	.file	"760202.c"
	.intel_syntax noprefix
	.text
	.globl	root
	.bss
	.align 8
	.type	root, @object
	.size	root, 8
root:
	.zero	8
	.globl	tmp
	.align 8
	.type	tmp, @object
	.size	tmp, 8
tmp:
	.zero	8
	.globl	p
	.align 8
	.type	p, @object
	.size	p, 8
p:
	.zero	8
	.section	.rodata
	.align 8
.LC0:
	.string	"abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ"
	.align 8
.LC1:
	.string	"All variations tested - none matched!"
	.text
	.globl	main
	.type	main, @function
main:
.LFB6:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 64
	mov	DWORD PTR -52[rbp], edi
	mov	QWORD PTR -64[rbp], rsi
	mov	rax, QWORD PTR fs:40
	mov	QWORD PTR -8[rbp], rax
	xor	eax, eax
	mov	BYTE PTR -43[rbp], 4
	mov	BYTE PTR -42[rbp], 13
	lea	rax, .LC0[rip]
	mov	QWORD PTR -32[rbp], rax
	mov	BYTE PTR -41[rbp], 52
	cmp	DWORD PTR -52[rbp], 2
	je	.L2
	mov	eax, 0
	call	show_usage
	mov	eax, 1
	jmp	.L14
.L2:
	mov	rax, QWORD PTR -64[rbp]
	mov	rax, QWORD PTR 8[rax]
	mov	QWORD PTR -24[rbp], rax
	mov	rax, QWORD PTR -24[rbp]
	mov	rdi, rax
	call	strlen@PLT
	movsx	rdx, BYTE PTR -42[rbp]
	cmp	rax, rdx
	je	.L4
	mov	eax, 0
	call	show_usage
	mov	eax, 1
	jmp	.L14
.L4:
	mov	rax, QWORD PTR -24[rbp]
	movzx	eax, BYTE PTR [rax]
	mov	BYTE PTR -10[rbp], al
	mov	rax, QWORD PTR -24[rbp]
	movzx	eax, BYTE PTR 1[rax]
	mov	BYTE PTR -9[rbp], al
	movsx	rax, BYTE PTR -43[rbp]
	mov	rsi, rax
	mov	edi, 1
	call	calloc@PLT
	mov	QWORD PTR p[rip], rax
	movsx	eax, BYTE PTR -43[rbp]
	sub	eax, 1
	mov	DWORD PTR -40[rbp], eax
	jmp	.L5
.L6:
	mov	edi, 16
	call	malloc@PLT
	mov	QWORD PTR tmp[rip], rax
	mov	rax, QWORD PTR tmp[rip]
	mov	edx, DWORD PTR -40[rbp]
	mov	DWORD PTR [rax], edx
	mov	rax, QWORD PTR tmp[rip]
	mov	DWORD PTR 4[rax], -1
	mov	rax, QWORD PTR tmp[rip]
	mov	rdx, QWORD PTR root[rip]
	mov	QWORD PTR 8[rax], rdx
	mov	rax, QWORD PTR tmp[rip]
	mov	QWORD PTR root[rip], rax
	sub	DWORD PTR -40[rbp], 1
.L5:
	cmp	DWORD PTR -40[rbp], 0
	jg	.L6
.L13:
	mov	DWORD PTR -36[rbp], 0
	jmp	.L7
.L9:
	mov	eax, DWORD PTR -36[rbp]
	movsx	rdx, eax
	mov	rax, QWORD PTR -32[rbp]
	add	rdx, rax
	mov	rax, QWORD PTR p[rip]
	movzx	edx, BYTE PTR [rdx]
	mov	BYTE PTR [rax], dl
	mov	rax, QWORD PTR p[rip]
	lea	rdx, -10[rbp]
	mov	rsi, rdx
	mov	rdi, rax
	call	crypt@PLT
	mov	rdx, rax
	mov	rax, QWORD PTR -24[rbp]
	mov	rsi, rdx
	mov	rdi, rax
	call	compare
	test	al, al
	je	.L8
	mov	rax, QWORD PTR p[rip]
	mov	rdi, rax
	call	puts@PLT
	mov	eax, 0
	call	unload
	mov	eax, 0
	jmp	.L14
.L8:
	add	DWORD PTR -36[rbp], 1
.L7:
	movsx	eax, BYTE PTR -41[rbp]
	cmp	DWORD PTR -36[rbp], eax
	jl	.L9
	mov	rax, QWORD PTR root[rip]
	mov	QWORD PTR tmp[rip], rax
	mov	rax, QWORD PTR tmp[rip]
	mov	edx, DWORD PTR 4[rax]
	mov	rax, QWORD PTR tmp[rip]
	add	edx, 1
	mov	DWORD PTR 4[rax], edx
	jmp	.L10
.L12:
	mov	rax, QWORD PTR tmp[rip]
	mov	eax, DWORD PTR [rax]
	movsx	edx, BYTE PTR -43[rbp]
	sub	edx, 1
	cmp	eax, edx
	jne	.L11
	lea	rdi, .LC1[rip]
	call	puts@PLT
	mov	eax, 0
	call	unload
	mov	eax, 1
	jmp	.L14
.L11:
	mov	rax, QWORD PTR tmp[rip]
	mov	DWORD PTR 4[rax], 0
	mov	rax, QWORD PTR tmp[rip]
	mov	eax, DWORD PTR 4[rax]
	movsx	rdx, eax
	mov	rax, QWORD PTR -32[rbp]
	lea	rcx, [rdx+rax]
	mov	rdx, QWORD PTR p[rip]
	mov	rax, QWORD PTR tmp[rip]
	mov	eax, DWORD PTR [rax]
	cdqe
	add	rdx, rax
	movzx	eax, BYTE PTR [rcx]
	mov	BYTE PTR [rdx], al
	mov	rax, QWORD PTR tmp[rip]
	mov	rax, QWORD PTR 8[rax]
	mov	QWORD PTR tmp[rip], rax
	mov	rax, QWORD PTR tmp[rip]
	mov	edx, DWORD PTR 4[rax]
	mov	rax, QWORD PTR tmp[rip]
	add	edx, 1
	mov	DWORD PTR 4[rax], edx
	mov	rax, QWORD PTR tmp[rip]
	mov	eax, DWORD PTR 4[rax]
	movsx	rdx, eax
	mov	rax, QWORD PTR -32[rbp]
	lea	rcx, [rdx+rax]
	mov	rdx, QWORD PTR p[rip]
	mov	rax, QWORD PTR tmp[rip]
	mov	eax, DWORD PTR [rax]
	cdqe
	add	rdx, rax
	movzx	eax, BYTE PTR [rcx]
	mov	BYTE PTR [rdx], al
.L10:
	mov	rax, QWORD PTR tmp[rip]
	mov	edx, DWORD PTR 4[rax]
	movsx	eax, BYTE PTR -41[rbp]
	cmp	edx, eax
	jge	.L12
	mov	rax, QWORD PTR tmp[rip]
	mov	eax, DWORD PTR 4[rax]
	movsx	rdx, eax
	mov	rax, QWORD PTR -32[rbp]
	lea	rcx, [rdx+rax]
	mov	rdx, QWORD PTR p[rip]
	mov	rax, QWORD PTR tmp[rip]
	mov	eax, DWORD PTR [rax]
	cdqe
	add	rdx, rax
	movzx	eax, BYTE PTR [rcx]
	mov	BYTE PTR [rdx], al
	jmp	.L13
.L14:
	mov	rsi, QWORD PTR -8[rbp]
	sub	rsi, QWORD PTR fs:40
	je	.L15
	call	__stack_chk_fail@PLT
.L15:
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE6:
	.size	main, .-main
	.globl	unload
	.type	unload, @function
unload:
.LFB7:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	mov	rax, QWORD PTR root[rip]
	mov	rdi, rax
	call	clearList
	mov	rax, QWORD PTR p[rip]
	mov	rdi, rax
	call	free@PLT
	nop
	pop	rbp
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE7:
	.size	unload, .-unload
	.globl	clearList
	.type	clearList, @function
clearList:
.LFB8:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 16
	mov	QWORD PTR -8[rbp], rdi
	cmp	QWORD PTR -8[rbp], 0
	je	.L20
	mov	rax, QWORD PTR -8[rbp]
	mov	rax, QWORD PTR 8[rax]
	mov	rdi, rax
	call	clearList
	mov	rax, QWORD PTR -8[rbp]
	mov	rdi, rax
	call	free@PLT
	jmp	.L17
.L20:
	nop
.L17:
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE8:
	.size	clearList, .-clearList
	.globl	compare
	.type	compare, @function
compare:
.LFB9:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	mov	QWORD PTR -24[rbp], rdi
	mov	QWORD PTR -32[rbp], rsi
	mov	DWORD PTR -4[rbp], 2
	jmp	.L22
.L25:
	mov	eax, DWORD PTR -4[rbp]
	movsx	rdx, eax
	mov	rax, QWORD PTR -24[rbp]
	add	rax, rdx
	movzx	edx, BYTE PTR [rax]
	mov	eax, DWORD PTR -4[rbp]
	movsx	rcx, eax
	mov	rax, QWORD PTR -32[rbp]
	add	rax, rcx
	movzx	eax, BYTE PTR [rax]
	cmp	dl, al
	je	.L23
	mov	eax, 0
	jmp	.L24
.L23:
	add	DWORD PTR -4[rbp], 1
.L22:
	cmp	DWORD PTR -4[rbp], 12
	jle	.L25
	mov	eax, 1
.L24:
	pop	rbp
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE9:
	.size	compare, .-compare
	.section	.rodata
.LC2:
	.string	"Usage: ./crack hash"
	.text
	.globl	show_usage
	.type	show_usage, @function
show_usage:
.LFB10:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	lea	rdi, .LC2[rip]
	call	puts@PLT
	nop
	pop	rbp
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE10:
	.size	show_usage, .-show_usage
	.ident	"GCC: (Ubuntu 10.5.0-1ubuntu1~20.04) 10.5.0"
	.section	.note.GNU-stack,"",@progbits
	.section	.note.gnu.property,"a"
	.align 8
	.long	 1f - 0f
	.long	 4f - 1f
	.long	 5
0:
	.string	 "GNU"
1:
	.align 8
	.long	 0xc0000002
	.long	 3f - 2f
2:
	.long	 0x3
3:
	.align 8
4:

	.arch armv5t
	.eabi_attribute 20, 1
	.eabi_attribute 21, 1
	.eabi_attribute 23, 3
	.eabi_attribute 24, 1
	.eabi_attribute 25, 1
	.eabi_attribute 26, 2
	.eabi_attribute 30, 6
	.eabi_attribute 34, 0
	.eabi_attribute 18, 4
	.file	"760202.c"
	.text
	.global	root
	.bss
	.align	2
	.type	root, %object
	.size	root, 4
root:
	.space	4
	.global	tmp
	.align	2
	.type	tmp, %object
	.size	tmp, 4
tmp:
	.space	4
	.global	p
	.align	2
	.type	p, %object
	.size	p, 4
p:
	.space	4
	.section	.rodata
	.align	2
.LC0:
	.ascii	"abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXY"
	.ascii	"Z\000"
	.align	2
.LC1:
	.ascii	"All variations tested - none matched!\000"
	.align	2
.LC2:
	.word	__stack_chk_guard
	.text
	.align	2
	.global	main
	.syntax unified
	.arm
	.fpu softvfp
	.type	main, %function
main:
	@ args = 0, pretend = 0, frame = 40
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #40
	str	r0, [fp, #-40]
	str	r1, [fp, #-44]
	ldr	r3, .L16
	ldr	r3, [r3]
	str	r3, [fp, #-8]
	mov	r3,#0
	mov	r3, #4
	strb	r3, [fp, #-31]
	mov	r3, #13
	strb	r3, [fp, #-30]
	ldr	r3, .L16+4
	str	r3, [fp, #-20]
	mov	r3, #52
	strb	r3, [fp, #-29]
	ldr	r3, [fp, #-40]
	cmp	r3, #2
	beq	.L2
	bl	show_usage
	mov	r3, #1
	b	.L14
.L2:
	ldr	r3, [fp, #-44]
	ldr	r3, [r3, #4]
	str	r3, [fp, #-16]
	ldr	r0, [fp, #-16]
	bl	strlen
	mov	r2, r0
	ldrb	r3, [fp, #-30]	@ zero_extendqisi2
	cmp	r2, r3
	beq	.L4
	bl	show_usage
	mov	r3, #1
	b	.L14
.L4:
	ldr	r3, [fp, #-16]
	ldrb	r3, [r3]	@ zero_extendqisi2
	strb	r3, [fp, #-12]
	ldr	r3, [fp, #-16]
	ldrb	r3, [r3, #1]	@ zero_extendqisi2
	strb	r3, [fp, #-11]
	ldrb	r3, [fp, #-31]	@ zero_extendqisi2
	mov	r1, r3
	mov	r0, #1
	bl	calloc
	mov	r3, r0
	mov	r2, r3
	ldr	r3, .L16+8
	str	r2, [r3]
	ldrb	r3, [fp, #-31]	@ zero_extendqisi2
	sub	r3, r3, #1
	str	r3, [fp, #-28]
	b	.L5
.L6:
	mov	r0, #12
	bl	malloc
	mov	r3, r0
	mov	r2, r3
	ldr	r3, .L16+12
	str	r2, [r3]
	ldr	r3, .L16+12
	ldr	r3, [r3]
	ldr	r2, [fp, #-28]
	str	r2, [r3]
	ldr	r3, .L16+12
	ldr	r3, [r3]
	mvn	r2, #0
	str	r2, [r3, #4]
	ldr	r3, .L16+12
	ldr	r3, [r3]
	ldr	r2, .L16+16
	ldr	r2, [r2]
	str	r2, [r3, #8]
	ldr	r3, .L16+12
	ldr	r3, [r3]
	ldr	r2, .L16+16
	str	r3, [r2]
	ldr	r3, [fp, #-28]
	sub	r3, r3, #1
	str	r3, [fp, #-28]
.L5:
	ldr	r3, [fp, #-28]
	cmp	r3, #0
	bgt	.L6
.L13:
	mov	r3, #0
	str	r3, [fp, #-24]
	b	.L7
.L9:
	ldr	r3, [fp, #-24]
	ldr	r2, [fp, #-20]
	add	r2, r2, r3
	ldr	r3, .L16+8
	ldr	r3, [r3]
	ldrb	r2, [r2]	@ zero_extendqisi2
	strb	r2, [r3]
	ldr	r3, .L16+8
	ldr	r3, [r3]
	sub	r2, fp, #12
	mov	r1, r2
	mov	r0, r3
	bl	crypt
	mov	r3, r0
	mov	r1, r3
	ldr	r0, [fp, #-16]
	bl	compare
	mov	r3, r0
	cmp	r3, #0
	beq	.L8
	ldr	r3, .L16+8
	ldr	r3, [r3]
	mov	r0, r3
	bl	puts
	bl	unload
	mov	r3, #0
	b	.L14
.L8:
	ldr	r3, [fp, #-24]
	add	r3, r3, #1
	str	r3, [fp, #-24]
.L7:
	ldrb	r3, [fp, #-29]	@ zero_extendqisi2
	ldr	r2, [fp, #-24]
	cmp	r2, r3
	blt	.L9
	ldr	r3, .L16+16
	ldr	r3, [r3]
	ldr	r2, .L16+12
	str	r3, [r2]
	ldr	r3, .L16+12
	ldr	r3, [r3]
	ldr	r2, [r3, #4]
	ldr	r3, .L16+12
	ldr	r3, [r3]
	add	r2, r2, #1
	str	r2, [r3, #4]
	b	.L10
.L12:
	ldr	r3, .L16+12
	ldr	r3, [r3]
	ldr	r2, [r3]
	ldrb	r3, [fp, #-31]	@ zero_extendqisi2
	sub	r3, r3, #1
	cmp	r2, r3
	bne	.L11
	ldr	r0, .L16+20
	bl	puts
	bl	unload
	mov	r3, #1
	b	.L14
.L11:
	ldr	r3, .L16+12
	ldr	r3, [r3]
	mov	r2, #0
	str	r2, [r3, #4]
	ldr	r3, .L16+12
	ldr	r3, [r3]
	ldr	r3, [r3, #4]
	mov	r2, r3
	ldr	r3, [fp, #-20]
	add	r2, r3, r2
	ldr	r3, .L16+8
	ldr	r3, [r3]
	ldr	r1, .L16+12
	ldr	r1, [r1]
	ldr	r1, [r1]
	add	r3, r3, r1
	ldrb	r2, [r2]	@ zero_extendqisi2
	strb	r2, [r3]
	ldr	r3, .L16+12
	ldr	r3, [r3]
	ldr	r3, [r3, #8]
	ldr	r2, .L16+12
	str	r3, [r2]
	ldr	r3, .L16+12
	ldr	r3, [r3]
	ldr	r2, [r3, #4]
	ldr	r3, .L16+12
	ldr	r3, [r3]
	add	r2, r2, #1
	str	r2, [r3, #4]
	ldr	r3, .L16+12
	ldr	r3, [r3]
	ldr	r3, [r3, #4]
	mov	r2, r3
	ldr	r3, [fp, #-20]
	add	r2, r3, r2
	ldr	r3, .L16+8
	ldr	r3, [r3]
	ldr	r1, .L16+12
	ldr	r1, [r1]
	ldr	r1, [r1]
	add	r3, r3, r1
	ldrb	r2, [r2]	@ zero_extendqisi2
	strb	r2, [r3]
.L10:
	ldr	r3, .L16+12
	ldr	r3, [r3]
	ldr	r2, [r3, #4]
	ldrb	r3, [fp, #-29]	@ zero_extendqisi2
	cmp	r2, r3
	bge	.L12
	ldr	r3, .L16+12
	ldr	r3, [r3]
	ldr	r3, [r3, #4]
	mov	r2, r3
	ldr	r3, [fp, #-20]
	add	r2, r3, r2
	ldr	r3, .L16+8
	ldr	r3, [r3]
	ldr	r1, .L16+12
	ldr	r1, [r1]
	ldr	r1, [r1]
	add	r3, r3, r1
	ldrb	r2, [r2]	@ zero_extendqisi2
	strb	r2, [r3]
	b	.L13
.L14:
	ldr	r2, .L16
	ldr	r1, [r2]
	ldr	r2, [fp, #-8]
	eors	r1, r2, r1
	mov	r2, #0
	beq	.L15
	bl	__stack_chk_fail
.L15:
	mov	r0, r3
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
.L17:
	.align	2
.L16:
	.word	.LC2
	.word	.LC0
	.word	p
	.word	tmp
	.word	root
	.word	.LC1
	.size	main, .-main
	.align	2
	.global	unload
	.syntax unified
	.arm
	.fpu softvfp
	.type	unload, %function
unload:
	@ args = 0, pretend = 0, frame = 0
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	ldr	r3, .L19
	ldr	r3, [r3]
	mov	r0, r3
	bl	clearList
	ldr	r3, .L19+4
	ldr	r3, [r3]
	mov	r0, r3
	bl	free
	nop
	pop	{fp, pc}
.L20:
	.align	2
.L19:
	.word	root
	.word	p
	.size	unload, .-unload
	.align	2
	.global	clearList
	.syntax unified
	.arm
	.fpu softvfp
	.type	clearList, %function
clearList:
	@ args = 0, pretend = 0, frame = 8
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #8
	str	r0, [fp, #-8]
	ldr	r3, [fp, #-8]
	cmp	r3, #0
	beq	.L24
	ldr	r3, [fp, #-8]
	ldr	r3, [r3, #8]
	mov	r0, r3
	bl	clearList
	ldr	r0, [fp, #-8]
	bl	free
	b	.L21
.L24:
	nop
.L21:
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
	.size	clearList, .-clearList
	.align	2
	.global	compare
	.syntax unified
	.arm
	.fpu softvfp
	.type	compare, %function
compare:
	@ args = 0, pretend = 0, frame = 16
	@ frame_needed = 1, uses_anonymous_args = 0
	@ link register save eliminated.
	str	fp, [sp, #-4]!
	add	fp, sp, #0
	sub	sp, sp, #20
	str	r0, [fp, #-16]
	str	r1, [fp, #-20]
	mov	r3, #2
	str	r3, [fp, #-8]
	b	.L26
.L29:
	ldr	r3, [fp, #-8]
	ldr	r2, [fp, #-16]
	add	r3, r2, r3
	ldrb	r2, [r3]	@ zero_extendqisi2
	ldr	r3, [fp, #-8]
	ldr	r1, [fp, #-20]
	add	r3, r1, r3
	ldrb	r3, [r3]	@ zero_extendqisi2
	cmp	r2, r3
	beq	.L27
	mov	r3, #0
	b	.L28
.L27:
	ldr	r3, [fp, #-8]
	add	r3, r3, #1
	str	r3, [fp, #-8]
.L26:
	ldr	r3, [fp, #-8]
	cmp	r3, #12
	ble	.L29
	mov	r3, #1
.L28:
	mov	r0, r3
	add	sp, fp, #0
	@ sp needed
	ldr	fp, [sp], #4
	bx	lr
	.size	compare, .-compare
	.section	.rodata
	.align	2
.LC3:
	.ascii	"Usage: ./crack hash\000"
	.text
	.align	2
	.global	show_usage
	.syntax unified
	.arm
	.fpu softvfp
	.type	show_usage, %function
show_usage:
	@ args = 0, pretend = 0, frame = 0
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	ldr	r0, .L31
	bl	puts
	nop
	pop	{fp, pc}
.L32:
	.align	2
.L31:
	.word	.LC3
	.size	show_usage, .-show_usage
	.ident	"GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0"
	.section	.note.GNU-stack,"",%progbits
