dohertj2/mxaccess
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Initial project state: .NET reference, design, Rust port (M0+M1), evidence
rust / build / test / clippy / fmt (push) Has been cancelled
Details

Browse Source 
Layout:
- src/                    .NET 10 x64 reference: MxNativeCodec, MxNativeClient,
                          MxAsbClient, probes, tests, harnesses. Executable spec.
- design/                 Architectural plan for the Rust port (M0–M6), error
                          model, protocol invariants, risks (R1–R16), adversarial
                          review log (review.md).
- rust/                   Rust workspace. M0 skeleton + M1 codec parity.
                          mxaccess-codec: 215 unit tests + 2 cross-implementation
                          parity tests (byte-identical against .NET reference).
                          Other crates are M0 stubs awaiting M2+.
- captures/               Frida + netsh + pcap evidence per CLAUDE.md
                          ("captures are evidence, not throwaway logs").
- analysis/               Decompiled C# (frida/proxy/decompiled-*),
                          Ghidra exports for native DLLs (`exports/` only —
                          working state at `projects/` and AVEVA's input
                          binaries at `input/` are gitignored).
- docs/                   Reverse-engineering reference docs.
- tools/                  Setup-LiveProbeEnv.ps1 (Infisical credential fetcher),
                          Compute-Crc.ps1 (.NET parity helper).
- .github/workflows/      Rust CI: fmt + build + test + clippy on Windows.
- LICENSE                 MIT (Joseph Doherty, 2026).

Verified:
- cargo test --workspace → 217 passed (215 unit + 2 .NET parity), 0 failed
- cargo clippy --workspace -- -D warnings → clean
- cargo fmt --all -- --check → clean
- cargo publish --dry-run -p mxaccess-codec → packages cleanly

Excluded from history (see .gitignore):
- **/bin, **/obj, **/target — build artifacts
- analysis/ghidra/projects/ — Ghidra working state (regenerable)
- analysis/ghidra/input/ — AVEVA proprietary DLLs (vendor IP)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
Joseph Doherty
2026-05-05 06:21:00 -04:00
parent 43733699b0
commit fe2a6db786
3849 changed files with 352975 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
captures/022-frida-write-test-int-sequence-106-108/frida-events.tsv
+103
View File
@@ -0,0 +1,103 @@
time event module name ecx retval args candidate_index candidate_size candidate_ptr value_hits hex
2026-04-25T06:17:48.379Z hook.installed LmxProxy.dll CLMXProxyServer.Write.variantA []
2026-04-25T06:17:48.380Z hook.installed LmxProxy.dll CLMXProxyServer.Write.variantB []
2026-04-25T06:17:48.380Z hook.installed LmxProxy.dll CLMXProxyServer.WriteSecured.variantA []
2026-04-25T06:17:48.381Z hook.installed LmxProxy.dll CLMXProxyServer.WriteSecured.variantB []
2026-04-25T06:17:48.381Z hook.installed LmxProxy.dll CLMXProxyServer.AdviseSupervisory []
2026-04-25T06:17:55.321Z hook.installed NmxAdptr.dll CNmxAdapter.TransferData []
2026-04-25T06:17:55.322Z hook.installed NmxAdptr.dll CNmxAdapter.ProcessDataReceived []
2026-04-25T06:17:55.322Z hook.installed NmxAdptr.dll CNmxAdapter.PutRequest []
2026-04-25T06:17:55.323Z hook.installed NmxAdptr.dll CNmxAdapter.PutRequestEx []
2026-04-25T06:17:55.378Z call.enter LmxProxy.dll CLMXProxyServer.AdviseSupervisory 0xf3ebcc "[""0x6418ff0"",""0x1"",""0x1"",""0x7b7c3c71"",""0x74794704""]"
2026-04-25T06:17:55.379Z call.leave LmxProxy.dll CLMXProxyServer.AdviseSupervisory 0x0 []
2026-04-25T06:17:55.503Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x963c738"",""0x1"",""0x1"",""0x1"",""0x2"",""0x0"",""0x13a"",""0x9640648"",""0xf3e890"",""0xdd21334b""]" 0 1 0x2
2026-04-25T06:17:55.503Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x963c738"",""0x1"",""0x1"",""0x1"",""0x2"",""0x0"",""0x13a"",""0x9640648"",""0xf3e890"",""0xdd21334b""]" 1 314 0x9640648
2026-04-25T06:17:55.504Z nmx.enter NmxAdptr.dll CNmxAdapter.TransferData 0x963c738 "[""0x1"",""0x1"",""0x1"",""0x168"",""0x9fc8020"",""0x7786906e"",""0x9640214"",""0x9640204"",""0x641add04"",""0x0""]" 0 360 0x9fc8020
2026-04-25T06:17:55.505Z nmx.leave NmxAdptr.dll CNmxAdapter.TransferData 0x0 []
2026-04-25T06:17:55.505Z nmx.leave NmxAdptr.dll CNmxAdapter.PutRequest 0x0 []
2026-04-25T06:17:55.506Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x963c738"",""0x1"",""0x1"",""0x2"",""0x2"",""0x0"",""0x27"",""0x970e4e0"",""0xf3e890"",""0xdd21334b""]" 0 2 0x2
2026-04-25T06:17:55.506Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x963c738"",""0x1"",""0x1"",""0x2"",""0x2"",""0x0"",""0x27"",""0x970e4e0"",""0xf3e890"",""0xdd21334b""]" 1 39 0x970e4e0
2026-04-25T06:17:55.508Z nmx.enter NmxAdptr.dll CNmxAdapter.TransferData 0x963c738 "[""0x1"",""0x1"",""0x2"",""0x55"",""0x9fc8020"",""0x7786906e"",""0x971a39c"",""0x971a38c"",""0x641add04"",""0x0""]" 0 85 0x9fc8020
2026-04-25T06:17:55.509Z nmx.leave NmxAdptr.dll CNmxAdapter.TransferData 0x0 []
2026-04-25T06:17:55.509Z nmx.leave NmxAdptr.dll CNmxAdapter.PutRequest 0x0 []
2026-04-25T06:17:55.547Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 "[""0x2c2"",""0x818c120"",""0x798e8f8"",""0x76ffedd8"",""0x963c744"",""0x2c2"",""0x818c120"",""0x206"",""0x3"",""0x7d51664""]" 0 706 0x818c120
2026-04-25T06:17:55.547Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 "[""0x2c2"",""0x818c120"",""0x798e8f8"",""0x76ffedd8"",""0x963c744"",""0x2c2"",""0x818c120"",""0x206"",""0x3"",""0x7d51664""]" 1 518 0x3
2026-04-25T06:17:55.547Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 "[""0x2c2"",""0x818c120"",""0x798e8f8"",""0x76ffedd8"",""0x963c744"",""0x2c2"",""0x818c120"",""0x206"",""0x3"",""0x7d51664""]" 2 3 0x7d51664
2026-04-25T06:17:55.548Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x1 []
2026-04-25T06:17:55.549Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 "[""0x97"",""0x811fb70"",""0x798e8f8"",""0x76ffedd8"",""0x963c744"",""0x97"",""0x811fb70"",""0x206"",""0x3"",""0x7d51664""]" 0 151 0x811fb70
2026-04-25T06:17:55.549Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 "[""0x97"",""0x811fb70"",""0x798e8f8"",""0x76ffedd8"",""0x963c744"",""0x97"",""0x811fb70"",""0x206"",""0x3"",""0x7d51664""]" 1 518 0x3
2026-04-25T06:17:55.549Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 "[""0x97"",""0x811fb70"",""0x798e8f8"",""0x76ffedd8"",""0x963c744"",""0x97"",""0x811fb70"",""0x206"",""0x3"",""0x7d51664""]" 2 3 0x7d51664
2026-04-25T06:17:55.549Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x1 []
2026-04-25T06:17:55.557Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 "[""0x5c"",""0x818b018"",""0x798e8f8"",""0x76ffedd8"",""0x963c744"",""0x5c"",""0x818b018"",""0x206"",""0x3"",""0x7d51664""]" 0 92 0x818b018
2026-04-25T06:17:55.557Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 "[""0x5c"",""0x818b018"",""0x798e8f8"",""0x76ffedd8"",""0x963c744"",""0x5c"",""0x818b018"",""0x206"",""0x3"",""0x7d51664""]" 1 518 0x3
2026-04-25T06:17:55.557Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 "[""0x5c"",""0x818b018"",""0x798e8f8"",""0x76ffedd8"",""0x963c744"",""0x5c"",""0x818b018"",""0x206"",""0x3"",""0x7d51664""]" 2 3 0x7d51664
2026-04-25T06:17:55.557Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x1 []
2026-04-25T06:17:55.558Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 "[""0x6c"",""0x814a460"",""0x798e8f8"",""0x76ffedd8"",""0x963c744"",""0x6c"",""0x814a460"",""0x206"",""0x3"",""0x7d51664""]" 0 108 0x814a460
2026-04-25T06:17:55.558Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 "[""0x6c"",""0x814a460"",""0x798e8f8"",""0x76ffedd8"",""0x963c744"",""0x6c"",""0x814a460"",""0x206"",""0x3"",""0x7d51664""]" 1 518 0x3
2026-04-25T06:17:55.558Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 "[""0x6c"",""0x814a460"",""0x798e8f8"",""0x76ffedd8"",""0x963c744"",""0x6c"",""0x814a460"",""0x206"",""0x3"",""0x7d51664""]" 2 3 0x7d51664
2026-04-25T06:17:55.559Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x1 []
2026-04-25T06:17:55.613Z nmx.enter NmxAdptr.dll CNmxAdapter.TransferData 0x963c738 "[""0x1"",""0x1"",""0x1"",""0x2e"",""0x9fc8020"",""0x77869082"",""0x9637010"",""0x0"",""0x0"",""0x0""]" 0 46 0x9fc8020
2026-04-25T06:17:55.614Z nmx.leave NmxAdptr.dll CNmxAdapter.TransferData 0x0 []
2026-04-25T06:17:55.635Z nmx.enter NmxAdptr.dll CNmxAdapter.TransferData 0x963c738 "[""0x1"",""0x1"",""0x2"",""0x2e"",""0x9fc8020"",""0x77869082"",""0x9637010"",""0x0"",""0x0"",""0x0""]" 0 46 0x9fc8020
2026-04-25T06:17:55.636Z nmx.leave NmxAdptr.dll CNmxAdapter.TransferData 0x0 []
2026-04-25T06:17:56.407Z call.enter LmxProxy.dll CLMXProxyServer.Write.variantA 0xf3ebc0 "[""0x6418ff0"",""0x1"",""0x1"",""0x3"",""0x0"",""0x6a"",""0x0"",""0x1"",""0x7b7c3c71"",""0x74794704""]"
2026-04-25T06:17:56.408Z call.leave LmxProxy.dll CLMXProxyServer.Write.variantA 0x0 []
2026-04-25T06:17:56.511Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x963c738"",""0x1"",""0x1"",""0x2"",""0x2"",""0x0"",""0x28"",""0x970e3c0"",""0xf3e890"",""0xdd21334b""]" 0 2 0x2
2026-04-25T06:17:56.511Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x963c738"",""0x1"",""0x1"",""0x2"",""0x2"",""0x0"",""0x28"",""0x970e3c0"",""0xf3e890"",""0xdd21334b""]" 1 40 0x970e3c0
2026-04-25T06:17:56.512Z nmx.enter NmxAdptr.dll CNmxAdapter.TransferData 0x963c738 "[""0x1"",""0x1"",""0x2"",""0x56"",""0x9fc8020"",""0x7786906e"",""0x96377f4"",""0x96377e4"",""0x641add04"",""0x0""]" 0 86 0x9fc8020
2026-04-25T06:17:56.513Z nmx.leave NmxAdptr.dll CNmxAdapter.TransferData 0x0 []
2026-04-25T06:17:56.513Z nmx.leave NmxAdptr.dll CNmxAdapter.PutRequest 0x0 []
2026-04-25T06:17:56.566Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 "[""0x33"",""0x818c120"",""0x798e8f8"",""0x76ffedd8"",""0x963c744"",""0x33"",""0x818c120"",""0x206"",""0x3"",""0x7d51664""]" 0 51 0x818c120
2026-04-25T06:17:56.566Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 "[""0x33"",""0x818c120"",""0x798e8f8"",""0x76ffedd8"",""0x963c744"",""0x33"",""0x818c120"",""0x206"",""0x3"",""0x7d51664""]" 1 518 0x3
2026-04-25T06:17:56.566Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 "[""0x33"",""0x818c120"",""0x798e8f8"",""0x76ffedd8"",""0x963c744"",""0x33"",""0x818c120"",""0x206"",""0x3"",""0x7d51664""]" 2 3 0x7d51664
2026-04-25T06:17:56.566Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x1 []
2026-04-25T06:17:56.567Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 "[""0x58"",""0x811fb70"",""0x798e8f8"",""0x76ffedd8"",""0x963c744"",""0x58"",""0x811fb70"",""0x206"",""0x3"",""0x7d51664""]" 0 88 0x811fb70
2026-04-25T06:17:56.567Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 "[""0x58"",""0x811fb70"",""0x798e8f8"",""0x76ffedd8"",""0x963c744"",""0x58"",""0x811fb70"",""0x206"",""0x3"",""0x7d51664""]" 1 518 0x3
2026-04-25T06:17:56.567Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 "[""0x58"",""0x811fb70"",""0x798e8f8"",""0x76ffedd8"",""0x963c744"",""0x58"",""0x811fb70"",""0x206"",""0x3"",""0x7d51664""]" 2 3 0x7d51664
2026-04-25T06:17:56.568Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x1 []
2026-04-25T06:17:56.618Z nmx.enter NmxAdptr.dll CNmxAdapter.TransferData 0x963c738 "[""0x1"",""0x1"",""0x2"",""0x2e"",""0x9fc8020"",""0x77869082"",""0x9637010"",""0x0"",""0x0"",""0x0""]" 0 46 0x9fc8020
2026-04-25T06:17:56.619Z nmx.leave NmxAdptr.dll CNmxAdapter.TransferData 0x0 []
2026-04-25T06:17:57.136Z call.enter LmxProxy.dll CLMXProxyServer.Write.variantA 0xf3ebc0 "[""0x6418ff0"",""0x1"",""0x1"",""0x3"",""0x0"",""0x6b"",""0x0"",""0x1"",""0x7b7c3c71"",""0x74794704""]"
2026-04-25T06:17:57.136Z call.leave LmxProxy.dll CLMXProxyServer.Write.variantA 0x0 []
2026-04-25T06:17:57.238Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x963c738"",""0x1"",""0x1"",""0x2"",""0x2"",""0x0"",""0x28"",""0x970e690"",""0xf3e890"",""0xdd21334b""]" 0 2 0x2
2026-04-25T06:17:57.238Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x963c738"",""0x1"",""0x1"",""0x2"",""0x2"",""0x0"",""0x28"",""0x970e690"",""0xf3e890"",""0xdd21334b""]" 1 40 0x970e690
2026-04-25T06:17:57.239Z nmx.enter NmxAdptr.dll CNmxAdapter.TransferData 0x963c738 "[""0x1"",""0x1"",""0x2"",""0x56"",""0x9fc8020"",""0x7786906e"",""0x971a7f4"",""0x971a7e4"",""0x641add04"",""0x0""]" 0 86 0x9fc8020
2026-04-25T06:17:57.240Z nmx.leave NmxAdptr.dll CNmxAdapter.TransferData 0x0 []
2026-04-25T06:17:57.240Z nmx.leave NmxAdptr.dll CNmxAdapter.PutRequest 0x0 []
2026-04-25T06:17:57.260Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 "[""0x33"",""0x818b018"",""0x798e8f8"",""0x76ffedd8"",""0x963c744"",""0x33"",""0x818b018"",""0x206"",""0x3"",""0x7d51664""]" 0 51 0x818b018
2026-04-25T06:17:57.260Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 "[""0x33"",""0x818b018"",""0x798e8f8"",""0x76ffedd8"",""0x963c744"",""0x33"",""0x818b018"",""0x206"",""0x3"",""0x7d51664""]" 1 518 0x3
2026-04-25T06:17:57.260Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 "[""0x33"",""0x818b018"",""0x798e8f8"",""0x76ffedd8"",""0x963c744"",""0x33"",""0x818b018"",""0x206"",""0x3"",""0x7d51664""]" 2 3 0x7d51664
2026-04-25T06:17:57.260Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x1 []
2026-04-25T06:17:57.261Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 "[""0x58"",""0x814a460"",""0x798e8f8"",""0x76ffedd8"",""0x963c744"",""0x58"",""0x814a460"",""0x206"",""0x3"",""0x7d51664""]" 0 88 0x814a460
2026-04-25T06:17:57.261Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 "[""0x58"",""0x814a460"",""0x798e8f8"",""0x76ffedd8"",""0x963c744"",""0x58"",""0x814a460"",""0x206"",""0x3"",""0x7d51664""]" 1 518 0x3
2026-04-25T06:17:57.261Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 "[""0x58"",""0x814a460"",""0x798e8f8"",""0x76ffedd8"",""0x963c744"",""0x58"",""0x814a460"",""0x206"",""0x3"",""0x7d51664""]" 2 3 0x7d51664
2026-04-25T06:17:57.261Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x1 []
2026-04-25T06:17:57.344Z nmx.enter NmxAdptr.dll CNmxAdapter.TransferData 0x963c738 "[""0x1"",""0x1"",""0x2"",""0x2e"",""0x9fc8020"",""0x77869082"",""0x9637010"",""0x0"",""0x0"",""0x0""]" 0 46 0x9fc8020
2026-04-25T06:17:57.345Z nmx.leave NmxAdptr.dll CNmxAdapter.TransferData 0x0 []
2026-04-25T06:17:57.861Z call.enter LmxProxy.dll CLMXProxyServer.Write.variantA 0xf3ebc0 "[""0x6418ff0"",""0x1"",""0x1"",""0x3"",""0x0"",""0x6c"",""0x0"",""0x1"",""0x7b7c3c71"",""0x74794704""]"
2026-04-25T06:17:57.861Z call.leave LmxProxy.dll CLMXProxyServer.Write.variantA 0x0 []
2026-04-25T06:17:57.913Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x963c738"",""0x1"",""0x1"",""0x2"",""0x2"",""0x0"",""0x28"",""0x970e2e8"",""0xf3e890"",""0xdd21334b""]" 0 2 0x2
2026-04-25T06:17:57.913Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x963c738"",""0x1"",""0x1"",""0x2"",""0x2"",""0x0"",""0x28"",""0x970e2e8"",""0xf3e890"",""0xdd21334b""]" 1 40 0x970e2e8
2026-04-25T06:17:57.914Z nmx.enter NmxAdptr.dll CNmxAdapter.TransferData 0x963c738 "[""0x1"",""0x1"",""0x2"",""0x56"",""0x9fc8020"",""0x7786906e"",""0x96377f4"",""0x96377e4"",""0x641add04"",""0x0""]" 0 86 0x9fc8020
2026-04-25T06:17:57.915Z nmx.leave NmxAdptr.dll CNmxAdapter.TransferData 0x0 []
2026-04-25T06:17:57.915Z nmx.leave NmxAdptr.dll CNmxAdapter.PutRequest 0x0 []
2026-04-25T06:17:57.950Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 "[""0x33"",""0x818c120"",""0x798e8f8"",""0x76ffedd8"",""0x963c744"",""0x33"",""0x818c120"",""0x206"",""0x3"",""0x7d51664""]" 0 51 0x818c120
2026-04-25T06:17:57.950Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 "[""0x33"",""0x818c120"",""0x798e8f8"",""0x76ffedd8"",""0x963c744"",""0x33"",""0x818c120"",""0x206"",""0x3"",""0x7d51664""]" 1 518 0x3
2026-04-25T06:17:57.950Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 "[""0x33"",""0x818c120"",""0x798e8f8"",""0x76ffedd8"",""0x963c744"",""0x33"",""0x818c120"",""0x206"",""0x3"",""0x7d51664""]" 2 3 0x7d51664
2026-04-25T06:17:57.950Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x1 []
2026-04-25T06:17:57.952Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 "[""0x58"",""0x811fb70"",""0x798e8f8"",""0x76ffedd8"",""0x963c744"",""0x58"",""0x811fb70"",""0x206"",""0x3"",""0x7d51664""]" 0 88 0x811fb70
2026-04-25T06:17:57.952Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 "[""0x58"",""0x811fb70"",""0x798e8f8"",""0x76ffedd8"",""0x963c744"",""0x58"",""0x811fb70"",""0x206"",""0x3"",""0x7d51664""]" 1 518 0x3
2026-04-25T06:17:57.952Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 "[""0x58"",""0x811fb70"",""0x798e8f8"",""0x76ffedd8"",""0x963c744"",""0x58"",""0x811fb70"",""0x206"",""0x3"",""0x7d51664""]" 2 3 0x7d51664
2026-04-25T06:17:57.952Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x1 []
2026-04-25T06:17:58.019Z nmx.enter NmxAdptr.dll CNmxAdapter.TransferData 0x963c738 "[""0x1"",""0x1"",""0x2"",""0x2e"",""0x9fc8020"",""0x77869082"",""0x9637010"",""0x0"",""0x0"",""0x0""]" 0 46 0x9fc8020
2026-04-25T06:17:58.020Z nmx.leave NmxAdptr.dll CNmxAdapter.TransferData 0x0 []
2026-04-25T06:18:01.924Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x963c738"",""0x1"",""0x1"",""0x1"",""0x2"",""0x0"",""0x3a"",""0x970e258"",""0xf3ea4c"",""0xdd213d87""]" 0 1 0x2
2026-04-25T06:18:01.924Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x963c738"",""0x1"",""0x1"",""0x1"",""0x2"",""0x0"",""0x3a"",""0x970e258"",""0xf3ea4c"",""0xdd213d87""]" 1 58 0x970e258
2026-04-25T06:18:01.925Z nmx.enter NmxAdptr.dll CNmxAdapter.TransferData 0x963c738 "[""0x1"",""0x1"",""0x1"",""0x68"",""0x9fc8020"",""0x77869e12"",""0x96377f4"",""0x96377e4"",""0x641add04"",""0x64""]" 0 104 0x9fc8020
2026-04-25T06:18:01.925Z nmx.leave NmxAdptr.dll CNmxAdapter.TransferData 0x0 []
2026-04-25T06:18:01.925Z nmx.leave NmxAdptr.dll CNmxAdapter.PutRequest 0x0 []
2026-04-25T06:18:01.926Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x963c738"",""0x1"",""0x1"",""0x2"",""0x2"",""0x0"",""0x25"",""0x970e8d0"",""0xf3ea4c"",""0xdd213d87""]" 0 2 0x2
2026-04-25T06:18:01.926Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x963c738"",""0x1"",""0x1"",""0x2"",""0x2"",""0x0"",""0x25"",""0x970e8d0"",""0xf3ea4c"",""0xdd213d87""]" 1 37 0x970e8d0
2026-04-25T06:18:01.927Z nmx.enter NmxAdptr.dll CNmxAdapter.TransferData 0x963c738 "[""0x1"",""0x1"",""0x2"",""0x53"",""0x9fc8020"",""0x77869e12"",""0x971a39c"",""0x971a38c"",""0x641add04"",""0x64""]" 0 83 0x9fc8020
2026-04-25T06:18:01.928Z nmx.leave NmxAdptr.dll CNmxAdapter.TransferData 0x0 []
2026-04-25T06:18:01.928Z nmx.leave NmxAdptr.dll CNmxAdapter.PutRequest 0x0 []
1 time event module name ecx retval args candidate_index candidate_size candidate_ptr value_hits hex
2 2026-04-25T06:17:48.379Z hook.installed LmxProxy.dll CLMXProxyServer.Write.variantA []
3 2026-04-25T06:17:48.380Z hook.installed LmxProxy.dll CLMXProxyServer.Write.variantB []
4 2026-04-25T06:17:48.380Z hook.installed LmxProxy.dll CLMXProxyServer.WriteSecured.variantA []
5 2026-04-25T06:17:48.381Z hook.installed LmxProxy.dll CLMXProxyServer.WriteSecured.variantB []
6 2026-04-25T06:17:48.381Z hook.installed LmxProxy.dll CLMXProxyServer.AdviseSupervisory []
7 2026-04-25T06:17:55.321Z hook.installed NmxAdptr.dll CNmxAdapter.TransferData []
8 2026-04-25T06:17:55.322Z hook.installed NmxAdptr.dll CNmxAdapter.ProcessDataReceived []
9 2026-04-25T06:17:55.322Z hook.installed NmxAdptr.dll CNmxAdapter.PutRequest []
10 2026-04-25T06:17:55.323Z hook.installed NmxAdptr.dll CNmxAdapter.PutRequestEx []
11 2026-04-25T06:17:55.378Z call.enter LmxProxy.dll CLMXProxyServer.AdviseSupervisory 0xf3ebcc ["0x6418ff0","0x1","0x1","0x7b7c3c71","0x74794704"]
12 2026-04-25T06:17:55.379Z call.leave LmxProxy.dll CLMXProxyServer.AdviseSupervisory 0x0 []
13 2026-04-25T06:17:55.503Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 ["0x963c738","0x1","0x1","0x1","0x2","0x0","0x13a","0x9640648","0xf3e890","0xdd21334b"] 0 1 0x2
14 2026-04-25T06:17:55.503Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 ["0x963c738","0x1","0x1","0x1","0x2","0x0","0x13a","0x9640648","0xf3e890","0xdd21334b"] 1 314 0x9640648
15 2026-04-25T06:17:55.504Z nmx.enter NmxAdptr.dll CNmxAdapter.TransferData 0x963c738 ["0x1","0x1","0x1","0x168","0x9fc8020","0x7786906e","0x9640214","0x9640204","0x641add04","0x0"] 0 360 0x9fc8020
16 2026-04-25T06:17:55.505Z nmx.leave NmxAdptr.dll CNmxAdapter.TransferData 0x0 []
17 2026-04-25T06:17:55.505Z nmx.leave NmxAdptr.dll CNmxAdapter.PutRequest 0x0 []
18 2026-04-25T06:17:55.506Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 ["0x963c738","0x1","0x1","0x2","0x2","0x0","0x27","0x970e4e0","0xf3e890","0xdd21334b"] 0 2 0x2
19 2026-04-25T06:17:55.506Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 ["0x963c738","0x1","0x1","0x2","0x2","0x0","0x27","0x970e4e0","0xf3e890","0xdd21334b"] 1 39 0x970e4e0
20 2026-04-25T06:17:55.508Z nmx.enter NmxAdptr.dll CNmxAdapter.TransferData 0x963c738 ["0x1","0x1","0x2","0x55","0x9fc8020","0x7786906e","0x971a39c","0x971a38c","0x641add04","0x0"] 0 85 0x9fc8020
21 2026-04-25T06:17:55.509Z nmx.leave NmxAdptr.dll CNmxAdapter.TransferData 0x0 []
22 2026-04-25T06:17:55.509Z nmx.leave NmxAdptr.dll CNmxAdapter.PutRequest 0x0 []
23 2026-04-25T06:17:55.547Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 ["0x2c2","0x818c120","0x798e8f8","0x76ffedd8","0x963c744","0x2c2","0x818c120","0x206","0x3","0x7d51664"] 0 706 0x818c120
24 2026-04-25T06:17:55.547Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 ["0x2c2","0x818c120","0x798e8f8","0x76ffedd8","0x963c744","0x2c2","0x818c120","0x206","0x3","0x7d51664"] 1 518 0x3
25 2026-04-25T06:17:55.547Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 ["0x2c2","0x818c120","0x798e8f8","0x76ffedd8","0x963c744","0x2c2","0x818c120","0x206","0x3","0x7d51664"] 2 3 0x7d51664
26 2026-04-25T06:17:55.548Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x1 []
27 2026-04-25T06:17:55.549Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 ["0x97","0x811fb70","0x798e8f8","0x76ffedd8","0x963c744","0x97","0x811fb70","0x206","0x3","0x7d51664"] 0 151 0x811fb70
28 2026-04-25T06:17:55.549Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 ["0x97","0x811fb70","0x798e8f8","0x76ffedd8","0x963c744","0x97","0x811fb70","0x206","0x3","0x7d51664"] 1 518 0x3
29 2026-04-25T06:17:55.549Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 ["0x97","0x811fb70","0x798e8f8","0x76ffedd8","0x963c744","0x97","0x811fb70","0x206","0x3","0x7d51664"] 2 3 0x7d51664
30 2026-04-25T06:17:55.549Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x1 []
31 2026-04-25T06:17:55.557Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 ["0x5c","0x818b018","0x798e8f8","0x76ffedd8","0x963c744","0x5c","0x818b018","0x206","0x3","0x7d51664"] 0 92 0x818b018
32 2026-04-25T06:17:55.557Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 ["0x5c","0x818b018","0x798e8f8","0x76ffedd8","0x963c744","0x5c","0x818b018","0x206","0x3","0x7d51664"] 1 518 0x3
33 2026-04-25T06:17:55.557Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 ["0x5c","0x818b018","0x798e8f8","0x76ffedd8","0x963c744","0x5c","0x818b018","0x206","0x3","0x7d51664"] 2 3 0x7d51664
34 2026-04-25T06:17:55.557Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x1 []
35 2026-04-25T06:17:55.558Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 ["0x6c","0x814a460","0x798e8f8","0x76ffedd8","0x963c744","0x6c","0x814a460","0x206","0x3","0x7d51664"] 0 108 0x814a460
36 2026-04-25T06:17:55.558Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 ["0x6c","0x814a460","0x798e8f8","0x76ffedd8","0x963c744","0x6c","0x814a460","0x206","0x3","0x7d51664"] 1 518 0x3
37 2026-04-25T06:17:55.558Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 ["0x6c","0x814a460","0x798e8f8","0x76ffedd8","0x963c744","0x6c","0x814a460","0x206","0x3","0x7d51664"] 2 3 0x7d51664
38 2026-04-25T06:17:55.559Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x1 []
39 2026-04-25T06:17:55.613Z nmx.enter NmxAdptr.dll CNmxAdapter.TransferData 0x963c738 ["0x1","0x1","0x1","0x2e","0x9fc8020","0x77869082","0x9637010","0x0","0x0","0x0"] 0 46 0x9fc8020
40 2026-04-25T06:17:55.614Z nmx.leave NmxAdptr.dll CNmxAdapter.TransferData 0x0 []
41 2026-04-25T06:17:55.635Z nmx.enter NmxAdptr.dll CNmxAdapter.TransferData 0x963c738 ["0x1","0x1","0x2","0x2e","0x9fc8020","0x77869082","0x9637010","0x0","0x0","0x0"] 0 46 0x9fc8020
42 2026-04-25T06:17:55.636Z nmx.leave NmxAdptr.dll CNmxAdapter.TransferData 0x0 []
43 2026-04-25T06:17:56.407Z call.enter LmxProxy.dll CLMXProxyServer.Write.variantA 0xf3ebc0 ["0x6418ff0","0x1","0x1","0x3","0x0","0x6a","0x0","0x1","0x7b7c3c71","0x74794704"]
44 2026-04-25T06:17:56.408Z call.leave LmxProxy.dll CLMXProxyServer.Write.variantA 0x0 []
45 2026-04-25T06:17:56.511Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 ["0x963c738","0x1","0x1","0x2","0x2","0x0","0x28","0x970e3c0","0xf3e890","0xdd21334b"] 0 2 0x2
46 2026-04-25T06:17:56.511Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 ["0x963c738","0x1","0x1","0x2","0x2","0x0","0x28","0x970e3c0","0xf3e890","0xdd21334b"] 1 40 0x970e3c0
47 2026-04-25T06:17:56.512Z nmx.enter NmxAdptr.dll CNmxAdapter.TransferData 0x963c738 ["0x1","0x1","0x2","0x56","0x9fc8020","0x7786906e","0x96377f4","0x96377e4","0x641add04","0x0"] 0 86 0x9fc8020
48 2026-04-25T06:17:56.513Z nmx.leave NmxAdptr.dll CNmxAdapter.TransferData 0x0 []
49 2026-04-25T06:17:56.513Z nmx.leave NmxAdptr.dll CNmxAdapter.PutRequest 0x0 []
50 2026-04-25T06:17:56.566Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 ["0x33","0x818c120","0x798e8f8","0x76ffedd8","0x963c744","0x33","0x818c120","0x206","0x3","0x7d51664"] 0 51 0x818c120
51 2026-04-25T06:17:56.566Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 ["0x33","0x818c120","0x798e8f8","0x76ffedd8","0x963c744","0x33","0x818c120","0x206","0x3","0x7d51664"] 1 518 0x3
52 2026-04-25T06:17:56.566Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 ["0x33","0x818c120","0x798e8f8","0x76ffedd8","0x963c744","0x33","0x818c120","0x206","0x3","0x7d51664"] 2 3 0x7d51664
53 2026-04-25T06:17:56.566Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x1 []
54 2026-04-25T06:17:56.567Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 ["0x58","0x811fb70","0x798e8f8","0x76ffedd8","0x963c744","0x58","0x811fb70","0x206","0x3","0x7d51664"] 0 88 0x811fb70
55 2026-04-25T06:17:56.567Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 ["0x58","0x811fb70","0x798e8f8","0x76ffedd8","0x963c744","0x58","0x811fb70","0x206","0x3","0x7d51664"] 1 518 0x3
56 2026-04-25T06:17:56.567Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 ["0x58","0x811fb70","0x798e8f8","0x76ffedd8","0x963c744","0x58","0x811fb70","0x206","0x3","0x7d51664"] 2 3 0x7d51664
57 2026-04-25T06:17:56.568Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x1 []
58 2026-04-25T06:17:56.618Z nmx.enter NmxAdptr.dll CNmxAdapter.TransferData 0x963c738 ["0x1","0x1","0x2","0x2e","0x9fc8020","0x77869082","0x9637010","0x0","0x0","0x0"] 0 46 0x9fc8020
59 2026-04-25T06:17:56.619Z nmx.leave NmxAdptr.dll CNmxAdapter.TransferData 0x0 []
60 2026-04-25T06:17:57.136Z call.enter LmxProxy.dll CLMXProxyServer.Write.variantA 0xf3ebc0 ["0x6418ff0","0x1","0x1","0x3","0x0","0x6b","0x0","0x1","0x7b7c3c71","0x74794704"]
61 2026-04-25T06:17:57.136Z call.leave LmxProxy.dll CLMXProxyServer.Write.variantA 0x0 []
62 2026-04-25T06:17:57.238Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 ["0x963c738","0x1","0x1","0x2","0x2","0x0","0x28","0x970e690","0xf3e890","0xdd21334b"] 0 2 0x2
63 2026-04-25T06:17:57.238Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 ["0x963c738","0x1","0x1","0x2","0x2","0x0","0x28","0x970e690","0xf3e890","0xdd21334b"] 1 40 0x970e690
64 2026-04-25T06:17:57.239Z nmx.enter NmxAdptr.dll CNmxAdapter.TransferData 0x963c738 ["0x1","0x1","0x2","0x56","0x9fc8020","0x7786906e","0x971a7f4","0x971a7e4","0x641add04","0x0"] 0 86 0x9fc8020
65 2026-04-25T06:17:57.240Z nmx.leave NmxAdptr.dll CNmxAdapter.TransferData 0x0 []
66 2026-04-25T06:17:57.240Z nmx.leave NmxAdptr.dll CNmxAdapter.PutRequest 0x0 []
67 2026-04-25T06:17:57.260Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 ["0x33","0x818b018","0x798e8f8","0x76ffedd8","0x963c744","0x33","0x818b018","0x206","0x3","0x7d51664"] 0 51 0x818b018
68 2026-04-25T06:17:57.260Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 ["0x33","0x818b018","0x798e8f8","0x76ffedd8","0x963c744","0x33","0x818b018","0x206","0x3","0x7d51664"] 1 518 0x3
69 2026-04-25T06:17:57.260Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 ["0x33","0x818b018","0x798e8f8","0x76ffedd8","0x963c744","0x33","0x818b018","0x206","0x3","0x7d51664"] 2 3 0x7d51664
70 2026-04-25T06:17:57.260Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x1 []
71 2026-04-25T06:17:57.261Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 ["0x58","0x814a460","0x798e8f8","0x76ffedd8","0x963c744","0x58","0x814a460","0x206","0x3","0x7d51664"] 0 88 0x814a460
72 2026-04-25T06:17:57.261Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 ["0x58","0x814a460","0x798e8f8","0x76ffedd8","0x963c744","0x58","0x814a460","0x206","0x3","0x7d51664"] 1 518 0x3
73 2026-04-25T06:17:57.261Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 ["0x58","0x814a460","0x798e8f8","0x76ffedd8","0x963c744","0x58","0x814a460","0x206","0x3","0x7d51664"] 2 3 0x7d51664
74 2026-04-25T06:17:57.261Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x1 []
75 2026-04-25T06:17:57.344Z nmx.enter NmxAdptr.dll CNmxAdapter.TransferData 0x963c738 ["0x1","0x1","0x2","0x2e","0x9fc8020","0x77869082","0x9637010","0x0","0x0","0x0"] 0 46 0x9fc8020
76 2026-04-25T06:17:57.345Z nmx.leave NmxAdptr.dll CNmxAdapter.TransferData 0x0 []
77 2026-04-25T06:17:57.861Z call.enter LmxProxy.dll CLMXProxyServer.Write.variantA 0xf3ebc0 ["0x6418ff0","0x1","0x1","0x3","0x0","0x6c","0x0","0x1","0x7b7c3c71","0x74794704"]
78 2026-04-25T06:17:57.861Z call.leave LmxProxy.dll CLMXProxyServer.Write.variantA 0x0 []
79 2026-04-25T06:17:57.913Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 ["0x963c738","0x1","0x1","0x2","0x2","0x0","0x28","0x970e2e8","0xf3e890","0xdd21334b"] 0 2 0x2
80 2026-04-25T06:17:57.913Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 ["0x963c738","0x1","0x1","0x2","0x2","0x0","0x28","0x970e2e8","0xf3e890","0xdd21334b"] 1 40 0x970e2e8
81 2026-04-25T06:17:57.914Z nmx.enter NmxAdptr.dll CNmxAdapter.TransferData 0x963c738 ["0x1","0x1","0x2","0x56","0x9fc8020","0x7786906e","0x96377f4","0x96377e4","0x641add04","0x0"] 0 86 0x9fc8020
82 2026-04-25T06:17:57.915Z nmx.leave NmxAdptr.dll CNmxAdapter.TransferData 0x0 []
83 2026-04-25T06:17:57.915Z nmx.leave NmxAdptr.dll CNmxAdapter.PutRequest 0x0 []
84 2026-04-25T06:17:57.950Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 ["0x33","0x818c120","0x798e8f8","0x76ffedd8","0x963c744","0x33","0x818c120","0x206","0x3","0x7d51664"] 0 51 0x818c120
85 2026-04-25T06:17:57.950Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 ["0x33","0x818c120","0x798e8f8","0x76ffedd8","0x963c744","0x33","0x818c120","0x206","0x3","0x7d51664"] 1 518 0x3
86 2026-04-25T06:17:57.950Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 ["0x33","0x818c120","0x798e8f8","0x76ffedd8","0x963c744","0x33","0x818c120","0x206","0x3","0x7d51664"] 2 3 0x7d51664
87 2026-04-25T06:17:57.950Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x1 []
88 2026-04-25T06:17:57.952Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 ["0x58","0x811fb70","0x798e8f8","0x76ffedd8","0x963c744","0x58","0x811fb70","0x206","0x3","0x7d51664"] 0 88 0x811fb70
89 2026-04-25T06:17:57.952Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 ["0x58","0x811fb70","0x798e8f8","0x76ffedd8","0x963c744","0x58","0x811fb70","0x206","0x3","0x7d51664"] 1 518 0x3
90 2026-04-25T06:17:57.952Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x963c738 ["0x58","0x811fb70","0x798e8f8","0x76ffedd8","0x963c744","0x58","0x811fb70","0x206","0x3","0x7d51664"] 2 3 0x7d51664
91 2026-04-25T06:17:57.952Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x1 []
92 2026-04-25T06:17:58.019Z nmx.enter NmxAdptr.dll CNmxAdapter.TransferData 0x963c738 ["0x1","0x1","0x2","0x2e","0x9fc8020","0x77869082","0x9637010","0x0","0x0","0x0"] 0 46 0x9fc8020
93 2026-04-25T06:17:58.020Z nmx.leave NmxAdptr.dll CNmxAdapter.TransferData 0x0 []
94 2026-04-25T06:18:01.924Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 ["0x963c738","0x1","0x1","0x1","0x2","0x0","0x3a","0x970e258","0xf3ea4c","0xdd213d87"] 0 1 0x2
95 2026-04-25T06:18:01.924Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 ["0x963c738","0x1","0x1","0x1","0x2","0x0","0x3a","0x970e258","0xf3ea4c","0xdd213d87"] 1 58 0x970e258
96 2026-04-25T06:18:01.925Z nmx.enter NmxAdptr.dll CNmxAdapter.TransferData 0x963c738 ["0x1","0x1","0x1","0x68","0x9fc8020","0x77869e12","0x96377f4","0x96377e4","0x641add04","0x64"] 0 104 0x9fc8020
97 2026-04-25T06:18:01.925Z nmx.leave NmxAdptr.dll CNmxAdapter.TransferData 0x0 []
98 2026-04-25T06:18:01.925Z nmx.leave NmxAdptr.dll CNmxAdapter.PutRequest 0x0 []
99 2026-04-25T06:18:01.926Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 ["0x963c738","0x1","0x1","0x2","0x2","0x0","0x25","0x970e8d0","0xf3ea4c","0xdd213d87"] 0 2 0x2
100 2026-04-25T06:18:01.926Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 ["0x963c738","0x1","0x1","0x2","0x2","0x0","0x25","0x970e8d0","0xf3ea4c","0xdd213d87"] 1 37 0x970e8d0
101 2026-04-25T06:18:01.927Z nmx.enter NmxAdptr.dll CNmxAdapter.TransferData 0x963c738 ["0x1","0x1","0x2","0x53","0x9fc8020","0x77869e12","0x971a39c","0x971a38c","0x641add04","0x64"] 0 83 0x9fc8020
102 2026-04-25T06:18:01.928Z nmx.leave NmxAdptr.dll CNmxAdapter.TransferData 0x0 []
103 2026-04-25T06:18:01.928Z nmx.leave NmxAdptr.dll CNmxAdapter.PutRequest 0x0 []