-----------------------------------------------------------------
[*] Initial CPU detection process of binary capturemode.cgi with CPU configuration .
[*] Emulator used: qemu-mipsel-static
[*] Using root directory: /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract (1/2)
[*] Trying to emulate binary ./usr/html/axis-cgi/capturemode.cgi with cpu config NONE
[-] Emulation process of binary capturemode.cgi with CPU configuration failed
[*] Trying to emulate binary ./usr/html/axis-cgi/capturemode.cgi with cpu config 4Kc
[-] Emulation process of binary capturemode.cgi with CPU configuration 4Kc failed
[*] Trying to emulate binary ./usr/html/axis-cgi/capturemode.cgi with cpu config 4Km
[-] Emulation process of binary capturemode.cgi with CPU configuration 4Km failed
[*] Trying to emulate binary ./usr/html/axis-cgi/capturemode.cgi with cpu config 4KEcR1
[-] Emulation process of binary capturemode.cgi with CPU configuration 4KEcR1 failed
[*] Trying to emulate binary ./usr/html/axis-cgi/capturemode.cgi with cpu config 4KEmR1
[-] Emulation process of binary capturemode.cgi with CPU configuration 4KEmR1 failed
[*] Trying to emulate binary ./usr/html/axis-cgi/capturemode.cgi with cpu config 4KEc
[-] Emulation process of binary capturemode.cgi with CPU configuration 4KEc failed
[*] Trying to emulate binary ./usr/html/axis-cgi/capturemode.cgi with cpu config 4KEm
[-] Emulation process of binary capturemode.cgi with CPU configuration 4KEm failed
[*] Trying to emulate binary ./usr/html/axis-cgi/capturemode.cgi with cpu config 24Kc
[-] Emulation process of binary capturemode.cgi with CPU configuration 24Kc failed
[*] Trying to emulate binary ./usr/html/axis-cgi/capturemode.cgi with cpu config 24KEc
[-] Emulation process of binary capturemode.cgi with CPU configuration 24KEc failed
[*] Trying to emulate binary ./usr/html/axis-cgi/capturemode.cgi with cpu config 24Kf
[-] Emulation process of binary capturemode.cgi with CPU configuration 24Kf failed
[*] Trying to emulate binary ./usr/html/axis-cgi/capturemode.cgi with cpu config 34Kf
[-] Emulation process of binary capturemode.cgi with CPU configuration 34Kf failed
[*] Trying to emulate binary ./usr/html/axis-cgi/capturemode.cgi with cpu config 74Kf
[-] Emulation process of binary capturemode.cgi with CPU configuration 74Kf failed
[*] Trying to emulate binary ./usr/html/axis-cgi/capturemode.cgi with cpu config M14K
[-] Emulation process of binary capturemode.cgi with CPU configuration M14K failed
[*] Trying to emulate binary ./usr/html/axis-cgi/capturemode.cgi with cpu config M14Kc
[-] Emulation process of binary capturemode.cgi with CPU configuration M14Kc failed
[*] Trying to emulate binary ./usr/html/axis-cgi/capturemode.cgi with cpu config P5600
[-] Emulation process of binary capturemode.cgi with CPU configuration P5600 failed
[*] Trying to emulate binary ./usr/html/axis-cgi/capturemode.cgi with cpu config mips32r6-generic
[-] Emulation process of binary capturemode.cgi with CPU configuration mips32r6-generic failed
[*] Trying to emulate binary ./usr/html/axis-cgi/capturemode.cgi with cpu config I7200
[-] Emulation process of binary capturemode.cgi with CPU configuration I7200 failed
-----------------------------------------------------------------
-----------------------------------------------------------------
[*] Initial CPU detection process of binary capturemode.cgi with CPU configuration 24KEc.
[*] Emulator used: qemu-mipsel-static
[*] Using root directory: /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr (2/2)
[*] Trying to emulate binary ./html/axis-cgi/capturemode.cgi with cpu config 24KEc
1 brk(NULL) = 0x40014210
1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3f7c7000
1 uname(0x3ff1d680) = 0
1 access("/etc/ld.so.preload",R_OK) = -1 errno=2 (No such file or directory)
1 openat(AT_FDCWD,"/etc/ld.so.cache",O_RDONLY|O_CLOEXEC) = -1 errno=2 (No such file or directory)
1 openat(AT_FDCWD,"/lib/tls/libgio-2.0.so.0",O_RDONLY|O_CLOEXEC) = 3
1 read(3,0x3ff1d414,512) = 512
1 prctl(46,1072813384,1072813076,512,1065377792,0) = 0
1 fstat64(3,0x3ff1d2d0) = 0
1 mmap2(NULL,1990784,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f5e0000
1 mprotect(0x3f7b0000,61440,PROT_NONE) = 0
1 mmap2(0x3f7bf000,24576,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x1cf) = 0x3f7bf000
1 mmap2(0x3f7c5000,4224,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f7c5000
1 close(3) = 0
1 openat(AT_FDCWD,"/lib/tls/libgobject-2.0.so.0",O_RDONLY|O_CLOEXEC) = 3
1 read(3,0x3ff1d404,512) = 512
1 prctl(46,1072813336,1072813060,512,1065377792,0) = 0
1 fstat64(3,0x3ff1d2c0) = 0
1 mmap2(NULL,446160,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f573000
1 mprotect(0x3f5ce000,65536,PROT_NONE) = 0
1 mmap2(0x3f5de000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x5b) = 0x3f5de000
1 close(3) = 0
1 openat(AT_FDCWD,"/lib/tls/libjansson.so.4",O_RDONLY|O_CLOEXEC) = 3
1 read(3,0x3ff1d3f4,512) = 512
1 prctl(46,1072813320,1072813044,512,1065377792,0) = 0
1 fstat64(3,0x3ff1d2b0) = 0
1 mmap2(NULL,119392,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f555000
1 mprotect(0x3f562000,61440,PROT_NONE) = 0
1 mmap2(0x3f571000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0xc) = 0x3f571000
1 close(3) = 0
1 openat(AT_FDCWD,"/lib/tls/libaxlog.so",O_RDONLY|O_CLOEXEC) = 3
1 read(3,0x3ff1d3e4,512) = 512
1 prctl(46,1072813304,1072813028,512,1065377792,0) = 0
1 fstat64(3,0x3ff1d2a0) = 0
1 mmap2(NULL,73920,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f542000
1 mprotect(0x3f544000,61440,PROT_NONE) = 0
1 mmap2(0x3f553000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x1) = 0x3f553000
1 close(3) = 0
1 openat(AT_FDCWD,"/lib/tls/libglib-2.0.so.0",O_RDONLY|O_CLOEXEC) = 3
1 read(3,0x3ff1d3d4,512) = 512
1 prctl(46,1072813320,1072813012,512,1065377792,0) = 0
1 fstat64(3,0x3ff1d290) = 0
1 mmap2(NULL,1257552,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f40e000
1 mprotect(0x3f52f000,61440,PROT_NONE) = 0
1 mmap2(0x3f53e000,12288,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x120) = 0x3f53e000
1 mmap2(0x3f541000,80,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f541000
1 close(3) = 0
1 openat(AT_FDCWD,"/lib/tls/libcgiparser.so",O_RDONLY|O_CLOEXEC) = 3
1 read(3,0x3ff1d3c4,512) = 512
1 prctl(46,1072813272,1072812996,512,1065377792,0) = 0
1 fstat64(3,0x3ff1d280) = 0
1 mmap2(NULL,78048,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f3fa000
1 mprotect(0x3f3fd000,61440,PROT_NONE) = 0
1 mmap2(0x3f40c000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x2) = 0x3f40c000
1 close(3) = 0
1 openat(AT_FDCWD,"/lib/tls/libc.so.6",O_RDONLY|O_CLOEXEC) = 3
1 read(3,0x3ff1d3b4,512) = 512
1 prctl(46,1072813416,1072812980,512,1065377792,0) = 0
1 _llseek(3,0,760,0x3ff1d188,SEEK_SET) = 0
1 read(3,0x3ff1d1b8,32) = 32
1 fstat64(3,0x3ff1d270) = 0
1 mmap2(NULL,1593152,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f275000
1 mprotect(0x3f3e2000,61440,PROT_NONE) = 0
1 mmap2(0x3f3f1000,28672,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x16c) = 0x3f3f1000
1 mmap2(0x3f3f8000,8000,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f3f8000
1 close(3) = 0
1 openat(AT_FDCWD,"/lib/tls/../glib/tls/libgmodule-2.0.so.0",O_RDONLY|O_CLOEXEC) = 3
1 read(3,0x3ff1d2e4,512) = 512
1 prctl(46,1072813048,1072812772,512,1065377792,0) = 0
1 fstat64(3,0x3ff1d1a0) = 0
1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3f273000
1 mmap2(NULL,78096,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f25f000
1 mprotect(0x3f262000,61440,PROT_NONE) = 0
1 mmap2(0x3f271000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x2) = 0x3f271000
1 close(3) = 0
1 openat(AT_FDCWD,"/lib/tls/../glib/tls/libz.so.1",O_RDONLY|O_CLOEXEC) = 3
1 read(3,0x3ff1d2d4,512) = 512
1 prctl(46,1072813064,1072812756,512,1065377792,0) = 0
1 fstat64(3,0x3ff1d190) = 0
1 mmap2(NULL,155984,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f238000
1 mprotect(0x3f24d000,65536,PROT_NONE) = 0
1 mmap2(0x3f25d000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x15) = 0x3f25d000
1 close(3) = 0
1 openat(AT_FDCWD,"/lib/tls/../glib/tls/libresolv.so.2",O_RDONLY|O_CLOEXEC) = 3
1 read(3,0x3ff1d2c4,512) = 512
1 prctl(46,1072813048,1072812740,512,1065377792,0) = 0
1 _llseek(3,0,648,0x3ff1d088,SEEK_SET) = 0
1 read(3,0x3ff1d0b8,32) = 32
1 fstat64(3,0x3ff1d180) = 0
1 mmap2(NULL,149696,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f213000
1 mprotect(0x3f225000,61440,PROT_NONE) = 0
1 mmap2(0x3f234000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x11) = 0x3f234000
1 mmap2(0x3f236000,6336,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f236000
1 close(3) = 0
1 openat(AT_FDCWD,"/lib/tls/../glib/tls/libpthread.so.0",O_RDONLY|O_CLOEXEC) = 3
1 read(3,0x3ff1d2b4,512) = 512
1 prctl(46,1072813128,1072812724,512,1065377792,0) = 0
1 _llseek(3,0,768,0x3ff1d078,SEEK_SET) = 0
1 read(3,0x3ff1d0a8,32) = 32
1 fstat64(3,0x3ff1d170) = 0
1 mmap2(NULL,181248,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f1e6000
1 mprotect(0x3f200000,61440,PROT_NONE) = 0
1 mmap2(0x3f20f000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x19) = 0x3f20f000
1 mmap2(0x3f211000,5120,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f211000
1 close(3) = 0
1 openat(AT_FDCWD,"/lib/tls/../glib/tls/libffi.so.7",O_RDONLY|O_CLOEXEC) = 3
1 read(3,0x3ff1d2a4,512) = 512
1 prctl(46,1072813016,1072812708,512,1065377792,0) = 0
1 fstat64(3,0x3ff1d160) = 0
1 mmap2(NULL,95072,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f1ce000
1 mprotect(0x3f1d5000,61440,PROT_NONE) = 0
1 mmap2(0x3f1e4000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x6) = 0x3f1e4000
1 close(3) = 0
1 openat(AT_FDCWD,"/lib/tls/libpcre.so.1",O_RDONLY|O_CLOEXEC) = 3
1 read(3,0x3ff1d294,512) = 512
1 prctl(46,1072812968,1072812692,512,1065377792,0) = 0
1 fstat64(3,0x3ff1d150) = 0
1 mmap2(NULL,545216,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f148000
1 mprotect(0x3f1bd000,61440,PROT_NONE) = 0
1 mmap2(0x3f1cc000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x74) = 0x3f1cc000
1 close(3) = 0
1 openat(AT_FDCWD,"/lib/tls/../glib/tls/../glib/tls/libdl.so.2",O_RDONLY|O_CLOEXEC) = 3
1 read(3,0x3ff1d284,512) = 512
1 prctl(46,1072812984,1072812676,512,1065377792,0) = 0
1 _llseek(3,0,648,0x3ff1d040,SEEK_SET) = 0
1 read(3,0x3ff1d070,32) = 32
1 fstat64(3,0x3ff1d140) = 0
1 mmap2(NULL,73968,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f135000
1 mprotect(0x3f137000,61440,PROT_NONE) = 0
1 mmap2(0x3f146000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x1) = 0x3f146000
1 close(3) = 0
1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3f133000
1 set_thread_area(0x3f13b0c0) = 0
1 mprotect(0x3f3f1000,16384,PROT_READ) = 0
1 mprotect(0x3f146000,4096,PROT_READ) = 0
1 mprotect(0x3f20f000,4096,PROT_READ) = 0
1 mprotect(0x3f1cc000,4096,PROT_READ) = 0
1 mprotect(0x3f1e4000,4096,PROT_READ) = 0
1 mprotect(0x3f234000,4096,PROT_READ) = 0
1 mprotect(0x3f25d000,4096,PROT_READ) = 0
1 mprotect(0x3f53e000,4096,PROT_READ) = 0
1 mprotect(0x3f271000,4096,PROT_READ) = 0
1 mprotect(0x3f40c000,4096,PROT_READ) = 0
1 mprotect(0x3f553000,4096,PROT_READ) = 0
1 mprotect(0x3f571000,4096,PROT_READ) = 0
1 mprotect(0x3f5de000,4096,PROT_READ) = 0
1 mprotect(0x3f7bf000,12288,PROT_READ) = 0
1 mprotect(0x40013000,4096,PROT_READ) = 0
1 mprotect(0x3f7fd000,4096,PROT_READ) = 0
1 set_tid_address(0x3f133c98) = 1
1 set_robust_list(0x3f133ca0,12) = -1 errno=89 (Function not implemented)
1 rt_sigaction(32,0x3ff1dcd0,NULL) = 0
1 rt_sigaction(33,0x3ff1dcd0,NULL) = 0
1 rt_sigprocmask(SIG_UNBLOCK,0x3ff1dd18,NULL,16) = 0
1 getrlimit(3,0x3ff1dda0) = 0
1 brk(NULL) = 0x40014210
1 brk(0x40035210) = 0x40035210
1 brk(0x40036000) = 0x40036000
1 gettimeofday(0x3ff1dcd8,NULL) = 0 ({tv_sec = 1689943227,tv_usec = 689},NULL)
1 syscall(4238,1062473420,129,2147483647,0,0)1 futex(0x3f540ecc,FUTEX_PRIVATE_FLAG|FUTEX_WAKE,2147483647,NULL,NULL,0) = 0
= 0
1 syscall(4238,1062473420,129,2147483647,0,1063123456)1 futex(0x3f540ecc,FUTEX_PRIVATE_FLAG|FUTEX_WAKE,2147483647,NULL,0x3f5dfa00,1063123456) = 0
= 0
1 time(0,1072814724,1,0,0,0) = 1689943227
1 openat(AT_FDCWD,"/etc/localtime",O_RDONLY|O_CLOEXEC) = 3
1 fstat64(3,0x3ff1d850) = 0
1 fstat64(3,0x3ff1d6f0) = 0
1 read(3,0x4001ce70,4096) = 148
1 _llseek(3,4294967295,4294967290,0x3ff1d700,SEEK_CUR) = 0
1 read(3,0x4001ce70,4096) = 6
1 close(3) = 0
1 socket(PF_UNIX,SOCK_DGRAM|SOCK_CLOEXEC,IPPROTO_IP) = 3
1 connect(3,0x3f3f84e0,110) = -1 errno=2 (No such file or directory)
1 close(3) = 0
1 openat(AT_FDCWD,"/dev/urandom",O_RDONLY) = 3
1 read(3,0x3ff1db60,4) = 4
1 close(3) = 0
1 time(0,1072814724,1,0,0,0) = 1689943227
1 socket(PF_UNIX,SOCK_DGRAM|SOCK_CLOEXEC,IPPROTO_IP) = 3
1 connect(3,0x3f3f84e0,110) = -1 errno=2 (No such file or directory)
1 close(3) = 0
1 fstat64(1,0x3ff1da38) = 0
1 write(1,0x4001af60,147)Content-Type: application/json;charset=utf8
{
"error": {
"code": 4000,
"message": "Failed to parse JSON request: wrong arguments"
}
}
= 147
1 exit_group(0)
[+] CPU configuration used for capturemode.cgi: 24KEc
CPU_CONFIG_det\KEc
-----------------------------------------------------------------
