mxaccess/captures/116-frida-write-secured2-auth-verified-protectedvalue1/frida-events.tsv at master

dohertj2/mxaccess

Fork 0

Files

T

Joseph Doherty fe2a6db786

rust / build / test / clippy / fmt (push) Has been cancelled

Details

Initial project state: .NET reference, design, Rust port (M0+M1), evidence

Layout:
- src/                    .NET 10 x64 reference: MxNativeCodec, MxNativeClient,
                          MxAsbClient, probes, tests, harnesses. Executable spec.
- design/                 Architectural plan for the Rust port (M0–M6), error
                          model, protocol invariants, risks (R1–R16), adversarial
                          review log (review.md).
- rust/                   Rust workspace. M0 skeleton + M1 codec parity.
                          mxaccess-codec: 215 unit tests + 2 cross-implementation
                          parity tests (byte-identical against .NET reference).
                          Other crates are M0 stubs awaiting M2+.
- captures/               Frida + netsh + pcap evidence per CLAUDE.md
                          ("captures are evidence, not throwaway logs").
- analysis/               Decompiled C# (frida/proxy/decompiled-*),
                          Ghidra exports for native DLLs (`exports/` only —
                          working state at `projects/` and AVEVA's input
                          binaries at `input/` are gitignored).
- docs/                   Reverse-engineering reference docs.
- tools/                  Setup-LiveProbeEnv.ps1 (Infisical credential fetcher),
                          Compute-Crc.ps1 (.NET parity helper).
- .github/workflows/      Rust CI: fmt + build + test + clippy on Windows.
- LICENSE                 MIT (Joseph Doherty, 2026).

Verified:
- cargo test --workspace → 217 passed (215 unit + 2 .NET parity), 0 failed
- cargo clippy --workspace -- -D warnings → clean
- cargo fmt --all -- --check → clean
- cargo publish --dry-run -p mxaccess-codec → packages cleanly

Excluded from history (see .gitignore):
- **/bin, **/obj, **/target — build artifacts
- analysis/ghidra/projects/ — Ghidra working state (regenerable)
- analysis/ghidra/input/ — AVEVA proprietary DLLs (vendor IP)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-05 06:21:00 -04:00

22 KiB

Raw Permalink Blame History

1	time	event	module	name	ecx	retval	args	candidate_index	candidate_size	candidate_ptr	value_hits	hex
2	2026-04-26T01:30:41.798Z	hook.installed	LmxProxy.dll	CLMXProxyServer.Write.variantA			[]
3	2026-04-26T01:30:41.799Z	hook.installed	LmxProxy.dll	CLMXProxyServer.Write.variantB			[]
4	2026-04-26T01:30:41.799Z	hook.installed	LmxProxy.dll	CLMXProxyServer.WriteSecured.variantA			[]
5	2026-04-26T01:30:41.800Z	hook.installed	LmxProxy.dll	CLMXProxyServer.WriteSecured.variantB			[]
6	2026-04-26T01:30:41.800Z	hook.installed	LmxProxy.dll	CLMXProxyServer.AddBufferedItem			[]
7	2026-04-26T01:30:41.800Z	hook.installed	LmxProxy.dll	CLMXProxyServer.SetBufferedUpdateInterval			[]
8	2026-04-26T01:30:41.801Z	hook.installed	LmxProxy.dll	CLMXProxyServer.AdviseSupervisory			[]
9	2026-04-26T01:30:41.801Z	hook.installed	LmxProxy.dll	CProxy_ILMXProxyServerEvents2.Fire_OnBufferedDataChange			[]
10	2026-04-26T01:30:41.802Z	hook.installed	LmxProxy.dll	CLMXProxyServer.AuthenticateUser			[]
11	2026-04-26T01:30:48.449Z	hook.installed	Lmx.dll	MxConnection.PrebindReference			[]
12	2026-04-26T01:30:48.449Z	hook.installed	Lmx.dll	MxConnection.UserRegisterPreboundReference			[]
13	2026-04-26T01:30:48.450Z	hook.installed	Lmx.dll	IMxReference.GetMxHandle			[]
14	2026-04-26T01:30:48.450Z	hook.installed	Lmx.dll	AccessManager.FixUpMxHandle			[]
15	2026-04-26T01:30:48.451Z	hook.installed	Lmx.dll	PreboundReference.Resolve			[]
16	2026-04-26T01:30:48.451Z	hook.installed	Lmx.dll	PreboundReference.OnPlatformResolveReferenceResults			[]
17	2026-04-26T01:30:48.452Z	hook.installed	Lmx.dll	PreboundReference.OnSetAttributeResult			[]
18	2026-04-26T01:30:48.548Z	lmx.fixup-mxhandle.enter	Lmx.dll	AccessManager.FixUpMxHandle			[]
19	2026-04-26T01:30:48.549Z	lmx.fixup-mxhandle.leave	Lmx.dll	AccessManager.FixUpMxHandle		0x6fe438	[]
20	2026-04-26T01:30:48.549Z	lmx.fixup-mxhandle.enter	Lmx.dll	AccessManager.FixUpMxHandle			[]
21	2026-04-26T01:30:48.550Z	lmx.fixup-mxhandle.leave	Lmx.dll	AccessManager.FixUpMxHandle		0x6fe438	[]
22	2026-04-26T01:30:48.550Z	hook.installed	NmxAdptr.dll	CNmxAdapter.TransferData			[]
23	2026-04-26T01:30:48.551Z	hook.installed	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived			[]
24	2026-04-26T01:30:48.551Z	hook.installed	NmxAdptr.dll	CNmxAdapter.PutRequest			[]
25	2026-04-26T01:30:48.552Z	hook.installed	NmxAdptr.dll	CNmxAdapter.PutRequestEx			[]
26	2026-04-26T01:30:48.654Z	lmx.prebind.enter	Lmx.dll	MxConnection.PrebindReference			[]
27	2026-04-26T01:30:48.654Z	lmx.mxhandle.read	Lmx.dll	IMxReference.GetMxHandle		0x6fe9d0	[]
28	2026-04-26T01:30:48.655Z	lmx.prebound-resolve.enter	Lmx.dll	PreboundReference.Resolve			[]
29	2026-04-26T01:30:48.656Z	lmx.mxhandle.read	Lmx.dll	IMxReference.GetMxHandle		0x6fe960	[]
30	2026-04-26T01:30:48.656Z	lmx.mxhandle.read	Lmx.dll	IMxReference.GetMxHandle		0x6fe960	[]
31	2026-04-26T01:30:48.657Z	lmx.mxhandle.read	Lmx.dll	IMxReference.GetMxHandle		0x6fe960	[]
32	2026-04-26T01:30:48.658Z	lmx.prebound-resolve.leave	Lmx.dll	PreboundReference.Resolve		0x70fe1e01	[]
33	2026-04-26T01:30:48.658Z	lmx.prebind.leave	Lmx.dll	MxConnection.PrebindReference			[]
34	2026-04-26T01:30:48.660Z	call.enter	LmxProxy.dll	CLMXProxyServer.AdviseSupervisory	0x6feb2c		["0x5838fe0","0x1","0x1","0xa7ce8929","0x74794704"]
35	2026-04-26T01:30:48.660Z	lmx.fixup-mxhandle.enter	Lmx.dll	AccessManager.FixUpMxHandle			[]
36	2026-04-26T01:30:48.661Z	lmx.fixup-mxhandle.leave	Lmx.dll	AccessManager.FixUpMxHandle		0x6fe9ac	[]
37	2026-04-26T01:30:48.661Z	lmx.fixup-mxhandle.enter	Lmx.dll	AccessManager.FixUpMxHandle			[]
38	2026-04-26T01:30:48.661Z	lmx.fixup-mxhandle.leave	Lmx.dll	AccessManager.FixUpMxHandle		0x6fd640	[]
39	2026-04-26T01:30:48.661Z	call.leave	LmxProxy.dll	CLMXProxyServer.AdviseSupervisory		0x0	[]
40	2026-04-26T01:30:48.789Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.PutRequest	0x1		["0x8d2c710","0x1","0x1","0x1","0x2","0x0","0x13a","0x8d30620","0x6fe7f0","0xb7265f8b"]	0	1	0x2
41	2026-04-26T01:30:48.789Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.PutRequest	0x1		["0x8d2c710","0x1","0x1","0x1","0x2","0x0","0x13a","0x8d30620","0x6fe7f0","0xb7265f8b"]	1	314	0x8d30620	True:u8@1 True:u8@3 True:u8@4 True:u8@6 True:u8@111 True:u8@112 True:u8@114 True:u8@116 True:u8@130 True:u8@136 True:u8@156 True:u8@161 True:u8@163 True:u8@164 True:u8@166 True:u8@283 True:u8@284 True:u8@286 True:u8@288 True:u8@302 True:u8@308 True:i32@6 True:i32@116 True:i32@156 True:i32@166 True:i32@288	17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 6a 00 00 00 40 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 a8 fc d2 08 1f 01 00 90 17 00 58 6c 7c 73 44 80 cb 53 cc 99 b5 43 a8 00 00 01 00 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 76 00 00 00 4c 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 28 03 d3 08 20 01 00 02 00 00 00
42	2026-04-26T01:30:48.792Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.TransferData	0x8d2c710		["0x1","0x1","0x1","0x168","0x96cb020","0x691b8323","0x8d301ec","0x8d301dc","0x641add04","0x0"]	0	360	0x96cb020	True:u8@0 True:u8@3 True:u8@10 True:u8@14 True:u8@18 True:u8@26 True:u8@30 True:u8@34 True:u8@38 True:u8@47 True:u8@49 True:u8@50 True:u8@52 True:u8@157 True:u8@158 True:u8@160 True:u8@162 True:u8@176 True:u8@182 True:u8@202 True:u8@207 True:u8@209 True:u8@210 True:u8@212 True:u8@329 True:u8@330 True:u8@332 True:u8@334 True:u8@348 True:u8@354 True:i32@3 True:i32@10 True:i32@14 True:i32@18 True:i32@26 True:i32@30 True:i32@34 True:i32@52 True:i32@162 True:i32@202 True:i32@212 True:i32@334	01 00 3a 01 00 00 00 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 02 00 00 30 75 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 6a 00 00 00 40 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 a8 fc d2 08 1f 01 00 90 17 00 58 6c 7c 73 44 80 cb 53 cc 99 b5 43 a8 00 00 01 00 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 76 00 00 00 4c 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 28 03 d3 08 20 01 00 02 00 00 00
43	2026-04-26T01:30:48.793Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.TransferData		0x0	[]
44	2026-04-26T01:30:48.793Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.PutRequest		0x0	[]
45	2026-04-26T01:30:48.794Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.PutRequest	0x1		["0x8d2c710","0x1","0x1","0x2","0x2","0x0","0x27","0x8dfd300","0x6fe7f0","0xb7265f8b"]	0	2	0x2
46	2026-04-26T01:30:48.794Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.PutRequest	0x1		["0x8d2c710","0x1","0x1","0x2","0x2","0x0","0x27","0x8dfd300","0x6fe7f0","0xb7265f8b"]	1	39	0x8dfd300	True:u8@1	1f 01 00 90 17 00 58 6c 7c 73 44 80 cb 53 cc 99 b5 43 a8 00 00 06 00 08 f4 02 00 a7 00 0a 00 26 8a 00 00 03 00 00 00
47	2026-04-26T01:30:48.796Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.TransferData	0x8d2c710		["0x1","0x1","0x2","0x55","0x96cb020","0x691b8323","0x8e0955c","0x8e0954c","0x641add04","0x0"]	0	85	0x96cb020	True:u8@0 True:u8@14 True:u8@18 True:u8@26 True:u8@30 True:u8@38 True:u8@47 True:i32@14 True:i32@18 True:i32@26 True:i32@30	01 00 27 00 00 00 00 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 1f 01 00 90 17 00 58 6c 7c 73 44 80 cb 53 cc 99 b5 43 a8 00 00 06 00 08 f4 02 00 a7 00 0a 00 26 8a 00 00 03 00 00 00
48	2026-04-26T01:30:48.796Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.TransferData		0x0	[]
49	2026-04-26T01:30:48.797Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.PutRequest		0x0	[]
50	2026-04-26T01:30:48.826Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x8d2c710		["0x5c","0x7544fcc","0x5e8ead0","0x76ffedd8","0x8d2c71c","0x5c","0x7544fcc","0x206","0x3","0x7230cb4"]	0	92	0x7544fcc	True:u8@4 True:u8@18 True:u8@22 True:u8@30 True:u8@34 True:u8@54 True:u8@56 True:i32@18 True:i32@22 True:i32@30 True:i32@34	5c 00 00 00 01 00 2e 00 00 00 00 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 00 00 50 80 01 00 01 00 02 00 30 75 00 00 fd 8d c6 6d 98 4e bf 4a a9 f4 df f5 12 60 b6 ba 90 17 00 58 6c 7c 73 44 80 cb 53 cc
51	2026-04-26T01:30:48.826Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x8d2c710		["0x5c","0x7544fcc","0x5e8ead0","0x76ffedd8","0x8d2c71c","0x5c","0x7544fcc","0x206","0x3","0x7230cb4"]	1	518	0x3
52	2026-04-26T01:30:48.826Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x8d2c710		["0x5c","0x7544fcc","0x5e8ead0","0x76ffedd8","0x8d2c71c","0x5c","0x7544fcc","0x206","0x3","0x7230cb4"]	2	3	0x7230cb4		18 99 68
53	2026-04-26T01:30:48.828Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived		0x0	[]
54	2026-04-26T01:30:48.830Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x8d2c710		["0x69","0x753d894","0x5e8ead0","0x76ffedd8","0x8d2c71c","0x69","0x753d894","0x206","0x3","0x7230cb4"]	0	105	0x753d894	True:u8@4 True:u8@18 True:u8@22 True:u8@30 True:u8@34 True:u8@42 True:u8@51 True:u8@53 True:i32@18 True:i32@22 True:i32@30 True:i32@34 True:i32@53	69 00 00 00 01 00 3b 00 00 00 00 00 00 00 26 8a 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 32 01 00 01 00 00 00 fd 8d c6 6d 98 4e bf 4a a9 f4 df f5 12 60 b6 ba 90 17 00 58 6c 7c 73 44 80 cb 53 cc 99 b5 43 a8 03 00 00 00 03 00 00 00 c0 00 c0 32 3e 40 81 d4
55	2026-04-26T01:30:48.830Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x8d2c710		["0x69","0x753d894","0x5e8ead0","0x76ffedd8","0x8d2c71c","0x69","0x753d894","0x206","0x3","0x7230cb4"]	1	518	0x3
56	2026-04-26T01:30:48.830Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x8d2c710		["0x69","0x753d894","0x5e8ead0","0x76ffedd8","0x8d2c71c","0x69","0x753d894","0x206","0x3","0x7230cb4"]	2	3	0x7230cb4		18 99 68
57	2026-04-26T01:30:48.831Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived		0x0	[]
58	2026-04-26T01:30:48.850Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x8d2c710		["0x2c2","0x7544fcc","0x5e8ead0","0x76ffedd8","0x8d2c71c","0x2c2","0x7544fcc","0x206","0x3","0x7230cb4"]	0	706	0x7544fcc	True:u8@4 True:u8@14 True:u8@18 True:u8@22 True:u8@26 True:u8@30 True:u8@34 True:u8@205 True:u8@206 True:u8@208 True:u8@210 True:u8@224 True:u8@342 True:u8@344 True:u8@346 True:u8@563 True:u8@564 True:u8@566 True:u8@568 True:u8@582 True:u8@700 True:u8@702 True:u8@704 True:i32@14 True:i32@18 True:i32@22 True:i32@26 True:i32@30 True:i32@34	c2 02 00 00 01 00 94 02 00 00 00 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 40 1f 50 80 08 a6 00 00 00 40 00 00 91 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 18 00 00 00 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 00 00 28 00 00 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 53 f2 9a 00 6a 00 0a 00 5f f1 00 00 01 6c 00 00 00 41 00 6e 00 20 00 69 00 6e 00 74 00 65 00 72 00 6e 00 61 00 6c 00 20 00 65 00 72 00 72 00 6f 00 72 00 20 00 6f 00 63 00 63 00 75 00 72 00 72 00 65 00 64 00 20 00 69 00 6e 00 20 00 74 00 68 00 65 00 20 00 42 00 61 00 73 00 65 00 20 00 52 00 75 00 6e 00 74 00 69 00 6d 00 65 00 20 00 4f 00 62 00 6a 00 65 00 63 00 74 00 00 00 1f 00 00 50 80 01 00 01 00 01 00 30 75 00 00 53 d1 e6 48 74 fe 36 46 80 64 ec 0d 68 af bc 0b 90 17 00 58 6c 7c 73 44 80 cb 53 cc 99 b5 43 a8 40 1f 50 80 08 be 00 00 00 4c 00 00 91 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 18 00 00 00 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 00 00 34 00 00 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 53 f2 9a 00 6b 00 0a 00 87 3a 00 00 01 6c 00 00 00 41 00 6e 00 20 00 69 00 6e 00 74 00 65 00 72 00 6e 00 61 00 6c 00 20 00 65 00 72 00 72 00 6f 00 72 00 20 00 6f 00 63 00 63 00 75 00 72 00 72 00 65 00 64 00 20 00 69 00 6e 00 20 00 74 00 68 00 65 00 20 00 42 00 61 00 73 00 65 00 20 00 52 00 75 00 6e 00 74 00 69 00 6d 00 65 00 20 00 4f 00 62 00 6a 00 65 00 63 00 74 00 00 00 20 00 00 50 80 01 00 01 00 01 00
59	2026-04-26T01:30:48.850Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x8d2c710		["0x2c2","0x7544fcc","0x5e8ead0","0x76ffedd8","0x8d2c71c","0x2c2","0x7544fcc","0x206","0x3","0x7230cb4"]	1	518	0x3
60	2026-04-26T01:30:48.850Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x8d2c710		["0x2c2","0x7544fcc","0x5e8ead0","0x76ffedd8","0x8d2c71c","0x2c2","0x7544fcc","0x206","0x3","0x7230cb4"]	2	3	0x7230cb4		18 99 68
61	2026-04-26T01:30:48.851Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived		0x0	[]
62	2026-04-26T01:30:48.853Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x8d2c710		["0x97","0x753d894","0x5e8ead0","0x76ffedd8","0x8d2c71c","0x97","0x753d894","0x206","0x3","0x7230cb4"]	0	151	0x753d894	True:u8@4 True:u8@18 True:u8@22 True:u8@26 True:u8@30 True:u8@34 True:u8@42 True:u8@51 True:u8@89 True:u8@106 True:u8@119 True:u8@139 True:i32@18 True:i32@22 True:i32@26 True:i32@30 True:i32@34 True:i32@89	97 00 00 00 01 00 69 00 00 00 00 00 00 00 29 1e 0d 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 32 01 00 02 00 00 00 53 d1 e6 48 74 fe 36 46 80 64 ec 0d 68 af bc 0b 90 17 00 58 6c 7c 73 44 80 cb 53 cc 99 b5 43 a8 01 00 00 00 03 00 00 00 c0 00 20 2e 5a 46 28 d3 dc 01 06 0a 00 00 00 00 a0 41 c3 55 bd dc 01 00 00 02 00 00 00 03 00 00 00 c0 00 80 18 5b 46 28 d3 dc 01 06 0a 00 00 00 80 c1 75 25 a5 bd
63	2026-04-26T01:30:48.853Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x8d2c710		["0x97","0x753d894","0x5e8ead0","0x76ffedd8","0x8d2c71c","0x97","0x753d894","0x206","0x3","0x7230cb4"]	1	518	0x3
64	2026-04-26T01:30:48.853Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x8d2c710		["0x97","0x753d894","0x5e8ead0","0x76ffedd8","0x8d2c71c","0x97","0x753d894","0x206","0x3","0x7230cb4"]	2	3	0x7230cb4		18 99 68
65	2026-04-26T01:30:48.855Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived		0x0	[]
66	2026-04-26T01:30:49.697Z	call.enter	LmxProxy.dll	CLMXProxyServer.AuthenticateUser	0x6feaf0		[]
67	2026-04-26T01:30:49.713Z	call.leave	LmxProxy.dll	CLMXProxyServer.AuthenticateUser		0x0	[]
68	2026-04-26T01:30:49.727Z	call.enter	LmxProxy.dll	CLMXProxyServer.WriteSecured.variantB	0x6feaf8		["0x5838fe0","0x1","0x1","0x1","0x1","0xb","0x0","0xffff","0x0","0x7","0x0","0xaf61a546","0x40e6873c","0xa7ce8929"]
69	2026-04-26T01:30:49.728Z	call.leave	LmxProxy.dll	CLMXProxyServer.WriteSecured.variantB		0x0	[]
70	2026-04-26T01:30:49.781Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.PutRequest	0x1		["0x8d2c710","0x1","0x1","0x2","0x3","0x0","0xd3","0x8e0a108","0x6fe7f0","0xb7265f8b"]	0	2	0x3
71	2026-04-26T01:30:49.781Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.PutRequest	0x1		["0x8d2c710","0x1","0x1","0x2","0x3","0x0","0xd3","0x8e0a108","0x6fe7f0","0xb7265f8b"]	1	211	0x8e0a108	True:u8@1 True:u8@17 True:u8@28 True:u8@207 True:i32@207 True:variant_bool@201	38 01 00 06 00 08 f4 02 00 a7 00 0a 00 26 8a 00 00 01 ff 00 00 00 41 76 50 1c d5 dc 01 07 b9 a9 f4 72 6e ae 48 83 b5 bb de 91 8c 89 0f 88 00 00 00 4d 00 78 00 46 00 72 00 69 00 64 00 61 00 54 00 72 00 61 00 63 00 65 00 2d 00 31 00 31 00 36 00 2d 00 66 00 72 00 69 00 64 00 61 00 2d 00 77 00 72 00 69 00 74 00 65 00 2d 00 73 00 65 00 63 00 75 00 72 00 65 00 64 00 32 00 2d 00 61 00 75 00 74 00 68 00 2d 00 76 00 65 00 72 00 69 00 66 00 69 00 65 00 64 00 2d 00 70 00 72 00 6f 00 74 00 65 00 63 00 74 00 65 00 64 00 76 00 61 00 6c 00 75 00 65 00 31 00 00 00 07 b9 a9 f4 72 6e ae 48 83 b5 bb de 91 8c 89 0f ff ff 1d 9d cf 0c 01 00 00 00
72	2026-04-26T01:30:49.783Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.TransferData	0x8d2c710		["0x1","0x1","0x2","0x101","0x96cb020","0x691b8323","0x8e099b4","0x8e099a4","0x641add04","0x0"]	0	257	0x96cb020	True:u8@0 True:u8@14 True:u8@18 True:u8@26 True:u8@30 True:u8@38 True:u8@47 True:u8@63 True:u8@74 True:u8@253 True:i32@14 True:i32@18 True:i32@26 True:i32@30 True:i32@253 True:variant_bool@247	01 00 d3 00 00 00 00 00 00 00 03 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 03 00 00 30 75 00 00 38 01 00 06 00 08 f4 02 00 a7 00 0a 00 26 8a 00 00 01 ff 00 00 00 41 76 50 1c d5 dc 01 07 b9 a9 f4 72 6e ae 48 83 b5 bb de 91 8c 89 0f 88 00 00 00 4d 00 78 00 46 00 72 00 69 00 64 00 61 00 54 00 72 00 61 00 63 00 65 00 2d 00 31 00 31 00 36 00 2d 00 66 00 72 00 69 00 64 00 61 00 2d 00 77 00 72 00 69 00 74 00 65 00 2d 00 73 00 65 00 63 00 75 00 72 00 65 00 64 00 32 00 2d 00 61 00 75 00 74 00 68 00 2d 00 76 00 65 00 72 00 69 00 66 00 69 00 65 00 64 00 2d 00 70 00 72 00 6f 00 74 00 65 00 63 00 74 00 65 00 64 00 76 00 61 00 6c 00 75 00 65 00 31 00 00 00 07 b9 a9 f4 72 6e ae 48 83 b5 bb de 91 8c 89 0f ff ff 1d 9d cf 0c 01 00 00 00
73	2026-04-26T01:30:49.783Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.TransferData		0x0	[]
74	2026-04-26T01:30:49.784Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.PutRequest		0x0	[]
75	2026-04-26T01:30:49.818Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x8d2c710		["0x33","0x7544fcc","0x5e8ead0","0x76ffedd8","0x8d2c71c","0x33","0x7544fcc","0x206","0x3","0x7230cb4"]	0	51	0x7544fcc	True:u8@4 True:u8@18 True:u8@22 True:u8@30 True:u8@34 True:i32@18 True:i32@22 True:i32@30 True:i32@34	33 00 00 00 01 00 05 00 00 00 00 00 00 00 03 00 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 03 00 00 30 75 00 00 00
76	2026-04-26T01:30:49.818Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x8d2c710		["0x33","0x7544fcc","0x5e8ead0","0x76ffedd8","0x8d2c71c","0x33","0x7544fcc","0x206","0x3","0x7230cb4"]	1	518	0x3
77	2026-04-26T01:30:49.818Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x8d2c710		["0x33","0x7544fcc","0x5e8ead0","0x76ffedd8","0x8d2c71c","0x33","0x7544fcc","0x206","0x3","0x7230cb4"]	2	3	0x7230cb4		18 99 68
78	2026-04-26T01:30:49.820Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived		0x0	[]
79	2026-04-26T01:30:49.822Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x8d2c710		["0x55","0x753d894","0x5e8ead0","0x76ffedd8","0x8d2c71c","0x55","0x753d894","0x206","0x3","0x7230cb4"]	0	85	0x753d894	True:u8@4 True:u8@18 True:u8@22 True:u8@30 True:u8@34 True:u8@42 True:u8@51 True:u8@53 True:i32@18 True:i32@22 True:i32@30 True:i32@34 True:i32@53	55 00 00 00 01 00 27 00 00 00 00 00 00 00 27 8a 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 fd 8d c6 6d 98 4e bf 4a a9 f4 df f5 12 60 b6 ba 03 00 00 00 c0 00 00 41 76 50 1c d5
80	2026-04-26T01:30:49.822Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x8d2c710		["0x55","0x753d894","0x5e8ead0","0x76ffedd8","0x8d2c71c","0x55","0x753d894","0x206","0x3","0x7230cb4"]	1	518	0x3
81	2026-04-26T01:30:49.822Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x8d2c710		["0x55","0x753d894","0x5e8ead0","0x76ffedd8","0x8d2c71c","0x55","0x753d894","0x206","0x3","0x7230cb4"]	2	3	0x7230cb4		18 99 68
82	2026-04-26T01:30:49.824Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived		0x0	[]
83	2026-04-26T01:30:54.764Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.PutRequest	0x1		["0x8d2c710","0x1","0x1","0x2","0x2","0x0","0x25","0x8dfd1e0","0x6fe84c","0xb7265f9f"]	0	2	0x2
84	2026-04-26T01:30:54.764Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.PutRequest	0x1		["0x8d2c710","0x1","0x1","0x2","0x2","0x0","0x25","0x8dfd1e0","0x6fe84c","0xb7265f9f"]	1	37	0x8dfd1e0	True:u8@1	21 01 00 90 17 00 58 6c 7c 73 44 80 cb 53 cc 99 b5 43 a8 06 00 08 f4 02 00 a7 00 0a 00 26 8a 00 00 03 00 00 00
85	2026-04-26T01:30:54.765Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.TransferData	0x8d2c710		["0x1","0x1","0x2","0x53","0x96cb020","0x691b8337","0x6fe89c","0x6fe88c","0x641add04","0x0"]	0	83	0x96cb020	True:u8@0 True:u8@14 True:u8@18 True:u8@26 True:u8@30 True:u8@38 True:u8@47 True:i32@14 True:i32@18 True:i32@26 True:i32@30	01 00 25 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 21 01 00 90 17 00 58 6c 7c 73 44 80 cb 53 cc 99 b5 43 a8 06 00 08 f4 02 00 a7 00 0a 00 26 8a 00 00 03 00 00 00
86	2026-04-26T01:30:54.766Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.TransferData		0x0	[]
87	2026-04-26T01:30:54.766Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.PutRequest		0x0	[]

22 KiB Raw Permalink Blame History

22 KiB

Raw Permalink Blame History