Function at 0x47656c
Capabilities:
Check for unmoving mouse cursor

Disassembly:
push 0xffffffffffffffff
push 0x49ea67
mov eax, dword fs:[0]
push eax
mov eax, 0x12f4
call fcn.00488420
mov eax, dword [0x4cacfc]
xor eax, esp
mov dword [esp + 0x12f0], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4cacfc]
xor eax, esp
push eax
lea eax, [esp + 0x1308]
mov dword fs:[0], eax
mov esi, dword [esp + 0x1318]
mov ebx, ecx
push 0x4a745c
mov ecx, esi
mov dword [esp + 0x18], ebx
call fcn.004023a0
mov ebp, dword [sym.imp.USER32.dll_GetCursorPos]
test al, al
je 0x476612
lea ecx, [esp + 0xac]
call fcn.004775e0
xor edi, edi
push edi
push connect
push connect
push connect
push connect
push 0x81
push 0x96c80000
push edi
push edi
lea ecx, [esp + 0xd0]
mov dword [esp + 0x1334], edi
call fcn.00401370
mov ecx, dword [esi + 0x108]
mov eax, dword [ecx]
mov edx, dword [eax + 0x24]
call edx
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x24]
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x24]
call eax
cmp eax, dword [0x4ce30c]
jne 0x4763db
push 0x65
push 0x4a7474
lea ecx, [esp + 0xb4]
call fcn.00477530
push 0x66
push 0x4a7480
lea ecx, [esp + 0xb4]
call fcn.00477530
push 0x67
push 0x4a748c
lea ecx, [esp + 0xb4]
call fcn.00477530
push 0x68
push 0x4a7498
lea ecx, [esp + 0xb4]
call fcn.00477530
push 0x69
push 0x4a74a8
lea ecx, [esp + 0xb4]
call fcn.00477530
push 0x6a
push 0x4a74b8
lea ecx, [esp + 0xb4]
call fcn.00477530
push 0x6b
push 0x4a74c8
lea ecx, [esp + 0xb4]
call fcn.00477530
push 0x6c
push 0x4a74d8
lea ecx, [esp + 0xb4]
call fcn.00477530
push 0x6d
push str.ping
lea ecx, [esp + 0xb4]
call fcn.00477530
push 0x6e
push 0x4a74f8
lea ecx, [esp + 0xb4]
call fcn.00477530
mov edi, 0x118
jmp 0x4764cf
mov ecx, dword [esi + 0x108]
mov edx, dword [ecx]
mov eax, dword [edx + 0x24]
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x24]
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x24]
call eax
cmp eax, dword [0x4ce310]
jne 0x476461
push 0xc9
push 0x4a7504
lea ecx, [esp + 0xb4]
call fcn.00477530
push 0xca
push 0x4a7514
lea ecx, [esp + 0xb4]
call fcn.00477530
push 0xcb
push 0x4a7524
lea ecx, [esp + 0xb4]
call fcn.00477530
push 0xcc
push 0x4a7534
lea ecx, [esp + 0xb4]
call fcn.00477530
mov edi, 0x70
jmp 0x4764cf
mov ecx, dword [esi + 0x108]
mov edx, dword [ecx]
mov eax, dword [edx + 0x24]
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x24]
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x24]
call eax
cmp eax, dword [0x4ce308]
jne 0x4764cf
push 0x12d
push 0x4a7544
lea ecx, [esp + 0xb4]
call fcn.00477530
push 0x12e
push 0x4a7550
lea ecx, [esp + 0xb4]
call fcn.00477530
push 0x12f
push 0x4a755c
lea ecx, [esp + 0xb4]
call fcn.00477530
mov edi, 0x54
lea ecx, [esp + 0x18]
call fcn.00401c50
lea ecx, [esp + 0x18]
push ecx
call ebp
mov edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x18]
push 0x40
push edi
push 0x8c
push edx
push eax
push 0
lea ecx, [esp + 0xc4]
call fcn.00414dc0
mov edi, dword [sym.imp.USER32.dll_SetWindowPos]
push eax
call edi
lea ecx, [esp + 0xac]
call fcn.00401480
cmp eax, 1
jne case.0x47653e.111
lea ecx, [esp + 0xac]
call fcn.004774a0
add eax, 0xffffff9b
cmp eax, 0xca
ja case.0x47653e.111
movzx ecx, byte [eax + 0x476b90]
jmp dword [ecx*4 + 0x476b48]
lea ecx, [ebx - 0x20]
call fcn.00472290
jmp case.0x47653e.111
lea ecx, [ebx - 0x20]
call fcn.004723e0
jmp case.0x47653e.111
lea ecx, [ebx - 0x20]
call fcn.00472600
jmp case.0x47653e.111
lea ecx, [ebx - 0x20]
call fcn.00473650
jmp case.0x47653e.111
lea ecx, [ebx - 0x20]
call fcn.00473850
jmp case.0x47653e.111
lea ecx, [ebx - 0x20]
call fcn.004714d0
jmp case.0x47653e.111
lea ecx, [ebx - 0x20]
call fcn.004739f0
jmp case.0x47653e.111
lea ecx, [ebx - 0x20]
call fcn.00473cd0
jmp case.0x47653e.111
lea ecx, [ebx - 0x20]
call fcn.00474350
jmp case.0x47653e.111
lea ecx, [ebx - 0x20]
call fcn.00474560
jmp case.0x47653e.111
lea ecx, [ebx - 0x20]
call fcn.00472b30
jmp case.0x47653e.111
lea ecx, [ebx - 0x20]
call fcn.004740a0
jmp case.0x47653e.111
lea ecx, [ebx - 0x20]
call fcn.00472c70
jmp case.0x47653e.111
lea ecx, [ebx - 0x20]
call fcn.00472e90
jmp case.0x47653e.111
lea ecx, [ebx - 0x20]
call fcn.004731b0
jmp case.0x47653e.111
lea ecx, [ebx - 0x20]
call fcn.004731e0
jmp case.0x47653e.111
lea ecx, [ebx - 0x20]
call fcn.00473390
lea ecx, [esp + 0xac]
mov dword [esp + 0x1310], 0xffffffff
call fcn.00477620
jmp 0x476618
mov edi, dword [sym.imp.USER32.dll_SetWindowPos]
push 0x4a7568
mov ecx, esi
call fcn.004023a0
test al, al
je 0x476b13
mov ecx, dword [esi + 0x108]
mov edx, dword [ecx]
mov edx, dword [edx + 4]
lea eax, [esp + 0x28]
push eax
call edx
push str.btn_about
mov ecx, eax
mov dword [esp + 0x1314], 1
call fcn.004023a0
lea ecx, [esp + 0x28]
mov bl, al
mov dword [esp + 0x1310], 0xffffffff
call fcn.00401fd0
test bl, bl
je 0x4769a9
lea ecx, [esp + 0xac]
call fcn.004775e0
push 0
push connect
push connect
push connect
push connect
push 0x81
push 0x96c80000
push 0
push 0
lea ecx, [esp + 0xd0]
mov dword [esp + 0x1334], 2
call fcn.00401370
push 0x65
push str._g:g_u7b
lea ecx, [esp + 0xb4]
call fcn.00477530
push 0x66
push 0x4a7598
lea ecx, [esp + 0xb4]
call fcn.00477530
push 0x67
push 0x4a75a8
lea ecx, [esp + 0xb4]
call fcn.00477530
push 0x68
push 0x4a75b8
lea ecx, [esp + 0xb4]
call fcn.00477530
push 0x69
push 0x4a75c8
lea ecx, [esp + 0xb4]
call fcn.00477530
push 0x6a
push 0x4a75d8
lea ecx, [esp + 0xb4]
call fcn.00477530
push 0x6b
push 0x4a75e8
lea ecx, [esp + 0xb4]
call fcn.00477530
push 0x6c
push 0x4a75fc
lea ecx, [esp + 0xb4]
call fcn.00477530
push 0x6d
push 0x4a7610
lea ecx, [esp + 0xb4]
call fcn.00477530
push 0x6e
push 0x4a762c
lea ecx, [esp + 0xb4]
call fcn.00477530
push 0x6f
push 0x4a763c
lea ecx, [esp + 0xb4]
call fcn.00477530
lea ecx, [esp + 0x18]
call fcn.00401c50
lea eax, [esp + 0x18]
push eax
call ebp
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x18]
push 0x40
push 0x134
push 0x8c
push ecx
push edx
push 0
lea ecx, [esp + 0xc4]
call fcn.00414dc0
push eax
call edi
lea ecx, [esp + 0xac]
call fcn.00401480
cmp eax, 1
jne case.default.0x4767ef
lea ecx, [esp + 0xac]
call fcn.004774a0
add eax, 0xffffff9b
cmp eax, 0xa
ja case.default.0x4767ef
jmp dword [eax*4 + 0x476c5c]
push 9
push 0
push str.lusrmgr.msc
call fcn.00470090
add esp, 0xc
lea ecx, [esp + 0xac]
jmp 0x476aff
mov ecx, dword [esp + 0x14]
add ecx, 0xffffffe0
call fcn.00471650
lea ecx, [esp + 0xac]
jmp 0x476aff
call fcn.00479750
test eax, eax
je 0x47685f
push 0x4a7664
call fcn.00470070
mov eax, dword [esp + 0x18]
mov ecx, dword [eax - 0x1c]
push 0x4a7678
push ecx
call fcn.004772b0
add esp, 0xc
lea ecx, [esp + 0xac]
jmp 0x476aff
push 0x4a7684
call fcn.00470070
mov edx, dword [esp + 0x18]
mov eax, dword [edx - 0x1c]
push 0x4a7698
push eax
call fcn.004772b0
add esp, 0xc
lea ecx, [esp + 0xac]
jmp 0x476aff
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx - 0x1c]
push 1
push edx
call sub.MPR.dll_WNetConnectionDialog
lea ecx, [esp + 0xac]
jmp 0x476aff
mov eax, dword [esp + 0x14]
mov ecx, dword [eax - 0x1c]
push 1
push ecx
call sub.MPR.dll_WNetDisconnectDialog
lea ecx, [esp + 0xac]
jmp 0x476aff
push 9
push 0
push str.shrpubw
call fcn.00470090
add esp, 0xc
lea ecx, [esp + 0xac]
jmp 0x476aff
push 9
push 0
push str.fsmgmt.msc
call fcn.00470090
add esp, 0xc
lea ecx, [esp + 0xac]
jmp 0x476aff
call fcn.00478de0
test eax, eax
je 0x47692e
push 0x4a76cc
call fcn.00470070
mov edx, dword [esp + 0x18]
mov eax, dword [edx - 0x1c]
push 0x4a76e4
push eax
call fcn.004772b0
add esp, 0xc
lea ecx, [esp + 0xac]
jmp 0x476aff
push 0x4a76f0
call fcn.00470070
mov ecx, dword [esp + 0x18]
mov edx, dword [ecx - 0x1c]
push 0x4a7708
push edx
call fcn.004772b0
add esp, 0xc
lea ecx, [esp + 0xac]
jmp 0x476aff
mov ecx, dword [esp + 0x14]
add ecx, 0xffffffe0
call fcn.00471720
lea ecx, [esp + 0xac]
jmp 0x476aff
push 9
push str.keymgr.dll
push 0x4a7738
call fcn.00470090
add esp, 0xc
lea ecx, [esp + 0xac]
jmp 0x476aff
mov ecx, dword [esp + 0x14]
add ecx, 0xffffffe0
call fcn.00471820
lea ecx, [esp + 0xac]
jmp 0x476aff
mov ecx, dword [esi + 0x108]
mov eax, dword [ecx]
mov eax, dword [eax + 4]
lea edx, [esp + 0x28]
push edx
call eax
push str.btn_add
mov ecx, eax
mov dword [esp + 0x1314], 3
call fcn.004023a0
lea ecx, [esp + 0x28]
mov bl, al
mov dword [esp + 0x1310], 0xffffffff
call fcn.00401fd0
test bl, bl
je 0x476b0f
lea ecx, [esp + 0x9d8]
call fcn.004775e0
push 0
push connect
push connect
push connect
push connect
push 0x81
push 0x96c80000
push 0
push 0
lea ecx, [esp + 0x9fc]
mov dword [esp + 0x1334], 4
call fcn.00401370
push 0x65
push 0x4a7760
lea ecx, [esp + 0x9e0]
call fcn.00477530
push 0x66
push 0x4a7770
lea ecx, [esp + 0x9e0]
call fcn.00477530
push 0x67
push 0x4a7780
lea ecx, [esp + 0x9e0]
call fcn.00477530
lea ecx, [esp + 0x20]
call fcn.00401c50
lea ecx, [esp + 0x20]
push ecx
call ebp
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x20]
push 0x40
push 0x56
push 0x8c
push edx
push eax
push 0
lea ecx, [esp + 0x9f0]
call fcn.00414dc0
push eax
call edi
lea ecx, [esp + 0x9d8]
call fcn.00401480
cmp eax, 1
jne 0x476af8
lea ecx, [esp + 0x9d8]
call fcn.004774a0
sub eax, 0x65
je 0x476aec
sub eax, 1
je 0x476ade
sub eax, 1
jne 0x476af8
mov ecx, dword [esp + 0x14]
add ecx, 0xffffffe0
call fcn.004714b0
jmp 0x476af8
mov ecx, dword [esp + 0x14]
add ecx, 0xffffffe0
call fcn.00471490
jmp 0x476af8
mov ecx, dword [esp + 0x14]
add ecx, 0xffffffe0
call fcn.00471470
lea ecx, [esp + 0x9d8]
mov dword [esp + 0x1310], 0xffffffff
call fcn.00477620
mov ebx, dword [esp + 0x14]
push esi
mov ecx, ebx
call fcn.0046f400
mov ecx, dword [esp + 0x1308]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x12f0]
xor ecx, esp
call fcn.00486dc0
add esp, 0x1300
ret 4