dohertj2/mxaccess
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
eb6c689f0916a5fbd2fc1dfd005b2ce418e8bf29
mxaccess/captures/115-frida-write-secured2-auth-protectedvalue-true/frida-events.tsv
T
Joseph Doherty fe2a6db786
rust / build / test / clippy / fmt (push) Has been cancelled
Details
Initial project state: .NET reference, design, Rust port (M0+M1), evidence 
Layout:
- src/                    .NET 10 x64 reference: MxNativeCodec, MxNativeClient,
                          MxAsbClient, probes, tests, harnesses. Executable spec.
- design/                 Architectural plan for the Rust port (M0–M6), error
                          model, protocol invariants, risks (R1–R16), adversarial
                          review log (review.md).
- rust/                   Rust workspace. M0 skeleton + M1 codec parity.
                          mxaccess-codec: 215 unit tests + 2 cross-implementation
                          parity tests (byte-identical against .NET reference).
                          Other crates are M0 stubs awaiting M2+.
- captures/               Frida + netsh + pcap evidence per CLAUDE.md
                          ("captures are evidence, not throwaway logs").
- analysis/               Decompiled C# (frida/proxy/decompiled-*),
                          Ghidra exports for native DLLs (`exports/` only —
                          working state at `projects/` and AVEVA's input
                          binaries at `input/` are gitignored).
- docs/                   Reverse-engineering reference docs.
- tools/                  Setup-LiveProbeEnv.ps1 (Infisical credential fetcher),
                          Compute-Crc.ps1 (.NET parity helper).
- .github/workflows/      Rust CI: fmt + build + test + clippy on Windows.
- LICENSE                 MIT (Joseph Doherty, 2026).

Verified:
- cargo test --workspace → 217 passed (215 unit + 2 .NET parity), 0 failed
- cargo clippy --workspace -- -D warnings → clean
- cargo fmt --all -- --check → clean
- cargo publish --dry-run -p mxaccess-codec → packages cleanly

Excluded from history (see .gitignore):
- **/bin, **/obj, **/target — build artifacts
- analysis/ghidra/projects/ — Ghidra working state (regenerable)
- analysis/ghidra/input/ — AVEVA proprietary DLLs (vendor IP)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-05 06:21:00 -04:00

92 lines
23 KiB
Plaintext
Raw Blame History

time event module name ecx retval args candidate_index candidate_size candidate_ptr value_hits hex
2026-04-26T01:27:47.442Z hook.installed LmxProxy.dll CLMXProxyServer.Write.variantA []
2026-04-26T01:27:47.443Z hook.installed LmxProxy.dll CLMXProxyServer.Write.variantB []
2026-04-26T01:27:47.443Z hook.installed LmxProxy.dll CLMXProxyServer.WriteSecured.variantA []
2026-04-26T01:27:47.444Z hook.installed LmxProxy.dll CLMXProxyServer.WriteSecured.variantB []
2026-04-26T01:27:47.444Z hook.installed LmxProxy.dll CLMXProxyServer.AddBufferedItem []
2026-04-26T01:27:47.445Z hook.installed LmxProxy.dll CLMXProxyServer.SetBufferedUpdateInterval []
2026-04-26T01:27:47.445Z hook.installed LmxProxy.dll CLMXProxyServer.AdviseSupervisory []
2026-04-26T01:27:47.446Z hook.installed LmxProxy.dll CProxy_ILMXProxyServerEvents2.Fire_OnBufferedDataChange []
2026-04-26T01:27:47.446Z hook.installed LmxProxy.dll CLMXProxyServer.AuthenticateUser []
2026-04-26T01:27:54.184Z hook.installed Lmx.dll MxConnection.PrebindReference []
2026-04-26T01:27:54.185Z hook.installed Lmx.dll MxConnection.UserRegisterPreboundReference []
2026-04-26T01:27:54.185Z hook.installed Lmx.dll IMxReference.GetMxHandle []
2026-04-26T01:27:54.186Z hook.installed Lmx.dll AccessManager.FixUpMxHandle []
2026-04-26T01:27:54.187Z hook.installed Lmx.dll PreboundReference.Resolve []
2026-04-26T01:27:54.187Z hook.installed Lmx.dll PreboundReference.OnPlatformResolveReferenceResults []
2026-04-26T01:27:54.188Z hook.installed Lmx.dll PreboundReference.OnSetAttributeResult []
2026-04-26T01:27:54.285Z hook.installed NmxAdptr.dll CNmxAdapter.TransferData []
2026-04-26T01:27:54.286Z hook.installed NmxAdptr.dll CNmxAdapter.ProcessDataReceived []
2026-04-26T01:27:54.287Z hook.installed NmxAdptr.dll CNmxAdapter.PutRequest []
2026-04-26T01:27:54.287Z hook.installed NmxAdptr.dll CNmxAdapter.PutRequestEx []
2026-04-26T01:27:54.330Z lmx.fixup-mxhandle.enter Lmx.dll AccessManager.FixUpMxHandle []
2026-04-26T01:27:54.331Z lmx.fixup-mxhandle.leave Lmx.dll AccessManager.FixUpMxHandle 0x7ce6e4 []
2026-04-26T01:27:54.331Z lmx.fixup-mxhandle.enter Lmx.dll AccessManager.FixUpMxHandle []
2026-04-26T01:27:54.332Z lmx.fixup-mxhandle.leave Lmx.dll AccessManager.FixUpMxHandle 0x7ce6e4 []
2026-04-26T01:27:54.436Z lmx.prebind.enter Lmx.dll MxConnection.PrebindReference []
2026-04-26T01:27:54.437Z lmx.mxhandle.read Lmx.dll IMxReference.GetMxHandle 0x7cec74 []
2026-04-26T01:27:54.438Z lmx.prebound-resolve.enter Lmx.dll PreboundReference.Resolve []
2026-04-26T01:27:54.439Z lmx.mxhandle.read Lmx.dll IMxReference.GetMxHandle 0x7cec04 []
2026-04-26T01:27:54.439Z lmx.mxhandle.read Lmx.dll IMxReference.GetMxHandle 0x7cec04 []
2026-04-26T01:27:54.440Z lmx.mxhandle.read Lmx.dll IMxReference.GetMxHandle 0x7cec04 []
2026-04-26T01:27:54.441Z lmx.prebound-resolve.leave Lmx.dll PreboundReference.Resolve 0x70fe1e01 []
2026-04-26T01:27:54.441Z lmx.prebind.leave Lmx.dll MxConnection.PrebindReference []
2026-04-26T01:27:54.443Z call.enter LmxProxy.dll CLMXProxyServer.AdviseSupervisory 0x7cedcc "[""0x5d28fe0"",""0x1"",""0x1"",""0x3e3454fc"",""0x74794704""]"
2026-04-26T01:27:54.443Z lmx.fixup-mxhandle.enter Lmx.dll AccessManager.FixUpMxHandle []
2026-04-26T01:27:54.444Z lmx.fixup-mxhandle.leave Lmx.dll AccessManager.FixUpMxHandle 0x7cec4c []
2026-04-26T01:27:54.444Z lmx.fixup-mxhandle.enter Lmx.dll AccessManager.FixUpMxHandle []
2026-04-26T01:27:54.444Z lmx.fixup-mxhandle.leave Lmx.dll AccessManager.FixUpMxHandle 0x7cd8e0 []
2026-04-26T01:27:54.445Z call.leave LmxProxy.dll CLMXProxyServer.AdviseSupervisory 0x0 []
2026-04-26T01:27:54.571Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x909c710"",""0x1"",""0x1"",""0x1"",""0x2"",""0x0"",""0x13a"",""0x90a0620"",""0x7cea90"",""0x8067f41c""]" 0 1 0x2
2026-04-26T01:27:54.571Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x909c710"",""0x1"",""0x1"",""0x1"",""0x2"",""0x0"",""0x13a"",""0x90a0620"",""0x7cea90"",""0x8067f41c""]" 1 314 0x90a0620 True:u8@1 True:u8@3 True:u8@4 True:u8@6 True:u8@111 True:u8@112 True:u8@114 True:u8@116 True:u8@130 True:u8@136 True:u8@156 True:u8@161 True:u8@163 True:u8@164 True:u8@166 True:u8@283 True:u8@284 True:u8@286 True:u8@288 True:u8@302 True:u8@308 True:i32@6 True:i32@116 True:i32@156 True:i32@166 True:i32@288 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 6a 00 00 00 40 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 a8 fc 09 09 1f 01 00 dd f1 4b 71 b0 42 b3 48 8a b1 b0 ce 92 0f 65 08 00 00 01 00 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 76 00 00 00 4c 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 28 03 0a 09 20 01 00 02 00 00 00
2026-04-26T01:27:54.574Z nmx.enter NmxAdptr.dll CNmxAdapter.TransferData 0x909c710 "[""0x1"",""0x1"",""0x1"",""0x168"",""0x9a32020"",""0x727ab00b"",""0x90a01ec"",""0x90a01dc"",""0x641add04"",""0x0""]" 0 360 0x9a32020 True:u8@0 True:u8@3 True:u8@10 True:u8@14 True:u8@18 True:u8@26 True:u8@30 True:u8@34 True:u8@38 True:u8@47 True:u8@49 True:u8@50 True:u8@52 True:u8@157 True:u8@158 True:u8@160 True:u8@162 True:u8@176 True:u8@182 True:u8@202 True:u8@207 True:u8@209 True:u8@210 True:u8@212 True:u8@329 True:u8@330 True:u8@332 True:u8@334 True:u8@348 True:u8@354 True:i32@3 True:i32@10 True:i32@14 True:i32@18 True:i32@26 True:i32@30 True:i32@34 True:i32@52 True:i32@162 True:i32@202 True:i32@212 True:i32@334 01 00 3a 01 00 00 00 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 02 00 00 30 75 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 6a 00 00 00 40 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 a8 fc 09 09 1f 01 00 dd f1 4b 71 b0 42 b3 48 8a b1 b0 ce 92 0f 65 08 00 00 01 00 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 76 00 00 00 4c 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 28 03 0a 09 20 01 00 02 00 00 00
2026-04-26T01:27:54.575Z nmx.leave NmxAdptr.dll CNmxAdapter.TransferData 0x0 []
2026-04-26T01:27:54.575Z nmx.leave NmxAdptr.dll CNmxAdapter.PutRequest 0x0 []
2026-04-26T01:27:54.576Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x909c710"",""0x1"",""0x1"",""0x2"",""0x2"",""0x0"",""0x27"",""0x916d420"",""0x7cea90"",""0x8067f41c""]" 0 2 0x2
2026-04-26T01:27:54.576Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x909c710"",""0x1"",""0x1"",""0x2"",""0x2"",""0x0"",""0x27"",""0x916d420"",""0x7cea90"",""0x8067f41c""]" 1 39 0x916d420 True:u8@1 1f 01 00 dd f1 4b 71 b0 42 b3 48 8a b1 b0 ce 92 0f 65 08 00 00 06 00 08 f4 02 00 a6 00 0a 00 bb 67 00 00 03 00 00 00
2026-04-26T01:27:54.578Z nmx.enter NmxAdptr.dll CNmxAdapter.TransferData 0x909c710 "[""0x1"",""0x1"",""0x2"",""0x55"",""0x9a32020"",""0x727ab00b"",""0x917955c"",""0x917954c"",""0x641add04"",""0x0""]" 0 85 0x9a32020 True:u8@0 True:u8@14 True:u8@18 True:u8@26 True:u8@30 True:u8@38 True:u8@47 True:i32@14 True:i32@18 True:i32@26 True:i32@30 01 00 27 00 00 00 00 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 1f 01 00 dd f1 4b 71 b0 42 b3 48 8a b1 b0 ce 92 0f 65 08 00 00 06 00 08 f4 02 00 a6 00 0a 00 bb 67 00 00 03 00 00 00
2026-04-26T01:27:54.578Z nmx.leave NmxAdptr.dll CNmxAdapter.TransferData 0x0 []
2026-04-26T01:27:54.579Z nmx.leave NmxAdptr.dll CNmxAdapter.PutRequest 0x0 []
2026-04-26T01:27:54.619Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x909c710 "[""0x2c2"",""0xc627d4"",""0x728ef60"",""0x76ffedd8"",""0x909c71c"",""0x2c2"",""0xc627d4"",""0x206"",""0x3"",""0x766437c""]" 0 706 0xc627d4 True:u8@4 True:u8@14 True:u8@18 True:u8@22 True:u8@26 True:u8@30 True:u8@34 True:u8@205 True:u8@206 True:u8@208 True:u8@210 True:u8@224 True:u8@342 True:u8@344 True:u8@346 True:u8@563 True:u8@564 True:u8@566 True:u8@568 True:u8@582 True:u8@700 True:u8@702 True:u8@704 True:i32@14 True:i32@18 True:i32@22 True:i32@26 True:i32@30 True:i32@34 c2 02 00 00 01 00 94 02 00 00 00 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 40 1f 50 80 08 a6 00 00 00 40 00 00 91 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 18 00 00 00 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 00 00 28 00 00 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 53 f2 9a 00 6a 00 0a 00 5f f1 00 00 01 6c 00 00 00 41 00 6e 00 20 00 69 00 6e 00 74 00 65 00 72 00 6e 00 61 00 6c 00 20 00 65 00 72 00 72 00 6f 00 72 00 20 00 6f 00 63 00 63 00 75 00 72 00 72 00 65 00 64 00 20 00 69 00 6e 00 20 00 74 00 68 00 65 00 20 00 42 00 61 00 73 00 65 00 20 00 52 00 75 00 6e 00 74 00 69 00 6d 00 65 00 20 00 4f 00 62 00 6a 00 65 00 63 00 74 00 00 00 1f 00 00 50 80 01 00 01 00 01 00 30 75 00 00 70 ec ae 44 3d b1 1b 4f 9f f5 a0 8e 76 67 f8 65 dd f1 4b 71 b0 42 b3 48 8a b1 b0 ce 92 0f 65 08 40 1f 50 80 08 be 00 00 00 4c 00 00 91 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 18 00 00 00 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 00 00 34 00 00 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 53 f2 9a 00 6b 00 0a 00 87 3a 00 00 01 6c 00 00 00 41 00 6e 00 20 00 69 00 6e 00 74 00 65 00 72 00 6e 00 61 00 6c 00 20 00 65 00 72 00 72 00 6f 00 72 00 20 00 6f 00 63 00 63 00 75 00 72 00 72 00 65 00 64 00 20 00 69 00 6e 00 20 00 74 00 68 00 65 00 20 00 42 00 61 00 73 00 65 00 20 00 52 00 75 00 6e 00 74 00 69 00 6d 00 65 00 20 00 4f 00 62 00 6a 00 65 00 63 00 74 00 00 00 20 00 00 50 80 01 00 01 00 01 00
2026-04-26T01:27:54.619Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x909c710 "[""0x2c2"",""0xc627d4"",""0x728ef60"",""0x76ffedd8"",""0x909c71c"",""0x2c2"",""0xc627d4"",""0x206"",""0x3"",""0x766437c""]" 1 518 0x3
2026-04-26T01:27:54.619Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x909c710 "[""0x2c2"",""0xc627d4"",""0x728ef60"",""0x76ffedd8"",""0x909c71c"",""0x2c2"",""0xc627d4"",""0x206"",""0x3"",""0x766437c""]" 2 3 0x766437c b8 e4 cb
2026-04-26T01:27:54.620Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x0 []
2026-04-26T01:27:54.623Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x909c710 "[""0x97"",""0x762c294"",""0x728ef60"",""0x76ffedd8"",""0x909c71c"",""0x97"",""0x762c294"",""0x206"",""0x3"",""0x766437c""]" 0 151 0x762c294 True:u8@4 True:u8@18 True:u8@22 True:u8@26 True:u8@30 True:u8@34 True:u8@42 True:u8@51 True:u8@89 True:u8@106 True:u8@119 True:u8@139 True:i32@18 True:i32@22 True:i32@26 True:i32@30 True:i32@34 True:i32@89 97 00 00 00 01 00 69 00 00 00 00 00 00 00 6b 1b 0d 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 32 01 00 02 00 00 00 70 ec ae 44 3d b1 1b 4f 9f f5 a0 8e 76 67 f8 65 dd f1 4b 71 b0 42 b3 48 8a b1 b0 ce 92 0f 65 08 01 00 00 00 03 00 00 00 c0 00 20 2e 5a 46 28 d3 dc 01 06 0a 00 00 00 00 a0 41 c3 55 bd dc 01 00 00 02 00 00 00 03 00 00 00 c0 00 80 18 5b 46 28 d3 dc 01 06 0a 00 00 00 80 c1 75 25 a5 bd
2026-04-26T01:27:54.623Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x909c710 "[""0x97"",""0x762c294"",""0x728ef60"",""0x76ffedd8"",""0x909c71c"",""0x97"",""0x762c294"",""0x206"",""0x3"",""0x766437c""]" 1 518 0x3
2026-04-26T01:27:54.623Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x909c710 "[""0x97"",""0x762c294"",""0x728ef60"",""0x76ffedd8"",""0x909c71c"",""0x97"",""0x762c294"",""0x206"",""0x3"",""0x766437c""]" 2 3 0x766437c b8 e4 cb
2026-04-26T01:27:54.625Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x0 []
2026-04-26T01:27:54.629Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x909c710 "[""0x5c"",""0xc627d4"",""0x728ef60"",""0x76ffedd8"",""0x909c71c"",""0x5c"",""0xc627d4"",""0x206"",""0x3"",""0x766437c""]" 0 92 0xc627d4 True:u8@4 True:u8@18 True:u8@22 True:u8@30 True:u8@34 True:u8@54 True:u8@56 True:i32@18 True:i32@22 True:i32@30 True:i32@34 5c 00 00 00 01 00 2e 00 00 00 00 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 00 00 50 80 01 00 01 00 02 00 30 75 00 00 19 f1 05 be 0e f5 91 42 99 53 4f 2e e5 55 14 f5 dd f1 4b 71 b0 42 b3 48 8a b1 b0 ce
2026-04-26T01:27:54.629Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x909c710 "[""0x5c"",""0xc627d4"",""0x728ef60"",""0x76ffedd8"",""0x909c71c"",""0x5c"",""0xc627d4"",""0x206"",""0x3"",""0x766437c""]" 1 518 0x3
2026-04-26T01:27:54.629Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x909c710 "[""0x5c"",""0xc627d4"",""0x728ef60"",""0x76ffedd8"",""0x909c71c"",""0x5c"",""0xc627d4"",""0x206"",""0x3"",""0x766437c""]" 2 3 0x766437c b8 e4 cb
2026-04-26T01:27:54.630Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x0 []
2026-04-26T01:27:54.632Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x909c710 "[""0x69"",""0x762c294"",""0x728ef60"",""0x76ffedd8"",""0x909c71c"",""0x69"",""0x762c294"",""0x206"",""0x3"",""0x766437c""]" 0 105 0x762c294 True:u8@4 True:u8@18 True:u8@22 True:u8@30 True:u8@34 True:u8@42 True:u8@51 True:u8@53 True:i32@18 True:i32@22 True:i32@30 True:i32@34 True:i32@53 69 00 00 00 01 00 3b 00 00 00 00 00 00 00 23 8a 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 32 01 00 01 00 00 00 19 f1 05 be 0e f5 91 42 99 53 4f 2e e5 55 14 f5 dd f1 4b 71 b0 42 b3 48 8a b1 b0 ce 92 0f 65 08 03 00 00 00 03 00 00 00 c0 00 80 e9 76 d7 1b d5
2026-04-26T01:27:54.632Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x909c710 "[""0x69"",""0x762c294"",""0x728ef60"",""0x76ffedd8"",""0x909c71c"",""0x69"",""0x762c294"",""0x206"",""0x3"",""0x766437c""]" 1 518 0x3
2026-04-26T01:27:54.632Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x909c710 "[""0x69"",""0x762c294"",""0x728ef60"",""0x76ffedd8"",""0x909c71c"",""0x69"",""0x762c294"",""0x206"",""0x3"",""0x766437c""]" 2 3 0x766437c b8 e4 cb
2026-04-26T01:27:54.634Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x0 []
2026-04-26T01:27:55.483Z call.enter LmxProxy.dll CLMXProxyServer.AuthenticateUser 0x7ced90 []
2026-04-26T01:27:55.498Z call.leave LmxProxy.dll CLMXProxyServer.AuthenticateUser 0x0 []
2026-04-26T01:27:55.514Z call.enter LmxProxy.dll CLMXProxyServer.WriteSecured.variantB 0x7ced98 "[""0x5d28fe0"",""0x1"",""0x1"",""0x1"",""0x0"",""0xb"",""0x0"",""0xffff"",""0x0"",""0x7"",""0x0"",""0x9edd0529"",""0x40e6873c"",""0x3e3454fc""]"
2026-04-26T01:27:55.515Z call.leave LmxProxy.dll CLMXProxyServer.WriteSecured.variantB 0x0 []
2026-04-26T01:27:55.567Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x909c710"",""0x1"",""0x1"",""0x2"",""0x3"",""0x0"",""0xc9"",""0x917a108"",""0x7cea90"",""0x8067f41c""]" 0 2 0x3
2026-04-26T01:27:55.567Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x909c710"",""0x1"",""0x1"",""0x2"",""0x3"",""0x0"",""0xc9"",""0x917a108"",""0x7cea90"",""0x8067f41c""]" 1 201 0x917a108 True:u8@1 True:u8@17 True:u8@28 True:u8@197 True:i32@197 True:variant_bool@191 38 01 00 06 00 08 f4 02 00 a6 00 0a 00 bb 67 00 00 01 ff 00 00 00 f6 bf e8 1b d5 dc 01 07 b9 a9 f4 72 6e ae 48 83 b5 bb de 91 8c 89 0f 7e 00 00 00 4d 00 78 00 46 00 72 00 69 00 64 00 61 00 54 00 72 00 61 00 63 00 65 00 2d 00 31 00 31 00 35 00 2d 00 66 00 72 00 69 00 64 00 61 00 2d 00 77 00 72 00 69 00 74 00 65 00 2d 00 73 00 65 00 63 00 75 00 72 00 65 00 64 00 32 00 2d 00 61 00 75 00 74 00 68 00 2d 00 70 00 72 00 6f 00 74 00 65 00 63 00 74 00 65 00 64 00 76 00 61 00 6c 00 75 00 65 00 2d 00 74 00 72 00 75 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 92 f4 cc 0c 01 00 00 00
2026-04-26T01:27:55.568Z nmx.enter NmxAdptr.dll CNmxAdapter.TransferData 0x909c710 "[""0x1"",""0x1"",""0x2"",""0xf7"",""0x9a32020"",""0x727ab00b"",""0x91799b4"",""0x91799a4"",""0x641add04"",""0x0""]" 0 247 0x9a32020 True:u8@0 True:u8@14 True:u8@18 True:u8@26 True:u8@30 True:u8@38 True:u8@47 True:u8@63 True:u8@74 True:u8@243 True:i32@14 True:i32@18 True:i32@26 True:i32@30 True:i32@243 True:variant_bool@237 01 00 c9 00 00 00 00 00 00 00 03 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 03 00 00 30 75 00 00 38 01 00 06 00 08 f4 02 00 a6 00 0a 00 bb 67 00 00 01 ff 00 00 00 f6 bf e8 1b d5 dc 01 07 b9 a9 f4 72 6e ae 48 83 b5 bb de 91 8c 89 0f 7e 00 00 00 4d 00 78 00 46 00 72 00 69 00 64 00 61 00 54 00 72 00 61 00 63 00 65 00 2d 00 31 00 31 00 35 00 2d 00 66 00 72 00 69 00 64 00 61 00 2d 00 77 00 72 00 69 00 74 00 65 00 2d 00 73 00 65 00 63 00 75 00 72 00 65 00 64 00 32 00 2d 00 61 00 75 00 74 00 68 00 2d 00 70 00 72 00 6f 00 74 00 65 00 63 00 74 00 65 00 64 00 76 00 61 00 6c 00 75 00 65 00 2d 00 74 00 72 00 75 00 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 92 f4 cc 0c 01 00 00 00
2026-04-26T01:27:55.569Z nmx.leave NmxAdptr.dll CNmxAdapter.TransferData 0x0 []
2026-04-26T01:27:55.570Z nmx.leave NmxAdptr.dll CNmxAdapter.PutRequest 0x0 []
2026-04-26T01:27:55.579Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x909c710 "[""0x33"",""0xa6c779c"",""0x728ef60"",""0x76ffedd8"",""0x909c71c"",""0x33"",""0xa6c779c"",""0x206"",""0x3"",""0x766437c""]" 0 51 0xa6c779c True:u8@4 True:u8@18 True:u8@22 True:u8@30 True:u8@34 True:i32@18 True:i32@22 True:i32@30 True:i32@34 33 00 00 00 01 00 05 00 00 00 00 00 00 00 03 00 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 03 00 00 30 75 00 00 00
2026-04-26T01:27:55.579Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x909c710 "[""0x33"",""0xa6c779c"",""0x728ef60"",""0x76ffedd8"",""0x909c71c"",""0x33"",""0xa6c779c"",""0x206"",""0x3"",""0x766437c""]" 1 518 0x3
2026-04-26T01:27:55.579Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x909c710 "[""0x33"",""0xa6c779c"",""0x728ef60"",""0x76ffedd8"",""0x909c71c"",""0x33"",""0xa6c779c"",""0x206"",""0x3"",""0x766437c""]" 2 3 0x766437c b8 e4 cb
2026-04-26T01:27:55.580Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x0 []
2026-04-26T01:27:55.583Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x909c710 "[""0x55"",""0xa6c6694"",""0x728ef60"",""0x76ffedd8"",""0x909c71c"",""0x55"",""0xa6c6694"",""0x206"",""0x3"",""0x766437c""]" 0 85 0xa6c6694 True:u8@4 True:u8@18 True:u8@22 True:u8@30 True:u8@34 True:u8@42 True:u8@51 True:u8@53 True:i32@18 True:i32@22 True:i32@30 True:i32@34 True:i32@53 55 00 00 00 01 00 27 00 00 00 00 00 00 00 24 8a 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 19 f1 05 be 0e f5 91 42 99 53 4f 2e e5 55 14 f5 03 00 00 00 c0 00 00 f6 bf e8 1b d5
2026-04-26T01:27:55.583Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x909c710 "[""0x55"",""0xa6c6694"",""0x728ef60"",""0x76ffedd8"",""0x909c71c"",""0x55"",""0xa6c6694"",""0x206"",""0x3"",""0x766437c""]" 1 518 0x3
2026-04-26T01:27:55.583Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x909c710 "[""0x55"",""0xa6c6694"",""0x728ef60"",""0x76ffedd8"",""0x909c71c"",""0x55"",""0xa6c6694"",""0x206"",""0x3"",""0x766437c""]" 2 3 0x766437c b8 e4 cb
2026-04-26T01:27:55.584Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x0 []
2026-04-26T01:27:57.976Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x909c710 "[""0x84"",""0xa6c779c"",""0x728ef60"",""0x76ffedd8"",""0x909c71c"",""0x84"",""0xa6c779c"",""0x206"",""0x3"",""0x766437c""]" 0 132 0xa6c779c True:u8@4 True:u8@18 True:u8@22 True:u8@26 True:u8@30 True:u8@34 True:u8@42 True:u8@51 True:u8@53 True:u8@73 True:u8@94 True:u8@116 True:i32@18 True:i32@22 True:i32@26 True:i32@30 True:i32@34 True:i32@53 84 00 00 00 01 00 56 00 00 00 00 00 00 00 7a 1b 0d 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 24 01 00 01 00 00 00 7d 18 17 b8 e3 f4 23 41 9a a4 c3 e5 bf 0d e1 0a 01 00 20 03 a5 75 9d b6 2d 9d c6 45 9d 5d 3a 90 e0 75 62 4a 24 01 00 02 00 00 00 7d 18 17 b8 e3 f4 23 41 9a a4 c3 e5 bf 0d e1 0a 01 00 20 03 a5 75 9d b6 2d 9d c6 45 9d 5d 3a 90
2026-04-26T01:27:57.976Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x909c710 "[""0x84"",""0xa6c779c"",""0x728ef60"",""0x76ffedd8"",""0x909c71c"",""0x84"",""0xa6c779c"",""0x206"",""0x3"",""0x766437c""]" 1 518 0x3
2026-04-26T01:27:57.976Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x909c710 "[""0x84"",""0xa6c779c"",""0x728ef60"",""0x76ffedd8"",""0x909c71c"",""0x84"",""0xa6c779c"",""0x206"",""0x3"",""0x766437c""]" 2 3 0x766437c b8 e4 cb
2026-04-26T01:27:57.978Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x0 []
2026-04-26T01:28:00.542Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x909c710"",""0x1"",""0x1"",""0x2"",""0x2"",""0x0"",""0x25"",""0x916d5d0"",""0x7ceaec"",""0x8067f408""]" 0 2 0x2
2026-04-26T01:28:00.542Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x909c710"",""0x1"",""0x1"",""0x2"",""0x2"",""0x0"",""0x25"",""0x916d5d0"",""0x7ceaec"",""0x8067f408""]" 1 37 0x916d5d0 True:u8@1 21 01 00 dd f1 4b 71 b0 42 b3 48 8a b1 b0 ce 92 0f 65 08 06 00 08 f4 02 00 a6 00 0a 00 bb 67 00 00 03 00 00 00
2026-04-26T01:28:00.543Z nmx.enter NmxAdptr.dll CNmxAdapter.TransferData 0x909c710 "[""0x1"",""0x1"",""0x2"",""0x53"",""0x9a32020"",""0x727ab01f"",""0x7ceb3c"",""0x7ceb2c"",""0x641add04"",""0x0""]" 0 83 0x9a32020 True:u8@0 True:u8@14 True:u8@18 True:u8@26 True:u8@30 True:u8@38 True:u8@47 True:i32@14 True:i32@18 True:i32@26 True:i32@30 01 00 25 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 21 01 00 dd f1 4b 71 b0 42 b3 48 8a b1 b0 ce 92 0f 65 08 06 00 08 f4 02 00 a6 00 0a 00 bb 67 00 00 03 00 00 00
2026-04-26T01:28:00.544Z nmx.leave NmxAdptr.dll CNmxAdapter.TransferData 0x0 []
2026-04-26T01:28:00.544Z nmx.leave NmxAdptr.dll CNmxAdapter.PutRequest 0x0 []
Reference in New Issue View Git Blame Copy Permalink