REM Run remps.exe and check for root kits
REM If no arguments given, runs on all connected hosts
REM If arguments are provided, run on hosts provided on CLI

PATTERN$="[^\s]+"
IF LEN(ARG$) = 0 THEN HOSTS$ = TH_NETSTAT$
IF LEN(ARG$) > 0 THEN HOSTS$ = ARG$
FOR I = 1 TO TH_RE(HOSTS$, PATTERN$, 1)
  UNKNOWN=0
  RHOST$ = TH_RE$(HOSTS$, PATTERN$, I)
  TH_EXEC "remps "+RHOST$, OUT$
  IF INSTR(OUT$, "Unknown",0) > 0 GOSUB 3000
  IF INSTR(OUT$, "Hop limit",0) > 0 GOSUB 4000
  IF INSTR(OUT$,"kit",0) = -1 GOSUB 1000
  IF INSTR(OUT$,"kit",0) > 0 GOSUB 2000
NEXT I
END

1000 IF UNKNOWN = 0 THEN print RHOST$+" is NOT rooted"
RETURN

2000 IF UNKNOWN = 0 THEN print RHOST$+" is rooted"
RETURN

3000 print "Unknown host: "+ RHOST$
UNKNOWN=1
RETURN

4000 print "Hop Limit Exceeded for "+ RHOST$
UNKNOWN=1
RETURN