Function at 0x140003250
Capabilities:
Encode data using xor
Get file size
Read file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xa0
mov rax, qword [0x14000b040]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov r14, rcx
xor edi, edi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0x80000000
lea rcx, str.C:UsersUtilizadorDesktopTestRobloxInjectorx64DebugInjectDll.dll
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rsi, rax
cmp rax, 0xffffffffffffffff
jne 0x140003458
lea rdx, str.C:UsersUtilizadorDesktopTestRobloxInjectorx64DebugInjectDll.dll
lea rcx, [rbp + 7]
call fcn.140005540
mov rbx, rax
mov r8, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov rax, rcx
sub rax, r8
cmp rax, 0x14
jb 0x140003366
lea rax, [r8 + 0x14]
mov qword [rbx + 0x10], rax
mov rsi, rbx
cmp rcx, 0xf
jbe 0x1400032fa
mov rsi, qword [rbx]
lea rax, [0x140007a6c]
mov r12d, 0x14
lea r15, str.DLL_file_not_found:
cmp rax, rsi
jbe 0x14000332e
lea rax, [rsi + r8]
cmp r15, rax
ja 0x14000332e
cmp rsi, r15
ja 0x140003326
mov r14, rdi
jmp 0x140003331
mov r14, rsi
sub r14, r15
jmp 0x140003331
mov r14, r12
lea rcx, [rsi + 0x14]
inc r8
mov rdx, rsi
call sub.VCRUNTIME140.dll_memmove
mov r8, r14
mov rdx, r15
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rsi + r14]
sub r12, r14
lea rdx, [r15 + 0x14]
add rdx, r14
mov r8, r12
call sub.VCRUNTIME140.dll_memcpy
jmp 0x14000338b
mov r12d, 0x14
mov qword [rsp + 0x28], r12
lea r15, str.DLL_file_not_found:
mov qword [rsp + 0x20], r15
mov edx, r12d
mov rcx, rbx
call fcn.140004c20
mov rbx, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
mov qword [rbp - 9], rdi
mov qword [rbp - 1], rdi
movups xmm0, xmmword [rbx]
movups xmmword [rbp - 0x19], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [rbp - 9], xmm1
mov qword [rbx + 0x10], rdi
mov qword [rbx + 0x18], 0xf
mov byte [rbx], 0
lea rcx, [rbp - 0x19]
call fcn.140001010
nop
mov rdx, qword [rbp - 1]
cmp rdx, 0xf
jbe 0x140003400
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400033fb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400033fb
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005800
mov qword [rbp - 9], rdi
mov qword [rbp - 1], 0xf
mov byte [rbp - 0x19], 0
mov rdx, qword [rbp + 0x1f]
cmp rdx, 0xf
jbe 0x14000344e
inc rdx
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003449
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003449
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005800
mov eax, 0xffffffff
jmp 0x14000361e
xor edx, edx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov r12d, eax
cmp eax, 0xffffffff
jne 0x14000352e
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
mov qword [rbp - 9], rdi
mov qword [rbp - 1], 0xf
mov ecx, 0x20
call fcn.140005834
mov rcx, rax
mov qword [rbp - 0x19], rax
mov qword [rbp - 9], 0x1b
mov qword [rbp - 1], 0x1f
movups xmm0, xmmword [str.Failed_to_get_DLL_file_size]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x140007a80]
movsd qword [rax + 0x10], xmm0
movzx eax, word [0x140007a88]
mov word [rcx + 0x18], ax
movzx eax, byte [0x140007a8a]
mov byte [rcx + 0x1a], al
mov byte [rcx + 0x1b], dil
lea rcx, [rbp - 0x19]
call fcn.140001010
nop
mov rdx, qword [rbp - 1]
cmp rdx, 0xf
jbe 0x14000351b
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003516
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003516
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005800
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 0xffffffff
jmp 0x14000361e
mov rbx, r12
mov rcx, r12
call fcn.140005870
mov r15, rax
mov qword [rbp - 0x21], rax
mov qword [rsp + 0x20], rdi
lea r9, [rbp - 0x29]
mov r8d, r12d
mov rdx, rax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x140003646
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
mov qword [rbp - 9], rdi
mov qword [rbp - 1], 0xf
lea ecx, [rax + 0x20]
call fcn.140005834
mov rcx, rax
mov qword [rbp - 0x19], rax
mov qword [rbp - 9], 0x17
mov qword [rbp - 1], 0x1f
movups xmm0, xmmword [str.Failed_to_read_DLL_file]
movups xmmword [rax], xmm0
mov eax, dword [0x140007aa0]
mov dword [rcx + 0x10], eax
movzx eax, word [0x140007aa4]
mov word [rcx + 0x14], ax
movzx eax, byte [0x140007aa6]
mov byte [rcx + 0x16], al
mov byte [rcx + 0x17], 0
lea rcx, [rbp - 0x19]
call fcn.140001010
nop
mov rdx, qword [rbp - 1]
cmp rdx, 0xf
jbe 0x140003606
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003601
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003601
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005800
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edi, 0xffffffff
mov rcx, r15
call fcn.140005800
mov eax, edi
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.1400057e0
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rdx, rbx
mov rcx, r14
call fcn.1400018f0
mov rsi, rax
test rax, rax
je 0x14000360f
movdqa xmm2, xmmword [str.UUUUUUUUUUUUUUUU_]
mov rdx, rdi
test r12d, r12d
je 0x1400036ed
cmp rbx, 0x40
jb 0x1400036cb
mov rcx, rbx
and rcx, 0xffffffffffffffc0
lea rax, [r15 + 0x20]
movdqu xmm0, xmmword [rax - 0x20]
movdqa xmm1, xmm2
xorps xmm1, xmm0
movdqu xmmword [rax - 0x20], xmm1
movdqu xmm0, xmmword [rax - 0x10]
xorps xmm0, xmm2
movdqu xmmword [rax - 0x10], xmm0
movdqu xmm1, xmmword [rax]
xorps xmm1, xmm2
movdqu xmmword [rax], xmm1
movdqu xmm0, xmmword [rax + 0x10]
xorps xmm0, xmm2
movdqu xmmword [rax + 0x10], xmm0
add rdx, 0x40
lea rax, [rax + 0x40]
cmp rdx, rcx
jb 0x140003683
cmp rdx, rbx
jae 0x1400036ed
lea rax, [rdx + r15]
mov rcx, rbx
sub rcx, rdx
nop word [rax + rax]
xor byte [rax], 0x55
lea rax, [rax + 1]
sub rcx, 1
jne 0x1400036e0
mov r9, rbx
mov r8, r15
mov rdx, rsi
mov rcx, r14
call fcn.140001ba0
test al, al
je 0x14000360f
mov rdx, rsi
mov rcx, r14
call fcn.140001e30
test al, al
je 0x14000360f
mov rdx, rsi
mov rcx, r14
call fcn.1400024a0
mov rdx, rsi
mov rcx, r14
call fcn.140002bf0
lea rdx, [rsi + 0x1000]
mov rcx, r14
call fcn.140002ec0
test al, al
je 0x14000360f
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
mov qword [rbp - 9], rdi
mov qword [rbp - 1], 0xf
mov ecx, 0x40
call fcn.140005834
mov qword [rbp - 0x19], rax
mov qword [rbp - 9], 0x38
mov qword [rbp - 1], 0x3f
movups xmm0, xmmword [str.Manual_mapping_and_PEB_unlinking_completed_successfully.]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x140007ab8]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [0x140007ac8]
movups xmmword [rax + 0x20], xmm0
movsd xmm0, qword [0x140007ad8]
movsd qword [rax + 0x30], xmm0
mov byte [rax + 0x38], 0
lea rdx, str.Info:
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.1400044a0
lea rdx, [rbp - 0x19]
cmp qword [rbp - 1], 0xf
cmova rdx, qword [rbp - 0x19]
mov r8, qword [rbp - 9]
mov rcx, rax
call fcn.1400048d0
lea rdx, [0x140004670]
mov rcx, rax
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
nop
mov rdx, qword [rbp - 1]
cmp rdx, 0xf
jbe 0x140003614
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140003823
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140003823
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.140005800
jmp 0x140003614