Joseph Doherty
fe2a6db786
rust / build / test / clippy / fmt (push) Has been cancelled
Layout:
- src/ .NET 10 x64 reference: MxNativeCodec, MxNativeClient,
MxAsbClient, probes, tests, harnesses. Executable spec.
- design/ Architectural plan for the Rust port (M0–M6), error
model, protocol invariants, risks (R1–R16), adversarial
review log (review.md).
- rust/ Rust workspace. M0 skeleton + M1 codec parity.
mxaccess-codec: 215 unit tests + 2 cross-implementation
parity tests (byte-identical against .NET reference).
Other crates are M0 stubs awaiting M2+.
- captures/ Frida + netsh + pcap evidence per CLAUDE.md
("captures are evidence, not throwaway logs").
- analysis/ Decompiled C# (frida/proxy/decompiled-*),
Ghidra exports for native DLLs (`exports/` only —
working state at `projects/` and AVEVA's input
binaries at `input/` are gitignored).
- docs/ Reverse-engineering reference docs.
- tools/ Setup-LiveProbeEnv.ps1 (Infisical credential fetcher),
Compute-Crc.ps1 (.NET parity helper).
- .github/workflows/ Rust CI: fmt + build + test + clippy on Windows.
- LICENSE MIT (Joseph Doherty, 2026).
Verified:
- cargo test --workspace → 217 passed (215 unit + 2 .NET parity), 0 failed
- cargo clippy --workspace -- -D warnings → clean
- cargo fmt --all -- --check → clean
- cargo publish --dry-run -p mxaccess-codec → packages cleanly
Excluded from history (see .gitignore):
- **/bin, **/obj, **/target — build artifacts
- analysis/ghidra/projects/ — Ghidra working state (regenerable)
- analysis/ghidra/input/ — AVEVA proprietary DLLs (vendor IP)
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
1527 lines
1.1 MiB
Plaintext
1527 lines
1.1 MiB
Plaintext
____
|
|
/ _ | Frida 17.9.1 - A world-class dynamic instrumentation toolkit
|
|
| (_| |
|
|
> _ | Commands:
|
|
/_/ |_| help -> Displays the help system
|
|
. . . . object? -> Display information about 'object'
|
|
. . . . exit/quit -> Exit
|
|
. . . .
|
|
. . . . More info at https://frida.re/docs/home/
|
|
. . . .
|
|
. . . . Connected to Local System (id=local)
|
|
Attaching...
|
|
{"event":"script.loaded","process":13944,"arch":"ia32","pointerSize":4,"time":"2026-04-25T15:57:20.948Z"}
|
|
{"event":"hook.installed","module":"NmxSvc.exe","name":"CFMCCallback.DataReceived","base":"0x9a0000","rva":"0x5be1","address":"0x9a5be1","time":"2026-04-25T15:57:20.949Z"}
|
|
{"event":"hook.installed","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","base":"0x9a0000","rva":"0x1807f","address":"0x9b807f","time":"2026-04-25T15:57:20.949Z"}
|
|
{"event":"hook.installed","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","base":"0x9a0000","rva":"0x1d910","address":"0x9bd910","time":"2026-04-25T15:57:20.949Z"}
|
|
{"event":"hook.installed","module":"NmxSvc.exe","name":"CNmxControler.TransferData","base":"0x9a0000","rva":"0x1dcb5","address":"0x9bdcb5","time":"2026-04-25T15:57:20.950Z"}
|
|
{"event":"hook.installed","module":"NmxSvc.exe","name":"CNmxControler.LocalCallbackDataReceived","base":"0x9a0000","rva":"0x1eea5","address":"0x9beea5","time":"2026-04-25T15:57:20.950Z"}
|
|
{"event":"hook.installed","module":"NmxSvc.exe","name":"CNmxService.TransferData","base":"0x9a0000","rva":"0x21b20","address":"0x9c1b20","time":"2026-04-25T15:57:20.951Z"}
|
|
{"event":"hook.installed","module":"ws2_32.dll","name":"send","address":"0x766158a0","time":"2026-04-25T15:57:20.951Z"}
|
|
{"event":"hook.installed","module":"ws2_32.dll","name":"recv","address":"0x766123a0","time":"2026-04-25T15:57:20.952Z"}
|
|
{"event":"hook.installed","module":"ws2_32.dll","name":"sendto","address":"0x76616160","time":"2026-04-25T15:57:20.952Z"}
|
|
{"event":"hook.installed","module":"ws2_32.dll","name":"recvfrom","address":"0x76615ab0","time":"2026-04-25T15:57:20.952Z"}
|
|
[Local::PID::13944 ]-> {"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x18f6374","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x18f6374","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x52070e8","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18f6374","hex":"01 00 34 00 00 00 00 00 00 00 43 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 50 4d 0f 33 cc d4 dc 01 06 0a 00 00 00 50 4d 0f 33 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18f6374","hex":"01 00 34 00 00 00 00 00 00 00 43 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 50 4d 0f 33 cc d4 dc 01 06 0a 00 00 00 50 4d 0f 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:20.999Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x7ffd","0x62","0x18f6374","0x24a707c5","0x17ee8a0","0x52070e4","0x5207040","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18f6374","0x24a707c5","0x17ee8a0","0x52070e4","0x5207040","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18f6374","hex":"01 00 34 00 00 00 00 00 00 00 43 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 50 4d 0f 33 cc d4 dc 01 06 0a 00 00 00 50 4d 0f 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18f6374","hex":"01 00 34 00 00 00 00 00 00 00 43 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 50 4d 0f 33 cc d4 dc 01 06 0a 00 00 00 50 4d 0f 33 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:21.006Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x62","0x18f6374","0x0","0x24a70775","0x18f6374","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18f6374","0x0","0x24a70775","0x18f6374","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18f6374","hex":"01 00 34 00 00 00 00 00 00 00 43 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 50 4d 0f 33 cc d4 dc 01 06 0a 00 00 00 50 4d 0f 33 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18f6374","hex":"01 00 34 00 00 00 00 00 00 00 43 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 50 4d 0f 33 cc d4 dc 01 06 0a 00 00 00 50 4d 0f 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:21.014Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x62","0x18f6374","0x0","0x24a708bd","0x18f6374","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18f6374","0x0","0x24a708bd","0x18f6374","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18f6374","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18f6374","hex":"01 00 34 00 00 00 00 00 00 00 43 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 50 4d 0f 33 cc d4 dc 01 06 0a 00 00 00 50 4d 0f 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18f6374","hex":"01 00 34 00 00 00 00 00 00 00 43 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 50 4d 0f 33 cc d4 dc 01 06 0a 00 00 00 50 4d 0f 33 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:21.020Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:21.020Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:21.020Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:21.020Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:21.021Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x18fc9a4","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x18fc9a4","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x18e2098","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18fc9a4","hex":"01 00 34 00 00 00 00 00 00 00 44 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 50 4d 0f 33 cc d4 dc 01 06 0a 00 00 00 50 4d 0f 33 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18fc9a4","hex":"01 00 34 00 00 00 00 00 00 00 44 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 50 4d 0f 33 cc d4 dc 01 06 0a 00 00 00 50 4d 0f 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:21.029Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x7ffe","0x62","0x18fc9a4","0x24a707c5","0x17ee8a0","0x18e2094","0x18e1ff0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x18fc9a4","0x24a707c5","0x17ee8a0","0x18e2094","0x18e1ff0","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18fc9a4","hex":"01 00 34 00 00 00 00 00 00 00 44 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 50 4d 0f 33 cc d4 dc 01 06 0a 00 00 00 50 4d 0f 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18fc9a4","hex":"01 00 34 00 00 00 00 00 00 00 44 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 50 4d 0f 33 cc d4 dc 01 06 0a 00 00 00 50 4d 0f 33 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:21.036Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x62","0x18fc9a4","0x0","0x24a70775","0x18fc9a4","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18fc9a4","0x0","0x24a70775","0x18fc9a4","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18fc9a4","hex":"01 00 34 00 00 00 00 00 00 00 44 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 50 4d 0f 33 cc d4 dc 01 06 0a 00 00 00 50 4d 0f 33 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18fc9a4","hex":"01 00 34 00 00 00 00 00 00 00 44 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 50 4d 0f 33 cc d4 dc 01 06 0a 00 00 00 50 4d 0f 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:21.043Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x62","0x18fc9a4","0x0","0x24a708bd","0x18fc9a4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18fc9a4","0x0","0x24a708bd","0x18fc9a4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18fc9a4","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18fc9a4","hex":"01 00 34 00 00 00 00 00 00 00 44 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 50 4d 0f 33 cc d4 dc 01 06 0a 00 00 00 50 4d 0f 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18fc9a4","hex":"01 00 34 00 00 00 00 00 00 00 44 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 50 4d 0f 33 cc d4 dc 01 06 0a 00 00 00 50 4d 0f 33 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:21.049Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:21.050Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:21.050Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:21.050Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:21.050Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x517d2f4","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x517d2f4","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x18e31f0","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x517d2f4","hex":"01 00 00 00 00 00 00 00 00 00 44 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x517d2f4","hex":"01 00 00 00 00 00 00 00 00 00 44 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:21.090Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x1","0x2e","0x517d2f4","0x24a707c5","0x17ee8a0","0x18e31ec","0x18e3148","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x517d2f4","0x24a707c5","0x17ee8a0","0x18e31ec","0x18e3148","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x517d2f4","hex":"01 00 00 00 00 00 00 00 00 00 44 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x517d2f4","hex":"01 00 00 00 00 00 00 00 00 00 44 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:21.097Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x2e","0x517d2f4","0x0","0x24a70775","0x517d2f4","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x517d2f4","0x0","0x24a70775","0x517d2f4","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x517d2f4","hex":"01 00 00 00 00 00 00 00 00 00 44 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x517d2f4","hex":"01 00 00 00 00 00 00 00 00 00 44 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:21.104Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x2e","0x517d2f4","0x0","0x24a708bd","0x517d2f4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x517d2f4","0x0","0x24a708bd","0x517d2f4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x517d2f4","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x517d2f4","hex":"01 00 00 00 00 00 00 00 00 00 44 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x517d2f4","hex":"01 00 00 00 00 00 00 00 00 00 44 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:21.108Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x195cf0c","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x195cf0c","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x18e2098","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x195cf0c","hex":"01 00 34 00 00 00 00 00 00 00 f0 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 1b 27 33 cc d4 dc 01 06 0a 00 00 00 10 1b 27 33 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x195cf0c","hex":"01 00 34 00 00 00 00 00 00 00 f0 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 1b 27 33 cc d4 dc 01 06 0a 00 00 00 10 1b 27 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:21.119Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x51f533c","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x51f533c","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x18e1508","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51f533c","hex":"01 00 00 00 00 00 00 00 00 00 43 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x51f533c","hex":"01 00 00 00 00 00 00 00 00 00 43 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:21.127Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:21.128Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:21.128Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:21.128Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:21.128Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x7ffd","0x62","0x195cf0c","0x255c006d","0x85ef38","0x18e2094","0x18e1ff0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x195cf0c","0x255c006d","0x85ef38","0x18e2094","0x18e1ff0","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x195cf0c","hex":"01 00 34 00 00 00 00 00 00 00 f0 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 1b 27 33 cc d4 dc 01 06 0a 00 00 00 10 1b 27 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x195cf0c","hex":"01 00 34 00 00 00 00 00 00 00 f0 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 1b 27 33 cc d4 dc 01 06 0a 00 00 00 10 1b 27 33 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:21.135Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x62","0x195cf0c","0x0","0x255c019d","0x195cf0c","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x195cf0c","0x0","0x255c019d","0x195cf0c","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x195cf0c","hex":"01 00 34 00 00 00 00 00 00 00 f0 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 1b 27 33 cc d4 dc 01 06 0a 00 00 00 10 1b 27 33 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x195cf0c","hex":"01 00 34 00 00 00 00 00 00 00 f0 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 1b 27 33 cc d4 dc 01 06 0a 00 00 00 10 1b 27 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:21.142Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x62","0x195cf0c","0x0","0x255c0125","0x195cf0c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x195cf0c","0x0","0x255c0125","0x195cf0c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x195cf0c","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x195cf0c","hex":"01 00 34 00 00 00 00 00 00 00 f0 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 1b 27 33 cc d4 dc 01 06 0a 00 00 00 10 1b 27 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x195cf0c","hex":"01 00 34 00 00 00 00 00 00 00 f0 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 1b 27 33 cc d4 dc 01 06 0a 00 00 00 10 1b 27 33 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:21.148Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:21.149Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:21.149Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:21.149Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:21.149Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x1","0x2e","0x51f533c","0x27e7023d","0x23eed68","0x18e1504","0x18e1460","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x51f533c","0x27e7023d","0x23eed68","0x18e1504","0x18e1460","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51f533c","hex":"01 00 00 00 00 00 00 00 00 00 43 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51f533c","hex":"01 00 00 00 00 00 00 00 00 00 43 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:21.156Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x2e","0x51f533c","0x0","0x27e703ad","0x51f533c","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x51f533c","0x0","0x27e703ad","0x51f533c","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51f533c","hex":"01 00 00 00 00 00 00 00 00 00 43 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51f533c","hex":"01 00 00 00 00 00 00 00 00 00 43 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:21.163Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x2e","0x51f533c","0x0","0x27e703f5","0x51f533c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x51f533c","0x0","0x27e703f5","0x51f533c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51f533c","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x51f533c","hex":"01 00 00 00 00 00 00 00 00 00 43 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51f533c","hex":"01 00 00 00 00 00 00 00 00 00 43 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:21.168Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:21.168Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:21.168Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:21.168Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:21.168Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x196132c","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x196132c","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x5204238","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x196132c","hex":"01 00 00 00 00 00 00 00 00 00 f0 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x196132c","hex":"01 00 00 00 00 00 00 00 00 00 f0 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:21.182Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x2","0x2e","0x196132c","0x27e7023d","0x23eed68","0x5204234","0x5204190","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x196132c","0x27e7023d","0x23eed68","0x5204234","0x5204190","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x196132c","hex":"01 00 00 00 00 00 00 00 00 00 f0 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x196132c","hex":"01 00 00 00 00 00 00 00 00 00 f0 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:21.189Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x2e","0x196132c","0x0","0x27e703ad","0x196132c","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x196132c","0x0","0x27e703ad","0x196132c","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x196132c","hex":"01 00 00 00 00 00 00 00 00 00 f0 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x196132c","hex":"01 00 00 00 00 00 00 00 00 00 f0 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:21.199Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x2e","0x196132c","0x0","0x27e703f5","0x196132c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x196132c","0x0","0x27e703f5","0x196132c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x196132c","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x196132c","hex":"01 00 00 00 00 00 00 00 00 00 f0 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x196132c","hex":"01 00 00 00 00 00 00 00 00 00 f0 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:21.204Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:21.204Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:21.205Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:21.205Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:21.205Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x18f1f54","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x18f1f54","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x52070e8","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18f1f54","hex":"01 00 34 00 00 00 00 00 00 00 45 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 90 98 5b 33 cc d4 dc 01 06 0a 00 00 00 90 98 5b 33 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18f1f54","hex":"01 00 34 00 00 00 00 00 00 00 45 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 90 98 5b 33 cc d4 dc 01 06 0a 00 00 00 90 98 5b 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:21.499Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffd","0x62","0x18f1f54","0x27e7023d","0x23eed68","0x52070e4","0x5207040","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18f1f54","0x27e7023d","0x23eed68","0x52070e4","0x5207040","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18f1f54","hex":"01 00 34 00 00 00 00 00 00 00 45 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 90 98 5b 33 cc d4 dc 01 06 0a 00 00 00 90 98 5b 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18f1f54","hex":"01 00 34 00 00 00 00 00 00 00 45 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 90 98 5b 33 cc d4 dc 01 06 0a 00 00 00 90 98 5b 33 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:21.507Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x18f1f54","0x0","0x27e703ad","0x18f1f54","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18f1f54","0x0","0x27e703ad","0x18f1f54","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18f1f54","hex":"01 00 34 00 00 00 00 00 00 00 45 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 90 98 5b 33 cc d4 dc 01 06 0a 00 00 00 90 98 5b 33 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18f1f54","hex":"01 00 34 00 00 00 00 00 00 00 45 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 90 98 5b 33 cc d4 dc 01 06 0a 00 00 00 90 98 5b 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:21.518Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x18f1f54","0x0","0x27e703f5","0x18f1f54","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18f1f54","0x0","0x27e703f5","0x18f1f54","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18f1f54","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18f1f54","hex":"01 00 34 00 00 00 00 00 00 00 45 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 90 98 5b 33 cc d4 dc 01 06 0a 00 00 00 90 98 5b 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18f1f54","hex":"01 00 34 00 00 00 00 00 00 00 45 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 90 98 5b 33 cc d4 dc 01 06 0a 00 00 00 90 98 5b 33 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:21.524Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:21.525Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:21.525Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:21.525Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:21.525Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x18f8584","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x18f8584","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x18e03b0","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18f8584","hex":"01 00 34 00 00 00 00 00 00 00 46 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 90 98 5b 33 cc d4 dc 01 06 0a 00 00 00 90 98 5b 33 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18f8584","hex":"01 00 34 00 00 00 00 00 00 00 46 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 90 98 5b 33 cc d4 dc 01 06 0a 00 00 00 90 98 5b 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:21.536Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffe","0x62","0x18f8584","0x27e7023d","0x23eed68","0x18e03ac","0x18e0308","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x18f8584","0x27e7023d","0x23eed68","0x18e03ac","0x18e0308","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18f8584","hex":"01 00 34 00 00 00 00 00 00 00 46 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 90 98 5b 33 cc d4 dc 01 06 0a 00 00 00 90 98 5b 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18f8584","hex":"01 00 34 00 00 00 00 00 00 00 46 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 90 98 5b 33 cc d4 dc 01 06 0a 00 00 00 90 98 5b 33 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:21.543Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x18f8584","0x0","0x27e703ad","0x18f8584","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18f8584","0x0","0x27e703ad","0x18f8584","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18f8584","hex":"01 00 34 00 00 00 00 00 00 00 46 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 90 98 5b 33 cc d4 dc 01 06 0a 00 00 00 90 98 5b 33 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18f8584","hex":"01 00 34 00 00 00 00 00 00 00 46 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 90 98 5b 33 cc d4 dc 01 06 0a 00 00 00 90 98 5b 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:21.550Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x18f8584","0x0","0x27e703f5","0x18f8584","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18f8584","0x0","0x27e703f5","0x18f8584","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18f8584","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18f8584","hex":"01 00 34 00 00 00 00 00 00 00 46 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 90 98 5b 33 cc d4 dc 01 06 0a 00 00 00 90 98 5b 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18f8584","hex":"01 00 34 00 00 00 00 00 00 00 46 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 90 98 5b 33 cc d4 dc 01 06 0a 00 00 00 90 98 5b 33 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:21.556Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:21.557Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:21.557Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:21.557Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:21.557Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18b5914","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18b5914","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x5208240","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b5914","hex":"01 00 34 00 00 00 00 00 00 00 f1 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 8d 73 33 cc d4 dc 01 06 0a 00 00 00 60 8d 73 33 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18b5914","hex":"01 00 34 00 00 00 00 00 00 00 f1 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 8d 73 33 cc d4 dc 01 06 0a 00 00 00 60 8d 73 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:21.598Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffd","0x62","0x18b5914","0x27e7023d","0x23eed68","0x520823c","0x5208198","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18b5914","0x27e7023d","0x23eed68","0x520823c","0x5208198","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b5914","hex":"01 00 34 00 00 00 00 00 00 00 f1 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 8d 73 33 cc d4 dc 01 06 0a 00 00 00 60 8d 73 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b5914","hex":"01 00 34 00 00 00 00 00 00 00 f1 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 8d 73 33 cc d4 dc 01 06 0a 00 00 00 60 8d 73 33 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:21.605Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x18b5914","0x0","0x27e703ad","0x18b5914","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18b5914","0x0","0x27e703ad","0x18b5914","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b5914","hex":"01 00 34 00 00 00 00 00 00 00 f1 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 8d 73 33 cc d4 dc 01 06 0a 00 00 00 60 8d 73 33 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b5914","hex":"01 00 34 00 00 00 00 00 00 00 f1 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 8d 73 33 cc d4 dc 01 06 0a 00 00 00 60 8d 73 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:21.611Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x18b5914","0x0","0x27e703f5","0x18b5914","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18b5914","0x0","0x27e703f5","0x18b5914","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b5914","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18b5914","hex":"01 00 34 00 00 00 00 00 00 00 f1 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 8d 73 33 cc d4 dc 01 06 0a 00 00 00 60 8d 73 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b5914","hex":"01 00 34 00 00 00 00 00 00 00 f1 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 8d 73 33 cc d4 dc 01 06 0a 00 00 00 60 8d 73 33 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:21.617Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:21.617Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:21.617Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:21.617Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:21.618Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x18be154","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x18be154","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x5208dd0","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18be154","hex":"01 00 00 00 00 00 00 00 00 00 46 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18be154","hex":"01 00 00 00 00 00 00 00 00 00 46 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:21.640Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x1","0x2e","0x18be154","0x27e7023d","0x23eed68","0x5208dcc","0x5208d28","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18be154","0x27e7023d","0x23eed68","0x5208dcc","0x5208d28","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18be154","hex":"01 00 00 00 00 00 00 00 00 00 46 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18be154","hex":"01 00 00 00 00 00 00 00 00 00 46 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:21.647Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x2e","0x18be154","0x0","0x27e703ad","0x18be154","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18be154","0x0","0x27e703ad","0x18be154","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18be154","hex":"01 00 00 00 00 00 00 00 00 00 46 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18be154","hex":"01 00 00 00 00 00 00 00 00 00 46 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:21.654Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x2e","0x18be154","0x0","0x27e703f5","0x18be154","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18be154","0x0","0x27e703f5","0x18be154","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18be154","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18be154","hex":"01 00 00 00 00 00 00 00 00 00 46 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18be154","hex":"01 00 00 00 00 00 00 00 00 00 46 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:21.659Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x5183924","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x5183924","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x18798a0","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x5183924","hex":"01 00 00 00 00 00 00 00 00 00 45 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x5183924","hex":"01 00 00 00 00 00 00 00 00 00 45 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:21.667Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:21.667Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:21.668Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:21.668Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:21.668Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x1","0x2e","0x5183924","0x255c006d","0x85ef38","0x187989c","0x18797f8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x5183924","0x255c006d","0x85ef38","0x187989c","0x18797f8","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x5183924","hex":"01 00 00 00 00 00 00 00 00 00 45 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x5183924","hex":"01 00 00 00 00 00 00 00 00 00 45 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:21.674Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x2e","0x5183924","0x0","0x255c019d","0x5183924","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x5183924","0x0","0x255c019d","0x5183924","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x5183924","hex":"01 00 00 00 00 00 00 00 00 00 45 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x5183924","hex":"01 00 00 00 00 00 00 00 00 00 45 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:21.680Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x2e","0x5183924","0x0","0x255c0125","0x5183924","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x5183924","0x0","0x255c0125","0x5183924","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x5183924","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x5183924","hex":"01 00 00 00 00 00 00 00 00 00 45 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x5183924","hex":"01 00 00 00 00 00 00 00 00 00 45 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:21.684Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:21.685Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:21.685Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:21.685Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:21.685Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x18f0e4c","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x18f0e4c","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x18e1ad0","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18f0e4c","hex":"01 00 00 00 00 00 00 00 00 00 f1 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18f0e4c","hex":"01 00 00 00 00 00 00 00 00 00 f1 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:21.695Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x2","0x2e","0x18f0e4c","0x255c006d","0x85ef38","0x18e1acc","0x18e1a28","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x18f0e4c","0x255c006d","0x85ef38","0x18e1acc","0x18e1a28","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18f0e4c","hex":"01 00 00 00 00 00 00 00 00 00 f1 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18f0e4c","hex":"01 00 00 00 00 00 00 00 00 00 f1 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:21.701Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x2e","0x18f0e4c","0x0","0x255c019d","0x18f0e4c","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18f0e4c","0x0","0x255c019d","0x18f0e4c","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18f0e4c","hex":"01 00 00 00 00 00 00 00 00 00 f1 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18f0e4c","hex":"01 00 00 00 00 00 00 00 00 00 f1 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:21.707Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x2e","0x18f0e4c","0x0","0x255c0125","0x18f0e4c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18f0e4c","0x0","0x255c0125","0x18f0e4c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18f0e4c","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18f0e4c","hex":"01 00 00 00 00 00 00 00 00 00 f1 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18f0e4c","hex":"01 00 00 00 00 00 00 00 00 00 f1 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:21.712Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:21.712Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:21.713Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:21.713Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:21.713Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x18f4164","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x18f4164","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x18e1ad0","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18f4164","hex":"01 00 34 00 00 00 00 00 00 00 47 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 0a a8 33 cc d4 dc 01 06 0a 00 00 00 e0 0a a8 33 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18f4164","hex":"01 00 34 00 00 00 00 00 00 00 47 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 0a a8 33 cc d4 dc 01 06 0a 00 00 00 e0 0a a8 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:22.000Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x7ffd","0x62","0x18f4164","0x255c006d","0x85ef38","0x18e1acc","0x18e1a28","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18f4164","0x255c006d","0x85ef38","0x18e1acc","0x18e1a28","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18f4164","hex":"01 00 34 00 00 00 00 00 00 00 47 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 0a a8 33 cc d4 dc 01 06 0a 00 00 00 e0 0a a8 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18f4164","hex":"01 00 34 00 00 00 00 00 00 00 47 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 0a a8 33 cc d4 dc 01 06 0a 00 00 00 e0 0a a8 33 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:22.006Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x62","0x18f4164","0x0","0x255c019d","0x18f4164","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18f4164","0x0","0x255c019d","0x18f4164","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18f4164","hex":"01 00 34 00 00 00 00 00 00 00 47 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 0a a8 33 cc d4 dc 01 06 0a 00 00 00 e0 0a a8 33 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18f4164","hex":"01 00 34 00 00 00 00 00 00 00 47 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 0a a8 33 cc d4 dc 01 06 0a 00 00 00 e0 0a a8 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:22.013Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x62","0x18f4164","0x0","0x255c0125","0x18f4164","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18f4164","0x0","0x255c0125","0x18f4164","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18f4164","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18f4164","hex":"01 00 34 00 00 00 00 00 00 00 47 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 0a a8 33 cc d4 dc 01 06 0a 00 00 00 e0 0a a8 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18f4164","hex":"01 00 34 00 00 00 00 00 00 00 47 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 0a a8 33 cc d4 dc 01 06 0a 00 00 00 e0 0a a8 33 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:22.018Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:22.019Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:22.019Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:22.019Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:22.019Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x18f6374","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x18f6374","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x52070e8","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18f6374","hex":"01 00 34 00 00 00 00 00 00 00 48 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 0a a8 33 cc d4 dc 01 06 0a 00 00 00 e0 0a a8 33 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18f6374","hex":"01 00 34 00 00 00 00 00 00 00 48 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 0a a8 33 cc d4 dc 01 06 0a 00 00 00 e0 0a a8 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:22.130Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x7ffe","0x62","0x18f6374","0x255c006d","0x85ef38","0x52070e4","0x5207040","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x18f6374","0x255c006d","0x85ef38","0x52070e4","0x5207040","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18f6374","hex":"01 00 34 00 00 00 00 00 00 00 48 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 0a a8 33 cc d4 dc 01 06 0a 00 00 00 e0 0a a8 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18f6374","hex":"01 00 34 00 00 00 00 00 00 00 48 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 0a a8 33 cc d4 dc 01 06 0a 00 00 00 e0 0a a8 33 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:22.136Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x62","0x18f6374","0x0","0x255c019d","0x18f6374","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18f6374","0x0","0x255c019d","0x18f6374","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18f6374","hex":"01 00 34 00 00 00 00 00 00 00 48 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 0a a8 33 cc d4 dc 01 06 0a 00 00 00 e0 0a a8 33 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18f6374","hex":"01 00 34 00 00 00 00 00 00 00 48 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 0a a8 33 cc d4 dc 01 06 0a 00 00 00 e0 0a a8 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:22.142Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x62","0x18f6374","0x0","0x255c0125","0x18f6374","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18f6374","0x0","0x255c0125","0x18f6374","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18f6374","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18f6374","hex":"01 00 34 00 00 00 00 00 00 00 48 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 0a a8 33 cc d4 dc 01 06 0a 00 00 00 e0 0a a8 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18f6374","hex":"01 00 34 00 00 00 00 00 00 00 48 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 0a a8 33 cc d4 dc 01 06 0a 00 00 00 e0 0a a8 33 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:22.147Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x18fdaac","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x18fdaac","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x18e2660","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18fdaac","hex":"01 00 00 00 00 00 00 00 00 00 47 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18fdaac","hex":"01 00 00 00 00 00 00 00 00 00 47 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:22.156Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18f0e4c","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18f0e4c","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x18e1ad0","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18f0e4c","hex":"01 00 34 00 00 00 00 00 00 00 f2 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 2f c5 33 cc d4 dc 01 06 0a 00 00 00 d0 2f c5 33 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18f0e4c","hex":"01 00 34 00 00 00 00 00 00 00 f2 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 2f c5 33 cc d4 dc 01 06 0a 00 00 00 d0 2f c5 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:22.163Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:22.164Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:22.164Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:22.164Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:22.165Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffd","0x62","0x18f0e4c","0x27e7023d","0x23eed68","0x18e1acc","0x18e1a28","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18f0e4c","0x27e7023d","0x23eed68","0x18e1acc","0x18e1a28","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18f0e4c","hex":"01 00 34 00 00 00 00 00 00 00 f2 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 2f c5 33 cc d4 dc 01 06 0a 00 00 00 d0 2f c5 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18f0e4c","hex":"01 00 34 00 00 00 00 00 00 00 f2 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 2f c5 33 cc d4 dc 01 06 0a 00 00 00 d0 2f c5 33 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:22.171Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x18f0e4c","0x0","0x27e703ad","0x18f0e4c","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18f0e4c","0x0","0x27e703ad","0x18f0e4c","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18f0e4c","hex":"01 00 34 00 00 00 00 00 00 00 f2 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 2f c5 33 cc d4 dc 01 06 0a 00 00 00 d0 2f c5 33 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18f0e4c","hex":"01 00 34 00 00 00 00 00 00 00 f2 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 2f c5 33 cc d4 dc 01 06 0a 00 00 00 d0 2f c5 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:22.179Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x18f0e4c","0x0","0x27e703f5","0x18f0e4c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18f0e4c","0x0","0x27e703f5","0x18f0e4c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18f0e4c","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18f0e4c","hex":"01 00 34 00 00 00 00 00 00 00 f2 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 2f c5 33 cc d4 dc 01 06 0a 00 00 00 d0 2f c5 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18f0e4c","hex":"01 00 34 00 00 00 00 00 00 00 f2 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 2f c5 33 cc d4 dc 01 06 0a 00 00 00 d0 2f c5 33 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:22.184Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:22.185Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:22.185Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:22.185Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:22.185Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x1","0x2e","0x18fdaac","0x24a707c5","0x17ee8a0","0x18e265c","0x18e25b8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18fdaac","0x24a707c5","0x17ee8a0","0x18e265c","0x18e25b8","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18fdaac","hex":"01 00 00 00 00 00 00 00 00 00 47 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18fdaac","hex":"01 00 00 00 00 00 00 00 00 00 47 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:22.191Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x2e","0x18fdaac","0x0","0x24a70775","0x18fdaac","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18fdaac","0x0","0x24a70775","0x18fdaac","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18fdaac","hex":"01 00 00 00 00 00 00 00 00 00 47 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18fdaac","hex":"01 00 00 00 00 00 00 00 00 00 47 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:22.197Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x2e","0x18fdaac","0x0","0x24a708bd","0x18fdaac","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18fdaac","0x0","0x24a708bd","0x18fdaac","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18fdaac","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18fdaac","hex":"01 00 00 00 00 00 00 00 00 00 47 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18fdaac","hex":"01 00 00 00 00 00 00 00 00 00 47 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:22.202Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:22.203Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:22.203Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:22.203Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:22.203Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x51c463c","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x51c463c","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x1878180","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51c463c","hex":"01 00 00 00 00 00 00 00 00 00 f2 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x51c463c","hex":"01 00 00 00 00 00 00 00 00 00 f2 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:22.214Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x2","0x2e","0x51c463c","0x24a707c5","0x17ee8a0","0x187817c","0x18780d8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x51c463c","0x24a707c5","0x17ee8a0","0x187817c","0x18780d8","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51c463c","hex":"01 00 00 00 00 00 00 00 00 00 f2 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51c463c","hex":"01 00 00 00 00 00 00 00 00 00 f2 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:22.219Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x2e","0x51c463c","0x0","0x24a70775","0x51c463c","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x51c463c","0x0","0x24a70775","0x51c463c","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51c463c","hex":"01 00 00 00 00 00 00 00 00 00 f2 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51c463c","hex":"01 00 00 00 00 00 00 00 00 00 f2 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:22.226Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x2e","0x51c463c","0x0","0x24a708bd","0x51c463c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x51c463c","0x0","0x24a708bd","0x51c463c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51c463c","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x51c463c","hex":"01 00 00 00 00 00 00 00 00 00 f2 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51c463c","hex":"01 00 00 00 00 00 00 00 00 00 f2 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:22.230Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:22.231Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:22.231Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:22.231Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:22.231Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x18b6a1c","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x18b6a1c","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x5209960","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18b6a1c","hex":"01 00 00 00 00 00 00 00 00 00 48 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18b6a1c","hex":"01 00 00 00 00 00 00 00 00 00 48 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:22.240Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x1","0x2e","0x18b6a1c","0x24a707c5","0x17ee8a0","0x520995c","0x52098b8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18b6a1c","0x24a707c5","0x17ee8a0","0x520995c","0x52098b8","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18b6a1c","hex":"01 00 00 00 00 00 00 00 00 00 48 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18b6a1c","hex":"01 00 00 00 00 00 00 00 00 00 48 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:22.247Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x2e","0x18b6a1c","0x0","0x24a70775","0x18b6a1c","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18b6a1c","0x0","0x24a70775","0x18b6a1c","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18b6a1c","hex":"01 00 00 00 00 00 00 00 00 00 48 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18b6a1c","hex":"01 00 00 00 00 00 00 00 00 00 48 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:22.255Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x2e","0x18b6a1c","0x0","0x24a708bd","0x18b6a1c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18b6a1c","0x0","0x24a708bd","0x18b6a1c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b6a1c","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18b6a1c","hex":"01 00 00 00 00 00 00 00 00 00 48 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18b6a1c","hex":"01 00 00 00 00 00 00 00 00 00 48 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:22.260Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:22.260Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:22.260Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:22.260Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:22.260Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x18b25fc","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x18b25fc","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x5209960","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b25fc","hex":"01 00 34 00 00 00 00 00 00 00 49 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 56 f4 33 cc d4 dc 01 06 0a 00 00 00 20 56 f4 33 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18b25fc","hex":"01 00 34 00 00 00 00 00 00 00 49 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 56 f4 33 cc d4 dc 01 06 0a 00 00 00 20 56 f4 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:22.492Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x7ffd","0x62","0x18b25fc","0x24a707c5","0x17ee8a0","0x520995c","0x52098b8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18b25fc","0x24a707c5","0x17ee8a0","0x520995c","0x52098b8","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b25fc","hex":"01 00 34 00 00 00 00 00 00 00 49 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 56 f4 33 cc d4 dc 01 06 0a 00 00 00 20 56 f4 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b25fc","hex":"01 00 34 00 00 00 00 00 00 00 49 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 56 f4 33 cc d4 dc 01 06 0a 00 00 00 20 56 f4 33 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:22.498Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x62","0x18b25fc","0x0","0x24a70775","0x18b25fc","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18b25fc","0x0","0x24a70775","0x18b25fc","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b25fc","hex":"01 00 34 00 00 00 00 00 00 00 49 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 56 f4 33 cc d4 dc 01 06 0a 00 00 00 20 56 f4 33 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b25fc","hex":"01 00 34 00 00 00 00 00 00 00 49 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 56 f4 33 cc d4 dc 01 06 0a 00 00 00 20 56 f4 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:22.506Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x62","0x18b25fc","0x0","0x24a708bd","0x18b25fc","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18b25fc","0x0","0x24a708bd","0x18b25fc","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b25fc","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18b25fc","hex":"01 00 34 00 00 00 00 00 00 00 49 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 56 f4 33 cc d4 dc 01 06 0a 00 00 00 20 56 f4 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b25fc","hex":"01 00 34 00 00 00 00 00 00 00 49 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 56 f4 33 cc d4 dc 01 06 0a 00 00 00 20 56 f4 33 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:22.511Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:22.511Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:22.512Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:22.512Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:22.512Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x196353c","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x196353c","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x18798a0","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x196353c","hex":"01 00 34 00 00 00 00 00 00 00 4a 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 56 f4 33 cc d4 dc 01 06 0a 00 00 00 20 56 f4 33 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x196353c","hex":"01 00 34 00 00 00 00 00 00 00 4a 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 56 f4 33 cc d4 dc 01 06 0a 00 00 00 20 56 f4 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:22.520Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x7ffe","0x62","0x196353c","0x24a707c5","0x17ee8a0","0x187989c","0x18797f8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x196353c","0x24a707c5","0x17ee8a0","0x187989c","0x18797f8","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x196353c","hex":"01 00 34 00 00 00 00 00 00 00 4a 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 56 f4 33 cc d4 dc 01 06 0a 00 00 00 20 56 f4 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x196353c","hex":"01 00 34 00 00 00 00 00 00 00 4a 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 56 f4 33 cc d4 dc 01 06 0a 00 00 00 20 56 f4 33 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:22.526Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x62","0x196353c","0x0","0x24a70775","0x196353c","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x196353c","0x0","0x24a70775","0x196353c","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x196353c","hex":"01 00 34 00 00 00 00 00 00 00 4a 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 56 f4 33 cc d4 dc 01 06 0a 00 00 00 20 56 f4 33 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x196353c","hex":"01 00 34 00 00 00 00 00 00 00 4a 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 56 f4 33 cc d4 dc 01 06 0a 00 00 00 20 56 f4 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:22.533Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x62","0x196353c","0x0","0x24a708bd","0x196353c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x196353c","0x0","0x24a708bd","0x196353c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x196353c","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x196353c","hex":"01 00 34 00 00 00 00 00 00 00 4a 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 56 f4 33 cc d4 dc 01 06 0a 00 00 00 20 56 f4 33 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x196353c","hex":"01 00 34 00 00 00 00 00 00 00 4a 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 56 f4 33 cc d4 dc 01 06 0a 00 00 00 20 56 f4 33 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:22.538Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:22.538Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:22.538Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:22.539Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:22.539Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x51c8a5c","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x51c8a5c","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x1878180","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51c8a5c","hex":"01 00 00 00 00 00 00 00 00 00 4a 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x51c8a5c","hex":"01 00 00 00 00 00 00 00 00 00 4a 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:22.568Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x1","0x2e","0x51c8a5c","0x24a707c5","0x17ee8a0","0x187817c","0x18780d8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x51c8a5c","0x24a707c5","0x17ee8a0","0x187817c","0x18780d8","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51c8a5c","hex":"01 00 00 00 00 00 00 00 00 00 4a 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51c8a5c","hex":"01 00 00 00 00 00 00 00 00 00 4a 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:22.574Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x2e","0x51c8a5c","0x0","0x24a70775","0x51c8a5c","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x51c8a5c","0x0","0x24a70775","0x51c8a5c","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51c8a5c","hex":"01 00 00 00 00 00 00 00 00 00 4a 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51c8a5c","hex":"01 00 00 00 00 00 00 00 00 00 4a 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:22.581Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x2e","0x51c8a5c","0x0","0x24a708bd","0x51c8a5c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x51c8a5c","0x0","0x24a708bd","0x51c8a5c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51c8a5c","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x51c8a5c","hex":"01 00 00 00 00 00 00 00 00 00 4a 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51c8a5c","hex":"01 00 00 00 00 00 00 00 00 00 4a 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:22.586Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x517e3fc","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x517e3fc","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x18e1ad0","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x517e3fc","hex":"01 00 00 00 00 00 00 00 00 00 49 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x517e3fc","hex":"01 00 00 00 00 00 00 00 00 00 49 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:22.594Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:22.594Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:22.595Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:22.595Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18b6a1c","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18b6a1c","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x5209960","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b6a1c","hex":"01 00 34 00 00 00 00 00 00 00 f3 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 23 0c 34 cc d4 dc 01 06 0a 00 00 00 e0 23 0c 34 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18b6a1c","hex":"01 00 34 00 00 00 00 00 00 00 f3 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 23 0c 34 cc d4 dc 01 06 0a 00 00 00 e0 23 0c 34 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:22.602Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:22.603Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x1","0x2e","0x517e3fc","0x27e7023d","0x23eed68","0x18e1acc","0x18e1a28","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x517e3fc","0x27e7023d","0x23eed68","0x18e1acc","0x18e1a28","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x517e3fc","hex":"01 00 00 00 00 00 00 00 00 00 49 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x517e3fc","hex":"01 00 00 00 00 00 00 00 00 00 49 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:22.609Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x2e","0x517e3fc","0x0","0x27e703ad","0x517e3fc","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x517e3fc","0x0","0x27e703ad","0x517e3fc","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x517e3fc","hex":"01 00 00 00 00 00 00 00 00 00 49 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x517e3fc","hex":"01 00 00 00 00 00 00 00 00 00 49 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:22.616Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x2e","0x517e3fc","0x0","0x27e703f5","0x517e3fc","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x517e3fc","0x0","0x27e703f5","0x517e3fc","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x517e3fc","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x517e3fc","hex":"01 00 00 00 00 00 00 00 00 00 49 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x517e3fc","hex":"01 00 00 00 00 00 00 00 00 00 49 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:22.621Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:22.621Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:22.622Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:22.622Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:22.622Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x7ffd","0x62","0x18b6a1c","0x255c006d","0x85ef38","0x520995c","0x52098b8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18b6a1c","0x255c006d","0x85ef38","0x520995c","0x52098b8","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b6a1c","hex":"01 00 34 00 00 00 00 00 00 00 f3 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 23 0c 34 cc d4 dc 01 06 0a 00 00 00 e0 23 0c 34 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b6a1c","hex":"01 00 34 00 00 00 00 00 00 00 f3 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 23 0c 34 cc d4 dc 01 06 0a 00 00 00 e0 23 0c 34 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:22.629Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x62","0x18b6a1c","0x0","0x255c019d","0x18b6a1c","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18b6a1c","0x0","0x255c019d","0x18b6a1c","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b6a1c","hex":"01 00 34 00 00 00 00 00 00 00 f3 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 23 0c 34 cc d4 dc 01 06 0a 00 00 00 e0 23 0c 34 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b6a1c","hex":"01 00 34 00 00 00 00 00 00 00 f3 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 23 0c 34 cc d4 dc 01 06 0a 00 00 00 e0 23 0c 34 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:22.634Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x62","0x18b6a1c","0x0","0x255c0125","0x18b6a1c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18b6a1c","0x0","0x255c0125","0x18b6a1c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b6a1c","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18b6a1c","hex":"01 00 34 00 00 00 00 00 00 00 f3 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 23 0c 34 cc d4 dc 01 06 0a 00 00 00 e0 23 0c 34 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b6a1c","hex":"01 00 34 00 00 00 00 00 00 00 f3 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 23 0c 34 cc d4 dc 01 06 0a 00 00 00 e0 23 0c 34 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:22.640Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:22.640Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:22.641Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:22.641Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:22.641Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x18f8584","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x18f8584","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x18e03b0","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18f8584","hex":"01 00 00 00 00 00 00 00 00 00 f3 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18f8584","hex":"01 00 00 00 00 00 00 00 00 00 f3 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:22.679Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x2","0x2e","0x18f8584","0x255c006d","0x85ef38","0x18e03ac","0x18e0308","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x18f8584","0x255c006d","0x85ef38","0x18e03ac","0x18e0308","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18f8584","hex":"01 00 00 00 00 00 00 00 00 00 f3 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18f8584","hex":"01 00 00 00 00 00 00 00 00 00 f3 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:22.685Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x2e","0x18f8584","0x0","0x255c019d","0x18f8584","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18f8584","0x0","0x255c019d","0x18f8584","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18f8584","hex":"01 00 00 00 00 00 00 00 00 00 f3 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18f8584","hex":"01 00 00 00 00 00 00 00 00 00 f3 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:22.694Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x2e","0x18f8584","0x0","0x255c0125","0x18f8584","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18f8584","0x0","0x255c0125","0x18f8584","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18f8584","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18f8584","hex":"01 00 00 00 00 00 00 00 00 00 f3 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18f8584","hex":"01 00 00 00 00 00 00 00 00 00 f3 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:22.698Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:22.699Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:22.699Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:22.699Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:22.699Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x18bbf44","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x18bbf44","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x5209398","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18bbf44","hex":"01 00 34 00 00 00 00 00 00 00 4b 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 50 7a 40 34 cc d4 dc 01 06 0a 00 00 00 50 7a 40 34 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18bbf44","hex":"01 00 34 00 00 00 00 00 00 00 4b 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 50 7a 40 34 cc d4 dc 01 06 0a 00 00 00 50 7a 40 34 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:23.014Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x7ffd","0x62","0x18bbf44","0x255c006d","0x85ef38","0x5209394","0x52092f0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18bbf44","0x255c006d","0x85ef38","0x5209394","0x52092f0","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18bbf44","hex":"01 00 34 00 00 00 00 00 00 00 4b 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 50 7a 40 34 cc d4 dc 01 06 0a 00 00 00 50 7a 40 34 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18bbf44","hex":"01 00 34 00 00 00 00 00 00 00 4b 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 50 7a 40 34 cc d4 dc 01 06 0a 00 00 00 50 7a 40 34 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:23.020Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x62","0x18bbf44","0x0","0x255c019d","0x18bbf44","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18bbf44","0x0","0x255c019d","0x18bbf44","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18bbf44","hex":"01 00 34 00 00 00 00 00 00 00 4b 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 50 7a 40 34 cc d4 dc 01 06 0a 00 00 00 50 7a 40 34 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18bbf44","hex":"01 00 34 00 00 00 00 00 00 00 4b 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 50 7a 40 34 cc d4 dc 01 06 0a 00 00 00 50 7a 40 34 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:23.026Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x62","0x18bbf44","0x0","0x255c0125","0x18bbf44","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18bbf44","0x0","0x255c0125","0x18bbf44","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18bbf44","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18bbf44","hex":"01 00 34 00 00 00 00 00 00 00 4b 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 50 7a 40 34 cc d4 dc 01 06 0a 00 00 00 50 7a 40 34 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18bbf44","hex":"01 00 34 00 00 00 00 00 00 00 4b 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 50 7a 40 34 cc d4 dc 01 06 0a 00 00 00 50 7a 40 34 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:23.031Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:23.032Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:23.032Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:23.032Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:23.032Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x517f504","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x517f504","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x18e7518","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x517f504","hex":"01 00 34 00 00 00 00 00 00 00 4c 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 50 7a 40 34 cc d4 dc 01 06 0a 00 00 00 50 7a 40 34 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x517f504","hex":"01 00 34 00 00 00 00 00 00 00 4c 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 50 7a 40 34 cc d4 dc 01 06 0a 00 00 00 50 7a 40 34 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:23.040Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x7ffe","0x62","0x517f504","0x255c006d","0x85ef38","0x18e7514","0x18e7470","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x517f504","0x255c006d","0x85ef38","0x18e7514","0x18e7470","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x517f504","hex":"01 00 34 00 00 00 00 00 00 00 4c 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 50 7a 40 34 cc d4 dc 01 06 0a 00 00 00 50 7a 40 34 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x517f504","hex":"01 00 34 00 00 00 00 00 00 00 4c 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 50 7a 40 34 cc d4 dc 01 06 0a 00 00 00 50 7a 40 34 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:23.046Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x62","0x517f504","0x0","0x255c019d","0x517f504","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x517f504","0x0","0x255c019d","0x517f504","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x517f504","hex":"01 00 34 00 00 00 00 00 00 00 4c 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 50 7a 40 34 cc d4 dc 01 06 0a 00 00 00 50 7a 40 34 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x517f504","hex":"01 00 34 00 00 00 00 00 00 00 4c 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 50 7a 40 34 cc d4 dc 01 06 0a 00 00 00 50 7a 40 34 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:23.053Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x62","0x517f504","0x0","0x255c0125","0x517f504","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x517f504","0x0","0x255c0125","0x517f504","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x517f504","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x517f504","hex":"01 00 34 00 00 00 00 00 00 00 4c 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 50 7a 40 34 cc d4 dc 01 06 0a 00 00 00 50 7a 40 34 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x517f504","hex":"01 00 34 00 00 00 00 00 00 00 4c 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 50 7a 40 34 cc d4 dc 01 06 0a 00 00 00 50 7a 40 34 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:23.060Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:23.061Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:23.061Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:23.061Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:23.061Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18f1f54","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18f1f54","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x52070e8","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18f1f54","hex":"01 00 34 00 00 00 00 00 00 00 f4 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 48 58 34 cc d4 dc 01 06 0a 00 00 00 10 48 58 34 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18f1f54","hex":"01 00 34 00 00 00 00 00 00 00 f4 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 48 58 34 cc d4 dc 01 06 0a 00 00 00 10 48 58 34 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:23.096Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x7ffd","0x62","0x18f1f54","0x255c006d","0x85ef38","0x52070e4","0x5207040","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18f1f54","0x255c006d","0x85ef38","0x52070e4","0x5207040","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18f1f54","hex":"01 00 34 00 00 00 00 00 00 00 f4 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 48 58 34 cc d4 dc 01 06 0a 00 00 00 10 48 58 34 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18f1f54","hex":"01 00 34 00 00 00 00 00 00 00 f4 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 48 58 34 cc d4 dc 01 06 0a 00 00 00 10 48 58 34 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:23.102Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x62","0x18f1f54","0x0","0x255c019d","0x18f1f54","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18f1f54","0x0","0x255c019d","0x18f1f54","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18f1f54","hex":"01 00 34 00 00 00 00 00 00 00 f4 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 48 58 34 cc d4 dc 01 06 0a 00 00 00 10 48 58 34 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18f1f54","hex":"01 00 34 00 00 00 00 00 00 00 f4 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 48 58 34 cc d4 dc 01 06 0a 00 00 00 10 48 58 34 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:23.108Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x62","0x18f1f54","0x0","0x255c0125","0x18f1f54","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18f1f54","0x0","0x255c0125","0x18f1f54","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18f1f54","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18f1f54","hex":"01 00 34 00 00 00 00 00 00 00 f4 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 48 58 34 cc d4 dc 01 06 0a 00 00 00 10 48 58 34 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18f1f54","hex":"01 00 34 00 00 00 00 00 00 00 f4 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 48 58 34 cc d4 dc 01 06 0a 00 00 00 10 48 58 34 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:23.113Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x1962434","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x1962434","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x5209398","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1962434","hex":"01 00 00 00 00 00 00 00 00 00 4b 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x1962434","hex":"01 00 00 00 00 00 00 00 00 00 4b 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:23.123Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x51c9b64","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x51c9b64","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x18e0978","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51c9b64","hex":"01 00 00 00 00 00 00 00 00 00 4c 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x51c9b64","hex":"01 00 00 00 00 00 00 00 00 00 4c 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:23.131Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:23.131Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:23.132Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:23.132Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:23.132Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x1","0x2e","0x1962434","0x27e7023d","0x23eed68","0x5209394","0x52092f0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x1962434","0x27e7023d","0x23eed68","0x5209394","0x52092f0","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1962434","hex":"01 00 00 00 00 00 00 00 00 00 4b 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1962434","hex":"01 00 00 00 00 00 00 00 00 00 4b 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:23.137Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x2e","0x1962434","0x0","0x27e703ad","0x1962434","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x1962434","0x0","0x27e703ad","0x1962434","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1962434","hex":"01 00 00 00 00 00 00 00 00 00 4b 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1962434","hex":"01 00 00 00 00 00 00 00 00 00 4b 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:23.145Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x2e","0x1962434","0x0","0x27e703f5","0x1962434","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x1962434","0x0","0x27e703f5","0x1962434","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1962434","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x1962434","hex":"01 00 00 00 00 00 00 00 00 00 4b 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1962434","hex":"01 00 00 00 00 00 00 00 00 00 4b 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:23.149Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:23.150Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:23.150Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:23.150Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:23.150Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x1","0x2e","0x51c9b64","0x24a707c5","0x17ee8a0","0x18e0974","0x18e08d0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x51c9b64","0x24a707c5","0x17ee8a0","0x18e0974","0x18e08d0","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51c9b64","hex":"01 00 00 00 00 00 00 00 00 00 4c 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51c9b64","hex":"01 00 00 00 00 00 00 00 00 00 4c 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:23.156Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x2e","0x51c9b64","0x0","0x24a70775","0x51c9b64","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x51c9b64","0x0","0x24a70775","0x51c9b64","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51c9b64","hex":"01 00 00 00 00 00 00 00 00 00 4c 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51c9b64","hex":"01 00 00 00 00 00 00 00 00 00 4c 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:23.162Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x2e","0x51c9b64","0x0","0x24a708bd","0x51c9b64","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x51c9b64","0x0","0x24a708bd","0x51c9b64","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51c9b64","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x51c9b64","hex":"01 00 00 00 00 00 00 00 00 00 4c 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51c9b64","hex":"01 00 00 00 00 00 00 00 00 00 4c 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:23.167Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x18be154","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x18be154","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x18e1ad0","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18be154","hex":"01 00 00 00 00 00 00 00 00 00 f4 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18be154","hex":"01 00 00 00 00 00 00 00 00 00 f4 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:23.174Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:23.174Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:23.175Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:23.175Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:23.175Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x2","0x2e","0x18be154","0x27e7023d","0x23eed68","0x18e1acc","0x18e1a28","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x18be154","0x27e7023d","0x23eed68","0x18e1acc","0x18e1a28","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18be154","hex":"01 00 00 00 00 00 00 00 00 00 f4 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18be154","hex":"01 00 00 00 00 00 00 00 00 00 f4 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:23.181Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x2e","0x18be154","0x0","0x27e703ad","0x18be154","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18be154","0x0","0x27e703ad","0x18be154","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18be154","hex":"01 00 00 00 00 00 00 00 00 00 f4 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18be154","hex":"01 00 00 00 00 00 00 00 00 00 f4 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:23.187Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x2e","0x18be154","0x0","0x27e703f5","0x18be154","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18be154","0x0","0x27e703f5","0x18be154","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18be154","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18be154","hex":"01 00 00 00 00 00 00 00 00 00 f4 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18be154","hex":"01 00 00 00 00 00 00 00 00 00 f4 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:23.192Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:23.192Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:23.193Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:23.193Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:23.193Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x18b480c","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x18b480c","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x5208dd0","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b480c","hex":"01 00 34 00 00 00 00 00 00 00 4d 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 80 9e 8c 34 cc d4 dc 01 06 0a 00 00 00 80 9e 8c 34 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18b480c","hex":"01 00 34 00 00 00 00 00 00 00 4d 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 80 9e 8c 34 cc d4 dc 01 06 0a 00 00 00 80 9e 8c 34 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:23.487Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffd","0x62","0x18b480c","0x27e7023d","0x23eed68","0x5208dcc","0x5208d28","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18b480c","0x27e7023d","0x23eed68","0x5208dcc","0x5208d28","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b480c","hex":"01 00 34 00 00 00 00 00 00 00 4d 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 80 9e 8c 34 cc d4 dc 01 06 0a 00 00 00 80 9e 8c 34 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b480c","hex":"01 00 34 00 00 00 00 00 00 00 4d 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 80 9e 8c 34 cc d4 dc 01 06 0a 00 00 00 80 9e 8c 34 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:23.493Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x18b480c","0x0","0x27e703ad","0x18b480c","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18b480c","0x0","0x27e703ad","0x18b480c","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b480c","hex":"01 00 34 00 00 00 00 00 00 00 4d 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 80 9e 8c 34 cc d4 dc 01 06 0a 00 00 00 80 9e 8c 34 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b480c","hex":"01 00 34 00 00 00 00 00 00 00 4d 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 80 9e 8c 34 cc d4 dc 01 06 0a 00 00 00 80 9e 8c 34 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:23.499Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x18b480c","0x0","0x27e703f5","0x18b480c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18b480c","0x0","0x27e703f5","0x18b480c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b480c","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18b480c","hex":"01 00 34 00 00 00 00 00 00 00 4d 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 80 9e 8c 34 cc d4 dc 01 06 0a 00 00 00 80 9e 8c 34 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b480c","hex":"01 00 34 00 00 00 00 00 00 00 4d 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 80 9e 8c 34 cc d4 dc 01 06 0a 00 00 00 80 9e 8c 34 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:23.505Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:23.505Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:23.505Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:23.505Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:23.506Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x51bf114","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x51bf114","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x1878180","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51bf114","hex":"01 00 34 00 00 00 00 00 00 00 4e 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 80 9e 8c 34 cc d4 dc 01 06 0a 00 00 00 80 9e 8c 34 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51bf114","hex":"01 00 34 00 00 00 00 00 00 00 4e 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 80 9e 8c 34 cc d4 dc 01 06 0a 00 00 00 80 9e 8c 34 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:23.513Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffe","0x62","0x51bf114","0x27e7023d","0x23eed68","0x187817c","0x18780d8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x51bf114","0x27e7023d","0x23eed68","0x187817c","0x18780d8","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51bf114","hex":"01 00 34 00 00 00 00 00 00 00 4e 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 80 9e 8c 34 cc d4 dc 01 06 0a 00 00 00 80 9e 8c 34 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51bf114","hex":"01 00 34 00 00 00 00 00 00 00 4e 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 80 9e 8c 34 cc d4 dc 01 06 0a 00 00 00 80 9e 8c 34 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:23.519Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x51bf114","0x0","0x27e703ad","0x51bf114","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51bf114","0x0","0x27e703ad","0x51bf114","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51bf114","hex":"01 00 34 00 00 00 00 00 00 00 4e 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 80 9e 8c 34 cc d4 dc 01 06 0a 00 00 00 80 9e 8c 34 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51bf114","hex":"01 00 34 00 00 00 00 00 00 00 4e 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 80 9e 8c 34 cc d4 dc 01 06 0a 00 00 00 80 9e 8c 34 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:23.526Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x51bf114","0x0","0x27e703f5","0x51bf114","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51bf114","0x0","0x27e703f5","0x51bf114","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51bf114","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51bf114","hex":"01 00 34 00 00 00 00 00 00 00 4e 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 80 9e 8c 34 cc d4 dc 01 06 0a 00 00 00 80 9e 8c 34 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51bf114","hex":"01 00 34 00 00 00 00 00 00 00 4e 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 80 9e 8c 34 cc d4 dc 01 06 0a 00 00 00 80 9e 8c 34 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:23.530Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:23.531Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:23.531Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:23.531Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:23.531Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x18b5914","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x18b5914","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x5208dd0","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18b5914","hex":"01 00 00 00 00 00 00 00 00 00 4e 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18b5914","hex":"01 00 00 00 00 00 00 00 00 00 4e 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:23.551Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x1","0x2e","0x18b5914","0x27e7023d","0x23eed68","0x5208dcc","0x5208d28","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18b5914","0x27e7023d","0x23eed68","0x5208dcc","0x5208d28","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18b5914","hex":"01 00 00 00 00 00 00 00 00 00 4e 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18b5914","hex":"01 00 00 00 00 00 00 00 00 00 4e 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:23.556Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x2e","0x18b5914","0x0","0x27e703ad","0x18b5914","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18b5914","0x0","0x27e703ad","0x18b5914","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18b5914","hex":"01 00 00 00 00 00 00 00 00 00 4e 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18b5914","hex":"01 00 00 00 00 00 00 00 00 00 4e 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:23.562Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x2e","0x18b5914","0x0","0x27e703f5","0x18b5914","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18b5914","0x0","0x27e703f5","0x18b5914","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b5914","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18b5914","hex":"01 00 00 00 00 00 00 00 00 00 4e 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18b5914","hex":"01 00 00 00 00 00 00 00 00 00 4e 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:23.567Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x18efd44","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x18efd44","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x18e31f0","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18efd44","hex":"01 00 00 00 00 00 00 00 00 00 4d 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18efd44","hex":"01 00 00 00 00 00 00 00 00 00 4d 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:23.574Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:23.574Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:23.574Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:23.574Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:23.575Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x1","0x2e","0x18efd44","0x24a707c5","0x17ee8a0","0x18e31ec","0x18e3148","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18efd44","0x24a707c5","0x17ee8a0","0x18e31ec","0x18e3148","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18efd44","hex":"01 00 00 00 00 00 00 00 00 00 4d 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18efd44","hex":"01 00 00 00 00 00 00 00 00 00 4d 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:23.581Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x2e","0x18efd44","0x0","0x24a70775","0x18efd44","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18efd44","0x0","0x24a70775","0x18efd44","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18efd44","hex":"01 00 00 00 00 00 00 00 00 00 4d 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18efd44","hex":"01 00 00 00 00 00 00 00 00 00 4d 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:23.587Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x2e","0x18efd44","0x0","0x24a708bd","0x18efd44","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18efd44","0x0","0x24a708bd","0x18efd44","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18efd44","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18efd44","hex":"01 00 00 00 00 00 00 00 00 00 4d 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18efd44","hex":"01 00 00 00 00 00 00 00 00 00 4d 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:23.592Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:23.593Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:23.593Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:23.593Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:23.593Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18b480c","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18b480c","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x5208dd0","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b480c","hex":"01 00 34 00 00 00 00 00 00 00 f5 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 93 a4 34 cc d4 dc 01 06 0a 00 00 00 50 93 a4 34 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18b480c","hex":"01 00 34 00 00 00 00 00 00 00 f5 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 93 a4 34 cc d4 dc 01 06 0a 00 00 00 50 93 a4 34 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:23.601Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffd","0x62","0x18b480c","0x27e7023d","0x23eed68","0x5208dcc","0x5208d28","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18b480c","0x27e7023d","0x23eed68","0x5208dcc","0x5208d28","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b480c","hex":"01 00 34 00 00 00 00 00 00 00 f5 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 93 a4 34 cc d4 dc 01 06 0a 00 00 00 50 93 a4 34 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b480c","hex":"01 00 34 00 00 00 00 00 00 00 f5 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 93 a4 34 cc d4 dc 01 06 0a 00 00 00 50 93 a4 34 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:23.607Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x18b480c","0x0","0x27e703ad","0x18b480c","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18b480c","0x0","0x27e703ad","0x18b480c","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b480c","hex":"01 00 34 00 00 00 00 00 00 00 f5 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 93 a4 34 cc d4 dc 01 06 0a 00 00 00 50 93 a4 34 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b480c","hex":"01 00 34 00 00 00 00 00 00 00 f5 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 93 a4 34 cc d4 dc 01 06 0a 00 00 00 50 93 a4 34 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:23.614Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x18b480c","0x0","0x27e703f5","0x18b480c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18b480c","0x0","0x27e703f5","0x18b480c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b480c","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18b480c","hex":"01 00 34 00 00 00 00 00 00 00 f5 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 93 a4 34 cc d4 dc 01 06 0a 00 00 00 50 93 a4 34 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b480c","hex":"01 00 34 00 00 00 00 00 00 00 f5 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 93 a4 34 cc d4 dc 01 06 0a 00 00 00 50 93 a4 34 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:23.619Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:23.619Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:23.619Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:23.619Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:23.619Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x18be154","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x18be154","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x5208240","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18be154","hex":"01 00 00 00 00 00 00 00 00 00 f5 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18be154","hex":"01 00 00 00 00 00 00 00 00 00 f5 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:23.662Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x2","0x2e","0x18be154","0x27e7023d","0x23eed68","0x520823c","0x5208198","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x18be154","0x27e7023d","0x23eed68","0x520823c","0x5208198","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18be154","hex":"01 00 00 00 00 00 00 00 00 00 f5 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18be154","hex":"01 00 00 00 00 00 00 00 00 00 f5 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:23.667Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x2e","0x18be154","0x0","0x27e703ad","0x18be154","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18be154","0x0","0x27e703ad","0x18be154","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18be154","hex":"01 00 00 00 00 00 00 00 00 00 f5 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18be154","hex":"01 00 00 00 00 00 00 00 00 00 f5 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:23.674Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x2e","0x18be154","0x0","0x27e703f5","0x18be154","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18be154","0x0","0x27e703f5","0x18be154","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18be154","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18be154","hex":"01 00 00 00 00 00 00 00 00 00 f5 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18be154","hex":"01 00 00 00 00 00 00 00 00 00 f5 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:23.679Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:23.679Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:23.679Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:23.679Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:23.680Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x18b8c2c","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x18b8c2c","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x5208240","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b8c2c","hex":"01 00 34 00 00 00 00 00 00 00 4f 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 d0 10 d9 34 cc d4 dc 01 06 0a 00 00 00 d0 10 d9 34 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18b8c2c","hex":"01 00 34 00 00 00 00 00 00 00 4f 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 d0 10 d9 34 cc d4 dc 01 06 0a 00 00 00 d0 10 d9 34 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:24.007Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffd","0x62","0x18b8c2c","0x27e7023d","0x23eed68","0x520823c","0x5208198","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18b8c2c","0x27e7023d","0x23eed68","0x520823c","0x5208198","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b8c2c","hex":"01 00 34 00 00 00 00 00 00 00 4f 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 d0 10 d9 34 cc d4 dc 01 06 0a 00 00 00 d0 10 d9 34 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b8c2c","hex":"01 00 34 00 00 00 00 00 00 00 4f 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 d0 10 d9 34 cc d4 dc 01 06 0a 00 00 00 d0 10 d9 34 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:24.013Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x18b8c2c","0x0","0x27e703ad","0x18b8c2c","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18b8c2c","0x0","0x27e703ad","0x18b8c2c","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b8c2c","hex":"01 00 34 00 00 00 00 00 00 00 4f 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 d0 10 d9 34 cc d4 dc 01 06 0a 00 00 00 d0 10 d9 34 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b8c2c","hex":"01 00 34 00 00 00 00 00 00 00 4f 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 d0 10 d9 34 cc d4 dc 01 06 0a 00 00 00 d0 10 d9 34 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:24.019Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x18b8c2c","0x0","0x27e703f5","0x18b8c2c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18b8c2c","0x0","0x27e703f5","0x18b8c2c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b8c2c","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18b8c2c","hex":"01 00 34 00 00 00 00 00 00 00 4f 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 d0 10 d9 34 cc d4 dc 01 06 0a 00 00 00 d0 10 d9 34 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b8c2c","hex":"01 00 34 00 00 00 00 00 00 00 4f 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 d0 10 d9 34 cc d4 dc 01 06 0a 00 00 00 d0 10 d9 34 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:24.024Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:24.025Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:24.025Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:24.025Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:24.025Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x18f6374","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x18f6374","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x18e1ad0","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18f6374","hex":"01 00 34 00 00 00 00 00 00 00 50 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 d0 10 d9 34 cc d4 dc 01 06 0a 00 00 00 d0 10 d9 34 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18f6374","hex":"01 00 34 00 00 00 00 00 00 00 50 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 d0 10 d9 34 cc d4 dc 01 06 0a 00 00 00 d0 10 d9 34 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:24.032Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffe","0x62","0x18f6374","0x27e7023d","0x23eed68","0x18e1acc","0x18e1a28","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x18f6374","0x27e7023d","0x23eed68","0x18e1acc","0x18e1a28","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18f6374","hex":"01 00 34 00 00 00 00 00 00 00 50 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 d0 10 d9 34 cc d4 dc 01 06 0a 00 00 00 d0 10 d9 34 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18f6374","hex":"01 00 34 00 00 00 00 00 00 00 50 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 d0 10 d9 34 cc d4 dc 01 06 0a 00 00 00 d0 10 d9 34 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:24.038Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x18f6374","0x0","0x27e703ad","0x18f6374","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18f6374","0x0","0x27e703ad","0x18f6374","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18f6374","hex":"01 00 34 00 00 00 00 00 00 00 50 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 d0 10 d9 34 cc d4 dc 01 06 0a 00 00 00 d0 10 d9 34 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18f6374","hex":"01 00 34 00 00 00 00 00 00 00 50 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 d0 10 d9 34 cc d4 dc 01 06 0a 00 00 00 d0 10 d9 34 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:24.045Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x18f6374","0x0","0x27e703f5","0x18f6374","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18f6374","0x0","0x27e703f5","0x18f6374","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18f6374","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18f6374","hex":"01 00 34 00 00 00 00 00 00 00 50 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 d0 10 d9 34 cc d4 dc 01 06 0a 00 00 00 d0 10 d9 34 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18f6374","hex":"01 00 34 00 00 00 00 00 00 00 50 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 d0 10 d9 34 cc d4 dc 01 06 0a 00 00 00 d0 10 d9 34 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:24.050Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:24.050Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:24.051Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:24.051Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:24.051Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18f1f54","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18f1f54","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x18e1ad0","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18f1f54","hex":"01 00 34 00 00 00 00 00 00 00 f6 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 05 f1 34 cc d4 dc 01 06 0a 00 00 00 a0 05 f1 34 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18f1f54","hex":"01 00 34 00 00 00 00 00 00 00 f6 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 05 f1 34 cc d4 dc 01 06 0a 00 00 00 a0 05 f1 34 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:24.097Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffd","0x62","0x18f1f54","0x27e7023d","0x23eed68","0x18e1acc","0x18e1a28","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18f1f54","0x27e7023d","0x23eed68","0x18e1acc","0x18e1a28","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18f1f54","hex":"01 00 34 00 00 00 00 00 00 00 f6 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 05 f1 34 cc d4 dc 01 06 0a 00 00 00 a0 05 f1 34 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18f1f54","hex":"01 00 34 00 00 00 00 00 00 00 f6 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 05 f1 34 cc d4 dc 01 06 0a 00 00 00 a0 05 f1 34 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:24.103Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x18f1f54","0x0","0x27e703ad","0x18f1f54","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18f1f54","0x0","0x27e703ad","0x18f1f54","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18f1f54","hex":"01 00 34 00 00 00 00 00 00 00 f6 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 05 f1 34 cc d4 dc 01 06 0a 00 00 00 a0 05 f1 34 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18f1f54","hex":"01 00 34 00 00 00 00 00 00 00 f6 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 05 f1 34 cc d4 dc 01 06 0a 00 00 00 a0 05 f1 34 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:24.110Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x18f1f54","0x0","0x27e703f5","0x18f1f54","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18f1f54","0x0","0x27e703f5","0x18f1f54","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18f1f54","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18f1f54","hex":"01 00 34 00 00 00 00 00 00 00 f6 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 05 f1 34 cc d4 dc 01 06 0a 00 00 00 a0 05 f1 34 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18f1f54","hex":"01 00 34 00 00 00 00 00 00 00 f6 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 05 f1 34 cc d4 dc 01 06 0a 00 00 00 a0 05 f1 34 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:24.115Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:24.115Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:24.115Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:24.115Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:24.116Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x517d2f4","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x517d2f4","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x18e31f0","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x517d2f4","hex":"01 00 00 00 00 00 00 00 00 00 50 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x517d2f4","hex":"01 00 00 00 00 00 00 00 00 00 50 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:24.122Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x1","0x2e","0x517d2f4","0x24a707c5","0x17ee8a0","0x18e31ec","0x18e3148","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x517d2f4","0x24a707c5","0x17ee8a0","0x18e31ec","0x18e3148","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x517d2f4","hex":"01 00 00 00 00 00 00 00 00 00 50 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x517d2f4","hex":"01 00 00 00 00 00 00 00 00 00 50 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:24.129Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x2e","0x517d2f4","0x0","0x24a70775","0x517d2f4","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x517d2f4","0x0","0x24a70775","0x517d2f4","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x517d2f4","hex":"01 00 00 00 00 00 00 00 00 00 50 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x517d2f4","hex":"01 00 00 00 00 00 00 00 00 00 50 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:24.135Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x2e","0x517d2f4","0x0","0x24a708bd","0x517d2f4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x517d2f4","0x0","0x24a708bd","0x517d2f4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x517d2f4","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x517d2f4","hex":"01 00 00 00 00 00 00 00 00 00 50 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x517d2f4","hex":"01 00 00 00 00 00 00 00 00 00 50 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:24.139Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x18fdaac","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x18fdaac","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x1878180","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18fdaac","hex":"01 00 00 00 00 00 00 00 00 00 4f 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18fdaac","hex":"01 00 00 00 00 00 00 00 00 00 4f 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:24.147Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:24.148Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:24.148Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:24.148Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:24.148Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x1","0x2e","0x18fdaac","0x255c006d","0x85ef38","0x187817c","0x18780d8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18fdaac","0x255c006d","0x85ef38","0x187817c","0x18780d8","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18fdaac","hex":"01 00 00 00 00 00 00 00 00 00 4f 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18fdaac","hex":"01 00 00 00 00 00 00 00 00 00 4f 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:24.154Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x2e","0x18fdaac","0x0","0x255c019d","0x18fdaac","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18fdaac","0x0","0x255c019d","0x18fdaac","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18fdaac","hex":"01 00 00 00 00 00 00 00 00 00 4f 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18fdaac","hex":"01 00 00 00 00 00 00 00 00 00 4f 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:24.160Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x2e","0x18fdaac","0x0","0x255c0125","0x18fdaac","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18fdaac","0x0","0x255c0125","0x18fdaac","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18fdaac","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18fdaac","hex":"01 00 00 00 00 00 00 00 00 00 4f 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18fdaac","hex":"01 00 00 00 00 00 00 00 00 00 4f 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:24.164Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:24.165Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:24.165Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:24.165Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:24.165Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x5183924","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x5183924","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x18e6988","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x5183924","hex":"01 00 00 00 00 00 00 00 00 00 f6 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x5183924","hex":"01 00 00 00 00 00 00 00 00 00 f6 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:24.175Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x2","0x2e","0x5183924","0x255c006d","0x85ef38","0x18e6984","0x18e68e0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x5183924","0x255c006d","0x85ef38","0x18e6984","0x18e68e0","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x5183924","hex":"01 00 00 00 00 00 00 00 00 00 f6 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x5183924","hex":"01 00 00 00 00 00 00 00 00 00 f6 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:24.180Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x2e","0x5183924","0x0","0x255c019d","0x5183924","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x5183924","0x0","0x255c019d","0x5183924","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x5183924","hex":"01 00 00 00 00 00 00 00 00 00 f6 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x5183924","hex":"01 00 00 00 00 00 00 00 00 00 f6 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:24.186Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x2e","0x5183924","0x0","0x255c0125","0x5183924","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x5183924","0x0","0x255c0125","0x5183924","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x5183924","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x5183924","hex":"01 00 00 00 00 00 00 00 00 00 f6 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x5183924","hex":"01 00 00 00 00 00 00 00 00 00 f6 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:24.191Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:24.191Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:24.192Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:24.192Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:24.192Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x18f8584","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x18f8584","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x18e03b0","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18f8584","hex":"01 00 34 00 00 00 00 00 00 00 51 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 10 5c 25 35 cc d4 dc 01 06 0a 00 00 00 10 5c 25 35 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18f8584","hex":"01 00 34 00 00 00 00 00 00 00 51 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 10 5c 25 35 cc d4 dc 01 06 0a 00 00 00 10 5c 25 35 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:24.492Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x7ffd","0x62","0x18f8584","0x255c006d","0x85ef38","0x18e03ac","0x18e0308","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18f8584","0x255c006d","0x85ef38","0x18e03ac","0x18e0308","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18f8584","hex":"01 00 34 00 00 00 00 00 00 00 51 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 10 5c 25 35 cc d4 dc 01 06 0a 00 00 00 10 5c 25 35 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18f8584","hex":"01 00 34 00 00 00 00 00 00 00 51 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 10 5c 25 35 cc d4 dc 01 06 0a 00 00 00 10 5c 25 35 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:24.497Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x62","0x18f8584","0x0","0x255c019d","0x18f8584","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18f8584","0x0","0x255c019d","0x18f8584","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18f8584","hex":"01 00 34 00 00 00 00 00 00 00 51 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 10 5c 25 35 cc d4 dc 01 06 0a 00 00 00 10 5c 25 35 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18f8584","hex":"01 00 34 00 00 00 00 00 00 00 51 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 10 5c 25 35 cc d4 dc 01 06 0a 00 00 00 10 5c 25 35 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:24.504Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x62","0x18f8584","0x0","0x255c0125","0x18f8584","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18f8584","0x0","0x255c0125","0x18f8584","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18f8584","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18f8584","hex":"01 00 34 00 00 00 00 00 00 00 51 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 10 5c 25 35 cc d4 dc 01 06 0a 00 00 00 10 5c 25 35 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18f8584","hex":"01 00 34 00 00 00 00 00 00 00 51 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 10 5c 25 35 cc d4 dc 01 06 0a 00 00 00 10 5c 25 35 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:24.509Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:24.510Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:24.510Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:24.510Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:24.510Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x18f526c","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x18f526c","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x18e2660","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18f526c","hex":"01 00 34 00 00 00 00 00 00 00 52 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 10 5c 25 35 cc d4 dc 01 06 0a 00 00 00 10 5c 25 35 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18f526c","hex":"01 00 34 00 00 00 00 00 00 00 52 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 10 5c 25 35 cc d4 dc 01 06 0a 00 00 00 10 5c 25 35 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:24.519Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x7ffe","0x62","0x18f526c","0x255c006d","0x85ef38","0x18e265c","0x18e25b8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x18f526c","0x255c006d","0x85ef38","0x18e265c","0x18e25b8","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18f526c","hex":"01 00 34 00 00 00 00 00 00 00 52 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 10 5c 25 35 cc d4 dc 01 06 0a 00 00 00 10 5c 25 35 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18f526c","hex":"01 00 34 00 00 00 00 00 00 00 52 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 10 5c 25 35 cc d4 dc 01 06 0a 00 00 00 10 5c 25 35 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:24.525Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x62","0x18f526c","0x0","0x255c019d","0x18f526c","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18f526c","0x0","0x255c019d","0x18f526c","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18f526c","hex":"01 00 34 00 00 00 00 00 00 00 52 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 10 5c 25 35 cc d4 dc 01 06 0a 00 00 00 10 5c 25 35 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18f526c","hex":"01 00 34 00 00 00 00 00 00 00 52 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 10 5c 25 35 cc d4 dc 01 06 0a 00 00 00 10 5c 25 35 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:24.532Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x62","0x18f526c","0x0","0x255c0125","0x18f526c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18f526c","0x0","0x255c0125","0x18f526c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18f526c","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18f526c","hex":"01 00 34 00 00 00 00 00 00 00 52 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 10 5c 25 35 cc d4 dc 01 06 0a 00 00 00 10 5c 25 35 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18f526c","hex":"01 00 34 00 00 00 00 00 00 00 52 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 10 5c 25 35 cc d4 dc 01 06 0a 00 00 00 10 5c 25 35 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:24.537Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x18f968c","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x18f968c","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x18e03b0","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18f968c","hex":"01 00 00 00 00 00 00 00 00 00 51 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18f968c","hex":"01 00 00 00 00 00 00 00 00 00 51 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:24.544Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:24.544Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:24.544Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:24.545Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:24.545Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x1","0x2e","0x18f968c","0x24a707c5","0x17ee8a0","0x18e03ac","0x18e0308","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18f968c","0x24a707c5","0x17ee8a0","0x18e03ac","0x18e0308","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18f968c","hex":"01 00 00 00 00 00 00 00 00 00 51 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18f968c","hex":"01 00 00 00 00 00 00 00 00 00 51 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:24.550Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x2e","0x18f968c","0x0","0x24a70775","0x18f968c","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18f968c","0x0","0x24a70775","0x18f968c","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18f968c","hex":"01 00 00 00 00 00 00 00 00 00 51 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18f968c","hex":"01 00 00 00 00 00 00 00 00 00 51 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:24.556Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x2e","0x18f968c","0x0","0x24a708bd","0x18f968c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18f968c","0x0","0x24a708bd","0x18f968c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18f968c","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18f968c","hex":"01 00 00 00 00 00 00 00 00 00 51 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18f968c","hex":"01 00 00 00 00 00 00 00 00 00 51 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:24.561Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:24.562Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:24.562Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:24.562Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:24.562Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x51c8a5c","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x51c8a5c","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x18e31f0","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51c8a5c","hex":"01 00 34 00 00 00 00 00 00 00 f7 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 29 3d 35 cc d4 dc 01 06 0a 00 00 00 d0 29 3d 35 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51c8a5c","hex":"01 00 34 00 00 00 00 00 00 00 f7 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 29 3d 35 cc d4 dc 01 06 0a 00 00 00 d0 29 3d 35 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:24.596Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x7ffd","0x62","0x51c8a5c","0x24a707c5","0x17ee8a0","0x18e31ec","0x18e3148","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x51c8a5c","0x24a707c5","0x17ee8a0","0x18e31ec","0x18e3148","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51c8a5c","hex":"01 00 34 00 00 00 00 00 00 00 f7 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 29 3d 35 cc d4 dc 01 06 0a 00 00 00 d0 29 3d 35 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51c8a5c","hex":"01 00 34 00 00 00 00 00 00 00 f7 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 29 3d 35 cc d4 dc 01 06 0a 00 00 00 d0 29 3d 35 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:24.602Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x62","0x51c8a5c","0x0","0x24a70775","0x51c8a5c","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51c8a5c","0x0","0x24a70775","0x51c8a5c","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51c8a5c","hex":"01 00 34 00 00 00 00 00 00 00 f7 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 29 3d 35 cc d4 dc 01 06 0a 00 00 00 d0 29 3d 35 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51c8a5c","hex":"01 00 34 00 00 00 00 00 00 00 f7 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 29 3d 35 cc d4 dc 01 06 0a 00 00 00 d0 29 3d 35 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:24.610Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x62","0x51c8a5c","0x0","0x24a708bd","0x51c8a5c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51c8a5c","0x0","0x24a708bd","0x51c8a5c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51c8a5c","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51c8a5c","hex":"01 00 34 00 00 00 00 00 00 00 f7 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 29 3d 35 cc d4 dc 01 06 0a 00 00 00 d0 29 3d 35 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51c8a5c","hex":"01 00 34 00 00 00 00 00 00 00 f7 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 29 3d 35 cc d4 dc 01 06 0a 00 00 00 d0 29 3d 35 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:24.615Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:24.616Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:24.616Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:24.617Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:24.617Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x518060c","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x518060c","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x18e6988","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x518060c","hex":"01 00 00 00 00 00 00 00 00 00 52 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x518060c","hex":"01 00 00 00 00 00 00 00 00 00 52 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:24.648Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x1","0x2e","0x518060c","0x24a707c5","0x17ee8a0","0x18e6984","0x18e68e0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x518060c","0x24a707c5","0x17ee8a0","0x18e6984","0x18e68e0","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x518060c","hex":"01 00 00 00 00 00 00 00 00 00 52 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x518060c","hex":"01 00 00 00 00 00 00 00 00 00 52 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:24.654Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x2e","0x518060c","0x0","0x24a70775","0x518060c","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x518060c","0x0","0x24a70775","0x518060c","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x518060c","hex":"01 00 00 00 00 00 00 00 00 00 52 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x518060c","hex":"01 00 00 00 00 00 00 00 00 00 52 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:24.660Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x2e","0x518060c","0x0","0x24a708bd","0x518060c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x518060c","0x0","0x24a708bd","0x518060c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x518060c","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x518060c","hex":"01 00 00 00 00 00 00 00 00 00 52 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x518060c","hex":"01 00 00 00 00 00 00 00 00 00 52 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:24.664Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x18f747c","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x18f747c","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x18e37b8","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18f747c","hex":"01 00 00 00 00 00 00 00 00 00 f7 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18f747c","hex":"01 00 00 00 00 00 00 00 00 00 f7 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:24.673Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:24.674Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:24.674Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:24.674Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:24.674Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x2","0x2e","0x18f747c","0x255c006d","0x85ef38","0x18e37b4","0x18e3710","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x18f747c","0x255c006d","0x85ef38","0x18e37b4","0x18e3710","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18f747c","hex":"01 00 00 00 00 00 00 00 00 00 f7 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18f747c","hex":"01 00 00 00 00 00 00 00 00 00 f7 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:24.681Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x2e","0x18f747c","0x0","0x255c019d","0x18f747c","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18f747c","0x0","0x255c019d","0x18f747c","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18f747c","hex":"01 00 00 00 00 00 00 00 00 00 f7 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18f747c","hex":"01 00 00 00 00 00 00 00 00 00 f7 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:24.686Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x2e","0x18f747c","0x0","0x255c0125","0x18f747c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18f747c","0x0","0x255c0125","0x18f747c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18f747c","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18f747c","hex":"01 00 00 00 00 00 00 00 00 00 f7 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18f747c","hex":"01 00 00 00 00 00 00 00 00 00 f7 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:24.692Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:24.692Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:24.692Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:24.692Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:24.692Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x18eec3c","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x18eec3c","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x18e3d80","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18eec3c","hex":"01 00 34 00 00 00 00 00 00 00 53 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 50 a7 71 35 cc d4 dc 01 06 0a 00 00 00 50 a7 71 35 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18eec3c","hex":"01 00 34 00 00 00 00 00 00 00 53 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 50 a7 71 35 cc d4 dc 01 06 0a 00 00 00 50 a7 71 35 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:25.010Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x7ffd","0x62","0x18eec3c","0x255c006d","0x85ef38","0x18e3d7c","0x18e3cd8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18eec3c","0x255c006d","0x85ef38","0x18e3d7c","0x18e3cd8","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18eec3c","hex":"01 00 34 00 00 00 00 00 00 00 53 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 50 a7 71 35 cc d4 dc 01 06 0a 00 00 00 50 a7 71 35 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18eec3c","hex":"01 00 34 00 00 00 00 00 00 00 53 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 50 a7 71 35 cc d4 dc 01 06 0a 00 00 00 50 a7 71 35 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:25.016Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x62","0x18eec3c","0x0","0x255c019d","0x18eec3c","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18eec3c","0x0","0x255c019d","0x18eec3c","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18eec3c","hex":"01 00 34 00 00 00 00 00 00 00 53 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 50 a7 71 35 cc d4 dc 01 06 0a 00 00 00 50 a7 71 35 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18eec3c","hex":"01 00 34 00 00 00 00 00 00 00 53 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 50 a7 71 35 cc d4 dc 01 06 0a 00 00 00 50 a7 71 35 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:25.024Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x62","0x18eec3c","0x0","0x255c0125","0x18eec3c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18eec3c","0x0","0x255c0125","0x18eec3c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18eec3c","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18eec3c","hex":"01 00 34 00 00 00 00 00 00 00 53 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 50 a7 71 35 cc d4 dc 01 06 0a 00 00 00 50 a7 71 35 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18eec3c","hex":"01 00 34 00 00 00 00 00 00 00 53 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 50 a7 71 35 cc d4 dc 01 06 0a 00 00 00 50 a7 71 35 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:25.030Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:25.030Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:25.030Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:25.030Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:25.031Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x18b25fc","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x18b25fc","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x5209960","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b25fc","hex":"01 00 34 00 00 00 00 00 00 00 54 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 50 a7 71 35 cc d4 dc 01 06 0a 00 00 00 50 a7 71 35 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18b25fc","hex":"01 00 34 00 00 00 00 00 00 00 54 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 50 a7 71 35 cc d4 dc 01 06 0a 00 00 00 50 a7 71 35 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:25.039Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x7ffe","0x62","0x18b25fc","0x255c006d","0x85ef38","0x520995c","0x52098b8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x18b25fc","0x255c006d","0x85ef38","0x520995c","0x52098b8","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b25fc","hex":"01 00 34 00 00 00 00 00 00 00 54 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 50 a7 71 35 cc d4 dc 01 06 0a 00 00 00 50 a7 71 35 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b25fc","hex":"01 00 34 00 00 00 00 00 00 00 54 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 50 a7 71 35 cc d4 dc 01 06 0a 00 00 00 50 a7 71 35 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:25.045Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x62","0x18b25fc","0x0","0x255c019d","0x18b25fc","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18b25fc","0x0","0x255c019d","0x18b25fc","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b25fc","hex":"01 00 34 00 00 00 00 00 00 00 54 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 50 a7 71 35 cc d4 dc 01 06 0a 00 00 00 50 a7 71 35 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b25fc","hex":"01 00 34 00 00 00 00 00 00 00 54 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 50 a7 71 35 cc d4 dc 01 06 0a 00 00 00 50 a7 71 35 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:25.052Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x62","0x18b25fc","0x0","0x255c0125","0x18b25fc","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18b25fc","0x0","0x255c0125","0x18b25fc","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b25fc","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18b25fc","hex":"01 00 34 00 00 00 00 00 00 00 54 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 50 a7 71 35 cc d4 dc 01 06 0a 00 00 00 50 a7 71 35 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b25fc","hex":"01 00 34 00 00 00 00 00 00 00 54 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 50 a7 71 35 cc d4 dc 01 06 0a 00 00 00 50 a7 71 35 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:25.057Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:25.058Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:25.058Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:25.058Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:25.059Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x18b6a1c","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x18b6a1c","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x5209960","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18b6a1c","hex":"01 00 00 00 00 00 00 00 00 00 54 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18b6a1c","hex":"01 00 00 00 00 00 00 00 00 00 54 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:25.083Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x1","0x2e","0x18b6a1c","0x255c006d","0x85ef38","0x520995c","0x52098b8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18b6a1c","0x255c006d","0x85ef38","0x520995c","0x52098b8","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18b6a1c","hex":"01 00 00 00 00 00 00 00 00 00 54 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18b6a1c","hex":"01 00 00 00 00 00 00 00 00 00 54 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:25.090Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x51cac6c","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x51cac6c","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x1878748","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51cac6c","hex":"01 00 00 00 00 00 00 00 00 00 53 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x51cac6c","hex":"01 00 00 00 00 00 00 00 00 00 53 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:25.097Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18f1f54","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18f1f54","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x18e2660","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18f1f54","hex":"01 00 34 00 00 00 00 00 00 00 f8 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 75 89 35 cc d4 dc 01 06 0a 00 00 00 10 75 89 35 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18f1f54","hex":"01 00 34 00 00 00 00 00 00 00 f8 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 75 89 35 cc d4 dc 01 06 0a 00 00 00 10 75 89 35 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:25.105Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x2e","0x18b6a1c","0x0","0x255c019d","0x18b6a1c","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18b6a1c","0x0","0x255c019d","0x18b6a1c","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18b6a1c","hex":"01 00 00 00 00 00 00 00 00 00 54 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18b6a1c","hex":"01 00 00 00 00 00 00 00 00 00 54 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:25.111Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x2e","0x18b6a1c","0x0","0x255c0125","0x18b6a1c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18b6a1c","0x0","0x255c0125","0x18b6a1c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b6a1c","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18b6a1c","hex":"01 00 00 00 00 00 00 00 00 00 54 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18b6a1c","hex":"01 00 00 00 00 00 00 00 00 00 54 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:25.116Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:25.116Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:25.116Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:25.117Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:25.117Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x1","0x2e","0x51cac6c","0x24a707c5","0x17ee8a0","0x1878744","0x18786a0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x51cac6c","0x24a707c5","0x17ee8a0","0x1878744","0x18786a0","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51cac6c","hex":"01 00 00 00 00 00 00 00 00 00 53 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51cac6c","hex":"01 00 00 00 00 00 00 00 00 00 53 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:25.122Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x2e","0x51cac6c","0x0","0x24a70775","0x51cac6c","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x51cac6c","0x0","0x24a70775","0x51cac6c","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51cac6c","hex":"01 00 00 00 00 00 00 00 00 00 53 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51cac6c","hex":"01 00 00 00 00 00 00 00 00 00 53 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:25.129Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x2e","0x51cac6c","0x0","0x24a708bd","0x51cac6c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x51cac6c","0x0","0x24a708bd","0x51cac6c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51cac6c","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x51cac6c","hex":"01 00 00 00 00 00 00 00 00 00 53 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51cac6c","hex":"01 00 00 00 00 00 00 00 00 00 53 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:25.134Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:25.134Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:25.134Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:25.134Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:25.135Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffd","0x62","0x18f1f54","0x27e7023d","0x23eed68","0x18e265c","0x18e25b8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18f1f54","0x27e7023d","0x23eed68","0x18e265c","0x18e25b8","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18f1f54","hex":"01 00 34 00 00 00 00 00 00 00 f8 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 75 89 35 cc d4 dc 01 06 0a 00 00 00 10 75 89 35 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18f1f54","hex":"01 00 34 00 00 00 00 00 00 00 f8 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 75 89 35 cc d4 dc 01 06 0a 00 00 00 10 75 89 35 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:25.141Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x18f1f54","0x0","0x27e703ad","0x18f1f54","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18f1f54","0x0","0x27e703ad","0x18f1f54","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18f1f54","hex":"01 00 34 00 00 00 00 00 00 00 f8 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 75 89 35 cc d4 dc 01 06 0a 00 00 00 10 75 89 35 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18f1f54","hex":"01 00 34 00 00 00 00 00 00 00 f8 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 75 89 35 cc d4 dc 01 06 0a 00 00 00 10 75 89 35 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:25.148Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x18f1f54","0x0","0x27e703f5","0x18f1f54","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18f1f54","0x0","0x27e703f5","0x18f1f54","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18f1f54","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18f1f54","hex":"01 00 34 00 00 00 00 00 00 00 f8 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 75 89 35 cc d4 dc 01 06 0a 00 00 00 10 75 89 35 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18f1f54","hex":"01 00 34 00 00 00 00 00 00 00 f8 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 75 89 35 cc d4 dc 01 06 0a 00 00 00 10 75 89 35 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:25.153Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:25.153Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:25.153Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:25.154Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:25.154Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x18f6374","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x18f6374","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x18e2660","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18f6374","hex":"01 00 00 00 00 00 00 00 00 00 f8 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18f6374","hex":"01 00 00 00 00 00 00 00 00 00 f8 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:25.194Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x2","0x2e","0x18f6374","0x27e7023d","0x23eed68","0x18e265c","0x18e25b8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x18f6374","0x27e7023d","0x23eed68","0x18e265c","0x18e25b8","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18f6374","hex":"01 00 00 00 00 00 00 00 00 00 f8 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18f6374","hex":"01 00 00 00 00 00 00 00 00 00 f8 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:25.200Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x2e","0x18f6374","0x0","0x27e703ad","0x18f6374","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18f6374","0x0","0x27e703ad","0x18f6374","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18f6374","hex":"01 00 00 00 00 00 00 00 00 00 f8 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18f6374","hex":"01 00 00 00 00 00 00 00 00 00 f8 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:25.205Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x2e","0x18f6374","0x0","0x27e703f5","0x18f6374","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18f6374","0x0","0x27e703f5","0x18f6374","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18f6374","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18f6374","hex":"01 00 00 00 00 00 00 00 00 00 f8 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18f6374","hex":"01 00 00 00 00 00 00 00 00 00 f8 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:25.211Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:25.211Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:25.211Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:25.211Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:25.211Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x18b25fc","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x18b25fc","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x5209960","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b25fc","hex":"01 00 34 00 00 00 00 00 00 00 55 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 80 cb bd 35 cc d4 dc 01 06 0a 00 00 00 80 cb bd 35 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18b25fc","hex":"01 00 34 00 00 00 00 00 00 00 55 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 80 cb bd 35 cc d4 dc 01 06 0a 00 00 00 80 cb bd 35 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:25.491Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffd","0x62","0x18b25fc","0x27e7023d","0x23eed68","0x520995c","0x52098b8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18b25fc","0x27e7023d","0x23eed68","0x520995c","0x52098b8","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b25fc","hex":"01 00 34 00 00 00 00 00 00 00 55 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 80 cb bd 35 cc d4 dc 01 06 0a 00 00 00 80 cb bd 35 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b25fc","hex":"01 00 34 00 00 00 00 00 00 00 55 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 80 cb bd 35 cc d4 dc 01 06 0a 00 00 00 80 cb bd 35 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:25.497Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x18b25fc","0x0","0x27e703ad","0x18b25fc","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18b25fc","0x0","0x27e703ad","0x18b25fc","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b25fc","hex":"01 00 34 00 00 00 00 00 00 00 55 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 80 cb bd 35 cc d4 dc 01 06 0a 00 00 00 80 cb bd 35 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b25fc","hex":"01 00 34 00 00 00 00 00 00 00 55 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 80 cb bd 35 cc d4 dc 01 06 0a 00 00 00 80 cb bd 35 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:25.504Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x18b25fc","0x0","0x27e703f5","0x18b25fc","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18b25fc","0x0","0x27e703f5","0x18b25fc","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b25fc","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18b25fc","hex":"01 00 34 00 00 00 00 00 00 00 55 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 80 cb bd 35 cc d4 dc 01 06 0a 00 00 00 80 cb bd 35 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b25fc","hex":"01 00 34 00 00 00 00 00 00 00 55 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 80 cb bd 35 cc d4 dc 01 06 0a 00 00 00 80 cb bd 35 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:25.509Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:25.510Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:25.510Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:25.510Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:25.510Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x51fa864","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x51fa864","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x18e1508","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51fa864","hex":"01 00 34 00 00 00 00 00 00 00 56 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 80 cb bd 35 cc d4 dc 01 06 0a 00 00 00 80 cb bd 35 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51fa864","hex":"01 00 34 00 00 00 00 00 00 00 56 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 80 cb bd 35 cc d4 dc 01 06 0a 00 00 00 80 cb bd 35 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:25.519Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffe","0x62","0x51fa864","0x27e7023d","0x23eed68","0x18e1504","0x18e1460","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x51fa864","0x27e7023d","0x23eed68","0x18e1504","0x18e1460","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51fa864","hex":"01 00 34 00 00 00 00 00 00 00 56 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 80 cb bd 35 cc d4 dc 01 06 0a 00 00 00 80 cb bd 35 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51fa864","hex":"01 00 34 00 00 00 00 00 00 00 56 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 80 cb bd 35 cc d4 dc 01 06 0a 00 00 00 80 cb bd 35 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:25.524Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x51fa864","0x0","0x27e703ad","0x51fa864","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51fa864","0x0","0x27e703ad","0x51fa864","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51fa864","hex":"01 00 34 00 00 00 00 00 00 00 56 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 80 cb bd 35 cc d4 dc 01 06 0a 00 00 00 80 cb bd 35 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51fa864","hex":"01 00 34 00 00 00 00 00 00 00 56 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 80 cb bd 35 cc d4 dc 01 06 0a 00 00 00 80 cb bd 35 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:25.531Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x51fa864","0x0","0x27e703f5","0x51fa864","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51fa864","0x0","0x27e703f5","0x51fa864","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51fa864","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51fa864","hex":"01 00 34 00 00 00 00 00 00 00 56 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 80 cb bd 35 cc d4 dc 01 06 0a 00 00 00 80 cb bd 35 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51fa864","hex":"01 00 34 00 00 00 00 00 00 00 56 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 80 cb bd 35 cc d4 dc 01 06 0a 00 00 00 80 cb bd 35 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:25.536Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x18b14f4","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x18b14f4","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x5208808","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18b14f4","hex":"01 00 00 00 00 00 00 00 00 00 55 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18b14f4","hex":"01 00 00 00 00 00 00 00 00 00 55 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:25.543Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:25.544Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:25.544Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:25.544Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:25.544Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x1","0x2e","0x18b14f4","0x24a707c5","0x17ee8a0","0x5208804","0x5208760","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18b14f4","0x24a707c5","0x17ee8a0","0x5208804","0x5208760","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18b14f4","hex":"01 00 00 00 00 00 00 00 00 00 55 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18b14f4","hex":"01 00 00 00 00 00 00 00 00 00 55 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:25.550Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x2e","0x18b14f4","0x0","0x24a70775","0x18b14f4","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18b14f4","0x0","0x24a70775","0x18b14f4","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18b14f4","hex":"01 00 00 00 00 00 00 00 00 00 55 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18b14f4","hex":"01 00 00 00 00 00 00 00 00 00 55 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:25.556Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x2e","0x18b14f4","0x0","0x24a708bd","0x18b14f4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18b14f4","0x0","0x24a708bd","0x18b14f4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b14f4","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18b14f4","hex":"01 00 00 00 00 00 00 00 00 00 55 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18b14f4","hex":"01 00 00 00 00 00 00 00 00 00 55 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:25.560Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:25.561Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:25.561Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:25.561Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:25.561Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x51c8a5c","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x51c8a5c","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x1878748","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51c8a5c","hex":"01 00 34 00 00 00 00 00 00 00 f9 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 e7 d5 35 cc d4 dc 01 06 0a 00 00 00 60 e7 d5 35 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51c8a5c","hex":"01 00 34 00 00 00 00 00 00 00 f9 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 e7 d5 35 cc d4 dc 01 06 0a 00 00 00 60 e7 d5 35 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:25.597Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x7ffd","0x62","0x51c8a5c","0x24a707c5","0x17ee8a0","0x1878744","0x18786a0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x51c8a5c","0x24a707c5","0x17ee8a0","0x1878744","0x18786a0","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51c8a5c","hex":"01 00 34 00 00 00 00 00 00 00 f9 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 e7 d5 35 cc d4 dc 01 06 0a 00 00 00 60 e7 d5 35 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51c8a5c","hex":"01 00 34 00 00 00 00 00 00 00 f9 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 e7 d5 35 cc d4 dc 01 06 0a 00 00 00 60 e7 d5 35 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:25.603Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x62","0x51c8a5c","0x0","0x24a70775","0x51c8a5c","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51c8a5c","0x0","0x24a70775","0x51c8a5c","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51c8a5c","hex":"01 00 34 00 00 00 00 00 00 00 f9 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 e7 d5 35 cc d4 dc 01 06 0a 00 00 00 60 e7 d5 35 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51c8a5c","hex":"01 00 34 00 00 00 00 00 00 00 f9 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 e7 d5 35 cc d4 dc 01 06 0a 00 00 00 60 e7 d5 35 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:25.610Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x62","0x51c8a5c","0x0","0x24a708bd","0x51c8a5c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51c8a5c","0x0","0x24a708bd","0x51c8a5c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51c8a5c","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51c8a5c","hex":"01 00 34 00 00 00 00 00 00 00 f9 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 e7 d5 35 cc d4 dc 01 06 0a 00 00 00 60 e7 d5 35 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51c8a5c","hex":"01 00 34 00 00 00 00 00 00 00 f9 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 e7 d5 35 cc d4 dc 01 06 0a 00 00 00 60 e7 d5 35 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:25.615Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:25.615Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:25.615Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:25.616Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:25.616Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x51c9b64","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x51c9b64","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x18e2098","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51c9b64","hex":"01 00 00 00 00 00 00 00 00 00 56 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x51c9b64","hex":"01 00 00 00 00 00 00 00 00 00 56 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:25.631Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x195cf0c","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x195cf0c","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x5206ab0","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x195cf0c","hex":"01 00 00 00 00 00 00 00 00 00 f9 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x195cf0c","hex":"01 00 00 00 00 00 00 00 00 00 f9 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:25.638Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x1","0x2e","0x51c9b64","0x24a707c5","0x17ee8a0","0x18e2094","0x18e1ff0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x51c9b64","0x24a707c5","0x17ee8a0","0x18e2094","0x18e1ff0","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51c9b64","hex":"01 00 00 00 00 00 00 00 00 00 56 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51c9b64","hex":"01 00 00 00 00 00 00 00 00 00 56 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:25.644Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x2e","0x51c9b64","0x0","0x24a70775","0x51c9b64","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x51c9b64","0x0","0x24a70775","0x51c9b64","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51c9b64","hex":"01 00 00 00 00 00 00 00 00 00 56 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51c9b64","hex":"01 00 00 00 00 00 00 00 00 00 56 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:25.650Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x2e","0x51c9b64","0x0","0x24a708bd","0x51c9b64","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x51c9b64","0x0","0x24a708bd","0x51c9b64","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51c9b64","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x51c9b64","hex":"01 00 00 00 00 00 00 00 00 00 56 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51c9b64","hex":"01 00 00 00 00 00 00 00 00 00 56 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:25.655Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:25.655Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:25.655Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:25.655Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:25.655Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x2","0x2e","0x195cf0c","0x27e7023d","0x23eed68","0x5206aac","0x5206a08","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x195cf0c","0x27e7023d","0x23eed68","0x5206aac","0x5206a08","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x195cf0c","hex":"01 00 00 00 00 00 00 00 00 00 f9 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x195cf0c","hex":"01 00 00 00 00 00 00 00 00 00 f9 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:25.661Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x2e","0x195cf0c","0x0","0x27e703ad","0x195cf0c","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x195cf0c","0x0","0x27e703ad","0x195cf0c","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x195cf0c","hex":"01 00 00 00 00 00 00 00 00 00 f9 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x195cf0c","hex":"01 00 00 00 00 00 00 00 00 00 f9 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:25.668Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x2e","0x195cf0c","0x0","0x27e703f5","0x195cf0c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x195cf0c","0x0","0x27e703f5","0x195cf0c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x195cf0c","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x195cf0c","hex":"01 00 00 00 00 00 00 00 00 00 f9 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x195cf0c","hex":"01 00 00 00 00 00 00 00 00 00 f9 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:25.677Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:25.678Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:25.679Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:25.679Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:25.680Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x18f6374","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x18f6374","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x18e1508","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18f6374","hex":"01 00 34 00 00 00 00 00 00 00 57 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 64 0a 36 cc d4 dc 01 06 0a 00 00 00 e0 64 0a 36 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18f6374","hex":"01 00 34 00 00 00 00 00 00 00 57 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 64 0a 36 cc d4 dc 01 06 0a 00 00 00 e0 64 0a 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:26.012Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffd","0x62","0x18f6374","0x27e7023d","0x23eed68","0x18e1504","0x18e1460","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18f6374","0x27e7023d","0x23eed68","0x18e1504","0x18e1460","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18f6374","hex":"01 00 34 00 00 00 00 00 00 00 57 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 64 0a 36 cc d4 dc 01 06 0a 00 00 00 e0 64 0a 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18f6374","hex":"01 00 34 00 00 00 00 00 00 00 57 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 64 0a 36 cc d4 dc 01 06 0a 00 00 00 e0 64 0a 36 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:26.021Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x18f6374","0x0","0x27e703ad","0x18f6374","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18f6374","0x0","0x27e703ad","0x18f6374","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18f6374","hex":"01 00 34 00 00 00 00 00 00 00 57 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 64 0a 36 cc d4 dc 01 06 0a 00 00 00 e0 64 0a 36 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18f6374","hex":"01 00 34 00 00 00 00 00 00 00 57 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 64 0a 36 cc d4 dc 01 06 0a 00 00 00 e0 64 0a 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:26.032Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x18f6374","0x0","0x27e703f5","0x18f6374","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18f6374","0x0","0x27e703f5","0x18f6374","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18f6374","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18f6374","hex":"01 00 34 00 00 00 00 00 00 00 57 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 64 0a 36 cc d4 dc 01 06 0a 00 00 00 e0 64 0a 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18f6374","hex":"01 00 34 00 00 00 00 00 00 00 57 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 64 0a 36 cc d4 dc 01 06 0a 00 00 00 e0 64 0a 36 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:26.040Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:26.041Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:26.041Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:26.041Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:26.041Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x51c7954","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x51c7954","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x18792d8","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51c7954","hex":"01 00 34 00 00 00 00 00 00 00 58 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 64 0a 36 cc d4 dc 01 06 0a 00 00 00 e0 64 0a 36 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51c7954","hex":"01 00 34 00 00 00 00 00 00 00 58 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 64 0a 36 cc d4 dc 01 06 0a 00 00 00 e0 64 0a 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:26.051Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffe","0x62","0x51c7954","0x27e7023d","0x23eed68","0x18792d4","0x1879230","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x51c7954","0x27e7023d","0x23eed68","0x18792d4","0x1879230","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51c7954","hex":"01 00 34 00 00 00 00 00 00 00 58 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 64 0a 36 cc d4 dc 01 06 0a 00 00 00 e0 64 0a 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51c7954","hex":"01 00 34 00 00 00 00 00 00 00 58 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 64 0a 36 cc d4 dc 01 06 0a 00 00 00 e0 64 0a 36 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:26.057Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x51c7954","0x0","0x27e703ad","0x51c7954","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51c7954","0x0","0x27e703ad","0x51c7954","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51c7954","hex":"01 00 34 00 00 00 00 00 00 00 58 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 64 0a 36 cc d4 dc 01 06 0a 00 00 00 e0 64 0a 36 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51c7954","hex":"01 00 34 00 00 00 00 00 00 00 58 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 64 0a 36 cc d4 dc 01 06 0a 00 00 00 e0 64 0a 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:26.063Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x51c7954","0x0","0x27e703f5","0x51c7954","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51c7954","0x0","0x27e703f5","0x51c7954","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51c7954","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51c7954","hex":"01 00 34 00 00 00 00 00 00 00 58 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 64 0a 36 cc d4 dc 01 06 0a 00 00 00 e0 64 0a 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51c7954","hex":"01 00 34 00 00 00 00 00 00 00 58 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 64 0a 36 cc d4 dc 01 06 0a 00 00 00 e0 64 0a 36 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:26.069Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x18fdaac","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x18fdaac","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x18e3d80","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18fdaac","hex":"01 00 00 00 00 00 00 00 00 00 57 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18fdaac","hex":"01 00 00 00 00 00 00 00 00 00 57 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:26.076Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:26.077Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:26.077Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:26.077Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:26.077Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x1","0x2e","0x18fdaac","0x24a707c5","0x17ee8a0","0x18e3d7c","0x18e3cd8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18fdaac","0x24a707c5","0x17ee8a0","0x18e3d7c","0x18e3cd8","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18fdaac","hex":"01 00 00 00 00 00 00 00 00 00 57 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18fdaac","hex":"01 00 00 00 00 00 00 00 00 00 57 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:26.083Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x2e","0x18fdaac","0x0","0x24a70775","0x18fdaac","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18fdaac","0x0","0x24a70775","0x18fdaac","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18fdaac","hex":"01 00 00 00 00 00 00 00 00 00 57 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18fdaac","hex":"01 00 00 00 00 00 00 00 00 00 57 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:26.089Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x2e","0x18fdaac","0x0","0x24a708bd","0x18fdaac","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18fdaac","0x0","0x24a708bd","0x18fdaac","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18fdaac","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18fdaac","hex":"01 00 00 00 00 00 00 00 00 00 57 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18fdaac","hex":"01 00 00 00 00 00 00 00 00 00 57 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:26.094Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x51cac6c","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x51cac6c","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x1878748","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51cac6c","hex":"01 00 34 00 00 00 00 00 00 00 fa 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 32 22 36 cc d4 dc 01 06 0a 00 00 00 a0 32 22 36 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51cac6c","hex":"01 00 34 00 00 00 00 00 00 00 fa 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 32 22 36 cc d4 dc 01 06 0a 00 00 00 a0 32 22 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:26.101Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:26.102Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:26.102Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:26.102Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffd","0x62","0x51cac6c","0x27e7023d","0x23eed68","0x1878744","0x18786a0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x51cac6c","0x27e7023d","0x23eed68","0x1878744","0x18786a0","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51cac6c","hex":"01 00 34 00 00 00 00 00 00 00 fa 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 32 22 36 cc d4 dc 01 06 0a 00 00 00 a0 32 22 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51cac6c","hex":"01 00 34 00 00 00 00 00 00 00 fa 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 32 22 36 cc d4 dc 01 06 0a 00 00 00 a0 32 22 36 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:26.108Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x51cac6c","0x0","0x27e703ad","0x51cac6c","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51cac6c","0x0","0x27e703ad","0x51cac6c","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51cac6c","hex":"01 00 34 00 00 00 00 00 00 00 fa 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 32 22 36 cc d4 dc 01 06 0a 00 00 00 a0 32 22 36 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51cac6c","hex":"01 00 34 00 00 00 00 00 00 00 fa 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 32 22 36 cc d4 dc 01 06 0a 00 00 00 a0 32 22 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:26.114Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x51cac6c","0x0","0x27e703f5","0x51cac6c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51cac6c","0x0","0x27e703f5","0x51cac6c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51cac6c","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51cac6c","hex":"01 00 34 00 00 00 00 00 00 00 fa 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 32 22 36 cc d4 dc 01 06 0a 00 00 00 a0 32 22 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51cac6c","hex":"01 00 34 00 00 00 00 00 00 00 fa 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 32 22 36 cc d4 dc 01 06 0a 00 00 00 a0 32 22 36 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:26.120Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:26.120Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:26.120Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:26.120Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:26.121Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:26.121Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x18256c4","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x18256c4","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x18e2c28","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18256c4","hex":"01 00 00 00 00 00 00 00 00 00 fa 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18256c4","hex":"01 00 00 00 00 00 00 00 00 00 fa 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:26.131Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x2","0x2e","0x18256c4","0x27e7023d","0x23eed68","0x18e2c24","0x18e2b80","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x18256c4","0x27e7023d","0x23eed68","0x18e2c24","0x18e2b80","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18256c4","hex":"01 00 00 00 00 00 00 00 00 00 fa 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18256c4","hex":"01 00 00 00 00 00 00 00 00 00 fa 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:26.139Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x2e","0x18256c4","0x0","0x27e703ad","0x18256c4","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18256c4","0x0","0x27e703ad","0x18256c4","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18256c4","hex":"01 00 00 00 00 00 00 00 00 00 fa 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18256c4","hex":"01 00 00 00 00 00 00 00 00 00 fa 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:26.145Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x2e","0x18256c4","0x0","0x27e703f5","0x18256c4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18256c4","0x0","0x27e703f5","0x18256c4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18256c4","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18256c4","hex":"01 00 00 00 00 00 00 00 00 00 fa 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18256c4","hex":"01 00 00 00 00 00 00 00 00 00 fa 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:26.150Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:26.150Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:26.150Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:26.151Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:26.151Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x51c8a5c","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x51c8a5c","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x1878748","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51c8a5c","hex":"01 00 00 00 00 00 00 00 00 00 58 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x51c8a5c","hex":"01 00 00 00 00 00 00 00 00 00 58 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:26.182Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x1","0x2e","0x51c8a5c","0x27e7023d","0x23eed68","0x1878744","0x18786a0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x51c8a5c","0x27e7023d","0x23eed68","0x1878744","0x18786a0","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51c8a5c","hex":"01 00 00 00 00 00 00 00 00 00 58 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51c8a5c","hex":"01 00 00 00 00 00 00 00 00 00 58 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:26.186Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x2e","0x51c8a5c","0x0","0x27e703ad","0x51c8a5c","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x51c8a5c","0x0","0x27e703ad","0x51c8a5c","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51c8a5c","hex":"01 00 00 00 00 00 00 00 00 00 58 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51c8a5c","hex":"01 00 00 00 00 00 00 00 00 00 58 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:26.192Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x2e","0x51c8a5c","0x0","0x27e703f5","0x51c8a5c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x51c8a5c","0x0","0x27e703f5","0x51c8a5c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51c8a5c","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x51c8a5c","hex":"01 00 00 00 00 00 00 00 00 00 58 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51c8a5c","hex":"01 00 00 00 00 00 00 00 00 00 58 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:26.197Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:26.197Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:26.197Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:26.197Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:26.198Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x51cac6c","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x51cac6c","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x1878748","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51cac6c","hex":"01 00 34 00 00 00 00 00 00 00 59 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 b0 56 36 cc d4 dc 01 06 0a 00 00 00 20 b0 56 36 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51cac6c","hex":"01 00 34 00 00 00 00 00 00 00 59 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 b0 56 36 cc d4 dc 01 06 0a 00 00 00 20 b0 56 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:26.492Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffd","0x62","0x51cac6c","0x27e7023d","0x23eed68","0x1878744","0x18786a0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x51cac6c","0x27e7023d","0x23eed68","0x1878744","0x18786a0","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51cac6c","hex":"01 00 34 00 00 00 00 00 00 00 59 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 b0 56 36 cc d4 dc 01 06 0a 00 00 00 20 b0 56 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51cac6c","hex":"01 00 34 00 00 00 00 00 00 00 59 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 b0 56 36 cc d4 dc 01 06 0a 00 00 00 20 b0 56 36 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:26.498Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x51cac6c","0x0","0x27e703ad","0x51cac6c","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51cac6c","0x0","0x27e703ad","0x51cac6c","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51cac6c","hex":"01 00 34 00 00 00 00 00 00 00 59 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 b0 56 36 cc d4 dc 01 06 0a 00 00 00 20 b0 56 36 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51cac6c","hex":"01 00 34 00 00 00 00 00 00 00 59 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 b0 56 36 cc d4 dc 01 06 0a 00 00 00 20 b0 56 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:26.505Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x51cac6c","0x0","0x27e703f5","0x51cac6c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51cac6c","0x0","0x27e703f5","0x51cac6c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51cac6c","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51cac6c","hex":"01 00 34 00 00 00 00 00 00 00 59 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 b0 56 36 cc d4 dc 01 06 0a 00 00 00 20 b0 56 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51cac6c","hex":"01 00 34 00 00 00 00 00 00 00 59 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 b0 56 36 cc d4 dc 01 06 0a 00 00 00 20 b0 56 36 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:26.509Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:26.510Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:26.510Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:26.510Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:26.510Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x18b14f4","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x18b14f4","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x5206ab0","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b14f4","hex":"01 00 34 00 00 00 00 00 00 00 5a 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 b0 56 36 cc d4 dc 01 06 0a 00 00 00 20 b0 56 36 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18b14f4","hex":"01 00 34 00 00 00 00 00 00 00 5a 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 b0 56 36 cc d4 dc 01 06 0a 00 00 00 20 b0 56 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:26.518Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffe","0x62","0x18b14f4","0x27e7023d","0x23eed68","0x5206aac","0x5206a08","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x18b14f4","0x27e7023d","0x23eed68","0x5206aac","0x5206a08","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b14f4","hex":"01 00 34 00 00 00 00 00 00 00 5a 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 b0 56 36 cc d4 dc 01 06 0a 00 00 00 20 b0 56 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b14f4","hex":"01 00 34 00 00 00 00 00 00 00 5a 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 b0 56 36 cc d4 dc 01 06 0a 00 00 00 20 b0 56 36 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:26.525Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x18b14f4","0x0","0x27e703ad","0x18b14f4","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18b14f4","0x0","0x27e703ad","0x18b14f4","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b14f4","hex":"01 00 34 00 00 00 00 00 00 00 5a 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 b0 56 36 cc d4 dc 01 06 0a 00 00 00 20 b0 56 36 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b14f4","hex":"01 00 34 00 00 00 00 00 00 00 5a 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 b0 56 36 cc d4 dc 01 06 0a 00 00 00 20 b0 56 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:26.533Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x18b14f4","0x0","0x27e703f5","0x18b14f4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18b14f4","0x0","0x27e703f5","0x18b14f4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b14f4","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18b14f4","hex":"01 00 34 00 00 00 00 00 00 00 5a 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 b0 56 36 cc d4 dc 01 06 0a 00 00 00 20 b0 56 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b14f4","hex":"01 00 34 00 00 00 00 00 00 00 5a 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 b0 56 36 cc d4 dc 01 06 0a 00 00 00 20 b0 56 36 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:26.539Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:26.539Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:26.539Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:26.539Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:26.539Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x51c8a5c","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x51c8a5c","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x1878748","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51c8a5c","hex":"01 00 34 00 00 00 00 00 00 00 fb 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 56 6e 36 cc d4 dc 01 06 0a 00 00 00 d0 56 6e 36 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51c8a5c","hex":"01 00 34 00 00 00 00 00 00 00 fb 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 56 6e 36 cc d4 dc 01 06 0a 00 00 00 d0 56 6e 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:26.596Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffd","0x62","0x51c8a5c","0x27e7023d","0x23eed68","0x1878744","0x18786a0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x51c8a5c","0x27e7023d","0x23eed68","0x1878744","0x18786a0","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51c8a5c","hex":"01 00 34 00 00 00 00 00 00 00 fb 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 56 6e 36 cc d4 dc 01 06 0a 00 00 00 d0 56 6e 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51c8a5c","hex":"01 00 34 00 00 00 00 00 00 00 fb 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 56 6e 36 cc d4 dc 01 06 0a 00 00 00 d0 56 6e 36 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:26.602Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x51c8a5c","0x0","0x27e703ad","0x51c8a5c","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51c8a5c","0x0","0x27e703ad","0x51c8a5c","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51c8a5c","hex":"01 00 34 00 00 00 00 00 00 00 fb 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 56 6e 36 cc d4 dc 01 06 0a 00 00 00 d0 56 6e 36 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51c8a5c","hex":"01 00 34 00 00 00 00 00 00 00 fb 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 56 6e 36 cc d4 dc 01 06 0a 00 00 00 d0 56 6e 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:26.608Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x51c8a5c","0x0","0x27e703f5","0x51c8a5c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51c8a5c","0x0","0x27e703f5","0x51c8a5c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51c8a5c","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51c8a5c","hex":"01 00 34 00 00 00 00 00 00 00 fb 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 56 6e 36 cc d4 dc 01 06 0a 00 00 00 d0 56 6e 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51c8a5c","hex":"01 00 34 00 00 00 00 00 00 00 fb 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 56 6e 36 cc d4 dc 01 06 0a 00 00 00 d0 56 6e 36 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:26.614Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x51c3534","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x51c3534","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x18e1508","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51c3534","hex":"01 00 00 00 00 00 00 00 00 00 5a 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x51c3534","hex":"01 00 00 00 00 00 00 00 00 00 5a 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:26.622Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x18f8584","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x18f8584","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x5208808","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18f8584","hex":"01 00 00 00 00 00 00 00 00 00 59 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18f8584","hex":"01 00 00 00 00 00 00 00 00 00 59 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:26.630Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:26.630Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:26.630Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:26.630Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:26.631Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x1","0x2e","0x51c3534","0x24a707c5","0x17ee8a0","0x18e1504","0x18e1460","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x51c3534","0x24a707c5","0x17ee8a0","0x18e1504","0x18e1460","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51c3534","hex":"01 00 00 00 00 00 00 00 00 00 5a 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51c3534","hex":"01 00 00 00 00 00 00 00 00 00 5a 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:26.637Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x2e","0x51c3534","0x0","0x24a70775","0x51c3534","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x51c3534","0x0","0x24a70775","0x51c3534","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51c3534","hex":"01 00 00 00 00 00 00 00 00 00 5a 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51c3534","hex":"01 00 00 00 00 00 00 00 00 00 5a 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:26.644Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x2e","0x51c3534","0x0","0x24a708bd","0x51c3534","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x51c3534","0x0","0x24a708bd","0x51c3534","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51c3534","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x51c3534","hex":"01 00 00 00 00 00 00 00 00 00 5a 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51c3534","hex":"01 00 00 00 00 00 00 00 00 00 5a 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:26.650Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:26.650Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:26.650Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:26.651Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:26.651Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x1","0x2e","0x18f8584","0x255c006d","0x85ef38","0x5208804","0x5208760","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18f8584","0x255c006d","0x85ef38","0x5208804","0x5208760","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18f8584","hex":"01 00 00 00 00 00 00 00 00 00 59 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18f8584","hex":"01 00 00 00 00 00 00 00 00 00 59 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:26.656Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x2e","0x18f8584","0x0","0x255c019d","0x18f8584","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18f8584","0x0","0x255c019d","0x18f8584","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18f8584","hex":"01 00 00 00 00 00 00 00 00 00 59 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18f8584","hex":"01 00 00 00 00 00 00 00 00 00 59 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:26.662Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x2e","0x18f8584","0x0","0x255c0125","0x18f8584","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18f8584","0x0","0x255c0125","0x18f8584","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18f8584","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18f8584","hex":"01 00 00 00 00 00 00 00 00 00 59 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18f8584","hex":"01 00 00 00 00 00 00 00 00 00 59 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:26.667Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:26.667Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:26.668Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:26.668Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:26.668Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x51c3534","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x51c3534","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x18e1508","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51c3534","hex":"01 00 00 00 00 00 00 00 00 00 fb 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x51c3534","hex":"01 00 00 00 00 00 00 00 00 00 fb 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:26.679Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x2","0x2e","0x51c3534","0x24a707c5","0x17ee8a0","0x18e1504","0x18e1460","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x51c3534","0x24a707c5","0x17ee8a0","0x18e1504","0x18e1460","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51c3534","hex":"01 00 00 00 00 00 00 00 00 00 fb 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51c3534","hex":"01 00 00 00 00 00 00 00 00 00 fb 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:26.685Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x2e","0x51c3534","0x0","0x24a70775","0x51c3534","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x51c3534","0x0","0x24a70775","0x51c3534","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51c3534","hex":"01 00 00 00 00 00 00 00 00 00 fb 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51c3534","hex":"01 00 00 00 00 00 00 00 00 00 fb 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:26.692Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x2e","0x51c3534","0x0","0x24a708bd","0x51c3534","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x51c3534","0x0","0x24a708bd","0x51c3534","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51c3534","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x51c3534","hex":"01 00 00 00 00 00 00 00 00 00 fb 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51c3534","hex":"01 00 00 00 00 00 00 00 00 00 fb 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:26.697Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:26.697Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:26.698Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:26.698Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:26.698Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x18f747c","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x18f747c","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x18e37b8","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18f747c","hex":"01 00 34 00 00 00 00 00 00 00 5b 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 60 fb a2 36 cc d4 dc 01 06 0a 00 00 00 60 fb a2 36 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18f747c","hex":"01 00 34 00 00 00 00 00 00 00 5b 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 60 fb a2 36 cc d4 dc 01 06 0a 00 00 00 60 fb a2 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:26.999Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x7ffd","0x62","0x18f747c","0x24a707c5","0x17ee8a0","0x18e37b4","0x18e3710","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18f747c","0x24a707c5","0x17ee8a0","0x18e37b4","0x18e3710","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18f747c","hex":"01 00 34 00 00 00 00 00 00 00 5b 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 60 fb a2 36 cc d4 dc 01 06 0a 00 00 00 60 fb a2 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18f747c","hex":"01 00 34 00 00 00 00 00 00 00 5b 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 60 fb a2 36 cc d4 dc 01 06 0a 00 00 00 60 fb a2 36 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:27.006Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x62","0x18f747c","0x0","0x24a70775","0x18f747c","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18f747c","0x0","0x24a70775","0x18f747c","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18f747c","hex":"01 00 34 00 00 00 00 00 00 00 5b 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 60 fb a2 36 cc d4 dc 01 06 0a 00 00 00 60 fb a2 36 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18f747c","hex":"01 00 34 00 00 00 00 00 00 00 5b 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 60 fb a2 36 cc d4 dc 01 06 0a 00 00 00 60 fb a2 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:27.013Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x62","0x18f747c","0x0","0x24a708bd","0x18f747c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18f747c","0x0","0x24a708bd","0x18f747c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18f747c","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18f747c","hex":"01 00 34 00 00 00 00 00 00 00 5b 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 60 fb a2 36 cc d4 dc 01 06 0a 00 00 00 60 fb a2 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18f747c","hex":"01 00 34 00 00 00 00 00 00 00 5b 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 60 fb a2 36 cc d4 dc 01 06 0a 00 00 00 60 fb a2 36 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:27.018Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:27.018Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:27.019Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:27.019Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:27.019Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x51c9b64","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x51c9b64","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x18e2098","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51c9b64","hex":"01 00 34 00 00 00 00 00 00 00 5c 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 60 fb a2 36 cc d4 dc 01 06 0a 00 00 00 60 fb a2 36 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51c9b64","hex":"01 00 34 00 00 00 00 00 00 00 5c 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 60 fb a2 36 cc d4 dc 01 06 0a 00 00 00 60 fb a2 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:27.027Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x7ffe","0x62","0x51c9b64","0x24a707c5","0x17ee8a0","0x18e2094","0x18e1ff0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x51c9b64","0x24a707c5","0x17ee8a0","0x18e2094","0x18e1ff0","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51c9b64","hex":"01 00 34 00 00 00 00 00 00 00 5c 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 60 fb a2 36 cc d4 dc 01 06 0a 00 00 00 60 fb a2 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51c9b64","hex":"01 00 34 00 00 00 00 00 00 00 5c 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 60 fb a2 36 cc d4 dc 01 06 0a 00 00 00 60 fb a2 36 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:27.032Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x62","0x51c9b64","0x0","0x24a70775","0x51c9b64","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51c9b64","0x0","0x24a70775","0x51c9b64","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51c9b64","hex":"01 00 34 00 00 00 00 00 00 00 5c 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 60 fb a2 36 cc d4 dc 01 06 0a 00 00 00 60 fb a2 36 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51c9b64","hex":"01 00 34 00 00 00 00 00 00 00 5c 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 60 fb a2 36 cc d4 dc 01 06 0a 00 00 00 60 fb a2 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:27.039Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x62","0x51c9b64","0x0","0x24a708bd","0x51c9b64","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51c9b64","0x0","0x24a708bd","0x51c9b64","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51c9b64","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51c9b64","hex":"01 00 34 00 00 00 00 00 00 00 5c 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 60 fb a2 36 cc d4 dc 01 06 0a 00 00 00 60 fb a2 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51c9b64","hex":"01 00 34 00 00 00 00 00 00 00 5c 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 60 fb a2 36 cc d4 dc 01 06 0a 00 00 00 60 fb a2 36 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:27.044Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:27.044Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:27.044Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:27.044Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:27.045Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x18bf25c","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x18bf25c","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x18e31f0","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18bf25c","hex":"01 00 00 00 00 00 00 00 00 00 5c 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18bf25c","hex":"01 00 00 00 00 00 00 00 00 00 5c 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:27.053Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x1","0x2e","0x18bf25c","0x24a707c5","0x17ee8a0","0x18e31ec","0x18e3148","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18bf25c","0x24a707c5","0x17ee8a0","0x18e31ec","0x18e3148","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18bf25c","hex":"01 00 00 00 00 00 00 00 00 00 5c 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18bf25c","hex":"01 00 00 00 00 00 00 00 00 00 5c 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:27.059Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x2e","0x18bf25c","0x0","0x24a70775","0x18bf25c","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18bf25c","0x0","0x24a70775","0x18bf25c","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18bf25c","hex":"01 00 00 00 00 00 00 00 00 00 5c 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18bf25c","hex":"01 00 00 00 00 00 00 00 00 00 5c 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:27.065Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x2e","0x18bf25c","0x0","0x24a708bd","0x18bf25c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18bf25c","0x0","0x24a708bd","0x18bf25c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18bf25c","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18bf25c","hex":"01 00 00 00 00 00 00 00 00 00 5c 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18bf25c","hex":"01 00 00 00 00 00 00 00 00 00 5c 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:27.069Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x18f968c","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x18f968c","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x5208808","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18f968c","hex":"01 00 00 00 00 00 00 00 00 00 5b 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18f968c","hex":"01 00 00 00 00 00 00 00 00 00 5b 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:27.077Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:27.077Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:27.077Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:27.077Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:27.078Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x1","0x2e","0x18f968c","0x255c006d","0x85ef38","0x5208804","0x5208760","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18f968c","0x255c006d","0x85ef38","0x5208804","0x5208760","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18f968c","hex":"01 00 00 00 00 00 00 00 00 00 5b 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18f968c","hex":"01 00 00 00 00 00 00 00 00 00 5b 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:27.083Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x2e","0x18f968c","0x0","0x255c019d","0x18f968c","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18f968c","0x0","0x255c019d","0x18f968c","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18f968c","hex":"01 00 00 00 00 00 00 00 00 00 5b 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18f968c","hex":"01 00 00 00 00 00 00 00 00 00 5b 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:27.090Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x2e","0x18f968c","0x0","0x255c0125","0x18f968c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18f968c","0x0","0x255c0125","0x18f968c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18f968c","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18f968c","hex":"01 00 00 00 00 00 00 00 00 00 5b 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18f968c","hex":"01 00 00 00 00 00 00 00 00 00 5b 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:27.094Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x51c5744","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x51c5744","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x18e2098","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51c5744","hex":"01 00 34 00 00 00 00 00 00 00 fc 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 a2 ba 36 cc d4 dc 01 06 0a 00 00 00 10 a2 ba 36 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51c5744","hex":"01 00 34 00 00 00 00 00 00 00 fc 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 a2 ba 36 cc d4 dc 01 06 0a 00 00 00 10 a2 ba 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:27.102Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:27.102Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:27.102Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:27.103Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:27.103Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x7ffd","0x62","0x51c5744","0x24a707c5","0x17ee8a0","0x18e2094","0x18e1ff0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x51c5744","0x24a707c5","0x17ee8a0","0x18e2094","0x18e1ff0","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51c5744","hex":"01 00 34 00 00 00 00 00 00 00 fc 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 a2 ba 36 cc d4 dc 01 06 0a 00 00 00 10 a2 ba 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51c5744","hex":"01 00 34 00 00 00 00 00 00 00 fc 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 a2 ba 36 cc d4 dc 01 06 0a 00 00 00 10 a2 ba 36 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:27.109Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x62","0x51c5744","0x0","0x24a70775","0x51c5744","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51c5744","0x0","0x24a70775","0x51c5744","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51c5744","hex":"01 00 34 00 00 00 00 00 00 00 fc 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 a2 ba 36 cc d4 dc 01 06 0a 00 00 00 10 a2 ba 36 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51c5744","hex":"01 00 34 00 00 00 00 00 00 00 fc 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 a2 ba 36 cc d4 dc 01 06 0a 00 00 00 10 a2 ba 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:27.115Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x62","0x51c5744","0x0","0x24a708bd","0x51c5744","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51c5744","0x0","0x24a708bd","0x51c5744","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51c5744","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51c5744","hex":"01 00 34 00 00 00 00 00 00 00 fc 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 a2 ba 36 cc d4 dc 01 06 0a 00 00 00 10 a2 ba 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51c5744","hex":"01 00 34 00 00 00 00 00 00 00 fc 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 a2 ba 36 cc d4 dc 01 06 0a 00 00 00 10 a2 ba 36 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:27.120Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:27.121Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:27.121Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:27.121Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:27.121Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x51c9b64","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x51c9b64","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x18e2098","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51c9b64","hex":"01 00 00 00 00 00 00 00 00 00 fc 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x51c9b64","hex":"01 00 00 00 00 00 00 00 00 00 fc 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:27.166Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x2","0x2e","0x51c9b64","0x24a707c5","0x17ee8a0","0x18e2094","0x18e1ff0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x51c9b64","0x24a707c5","0x17ee8a0","0x18e2094","0x18e1ff0","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51c9b64","hex":"01 00 00 00 00 00 00 00 00 00 fc 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51c9b64","hex":"01 00 00 00 00 00 00 00 00 00 fc 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:27.172Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x2e","0x51c9b64","0x0","0x24a70775","0x51c9b64","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x51c9b64","0x0","0x24a70775","0x51c9b64","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51c9b64","hex":"01 00 00 00 00 00 00 00 00 00 fc 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51c9b64","hex":"01 00 00 00 00 00 00 00 00 00 fc 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:27.177Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x2e","0x51c9b64","0x0","0x24a708bd","0x51c9b64","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x51c9b64","0x0","0x24a708bd","0x51c9b64","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51c9b64","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x51c9b64","hex":"01 00 00 00 00 00 00 00 00 00 fc 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51c9b64","hex":"01 00 00 00 00 00 00 00 00 00 fc 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:27.182Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:27.182Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:27.182Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:27.183Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:27.183Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x51c9b64","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x51c9b64","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x18e2098","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51c9b64","hex":"01 00 34 00 00 00 00 00 00 00 5d 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 80 f8 ee 36 cc d4 dc 01 06 0a 00 00 00 80 f8 ee 36 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51c9b64","hex":"01 00 34 00 00 00 00 00 00 00 5d 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 80 f8 ee 36 cc d4 dc 01 06 0a 00 00 00 80 f8 ee 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:27.483Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x7ffd","0x62","0x51c9b64","0x24a707c5","0x17ee8a0","0x18e2094","0x18e1ff0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x51c9b64","0x24a707c5","0x17ee8a0","0x18e2094","0x18e1ff0","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51c9b64","hex":"01 00 34 00 00 00 00 00 00 00 5d 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 80 f8 ee 36 cc d4 dc 01 06 0a 00 00 00 80 f8 ee 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51c9b64","hex":"01 00 34 00 00 00 00 00 00 00 5d 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 80 f8 ee 36 cc d4 dc 01 06 0a 00 00 00 80 f8 ee 36 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:27.489Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x62","0x51c9b64","0x0","0x24a70775","0x51c9b64","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51c9b64","0x0","0x24a70775","0x51c9b64","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51c9b64","hex":"01 00 34 00 00 00 00 00 00 00 5d 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 80 f8 ee 36 cc d4 dc 01 06 0a 00 00 00 80 f8 ee 36 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51c9b64","hex":"01 00 34 00 00 00 00 00 00 00 5d 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 80 f8 ee 36 cc d4 dc 01 06 0a 00 00 00 80 f8 ee 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:27.496Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x62","0x51c9b64","0x0","0x24a708bd","0x51c9b64","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51c9b64","0x0","0x24a708bd","0x51c9b64","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51c9b64","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51c9b64","hex":"01 00 34 00 00 00 00 00 00 00 5d 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 80 f8 ee 36 cc d4 dc 01 06 0a 00 00 00 80 f8 ee 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51c9b64","hex":"01 00 34 00 00 00 00 00 00 00 5d 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 80 f8 ee 36 cc d4 dc 01 06 0a 00 00 00 80 f8 ee 36 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:27.502Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:27.502Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:27.502Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:27.502Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:27.502Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x51af524","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x51af524","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x5206ab0","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51af524","hex":"01 00 34 00 00 00 00 00 00 00 5e 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 80 f8 ee 36 cc d4 dc 01 06 0a 00 00 00 80 f8 ee 36 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51af524","hex":"01 00 34 00 00 00 00 00 00 00 5e 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 80 f8 ee 36 cc d4 dc 01 06 0a 00 00 00 80 f8 ee 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:27.510Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x7ffe","0x62","0x51af524","0x24a707c5","0x17ee8a0","0x5206aac","0x5206a08","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x51af524","0x24a707c5","0x17ee8a0","0x5206aac","0x5206a08","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51af524","hex":"01 00 34 00 00 00 00 00 00 00 5e 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 80 f8 ee 36 cc d4 dc 01 06 0a 00 00 00 80 f8 ee 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51af524","hex":"01 00 34 00 00 00 00 00 00 00 5e 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 80 f8 ee 36 cc d4 dc 01 06 0a 00 00 00 80 f8 ee 36 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:27.517Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x62","0x51af524","0x0","0x24a70775","0x51af524","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51af524","0x0","0x24a70775","0x51af524","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51af524","hex":"01 00 34 00 00 00 00 00 00 00 5e 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 80 f8 ee 36 cc d4 dc 01 06 0a 00 00 00 80 f8 ee 36 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51af524","hex":"01 00 34 00 00 00 00 00 00 00 5e 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 80 f8 ee 36 cc d4 dc 01 06 0a 00 00 00 80 f8 ee 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:27.523Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x62","0x51af524","0x0","0x24a708bd","0x51af524","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51af524","0x0","0x24a708bd","0x51af524","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51af524","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51af524","hex":"01 00 34 00 00 00 00 00 00 00 5e 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 80 f8 ee 36 cc d4 dc 01 06 0a 00 00 00 80 f8 ee 36 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51af524","hex":"01 00 34 00 00 00 00 00 00 00 5e 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 80 f8 ee 36 cc d4 dc 01 06 0a 00 00 00 80 f8 ee 36 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:27.529Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:27.530Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:27.530Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:27.530Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:27.530Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x51c463c","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x51c463c","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x18e1508","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51c463c","hex":"01 00 34 00 00 00 00 00 00 00 fd 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 70 3b 07 37 cc d4 dc 01 06 0a 00 00 00 60 14 07 37 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51c463c","hex":"01 00 34 00 00 00 00 00 00 00 fd 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 70 3b 07 37 cc d4 dc 01 06 0a 00 00 00 60 14 07 37 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:27.598Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x7ffd","0x62","0x51c463c","0x24a707c5","0x17ee8a0","0x18e1504","0x18e1460","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x51c463c","0x24a707c5","0x17ee8a0","0x18e1504","0x18e1460","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51c463c","hex":"01 00 34 00 00 00 00 00 00 00 fd 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 70 3b 07 37 cc d4 dc 01 06 0a 00 00 00 60 14 07 37 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51c463c","hex":"01 00 34 00 00 00 00 00 00 00 fd 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 70 3b 07 37 cc d4 dc 01 06 0a 00 00 00 60 14 07 37 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:27.604Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x62","0x51c463c","0x0","0x24a70775","0x51c463c","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51c463c","0x0","0x24a70775","0x51c463c","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51c463c","hex":"01 00 34 00 00 00 00 00 00 00 fd 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 70 3b 07 37 cc d4 dc 01 06 0a 00 00 00 60 14 07 37 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51c463c","hex":"01 00 34 00 00 00 00 00 00 00 fd 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 70 3b 07 37 cc d4 dc 01 06 0a 00 00 00 60 14 07 37 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:27.610Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x62","0x51c463c","0x0","0x24a708bd","0x51c463c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51c463c","0x0","0x24a708bd","0x51c463c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51c463c","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51c463c","hex":"01 00 34 00 00 00 00 00 00 00 fd 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 70 3b 07 37 cc d4 dc 01 06 0a 00 00 00 60 14 07 37 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51c463c","hex":"01 00 34 00 00 00 00 00 00 00 fd 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 70 3b 07 37 cc d4 dc 01 06 0a 00 00 00 60 14 07 37 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:27.615Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x18b25fc","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x18b25fc","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x5209960","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18b25fc","hex":"01 00 00 00 00 00 00 00 00 00 5d 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18b25fc","hex":"01 00 00 00 00 00 00 00 00 00 5d 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:27.622Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x51c684c","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x51c684c","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x18e2c28","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51c684c","hex":"01 00 00 00 00 00 00 00 00 00 5e 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x51c684c","hex":"01 00 00 00 00 00 00 00 00 00 5e 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:27.630Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:27.631Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:27.631Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:27.631Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:27.631Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x1","0x2e","0x18b25fc","0x27e7023d","0x23eed68","0x520995c","0x52098b8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18b25fc","0x27e7023d","0x23eed68","0x520995c","0x52098b8","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18b25fc","hex":"01 00 00 00 00 00 00 00 00 00 5d 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18b25fc","hex":"01 00 00 00 00 00 00 00 00 00 5d 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:27.637Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x2e","0x18b25fc","0x0","0x27e703ad","0x18b25fc","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18b25fc","0x0","0x27e703ad","0x18b25fc","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18b25fc","hex":"01 00 00 00 00 00 00 00 00 00 5d 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18b25fc","hex":"01 00 00 00 00 00 00 00 00 00 5d 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:27.643Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x2e","0x18b25fc","0x0","0x27e703f5","0x18b25fc","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18b25fc","0x0","0x27e703f5","0x18b25fc","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b25fc","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18b25fc","hex":"01 00 00 00 00 00 00 00 00 00 5d 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18b25fc","hex":"01 00 00 00 00 00 00 00 00 00 5d 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:27.647Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:27.648Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:27.648Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:27.648Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:27.648Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x1","0x2e","0x51c684c","0x255c006d","0x85ef38","0x18e2c24","0x18e2b80","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x51c684c","0x255c006d","0x85ef38","0x18e2c24","0x18e2b80","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51c684c","hex":"01 00 00 00 00 00 00 00 00 00 5e 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51c684c","hex":"01 00 00 00 00 00 00 00 00 00 5e 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:27.654Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x2e","0x51c684c","0x0","0x255c019d","0x51c684c","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x51c684c","0x0","0x255c019d","0x51c684c","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51c684c","hex":"01 00 00 00 00 00 00 00 00 00 5e 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51c684c","hex":"01 00 00 00 00 00 00 00 00 00 5e 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:27.661Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x2e","0x51c684c","0x0","0x255c0125","0x51c684c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x51c684c","0x0","0x255c0125","0x51c684c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51c684c","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x51c684c","hex":"01 00 00 00 00 00 00 00 00 00 5e 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51c684c","hex":"01 00 00 00 00 00 00 00 00 00 5e 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:27.666Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x195f11c","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x195f11c","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x1878180","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x195f11c","hex":"01 00 00 00 00 00 00 00 00 00 fd 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x195f11c","hex":"01 00 00 00 00 00 00 00 00 00 fd 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:27.673Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:27.674Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:27.674Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:27.674Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:27.674Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x2","0x2e","0x195f11c","0x27e7023d","0x23eed68","0x187817c","0x18780d8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x195f11c","0x27e7023d","0x23eed68","0x187817c","0x18780d8","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x195f11c","hex":"01 00 00 00 00 00 00 00 00 00 fd 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x195f11c","hex":"01 00 00 00 00 00 00 00 00 00 fd 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:27.679Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x2e","0x195f11c","0x0","0x27e703ad","0x195f11c","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x195f11c","0x0","0x27e703ad","0x195f11c","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x195f11c","hex":"01 00 00 00 00 00 00 00 00 00 fd 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x195f11c","hex":"01 00 00 00 00 00 00 00 00 00 fd 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:27.685Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x2e","0x195f11c","0x0","0x27e703f5","0x195f11c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x195f11c","0x0","0x27e703f5","0x195f11c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x195f11c","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x195f11c","hex":"01 00 00 00 00 00 00 00 00 00 fd 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x195f11c","hex":"01 00 00 00 00 00 00 00 00 00 fd 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:27.690Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:27.691Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:27.691Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:27.691Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:27.691Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x18256c4","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x18256c4","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x18e2c28","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18256c4","hex":"01 00 34 00 00 00 00 00 00 00 5f 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 91 3b 37 cc d4 dc 01 06 0a 00 00 00 e0 91 3b 37 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18256c4","hex":"01 00 34 00 00 00 00 00 00 00 5f 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 91 3b 37 cc d4 dc 01 06 0a 00 00 00 e0 91 3b 37 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:28.014Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffd","0x62","0x18256c4","0x27e7023d","0x23eed68","0x18e2c24","0x18e2b80","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18256c4","0x27e7023d","0x23eed68","0x18e2c24","0x18e2b80","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18256c4","hex":"01 00 34 00 00 00 00 00 00 00 5f 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 91 3b 37 cc d4 dc 01 06 0a 00 00 00 e0 91 3b 37 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18256c4","hex":"01 00 34 00 00 00 00 00 00 00 5f 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 91 3b 37 cc d4 dc 01 06 0a 00 00 00 e0 91 3b 37 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:28.019Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x18256c4","0x0","0x27e703ad","0x18256c4","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18256c4","0x0","0x27e703ad","0x18256c4","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18256c4","hex":"01 00 34 00 00 00 00 00 00 00 5f 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 91 3b 37 cc d4 dc 01 06 0a 00 00 00 e0 91 3b 37 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18256c4","hex":"01 00 34 00 00 00 00 00 00 00 5f 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 91 3b 37 cc d4 dc 01 06 0a 00 00 00 e0 91 3b 37 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:28.026Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x18256c4","0x0","0x27e703f5","0x18256c4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18256c4","0x0","0x27e703f5","0x18256c4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18256c4","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18256c4","hex":"01 00 34 00 00 00 00 00 00 00 5f 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 91 3b 37 cc d4 dc 01 06 0a 00 00 00 e0 91 3b 37 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18256c4","hex":"01 00 34 00 00 00 00 00 00 00 5f 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 91 3b 37 cc d4 dc 01 06 0a 00 00 00 e0 91 3b 37 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:28.031Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:28.031Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:28.031Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:28.031Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:28.032Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x51cac6c","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x51cac6c","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x5209960","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51cac6c","hex":"01 00 34 00 00 00 00 00 00 00 60 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 91 3b 37 cc d4 dc 01 06 0a 00 00 00 e0 91 3b 37 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51cac6c","hex":"01 00 34 00 00 00 00 00 00 00 60 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 91 3b 37 cc d4 dc 01 06 0a 00 00 00 e0 91 3b 37 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:28.039Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffe","0x62","0x51cac6c","0x27e7023d","0x23eed68","0x520995c","0x52098b8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x51cac6c","0x27e7023d","0x23eed68","0x520995c","0x52098b8","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51cac6c","hex":"01 00 34 00 00 00 00 00 00 00 60 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 91 3b 37 cc d4 dc 01 06 0a 00 00 00 e0 91 3b 37 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51cac6c","hex":"01 00 34 00 00 00 00 00 00 00 60 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 91 3b 37 cc d4 dc 01 06 0a 00 00 00 e0 91 3b 37 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:28.045Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x51cac6c","0x0","0x27e703ad","0x51cac6c","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51cac6c","0x0","0x27e703ad","0x51cac6c","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51cac6c","hex":"01 00 34 00 00 00 00 00 00 00 60 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 91 3b 37 cc d4 dc 01 06 0a 00 00 00 e0 91 3b 37 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51cac6c","hex":"01 00 34 00 00 00 00 00 00 00 60 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 91 3b 37 cc d4 dc 01 06 0a 00 00 00 e0 91 3b 37 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:28.051Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x51cac6c","0x0","0x27e703f5","0x51cac6c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51cac6c","0x0","0x27e703f5","0x51cac6c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51cac6c","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51cac6c","hex":"01 00 34 00 00 00 00 00 00 00 60 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 91 3b 37 cc d4 dc 01 06 0a 00 00 00 e0 91 3b 37 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51cac6c","hex":"01 00 34 00 00 00 00 00 00 00 60 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 91 3b 37 cc d4 dc 01 06 0a 00 00 00 e0 91 3b 37 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:28.056Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:28.057Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:28.057Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:28.057Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:28.057Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x51c684c","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x51c684c","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x18e2c28","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51c684c","hex":"01 00 34 00 00 00 00 00 00 00 fe 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 38 53 37 cc d4 dc 01 06 0a 00 00 00 90 38 53 37 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51c684c","hex":"01 00 34 00 00 00 00 00 00 00 fe 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 38 53 37 cc d4 dc 01 06 0a 00 00 00 90 38 53 37 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:28.097Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffd","0x62","0x51c684c","0x27e7023d","0x23eed68","0x18e2c24","0x18e2b80","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x51c684c","0x27e7023d","0x23eed68","0x18e2c24","0x18e2b80","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51c684c","hex":"01 00 34 00 00 00 00 00 00 00 fe 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 38 53 37 cc d4 dc 01 06 0a 00 00 00 90 38 53 37 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51c684c","hex":"01 00 34 00 00 00 00 00 00 00 fe 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 38 53 37 cc d4 dc 01 06 0a 00 00 00 90 38 53 37 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:28.103Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x51c684c","0x0","0x27e703ad","0x51c684c","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51c684c","0x0","0x27e703ad","0x51c684c","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51c684c","hex":"01 00 34 00 00 00 00 00 00 00 fe 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 38 53 37 cc d4 dc 01 06 0a 00 00 00 90 38 53 37 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51c684c","hex":"01 00 34 00 00 00 00 00 00 00 fe 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 38 53 37 cc d4 dc 01 06 0a 00 00 00 90 38 53 37 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:28.109Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x51c684c","0x0","0x27e703f5","0x51c684c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51c684c","0x0","0x27e703f5","0x51c684c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51c684c","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51c684c","hex":"01 00 34 00 00 00 00 00 00 00 fe 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 38 53 37 cc d4 dc 01 06 0a 00 00 00 90 38 53 37 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51c684c","hex":"01 00 34 00 00 00 00 00 00 00 fe 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 38 53 37 cc d4 dc 01 06 0a 00 00 00 90 38 53 37 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:28.114Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:28.114Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:28.115Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:28.115Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:28.115Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x51fa864","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x51fa864","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x5205f20","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51fa864","hex":"01 00 00 00 00 00 00 00 00 00 60 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x51fa864","hex":"01 00 00 00 00 00 00 00 00 00 60 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:28.151Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x1960224","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x1960224","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x18e63c0","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1960224","hex":"01 00 00 00 00 00 00 00 00 00 5f 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x1960224","hex":"01 00 00 00 00 00 00 00 00 00 5f 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:28.158Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x1","0x2e","0x51fa864","0x27e7023d","0x23eed68","0x5205f1c","0x5205e78","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x51fa864","0x27e7023d","0x23eed68","0x5205f1c","0x5205e78","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51fa864","hex":"01 00 00 00 00 00 00 00 00 00 60 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51fa864","hex":"01 00 00 00 00 00 00 00 00 00 60 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:28.164Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x2e","0x51fa864","0x0","0x27e703ad","0x51fa864","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x51fa864","0x0","0x27e703ad","0x51fa864","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51fa864","hex":"01 00 00 00 00 00 00 00 00 00 60 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51fa864","hex":"01 00 00 00 00 00 00 00 00 00 60 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:28.169Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x2e","0x51fa864","0x0","0x27e703f5","0x51fa864","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x51fa864","0x0","0x27e703f5","0x51fa864","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51fa864","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x51fa864","hex":"01 00 00 00 00 00 00 00 00 00 60 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51fa864","hex":"01 00 00 00 00 00 00 00 00 00 60 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:28.174Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:28.174Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:28.174Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:28.175Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:28.175Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x1","0x2e","0x1960224","0x255c006d","0x85ef38","0x18e63bc","0x18e6318","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x1960224","0x255c006d","0x85ef38","0x18e63bc","0x18e6318","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1960224","hex":"01 00 00 00 00 00 00 00 00 00 5f 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1960224","hex":"01 00 00 00 00 00 00 00 00 00 5f 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:28.180Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x2e","0x1960224","0x0","0x255c019d","0x1960224","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x1960224","0x0","0x255c019d","0x1960224","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1960224","hex":"01 00 00 00 00 00 00 00 00 00 5f 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1960224","hex":"01 00 00 00 00 00 00 00 00 00 5f 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:28.186Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x2e","0x1960224","0x0","0x255c0125","0x1960224","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x1960224","0x0","0x255c0125","0x1960224","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1960224","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x1960224","hex":"01 00 00 00 00 00 00 00 00 00 5f 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1960224","hex":"01 00 00 00 00 00 00 00 00 00 5f 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:28.191Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:28.191Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:28.191Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:28.191Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:28.192Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x18256c4","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x18256c4","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x18e2c28","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18256c4","hex":"01 00 00 00 00 00 00 00 00 00 fe 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18256c4","hex":"01 00 00 00 00 00 00 00 00 00 fe 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:28.201Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x2","0x2e","0x18256c4","0x255c006d","0x85ef38","0x18e2c24","0x18e2b80","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x18256c4","0x255c006d","0x85ef38","0x18e2c24","0x18e2b80","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18256c4","hex":"01 00 00 00 00 00 00 00 00 00 fe 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18256c4","hex":"01 00 00 00 00 00 00 00 00 00 fe 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:28.207Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x2e","0x18256c4","0x0","0x255c019d","0x18256c4","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18256c4","0x0","0x255c019d","0x18256c4","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18256c4","hex":"01 00 00 00 00 00 00 00 00 00 fe 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18256c4","hex":"01 00 00 00 00 00 00 00 00 00 fe 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:28.213Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x2e","0x18256c4","0x0","0x255c0125","0x18256c4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18256c4","0x0","0x255c0125","0x18256c4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18256c4","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18256c4","hex":"01 00 00 00 00 00 00 00 00 00 fe 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18256c4","hex":"01 00 00 00 00 00 00 00 00 00 fe 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:28.218Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:28.218Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:28.219Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:28.219Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:28.219Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x18b03ec","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x18b03ec","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x18e6988","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b03ec","hex":"01 00 34 00 00 00 00 00 00 00 61 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 10 b6 87 37 cc d4 dc 01 06 0a 00 00 00 10 b6 87 37 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18b03ec","hex":"01 00 34 00 00 00 00 00 00 00 61 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 10 b6 87 37 cc d4 dc 01 06 0a 00 00 00 10 b6 87 37 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:28.487Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x7ffd","0x62","0x18b03ec","0x255c006d","0x85ef38","0x18e6984","0x18e68e0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18b03ec","0x255c006d","0x85ef38","0x18e6984","0x18e68e0","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b03ec","hex":"01 00 34 00 00 00 00 00 00 00 61 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 10 b6 87 37 cc d4 dc 01 06 0a 00 00 00 10 b6 87 37 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b03ec","hex":"01 00 34 00 00 00 00 00 00 00 61 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 10 b6 87 37 cc d4 dc 01 06 0a 00 00 00 10 b6 87 37 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:28.493Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x62","0x18b03ec","0x0","0x255c019d","0x18b03ec","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18b03ec","0x0","0x255c019d","0x18b03ec","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b03ec","hex":"01 00 34 00 00 00 00 00 00 00 61 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 10 b6 87 37 cc d4 dc 01 06 0a 00 00 00 10 b6 87 37 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b03ec","hex":"01 00 34 00 00 00 00 00 00 00 61 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 10 b6 87 37 cc d4 dc 01 06 0a 00 00 00 10 b6 87 37 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:28.499Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x62","0x18b03ec","0x0","0x255c0125","0x18b03ec","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18b03ec","0x0","0x255c0125","0x18b03ec","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b03ec","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18b03ec","hex":"01 00 34 00 00 00 00 00 00 00 61 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 10 b6 87 37 cc d4 dc 01 06 0a 00 00 00 10 b6 87 37 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b03ec","hex":"01 00 34 00 00 00 00 00 00 00 61 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 10 b6 87 37 cc d4 dc 01 06 0a 00 00 00 10 b6 87 37 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:28.505Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:28.505Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:28.505Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:28.506Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:28.506Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x18256c4","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x18256c4","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x18e2c28","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18256c4","hex":"01 00 34 00 00 00 00 00 00 00 62 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 10 b6 87 37 cc d4 dc 01 06 0a 00 00 00 10 b6 87 37 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18256c4","hex":"01 00 34 00 00 00 00 00 00 00 62 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 10 b6 87 37 cc d4 dc 01 06 0a 00 00 00 10 b6 87 37 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:28.513Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x7ffe","0x62","0x18256c4","0x255c006d","0x85ef38","0x18e2c24","0x18e2b80","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x18256c4","0x255c006d","0x85ef38","0x18e2c24","0x18e2b80","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18256c4","hex":"01 00 34 00 00 00 00 00 00 00 62 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 10 b6 87 37 cc d4 dc 01 06 0a 00 00 00 10 b6 87 37 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18256c4","hex":"01 00 34 00 00 00 00 00 00 00 62 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 10 b6 87 37 cc d4 dc 01 06 0a 00 00 00 10 b6 87 37 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:28.520Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x62","0x18256c4","0x0","0x255c019d","0x18256c4","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18256c4","0x0","0x255c019d","0x18256c4","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18256c4","hex":"01 00 34 00 00 00 00 00 00 00 62 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 10 b6 87 37 cc d4 dc 01 06 0a 00 00 00 10 b6 87 37 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18256c4","hex":"01 00 34 00 00 00 00 00 00 00 62 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 10 b6 87 37 cc d4 dc 01 06 0a 00 00 00 10 b6 87 37 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:28.526Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x62","0x18256c4","0x0","0x255c0125","0x18256c4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18256c4","0x0","0x255c0125","0x18256c4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18256c4","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18256c4","hex":"01 00 34 00 00 00 00 00 00 00 62 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 10 b6 87 37 cc d4 dc 01 06 0a 00 00 00 10 b6 87 37 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18256c4","hex":"01 00 34 00 00 00 00 00 00 00 62 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 10 b6 87 37 cc d4 dc 01 06 0a 00 00 00 10 b6 87 37 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:28.531Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:28.531Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:28.531Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:28.531Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:28.531Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x195e014","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x195e014","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x18e6988","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x195e014","hex":"01 00 00 00 00 00 00 00 00 00 62 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x195e014","hex":"01 00 00 00 00 00 00 00 00 00 62 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:28.587Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x51c684c","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x51c684c","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x18e2c28","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51c684c","hex":"01 00 00 00 00 00 00 00 00 00 61 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x51c684c","hex":"01 00 00 00 00 00 00 00 00 00 61 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:28.594Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x1","0x2e","0x195e014","0x255c006d","0x85ef38","0x18e6984","0x18e68e0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x195e014","0x255c006d","0x85ef38","0x18e6984","0x18e68e0","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x195e014","hex":"01 00 00 00 00 00 00 00 00 00 62 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x195e014","hex":"01 00 00 00 00 00 00 00 00 00 62 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:28.599Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x2e","0x195e014","0x0","0x255c019d","0x195e014","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x195e014","0x0","0x255c019d","0x195e014","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x195e014","hex":"01 00 00 00 00 00 00 00 00 00 62 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x195e014","hex":"01 00 00 00 00 00 00 00 00 00 62 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:28.606Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x2e","0x195e014","0x0","0x255c0125","0x195e014","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x195e014","0x0","0x255c0125","0x195e014","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x195e014","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x195e014","hex":"01 00 00 00 00 00 00 00 00 00 62 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x195e014","hex":"01 00 00 00 00 00 00 00 00 00 62 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:28.610Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x51c9b64","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x51c9b64","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x18e2098","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51c9b64","hex":"01 00 34 00 00 00 00 00 00 00 ff 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 83 9f 37 cc d4 dc 01 06 0a 00 00 00 d0 83 9f 37 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51c9b64","hex":"01 00 34 00 00 00 00 00 00 00 ff 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 83 9f 37 cc d4 dc 01 06 0a 00 00 00 d0 83 9f 37 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:28.617Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:28.618Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:28.618Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:28.618Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:28.618Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x1","0x2e","0x51c684c","0x27e7023d","0x23eed68","0x18e2c24","0x18e2b80","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x51c684c","0x27e7023d","0x23eed68","0x18e2c24","0x18e2b80","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51c684c","hex":"01 00 00 00 00 00 00 00 00 00 61 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51c684c","hex":"01 00 00 00 00 00 00 00 00 00 61 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:28.624Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x2e","0x51c684c","0x0","0x27e703ad","0x51c684c","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x51c684c","0x0","0x27e703ad","0x51c684c","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51c684c","hex":"01 00 00 00 00 00 00 00 00 00 61 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51c684c","hex":"01 00 00 00 00 00 00 00 00 00 61 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:28.631Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x2e","0x51c684c","0x0","0x27e703f5","0x51c684c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x51c684c","0x0","0x27e703f5","0x51c684c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51c684c","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x51c684c","hex":"01 00 00 00 00 00 00 00 00 00 61 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51c684c","hex":"01 00 00 00 00 00 00 00 00 00 61 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:28.636Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:28.636Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:28.637Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:28.637Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:28.637Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x7ffd","0x62","0x51c9b64","0x24a707c5","0x17ee8a0","0x18e2094","0x18e1ff0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x51c9b64","0x24a707c5","0x17ee8a0","0x18e2094","0x18e1ff0","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51c9b64","hex":"01 00 34 00 00 00 00 00 00 00 ff 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 83 9f 37 cc d4 dc 01 06 0a 00 00 00 d0 83 9f 37 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51c9b64","hex":"01 00 34 00 00 00 00 00 00 00 ff 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 83 9f 37 cc d4 dc 01 06 0a 00 00 00 d0 83 9f 37 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:28.643Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x62","0x51c9b64","0x0","0x24a70775","0x51c9b64","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51c9b64","0x0","0x24a70775","0x51c9b64","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51c9b64","hex":"01 00 34 00 00 00 00 00 00 00 ff 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 83 9f 37 cc d4 dc 01 06 0a 00 00 00 d0 83 9f 37 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51c9b64","hex":"01 00 34 00 00 00 00 00 00 00 ff 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 83 9f 37 cc d4 dc 01 06 0a 00 00 00 d0 83 9f 37 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:28.650Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x62","0x51c9b64","0x0","0x24a708bd","0x51c9b64","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51c9b64","0x0","0x24a708bd","0x51c9b64","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51c9b64","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51c9b64","hex":"01 00 34 00 00 00 00 00 00 00 ff 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 83 9f 37 cc d4 dc 01 06 0a 00 00 00 d0 83 9f 37 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51c9b64","hex":"01 00 34 00 00 00 00 00 00 00 ff 81 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 83 9f 37 cc d4 dc 01 06 0a 00 00 00 d0 83 9f 37 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:28.655Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:28.655Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:28.655Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:28.656Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:28.656Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x18b5914","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x18b5914","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x5208dd0","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18b5914","hex":"01 00 00 00 00 00 00 00 00 00 ff 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18b5914","hex":"01 00 00 00 00 00 00 00 00 00 ff 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:28.692Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x2","0x2e","0x18b5914","0x24a707c5","0x17ee8a0","0x5208dcc","0x5208d28","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x18b5914","0x24a707c5","0x17ee8a0","0x5208dcc","0x5208d28","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18b5914","hex":"01 00 00 00 00 00 00 00 00 00 ff 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18b5914","hex":"01 00 00 00 00 00 00 00 00 00 ff 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:28.697Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x2e","0x18b5914","0x0","0x24a70775","0x18b5914","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18b5914","0x0","0x24a70775","0x18b5914","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18b5914","hex":"01 00 00 00 00 00 00 00 00 00 ff 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18b5914","hex":"01 00 00 00 00 00 00 00 00 00 ff 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:28.704Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x2e","0x18b5914","0x0","0x24a708bd","0x18b5914","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18b5914","0x0","0x24a708bd","0x18b5914","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b5914","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18b5914","hex":"01 00 00 00 00 00 00 00 00 00 ff 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18b5914","hex":"01 00 00 00 00 00 00 00 00 00 ff 81 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:28.709Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:28.709Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:28.709Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:28.709Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:28.710Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x18b480c","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x18b480c","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x5208dd0","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b480c","hex":"01 00 34 00 00 00 00 00 00 00 63 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 60 28 d4 37 cc d4 dc 01 06 0a 00 00 00 60 28 d4 37 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18b480c","hex":"01 00 34 00 00 00 00 00 00 00 63 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 60 28 d4 37 cc d4 dc 01 06 0a 00 00 00 60 28 d4 37 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:29.003Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x7ffd","0x62","0x18b480c","0x24a707c5","0x17ee8a0","0x5208dcc","0x5208d28","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18b480c","0x24a707c5","0x17ee8a0","0x5208dcc","0x5208d28","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b480c","hex":"01 00 34 00 00 00 00 00 00 00 63 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 60 28 d4 37 cc d4 dc 01 06 0a 00 00 00 60 28 d4 37 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b480c","hex":"01 00 34 00 00 00 00 00 00 00 63 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 60 28 d4 37 cc d4 dc 01 06 0a 00 00 00 60 28 d4 37 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:29.008Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x62","0x18b480c","0x0","0x24a70775","0x18b480c","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18b480c","0x0","0x24a70775","0x18b480c","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b480c","hex":"01 00 34 00 00 00 00 00 00 00 63 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 60 28 d4 37 cc d4 dc 01 06 0a 00 00 00 60 28 d4 37 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b480c","hex":"01 00 34 00 00 00 00 00 00 00 63 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 60 28 d4 37 cc d4 dc 01 06 0a 00 00 00 60 28 d4 37 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:29.015Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x62","0x18b480c","0x0","0x24a708bd","0x18b480c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18b480c","0x0","0x24a708bd","0x18b480c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b480c","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18b480c","hex":"01 00 34 00 00 00 00 00 00 00 63 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 60 28 d4 37 cc d4 dc 01 06 0a 00 00 00 60 28 d4 37 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b480c","hex":"01 00 34 00 00 00 00 00 00 00 63 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 60 28 d4 37 cc d4 dc 01 06 0a 00 00 00 60 28 d4 37 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:29.020Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:29.020Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:29.020Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:29.021Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:29.021Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x51c5744","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x51c5744","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x18e2098","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51c5744","hex":"01 00 34 00 00 00 00 00 00 00 64 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 60 28 d4 37 cc d4 dc 01 06 0a 00 00 00 60 28 d4 37 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51c5744","hex":"01 00 34 00 00 00 00 00 00 00 64 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 60 28 d4 37 cc d4 dc 01 06 0a 00 00 00 60 28 d4 37 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:29.028Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x7ffe","0x62","0x51c5744","0x24a707c5","0x17ee8a0","0x18e2094","0x18e1ff0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x51c5744","0x24a707c5","0x17ee8a0","0x18e2094","0x18e1ff0","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51c5744","hex":"01 00 34 00 00 00 00 00 00 00 64 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 60 28 d4 37 cc d4 dc 01 06 0a 00 00 00 60 28 d4 37 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51c5744","hex":"01 00 34 00 00 00 00 00 00 00 64 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 60 28 d4 37 cc d4 dc 01 06 0a 00 00 00 60 28 d4 37 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:29.034Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x62","0x51c5744","0x0","0x24a70775","0x51c5744","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51c5744","0x0","0x24a70775","0x51c5744","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51c5744","hex":"01 00 34 00 00 00 00 00 00 00 64 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 60 28 d4 37 cc d4 dc 01 06 0a 00 00 00 60 28 d4 37 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51c5744","hex":"01 00 34 00 00 00 00 00 00 00 64 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 60 28 d4 37 cc d4 dc 01 06 0a 00 00 00 60 28 d4 37 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:29.040Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x62","0x51c5744","0x0","0x24a708bd","0x51c5744","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51c5744","0x0","0x24a708bd","0x51c5744","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51c5744","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51c5744","hex":"01 00 34 00 00 00 00 00 00 00 64 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 60 28 d4 37 cc d4 dc 01 06 0a 00 00 00 60 28 d4 37 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51c5744","hex":"01 00 34 00 00 00 00 00 00 00 64 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 60 28 d4 37 cc d4 dc 01 06 0a 00 00 00 60 28 d4 37 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:29.045Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:29.046Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:29.046Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:29.046Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:29.046Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18b5914","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18b5914","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x5208dd0","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b5914","hex":"01 00 34 00 00 00 00 00 00 00 00 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 f6 eb 37 cc d4 dc 01 06 0a 00 00 00 20 f6 eb 37 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18b5914","hex":"01 00 34 00 00 00 00 00 00 00 00 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 f6 eb 37 cc d4 dc 01 06 0a 00 00 00 20 f6 eb 37 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:29.097Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x7ffd","0x62","0x18b5914","0x24a707c5","0x17ee8a0","0x5208dcc","0x5208d28","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18b5914","0x24a707c5","0x17ee8a0","0x5208dcc","0x5208d28","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b5914","hex":"01 00 34 00 00 00 00 00 00 00 00 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 f6 eb 37 cc d4 dc 01 06 0a 00 00 00 20 f6 eb 37 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b5914","hex":"01 00 34 00 00 00 00 00 00 00 00 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 f6 eb 37 cc d4 dc 01 06 0a 00 00 00 20 f6 eb 37 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:29.103Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x62","0x18b5914","0x0","0x24a70775","0x18b5914","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18b5914","0x0","0x24a70775","0x18b5914","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b5914","hex":"01 00 34 00 00 00 00 00 00 00 00 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 f6 eb 37 cc d4 dc 01 06 0a 00 00 00 20 f6 eb 37 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b5914","hex":"01 00 34 00 00 00 00 00 00 00 00 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 f6 eb 37 cc d4 dc 01 06 0a 00 00 00 20 f6 eb 37 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:29.109Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x62","0x18b5914","0x0","0x24a708bd","0x18b5914","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18b5914","0x0","0x24a708bd","0x18b5914","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b5914","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18b5914","hex":"01 00 34 00 00 00 00 00 00 00 00 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 f6 eb 37 cc d4 dc 01 06 0a 00 00 00 20 f6 eb 37 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b5914","hex":"01 00 34 00 00 00 00 00 00 00 00 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 f6 eb 37 cc d4 dc 01 06 0a 00 00 00 20 f6 eb 37 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:29.114Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:29.114Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:29.114Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:29.115Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:29.115Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x51bf114","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x51bf114","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x18e1508","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51bf114","hex":"01 00 00 00 00 00 00 00 00 00 64 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x51bf114","hex":"01 00 00 00 00 00 00 00 00 00 64 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:29.132Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x1","0x2e","0x51bf114","0x24a707c5","0x17ee8a0","0x18e1504","0x18e1460","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x51bf114","0x24a707c5","0x17ee8a0","0x18e1504","0x18e1460","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51bf114","hex":"01 00 00 00 00 00 00 00 00 00 64 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51bf114","hex":"01 00 00 00 00 00 00 00 00 00 64 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:29.137Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x2e","0x51bf114","0x0","0x24a70775","0x51bf114","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x51bf114","0x0","0x24a70775","0x51bf114","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51bf114","hex":"01 00 00 00 00 00 00 00 00 00 64 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51bf114","hex":"01 00 00 00 00 00 00 00 00 00 64 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:29.144Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x2e","0x51bf114","0x0","0x24a708bd","0x51bf114","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x51bf114","0x0","0x24a708bd","0x51bf114","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51bf114","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x51bf114","hex":"01 00 00 00 00 00 00 00 00 00 64 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51bf114","hex":"01 00 00 00 00 00 00 00 00 00 64 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:29.149Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x17f7494","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x17f7494","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x52036a8","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x17f7494","hex":"01 00 00 00 00 00 00 00 00 00 63 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x17f7494","hex":"01 00 00 00 00 00 00 00 00 00 63 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:29.156Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:29.156Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:29.156Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:29.156Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:29.157Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x1","0x2e","0x17f7494","0x27e7023d","0x23eed68","0x52036a4","0x5203600","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x17f7494","0x27e7023d","0x23eed68","0x52036a4","0x5203600","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x17f7494","hex":"01 00 00 00 00 00 00 00 00 00 63 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x17f7494","hex":"01 00 00 00 00 00 00 00 00 00 63 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:29.162Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x2e","0x17f7494","0x0","0x27e703ad","0x17f7494","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x17f7494","0x0","0x27e703ad","0x17f7494","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x17f7494","hex":"01 00 00 00 00 00 00 00 00 00 63 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x17f7494","hex":"01 00 00 00 00 00 00 00 00 00 63 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:29.169Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x2e","0x17f7494","0x0","0x27e703f5","0x17f7494","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x17f7494","0x0","0x27e703f5","0x17f7494","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x17f7494","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x17f7494","hex":"01 00 00 00 00 00 00 00 00 00 63 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x17f7494","hex":"01 00 00 00 00 00 00 00 00 00 63 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:29.173Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:29.174Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:29.174Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:29.174Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:29.174Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x18b03ec","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x18b03ec","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x18e6988","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18b03ec","hex":"01 00 00 00 00 00 00 00 00 00 00 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18b03ec","hex":"01 00 00 00 00 00 00 00 00 00 00 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:29.184Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x2","0x2e","0x18b03ec","0x27e7023d","0x23eed68","0x18e6984","0x18e68e0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x18b03ec","0x27e7023d","0x23eed68","0x18e6984","0x18e68e0","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18b03ec","hex":"01 00 00 00 00 00 00 00 00 00 00 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18b03ec","hex":"01 00 00 00 00 00 00 00 00 00 00 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:29.189Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x2e","0x18b03ec","0x0","0x27e703ad","0x18b03ec","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18b03ec","0x0","0x27e703ad","0x18b03ec","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18b03ec","hex":"01 00 00 00 00 00 00 00 00 00 00 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18b03ec","hex":"01 00 00 00 00 00 00 00 00 00 00 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:29.195Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x2e","0x18b03ec","0x0","0x27e703f5","0x18b03ec","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18b03ec","0x0","0x27e703f5","0x18b03ec","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b03ec","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18b03ec","hex":"01 00 00 00 00 00 00 00 00 00 00 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18b03ec","hex":"01 00 00 00 00 00 00 00 00 00 00 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:29.200Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:29.200Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:29.200Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:29.200Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:29.201Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x18256c4","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x18256c4","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x18e2c28","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18256c4","hex":"01 00 34 00 00 00 00 00 00 00 65 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 90 4c 20 38 cc d4 dc 01 06 0a 00 00 00 90 4c 20 38 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18256c4","hex":"01 00 34 00 00 00 00 00 00 00 65 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 90 4c 20 38 cc d4 dc 01 06 0a 00 00 00 90 4c 20 38 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:29.491Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffd","0x62","0x18256c4","0x27e7023d","0x23eed68","0x18e2c24","0x18e2b80","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18256c4","0x27e7023d","0x23eed68","0x18e2c24","0x18e2b80","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18256c4","hex":"01 00 34 00 00 00 00 00 00 00 65 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 90 4c 20 38 cc d4 dc 01 06 0a 00 00 00 90 4c 20 38 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18256c4","hex":"01 00 34 00 00 00 00 00 00 00 65 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 90 4c 20 38 cc d4 dc 01 06 0a 00 00 00 90 4c 20 38 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:29.497Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x18256c4","0x0","0x27e703ad","0x18256c4","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18256c4","0x0","0x27e703ad","0x18256c4","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18256c4","hex":"01 00 34 00 00 00 00 00 00 00 65 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 90 4c 20 38 cc d4 dc 01 06 0a 00 00 00 90 4c 20 38 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18256c4","hex":"01 00 34 00 00 00 00 00 00 00 65 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 90 4c 20 38 cc d4 dc 01 06 0a 00 00 00 90 4c 20 38 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:29.504Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x18256c4","0x0","0x27e703f5","0x18256c4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18256c4","0x0","0x27e703f5","0x18256c4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18256c4","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18256c4","hex":"01 00 34 00 00 00 00 00 00 00 65 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 90 4c 20 38 cc d4 dc 01 06 0a 00 00 00 90 4c 20 38 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18256c4","hex":"01 00 34 00 00 00 00 00 00 00 65 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 90 4c 20 38 cc d4 dc 01 06 0a 00 00 00 90 4c 20 38 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:29.509Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:29.510Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:29.510Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:29.510Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:29.510Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x51cac6c","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x51cac6c","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x5209960","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51cac6c","hex":"01 00 34 00 00 00 00 00 00 00 66 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 90 4c 20 38 cc d4 dc 01 06 0a 00 00 00 90 4c 20 38 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51cac6c","hex":"01 00 34 00 00 00 00 00 00 00 66 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 90 4c 20 38 cc d4 dc 01 06 0a 00 00 00 90 4c 20 38 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:29.518Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffe","0x62","0x51cac6c","0x27e7023d","0x23eed68","0x520995c","0x52098b8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x51cac6c","0x27e7023d","0x23eed68","0x520995c","0x52098b8","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51cac6c","hex":"01 00 34 00 00 00 00 00 00 00 66 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 90 4c 20 38 cc d4 dc 01 06 0a 00 00 00 90 4c 20 38 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51cac6c","hex":"01 00 34 00 00 00 00 00 00 00 66 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 90 4c 20 38 cc d4 dc 01 06 0a 00 00 00 90 4c 20 38 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:29.524Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x51cac6c","0x0","0x27e703ad","0x51cac6c","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51cac6c","0x0","0x27e703ad","0x51cac6c","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51cac6c","hex":"01 00 34 00 00 00 00 00 00 00 66 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 90 4c 20 38 cc d4 dc 01 06 0a 00 00 00 90 4c 20 38 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51cac6c","hex":"01 00 34 00 00 00 00 00 00 00 66 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 90 4c 20 38 cc d4 dc 01 06 0a 00 00 00 90 4c 20 38 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:29.530Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x51cac6c","0x0","0x27e703f5","0x51cac6c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51cac6c","0x0","0x27e703f5","0x51cac6c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51cac6c","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51cac6c","hex":"01 00 34 00 00 00 00 00 00 00 66 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 90 4c 20 38 cc d4 dc 01 06 0a 00 00 00 90 4c 20 38 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51cac6c","hex":"01 00 34 00 00 00 00 00 00 00 66 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 90 4c 20 38 cc d4 dc 01 06 0a 00 00 00 90 4c 20 38 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:29.535Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:29.535Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:29.535Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:29.536Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:29.536Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x51c8a5c","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x51c8a5c","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x5209960","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51c8a5c","hex":"01 00 00 00 00 00 00 00 00 00 66 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x51c8a5c","hex":"01 00 00 00 00 00 00 00 00 00 66 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:29.568Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x1","0x2e","0x51c8a5c","0x27e7023d","0x23eed68","0x520995c","0x52098b8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x51c8a5c","0x27e7023d","0x23eed68","0x520995c","0x52098b8","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51c8a5c","hex":"01 00 00 00 00 00 00 00 00 00 66 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51c8a5c","hex":"01 00 00 00 00 00 00 00 00 00 66 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:29.573Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x2e","0x51c8a5c","0x0","0x27e703ad","0x51c8a5c","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x51c8a5c","0x0","0x27e703ad","0x51c8a5c","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51c8a5c","hex":"01 00 00 00 00 00 00 00 00 00 66 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51c8a5c","hex":"01 00 00 00 00 00 00 00 00 00 66 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:29.579Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x2e","0x51c8a5c","0x0","0x27e703f5","0x51c8a5c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x51c8a5c","0x0","0x27e703f5","0x51c8a5c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51c8a5c","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x51c8a5c","hex":"01 00 00 00 00 00 00 00 00 00 66 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51c8a5c","hex":"01 00 00 00 00 00 00 00 00 00 66 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:29.583Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x195e014","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x195e014","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x18e6988","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x195e014","hex":"01 00 00 00 00 00 00 00 00 00 65 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x195e014","hex":"01 00 00 00 00 00 00 00 00 00 65 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:29.590Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:29.591Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:29.591Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:29.591Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:29.592Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x51c684c","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x51c684c","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x18e2c28","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51c684c","hex":"01 00 34 00 00 00 00 00 00 00 01 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 41 38 38 cc d4 dc 01 06 0a 00 00 00 60 41 38 38 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51c684c","hex":"01 00 34 00 00 00 00 00 00 00 01 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 41 38 38 cc d4 dc 01 06 0a 00 00 00 60 41 38 38 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:29.599Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x1","0x2e","0x195e014","0x24a707c5","0x17ee8a0","0x18e6984","0x18e68e0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x195e014","0x24a707c5","0x17ee8a0","0x18e6984","0x18e68e0","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x195e014","hex":"01 00 00 00 00 00 00 00 00 00 65 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x195e014","hex":"01 00 00 00 00 00 00 00 00 00 65 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:29.605Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x2e","0x195e014","0x0","0x24a70775","0x195e014","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x195e014","0x0","0x24a70775","0x195e014","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x195e014","hex":"01 00 00 00 00 00 00 00 00 00 65 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x195e014","hex":"01 00 00 00 00 00 00 00 00 00 65 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:29.611Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x2e","0x195e014","0x0","0x24a708bd","0x195e014","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x195e014","0x0","0x24a708bd","0x195e014","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x195e014","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x195e014","hex":"01 00 00 00 00 00 00 00 00 00 65 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x195e014","hex":"01 00 00 00 00 00 00 00 00 00 65 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:29.616Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:29.616Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:29.616Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:29.616Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:29.616Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x7ffd","0x62","0x51c684c","0x255c006d","0x85ef38","0x18e2c24","0x18e2b80","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x51c684c","0x255c006d","0x85ef38","0x18e2c24","0x18e2b80","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51c684c","hex":"01 00 34 00 00 00 00 00 00 00 01 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 41 38 38 cc d4 dc 01 06 0a 00 00 00 60 41 38 38 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51c684c","hex":"01 00 34 00 00 00 00 00 00 00 01 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 41 38 38 cc d4 dc 01 06 0a 00 00 00 60 41 38 38 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:29.622Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x62","0x51c684c","0x0","0x255c019d","0x51c684c","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51c684c","0x0","0x255c019d","0x51c684c","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51c684c","hex":"01 00 34 00 00 00 00 00 00 00 01 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 41 38 38 cc d4 dc 01 06 0a 00 00 00 60 41 38 38 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51c684c","hex":"01 00 34 00 00 00 00 00 00 00 01 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 41 38 38 cc d4 dc 01 06 0a 00 00 00 60 41 38 38 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:29.629Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x62","0x51c684c","0x0","0x255c0125","0x51c684c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51c684c","0x0","0x255c0125","0x51c684c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51c684c","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51c684c","hex":"01 00 34 00 00 00 00 00 00 00 01 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 41 38 38 cc d4 dc 01 06 0a 00 00 00 60 41 38 38 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51c684c","hex":"01 00 34 00 00 00 00 00 00 00 01 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 41 38 38 cc d4 dc 01 06 0a 00 00 00 60 41 38 38 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:29.634Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:29.635Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:29.635Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:29.635Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:29.635Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x17fa7ac","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x17fa7ac","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x18e6f50","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x17fa7ac","hex":"01 00 00 00 00 00 00 00 00 00 01 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x17fa7ac","hex":"01 00 00 00 00 00 00 00 00 00 01 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:29.679Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x2","0x2e","0x17fa7ac","0x255c006d","0x85ef38","0x18e6f4c","0x18e6ea8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x17fa7ac","0x255c006d","0x85ef38","0x18e6f4c","0x18e6ea8","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x17fa7ac","hex":"01 00 00 00 00 00 00 00 00 00 01 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x17fa7ac","hex":"01 00 00 00 00 00 00 00 00 00 01 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:29.684Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x2e","0x17fa7ac","0x0","0x255c019d","0x17fa7ac","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x17fa7ac","0x0","0x255c019d","0x17fa7ac","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x17fa7ac","hex":"01 00 00 00 00 00 00 00 00 00 01 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x17fa7ac","hex":"01 00 00 00 00 00 00 00 00 00 01 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:29.690Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x2e","0x17fa7ac","0x0","0x255c0125","0x17fa7ac","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x17fa7ac","0x0","0x255c0125","0x17fa7ac","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x17fa7ac","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x17fa7ac","hex":"01 00 00 00 00 00 00 00 00 00 01 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x17fa7ac","hex":"01 00 00 00 00 00 00 00 00 00 01 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:29.695Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:29.695Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:29.695Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:29.696Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:29.696Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.LocalCallbackDataReceived","address":"0x9beea5","ecx":"0x5db38eab","esp":"0x67cf9c0","args":["0x220a548","0x67cf9d8","0x7508fcc9","0x220a548","0x7508fcb0","0x67cfa34","0x772482ae","0x220a548","0x5c7a8aef","0x0"],"stack":["0x9bf6b0","0x220a548","0x67cf9d8","0x7508fcc9","0x220a548","0x7508fcb0","0x67cfa34","0x772482ae","0x220a548","0x5c7a8aef","0x0","0x0","0x220a548","0x0","0x0","0x0","0x0","0x0"],"candidates":[],"time":"2026-04-25T15:57:29.929Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a8","args":["0x21fcef4","0x1","0x1","0x7308","0x2e","0x8d538c","0x206","0x6","0x900184","0x17eea6c"],"stack":["0x76ffedd8","0x21fcef4","0x1","0x1","0x7308","0x2e","0x8d538c","0x206","0x6","0x900184","0x17eea6c","0x76fc4ef5","0x9c1b20","0x52064e8","0x6","0xd7b570fc","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x8d538c","hex":"01 00 00 00 00 00 00 00 00 00 9e 91 04 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x8d538c","hex":"01 00 00 00 00 00 00 00 00 00 9e 91 04 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:29.942Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee838","args":["0x1","0x1","0x7308","0x2e","0x8d538c","0x24a707fd","0x17ee8a8","0x52064e4","0x5206440","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7308","0x2e","0x8d538c","0x24a707fd","0x17ee8a8","0x52064e4","0x5206440","0x7700459e","0x52064fc","0x17ee8f4","0x900100","0x2e","0x0","0x8d538c","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x8d538c","hex":"01 00 00 00 00 00 00 00 00 00 9e 91 04 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x8d538c","hex":"01 00 00 00 00 00 00 00 00 00 9e 91 04 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:29.948Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7f0","args":["0x1","0x1200","0x2e","0x8d538c","0x0","0x24a7076d","0x8d538c","0x9effe8","0x1","0x17ee8a4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x8d538c","0x0","0x24a7076d","0x8d538c","0x9effe8","0x1","0x17ee8a4","0x17ee838","0x1","0x1","0x17ee898","0x9cf3a6","0xffffffff","0x17ee8a4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x8d538c","hex":"01 00 00 00 00 00 00 00 00 00 9e 91 04 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8a4","hex":"d0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8d0","hex":"6c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee898","hex":"5c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea5c","hex":"a4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x8d538c","hex":"01 00 00 00 00 00 00 00 00 00 9e 91 04 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8a4","hex":"d0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8d0","hex":"6c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee898","hex":"5c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea5c","hex":"a4"}],"time":"2026-04-25T15:57:29.954Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee78c","args":["0x1","0x2e","0x8d538c","0x0","0x24a708b5","0x8d538c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x8d538c","0x0","0x24a708b5","0x8d538c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x8d538c","0x9effe8","0x17ee834"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x8d538c","hex":"01 00 00 00 00 00 00 00 00 00 9e 91 04 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x8d538c","hex":"01 00 00 00 00 00 00 00 00 00 9e 91 04 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:29.959Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:29.959Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:29.959Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:29.960Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:29.960Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x18b03ec","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x18b03ec","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x18e6988","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b03ec","hex":"01 00 34 00 00 00 00 00 00 00 67 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 d0 97 6c 38 cc d4 dc 01 06 0a 00 00 00 d0 97 6c 38 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18b03ec","hex":"01 00 34 00 00 00 00 00 00 00 67 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 d0 97 6c 38 cc d4 dc 01 06 0a 00 00 00 d0 97 6c 38 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:30.004Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x7ffd","0x62","0x18b03ec","0x24a707c5","0x17ee8a0","0x18e6984","0x18e68e0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18b03ec","0x24a707c5","0x17ee8a0","0x18e6984","0x18e68e0","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b03ec","hex":"01 00 34 00 00 00 00 00 00 00 67 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 d0 97 6c 38 cc d4 dc 01 06 0a 00 00 00 d0 97 6c 38 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b03ec","hex":"01 00 34 00 00 00 00 00 00 00 67 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 d0 97 6c 38 cc d4 dc 01 06 0a 00 00 00 d0 97 6c 38 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:30.011Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x62","0x18b03ec","0x0","0x24a70775","0x18b03ec","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18b03ec","0x0","0x24a70775","0x18b03ec","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b03ec","hex":"01 00 34 00 00 00 00 00 00 00 67 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 d0 97 6c 38 cc d4 dc 01 06 0a 00 00 00 d0 97 6c 38 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b03ec","hex":"01 00 34 00 00 00 00 00 00 00 67 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 d0 97 6c 38 cc d4 dc 01 06 0a 00 00 00 d0 97 6c 38 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:30.017Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x62","0x18b03ec","0x0","0x24a708bd","0x18b03ec","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18b03ec","0x0","0x24a708bd","0x18b03ec","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b03ec","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18b03ec","hex":"01 00 34 00 00 00 00 00 00 00 67 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 d0 97 6c 38 cc d4 dc 01 06 0a 00 00 00 d0 97 6c 38 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b03ec","hex":"01 00 34 00 00 00 00 00 00 00 67 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 d0 97 6c 38 cc d4 dc 01 06 0a 00 00 00 d0 97 6c 38 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:30.022Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:30.023Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:30.023Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:30.023Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:30.023Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x18b480c","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x18b480c","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x5208dd0","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b480c","hex":"01 00 34 00 00 00 00 00 00 00 68 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 d0 97 6c 38 cc d4 dc 01 06 0a 00 00 00 d0 97 6c 38 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18b480c","hex":"01 00 34 00 00 00 00 00 00 00 68 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 d0 97 6c 38 cc d4 dc 01 06 0a 00 00 00 d0 97 6c 38 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:30.031Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x7ffe","0x62","0x18b480c","0x24a707c5","0x17ee8a0","0x5208dcc","0x5208d28","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x18b480c","0x24a707c5","0x17ee8a0","0x5208dcc","0x5208d28","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b480c","hex":"01 00 34 00 00 00 00 00 00 00 68 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 d0 97 6c 38 cc d4 dc 01 06 0a 00 00 00 d0 97 6c 38 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b480c","hex":"01 00 34 00 00 00 00 00 00 00 68 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 d0 97 6c 38 cc d4 dc 01 06 0a 00 00 00 d0 97 6c 38 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:30.036Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x62","0x18b480c","0x0","0x24a70775","0x18b480c","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18b480c","0x0","0x24a70775","0x18b480c","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b480c","hex":"01 00 34 00 00 00 00 00 00 00 68 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 d0 97 6c 38 cc d4 dc 01 06 0a 00 00 00 d0 97 6c 38 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b480c","hex":"01 00 34 00 00 00 00 00 00 00 68 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 d0 97 6c 38 cc d4 dc 01 06 0a 00 00 00 d0 97 6c 38 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:30.043Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x62","0x18b480c","0x0","0x24a708bd","0x18b480c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18b480c","0x0","0x24a708bd","0x18b480c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b480c","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18b480c","hex":"01 00 34 00 00 00 00 00 00 00 68 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 d0 97 6c 38 cc d4 dc 01 06 0a 00 00 00 d0 97 6c 38 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b480c","hex":"01 00 34 00 00 00 00 00 00 00 68 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 d0 97 6c 38 cc d4 dc 01 06 0a 00 00 00 d0 97 6c 38 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:30.048Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:30.048Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:30.048Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:30.048Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:30.048Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x195e014","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x195e014","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x18e6988","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x195e014","hex":"01 00 34 00 00 00 00 00 00 00 02 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 8c 84 38 cc d4 dc 01 06 0a 00 00 00 a0 8c 84 38 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x195e014","hex":"01 00 34 00 00 00 00 00 00 00 02 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 8c 84 38 cc d4 dc 01 06 0a 00 00 00 a0 8c 84 38 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:30.097Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x7ffd","0x62","0x195e014","0x24a707c5","0x17ee8a0","0x18e6984","0x18e68e0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x195e014","0x24a707c5","0x17ee8a0","0x18e6984","0x18e68e0","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x195e014","hex":"01 00 34 00 00 00 00 00 00 00 02 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 8c 84 38 cc d4 dc 01 06 0a 00 00 00 a0 8c 84 38 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x195e014","hex":"01 00 34 00 00 00 00 00 00 00 02 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 8c 84 38 cc d4 dc 01 06 0a 00 00 00 a0 8c 84 38 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:30.102Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x62","0x195e014","0x0","0x24a70775","0x195e014","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x195e014","0x0","0x24a70775","0x195e014","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x195e014","hex":"01 00 34 00 00 00 00 00 00 00 02 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 8c 84 38 cc d4 dc 01 06 0a 00 00 00 a0 8c 84 38 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x195e014","hex":"01 00 34 00 00 00 00 00 00 00 02 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 8c 84 38 cc d4 dc 01 06 0a 00 00 00 a0 8c 84 38 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:30.108Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x62","0x195e014","0x0","0x24a708bd","0x195e014","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x195e014","0x0","0x24a708bd","0x195e014","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x195e014","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x195e014","hex":"01 00 34 00 00 00 00 00 00 00 02 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 8c 84 38 cc d4 dc 01 06 0a 00 00 00 a0 8c 84 38 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x195e014","hex":"01 00 34 00 00 00 00 00 00 00 02 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 8c 84 38 cc d4 dc 01 06 0a 00 00 00 a0 8c 84 38 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:30.114Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x517d2f4","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x517d2f4","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x18e7ae0","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x517d2f4","hex":"01 00 00 00 00 00 00 00 00 00 68 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x517d2f4","hex":"01 00 00 00 00 00 00 00 00 00 68 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:30.121Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x18256c4","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x18256c4","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x18e2c28","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18256c4","hex":"01 00 00 00 00 00 00 00 00 00 67 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18256c4","hex":"01 00 00 00 00 00 00 00 00 00 67 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:30.129Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:30.129Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:30.129Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:30.129Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:30.129Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x1","0x2e","0x517d2f4","0x255c006d","0x85ef38","0x18e7adc","0x18e7a38","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x517d2f4","0x255c006d","0x85ef38","0x18e7adc","0x18e7a38","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x517d2f4","hex":"01 00 00 00 00 00 00 00 00 00 68 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x517d2f4","hex":"01 00 00 00 00 00 00 00 00 00 68 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:30.134Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x2e","0x517d2f4","0x0","0x255c019d","0x517d2f4","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x517d2f4","0x0","0x255c019d","0x517d2f4","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x517d2f4","hex":"01 00 00 00 00 00 00 00 00 00 68 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x517d2f4","hex":"01 00 00 00 00 00 00 00 00 00 68 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:30.141Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x2e","0x517d2f4","0x0","0x255c0125","0x517d2f4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x517d2f4","0x0","0x255c0125","0x517d2f4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x517d2f4","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x517d2f4","hex":"01 00 00 00 00 00 00 00 00 00 68 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x517d2f4","hex":"01 00 00 00 00 00 00 00 00 00 68 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:30.145Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:30.147Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:30.147Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:30.147Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:30.147Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x1","0x2e","0x18256c4","0x27e7023d","0x23eed68","0x18e2c24","0x18e2b80","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18256c4","0x27e7023d","0x23eed68","0x18e2c24","0x18e2b80","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18256c4","hex":"01 00 00 00 00 00 00 00 00 00 67 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18256c4","hex":"01 00 00 00 00 00 00 00 00 00 67 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:30.152Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x2e","0x18256c4","0x0","0x27e703ad","0x18256c4","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18256c4","0x0","0x27e703ad","0x18256c4","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18256c4","hex":"01 00 00 00 00 00 00 00 00 00 67 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18256c4","hex":"01 00 00 00 00 00 00 00 00 00 67 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:30.160Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x2e","0x18256c4","0x0","0x27e703f5","0x18256c4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18256c4","0x0","0x27e703f5","0x18256c4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18256c4","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18256c4","hex":"01 00 00 00 00 00 00 00 00 00 67 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18256c4","hex":"01 00 00 00 00 00 00 00 00 00 67 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:30.164Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:30.165Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:30.165Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:30.165Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:30.165Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x51cac6c","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x51cac6c","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x5209960","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51cac6c","hex":"01 00 00 00 00 00 00 00 00 00 02 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x51cac6c","hex":"01 00 00 00 00 00 00 00 00 00 02 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:30.176Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x2","0x2e","0x51cac6c","0x27e7023d","0x23eed68","0x520995c","0x52098b8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x51cac6c","0x27e7023d","0x23eed68","0x520995c","0x52098b8","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51cac6c","hex":"01 00 00 00 00 00 00 00 00 00 02 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51cac6c","hex":"01 00 00 00 00 00 00 00 00 00 02 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:30.181Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x2e","0x51cac6c","0x0","0x27e703ad","0x51cac6c","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x51cac6c","0x0","0x27e703ad","0x51cac6c","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51cac6c","hex":"01 00 00 00 00 00 00 00 00 00 02 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51cac6c","hex":"01 00 00 00 00 00 00 00 00 00 02 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:30.187Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x2e","0x51cac6c","0x0","0x27e703f5","0x51cac6c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x51cac6c","0x0","0x27e703f5","0x51cac6c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51cac6c","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x51cac6c","hex":"01 00 00 00 00 00 00 00 00 00 02 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51cac6c","hex":"01 00 00 00 00 00 00 00 00 00 02 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:30.192Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:30.192Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:30.192Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:30.193Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:30.193Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x51c8a5c","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x51c8a5c","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x5209960","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51c8a5c","hex":"01 00 34 00 00 00 00 00 00 00 69 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 10 e3 b8 38 cc d4 dc 01 06 0a 00 00 00 10 e3 b8 38 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51c8a5c","hex":"01 00 34 00 00 00 00 00 00 00 69 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 10 e3 b8 38 cc d4 dc 01 06 0a 00 00 00 10 e3 b8 38 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:30.494Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffd","0x62","0x51c8a5c","0x27e7023d","0x23eed68","0x520995c","0x52098b8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x51c8a5c","0x27e7023d","0x23eed68","0x520995c","0x52098b8","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51c8a5c","hex":"01 00 34 00 00 00 00 00 00 00 69 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 10 e3 b8 38 cc d4 dc 01 06 0a 00 00 00 10 e3 b8 38 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51c8a5c","hex":"01 00 34 00 00 00 00 00 00 00 69 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 10 e3 b8 38 cc d4 dc 01 06 0a 00 00 00 10 e3 b8 38 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:30.500Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x51c8a5c","0x0","0x27e703ad","0x51c8a5c","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51c8a5c","0x0","0x27e703ad","0x51c8a5c","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51c8a5c","hex":"01 00 34 00 00 00 00 00 00 00 69 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 10 e3 b8 38 cc d4 dc 01 06 0a 00 00 00 10 e3 b8 38 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51c8a5c","hex":"01 00 34 00 00 00 00 00 00 00 69 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 10 e3 b8 38 cc d4 dc 01 06 0a 00 00 00 10 e3 b8 38 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:30.506Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x51c8a5c","0x0","0x27e703f5","0x51c8a5c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51c8a5c","0x0","0x27e703f5","0x51c8a5c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51c8a5c","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51c8a5c","hex":"01 00 34 00 00 00 00 00 00 00 69 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 10 e3 b8 38 cc d4 dc 01 06 0a 00 00 00 10 e3 b8 38 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51c8a5c","hex":"01 00 34 00 00 00 00 00 00 00 69 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 10 e3 b8 38 cc d4 dc 01 06 0a 00 00 00 10 e3 b8 38 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:30.511Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:30.511Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:30.511Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:30.511Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:30.511Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x517d2f4","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x517d2f4","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x18e7ae0","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x517d2f4","hex":"01 00 34 00 00 00 00 00 00 00 6a 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 10 e3 b8 38 cc d4 dc 01 06 0a 00 00 00 10 e3 b8 38 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x517d2f4","hex":"01 00 34 00 00 00 00 00 00 00 6a 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 10 e3 b8 38 cc d4 dc 01 06 0a 00 00 00 10 e3 b8 38 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:30.519Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffe","0x62","0x517d2f4","0x27e7023d","0x23eed68","0x18e7adc","0x18e7a38","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x517d2f4","0x27e7023d","0x23eed68","0x18e7adc","0x18e7a38","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x517d2f4","hex":"01 00 34 00 00 00 00 00 00 00 6a 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 10 e3 b8 38 cc d4 dc 01 06 0a 00 00 00 10 e3 b8 38 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x517d2f4","hex":"01 00 34 00 00 00 00 00 00 00 6a 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 10 e3 b8 38 cc d4 dc 01 06 0a 00 00 00 10 e3 b8 38 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:30.526Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x517d2f4","0x0","0x27e703ad","0x517d2f4","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x517d2f4","0x0","0x27e703ad","0x517d2f4","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x517d2f4","hex":"01 00 34 00 00 00 00 00 00 00 6a 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 10 e3 b8 38 cc d4 dc 01 06 0a 00 00 00 10 e3 b8 38 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x517d2f4","hex":"01 00 34 00 00 00 00 00 00 00 6a 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 10 e3 b8 38 cc d4 dc 01 06 0a 00 00 00 10 e3 b8 38 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:30.532Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x517d2f4","0x0","0x27e703f5","0x517d2f4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x517d2f4","0x0","0x27e703f5","0x517d2f4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x517d2f4","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x517d2f4","hex":"01 00 34 00 00 00 00 00 00 00 6a 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 10 e3 b8 38 cc d4 dc 01 06 0a 00 00 00 10 e3 b8 38 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x517d2f4","hex":"01 00 34 00 00 00 00 00 00 00 6a 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 10 e3 b8 38 cc d4 dc 01 06 0a 00 00 00 10 e3 b8 38 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:30.537Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:30.538Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:30.538Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:30.538Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:30.538Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x18b6a1c","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x18b6a1c","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x5206ab0","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18b6a1c","hex":"01 00 00 00 00 00 00 00 00 00 6a 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18b6a1c","hex":"01 00 00 00 00 00 00 00 00 00 6a 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:30.552Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x1","0x2e","0x18b6a1c","0x27e7023d","0x23eed68","0x5206aac","0x5206a08","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18b6a1c","0x27e7023d","0x23eed68","0x5206aac","0x5206a08","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18b6a1c","hex":"01 00 00 00 00 00 00 00 00 00 6a 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18b6a1c","hex":"01 00 00 00 00 00 00 00 00 00 6a 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:30.558Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x2e","0x18b6a1c","0x0","0x27e703ad","0x18b6a1c","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18b6a1c","0x0","0x27e703ad","0x18b6a1c","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18b6a1c","hex":"01 00 00 00 00 00 00 00 00 00 6a 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18b6a1c","hex":"01 00 00 00 00 00 00 00 00 00 6a 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:30.564Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x2e","0x18b6a1c","0x0","0x27e703f5","0x18b6a1c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18b6a1c","0x0","0x27e703f5","0x18b6a1c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b6a1c","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18b6a1c","hex":"01 00 00 00 00 00 00 00 00 00 6a 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18b6a1c","hex":"01 00 00 00 00 00 00 00 00 00 6a 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:30.570Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x5183924","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x5183924","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x18e7ae0","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x5183924","hex":"01 00 00 00 00 00 00 00 00 00 69 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x5183924","hex":"01 00 00 00 00 00 00 00 00 00 69 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:30.577Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:30.577Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:30.578Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:30.578Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:30.578Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x1","0x2e","0x5183924","0x255c006d","0x85ef38","0x18e7adc","0x18e7a38","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x5183924","0x255c006d","0x85ef38","0x18e7adc","0x18e7a38","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x5183924","hex":"01 00 00 00 00 00 00 00 00 00 69 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x5183924","hex":"01 00 00 00 00 00 00 00 00 00 69 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:30.583Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x2e","0x5183924","0x0","0x255c019d","0x5183924","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x5183924","0x0","0x255c019d","0x5183924","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x5183924","hex":"01 00 00 00 00 00 00 00 00 00 69 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x5183924","hex":"01 00 00 00 00 00 00 00 00 00 69 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:30.590Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18b7b24","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18b7b24","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x18e1ad0","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b7b24","hex":"01 00 34 00 00 00 00 00 00 00 03 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 d7 d0 38 cc d4 dc 01 06 0a 00 00 00 e0 d7 d0 38 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18b7b24","hex":"01 00 34 00 00 00 00 00 00 00 03 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 d7 d0 38 cc d4 dc 01 06 0a 00 00 00 e0 d7 d0 38 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:30.598Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x2e","0x5183924","0x0","0x255c0125","0x5183924","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x5183924","0x0","0x255c0125","0x5183924","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x5183924","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x5183924","hex":"01 00 00 00 00 00 00 00 00 00 69 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x5183924","hex":"01 00 00 00 00 00 00 00 00 00 69 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:30.602Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:30.603Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:30.603Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:30.603Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:30.603Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffd","0x62","0x18b7b24","0x27e7023d","0x23eed68","0x18e1acc","0x18e1a28","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18b7b24","0x27e7023d","0x23eed68","0x18e1acc","0x18e1a28","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b7b24","hex":"01 00 34 00 00 00 00 00 00 00 03 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 d7 d0 38 cc d4 dc 01 06 0a 00 00 00 e0 d7 d0 38 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b7b24","hex":"01 00 34 00 00 00 00 00 00 00 03 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 d7 d0 38 cc d4 dc 01 06 0a 00 00 00 e0 d7 d0 38 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:30.609Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x18b7b24","0x0","0x27e703ad","0x18b7b24","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18b7b24","0x0","0x27e703ad","0x18b7b24","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b7b24","hex":"01 00 34 00 00 00 00 00 00 00 03 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 d7 d0 38 cc d4 dc 01 06 0a 00 00 00 e0 d7 d0 38 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b7b24","hex":"01 00 34 00 00 00 00 00 00 00 03 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 d7 d0 38 cc d4 dc 01 06 0a 00 00 00 e0 d7 d0 38 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:30.616Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x18b7b24","0x0","0x27e703f5","0x18b7b24","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18b7b24","0x0","0x27e703f5","0x18b7b24","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b7b24","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18b7b24","hex":"01 00 34 00 00 00 00 00 00 00 03 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 d7 d0 38 cc d4 dc 01 06 0a 00 00 00 e0 d7 d0 38 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b7b24","hex":"01 00 34 00 00 00 00 00 00 00 03 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 d7 d0 38 cc d4 dc 01 06 0a 00 00 00 e0 d7 d0 38 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:30.621Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:30.621Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:30.621Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:30.621Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:30.622Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x51cac6c","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x51cac6c","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x5209960","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51cac6c","hex":"01 00 00 00 00 00 00 00 00 00 03 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x51cac6c","hex":"01 00 00 00 00 00 00 00 00 00 03 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:30.662Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x2","0x2e","0x51cac6c","0x27e7023d","0x23eed68","0x520995c","0x52098b8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x51cac6c","0x27e7023d","0x23eed68","0x520995c","0x52098b8","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51cac6c","hex":"01 00 00 00 00 00 00 00 00 00 03 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51cac6c","hex":"01 00 00 00 00 00 00 00 00 00 03 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:30.668Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x2e","0x51cac6c","0x0","0x27e703ad","0x51cac6c","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x51cac6c","0x0","0x27e703ad","0x51cac6c","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51cac6c","hex":"01 00 00 00 00 00 00 00 00 00 03 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51cac6c","hex":"01 00 00 00 00 00 00 00 00 00 03 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:30.674Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x2e","0x51cac6c","0x0","0x27e703f5","0x51cac6c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x51cac6c","0x0","0x27e703f5","0x51cac6c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51cac6c","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x51cac6c","hex":"01 00 00 00 00 00 00 00 00 00 03 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51cac6c","hex":"01 00 00 00 00 00 00 00 00 00 03 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:30.678Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:30.679Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:30.679Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:30.679Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:30.679Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x51c3534","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x51c3534","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x52030e0","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51c3534","hex":"01 00 34 00 00 00 00 00 00 00 6b 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 50 2e 05 39 cc d4 dc 01 06 0a 00 00 00 50 2e 05 39 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51c3534","hex":"01 00 34 00 00 00 00 00 00 00 6b 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 50 2e 05 39 cc d4 dc 01 06 0a 00 00 00 50 2e 05 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:31.002Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffd","0x62","0x51c3534","0x27e7023d","0x23eed68","0x52030dc","0x5203038","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x51c3534","0x27e7023d","0x23eed68","0x52030dc","0x5203038","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51c3534","hex":"01 00 34 00 00 00 00 00 00 00 6b 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 50 2e 05 39 cc d4 dc 01 06 0a 00 00 00 50 2e 05 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51c3534","hex":"01 00 34 00 00 00 00 00 00 00 6b 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 50 2e 05 39 cc d4 dc 01 06 0a 00 00 00 50 2e 05 39 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:31.008Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x51c3534","0x0","0x27e703ad","0x51c3534","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51c3534","0x0","0x27e703ad","0x51c3534","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51c3534","hex":"01 00 34 00 00 00 00 00 00 00 6b 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 50 2e 05 39 cc d4 dc 01 06 0a 00 00 00 50 2e 05 39 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51c3534","hex":"01 00 34 00 00 00 00 00 00 00 6b 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 50 2e 05 39 cc d4 dc 01 06 0a 00 00 00 50 2e 05 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:31.014Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x51c3534","0x0","0x27e703f5","0x51c3534","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51c3534","0x0","0x27e703f5","0x51c3534","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51c3534","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51c3534","hex":"01 00 34 00 00 00 00 00 00 00 6b 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 50 2e 05 39 cc d4 dc 01 06 0a 00 00 00 50 2e 05 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51c3534","hex":"01 00 34 00 00 00 00 00 00 00 6b 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 50 2e 05 39 cc d4 dc 01 06 0a 00 00 00 50 2e 05 39 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:31.019Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:31.020Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:31.020Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:31.020Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:31.020Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x17f417c","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x17f417c","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x52070e8","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x17f417c","hex":"01 00 34 00 00 00 00 00 00 00 6c 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 50 2e 05 39 cc d4 dc 01 06 0a 00 00 00 50 2e 05 39 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x17f417c","hex":"01 00 34 00 00 00 00 00 00 00 6c 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 50 2e 05 39 cc d4 dc 01 06 0a 00 00 00 50 2e 05 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:31.028Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffe","0x62","0x17f417c","0x27e7023d","0x23eed68","0x52070e4","0x5207040","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x17f417c","0x27e7023d","0x23eed68","0x52070e4","0x5207040","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x17f417c","hex":"01 00 34 00 00 00 00 00 00 00 6c 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 50 2e 05 39 cc d4 dc 01 06 0a 00 00 00 50 2e 05 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x17f417c","hex":"01 00 34 00 00 00 00 00 00 00 6c 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 50 2e 05 39 cc d4 dc 01 06 0a 00 00 00 50 2e 05 39 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:31.033Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x17f417c","0x0","0x27e703ad","0x17f417c","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x17f417c","0x0","0x27e703ad","0x17f417c","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x17f417c","hex":"01 00 34 00 00 00 00 00 00 00 6c 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 50 2e 05 39 cc d4 dc 01 06 0a 00 00 00 50 2e 05 39 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x17f417c","hex":"01 00 34 00 00 00 00 00 00 00 6c 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 50 2e 05 39 cc d4 dc 01 06 0a 00 00 00 50 2e 05 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:31.040Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x17f417c","0x0","0x27e703f5","0x17f417c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x17f417c","0x0","0x27e703f5","0x17f417c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x17f417c","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x17f417c","hex":"01 00 34 00 00 00 00 00 00 00 6c 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 50 2e 05 39 cc d4 dc 01 06 0a 00 00 00 50 2e 05 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x17f417c","hex":"01 00 34 00 00 00 00 00 00 00 6c 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 50 2e 05 39 cc d4 dc 01 06 0a 00 00 00 50 2e 05 39 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:31.045Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:31.046Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:31.046Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:31.046Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:31.046Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x517d2f4","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x517d2f4","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x18e7ae0","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x517d2f4","hex":"01 00 34 00 00 00 00 00 00 00 04 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 23 1d 39 cc d4 dc 01 06 0a 00 00 00 20 23 1d 39 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x517d2f4","hex":"01 00 34 00 00 00 00 00 00 00 04 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 23 1d 39 cc d4 dc 01 06 0a 00 00 00 20 23 1d 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:31.100Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffd","0x62","0x517d2f4","0x27e7023d","0x23eed68","0x18e7adc","0x18e7a38","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x517d2f4","0x27e7023d","0x23eed68","0x18e7adc","0x18e7a38","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x517d2f4","hex":"01 00 34 00 00 00 00 00 00 00 04 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 23 1d 39 cc d4 dc 01 06 0a 00 00 00 20 23 1d 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x517d2f4","hex":"01 00 34 00 00 00 00 00 00 00 04 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 23 1d 39 cc d4 dc 01 06 0a 00 00 00 20 23 1d 39 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:31.109Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x517d2f4","0x0","0x27e703ad","0x517d2f4","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x517d2f4","0x0","0x27e703ad","0x517d2f4","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x517d2f4","hex":"01 00 34 00 00 00 00 00 00 00 04 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 23 1d 39 cc d4 dc 01 06 0a 00 00 00 20 23 1d 39 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x517d2f4","hex":"01 00 34 00 00 00 00 00 00 00 04 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 23 1d 39 cc d4 dc 01 06 0a 00 00 00 20 23 1d 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:31.121Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x517d2f4","0x0","0x27e703f5","0x517d2f4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x517d2f4","0x0","0x27e703f5","0x517d2f4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x517d2f4","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x517d2f4","hex":"01 00 34 00 00 00 00 00 00 00 04 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 23 1d 39 cc d4 dc 01 06 0a 00 00 00 20 23 1d 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x517d2f4","hex":"01 00 34 00 00 00 00 00 00 00 04 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 23 1d 39 cc d4 dc 01 06 0a 00 00 00 20 23 1d 39 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:31.130Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x18f747c","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x18f747c","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x18e37b8","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18f747c","hex":"01 00 00 00 00 00 00 00 00 00 6b 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18f747c","hex":"01 00 00 00 00 00 00 00 00 00 6b 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:31.137Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x523467c","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x523467c","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x187efc8","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x523467c","hex":"01 00 00 00 00 00 00 00 00 00 6c 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x523467c","hex":"01 00 00 00 00 00 00 00 00 00 6c 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:31.145Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:31.145Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:31.145Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:31.146Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:31.146Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x1","0x2e","0x18f747c","0x24a707c5","0x17ee8a0","0x18e37b4","0x18e3710","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18f747c","0x24a707c5","0x17ee8a0","0x18e37b4","0x18e3710","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18f747c","hex":"01 00 00 00 00 00 00 00 00 00 6b 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18f747c","hex":"01 00 00 00 00 00 00 00 00 00 6b 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:31.152Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x2e","0x18f747c","0x0","0x24a70775","0x18f747c","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18f747c","0x0","0x24a70775","0x18f747c","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18f747c","hex":"01 00 00 00 00 00 00 00 00 00 6b 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18f747c","hex":"01 00 00 00 00 00 00 00 00 00 6b 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:31.158Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x2e","0x18f747c","0x0","0x24a708bd","0x18f747c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18f747c","0x0","0x24a708bd","0x18f747c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18f747c","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18f747c","hex":"01 00 00 00 00 00 00 00 00 00 6b 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18f747c","hex":"01 00 00 00 00 00 00 00 00 00 6b 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:31.162Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:31.162Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:31.163Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:31.163Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:31.163Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x1","0x2e","0x523467c","0x255c006d","0x85ef38","0x187efc4","0x187ef20","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x523467c","0x255c006d","0x85ef38","0x187efc4","0x187ef20","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x523467c","hex":"01 00 00 00 00 00 00 00 00 00 6c 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x523467c","hex":"01 00 00 00 00 00 00 00 00 00 6c 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:31.169Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x2e","0x523467c","0x0","0x255c019d","0x523467c","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x523467c","0x0","0x255c019d","0x523467c","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x523467c","hex":"01 00 00 00 00 00 00 00 00 00 6c 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x523467c","hex":"01 00 00 00 00 00 00 00 00 00 6c 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:31.179Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x51cbd74","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x51cbd74","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x18e2c28","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51cbd74","hex":"01 00 00 00 00 00 00 00 00 00 04 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x51cbd74","hex":"01 00 00 00 00 00 00 00 00 00 04 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:31.186Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x2e","0x523467c","0x0","0x255c0125","0x523467c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x523467c","0x0","0x255c0125","0x523467c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x523467c","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x523467c","hex":"01 00 00 00 00 00 00 00 00 00 6c 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x523467c","hex":"01 00 00 00 00 00 00 00 00 00 6c 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:31.191Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:31.191Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:31.191Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:31.191Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:31.191Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x2","0x2e","0x51cbd74","0x24a707c5","0x17ee8a0","0x18e2c24","0x18e2b80","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x51cbd74","0x24a707c5","0x17ee8a0","0x18e2c24","0x18e2b80","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51cbd74","hex":"01 00 00 00 00 00 00 00 00 00 04 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51cbd74","hex":"01 00 00 00 00 00 00 00 00 00 04 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:31.197Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x2e","0x51cbd74","0x0","0x24a70775","0x51cbd74","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x51cbd74","0x0","0x24a70775","0x51cbd74","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51cbd74","hex":"01 00 00 00 00 00 00 00 00 00 04 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51cbd74","hex":"01 00 00 00 00 00 00 00 00 00 04 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:31.203Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x2e","0x51cbd74","0x0","0x24a708bd","0x51cbd74","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x51cbd74","0x0","0x24a708bd","0x51cbd74","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51cbd74","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x51cbd74","hex":"01 00 00 00 00 00 00 00 00 00 04 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51cbd74","hex":"01 00 00 00 00 00 00 00 00 00 04 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:31.208Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:31.208Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:31.208Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:31.208Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:31.208Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x17f417c","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x17f417c","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x5208dd0","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x17f417c","hex":"01 00 34 00 00 00 00 00 00 00 6d 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 a0 51 39 cc d4 dc 01 06 0a 00 00 00 a0 a0 51 39 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x17f417c","hex":"01 00 34 00 00 00 00 00 00 00 6d 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 a0 51 39 cc d4 dc 01 06 0a 00 00 00 a0 a0 51 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:31.492Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x7ffd","0x62","0x17f417c","0x24a707c5","0x17ee8a0","0x5208dcc","0x5208d28","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x17f417c","0x24a707c5","0x17ee8a0","0x5208dcc","0x5208d28","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x17f417c","hex":"01 00 34 00 00 00 00 00 00 00 6d 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 a0 51 39 cc d4 dc 01 06 0a 00 00 00 a0 a0 51 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x17f417c","hex":"01 00 34 00 00 00 00 00 00 00 6d 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 a0 51 39 cc d4 dc 01 06 0a 00 00 00 a0 a0 51 39 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:31.498Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x62","0x17f417c","0x0","0x24a70775","0x17f417c","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x17f417c","0x0","0x24a70775","0x17f417c","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x17f417c","hex":"01 00 34 00 00 00 00 00 00 00 6d 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 a0 51 39 cc d4 dc 01 06 0a 00 00 00 a0 a0 51 39 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x17f417c","hex":"01 00 34 00 00 00 00 00 00 00 6d 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 a0 51 39 cc d4 dc 01 06 0a 00 00 00 a0 a0 51 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:31.505Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x62","0x17f417c","0x0","0x24a708bd","0x17f417c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x17f417c","0x0","0x24a708bd","0x17f417c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x17f417c","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x17f417c","hex":"01 00 34 00 00 00 00 00 00 00 6d 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 a0 51 39 cc d4 dc 01 06 0a 00 00 00 a0 a0 51 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x17f417c","hex":"01 00 34 00 00 00 00 00 00 00 6d 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 a0 51 39 cc d4 dc 01 06 0a 00 00 00 a0 a0 51 39 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:31.510Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:31.510Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:31.510Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:31.510Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:31.510Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x5183924","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x5183924","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x18e7ae0","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x5183924","hex":"01 00 34 00 00 00 00 00 00 00 6e 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 a0 51 39 cc d4 dc 01 06 0a 00 00 00 a0 a0 51 39 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x5183924","hex":"01 00 34 00 00 00 00 00 00 00 6e 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 a0 51 39 cc d4 dc 01 06 0a 00 00 00 a0 a0 51 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:31.518Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x7ffe","0x62","0x5183924","0x24a707c5","0x17ee8a0","0x18e7adc","0x18e7a38","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x5183924","0x24a707c5","0x17ee8a0","0x18e7adc","0x18e7a38","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x5183924","hex":"01 00 34 00 00 00 00 00 00 00 6e 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 a0 51 39 cc d4 dc 01 06 0a 00 00 00 a0 a0 51 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x5183924","hex":"01 00 34 00 00 00 00 00 00 00 6e 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 a0 51 39 cc d4 dc 01 06 0a 00 00 00 a0 a0 51 39 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:31.524Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x62","0x5183924","0x0","0x24a70775","0x5183924","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x5183924","0x0","0x24a70775","0x5183924","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x5183924","hex":"01 00 34 00 00 00 00 00 00 00 6e 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 a0 51 39 cc d4 dc 01 06 0a 00 00 00 a0 a0 51 39 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x5183924","hex":"01 00 34 00 00 00 00 00 00 00 6e 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 a0 51 39 cc d4 dc 01 06 0a 00 00 00 a0 a0 51 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:31.530Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x62","0x5183924","0x0","0x24a708bd","0x5183924","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x5183924","0x0","0x24a708bd","0x5183924","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x5183924","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x5183924","hex":"01 00 34 00 00 00 00 00 00 00 6e 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 a0 51 39 cc d4 dc 01 06 0a 00 00 00 a0 a0 51 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x5183924","hex":"01 00 34 00 00 00 00 00 00 00 6e 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 a0 51 39 cc d4 dc 01 06 0a 00 00 00 a0 a0 51 39 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:31.535Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:31.535Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:31.535Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:31.535Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:31.536Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x51cbd74","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x51cbd74","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x18e1508","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51cbd74","hex":"01 00 00 00 00 00 00 00 00 00 6d 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x51cbd74","hex":"01 00 00 00 00 00 00 00 00 00 6d 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:31.543Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x1","0x2e","0x51cbd74","0x24a707c5","0x17ee8a0","0x18e1504","0x18e1460","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x51cbd74","0x24a707c5","0x17ee8a0","0x18e1504","0x18e1460","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51cbd74","hex":"01 00 00 00 00 00 00 00 00 00 6d 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51cbd74","hex":"01 00 00 00 00 00 00 00 00 00 6d 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:31.550Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x2e","0x51cbd74","0x0","0x24a70775","0x51cbd74","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x51cbd74","0x0","0x24a70775","0x51cbd74","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51cbd74","hex":"01 00 00 00 00 00 00 00 00 00 6d 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51cbd74","hex":"01 00 00 00 00 00 00 00 00 00 6d 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:31.556Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x2e","0x51cbd74","0x0","0x24a708bd","0x51cbd74","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x51cbd74","0x0","0x24a708bd","0x51cbd74","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51cbd74","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x51cbd74","hex":"01 00 00 00 00 00 00 00 00 00 6d 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51cbd74","hex":"01 00 00 00 00 00 00 00 00 00 6d 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:31.561Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:31.561Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:31.561Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:31.562Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:31.562Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x1962434","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x1962434","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x5208dd0","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x1962434","hex":"01 00 34 00 00 00 00 00 00 00 05 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 47 69 39 cc d4 dc 01 06 0a 00 00 00 50 47 69 39 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x1962434","hex":"01 00 34 00 00 00 00 00 00 00 05 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 47 69 39 cc d4 dc 01 06 0a 00 00 00 50 47 69 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:31.597Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x7ffd","0x62","0x1962434","0x24a707c5","0x17ee8a0","0x5208dcc","0x5208d28","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x1962434","0x24a707c5","0x17ee8a0","0x5208dcc","0x5208d28","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x1962434","hex":"01 00 34 00 00 00 00 00 00 00 05 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 47 69 39 cc d4 dc 01 06 0a 00 00 00 50 47 69 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x1962434","hex":"01 00 34 00 00 00 00 00 00 00 05 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 47 69 39 cc d4 dc 01 06 0a 00 00 00 50 47 69 39 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:31.602Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x62","0x1962434","0x0","0x24a70775","0x1962434","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x1962434","0x0","0x24a70775","0x1962434","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x1962434","hex":"01 00 34 00 00 00 00 00 00 00 05 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 47 69 39 cc d4 dc 01 06 0a 00 00 00 50 47 69 39 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x1962434","hex":"01 00 34 00 00 00 00 00 00 00 05 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 47 69 39 cc d4 dc 01 06 0a 00 00 00 50 47 69 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:31.608Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x62","0x1962434","0x0","0x24a708bd","0x1962434","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x1962434","0x0","0x24a708bd","0x1962434","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1962434","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x1962434","hex":"01 00 34 00 00 00 00 00 00 00 05 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 47 69 39 cc d4 dc 01 06 0a 00 00 00 50 47 69 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x1962434","hex":"01 00 34 00 00 00 00 00 00 00 05 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 47 69 39 cc d4 dc 01 06 0a 00 00 00 50 47 69 39 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:31.613Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:31.614Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:31.614Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:31.614Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:31.614Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x18b03ec","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x18b03ec","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x18e6988","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18b03ec","hex":"01 00 00 00 00 00 00 00 00 00 6e 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18b03ec","hex":"01 00 00 00 00 00 00 00 00 00 6e 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:31.648Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x1","0x2e","0x18b03ec","0x24a707c5","0x17ee8a0","0x18e6984","0x18e68e0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18b03ec","0x24a707c5","0x17ee8a0","0x18e6984","0x18e68e0","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18b03ec","hex":"01 00 00 00 00 00 00 00 00 00 6e 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18b03ec","hex":"01 00 00 00 00 00 00 00 00 00 6e 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:31.653Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x2e","0x18b03ec","0x0","0x24a70775","0x18b03ec","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18b03ec","0x0","0x24a70775","0x18b03ec","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18b03ec","hex":"01 00 00 00 00 00 00 00 00 00 6e 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18b03ec","hex":"01 00 00 00 00 00 00 00 00 00 6e 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:31.659Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x2e","0x18b03ec","0x0","0x24a708bd","0x18b03ec","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18b03ec","0x0","0x24a708bd","0x18b03ec","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b03ec","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18b03ec","hex":"01 00 00 00 00 00 00 00 00 00 6e 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18b03ec","hex":"01 00 00 00 00 00 00 00 00 00 6e 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:31.664Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x517d2f4","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x517d2f4","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x18e7ae0","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x517d2f4","hex":"01 00 00 00 00 00 00 00 00 00 05 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x517d2f4","hex":"01 00 00 00 00 00 00 00 00 00 05 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:31.671Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:31.671Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:31.671Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:31.672Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:31.672Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x2","0x2e","0x517d2f4","0x255c006d","0x85ef38","0x18e7adc","0x18e7a38","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x517d2f4","0x255c006d","0x85ef38","0x18e7adc","0x18e7a38","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x517d2f4","hex":"01 00 00 00 00 00 00 00 00 00 05 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x517d2f4","hex":"01 00 00 00 00 00 00 00 00 00 05 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:31.677Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x2e","0x517d2f4","0x0","0x255c019d","0x517d2f4","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x517d2f4","0x0","0x255c019d","0x517d2f4","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x517d2f4","hex":"01 00 00 00 00 00 00 00 00 00 05 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x517d2f4","hex":"01 00 00 00 00 00 00 00 00 00 05 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:31.683Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x2e","0x517d2f4","0x0","0x255c0125","0x517d2f4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x517d2f4","0x0","0x255c0125","0x517d2f4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x517d2f4","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x517d2f4","hex":"01 00 00 00 00 00 00 00 00 00 05 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x517d2f4","hex":"01 00 00 00 00 00 00 00 00 00 05 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:31.688Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:31.688Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:31.688Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:31.689Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:31.689Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x51c7954","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x51c7954","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x52064e8","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51c7954","hex":"01 00 34 00 00 00 00 00 00 00 6f 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 d0 c4 9d 39 cc d4 dc 01 06 0a 00 00 00 d0 c4 9d 39 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51c7954","hex":"01 00 34 00 00 00 00 00 00 00 6f 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 d0 c4 9d 39 cc d4 dc 01 06 0a 00 00 00 d0 c4 9d 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:31.994Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x7ffd","0x62","0x51c7954","0x255c006d","0x85ef38","0x52064e4","0x5206440","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x51c7954","0x255c006d","0x85ef38","0x52064e4","0x5206440","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51c7954","hex":"01 00 34 00 00 00 00 00 00 00 6f 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 d0 c4 9d 39 cc d4 dc 01 06 0a 00 00 00 d0 c4 9d 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51c7954","hex":"01 00 34 00 00 00 00 00 00 00 6f 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 d0 c4 9d 39 cc d4 dc 01 06 0a 00 00 00 d0 c4 9d 39 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:31.999Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x62","0x51c7954","0x0","0x255c019d","0x51c7954","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51c7954","0x0","0x255c019d","0x51c7954","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51c7954","hex":"01 00 34 00 00 00 00 00 00 00 6f 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 d0 c4 9d 39 cc d4 dc 01 06 0a 00 00 00 d0 c4 9d 39 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51c7954","hex":"01 00 34 00 00 00 00 00 00 00 6f 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 d0 c4 9d 39 cc d4 dc 01 06 0a 00 00 00 d0 c4 9d 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:32.006Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x62","0x51c7954","0x0","0x255c0125","0x51c7954","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51c7954","0x0","0x255c0125","0x51c7954","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51c7954","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51c7954","hex":"01 00 34 00 00 00 00 00 00 00 6f 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 d0 c4 9d 39 cc d4 dc 01 06 0a 00 00 00 d0 c4 9d 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51c7954","hex":"01 00 34 00 00 00 00 00 00 00 6f 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 d0 c4 9d 39 cc d4 dc 01 06 0a 00 00 00 d0 c4 9d 39 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:32.011Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:32.012Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:32.012Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:32.012Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:32.012Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x195be04","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x195be04","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x187c750","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x195be04","hex":"01 00 34 00 00 00 00 00 00 00 70 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 d0 c4 9d 39 cc d4 dc 01 06 0a 00 00 00 d0 c4 9d 39 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x195be04","hex":"01 00 34 00 00 00 00 00 00 00 70 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 d0 c4 9d 39 cc d4 dc 01 06 0a 00 00 00 d0 c4 9d 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:32.022Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x7ffe","0x62","0x195be04","0x255c006d","0x85ef38","0x187c74c","0x187c6a8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x195be04","0x255c006d","0x85ef38","0x187c74c","0x187c6a8","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x195be04","hex":"01 00 34 00 00 00 00 00 00 00 70 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 d0 c4 9d 39 cc d4 dc 01 06 0a 00 00 00 d0 c4 9d 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x195be04","hex":"01 00 34 00 00 00 00 00 00 00 70 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 d0 c4 9d 39 cc d4 dc 01 06 0a 00 00 00 d0 c4 9d 39 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:32.031Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x62","0x195be04","0x0","0x255c019d","0x195be04","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x195be04","0x0","0x255c019d","0x195be04","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x195be04","hex":"01 00 34 00 00 00 00 00 00 00 70 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 d0 c4 9d 39 cc d4 dc 01 06 0a 00 00 00 d0 c4 9d 39 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x195be04","hex":"01 00 34 00 00 00 00 00 00 00 70 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 d0 c4 9d 39 cc d4 dc 01 06 0a 00 00 00 d0 c4 9d 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:32.040Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x62","0x195be04","0x0","0x255c0125","0x195be04","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x195be04","0x0","0x255c0125","0x195be04","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x195be04","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x195be04","hex":"01 00 34 00 00 00 00 00 00 00 70 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 d0 c4 9d 39 cc d4 dc 01 06 0a 00 00 00 d0 c4 9d 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x195be04","hex":"01 00 34 00 00 00 00 00 00 00 70 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 d0 c4 9d 39 cc d4 dc 01 06 0a 00 00 00 d0 c4 9d 39 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:32.046Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:32.047Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:32.047Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:32.047Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:32.047Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x522f154","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x522f154","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x187f590","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x522f154","hex":"01 00 00 00 00 00 00 00 00 00 70 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x522f154","hex":"01 00 00 00 00 00 00 00 00 00 70 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:32.087Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x1","0x2e","0x522f154","0x255c006d","0x85ef38","0x187f58c","0x187f4e8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x522f154","0x255c006d","0x85ef38","0x187f58c","0x187f4e8","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x522f154","hex":"01 00 00 00 00 00 00 00 00 00 70 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x522f154","hex":"01 00 00 00 00 00 00 00 00 00 70 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:32.093Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x2e","0x522f154","0x0","0x255c019d","0x522f154","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x522f154","0x0","0x255c019d","0x522f154","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x522f154","hex":"01 00 00 00 00 00 00 00 00 00 70 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x522f154","hex":"01 00 00 00 00 00 00 00 00 00 70 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:32.099Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x2e","0x522f154","0x0","0x255c0125","0x522f154","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x522f154","0x0","0x255c0125","0x522f154","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x522f154","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x522f154","hex":"01 00 00 00 00 00 00 00 00 00 70 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x522f154","hex":"01 00 00 00 00 00 00 00 00 00 70 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:32.104Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x5235784","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x5235784","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x187c750","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x5235784","hex":"01 00 00 00 00 00 00 00 00 00 6f 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x5235784","hex":"01 00 00 00 00 00 00 00 00 00 6f 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:32.112Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x51c8a5c","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x51c8a5c","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x5209960","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51c8a5c","hex":"01 00 34 00 00 00 00 00 00 00 06 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 b9 b5 39 cc d4 dc 01 06 0a 00 00 00 a0 b9 b5 39 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51c8a5c","hex":"01 00 34 00 00 00 00 00 00 00 06 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 b9 b5 39 cc d4 dc 01 06 0a 00 00 00 a0 b9 b5 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:32.120Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:32.120Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:32.120Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:32.120Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:32.121Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x1","0x2e","0x5235784","0x24a707c5","0x17ee8a0","0x187c74c","0x187c6a8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x5235784","0x24a707c5","0x17ee8a0","0x187c74c","0x187c6a8","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x5235784","hex":"01 00 00 00 00 00 00 00 00 00 6f 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x5235784","hex":"01 00 00 00 00 00 00 00 00 00 6f 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:32.126Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x2e","0x5235784","0x0","0x24a70775","0x5235784","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x5235784","0x0","0x24a70775","0x5235784","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x5235784","hex":"01 00 00 00 00 00 00 00 00 00 6f 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x5235784","hex":"01 00 00 00 00 00 00 00 00 00 6f 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:32.133Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x2e","0x5235784","0x0","0x24a708bd","0x5235784","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x5235784","0x0","0x24a708bd","0x5235784","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x5235784","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x5235784","hex":"01 00 00 00 00 00 00 00 00 00 6f 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x5235784","hex":"01 00 00 00 00 00 00 00 00 00 6f 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:32.138Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:32.138Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:32.138Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:32.138Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:32.138Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffd","0x62","0x51c8a5c","0x27e7023d","0x23eed68","0x520995c","0x52098b8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x51c8a5c","0x27e7023d","0x23eed68","0x520995c","0x52098b8","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51c8a5c","hex":"01 00 34 00 00 00 00 00 00 00 06 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 b9 b5 39 cc d4 dc 01 06 0a 00 00 00 a0 b9 b5 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51c8a5c","hex":"01 00 34 00 00 00 00 00 00 00 06 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 b9 b5 39 cc d4 dc 01 06 0a 00 00 00 a0 b9 b5 39 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:32.145Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x51c8a5c","0x0","0x27e703ad","0x51c8a5c","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51c8a5c","0x0","0x27e703ad","0x51c8a5c","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51c8a5c","hex":"01 00 34 00 00 00 00 00 00 00 06 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 b9 b5 39 cc d4 dc 01 06 0a 00 00 00 a0 b9 b5 39 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51c8a5c","hex":"01 00 34 00 00 00 00 00 00 00 06 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 b9 b5 39 cc d4 dc 01 06 0a 00 00 00 a0 b9 b5 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:32.152Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x51c8a5c","0x0","0x27e703f5","0x51c8a5c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51c8a5c","0x0","0x27e703f5","0x51c8a5c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51c8a5c","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51c8a5c","hex":"01 00 34 00 00 00 00 00 00 00 06 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 b9 b5 39 cc d4 dc 01 06 0a 00 00 00 a0 b9 b5 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51c8a5c","hex":"01 00 34 00 00 00 00 00 00 00 06 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 b9 b5 39 cc d4 dc 01 06 0a 00 00 00 a0 b9 b5 39 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:32.157Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:32.157Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:32.157Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:32.157Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:32.157Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x18be154","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x18be154","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x1878748","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18be154","hex":"01 00 00 00 00 00 00 00 00 00 06 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18be154","hex":"01 00 00 00 00 00 00 00 00 00 06 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:32.193Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x2","0x2e","0x18be154","0x27e7023d","0x23eed68","0x1878744","0x18786a0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x18be154","0x27e7023d","0x23eed68","0x1878744","0x18786a0","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18be154","hex":"01 00 00 00 00 00 00 00 00 00 06 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18be154","hex":"01 00 00 00 00 00 00 00 00 00 06 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:32.198Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x2e","0x18be154","0x0","0x27e703ad","0x18be154","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18be154","0x0","0x27e703ad","0x18be154","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18be154","hex":"01 00 00 00 00 00 00 00 00 00 06 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18be154","hex":"01 00 00 00 00 00 00 00 00 00 06 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:32.205Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x2e","0x18be154","0x0","0x27e703f5","0x18be154","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18be154","0x0","0x27e703f5","0x18be154","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18be154","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18be154","hex":"01 00 00 00 00 00 00 00 00 00 06 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18be154","hex":"01 00 00 00 00 00 00 00 00 00 06 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:32.210Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:32.210Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:32.210Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:32.210Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:32.210Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x523467c","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x523467c","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x5209960","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x523467c","hex":"01 00 34 00 00 00 00 00 00 00 71 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 37 ea 39 cc d4 dc 01 06 0a 00 00 00 20 37 ea 39 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x523467c","hex":"01 00 34 00 00 00 00 00 00 00 71 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 37 ea 39 cc d4 dc 01 06 0a 00 00 00 20 37 ea 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:32.496Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffd","0x62","0x523467c","0x27e7023d","0x23eed68","0x520995c","0x52098b8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x523467c","0x27e7023d","0x23eed68","0x520995c","0x52098b8","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x523467c","hex":"01 00 34 00 00 00 00 00 00 00 71 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 37 ea 39 cc d4 dc 01 06 0a 00 00 00 20 37 ea 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x523467c","hex":"01 00 34 00 00 00 00 00 00 00 71 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 37 ea 39 cc d4 dc 01 06 0a 00 00 00 20 37 ea 39 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:32.502Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x523467c","0x0","0x27e703ad","0x523467c","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x523467c","0x0","0x27e703ad","0x523467c","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x523467c","hex":"01 00 34 00 00 00 00 00 00 00 71 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 37 ea 39 cc d4 dc 01 06 0a 00 00 00 20 37 ea 39 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x523467c","hex":"01 00 34 00 00 00 00 00 00 00 71 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 37 ea 39 cc d4 dc 01 06 0a 00 00 00 20 37 ea 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:32.508Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x523467c","0x0","0x27e703f5","0x523467c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x523467c","0x0","0x27e703f5","0x523467c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x523467c","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x523467c","hex":"01 00 34 00 00 00 00 00 00 00 71 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 37 ea 39 cc d4 dc 01 06 0a 00 00 00 20 37 ea 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x523467c","hex":"01 00 34 00 00 00 00 00 00 00 71 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 37 ea 39 cc d4 dc 01 06 0a 00 00 00 20 37 ea 39 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:32.513Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:32.514Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:32.514Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:32.514Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:32.514Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x18b14f4","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x18b14f4","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x18e2660","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b14f4","hex":"01 00 34 00 00 00 00 00 00 00 72 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 37 ea 39 cc d4 dc 01 06 0a 00 00 00 20 37 ea 39 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18b14f4","hex":"01 00 34 00 00 00 00 00 00 00 72 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 37 ea 39 cc d4 dc 01 06 0a 00 00 00 20 37 ea 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:32.522Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffe","0x62","0x18b14f4","0x27e7023d","0x23eed68","0x18e265c","0x18e25b8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x18b14f4","0x27e7023d","0x23eed68","0x18e265c","0x18e25b8","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b14f4","hex":"01 00 34 00 00 00 00 00 00 00 72 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 37 ea 39 cc d4 dc 01 06 0a 00 00 00 20 37 ea 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b14f4","hex":"01 00 34 00 00 00 00 00 00 00 72 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 37 ea 39 cc d4 dc 01 06 0a 00 00 00 20 37 ea 39 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:32.529Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x18b14f4","0x0","0x27e703ad","0x18b14f4","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18b14f4","0x0","0x27e703ad","0x18b14f4","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b14f4","hex":"01 00 34 00 00 00 00 00 00 00 72 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 37 ea 39 cc d4 dc 01 06 0a 00 00 00 20 37 ea 39 cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b14f4","hex":"01 00 34 00 00 00 00 00 00 00 72 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 37 ea 39 cc d4 dc 01 06 0a 00 00 00 20 37 ea 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:32.535Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x18b14f4","0x0","0x27e703f5","0x18b14f4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18b14f4","0x0","0x27e703f5","0x18b14f4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b14f4","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18b14f4","hex":"01 00 34 00 00 00 00 00 00 00 72 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 37 ea 39 cc d4 dc 01 06 0a 00 00 00 20 37 ea 39 cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b14f4","hex":"01 00 34 00 00 00 00 00 00 00 72 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 37 ea 39 cc d4 dc 01 06 0a 00 00 00 20 37 ea 39 cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:32.541Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x182019c","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x182019c","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x18e03b0","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x182019c","hex":"01 00 00 00 00 00 00 00 00 00 71 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x182019c","hex":"01 00 00 00 00 00 00 00 00 00 71 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:32.551Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:32.552Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:32.552Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:32.552Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x1","0x2e","0x182019c","0x24a707c5","0x17ee8a0","0x18e03ac","0x18e0308","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x182019c","0x24a707c5","0x17ee8a0","0x18e03ac","0x18e0308","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x182019c","hex":"01 00 00 00 00 00 00 00 00 00 71 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x182019c","hex":"01 00 00 00 00 00 00 00 00 00 71 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:32.557Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x2e","0x182019c","0x0","0x24a70775","0x182019c","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x182019c","0x0","0x24a70775","0x182019c","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x182019c","hex":"01 00 00 00 00 00 00 00 00 00 71 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x182019c","hex":"01 00 00 00 00 00 00 00 00 00 71 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:32.565Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x2e","0x182019c","0x0","0x24a708bd","0x182019c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x182019c","0x0","0x24a708bd","0x182019c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x182019c","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x182019c","hex":"01 00 00 00 00 00 00 00 00 00 71 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x182019c","hex":"01 00 00 00 00 00 00 00 00 00 71 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:32.569Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:32.569Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:32.570Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:32.570Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:32.570Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:32.570Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x17f417c","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x17f417c","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x5208dd0","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x17f417c","hex":"01 00 34 00 00 00 00 00 00 00 07 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 04 02 3a cc d4 dc 01 06 0a 00 00 00 e0 04 02 3a cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x17f417c","hex":"01 00 34 00 00 00 00 00 00 00 07 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 04 02 3a cc d4 dc 01 06 0a 00 00 00 e0 04 02 3a cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:32.597Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x7ffd","0x62","0x17f417c","0x24a707c5","0x17ee8a0","0x5208dcc","0x5208d28","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x17f417c","0x24a707c5","0x17ee8a0","0x5208dcc","0x5208d28","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x17f417c","hex":"01 00 34 00 00 00 00 00 00 00 07 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 04 02 3a cc d4 dc 01 06 0a 00 00 00 e0 04 02 3a cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x17f417c","hex":"01 00 34 00 00 00 00 00 00 00 07 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 04 02 3a cc d4 dc 01 06 0a 00 00 00 e0 04 02 3a cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:32.603Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x62","0x17f417c","0x0","0x24a70775","0x17f417c","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x17f417c","0x0","0x24a70775","0x17f417c","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x17f417c","hex":"01 00 34 00 00 00 00 00 00 00 07 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 04 02 3a cc d4 dc 01 06 0a 00 00 00 e0 04 02 3a cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x17f417c","hex":"01 00 34 00 00 00 00 00 00 00 07 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 04 02 3a cc d4 dc 01 06 0a 00 00 00 e0 04 02 3a cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:32.609Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x62","0x17f417c","0x0","0x24a708bd","0x17f417c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x17f417c","0x0","0x24a708bd","0x17f417c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x17f417c","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x17f417c","hex":"01 00 34 00 00 00 00 00 00 00 07 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 04 02 3a cc d4 dc 01 06 0a 00 00 00 e0 04 02 3a cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x17f417c","hex":"01 00 34 00 00 00 00 00 00 00 07 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 04 02 3a cc d4 dc 01 06 0a 00 00 00 e0 04 02 3a cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:32.614Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:32.615Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:32.615Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:32.615Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:32.615Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x522f154","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x522f154","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x5209960","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x522f154","hex":"01 00 00 00 00 00 00 00 00 00 72 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x522f154","hex":"01 00 00 00 00 00 00 00 00 00 72 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:32.638Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x1","0x2e","0x522f154","0x24a707c5","0x17ee8a0","0x520995c","0x52098b8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x522f154","0x24a707c5","0x17ee8a0","0x520995c","0x52098b8","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x522f154","hex":"01 00 00 00 00 00 00 00 00 00 72 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x522f154","hex":"01 00 00 00 00 00 00 00 00 00 72 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:32.645Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x2e","0x522f154","0x0","0x24a70775","0x522f154","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x522f154","0x0","0x24a70775","0x522f154","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x522f154","hex":"01 00 00 00 00 00 00 00 00 00 72 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x522f154","hex":"01 00 00 00 00 00 00 00 00 00 72 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:32.654Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x2e","0x522f154","0x0","0x24a708bd","0x522f154","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x522f154","0x0","0x24a708bd","0x522f154","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x522f154","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x522f154","hex":"01 00 00 00 00 00 00 00 00 00 72 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x522f154","hex":"01 00 00 00 00 00 00 00 00 00 72 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:32.661Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x196574c","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x196574c","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x52036a8","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x196574c","hex":"01 00 00 00 00 00 00 00 00 00 07 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x196574c","hex":"01 00 00 00 00 00 00 00 00 00 07 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:32.668Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:32.669Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:32.669Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:32.669Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:32.669Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x2","0x2e","0x196574c","0x27e7023d","0x23eed68","0x52036a4","0x5203600","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x196574c","0x27e7023d","0x23eed68","0x52036a4","0x5203600","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x196574c","hex":"01 00 00 00 00 00 00 00 00 00 07 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x196574c","hex":"01 00 00 00 00 00 00 00 00 00 07 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:32.676Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x2e","0x196574c","0x0","0x27e703ad","0x196574c","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x196574c","0x0","0x27e703ad","0x196574c","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x196574c","hex":"01 00 00 00 00 00 00 00 00 00 07 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x196574c","hex":"01 00 00 00 00 00 00 00 00 00 07 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:32.684Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x2e","0x196574c","0x0","0x27e703f5","0x196574c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x196574c","0x0","0x27e703f5","0x196574c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x196574c","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x196574c","hex":"01 00 00 00 00 00 00 00 00 00 07 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x196574c","hex":"01 00 00 00 00 00 00 00 00 00 07 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:32.689Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:32.689Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:32.689Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:32.689Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:32.690Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eeb9c","args":["0x1","0x1","0x7308","0x51","0x94ee10","0x27e70315","0x23eec60","0x23eec88","0x220a548","0x0"],"stack":["0x9be1db","0x1","0x1","0x7308","0x51","0x94ee10","0x27e70315","0x23eec60","0x23eec88","0x220a548","0x0","0x3","0x2","0x70ec0005","0x21f3c50","0x9d2b7c","0x23","0x21f3c50"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":81,"ptr":"0x94ee10","hex":"01 00 23 00 00 00 05 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 08 73 00 00 01 00 00 00 01 00 00 00 08 73 00 00 01 03 00 ff 80 ee 36 00 16 01 00 01 00 00 00 01 00 00 00 01 00 00 00 08 73 00 00 00 00 00 00 03 00 00 00 02 00 00 00 05 00 ec 70"},{"source":"args.direct","sizeIndex":11,"ptrIndex":12,"size":2,"ptr":"0x70ec0005","hex":"00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":81,"ptr":"0x94ee10","hex":"01 00 23 00 00 00 05 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 08 73 00 00 01 00 00 00 01 00 00 00 08 73 00 00 01 03 00 ff 80 ee 36 00 16 01 00 01 00 00 00 01 00 00 00 01 00 00 00 08 73 00 00 00 00 00 00 03 00 00 00 02 00 00 00 05 00 ec 70"},{"source":"stack.direct","sizeIndex":12,"ptrIndex":13,"size":2,"ptr":"0x70ec0005","hex":"00 00"},{"source":"stack.direct","sizeIndex":16,"ptrIndex":17,"size":35,"ptr":"0x21f3c50","hex":"16 01 00 01 00 00 00 01 00 00 00 01 00 00 00 08 73 00 00 00 00 00 00 03 00 00 00 02 00 00 00 05 00 ec 70"},{"source":"stack.byref","sizeIndex":16,"ptrIndex":17,"size":35,"ptr":"0x1000116","hex":"00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00"}],"time":"2026-04-25T15:57:32.969Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeb54","args":["0x1","0x1200","0x51","0x94ee10","0x0","0x27e704c1","0x94ee10","0x70ec0110","0x51","0x23eec4c"],"stack":["0x9bdd43","0x1","0x1200","0x51","0x94ee10","0x0","0x27e704c1","0x94ee10","0x70ec0110","0x51","0x23eec4c","0x23eeb9c","0x51","0x1","0x23eec40","0x9cf3a6","0xffffffff","0x23eec4c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":81,"ptr":"0x94ee10","hex":"01 00 23 00 00 00 05 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 08 73 00 00 01 00 00 00 01 00 00 00 08 73 00 00 01 03 00 ff 80 ee 36 00 16 01 00 01 00 00 00 01 00 00 00 01 00 00 00 08 73 00 00 00 00 00 00 03 00 00 00 02 00 00 00 05 00 ec 70"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":81,"ptr":"0x23eec4c","hex":"a8 ec 3e 02 dc e4 9b 00 01 00 00 00 01 00 00 00 08 73 00 00 01 00 00 00 01 00 00 00 08 73 00 00 05 00 00 00 e8 ff 9e 00 08 c2 26 01 08 73 00 00 01 00 00 00 01 00 00 00 08 73 00 00 01 00 00 00 01 00 00 00 08 73 00 00 01 00 00 00 01 00 00 00 08"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":81,"ptr":"0x23eeca8","hex":"18 ed 3e 02 7f 03 9c 00 28 30 1f 02 01 00 00 00 41 02 e7 27 a8 01 9f 00 6c 3c 20 05 00 00 00 00 08 c2 26 01 5e 80 fe 70 01 00 00 00 68 ed 3e 02 1c 38 fe 70 b8 6f 26 01 00 00 00 00 eb ec 3e 02 b0 6b 26 00 00 ed 3e 02 4d 5a fe 70 b8 6f 26 01 00"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eec40","hex":"0c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed0c","hex":"70"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":81,"ptr":"0x94ee10","hex":"01 00 23 00 00 00 05 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 08 73 00 00 01 00 00 00 01 00 00 00 08 73 00 00 01 03 00 ff 80 ee 36 00 16 01 00 01 00 00 00 01 00 00 00 01 00 00 00 08 73 00 00 00 00 00 00 03 00 00 00 02 00 00 00 05 00 ec 70"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":81,"ptr":"0x23eec4c","hex":"a8 ec 3e 02 dc e4 9b 00 01 00 00 00 01 00 00 00 08 73 00 00 01 00 00 00 01 00 00 00 08 73 00 00 05 00 00 00 e8 ff 9e 00 08 c2 26 01 08 73 00 00 01 00 00 00 01 00 00 00 08 73 00 00 01 00 00 00 01 00 00 00 08 73 00 00 01 00 00 00 01 00 00 00 08"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":81,"ptr":"0x23eeca8","hex":"18 ed 3e 02 7f 03 9c 00 28 30 1f 02 01 00 00 00 41 02 e7 27 a8 01 9f 00 6c 3c 20 05 00 00 00 00 08 c2 26 01 5e 80 fe 70 01 00 00 00 68 ed 3e 02 1c 38 fe 70 b8 6f 26 01 00 00 00 00 eb ec 3e 02 b0 6b 26 00 00 ed 3e 02 4d 5a fe 70 b8 6f 26 01 00"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eec40","hex":"0c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed0c","hex":"70"}],"time":"2026-04-25T15:57:32.977Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eeaf0","args":["0x1","0x51","0x94ee10","0x0","0x27e70409","0x94ee10","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x51","0x94ee10","0x0","0x27e70409","0x94ee10","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x94ee10","0x9effe8","0x23eeb98"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":81,"ptr":"0x94ee10","hex":"01 00 23 00 00 00 05 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 08 73 00 00 01 00 00 00 01 00 00 00 08 73 00 00 01 03 00 ff 80 ee 36 00 16 01 00 01 00 00 00 01 00 00 00 01 00 00 00 08 73 00 00 00 00 00 00 03 00 00 00 02 00 00 00 05 00 ec 70"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":81,"ptr":"0x94ee10","hex":"01 00 23 00 00 00 05 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 08 73 00 00 01 00 00 00 01 00 00 00 08 73 00 00 01 03 00 ff 80 ee 36 00 16 01 00 01 00 00 00 01 00 00 00 01 00 00 00 08 73 00 00 00 00 00 00 03 00 00 00 02 00 00 00 05 00 ec 70"}],"time":"2026-04-25T15:57:32.982Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:32.982Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:32.982Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:32.982Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.LocalCallbackDataReceived","retval":"0x0","time":"2026-04-25T15:57:32.982Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x523467c","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x523467c","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x5209960","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x523467c","hex":"01 00 34 00 00 00 00 00 00 00 73 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 40 34 36 3a cc d4 dc 01 06 0a 00 00 00 40 34 36 3a cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x523467c","hex":"01 00 34 00 00 00 00 00 00 00 73 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 40 34 36 3a cc d4 dc 01 06 0a 00 00 00 40 34 36 3a cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:33.011Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffd","0x62","0x523467c","0x27e7023d","0x23eed68","0x520995c","0x52098b8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x523467c","0x27e7023d","0x23eed68","0x520995c","0x52098b8","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x523467c","hex":"01 00 34 00 00 00 00 00 00 00 73 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 40 34 36 3a cc d4 dc 01 06 0a 00 00 00 40 34 36 3a cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x523467c","hex":"01 00 34 00 00 00 00 00 00 00 73 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 40 34 36 3a cc d4 dc 01 06 0a 00 00 00 40 34 36 3a cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:33.018Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x523467c","0x0","0x27e703ad","0x523467c","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x523467c","0x0","0x27e703ad","0x523467c","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x523467c","hex":"01 00 34 00 00 00 00 00 00 00 73 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 40 34 36 3a cc d4 dc 01 06 0a 00 00 00 40 34 36 3a cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x523467c","hex":"01 00 34 00 00 00 00 00 00 00 73 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 40 34 36 3a cc d4 dc 01 06 0a 00 00 00 40 34 36 3a cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:33.024Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x523467c","0x0","0x27e703f5","0x523467c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x523467c","0x0","0x27e703f5","0x523467c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x523467c","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x523467c","hex":"01 00 34 00 00 00 00 00 00 00 73 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 40 34 36 3a cc d4 dc 01 06 0a 00 00 00 40 34 36 3a cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x523467c","hex":"01 00 34 00 00 00 00 00 00 00 73 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 40 34 36 3a cc d4 dc 01 06 0a 00 00 00 40 34 36 3a cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:33.029Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:33.030Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:33.030Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:33.030Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:33.030Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x518060c","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x518060c","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x18e6f50","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x518060c","hex":"01 00 34 00 00 00 00 00 00 00 74 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 40 34 36 3a cc d4 dc 01 06 0a 00 00 00 40 34 36 3a cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x518060c","hex":"01 00 34 00 00 00 00 00 00 00 74 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 40 34 36 3a cc d4 dc 01 06 0a 00 00 00 40 34 36 3a cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:33.038Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffe","0x62","0x518060c","0x27e7023d","0x23eed68","0x18e6f4c","0x18e6ea8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x518060c","0x27e7023d","0x23eed68","0x18e6f4c","0x18e6ea8","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x518060c","hex":"01 00 34 00 00 00 00 00 00 00 74 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 40 34 36 3a cc d4 dc 01 06 0a 00 00 00 40 34 36 3a cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x518060c","hex":"01 00 34 00 00 00 00 00 00 00 74 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 40 34 36 3a cc d4 dc 01 06 0a 00 00 00 40 34 36 3a cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:33.044Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x518060c","0x0","0x27e703ad","0x518060c","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x518060c","0x0","0x27e703ad","0x518060c","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x518060c","hex":"01 00 34 00 00 00 00 00 00 00 74 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 40 34 36 3a cc d4 dc 01 06 0a 00 00 00 40 34 36 3a cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x518060c","hex":"01 00 34 00 00 00 00 00 00 00 74 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 40 34 36 3a cc d4 dc 01 06 0a 00 00 00 40 34 36 3a cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:33.050Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x518060c","0x0","0x27e703f5","0x518060c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x518060c","0x0","0x27e703f5","0x518060c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x518060c","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x518060c","hex":"01 00 34 00 00 00 00 00 00 00 74 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 40 34 36 3a cc d4 dc 01 06 0a 00 00 00 40 34 36 3a cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x518060c","hex":"01 00 34 00 00 00 00 00 00 00 74 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 40 34 36 3a cc d4 dc 01 06 0a 00 00 00 40 34 36 3a cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:33.055Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:33.056Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:33.056Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:33.056Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:33.056Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x17fa7ac","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x17fa7ac","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x18e6f50","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x17fa7ac","hex":"01 00 00 00 00 00 00 00 00 00 74 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x17fa7ac","hex":"01 00 00 00 00 00 00 00 00 00 74 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:33.070Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x1","0x2e","0x17fa7ac","0x27e7023d","0x23eed68","0x18e6f4c","0x18e6ea8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x17fa7ac","0x27e7023d","0x23eed68","0x18e6f4c","0x18e6ea8","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x17fa7ac","hex":"01 00 00 00 00 00 00 00 00 00 74 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x17fa7ac","hex":"01 00 00 00 00 00 00 00 00 00 74 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:33.075Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x2e","0x17fa7ac","0x0","0x27e703ad","0x17fa7ac","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x17fa7ac","0x0","0x27e703ad","0x17fa7ac","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x17fa7ac","hex":"01 00 00 00 00 00 00 00 00 00 74 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x17fa7ac","hex":"01 00 00 00 00 00 00 00 00 00 74 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:33.081Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x2e","0x17fa7ac","0x0","0x27e703f5","0x17fa7ac","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x17fa7ac","0x0","0x27e703f5","0x17fa7ac","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x17fa7ac","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x17fa7ac","hex":"01 00 00 00 00 00 00 00 00 00 74 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x17fa7ac","hex":"01 00 00 00 00 00 00 00 00 00 74 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:33.086Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x1964644","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x1964644","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x52030e0","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1964644","hex":"01 00 00 00 00 00 00 00 00 00 73 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x1964644","hex":"01 00 00 00 00 00 00 00 00 00 73 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:33.093Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:33.093Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:33.093Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:33.094Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:33.094Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x522f154","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x522f154","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x5209960","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x522f154","hex":"01 00 34 00 00 00 00 00 00 00 08 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 29 4e 3a cc d4 dc 01 06 0a 00 00 00 10 29 4e 3a cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x522f154","hex":"01 00 34 00 00 00 00 00 00 00 08 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 29 4e 3a cc d4 dc 01 06 0a 00 00 00 10 29 4e 3a cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:33.101Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x1","0x2e","0x1964644","0x24a707c5","0x17ee8a0","0x52030dc","0x5203038","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x1964644","0x24a707c5","0x17ee8a0","0x52030dc","0x5203038","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1964644","hex":"01 00 00 00 00 00 00 00 00 00 73 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1964644","hex":"01 00 00 00 00 00 00 00 00 00 73 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:33.108Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x2e","0x1964644","0x0","0x24a70775","0x1964644","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x1964644","0x0","0x24a70775","0x1964644","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1964644","hex":"01 00 00 00 00 00 00 00 00 00 73 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1964644","hex":"01 00 00 00 00 00 00 00 00 00 73 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:33.114Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x2e","0x1964644","0x0","0x24a708bd","0x1964644","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x1964644","0x0","0x24a708bd","0x1964644","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1964644","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x1964644","hex":"01 00 00 00 00 00 00 00 00 00 73 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1964644","hex":"01 00 00 00 00 00 00 00 00 00 73 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:33.118Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:33.118Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:33.118Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:33.119Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:33.119Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x7ffd","0x62","0x522f154","0x255c006d","0x85ef38","0x520995c","0x52098b8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x522f154","0x255c006d","0x85ef38","0x520995c","0x52098b8","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x522f154","hex":"01 00 34 00 00 00 00 00 00 00 08 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 29 4e 3a cc d4 dc 01 06 0a 00 00 00 10 29 4e 3a cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x522f154","hex":"01 00 34 00 00 00 00 00 00 00 08 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 29 4e 3a cc d4 dc 01 06 0a 00 00 00 10 29 4e 3a cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:33.125Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x62","0x522f154","0x0","0x255c019d","0x522f154","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x522f154","0x0","0x255c019d","0x522f154","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x522f154","hex":"01 00 34 00 00 00 00 00 00 00 08 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 29 4e 3a cc d4 dc 01 06 0a 00 00 00 10 29 4e 3a cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x522f154","hex":"01 00 34 00 00 00 00 00 00 00 08 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 29 4e 3a cc d4 dc 01 06 0a 00 00 00 10 29 4e 3a cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:33.132Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x62","0x522f154","0x0","0x255c0125","0x522f154","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x522f154","0x0","0x255c0125","0x522f154","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x522f154","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x522f154","hex":"01 00 34 00 00 00 00 00 00 00 08 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 29 4e 3a cc d4 dc 01 06 0a 00 00 00 10 29 4e 3a cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x522f154","hex":"01 00 34 00 00 00 00 00 00 00 08 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 29 4e 3a cc d4 dc 01 06 0a 00 00 00 10 29 4e 3a cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:33.137Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:33.137Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:33.137Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:33.138Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:33.138Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x51fa864","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x51fa864","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x187d8a8","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51fa864","hex":"01 00 00 00 00 00 00 00 00 00 08 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x51fa864","hex":"01 00 00 00 00 00 00 00 00 00 08 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:33.182Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x2","0x2e","0x51fa864","0x255c006d","0x85ef38","0x187d8a4","0x187d800","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x51fa864","0x255c006d","0x85ef38","0x187d8a4","0x187d800","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51fa864","hex":"01 00 00 00 00 00 00 00 00 00 08 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51fa864","hex":"01 00 00 00 00 00 00 00 00 00 08 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:33.188Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x2e","0x51fa864","0x0","0x255c019d","0x51fa864","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x51fa864","0x0","0x255c019d","0x51fa864","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51fa864","hex":"01 00 00 00 00 00 00 00 00 00 08 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51fa864","hex":"01 00 00 00 00 00 00 00 00 00 08 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:33.194Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x2e","0x51fa864","0x0","0x255c0125","0x51fa864","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x51fa864","0x0","0x255c0125","0x51fa864","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51fa864","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x51fa864","hex":"01 00 00 00 00 00 00 00 00 00 08 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51fa864","hex":"01 00 00 00 00 00 00 00 00 00 08 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:33.198Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:33.199Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:33.199Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:33.199Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:33.199Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x18b7b24","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x18b7b24","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x18e0978","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b7b24","hex":"01 00 34 00 00 00 00 00 00 00 75 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 cd 82 3a cc d4 dc 01 06 0a 00 00 00 a0 cd 82 3a cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18b7b24","hex":"01 00 34 00 00 00 00 00 00 00 75 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 cd 82 3a cc d4 dc 01 06 0a 00 00 00 a0 cd 82 3a cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:33.487Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x7ffd","0x62","0x18b7b24","0x255c006d","0x85ef38","0x18e0974","0x18e08d0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18b7b24","0x255c006d","0x85ef38","0x18e0974","0x18e08d0","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b7b24","hex":"01 00 34 00 00 00 00 00 00 00 75 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 cd 82 3a cc d4 dc 01 06 0a 00 00 00 a0 cd 82 3a cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b7b24","hex":"01 00 34 00 00 00 00 00 00 00 75 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 cd 82 3a cc d4 dc 01 06 0a 00 00 00 a0 cd 82 3a cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:33.493Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x62","0x18b7b24","0x0","0x255c019d","0x18b7b24","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18b7b24","0x0","0x255c019d","0x18b7b24","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b7b24","hex":"01 00 34 00 00 00 00 00 00 00 75 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 cd 82 3a cc d4 dc 01 06 0a 00 00 00 a0 cd 82 3a cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b7b24","hex":"01 00 34 00 00 00 00 00 00 00 75 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 cd 82 3a cc d4 dc 01 06 0a 00 00 00 a0 cd 82 3a cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:33.499Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x62","0x18b7b24","0x0","0x255c0125","0x18b7b24","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18b7b24","0x0","0x255c0125","0x18b7b24","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b7b24","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18b7b24","hex":"01 00 34 00 00 00 00 00 00 00 75 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 cd 82 3a cc d4 dc 01 06 0a 00 00 00 a0 cd 82 3a cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b7b24","hex":"01 00 34 00 00 00 00 00 00 00 75 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 cd 82 3a cc d4 dc 01 06 0a 00 00 00 a0 cd 82 3a cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:33.505Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:33.505Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:33.505Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:33.505Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:33.506Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x18b480c","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x18b480c","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x18e0978","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b480c","hex":"01 00 34 00 00 00 00 00 00 00 76 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 cd 82 3a cc d4 dc 01 06 0a 00 00 00 a0 cd 82 3a cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18b480c","hex":"01 00 34 00 00 00 00 00 00 00 76 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 cd 82 3a cc d4 dc 01 06 0a 00 00 00 a0 cd 82 3a cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:33.513Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x7ffe","0x62","0x18b480c","0x255c006d","0x85ef38","0x18e0974","0x18e08d0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x18b480c","0x255c006d","0x85ef38","0x18e0974","0x18e08d0","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b480c","hex":"01 00 34 00 00 00 00 00 00 00 76 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 cd 82 3a cc d4 dc 01 06 0a 00 00 00 a0 cd 82 3a cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b480c","hex":"01 00 34 00 00 00 00 00 00 00 76 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 cd 82 3a cc d4 dc 01 06 0a 00 00 00 a0 cd 82 3a cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:33.519Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x62","0x18b480c","0x0","0x255c019d","0x18b480c","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18b480c","0x0","0x255c019d","0x18b480c","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b480c","hex":"01 00 34 00 00 00 00 00 00 00 76 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 cd 82 3a cc d4 dc 01 06 0a 00 00 00 a0 cd 82 3a cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b480c","hex":"01 00 34 00 00 00 00 00 00 00 76 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 cd 82 3a cc d4 dc 01 06 0a 00 00 00 a0 cd 82 3a cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:33.526Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x62","0x18b480c","0x0","0x255c0125","0x18b480c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18b480c","0x0","0x255c0125","0x18b480c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b480c","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18b480c","hex":"01 00 34 00 00 00 00 00 00 00 76 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 cd 82 3a cc d4 dc 01 06 0a 00 00 00 a0 cd 82 3a cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b480c","hex":"01 00 34 00 00 00 00 00 00 00 76 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 cd 82 3a cc d4 dc 01 06 0a 00 00 00 a0 cd 82 3a cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:33.531Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:33.531Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:33.531Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:33.531Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:33.531Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x522f154","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x522f154","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x5209960","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x522f154","hex":"01 00 34 00 00 00 00 00 00 00 09 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 9b 9a 3a cc d4 dc 01 06 0a 00 00 00 60 9b 9a 3a cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x522f154","hex":"01 00 34 00 00 00 00 00 00 00 09 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 9b 9a 3a cc d4 dc 01 06 0a 00 00 00 60 9b 9a 3a cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:33.597Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x7ffd","0x62","0x522f154","0x255c006d","0x85ef38","0x520995c","0x52098b8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x522f154","0x255c006d","0x85ef38","0x520995c","0x52098b8","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x522f154","hex":"01 00 34 00 00 00 00 00 00 00 09 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 9b 9a 3a cc d4 dc 01 06 0a 00 00 00 60 9b 9a 3a cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x522f154","hex":"01 00 34 00 00 00 00 00 00 00 09 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 9b 9a 3a cc d4 dc 01 06 0a 00 00 00 60 9b 9a 3a cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:33.603Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x62","0x522f154","0x0","0x255c019d","0x522f154","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x522f154","0x0","0x255c019d","0x522f154","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x522f154","hex":"01 00 34 00 00 00 00 00 00 00 09 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 9b 9a 3a cc d4 dc 01 06 0a 00 00 00 60 9b 9a 3a cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x522f154","hex":"01 00 34 00 00 00 00 00 00 00 09 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 9b 9a 3a cc d4 dc 01 06 0a 00 00 00 60 9b 9a 3a cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:33.610Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x62","0x522f154","0x0","0x255c0125","0x522f154","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x522f154","0x0","0x255c0125","0x522f154","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x522f154","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x522f154","hex":"01 00 34 00 00 00 00 00 00 00 09 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 9b 9a 3a cc d4 dc 01 06 0a 00 00 00 60 9b 9a 3a cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x522f154","hex":"01 00 34 00 00 00 00 00 00 00 09 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 9b 9a 3a cc d4 dc 01 06 0a 00 00 00 60 9b 9a 3a cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:33.615Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x195be04","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x195be04","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x5205f20","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x195be04","hex":"01 00 00 00 00 00 00 00 00 00 75 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x195be04","hex":"01 00 00 00 00 00 00 00 00 00 75 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:33.625Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x51c684c","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x51c684c","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x18e2c28","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51c684c","hex":"01 00 00 00 00 00 00 00 00 00 76 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x51c684c","hex":"01 00 00 00 00 00 00 00 00 00 76 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:33.632Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:33.633Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:33.633Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:33.633Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:33.634Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x1","0x2e","0x195be04","0x27e7023d","0x23eed68","0x5205f1c","0x5205e78","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x195be04","0x27e7023d","0x23eed68","0x5205f1c","0x5205e78","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x195be04","hex":"01 00 00 00 00 00 00 00 00 00 75 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x195be04","hex":"01 00 00 00 00 00 00 00 00 00 75 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:33.640Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x2e","0x195be04","0x0","0x27e703ad","0x195be04","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x195be04","0x0","0x27e703ad","0x195be04","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x195be04","hex":"01 00 00 00 00 00 00 00 00 00 75 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x195be04","hex":"01 00 00 00 00 00 00 00 00 00 75 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:33.646Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x2e","0x195be04","0x0","0x27e703f5","0x195be04","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x195be04","0x0","0x27e703f5","0x195be04","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x195be04","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x195be04","hex":"01 00 00 00 00 00 00 00 00 00 75 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x195be04","hex":"01 00 00 00 00 00 00 00 00 00 75 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:33.651Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:33.651Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:33.651Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:33.652Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:33.652Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x1","0x2e","0x51c684c","0x24a707c5","0x17ee8a0","0x18e2c24","0x18e2b80","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x51c684c","0x24a707c5","0x17ee8a0","0x18e2c24","0x18e2b80","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51c684c","hex":"01 00 00 00 00 00 00 00 00 00 76 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51c684c","hex":"01 00 00 00 00 00 00 00 00 00 76 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:33.657Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x2e","0x51c684c","0x0","0x24a70775","0x51c684c","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x51c684c","0x0","0x24a70775","0x51c684c","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51c684c","hex":"01 00 00 00 00 00 00 00 00 00 76 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51c684c","hex":"01 00 00 00 00 00 00 00 00 00 76 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:33.664Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x2e","0x51c684c","0x0","0x24a708bd","0x51c684c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x51c684c","0x0","0x24a708bd","0x51c684c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51c684c","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x51c684c","hex":"01 00 00 00 00 00 00 00 00 00 76 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51c684c","hex":"01 00 00 00 00 00 00 00 00 00 76 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:33.669Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x51bf114","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x51bf114","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x52064e8","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51bf114","hex":"01 00 00 00 00 00 00 00 00 00 09 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x51bf114","hex":"01 00 00 00 00 00 00 00 00 00 09 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:33.676Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:33.676Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:33.677Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:33.677Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:33.677Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x2","0x2e","0x51bf114","0x27e7023d","0x23eed68","0x52064e4","0x5206440","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x51bf114","0x27e7023d","0x23eed68","0x52064e4","0x5206440","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51bf114","hex":"01 00 00 00 00 00 00 00 00 00 09 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51bf114","hex":"01 00 00 00 00 00 00 00 00 00 09 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:33.682Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x2e","0x51bf114","0x0","0x27e703ad","0x51bf114","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x51bf114","0x0","0x27e703ad","0x51bf114","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51bf114","hex":"01 00 00 00 00 00 00 00 00 00 09 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51bf114","hex":"01 00 00 00 00 00 00 00 00 00 09 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:33.689Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x2e","0x51bf114","0x0","0x27e703f5","0x51bf114","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x51bf114","0x0","0x27e703f5","0x51bf114","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51bf114","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x51bf114","hex":"01 00 00 00 00 00 00 00 00 00 09 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51bf114","hex":"01 00 00 00 00 00 00 00 00 00 09 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:33.694Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:33.694Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:33.694Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:33.694Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:33.694Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x195cf0c","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x195cf0c","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x5205390","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x195cf0c","hex":"01 00 34 00 00 00 00 00 00 00 77 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 18 cf 3a cc d4 dc 01 06 0a 00 00 00 e0 18 cf 3a cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x195cf0c","hex":"01 00 34 00 00 00 00 00 00 00 77 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 18 cf 3a cc d4 dc 01 06 0a 00 00 00 e0 18 cf 3a cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:33.999Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffd","0x62","0x195cf0c","0x27e7023d","0x23eed68","0x520538c","0x52052e8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x195cf0c","0x27e7023d","0x23eed68","0x520538c","0x52052e8","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x195cf0c","hex":"01 00 34 00 00 00 00 00 00 00 77 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 18 cf 3a cc d4 dc 01 06 0a 00 00 00 e0 18 cf 3a cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x195cf0c","hex":"01 00 34 00 00 00 00 00 00 00 77 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 18 cf 3a cc d4 dc 01 06 0a 00 00 00 e0 18 cf 3a cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:34.006Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x195cf0c","0x0","0x27e703ad","0x195cf0c","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x195cf0c","0x0","0x27e703ad","0x195cf0c","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x195cf0c","hex":"01 00 34 00 00 00 00 00 00 00 77 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 18 cf 3a cc d4 dc 01 06 0a 00 00 00 e0 18 cf 3a cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x195cf0c","hex":"01 00 34 00 00 00 00 00 00 00 77 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 18 cf 3a cc d4 dc 01 06 0a 00 00 00 e0 18 cf 3a cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:34.012Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x195cf0c","0x0","0x27e703f5","0x195cf0c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x195cf0c","0x0","0x27e703f5","0x195cf0c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x195cf0c","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x195cf0c","hex":"01 00 34 00 00 00 00 00 00 00 77 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 18 cf 3a cc d4 dc 01 06 0a 00 00 00 e0 18 cf 3a cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x195cf0c","hex":"01 00 34 00 00 00 00 00 00 00 77 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 18 cf 3a cc d4 dc 01 06 0a 00 00 00 e0 18 cf 3a cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:34.017Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:34.017Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:34.018Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:34.018Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:34.018Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x51c684c","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x51c684c","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x18e2c28","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51c684c","hex":"01 00 34 00 00 00 00 00 00 00 78 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 18 cf 3a cc d4 dc 01 06 0a 00 00 00 e0 18 cf 3a cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51c684c","hex":"01 00 34 00 00 00 00 00 00 00 78 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 18 cf 3a cc d4 dc 01 06 0a 00 00 00 e0 18 cf 3a cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:34.026Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffe","0x62","0x51c684c","0x27e7023d","0x23eed68","0x18e2c24","0x18e2b80","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x51c684c","0x27e7023d","0x23eed68","0x18e2c24","0x18e2b80","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51c684c","hex":"01 00 34 00 00 00 00 00 00 00 78 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 18 cf 3a cc d4 dc 01 06 0a 00 00 00 e0 18 cf 3a cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51c684c","hex":"01 00 34 00 00 00 00 00 00 00 78 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 18 cf 3a cc d4 dc 01 06 0a 00 00 00 e0 18 cf 3a cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:34.032Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x51c684c","0x0","0x27e703ad","0x51c684c","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51c684c","0x0","0x27e703ad","0x51c684c","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51c684c","hex":"01 00 34 00 00 00 00 00 00 00 78 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 18 cf 3a cc d4 dc 01 06 0a 00 00 00 e0 18 cf 3a cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51c684c","hex":"01 00 34 00 00 00 00 00 00 00 78 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 18 cf 3a cc d4 dc 01 06 0a 00 00 00 e0 18 cf 3a cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:34.038Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x51c684c","0x0","0x27e703f5","0x51c684c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51c684c","0x0","0x27e703f5","0x51c684c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51c684c","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51c684c","hex":"01 00 34 00 00 00 00 00 00 00 78 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 18 cf 3a cc d4 dc 01 06 0a 00 00 00 e0 18 cf 3a cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51c684c","hex":"01 00 34 00 00 00 00 00 00 00 78 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 18 cf 3a cc d4 dc 01 06 0a 00 00 00 e0 18 cf 3a cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:34.043Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:34.043Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:34.043Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:34.043Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:34.043Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x18bbf44","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x18bbf44","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x5203c70","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18bbf44","hex":"01 00 00 00 00 00 00 00 00 00 78 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18bbf44","hex":"01 00 00 00 00 00 00 00 00 00 78 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:34.052Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x1","0x2e","0x18bbf44","0x27e7023d","0x23eed68","0x5203c6c","0x5203bc8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18bbf44","0x27e7023d","0x23eed68","0x5203c6c","0x5203bc8","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18bbf44","hex":"01 00 00 00 00 00 00 00 00 00 78 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18bbf44","hex":"01 00 00 00 00 00 00 00 00 00 78 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:34.058Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x2e","0x18bbf44","0x0","0x27e703ad","0x18bbf44","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18bbf44","0x0","0x27e703ad","0x18bbf44","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18bbf44","hex":"01 00 00 00 00 00 00 00 00 00 78 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18bbf44","hex":"01 00 00 00 00 00 00 00 00 00 78 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:34.064Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x2e","0x18bbf44","0x0","0x27e703f5","0x18bbf44","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18bbf44","0x0","0x27e703f5","0x18bbf44","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18bbf44","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18bbf44","hex":"01 00 00 00 00 00 00 00 00 00 78 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18bbf44","hex":"01 00 00 00 00 00 00 00 00 00 78 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:34.069Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x18b6a1c","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x18b6a1c","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x5205958","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18b6a1c","hex":"01 00 00 00 00 00 00 00 00 00 77 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18b6a1c","hex":"01 00 00 00 00 00 00 00 00 00 77 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:34.075Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:34.076Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:34.076Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:34.076Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:34.076Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x1","0x2e","0x18b6a1c","0x24a707c5","0x17ee8a0","0x5205954","0x52058b0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18b6a1c","0x24a707c5","0x17ee8a0","0x5205954","0x52058b0","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18b6a1c","hex":"01 00 00 00 00 00 00 00 00 00 77 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18b6a1c","hex":"01 00 00 00 00 00 00 00 00 00 77 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:34.082Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x2e","0x18b6a1c","0x0","0x24a70775","0x18b6a1c","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18b6a1c","0x0","0x24a70775","0x18b6a1c","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18b6a1c","hex":"01 00 00 00 00 00 00 00 00 00 77 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18b6a1c","hex":"01 00 00 00 00 00 00 00 00 00 77 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:34.088Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x2e","0x18b6a1c","0x0","0x24a708bd","0x18b6a1c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18b6a1c","0x0","0x24a708bd","0x18b6a1c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b6a1c","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18b6a1c","hex":"01 00 00 00 00 00 00 00 00 00 77 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18b6a1c","hex":"01 00 00 00 00 00 00 00 00 00 77 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:34.093Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x517d2f4","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x517d2f4","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x18e6f50","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x517d2f4","hex":"01 00 34 00 00 00 00 00 00 00 0a 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 e6 e6 3a cc d4 dc 01 06 0a 00 00 00 a0 e6 e6 3a cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x517d2f4","hex":"01 00 34 00 00 00 00 00 00 00 0a 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 e6 e6 3a cc d4 dc 01 06 0a 00 00 00 a0 e6 e6 3a cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:34.100Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:34.100Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:34.101Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:34.101Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:34.101Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffd","0x62","0x517d2f4","0x27e7023d","0x23eed68","0x18e6f4c","0x18e6ea8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x517d2f4","0x27e7023d","0x23eed68","0x18e6f4c","0x18e6ea8","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x517d2f4","hex":"01 00 34 00 00 00 00 00 00 00 0a 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 e6 e6 3a cc d4 dc 01 06 0a 00 00 00 a0 e6 e6 3a cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x517d2f4","hex":"01 00 34 00 00 00 00 00 00 00 0a 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 e6 e6 3a cc d4 dc 01 06 0a 00 00 00 a0 e6 e6 3a cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:34.107Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x517d2f4","0x0","0x27e703ad","0x517d2f4","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x517d2f4","0x0","0x27e703ad","0x517d2f4","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x517d2f4","hex":"01 00 34 00 00 00 00 00 00 00 0a 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 e6 e6 3a cc d4 dc 01 06 0a 00 00 00 a0 e6 e6 3a cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x517d2f4","hex":"01 00 34 00 00 00 00 00 00 00 0a 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 e6 e6 3a cc d4 dc 01 06 0a 00 00 00 a0 e6 e6 3a cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:34.113Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x517d2f4","0x0","0x27e703f5","0x517d2f4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x517d2f4","0x0","0x27e703f5","0x517d2f4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x517d2f4","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x517d2f4","hex":"01 00 34 00 00 00 00 00 00 00 0a 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 e6 e6 3a cc d4 dc 01 06 0a 00 00 00 a0 e6 e6 3a cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x517d2f4","hex":"01 00 34 00 00 00 00 00 00 00 0a 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 e6 e6 3a cc d4 dc 01 06 0a 00 00 00 a0 e6 e6 3a cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:34.118Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:34.119Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:34.119Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:34.119Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:34.119Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x18b8c2c","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x18b8c2c","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x5205f20","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18b8c2c","hex":"01 00 00 00 00 00 00 00 00 00 0a 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18b8c2c","hex":"01 00 00 00 00 00 00 00 00 00 0a 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:34.164Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x2","0x2e","0x18b8c2c","0x27e7023d","0x23eed68","0x5205f1c","0x5205e78","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x18b8c2c","0x27e7023d","0x23eed68","0x5205f1c","0x5205e78","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18b8c2c","hex":"01 00 00 00 00 00 00 00 00 00 0a 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18b8c2c","hex":"01 00 00 00 00 00 00 00 00 00 0a 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:34.170Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x2e","0x18b8c2c","0x0","0x27e703ad","0x18b8c2c","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18b8c2c","0x0","0x27e703ad","0x18b8c2c","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18b8c2c","hex":"01 00 00 00 00 00 00 00 00 00 0a 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18b8c2c","hex":"01 00 00 00 00 00 00 00 00 00 0a 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:34.175Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x2e","0x18b8c2c","0x0","0x27e703f5","0x18b8c2c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18b8c2c","0x0","0x27e703f5","0x18b8c2c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b8c2c","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18b8c2c","hex":"01 00 00 00 00 00 00 00 00 00 0a 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18b8c2c","hex":"01 00 00 00 00 00 00 00 00 00 0a 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:34.180Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:34.180Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:34.181Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:34.181Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:34.181Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x195be04","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x195be04","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x5205f20","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x195be04","hex":"01 00 34 00 00 00 00 00 00 00 79 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 00 16 1b 3b cc d4 dc 01 06 0a 00 00 00 00 16 1b 3b cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x195be04","hex":"01 00 34 00 00 00 00 00 00 00 79 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 00 16 1b 3b cc d4 dc 01 06 0a 00 00 00 00 16 1b 3b cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:34.487Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffd","0x62","0x195be04","0x27e7023d","0x23eed68","0x5205f1c","0x5205e78","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x195be04","0x27e7023d","0x23eed68","0x5205f1c","0x5205e78","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x195be04","hex":"01 00 34 00 00 00 00 00 00 00 79 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 00 16 1b 3b cc d4 dc 01 06 0a 00 00 00 00 16 1b 3b cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x195be04","hex":"01 00 34 00 00 00 00 00 00 00 79 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 00 16 1b 3b cc d4 dc 01 06 0a 00 00 00 00 16 1b 3b cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:34.493Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x195be04","0x0","0x27e703ad","0x195be04","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x195be04","0x0","0x27e703ad","0x195be04","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x195be04","hex":"01 00 34 00 00 00 00 00 00 00 79 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 00 16 1b 3b cc d4 dc 01 06 0a 00 00 00 00 16 1b 3b cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x195be04","hex":"01 00 34 00 00 00 00 00 00 00 79 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 00 16 1b 3b cc d4 dc 01 06 0a 00 00 00 00 16 1b 3b cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:34.500Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x195be04","0x0","0x27e703f5","0x195be04","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x195be04","0x0","0x27e703f5","0x195be04","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x195be04","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x195be04","hex":"01 00 34 00 00 00 00 00 00 00 79 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 00 16 1b 3b cc d4 dc 01 06 0a 00 00 00 00 16 1b 3b cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x195be04","hex":"01 00 34 00 00 00 00 00 00 00 79 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 00 16 1b 3b cc d4 dc 01 06 0a 00 00 00 00 16 1b 3b cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:34.505Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:34.506Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:34.506Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:34.506Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:34.506Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x523467c","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x523467c","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x5209960","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x523467c","hex":"01 00 34 00 00 00 00 00 00 00 7a 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 00 16 1b 3b cc d4 dc 01 06 0a 00 00 00 00 16 1b 3b cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x523467c","hex":"01 00 34 00 00 00 00 00 00 00 7a 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 00 16 1b 3b cc d4 dc 01 06 0a 00 00 00 00 16 1b 3b cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:34.515Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffe","0x62","0x523467c","0x27e7023d","0x23eed68","0x520995c","0x52098b8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x523467c","0x27e7023d","0x23eed68","0x520995c","0x52098b8","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x523467c","hex":"01 00 34 00 00 00 00 00 00 00 7a 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 00 16 1b 3b cc d4 dc 01 06 0a 00 00 00 00 16 1b 3b cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x523467c","hex":"01 00 34 00 00 00 00 00 00 00 7a 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 00 16 1b 3b cc d4 dc 01 06 0a 00 00 00 00 16 1b 3b cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:34.522Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x523467c","0x0","0x27e703ad","0x523467c","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x523467c","0x0","0x27e703ad","0x523467c","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x523467c","hex":"01 00 34 00 00 00 00 00 00 00 7a 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 00 16 1b 3b cc d4 dc 01 06 0a 00 00 00 00 16 1b 3b cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x523467c","hex":"01 00 34 00 00 00 00 00 00 00 7a 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 00 16 1b 3b cc d4 dc 01 06 0a 00 00 00 00 16 1b 3b cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:34.529Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x523467c","0x0","0x27e703f5","0x523467c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x523467c","0x0","0x27e703f5","0x523467c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x523467c","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x523467c","hex":"01 00 34 00 00 00 00 00 00 00 7a 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 00 16 1b 3b cc d4 dc 01 06 0a 00 00 00 00 16 1b 3b cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x523467c","hex":"01 00 34 00 00 00 00 00 00 00 7a 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 00 16 1b 3b cc d4 dc 01 06 0a 00 00 00 00 16 1b 3b cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:34.534Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:34.534Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:34.535Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:34.535Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:34.535Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18b8c2c","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18b8c2c","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x5205f20","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b8c2c","hex":"01 00 34 00 00 00 00 00 00 00 0b 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 0a 33 3b cc d4 dc 01 06 0a 00 00 00 d0 0a 33 3b cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18b8c2c","hex":"01 00 34 00 00 00 00 00 00 00 0b 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 0a 33 3b cc d4 dc 01 06 0a 00 00 00 d0 0a 33 3b cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:34.597Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffd","0x62","0x18b8c2c","0x27e7023d","0x23eed68","0x5205f1c","0x5205e78","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18b8c2c","0x27e7023d","0x23eed68","0x5205f1c","0x5205e78","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b8c2c","hex":"01 00 34 00 00 00 00 00 00 00 0b 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 0a 33 3b cc d4 dc 01 06 0a 00 00 00 d0 0a 33 3b cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b8c2c","hex":"01 00 34 00 00 00 00 00 00 00 0b 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 0a 33 3b cc d4 dc 01 06 0a 00 00 00 d0 0a 33 3b cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:34.602Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x18b8c2c","0x0","0x27e703ad","0x18b8c2c","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18b8c2c","0x0","0x27e703ad","0x18b8c2c","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b8c2c","hex":"01 00 34 00 00 00 00 00 00 00 0b 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 0a 33 3b cc d4 dc 01 06 0a 00 00 00 d0 0a 33 3b cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b8c2c","hex":"01 00 34 00 00 00 00 00 00 00 0b 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 0a 33 3b cc d4 dc 01 06 0a 00 00 00 d0 0a 33 3b cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:34.609Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x18b8c2c","0x0","0x27e703f5","0x18b8c2c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18b8c2c","0x0","0x27e703f5","0x18b8c2c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b8c2c","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18b8c2c","hex":"01 00 34 00 00 00 00 00 00 00 0b 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 0a 33 3b cc d4 dc 01 06 0a 00 00 00 d0 0a 33 3b cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b8c2c","hex":"01 00 34 00 00 00 00 00 00 00 0b 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 0a 33 3b cc d4 dc 01 06 0a 00 00 00 d0 0a 33 3b cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:34.614Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:34.614Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:34.614Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:34.614Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:34.615Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x18bae3c","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x18bae3c","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x52076b0","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18bae3c","hex":"01 00 00 00 00 00 00 00 00 00 7a 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18bae3c","hex":"01 00 00 00 00 00 00 00 00 00 7a 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:34.622Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x1","0x2e","0x18bae3c","0x24a707c5","0x17ee8a0","0x52076ac","0x5207608","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18bae3c","0x24a707c5","0x17ee8a0","0x52076ac","0x5207608","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18bae3c","hex":"01 00 00 00 00 00 00 00 00 00 7a 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18bae3c","hex":"01 00 00 00 00 00 00 00 00 00 7a 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:34.629Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x2e","0x18bae3c","0x0","0x24a70775","0x18bae3c","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18bae3c","0x0","0x24a70775","0x18bae3c","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18bae3c","hex":"01 00 00 00 00 00 00 00 00 00 7a 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18bae3c","hex":"01 00 00 00 00 00 00 00 00 00 7a 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:34.635Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x2e","0x18bae3c","0x0","0x24a708bd","0x18bae3c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18bae3c","0x0","0x24a708bd","0x18bae3c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18bae3c","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18bae3c","hex":"01 00 00 00 00 00 00 00 00 00 7a 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18bae3c","hex":"01 00 00 00 00 00 00 00 00 00 7a 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:34.640Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x195e014","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x195e014","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x187de70","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x195e014","hex":"01 00 00 00 00 00 00 00 00 00 79 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x195e014","hex":"01 00 00 00 00 00 00 00 00 00 79 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:34.647Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:34.647Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:34.648Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:34.648Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:34.648Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x1","0x2e","0x195e014","0x255c006d","0x85ef38","0x187de6c","0x187ddc8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x195e014","0x255c006d","0x85ef38","0x187de6c","0x187ddc8","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x195e014","hex":"01 00 00 00 00 00 00 00 00 00 79 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x195e014","hex":"01 00 00 00 00 00 00 00 00 00 79 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:34.653Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x2e","0x195e014","0x0","0x255c019d","0x195e014","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x195e014","0x0","0x255c019d","0x195e014","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x195e014","hex":"01 00 00 00 00 00 00 00 00 00 79 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x195e014","hex":"01 00 00 00 00 00 00 00 00 00 79 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:34.659Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x2e","0x195e014","0x0","0x255c0125","0x195e014","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x195e014","0x0","0x255c0125","0x195e014","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x195e014","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x195e014","hex":"01 00 00 00 00 00 00 00 00 00 79 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x195e014","hex":"01 00 00 00 00 00 00 00 00 00 79 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:34.664Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:34.664Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:34.665Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:34.665Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:34.665Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x1962434","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x1962434","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x520aab8","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1962434","hex":"01 00 00 00 00 00 00 00 00 00 0b 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x1962434","hex":"01 00 00 00 00 00 00 00 00 00 0b 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:34.674Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x2","0x2e","0x1962434","0x255c006d","0x85ef38","0x520aab4","0x520aa10","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x1962434","0x255c006d","0x85ef38","0x520aab4","0x520aa10","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1962434","hex":"01 00 00 00 00 00 00 00 00 00 0b 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1962434","hex":"01 00 00 00 00 00 00 00 00 00 0b 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:34.680Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x2e","0x1962434","0x0","0x255c019d","0x1962434","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x1962434","0x0","0x255c019d","0x1962434","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1962434","hex":"01 00 00 00 00 00 00 00 00 00 0b 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1962434","hex":"01 00 00 00 00 00 00 00 00 00 0b 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:34.686Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x2e","0x1962434","0x0","0x255c0125","0x1962434","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x1962434","0x0","0x255c0125","0x1962434","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1962434","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x1962434","hex":"01 00 00 00 00 00 00 00 00 00 0b 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1962434","hex":"01 00 00 00 00 00 00 00 00 00 0b 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:34.691Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:34.691Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:34.692Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:34.692Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:34.692Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x5238a9c","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x5238a9c","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x187fb58","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x5238a9c","hex":"01 00 34 00 00 00 00 00 00 00 7b 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 60 af 67 3b cc d4 dc 01 06 0a 00 00 00 60 af 67 3b cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x5238a9c","hex":"01 00 34 00 00 00 00 00 00 00 7b 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 60 af 67 3b cc d4 dc 01 06 0a 00 00 00 60 af 67 3b cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:35.006Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x7ffd","0x62","0x5238a9c","0x255c006d","0x85ef38","0x187fb54","0x187fab0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x5238a9c","0x255c006d","0x85ef38","0x187fb54","0x187fab0","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x5238a9c","hex":"01 00 34 00 00 00 00 00 00 00 7b 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 60 af 67 3b cc d4 dc 01 06 0a 00 00 00 60 af 67 3b cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x5238a9c","hex":"01 00 34 00 00 00 00 00 00 00 7b 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 60 af 67 3b cc d4 dc 01 06 0a 00 00 00 60 af 67 3b cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:35.013Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x62","0x5238a9c","0x0","0x255c019d","0x5238a9c","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x5238a9c","0x0","0x255c019d","0x5238a9c","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x5238a9c","hex":"01 00 34 00 00 00 00 00 00 00 7b 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 60 af 67 3b cc d4 dc 01 06 0a 00 00 00 60 af 67 3b cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x5238a9c","hex":"01 00 34 00 00 00 00 00 00 00 7b 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 60 af 67 3b cc d4 dc 01 06 0a 00 00 00 60 af 67 3b cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:35.020Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x62","0x5238a9c","0x0","0x255c0125","0x5238a9c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x5238a9c","0x0","0x255c0125","0x5238a9c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x5238a9c","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x5238a9c","hex":"01 00 34 00 00 00 00 00 00 00 7b 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 60 af 67 3b cc d4 dc 01 06 0a 00 00 00 60 af 67 3b cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x5238a9c","hex":"01 00 34 00 00 00 00 00 00 00 7b 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 60 af 67 3b cc d4 dc 01 06 0a 00 00 00 60 af 67 3b cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:35.026Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:35.026Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:35.026Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:35.026Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:35.027Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x522f154","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x522f154","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x5209960","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x522f154","hex":"01 00 34 00 00 00 00 00 00 00 7c 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 60 af 67 3b cc d4 dc 01 06 0a 00 00 00 60 af 67 3b cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x522f154","hex":"01 00 34 00 00 00 00 00 00 00 7c 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 60 af 67 3b cc d4 dc 01 06 0a 00 00 00 60 af 67 3b cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:35.035Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x7ffe","0x62","0x522f154","0x255c006d","0x85ef38","0x520995c","0x52098b8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x522f154","0x255c006d","0x85ef38","0x520995c","0x52098b8","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x522f154","hex":"01 00 34 00 00 00 00 00 00 00 7c 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 60 af 67 3b cc d4 dc 01 06 0a 00 00 00 60 af 67 3b cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x522f154","hex":"01 00 34 00 00 00 00 00 00 00 7c 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 60 af 67 3b cc d4 dc 01 06 0a 00 00 00 60 af 67 3b cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:35.041Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x62","0x522f154","0x0","0x255c019d","0x522f154","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x522f154","0x0","0x255c019d","0x522f154","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x522f154","hex":"01 00 34 00 00 00 00 00 00 00 7c 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 60 af 67 3b cc d4 dc 01 06 0a 00 00 00 60 af 67 3b cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x522f154","hex":"01 00 34 00 00 00 00 00 00 00 7c 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 60 af 67 3b cc d4 dc 01 06 0a 00 00 00 60 af 67 3b cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:35.048Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x62","0x522f154","0x0","0x255c0125","0x522f154","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x522f154","0x0","0x255c0125","0x522f154","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x522f154","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x522f154","hex":"01 00 34 00 00 00 00 00 00 00 7c 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 60 af 67 3b cc d4 dc 01 06 0a 00 00 00 60 af 67 3b cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x522f154","hex":"01 00 34 00 00 00 00 00 00 00 7c 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 60 af 67 3b cc d4 dc 01 06 0a 00 00 00 60 af 67 3b cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:35.052Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x523025c","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x523025c","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x520aab8","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x523025c","hex":"01 00 00 00 00 00 00 00 00 00 7b 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x523025c","hex":"01 00 00 00 00 00 00 00 00 00 7b 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:35.059Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:35.060Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:35.060Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:35.060Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:35.060Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x1","0x2e","0x523025c","0x24a707c5","0x17ee8a0","0x520aab4","0x520aa10","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x523025c","0x24a707c5","0x17ee8a0","0x520aab4","0x520aa10","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x523025c","hex":"01 00 00 00 00 00 00 00 00 00 7b 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x523025c","hex":"01 00 00 00 00 00 00 00 00 00 7b 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:35.066Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x2e","0x523025c","0x0","0x24a70775","0x523025c","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x523025c","0x0","0x24a70775","0x523025c","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x523025c","hex":"01 00 00 00 00 00 00 00 00 00 7b 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x523025c","hex":"01 00 00 00 00 00 00 00 00 00 7b 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:35.072Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x2e","0x523025c","0x0","0x24a708bd","0x523025c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x523025c","0x0","0x24a708bd","0x523025c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x523025c","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x523025c","hex":"01 00 00 00 00 00 00 00 00 00 7b 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x523025c","hex":"01 00 00 00 00 00 00 00 00 00 7b 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:35.076Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:35.077Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:35.077Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:35.077Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:35.077Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x51c684c","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x51c684c","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x18e2c28","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51c684c","hex":"01 00 34 00 00 00 00 00 00 00 0c 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 7d 7f 3b cc d4 dc 01 06 0a 00 00 00 20 7d 7f 3b cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51c684c","hex":"01 00 34 00 00 00 00 00 00 00 0c 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 7d 7f 3b cc d4 dc 01 06 0a 00 00 00 20 7d 7f 3b cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:35.097Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x7ffd","0x62","0x51c684c","0x24a707c5","0x17ee8a0","0x18e2c24","0x18e2b80","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x51c684c","0x24a707c5","0x17ee8a0","0x18e2c24","0x18e2b80","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51c684c","hex":"01 00 34 00 00 00 00 00 00 00 0c 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 7d 7f 3b cc d4 dc 01 06 0a 00 00 00 20 7d 7f 3b cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51c684c","hex":"01 00 34 00 00 00 00 00 00 00 0c 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 7d 7f 3b cc d4 dc 01 06 0a 00 00 00 20 7d 7f 3b cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:35.103Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x62","0x51c684c","0x0","0x24a70775","0x51c684c","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51c684c","0x0","0x24a70775","0x51c684c","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51c684c","hex":"01 00 34 00 00 00 00 00 00 00 0c 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 7d 7f 3b cc d4 dc 01 06 0a 00 00 00 20 7d 7f 3b cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51c684c","hex":"01 00 34 00 00 00 00 00 00 00 0c 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 7d 7f 3b cc d4 dc 01 06 0a 00 00 00 20 7d 7f 3b cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:35.109Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x62","0x51c684c","0x0","0x24a708bd","0x51c684c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51c684c","0x0","0x24a708bd","0x51c684c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51c684c","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51c684c","hex":"01 00 34 00 00 00 00 00 00 00 0c 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 7d 7f 3b cc d4 dc 01 06 0a 00 00 00 20 7d 7f 3b cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51c684c","hex":"01 00 34 00 00 00 00 00 00 00 0c 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 7d 7f 3b cc d4 dc 01 06 0a 00 00 00 20 7d 7f 3b cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:35.114Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:35.114Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:35.114Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:35.114Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:35.115Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x51c3534","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x51c3534","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x18e31f0","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51c3534","hex":"01 00 00 00 00 00 00 00 00 00 7c 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x51c3534","hex":"01 00 00 00 00 00 00 00 00 00 7c 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:35.152Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x1","0x2e","0x51c3534","0x24a707c5","0x17ee8a0","0x18e31ec","0x18e3148","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x51c3534","0x24a707c5","0x17ee8a0","0x18e31ec","0x18e3148","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51c3534","hex":"01 00 00 00 00 00 00 00 00 00 7c 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51c3534","hex":"01 00 00 00 00 00 00 00 00 00 7c 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:35.157Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x2e","0x51c3534","0x0","0x24a70775","0x51c3534","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x51c3534","0x0","0x24a70775","0x51c3534","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51c3534","hex":"01 00 00 00 00 00 00 00 00 00 7c 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51c3534","hex":"01 00 00 00 00 00 00 00 00 00 7c 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:35.163Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x2e","0x51c3534","0x0","0x24a708bd","0x51c3534","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x51c3534","0x0","0x24a708bd","0x51c3534","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51c3534","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x51c3534","hex":"01 00 00 00 00 00 00 00 00 00 7c 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51c3534","hex":"01 00 00 00 00 00 00 00 00 00 7c 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:35.168Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x523467c","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x523467c","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x5209960","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x523467c","hex":"01 00 00 00 00 00 00 00 00 00 0c 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x523467c","hex":"01 00 00 00 00 00 00 00 00 00 0c 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:35.175Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:35.175Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:35.175Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:35.175Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:35.175Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x2","0x2e","0x523467c","0x255c006d","0x85ef38","0x520995c","0x52098b8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x523467c","0x255c006d","0x85ef38","0x520995c","0x52098b8","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x523467c","hex":"01 00 00 00 00 00 00 00 00 00 0c 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x523467c","hex":"01 00 00 00 00 00 00 00 00 00 0c 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:35.181Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x2e","0x523467c","0x0","0x255c019d","0x523467c","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x523467c","0x0","0x255c019d","0x523467c","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x523467c","hex":"01 00 00 00 00 00 00 00 00 00 0c 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x523467c","hex":"01 00 00 00 00 00 00 00 00 00 0c 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:35.187Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x2e","0x523467c","0x0","0x255c0125","0x523467c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x523467c","0x0","0x255c0125","0x523467c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x523467c","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x523467c","hex":"01 00 00 00 00 00 00 00 00 00 0c 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x523467c","hex":"01 00 00 00 00 00 00 00 00 00 0c 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:35.192Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:35.192Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:35.192Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:35.192Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:35.192Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x18b7b24","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x18b7b24","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x18e2c28","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b7b24","hex":"01 00 34 00 00 00 00 00 00 00 7d 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 fa b3 3b cc d4 dc 01 06 0a 00 00 00 a0 fa b3 3b cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18b7b24","hex":"01 00 34 00 00 00 00 00 00 00 7d 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 fa b3 3b cc d4 dc 01 06 0a 00 00 00 a0 fa b3 3b cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:35.488Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x7ffd","0x62","0x18b7b24","0x255c006d","0x85ef38","0x18e2c24","0x18e2b80","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18b7b24","0x255c006d","0x85ef38","0x18e2c24","0x18e2b80","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b7b24","hex":"01 00 34 00 00 00 00 00 00 00 7d 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 fa b3 3b cc d4 dc 01 06 0a 00 00 00 a0 fa b3 3b cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b7b24","hex":"01 00 34 00 00 00 00 00 00 00 7d 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 fa b3 3b cc d4 dc 01 06 0a 00 00 00 a0 fa b3 3b cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:35.494Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x62","0x18b7b24","0x0","0x255c019d","0x18b7b24","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18b7b24","0x0","0x255c019d","0x18b7b24","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b7b24","hex":"01 00 34 00 00 00 00 00 00 00 7d 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 fa b3 3b cc d4 dc 01 06 0a 00 00 00 a0 fa b3 3b cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b7b24","hex":"01 00 34 00 00 00 00 00 00 00 7d 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 fa b3 3b cc d4 dc 01 06 0a 00 00 00 a0 fa b3 3b cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:35.500Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x62","0x18b7b24","0x0","0x255c0125","0x18b7b24","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18b7b24","0x0","0x255c0125","0x18b7b24","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b7b24","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18b7b24","hex":"01 00 34 00 00 00 00 00 00 00 7d 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 fa b3 3b cc d4 dc 01 06 0a 00 00 00 a0 fa b3 3b cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b7b24","hex":"01 00 34 00 00 00 00 00 00 00 7d 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 fa b3 3b cc d4 dc 01 06 0a 00 00 00 a0 fa b3 3b cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:35.506Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:35.506Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:35.506Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:35.506Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:35.507Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x5183924","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x5183924","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x18e6f50","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x5183924","hex":"01 00 34 00 00 00 00 00 00 00 7e 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 fa b3 3b cc d4 dc 01 06 0a 00 00 00 a0 fa b3 3b cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x5183924","hex":"01 00 34 00 00 00 00 00 00 00 7e 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 fa b3 3b cc d4 dc 01 06 0a 00 00 00 a0 fa b3 3b cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:35.518Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x7ffe","0x62","0x5183924","0x255c006d","0x85ef38","0x18e6f4c","0x18e6ea8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x5183924","0x255c006d","0x85ef38","0x18e6f4c","0x18e6ea8","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x5183924","hex":"01 00 34 00 00 00 00 00 00 00 7e 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 fa b3 3b cc d4 dc 01 06 0a 00 00 00 a0 fa b3 3b cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x5183924","hex":"01 00 34 00 00 00 00 00 00 00 7e 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 fa b3 3b cc d4 dc 01 06 0a 00 00 00 a0 fa b3 3b cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:35.526Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x62","0x5183924","0x0","0x255c019d","0x5183924","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x5183924","0x0","0x255c019d","0x5183924","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x5183924","hex":"01 00 34 00 00 00 00 00 00 00 7e 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 fa b3 3b cc d4 dc 01 06 0a 00 00 00 a0 fa b3 3b cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x5183924","hex":"01 00 34 00 00 00 00 00 00 00 7e 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 fa b3 3b cc d4 dc 01 06 0a 00 00 00 a0 fa b3 3b cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:35.532Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x62","0x5183924","0x0","0x255c0125","0x5183924","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x5183924","0x0","0x255c0125","0x5183924","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x5183924","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x5183924","hex":"01 00 34 00 00 00 00 00 00 00 7e 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 fa b3 3b cc d4 dc 01 06 0a 00 00 00 a0 fa b3 3b cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x5183924","hex":"01 00 34 00 00 00 00 00 00 00 7e 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 fa b3 3b cc d4 dc 01 06 0a 00 00 00 a0 fa b3 3b cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:35.537Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:35.538Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:35.538Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:35.538Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:35.538Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85ef38","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x5235784","0x206","0x6","0x8f625c","0x85f0fc"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x5235784","0x206","0x6","0x8f625c","0x85f0fc","0x76fc4ef5","0x9c1b20","0x187fb58","0x6","0xd64e6a6c","0x8f625c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x5235784","hex":"01 00 00 00 00 00 00 00 00 00 7e 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x5235784","hex":"01 00 00 00 00 00 00 00 00 00 7e 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f625c","hex":"c0 8f 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888fc0","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:35.583Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85eec8","args":["0x1","0x1","0x1","0x2e","0x5235784","0x255c006d","0x85ef38","0x187fb54","0x187fab0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x5235784","0x255c006d","0x85ef38","0x187fb54","0x187fab0","0x7700459e","0x85eed0","0x85ef84","0x85f0ec","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x5235784","hex":"01 00 00 00 00 00 00 00 00 00 7e 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x5235784","hex":"01 00 00 00 00 00 00 00 00 00 7e 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:35.589Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ee80","args":["0x1","0x1200","0x2e","0x5235784","0x0","0x255c019d","0x5235784","0x9effe8","0x1","0x85ef34"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x5235784","0x0","0x255c019d","0x5235784","0x9effe8","0x1","0x85ef34","0x85eec8","0x1","0x1","0x85ef28","0x9cf3a6","0xffffffff","0x85ef34"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x5235784","hex":"01 00 00 00 00 00 00 00 00 00 7e 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f0ec","hex":"34"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x5235784","hex":"01 00 00 00 00 00 00 00 00 00 7e 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef34","hex":"60"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85ef60","hex":"fc"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef28","hex":"ec"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f0ec","hex":"34"}],"time":"2026-04-25T15:57:35.595Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ee1c","args":["0x1","0x2e","0x5235784","0x0","0x255c0125","0x5235784","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x5235784","0x0","0x255c0125","0x5235784","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x5235784","0x9effe8","0x85eec4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x5235784","hex":"01 00 00 00 00 00 00 00 00 00 7e 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x5235784","hex":"01 00 00 00 00 00 00 00 00 00 7e 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:35.599Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x523467c","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x523467c","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x5209960","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x523467c","hex":"01 00 34 00 00 00 00 00 00 00 0d 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 a1 cb 3b cc d4 dc 01 06 0a 00 00 00 50 a1 cb 3b cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x523467c","hex":"01 00 34 00 00 00 00 00 00 00 0d 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 a1 cb 3b cc d4 dc 01 06 0a 00 00 00 50 a1 cb 3b cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:35.606Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x517d2f4","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x517d2f4","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x18e6f50","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x517d2f4","hex":"01 00 00 00 00 00 00 00 00 00 7d 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x517d2f4","hex":"01 00 00 00 00 00 00 00 00 00 7d 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:35.613Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:35.613Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:35.614Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:35.614Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:35.614Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x7ffd","0x62","0x523467c","0x27e7023d","0x23eed68","0x520995c","0x52098b8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x523467c","0x27e7023d","0x23eed68","0x520995c","0x52098b8","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x523467c","hex":"01 00 34 00 00 00 00 00 00 00 0d 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 a1 cb 3b cc d4 dc 01 06 0a 00 00 00 50 a1 cb 3b cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x523467c","hex":"01 00 34 00 00 00 00 00 00 00 0d 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 a1 cb 3b cc d4 dc 01 06 0a 00 00 00 50 a1 cb 3b cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:35.620Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x62","0x523467c","0x0","0x27e703ad","0x523467c","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x523467c","0x0","0x27e703ad","0x523467c","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x523467c","hex":"01 00 34 00 00 00 00 00 00 00 0d 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 a1 cb 3b cc d4 dc 01 06 0a 00 00 00 50 a1 cb 3b cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x523467c","hex":"01 00 34 00 00 00 00 00 00 00 0d 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 a1 cb 3b cc d4 dc 01 06 0a 00 00 00 50 a1 cb 3b cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:35.627Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x62","0x523467c","0x0","0x27e703f5","0x523467c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x523467c","0x0","0x27e703f5","0x523467c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x523467c","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x523467c","hex":"01 00 34 00 00 00 00 00 00 00 0d 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 a1 cb 3b cc d4 dc 01 06 0a 00 00 00 50 a1 cb 3b cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x523467c","hex":"01 00 34 00 00 00 00 00 00 00 0d 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 a1 cb 3b cc d4 dc 01 06 0a 00 00 00 50 a1 cb 3b cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:35.632Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:35.632Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:35.632Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:35.632Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:35.633Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x1","0x2e","0x517d2f4","0x24a707c5","0x17ee8a0","0x18e6f4c","0x18e6ea8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x517d2f4","0x24a707c5","0x17ee8a0","0x18e6f4c","0x18e6ea8","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x517d2f4","hex":"01 00 00 00 00 00 00 00 00 00 7d 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x517d2f4","hex":"01 00 00 00 00 00 00 00 00 00 7d 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:35.639Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x2e","0x517d2f4","0x0","0x24a70775","0x517d2f4","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x517d2f4","0x0","0x24a70775","0x517d2f4","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x517d2f4","hex":"01 00 00 00 00 00 00 00 00 00 7d 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x517d2f4","hex":"01 00 00 00 00 00 00 00 00 00 7d 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:35.646Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x2e","0x517d2f4","0x0","0x24a708bd","0x517d2f4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x517d2f4","0x0","0x24a708bd","0x517d2f4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x517d2f4","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x517d2f4","hex":"01 00 00 00 00 00 00 00 00 00 7d 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x517d2f4","hex":"01 00 00 00 00 00 00 00 00 00 7d 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:35.651Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:35.651Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:35.651Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:35.652Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:35.652Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x51c684c","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x51c684c","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x18e2c28","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51c684c","hex":"01 00 00 00 00 00 00 00 00 00 0d 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x51c684c","hex":"01 00 00 00 00 00 00 00 00 00 0d 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:35.662Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x2","0x2e","0x51c684c","0x24a707c5","0x17ee8a0","0x18e2c24","0x18e2b80","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x51c684c","0x24a707c5","0x17ee8a0","0x18e2c24","0x18e2b80","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51c684c","hex":"01 00 00 00 00 00 00 00 00 00 0d 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51c684c","hex":"01 00 00 00 00 00 00 00 00 00 0d 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:35.667Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x2e","0x51c684c","0x0","0x24a70775","0x51c684c","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x51c684c","0x0","0x24a70775","0x51c684c","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51c684c","hex":"01 00 00 00 00 00 00 00 00 00 0d 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51c684c","hex":"01 00 00 00 00 00 00 00 00 00 0d 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:35.673Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x2e","0x51c684c","0x0","0x24a708bd","0x51c684c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x51c684c","0x0","0x24a708bd","0x51c684c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51c684c","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x51c684c","hex":"01 00 00 00 00 00 00 00 00 00 0d 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51c684c","hex":"01 00 00 00 00 00 00 00 00 00 0d 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:35.677Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:35.678Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:35.678Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:35.678Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:35.678Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x51c9b64","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x51c9b64","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x5208dd0","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51c9b64","hex":"01 00 34 00 00 00 00 00 00 00 7f 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 45 00 3c cc d4 dc 01 06 0a 00 00 00 e0 45 00 3c cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51c9b64","hex":"01 00 34 00 00 00 00 00 00 00 7f 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 45 00 3c cc d4 dc 01 06 0a 00 00 00 e0 45 00 3c cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:35.996Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x7ffd","0x62","0x51c9b64","0x24a707c5","0x17ee8a0","0x5208dcc","0x5208d28","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x51c9b64","0x24a707c5","0x17ee8a0","0x5208dcc","0x5208d28","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51c9b64","hex":"01 00 34 00 00 00 00 00 00 00 7f 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 45 00 3c cc d4 dc 01 06 0a 00 00 00 e0 45 00 3c cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51c9b64","hex":"01 00 34 00 00 00 00 00 00 00 7f 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 45 00 3c cc d4 dc 01 06 0a 00 00 00 e0 45 00 3c cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:36.002Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x62","0x51c9b64","0x0","0x24a70775","0x51c9b64","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51c9b64","0x0","0x24a70775","0x51c9b64","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51c9b64","hex":"01 00 34 00 00 00 00 00 00 00 7f 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 45 00 3c cc d4 dc 01 06 0a 00 00 00 e0 45 00 3c cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51c9b64","hex":"01 00 34 00 00 00 00 00 00 00 7f 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 45 00 3c cc d4 dc 01 06 0a 00 00 00 e0 45 00 3c cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:36.009Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x62","0x51c9b64","0x0","0x24a708bd","0x51c9b64","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51c9b64","0x0","0x24a708bd","0x51c9b64","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51c9b64","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51c9b64","hex":"01 00 34 00 00 00 00 00 00 00 7f 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 45 00 3c cc d4 dc 01 06 0a 00 00 00 e0 45 00 3c cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51c9b64","hex":"01 00 34 00 00 00 00 00 00 00 7f 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 45 00 3c cc d4 dc 01 06 0a 00 00 00 e0 45 00 3c cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:36.014Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:36.014Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:36.014Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:36.014Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:36.014Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x51bf114","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x51bf114","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x18e7ae0","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51bf114","hex":"01 00 34 00 00 00 00 00 00 00 80 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 45 00 3c cc d4 dc 01 06 0a 00 00 00 e0 45 00 3c cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51bf114","hex":"01 00 34 00 00 00 00 00 00 00 80 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 45 00 3c cc d4 dc 01 06 0a 00 00 00 e0 45 00 3c cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:36.022Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x7ffe","0x62","0x51bf114","0x24a707c5","0x17ee8a0","0x18e7adc","0x18e7a38","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x51bf114","0x24a707c5","0x17ee8a0","0x18e7adc","0x18e7a38","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51bf114","hex":"01 00 34 00 00 00 00 00 00 00 80 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 45 00 3c cc d4 dc 01 06 0a 00 00 00 e0 45 00 3c cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51bf114","hex":"01 00 34 00 00 00 00 00 00 00 80 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 45 00 3c cc d4 dc 01 06 0a 00 00 00 e0 45 00 3c cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:36.027Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x62","0x51bf114","0x0","0x24a70775","0x51bf114","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51bf114","0x0","0x24a70775","0x51bf114","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51bf114","hex":"01 00 34 00 00 00 00 00 00 00 80 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 45 00 3c cc d4 dc 01 06 0a 00 00 00 e0 45 00 3c cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51bf114","hex":"01 00 34 00 00 00 00 00 00 00 80 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 45 00 3c cc d4 dc 01 06 0a 00 00 00 e0 45 00 3c cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:36.034Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x62","0x51bf114","0x0","0x24a708bd","0x51bf114","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51bf114","0x0","0x24a708bd","0x51bf114","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51bf114","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51bf114","hex":"01 00 34 00 00 00 00 00 00 00 80 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 45 00 3c cc d4 dc 01 06 0a 00 00 00 e0 45 00 3c cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51bf114","hex":"01 00 34 00 00 00 00 00 00 00 80 03 0b 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 45 00 3c cc d4 dc 01 06 0a 00 00 00 e0 45 00 3c cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:36.038Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:36.039Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:36.039Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:36.039Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:36.039Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x51c684c","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x51c684c","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x18e2c28","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51c684c","hex":"01 00 34 00 00 00 00 00 00 00 0e 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 13 18 3c cc d4 dc 01 06 0a 00 00 00 a0 13 18 3c cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51c684c","hex":"01 00 34 00 00 00 00 00 00 00 0e 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 13 18 3c cc d4 dc 01 06 0a 00 00 00 a0 13 18 3c cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:36.097Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x7ffd","0x62","0x51c684c","0x24a707c5","0x17ee8a0","0x18e2c24","0x18e2b80","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x51c684c","0x24a707c5","0x17ee8a0","0x18e2c24","0x18e2b80","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51c684c","hex":"01 00 34 00 00 00 00 00 00 00 0e 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 13 18 3c cc d4 dc 01 06 0a 00 00 00 a0 13 18 3c cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51c684c","hex":"01 00 34 00 00 00 00 00 00 00 0e 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 13 18 3c cc d4 dc 01 06 0a 00 00 00 a0 13 18 3c cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:36.103Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x62","0x51c684c","0x0","0x24a70775","0x51c684c","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51c684c","0x0","0x24a70775","0x51c684c","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51c684c","hex":"01 00 34 00 00 00 00 00 00 00 0e 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 13 18 3c cc d4 dc 01 06 0a 00 00 00 a0 13 18 3c cc d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51c684c","hex":"01 00 34 00 00 00 00 00 00 00 0e 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 13 18 3c cc d4 dc 01 06 0a 00 00 00 a0 13 18 3c cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:36.109Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x62","0x51c684c","0x0","0x24a708bd","0x51c684c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51c684c","0x0","0x24a708bd","0x51c684c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51c684c","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51c684c","hex":"01 00 34 00 00 00 00 00 00 00 0e 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 13 18 3c cc d4 dc 01 06 0a 00 00 00 a0 13 18 3c cc d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51c684c","hex":"01 00 34 00 00 00 00 00 00 00 0e 82 05 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 13 18 3c cc d4 dc 01 06 0a 00 00 00 a0 13 18 3c cc d4 dc 01 00 00"}],"time":"2026-04-25T15:57:36.114Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:36.115Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:36.115Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:36.115Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:36.115Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17ee8a0","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x18fa794","0x206","0x6","0x900184","0x17eea64"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x18fa794","0x206","0x6","0x900184","0x17eea64","0x76fc4ef5","0x9c1b20","0x18e0f40","0x6","0xd7b570f4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18fa794","hex":"01 00 00 00 00 00 00 00 00 00 80 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18fa794","hex":"01 00 00 00 00 00 00 00 00 00 80 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","hex":"68 90 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x889068","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:36.133Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17ee830","args":["0x1","0x1","0x1","0x2e","0x18fa794","0x24a707c5","0x17ee8a0","0x18e0f3c","0x18e0e98","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18fa794","0x24a707c5","0x17ee8a0","0x18e0f3c","0x18e0e98","0x7700459e","0x17ee838","0x17ee8ec","0x17eea54","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18fa794","hex":"01 00 00 00 00 00 00 00 00 00 80 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18fa794","hex":"01 00 00 00 00 00 00 00 00 00 80 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:36.139Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee7e8","args":["0x1","0x1200","0x2e","0x18fa794","0x0","0x24a70775","0x18fa794","0x9effe8","0x1","0x17ee89c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18fa794","0x0","0x24a70775","0x18fa794","0x9effe8","0x1","0x17ee89c","0x17ee830","0x1","0x1","0x17ee890","0x9cf3a6","0xffffffff","0x17ee89c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18fa794","hex":"01 00 00 00 00 00 00 00 00 00 80 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea54","hex":"9c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18fa794","hex":"01 00 00 00 00 00 00 00 00 00 80 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee89c","hex":"c8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17ee8c8","hex":"64"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17ee890","hex":"54"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea54","hex":"9c"}],"time":"2026-04-25T15:57:36.146Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee784","args":["0x1","0x2e","0x18fa794","0x0","0x24a708bd","0x18fa794","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18fa794","0x0","0x24a708bd","0x18fa794","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18fa794","0x9effe8","0x17ee82c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18fa794","hex":"01 00 00 00 00 00 00 00 00 00 80 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18fa794","hex":"01 00 00 00 00 00 00 00 00 00 80 03 0b 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:36.151Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:36.152Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:36.152Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:36.152Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:36.152Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x5238a9c","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x5238a9c","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x187fb58","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x5238a9c","hex":"01 00 00 00 00 00 00 00 00 00 7f 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x5238a9c","hex":"01 00 00 00 00 00 00 00 00 00 7f 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:36.160Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x1","0x2e","0x5238a9c","0x27e7023d","0x23eed68","0x187fb54","0x187fab0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x5238a9c","0x27e7023d","0x23eed68","0x187fb54","0x187fab0","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x5238a9c","hex":"01 00 00 00 00 00 00 00 00 00 7f 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x5238a9c","hex":"01 00 00 00 00 00 00 00 00 00 7f 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:36.166Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x2e","0x5238a9c","0x0","0x27e703ad","0x5238a9c","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x5238a9c","0x0","0x27e703ad","0x5238a9c","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x5238a9c","hex":"01 00 00 00 00 00 00 00 00 00 7f 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x5238a9c","hex":"01 00 00 00 00 00 00 00 00 00 7f 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:36.172Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x2e","0x5238a9c","0x0","0x27e703f5","0x5238a9c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x5238a9c","0x0","0x27e703f5","0x5238a9c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x5238a9c","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x5238a9c","hex":"01 00 00 00 00 00 00 00 00 00 7f 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x5238a9c","hex":"01 00 00 00 00 00 00 00 00 00 7f 03 0b 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:36.176Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:36.177Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:36.177Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:36.177Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:36.177Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eed68","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x5183924","0x206","0x6","0x94f0dc","0x23eef2c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x5183924","0x206","0x6","0x94f0dc","0x23eef2c","0x76fc4ef5","0x9c1b20","0x18e6f50","0x6","0xd4f575bc","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x5183924","hex":"01 00 00 00 00 00 00 00 00 00 0e 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x5183924","hex":"01 00 00 00 00 00 00 00 00 00 0e 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","hex":"b8 91 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8891b8","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T15:57:36.186Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eecf8","args":["0x1","0x1","0x2","0x2e","0x5183924","0x27e7023d","0x23eed68","0x18e6f4c","0x18e6ea8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x5183924","0x27e7023d","0x23eed68","0x18e6f4c","0x18e6ea8","0x7700459e","0x23eed00","0x23eedb4","0x23eef1c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x5183924","hex":"01 00 00 00 00 00 00 00 00 00 0e 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x5183924","hex":"01 00 00 00 00 00 00 00 00 00 0e 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:36.192Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eecb0","args":["0x1","0x1200","0x2e","0x5183924","0x0","0x27e703ad","0x5183924","0x9effe8","0x1","0x23eed64"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x5183924","0x0","0x27e703ad","0x5183924","0x9effe8","0x1","0x23eed64","0x23eecf8","0x1","0x1","0x23eed58","0x9cf3a6","0xffffffff","0x23eed64"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x5183924","hex":"01 00 00 00 00 00 00 00 00 00 0e 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eef1c","hex":"64"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x5183924","hex":"01 00 00 00 00 00 00 00 00 00 0e 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed64","hex":"90"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eed90","hex":"2c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eed58","hex":"1c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eef1c","hex":"64"}],"time":"2026-04-25T15:57:36.198Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eec4c","args":["0x1","0x2e","0x5183924","0x0","0x27e703f5","0x5183924","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x5183924","0x0","0x27e703f5","0x5183924","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x5183924","0x9effe8","0x23eecf4"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x5183924","hex":"01 00 00 00 00 00 00 00 00 00 0e 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x5183924","hex":"01 00 00 00 00 00 00 00 00 00 0e 82 05 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T15:57:36.202Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T15:57:36.203Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T15:57:36.203Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T15:57:36.203Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T15:57:36.203Z"} |