# UnityPlayer 1.0.1

## Meta

| Type              | Value                            |
|-------------------|----------------------------------|
| Size              | 32652400 bytes                   |
| Modification date | 2020-10-14                       |
| md5sum            | 76c77812286e04474b3644b5e1cc26ed |


## Addresses

Warning: Address is not the same as the byte offset in the binary.

| # | Type       | Address   | Description                             |
|---|------------|-----------|-----------------------------------------|
| 1 | func       | 18148c7d0 | mhyprot2.sys init                       |
| ^ | PUSH 40 55 | 18148c7d0 | Patch: `3C` (RET), function skip        |
| 2 | func       | 181bfc533 | Anticheat check routine (1)             |
| ^ | crash      | 181bfc541 | Access violation when skipping mhyprot2 |
| ^ | MOV 8B 28  | 181bfc533 | Patch: `31 ED` (EBP=0)                  |
| 3 | func       | 1814a4f20 | Service control (unclear)               |
| ^ | ptr        | 1814ec0c8 | Pointer to service control function     |
| 4 | func       | 180e23f90 | Windows version getter                  |
| 5 | func       | 1807ab3f0 | printf("...", ...) to terminal          |
| 6 | func       | 180e28430 | Print stack backtrace                   |


Detailed explanation:

**1:** Earliest known OP-Code of this function. Is executed approx. 10 seconds after the "Warning" screen was shown.
