	.file	"159514403.c"
	.intel_syntax noprefix
	.text
	.section	.rodata
.LC0:
	.string	"plz input your name: "
	.text
	.globl	Ret
	.type	Ret, @function
Ret:
.LFB6:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 16
	mov	rax, QWORD PTR fs:40
	mov	QWORD PTR -8[rbp], rax
	xor	eax, eax
	lea	rdi, .LC0[rip]
	call	puts@PLT
	lea	rax, -12[rbp]
	mov	edx, 48
	mov	rsi, rax
	mov	edi, 0
	mov	eax, 0
	call	read@PLT
	nop
	mov	rax, QWORD PTR -8[rbp]
	sub	rax, QWORD PTR fs:40
	je	.L2
	call	__stack_chk_fail@PLT
.L2:
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE6:
	.size	Ret, .-Ret
	.section	.rodata
.LC1:
	.string	"In %s \n"
	.text
	.globl	Test
	.type	Test, @function
Test:
.LFB7:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	lea	rsi, __FUNCTION__.5[rip]
	lea	rdi, .LC1[rip]
	mov	eax, 0
	call	printf@PLT
	nop
	pop	rbp
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE7:
	.size	Test, .-Test
	.section	.rodata
.LC2:
	.string	"Bye from foo"
	.text
	.globl	Foo
	.type	Foo, @function
Foo:
.LFB8:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	call	Ret
	lea	rsi, __FUNCTION__.4[rip]
	lea	rdi, .LC1[rip]
	mov	eax, 0
	call	printf@PLT
	lea	rdi, .LC2[rip]
	call	puts@PLT
	mov	edi, 0
	call	exit@PLT
	.cfi_endproc
.LFE8:
	.size	Foo, .-Foo
	.section	.rodata
.LC3:
	.string	"Bye from bar"
	.text
	.globl	Bar
	.type	Bar, @function
Bar:
.LFB9:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	call	Test
	lea	rsi, __FUNCTION__.3[rip]
	lea	rdi, .LC1[rip]
	mov	eax, 0
	call	printf@PLT
	lea	rdi, .LC3[rip]
	call	puts@PLT
	mov	edi, 0
	call	exit@PLT
	.cfi_endproc
.LFE9:
	.size	Bar, .-Bar
	.globl	Entry
	.type	Entry, @function
Entry:
.LFB10:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	lea	rsi, __FUNCTION__.2[rip]
	lea	rdi, .LC1[rip]
	mov	eax, 0
	call	printf@PLT
	mov	edi, 0
	call	exit@PLT
	.cfi_endproc
.LFE10:
	.size	Entry, .-Entry
	.section	.rodata
.LC4:
	.string	"you get shell!!"
.LC5:
	.string	"/bin/sh"
	.text
	.globl	Vul
	.type	Vul, @function
Vul:
.LFB11:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	lea	rsi, __FUNCTION__.1[rip]
	lea	rdi, .LC1[rip]
	mov	eax, 0
	call	printf@PLT
#APP
# 35 "the_stack_data/159514403.c" 1
	nop
nop
nop
nop
nop
nop
nop
nop

# 0 "" 2
#NO_APP
	lea	rdi, .LC4[rip]
	call	puts@PLT
	lea	rdi, .LC5[rip]
	call	system@PLT
	mov	edi, 0
	call	exit@PLT
	.cfi_endproc
.LFE11:
	.size	Vul, .-Vul
	.section	.rodata
.LC6:
	.string	"it is a easy ROP test"
.LC7:
	.string	"Ret is a vulnerable function"
.LC8:
	.string	"Foo is %p\n"
.LC9:
	.string	"Bar is %p\n"
.LC10:
	.string	"Entry is %p\n"
.LC11:
	.string	"Vul is %p\n"
	.text
	.globl	main
	.type	main, @function
main:
.LFB12:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 16
	mov	DWORD PTR -4[rbp], edi
	mov	QWORD PTR -16[rbp], rsi
	lea	rsi, __FUNCTION__.0[rip]
	lea	rdi, .LC1[rip]
	mov	eax, 0
	call	printf@PLT
	cmp	DWORD PTR -4[rbp], 1
	je	.L9
	lea	rdi, .LC6[rip]
	call	puts@PLT
	lea	rdi, .LC7[rip]
	call	puts@PLT
	lea	rsi, Foo[rip]
	lea	rdi, .LC8[rip]
	mov	eax, 0
	call	printf@PLT
	lea	rsi, Bar[rip]
	lea	rdi, .LC9[rip]
	mov	eax, 0
	call	printf@PLT
	lea	rsi, Entry[rip]
	lea	rdi, .LC10[rip]
	mov	eax, 0
	call	printf@PLT
	lea	rsi, Vul[rip]
	lea	rdi, .LC11[rip]
	mov	eax, 0
	call	printf@PLT
	mov	eax, 1
	jmp	.L10
.L9:
	call	Foo
	call	Bar
	mov	eax, 0
.L10:
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE12:
	.size	main, .-main
	.section	.rodata
	.type	__FUNCTION__.5, @object
	.size	__FUNCTION__.5, 5
__FUNCTION__.5:
	.string	"Test"
	.type	__FUNCTION__.4, @object
	.size	__FUNCTION__.4, 4
__FUNCTION__.4:
	.string	"Foo"
	.type	__FUNCTION__.3, @object
	.size	__FUNCTION__.3, 4
__FUNCTION__.3:
	.string	"Bar"
	.type	__FUNCTION__.2, @object
	.size	__FUNCTION__.2, 6
__FUNCTION__.2:
	.string	"Entry"
	.type	__FUNCTION__.1, @object
	.size	__FUNCTION__.1, 4
__FUNCTION__.1:
	.string	"Vul"
	.type	__FUNCTION__.0, @object
	.size	__FUNCTION__.0, 5
__FUNCTION__.0:
	.string	"main"
	.ident	"GCC: (Ubuntu 10.5.0-1ubuntu1~20.04) 10.5.0"
	.section	.note.GNU-stack,"",@progbits
	.section	.note.gnu.property,"a"
	.align 8
	.long	 1f - 0f
	.long	 4f - 1f
	.long	 5
0:
	.string	 "GNU"
1:
	.align 8
	.long	 0xc0000002
	.long	 3f - 2f
2:
	.long	 0x3
3:
	.align 8
4:

	.arch armv5t
	.eabi_attribute 20, 1
	.eabi_attribute 21, 1
	.eabi_attribute 23, 3
	.eabi_attribute 24, 1
	.eabi_attribute 25, 1
	.eabi_attribute 26, 2
	.eabi_attribute 30, 6
	.eabi_attribute 34, 0
	.eabi_attribute 18, 4
	.file	"159514403.c"
	.text
	.section	.rodata
	.align	2
.LC0:
	.ascii	"plz input your name: \000"
	.align	2
.LC1:
	.word	__stack_chk_guard
	.text
	.align	2
	.global	Ret
	.syntax unified
	.arm
	.fpu softvfp
	.type	Ret, %function
Ret:
	@ args = 0, pretend = 0, frame = 8
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #8
	ldr	r3, .L3
	ldr	r3, [r3]
	str	r3, [fp, #-8]
	mov	r3,#0
	ldr	r0, .L3+4
	bl	puts
	sub	r3, fp, #12
	mov	r2, #48
	mov	r1, r3
	mov	r0, #0
	bl	read
	nop
	ldr	r3, .L3
	ldr	r2, [r3]
	ldr	r3, [fp, #-8]
	eors	r2, r3, r2
	mov	r3, #0
	beq	.L2
	bl	__stack_chk_fail
.L2:
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
.L4:
	.align	2
.L3:
	.word	.LC1
	.word	.LC0
	.size	Ret, .-Ret
	.section	.rodata
	.align	2
.LC2:
	.ascii	"In %s \012\000"
	.text
	.align	2
	.global	Test
	.syntax unified
	.arm
	.fpu softvfp
	.type	Test, %function
Test:
	@ args = 0, pretend = 0, frame = 0
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	ldr	r1, .L6
	ldr	r0, .L6+4
	bl	printf
	nop
	pop	{fp, pc}
.L7:
	.align	2
.L6:
	.word	__FUNCTION__.5124
	.word	.LC2
	.size	Test, .-Test
	.section	.rodata
	.align	2
.LC3:
	.ascii	"Bye from foo\000"
	.text
	.align	2
	.global	Foo
	.syntax unified
	.arm
	.fpu softvfp
	.type	Foo, %function
Foo:
	@ args = 0, pretend = 0, frame = 0
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	bl	Ret
	ldr	r1, .L9
	ldr	r0, .L9+4
	bl	printf
	ldr	r0, .L9+8
	bl	puts
	mov	r0, #0
	bl	exit
.L10:
	.align	2
.L9:
	.word	__FUNCTION__.5128
	.word	.LC2
	.word	.LC3
	.size	Foo, .-Foo
	.section	.rodata
	.align	2
.LC4:
	.ascii	"Bye from bar\000"
	.text
	.align	2
	.global	Bar
	.syntax unified
	.arm
	.fpu softvfp
	.type	Bar, %function
Bar:
	@ args = 0, pretend = 0, frame = 0
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	bl	Test
	ldr	r1, .L12
	ldr	r0, .L12+4
	bl	printf
	ldr	r0, .L12+8
	bl	puts
	mov	r0, #0
	bl	exit
.L13:
	.align	2
.L12:
	.word	__FUNCTION__.5132
	.word	.LC2
	.word	.LC4
	.size	Bar, .-Bar
	.align	2
	.global	Entry
	.syntax unified
	.arm
	.fpu softvfp
	.type	Entry, %function
Entry:
	@ args = 0, pretend = 0, frame = 0
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	ldr	r1, .L15
	ldr	r0, .L15+4
	bl	printf
	mov	r0, #0
	bl	exit
.L16:
	.align	2
.L15:
	.word	__FUNCTION__.5136
	.word	.LC2
	.size	Entry, .-Entry
	.section	.rodata
	.align	2
.LC5:
	.ascii	"you get shell!!\000"
	.align	2
.LC6:
	.ascii	"/bin/sh\000"
	.text
	.align	2
	.global	Vul
	.syntax unified
	.arm
	.fpu softvfp
	.type	Vul, %function
Vul:
	@ args = 0, pretend = 0, frame = 0
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	ldr	r1, .L18
	ldr	r0, .L18+4
	bl	printf
	.syntax divided
@ 35 "the_stack_data/159514403.c" 1
	nop
nop
nop
nop
nop
nop
nop
nop

@ 0 "" 2
	.arm
	.syntax unified
	ldr	r0, .L18+8
	bl	puts
	ldr	r0, .L18+12
	bl	system
	mov	r0, #0
	bl	exit
.L19:
	.align	2
.L18:
	.word	__FUNCTION__.5140
	.word	.LC2
	.word	.LC5
	.word	.LC6
	.size	Vul, .-Vul
	.section	.rodata
	.align	2
.LC7:
	.ascii	"it is a easy ROP test\000"
	.align	2
.LC8:
	.ascii	"Ret is a vulnerable function\000"
	.align	2
.LC9:
	.ascii	"Foo is %p\012\000"
	.align	2
.LC10:
	.ascii	"Bar is %p\012\000"
	.align	2
.LC11:
	.ascii	"Entry is %p\012\000"
	.align	2
.LC12:
	.ascii	"Vul is %p\012\000"
	.text
	.align	2
	.global	main
	.syntax unified
	.arm
	.fpu softvfp
	.type	main, %function
main:
	@ args = 0, pretend = 0, frame = 8
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #8
	str	r0, [fp, #-8]
	str	r1, [fp, #-12]
	ldr	r1, .L23
	ldr	r0, .L23+4
	bl	printf
	ldr	r3, [fp, #-8]
	cmp	r3, #1
	beq	.L21
	ldr	r0, .L23+8
	bl	puts
	ldr	r0, .L23+12
	bl	puts
	ldr	r1, .L23+16
	ldr	r0, .L23+20
	bl	printf
	ldr	r1, .L23+24
	ldr	r0, .L23+28
	bl	printf
	ldr	r1, .L23+32
	ldr	r0, .L23+36
	bl	printf
	ldr	r1, .L23+40
	ldr	r0, .L23+44
	bl	printf
	mov	r3, #1
	b	.L22
.L21:
	bl	Foo
	bl	Bar
	mov	r3, #0
.L22:
	mov	r0, r3
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
.L24:
	.align	2
.L23:
	.word	__FUNCTION__.5145
	.word	.LC2
	.word	.LC7
	.word	.LC8
	.word	Foo
	.word	.LC9
	.word	Bar
	.word	.LC10
	.word	Entry
	.word	.LC11
	.word	Vul
	.word	.LC12
	.size	main, .-main
	.section	.rodata
	.align	2
	.type	__FUNCTION__.5124, %object
	.size	__FUNCTION__.5124, 5
__FUNCTION__.5124:
	.ascii	"Test\000"
	.align	2
	.type	__FUNCTION__.5128, %object
	.size	__FUNCTION__.5128, 4
__FUNCTION__.5128:
	.ascii	"Foo\000"
	.align	2
	.type	__FUNCTION__.5132, %object
	.size	__FUNCTION__.5132, 4
__FUNCTION__.5132:
	.ascii	"Bar\000"
	.align	2
	.type	__FUNCTION__.5136, %object
	.size	__FUNCTION__.5136, 6
__FUNCTION__.5136:
	.ascii	"Entry\000"
	.align	2
	.type	__FUNCTION__.5140, %object
	.size	__FUNCTION__.5140, 4
__FUNCTION__.5140:
	.ascii	"Vul\000"
	.align	2
	.type	__FUNCTION__.5145, %object
	.size	__FUNCTION__.5145, 5
__FUNCTION__.5145:
	.ascii	"main\000"
	.ident	"GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0"
	.section	.note.GNU-stack,"",%progbits
