dohertj2/mxaccess
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
079896c7bc7b9fef5b83839a42e29520756fe2d6
mxaccess/analysis/ghidra/aaMxDataConsumer.headless.log
T
Joseph Doherty fe2a6db786
rust / build / test / clippy / fmt (push) Has been cancelled
Details
Initial project state: .NET reference, design, Rust port (M0+M1), evidence 
Layout:
- src/                    .NET 10 x64 reference: MxNativeCodec, MxNativeClient,
                          MxAsbClient, probes, tests, harnesses. Executable spec.
- design/                 Architectural plan for the Rust port (M0–M6), error
                          model, protocol invariants, risks (R1–R16), adversarial
                          review log (review.md).
- rust/                   Rust workspace. M0 skeleton + M1 codec parity.
                          mxaccess-codec: 215 unit tests + 2 cross-implementation
                          parity tests (byte-identical against .NET reference).
                          Other crates are M0 stubs awaiting M2+.
- captures/               Frida + netsh + pcap evidence per CLAUDE.md
                          ("captures are evidence, not throwaway logs").
- analysis/               Decompiled C# (frida/proxy/decompiled-*),
                          Ghidra exports for native DLLs (`exports/` only —
                          working state at `projects/` and AVEVA's input
                          binaries at `input/` are gitignored).
- docs/                   Reverse-engineering reference docs.
- tools/                  Setup-LiveProbeEnv.ps1 (Infisical credential fetcher),
                          Compute-Crc.ps1 (.NET parity helper).
- .github/workflows/      Rust CI: fmt + build + test + clippy on Windows.
- LICENSE                 MIT (Joseph Doherty, 2026).

Verified:
- cargo test --workspace → 217 passed (215 unit + 2 .NET parity), 0 failed
- cargo clippy --workspace -- -D warnings → clean
- cargo fmt --all -- --check → clean
- cargo publish --dry-run -p mxaccess-codec → packages cleanly

Excluded from history (see .gitignore):
- **/bin, **/obj, **/target — build artifacts
- analysis/ghidra/projects/ — Ghidra working state (regenerable)
- analysis/ghidra/input/ — AVEVA proprietary DLLs (vendor IP)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-05 06:21:00 -04:00

374 lines
35 KiB
Plaintext
Raw Blame History

INFO Using log config file: jar:file:/C:/Users/dohertj2/Desktop/focas/tools/ghidra_12.0.4_PUBLIC/Ghidra/Framework/Generic/lib/Generic.jar!/generic.log4j.xml (LoggingInitialization)
INFO Using log file: C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\application.log (LoggingInitialization)
INFO Loading user preferences: C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\preferences (Preferences)
INFO Searching for classes... (ClassSearcher)
INFO Class search complete (4882 ms) (ClassSearcher)
INFO Initializing SSL Context (DefaultSSLContextInitializer)
INFO Initializing Random Number Generator... (SecureRandomFactory)
INFO Random Number Generator initialization complete: SHA1PRNG (SecureRandomFactory)
INFO Trust manager disabled, cacerts have not been set (DefaultTrustManagerFactory)
INFO Headless startup complete (13776 ms) (AnalyzeHeadless)
INFO Class searcher loaded 58 extension points (18 false positives) (ClassSearcher)
INFO HEADLESS Script Paths:
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\Base\ghidra_scripts
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\FunctionID\ghidra_scripts
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\SwiftDemangler\ghidra_scripts
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\WildcardAssembler\ghidra_scripts
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\MicrosoftCodeAnalyzer\ghidra_scripts
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\FileFormats\ghidra_scripts
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\BytePatterns\ghidra_scripts
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Processors\DATA\ghidra_scripts
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Debug\Debugger\ghidra_scripts
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\PyGhidra\ghidra_scripts
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Debug\Debugger-rmi-trace\ghidra_scripts
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Processors\8051\ghidra_scripts
C:\Users\dohertj2\Desktop\mxaccess\analysis\ghidra\scripts
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\PDB\ghidra_scripts
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\BSim\ghidra_scripts
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\Decompiler\ghidra_scripts
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\SystemEmulation\ghidra_scripts
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Processors\Atmel\ghidra_scripts
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\DecompilerDependent\ghidra_scripts
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Processors\PIC\ghidra_scripts
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\GnuDemangler\ghidra_scripts
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\Jython\ghidra_scripts
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\VersionTracking\ghidra_scripts
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Processors\JVM\ghidra_scripts (HeadlessAnalyzer)
INFO HEADLESS: execution starts (HeadlessAnalyzer)
INFO Opening existing project: C:\Users\dohertj2\Desktop\mxaccess\.\analysis\ghidra\projects\mxnmx (HeadlessAnalyzer)
INFO Opening project: C:\Users\dohertj2\Desktop\mxaccess\.\analysis\ghidra\projects\mxnmx (HeadlessProject)
INFO REPORT: Processing input files: (HeadlessAnalyzer)
INFO project: C:\Users\dohertj2\Desktop\mxaccess\.\analysis\ghidra\projects\mxnmx (HeadlessAnalyzer)
INFO IMPORTING: file:///C:/Users/dohertj2/Desktop/mxaccess/analysis/ghidra/input/aaMxDataConsumer.dll (HeadlessAnalyzer)
INFO Using Loader: Portable Executable (PE) (ProgramLoader)
INFO Using Language/Compiler: x86:LE:32:default:windows (ProgramLoader)
INFO Using Library Search Path: [., C:\Windows\SysWOW64, C:\Program Files\Eclipse Adoptium\jdk-21.0.10.7-hotspot\bin, C:\Windows\Sun\Java\bin, C:\Windows\system32, C:\Windows, C:\Program Files\WindowsApps\Microsoft.PowerShell_7.6.1.0_x64__8wekyb3d8bbwe, C:\Users\dohertj2\.codex\tmp\arg0\codex-arg0eaNSL1, C:\TwinCAT\Common64, C:\TwinCAT\Common32, C:\Program Files (x86)\Wonderware\OI-Server\CommonFiles\bin\, C:\Program Files (x86)\Common Files\ArchestrA\, C:\Program Files\OpenSSH\, C:\Windows\System32\Wbem, C:\Windows\System32\WindowsPowerShell\v1.0\, C:\Windows\System32\OpenSSH\, C:\Program Files\dotnet\, C:\Program Files\Git\cmd, C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\130\Tools\Binn\, C:\Program Files (x86)\Microsoft SQL Server\140\Tools\Binn\, C:\Program Files\Microsoft SQL Server\140\Tools\Binn\, C:\Program Files\Microsoft SQL Server\140\DTS\Binn\, C:\Program Files (x86)\Common Files\ArchestrA\Licensing Framework\License API2, C:\Program Files\nodejs\, C:\Program Files\Docker\Docker\resources\bin, C:\Users\dohertj2\AppData\Local\Programs\Python\Python312\Scripts\, C:\Users\dohertj2\AppData\Local\Programs\Python\Python312\, C:\Users\dohertj2\AppData\Local\Programs\Python\Launcher\, C:\Users\dohertj2\AppData\Local\Microsoft\WindowsApps, C:\Users\dohertj2\.dotnet\tools, C:\Users\dohertj2\.local\bin, C:\Users\dohertj2\AppData\Local\JetBrains\Toolbox\scripts, C:\Users\dohertj2\AppData\Local\Microsoft\WinGet\Links, C:\Users\dohertj2\AppData\Roaming\npm, C:\Users\dohertj2\AppData\Local\Microsoft\WinGet\Packages\BurntSushi.ripgrep.MSVC_Microsoft.Winget.Source_8wekyb3d8bbwe\ripgrep-15.1.0-x86_64-pc-windows-msvc, C:\Users\dohertj2\AppData\Local\Microsoft\WinGet\Packages\zig.zig_Microsoft.Winget.Source_8wekyb3d8bbwe\zig-x86_64-windows-0.16.0, C:\Users\dohertj2\AppData\Local\OpenAI\Codex\bin, C:\Program Files\WindowsApps\OpenAI.Codex_26.422.2437.0_x64__2p2nqsd0c76g0\app\resources] (ProgramLoader)
WARN Error processing function "_splitpath_s" (620): Duplicate parameter name (Status, Items, Items) (CliTableMethodDef)
WARN Error processing function "_wsplitpath_s" (651): Duplicate parameter name (Status, Items, Items) (CliTableMethodDef)
WARN Invalid FieldOrProp value in NamedArg #1: 0x3 (CliBlobCustomAttrib)
ERROR Cannot replace existing blob at address 100a1e54 with CustomAttrib_18748 because they have different sizes (Old: 6, New: 9). (CliStreamBlob)
WARN Invalid FieldOrProp value in NamedArg #1: 0x3 (CliBlobCustomAttrib)
ERROR Cannot replace existing blob at address 100a1e54 with CustomAttrib_18748 because they have different sizes (Old: 6, New: 9). (CliStreamBlob)
WARN Invalid or missing function at 78a7afe0 (ExportDataDirectory)
WARN Invalid or missing function at 10046008 (ExportDataDirectory)
INFO TLS callbacks at 68f051c0 (TLSDirectory)
INFO TLS callbacks at 1000701c (TLSDirectory)
WARN Invalid or missing function at 10085b88 (ExportDataDirectory)
WARN Invalid or missing function at 69e9f8f8 (ExportDataDirectory)
INFO Additional info:
Loading file:///C:/Users/dohertj2/Desktop/mxaccess/analysis/ghidra/input/aaMxDataConsumer.dll?MD5=d642bf4c3a452cd8aea39221bb643eda...
[aaMxDataConsumer.dll]: failed to create TerminatedCString at 100e03b4: Failed to resolve data length for TerminatedCString
------------------------------------------------
Searching 36 paths for library ADVAPI32.DLL...
Loading file:///C:/Windows/SysWOW64/advapi32.dll?MD5=950c6d7d9ee5088375a96ae8436eaa70...
Using existing exports file: C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\advapi32.exports
Library not saved to project.
------------------------------------------------
Searching 36 paths for library ATL100.DLL...
Loading file:///C:/Windows/SysWOW64/atl100.dll?MD5=c85670ab64068f8080998aeba6c5019c...
Using existing exports file: C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\atl100.exports
Library not saved to project.
------------------------------------------------
Searching 36 paths for library DBGHELP.DLL...
Loading file:///C:/Windows/SysWOW64/dbghelp.dll?MD5=7a365edaa1b5c3a3fcdca41ee8fc95e2...
Using existing exports file: C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\dbghelp.exports
Library not saved to project.
------------------------------------------------
Searching 36 paths for library KERNEL32.DLL...
Loading file:///C:/Windows/SysWOW64/kernel32.dll?MD5=0ce1f5f3d23f51b9ecfd453e34ca0af7...
Using existing exports file: C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\kernel32.exports
Library not saved to project.
------------------------------------------------
Searching 36 paths for library MSCOREE.DLL...
Loading file:///C:/Windows/SysWOW64/mscoree.dll?MD5=3398e4051e8f4e2ff3cf0f365fa9238d...
Created exports file: C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\mscoree.exports
Library not saved to project.
------------------------------------------------
Searching 36 paths for library MSVCP100.DLL...
Loading file:///C:/Windows/SysWOW64/msvcp100.dll?MD5=bc83108b18756547013ed443b8cdb31b...
Using existing exports file: C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\msvcp100.exports
Library not saved to project.
------------------------------------------------
Searching 36 paths for library MSVCR100.DLL...
Loading file:///C:/Windows/SysWOW64/msvcr100.dll?MD5=0e37fbfa79d349d672456923ec5fbbe3...
Using existing exports file: C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\msvcr100.exports
Library not saved to project.
------------------------------------------------
Searching 36 paths for library OLE32.DLL...
Loading file:///C:/Windows/SysWOW64/ole32.dll?MD5=0c99de30cc1bc2997ebf5b7ca4b54fe8...
[ole32.dll]: failed to create WEVTResource at 68fc5218: Failed to resolve data length for WEVTResource
Using existing exports file: C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\ole32.exports
Library not saved to project.
------------------------------------------------
Searching 36 paths for library OLEAUT32.DLL...
Loading file:///C:/Windows/SysWOW64/oleaut32.dll?MD5=96b3f5be7d92458fb909620f918a1f63...
Using existing exports file: C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\oleaut32.exports
Library not saved to project.
------------------------------------------------
Searching 36 paths for library SHLWAPI.DLL...
Loading file:///C:/Windows/SysWOW64/shlwapi.dll?MD5=7955116f6d0ddddab0dab96deaea0b3d...
Using existing exports file: C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\shlwapi.exports
Library not saved to project.
------------------------------------------------
Searching 36 paths for library USER32.DLL...
Loading file:///C:/Windows/SysWOW64/user32.dll?MD5=0927ed96558e5b2392df6cf7582f2655...
[user32.dll]: failed to create WEVTResource at 69eb6a70: Failed to resolve data length for WEVTResource
Using existing exports file: C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\user32.exports
Library not saved to project.
------------------------------------------------
Applying C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\kernel32.exports
Applying C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\user32.exports
Applying C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\advapi32.exports
Applying C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\ole32.exports
Applying C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\oleaut32.exports
Applying C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\atl100.exports
Applying C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\shlwapi.exports
Applying C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\msvcp100.exports
Applying C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\dbghelp.exports
Applying C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\msvcr100.exports
Applying C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\mscoree.exports
Linking the External Programs of 'aaMxDataConsumer.dll' to imported libraries...
[KERNEL32.DLL] -> not found in project
[USER32.DLL] -> not found in project
[ADVAPI32.DLL] -> not found in project
[OLE32.DLL] -> not found in project
[OLEAUT32.DLL] -> not found in project
[ATL100.DLL] -> not found in project
[SHLWAPI.DLL] -> not found in project
[MSVCP100.DLL] -> not found in project
[DBGHELP.DLL] -> not found in project
[MSVCR100.DLL] -> not found in project
[MSCOREE.DLL] -> not found in project
------------------------------------------------
(ProgramLoader)
INFO IMPORTING: Loaded 0 additional files (HeadlessAnalyzer)
INFO ANALYZING all memory and code: file:///C:/Users/dohertj2/Desktop/mxaccess/analysis/ghidra/input/aaMxDataConsumer.dll (HeadlessAnalyzer)
WARN Ignoring leading '_' chars on no-return name '___raise_securityfailure' specified in file: C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\Base\data\PEFunctionsThatDoNotReturn (NoReturnFunctionAnalyzer)
WARN Ignoring leading '_' chars on no-return name '___report_rangecheckfailure' specified in file: C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\Base\data\PEFunctionsThatDoNotReturn (NoReturnFunctionAnalyzer)
INFO Skipping PDB processing: failed to locate PDB file in configured locations (PdbUniversalAnalyzer)
INFO Use a script to set the PDB file location. I.e.,
PdbAnalyzer.setPdbFileOption(currentProgram, new File("/path/to/pdb/file.pdb")); or
PdbUniversalAnalyzer.setPdbFileOption(currentProgram, new File("/path/to/pdb/file.pdb"));
Or set the symbol server search configuration using: PdbPlugin.saveSymbolServerServiceConfig(...);
This must be done using a pre-script (prior to analysis). (PdbUniversalAnalyzer)
INFO Packed database cache: C:\Users\dohertj2\AppData\Local\ghidra\packed-db-cache (PackedDatabaseCache)
INFO Unprocessed TypeDescriptor: long (TypeDescriptorModel)
INFO Unprocessed TypeDescriptor: long (TypeDescriptorModel)
INFO Unprocessed TypeDescriptor: long (TypeDescriptorModel)
INFO Unprocessed TypeDescriptor: long (TypeDescriptorModel)
INFO Unprocessed TypeDescriptor: long (TypeDescriptorModel)
INFO Unprocessed TypeDescriptor: long (TypeDescriptorModel)
INFO Unprocessed TypeDescriptor: long (TypeDescriptorModel)
INFO Unprocessed TypeDescriptor: long (TypeDescriptorModel)
INFO Applied data type archive: windows_vs12_32 (ApplyDataArchiveAnalyzer)
WARN Decompiling 1000ca14, pcode error at 1000caaa: Unable to resolve constructor at 1000caaa (DecompileCallback)
WARN Decompiling 10007014, pcode error at 100070b3: Unable to resolve constructor at 100070b3 (DecompileCallback)
WARN Decompiling 10007014, pcode error at 100070b3: Unable to resolve constructor at 100070b3 (DecompileCallback)
WARN Decompiling 10001224, pcode error at 1000122a: Unable to resolve constructor at 1000122a (DecompileCallback)
WARN Decompiling 10002c24, pcode error at 10002c2b: Unable to resolve constructor at 10002c2b (DecompileCallback)
WARN Decompiling 10004a34, pcode error at 10004b25: Unable to resolve constructor at 10004b25 (DecompileCallback)
WARN Decompiling 10005854, pcode error at 10005856: Unable to resolve constructor at 10005856 (DecompileCallback)
WARN Decompiling 10052a48, pcode error at 382b3b41: Could not follow disassembly flow into non-existing memory at 382b3b41 (DecompileCallback)
WARN Decompiling 10001c74, pcode error at 10001c85: Unable to resolve constructor at 10001c85 (DecompileCallback)
WARN Decompiling 10004c24, pcode error at 10004edd: Unable to resolve constructor at 10004edd (DecompileCallback)
WARN Decompiling 10004c24, pcode error at 10004f42: Unable to resolve constructor at 10004f42 (DecompileCallback)
WARN Decompiling 10001c74, pcode error at 10001c85: Unable to resolve constructor at 10001c85 (DecompileCallback)
WARN Decompiling 10011064, pcode error at 1001143c: Unable to resolve constructor at 1001143c (DecompileCallback)
WARN Decompiling 1000dc84, pcode error at 1000dd65: Unable to resolve constructor at 1000dd65 (DecompileCallback)
WARN Decompiling 100044a4, pcode error at 100044ae: Unable to resolve constructor at 100044ae (DecompileCallback)
WARN Decompiling 10052aa4, pcode error at 1de334df: Could not follow disassembly flow into non-existing memory at 1de334df (DecompileCallback)
WARN Decompiling 100520d8, pcode error at 100520da: Unable to resolve constructor at 100520da (DecompileCallback)
WARN Decompiling 1000d4a4, pcode error at 1000d62f: Unable to resolve constructor at 1000d62f (DecompileCallback)
WARN Decompiling 100040d4, pcode error at de060000: Could not follow disassembly flow into non-existing memory at de060000 (DecompileCallback)
WARN Decompiling 1000e0d4, pcode error at 1000e16d: Unable to resolve constructor at 1000e16d (DecompileCallback)
WARN Decompiling 100126dc, pcode error at 29012b6e: Could not follow disassembly flow into non-existing memory at 29012b6e (DecompileCallback)
WARN Decompiling 1000e0d4, pcode error at 1000e16d: Unable to resolve constructor at 1000e16d (DecompileCallback)
WARN Decompiling 1001589c, pcode error at 100161fc: Unable to resolve constructor at 100161fc (DecompileCallback)
WARN Decompiling 100046c4, pcode error at 1000478a: Unable to resolve constructor at 1000478a (DecompileCallback)
WARN Decompiling 100046c4, pcode error at 100047f2: Unable to resolve constructor at 100047f2 (DecompileCallback)
WARN Decompiling 100146ec, pcode error at 1001472b: Unable to resolve constructor at 1001472b (DecompileCallback)
WARN Decompiling 100064e4, pcode error at 10006523: Unable to resolve constructor at 10006523 (DecompileCallback)
WARN Decompiling 1000f314, pcode error at 1000f443: Unable to resolve constructor at 1000f443 (DecompileCallback)
WARN Decompiling 10011a64, pcode error at 29012b6e: Could not follow disassembly flow into non-existing memory at 29012b6e (DecompileCallback)
WARN Decompiling 1000f314, pcode error at 1000f443: Unable to resolve constructor at 1000f443 (DecompileCallback)
WARN Decompiling 1000e704, pcode error at 1000e7c4: Unable to resolve constructor at 1000e7c4 (DecompileCallback)
WARN Decompiling 10013ce0, pcode error at 10014217: Unable to resolve constructor at 10014217 (DecompileCallback)
WARN Decompiling 10013ce0, pcode error at 1001472b: Unable to resolve constructor at 1001472b (DecompileCallback)
WARN Decompiling 10006b24, pcode error at 10006b99: Unable to resolve constructor at 10006b99 (DecompileCallback)
WARN Decompiling 10006b24, pcode error at 10006b99: Unable to resolve constructor at 10006b99 (DecompileCallback)
WARN Decompiling 1000b35c, pcode error at 1000b585: Unable to resolve constructor at 1000b585 (DecompileCallback)
WARN Decompiling 1000cd50, pcode error at 1000cdcd: Unable to resolve constructor at 1000cdcd (DecompileCallback)
WARN Decompiling 1000b54c, pcode error at 1000b585: Unable to resolve constructor at 1000b585 (DecompileCallback)
WARN Decompiling 1000af7c, pcode error at 1000b585: Unable to resolve constructor at 1000b585 (DecompileCallback)
WARN Decompiling 10006374, pcode error at 100063e7: Unable to resolve constructor at 100063e7 (DecompileCallback)
WARN Decompiling 10011f54, pcode error at 29012b6e: Could not follow disassembly flow into non-existing memory at 29012b6e (DecompileCallback)
WARN Decompiling 1000b16c, pcode error at 1000b585: Unable to resolve constructor at 1000b585 (DecompileCallback)
WARN Decompiling 10014f5c, pcode error at 100161fc: Unable to resolve constructor at 100161fc (DecompileCallback)
WARN Decompiling 1000ef94, pcode error at 1000f15e: Unable to resolve constructor at 1000f15e (DecompileCallback)
WARN Decompiling 1000ab9c, pcode error at 1000b585: Unable to resolve constructor at 1000b585 (DecompileCallback)
WARN Decompiling 10015d90, pcode error at 100161fc: Unable to resolve constructor at 100161fc (DecompileCallback)
WARN Decompiling 1000af7c, pcode error at 1000b585: Unable to resolve constructor at 1000b585 (DecompileCallback)
WARN Decompiling 1001156c, pcode error at 29012b6e: Could not follow disassembly flow into non-existing memory at 29012b6e (DecompileCallback)
WARN Decompiling 1000ad8c, pcode error at 1000b585: Unable to resolve constructor at 1000b585 (DecompileCallback)
WARN Decompiling 100041a4, pcode error at 100041ba: Unable to resolve constructor at 100041ba (DecompileCallback)
WARN Decompiling 10013ce0, pcode error at 10014217: Unable to resolve constructor at 10014217 (DecompileCallback)
WARN Decompiling 100137dc, pcode error at 1001381b: Unable to resolve constructor at 1001381b (DecompileCallback)
WARN Decompiling 100141d8, pcode error at 10014217: Unable to resolve constructor at 10014217 (DecompileCallback)
WARN Decompiling 10013ce0, pcode error at 1001472b: Unable to resolve constructor at 1001472b (DecompileCallback)
WARN Decompiling 100153ac, pcode error at 100161fc: Unable to resolve constructor at 100161fc (DecompileCallback)
WARN Decompiling 100141d8, pcode error at 1001472b: Unable to resolve constructor at 1001472b (DecompileCallback)
WARN Decompiling 100065d4, pcode error at 100065fe: Unable to resolve constructor at 100065fe (DecompileCallback)
WARN Decompiling 100055d4, pcode error at 10005616: Unable to resolve constructor at 10005616 (DecompileCallback)
WARN Decompiling 100069d4, pcode error at 10006a2b: Unable to resolve constructor at 10006a2b (DecompileCallback)
WARN Decompiling 1000ab9c, pcode error at 1000b585: Unable to resolve constructor at 1000b585 (DecompileCallback)
WARN Decompiling 100021f4, pcode error at 100021fa: Unable to resolve constructor at 100021fa (DecompileCallback)
WARN Decompiling 1000f9f4, pcode error at 1000fd89: Unable to resolve constructor at 1000fd89 (DecompileCallback)
WARN Decompiling 1000ad8c, pcode error at 1000b585: Unable to resolve constructor at 1000b585 (DecompileCallback)
WARN Decompiling 1000e3e4, pcode error at 1000e4b3: Unable to resolve constructor at 1000e4b3 (DecompileCallback)
WARN Decompiling 1000e3e4, pcode error at 1000e4b3: Unable to resolve constructor at 1000e4b3 (DecompileCallback)
INFO Applied data type archive: windows_vs12_32 (ApplyDataArchiveAnalyzer)
WARN Decompiling 10005854, pcode error at 10005856: Unable to resolve constructor at 10005856 (DecompileCallback)
WARN Decompiling 1001589c, pcode error at 100161fc: Unable to resolve constructor at 100161fc (DecompileCallback)
WARN Decompiling 100069d4, pcode error at 10006a2b: Unable to resolve constructor at 10006a2b (DecompileCallback)
WARN Decompiling 1000ca14, pcode error at 1000caaa: Unable to resolve constructor at 1000caaa (DecompileCallback)
WARN Decompiling 1000f9f4, pcode error at 1000fd89: Unable to resolve constructor at 1000fd89 (DecompileCallback)
WARN Decompiling 10004a34, pcode error at 10004b25: Unable to resolve constructor at 10004b25 (DecompileCallback)
WARN Decompiling 10052a20, pcode error at 382b3b41: Could not follow disassembly flow into non-existing memory at 382b3b41 (DecompileCallback)
WARN Decompiling 10052a48, pcode error at 382b3b41: Could not follow disassembly flow into non-existing memory at 382b3b41 (DecompileCallback)
WARN Decompiling 10052aa4, pcode error at 1de334df: Could not follow disassembly flow into non-existing memory at 1de334df (DecompileCallback)
WARN Decompiling 1000a9c4, pcode error at 1000b585: Unable to resolve constructor at 1000b585 (DecompileCallback)
WARN Decompiling 10006b24, pcode error at 10006b99: Unable to resolve constructor at 10006b99 (DecompileCallback)
WARN Decompiling 10006b24, pcode error at 10006b99: Unable to resolve constructor at 10006b99 (DecompileCallback)
WARN Decompiling 10002b44, pcode error at 10002b46: Unable to resolve constructor at 10002b46 (DecompileCallback)
WARN Decompiling 1000cb74, pcode error at 1000cbc5: Unable to resolve constructor at 1000cbc5 (DecompileCallback)
WARN Decompiling 10011a64, pcode error at 29012b6e: Could not follow disassembly flow into non-existing memory at 29012b6e (DecompileCallback)
WARN Decompiling 10003bc4, pcode error at de060000: Could not follow disassembly flow into non-existing memory at de060000 (DecompileCallback)
WARN Decompiling 10003c10, pcode error at 10003c98: Unable to resolve constructor at 10003c98 (DecompileCallback)
WARN Decompiling 1000ab9c, pcode error at 1000b585: Unable to resolve constructor at 1000b585 (DecompileCallback)
WARN Decompiling 10002c24, pcode error at 10002c2b: Unable to resolve constructor at 10002c2b (DecompileCallback)
WARN Decompiling 10001c74, pcode error at 10001c85: Unable to resolve constructor at 10001c85 (DecompileCallback)
WARN Decompiling 10004c24, pcode error at 10004edd: Unable to resolve constructor at 10004edd (DecompileCallback)
WARN Decompiling 10004c24, pcode error at 10004f42: Unable to resolve constructor at 10004f42 (DecompileCallback)
WARN Decompiling 10001c74, pcode error at 10001c85: Unable to resolve constructor at 10001c85 (DecompileCallback)
WARN Decompiling 1000dc84, pcode error at 1000dd65: Unable to resolve constructor at 1000dd65 (DecompileCallback)
WARN Decompiling 10013ce0, pcode error at 10014217: Unable to resolve constructor at 10014217 (DecompileCallback)
WARN Decompiling 1000cd50, pcode error at 1000cdcd: Unable to resolve constructor at 1000cdcd (DecompileCallback)
WARN Decompiling 10013ce0, pcode error at 1001472b: Unable to resolve constructor at 1001472b (DecompileCallback)
WARN Decompiling 10015d90, pcode error at 100161fc: Unable to resolve constructor at 100161fc (DecompileCallback)
WARN Decompiling 10010db8, pcode error at 12060001: Could not follow disassembly flow into non-existing memory at 12060001 (DecompileCallback)
WARN Decompiling 1000ab9c, pcode error at 1000b585: Unable to resolve constructor at 1000b585 (DecompileCallback)
WARN Decompiling 1000ad8c, pcode error at 1000b585: Unable to resolve constructor at 1000b585 (DecompileCallback)
WARN Decompiling 10010db8, pcode error at 1001143c: Unable to resolve constructor at 1001143c (DecompileCallback)
WARN Decompiling 1000ad8c, pcode error at 1000b585: Unable to resolve constructor at 1000b585 (DecompileCallback)
WARN Decompiling 1000af7c, pcode error at 1000b585: Unable to resolve constructor at 1000b585 (DecompileCallback)
WARN Decompiling 1000ef94, pcode error at 1000f15e: Unable to resolve constructor at 1000f15e (DecompileCallback)
WARN Decompiling 10011f54, pcode error at 29012b6e: Could not follow disassembly flow into non-existing memory at 29012b6e (DecompileCallback)
WARN Decompiling 10013ce0, pcode error at 10014217: Unable to resolve constructor at 10014217 (DecompileCallback)
WARN Decompiling 10013ce0, pcode error at 1001472b: Unable to resolve constructor at 1001472b (DecompileCallback)
WARN Decompiling 10014f5c, pcode error at 100161fc: Unable to resolve constructor at 100161fc (DecompileCallback)
WARN Decompiling 1000af7c, pcode error at 1000b585: Unable to resolve constructor at 1000b585 (DecompileCallback)
WARN Decompiling 10007014, pcode error at 100070b3: Unable to resolve constructor at 100070b3 (DecompileCallback)
WARN Decompiling 10007014, pcode error at 100070b3: Unable to resolve constructor at 100070b3 (DecompileCallback)
WARN Decompiling 10011064, pcode error at 1001143c: Unable to resolve constructor at 1001143c (DecompileCallback)
WARN Decompiling 100520d8, pcode error at 100520da: Unable to resolve constructor at 100520da (DecompileCallback)
WARN Decompiling 100040d4, pcode error at de060000: Could not follow disassembly flow into non-existing memory at de060000 (DecompileCallback)
WARN Decompiling 1000e0d4, pcode error at 1000e16d: Unable to resolve constructor at 1000e16d (DecompileCallback)
WARN Decompiling 100520fc, pcode error at 10052125: Unable to resolve constructor at 10052125 (DecompileCallback)
WARN Decompiling 1000e0d4, pcode error at 1000e16d: Unable to resolve constructor at 1000e16d (DecompileCallback)
WARN Decompiling 10016130, pcode error at 100161fc: Unable to resolve constructor at 100161fc (DecompileCallback)
WARN Decompiling 10052154, pcode error at 1005217d: Unable to resolve constructor at 1005217d (DecompileCallback)
WARN Decompiling 10052154, pcode error at 100521a9: Unable to resolve constructor at 100521a9 (DecompileCallback)
WARN Decompiling 100041a4, pcode error at 100041ba: Unable to resolve constructor at 100041ba (DecompileCallback)
WARN Decompiling 100141d8, pcode error at 10014217: Unable to resolve constructor at 10014217 (DecompileCallback)
WARN Decompiling 1000b16c, pcode error at 1000b585: Unable to resolve constructor at 1000b585 (DecompileCallback)
WARN Decompiling 100021f4, pcode error at 100021fa: Unable to resolve constructor at 100021fa (DecompileCallback)
WARN Decompiling 100141d8, pcode error at 1001472b: Unable to resolve constructor at 1001472b (DecompileCallback)
WARN Decompiling 10001224, pcode error at 1000122a: Unable to resolve constructor at 1000122a (DecompileCallback)
WARN Decompiling 10003304, pcode error at 1000330c: Unable to resolve constructor at 1000330c (DecompileCallback)
WARN Decompiling 1000f314, pcode error at 1000f443: Unable to resolve constructor at 1000f443 (DecompileCallback)
WARN Decompiling 1000f314, pcode error at 1000f443: Unable to resolve constructor at 1000f443 (DecompileCallback)
WARN Decompiling 1000b35c, pcode error at 1000b585: Unable to resolve constructor at 1000b585 (DecompileCallback)
WARN Decompiling 10006374, pcode error at 100063e7: Unable to resolve constructor at 100063e7 (DecompileCallback)
WARN Decompiling 1000e3e4, pcode error at 1000e4b3: Unable to resolve constructor at 1000e4b3 (DecompileCallback)
WARN Decompiling 1000e3e4, pcode error at 1000e4b3: Unable to resolve constructor at 1000e4b3 (DecompileCallback)
WARN Decompiling 1000c430, pcode error at 2900c581: Could not follow disassembly flow into non-existing memory at 2900c581 (DecompileCallback)
WARN Decompiling 1000c430, pcode error at 1000c5cc: Unable to resolve constructor at 1000c5cc (DecompileCallback)
WARN Decompiling 100153ac, pcode error at 100161fc: Unable to resolve constructor at 100161fc (DecompileCallback)
WARN Decompiling 10004484, pcode error at 10004486: Unable to resolve constructor at 10004486 (DecompileCallback)
WARN Decompiling 100044a4, pcode error at 100044ae: Unable to resolve constructor at 100044ae (DecompileCallback)
WARN Decompiling 1000d4a4, pcode error at 1000d62f: Unable to resolve constructor at 1000d62f (DecompileCallback)
WARN Decompiling 100064e4, pcode error at 10006523: Unable to resolve constructor at 10006523 (DecompileCallback)
WARN Decompiling 1000b54c, pcode error at 1000b585: Unable to resolve constructor at 1000b585 (DecompileCallback)
WARN Decompiling 1000c59c, pcode error at 1000c5cc: Unable to resolve constructor at 1000c5cc (DecompileCallback)
WARN Decompiling 100065d4, pcode error at 100065fe: Unable to resolve constructor at 100065fe (DecompileCallback)
WARN Decompiling 100055d4, pcode error at 10005616: Unable to resolve constructor at 10005616 (DecompileCallback)
WARN Decompiling 100046c4, pcode error at 1000478a: Unable to resolve constructor at 1000478a (DecompileCallback)
WARN Decompiling 100046c4, pcode error at 100047f2: Unable to resolve constructor at 100047f2 (DecompileCallback)
WARN Decompiling 100146ec, pcode error at 1001472b: Unable to resolve constructor at 1001472b (DecompileCallback)
WARN Decompiling 1000e704, pcode error at 1000e7c4: Unable to resolve constructor at 1000e7c4 (DecompileCallback)
WARN Decompiling 100126dc, pcode error at 29012b6e: Could not follow disassembly flow into non-existing memory at 29012b6e (DecompileCallback)
WARN Decompiling 100137dc, pcode error at 1001381b: Unable to resolve constructor at 1001381b (DecompileCallback)
WARN Decompiling 1001156c, pcode error at 29012b6e: Could not follow disassembly flow into non-existing memory at 29012b6e (DecompileCallback)
INFO -----------------------------------------------------
ASCII Strings 2.170 secs
Apply Data Archives 0.910 secs
Call Convention ID 20.266 secs
Call-Fixup Installer 0.467 secs
Create Address Tables 0.700 secs
Create Address Tables - One Time 0.225 secs
Create Function 2.003 secs
Data Reference 0.793 secs
Decompiler Parameter ID 58.838 secs
Decompiler Switch Analysis 24.270 secs
Demangler Microsoft 0.954 secs
Disassemble 6.617 secs
Disassemble Entry Points 0.505 secs
Embedded Media 0.066 secs
External Entry References 0.001 secs
Function ID 5.120 secs
Function Start Pre Search 0.091 secs
Function Start Search 5.764 secs
Function Start Search After Code 1.494 secs
Function Start Search After Data 1.284 secs
Non-Returning Functions - Discovered 1.016 secs
Non-Returning Functions - Known 0.032 secs
PDB Universal 0.064 secs
Reference 1.241 secs
Scalar Operand References 3.180 secs
Shared Return Calls 1.330 secs
Stack 16.321 secs
Subroutine References 0.831 secs
Subroutine References - One Time 0.034 secs
Windows x86 PE Exception Handling 14.661 secs
Windows x86 PE RTTI Analyzer 3.322 secs
Windows x86 Thread Environment Block (TEB) Analyzer 0.065 secs
WindowsResourceReference 1.212 secs
X86 Function Callee Purge 0.713 secs
x86 Constant Reference Analyzer 17.568 secs
-----------------------------------------------------
Total Time 194 secs
-----------------------------------------------------
(AutoAnalysisManager)
INFO REPORT: Analysis succeeded for file: file:///C:/Users/dohertj2/Desktop/mxaccess/analysis/ghidra/input/aaMxDataConsumer.dll (HeadlessAnalyzer)
INFO REPORT: Execute script: MxNmxExport.java '.\analysis\ghidra\exports' (HeadlessAnalyzer)
INFO SCRIPT: C:\Users\dohertj2\Desktop\mxaccess\analysis\ghidra\scripts\MxNmxExport.java (HeadlessAnalyzer)
INFO MxNmxExport.java> Wrote MX/NMX Ghidra export for aaMxDataConsumer.dll to C:\Users\dohertj2\Desktop\mxaccess\.\analysis\ghidra\exports (GhidraScript)
INFO ANALYZING changes made by post scripts: file:///C:/Users/dohertj2/Desktop/mxaccess/analysis/ghidra/input/aaMxDataConsumer.dll (HeadlessAnalyzer)
INFO REPORT: Post-analysis succeeded for file: file:///C:/Users/dohertj2/Desktop/mxaccess/analysis/ghidra/input/aaMxDataConsumer.dll (HeadlessAnalyzer)
INFO /aaMxDataConsumer.dll: file created (dohertj2) (LocalFileSystem)
INFO REPORT: Save succeeded for: /aaMxDataConsumer.dll (mxnmx:/aaMxDataConsumer.dll) (HeadlessAnalyzer)
INFO REPORT: Import succeeded (HeadlessAnalyzer)
Reference in New Issue View Git Blame Copy Permalink