	.file	"146097.c"
	.intel_syntax noprefix
	.text
	.local	argv0
	.comm	argv0,8,8
	.section	.rodata
	.align 8
.LC0:
	.string	"usage: %s [-c dir] [-b new:old] [-n namespace] [command] [args]\n"
	.text
	.type	usage, @function
usage:
.LFB6:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	mov	rdx, QWORD PTR argv0[rip]
	mov	rax, QWORD PTR stderr[rip]
	lea	rsi, .LC0[rip]
	mov	rdi, rax
	mov	eax, 0
	call	fprintf@PLT
	mov	edi, 1
	call	exit@PLT
	.cfi_endproc
.LFE6:
	.size	usage, .-usage
	.section	.rodata
.LC1:
	.string	"%u %u 1"
	.text
	.type	write_map, @function
write_map:
.LFB7:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 80
	mov	QWORD PTR -72[rbp], rdi
	mov	DWORD PTR -76[rbp], esi
	mov	DWORD PTR -80[rbp], edx
	mov	rax, QWORD PTR fs:40
	mov	QWORD PTR -8[rbp], rax
	xor	eax, eax
	mov	DWORD PTR -56[rbp], 0
	mov	rax, QWORD PTR -72[rbp]
	mov	esi, 2
	mov	rdi, rax
	mov	eax, 0
	call	open@PLT
	mov	DWORD PTR -52[rbp], eax
	cmp	DWORD PTR -52[rbp], -1
	jne	.L3
	mov	eax, 1
	jmp	.L6
.L3:
	mov	ecx, DWORD PTR -80[rbp]
	mov	edx, DWORD PTR -76[rbp]
	lea	rax, -48[rbp]
	mov	r8d, ecx
	mov	ecx, edx
	lea	rdx, .LC1[rip]
	mov	esi, 32
	mov	rdi, rax
	mov	eax, 0
	call	snprintf@PLT
	movsx	rdx, eax
	lea	rcx, -48[rbp]
	mov	eax, DWORD PTR -52[rbp]
	mov	rsi, rcx
	mov	edi, eax
	call	write@PLT
	cmp	rax, -1
	jne	.L5
	mov	DWORD PTR -56[rbp], 1
.L5:
	mov	eax, DWORD PTR -52[rbp]
	mov	edi, eax
	call	close@PLT
	mov	eax, DWORD PTR -56[rbp]
.L6:
	mov	rsi, QWORD PTR -8[rbp]
	sub	rsi, QWORD PTR fs:40
	je	.L7
	call	__stack_chk_fail@PLT
.L7:
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE7:
	.size	write_map, .-write_map
	.section	.rodata
.LC2:
	.string	"/bin/sh"
.LC3:
	.string	"+cbno"
.LC4:
	.string	"unshare"
.LC5:
	.string	"/proc/self/setgroups"
.LC6:
	.string	"deny"
.LC7:
	.string	"write /proc/self/setgroups"
.LC8:
	.string	"/proc/self/uid_map"
.LC9:
	.string	"write /proc/self/uid_map"
.LC10:
	.string	"/proc/self/gid_map"
.LC11:
	.string	"write /proc/self/gid_map"
.LC12:
	.string	"/"
.LC13:
	.string	"chdir"
.LC14:
	.string	"exec: %s"
	.text
	.globl	main
	.type	main, @function
main:
.LFB8:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 80
	mov	DWORD PTR -68[rbp], edi
	mov	QWORD PTR -80[rbp], rsi
	mov	rax, QWORD PTR fs:40
	mov	QWORD PTR -8[rbp], rax
	xor	eax, eax
	lea	rax, .LC2[rip]
	mov	QWORD PTR -32[rbp], rax
	mov	QWORD PTR -24[rbp], 0
	mov	rax, QWORD PTR -80[rbp]
	mov	rax, QWORD PTR [rax]
	mov	QWORD PTR argv0[rip], rax
	mov	QWORD PTR -40[rbp], 0
	jmp	.L9
.L14:
	movsx	eax, BYTE PTR -61[rbp]
	cmp	eax, 111
	je	.L9
	cmp	eax, 111
	jg	.L11
	cmp	eax, 110
	je	.L12
	cmp	eax, 110
	jg	.L11
	cmp	eax, 98
	je	.L9
	cmp	eax, 99
	jne	.L11
	mov	rax, QWORD PTR optarg[rip]
	mov	QWORD PTR -48[rbp], rax
	jmp	.L9
.L12:
	mov	rax, QWORD PTR optarg[rip]
	mov	QWORD PTR -40[rbp], rax
	jmp	.L9
.L11:
	mov	eax, 0
	call	usage
.L9:
	mov	rcx, QWORD PTR -80[rbp]
	mov	eax, DWORD PTR -68[rbp]
	lea	rdx, .LC3[rip]
	mov	rsi, rcx
	mov	edi, eax
	call	getopt@PLT
	mov	BYTE PTR -61[rbp], al
	cmp	BYTE PTR -61[rbp], -1
	jne	.L14
	mov	eax, DWORD PTR optind[rip]
	sub	DWORD PTR -68[rbp], eax
	mov	eax, DWORD PTR optind[rip]
	cdqe
	sal	rax, 3
	add	QWORD PTR -80[rbp], rax
	cmp	DWORD PTR -68[rbp], 0
	jne	.L15
	lea	rax, -32[rbp]
	mov	QWORD PTR -80[rbp], rax
.L15:
	call	getuid@PLT
	mov	DWORD PTR -60[rbp], eax
	call	getgid@PLT
	mov	DWORD PTR -56[rbp], eax
	mov	edi, 268566528
	call	unshare@PLT
	cmp	eax, -1
	jne	.L16
	lea	rsi, .LC4[rip]
	mov	edi, 1
	mov	eax, 0
	call	err@PLT
.L16:
	mov	esi, 2
	lea	rdi, .LC5[rip]
	mov	eax, 0
	call	open@PLT
	mov	DWORD PTR -52[rbp], eax
	cmp	DWORD PTR -52[rbp], -1
	je	.L17
	mov	eax, DWORD PTR -52[rbp]
	mov	edx, 4
	lea	rsi, .LC6[rip]
	mov	edi, eax
	call	write@PLT
	cmp	rax, -1
	jne	.L18
	lea	rsi, .LC7[rip]
	mov	edi, 1
	mov	eax, 0
	call	err@PLT
.L18:
	mov	eax, DWORD PTR -52[rbp]
	mov	edi, eax
	call	close@PLT
.L17:
	mov	edx, DWORD PTR -60[rbp]
	mov	eax, DWORD PTR -60[rbp]
	mov	esi, eax
	lea	rdi, .LC8[rip]
	call	write_map
	test	eax, eax
	je	.L19
	lea	rsi, .LC9[rip]
	mov	edi, 1
	mov	eax, 0
	call	err@PLT
.L19:
	mov	edx, DWORD PTR -56[rbp]
	mov	eax, DWORD PTR -56[rbp]
	mov	esi, eax
	lea	rdi, .LC10[rip]
	call	write_map
	test	eax, eax
	je	.L20
	lea	rsi, .LC11[rip]
	mov	edi, 1
	mov	eax, 0
	call	err@PLT
.L20:
	cmp	QWORD PTR -48[rbp], 0
	je	.L21
	mov	rax, QWORD PTR -48[rbp]
	mov	rdi, rax
	call	chdir@PLT
	cmp	eax, -1
	je	.L22
.L21:
	lea	rdi, .LC12[rip]
	call	chdir@PLT
	cmp	eax, -1
	jne	.L23
.L22:
	lea	rsi, .LC13[rip]
	mov	edi, 1
	mov	eax, 0
	call	err@PLT
.L23:
	mov	rax, QWORD PTR -80[rbp]
	mov	rax, QWORD PTR [rax]
	mov	rdx, QWORD PTR -80[rbp]
	mov	rsi, rdx
	mov	rdi, rax
	call	execvp@PLT
	mov	rax, QWORD PTR -80[rbp]
	mov	rax, QWORD PTR [rax]
	mov	rdx, rax
	lea	rsi, .LC14[rip]
	mov	edi, 1
	mov	eax, 0
	call	err@PLT
	.cfi_endproc
.LFE8:
	.size	main, .-main
	.ident	"GCC: (Ubuntu 10.5.0-1ubuntu1~20.04) 10.5.0"
	.section	.note.GNU-stack,"",@progbits
	.section	.note.gnu.property,"a"
	.align 8
	.long	 1f - 0f
	.long	 4f - 1f
	.long	 5
0:
	.string	 "GNU"
1:
	.align 8
	.long	 0xc0000002
	.long	 3f - 2f
2:
	.long	 0x3
3:
	.align 8
4:

	.arch armv5t
	.eabi_attribute 20, 1
	.eabi_attribute 21, 1
	.eabi_attribute 23, 3
	.eabi_attribute 24, 1
	.eabi_attribute 25, 1
	.eabi_attribute 26, 2
	.eabi_attribute 30, 6
	.eabi_attribute 34, 0
	.eabi_attribute 18, 4
	.file	"146097.c"
	.text
	.local	argv0
	.comm	argv0,4,4
	.section	.rodata
	.align	2
.LC0:
	.ascii	"usage: %s [-c dir] [-b new:old] [-n namespace] [com"
	.ascii	"mand] [args]\012\000"
	.text
	.align	2
	.syntax unified
	.arm
	.fpu softvfp
	.type	usage, %function
usage:
	@ args = 0, pretend = 0, frame = 0
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	ldr	r3, .L2
	ldr	r3, [r3]
	ldr	r2, .L2+4
	ldr	r2, [r2]
	ldr	r1, .L2+8
	mov	r0, r3
	bl	fprintf
	mov	r0, #1
	bl	exit
.L3:
	.align	2
.L2:
	.word	stderr
	.word	argv0
	.word	.LC0
	.size	usage, .-usage
	.section	.rodata
	.align	2
.LC1:
	.ascii	"%u %u 1\000"
	.align	2
.LC2:
	.word	__stack_chk_guard
	.text
	.align	2
	.syntax unified
	.arm
	.fpu softvfp
	.type	write_map, %function
write_map:
	@ args = 0, pretend = 0, frame = 64
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #72
	str	r0, [fp, #-56]
	str	r1, [fp, #-60]
	str	r2, [fp, #-64]
	ldr	r3, .L10
	ldr	r3, [r3]
	str	r3, [fp, #-8]
	mov	r3,#0
	mov	r3, #0
	str	r3, [fp, #-48]
	mov	r1, #2
	ldr	r0, [fp, #-56]
	bl	open
	str	r0, [fp, #-44]
	ldr	r3, [fp, #-44]
	cmn	r3, #1
	bne	.L5
	mov	r3, #1
	b	.L8
.L5:
	sub	r0, fp, #40
	ldr	r3, [fp, #-64]
	str	r3, [sp]
	ldr	r3, [fp, #-60]
	ldr	r2, .L10+4
	mov	r1, #32
	bl	snprintf
	mov	r3, r0
	mov	r2, r3
	sub	r3, fp, #40
	mov	r1, r3
	ldr	r0, [fp, #-44]
	bl	write
	mov	r3, r0
	cmn	r3, #1
	bne	.L7
	mov	r3, #1
	str	r3, [fp, #-48]
.L7:
	ldr	r0, [fp, #-44]
	bl	close
	ldr	r3, [fp, #-48]
.L8:
	ldr	r2, .L10
	ldr	r1, [r2]
	ldr	r2, [fp, #-8]
	eors	r1, r2, r1
	mov	r2, #0
	beq	.L9
	bl	__stack_chk_fail
.L9:
	mov	r0, r3
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
.L11:
	.align	2
.L10:
	.word	.LC2
	.word	.LC1
	.size	write_map, .-write_map
	.section	.rodata
	.align	2
.LC3:
	.ascii	"/bin/sh\000"
	.align	2
.LC4:
	.ascii	"+cbno\000"
	.align	2
.LC5:
	.word	__stack_chk_guard
	.text
	.align	2
	.global	main
	.syntax unified
	.arm
	.fpu softvfp
	.type	main, %function
main:
	@ args = 0, pretend = 0, frame = 32
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #32
	str	r0, [fp, #-32]
	str	r1, [fp, #-36]
	ldr	r3, .L22
	ldr	r3, [r3]
	str	r3, [fp, #-8]
	mov	r3,#0
	ldr	r3, .L22+4
	str	r3, [fp, #-16]
	mov	r3, #0
	str	r3, [fp, #-12]
	ldr	r3, [fp, #-36]
	ldr	r3, [r3]
	ldr	r2, .L22+8
	str	r3, [r2]
	mov	r3, #0
	str	r3, [fp, #-24]
	b	.L13
.L18:
	ldr	r3, .L22+12
	ldr	r3, [r3]
	str	r3, [fp, #-20]
	b	.L13
.L17:
	ldr	r3, .L22+12
	ldr	r3, [r3]
	str	r3, [fp, #-24]
	b	.L13
.L14:
	bl	usage
.L13:
	ldr	r2, .L22+16
	ldr	r1, [fp, #-36]
	ldr	r0, [fp, #-32]
	bl	getopt
	mov	r3, r0
	strb	r3, [fp, #-25]
	ldrb	r3, [fp, #-25]	@ zero_extendqisi2
	sub	r3, r3, #98
	cmp	r3, #13
	ldrls	pc, [pc, r3, asl #2]
	b	.L14
.L16:
	.word	.L13
	.word	.L18
	.word	.L14
	.word	.L14
	.word	.L14
	.word	.L14
	.word	.L14
	.word	.L14
	.word	.L14
	.word	.L14
	.word	.L14
	.word	.L14
	.word	.L17
	.word	.L13
.L23:
	.align	2
.L22:
	.word	.LC5
	.word	.LC3
	.word	argv0
	.word	optarg
	.word	.LC4
	.size	main, .-main
	.ident	"GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0"
	.section	.note.GNU-stack,"",%progbits
