[*] Binary protection state of cgibin

  	RELRO          CANARY            NX           PIE          RPATH        RUNPATH      SYMBOLS      

  	No RELRO       No Canary found   NX disabled  No PIE       No RPATH     No RUNPATH   No Symbols

[*] Function strcat tear down of cgibin

lw t9, -sym.sobj_strncasecmp(gp)

addiu a1, a1, -0x22ac

addiu a2, zero, 0xe

beqz v0, 0x4051b0

move a0, s0

jalr t9

nop

lw gp, 0x10(sp)

nop

lw v1, -sym.sobj_get_length(gp)

lw t9, -sym.sobj_get_string(gp)

bnez v0, 0x405168

move a0, s0

move t9, v1

jalr t9

move a0, s3

lw gp, 0x10(sp)

lui a1, 0x42

lw t9, -sym.imp.sprintf(gp)

move a2, v0

move a0, fp

jalr t9

addiu a1, a1, -0x229c

lw gp, 0x10(sp)

move a0, s5

lw t9, -sym.imp.strcat(gp)

nop

jalr t9

move a1, fp

lw gp, 0x10(sp)

b 0x4051a4

addiu s2, s2, 1

jalr t9

nop

lw gp, 0x10(sp)

move a1, v0

lw t9, -sym.imp.strcat(gp)

nop

jalr t9

move a0, s5

lw gp, 0x10(sp)

lui a1, 0x42

lw t9, -sym.imp.strcat(gp)

move a0, s5

jalr t9

addiu a1, a1, -0x1c3c

lw gp, 0x10(sp)

addiu s1, s1, 4

bne s7, s1, 0x4050c8

nop

bnez s2, 0x405208

nop

lw t9, -sym.sobj_get_length(gp)

nop

jalr t9

move a0, s3

lw gp, 0x10(sp)

addiu s0, sp, 0x18

lw t9, -sym.imp.sprintf(gp)

lui a1, 0x42

addiu a1, a1, -0x229c

move a2, v0

jalr t9

move a0, s0

lw gp, 0x10(sp)

move a1, s0

lw t9, -sym.imp.strcat(gp)

nop

jalr t9

move a0, s5

lw gp, 0x10(sp)

nop

lw t9, -sym.imp.strcat(gp)

lui a1, 0x42

addiu a1, a1, -0x1c3c

jalr t9

move a0, s5

lw gp, 0x10(sp)

move a0, s3

lw t9, -sym.sobj_get_string(gp)

nop

jalr t9

move s0, zero

lw gp, 0x10(sp)

move a0, s5

lw t9, -sym.imp.strcat(gp)

nop

jalr t9

move a1, v0

lw gp, 0x10(sp)

b 0x40525c

nop

addiu s0, zero, -1

lw v0, (s4)

lw t9, -sym.sobj_del(gp)

addiu s4, s4, 4

beqz v0, 0x40527c

move a0, v0

jalr t9

nop

lw gp, 0x10(sp)

bne s4, s6, 0x40525c

nop

beqz s3, 0x4052a0

nop

lw t9, -sym.sobj_del(gp)

[*] Function strcat used 6 times cgibin