Function at 0x140011389
Capabilities:
Log keystrokes via polling
Set console window title
Terminate process

Disassembly:
jmp 0x140012ad0
push rbp
push rdi
sub rsp, 0x2e8
lea rbp, [rsp + 0x30]
lea rdi, [rsp + 0x30]
mov ecx, 0x7e
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rax, qword [0x140020008]
xor rax, rbp
mov qword [rbp + 0x2a0], rax
lea rcx, [0x1400260f6]
call fcn.1400114d8
xor ecx, ecx
call fcn.140013160
mov qword [rbp + 8], rax
lea rcx, [rbp + 8]
call fcn.140012a80
mov qword [rbp + 0x28], rax
mov rax, qword [rbp + 0x28]
mov eax, dword [rax + 8]
mov dword [rbp + 0x44], eax
mov rax, qword [rbp + 0x28]
mov eax, dword [rax + 4]
mov dword [rbp + 0x64], eax
mov rax, qword [rbp + 0x28]
mov eax, dword [rax]
mov dword [rbp + 0x84], eax
xor edx, edx
mov ecx, 7
call fcn.140011230
xor edx, edx
mov ecx, 0xc
call fcn.140011230
xor edx, edx
lea rcx, str.LWJGL
call qword [sym.imp.USER32.dll_FindWindowA]
mov qword [rbp + 0xa8], rax
cmp qword [rbp + 0xa8], 0
je 0x140012b8a
mov ecx, 0x1f4
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140012bc3
lea rdx, str.Minecraft_not_found_
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001109b
lea rdx, [0x140011041]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x9c4
call qword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, 0xffffffff
call qword [sym.imp.ucrtbased.dll_exit]
xor edx, edx
mov ecx, 7
call fcn.140011230
xor edx, edx
mov ecx, 0xf
call fcn.140011230
lea rax, str.Minecraft_1.8.9___SonOyuncu_Client
mov qword [rbp + 0xc8], rax
mov dword [rsp + 0x28], 0
mov qword [rsp + 0x20], 0
mov r9d, 0xffffffff
mov r8, qword [rbp + 0xc8]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [rbp + 0xe4], eax
movsxd rax, dword [rbp + 0xe4]
mov qword [rbp + 0x298], rax
mov eax, 2
mov rcx, qword [rbp + 0x298]
mul rcx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.14001123a
mov qword [rbp + 0x288], rax
mov rax, qword [rbp + 0x288]
mov qword [rbp + 0x108], rax
mov eax, dword [rbp + 0xe4]
mov dword [rsp + 0x28], eax
mov rax, qword [rbp + 0x108]
mov qword [rsp + 0x20], rax
mov r9d, 0xffffffff
mov r8, qword [rbp + 0xc8]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov rax, qword [rbp + 0x108]
mov qword [rbp + 0x128], rax
mov rcx, qword [rbp + 0x128]
call qword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
lea rdx, [0x14001ce6c]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001109b
mov edx, dword [rbp + 0x44]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
lea rdx, [0x14001ce48]
mov rcx, rax
call fcn.14001109b
mov edx, dword [rbp + 0x64]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
lea rdx, [0x14001ce48]
mov rcx, rax
call fcn.14001109b
mov edx, dword [rbp + 0x84]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
lea rdx, str.__Activate_Speed__V_
mov rcx, rax
call fcn.14001109b
lea rdx, [0x140011041]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [0x14001ce6c]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001109b
mov edx, dword [rbp + 0x44]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
lea rdx, [0x14001ce48]
mov rcx, rax
call fcn.14001109b
mov edx, dword [rbp + 0x64]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
lea rdx, [0x14001ce48]
mov rcx, rax
call fcn.14001109b
mov edx, dword [rbp + 0x84]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
lea rdx, str.__Deactivate_Speed__F_
mov rcx, rax
call fcn.14001109b
lea rdx, [0x140011041]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, [rbp + 0x144]
mov rcx, qword [rbp + 0xa8]
call qword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov r8d, dword [rbp + 0x144]
xor edx, edx
mov ecx, 0x1fffff
call qword [sym.imp.KERNEL32.dll_OpenProcess]
mov qword [rbp + 0x168], rax
xor eax, eax
cmp eax, 1
je 0x140012fd2
mov ecx, 0x56
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x140012eca
mov rax, qword [rbp + 0x168]
mov qword [rsp + 0x20], rax
mov r9d, 0x9000000
mov r8d, 0x1000000
lea rdx, str.xxxxxxxx
lea rcx, [0x14001cea8]
call fcn.1400112e9
mov qword [rbp + 0x188], rax
mov qword [rsp + 0x20], 0
mov r9d, 8
lea r8, [0x14001ceb8]
mov rdx, qword [rbp + 0x188]
mov rcx, qword [rbp + 0x168]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
xor edx, edx
mov ecx, 0xf
call fcn.140011230
lea rdx, [0x14001ce6c]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001109b
mov edx, dword [rbp + 0x44]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
lea rdx, [0x14001ce48]
mov rcx, rax
call fcn.14001109b
mov edx, dword [rbp + 0x64]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
lea rdx, [0x14001ce48]
mov rcx, rax
call fcn.14001109b
mov edx, dword [rbp + 0x84]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
lea rdx, str.__Speed_Active
mov rcx, rax
call fcn.14001109b
lea rdx, [0x140011041]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 0x46
call qword [sym.imp.USER32.dll_GetAsyncKeyState]
cwde
and eax, 0x8000
test eax, eax
je 0x140012fc2
mov rax, qword [rbp + 0x168]
mov qword [rsp + 0x20], rax
mov r9d, 0x9000000
mov r8d, 0x1000000
lea rdx, str.xxxxxxxx
lea rcx, [0x14001ceb8]
call fcn.1400112e9
mov qword [rbp + 0x1a8], rax
mov qword [rsp + 0x20], 0
mov r9d, 8
lea r8, [0x14001cea8]
mov rdx, qword [rbp + 0x1a8]
mov rcx, qword [rbp + 0x168]
call qword [sym.imp.KERNEL32.dll_WriteProcessMemory]
xor edx, edx
mov ecx, 0xf
call fcn.140011230
lea rdx, [0x14001ce6c]
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
call fcn.14001109b
mov edx, dword [rbp + 0x44]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
lea rdx, [0x14001ce48]
mov rcx, rax
call fcn.14001109b
mov edx, dword [rbp + 0x64]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
lea rdx, [0x14001ce48]
mov rcx, rax
call fcn.14001109b
mov edx, dword [rbp + 0x84]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___int____ptr64]
lea rdx, str.__Speed_Deactive
mov rcx, rax
call fcn.14001109b
lea rdx, [0x140011041]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
mov ecx, 1
call qword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x140012dc7
lea rcx, [rbp - 0x30]
lea rdx, [0x14001cd60]
call fcn.140011442
mov rcx, qword [rbp + 0x2a0]
xor rcx, rbp
call fcn.140011285
lea rsp, [rbp + 0x2b8]
pop rdi
pop rbp
ret