mxaccess/captures/028-frida-write-test-datetime-sequence/frida-events.tsv at master

dohertj2/mxaccess

Fork 0

Files

T

Joseph Doherty fe2a6db786

rust / build / test / clippy / fmt (push) Has been cancelled

Details

Initial project state: .NET reference, design, Rust port (M0+M1), evidence

Layout:
- src/                    .NET 10 x64 reference: MxNativeCodec, MxNativeClient,
                          MxAsbClient, probes, tests, harnesses. Executable spec.
- design/                 Architectural plan for the Rust port (M0–M6), error
                          model, protocol invariants, risks (R1–R16), adversarial
                          review log (review.md).
- rust/                   Rust workspace. M0 skeleton + M1 codec parity.
                          mxaccess-codec: 215 unit tests + 2 cross-implementation
                          parity tests (byte-identical against .NET reference).
                          Other crates are M0 stubs awaiting M2+.
- captures/               Frida + netsh + pcap evidence per CLAUDE.md
                          ("captures are evidence, not throwaway logs").
- analysis/               Decompiled C# (frida/proxy/decompiled-*),
                          Ghidra exports for native DLLs (`exports/` only —
                          working state at `projects/` and AVEVA's input
                          binaries at `input/` are gitignored).
- docs/                   Reverse-engineering reference docs.
- tools/                  Setup-LiveProbeEnv.ps1 (Infisical credential fetcher),
                          Compute-Crc.ps1 (.NET parity helper).
- .github/workflows/      Rust CI: fmt + build + test + clippy on Windows.
- LICENSE                 MIT (Joseph Doherty, 2026).

Verified:
- cargo test --workspace → 217 passed (215 unit + 2 .NET parity), 0 failed
- cargo clippy --workspace -- -D warnings → clean
- cargo fmt --all -- --check → clean
- cargo publish --dry-run -p mxaccess-codec → packages cleanly

Excluded from history (see .gitignore):
- **/bin, **/obj, **/target — build artifacts
- analysis/ghidra/projects/ — Ghidra working state (regenerable)
- analysis/ghidra/input/ — AVEVA proprietary DLLs (vendor IP)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-05 06:21:00 -04:00

25 KiB

Raw Permalink Blame History

1	time	event	module	name	ecx	retval	args	candidate_index	candidate_size	candidate_ptr	value_hits	hex
2	2026-04-25T06:27:02.976Z	hook.installed	LmxProxy.dll	CLMXProxyServer.Write.variantA			[]
3	2026-04-25T06:27:02.977Z	hook.installed	LmxProxy.dll	CLMXProxyServer.Write.variantB			[]
4	2026-04-25T06:27:02.978Z	hook.installed	LmxProxy.dll	CLMXProxyServer.WriteSecured.variantA			[]
5	2026-04-25T06:27:02.978Z	hook.installed	LmxProxy.dll	CLMXProxyServer.WriteSecured.variantB			[]
6	2026-04-25T06:27:02.979Z	hook.installed	LmxProxy.dll	CLMXProxyServer.AdviseSupervisory			[]
7	2026-04-25T06:27:10.122Z	hook.installed	NmxAdptr.dll	CNmxAdapter.TransferData			[]
8	2026-04-25T06:27:10.123Z	hook.installed	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived			[]
9	2026-04-25T06:27:10.123Z	hook.installed	NmxAdptr.dll	CNmxAdapter.PutRequest			[]
10	2026-04-25T06:27:10.124Z	hook.installed	NmxAdptr.dll	CNmxAdapter.PutRequestEx			[]
11	2026-04-25T06:27:10.220Z	call.enter	LmxProxy.dll	CLMXProxyServer.AdviseSupervisory	0xafed7c		["0x5f28ff0","0x1","0x1","0xa8837d04","0x74794704"]
12	2026-04-25T06:27:10.221Z	call.leave	LmxProxy.dll	CLMXProxyServer.AdviseSupervisory		0x0	[]
13	2026-04-25T06:27:10.350Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.PutRequest	0x1		["0x90fc738","0x1","0x1","0x1","0x2","0x0","0x13a","0x9100648","0xafea40","0x5d23e122"]	0	1	0x2
14	2026-04-25T06:27:10.350Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.PutRequest	0x1		["0x90fc738","0x1","0x1","0x1","0x2","0x0","0x13a","0x9100648","0xafea40","0x5d23e122"]	1	314	0x9100648		17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 6a 00 00 00 40 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 d0 fc 0f 09 1f 01 00 b8 0e 42 27 b6 74 7a 43 9f 03 79 02 6c 2c 9e ba 00 00 01 00 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 76 00 00 00 4c 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61
15	2026-04-25T06:27:10.353Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.TransferData	0x90fc738		["0x1","0x1","0x1","0x168","0x9a84020","0xdfcc8c99","0x9100214","0x9100204","0x641add04","0x0"]	0	360	0x9a84020		01 00 3a 01 00 00 00 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 02 00 00 30 75 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 6a 00 00 00 40 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 d0 fc 0f 09 1f 01 00 b8 0e 42 27 b6 74 7a 43 9f 03 79 02 6c 2c 9e ba 00 00 01 00 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 76 00 00 00 4c 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d
16	2026-04-25T06:27:10.354Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.TransferData		0x0	[]
17	2026-04-25T06:27:10.354Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.PutRequest		0x0	[]
18	2026-04-25T06:27:10.355Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.PutRequest	0x1		["0x90fc738","0x1","0x1","0x2","0x2","0x0","0x27","0x91ce9a8","0xafea40","0x5d23e122"]	0	2	0x2
19	2026-04-25T06:27:10.355Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.PutRequest	0x1		["0x90fc738","0x1","0x1","0x2","0x2","0x0","0x27","0x91ce9a8","0xafea40","0x5d23e122"]	1	39	0x91ce9a8		1f 01 00 b8 0e 42 27 b6 74 7a 43 9f 03 79 02 6c 2c 9e ba 00 00 05 00 36 d7 02 00 9f 00 0a 00 62 49 00 00 03 00 00 00
20	2026-04-25T06:27:10.358Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.TransferData	0x90fc738		["0x1","0x1","0x2","0x55","0x9a84020","0xdfcc8c99","0x91d9584","0x91d9574","0x641add04","0x0"]	0	85	0x9a84020		01 00 27 00 00 00 00 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 1f 01 00 b8 0e 42 27 b6 74 7a 43 9f 03 79 02 6c 2c 9e ba 00 00 05 00 36 d7 02 00 9f 00 0a 00 62 49 00 00 03 00 00 00
21	2026-04-25T06:27:10.358Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.TransferData		0x0	[]
22	2026-04-25T06:27:10.359Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.PutRequest		0x0	[]
23	2026-04-25T06:27:10.365Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x90fc738		["0x5c","0x78962d0","0x741ece0","0x76ffedd8","0x90fc744","0x5c","0x78962d0","0x206","0x3","0x765f8a4"]	0	92	0x78962d0		01 00 2e 00 00 00 00 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 00 00 50 80 01 00 01 00 02 00 30 75 00 00 e5 c1 81 a9 f6 1b d0 4d 8e 68 b0 2a 1c c0 40 c8 b8 0e 42 27 b6 74 7a 43 9f 03 79 02 6c 2c 9e ba
24	2026-04-25T06:27:10.365Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x90fc738		["0x5c","0x78962d0","0x741ece0","0x76ffedd8","0x90fc744","0x5c","0x78962d0","0x206","0x3","0x765f8a4"]	1	518	0x3
25	2026-04-25T06:27:10.365Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x90fc738		["0x5c","0x78962d0","0x741ece0","0x76ffedd8","0x90fc744","0x5c","0x78962d0","0x206","0x3","0x765f8a4"]	2	3	0x765f8a4		90 b3 59
26	2026-04-25T06:27:10.365Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived		0x1	[]
27	2026-04-25T06:27:10.368Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x90fc738		["0x76","0x78a6720","0x741ece0","0x76ffedd8","0x90fc744","0x76","0x78a6720","0x206","0x3","0x765f8a4"]	0	118	0x78a6720		01 00 48 00 00 00 00 00 00 00 78 76 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 32 01 00 01 00 00 00 e5 c1 81 a9 f6 1b d0 4d 8e 68 b0 2a 1c c0 40 c8 b8 0e 42 27 b6 74 7a 43 9f 03 79 02 6c 2c 9e ba 03 00 00 00 03 00 00 00 c0 00 b0 a0 e2 57 47 bd dc 01 06 0a 00 00 00 c0 d6 54 04 aa b9 dc 01 00 00
28	2026-04-25T06:27:10.368Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x90fc738		["0x76","0x78a6720","0x741ece0","0x76ffedd8","0x90fc744","0x76","0x78a6720","0x206","0x3","0x765f8a4"]	1	518	0x3
29	2026-04-25T06:27:10.368Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x90fc738		["0x76","0x78a6720","0x741ece0","0x76ffedd8","0x90fc744","0x76","0x78a6720","0x206","0x3","0x765f8a4"]	2	3	0x765f8a4		90 b3 59
30	2026-04-25T06:27:10.368Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived		0x1	[]
31	2026-04-25T06:27:10.400Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x90fc738		["0x2c2","0x791ed68","0x741ece0","0x76ffedd8","0x90fc744","0x2c2","0x791ed68","0x206","0x3","0x765f8a4"]	0	706	0x791ed68		01 00 94 02 00 00 00 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 40 1f 50 80 08 a6 00 00 00 40 00 00 91 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 18 00 00 00 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 00 00 28 00 00 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 53 f2 9a 00 6a 00 0a 00 5f f1 00 00 01 6c 00 00 00 41 00 6e 00 20 00 69 00 6e 00 74 00 65 00 72 00 6e 00 61 00 6c 00 20 00 65 00 72 00 72 00 6f
32	2026-04-25T06:27:10.400Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x90fc738		["0x2c2","0x791ed68","0x741ece0","0x76ffedd8","0x90fc744","0x2c2","0x791ed68","0x206","0x3","0x765f8a4"]	1	518	0x3
33	2026-04-25T06:27:10.400Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x90fc738		["0x2c2","0x791ed68","0x741ece0","0x76ffedd8","0x90fc744","0x2c2","0x791ed68","0x206","0x3","0x765f8a4"]	2	3	0x765f8a4		90 b3 59
34	2026-04-25T06:27:10.401Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived		0x1	[]
35	2026-04-25T06:27:10.403Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x90fc738		["0x97","0x7916528","0x741ece0","0x76ffedd8","0x90fc744","0x97","0x7916528","0x206","0x3","0x765f8a4"]	0	151	0x7916528		01 00 69 00 00 00 00 00 00 00 a2 ec 08 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 32 01 00 02 00 00 00 92 e4 b6 f0 35 ad bc 46 a0 ea 5c 4b 34 cb 9f 90 b8 0e 42 27 b6 74 7a 43 9f 03 79 02 6c 2c 9e ba 01 00 00 00 03 00 00 00 c0 00 20 2e 5a 46 28 d3 dc 01 06 0a 00 00 00 00 a0 41 c3 55 bd dc 01 00 00 02 00 00 00 03 00 00 00 c0 00 80 18 5b 46 28 d3 dc 01 06 0a 00 00 00 80 c1 75 25 a5 bd dc 01 00 00
36	2026-04-25T06:27:10.403Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x90fc738		["0x97","0x7916528","0x741ece0","0x76ffedd8","0x90fc744","0x97","0x7916528","0x206","0x3","0x765f8a4"]	1	518	0x3
37	2026-04-25T06:27:10.403Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x90fc738		["0x97","0x7916528","0x741ece0","0x76ffedd8","0x90fc744","0x97","0x7916528","0x206","0x3","0x765f8a4"]	2	3	0x765f8a4		90 b3 59
38	2026-04-25T06:27:10.403Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived		0x1	[]
39	2026-04-25T06:27:10.494Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.TransferData	0x90fc738		["0x1","0x1","0x2","0x2e","0x9a84020","0xdfcc8cb5","0x90f7010","0x0","0x0","0x0"]	0	46	0x9a84020		01 00 00 00 00 00 00 00 00 00 78 76 04 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00
40	2026-04-25T06:27:10.495Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.TransferData		0x0	[]
41	2026-04-25T06:27:10.497Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.TransferData	0x90fc738		["0x1","0x1","0x1","0x2e","0x9a84020","0xdfcc8cb5","0x90f7010","0x0","0x0","0x0"]	0	46	0x9a84020		01 00 00 00 00 00 00 00 00 00 a2 ec 08 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00
42	2026-04-25T06:27:10.498Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.TransferData		0x0	[]
43	2026-04-25T06:27:11.271Z	call.enter	LmxProxy.dll	CLMXProxyServer.Write.variantA	0xafed70		["0x5f28ff0","0x1","0x1","0x7","0x0","0x55555555","0x40e68723","0x1","0xa8837d04","0x74794704"]
44	2026-04-25T06:27:11.271Z	call.leave	LmxProxy.dll	CLMXProxyServer.Write.variantA		0x0	[]
45	2026-04-25T06:27:11.324Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.PutRequest	0x1		["0x90fc738","0x1","0x1","0x2","0x2","0x0","0x56","0x91d9bc8","0xafea40","0x5d23e122"]	0	2	0x2
46	2026-04-25T06:27:11.324Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.PutRequest	0x1		["0x90fc738","0x1","0x1","0x2","0x2","0x0","0x56","0x91d9bc8","0xafea40","0x5d23e122"]	1	86	0x91d9bc8	4/25/2026 2:30:00 AM:utf16le@26	37 01 00 05 00 36 d7 02 00 9f 00 0a 00 62 49 00 00 05 2e 00 00 00 2a 00 00 00 34 00 2f 00 32 00 35 00 2f 00 32 00 30 00 32 00 36 00 20 00 32 00 3a 00 33 00 30 00 3a 00 30 00 30 00 20 00 41 00 4d 00 00 00 ff ff 00 00 00 00 00 00 00 00 58 94 b8 08 01 00 00 00
47	2026-04-25T06:27:11.325Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.TransferData	0x90fc738		["0x1","0x1","0x2","0x84","0x9a84020","0xdfcc8c99","0x90f77f4","0x90f77e4","0x641add04","0x0"]	0	132	0x9a84020	4/25/2026 2:30:00 AM:utf16le@72	01 00 56 00 00 00 00 00 00 00 03 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 37 01 00 05 00 36 d7 02 00 9f 00 0a 00 62 49 00 00 05 2e 00 00 00 2a 00 00 00 34 00 2f 00 32 00 35 00 2f 00 32 00 30 00 32 00 36 00 20 00 32 00 3a 00 33 00 30 00 3a 00 30 00 30 00 20 00 41 00 4d 00 00 00 ff ff 00 00 00 00 00 00 00 00 58 94 b8 08 01 00 00 00
48	2026-04-25T06:27:11.326Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.TransferData		0x0	[]
49	2026-04-25T06:27:11.326Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.PutRequest		0x0	[]
50	2026-04-25T06:27:11.344Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x90fc738		["0x33","0x78962d0","0x741ece0","0x76ffedd8","0x90fc744","0x33","0x78962d0","0x206","0x3","0x765f8a4"]	0	51	0x78962d0		01 00 05 00 00 00 00 00 00 00 03 00 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 00 00 50 80 00
51	2026-04-25T06:27:11.344Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x90fc738		["0x33","0x78962d0","0x741ece0","0x76ffedd8","0x90fc744","0x33","0x78962d0","0x206","0x3","0x765f8a4"]	1	518	0x3
52	2026-04-25T06:27:11.344Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x90fc738		["0x33","0x78962d0","0x741ece0","0x76ffedd8","0x90fc744","0x33","0x78962d0","0x206","0x3","0x765f8a4"]	2	3	0x765f8a4		90 b3 59
53	2026-04-25T06:27:11.345Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived		0x1	[]
54	2026-04-25T06:27:11.346Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x90fc738		["0x62","0x7916528","0x741ece0","0x76ffedd8","0x90fc744","0x62","0x7916528","0x206","0x3","0x765f8a4"]	0	98	0x7916528	04/25/2026 02:30:00:filetime@88	01 00 34 00 00 00 00 00 00 00 7b 76 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 e5 c1 81 a9 f6 1b d0 4d 8e 68 b0 2a 1c c0 40 c8 03 00 00 00 c0 00 f0 1f 8e 8c 7c d4 dc 01 06 0a 00 00 00 00 24 15 f1 7c d4 dc 01 00 00
55	2026-04-25T06:27:11.346Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x90fc738		["0x62","0x7916528","0x741ece0","0x76ffedd8","0x90fc744","0x62","0x7916528","0x206","0x3","0x765f8a4"]	1	518	0x3
56	2026-04-25T06:27:11.346Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x90fc738		["0x62","0x7916528","0x741ece0","0x76ffedd8","0x90fc744","0x62","0x7916528","0x206","0x3","0x765f8a4"]	2	3	0x765f8a4		90 b3 59
57	2026-04-25T06:27:11.346Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived		0x1	[]
58	2026-04-25T06:27:11.431Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.TransferData	0x90fc738		["0x1","0x1","0x2","0x2e","0x9a84020","0xdfcc8cb5","0x90f7010","0x0","0x0","0x0"]	0	46	0x9a84020		01 00 00 00 00 00 00 00 00 00 7b 76 04 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00
59	2026-04-25T06:27:11.432Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.TransferData		0x0	[]
60	2026-04-25T06:27:11.996Z	call.enter	LmxProxy.dll	CLMXProxyServer.Write.variantA	0xafed70		["0x5f28ff0","0x1","0x1","0x7","0x0","0x5b05b05b","0x40e68723","0x1","0xa8837d04","0x74794704"]
61	2026-04-25T06:27:11.997Z	call.leave	LmxProxy.dll	CLMXProxyServer.Write.variantA		0x0	[]
62	2026-04-25T06:27:12.100Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.PutRequest	0x1		["0x90fc738","0x1","0x1","0x2","0x2","0x0","0x56","0x91d9bc8","0xafea40","0x5d23e122"]	0	2	0x2
63	2026-04-25T06:27:12.100Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.PutRequest	0x1		["0x90fc738","0x1","0x1","0x2","0x2","0x0","0x56","0x91d9bc8","0xafea40","0x5d23e122"]	1	86	0x91d9bc8	4/25/2026 2:31:00 AM:utf16le@26	37 01 00 05 00 36 d7 02 00 9f 00 0a 00 62 49 00 00 05 2e 00 00 00 2a 00 00 00 34 00 2f 00 32 00 35 00 2f 00 32 00 30 00 32 00 36 00 20 00 32 00 3a 00 33 00 31 00 3a 00 30 00 30 00 20 00 41 00 4d 00 00 00 ff ff 00 00 00 00 00 00 00 00 58 94 b8 08 02 00 00 00
64	2026-04-25T06:27:12.101Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.TransferData	0x90fc738		["0x1","0x1","0x2","0x84","0x9a84020","0xdfcc8c99","0x91d99dc","0x91d99cc","0x641add04","0x0"]	0	132	0x9a84020	4/25/2026 2:31:00 AM:utf16le@72	01 00 56 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 37 01 00 05 00 36 d7 02 00 9f 00 0a 00 62 49 00 00 05 2e 00 00 00 2a 00 00 00 34 00 2f 00 32 00 35 00 2f 00 32 00 30 00 32 00 36 00 20 00 32 00 3a 00 33 00 31 00 3a 00 30 00 30 00 20 00 41 00 4d 00 00 00 ff ff 00 00 00 00 00 00 00 00 58 94 b8 08 02 00 00 00
65	2026-04-25T06:27:12.102Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.TransferData		0x0	[]
66	2026-04-25T06:27:12.102Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.PutRequest		0x0	[]
67	2026-04-25T06:27:12.108Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x90fc738		["0x33","0x7922080","0x741ece0","0x76ffedd8","0x90fc744","0x33","0x7922080","0x206","0x3","0x765f8a4"]	0	51	0x7922080		01 00 05 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 00 00 50 80 00
68	2026-04-25T06:27:12.108Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x90fc738		["0x33","0x7922080","0x741ece0","0x76ffedd8","0x90fc744","0x33","0x7922080","0x206","0x3","0x765f8a4"]	1	518	0x3
69	2026-04-25T06:27:12.108Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x90fc738		["0x33","0x7922080","0x741ece0","0x76ffedd8","0x90fc744","0x33","0x7922080","0x206","0x3","0x765f8a4"]	2	3	0x765f8a4		90 b3 59
70	2026-04-25T06:27:12.108Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived		0x1	[]
71	2026-04-25T06:27:12.109Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x90fc738		["0x62","0x78962d0","0x741ece0","0x76ffedd8","0x90fc744","0x62","0x78962d0","0x206","0x3","0x765f8a4"]	0	98	0x78962d0	04/25/2026 02:31:00:filetime@88	01 00 34 00 00 00 00 00 00 00 7f 76 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 e5 c1 81 a9 f6 1b d0 4d 8e 68 b0 2a 1c c0 40 c8 03 00 00 00 c0 00 a0 8c 02 8d 7c d4 dc 01 06 0a 00 00 00 00 6a d8 14 7d d4 dc 01 00 00
72	2026-04-25T06:27:12.109Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x90fc738		["0x62","0x78962d0","0x741ece0","0x76ffedd8","0x90fc744","0x62","0x78962d0","0x206","0x3","0x765f8a4"]	1	518	0x3
73	2026-04-25T06:27:12.109Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x90fc738		["0x62","0x78962d0","0x741ece0","0x76ffedd8","0x90fc744","0x62","0x78962d0","0x206","0x3","0x765f8a4"]	2	3	0x765f8a4		90 b3 59
74	2026-04-25T06:27:12.110Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived		0x1	[]
75	2026-04-25T06:27:12.208Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.TransferData	0x90fc738		["0x1","0x1","0x2","0x2e","0x9a84020","0xdfcc8cb5","0x90f7010","0x0","0x0","0x0"]	0	46	0x9a84020		01 00 00 00 00 00 00 00 00 00 7f 76 04 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00
76	2026-04-25T06:27:12.209Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.TransferData		0x0	[]
77	2026-04-25T06:27:12.719Z	call.enter	LmxProxy.dll	CLMXProxyServer.Write.variantA	0xafed70		["0x5f28ff0","0x1","0x1","0x7","0x0","0x60b60b61","0x40e68723","0x1","0xa8837d04","0x74794704"]
78	2026-04-25T06:27:12.720Z	call.leave	LmxProxy.dll	CLMXProxyServer.Write.variantA		0x0	[]
79	2026-04-25T06:27:12.772Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.PutRequest	0x1		["0x90fc738","0x1","0x1","0x2","0x2","0x0","0x56","0x91d9bc8","0xafea40","0x5d23e122"]	0	2	0x2
80	2026-04-25T06:27:12.772Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.PutRequest	0x1		["0x90fc738","0x1","0x1","0x2","0x2","0x0","0x56","0x91d9bc8","0xafea40","0x5d23e122"]	1	86	0x91d9bc8	4/25/2026 2:32:00 AM:utf16le@26	37 01 00 05 00 36 d7 02 00 9f 00 0a 00 62 49 00 00 05 2e 00 00 00 2a 00 00 00 34 00 2f 00 32 00 35 00 2f 00 32 00 30 00 32 00 36 00 20 00 32 00 3a 00 33 00 32 00 3a 00 30 00 30 00 20 00 41 00 4d 00 00 00 ff ff 00 00 00 00 00 00 00 00 58 94 b8 08 03 00 00 00
81	2026-04-25T06:27:12.773Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.TransferData	0x90fc738		["0x1","0x1","0x2","0x84","0x9a84020","0xdfcc8c99","0x90f77f4","0x90f77e4","0x641add04","0x0"]	0	132	0x9a84020	4/25/2026 2:32:00 AM:utf16le@72	01 00 56 00 00 00 00 00 00 00 05 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 37 01 00 05 00 36 d7 02 00 9f 00 0a 00 62 49 00 00 05 2e 00 00 00 2a 00 00 00 34 00 2f 00 32 00 35 00 2f 00 32 00 30 00 32 00 36 00 20 00 32 00 3a 00 33 00 32 00 3a 00 30 00 30 00 20 00 41 00 4d 00 00 00 ff ff 00 00 00 00 00 00 00 00 58 94 b8 08 03 00 00 00
82	2026-04-25T06:27:12.773Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.TransferData		0x0	[]
83	2026-04-25T06:27:12.774Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.PutRequest		0x0	[]
84	2026-04-25T06:27:12.819Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x90fc738		["0x33","0x7916528","0x741ece0","0x76ffedd8","0x90fc744","0x33","0x7916528","0x206","0x3","0x765f8a4"]	0	51	0x7916528		01 00 05 00 00 00 00 00 00 00 05 00 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 00 00 50 80 00
85	2026-04-25T06:27:12.819Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x90fc738		["0x33","0x7916528","0x741ece0","0x76ffedd8","0x90fc744","0x33","0x7916528","0x206","0x3","0x765f8a4"]	1	518	0x3
86	2026-04-25T06:27:12.819Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x90fc738		["0x33","0x7916528","0x741ece0","0x76ffedd8","0x90fc744","0x33","0x7916528","0x206","0x3","0x765f8a4"]	2	3	0x765f8a4		90 b3 59
87	2026-04-25T06:27:12.820Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived		0x1	[]
88	2026-04-25T06:27:12.821Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x90fc738		["0x62","0xddf2c0","0x741ece0","0x76ffedd8","0x90fc744","0x62","0xddf2c0","0x206","0x3","0x765f8a4"]	0	98	0xddf2c0	04/25/2026 02:32:00:filetime@88	01 00 34 00 00 00 00 00 00 00 82 76 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 e5 c1 81 a9 f6 1b d0 4d 8e 68 b0 2a 1c c0 40 c8 03 00 00 00 c0 00 20 31 6f 8d 7c d4 dc 01 06 0a 00 00 00 00 b0 9b 38 7d d4 dc 01 00 00
89	2026-04-25T06:27:12.821Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x90fc738		["0x62","0xddf2c0","0x741ece0","0x76ffedd8","0x90fc744","0x62","0xddf2c0","0x206","0x3","0x765f8a4"]	1	518	0x3
90	2026-04-25T06:27:12.821Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x90fc738		["0x62","0xddf2c0","0x741ece0","0x76ffedd8","0x90fc744","0x62","0xddf2c0","0x206","0x3","0x765f8a4"]	2	3	0x765f8a4		90 b3 59
91	2026-04-25T06:27:12.821Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived		0x1	[]
92	2026-04-25T06:27:12.878Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.TransferData	0x90fc738		["0x1","0x1","0x2","0x2e","0x9a84020","0xdfcc8cb5","0x90f7010","0x0","0x0","0x0"]	0	46	0x9a84020		01 00 00 00 00 00 00 00 00 00 82 76 04 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00
93	2026-04-25T06:27:12.879Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.TransferData		0x0	[]
94	2026-04-25T06:27:16.778Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.PutRequest	0x1		["0x90fc738","0x1","0x1","0x1","0x2","0x0","0x3a","0x91ce7f8","0xafebfc","0x5d23e36e"]	0	1	0x2
95	2026-04-25T06:27:16.778Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.PutRequest	0x1		["0x90fc738","0x1","0x1","0x1","0x2","0x0","0x3a","0x91ce7f8","0xafebfc","0x5d23e36e"]	1	58	0x91ce7f8		21 01 00 b8 0e 42 27 b6 74 7a 43 9f 03 79 02 6c 2c 9e ba 01 00 53 f2 9a 00 6a 00 0a 00 5f f1 00 00 01 00 00 00 22 01 00 01 00 53 f2 9a 00 6b 00 0a 00 87 3a 00 00 02 00 00 00
96	2026-04-25T06:27:16.780Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.TransferData	0x90fc738		["0x1","0x1","0x1","0x68","0x9a84020","0xdfcc8f45","0x90f77f4","0x90f77e4","0x641add04","0x64"]	0	104	0x9a84020		01 00 3a 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 02 00 00 30 75 00 00 21 01 00 b8 0e 42 27 b6 74 7a 43 9f 03 79 02 6c 2c 9e ba 01 00 53 f2 9a 00 6a 00 0a 00 5f f1 00 00 01 00 00 00 22 01 00 01 00 53 f2 9a 00 6b 00 0a 00 87 3a 00 00 02 00 00 00
97	2026-04-25T06:27:16.780Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.TransferData		0x0	[]
98	2026-04-25T06:27:16.781Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.PutRequest		0x0	[]
99	2026-04-25T06:27:16.782Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.PutRequest	0x1		["0x90fc738","0x1","0x1","0x2","0x2","0x0","0x25","0x91ce1c8","0xafebfc","0x5d23e36e"]	0	2	0x2
100	2026-04-25T06:27:16.782Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.PutRequest	0x1		["0x90fc738","0x1","0x1","0x2","0x2","0x0","0x25","0x91ce1c8","0xafebfc","0x5d23e36e"]	1	37	0x91ce1c8		21 01 00 b8 0e 42 27 b6 74 7a 43 9f 03 79 02 6c 2c 9e ba 05 00 36 d7 02 00 9f 00 0a 00 62 49 00 00 03 00 00 00
101	2026-04-25T06:27:16.783Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.TransferData	0x90fc738		["0x1","0x1","0x2","0x53","0x9a84020","0xdfcc8f45","0x91d9584","0x91d9574","0x641add04","0x64"]	0	83	0x9a84020		01 00 25 00 00 00 00 00 00 00 07 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 21 01 00 b8 0e 42 27 b6 74 7a 43 9f 03 79 02 6c 2c 9e ba 05 00 36 d7 02 00 9f 00 0a 00 62 49 00 00 03 00 00 00
102	2026-04-25T06:27:16.784Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.TransferData		0x0	[]
103	2026-04-25T06:27:16.784Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.PutRequest		0x0	[]

25 KiB Raw Permalink Blame History

25 KiB

Raw Permalink Blame History