mxaccess/captures/111-frida-write-secured-auth-protectedvalue/frida-events.tsv at master

dohertj2/mxaccess

Fork 0

Files

T

Joseph Doherty fe2a6db786

rust / build / test / clippy / fmt (push) Has been cancelled

Details

Initial project state: .NET reference, design, Rust port (M0+M1), evidence

Layout:
- src/                    .NET 10 x64 reference: MxNativeCodec, MxNativeClient,
                          MxAsbClient, probes, tests, harnesses. Executable spec.
- design/                 Architectural plan for the Rust port (M0–M6), error
                          model, protocol invariants, risks (R1–R16), adversarial
                          review log (review.md).
- rust/                   Rust workspace. M0 skeleton + M1 codec parity.
                          mxaccess-codec: 215 unit tests + 2 cross-implementation
                          parity tests (byte-identical against .NET reference).
                          Other crates are M0 stubs awaiting M2+.
- captures/               Frida + netsh + pcap evidence per CLAUDE.md
                          ("captures are evidence, not throwaway logs").
- analysis/               Decompiled C# (frida/proxy/decompiled-*),
                          Ghidra exports for native DLLs (`exports/` only —
                          working state at `projects/` and AVEVA's input
                          binaries at `input/` are gitignored).
- docs/                   Reverse-engineering reference docs.
- tools/                  Setup-LiveProbeEnv.ps1 (Infisical credential fetcher),
                          Compute-Crc.ps1 (.NET parity helper).
- .github/workflows/      Rust CI: fmt + build + test + clippy on Windows.
- LICENSE                 MIT (Joseph Doherty, 2026).

Verified:
- cargo test --workspace → 217 passed (215 unit + 2 .NET parity), 0 failed
- cargo clippy --workspace -- -D warnings → clean
- cargo fmt --all -- --check → clean
- cargo publish --dry-run -p mxaccess-codec → packages cleanly

Excluded from history (see .gitignore):
- **/bin, **/obj, **/target — build artifacts
- analysis/ghidra/projects/ — Ghidra working state (regenerable)
- analysis/ghidra/input/ — AVEVA proprietary DLLs (vendor IP)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-05 06:21:00 -04:00

17 KiB

Raw Permalink Blame History

1	time	event	module	name	ecx	retval	args	candidate_index	candidate_size	candidate_ptr	value_hits	hex
2	2026-04-26T01:23:07.668Z	hook.installed	LmxProxy.dll	CLMXProxyServer.Write.variantA			[]
3	2026-04-26T01:23:07.669Z	hook.installed	LmxProxy.dll	CLMXProxyServer.Write.variantB			[]
4	2026-04-26T01:23:07.669Z	hook.installed	LmxProxy.dll	CLMXProxyServer.WriteSecured.variantA			[]
5	2026-04-26T01:23:07.670Z	hook.installed	LmxProxy.dll	CLMXProxyServer.WriteSecured.variantB			[]
6	2026-04-26T01:23:07.670Z	hook.installed	LmxProxy.dll	CLMXProxyServer.AddBufferedItem			[]
7	2026-04-26T01:23:07.670Z	hook.installed	LmxProxy.dll	CLMXProxyServer.SetBufferedUpdateInterval			[]
8	2026-04-26T01:23:07.671Z	hook.installed	LmxProxy.dll	CLMXProxyServer.AdviseSupervisory			[]
9	2026-04-26T01:23:07.671Z	hook.installed	LmxProxy.dll	CProxy_ILMXProxyServerEvents2.Fire_OnBufferedDataChange			[]
10	2026-04-26T01:23:07.672Z	hook.installed	LmxProxy.dll	CLMXProxyServer.AuthenticateUser			[]
11	2026-04-26T01:23:14.511Z	hook.installed	Lmx.dll	MxConnection.PrebindReference			[]
12	2026-04-26T01:23:14.512Z	hook.installed	Lmx.dll	MxConnection.UserRegisterPreboundReference			[]
13	2026-04-26T01:23:14.513Z	hook.installed	Lmx.dll	IMxReference.GetMxHandle			[]
14	2026-04-26T01:23:14.513Z	hook.installed	Lmx.dll	AccessManager.FixUpMxHandle			[]
15	2026-04-26T01:23:14.514Z	hook.installed	Lmx.dll	PreboundReference.Resolve			[]
16	2026-04-26T01:23:14.515Z	hook.installed	Lmx.dll	PreboundReference.OnPlatformResolveReferenceResults			[]
17	2026-04-26T01:23:14.515Z	hook.installed	Lmx.dll	PreboundReference.OnSetAttributeResult			[]
18	2026-04-26T01:23:14.612Z	hook.installed	NmxAdptr.dll	CNmxAdapter.TransferData			[]
19	2026-04-26T01:23:14.613Z	hook.installed	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived			[]
20	2026-04-26T01:23:14.613Z	hook.installed	NmxAdptr.dll	CNmxAdapter.PutRequest			[]
21	2026-04-26T01:23:14.614Z	hook.installed	NmxAdptr.dll	CNmxAdapter.PutRequestEx			[]
22	2026-04-26T01:23:14.667Z	lmx.fixup-mxhandle.enter	Lmx.dll	AccessManager.FixUpMxHandle			[]
23	2026-04-26T01:23:14.667Z	lmx.fixup-mxhandle.leave	Lmx.dll	AccessManager.FixUpMxHandle		0x4fe4a0	[]
24	2026-04-26T01:23:14.668Z	lmx.fixup-mxhandle.enter	Lmx.dll	AccessManager.FixUpMxHandle			[]
25	2026-04-26T01:23:14.668Z	lmx.fixup-mxhandle.leave	Lmx.dll	AccessManager.FixUpMxHandle		0x4fe4a0	[]
26	2026-04-26T01:23:14.757Z	lmx.prebind.enter	Lmx.dll	MxConnection.PrebindReference			[]
27	2026-04-26T01:23:14.758Z	lmx.mxhandle.read	Lmx.dll	IMxReference.GetMxHandle		0x4fea24	[]
28	2026-04-26T01:23:14.759Z	lmx.prebound-resolve.enter	Lmx.dll	PreboundReference.Resolve			[]
29	2026-04-26T01:23:14.760Z	lmx.mxhandle.read	Lmx.dll	IMxReference.GetMxHandle		0x4fe9b4	[]
30	2026-04-26T01:23:14.760Z	lmx.mxhandle.read	Lmx.dll	IMxReference.GetMxHandle		0x4fe9b4	[]
31	2026-04-26T01:23:14.761Z	lmx.mxhandle.read	Lmx.dll	IMxReference.GetMxHandle		0x4fe9b4	[]
32	2026-04-26T01:23:14.762Z	lmx.prebound-resolve.leave	Lmx.dll	PreboundReference.Resolve		0x70fe1e01	[]
33	2026-04-26T01:23:14.762Z	lmx.prebind.leave	Lmx.dll	MxConnection.PrebindReference			[]
34	2026-04-26T01:23:14.764Z	call.enter	LmxProxy.dll	CLMXProxyServer.AdviseSupervisory	0x4feb7c		["0x5968fe0","0x1","0x1","0xd6177ed7","0x74794704"]
35	2026-04-26T01:23:14.764Z	lmx.fixup-mxhandle.enter	Lmx.dll	AccessManager.FixUpMxHandle			[]
36	2026-04-26T01:23:14.764Z	lmx.fixup-mxhandle.leave	Lmx.dll	AccessManager.FixUpMxHandle		0x4fe9fc	[]
37	2026-04-26T01:23:14.765Z	lmx.fixup-mxhandle.enter	Lmx.dll	AccessManager.FixUpMxHandle			[]
38	2026-04-26T01:23:14.765Z	lmx.fixup-mxhandle.leave	Lmx.dll	AccessManager.FixUpMxHandle		0x4fd690	[]
39	2026-04-26T01:23:14.765Z	call.leave	LmxProxy.dll	CLMXProxyServer.AdviseSupervisory		0x0	[]
40	2026-04-26T01:23:14.895Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.PutRequest	0x1		["0x8bcc710","0x1","0x1","0x1","0x2","0x0","0x13a","0x8bd0620","0x4fe840","0x5cbecfd7"]	0	1	0x2
41	2026-04-26T01:23:14.895Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.PutRequest	0x1		["0x8bcc710","0x1","0x1","0x1","0x2","0x0","0x13a","0x8bd0620","0x4fe840","0x5cbecfd7"]	1	314	0x8bd0620	True:u8@1 True:u8@3 True:u8@4 True:u8@6 True:u8@111 True:u8@112 True:u8@114 True:u8@116 True:u8@130 True:u8@136 True:u8@156 True:u8@161 True:u8@163 True:u8@164 True:u8@166 True:u8@283 True:u8@284 True:u8@286 True:u8@288 True:u8@302 True:u8@308 True:i32@6 True:i32@116 True:i32@156 True:i32@166 True:i32@288	17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 6a 00 00 00 40 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 a8 fc bc 08 1f 01 00 0e e9 1b 3a 89 4d 59 41 9b 7a 70 d5 94 00 3b 82 00 00 01 00 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 76 00 00 00 4c 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 28 03 bd 08 20 01 00 02 00 00 00
42	2026-04-26T01:23:14.898Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.TransferData	0x8bcc710		["0x1","0x1","0x1","0x168","0x956e020","0xf5940164","0x8bd01ec","0x8bd01dc","0x641add04","0x0"]	0	360	0x956e020	True:u8@0 True:u8@3 True:u8@10 True:u8@14 True:u8@18 True:u8@26 True:u8@30 True:u8@34 True:u8@38 True:u8@47 True:u8@49 True:u8@50 True:u8@52 True:u8@157 True:u8@158 True:u8@160 True:u8@162 True:u8@176 True:u8@182 True:u8@202 True:u8@207 True:u8@209 True:u8@210 True:u8@212 True:u8@329 True:u8@330 True:u8@332 True:u8@334 True:u8@348 True:u8@354 True:i32@3 True:i32@10 True:i32@14 True:i32@18 True:i32@26 True:i32@30 True:i32@34 True:i32@52 True:i32@162 True:i32@202 True:i32@212 True:i32@334	01 00 3a 01 00 00 00 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 02 00 00 30 75 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 6a 00 00 00 40 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 a8 fc bc 08 1f 01 00 0e e9 1b 3a 89 4d 59 41 9b 7a 70 d5 94 00 3b 82 00 00 01 00 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 76 00 00 00 4c 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 28 03 bd 08 20 01 00 02 00 00 00
43	2026-04-26T01:23:14.899Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.TransferData		0x0	[]
44	2026-04-26T01:23:14.899Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.PutRequest		0x0	[]
45	2026-04-26T01:23:14.900Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.PutRequest	0x1		["0x8bcc710","0x1","0x1","0x2","0x2","0x0","0x27","0x8c9e080","0x4fe840","0x5cbecfd7"]	0	2	0x2
46	2026-04-26T01:23:14.900Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.PutRequest	0x1		["0x8bcc710","0x1","0x1","0x2","0x2","0x0","0x27","0x8c9e080","0x4fe840","0x5cbecfd7"]	1	39	0x8c9e080	True:u8@1	1f 01 00 0e e9 1b 3a 89 4d 59 41 9b 7a 70 d5 94 00 3b 82 00 00 06 00 08 f4 02 00 a6 00 0a 00 bb 67 00 00 03 00 00 00
47	2026-04-26T01:23:14.901Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.TransferData	0x8bcc710		["0x1","0x1","0x2","0x55","0x956e020","0xf5940164","0x8ca955c","0x8ca954c","0x641add04","0x0"]	0	85	0x956e020	True:u8@0 True:u8@14 True:u8@18 True:u8@26 True:u8@30 True:u8@38 True:u8@47 True:i32@14 True:i32@18 True:i32@26 True:i32@30	01 00 27 00 00 00 00 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 1f 01 00 0e e9 1b 3a 89 4d 59 41 9b 7a 70 d5 94 00 3b 82 00 00 06 00 08 f4 02 00 a6 00 0a 00 bb 67 00 00 03 00 00 00
48	2026-04-26T01:23:14.902Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.TransferData		0x0	[]
49	2026-04-26T01:23:14.902Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.PutRequest		0x0	[]
50	2026-04-26T01:23:14.925Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x8bcc710		["0x5c","0x7760b8c","0x70eee40","0x76ffedd8","0x8bcc71c","0x5c","0x7760b8c","0x206","0x3","0x73442cc"]	0	92	0x7760b8c	True:u8@4 True:u8@18 True:u8@22 True:u8@30 True:u8@34 True:u8@54 True:u8@56 True:i32@18 True:i32@22 True:i32@30 True:i32@34	5c 00 00 00 01 00 2e 00 00 00 00 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 00 00 50 80 01 00 01 00 02 00 30 75 00 00 d0 e9 c4 40 93 bf 08 47 a6 5d d5 73 ef c4 8f f1 0e e9 1b 3a 89 4d 59 41 9b 7a 70 d5
51	2026-04-26T01:23:14.925Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x8bcc710		["0x5c","0x7760b8c","0x70eee40","0x76ffedd8","0x8bcc71c","0x5c","0x7760b8c","0x206","0x3","0x73442cc"]	1	518	0x3
52	2026-04-26T01:23:14.925Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x8bcc710		["0x5c","0x7760b8c","0x70eee40","0x76ffedd8","0x8bcc71c","0x5c","0x7760b8c","0x206","0x3","0x73442cc"]	2	3	0x73442cc		78 04 10
53	2026-04-26T01:23:14.927Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived		0x0	[]
54	2026-04-26T01:23:14.930Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x8bcc710		["0x69","0x76f3f1c","0x70eee40","0x76ffedd8","0x8bcc71c","0x69","0x76f3f1c","0x206","0x3","0x73442cc"]	0	105	0x76f3f1c	True:u8@4 True:u8@18 True:u8@22 True:u8@30 True:u8@34 True:u8@42 True:u8@51 True:u8@53 True:i32@18 True:i32@22 True:i32@30 True:i32@34 True:i32@53	69 00 00 00 01 00 3b 00 00 00 00 00 00 00 1b 8a 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 32 01 00 01 00 00 00 d0 e9 c4 40 93 bf 08 47 a6 5d d5 73 ef c4 8f f1 0e e9 1b 3a 89 4d 59 41 9b 7a 70 d5 94 00 3b 82 03 00 00 00 03 00 00 00 c0 00 e0 51 14 30 81 d4
55	2026-04-26T01:23:14.930Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x8bcc710		["0x69","0x76f3f1c","0x70eee40","0x76ffedd8","0x8bcc71c","0x69","0x76f3f1c","0x206","0x3","0x73442cc"]	1	518	0x3
56	2026-04-26T01:23:14.930Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x8bcc710		["0x69","0x76f3f1c","0x70eee40","0x76ffedd8","0x8bcc71c","0x69","0x76f3f1c","0x206","0x3","0x73442cc"]	2	3	0x73442cc		78 04 10
57	2026-04-26T01:23:14.932Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived		0x0	[]
58	2026-04-26T01:23:14.936Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x8bcc710		["0x2c2","0x7760b8c","0x70eee40","0x76ffedd8","0x8bcc71c","0x2c2","0x7760b8c","0x206","0x3","0x73442cc"]	0	706	0x7760b8c	True:u8@4 True:u8@14 True:u8@18 True:u8@22 True:u8@26 True:u8@30 True:u8@34 True:u8@205 True:u8@206 True:u8@208 True:u8@210 True:u8@224 True:u8@342 True:u8@344 True:u8@346 True:u8@563 True:u8@564 True:u8@566 True:u8@568 True:u8@582 True:u8@700 True:u8@702 True:u8@704 True:i32@14 True:i32@18 True:i32@22 True:i32@26 True:i32@30 True:i32@34	c2 02 00 00 01 00 94 02 00 00 00 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 40 1f 50 80 08 a6 00 00 00 40 00 00 91 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 18 00 00 00 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 00 00 28 00 00 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 53 f2 9a 00 6a 00 0a 00 5f f1 00 00 01 6c 00 00 00 41 00 6e 00 20 00 69 00 6e 00 74 00 65 00 72 00 6e 00 61 00 6c 00 20 00 65 00 72 00 72 00 6f 00 72 00 20 00 6f 00 63 00 63 00 75 00 72 00 72 00 65 00 64 00 20 00 69 00 6e 00 20 00 74 00 68 00 65 00 20 00 42 00 61 00 73 00 65 00 20 00 52 00 75 00 6e 00 74 00 69 00 6d 00 65 00 20 00 4f 00 62 00 6a 00 65 00 63 00 74 00 00 00 1f 00 00 50 80 01 00 01 00 01 00 30 75 00 00 b9 7a fe 75 f8 12 b2 46 8d ec a5 46 77 66 6d 6b 0e e9 1b 3a 89 4d 59 41 9b 7a 70 d5 94 00 3b 82 40 1f 50 80 08 be 00 00 00 4c 00 00 91 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 18 00 00 00 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 00 00 34 00 00 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 53 f2 9a 00 6b 00 0a 00 87 3a 00 00 01 6c 00 00 00 41 00 6e 00 20 00 69 00 6e 00 74 00 65 00 72 00 6e 00 61 00 6c 00 20 00 65 00 72 00 72 00 6f 00 72 00 20 00 6f 00 63 00 63 00 75 00 72 00 72 00 65 00 64 00 20 00 69 00 6e 00 20 00 74 00 68 00 65 00 20 00 42 00 61 00 73 00 65 00 20 00 52 00 75 00 6e 00 74 00 69 00 6d 00 65 00 20 00 4f 00 62 00 6a 00 65 00 63 00 74 00 00 00 20 00 00 50 80 01 00 01 00 01 00
59	2026-04-26T01:23:14.936Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x8bcc710		["0x2c2","0x7760b8c","0x70eee40","0x76ffedd8","0x8bcc71c","0x2c2","0x7760b8c","0x206","0x3","0x73442cc"]	1	518	0x3
60	2026-04-26T01:23:14.936Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x8bcc710		["0x2c2","0x7760b8c","0x70eee40","0x76ffedd8","0x8bcc71c","0x2c2","0x7760b8c","0x206","0x3","0x73442cc"]	2	3	0x73442cc		78 04 10
61	2026-04-26T01:23:14.938Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived		0x0	[]
62	2026-04-26T01:23:14.940Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x8bcc710		["0x97","0x76f1d0c","0x70eee40","0x76ffedd8","0x8bcc71c","0x97","0x76f1d0c","0x206","0x3","0x73442cc"]	0	151	0x76f1d0c	True:u8@4 True:u8@18 True:u8@22 True:u8@26 True:u8@30 True:u8@34 True:u8@42 True:u8@51 True:u8@89 True:u8@106 True:u8@119 True:u8@139 True:i32@18 True:i32@22 True:i32@26 True:i32@30 True:i32@34 True:i32@89	97 00 00 00 01 00 69 00 00 00 00 00 00 00 06 17 0d 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 32 01 00 02 00 00 00 b9 7a fe 75 f8 12 b2 46 8d ec a5 46 77 66 6d 6b 0e e9 1b 3a 89 4d 59 41 9b 7a 70 d5 94 00 3b 82 01 00 00 00 03 00 00 00 c0 00 20 2e 5a 46 28 d3 dc 01 06 0a 00 00 00 00 a0 41 c3 55 bd dc 01 00 00 02 00 00 00 03 00 00 00 c0 00 80 18 5b 46 28 d3 dc 01 06 0a 00 00 00 80 c1 75 25 a5 bd
63	2026-04-26T01:23:14.940Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x8bcc710		["0x97","0x76f1d0c","0x70eee40","0x76ffedd8","0x8bcc71c","0x97","0x76f1d0c","0x206","0x3","0x73442cc"]	1	518	0x3
64	2026-04-26T01:23:14.940Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x8bcc710		["0x97","0x76f1d0c","0x70eee40","0x76ffedd8","0x8bcc71c","0x97","0x76f1d0c","0x206","0x3","0x73442cc"]	2	3	0x73442cc		78 04 10
65	2026-04-26T01:23:14.942Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived		0x0	[]
66	2026-04-26T01:23:15.803Z	call.enter	LmxProxy.dll	CLMXProxyServer.AuthenticateUser	0x4feb40		[]
67	2026-04-26T01:23:15.826Z	call.leave	LmxProxy.dll	CLMXProxyServer.AuthenticateUser		0x0	[]
68	2026-04-26T01:23:15.841Z	call.enter	LmxProxy.dll	CLMXProxyServer.WriteSecured.variantA	0x4feb4c		["0x5968fe0","0x1","0x1","0x1","0x0","0xb","0x0","0xffff","0x0","0xd6177ed7"]
69	2026-04-26T01:23:15.841Z	call.leave	LmxProxy.dll	CLMXProxyServer.WriteSecured.variantA		0x80004021	[]
70	2026-04-26T01:23:20.931Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.PutRequest	0x1		["0x8bcc710","0x1","0x1","0x2","0x2","0x0","0x25","0x8c9dcd8","0x4fe89c","0x5cbecfe3"]	0	2	0x2
71	2026-04-26T01:23:20.931Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.PutRequest	0x1		["0x8bcc710","0x1","0x1","0x2","0x2","0x0","0x25","0x8c9dcd8","0x4fe89c","0x5cbecfe3"]	1	37	0x8c9dcd8	True:u8@1	21 01 00 0e e9 1b 3a 89 4d 59 41 9b 7a 70 d5 94 00 3b 82 06 00 08 f4 02 00 a6 00 0a 00 bb 67 00 00 03 00 00 00
72	2026-04-26T01:23:20.932Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.TransferData	0x8bcc710		["0x1","0x1","0x2","0x53","0x956e020","0xf5940150","0x4fe8ec","0x4fe8dc","0x641add04","0x0"]	0	83	0x956e020	True:u8@0 True:u8@14 True:u8@18 True:u8@26 True:u8@30 True:u8@38 True:u8@47 True:i32@14 True:i32@18 True:i32@26 True:i32@30	01 00 25 00 00 00 00 00 00 00 03 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 21 01 00 0e e9 1b 3a 89 4d 59 41 9b 7a 70 d5 94 00 3b 82 06 00 08 f4 02 00 a6 00 0a 00 bb 67 00 00 03 00 00 00
73	2026-04-26T01:23:20.933Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.TransferData		0x0	[]
74	2026-04-26T01:23:20.933Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.PutRequest		0x0	[]

17 KiB Raw Permalink Blame History

17 KiB

Raw Permalink Blame History