	.file	"191442.c"
	.intel_syntax noprefix
	.text
	.section	.rodata
.LC0:
	.string	"You win!"
	.text
	.globl	winning
	.type	winning, @function
winning:
.LFB6:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	lea	rdi, .LC0[rip]
	call	puts@PLT
	nop
	pop	rbp
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE6:
	.size	winning, .-winning
	.globl	write_target
	.bss
	.align 32
	.type	write_target, @object
	.size	write_target, 32
write_target:
	.zero	32
	.globl	offset
	.align 8
	.type	offset, @object
	.size	offset, 8
offset:
	.zero	8
	.globl	header_size
	.data
	.align 8
	.type	header_size, @object
	.size	header_size, 8
header_size:
	.quad	32
	.globl	mem2chunk_offset
	.align 8
	.type	mem2chunk_offset, @object
	.size	mem2chunk_offset, 8
mem2chunk_offset:
	.quad	16
	.globl	malloc_sizes
	.align 32
	.type	malloc_sizes, @object
	.size	malloc_sizes, 48
malloc_sizes:
	.quad	128
	.quad	512
	.quad	512
	.quad	128
	.quad	128
	.quad	512
	.globl	fill_sizes
	.align 32
	.type	fill_sizes, @object
	.size	fill_sizes, 48
fill_sizes:
	.quad	8
	.quad	8
	.quad	8
	.quad	8
	.quad	8
	.quad	8
	.globl	overflow_sizes
	.align 8
	.type	overflow_sizes, @object
	.size	overflow_sizes, 8
overflow_sizes:
	.quad	9
	.globl	arw_offsets
	.bss
	.align 8
	.type	arw_offsets, @object
	.size	arw_offsets, 0
arw_offsets:
	.zero	1
	.globl	bf_offsets
	.align 8
	.type	bf_offsets, @object
	.size	bf_offsets, 0
bf_offsets:
	.zero	1
	.globl	ctrl_data_0
	.align 16
	.type	ctrl_data_0, @object
	.size	ctrl_data_0, 8
ctrl_data_0:
	.zero	8
	.globl	ctrl_data_1
	.align 16
	.type	ctrl_data_1, @object
	.size	ctrl_data_1, 8
ctrl_data_1:
	.zero	8
	.globl	ctrl_data_2
	.align 16
	.type	ctrl_data_2, @object
	.size	ctrl_data_2, 8
ctrl_data_2:
	.zero	8
	.globl	ctrl_data_3
	.align 16
	.type	ctrl_data_3, @object
	.size	ctrl_data_3, 8
ctrl_data_3:
	.zero	8
	.globl	ctrl_data_4
	.align 16
	.type	ctrl_data_4, @object
	.size	ctrl_data_4, 8
ctrl_data_4:
	.zero	8
	.globl	ctrl_data_5
	.align 16
	.type	ctrl_data_5, @object
	.size	ctrl_data_5, 8
ctrl_data_5:
	.zero	8
	.text
	.globl	main
	.type	main, @function
main:
.LFB7:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 32
	mov	edi, 512
	call	malloc@PLT
	mov	QWORD PTR -8[rbp], rax
	mov	rax, QWORD PTR -8[rbp]
	mov	rdi, rax
	call	free@PLT
	mov	rax, QWORD PTR malloc_sizes[rip]
	mov	rdi, rax
	call	malloc@PLT
	mov	QWORD PTR ctrl_data_0[rip], rax
	mov	DWORD PTR -32[rbp], 0
	jmp	.L3
.L4:
	mov	rdx, QWORD PTR ctrl_data_0[rip]
	mov	eax, DWORD PTR -32[rbp]
	cdqe
	add	rax, rdx
	mov	edx, 8
	mov	rsi, rax
	mov	edi, 0
	call	read@PLT
	add	DWORD PTR -32[rbp], 8
.L3:
	mov	eax, DWORD PTR -32[rbp]
	movsx	rdx, eax
	mov	rax, QWORD PTR fill_sizes[rip]
	cmp	rdx, rax
	jb	.L4
	mov	rax, QWORD PTR malloc_sizes[rip+8]
	mov	rdi, rax
	call	malloc@PLT
	mov	QWORD PTR ctrl_data_1[rip], rax
	mov	DWORD PTR -28[rbp], 0
	jmp	.L5
.L6:
	mov	rdx, QWORD PTR ctrl_data_1[rip]
	mov	eax, DWORD PTR -28[rbp]
	cdqe
	add	rax, rdx
	mov	edx, 8
	mov	rsi, rax
	mov	edi, 0
	call	read@PLT
	add	DWORD PTR -28[rbp], 8
.L5:
	mov	eax, DWORD PTR -28[rbp]
	movsx	rdx, eax
	mov	rax, QWORD PTR fill_sizes[rip+8]
	cmp	rdx, rax
	jb	.L6
	mov	rax, QWORD PTR malloc_sizes[rip+16]
	mov	rdi, rax
	call	malloc@PLT
	mov	QWORD PTR ctrl_data_2[rip], rax
	mov	DWORD PTR -24[rbp], 0
	jmp	.L7
.L8:
	mov	rdx, QWORD PTR ctrl_data_2[rip]
	mov	eax, DWORD PTR -24[rbp]
	cdqe
	add	rax, rdx
	mov	edx, 8
	mov	rsi, rax
	mov	edi, 0
	call	read@PLT
	add	DWORD PTR -24[rbp], 8
.L7:
	mov	eax, DWORD PTR -24[rbp]
	movsx	rdx, eax
	mov	rax, QWORD PTR fill_sizes[rip+16]
	cmp	rdx, rax
	jb	.L8
	mov	rax, QWORD PTR ctrl_data_1[rip]
	mov	rdi, rax
	call	free@PLT
	mov	rax, QWORD PTR mem2chunk_offset[rip]
	mov	QWORD PTR offset[rip], rax
	mov	rax, QWORD PTR overflow_sizes[rip]
	mov	rcx, QWORD PTR ctrl_data_1[rip]
	mov	rdx, QWORD PTR offset[rip]
	neg	rdx
	add	rcx, rdx
	mov	rdx, rax
	mov	rsi, rcx
	mov	edi, 3
	call	read@PLT
	mov	rax, QWORD PTR malloc_sizes[rip+24]
	mov	rdi, rax
	call	malloc@PLT
	mov	QWORD PTR ctrl_data_3[rip], rax
	mov	DWORD PTR -20[rbp], 0
	jmp	.L9
.L10:
	mov	rdx, QWORD PTR ctrl_data_3[rip]
	mov	eax, DWORD PTR -20[rbp]
	cdqe
	add	rax, rdx
	mov	edx, 8
	mov	rsi, rax
	mov	edi, 0
	call	read@PLT
	add	DWORD PTR -20[rbp], 8
.L9:
	mov	eax, DWORD PTR -20[rbp]
	movsx	rdx, eax
	mov	rax, QWORD PTR fill_sizes[rip+24]
	cmp	rdx, rax
	jb	.L10
	mov	rax, QWORD PTR malloc_sizes[rip+32]
	mov	rdi, rax
	call	malloc@PLT
	mov	QWORD PTR ctrl_data_4[rip], rax
	mov	DWORD PTR -16[rbp], 0
	jmp	.L11
.L12:
	mov	rdx, QWORD PTR ctrl_data_4[rip]
	mov	eax, DWORD PTR -16[rbp]
	cdqe
	add	rax, rdx
	mov	edx, 8
	mov	rsi, rax
	mov	edi, 0
	call	read@PLT
	add	DWORD PTR -16[rbp], 8
.L11:
	mov	eax, DWORD PTR -16[rbp]
	movsx	rdx, eax
	mov	rax, QWORD PTR fill_sizes[rip+32]
	cmp	rdx, rax
	jb	.L12
	mov	rax, QWORD PTR ctrl_data_3[rip]
	mov	rdi, rax
	call	free@PLT
	mov	rax, QWORD PTR ctrl_data_2[rip]
	mov	rdi, rax
	call	free@PLT
	mov	rax, QWORD PTR malloc_sizes[rip+40]
	mov	rdi, rax
	call	malloc@PLT
	mov	QWORD PTR ctrl_data_5[rip], rax
	mov	DWORD PTR -12[rbp], 0
	jmp	.L13
.L14:
	mov	rdx, QWORD PTR ctrl_data_5[rip]
	mov	eax, DWORD PTR -12[rbp]
	cdqe
	add	rax, rdx
	mov	edx, 8
	mov	rsi, rax
	mov	edi, 0
	call	read@PLT
	add	DWORD PTR -12[rbp], 8
.L13:
	mov	eax, DWORD PTR -12[rbp]
	movsx	rdx, eax
	mov	rax, QWORD PTR fill_sizes[rip+40]
	cmp	rdx, rax
	jb	.L14
	call	winning
	mov	eax, 0
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE7:
	.size	main, .-main
	.ident	"GCC: (Ubuntu 10.5.0-1ubuntu1~20.04) 10.5.0"
	.section	.note.GNU-stack,"",@progbits
	.section	.note.gnu.property,"a"
	.align 8
	.long	 1f - 0f
	.long	 4f - 1f
	.long	 5
0:
	.string	 "GNU"
1:
	.align 8
	.long	 0xc0000002
	.long	 3f - 2f
2:
	.long	 0x3
3:
	.align 8
4:

	.arch armv5t
	.eabi_attribute 20, 1
	.eabi_attribute 21, 1
	.eabi_attribute 23, 3
	.eabi_attribute 24, 1
	.eabi_attribute 25, 1
	.eabi_attribute 26, 2
	.eabi_attribute 30, 6
	.eabi_attribute 34, 0
	.eabi_attribute 18, 4
	.file	"191442.c"
	.text
	.section	.rodata
	.align	2
.LC0:
	.ascii	"You win!\000"
	.text
	.align	2
	.global	winning
	.syntax unified
	.arm
	.fpu softvfp
	.type	winning, %function
winning:
	@ args = 0, pretend = 0, frame = 0
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	ldr	r0, .L2
	bl	puts
	nop
	pop	{fp, pc}
.L3:
	.align	2
.L2:
	.word	.LC0
	.size	winning, .-winning
	.comm	write_target,16,4
	.comm	offset,4,4
	.global	header_size
	.data
	.align	2
	.type	header_size, %object
	.size	header_size, 4
header_size:
	.word	32
	.global	mem2chunk_offset
	.align	2
	.type	mem2chunk_offset, %object
	.size	mem2chunk_offset, 4
mem2chunk_offset:
	.word	16
	.global	malloc_sizes
	.align	2
	.type	malloc_sizes, %object
	.size	malloc_sizes, 24
malloc_sizes:
	.word	128
	.word	512
	.word	512
	.word	128
	.word	128
	.word	512
	.global	fill_sizes
	.align	2
	.type	fill_sizes, %object
	.size	fill_sizes, 24
fill_sizes:
	.word	8
	.word	8
	.word	8
	.word	8
	.word	8
	.word	8
	.global	overflow_sizes
	.align	2
	.type	overflow_sizes, %object
	.size	overflow_sizes, 4
overflow_sizes:
	.word	9
	.comm	arw_offsets,0,4
	.comm	bf_offsets,0,4
	.comm	ctrl_data_0,4,16
	.comm	ctrl_data_1,4,16
	.comm	ctrl_data_2,4,16
	.comm	ctrl_data_3,4,16
	.comm	ctrl_data_4,4,16
	.comm	ctrl_data_5,4,16
	.text
	.align	2
	.global	main
	.syntax unified
	.arm
	.fpu softvfp
	.type	main, %function
main:
	@ args = 0, pretend = 0, frame = 32
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #32
	mov	r0, #512
	bl	malloc
	mov	r3, r0
	str	r3, [fp, #-8]
	ldr	r0, [fp, #-8]
	bl	free
	ldr	r3, .L18
	ldr	r3, [r3]
	mov	r0, r3
	bl	malloc
	mov	r3, r0
	mov	r2, r3
	ldr	r3, .L18+4
	str	r2, [r3]
	mov	r3, #0
	str	r3, [fp, #-32]
	b	.L5
.L6:
	ldr	r3, .L18+4
	ldr	r2, [r3]
	ldr	r3, [fp, #-32]
	add	r3, r2, r3
	mov	r2, #8
	mov	r1, r3
	mov	r0, #0
	bl	read
	ldr	r3, [fp, #-32]
	add	r3, r3, #8
	str	r3, [fp, #-32]
.L5:
	ldr	r3, .L18+8
	ldr	r2, [r3]
	ldr	r3, [fp, #-32]
	cmp	r2, r3
	bhi	.L6
	ldr	r3, .L18
	ldr	r3, [r3, #4]
	mov	r0, r3
	bl	malloc
	mov	r3, r0
	mov	r2, r3
	ldr	r3, .L18+12
	str	r2, [r3]
	mov	r3, #0
	str	r3, [fp, #-28]
	b	.L7
.L8:
	ldr	r3, .L18+12
	ldr	r2, [r3]
	ldr	r3, [fp, #-28]
	add	r3, r2, r3
	mov	r2, #8
	mov	r1, r3
	mov	r0, #0
	bl	read
	ldr	r3, [fp, #-28]
	add	r3, r3, #8
	str	r3, [fp, #-28]
.L7:
	ldr	r3, .L18+8
	ldr	r2, [r3, #4]
	ldr	r3, [fp, #-28]
	cmp	r2, r3
	bhi	.L8
	ldr	r3, .L18
	ldr	r3, [r3, #8]
	mov	r0, r3
	bl	malloc
	mov	r3, r0
	mov	r2, r3
	ldr	r3, .L18+16
	str	r2, [r3]
	mov	r3, #0
	str	r3, [fp, #-24]
	b	.L9
.L10:
	ldr	r3, .L18+16
	ldr	r2, [r3]
	ldr	r3, [fp, #-24]
	add	r3, r2, r3
	mov	r2, #8
	mov	r1, r3
	mov	r0, #0
	bl	read
	ldr	r3, [fp, #-24]
	add	r3, r3, #8
	str	r3, [fp, #-24]
.L9:
	ldr	r3, .L18+8
	ldr	r2, [r3, #8]
	ldr	r3, [fp, #-24]
	cmp	r2, r3
	bhi	.L10
	ldr	r3, .L18+12
	ldr	r3, [r3]
	mov	r0, r3
	bl	free
	ldr	r3, .L18+20
	ldr	r3, [r3]
	ldr	r2, .L18+24
	str	r3, [r2]
	ldr	r3, .L18+12
	ldr	r2, [r3]
	ldr	r3, .L18+24
	ldr	r3, [r3]
	rsb	r3, r3, #0
	add	r3, r2, r3
	ldr	r2, .L18+28
	ldr	r2, [r2]
	mov	r1, r3
	mov	r0, #3
	bl	read
	ldr	r3, .L18
	ldr	r3, [r3, #12]
	mov	r0, r3
	bl	malloc
	mov	r3, r0
	mov	r2, r3
	ldr	r3, .L18+32
	str	r2, [r3]
	mov	r3, #0
	str	r3, [fp, #-20]
	b	.L11
.L12:
	ldr	r3, .L18+32
	ldr	r2, [r3]
	ldr	r3, [fp, #-20]
	add	r3, r2, r3
	mov	r2, #8
	mov	r1, r3
	mov	r0, #0
	bl	read
	ldr	r3, [fp, #-20]
	add	r3, r3, #8
	str	r3, [fp, #-20]
.L11:
	ldr	r3, .L18+8
	ldr	r2, [r3, #12]
	ldr	r3, [fp, #-20]
	cmp	r2, r3
	bhi	.L12
	ldr	r3, .L18
	ldr	r3, [r3, #16]
	mov	r0, r3
	bl	malloc
	mov	r3, r0
	mov	r2, r3
	ldr	r3, .L18+36
	str	r2, [r3]
	mov	r3, #0
	str	r3, [fp, #-16]
	b	.L13
.L14:
	ldr	r3, .L18+36
	ldr	r2, [r3]
	ldr	r3, [fp, #-16]
	add	r3, r2, r3
	mov	r2, #8
	mov	r1, r3
	mov	r0, #0
	bl	read
	ldr	r3, [fp, #-16]
	add	r3, r3, #8
	str	r3, [fp, #-16]
.L13:
	ldr	r3, .L18+8
	ldr	r2, [r3, #16]
	ldr	r3, [fp, #-16]
	cmp	r2, r3
	bhi	.L14
	ldr	r3, .L18+32
	ldr	r3, [r3]
	mov	r0, r3
	bl	free
	ldr	r3, .L18+16
	ldr	r3, [r3]
	mov	r0, r3
	bl	free
	ldr	r3, .L18
	ldr	r3, [r3, #20]
	mov	r0, r3
	bl	malloc
	mov	r3, r0
	mov	r2, r3
	ldr	r3, .L18+40
	str	r2, [r3]
	mov	r3, #0
	str	r3, [fp, #-12]
	b	.L15
.L16:
	ldr	r3, .L18+40
	ldr	r2, [r3]
	ldr	r3, [fp, #-12]
	add	r3, r2, r3
	mov	r2, #8
	mov	r1, r3
	mov	r0, #0
	bl	read
	ldr	r3, [fp, #-12]
	add	r3, r3, #8
	str	r3, [fp, #-12]
.L15:
	ldr	r3, .L18+8
	ldr	r2, [r3, #20]
	ldr	r3, [fp, #-12]
	cmp	r2, r3
	bhi	.L16
	bl	winning
	mov	r3, #0
	mov	r0, r3
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
.L19:
	.align	2
.L18:
	.word	malloc_sizes
	.word	ctrl_data_0
	.word	fill_sizes
	.word	ctrl_data_1
	.word	ctrl_data_2
	.word	mem2chunk_offset
	.word	offset
	.word	overflow_sizes
	.word	ctrl_data_3
	.word	ctrl_data_4
	.word	ctrl_data_5
	.size	main, .-main
	.ident	"GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0"
	.section	.note.GNU-stack,"",%progbits
