
/* WARNING: Function: __x86.get_pc_thunk.bx replaced with injection: get_pc_thunk_bx */

void run_shell(char *shell,int loginshell,char **additional_args)

{
}



/* WARNING: Function: __i686.get_pc_thunk.bx replaced with injection: get_pc_thunk_bx */

void __regparm3 FUN_000bc5dd(char *param_1,int param_2,int *param_3)

{
  char **__argv;
  char *pcVar1;
  int iVar2;
  int *piVar3;
  
  if (param_3 != (int *)0x0) {
    iVar2 = *param_3;
    piVar3 = param_3;
    while ((iVar2 != 0 && (piVar3 = piVar3 + 1, piVar3 != (int *)0x0))) {
      iVar2 = *piVar3;
    }
  }
  __argv = (char **)FUN_0001a288();
  if (param_1 == (char *)0x0) {
    param_1 = "/bin/sh";
  }
  else if (*param_1 == '\0') {
    param_1 = "/bin/sh";
  }
  pcVar1 = (char *)FUN_00018d94();
  *__argv = pcVar1;
  if (param_2 != 0) {
    pcVar1 = (char *)FUN_0001a76c(&DAT_000d4810,pcVar1);
    *__argv = pcVar1;
  }
  __argv[1] = (char *)0x0;
  if (param_3 != (int *)0x0) {
    iVar2 = 1;
    do {
      pcVar1 = (char *)param_3[iVar2 + -1];
      __argv[iVar2] = pcVar1;
      iVar2 = iVar2 + 1;
    } while (pcVar1 != (char *)0x0);
  }
  execv(param_1,__argv);
                    /* WARNING: Subroutine does not return */
  FUN_00018fc9("can\'t execute \'%s\'",param_1);
}


PUSH EBP
PUSH EDI
PUSH ESI
PUSH EBX
SUB ESP,0x1c
CALL 0x00017650
ADD EBX,0x1f437
MOV ESI,EAX
MOV dword ptr [ESP + 0xc],EDX
MOV EBP,ECX
TEST ECX,ECX
JNZ 0x000bc687
MOV EAX,EBP
NEG EAX
SAR EAX,0x2
LEA EAX,[EAX*0x4 + 0x8]
CALL 0x0001a288
MOV EDI,EAX
TEST ESI,ESI
JNZ 0x000bc67a
LEA ESI,[EBX + 0xffff2772]
MOV EAX,ESI
CALL 0x00018d94
MOV dword ptr [EDI],EAX
MOV ECX,dword ptr [ESP + 0xc]
TEST ECX,ECX
JZ 0x000bc644
SUB ESP,0x8
PUSH EAX
LEA EAX,[EBX + 0xffff8df0]
PUSH EAX
CALL 0x0001a76c
MOV dword ptr [EDI],EAX
ADD ESP,0x10
MOV dword ptr [EDI + 0x4],0x0
TEST EBP,EBP
JZ 0x000bc661
MOV EAX,0x1
INC EAX
MOV ECX,dword ptr [EBP + EAX*0x4 + -0x8]
MOV dword ptr [EDI + EAX*0x4 + -0x4],ECX
TEST ECX,ECX
JNZ 0x000bc654
SUB ESP,0x8
PUSH EDI
PUSH ESI
CALL 0x00016c60
POP EAX
POP EDX
PUSH ESI
LEA EAX,[EBX + 0xffff2b43]
PUSH EAX
CALL 0x00018fc9
CMP byte ptr [ESI],0x0
JNZ 0x000bc61e
LEA ESI,[EBX + 0xffff2772]
JMP 0x000bc61e
MOV EAX,0x8
MOV EDX,dword ptr [ECX]
TEST EDX,EDX
JZ 0x000bc60d
MOV EAX,ECX
ADD EAX,0x4
JZ 0x000bc5ff
MOV EDI,dword ptr [EAX]
TEST EDI,EDI
JNZ 0x000bc698
SUB EAX,EBP
SAR EAX,0x2
LEA EAX,[EAX*0x4 + 0x8]
JMP 0x000bc60d
(translation_unit "/* WARNING: Function: __i686.get_pc_thunk.bx replaced with injection: get_pc_thunk_bx */\n\nvoid __regparm3 FUN_000bc5dd(char *param_1,int param_2,int *param_3)\n\n{\n  char **__argv;\n  char *pcVar1;\n  int iVar2;\n  int *piVar3;\n  \n  if (param_3 != (int *)0x0) {\n    iVar2 = *param_3;\n    piVar3 = param_3;\n    while ((iVar2 != 0 && (piVar3 = piVar3 + 1, piVar3 != (int *)0x0))) {\n      iVar2 = *piVar3;\n    }\n  }\n  __argv = (char **)FUN_0001a288();\n  if (param_1 == (char *)0x0) {\n    param_1 = "/bin/sh";\n  }\n  else if (*param_1 == '\0') {\n    param_1 = "/bin/sh";\n  }\n  pcVar1 = (char *)FUN_00018d94();\n  *__argv = pcVar1;\n  if (param_2 != 0) {\n    pcVar1 = (char *)FUN_0001a76c(&DAT_000d4810,pcVar1);\n    *__argv = pcVar1;\n  }\n  __argv[1] = (char *)0x0;\n  if (param_3 != (int *)0x0) {\n    iVar2 = 1;\n    do {\n      pcVar1 = (char *)param_3[iVar2 + -1];\n      __argv[iVar2] = pcVar1;\n      iVar2 = iVar2 + 1;\n    } while (pcVar1 != (char *)0x0);\n  }\n  execv(param_1,__argv);\n                    /* WARNING: Subroutine does not return */\n  FUN_00018fc9("can\'t execute \'%s\'",param_1);\n}\n\n" comment (function_definition "void __regparm3 FUN_000bc5dd(char *param_1,int param_2,int *param_3)\n\n{\n  char **__argv;\n  char *pcVar1;\n  int iVar2;\n  int *piVar3;\n  \n  if (param_3 != (int *)0x0) {\n    iVar2 = *param_3;\n    piVar3 = param_3;\n    while ((iVar2 != 0 && (piVar3 = piVar3 + 1, piVar3 != (int *)0x0))) {\n      iVar2 = *piVar3;\n    }\n  }\n  __argv = (char **)FUN_0001a288();\n  if (param_1 == (char *)0x0) {\n    param_1 = "/bin/sh";\n  }\n  else if (*param_1 == '\0') {\n    param_1 = "/bin/sh";\n  }\n  pcVar1 = (char *)FUN_00018d94();\n  *__argv = pcVar1;\n  if (param_2 != 0) {\n    pcVar1 = (char *)FUN_0001a76c(&DAT_000d4810,pcVar1);\n    *__argv = pcVar1;\n  }\n  __argv[1] = (char *)0x0;\n  if (param_3 != (int *)0x0) {\n    iVar2 = 1;\n    do {\n      pcVar1 = (char *)param_3[iVar2 + -1];\n      __argv[iVar2] = pcVar1;\n      iVar2 = iVar2 + 1;\n    } while (pcVar1 != (char *)0x0);\n  }\n  execv(param_1,__argv);\n                    /* WARNING: Subroutine does not return */\n  FUN_00018fc9("can\'t execute \'%s\'",param_1);\n}" primitive_type (ERROR "__regparm3" identifier) (function_declarator "FUN_000bc5dd(char *param_1,int param_2,int *param_3)" identifier (parameter_list "(char *param_1,int param_2,int *param_3)" ( (parameter_declaration "char *param_1" primitive_type (pointer_declarator "*param_1" * identifier)) , (parameter_declaration "int param_2" primitive_type identifier) , (parameter_declaration "int *param_3" primitive_type (pointer_declarator "*param_3" * identifier)) ))) (compound_statement "{\n  char **__argv;\n  char *pcVar1;\n  int iVar2;\n  int *piVar3;\n  \n  if (param_3 != (int *)0x0) {\n    iVar2 = *param_3;\n    piVar3 = param_3;\n    while ((iVar2 != 0 && (piVar3 = piVar3 + 1, piVar3 != (int *)0x0))) {\n      iVar2 = *piVar3;\n    }\n  }\n  __argv = (char **)FUN_0001a288();\n  if (param_1 == (char *)0x0) {\n    param_1 = "/bin/sh";\n  }\n  else if (*param_1 == '\0') {\n    param_1 = "/bin/sh";\n  }\n  pcVar1 = (char *)FUN_00018d94();\n  *__argv = pcVar1;\n  if (param_2 != 0) {\n    pcVar1 = (char *)FUN_0001a76c(&DAT_000d4810,pcVar1);\n    *__argv = pcVar1;\n  }\n  __argv[1] = (char *)0x0;\n  if (param_3 != (int *)0x0) {\n    iVar2 = 1;\n    do {\n      pcVar1 = (char *)param_3[iVar2 + -1];\n      __argv[iVar2] = pcVar1;\n      iVar2 = iVar2 + 1;\n    } while (pcVar1 != (char *)0x0);\n  }\n  execv(param_1,__argv);\n                    /* WARNING: Subroutine does not return */\n  FUN_00018fc9("can\'t execute \'%s\'",param_1);\n}" { (declaration "char **__argv;" primitive_type (pointer_declarator "**__argv" * (pointer_declarator "*__argv" * identifier)) ;) (declaration "char *pcVar1;" primitive_type (pointer_declarator "*pcVar1" * identifier) ;) (declaration "int iVar2;" primitive_type identifier ;) (declaration "int *piVar3;" primitive_type (pointer_declarator "*piVar3" * identifier) ;) (if_statement "if (param_3 != (int *)0x0) {\n    iVar2 = *param_3;\n    piVar3 = param_3;\n    while ((iVar2 != 0 && (piVar3 = piVar3 + 1, piVar3 != (int *)0x0))) {\n      iVar2 = *piVar3;\n    }\n  }" if (parenthesized_expression "(param_3 != (int *)0x0)" ( (binary_expression "param_3 != (int *)0x0" identifier != (cast_expression "(int *)0x0" ( (type_descriptor "int *" primitive_type (abstract_pointer_declarator "*" *)) ) number_literal)) )) (compound_statement "{\n    iVar2 = *param_3;\n    piVar3 = param_3;\n    while ((iVar2 != 0 && (piVar3 = piVar3 + 1, piVar3 != (int *)0x0))) {\n      iVar2 = *piVar3;\n    }\n  }" { (expression_statement "iVar2 = *param_3;" (assignment_expression "iVar2 = *param_3" identifier = (pointer_expression "*param_3" * identifier)) ;) (expression_statement "piVar3 = param_3;" (assignment_expression "piVar3 = param_3" identifier = identifier) ;) (while_statement "while ((iVar2 != 0 && (piVar3 = piVar3 + 1, piVar3 != (int *)0x0))) {\n      iVar2 = *piVar3;\n    }" while (parenthesized_expression "((iVar2 != 0 && (piVar3 = piVar3 + 1, piVar3 != (int *)0x0)))" ( (parenthesized_expression "(iVar2 != 0 && (piVar3 = piVar3 + 1, piVar3 != (int *)0x0))" ( (binary_expression "iVar2 != 0 && (piVar3 = piVar3 + 1, piVar3 != (int *)0x0)" (binary_expression "iVar2 != 0" identifier != number_literal) && (parenthesized_expression "(piVar3 = piVar3 + 1, piVar3 != (int *)0x0)" ( (comma_expression "piVar3 = piVar3 + 1, piVar3 != (int *)0x0" (assignment_expression "piVar3 = piVar3 + 1" identifier = (binary_expression "piVar3 + 1" identifier + number_literal)) , (binary_expression "piVar3 != (int *)0x0" identifier != (cast_expression "(int *)0x0" ( (type_descriptor "int *" primitive_type (abstract_pointer_declarator "*" *)) ) number_literal))) ))) )) )) (compound_statement "{\n      iVar2 = *piVar3;\n    }" { (expression_statement "iVar2 = *piVar3;" (assignment_expression "iVar2 = *piVar3" identifier = (pointer_expression "*piVar3" * identifier)) ;) })) })) (expression_statement "__argv = (char **)FUN_0001a288();" (assignment_expression "__argv = (char **)FUN_0001a288()" identifier = (cast_expression "(char **)FUN_0001a288()" ( (type_descriptor "char **" primitive_type (abstract_pointer_declarator "**" * (abstract_pointer_declarator "*" *))) ) (call_expression "FUN_0001a288()" identifier (argument_list "()" ( ))))) ;) (if_statement "if (param_1 == (char *)0x0) {\n    param_1 = "/bin/sh";\n  }\n  else if (*param_1 == '\0') {\n    param_1 = "/bin/sh";\n  }" if (parenthesized_expression "(param_1 == (char *)0x0)" ( (binary_expression "param_1 == (char *)0x0" identifier == (cast_expression "(char *)0x0" ( (type_descriptor "char *" primitive_type (abstract_pointer_declarator "*" *)) ) number_literal)) )) (compound_statement "{\n    param_1 = "/bin/sh";\n  }" { (expression_statement "param_1 = "/bin/sh";" (assignment_expression "param_1 = "/bin/sh"" identifier = (string_literal ""/bin/sh"" " string_content ")) ;) }) (else_clause "else if (*param_1 == '\0') {\n    param_1 = "/bin/sh";\n  }" else (if_statement "if (*param_1 == '\0') {\n    param_1 = "/bin/sh";\n  }" if (parenthesized_expression "(*param_1 == '\0')" ( (binary_expression "*param_1 == '\0'" (pointer_expression "*param_1" * identifier) == (char_literal "'\0'" ' escape_sequence ')) )) (compound_statement "{\n    param_1 = "/bin/sh";\n  }" { (expression_statement "param_1 = "/bin/sh";" (assignment_expression "param_1 = "/bin/sh"" identifier = (string_literal ""/bin/sh"" " string_content ")) ;) })))) (expression_statement "pcVar1 = (char *)FUN_00018d94();" (assignment_expression "pcVar1 = (char *)FUN_00018d94()" identifier = (cast_expression "(char *)FUN_00018d94()" ( (type_descriptor "char *" primitive_type (abstract_pointer_declarator "*" *)) ) (call_expression "FUN_00018d94()" identifier (argument_list "()" ( ))))) ;) (expression_statement "*__argv = pcVar1;" (assignment_expression "*__argv = pcVar1" (pointer_expression "*__argv" * identifier) = identifier) ;) (if_statement "if (param_2 != 0) {\n    pcVar1 = (char *)FUN_0001a76c(&DAT_000d4810,pcVar1);\n    *__argv = pcVar1;\n  }" if (parenthesized_expression "(param_2 != 0)" ( (binary_expression "param_2 != 0" identifier != number_literal) )) (compound_statement "{\n    pcVar1 = (char *)FUN_0001a76c(&DAT_000d4810,pcVar1);\n    *__argv = pcVar1;\n  }" { (expression_statement "pcVar1 = (char *)FUN_0001a76c(&DAT_000d4810,pcVar1);" (assignment_expression "pcVar1 = (char *)FUN_0001a76c(&DAT_000d4810,pcVar1)" identifier = (cast_expression "(char *)FUN_0001a76c(&DAT_000d4810,pcVar1)" ( (type_descriptor "char *" primitive_type (abstract_pointer_declarator "*" *)) ) (call_expression "FUN_0001a76c(&DAT_000d4810,pcVar1)" identifier (argument_list "(&DAT_000d4810,pcVar1)" ( (pointer_expression "&DAT_000d4810" & identifier) , identifier ))))) ;) (expression_statement "*__argv = pcVar1;" (assignment_expression "*__argv = pcVar1" (pointer_expression "*__argv" * identifier) = identifier) ;) })) (expression_statement "__argv[1] = (char *)0x0;" (assignment_expression "__argv[1] = (char *)0x0" (subscript_expression "__argv[1]" identifier [ number_literal ]) = (cast_expression "(char *)0x0" ( (type_descriptor "char *" primitive_type (abstract_pointer_declarator "*" *)) ) number_literal)) ;) (if_statement "if (param_3 != (int *)0x0) {\n    iVar2 = 1;\n    do {\n      pcVar1 = (char *)param_3[iVar2 + -1];\n      __argv[iVar2] = pcVar1;\n      iVar2 = iVar2 + 1;\n    } while (pcVar1 != (char *)0x0);\n  }" if (parenthesized_expression "(param_3 != (int *)0x0)" ( (binary_expression "param_3 != (int *)0x0" identifier != (cast_expression "(int *)0x0" ( (type_descriptor "int *" primitive_type (abstract_pointer_declarator "*" *)) ) number_literal)) )) (compound_statement "{\n    iVar2 = 1;\n    do {\n      pcVar1 = (char *)param_3[iVar2 + -1];\n      __argv[iVar2] = pcVar1;\n      iVar2 = iVar2 + 1;\n    } while (pcVar1 != (char *)0x0);\n  }" { (expression_statement "iVar2 = 1;" (assignment_expression "iVar2 = 1" identifier = number_literal) ;) (do_statement "do {\n      pcVar1 = (char *)param_3[iVar2 + -1];\n      __argv[iVar2] = pcVar1;\n      iVar2 = iVar2 + 1;\n    } while (pcVar1 != (char *)0x0);" do (compound_statement "{\n      pcVar1 = (char *)param_3[iVar2 + -1];\n      __argv[iVar2] = pcVar1;\n      iVar2 = iVar2 + 1;\n    }" { (expression_statement "pcVar1 = (char *)param_3[iVar2 + -1];" (assignment_expression "pcVar1 = (char *)param_3[iVar2 + -1]" identifier = (cast_expression "(char *)param_3[iVar2 + -1]" ( (type_descriptor "char *" primitive_type (abstract_pointer_declarator "*" *)) ) (subscript_expression "param_3[iVar2 + -1]" identifier [ (binary_expression "iVar2 + -1" identifier + number_literal) ]))) ;) (expression_statement "__argv[iVar2] = pcVar1;" (assignment_expression "__argv[iVar2] = pcVar1" (subscript_expression "__argv[iVar2]" identifier [ identifier ]) = identifier) ;) (expression_statement "iVar2 = iVar2 + 1;" (assignment_expression "iVar2 = iVar2 + 1" identifier = (binary_expression "iVar2 + 1" identifier + number_literal)) ;) }) while (parenthesized_expression "(pcVar1 != (char *)0x0)" ( (binary_expression "pcVar1 != (char *)0x0" identifier != (cast_expression "(char *)0x0" ( (type_descriptor "char *" primitive_type (abstract_pointer_declarator "*" *)) ) number_literal)) )) ;) })) (expression_statement "execv(param_1,__argv);" (call_expression "execv(param_1,__argv)" identifier (argument_list "(param_1,__argv)" ( identifier , identifier ))) ;) comment (expression_statement "FUN_00018fc9("can\'t execute \'%s\'",param_1);" (call_expression "FUN_00018fc9("can\'t execute \'%s\'",param_1)" identifier (argument_list "("can\'t execute \'%s\'",param_1)" ( (string_literal ""can\'t execute \'%s\'"" " string_content escape_sequence string_content escape_sequence string_content escape_sequence ") , identifier ))) ;) })))
(translation_unit "/* WARNING: Function: __x86.get_pc_thunk.bx replaced with injection: get_pc_thunk_bx */\n\nvoid run_shell(char *shell,int loginshell,char **additional_args)\n\n{\n}\n\n" comment (function_definition "void run_shell(char *shell,int loginshell,char **additional_args)\n\n{\n}" primitive_type (function_declarator "run_shell(char *shell,int loginshell,char **additional_args)" identifier (parameter_list "(char *shell,int loginshell,char **additional_args)" ( (parameter_declaration "char *shell" primitive_type (pointer_declarator "*shell" * identifier)) , (parameter_declaration "int loginshell" primitive_type identifier) , (parameter_declaration "char **additional_args" primitive_type (pointer_declarator "**additional_args" * (pointer_declarator "*additional_args" * identifier))) ))) (compound_statement "{\n}" { })))
(translation_unit "void __regparm3 FUN_000bc5dd(char *param_1,int param_2,int *param_3)\n\n{\n  char **__argv;\n  char *pcVar1;\n  int iVar2;\n  int *piVar3;\n  \n  if (param_3 != (int *)0x0) {\n    iVar2 = *param_3;\n    piVar3 = param_3;\n    while ((iVar2 != 0 && (piVar3 = piVar3 + 1, piVar3 != (int *)0x0))) {\n      iVar2 = *piVar3;\n    }\n  }\n  __argv = (char **)FUN_0001a288();\n  if (param_1 == (char *)0x0) {\n    param_1 = "/bin/sh";\n  }\n  else if (*param_1 == '\0') {\n    param_1 = "/bin/sh";\n  }\n  pcVar1 = (char *)FUN_00018d94();\n  *__argv = pcVar1;\n  if (param_2 != 0) {\n    pcVar1 = (char *)FUN_0001a76c(&DAT_000d4810,pcVar1);\n    *__argv = pcVar1;\n  }\n  __argv[1] = (char *)0x0;\n  if (param_3 != (int *)0x0) {\n    iVar2 = 1;\n    do {\n      pcVar1 = (char *)param_3[iVar2 + -1];\n      __argv[iVar2] = pcVar1;\n      iVar2 = iVar2 + 1;\n    } while (pcVar1 != (char *)0x0);\n  }\n  execv(param_1,__argv);\n                    \n  FUN_00018fc9("can\'t execute \'%s\'",param_1);\n}\n\n" (function_definition "void __regparm3 FUN_000bc5dd(char *param_1,int param_2,int *param_3)\n\n{\n  char **__argv;\n  char *pcVar1;\n  int iVar2;\n  int *piVar3;\n  \n  if (param_3 != (int *)0x0) {\n    iVar2 = *param_3;\n    piVar3 = param_3;\n    while ((iVar2 != 0 && (piVar3 = piVar3 + 1, piVar3 != (int *)0x0))) {\n      iVar2 = *piVar3;\n    }\n  }\n  __argv = (char **)FUN_0001a288();\n  if (param_1 == (char *)0x0) {\n    param_1 = "/bin/sh";\n  }\n  else if (*param_1 == '\0') {\n    param_1 = "/bin/sh";\n  }\n  pcVar1 = (char *)FUN_00018d94();\n  *__argv = pcVar1;\n  if (param_2 != 0) {\n    pcVar1 = (char *)FUN_0001a76c(&DAT_000d4810,pcVar1);\n    *__argv = pcVar1;\n  }\n  __argv[1] = (char *)0x0;\n  if (param_3 != (int *)0x0) {\n    iVar2 = 1;\n    do {\n      pcVar1 = (char *)param_3[iVar2 + -1];\n      __argv[iVar2] = pcVar1;\n      iVar2 = iVar2 + 1;\n    } while (pcVar1 != (char *)0x0);\n  }\n  execv(param_1,__argv);\n                    \n  FUN_00018fc9("can\'t execute \'%s\'",param_1);\n}" primitive_type (ERROR "__regparm3" identifier) (function_declarator "FUN_000bc5dd(char *param_1,int param_2,int *param_3)" identifier (parameter_list "(char *param_1,int param_2,int *param_3)" ( (parameter_declaration "char *param_1" primitive_type (pointer_declarator "*param_1" * identifier)) , (parameter_declaration "int param_2" primitive_type identifier) , (parameter_declaration "int *param_3" primitive_type (pointer_declarator "*param_3" * identifier)) ))) (compound_statement "{\n  char **__argv;\n  char *pcVar1;\n  int iVar2;\n  int *piVar3;\n  \n  if (param_3 != (int *)0x0) {\n    iVar2 = *param_3;\n    piVar3 = param_3;\n    while ((iVar2 != 0 && (piVar3 = piVar3 + 1, piVar3 != (int *)0x0))) {\n      iVar2 = *piVar3;\n    }\n  }\n  __argv = (char **)FUN_0001a288();\n  if (param_1 == (char *)0x0) {\n    param_1 = "/bin/sh";\n  }\n  else if (*param_1 == '\0') {\n    param_1 = "/bin/sh";\n  }\n  pcVar1 = (char *)FUN_00018d94();\n  *__argv = pcVar1;\n  if (param_2 != 0) {\n    pcVar1 = (char *)FUN_0001a76c(&DAT_000d4810,pcVar1);\n    *__argv = pcVar1;\n  }\n  __argv[1] = (char *)0x0;\n  if (param_3 != (int *)0x0) {\n    iVar2 = 1;\n    do {\n      pcVar1 = (char *)param_3[iVar2 + -1];\n      __argv[iVar2] = pcVar1;\n      iVar2 = iVar2 + 1;\n    } while (pcVar1 != (char *)0x0);\n  }\n  execv(param_1,__argv);\n                    \n  FUN_00018fc9("can\'t execute \'%s\'",param_1);\n}" { (declaration "char **__argv;" primitive_type (pointer_declarator "**__argv" * (pointer_declarator "*__argv" * identifier)) ;) (declaration "char *pcVar1;" primitive_type (pointer_declarator "*pcVar1" * identifier) ;) (declaration "int iVar2;" primitive_type identifier ;) (declaration "int *piVar3;" primitive_type (pointer_declarator "*piVar3" * identifier) ;) (if_statement "if (param_3 != (int *)0x0) {\n    iVar2 = *param_3;\n    piVar3 = param_3;\n    while ((iVar2 != 0 && (piVar3 = piVar3 + 1, piVar3 != (int *)0x0))) {\n      iVar2 = *piVar3;\n    }\n  }" if (parenthesized_expression "(param_3 != (int *)0x0)" ( (binary_expression "param_3 != (int *)0x0" identifier != (cast_expression "(int *)0x0" ( (type_descriptor "int *" primitive_type (abstract_pointer_declarator "*" *)) ) number_literal)) )) (compound_statement "{\n    iVar2 = *param_3;\n    piVar3 = param_3;\n    while ((iVar2 != 0 && (piVar3 = piVar3 + 1, piVar3 != (int *)0x0))) {\n      iVar2 = *piVar3;\n    }\n  }" { (expression_statement "iVar2 = *param_3;" (assignment_expression "iVar2 = *param_3" identifier = (pointer_expression "*param_3" * identifier)) ;) (expression_statement "piVar3 = param_3;" (assignment_expression "piVar3 = param_3" identifier = identifier) ;) (while_statement "while ((iVar2 != 0 && (piVar3 = piVar3 + 1, piVar3 != (int *)0x0))) {\n      iVar2 = *piVar3;\n    }" while (parenthesized_expression "((iVar2 != 0 && (piVar3 = piVar3 + 1, piVar3 != (int *)0x0)))" ( (parenthesized_expression "(iVar2 != 0 && (piVar3 = piVar3 + 1, piVar3 != (int *)0x0))" ( (binary_expression "iVar2 != 0 && (piVar3 = piVar3 + 1, piVar3 != (int *)0x0)" (binary_expression "iVar2 != 0" identifier != number_literal) && (parenthesized_expression "(piVar3 = piVar3 + 1, piVar3 != (int *)0x0)" ( (comma_expression "piVar3 = piVar3 + 1, piVar3 != (int *)0x0" (assignment_expression "piVar3 = piVar3 + 1" identifier = (binary_expression "piVar3 + 1" identifier + number_literal)) , (binary_expression "piVar3 != (int *)0x0" identifier != (cast_expression "(int *)0x0" ( (type_descriptor "int *" primitive_type (abstract_pointer_declarator "*" *)) ) number_literal))) ))) )) )) (compound_statement "{\n      iVar2 = *piVar3;\n    }" { (expression_statement "iVar2 = *piVar3;" (assignment_expression "iVar2 = *piVar3" identifier = (pointer_expression "*piVar3" * identifier)) ;) })) })) (expression_statement "__argv = (char **)FUN_0001a288();" (assignment_expression "__argv = (char **)FUN_0001a288()" identifier = (cast_expression "(char **)FUN_0001a288()" ( (type_descriptor "char **" primitive_type (abstract_pointer_declarator "**" * (abstract_pointer_declarator "*" *))) ) (call_expression "FUN_0001a288()" identifier (argument_list "()" ( ))))) ;) (if_statement "if (param_1 == (char *)0x0) {\n    param_1 = "/bin/sh";\n  }\n  else if (*param_1 == '\0') {\n    param_1 = "/bin/sh";\n  }" if (parenthesized_expression "(param_1 == (char *)0x0)" ( (binary_expression "param_1 == (char *)0x0" identifier == (cast_expression "(char *)0x0" ( (type_descriptor "char *" primitive_type (abstract_pointer_declarator "*" *)) ) number_literal)) )) (compound_statement "{\n    param_1 = "/bin/sh";\n  }" { (expression_statement "param_1 = "/bin/sh";" (assignment_expression "param_1 = "/bin/sh"" identifier = (string_literal ""/bin/sh"" " string_content ")) ;) }) (else_clause "else if (*param_1 == '\0') {\n    param_1 = "/bin/sh";\n  }" else (if_statement "if (*param_1 == '\0') {\n    param_1 = "/bin/sh";\n  }" if (parenthesized_expression "(*param_1 == '\0')" ( (binary_expression "*param_1 == '\0'" (pointer_expression "*param_1" * identifier) == (char_literal "'\0'" ' escape_sequence ')) )) (compound_statement "{\n    param_1 = "/bin/sh";\n  }" { (expression_statement "param_1 = "/bin/sh";" (assignment_expression "param_1 = "/bin/sh"" identifier = (string_literal ""/bin/sh"" " string_content ")) ;) })))) (expression_statement "pcVar1 = (char *)FUN_00018d94();" (assignment_expression "pcVar1 = (char *)FUN_00018d94()" identifier = (cast_expression "(char *)FUN_00018d94()" ( (type_descriptor "char *" primitive_type (abstract_pointer_declarator "*" *)) ) (call_expression "FUN_00018d94()" identifier (argument_list "()" ( ))))) ;) (expression_statement "*__argv = pcVar1;" (assignment_expression "*__argv = pcVar1" (pointer_expression "*__argv" * identifier) = identifier) ;) (if_statement "if (param_2 != 0) {\n    pcVar1 = (char *)FUN_0001a76c(&DAT_000d4810,pcVar1);\n    *__argv = pcVar1;\n  }" if (parenthesized_expression "(param_2 != 0)" ( (binary_expression "param_2 != 0" identifier != number_literal) )) (compound_statement "{\n    pcVar1 = (char *)FUN_0001a76c(&DAT_000d4810,pcVar1);\n    *__argv = pcVar1;\n  }" { (expression_statement "pcVar1 = (char *)FUN_0001a76c(&DAT_000d4810,pcVar1);" (assignment_expression "pcVar1 = (char *)FUN_0001a76c(&DAT_000d4810,pcVar1)" identifier = (cast_expression "(char *)FUN_0001a76c(&DAT_000d4810,pcVar1)" ( (type_descriptor "char *" primitive_type (abstract_pointer_declarator "*" *)) ) (call_expression "FUN_0001a76c(&DAT_000d4810,pcVar1)" identifier (argument_list "(&DAT_000d4810,pcVar1)" ( (pointer_expression "&DAT_000d4810" & identifier) , identifier ))))) ;) (expression_statement "*__argv = pcVar1;" (assignment_expression "*__argv = pcVar1" (pointer_expression "*__argv" * identifier) = identifier) ;) })) (expression_statement "__argv[1] = (char *)0x0;" (assignment_expression "__argv[1] = (char *)0x0" (subscript_expression "__argv[1]" identifier [ number_literal ]) = (cast_expression "(char *)0x0" ( (type_descriptor "char *" primitive_type (abstract_pointer_declarator "*" *)) ) number_literal)) ;) (if_statement "if (param_3 != (int *)0x0) {\n    iVar2 = 1;\n    do {\n      pcVar1 = (char *)param_3[iVar2 + -1];\n      __argv[iVar2] = pcVar1;\n      iVar2 = iVar2 + 1;\n    } while (pcVar1 != (char *)0x0);\n  }" if (parenthesized_expression "(param_3 != (int *)0x0)" ( (binary_expression "param_3 != (int *)0x0" identifier != (cast_expression "(int *)0x0" ( (type_descriptor "int *" primitive_type (abstract_pointer_declarator "*" *)) ) number_literal)) )) (compound_statement "{\n    iVar2 = 1;\n    do {\n      pcVar1 = (char *)param_3[iVar2 + -1];\n      __argv[iVar2] = pcVar1;\n      iVar2 = iVar2 + 1;\n    } while (pcVar1 != (char *)0x0);\n  }" { (expression_statement "iVar2 = 1;" (assignment_expression "iVar2 = 1" identifier = number_literal) ;) (do_statement "do {\n      pcVar1 = (char *)param_3[iVar2 + -1];\n      __argv[iVar2] = pcVar1;\n      iVar2 = iVar2 + 1;\n    } while (pcVar1 != (char *)0x0);" do (compound_statement "{\n      pcVar1 = (char *)param_3[iVar2 + -1];\n      __argv[iVar2] = pcVar1;\n      iVar2 = iVar2 + 1;\n    }" { (expression_statement "pcVar1 = (char *)param_3[iVar2 + -1];" (assignment_expression "pcVar1 = (char *)param_3[iVar2 + -1]" identifier = (cast_expression "(char *)param_3[iVar2 + -1]" ( (type_descriptor "char *" primitive_type (abstract_pointer_declarator "*" *)) ) (subscript_expression "param_3[iVar2 + -1]" identifier [ (binary_expression "iVar2 + -1" identifier + number_literal) ]))) ;) (expression_statement "__argv[iVar2] = pcVar1;" (assignment_expression "__argv[iVar2] = pcVar1" (subscript_expression "__argv[iVar2]" identifier [ identifier ]) = identifier) ;) (expression_statement "iVar2 = iVar2 + 1;" (assignment_expression "iVar2 = iVar2 + 1" identifier = (binary_expression "iVar2 + 1" identifier + number_literal)) ;) }) while (parenthesized_expression "(pcVar1 != (char *)0x0)" ( (binary_expression "pcVar1 != (char *)0x0" identifier != (cast_expression "(char *)0x0" ( (type_descriptor "char *" primitive_type (abstract_pointer_declarator "*" *)) ) number_literal)) )) ;) })) (expression_statement "execv(param_1,__argv);" (call_expression "execv(param_1,__argv)" identifier (argument_list "(param_1,__argv)" ( identifier , identifier ))) ;) (expression_statement "FUN_00018fc9("can\'t execute \'%s\'",param_1);" (call_expression "FUN_00018fc9("can\'t execute \'%s\'",param_1)" identifier (argument_list "("can\'t execute \'%s\'",param_1)" ( (string_literal ""can\'t execute \'%s\'"" " string_content escape_sequence string_content escape_sequence string_content escape_sequence ") , identifier ))) ;) })))
(translation_unit (function_definition TYPE (ERROR IDENT) (function_declarator IDENT (parameter_list ( (parameter_declaration TYPE (pointer_declarator * IDENT)) , (parameter_declaration TYPE IDENT) , (parameter_declaration TYPE (pointer_declarator * IDENT)) ))) (compound_statement { (declaration TYPE (pointer_declarator * (pointer_declarator * IDENT)) ;) (declaration TYPE (pointer_declarator * IDENT) ;) (declaration TYPE IDENT ;) (declaration TYPE (pointer_declarator * IDENT) ;) (if_statement if (parenthesized_expression ( (binary_expression IDENT != (cast_expression ( (type_descriptor TYPE (abstract_pointer_declarator *)) ) LIT)) )) (compound_statement { (expression_statement (assignment_expression IDENT = (pointer_expression * IDENT)) ;) (expression_statement (assignment_expression IDENT = IDENT) ;) (while_statement while (parenthesized_expression ( (parenthesized_expression ( (binary_expression (binary_expression IDENT != LIT) && (parenthesized_expression ( (comma_expression (assignment_expression IDENT = (binary_expression IDENT + LIT)) , (binary_expression IDENT != (cast_expression ( (type_descriptor TYPE (abstract_pointer_declarator *)) ) LIT))) ))) )) )) (compound_statement { (expression_statement (assignment_expression IDENT = (pointer_expression * IDENT)) ;) })) })) (expression_statement (assignment_expression IDENT = (cast_expression ( (type_descriptor TYPE (abstract_pointer_declarator * (abstract_pointer_declarator *))) ) (call_expression IDENT (argument_list ( ))))) ;) (if_statement if (parenthesized_expression ( (binary_expression IDENT == (cast_expression ( (type_descriptor TYPE (abstract_pointer_declarator *)) ) LIT)) )) (compound_statement { (expression_statement (assignment_expression IDENT = (string_literal " string_content ")) ;) }) (else_clause else (if_statement if (parenthesized_expression ( (binary_expression (pointer_expression * IDENT) == (char_literal ' escape_sequence ')) )) (compound_statement { (expression_statement (assignment_expression IDENT = (string_literal " string_content ")) ;) })))) (expression_statement (assignment_expression IDENT = (cast_expression ( (type_descriptor TYPE (abstract_pointer_declarator *)) ) (call_expression IDENT (argument_list ( ))))) ;) (expression_statement (assignment_expression (pointer_expression * IDENT) = IDENT) ;) (if_statement if (parenthesized_expression ( (binary_expression IDENT != LIT) )) (compound_statement { (expression_statement (assignment_expression IDENT = (cast_expression ( (type_descriptor TYPE (abstract_pointer_declarator *)) ) (call_expression IDENT (argument_list ( (pointer_expression & IDENT) , IDENT ))))) ;) (expression_statement (assignment_expression (pointer_expression * IDENT) = IDENT) ;) })) (expression_statement (assignment_expression (subscript_expression IDENT [ LIT ]) = (cast_expression ( (type_descriptor TYPE (abstract_pointer_declarator *)) ) LIT)) ;) (if_statement if (parenthesized_expression ( (binary_expression IDENT != (cast_expression ( (type_descriptor TYPE (abstract_pointer_declarator *)) ) LIT)) )) (compound_statement { (expression_statement (assignment_expression IDENT = LIT) ;) (do_statement do (compound_statement { (expression_statement (assignment_expression IDENT = (cast_expression ( (type_descriptor TYPE (abstract_pointer_declarator *)) ) (subscript_expression IDENT [ (binary_expression IDENT + LIT) ]))) ;) (expression_statement (assignment_expression (subscript_expression IDENT [ IDENT ]) = IDENT) ;) (expression_statement (assignment_expression IDENT = (binary_expression IDENT + LIT)) ;) }) while (parenthesized_expression ( (binary_expression IDENT != (cast_expression ( (type_descriptor TYPE (abstract_pointer_declarator *)) ) LIT)) )) ;) })) (expression_statement (call_expression IDENT (argument_list ( IDENT , IDENT ))) ;) (expression_statement (call_expression IDENT (argument_list ( (string_literal " string_content escape_sequence string_content escape_sequence string_content escape_sequence ") , IDENT ))) ;) })))
(function_definition "void __regparm3 FUN_000bc5dd(char *param_1,int param_2,int *param_3)\n\n{\n  char **__argv;\n  char *pcVar1;\n  int iVar2;\n  int *piVar3;\n  \n  if (param_3 != (int *)0x0) {\n    iVar2 = *param_3;\n    piVar3 = param_3;\n    while ((iVar2 != 0 && (piVar3 = piVar3 + 1, piVar3 != (int *)0x0))) {\n      iVar2 = *piVar3;\n    }\n  }\n  __argv = (char **)FUN_0001a288();\n  if (param_1 == (char *)0x0) {\n    param_1 = "/bin/sh";\n  }\n  else if (*param_1 == '\0') {\n    param_1 = "/bin/sh";\n  }\n  pcVar1 = (char *)FUN_00018d94();\n  *__argv = pcVar1;\n  if (param_2 != 0) {\n    pcVar1 = (char *)FUN_0001a76c(&DAT_000d4810,pcVar1);\n    *__argv = pcVar1;\n  }\n  __argv[1] = (char *)0x0;\n  if (param_3 != (int *)0x0) {\n    iVar2 = 1;\n    do {\n      pcVar1 = (char *)param_3[iVar2 + -1];\n      __argv[iVar2] = pcVar1;\n      iVar2 = iVar2 + 1;\n    } while (pcVar1 != (char *)0x0);\n  }\n  execv(param_1,__argv);\n                    \n  FUN_00018fc9("can\'t execute \'%s\'",param_1);\n}" (primitive_type "void") (ERROR "__regparm3" (identifier "__regparm3")) (function_declarator "FUN_000bc5dd(char *param_1,int param_2,int *param_3)" (identifier "FUN_000bc5dd") (parameter_list "(char *param_1,int param_2,int *param_3)" (( "(") (parameter_declaration "char *param_1" (primitive_type "char") (pointer_declarator "*param_1" (* "*") (identifier "param_1"))) (, ",") (parameter_declaration "int param_2" (primitive_type "int") (identifier "param_2")) (, ",") (parameter_declaration "int *param_3" (primitive_type "int") (pointer_declarator "*param_3" (* "*") (identifier "param_3"))) () ")"))) (compound_statement "{\n  char **__argv;\n  char *pcVar1;\n  int iVar2;\n  int *piVar3;\n  \n  if (param_3 != (int *)0x0) {\n    iVar2 = *param_3;\n    piVar3 = param_3;\n    while ((iVar2 != 0 && (piVar3 = piVar3 + 1, piVar3 != (int *)0x0))) {\n      iVar2 = *piVar3;\n    }\n  }\n  __argv = (char **)FUN_0001a288();\n  if (param_1 == (char *)0x0) {\n    param_1 = "/bin/sh";\n  }\n  else if (*param_1 == '\0') {\n    param_1 = "/bin/sh";\n  }\n  pcVar1 = (char *)FUN_00018d94();\n  *__argv = pcVar1;\n  if (param_2 != 0) {\n    pcVar1 = (char *)FUN_0001a76c(&DAT_000d4810,pcVar1);\n    *__argv = pcVar1;\n  }\n  __argv[1] = (char *)0x0;\n  if (param_3 != (int *)0x0) {\n    iVar2 = 1;\n    do {\n      pcVar1 = (char *)param_3[iVar2 + -1];\n      __argv[iVar2] = pcVar1;\n      iVar2 = iVar2 + 1;\n    } while (pcVar1 != (char *)0x0);\n  }\n  execv(param_1,__argv);\n                    \n  FUN_00018fc9("can\'t execute \'%s\'",param_1);\n}" ({ "{") (declaration "char **__argv;" (primitive_type "char") (pointer_declarator "**__argv" (* "*") (pointer_declarator "*__argv" (* "*") (identifier "__argv"))) (; ";")) (declaration "char *pcVar1;" (primitive_type "char") (pointer_declarator "*pcVar1" (* "*") (identifier "pcVar1")) (; ";")) (declaration "int iVar2;" (primitive_type "int") (identifier "iVar2") (; ";")) (declaration "int *piVar3;" (primitive_type "int") (pointer_declarator "*piVar3" (* "*") (identifier "piVar3")) (; ";")) (if_statement "if (param_3 != (int *)0x0) {\n    iVar2 = *param_3;\n    piVar3 = param_3;\n    while ((iVar2 != 0 && (piVar3 = piVar3 + 1, piVar3 != (int *)0x0))) {\n      iVar2 = *piVar3;\n    }\n  }" (if "if") (parenthesized_expression "(param_3 != (int *)0x0)" (( "(") (binary_expression "param_3 != (int *)0x0" (identifier "param_3") (!= "!=") (cast_expression "(int *)0x0" (( "(") (type_descriptor "int *" (primitive_type "int") (abstract_pointer_declarator "*" (* "*"))) () ")") (number_literal "0x0"))) () ")")) (compound_statement "{\n    iVar2 = *param_3;\n    piVar3 = param_3;\n    while ((iVar2 != 0 && (piVar3 = piVar3 + 1, piVar3 != (int *)0x0))) {\n      iVar2 = *piVar3;\n    }\n  }" ({ "{") (expression_statement "iVar2 = *param_3;" (assignment_expression "iVar2 = *param_3" (identifier "iVar2") (= "=") (pointer_expression "*param_3" (* "*") (identifier "param_3"))) (; ";")) (expression_statement "piVar3 = param_3;" (assignment_expression "piVar3 = param_3" (identifier "piVar3") (= "=") (identifier "param_3")) (; ";")) (while_statement "while ((iVar2 != 0 && (piVar3 = piVar3 + 1, piVar3 != (int *)0x0))) {\n      iVar2 = *piVar3;\n    }" (while "while") (parenthesized_expression "((iVar2 != 0 && (piVar3 = piVar3 + 1, piVar3 != (int *)0x0)))" (( "(") (parenthesized_expression "(iVar2 != 0 && (piVar3 = piVar3 + 1, piVar3 != (int *)0x0))" (( "(") (binary_expression "iVar2 != 0 && (piVar3 = piVar3 + 1, piVar3 != (int *)0x0)" (binary_expression "iVar2 != 0" (identifier "iVar2") (!= "!=") (number_literal "0")) (&& "&&") (parenthesized_expression "(piVar3 = piVar3 + 1, piVar3 != (int *)0x0)" (( "(") (comma_expression "piVar3 = piVar3 + 1, piVar3 != (int *)0x0" (assignment_expression "piVar3 = piVar3 + 1" (identifier "piVar3") (= "=") (binary_expression "piVar3 + 1" (identifier "piVar3") (+ "+") (number_literal "1"))) (, ",") (binary_expression "piVar3 != (int *)0x0" (identifier "piVar3") (!= "!=") (cast_expression "(int *)0x0" (( "(") (type_descriptor "int *" (primitive_type "int") (abstract_pointer_declarator "*" (* "*"))) () ")") (number_literal "0x0")))) () ")"))) () ")")) () ")")) (compound_statement "{\n      iVar2 = *piVar3;\n    }" ({ "{") (expression_statement "iVar2 = *piVar3;" (assignment_expression "iVar2 = *piVar3" (identifier "iVar2") (= "=") (pointer_expression "*piVar3" (* "*") (identifier "piVar3"))) (; ";")) (} "}"))) (} "}"))) (expression_statement "__argv = (char **)FUN_0001a288();" (assignment_expression "__argv = (char **)FUN_0001a288()" (identifier "__argv") (= "=") (cast_expression "(char **)FUN_0001a288()" (( "(") (type_descriptor "char **" (primitive_type "char") (abstract_pointer_declarator "**" (* "*") (abstract_pointer_declarator "*" (* "*")))) () ")") (call_expression "FUN_0001a288()" (identifier "FUN_0001a288") (argument_list "()" (( "(") () ")"))))) (; ";")) (if_statement "if (param_1 == (char *)0x0) {\n    param_1 = "/bin/sh";\n  }\n  else if (*param_1 == '\0') {\n    param_1 = "/bin/sh";\n  }" (if "if") (parenthesized_expression "(param_1 == (char *)0x0)" (( "(") (binary_expression "param_1 == (char *)0x0" (identifier "param_1") (== "==") (cast_expression "(char *)0x0" (( "(") (type_descriptor "char *" (primitive_type "char") (abstract_pointer_declarator "*" (* "*"))) () ")") (number_literal "0x0"))) () ")")) (compound_statement "{\n    param_1 = "/bin/sh";\n  }" ({ "{") (expression_statement "param_1 = "/bin/sh";" (assignment_expression "param_1 = "/bin/sh"" (identifier "param_1") (= "=") (string_literal ""/bin/sh"" (" """) (string_content "/bin/sh") (" """))) (; ";")) (} "}")) (else_clause "else if (*param_1 == '\0') {\n    param_1 = "/bin/sh";\n  }" (else "else") (if_statement "if (*param_1 == '\0') {\n    param_1 = "/bin/sh";\n  }" (if "if") (parenthesized_expression "(*param_1 == '\0')" (( "(") (binary_expression "*param_1 == '\0'" (pointer_expression "*param_1" (* "*") (identifier "param_1")) (== "==") (char_literal "'\0'" (' "'") (escape_sequence "\0") (' "'"))) () ")")) (compound_statement "{\n    param_1 = "/bin/sh";\n  }" ({ "{") (expression_statement "param_1 = "/bin/sh";" (assignment_expression "param_1 = "/bin/sh"" (identifier "param_1") (= "=") (string_literal ""/bin/sh"" (" """) (string_content "/bin/sh") (" """))) (; ";")) (} "}"))))) (expression_statement "pcVar1 = (char *)FUN_00018d94();" (assignment_expression "pcVar1 = (char *)FUN_00018d94()" (identifier "pcVar1") (= "=") (cast_expression "(char *)FUN_00018d94()" (( "(") (type_descriptor "char *" (primitive_type "char") (abstract_pointer_declarator "*" (* "*"))) () ")") (call_expression "FUN_00018d94()" (identifier "FUN_00018d94") (argument_list "()" (( "(") () ")"))))) (; ";")) (expression_statement "*__argv = pcVar1;" (assignment_expression "*__argv = pcVar1" (pointer_expression "*__argv" (* "*") (identifier "__argv")) (= "=") (identifier "pcVar1")) (; ";")) (if_statement "if (param_2 != 0) {\n    pcVar1 = (char *)FUN_0001a76c(&DAT_000d4810,pcVar1);\n    *__argv = pcVar1;\n  }" (if "if") (parenthesized_expression "(param_2 != 0)" (( "(") (binary_expression "param_2 != 0" (identifier "param_2") (!= "!=") (number_literal "0")) () ")")) (compound_statement "{\n    pcVar1 = (char *)FUN_0001a76c(&DAT_000d4810,pcVar1);\n    *__argv = pcVar1;\n  }" ({ "{") (expression_statement "pcVar1 = (char *)FUN_0001a76c(&DAT_000d4810,pcVar1);" (assignment_expression "pcVar1 = (char *)FUN_0001a76c(&DAT_000d4810,pcVar1)" (identifier "pcVar1") (= "=") (cast_expression "(char *)FUN_0001a76c(&DAT_000d4810,pcVar1)" (( "(") (type_descriptor "char *" (primitive_type "char") (abstract_pointer_declarator "*" (* "*"))) () ")") (call_expression "FUN_0001a76c(&DAT_000d4810,pcVar1)" (identifier "FUN_0001a76c") (argument_list "(&DAT_000d4810,pcVar1)" (( "(") (pointer_expression "&DAT_000d4810" (& "&") (identifier "DAT_000d4810")) (, ",") (identifier "pcVar1") () ")"))))) (; ";")) (expression_statement "*__argv = pcVar1;" (assignment_expression "*__argv = pcVar1" (pointer_expression "*__argv" (* "*") (identifier "__argv")) (= "=") (identifier "pcVar1")) (; ";")) (} "}"))) (expression_statement "__argv[1] = (char *)0x0;" (assignment_expression "__argv[1] = (char *)0x0" (subscript_expression "__argv[1]" (identifier "__argv") ([ "[") (number_literal "1") (] "]")) (= "=") (cast_expression "(char *)0x0" (( "(") (type_descriptor "char *" (primitive_type "char") (abstract_pointer_declarator "*" (* "*"))) () ")") (number_literal "0x0"))) (; ";")) (if_statement "if (param_3 != (int *)0x0) {\n    iVar2 = 1;\n    do {\n      pcVar1 = (char *)param_3[iVar2 + -1];\n      __argv[iVar2] = pcVar1;\n      iVar2 = iVar2 + 1;\n    } while (pcVar1 != (char *)0x0);\n  }" (if "if") (parenthesized_expression "(param_3 != (int *)0x0)" (( "(") (binary_expression "param_3 != (int *)0x0" (identifier "param_3") (!= "!=") (cast_expression "(int *)0x0" (( "(") (type_descriptor "int *" (primitive_type "int") (abstract_pointer_declarator "*" (* "*"))) () ")") (number_literal "0x0"))) () ")")) (compound_statement "{\n    iVar2 = 1;\n    do {\n      pcVar1 = (char *)param_3[iVar2 + -1];\n      __argv[iVar2] = pcVar1;\n      iVar2 = iVar2 + 1;\n    } while (pcVar1 != (char *)0x0);\n  }" ({ "{") (expression_statement "iVar2 = 1;" (assignment_expression "iVar2 = 1" (identifier "iVar2") (= "=") (number_literal "1")) (; ";")) (do_statement "do {\n      pcVar1 = (char *)param_3[iVar2 + -1];\n      __argv[iVar2] = pcVar1;\n      iVar2 = iVar2 + 1;\n    } while (pcVar1 != (char *)0x0);" (do "do") (compound_statement "{\n      pcVar1 = (char *)param_3[iVar2 + -1];\n      __argv[iVar2] = pcVar1;\n      iVar2 = iVar2 + 1;\n    }" ({ "{") (expression_statement "pcVar1 = (char *)param_3[iVar2 + -1];" (assignment_expression "pcVar1 = (char *)param_3[iVar2 + -1]" (identifier "pcVar1") (= "=") (cast_expression "(char *)param_3[iVar2 + -1]" (( "(") (type_descriptor "char *" (primitive_type "char") (abstract_pointer_declarator "*" (* "*"))) () ")") (subscript_expression "param_3[iVar2 + -1]" (identifier "param_3") ([ "[") (binary_expression "iVar2 + -1" (identifier "iVar2") (+ "+") (number_literal "-1")) (] "]")))) (; ";")) (expression_statement "__argv[iVar2] = pcVar1;" (assignment_expression "__argv[iVar2] = pcVar1" (subscript_expression "__argv[iVar2]" (identifier "__argv") ([ "[") (identifier "iVar2") (] "]")) (= "=") (identifier "pcVar1")) (; ";")) (expression_statement "iVar2 = iVar2 + 1;" (assignment_expression "iVar2 = iVar2 + 1" (identifier "iVar2") (= "=") (binary_expression "iVar2 + 1" (identifier "iVar2") (+ "+") (number_literal "1"))) (; ";")) (} "}")) (while "while") (parenthesized_expression "(pcVar1 != (char *)0x0)" (( "(") (binary_expression "pcVar1 != (char *)0x0" (identifier "pcVar1") (!= "!=") (cast_expression "(char *)0x0" (( "(") (type_descriptor "char *" (primitive_type "char") (abstract_pointer_declarator "*" (* "*"))) () ")") (number_literal "0x0"))) () ")")) (; ";")) (} "}"))) (expression_statement "execv(param_1,__argv);" (call_expression "execv(param_1,__argv)" (identifier "execv") (argument_list "(param_1,__argv)" (( "(") (identifier "param_1") (, ",") (identifier "__argv") () ")"))) (; ";")) (expression_statement "FUN_00018fc9("can\'t execute \'%s\'",param_1);" (call_expression "FUN_00018fc9("can\'t execute \'%s\'",param_1)" (identifier "FUN_00018fc9") (argument_list "("can\'t execute \'%s\'",param_1)" (( "(") (string_literal ""can\'t execute \'%s\'"" (" """) (string_content "can") (escape_sequence "\'") (string_content "t execute ") (escape_sequence "\'") (string_content "%s") (escape_sequence "\'") (" """)) (, ",") (identifier "param_1") () ")"))) (; ";")) (} "}")))

/* WARNING: Function: __x86.get_pc_thunk.bx replaced with injection: get_pc_thunk_bx */

void function_1(char *shell,int loginshell,char **additional_args)

{
}


(translation_unit (function_definition type: (primitive_type) (ERROR (identifier)) declarator: (function_declarator declarator: (identifier) parameters: (parameter_list (parameter_declaration type: (primitive_type) declarator: (pointer_declarator declarator: (identifier))) (parameter_declaration type: (primitive_type) declarator: (identifier)) (parameter_declaration type: (primitive_type) declarator: (pointer_declarator declarator: (identifier))))) body: (compound_statement (declaration type: (primitive_type) declarator: (pointer_declarator declarator: (pointer_declarator declarator: (identifier)))) (declaration type: (primitive_type) declarator: (pointer_declarator declarator: (identifier))) (declaration type: (primitive_type) declarator: (identifier)) (declaration type: (primitive_type) declarator: (pointer_declarator declarator: (identifier))) (if_statement condition: (parenthesized_expression (binary_expression left: (identifier) right: (cast_expression type: (type_descriptor type: (primitive_type) declarator: (abstract_pointer_declarator)) value: (number_literal)))) consequence: (compound_statement (expression_statement (assignment_expression left: (identifier) right: (pointer_expression argument: (identifier)))) (expression_statement (assignment_expression left: (identifier) right: (identifier))) (while_statement condition: (parenthesized_expression (parenthesized_expression (binary_expression left: (binary_expression left: (identifier) right: (number_literal)) right: (parenthesized_expression (comma_expression left: (assignment_expression left: (identifier) right: (binary_expression left: (identifier) right: (number_literal))) right: (binary_expression left: (identifier) right: (cast_expression type: (type_descriptor type: (primitive_type) declarator: (abstract_pointer_declarator)) value: (number_literal)))))))) body: (compound_statement (expression_statement (assignment_expression left: (identifier) right: (pointer_expression argument: (identifier)))))))) (expression_statement (assignment_expression left: (identifier) right: (cast_expression type: (type_descriptor type: (primitive_type) declarator: (abstract_pointer_declarator declarator: (abstract_pointer_declarator))) value: (call_expression function: (identifier) arguments: (argument_list))))) (if_statement condition: (parenthesized_expression (binary_expression left: (identifier) right: (cast_expression type: (type_descriptor type: (primitive_type) declarator: (abstract_pointer_declarator)) value: (number_literal)))) consequence: (compound_statement (expression_statement (assignment_expression left: (identifier) right: (string_literal (string_content))))) alternative: (else_clause (if_statement condition: (parenthesized_expression (binary_expression left: (pointer_expression argument: (identifier)) right: (char_literal (escape_sequence)))) consequence: (compound_statement (expression_statement (assignment_expression left: (identifier) right: (string_literal (string_content)))))))) (expression_statement (assignment_expression left: (identifier) right: (cast_expression type: (type_descriptor type: (primitive_type) declarator: (abstract_pointer_declarator)) value: (call_expression function: (identifier) arguments: (argument_list))))) (expression_statement (assignment_expression left: (pointer_expression argument: (identifier)) right: (identifier))) (if_statement condition: (parenthesized_expression (binary_expression left: (identifier) right: (number_literal))) consequence: (compound_statement (expression_statement (assignment_expression left: (identifier) right: (cast_expression type: (type_descriptor type: (primitive_type) declarator: (abstract_pointer_declarator)) value: (call_expression function: (identifier) arguments: (argument_list (pointer_expression argument: (identifier)) (identifier)))))) (expression_statement (assignment_expression left: (pointer_expression argument: (identifier)) right: (identifier))))) (expression_statement (assignment_expression left: (subscript_expression argument: (identifier) index: (number_literal)) right: (cast_expression type: (type_descriptor type: (primitive_type) declarator: (abstract_pointer_declarator)) value: (number_literal)))) (if_statement condition: (parenthesized_expression (binary_expression left: (identifier) right: (cast_expression type: (type_descriptor type: (primitive_type) declarator: (abstract_pointer_declarator)) value: (number_literal)))) consequence: (compound_statement (expression_statement (assignment_expression left: (identifier) right: (number_literal))) (do_statement body: (compound_statement (expression_statement (assignment_expression left: (identifier) right: (cast_expression type: (type_descriptor type: (primitive_type) declarator: (abstract_pointer_declarator)) value: (subscript_expression argument: (identifier) index: (binary_expression left: (identifier) right: (number_literal)))))) (expression_statement (assignment_expression left: (subscript_expression argument: (identifier) index: (identifier)) right: (identifier))) (expression_statement (assignment_expression left: (identifier) right: (binary_expression left: (identifier) right: (number_literal))))) condition: (parenthesized_expression (binary_expression left: (identifier) right: (cast_expression type: (type_descriptor type: (primitive_type) declarator: (abstract_pointer_declarator)) value: (number_literal))))))) (expression_statement (call_expression function: (identifier) arguments: (argument_list (identifier) (identifier)))) (expression_statement (call_expression function: (identifier) arguments: (argument_list (string_literal (string_content) (escape_sequence) (string_content) (escape_sequence) (string_content) (escape_sequence)) (identifier)))))))

/* WARNING: Function: __i686.get_pc_thunk.bx replaced with injection: get_pc_thunk_bx */

void __regparm3 MASKED(char *param_1,int param_2,int *param_3)

{
  char **__argv;
  char *pcVar1;
  int iVar2;
  int *piVar3;
  
  if (param_3 != (int *)0x0) {
    iVar2 = *param_3;
    piVar3 = param_3;
    while ((iVar2 != 0 && (piVar3 = piVar3 + 1, piVar3 != (int *)0x0))) {
      iVar2 = *piVar3;
    }
  }
  __argv = (char **)FUN_0001a288();
  if (param_1 == (char *)0x0) {
    param_1 = "/bin/sh";
  }
  else if (*param_1 == '\0') {
    param_1 = "/bin/sh";
  }
  pcVar1 = (char *)FUN_00018d94();
  *__argv = pcVar1;
  if (param_2 != 0) {
    pcVar1 = (char *)FUN_0001a76c(&DAT_000d4810,pcVar1);
    *__argv = pcVar1;
  }
  __argv[1] = (char *)0x0;
  if (param_3 != (int *)0x0) {
    iVar2 = 1;
    do {
      pcVar1 = (char *)param_3[iVar2 + -1];
      __argv[iVar2] = pcVar1;
      iVar2 = iVar2 + 1;
    } while (pcVar1 != (char *)0x0);
  }
  execv(param_1,__argv);
                    /* WARNING: Subroutine does not return */
  FUN_00018fc9("can\'t execute \'%s\'",param_1);
}

