Function at 0x797c10
Capabilities:
Enumerate processes
Enumerate threads

Disassembly:
mov eax, 0x4750
call fcn.007a88c0
mov eax, dword [str.BN00]
push ebx
push ebp
push esi
push edi
push 0x1f
lea ecx, [esp + 0x238]
xor ebx, ebx
push str.bluenetterm.exe
push ecx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x2368], ebx
mov dword [esp + 0x40], eax
call fcn.007a983a
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0x871c24
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.007a983a
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x798835
mov ecx, dword [str.CB00]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push str.client.exe
lea eax, [esp + edx + 0x23c]
push eax
call fcn.007a983a
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push str.Cyberria
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.007a983a
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x798835
mov edx, dword [str.CB99]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push str.client.exe
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.007a983a
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0x878030
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.007a983a
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x798835
mov ecx, dword [str.DN00]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push str.imgsaver.exe
lea eax, [esp + edx + 0x23c]
push eax
call fcn.007a983a
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0x87800c
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.007a983a
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x798835
mov edx, dword [str.DT2S]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push str.dreamto2000.exe
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.007a983a
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push str.DT2000
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.007a983a
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x798835
mov ecx, dword [str.DT98]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push str.dttcli.exe
lea eax, [esp + edx + 0x23c]
push eax
call fcn.007a983a
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push str.DT2000
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.007a983a
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x798835
mov edx, dword [str.DTXP]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push str.svchost.exe
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.007a983a
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push str.DT2000
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.007a983a
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x798835
mov ecx, dword [str.EA00]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push str.pcbangclient.ex
lea eax, [esp + edx + 0x23c]
push eax
call fcn.007a983a
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0x877fa8
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.007a983a
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x798835
mov edx, dword [str.EA00]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push str.pcbangclient.exe
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.007a983a
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0x877fa8
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.007a983a
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x798835
mov ecx, dword [str.EP00]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push str.epclient.exe
lea eax, [esp + edx + 0x23c]
push eax
call fcn.007a983a
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push str.ePocket
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.007a983a
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x798835
mov edx, dword [str.GB7S]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push str.gb2001sp.exe
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.007a983a
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push str.Gb2001sp
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.007a983a
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x798835
mov ecx, dword [str.GC00]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push str.gcsc.exe
lea eax, [esp + edx + 0x23c]
push eax
call fcn.007a983a
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push str.GCSS_Client
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.007a983a
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x798835
mov edx, dword [str.GD00]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push str.timechk.exe
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.007a983a
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push str.TimeCheck
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.007a983a
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x798835
mov ecx, dword [str.GD01]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push str.client.exe
lea eax, [esp + edx + 0x23c]
push eax
call fcn.007a983a
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0x877efc
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.007a983a
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x798835
mov edx, dword [str.GM00]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push str.peshell.exe
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.007a983a
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push str.PESHELLF
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.007a983a
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x798835
mov ecx, dword [str.GN00]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push str.client.exe
lea eax, [esp + edx + 0x23c]
push eax
call fcn.007a983a
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0x877ec8
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.007a983a
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x798835
mov edx, dword [str.GS00]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push str.gamstar.exe
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.007a983a
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0x877eac
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.007a983a
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x798835
mov ecx, dword [str.GS01]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push str.server.exe
lea eax, [esp + edx + 0x23c]
push eax
call fcn.007a983a
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0x877eac
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.007a983a
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x798835
mov edx, dword [str.GS02]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push str.expl.exe
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.007a983a
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0x877eac
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.007a983a
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x798835
mov ecx, dword [str.GT25]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push str.report25.mod
lea eax, [esp + edx + 0x23c]
push eax
call fcn.007a983a
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0x877e64
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.007a983a
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x798835
mov edx, dword [str.GT30]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push str.agent30.mod
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.007a983a
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0x8779ac
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.007a983a
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x798835
mov ecx, dword [str.GT32]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push str.agent32.mod
lea eax, [esp + edx + 0x23c]
push eax
call fcn.007a983a
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0x8779ac
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.007a983a
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x798835
mov edx, dword [str.GT33]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push str.agent33.mod
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.007a983a
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0x8779ac
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.007a983a
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x798835
mov ecx, dword [str.GT34]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push str.agent34.mod
lea eax, [esp + edx + 0x23c]
push eax
call fcn.007a983a
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0x8779ac
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.007a983a
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x798835
mov edx, dword [str.GT38]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push str.agent38.bin
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.007a983a
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0x8779ac
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.007a983a
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x798835
mov ecx, dword [str.GT39]
push 0x1f
mov dword [esp + eax*4 + 0x38], ecx
mov edx, dword [esp + 0x34]
shl edx, 5
push str.agent391.bin
lea eax, [esp + edx + 0x23c]
push eax
call fcn.007a983a
mov ecx, dword [esp + 0x3c]
push 0x1f
shl ecx, 5
push 0x8779ac
mov byte [esp + ecx + 0x267], bl
mov edx, dword [esp + 0x44]
shl edx, 5
lea eax, [esp + edx + 0x1248]
push eax
call fcn.007a983a
mov ecx, dword [esp + 0x48]
add esp, 0x18
shl ecx, 5
mov byte [esp + ecx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
cmp eax, 0x80
mov dword [esp + 0x30], eax
jge 0x798835
mov edx, dword [str.GT39]
push 0x1f
mov dword [esp + eax*4 + 0x38], edx
mov eax, dword [esp + 0x34]
shl eax, 5
push str.agent392.bin
lea ecx, [esp + eax + 0x23c]
push ecx
call fcn.007a983a
mov edx, dword [esp + 0x3c]
push 0x1f
shl edx, 5
push 0x8779ac
mov byte [esp + edx + 0x267], bl
mov eax, dword [esp + 0x44]
shl eax, 5
lea ecx, [esp + eax + 0x1248]
push ecx
call fcn.007a983a
mov edx, dword [esp + 0x48]
add esp, 0x18
shl edx, 5
mov byte [esp + edx + 0x1253], bl
mov eax, dword [esp + 0x30]
inc eax
mov dword [esp + 0x30], eax
push 0x8779ac
push str.agent39.bin
push str.GT39
lea ecx, [esp + 0x3c]
call fcn.00798dd0
push 0x8779ac
push str.getoman.exe
push str.GT39
lea ecx, [esp + 0x3c]
call fcn.00798dd0
push 0x8779ac
push str.agent40.bin
push str.GT40
lea ecx, [esp + 0x3c]
call fcn.00798dd0
push str.Grms
push str.grms.exe
push str.GR4S
lea ecx, [esp + 0x3c]
call fcn.00798dd0
push str.GClient
push str.gclient.exe
push str.GR40
lea ecx, [esp + 0x3c]
call fcn.00798dd0
push str.Main_f
push str.client.exe
push str.IW00
lea ecx, [esp + 0x3c]
call fcn.00798dd0
push str.Info_f
push str.client.exe
push str.IW01
lea ecx, [esp + 0x3c]
call fcn.00798dd0
push str.Sharky
push str.client.exe
push str.IW02
lea ecx, [esp + 0x3c]
call fcn.00798dd0
push str.main_f
push str.client.exe
push str.IW03
lea ecx, [esp + 0x3c]
call fcn.00798dd0
push 0x877d20
push str.client.exe
push str.IW99
lea ecx, [esp + 0x3c]
call fcn.00798dd0
push str.Ipoclient
push str.ipoclient.exe
push str.IP00
lea ecx, [esp + 0x3c]
call fcn.00798dd0
push str._ITM_
push str.run.exe
push str.IT00
lea ecx, [esp + 0x3c]
call fcn.00798dd0
push str.LoginGAME
push str.igc_gglm.exe
push str.LG1S
lea ecx, [esp + 0x3c]
call fcn.00798dd0
push str.LoginGAME
push str.igc_gglc.exe
push str.LG16
lea ecx, [esp + 0x3c]
call fcn.00798dd0
push str.GGLogin
push str.igc_gglc.exe
push str.LG00
lea ecx, [esp + 0x3c]
call fcn.00798dd0
push str.Ticclient
push str.ticclient.exe
push str.LY00
lea ecx, [esp + 0x3c]
call fcn.00798dd0
push str.TMS_Client
push str.tmsclient.exe
push str.LY01
lea ecx, [esp + 0x3c]
call fcn.00798dd0
push str.CLManager
push str.clmanager.exe
push str.MD70
lea ecx, [esp + 0x3c]
call fcn.00798dd0
push str.MD_CLIENT
push str.pbclient.exe
push str.MD61
lea ecx, [esp + 0x3c]
call fcn.00798dd0
push 0x877bf4
push str.pbclient.exe
push str.MD60
lea ecx, [esp + 0x3c]
call fcn.00798dd0
push str.MDCLIENT
push str.pbclient.exe
push str.MD62
lea ecx, [esp + 0x3c]
call fcn.00798dd0
push str.MDClient
push str.pbclient.exe
push str.MD63
lea ecx, [esp + 0x3c]
call fcn.00798dd0
push str.FormTime
push str.ex.exe
push str.MM00
lea ecx, [esp + 0x3c]
call fcn.00798dd0
push 0x877b9c
push str.mnetc.exe
push str.MN00
lea ecx, [esp + 0x3c]
call fcn.00798dd0
push str.Commander
push str.ncclient.exe
push str.NCCL
lea ecx, [esp + 0x3c]
call fcn.00798dd0
push 0x877b5c
push str.ncclient.exe
push str.NCHC
lea ecx, [esp + 0x3c]
call fcn.00798dd0
push str.ntmcli
push str.ntmcli.exe
push str.NECL
lea ecx, [esp + 0x3c]
call fcn.00798dd0
push str.ismak32
push str.ismak32.exe
push str.NE01
lea ecx, [esp + 0x3c]
call fcn.00798dd0
push str.Client
push str.pkcnt.exe
push str.NEPK
lea ecx, [esp + 0x3c]
call fcn.00798dd0
push str.NewTime
push str._.exe
push str.NT8S
lea ecx, [esp + 0x3c]
call fcn.00798dd0
push str.NewTime
push str.game98c.exe
push str.NT87
lea ecx, [esp + 0x3c]
call fcn.00798dd0
push 0x877ad0
push str.client.exe
push str.PM00
lea ecx, [esp + 0x3c]
call fcn.00798dd0
push str.SmartNet
push str.netmon.exe
push str.SN00
lea ecx, [esp + 0x3c]
call fcn.00798dd0
push 0x877aa0
push str.pcmanager.exe
push str.SJ00
lea ecx, [esp + 0x3c]
call fcn.00798dd0
push str.Synaps
push str.pcagent.exe
push str.SY00
lea ecx, [esp + 0x3c]
call fcn.00798dd0
push str.PcAgent
push str.pcagent.exe
push str.SY01
lea ecx, [esp + 0x3c]
call fcn.00798dd0
push 0x877a54
push str.yecamanagerc.exe
push str.YC00
lea ecx, [esp + 0x3c]
call fcn.00798dd0
push 0x877a2c
push str.gamec.exe
push str.Z000
lea ecx, [esp + 0x3c]
call fcn.00798dd0
push str.ClientManager
push str.pgb_client_mngr.exe
push str.Z001
lea ecx, [esp + 0x3c]
call fcn.00798dd0
push str.FormTime
push str.easyclient.exe
push str.Z002
lea ecx, [esp + 0x3c]
call fcn.00798dd0
push str.Client
push str.systemcn.exe
push str.Z003
lea ecx, [esp + 0x3c]
call fcn.00798dd0
mov ecx, 0x49
xor eax, eax
lea edi, [esp + 0x2238]
mov dword [esp + 0x2234], ebx
push ebx
push 2
rep stosd dword es:[edi], eax
call sub.kernel32.dll_CreateToolhelp32Snapshot
mov ebp, eax
cmp ebp, 0xffffffff
mov dword [esp + 0x10], ebp
je 0x798dab
lea eax, [esp + 0x2234]
mov dword [esp + 0x2234], 0x128
push eax
push ebp
call sub.kernel32.dll_Process32First
test eax, eax
je 0x798dab
lea ecx, [esp + 0x2258]
push 0x5c
push ecx
call fcn.007ab5b1
mov edi, eax
add esp, 8
cmp edi, ebx
jne 0x798c7d
lea edi, [esp + 0x2258]
jmp 0x798c7e
inc edi
push edi
call fcn.007ab527
mov eax, dword [esp + 0x34]
add esp, 4
xor esi, esi
cmp eax, ebx
jle 0x798cc1
lea ebp, [esp + 0x234]
lea edx, [esp + 0x1234]
test edx, edx
jne 0x798cb1
push edi
push ebp
call fcn.007aa30a
add esp, 8
test eax, eax
je 0x798ced
mov eax, dword [esp + 0x30]
inc esi
add ebp, 0x20
cmp esi, eax
jl 0x798c98
mov ebp, dword [esp + 0x10]
mov eax, dword [esp + 0x223c]
push edi
push eax
lea ecx, [esp + 0x2364]
call fcn.00798e40
lea ecx, [esp + 0x2234]
push ecx
push ebp
call sub.kernel32.dll_Process32Next
test eax, eax
je 0x798cfc
jmp 0x798c5c
mov eax, dword [esp + esi*4 + 0x34]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4750
ret
push ebp
call dword [sym.imp.kernel32.dll_CloseHandle]
mov ecx, 6
xor eax, eax
lea edi, [esp + 0x18]
mov dword [esp + 0x14], ebx
push ebx
push 4
rep stosd dword es:[edi], eax
call sub.kernel32.dll_CreateToolhelp32Snapshot
mov ebp, eax
cmp ebp, 0xffffffff
je 0x798dab
lea edx, [esp + 0x14]
mov dword [esp + 0x14], 0x1c
push edx
push ebp
call sub.kernel32.dll_Thread32First
test eax, eax
je 0x798da4
mov edi, dword [esp + 0x1c]
cmp edi, ebx
je 0x798d95
mov edx, dword [esp + 0x235c]
xor eax, eax
cmp edx, ebx
jle 0x798d6a
mov esi, dword [esp + 0x20]
lea ecx, [esp + 0x2360]
cmp dword [ecx], esi
je 0x798db8
inc eax
add ecx, 4
cmp eax, edx
jl 0x798d5e
xor eax, eax
cmp eax, ebx
mov dword [0x8884f8], eax
je 0x798d95
lea eax, [esp + 0x30]
mov dword [0x8884fc], ebx
push eax
push 0x797b20
push edi
call dword [sym.imp.user32.dll_EnumThreadWindows]
mov eax, dword [0x8884fc]
cmp eax, ebx
jne 0x798dad
lea ecx, [esp + 0x14]
push ecx
push ebp
call sub.kernel32.dll_Thread32Next
test eax, eax
jne 0x798d3e
push ebp
call dword [sym.imp.kernel32.dll_CloseHandle]
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x4750
ret
shl eax, 5
lea eax, [esp + eax + 0x2760]
jmp 0x798d6c