[*] Binary protection state of php-cgi
Full RELRO No Canary found NX enabled No PIE No RPATH No RUNPATH No Symbols
[*] Function strcat tear down of php-cgi
515954: 0320f809 jalr t9
515958: 8fa40d34 lw a0,3380(sp)
51595c: 8fbc0028 lw gp,40(sp)
515960: 8f9980a0 lw t9,-32608(gp)
515964: 0320f809 jalr t9
515968: 24440001 addiu a0,v0,1
51596c: 8fbc0028 lw gp,40(sp)
515970: 8fd20004 lw s2,4(s8)
515974: 00409825 move s3,v0
515978: 8f999eac lw t9,strlen
51597c: 0320f809 jalr t9
515980: 02402025 move a0,s2
515984: 8fbc0028 lw gp,40(sp)
515988: 02402025 move a0,s2
51598c: 8f998e4c lw t9,-29108(gp)
515990: 0411bd79 bal 504f78 <php_url_decode@@Base>
515994: 00402825 move a1,v0
515998: 8fbc0028 lw gp,40(sp)
51599c: 8fc50004 lw a1,4(s8)
5159a0: 8f999e68 lw t9,-24984(gp)
5159a4: 0320f809 jalr t9
5159a8: 02602025 move a0,s3
5159ac: 8fbc0028 lw gp,40(sp)
5159b0: 02602025 move a0,s3
5159b4: 8f858040 lw a1,-32704(gp)
5159b8: 8f999d54 lw t9,strcat
5159bc: 0320f809 jalr t9
5159c0: 24a511e0 addiu a1,a1,4576
5159c4: 8fd20008 lw s2,8(s8)
5159c8: 1240000f beqz s2,515a08 <php_url_scanner_reset_var@@Base+0x4320>
5159cc: 8fbc0028 lw gp,40(sp)
5159d0: 8f999eac lw t9,strlen
5159d4: 0320f809 jalr t9
5159d8: 02402025 move a0,s2
5159dc: 8fbc0028 lw gp,40(sp)
5159e0: 00402825 move a1,v0
5159e4: 8f998e4c lw t9,-29108(gp)
5159e8: 0411bd63 bal 504f78 <php_url_decode@@Base>
5159ec: 02402025 move a0,s2
5159f0: 8fbc0028 lw gp,40(sp)
5159f4: 8fc50008 lw a1,8(s8)
5159f8: 8f999d54 lw t9,strcat
5159fc: 0320f809 jalr t9
515a00: 02602025 move a0,s3
--
51d570: 02603825 move a3,s3
51d574: 24c6de88 addiu a2,a2,-8568
51d578: 24050002 li a1,2
51d57c: 0320f809 jalr t9
51d580: 00002025 move a0,zero
51d584: 1000ffc4 b 51d498 <PHP_SHA1Final@@Base+0xbec>
51d588: 00008025 move s0,zero
51d58c: 8f998380 lw t9,-31872(gp)
51d590: 02a02025 move a0,s5
51d594: 24060003 li a2,3
51d598: 0320f809 jalr t9
51d59c: 24050001 li a1,1
51d5a0: 8fbc0018 lw gp,24(sp)
51d5a4: 26a60001 addiu a2,s5,1
51d5a8: 02602825 move a1,s3
51d5ac: 8f999eb8 lw t9,-24904(gp)
51d5b0: 00402025 move a0,v0
51d5b4: 0320f809 jalr t9
51d5b8: 00409025 move s2,v0
51d5bc: 8fbc0018 lw gp,24(sp)
51d5c0: 02138023 subu s0,s0,s3
51d5c4: 02508021 addu s0,s2,s0
51d5c8: 8f95803c lw s5,-32708(gp)
51d5cc: 26b5d788 addiu s5,s5,-10360
51d5d0: 16000003 bnez s0,51d5e0 <PHP_SHA1Final@@Base+0xd34>
51d5d4: 8f999d54 lw t9,strcat
51d5d8: 10000012 b 51d624 <PHP_SHA1Final@@Base+0xd78>
51d5dc: 00008825 move s1,zero
--
522b84: 8fa5003c lw a1,60(sp)
522b88: afa40020 sw a0,32(sp)
522b8c: afa20028 sw v0,40(sp)
522b90: 0320f809 jalr t9
522b94: 02802025 move a0,s4
522b98: 1000ffdb b 522b08 <php_uudecode@@Base+0x40a0>
522b9c: 8fbc0018 lw gp,24(sp)
522ba0: 92a20008 lbu v0,8(s5)
522ba4: 10400040 beqz v0,522ca8 <php_uudecode@@Base+0x4240>
522ba8: 8f999eb8 lw t9,-24904(gp)
522bac: 8eb20000 lw s2,0(s5)
522bb0: 8ea50014 lw a1,20(s5)
522bb4: 8e42000c lw v0,12(s2)
522bb8: afa20040 sw v0,64(sp)
522bbc: 26c20004 addiu v0,s6,4
522bc0: 10a0002b beqz a1,522c70 <php_uudecode@@Base+0x4208>
522bc4: afa2003c sw v0,60(sp)
522bc8: 8ca2000c lw v0,12(a1)
522bcc: 02202025 move a0,s1
522bd0: 00403025 move a2,v0
522bd4: 24a50010 addiu a1,a1,16
522bd8: 0320f809 jalr t9
522bdc: afa20044 sw v0,68(sp)
522be0: 8fbc0018 lw gp,24(sp)
522be4: 8fa5004c lw a1,76(sp)
522be8: 8f999d54 lw t9,strcat
522bec: 0320f809 jalr t9
522bf0: 02202025 move a0,s1
--
542898: 27b30024 addiu s3,sp,36
54289c: 02602825 move a1,s3
5428a0: 0320f809 jalr t9
5428a4: 02202025 move a0,s1
5428a8: 2683ffff addiu v1,s4,-1
5428ac: 8fbc0018 lw gp,24(sp)
5428b0: 0000b025 move s6,zero
5428b4: 00009025 move s2,zero
5428b8: afa30028 sw v1,40(sp)
5428bc: 14400036 bnez v0,542998 <php_stream_from_persistent_id@@Base+0x2d0>
5428c0: 8f999eac lw t9,strlen
5428c4: 8f9980a0 lw t9,-32608(gp)
5428c8: 0320f809 jalr t9
5428cc: 26440001 addiu a0,s2,1
5428d0: 8fbc0018 lw gp,24(sp)
5428d4: a0400000 sb zero,0(v0)
5428d8: 02602825 move a1,s3
5428dc: 8f998e08 lw t9,-29176(gp)
5428e0: 02202025 move a0,s1
5428e4: 0320f809 jalr t9
5428e8: 00409025 move s2,v0
5428ec: 8fbc0018 lw gp,24(sp)
5428f0: 0000b025 move s6,zero
5428f4: 2694ffff addiu s4,s4,-1
5428f8: 14400036 bnez v0,5429d4 <php_stream_from_persistent_id@@Base+0x30c>
5428fc: 8f999d54 lw t9,strcat
542900: 24100001 li s0,1
542904: 8f998868 lw t9,-30616(gp)
--
542988: 27bd0058 addiu sp,sp,88
54298c: 24170007 li s7,7
542990: 1000ffc0 b 542894 <php_stream_from_persistent_id@@Base+0x1cc>
542994: 2610978c addiu s0,s0,-26740
542998: 0320f809 jalr t9
54299c: 8c440000 lw a0,0(v0)
5429a0: 02429021 addu s2,s2,v0
5429a4: 8fa20028 lw v0,40(sp)
5429a8: 02c2102a slt v0,s6,v0
5429ac: 10400002 beqz v0,5429b8 <php_stream_from_persistent_id@@Base+0x2f0>
5429b0: 8fbc0018 lw gp,24(sp)
5429b4: 02579021 addu s2,s2,s7
5429b8: 8f998e10 lw t9,-29168(gp)
5429bc: 02602825 move a1,s3
5429c0: 0320f809 jalr t9
5429c4: 02202025 move a0,s1
5429c8: 26d60001 addiu s6,s6,1
5429cc: 1000ffbb b 5428bc <php_stream_from_persistent_id@@Base+0x1f4>
5429d0: 8fbc0018 lw gp,24(sp)
5429d4: 8c450000 lw a1,0(v0)
5429d8: 0320f809 jalr t9
5429dc: 02402025 move a0,s2
5429e0: 02d4102a slt v0,s6,s4
5429e4: 10400006 beqz v0,542a00 <php_stream_from_persistent_id@@Base+0x338>
5429e8: 8fbc0018 lw gp,24(sp)
5429ec: 8f999d54 lw t9,strcat
5429f0: 02002825 move a1,s0
5429f4: 0320f809 jalr t9
--
548858: 8fb00018 lw s0,24(sp)
54885c: 03e00008 jr ra
548860: 27bd0040 addiu sp,sp,64
548864: 8f998380 lw t9,-31872(gp)
548868: 02402825 move a1,s2
54886c: 24060003 li a2,3
548870: 0320f809 jalr t9
548874: 24040001 li a0,1
548878: 8fbc0010 lw gp,16(sp)
54887c: 26460001 addiu a2,s2,1
548880: 02002825 move a1,s0
548884: 8f999eb8 lw t9,-24904(gp)
548888: 00402025 move a0,v0
54888c: 0320f809 jalr t9
548890: 0040a025 move s4,v0
548894: 8fbc0010 lw gp,16(sp)
548898: 02308823 subu s1,s1,s0
54889c: 02918821 addu s1,s4,s1
5488a0: 8f9e803c lw s8,-32708(gp)
5488a4: 00009025 move s2,zero
5488a8: 00009825 move s3,zero
5488ac: 27ded788 addiu s8,s8,-10360
5488b0: 12200004 beqz s1,5488c4 <php_stream_filter_create@@Base+0x190>
5488b4: 8f99801c lw t9,-32740(gp)
5488b8: 1240000a beqz s2,5488e4 <php_stream_filter_create@@Base+0x1b0>
5488bc: 8f999d54 lw t9,strcat
5488c0: 8f99801c lw t9,-32740(gp)
5488c4: 0320f809 jalr t9
[*] Function strcat used 7 times php-cgi
