	.file	"887566.c"
	.intel_syntax noprefix
	.text
	.section	.rodata
.LC0:
	.string	"su -c \"strace -p %d -o %s\" &"
	.text
	.globl	strace
	.type	strace, @function
strace:
.LFB0:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	add	rsp, -128
	mov	DWORD PTR -116[rbp], edi
	mov	QWORD PTR -128[rbp], rsi
	mov	rax, QWORD PTR fs:40
	mov	QWORD PTR -8[rbp], rax
	xor	eax, eax
	mov	rcx, QWORD PTR -128[rbp]
	mov	edx, DWORD PTR -116[rbp]
	lea	rax, -112[rbp]
	mov	r8, rcx
	mov	ecx, edx
	lea	rdx, .LC0[rip]
	mov	esi, 100
	mov	rdi, rax
	mov	eax, 0
	call	snprintf@PLT
	call	fork@PLT
	test	eax, eax
	jne	.L4
	lea	rax, -112[rbp]
	mov	rdi, rax
	mov	eax, 0
	call	system@PLT
.L4:
	nop
	mov	rax, QWORD PTR -8[rbp]
	sub	rax, QWORD PTR fs:40
	je	.L3
	call	__stack_chk_fail@PLT
.L3:
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE0:
	.size	strace, .-strace
	.section	.rodata
.LC1:
	.string	"/proc/%d/status"
.LC2:
	.string	"opening proc %s\n"
.LC3:
	.string	"r"
.LC4:
	.string	"not found file."
.LC5:
	.string	"Name:"
.LC6:
	.string	"name is %s\n"
	.text
	.globl	getProcName
	.type	getProcName, @function
getProcName:
.LFB1:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 192
	mov	DWORD PTR -180[rbp], edi
	mov	rax, QWORD PTR fs:40
	mov	QWORD PTR -8[rbp], rax
	xor	eax, eax
	mov	edx, DWORD PTR -180[rbp]
	lea	rax, -160[rbp]
	mov	ecx, edx
	lea	rdx, .LC1[rip]
	mov	esi, 40
	mov	rdi, rax
	mov	eax, 0
	call	snprintf@PLT
	lea	rax, -160[rbp]
	mov	rsi, rax
	lea	rdi, .LC2[rip]
	mov	eax, 0
	call	printf@PLT
	lea	rax, -160[rbp]
	lea	rsi, .LC3[rip]
	mov	rdi, rax
	call	fopen@PLT
	mov	QWORD PTR -168[rbp], rax
	cmp	QWORD PTR -168[rbp], 0
	jne	.L8
	lea	rdi, .LC4[rip]
	call	puts@PLT
	mov	eax, 0
	jmp	.L14
.L13:
	lea	rax, -112[rbp]
	mov	edx, 5
	lea	rsi, .LC5[rip]
	mov	rdi, rax
	call	strncmp@PLT
	test	eax, eax
	je	.L9
	jmp	.L8
.L9:
	lea	rax, -112[rbp]
	add	rax, 6
	mov	QWORD PTR -176[rbp], rax
	jmp	.L10
.L11:
	add	QWORD PTR -176[rbp], 1
.L10:
	mov	rax, QWORD PTR -176[rbp]
	movzx	eax, BYTE PTR [rax]
	movsx	eax, al
	mov	edi, eax
	call	isspace@PLT
	test	eax, eax
	jne	.L11
	jmp	.L12
.L8:
	mov	rdx, QWORD PTR -168[rbp]
	lea	rax, -112[rbp]
	mov	esi, 100
	mov	rdi, rax
	call	fgets@PLT
	test	rax, rax
	jne	.L13
.L12:
	mov	rax, QWORD PTR -168[rbp]
	mov	rdi, rax
	call	fclose@PLT
	mov	rax, QWORD PTR -176[rbp]
	mov	rsi, rax
	lea	rdi, .LC6[rip]
	mov	eax, 0
	call	printf@PLT
	mov	rax, QWORD PTR -176[rbp]
	mov	rdi, rax
	call	strdup
.L14:
	mov	rcx, QWORD PTR -8[rbp]
	sub	rcx, QWORD PTR fs:40
	je	.L15
	call	__stack_chk_fail@PLT
.L15:
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE1:
	.size	getProcName, .-getProcName
	.section	.rodata
.LC7:
	.string	"/data/local/tmp/strace.txt"
.LC8:
	.string	"rm -f %s"
.LC9:
	.string	"zygote pid is %d\n"
	.text
	.globl	watchAndStraceZygote
	.type	watchAndStraceZygote, @function
watchAndStraceZygote:
.LFB2:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 16
	lea	rsi, .LC7[rip]
	lea	rdi, .LC8[rip]
	mov	eax, 0
	call	system@PLT
	mov	eax, 0
	call	findZygote
	mov	DWORD PTR -12[rbp], eax
	lea	rax, .LC7[rip]
	mov	QWORD PTR -8[rbp], rax
	mov	rdx, QWORD PTR -8[rbp]
	mov	eax, DWORD PTR -12[rbp]
	mov	rsi, rdx
	mov	edi, eax
	call	strace
	mov	eax, DWORD PTR -12[rbp]
	mov	esi, eax
	lea	rdi, .LC9[rip]
	mov	eax, 0
	call	printf@PLT
	nop
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE2:
	.size	watchAndStraceZygote, .-watchAndStraceZygote
	.section	.rodata
.LC10:
	.string	"fork()"
.LC11:
	.string	"found process. PID %s\n"
.LC12:
	.string	"/data/local/tmp/strace_%s"
	.text
	.globl	monitorProcessForkIfExist
	.type	monitorProcessForkIfExist, @function
monitorProcessForkIfExist:
.LFB3:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 336
	mov	rax, QWORD PTR fs:40
	mov	QWORD PTR -8[rbp], rax
	xor	eax, eax
	movabs	rax, 8028844331305624623
	movabs	rdx, 3418352462953472355
	mov	QWORD PTR -304[rbp], rax
	mov	QWORD PTR -296[rbp], rdx
	movabs	rax, 8371740234839389299
	mov	QWORD PTR -288[rbp], rax
	mov	WORD PTR -280[rbp], 29816
	mov	BYTE PTR -278[rbp], 0
	lea	rdx, -304[rbp]
	lea	rax, -272[rbp]
	mov	esi, 40
	mov	rdi, rax
	mov	eax, 0
	call	snprintf@PLT
	lea	rax, -272[rbp]
	lea	rsi, .LC3[rip]
	mov	rdi, rax
	call	fopen@PLT
	mov	QWORD PTR -320[rbp], rax
	cmp	QWORD PTR -320[rbp], 0
	je	.L26
	jmp	.L20
.L24:
	lea	rax, -224[rbp]
	mov	edx, 6
	lea	rsi, .LC10[rip]
	mov	rdi, rax
	call	strncmp@PLT
	test	eax, eax
	je	.L21
	jmp	.L20
.L21:
	lea	rax, -224[rbp]
	add	rax, 6
	mov	QWORD PTR -328[rbp], rax
	jmp	.L22
.L23:
	add	QWORD PTR -328[rbp], 1
.L22:
	mov	rax, QWORD PTR -328[rbp]
	movzx	eax, BYTE PTR [rax]
	movsx	eax, al
	mov	edi, eax
	call	isspace@PLT
	test	eax, eax
	jne	.L23
	add	QWORD PTR -328[rbp], 1
	add	QWORD PTR -328[rbp], 1
	mov	rax, QWORD PTR -328[rbp]
	mov	rsi, rax
	lea	rdi, .LC11[rip]
	mov	eax, 0
	call	printf@PLT
	mov	rax, QWORD PTR -328[rbp]
	mov	rdi, rax
	mov	eax, 0
	call	checkAgainstWhitelist
	mov	DWORD PTR -332[rbp], eax
	cmp	DWORD PTR -332[rbp], 0
	jne	.L20
	mov	rax, QWORD PTR -328[rbp]
	mov	rdi, rax
	mov	eax, 0
	call	atoi@PLT
	mov	edi, eax
	call	getProcName
	mov	QWORD PTR -312[rbp], rax
	mov	rdx, QWORD PTR -312[rbp]
	lea	rax, -112[rbp]
	mov	rcx, rdx
	lea	rdx, .LC12[rip]
	mov	esi, 100
	mov	rdi, rax
	mov	eax, 0
	call	snprintf@PLT
	mov	rax, QWORD PTR -328[rbp]
	mov	rdi, rax
	mov	eax, 0
	call	atoi@PLT
	mov	edx, eax
	lea	rax, -112[rbp]
	mov	rsi, rax
	mov	edi, edx
	call	strace
.L20:
	mov	rdx, QWORD PTR -320[rbp]
	lea	rax, -224[rbp]
	mov	esi, 100
	mov	rdi, rax
	call	fgets@PLT
	test	rax, rax
	jne	.L24
	mov	rax, QWORD PTR -320[rbp]
	mov	rdi, rax
	call	fclose@PLT
	jmp	.L17
.L26:
	nop
.L17:
	mov	rax, QWORD PTR -8[rbp]
	sub	rax, QWORD PTR fs:40
	je	.L25
	call	__stack_chk_fail@PLT
.L25:
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE3:
	.size	monitorProcessForkIfExist, .-monitorProcessForkIfExist
	.section	.rodata
	.align 8
.LC13:
	.string	"checking against white list for %s...\n"
.LC14:
	.string	"/data/local/tmp/whitelist.txt"
.LC15:
	.string	"whitelist file not found"
	.text
	.globl	checkAgainstWhitelist
	.type	checkAgainstWhitelist, @function
checkAgainstWhitelist:
.LFB4:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 192
	mov	QWORD PTR -184[rbp], rdi
	mov	rax, QWORD PTR fs:40
	mov	QWORD PTR -8[rbp], rax
	xor	eax, eax
	mov	rax, QWORD PTR -184[rbp]
	mov	rsi, rax
	lea	rdi, .LC13[rip]
	mov	eax, 0
	call	printf@PLT
	mov	rax, QWORD PTR -184[rbp]
	mov	rdi, rax
	mov	eax, 0
	call	atoi@PLT
	mov	edi, eax
	call	getProcName
	mov	QWORD PTR -176[rbp], rax
	cmp	QWORD PTR -176[rbp], 0
	jne	.L28
	mov	eax, 0
	jmp	.L34
.L28:
	lea	rax, -160[rbp]
	lea	rdx, .LC14[rip]
	mov	esi, 40
	mov	rdi, rax
	mov	eax, 0
	call	snprintf@PLT
	lea	rax, -160[rbp]
	lea	rsi, .LC3[rip]
	mov	rdi, rax
	call	fopen@PLT
	mov	QWORD PTR -168[rbp], rax
	cmp	QWORD PTR -168[rbp], 0
	jne	.L31
	lea	rdi, .LC15[rip]
	call	puts@PLT
	mov	eax, 0
	jmp	.L34
.L33:
	mov	rax, QWORD PTR -176[rbp]
	mov	rdi, rax
	call	strlen@PLT
	mov	rdx, rax
	mov	rcx, QWORD PTR -176[rbp]
	lea	rax, -112[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	strncmp@PLT
	test	eax, eax
	je	.L32
	jmp	.L31
.L32:
	mov	eax, 1
	jmp	.L34
.L31:
	mov	rdx, QWORD PTR -168[rbp]
	lea	rax, -112[rbp]
	mov	esi, 100
	mov	rdi, rax
	call	fgets@PLT
	test	rax, rax
	jne	.L33
	mov	eax, 0
.L34:
	mov	rcx, QWORD PTR -8[rbp]
	sub	rcx, QWORD PTR fs:40
	je	.L35
	call	__stack_chk_fail@PLT
.L35:
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE4:
	.size	checkAgainstWhitelist, .-checkAgainstWhitelist
	.globl	strdup
	.type	strdup, @function
strdup:
.LFB5:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 32
	mov	QWORD PTR -24[rbp], rdi
	cmp	QWORD PTR -24[rbp], 0
	jne	.L37
	mov	eax, 0
	jmp	.L38
.L37:
	mov	rax, QWORD PTR -24[rbp]
	mov	rdi, rax
	call	strlen@PLT
	add	rax, 1
	mov	rdi, rax
	call	malloc@PLT
	mov	QWORD PTR -8[rbp], rax
	cmp	QWORD PTR -8[rbp], 0
	jne	.L39
	mov	eax, 0
	jmp	.L38
.L39:
	mov	rax, QWORD PTR -8[rbp]
	mov	QWORD PTR -16[rbp], rax
	jmp	.L40
.L41:
	mov	rdx, QWORD PTR -24[rbp]
	lea	rax, 1[rdx]
	mov	QWORD PTR -24[rbp], rax
	mov	rax, QWORD PTR -16[rbp]
	lea	rcx, 1[rax]
	mov	QWORD PTR -16[rbp], rcx
	movzx	edx, BYTE PTR [rdx]
	mov	BYTE PTR [rax], dl
.L40:
	mov	rax, QWORD PTR -24[rbp]
	movzx	eax, BYTE PTR [rax]
	test	al, al
	jne	.L41
	mov	rax, QWORD PTR -8[rbp]
.L38:
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE5:
	.size	strdup, .-strdup
	.section	.rodata
.LC16:
	.string	"output is %s\n"
.LC17:
	.string	"found zygote"
	.text
	.globl	findZygote
	.type	findZygote, @function
findZygote:
.LFB6:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 32
	mov	rax, QWORD PTR fs:40
	mov	QWORD PTR -8[rbp], rax
	xor	eax, eax
	mov	DWORD PTR -28[rbp], 1
	mov	DWORD PTR -28[rbp], 1
	jmp	.L43
.L46:
	mov	eax, DWORD PTR -28[rbp]
	mov	edi, eax
	call	getProcName
	mov	QWORD PTR -24[rbp], rax
	mov	rax, QWORD PTR -24[rbp]
	mov	rsi, rax
	lea	rdi, .LC16[rip]
	mov	eax, 0
	call	printf@PLT
	mov	DWORD PTR -15[rbp], 1869052282
	mov	WORD PTR -11[rbp], 25972
	mov	BYTE PTR -9[rbp], 0
	cmp	QWORD PTR -24[rbp], 0
	je	.L44
	lea	rax, -15[rbp]
	mov	rdi, rax
	call	strlen@PLT
	mov	rdx, rax
	lea	rcx, -15[rbp]
	mov	rax, QWORD PTR -24[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	strncmp@PLT
	test	eax, eax
	jne	.L44
	lea	rdi, .LC17[rip]
	call	puts@PLT
	mov	eax, DWORD PTR -28[rbp]
	jmp	.L42
.L44:
	add	DWORD PTR -28[rbp], 1
.L43:
	cmp	DWORD PTR -28[rbp], 999
	jle	.L46
.L42:
	mov	rcx, QWORD PTR -8[rbp]
	sub	rcx, QWORD PTR fs:40
	je	.L47
	call	__stack_chk_fail@PLT
.L47:
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE6:
	.size	findZygote, .-findZygote
	.section	.rodata
.LC18:
	.string	"watching..."
	.text
	.globl	main
	.type	main, @function
main:
.LFB7:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 16
	mov	DWORD PTR -4[rbp], edi
	mov	QWORD PTR -16[rbp], rsi
	mov	eax, 0
	call	watchAndStraceZygote
.L49:
	lea	rdi, .LC18[rip]
	call	puts@PLT
	mov	edi, 3
	call	sleep@PLT
	mov	eax, 0
	call	monitorProcessForkIfExist
	jmp	.L49
	.cfi_endproc
.LFE7:
	.size	main, .-main
	.ident	"GCC: (Ubuntu 10.5.0-1ubuntu1~20.04) 10.5.0"
	.section	.note.GNU-stack,"",@progbits
	.section	.note.gnu.property,"a"
	.align 8
	.long	 1f - 0f
	.long	 4f - 1f
	.long	 5
0:
	.string	 "GNU"
1:
	.align 8
	.long	 0xc0000002
	.long	 3f - 2f
2:
	.long	 0x3
3:
	.align 8
4:

	.arch armv5t
	.eabi_attribute 20, 1
	.eabi_attribute 21, 1
	.eabi_attribute 23, 3
	.eabi_attribute 24, 1
	.eabi_attribute 25, 1
	.eabi_attribute 26, 2
	.eabi_attribute 30, 6
	.eabi_attribute 34, 0
	.eabi_attribute 18, 4
	.file	"887566.c"
	.text
	.section	.rodata
	.align	2
.LC0:
	.ascii	"su -c \"strace -p %d -o %s\" &\000"
	.align	2
.LC1:
	.word	__stack_chk_guard
	.text
	.align	2
	.global	strace
	.syntax unified
	.arm
	.fpu softvfp
	.type	strace, %function
strace:
	@ args = 0, pretend = 0, frame = 112
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #120
	str	r0, [fp, #-112]
	str	r1, [fp, #-116]
	ldr	r3, .L5
	ldr	r3, [r3]
	str	r3, [fp, #-8]
	mov	r3,#0
	sub	r0, fp, #108
	ldr	r3, [fp, #-116]
	str	r3, [sp]
	ldr	r3, [fp, #-112]
	ldr	r2, .L5+4
	mov	r1, #100
	bl	snprintf
	bl	fork
	mov	r3, r0
	cmp	r3, #0
	bne	.L4
	sub	r3, fp, #108
	mov	r0, r3
	bl	system
.L4:
	nop
	ldr	r3, .L5
	ldr	r2, [r3]
	ldr	r3, [fp, #-8]
	eors	r2, r3, r2
	mov	r3, #0
	beq	.L3
	bl	__stack_chk_fail
.L3:
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
.L6:
	.align	2
.L5:
	.word	.LC1
	.word	.LC0
	.size	strace, .-strace
	.section	.rodata
	.align	2
.LC2:
	.ascii	"/proc/%d/status\000"
	.align	2
.LC3:
	.ascii	"opening proc %s\012\000"
	.align	2
.LC4:
	.ascii	"r\000"
	.align	2
.LC5:
	.ascii	"not found file.\000"
	.align	2
.LC6:
	.ascii	"Name:\000"
	.align	2
.LC7:
	.ascii	"name is %s\012\000"
	.align	2
.LC8:
	.word	__stack_chk_guard
	.text
	.align	2
	.global	getProcName
	.syntax unified
	.arm
	.fpu softvfp
	.type	getProcName, %function
getProcName:
	@ args = 0, pretend = 0, frame = 160
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #160
	str	r0, [fp, #-160]
	ldr	r3, .L18
	ldr	r3, [r3]
	str	r3, [fp, #-8]
	mov	r3,#0
	sub	r0, fp, #148
	ldr	r3, [fp, #-160]
	ldr	r2, .L18+4
	mov	r1, #40
	bl	snprintf
	sub	r3, fp, #148
	mov	r1, r3
	ldr	r0, .L18+8
	bl	printf
	sub	r3, fp, #148
	ldr	r1, .L18+12
	mov	r0, r3
	bl	fopen
	str	r0, [fp, #-152]
	ldr	r3, [fp, #-152]
	cmp	r3, #0
	bne	.L10
	ldr	r0, .L18+16
	bl	puts
	mov	r3, #0
	b	.L16
.L15:
	sub	r3, fp, #108
	mov	r2, #5
	ldr	r1, .L18+20
	mov	r0, r3
	bl	strncmp
	mov	r3, r0
	cmp	r3, #0
	beq	.L11
	b	.L10
.L11:
	sub	r3, fp, #108
	add	r3, r3, #6
	str	r3, [fp, #-156]
	b	.L12
.L13:
	ldr	r3, [fp, #-156]
	add	r3, r3, #1
	str	r3, [fp, #-156]
.L12:
	ldr	r3, [fp, #-156]
	ldrb	r3, [r3]	@ zero_extendqisi2
	mov	r0, r3
	bl	isspace
	mov	r3, r0
	cmp	r3, #0
	bne	.L13
	b	.L14
.L10:
	sub	r3, fp, #108
	ldr	r2, [fp, #-152]
	mov	r1, #100
	mov	r0, r3
	bl	fgets
	mov	r3, r0
	cmp	r3, #0
	bne	.L15
.L14:
	ldr	r0, [fp, #-152]
	bl	fclose
	ldr	r1, [fp, #-156]
	ldr	r0, .L18+24
	bl	printf
	ldr	r0, [fp, #-156]
	bl	strdup
	mov	r3, r0
.L16:
	ldr	r2, .L18
	ldr	r1, [r2]
	ldr	r2, [fp, #-8]
	eors	r1, r2, r1
	mov	r2, #0
	beq	.L17
	bl	__stack_chk_fail
.L17:
	mov	r0, r3
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
.L19:
	.align	2
.L18:
	.word	.LC8
	.word	.LC2
	.word	.LC3
	.word	.LC4
	.word	.LC5
	.word	.LC6
	.word	.LC7
	.size	getProcName, .-getProcName
	.section	.rodata
	.align	2
.LC9:
	.ascii	"/data/local/tmp/strace.txt\000"
	.align	2
.LC10:
	.ascii	"rm -f %s\000"
	.align	2
.LC11:
	.ascii	"zygote pid is %d\012\000"
	.text
	.align	2
	.global	watchAndStraceZygote
	.syntax unified
	.arm
	.fpu softvfp
	.type	watchAndStraceZygote, %function
watchAndStraceZygote:
	@ args = 0, pretend = 0, frame = 8
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #8
	ldr	r1, .L21
	ldr	r0, .L21+4
	bl	system
	bl	findZygote
	str	r0, [fp, #-12]
	ldr	r3, .L21
	str	r3, [fp, #-8]
	ldr	r1, [fp, #-8]
	ldr	r0, [fp, #-12]
	bl	strace
	ldr	r1, [fp, #-12]
	ldr	r0, .L21+8
	bl	printf
	nop
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
.L22:
	.align	2
.L21:
	.word	.LC9
	.word	.LC10
	.word	.LC11
	.size	watchAndStraceZygote, .-watchAndStraceZygote
	.section	.rodata
	.align	2
.LC12:
	.ascii	"fork()\000"
	.align	2
.LC13:
	.ascii	"found process. PID %s\012\000"
	.align	2
.LC14:
	.ascii	"/data/local/tmp/strace_%s\000"
	.align	2
.LC15:
	.word	__stack_chk_guard
	.text
	.align	2
	.global	monitorProcessForkIfExist
	.syntax unified
	.arm
	.fpu softvfp
	.type	monitorProcessForkIfExist, %function
monitorProcessForkIfExist:
	@ args = 0, pretend = 0, frame = 288
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #288
	ldr	r3, .L33
	ldr	r3, [r3]
	str	r3, [fp, #-8]
	mov	r3,#0
	ldr	r3, .L33+4
	sub	ip, fp, #276
	mov	lr, r3
	ldmia	lr!, {r0, r1, r2, r3}
	stmia	ip!, {r0, r1, r2, r3}
	ldm	lr, {r0, r1, r2}
	stmia	ip!, {r0, r1}
	strh	r2, [ip]	@ movhi
	add	ip, ip, #2
	lsr	r3, r2, #16
	strb	r3, [ip]
	sub	r2, fp, #276
	sub	r3, fp, #248
	mov	r1, #40
	mov	r0, r3
	bl	snprintf
	sub	r3, fp, #248
	ldr	r1, .L33+8
	mov	r0, r3
	bl	fopen
	str	r0, [fp, #-288]
	ldr	r3, [fp, #-288]
	cmp	r3, #0
	beq	.L32
	b	.L26
.L30:
	sub	r3, fp, #208
	mov	r2, #6
	ldr	r1, .L33+12
	mov	r0, r3
	bl	strncmp
	mov	r3, r0
	cmp	r3, #0
	beq	.L27
	b	.L26
.L27:
	sub	r3, fp, #208
	add	r3, r3, #6
	str	r3, [fp, #-292]
	b	.L28
.L29:
	ldr	r3, [fp, #-292]
	add	r3, r3, #1
	str	r3, [fp, #-292]
.L28:
	ldr	r3, [fp, #-292]
	ldrb	r3, [r3]	@ zero_extendqisi2
	mov	r0, r3
	bl	isspace
	mov	r3, r0
	cmp	r3, #0
	bne	.L29
	ldr	r3, [fp, #-292]
	add	r3, r3, #1
	str	r3, [fp, #-292]
	ldr	r3, [fp, #-292]
	add	r3, r3, #1
	str	r3, [fp, #-292]
	ldr	r1, [fp, #-292]
	ldr	r0, .L33+16
	bl	printf
	ldr	r0, [fp, #-292]
	bl	checkAgainstWhitelist
	str	r0, [fp, #-284]
	ldr	r3, [fp, #-284]
	cmp	r3, #0
	bne	.L26
	ldr	r0, [fp, #-292]
	bl	atoi
	mov	r3, r0
	mov	r0, r3
	bl	getProcName
	str	r0, [fp, #-280]
	sub	r0, fp, #108
	ldr	r3, [fp, #-280]
	ldr	r2, .L33+20
	mov	r1, #100
	bl	snprintf
	ldr	r0, [fp, #-292]
	bl	atoi
	mov	r2, r0
	sub	r3, fp, #108
	mov	r1, r3
	mov	r0, r2
	bl	strace
.L26:
	sub	r3, fp, #208
	ldr	r2, [fp, #-288]
	mov	r1, #100
	mov	r0, r3
	bl	fgets
	mov	r3, r0
	cmp	r3, #0
	bne	.L30
	ldr	r0, [fp, #-288]
	bl	fclose
	b	.L23
.L32:
	nop
.L23:
	ldr	r3, .L33
	ldr	r2, [r3]
	ldr	r3, [fp, #-8]
	eors	r2, r3, r2
	mov	r3, #0
	beq	.L31
	bl	__stack_chk_fail
.L31:
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
.L34:
	.align	2
.L33:
	.word	.LC15
	.word	.LC9
	.word	.LC4
	.word	.LC12
	.word	.LC13
	.word	.LC14
	.size	monitorProcessForkIfExist, .-monitorProcessForkIfExist
	.section	.rodata
	.align	2
.LC16:
	.ascii	"checking against white list for %s...\012\000"
	.align	2
.LC17:
	.ascii	"/data/local/tmp/whitelist.txt\000"
	.align	2
.LC18:
	.ascii	"whitelist file not found\000"
	.align	2
.LC19:
	.word	__stack_chk_guard
	.text
	.align	2
	.global	checkAgainstWhitelist
	.syntax unified
	.arm
	.fpu softvfp
	.type	checkAgainstWhitelist, %function
checkAgainstWhitelist:
	@ args = 0, pretend = 0, frame = 160
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #160
	str	r0, [fp, #-160]
	ldr	r3, .L44
	ldr	r3, [r3]
	str	r3, [fp, #-8]
	mov	r3,#0
	ldr	r1, [fp, #-160]
	ldr	r0, .L44+4
	bl	printf
	ldr	r0, [fp, #-160]
	bl	atoi
	mov	r3, r0
	mov	r0, r3
	bl	getProcName
	str	r0, [fp, #-156]
	ldr	r3, [fp, #-156]
	cmp	r3, #0
	bne	.L36
	mov	r3, #0
	b	.L42
.L36:
	sub	r3, fp, #148
	ldr	r2, .L44+8
	mov	r1, #40
	mov	r0, r3
	bl	snprintf
	sub	r3, fp, #148
	ldr	r1, .L44+12
	mov	r0, r3
	bl	fopen
	str	r0, [fp, #-152]
	ldr	r3, [fp, #-152]
	cmp	r3, #0
	bne	.L39
	ldr	r0, .L44+16
	bl	puts
	mov	r3, #0
	b	.L42
.L41:
	ldr	r0, [fp, #-156]
	bl	strlen
	mov	r2, r0
	sub	r3, fp, #108
	ldr	r1, [fp, #-156]
	mov	r0, r3
	bl	strncmp
	mov	r3, r0
	cmp	r3, #0
	beq	.L40
	b	.L39
.L40:
	mov	r3, #1
	b	.L42
.L39:
	sub	r3, fp, #108
	ldr	r2, [fp, #-152]
	mov	r1, #100
	mov	r0, r3
	bl	fgets
	mov	r3, r0
	cmp	r3, #0
	bne	.L41
	mov	r3, #0
.L42:
	ldr	r2, .L44
	ldr	r1, [r2]
	ldr	r2, [fp, #-8]
	eors	r1, r2, r1
	mov	r2, #0
	beq	.L43
	bl	__stack_chk_fail
.L43:
	mov	r0, r3
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
.L45:
	.align	2
.L44:
	.word	.LC19
	.word	.LC16
	.word	.LC17
	.word	.LC4
	.word	.LC18
	.size	checkAgainstWhitelist, .-checkAgainstWhitelist
	.align	2
	.global	strdup
	.syntax unified
	.arm
	.fpu softvfp
	.type	strdup, %function
strdup:
	@ args = 0, pretend = 0, frame = 16
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #16
	str	r0, [fp, #-16]
	ldr	r3, [fp, #-16]
	cmp	r3, #0
	bne	.L47
	mov	r3, #0
	b	.L48
.L47:
	ldr	r0, [fp, #-16]
	bl	strlen
	mov	r3, r0
	add	r3, r3, #1
	mov	r0, r3
	bl	malloc
	mov	r3, r0
	str	r3, [fp, #-8]
	ldr	r3, [fp, #-8]
	cmp	r3, #0
	bne	.L49
	mov	r3, #0
	b	.L48
.L49:
	ldr	r3, [fp, #-8]
	str	r3, [fp, #-12]
	b	.L50
.L51:
	ldr	r2, [fp, #-16]
	add	r3, r2, #1
	str	r3, [fp, #-16]
	ldr	r3, [fp, #-12]
	add	r1, r3, #1
	str	r1, [fp, #-12]
	ldrb	r2, [r2]	@ zero_extendqisi2
	strb	r2, [r3]
.L50:
	ldr	r3, [fp, #-16]
	ldrb	r3, [r3]	@ zero_extendqisi2
	cmp	r3, #0
	bne	.L51
	ldr	r3, [fp, #-8]
.L48:
	mov	r0, r3
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
	.size	strdup, .-strdup
	.section	.rodata
	.align	2
.LC20:
	.ascii	"output is %s\012\000"
	.align	2
.LC22:
	.ascii	"found zygote\000"
	.align	2
.LC21:
	.ascii	"zygote\000"
	.align	2
.LC23:
	.word	__stack_chk_guard
	.text
	.align	2
	.global	findZygote
	.syntax unified
	.arm
	.fpu softvfp
	.type	findZygote, %function
findZygote:
	@ args = 0, pretend = 0, frame = 24
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #24
	ldr	r3, .L58
	ldr	r3, [r3]
	str	r3, [fp, #-8]
	mov	r3,#0
	mov	r3, #1
	str	r3, [fp, #-24]
	mov	r3, #1
	str	r3, [fp, #-24]
	b	.L53
.L56:
	ldr	r0, [fp, #-24]
	bl	getProcName
	str	r0, [fp, #-20]
	ldr	r1, [fp, #-20]
	ldr	r0, .L58+4
	bl	printf
	ldr	r2, .L58+8
	sub	r3, fp, #16
	ldm	r2, {r0, r1}
	str	r0, [r3]
	add	r3, r3, #4
	strh	r1, [r3]	@ movhi
	add	r3, r3, #2
	lsr	r2, r1, #16
	strb	r2, [r3]
	ldr	r3, [fp, #-20]
	cmp	r3, #0
	beq	.L54
	sub	r3, fp, #16
	mov	r0, r3
	bl	strlen
	mov	r2, r0
	sub	r3, fp, #16
	mov	r1, r3
	ldr	r0, [fp, #-20]
	bl	strncmp
	mov	r3, r0
	cmp	r3, #0
	bne	.L54
	ldr	r0, .L58+12
	bl	puts
	ldr	r3, [fp, #-24]
	b	.L52
.L54:
	ldr	r3, [fp, #-24]
	add	r3, r3, #1
	str	r3, [fp, #-24]
.L53:
	ldr	r3, [fp, #-24]
	cmp	r3, #1000
	blt	.L56
.L52:
	ldr	r2, .L58
	ldr	r1, [r2]
	ldr	r2, [fp, #-8]
	eors	r1, r2, r1
	mov	r2, #0
	beq	.L57
	bl	__stack_chk_fail
.L57:
	mov	r0, r3
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
.L59:
	.align	2
.L58:
	.word	.LC23
	.word	.LC20
	.word	.LC21
	.word	.LC22
	.size	findZygote, .-findZygote
	.section	.rodata
	.align	2
.LC24:
	.ascii	"watching...\000"
	.text
	.align	2
	.global	main
	.syntax unified
	.arm
	.fpu softvfp
	.type	main, %function
main:
	@ args = 0, pretend = 0, frame = 8
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #8
	str	r0, [fp, #-8]
	str	r1, [fp, #-12]
	bl	watchAndStraceZygote
.L61:
	ldr	r0, .L62
	bl	puts
	mov	r0, #3
	bl	sleep
	bl	monitorProcessForkIfExist
	b	.L61
.L63:
	.align	2
.L62:
	.word	.LC24
	.size	main, .-main
	.ident	"GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0"
	.section	.note.GNU-stack,"",%progbits
