Function at 0x4560b0
Capabilities:
Link many functions at runtime

Disassembly:
sub esp, 8
mov eax, dword [0x56a040]
xor eax, esp
mov dword [esp + 4], eax
push ebx
push ebp
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, ecx
push str.ChangeWindow
push esi
call edi
mov dword [fcn.00404a00], eax
test eax, eax
jne 0x4560e5
mov dword [fcn.00404a00], 0x404a00
push 0x54f81c
push esi
call edi
mov dword [fcn.00404a00], eax
test eax, eax
jne 0x456100
mov dword [fcn.00404a00], 0x404a00
push 0x54f810
push esi
call edi
mov dword [0x22c2fa0], eax
test eax, eax
jne 0x456116
mov dword [0x22c2fa0], eax
push 0x54f804
push esi
call edi
mov dword [0x22c3018], eax
test eax, eax
jne 0x45612c
mov dword [0x22c3018], eax
push 0x54f864
push esi
call edi
mov dword [0x22c2f28], eax
test eax, eax
jne 0x456142
mov dword [0x22c2f28], eax
push 0x54f858
push esi
call edi
mov dword [method.std::codecvt_char__char__struct__Mbstatet_.virtual_16], eax
test eax, eax
jne 0x45615d
mov dword [method.std::codecvt_char__char__struct__Mbstatet_.virtual_16], 0x4560a0
push str.ProcessDList
push esi
call edi
mov dword [fcn.00404a00], eax
test eax, eax
jne 0x456178
mov dword [fcn.00404a00], 0x404a00
push str.ProcessRDPList
push esi
call edi
mov dword [fcn.00404a00], eax
test eax, eax
jne 0x456193
mov dword [fcn.00404a00], 0x404a00
push 0x54f88c
push esi
call edi
mov dword [fcn.00404a00], eax
test eax, eax
jne 0x4561ae
mov dword [fcn.00404a00], 0x404a00
push 0x54f884
push esi
call edi
mov dword [fcn.00404a00], eax
test eax, eax
jne 0x4561c9
mov dword [fcn.00404a00], 0x404a00
push str.ShowCFB
push esi
call edi
mov dword [fcn.00404a00], eax
test eax, eax
jne 0x4561e4
mov dword [fcn.00404a00], 0x404a00
push str.UpdateScreen
push esi
call edi
mov dword [fcn.00404a00], eax
test eax, eax
jne 0x4561ff
mov dword [fcn.00404a00], 0x404a00
push str.ViStatusChanged
push esi
call edi
mov dword [fcn.00404a00], eax
test eax, eax
jne 0x45621a
mov dword [fcn.00404a00], 0x404a00
push str.ViWidthChanged
push esi
call edi
mov dword [fcn.00404a00], eax
test eax, eax
jne 0x456235
mov dword [fcn.00404a00], 0x404a00
push str.MoveScreen
push esi
call edi
mov dword [0x22c30bc], eax
test eax, eax
jne 0x456250
mov dword [0x22c30bc], fcn.00404a00
push str.CaptureScreen
push esi
call edi
mov dword [0x22c30b8], eax
test eax, eax
jne 0x456266
mov dword [0x22c30b8], eax
push str.ReadScreen
push esi
call edi
mov dword [0x22c30c0], eax
test eax, eax
jne 0x456284
push str.ReadScreen2
push esi
call edi
mov dword [0x22c30c0], eax
push str.mge_get_video_size
push esi
call edi
mov dword [0x22c30b0], eax
test eax, eax
jne 0x45629a
mov dword [0x22c30b0], eax
push str.mge_read_video
push esi
call edi
mov dword [0x22c30b4], eax
test eax, eax
jne 0x4562b0
mov dword [0x22c30b4], eax
push str.FBRead
push esi
call edi
mov dword [fcn.00404a00], eax
test eax, eax
jne 0x4562cb
mov dword [fcn.00404a00], 0x404a00
push str.FBWrite
push esi
call edi
mov dword [fcn.00404a00], eax
test eax, eax
jne 0x4562e6
mov dword [fcn.00404a00], 0x404a00
push str.FBGetFrameBufferInfo
push esi
call edi
mov dword [fcn.00404a00], eax
test eax, eax
jne 0x456301
mov dword [fcn.00404a00], 0x404a00
push str.DllCrtFree
push esi
call edi
test eax, eax
jne 0x456359
push eax
lea eax, [esp + 0x14]
push eax
push 1
push 1
push esi
call dword [sym.imp.dbghelp.dll_ImageDirectoryEntryToDataEx]
mov ebx, eax
test ebx, ebx
je 0x456354
cmp dword [ebx], 0
je 0x456354
mov ebp, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
nop
mov eax, dword [ebx + 0xc]
test eax, eax
je 0x456354
add eax, esi
push eax
call ebp
test eax, eax
je 0x45634c
push str.free
push eax
call edi
test eax, eax
jne 0x456359
add ebx, 0x14
cmp dword [ebx], 0
jne 0x456330
mov eax, fcn.004df21f
mov dword [0x22c30c4], eax
mov eax, dword [0x67355c]
mov dword [0x22c2e70], eax
xor eax, eax
cmp dword [0x27d6d8c], eax
mov dword [0x22c2e78], 1
cmovne eax, dword [0x67353c]
sub esp, 0x7c
mov dword [0x22c2e74], eax
mov eax, dword [0x27c3c80]
mov dword [0x22c2e7c], eax
mov eax, dword [0x56ac10]
mov dword [0x22c2e88], eax
mov eax, esp
mov dword [0x22c2e80], 0x8bdfc0
mov dword [0x22c2e84], 0x67b5c0
mov dword [0x22c2e8c], 0x79de6c
vmovdqu ymm0, ymmword [0x22c2e70]
vmovdqu ymmword [eax], ymm0
mov dword [0x22c2e90], 0x87df40
mov dword [0x22c2e94], 0x87df44
mov dword [0x22c2e98], 0x87df48
mov dword [0x22c2e9c], 0x87df50
mov dword [0x22c2ea0], 0x87df60
mov dword [0x22c2ea4], 0x87df64
mov dword [0x22c2ea8], 0x87df68
mov dword [0x22c2eac], 0x87df6c
vmovdqu ymm0, ymmword [0x22c2e90]
vmovdqu ymmword [eax + 0x20], ymm0
mov dword [0x22c2eb0], 0x81de84
mov dword [0x22c2eb4], 0x81de88
mov dword [0x22c2eb8], 0x81de8c
mov dword [0x22c2ebc], 0x81de90
mov dword [0x22c2ec0], 0x81de94
mov dword [0x22c2ec4], 0x81de98
mov dword [0x22c2ec8], 0x81de9c
mov dword [0x22c2ecc], 0x81dea0
vmovdqu ymm0, ymmword [0x22c2eb0]
vmovdqu ymmword [eax + 0x40], ymm0
mov dword [0x22c2ed0], 0x81dea4
mov dword [0x22c2ed4], 0x81dea8
mov dword [0x22c2ed8], 0x81deac
mov dword [0x22c2edc], 0x81deb0
vmovdqu xmm0, xmmword [0x22c2ed0]
vmovdqu xmmword [eax + 0x60], xmm0
mov dword [0x22c2ee0], 0x81deb4
mov dword [0x22c2ee4], 0x81deb8
vmovq xmm0, qword [0x22c2ee0]
vmovq qword [eax + 0x70], xmm0
mov dword [0x22c2ee8], 0x404a00
mov dword [eax + 0x78], fcn.00404a00
vzeroupper
call dword [0x56ce24]
mov ecx, dword [esp + 0x90]
add esp, 0x7c
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.004d7bf5
add esp, 8
ret