[*] Binary protection state of ubcom
RELRO CANARY NX PIE RPATH RUNPATH SYMBOLS
No RELRO No Canary found NX disabled No PIE No RPATH No RUNPATH No Symbols
[*] Function strcpy tear down of ubcom
addiu v0, zero, 1
bne v1, v0, 0x403770
nop
sw zero, 0x30(fp)
b 0x403754
nop
lw a0, -obj.IPTMP3(gp)
addiu a1, zero, 1
jal 0x401530
nop
lw gp, 0x18(fp)
lw v0, 0x30(fp)
nop
addiu v0, v0, 1
sw v0, 0x30(fp)
lw v0, 0x30(fp)
nop
slti v0, v0, 0x14
bnez v0, 0x403730
nop
b 0x4036c4
nop
addiu v0, fp, 0x34
move a0, v0
lw a1, -obj.IPTMP2(gp)
lw t9, -sym.imp.strcpy(gp)
nop
jalr t9
nop
lw gp, 0x18(fp)
addiu v0, fp, 0x34
move a0, v0
lw t9, -sym.imp.strlen(gp)
nop
jalr t9
nop
lw gp, 0x18(fp)
addiu v0, v0, -1
sw v0, 0x30(fp)
b 0x403800
nop
lw v1, 0x30(fp)
addiu v0, fp, 0x20
addu v0, v0, v1
lb v1, 0x14(v0)
addiu v0, zero, 0x2e
--
jal 0x402b04
nop
lw gp, 0x18(fp)
sw v0, 0x20(fp)
lw v0, 0x20(fp)
nop
blez v0, 0x403e10
nop
lw v0, -obj.TICKRATE(gp)
nop
lw v0, (v0)
nop
sw v0, 0x24(fp)
lui v0, 0x40
addiu a0, v0, 0x43a4
lw a1, 0x2c(fp)
lw a2, 0x20(fp)
lw t9, -sym.imp.printf(gp)
nop
jalr t9
nop
lw gp, 0x18(fp)
addiu v0, fp, 0x34
move a0, v0
lw a1, -obj.IPTMP2(gp)
lw t9, -sym.imp.strcpy(gp)
nop
jalr t9
nop
lw gp, 0x18(fp)
addiu v0, fp, 0x34
move a0, v0
lw t9, -sym.imp.strlen(gp)
nop
jalr t9
nop
lw gp, 0x18(fp)
addiu v0, v0, -1
sw v0, 0x30(fp)
b 0x403bc0
nop
lw v1, 0x30(fp)
addiu v0, fp, 0x20
addu v0, v0, v1
lb v1, 0x14(v0)
addiu v0, zero, 0x2e
[*] Function strcpy used 2 times ubcom