QPA18 - WARGAME - overflow C

_init()
{// addr = 0x000005C8
    __rax = __imp____gmon_start__;
    if(__rax != 0) {
         *__rax();
        return;
    }
}

void free(void* __ptr)
{// addr = 0x000005F0
    goto __imp__free;
}

L000005F6()
{
    _push(0);
    _push( *2101152);
    goto ( *2101160);
}

char* strcpy(char* __dest, char* __src)
{// addr = 0x00000600
    goto __imp__strcpy;
}

L00000606()
{
    _push(1);
    _push( *2101152);
    goto ( *2101160);
}

int puts(char* str)
{// addr = 0x00000610
    goto __imp__puts;
}

L00000616()
{
    _push(2);
    _push( *2101152);
    goto ( *2101160);
}

char* gets(char* dst)
{// addr = 0x00000620
    goto __imp__gets;
}

L00000626()
{
    _push(3);
    _push( *2101152);
    goto ( *2101160);
}

void* malloc(int __size)
{// addr = 0x00000630
    goto __imp__malloc;
}

L00000636()
{
    _push(4);
    _push( *2101152);
    goto ( *2101160);
}

__cxa_finalize()
{// addr = 0x00000640
    goto __imp____cxa_finalize;
}

_start(
    _unknown_ __rax,                       // r53
    _unknown_ __rdx                        // r56
)
{// addr = 0x00000650
    _unknown_ _t11;                        // _t11

    _pop(__rsi);
    __r9 = __r9 & -16;
    _push(__rax);
    _push(__r9);
    __imp____libc_start_main();
    asm("hlt");
    _push(_t11);
    if( &completed.7696 !=  &completed.7696 && __imp___ITM_deregisterTMCloneTable != 0) {
        _pop(__r8);
        goto __rax;
    }
    _pop(__r8);
}

deregister_tm_clones()
{// addr = 0x00000680
    __r8 = __r9;
    if( &completed.7696 ==  &completed.7696 || __imp___ITM_deregisterTMCloneTable == 0) {
        return;
    } else {
        _pop(__r8);
        goto __rax;
    }
}

register_tm_clones()
{// addr = 0x000006C0
    __r8 = __r9;
    if( &completed.7696 == 0 || __imp___ITM_registerTMCloneTable == 0) {
        return;
    } else {
        _pop(__r8);
        goto __rax;
    }
}

__do_global_dtors_aux(
    _unknown_ __rax                        // r53
)
{// addr = 0x00000710
    _unknown_ _t13;                        // _t13

    if(completed.7696 != 0) {
        asm("repe ret");
        asm("o16 nop [rax+rax]");
        _push(_t13);
        _t13 = __r9;
        _pop(__r8);
        _push(_t13);
        if( &completed.7696 != 0 && __imp___ITM_registerTMCloneTable != 0) {
            _pop(__r8);
            goto __rax;
        }
        _pop(__r8);
        return;
    } else {
        _push(__r8);
        __r8 = __r9;
        if(__imp____cxa_finalize != 0) {
            __cxa_finalize();
        }
        deregister_tm_clones();
        completed.7696 = 1;
        _pop(__r8);
        return;
    }
}

frame_dummy()
{// addr = 0x00000750
    _unknown_ _t11;                        // _t11

    _pop(__r8); RecCLI binary_file result.c
    _push(_t11);
    if( &completed.7696 != 0 && __imp___ITM_registerTMCloneTable != 0) {
        _pop(__r8);
        goto __rax;
    }
}

stringdecoder(
    long long __rax,                       // r53
    _unknown_ __rcx,                       // r55
    long long __rdi                        // r57
)
{// addr = 0x0000075A
    char _v12;                             // _cfa_fffffff4
    signed char* _v24;                     // _cfa_ffffffe8
    long long _v32;                        // _cfa_ffffffe0
    _unknown_ _v48;                        // _cfa_ffffffd0

    _v48 = __rdi;
    malloc(30);
    _v32 = __rax;
    _v12 = 0;
    _v24 = _v48;
    while(( *_v24 & 255) != 0) {
         *((char*)(_v32 + _v12)) =  &(_v24[2]);
        _v12 = _v12 + 1;
        _v24 =  &(_v24[1]);
    }
     *((char*)(_v32 + _v12)) = 0;
}

sztringkompar(
    _unknown_ __rax,                       // r53
    long long __rdi,                       // r57
    long long __rsi                        // r58
)
{// addr = 0x000007CA
    intOrPtr _v12;                         // _cfa_fffffff4
    long long _v32;                        // _cfa_ffffffe0
    long long _v40;                        // _cfa_ffffffd8

    __rsi = __rsi;
    __rdi = __rdi;
    _v32 = __rdi;
    _v40 = __rsi;
    _v12 = 0;
    while(_v12 <= 29) {
        if(( *(_v32 + _v12) & 255) == ( *(_v40 + _v12) & 255)) {
            _v12 = _v12 + 1;
            continue;
        }
        return;
    }
}

main()
{// addr = 0x0000081B
    char* _v16;                            // _cfa_fffffff0
    char* _v24;                            // _cfa_ffffffe8
    short _v28;                            // _cfa_ffffffe4
    char _v32;                             // _cfa_ffffffe0
    long long _v40;                        // _cfa_ffffffd8
    long long _v48;                        // _cfa_ffffffd0
    char _v56;                             // _cfa_ffffffc8
    char _v66;                             // _cfa_ffffffbe
    short _v68;                            // _cfa_ffffffbc
    intOrPtr _v72;                         // _cfa_ffffffb8
    long long _v80;                        // _cfa_ffffffb0
    char _v88;                             // _cfa_ffffffa8
    char _v152;                            // _cfa_ffffff68
    char* _t27;                            // _t27

    _v56 = 7308898428035299941;
    _v48 = 7257202747014083693;
    _v40 = 30792319093947075;
    _v32 = 0;
    _v28 = 0;
    _v88 = 8391447954337331813;
    _v80 = 7810763973575863909;
    _v72 = 1701538158;
    _v68 = 27756;
    _v66 = 0;
    stringdecoder( &_v56, __rcx,  &_v56);
    _v16 =  &_v56;
    strcpy( &(((char*)( &_v152))[0x1e]), _v16);
    free(_v16);
    puts("PASSWD: ");
    _t27 = gets( &_v152);
    sztringkompar( &_v152,  &_v152,  &(((char*)( &_v152))[0x1e]));
    if(_t27 != 0) {
        puts("Ezt most ugye te sem gondoltad komolyan?");
    } else {
        stringdecoder( &_v88, __rcx,  &_v88);
        _v24 =  &_v88;
        puts(_v24);
        free(_v24);
    }
}

__libc_csu_init(
    _unknown_ __rdx,                       // r56
    _unknown_ __rdi,                       // r57
    _unknown_ __rsi,                       // r58
    _unknown_ __r13                        // r64
)
{// addr = 0x00000940
    signed long long __rbx;                // r54
    _unknown_ __r15;                       // r66
    _unknown_ _t3;                         // _t3
    signed long long _t14;                 // _t14

    __rdi = __rdi;
    __r9 = __r9 - 8;
    _t14 =  &__do_global_dtors_aux_fini_array_entry -  &__frame_dummy_init_array_entry >> 3;
    _init();
    if( &__do_global_dtors_aux_fini_array_entry != 0) {
        do {
             *((intOrPtr*)( &__frame_dummy_init_array_entry + __rbx * 8))();
            __rbx = __rbx + 1;
        } while(_t14 != __rbx);
    }
    __r9 = __r9 + 8;
}

__libc_csu_fini(
    intOrPtr* __rax                        // r53
)
{// addr = 0x000009B0
    __rax = __rax;
    asm("repe ret");
     *__rax =  *__rax + __rax;
    __r9 = __r9 - 8;
    __r9 = __r9 + 8;
}

_fini(
    _unknown_ __rax                        // r53
)
{// addr = 0x000009B4
    __rax = __rax;
}

_fini(
    _unknown_ __rax                        // r53
)
{// addr = 0x000009B4
    __rax = __rax;
}