fe2a6db786
rust / build / test / clippy / fmt (push) Has been cancelled
Layout:
- src/ .NET 10 x64 reference: MxNativeCodec, MxNativeClient,
MxAsbClient, probes, tests, harnesses. Executable spec.
- design/ Architectural plan for the Rust port (M0–M6), error
model, protocol invariants, risks (R1–R16), adversarial
review log (review.md).
- rust/ Rust workspace. M0 skeleton + M1 codec parity.
mxaccess-codec: 215 unit tests + 2 cross-implementation
parity tests (byte-identical against .NET reference).
Other crates are M0 stubs awaiting M2+.
- captures/ Frida + netsh + pcap evidence per CLAUDE.md
("captures are evidence, not throwaway logs").
- analysis/ Decompiled C# (frida/proxy/decompiled-*),
Ghidra exports for native DLLs (`exports/` only —
working state at `projects/` and AVEVA's input
binaries at `input/` are gitignored).
- docs/ Reverse-engineering reference docs.
- tools/ Setup-LiveProbeEnv.ps1 (Infisical credential fetcher),
Compute-Crc.ps1 (.NET parity helper).
- .github/workflows/ Rust CI: fmt + build + test + clippy on Windows.
- LICENSE MIT (Joseph Doherty, 2026).
Verified:
- cargo test --workspace → 217 passed (215 unit + 2 .NET parity), 0 failed
- cargo clippy --workspace -- -D warnings → clean
- cargo fmt --all -- --check → clean
- cargo publish --dry-run -p mxaccess-codec → packages cleanly
Excluded from history (see .gitignore):
- **/bin, **/obj, **/target — build artifacts
- analysis/ghidra/projects/ — Ghidra working state (regenerable)
- analysis/ghidra/input/ — AVEVA proprietary DLLs (vendor IP)
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
216 lines
19 KiB
Plaintext
216 lines
19 KiB
Plaintext
2026-04-25 02:03:36 INFO (LoggingInitialization) Using log config file: jar:file:/C:/Users/dohertj2/Desktop/focas/tools/ghidra_12.0.4_PUBLIC/Ghidra/Framework/Generic/lib/Generic.jar!/generic.log4j.xml
|
|
2026-04-25 02:03:36 INFO (LoggingInitialization) Using log file: C:\Users\dohertj2\Desktop\mxaccess\analysis\ghidra\LmxProxy.headless.log
|
|
2026-04-25 02:03:36 INFO (Preferences) Loading user preferences: C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\preferences
|
|
2026-04-25 02:03:36 INFO (ClassSearcher) Searching for classes...
|
|
2026-04-25 02:03:41 INFO (ClassSearcher) Class search complete (4666 ms)
|
|
2026-04-25 02:03:41 INFO (DefaultSSLContextInitializer) Initializing SSL Context
|
|
2026-04-25 02:03:42 INFO (SecureRandomFactory) Initializing Random Number Generator...
|
|
2026-04-25 02:03:42 INFO (SecureRandomFactory) Random Number Generator initialization complete: SHA1PRNG
|
|
2026-04-25 02:03:42 INFO (DefaultTrustManagerFactory) Trust manager disabled, cacerts have not been set
|
|
2026-04-25 02:03:43 INFO (AnalyzeHeadless) Headless startup complete (12142 ms)
|
|
2026-04-25 02:03:43 INFO (ClassSearcher) Class searcher loaded 58 extension points (18 false positives)
|
|
2026-04-25 02:03:45 INFO (HeadlessAnalyzer) HEADLESS Script Paths:
|
|
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\Base\ghidra_scripts
|
|
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\FunctionID\ghidra_scripts
|
|
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\SwiftDemangler\ghidra_scripts
|
|
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\WildcardAssembler\ghidra_scripts
|
|
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\MicrosoftCodeAnalyzer\ghidra_scripts
|
|
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\FileFormats\ghidra_scripts
|
|
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\BytePatterns\ghidra_scripts
|
|
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Processors\DATA\ghidra_scripts
|
|
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Debug\Debugger\ghidra_scripts
|
|
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\PyGhidra\ghidra_scripts
|
|
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Debug\Debugger-rmi-trace\ghidra_scripts
|
|
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Processors\8051\ghidra_scripts
|
|
C:\Users\dohertj2\Desktop\mxaccess\analysis\ghidra\scripts
|
|
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\PDB\ghidra_scripts
|
|
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\BSim\ghidra_scripts
|
|
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\Decompiler\ghidra_scripts
|
|
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\SystemEmulation\ghidra_scripts
|
|
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Processors\Atmel\ghidra_scripts
|
|
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\DecompilerDependent\ghidra_scripts
|
|
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Processors\PIC\ghidra_scripts
|
|
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\GnuDemangler\ghidra_scripts
|
|
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\Jython\ghidra_scripts
|
|
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\VersionTracking\ghidra_scripts
|
|
C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Processors\JVM\ghidra_scripts
|
|
2026-04-25 02:03:45 INFO (HeadlessAnalyzer) HEADLESS: execution starts
|
|
2026-04-25 02:03:45 INFO (HeadlessAnalyzer) Creating project: C:\Users\dohertj2\Desktop\mxaccess\analysis\ghidra\projects\mxnmx
|
|
2026-04-25 02:03:45 INFO (DefaultProject) Creating project: C:\Users\dohertj2\Desktop\mxaccess\analysis\ghidra\projects\mxnmx
|
|
2026-04-25 02:03:45 INFO (HeadlessAnalyzer) REPORT: Processing input files:
|
|
2026-04-25 02:03:45 INFO (HeadlessAnalyzer) project: C:\Users\dohertj2\Desktop\mxaccess\analysis\ghidra\projects\mxnmx
|
|
2026-04-25 02:03:45 INFO (HeadlessAnalyzer) IMPORTING: file:///C:/Users/dohertj2/Desktop/mxaccess/analysis/ghidra/input/LmxProxy.dll
|
|
2026-04-25 02:03:54 INFO (ProgramLoader) Using Loader: Portable Executable (PE)
|
|
2026-04-25 02:03:54 INFO (ProgramLoader) Using Language/Compiler: x86:LE:32:default:windows
|
|
2026-04-25 02:03:54 INFO (ProgramLoader) Using Library Search Path: [., C:\Windows\SysWOW64, C:\Program Files\Eclipse Adoptium\jdk-21.0.10.7-hotspot\bin, C:\Windows\Sun\Java\bin, C:\Windows\system32, C:\Windows, C:\Program Files\WindowsApps\Microsoft.PowerShell_7.6.1.0_x64__8wekyb3d8bbwe, C:\Users\dohertj2\.codex\tmp\arg0\codex-arg0eaNSL1, C:\TwinCAT\Common64, C:\TwinCAT\Common32, C:\Program Files (x86)\Wonderware\OI-Server\CommonFiles\bin\, C:\Program Files (x86)\Common Files\ArchestrA\, C:\Program Files\OpenSSH\, C:\Windows\System32\Wbem, C:\Windows\System32\WindowsPowerShell\v1.0\, C:\Windows\System32\OpenSSH\, C:\Program Files\dotnet\, C:\Program Files\Git\cmd, C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\130\Tools\Binn\, C:\Program Files (x86)\Microsoft SQL Server\140\Tools\Binn\, C:\Program Files\Microsoft SQL Server\140\Tools\Binn\, C:\Program Files\Microsoft SQL Server\140\DTS\Binn\, C:\Program Files (x86)\Common Files\ArchestrA\Licensing Framework\License API2, C:\Program Files\nodejs\, C:\Program Files\Docker\Docker\resources\bin, C:\Users\dohertj2\AppData\Local\Programs\Python\Python312\Scripts\, C:\Users\dohertj2\AppData\Local\Programs\Python\Python312\, C:\Users\dohertj2\AppData\Local\Programs\Python\Launcher\, C:\Users\dohertj2\AppData\Local\Microsoft\WindowsApps, C:\Users\dohertj2\.dotnet\tools, C:\Users\dohertj2\.local\bin, C:\Users\dohertj2\AppData\Local\JetBrains\Toolbox\scripts, C:\Users\dohertj2\AppData\Local\Microsoft\WinGet\Links, C:\Users\dohertj2\AppData\Roaming\npm, C:\Users\dohertj2\AppData\Local\Microsoft\WinGet\Packages\BurntSushi.ripgrep.MSVC_Microsoft.Winget.Source_8wekyb3d8bbwe\ripgrep-15.1.0-x86_64-pc-windows-msvc, C:\Users\dohertj2\AppData\Local\Microsoft\WinGet\Packages\zig.zig_Microsoft.Winget.Source_8wekyb3d8bbwe\zig-x86_64-windows-0.16.0, C:\Users\dohertj2\AppData\Local\OpenAI\Codex\bin, C:\Program Files\WindowsApps\OpenAI.Codex_26.422.2437.0_x64__2p2nqsd0c76g0\app\resources]
|
|
2026-04-25 02:04:21 ERROR (CliStreamBlob) Cannot replace existing blob at address 10023015 with CustomAttrib_8117 because they have different sizes (Old: 6, New: 5).
|
|
2026-04-25 02:04:21 WARN (CliBlobCustomAttrib) Invalid FieldOrProp value in NamedArg #1: 0x8
|
|
2026-04-25 02:04:21 ERROR (CliStreamBlob) Cannot replace existing blob at address 1002305b with CustomAttrib_8187 because they have different sizes (Old: 6, New: 9).
|
|
2026-04-25 02:04:21 ERROR (CliStreamBlob) Cannot replace existing blob at address 10023083 with CustomAttrib_8227 because they have different sizes (Old: 78, New: 58).
|
|
2026-04-25 02:04:21 ERROR (CliStreamBlob) Cannot replace existing blob at address 10023015 with CustomAttrib_8117 because they have different sizes (Old: 6, New: 5).
|
|
2026-04-25 02:04:21 ERROR (CliStreamBlob) Cannot replace existing blob at address 10023083 with CustomAttrib_8227 because they have different sizes (Old: 78, New: 58).
|
|
2026-04-25 02:04:21 WARN (CliBlobCustomAttrib) Invalid FieldOrProp value in NamedArg #1: 0x8
|
|
2026-04-25 02:04:21 ERROR (CliStreamBlob) Cannot replace existing blob at address 1002305b with CustomAttrib_8187 because they have different sizes (Old: 6, New: 9).
|
|
2026-04-25 02:04:21 ERROR (CliStreamBlob) Cannot replace existing blob at address 10023015 with CustomAttrib_8117 because they have different sizes (Old: 6, New: 5).
|
|
2026-04-25 02:04:30 INFO (TLSDirectory) TLS callbacks at 68f051c0
|
|
2026-04-25 02:04:30 DEBUG (WEVTResourceDataType) Error processing Provider Element.
|
|
2026-04-25 02:04:34 INFO (TLSDirectory) TLS callbacks at 1000701c
|
|
2026-04-25 02:04:35 WARN (ExportDataDirectory) Invalid or missing function at 10085b88
|
|
2026-04-25 02:04:40 WARN (ExportDataDirectory) Invalid or missing function at 69e9f8f8
|
|
2026-04-25 02:04:40 DEBUG (WEVTResourceDataType) Error processing Provider Element.
|
|
2026-04-25 02:04:43 INFO (ProgramLoader) Additional info:
|
|
Loading file:///C:/Users/dohertj2/Desktop/mxaccess/analysis/ghidra/input/LmxProxy.dll?MD5=b3a6a8f46ce22a48a42c23b77fbf9449...
|
|
[LmxProxy.dll]: failed to create TerminatedCString at 10038210: Failed to resolve data length for TerminatedCString
|
|
------------------------------------------------
|
|
|
|
Searching 36 paths for library ADVAPI32.DLL...
|
|
Loading file:///C:/Windows/SysWOW64/advapi32.dll?MD5=950c6d7d9ee5088375a96ae8436eaa70...
|
|
Created exports file: C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\advapi32.exports
|
|
Library not saved to project.
|
|
------------------------------------------------
|
|
|
|
Searching 36 paths for library DBGHELP.DLL...
|
|
Loading file:///C:/Windows/SysWOW64/dbghelp.dll?MD5=7a365edaa1b5c3a3fcdca41ee8fc95e2...
|
|
Created exports file: C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\dbghelp.exports
|
|
Library not saved to project.
|
|
------------------------------------------------
|
|
|
|
Searching 36 paths for library KERNEL32.DLL...
|
|
Loading file:///C:/Windows/SysWOW64/kernel32.dll?MD5=0ce1f5f3d23f51b9ecfd453e34ca0af7...
|
|
Created exports file: C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\kernel32.exports
|
|
Library not saved to project.
|
|
------------------------------------------------
|
|
|
|
Searching 36 paths for library LICAPINATIVEWRAPPER.DLL...
|
|
Loading file:///C:/Program Files (x86)/Wonderware/OI-Server/CommonFiles/bin/LicAPINativeWrapper.dll?MD5=dd566b235e709da69c91e8175544321c...
|
|
Created exports file: C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\licapinativewrapper.exports
|
|
Library not saved to project.
|
|
------------------------------------------------
|
|
|
|
Searching 36 paths for library MSVCP100.DLL...
|
|
Loading file:///C:/Windows/SysWOW64/msvcp100.dll?MD5=bc83108b18756547013ed443b8cdb31b...
|
|
Created exports file: C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\msvcp100.exports
|
|
Library not saved to project.
|
|
------------------------------------------------
|
|
|
|
Searching 36 paths for library MSVCR100.DLL...
|
|
Loading file:///C:/Windows/SysWOW64/msvcr100.dll?MD5=0e37fbfa79d349d672456923ec5fbbe3...
|
|
Created exports file: C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\msvcr100.exports
|
|
Library not saved to project.
|
|
------------------------------------------------
|
|
|
|
Searching 36 paths for library OLE32.DLL...
|
|
Loading file:///C:/Windows/SysWOW64/ole32.dll?MD5=0c99de30cc1bc2997ebf5b7ca4b54fe8...
|
|
[ole32.dll]: failed to create WEVTResource at 68fc5218: Failed to resolve data length for WEVTResource
|
|
Created exports file: C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\ole32.exports
|
|
Library not saved to project.
|
|
------------------------------------------------
|
|
|
|
Searching 36 paths for library OLEAUT32.DLL...
|
|
Loading file:///C:/Windows/SysWOW64/oleaut32.dll?MD5=96b3f5be7d92458fb909620f918a1f63...
|
|
Created exports file: C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\oleaut32.exports
|
|
Library not saved to project.
|
|
------------------------------------------------
|
|
|
|
Searching 36 paths for library SHLWAPI.DLL...
|
|
Loading file:///C:/Windows/SysWOW64/shlwapi.dll?MD5=7955116f6d0ddddab0dab96deaea0b3d...
|
|
Created exports file: C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\shlwapi.exports
|
|
Library not saved to project.
|
|
------------------------------------------------
|
|
|
|
Searching 36 paths for library USER32.DLL...
|
|
Loading file:///C:/Windows/SysWOW64/user32.dll?MD5=0927ed96558e5b2392df6cf7582f2655...
|
|
[user32.dll]: failed to create WEVTResource at 69eb6a70: Failed to resolve data length for WEVTResource
|
|
Created exports file: C:\Users\dohertj2\AppData\Roaming\ghidra\ghidra_12.0.4_PUBLIC\symbols\win32\user32.exports
|
|
Library not saved to project.
|
|
------------------------------------------------
|
|
|
|
Applying cached symbols from LICAPINATIVEWRAPPER.DLL
|
|
Applying cached symbols from KERNEL32.DLL
|
|
Applying cached symbols from USER32.DLL
|
|
Applying cached symbols from ADVAPI32.DLL
|
|
Applying cached symbols from OLE32.DLL
|
|
Applying cached symbols from OLEAUT32.DLL
|
|
Applying cached symbols from SHLWAPI.DLL
|
|
Applying cached symbols from MSVCP100.DLL
|
|
Applying cached symbols from DBGHELP.DLL
|
|
Applying cached symbols from MSVCR100.DLL
|
|
Linking the External Programs of 'LmxProxy.dll' to imported libraries...
|
|
[LICAPINATIVEWRAPPER.DLL] -> not found in project
|
|
[KERNEL32.DLL] -> not found in project
|
|
[USER32.DLL] -> not found in project
|
|
[ADVAPI32.DLL] -> not found in project
|
|
[OLE32.DLL] -> not found in project
|
|
[OLEAUT32.DLL] -> not found in project
|
|
[SHLWAPI.DLL] -> not found in project
|
|
[MSVCP100.DLL] -> not found in project
|
|
[DBGHELP.DLL] -> not found in project
|
|
[MSVCR100.DLL] -> not found in project
|
|
------------------------------------------------
|
|
|
|
|
|
2026-04-25 02:04:43 INFO (HeadlessAnalyzer) IMPORTING: Loaded 0 additional files
|
|
2026-04-25 02:04:44 INFO (HeadlessAnalyzer) ANALYZING all memory and code: file:///C:/Users/dohertj2/Desktop/mxaccess/analysis/ghidra/input/LmxProxy.dll
|
|
2026-04-25 02:04:44 WARN (NoReturnFunctionAnalyzer) Ignoring leading '_' chars on no-return name '___raise_securityfailure' specified in file: C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\Base\data\PEFunctionsThatDoNotReturn
|
|
2026-04-25 02:04:44 WARN (NoReturnFunctionAnalyzer) Ignoring leading '_' chars on no-return name '___report_rangecheckfailure' specified in file: C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\Base\data\PEFunctionsThatDoNotReturn
|
|
2026-04-25 02:04:44 INFO (PdbUniversalAnalyzer) Skipping PDB processing: missing PDB information in program metadata
|
|
2026-04-25 02:04:45 INFO (PackedDatabaseCache) Packed database cache: C:\Users\dohertj2\AppData\Local\ghidra\packed-db-cache
|
|
2026-04-25 02:04:45 DEBUG (PackedDatabaseCache) Caching packed database: C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\Base\data\typeinfo\win32\windows_vs12_32.gdt
|
|
2026-04-25 02:04:45 DEBUG (PackedDatabase) Unpacking database C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\Base\data\typeinfo\win32\windows_vs12_32.gdt -> C:\Users\dohertj2\AppData\Local\ghidra\packed-db-cache\pdb627C0973\db.1.gbf
|
|
2026-04-25 02:04:45 DEBUG (PackedDatabaseCache) Cache update completed: C:\Users\dohertj2\Desktop\focas\tools\ghidra_12.0.4_PUBLIC\Ghidra\Features\Base\data\typeinfo\win32\windows_vs12_32.gdt
|
|
2026-04-25 02:04:57 INFO (DecompilerSwitchAnalyzer) hit non-returning function, restarting decompiler switch analyzer later
|
|
2026-04-25 02:05:20 INFO (TypeDescriptorModel) Unprocessed TypeDescriptor: long
|
|
2026-04-25 02:05:25 INFO (TypeDescriptorModel) Unprocessed TypeDescriptor: long
|
|
2026-04-25 02:05:51 INFO (ApplyDataArchiveAnalyzer) Applied data type archive: windows_vs12_32
|
|
2026-04-25 02:05:52 INFO (ApplyDataArchiveAnalyzer) Applied data type archive: windows_vs12_32
|
|
2026-04-25 02:06:32 INFO (AutoAnalysisManager) -----------------------------------------------------
|
|
ASCII Strings 2.682 secs
|
|
Apply Data Archives 0.962 secs
|
|
Call Convention ID 0.039 secs
|
|
Call-Fixup Installer 0.162 secs
|
|
Create Address Tables 0.188 secs
|
|
Create Address Tables - One Time 0.058 secs
|
|
Create Function 0.807 secs
|
|
Data Reference 0.480 secs
|
|
Decompiler Parameter ID 21.602 secs
|
|
Decompiler Switch Analysis 27.258 secs
|
|
Decompiler Switch Analysis - One Time 6.226 secs
|
|
Demangler Microsoft 0.543 secs
|
|
Disassemble 1.527 secs
|
|
Disassemble Entry Points 0.308 secs
|
|
Embedded Media 0.034 secs
|
|
External Entry References 0.000 secs
|
|
Function ID 3.038 secs
|
|
Function Start Pre Search 0.053 secs
|
|
Function Start Search 0.212 secs
|
|
Function Start Search After Code 0.075 secs
|
|
Function Start Search After Data 0.051 secs
|
|
Non-Returning Functions - Discovered 0.766 secs
|
|
Non-Returning Functions - Known 0.029 secs
|
|
PDB Universal 0.008 secs
|
|
Reference 0.507 secs
|
|
Scalar Operand References 1.317 secs
|
|
Shared Return Calls 0.626 secs
|
|
Stack 8.338 secs
|
|
Subroutine References 0.461 secs
|
|
Subroutine References - One Time 0.017 secs
|
|
Windows x86 PE Exception Handling 10.009 secs
|
|
Windows x86 PE RTTI Analyzer 7.982 secs
|
|
Windows x86 Thread Environment Block (TEB) Analyzer 0.059 secs
|
|
WindowsResourceReference 2.630 secs
|
|
X86 Function Callee Purge 0.486 secs
|
|
x86 Constant Reference Analyzer 7.712 secs
|
|
-----------------------------------------------------
|
|
Total Time 107 secs
|
|
-----------------------------------------------------
|
|
|
|
2026-04-25 02:06:32 INFO (HeadlessAnalyzer) REPORT: Analysis succeeded for file: file:///C:/Users/dohertj2/Desktop/mxaccess/analysis/ghidra/input/LmxProxy.dll
|
|
2026-04-25 02:06:32 INFO (HeadlessAnalyzer) REPORT: Execute script: MxNmxExport.java 'C:\Users\dohertj2\Desktop\mxaccess\analysis\ghidra\exports'
|
|
2026-04-25 02:06:40 INFO (HeadlessAnalyzer) SCRIPT: C:\Users\dohertj2\Desktop\mxaccess\analysis\ghidra\scripts\MxNmxExport.java
|
|
2026-04-25 02:06:43 INFO (GhidraScript) MxNmxExport.java> Wrote MX/NMX Ghidra export for LmxProxy.dll to C:\Users\dohertj2\Desktop\mxaccess\analysis\ghidra\exports
|
|
2026-04-25 02:06:43 INFO (HeadlessAnalyzer) ANALYZING changes made by post scripts: file:///C:/Users/dohertj2/Desktop/mxaccess/analysis/ghidra/input/LmxProxy.dll
|
|
2026-04-25 02:06:43 INFO (HeadlessAnalyzer) REPORT: Post-analysis succeeded for file: file:///C:/Users/dohertj2/Desktop/mxaccess/analysis/ghidra/input/LmxProxy.dll
|
|
2026-04-25 02:06:43 INFO (LocalFileSystem) /LmxProxy.dll: file created (dohertj2)
|
|
2026-04-25 02:06:43 INFO (HeadlessAnalyzer) REPORT: Save succeeded for: /LmxProxy.dll (mxnmx:/LmxProxy.dll)
|
|
2026-04-25 02:06:43 INFO (HeadlessAnalyzer) REPORT: Import succeeded
|