	.file	"861605.c"
	.intel_syntax noprefix
	.text
	.globl	p_global
	.bss
	.align 8
	.type	p_global, @object
	.size	p_global, 8
p_global:
	.zero	8
	.text
	.globl	cmp
	.type	cmp, @function
cmp:
.LFB6:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	mov	rax, QWORD PTR p_global[rip]
	mov	eax, DWORD PTR [rax]
	test	eax, eax
	js	.L2
	mov	rax, QWORD PTR p_global[rip]
	mov	eax, DWORD PTR [rax]
	cmp	eax, 10
	jg	.L2
	mov	eax, 1
	jmp	.L4
.L2:
	mov	eax, 0
.L4:
	pop	rbp
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE6:
	.size	cmp, .-cmp
	.section	.rodata
.LC0:
	.string	"The secret is greater than 50"
.LC1:
	.string	"The secret is less than 50 "
	.text
	.globl	index_user
	.type	index_user, @function
index_user:
.LFB7:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 32
	mov	QWORD PTR -24[rbp], rdi
	mov	rax, QWORD PTR p_global[rip]
	mov	QWORD PTR -8[rbp], rax
	mov	rax, QWORD PTR -24[rbp]
	mov	QWORD PTR p_global[rip], rax
	mov	eax, 0
	call	cmp
	test	eax, eax
	jg	.L6
	lea	rdi, .LC0[rip]
	call	puts@PLT
	jmp	.L5
.L6:
	lea	rdi, .LC1[rip]
	call	puts@PLT
	mov	rax, QWORD PTR -8[rbp]
	mov	QWORD PTR p_global[rip], rax
	nop
.L5:
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE7:
	.size	index_user, .-index_user
	.section	.rodata
	.align 8
.LC2:
	.string	" ./ uaf MODE \nMODE EASY =1\nMODE HARD !=1"
	.align 8
.LC3:
	.string	"Give a number between 0 and 100"
.LC4:
	.string	"%d"
.LC5:
	.string	"freeing"
.LC6:
	.string	"Good luck !"
.LC7:
	.string	"Give the secret"
.LC8:
	.string	"pindex: %d"
.LC9:
	.string	"pass: %d"
.LC10:
	.string	"glbl: %d"
.LC11:
	.string	"Congrats !"
.LC12:
	.string	"Sorry ..."
	.text
	.globl	main
	.type	main, @function
main:
.LFB8:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 32
	mov	DWORD PTR -20[rbp], edi
	mov	QWORD PTR -32[rbp], rsi
	cmp	DWORD PTR -20[rbp], 2
	je	.L9
	lea	rdi, .LC2[rip]
	call	puts@PLT
	mov	eax, 0
	jmp	.L10
.L9:
	mov	edi, 4
	call	malloc@PLT
	mov	QWORD PTR p_global[rip], rax
	mov	rax, QWORD PTR p_global[rip]
	mov	DWORD PTR [rax], 100
	mov	rax, QWORD PTR -32[rbp]
	add	rax, 8
	mov	rax, QWORD PTR [rax]
	mov	rdi, rax
	call	atoi@PLT
	cmp	eax, 1
	jne	.L11
	mov	edi, 255
	call	malloc@PLT
	mov	QWORD PTR -16[rbp], rax
	lea	rdi, .LC3[rip]
	call	puts@PLT
	mov	rax, QWORD PTR -16[rbp]
	mov	rsi, rax
	lea	rdi, .LC4[rip]
	mov	eax, 0
	call	__isoc99_scanf@PLT
	mov	rax, QWORD PTR -16[rbp]
	mov	rdi, rax
	call	index_user
	lea	rdi, .LC5[rip]
	call	puts@PLT
	mov	rax, QWORD PTR -16[rbp]
	mov	rdi, rax
	call	free@PLT
	jmp	.L12
.L11:
	lea	rdi, .LC6[rip]
	call	puts@PLT
.L12:
	mov	edi, 170
	call	malloc@PLT
	mov	QWORD PTR -8[rbp], rax
	lea	rdi, .LC7[rip]
	call	puts@PLT
	mov	rax, QWORD PTR -8[rbp]
	mov	rsi, rax
	lea	rdi, .LC4[rip]
	mov	eax, 0
	call	__isoc99_scanf@PLT
	mov	rax, QWORD PTR -16[rbp]
	mov	eax, DWORD PTR [rax]
	mov	esi, eax
	lea	rdi, .LC8[rip]
	mov	eax, 0
	call	printf@PLT
	mov	rax, QWORD PTR -8[rbp]
	mov	eax, DWORD PTR [rax]
	mov	esi, eax
	lea	rdi, .LC9[rip]
	mov	eax, 0
	call	printf@PLT
	mov	rax, QWORD PTR p_global[rip]
	mov	eax, DWORD PTR [rax]
	mov	esi, eax
	lea	rdi, .LC10[rip]
	mov	eax, 0
	call	printf@PLT
	mov	rax, QWORD PTR -8[rbp]
	mov	edx, DWORD PTR [rax]
	mov	rax, QWORD PTR p_global[rip]
	mov	eax, DWORD PTR [rax]
	cmp	edx, eax
	jne	.L13
	lea	rdi, .LC11[rip]
	call	puts@PLT
	jmp	.L14
.L13:
	lea	rdi, .LC12[rip]
	call	puts@PLT
.L14:
	mov	eax, 0
.L10:
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE8:
	.size	main, .-main
	.ident	"GCC: (Ubuntu 10.5.0-1ubuntu1~20.04) 10.5.0"
	.section	.note.GNU-stack,"",@progbits
	.section	.note.gnu.property,"a"
	.align 8
	.long	 1f - 0f
	.long	 4f - 1f
	.long	 5
0:
	.string	 "GNU"
1:
	.align 8
	.long	 0xc0000002
	.long	 3f - 2f
2:
	.long	 0x3
3:
	.align 8
4:

	.arch armv5t
	.eabi_attribute 20, 1
	.eabi_attribute 21, 1
	.eabi_attribute 23, 3
	.eabi_attribute 24, 1
	.eabi_attribute 25, 1
	.eabi_attribute 26, 2
	.eabi_attribute 30, 6
	.eabi_attribute 34, 0
	.eabi_attribute 18, 4
	.file	"861605.c"
	.text
	.comm	p_global,4,4
	.align	2
	.global	cmp
	.syntax unified
	.arm
	.fpu softvfp
	.type	cmp, %function
cmp:
	@ args = 0, pretend = 0, frame = 0
	@ frame_needed = 1, uses_anonymous_args = 0
	@ link register save eliminated.
	str	fp, [sp, #-4]!
	add	fp, sp, #0
	ldr	r3, .L5
	ldr	r3, [r3]
	ldr	r3, [r3]
	cmp	r3, #0
	blt	.L2
	ldr	r3, .L5
	ldr	r3, [r3]
	ldr	r3, [r3]
	cmp	r3, #10
	bgt	.L2
	mov	r3, #1
	b	.L4
.L2:
	mov	r3, #0
.L4:
	mov	r0, r3
	add	sp, fp, #0
	@ sp needed
	ldr	fp, [sp], #4
	bx	lr
.L6:
	.align	2
.L5:
	.word	p_global
	.size	cmp, .-cmp
	.section	.rodata
	.align	2
.LC0:
	.ascii	"The secret is greater than 50\000"
	.align	2
.LC1:
	.ascii	"The secret is less than 50 \000"
	.text
	.align	2
	.global	index_user
	.syntax unified
	.arm
	.fpu softvfp
	.type	index_user, %function
index_user:
	@ args = 0, pretend = 0, frame = 16
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #16
	str	r0, [fp, #-16]
	ldr	r3, .L10
	ldr	r3, [r3]
	str	r3, [fp, #-8]
	ldr	r2, .L10
	ldr	r3, [fp, #-16]
	str	r3, [r2]
	bl	cmp
	mov	r3, r0
	cmp	r3, #0
	bgt	.L8
	ldr	r0, .L10+4
	bl	puts
	b	.L7
.L8:
	ldr	r0, .L10+8
	bl	puts
	ldr	r2, .L10
	ldr	r3, [fp, #-8]
	str	r3, [r2]
	nop
.L7:
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
.L11:
	.align	2
.L10:
	.word	p_global
	.word	.LC0
	.word	.LC1
	.size	index_user, .-index_user
	.section	.rodata
	.align	2
.LC2:
	.ascii	" ./ uaf MODE \012MODE EASY =1\012MODE HARD !=1\000"
	.align	2
.LC3:
	.ascii	"Give a number between 0 and 100\000"
	.align	2
.LC4:
	.ascii	"%d\000"
	.align	2
.LC5:
	.ascii	"freeing\000"
	.align	2
.LC6:
	.ascii	"Good luck !\000"
	.align	2
.LC7:
	.ascii	"Give the secret\000"
	.align	2
.LC8:
	.ascii	"pindex: %d\000"
	.align	2
.LC9:
	.ascii	"pass: %d\000"
	.align	2
.LC10:
	.ascii	"glbl: %d\000"
	.align	2
.LC11:
	.ascii	"Congrats !\000"
	.align	2
.LC12:
	.ascii	"Sorry ...\000"
	.text
	.align	2
	.global	main
	.syntax unified
	.arm
	.fpu softvfp
	.type	main, %function
main:
	@ args = 0, pretend = 0, frame = 16
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #16
	str	r0, [fp, #-16]
	str	r1, [fp, #-20]
	ldr	r3, [fp, #-16]
	cmp	r3, #2
	beq	.L13
	ldr	r0, .L19
	bl	puts
	mov	r3, #0
	b	.L14
.L13:
	mov	r0, #4
	bl	malloc
	mov	r3, r0
	mov	r2, r3
	ldr	r3, .L19+4
	str	r2, [r3]
	ldr	r3, .L19+4
	ldr	r3, [r3]
	mov	r2, #100
	str	r2, [r3]
	ldr	r3, [fp, #-20]
	add	r3, r3, #4
	ldr	r3, [r3]
	mov	r0, r3
	bl	atoi
	mov	r3, r0
	cmp	r3, #1
	bne	.L15
	mov	r0, #255
	bl	malloc
	mov	r3, r0
	str	r3, [fp, #-12]
	ldr	r0, .L19+8
	bl	puts
	ldr	r1, [fp, #-12]
	ldr	r0, .L19+12
	bl	__isoc99_scanf
	ldr	r0, [fp, #-12]
	bl	index_user
	ldr	r0, .L19+16
	bl	puts
	ldr	r0, [fp, #-12]
	bl	free
	b	.L16
.L15:
	ldr	r0, .L19+20
	bl	puts
.L16:
	mov	r0, #170
	bl	malloc
	mov	r3, r0
	str	r3, [fp, #-8]
	ldr	r0, .L19+24
	bl	puts
	ldr	r1, [fp, #-8]
	ldr	r0, .L19+12
	bl	__isoc99_scanf
	ldr	r3, [fp, #-12]
	ldr	r3, [r3]
	mov	r1, r3
	ldr	r0, .L19+28
	bl	printf
	ldr	r3, [fp, #-8]
	ldr	r3, [r3]
	mov	r1, r3
	ldr	r0, .L19+32
	bl	printf
	ldr	r3, .L19+4
	ldr	r3, [r3]
	ldr	r3, [r3]
	mov	r1, r3
	ldr	r0, .L19+36
	bl	printf
	ldr	r3, [fp, #-8]
	ldr	r2, [r3]
	ldr	r3, .L19+4
	ldr	r3, [r3]
	ldr	r3, [r3]
	cmp	r2, r3
	bne	.L17
	ldr	r0, .L19+40
	bl	puts
	b	.L18
.L17:
	ldr	r0, .L19+44
	bl	puts
.L18:
	mov	r3, #0
.L14:
	mov	r0, r3
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
.L20:
	.align	2
.L19:
	.word	.LC2
	.word	p_global
	.word	.LC3
	.word	.LC4
	.word	.LC5
	.word	.LC6
	.word	.LC7
	.word	.LC8
	.word	.LC9
	.word	.LC10
	.word	.LC11
	.word	.LC12
	.size	main, .-main
	.ident	"GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0"
	.section	.note.GNU-stack,"",%progbits
