Function at 0x140012af0
Capabilities:
Create process on windows
Create thread
Inject thread
Set console window title

Disassembly:
jmp 0x14002b5b0
push rbp
push rdi
sub rsp, 0xa88
lea rbp, [rsp + 0x50]
lea rdi, [rsp + 0x50]
mov ecx, 0x1ce
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x140045040]
xor rax, rbp
mov qword [rbp + 0xa28], rax
lea rcx, [0x14004d107]
call fcn.140013018
lea rcx, [0x140014360]
call fcn.140012631
lea rcx, [0x14003cea5]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
mov dword [rbp + 4], 0x78
lea rcx, [rbp + 0x28]
call fcn.140012ff0
nop
lea rcx, [rbp + 0x68]
call fcn.140012ff0
nop
lea rcx, [rbp + 0x28]
call fcn.1400123e8
movzx eax, al
test eax, eax
jne 0x14002b665
lea rcx, str.Game_not_found_in_any_subfolders___did_you_put_the_unlocker_in_the_right_place__n
call fcn.14001278a
mov dword [rbp + 0x7e4], 0
lea rcx, [rbp + 0x68]
call fcn.1400122ee
nop
lea rcx, [rbp + 0x28]
call fcn.1400122ee
mov eax, dword [rbp + 0x7e4]
jmp 0x14002bb9c
lea rcx, [rbp + 0x28]
call fcn.140012181
mov rdx, rax
lea rcx, str.Game:__s_n_n
call fcn.14001278a
mov r8, 0xffffffffffffffff
lea rdx, [0x14003d298]
lea rcx, [rbp + 0x28]
call fcn.140012c1c
mov r9, rax
xor r8d, r8d
lea rdx, [rbp + 0x808]
lea rcx, [rbp + 0x28]
call fcn.140012839
mov qword [rbp + 0xa18], rax
mov rdx, qword [rbp + 0xa18]
lea rcx, [rbp + 0x68]
call fcn.140012465
lea rcx, [rbp + 0x808]
call fcn.1400122ee
lea rax, [rbp + 0xb0]
mov rdi, rax
xor eax, eax
mov ecx, 0x68
rep stosb byte [rdi], al
lea rax, [rbp + 0x138]
mov rdi, rax
xor eax, eax
mov ecx, 0x18
rep stosb byte [rdi], al
lea rcx, [rbp + 0x68]
call fcn.140012181
mov qword [rbp + 0xa18], rax
lea rcx, [rbp + 0x28]
call fcn.140012181
mov qword [rbp + 0xa20], rax
lea rax, [rbp + 0x138]
mov qword [rsp + 0x48], rax
lea rax, [rbp + 0xb0]
mov qword [rsp + 0x40], rax
mov rax, qword [rbp + 0xa18]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov rcx, qword [rbp + 0xa20]
call qword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
jne 0x14002b7e3
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp + 0x164], eax
mov edx, dword [rbp + 0x164]
lea rcx, [rbp + 0x848]
call fcn.140012ea1
mov qword [rbp + 0xa18], rax
mov rcx, qword [rbp + 0xa18]
call fcn.140012181
mov r8, rax
mov edx, dword [rbp + 0x164]
lea rcx, str.CreateProcess_failed___d_:__s
call fcn.14001278a
lea rcx, [rbp + 0x848]
call fcn.1400122ee
mov dword [rbp + 0x884], 0
lea rcx, [rbp + 0x68]
call fcn.1400122ee
nop
lea rcx, [rbp + 0x28]
call fcn.1400122ee
mov eax, dword [rbp + 0x884]
jmp 0x14002bb9c
mov rcx, qword [rbp + 0x140]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [rbp + 0x148]
lea rcx, str.PID:__d_n
call fcn.14001278a
lea rax, [rbp + 0x190]
mov rdi, rax
xor eax, eax
mov ecx, 0x238
rep stosb byte [rdi], al
lea rax, [rbp + 0x8a8]
mov qword [rbp + 0x8e8], rax
lea rdx, str.UnityPlayer.dll
mov rcx, qword [rbp + 0x8e8]
call fcn.14001272b
mov qword [rbp + 0xa18], rax
lea r8, [rbp + 0x190]
mov rdx, qword [rbp + 0xa18]
mov ecx, dword [rbp + 0x148]
call fcn.140013112
movzx eax, al
test eax, eax
jne 0x14002b884
mov dword [rbp + 0x924], 0x64
lea rdx, [rbp + 0x924]
lea rcx, [rbp + 0x908]
call fcn.140012bb8
mov rcx, rax
call fcn.140012d2a
jmp 0x14002b815
mov rax, qword [rbp + 0x1a8]
shr rax, 0x20
mov r8, qword [rbp + 0x1a8]
mov rdx, rax
lea rcx, str.UnityPlayer:__X_X_n
call fcn.14001278a
mov eax, dword [rbp + 0x1b0]
mov r9d, 4
mov r8d, 0x3000
mov edx, eax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov qword [rbp + 0x3e8], rax
cmp qword [rbp + 0x3e8], 0
jne 0x14002b94c
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rbp + 0x404], eax
mov edx, dword [rbp + 0x404]
lea rcx, [rbp + 0x948]
call fcn.140012ea1
mov qword [rbp + 0xa18], rax
mov rcx, qword [rbp + 0xa18]
call fcn.140012181
mov r8, rax
mov edx, dword [rbp + 0x404]
lea rcx, str.VirtualAlloc_failed___d_:__s
call fcn.14001278a
lea rcx, [rbp + 0x948]
call fcn.1400122ee
mov dword [rbp + 0x984], 0
lea rcx, [rbp + 0x68]
call fcn.1400122ee
nop
lea rcx, [rbp + 0x28]
call fcn.1400122ee
mov eax, dword [rbp + 0x984]
jmp 0x14002bb9c
mov eax, dword [rbp + 0x1b0]
mov qword [rsp + 0x20], 0
mov r9d, eax
mov r8, qword [rbp + 0x3e8]
mov rdx, qword [rbp + 0x1a8]
mov rcx, qword [rbp + 0x138]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea rcx, str.Searching_for_pattern..._n
call fcn.14001278a
lea rdx, str.7F_0F_8B_05________
mov rcx, qword [rbp + 0x3e8]
call fcn.1400128b1
mov qword [rbp + 0x428], rax
cmp qword [rbp + 0x428], 0
jne 0x14002b9dd
lea rcx, str.outdated_pattern_n
call fcn.14001278a
mov dword [rbp + 0x9a4], 0
lea rcx, [rbp + 0x68]
call fcn.1400122ee
nop
lea rcx, [rbp + 0x28]
call fcn.1400122ee
mov eax, dword [rbp + 0x9a4]
jmp 0x14002bb9c
mov rax, qword [rbp + 0x428]
add rax, 2
mov qword [rbp + 0x448], rax
mov rax, qword [rbp + 0x448]
mov eax, dword [rax + 2]
mov dword [rbp + 0x464], eax
mov eax, dword [rbp + 0x464]
mov rcx, qword [rbp + 0x448]
lea rax, [rcx + rax + 6]
mov qword [rbp + 0x488], rax
mov rax, qword [rbp + 0x3e8]
mov rcx, qword [rbp + 0x488]
sub rcx, rax
mov rax, rcx
mov qword [rbp + 0x488], rax
mov rdx, qword [rbp + 0x488]
lea rcx, str.Offset:__X_n
call fcn.14001278a
mov rax, qword [rbp + 0x488]
mov rcx, qword [rbp + 0x1a8]
add rcx, rax
mov rax, rcx
mov qword [rbp + 0x488], rax
mov r8d, 0x8000
xor edx, edx
mov rcx, qword [rbp + 0x3e8]
call qword [sym.imp.KERNEL32.dll_VirtualFree]
lea rcx, str.Done_n_n
call fcn.14001278a
mov qword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
lea r9, [rbp + 4]
lea r8, [0x1400121a4]
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateThread]
mov qword [rbp + 0x4a8], rax
cmp qword [rbp + 0x4a8], 0
je 0x14002bac6
mov rcx, qword [rbp + 0x4a8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
cmp eax, 1
je 0x14002bb6c
mov dword [rbp + 0x9e4], 2
lea rdx, [rbp + 0x9e4]
lea rcx, [rbp + 0x9c8]
call fcn.1400123bb
mov rcx, rax
call fcn.140012302
mov dword [rbp + 0x4c4], 0
mov qword [rsp + 0x20], 0
mov r9d, 4
lea r8, [rbp + 0x4c4]
mov rdx, qword [rbp + 0x488]
mov rcx, qword [rbp + 0x138]
call qword [sym.imp.KERNEL32.dll_ReadProcessMemory]
cmp dword [rbp + 0x4c4], 0xffffffff
jne 0x14002bb35
jmp 0x14002bac6
mov eax, dword [rbp + 4]
cmp dword [rbp + 0x4c4], eax
je 0x14002bb67
mov qword [rsp + 0x20], 0
mov r9d, 4
lea r8, [rbp + 4]
mov rdx, qword [rbp + 0x488]
mov rcx, qword [rbp + 0x138]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
jmp 0x14002bac6
mov rcx, qword [rbp + 0x138]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rbp + 0xa04], 0
lea rcx, [rbp + 0x68]
call fcn.1400122ee
nop
lea rcx, [rbp + 0x28]
call fcn.1400122ee
mov eax, dword [rbp + 0xa04]
mov rdi, rax
lea rcx, [rbp - 0x50]
lea rdx, [0x14003b390]
call fcn.140012d57
mov rax, rdi
mov rcx, qword [rbp + 0xa28]
xor rcx, rbp
call fcn.1400127b7
lea rsp, [rbp + 0xa38]
pop rdi
pop rbp
ret