EMBA firmware report

-----------------------------------------------------------------

[*] Initial CPU detection process of binary pwdgrp.cgi with CPU configuration .

[*] Emulator used: qemu-mipsel-static

[*] Using root directory: /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract (1/2)

[*] Trying to emulate binary ./usr/html/axis-cgi/pwdgrp.cgi with cpu config NONE

[-] Emulation process of binary pwdgrp.cgi with CPU configuration  failed

[*] Trying to emulate binary ./usr/html/axis-cgi/pwdgrp.cgi with cpu config 4Kc

[-] Emulation process of binary pwdgrp.cgi with CPU configuration 4Kc failed

[*] Trying to emulate binary ./usr/html/axis-cgi/pwdgrp.cgi with cpu config 4Km

[-] Emulation process of binary pwdgrp.cgi with CPU configuration 4Km failed

[*] Trying to emulate binary ./usr/html/axis-cgi/pwdgrp.cgi with cpu config 4KEcR1

[-] Emulation process of binary pwdgrp.cgi with CPU configuration 4KEcR1 failed

[*] Trying to emulate binary ./usr/html/axis-cgi/pwdgrp.cgi with cpu config 4KEmR1

[-] Emulation process of binary pwdgrp.cgi with CPU configuration 4KEmR1 failed

[*] Trying to emulate binary ./usr/html/axis-cgi/pwdgrp.cgi with cpu config 4KEc

[-] Emulation process of binary pwdgrp.cgi with CPU configuration 4KEc failed

[*] Trying to emulate binary ./usr/html/axis-cgi/pwdgrp.cgi with cpu config 4KEm

[-] Emulation process of binary pwdgrp.cgi with CPU configuration 4KEm failed

[*] Trying to emulate binary ./usr/html/axis-cgi/pwdgrp.cgi with cpu config 24Kc

[-] Emulation process of binary pwdgrp.cgi with CPU configuration 24Kc failed

[*] Trying to emulate binary ./usr/html/axis-cgi/pwdgrp.cgi with cpu config 24KEc

[-] Emulation process of binary pwdgrp.cgi with CPU configuration 24KEc failed

[*] Trying to emulate binary ./usr/html/axis-cgi/pwdgrp.cgi with cpu config 24Kf

[-] Emulation process of binary pwdgrp.cgi with CPU configuration 24Kf failed

[*] Trying to emulate binary ./usr/html/axis-cgi/pwdgrp.cgi with cpu config 34Kf

[-] Emulation process of binary pwdgrp.cgi with CPU configuration 34Kf failed

[*] Trying to emulate binary ./usr/html/axis-cgi/pwdgrp.cgi with cpu config 74Kf

[-] Emulation process of binary pwdgrp.cgi with CPU configuration 74Kf failed

[*] Trying to emulate binary ./usr/html/axis-cgi/pwdgrp.cgi with cpu config M14K

[-] Emulation process of binary pwdgrp.cgi with CPU configuration M14K failed

[*] Trying to emulate binary ./usr/html/axis-cgi/pwdgrp.cgi with cpu config M14Kc

[-] Emulation process of binary pwdgrp.cgi with CPU configuration M14Kc failed

[*] Trying to emulate binary ./usr/html/axis-cgi/pwdgrp.cgi with cpu config P5600

[-] Emulation process of binary pwdgrp.cgi with CPU configuration P5600 failed

[*] Trying to emulate binary ./usr/html/axis-cgi/pwdgrp.cgi with cpu config mips32r6-generic

[-] Emulation process of binary pwdgrp.cgi with CPU configuration mips32r6-generic failed

[*] Trying to emulate binary ./usr/html/axis-cgi/pwdgrp.cgi with cpu config I7200

[-] Emulation process of binary pwdgrp.cgi with CPU configuration I7200 failed

-----------------------------------------------------------------

-----------------------------------------------------------------

[*] Initial CPU detection process of binary pwdgrp.cgi with CPU configuration 24KEc.

[*] Emulator used: qemu-mipsel-static

[*] Using root directory: /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/4325012-58052244.squashfs_v4_le_extract/usr (2/2)

[*] Trying to emulate binary ./html/axis-cgi/pwdgrp.cgi with cpu config 24KEc

1 brk(NULL) = 0x400171d0

1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3f7c7000

1 uname(0x3ff1d6b0) = 0

1 access("/etc/ld.so.preload",R_OK) = -1 errno=2 (No such file or directory)

1 openat(AT_FDCWD,"/etc/ld.so.cache",O_RDONLY|O_CLOEXEC) = -1 errno=2 (No such file or directory)

1 openat(AT_FDCWD,"/lib/tls/libsystemd.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d444,512) = 512

1 prctl(46,1072813432,1072813124,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d300) = 0

1 mmap2(NULL,814232,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f700000

1 mprotect(0x3f7b3000,61440,PROT_NONE) = 0

1 mmap2(0x3f7c2000,20480,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0xb2) = 0x3f7c2000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libparhand.so",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d434,512) = 512

1 prctl(46,1072813384,1072813108,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d2f0) = 0

1 mmap2(NULL,186304,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f6d2000

1 mprotect(0x3f6ef000,61440,PROT_NONE) = 0

1 mmap2(0x3f6fe000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x1c) = 0x3f6fe000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libc.so.6",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d424,512) = 512

1 prctl(46,1072813528,1072813092,512,1065377792,0) = 0

1 _llseek(3,0,760,0x3ff1d1f8,SEEK_SET) = 0

1 read(3,0x3ff1d228,32) = 32

1 fstat64(3,0x3ff1d2e0) = 0

1 mmap2(NULL,1593152,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f54d000

1 mprotect(0x3f6ba000,61440,PROT_NONE) = 0

1 mmap2(0x3f6c9000,28672,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x16c) = 0x3f6c9000

1 mmap2(0x3f6d0000,8000,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f6d0000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/src/basic/tls/librt.so.1",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d354,512) = 512

1 prctl(46,1072813224,1072812884,512,1065377792,0) = 0

1 _llseek(3,0,704,0x3ff1d118,SEEK_SET) = 0

1 read(3,0x3ff1d148,32) = 32

1 fstat64(3,0x3ff1d210) = 0

1 mmap2(NULL,94928,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f535000

1 mprotect(0x3f53c000,61440,PROT_NONE) = 0

1 mmap2(0x3f54b000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x6) = 0x3f54b000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/src/basic/tls/libcap.so.2",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d344,512) = 512

1 prctl(46,1072813144,1072812868,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d200) = 0

1 mmap2(NULL,86384,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f51f000

1 mprotect(0x3f523000,65536,PROT_NONE) = 0

1 mmap2(0x3f533000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x4) = 0x3f533000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/src/basic/tls/libpthread.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d334,512) = 512

1 prctl(46,1072813256,1072812852,512,1065377792,0) = 0

1 _llseek(3,0,768,0x3ff1d0f8,SEEK_SET) = 0

1 read(3,0x3ff1d128,32) = 32

1 fstat64(3,0x3ff1d1f0) = 0

1 mmap2(NULL,181248,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f4f2000

1 mprotect(0x3f50c000,61440,PROT_NONE) = 0

1 mmap2(0x3f51b000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x19) = 0x3f51b000

1 mmap2(0x3f51d000,5120,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f51d000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libgio-2.0.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d324,512) = 512

1 prctl(46,1072813144,1072812836,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d1e0) = 0

1 mmap2(NULL,1990784,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f30b000

1 mprotect(0x3f4db000,61440,PROT_NONE) = 0

1 mmap2(0x3f4ea000,24576,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x1cf) = 0x3f4ea000

1 mmap2(0x3f4f0000,4224,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f4f0000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libgobject-2.0.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d314,512) = 512

1 prctl(46,1072813096,1072812820,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d1d0) = 0

1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3f309000

1 mmap2(NULL,446160,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f29c000

1 mprotect(0x3f2f7000,65536,PROT_NONE) = 0

1 mmap2(0x3f307000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x5b) = 0x3f307000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libxmlnode.so",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d304,512) = 512

1 prctl(46,1072813080,1072812804,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d1c0) = 0

1 mmap2(NULL,82192,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f287000

1 mprotect(0x3f28b000,61440,PROT_NONE) = 0

1 mmap2(0x3f29a000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x3) = 0x3f29a000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libglib-2.0.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d2f4,512) = 512

1 prctl(46,1072813096,1072812788,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d1b0) = 0

1 mmap2(NULL,1257552,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f153000

1 mprotect(0x3f274000,61440,PROT_NONE) = 0

1 mmap2(0x3f283000,12288,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x120) = 0x3f283000

1 mmap2(0x3f286000,80,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f286000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/../glib/tls/libgmodule-2.0.so.0",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d2e4,512) = 512

1 prctl(46,1072813048,1072812772,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d1a0) = 0

1 mmap2(NULL,78096,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f13f000

1 mprotect(0x3f142000,61440,PROT_NONE) = 0

1 mmap2(0x3f151000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x2) = 0x3f151000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/../glib/tls/libz.so.1",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d2d4,512) = 512

1 prctl(46,1072813064,1072812756,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d190) = 0

1 mmap2(NULL,155984,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f118000

1 mprotect(0x3f12d000,65536,PROT_NONE) = 0

1 mmap2(0x3f13d000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x15) = 0x3f13d000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/../glib/tls/libresolv.so.2",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d2c4,512) = 512

1 prctl(46,1072813048,1072812740,512,1065377792,0) = 0

1 _llseek(3,0,648,0x3ff1d088,SEEK_SET) = 0

1 read(3,0x3ff1d0b8,32) = 32

1 fstat64(3,0x3ff1d180) = 0

1 mmap2(NULL,149696,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f0f3000

1 mprotect(0x3f105000,61440,PROT_NONE) = 0

1 mmap2(0x3f114000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x11) = 0x3f114000

1 mmap2(0x3f116000,6336,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3f116000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/../glib/tls/libffi.so.7",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d2b4,512) = 512

1 prctl(46,1072813032,1072812724,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d170) = 0

1 mmap2(NULL,95072,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f0db000

1 mprotect(0x3f0e2000,61440,PROT_NONE) = 0

1 mmap2(0x3f0f1000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x6) = 0x3f0f1000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libconfutils.so",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d2a4,512) = 512

1 prctl(46,1072812984,1072812708,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d160) = 0

1 mmap2(NULL,82256,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f0c6000

1 mprotect(0x3f0ca000,61440,PROT_NONE) = 0

1 mmap2(0x3f0d9000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x3) = 0x3f0d9000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libexpat.so.1",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d294,512) = 512

1 prctl(46,1072813000,1072812692,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d150) = 0

1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3f0c4000

1 mmap2(NULL,307440,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3f078000

1 mprotect(0x3f0b2000,61440,PROT_NONE) = 0

1 mmap2(0x3f0c1000,12288,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x39) = 0x3f0c1000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/libpcre.so.1",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d284,512) = 512

1 prctl(46,1072812952,1072812676,512,1065377792,0) = 0

1 fstat64(3,0x3ff1d140) = 0

1 mmap2(NULL,545216,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3eff2000

1 mprotect(0x3f067000,61440,PROT_NONE) = 0

1 mmap2(0x3f076000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x74) = 0x3f076000

1 close(3) = 0

1 openat(AT_FDCWD,"/lib/tls/../glib/tls/../glib/tls/libdl.so.2",O_RDONLY|O_CLOEXEC) = 3

1 read(3,0x3ff1d274,512) = 512

1 prctl(46,1072812968,1072812660,512,1065377792,0) = 0

1 _llseek(3,0,648,0x3ff1d030,SEEK_SET) = 0

1 read(3,0x3ff1d060,32) = 32

1 fstat64(3,0x3ff1d130) = 0

1 mmap2(NULL,73968,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_DENYWRITE,3,0) = 0x3efdf000

1 mprotect(0x3efe1000,61440,PROT_NONE) = 0

1 mmap2(0x3eff0000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_DENYWRITE|MAP_FIXED,3,0x1) = 0x3eff0000

1 close(3) = 0

1 mmap2(NULL,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3efdd000

1 set_thread_area(0x3efe46b0) = 0

1 mprotect(0x3f6c9000,16384,PROT_READ) = 0

1 mprotect(0x3eff0000,4096,PROT_READ) = 0

1 mprotect(0x3f51b000,4096,PROT_READ) = 0

1 mprotect(0x3f076000,4096,PROT_READ) = 0

1 mprotect(0x3f0c1000,8192,PROT_READ) = 0

1 mprotect(0x3f283000,4096,PROT_READ) = 0

1 mprotect(0x3f0f1000,4096,PROT_READ) = 0

1 mprotect(0x3f307000,4096,PROT_READ) = 0

1 mprotect(0x3f0d9000,4096,PROT_READ) = 0

1 mprotect(0x3f114000,4096,PROT_READ) = 0

1 mprotect(0x3f13d000,4096,PROT_READ) = 0

1 mprotect(0x3f151000,4096,PROT_READ) = 0

1 mprotect(0x3f29a000,4096,PROT_READ) = 0

1 mprotect(0x3f4ea000,12288,PROT_READ) = 0

1 mprotect(0x3f533000,4096,PROT_READ) = 0

1 mprotect(0x3f54b000,4096,PROT_READ) = 0

1 mprotect(0x3f6fe000,4096,PROT_READ) = 0

1 mprotect(0x3f7c2000,12288,PROT_READ) = 0

1 mprotect(0x40016000,4096,PROT_READ) = 0

1 mprotect(0x3f7fd000,4096,PROT_READ) = 0

1 set_tid_address(0x3efdd288) = 1

1 set_robust_list(0x3efdd290,12) = -1 errno=89 (Function not implemented)

1 rt_sigaction(32,0x3ff1dd00,NULL) = 0

1 rt_sigaction(33,0x3ff1dd00,NULL) = 0

1 rt_sigprocmask(SIG_UNBLOCK,0x3ff1dd48,NULL,16) = 0

1 getrlimit(3,0x3ff1ddd0) = 0

1 brk(NULL) = 0x400171d0

1 brk(0x400381d0) = 0x400381d0

1 brk(0x40039000) = 0x40039000

1 gettimeofday(0x3ff1dd08,NULL) = 0 ({tv_sec = 1689943249,tv_usec = 224146},NULL)

1 syscall(4238,1059610316,129,2147483647,0,0)1 futex(0x3f285ecc,FUTEX_PRIVATE_FLAG|FUTEX_WAKE,2147483647,NULL,NULL,0) = 0

= 0

1 syscall(4238,1059610316,129,2147483647,0,1060145664)1 futex(0x3f285ecc,FUTEX_PRIVATE_FLAG|FUTEX_WAKE,2147483647,NULL,0x3f308a00,1060145664) = 0

= 0

1 rt_sigaction(SIGTERM,0x3ff1dcd0,NULL) = 0

1 rt_sigaction(SIGINT,0x3ff1dcd0,NULL) = 0

1 rt_sigaction(SIGPIPE,0x3ff1dcd0,NULL) = 0

1 geteuid() = 0

1 getegid() = 0

1 socket(PF_UNIX,SOCK_STREAM,IPPROTO_IP) = 3

1 connect(3,0x3ff1dac4,110) = -1 errno=2 (No such file or directory)

1 nanosleep(1072814720,1072814720,110,1,0,0)[+] CPU configuration used for pwdgrp.cgi: 24KEc

CPU_CONFIG_det\KEc

-----------------------------------------------------------------