Function at 0x140004bc0
Capabilities:
Encode data using xor
Get file size
Read file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xa0
mov rax, qword [0x140011040]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov r14, rcx
xor ebx, ebx
mov qword [rsp + 0x30], rbx
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 3
xor r9d, r9d
xor r8d, r8d
mov edx, 0x80000000
lea rcx, str.C:UsersUtilizadorDesktopTestRobloxInjectorx64DebugInjectDll.dll
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rsi, rax
cmp rax, 0xffffffffffffffff
jne 0x140004dc9
lea rdx, str.C:UsersUtilizadorDesktopTestRobloxInjectorx64DebugInjectDll.dll
lea rcx, [rbp + 7]
call fcn.14000a100
mov rdi, rax
mov r8, qword [rax + 0x10]
mov rcx, qword [rax + 0x18]
mov rax, rcx
sub rax, r8
cmp rax, 0x14
jb 0x140004cd7
lea rax, [r8 + 0x14]
mov qword [rdi + 0x10], rax
mov rsi, rdi
cmp rcx, 0xf
jbe 0x140004c6a
mov rsi, qword [rdi]
lea rax, [0x14000cc84]
mov r14d, 0x14
lea r12, str.DLL_file_not_found:
cmp rax, rsi
jbe 0x140004c9e
lea rax, [rsi + r8]
cmp r12, rax
ja 0x140004c9e
cmp rsi, r12
ja 0x140004c96
mov r15, rbx
jmp 0x140004ca1
mov r15, rsi
sub r15, r12
jmp 0x140004ca1
mov r15, r14
lea rcx, [rsi + 0x14]
inc r8
mov rdx, rsi
call sub.VCRUNTIME140.dll_memmove
mov r8, r15
mov rdx, r12
mov rcx, rsi
call sub.VCRUNTIME140.dll_memcpy
lea rcx, [rsi + r15]
sub r14, r15
lea rdx, [r12 + 0x14]
add rdx, r15
mov r8, r14
call sub.VCRUNTIME140.dll_memcpy
jmp 0x140004cfc
mov r14d, 0x14
mov qword [rsp + 0x28], r14
lea r12, str.DLL_file_not_found:
mov qword [rsp + 0x20], r12
mov edx, r14d
mov rcx, rdi
call fcn.1400098c0
mov rdi, rax
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
mov qword [rbp - 9], rbx
mov qword [rbp - 1], rbx
movups xmm0, xmmword [rdi]
movups xmmword [rbp - 0x19], xmm0
movups xmm1, xmmword [rdi + 0x10]
movups xmmword [rbp - 9], xmm1
mov qword [rdi + 0x10], rbx
mov qword [rdi + 0x18], 0xf
mov byte [rdi], 0
lea rcx, [rbp - 0x19]
call fcn.140001160
nop
mov rdx, qword [rbp - 1]
cmp rdx, 0xf
jbe 0x140004d71
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004d6c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004d6c
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000a8c0
mov qword [rbp - 9], rbx
mov qword [rbp - 1], 0xf
mov byte [rbp - 0x19], 0
mov rdx, qword [rbp + 0x1f]
cmp rdx, 0xf
jbe 0x140004dbf
inc rdx
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004dba
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004dba
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000a8c0
mov eax, 0xffffffff
jmp 0x140004f8b
xor edx, edx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GetFileSize]
mov r12d, eax
cmp eax, 0xffffffff
jne 0x140004e9e
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
mov qword [rbp - 9], rbx
mov qword [rbp - 1], 0xf
mov ecx, 0x20
call fcn.14000a8c8
mov rcx, rax
mov qword [rbp - 0x19], rax
mov qword [rbp - 9], 0x1b
mov qword [rbp - 1], 0x1f
movups xmm0, xmmword [str.Failed_to_get_DLL_file_size]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x14000cc98]
movsd qword [rax + 0x10], xmm0
movzx eax, word [0x14000cca0]
mov word [rcx + 0x18], ax
movzx eax, byte [0x14000cca2]
mov byte [rcx + 0x1a], al
mov byte [rcx + 0x1b], bl
lea rcx, [rbp - 0x19]
call fcn.140001160
nop
mov rdx, qword [rbp - 1]
cmp rdx, 0xf
jbe 0x140004e8b
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004e86
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004e86
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000a8c0
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 0xffffffff
jmp 0x140004f8b
mov rcx, r12
call fcn.14000a930
mov r15, rax
mov qword [rbp - 0x21], rax
mov qword [rsp + 0x20], rbx
lea r9, [rbp - 0x29]
mov r8d, r12d
mov rdx, rax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x140004fb3
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
mov qword [rbp - 9], rbx
mov qword [rbp - 1], 0xf
lea ecx, [rax + 0x20]
call fcn.14000a8c8
mov rcx, rax
mov qword [rbp - 0x19], rax
mov qword [rbp - 9], 0x17
mov qword [rbp - 1], 0x1f
movups xmm0, xmmword [str.Failed_to_read_DLL_file]
movups xmmword [rax], xmm0
mov eax, dword [0x14000ccb8]
mov dword [rcx + 0x10], eax
movzx eax, word [0x14000ccbc]
mov word [rcx + 0x14], ax
movzx eax, byte [0x14000ccbe]
mov byte [rcx + 0x16], al
mov byte [rcx + 0x17], 0
lea rcx, [rbp - 0x19]
call fcn.140001160
nop
mov rdx, qword [rbp - 1]
cmp rdx, 0xf
jbe 0x140004f73
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140004f6e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140004f6e
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000a8c0
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov ebx, 0xffffffff
mov rcx, r15
call fcn.14000a8c0
mov eax, ebx
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.14000a660
lea r11, [rsp + 0xa0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r12
pop rdi
pop rbp
ret
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rdx, r12
mov rcx, r14
call fcn.140003210
mov rsi, rax
test rax, rax
je 0x140004f7c
movdqa xmm2, xmmword [str.UUUUUUUUUUUUUUUU_]
mov rdx, rbx
test r12d, r12d
je 0x14000506d
cmp r12, 0x40
jb 0x140005050
mov rcx, r12
and rcx, 0xffffffffffffffc0
lea rax, [r15 + 0x20]
nop dword [rax]
nop dword [rax + rax]
movdqu xmm0, xmmword [rax - 0x20]
xorps xmm0, xmm2
movdqu xmmword [rax - 0x20], xmm0
movdqu xmm0, xmmword [rax - 0x10]
movdqa xmm1, xmm2
xorps xmm1, xmm0
movdqu xmmword [rax - 0x10], xmm1
movdqu xmm0, xmmword [rax]
movdqa xmm1, xmm2
xorps xmm1, xmm0
movdqu xmmword [rax], xmm1
movdqu xmm0, xmmword [rax + 0x10]
movdqa xmm1, xmm2
xorps xmm1, xmm0
movdqu xmmword [rax + 0x10], xmm1
add rdx, 0x40
lea rax, [rax + 0x40]
cmp rdx, rcx
jb 0x140005000
cmp rdx, r12
jae 0x14000506d
lea rax, [rdx + r15]
mov rcx, r12
sub rcx, rdx
nop word [rax + rax]
xor byte [rax], 0x55
lea rax, [rax + 1]
sub rcx, 1
jne 0x140005060
mov r9, r12
mov r8, r15
mov rdx, rsi
mov rcx, r14
call fcn.1400034d0
test al, al
je 0x140004f7c
mov rdx, rsi
mov rcx, r14
call fcn.140003770
test al, al
jne 0x14000514d
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
mov qword [rbp - 9], rbx
mov qword [rbp - 1], 0xf
mov ecx, 0x20
call fcn.14000a8c8
mov rcx, rax
mov qword [rbp - 0x19], rax
mov qword [rbp - 9], 0x1e
mov qword [rbp - 1], 0x1f
movups xmm0, xmmword [str.Failed_to_verify_DLL_injection]
movups xmmword [rax], xmm0
movsd xmm0, qword [0x14000ccd0]
movsd qword [rax + 0x10], xmm0
mov eax, dword [0x14000ccd8]
mov dword [rcx + 0x18], eax
movzx eax, word [0x14000ccdc]
mov word [rcx + 0x1c], ax
mov byte [rcx + 0x1e], 0
lea rcx, [rbp - 0x19]
call fcn.140001160
nop
mov rdx, qword [rbp - 1]
cmp rdx, 0xf
jbe 0x140004f7c
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005143
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005143
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000a8c0
jmp 0x140004f7c
mov rdx, rsi
mov rcx, r14
call fcn.140003f30
mov rdx, rsi
mov rcx, r14
call fcn.1400044c0
lea rdx, [rsi + 0x1000]
mov rcx, r14
call fcn.140004830
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
test al, al
jne 0x140005216
mov qword [rbp - 9], rbx
mov qword [rbp - 1], 0xf
mov ecx, 0x20
call fcn.14000a8c8
mov rcx, rax
mov qword [rbp - 0x19], rax
mov r14d, 0x14
mov qword [rbp - 9], r14
mov qword [rbp - 1], 0x1f
movups xmm0, xmmword [str.APC_injection_failed]
movups xmmword [rax], xmm0
mov eax, dword [0x14000ccf0]
mov dword [rcx + 0x10], eax
mov byte [rcx + 0x14], 0
lea rcx, [rbp - 0x19]
call fcn.140001160
nop
mov rdx, qword [rbp - 1]
cmp rdx, 0xf
jbe 0x140004f7c
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140005143
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140005143
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov ecx, 0x40
call fcn.14000a8c8
mov qword [rbp - 0x19], rax
mov qword [rbp - 9], 0x38
mov qword [rbp - 1], 0x3f
movups xmm0, xmmword [str.Manual_mapping_and_PEB_unlinking_completed_successfully.]
movups xmmword [rax], xmm0
movups xmm1, xmmword [0x14000cd08]
movups xmmword [rax + 0x10], xmm1
movups xmm0, xmmword [0x14000cd18]
movups xmmword [rax + 0x20], xmm0
movsd xmm0, qword [0x14000cd28]
movsd qword [rax + 0x30], xmm0
mov byte [rax + 0x38], 0
lea rcx, [rbp - 0x19]
call fcn.140001720
nop
mov rdx, qword [rbp - 1]
cmp rdx, 0xf
jbe 0x140004f81
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400052ac
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x1400052ac
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
call fcn.14000a8c0
jmp 0x140004f81