-----------------------------------------------------------------

[*] Initial CPU detection process of binary mcuisp with CPU configuration NONE.

[*] Emulator used: qemu-mipsel-static

[*] Using root directory: /logs/s115_usermode_emulator/firmware/unblob_extracted/firmware_extract/11108416-13869836.lzma_extract/lzma.uncompressed_extract/3761304-11775640.cpio_portable_ascii_extract (1/2)

[*] Trying to emulate binary ./usr/bin/mcuisp with cpu config NONE

1 mmap(NULL,4096,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|0x4000000,-1,0) = 0x3ffe6000

1 stat("/etc/ld.so.cache",0x4071ea98) = -1 errno=2 (No such file or directory)

1 open("/lib/libpthread.so.0",O_RDONLY) = 3

1 fstat(3,0x4071e194) = 0

1 mmap(NULL,4096,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|0x4000000,-1,0) = 0x3ffe5000

1 read(3,0x3ffe5000,4096) = 4096

1 mmap(NULL,151552,PROT_NONE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3ffc0000

1 mmap(0x3ffc0000,74456,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_FIXED,3,0) = 0x3ffc0000

1 mmap(0x3ffe2000,1804,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_FIXED,3,0x12000) = 0x3ffe2000

1 mmap(0x3ffe3000,6176,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3ffe3000

1 close(3) = 0

1 munmap(0x3ffe5000,4096) = 0

1 open("/lib/libc.so.0",O_RDONLY) = 3

1 fstat(3,0x4071e184) = 0

1 mmap(NULL,4096,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|0x4000000,-1,0) = 0x3ffbf000

1 read(3,0x3ffbf000,4096) = 4096

1 mmap(NULL,737280,PROT_NONE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3ff0b000

1 mmap(0x3ff0b000,640416,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_FIXED,3,0) = 0x3ff0b000

1 mmap(0x3ffb8000,4492,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_FIXED,3,0x9d000) = 0x3ffb8000

1 mmap(0x3ffba000,19628,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|MAP_FIXED,-1,0) = 0x3ffba000

1 close(3) = 0

1 munmap(0x3ffbf000,4096) = 0

1 stat("/lib/ld-uClibc.so.0",0x4071ea78) = 0

1 open("/lib/libdl.so.0",O_RDONLY) = 3

1 fstat(3,0x4071e164) = 0

1 mmap(NULL,4096,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|0x4000000,-1,0) = 0x3ff0a000

1 read(3,0x3ff0a000,4096) = 4096

1 mmap(NULL,77824,PROT_NONE,MAP_PRIVATE|MAP_ANONYMOUS,-1,0) = 0x3fef7000

1 mmap(0x3fef7000,9344,PROT_EXEC|PROT_READ,MAP_PRIVATE|MAP_FIXED,3,0) = 0x3fef7000

1 mmap(0x3ff09000,1436,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_FIXED,3,0x2000) = 0x3ff09000

1 close(3) = 0

1 munmap(0x3ff0a000,4096) = 0

1 open("/lib/libc.so.0",O_RDONLY) = 3

1 fstat(3,0x4071e154) = 0

1 close(3) = 0

1 open("/lib/libc.so.0",O_RDONLY) = 3

1 fstat(3,0x4071e134) = 0

1 close(3) = 0

1 mmap(NULL,4096,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANONYMOUS|0x4000000,-1,0) = 0x3fef6000

1 set_thread_area(0x3fefd460) = 0

1 open("/dev/urandom",O_RDONLY) = 3

1 read(3,0x4071ec98,4) = 4

1 close(3) = 0

1 set_tid_address(0x3fef6068) = 1

1 set_robust_list(0x3fef6070,12) = -1 errno=89 (Function not implemented)

1 rt_sigaction(32,0x4071ea70,NULL) = 0

1 rt_sigaction(33,0x4071ea70,NULL) = 0

1 rt_sigprocmask(SIG_UNBLOCK,0x4071ea78,NULL,16) = 0

1 getrlimit(3,0x4071ea8c) = 0

1 ioctl(0,TCGETS,0x4071ea18) = -1 errno=25 (Inappropriate ioctl for device)

1 ioctl(1,TCGETS,0x4071ea18) = -1 errno=25 (Inappropriate ioctl for device)

1 write(1,0x3ffbb6a0,441)WCO V2 MCU ISP Tool Ver:Mar  9 2021 15:22:14

Usage:

WCO V2 mcuisp  [T20/T30 Power Pin]  [MCU Reset Pin]  [MCU Boot Pin]  [mcu fireware path]

for example:

    T20/T30 Power Pin: PC16 --> (PA)32 + (PB)32 + (PC)16 = 80

    MCU Reset Pin    : PB30 --> (PA)32 + (PB)30          = 62

    MCU Boot Pin     : PB18 --> (PA)32 + (PB)18          = 50

    mcu firmware path: /config/mcu/mcufirmware.bin

run:

mcuisp 80 62 50 /config/mcu/mcufirmware.bin

 = 441

1 exit_group(-1)

[+] CPU configuration used for mcuisp: NONE

CPU_CONFIG_det\;NONE

-----------------------------------------------------------------