[*] Binary protection state of php-fpm
Full RELRO No Canary found NX enabled No PIE No RPATH No RUNPATH No Symbols
[*] Function popen tear down of php-fpm
4ca614: 279cd240 addiu gp,gp,-11712
4ca618: 0399e021 addu gp,gp,t9
4ca61c: 27bdffe0 addiu sp,sp,-32
4ca620: 8f99a318 lw t9,-23784(gp)
4ca624: afbc0010 sw gp,16(sp)
4ca628: afbf001c sw ra,28(sp)
4ca62c: 0320f809 jalr t9
4ca630: 00002025 move a0,zero
4ca634: 8fbc0010 lw gp,16(sp)
4ca638: 2404ffff li a0,-1
4ca63c: 10440006 beq v0,a0,4ca658 <zif_dl@@Base+0x84c>
4ca640: 8f8386c8 lw v1,-31032(gp)
4ca644: 8fbf001c lw ra,28(sp)
4ca648: ac624370 sw v0,17264(v1)
4ca64c: 00001025 move v0,zero
4ca650: 03e00008 jr ra
4ca654: 27bd0020 addiu sp,sp,32
4ca658: 1000fffa b 4ca644 <zif_dl@@Base+0x838>
4ca65c: 24021000 li v0,4096
004ca660 <php_exec@@Base>:
4ca660: 3c1c0025 lui gp,0x25
4ca664: 279cd1f0 addiu gp,gp,-11792
4ca668: 0399e021 addu gp,gp,t9
4ca66c: 27bdffb0 addiu sp,sp,-80
4ca670: 8f99a1dc lw t9,popen
4ca674: afb00028 sw s0,40(sp)
4ca678: 00a08025 move s0,a1
--
4cb6ac: afbc0010 sw gp,16(sp)
4cb6b0: afbf002c sw ra,44(sp)
4cb6b4: afb20028 sw s2,40(sp)
4cb6b8: afb00020 sw s0,32(sp)
4cb6bc: 10a2000d beq a1,v0,4cb6f4 <php_escape_shell_arg@@Base+0x5e0>
4cb6c0: 24020006 li v0,6
4cb6c4: 8f9980c0 lw t9,-32576(gp)
4cb6c8: 24070001 li a3,1
4cb6cc: 24060001 li a2,1
4cb6d0: 00002025 move a0,zero
4cb6d4: 0320f809 jalr t9
4cb6d8: 00000000 nop
4cb6dc: 8fbf002c lw ra,44(sp)
4cb6e0: 8fb20028 lw s2,40(sp)
4cb6e4: 8fb10024 lw s1,36(sp)
4cb6e8: 8fb00020 lw s0,32(sp)
4cb6ec: 03e00008 jr ra
4cb6f0: 27bd0030 addiu sp,sp,48
4cb6f4: 90830038 lbu v1,56(a0)
4cb6f8: 14620016 bne v1,v0,4cb754 <php_escape_shell_arg@@Base+0x640>
4cb6fc: 8f9980cc lw t9,-32564(gp)
4cb700: 8c820030 lw v0,48(a0)
4cb704: afa20018 sw v0,24(sp)
4cb708: 8fb00018 lw s0,24(sp)
4cb70c: 8f85810c lw a1,-32500(gp)
4cb710: 8f99a1dc lw t9,popen
4cb714: 26100010 addiu s0,s0,16
4cb718: 24a504e4 addiu a1,a1,1252
--
4cdd60: 8ea3000c lw v1,12(s5)
4cdd64: 14430044 bne v0,v1,4cde78 <zif_fclose@@Base+0x2e0>
4cdd68: 8fbc0018 lw gp,24(sp)
4cdd6c: 92030048 lbu v1,72(s0)
4cdd70: 24020006 li v0,6
4cdd74: 14620047 bne v1,v0,4cde94 <zif_fclose@@Base+0x2fc>
4cdd78: 26110040 addiu s1,s0,64
4cdd7c: 8e020040 lw v0,64(s0)
4cdd80: afa20020 sw v0,32(sp)
4cdd84: 8fa20020 lw v0,32(sp)
4cdd88: 8f998180 lw t9,-32384(gp)
4cdd8c: 24510010 addiu s1,v0,16
4cdd90: 8c52000c lw s2,12(v0)
4cdd94: 02202025 move a0,s1
4cdd98: 0320f809 jalr t9
4cdd9c: 02402825 move a1,s2
4cdda0: 8fbc0018 lw gp,24(sp)
4cdda4: 02403025 move a2,s2
4cdda8: 24050062 li a1,98
4cddac: 8f999eec lw t9,-24852(gp)
4cddb0: 00402025 move a0,v0
4cddb4: 0320f809 jalr t9
4cddb8: 00408025 move s0,v0
4cddbc: 1440003d bnez v0,4cdeb4 <zif_fclose@@Base+0x31c>
4cddc0: 8fbc0018 lw gp,24(sp)
4cddc4: 8f99a1dc lw t9,popen
4cddc8: 02002825 move a1,s0
4cddcc: 0320f809 jalr t9
--
4e3a28: 8f998110 lw t9,-32496(gp)
4e3a2c: 24c67190 addiu a2,a2,29072
4e3a30: 24050002 li a1,2
4e3a34: 0320f809 jalr t9
4e3a38: 00002025 move a0,zero
4e3a3c: 8fbc0020 lw gp,32(sp)
4e3a40: 1000ff8c b 4e3874 <php_mail@@Base+0x294>
4e3a44: 8fa40034 lw a0,52(sp)
4e3a48: 1240002d beqz s2,4e3b00 <php_mail@@Base+0x520>
4e3a4c: 8f868030 lw a2,-32720(gp)
4e3a50: 8f9985f4 lw t9,-31244(gp)
4e3a54: afb20010 sw s2,16(sp)
4e3a58: 02203825 move a3,s1
4e3a5c: 24c67b5c addiu a2,a2,31580
4e3a60: 00002825 move a1,zero
4e3a64: 0320f809 jalr t9
4e3a68: 27a40038 addiu a0,sp,56
4e3a6c: 8fbc0020 lw gp,32(sp)
4e3a70: 8f99a378 lw t9,-23688(gp)
4e3a74: 0320f809 jalr t9
4e3a78: 00000000 nop
4e3a7c: 8fbc0020 lw gp,32(sp)
4e3a80: 8fa40038 lw a0,56(sp)
4e3a84: ac400000 sw zero,0(v0)
4e3a88: 8f85803c lw a1,-32708(gp)
4e3a8c: 8f99a1dc lw t9,popen
4e3a90: 24a5a614 addiu a1,a1,-23020
4e3a94: 0320f809 jalr t9
--
5cb990: 24020063 li v0,99
5cb994: a2020000 sb v0,0(s0)
5cb998: 8ec30004 lw v1,4(s6)
5cb99c: 24020064 li v0,100
5cb9a0: a2020001 sb v0,1(s0)
5cb9a4: 24020020 li v0,32
5cb9a8: a2020002 sb v0,2(s0)
5cb9ac: 8fbc0010 lw gp,16(sp)
5cb9b0: 14600029 bnez v1,5cba58 <virtual_popen@@Base+0x150>
5cb9b4: 26020004 addiu v0,s0,4
5cb9b8: 00402025 move a0,v0
5cb9bc: 2402002f li v0,47
5cb9c0: a2020003 sb v0,3(s0)
5cb9c4: 2403003b li v1,59
5cb9c8: 8f99a0b8 lw t9,-24392(gp)
5cb9cc: 24020020 li v0,32
5cb9d0: a0830001 sb v1,1(a0)
5cb9d4: 26460001 addiu a2,s2,1
5cb9d8: a0820000 sb v0,0(a0)
5cb9dc: a0820002 sb v0,2(a0)
5cb9e0: 02a02825 move a1,s5
5cb9e4: 0320f809 jalr t9
5cb9e8: 24840003 addiu a0,a0,3
5cb9ec: 8fbc0010 lw gp,16(sp)
5cb9f0: 02802825 move a1,s4
5cb9f4: 8f99a1dc lw t9,popen
5cb9f8: 0320f809 jalr t9
5cb9fc: 02002025 move a0,s0
[*] Function popen used 5 times php-fpm
