[*] Binary protection state of pwdgrp.cgi

  	Full RELRO     Canary found      NX disabled  PIE enabled  No RPATH     No RUNPATH   No Symbols

[*] Function strcat tear down of pwdgrp.cgi

move a1, s2

jalr t9

addiu a0, zero, 1

move s1, v0

beqz v0, 0x330c

lw gp, 0x18(sp)

beqz s2, 0x356c

lw a3, -0x7fdc(gp)

lw v0, 0x24(sp)

blez v0, 0x332c

lw v0, 0x28(sp)

lw s6, 0x2c(sp)

sw v0, 0x24(sp)

lw v0, -0x7fdc(gp)

lw v1, -0x7fdc(gp)

addiu v0, v0, 0x5a64

sw v0, 0x2c(sp)

lw v0, -0x7fdc(gp)

sw v1, 0x34(sp)

addiu v0, v0, 0x5a90

sw v0, 0x28(sp)

addiu v0, v1, 0x5a8c

move fp, zero

sw v0, 0x30(sp)

lw v0, 0x24(sp)

lw t9, -sym.util_strcat(gp)

lw a1, (s6)

move a2, s2

move a0, s1

bal sym.util_strcat

lw s7, (v0)

lw gp, 0x18(sp)

lw a1, 0x2c(sp)

move a2, s2

lw t9, -sym.util_strcat(gp)

bal sym.util_strcat

move a0, s1

beqz s7, 0x2d50

lw gp, 0x18(sp)

lw a1, (s7)

bnez a1, 0x2d38

lw t9, -sym.util_strcat(gp)

b 0x2d58

lw a1, 0x30(sp)

lw v0, (s7)

beqz v0, 0x2d50

lw t9, -sym.util_strcat(gp)

lw a1, 0x28(sp)

move a2, s2

bal sym.util_strcat

move a0, s1

lw gp, 0x18(sp)

lw a1, (s7)

lw t9, -sym.util_strcat(gp)

move a2, s2

move a0, s1

bal sym.util_strcat

addiu s7, s7, 4

bnez s7, 0x2d10

lw gp, 0x18(sp)

lw t9, -sym.util_strcat(gp)

lw a1, 0x30(sp)

move a2, s2

bal sym.util_strcat

move a0, s1

lw v1, 0x24(sp)

lw v0, 0x48(sp)

addiu fp, fp, 1

addiu v1, v1, 4

slt v0, fp, v0

lw gp, 0x18(sp)

sw v1, 0x24(sp)

bnez v0, 0x2cc0

addiu s6, s6, 4

lw a1, -0x7fdc(gp)

lw t9, -sym.util_strcat(gp)

move a2, s2

addiu a1, a1, str.digusers_

bal sym.util_strcat

move a0, s1

beqz s4, 0x2e00

lw gp, 0x18(sp)

lw a1, (s4)

beqz a1, 0x2e04

lw v0, 0x34(sp)

lw s6, -0x7fdc(gp)

b 0x2de4

addiu s6, s6, 0x5a90

lw v0, (s4)

beqz v0, 0x2e00

lw t9, -sym.util_strcat(gp)

move a1, s6

move a2, s2

bal sym.util_strcat

move a0, s1

lw gp, 0x18(sp)

lw a1, (s4)

lw t9, -sym.util_strcat(gp)

move a2, s2

move a0, s1

bal sym.util_strcat

addiu s4, s4, 4

bnez s4, 0x2dc0

lw gp, 0x18(sp)

lw v0, 0x34(sp)

lw t9, -sym.util_strcat(gp)

move a2, s2

addiu a1, v0, 0x5a8c

bal sym.util_strcat

move a0, s1

lw gp, 0x18(sp)

addu v0, s1, s0

move a0, s1

lw t9, -sym.imp.strlen(gp)

jalr t9

sb zero, (v0)

beq s0, v0, 0x3254

lw gp, 0x18(sp)

lw a2, -0x7fdc(gp)

lw t9, -sym.imp.__syslog_chk(gp)

move a3, v0

addiu a2, a2, str.Something_went_wrong_when_getting_VAPIX_formatted_string_for_get_groupsrequest:_Got_string_length:__zu_but_expected__zu_n

addiu a1, zero, 1

addiu a0, zero, 4

jalr t9

sw s0, 0x10(sp)

[*] Function strcat used 10 times pwdgrp.cgi