	.file	"455396.c"
	.intel_syntax noprefix
	.text
	.section	.rodata
.LC0:
	.string	"/sys/kernel/debug/usb-fuzzer"
.LC1:
	.string	"open()"
	.text
	.globl	usb_fuzzer_open
	.type	usb_fuzzer_open, @function
usb_fuzzer_open:
.LFB54:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 16
	mov	esi, 2
	lea	rdi, .LC0[rip]
	mov	eax, 0
	call	open@PLT
	mov	DWORD PTR -4[rbp], eax
	cmp	DWORD PTR -4[rbp], 0
	jns	.L2
	lea	rdi, .LC1[rip]
	call	perror@PLT
	mov	edi, 1
	call	exit@PLT
.L2:
	mov	eax, DWORD PTR -4[rbp]
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE54:
	.size	usb_fuzzer_open, .-usb_fuzzer_open
	.section	.rodata
.LC2:
	.string	"dummy_udc"
.LC3:
	.string	"dummy_udc.0"
.LC4:
	.string	"ioctl(USB_FUZZER_IOCTL_INIT)"
	.text
	.globl	usb_fuzzer_init
	.type	usb_fuzzer_init, @function
usb_fuzzer_init:
.LFB55:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 64
	mov	DWORD PTR -52[rbp], edi
	mov	DWORD PTR -56[rbp], esi
	mov	rax, QWORD PTR fs:40
	mov	QWORD PTR -8[rbp], rax
	xor	eax, eax
	mov	eax, DWORD PTR -56[rbp]
	mov	QWORD PTR -32[rbp], rax
	lea	rax, .LC2[rip]
	mov	QWORD PTR -24[rbp], rax
	lea	rax, .LC3[rip]
	mov	QWORD PTR -16[rbp], rax
	lea	rdx, -32[rbp]
	mov	eax, DWORD PTR -52[rbp]
	mov	esi, 1075336448
	mov	edi, eax
	mov	eax, 0
	call	ioctl@PLT
	mov	DWORD PTR -36[rbp], eax
	cmp	DWORD PTR -36[rbp], 0
	je	.L7
	lea	rdi, .LC4[rip]
	call	perror@PLT
	mov	edi, 1
	call	exit@PLT
.L7:
	nop
	mov	rax, QWORD PTR -8[rbp]
	sub	rax, QWORD PTR fs:40
	je	.L6
	call	__stack_chk_fail@PLT
.L6:
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE55:
	.size	usb_fuzzer_init, .-usb_fuzzer_init
	.section	.rodata
.LC5:
	.string	"ioctl(USB_FUZZER_IOCTL_RUN)"
	.text
	.globl	usb_fuzzer_run
	.type	usb_fuzzer_run, @function
usb_fuzzer_run:
.LFB56:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 32
	mov	DWORD PTR -20[rbp], edi
	mov	eax, DWORD PTR -20[rbp]
	mov	edx, 0
	mov	esi, 21761
	mov	edi, eax
	mov	eax, 0
	call	ioctl@PLT
	mov	DWORD PTR -4[rbp], eax
	cmp	DWORD PTR -4[rbp], 0
	je	.L10
	lea	rdi, .LC5[rip]
	call	perror@PLT
	mov	edi, 1
	call	exit@PLT
.L10:
	nop
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE56:
	.size	usb_fuzzer_run, .-usb_fuzzer_run
	.section	.rodata
	.align 8
.LC6:
	.string	"ioctl(USB_FUZZER_IOCTL_EVENT_FETCH)"
	.text
	.globl	usb_fuzzer_event_fetch
	.type	usb_fuzzer_event_fetch, @function
usb_fuzzer_event_fetch:
.LFB57:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 32
	mov	DWORD PTR -20[rbp], edi
	mov	QWORD PTR -32[rbp], rsi
	mov	rdx, QWORD PTR -32[rbp]
	mov	eax, DWORD PTR -20[rbp]
	mov	esi, 2148029698
	mov	edi, eax
	mov	eax, 0
	call	ioctl@PLT
	mov	DWORD PTR -4[rbp], eax
	cmp	DWORD PTR -4[rbp], 0
	je	.L13
	lea	rdi, .LC6[rip]
	call	perror@PLT
	mov	edi, 1
	call	exit@PLT
.L13:
	nop
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE57:
	.size	usb_fuzzer_event_fetch, .-usb_fuzzer_event_fetch
	.section	.rodata
	.align 8
.LC7:
	.string	"ioctl(USB_FUZZER_IOCTL_EP0_READ)"
	.text
	.globl	usb_fuzzer_ep0_read
	.type	usb_fuzzer_ep0_read, @function
usb_fuzzer_ep0_read:
.LFB58:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 32
	mov	DWORD PTR -20[rbp], edi
	mov	QWORD PTR -32[rbp], rsi
	mov	rdx, QWORD PTR -32[rbp]
	mov	eax, DWORD PTR -20[rbp]
	mov	esi, 3221771524
	mov	edi, eax
	mov	eax, 0
	call	ioctl@PLT
	mov	DWORD PTR -4[rbp], eax
	cmp	DWORD PTR -4[rbp], 0
	je	.L16
	lea	rdi, .LC7[rip]
	call	perror@PLT
	mov	edi, 1
	call	exit@PLT
.L16:
	nop
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE58:
	.size	usb_fuzzer_ep0_read, .-usb_fuzzer_ep0_read
	.section	.rodata
	.align 8
.LC8:
	.string	"ioctl(USB_FUZZER_IOCTL_EP0_WRITE)"
	.text
	.globl	usb_fuzzer_ep0_write
	.type	usb_fuzzer_ep0_write, @function
usb_fuzzer_ep0_write:
.LFB59:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 32
	mov	DWORD PTR -20[rbp], edi
	mov	QWORD PTR -32[rbp], rsi
	mov	rdx, QWORD PTR -32[rbp]
	mov	eax, DWORD PTR -20[rbp]
	mov	esi, 1074287875
	mov	edi, eax
	mov	eax, 0
	call	ioctl@PLT
	mov	DWORD PTR -4[rbp], eax
	cmp	DWORD PTR -4[rbp], 0
	je	.L19
	lea	rdi, .LC8[rip]
	call	perror@PLT
	mov	edi, 1
	call	exit@PLT
.L19:
	nop
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE59:
	.size	usb_fuzzer_ep0_write, .-usb_fuzzer_ep0_write
	.section	.rodata
	.align 8
.LC9:
	.string	"ioctl(USB_FUZZER_IOCTL_EP_ENABLE)"
	.text
	.globl	usb_fuzzer_ep_enable
	.type	usb_fuzzer_ep_enable, @function
usb_fuzzer_ep_enable:
.LFB60:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 32
	mov	DWORD PTR -20[rbp], edi
	mov	QWORD PTR -32[rbp], rsi
	mov	rdx, QWORD PTR -32[rbp]
	mov	eax, DWORD PTR -20[rbp]
	mov	esi, 1074353413
	mov	edi, eax
	mov	eax, 0
	call	ioctl@PLT
	mov	DWORD PTR -4[rbp], eax
	cmp	DWORD PTR -4[rbp], 0
	jns	.L21
	lea	rdi, .LC9[rip]
	call	perror@PLT
	mov	edi, 1
	call	exit@PLT
.L21:
	mov	eax, DWORD PTR -4[rbp]
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE60:
	.size	usb_fuzzer_ep_enable, .-usb_fuzzer_ep_enable
	.section	.rodata
	.align 8
.LC10:
	.string	"ioctl(USB_FUZZER_IOCTL_EP_WRITE)"
	.text
	.globl	usb_fuzzer_ep_write
	.type	usb_fuzzer_ep_write, @function
usb_fuzzer_ep_write:
.LFB61:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 32
	mov	DWORD PTR -20[rbp], edi
	mov	QWORD PTR -32[rbp], rsi
	mov	rdx, QWORD PTR -32[rbp]
	mov	eax, DWORD PTR -20[rbp]
	mov	esi, 1074287879
	mov	edi, eax
	mov	eax, 0
	call	ioctl@PLT
	mov	DWORD PTR -4[rbp], eax
	cmp	DWORD PTR -4[rbp], 0
	jns	.L24
	lea	rdi, .LC10[rip]
	call	perror@PLT
	mov	edi, 1
	call	exit@PLT
.L24:
	mov	eax, DWORD PTR -4[rbp]
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE61:
	.size	usb_fuzzer_ep_write, .-usb_fuzzer_ep_write
	.section	.rodata
	.align 8
.LC11:
	.string	"ioctl(USB_FUZZER_IOCTL_CONFIGURED)"
	.text
	.globl	usb_fuzzer_configure
	.type	usb_fuzzer_configure, @function
usb_fuzzer_configure:
.LFB62:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 32
	mov	DWORD PTR -20[rbp], edi
	mov	eax, DWORD PTR -20[rbp]
	mov	edx, 0
	mov	esi, 21769
	mov	edi, eax
	mov	eax, 0
	call	ioctl@PLT
	mov	DWORD PTR -4[rbp], eax
	cmp	DWORD PTR -4[rbp], 0
	jns	.L28
	lea	rdi, .LC11[rip]
	call	perror@PLT
	mov	edi, 1
	call	exit@PLT
.L28:
	nop
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE62:
	.size	usb_fuzzer_configure, .-usb_fuzzer_configure
	.section	.rodata
	.align 8
.LC12:
	.string	"ioctl(USB_FUZZER_IOCTL_VBUS_DRAW)"
	.text
	.globl	usb_fuzzer_vbus_draw
	.type	usb_fuzzer_vbus_draw, @function
usb_fuzzer_vbus_draw:
.LFB63:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 32
	mov	DWORD PTR -20[rbp], edi
	mov	DWORD PTR -24[rbp], esi
	mov	edx, DWORD PTR -24[rbp]
	mov	eax, DWORD PTR -20[rbp]
	mov	esi, 1074025738
	mov	edi, eax
	mov	eax, 0
	call	ioctl@PLT
	mov	DWORD PTR -4[rbp], eax
	cmp	DWORD PTR -4[rbp], 0
	jns	.L31
	lea	rdi, .LC12[rip]
	call	perror@PLT
	mov	edi, 1
	call	exit@PLT
.L31:
	nop
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE63:
	.size	usb_fuzzer_vbus_draw, .-usb_fuzzer_vbus_draw
	.globl	usb_device
	.data
	.align 16
	.type	usb_device, @object
	.size	usb_device, 18
usb_device:
	.byte	18
	.byte	1
	.value	512
	.byte	0
	.byte	0
	.byte	0
	.byte	64
	.value	1133
	.value	-15598
	.value	0
	.byte	0
	.byte	1
	.byte	2
	.byte	1
	.globl	usb_qualifier
	.align 8
	.type	usb_qualifier, @object
	.size	usb_qualifier, 10
usb_qualifier:
	.byte	10
	.byte	6
	.value	512
	.byte	0
	.byte	0
	.byte	0
	.byte	64
	.byte	1
	.byte	0
	.globl	usb_config
	.align 8
	.type	usb_config, @object
	.size	usb_config, 9
usb_config:
	.byte	9
	.byte	2
	.value	0
	.byte	1
	.byte	1
	.byte	3
	.byte	-64
	.byte	50
	.globl	usb_interface
	.align 8
	.type	usb_interface, @object
	.size	usb_interface, 9
usb_interface:
	.byte	9
	.byte	4
	.byte	0
	.byte	0
	.byte	1
	.byte	3
	.byte	1
	.byte	1
	.byte	4
	.globl	usb_endpoint
	.align 8
	.type	usb_endpoint, @object
	.size	usb_endpoint, 9
usb_endpoint:
	.byte	7
	.byte	5
	.byte	-127
	.byte	3
	.value	8
	.byte	5
	.zero	2
	.globl	usb_hid_report
	.align 32
	.type	usb_hid_report, @object
	.size	usb_hid_report, 65
usb_hid_report:
	.string	"\005\001\t\006\241\001\005\007\031\340)\347\025"
	.string	"%\001u\001\225\b\201\002\225\001u\b\201\001\225\003u\001\005\b\031\001)\003\221\002\225\005u\001\221\001\225\006u\b\025"
	.string	"&\377"
	.string	"\005\007\031"
	.string	"*\377"
	.string	"\201"
	.ascii	"\300"
	.globl	usb_hid
	.align 8
	.type	usb_hid, @object
	.size	usb_hid, 9
usb_hid:
	.byte	9
	.byte	33
	.value	272
	.byte	0
	.byte	1
	.byte	34
	.value	65
	.section	.rodata
.LC13:
	.string	"the_stack_data/455396.c"
.LC14:
	.string	"length >= sizeof(usb_config)"
	.align 8
.LC15:
	.string	"length >= sizeof(usb_interface)"
.LC16:
	.string	"length >= sizeof(usb_hid)"
	.align 8
.LC17:
	.string	"length >= USB_DT_ENDPOINT_SIZE"
.LC18:
	.string	"config->wTotalLength: %d\n"
	.text
	.globl	build_config
	.type	build_config, @function
build_config:
.LFB64:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 32
	mov	QWORD PTR -24[rbp], rdi
	mov	DWORD PTR -28[rbp], esi
	mov	rax, QWORD PTR -24[rbp]
	mov	QWORD PTR -8[rbp], rax
	mov	DWORD PTR -12[rbp], 0
	mov	eax, DWORD PTR -28[rbp]
	cmp	eax, 8
	ja	.L33
	lea	rcx, __PRETTY_FUNCTION__.0[rip]
	mov	edx, 300
	lea	rsi, .LC13[rip]
	lea	rdi, .LC14[rip]
	call	__assert_fail@PLT
.L33:
	mov	rax, QWORD PTR -24[rbp]
	mov	rdx, QWORD PTR usb_config[rip]
	mov	QWORD PTR [rax], rdx
	movzx	edx, BYTE PTR usb_config[rip+8]
	mov	BYTE PTR 8[rax], dl
	add	QWORD PTR -24[rbp], 9
	mov	eax, DWORD PTR -28[rbp]
	sub	eax, 9
	mov	DWORD PTR -28[rbp], eax
	mov	eax, DWORD PTR -12[rbp]
	add	eax, 9
	mov	DWORD PTR -12[rbp], eax
	mov	eax, DWORD PTR -28[rbp]
	cmp	eax, 8
	ja	.L34
	lea	rcx, __PRETTY_FUNCTION__.0[rip]
	mov	edx, 306
	lea	rsi, .LC13[rip]
	lea	rdi, .LC15[rip]
	call	__assert_fail@PLT
.L34:
	mov	rax, QWORD PTR -24[rbp]
	mov	rdx, QWORD PTR usb_interface[rip]
	mov	QWORD PTR [rax], rdx
	movzx	edx, BYTE PTR usb_interface[rip+8]
	mov	BYTE PTR 8[rax], dl
	add	QWORD PTR -24[rbp], 9
	mov	eax, DWORD PTR -28[rbp]
	sub	eax, 9
	mov	DWORD PTR -28[rbp], eax
	mov	eax, DWORD PTR -12[rbp]
	add	eax, 9
	mov	DWORD PTR -12[rbp], eax
	mov	eax, DWORD PTR -28[rbp]
	cmp	eax, 8
	ja	.L35
	lea	rcx, __PRETTY_FUNCTION__.0[rip]
	mov	edx, 312
	lea	rsi, .LC13[rip]
	lea	rdi, .LC16[rip]
	call	__assert_fail@PLT
.L35:
	mov	rax, QWORD PTR -24[rbp]
	mov	rdx, QWORD PTR usb_hid[rip]
	mov	QWORD PTR [rax], rdx
	movzx	edx, BYTE PTR usb_hid[rip+8]
	mov	BYTE PTR 8[rax], dl
	add	QWORD PTR -24[rbp], 9
	mov	eax, DWORD PTR -28[rbp]
	sub	eax, 9
	mov	DWORD PTR -28[rbp], eax
	mov	eax, DWORD PTR -12[rbp]
	add	eax, 9
	mov	DWORD PTR -12[rbp], eax
	cmp	DWORD PTR -28[rbp], 6
	jg	.L36
	lea	rcx, __PRETTY_FUNCTION__.0[rip]
	mov	edx, 318
	lea	rsi, .LC13[rip]
	lea	rdi, .LC17[rip]
	call	__assert_fail@PLT
.L36:
	mov	rax, QWORD PTR -24[rbp]
	mov	edx, 7
	lea	rsi, usb_endpoint[rip]
	mov	rdi, rax
	call	memcpy@PLT
	add	QWORD PTR -24[rbp], 7
	sub	DWORD PTR -28[rbp], 7
	add	DWORD PTR -12[rbp], 7
	mov	eax, DWORD PTR -12[rbp]
	mov	edx, eax
	mov	rax, QWORD PTR -8[rbp]
	mov	WORD PTR 2[rax], dx
	mov	eax, DWORD PTR -12[rbp]
	mov	esi, eax
	lea	rdi, .LC18[rip]
	mov	eax, 0
	call	printf@PLT
	mov	eax, DWORD PTR -12[rbp]
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE64:
	.size	build_config, .-build_config
	.section	.rodata
.LC19:
	.string	"IN"
.LC20:
	.string	"OUT"
	.align 8
.LC21:
	.string	"  bRequestType: 0x%x (%s), bRequest: 0x%x, wValue: 0x%x, wIndex: 0x%x, wLength: %d\n"
.LC22:
	.string	"  type = USB_TYPE_STANDARD"
.LC23:
	.string	"  type = USB_TYPE_CLASS"
.LC24:
	.string	"  type = USB_TYPE_VENDOR"
.LC25:
	.string	"  type = unknown = %d\n"
	.align 8
.LC26:
	.string	"  req = USB_REQ_GET_DESCRIPTOR"
.LC27:
	.string	"  descriptor = USB_DT_DEVICE"
	.align 8
.LC28:
	.string	"  descriptor = USB_DT_CONFIG, index = %d\n"
.LC29:
	.string	"  descriptor = USB_DT_STRING"
	.align 8
.LC30:
	.string	"  descriptor = USB_DT_INTERFACE"
	.align 8
.LC31:
	.string	"  descriptor = USB_DT_ENDPOINT"
	.align 8
.LC32:
	.string	"  descriptor = USB_DT_DEVICE_QUALIFIER"
	.align 8
.LC33:
	.string	"  descriptor = USB_DT_OTHER_SPEED_CONFIG"
	.align 8
.LC34:
	.string	"  descriptor = USB_DT_INTERFACE_POWER"
.LC35:
	.string	"  descriptor = USB_DT_OTG"
.LC36:
	.string	"  descriptor = USB_DT_DEBUG"
	.align 8
.LC37:
	.string	"  descriptor = USB_DT_INTERFACE_ASSOCIATION"
	.align 8
.LC38:
	.string	"  descriptor = USB_DT_SECURITY"
.LC39:
	.string	"  descriptor = USB_DT_KEY"
	.align 8
.LC40:
	.string	"  descriptor = USB_DT_ENCRYPTION_TYPE"
.LC41:
	.string	"  descriptor = USB_DT_BOS"
	.align 8
.LC42:
	.string	"  descriptor = USB_DT_DEVICE_CAPABILITY"
	.align 8
.LC43:
	.string	"  descriptor = USB_DT_WIRELESS_ENDPOINT_COMP"
	.align 8
.LC44:
	.string	"  descriptor = USB_DT_PIPE_USAGE"
	.align 8
.LC45:
	.string	"  descriptor = USB_DT_SS_ENDPOINT_COMP"
.LC46:
	.string	"  descriptor = HID_DT_HID"
.LC47:
	.string	"  descriptor = HID_DT_REPORT"
	.align 8
.LC48:
	.string	"  descriptor = HID_DT_PHYSICAL"
	.align 8
.LC49:
	.string	"  descriptor = unknown = 0x%x\n"
	.align 8
.LC50:
	.string	"  req = USB_REQ_SET_CONFIGURATION, value = %d\n"
	.align 8
.LC51:
	.string	"  req = USB_REQ_GET_CONFIGURATION"
.LC52:
	.string	"  req = USB_REQ_SET_INTERFACE"
.LC53:
	.string	"  req = USB_REQ_GET_INTERFACE"
.LC54:
	.string	"  req = USB_REQ_GET_STATUS"
.LC55:
	.string	"  req = USB_REQ_CLEAR_FEATURE"
.LC56:
	.string	"  req = USB_REQ_SET_FEATURE"
.LC57:
	.string	"  req = unknown = 0x%x\n"
.LC58:
	.string	"  req = HID_REQ_GET_REPORT"
.LC59:
	.string	"  req = HID_REQ_GET_IDLE"
.LC60:
	.string	"  req = HID_REQ_GET_PROTOCOL"
.LC61:
	.string	"  req = HID_REQ_SET_REPORT"
.LC62:
	.string	"  req = HID_REQ_SET_IDLE"
.LC63:
	.string	"  req = HID_REQ_SET_PROTOCOL"
	.text
	.globl	log_control_request
	.type	log_control_request, @function
log_control_request:
.LFB65:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 16
	mov	QWORD PTR -8[rbp], rdi
	mov	rax, QWORD PTR -8[rbp]
	movzx	eax, WORD PTR 6[rax]
	movzx	ecx, ax
	mov	rax, QWORD PTR -8[rbp]
	movzx	eax, WORD PTR 4[rax]
	movzx	r8d, ax
	mov	rax, QWORD PTR -8[rbp]
	movzx	eax, WORD PTR 2[rax]
	movzx	edi, ax
	mov	rax, QWORD PTR -8[rbp]
	movzx	eax, BYTE PTR 1[rax]
	movzx	edx, al
	mov	rax, QWORD PTR -8[rbp]
	movzx	eax, BYTE PTR [rax]
	test	al, al
	jns	.L39
	lea	rax, .LC19[rip]
	jmp	.L40
.L39:
	lea	rax, .LC20[rip]
.L40:
	mov	rsi, QWORD PTR -8[rbp]
	movzx	esi, BYTE PTR [rsi]
	movzx	esi, sil
	sub	rsp, 8
	push	rcx
	mov	r9d, r8d
	mov	r8d, edi
	mov	ecx, edx
	mov	rdx, rax
	lea	rdi, .LC21[rip]
	mov	eax, 0
	call	printf@PLT
	add	rsp, 16
	mov	rax, QWORD PTR -8[rbp]
	movzx	eax, BYTE PTR [rax]
	movzx	eax, al
	and	eax, 96
	cmp	eax, 64
	je	.L41
	cmp	eax, 64
	jg	.L42
	test	eax, eax
	je	.L43
	cmp	eax, 32
	je	.L44
	jmp	.L42
.L43:
	lea	rdi, .LC22[rip]
	call	puts@PLT
	jmp	.L45
.L44:
	lea	rdi, .LC23[rip]
	call	puts@PLT
	jmp	.L45
.L41:
	lea	rdi, .LC24[rip]
	call	puts@PLT
	jmp	.L45
.L42:
	mov	rax, QWORD PTR -8[rbp]
	movzx	eax, BYTE PTR [rax]
	movzx	eax, al
	mov	esi, eax
	lea	rdi, .LC25[rip]
	mov	eax, 0
	call	printf@PLT
	nop
.L45:
	mov	rax, QWORD PTR -8[rbp]
	movzx	eax, BYTE PTR [rax]
	movzx	eax, al
	and	eax, 96
	test	eax, eax
	je	.L46
	cmp	eax, 32
	je	.L47
	jmp	.L95
.L46:
	mov	rax, QWORD PTR -8[rbp]
	movzx	eax, BYTE PTR 1[rax]
	movzx	eax, al
	cmp	eax, 11
	ja	.L49
	mov	eax, eax
	lea	rdx, 0[0+rax*4]
	lea	rax, .L51[rip]
	mov	eax, DWORD PTR [rdx+rax]
	cdqe
	lea	rdx, .L51[rip]
	add	rax, rdx
	notrack jmp	rax
	.section	.rodata
	.align 4
	.align 4
.L51:
	.long	.L58-.L51
	.long	.L57-.L51
	.long	.L49-.L51
	.long	.L56-.L51
	.long	.L49-.L51
	.long	.L49-.L51
	.long	.L55-.L51
	.long	.L49-.L51
	.long	.L54-.L51
	.long	.L53-.L51
	.long	.L52-.L51
	.long	.L50-.L51
	.text
.L55:
	lea	rdi, .LC26[rip]
	call	puts@PLT
	mov	rax, QWORD PTR -8[rbp]
	movzx	eax, WORD PTR 2[rax]
	shr	ax, 8
	movzx	eax, ax
	cmp	eax, 48
	ja	.L59
	mov	eax, eax
	lea	rdx, 0[0+rax*4]
	lea	rax, .L61[rip]
	mov	eax, DWORD PTR [rdx+rax]
	cdqe
	lea	rdx, .L61[rip]
	add	rax, rdx
	notrack jmp	rax
	.section	.rodata
	.align 4
	.align 4
.L61:
	.long	.L59-.L61
	.long	.L82-.L61
	.long	.L81-.L61
	.long	.L80-.L61
	.long	.L79-.L61
	.long	.L78-.L61
	.long	.L77-.L61
	.long	.L76-.L61
	.long	.L75-.L61
	.long	.L74-.L61
	.long	.L73-.L61
	.long	.L72-.L61
	.long	.L71-.L61
	.long	.L70-.L61
	.long	.L69-.L61
	.long	.L68-.L61
	.long	.L67-.L61
	.long	.L66-.L61
	.long	.L59-.L61
	.long	.L59-.L61
	.long	.L59-.L61
	.long	.L59-.L61
	.long	.L59-.L61
	.long	.L59-.L61
	.long	.L59-.L61
	.long	.L59-.L61
	.long	.L59-.L61
	.long	.L59-.L61
	.long	.L59-.L61
	.long	.L59-.L61
	.long	.L59-.L61
	.long	.L59-.L61
	.long	.L59-.L61
	.long	.L65-.L61
	.long	.L64-.L61
	.long	.L63-.L61
	.long	.L62-.L61
	.long	.L59-.L61
	.long	.L59-.L61
	.long	.L59-.L61
	.long	.L59-.L61
	.long	.L59-.L61
	.long	.L59-.L61
	.long	.L59-.L61
	.long	.L59-.L61
	.long	.L59-.L61
	.long	.L59-.L61
	.long	.L59-.L61
	.long	.L60-.L61
	.text
.L82:
	lea	rdi, .LC27[rip]
	call	puts@PLT
	jmp	.L83
.L81:
	mov	rax, QWORD PTR -8[rbp]
	movzx	eax, WORD PTR 2[rax]
	movzx	eax, ax
	movzx	eax, al
	mov	esi, eax
	lea	rdi, .LC28[rip]
	mov	eax, 0
	call	printf@PLT
	jmp	.L83
.L80:
	lea	rdi, .LC29[rip]
	call	puts@PLT
	jmp	.L83
.L79:
	lea	rdi, .LC30[rip]
	call	puts@PLT
	jmp	.L83
.L78:
	lea	rdi, .LC31[rip]
	call	puts@PLT
	jmp	.L83
.L77:
	lea	rdi, .LC32[rip]
	call	puts@PLT
	jmp	.L83
.L76:
	lea	rdi, .LC33[rip]
	call	puts@PLT
	jmp	.L83
.L75:
	lea	rdi, .LC34[rip]
	call	puts@PLT
	jmp	.L83
.L74:
	lea	rdi, .LC35[rip]
	call	puts@PLT
	jmp	.L83
.L73:
	lea	rdi, .LC36[rip]
	call	puts@PLT
	jmp	.L83
.L72:
	lea	rdi, .LC37[rip]
	call	puts@PLT
	jmp	.L83
.L71:
	lea	rdi, .LC38[rip]
	call	puts@PLT
	jmp	.L83
.L70:
	lea	rdi, .LC39[rip]
	call	puts@PLT
	jmp	.L83
.L69:
	lea	rdi, .LC40[rip]
	call	puts@PLT
	jmp	.L83
.L68:
	lea	rdi, .LC41[rip]
	call	puts@PLT
	jmp	.L83
.L67:
	lea	rdi, .LC42[rip]
	call	puts@PLT
	jmp	.L83
.L66:
	lea	rdi, .LC43[rip]
	call	puts@PLT
	jmp	.L83
.L62:
	lea	rdi, .LC44[rip]
	call	puts@PLT
	jmp	.L83
.L60:
	lea	rdi, .LC45[rip]
	call	puts@PLT
	jmp	.L83
.L65:
	lea	rdi, .LC46[rip]
	call	puts@PLT
	jmp	.L38
.L64:
	lea	rdi, .LC47[rip]
	call	puts@PLT
	jmp	.L38
.L63:
	lea	rdi, .LC48[rip]
	call	puts@PLT
	jmp	.L38
.L59:
	mov	rax, QWORD PTR -8[rbp]
	movzx	eax, WORD PTR 2[rax]
	shr	ax, 8
	movzx	eax, ax
	mov	esi, eax
	lea	rdi, .LC49[rip]
	mov	eax, 0
	call	printf@PLT
	nop
.L83:
	jmp	.L85
.L53:
	mov	rax, QWORD PTR -8[rbp]
	movzx	eax, WORD PTR 2[rax]
	movzx	eax, ax
	mov	esi, eax
	lea	rdi, .LC50[rip]
	mov	eax, 0
	call	printf@PLT
	jmp	.L85
.L54:
	lea	rdi, .LC51[rip]
	call	puts@PLT
	jmp	.L85
.L50:
	lea	rdi, .LC52[rip]
	call	puts@PLT
	jmp	.L85
.L52:
	lea	rdi, .LC53[rip]
	call	puts@PLT
	jmp	.L85
.L58:
	lea	rdi, .LC54[rip]
	call	puts@PLT
	jmp	.L85
.L57:
	lea	rdi, .LC55[rip]
	call	puts@PLT
	jmp	.L85
.L56:
	lea	rdi, .LC56[rip]
	call	puts@PLT
	jmp	.L85
.L49:
	mov	rax, QWORD PTR -8[rbp]
	movzx	eax, BYTE PTR 1[rax]
	movzx	eax, al
	mov	esi, eax
	lea	rdi, .LC57[rip]
	mov	eax, 0
	call	printf@PLT
	nop
.L85:
	jmp	.L38
.L47:
	mov	rax, QWORD PTR -8[rbp]
	movzx	eax, BYTE PTR 1[rax]
	movzx	eax, al
	cmp	eax, 11
	ja	.L86
	mov	eax, eax
	lea	rdx, 0[0+rax*4]
	lea	rax, .L88[rip]
	mov	eax, DWORD PTR [rdx+rax]
	cdqe
	lea	rdx, .L88[rip]
	add	rax, rdx
	notrack jmp	rax
	.section	.rodata
	.align 4
	.align 4
.L88:
	.long	.L86-.L88
	.long	.L93-.L88
	.long	.L92-.L88
	.long	.L91-.L88
	.long	.L86-.L88
	.long	.L86-.L88
	.long	.L86-.L88
	.long	.L86-.L88
	.long	.L86-.L88
	.long	.L90-.L88
	.long	.L89-.L88
	.long	.L87-.L88
	.text
.L93:
	lea	rdi, .LC58[rip]
	call	puts@PLT
	jmp	.L94
.L92:
	lea	rdi, .LC59[rip]
	call	puts@PLT
	jmp	.L94
.L91:
	lea	rdi, .LC60[rip]
	call	puts@PLT
	jmp	.L94
.L90:
	lea	rdi, .LC61[rip]
	call	puts@PLT
	jmp	.L94
.L89:
	lea	rdi, .LC62[rip]
	call	puts@PLT
	jmp	.L94
.L87:
	lea	rdi, .LC63[rip]
	call	puts@PLT
	jmp	.L94
.L86:
	mov	rax, QWORD PTR -8[rbp]
	movzx	eax, BYTE PTR 1[rax]
	movzx	eax, al
	mov	esi, eax
	lea	rdi, .LC57[rip]
	mov	eax, 0
	call	printf@PLT
	nop
.L94:
	jmp	.L38
.L95:
	mov	rax, QWORD PTR -8[rbp]
	movzx	eax, BYTE PTR 1[rax]
	movzx	eax, al
	mov	esi, eax
	lea	rdi, .LC57[rip]
	mov	eax, 0
	call	printf@PLT
	nop
.L38:
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE65:
	.size	log_control_request, .-log_control_request
	.section	.rodata
.LC64:
	.string	"event: connect, length: %u\n"
	.align 8
.LC65:
	.string	"event: disconnect, length: %u\n"
.LC66:
	.string	"event: suspend, length: %u\n"
.LC67:
	.string	"event: resume, length: %u\n"
.LC68:
	.string	"event: control, length: %u\n"
.LC69:
	.string	"event: unknown, length: %u\n"
	.text
	.globl	log_event
	.type	log_event, @function
log_event:
.LFB66:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 16
	mov	QWORD PTR -8[rbp], rdi
	mov	rax, QWORD PTR -8[rbp]
	mov	eax, DWORD PTR [rax]
	cmp	eax, 5
	ja	.L97
	mov	eax, eax
	lea	rdx, 0[0+rax*4]
	lea	rax, .L99[rip]
	mov	eax, DWORD PTR [rdx+rax]
	cdqe
	lea	rdx, .L99[rip]
	add	rax, rdx
	notrack jmp	rax
	.section	.rodata
	.align 4
	.align 4
.L99:
	.long	.L97-.L99
	.long	.L103-.L99
	.long	.L102-.L99
	.long	.L101-.L99
	.long	.L100-.L99
	.long	.L98-.L99
	.text
.L103:
	mov	rax, QWORD PTR -8[rbp]
	mov	eax, DWORD PTR 4[rax]
	mov	esi, eax
	lea	rdi, .LC64[rip]
	mov	eax, 0
	call	printf@PLT
	jmp	.L104
.L102:
	mov	rax, QWORD PTR -8[rbp]
	mov	eax, DWORD PTR 4[rax]
	mov	esi, eax
	lea	rdi, .LC65[rip]
	mov	eax, 0
	call	printf@PLT
	jmp	.L104
.L101:
	mov	rax, QWORD PTR -8[rbp]
	mov	eax, DWORD PTR 4[rax]
	mov	esi, eax
	lea	rdi, .LC66[rip]
	mov	eax, 0
	call	printf@PLT
	jmp	.L104
.L100:
	mov	rax, QWORD PTR -8[rbp]
	mov	eax, DWORD PTR 4[rax]
	mov	esi, eax
	lea	rdi, .LC67[rip]
	mov	eax, 0
	call	printf@PLT
	jmp	.L104
.L98:
	mov	rax, QWORD PTR -8[rbp]
	mov	eax, DWORD PTR 4[rax]
	mov	esi, eax
	lea	rdi, .LC68[rip]
	mov	eax, 0
	call	printf@PLT
	mov	rax, QWORD PTR -8[rbp]
	add	rax, 8
	mov	rdi, rax
	call	log_control_request
	jmp	.L104
.L97:
	mov	rax, QWORD PTR -8[rbp]
	mov	eax, DWORD PTR 4[rax]
	mov	esi, eax
	lea	rdi, .LC69[rip]
	mov	eax, 0
	call	printf@PLT
	nop
.L104:
	nop
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE66:
	.size	log_event, .-log_event
	.section	.rodata
.LC70:
	.string	"fail: no response"
.LC71:
	.string	"endpoint: #%d\n"
	.text
	.globl	keyboard_connect
	.type	keyboard_connect, @function
keyboard_connect:
.LFB67:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	add	rsp, -128
	mov	DWORD PTR -116[rbp], edi
	mov	rax, QWORD PTR fs:40
	mov	QWORD PTR -8[rbp], rax
	xor	eax, eax
	mov	DWORD PTR -104[rbp], -1
	mov	BYTE PTR -105[rbp], 0
	jmp	.L106
.L132:
	mov	DWORD PTR -96[rbp], 0
	mov	DWORD PTR -92[rbp], 8
	mov	WORD PTR -80[rbp], 0
	mov	WORD PTR -78[rbp], 0
	mov	DWORD PTR -76[rbp], 0
	lea	rdx, -96[rbp]
	mov	eax, DWORD PTR -116[rbp]
	mov	rsi, rdx
	mov	edi, eax
	call	usb_fuzzer_event_fetch
	lea	rax, -96[rbp]
	mov	rdi, rax
	call	log_event
	mov	eax, DWORD PTR -96[rbp]
	cmp	eax, 5
	je	.L107
	jmp	.L106
.L107:
	movzx	eax, BYTE PTR -88[rbp]
	movzx	eax, al
	and	eax, 96
	test	eax, eax
	je	.L108
	cmp	eax, 32
	je	.L109
	jmp	.L135
.L108:
	movzx	eax, BYTE PTR -87[rbp]
	movzx	eax, al
	cmp	eax, 10
	je	.L111
	cmp	eax, 10
	jg	.L112
	cmp	eax, 6
	je	.L113
	cmp	eax, 9
	je	.L114
	jmp	.L112
.L113:
	movzx	eax, WORD PTR -86[rbp]
	shr	ax, 8
	movzx	eax, ax
	cmp	eax, 34
	ja	.L115
	mov	eax, eax
	lea	rdx, 0[0+rax*4]
	lea	rax, .L117[rip]
	mov	eax, DWORD PTR [rdx+rax]
	cdqe
	lea	rdx, .L117[rip]
	add	rax, rdx
	notrack jmp	rax
	.section	.rodata
	.align 4
	.align 4
.L117:
	.long	.L115-.L117
	.long	.L121-.L117
	.long	.L120-.L117
	.long	.L119-.L117
	.long	.L115-.L117
	.long	.L115-.L117
	.long	.L118-.L117
	.long	.L115-.L117
	.long	.L115-.L117
	.long	.L115-.L117
	.long	.L115-.L117
	.long	.L115-.L117
	.long	.L115-.L117
	.long	.L115-.L117
	.long	.L115-.L117
	.long	.L115-.L117
	.long	.L115-.L117
	.long	.L115-.L117
	.long	.L115-.L117
	.long	.L115-.L117
	.long	.L115-.L117
	.long	.L115-.L117
	.long	.L115-.L117
	.long	.L115-.L117
	.long	.L115-.L117
	.long	.L115-.L117
	.long	.L115-.L117
	.long	.L115-.L117
	.long	.L115-.L117
	.long	.L115-.L117
	.long	.L115-.L117
	.long	.L115-.L117
	.long	.L115-.L117
	.long	.L115-.L117
	.long	.L116-.L117
	.text
.L121:
	mov	rax, QWORD PTR usb_device[rip]
	mov	rdx, QWORD PTR usb_device[rip+8]
	mov	QWORD PTR -72[rbp], rax
	mov	QWORD PTR -64[rbp], rdx
	movzx	eax, WORD PTR usb_device[rip+16]
	mov	WORD PTR -56[rbp], ax
	mov	DWORD PTR -76[rbp], 18
	jmp	.L122
.L118:
	mov	rax, QWORD PTR usb_qualifier[rip]
	mov	QWORD PTR -72[rbp], rax
	movzx	eax, WORD PTR usb_qualifier[rip+8]
	mov	WORD PTR -64[rbp], ax
	mov	DWORD PTR -76[rbp], 10
	jmp	.L122
.L120:
	lea	rax, -80[rbp]
	add	rax, 8
	mov	esi, 64
	mov	rdi, rax
	call	build_config
	mov	DWORD PTR -100[rbp], eax
	mov	eax, DWORD PTR -100[rbp]
	mov	DWORD PTR -76[rbp], eax
	jmp	.L122
.L119:
	mov	BYTE PTR -72[rbp], 4
	mov	BYTE PTR -71[rbp], 3
	movzx	eax, WORD PTR -86[rbp]
	movzx	eax, ax
	movzx	eax, al
	test	eax, eax
	jne	.L123
	mov	BYTE PTR -70[rbp], 9
	mov	BYTE PTR -69[rbp], 4
	jmp	.L124
.L123:
	mov	BYTE PTR -70[rbp], 120
	mov	BYTE PTR -69[rbp], 0
.L124:
	mov	DWORD PTR -76[rbp], 4
	jmp	.L122
.L116:
	lea	rax, -80[rbp]
	add	rax, 8
	mov	edx, 65
	lea	rsi, usb_hid_report[rip]
	mov	rdi, rax
	call	memcpy@PLT
	mov	DWORD PTR -76[rbp], 65
	jmp	.L122
.L115:
	lea	rdi, .LC70[rip]
	call	puts@PLT
	mov	edi, 1
	call	exit@PLT
.L114:
	mov	eax, DWORD PTR -116[rbp]
	lea	rsi, usb_endpoint[rip]
	mov	edi, eax
	call	usb_fuzzer_ep_enable
	mov	DWORD PTR -104[rbp], eax
	movzx	eax, BYTE PTR usb_config[rip+8]
	movzx	edx, al
	mov	eax, DWORD PTR -116[rbp]
	mov	esi, edx
	mov	edi, eax
	call	usb_fuzzer_vbus_draw
	mov	eax, DWORD PTR -116[rbp]
	mov	edi, eax
	call	usb_fuzzer_configure
	mov	DWORD PTR -76[rbp], 0
	jmp	.L122
.L111:
	movzx	eax, BYTE PTR usb_interface[rip+2]
	mov	BYTE PTR -72[rbp], al
	mov	DWORD PTR -76[rbp], 1
	jmp	.L122
.L112:
	lea	rdi, .LC70[rip]
	call	puts@PLT
	mov	edi, 1
	call	exit@PLT
.L109:
	movzx	eax, BYTE PTR -87[rbp]
	movzx	eax, al
	cmp	eax, 11
	je	.L125
	cmp	eax, 11
	jg	.L126
	cmp	eax, 9
	je	.L127
	cmp	eax, 10
	je	.L128
	jmp	.L126
.L127:
	mov	DWORD PTR -76[rbp], 1
	mov	BYTE PTR -105[rbp], 1
	jmp	.L122
.L128:
	mov	DWORD PTR -76[rbp], 0
	jmp	.L122
.L125:
	mov	DWORD PTR -76[rbp], 0
	mov	BYTE PTR -105[rbp], 1
	jmp	.L122
.L126:
	lea	rdi, .LC70[rip]
	call	puts@PLT
	mov	edi, 1
	call	exit@PLT
.L135:
	lea	rdi, .LC70[rip]
	call	puts@PLT
	mov	edi, 1
	call	exit@PLT
.L122:
	movzx	eax, WORD PTR -82[rbp]
	movzx	edx, ax
	mov	eax, DWORD PTR -76[rbp]
	cmp	edx, eax
	jnb	.L129
	movzx	eax, WORD PTR -82[rbp]
	movzx	eax, ax
	mov	DWORD PTR -76[rbp], eax
.L129:
	movzx	eax, BYTE PTR -88[rbp]
	test	al, al
	jns	.L130
	lea	rdx, -80[rbp]
	mov	eax, DWORD PTR -116[rbp]
	mov	rsi, rdx
	mov	edi, eax
	call	usb_fuzzer_ep0_write
	jmp	.L106
.L130:
	lea	rdx, -80[rbp]
	mov	eax, DWORD PTR -116[rbp]
	mov	rsi, rdx
	mov	edi, eax
	call	usb_fuzzer_ep0_read
.L106:
	movzx	eax, BYTE PTR -105[rbp]
	xor	eax, 1
	test	al, al
	jne	.L132
	mov	eax, DWORD PTR -104[rbp]
	mov	esi, eax
	lea	rdi, .LC71[rip]
	mov	eax, 0
	call	printf@PLT
	mov	eax, DWORD PTR -104[rbp]
	mov	rcx, QWORD PTR -8[rbp]
	sub	rcx, QWORD PTR fs:40
	je	.L134
	call	__stack_chk_fail@PLT
.L134:
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE67:
	.size	keyboard_connect, .-keyboard_connect
	.section	.rodata
.LC72:
	.string	""
	.string	""
	.string	"\033"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
.LC73:
	.string	"key down: %d\n"
.LC74:
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
.LC75:
	.string	"key up: %d\n"
	.text
	.globl	keyboard_loop
	.type	keyboard_loop, @function
keyboard_loop:
.LFB68:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 64
	mov	DWORD PTR -52[rbp], edi
	mov	DWORD PTR -56[rbp], esi
	mov	rax, QWORD PTR fs:40
	mov	QWORD PTR -8[rbp], rax
	xor	eax, eax
	mov	eax, DWORD PTR -56[rbp]
	mov	WORD PTR -32[rbp], ax
	mov	WORD PTR -30[rbp], 0
	mov	DWORD PTR -28[rbp], 8
.L137:
	lea	rax, -32[rbp]
	add	rax, 8
	mov	edx, 8
	lea	rsi, .LC72[rip]
	mov	rdi, rax
	call	memcpy@PLT
	lea	rdx, -32[rbp]
	mov	eax, DWORD PTR -52[rbp]
	mov	rsi, rdx
	mov	edi, eax
	call	usb_fuzzer_ep_write
	mov	DWORD PTR -36[rbp], eax
	mov	eax, DWORD PTR -36[rbp]
	mov	esi, eax
	lea	rdi, .LC73[rip]
	mov	eax, 0
	call	printf@PLT
	lea	rax, -32[rbp]
	add	rax, 8
	mov	edx, 8
	lea	rsi, .LC74[rip]
	mov	rdi, rax
	call	memcpy@PLT
	lea	rdx, -32[rbp]
	mov	eax, DWORD PTR -52[rbp]
	mov	rsi, rdx
	mov	edi, eax
	call	usb_fuzzer_ep_write
	mov	DWORD PTR -36[rbp], eax
	mov	eax, DWORD PTR -36[rbp]
	mov	esi, eax
	lea	rdi, .LC75[rip]
	mov	eax, 0
	call	printf@PLT
	mov	edi, 1
	call	sleep@PLT
	jmp	.L137
	.cfi_endproc
.LFE68:
	.size	keyboard_loop, .-keyboard_loop
	.globl	main
	.type	main, @function
main:
.LFB69:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 32
	mov	DWORD PTR -20[rbp], edi
	mov	QWORD PTR -32[rbp], rsi
	mov	eax, 0
	call	usb_fuzzer_open
	mov	DWORD PTR -8[rbp], eax
	mov	eax, DWORD PTR -8[rbp]
	mov	esi, 3
	mov	edi, eax
	call	usb_fuzzer_init
	mov	eax, DWORD PTR -8[rbp]
	mov	edi, eax
	call	usb_fuzzer_run
	mov	eax, DWORD PTR -8[rbp]
	mov	edi, eax
	call	keyboard_connect
	mov	DWORD PTR -4[rbp], eax
	mov	edx, DWORD PTR -4[rbp]
	mov	eax, DWORD PTR -8[rbp]
	mov	esi, edx
	mov	edi, eax
	call	keyboard_loop
	mov	eax, DWORD PTR -8[rbp]
	mov	edi, eax
	call	close@PLT
	mov	eax, 0
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE69:
	.size	main, .-main
	.section	.rodata
	.align 8
	.type	__PRETTY_FUNCTION__.0, @object
	.size	__PRETTY_FUNCTION__.0, 13
__PRETTY_FUNCTION__.0:
	.string	"build_config"
	.ident	"GCC: (Ubuntu 10.5.0-1ubuntu1~20.04) 10.5.0"
	.section	.note.GNU-stack,"",@progbits
	.section	.note.gnu.property,"a"
	.align 8
	.long	 1f - 0f
	.long	 4f - 1f
	.long	 5
0:
	.string	 "GNU"
1:
	.align 8
	.long	 0xc0000002
	.long	 3f - 2f
2:
	.long	 0x3
3:
	.align 8
4:

	.arch armv5t
	.eabi_attribute 20, 1
	.eabi_attribute 21, 1
	.eabi_attribute 23, 3
	.eabi_attribute 24, 1
	.eabi_attribute 25, 1
	.eabi_attribute 26, 2
	.eabi_attribute 30, 6
	.eabi_attribute 34, 0
	.eabi_attribute 18, 4
	.file	"455396.c"
	.text
	.section	.rodata
	.align	2
.LC0:
	.ascii	"/sys/kernel/debug/usb-fuzzer\000"
	.align	2
.LC1:
	.ascii	"open()\000"
	.text
	.align	2
	.global	usb_fuzzer_open
	.syntax unified
	.arm
	.fpu softvfp
	.type	usb_fuzzer_open, %function
usb_fuzzer_open:
	@ args = 0, pretend = 0, frame = 8
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #8
	mov	r1, #2
	ldr	r0, .L4
	bl	open
	str	r0, [fp, #-8]
	ldr	r3, [fp, #-8]
	cmp	r3, #0
	bge	.L2
	ldr	r0, .L4+4
	bl	perror
	mov	r0, #1
	bl	exit
.L2:
	ldr	r3, [fp, #-8]
	mov	r0, r3
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
.L5:
	.align	2
.L4:
	.word	.LC0
	.word	.LC1
	.size	usb_fuzzer_open, .-usb_fuzzer_open
	.section	.rodata
	.align	2
.LC2:
	.ascii	"dummy_udc\000"
	.align	2
.LC3:
	.ascii	"dummy_udc.0\000"
	.align	2
.LC4:
	.ascii	"ioctl(USB_FUZZER_IOCTL_INIT)\000"
	.align	2
.LC5:
	.word	__stack_chk_guard
	.text
	.align	2
	.global	usb_fuzzer_init
	.syntax unified
	.arm
	.fpu softvfp
	.type	usb_fuzzer_init, %function
usb_fuzzer_init:
	@ args = 0, pretend = 0, frame = 40
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #40
	str	r0, [fp, #-40]
	str	r1, [fp, #-44]
	ldr	r3, .L10
	ldr	r3, [r3]
	str	r3, [fp, #-8]
	mov	r3,#0
	ldr	r3, [fp, #-44]
	mov	r2, r3
	mov	r3, #0
	str	r2, [fp, #-28]
	str	r3, [fp, #-24]
	ldr	r3, .L10+4
	str	r3, [fp, #-20]
	ldr	r3, .L10+8
	str	r3, [fp, #-16]
	sub	r3, fp, #28
	mov	r2, r3
	ldr	r1, .L10+12
	ldr	r0, [fp, #-40]
	bl	ioctl
	str	r0, [fp, #-32]
	ldr	r3, [fp, #-32]
	cmp	r3, #0
	beq	.L9
	ldr	r0, .L10+16
	bl	perror
	mov	r0, #1
	bl	exit
.L9:
	nop
	ldr	r3, .L10
	ldr	r2, [r3]
	ldr	r3, [fp, #-8]
	eors	r2, r3, r2
	mov	r3, #0
	beq	.L8
	bl	__stack_chk_fail
.L8:
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
.L11:
	.align	2
.L10:
	.word	.LC5
	.word	.LC2
	.word	.LC3
	.word	1074812160
	.word	.LC4
	.size	usb_fuzzer_init, .-usb_fuzzer_init
	.section	.rodata
	.align	2
.LC6:
	.ascii	"ioctl(USB_FUZZER_IOCTL_RUN)\000"
	.text
	.align	2
	.global	usb_fuzzer_run
	.syntax unified
	.arm
	.fpu softvfp
	.type	usb_fuzzer_run, %function
usb_fuzzer_run:
	@ args = 0, pretend = 0, frame = 16
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #16
	str	r0, [fp, #-16]
	mov	r2, #0
	ldr	r1, .L15
	ldr	r0, [fp, #-16]
	bl	ioctl
	str	r0, [fp, #-8]
	ldr	r3, [fp, #-8]
	cmp	r3, #0
	beq	.L14
	ldr	r0, .L15+4
	bl	perror
	mov	r0, #1
	bl	exit
.L14:
	nop
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
.L16:
	.align	2
.L15:
	.word	21761
	.word	.LC6
	.size	usb_fuzzer_run, .-usb_fuzzer_run
	.section	.rodata
	.align	2
.LC7:
	.ascii	"ioctl(USB_FUZZER_IOCTL_EVENT_FETCH)\000"
	.text
	.align	2
	.global	usb_fuzzer_event_fetch
	.syntax unified
	.arm
	.fpu softvfp
	.type	usb_fuzzer_event_fetch, %function
usb_fuzzer_event_fetch:
	@ args = 0, pretend = 0, frame = 16
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #16
	str	r0, [fp, #-16]
	str	r1, [fp, #-20]
	ldr	r2, [fp, #-20]
	ldr	r1, .L20
	ldr	r0, [fp, #-16]
	bl	ioctl
	str	r0, [fp, #-8]
	ldr	r3, [fp, #-8]
	cmp	r3, #0
	beq	.L19
	ldr	r0, .L20+4
	bl	perror
	mov	r0, #1
	bl	exit
.L19:
	nop
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
.L21:
	.align	2
.L20:
	.word	-2146937598
	.word	.LC7
	.size	usb_fuzzer_event_fetch, .-usb_fuzzer_event_fetch
	.section	.rodata
	.align	2
.LC8:
	.ascii	"ioctl(USB_FUZZER_IOCTL_EP0_READ)\000"
	.text
	.align	2
	.global	usb_fuzzer_ep0_read
	.syntax unified
	.arm
	.fpu softvfp
	.type	usb_fuzzer_ep0_read, %function
usb_fuzzer_ep0_read:
	@ args = 0, pretend = 0, frame = 16
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #16
	str	r0, [fp, #-16]
	str	r1, [fp, #-20]
	ldr	r2, [fp, #-20]
	ldr	r1, .L25
	ldr	r0, [fp, #-16]
	bl	ioctl
	str	r0, [fp, #-8]
	ldr	r3, [fp, #-8]
	cmp	r3, #0
	beq	.L24
	ldr	r0, .L25+4
	bl	perror
	mov	r0, #1
	bl	exit
.L24:
	nop
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
.L26:
	.align	2
.L25:
	.word	-1073195772
	.word	.LC8
	.size	usb_fuzzer_ep0_read, .-usb_fuzzer_ep0_read
	.section	.rodata
	.align	2
.LC9:
	.ascii	"ioctl(USB_FUZZER_IOCTL_EP0_WRITE)\000"
	.text
	.align	2
	.global	usb_fuzzer_ep0_write
	.syntax unified
	.arm
	.fpu softvfp
	.type	usb_fuzzer_ep0_write, %function
usb_fuzzer_ep0_write:
	@ args = 0, pretend = 0, frame = 16
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #16
	str	r0, [fp, #-16]
	str	r1, [fp, #-20]
	ldr	r2, [fp, #-20]
	ldr	r1, .L30
	ldr	r0, [fp, #-16]
	bl	ioctl
	str	r0, [fp, #-8]
	ldr	r3, [fp, #-8]
	cmp	r3, #0
	beq	.L29
	ldr	r0, .L30+4
	bl	perror
	mov	r0, #1
	bl	exit
.L29:
	nop
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
.L31:
	.align	2
.L30:
	.word	1074287875
	.word	.LC9
	.size	usb_fuzzer_ep0_write, .-usb_fuzzer_ep0_write
	.section	.rodata
	.align	2
.LC10:
	.ascii	"ioctl(USB_FUZZER_IOCTL_EP_ENABLE)\000"
	.text
	.align	2
	.global	usb_fuzzer_ep_enable
	.syntax unified
	.arm
	.fpu softvfp
	.type	usb_fuzzer_ep_enable, %function
usb_fuzzer_ep_enable:
	@ args = 0, pretend = 0, frame = 16
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #16
	str	r0, [fp, #-16]
	str	r1, [fp, #-20]
	ldr	r2, [fp, #-20]
	ldr	r1, .L35
	ldr	r0, [fp, #-16]
	bl	ioctl
	str	r0, [fp, #-8]
	ldr	r3, [fp, #-8]
	cmp	r3, #0
	bge	.L33
	ldr	r0, .L35+4
	bl	perror
	mov	r0, #1
	bl	exit
.L33:
	ldr	r3, [fp, #-8]
	mov	r0, r3
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
.L36:
	.align	2
.L35:
	.word	1074353413
	.word	.LC10
	.size	usb_fuzzer_ep_enable, .-usb_fuzzer_ep_enable
	.section	.rodata
	.align	2
.LC11:
	.ascii	"ioctl(USB_FUZZER_IOCTL_EP_WRITE)\000"
	.text
	.align	2
	.global	usb_fuzzer_ep_write
	.syntax unified
	.arm
	.fpu softvfp
	.type	usb_fuzzer_ep_write, %function
usb_fuzzer_ep_write:
	@ args = 0, pretend = 0, frame = 16
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #16
	str	r0, [fp, #-16]
	str	r1, [fp, #-20]
	ldr	r2, [fp, #-20]
	ldr	r1, .L40
	ldr	r0, [fp, #-16]
	bl	ioctl
	str	r0, [fp, #-8]
	ldr	r3, [fp, #-8]
	cmp	r3, #0
	bge	.L38
	ldr	r0, .L40+4
	bl	perror
	mov	r0, #1
	bl	exit
.L38:
	ldr	r3, [fp, #-8]
	mov	r0, r3
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
.L41:
	.align	2
.L40:
	.word	1074287879
	.word	.LC11
	.size	usb_fuzzer_ep_write, .-usb_fuzzer_ep_write
	.section	.rodata
	.align	2
.LC12:
	.ascii	"ioctl(USB_FUZZER_IOCTL_CONFIGURED)\000"
	.text
	.align	2
	.global	usb_fuzzer_configure
	.syntax unified
	.arm
	.fpu softvfp
	.type	usb_fuzzer_configure, %function
usb_fuzzer_configure:
	@ args = 0, pretend = 0, frame = 16
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #16
	str	r0, [fp, #-16]
	mov	r2, #0
	ldr	r1, .L45
	ldr	r0, [fp, #-16]
	bl	ioctl
	str	r0, [fp, #-8]
	ldr	r3, [fp, #-8]
	cmp	r3, #0
	bge	.L44
	ldr	r0, .L45+4
	bl	perror
	mov	r0, #1
	bl	exit
.L44:
	nop
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
.L46:
	.align	2
.L45:
	.word	21769
	.word	.LC12
	.size	usb_fuzzer_configure, .-usb_fuzzer_configure
	.section	.rodata
	.align	2
.LC13:
	.ascii	"ioctl(USB_FUZZER_IOCTL_VBUS_DRAW)\000"
	.text
	.align	2
	.global	usb_fuzzer_vbus_draw
	.syntax unified
	.arm
	.fpu softvfp
	.type	usb_fuzzer_vbus_draw, %function
usb_fuzzer_vbus_draw:
	@ args = 0, pretend = 0, frame = 16
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #16
	str	r0, [fp, #-16]
	str	r1, [fp, #-20]
	ldr	r2, [fp, #-20]
	ldr	r1, .L50
	ldr	r0, [fp, #-16]
	bl	ioctl
	str	r0, [fp, #-8]
	ldr	r3, [fp, #-8]
	cmp	r3, #0
	bge	.L49
	ldr	r0, .L50+4
	bl	perror
	mov	r0, #1
	bl	exit
.L49:
	nop
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
.L51:
	.align	2
.L50:
	.word	1074025738
	.word	.LC13
	.size	usb_fuzzer_vbus_draw, .-usb_fuzzer_vbus_draw
	.global	usb_device
	.data
	.align	2
	.type	usb_device, %object
	.size	usb_device, 18
usb_device:
	.byte	18
	.byte	1
	.short	512
	.byte	0
	.byte	0
	.byte	0
	.byte	64
	.short	1133
	.short	-15598
	.short	0
	.byte	0
	.byte	1
	.byte	2
	.byte	1
	.global	usb_qualifier
	.align	2
	.type	usb_qualifier, %object
	.size	usb_qualifier, 10
usb_qualifier:
	.byte	10
	.byte	6
	.short	512
	.byte	0
	.byte	0
	.byte	0
	.byte	64
	.byte	1
	.byte	0
	.global	usb_config
	.align	2
	.type	usb_config, %object
	.size	usb_config, 9
usb_config:
	.byte	9
	.byte	2
	.short	0
	.byte	1
	.byte	1
	.byte	3
	.byte	-64
	.byte	50
	.global	usb_interface
	.align	2
	.type	usb_interface, %object
	.size	usb_interface, 9
usb_interface:
	.byte	9
	.byte	4
	.byte	0
	.byte	0
	.byte	1
	.byte	3
	.byte	1
	.byte	1
	.byte	4
	.global	usb_endpoint
	.align	2
	.type	usb_endpoint, %object
	.size	usb_endpoint, 9
usb_endpoint:
	.byte	7
	.byte	5
	.byte	-127
	.byte	3
	.short	8
	.byte	5
	.space	2
	.global	usb_hid_report
	.align	2
	.type	usb_hid_report, %object
	.size	usb_hid_report, 65
usb_hid_report:
	.ascii	"\005\001\011\006\241\001\005\007\031\340)\347\025\000"
	.ascii	"%\001u\001\225\010\201\002\225\001u\010\201\001\225"
	.ascii	"\003u\001\005\010\031\001)\003\221\002\225\005u\001"
	.ascii	"\221\001\225\006u\010\025\000&\377\000\005\007\031\000"
	.ascii	"*\377\000\201\000\300"
	.global	usb_hid
	.align	2
	.type	usb_hid, %object
	.size	usb_hid, 9
usb_hid:
	.byte	9
	.byte	33
	.short	272
	.byte	0
	.byte	1
	.byte	34
	.2byte	65
	.section	.rodata
	.align	2
.LC14:
	.ascii	"the_stack_data/455396.c\000"
	.align	2
.LC15:
	.ascii	"length >= sizeof(usb_config)\000"
	.align	2
.LC16:
	.ascii	"length >= sizeof(usb_interface)\000"
	.align	2
.LC17:
	.ascii	"length >= sizeof(usb_hid)\000"
	.align	2
.LC18:
	.ascii	"length >= USB_DT_ENDPOINT_SIZE\000"
	.align	2
.LC19:
	.ascii	"config->wTotalLength: %d\012\000"
	.text
	.align	2
	.global	build_config
	.syntax unified
	.arm
	.fpu softvfp
	.type	build_config, %function
build_config:
	@ args = 0, pretend = 0, frame = 16
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #16
	str	r0, [fp, #-16]
	str	r1, [fp, #-20]
	ldr	r3, [fp, #-16]
	str	r3, [fp, #-12]
	mov	r3, #0
	str	r3, [fp, #-8]
	ldr	r3, [fp, #-20]
	cmp	r3, #8
	bhi	.L53
	ldr	r3, .L58
	mov	r2, #300
	ldr	r1, .L58+4
	ldr	r0, .L58+8
	bl	__assert_fail
.L53:
	ldr	r3, [fp, #-16]
	ldr	r2, .L58+12
	mov	r0, r3
	mov	r1, r2
	mov	r3, #9
	mov	r2, r3
	bl	memcpy
	ldr	r3, [fp, #-16]
	add	r3, r3, #9
	str	r3, [fp, #-16]
	ldr	r3, [fp, #-20]
	sub	r3, r3, #9
	str	r3, [fp, #-20]
	ldr	r3, [fp, #-8]
	add	r3, r3, #9
	str	r3, [fp, #-8]
	ldr	r3, [fp, #-20]
	cmp	r3, #8
	bhi	.L54
	ldr	r3, .L58
	ldr	r2, .L58+16
	ldr	r1, .L58+4
	ldr	r0, .L58+20
	bl	__assert_fail
.L54:
	ldr	r3, [fp, #-16]
	ldr	r2, .L58+24
	mov	r0, r3
	mov	r1, r2
	mov	r3, #9
	mov	r2, r3
	bl	memcpy
	ldr	r3, [fp, #-16]
	add	r3, r3, #9
	str	r3, [fp, #-16]
	ldr	r3, [fp, #-20]
	sub	r3, r3, #9
	str	r3, [fp, #-20]
	ldr	r3, [fp, #-8]
	add	r3, r3, #9
	str	r3, [fp, #-8]
	ldr	r3, [fp, #-20]
	cmp	r3, #8
	bhi	.L55
	ldr	r3, .L58
	mov	r2, #312
	ldr	r1, .L58+4
	ldr	r0, .L58+28
	bl	__assert_fail
.L55:
	ldr	r3, [fp, #-16]
	ldr	r2, .L58+32
	mov	r0, r3
	mov	r1, r2
	mov	r3, #9
	mov	r2, r3
	bl	memcpy
	ldr	r3, [fp, #-16]
	add	r3, r3, #9
	str	r3, [fp, #-16]
	ldr	r3, [fp, #-20]
	sub	r3, r3, #9
	str	r3, [fp, #-20]
	ldr	r3, [fp, #-8]
	add	r3, r3, #9
	str	r3, [fp, #-8]
	ldr	r3, [fp, #-20]
	cmp	r3, #6
	bgt	.L56
	ldr	r3, .L58
	ldr	r2, .L58+36
	ldr	r1, .L58+4
	ldr	r0, .L58+40
	bl	__assert_fail
.L56:
	mov	r2, #7
	ldr	r1, .L58+44
	ldr	r0, [fp, #-16]
	bl	memcpy
	ldr	r3, [fp, #-16]
	add	r3, r3, #7
	str	r3, [fp, #-16]
	ldr	r3, [fp, #-20]
	sub	r3, r3, #7
	str	r3, [fp, #-20]
	ldr	r3, [fp, #-8]
	add	r3, r3, #7
	str	r3, [fp, #-8]
	ldr	r3, [fp, #-8]
	lsl	r3, r3, #16
	lsr	r2, r3, #16
	ldr	r3, [fp, #-12]
	and	r1, r2, #255
	mov	r0, #0
	orr	r1, r0, r1
	strb	r1, [r3, #2]
	lsr	r2, r2, #8
	lsl	r2, r2, #16
	lsr	r2, r2, #16
	mov	r1, #0
	orr	r2, r1, r2
	strb	r2, [r3, #3]
	ldr	r1, [fp, #-8]
	ldr	r0, .L58+48
	bl	printf
	ldr	r3, [fp, #-8]
	mov	r0, r3
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
.L59:
	.align	2
.L58:
	.word	__PRETTY_FUNCTION__.6694
	.word	.LC14
	.word	.LC15
	.word	usb_config
	.word	306
	.word	.LC16
	.word	usb_interface
	.word	.LC17
	.word	usb_hid
	.word	318
	.word	.LC18
	.word	usb_endpoint
	.word	.LC19
	.size	build_config, .-build_config
	.section	.rodata
	.align	2
.LC20:
	.ascii	"IN\000"
	.align	2
.LC21:
	.ascii	"OUT\000"
	.align	2
.LC22:
	.ascii	"  bRequestType: 0x%x (%s), bRequest: 0x%x, wValue: "
	.ascii	"0x%x, wIndex: 0x%x, wLength: %d\012\000"
	.align	2
.LC23:
	.ascii	"  type = USB_TYPE_STANDARD\000"
	.align	2
.LC24:
	.ascii	"  type = USB_TYPE_CLASS\000"
	.align	2
.LC25:
	.ascii	"  type = USB_TYPE_VENDOR\000"
	.align	2
.LC26:
	.ascii	"  type = unknown = %d\012\000"
	.align	2
.LC27:
	.ascii	"  req = USB_REQ_GET_DESCRIPTOR\000"
	.align	2
.LC28:
	.ascii	"  descriptor = USB_DT_DEVICE\000"
	.align	2
.LC29:
	.ascii	"  descriptor = USB_DT_CONFIG, index = %d\012\000"
	.align	2
.LC30:
	.ascii	"  descriptor = USB_DT_STRING\000"
	.align	2
.LC31:
	.ascii	"  descriptor = USB_DT_INTERFACE\000"
	.align	2
.LC32:
	.ascii	"  descriptor = USB_DT_ENDPOINT\000"
	.align	2
.LC33:
	.ascii	"  descriptor = USB_DT_DEVICE_QUALIFIER\000"
	.align	2
.LC34:
	.ascii	"  descriptor = USB_DT_OTHER_SPEED_CONFIG\000"
	.align	2
.LC35:
	.ascii	"  descriptor = USB_DT_INTERFACE_POWER\000"
	.align	2
.LC36:
	.ascii	"  descriptor = USB_DT_OTG\000"
	.align	2
.LC37:
	.ascii	"  descriptor = USB_DT_DEBUG\000"
	.align	2
.LC38:
	.ascii	"  descriptor = USB_DT_INTERFACE_ASSOCIATION\000"
	.align	2
.LC39:
	.ascii	"  descriptor = USB_DT_SECURITY\000"
	.align	2
.LC40:
	.ascii	"  descriptor = USB_DT_KEY\000"
	.align	2
.LC41:
	.ascii	"  descriptor = USB_DT_ENCRYPTION_TYPE\000"
	.align	2
.LC42:
	.ascii	"  descriptor = USB_DT_BOS\000"
	.align	2
.LC43:
	.ascii	"  descriptor = USB_DT_DEVICE_CAPABILITY\000"
	.align	2
.LC44:
	.ascii	"  descriptor = USB_DT_WIRELESS_ENDPOINT_COMP\000"
	.align	2
.LC45:
	.ascii	"  descriptor = USB_DT_PIPE_USAGE\000"
	.align	2
.LC46:
	.ascii	"  descriptor = USB_DT_SS_ENDPOINT_COMP\000"
	.align	2
.LC47:
	.ascii	"  descriptor = HID_DT_HID\000"
	.align	2
.LC48:
	.ascii	"  descriptor = HID_DT_REPORT\000"
	.align	2
.LC49:
	.ascii	"  descriptor = HID_DT_PHYSICAL\000"
	.align	2
.LC50:
	.ascii	"  descriptor = unknown = 0x%x\012\000"
	.align	2
.LC51:
	.ascii	"  req = USB_REQ_SET_CONFIGURATION, value = %d\012\000"
	.align	2
.LC52:
	.ascii	"  req = USB_REQ_GET_CONFIGURATION\000"
	.align	2
.LC53:
	.ascii	"  req = USB_REQ_SET_INTERFACE\000"
	.align	2
.LC54:
	.ascii	"  req = USB_REQ_GET_INTERFACE\000"
	.align	2
.LC55:
	.ascii	"  req = USB_REQ_GET_STATUS\000"
	.align	2
.LC56:
	.ascii	"  req = USB_REQ_CLEAR_FEATURE\000"
	.align	2
.LC57:
	.ascii	"  req = USB_REQ_SET_FEATURE\000"
	.align	2
.LC58:
	.ascii	"  req = unknown = 0x%x\012\000"
	.align	2
.LC59:
	.ascii	"  req = HID_REQ_GET_REPORT\000"
	.align	2
.LC60:
	.ascii	"  req = HID_REQ_GET_IDLE\000"
	.align	2
.LC61:
	.ascii	"  req = HID_REQ_GET_PROTOCOL\000"
	.align	2
.LC62:
	.ascii	"  req = HID_REQ_SET_REPORT\000"
	.align	2
.LC63:
	.ascii	"  req = HID_REQ_SET_IDLE\000"
	.align	2
.LC64:
	.ascii	"  req = HID_REQ_SET_PROTOCOL\000"
	.text
	.align	2
	.global	log_control_request
	.syntax unified
	.arm
	.fpu softvfp
	.type	log_control_request, %function
log_control_request:
	@ args = 0, pretend = 0, frame = 8
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{r4, fp, lr}
	add	fp, sp, #8
	sub	sp, sp, #28
	str	r0, [fp, #-16]
	ldr	r3, [fp, #-16]
	ldrb	r3, [r3]	@ zero_extendqisi2
	mov	lr, r3
	ldr	r3, [fp, #-16]
	ldrb	r3, [r3]	@ zero_extendqisi2
	lsl	r3, r3, #24
	asr	r3, r3, #24
	cmp	r3, #0
	bge	.L61
	ldr	r1, .L118
	b	.L62
.L61:
	ldr	r1, .L118+4
.L62:
	ldr	r3, [fp, #-16]
	ldrb	r3, [r3, #1]	@ zero_extendqisi2
	mov	r4, r3
	ldr	r3, [fp, #-16]
	ldrb	r2, [r3, #2]	@ zero_extendqisi2
	ldrb	r3, [r3, #3]	@ zero_extendqisi2
	lsl	r3, r3, #8
	orr	r3, r3, r2
	lsl	r3, r3, #16
	lsr	r3, r3, #16
	mov	r0, r3
	ldr	r3, [fp, #-16]
	ldrb	r2, [r3, #4]	@ zero_extendqisi2
	ldrb	r3, [r3, #5]	@ zero_extendqisi2
	lsl	r3, r3, #8
	orr	r3, r3, r2
	lsl	r3, r3, #16
	lsr	r3, r3, #16
	mov	ip, r3
	ldr	r3, [fp, #-16]
	ldrb	r2, [r3, #6]	@ zero_extendqisi2
	ldrb	r3, [r3, #7]	@ zero_extendqisi2
	lsl	r3, r3, #8
	orr	r3, r3, r2
	lsl	r3, r3, #16
	lsr	r3, r3, #16
	str	r3, [sp, #8]
	str	ip, [sp, #4]
	str	r0, [sp]
	mov	r3, r4
	mov	r2, r1
	mov	r1, lr
	ldr	r0, .L118+8
	bl	printf
	ldr	r3, [fp, #-16]
	ldrb	r3, [r3]	@ zero_extendqisi2
	and	r3, r3, #96
	cmp	r3, #64
	beq	.L63
	cmp	r3, #64
	bgt	.L64
	cmp	r3, #0
	beq	.L65
	cmp	r3, #32
	beq	.L66
	b	.L64
.L65:
	ldr	r0, .L118+12
	bl	puts
	b	.L67
.L66:
	ldr	r0, .L118+16
	bl	puts
	b	.L67
.L63:
	ldr	r0, .L118+20
	bl	puts
	b	.L67
.L64:
	ldr	r3, [fp, #-16]
	ldrb	r3, [r3]	@ zero_extendqisi2
	mov	r1, r3
	ldr	r0, .L118+24
	bl	printf
	nop
.L67:
	ldr	r3, [fp, #-16]
	ldrb	r3, [r3]	@ zero_extendqisi2
	and	r3, r3, #96
	cmp	r3, #0
	beq	.L68
	cmp	r3, #32
	beq	.L69
	b	.L117
.L68:
	ldr	r3, [fp, #-16]
	ldrb	r3, [r3, #1]	@ zero_extendqisi2
	cmp	r3, #11
	ldrls	pc, [pc, r3, asl #2]
	b	.L71
.L73:
	.word	.L80
	.word	.L79
	.word	.L71
	.word	.L78
	.word	.L71
	.word	.L71
	.word	.L77
	.word	.L71
	.word	.L76
	.word	.L75
	.word	.L74
	.word	.L72
.L77:
	ldr	r0, .L118+28
	bl	puts
	ldr	r3, [fp, #-16]
	ldrb	r2, [r3, #2]	@ zero_extendqisi2
	ldrb	r3, [r3, #3]	@ zero_extendqisi2
	lsl	r3, r3, #8
	orr	r3, r3, r2
	lsl	r3, r3, #16
	lsr	r3, r3, #16
	lsr	r3, r3, #8
	lsl	r3, r3, #16
	lsr	r3, r3, #16
	sub	r3, r3, #1
	cmp	r3, #47
	ldrls	pc, [pc, r3, asl #2]
	b	.L81
.L83:
	.word	.L104
	.word	.L103
	.word	.L102
	.word	.L101
	.word	.L100
	.word	.L99
	.word	.L98
	.word	.L97
	.word	.L96
	.word	.L95
	.word	.L94
	.word	.L93
	.word	.L92
	.word	.L91
	.word	.L90
	.word	.L89
	.word	.L88
	.word	.L81
	.word	.L81
	.word	.L81
	.word	.L81
	.word	.L81
	.word	.L81
	.word	.L81
	.word	.L81
	.word	.L81
	.word	.L81
	.word	.L81
	.word	.L81
	.word	.L81
	.word	.L81
	.word	.L81
	.word	.L87
	.word	.L86
	.word	.L85
	.word	.L84
	.word	.L81
	.word	.L81
	.word	.L81
	.word	.L81
	.word	.L81
	.word	.L81
	.word	.L81
	.word	.L81
	.word	.L81
	.word	.L81
	.word	.L81
	.word	.L82
.L104:
	ldr	r0, .L118+32
	bl	puts
	b	.L105
.L103:
	ldr	r3, [fp, #-16]
	ldrb	r2, [r3, #2]	@ zero_extendqisi2
	ldrb	r3, [r3, #3]	@ zero_extendqisi2
	lsl	r3, r3, #8
	orr	r3, r3, r2
	lsl	r3, r3, #16
	lsr	r3, r3, #16
	and	r3, r3, #255
	mov	r1, r3
	ldr	r0, .L118+36
	bl	printf
	b	.L105
.L102:
	ldr	r0, .L118+40
	bl	puts
	b	.L105
.L101:
	ldr	r0, .L118+44
	bl	puts
	b	.L105
.L100:
	ldr	r0, .L118+48
	bl	puts
	b	.L105
.L99:
	ldr	r0, .L118+52
	bl	puts
	b	.L105
.L98:
	ldr	r0, .L118+56
	bl	puts
	b	.L105
.L97:
	ldr	r0, .L118+60
	bl	puts
	b	.L105
.L96:
	ldr	r0, .L118+64
	bl	puts
	b	.L105
.L95:
	ldr	r0, .L118+68
	bl	puts
	b	.L105
.L94:
	ldr	r0, .L118+72
	bl	puts
	b	.L105
.L93:
	ldr	r0, .L118+76
	bl	puts
	b	.L105
.L92:
	ldr	r0, .L118+80
	bl	puts
	b	.L105
.L91:
	ldr	r0, .L118+84
	bl	puts
	b	.L105
.L90:
	ldr	r0, .L118+88
	bl	puts
	b	.L105
.L89:
	ldr	r0, .L118+92
	bl	puts
	b	.L105
.L88:
	ldr	r0, .L118+96
	bl	puts
	b	.L105
.L84:
	ldr	r0, .L118+100
	bl	puts
	b	.L105
.L82:
	ldr	r0, .L118+104
	bl	puts
	b	.L105
.L87:
	ldr	r0, .L118+108
	bl	puts
	b	.L60
.L86:
	ldr	r0, .L118+112
	bl	puts
	b	.L60
.L85:
	ldr	r0, .L118+116
	bl	puts
	b	.L60
.L81:
	ldr	r3, [fp, #-16]
	ldrb	r2, [r3, #2]	@ zero_extendqisi2
	ldrb	r3, [r3, #3]	@ zero_extendqisi2
	lsl	r3, r3, #8
	orr	r3, r3, r2
	lsl	r3, r3, #16
	lsr	r3, r3, #16
	lsr	r3, r3, #8
	lsl	r3, r3, #16
	lsr	r3, r3, #16
	mov	r1, r3
	ldr	r0, .L118+120
	bl	printf
	nop
.L105:
	b	.L107
.L75:
	ldr	r3, [fp, #-16]
	ldrb	r2, [r3, #2]	@ zero_extendqisi2
	ldrb	r3, [r3, #3]	@ zero_extendqisi2
	lsl	r3, r3, #8
	orr	r3, r3, r2
	lsl	r3, r3, #16
	lsr	r3, r3, #16
	mov	r1, r3
	ldr	r0, .L118+124
	bl	printf
	b	.L107
.L76:
	ldr	r0, .L118+128
	bl	puts
	b	.L107
.L72:
	ldr	r0, .L118+132
	bl	puts
	b	.L107
.L74:
	ldr	r0, .L118+136
	bl	puts
	b	.L107
.L80:
	ldr	r0, .L118+140
	bl	puts
	b	.L107
.L79:
	ldr	r0, .L118+144
	bl	puts
	b	.L107
.L78:
	ldr	r0, .L118+148
	bl	puts
	b	.L107
.L71:
	ldr	r3, [fp, #-16]
	ldrb	r3, [r3, #1]	@ zero_extendqisi2
	mov	r1, r3
	ldr	r0, .L118+152
	bl	printf
	nop
.L107:
	b	.L60
.L69:
	ldr	r3, [fp, #-16]
	ldrb	r3, [r3, #1]	@ zero_extendqisi2
	sub	r3, r3, #1
	cmp	r3, #10
	ldrls	pc, [pc, r3, asl #2]
	b	.L108
.L110:
	.word	.L115
	.word	.L114
	.word	.L113
	.word	.L108
	.word	.L108
	.word	.L108
	.word	.L108
	.word	.L108
	.word	.L112
	.word	.L111
	.word	.L109
.L115:
	ldr	r0, .L118+156
	bl	puts
	b	.L116
.L114:
	ldr	r0, .L118+160
	bl	puts
	b	.L116
.L113:
	ldr	r0, .L118+164
	bl	puts
	b	.L116
.L112:
	ldr	r0, .L118+168
	bl	puts
	b	.L116
.L111:
	ldr	r0, .L118+172
	bl	puts
	b	.L116
.L109:
	ldr	r0, .L118+176
	bl	puts
	b	.L116
.L108:
	ldr	r3, [fp, #-16]
	ldrb	r3, [r3, #1]	@ zero_extendqisi2
	mov	r1, r3
	ldr	r0, .L118+152
	bl	printf
	nop
.L116:
	b	.L60
.L117:
	ldr	r3, [fp, #-16]
	ldrb	r3, [r3, #1]	@ zero_extendqisi2
	mov	r1, r3
	ldr	r0, .L118+152
	bl	printf
	nop
.L60:
	sub	sp, fp, #8
	@ sp needed
	pop	{r4, fp, pc}
.L119:
	.align	2
.L118:
	.word	.LC20
	.word	.LC21
	.word	.LC22
	.word	.LC23
	.word	.LC24
	.word	.LC25
	.word	.LC26
	.word	.LC27
	.word	.LC28
	.word	.LC29
	.word	.LC30
	.word	.LC31
	.word	.LC32
	.word	.LC33
	.word	.LC34
	.word	.LC35
	.word	.LC36
	.word	.LC37
	.word	.LC38
	.word	.LC39
	.word	.LC40
	.word	.LC41
	.word	.LC42
	.word	.LC43
	.word	.LC44
	.word	.LC45
	.word	.LC46
	.word	.LC47
	.word	.LC48
	.word	.LC49
	.word	.LC50
	.word	.LC51
	.word	.LC52
	.word	.LC53
	.word	.LC54
	.word	.LC55
	.word	.LC56
	.word	.LC57
	.word	.LC58
	.word	.LC59
	.word	.LC60
	.word	.LC61
	.word	.LC62
	.word	.LC63
	.word	.LC64
	.size	log_control_request, .-log_control_request
	.section	.rodata
	.align	2
.LC65:
	.ascii	"event: connect, length: %u\012\000"
	.align	2
.LC66:
	.ascii	"event: disconnect, length: %u\012\000"
	.align	2
.LC67:
	.ascii	"event: suspend, length: %u\012\000"
	.align	2
.LC68:
	.ascii	"event: resume, length: %u\012\000"
	.align	2
.LC69:
	.ascii	"event: control, length: %u\012\000"
	.align	2
.LC70:
	.ascii	"event: unknown, length: %u\012\000"
	.text
	.align	2
	.global	log_event
	.syntax unified
	.arm
	.fpu softvfp
	.type	log_event, %function
log_event:
	@ args = 0, pretend = 0, frame = 8
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #8
	str	r0, [fp, #-8]
	ldr	r3, [fp, #-8]
	ldr	r3, [r3]
	sub	r3, r3, #1
	cmp	r3, #4
	ldrls	pc, [pc, r3, asl #2]
	b	.L121
.L123:
	.word	.L127
	.word	.L126
	.word	.L125
	.word	.L124
	.word	.L122
.L127:
	ldr	r3, [fp, #-8]
	ldr	r3, [r3, #4]
	mov	r1, r3
	ldr	r0, .L129
	bl	printf
	b	.L128
.L126:
	ldr	r3, [fp, #-8]
	ldr	r3, [r3, #4]
	mov	r1, r3
	ldr	r0, .L129+4
	bl	printf
	b	.L128
.L125:
	ldr	r3, [fp, #-8]
	ldr	r3, [r3, #4]
	mov	r1, r3
	ldr	r0, .L129+8
	bl	printf
	b	.L128
.L124:
	ldr	r3, [fp, #-8]
	ldr	r3, [r3, #4]
	mov	r1, r3
	ldr	r0, .L129+12
	bl	printf
	b	.L128
.L122:
	ldr	r3, [fp, #-8]
	ldr	r3, [r3, #4]
	mov	r1, r3
	ldr	r0, .L129+16
	bl	printf
	ldr	r3, [fp, #-8]
	add	r3, r3, #8
	mov	r0, r3
	bl	log_control_request
	b	.L128
.L121:
	ldr	r3, [fp, #-8]
	ldr	r3, [r3, #4]
	mov	r1, r3
	ldr	r0, .L129+20
	bl	printf
	nop
.L128:
	nop
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
.L130:
	.align	2
.L129:
	.word	.LC65
	.word	.LC66
	.word	.LC67
	.word	.LC68
	.word	.LC69
	.word	.LC70
	.size	log_event, .-log_event
	.section	.rodata
	.align	2
.LC71:
	.ascii	"fail: no response\000"
	.align	2
.LC72:
	.ascii	"endpoint: #%d\012\000"
	.align	2
.LC73:
	.word	__stack_chk_guard
	.text
	.align	2
	.global	keyboard_connect
	.syntax unified
	.arm
	.fpu softvfp
	.type	keyboard_connect, %function
keyboard_connect:
	@ args = 0, pretend = 0, frame = 112
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #112
	str	r0, [fp, #-112]
	ldr	r3, .L162
	ldr	r3, [r3]
	str	r3, [fp, #-8]
	mov	r3,#0
	mvn	r3, #0
	str	r3, [fp, #-104]
	mov	r3, #0
	strb	r3, [fp, #-105]
	b	.L132
.L158:
	mov	r3, #0
	str	r3, [fp, #-96]
	mov	r3, #8
	str	r3, [fp, #-92]
	mov	r3, #0
	strh	r3, [fp, #-80]	@ movhi
	mov	r3, #0
	strh	r3, [fp, #-78]	@ movhi
	mov	r3, #0
	str	r3, [fp, #-76]
	sub	r3, fp, #96
	mov	r1, r3
	ldr	r0, [fp, #-112]
	bl	usb_fuzzer_event_fetch
	sub	r3, fp, #96
	mov	r0, r3
	bl	log_event
	ldr	r3, [fp, #-96]
	cmp	r3, #5
	beq	.L133
	b	.L132
.L133:
	ldrb	r3, [fp, #-88]	@ zero_extendqisi2
	and	r3, r3, #96
	cmp	r3, #0
	beq	.L134
	cmp	r3, #32
	beq	.L135
	b	.L161
.L134:
	ldrb	r3, [fp, #-87]	@ zero_extendqisi2
	cmp	r3, #10
	beq	.L137
	cmp	r3, #10
	bgt	.L138
	cmp	r3, #6
	beq	.L139
	cmp	r3, #9
	beq	.L140
	b	.L138
.L139:
	ldrh	r3, [fp, #-86]
	lsr	r3, r3, #8
	lsl	r3, r3, #16
	lsr	r3, r3, #16
	sub	r3, r3, #1
	cmp	r3, #33
	ldrls	pc, [pc, r3, asl #2]
	b	.L141
.L143:
	.word	.L147
	.word	.L146
	.word	.L145
	.word	.L141
	.word	.L141
	.word	.L144
	.word	.L141
	.word	.L141
	.word	.L141
	.word	.L141
	.word	.L141
	.word	.L141
	.word	.L141
	.word	.L141
	.word	.L141
	.word	.L141
	.word	.L141
	.word	.L141
	.word	.L141
	.word	.L141
	.word	.L141
	.word	.L141
	.word	.L141
	.word	.L141
	.word	.L141
	.word	.L141
	.word	.L141
	.word	.L141
	.word	.L141
	.word	.L141
	.word	.L141
	.word	.L141
	.word	.L141
	.word	.L142
.L147:
	ldr	r3, .L162+4
	sub	ip, fp, #72
	mov	lr, r3
	ldmia	lr!, {r0, r1, r2, r3}
	stmia	ip!, {r0, r1, r2, r3}
	ldr	r3, [lr]
	strh	r3, [ip]	@ movhi
	mov	r3, #18
	str	r3, [fp, #-76]
	b	.L148
.L144:
	ldr	r2, .L162+8
	sub	r3, fp, #72
	ldm	r2, {r0, r1, r2}
	stmia	r3!, {r0, r1}
	strh	r2, [r3]	@ movhi
	mov	r3, #10
	str	r3, [fp, #-76]
	b	.L148
.L146:
	sub	r3, fp, #80
	add	r3, r3, #8
	mov	r1, #64
	mov	r0, r3
	bl	build_config
	str	r0, [fp, #-100]
	ldr	r3, [fp, #-100]
	str	r3, [fp, #-76]
	b	.L148
.L145:
	mov	r3, #4
	strb	r3, [fp, #-72]
	mov	r3, #3
	strb	r3, [fp, #-71]
	ldrh	r3, [fp, #-86]
	and	r3, r3, #255
	cmp	r3, #0
	bne	.L149
	mov	r3, #9
	strb	r3, [fp, #-70]
	mov	r3, #4
	strb	r3, [fp, #-69]
	b	.L150
.L149:
	mov	r3, #120
	strb	r3, [fp, #-70]
	mov	r3, #0
	strb	r3, [fp, #-69]
.L150:
	mov	r3, #4
	str	r3, [fp, #-76]
	b	.L148
.L142:
	sub	r3, fp, #80
	add	r3, r3, #8
	mov	r2, #65
	ldr	r1, .L162+12
	mov	r0, r3
	bl	memcpy
	mov	r3, #65
	str	r3, [fp, #-76]
	b	.L148
.L141:
	ldr	r0, .L162+16
	bl	puts
	mov	r0, #1
	bl	exit
.L140:
	ldr	r1, .L162+20
	ldr	r0, [fp, #-112]
	bl	usb_fuzzer_ep_enable
	str	r0, [fp, #-104]
	ldr	r3, .L162+24
	ldrb	r3, [r3, #8]	@ zero_extendqisi2
	mov	r1, r3
	ldr	r0, [fp, #-112]
	bl	usb_fuzzer_vbus_draw
	ldr	r0, [fp, #-112]
	bl	usb_fuzzer_configure
	mov	r3, #0
	str	r3, [fp, #-76]
	b	.L148
.L137:
	ldr	r3, .L162+28
	ldrb	r3, [r3, #2]	@ zero_extendqisi2
	strb	r3, [fp, #-72]
	mov	r3, #1
	str	r3, [fp, #-76]
	b	.L148
.L138:
	ldr	r0, .L162+16
	bl	puts
	mov	r0, #1
	bl	exit
.L135:
	ldrb	r3, [fp, #-87]	@ zero_extendqisi2
	cmp	r3, #11
	beq	.L151
	cmp	r3, #11
	bgt	.L152
	cmp	r3, #9
	beq	.L153
	cmp	r3, #10
	beq	.L154
	b	.L152
.L153:
	mov	r3, #1
	str	r3, [fp, #-76]
	mov	r3, #1
	strb	r3, [fp, #-105]
	b	.L148
.L154:
	mov	r3, #0
	str	r3, [fp, #-76]
	b	.L148
.L151:
	mov	r3, #0
	str	r3, [fp, #-76]
	mov	r3, #1
	strb	r3, [fp, #-105]
	b	.L148
.L152:
	ldr	r0, .L162+16
	bl	puts
	mov	r0, #1
	bl	exit
.L161:
	ldr	r0, .L162+16
	bl	puts
	mov	r0, #1
	bl	exit
.L148:
	ldrh	r3, [fp, #-82]
	mov	r2, r3
	ldr	r3, [fp, #-76]
	cmp	r2, r3
	bcs	.L155
	ldrh	r3, [fp, #-82]
	str	r3, [fp, #-76]
.L155:
	ldrb	r3, [fp, #-88]	@ zero_extendqisi2
	lsl	r3, r3, #24
	asr	r3, r3, #24
	cmp	r3, #0
	bge	.L156
	sub	r3, fp, #80
	mov	r1, r3
	ldr	r0, [fp, #-112]
	bl	usb_fuzzer_ep0_write
	b	.L132
.L156:
	sub	r3, fp, #80
	mov	r1, r3
	ldr	r0, [fp, #-112]
	bl	usb_fuzzer_ep0_read
.L132:
	ldrb	r3, [fp, #-105]
	eor	r3, r3, #1
	and	r3, r3, #255
	cmp	r3, #0
	bne	.L158
	ldr	r1, [fp, #-104]
	ldr	r0, .L162+32
	bl	printf
	ldr	r3, [fp, #-104]
	ldr	r2, .L162
	ldr	r1, [r2]
	ldr	r2, [fp, #-8]
	eors	r1, r2, r1
	mov	r2, #0
	beq	.L160
	bl	__stack_chk_fail
.L160:
	mov	r0, r3
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
.L163:
	.align	2
.L162:
	.word	.LC73
	.word	usb_device
	.word	usb_qualifier
	.word	usb_hid_report
	.word	.LC71
	.word	usb_endpoint
	.word	usb_config
	.word	usb_interface
	.word	.LC72
	.size	keyboard_connect, .-keyboard_connect
	.section	.rodata
	.align	2
.LC74:
	.ascii	"\000\000\033\000\000\000\000\000\000"
	.align	2
.LC75:
	.ascii	"key down: %d\012\000"
	.align	2
.LC76:
	.ascii	"\000\000\000\000\000\000\000\000\000"
	.align	2
.LC77:
	.ascii	"key up: %d\012\000"
	.align	2
.LC78:
	.word	__stack_chk_guard
	.text
	.align	2
	.global	keyboard_loop
	.syntax unified
	.arm
	.fpu softvfp
	.type	keyboard_loop, %function
keyboard_loop:
	@ args = 0, pretend = 0, frame = 32
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #32
	str	r0, [fp, #-32]
	str	r1, [fp, #-36]
	ldr	r3, .L167
	ldr	r3, [r3]
	str	r3, [fp, #-8]
	mov	r3,#0
	ldr	r3, [fp, #-36]
	lsl	r3, r3, #16
	lsr	r3, r3, #16
	strh	r3, [fp, #-24]	@ movhi
	mov	r3, #0
	strh	r3, [fp, #-22]	@ movhi
	mov	r3, #8
	str	r3, [fp, #-20]
.L165:
	sub	r3, fp, #24
	add	r3, r3, #8
	mov	r2, #8
	ldr	r1, .L167+4
	mov	r0, r3
	bl	memcpy
	sub	r3, fp, #24
	mov	r1, r3
	ldr	r0, [fp, #-32]
	bl	usb_fuzzer_ep_write
	str	r0, [fp, #-28]
	ldr	r1, [fp, #-28]
	ldr	r0, .L167+8
	bl	printf
	sub	r3, fp, #24
	add	r3, r3, #8
	mov	r2, #8
	ldr	r1, .L167+12
	mov	r0, r3
	bl	memcpy
	sub	r3, fp, #24
	mov	r1, r3
	ldr	r0, [fp, #-32]
	bl	usb_fuzzer_ep_write
	str	r0, [fp, #-28]
	ldr	r1, [fp, #-28]
	ldr	r0, .L167+16
	bl	printf
	mov	r0, #1
	bl	sleep
	b	.L165
.L168:
	.align	2
.L167:
	.word	.LC78
	.word	.LC74
	.word	.LC75
	.word	.LC76
	.word	.LC77
	.size	keyboard_loop, .-keyboard_loop
	.align	2
	.global	main
	.syntax unified
	.arm
	.fpu softvfp
	.type	main, %function
main:
	@ args = 0, pretend = 0, frame = 16
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #16
	str	r0, [fp, #-16]
	str	r1, [fp, #-20]
	bl	usb_fuzzer_open
	str	r0, [fp, #-12]
	mov	r1, #3
	ldr	r0, [fp, #-12]
	bl	usb_fuzzer_init
	ldr	r0, [fp, #-12]
	bl	usb_fuzzer_run
	ldr	r0, [fp, #-12]
	bl	keyboard_connect
	str	r0, [fp, #-8]
	ldr	r1, [fp, #-8]
	ldr	r0, [fp, #-12]
	bl	keyboard_loop
	ldr	r0, [fp, #-12]
	bl	close
	mov	r3, #0
	mov	r0, r3
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
	.size	main, .-main
	.section	.rodata
	.align	2
	.type	__PRETTY_FUNCTION__.6694, %object
	.size	__PRETTY_FUNCTION__.6694, 13
__PRETTY_FUNCTION__.6694:
	.ascii	"build_config\000"
	.ident	"GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0"
	.section	.note.GNU-stack,"",%progbits
