[*] Binary protection state of php-cgi

  
  	Full RELRO     No Canary found   NX enabled   No PIE       No RPATH     No RUNPATH   No Symbols


[*] Function mmap tear down of php-cgi

  44eeac:	8f99a130 	lw	t9,mmap
  44eeb0:	ae450000 	sw	a1,0(s2)
  44eeb4:	24060001 	li	a2,1
  44eeb8:	00002025 	move	a0,zero
  44eebc:	afa00014 	sw	zero,20(sp)
  44eec0:	0320f809 	jalr	t9
  44eec4:	afb00010 	sw	s0,16(sp)
  44eec8:	8fbc0018 	lw	gp,24(sp)
  44eecc:	02002025 	move	a0,s0
  44eed0:	8f999e04 	lw	t9,-25084(gp)
  44eed4:	0320f809 	jalr	t9
  44eed8:	00408825 	move	s1,v0
  44eedc:	2402ffff 	li	v0,-1
  44eee0:	1622ffa5 	bne	s1,v0,44ed78 <php_date_initialize@@Base+0x2397c>
  44eee4:	8fbf10dc 	lw	ra,4316(sp)
  44eee8:	1000ffa3 	b	44ed78 <php_date_initialize@@Base+0x2397c>
  44eeec:	00008825 	move	s1,zero
  44eef0:	8f999e04 	lw	t9,-25084(gp)
  44eef4:	0320f809 	jalr	t9
  44eef8:	02002025 	move	a0,s0
  44eefc:	1000ff9e 	b	44ed78 <php_date_initialize@@Base+0x2397c>
--
  54948c:	8f99a130 	lw	t9,mmap
  549490:	8e250004 	lw	a1,4(s1)
  549494:	afa20014 	sw	v0,20(sp)
  549498:	afb30010 	sw	s3,16(sp)
  54949c:	02403025 	move	a2,s2
  5494a0:	0320f809 	jalr	t9
  5494a4:	00002025 	move	a0,zero
  5494a8:	2403ffff 	li	v1,-1
  5494ac:	14430005 	bne	v0,v1,5494c4 <php_stream_filter_remove@@Base+0x4e0>
  5494b0:	ae22000c 	sw	v0,12(s1)
  5494b4:	1000ff7a 	b	5492a0 <php_stream_filter_remove@@Base+0x2bc>
  5494b8:	ae20000c 	sw	zero,12(s1)
  5494bc:	1000fff2 	b	549488 <php_stream_filter_remove@@Base+0x4a4>
  5494c0:	02403825 	move	a3,s2
  5494c4:	ae820014 	sw	v0,20(s4)
  5494c8:	8e220004 	lw	v0,4(s1)
  5494cc:	1000ff87 	b	5492ec <php_stream_filter_remove@@Base+0x308>
  5494d0:	ae820018 	sw	v0,24(s4)
  5494d4:	8e840014 	lw	a0,20(s4)
  5494d8:	1080ff71 	beqz	a0,5492a0 <php_stream_filter_remove@@Base+0x2bc>
  5494dc:	8f999ce4 	lw	t9,-25372(gp)
--
  567600:	8f99a130 	lw	t9,mmap
  567604:	2411ffff 	li	s1,-1
  567608:	afa00014 	sw	zero,20(sp)
  56760c:	afb10010 	sw	s1,16(sp)
  567610:	24070802 	li	a3,2050
  567614:	24060003 	li	a2,3
  567618:	02002825 	move	a1,s0
  56761c:	0320f809 	jalr	t9
  567620:	00002025 	move	a0,zero
  567624:	14510022 	bne	v0,s1,5676b0 <__zend_malloc@@Base+0x4a0>
  567628:	8fbc0018 	lw	gp,24(sp)
  56762c:	8f829ec4 	lw	v0,-24892(gp)
  567630:	8f99a164 	lw	t9,-24220(gp)
  567634:	0320f809 	jalr	t9
  567638:	8c510000 	lw	s1,0(v0)
  56763c:	8fbc0018 	lw	gp,24(sp)
  567640:	8c500000 	lw	s0,0(v0)
  567644:	8f99a110 	lw	t9,-24304(gp)
  567648:	0320f809 	jalr	t9
  56764c:	02002025 	move	a0,s0
  567650:	8fbc0018 	lw	gp,24(sp)
--
  567680:	8f99a130 	lw	t9,mmap
  567684:	2411ffff 	li	s1,-1
  567688:	3c070008 	lui	a3,0x8
  56768c:	afa00014 	sw	zero,20(sp)
  567690:	afb10010 	sw	s1,16(sp)
  567694:	24e70802 	addiu	a3,a3,2050
  567698:	24060003 	li	a2,3
  56769c:	3c050020 	lui	a1,0x20
  5676a0:	0320f809 	jalr	t9
  5676a4:	00002025 	move	a0,zero
  5676a8:	1051ffd5 	beq	v0,s1,567600 <__zend_malloc@@Base+0x3f0>
  5676ac:	8fbc0018 	lw	gp,24(sp)
  5676b0:	8fbf002c 	lw	ra,44(sp)
  5676b4:	8fb10028 	lw	s1,40(sp)
  5676b8:	8fb00024 	lw	s0,36(sp)
  5676bc:	03e00008 	jr	ra
  5676c0:	27bd0030 	addiu	sp,sp,48

005676c4 <__zend_realloc@@Base>:
  5676c4:	3c1c001a 	lui	gp,0x1a
  5676c8:	279cabdc 	addiu	gp,gp,-21540
--
  568c0c:	8f99a130 	lw	t9,mmap
  568c10:	241effff 	li	s8,-1
  568c14:	afa20020 	sw	v0,32(sp)
  568c18:	afa00014 	sw	zero,20(sp)
  568c1c:	afbe0010 	sw	s8,16(sp)
  568c20:	24070802 	li	a3,2050
  568c24:	24060003 	li	a2,3
  568c28:	02a02825 	move	a1,s5
  568c2c:	0320f809 	jalr	t9
  568c30:	00402025 	move	a0,v0
  568c34:	145e0017 	bne	v0,s8,568c94 <zend_mm_gc@@Base+0x108c>
  568c38:	8fbc0018 	lw	gp,24(sp)
  568c3c:	8f829ec4 	lw	v0,-24892(gp)
  568c40:	8f99a164 	lw	t9,-24220(gp)
  568c44:	8c420000 	lw	v0,0(v0)
  568c48:	0320f809 	jalr	t9
  568c4c:	afa20020 	sw	v0,32(sp)
  568c50:	8fbc0018 	lw	gp,24(sp)
  568c54:	8c5e0000 	lw	s8,0(v0)
  568c58:	8f99a110 	lw	t9,-24304(gp)
  568c5c:	0320f809 	jalr	t9
--
  5b8a50:	8f99a130 	lw	t9,mmap
  5b8a54:	24070002 	li	a3,2
  5b8a58:	24060001 	li	a2,1
  5b8a5c:	26450020 	addiu	a1,s2,32
  5b8a60:	0320f809 	jalr	t9
  5b8a64:	00002025 	move	a0,zero
  5b8a68:	ae220000 	sw	v0,0(s1)
  5b8a6c:	1053001b 	beq	v0,s3,5b8adc <zend_stream_fixup@@Base+0x31c>
  5b8a70:	8fbc0018 	lw	gp,24(sp)
  5b8a74:	8f999e60 	lw	t9,-24992(gp)
  5b8a78:	0320f809 	jalr	t9
  5b8a7c:	8e040000 	lw	a0,0(s0)
  5b8a80:	8e230000 	lw	v1,0(s1)
  5b8a84:	8fbc0018 	lw	gp,24(sp)
  5b8a88:	10530005 	beq	v0,s3,5b8aa0 <zend_stream_fixup@@Base+0x2e0>
  5b8a8c:	ae030010 	sw	v1,16(s0)
  5b8a90:	8e230000 	lw	v1,0(s1)
  5b8a94:	02429023 	subu	s2,s2,v0
  5b8a98:	00621821 	addu	v1,v1,v0
  5b8a9c:	ae230000 	sw	v1,0(s1)
  5b8aa0:	8e220000 	lw	v0,0(s1)


[*] Function mmap used 6 times php-cgi