mxaccess/captures/092-frida-write-testbool-string-type/frida-events.tsv at master

dohertj2/mxaccess

Fork 0

Files

T

Joseph Doherty fe2a6db786

rust / build / test / clippy / fmt (push) Has been cancelled

Details

Initial project state: .NET reference, design, Rust port (M0+M1), evidence

Layout:
- src/                    .NET 10 x64 reference: MxNativeCodec, MxNativeClient,
                          MxAsbClient, probes, tests, harnesses. Executable spec.
- design/                 Architectural plan for the Rust port (M0–M6), error
                          model, protocol invariants, risks (R1–R16), adversarial
                          review log (review.md).
- rust/                   Rust workspace. M0 skeleton + M1 codec parity.
                          mxaccess-codec: 215 unit tests + 2 cross-implementation
                          parity tests (byte-identical against .NET reference).
                          Other crates are M0 stubs awaiting M2+.
- captures/               Frida + netsh + pcap evidence per CLAUDE.md
                          ("captures are evidence, not throwaway logs").
- analysis/               Decompiled C# (frida/proxy/decompiled-*),
                          Ghidra exports for native DLLs (`exports/` only —
                          working state at `projects/` and AVEVA's input
                          binaries at `input/` are gitignored).
- docs/                   Reverse-engineering reference docs.
- tools/                  Setup-LiveProbeEnv.ps1 (Infisical credential fetcher),
                          Compute-Crc.ps1 (.NET parity helper).
- .github/workflows/      Rust CI: fmt + build + test + clippy on Windows.
- LICENSE                 MIT (Joseph Doherty, 2026).

Verified:
- cargo test --workspace → 217 passed (215 unit + 2 .NET parity), 0 failed
- cargo clippy --workspace -- -D warnings → clean
- cargo fmt --all -- --check → clean
- cargo publish --dry-run -p mxaccess-codec → packages cleanly

Excluded from history (see .gitignore):
- **/bin, **/obj, **/target — build artifacts
- analysis/ghidra/projects/ — Ghidra working state (regenerable)
- analysis/ghidra/input/ — AVEVA proprietary DLLs (vendor IP)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-05 06:21:00 -04:00

16 KiB

Raw Permalink Blame History

1	time	event	module	name	ecx	retval	args	candidate_index	candidate_size	candidate_ptr	value_hits	hex
2	2026-04-25T21:22:05.311Z	hook.installed	LmxProxy.dll	CLMXProxyServer.Write.variantA			[]
3	2026-04-25T21:22:05.312Z	hook.installed	LmxProxy.dll	CLMXProxyServer.Write.variantB			[]
4	2026-04-25T21:22:05.312Z	hook.installed	LmxProxy.dll	CLMXProxyServer.WriteSecured.variantA			[]
5	2026-04-25T21:22:05.313Z	hook.installed	LmxProxy.dll	CLMXProxyServer.WriteSecured.variantB			[]
6	2026-04-25T21:22:05.313Z	hook.installed	LmxProxy.dll	CLMXProxyServer.AddBufferedItem			[]
7	2026-04-25T21:22:05.314Z	hook.installed	LmxProxy.dll	CLMXProxyServer.SetBufferedUpdateInterval			[]
8	2026-04-25T21:22:05.314Z	hook.installed	LmxProxy.dll	CLMXProxyServer.AdviseSupervisory			[]
9	2026-04-25T21:22:05.315Z	hook.installed	LmxProxy.dll	CProxy_ILMXProxyServerEvents2.Fire_OnBufferedDataChange			[]
10	2026-04-25T21:22:05.315Z	hook.installed	LmxProxy.dll	CLMXProxyServer.AuthenticateUser			[]
11	2026-04-25T21:22:25.265Z	hook.installed	Lmx.dll	MxConnection.PrebindReference			[]
12	2026-04-25T21:22:25.265Z	hook.installed	Lmx.dll	MxConnection.UserRegisterPreboundReference			[]
13	2026-04-25T21:22:25.266Z	hook.installed	Lmx.dll	IMxReference.GetMxHandle			[]
14	2026-04-25T21:22:25.267Z	hook.installed	Lmx.dll	AccessManager.FixUpMxHandle			[]
15	2026-04-25T21:22:25.269Z	hook.installed	Lmx.dll	PreboundReference.Resolve			[]
16	2026-04-25T21:22:25.269Z	hook.installed	Lmx.dll	PreboundReference.OnPlatformResolveReferenceResults			[]
17	2026-04-25T21:22:25.270Z	hook.installed	Lmx.dll	PreboundReference.OnSetAttributeResult			[]
18	2026-04-25T21:22:25.366Z	hook.installed	NmxAdptr.dll	CNmxAdapter.TransferData			[]
19	2026-04-25T21:22:25.366Z	hook.installed	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived			[]
20	2026-04-25T21:22:25.367Z	hook.installed	NmxAdptr.dll	CNmxAdapter.PutRequest			[]
21	2026-04-25T21:22:25.367Z	hook.installed	NmxAdptr.dll	CNmxAdapter.PutRequestEx			[]
22	2026-04-25T21:22:25.399Z	lmx.fixup-mxhandle.enter	Lmx.dll	AccessManager.FixUpMxHandle			[]
23	2026-04-25T21:22:25.400Z	lmx.fixup-mxhandle.leave	Lmx.dll	AccessManager.FixUpMxHandle		0xf8e6d4	[]
24	2026-04-25T21:22:25.400Z	lmx.fixup-mxhandle.enter	Lmx.dll	AccessManager.FixUpMxHandle			[]
25	2026-04-25T21:22:25.401Z	lmx.fixup-mxhandle.leave	Lmx.dll	AccessManager.FixUpMxHandle		0xf8e6d4	[]
26	2026-04-25T21:22:25.496Z	lmx.prebind.enter	Lmx.dll	MxConnection.PrebindReference	0x10188a34		[]
27	2026-04-25T21:22:25.497Z	lmx.mxhandle.read	Lmx.dll	IMxReference.GetMxHandle		0xf8ec58	[]
28	2026-04-25T21:22:25.498Z	lmx.prebound-resolve.enter	Lmx.dll	PreboundReference.Resolve			[]
29	2026-04-25T21:22:25.498Z	lmx.mxhandle.read	Lmx.dll	IMxReference.GetMxHandle		0xf8ebe8	[]
30	2026-04-25T21:22:25.499Z	lmx.mxhandle.read	Lmx.dll	IMxReference.GetMxHandle		0xf8ebe8	[]
31	2026-04-25T21:22:25.499Z	lmx.mxhandle.read	Lmx.dll	IMxReference.GetMxHandle		0xf8ebe8	[]
32	2026-04-25T21:22:25.500Z	lmx.prebound-resolve.leave	Lmx.dll	PreboundReference.Resolve		0x70fe1e01	[]
33	2026-04-25T21:22:25.501Z	lmx.prebind.leave	Lmx.dll	MxConnection.PrebindReference			[]
34	2026-04-25T21:22:25.503Z	call.enter	LmxProxy.dll	CLMXProxyServer.AdviseSupervisory	0xf8eda4		["0x6578ff0","0x1","0x1","0xca413c64","0x74794704"]
35	2026-04-25T21:22:25.503Z	lmx.fixup-mxhandle.enter	Lmx.dll	AccessManager.FixUpMxHandle			[]
36	2026-04-25T21:22:25.504Z	lmx.fixup-mxhandle.leave	Lmx.dll	AccessManager.FixUpMxHandle		0xf8ec24	[]
37	2026-04-25T21:22:25.504Z	lmx.fixup-mxhandle.enter	Lmx.dll	AccessManager.FixUpMxHandle			[]
38	2026-04-25T21:22:25.505Z	lmx.fixup-mxhandle.leave	Lmx.dll	AccessManager.FixUpMxHandle		0xf8d8b8	[]
39	2026-04-25T21:22:25.505Z	call.leave	LmxProxy.dll	CLMXProxyServer.AdviseSupervisory		0x0	[]
40	2026-04-25T21:22:25.629Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.PutRequest	0x1		["0x956c738","0x1","0x1","0x1","0x2","0x0","0x13a","0x9570648","0xf8ea68","0xeb54da71"]	0	1	0x2
41	2026-04-25T21:22:25.629Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.PutRequest	0x1		["0x956c738","0x1","0x1","0x1","0x2","0x0","0x13a","0x9570648","0xf8ea68","0xeb54da71"]	1	314	0x9570648		17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 6a 00 00 00 40 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 d0 fc 56 09 1f 01 00 9a 24 a6 62 3d 4b 50 47 ae 26 89 d1 39 3c 5c ad 00 00 01 00 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 76 00 00 00 4c 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 50 03 57 09 20 01 00 02 00 00 00
42	2026-04-25T21:22:25.631Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.TransferData	0x956c738		["0x1","0x1","0x1","0x168","0xa145020","0x4fc32f05","0x9570214","0x9570204","0x641add04","0x0"]	0	360	0xa145020		01 00 3a 01 00 00 00 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 f8 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 02 00 00 30 75 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 6a 00 00 00 40 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 d0 fc 56 09 1f 01 00 9a 24 a6 62 3d 4b 50 47 ae 26 89 d1 39 3c 5c ad 00 00 01 00 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 76 00 00 00 4c 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 50 03 57 09 20 01 00 02 00 00 00
43	2026-04-25T21:22:25.632Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.TransferData		0x0	[]
44	2026-04-25T21:22:25.632Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.PutRequest		0x0	[]
45	2026-04-25T21:22:25.633Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.PutRequest	0x1		["0x956c738","0x1","0x1","0x2","0x2","0x0","0x27","0x963f890","0xf8ea68","0xeb54da71"]	0	2	0x2
46	2026-04-25T21:22:25.633Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.PutRequest	0x1		["0x956c738","0x1","0x1","0x2","0x2","0x0","0x27","0x963f890","0xf8ea68","0xeb54da71"]	1	39	0x963f890		1f 01 00 9a 24 a6 62 3d 4b 50 47 ae 26 89 d1 39 3c 5c ad 00 00 05 00 36 d7 02 00 9a 00 0a 00 fa 7d 00 00 03 00 00 00
47	2026-04-25T21:22:25.634Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.TransferData	0x956c738		["0x1","0x1","0x2","0x55","0xa145020","0x4fc32f05","0x957086c","0x957085c","0x641add04","0x0"]	0	85	0xa145020		01 00 27 00 00 00 00 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 f8 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 1f 01 00 9a 24 a6 62 3d 4b 50 47 ae 26 89 d1 39 3c 5c ad 00 00 05 00 36 d7 02 00 9a 00 0a 00 fa 7d 00 00 03 00 00 00
48	2026-04-25T21:22:25.635Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.TransferData		0x0	[]
49	2026-04-25T21:22:25.635Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.PutRequest		0x0	[]
50	2026-04-25T21:22:25.672Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x956c738		["0x5c","0x7fb906c","0x79ae818","0x76ffedd8","0x956c744","0x5c","0x7fb906c","0x206","0x3","0x7da4644"]	0	92	0x7fb906c		5c 00 00 00 01 00 2e 00 00 00 00 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 f8 7f 00 00 02 02 00 00 30 75 00 00 00 00 50 80 01 00 01 00 02 00 30 75 00 00 0d 39 94 5d 58 e7 9a 40 a5 7d b4 60 d0 18 44 f3 9a 24 a6 62 3d 4b 50 47 ae 26 89 d1
51	2026-04-25T21:22:25.672Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x956c738		["0x5c","0x7fb906c","0x79ae818","0x76ffedd8","0x956c744","0x5c","0x7fb906c","0x206","0x3","0x7da4644"]	1	518	0x3
52	2026-04-25T21:22:25.672Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x956c738		["0x5c","0x7fb906c","0x79ae818","0x76ffedd8","0x956c744","0x5c","0x7fb906c","0x206","0x3","0x7da4644"]	2	3	0x7da4644		e8 12 0d
53	2026-04-25T21:22:25.674Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived		0x0	[]
54	2026-04-25T21:22:25.677Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x956c738		["0x69","0x7d4028c","0x79ae818","0x76ffedd8","0x956c744","0x69","0x7d4028c","0x206","0x3","0x7da4644"]	0	105	0x7d4028c		69 00 00 00 01 00 3b 00 00 00 00 00 00 00 af 89 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 f8 7f 00 00 01 02 00 00 30 75 00 00 32 01 00 01 00 00 00 0d 39 94 5d 58 e7 9a 40 a5 7d b4 60 d0 18 44 f3 9a 24 a6 62 3d 4b 50 47 ae 26 89 d1 39 3c 5c ad 03 00 00 00 03 00 00 00 c0 00 00 d3 c1 2f ab d4
55	2026-04-25T21:22:25.677Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x956c738		["0x69","0x7d4028c","0x79ae818","0x76ffedd8","0x956c744","0x69","0x7d4028c","0x206","0x3","0x7da4644"]	1	518	0x3
56	2026-04-25T21:22:25.677Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x956c738		["0x69","0x7d4028c","0x79ae818","0x76ffedd8","0x956c744","0x69","0x7d4028c","0x206","0x3","0x7da4644"]	2	3	0x7da4644		e8 12 0d
57	2026-04-25T21:22:25.678Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived		0x0	[]
58	2026-04-25T21:22:25.682Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x956c738		["0x2c2","0x7fbf69c","0x79ae818","0x76ffedd8","0x956c744","0x2c2","0x7fbf69c","0x206","0x3","0x7da4644"]	0	706	0x7fbf69c		c2 02 00 00 01 00 94 02 00 00 00 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 f8 7f 00 00 02 02 00 00 30 75 00 00 40 1f 50 80 08 a6 00 00 00 40 00 00 91 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 18 00 00 00 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 00 00 28 00 00 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 53 f2 9a 00 6a 00 0a 00 5f f1 00 00 01 6c 00 00 00 41 00 6e 00 20 00 69 00 6e 00 74 00 65 00 72 00 6e 00 61 00 6c 00 20 00 65 00 72 00 72 00 6f 00 72 00 20 00 6f 00 63 00 63 00 75 00 72 00 72 00 65 00 64 00 20 00 69 00 6e 00 20 00 74 00 68 00 65 00 20 00 42 00 61 00 73 00 65 00 20 00 52 00 75 00 6e 00 74 00 69 00 6d 00 65 00 20 00 4f 00 62 00 6a 00 65 00 63 00 74 00 00 00 1f 00 00 50 80 01 00 01 00 01 00 30 75 00 00 6d db f8 b3 3a d8 5e 4d a1 75 77 48 82 c3 fd a6 9a 24 a6 62 3d 4b 50 47 ae 26 89 d1 39 3c 5c ad 40 1f 50 80 08 be 00 00 00 4c 00 00 91 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 18 00 00 00 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 00 00 34 00 00 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 53 f2 9a 00 6b 00 0a 00 87 3a 00 00 01 6c 00 00 00 41 00 6e 00 20 00 69 00 6e 00 74 00 65 00 72 00 6e 00 61 00 6c 00 20 00 65 00 72 00 72 00 6f 00 72 00 20 00 6f 00 63 00 63 00 75 00 72 00 72 00 65 00 64 00 20 00 69 00 6e 00 20 00 74 00 68 00 65 00 20 00 42 00 61 00 73 00 65 00 20 00 52 00 75 00 6e 00 74 00 69 00 6d 00 65 00 20 00 4f 00 62 00 6a 00 65 00 63 00 74 00 00 00 20 00 00 50 80 01 00 01 00 01 00
59	2026-04-25T21:22:25.682Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x956c738		["0x2c2","0x7fbf69c","0x79ae818","0x76ffedd8","0x956c744","0x2c2","0x7fbf69c","0x206","0x3","0x7da4644"]	1	518	0x3
60	2026-04-25T21:22:25.682Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x956c738		["0x2c2","0x7fbf69c","0x79ae818","0x76ffedd8","0x956c744","0x2c2","0x7fbf69c","0x206","0x3","0x7da4644"]	2	3	0x7da4644		e8 12 0d
61	2026-04-25T21:22:25.684Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived		0x0	[]
62	2026-04-25T21:22:25.686Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x956c738		["0x97","0x7d4028c","0x79ae818","0x76ffedd8","0x956c744","0x97","0x7d4028c","0x206","0x3","0x7da4644"]	0	151	0x7d4028c		97 00 00 00 01 00 69 00 00 00 00 00 00 00 f7 34 0c 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 f8 7f 00 00 01 02 00 00 30 75 00 00 32 01 00 02 00 00 00 6d db f8 b3 3a d8 5e 4d a1 75 77 48 82 c3 fd a6 9a 24 a6 62 3d 4b 50 47 ae 26 89 d1 39 3c 5c ad 01 00 00 00 03 00 00 00 c0 00 20 2e 5a 46 28 d3 dc 01 06 0a 00 00 00 00 a0 41 c3 55 bd dc 01 00 00 02 00 00 00 03 00 00 00 c0 00 80 18 5b 46 28 d3 dc 01 06 0a 00 00 00 80 c1 75 25 a5 bd
63	2026-04-25T21:22:25.686Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x956c738		["0x97","0x7d4028c","0x79ae818","0x76ffedd8","0x956c744","0x97","0x7d4028c","0x206","0x3","0x7da4644"]	1	518	0x3
64	2026-04-25T21:22:25.686Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x956c738		["0x97","0x7d4028c","0x79ae818","0x76ffedd8","0x956c744","0x97","0x7d4028c","0x206","0x3","0x7da4644"]	2	3	0x7da4644		e8 12 0d
65	2026-04-25T21:22:25.688Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived		0x0	[]
66	2026-04-25T21:22:26.546Z	call.enter	LmxProxy.dll	CLMXProxyServer.Write.variantA	0xf8ed78		["0x6578ff0","0x1","0x1","0x8","0x0","0x809fe0c","0x0","0x1","0xca413c64","0x74794704"]
67	2026-04-25T21:22:26.547Z	call.leave	LmxProxy.dll	CLMXProxyServer.Write.variantA		0x0	[]
68	2026-04-25T21:22:26.600Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.PutRequest	0x1		["0x956c738","0x1","0x1","0x2","0x2","0x0","0x3e","0x963f2a8","0xf8ea68","0xeb54da71"]	0	2	0x2
69	2026-04-25T21:22:26.600Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.PutRequest	0x1		["0x956c738","0x1","0x1","0x2","0x2","0x0","0x3e","0x963f2a8","0xf8ea68","0xeb54da71"]	1	62	0x963f2a8	not_bool:utf16le@26	37 01 00 05 00 36 d7 02 00 9a 00 0a 00 fa 7d 00 00 05 16 00 00 00 12 00 00 00 6e 00 6f 00 74 00 5f 00 62 00 6f 00 6f 00 6c 00 00 00 ff ff 00 00 00 00 00 00 00 00 a9 35 ec 0b 01 00 00 00
70	2026-04-25T21:22:26.601Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.TransferData	0x956c738		["0x1","0x1","0x2","0x6c","0xa145020","0x4fc32f05","0x95677f4","0x95677e4","0x641add04","0x0"]	0	108	0xa145020	not_bool:utf16le@72	01 00 3e 00 00 00 00 00 00 00 03 00 00 00 01 00 00 00 01 00 00 00 f8 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 37 01 00 05 00 36 d7 02 00 9a 00 0a 00 fa 7d 00 00 05 16 00 00 00 12 00 00 00 6e 00 6f 00 74 00 5f 00 62 00 6f 00 6f 00 6c 00 00 00 ff ff 00 00 00 00 00 00 00 00 a9 35 ec 0b 01 00 00 00
71	2026-04-25T21:22:26.601Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.TransferData		0x0	[]
72	2026-04-25T21:22:26.602Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.PutRequest		0x0	[]
73	2026-04-25T21:22:26.618Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x956c738		["0x33","0x7fba174","0x79ae818","0x76ffedd8","0x956c744","0x33","0x7fba174","0x206","0x3","0x7da4644"]	0	51	0x7fba174		33 00 00 00 01 00 05 00 00 00 00 00 00 00 03 00 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 f8 7f 00 00 02 02 00 00 30 75 00 00 41
74	2026-04-25T21:22:26.618Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x956c738		["0x33","0x7fba174","0x79ae818","0x76ffedd8","0x956c744","0x33","0x7fba174","0x206","0x3","0x7da4644"]	1	518	0x3
75	2026-04-25T21:22:26.618Z	nmx.enter	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived	0x956c738		["0x33","0x7fba174","0x79ae818","0x76ffedd8","0x956c744","0x33","0x7fba174","0x206","0x3","0x7da4644"]	2	3	0x7da4644		e8 12 0d
76	2026-04-25T21:22:26.620Z	nmx.leave	NmxAdptr.dll	CNmxAdapter.ProcessDataReceived		0x0	[]

16 KiB Raw Permalink Blame History

16 KiB

Raw Permalink Blame History