	.file	"52020.c"
	.intel_syntax noprefix
	.text
	.globl	sandbox_root
	.bss
	.align 8
	.type	sandbox_root, @object
	.size	sandbox_root, 8
sandbox_root:
	.zero	8
	.globl	new_cd
	.align 8
	.type	new_cd, @object
	.size	new_cd, 8
new_cd:
	.zero	8
	.globl	verbose
	.type	verbose, @object
	.size	verbose, 1
verbose:
	.zero	1
	.globl	maps
	.align 8
	.type	maps, @object
	.size	maps, 8
maps:
	.zero	8
	.globl	workspaces
	.align 8
	.type	workspaces, @object
	.size	workspaces, 8
workspaces:
	.zero	8
	.local	execution_mode
	.comm	execution_mode,4,4
	.section	.rodata
	.align 8
.LC0:
	.string	"At line %d, ABORTED (%d: %s)!\n"
	.text
	.type	_check, @function
_check:
.LFB36:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	push	rbx
	sub	rsp, 24
	.cfi_offset 3, -24
	mov	DWORD PTR -20[rbp], edi
	mov	DWORD PTR -24[rbp], esi
	cmp	DWORD PTR -20[rbp], 0
	jne	.L3
	call	__errno_location@PLT
	mov	eax, DWORD PTR [rax]
	mov	edi, eax
	call	strerror@PLT
	mov	rbx, rax
	call	__errno_location@PLT
	mov	ecx, DWORD PTR [rax]
	mov	rax, QWORD PTR stderr[rip]
	mov	edx, DWORD PTR -24[rbp]
	mov	r8, rbx
	lea	rsi, .LC0[rip]
	mov	rdi, rax
	mov	eax, 0
	call	fprintf@PLT
	mov	rax, QWORD PTR stdout[rip]
	mov	rdi, rax
	call	fflush@PLT
	mov	rax, QWORD PTR stderr[rip]
	mov	rdi, rax
	call	fflush@PLT
	mov	edi, 1
	call	_exit@PLT
.L3:
	nop
	mov	rbx, QWORD PTR -8[rbp]
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE36:
	.size	_check, .-_check
	.section	.rodata
.LC1:
	.string	"/proc/%d/%s"
	.text
	.type	open_proc_file, @function
open_proc_file:
.LFB37:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 4096
	or	QWORD PTR [rsp], 0
	sub	rsp, 48
	mov	DWORD PTR -4132[rbp], edi
	mov	QWORD PTR -4144[rbp], rsi
	mov	DWORD PTR -4136[rbp], edx
	mov	rax, QWORD PTR fs:40
	mov	QWORD PTR -8[rbp], rax
	xor	eax, eax
	mov	rcx, QWORD PTR -4144[rbp]
	mov	edx, DWORD PTR -4132[rbp]
	lea	rax, -4112[rbp]
	mov	r8, rcx
	mov	ecx, edx
	lea	rdx, .LC1[rip]
	mov	esi, 4096
	mov	rdi, rax
	mov	eax, 0
	call	snprintf@PLT
	mov	DWORD PTR -4120[rbp], eax
	cmp	DWORD PTR -4120[rbp], 0
	js	.L5
	mov	eax, DWORD PTR -4120[rbp]
	cmp	eax, 4095
	ja	.L5
	mov	eax, 1
	jmp	.L6
.L5:
	mov	eax, 0
.L6:
	mov	esi, 124
	mov	edi, eax
	call	_check
	mov	edx, DWORD PTR -4136[rbp]
	lea	rax, -4112[rbp]
	mov	esi, edx
	mov	rdi, rax
	mov	eax, 0
	call	open@PLT
	mov	DWORD PTR -4116[rbp], eax
	cmp	DWORD PTR -4116[rbp], -1
	setne	al
	movzx	eax, al
	mov	esi, 126
	mov	edi, eax
	call	_check
	mov	eax, DWORD PTR -4116[rbp]
	mov	rcx, QWORD PTR -8[rbp]
	sub	rcx, QWORD PTR fs:40
	je	.L8
	call	__stack_chk_fail@PLT
.L8:
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE37:
	.size	open_proc_file, .-open_proc_file
	.type	touch, @function
touch:
.LFB38:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 32
	mov	QWORD PTR -24[rbp], rdi
	mov	rax, QWORD PTR -24[rbp]
	mov	edx, 292
	mov	esi, 64
	mov	rdi, rax
	mov	eax, 0
	call	open@PLT
	mov	DWORD PTR -4[rbp], eax
	cmp	DWORD PTR -4[rbp], -1
	jne	.L10
	call	__errno_location@PLT
	mov	eax, DWORD PTR [rax]
	cmp	eax, 21
	je	.L10
	cmp	DWORD PTR -4[rbp], -1
	setne	al
	movzx	eax, al
	mov	esi, 135
	mov	edi, eax
	call	_check
.L10:
	mov	eax, DWORD PTR -4[rbp]
	mov	edi, eax
	call	close@PLT
	nop
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE38:
	.size	touch, .-touch
	.type	mkpath, @function
mkpath:
.LFB39:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 4096
	or	QWORD PTR [rsp], 0
	sub	rsp, 48
	mov	QWORD PTR -4136[rbp], rdi
	mov	rax, QWORD PTR fs:40
	mov	QWORD PTR -8[rbp], rax
	xor	eax, eax
	mov	rax, QWORD PTR -4136[rbp]
	mov	rdi, rax
	call	opendir@PLT
	mov	QWORD PTR -4120[rbp], rax
	cmp	QWORD PTR -4120[rbp], 0
	je	.L12
	mov	rax, QWORD PTR -4120[rbp]
	mov	rdi, rax
	call	closedir@PLT
	jmp	.L11
.L12:
	mov	rcx, QWORD PTR -4136[rbp]
	lea	rax, -4112[rbp]
	mov	edx, 4096
	mov	rsi, rcx
	mov	rdi, rax
	call	strncpy@PLT
	lea	rax, -4112[rbp]
	mov	rdi, rax
	call	dirname@PLT
	mov	rdi, rax
	call	mkpath
	mov	rax, QWORD PTR -4136[rbp]
	mov	esi, 511
	mov	rdi, rax
	call	mkdir@PLT
	mov	DWORD PTR -4124[rbp], eax
	cmp	DWORD PTR -4124[rbp], 0
	je	.L14
	call	__errno_location@PLT
	mov	eax, DWORD PTR [rax]
	cmp	eax, 17
	jne	.L15
.L14:
	mov	eax, 1
	jmp	.L16
.L15:
	mov	eax, 0
.L16:
	mov	esi, 156
	mov	edi, eax
	call	_check
.L11:
	mov	rax, QWORD PTR -8[rbp]
	sub	rax, QWORD PTR fs:40
	je	.L17
	call	__stack_chk_fail@PLT
.L17:
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE39:
	.size	mkpath, .-mkpath
	.section	.rodata
	.align 8
.LC2:
	.string	"--> Mapping %d:%d to root:root within container namespace\n"
.LC3:
	.string	"uid_map"
.LC4:
	.string	"0\t%d\t1\n"
.LC5:
	.string	"setgroups"
.LC6:
	.string	"gid_map"
.LC7:
	.string	"0\t%d\t1"
	.text
	.type	configure_user_namespace, @function
configure_user_namespace:
.LFB40:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 272
	mov	DWORD PTR -260[rbp], edi
	mov	DWORD PTR -264[rbp], esi
	mov	DWORD PTR -268[rbp], edx
	mov	rax, QWORD PTR fs:40
	mov	QWORD PTR -8[rbp], rax
	xor	eax, eax
	mov	DWORD PTR -248[rbp], 0
	movzx	eax, BYTE PTR verbose[rip]
	test	al, al
	je	.L19
	mov	rax, QWORD PTR stderr[rip]
	mov	ecx, DWORD PTR -264[rbp]
	mov	edx, DWORD PTR -260[rbp]
	lea	rsi, .LC2[rip]
	mov	rdi, rax
	mov	eax, 0
	call	fprintf@PLT
.L19:
	mov	eax, DWORD PTR -268[rbp]
	mov	edx, 1
	lea	rsi, .LC3[rip]
	mov	edi, eax
	call	open_proc_file
	mov	DWORD PTR -244[rbp], eax
	cmp	DWORD PTR -244[rbp], -1
	setne	al
	movzx	eax, al
	mov	esi, 184
	mov	edi, eax
	call	_check
	mov	edx, DWORD PTR -260[rbp]
	lea	rax, -224[rbp]
	mov	ecx, edx
	lea	rdx, .LC4[rip]
	mov	esi, 100
	mov	rdi, rax
	mov	eax, 0
	call	snprintf@PLT
	mov	DWORD PTR -248[rbp], eax
	cmp	DWORD PTR -248[rbp], 0
	jle	.L20
	mov	eax, DWORD PTR -248[rbp]
	cmp	eax, 100
	ja	.L20
	mov	eax, 1
	jmp	.L21
.L20:
	mov	eax, 0
.L21:
	mov	esi, 187
	mov	edi, eax
	call	_check
	mov	eax, DWORD PTR -248[rbp]
	movsx	rdx, eax
	lea	rcx, -224[rbp]
	mov	eax, DWORD PTR -244[rbp]
	mov	rsi, rcx
	mov	edi, eax
	call	write@PLT
	mov	edx, DWORD PTR -248[rbp]
	movsx	rdx, edx
	cmp	rax, rdx
	sete	al
	movzx	eax, al
	mov	esi, 188
	mov	edi, eax
	call	_check
	mov	eax, DWORD PTR -244[rbp]
	mov	edi, eax
	call	close@PLT
	mov	eax, DWORD PTR -268[rbp]
	mov	edx, 1
	lea	rsi, .LC5[rip]
	mov	edi, eax
	call	open_proc_file
	mov	DWORD PTR -240[rbp], eax
	mov	DWORD PTR -229[rbp], 2037278052
	mov	BYTE PTR -225[rbp], 0
	lea	rcx, -229[rbp]
	mov	eax, DWORD PTR -240[rbp]
	mov	edx, 5
	mov	rsi, rcx
	mov	edi, eax
	call	write@PLT
	cmp	rax, 5
	sete	al
	movzx	eax, al
	mov	esi, 194
	mov	edi, eax
	call	_check
	mov	eax, DWORD PTR -240[rbp]
	mov	edi, eax
	call	close@PLT
	mov	eax, DWORD PTR -268[rbp]
	mov	edx, 1
	lea	rsi, .LC6[rip]
	mov	edi, eax
	call	open_proc_file
	mov	DWORD PTR -236[rbp], eax
	cmp	DWORD PTR -236[rbp], -1
	setne	al
	movzx	eax, al
	mov	esi, 199
	mov	edi, eax
	call	_check
	mov	edx, DWORD PTR -264[rbp]
	lea	rax, -112[rbp]
	mov	ecx, edx
	lea	rdx, .LC7[rip]
	mov	esi, 100
	mov	rdi, rax
	mov	eax, 0
	call	snprintf@PLT
	mov	DWORD PTR -248[rbp], eax
	cmp	DWORD PTR -248[rbp], 0
	jle	.L22
	mov	eax, DWORD PTR -248[rbp]
	cmp	eax, 100
	ja	.L22
	mov	eax, 1
	jmp	.L23
.L22:
	mov	eax, 0
.L23:
	mov	esi, 202
	mov	edi, eax
	call	_check
	mov	eax, DWORD PTR -248[rbp]
	movsx	rdx, eax
	lea	rcx, -112[rbp]
	mov	eax, DWORD PTR -236[rbp]
	mov	rsi, rcx
	mov	edi, eax
	call	write@PLT
	mov	edx, DWORD PTR -248[rbp]
	movsx	rdx, edx
	cmp	rax, rdx
	sete	al
	movzx	eax, al
	mov	esi, 203
	mov	edi, eax
	call	_check
	nop
	mov	rax, QWORD PTR -8[rbp]
	sub	rax, QWORD PTR fs:40
	je	.L24
	call	__stack_chk_fail@PLT
.L24:
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE40:
	.size	configure_user_namespace, .-configure_user_namespace
	.section	.rodata
.LC8:
	.string	"%s/upper/%s"
.LC9:
	.string	"%s/work/%s"
.LC10:
	.string	"/"
	.align 8
.LC11:
	.string	"--> Mounting overlay of %s at %s (modifications in %s, workspace in %s)\n"
	.align 8
.LC12:
	.string	"lowerdir=%s,upperdir=%s,workdir=%s"
.LC13:
	.string	"overlay"
	.text
	.type	mount_overlay, @function
mount_overlay:
.LFB41:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	lea	r11, -20480[rsp]
.LPSRL0:
	sub	rsp, 4096
	or	DWORD PTR [rsp], 0
	cmp	rsp, r11
	jne	.LPSRL0
	sub	rsp, 96
	mov	QWORD PTR -20536[rbp], rdi
	mov	QWORD PTR -20544[rbp], rsi
	mov	QWORD PTR -20552[rbp], rdx
	mov	QWORD PTR -20560[rbp], rcx
	mov	DWORD PTR -20564[rbp], r8d
	mov	DWORD PTR -20568[rbp], r9d
	mov	rax, QWORD PTR fs:40
	mov	QWORD PTR -8[rbp], rax
	xor	eax, eax
	mov	rcx, QWORD PTR -20552[rbp]
	mov	rdx, QWORD PTR -20560[rbp]
	lea	rax, -20528[rbp]
	mov	r8, rcx
	mov	rcx, rdx
	lea	rdx, .LC8[rip]
	mov	esi, 4096
	mov	rdi, rax
	mov	eax, 0
	call	snprintf@PLT
	mov	rcx, QWORD PTR -20552[rbp]
	mov	rdx, QWORD PTR -20560[rbp]
	lea	rax, -16432[rbp]
	mov	r8, rcx
	mov	rcx, rdx
	lea	rdx, .LC9[rip]
	mov	esi, 4096
	mov	rdi, rax
	mov	eax, 0
	call	snprintf@PLT
	mov	rax, QWORD PTR -20536[rbp]
	movzx	eax, BYTE PTR [rax]
	test	al, al
	jne	.L26
	lea	rax, .LC10[rip]
	mov	QWORD PTR -20536[rbp], rax
.L26:
	mov	rax, QWORD PTR -20544[rbp]
	movzx	eax, BYTE PTR [rax]
	test	al, al
	jne	.L27
	lea	rax, .LC10[rip]
	mov	QWORD PTR -20544[rbp], rax
.L27:
	movzx	eax, BYTE PTR verbose[rip]
	test	al, al
	je	.L28
	mov	rax, QWORD PTR stderr[rip]
	lea	rdi, -16432[rbp]
	lea	rsi, -20528[rbp]
	mov	rcx, QWORD PTR -20544[rbp]
	mov	rdx, QWORD PTR -20536[rbp]
	mov	r9, rdi
	mov	r8, rsi
	lea	rsi, .LC11[rip]
	mov	rdi, rax
	mov	eax, 0
	call	fprintf@PLT
.L28:
	lea	rax, -20528[rbp]
	mov	rdi, rax
	call	mkpath
	lea	rax, -16432[rbp]
	mov	rdi, rax
	call	mkpath
	lea	rsi, -16432[rbp]
	lea	rcx, -20528[rbp]
	mov	rdx, QWORD PTR -20536[rbp]
	lea	rax, -12336[rbp]
	mov	r9, rsi
	mov	r8, rcx
	mov	rcx, rdx
	lea	rdx, .LC12[rip]
	mov	esi, 12316
	mov	rdi, rax
	mov	eax, 0
	call	snprintf@PLT
	lea	rdx, -12336[rbp]
	mov	rax, QWORD PTR -20544[rbp]
	mov	r8, rdx
	mov	ecx, 0
	lea	rdx, .LC13[rip]
	mov	rsi, rax
	lea	rdi, .LC13[rip]
	call	mount@PLT
	test	eax, eax
	sete	al
	movzx	eax, al
	mov	esi, 243
	mov	edi, eax
	call	_check
	mov	edx, DWORD PTR -20568[rbp]
	mov	ecx, DWORD PTR -20564[rbp]
	mov	rax, QWORD PTR -20544[rbp]
	mov	esi, ecx
	mov	rdi, rax
	call	chown@PLT
	test	eax, eax
	sete	al
	movzx	eax, al
	mov	esi, 247
	mov	edi, eax
	call	_check
	nop
	mov	rax, QWORD PTR -8[rbp]
	sub	rax, QWORD PTR fs:40
	je	.L29
	call	__stack_chk_fail@PLT
.L29:
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE41:
	.size	mount_overlay, .-mount_overlay
	.section	.rodata
.LC14:
	.string	"%s/proc"
.LC15:
	.string	"--> Mounting procfs at %s\n"
.LC16:
	.string	""
.LC17:
	.string	"proc"
	.text
	.type	mount_procfs, @function
mount_procfs:
.LFB42:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 4096
	or	QWORD PTR [rsp], 0
	sub	rsp, 32
	mov	QWORD PTR -4120[rbp], rdi
	mov	DWORD PTR -4124[rbp], esi
	mov	DWORD PTR -4128[rbp], edx
	mov	rax, QWORD PTR fs:40
	mov	QWORD PTR -8[rbp], rax
	xor	eax, eax
	mov	rdx, QWORD PTR -4120[rbp]
	lea	rax, -4112[rbp]
	mov	rcx, rdx
	lea	rdx, .LC14[rip]
	mov	esi, 4096
	mov	rdi, rax
	mov	eax, 0
	call	snprintf@PLT
	movzx	eax, BYTE PTR verbose[rip]
	test	al, al
	je	.L31
	mov	rax, QWORD PTR stderr[rip]
	lea	rdx, -4112[rbp]
	lea	rsi, .LC15[rip]
	mov	rdi, rax
	mov	eax, 0
	call	fprintf@PLT
.L31:
	lea	rax, -4112[rbp]
	lea	r8, .LC16[rip]
	mov	ecx, 0
	lea	rdx, .LC17[rip]
	mov	rsi, rax
	lea	rdi, .LC17[rip]
	call	mount@PLT
	test	eax, eax
	sete	al
	movzx	eax, al
	mov	esi, 259
	mov	edi, eax
	call	_check
	mov	edx, DWORD PTR -4128[rbp]
	mov	ecx, DWORD PTR -4124[rbp]
	lea	rax, -4112[rbp]
	mov	esi, ecx
	mov	rdi, rax
	call	chown@PLT
	nop
	mov	rax, QWORD PTR -8[rbp]
	sub	rax, QWORD PTR fs:40
	je	.L32
	call	__stack_chk_fail@PLT
.L32:
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE42:
	.size	mount_procfs, .-mount_procfs
	.section	.rodata
	.align 8
.LC18:
	.string	"--> Bind-mounting %s over %s (read-only)\n"
.LC19:
	.string	"--> Bind-mounting %s over %s\n"
	.text
	.type	bind_mount, @function
bind_mount:
.LFB43:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 32
	mov	QWORD PTR -8[rbp], rdi
	mov	QWORD PTR -16[rbp], rsi
	mov	eax, edx
	mov	BYTE PTR -20[rbp], al
	movzx	eax, BYTE PTR verbose[rip]
	test	al, al
	je	.L34
	cmp	BYTE PTR -20[rbp], 0
	je	.L35
	mov	rax, QWORD PTR stderr[rip]
	mov	rcx, QWORD PTR -16[rbp]
	mov	rdx, QWORD PTR -8[rbp]
	lea	rsi, .LC18[rip]
	mov	rdi, rax
	mov	eax, 0
	call	fprintf@PLT
	jmp	.L34
.L35:
	mov	rax, QWORD PTR stderr[rip]
	mov	rcx, QWORD PTR -16[rbp]
	mov	rdx, QWORD PTR -8[rbp]
	lea	rsi, .LC19[rip]
	mov	rdi, rax
	mov	eax, 0
	call	fprintf@PLT
.L34:
	mov	rax, QWORD PTR -16[rbp]
	mov	rdi, rax
	call	touch
	mov	rsi, QWORD PTR -16[rbp]
	mov	rax, QWORD PTR -8[rbp]
	mov	r8d, 0
	mov	ecx, 20480
	lea	rdx, .LC16[rip]
	mov	rdi, rax
	call	mount@PLT
	test	eax, eax
	sete	al
	movzx	eax, al
	mov	esi, 279
	mov	edi, eax
	call	_check
	cmp	BYTE PTR -20[rbp], 0
	je	.L37
	mov	rsi, QWORD PTR -16[rbp]
	mov	rax, QWORD PTR -8[rbp]
	mov	r8d, 0
	mov	ecx, 4135
	lea	rdx, .LC16[rip]
	mov	rdi, rax
	call	mount@PLT
	test	eax, eax
	sete	al
	movzx	eax, al
	mov	esi, 290
	mov	edi, eax
	call	_check
.L37:
	nop
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE43:
	.size	bind_mount, .-bind_mount
	.section	.rodata
.LC20:
	.string	"%s/dev/null"
.LC21:
	.string	"/dev/null"
.LC22:
	.string	"%s/dev/tty"
.LC23:
	.string	"/dev/tty"
.LC24:
	.string	"/dev/urandom"
.LC25:
	.string	"%s/dev/urandom"
.LC26:
	.string	"%s/dev/pts"
.LC27:
	.string	"ptmxmode=0666"
.LC28:
	.string	"devpts"
.LC29:
	.string	"%s/dev/pts/ptmx"
.LC30:
	.string	"%s/dev/ptmx"
	.text
	.type	mount_dev, @function
mount_dev:
.LFB44:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 4096
	or	QWORD PTR [rsp], 0
	sub	rsp, 4096
	or	QWORD PTR [rsp], 0
	sub	rsp, 32
	mov	QWORD PTR -8216[rbp], rdi
	mov	rax, QWORD PTR fs:40
	mov	QWORD PTR -8[rbp], rax
	xor	eax, eax
	mov	rdx, QWORD PTR -8216[rbp]
	lea	rax, -8208[rbp]
	mov	rcx, rdx
	lea	rdx, .LC20[rip]
	mov	esi, 4096
	mov	rdi, rax
	mov	eax, 0
	call	snprintf@PLT
	lea	rax, -8208[rbp]
	mov	edx, 0
	mov	rsi, rax
	lea	rdi, .LC21[rip]
	call	bind_mount
	mov	rdx, QWORD PTR -8216[rbp]
	lea	rax, -8208[rbp]
	mov	rcx, rdx
	lea	rdx, .LC22[rip]
	mov	esi, 4096
	mov	rdi, rax
	mov	eax, 0
	call	snprintf@PLT
	lea	rax, -8208[rbp]
	mov	edx, 0
	mov	rsi, rax
	lea	rdi, .LC23[rip]
	call	bind_mount
	mov	esi, 0
	lea	rdi, .LC24[rip]
	call	access@PLT
	test	eax, eax
	jne	.L39
	mov	rdx, QWORD PTR -8216[rbp]
	lea	rax, -8208[rbp]
	mov	rcx, rdx
	lea	rdx, .LC25[rip]
	mov	esi, 4096
	mov	rdi, rax
	mov	eax, 0
	call	snprintf@PLT
	lea	rax, -8208[rbp]
	mov	edx, 0
	mov	rsi, rax
	lea	rdi, .LC24[rip]
	call	bind_mount
.L39:
	mov	rdx, QWORD PTR -8216[rbp]
	lea	rax, -8208[rbp]
	mov	rcx, rdx
	lea	rdx, .LC26[rip]
	mov	esi, 4096
	mov	rdi, rax
	mov	eax, 0
	call	snprintf@PLT
	lea	rax, -8208[rbp]
	mov	rdi, rax
	call	mkpath
	lea	rax, -8208[rbp]
	lea	r8, .LC27[rip]
	mov	ecx, 0
	lea	rdx, .LC28[rip]
	mov	rsi, rax
	lea	rdi, .LC28[rip]
	call	mount@PLT
	test	eax, eax
	sete	al
	movzx	eax, al
	mov	esi, 319
	mov	edi, eax
	call	_check
	mov	rdx, QWORD PTR -8216[rbp]
	lea	rax, -8208[rbp]
	mov	rcx, rdx
	lea	rdx, .LC29[rip]
	mov	esi, 4096
	mov	rdi, rax
	mov	eax, 0
	call	snprintf@PLT
	mov	rdx, QWORD PTR -8216[rbp]
	lea	rax, -4112[rbp]
	mov	rcx, rdx
	lea	rdx, .LC30[rip]
	mov	esi, 4096
	mov	rdi, rax
	mov	eax, 0
	call	snprintf@PLT
	lea	rcx, -4112[rbp]
	lea	rax, -8208[rbp]
	mov	edx, 0
	mov	rsi, rcx
	mov	rdi, rax
	call	bind_mount
	nop
	mov	rax, QWORD PTR -8[rbp]
	sub	rax, QWORD PTR fs:40
	je	.L40
	call	__stack_chk_fail@PLT
.L40:
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE44:
	.size	mount_dev, .-mount_dev
	.section	.rodata
.LC31:
	.string	"%s/%s"
.LC32:
	.string	"--> mapping %s to %s\n"
.LC33:
	.string	"--> workspacing %s to %s\n"
	.text
	.type	mount_maps, @function
mount_maps:
.LFB45:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 4096
	or	QWORD PTR [rsp], 0
	sub	rsp, 64
	mov	QWORD PTR -4136[rbp], rdi
	mov	QWORD PTR -4144[rbp], rsi
	mov	eax, edx
	mov	BYTE PTR -4148[rbp], al
	mov	rax, QWORD PTR fs:40
	mov	QWORD PTR -8[rbp], rax
	xor	eax, eax
	mov	rax, QWORD PTR -4144[rbp]
	mov	QWORD PTR -4128[rbp], rax
	jmp	.L42
.L47:
	mov	rax, QWORD PTR -4128[rbp]
	mov	rax, QWORD PTR [rax]
	mov	QWORD PTR -4120[rbp], rax
	jmp	.L43
.L44:
	add	QWORD PTR -4120[rbp], 1
.L43:
	mov	rax, QWORD PTR -4120[rbp]
	movzx	eax, BYTE PTR [rax]
	cmp	al, 47
	je	.L44
	mov	rcx, QWORD PTR -4120[rbp]
	mov	rdx, QWORD PTR -4136[rbp]
	lea	rax, -4112[rbp]
	mov	r8, rcx
	mov	rcx, rdx
	lea	rdx, .LC31[rip]
	mov	esi, 4096
	mov	rdi, rax
	mov	eax, 0
	call	snprintf@PLT
	movzx	eax, BYTE PTR verbose[rip]
	test	al, al
	je	.L45
	cmp	BYTE PTR -4148[rbp], 0
	je	.L46
	mov	rax, QWORD PTR -4128[rbp]
	mov	rdx, QWORD PTR 8[rax]
	mov	rax, QWORD PTR stderr[rip]
	lea	rcx, -4112[rbp]
	lea	rsi, .LC32[rip]
	mov	rdi, rax
	mov	eax, 0
	call	fprintf@PLT
	jmp	.L45
.L46:
	mov	rax, QWORD PTR -4128[rbp]
	mov	rdx, QWORD PTR 8[rax]
	mov	rax, QWORD PTR stderr[rip]
	lea	rcx, -4112[rbp]
	lea	rsi, .LC33[rip]
	mov	rdi, rax
	mov	eax, 0
	call	fprintf@PLT
.L45:
	lea	rax, -4112[rbp]
	mov	rdi, rax
	call	mkpath
	movzx	eax, BYTE PTR -4148[rbp]
	movsx	edx, al
	mov	rax, QWORD PTR -4128[rbp]
	mov	rax, QWORD PTR 8[rax]
	lea	rcx, -4112[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	bind_mount
	mov	rax, QWORD PTR -4128[rbp]
	mov	rax, QWORD PTR 16[rax]
	mov	QWORD PTR -4128[rbp], rax
.L42:
	cmp	QWORD PTR -4128[rbp], 0
	jne	.L47
	nop
	mov	rax, QWORD PTR -8[rbp]
	sub	rax, QWORD PTR fs:40
	je	.L48
	call	__stack_chk_fail@PLT
.L48:
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE45:
	.size	mount_maps, .-mount_maps
	.section	.rodata
	.align 8
.LC34:
	.string	"--> Creating overlay workdir at /proc\n"
.LC35:
	.string	"size=1G"
.LC36:
	.string	"tmpfs"
.LC37:
	.string	"/proc"
.LC38:
	.string	"rootfs"
	.text
	.type	mount_the_world, @function
mount_the_world:
.LFB46:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 32
	mov	QWORD PTR -8[rbp], rdi
	mov	QWORD PTR -16[rbp], rsi
	mov	QWORD PTR -24[rbp], rdx
	mov	DWORD PTR -28[rbp], ecx
	mov	DWORD PTR -32[rbp], r8d
	movzx	eax, BYTE PTR verbose[rip]
	test	al, al
	je	.L50
	mov	rax, QWORD PTR stderr[rip]
	mov	rcx, rax
	mov	edx, 38
	mov	esi, 1
	lea	rdi, .LC34[rip]
	call	fwrite@PLT
.L50:
	lea	r8, .LC35[rip]
	mov	ecx, 0
	lea	rdx, .LC36[rip]
	lea	rsi, .LC37[rip]
	lea	rdi, .LC36[rip]
	call	mount@PLT
	test	eax, eax
	sete	al
	movzx	eax, al
	mov	esi, 377
	mov	edi, eax
	call	_check
	mov	ecx, DWORD PTR -32[rbp]
	mov	edx, DWORD PTR -28[rbp]
	mov	rsi, QWORD PTR -8[rbp]
	mov	rax, QWORD PTR -8[rbp]
	mov	r9d, ecx
	mov	r8d, edx
	lea	rcx, .LC37[rip]
	lea	rdx, .LC38[rip]
	mov	rdi, rax
	call	mount_overlay
	mov	rcx, QWORD PTR -16[rbp]
	mov	rax, QWORD PTR -8[rbp]
	mov	edx, 1
	mov	rsi, rcx
	mov	rdi, rax
	call	mount_maps
	mov	edx, DWORD PTR -32[rbp]
	mov	ecx, DWORD PTR -28[rbp]
	mov	rax, QWORD PTR -8[rbp]
	mov	esi, ecx
	mov	rdi, rax
	call	mount_procfs
	mov	rax, QWORD PTR -8[rbp]
	mov	rdi, rax
	call	mount_dev
	mov	rcx, QWORD PTR -24[rbp]
	mov	rax, QWORD PTR -8[rbp]
	mov	edx, 0
	mov	rsi, rcx
	mov	rdi, rax
	call	mount_maps
	mov	edx, DWORD PTR -32[rbp]
	mov	eax, DWORD PTR -28[rbp]
	mov	esi, eax
	lea	rdi, .LC16[rip]
	call	mount_procfs
	nop
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE46:
	.size	mount_the_world, .-mount_the_world
	.section	.rodata
.LC39:
	.string	"."
.LC40:
	.string	"About to run `%s` "
.LC41:
	.string	"`%s` "
	.align 8
.LC42:
	.string	"ERROR: Failed to run %s: %d (%s)\n"
	.text
	.type	sandbox_main, @function
sandbox_main:
.LFB47:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	push	rbx
	sub	rsp, 216
	.cfi_offset 3, -24
	mov	QWORD PTR -200[rbp], rdi
	mov	QWORD PTR -208[rbp], rsi
	mov	DWORD PTR -212[rbp], edx
	mov	QWORD PTR -224[rbp], rcx
	mov	rax, QWORD PTR fs:40
	mov	QWORD PTR -24[rbp], rax
	xor	eax, eax
	mov	rax, QWORD PTR -200[rbp]
	movzx	eax, BYTE PTR [rax]
	test	al, al
	jne	.L52
	lea	rax, .LC10[rip]
	mov	QWORD PTR -200[rbp], rax
.L52:
	mov	rax, QWORD PTR -200[rbp]
	mov	rdi, rax
	call	chdir@PLT
	test	eax, eax
	sete	al
	movzx	eax, al
	mov	esi, 420
	mov	edi, eax
	call	_check
	lea	rdx, .LC39[rip]
	lea	rsi, .LC39[rip]
	mov	edi, 155
	mov	eax, 0
	call	syscall@PLT
	test	rax, rax
	jne	.L53
	mov	esi, 2
	lea	rdi, .LC39[rip]
	call	umount2@PLT
	test	eax, eax
	sete	al
	movzx	eax, al
	mov	esi, 422
	mov	edi, eax
	call	_check
	lea	rdi, .LC10[rip]
	call	chdir@PLT
	test	eax, eax
	sete	al
	movzx	eax, al
	mov	esi, 423
	mov	edi, eax
	call	_check
	jmp	.L54
.L53:
	mov	rax, QWORD PTR -200[rbp]
	mov	rdi, rax
	call	chroot@PLT
	test	eax, eax
	sete	al
	movzx	eax, al
	mov	esi, 425
	mov	edi, eax
	call	_check
.L54:
	cmp	QWORD PTR -208[rbp], 0
	je	.L55
	mov	rax, QWORD PTR -208[rbp]
	mov	rdi, rax
	call	mkpath
	mov	rax, QWORD PTR -208[rbp]
	mov	rdi, rax
	call	chdir@PLT
	test	eax, eax
	sete	al
	movzx	eax, al
	mov	esi, 431
	mov	edi, eax
	call	_check
.L55:
	call	fork@PLT
	mov	DWORD PTR -168[rbp], eax
	cmp	DWORD PTR -168[rbp], 0
	jne	.L56
	movzx	eax, BYTE PTR verbose[rip]
	test	al, al
	je	.L57
	mov	rax, QWORD PTR -224[rbp]
	mov	rdx, QWORD PTR [rax]
	mov	rax, QWORD PTR stderr[rip]
	lea	rsi, .LC40[rip]
	mov	rdi, rax
	mov	eax, 0
	call	fprintf@PLT
	mov	DWORD PTR -172[rbp], 1
	jmp	.L58
.L59:
	mov	eax, DWORD PTR -172[rbp]
	cdqe
	lea	rdx, 0[0+rax*8]
	mov	rax, QWORD PTR -224[rbp]
	add	rax, rdx
	mov	rdx, QWORD PTR [rax]
	mov	rax, QWORD PTR stderr[rip]
	lea	rsi, .LC41[rip]
	mov	rdi, rax
	mov	eax, 0
	call	fprintf@PLT
	add	DWORD PTR -172[rbp], 1
.L58:
	mov	eax, DWORD PTR -172[rbp]
	cmp	eax, DWORD PTR -212[rbp]
	jl	.L59
	mov	rax, QWORD PTR stderr[rip]
	mov	rsi, rax
	mov	edi, 10
	call	fputc@PLT
.L57:
	mov	rdx, QWORD PTR environ[rip]
	mov	rax, QWORD PTR -224[rbp]
	mov	rax, QWORD PTR [rax]
	mov	rcx, QWORD PTR -224[rbp]
	mov	rsi, rcx
	mov	rdi, rax
	call	execve@PLT
	call	__errno_location@PLT
	mov	eax, DWORD PTR [rax]
	mov	edi, eax
	call	strerror@PLT
	mov	rbx, rax
	call	__errno_location@PLT
	mov	ecx, DWORD PTR [rax]
	mov	rax, QWORD PTR -224[rbp]
	mov	rdx, QWORD PTR [rax]
	mov	rax, QWORD PTR stderr[rip]
	mov	r8, rbx
	lea	rsi, .LC42[rip]
	mov	rdi, rax
	mov	eax, 0
	call	fprintf@PLT
	mov	rax, QWORD PTR stdout[rip]
	mov	rdi, rax
	call	fflush@PLT
	mov	rax, QWORD PTR stderr[rip]
	mov	rdi, rax
	call	fflush@PLT
	mov	edi, 1
	call	_exit@PLT
.L56:
	lea	rax, -160[rbp]
	mov	rdi, rax
	call	sigemptyset@PLT
	lea	rax, -160[rbp]
	mov	esi, 17
	mov	rdi, rax
	call	sigaddset@PLT
	lea	rax, -160[rbp]
	mov	edx, 0
	mov	rsi, rax
	mov	edi, 0
	call	sigprocmask@PLT
.L65:
	lea	rdx, -176[rbp]
	lea	rax, -160[rbp]
	mov	rsi, rdx
	mov	rdi, rax
	call	sigwait@PLT
	jmp	.L60
.L64:
	mov	eax, DWORD PTR -164[rbp]
	cmp	eax, DWORD PTR -168[rbp]
	jne	.L60
	mov	eax, DWORD PTR -180[rbp]
	and	eax, 127
	test	eax, eax
	jne	.L61
	mov	eax, DWORD PTR -180[rbp]
	sar	eax, 8
	movzx	eax, al
	jmp	.L63
.L61:
	mov	eax, 1
	jmp	.L63
.L60:
	lea	rax, -180[rbp]
	mov	edx, 0
	mov	rsi, rax
	mov	edi, -1
	call	waitpid@PLT
	mov	DWORD PTR -164[rbp], eax
	cmp	DWORD PTR -164[rbp], -1
	jne	.L64
	jmp	.L65
.L63:
	mov	rbx, QWORD PTR -24[rbp]
	sub	rbx, QWORD PTR fs:40
	je	.L66
	call	__stack_chk_fail@PLT
.L66:
	mov	rbx, QWORD PTR -8[rbp]
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE47:
	.size	sandbox_main, .-sandbox_main
	.section	.rodata
	.align 8
.LC43:
	.string	"Usage: sandbox --rootfs <dir> [--cd <dir>] "
	.align 8
.LC44:
	.string	"[--map <from>:<to>, --map <from>:<to>, ...] "
	.align 8
.LC45:
	.string	"[--workspace <from>:<to>, --workspace <from>:<to>, ...] "
.LC46:
	.string	"[--entrypoint <exe_path>] "
.LC47:
	.string	"[--verbose] [--help] <cmd>\n"
.LC48:
	.string	"\nExample:\n"
.LC49:
	.string	"  mkdir -p /tmp/workspace\n"
	.align 8
.LC50:
	.string	"  /tmp/sandbox --verbose --rootfs $rootfs_path --workspace /tmp/workspace:/workspace --cd /workspace /bin/bash\n"
	.text
	.type	print_help, @function
print_help:
.LFB48:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	mov	rax, QWORD PTR stderr[rip]
	mov	rcx, rax
	mov	edx, 43
	mov	esi, 1
	lea	rdi, .LC43[rip]
	call	fwrite@PLT
	mov	rax, QWORD PTR stderr[rip]
	mov	rcx, rax
	mov	edx, 44
	mov	esi, 1
	lea	rdi, .LC44[rip]
	call	fwrite@PLT
	mov	rax, QWORD PTR stderr[rip]
	mov	rcx, rax
	mov	edx, 56
	mov	esi, 1
	lea	rdi, .LC45[rip]
	call	fwrite@PLT
	mov	rax, QWORD PTR stderr[rip]
	mov	rcx, rax
	mov	edx, 26
	mov	esi, 1
	lea	rdi, .LC46[rip]
	call	fwrite@PLT
	mov	rax, QWORD PTR stderr[rip]
	mov	rcx, rax
	mov	edx, 27
	mov	esi, 1
	lea	rdi, .LC47[rip]
	call	fwrite@PLT
	mov	rax, QWORD PTR stderr[rip]
	mov	rcx, rax
	mov	edx, 10
	mov	esi, 1
	lea	rdi, .LC48[rip]
	call	fwrite@PLT
	mov	rax, QWORD PTR stderr[rip]
	mov	rcx, rax
	mov	edx, 26
	mov	esi, 1
	lea	rdi, .LC49[rip]
	call	fwrite@PLT
	mov	rax, QWORD PTR stderr[rip]
	mov	rcx, rax
	mov	edx, 111
	mov	esi, 1
	lea	rdi, .LC50[rip]
	call	fwrite@PLT
	nop
	pop	rbp
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE48:
	.size	print_help, .-print_help
	.type	sigint_handler, @function
sigint_handler:
.LFB49:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	mov	edi, 0
	call	_exit@PLT
	.cfi_endproc
.LFE49:
	.size	sigint_handler, .-sigint_handler
	.section	.rodata
.LC51:
	.string	"FORCE_SANDBOX_MODE"
.LC52:
	.string	"privileged"
.LC53:
	.string	"unprivileged"
	.align 8
.LC54:
	.string	"ERROR: Unknown FORCE_SANDBOX_MODE argument \"%s\"\n"
.LC55:
	.string	"SUDO_UID"
.LC56:
	.string	"SUDO_GID"
	.align 8
.LC57:
	.string	"verbose sandbox enabled (running in "
.LC58:
	.string	"un"
.LC59:
	.string	"privileged container"
.LC60:
	.string	" mode)\n"
.LC61:
	.string	"Parsed --rootfs as \"%s\"\n"
.LC62:
	.string	"Parsed --cd as \"%s\"\n"
.LC63:
	.string	"9p/"
	.align 8
.LC64:
	.string	"ERROR: Outside path \"%s\" must be absolute or 9p!  Ignoring...\n"
.LC65:
	.string	"map"
.LC66:
	.string	"workspace"
.LC67:
	.string	"Parsed --%s as \"%s\" -> \"%s\"\n"
.LC68:
	.string	"getoptlong defaulted?!\n"
.LC69:
	.string	"No <cmd> given!\n"
.LC70:
	.string	"--rootfs is required!\n"
.LC71:
	.string	"Child Process PID is %d\n"
	.align 8
.LC72:
	.string	"Child Process exited, exit code %d\n"
	.text
	.globl	main
	.type	main, @function
main:
.LFB50:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 144
	mov	DWORD PTR -132[rbp], edi
	mov	QWORD PTR -144[rbp], rsi
	mov	rax, QWORD PTR fs:40
	mov	QWORD PTR -8[rbp], rax
	xor	eax, eax
	mov	DWORD PTR -128[rbp], 0
	mov	edi, 0
	call	getpgid@PLT
	mov	DWORD PTR -112[rbp], eax
	mov	QWORD PTR -96[rbp], 0
	lea	rdi, .LC51[rip]
	call	getenv@PLT
	mov	QWORD PTR -88[rbp], rax
	cmp	QWORD PTR -88[rbp], 0
	je	.L70
	mov	rax, QWORD PTR -88[rbp]
	lea	rsi, .LC52[rip]
	mov	rdi, rax
	call	strcmp@PLT
	test	eax, eax
	jne	.L71
	mov	DWORD PTR execution_mode[rip], 1
	jmp	.L72
.L71:
	mov	rax, QWORD PTR -88[rbp]
	lea	rsi, .LC53[rip]
	mov	rdi, rax
	call	strcmp@PLT
	test	eax, eax
	jne	.L73
	mov	DWORD PTR execution_mode[rip], 0
	jmp	.L72
.L73:
	mov	rax, QWORD PTR stderr[rip]
	mov	rdx, QWORD PTR -88[rbp]
	lea	rsi, .LC54[rip]
	mov	rdi, rax
	mov	eax, 0
	call	fprintf@PLT
	mov	edi, 1
	call	_exit@PLT
.L70:
	call	geteuid@PLT
	test	eax, eax
	jne	.L74
	mov	DWORD PTR execution_mode[rip], 1
	jmp	.L75
.L74:
	mov	DWORD PTR execution_mode[rip], 0
.L75:
	mov	edx, 0
	lea	rsi, .LC53[rip]
	lea	rdi, .LC51[rip]
	call	setenv@PLT
.L72:
	call	getuid@PLT
	mov	DWORD PTR -120[rbp], eax
	call	getgid@PLT
	mov	DWORD PTR -116[rbp], eax
	lea	rdi, .LC55[rip]
	call	getenv@PLT
	mov	QWORD PTR -80[rbp], rax
	cmp	QWORD PTR -80[rbp], 0
	je	.L76
	mov	rax, QWORD PTR -80[rbp]
	movzx	eax, BYTE PTR [rax]
	test	al, al
	je	.L76
	mov	rax, QWORD PTR -80[rbp]
	mov	edx, 10
	mov	esi, 0
	mov	rdi, rax
	call	strtol@PLT
	mov	DWORD PTR -120[rbp], eax
.L76:
	lea	rdi, .LC56[rip]
	call	getenv@PLT
	mov	QWORD PTR -72[rbp], rax
	cmp	QWORD PTR -72[rbp], 0
	je	.L77
	mov	rax, QWORD PTR -72[rbp]
	movzx	eax, BYTE PTR [rax]
	test	al, al
	je	.L77
	mov	rax, QWORD PTR -72[rbp]
	mov	edx, 10
	mov	esi, 0
	mov	rdi, rax
	call	strtol@PLT
	mov	DWORD PTR -116[rbp], eax
.L77:
	lea	rdi, .LC55[rip]
	call	unsetenv@PLT
	lea	rdi, .LC56[rip]
	call	unsetenv@PLT
.L103:
	lea	rdx, -124[rbp]
	mov	rsi, QWORD PTR -144[rbp]
	mov	eax, DWORD PTR -132[rbp]
	mov	r8, rdx
	lea	rcx, long_options.0[rip]
	lea	rdx, .LC16[rip]
	mov	edi, eax
	call	getopt_long@PLT
	mov	DWORD PTR -108[rbp], eax
	cmp	DWORD PTR -108[rbp], -1
	jne	.L78
	mov	eax, DWORD PTR optind[rip]
	cdqe
	sal	rax, 3
	add	QWORD PTR -144[rbp], rax
	mov	eax, DWORD PTR optind[rip]
	sub	DWORD PTR -132[rbp], eax
	cmp	QWORD PTR -96[rbp], 0
	jne	.L79
	jmp	.L80
.L78:
	mov	eax, DWORD PTR -108[rbp]
	sub	eax, 63
	cmp	eax, 56
	ja	.L81
	mov	eax, eax
	lea	rdx, 0[0+rax*4]
	lea	rax, .L83[rip]
	mov	eax, DWORD PTR [rdx+rax]
	cdqe
	lea	rdx, .L83[rip]
	add	rax, rdx
	notrack jmp	rax
	.section	.rodata
	.align 4
	.align 4
.L83:
	.long	.L86-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L88-.L83
	.long	.L81-.L83
	.long	.L87-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L86-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L82-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L85-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L81-.L83
	.long	.L84-.L83
	.long	.L82-.L83
	.text
.L86:
	mov	eax, 0
	call	print_help
	mov	eax, 0
	jmp	.L113
.L84:
	mov	BYTE PTR verbose[rip], 1
	mov	rax, QWORD PTR stderr[rip]
	mov	rcx, rax
	mov	edx, 36
	mov	esi, 1
	lea	rdi, .LC57[rip]
	call	fwrite@PLT
	mov	eax, DWORD PTR execution_mode[rip]
	test	eax, eax
	je	.L90
	cmp	eax, 1
	je	.L91
	jmp	.L92
.L90:
	mov	rax, QWORD PTR stderr[rip]
	mov	rcx, rax
	mov	edx, 2
	mov	esi, 1
	lea	rdi, .LC58[rip]
	call	fwrite@PLT
.L91:
	mov	rax, QWORD PTR stderr[rip]
	mov	rcx, rax
	mov	edx, 20
	mov	esi, 1
	lea	rdi, .LC59[rip]
	call	fwrite@PLT
	nop
.L92:
	mov	rax, QWORD PTR stderr[rip]
	mov	rcx, rax
	mov	edx, 7
	mov	esi, 1
	lea	rdi, .LC60[rip]
	call	fwrite@PLT
	jmp	.L93
.L85:
	mov	rax, QWORD PTR optarg[rip]
	mov	rdi, rax
	call	strdup@PLT
	mov	QWORD PTR sandbox_root[rip], rax
	mov	rax, QWORD PTR sandbox_root[rip]
	mov	rdi, rax
	call	strlen@PLT
	mov	QWORD PTR -64[rbp], rax
	mov	rdx, QWORD PTR sandbox_root[rip]
	mov	rax, QWORD PTR -64[rbp]
	sub	rax, 1
	add	rax, rdx
	movzx	eax, BYTE PTR [rax]
	cmp	al, 47
	jne	.L94
	mov	rdx, QWORD PTR sandbox_root[rip]
	mov	rax, QWORD PTR -64[rbp]
	sub	rax, 1
	add	rax, rdx
	mov	BYTE PTR [rax], 0
.L94:
	movzx	eax, BYTE PTR verbose[rip]
	test	al, al
	je	.L115
	mov	rdx, QWORD PTR sandbox_root[rip]
	mov	rax, QWORD PTR stderr[rip]
	lea	rsi, .LC61[rip]
	mov	rdi, rax
	mov	eax, 0
	call	fprintf@PLT
	jmp	.L115
.L88:
	mov	rax, QWORD PTR optarg[rip]
	mov	rdi, rax
	call	strdup@PLT
	mov	QWORD PTR new_cd[rip], rax
	movzx	eax, BYTE PTR verbose[rip]
	test	al, al
	je	.L116
	mov	rdx, QWORD PTR new_cd[rip]
	mov	rax, QWORD PTR stderr[rip]
	lea	rsi, .LC62[rip]
	mov	rdi, rax
	mov	eax, 0
	call	fprintf@PLT
	jmp	.L116
.L82:
	mov	rax, QWORD PTR optarg[rip]
	mov	esi, 58
	mov	rdi, rax
	call	strchr@PLT
	mov	QWORD PTR -56[rbp], rax
	cmp	QWORD PTR -56[rbp], 0
	setne	al
	movzx	eax, al
	mov	esi, 594
	mov	edi, eax
	call	_check
	mov	rdx, QWORD PTR optarg[rip]
	mov	rax, QWORD PTR -56[rbp]
	sub	rax, rdx
	mov	rdx, rax
	mov	rax, QWORD PTR optarg[rip]
	mov	rsi, rdx
	mov	rdi, rax
	call	strndup@PLT
	mov	QWORD PTR -48[rbp], rax
	mov	rax, QWORD PTR -56[rbp]
	add	rax, 1
	mov	rdi, rax
	call	strdup@PLT
	mov	QWORD PTR -40[rbp], rax
	mov	rax, QWORD PTR -48[rbp]
	movzx	eax, BYTE PTR [rax]
	cmp	al, 47
	je	.L97
	mov	rax, QWORD PTR -48[rbp]
	mov	edx, 3
	lea	rsi, .LC63[rip]
	mov	rdi, rax
	call	strncmp@PLT
	test	eax, eax
	je	.L97
	mov	rax, QWORD PTR stderr[rip]
	mov	rdx, QWORD PTR -48[rbp]
	lea	rsi, .LC64[rip]
	mov	rdi, rax
	mov	eax, 0
	call	fprintf@PLT
	jmp	.L93
.L97:
	mov	edi, 24
	call	malloc@PLT
	mov	QWORD PTR -32[rbp], rax
	mov	rax, QWORD PTR -32[rbp]
	mov	rdx, QWORD PTR -40[rbp]
	mov	QWORD PTR [rax], rdx
	mov	rax, QWORD PTR -32[rbp]
	mov	rdx, QWORD PTR -48[rbp]
	mov	QWORD PTR 8[rax], rdx
	cmp	DWORD PTR -108[rbp], 109
	jne	.L98
	mov	rdx, QWORD PTR maps[rip]
	mov	rax, QWORD PTR -32[rbp]
	mov	QWORD PTR 16[rax], rdx
	mov	rax, QWORD PTR -32[rbp]
	mov	QWORD PTR maps[rip], rax
	jmp	.L99
.L98:
	mov	rdx, QWORD PTR workspaces[rip]
	mov	rax, QWORD PTR -32[rbp]
	mov	QWORD PTR 16[rax], rdx
	mov	rax, QWORD PTR -32[rbp]
	mov	QWORD PTR workspaces[rip], rax
.L99:
	movzx	eax, BYTE PTR verbose[rip]
	test	al, al
	je	.L117
	mov	rax, QWORD PTR -32[rbp]
	mov	rcx, QWORD PTR [rax]
	mov	rax, QWORD PTR -32[rbp]
	mov	rdx, QWORD PTR 8[rax]
	cmp	DWORD PTR -108[rbp], 109
	jne	.L101
	lea	rax, .LC65[rip]
	jmp	.L102
.L101:
	lea	rax, .LC66[rip]
.L102:
	mov	rdi, QWORD PTR stderr[rip]
	mov	r8, rcx
	mov	rcx, rdx
	mov	rdx, rax
	lea	rsi, .LC67[rip]
	mov	eax, 0
	call	fprintf@PLT
	jmp	.L117
.L87:
	mov	rax, QWORD PTR optarg[rip]
	mov	rdi, rax
	call	strdup@PLT
	mov	QWORD PTR -96[rbp], rax
	jmp	.L93
.L81:
	mov	rax, QWORD PTR stderr[rip]
	mov	rcx, rax
	mov	edx, 23
	mov	esi, 1
	lea	rdi, .LC68[rip]
	call	fwrite@PLT
	mov	eax, 1
	jmp	.L113
.L115:
	nop
	jmp	.L103
.L116:
	nop
	jmp	.L103
.L117:
	nop
.L93:
	jmp	.L103
.L79:
	sub	QWORD PTR -144[rbp], 8
	add	DWORD PTR -132[rbp], 1
	mov	rax, QWORD PTR -144[rbp]
	mov	rdx, QWORD PTR -96[rbp]
	mov	QWORD PTR [rax], rdx
.L80:
	cmp	DWORD PTR -132[rbp], 0
	jne	.L105
	mov	rax, QWORD PTR stderr[rip]
	mov	rcx, rax
	mov	edx, 16
	mov	esi, 1
	lea	rdi, .LC69[rip]
	call	fwrite@PLT
	mov	eax, 0
	call	print_help
	mov	eax, 1
	jmp	.L113
.L105:
	mov	rax, QWORD PTR sandbox_root[rip]
	test	rax, rax
	jne	.L106
	mov	rax, QWORD PTR stderr[rip]
	mov	rcx, rax
	mov	edx, 22
	mov	esi, 1
	lea	rdi, .LC70[rip]
	call	fwrite@PLT
	mov	eax, 0
	call	print_help
	mov	eax, 1
	jmp	.L113
.L106:
	lea	rax, -24[rbp]
	mov	rdi, rax
	call	pipe@PLT
	test	eax, eax
	sete	al
	movzx	eax, al
	mov	esi, 663
	mov	edi, eax
	call	_check
	lea	rax, -16[rbp]
	mov	rdi, rax
	call	pipe@PLT
	test	eax, eax
	sete	al
	movzx	eax, al
	mov	esi, 664
	mov	edi, eax
	call	_check
	mov	eax, DWORD PTR execution_mode[rip]
	cmp	eax, 1
	jne	.L107
	mov	edi, 131072
	call	unshare@PLT
	test	eax, eax
	sete	al
	movzx	eax, al
	mov	esi, 670
	mov	edi, eax
	call	_check
	mov	r8d, 0
	mov	ecx, 278528
	mov	edx, 0
	lea	rsi, .LC10[rip]
	mov	edi, 0
	call	mount@PLT
	test	eax, eax
	sete	al
	movzx	eax, al
	mov	esi, 676
	mov	edi, eax
	call	_check
	mov	rdx, QWORD PTR workspaces[rip]
	mov	rsi, QWORD PTR maps[rip]
	mov	rax, QWORD PTR sandbox_root[rip]
	mov	edi, DWORD PTR -116[rbp]
	mov	ecx, DWORD PTR -120[rbp]
	mov	r8d, edi
	mov	rdi, rax
	call	mount_the_world
.L107:
	mov	DWORD PTR -104[rbp], 805437457
	mov	eax, DWORD PTR -104[rbp]
	mov	r9d, 0
	mov	r8d, 0
	mov	ecx, 0
	mov	edx, 0
	mov	esi, eax
	mov	edi, 56
	mov	eax, 0
	call	syscall@PLT
	mov	DWORD PTR -100[rbp], eax
	cmp	DWORD PTR -100[rbp], 0
	jne	.L108
	mov	eax, DWORD PTR -20[rbp]
	mov	edi, eax
	call	close@PLT
	mov	eax, DWORD PTR -16[rbp]
	mov	edi, eax
	call	close@PLT
	mov	r8d, 0
	mov	ecx, 0
	mov	edx, 0
	mov	esi, 1
	mov	edi, 4
	mov	eax, 0
	call	prctl@PLT
	lea	rsi, sigint_handler[rip]
	mov	edi, 2
	call	signal@PLT
	mov	eax, DWORD PTR -12[rbp]
	mov	edi, eax
	call	close@PLT
	mov	eax, DWORD PTR -24[rbp]
	mov	edx, 1
	mov	esi, 0
	mov	edi, eax
	call	read@PLT
	test	rax, rax
	sete	al
	movzx	eax, al
	mov	esi, 706
	mov	edi, eax
	call	_check
	mov	eax, DWORD PTR execution_mode[rip]
	cmp	eax, 1
	jne	.L109
	mov	edi, 0
	call	setuid@PLT
	test	eax, eax
	sete	al
	movzx	eax, al
	mov	esi, 712
	mov	edi, eax
	call	_check
	mov	edi, 0
	call	setgid@PLT
	test	eax, eax
	sete	al
	movzx	eax, al
	mov	esi, 713
	mov	edi, eax
	call	_check
	mov	rax, QWORD PTR sandbox_root[rip]
	mov	edx, 0
	mov	esi, 0
	mov	rdi, rax
	call	mount_procfs
	jmp	.L110
.L109:
	mov	eax, DWORD PTR execution_mode[rip]
	test	eax, eax
	jne	.L110
	mov	rdx, QWORD PTR workspaces[rip]
	mov	rsi, QWORD PTR maps[rip]
	mov	rax, QWORD PTR sandbox_root[rip]
	mov	r8d, 0
	mov	ecx, 0
	mov	rdi, rax
	call	mount_the_world
.L110:
	mov	rsi, QWORD PTR new_cd[rip]
	mov	rax, QWORD PTR sandbox_root[rip]
	mov	rcx, QWORD PTR -144[rbp]
	mov	edx, DWORD PTR -132[rbp]
	mov	rdi, rax
	call	sandbox_main
	jmp	.L113
.L108:
	cmp	DWORD PTR -100[rbp], -1
	setne	al
	movzx	eax, al
	mov	esi, 731
	mov	edi, eax
	call	_check
	mov	eax, DWORD PTR -24[rbp]
	mov	edi, eax
	call	close@PLT
	mov	eax, DWORD PTR -12[rbp]
	mov	edi, eax
	call	close@PLT
	mov	eax, DWORD PTR -16[rbp]
	mov	edx, 1
	mov	esi, 0
	mov	edi, eax
	call	read@PLT
	test	rax, rax
	sete	al
	movzx	eax, al
	mov	esi, 738
	mov	edi, eax
	call	_check
	movzx	eax, BYTE PTR verbose[rip]
	test	al, al
	je	.L111
	mov	rax, QWORD PTR stderr[rip]
	mov	edx, DWORD PTR -100[rbp]
	lea	rsi, .LC71[rip]
	mov	rdi, rax
	mov	eax, 0
	call	fprintf@PLT
.L111:
	mov	edx, DWORD PTR -100[rbp]
	mov	ecx, DWORD PTR -116[rbp]
	mov	eax, DWORD PTR -120[rbp]
	mov	esi, ecx
	mov	edi, eax
	call	configure_user_namespace
	mov	eax, DWORD PTR -20[rbp]
	mov	edi, eax
	call	close@PLT
	lea	rcx, -128[rbp]
	mov	eax, DWORD PTR -100[rbp]
	mov	edx, 0
	mov	rsi, rcx
	mov	edi, eax
	call	waitpid@PLT
	cmp	DWORD PTR -100[rbp], eax
	sete	al
	movzx	eax, al
	mov	esi, 750
	mov	edi, eax
	call	_check
	mov	eax, DWORD PTR -128[rbp]
	and	eax, 127
	test	eax, eax
	sete	al
	movzx	eax, al
	mov	esi, 751
	mov	edi, eax
	call	_check
	movzx	eax, BYTE PTR verbose[rip]
	test	al, al
	je	.L112
	mov	eax, DWORD PTR -128[rbp]
	sar	eax, 8
	movzx	edx, al
	mov	rax, QWORD PTR stderr[rip]
	lea	rsi, .LC72[rip]
	mov	rdi, rax
	mov	eax, 0
	call	fprintf@PLT
.L112:
	mov	esi, 1
	mov	edi, 22
	call	signal@PLT
	mov	eax, DWORD PTR -112[rbp]
	mov	esi, eax
	mov	edi, 0
	call	tcsetpgrp@PLT
	mov	eax, DWORD PTR -128[rbp]
	sar	eax, 8
	movzx	eax, al
.L113:
	mov	rcx, QWORD PTR -8[rbp]
	sub	rcx, QWORD PTR fs:40
	je	.L114
	call	__stack_chk_fail@PLT
.L114:
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE50:
	.size	main, .-main
	.section	.rodata
.LC73:
	.string	"help"
.LC74:
	.string	"verbose"
.LC75:
	.string	"entrypoint"
.LC76:
	.string	"cd"
	.section	.data.rel.local,"aw"
	.align 32
	.type	long_options.0, @object
	.size	long_options.0, 256
long_options.0:
	.quad	.LC73
	.long	0
	.zero	4
	.quad	0
	.long	104
	.zero	4
	.quad	.LC74
	.long	0
	.zero	4
	.quad	0
	.long	118
	.zero	4
	.quad	.LC38
	.long	1
	.zero	4
	.quad	0
	.long	114
	.zero	4
	.quad	.LC66
	.long	1
	.zero	4
	.quad	0
	.long	119
	.zero	4
	.quad	.LC75
	.long	1
	.zero	4
	.quad	0
	.long	101
	.zero	4
	.quad	.LC76
	.long	1
	.zero	4
	.quad	0
	.long	99
	.zero	4
	.quad	.LC65
	.long	1
	.zero	4
	.quad	0
	.long	109
	.zero	4
	.quad	0
	.long	0
	.zero	4
	.quad	0
	.long	0
	.zero	4
	.ident	"GCC: (Ubuntu 10.5.0-1ubuntu1~20.04) 10.5.0"
	.section	.note.GNU-stack,"",@progbits
	.section	.note.gnu.property,"a"
	.align 8
	.long	 1f - 0f
	.long	 4f - 1f
	.long	 5
0:
	.string	 "GNU"
1:
	.align 8
	.long	 0xc0000002
	.long	 3f - 2f
2:
	.long	 0x3
3:
	.align 8
4:

	.arch armv5t
	.eabi_attribute 20, 1
	.eabi_attribute 21, 1
	.eabi_attribute 23, 3
	.eabi_attribute 24, 1
	.eabi_attribute 25, 1
	.eabi_attribute 26, 2
	.eabi_attribute 30, 6
	.eabi_attribute 34, 0
	.eabi_attribute 18, 4
	.file	"52020.c"
	.text
	.global	sandbox_root
	.bss
	.align	2
	.type	sandbox_root, %object
	.size	sandbox_root, 4
sandbox_root:
	.space	4
	.global	new_cd
	.align	2
	.type	new_cd, %object
	.size	new_cd, 4
new_cd:
	.space	4
	.global	verbose
	.type	verbose, %object
	.size	verbose, 1
verbose:
	.space	1
	.comm	maps,4,4
	.comm	workspaces,4,4
	.local	execution_mode
	.comm	execution_mode,4,4
	.section	.rodata
	.align	2
.LC0:
	.ascii	"At line %d, ABORTED (%d: %s)!\012\000"
	.text
	.align	2
	.syntax unified
	.arm
	.fpu softvfp
	.type	_check, %function
_check:
	@ args = 0, pretend = 0, frame = 8
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{r4, r5, fp, lr}
	add	fp, sp, #12
	sub	sp, sp, #16
	str	r0, [fp, #-16]
	str	r1, [fp, #-20]
	ldr	r3, [fp, #-16]
	cmp	r3, #0
	bne	.L3
	ldr	r3, .L4
	ldr	r4, [r3]
	bl	__errno_location
	mov	r3, r0
	ldr	r5, [r3]
	bl	__errno_location
	mov	r3, r0
	ldr	r3, [r3]
	mov	r0, r3
	bl	strerror
	mov	r3, r0
	str	r3, [sp]
	mov	r3, r5
	ldr	r2, [fp, #-20]
	ldr	r1, .L4+4
	mov	r0, r4
	bl	fprintf
	ldr	r3, .L4+8
	ldr	r3, [r3]
	mov	r0, r3
	bl	fflush
	ldr	r3, .L4
	ldr	r3, [r3]
	mov	r0, r3
	bl	fflush
	mov	r0, #1
	bl	_exit
.L3:
	nop
	sub	sp, fp, #12
	@ sp needed
	pop	{r4, r5, fp, pc}
.L5:
	.align	2
.L4:
	.word	stderr
	.word	.LC0
	.word	stdout
	.size	_check, .-_check
	.section	.rodata
	.align	2
.LC1:
	.ascii	"/proc/%d/%s\000"
	.align	2
.LC2:
	.word	__stack_chk_guard
	.text
	.align	2
	.syntax unified
	.arm
	.fpu softvfp
	.type	open_proc_file, %function
open_proc_file:
	@ args = 0, pretend = 0, frame = 4128
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{r4, fp, lr}
	add	fp, sp, #8
	sub	sp, sp, #4096
	sub	sp, sp, #44
	sub	r3, fp, #4096
	sub	r3, r3, #12
	str	r0, [r3, #-20]
	sub	r3, fp, #4096
	sub	r3, r3, #12
	str	r1, [r3, #-24]
	sub	r3, fp, #4096
	sub	r3, r3, #12
	str	r2, [r3, #-28]
	ldr	r3, .L11
	ldr	r3, [r3]
	str	r3, [fp, #-16]
	mov	r3,#0
	sub	r3, fp, #4096
	sub	r3, r3, #12
	mov	r4, r3
	sub	r3, fp, #4096
	sub	r3, r3, #12
	mov	r2, r3
	sub	r0, fp, #4096
	sub	r0, r0, #12
	sub	r0, r0, #4
	sub	r3, fp, #4096
	sub	r3, r3, #12
	ldr	r3, [r3, #-24]
	str	r3, [sp]
	ldr	r3, [r2, #-20]
	ldr	r2, .L11+4
	mov	r1, #4096
	bl	snprintf
	str	r0, [r4, #-12]
	sub	r3, fp, #4096
	sub	r3, r3, #12
	ldr	r3, [r3, #-12]
	cmp	r3, #0
	blt	.L7
	sub	r3, fp, #4096
	sub	r3, r3, #12
	ldr	r3, [r3, #-12]
	cmp	r3, #4096
	bcs	.L7
	mov	r3, #1
	b	.L8
.L7:
	mov	r3, #0
.L8:
	mov	r1, #124
	mov	r0, r3
	bl	_check
	sub	r3, fp, #4096
	sub	r3, r3, #12
	mov	r4, r3
	sub	r3, fp, #4096
	sub	r3, r3, #12
	mov	r2, r3
	sub	r3, fp, #4096
	sub	r3, r3, #12
	sub	r3, r3, #4
	ldr	r1, [r2, #-28]
	mov	r0, r3
	bl	open
	str	r0, [r4, #-8]
	sub	r3, fp, #4096
	sub	r3, r3, #12
	ldr	r3, [r3, #-8]
	cmn	r3, #1
	movne	r3, #1
	moveq	r3, #0
	and	r3, r3, #255
	mov	r1, #126
	mov	r0, r3
	bl	_check
	sub	r3, fp, #4096
	sub	r3, r3, #12
	ldr	r3, [r3, #-8]
	ldr	r2, .L11
	ldr	r1, [r2]
	ldr	r2, [fp, #-16]
	eors	r1, r2, r1
	mov	r2, #0
	beq	.L10
	bl	__stack_chk_fail
.L10:
	mov	r0, r3
	sub	sp, fp, #8
	@ sp needed
	pop	{r4, fp, pc}
.L12:
	.align	2
.L11:
	.word	.LC2
	.word	.LC1
	.size	open_proc_file, .-open_proc_file
	.align	2
	.syntax unified
	.arm
	.fpu softvfp
	.type	touch, %function
touch:
	@ args = 0, pretend = 0, frame = 16
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #16
	str	r0, [fp, #-16]
	mov	r2, #292
	mov	r1, #64
	ldr	r0, [fp, #-16]
	bl	open
	str	r0, [fp, #-8]
	ldr	r3, [fp, #-8]
	cmn	r3, #1
	bne	.L14
	bl	__errno_location
	mov	r3, r0
	ldr	r3, [r3]
	cmp	r3, #21
	beq	.L14
	ldr	r3, [fp, #-8]
	cmn	r3, #1
	movne	r3, #1
	moveq	r3, #0
	and	r3, r3, #255
	mov	r1, #135
	mov	r0, r3
	bl	_check
.L14:
	ldr	r0, [fp, #-8]
	bl	close
	nop
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
	.size	touch, .-touch
	.section	.rodata
	.align	2
.LC3:
	.word	__stack_chk_guard
	.text
	.align	2
	.syntax unified
	.arm
	.fpu softvfp
	.type	mkpath, %function
mkpath:
	@ args = 0, pretend = 0, frame = 4120
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{r4, fp, lr}
	add	fp, sp, #8
	sub	sp, sp, #4096
	sub	sp, sp, #28
	sub	r3, fp, #4096
	sub	r3, r3, #12
	str	r0, [r3, #-20]
	ldr	r3, .L22
	ldr	r3, [r3]
	str	r3, [fp, #-16]
	mov	r3,#0
	sub	r3, fp, #4096
	sub	r3, r3, #12
	mov	r4, r3
	sub	r3, fp, #4096
	sub	r3, r3, #12
	ldr	r0, [r3, #-20]
	bl	opendir
	str	r0, [r4, #-12]
	sub	r3, fp, #4096
	sub	r3, r3, #12
	ldr	r3, [r3, #-12]
	cmp	r3, #0
	beq	.L16
	sub	r3, fp, #4096
	sub	r3, r3, #12
	ldr	r0, [r3, #-12]
	bl	closedir
	b	.L15
.L16:
	sub	r3, fp, #4096
	sub	r3, r3, #12
	mov	r1, r3
	sub	r3, fp, #4096
	sub	r3, r3, #12
	sub	r3, r3, #4
	mov	r2, #4096
	ldr	r1, [r1, #-20]
	mov	r0, r3
	bl	strncpy
	sub	r3, fp, #4096
	sub	r3, r3, #12
	sub	r3, r3, #4
	mov	r0, r3
	bl	dirname
	mov	r3, r0
	mov	r0, r3
	bl	mkpath
	sub	r3, fp, #4096
	sub	r3, r3, #12
	mov	r4, r3
	sub	r3, fp, #4096
	sub	r3, r3, #12
	ldr	r1, .L22+4
	ldr	r0, [r3, #-20]
	bl	mkdir
	str	r0, [r4, #-8]
	sub	r3, fp, #4096
	sub	r3, r3, #12
	ldr	r3, [r3, #-8]
	cmp	r3, #0
	beq	.L18
	bl	__errno_location
	mov	r3, r0
	ldr	r3, [r3]
	cmp	r3, #17
	bne	.L19
.L18:
	mov	r3, #1
	b	.L20
.L19:
	mov	r3, #0
.L20:
	mov	r1, #156
	mov	r0, r3
	bl	_check
.L15:
	ldr	r3, .L22
	ldr	r2, [r3]
	ldr	r3, [fp, #-16]
	eors	r2, r3, r2
	mov	r3, #0
	beq	.L21
	bl	__stack_chk_fail
.L21:
	sub	sp, fp, #8
	@ sp needed
	pop	{r4, fp, pc}
.L23:
	.align	2
.L22:
	.word	.LC3
	.word	511
	.size	mkpath, .-mkpath
	.section	.rodata
	.align	2
.LC4:
	.ascii	"--> Mapping %d:%d to root:root within container nam"
	.ascii	"espace\012\000"
	.align	2
.LC5:
	.ascii	"uid_map\000"
	.align	2
.LC6:
	.ascii	"0\011%d\0111\012\000"
	.align	2
.LC7:
	.ascii	"setgroups\000"
	.align	2
.LC9:
	.ascii	"gid_map\000"
	.align	2
.LC10:
	.ascii	"0\011%d\0111\000"
	.align	2
.LC8:
	.ascii	"deny\000"
	.align	2
.LC11:
	.word	__stack_chk_guard
	.text
	.align	2
	.syntax unified
	.arm
	.fpu softvfp
	.type	configure_user_namespace, %function
configure_user_namespace:
	@ args = 0, pretend = 0, frame = 248
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #248
	str	r0, [fp, #-240]
	str	r1, [fp, #-244]
	str	r2, [fp, #-248]
	ldr	r3, .L31
	ldr	r3, [r3]
	str	r3, [fp, #-8]
	mov	r3,#0
	mov	r3, #0
	str	r3, [fp, #-232]
	ldr	r3, .L31+4
	ldrb	r3, [r3]	@ zero_extendqisi2
	cmp	r3, #0
	beq	.L25
	ldr	r3, .L31+8
	ldr	r0, [r3]
	ldr	r3, [fp, #-244]
	ldr	r2, [fp, #-240]
	ldr	r1, .L31+12
	bl	fprintf
.L25:
	mov	r2, #1
	ldr	r1, .L31+16
	ldr	r0, [fp, #-248]
	bl	open_proc_file
	str	r0, [fp, #-228]
	ldr	r3, [fp, #-228]
	cmn	r3, #1
	movne	r3, #1
	moveq	r3, #0
	and	r3, r3, #255
	mov	r1, #184
	mov	r0, r3
	bl	_check
	sub	r0, fp, #208
	ldr	r3, [fp, #-240]
	ldr	r2, .L31+20
	mov	r1, #100
	bl	snprintf
	str	r0, [fp, #-232]
	ldr	r3, [fp, #-232]
	cmp	r3, #0
	ble	.L26
	ldr	r3, [fp, #-232]
	cmp	r3, #100
	bhi	.L26
	mov	r3, #1
	b	.L27
.L26:
	mov	r3, #0
.L27:
	mov	r1, #187
	mov	r0, r3
	bl	_check
	ldr	r2, [fp, #-232]
	sub	r3, fp, #208
	mov	r1, r3
	ldr	r0, [fp, #-228]
	bl	write
	mov	r2, r0
	ldr	r3, [fp, #-232]
	cmp	r3, r2
	moveq	r3, #1
	movne	r3, #0
	and	r3, r3, #255
	mov	r1, #188
	mov	r0, r3
	bl	_check
	ldr	r0, [fp, #-228]
	bl	close
	mov	r2, #1
	ldr	r1, .L31+24
	ldr	r0, [fp, #-248]
	bl	open_proc_file
	str	r0, [fp, #-224]
	ldr	r2, .L31+28
	sub	r3, fp, #216
	ldm	r2, {r0, r1}
	str	r0, [r3]
	add	r3, r3, #4
	strb	r1, [r3]
	sub	r3, fp, #216
	mov	r2, #5
	mov	r1, r3
	ldr	r0, [fp, #-224]
	bl	write
	mov	r3, r0
	cmp	r3, #5
	moveq	r3, #1
	movne	r3, #0
	and	r3, r3, #255
	mov	r1, #194
	mov	r0, r3
	bl	_check
	ldr	r0, [fp, #-224]
	bl	close
	mov	r2, #1
	ldr	r1, .L31+32
	ldr	r0, [fp, #-248]
	bl	open_proc_file
	str	r0, [fp, #-220]
	ldr	r3, [fp, #-220]
	cmn	r3, #1
	movne	r3, #1
	moveq	r3, #0
	and	r3, r3, #255
	mov	r1, #199
	mov	r0, r3
	bl	_check
	sub	r0, fp, #108
	ldr	r3, [fp, #-244]
	ldr	r2, .L31+36
	mov	r1, #100
	bl	snprintf
	str	r0, [fp, #-232]
	ldr	r3, [fp, #-232]
	cmp	r3, #0
	ble	.L28
	ldr	r3, [fp, #-232]
	cmp	r3, #100
	bhi	.L28
	mov	r3, #1
	b	.L29
.L28:
	mov	r3, #0
.L29:
	mov	r1, #202
	mov	r0, r3
	bl	_check
	ldr	r2, [fp, #-232]
	sub	r3, fp, #108
	mov	r1, r3
	ldr	r0, [fp, #-220]
	bl	write
	mov	r2, r0
	ldr	r3, [fp, #-232]
	cmp	r3, r2
	moveq	r3, #1
	movne	r3, #0
	and	r3, r3, #255
	mov	r1, #203
	mov	r0, r3
	bl	_check
	nop
	ldr	r3, .L31
	ldr	r2, [r3]
	ldr	r3, [fp, #-8]
	eors	r2, r3, r2
	mov	r3, #0
	beq	.L30
	bl	__stack_chk_fail
.L30:
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
.L32:
	.align	2
.L31:
	.word	.LC11
	.word	verbose
	.word	stderr
	.word	.LC4
	.word	.LC5
	.word	.LC6
	.word	.LC7
	.word	.LC8
	.word	.LC9
	.word	.LC10
	.size	configure_user_namespace, .-configure_user_namespace
	.section	.rodata
	.align	2
.LC12:
	.ascii	"%s/upper/%s\000"
	.align	2
.LC13:
	.ascii	"%s/work/%s\000"
	.align	2
.LC14:
	.ascii	"/\000"
	.align	2
.LC15:
	.ascii	"--> Mounting overlay of %s at %s (modifications in "
	.ascii	"%s, workspace in %s)\012\000"
	.align	2
.LC16:
	.ascii	"lowerdir=%s,upperdir=%s,workdir=%s\000"
	.align	2
.LC17:
	.ascii	"overlay\000"
	.align	2
.LC18:
	.word	__stack_chk_guard
	.text
	.align	2
	.syntax unified
	.arm
	.fpu softvfp
	.type	mount_overlay, %function
mount_overlay:
	@ args = 8, pretend = 0, frame = 20528
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #20480
	sub	sp, sp, #56
	sub	ip, fp, #20480
	sub	ip, ip, #4
	str	r0, [ip, #-36]
	sub	r0, fp, #20480
	sub	r0, r0, #4
	str	r1, [r0, #-40]
	sub	r1, fp, #20480
	sub	r1, r1, #4
	str	r2, [r1, #-44]
	sub	r2, fp, #20480
	sub	r2, r2, #4
	str	r3, [r2, #-48]
	ldr	r3, .L38
	ldr	r3, [r3]
	str	r3, [fp, #-8]
	mov	r3,#0
	sub	r3, fp, #20480
	sub	r3, r3, #4
	mov	r2, r3
	sub	r0, fp, #20480
	sub	r0, r0, #4
	sub	r0, r0, #32
	sub	r3, fp, #20480
	sub	r3, r3, #4
	ldr	r3, [r3, #-44]
	str	r3, [sp]
	ldr	r3, [r2, #-48]
	ldr	r2, .L38+4
	mov	r1, #4096
	bl	snprintf
	sub	r3, fp, #20480
	sub	r3, r3, #4
	mov	r2, r3
	sub	r0, fp, #16384
	sub	r0, r0, #4
	sub	r0, r0, #32
	sub	r3, fp, #20480
	sub	r3, r3, #4
	ldr	r3, [r3, #-44]
	str	r3, [sp]
	ldr	r3, [r2, #-48]
	ldr	r2, .L38+8
	mov	r1, #4096
	bl	snprintf
	sub	r3, fp, #20480
	sub	r3, r3, #4
	ldr	r3, [r3, #-36]
	ldrb	r3, [r3]	@ zero_extendqisi2
	cmp	r3, #0
	bne	.L34
	sub	r3, fp, #20480
	sub	r3, r3, #4
	mov	r2, r3
	ldr	r3, .L38+12
	str	r3, [r2, #-36]
.L34:
	sub	r3, fp, #20480
	sub	r3, r3, #4
	ldr	r3, [r3, #-40]
	ldrb	r3, [r3]	@ zero_extendqisi2
	cmp	r3, #0
	bne	.L35
	sub	r3, fp, #20480
	sub	r3, r3, #4
	mov	r2, r3
	ldr	r3, .L38+12
	str	r3, [r2, #-40]
.L35:
	ldr	r3, .L38+16
	ldrb	r3, [r3]	@ zero_extendqisi2
	cmp	r3, #0
	beq	.L36
	ldr	r3, .L38+20
	ldr	r0, [r3]
	sub	r3, fp, #20480
	sub	r3, r3, #4
	mov	r1, r3
	sub	r3, fp, #20480
	sub	r3, r3, #4
	mov	r2, r3
	sub	r3, fp, #16384
	sub	r3, r3, #4
	sub	r3, r3, #32
	str	r3, [sp, #4]
	sub	r3, fp, #20480
	sub	r3, r3, #4
	sub	r3, r3, #32
	str	r3, [sp]
	ldr	r3, [r1, #-40]
	ldr	r2, [r2, #-36]
	ldr	r1, .L38+24
	bl	fprintf
.L36:
	sub	r3, fp, #20480
	sub	r3, r3, #4
	sub	r3, r3, #32
	mov	r0, r3
	bl	mkpath
	sub	r3, fp, #16384
	sub	r3, r3, #4
	sub	r3, r3, #32
	mov	r0, r3
	bl	mkpath
	sub	r3, fp, #20480
	sub	r3, r3, #4
	mov	r2, r3
	sub	r0, fp, #12288
	sub	r0, r0, #4
	sub	r0, r0, #32
	sub	r3, fp, #16384
	sub	r3, r3, #4
	sub	r3, r3, #32
	str	r3, [sp, #4]
	sub	r3, fp, #20480
	sub	r3, r3, #4
	sub	r3, r3, #32
	str	r3, [sp]
	ldr	r3, [r2, #-36]
	ldr	r2, .L38+28
	ldr	r1, .L38+32
	bl	snprintf
	sub	r3, fp, #20480
	sub	r3, r3, #4
	mov	r1, r3
	sub	r3, fp, #12288
	sub	r3, r3, #4
	sub	r3, r3, #32
	str	r3, [sp]
	mov	r3, #0
	ldr	r2, .L38+36
	ldr	r1, [r1, #-40]
	ldr	r0, .L38+36
	bl	mount
	mov	r3, r0
	cmp	r3, #0
	moveq	r3, #1
	movne	r3, #0
	and	r3, r3, #255
	mov	r1, #243
	mov	r0, r3
	bl	_check
	sub	r3, fp, #20480
	sub	r3, r3, #4
	ldr	r2, [fp, #8]
	ldr	r1, [fp, #4]
	ldr	r0, [r3, #-40]
	bl	chown
	mov	r3, r0
	cmp	r3, #0
	moveq	r3, #1
	movne	r3, #0
	and	r3, r3, #255
	mov	r1, #247
	mov	r0, r3
	bl	_check
	nop
	ldr	r3, .L38
	ldr	r2, [r3]
	ldr	r3, [fp, #-8]
	eors	r2, r3, r2
	mov	r3, #0
	beq	.L37
	bl	__stack_chk_fail
.L37:
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
.L39:
	.align	2
.L38:
	.word	.LC18
	.word	.LC12
	.word	.LC13
	.word	.LC14
	.word	verbose
	.word	stderr
	.word	.LC15
	.word	.LC16
	.word	12316
	.word	.LC17
	.size	mount_overlay, .-mount_overlay
	.section	.rodata
	.align	2
.LC19:
	.ascii	"%s/proc\000"
	.align	2
.LC20:
	.ascii	"--> Mounting procfs at %s\012\000"
	.align	2
.LC21:
	.ascii	"proc\000"
	.align	2
.LC22:
	.ascii	"\000"
	.align	2
.LC23:
	.word	__stack_chk_guard
	.text
	.align	2
	.syntax unified
	.arm
	.fpu softvfp
	.type	mount_procfs, %function
mount_procfs:
	@ args = 0, pretend = 0, frame = 4120
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #4096
	sub	sp, sp, #32
	sub	r3, fp, #4096
	sub	r3, r3, #4
	str	r0, [r3, #-12]
	sub	r3, fp, #4096
	sub	r3, r3, #4
	str	r1, [r3, #-16]
	sub	r3, fp, #4096
	sub	r3, r3, #4
	str	r2, [r3, #-20]
	ldr	r3, .L43
	ldr	r3, [r3]
	str	r3, [fp, #-8]
	mov	r3,#0
	sub	r3, fp, #4096
	sub	r3, r3, #4
	sub	r0, fp, #4096
	sub	r0, r0, #4
	sub	r0, r0, #4
	ldr	r3, [r3, #-12]
	ldr	r2, .L43+4
	mov	r1, #4096
	bl	snprintf
	ldr	r3, .L43+8
	ldrb	r3, [r3]	@ zero_extendqisi2
	cmp	r3, #0
	beq	.L41
	ldr	r3, .L43+12
	ldr	r0, [r3]
	sub	r3, fp, #4096
	sub	r3, r3, #4
	sub	r3, r3, #4
	mov	r2, r3
	ldr	r1, .L43+16
	bl	fprintf
.L41:
	sub	r1, fp, #4096
	sub	r1, r1, #4
	sub	r1, r1, #4
	ldr	r3, .L43+20
	str	r3, [sp]
	mov	r3, #0
	ldr	r2, .L43+24
	ldr	r0, .L43+24
	bl	mount
	mov	r3, r0
	cmp	r3, #0
	moveq	r3, #1
	movne	r3, #0
	and	r3, r3, #255
	ldr	r1, .L43+28
	mov	r0, r3
	bl	_check
	sub	r3, fp, #4096
	sub	r3, r3, #4
	mov	r2, r3
	sub	r3, fp, #4096
	sub	r3, r3, #4
	mov	r1, r3
	sub	r3, fp, #4096
	sub	r3, r3, #4
	sub	r3, r3, #4
	ldr	r2, [r2, #-20]
	ldr	r1, [r1, #-16]
	mov	r0, r3
	bl	chown
	nop
	ldr	r3, .L43
	ldr	r2, [r3]
	ldr	r3, [fp, #-8]
	eors	r2, r3, r2
	mov	r3, #0
	beq	.L42
	bl	__stack_chk_fail
.L42:
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
.L44:
	.align	2
.L43:
	.word	.LC23
	.word	.LC19
	.word	verbose
	.word	stderr
	.word	.LC20
	.word	.LC22
	.word	.LC21
	.word	259
	.size	mount_procfs, .-mount_procfs
	.section	.rodata
	.align	2
.LC24:
	.ascii	"--> Bind-mounting %s over %s (read-only)\012\000"
	.align	2
.LC25:
	.ascii	"--> Bind-mounting %s over %s\012\000"
	.text
	.align	2
	.syntax unified
	.arm
	.fpu softvfp
	.type	bind_mount, %function
bind_mount:
	@ args = 0, pretend = 0, frame = 16
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #24
	str	r0, [fp, #-8]
	str	r1, [fp, #-12]
	mov	r3, r2
	strb	r3, [fp, #-13]
	ldr	r3, .L50
	ldrb	r3, [r3]	@ zero_extendqisi2
	cmp	r3, #0
	beq	.L46
	ldrb	r3, [fp, #-13]	@ zero_extendqisi2
	cmp	r3, #0
	beq	.L47
	ldr	r3, .L50+4
	ldr	r0, [r3]
	ldr	r3, [fp, #-12]
	ldr	r2, [fp, #-8]
	ldr	r1, .L50+8
	bl	fprintf
	b	.L46
.L47:
	ldr	r3, .L50+4
	ldr	r0, [r3]
	ldr	r3, [fp, #-12]
	ldr	r2, [fp, #-8]
	ldr	r1, .L50+12
	bl	fprintf
.L46:
	ldr	r0, [fp, #-12]
	bl	touch
	mov	r3, #0
	str	r3, [sp]
	mov	r3, #20480
	ldr	r2, .L50+16
	ldr	r1, [fp, #-12]
	ldr	r0, [fp, #-8]
	bl	mount
	mov	r3, r0
	cmp	r3, #0
	moveq	r3, #1
	movne	r3, #0
	and	r3, r3, #255
	ldr	r1, .L50+20
	mov	r0, r3
	bl	_check
	ldrb	r3, [fp, #-13]	@ zero_extendqisi2
	cmp	r3, #0
	beq	.L49
	mov	r3, #0
	str	r3, [sp]
	ldr	r3, .L50+24
	ldr	r2, .L50+16
	ldr	r1, [fp, #-12]
	ldr	r0, [fp, #-8]
	bl	mount
	mov	r3, r0
	cmp	r3, #0
	moveq	r3, #1
	movne	r3, #0
	and	r3, r3, #255
	ldr	r1, .L50+28
	mov	r0, r3
	bl	_check
.L49:
	nop
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
.L51:
	.align	2
.L50:
	.word	verbose
	.word	stderr
	.word	.LC24
	.word	.LC25
	.word	.LC22
	.word	279
	.word	4135
	.word	290
	.size	bind_mount, .-bind_mount
	.section	.rodata
	.align	2
.LC26:
	.ascii	"%s/dev/null\000"
	.align	2
.LC27:
	.ascii	"/dev/null\000"
	.align	2
.LC28:
	.ascii	"%s/dev/tty\000"
	.align	2
.LC29:
	.ascii	"/dev/tty\000"
	.align	2
.LC30:
	.ascii	"/dev/urandom\000"
	.align	2
.LC31:
	.ascii	"%s/dev/urandom\000"
	.align	2
.LC32:
	.ascii	"%s/dev/pts\000"
	.align	2
.LC33:
	.ascii	"devpts\000"
	.align	2
.LC34:
	.ascii	"ptmxmode=0666\000"
	.align	2
.LC35:
	.ascii	"%s/dev/pts/ptmx\000"
	.align	2
.LC36:
	.ascii	"%s/dev/ptmx\000"
	.align	2
.LC37:
	.word	__stack_chk_guard
	.text
	.align	2
	.syntax unified
	.arm
	.fpu softvfp
	.type	mount_dev, %function
mount_dev:
	@ args = 0, pretend = 0, frame = 8208
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #8192
	sub	sp, sp, #24
	sub	r3, fp, #8192
	sub	r3, r3, #4
	str	r0, [r3, #-12]
	ldr	r3, .L55
	ldr	r3, [r3]
	str	r3, [fp, #-8]
	mov	r3,#0
	sub	r3, fp, #8192
	sub	r3, r3, #4
	sub	r0, fp, #8192
	sub	r0, r0, #4
	sub	r0, r0, #4
	ldr	r3, [r3, #-12]
	ldr	r2, .L55+4
	mov	r1, #4096
	bl	snprintf
	sub	r3, fp, #8192
	sub	r3, r3, #4
	sub	r3, r3, #4
	mov	r2, #0
	mov	r1, r3
	ldr	r0, .L55+8
	bl	bind_mount
	sub	r3, fp, #8192
	sub	r3, r3, #4
	sub	r0, fp, #8192
	sub	r0, r0, #4
	sub	r0, r0, #4
	ldr	r3, [r3, #-12]
	ldr	r2, .L55+12
	mov	r1, #4096
	bl	snprintf
	sub	r3, fp, #8192
	sub	r3, r3, #4
	sub	r3, r3, #4
	mov	r2, #0
	mov	r1, r3
	ldr	r0, .L55+16
	bl	bind_mount
	mov	r1, #0
	ldr	r0, .L55+20
	bl	access
	mov	r3, r0
	cmp	r3, #0
	bne	.L53
	sub	r3, fp, #8192
	sub	r3, r3, #4
	sub	r0, fp, #8192
	sub	r0, r0, #4
	sub	r0, r0, #4
	ldr	r3, [r3, #-12]
	ldr	r2, .L55+24
	mov	r1, #4096
	bl	snprintf
	sub	r3, fp, #8192
	sub	r3, r3, #4
	sub	r3, r3, #4
	mov	r2, #0
	mov	r1, r3
	ldr	r0, .L55+20
	bl	bind_mount
.L53:
	sub	r3, fp, #8192
	sub	r3, r3, #4
	sub	r0, fp, #8192
	sub	r0, r0, #4
	sub	r0, r0, #4
	ldr	r3, [r3, #-12]
	ldr	r2, .L55+28
	mov	r1, #4096
	bl	snprintf
	sub	r3, fp, #8192
	sub	r3, r3, #4
	sub	r3, r3, #4
	mov	r0, r3
	bl	mkpath
	sub	r1, fp, #8192
	sub	r1, r1, #4
	sub	r1, r1, #4
	ldr	r3, .L55+32
	str	r3, [sp]
	mov	r3, #0
	ldr	r2, .L55+36
	ldr	r0, .L55+36
	bl	mount
	mov	r3, r0
	cmp	r3, #0
	moveq	r3, #1
	movne	r3, #0
	and	r3, r3, #255
	ldr	r1, .L55+40
	mov	r0, r3
	bl	_check
	sub	r3, fp, #8192
	sub	r3, r3, #4
	sub	r0, fp, #8192
	sub	r0, r0, #4
	sub	r0, r0, #4
	ldr	r3, [r3, #-12]
	ldr	r2, .L55+44
	mov	r1, #4096
	bl	snprintf
	sub	r3, fp, #8192
	sub	r3, r3, #4
	sub	r0, fp, #4096
	sub	r0, r0, #4
	sub	r0, r0, #4
	ldr	r3, [r3, #-12]
	ldr	r2, .L55+48
	mov	r1, #4096
	bl	snprintf
	sub	r1, fp, #4096
	sub	r1, r1, #4
	sub	r1, r1, #4
	sub	r3, fp, #8192
	sub	r3, r3, #4
	sub	r3, r3, #4
	mov	r2, #0
	mov	r0, r3
	bl	bind_mount
	nop
	ldr	r3, .L55
	ldr	r2, [r3]
	ldr	r3, [fp, #-8]
	eors	r2, r3, r2
	mov	r3, #0
	beq	.L54
	bl	__stack_chk_fail
.L54:
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
.L56:
	.align	2
.L55:
	.word	.LC37
	.word	.LC26
	.word	.LC27
	.word	.LC28
	.word	.LC29
	.word	.LC30
	.word	.LC31
	.word	.LC32
	.word	.LC34
	.word	.LC33
	.word	319
	.word	.LC35
	.word	.LC36
	.size	mount_dev, .-mount_dev
	.section	.rodata
	.align	2
.LC38:
	.ascii	"%s/%s\000"
	.align	2
.LC39:
	.ascii	"--> mapping %s to %s\012\000"
	.align	2
.LC40:
	.ascii	"--> workspacing %s to %s\012\000"
	.align	2
.LC41:
	.word	__stack_chk_guard
	.text
	.align	2
	.syntax unified
	.arm
	.fpu softvfp
	.type	mount_maps, %function
mount_maps:
	@ args = 0, pretend = 0, frame = 4128
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #4096
	sub	sp, sp, #40
	sub	r3, fp, #4096
	sub	r3, r3, #4
	str	r0, [r3, #-20]
	sub	r3, fp, #4096
	sub	r3, r3, #4
	str	r1, [r3, #-24]
	sub	r3, fp, #4096
	sub	r3, r3, #4
	strb	r2, [r3, #-25]
	ldr	r3, .L65
	ldr	r3, [r3]
	str	r3, [fp, #-8]
	mov	r3,#0
	sub	r3, fp, #4096
	sub	r3, r3, #4
	mov	r2, r3
	sub	r3, fp, #4096
	sub	r3, r3, #4
	ldr	r3, [r3, #-24]
	str	r3, [r2, #-12]
	b	.L58
.L63:
	sub	r3, fp, #4096
	sub	r3, r3, #4
	mov	r2, r3
	sub	r3, fp, #4096
	sub	r3, r3, #4
	ldr	r3, [r3, #-12]
	ldr	r3, [r3]
	str	r3, [r2, #-8]
	b	.L59
.L60:
	sub	r3, fp, #4096
	sub	r3, r3, #4
	mov	r2, r3
	sub	r3, fp, #4096
	sub	r3, r3, #4
	ldr	r3, [r3, #-8]
	add	r3, r3, #1
	str	r3, [r2, #-8]
.L59:
	sub	r3, fp, #4096
	sub	r3, r3, #4
	ldr	r3, [r3, #-8]
	ldrb	r3, [r3]	@ zero_extendqisi2
	cmp	r3, #47
	beq	.L60
	sub	r3, fp, #4096
	sub	r3, r3, #4
	mov	r2, r3
	sub	r0, fp, #4096
	sub	r0, r0, #4
	sub	r0, r0, #4
	sub	r3, fp, #4096
	sub	r3, r3, #4
	ldr	r3, [r3, #-8]
	str	r3, [sp]
	ldr	r3, [r2, #-20]
	ldr	r2, .L65+4
	mov	r1, #4096
	bl	snprintf
	ldr	r3, .L65+8
	ldrb	r3, [r3]	@ zero_extendqisi2
	cmp	r3, #0
	beq	.L61
	sub	r3, fp, #4096
	sub	r3, r3, #4
	ldrb	r3, [r3, #-25]	@ zero_extendqisi2
	cmp	r3, #0
	beq	.L62
	ldr	r3, .L65+12
	ldr	r0, [r3]
	sub	r3, fp, #4096
	sub	r3, r3, #4
	ldr	r3, [r3, #-12]
	ldr	r2, [r3, #4]
	sub	r3, fp, #4096
	sub	r3, r3, #4
	sub	r3, r3, #4
	ldr	r1, .L65+16
	bl	fprintf
	b	.L61
.L62:
	ldr	r3, .L65+12
	ldr	r0, [r3]
	sub	r3, fp, #4096
	sub	r3, r3, #4
	ldr	r3, [r3, #-12]
	ldr	r2, [r3, #4]
	sub	r3, fp, #4096
	sub	r3, r3, #4
	sub	r3, r3, #4
	ldr	r1, .L65+20
	bl	fprintf
.L61:
	sub	r3, fp, #4096
	sub	r3, r3, #4
	sub	r3, r3, #4
	mov	r0, r3
	bl	mkpath
	sub	r3, fp, #4096
	sub	r3, r3, #4
	ldr	r3, [r3, #-12]
	ldr	r0, [r3, #4]
	sub	r3, fp, #4096
	sub	r3, r3, #4
	ldrb	r2, [r3, #-25]	@ zero_extendqisi2
	sub	r3, fp, #4096
	sub	r3, r3, #4
	sub	r3, r3, #4
	mov	r1, r3
	bl	bind_mount
	sub	r3, fp, #4096
	sub	r3, r3, #4
	mov	r2, r3
	sub	r3, fp, #4096
	sub	r3, r3, #4
	ldr	r3, [r3, #-12]
	ldr	r3, [r3, #8]
	str	r3, [r2, #-12]
.L58:
	sub	r3, fp, #4096
	sub	r3, r3, #4
	ldr	r3, [r3, #-12]
	cmp	r3, #0
	bne	.L63
	nop
	ldr	r3, .L65
	ldr	r2, [r3]
	ldr	r3, [fp, #-8]
	eors	r2, r3, r2
	mov	r3, #0
	beq	.L64
	bl	__stack_chk_fail
.L64:
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
.L66:
	.align	2
.L65:
	.word	.LC41
	.word	.LC38
	.word	verbose
	.word	stderr
	.word	.LC39
	.word	.LC40
	.size	mount_maps, .-mount_maps
	.section	.rodata
	.align	2
.LC42:
	.ascii	"--> Creating overlay workdir at /proc\012\000"
	.align	2
.LC43:
	.ascii	"tmpfs\000"
	.align	2
.LC44:
	.ascii	"/proc\000"
	.align	2
.LC45:
	.ascii	"size=1G\000"
	.align	2
.LC46:
	.ascii	"rootfs\000"
	.text
	.align	2
	.syntax unified
	.arm
	.fpu softvfp
	.type	mount_the_world, %function
mount_the_world:
	@ args = 4, pretend = 0, frame = 16
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #24
	str	r0, [fp, #-8]
	str	r1, [fp, #-12]
	str	r2, [fp, #-16]
	str	r3, [fp, #-20]
	ldr	r3, .L69
	ldrb	r3, [r3]	@ zero_extendqisi2
	cmp	r3, #0
	beq	.L68
	ldr	r3, .L69+4
	ldr	r3, [r3]
	mov	r2, #38
	mov	r1, #1
	ldr	r0, .L69+8
	bl	fwrite
.L68:
	ldr	r3, .L69+12
	str	r3, [sp]
	mov	r3, #0
	ldr	r2, .L69+16
	ldr	r1, .L69+20
	ldr	r0, .L69+16
	bl	mount
	mov	r3, r0
	cmp	r3, #0
	moveq	r3, #1
	movne	r3, #0
	and	r3, r3, #255
	ldr	r1, .L69+24
	mov	r0, r3
	bl	_check
	ldr	r3, [fp, #4]
	str	r3, [sp, #4]
	ldr	r3, [fp, #-20]
	str	r3, [sp]
	ldr	r3, .L69+20
	ldr	r2, .L69+28
	ldr	r1, [fp, #-8]
	ldr	r0, [fp, #-8]
	bl	mount_overlay
	mov	r2, #1
	ldr	r1, [fp, #-12]
	ldr	r0, [fp, #-8]
	bl	mount_maps
	ldr	r2, [fp, #4]
	ldr	r1, [fp, #-20]
	ldr	r0, [fp, #-8]
	bl	mount_procfs
	ldr	r0, [fp, #-8]
	bl	mount_dev
	mov	r2, #0
	ldr	r1, [fp, #-16]
	ldr	r0, [fp, #-8]
	bl	mount_maps
	ldr	r2, [fp, #4]
	ldr	r1, [fp, #-20]
	ldr	r0, .L69+32
	bl	mount_procfs
	nop
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
.L70:
	.align	2
.L69:
	.word	verbose
	.word	stderr
	.word	.LC42
	.word	.LC45
	.word	.LC43
	.word	.LC44
	.word	377
	.word	.LC46
	.word	.LC22
	.size	mount_the_world, .-mount_the_world
	.section	.rodata
	.align	2
.LC47:
	.ascii	".\000"
	.align	2
.LC48:
	.ascii	"About to run `%s` \000"
	.align	2
.LC49:
	.ascii	"`%s` \000"
	.align	2
.LC50:
	.ascii	"ERROR: Failed to run %s: %d (%s)\012\000"
	.align	2
.LC51:
	.word	__stack_chk_guard
	.text
	.align	2
	.syntax unified
	.arm
	.fpu softvfp
	.type	sandbox_main, %function
sandbox_main:
	@ args = 0, pretend = 0, frame = 168
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{r4, r5, r6, fp, lr}
	add	fp, sp, #16
	sub	sp, sp, #180
	str	r0, [fp, #-176]
	str	r1, [fp, #-180]
	str	r2, [fp, #-184]
	str	r3, [fp, #-188]
	ldr	r3, .L87
	ldr	r3, [r3]
	str	r3, [fp, #-24]
	mov	r3,#0
	ldr	r3, [fp, #-176]
	ldrb	r3, [r3]	@ zero_extendqisi2
	cmp	r3, #0
	bne	.L72
	ldr	r3, .L87+4
	str	r3, [fp, #-176]
.L72:
	ldr	r0, [fp, #-176]
	bl	chdir
	mov	r3, r0
	cmp	r3, #0
	moveq	r3, #1
	movne	r3, #0
	and	r3, r3, #255
	mov	r1, #420
	mov	r0, r3
	bl	_check
	ldr	r2, .L87+8
	ldr	r1, .L87+8
	mov	r0, #218
	bl	syscall
	mov	r3, r0
	cmp	r3, #0
	bne	.L73
	mov	r1, #2
	ldr	r0, .L87+8
	bl	umount2
	mov	r3, r0
	cmp	r3, #0
	moveq	r3, #1
	movne	r3, #0
	and	r3, r3, #255
	ldr	r1, .L87+12
	mov	r0, r3
	bl	_check
	ldr	r0, .L87+4
	bl	chdir
	mov	r3, r0
	cmp	r3, #0
	moveq	r3, #1
	movne	r3, #0
	and	r3, r3, #255
	ldr	r1, .L87+16
	mov	r0, r3
	bl	_check
	b	.L74
.L73:
	ldr	r0, [fp, #-176]
	bl	chroot
	mov	r3, r0
	cmp	r3, #0
	moveq	r3, #1
	movne	r3, #0
	and	r3, r3, #255
	ldr	r1, .L87+20
	mov	r0, r3
	bl	_check
.L74:
	ldr	r3, [fp, #-180]
	cmp	r3, #0
	beq	.L75
	ldr	r0, [fp, #-180]
	bl	mkpath
	ldr	r0, [fp, #-180]
	bl	chdir
	mov	r3, r0
	cmp	r3, #0
	moveq	r3, #1
	movne	r3, #0
	and	r3, r3, #255
	ldr	r1, .L87+24
	mov	r0, r3
	bl	_check
.L75:
	bl	fork
	mov	r3, r0
	str	r3, [fp, #-160]
	ldr	r3, [fp, #-160]
	cmp	r3, #0
	bne	.L76
	ldr	r3, .L87+28
	ldrb	r3, [r3]	@ zero_extendqisi2
	cmp	r3, #0
	beq	.L77
	ldr	r3, .L87+32
	ldr	r0, [r3]
	ldr	r3, [fp, #-188]
	ldr	r3, [r3]
	mov	r2, r3
	ldr	r1, .L87+36
	bl	fprintf
	mov	r3, #1
	str	r3, [fp, #-164]
	b	.L78
.L79:
	ldr	r3, .L87+32
	ldr	r0, [r3]
	ldr	r3, [fp, #-164]
	lsl	r3, r3, #2
	ldr	r2, [fp, #-188]
	add	r3, r2, r3
	ldr	r3, [r3]
	mov	r2, r3
	ldr	r1, .L87+40
	bl	fprintf
	ldr	r3, [fp, #-164]
	add	r3, r3, #1
	str	r3, [fp, #-164]
.L78:
	ldr	r2, [fp, #-164]
	ldr	r3, [fp, #-184]
	cmp	r2, r3
	blt	.L79
	ldr	r3, .L87+32
	ldr	r3, [r3]
	mov	r1, r3
	mov	r0, #10
	bl	fputc
.L77:
	ldr	r3, [fp, #-188]
	ldr	r3, [r3]
	ldr	r2, .L87+44
	ldr	r2, [r2]
	ldr	r1, [fp, #-188]
	mov	r0, r3
	bl	execve
	ldr	r3, .L87+32
	ldr	r4, [r3]
	ldr	r3, [fp, #-188]
	ldr	r5, [r3]
	bl	__errno_location
	mov	r3, r0
	ldr	r6, [r3]
	bl	__errno_location
	mov	r3, r0
	ldr	r3, [r3]
	mov	r0, r3
	bl	strerror
	mov	r3, r0
	str	r3, [sp]
	mov	r3, r6
	mov	r2, r5
	ldr	r1, .L87+48
	mov	r0, r4
	bl	fprintf
	ldr	r3, .L87+52
	ldr	r3, [r3]
	mov	r0, r3
	bl	fflush
	ldr	r3, .L87+32
	ldr	r3, [r3]
	mov	r0, r3
	bl	fflush
	mov	r0, #1
	bl	_exit
.L76:
	sub	r3, fp, #152
	mov	r0, r3
	bl	sigemptyset
	sub	r3, fp, #152
	mov	r1, #17
	mov	r0, r3
	bl	sigaddset
	sub	r3, fp, #152
	mov	r2, #0
	mov	r1, r3
	mov	r0, #0
	bl	sigprocmask
.L85:
	sub	r2, fp, #168
	sub	r3, fp, #152
	mov	r1, r2
	mov	r0, r3
	bl	sigwait
	b	.L80
.L84:
	ldr	r2, [fp, #-156]
	ldr	r3, [fp, #-160]
	cmp	r2, r3
	bne	.L80
	ldr	r3, [fp, #-172]
	and	r3, r3, #127
	cmp	r3, #0
	bne	.L81
	ldr	r3, [fp, #-172]
	asr	r3, r3, #8
	and	r3, r3, #255
	b	.L83
.L81:
	mov	r3, #1
	b	.L83
.L80:
	sub	r3, fp, #172
	mov	r2, #0
	mov	r1, r3
	mvn	r0, #0
	bl	waitpid
	str	r0, [fp, #-156]
	ldr	r3, [fp, #-156]
	cmn	r3, #1
	bne	.L84
	b	.L85
.L83:
	ldr	r2, .L87
	ldr	r1, [r2]
	ldr	r2, [fp, #-24]
	eors	r1, r2, r1
	mov	r2, #0
	beq	.L86
	bl	__stack_chk_fail
.L86:
	mov	r0, r3
	sub	sp, fp, #16
	@ sp needed
	pop	{r4, r5, r6, fp, pc}
.L88:
	.align	2
.L87:
	.word	.LC51
	.word	.LC14
	.word	.LC47
	.word	422
	.word	423
	.word	425
	.word	431
	.word	verbose
	.word	stderr
	.word	.LC48
	.word	.LC49
	.word	environ
	.word	.LC50
	.word	stdout
	.size	sandbox_main, .-sandbox_main
	.section	.rodata
	.align	2
.LC52:
	.ascii	"Usage: sandbox --rootfs <dir> [--cd <dir>] \000"
	.align	2
.LC53:
	.ascii	"[--map <from>:<to>, --map <from>:<to>, ...] \000"
	.align	2
.LC54:
	.ascii	"[--workspace <from>:<to>, --workspace <from>:<to>, "
	.ascii	"...] \000"
	.align	2
.LC55:
	.ascii	"[--entrypoint <exe_path>] \000"
	.align	2
.LC56:
	.ascii	"[--verbose] [--help] <cmd>\012\000"
	.align	2
.LC57:
	.ascii	"\012Example:\012\000"
	.align	2
.LC58:
	.ascii	"  mkdir -p /tmp/workspace\012\000"
	.align	2
.LC59:
	.ascii	"  /tmp/sandbox --verbose --rootfs $rootfs_path --wo"
	.ascii	"rkspace /tmp/workspace:/workspace --cd /workspace /"
	.ascii	"bin/bash\012\000"
	.text
	.align	2
	.syntax unified
	.arm
	.fpu softvfp
	.type	print_help, %function
print_help:
	@ args = 0, pretend = 0, frame = 0
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	ldr	r3, .L90
	ldr	r3, [r3]
	mov	r2, #43
	mov	r1, #1
	ldr	r0, .L90+4
	bl	fwrite
	ldr	r3, .L90
	ldr	r3, [r3]
	mov	r2, #44
	mov	r1, #1
	ldr	r0, .L90+8
	bl	fwrite
	ldr	r3, .L90
	ldr	r3, [r3]
	mov	r2, #56
	mov	r1, #1
	ldr	r0, .L90+12
	bl	fwrite
	ldr	r3, .L90
	ldr	r3, [r3]
	mov	r2, #26
	mov	r1, #1
	ldr	r0, .L90+16
	bl	fwrite
	ldr	r3, .L90
	ldr	r3, [r3]
	mov	r2, #27
	mov	r1, #1
	ldr	r0, .L90+20
	bl	fwrite
	ldr	r3, .L90
	ldr	r3, [r3]
	mov	r2, #10
	mov	r1, #1
	ldr	r0, .L90+24
	bl	fwrite
	ldr	r3, .L90
	ldr	r3, [r3]
	mov	r2, #26
	mov	r1, #1
	ldr	r0, .L90+28
	bl	fwrite
	ldr	r3, .L90
	ldr	r3, [r3]
	mov	r2, #111
	mov	r1, #1
	ldr	r0, .L90+32
	bl	fwrite
	nop
	pop	{fp, pc}
.L91:
	.align	2
.L90:
	.word	stderr
	.word	.LC52
	.word	.LC53
	.word	.LC54
	.word	.LC55
	.word	.LC56
	.word	.LC57
	.word	.LC58
	.word	.LC59
	.size	print_help, .-print_help
	.align	2
	.syntax unified
	.arm
	.fpu softvfp
	.type	sigint_handler, %function
sigint_handler:
	@ args = 0, pretend = 0, frame = 0
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	mov	r0, #0
	bl	_exit
	.size	sigint_handler, .-sigint_handler
	.section	.rodata
	.align	2
.LC60:
	.ascii	"FORCE_SANDBOX_MODE\000"
	.align	2
.LC61:
	.ascii	"privileged\000"
	.align	2
.LC62:
	.ascii	"unprivileged\000"
	.align	2
.LC63:
	.ascii	"ERROR: Unknown FORCE_SANDBOX_MODE argument \"%s\"\012"
	.ascii	"\000"
	.align	2
.LC64:
	.ascii	"SUDO_UID\000"
	.align	2
.LC65:
	.ascii	"SUDO_GID\000"
	.align	2
.LC66:
	.ascii	"verbose sandbox enabled (running in \000"
	.align	2
.LC67:
	.ascii	"un\000"
	.align	2
.LC68:
	.ascii	"privileged container\000"
	.align	2
.LC69:
	.ascii	" mode)\012\000"
	.align	2
.LC70:
	.ascii	"Parsed --rootfs as \"%s\"\012\000"
	.align	2
.LC71:
	.ascii	"Parsed --cd as \"%s\"\012\000"
	.align	2
.LC72:
	.ascii	"9p/\000"
	.align	2
.LC73:
	.ascii	"ERROR: Outside path \"%s\" must be absolute or 9p! "
	.ascii	" Ignoring...\012\000"
	.align	2
.LC74:
	.ascii	"map\000"
	.align	2
.LC75:
	.ascii	"workspace\000"
	.align	2
.LC76:
	.ascii	"Parsed --%s as \"%s\" -> \"%s\"\012\000"
	.align	2
.LC77:
	.ascii	"getoptlong defaulted?!\012\000"
	.align	2
.LC78:
	.ascii	"No <cmd> given!\012\000"
	.align	2
.LC79:
	.ascii	"--rootfs is required!\012\000"
	.align	2
.LC80:
	.ascii	"Child Process PID is %d\012\000"
	.align	2
.LC81:
	.ascii	"Child Process exited, exit code %d\012\000"
	.align	2
.LC82:
	.word	__stack_chk_guard
	.text
	.align	2
	.global	main
	.syntax unified
	.arm
	.fpu softvfp
	.type	main, %function
main:
	@ args = 0, pretend = 0, frame = 96
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #104
	str	r0, [fp, #-96]
	str	r1, [fp, #-100]
	ldr	r3, .L142
	ldr	r3, [r3]
	str	r3, [fp, #-8]
	mov	r3,#0
	mov	r3, #0
	str	r3, [fp, #-92]
	mov	r0, #0
	bl	getpgid
	str	r0, [fp, #-72]
	mov	r3, #0
	str	r3, [fp, #-84]
	ldr	r0, .L142+4
	bl	getenv
	str	r0, [fp, #-68]
	ldr	r3, [fp, #-68]
	cmp	r3, #0
	beq	.L94
	ldr	r1, .L142+8
	ldr	r0, [fp, #-68]
	bl	strcmp
	mov	r3, r0
	cmp	r3, #0
	bne	.L95
	ldr	r3, .L142+12
	mov	r2, #1
	str	r2, [r3]
	b	.L96
.L95:
	ldr	r1, .L142+16
	ldr	r0, [fp, #-68]
	bl	strcmp
	mov	r3, r0
	cmp	r3, #0
	bne	.L97
	ldr	r3, .L142+12
	mov	r2, #0
	str	r2, [r3]
	b	.L96
.L97:
	ldr	r3, .L142+20
	ldr	r3, [r3]
	ldr	r2, [fp, #-68]
	ldr	r1, .L142+24
	mov	r0, r3
	bl	fprintf
	mov	r0, #1
	bl	_exit
.L94:
	bl	geteuid
	mov	r3, r0
	cmp	r3, #0
	bne	.L98
	ldr	r3, .L142+12
	mov	r2, #1
	str	r2, [r3]
	b	.L99
.L98:
	ldr	r3, .L142+12
	mov	r2, #0
	str	r2, [r3]
.L99:
	mov	r2, #0
	ldr	r1, .L142+16
	ldr	r0, .L142+4
	bl	setenv
.L96:
	bl	getuid
	str	r0, [fp, #-80]
	bl	getgid
	str	r0, [fp, #-76]
	ldr	r0, .L142+28
	bl	getenv
	str	r0, [fp, #-64]
	ldr	r3, [fp, #-64]
	cmp	r3, #0
	beq	.L100
	ldr	r3, [fp, #-64]
	ldrb	r3, [r3]	@ zero_extendqisi2
	cmp	r3, #0
	beq	.L100
	mov	r2, #10
	mov	r1, #0
	ldr	r0, [fp, #-64]
	bl	strtol
	mov	r3, r0
	str	r3, [fp, #-80]
.L100:
	ldr	r0, .L142+32
	bl	getenv
	str	r0, [fp, #-60]
	ldr	r3, [fp, #-60]
	cmp	r3, #0
	beq	.L101
	ldr	r3, [fp, #-60]
	ldrb	r3, [r3]	@ zero_extendqisi2
	cmp	r3, #0
	beq	.L101
	mov	r2, #10
	mov	r1, #0
	ldr	r0, [fp, #-60]
	bl	strtol
	mov	r3, r0
	str	r3, [fp, #-76]
.L101:
	ldr	r0, .L142+28
	bl	unsetenv
	ldr	r0, .L142+32
	bl	unsetenv
.L127:
	sub	r3, fp, #88
	str	r3, [sp]
	ldr	r3, .L142+36
	ldr	r2, .L142+40
	ldr	r1, [fp, #-100]
	ldr	r0, [fp, #-96]
	bl	getopt_long
	str	r0, [fp, #-56]
	ldr	r3, [fp, #-56]
	cmn	r3, #1
	bne	.L102
	ldr	r3, .L142+44
	ldr	r3, [r3]
	lsl	r3, r3, #2
	ldr	r2, [fp, #-100]
	add	r3, r2, r3
	str	r3, [fp, #-100]
	ldr	r3, .L142+44
	ldr	r3, [r3]
	ldr	r2, [fp, #-96]
	sub	r3, r2, r3
	str	r3, [fp, #-96]
	ldr	r3, [fp, #-84]
	cmp	r3, #0
	bne	.L103
	b	.L104
.L102:
	ldr	r3, [fp, #-56]
	sub	r3, r3, #63
	cmp	r3, #56
	ldrls	pc, [pc, r3, asl #2]
	b	.L105
.L107:
	.word	.L110
	.word	.L105
	.word	.L105
	.word	.L105
	.word	.L105
	.word	.L105
	.word	.L105
	.word	.L105
	.word	.L105
	.word	.L105
	.word	.L105
	.word	.L105
	.word	.L105
	.word	.L105
	.word	.L105
	.word	.L105
	.word	.L105
	.word	.L105
	.word	.L105
	.word	.L105
	.word	.L105
	.word	.L105
	.word	.L105
	.word	.L105
	.word	.L105
	.word	.L105
	.word	.L105
	.word	.L105
	.word	.L105
	.word	.L105
	.word	.L105
	.word	.L105
	.word	.L105
	.word	.L105
	.word	.L105
	.word	.L105
	.word	.L112
	.word	.L105
	.word	.L111
	.word	.L105
	.word	.L105
	.word	.L110
	.word	.L105
	.word	.L105
	.word	.L105
	.word	.L105
	.word	.L106
	.word	.L105
	.word	.L105
	.word	.L105
	.word	.L105
	.word	.L109
	.word	.L105
	.word	.L105
	.word	.L105
	.word	.L108
	.word	.L106
.L110:
	bl	print_help
	mov	r3, #0
	b	.L137
.L108:
	ldr	r3, .L142+48
	mov	r2, #1
	strb	r2, [r3]
	ldr	r3, .L142+20
	ldr	r3, [r3]
	mov	r2, #36
	mov	r1, #1
	ldr	r0, .L142+52
	bl	fwrite
	ldr	r3, .L142+12
	ldr	r3, [r3]
	cmp	r3, #0
	beq	.L114
	cmp	r3, #1
	beq	.L115
	b	.L116
.L114:
	ldr	r3, .L142+20
	ldr	r3, [r3]
	mov	r2, #2
	mov	r1, #1
	ldr	r0, .L142+56
	bl	fwrite
.L115:
	ldr	r3, .L142+20
	ldr	r3, [r3]
	mov	r2, #20
	mov	r1, #1
	ldr	r0, .L142+60
	bl	fwrite
	nop
.L116:
	ldr	r3, .L142+20
	ldr	r3, [r3]
	mov	r2, #7
	mov	r1, #1
	ldr	r0, .L142+64
	bl	fwrite
	b	.L117
.L109:
	ldr	r3, .L142+68
	ldr	r3, [r3]
	mov	r0, r3
	bl	strdup
	mov	r3, r0
	mov	r2, r3
	ldr	r3, .L142+72
	str	r2, [r3]
	ldr	r3, .L142+72
	ldr	r3, [r3]
	mov	r0, r3
	bl	strlen
	str	r0, [fp, #-52]
	ldr	r3, .L142+72
	ldr	r2, [r3]
	ldr	r3, [fp, #-52]
	sub	r3, r3, #1
	add	r3, r2, r3
	ldrb	r3, [r3]	@ zero_extendqisi2
	cmp	r3, #47
	bne	.L118
	ldr	r3, .L142+72
	ldr	r2, [r3]
	ldr	r3, [fp, #-52]
	sub	r3, r3, #1
	add	r3, r2, r3
	mov	r2, #0
	strb	r2, [r3]
.L118:
	ldr	r3, .L142+48
	ldrb	r3, [r3]	@ zero_extendqisi2
	cmp	r3, #0
	beq	.L139
	ldr	r3, .L142+20
	ldr	r3, [r3]
	ldr	r2, .L142+72
	ldr	r2, [r2]
	ldr	r1, .L142+76
	mov	r0, r3
	bl	fprintf
	b	.L139
.L112:
	ldr	r3, .L142+68
	ldr	r3, [r3]
	mov	r0, r3
	bl	strdup
	mov	r3, r0
	mov	r2, r3
	ldr	r3, .L142+80
	str	r2, [r3]
	ldr	r3, .L142+48
	ldrb	r3, [r3]	@ zero_extendqisi2
	cmp	r3, #0
	beq	.L140
	ldr	r3, .L142+20
	ldr	r3, [r3]
	ldr	r2, .L142+80
	ldr	r2, [r2]
	ldr	r1, .L142+84
	mov	r0, r3
	bl	fprintf
	b	.L140
.L106:
	ldr	r3, .L142+68
	ldr	r3, [r3]
	mov	r1, #58
	mov	r0, r3
	bl	strchr
	str	r0, [fp, #-48]
	ldr	r3, [fp, #-48]
	cmp	r3, #0
	movne	r3, #1
	moveq	r3, #0
	and	r3, r3, #255
	ldr	r1, .L142+88
	mov	r0, r3
	bl	_check
	ldr	r3, .L142+68
	ldr	r0, [r3]
	ldr	r3, .L142+68
	ldr	r3, [r3]
	ldr	r2, [fp, #-48]
	sub	r3, r2, r3
	mov	r1, r3
	bl	strndup
	mov	r3, r0
	str	r3, [fp, #-44]
	ldr	r3, [fp, #-48]
	add	r3, r3, #1
	mov	r0, r3
	bl	strdup
	mov	r3, r0
	str	r3, [fp, #-40]
	ldr	r3, [fp, #-44]
	ldrb	r3, [r3]	@ zero_extendqisi2
	cmp	r3, #47
	beq	.L121
	mov	r2, #3
	ldr	r1, .L142+92
	ldr	r0, [fp, #-44]
	bl	strncmp
	mov	r3, r0
	cmp	r3, #0
	beq	.L121
	ldr	r3, .L142+20
	ldr	r3, [r3]
	ldr	r2, [fp, #-44]
	ldr	r1, .L142+96
	mov	r0, r3
	bl	fprintf
	b	.L117
.L121:
	mov	r0, #12
	bl	malloc
	mov	r3, r0
	str	r3, [fp, #-36]
	ldr	r3, [fp, #-36]
	ldr	r2, [fp, #-40]
	str	r2, [r3]
	ldr	r3, [fp, #-36]
	ldr	r2, [fp, #-44]
	str	r2, [r3, #4]
	ldr	r3, [fp, #-56]
	cmp	r3, #109
	bne	.L122
	ldr	r3, .L142+100
	ldr	r2, [r3]
	ldr	r3, [fp, #-36]
	str	r2, [r3, #8]
	ldr	r2, .L142+100
	ldr	r3, [fp, #-36]
	str	r3, [r2]
	b	.L123
.L122:
	ldr	r3, .L142+104
	ldr	r2, [r3]
	ldr	r3, [fp, #-36]
	str	r2, [r3, #8]
	ldr	r2, .L142+104
	ldr	r3, [fp, #-36]
	str	r3, [r2]
.L123:
	ldr	r3, .L142+48
	ldrb	r3, [r3]	@ zero_extendqisi2
	cmp	r3, #0
	beq	.L141
	ldr	r3, .L142+20
	ldr	r0, [r3]
	ldr	r3, [fp, #-56]
	cmp	r3, #109
	bne	.L125
	ldr	r2, .L142+108
	b	.L126
.L125:
	ldr	r2, .L142+112
.L126:
	ldr	r3, [fp, #-36]
	ldr	r1, [r3, #4]
	ldr	r3, [fp, #-36]
	ldr	r3, [r3]
	str	r3, [sp]
	mov	r3, r1
	ldr	r1, .L142+116
	bl	fprintf
	b	.L141
.L111:
	ldr	r3, .L142+68
	ldr	r3, [r3]
	mov	r0, r3
	bl	strdup
	mov	r3, r0
	str	r3, [fp, #-84]
	b	.L117
.L105:
	ldr	r3, .L142+20
	ldr	r3, [r3]
	mov	r2, #23
	mov	r1, #1
	ldr	r0, .L142+120
	bl	fwrite
	mov	r3, #1
	b	.L137
.L139:
	nop
	b	.L127
.L140:
	nop
	b	.L127
.L141:
	nop
.L117:
	b	.L127
.L103:
	ldr	r3, [fp, #-100]
	sub	r3, r3, #4
	str	r3, [fp, #-100]
	ldr	r3, [fp, #-96]
	add	r3, r3, #1
	str	r3, [fp, #-96]
	ldr	r3, [fp, #-100]
	ldr	r2, [fp, #-84]
	str	r2, [r3]
.L104:
	ldr	r3, [fp, #-96]
	cmp	r3, #0
	bne	.L129
	ldr	r3, .L142+20
	ldr	r3, [r3]
	mov	r2, #16
	mov	r1, #1
	ldr	r0, .L142+124
	bl	fwrite
	bl	print_help
	mov	r3, #1
	b	.L137
.L129:
	ldr	r3, .L142+72
	ldr	r3, [r3]
	cmp	r3, #0
	bne	.L130
	ldr	r3, .L142+20
	ldr	r3, [r3]
	mov	r2, #22
	mov	r1, #1
	ldr	r0, .L142+128
	bl	fwrite
	bl	print_help
	mov	r3, #1
	b	.L137
.L130:
	sub	r3, fp, #24
	mov	r0, r3
	bl	pipe
	mov	r3, r0
	cmp	r3, #0
	moveq	r3, #1
	movne	r3, #0
	and	r3, r3, #255
	ldr	r1, .L142+132
	mov	r0, r3
	bl	_check
	sub	r3, fp, #16
	mov	r0, r3
	bl	pipe
	mov	r3, r0
	cmp	r3, #0
	moveq	r3, #1
	movne	r3, #0
	and	r3, r3, #255
	mov	r1, #664
	mov	r0, r3
	bl	_check
	ldr	r3, .L142+12
	ldr	r3, [r3]
	cmp	r3, #1
	bne	.L131
	mov	r0, #131072
	bl	unshare
	mov	r3, r0
	cmp	r3, #0
	moveq	r3, #1
	movne	r3, #0
	and	r3, r3, #255
	ldr	r1, .L142+136
	mov	r0, r3
	bl	_check
	mov	r3, #0
	str	r3, [sp]
	mov	r3, #278528
	mov	r2, #0
	ldr	r1, .L142+140
	mov	r0, #0
	bl	mount
	mov	r3, r0
	cmp	r3, #0
	moveq	r3, #1
	movne	r3, #0
	and	r3, r3, #255
	mov	r1, #676
	mov	r0, r3
	bl	_check
	ldr	r3, .L142+72
	ldr	r0, [r3]
	ldr	r3, .L142+100
	ldr	r1, [r3]
	ldr	r3, .L142+104
	ldr	r2, [r3]
	ldr	r3, [fp, #-76]
	str	r3, [sp]
	ldr	r3, [fp, #-80]
	bl	mount_the_world
.L131:
	ldr	r3, .L142+144
	str	r3, [fp, #-32]
	mov	r3, #0
	str	r3, [sp, #4]
	mov	r3, #0
	str	r3, [sp]
	mov	r3, #0
	mov	r2, #0
	ldr	r1, [fp, #-32]
	mov	r0, #120
	bl	syscall
	str	r0, [fp, #-28]
	ldr	r3, [fp, #-28]
	cmp	r3, #0
	bne	.L132
	ldr	r3, [fp, #-20]
	mov	r0, r3
	bl	close
	ldr	r3, [fp, #-16]
	mov	r0, r3
	bl	close
	mov	r3, #0
	str	r3, [sp]
	mov	r3, #0
	mov	r2, #0
	mov	r1, #1
	mov	r0, #4
	bl	prctl
	ldr	r1, .L142+148
	mov	r0, #2
	bl	signal
	ldr	r3, [fp, #-12]
	mov	r0, r3
	bl	close
	ldr	r3, [fp, #-24]
	mov	r2, #1
	mov	r1, #0
	mov	r0, r3
	bl	read
	mov	r3, r0
	cmp	r3, #0
	moveq	r3, #1
	movne	r3, #0
	and	r3, r3, #255
	ldr	r1, .L142+152
	mov	r0, r3
	bl	_check
	ldr	r3, .L142+12
	ldr	r3, [r3]
	cmp	r3, #1
	bne	.L133
	mov	r0, #0
	bl	setuid
	mov	r3, r0
	cmp	r3, #0
	moveq	r3, #1
	movne	r3, #0
	and	r3, r3, #255
	mov	r1, #712
	mov	r0, r3
	bl	_check
	mov	r0, #0
	bl	setgid
	mov	r3, r0
	cmp	r3, #0
	moveq	r3, #1
	movne	r3, #0
	and	r3, r3, #255
	ldr	r1, .L142+156
	mov	r0, r3
	bl	_check
	ldr	r3, .L142+72
	ldr	r3, [r3]
	mov	r2, #0
	mov	r1, #0
	mov	r0, r3
	bl	mount_procfs
	b	.L134
.L133:
	ldr	r3, .L142+12
	ldr	r3, [r3]
	cmp	r3, #0
	bne	.L134
	ldr	r3, .L142+72
	ldr	r0, [r3]
	ldr	r3, .L142+100
	ldr	r1, [r3]
	ldr	r3, .L142+104
	ldr	r2, [r3]
	mov	r3, #0
	str	r3, [sp]
	mov	r3, #0
	bl	mount_the_world
.L134:
	ldr	r3, .L142+72
	ldr	r0, [r3]
	ldr	r3, .L142+80
	ldr	r1, [r3]
	ldr	r3, [fp, #-100]
	ldr	r2, [fp, #-96]
	bl	sandbox_main
	mov	r3, r0
	b	.L137
.L132:
	ldr	r3, [fp, #-28]
	cmn	r3, #1
	movne	r3, #1
	moveq	r3, #0
	and	r3, r3, #255
	ldr	r1, .L142+160
	mov	r0, r3
	bl	_check
	ldr	r3, [fp, #-24]
	mov	r0, r3
	bl	close
	ldr	r3, [fp, #-12]
	mov	r0, r3
	bl	close
	ldr	r3, [fp, #-16]
	mov	r2, #1
	mov	r1, #0
	mov	r0, r3
	bl	read
	mov	r3, r0
	cmp	r3, #0
	moveq	r3, #1
	movne	r3, #0
	and	r3, r3, #255
	ldr	r1, .L142+164
	mov	r0, r3
	bl	_check
	ldr	r3, .L142+48
	ldrb	r3, [r3]	@ zero_extendqisi2
	cmp	r3, #0
	beq	.L135
	ldr	r3, .L142+20
	ldr	r3, [r3]
	ldr	r2, [fp, #-28]
	ldr	r1, .L142+168
	mov	r0, r3
	bl	fprintf
.L135:
	ldr	r2, [fp, #-28]
	ldr	r1, [fp, #-76]
	ldr	r0, [fp, #-80]
	bl	configure_user_namespace
	ldr	r3, [fp, #-20]
	mov	r0, r3
	bl	close
	sub	r3, fp, #92
	mov	r2, #0
	mov	r1, r3
	ldr	r0, [fp, #-28]
	bl	waitpid
	mov	r2, r0
	ldr	r3, [fp, #-28]
	cmp	r3, r2
	moveq	r3, #1
	movne	r3, #0
	and	r3, r3, #255
	ldr	r1, .L142+172
	mov	r0, r3
	bl	_check
	ldr	r3, [fp, #-92]
	and	r3, r3, #127
	cmp	r3, #0
	moveq	r3, #1
	movne	r3, #0
	and	r3, r3, #255
	ldr	r1, .L142+176
	mov	r0, r3
	bl	_check
	ldr	r3, .L142+48
	ldrb	r3, [r3]	@ zero_extendqisi2
	cmp	r3, #0
	beq	.L136
	ldr	r3, .L142+20
	ldr	r0, [r3]
	ldr	r3, [fp, #-92]
	asr	r3, r3, #8
	and	r3, r3, #255
	mov	r2, r3
	ldr	r1, .L142+180
	bl	fprintf
.L136:
	mov	r1, #1
	mov	r0, #22
	bl	signal
	ldr	r1, [fp, #-72]
	mov	r0, #0
	bl	tcsetpgrp
	ldr	r3, [fp, #-92]
	asr	r3, r3, #8
	and	r3, r3, #255
.L137:
	ldr	r2, .L142
	ldr	r1, [r2]
	ldr	r2, [fp, #-8]
	eors	r1, r2, r1
	mov	r2, #0
	beq	.L138
	bl	__stack_chk_fail
.L138:
	mov	r0, r3
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
.L143:
	.align	2
.L142:
	.word	.LC82
	.word	.LC60
	.word	.LC61
	.word	execution_mode
	.word	.LC62
	.word	stderr
	.word	.LC63
	.word	.LC64
	.word	.LC65
	.word	long_options.9112
	.word	.LC22
	.word	optind
	.word	verbose
	.word	.LC66
	.word	.LC67
	.word	.LC68
	.word	.LC69
	.word	optarg
	.word	sandbox_root
	.word	.LC70
	.word	new_cd
	.word	.LC71
	.word	594
	.word	.LC72
	.word	.LC73
	.word	maps
	.word	workspaces
	.word	.LC74
	.word	.LC75
	.word	.LC76
	.word	.LC77
	.word	.LC78
	.word	.LC79
	.word	663
	.word	670
	.word	.LC14
	.word	805437457
	.word	sigint_handler
	.word	706
	.word	713
	.word	731
	.word	738
	.word	.LC80
	.word	750
	.word	751
	.word	.LC81
	.size	main, .-main
	.section	.rodata
	.align	2
.LC83:
	.ascii	"help\000"
	.align	2
.LC84:
	.ascii	"verbose\000"
	.align	2
.LC85:
	.ascii	"entrypoint\000"
	.align	2
.LC86:
	.ascii	"cd\000"
	.data
	.align	2
	.type	long_options.9112, %object
	.size	long_options.9112, 128
long_options.9112:
	.word	.LC83
	.word	0
	.word	0
	.word	104
	.word	.LC84
	.word	0
	.word	0
	.word	118
	.word	.LC46
	.word	1
	.word	0
	.word	114
	.word	.LC75
	.word	1
	.word	0
	.word	119
	.word	.LC85
	.word	1
	.word	0
	.word	101
	.word	.LC86
	.word	1
	.word	0
	.word	99
	.word	.LC74
	.word	1
	.word	0
	.word	109
	.word	0
	.word	0
	.word	0
	.word	0
	.ident	"GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0"
	.section	.note.GNU-stack,"",%progbits
