2026-04-25 02:03:36 INFO (LoggingInitialization) Using log config file: jar:file:/C:/Users/dohertj2/Desktop/focas/tools/ghidra_12.0.4_PUBLIC/Ghidra/Framework/Generic/lib/Generic.jar!/generic.log4j.xml 2026-04-25 02:03:36 INFO (LoggingInitialization) Using log file: C:\Users\dohertj2\Desktop\mxaccess\analysis\ghidra\LmxProxy.headless.log 2026-04-25 02:03:36 INFO (Preferences) Loading user preferences: C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\preferences 2026-04-25 02:03:36 INFO (ClassSearcher) Searching for classes... 2026-04-25 02:03:41 INFO (ClassSearcher) Class search complete (4666 ms) 2026-04-25 02:03:41 INFO (DefaultSSLContextInitializer) Initializing SSL Context 2026-04-25 02:03:42 INFO (SecureRandomFactory) Initializing Random Number Generator... 2026-04-25 02:03:42 INFO (SecureRandomFactory) Random Number Generator initialization complete: SHA1PRNG 2026-04-25 02:03:42 INFO (DefaultTrustManagerFactory) Trust manager disabled, cacerts have not been set 2026-04-25 02:03:43 INFO (AnalyzeHeadless) Headless startup complete (12142 ms) 2026-04-25 02:03:43 INFO (ClassSearcher) Class searcher loaded 58 extension points (18 false positives) 2026-04-25 02:03:45 INFO (HeadlessAnalyzer) HEADLESS Script Paths: C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\Base\ghidra_scripts C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\FunctionID\ghidra_scripts C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\SwiftDemangler\ghidra_scripts C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\WildcardAssembler\ghidra_scripts C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\MicrosoftCodeAnalyzer\ghidra_scripts C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\FileFormats\ghidra_scripts C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\BytePatterns\ghidra_scripts C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Processors\DATA\ghidra_scripts C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Debug\Debugger\ghidra_scripts C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\PyGhidra\ghidra_scripts C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Debug\Debugger-rmi-trace\ghidra_scripts C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Processors\8051\ghidra_scripts C:\Users\dohertj2\Desktop\mxaccess\analysis\ghidra\scripts C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\PDB\ghidra_scripts C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\BSim\ghidra_scripts C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\Decompiler\ghidra_scripts C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\SystemEmulation\ghidra_scripts C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Processors\Atmel\ghidra_scripts C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\DecompilerDependent\ghidra_scripts C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Processors\PIC\ghidra_scripts C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\GnuDemangler\ghidra_scripts C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\Jython\ghidra_scripts C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\VersionTracking\ghidra_scripts C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Processors\JVM\ghidra_scripts 2026-04-25 02:03:45 INFO (HeadlessAnalyzer) HEADLESS: execution starts 2026-04-25 02:03:45 INFO (HeadlessAnalyzer) Creating project: C:\Users\dohertj2\Desktop\mxaccess\analysis\ghidra\projects\mxnmx 2026-04-25 02:03:45 INFO (DefaultProject) Creating project: C:\Users\dohertj2\Desktop\mxaccess\analysis\ghidra\projects\mxnmx 2026-04-25 02:03:45 INFO (HeadlessAnalyzer) REPORT: Processing input files: 2026-04-25 02:03:45 INFO (HeadlessAnalyzer) project: C:\Users\dohertj2\Desktop\mxaccess\analysis\ghidra\projects\mxnmx 2026-04-25 02:03:45 INFO (HeadlessAnalyzer) IMPORTING: file:///C:/Users/dohertj2/Desktop/mxaccess/analysis/ghidra/input/LmxProxy.dll 2026-04-25 02:03:54 INFO (ProgramLoader) Using Loader: Portable Executable (PE) 2026-04-25 02:03:54 INFO (ProgramLoader) Using Language/Compiler: x86:LE:32:default:windows 2026-04-25 02:03:54 INFO (ProgramLoader) Using Library Search Path: [., C:\Windows\SysWOW64, C:\Program Files\Eclipse Adoptium\jdk-21.0.10.7-hotspot\bin, C:\Windows\Sun\Java\bin, C:\Windows\system32, C:\Windows, C:\Program Files\WindowsApps\Microsoft.PowerShell_7.6.1.0_x64__8wekyb3d8bbwe, C:\Users\dohertj2\.codex\tmp\arg0\codex-arg0eaNSL1, C:\TwinCAT\Common64, C:\TwinCAT\Common32, C:\Program Files (x86)\Wonderware\OI-Server\CommonFiles\bin\, C:\Program Files (x86)\Common Files\ArchestrA\, C:\Program Files\OpenSSH\, C:\Windows\System32\Wbem, C:\Windows\System32\WindowsPowerShell\v1.0\, C:\Windows\System32\OpenSSH\, C:\Program Files\dotnet\, C:\Program Files\Git\cmd, C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\130\Tools\Binn\, C:\Program Files (x86)\Microsoft SQL Server\140\Tools\Binn\, C:\Program Files\Microsoft SQL Server\140\Tools\Binn\, C:\Program Files\Microsoft SQL Server\140\DTS\Binn\, C:\Program Files (x86)\Common Files\ArchestrA\Licensing Framework\License API2, C:\Program Files\nodejs\, C:\Program Files\Docker\Docker\resources\bin, C:\Users\dohertj2\AppData\Local\Programs\Python\Python312\Scripts\, C:\Users\dohertj2\AppData\Local\Programs\Python\Python312\, C:\Users\dohertj2\AppData\Local\Programs\Python\Launcher\, C:\Users\dohertj2\AppData\Local\Microsoft\WindowsApps, C:\Users\dohertj2\.dotnet\tools, C:\Users\dohertj2\.local\bin, C:\Users\dohertj2\AppData\Local\JetBrains\Toolbox\scripts, C:\Users\dohertj2\AppData\Local\Microsoft\WinGet\Links, C:\Users\dohertj2\AppData\Roaming\npm, C:\Users\dohertj2\AppData\Local\Microsoft\WinGet\Packages\BurntSushi.ripgrep.MSVC_Microsoft.Winget.Source_8wekyb3d8bbwe\ripgrep-15.1.0-x86_64-pc-windows-msvc, C:\Users\dohertj2\AppData\Local\Microsoft\WinGet\Packages\zig.zig_Microsoft.Winget.Source_8wekyb3d8bbwe\zig-x86_64-windows-0.16.0, C:\Users\dohertj2\AppData\Local\OpenAI\Codex\bin, C:\Program Files\WindowsApps\OpenAI.Codex_26.422.2437.0_x64__2p2nqsd0c76g0\app\resources] 2026-04-25 02:04:21 ERROR (CliStreamBlob) Cannot replace existing blob at address 10023015 with CustomAttrib_8117 because they have different sizes (Old: 6, New: 5). 2026-04-25 02:04:21 WARN (CliBlobCustomAttrib) Invalid FieldOrProp value in NamedArg #1: 0x8 2026-04-25 02:04:21 ERROR (CliStreamBlob) Cannot replace existing blob at address 1002305b with CustomAttrib_8187 because they have different sizes (Old: 6, New: 9). 2026-04-25 02:04:21 ERROR (CliStreamBlob) Cannot replace existing blob at address 10023083 with CustomAttrib_8227 because they have different sizes (Old: 78, New: 58). 2026-04-25 02:04:21 ERROR (CliStreamBlob) Cannot replace existing blob at address 10023015 with CustomAttrib_8117 because they have different sizes (Old: 6, New: 5). 2026-04-25 02:04:21 ERROR (CliStreamBlob) Cannot replace existing blob at address 10023083 with CustomAttrib_8227 because they have different sizes (Old: 78, New: 58). 2026-04-25 02:04:21 WARN (CliBlobCustomAttrib) Invalid FieldOrProp value in NamedArg #1: 0x8 2026-04-25 02:04:21 ERROR (CliStreamBlob) Cannot replace existing blob at address 1002305b with CustomAttrib_8187 because they have different sizes (Old: 6, New: 9). 2026-04-25 02:04:21 ERROR (CliStreamBlob) Cannot replace existing blob at address 10023015 with CustomAttrib_8117 because they have different sizes (Old: 6, New: 5). 2026-04-25 02:04:30 INFO (TLSDirectory) TLS callbacks at 68f051c0 2026-04-25 02:04:30 DEBUG (WEVTResourceDataType) Error processing Provider Element. 2026-04-25 02:04:34 INFO (TLSDirectory) TLS callbacks at 1000701c 2026-04-25 02:04:35 WARN (ExportDataDirectory) Invalid or missing function at 10085b88 2026-04-25 02:04:40 WARN (ExportDataDirectory) Invalid or missing function at 69e9f8f8 2026-04-25 02:04:40 DEBUG (WEVTResourceDataType) Error processing Provider Element. 2026-04-25 02:04:43 INFO (ProgramLoader) Additional info: Loading file:///C:/Users/dohertj2/Desktop/mxaccess/analysis/ghidra/input/LmxProxy.dll?MD5=b3a6a8f46ce22a48a42c23b77fbf9449... [LmxProxy.dll]: failed to create TerminatedCString at 10038210: Failed to resolve data length for TerminatedCString ------------------------------------------------ Searching 36 paths for library ADVAPI32.DLL... Loading file:///C:/Windows/SysWOW64/advapi32.dll?MD5=950c6d7d9ee5088375a96ae8436eaa70... Created exports file: C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\advapi32.exports Library not saved to project. ------------------------------------------------ Searching 36 paths for library DBGHELP.DLL... Loading file:///C:/Windows/SysWOW64/dbghelp.dll?MD5=7a365edaa1b5c3a3fcdca41ee8fc95e2... Created exports file: C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\dbghelp.exports Library not saved to project. ------------------------------------------------ Searching 36 paths for library KERNEL32.DLL... Loading file:///C:/Windows/SysWOW64/kernel32.dll?MD5=0ce1f5f3d23f51b9ecfd453e34ca0af7... Created exports file: C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\kernel32.exports Library not saved to project. ------------------------------------------------ Searching 36 paths for library LICAPINATIVEWRAPPER.DLL... Loading file:///C:/Program Files (x86)/Wonderware/OI-Server/CommonFiles/bin/LicAPINativeWrapper.dll?MD5=dd566b235e709da69c91e8175544321c... Created exports file: C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\licapinativewrapper.exports Library not saved to project. ------------------------------------------------ Searching 36 paths for library MSVCP100.DLL... Loading file:///C:/Windows/SysWOW64/msvcp100.dll?MD5=bc83108b18756547013ed443b8cdb31b... Created exports file: C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\msvcp100.exports Library not saved to project. ------------------------------------------------ Searching 36 paths for library MSVCR100.DLL... Loading file:///C:/Windows/SysWOW64/msvcr100.dll?MD5=0e37fbfa79d349d672456923ec5fbbe3... Created exports file: C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\msvcr100.exports Library not saved to project. ------------------------------------------------ Searching 36 paths for library OLE32.DLL... Loading file:///C:/Windows/SysWOW64/ole32.dll?MD5=0c99de30cc1bc2997ebf5b7ca4b54fe8... [ole32.dll]: failed to create WEVTResource at 68fc5218: Failed to resolve data length for WEVTResource Created exports file: C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\ole32.exports Library not saved to project. ------------------------------------------------ Searching 36 paths for library OLEAUT32.DLL... Loading file:///C:/Windows/SysWOW64/oleaut32.dll?MD5=96b3f5be7d92458fb909620f918a1f63... Created exports file: C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\oleaut32.exports Library not saved to project. ------------------------------------------------ Searching 36 paths for library SHLWAPI.DLL... Loading file:///C:/Windows/SysWOW64/shlwapi.dll?MD5=7955116f6d0ddddab0dab96deaea0b3d... Created exports file: C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\shlwapi.exports Library not saved to project. ------------------------------------------------ Searching 36 paths for library USER32.DLL... Loading file:///C:/Windows/SysWOW64/user32.dll?MD5=0927ed96558e5b2392df6cf7582f2655... [user32.dll]: failed to create WEVTResource at 69eb6a70: Failed to resolve data length for WEVTResource Created exports file: C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\user32.exports Library not saved to project. ------------------------------------------------ Applying cached symbols from LICAPINATIVEWRAPPER.DLL Applying cached symbols from KERNEL32.DLL Applying cached symbols from USER32.DLL Applying cached symbols from ADVAPI32.DLL Applying cached symbols from OLE32.DLL Applying cached symbols from OLEAUT32.DLL Applying cached symbols from SHLWAPI.DLL Applying cached symbols from MSVCP100.DLL Applying cached symbols from DBGHELP.DLL Applying cached symbols from MSVCR100.DLL Linking the External Programs of 'LmxProxy.dll' to imported libraries... [LICAPINATIVEWRAPPER.DLL] -> not found in project [KERNEL32.DLL] -> not found in project [USER32.DLL] -> not found in project [ADVAPI32.DLL] -> not found in project [OLE32.DLL] -> not found in project [OLEAUT32.DLL] -> not found in project [SHLWAPI.DLL] -> not found in project [MSVCP100.DLL] -> not found in project [DBGHELP.DLL] -> not found in project [MSVCR100.DLL] -> not found in project ------------------------------------------------ 2026-04-25 02:04:43 INFO (HeadlessAnalyzer) IMPORTING: Loaded 0 additional files 2026-04-25 02:04:44 INFO (HeadlessAnalyzer) ANALYZING all memory and code: file:///C:/Users/dohertj2/Desktop/mxaccess/analysis/ghidra/input/LmxProxy.dll 2026-04-25 02:04:44 WARN (NoReturnFunctionAnalyzer) Ignoring leading '_' chars on no-return name '___raise_securityfailure' specified in file: C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\Base\data\PEFunctionsThatDoNotReturn 2026-04-25 02:04:44 WARN (NoReturnFunctionAnalyzer) Ignoring leading '_' chars on no-return name '___report_rangecheckfailure' specified in file: C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\Base\data\PEFunctionsThatDoNotReturn 2026-04-25 02:04:44 INFO (PdbUniversalAnalyzer) Skipping PDB processing: missing PDB information in program metadata 2026-04-25 02:04:45 INFO (PackedDatabaseCache) Packed database cache: C:\Users\dohertj2\AppData\Local\ghidra\packed-db-cache 2026-04-25 02:04:45 DEBUG (PackedDatabaseCache) Caching packed database: C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\Base\data\typeinfo\win32\windows_vs12_32.gdt 2026-04-25 02:04:45 DEBUG (PackedDatabase) Unpacking database C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\Base\data\typeinfo\win32\windows_vs12_32.gdt -> C:\Users\dohertj2\AppData\Local\ghidra\packed-db-cache\pdb627C0973\db.1.gbf 2026-04-25 02:04:45 DEBUG (PackedDatabaseCache) Cache update completed: C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\Base\data\typeinfo\win32\windows_vs12_32.gdt 2026-04-25 02:04:57 INFO (DecompilerSwitchAnalyzer) hit non-returning function, restarting decompiler switch analyzer later 2026-04-25 02:05:20 INFO (TypeDescriptorModel) Unprocessed TypeDescriptor: long 2026-04-25 02:05:25 INFO (TypeDescriptorModel) Unprocessed TypeDescriptor: long 2026-04-25 02:05:51 INFO (ApplyDataArchiveAnalyzer) Applied data type archive: windows_vs12_32 2026-04-25 02:05:52 INFO (ApplyDataArchiveAnalyzer) Applied data type archive: windows_vs12_32 2026-04-25 02:06:32 INFO (AutoAnalysisManager) ----------------------------------------------------- ASCII Strings 2.682 secs Apply Data Archives 0.962 secs Call Convention ID 0.039 secs Call-Fixup Installer 0.162 secs Create Address Tables 0.188 secs Create Address Tables - One Time 0.058 secs Create Function 0.807 secs Data Reference 0.480 secs Decompiler Parameter ID 21.602 secs Decompiler Switch Analysis 27.258 secs Decompiler Switch Analysis - One Time 6.226 secs Demangler Microsoft 0.543 secs Disassemble 1.527 secs Disassemble Entry Points 0.308 secs Embedded Media 0.034 secs External Entry References 0.000 secs Function ID 3.038 secs Function Start Pre Search 0.053 secs Function Start Search 0.212 secs Function Start Search After Code 0.075 secs Function Start Search After Data 0.051 secs Non-Returning Functions - Discovered 0.766 secs Non-Returning Functions - Known 0.029 secs PDB Universal 0.008 secs Reference 0.507 secs Scalar Operand References 1.317 secs Shared Return Calls 0.626 secs Stack 8.338 secs Subroutine References 0.461 secs Subroutine References - One Time 0.017 secs Windows x86 PE Exception Handling 10.009 secs Windows x86 PE RTTI Analyzer 7.982 secs Windows x86 Thread Environment Block (TEB) Analyzer 0.059 secs WindowsResourceReference 2.630 secs X86 Function Callee Purge 0.486 secs x86 Constant Reference Analyzer 7.712 secs ----------------------------------------------------- Total Time 107 secs ----------------------------------------------------- 2026-04-25 02:06:32 INFO (HeadlessAnalyzer) REPORT: Analysis succeeded for file: file:///C:/Users/dohertj2/Desktop/mxaccess/analysis/ghidra/input/LmxProxy.dll 2026-04-25 02:06:32 INFO (HeadlessAnalyzer) REPORT: Execute script: MxNmxExport.java 'C:\Users\dohertj2\Desktop\mxaccess\analysis\ghidra\exports' 2026-04-25 02:06:40 INFO (HeadlessAnalyzer) SCRIPT: C:\Users\dohertj2\Desktop\mxaccess\analysis\ghidra\scripts\MxNmxExport.java 2026-04-25 02:06:43 INFO (GhidraScript) MxNmxExport.java> Wrote MX/NMX Ghidra export for LmxProxy.dll to C:\Users\dohertj2\Desktop\mxaccess\analysis\ghidra\exports 2026-04-25 02:06:43 INFO (HeadlessAnalyzer) ANALYZING changes made by post scripts: file:///C:/Users/dohertj2/Desktop/mxaccess/analysis/ghidra/input/LmxProxy.dll 2026-04-25 02:06:43 INFO (HeadlessAnalyzer) REPORT: Post-analysis succeeded for file: file:///C:/Users/dohertj2/Desktop/mxaccess/analysis/ghidra/input/LmxProxy.dll 2026-04-25 02:06:43 INFO (LocalFileSystem) /LmxProxy.dll: file created (dohertj2) 2026-04-25 02:06:43 INFO (HeadlessAnalyzer) REPORT: Save succeeded for: /LmxProxy.dll (mxnmx:/LmxProxy.dll) 2026-04-25 02:06:43 INFO (HeadlessAnalyzer) REPORT: Import succeeded