	.file	"184517188.c"
	.intel_syntax noprefix
	.text
	.section	.rodata
.LC0:
	.string	"Nothing interesting here..."
.LC1:
	.string	"# this does nothing..."
	.text
	.globl	winner
	.type	winner, @function
winner:
.LFB6:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	lea	rdi, .LC0[rip]
	call	puts@PLT
	lea	rdi, .LC1[rip]
	call	system@PLT
	mov	edi, 0
	call	exit@PLT
	.cfi_endproc
.LFE6:
	.size	winner, .-winner
	.globl	gadget
	.type	gadget, @function
gadget:
.LFB7:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
#APP
# 13 "the_stack_data/184517188.c" 1
	pop {r0,pc}

# 0 "" 2
#NO_APP
	nop
	pop	rbp
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE7:
	.size	gadget, .-gadget
	.section	.rodata
	.align 8
.LC2:
	.string	"Welcome to ROPLevel2 created by Billy Ellis (@bellis1000)"
	.align 8
.LC3:
	.string	"The objective of this level is to execute a shell command of your choice by using a ROP gadget followed by jumping to system()"
.LC4:
	.string	"Good luck: "
.LC5:
	.string	"%s"
.LC6:
	.string	"Nice try ;)"
	.text
	.globl	main
	.type	main, @function
main:
.LFB8:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 32
	mov	rax, QWORD PTR fs:40
	mov	QWORD PTR -8[rbp], rax
	xor	eax, eax
	lea	rdi, .LC2[rip]
	call	puts@PLT
	lea	rdi, .LC3[rip]
	call	puts@PLT
	lea	rdi, .LC4[rip]
	mov	eax, 0
	call	printf@PLT
	lea	rax, -32[rbp]
	mov	rsi, rax
	lea	rdi, .LC5[rip]
	mov	eax, 0
	call	__isoc99_scanf@PLT
	lea	rdi, .LC6[rip]
	call	puts@PLT
	mov	eax, 0
	mov	rdx, QWORD PTR -8[rbp]
	sub	rdx, QWORD PTR fs:40
	je	.L5
	call	__stack_chk_fail@PLT
.L5:
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE8:
	.size	main, .-main
	.ident	"GCC: (Ubuntu 10.5.0-1ubuntu1~20.04) 10.5.0"
	.section	.note.GNU-stack,"",@progbits
	.section	.note.gnu.property,"a"
	.align 8
	.long	 1f - 0f
	.long	 4f - 1f
	.long	 5
0:
	.string	 "GNU"
1:
	.align 8
	.long	 0xc0000002
	.long	 3f - 2f
2:
	.long	 0x3
3:
	.align 8
4:

	.arch armv5t
	.eabi_attribute 20, 1
	.eabi_attribute 21, 1
	.eabi_attribute 23, 3
	.eabi_attribute 24, 1
	.eabi_attribute 25, 1
	.eabi_attribute 26, 2
	.eabi_attribute 30, 6
	.eabi_attribute 34, 0
	.eabi_attribute 18, 4
	.file	"184517188.c"
	.text
	.section	.rodata
	.align	2
.LC0:
	.ascii	"Nothing interesting here...\000"
	.align	2
.LC1:
	.ascii	"# this does nothing...\000"
	.text
	.align	2
	.global	winner
	.syntax unified
	.arm
	.fpu softvfp
	.type	winner, %function
winner:
	@ args = 0, pretend = 0, frame = 0
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	ldr	r0, .L2
	bl	puts
	ldr	r0, .L2+4
	bl	system
	mov	r0, #0
	bl	exit
.L3:
	.align	2
.L2:
	.word	.LC0
	.word	.LC1
	.size	winner, .-winner
	.align	2
	.global	gadget
	.syntax unified
	.arm
	.fpu softvfp
	.type	gadget, %function
gadget:
	@ args = 0, pretend = 0, frame = 0
	@ frame_needed = 1, uses_anonymous_args = 0
	@ link register save eliminated.
	str	fp, [sp, #-4]!
	add	fp, sp, #0
	.syntax divided
@ 13 "the_stack_data/184517188.c" 1
	pop {r0,pc}

@ 0 "" 2
	.arm
	.syntax unified
	nop
	add	sp, fp, #0
	@ sp needed
	ldr	fp, [sp], #4
	bx	lr
	.size	gadget, .-gadget
	.section	.rodata
	.align	2
.LC2:
	.ascii	"Welcome to ROPLevel2 created by Billy Ellis (@belli"
	.ascii	"s1000)\000"
	.align	2
.LC3:
	.ascii	"The objective of this level is to execute a shell c"
	.ascii	"ommand of your choice by using a ROP gadget followe"
	.ascii	"d by jumping to system()\000"
	.align	2
.LC4:
	.ascii	"Good luck: \000"
	.align	2
.LC5:
	.ascii	"%s\000"
	.align	2
.LC6:
	.ascii	"Nice try ;)\000"
	.align	2
.LC7:
	.word	__stack_chk_guard
	.text
	.align	2
	.global	main
	.syntax unified
	.arm
	.fpu softvfp
	.type	main, %function
main:
	@ args = 0, pretend = 0, frame = 24
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #24
	ldr	r3, .L8
	ldr	r3, [r3]
	str	r3, [fp, #-8]
	mov	r3,#0
	ldr	r0, .L8+4
	bl	puts
	ldr	r0, .L8+8
	bl	puts
	ldr	r0, .L8+12
	bl	printf
	sub	r3, fp, #24
	mov	r1, r3
	ldr	r0, .L8+16
	bl	__isoc99_scanf
	ldr	r0, .L8+20
	bl	puts
	mov	r3, #0
	ldr	r2, .L8
	ldr	r1, [r2]
	ldr	r2, [fp, #-8]
	eors	r1, r2, r1
	mov	r2, #0
	beq	.L7
	bl	__stack_chk_fail
.L7:
	mov	r0, r3
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
.L9:
	.align	2
.L8:
	.word	.LC7
	.word	.LC2
	.word	.LC3
	.word	.LC4
	.word	.LC5
	.word	.LC6
	.size	main, .-main
	.ident	"GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0"
	.section	.note.GNU-stack,"",%progbits
