Function at 0x41d3a0
Capabilities:
Terminate process

Disassembly:
push ebx
mov ebx, eax
sub esp, 0x10
call fcn.0042a079
test eax, eax
je 0x41d3b4
add esp, 0x10
pop ebx
ret
call sub.cygwin1.dll___getreent
mov dword [esp + 8], 0x4321eb
mov dword [esp + 4], str.Sorry___s_is_required_n
mov eax, dword [eax + 0xc]
mov dword [esp], eax
call sub.cygwin1.dll_fprintf
test ebx, ebx
jne 0x41d3e1
add esp, 0x10
pop ebx
jmp fcn.00420a50
mov dword [esp], 0
call sub.cygwin1.dll_exit
lea esi, [esi]
push ebp
mov ebp, esp
and esp, 0xfffffff8
push edi
push esi
push ebx
sub esp, 0x1c
call sub.cygwin1.dll___main
mov eax, dword [ebp + 0xc]
mov esi, dword [eax]
test esi, esi
je 0x41d7f8
mov dword [esp + 4], 0x2f
mov dword [esp], esi
call sub.cygwin1.dll_strrchr
test eax, eax
lea ebx, [eax + 1]
cmove ebx, esi
mov dword [esp], ebx
call fcn.00421200
mov dword [esp], ebx
call sub.cygwin1.dll_strlen
cmp eax, 4
jbe 0x41d453
lea eax, [ebx + eax - 4]
mov ecx, 5
mov edi, str..exe
mov esi, eax
repe cmpsb byte [esi], byte es:[edi]
je 0x41d6a0
mov ecx, 9
mov edi, str.unshadow
mov esi, ebx
repe cmpsb byte [esi], byte es:[edi]
je 0x41d6b7
mov ecx, 6
mov edi, str.unafs
mov esi, ebx
repe cmpsb byte [esi], byte es:[edi]
je 0x41d730
mov ecx, 7
mov edi, str.unique
mov esi, ebx
repe cmpsb byte [esi], byte es:[edi]
je 0x41d910
cmp dword [ebp + 8], 2
je 0x41d813
xor eax, eax
call fcn.0041d3a0
mov esi, dword [ebp + 0xc]
mov dword [esp], esi
call fcn.004215a0
mov dword [esp + 4], 1
mov dword [esp], str._JOHN_john.conf
call fcn.00419410
mov dword [esp + 4], 0
mov dword [esp], str._JOHN_john.ini
call fcn.00419410
mov dword [esp + 4], 1
mov dword [esp], 0
call fcn.004272e0
cmp dword [ebp + 8], 1
jle 0x41da84
mov ecx, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
call fcn.00421230
call fcn.0041d2a0
call fcn.00416810
call fcn.004256b0
mov dword [esp], 0x3f
call sub.cygwin1.dll_umask
mov eax, dword [0x470520]
test ah, 0x10
jne 0x41d8d3
mov ebx, eax
and ebx, 0x100000
jne 0x41d858
test ah, 0x80
jne 0x41d933
test al, 2
je 0x41d622
test eax, 0x200000
jne 0x41d753
test ah, 0x44
je 0x41d56c
cmp dword [0x470578], 1
jle 0x41dd70
mov ecx, dword [0x44d488]
test ecx, ecx
je 0x41d57d
and dword [0x470528], 0xfffffffe
mov dword [esp + 4], 0x470528
mov dword [esp], 0x44d1e0
call fcn.0041f8a0
mov edi, dword [0x470524]
mov ebx, dword [edi]
test ebx, ebx
je 0x41d5b9
lea esi, [esi]
lea eax, [ebx + 4]
mov dword [esp + 4], eax
mov dword [esp], 0x44d1e0
call fcn.0041fa30
mov ebx, dword [ebx]
test ebx, ebx
jne 0x41d5a0
test byte [0x470520], 0x20
je 0x41d9f7
mov edx, dword [0x44d204]
xor ebx, ebx
test edx, edx
jne 0x41d981
mov dword [esp + 4], str._JOHN_john.pot
mov dword [esp], 0x44d1e0
call fcn.0041fa50
mov dword [esp], 0x44d1e0
call fcn.0041fa80
mov eax, dword [0x44d204]
test eax, eax
je 0x41dc50
cmp ebx, eax
jg 0x41dca8
mov eax, dword [0x470520]
test al, 0xc
je 0x41d622
mov esi, dword [0x44d1e8]
test esi, esi
je 0x41ddb1
test eax, 0x400000
jne 0x41d6e0
test eax, 0x100000
jne 0x41da02
test al, 0x20
je 0x41d6f3
test ah, 0x80
mov ebx, dword [0x44d204]
je 0x41db35
and eax, 0x100
mov dword [esp], eax
call fcn.00427850
mov eax, dword [0x470520]
test ah, 4
jne 0x41dac0
test al, 0x80
jne 0x41dc80
test ah, 8
jne 0x41dd55
test ah, 0x10
nop
jne 0x41dbf8
test ah, 0x40
je 0x41dacc
mov dword [esp], 0x44d1e0
call fcn.00414e90
jmp 0x41dacc
mov byte [eax], 0
mov ecx, 9
mov edi, str.unshadow
mov esi, ebx
repe cmpsb byte [esi], byte es:[edi]
jne 0x41d467
xor eax, eax
call fcn.0041d3a0
mov ebx, dword [ebp + 0xc]
mov edx, dword [ebp + 8]
mov dword [esp + 4], ebx
mov dword [esp], edx
call fcn.004286e0
add esp, 0x1c
pop ebx
pop esi
pop edi
mov esp, ebp
pop ebp
ret
call fcn.00415440
test eax, eax
setne bl
movzx edi, bl
mov dword [0x44d1c0], edi
call fcn.00421770
mov eax, dword [0x470520]
and eax, 0x8020
cmp eax, 0x20
je 0x41d8f0
call fcn.00420470
mov dword [esp], 0
call fcn.004254c0
mov eax, dword [0x44d1c0]
add esp, 0x1c
pop ebx
pop esi
pop edi
mov esp, ebp
pop ebp
ret
xor eax, eax
call fcn.0041d3a0
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
mov dword [esp + 4], edx
mov dword [esp], eax
call fcn.00428760
add esp, 0x1c
pop ebx
pop esi
pop edi
mov esp, ebp
pop ebp
ret
or dword [0x470528], 0x100
mov dword [esp + 4], 0x470528
mov dword [esp], 0x44d1e0
call fcn.0041f8a0
mov dword [esp + 4], str._JOHN_john.pot
mov dword [esp], 0x44d1e0
call fcn.0041fe10
mov ebx, dword [0x470524]
mov ebx, dword [ebx]
test ebx, ebx
je 0x41d7aa
lea esi, [ebx + 4]
mov dword [esp + 4], esi
mov dword [esp], 0x44d1e0
call fcn.0041fe30
mov ebx, dword [ebx]
test ebx, ebx
jne 0x41d791
mov eax, dword [0x44d208]
mov edx, dword [0x44d204]
sub edx, eax
cmp eax, 1
je 0x41dc10
test eax, eax
mov ebx, 0x43220b
mov ecx, 0x43220e
jne 0x41dc15
mov dword [esp + 0x10], edx
mov dword [esp + 0xc], ebx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], str._s_d_password_hash_s_cracked___d_left_n
call sub.cygwin1.dll_printf
mov eax, dword [0x470520]
jmp 0x41d622
mov dword [esp], 0x432206
mov ebx, 0x432206
call fcn.00421200
cmp dword [ebp + 8], 2
jne 0x41d499
mov edx, dword [ebp + 0xc]
mov ecx, 0xd
mov edi, str.__make_check
mov esi, dword [edx + 4]
repe cmpsb byte [esi], byte es:[edi]
jne 0x41da31
mov eax, dword [ebp + 0xc]
mov dword [eax + 4], str.__test0
mov eax, 1
call fcn.0041d3a0
mov dword [esp + 4], 1
mov dword [esp], 0
call fcn.004272e0
jmp 0x41d4f1
or dword [0x470528], 0x100
mov dword [esp + 4], 0x470528
mov dword [esp], 0x44d1e0
call fcn.0041f8a0
test byte [0x470520], 2
je 0x41da95
mov dword [esp + 4], str._JOHN_john.pot
mov dword [esp], 0x44d1e0
call fcn.0041fe10
mov edi, dword [0x470524]
mov edx, dword [0x44d1e4]
mov ebx, dword [edi]
or dword [edx], 0x200
test ebx, ebx
je 0x41d8c9
nop
lea eax, [ebx + 4]
mov dword [esp + 4], eax
mov dword [esp], 0x44d1e0
call fcn.0041fe30
mov ebx, dword [ebx]
test ebx, ebx
jne 0x41d8b0
mov eax, dword [0x470520]
jmp 0x41d622
mov ebx, dword [0x470550]
mov dword [esp], ebx
call fcn.0041abf0
mov eax, dword [0x470520]
jmp 0x41d530
mov edx, dword [0x44de84]
test edx, edx
je 0x41da20
mov dword [esp], str.Session_aborted
call fcn.00420350
jmp 0x41d70b
xor eax, eax
call fcn.0041d3a0
mov ebx, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.00428e40
add esp, 0x1c
pop ebx
pop esi
pop edi
mov esp, ebp
pop ebp
ret
mov dword [esp + 4], 0x470528
mov dword [esp], 0x44d1e0
call fcn.0041f8a0
mov esi, dword [0x470554]
mov edx, 0x44d220
mov eax, ebx
mov ecx, 0x2a
mov edi, edx
rep stosd dword es:[edi], eax
mov eax, dword [0x470520]
mov dword [0x44d20c], 0x44d220
mov dword [0x44d234], esi
mov dword [0x44d248], 3
jmp 0x41d547
mov esi, dword [0x470540]
mov dword [esp + 4], 0
mov dword [esp], str._JOHN_john.log
mov dword [esp + 8], esi
call fcn.004200c0
mov ebx, dword [0x44ded8]
test ebx, ebx
je 0x41dd91
mov dword [esp], str.Continuing_an_interrupted_session
call fcn.00420350
call fcn.0041d350
mov dword [esp], str.Loaded_a_total_of__s
mov dword [esp + 4], eax
call fcn.00420350
mov ecx, dword [0x44d20c]
mov ebx, dword [ecx + 8]
mov edi, dword [ecx + 4]
call fcn.0041d350
mov dword [esp], str.Loaded__s___s___s___n
mov dword [esp + 0xc], ebx
mov dword [esp + 8], edi
mov dword [esp + 4], eax
call sub.cygwin1.dll_printf
mov ebx, dword [0x44d204]
jmp 0x41d5d6
mov ecx, dword [0x47054c]
mov dword [esp], 0x44d1e0
mov dword [esp + 4], ecx
call fcn.00415b00
jmp 0x41d6f3
mov dword [esp], str.Session_completed
call fcn.00420350
jmp 0x41d70b
xor eax, eax
call fcn.0041d3a0
mov edi, dword [ebp + 0xc]
mov dword [esp], edi
call fcn.004215a0
mov dword [esp + 4], 1
mov dword [esp], str._JOHN_john.conf
call fcn.00419410
mov dword [esp + 4], 0
mov dword [esp], str._JOHN_john.ini
call fcn.00419410
mov dword [esp + 4], 1
mov dword [esp], 0
call fcn.004272e0
jmp 0x41d4f1
call fcn.0041d2a0
lea esi, [esi]
jmp 0x41d4f1
mov ecx, dword [0x44d1e4]
or dword [ecx], 0x200
mov dword [esp + 4], str._JOHN_john.pot
mov dword [esp], 0x44d1e0
call fcn.0041fe10
mov eax, dword [0x470520]
jmp 0x41d622
mov dword [esp], 0x44d1e0
call fcn.00426070
call fcn.004273f0
call fcn.00427810
cmp ebx, dword [0x44d204]
jle 0x41d6f3
mov ebx, dword [0x44d1e4]
mov eax, dword [ebx]
and eax, 0x30
cmp eax, 0x20
je 0x41dd08
cmp eax, 0x30
je 0x41dd20
cmp eax, 0x10
je 0x41dc20
call sub.cygwin1.dll___getreent
mov ecx, dword [eax + 0xc]
mov dword [esp + 8], 0x49
mov dword [esp + 4], 1
mov dword [esp], str.Use_the____show__option_to_display_all_of_the_cracked_passwords_reliably_n
mov dword [esp + 0xc], ecx
call sub.cygwin1.dll_fwrite
jmp 0x41d6f3
mov dword [esp + 4], 1
mov dword [esp], 0
call fcn.004272e0
mov esi, dword [0x470540]
mov dword [esp + 4], str._JOHN_john.pot
mov dword [esp], str._JOHN_john.log
mov dword [esp + 8], esi
call fcn.004200c0
mov edi, dword [0x44d20c]
mov edx, 0x43220e
mov eax, str.__longer_passwords_split
cmp dword [edi + 0x38], 0x41b560
cmove eax, edx
mov dword [esp + 0xc], eax
mov ecx, dword [edi + 0x14]
mov dword [esp + 8], ecx
mov esi, dword [edi + 4]
mov dword [esp], str.__Hash_type:__.100s__lengths_up_to__d_s_
mov dword [esp + 4], esi
call fcn.00420350
mov edx, dword [0x44d20c]
mov eax, dword [edx + 8]
mov dword [esp], str.__Algorithm:__.100s
mov dword [esp + 4], eax
call fcn.00420350
mov eax, dword [0x44d20c]
test dword [0x470520], 0x4400
mov edx, dword [eax + 0x24]
je 0x41dbd5
cmp edx, 7
jle 0x41dcd7
cmp edx, 1
jg 0x41dce5
mov dword [esp], eax
call fcn.0041b920
test eax, eax
jne 0x41dd80
mov eax, dword [0x470520]
jmp 0x41d64f
mov dword [esp], 0x44d1e0
call fcn.0041af60
jmp 0x41dacc
mov ebx, 0x43220e
mov ecx, 0x43220f
jmp 0x41d7d2
call sub.cygwin1.dll___getreent
mov dword [esp + 0xc], str._be_partial
mov dword [esp + 8], str.Warning:_passwords_printed_above_might
mov dword [esp + 4], str._s_s_n
mov esi, dword [eax + 0xc]
mov dword [esp], esi
call sub.cygwin1.dll_fprintf
jmp 0x41db08
call fcn.00420430
test ebx, ebx
mov edx, str.loaded
mov eax, str.left_to_crack
cmove eax, edx
mov dword [esp + 4], eax
mov dword [esp], str.No_password_hashes__s__see_FAQ__n
call sub.cygwin1.dll_printf
jmp 0x41d60b
mov edi, dword [0x470548]
test ah, 2
setne al
movzx ecx, al
mov dword [esp + 8], ecx
mov dword [esp + 4], edi
mov dword [esp], 0x44d1e0
call fcn.00427de0
jmp 0x41dacc
call fcn.0041d350
mov dword [esp], str.Remaining__s
mov dword [esp + 4], eax
call fcn.00420350
call fcn.0041d350
mov dword [esp], str.Remaining__s_n
mov dword [esp + 4], eax
call sub.cygwin1.dll_printf
jmp 0x41d60b
cmp edx, 1
jle 0x41dda2
mov edx, 8
mov eax, str.will
mov dword [esp + 4], eax
mov dword [esp + 8], edx
mov dword [esp], str.__Candidate_passwords__s_be_buffered_and_tried_in_chunks_of__d
call fcn.00420350
mov eax, dword [0x44d20c]
jmp 0x41dbde
call sub.cygwin1.dll___getreent
mov dword [esp + 0xc], str._not_be_all_those_cracked
jmp 0x41dc2d
call sub.cygwin1.dll___getreent
mov dword [esp + 0x10], str._not_be_all_those_cracked
mov dword [esp + 0xc], str._be_partial
mov dword [esp + 8], str.Warning:_passwords_printed_above_might
mov dword [esp + 4], str._s_s_and_s_n
mov edi, dword [eax + 0xc]
mov dword [esp], edi
call sub.cygwin1.dll_fprintf
jmp 0x41db08
mov edx, dword [0x47054c]
mov dword [esp], 0x44d1e0
mov dword [esp + 4], edx
call fcn.0041c040
jmp 0x41dacc
or dword [0x470528], 2
jmp 0x41d57d
mov dword [esp], str.__Configured_to_use_otherwise_idle_processor_cycles_only
call fcn.00420350
jmp 0x41dbee
mov dword [esp], str.Starting_a_new_session
call fcn.00420350
jmp 0x41d9b9
mov edx, 8
mov eax, 0x432244
jmp 0x41dcea
mov dword [esp], 0
call sub.cygwin1.dll_exit
nop
nop
nop