[*] Binary protection state of php-fpm
Full RELRO No Canary found NX enabled No PIE No RPATH No RUNPATH No Symbols
[*] Function strcat tear down of php-fpm
514db4: 0320f809 jalr t9
514db8: 8fa40d34 lw a0,3380(sp)
514dbc: 8fbc0028 lw gp,40(sp)
514dc0: 8f9980a4 lw t9,-32604(gp)
514dc4: 0320f809 jalr t9
514dc8: 24440001 addiu a0,v0,1
514dcc: 8fbc0028 lw gp,40(sp)
514dd0: 8fd20004 lw s2,4(s8)
514dd4: 00409825 move s3,v0
514dd8: 8f99a0a8 lw t9,strlen
514ddc: 0320f809 jalr t9
514de0: 02402025 move a0,s2
514de4: 8fbc0028 lw gp,40(sp)
514de8: 02402025 move a0,s2
514dec: 8f9995a8 lw t9,-27224(gp)
514df0: 0411bd79 bal 5043d8 <php_url_decode@@Base>
514df4: 00402825 move a1,v0
514df8: 8fbc0028 lw gp,40(sp)
514dfc: 8fc50004 lw a1,4(s8)
514e00: 8f99a05c lw t9,-24484(gp)
514e04: 0320f809 jalr t9
514e08: 02602025 move a0,s3
514e0c: 8fbc0028 lw gp,40(sp)
514e10: 02602025 move a0,s3
514e14: 8f858040 lw a1,-32704(gp)
514e18: 8f999f40 lw t9,strcat
514e1c: 0320f809 jalr t9
514e20: 24a5fe70 addiu a1,a1,-400
514e24: 8fd20008 lw s2,8(s8)
514e28: 1240000f beqz s2,514e68 <php_url_scanner_reset_var@@Base+0x4320>
514e2c: 8fbc0028 lw gp,40(sp)
514e30: 8f99a0a8 lw t9,strlen
514e34: 0320f809 jalr t9
514e38: 02402025 move a0,s2
514e3c: 8fbc0028 lw gp,40(sp)
514e40: 00402825 move a1,v0
514e44: 8f9995a8 lw t9,-27224(gp)
514e48: 0411bd63 bal 5043d8 <php_url_decode@@Base>
514e4c: 02402025 move a0,s2
514e50: 8fbc0028 lw gp,40(sp)
514e54: 8fc50008 lw a1,8(s8)
514e58: 8f999f40 lw t9,strcat
514e5c: 0320f809 jalr t9
514e60: 02602025 move a0,s3
--
51c9d0: 02603825 move a3,s3
51c9d4: 24c6cb18 addiu a2,a2,-13544
51c9d8: 24050002 li a1,2
51c9dc: 0320f809 jalr t9
51c9e0: 00002025 move a0,zero
51c9e4: 1000ffc4 b 51c8f8 <PHP_SHA1Final@@Base+0xbec>
51c9e8: 00008025 move s0,zero
51c9ec: 8f998384 lw t9,-31868(gp)
51c9f0: 02a02025 move a0,s5
51c9f4: 24060003 li a2,3
51c9f8: 0320f809 jalr t9
51c9fc: 24050001 li a1,1
51ca00: 8fbc0018 lw gp,24(sp)
51ca04: 26a60001 addiu a2,s5,1
51ca08: 02602825 move a1,s3
51ca0c: 8f99a0b8 lw t9,-24392(gp)
51ca10: 00402025 move a0,v0
51ca14: 0320f809 jalr t9
51ca18: 00409025 move s2,v0
51ca1c: 8fbc0018 lw gp,24(sp)
51ca20: 02138023 subu s0,s0,s3
51ca24: 02508021 addu s0,s2,s0
51ca28: 8f95803c lw s5,-32708(gp)
51ca2c: 26b5c428 addiu s5,s5,-15320
51ca30: 16000003 bnez s0,51ca40 <PHP_SHA1Final@@Base+0xd34>
51ca34: 8f999f40 lw t9,strcat
51ca38: 10000012 b 51ca84 <PHP_SHA1Final@@Base+0xd78>
51ca3c: 00008825 move s1,zero
--
521fe4: 8fa5003c lw a1,60(sp)
521fe8: afa40020 sw a0,32(sp)
521fec: afa20028 sw v0,40(sp)
521ff0: 0320f809 jalr t9
521ff4: 02802025 move a0,s4
521ff8: 1000ffdb b 521f68 <php_uudecode@@Base+0x40a0>
521ffc: 8fbc0018 lw gp,24(sp)
522000: 92a20008 lbu v0,8(s5)
522004: 10400040 beqz v0,522108 <php_uudecode@@Base+0x4240>
522008: 8f99a0b8 lw t9,-24392(gp)
52200c: 8eb20000 lw s2,0(s5)
522010: 8ea50014 lw a1,20(s5)
522014: 8e42000c lw v0,12(s2)
522018: afa20040 sw v0,64(sp)
52201c: 26c20004 addiu v0,s6,4
522020: 10a0002b beqz a1,5220d0 <php_uudecode@@Base+0x4208>
522024: afa2003c sw v0,60(sp)
522028: 8ca2000c lw v0,12(a1)
52202c: 02202025 move a0,s1
522030: 00403025 move a2,v0
522034: 24a50010 addiu a1,a1,16
522038: 0320f809 jalr t9
52203c: afa20044 sw v0,68(sp)
522040: 8fbc0018 lw gp,24(sp)
522044: 8fa5004c lw a1,76(sp)
522048: 8f999f40 lw t9,strcat
52204c: 0320f809 jalr t9
522050: 02202025 move a0,s1
--
541cf8: 27b30024 addiu s3,sp,36
541cfc: 02602825 move a1,s3
541d00: 0320f809 jalr t9
541d04: 02202025 move a0,s1
541d08: 2683ffff addiu v1,s4,-1
541d0c: 8fbc0018 lw gp,24(sp)
541d10: 0000b025 move s6,zero
541d14: 00009025 move s2,zero
541d18: afa30028 sw v1,40(sp)
541d1c: 14400036 bnez v0,541df8 <php_stream_from_persistent_id@@Base+0x2d0>
541d20: 8f99a0a8 lw t9,strlen
541d24: 8f9980a4 lw t9,-32604(gp)
541d28: 0320f809 jalr t9
541d2c: 26440001 addiu a0,s2,1
541d30: 8fbc0018 lw gp,24(sp)
541d34: a0400000 sb zero,0(v0)
541d38: 02602825 move a1,s3
541d3c: 8f998e0c lw t9,-29172(gp)
541d40: 02202025 move a0,s1
541d44: 0320f809 jalr t9
541d48: 00409025 move s2,v0
541d4c: 8fbc0018 lw gp,24(sp)
541d50: 0000b025 move s6,zero
541d54: 2694ffff addiu s4,s4,-1
541d58: 14400036 bnez v0,541e34 <php_stream_from_persistent_id@@Base+0x30c>
541d5c: 8f999f40 lw t9,strcat
541d60: 24100001 li s0,1
541d64: 8f99886c lw t9,-30612(gp)
--
541de8: 27bd0058 addiu sp,sp,88
541dec: 24170007 li s7,7
541df0: 1000ffc0 b 541cf4 <php_stream_from_persistent_id@@Base+0x1cc>
541df4: 2610841c addiu s0,s0,-31716
541df8: 0320f809 jalr t9
541dfc: 8c440000 lw a0,0(v0)
541e00: 02429021 addu s2,s2,v0
541e04: 8fa20028 lw v0,40(sp)
541e08: 02c2102a slt v0,s6,v0
541e0c: 10400002 beqz v0,541e18 <php_stream_from_persistent_id@@Base+0x2f0>
541e10: 8fbc0018 lw gp,24(sp)
541e14: 02579021 addu s2,s2,s7
541e18: 8f998e14 lw t9,-29164(gp)
541e1c: 02602825 move a1,s3
541e20: 0320f809 jalr t9
541e24: 02202025 move a0,s1
541e28: 26d60001 addiu s6,s6,1
541e2c: 1000ffbb b 541d1c <php_stream_from_persistent_id@@Base+0x1f4>
541e30: 8fbc0018 lw gp,24(sp)
541e34: 8c450000 lw a1,0(v0)
541e38: 0320f809 jalr t9
541e3c: 02402025 move a0,s2
541e40: 02d4102a slt v0,s6,s4
541e44: 10400006 beqz v0,541e60 <php_stream_from_persistent_id@@Base+0x338>
541e48: 8fbc0018 lw gp,24(sp)
541e4c: 8f999f40 lw t9,strcat
541e50: 02002825 move a1,s0
541e54: 0320f809 jalr t9
--
547cb8: 8fb00018 lw s0,24(sp)
547cbc: 03e00008 jr ra
547cc0: 27bd0040 addiu sp,sp,64
547cc4: 8f998384 lw t9,-31868(gp)
547cc8: 02402825 move a1,s2
547ccc: 24060003 li a2,3
547cd0: 0320f809 jalr t9
547cd4: 24040001 li a0,1
547cd8: 8fbc0010 lw gp,16(sp)
547cdc: 26460001 addiu a2,s2,1
547ce0: 02002825 move a1,s0
547ce4: 8f99a0b8 lw t9,-24392(gp)
547ce8: 00402025 move a0,v0
547cec: 0320f809 jalr t9
547cf0: 0040a025 move s4,v0
547cf4: 8fbc0010 lw gp,16(sp)
547cf8: 02308823 subu s1,s1,s0
547cfc: 02918821 addu s1,s4,s1
547d00: 8f9e803c lw s8,-32708(gp)
547d04: 00009025 move s2,zero
547d08: 00009825 move s3,zero
547d0c: 27dec428 addiu s8,s8,-15320
547d10: 12200004 beqz s1,547d24 <php_stream_filter_create@@Base+0x190>
547d14: 8f99801c lw t9,-32740(gp)
547d18: 1240000a beqz s2,547d44 <php_stream_filter_create@@Base+0x1b0>
547d1c: 8f999f40 lw t9,strcat
547d20: 8f99801c lw t9,-32740(gp)
547d24: 0320f809 jalr t9
[*] Function strcat used 7 times php-fpm
