Function at 0x140001d20
Capabilities:
Parse pe header

Disassembly:
push rbp
sub rsp, 0x70
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x60], rax
call fcn.1400010b0
mov rbp, rax
test rax, rax
jne 0x140001d5c
lea rax, str.____Invalid_Library
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.1400029c0
add rsp, 0x70
pop rbp
ret
mov eax, 0x5a4d
mov qword [rsp + 0x88], rsi
cmp word [rbp], ax
jne 0x140002007
movsxd rsi, dword [rbp + 0x3c]
add rsi, rbp
cmp dword [rsi], 0x4550
jne 0x140002007
mov qword [rsp + 0x80], rbx
mov qword [rsp + 0x90], rdi
mov qword [rsp + 0x98], r14
xor r14d, r14d
mov ebx, r14d
mov edi, r14d
test edi, edi
je 0x140001daf
test ebx, ebx
jne 0x140001df3
xor edx, edx
mov dword [rsp + 0x40], r14d
lea rcx, str.UnityWndClass
call qword [sym.imp.USER32.dll_FindWindowA]
mov rcx, rax
mov qword [0x14003e328], rax
lea rdx, [rsp + 0x40]
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov edi, dword [rsp + 0x40]
mov ebx, eax
test edi, edi
je 0x140001de6
test eax, eax
jne 0x140001e2d
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140001da7
lea rax, str.Unknown_error
mov rdi, qword [rsp + 0x90]
mov rbx, qword [rsp + 0x80]
mov r14, qword [rsp + 0x98]
mov rsi, qword [rsp + 0x88]
mov rcx, qword [rsp + 0x60]
xor rcx, rsp
call fcn.1400029c0
add rsp, 0x70
pop rbp
ret
mov dword [0x14003e340], edi
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor r9d, r9d
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], r14d
lea rcx, str..SOSI4
mov edx, 0xc0000000
mov dword [0x14003e334], eax
mov dword [rsp + 0x20], 3
lea r8d, [r9 + 3]
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov qword [0x14003e338], rax
cmp rax, 0xffffffffffffffff
jne 0x140001e8c
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rax, str.____Failed_to_Load_the_Driver_
jmp 0x140001dfa
mov ecx, dword [rsi + 0x50]
call fcn.140001000
mov r8, rsi
mov rdx, rbp
mov rcx, rax
mov rdi, rax
call fcn.140001730
test eax, eax
jne 0x140001f26
mov r10, qword [0x14003e338]
cmp r10, 0xffffffffffffffff
je 0x140001f1a
mov eax, dword [rsi + 0x50]
lea r8, [rsp + 0x48]
mov ecx, dword [0x14003e340]
mov r9d, 0x18
mov qword [rsp + 0x38], r14
mov edx, 0x220400
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x48], ecx
mov rcx, r10
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
mov dword [rsp + 0x4c], 0x8000
mov qword [rsp + 0x50], rdi
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rcx, qword [0x14003e338]
cmp rcx, 0xffffffffffffffff
je 0x140001f1a
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rax, str.____Relocation_Failed_
jmp 0x140001dfa
mov r8, rsi
mov rdx, rbp
mov ecx, ebx
call fcn.1400018c0
test eax, eax
jne 0x140001fb1
mov rcx, qword [0x14003e338]
cmp rcx, 0xffffffffffffffff
je 0x140001fa5
mov eax, dword [0x14003e340]
lea r8, [rsp + 0x48]
mov dword [rsp + 0x48], eax
mov r9d, 0x18
mov eax, dword [rsi + 0x50]
mov edx, 0x220400
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x40]
mov qword [rsp + 0x30], rax
mov dword [rsp + 0x28], r14d
mov qword [rsp + 0x20], r14
mov dword [rsp + 0x4c], 0x8000
mov qword [rsp + 0x50], rdi
call qword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov rcx, qword [0x14003e338]
cmp rcx, 0xffffffffffffffff
je 0x140001fa5
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rax, str.Import_Failed_
jmp 0x140001dfa
mov r8, rsi
mov rdx, rbp
mov rcx, rdi
call fcn.140001b10
mov r8, rsi
mov rdx, rdi
mov ecx, ebx
call fcn.140001450
mov rdx, rsi
mov rcx, rdi
call fcn.140001c00
xor edx, edx
mov r8d, 0x8000
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rcx, qword [0x14003e338]
cmp rcx, 0xffffffffffffffff
je 0x140001ffb
call qword [sym.imp.KERNEL32.dll_CloseHandle]
lea rax, str.___Injector:_Inject_success_
jmp 0x140001dfa
lea rax, str.____Invalid_PE_Header
jmp 0x140001e12