超级玉米人の部屋

1
int __cdecl Are()
2
{
3
  int result; // eax
4
  int size; // [rsp+4h] [rbp-1Ch] BYREF
5
  char *Flag; // [rsp+8h] [rbp-18h]
6
  char *b; // [rsp+10h] [rbp-10h]
7
  unsigned __int64 v4; // [rsp+18h] [rbp-8h]
8

9
  v4 = __readfsqword(0x28u);
10
  Flag = (char *)malloc(0x68u);
11
  strcpy(Flag, "Flag");
12
  free(Flag);
13
  size = 0;
14
  puts("Please Input Chunk size :");
15
  __isoc99_scanf("%d", &size);
16
  getchar();
17
  b = (char *)malloc(size);
18
  puts("Please Input Content : ");
19
  gets(b);
20
  result = strncmp(Flag, "Flag", 4u);
21
  if ( !result )
22
    return system("/bin/sh");
23
  return result;
24
}

1
5
2

3
104
4

5
Flag
6

7
cat flag