Function at 0xbd1770
Capabilities:
Enumerate processes
Enumerate threads

Disassembly:
mov eax, 0x4750
call fcn.00be1990
mov eax, dword [str.BN00]
push ebx
push ebp
push esi
push edi
push 0x1f
lea ecx, [esp + 0x238]
xor ebx, ebx
push str.bluenetterm.exe
push ecx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x2368], ebx
mov dword [esp + 0x40], eax
call fcn.00be2d60
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0xd77b78
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.00be2d60
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xbd27a0
mov ecx, dword [str.CB00]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push str.client.exe
lea eax, [esp + edx + 0x23c]
push eax
call fcn.00be2d60
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push str.Cyberria
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.00be2d60
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xbd27a0
mov edx, dword [str.CB99]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push str.client.exe
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.00be2d60
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0xd77b44
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.00be2d60
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xbd27a0
mov ecx, dword [str.DN00]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push str.imgsaver.exe
lea eax, [esp + edx + 0x23c]
push eax
call fcn.00be2d60
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0xd77b20
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.00be2d60
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xbd27a0
mov edx, dword [str.DT2S]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push str.dreamto2000.exe
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.00be2d60
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push str.DT2000
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.00be2d60
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xbd27a0
mov ecx, dword [str.DT98]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push str.dttcli.exe
lea eax, [esp + edx + 0x23c]
push eax
call fcn.00be2d60
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push str.DT2000
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.00be2d60
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xbd27a0
mov edx, dword [str.DTXP]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push str.svchost.exe
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.00be2d60
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push str.DT2000
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.00be2d60
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xbd27a0
mov ecx, dword [str.EA00]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push str.pcbangclient.ex
lea eax, [esp + edx + 0x23c]
push eax
call fcn.00be2d60
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0xd77abc
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.00be2d60
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xbd27a0
mov edx, dword [str.EA00]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push str.pcbangclient.exe
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.00be2d60
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0xd77abc
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.00be2d60
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xbd27a0
mov ecx, dword [str.EP00]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push str.epclient.exe
lea eax, [esp + edx + 0x23c]
push eax
call fcn.00be2d60
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push str.ePocket
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.00be2d60
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xbd27a0
mov edx, dword [str.GB7S]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push str.gb2001sp.exe
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.00be2d60
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push str.Gb2001sp
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.00be2d60
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xbd27a0
mov ecx, dword [str.GC00]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push str.gcsc.exe
lea eax, [esp + edx + 0x23c]
push eax
call fcn.00be2d60
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push str.GCSS_Client
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.00be2d60
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xbd27a0
mov edx, dword [str.GD00]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push str.timechk.exe
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.00be2d60
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push str.TimeCheck
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.00be2d60
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xbd27a0
mov ecx, dword [str.GD01]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push str.client.exe
lea eax, [esp + edx + 0x23c]
push eax
call fcn.00be2d60
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0xd77a10
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.00be2d60
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xbd27a0
mov edx, dword [str.GM00]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push str.peshell.exe
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.00be2d60
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push str.PESHELLF
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.00be2d60
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xbd27a0
mov ecx, dword [str.GN00]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push str.client.exe
lea eax, [esp + edx + 0x23c]
push eax
call fcn.00be2d60
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0xd779dc
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.00be2d60
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xbd27a0
mov edx, dword [str.GS00]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push str.gamstar.exe
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.00be2d60
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0xd779c0
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.00be2d60
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xbd27a0
mov ecx, dword [str.GS01]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push str.server.exe
lea eax, [esp + edx + 0x23c]
push eax
call fcn.00be2d60
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0xd779c0
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.00be2d60
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xbd27a0
mov edx, dword [str.GS02]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push str.expl.exe
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.00be2d60
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0xd779c0
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.00be2d60
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xbd27a0
mov ecx, dword [str.GT25]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push str.report25.mod
lea eax, [esp + edx + 0x23c]
push eax
call fcn.00be2d60
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0xd77978
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.00be2d60
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xbd27a0
mov edx, dword [str.GT30]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push str.agent30.mod
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.00be2d60
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0xd772e8
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.00be2d60
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xbd27a0
mov ecx, dword [str.GT32]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push str.agent32.mod
lea eax, [esp + edx + 0x23c]
push eax
call fcn.00be2d60
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0xd772e8
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.00be2d60
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xbd27a0
mov edx, dword [str.GT33]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push str.agent33.mod
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.00be2d60
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0xd772e8
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.00be2d60
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xbd27a0
mov ecx, dword [str.GT34]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push str.agent34.mod
lea eax, [esp + edx + 0x23c]
push eax
call fcn.00be2d60
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0xd772e8
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.00be2d60
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xbd27a0
mov edx, dword [str.GT38]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push str.agent38.bin
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.00be2d60
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0xd772e8
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.00be2d60
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xbd27a0
mov ecx, dword [str.GT39]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push str.agent391.bin
lea eax, [esp + edx + 0x23c]
push eax
call fcn.00be2d60
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0xd772e8
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.00be2d60
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xbd27a0
mov edx, dword [str.GT39]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push str.agent392.bin
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.00be2d60
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0xd772e8
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.00be2d60
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xbd27a0
mov ecx, dword [str.GT39]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push str.agent39.bin
lea eax, [esp + edx + 0x23c]
push eax
call fcn.00be2d60
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0xd772e8
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.00be2d60
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xbd27a0
mov edx, dword [str.GT39]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push str.getoman.exe
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.00be2d60
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0xd772e8
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.00be2d60
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xbd27a0
mov ecx, dword [str.GT40]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push str.agent40.bin
lea eax, [esp + edx + 0x23c]
push eax
call fcn.00be2d60
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0xd772e8
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.00be2d60
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xbd27a0
mov edx, dword [str.GT50]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push str.dlag5x.exe
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.00be2d60
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push str.Deluxe_Client
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.00be2d60
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xbd27a0
mov ecx, dword [str.GT50]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push str.dlag5x.exe
lea eax, [esp + edx + 0x23c]
push eax
call fcn.00be2d60
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0xd80c88
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.00be2d60
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xbd27a0
mov edx, dword [str.GR4S]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push str.grms.exe
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.00be2d60
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push str.Grms
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.00be2d60
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xbd27a0
mov ecx, dword [str.GR40]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push str.gclient.exe
lea eax, [esp + edx + 0x23c]
push eax
call fcn.00be2d60
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push str.GClient
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.00be2d60
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xbd27a0
mov edx, dword [str.IW00]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push str.client.exe
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.00be2d60
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push str.Main_f
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.00be2d60
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0xbd27a0
mov ecx, dword [str.IW01]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push str.client.exe
lea eax, [esp + edx + 0x23c]
push eax
call fcn.00be2d60
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push str.Info_f
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.00be2d60
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
mov dword [esp + 0x30], eax
push str.Sharky
push str.client.exe
push str.IW02
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.main_f
push str.client.exe
push str.IW03
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push 0xd77810
push str.client.exe
push str.IW99
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.Ipoclient
push str.ipoclient.exe
push str.IP00
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str._ITM_
push str.run.exe
push str.IT00
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.LoginGAME
push str.igc_gglm.exe
push str.LG1S
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.LoginGAME
push str.igc_gglc.exe
push str.LG16
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.GGLogin
push str.igc_gglc.exe
push str.LG00
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.Ticclient
push str.ticclient.exe
push str.LY00
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.TMS_Client
push str.tmsclient.exe
push str.LY01
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.CLManager
push str.clmanager.exe
push str.MD70
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.MD_CLIENT
push str.pbclient.exe
push str.MD61
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push 0xd776e4
push str.pbclient.exe
push str.MD60
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.MDCLIENT
push str.pbclient.exe
push str.MD62
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.MDClient
push str.pbclient.exe
push str.MD63
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.FormTime
push str.ex.exe
push str.MM00
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push 0xd7768c
push str.mnetc.exe
push str.MN00
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.Commander
push str.ncclient.exe
push str.NCCL
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push 0xd7764c
push str.ncclient.exe
push str.NCHC
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.NCClient
push str.ncclient.exe
push str.NC00
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.MCI_command_handling_window
push str.ncclient.exe
push str.NC30
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.IMEKR2002_MAIN
push str.ncclient.exe
push str.NC31
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push 0xd80c88
push str.netcmdclient.exe
push str.NC40
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.IMEKR2002_MAIN
push str.netcmdclient.exe
push str.NC40
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.MCI_command_handling_window
push str.netcmdclient.exe
push str.NC40
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.NCRT
push str.ncrs.exe
push str.NC40
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push 0xd80c88
push str.ncrs.exe
push str.NC40
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.NetCmdSys
push str.NetCmdSys.exe
push str.NC40
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.IMEKR2002_MAIN
push str.NetCmdSys.exe
push str.NC40
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push 0xd80c88
push str.NetCmdSys.exe
push str.NC40
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push 0xd7759c
push str.NCClien.exe
push str.NC40
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push 0xd7758c
push str.NCClien.exe
push str.NC40
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.IMEKR2002_MAIN
push str.netcmdguard.exe
push str.NC40
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.ntmcli
push str.ntmcli.exe
push str.NECL
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.ismak32
push str.ismak32.exe
push str.NE01
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.Client
push str.pkcnt.exe
push str.NEPK
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.ntmcli
push str.ntmccc.exe
push str.NECL
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.IMEKR2002_MAIN
push str.ntmccc.exe
push str.NECL
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.NewTime
push str._.exe
push str.NT8S
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.NewTime
push str.game98c.exe
push str.NT87
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push 0xd774ec
push str.client.exe
push str.PM00
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.SmartNet
push str.netmon.exe
push str.SN00
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push 0xd774bc
push str.pcmanager.exe
push str.SJ00
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.Synaps
push str.pcagent.exe
push str.SY00
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.PcAgent
push str.pcagent.exe
push str.SY01
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push 0xd77470
push str.yecamanagerc.exe
push str.YC00
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push 0xd77448
push str.gamec.exe
push str.Z000
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.ClientManager
push str.pgb_client_mngr.exe
push str.Z001
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.FormTime
push str.easyclient.exe
push str.Z002
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.Client
push str.systemcn.exe
push str.Z003
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.ezClick
push str.ezclick.exe
push str.Z003
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.PicaClientFamily
push str.pmclient.exe
push str.Z003
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push 0xd77394
push str.pmclient.exe
push str.Z003
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.IMEKR2002_MAIN
push str.netmon.exe
push str.Z003
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.WithManager_Program
push str.wmclt.exe
push str.Z003
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.PicaClientFamily
push str.pmclientmainUI.exe
push str.Z003
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.MCI_command_handling_window
push str.pmclientmainui.exe
push str.Z003
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push 0xd7758c
push str.pmclientmainUI.exe
push str.Z003
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.PicaClientFamily
push str.pmccnntt.exe
push str.Z003
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push 0xd7731c
push str.gal.exe
push str.Z003
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push 0xd77308
push str.megalogon.exe
push str.Z003
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
push str.MCI_command_handling_window
push str.megalogon.exe
push str.Z003
lea ecx, [esp + 0x3c]
call fcn.00bd2f60
mov ecx, 0x49
xor eax, eax
lea edi, [esp + 0x2238]
mov dword [esp + 0x2234], ebx
push ebx
push 2
rep stosd dword es:[edi], eax
call sub.kernel32.dll_CreateToolhelp32Snapshot
mov esi, eax
cmp esi, 0xffffffff
je 0xbd2f47
lea edx, [esp + 0x2234]
mov dword [esp + 0x2234], 0x128
push edx
push esi
call sub.kernel32.dll_Process32First
test eax, eax
je 0xbd2f47
lea eax, [esp + 0x2258]
push 0x5c
push eax
call fcn.00be43e1
mov ebp, eax
add esp, 8
cmp ebp, ebx
jne 0xbd2ddc
lea ebp, [esp + 0x2258]
jmp 0xbd2ddd
inc ebp
push ebp
call fcn.00be498d
mov eax, dword [esp + 0x34]
add esp, 4
xor edi, edi
cmp eax, ebx
jle 0xbd2e30
lea ecx, [esp + 0x234]
mov dword [esp + 0x10], ecx
lea edx, [esp + 0x1234]
test edx, edx
jne 0xbd2e1c
mov eax, dword [esp + 0x10]
push ebp
push eax
call fcn.00be4332
add esp, 8
test eax, eax
je 0xbd2ea0
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x30]
inc edi
add ecx, 0x20
cmp edi, eax
mov dword [esp + 0x10], ecx
jl 0xbd2dfb
mov eax, dword [esp + 0x235c]
cmp eax, 0x100
jge 0xbd2e89
mov ecx, dword [esp + 0x223c]
push 0x1f
mov dword [esp + eax*4 + 0x2364], ecx
mov edx, dword [esp + 0x2360]
shl edx, 5
push ebp
lea eax, [esp + edx + 0x2768]
push eax
call fcn.00be2d60
mov ecx, dword [esp + 0x2368]
add esp, 0xc
shl ecx, 5
mov byte [esp + ecx + 0x277f], bl
mov eax, dword [esp + 0x235c]
inc eax
mov dword [esp + 0x235c], eax
lea edx, [esp + 0x2234]
push edx
push esi
call sub.kernel32.dll_Process32Next
test eax, eax
je 0xbd2eaf
jmp 0xbd2dbb
mov eax, dword [esp + edi*4 + 0x34]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4750
ret
mov ebp, dword [sym.imp.kernel32.dll_CloseHandle]
push esi
call ebp
mov ecx, 6
xor eax, eax
lea edi, [esp + 0x18]
mov dword [esp + 0x14], ebx
push ebx
push 4
rep stosd dword es:[edi], eax
call sub.kernel32.dll_CreateToolhelp32Snapshot
mov esi, eax
cmp esi, 0xffffffff
je 0xbd2f47
lea eax, [esp + 0x14]
mov dword [esp + 0x14], 0x1c
push eax
push esi
call sub.kernel32.dll_Thread32First
test eax, eax
je 0xbd2f44
mov edi, dword [sym.imp.user32.dll_EnumThreadWindows]
cmp dword [esp + 0x1c], ebx
je 0xbd2f35
mov ecx, dword [esp + 0x20]
push ecx
lea ecx, [esp + 0x2360]
call fcn.00bd2fd0
cmp eax, ebx
mov dword [0xd8c0dc], eax
je 0xbd2f35
mov eax, dword [esp + 0x1c]
lea edx, [esp + 0x30]
push edx
push 0xbd1680
push eax
mov dword [0xd8c0e0], ebx
call edi
mov eax, dword [0xd8c0e0]
cmp eax, ebx
jne 0xbd2f49
lea ecx, [esp + 0x14]
push ecx
push esi
call sub.kernel32.dll_Thread32Next
test eax, eax
jne 0xbd2ef5
push esi
call ebp
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4750
ret