(command.CommandList
  children: [
    (command.ShAssignment
      pairs: [
        (assign_pair
          lhs: (sh_lhs_expr.Name name:tid)
          op: assign_op.Equal
          rhs: {(DQ <'try ciphers'>)}
          spids: [7]
        )
      ]
    )
    (C {<cp>} {($ Id.VSub_DollarName '$OBJ') <'/sshd_proxy'>} 
      {($ Id.VSub_DollarName '$OBJ') <'/sshd_proxy_bak'>}
    )
    (command.ForEach
      iter_name: c
      iter_words: [
        {
          (command_sub
            left_token: <Id.Left_Backtick '`'>
            child: (C {(${ Id.VSub_Name SSH)} {<-Q>} {<cipher>})
          )
        }
      ]
      do_arg_iter: F
      body: 
        (command.DoGroup
          children: [
            (command.ShAssignment
              pairs: [
                (assign_pair
                  lhs: (sh_lhs_expr.Name name:n)
                  op: assign_op.Equal
                  rhs: {<0>}
                  spids: [44]
                )
              ]
            )
            (command.ForEach
              iter_name: m
              iter_words: [
                {
                  (command_sub
                    left_token: <Id.Left_Backtick '`'>
                    child: (C {(${ Id.VSub_Name SSH)} {<-Q>} {<mac>})
                  )
                }
              ]
              do_arg_iter: F
              body: 
                (command.DoGroup
                  children: [
                    (C {<trace>} 
                      {
                        (DQ <'proto 2 cipher '> ($ Id.VSub_DollarName '$c') <' mac '> 
                          ($ Id.VSub_DollarName '$m')
                        )
                      }
                    )
                    (C {<verbose>} 
                      {
                        (DQ <'test '> ($ Id.VSub_DollarName '$tid') <': proto 2 cipher '> 
                          ($ Id.VSub_DollarName '$c') <' mac '> ($ Id.VSub_DollarName '$m')
                        )
                      }
                    )
                    (C {<cp>} {($ Id.VSub_DollarName '$OBJ') <'/sshd_proxy_bak'>} 
                      {($ Id.VSub_DollarName '$OBJ') <'/sshd_proxy'>}
                    )
                    (command.Simple
                      words: [{<echo>} {(DQ <'Ciphers='> ($ Id.VSub_DollarName '$c'))}]
                      redirects: [
                        (redir
                          op: <Id.Redir_DGreat '>>'>
                          loc: (redir_loc.Fd fd:1)
                          arg: {($ Id.VSub_DollarName '$OBJ') <'/sshd_proxy'>}
                        )
                      ]
                      do_fork: T
                    )
                    (command.Simple
                      words: [{<echo>} {(DQ <'MACs='> ($ Id.VSub_DollarName '$m'))}]
                      redirects: [
                        (redir
                          op: <Id.Redir_DGreat '>>'>
                          loc: (redir_loc.Fd fd:1)
                          arg: {($ Id.VSub_DollarName '$OBJ') <'/sshd_proxy'>}
                        )
                      ]
                      do_fork: T
                    )
                    (C {(${ Id.VSub_Name SSH)} {<-F>} {($ Id.VSub_DollarName '$OBJ') <'/ssh_proxy'>} 
                      {<-2>} {<-m>} {($ Id.VSub_DollarName '$m')} {<-c>} {($ Id.VSub_DollarName '$c')} {<somehost>} {<true>}
                    )
                    (command.If
                      arms: [
                        (if_arm
                          cond: 
                            (condition.Shell
                              commands: [
                                (command.Sentence
                                  child: 
                                    (C {<Id.Lit_LBracket '['>} {($ Id.VSub_QMark '$?')} {<-ne>} {<0>} 
                                      {<Id.Lit_RBracket ']'>}
                                    )
                                  terminator: <Id.Op_Semi _>
                                )
                              ]
                            )
                          action: [
                            (C {<fail>} 
                              {
                                (DQ <'ssh -2 failed with mac '> ($ Id.VSub_DollarName '$m') 
                                  <' cipher '> ($ Id.VSub_DollarName '$c')
                                )
                              }
                            )
                          ]
                          spids: [151 164]
                        )
                      ]
                    )
                    (command.If
                      arms: [
                        (if_arm
                          cond: 
                            (condition.Shell
                              commands: [
                                (command.Sentence
                                  child: 
                                    (command.Pipeline
                                      children: [
                                        (C {(${ Id.VSub_Name SSH)} {<-Q>} {<cipher-auth>})
                                        (command.Simple
                                          words: [
                                            {<grep>}
                                            {
                                              (DQ <'^'> (${ Id.VSub_Name c) 
                                                (word_part.EscapedLiteral
                                                  token: <Id.Lit_EscapedChar '\\$'>
                                                )
                                              )
                                            }
                                          ]
                                          redirects: [
                                            (redir
                                              op: <Id.Redir_Great '>'>
                                              loc: (redir_loc.Fd fd:1)
                                              arg: {<'/dev/null'>}
                                            )
                                            (redir
                                              op: <Id.Redir_GreatAnd '2>&'>
                                              loc: (redir_loc.Fd fd:2)
                                              arg: {<1>}
                                            )
                                          ]
                                          do_fork: T
                                        )
                                      ]
                                      negated: F
                                    )
                                  terminator: <Id.Op_Semi _>
                                )
                              ]
                            )
                          action: [(command.ControlFlow token:<Id.ControlFlow_Break break>)]
                          spids: [188 218]
                        )
                      ]
                    )
                    (command.ShAssignment
                      pairs: [
                        (assign_pair
                          lhs: (sh_lhs_expr.Name name:n)
                          op: assign_op.Equal
                          rhs: 
                            {
                              (command_sub
                                left_token: <Id.Left_Backtick '`'>
                                child: 
                                  (C {<expr>} {($ Id.VSub_DollarName '$n')} {<Id.Lit_Other '+'>} {<1>})
                              )
                            }
                          spids: [227]
                        )
                      ]
                    )
                  ]
                )
            )
          ]
        )
    )
    (command.If
      arms: [
        (if_arm
          cond: 
            (condition.Shell
              commands: [(command.Sentence child:(C {<ssh_version>} {<1>}) terminator:<Id.Op_Semi _>)]
            )
          action: [
            (command.ShAssignment
              pairs: [
                (assign_pair
                  lhs: (sh_lhs_expr.Name name:ciphers)
                  op: assign_op.Equal
                  rhs: {(DQ <'3des blowfish'>)}
                  spids: [256]
                )
              ]
            )
          ]
          spids: [246 253]
        )
      ]
      else_action: [
        (command.ShAssignment
          pairs: [
            (assign_pair
              lhs: (sh_lhs_expr.Name name:ciphers)
              op: assign_op.Equal
              rhs: {(DQ )}
              spids: [264]
            )
          ]
        )
      ]
    )
    (command.ForEach
      iter_name: c
      iter_words: [{($ Id.VSub_DollarName '$ciphers')}]
      do_arg_iter: F
      body: 
        (command.DoGroup
          children: [
            (C {<trace>} {(DQ <'proto 1 cipher '> ($ Id.VSub_DollarName '$c'))})
            (C {<verbose>} 
              {
                (DQ <'test '> ($ Id.VSub_DollarName '$tid') <': proto 1 cipher '> 
                  ($ Id.VSub_DollarName '$c')
                )
              }
            )
            (C {(${ Id.VSub_Name SSH)} {<-F>} {($ Id.VSub_DollarName '$OBJ') <'/ssh_proxy'>} {<-1>} {<-c>} 
              {($ Id.VSub_DollarName '$c')} {<somehost>} {<true>}
            )
            (command.If
              arms: [
                (if_arm
                  cond: 
                    (condition.Shell
                      commands: [
                        (command.Sentence
                          child: 
                            (C {<Id.Lit_LBracket '['>} {($ Id.VSub_QMark '$?')} {<-ne>} {<0>} 
                              {<Id.Lit_RBracket ']'>}
                            )
                          terminator: <Id.Op_Semi _>
                        )
                      ]
                    )
                  action: [
                    (C {<fail>} {(DQ <'ssh -1 failed with cipher '> ($ Id.VSub_DollarName '$c'))})
                  ]
                  spids: [320 333]
                )
              ]
            )
          ]
        )
    )
  ]
)