	.file	"extr_43973.c_GetWinlogonPID.c"
	.intel_syntax noprefix
	.text
	.section	.rodata.str1.8,"aMS",@progbits,1
	.align 8
.LC0:
	.string	"[-] CreateToolhelp32Snapshot failed !\n"
	.section	.rodata.str1.1,"aMS",@progbits,1
.LC1:
	.string	"[-] Process32First failed !\n"
.LC2:
	.string	"winlogon.exe"
	.text
	.p2align 4
	.globl	GetWinlogonPID
	.type	GetWinlogonPID, @function
GetWinlogonPID:
.LFB0:
	.cfi_startproc
	endbr64
	push	r13
	.cfi_def_cfa_offset 16
	.cfi_offset 13, -16
	xor	esi, esi
	push	r12
	.cfi_def_cfa_offset 24
	.cfi_offset 12, -24
	push	rbp
	.cfi_def_cfa_offset 32
	.cfi_offset 6, -32
	push	rbx
	.cfi_def_cfa_offset 40
	.cfi_offset 3, -40
	sub	rsp, 40
	.cfi_def_cfa_offset 80
	mov	edi, DWORD PTR TH32CS_SNAPPROCESS[rip]
	mov	rax, QWORD PTR fs:40
	mov	QWORD PTR 24[rsp], rax
	xor	eax, eax
	mov	DWORD PTR 12[rsp], 12
	call	CreateToolhelp32Snapshot@PLT
	cmp	QWORD PTR INVALID_HANDLE_VALUE[rip], rax
	je	.L12
	lea	rbx, 12[rsp]
	mov	rdi, rax
	mov	rbp, rax
	mov	rsi, rbx
	lea	r12, .LC2[rip]
	call	Process32First@PLT
	mov	r13d, eax
	test	eax, eax
	jne	.L4
	jmp	.L13
	.p2align 4,,10
	.p2align 3
.L6:
	mov	rsi, rbx
	mov	rdi, rbp
	call	Process32Next@PLT
	test	rax, rax
	je	.L14
.L4:
	mov	edi, DWORD PTR 20[rsp]
	mov	rsi, r12
	call	lstrcmp@PLT
	test	eax, eax
	jne	.L6
	mov	r13d, DWORD PTR 16[rsp]
.L5:
	mov	rdi, rbp
	call	CloseHandle@PLT
.L3:
	endbr64
.L1:
	mov	rax, QWORD PTR 24[rsp]
	xor	rax, QWORD PTR fs:40
	jne	.L15
	add	rsp, 40
	.cfi_remember_state
	.cfi_def_cfa_offset 40
	mov	eax, r13d
	pop	rbx
	.cfi_def_cfa_offset 32
	pop	rbp
	.cfi_def_cfa_offset 24
	pop	r12
	.cfi_def_cfa_offset 16
	pop	r13
	.cfi_def_cfa_offset 8
	ret
	.p2align 4,,10
	.p2align 3
.L14:
	.cfi_restore_state
	xor	r13d, r13d
	jmp	.L5
	.p2align 4,,10
	.p2align 3
.L12:
	lea	rdi, .LC0[rip]
	xor	r13d, r13d
	call	printf@PLT
	jmp	.L1
	.p2align 4,,10
	.p2align 3
.L13:
	lea	rdi, .LC1[rip]
	call	printf@PLT
	jmp	.L5
.L15:
	call	__stack_chk_fail@PLT
	.cfi_endproc
.LFE0:
	.size	GetWinlogonPID, .-GetWinlogonPID
	.comm	TH32CS_SNAPPROCESS,4,4
	.comm	INVALID_HANDLE_VALUE,8,8
	.ident	"GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0"
	.section	.note.GNU-stack,"",@progbits
	.section	.note.gnu.property,"a"
	.align 8
	.long	 1f - 0f
	.long	 4f - 1f
	.long	 5
0:
	.string	 "GNU"
1:
	.align 8
	.long	 0xc0000002
	.long	 3f - 2f
2:
	.long	 0x3
3:
	.align 8
4:

	.arch armv5t
	.eabi_attribute 20, 1
	.eabi_attribute 21, 1
	.eabi_attribute 23, 3
	.eabi_attribute 24, 1
	.eabi_attribute 25, 1
	.eabi_attribute 26, 2
	.eabi_attribute 30, 2
	.eabi_attribute 34, 0
	.eabi_attribute 18, 4
	.file	"extr_43973.c_GetWinlogonPID.c"
	.text
	.section	.rodata.str1.4,"aMS",%progbits,1
	.align	2
.LC0:
	.ascii	"[-] CreateToolhelp32Snapshot failed !\012\000"
	.align	2
.LC1:
	.ascii	"[-] Process32First failed !\012\000"
	.align	2
.LC2:
	.ascii	"winlogon.exe\000"
	.section	.rodata.cst4,"aM",%progbits,4
	.align	2
.LC3:
	.word	__stack_chk_guard
	.text
	.align	2
	.global	GetWinlogonPID
	.syntax unified
	.arm
	.fpu softvfp
	.type	GetWinlogonPID, %function
GetWinlogonPID:
	@ args = 0, pretend = 0, frame = 16
	@ frame_needed = 0, uses_anonymous_args = 0
	mov	r3, #12
	push	{r4, r5, r6, lr}
	ldr	r2, .L15
	sub	sp, sp, #16
	ldr	r0, [r2]
	ldr	r2, .L15+4
	mov	r1, #0
	ldr	r2, [r2]
	str	r2, [sp, #12]
	mov	r2,#0
	str	r3, [sp]
	bl	CreateToolhelp32Snapshot
	ldr	r3, .L15+8
	ldr	r3, [r3]
	cmp	r3, r0
	beq	.L13
	mov	r1, sp
	mov	r5, r0
	bl	Process32First
	subs	r4, r0, #0
	beq	.L10
	ldr	r6, .L15+12
	b	.L4
.L6:
	mov	r1, sp
	mov	r0, r5
	bl	Process32Next
	subs	r4, r0, #0
	beq	.L5
.L4:
	mov	r1, r6
	ldr	r0, [sp, #8]
	bl	lstrcmp
	cmp	r0, #0
	bne	.L6
	ldr	r4, [sp, #4]
.L5:
	mov	r0, r5
	bl	CloseHandle
.L3:
.L1:
	ldr	r3, .L15+4
	ldr	r2, [r3]
	ldr	r3, [sp, #12]
	eors	r2, r3, r2
	mov	r3, #0
	bne	.L14
	mov	r0, r4
	add	sp, sp, #16
	@ sp needed
	pop	{r4, r5, r6, pc}
.L13:
	ldr	r0, .L15+16
	bl	printf
	mov	r4, #0
	b	.L1
.L10:
	ldr	r0, .L15+20
	bl	printf
	b	.L5
.L14:
	bl	__stack_chk_fail
.L16:
	.align	2
.L15:
	.word	TH32CS_SNAPPROCESS
	.word	.LC3
	.word	INVALID_HANDLE_VALUE
	.word	.LC2
	.word	.LC0
	.word	.LC1
	.size	GetWinlogonPID, .-GetWinlogonPID
	.comm	TH32CS_SNAPPROCESS,4,4
	.comm	INVALID_HANDLE_VALUE,4,4
	.ident	"GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0"
	.section	.note.GNU-stack,"",%progbits
