Files
Joseph Doherty fe2a6db786
rust / build / test / clippy / fmt (push) Has been cancelled
Initial project state: .NET reference, design, Rust port (M0+M1), evidence
Layout:
- src/                    .NET 10 x64 reference: MxNativeCodec, MxNativeClient,
                          MxAsbClient, probes, tests, harnesses. Executable spec.
- design/                 Architectural plan for the Rust port (M0–M6), error
                          model, protocol invariants, risks (R1–R16), adversarial
                          review log (review.md).
- rust/                   Rust workspace. M0 skeleton + M1 codec parity.
                          mxaccess-codec: 215 unit tests + 2 cross-implementation
                          parity tests (byte-identical against .NET reference).
                          Other crates are M0 stubs awaiting M2+.
- captures/               Frida + netsh + pcap evidence per CLAUDE.md
                          ("captures are evidence, not throwaway logs").
- analysis/               Decompiled C# (frida/proxy/decompiled-*),
                          Ghidra exports for native DLLs (`exports/` only —
                          working state at `projects/` and AVEVA's input
                          binaries at `input/` are gitignored).
- docs/                   Reverse-engineering reference docs.
- tools/                  Setup-LiveProbeEnv.ps1 (Infisical credential fetcher),
                          Compute-Crc.ps1 (.NET parity helper).
- .github/workflows/      Rust CI: fmt + build + test + clippy on Windows.
- LICENSE                 MIT (Joseph Doherty, 2026).

Verified:
- cargo test --workspace → 217 passed (215 unit + 2 .NET parity), 0 failed
- cargo clippy --workspace -- -D warnings → clean
- cargo fmt --all -- --check → clean
- cargo publish --dry-run -p mxaccess-codec → packages cleanly

Excluded from history (see .gitignore):
- **/bin, **/obj, **/target — build artifacts
- analysis/ghidra/projects/ — Ghidra working state (regenerable)
- analysis/ghidra/input/ — AVEVA proprietary DLLs (vendor IP)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-05 06:21:00 -04:00

81 lines
20 KiB
Plaintext

time event module name ecx retval args candidate_index candidate_size candidate_ptr value_hits hex
2026-04-25T22:04:45.164Z hook.installed LmxProxy.dll CLMXProxyServer.Write.variantA []
2026-04-25T22:04:45.165Z hook.installed LmxProxy.dll CLMXProxyServer.Write.variantB []
2026-04-25T22:04:45.165Z hook.installed LmxProxy.dll CLMXProxyServer.WriteSecured.variantA []
2026-04-25T22:04:45.166Z hook.installed LmxProxy.dll CLMXProxyServer.WriteSecured.variantB []
2026-04-25T22:04:45.167Z hook.installed LmxProxy.dll CLMXProxyServer.AddBufferedItem []
2026-04-25T22:04:45.167Z hook.installed LmxProxy.dll CLMXProxyServer.SetBufferedUpdateInterval []
2026-04-25T22:04:45.168Z hook.installed LmxProxy.dll CLMXProxyServer.AdviseSupervisory []
2026-04-25T22:04:45.168Z hook.installed LmxProxy.dll CProxy_ILMXProxyServerEvents2.Fire_OnBufferedDataChange []
2026-04-25T22:04:45.168Z hook.installed LmxProxy.dll CLMXProxyServer.AuthenticateUser []
2026-04-25T22:04:52.109Z hook.installed Lmx.dll MxConnection.PrebindReference []
2026-04-25T22:04:52.111Z hook.installed Lmx.dll MxConnection.UserRegisterPreboundReference []
2026-04-25T22:04:52.111Z hook.installed Lmx.dll IMxReference.GetMxHandle []
2026-04-25T22:04:52.112Z hook.installed Lmx.dll AccessManager.FixUpMxHandle []
2026-04-25T22:04:52.113Z hook.installed Lmx.dll PreboundReference.Resolve []
2026-04-25T22:04:52.114Z hook.installed Lmx.dll PreboundReference.OnPlatformResolveReferenceResults []
2026-04-25T22:04:52.115Z hook.installed Lmx.dll PreboundReference.OnSetAttributeResult []
2026-04-25T22:04:52.211Z hook.installed NmxAdptr.dll CNmxAdapter.TransferData []
2026-04-25T22:04:52.211Z hook.installed NmxAdptr.dll CNmxAdapter.ProcessDataReceived []
2026-04-25T22:04:52.214Z hook.installed NmxAdptr.dll CNmxAdapter.PutRequest []
2026-04-25T22:04:52.215Z hook.installed NmxAdptr.dll CNmxAdapter.PutRequestEx []
2026-04-25T22:04:52.232Z lmx.fixup-mxhandle.enter Lmx.dll AccessManager.FixUpMxHandle []
2026-04-25T22:04:52.233Z lmx.fixup-mxhandle.leave Lmx.dll AccessManager.FixUpMxHandle 0xafe998 []
2026-04-25T22:04:52.233Z lmx.fixup-mxhandle.enter Lmx.dll AccessManager.FixUpMxHandle []
2026-04-25T22:04:52.234Z lmx.fixup-mxhandle.leave Lmx.dll AccessManager.FixUpMxHandle 0xafe998 []
2026-04-25T22:04:52.327Z lmx.prebind.enter Lmx.dll MxConnection.PrebindReference 0x10188a34 []
2026-04-25T22:04:52.327Z lmx.mxhandle.read Lmx.dll IMxReference.GetMxHandle 0xafef04 []
2026-04-25T22:04:52.328Z lmx.prebound-resolve.enter Lmx.dll PreboundReference.Resolve []
2026-04-25T22:04:52.329Z lmx.mxhandle.read Lmx.dll IMxReference.GetMxHandle 0xafee94 []
2026-04-25T22:04:52.329Z lmx.mxhandle.read Lmx.dll IMxReference.GetMxHandle 0xafee94 []
2026-04-25T22:04:52.330Z lmx.mxhandle.read Lmx.dll IMxReference.GetMxHandle 0xafee94 []
2026-04-25T22:04:52.331Z lmx.prebound-resolve.leave Lmx.dll PreboundReference.Resolve 0x70fe1e01 []
2026-04-25T22:04:52.331Z lmx.prebind.leave Lmx.dll MxConnection.PrebindReference []
2026-04-25T22:04:52.333Z call.enter LmxProxy.dll CLMXProxyServer.AdviseSupervisory 0xaff064 "[""0x5e08ff0"",""0x1"",""0x1"",""0x8f4c5e0"",""0x74794704""]"
2026-04-25T22:04:52.333Z lmx.fixup-mxhandle.enter Lmx.dll AccessManager.FixUpMxHandle []
2026-04-25T22:04:52.333Z lmx.fixup-mxhandle.leave Lmx.dll AccessManager.FixUpMxHandle 0xafeee4 []
2026-04-25T22:04:52.334Z lmx.fixup-mxhandle.enter Lmx.dll AccessManager.FixUpMxHandle []
2026-04-25T22:04:52.334Z lmx.fixup-mxhandle.leave Lmx.dll AccessManager.FixUpMxHandle 0xafdb78 []
2026-04-25T22:04:52.334Z call.leave LmxProxy.dll CLMXProxyServer.AdviseSupervisory 0x0 []
2026-04-25T22:04:52.461Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x911c738"",""0x1"",""0x1"",""0x1"",""0x2"",""0x0"",""0x13a"",""0x9120648"",""0xafed28"",""0xb41e8ea7""]" 0 1 0x2
2026-04-25T22:04:52.461Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x911c738"",""0x1"",""0x1"",""0x1"",""0x2"",""0x0"",""0x13a"",""0x9120648"",""0xafed28"",""0xb41e8ea7""]" 1 314 0x9120648 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 6a 00 00 00 40 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 d0 fc 11 09 1f 01 00 25 c8 40 0a 09 83 87 42 b0 24 b6 f2 a3 bf 7a b6 00 00 01 00 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 76 00 00 00 4c 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 50 03 12 09 20 01 00 02 00 00 00
2026-04-25T22:04:52.465Z nmx.enter NmxAdptr.dll CNmxAdapter.TransferData 0x911c738 "[""0x1"",""0x1"",""0x1"",""0x168"",""0x9ab5020"",""0x7c4b9942"",""0x9120214"",""0x9120204"",""0x641add04"",""0x0""]" 0 360 0x9ab5020 01 00 3a 01 00 00 00 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 02 00 00 30 75 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 6a 00 00 00 40 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 d0 fc 11 09 1f 01 00 25 c8 40 0a 09 83 87 42 b0 24 b6 f2 a3 bf 7a b6 00 00 01 00 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 76 00 00 00 4c 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 50 03 12 09 20 01 00 02 00 00 00
2026-04-25T22:04:52.465Z nmx.leave NmxAdptr.dll CNmxAdapter.TransferData 0x0 []
2026-04-25T22:04:52.466Z nmx.leave NmxAdptr.dll CNmxAdapter.PutRequest 0x0 []
2026-04-25T22:04:52.468Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x911c738"",""0x1"",""0x1"",""0x2"",""0x2"",""0x0"",""0x27"",""0x91ece60"",""0xafed28"",""0xb41e8ea7""]" 0 2 0x2
2026-04-25T22:04:52.468Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x911c738"",""0x1"",""0x1"",""0x2"",""0x2"",""0x0"",""0x27"",""0x91ece60"",""0xafed28"",""0xb41e8ea7""]" 1 39 0x91ece60 1f 01 00 25 c8 40 0a 09 83 87 42 b0 24 b6 f2 a3 bf 7a b6 00 00 05 00 36 d7 02 00 a5 00 0a 00 5d 4b ff ff 03 00 00 00
2026-04-25T22:04:52.470Z nmx.enter NmxAdptr.dll CNmxAdapter.TransferData 0x911c738 "[""0x1"",""0x1"",""0x2"",""0x55"",""0x9ab5020"",""0x7c4b9942"",""0x91f9634"",""0x91f9624"",""0x641add04"",""0x0""]" 0 85 0x9ab5020 01 00 27 00 00 00 00 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 1f 01 00 25 c8 40 0a 09 83 87 42 b0 24 b6 f2 a3 bf 7a b6 00 00 05 00 36 d7 02 00 a5 00 0a 00 5d 4b ff ff 03 00 00 00
2026-04-25T22:04:52.470Z nmx.leave NmxAdptr.dll CNmxAdapter.TransferData 0x0 []
2026-04-25T22:04:52.470Z nmx.leave NmxAdptr.dll CNmxAdapter.PutRequest 0x0 []
2026-04-25T22:04:52.499Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x911c738 "[""0x2c2"",""0x7c382f4"",""0x729ec88"",""0x76ffedd8"",""0x911c744"",""0x2c2"",""0x7c382f4"",""0x206"",""0x3"",""0x772ed1c""]" 0 706 0x7c382f4 c2 02 00 00 01 00 94 02 00 00 00 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 40 1f 50 80 08 a6 00 00 00 40 00 00 91 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 18 00 00 00 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 00 00 28 00 00 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 53 f2 9a 00 6a 00 0a 00 5f f1 00 00 01 6c 00 00 00 41 00 6e 00 20 00 69 00 6e 00 74 00 65 00 72 00 6e 00 61 00 6c 00 20 00 65 00 72 00 72 00 6f 00 72 00 20 00 6f 00 63 00 63 00 75 00 72 00 72 00 65 00 64 00 20 00 69 00 6e 00 20 00 74 00 68 00 65 00 20 00 42 00 61 00 73 00 65 00 20 00 52 00 75 00 6e 00 74 00 69 00 6d 00 65 00 20 00 4f 00 62 00 6a 00 65 00 63 00 74 00 00 00 1f 00 00 50 80 01 00 01 00 01 00 30 75 00 00 95 8b f8 08 02 24 e3 4e 82 ea 07 2c 36 84 45 da 25 c8 40 0a 09 83 87 42 b0 24 b6 f2 a3 bf 7a b6 40 1f 50 80 08 be 00 00 00 4c 00 00 91 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 18 00 00 00 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 00 00 34 00 00 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 53 f2 9a 00 6b 00 0a 00 87 3a 00 00 01 6c 00 00 00 41 00 6e 00 20 00 69 00 6e 00 74 00 65 00 72 00 6e 00 61 00 6c 00 20 00 65 00 72 00 72 00 6f 00 72 00 20 00 6f 00 63 00 63 00 75 00 72 00 72 00 65 00 64 00 20 00 69 00 6e 00 20 00 74 00 68 00 65 00 20 00 42 00 61 00 73 00 65 00 20 00 52 00 75 00 6e 00 74 00 69 00 6d 00 65 00 20 00 4f 00 62 00 6a 00 65 00 63 00 74 00 00 00 20 00 00 50 80 01 00 01 00 01 00
2026-04-25T22:04:52.499Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x911c738 "[""0x2c2"",""0x7c382f4"",""0x729ec88"",""0x76ffedd8"",""0x911c744"",""0x2c2"",""0x7c382f4"",""0x206"",""0x3"",""0x772ed1c""]" 1 518 0x3
2026-04-25T22:04:52.499Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x911c738 "[""0x2c2"",""0x7c382f4"",""0x729ec88"",""0x76ffedd8"",""0x911c744"",""0x2c2"",""0x7c382f4"",""0x206"",""0x3"",""0x772ed1c""]" 2 3 0x772ed1c c0 c9 72
2026-04-25T22:04:52.501Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x0 []
2026-04-25T22:04:52.505Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x911c738 "[""0x97"",""0xf0fb54"",""0x729ec88"",""0x76ffedd8"",""0x911c744"",""0x97"",""0xf0fb54"",""0x206"",""0x3"",""0x772ed1c""]" 0 151 0xf0fb54 97 00 00 00 01 00 69 00 00 00 00 00 00 00 d5 5c 0c 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 32 01 00 02 00 00 00 95 8b f8 08 02 24 e3 4e 82 ea 07 2c 36 84 45 da 25 c8 40 0a 09 83 87 42 b0 24 b6 f2 a3 bf 7a b6 01 00 00 00 03 00 00 00 c0 00 20 2e 5a 46 28 d3 dc 01 06 0a 00 00 00 00 a0 41 c3 55 bd dc 01 00 00 02 00 00 00 03 00 00 00 c0 00 80 18 5b 46 28 d3 dc 01 06 0a 00 00 00 80 c1 75 25 a5 bd
2026-04-25T22:04:52.505Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x911c738 "[""0x97"",""0xf0fb54"",""0x729ec88"",""0x76ffedd8"",""0x911c744"",""0x97"",""0xf0fb54"",""0x206"",""0x3"",""0x772ed1c""]" 1 518 0x3
2026-04-25T22:04:52.505Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x911c738 "[""0x97"",""0xf0fb54"",""0x729ec88"",""0x76ffedd8"",""0x911c744"",""0x97"",""0xf0fb54"",""0x206"",""0x3"",""0x772ed1c""]" 2 3 0x772ed1c c0 c9 72
2026-04-25T22:04:52.506Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x0 []
2026-04-25T22:04:52.523Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x911c738 "[""0x5c"",""0xf10c5c"",""0x729ec88"",""0x76ffedd8"",""0x911c744"",""0x5c"",""0xf10c5c"",""0x206"",""0x3"",""0x772ed1c""]" 0 92 0xf10c5c 5c 00 00 00 01 00 2e 00 00 00 00 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 00 00 50 80 01 00 01 00 02 00 30 75 00 00 2c 87 3a c9 d6 4e 1a 4a a4 f7 e7 31 f3 06 cc 88 25 c8 40 0a 09 83 87 42 b0 24 b6 f2
2026-04-25T22:04:52.523Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x911c738 "[""0x5c"",""0xf10c5c"",""0x729ec88"",""0x76ffedd8"",""0x911c744"",""0x5c"",""0xf10c5c"",""0x206"",""0x3"",""0x772ed1c""]" 1 518 0x3
2026-04-25T22:04:52.523Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x911c738 "[""0x5c"",""0xf10c5c"",""0x729ec88"",""0x76ffedd8"",""0x911c744"",""0x5c"",""0xf10c5c"",""0x206"",""0x3"",""0x772ed1c""]" 2 3 0x772ed1c c0 c9 72
2026-04-25T22:04:52.525Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x0 []
2026-04-25T22:04:52.529Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x911c738 "[""0x146"",""0xf0fb54"",""0x729ec88"",""0x76ffedd8"",""0x911c744"",""0x146"",""0xf0fb54"",""0x206"",""0x3"",""0x772ed1c""]" 0 326 0xf0fb54 46 01 00 00 01 00 18 01 00 00 00 00 00 00 c9 89 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 32 01 00 01 00 00 00 2c 87 3a c9 d6 4e 1a 4a a4 f7 e7 31 f3 06 cc 88 25 c8 40 0a 09 83 87 42 b0 24 b6 f2 a3 bf 7a b6 03 00 00 00 03 00 00 00 c0 00 80 4c b4 bf ac d4 dc 01 45 00 00 00 00 0a 00 04 00 00 00 11 00 00 00 05 0c 00 00 00 08 00 00 00 41 00 41 00 31 00 00 00 11 00 00 00 05 0c 00 00 00 08 00 00 00 42 00 42 00 32 00 00 00 11 00 00 00 05 0c 00 00 00 08 00 00 00 43 00 43 00 33 00 00 00 11 00 00 00 05 0c 00 00 00 08 00 00 00 44 00 44 00 34 00 00 00 11 00 00 00 05 0c 00 00 00 08 00 00 00 45 00 45 00 35 00 00 00 11 00 00 00 05 0c 00 00 00 08 00 00 00 46 00 46 00 36 00 00 00 11 00 00 00 05 0c 00 00 00 08 00 00 00 47 00 47 00 37 00 00 00 11 00 00 00 05 0c 00 00 00 08 00 00 00 48 00 48 00 38 00 00 00 11 00 00 00 05 0c 00 00 00 08 00 00 00 49 00 49 00 39 00 00 00 13 00 00 00 05 0e 00 00 00 0a 00 00 00 4a 00 4a 00 31 00
2026-04-25T22:04:52.529Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x911c738 "[""0x146"",""0xf0fb54"",""0x729ec88"",""0x76ffedd8"",""0x911c744"",""0x146"",""0xf0fb54"",""0x206"",""0x3"",""0x772ed1c""]" 1 518 0x3
2026-04-25T22:04:52.529Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x911c738 "[""0x146"",""0xf0fb54"",""0x729ec88"",""0x76ffedd8"",""0x911c744"",""0x146"",""0xf0fb54"",""0x206"",""0x3"",""0x772ed1c""]" 2 3 0x772ed1c c0 c9 72
2026-04-25T22:04:52.530Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x0 []
2026-04-25T22:04:53.381Z call.enter LmxProxy.dll CLMXProxyServer.Write.variantA 0xaff038 "[""0x5e08ff0"",""0x1"",""0x1"",""0x2008"",""0x0"",""0x7c1a908"",""0x0"",""0x0"",""0x8f4c5e0"",""0x74794704""]"
2026-04-25T22:04:53.381Z call.leave LmxProxy.dll CLMXProxyServer.Write.variantA 0x0 []
2026-04-25T22:04:53.434Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x911c738"",""0x1"",""0x1"",""0x2"",""0x2"",""0x0"",""0x102"",""0x91fa2e0"",""0xafed28"",""0xb41e8ea7""]" 0 2 0x2
2026-04-25T22:04:53.434Z nmx.enter NmxAdptr.dll CNmxAdapter.PutRequest 0x1 "[""0x911c738"",""0x1"",""0x1"",""0x2"",""0x2"",""0x0"",""0x102"",""0x91fa2e0"",""0xafed28"",""0xb41e8ea7""]" 1 258 0x91fa2e0 37 01 00 05 00 36 d7 02 00 a5 00 0a 00 5d 4b ff ff 45 00 00 00 00 0a 00 04 00 00 00 11 00 00 00 05 0c 00 00 00 08 00 00 00 4b 00 41 00 31 00 00 00 11 00 00 00 05 0c 00 00 00 08 00 00 00 4b 00 42 00 32 00 00 00 11 00 00 00 05 0c 00 00 00 08 00 00 00 4b 00 43 00 33 00 00 00 11 00 00 00 05 0c 00 00 00 08 00 00 00 4b 00 44 00 34 00 00 00 11 00 00 00 05 0c 00 00 00 08 00 00 00 4b 00 45 00 35 00 00 00 11 00 00 00 05 0c 00 00 00 08 00 00 00 4b 00 46 00 36 00 00 00 11 00 00 00 05 0c 00 00 00 08 00 00 00 4b 00 47 00 37 00 00 00 11 00 00 00 05 0c 00 00 00 08 00 00 00 4b 00 48 00 38 00 00 00 11 00 00 00 05 0c 00 00 00 08 00 00 00 4b 00 49 00 39 00 00 00 13 00 00 00 05 0e 00 00 00 0a 00 00 00 4b 00 4a 00 31 00 30 00 00 00 ff ff 00 00 00 00 00 00 00 00 45 12 13 0c 01 00 00 00
2026-04-25T22:04:53.436Z nmx.enter NmxAdptr.dll CNmxAdapter.TransferData 0x911c738 "[""0x1"",""0x1"",""0x2"",""0x130"",""0x9ab5020"",""0x7c4b9942"",""0x91177f4"",""0x91177e4"",""0x641add04"",""0x0""]" 0 304 0x9ab5020 01 00 02 01 00 00 00 00 00 00 03 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 37 01 00 05 00 36 d7 02 00 a5 00 0a 00 5d 4b ff ff 45 00 00 00 00 0a 00 04 00 00 00 11 00 00 00 05 0c 00 00 00 08 00 00 00 4b 00 41 00 31 00 00 00 11 00 00 00 05 0c 00 00 00 08 00 00 00 4b 00 42 00 32 00 00 00 11 00 00 00 05 0c 00 00 00 08 00 00 00 4b 00 43 00 33 00 00 00 11 00 00 00 05 0c 00 00 00 08 00 00 00 4b 00 44 00 34 00 00 00 11 00 00 00 05 0c 00 00 00 08 00 00 00 4b 00 45 00 35 00 00 00 11 00 00 00 05 0c 00 00 00 08 00 00 00 4b 00 46 00 36 00 00 00 11 00 00 00 05 0c 00 00 00 08 00 00 00 4b 00 47 00 37 00 00 00 11 00 00 00 05 0c 00 00 00 08 00 00 00 4b 00 48 00 38 00 00 00 11 00 00 00 05 0c 00 00 00 08 00 00 00 4b 00 49 00 39 00 00 00 13 00 00 00 05 0e 00 00 00 0a 00 00 00 4b 00 4a 00 31 00 30 00 00 00 ff ff 00 00 00 00 00 00 00 00 45 12 13 0c 01 00 00 00
2026-04-25T22:04:53.437Z nmx.leave NmxAdptr.dll CNmxAdapter.TransferData 0x0 []
2026-04-25T22:04:53.437Z nmx.leave NmxAdptr.dll CNmxAdapter.PutRequest 0x0 []
2026-04-25T22:04:53.474Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x911c738 "[""0x33"",""0x7c3b60c"",""0x729ec88"",""0x76ffedd8"",""0x911c744"",""0x33"",""0x7c3b60c"",""0x206"",""0x3"",""0x772ed1c""]" 0 51 0x7c3b60c 33 00 00 00 01 00 05 00 00 00 00 00 00 00 03 00 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 00
2026-04-25T22:04:53.474Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x911c738 "[""0x33"",""0x7c3b60c"",""0x729ec88"",""0x76ffedd8"",""0x911c744"",""0x33"",""0x7c3b60c"",""0x206"",""0x3"",""0x772ed1c""]" 1 518 0x3
2026-04-25T22:04:53.474Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x911c738 "[""0x33"",""0x7c3b60c"",""0x729ec88"",""0x76ffedd8"",""0x911c744"",""0x33"",""0x7c3b60c"",""0x206"",""0x3"",""0x772ed1c""]" 2 3 0x772ed1c c0 c9 72
2026-04-25T22:04:53.476Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x0 []
2026-04-25T22:04:53.479Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x911c738 "[""0x132"",""0x7c382f4"",""0x729ec88"",""0x76ffedd8"",""0x911c744"",""0x132"",""0x7c382f4"",""0x206"",""0x3"",""0x772ed1c""]" 0 306 0x7c382f4 32 01 00 00 01 00 04 01 00 00 00 00 00 00 ca 89 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 2c 87 3a c9 d6 4e 1a 4a a4 f7 e7 31 f3 06 cc 88 03 00 00 00 c0 00 00 b6 65 8b ff d4 dc 01 45 00 00 00 00 0a 00 04 00 00 00 11 00 00 00 05 0c 00 00 00 08 00 00 00 4b 00 41 00 31 00 00 00 11 00 00 00 05 0c 00 00 00 08 00 00 00 4b 00 42 00 32 00 00 00 11 00 00 00 05 0c 00 00 00 08 00 00 00 4b 00 43 00 33 00 00 00 11 00 00 00 05 0c 00 00 00 08 00 00 00 4b 00 44 00 34 00 00 00 11 00 00 00 05 0c 00 00 00 08 00 00 00 4b 00 45 00 35 00 00 00 11 00 00 00 05 0c 00 00 00 08 00 00 00 4b 00 46 00 36 00 00 00 11 00 00 00 05 0c 00 00 00 08 00 00 00 4b 00 47 00 37 00 00 00 11 00 00 00 05 0c 00 00 00 08 00 00 00 4b 00 48 00 38 00 00 00 11 00 00 00 05 0c 00 00 00 08 00 00 00 4b 00 49 00 39 00 00 00 13 00 00 00 05 0e 00 00 00 0a 00 00 00 4b 00 4a 00 31 00
2026-04-25T22:04:53.479Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x911c738 "[""0x132"",""0x7c382f4"",""0x729ec88"",""0x76ffedd8"",""0x911c744"",""0x132"",""0x7c382f4"",""0x206"",""0x3"",""0x772ed1c""]" 1 518 0x3
2026-04-25T22:04:53.479Z nmx.enter NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x911c738 "[""0x132"",""0x7c382f4"",""0x729ec88"",""0x76ffedd8"",""0x911c744"",""0x132"",""0x7c382f4"",""0x206"",""0x3"",""0x772ed1c""]" 2 3 0x772ed1c c0 c9 72
2026-04-25T22:04:53.480Z nmx.leave NmxAdptr.dll CNmxAdapter.ProcessDataReceived 0x0 []