dohertj2/mxaccess
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
ceeaeefa710c28d29e03e71f9d6071e1ba2eff2a
mxaccess/captures/111-frida-write-secured-auth-protectedvalue/frida-events.tsv
T
Joseph Doherty fe2a6db786
rust / build / test / clippy / fmt (push) Has been cancelled
Details
Initial project state: .NET reference, design, Rust port (M0+M1), evidence 
Layout:
- src/                    .NET 10 x64 reference: MxNativeCodec, MxNativeClient,
                          MxAsbClient, probes, tests, harnesses. Executable spec.
- design/                 Architectural plan for the Rust port (M0–M6), error
                          model, protocol invariants, risks (R1–R16), adversarial
                          review log (review.md).
- rust/                   Rust workspace. M0 skeleton + M1 codec parity.
                          mxaccess-codec: 215 unit tests + 2 cross-implementation
                          parity tests (byte-identical against .NET reference).
                          Other crates are M0 stubs awaiting M2+.
- captures/               Frida + netsh + pcap evidence per CLAUDE.md
                          ("captures are evidence, not throwaway logs").
- analysis/               Decompiled C# (frida/proxy/decompiled-*),
                          Ghidra exports for native DLLs (`exports/` only —
                          working state at `projects/` and AVEVA's input
                          binaries at `input/` are gitignored).
- docs/                   Reverse-engineering reference docs.
- tools/                  Setup-LiveProbeEnv.ps1 (Infisical credential fetcher),
                          Compute-Crc.ps1 (.NET parity helper).
- .github/workflows/      Rust CI: fmt + build + test + clippy on Windows.
- LICENSE                 MIT (Joseph Doherty, 2026).

Verified:
- cargo test --workspace → 217 passed (215 unit + 2 .NET parity), 0 failed
- cargo clippy --workspace -- -D warnings → clean
- cargo fmt --all -- --check → clean
- cargo publish --dry-run -p mxaccess-codec → packages cleanly

Excluded from history (see .gitignore):
- **/bin, **/obj, **/target — build artifacts
- analysis/ghidra/projects/ — Ghidra working state (regenerable)
- analysis/ghidra/input/ — AVEVA proprietary DLLs (vendor IP)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-05 06:21:00 -04:00

75 lines
17 KiB
Plaintext
Raw Blame History

time event module name ecx retval args candidate_index candidate_size candidate_ptr value_hits hex
2026-04-26T01:23:07.668Z hook.installed LmxProxy.dll CLMXProxyServer.Write.variantA []
2026-04-26T01:23:07.669Z hook.installed LmxProxy.dll CLMXProxyServer.Write.variantB []
2026-04-26T01:23:07.669Z hook.installed LmxProxy.dll CLMXProxyServer.WriteSecured.variantA []
2026-04-26T01:23:07.670Z hook.installed LmxProxy.dll CLMXProxyServer.WriteSecured.variantB []
2026-04-26T01:23:07.670Z hook.installed LmxProxy.dll CLMXProxyServer.AddBufferedItem []
2026-04-26T01:23:07.670Z hook.installed LmxProxy.dll CLMXProxyServer.SetBufferedUpdateInterval []
2026-04-26T01:23:07.671Z hook.installed LmxProxy.dll CLMXProxyServer.AdviseSupervisory []
2026-04-26T01:23:07.671Z hook.installed LmxProxy.dll CProxy_ILMXProxyServerEvents2.Fire_OnBufferedDataChange []
2026-04-26T01:23:07.672Z hook.installed LmxProxy.dll CLMXProxyServer.AuthenticateUser []
2026-04-26T01:23:14.511Z hook.installed Lmx.dll MxConnection.PrebindReference []
2026-04-26T01:23:14.512Z hook.installed Lmx.dll MxConnection.UserRegisterPreboundReference []
2026-04-26T01:23:14.513Z hook.installed Lmx.dll IMxReference.GetMxHandle []
2026-04-26T01:23:14.513Z hook.installed Lmx.dll AccessManager.FixUpMxHandle []
2026-04-26T01:23:14.514Z hook.installed Lmx.dll PreboundReference.Resolve []
2026-04-26T01:23:14.515Z hook.installed Lmx.dll PreboundReference.OnPlatformResolveReferenceResults []
2026-04-26T01:23:14.515Z hook.installed Lmx.dll PreboundReference.OnSetAttributeResult []
2026-04-26T01:23:14.612Z hook.installed NmxAdptr.dll CNmxAdapter.TransferData []
2026-04-26T01:23:14.613Z hook.installed NmxAdptr.dll CNmxAdapter.ProcessDataReceived []
2026-04-26T01:23:14.613Z hook.installed NmxAdptr.dll CNmxAdapter.PutRequest []
2026-04-26T01:23:14.614Z hook.installed NmxAdptr.dll CNmxAdapter.PutRequestEx []
2026-04-26T01:23:14.667Z lmx.fixup-mxhandle.enter Lmx.dll AccessManager.FixUpMxHandle []
2026-04-26T01:23:14.667Z lmx.fixup-mxhandle.leave Lmx.dll AccessManager.FixUpMxHandle 0x4fe4a0 []
2026-04-26T01:23:14.668Z lmx.fixup-mxhandle.enter Lmx.dll AccessManager.FixUpMxHandle []
2026-04-26T01:23:14.668Z lmx.fixup-mxhandle.leave Lmx.dll AccessManager.FixUpMxHandle 0x4fe4a0 []
2026-04-26T01:23:14.757Z lmx.prebind.enter Lmx.dll MxConnection.PrebindReference []
2026-04-26T01:23:14.758Z lmx.mxhandle.read Lmx.dll IMxReference.GetMxHandle 0x4fea24 []
2026-04-26T01:23:14.759Z lmx.prebound-resolve.enter Lmx.dll PreboundReference.Resolve []
2026-04-26T01:23:14.760Z lmx.mxhandle.read Lmx.dll IMxReference.GetMxHandle 0x4fe9b4 []
2026-04-26T01:23:14.760Z lmx.mxhandle.read Lmx.dll IMxReference.GetMxHandle 0x4fe9b4 []
2026-04-26T01:23:14.761Z lmx.mxhandle.read Lmx.dll IMxReference.GetMxHandle 0x4fe9b4 []
2026-04-26T01:23:14.762Z lmx.prebound-resolve.leave Lmx.dll PreboundReference.Resolve 0x70fe1e01 []
2026-04-26T01:23:14.762Z lmx.prebind.leave Lmx.dll MxConnection.PrebindReference []
2026-04-26T01:23:14.764Z call.enter LmxProxy.dll CLMXProxyServer.AdviseSupervisory 0x4feb7c "[""0x5968fe0"",""0x1"",""0x1"",""0xd6177ed7"",""0x74794704""]"
2026-04-26T01:23:14.764Z lmx.fixup-mxhandle.enter Lmx.dll AccessManager.FixUpMxHandle []
2026-04-26T01:23:14.764Z lmx.fixup-mxhandle.leave Lmx.dll AccessManager.FixUpMxHandle 0x4fe9fc []
2026-04-26T01:23:14.765Z lmx.fixup-mxhandle.enter Lmx.dll AccessManager.FixUpMxHandle []
2026-04-26T01:23:14.765Z lmx.fixup-mxhandle.leave Lmx.dll AccessManager.FixUpMxHandle 0x4fd690 []
2026-04-26T01:23:14.765Z call.leave LmxProxy.dll CLMXProxyServer.AdviseSupervisory 0x0 []
2026-04-26T01:23:14.895Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x8bcc710"",""0x1"",""0x1"",""0x1"",""0x2"",""0x0"",""0x13a"",""0x8bd0620"",""0x4fe840"",""0x5cbecfd7""]" 0 1 0x2
2026-04-26T01:23:14.895Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x8bcc710"",""0x1"",""0x1"",""0x1"",""0x2"",""0x0"",""0x13a"",""0x8bd0620"",""0x4fe840"",""0x5cbecfd7""]" 1 314 0x8bd0620 True:u8@1 True:u8@3 True:u8@4 True:u8@6 True:u8@111 True:u8@112 True:u8@114 True:u8@116 True:u8@130 True:u8@136 True:u8@156 True:u8@161 True:u8@163 True:u8@164 True:u8@166 True:u8@283 True:u8@284 True:u8@286 True:u8@288 True:u8@302 True:u8@308 True:i32@6 True:i32@116 True:i32@156 True:i32@166 True:i32@288 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 6a 00 00 00 40 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 a8 fc bc 08 1f 01 00 0e e9 1b 3a 89 4d 59 41 9b 7a 70 d5 94 00 3b 82 00 00 01 00 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 76 00 00 00 4c 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 28 03 bd 08 20 01 00 02 00 00 00
2026-04-26T01:23:14.898Z nmx.enter NmxAdptr.dll CNmxAdapter.TransferData 0x8bcc710 "[""0x1"",""0x1"",""0x1"",""0x168"",""0x956e020"",""0xf5940164"",""0x8bd01ec"",""0x8bd01dc"",""0x641add04"",""0x0""]" 0 360 0x956e020 True:u8@0 True:u8@3 True:u8@10 True:u8@14 True:u8@18 True:u8@26 True:u8@30 True:u8@34 True:u8@38 True:u8@47 True:u8@49 True:u8@50 True:u8@52 True:u8@157 True:u8@158 True:u8@160 True:u8@162 True:u8@176 True:u8@182 True:u8@202 True:u8@207 True:u8@209 True:u8@210 True:u8@212 True:u8@329 True:u8@330 True:u8@332 True:u8@334 True:u8@348 True:u8@354 True:i32@3 True:i32@10 True:i32@14 True:i32@18 True:i32@26 True:i32@30 True:i32@34 True:i32@52 True:i32@162 True:i32@202 True:i32@212 True:i32@334 01 00 3a 01 00 00 00 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 02 00 00 30 75 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 6a 00 00 00 40 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 a8 fc bc 08 1f 01 00 0e e9 1b 3a 89 4d 59 41 9b 7a 70 d5 94 00 3b 82 00 00 01 00 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 76 00 00 00 4c 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 28 03 bd 08 20 01 00 02 00 00 00
2026-04-26T01:23:14.899Z nmx.leave NmxAdptr.dll CNmxAdapter.TransferData 0x0 []
2026-04-26T01:23:14.899Z nmx.leave NmxAdptr.dll CNmxAdapter.PutRequest 0x0 []
2026-04-26T01:23:14.900Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x8bcc710"",""0x1"",""0x1"",""0x2"",""0x2"",""0x0"",""0x27"",""0x8c9e080"",""0x4fe840"",""0x5cbecfd7""]" 0 2 0x2
2026-04-26T01:23:14.900Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x8bcc710"",""0x1"",""0x1"",""0x2"",""0x2"",""0x0"",""0x27"",""0x8c9e080"",""0x4fe840"",""0x5cbecfd7""]" 1 39 0x8c9e080 True:u8@1 1f 01 00 0e e9 1b 3a 89 4d 59 41 9b 7a 70 d5 94 00 3b 82 00 00 06 00 08 f4 02 00 a6 00 0a 00 bb 67 00 00 03 00 00 00
2026-04-26T01:23:14.901Z nmx.enter NmxAdptr.dll CNmxAdapter.TransferData 0x8bcc710 "[""0x1"",""0x1"",""0x2"",""0x55"",""0x956e020"",""0xf5940164"",""0x8ca955c"",""0x8ca954c"",""0x641add04"",""0x0""]" 0 85 0x956e020 True:u8@0 True:u8@14 True:u8@18 True:u8@26 True:u8@30 True:u8@38 True:u8@47 True:i32@14 True:i32@18 True:i32@26 True:i32@30 01 00 27 00 00 00 00 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 1f 01 00 0e e9 1b 3a 89 4d 59 41 9b 7a 70 d5 94 00 3b 82 00 00 06 00 08 f4 02 00 a6 00 0a 00 bb 67 00 00 03 00 00 00
2026-04-26T01:23:14.902Z nmx.leave NmxAdptr.dll CNmxAdapter.TransferData 0x0 []
2026-04-26T01:23:14.902Z nmx.leave NmxAdptr.dll CNmxAdapter.PutRequest 0x0 []
2026-04-26T01:23:14.925Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x8bcc710 "[""0x5c"",""0x7760b8c"",""0x70eee40"",""0x76ffedd8"",""0x8bcc71c"",""0x5c"",""0x7760b8c"",""0x206"",""0x3"",""0x73442cc""]" 0 92 0x7760b8c True:u8@4 True:u8@18 True:u8@22 True:u8@30 True:u8@34 True:u8@54 True:u8@56 True:i32@18 True:i32@22 True:i32@30 True:i32@34 5c 00 00 00 01 00 2e 00 00 00 00 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 00 00 50 80 01 00 01 00 02 00 30 75 00 00 d0 e9 c4 40 93 bf 08 47 a6 5d d5 73 ef c4 8f f1 0e e9 1b 3a 89 4d 59 41 9b 7a 70 d5
2026-04-26T01:23:14.925Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x8bcc710 "[""0x5c"",""0x7760b8c"",""0x70eee40"",""0x76ffedd8"",""0x8bcc71c"",""0x5c"",""0x7760b8c"",""0x206"",""0x3"",""0x73442cc""]" 1 518 0x3
2026-04-26T01:23:14.925Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x8bcc710 "[""0x5c"",""0x7760b8c"",""0x70eee40"",""0x76ffedd8"",""0x8bcc71c"",""0x5c"",""0x7760b8c"",""0x206"",""0x3"",""0x73442cc""]" 2 3 0x73442cc 78 04 10
2026-04-26T01:23:14.927Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x0 []
2026-04-26T01:23:14.930Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x8bcc710 "[""0x69"",""0x76f3f1c"",""0x70eee40"",""0x76ffedd8"",""0x8bcc71c"",""0x69"",""0x76f3f1c"",""0x206"",""0x3"",""0x73442cc""]" 0 105 0x76f3f1c True:u8@4 True:u8@18 True:u8@22 True:u8@30 True:u8@34 True:u8@42 True:u8@51 True:u8@53 True:i32@18 True:i32@22 True:i32@30 True:i32@34 True:i32@53 69 00 00 00 01 00 3b 00 00 00 00 00 00 00 1b 8a 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 32 01 00 01 00 00 00 d0 e9 c4 40 93 bf 08 47 a6 5d d5 73 ef c4 8f f1 0e e9 1b 3a 89 4d 59 41 9b 7a 70 d5 94 00 3b 82 03 00 00 00 03 00 00 00 c0 00 e0 51 14 30 81 d4
2026-04-26T01:23:14.930Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x8bcc710 "[""0x69"",""0x76f3f1c"",""0x70eee40"",""0x76ffedd8"",""0x8bcc71c"",""0x69"",""0x76f3f1c"",""0x206"",""0x3"",""0x73442cc""]" 1 518 0x3
2026-04-26T01:23:14.930Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x8bcc710 "[""0x69"",""0x76f3f1c"",""0x70eee40"",""0x76ffedd8"",""0x8bcc71c"",""0x69"",""0x76f3f1c"",""0x206"",""0x3"",""0x73442cc""]" 2 3 0x73442cc 78 04 10
2026-04-26T01:23:14.932Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x0 []
2026-04-26T01:23:14.936Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x8bcc710 "[""0x2c2"",""0x7760b8c"",""0x70eee40"",""0x76ffedd8"",""0x8bcc71c"",""0x2c2"",""0x7760b8c"",""0x206"",""0x3"",""0x73442cc""]" 0 706 0x7760b8c True:u8@4 True:u8@14 True:u8@18 True:u8@22 True:u8@26 True:u8@30 True:u8@34 True:u8@205 True:u8@206 True:u8@208 True:u8@210 True:u8@224 True:u8@342 True:u8@344 True:u8@346 True:u8@563 True:u8@564 True:u8@566 True:u8@568 True:u8@582 True:u8@700 True:u8@702 True:u8@704 True:i32@14 True:i32@18 True:i32@22 True:i32@26 True:i32@30 True:i32@34 c2 02 00 00 01 00 94 02 00 00 00 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 40 1f 50 80 08 a6 00 00 00 40 00 00 91 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 18 00 00 00 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 00 00 28 00 00 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 53 f2 9a 00 6a 00 0a 00 5f f1 00 00 01 6c 00 00 00 41 00 6e 00 20 00 69 00 6e 00 74 00 65 00 72 00 6e 00 61 00 6c 00 20 00 65 00 72 00 72 00 6f 00 72 00 20 00 6f 00 63 00 63 00 75 00 72 00 72 00 65 00 64 00 20 00 69 00 6e 00 20 00 74 00 68 00 65 00 20 00 42 00 61 00 73 00 65 00 20 00 52 00 75 00 6e 00 74 00 69 00 6d 00 65 00 20 00 4f 00 62 00 6a 00 65 00 63 00 74 00 00 00 1f 00 00 50 80 01 00 01 00 01 00 30 75 00 00 b9 7a fe 75 f8 12 b2 46 8d ec a5 46 77 66 6d 6b 0e e9 1b 3a 89 4d 59 41 9b 7a 70 d5 94 00 3b 82 40 1f 50 80 08 be 00 00 00 4c 00 00 91 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 18 00 00 00 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 00 00 34 00 00 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 53 f2 9a 00 6b 00 0a 00 87 3a 00 00 01 6c 00 00 00 41 00 6e 00 20 00 69 00 6e 00 74 00 65 00 72 00 6e 00 61 00 6c 00 20 00 65 00 72 00 72 00 6f 00 72 00 20 00 6f 00 63 00 63 00 75 00 72 00 72 00 65 00 64 00 20 00 69 00 6e 00 20 00 74 00 68 00 65 00 20 00 42 00 61 00 73 00 65 00 20 00 52 00 75 00 6e 00 74 00 69 00 6d 00 65 00 20 00 4f 00 62 00 6a 00 65 00 63 00 74 00 00 00 20 00 00 50 80 01 00 01 00 01 00
2026-04-26T01:23:14.936Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x8bcc710 "[""0x2c2"",""0x7760b8c"",""0x70eee40"",""0x76ffedd8"",""0x8bcc71c"",""0x2c2"",""0x7760b8c"",""0x206"",""0x3"",""0x73442cc""]" 1 518 0x3
2026-04-26T01:23:14.936Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x8bcc710 "[""0x2c2"",""0x7760b8c"",""0x70eee40"",""0x76ffedd8"",""0x8bcc71c"",""0x2c2"",""0x7760b8c"",""0x206"",""0x3"",""0x73442cc""]" 2 3 0x73442cc 78 04 10
2026-04-26T01:23:14.938Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x0 []
2026-04-26T01:23:14.940Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x8bcc710 "[""0x97"",""0x76f1d0c"",""0x70eee40"",""0x76ffedd8"",""0x8bcc71c"",""0x97"",""0x76f1d0c"",""0x206"",""0x3"",""0x73442cc""]" 0 151 0x76f1d0c True:u8@4 True:u8@18 True:u8@22 True:u8@26 True:u8@30 True:u8@34 True:u8@42 True:u8@51 True:u8@89 True:u8@106 True:u8@119 True:u8@139 True:i32@18 True:i32@22 True:i32@26 True:i32@30 True:i32@34 True:i32@89 97 00 00 00 01 00 69 00 00 00 00 00 00 00 06 17 0d 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 32 01 00 02 00 00 00 b9 7a fe 75 f8 12 b2 46 8d ec a5 46 77 66 6d 6b 0e e9 1b 3a 89 4d 59 41 9b 7a 70 d5 94 00 3b 82 01 00 00 00 03 00 00 00 c0 00 20 2e 5a 46 28 d3 dc 01 06 0a 00 00 00 00 a0 41 c3 55 bd dc 01 00 00 02 00 00 00 03 00 00 00 c0 00 80 18 5b 46 28 d3 dc 01 06 0a 00 00 00 80 c1 75 25 a5 bd
2026-04-26T01:23:14.940Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x8bcc710 "[""0x97"",""0x76f1d0c"",""0x70eee40"",""0x76ffedd8"",""0x8bcc71c"",""0x97"",""0x76f1d0c"",""0x206"",""0x3"",""0x73442cc""]" 1 518 0x3
2026-04-26T01:23:14.940Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x8bcc710 "[""0x97"",""0x76f1d0c"",""0x70eee40"",""0x76ffedd8"",""0x8bcc71c"",""0x97"",""0x76f1d0c"",""0x206"",""0x3"",""0x73442cc""]" 2 3 0x73442cc 78 04 10
2026-04-26T01:23:14.942Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x0 []
2026-04-26T01:23:15.803Z call.enter LmxProxy.dll CLMXProxyServer.AuthenticateUser 0x4feb40 []
2026-04-26T01:23:15.826Z call.leave LmxProxy.dll CLMXProxyServer.AuthenticateUser 0x0 []
2026-04-26T01:23:15.841Z call.enter LmxProxy.dll CLMXProxyServer.WriteSecured.variantA 0x4feb4c "[""0x5968fe0"",""0x1"",""0x1"",""0x1"",""0x0"",""0xb"",""0x0"",""0xffff"",""0x0"",""0xd6177ed7""]"
2026-04-26T01:23:15.841Z call.leave LmxProxy.dll CLMXProxyServer.WriteSecured.variantA 0x80004021 []
2026-04-26T01:23:20.931Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x8bcc710"",""0x1"",""0x1"",""0x2"",""0x2"",""0x0"",""0x25"",""0x8c9dcd8"",""0x4fe89c"",""0x5cbecfe3""]" 0 2 0x2
2026-04-26T01:23:20.931Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x8bcc710"",""0x1"",""0x1"",""0x2"",""0x2"",""0x0"",""0x25"",""0x8c9dcd8"",""0x4fe89c"",""0x5cbecfe3""]" 1 37 0x8c9dcd8 True:u8@1 21 01 00 0e e9 1b 3a 89 4d 59 41 9b 7a 70 d5 94 00 3b 82 06 00 08 f4 02 00 a6 00 0a 00 bb 67 00 00 03 00 00 00
2026-04-26T01:23:20.932Z nmx.enter NmxAdptr.dll CNmxAdapter.TransferData 0x8bcc710 "[""0x1"",""0x1"",""0x2"",""0x53"",""0x956e020"",""0xf5940150"",""0x4fe8ec"",""0x4fe8dc"",""0x641add04"",""0x0""]" 0 83 0x956e020 True:u8@0 True:u8@14 True:u8@18 True:u8@26 True:u8@30 True:u8@38 True:u8@47 True:i32@14 True:i32@18 True:i32@26 True:i32@30 01 00 25 00 00 00 00 00 00 00 03 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 21 01 00 0e e9 1b 3a 89 4d 59 41 9b 7a 70 d5 94 00 3b 82 06 00 08 f4 02 00 a6 00 0a 00 bb 67 00 00 03 00 00 00
2026-04-26T01:23:20.933Z nmx.leave NmxAdptr.dll CNmxAdapter.TransferData 0x0 []
2026-04-26T01:23:20.933Z nmx.leave NmxAdptr.dll CNmxAdapter.PutRequest 0x0 []
Reference in New Issue View Git Blame Copy Permalink