Function at 0x401979
Capabilities:
Terminate process

Disassembly:
jmp 0x404a20
push ebp
lea ebp, [esp - 0x100]
sub esp, 0x180
mov eax, dword [0x488180]
xor eax, ebp
mov dword [ebp + 0xfc], eax
push ebx
mov ebx, dword [ebp + 0x10c]
push esi
push edi
xor edi, edi
push 0x40
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0xc], edi
push edi
mov dword [ebp - 0x24], edi
push 0x49e520
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x18], edi
call fcn.0044c680
call fcn.00401ad2
mov eax, dword [0x48a628]
push eax
call fcn.00401541
push eax
mov dword [0x4a6134], eax
call fcn.004018c0
add esp, 0x14
mov dword [0x48a628], eax
call fcn.00401910
mov dword [0x4a25d4], 0x3e8
call fcn.00401014
nop
push edi
push str._dev_null
call fcn.00401d84
add esp, 8
cmp eax, 0xffffffff
mov dword [ebp - 0x48], eax
jne 0x404acc
push edi
push 0x47d438
call fcn.00401d84
add esp, 8
cmp eax, 0xffffffff
mov dword [ebp - 0x48], eax
je 0x404b07
cmp eax, 3
jl 0x404aa0
push eax
call fcn.00401456
call fcn.00401c12
mov ecx, dword [ebx]
push 0x2f
push ecx
call fcn.0044c640
mov edx, dword [ebx]
push 0x5c
push edx
mov esi, eax
call fcn.0044c640
add esp, 0x14
cmp eax, edi
mov dword [ebp - 0x64], eax
je 0x404afe
mov esi, eax
cmp esi, edi
je 0x404b0e
add esi, 1
jmp 0x404b10
push 1
call fcn.0044c5ad
mov esi, dword [ebx]
cmp byte [esi], 0x2d
mov dword [ebp - 0x34], esi
jne 0x404b1e
add esi, 1
mov dword [ebp - 0x34], esi
cmp esi, edi
je 0x404b27
cmp byte [esi], 0
jne 0x404b2c
mov esi, 0x47ccb0
push esi
call fcn.00401073
push 4
push 0x47ccb0
push eax
mov dword [0x49e598], eax
call fcn.0044c13d
neg eax
sbb eax, eax
add eax, 1
push str._bin_sh
mov dword [0x49e4e8], eax
call fcn.00401415
push eax
call fcn.004019e2
push str._bin_tcsh
mov dword [0x49a37c], eax
call fcn.00401415
push eax
call fcn.004019e2
push str.___.__
mov dword [0x49a390], eax
call fcn.00401415
push eax
call fcn.004019e2
mov ecx, dword [0x49e4e8]
neg ecx
sbb ecx, ecx
push 2
and ecx, 0x19
add ecx, 0x25
push 0x4a82cc
push 0x4a8240
mov dword [0x49e418], eax
mov word [0x4a25da], 0x21
mov word [0x49a382], 0x5e
mov word [0x49a380], cx
mov word [0x49e504], 0x23
mov dword [0x49a3d4], eax
mov dword [0x4a60a4], edi
mov dword [0x4a60a8], 1
call fcn.0040101e
add esp, 0x34
push 2
push 0x47d410
call fcn.00401415
add esp, 4
push eax
push 0x4a84bc
call fcn.0040101e
mov edx, dword [ebx]
push edx
call fcn.00401415
push eax
call fcn.004019e2
push 0x4a8264
push eax
mov dword [0x4a61e8], eax
mov dword [0x4a61ec], edi
call fcn.004014a1
add esp, 0x1c
test eax, eax
mov esi, 1
jne 0x404c37
mov dword [ebp - 0x18], esi
call fcn.00401bf9
mov dword [0x4a25c0], eax
call fcn.00401b77
mov dword [0x49a3cc], eax
call fcn.004014e2
mov dword [0x49e590], eax
call fcn.00401ab4
mov dword [0x49e4d0], eax
mov eax, dword [ebx]
cmp byte [eax], 0x2d
je 0x404c8b
cmp dword [ebp + 0x108], 2
jne 0x404c83
mov eax, dword [ebx + 4]
cmp byte [eax], 0x2d
jne 0x404c83
cmp byte [eax + 1], 0x6c
jne 0x404c83
cmp byte [eax + 2], 0
je 0x404c8b
mov dword [0x4a6080], edi
jmp 0x404ce2
mov dword [0x4a6080], esi
mov ecx, dword [ebx]
cmp byte [ecx], 0x2d
je 0x404cc3
mov edx, dword [ebx + 4]
mov byte [edx], 0
mov eax, dword [ebx + 4]
mov byte [eax + 1], 0
mov dword [ebx + 4], edi
mov ecx, dword [ebx]
push ecx
push 0x47d40c
call fcn.004013b6
add esp, 8
sub dword [ebp + 0x108], esi
mov dword [ebp - 0x68], eax
mov dword [ebx], eax
cmp dword [0x4a6080], edi
je 0x404ce2
push 0x4898e0
call fcn.0044ba7a
push 0x4a862c
call fcn.00401cf8
add esp, 8
push str.NOREBIND
call fcn.0044befc
neg eax
sbb eax, eax
neg eax
push str.LANG
mov dword [0x497518], eax
call fcn.0044befc
add esp, 8
test eax, eax
jne 0x404d1f
push str.LC_CTYPE
call fcn.0044befc
add esp, 4
test eax, eax
mov dword [0x49a370], esi
je 0x404d25
mov dword [0x49a370], edi
cmp dword [0x4a815c], edi
je 0x404d3a
cmp dword [0x4a8160], edi
jne 0x404d3a
call fcn.00401b04
call fcn.0040157d
push 0x49e408
call fcn.0044ba7a
call fcn.00401bd6
call fcn.004013de
mov edx, dword [0x4a60dc]
push edx
call fcn.00401a00
mov esi, eax
add esp, 8
cmp esi, edi
mov dword [ebp - 0x70], esi
je 0x404d85
push 5
push str._dev_
push esi
call fcn.0044c13d
add esp, 0xc
test eax, eax
jne 0x404d82
add esi, 5
push esi
jmp 0x404d8a
push 0x47cce9
call fcn.00401415
push eax
call fcn.004019e2
push 2
push eax
push 0x4a8270
call fcn.004019b0
add esp, 0x14
push 0x401474
push 0xa
call fcn.00401e56
push 2
push 0x4a829c
push 0x4a828c
call fcn.0040101e
add esp, 0x14
call fcn.00401325
cmp dword [0x49e4e8], edi
push 2
je 0x404ddb
push 0x4a8870
jmp 0x404de0
push 0x4a885c
push 0x4a8844
call fcn.0040101e
add esp, 0xc
push 2
push 0x4a8870
push 0x4a8844
call fcn.0040101e
push 1
call fcn.00401da7
push str.HOME
call fcn.0044befc
add esp, 0x14
cmp eax, edi
je 0x404e40
push eax
call fcn.00401415
push eax
call fcn.004019e2
push eax
call fcn.00401dcf
mov esi, eax
add esp, 0xc
cmp esi, edi
mov dword [ebp - 0x14], esi
jne 0x404e51
mov dword [0x4a61d4], 1
jmp 0x404e61
xor esi, esi
mov dword [ebp - 0x14], esi
mov dword [0x4a61d4], 1
jmp 0x404e61
push 2
push esi
push 0x4a82dc
call fcn.004019b0
add esp, 0xc
push esi
call fcn.004010eb
mov eax, dword [0x49e590]
add esp, 4
push 2
push edi
push edi
push eax
call fcn.004017f3
add esp, 0xc
push eax
push 0x4a8328
call fcn.004019b0
mov ecx, dword [0x49e590]
push ecx
call fcn.00401b4a
add esp, 0x10
cmp eax, edi
mov dword [ebp - 0x54], eax
push 2
jne 0x404ea6
push 0x4a8344
jmp 0x404eb2
mov edx, dword [eax]
push edx
call fcn.00401415
add esp, 4
push eax
push 0x4a82e8
call fcn.0040101e
mov eax, dword [0x4a25c0]
add esp, 0xc
push 2
push edi
push edi
push eax
call fcn.004017f3
add esp, 0xc
push eax
push 0x4a8334
call fcn.004019b0
mov ecx, dword [0x49a3cc]
add esp, 0xc
push 2
push edi
push edi
push ecx
call fcn.004017f3
add esp, 0xc
push eax
push 0x4a833c
call fcn.004019b0
push str.LOGNAME
call fcn.0044befc
mov esi, eax
push str.USER
mov dword [ebp - 0x6c], esi
call fcn.0044befc
mov ebx, eax
add esp, 0x14
cmp ebx, edi
mov dword [ebp - 0x58], ebx
je 0x404f46
push 2
push ebx
call fcn.00401415
push eax
call fcn.004019e2
push eax
call fcn.00401dcf
add esp, 0xc
push eax
push 0x4a82f4
call fcn.004019b0
jmp 0x404fa3
cmp esi, edi
je 0x404f6e
push 2
push esi
call fcn.00401415
push eax
call fcn.004019e2
push eax
call fcn.00401dcf
add esp, 0xc
push eax
push 0x4a82f4
call fcn.004019b0
jmp 0x404fa3
mov edx, dword [0x4a25c0]
push edx
call fcn.00401b4a
add esp, 4
cmp eax, edi
mov dword [ebp - 0x54], eax
push 2
jne 0x404f8d
push 0x4a8344
jmp 0x404f99
mov eax, dword [eax]
push eax
call fcn.00401415
add esp, 4
push eax
push 0x4a82f4
call fcn.0040101e
add esp, 0xc
cmp esi, edi
jne 0x404fc7
push 0x4a60ec
push 0x4a82f4
call fcn.00401311
push eax
push 0x4a8a88
call fcn.00401a28
add esp, 0x10
cmp ebx, edi
jne 0x404fe8
push 0x4a60ec
push 0x4a82f4
call fcn.00401311
push eax
push 0x4a8a7c
call fcn.00401a28
add esp, 0x10
push str.GROUP
call fcn.0044befc
mov esi, eax
add esp, 4
cmp esi, edi
mov dword [ebp - 0x74], esi
je 0x405022
push 2
push esi
call fcn.00401415
push eax
call fcn.004019e2
push eax
call fcn.00401dcf
add esp, 0xc
push eax
push 0x4a8300
call fcn.004019b0
jmp 0x405057
mov ecx, dword [0x49a3cc]
push ecx
call fcn.004017bc
add esp, 4
cmp eax, edi
mov dword [ebp - 0x5c], eax
push 2
jne 0x405041
push 0x4a8344
jmp 0x40504d
mov edx, dword [eax]
push edx
call fcn.00401415
add esp, 4
push eax
push 0x4a8300
call fcn.0040101e
add esp, 0xc
cmp esi, edi
jne 0x40507b
push 0x4a60ec
push 0x4a8300
call fcn.00401311
push eax
push 0x4a8a98
call fcn.00401a28
add esp, 0x10
lea eax, [ebp - 4]
push 0x100
push eax
call fcn.00401dd9
add esp, 8
test eax, eax
jl 0x4050b0
lea ecx, [ebp - 4]
push ecx
mov byte [ebp + 0xfb], 0
call fcn.00401415
push eax
push 0x4a8370
call fcn.00401a28
add esp, 0xc
jmp 0x4050c2
push 0x4a8344
push 0x4a8370
call fcn.00401a28
add esp, 8
push str.TERM
call fcn.0044befc
mov ebx, eax
add esp, 4
cmp ebx, edi
je 0x405172
push 2
push ebx
call fcn.00401415
push eax
call fcn.004019e2
push eax
call fcn.00401dcf
add esp, 0xc
push eax
push 0x4a830c
call fcn.004019b0
add esp, 0xc
mov edi, str.unknown
mov esi, ebx
mov ecx, 8
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
je 0x405134
mov edi, str.dumb
mov esi, ebx
mov ecx, 5
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
je 0x405134
mov edi, str.network
mov esi, ebx
mov ecx, 8
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x405139
mov eax, 1
mov edi, str.emacs
mov esi, ebx
mov ecx, 6
xor edx, edx
mov dword [0x4a60a0], eax
repe cmpsb byte [esi], byte es:[edi]
je 0x405166
mov edi, 0x47d38c
mov esi, ebx
mov ecx, 3
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
je 0x405166
test eax, eax
je 0x4051a2
mov dword [0x4a609c], 0
jmp 0x4051b9
push str.EMACS
mov dword [0x4a60a0], edi
call fcn.0044befc
add esp, 4
cmp eax, edi
je 0x4051a2
mov esi, eax
mov edi, 0x47d380
mov ecx, 2
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x4051a2
mov dword [0x4a609c], eax
jmp 0x4051b9
push 0x4a83c4
mov dword [0x4a609c], 1
call fcn.00401cf8
add esp, 4
push 0x4a83d0
call fcn.00401cf8
push 0x4a83e4
call fcn.00401cf8
add esp, 8
push 2
push 0x47d37c
call fcn.00401415
add esp, 4
push eax
push 0x4a8ed8
call fcn.0040101e
push str.PATH
call fcn.0044befc
add esp, 0x10
test eax, eax
jne 0x405217
push 2
push 0x4a60ec
call fcn.00403c80
push eax
push 0x4a8444
call fcn.00401992
add esp, 0x10
jmp 0x405226
push eax
call fcn.00401415
push eax
call fcn.0040154b
add esp, 8
xor ebx, ebx
push str.SHELL
mov dword [ebp - 0x20], ebx
call fcn.0044befc
add esp, 4
test eax, eax
je 0x4052c1
mov ecx, eax
lea esi, [ecx + 1]
mov dl, byte [ecx]
add ecx, 1
test dl, dl
jne 0x405245
sub ecx, esi
mov ebx, ecx
cmp ebx, 5
mov dword [ebp - 0x20], ebx
jb 0x40526e
mov edi, str._tcsh
lea esi, [ebx + eax - 5]
mov ecx, 6
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
je 0x40529c
cmp dword [0x49e4e8], 0
jne 0x405350
cmp ebx, 4
jb 0x405350
mov edi, str._csh
lea esi, [ebx + eax - 4]
mov ecx, 5
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x405350
push 2
push eax
call fcn.00401415
push eax
call fcn.004019e2
push eax
call fcn.00401dcf
add esp, 0xc
push eax
push 0x4a840c
call fcn.004019b0
add esp, 0xc
test ebx, ebx
jne 0x4052da
mov eax, dword [0x49a390]
push 2
push eax
push 0x4a840c
call fcn.0040101e
add esp, 0xc
push str.LS_COLORS
call fcn.0044befc
add esp, 4
test eax, eax
je 0x4052fa
push eax
call fcn.00401415
push eax
call fcn.004015c3
add esp, 8
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
call fcn.00401bbd
push 0x47d34c
mov dword [0x49e4f0], eax
call fcn.0044befc
add esp, 8
test eax, eax
mov dword [ebp - 0x50], eax
je 0x40535c
push 0x47d348
push eax
push str._s__s
call fcn.004018a7
mov edi, eax
push edi
mov dword [ebp - 0x50], edi
call fcn.00401415
push eax
call fcn.004019e2
mov esi, eax
push edi
mov dword [ebp - 0x4c], esi
call fcn.00401334
add esp, 0x18
jmp 0x405374
mov dword [ebp - 0x20], 0
jmp 0x4052c5
push 0x47cce9
call fcn.00401415
push eax
call fcn.004019e2
mov esi, eax
add esp, 8
mov dword [ebp - 0x4c], esi
mov ecx, dword [0x49e4f0]
push ecx
push esi
call fcn.00401dfc
push esi
mov dword [0x4a60d8], eax
call fcn.00401334
push 0x49e480
push 0
mov ebx, 1
push ebx
call fcn.00401596
push 0x49e510
push 0
push 6
call fcn.00401596
push str.LANG
call fcn.0044befc
mov esi, eax
add esp, 0x28
test esi, esi
je 0x4053e6
push 0x4a60ec
push 0x4a8554
call fcn.00401320
add esp, 8
test eax, eax
jne 0x4053e6
push esi
call fcn.00401415
push eax
call fcn.0040121c
add esp, 8
jmp 0x405401
push 0x4a60ec
push 0x4a8554
call fcn.00401320
add esp, 8
test eax, eax
jne 0x405401
call fcn.004012f8
call fcn.00401a32
mov edi, dword [ebp + 0x108]
cmp edi, ebx
jle 0x4054b1
mov edx, dword [ebp - 0x10]
mov esi, dword [edx + 4]
mov edi, str.__version
mov ecx, 0xa
xor eax, eax
repe cmpsb byte [esi], byte es:[edi]
jne 0x40544e
push 0x4a60ec
push 0x4a8318
call fcn.00401311
push eax
push 0x47d330
call fcn.004019b5
add esp, 0x10
push 0
call fcn.00401d89
mov edi, dword [ebp + 0x108]
cmp edi, ebx
jle 0x4054b1
mov ecx, dword [ebp - 0x10]
mov esi, dword [ecx + 4]
mov edi, str.__help
mov ecx, 7
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x4054ab
push 0x4a60ec
push 0x4a8318
call fcn.00401311
push eax
push str._S_n_n
call fcn.004019b5
push str._b_file_t_tbatch_mode__read_and_execute_commands_from__file__n_c_command_trun__command_from_next_argument__n_d_t_tload_directory_stack_from___.cshdirs__n_Dname_value__tdefine_environment_variable__name_to__value__DomainOS_only___n_e_t_texit_on_any_error__n_f_t_tstart_faster_by_ignoring_the_start_up_file__n_F_t_tuse_fork___instead_of_vfork___when_spawning__ConvexOS_only___n_i_t_tinteractive__even_when_input_is_not_from_a_terminal__n_l_t_tact_as_a_login_shell__must_be_the_only_option_specified__n_m_t_tload_the_start_up_file__whether_or_not_owned_by_effective_user__n_n_file_t_tno_execute_mode__just_check_syntax_of_the_following__file__n_q_t_taccept_SIGQUIT_for_running_under_a_debugger__n_s_t_tread_commands_from_standard_input__n_t_t_tread_one_line_from_standard_input__n_v_t_techo_commands_after_history_substitution__n_V_t_tlike__v_but_including_commands_read_from_the_start_up_file__n_x_t_techo_commands_immediately_before_execution__n_X_t_tlike__x_but_including_commands_read_from_the_start_up_file__n__help_t_tprint_this_message_and_exit__n__version_tprint_the_version_shell_variable_and_exit__n_nSee_the_tcsh_1__manual_page_for_detailed_information._n
push 8
push 0xb
call fcn.00401069
push eax
push 0x47cde4
call fcn.004019b5
add esp, 0x24
push 0
call fcn.00401d89
mov edi, dword [ebp + 0x108]
mov eax, dword [ebp - 0x10]
sub edi, ebx
add eax, 4
xor ecx, ecx
cmp edi, ecx
mov dword [ebp + 0x108], edi
mov dword [ebp - 8], eax
jle 0x40569b
lea esp, [esp]
mov edx, dword [ebp - 8]
mov esi, dword [edx]
cmp byte [esi], 0x2d
jne 0x40569b
mov al, byte [esi + ebx]
add esi, ebx
test al, al
je 0x40569b
cmp dword [ebp - 0x1c], ecx
jne 0x40569b
movsx eax, al
add esi, ebx
cmp eax, 0x78
mov dword [ebp - 0x60], esi
ja case.0x40550c.1
movzx eax, byte [eax + 0x405ce0]
jmp dword [eax*4 + 0x405c94]
mov dword [0x4a61dc], ecx
mov dword [0x4a6090], ebx
mov dword [ebp - 0xc], ebx
jmp case.0x40550c.9
mov dword [ebp - 0x1c], ebx
jmp case.0x40550c.9
cmp edi, ebx
je 0x405447
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 4]
add eax, 4
sub edi, ebx
push ecx
mov dword [ebp + 0x108], edi
mov dword [ebp - 8], eax
call fcn.00401415
push eax
call fcn.004019e2
add esp, 8
test eax, eax
mov dword [0x4a60d0], eax
je 0x405587
push 2
push eax
call fcn.004019e2
push eax
call fcn.00401dcf
add esp, 8
push eax
push 0x4a865c
call fcn.004019b0
mov eax, dword [0x4a60d0]
add esp, 0xc
push eax
call fcn.00401e06
mov edx, dword [0x4a60d0]
xor ecx, ecx
add esp, 4
cmp eax, edx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x28], ecx
jbe 0x4055b7
sub eax, 2
cmp word [eax], 0x5c
jne 0x4055b1
add ecx, ebx
cmp eax, edx
ja 0x4055a2
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x28], ecx
test bl, cl
je 0x4055cb
push 0x29
mov dword [0x4a6068], ebx
call fcn.0040100a
add esp, 4
mov dword [0x4a61dc], 0
mov dword [ebp - 0xc], ebx
jmp case.0x40550c.9
mov dword [ebp - 0x38], ebx
jmp case.0x40550c.9
mov dword [0x4a6068], ebx
jmp case.0x40550c.9
mov dword [0x4a61d4], ebx
jmp case.0x40550c.9
mov dword [0x4a6078], ebx
mov dword [ebp - 0xc], ebx
jmp case.0x40550c.9
mov dword [0x4a61d8], ebx
jmp case.0x40550c.9
mov dword [0x4a6088], ebx
jmp case.0x40550c.9
mov dword [ebp - 0x18], ebx
jmp case.0x40550c.9
mov dword [0x4a60d4], 2
mov dword [0x4a61dc], ecx
mov dword [ebp - 0xc], ebx
jmp case.0x40550c.9
mov dword [ebp - 0x24], ebx
jmp case.0x40550c.9
mov dword [ebp - 0x2c], ebx
jmp case.0x40550c.9
push 0x4a8428
call fcn.00401cf8
add esp, 4
jmp case.0x40550c.9
push 0x4a8438
call fcn.00401cf8
add esp, 4
jmp case.0x40550c.9
mov dword [0x4a61c8], ebx
jmp case.0x40550c.9
mov edx, dword [0x49e598]
push edx
lea eax, [esi - 1]
push eax
push 0x7c
mov dword [0x4a6068], ebx
call fcn.0040100a
add esp, 0xc
mov al, byte [esi]
xor ecx, ecx
test al, al
jne 0x4054f4
add dword [ebp - 8], 4
sub edi, ebx
cmp edi, ecx
mov dword [ebp + 0x108], edi
jg 0x4054d0
cmp dword [ebp - 0x18], ecx
je 0x4056ac
push 0
push 2
call fcn.00401447
add esp, 8
cmp dword [ebp - 0xc], 0
jne 0x40578f
test edi, edi
jle 0x40578f
mov edi, dword [ebp - 8]
mov ecx, dword [edi]
push 0
push ecx
call fcn.00401d84
mov esi, eax
add esp, 8
test esi, esi
jge 0x4056f5
mov dword [0x4a606c], ebx
call fcn.0044baf1
mov edx, dword [eax]
push edx
call fcn.0044bc80
push eax
mov eax, dword [edi]
push eax
push 0x36
call fcn.0040100a
add esp, 0x10
mov ecx, dword [0x4a61e8]
push ecx
call fcn.00401334
mov dword [0x4a61ec], ebx
mov edx, dword [edi]
push edx
call fcn.00401415
push eax
call fcn.004019e2
push 0x10
push esi
mov dword [0x4a61e8], eax
call fcn.00401389
add esp, 0x14
test eax, eax
mov dword [0x4a60dc], eax
jge 0x405775
sub esi, 0
je 0x40576b
sub esi, ebx
je 0x405764
sub esi, ebx
je 0x40575d
call fcn.0044baf1
mov eax, dword [eax]
push eax
call fcn.0044bc80
mov ecx, dword [edi]
push eax
push ecx
push 0x36
call fcn.0040100a
mov eax, dword [0x4a60dc]
add esp, 0x10
jmp 0x405775
mov eax, 0x12
jmp 0x405770
mov eax, 0x11
jmp 0x405770
mov eax, 0x10
mov dword [0x4a60dc], eax
push ebx
push eax
call fcn.00401794
add esp, 8
add edi, 4
mov dword [0x4a61dc], 0
mov dword [ebp - 8], edi
call fcn.00401811
mov edx, dword [0x4a60dc]
push edx
call fcn.0040185c
add esp, 4
test eax, eax
mov dword [0x4a6074], eax
jne 0x4057d9
push 0x4a60ec
push 0x4a83c4
call fcn.00401320
add esp, 8
test eax, eax
je 0x4057cf
push 0x4a83c4
call fcn.00401483
add esp, 4
mov dword [0x4a609c], 0
mov eax, dword [0x4a6078]
or dword [0x4a6074], eax
jne 0x4057fc
test eax, eax
je 0x40584e
mov eax, dword [0x4a60e0]
push eax
call fcn.0040185c
add esp, 4
test eax, eax
je 0x40584e
cmp dword [ebp - 0x1c], 0
jne 0x40584e
mov ecx, dword [0x4a25c0]
cmp ecx, dword [0x49e590]
jne 0x40581e
mov edx, dword [0x49a3cc]
cmp edx, dword [0x49e4d0]
je 0x40584e
call fcn.0044baf1
mov dword [eax], 0xd
mov dword [0x4a606c], ebx
call fcn.0044baf1
mov eax, dword [eax]
push eax
call fcn.0044bc80
mov ecx, dword [0x49e598]
push eax
push ecx
push 0x36
call fcn.0040100a
add esp, 0x10
mov edx, dword [0x4a60e0]
push edx
call fcn.0040185c
mov dword [0x4a60b0], eax
mov eax, dword [0x4a60e4]
push eax
call fcn.0040185c
add esp, 8
cmp dword [0x4a6080], 0
mov dword [0x4a60b4], eax
jne 0x4058a0
cmp dword [0x4a6078], 0
jne 0x4058a0
cmp dword [0x4a6074], 0
je 0x4058a6
mov ecx, dword [0x4a60e0]
push ecx
call fcn.0040185c
add esp, 4
test eax, eax
je 0x4058a6
mov dword [0x4a6090], ebx
call fcn.004019d8
mov edx, dword [ebp - 8]
push 2
push 0x4a60ec
push edx
call fcn.00401541
add esp, 4
push eax
push 0x4a8650
call fcn.00401992
add esp, 0x10
cmp dword [0x4a61dc], 0
je 0x40590b
push 2
push 0x4a86b0
push 0x4a8450
call fcn.0040101e
push 2
push 0x4a86b8
push 0x4a8460
call fcn.0040101e
push 2
push 0x4a86c4
push 0x4a8470
call fcn.0040101e
add esp, 0x24
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
or esi, 0xffffffff
cmp dword [0x4a6090], 0
mov dword [0x49a378], eax
mov dword [0x49a3b4], esi
mov dword [0x49e57c], esi
je 0x4059ef
mov eax, dword [ebp - 0x10]
mov edi, dword [ebp - 0x18]
test edi, edi
mov ecx, dword [eax]
mov byte [ecx], 0x2d
jne 0x40594c
push ebx
push 2
call fcn.00401447
add esp, 8
push 0x401537
push ebx
mov dword [0x49719c], ebx
call fcn.00401e56
push ebx
push 6
call fcn.00401447
lea edx, [ebp - 0x80]
push edx
push 0
push 3
call fcn.00401596
add esp, 0x1c
cmp dword [0x4a6080], 0
jne 0x405983
cmp dword [ebp - 0x80], ebx
je 0x405992
push 0x401ea1
push 3
call fcn.00401e56
add esp, 8
test edi, edi
jne 0x4059e6
cmp dword [0x4a60d0], edi
jne 0x4059e6
push ebx
push 0x12
call fcn.00401447
push ebx
push 0x14
call fcn.00401447
push ebx
push 0x13
call fcn.00401447
push 0x12
call fcn.0040185c
add esp, 0x1c
test eax, eax
jne 0x4059e0
push 0x11
call fcn.0040185c
add esp, 4
test eax, eax
jne 0x4059e0
mov eax, dword [0x4a60e8]
push eax
call fcn.0040185c
add esp, 4
mov dword [0x49a3b4], esi
cmp dword [0x4a6090], 0
jne 0x4059fe
cmp dword [0x49e480], 0
jne 0x4059fe
mov dword [0x4a6090], ebx
push 0x401c44
push 0xf
call fcn.00401e56
xor esi, esi
add esp, 8
cmp dword [0x4a6074], esi
je 0x405a2e
cmp dword [0x4a60d0], esi
jne 0x405a2e
mov ecx, dword [0x4a609c]
push ecx
call fcn.00401145
add esp, 4
mov edx, dword [0x4a6090]
mov eax, dword [0x49e480]
mov ecx, dword [0x49e484]
mov dword [ebp - 0x30], edx
mov edx, dword [0x49e488]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x3c], edx
call fcn.004016bd
push esi
push 0x49e520
call fcn.0044bbc0
add esp, 8
neg eax
sbb eax, eax
add dword [0x4a61f4], ebx
neg eax
cmp dword [0x4a61d4], esi
mov dword [0x4a6070], esi
jne 0x405bcb
cmp eax, esi
jne 0x405bcb
add dword [0x49719c], ebx
push fcn.004012e9
push 0x49719c
call fcn.004013c5
push esi
push esi
push esi
push str._etc_csh.cshrc
mov dword [0x4a6090], esi
mov dword [0x49e480], ebx
call fcn.00401a14
add esp, 0x18
cmp dword [0x4a60d0], esi
jne 0x405add
cmp dword [0x4a60d4], esi
jne 0x405add
cmp dword [0x4a6098], esi
jne 0x405add
push esi
push esi
call fcn.0040120d
add esp, 8
cmp dword [0x4a6080], esi
je 0x405af5
push esi
push esi
push esi
push str._etc_csh.login
call fcn.00401a14
add esp, 0x10
push 0x49719c
call fcn.00401ea6
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x40]
mov dword [0x4a6090], eax
mov eax, dword [ebp - 0x3c]
push 0x4a60ec
push 0x4a82dc
mov dword [0x49e480], ecx
mov dword [0x49e484], edx
mov dword [0x49e488], eax
call fcn.00401311
mov ecx, eax
add esp, 0xc
mov eax, 0x4a8b24
call fcn.00404740
test eax, eax
jne 0x405b61
push 0x4a60ec
push 0x4a82dc
call fcn.00401311
mov ecx, eax
add esp, 8
mov eax, 0x4a8b38
call fcn.00404740
cmp dword [0x4a60d0], esi
jne 0x405b83
cmp dword [0x4a60d4], esi
jne 0x405b83
cmp dword [0x4a6098], esi
jne 0x405b83
push esi
push esi
call fcn.0040120d
add esp, 8
push esi
push esi
call fcn.00401203
add esp, 8
cmp dword [0x4a6080], esi
je 0x405bbb
push 0x4a60ec
push 0x4a82dc
call fcn.00401311
mov ecx, eax
add esp, 8
mov eax, 0x4a8b48
call fcn.00404740
cmp dword [0x4a6080], esi
jne 0x405bc2
mov ecx, dword [ebp - 0x38]
test ecx, ecx
je 0x405bcb
push esi
call fcn.00401401
add esp, 4
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x40]
sub dword [0x4a61f4], ebx
cmp dword [0x4a6074], esi
mov dword [0x4a6090], edx
mov edx, dword [ebp - 0x3c]
mov dword [0x49e480], eax
mov dword [0x49e484], ecx
mov dword [0x49e488], edx
je 0x405c09
cmp dword [0x4a60d0], esi
jne 0x405c09
call fcn.0040127b
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x405c1d
push 0x4a8428
call fcn.00401cf8
add esp, 4
mov ecx, dword [ebp - 0x2c]
test ecx, ecx
je 0x405c31
push 0x4a8438
call fcn.00401cf8
add esp, 4
mov edx, dword [0x4a6090]
push edx
call fcn.00401afa
add esp, 4
call fcn.00401690
cmp dword [0x4a6074], esi
je 0x405c87
cmp dword [0x4a6080], esi
je 0x405c7a
push str.logout_n
call fcn.004019b5
mov eax, dword [0x4a60dc]
push eax
call fcn.00401456
add esp, 8
push esi
push esi
mov dword [0x4a606c], ebx
call fcn.00401aa0
push str.exit_n
call fcn.004019b5
add esp, 4
call fcn.00403e50
jmp fcn.004011b3