	.file	"467730.c"
	.intel_syntax noprefix
	.text
	.section	.rodata
	.align 8
	.type	secret, @object
	.size	secret, 12
secret:
	.ascii	"\031\036\007\f\r\n\033[Y[Yi"
	.globl	data
	.align 32
	.type	data, @object
	.size	data, 40
data:
	.string	"this is some malicious data! w00t w00t!"
	.globl	ext
	.type	ext, @object
	.size	ext, 5
ext:
	.string	".bad"
	.text
	.type	clean, @function
clean:
.LFB6:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 16
	mov	QWORD PTR -8[rbp], rdi
	mov	rax, QWORD PTR -8[rbp]
	mov	rdi, rax
	call	unlink@PLT
	nop
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE6:
	.size	clean, .-clean
	.type	change_procname, @function
change_procname:
.LFB7:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 48
	mov	rax, QWORD PTR fs:40
	mov	QWORD PTR -8[rbp], rax
	xor	eax, eax
	mov	QWORD PTR -48[rbp], 6845299
	mov	WORD PTR -40[rbp], 0
	mov	QWORD PTR -38[rbp], 1953066601
	mov	WORD PTR -30[rbp], 0
	movabs	rax, 8241980266532270692
	mov	QWORD PTR -28[rbp], rax
	mov	WORD PTR -20[rbp], 0
	call	rand@PLT
	movsx	rdx, eax
	imul	rdx, rdx, 1431655766
	shr	rdx, 32
	mov	ecx, eax
	sar	ecx, 31
	sub	edx, ecx
	mov	ecx, edx
	add	ecx, ecx
	add	ecx, edx
	sub	eax, ecx
	mov	edx, eax
	lea	rcx, -48[rbp]
	movsx	rdx, edx
	mov	rax, rdx
	sal	rax, 2
	add	rax, rdx
	add	rax, rax
	add	rax, rcx
	mov	rsi, rax
	mov	edi, 15
	mov	eax, 0
	call	prctl@PLT
	nop
	mov	rax, QWORD PTR -8[rbp]
	sub	rax, QWORD PTR fs:40
	je	.L3
	call	__stack_chk_fail@PLT
.L3:
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE7:
	.size	change_procname, .-change_procname
	.type	main_loop, @function
main_loop:
.LFB8:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 48
	mov	rax, QWORD PTR fs:40
	mov	QWORD PTR -8[rbp], rax
	xor	eax, eax
	lea	rax, -23[rbp]
	mov	DWORD PTR [rax], 1886221359
	mov	WORD PTR 4[rax], 47
	mov	WORD PTR -34[rbp], 5
	jmp	.L5
.L8:
	call	rand@PLT
	mov	ecx, eax
	movsx	rax, ecx
	imul	rax, rax, 1272582903
	shr	rax, 32
	sar	eax, 3
	mov	esi, ecx
	sar	esi, 31
	sub	eax, esi
	mov	edx, eax
	mov	eax, edx
	add	eax, eax
	add	eax, edx
	lea	edx, 0[0+rax*8]
	add	eax, edx
	sub	ecx, eax
	mov	edx, ecx
	mov	WORD PTR -30[rbp], dx
	movzx	eax, WORD PTR -30[rbp]
	mov	edx, eax
	movzx	eax, WORD PTR -30[rbp]
	and	eax, 1
	test	ax, ax
	je	.L6
	mov	eax, 65
	jmp	.L7
.L6:
	mov	eax, 97
.L7:
	add	edx, eax
	movsx	eax, WORD PTR -34[rbp]
	cdqe
	mov	BYTE PTR -23[rbp+rax], dl
	movzx	eax, WORD PTR -34[rbp]
	add	eax, 1
	mov	WORD PTR -34[rbp], ax
.L5:
	cmp	WORD PTR -34[rbp], 9
	jle	.L8
	lea	rax, -23[rbp]
	add	rax, 10
	mov	edx, DWORD PTR ext[rip]
	mov	DWORD PTR [rax], edx
	movzx	edx, BYTE PTR ext[rip+4]
	mov	BYTE PTR 4[rax], dl
	lea	rax, -23[rbp]
	mov	edx, 256
	mov	esi, 65
	mov	rdi, rax
	mov	eax, 0
	call	open@PLT
	mov	DWORD PTR -28[rbp], eax
	cmp	DWORD PTR -28[rbp], 0
	jns	.L9
	mov	edi, -1
	call	exit@PLT
.L9:
	mov	eax, DWORD PTR -28[rbp]
	mov	edx, 39
	lea	rsi, data[rip]
	mov	edi, eax
	call	write@PLT
	mov	eax, DWORD PTR -28[rbp]
	mov	edi, eax
	call	close@PLT
.L13:
	mov	WORD PTR -32[rbp], 0
.L12:
	movsx	eax, WORD PTR -32[rbp]
	cdqe
	lea	rdx, secret[rip]
	movzx	eax, BYTE PTR [rax+rdx]
	xor	eax, 105
	mov	BYTE PTR -35[rbp], al
	cmp	BYTE PTR -35[rbp], 0
	je	.L16
	movsx	eax, BYTE PTR -35[rbp]
	mov	edi, eax
	call	putchar@PLT
	movzx	eax, WORD PTR -32[rbp]
	add	eax, 1
	mov	WORD PTR -32[rbp], ax
	jmp	.L12
.L16:
	nop
	mov	edi, 10
	call	putchar@PLT
	mov	rax, QWORD PTR stdout[rip]
	mov	rdi, rax
	call	fflush@PLT
	mov	edi, 5
	call	sleep@PLT
	jmp	.L13
	.cfi_endproc
.LFE8:
	.size	main_loop, .-main_loop
	.globl	main
	.type	main, @function
main:
.LFB9:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 16
	mov	DWORD PTR -4[rbp], edi
	mov	QWORD PTR -16[rbp], rsi
	mov	edi, 0
	call	time@PLT
	mov	edi, eax
	call	srand@PLT
	mov	rax, QWORD PTR -16[rbp]
	mov	rax, QWORD PTR [rax]
	mov	rdi, rax
	call	clean
	mov	eax, 0
	call	change_procname
	mov	eax, 0
	call	main_loop
	mov	eax, 0
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE9:
	.size	main, .-main
	.ident	"GCC: (Ubuntu 10.5.0-1ubuntu1~20.04) 10.5.0"
	.section	.note.GNU-stack,"",@progbits
	.section	.note.gnu.property,"a"
	.align 8
	.long	 1f - 0f
	.long	 4f - 1f
	.long	 5
0:
	.string	 "GNU"
1:
	.align 8
	.long	 0xc0000002
	.long	 3f - 2f
2:
	.long	 0x3
3:
	.align 8
4:

	.arch armv5t
	.eabi_attribute 20, 1
	.eabi_attribute 21, 1
	.eabi_attribute 23, 3
	.eabi_attribute 24, 1
	.eabi_attribute 25, 1
	.eabi_attribute 26, 2
	.eabi_attribute 30, 6
	.eabi_attribute 34, 0
	.eabi_attribute 18, 4
	.file	"467730.c"
	.text
	.section	.rodata
	.align	2
	.type	secret, %object
	.size	secret, 12
secret:
	.ascii	"\031\036\007\014\015\012\033[Y[Yi"
	.global	data
	.align	2
	.type	data, %object
	.size	data, 40
data:
	.ascii	"this is some malicious data! w00t w00t!\000"
	.global	ext
	.align	2
	.type	ext, %object
	.size	ext, 5
ext:
	.ascii	".bad\000"
	.text
	.align	2
	.syntax unified
	.arm
	.fpu softvfp
	.type	clean, %function
clean:
	@ args = 0, pretend = 0, frame = 8
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #8
	str	r0, [fp, #-8]
	ldr	r0, [fp, #-8]
	bl	unlink
	nop
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
	.size	clean, .-clean
	.section	.rodata
	.align	2
.LC0:
	.ascii	"ssh\000\000"
	.space	5
	.ascii	"init\000\000"
	.space	4
	.ascii	"dropbear\000\000"
	.align	2
.LC1:
	.word	__stack_chk_guard
	.text
	.align	2
	.syntax unified
	.arm
	.fpu softvfp
	.type	change_procname, %function
change_procname:
	@ args = 0, pretend = 0, frame = 40
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #40
	ldr	r3, .L4
	ldr	r3, [r3]
	str	r3, [fp, #-8]
	mov	r3,#0
	ldr	r3, .L4+4
	sub	ip, fp, #40
	mov	lr, r3
	ldmia	lr!, {r0, r1, r2, r3}
	stmia	ip!, {r0, r1, r2, r3}
	ldm	lr, {r0, r1, r2, r3}
	stmia	ip!, {r0, r1, r2}
	strh	r3, [ip]	@ movhi
	bl	rand
	mov	r1, r0
	ldr	r3, .L4+8
	smull	r0, r2, r3, r1
	asr	r3, r1, #31
	sub	r2, r2, r3
	mov	r3, r2
	lsl	r3, r3, #1
	add	r3, r3, r2
	sub	r2, r1, r3
	sub	r1, fp, #40
	mov	r3, r2
	lsl	r3, r3, #2
	add	r3, r3, r2
	lsl	r3, r3, #1
	add	r3, r1, r3
	mov	r1, r3
	mov	r0, #15
	bl	prctl
	nop
	ldr	r3, .L4
	ldr	r2, [r3]
	ldr	r3, [fp, #-8]
	eors	r2, r3, r2
	mov	r3, #0
	beq	.L3
	bl	__stack_chk_fail
.L3:
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
.L5:
	.align	2
.L4:
	.word	.LC1
	.word	.LC0
	.word	1431655766
	.size	change_procname, .-change_procname
	.section	.rodata
	.align	2
.LC2:
	.ascii	"/tmp/\000"
	.align	2
.LC3:
	.word	__stack_chk_guard
	.text
	.align	2
	.syntax unified
	.arm
	.fpu softvfp
	.type	main_loop, %function
main_loop:
	@ args = 0, pretend = 0, frame = 32
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #32
	ldr	r3, .L19
	ldr	r3, [r3]
	str	r3, [fp, #-8]
	mov	r3,#0
	sub	r3, fp, #24
	ldr	r2, .L19+4
	ldm	r2, {r0, r1}
	str	r0, [r3]
	add	r3, r3, #4
	strh	r1, [r3]	@ movhi
	mov	r3, #5
	strh	r3, [fp, #-34]	@ movhi
	b	.L7
.L10:
	bl	rand
	mov	r1, r0
	ldr	r3, .L19+8
	smull	r2, r3, r1, r3
	asr	r2, r3, #3
	asr	r3, r1, #31
	sub	r2, r2, r3
	mov	r3, r2
	lsl	r3, r3, #1
	add	r3, r3, r2
	lsl	r2, r3, #3
	add	r3, r3, r2
	sub	r2, r1, r3
	strh	r2, [fp, #-30]	@ movhi
	ldrh	r3, [fp, #-30]	@ movhi
	and	r2, r3, #255
	ldrh	r3, [fp, #-30]
	and	r3, r3, #1
	lsl	r3, r3, #16
	lsr	r3, r3, #16
	cmp	r3, #0
	beq	.L8
	mov	r1, #65
	b	.L9
.L8:
	mov	r1, #97
.L9:
	ldrsh	r3, [fp, #-34]
	add	r2, r1, r2
	and	r2, r2, #255
	sub	r1, fp, #4
	add	r3, r1, r3
	strb	r2, [r3, #-20]
	ldrsh	r3, [fp, #-34]
	lsl	r3, r3, #16
	lsr	r3, r3, #16
	add	r3, r3, #1
	lsl	r3, r3, #16
	lsr	r3, r3, #16
	strh	r3, [fp, #-34]	@ movhi
.L7:
	ldrsh	r3, [fp, #-34]
	cmp	r3, #9
	ble	.L10
	sub	r3, fp, #24
	add	r3, r3, #10
	ldr	r2, .L19+12
	mov	r0, r3
	mov	r1, r2
	mov	r3, #5
	mov	r2, r3
	bl	memcpy
	sub	r3, fp, #24
	mov	r2, #256
	mov	r1, #65
	mov	r0, r3
	bl	open
	str	r0, [fp, #-28]
	ldr	r3, [fp, #-28]
	cmp	r3, #0
	bge	.L11
	mvn	r0, #0
	bl	exit
.L11:
	mov	r2, #39
	ldr	r1, .L19+16
	ldr	r0, [fp, #-28]
	bl	write
	ldr	r0, [fp, #-28]
	bl	close
.L15:
	mov	r3, #0
	strh	r3, [fp, #-32]	@ movhi
.L14:
	ldrsh	r3, [fp, #-32]
	ldr	r2, .L19+20
	ldrb	r3, [r2, r3]	@ zero_extendqisi2
	eor	r3, r3, #105
	strb	r3, [fp, #-35]
	ldrb	r3, [fp, #-35]	@ zero_extendqisi2
	cmp	r3, #0
	beq	.L18
	ldrb	r3, [fp, #-35]	@ zero_extendqisi2
	mov	r0, r3
	bl	putchar
	ldrsh	r3, [fp, #-32]
	lsl	r3, r3, #16
	lsr	r3, r3, #16
	add	r3, r3, #1
	lsl	r3, r3, #16
	lsr	r3, r3, #16
	strh	r3, [fp, #-32]	@ movhi
	b	.L14
.L18:
	nop
	mov	r0, #10
	bl	putchar
	ldr	r3, .L19+24
	ldr	r3, [r3]
	mov	r0, r3
	bl	fflush
	mov	r0, #5
	bl	sleep
	b	.L15
.L20:
	.align	2
.L19:
	.word	.LC3
	.word	.LC2
	.word	1272582903
	.word	ext
	.word	data
	.word	secret
	.word	stdout
	.size	main_loop, .-main_loop
	.align	2
	.global	main
	.syntax unified
	.arm
	.fpu softvfp
	.type	main, %function
main:
	@ args = 0, pretend = 0, frame = 8
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #8
	str	r0, [fp, #-8]
	str	r1, [fp, #-12]
	mov	r0, #0
	bl	time
	mov	r3, r0
	mov	r0, r3
	bl	srand
	ldr	r3, [fp, #-12]
	ldr	r3, [r3]
	mov	r0, r3
	bl	clean
	bl	change_procname
	bl	main_loop
	mov	r3, #0
	mov	r0, r3
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
	.size	main, .-main
	.ident	"GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0"
	.section	.note.GNU-stack,"",%progbits
