[*] Binary protection state of php-cli
Full RELRO No Canary found NX enabled No PIE No RPATH No RUNPATH No Symbols
[*] Function popen tear down of php-cli
4c9004: 279c5200 addiu gp,gp,20992
4c9008: 0399e021 addu gp,gp,t9
4c900c: 27bdffe0 addiu sp,sp,-32
4c9010: 8f99a0bc lw t9,-24388(gp)
4c9014: afbc0010 sw gp,16(sp)
4c9018: afbf001c sw ra,28(sp)
4c901c: 0320f809 jalr t9
4c9020: 00002025 move a0,zero
4c9024: 8fbc0010 lw gp,16(sp)
4c9028: 2404ffff li a0,-1
4c902c: 10440006 beq v0,a0,4c9048 <zif_dl@@Base+0x84c>
4c9030: 8f8386c4 lw v1,-31036(gp)
4c9034: 8fbf001c lw ra,28(sp)
4c9038: ac62aab0 sw v0,-21840(v1)
4c903c: 00001025 move v0,zero
4c9040: 03e00008 jr ra
4c9044: 27bd0020 addiu sp,sp,32
4c9048: 1000fffa b 4c9034 <zif_dl@@Base+0x838>
4c904c: 24021000 li v0,4096
004c9050 <php_exec@@Base>:
4c9050: 3c1c0024 lui gp,0x24
4c9054: 279c51b0 addiu gp,gp,20912
4c9058: 0399e021 addu gp,gp,t9
4c905c: 27bdffb0 addiu sp,sp,-80
4c9060: 8f999f98 lw t9,popen
4c9064: afb00028 sw s0,40(sp)
4c9068: 00a08025 move s0,a1
--
4ca09c: afbc0010 sw gp,16(sp)
4ca0a0: afbf002c sw ra,44(sp)
4ca0a4: afb20028 sw s2,40(sp)
4ca0a8: afb00020 sw s0,32(sp)
4ca0ac: 10a2000d beq a1,v0,4ca0e4 <php_escape_shell_arg@@Base+0x5e0>
4ca0b0: 24020006 li v0,6
4ca0b4: 8f9980c0 lw t9,-32576(gp)
4ca0b8: 24070001 li a3,1
4ca0bc: 24060001 li a2,1
4ca0c0: 00002025 move a0,zero
4ca0c4: 0320f809 jalr t9
4ca0c8: 00000000 nop
4ca0cc: 8fbf002c lw ra,44(sp)
4ca0d0: 8fb20028 lw s2,40(sp)
4ca0d4: 8fb10024 lw s1,36(sp)
4ca0d8: 8fb00020 lw s0,32(sp)
4ca0dc: 03e00008 jr ra
4ca0e0: 27bd0030 addiu sp,sp,48
4ca0e4: 90830038 lbu v1,56(a0)
4ca0e8: 14620016 bne v1,v0,4ca144 <php_escape_shell_arg@@Base+0x640>
4ca0ec: 8f9980cc lw t9,-32564(gp)
4ca0f0: 8c820030 lw v0,48(a0)
4ca0f4: afa20018 sw v0,24(sp)
4ca0f8: 8fb00018 lw s0,24(sp)
4ca0fc: 8f858048 lw a1,-32696(gp)
4ca100: 8f999f98 lw t9,popen
4ca104: 26100010 addiu s0,s0,16
4ca108: 24a54528 addiu a1,a1,17704
--
4cc750: 8ea3000c lw v1,12(s5)
4cc754: 14430044 bne v0,v1,4cc868 <zif_fclose@@Base+0x2e0>
4cc758: 8fbc0018 lw gp,24(sp)
4cc75c: 92030048 lbu v1,72(s0)
4cc760: 24020006 li v0,6
4cc764: 14620047 bne v1,v0,4cc884 <zif_fclose@@Base+0x2fc>
4cc768: 26110040 addiu s1,s0,64
4cc76c: 8e020040 lw v0,64(s0)
4cc770: afa20020 sw v0,32(sp)
4cc774: 8fa20020 lw v0,32(sp)
4cc778: 8f99817c lw t9,-32388(gp)
4cc77c: 24510010 addiu s1,v0,16
4cc780: 8c52000c lw s2,12(v0)
4cc784: 02202025 move a0,s1
4cc788: 0320f809 jalr t9
4cc78c: 02402825 move a1,s2
4cc790: 8fbc0018 lw gp,24(sp)
4cc794: 02403025 move a2,s2
4cc798: 24050062 li a1,98
4cc79c: 8f999cc0 lw t9,-25408(gp)
4cc7a0: 00402025 move a0,v0
4cc7a4: 0320f809 jalr t9
4cc7a8: 00408025 move s0,v0
4cc7ac: 1440003d bnez v0,4cc8a4 <zif_fclose@@Base+0x31c>
4cc7b0: 8fbc0018 lw gp,24(sp)
4cc7b4: 8f999f98 lw t9,popen
4cc7b8: 02002825 move a1,s0
4cc7bc: 0320f809 jalr t9
--
4e2418: 8f99810c lw t9,-32500(gp)
4e241c: 24c6b1d0 addiu a2,a2,-20016
4e2420: 24050002 li a1,2
4e2424: 0320f809 jalr t9
4e2428: 00002025 move a0,zero
4e242c: 8fbc0020 lw gp,32(sp)
4e2430: 1000ff8c b 4e2264 <php_mail@@Base+0x294>
4e2434: 8fa40034 lw a0,52(sp)
4e2438: 1240002d beqz s2,4e24f0 <php_mail@@Base+0x520>
4e243c: 8f868030 lw a2,-32720(gp)
4e2440: 8f9985f4 lw t9,-31244(gp)
4e2444: afb20010 sw s2,16(sp)
4e2448: 02203825 move a3,s1
4e244c: 24c6bbdc addiu a2,a2,-17444
4e2450: 00002825 move a1,zero
4e2454: 0320f809 jalr t9
4e2458: 27a40038 addiu a0,sp,56
4e245c: 8fbc0020 lw gp,32(sp)
4e2460: 8f99a11c lw t9,-24292(gp)
4e2464: 0320f809 jalr t9
4e2468: 00000000 nop
4e246c: 8fbc0020 lw gp,32(sp)
4e2470: 8fa40038 lw a0,56(sp)
4e2474: ac400000 sw zero,0(v0)
4e2478: 8f85803c lw a1,-32708(gp)
4e247c: 8f999f98 lw t9,popen
4e2480: 24a5121c addiu a1,a1,4636
4e2484: 0320f809 jalr t9
--
5ca380: 24020063 li v0,99
5ca384: a2020000 sb v0,0(s0)
5ca388: 8ec30004 lw v1,4(s6)
5ca38c: 24020064 li v0,100
5ca390: a2020001 sb v0,1(s0)
5ca394: 24020020 li v0,32
5ca398: a2020002 sb v0,2(s0)
5ca39c: 8fbc0010 lw gp,16(sp)
5ca3a0: 14600029 bnez v1,5ca448 <virtual_popen@@Base+0x150>
5ca3a4: 26020004 addiu v0,s0,4
5ca3a8: 00402025 move a0,v0
5ca3ac: 2402002f li v0,47
5ca3b0: a2020003 sb v0,3(s0)
5ca3b4: 2403003b li v1,59
5ca3b8: 8f999e78 lw t9,-24968(gp)
5ca3bc: 24020020 li v0,32
5ca3c0: a0830001 sb v1,1(a0)
5ca3c4: 26460001 addiu a2,s2,1
5ca3c8: a0820000 sb v0,0(a0)
5ca3cc: a0820002 sb v0,2(a0)
5ca3d0: 02a02825 move a1,s5
5ca3d4: 0320f809 jalr t9
5ca3d8: 24840003 addiu a0,a0,3
5ca3dc: 8fbc0010 lw gp,16(sp)
5ca3e0: 02802825 move a1,s4
5ca3e4: 8f999f98 lw t9,popen
5ca3e8: 0320f809 jalr t9
5ca3ec: 02002025 move a0,s0
[*] Function popen used 5 times php-cli
