[*] Binary protection state of stclient.cgi

  	Full RELRO     Canary found      NX disabled  PIE enabled  No RPATH     No RUNPATH   No Symbols

[*] Function printf tear down of stclient.cgi

lw a3, -0x7fdc(gp)

lw a2, -0x7fdc(gp)

addiu v0, v0, str.update_cert_set_conf

sw v0, 0x14(sp)

lw t9, -sym.imp.__syslog_chk(gp)

addiu a3, a3, str.stclientcgi.c

addiu a2, a2, str.Error:__s__d__s__:_Failed_to_create_certificate_set:__s

addiu a0, zero, 3

b 0x41c0

addiu v0, zero, 0x234

lw t9, -sym.imp.__stack_chk_fail(gp)

jalr t9

nop

lui gp, 2

addiu gp, gp, -0x6274

addu gp, gp, t9

addiu sp, sp, -0x20

lw t9, -sym.imp.CGI_xml_setup(gp)

sw gp, 0x10(sp)

sw s0, 0x18(sp)

sw ra, 0x1c(sp)

jalr t9

move s0, a0

lw gp, 0x10(sp)

beqz s0, 0x42e8

lw t9, -sym.imp.g_printf(gp)

lw a0, -0x7fdc(gp)

move a1, s0

jalr t9

addiu a0, a0, str._reply_result_ok___n_s_n__reply_

lw gp, 0x10(sp)

lw v0, -0x7ecc(gp)

lw ra, 0x1c(sp)

lw s0, 0x18(sp)

lw a0, (v0)

lw t9, -sym.imp.fflush(gp)

jr t9

addiu sp, sp, 0x20

lw a0, -0x7fdc(gp)

jalr t9

addiu a0, a0, str._reply_result_ok____

b 0x42cc

lw gp, 0x10(sp)

lui gp, 2

addiu gp, gp, -0x62ec

addu gp, gp, t9

addiu sp, sp, -0x20

lw t9, -sym.imp.CGI_xml_setup(gp)

sw ra, 0x1c(sp)

sw s0, 0x18(sp)

sw gp, 0x10(sp)

jalr t9

move s0, a0

lw gp, 0x10(sp)

negu a1, s0

sll a2, a1, 2

lw v0, -0x7fd8(gp)

lw a0, -0x7fdc(gp)

addiu v0, v0, 0x5fb8

lw t9, -sym.imp.g_printf(gp)

lwx a2, a2(v0)

jalr t9

addiu a0, a0, str._reply_result_error___n_error_type__d__message__s_____n__reply__n

lw gp, 0x10(sp)

lw ra, 0x1c(sp)

lw s0, 0x18(sp)

lw v0, -0x7ecc(gp)

lw t9, -sym.imp.fflush(gp)

lw a0, (v0)

jr t9

addiu sp, sp, 0x20

lui gp, 2

addiu gp, gp, -0x635c

addu gp, gp, t9

addiu sp, sp, -0x30

lw t9, -sym.imp.getenv(gp)

sw s3, 0x28(sp)

move s3, a0

lw a0, -0x7fdc(gp)

sw gp, 0x10(sp)

--

lw t9, -sym.imp.g_strdup(gp)

lw v0, (s0)

jalr t9

lw a0, (v0)

lw gp, 0x70(sp)

move a0, s0

move fp, v0

beqz v0, 0x46fc

lw t9, -sym.imp.cert_util_ptr_array_destroy(gp)

jalr t9

addiu s4, s4, 1

lw gp, 0x70(sp)

move a0, s2

lw t9, -sym.imp.cert_util_ptr_array_destroy(gp)

jalr t9

addiu s1, s1, 4

lw gp, 0x70(sp)

lw t9, -sym.imp.cert_util_ptr_array_destroy(gp)

jalr t9

move a0, s3

lw v0, 0x7c(sp)

lw gp, 0x70(sp)

lw a2, -4(s1)

lw a0, (v0)

lw v0, 0x78(sp)

lw t9, -sym.imp.g_string_append_printf(gp)

move a3, fp

jalr t9

addiu a1, v0, str._Cert__n_ID__s__ID__n_Data__n_s_n__Data__n__Cert__n

lw gp, 0x70(sp)

lw t9, -sym.imp.g_free(gp)

jalr t9

move a0, fp

beq s4, s5, 0x46c0

lw gp, 0x70(sp)

lw t9, -sym.imp.g_ptr_array_new(gp)

jalr t9

lw fp, (s1)

lw gp, 0x70(sp)

lw t9, -sym.imp.g_ptr_array_new(gp)

jalr t9

move s0, v0

lw gp, 0x70(sp)

lw t9, -sym.imp.g_ptr_array_new(gp)

jalr t9

move s2, v0

[*] Function printf used 3 times stclient.cgi