dohertj2/mxaccess
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
eb6c689f0916a5fbd2fc1dfd005b2ce418e8bf29
mxaccess/captures/112-frida-write-secured-auth-verified-protectedvalue1/frida-events.tsv
T
Joseph Doherty fe2a6db786
rust / build / test / clippy / fmt (push) Has been cancelled
Details
Initial project state: .NET reference, design, Rust port (M0+M1), evidence 
Layout:
- src/                    .NET 10 x64 reference: MxNativeCodec, MxNativeClient,
                          MxAsbClient, probes, tests, harnesses. Executable spec.
- design/                 Architectural plan for the Rust port (M0–M6), error
                          model, protocol invariants, risks (R1–R16), adversarial
                          review log (review.md).
- rust/                   Rust workspace. M0 skeleton + M1 codec parity.
                          mxaccess-codec: 215 unit tests + 2 cross-implementation
                          parity tests (byte-identical against .NET reference).
                          Other crates are M0 stubs awaiting M2+.
- captures/               Frida + netsh + pcap evidence per CLAUDE.md
                          ("captures are evidence, not throwaway logs").
- analysis/               Decompiled C# (frida/proxy/decompiled-*),
                          Ghidra exports for native DLLs (`exports/` only —
                          working state at `projects/` and AVEVA's input
                          binaries at `input/` are gitignored).
- docs/                   Reverse-engineering reference docs.
- tools/                  Setup-LiveProbeEnv.ps1 (Infisical credential fetcher),
                          Compute-Crc.ps1 (.NET parity helper).
- .github/workflows/      Rust CI: fmt + build + test + clippy on Windows.
- LICENSE                 MIT (Joseph Doherty, 2026).

Verified:
- cargo test --workspace → 217 passed (215 unit + 2 .NET parity), 0 failed
- cargo clippy --workspace -- -D warnings → clean
- cargo fmt --all -- --check → clean
- cargo publish --dry-run -p mxaccess-codec → packages cleanly

Excluded from history (see .gitignore):
- **/bin, **/obj, **/target — build artifacts
- analysis/ghidra/projects/ — Ghidra working state (regenerable)
- analysis/ghidra/input/ — AVEVA proprietary DLLs (vendor IP)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-05 06:21:00 -04:00

75 lines
17 KiB
Plaintext
Raw Blame History

time event module name ecx retval args candidate_index candidate_size candidate_ptr value_hits hex
2026-04-26T01:24:05.401Z hook.installed LmxProxy.dll CLMXProxyServer.Write.variantA []
2026-04-26T01:24:05.402Z hook.installed LmxProxy.dll CLMXProxyServer.Write.variantB []
2026-04-26T01:24:05.402Z hook.installed LmxProxy.dll CLMXProxyServer.WriteSecured.variantA []
2026-04-26T01:24:05.403Z hook.installed LmxProxy.dll CLMXProxyServer.WriteSecured.variantB []
2026-04-26T01:24:05.403Z hook.installed LmxProxy.dll CLMXProxyServer.AddBufferedItem []
2026-04-26T01:24:05.404Z hook.installed LmxProxy.dll CLMXProxyServer.SetBufferedUpdateInterval []
2026-04-26T01:24:05.405Z hook.installed LmxProxy.dll CLMXProxyServer.AdviseSupervisory []
2026-04-26T01:24:05.405Z hook.installed LmxProxy.dll CProxy_ILMXProxyServerEvents2.Fire_OnBufferedDataChange []
2026-04-26T01:24:05.406Z hook.installed LmxProxy.dll CLMXProxyServer.AuthenticateUser []
2026-04-26T01:24:18.601Z hook.installed Lmx.dll MxConnection.PrebindReference []
2026-04-26T01:24:18.602Z hook.installed Lmx.dll MxConnection.UserRegisterPreboundReference []
2026-04-26T01:24:18.603Z hook.installed Lmx.dll IMxReference.GetMxHandle []
2026-04-26T01:24:18.603Z hook.installed Lmx.dll AccessManager.FixUpMxHandle []
2026-04-26T01:24:18.604Z hook.installed Lmx.dll PreboundReference.Resolve []
2026-04-26T01:24:18.604Z hook.installed Lmx.dll PreboundReference.OnPlatformResolveReferenceResults []
2026-04-26T01:24:18.605Z hook.installed Lmx.dll PreboundReference.OnSetAttributeResult []
2026-04-26T01:24:18.779Z lmx.fixup-mxhandle.enter Lmx.dll AccessManager.FixUpMxHandle []
2026-04-26T01:24:18.780Z lmx.fixup-mxhandle.leave Lmx.dll AccessManager.FixUpMxHandle 0xcfe6bc []
2026-04-26T01:24:18.780Z lmx.fixup-mxhandle.enter Lmx.dll AccessManager.FixUpMxHandle []
2026-04-26T01:24:18.781Z lmx.fixup-mxhandle.leave Lmx.dll AccessManager.FixUpMxHandle 0xcfe6bc []
2026-04-26T01:24:18.803Z hook.installed NmxAdptr.dll CNmxAdapter.TransferData []
2026-04-26T01:24:18.804Z hook.installed NmxAdptr.dll CNmxAdapter.ProcessDataReceived []
2026-04-26T01:24:18.804Z hook.installed NmxAdptr.dll CNmxAdapter.PutRequest []
2026-04-26T01:24:18.805Z hook.installed NmxAdptr.dll CNmxAdapter.PutRequestEx []
2026-04-26T01:24:18.877Z lmx.prebind.enter Lmx.dll MxConnection.PrebindReference []
2026-04-26T01:24:18.877Z lmx.mxhandle.read Lmx.dll IMxReference.GetMxHandle 0xcfec50 []
2026-04-26T01:24:18.878Z lmx.prebound-resolve.enter Lmx.dll PreboundReference.Resolve []
2026-04-26T01:24:18.879Z lmx.mxhandle.read Lmx.dll IMxReference.GetMxHandle 0xcfebe0 []
2026-04-26T01:24:18.879Z lmx.mxhandle.read Lmx.dll IMxReference.GetMxHandle 0xcfebe0 []
2026-04-26T01:24:18.880Z lmx.mxhandle.read Lmx.dll IMxReference.GetMxHandle 0xcfebe0 []
2026-04-26T01:24:18.881Z lmx.prebound-resolve.leave Lmx.dll PreboundReference.Resolve 0x70fe1e01 []
2026-04-26T01:24:18.881Z lmx.prebind.leave Lmx.dll MxConnection.PrebindReference []
2026-04-26T01:24:18.882Z call.enter LmxProxy.dll CLMXProxyServer.AdviseSupervisory 0xcfedac "[""0x5d08fe0"",""0x1"",""0x1"",""0x8f5a4129"",""0x74794704""]"
2026-04-26T01:24:18.883Z lmx.fixup-mxhandle.enter Lmx.dll AccessManager.FixUpMxHandle []
2026-04-26T01:24:18.883Z lmx.fixup-mxhandle.leave Lmx.dll AccessManager.FixUpMxHandle 0xcfec2c []
2026-04-26T01:24:18.883Z lmx.fixup-mxhandle.enter Lmx.dll AccessManager.FixUpMxHandle []
2026-04-26T01:24:18.884Z lmx.fixup-mxhandle.leave Lmx.dll AccessManager.FixUpMxHandle 0xcfd8c0 []
2026-04-26T01:24:18.884Z call.leave LmxProxy.dll CLMXProxyServer.AdviseSupervisory 0x0 []
2026-04-26T01:24:19.009Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x92ec710"",""0x1"",""0x1"",""0x1"",""0x2"",""0x0"",""0x13a"",""0x92f0620"",""0xcfea70"",""0x29f36840""]" 0 1 0x2
2026-04-26T01:24:19.009Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x92ec710"",""0x1"",""0x1"",""0x1"",""0x2"",""0x0"",""0x13a"",""0x92f0620"",""0xcfea70"",""0x29f36840""]" 1 314 0x92f0620 True:u8@1 True:u8@3 True:u8@4 True:u8@6 True:u8@111 True:u8@112 True:u8@114 True:u8@116 True:u8@130 True:u8@136 True:u8@156 True:u8@161 True:u8@163 True:u8@164 True:u8@166 True:u8@283 True:u8@284 True:u8@286 True:u8@288 True:u8@302 True:u8@308 True:i32@6 True:i32@116 True:i32@156 True:i32@166 True:i32@288 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 6a 00 00 00 40 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 a8 fc 2e 09 1f 01 00 40 12 ae 08 37 e9 69 42 ab 32 52 82 cf 64 20 2a 00 00 01 00 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 76 00 00 00 4c 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 28 03 2f 09 20 01 00 02 00 00 00
2026-04-26T01:24:19.011Z nmx.enter NmxAdptr.dll CNmxAdapter.TransferData 0x92ec710 "[""0x1"",""0x1"",""0x1"",""0x168"",""0xa4f4020"",""0xd2d342b"",""0x92f01ec"",""0x92f01dc"",""0x641add04"",""0x0""]" 0 360 0xa4f4020 True:u8@0 True:u8@3 True:u8@10 True:u8@14 True:u8@18 True:u8@26 True:u8@30 True:u8@34 True:u8@38 True:u8@47 True:u8@49 True:u8@50 True:u8@52 True:u8@157 True:u8@158 True:u8@160 True:u8@162 True:u8@176 True:u8@182 True:u8@202 True:u8@207 True:u8@209 True:u8@210 True:u8@212 True:u8@329 True:u8@330 True:u8@332 True:u8@334 True:u8@348 True:u8@354 True:i32@3 True:i32@10 True:i32@14 True:i32@18 True:i32@26 True:i32@30 True:i32@34 True:i32@52 True:i32@162 True:i32@202 True:i32@212 True:i32@334 01 00 3a 01 00 00 00 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 02 00 00 30 75 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 6a 00 00 00 40 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 a8 fc 2e 09 1f 01 00 40 12 ae 08 37 e9 69 42 ab 32 52 82 cf 64 20 2a 00 00 01 00 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 76 00 00 00 4c 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 28 03 2f 09 20 01 00 02 00 00 00
2026-04-26T01:24:19.012Z nmx.leave NmxAdptr.dll CNmxAdapter.TransferData 0x0 []
2026-04-26T01:24:19.012Z nmx.leave NmxAdptr.dll CNmxAdapter.PutRequest 0x0 []
2026-04-26T01:24:19.013Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x92ec710"",""0x1"",""0x1"",""0x2"",""0x2"",""0x0"",""0x27"",""0x93bda98"",""0xcfea70"",""0x29f36840""]" 0 2 0x2
2026-04-26T01:24:19.013Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x92ec710"",""0x1"",""0x1"",""0x2"",""0x2"",""0x0"",""0x27"",""0x93bda98"",""0xcfea70"",""0x29f36840""]" 1 39 0x93bda98 True:u8@1 1f 01 00 40 12 ae 08 37 e9 69 42 ab 32 52 82 cf 64 20 2a 00 00 06 00 08 f4 02 00 a7 00 0a 00 26 8a 00 00 03 00 00 00
2026-04-26T01:24:19.015Z nmx.enter NmxAdptr.dll CNmxAdapter.TransferData 0x92ec710 "[""0x1"",""0x1"",""0x2"",""0x55"",""0xa4f4020"",""0xd2d342b"",""0x93c955c"",""0x93c954c"",""0x641add04"",""0x0""]" 0 85 0xa4f4020 True:u8@0 True:u8@14 True:u8@18 True:u8@26 True:u8@30 True:u8@38 True:u8@47 True:i32@14 True:i32@18 True:i32@26 True:i32@30 01 00 27 00 00 00 00 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 1f 01 00 40 12 ae 08 37 e9 69 42 ab 32 52 82 cf 64 20 2a 00 00 06 00 08 f4 02 00 a7 00 0a 00 26 8a 00 00 03 00 00 00
2026-04-26T01:24:19.016Z nmx.leave NmxAdptr.dll CNmxAdapter.TransferData 0x0 []
2026-04-26T01:24:19.016Z nmx.leave NmxAdptr.dll CNmxAdapter.PutRequest 0x0 []
2026-04-26T01:24:19.029Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x92ec710 "[""0x5c"",""0x7af413c"",""0x747ec20"",""0x76ffedd8"",""0x92ec71c"",""0x5c"",""0x7af413c"",""0x206"",""0x3"",""0x776b214""]" 0 92 0x7af413c True:u8@4 True:u8@18 True:u8@22 True:u8@30 True:u8@34 True:u8@54 True:u8@56 True:u8@73 True:i32@18 True:i32@22 True:i32@30 True:i32@34 5c 00 00 00 01 00 2e 00 00 00 00 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 00 00 50 80 01 00 01 00 02 00 30 75 00 00 21 34 45 ea 24 63 33 4c 88 01 26 b8 cc f3 10 ef 40 12 ae 08 37 e9 69 42 ab 32 52 82
2026-04-26T01:24:19.029Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x92ec710 "[""0x5c"",""0x7af413c"",""0x747ec20"",""0x76ffedd8"",""0x92ec71c"",""0x5c"",""0x7af413c"",""0x206"",""0x3"",""0x776b214""]" 1 518 0x3
2026-04-26T01:24:19.029Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x92ec710 "[""0x5c"",""0x7af413c"",""0x747ec20"",""0x76ffedd8"",""0x92ec71c"",""0x5c"",""0x7af413c"",""0x206"",""0x3"",""0x776b214""]" 2 3 0x776b214 b0 fa 74
2026-04-26T01:24:19.031Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x0 []
2026-04-26T01:24:19.035Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x92ec710 "[""0x69"",""0x7af7454"",""0x747ec20"",""0x76ffedd8"",""0x92ec71c"",""0x69"",""0x7af7454"",""0x206"",""0x3"",""0x776b214""]" 0 105 0x7af7454 True:u8@4 True:u8@18 True:u8@22 True:u8@30 True:u8@34 True:u8@42 True:u8@51 True:u8@53 True:u8@66 True:i32@18 True:i32@22 True:i32@30 True:i32@34 True:i32@53 69 00 00 00 01 00 3b 00 00 00 00 00 00 00 1f 8a 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 32 01 00 01 00 00 00 21 34 45 ea 24 63 33 4c 88 01 26 b8 cc f3 10 ef 40 12 ae 08 37 e9 69 42 ab 32 52 82 cf 64 20 2a 03 00 00 00 03 00 00 00 c0 00 c0 32 3e 40 81 d4
2026-04-26T01:24:19.035Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x92ec710 "[""0x69"",""0x7af7454"",""0x747ec20"",""0x76ffedd8"",""0x92ec71c"",""0x69"",""0x7af7454"",""0x206"",""0x3"",""0x776b214""]" 1 518 0x3
2026-04-26T01:24:19.035Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x92ec710 "[""0x69"",""0x7af7454"",""0x747ec20"",""0x76ffedd8"",""0x92ec71c"",""0x69"",""0x7af7454"",""0x206"",""0x3"",""0x776b214""]" 2 3 0x776b214 b0 fa 74
2026-04-26T01:24:19.036Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x0 []
2026-04-26T01:24:19.041Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x92ec710 "[""0x2c2"",""0x7af413c"",""0x747ec20"",""0x76ffedd8"",""0x92ec71c"",""0x2c2"",""0x7af413c"",""0x206"",""0x3"",""0x776b214""]" 0 706 0x7af413c True:u8@4 True:u8@14 True:u8@18 True:u8@22 True:u8@26 True:u8@30 True:u8@34 True:u8@205 True:u8@206 True:u8@208 True:u8@210 True:u8@224 True:u8@342 True:u8@344 True:u8@346 True:u8@563 True:u8@564 True:u8@566 True:u8@568 True:u8@582 True:u8@700 True:u8@702 True:u8@704 True:i32@14 True:i32@18 True:i32@22 True:i32@26 True:i32@30 True:i32@34 c2 02 00 00 01 00 94 02 00 00 00 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 40 1f 50 80 08 a6 00 00 00 40 00 00 91 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 18 00 00 00 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 00 00 28 00 00 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 53 f2 9a 00 6a 00 0a 00 5f f1 00 00 01 6c 00 00 00 41 00 6e 00 20 00 69 00 6e 00 74 00 65 00 72 00 6e 00 61 00 6c 00 20 00 65 00 72 00 72 00 6f 00 72 00 20 00 6f 00 63 00 63 00 75 00 72 00 72 00 65 00 64 00 20 00 69 00 6e 00 20 00 74 00 68 00 65 00 20 00 42 00 61 00 73 00 65 00 20 00 52 00 75 00 6e 00 74 00 69 00 6d 00 65 00 20 00 4f 00 62 00 6a 00 65 00 63 00 74 00 00 00 1f 00 00 50 80 01 00 01 00 01 00 30 75 00 00 1a c6 c4 91 bb bf e7 41 80 67 26 c3 82 c0 20 37 40 12 ae 08 37 e9 69 42 ab 32 52 82 cf 64 20 2a 40 1f 50 80 08 be 00 00 00 4c 00 00 91 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 18 00 00 00 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 00 00 34 00 00 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 53 f2 9a 00 6b 00 0a 00 87 3a 00 00 01 6c 00 00 00 41 00 6e 00 20 00 69 00 6e 00 74 00 65 00 72 00 6e 00 61 00 6c 00 20 00 65 00 72 00 72 00 6f 00 72 00 20 00 6f 00 63 00 63 00 75 00 72 00 72 00 65 00 64 00 20 00 69 00 6e 00 20 00 74 00 68 00 65 00 20 00 42 00 61 00 73 00 65 00 20 00 52 00 75 00 6e 00 74 00 69 00 6d 00 65 00 20 00 4f 00 62 00 6a 00 65 00 63 00 74 00 00 00 20 00 00 50 80 01 00 01 00 01 00
2026-04-26T01:24:19.041Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x92ec710 "[""0x2c2"",""0x7af413c"",""0x747ec20"",""0x76ffedd8"",""0x92ec71c"",""0x2c2"",""0x7af413c"",""0x206"",""0x3"",""0x776b214""]" 1 518 0x3
2026-04-26T01:24:19.041Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x92ec710 "[""0x2c2"",""0x7af413c"",""0x747ec20"",""0x76ffedd8"",""0x92ec71c"",""0x2c2"",""0x7af413c"",""0x206"",""0x3"",""0x776b214""]" 2 3 0x776b214 b0 fa 74
2026-04-26T01:24:19.042Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x0 []
2026-04-26T01:24:19.045Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x92ec710 "[""0x97"",""0x7af7454"",""0x747ec20"",""0x76ffedd8"",""0x92ec71c"",""0x97"",""0x7af7454"",""0x206"",""0x3"",""0x776b214""]" 0 151 0x7af7454 True:u8@4 True:u8@18 True:u8@22 True:u8@26 True:u8@30 True:u8@34 True:u8@42 True:u8@51 True:u8@89 True:u8@106 True:u8@119 True:u8@139 True:i32@18 True:i32@22 True:i32@26 True:i32@30 True:i32@34 True:i32@89 97 00 00 00 01 00 69 00 00 00 00 00 00 00 09 18 0d 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 32 01 00 02 00 00 00 1a c6 c4 91 bb bf e7 41 80 67 26 c3 82 c0 20 37 40 12 ae 08 37 e9 69 42 ab 32 52 82 cf 64 20 2a 01 00 00 00 03 00 00 00 c0 00 20 2e 5a 46 28 d3 dc 01 06 0a 00 00 00 00 a0 41 c3 55 bd dc 01 00 00 02 00 00 00 03 00 00 00 c0 00 80 18 5b 46 28 d3 dc 01 06 0a 00 00 00 80 c1 75 25 a5 bd
2026-04-26T01:24:19.045Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x92ec710 "[""0x97"",""0x7af7454"",""0x747ec20"",""0x76ffedd8"",""0x92ec71c"",""0x97"",""0x7af7454"",""0x206"",""0x3"",""0x776b214""]" 1 518 0x3
2026-04-26T01:24:19.045Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x92ec710 "[""0x97"",""0x7af7454"",""0x747ec20"",""0x76ffedd8"",""0x92ec71c"",""0x97"",""0x7af7454"",""0x206"",""0x3"",""0x776b214""]" 2 3 0x776b214 b0 fa 74
2026-04-26T01:24:19.046Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x0 []
2026-04-26T01:24:19.914Z call.enter LmxProxy.dll CLMXProxyServer.AuthenticateUser 0xcfed70 []
2026-04-26T01:24:19.931Z call.leave LmxProxy.dll CLMXProxyServer.AuthenticateUser 0x0 []
2026-04-26T01:24:19.946Z call.enter LmxProxy.dll CLMXProxyServer.WriteSecured.variantA 0xcfed7c "[""0x5d08fe0"",""0x1"",""0x1"",""0x1"",""0x1"",""0xb"",""0x0"",""0xffff"",""0x0"",""0x8f5a4129""]"
2026-04-26T01:24:19.946Z call.leave LmxProxy.dll CLMXProxyServer.WriteSecured.variantA 0x80004021 []
2026-04-26T01:24:25.005Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x92ec710"",""0x1"",""0x1"",""0x2"",""0x2"",""0x0"",""0x25"",""0x93be038"",""0xcfeacc"",""0x29f36854""]" 0 2 0x2
2026-04-26T01:24:25.005Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x92ec710"",""0x1"",""0x1"",""0x2"",""0x2"",""0x0"",""0x25"",""0x93be038"",""0xcfeacc"",""0x29f36854""]" 1 37 0x93be038 True:u8@1 21 01 00 40 12 ae 08 37 e9 69 42 ab 32 52 82 cf 64 20 2a 06 00 08 f4 02 00 a7 00 0a 00 26 8a 00 00 03 00 00 00
2026-04-26T01:24:25.006Z nmx.enter NmxAdptr.dll CNmxAdapter.TransferData 0x92ec710 "[""0x1"",""0x1"",""0x2"",""0x53"",""0xa4f4020"",""0xd2d343f"",""0xcfeb1c"",""0xcfeb0c"",""0x641add04"",""0x0""]" 0 83 0xa4f4020 True:u8@0 True:u8@14 True:u8@18 True:u8@26 True:u8@30 True:u8@38 True:u8@47 True:i32@14 True:i32@18 True:i32@26 True:i32@30 01 00 25 00 00 00 00 00 00 00 03 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 21 01 00 40 12 ae 08 37 e9 69 42 ab 32 52 82 cf 64 20 2a 06 00 08 f4 02 00 a7 00 0a 00 26 8a 00 00 03 00 00 00
2026-04-26T01:24:25.007Z nmx.leave NmxAdptr.dll CNmxAdapter.TransferData 0x0 []
2026-04-26T01:24:25.007Z nmx.leave NmxAdptr.dll CNmxAdapter.PutRequest 0x0 []
Reference in New Issue View Git Blame Copy Permalink