dohertj2/mxaccess
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
eb6c689f0916a5fbd2fc1dfd005b2ce418e8bf29
mxaccess/captures/116-frida-write-secured2-auth-verified-protectedvalue1/frida-events.tsv
T
Joseph Doherty fe2a6db786
rust / build / test / clippy / fmt (push) Has been cancelled
Details
Initial project state: .NET reference, design, Rust port (M0+M1), evidence 
Layout:
- src/                    .NET 10 x64 reference: MxNativeCodec, MxNativeClient,
                          MxAsbClient, probes, tests, harnesses. Executable spec.
- design/                 Architectural plan for the Rust port (M0–M6), error
                          model, protocol invariants, risks (R1–R16), adversarial
                          review log (review.md).
- rust/                   Rust workspace. M0 skeleton + M1 codec parity.
                          mxaccess-codec: 215 unit tests + 2 cross-implementation
                          parity tests (byte-identical against .NET reference).
                          Other crates are M0 stubs awaiting M2+.
- captures/               Frida + netsh + pcap evidence per CLAUDE.md
                          ("captures are evidence, not throwaway logs").
- analysis/               Decompiled C# (frida/proxy/decompiled-*),
                          Ghidra exports for native DLLs (`exports/` only —
                          working state at `projects/` and AVEVA's input
                          binaries at `input/` are gitignored).
- docs/                   Reverse-engineering reference docs.
- tools/                  Setup-LiveProbeEnv.ps1 (Infisical credential fetcher),
                          Compute-Crc.ps1 (.NET parity helper).
- .github/workflows/      Rust CI: fmt + build + test + clippy on Windows.
- LICENSE                 MIT (Joseph Doherty, 2026).

Verified:
- cargo test --workspace → 217 passed (215 unit + 2 .NET parity), 0 failed
- cargo clippy --workspace -- -D warnings → clean
- cargo fmt --all -- --check → clean
- cargo publish --dry-run -p mxaccess-codec → packages cleanly

Excluded from history (see .gitignore):
- **/bin, **/obj, **/target — build artifacts
- analysis/ghidra/projects/ — Ghidra working state (regenerable)
- analysis/ghidra/input/ — AVEVA proprietary DLLs (vendor IP)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-05 06:21:00 -04:00

88 lines
22 KiB
Plaintext
Raw Blame History

time event module name ecx retval args candidate_index candidate_size candidate_ptr value_hits hex
2026-04-26T01:30:41.798Z hook.installed LmxProxy.dll CLMXProxyServer.Write.variantA []
2026-04-26T01:30:41.799Z hook.installed LmxProxy.dll CLMXProxyServer.Write.variantB []
2026-04-26T01:30:41.799Z hook.installed LmxProxy.dll CLMXProxyServer.WriteSecured.variantA []
2026-04-26T01:30:41.800Z hook.installed LmxProxy.dll CLMXProxyServer.WriteSecured.variantB []
2026-04-26T01:30:41.800Z hook.installed LmxProxy.dll CLMXProxyServer.AddBufferedItem []
2026-04-26T01:30:41.800Z hook.installed LmxProxy.dll CLMXProxyServer.SetBufferedUpdateInterval []
2026-04-26T01:30:41.801Z hook.installed LmxProxy.dll CLMXProxyServer.AdviseSupervisory []
2026-04-26T01:30:41.801Z hook.installed LmxProxy.dll CProxy_ILMXProxyServerEvents2.Fire_OnBufferedDataChange []
2026-04-26T01:30:41.802Z hook.installed LmxProxy.dll CLMXProxyServer.AuthenticateUser []
2026-04-26T01:30:48.449Z hook.installed Lmx.dll MxConnection.PrebindReference []
2026-04-26T01:30:48.449Z hook.installed Lmx.dll MxConnection.UserRegisterPreboundReference []
2026-04-26T01:30:48.450Z hook.installed Lmx.dll IMxReference.GetMxHandle []
2026-04-26T01:30:48.450Z hook.installed Lmx.dll AccessManager.FixUpMxHandle []
2026-04-26T01:30:48.451Z hook.installed Lmx.dll PreboundReference.Resolve []
2026-04-26T01:30:48.451Z hook.installed Lmx.dll PreboundReference.OnPlatformResolveReferenceResults []
2026-04-26T01:30:48.452Z hook.installed Lmx.dll PreboundReference.OnSetAttributeResult []
2026-04-26T01:30:48.548Z lmx.fixup-mxhandle.enter Lmx.dll AccessManager.FixUpMxHandle []
2026-04-26T01:30:48.549Z lmx.fixup-mxhandle.leave Lmx.dll AccessManager.FixUpMxHandle 0x6fe438 []
2026-04-26T01:30:48.549Z lmx.fixup-mxhandle.enter Lmx.dll AccessManager.FixUpMxHandle []
2026-04-26T01:30:48.550Z lmx.fixup-mxhandle.leave Lmx.dll AccessManager.FixUpMxHandle 0x6fe438 []
2026-04-26T01:30:48.550Z hook.installed NmxAdptr.dll CNmxAdapter.TransferData []
2026-04-26T01:30:48.551Z hook.installed NmxAdptr.dll CNmxAdapter.ProcessDataReceived []
2026-04-26T01:30:48.551Z hook.installed NmxAdptr.dll CNmxAdapter.PutRequest []
2026-04-26T01:30:48.552Z hook.installed NmxAdptr.dll CNmxAdapter.PutRequestEx []
2026-04-26T01:30:48.654Z lmx.prebind.enter Lmx.dll MxConnection.PrebindReference []
2026-04-26T01:30:48.654Z lmx.mxhandle.read Lmx.dll IMxReference.GetMxHandle 0x6fe9d0 []
2026-04-26T01:30:48.655Z lmx.prebound-resolve.enter Lmx.dll PreboundReference.Resolve []
2026-04-26T01:30:48.656Z lmx.mxhandle.read Lmx.dll IMxReference.GetMxHandle 0x6fe960 []
2026-04-26T01:30:48.656Z lmx.mxhandle.read Lmx.dll IMxReference.GetMxHandle 0x6fe960 []
2026-04-26T01:30:48.657Z lmx.mxhandle.read Lmx.dll IMxReference.GetMxHandle 0x6fe960 []
2026-04-26T01:30:48.658Z lmx.prebound-resolve.leave Lmx.dll PreboundReference.Resolve 0x70fe1e01 []
2026-04-26T01:30:48.658Z lmx.prebind.leave Lmx.dll MxConnection.PrebindReference []
2026-04-26T01:30:48.660Z call.enter LmxProxy.dll CLMXProxyServer.AdviseSupervisory 0x6feb2c "[""0x5838fe0"",""0x1"",""0x1"",""0xa7ce8929"",""0x74794704""]"
2026-04-26T01:30:48.660Z lmx.fixup-mxhandle.enter Lmx.dll AccessManager.FixUpMxHandle []
2026-04-26T01:30:48.661Z lmx.fixup-mxhandle.leave Lmx.dll AccessManager.FixUpMxHandle 0x6fe9ac []
2026-04-26T01:30:48.661Z lmx.fixup-mxhandle.enter Lmx.dll AccessManager.FixUpMxHandle []
2026-04-26T01:30:48.661Z lmx.fixup-mxhandle.leave Lmx.dll AccessManager.FixUpMxHandle 0x6fd640 []
2026-04-26T01:30:48.661Z call.leave LmxProxy.dll CLMXProxyServer.AdviseSupervisory 0x0 []
2026-04-26T01:30:48.789Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x8d2c710"",""0x1"",""0x1"",""0x1"",""0x2"",""0x0"",""0x13a"",""0x8d30620"",""0x6fe7f0"",""0xb7265f8b""]" 0 1 0x2
2026-04-26T01:30:48.789Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x8d2c710"",""0x1"",""0x1"",""0x1"",""0x2"",""0x0"",""0x13a"",""0x8d30620"",""0x6fe7f0"",""0xb7265f8b""]" 1 314 0x8d30620 True:u8@1 True:u8@3 True:u8@4 True:u8@6 True:u8@111 True:u8@112 True:u8@114 True:u8@116 True:u8@130 True:u8@136 True:u8@156 True:u8@161 True:u8@163 True:u8@164 True:u8@166 True:u8@283 True:u8@284 True:u8@286 True:u8@288 True:u8@302 True:u8@308 True:i32@6 True:i32@116 True:i32@156 True:i32@166 True:i32@288 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 6a 00 00 00 40 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 a8 fc d2 08 1f 01 00 90 17 00 58 6c 7c 73 44 80 cb 53 cc 99 b5 43 a8 00 00 01 00 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 76 00 00 00 4c 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 28 03 d3 08 20 01 00 02 00 00 00
2026-04-26T01:30:48.792Z nmx.enter NmxAdptr.dll CNmxAdapter.TransferData 0x8d2c710 "[""0x1"",""0x1"",""0x1"",""0x168"",""0x96cb020"",""0x691b8323"",""0x8d301ec"",""0x8d301dc"",""0x641add04"",""0x0""]" 0 360 0x96cb020 True:u8@0 True:u8@3 True:u8@10 True:u8@14 True:u8@18 True:u8@26 True:u8@30 True:u8@34 True:u8@38 True:u8@47 True:u8@49 True:u8@50 True:u8@52 True:u8@157 True:u8@158 True:u8@160 True:u8@162 True:u8@176 True:u8@182 True:u8@202 True:u8@207 True:u8@209 True:u8@210 True:u8@212 True:u8@329 True:u8@330 True:u8@332 True:u8@334 True:u8@348 True:u8@354 True:i32@3 True:i32@10 True:i32@14 True:i32@18 True:i32@26 True:i32@30 True:i32@34 True:i32@52 True:i32@162 True:i32@202 True:i32@212 True:i32@334 01 00 3a 01 00 00 00 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 02 00 00 30 75 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 6a 00 00 00 40 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 a8 fc d2 08 1f 01 00 90 17 00 58 6c 7c 73 44 80 cb 53 cc 99 b5 43 a8 00 00 01 00 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 76 00 00 00 4c 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 28 03 d3 08 20 01 00 02 00 00 00
2026-04-26T01:30:48.793Z nmx.leave NmxAdptr.dll CNmxAdapter.TransferData 0x0 []
2026-04-26T01:30:48.793Z nmx.leave NmxAdptr.dll CNmxAdapter.PutRequest 0x0 []
2026-04-26T01:30:48.794Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x8d2c710"",""0x1"",""0x1"",""0x2"",""0x2"",""0x0"",""0x27"",""0x8dfd300"",""0x6fe7f0"",""0xb7265f8b""]" 0 2 0x2
2026-04-26T01:30:48.794Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x8d2c710"",""0x1"",""0x1"",""0x2"",""0x2"",""0x0"",""0x27"",""0x8dfd300"",""0x6fe7f0"",""0xb7265f8b""]" 1 39 0x8dfd300 True:u8@1 1f 01 00 90 17 00 58 6c 7c 73 44 80 cb 53 cc 99 b5 43 a8 00 00 06 00 08 f4 02 00 a7 00 0a 00 26 8a 00 00 03 00 00 00
2026-04-26T01:30:48.796Z nmx.enter NmxAdptr.dll CNmxAdapter.TransferData 0x8d2c710 "[""0x1"",""0x1"",""0x2"",""0x55"",""0x96cb020"",""0x691b8323"",""0x8e0955c"",""0x8e0954c"",""0x641add04"",""0x0""]" 0 85 0x96cb020 True:u8@0 True:u8@14 True:u8@18 True:u8@26 True:u8@30 True:u8@38 True:u8@47 True:i32@14 True:i32@18 True:i32@26 True:i32@30 01 00 27 00 00 00 00 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 1f 01 00 90 17 00 58 6c 7c 73 44 80 cb 53 cc 99 b5 43 a8 00 00 06 00 08 f4 02 00 a7 00 0a 00 26 8a 00 00 03 00 00 00
2026-04-26T01:30:48.796Z nmx.leave NmxAdptr.dll CNmxAdapter.TransferData 0x0 []
2026-04-26T01:30:48.797Z nmx.leave NmxAdptr.dll CNmxAdapter.PutRequest 0x0 []
2026-04-26T01:30:48.826Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x8d2c710 "[""0x5c"",""0x7544fcc"",""0x5e8ead0"",""0x76ffedd8"",""0x8d2c71c"",""0x5c"",""0x7544fcc"",""0x206"",""0x3"",""0x7230cb4""]" 0 92 0x7544fcc True:u8@4 True:u8@18 True:u8@22 True:u8@30 True:u8@34 True:u8@54 True:u8@56 True:i32@18 True:i32@22 True:i32@30 True:i32@34 5c 00 00 00 01 00 2e 00 00 00 00 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 00 00 50 80 01 00 01 00 02 00 30 75 00 00 fd 8d c6 6d 98 4e bf 4a a9 f4 df f5 12 60 b6 ba 90 17 00 58 6c 7c 73 44 80 cb 53 cc
2026-04-26T01:30:48.826Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x8d2c710 "[""0x5c"",""0x7544fcc"",""0x5e8ead0"",""0x76ffedd8"",""0x8d2c71c"",""0x5c"",""0x7544fcc"",""0x206"",""0x3"",""0x7230cb4""]" 1 518 0x3
2026-04-26T01:30:48.826Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x8d2c710 "[""0x5c"",""0x7544fcc"",""0x5e8ead0"",""0x76ffedd8"",""0x8d2c71c"",""0x5c"",""0x7544fcc"",""0x206"",""0x3"",""0x7230cb4""]" 2 3 0x7230cb4 18 99 68
2026-04-26T01:30:48.828Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x0 []
2026-04-26T01:30:48.830Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x8d2c710 "[""0x69"",""0x753d894"",""0x5e8ead0"",""0x76ffedd8"",""0x8d2c71c"",""0x69"",""0x753d894"",""0x206"",""0x3"",""0x7230cb4""]" 0 105 0x753d894 True:u8@4 True:u8@18 True:u8@22 True:u8@30 True:u8@34 True:u8@42 True:u8@51 True:u8@53 True:i32@18 True:i32@22 True:i32@30 True:i32@34 True:i32@53 69 00 00 00 01 00 3b 00 00 00 00 00 00 00 26 8a 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 32 01 00 01 00 00 00 fd 8d c6 6d 98 4e bf 4a a9 f4 df f5 12 60 b6 ba 90 17 00 58 6c 7c 73 44 80 cb 53 cc 99 b5 43 a8 03 00 00 00 03 00 00 00 c0 00 c0 32 3e 40 81 d4
2026-04-26T01:30:48.830Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x8d2c710 "[""0x69"",""0x753d894"",""0x5e8ead0"",""0x76ffedd8"",""0x8d2c71c"",""0x69"",""0x753d894"",""0x206"",""0x3"",""0x7230cb4""]" 1 518 0x3
2026-04-26T01:30:48.830Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x8d2c710 "[""0x69"",""0x753d894"",""0x5e8ead0"",""0x76ffedd8"",""0x8d2c71c"",""0x69"",""0x753d894"",""0x206"",""0x3"",""0x7230cb4""]" 2 3 0x7230cb4 18 99 68
2026-04-26T01:30:48.831Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x0 []
2026-04-26T01:30:48.850Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x8d2c710 "[""0x2c2"",""0x7544fcc"",""0x5e8ead0"",""0x76ffedd8"",""0x8d2c71c"",""0x2c2"",""0x7544fcc"",""0x206"",""0x3"",""0x7230cb4""]" 0 706 0x7544fcc True:u8@4 True:u8@14 True:u8@18 True:u8@22 True:u8@26 True:u8@30 True:u8@34 True:u8@205 True:u8@206 True:u8@208 True:u8@210 True:u8@224 True:u8@342 True:u8@344 True:u8@346 True:u8@563 True:u8@564 True:u8@566 True:u8@568 True:u8@582 True:u8@700 True:u8@702 True:u8@704 True:i32@14 True:i32@18 True:i32@22 True:i32@26 True:i32@30 True:i32@34 c2 02 00 00 01 00 94 02 00 00 00 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 40 1f 50 80 08 a6 00 00 00 40 00 00 91 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 18 00 00 00 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 00 00 28 00 00 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 53 f2 9a 00 6a 00 0a 00 5f f1 00 00 01 6c 00 00 00 41 00 6e 00 20 00 69 00 6e 00 74 00 65 00 72 00 6e 00 61 00 6c 00 20 00 65 00 72 00 72 00 6f 00 72 00 20 00 6f 00 63 00 63 00 75 00 72 00 72 00 65 00 64 00 20 00 69 00 6e 00 20 00 74 00 68 00 65 00 20 00 42 00 61 00 73 00 65 00 20 00 52 00 75 00 6e 00 74 00 69 00 6d 00 65 00 20 00 4f 00 62 00 6a 00 65 00 63 00 74 00 00 00 1f 00 00 50 80 01 00 01 00 01 00 30 75 00 00 53 d1 e6 48 74 fe 36 46 80 64 ec 0d 68 af bc 0b 90 17 00 58 6c 7c 73 44 80 cb 53 cc 99 b5 43 a8 40 1f 50 80 08 be 00 00 00 4c 00 00 91 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 18 00 00 00 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 00 00 34 00 00 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 53 f2 9a 00 6b 00 0a 00 87 3a 00 00 01 6c 00 00 00 41 00 6e 00 20 00 69 00 6e 00 74 00 65 00 72 00 6e 00 61 00 6c 00 20 00 65 00 72 00 72 00 6f 00 72 00 20 00 6f 00 63 00 63 00 75 00 72 00 72 00 65 00 64 00 20 00 69 00 6e 00 20 00 74 00 68 00 65 00 20 00 42 00 61 00 73 00 65 00 20 00 52 00 75 00 6e 00 74 00 69 00 6d 00 65 00 20 00 4f 00 62 00 6a 00 65 00 63 00 74 00 00 00 20 00 00 50 80 01 00 01 00 01 00
2026-04-26T01:30:48.850Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x8d2c710 "[""0x2c2"",""0x7544fcc"",""0x5e8ead0"",""0x76ffedd8"",""0x8d2c71c"",""0x2c2"",""0x7544fcc"",""0x206"",""0x3"",""0x7230cb4""]" 1 518 0x3
2026-04-26T01:30:48.850Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x8d2c710 "[""0x2c2"",""0x7544fcc"",""0x5e8ead0"",""0x76ffedd8"",""0x8d2c71c"",""0x2c2"",""0x7544fcc"",""0x206"",""0x3"",""0x7230cb4""]" 2 3 0x7230cb4 18 99 68
2026-04-26T01:30:48.851Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x0 []
2026-04-26T01:30:48.853Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x8d2c710 "[""0x97"",""0x753d894"",""0x5e8ead0"",""0x76ffedd8"",""0x8d2c71c"",""0x97"",""0x753d894"",""0x206"",""0x3"",""0x7230cb4""]" 0 151 0x753d894 True:u8@4 True:u8@18 True:u8@22 True:u8@26 True:u8@30 True:u8@34 True:u8@42 True:u8@51 True:u8@89 True:u8@106 True:u8@119 True:u8@139 True:i32@18 True:i32@22 True:i32@26 True:i32@30 True:i32@34 True:i32@89 97 00 00 00 01 00 69 00 00 00 00 00 00 00 29 1e 0d 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 32 01 00 02 00 00 00 53 d1 e6 48 74 fe 36 46 80 64 ec 0d 68 af bc 0b 90 17 00 58 6c 7c 73 44 80 cb 53 cc 99 b5 43 a8 01 00 00 00 03 00 00 00 c0 00 20 2e 5a 46 28 d3 dc 01 06 0a 00 00 00 00 a0 41 c3 55 bd dc 01 00 00 02 00 00 00 03 00 00 00 c0 00 80 18 5b 46 28 d3 dc 01 06 0a 00 00 00 80 c1 75 25 a5 bd
2026-04-26T01:30:48.853Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x8d2c710 "[""0x97"",""0x753d894"",""0x5e8ead0"",""0x76ffedd8"",""0x8d2c71c"",""0x97"",""0x753d894"",""0x206"",""0x3"",""0x7230cb4""]" 1 518 0x3
2026-04-26T01:30:48.853Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x8d2c710 "[""0x97"",""0x753d894"",""0x5e8ead0"",""0x76ffedd8"",""0x8d2c71c"",""0x97"",""0x753d894"",""0x206"",""0x3"",""0x7230cb4""]" 2 3 0x7230cb4 18 99 68
2026-04-26T01:30:48.855Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x0 []
2026-04-26T01:30:49.697Z call.enter LmxProxy.dll CLMXProxyServer.AuthenticateUser 0x6feaf0 []
2026-04-26T01:30:49.713Z call.leave LmxProxy.dll CLMXProxyServer.AuthenticateUser 0x0 []
2026-04-26T01:30:49.727Z call.enter LmxProxy.dll CLMXProxyServer.WriteSecured.variantB 0x6feaf8 "[""0x5838fe0"",""0x1"",""0x1"",""0x1"",""0x1"",""0xb"",""0x0"",""0xffff"",""0x0"",""0x7"",""0x0"",""0xaf61a546"",""0x40e6873c"",""0xa7ce8929""]"
2026-04-26T01:30:49.728Z call.leave LmxProxy.dll CLMXProxyServer.WriteSecured.variantB 0x0 []
2026-04-26T01:30:49.781Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x8d2c710"",""0x1"",""0x1"",""0x2"",""0x3"",""0x0"",""0xd3"",""0x8e0a108"",""0x6fe7f0"",""0xb7265f8b""]" 0 2 0x3
2026-04-26T01:30:49.781Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x8d2c710"",""0x1"",""0x1"",""0x2"",""0x3"",""0x0"",""0xd3"",""0x8e0a108"",""0x6fe7f0"",""0xb7265f8b""]" 1 211 0x8e0a108 True:u8@1 True:u8@17 True:u8@28 True:u8@207 True:i32@207 True:variant_bool@201 38 01 00 06 00 08 f4 02 00 a7 00 0a 00 26 8a 00 00 01 ff 00 00 00 41 76 50 1c d5 dc 01 07 b9 a9 f4 72 6e ae 48 83 b5 bb de 91 8c 89 0f 88 00 00 00 4d 00 78 00 46 00 72 00 69 00 64 00 61 00 54 00 72 00 61 00 63 00 65 00 2d 00 31 00 31 00 36 00 2d 00 66 00 72 00 69 00 64 00 61 00 2d 00 77 00 72 00 69 00 74 00 65 00 2d 00 73 00 65 00 63 00 75 00 72 00 65 00 64 00 32 00 2d 00 61 00 75 00 74 00 68 00 2d 00 76 00 65 00 72 00 69 00 66 00 69 00 65 00 64 00 2d 00 70 00 72 00 6f 00 74 00 65 00 63 00 74 00 65 00 64 00 76 00 61 00 6c 00 75 00 65 00 31 00 00 00 07 b9 a9 f4 72 6e ae 48 83 b5 bb de 91 8c 89 0f ff ff 1d 9d cf 0c 01 00 00 00
2026-04-26T01:30:49.783Z nmx.enter NmxAdptr.dll CNmxAdapter.TransferData 0x8d2c710 "[""0x1"",""0x1"",""0x2"",""0x101"",""0x96cb020"",""0x691b8323"",""0x8e099b4"",""0x8e099a4"",""0x641add04"",""0x0""]" 0 257 0x96cb020 True:u8@0 True:u8@14 True:u8@18 True:u8@26 True:u8@30 True:u8@38 True:u8@47 True:u8@63 True:u8@74 True:u8@253 True:i32@14 True:i32@18 True:i32@26 True:i32@30 True:i32@253 True:variant_bool@247 01 00 d3 00 00 00 00 00 00 00 03 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 03 00 00 30 75 00 00 38 01 00 06 00 08 f4 02 00 a7 00 0a 00 26 8a 00 00 01 ff 00 00 00 41 76 50 1c d5 dc 01 07 b9 a9 f4 72 6e ae 48 83 b5 bb de 91 8c 89 0f 88 00 00 00 4d 00 78 00 46 00 72 00 69 00 64 00 61 00 54 00 72 00 61 00 63 00 65 00 2d 00 31 00 31 00 36 00 2d 00 66 00 72 00 69 00 64 00 61 00 2d 00 77 00 72 00 69 00 74 00 65 00 2d 00 73 00 65 00 63 00 75 00 72 00 65 00 64 00 32 00 2d 00 61 00 75 00 74 00 68 00 2d 00 76 00 65 00 72 00 69 00 66 00 69 00 65 00 64 00 2d 00 70 00 72 00 6f 00 74 00 65 00 63 00 74 00 65 00 64 00 76 00 61 00 6c 00 75 00 65 00 31 00 00 00 07 b9 a9 f4 72 6e ae 48 83 b5 bb de 91 8c 89 0f ff ff 1d 9d cf 0c 01 00 00 00
2026-04-26T01:30:49.783Z nmx.leave NmxAdptr.dll CNmxAdapter.TransferData 0x0 []
2026-04-26T01:30:49.784Z nmx.leave NmxAdptr.dll CNmxAdapter.PutRequest 0x0 []
2026-04-26T01:30:49.818Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x8d2c710 "[""0x33"",""0x7544fcc"",""0x5e8ead0"",""0x76ffedd8"",""0x8d2c71c"",""0x33"",""0x7544fcc"",""0x206"",""0x3"",""0x7230cb4""]" 0 51 0x7544fcc True:u8@4 True:u8@18 True:u8@22 True:u8@30 True:u8@34 True:i32@18 True:i32@22 True:i32@30 True:i32@34 33 00 00 00 01 00 05 00 00 00 00 00 00 00 03 00 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 03 00 00 30 75 00 00 00
2026-04-26T01:30:49.818Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x8d2c710 "[""0x33"",""0x7544fcc"",""0x5e8ead0"",""0x76ffedd8"",""0x8d2c71c"",""0x33"",""0x7544fcc"",""0x206"",""0x3"",""0x7230cb4""]" 1 518 0x3
2026-04-26T01:30:49.818Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x8d2c710 "[""0x33"",""0x7544fcc"",""0x5e8ead0"",""0x76ffedd8"",""0x8d2c71c"",""0x33"",""0x7544fcc"",""0x206"",""0x3"",""0x7230cb4""]" 2 3 0x7230cb4 18 99 68
2026-04-26T01:30:49.820Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x0 []
2026-04-26T01:30:49.822Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x8d2c710 "[""0x55"",""0x753d894"",""0x5e8ead0"",""0x76ffedd8"",""0x8d2c71c"",""0x55"",""0x753d894"",""0x206"",""0x3"",""0x7230cb4""]" 0 85 0x753d894 True:u8@4 True:u8@18 True:u8@22 True:u8@30 True:u8@34 True:u8@42 True:u8@51 True:u8@53 True:i32@18 True:i32@22 True:i32@30 True:i32@34 True:i32@53 55 00 00 00 01 00 27 00 00 00 00 00 00 00 27 8a 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 fd 8d c6 6d 98 4e bf 4a a9 f4 df f5 12 60 b6 ba 03 00 00 00 c0 00 00 41 76 50 1c d5
2026-04-26T01:30:49.822Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x8d2c710 "[""0x55"",""0x753d894"",""0x5e8ead0"",""0x76ffedd8"",""0x8d2c71c"",""0x55"",""0x753d894"",""0x206"",""0x3"",""0x7230cb4""]" 1 518 0x3
2026-04-26T01:30:49.822Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x8d2c710 "[""0x55"",""0x753d894"",""0x5e8ead0"",""0x76ffedd8"",""0x8d2c71c"",""0x55"",""0x753d894"",""0x206"",""0x3"",""0x7230cb4""]" 2 3 0x7230cb4 18 99 68
2026-04-26T01:30:49.824Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x0 []
2026-04-26T01:30:54.764Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x8d2c710"",""0x1"",""0x1"",""0x2"",""0x2"",""0x0"",""0x25"",""0x8dfd1e0"",""0x6fe84c"",""0xb7265f9f""]" 0 2 0x2
2026-04-26T01:30:54.764Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x8d2c710"",""0x1"",""0x1"",""0x2"",""0x2"",""0x0"",""0x25"",""0x8dfd1e0"",""0x6fe84c"",""0xb7265f9f""]" 1 37 0x8dfd1e0 True:u8@1 21 01 00 90 17 00 58 6c 7c 73 44 80 cb 53 cc 99 b5 43 a8 06 00 08 f4 02 00 a7 00 0a 00 26 8a 00 00 03 00 00 00
2026-04-26T01:30:54.765Z nmx.enter NmxAdptr.dll CNmxAdapter.TransferData 0x8d2c710 "[""0x1"",""0x1"",""0x2"",""0x53"",""0x96cb020"",""0x691b8337"",""0x6fe89c"",""0x6fe88c"",""0x641add04"",""0x0""]" 0 83 0x96cb020 True:u8@0 True:u8@14 True:u8@18 True:u8@26 True:u8@30 True:u8@38 True:u8@47 True:i32@14 True:i32@18 True:i32@26 True:i32@30 01 00 25 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 21 01 00 90 17 00 58 6c 7c 73 44 80 cb 53 cc 99 b5 43 a8 06 00 08 f4 02 00 a7 00 0a 00 26 8a 00 00 03 00 00 00
2026-04-26T01:30:54.766Z nmx.leave NmxAdptr.dll CNmxAdapter.TransferData 0x0 []
2026-04-26T01:30:54.766Z nmx.leave NmxAdptr.dll CNmxAdapter.PutRequest 0x0 []
Reference in New Issue View Git Blame Copy Permalink