[*] Binary protection state of php-cgi

  
  	Full RELRO     No Canary found   NX enabled   No PIE       No RPATH     No RUNPATH   No Symbols


[*] Function fprintf tear down of php-cgi

    ; assembly                           | /* r2dec pseudo code output */
                                         | /* /logs/firmware/unblob_extracted/firmware_extract/1568982-13971496.squashfs_v4_le_extract/usr/bin/php-cgi @ 0x663034 */
                                         | #include <stdint.h>
                                         |  
    ; (fcn) fcn.00663034 ()              | void fcn_00663034 () {
    0x00663034 lui gp, 0xa               |     
    0x00663038 addiu gp, gp, -0xd94      |     
    0x0066303c addu gp, gp, t9           |     gp += t9;
    0x00663040 addiu sp, sp, -0x28       |     
    0x00663044 lw v0, -0x613c(gp)        |     v0 = *((gp - 6223));
    0x00663048 sw a2, 0x30(sp)           |     *(arg_30h) = a2;
    0x0066304c sw a3, 0x34(sp)           |     *(arg_34h) = a3;
    0x00663050 addiu a2, sp, 0x30        |     a2 = sp + 0x30;
    0x00663054 lw t9, -0x630c(gp)        |     t9 = sym.imp.vfprintf
    0x00663058 lw a0, (v0)               |     a0 = *(v0);
    0x0066305c sw ra, 0x24(sp)           |     *(var_24h) = ra;
    0x00663060 sw gp, 0x10(sp)           |     *(var_10h) = gp;
    0x00663064 sw a2, 0x18(sp)           |     *(var_18h) = a2;
    0x00663068 jalr t9                   |     t9 ();
    0x0066306c nop                       |     
    0x00663070 lw ra, 0x24(sp)           |     ra = *(var_24h);
    0x00663074 addiu sp, sp, 0x28        |     
    0x00663078 jr ra                     |     return v0;
                                         | }

[*] Function fprintf used 2 times php-cgi