
/* WARNING: Function: __x86.get_pc_thunk.bx replaced with injection: get_pc_thunk_bx */

int execute_shell_function(SHELL_VAR *var,WORD_LIST *words)

{
  SHELL_VAR *var_00;
  char *pcVar1;
  int iVar2;
  uint uVar3;
  fd_bitmap *in_stack_ffffffd0;
  int in_stack_ffffffd4;
  int in_stack_ffffffd8;
  
  uVar3 = 0;
  var_00 = (SHELL_VAR *)xmalloc(8);
  var_00->name = (char *)0x20;
  pcVar1 = (char *)xmalloc(0x20);
  var_00->value = pcVar1;
  pcVar1[0] = '\0';
  pcVar1[1] = '\0';
  pcVar1[2] = '\0';
  pcVar1[3] = '\0';
  pcVar1[0x1c] = '\0';
  pcVar1[0x1d] = '\0';
  pcVar1[0x1e] = '\0';
  pcVar1[0x1f] = '\0';
  do {
    *(undefined4 *)(((uint)(pcVar1 + 4) & 0xfffffffc) + uVar3) = 0;
    uVar3 = uVar3 + 4;
  } while (uVar3 < ((uint)(pcVar1 + (0x20 - ((uint)(pcVar1 + 4) & 0xfffffffc))) & 0xfffffffc));
  begin_unwind_frame("execute-shell-function");
  add_unwind_protect(dispose_fd_bitmap,(char *)var_00);
  iVar2 = execute_function(var_00,(WORD_LIST *)0x0,0,in_stack_ffffffd0,in_stack_ffffffd4,
                           in_stack_ffffffd8);
  if (var_00->value != (char *)0x0) {
    free(var_00->value);
  }
  free(var_00);
  discard_unwind_frame("execute-shell-function");
  return iVar2;
}



/* WARNING: Function: __i686.get_pc_thunk.bx replaced with injection: get_pc_thunk_bx */

undefined4 execute_shell_function(void)

{
  undefined4 *__ptr;
  undefined4 *puVar1;
  undefined4 uVar2;
  uint uVar3;
  
  uVar3 = 0;
  __ptr = (undefined4 *)xmalloc(8);
  *__ptr = 0x20;
  puVar1 = (undefined4 *)xmalloc(0x20);
  __ptr[1] = puVar1;
  *puVar1 = 0;
  puVar1[7] = 0;
  do {
    *(undefined4 *)(((uint)(puVar1 + 1) & 0xfffffffc) + uVar3) = 0;
    uVar3 = uVar3 + 4;
  } while (uVar3 < ((int)puVar1 + (0x20 - ((uint)(puVar1 + 1) & 0xfffffffc)) & 0xfffffffc));
  begin_unwind_frame("execute-shell-function");
  add_unwind_protect(dispose_fd_bitmap,__ptr);
  uVar2 = FUN_00050c50(__ptr,0,0);
  if ((void *)__ptr[1] != (void *)0x0) {
    free((void *)__ptr[1]);
  }
  free(__ptr);
  discard_unwind_frame("execute-shell-function");
  return uVar2;
}


PUSH EBP
MOV EBP,ESP
PUSH EDI
XOR EDI,EDI
PUSH ESI
PUSH EBX
CALL 0x000312b0
ADD EBX,0x120903
SUB ESP,0x28
PUSH 0x8
CALL 0x000ad700
MOV dword ptr [EAX],0x20
MOV ESI,EAX
MOV dword ptr [ESP],0x20
CALL 0x000ad700
XOR ECX,ECX
LEA EDX,[EAX + 0x4]
MOV dword ptr [ESI + 0x4],EAX
AND EDX,0xfffffffc
MOV dword ptr [EAX],0x0
MOV dword ptr [EAX + 0x1c],0x0
SUB EAX,EDX
ADD EAX,0x20
AND EAX,0xfffffffc
MOV dword ptr [EDX + EDI*0x1],ECX
ADD EDI,0x4
CMP EDI,EAX
JC 0x00051741
LEA EDI,[EBX + 0xfffa07e5]
MOV dword ptr [ESP],EDI
CALL 0x0008d990
POP EAX
LEA EAX,[EBX + 0xffed6650]
POP EDX
PUSH ESI
PUSH EAX
CALL 0x0008dbd0
ADD ESP,0xc
MOV EDX,dword ptr [EBP + 0xc]
MOV EAX,dword ptr [EBP + 0x8]
PUSH 0x0
XOR ECX,ECX
PUSH 0x0
PUSH ESI
CALL 0x00050c50
ADD ESP,0x10
MOV dword ptr [EBP + -0x1c],EAX
MOV EAX,dword ptr [ESI + 0x4]
TEST EAX,EAX
JZ 0x00051796
SUB ESP,0xc
PUSH EAX
CALL 0x0002e200
ADD ESP,0x10
SUB ESP,0xc
PUSH ESI
CALL 0x0002e200
MOV dword ptr [ESP],EDI
CALL 0x0008da00
MOV EAX,dword ptr [EBP + -0x1c]
ADD ESP,0x10
LEA ESP,[EBP + -0xc]
POP EBX
POP ESI
POP EDI
POP EBP
RET
(translation_unit "/* WARNING: Function: __i686.get_pc_thunk.bx replaced with injection: get_pc_thunk_bx */\n\nundefined4 execute_shell_function(void)\n\n{\n  undefined4 *__ptr;\n  undefined4 *puVar1;\n  undefined4 uVar2;\n  uint uVar3;\n  \n  uVar3 = 0;\n  __ptr = (undefined4 *)xmalloc(8);\n  *__ptr = 0x20;\n  puVar1 = (undefined4 *)xmalloc(0x20);\n  __ptr[1] = puVar1;\n  *puVar1 = 0;\n  puVar1[7] = 0;\n  do {\n    *(undefined4 *)(((uint)(puVar1 + 1) & 0xfffffffc) + uVar3) = 0;\n    uVar3 = uVar3 + 4;\n  } while (uVar3 < ((int)puVar1 + (0x20 - ((uint)(puVar1 + 1) & 0xfffffffc)) & 0xfffffffc));\n  begin_unwind_frame("execute-shell-function");\n  add_unwind_protect(dispose_fd_bitmap,__ptr);\n  uVar2 = FUN_00050c50(__ptr,0,0);\n  if ((void *)__ptr[1] != (void *)0x0) {\n    free((void *)__ptr[1]);\n  }\n  free(__ptr);\n  discard_unwind_frame("execute-shell-function");\n  return uVar2;\n}\n\n" comment (function_definition "undefined4 execute_shell_function(void)\n\n{\n  undefined4 *__ptr;\n  undefined4 *puVar1;\n  undefined4 uVar2;\n  uint uVar3;\n  \n  uVar3 = 0;\n  __ptr = (undefined4 *)xmalloc(8);\n  *__ptr = 0x20;\n  puVar1 = (undefined4 *)xmalloc(0x20);\n  __ptr[1] = puVar1;\n  *puVar1 = 0;\n  puVar1[7] = 0;\n  do {\n    *(undefined4 *)(((uint)(puVar1 + 1) & 0xfffffffc) + uVar3) = 0;\n    uVar3 = uVar3 + 4;\n  } while (uVar3 < ((int)puVar1 + (0x20 - ((uint)(puVar1 + 1) & 0xfffffffc)) & 0xfffffffc));\n  begin_unwind_frame("execute-shell-function");\n  add_unwind_protect(dispose_fd_bitmap,__ptr);\n  uVar2 = FUN_00050c50(__ptr,0,0);\n  if ((void *)__ptr[1] != (void *)0x0) {\n    free((void *)__ptr[1]);\n  }\n  free(__ptr);\n  discard_unwind_frame("execute-shell-function");\n  return uVar2;\n}" type_identifier (function_declarator "execute_shell_function(void)" identifier (parameter_list "(void)" ( (parameter_declaration "void" primitive_type) ))) (compound_statement "{\n  undefined4 *__ptr;\n  undefined4 *puVar1;\n  undefined4 uVar2;\n  uint uVar3;\n  \n  uVar3 = 0;\n  __ptr = (undefined4 *)xmalloc(8);\n  *__ptr = 0x20;\n  puVar1 = (undefined4 *)xmalloc(0x20);\n  __ptr[1] = puVar1;\n  *puVar1 = 0;\n  puVar1[7] = 0;\n  do {\n    *(undefined4 *)(((uint)(puVar1 + 1) & 0xfffffffc) + uVar3) = 0;\n    uVar3 = uVar3 + 4;\n  } while (uVar3 < ((int)puVar1 + (0x20 - ((uint)(puVar1 + 1) & 0xfffffffc)) & 0xfffffffc));\n  begin_unwind_frame("execute-shell-function");\n  add_unwind_protect(dispose_fd_bitmap,__ptr);\n  uVar2 = FUN_00050c50(__ptr,0,0);\n  if ((void *)__ptr[1] != (void *)0x0) {\n    free((void *)__ptr[1]);\n  }\n  free(__ptr);\n  discard_unwind_frame("execute-shell-function");\n  return uVar2;\n}" { (declaration "undefined4 *__ptr;" type_identifier (pointer_declarator "*__ptr" * identifier) ;) (declaration "undefined4 *puVar1;" type_identifier (pointer_declarator "*puVar1" * identifier) ;) (declaration "undefined4 uVar2;" type_identifier identifier ;) (declaration "uint uVar3;" type_identifier identifier ;) (expression_statement "uVar3 = 0;" (assignment_expression "uVar3 = 0" identifier = number_literal) ;) (expression_statement "__ptr = (undefined4 *)xmalloc(8);" (assignment_expression "__ptr = (undefined4 *)xmalloc(8)" identifier = (cast_expression "(undefined4 *)xmalloc(8)" ( (type_descriptor "undefined4 *" type_identifier (abstract_pointer_declarator "*" *)) ) (call_expression "xmalloc(8)" identifier (argument_list "(8)" ( number_literal ))))) ;) (expression_statement "*__ptr = 0x20;" (assignment_expression "*__ptr = 0x20" (pointer_expression "*__ptr" * identifier) = number_literal) ;) (expression_statement "puVar1 = (undefined4 *)xmalloc(0x20);" (assignment_expression "puVar1 = (undefined4 *)xmalloc(0x20)" identifier = (cast_expression "(undefined4 *)xmalloc(0x20)" ( (type_descriptor "undefined4 *" type_identifier (abstract_pointer_declarator "*" *)) ) (call_expression "xmalloc(0x20)" identifier (argument_list "(0x20)" ( number_literal ))))) ;) (expression_statement "__ptr[1] = puVar1;" (assignment_expression "__ptr[1] = puVar1" (subscript_expression "__ptr[1]" identifier [ number_literal ]) = identifier) ;) (expression_statement "*puVar1 = 0;" (assignment_expression "*puVar1 = 0" (pointer_expression "*puVar1" * identifier) = number_literal) ;) (expression_statement "puVar1[7] = 0;" (assignment_expression "puVar1[7] = 0" (subscript_expression "puVar1[7]" identifier [ number_literal ]) = number_literal) ;) (do_statement "do {\n    *(undefined4 *)(((uint)(puVar1 + 1) & 0xfffffffc) + uVar3) = 0;\n    uVar3 = uVar3 + 4;\n  } while (uVar3 < ((int)puVar1 + (0x20 - ((uint)(puVar1 + 1) & 0xfffffffc)) & 0xfffffffc));" do (compound_statement "{\n    *(undefined4 *)(((uint)(puVar1 + 1) & 0xfffffffc) + uVar3) = 0;\n    uVar3 = uVar3 + 4;\n  }" { (expression_statement "*(undefined4 *)(((uint)(puVar1 + 1) & 0xfffffffc) + uVar3) = 0;" (assignment_expression "*(undefined4 *)(((uint)(puVar1 + 1) & 0xfffffffc) + uVar3) = 0" (pointer_expression "*(undefined4 *)(((uint)(puVar1 + 1) & 0xfffffffc) + uVar3)" * (cast_expression "(undefined4 *)(((uint)(puVar1 + 1) & 0xfffffffc) + uVar3)" ( (type_descriptor "undefined4 *" type_identifier (abstract_pointer_declarator "*" *)) ) (parenthesized_expression "(((uint)(puVar1 + 1) & 0xfffffffc) + uVar3)" ( (binary_expression "((uint)(puVar1 + 1) & 0xfffffffc) + uVar3" (parenthesized_expression "((uint)(puVar1 + 1) & 0xfffffffc)" ( (binary_expression "(uint)(puVar1 + 1) & 0xfffffffc" (call_expression "(uint)(puVar1 + 1)" (parenthesized_expression "(uint)" ( identifier )) (argument_list "(puVar1 + 1)" ( (binary_expression "puVar1 + 1" identifier + number_literal) ))) & number_literal) )) + identifier) )))) = number_literal) ;) (expression_statement "uVar3 = uVar3 + 4;" (assignment_expression "uVar3 = uVar3 + 4" identifier = (binary_expression "uVar3 + 4" identifier + number_literal)) ;) }) while (parenthesized_expression "(uVar3 < ((int)puVar1 + (0x20 - ((uint)(puVar1 + 1) & 0xfffffffc)) & 0xfffffffc))" ( (binary_expression "uVar3 < ((int)puVar1 + (0x20 - ((uint)(puVar1 + 1) & 0xfffffffc)) & 0xfffffffc)" identifier < (parenthesized_expression "((int)puVar1 + (0x20 - ((uint)(puVar1 + 1) & 0xfffffffc)) & 0xfffffffc)" ( (binary_expression "(int)puVar1 + (0x20 - ((uint)(puVar1 + 1) & 0xfffffffc)) & 0xfffffffc" (binary_expression "(int)puVar1 + (0x20 - ((uint)(puVar1 + 1) & 0xfffffffc))" (cast_expression "(int)puVar1" ( (type_descriptor "int" primitive_type) ) identifier) + (parenthesized_expression "(0x20 - ((uint)(puVar1 + 1) & 0xfffffffc))" ( (binary_expression "0x20 - ((uint)(puVar1 + 1) & 0xfffffffc)" number_literal - (parenthesized_expression "((uint)(puVar1 + 1) & 0xfffffffc)" ( (binary_expression "(uint)(puVar1 + 1) & 0xfffffffc" (call_expression "(uint)(puVar1 + 1)" (parenthesized_expression "(uint)" ( identifier )) (argument_list "(puVar1 + 1)" ( (binary_expression "puVar1 + 1" identifier + number_literal) ))) & number_literal) ))) ))) & number_literal) ))) )) ;) (expression_statement "begin_unwind_frame("execute-shell-function");" (call_expression "begin_unwind_frame("execute-shell-function")" identifier (argument_list "("execute-shell-function")" ( (string_literal ""execute-shell-function"" " string_content ") ))) ;) (expression_statement "add_unwind_protect(dispose_fd_bitmap,__ptr);" (call_expression "add_unwind_protect(dispose_fd_bitmap,__ptr)" identifier (argument_list "(dispose_fd_bitmap,__ptr)" ( identifier , identifier ))) ;) (expression_statement "uVar2 = FUN_00050c50(__ptr,0,0);" (assignment_expression "uVar2 = FUN_00050c50(__ptr,0,0)" identifier = (call_expression "FUN_00050c50(__ptr,0,0)" identifier (argument_list "(__ptr,0,0)" ( identifier , number_literal , number_literal )))) ;) (if_statement "if ((void *)__ptr[1] != (void *)0x0) {\n    free((void *)__ptr[1]);\n  }" if (parenthesized_expression "((void *)__ptr[1] != (void *)0x0)" ( (binary_expression "(void *)__ptr[1] != (void *)0x0" (cast_expression "(void *)__ptr[1]" ( (type_descriptor "void *" primitive_type (abstract_pointer_declarator "*" *)) ) (subscript_expression "__ptr[1]" identifier [ number_literal ])) != (cast_expression "(void *)0x0" ( (type_descriptor "void *" primitive_type (abstract_pointer_declarator "*" *)) ) number_literal)) )) (compound_statement "{\n    free((void *)__ptr[1]);\n  }" { (expression_statement "free((void *)__ptr[1]);" (call_expression "free((void *)__ptr[1])" identifier (argument_list "((void *)__ptr[1])" ( (cast_expression "(void *)__ptr[1]" ( (type_descriptor "void *" primitive_type (abstract_pointer_declarator "*" *)) ) (subscript_expression "__ptr[1]" identifier [ number_literal ])) ))) ;) })) (expression_statement "free(__ptr);" (call_expression "free(__ptr)" identifier (argument_list "(__ptr)" ( identifier ))) ;) (expression_statement "discard_unwind_frame("execute-shell-function");" (call_expression "discard_unwind_frame("execute-shell-function")" identifier (argument_list "("execute-shell-function")" ( (string_literal ""execute-shell-function"" " string_content ") ))) ;) (return_statement "return uVar2;" return identifier ;) })))
(translation_unit "/* WARNING: Function: __x86.get_pc_thunk.bx replaced with injection: get_pc_thunk_bx */\n\nint execute_shell_function(SHELL_VAR *var,WORD_LIST *words)\n\n{\n  SHELL_VAR *var_00;\n  char *pcVar1;\n  int iVar2;\n  uint uVar3;\n  fd_bitmap *in_stack_ffffffd0;\n  int in_stack_ffffffd4;\n  int in_stack_ffffffd8;\n  \n  uVar3 = 0;\n  var_00 = (SHELL_VAR *)xmalloc(8);\n  var_00->name = (char *)0x20;\n  pcVar1 = (char *)xmalloc(0x20);\n  var_00->value = pcVar1;\n  pcVar1[0] = '\0';\n  pcVar1[1] = '\0';\n  pcVar1[2] = '\0';\n  pcVar1[3] = '\0';\n  pcVar1[0x1c] = '\0';\n  pcVar1[0x1d] = '\0';\n  pcVar1[0x1e] = '\0';\n  pcVar1[0x1f] = '\0';\n  do {\n    *(undefined4 *)(((uint)(pcVar1 + 4) & 0xfffffffc) + uVar3) = 0;\n    uVar3 = uVar3 + 4;\n  } while (uVar3 < ((uint)(pcVar1 + (0x20 - ((uint)(pcVar1 + 4) & 0xfffffffc))) & 0xfffffffc));\n  begin_unwind_frame("execute-shell-function");\n  add_unwind_protect(dispose_fd_bitmap,(char *)var_00);\n  iVar2 = execute_function(var_00,(WORD_LIST *)0x0,0,in_stack_ffffffd0,in_stack_ffffffd4,\n                           in_stack_ffffffd8);\n  if (var_00->value != (char *)0x0) {\n    free(var_00->value);\n  }\n  free(var_00);\n  discard_unwind_frame("execute-shell-function");\n  return iVar2;\n}\n\n" comment (function_definition "int execute_shell_function(SHELL_VAR *var,WORD_LIST *words)\n\n{\n  SHELL_VAR *var_00;\n  char *pcVar1;\n  int iVar2;\n  uint uVar3;\n  fd_bitmap *in_stack_ffffffd0;\n  int in_stack_ffffffd4;\n  int in_stack_ffffffd8;\n  \n  uVar3 = 0;\n  var_00 = (SHELL_VAR *)xmalloc(8);\n  var_00->name = (char *)0x20;\n  pcVar1 = (char *)xmalloc(0x20);\n  var_00->value = pcVar1;\n  pcVar1[0] = '\0';\n  pcVar1[1] = '\0';\n  pcVar1[2] = '\0';\n  pcVar1[3] = '\0';\n  pcVar1[0x1c] = '\0';\n  pcVar1[0x1d] = '\0';\n  pcVar1[0x1e] = '\0';\n  pcVar1[0x1f] = '\0';\n  do {\n    *(undefined4 *)(((uint)(pcVar1 + 4) & 0xfffffffc) + uVar3) = 0;\n    uVar3 = uVar3 + 4;\n  } while (uVar3 < ((uint)(pcVar1 + (0x20 - ((uint)(pcVar1 + 4) & 0xfffffffc))) & 0xfffffffc));\n  begin_unwind_frame("execute-shell-function");\n  add_unwind_protect(dispose_fd_bitmap,(char *)var_00);\n  iVar2 = execute_function(var_00,(WORD_LIST *)0x0,0,in_stack_ffffffd0,in_stack_ffffffd4,\n                           in_stack_ffffffd8);\n  if (var_00->value != (char *)0x0) {\n    free(var_00->value);\n  }\n  free(var_00);\n  discard_unwind_frame("execute-shell-function");\n  return iVar2;\n}" primitive_type (function_declarator "execute_shell_function(SHELL_VAR *var,WORD_LIST *words)" identifier (parameter_list "(SHELL_VAR *var,WORD_LIST *words)" ( (parameter_declaration "SHELL_VAR *var" type_identifier (pointer_declarator "*var" * identifier)) , (parameter_declaration "WORD_LIST *words" type_identifier (pointer_declarator "*words" * identifier)) ))) (compound_statement "{\n  SHELL_VAR *var_00;\n  char *pcVar1;\n  int iVar2;\n  uint uVar3;\n  fd_bitmap *in_stack_ffffffd0;\n  int in_stack_ffffffd4;\n  int in_stack_ffffffd8;\n  \n  uVar3 = 0;\n  var_00 = (SHELL_VAR *)xmalloc(8);\n  var_00->name = (char *)0x20;\n  pcVar1 = (char *)xmalloc(0x20);\n  var_00->value = pcVar1;\n  pcVar1[0] = '\0';\n  pcVar1[1] = '\0';\n  pcVar1[2] = '\0';\n  pcVar1[3] = '\0';\n  pcVar1[0x1c] = '\0';\n  pcVar1[0x1d] = '\0';\n  pcVar1[0x1e] = '\0';\n  pcVar1[0x1f] = '\0';\n  do {\n    *(undefined4 *)(((uint)(pcVar1 + 4) & 0xfffffffc) + uVar3) = 0;\n    uVar3 = uVar3 + 4;\n  } while (uVar3 < ((uint)(pcVar1 + (0x20 - ((uint)(pcVar1 + 4) & 0xfffffffc))) & 0xfffffffc));\n  begin_unwind_frame("execute-shell-function");\n  add_unwind_protect(dispose_fd_bitmap,(char *)var_00);\n  iVar2 = execute_function(var_00,(WORD_LIST *)0x0,0,in_stack_ffffffd0,in_stack_ffffffd4,\n                           in_stack_ffffffd8);\n  if (var_00->value != (char *)0x0) {\n    free(var_00->value);\n  }\n  free(var_00);\n  discard_unwind_frame("execute-shell-function");\n  return iVar2;\n}" { (declaration "SHELL_VAR *var_00;" type_identifier (pointer_declarator "*var_00" * identifier) ;) (declaration "char *pcVar1;" primitive_type (pointer_declarator "*pcVar1" * identifier) ;) (declaration "int iVar2;" primitive_type identifier ;) (declaration "uint uVar3;" type_identifier identifier ;) (declaration "fd_bitmap *in_stack_ffffffd0;" type_identifier (pointer_declarator "*in_stack_ffffffd0" * identifier) ;) (declaration "int in_stack_ffffffd4;" primitive_type identifier ;) (declaration "int in_stack_ffffffd8;" primitive_type identifier ;) (expression_statement "uVar3 = 0;" (assignment_expression "uVar3 = 0" identifier = number_literal) ;) (expression_statement "var_00 = (SHELL_VAR *)xmalloc(8);" (assignment_expression "var_00 = (SHELL_VAR *)xmalloc(8)" identifier = (cast_expression "(SHELL_VAR *)xmalloc(8)" ( (type_descriptor "SHELL_VAR *" type_identifier (abstract_pointer_declarator "*" *)) ) (call_expression "xmalloc(8)" identifier (argument_list "(8)" ( number_literal ))))) ;) (expression_statement "var_00->name = (char *)0x20;" (assignment_expression "var_00->name = (char *)0x20" (field_expression "var_00->name" identifier -> field_identifier) = (cast_expression "(char *)0x20" ( (type_descriptor "char *" primitive_type (abstract_pointer_declarator "*" *)) ) number_literal)) ;) (expression_statement "pcVar1 = (char *)xmalloc(0x20);" (assignment_expression "pcVar1 = (char *)xmalloc(0x20)" identifier = (cast_expression "(char *)xmalloc(0x20)" ( (type_descriptor "char *" primitive_type (abstract_pointer_declarator "*" *)) ) (call_expression "xmalloc(0x20)" identifier (argument_list "(0x20)" ( number_literal ))))) ;) (expression_statement "var_00->value = pcVar1;" (assignment_expression "var_00->value = pcVar1" (field_expression "var_00->value" identifier -> field_identifier) = identifier) ;) (expression_statement "pcVar1[0] = '\0';" (assignment_expression "pcVar1[0] = '\0'" (subscript_expression "pcVar1[0]" identifier [ number_literal ]) = (char_literal "'\0'" ' escape_sequence ')) ;) (expression_statement "pcVar1[1] = '\0';" (assignment_expression "pcVar1[1] = '\0'" (subscript_expression "pcVar1[1]" identifier [ number_literal ]) = (char_literal "'\0'" ' escape_sequence ')) ;) (expression_statement "pcVar1[2] = '\0';" (assignment_expression "pcVar1[2] = '\0'" (subscript_expression "pcVar1[2]" identifier [ number_literal ]) = (char_literal "'\0'" ' escape_sequence ')) ;) (expression_statement "pcVar1[3] = '\0';" (assignment_expression "pcVar1[3] = '\0'" (subscript_expression "pcVar1[3]" identifier [ number_literal ]) = (char_literal "'\0'" ' escape_sequence ')) ;) (expression_statement "pcVar1[0x1c] = '\0';" (assignment_expression "pcVar1[0x1c] = '\0'" (subscript_expression "pcVar1[0x1c]" identifier [ number_literal ]) = (char_literal "'\0'" ' escape_sequence ')) ;) (expression_statement "pcVar1[0x1d] = '\0';" (assignment_expression "pcVar1[0x1d] = '\0'" (subscript_expression "pcVar1[0x1d]" identifier [ number_literal ]) = (char_literal "'\0'" ' escape_sequence ')) ;) (expression_statement "pcVar1[0x1e] = '\0';" (assignment_expression "pcVar1[0x1e] = '\0'" (subscript_expression "pcVar1[0x1e]" identifier [ number_literal ]) = (char_literal "'\0'" ' escape_sequence ')) ;) (expression_statement "pcVar1[0x1f] = '\0';" (assignment_expression "pcVar1[0x1f] = '\0'" (subscript_expression "pcVar1[0x1f]" identifier [ number_literal ]) = (char_literal "'\0'" ' escape_sequence ')) ;) (do_statement "do {\n    *(undefined4 *)(((uint)(pcVar1 + 4) & 0xfffffffc) + uVar3) = 0;\n    uVar3 = uVar3 + 4;\n  } while (uVar3 < ((uint)(pcVar1 + (0x20 - ((uint)(pcVar1 + 4) & 0xfffffffc))) & 0xfffffffc));" do (compound_statement "{\n    *(undefined4 *)(((uint)(pcVar1 + 4) & 0xfffffffc) + uVar3) = 0;\n    uVar3 = uVar3 + 4;\n  }" { (expression_statement "*(undefined4 *)(((uint)(pcVar1 + 4) & 0xfffffffc) + uVar3) = 0;" (assignment_expression "*(undefined4 *)(((uint)(pcVar1 + 4) & 0xfffffffc) + uVar3) = 0" (pointer_expression "*(undefined4 *)(((uint)(pcVar1 + 4) & 0xfffffffc) + uVar3)" * (cast_expression "(undefined4 *)(((uint)(pcVar1 + 4) & 0xfffffffc) + uVar3)" ( (type_descriptor "undefined4 *" type_identifier (abstract_pointer_declarator "*" *)) ) (parenthesized_expression "(((uint)(pcVar1 + 4) & 0xfffffffc) + uVar3)" ( (binary_expression "((uint)(pcVar1 + 4) & 0xfffffffc) + uVar3" (parenthesized_expression "((uint)(pcVar1 + 4) & 0xfffffffc)" ( (binary_expression "(uint)(pcVar1 + 4) & 0xfffffffc" (call_expression "(uint)(pcVar1 + 4)" (parenthesized_expression "(uint)" ( identifier )) (argument_list "(pcVar1 + 4)" ( (binary_expression "pcVar1 + 4" identifier + number_literal) ))) & number_literal) )) + identifier) )))) = number_literal) ;) (expression_statement "uVar3 = uVar3 + 4;" (assignment_expression "uVar3 = uVar3 + 4" identifier = (binary_expression "uVar3 + 4" identifier + number_literal)) ;) }) while (parenthesized_expression "(uVar3 < ((uint)(pcVar1 + (0x20 - ((uint)(pcVar1 + 4) & 0xfffffffc))) & 0xfffffffc))" ( (binary_expression "uVar3 < ((uint)(pcVar1 + (0x20 - ((uint)(pcVar1 + 4) & 0xfffffffc))) & 0xfffffffc)" identifier < (parenthesized_expression "((uint)(pcVar1 + (0x20 - ((uint)(pcVar1 + 4) & 0xfffffffc))) & 0xfffffffc)" ( (binary_expression "(uint)(pcVar1 + (0x20 - ((uint)(pcVar1 + 4) & 0xfffffffc))) & 0xfffffffc" (call_expression "(uint)(pcVar1 + (0x20 - ((uint)(pcVar1 + 4) & 0xfffffffc)))" (parenthesized_expression "(uint)" ( identifier )) (argument_list "(pcVar1 + (0x20 - ((uint)(pcVar1 + 4) & 0xfffffffc)))" ( (binary_expression "pcVar1 + (0x20 - ((uint)(pcVar1 + 4) & 0xfffffffc))" identifier + (parenthesized_expression "(0x20 - ((uint)(pcVar1 + 4) & 0xfffffffc))" ( (binary_expression "0x20 - ((uint)(pcVar1 + 4) & 0xfffffffc)" number_literal - (parenthesized_expression "((uint)(pcVar1 + 4) & 0xfffffffc)" ( (binary_expression "(uint)(pcVar1 + 4) & 0xfffffffc" (call_expression "(uint)(pcVar1 + 4)" (parenthesized_expression "(uint)" ( identifier )) (argument_list "(pcVar1 + 4)" ( (binary_expression "pcVar1 + 4" identifier + number_literal) ))) & number_literal) ))) ))) ))) & number_literal) ))) )) ;) (expression_statement "begin_unwind_frame("execute-shell-function");" (call_expression "begin_unwind_frame("execute-shell-function")" identifier (argument_list "("execute-shell-function")" ( (string_literal ""execute-shell-function"" " string_content ") ))) ;) (expression_statement "add_unwind_protect(dispose_fd_bitmap,(char *)var_00);" (call_expression "add_unwind_protect(dispose_fd_bitmap,(char *)var_00)" identifier (argument_list "(dispose_fd_bitmap,(char *)var_00)" ( identifier , (cast_expression "(char *)var_00" ( (type_descriptor "char *" primitive_type (abstract_pointer_declarator "*" *)) ) identifier) ))) ;) (expression_statement "iVar2 = execute_function(var_00,(WORD_LIST *)0x0,0,in_stack_ffffffd0,in_stack_ffffffd4,\n                           in_stack_ffffffd8);" (assignment_expression "iVar2 = execute_function(var_00,(WORD_LIST *)0x0,0,in_stack_ffffffd0,in_stack_ffffffd4,\n                           in_stack_ffffffd8)" identifier = (call_expression "execute_function(var_00,(WORD_LIST *)0x0,0,in_stack_ffffffd0,in_stack_ffffffd4,\n                           in_stack_ffffffd8)" identifier (argument_list "(var_00,(WORD_LIST *)0x0,0,in_stack_ffffffd0,in_stack_ffffffd4,\n                           in_stack_ffffffd8)" ( identifier , (cast_expression "(WORD_LIST *)0x0" ( (type_descriptor "WORD_LIST *" type_identifier (abstract_pointer_declarator "*" *)) ) number_literal) , number_literal , identifier , identifier , identifier )))) ;) (if_statement "if (var_00->value != (char *)0x0) {\n    free(var_00->value);\n  }" if (parenthesized_expression "(var_00->value != (char *)0x0)" ( (binary_expression "var_00->value != (char *)0x0" (field_expression "var_00->value" identifier -> field_identifier) != (cast_expression "(char *)0x0" ( (type_descriptor "char *" primitive_type (abstract_pointer_declarator "*" *)) ) number_literal)) )) (compound_statement "{\n    free(var_00->value);\n  }" { (expression_statement "free(var_00->value);" (call_expression "free(var_00->value)" identifier (argument_list "(var_00->value)" ( (field_expression "var_00->value" identifier -> field_identifier) ))) ;) })) (expression_statement "free(var_00);" (call_expression "free(var_00)" identifier (argument_list "(var_00)" ( identifier ))) ;) (expression_statement "discard_unwind_frame("execute-shell-function");" (call_expression "discard_unwind_frame("execute-shell-function")" identifier (argument_list "("execute-shell-function")" ( (string_literal ""execute-shell-function"" " string_content ") ))) ;) (return_statement "return iVar2;" return identifier ;) })))
(translation_unit "undefined4 execute_shell_function(void)\n\n{\n  undefined4 *__ptr;\n  undefined4 *puVar1;\n  undefined4 uVar2;\n  uint uVar3;\n  \n  uVar3 = 0;\n  __ptr = (undefined4 *)xmalloc(8);\n  *__ptr = 0x20;\n  puVar1 = (undefined4 *)xmalloc(0x20);\n  __ptr[1] = puVar1;\n  *puVar1 = 0;\n  puVar1[7] = 0;\n  do {\n    *(undefined4 *)(((uint)(puVar1 + 1) & 0xfffffffc) + uVar3) = 0;\n    uVar3 = uVar3 + 4;\n  } while (uVar3 < ((int)puVar1 + (0x20 - ((uint)(puVar1 + 1) & 0xfffffffc)) & 0xfffffffc));\n  begin_unwind_frame("execute-shell-function");\n  add_unwind_protect(dispose_fd_bitmap,__ptr);\n  uVar2 = FUN_00050c50(__ptr,0,0);\n  if ((void *)__ptr[1] != (void *)0x0) {\n    free((void *)__ptr[1]);\n  }\n  free(__ptr);\n  discard_unwind_frame("execute-shell-function");\n  return uVar2;\n}\n\n" (function_definition "undefined4 execute_shell_function(void)\n\n{\n  undefined4 *__ptr;\n  undefined4 *puVar1;\n  undefined4 uVar2;\n  uint uVar3;\n  \n  uVar3 = 0;\n  __ptr = (undefined4 *)xmalloc(8);\n  *__ptr = 0x20;\n  puVar1 = (undefined4 *)xmalloc(0x20);\n  __ptr[1] = puVar1;\n  *puVar1 = 0;\n  puVar1[7] = 0;\n  do {\n    *(undefined4 *)(((uint)(puVar1 + 1) & 0xfffffffc) + uVar3) = 0;\n    uVar3 = uVar3 + 4;\n  } while (uVar3 < ((int)puVar1 + (0x20 - ((uint)(puVar1 + 1) & 0xfffffffc)) & 0xfffffffc));\n  begin_unwind_frame("execute-shell-function");\n  add_unwind_protect(dispose_fd_bitmap,__ptr);\n  uVar2 = FUN_00050c50(__ptr,0,0);\n  if ((void *)__ptr[1] != (void *)0x0) {\n    free((void *)__ptr[1]);\n  }\n  free(__ptr);\n  discard_unwind_frame("execute-shell-function");\n  return uVar2;\n}" type_identifier (function_declarator "execute_shell_function(void)" identifier (parameter_list "(void)" ( (parameter_declaration "void" primitive_type) ))) (compound_statement "{\n  undefined4 *__ptr;\n  undefined4 *puVar1;\n  undefined4 uVar2;\n  uint uVar3;\n  \n  uVar3 = 0;\n  __ptr = (undefined4 *)xmalloc(8);\n  *__ptr = 0x20;\n  puVar1 = (undefined4 *)xmalloc(0x20);\n  __ptr[1] = puVar1;\n  *puVar1 = 0;\n  puVar1[7] = 0;\n  do {\n    *(undefined4 *)(((uint)(puVar1 + 1) & 0xfffffffc) + uVar3) = 0;\n    uVar3 = uVar3 + 4;\n  } while (uVar3 < ((int)puVar1 + (0x20 - ((uint)(puVar1 + 1) & 0xfffffffc)) & 0xfffffffc));\n  begin_unwind_frame("execute-shell-function");\n  add_unwind_protect(dispose_fd_bitmap,__ptr);\n  uVar2 = FUN_00050c50(__ptr,0,0);\n  if ((void *)__ptr[1] != (void *)0x0) {\n    free((void *)__ptr[1]);\n  }\n  free(__ptr);\n  discard_unwind_frame("execute-shell-function");\n  return uVar2;\n}" { (declaration "undefined4 *__ptr;" type_identifier (pointer_declarator "*__ptr" * identifier) ;) (declaration "undefined4 *puVar1;" type_identifier (pointer_declarator "*puVar1" * identifier) ;) (declaration "undefined4 uVar2;" type_identifier identifier ;) (declaration "uint uVar3;" type_identifier identifier ;) (expression_statement "uVar3 = 0;" (assignment_expression "uVar3 = 0" identifier = number_literal) ;) (expression_statement "__ptr = (undefined4 *)xmalloc(8);" (assignment_expression "__ptr = (undefined4 *)xmalloc(8)" identifier = (cast_expression "(undefined4 *)xmalloc(8)" ( (type_descriptor "undefined4 *" type_identifier (abstract_pointer_declarator "*" *)) ) (call_expression "xmalloc(8)" identifier (argument_list "(8)" ( number_literal ))))) ;) (expression_statement "*__ptr = 0x20;" (assignment_expression "*__ptr = 0x20" (pointer_expression "*__ptr" * identifier) = number_literal) ;) (expression_statement "puVar1 = (undefined4 *)xmalloc(0x20);" (assignment_expression "puVar1 = (undefined4 *)xmalloc(0x20)" identifier = (cast_expression "(undefined4 *)xmalloc(0x20)" ( (type_descriptor "undefined4 *" type_identifier (abstract_pointer_declarator "*" *)) ) (call_expression "xmalloc(0x20)" identifier (argument_list "(0x20)" ( number_literal ))))) ;) (expression_statement "__ptr[1] = puVar1;" (assignment_expression "__ptr[1] = puVar1" (subscript_expression "__ptr[1]" identifier [ number_literal ]) = identifier) ;) (expression_statement "*puVar1 = 0;" (assignment_expression "*puVar1 = 0" (pointer_expression "*puVar1" * identifier) = number_literal) ;) (expression_statement "puVar1[7] = 0;" (assignment_expression "puVar1[7] = 0" (subscript_expression "puVar1[7]" identifier [ number_literal ]) = number_literal) ;) (do_statement "do {\n    *(undefined4 *)(((uint)(puVar1 + 1) & 0xfffffffc) + uVar3) = 0;\n    uVar3 = uVar3 + 4;\n  } while (uVar3 < ((int)puVar1 + (0x20 - ((uint)(puVar1 + 1) & 0xfffffffc)) & 0xfffffffc));" do (compound_statement "{\n    *(undefined4 *)(((uint)(puVar1 + 1) & 0xfffffffc) + uVar3) = 0;\n    uVar3 = uVar3 + 4;\n  }" { (expression_statement "*(undefined4 *)(((uint)(puVar1 + 1) & 0xfffffffc) + uVar3) = 0;" (assignment_expression "*(undefined4 *)(((uint)(puVar1 + 1) & 0xfffffffc) + uVar3) = 0" (pointer_expression "*(undefined4 *)(((uint)(puVar1 + 1) & 0xfffffffc) + uVar3)" * (cast_expression "(undefined4 *)(((uint)(puVar1 + 1) & 0xfffffffc) + uVar3)" ( (type_descriptor "undefined4 *" type_identifier (abstract_pointer_declarator "*" *)) ) (parenthesized_expression "(((uint)(puVar1 + 1) & 0xfffffffc) + uVar3)" ( (binary_expression "((uint)(puVar1 + 1) & 0xfffffffc) + uVar3" (parenthesized_expression "((uint)(puVar1 + 1) & 0xfffffffc)" ( (binary_expression "(uint)(puVar1 + 1) & 0xfffffffc" (call_expression "(uint)(puVar1 + 1)" (parenthesized_expression "(uint)" ( identifier )) (argument_list "(puVar1 + 1)" ( (binary_expression "puVar1 + 1" identifier + number_literal) ))) & number_literal) )) + identifier) )))) = number_literal) ;) (expression_statement "uVar3 = uVar3 + 4;" (assignment_expression "uVar3 = uVar3 + 4" identifier = (binary_expression "uVar3 + 4" identifier + number_literal)) ;) }) while (parenthesized_expression "(uVar3 < ((int)puVar1 + (0x20 - ((uint)(puVar1 + 1) & 0xfffffffc)) & 0xfffffffc))" ( (binary_expression "uVar3 < ((int)puVar1 + (0x20 - ((uint)(puVar1 + 1) & 0xfffffffc)) & 0xfffffffc)" identifier < (parenthesized_expression "((int)puVar1 + (0x20 - ((uint)(puVar1 + 1) & 0xfffffffc)) & 0xfffffffc)" ( (binary_expression "(int)puVar1 + (0x20 - ((uint)(puVar1 + 1) & 0xfffffffc)) & 0xfffffffc" (binary_expression "(int)puVar1 + (0x20 - ((uint)(puVar1 + 1) & 0xfffffffc))" (cast_expression "(int)puVar1" ( (type_descriptor "int" primitive_type) ) identifier) + (parenthesized_expression "(0x20 - ((uint)(puVar1 + 1) & 0xfffffffc))" ( (binary_expression "0x20 - ((uint)(puVar1 + 1) & 0xfffffffc)" number_literal - (parenthesized_expression "((uint)(puVar1 + 1) & 0xfffffffc)" ( (binary_expression "(uint)(puVar1 + 1) & 0xfffffffc" (call_expression "(uint)(puVar1 + 1)" (parenthesized_expression "(uint)" ( identifier )) (argument_list "(puVar1 + 1)" ( (binary_expression "puVar1 + 1" identifier + number_literal) ))) & number_literal) ))) ))) & number_literal) ))) )) ;) (expression_statement "begin_unwind_frame("execute-shell-function");" (call_expression "begin_unwind_frame("execute-shell-function")" identifier (argument_list "("execute-shell-function")" ( (string_literal ""execute-shell-function"" " string_content ") ))) ;) (expression_statement "add_unwind_protect(dispose_fd_bitmap,__ptr);" (call_expression "add_unwind_protect(dispose_fd_bitmap,__ptr)" identifier (argument_list "(dispose_fd_bitmap,__ptr)" ( identifier , identifier ))) ;) (expression_statement "uVar2 = FUN_00050c50(__ptr,0,0);" (assignment_expression "uVar2 = FUN_00050c50(__ptr,0,0)" identifier = (call_expression "FUN_00050c50(__ptr,0,0)" identifier (argument_list "(__ptr,0,0)" ( identifier , number_literal , number_literal )))) ;) (if_statement "if ((void *)__ptr[1] != (void *)0x0) {\n    free((void *)__ptr[1]);\n  }" if (parenthesized_expression "((void *)__ptr[1] != (void *)0x0)" ( (binary_expression "(void *)__ptr[1] != (void *)0x0" (cast_expression "(void *)__ptr[1]" ( (type_descriptor "void *" primitive_type (abstract_pointer_declarator "*" *)) ) (subscript_expression "__ptr[1]" identifier [ number_literal ])) != (cast_expression "(void *)0x0" ( (type_descriptor "void *" primitive_type (abstract_pointer_declarator "*" *)) ) number_literal)) )) (compound_statement "{\n    free((void *)__ptr[1]);\n  }" { (expression_statement "free((void *)__ptr[1]);" (call_expression "free((void *)__ptr[1])" identifier (argument_list "((void *)__ptr[1])" ( (cast_expression "(void *)__ptr[1]" ( (type_descriptor "void *" primitive_type (abstract_pointer_declarator "*" *)) ) (subscript_expression "__ptr[1]" identifier [ number_literal ])) ))) ;) })) (expression_statement "free(__ptr);" (call_expression "free(__ptr)" identifier (argument_list "(__ptr)" ( identifier ))) ;) (expression_statement "discard_unwind_frame("execute-shell-function");" (call_expression "discard_unwind_frame("execute-shell-function")" identifier (argument_list "("execute-shell-function")" ( (string_literal ""execute-shell-function"" " string_content ") ))) ;) (return_statement "return uVar2;" return identifier ;) })))
(translation_unit (function_definition TYPE (function_declarator IDENT (parameter_list ( (parameter_declaration TYPE) ))) (compound_statement { (declaration TYPE (pointer_declarator * IDENT) ;) (declaration TYPE (pointer_declarator * IDENT) ;) (declaration TYPE IDENT ;) (declaration TYPE IDENT ;) (expression_statement (assignment_expression IDENT = LIT) ;) (expression_statement (assignment_expression IDENT = (cast_expression ( (type_descriptor TYPE (abstract_pointer_declarator *)) ) (call_expression IDENT (argument_list ( LIT ))))) ;) (expression_statement (assignment_expression (pointer_expression * IDENT) = LIT) ;) (expression_statement (assignment_expression IDENT = (cast_expression ( (type_descriptor TYPE (abstract_pointer_declarator *)) ) (call_expression IDENT (argument_list ( LIT ))))) ;) (expression_statement (assignment_expression (subscript_expression IDENT [ LIT ]) = IDENT) ;) (expression_statement (assignment_expression (pointer_expression * IDENT) = LIT) ;) (expression_statement (assignment_expression (subscript_expression IDENT [ LIT ]) = LIT) ;) (do_statement do (compound_statement { (expression_statement (assignment_expression (pointer_expression * (cast_expression ( (type_descriptor TYPE (abstract_pointer_declarator *)) ) (parenthesized_expression ( (binary_expression (parenthesized_expression ( (binary_expression (call_expression (parenthesized_expression ( IDENT )) (argument_list ( (binary_expression IDENT + LIT) ))) & LIT) )) + IDENT) )))) = LIT) ;) (expression_statement (assignment_expression IDENT = (binary_expression IDENT + LIT)) ;) }) while (parenthesized_expression ( (binary_expression IDENT < (parenthesized_expression ( (binary_expression (binary_expression (cast_expression ( (type_descriptor TYPE) ) IDENT) + (parenthesized_expression ( (binary_expression LIT - (parenthesized_expression ( (binary_expression (call_expression (parenthesized_expression ( IDENT )) (argument_list ( (binary_expression IDENT + LIT) ))) & LIT) ))) ))) & LIT) ))) )) ;) (expression_statement (call_expression IDENT (argument_list ( (string_literal " string_content ") ))) ;) (expression_statement (call_expression IDENT (argument_list ( IDENT , IDENT ))) ;) (expression_statement (assignment_expression IDENT = (call_expression IDENT (argument_list ( IDENT , LIT , LIT )))) ;) (if_statement if (parenthesized_expression ( (binary_expression (cast_expression ( (type_descriptor TYPE (abstract_pointer_declarator *)) ) (subscript_expression IDENT [ LIT ])) != (cast_expression ( (type_descriptor TYPE (abstract_pointer_declarator *)) ) LIT)) )) (compound_statement { (expression_statement (call_expression IDENT (argument_list ( (cast_expression ( (type_descriptor TYPE (abstract_pointer_declarator *)) ) (subscript_expression IDENT [ LIT ])) ))) ;) })) (expression_statement (call_expression IDENT (argument_list ( IDENT ))) ;) (expression_statement (call_expression IDENT (argument_list ( (string_literal " string_content ") ))) ;) (return_statement return IDENT ;) })))
(function_definition "undefined4 execute_shell_function(void)\n\n{\n  undefined4 *__ptr;\n  undefined4 *puVar1;\n  undefined4 uVar2;\n  uint uVar3;\n  \n  uVar3 = 0;\n  __ptr = (undefined4 *)xmalloc(8);\n  *__ptr = 0x20;\n  puVar1 = (undefined4 *)xmalloc(0x20);\n  __ptr[1] = puVar1;\n  *puVar1 = 0;\n  puVar1[7] = 0;\n  do {\n    *(undefined4 *)(((uint)(puVar1 + 1) & 0xfffffffc) + uVar3) = 0;\n    uVar3 = uVar3 + 4;\n  } while (uVar3 < ((int)puVar1 + (0x20 - ((uint)(puVar1 + 1) & 0xfffffffc)) & 0xfffffffc));\n  begin_unwind_frame("execute-shell-function");\n  add_unwind_protect(dispose_fd_bitmap,__ptr);\n  uVar2 = FUN_00050c50(__ptr,0,0);\n  if ((void *)__ptr[1] != (void *)0x0) {\n    free((void *)__ptr[1]);\n  }\n  free(__ptr);\n  discard_unwind_frame("execute-shell-function");\n  return uVar2;\n}" (type_identifier "undefined4") (function_declarator "execute_shell_function(void)" (identifier "execute_shell_function") (parameter_list "(void)" (( "(") (parameter_declaration "void" (primitive_type "void")) () ")"))) (compound_statement "{\n  undefined4 *__ptr;\n  undefined4 *puVar1;\n  undefined4 uVar2;\n  uint uVar3;\n  \n  uVar3 = 0;\n  __ptr = (undefined4 *)xmalloc(8);\n  *__ptr = 0x20;\n  puVar1 = (undefined4 *)xmalloc(0x20);\n  __ptr[1] = puVar1;\n  *puVar1 = 0;\n  puVar1[7] = 0;\n  do {\n    *(undefined4 *)(((uint)(puVar1 + 1) & 0xfffffffc) + uVar3) = 0;\n    uVar3 = uVar3 + 4;\n  } while (uVar3 < ((int)puVar1 + (0x20 - ((uint)(puVar1 + 1) & 0xfffffffc)) & 0xfffffffc));\n  begin_unwind_frame("execute-shell-function");\n  add_unwind_protect(dispose_fd_bitmap,__ptr);\n  uVar2 = FUN_00050c50(__ptr,0,0);\n  if ((void *)__ptr[1] != (void *)0x0) {\n    free((void *)__ptr[1]);\n  }\n  free(__ptr);\n  discard_unwind_frame("execute-shell-function");\n  return uVar2;\n}" ({ "{") (declaration "undefined4 *__ptr;" (type_identifier "undefined4") (pointer_declarator "*__ptr" (* "*") (identifier "__ptr")) (; ";")) (declaration "undefined4 *puVar1;" (type_identifier "undefined4") (pointer_declarator "*puVar1" (* "*") (identifier "puVar1")) (; ";")) (declaration "undefined4 uVar2;" (type_identifier "undefined4") (identifier "uVar2") (; ";")) (declaration "uint uVar3;" (type_identifier "uint") (identifier "uVar3") (; ";")) (expression_statement "uVar3 = 0;" (assignment_expression "uVar3 = 0" (identifier "uVar3") (= "=") (number_literal "0")) (; ";")) (expression_statement "__ptr = (undefined4 *)xmalloc(8);" (assignment_expression "__ptr = (undefined4 *)xmalloc(8)" (identifier "__ptr") (= "=") (cast_expression "(undefined4 *)xmalloc(8)" (( "(") (type_descriptor "undefined4 *" (type_identifier "undefined4") (abstract_pointer_declarator "*" (* "*"))) () ")") (call_expression "xmalloc(8)" (identifier "xmalloc") (argument_list "(8)" (( "(") (number_literal "8") () ")"))))) (; ";")) (expression_statement "*__ptr = 0x20;" (assignment_expression "*__ptr = 0x20" (pointer_expression "*__ptr" (* "*") (identifier "__ptr")) (= "=") (number_literal "0x20")) (; ";")) (expression_statement "puVar1 = (undefined4 *)xmalloc(0x20);" (assignment_expression "puVar1 = (undefined4 *)xmalloc(0x20)" (identifier "puVar1") (= "=") (cast_expression "(undefined4 *)xmalloc(0x20)" (( "(") (type_descriptor "undefined4 *" (type_identifier "undefined4") (abstract_pointer_declarator "*" (* "*"))) () ")") (call_expression "xmalloc(0x20)" (identifier "xmalloc") (argument_list "(0x20)" (( "(") (number_literal "0x20") () ")"))))) (; ";")) (expression_statement "__ptr[1] = puVar1;" (assignment_expression "__ptr[1] = puVar1" (subscript_expression "__ptr[1]" (identifier "__ptr") ([ "[") (number_literal "1") (] "]")) (= "=") (identifier "puVar1")) (; ";")) (expression_statement "*puVar1 = 0;" (assignment_expression "*puVar1 = 0" (pointer_expression "*puVar1" (* "*") (identifier "puVar1")) (= "=") (number_literal "0")) (; ";")) (expression_statement "puVar1[7] = 0;" (assignment_expression "puVar1[7] = 0" (subscript_expression "puVar1[7]" (identifier "puVar1") ([ "[") (number_literal "7") (] "]")) (= "=") (number_literal "0")) (; ";")) (do_statement "do {\n    *(undefined4 *)(((uint)(puVar1 + 1) & 0xfffffffc) + uVar3) = 0;\n    uVar3 = uVar3 + 4;\n  } while (uVar3 < ((int)puVar1 + (0x20 - ((uint)(puVar1 + 1) & 0xfffffffc)) & 0xfffffffc));" (do "do") (compound_statement "{\n    *(undefined4 *)(((uint)(puVar1 + 1) & 0xfffffffc) + uVar3) = 0;\n    uVar3 = uVar3 + 4;\n  }" ({ "{") (expression_statement "*(undefined4 *)(((uint)(puVar1 + 1) & 0xfffffffc) + uVar3) = 0;" (assignment_expression "*(undefined4 *)(((uint)(puVar1 + 1) & 0xfffffffc) + uVar3) = 0" (pointer_expression "*(undefined4 *)(((uint)(puVar1 + 1) & 0xfffffffc) + uVar3)" (* "*") (cast_expression "(undefined4 *)(((uint)(puVar1 + 1) & 0xfffffffc) + uVar3)" (( "(") (type_descriptor "undefined4 *" (type_identifier "undefined4") (abstract_pointer_declarator "*" (* "*"))) () ")") (parenthesized_expression "(((uint)(puVar1 + 1) & 0xfffffffc) + uVar3)" (( "(") (binary_expression "((uint)(puVar1 + 1) & 0xfffffffc) + uVar3" (parenthesized_expression "((uint)(puVar1 + 1) & 0xfffffffc)" (( "(") (binary_expression "(uint)(puVar1 + 1) & 0xfffffffc" (call_expression "(uint)(puVar1 + 1)" (parenthesized_expression "(uint)" (( "(") (identifier "uint") () ")")) (argument_list "(puVar1 + 1)" (( "(") (binary_expression "puVar1 + 1" (identifier "puVar1") (+ "+") (number_literal "1")) () ")"))) (& "&") (number_literal "0xfffffffc")) () ")")) (+ "+") (identifier "uVar3")) () ")")))) (= "=") (number_literal "0")) (; ";")) (expression_statement "uVar3 = uVar3 + 4;" (assignment_expression "uVar3 = uVar3 + 4" (identifier "uVar3") (= "=") (binary_expression "uVar3 + 4" (identifier "uVar3") (+ "+") (number_literal "4"))) (; ";")) (} "}")) (while "while") (parenthesized_expression "(uVar3 < ((int)puVar1 + (0x20 - ((uint)(puVar1 + 1) & 0xfffffffc)) & 0xfffffffc))" (( "(") (binary_expression "uVar3 < ((int)puVar1 + (0x20 - ((uint)(puVar1 + 1) & 0xfffffffc)) & 0xfffffffc)" (identifier "uVar3") (< "<") (parenthesized_expression "((int)puVar1 + (0x20 - ((uint)(puVar1 + 1) & 0xfffffffc)) & 0xfffffffc)" (( "(") (binary_expression "(int)puVar1 + (0x20 - ((uint)(puVar1 + 1) & 0xfffffffc)) & 0xfffffffc" (binary_expression "(int)puVar1 + (0x20 - ((uint)(puVar1 + 1) & 0xfffffffc))" (cast_expression "(int)puVar1" (( "(") (type_descriptor "int" (primitive_type "int")) () ")") (identifier "puVar1")) (+ "+") (parenthesized_expression "(0x20 - ((uint)(puVar1 + 1) & 0xfffffffc))" (( "(") (binary_expression "0x20 - ((uint)(puVar1 + 1) & 0xfffffffc)" (number_literal "0x20") (- "-") (parenthesized_expression "((uint)(puVar1 + 1) & 0xfffffffc)" (( "(") (binary_expression "(uint)(puVar1 + 1) & 0xfffffffc" (call_expression "(uint)(puVar1 + 1)" (parenthesized_expression "(uint)" (( "(") (identifier "uint") () ")")) (argument_list "(puVar1 + 1)" (( "(") (binary_expression "puVar1 + 1" (identifier "puVar1") (+ "+") (number_literal "1")) () ")"))) (& "&") (number_literal "0xfffffffc")) () ")"))) () ")"))) (& "&") (number_literal "0xfffffffc")) () ")"))) () ")")) (; ";")) (expression_statement "begin_unwind_frame("execute-shell-function");" (call_expression "begin_unwind_frame("execute-shell-function")" (identifier "begin_unwind_frame") (argument_list "("execute-shell-function")" (( "(") (string_literal ""execute-shell-function"" (" """) (string_content "execute-shell-function") (" """)) () ")"))) (; ";")) (expression_statement "add_unwind_protect(dispose_fd_bitmap,__ptr);" (call_expression "add_unwind_protect(dispose_fd_bitmap,__ptr)" (identifier "add_unwind_protect") (argument_list "(dispose_fd_bitmap,__ptr)" (( "(") (identifier "dispose_fd_bitmap") (, ",") (identifier "__ptr") () ")"))) (; ";")) (expression_statement "uVar2 = FUN_00050c50(__ptr,0,0);" (assignment_expression "uVar2 = FUN_00050c50(__ptr,0,0)" (identifier "uVar2") (= "=") (call_expression "FUN_00050c50(__ptr,0,0)" (identifier "FUN_00050c50") (argument_list "(__ptr,0,0)" (( "(") (identifier "__ptr") (, ",") (number_literal "0") (, ",") (number_literal "0") () ")")))) (; ";")) (if_statement "if ((void *)__ptr[1] != (void *)0x0) {\n    free((void *)__ptr[1]);\n  }" (if "if") (parenthesized_expression "((void *)__ptr[1] != (void *)0x0)" (( "(") (binary_expression "(void *)__ptr[1] != (void *)0x0" (cast_expression "(void *)__ptr[1]" (( "(") (type_descriptor "void *" (primitive_type "void") (abstract_pointer_declarator "*" (* "*"))) () ")") (subscript_expression "__ptr[1]" (identifier "__ptr") ([ "[") (number_literal "1") (] "]"))) (!= "!=") (cast_expression "(void *)0x0" (( "(") (type_descriptor "void *" (primitive_type "void") (abstract_pointer_declarator "*" (* "*"))) () ")") (number_literal "0x0"))) () ")")) (compound_statement "{\n    free((void *)__ptr[1]);\n  }" ({ "{") (expression_statement "free((void *)__ptr[1]);" (call_expression "free((void *)__ptr[1])" (identifier "free") (argument_list "((void *)__ptr[1])" (( "(") (cast_expression "(void *)__ptr[1]" (( "(") (type_descriptor "void *" (primitive_type "void") (abstract_pointer_declarator "*" (* "*"))) () ")") (subscript_expression "__ptr[1]" (identifier "__ptr") ([ "[") (number_literal "1") (] "]"))) () ")"))) (; ";")) (} "}"))) (expression_statement "free(__ptr);" (call_expression "free(__ptr)" (identifier "free") (argument_list "(__ptr)" (( "(") (identifier "__ptr") () ")"))) (; ";")) (expression_statement "discard_unwind_frame("execute-shell-function");" (call_expression "discard_unwind_frame("execute-shell-function")" (identifier "discard_unwind_frame") (argument_list "("execute-shell-function")" (( "(") (string_literal ""execute-shell-function"" (" """) (string_content "execute-shell-function") (" """)) () ")"))) (; ";")) (return_statement "return uVar2;" (return "return") (identifier "uVar2") (; ";")) (} "}")))

/* WARNING: Function: __x86.get_pc_thunk.bx replaced with injection: get_pc_thunk_bx */

int function_1(type_1 *var,type_2 *words)

{
  type_1 *var_00;
  char *var_2;
  int iVar2;
  type_3 var_3;
  type_4 *in_stack_ffffffd0;
  int in_stack_ffffffd4;
  int in_stack_ffffffd8;
  
  var_3 = 0;
  var_00 = (type_1 *)var_1(8);
  var_00->name = (char *)0x20;
  var_2 = (char *)var_1(0x20);
  var_00->value = var_2;
  var_2[0] = '\0';
  var_2[1] = '\0';
  var_2[2] = '\0';
  var_2[3] = '\0';
  var_2[0x1c] = '\0';
  var_2[0x1d] = '\0';
  var_2[0x1e] = '\0';
  var_2[0x1f] = '\0';
  do {
    *(type_5 *)(((type_3)(var_2 + 4) & 0xfffffffc) + var_3) = 0;
    var_3 = var_3 + 4;
  } while (var_3 < ((type_3)(var_2 + (0x20 - ((type_3)(var_2 + 4) & 0xfffffffc))) & 0xfffffffc));
  var_4("execute-shell-function");
  var_5(dispose_fd_bitmap,(char *)var_00);
  iVar2 = var_6(var_00,(type_2 *)0x0,0,in_stack_ffffffd0,in_stack_ffffffd4,
                           in_stack_ffffffd8);
  if (var_00->value != (char *)0x0) {
    var_7(var_00->value);
  }
  var_7(var_00);
  var_8("execute-shell-function");
  return iVar2;
}


(translation_unit (function_definition type: (type_identifier) declarator: (function_declarator declarator: (identifier) parameters: (parameter_list (parameter_declaration type: (primitive_type)))) body: (compound_statement (declaration type: (type_identifier) declarator: (pointer_declarator declarator: (identifier))) (declaration type: (type_identifier) declarator: (pointer_declarator declarator: (identifier))) (declaration type: (type_identifier) declarator: (identifier)) (declaration type: (type_identifier) declarator: (identifier)) (expression_statement (assignment_expression left: (identifier) right: (number_literal))) (expression_statement (assignment_expression left: (identifier) right: (cast_expression type: (type_descriptor type: (type_identifier) declarator: (abstract_pointer_declarator)) value: (call_expression function: (identifier) arguments: (argument_list (number_literal)))))) (expression_statement (assignment_expression left: (pointer_expression argument: (identifier)) right: (number_literal))) (expression_statement (assignment_expression left: (identifier) right: (cast_expression type: (type_descriptor type: (type_identifier) declarator: (abstract_pointer_declarator)) value: (call_expression function: (identifier) arguments: (argument_list (number_literal)))))) (expression_statement (assignment_expression left: (subscript_expression argument: (identifier) index: (number_literal)) right: (identifier))) (expression_statement (assignment_expression left: (pointer_expression argument: (identifier)) right: (number_literal))) (expression_statement (assignment_expression left: (subscript_expression argument: (identifier) index: (number_literal)) right: (number_literal))) (do_statement body: (compound_statement (expression_statement (assignment_expression left: (pointer_expression argument: (cast_expression type: (type_descriptor type: (type_identifier) declarator: (abstract_pointer_declarator)) value: (parenthesized_expression (binary_expression left: (parenthesized_expression (binary_expression left: (call_expression function: (parenthesized_expression (identifier)) arguments: (argument_list (binary_expression left: (identifier) right: (number_literal)))) right: (number_literal))) right: (identifier))))) right: (number_literal))) (expression_statement (assignment_expression left: (identifier) right: (binary_expression left: (identifier) right: (number_literal))))) condition: (parenthesized_expression (binary_expression left: (identifier) right: (parenthesized_expression (binary_expression left: (binary_expression left: (cast_expression type: (type_descriptor type: (primitive_type)) value: (identifier)) right: (parenthesized_expression (binary_expression left: (number_literal) right: (parenthesized_expression (binary_expression left: (call_expression function: (parenthesized_expression (identifier)) arguments: (argument_list (binary_expression left: (identifier) right: (number_literal)))) right: (number_literal)))))) right: (number_literal)))))) (expression_statement (call_expression function: (identifier) arguments: (argument_list (string_literal (string_content))))) (expression_statement (call_expression function: (identifier) arguments: (argument_list (identifier) (identifier)))) (expression_statement (assignment_expression left: (identifier) right: (call_expression function: (identifier) arguments: (argument_list (identifier) (number_literal) (number_literal))))) (if_statement condition: (parenthesized_expression (binary_expression left: (cast_expression type: (type_descriptor type: (primitive_type) declarator: (abstract_pointer_declarator)) value: (subscript_expression argument: (identifier) index: (number_literal))) right: (cast_expression type: (type_descriptor type: (primitive_type) declarator: (abstract_pointer_declarator)) value: (number_literal)))) consequence: (compound_statement (expression_statement (call_expression function: (identifier) arguments: (argument_list (cast_expression type: (type_descriptor type: (primitive_type) declarator: (abstract_pointer_declarator)) value: (subscript_expression argument: (identifier) index: (number_literal)))))))) (expression_statement (call_expression function: (identifier) arguments: (argument_list (identifier)))) (expression_statement (call_expression function: (identifier) arguments: (argument_list (string_literal (string_content))))) (return_statement (identifier)))))

/* WARNING: Function: __i686.get_pc_thunk.bx replaced with injection: get_pc_thunk_bx */

undefined4 MASKED(void)

{
  undefined4 *__ptr;
  undefined4 *puVar1;
  undefined4 uVar2;
  uint uVar3;
  
  uVar3 = 0;
  __ptr = (undefined4 *)xmalloc(8);
  *__ptr = 0x20;
  puVar1 = (undefined4 *)xmalloc(0x20);
  __ptr[1] = puVar1;
  *puVar1 = 0;
  puVar1[7] = 0;
  do {
    *(undefined4 *)(((uint)(puVar1 + 1) & 0xfffffffc) + uVar3) = 0;
    uVar3 = uVar3 + 4;
  } while (uVar3 < ((int)puVar1 + (0x20 - ((uint)(puVar1 + 1) & 0xfffffffc)) & 0xfffffffc));
  begin_unwind_frame("execute-shell-function");
  add_unwind_protect(dispose_fd_bitmap,__ptr);
  uVar2 = FUN_00050c50(__ptr,0,0);
  if ((void *)__ptr[1] != (void *)0x0) {
    free((void *)__ptr[1]);
  }
  free(__ptr);
  discard_unwind_frame("execute-shell-function");
  return uVar2;
}

