72.131.228__n
call fcn.140001160
lea rcx, str._t_3___Ipv6Fuscation____ipv6__:::_Output_The_Shellcode_As_A_Array_Of_ipv6_Addresses__FC48:83E4:F0E8:C000:0000:4151:4150:5251__n
call fcn.140001160
lea rcx, str._i_
call fcn.140001160
lea rcx, str.PAUSE
call fcn.14000ffdc
mov eax, 0xffffffff
jmp 0x1400029d8
mov rcx, qword [r14 + 8]
xor r9d, r9d
mov qword [rsp + 0x90], rbp
xor r8d, r8d
mov qword [rsp + 0xa0], rsi
mov edx, 0x80000000
mov qword [rsp + 0x70], rdi
xor edi, edi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 1
mov dword [rsp + 0x20], 3
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rsi, rax
cmp rax, 0xffffffffffffffff
jne 0x1400029ed
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.____CreateFileA_Failed_With_Error:___d__n
call fcn.140001160
lea rcx, str.PAUSE
call fcn.14000ffdc
mov eax, 0xffffffff
mov rsi, qword [rsp + 0xa0]
mov rbp, qword [rsp + 0x90]
mov rdi, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
xor rcx, rsp
call fcn.140006800
add rsp, 0x78
pop r14
pop rbx
ret
xor edx, edx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov ecx, eax
mov ebx, eax
call fcn.140010554
lea r9, [rsp + 0x40]
mov qword [rsp + 0x20], rdi
mov r8d, ebx
mov rdx, rax
mov rcx, rsi
mov rbp, rax
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x140002a35
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.____ReadFile_Failed_With_Error:_n
jmp 0x1400029ad
mov eax, dword [rsp + 0x40]
mov rcx, rsi
mov qword [0x14003d968], rax
mov qword [0x14003d970], rbp
call qword [sym.imp.KERNEL32.dll_CloseHandle]
cmp qword [0x14003d970], rdi
je 0x1400029b2
mov rdx, qword [0x14003d968]
test rdx, rdx
je 0x1400029b2
lea rcx, str._i__Size_Of_Shellcode:__ld__n
call fcn.140001160
mov rbx, qword [r14 + 0x10]
lea rdx, str.MacFuscation
mov rcx, rbx
call fcn.1400287b0
test eax, eax
je 0x140002ac3
lea rdx, str.macfuscation
mov rcx, rbx
call fcn.1400287b0
test eax, eax
je 0x140002ac3
mov rcx, rdi
lea rdx, [0x140035dc0]
nop dword [rax]
movzx eax, byte [rbx + rcx]
inc rcx
cmp al, byte [rdx + rcx - 1]
jne 0x140002b30
cmp rcx, 4
jne 0x140002ab0
movabs rax, 0xaaaaaaaaaaaaaaab
mul qword [0x14003d968]
shr rdx, 2
lea rax, [rdx + rdx*2]
add rax, rax
cmp qword [0x14003d968], rax
jne 0x140002d71
lea rcx, str._i__The_Shellcode_is_Already_multiple_of_6__No_Need_To_Append_Nops_...__n
call fcn.140001160
mov rcx, qword [0x14003d968]
call fcn.140010554
mov rbx, qword [0x14003d968]
mov rcx, rax
mov rdx, qword [0x14003d970]
mov r8, rbx
mov qword [0x14003d978], rax
call fcn.140028890
mov qword [0x14003d980], rbx
jmp 0x140002d87
mov rcx, rdi
lea rdx, [0x140035dc4]
nop word [rax + rax]
movzx eax, byte [rbx + rcx]
inc rcx
cmp al, byte [rdx + rcx - 1]
jne 0x140002b58
cmp rcx, 4
jne 0x140002b40
jmp 0x140002ac3
lea rdx, str.Ipv4Fuscation
mov rcx, rbx
call fcn.1400287b0
test eax, eax
je 0x140002ba3
lea rdx, str.ipv4fuscation
mov rcx, rbx
call fcn.1400287b0
test eax, eax
je 0x140002ba3
mov rcx, rdi
lea rdx, str.ipv4
nop dword [rax + rax]
movzx eax, byte [rbx + rcx]
inc rcx
cmp al, byte [rdx + rcx - 1]
jne 0x140002bf9
cmp rcx, 5
jne 0x140002b90
test byte [0x14003d968], 3
jne 0x140002d54
lea rcx, str._i__The_Shellcode_is_Already_multiple_of_4__No_Need_To_Append_Nops_...__n
call fcn.140001160
mov rcx, qword [0x14003d968]
call fcn.140010554
mov rbx, qword [0x14003d968]
mov rcx, rax
mov rdx, qword [0x14003d970]
mov r8, rbx
mov qword [0x14003d978], rax
call fcn.140028890
mov qword [0x14003d980], rbx
mov ebx, 0x3e8
jmp 0x140002d8c
mov rcx, rdi
lea rdx, str.IPV4
movzx eax, byte [rbx + rcx]
inc rcx
cmp al, byte [rdx + rcx - 1]
jne 0x140002c18
cmp rcx, 5
jne 0x140002c03
jmp 0x140002ba3
lea rdx, str.Ipv6Fuscation
mov rcx, rbx
call fcn.1400287b0
test eax, eax
je 0x140002c63
lea rdx, str.ipv6fuscation
mov rcx, rbx
call fcn.1400287b0
test eax, eax
je 0x140002c63
mov rcx, rdi
lea rdx, str.ipv6
nop dword [rax + rax]
movzx eax, byte [rbx + rcx]
inc rcx
cmp al, byte [rdx + rcx - 1]
jne 0x140002cb9
cmp rcx, 5
jne 0x140002c50
test byte [0x14003d968], 0xf
jne 0x140002d37
lea rcx, str._i__The_Shellcode_is_Already_multiple_of_16__No_Need_To_Append_Nops_...__n
call fcn.140001160
mov rcx, qword [0x14003d968]
call fcn.140010554
mov rbx, qword [0x14003d968]
mov rcx, rax
mov rdx, qword [0x14003d970]
mov r8, rbx
mov qword [0x14003d978], rax
call fcn.140028890
mov qword [0x14003d980], rbx
mov ebx, 0xbb8
jmp 0x140002d8c
mov rcx, rdi
lea rdx, str.IPV6
movzx eax, byte [rbx + rcx]
inc rcx
cmp al, byte [rdx + rcx - 1]
jne 0x140002cd8
cmp rcx, 5
jne 0x140002cc3
jmp 0x140002c63
mov rdx, rbx
lea rcx, str.____Unkown_Input_:__s__n
call fcn.140001160
mov rdx, qword [r14]
lea rcx, str.____Usage:__s__payload_file_path___Option__n
call fcn.140001160
lea rcx, str._i__Option_Can_Be_:__n
call fcn.140001160
lea rcx, str._t_1___MacFuscation____mac__:::_Output_The_Shellcode_As_A_Array_Of_Mac_Addresses__FC_48_83_E4_F0_E8__n
call fcn.140001160
lea rcx, str._t_2___Ipv4Fuscation____ipv4__:::_Output_The_Shellcode_As_A_Array_Of_ipv4_Addresses__252.72.131.228__n
call fcn.140001160
lea rcx, str._t_3___Ipv6Fuscation____ipv6__:::_Output_The_Shellcode_As_A_Array_Of_ipv6_Addresses__FC48:83E4:F0E8:C000:0000:4151:4150:5251__n
call fcn.140001160
lea rcx, str._i_
call fcn.140001160
jmp 0x1400029b2
lea rcx, str._i__The_Shellcode_is_Not_multiple_of_16_n
call fcn.140001160
mov ecx, 0x10
call fcn.140001a40
mov ebx, 0xbb8
jmp 0x140002d8c
lea rcx, str._i__The_Shellcode_is_Not_multiple_of_4_n
call fcn.140001160
mov ecx, 4
call fcn.140001a40
mov ebx, 0x3e8
jmp 0x140002d8c
lea rcx, str._i__The_Shellcode_is_Not_multiple_of_6_n
call fcn.140001160
mov ecx, 6
call fcn.140001a40
mov ebx, 0x7d0
mov edx, dword [0x14003d980]
lea rcx, str._i__Final_Shellcode_Size_:__ld_n
call fcn.140001160
mov rcx, qword [0x14003d980]
call fcn.140010554
mov r8, qword [0x14003d980]
mov rcx, rax
mov rdx, qword [0x14003d978]
mov rsi, rax
call fcn.140028890
cmp ebx, 0x3e8
je 0x140002f35
cmp ebx, 0x7d0
je 0x140002eae
cmp ebx, 0xbb8
je 0x140002e26
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.____Unkown_Error_Occured__d__n
call fcn.140001160
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.____Failed_To_Write_The_Shellcode__Returned_Error_:__d__n
call fcn.140001160
mov rcx, qword [0x14003d978]
call fcn.140010124
mov rcx, rsi
call fcn.140010124
xor eax, eax
jmp 0x1400029c3
movups xmm0, xmmword [str.IPv6Fuscation.cpp]
movzx eax, word [0x140036028]
lea rcx, [rsp + 0x48]
mov qword [rsp + 0x30], rdi
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
xor r8d, r8d
mov edx, 0xc0000000
mov word [rsp + 0x58], ax
movups xmmword [rsp + 0x48], xmm0
mov dword [rsp + 0x20], 2
call qword [sym.imp.KERNEL32.dll_CreateFileA]
cmp rax, 0xffffffffffffffff
jne 0x140002e85
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.____CreateFileA_Failed_With_Error:___d__n
call fcn.140001160
jmp 0x140002e91
mov qword [0x14003d988], rax
mov edi, 1
mov rcx, qword [0x14003d980]
lea r8, [rsp + 0x40]
mov rdx, rsi
mov dword [rsp + 0x40], edi
call fcn.140001f40
jmp 0x140002fb8
movups xmm0, xmmword [str.MacFuscation.cpp]
movzx eax, byte [0x140036010]
lea rcx, [rsp + 0x48]
mov qword [rsp + 0x30], rdi
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
xor r8d, r8d
mov edx, 0xc0000000
mov byte [rsp + 0x58], al
movups xmmword [rsp + 0x48], xmm0
mov dword [rsp + 0x20], 2
call qword [sym.imp.KERNEL32.dll_CreateFileA]
cmp rax, 0xffffffffffffffff
jne 0x140002f0c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.____CreateFileA_Failed_With_Error:___d__n
call fcn.140001160
jmp 0x140002f18
mov qword [0x14003d988], rax
mov edi, 1
mov rcx, qword [0x14003d980]
lea r8, [rsp + 0x40]
mov rdx, rsi
mov dword [rsp + 0x40], edi
call fcn.1400024a0
jmp 0x140002fb8
movups xmm0, xmmword [str.IPv4Fuscation.cpp]
movzx eax, word [0x140035ff8]
lea rcx, [rsp + 0x48]
mov qword [rsp + 0x30], rdi
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
xor r8d, r8d
mov edx, 0xc0000000
mov word [rsp + 0x58], ax
movups xmmword [rsp + 0x48], xmm0
mov dword [rsp + 0x20], 2
call qword [sym.imp.KERNEL32.dll_CreateFileA]
cmp rax, 0xffffffffffffffff
jne 0x140002f94
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea rcx, str.____CreateFileA_Failed_With_Error:___d__n
call fcn.140001160
jmp 0x140002fa0
mov qword [0x14003d988], rax
mov edi, 1
mov rcx, qword [0x14003d980]
lea r8, [rsp + 0x40]
mov rdx, rsi
mov dword [rsp + 0x40], edi
call fcn.140001b20
cmp dword [rsp + 0x40], 0
je 0x140002df7
lea rdx, [rsp + 0x48]
lea rcx, str.___Wrote_The_Shellcode_And_The_Decoder_To_:__s__n
call fcn.140001160
jmp 0x140002e0b