[*] Binary protection state of php-fpm
Full RELRO No Canary found NX enabled No PIE No RPATH No RUNPATH No Symbols
[*] Function strcpy tear down of php-fpm
416ff4: a0430058 sb v1,88(v0)
416ff8: 90430058 lbu v1,88(v0)
416ffc: 30640001 andi a0,v1,0x1
417000: 14800071 bnez a0,4171c8 <php_error_docref2@@Base+0x2d0>
417004: 24630001 addiu v1,v1,1
417008: a0430058 sb v1,88(v0)
41700c: 8f8288bc lw v0,-30532(gp)
417010: 8c540010 lw s4,16(v0)
417014: 8c550008 lw s5,8(v0)
417018: 92820000 lbu v0,0(s4)
41701c: 14400015 bnez v0,417074 <php_error_docref2@@Base+0x17c>
417020: 8f999eec lw t9,-24852(gp)
417024: 24020001 li v0,1
417028: 16a20013 bne s5,v0,417078 <php_error_docref2@@Base+0x180>
41702c: 02a03025 move a2,s5
417030: 8f858040 lw a1,-32704(gp)
417034: 8f99a310 lw t9,-23792(gp)
417038: 2406000d li a2,13
41703c: 24a51110 addiu a1,a1,4368
417040: 0320f809 jalr t9
417044: 02602025 move a0,s3
417048: 14400009 bnez v0,417070 <php_error_docref2@@Base+0x178>
41704c: 8fbc0020 lw gp,32(sp)
417050: 12400005 beqz s2,417068 <php_error_docref2@@Base+0x170>
417054: 8f858040 lw a1,-32704(gp)
417058: 8f99a05c lw t9,strcpy
41705c: 24a51120 addiu a1,a1,4384
417060: 0320f809 jalr t9
--
4170ec: 10640057 beq v1,a0,41724c <php_error_docref2@@Base+0x354>
4170f0: 00000000 nop
4170f4: 1000fff6 b 4170d0 <php_error_docref2@@Base+0x1d8>
4170f8: 2631ffff addiu s1,s1,-1
4170fc: 00008825 move s1,zero
417100: 16000024 bnez s0,417194 <php_error_docref2@@Base+0x29c>
417104: 02148023 subu s0,s0,s4
417108: 2eb0001f sltiu s0,s5,31
41710c: 2403001e li v1,30
417110: 02b0180b movn v1,s5,s0
417114: 00608025 move s0,v1
417118: 12400011 beqz s2,417160 <php_error_docref2@@Base+0x268>
41711c: 27b30028 addiu s3,sp,40
417120: 12200020 beqz s1,4171a4 <php_error_docref2@@Base+0x2ac>
417124: 8f999e98 lw t9,-24936(gp)
417128: 8f868040 lw a2,-32704(gp)
41712c: afa20018 sw v0,24(sp)
417130: afb10014 sw s1,20(sp)
417134: afb40010 sw s4,16(sp)
417138: 02003825 move a3,s0
41713c: 24c6112c addiu a2,a2,4396
417140: 24050078 li a1,120
417144: 0320f809 jalr t9
417148: 02602025 move a0,s3
41714c: 8fbc0020 lw gp,32(sp)
417150: 8f99a05c lw t9,strcpy
417154: 02602825 move a1,s3
417158: 0320f809 jalr t9
--
4171c0: 1000ffe3 b 417150 <php_error_docref2@@Base+0x258>
4171c4: 8fbc0020 lw gp,32(sp)
4171c8: 16400009 bnez s2,4171f0 <php_error_docref2@@Base+0x2f8>
4171cc: 82700000 lb s0,0(s3)
4171d0: 8f99a0a8 lw t9,strlen
4171d4: 0320f809 jalr t9
4171d8: 02602025 move a0,s3
4171dc: 3a100022 xori s0,s0,0x22
4171e0: 24030002 li v1,2
4171e4: 0010180b movn v1,zero,s0
4171e8: 1000ffe1 b 417170 <php_error_docref2@@Base+0x278>
4171ec: 00431023 subu v0,v0,v1
4171f0: 24020022 li v0,34
4171f4: 1602000b bne s0,v0,417224 <php_error_docref2@@Base+0x32c>
4171f8: 02401825 move v1,s2
4171fc: 24050022 li a1,34
417200: 26730001 addiu s3,s3,1
417204: 82640000 lb a0,0(s3)
417208: 14850003 bne a0,a1,417218 <php_error_docref2@@Base+0x320>
41720c: 00721023 subu v0,v1,s2
417210: 1000ffd7 b 417170 <php_error_docref2@@Base+0x278>
417214: a0600000 sb zero,0(v1)
417218: a0640000 sb a0,0(v1)
41721c: 1000fff8 b 417200 <php_error_docref2@@Base+0x308>
417220: 24630001 addiu v1,v1,1
417224: 8f99a05c lw t9,strcpy
417228: 02602825 move a1,s3
41722c: 0320f809 jalr t9
--
514d9c: 32220004 andi v0,s1,0x4
514da0: 144000a0 bnez v0,515024 <php_url_scanner_reset_var@@Base+0x44dc>
514da4: 32220008 andi v0,s1,0x8
514da8: 8fc20004 lw v0,4(s8)
514dac: 1040009c beqz v0,515020 <php_url_scanner_reset_var@@Base+0x44d8>
514db0: 8f99a0a8 lw t9,strlen
514db4: 0320f809 jalr t9
514db8: 8fa40d34 lw a0,3380(sp)
514dbc: 8fbc0028 lw gp,40(sp)
514dc0: 8f9980a4 lw t9,-32604(gp)
514dc4: 0320f809 jalr t9
514dc8: 24440001 addiu a0,v0,1
514dcc: 8fbc0028 lw gp,40(sp)
514dd0: 8fd20004 lw s2,4(s8)
514dd4: 00409825 move s3,v0
514dd8: 8f99a0a8 lw t9,strlen
514ddc: 0320f809 jalr t9
514de0: 02402025 move a0,s2
514de4: 8fbc0028 lw gp,40(sp)
514de8: 02402025 move a0,s2
514dec: 8f9995a8 lw t9,-27224(gp)
514df0: 0411bd79 bal 5043d8 <php_url_decode@@Base>
514df4: 00402825 move a1,v0
514df8: 8fbc0028 lw gp,40(sp)
514dfc: 8fc50004 lw a1,4(s8)
514e00: 8f99a05c lw t9,strcpy
514e04: 0320f809 jalr t9
514e08: 02602025 move a0,s3
--
670628: 0055300a movz a2,v0,s5
67062c: 8f858044 lw a1,-32700(gp)
670630: 8fa20440 lw v0,1088(sp)
670634: 8f999574 lw t9,-27276(gp)
670638: 8e27000c lw a3,12(s1)
67063c: 24a5c3e0 addiu a1,a1,-15392
670640: 0320f809 jalr t9
670644: afa20010 sw v0,16(sp)
670648: 02028021 addu s0,s0,v0
67064c: 8fbc0018 lw gp,24(sp)
670650: 1000ffbf b 670550 <php_register_internal_extensions@@Base+0xf030>
670654: 02158021 addu s0,s0,s5
670658: 1000ffd1 b 6705a0 <php_register_internal_extensions@@Base+0xf080>
67065c: 0000a825 move s5,zero
670660: 8e230008 lw v1,8(s1)
670664: 24020001 li v0,1
670668: 1462ffba bne v1,v0,670554 <php_register_internal_extensions@@Base+0xf034>
67066c: 8f99a170 lw t9,-24208(gp)
670670: 8f99a098 lw t9,-24424(gp)
670674: 0320f809 jalr t9
670678: 8e24000c lw a0,12(s1)
67067c: 1000ffb4 b 670550 <php_register_internal_extensions@@Base+0xf030>
670680: 8fbc0018 lw gp,24(sp)
670684: 16000010 bnez s0,6706c8 <php_register_internal_extensions@@Base+0xf1a8>
670688: 8f999574 lw t9,-27276(gp)
67068c: 8f99a05c lw t9,strcpy
670690: 03c02825 move a1,s8
670694: 0320f809 jalr t9
--
67081c: aea20008 sw v0,8(s5)
670820: 24020002 li v0,2
670824: 1642003a bne s2,v0,670910 <php_register_internal_extensions@@Base+0xf3f0>
670828: 00000000 nop
67082c: ae800000 sw zero,0(s4)
670830: 8f999e7c lw t9,-24964(gp)
670834: ae910008 sw s1,8(s4)
670838: ae930004 sw s3,4(s4)
67083c: 0320f809 jalr t9
670840: 02002025 move a0,s0
670844: ae82000c sw v0,12(s4)
670848: 1000001c b 6708bc <php_register_internal_extensions@@Base+0xf39c>
67084c: 00001025 move v0,zero
670850: 1000ffc3 b 670760 <php_register_internal_extensions@@Base+0xf240>
670854: 24a50008 addiu a1,a1,8
670858: 8f99a0a8 lw t9,strlen
67085c: 24b40002 addiu s4,a1,2
670860: 0320f809 jalr t9
670864: 02802025 move a0,s4
670868: 2442000f addiu v0,v0,15
67086c: 8fdc0010 lw gp,16(s8)
670870: 000210c2 srl v0,v0,0x3
670874: 000210c0 sll v0,v0,0x3
670878: 03a2e823 subu sp,sp,v0
67087c: 27b00010 addiu s0,sp,16
670880: 8f99a05c lw t9,strcpy
670884: 02802825 move a1,s4
670888: 0320f809 jalr t9
--
671020: 2402ffff li v0,-1
671024: 8fbf01f4 lw ra,500(sp)
671028: 8fbe01f0 lw s8,496(sp)
67102c: 8fb701ec lw s7,492(sp)
671030: 8fb601e8 lw s6,488(sp)
671034: 8fb501e4 lw s5,484(sp)
671038: 8fb401e0 lw s4,480(sp)
67103c: 8fb301dc lw s3,476(sp)
671040: 8fb201d8 lw s2,472(sp)
671044: 8fb101d4 lw s1,468(sp)
671048: 8fb001d0 lw s0,464(sp)
67104c: 03e00008 jr ra
671050: 27bd01f8 addiu sp,sp,504
671054: 2402000a li v0,10
671058: ae02000c sw v0,12(s0)
67105c: 8f828030 lw v0,-32720(gp)
671060: 8f968044 lw s6,-32700(gp)
671064: 244206e0 addiu v0,v0,1760
671068: ae000008 sw zero,8(s0)
67106c: 0000a025 move s4,zero
671070: 26d6c57c addiu s6,s6,-14980
671074: afa201c8 sw v0,456(sp)
671078: 16800066 bnez s4,671214 <php_register_internal_extensions@@Base+0xfcf4>
67107c: 27b101a0 addiu s1,sp,416
671080: 8f858044 lw a1,-32700(gp)
671084: 8f99a05c lw t9,strcpy
671088: 24a5c3e8 addiu a1,a1,-15384
67108c: 0320f809 jalr t9
[*] Function strcpy used 7 times php-fpm
