	.file	"212642580.c"
	.intel_syntax noprefix
	.text
	.type	hind_addr, @function
hind_addr:
.LFB6:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 16
	call	rand@PLT
	movsx	rdx, eax
	imul	rdx, rdx, -2004318071
	shr	rdx, 32
	add	edx, eax
	sar	edx, 3
	mov	ecx, eax
	sar	ecx, 31
	sub	edx, ecx
	mov	ecx, edx
	sal	ecx, 4
	sub	ecx, edx
	sub	eax, ecx
	mov	edx, eax
	lea	eax, 48[rdx]
	mov	DWORD PTR -4[rbp], eax
	mov	eax, DWORD PTR -4[rbp]
	mov	edx, 1
	mov	ecx, eax
	sal	rdx, cl
	mov	rax, rdx
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE6:
	.size	hind_addr, .-hind_addr
	.section	.rodata
.LC0:
	.string	"Bad address %lx\n"
	.text
	.type	validate_addr, @function
validate_addr:
.LFB7:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 32
	mov	QWORD PTR -24[rbp], rdi
	mov	DWORD PTR -28[rbp], esi
	mov	rax, QWORD PTR -24[rbp]
	mov	QWORD PTR -8[rbp], rax
	cmp	DWORD PTR -28[rbp], 0
	je	.L4
	movabs	rax, 140737488355327
	cmp	QWORD PTR -8[rbp], rax
	ja	.L5
	mov	rax, QWORD PTR -8[rbp]
	mov	rsi, rax
	lea	rdi, .LC0[rip]
	mov	eax, 0
	call	printf@PLT
	mov	eax, 1
	jmp	.L6
.L5:
	mov	eax, 0
	jmp	.L6
.L4:
	movabs	rax, 140737488355328
	cmp	QWORD PTR -8[rbp], rax
	jbe	.L7
	mov	rax, QWORD PTR -8[rbp]
	mov	rsi, rax
	lea	rdi, .LC0[rip]
	mov	eax, 0
	call	printf@PLT
	mov	eax, 1
	jmp	.L6
.L7:
	mov	eax, 0
.L6:
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE7:
	.size	validate_addr, .-validate_addr
	.type	validate_lower_address_hint, @function
validate_lower_address_hint:
.LFB8:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 16
	mov	r9d, 0
	mov	r8d, -1
	mov	ecx, 34
	mov	edx, 3
	movabs	rsi, 17179869184
	movabs	rdi, 35184372088832
	call	mmap@PLT
	mov	QWORD PTR -8[rbp], rax
	cmp	QWORD PTR -8[rbp], -1
	jne	.L9
	mov	eax, 0
	jmp	.L10
.L9:
	mov	eax, 1
.L10:
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE8:
	.size	validate_lower_address_hint, .-validate_lower_address_hint
	.globl	main
	.type	main, @function
main:
.LFB9:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	lea	r11, -262144[rsp]
.LPSRL0:
	sub	rsp, 4096
	or	DWORD PTR [rsp], 0
	cmp	rsp, r11
	jne	.LPSRL0
	sub	rsp, 64
	mov	DWORD PTR -262196[rbp], edi
	mov	QWORD PTR -262208[rbp], rsi
	mov	rax, QWORD PTR fs:40
	mov	QWORD PTR -8[rbp], rax
	xor	eax, eax
	mov	QWORD PTR -262192[rbp], 0
	jmp	.L12
.L18:
	mov	r9d, 0
	mov	r8d, -1
	mov	ecx, 34
	mov	edx, 3
	movabs	rsi, 17179869184
	mov	edi, 0
	call	mmap@PLT
	mov	rdx, QWORD PTR -262192[rbp]
	mov	QWORD PTR -262160[rbp+rdx*8], rax
	mov	rax, QWORD PTR -262192[rbp]
	mov	rax, QWORD PTR -262160[rbp+rax*8]
	cmp	rax, -1
	jne	.L13
	call	validate_lower_address_hint
	test	eax, eax
	je	.L30
	mov	eax, 1
	jmp	.L28
.L13:
	mov	rax, QWORD PTR -262192[rbp]
	mov	rax, QWORD PTR -262160[rbp+rax*8]
	mov	esi, 0
	mov	rdi, rax
	call	validate_addr
	test	eax, eax
	je	.L17
	mov	eax, 1
	jmp	.L28
.L17:
	add	QWORD PTR -262192[rbp], 1
.L12:
	cmp	QWORD PTR -262192[rbp], 8191
	jbe	.L18
	jmp	.L16
.L30:
	nop
.L16:
	mov	rax, QWORD PTR -262192[rbp]
	mov	QWORD PTR -262184[rbp], rax
	mov	QWORD PTR -262192[rbp], 0
	jmp	.L19
.L23:
	call	hind_addr
	mov	QWORD PTR -262176[rbp], rax
	mov	rax, QWORD PTR -262176[rbp]
	mov	r9d, 0
	mov	r8d, -1
	mov	ecx, 34
	mov	edx, 3
	movabs	rsi, 17179869184
	mov	rdi, rax
	call	mmap@PLT
	mov	rdx, QWORD PTR -262192[rbp]
	mov	QWORD PTR -196624[rbp+rdx*8], rax
	mov	rax, QWORD PTR -262192[rbp]
	mov	rax, QWORD PTR -196624[rbp+rax*8]
	cmp	rax, -1
	je	.L31
	mov	rax, QWORD PTR -262192[rbp]
	mov	rax, QWORD PTR -196624[rbp+rax*8]
	mov	esi, 1
	mov	rdi, rax
	call	validate_addr
	test	eax, eax
	je	.L22
	mov	eax, 1
	jmp	.L28
.L22:
	add	QWORD PTR -262192[rbp], 1
.L19:
	cmp	QWORD PTR -262192[rbp], 24575
	jbe	.L23
	jmp	.L21
.L31:
	nop
.L21:
	mov	rax, QWORD PTR -262192[rbp]
	mov	QWORD PTR -262168[rbp], rax
	mov	QWORD PTR -262192[rbp], 0
	jmp	.L24
.L25:
	mov	rax, QWORD PTR -262192[rbp]
	mov	rax, QWORD PTR -262160[rbp+rax*8]
	movabs	rsi, 17179869184
	mov	rdi, rax
	call	munmap@PLT
	add	QWORD PTR -262192[rbp], 1
.L24:
	mov	rax, QWORD PTR -262192[rbp]
	cmp	rax, QWORD PTR -262184[rbp]
	jb	.L25
	mov	QWORD PTR -262192[rbp], 0
	jmp	.L26
.L27:
	mov	rax, QWORD PTR -262192[rbp]
	mov	rax, QWORD PTR -196624[rbp+rax*8]
	movabs	rsi, 17179869184
	mov	rdi, rax
	call	munmap@PLT
	add	QWORD PTR -262192[rbp], 1
.L26:
	mov	rax, QWORD PTR -262192[rbp]
	cmp	rax, QWORD PTR -262168[rbp]
	jb	.L27
	mov	eax, 0
.L28:
	mov	rcx, QWORD PTR -8[rbp]
	sub	rcx, QWORD PTR fs:40
	je	.L29
	call	__stack_chk_fail@PLT
.L29:
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE9:
	.size	main, .-main
	.ident	"GCC: (Ubuntu 10.5.0-1ubuntu1~20.04) 10.5.0"
	.section	.note.GNU-stack,"",@progbits
	.section	.note.gnu.property,"a"
	.align 8
	.long	 1f - 0f
	.long	 4f - 1f
	.long	 5
0:
	.string	 "GNU"
1:
	.align 8
	.long	 0xc0000002
	.long	 3f - 2f
2:
	.long	 0x3
3:
	.align 8
4:

	.arch armv5t
	.eabi_attribute 20, 1
	.eabi_attribute 21, 1
	.eabi_attribute 23, 3
	.eabi_attribute 24, 1
	.eabi_attribute 25, 1
	.eabi_attribute 26, 2
	.eabi_attribute 30, 6
	.eabi_attribute 34, 0
	.eabi_attribute 18, 4
	.file	"212642580.c"
	.text
	.align	2
	.syntax unified
	.arm
	.fpu softvfp
	.type	hind_addr, %function
hind_addr:
	@ args = 0, pretend = 0, frame = 8
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #8
	bl	rand
	mov	r2, r0
	ldr	r3, .L3
	smull	r1, r3, r2, r3
	add	r3, r3, r2
	asr	r1, r3, #3
	asr	r3, r2, #31
	sub	r1, r1, r3
	mov	r3, r1
	lsl	r3, r3, #4
	sub	r3, r3, r1
	sub	r1, r2, r3
	add	r3, r1, #48
	str	r3, [fp, #-8]
	mov	r2, #1
	ldr	r3, [fp, #-8]
	lsl	r3, r2, r3
	mov	r0, r3
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
.L4:
	.align	2
.L3:
	.word	-2004318071
	.size	hind_addr, .-hind_addr
	.section	.rodata
	.align	2
.LC0:
	.ascii	"Bad address %lx\012\000"
	.text
	.align	2
	.syntax unified
	.arm
	.fpu softvfp
	.type	validate_addr, %function
validate_addr:
	@ args = 0, pretend = 0, frame = 16
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #16
	str	r0, [fp, #-16]
	str	r1, [fp, #-20]
	ldr	r3, [fp, #-16]
	str	r3, [fp, #-8]
	ldr	r3, [fp, #-20]
	cmp	r3, #0
	beq	.L6
	mov	r3, #0
	b	.L7
.L6:
	ldr	r3, [fp, #-8]
	cmp	r3, #0
	beq	.L8
	ldr	r1, [fp, #-8]
	ldr	r0, .L9
	bl	printf
	mov	r3, #1
	b	.L7
.L8:
	mov	r3, #0
.L7:
	mov	r0, r3
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
.L10:
	.align	2
.L9:
	.word	.LC0
	.size	validate_addr, .-validate_addr
	.align	2
	.syntax unified
	.arm
	.fpu softvfp
	.type	validate_lower_address_hint, %function
validate_lower_address_hint:
	@ args = 0, pretend = 0, frame = 8
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #16
	mov	r3, #0
	str	r3, [sp, #4]
	mvn	r3, #0
	str	r3, [sp]
	mov	r3, #34
	mov	r2, #3
	mov	r1, #0
	mov	r0, #0
	bl	mmap
	str	r0, [fp, #-8]
	ldr	r3, [fp, #-8]
	cmn	r3, #1
	bne	.L12
	mov	r3, #0
	b	.L13
.L12:
	mov	r3, #1
.L13:
	mov	r0, r3
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
	.size	validate_lower_address_hint, .-validate_lower_address_hint
	.section	.rodata
	.align	2
.LC1:
	.word	__stack_chk_guard
	.text
	.align	2
	.global	main
	.syntax unified
	.arm
	.fpu softvfp
	.type	main, %function
main:
	@ args = 0, pretend = 0, frame = 131104
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{r4, fp, lr}
	add	fp, sp, #8
	sub	sp, sp, #131072
	sub	sp, sp, #44
	sub	r3, fp, #131072
	sub	r3, r3, #12
	str	r0, [r3, #-28]
	sub	r3, fp, #131072
	sub	r3, r3, #12
	str	r1, [r3, #-32]
	ldr	r3, .L35
	ldr	r3, [r3]
	str	r3, [fp, #-16]
	mov	r3,#0
	sub	r3, fp, #131072
	sub	r3, r3, #12
	mov	r2, r3
	mov	r3, #0
	str	r3, [r2, #-20]
	b	.L15
.L21:
	mov	r3, #0
	str	r3, [sp, #4]
	mvn	r3, #0
	str	r3, [sp]
	mov	r3, #34
	mov	r2, #3
	mov	r1, #0
	mov	r0, #0
	bl	mmap
	mov	r2, r0
	sub	r3, fp, #131072
	sub	r3, r3, #12
	mov	r1, r3
	sub	r3, fp, #131072
	sub	r3, r3, #12
	ldr	r3, [r3, #-20]
	lsl	r3, r3, #2
	add	r3, r1, r3
	str	r2, [r3, #-4]
	sub	r3, fp, #131072
	sub	r3, r3, #12
	mov	r2, r3
	sub	r3, fp, #131072
	sub	r3, r3, #12
	ldr	r3, [r3, #-20]
	lsl	r3, r3, #2
	add	r3, r2, r3
	ldr	r3, [r3, #-4]
	cmn	r3, #1
	bne	.L16
	bl	validate_lower_address_hint
	mov	r3, r0
	cmp	r3, #0
	beq	.L33
	mov	r3, #1
	b	.L31
.L16:
	sub	r3, fp, #131072
	sub	r3, r3, #12
	mov	r2, r3
	sub	r3, fp, #131072
	sub	r3, r3, #12
	ldr	r3, [r3, #-20]
	lsl	r3, r3, #2
	add	r3, r2, r3
	ldr	r3, [r3, #-4]
	mov	r1, #0
	mov	r0, r3
	bl	validate_addr
	mov	r3, r0
	cmp	r3, #0
	beq	.L20
	mov	r3, #1
	b	.L31
.L20:
	sub	r3, fp, #131072
	sub	r3, r3, #12
	mov	r2, r3
	sub	r3, fp, #131072
	sub	r3, r3, #12
	ldr	r3, [r3, #-20]
	add	r3, r3, #1
	str	r3, [r2, #-20]
.L15:
	sub	r3, fp, #131072
	sub	r3, r3, #12
	ldr	r3, [r3, #-20]
	cmp	r3, #8192
	bcc	.L21
	b	.L19
.L33:
	nop
.L19:
	sub	r3, fp, #131072
	sub	r3, r3, #12
	mov	r2, r3
	sub	r3, fp, #131072
	sub	r3, r3, #12
	ldr	r3, [r3, #-20]
	str	r3, [r2, #-16]
	sub	r3, fp, #131072
	sub	r3, r3, #12
	mov	r2, r3
	mov	r3, #0
	str	r3, [r2, #-20]
	b	.L22
.L26:
	sub	r3, fp, #131072
	sub	r3, r3, #12
	mov	r4, r3
	bl	hind_addr
	str	r0, [r4, #-12]
	sub	r3, fp, #131072
	sub	r3, r3, #12
	mov	r0, r3
	mov	r3, #0
	str	r3, [sp, #4]
	mvn	r3, #0
	str	r3, [sp]
	mov	r3, #34
	mov	r2, #3
	mov	r1, #0
	ldr	r0, [r0, #-12]
	bl	mmap
	mov	r2, r0
	sub	r3, fp, #98304
	sub	r3, r3, #12
	mov	r1, r3
	sub	r3, fp, #131072
	sub	r3, r3, #12
	ldr	r3, [r3, #-20]
	lsl	r3, r3, #2
	add	r3, r1, r3
	str	r2, [r3, #-4]
	sub	r3, fp, #98304
	sub	r3, r3, #12
	mov	r2, r3
	sub	r3, fp, #131072
	sub	r3, r3, #12
	ldr	r3, [r3, #-20]
	lsl	r3, r3, #2
	add	r3, r2, r3
	ldr	r3, [r3, #-4]
	cmn	r3, #1
	beq	.L34
	sub	r3, fp, #98304
	sub	r3, r3, #12
	mov	r2, r3
	sub	r3, fp, #131072
	sub	r3, r3, #12
	ldr	r3, [r3, #-20]
	lsl	r3, r3, #2
	add	r3, r2, r3
	ldr	r3, [r3, #-4]
	mov	r1, #1
	mov	r0, r3
	bl	validate_addr
	mov	r3, r0
	cmp	r3, #0
	beq	.L25
	mov	r3, #1
	b	.L31
.L25:
	sub	r3, fp, #131072
	sub	r3, r3, #12
	mov	r2, r3
	sub	r3, fp, #131072
	sub	r3, r3, #12
	ldr	r3, [r3, #-20]
	add	r3, r3, #1
	str	r3, [r2, #-20]
.L22:
	sub	r3, fp, #131072
	sub	r3, r3, #12
	ldr	r3, [r3, #-20]
	cmp	r3, #24576
	bcc	.L26
	b	.L24
.L34:
	nop
.L24:
	sub	r3, fp, #131072
	sub	r3, r3, #12
	mov	r2, r3
	sub	r3, fp, #131072
	sub	r3, r3, #12
	ldr	r3, [r3, #-20]
	str	r3, [r2, #-8]
	sub	r3, fp, #131072
	sub	r3, r3, #12
	mov	r2, r3
	mov	r3, #0
	str	r3, [r2, #-20]
	b	.L27
.L28:
	sub	r3, fp, #131072
	sub	r3, r3, #12
	mov	r2, r3
	sub	r3, fp, #131072
	sub	r3, r3, #12
	ldr	r3, [r3, #-20]
	lsl	r3, r3, #2
	add	r3, r2, r3
	ldr	r3, [r3, #-4]
	mov	r1, #0
	mov	r0, r3
	bl	munmap
	sub	r3, fp, #131072
	sub	r3, r3, #12
	mov	r2, r3
	sub	r3, fp, #131072
	sub	r3, r3, #12
	ldr	r3, [r3, #-20]
	add	r3, r3, #1
	str	r3, [r2, #-20]
.L27:
	sub	r3, fp, #131072
	sub	r3, r3, #12
	mov	r2, r3
	sub	r3, fp, #131072
	sub	r3, r3, #12
	ldr	r2, [r2, #-20]
	ldr	r3, [r3, #-16]
	cmp	r2, r3
	bcc	.L28
	sub	r3, fp, #131072
	sub	r3, r3, #12
	mov	r2, r3
	mov	r3, #0
	str	r3, [r2, #-20]
	b	.L29
.L30:
	sub	r3, fp, #98304
	sub	r3, r3, #12
	mov	r2, r3
	sub	r3, fp, #131072
	sub	r3, r3, #12
	ldr	r3, [r3, #-20]
	lsl	r3, r3, #2
	add	r3, r2, r3
	ldr	r3, [r3, #-4]
	mov	r1, #0
	mov	r0, r3
	bl	munmap
	sub	r3, fp, #131072
	sub	r3, r3, #12
	mov	r2, r3
	sub	r3, fp, #131072
	sub	r3, r3, #12
	ldr	r3, [r3, #-20]
	add	r3, r3, #1
	str	r3, [r2, #-20]
.L29:
	sub	r3, fp, #131072
	sub	r3, r3, #12
	mov	r2, r3
	sub	r3, fp, #131072
	sub	r3, r3, #12
	ldr	r2, [r2, #-20]
	ldr	r3, [r3, #-8]
	cmp	r2, r3
	bcc	.L30
	mov	r3, #0
.L31:
	ldr	r2, .L35
	ldr	r1, [r2]
	ldr	r2, [fp, #-16]
	eors	r1, r2, r1
	mov	r2, #0
	beq	.L32
	bl	__stack_chk_fail
.L32:
	mov	r0, r3
	sub	sp, fp, #8
	@ sp needed
	pop	{r4, fp, pc}
.L36:
	.align	2
.L35:
	.word	.LC1
	.size	main, .-main
	.ident	"GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0"
	.section	.note.GNU-stack,"",%progbits
