	.file	"extr_143.c_die.c"
	.intel_syntax noprefix
	.text
	.section	.rodata.str1.8,"aMS",@progbits,1
	.align 8
.LC0:
	.string	"\t Remote exploit for lftp < 2.6.10 by Li0n7 \n"
	.align 8
.LC1:
	.string	"\n usage: %s [-f <path>][-p <port>][-r <ret>][-t <target>]\n"
	.align 8
.LC2:
	.string	" -f <path>: create <path>index.html\n"
	.align 8
.LC3:
	.string	" -p <port>: run a fake lftp server on port <port> (default: 80)\n"
	.align 8
.LC4:
	.string	" -r <ret>: return address you would like to use\n"
	.align 8
.LC5:
	.string	" -t <target>: choose the target among the platforms available\n"
	.section	.rodata.str1.1,"aMS",@progbits,1
.LC6:
	.string	" Platforms supported are:\n"
.LC7:
	.string	" num: %i - %s - 0x%x\n"
	.section	.rodata.str1.8
	.align 8
.LC8:
	.string	"\n Vulnerability discovered by Ulf Harnhammar <Ulf.Harnhammar.9485@student.uu.se> \n"
	.section	.rodata.str1.1
.LC9:
	.string	" Contact me: Li0n7@voila.fr\n\n"
	.text
	.p2align 4
	.globl	die
	.type	die, @function
die:
.LFB0:
	.cfi_startproc
	endbr64
	push	r12
	.cfi_def_cfa_offset 16
	.cfi_offset 12, -16
	mov	r12, rdi
	mov	edi, DWORD PTR stdout[rip]
	xor	eax, eax
	push	rbp
	.cfi_def_cfa_offset 24
	.cfi_offset 6, -24
	lea	rsi, .LC0[rip]
	push	rbx
	.cfi_def_cfa_offset 32
	.cfi_offset 3, -32
	call	fprintf@PLT
	mov	edi, DWORD PTR stdout[rip]
	mov	rdx, r12
	xor	eax, eax
	lea	rsi, .LC1[rip]
	call	fprintf@PLT
	mov	edi, DWORD PTR stdout[rip]
	lea	rsi, .LC2[rip]
	xor	eax, eax
	call	fprintf@PLT
	mov	edi, DWORD PTR stdout[rip]
	lea	rsi, .LC3[rip]
	xor	eax, eax
	call	fprintf@PLT
	mov	edi, DWORD PTR stdout[rip]
	lea	rsi, .LC4[rip]
	xor	eax, eax
	call	fprintf@PLT
	mov	edi, DWORD PTR stdout[rip]
	lea	rsi, .LC5[rip]
	xor	eax, eax
	call	fprintf@PLT
	mov	edi, DWORD PTR stdout[rip]
	lea	rsi, .LC6[rip]
	xor	eax, eax
	call	fprintf@PLT
	mov	rax, QWORD PTR exp_os[rip]
	mov	rcx, QWORD PTR [rax]
	test	rcx, rcx
	je	.L2
	xor	ebx, ebx
	lea	rbp, .LC7[rip]
	.p2align 4,,10
	.p2align 3
.L3:
	mov	r8d, DWORD PTR 8[rax]
	mov	edi, DWORD PTR stderr[rip]
	mov	edx, ebx
	mov	rsi, rbp
	xor	eax, eax
	add	rbx, 1
	call	fprintf@PLT
	mov	rax, rbx
	sal	rax, 4
	add	rax, QWORD PTR exp_os[rip]
	mov	rcx, QWORD PTR [rax]
	test	rcx, rcx
	jne	.L3
.L2:
	mov	edi, DWORD PTR stdout[rip]
	lea	rsi, .LC8[rip]
	xor	eax, eax
	call	fprintf@PLT
	mov	edi, DWORD PTR stdout[rip]
	lea	rsi, .LC9[rip]
	xor	eax, eax
	call	fprintf@PLT
	pop	rbx
	.cfi_def_cfa_offset 24
	mov	edi, 1
	pop	rbp
	.cfi_def_cfa_offset 16
	pop	r12
	.cfi_def_cfa_offset 8
	jmp	exit@PLT
	.cfi_endproc
.LFE0:
	.size	die, .-die
	.comm	stdout,4,4
	.comm	stderr,4,4
	.comm	exp_os,8,8
	.ident	"GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0"
	.section	.note.GNU-stack,"",@progbits
	.section	.note.gnu.property,"a"
	.align 8
	.long	 1f - 0f
	.long	 4f - 1f
	.long	 5
0:
	.string	 "GNU"
1:
	.align 8
	.long	 0xc0000002
	.long	 3f - 2f
2:
	.long	 0x3
3:
	.align 8
4:

	.arch armv5t
	.eabi_attribute 20, 1
	.eabi_attribute 21, 1
	.eabi_attribute 23, 3
	.eabi_attribute 24, 1
	.eabi_attribute 25, 1
	.eabi_attribute 26, 2
	.eabi_attribute 30, 2
	.eabi_attribute 34, 0
	.eabi_attribute 18, 4
	.file	"extr_143.c_die.c"
	.text
	.section	.rodata.str1.4,"aMS",%progbits,1
	.align	2
.LC0:
	.ascii	"\011 Remote exploit for lftp < 2.6.10 by Li0n7 \012"
	.ascii	"\000"
	.align	2
.LC1:
	.ascii	"\012 usage: %s [-f <path>][-p <port>][-r <ret>][-t "
	.ascii	"<target>]\012\000"
	.align	2
.LC2:
	.ascii	" -f <path>: create <path>index.html\012\000"
	.align	2
.LC3:
	.ascii	" -p <port>: run a fake lftp server on port <port> ("
	.ascii	"default: 80)\012\000"
	.align	2
.LC4:
	.ascii	" -r <ret>: return address you would like to use\012"
	.ascii	"\000"
	.align	2
.LC5:
	.ascii	" -t <target>: choose the target among the platforms"
	.ascii	" available\012\000"
	.align	2
.LC6:
	.ascii	" Platforms supported are:\012\000"
	.align	2
.LC7:
	.ascii	" num: %i - %s - 0x%x\012\000"
	.align	2
.LC8:
	.ascii	"\012 Vulnerability discovered by Ulf Harnhammar <Ul"
	.ascii	"f.Harnhammar.9485@student.uu.se> \012\000"
	.align	2
.LC9:
	.ascii	" Contact me: Li0n7@voila.fr\012\012\000"
	.text
	.align	2
	.global	die
	.syntax unified
	.arm
	.fpu softvfp
	.type	die, %function
die:
	@ args = 0, pretend = 0, frame = 0
	@ frame_needed = 0, uses_anonymous_args = 0
	push	{r4, r5, r6, r7, r8, lr}
	mov	r4, r0
	ldr	r6, .L10
	sub	sp, sp, #8
	ldr	r1, .L10+4
	ldr	r0, [r6]
	bl	fprintf
	mov	r2, r4
	ldr	r1, .L10+8
	ldr	r0, [r6]
	bl	fprintf
	ldr	r1, .L10+12
	ldr	r0, [r6]
	bl	fprintf
	ldr	r1, .L10+16
	ldr	r0, [r6]
	bl	fprintf
	ldr	r1, .L10+20
	ldr	r0, [r6]
	bl	fprintf
	ldr	r5, .L10+24
	ldr	r1, .L10+28
	ldr	r0, [r6]
	bl	fprintf
	ldr	r0, [r6]
	ldr	r1, .L10+32
	bl	fprintf
	ldr	r0, [r5]
	ldr	r3, [r0]
	cmp	r3, #0
	beq	.L2
	mov	r4, #0
	ldr	r7, .L10+36
	ldr	r8, .L10+40
.L3:
	ldr	r2, [r0, #4]
	mov	r1, r8
	str	r2, [sp]
	ldr	r0, [r7]
	mov	r2, r4
	bl	fprintf
	ldr	r0, [r5]
	add	r4, r4, #1
	ldr	r3, [r0, r4, lsl #3]
	add	r0, r0, r4, lsl #3
	cmp	r3, #0
	bne	.L3
.L2:
	ldr	r1, .L10+44
	ldr	r0, [r6]
	bl	fprintf
	ldr	r0, [r6]
	ldr	r1, .L10+48
	bl	fprintf
	mov	r0, #1
	add	sp, sp, #8
	@ sp needed
	pop	{r4, r5, r6, r7, r8, lr}
	b	exit
.L11:
	.align	2
.L10:
	.word	stdout
	.word	.LC0
	.word	.LC1
	.word	.LC2
	.word	.LC3
	.word	.LC4
	.word	exp_os
	.word	.LC5
	.word	.LC6
	.word	stderr
	.word	.LC7
	.word	.LC8
	.word	.LC9
	.size	die, .-die
	.comm	stdout,4,4
	.comm	stderr,4,4
	.comm	exp_os,4,4
	.ident	"GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0"
	.section	.note.GNU-stack,"",%progbits
