Joseph Doherty
fe2a6db786
rust / build / test / clippy / fmt (push) Has been cancelled
Layout:
- src/ .NET 10 x64 reference: MxNativeCodec, MxNativeClient,
MxAsbClient, probes, tests, harnesses. Executable spec.
- design/ Architectural plan for the Rust port (M0–M6), error
model, protocol invariants, risks (R1–R16), adversarial
review log (review.md).
- rust/ Rust workspace. M0 skeleton + M1 codec parity.
mxaccess-codec: 215 unit tests + 2 cross-implementation
parity tests (byte-identical against .NET reference).
Other crates are M0 stubs awaiting M2+.
- captures/ Frida + netsh + pcap evidence per CLAUDE.md
("captures are evidence, not throwaway logs").
- analysis/ Decompiled C# (frida/proxy/decompiled-*),
Ghidra exports for native DLLs (`exports/` only —
working state at `projects/` and AVEVA's input
binaries at `input/` are gitignored).
- docs/ Reverse-engineering reference docs.
- tools/ Setup-LiveProbeEnv.ps1 (Infisical credential fetcher),
Compute-Crc.ps1 (.NET parity helper).
- .github/workflows/ Rust CI: fmt + build + test + clippy on Windows.
- LICENSE MIT (Joseph Doherty, 2026).
Verified:
- cargo test --workspace → 217 passed (215 unit + 2 .NET parity), 0 failed
- cargo clippy --workspace -- -D warnings → clean
- cargo fmt --all -- --check → clean
- cargo publish --dry-run -p mxaccess-codec → packages cleanly
Excluded from history (see .gitignore):
- **/bin, **/obj, **/target — build artifacts
- analysis/ghidra/projects/ — Ghidra working state (regenerable)
- analysis/ghidra/input/ — AVEVA proprietary DLLs (vendor IP)
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2079 lines
1.7 MiB
Plaintext
2079 lines
1.7 MiB
Plaintext
____
|
|
/ _ | Frida 17.9.1 - A world-class dynamic instrumentation toolkit
|
|
| (_| |
|
|
> _ | Commands:
|
|
/_/ |_| help -> Displays the help system
|
|
. . . . object? -> Display information about 'object'
|
|
. . . . exit/quit -> Exit
|
|
. . . .
|
|
. . . . More info at https://frida.re/docs/home/
|
|
. . . .
|
|
. . . . Connected to Local System (id=local)
|
|
Attaching...
|
|
{"event":"script.loaded","process":13944,"arch":"ia32","pointerSize":4,"time":"2026-04-25T07:22:34.537Z"}
|
|
{"event":"hook.installed","module":"NmxSvc.exe","name":"CFMCCallback.DataReceived","base":"0x9a0000","rva":"0x5be1","address":"0x9a5be1","time":"2026-04-25T07:22:34.537Z"}
|
|
{"event":"hook.installed","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","base":"0x9a0000","rva":"0x1807f","address":"0x9b807f","time":"2026-04-25T07:22:34.537Z"}
|
|
{"event":"hook.installed","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","base":"0x9a0000","rva":"0x1d910","address":"0x9bd910","time":"2026-04-25T07:22:34.538Z"}
|
|
{"event":"hook.installed","module":"NmxSvc.exe","name":"CNmxControler.TransferData","base":"0x9a0000","rva":"0x1dcb5","address":"0x9bdcb5","time":"2026-04-25T07:22:34.538Z"}
|
|
{"event":"hook.installed","module":"NmxSvc.exe","name":"CNmxControler.LocalCallbackDataReceived","base":"0x9a0000","rva":"0x1eea5","address":"0x9beea5","time":"2026-04-25T07:22:34.539Z"}
|
|
{"event":"hook.installed","module":"NmxSvc.exe","name":"CNmxService.TransferData","base":"0x9a0000","rva":"0x21b20","address":"0x9c1b20","time":"2026-04-25T07:22:34.539Z"}
|
|
[Local::PID::13944 ]-> {"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x51f8654","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x51f8654","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51e87e8","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51f8654","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 b0 01 6e 49 84 d4 dc 01 06 0a 00 00 00 b0 01 6e 49 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51f8654","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 b0 01 6e 49 84 d4 dc 01 06 0a 00 00 00 b0 01 6e 49 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:34.754Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x7ffd","0x62","0x51f8654","0x27e700f5","0x23eefb0","0x51e87e4","0x51e8740","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x51f8654","0x27e700f5","0x23eefb0","0x51e87e4","0x51e8740","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51f8654","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 b0 01 6e 49 84 d4 dc 01 06 0a 00 00 00 b0 01 6e 49 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51f8654","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 b0 01 6e 49 84 d4 dc 01 06 0a 00 00 00 b0 01 6e 49 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:34.760Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x62","0x51f8654","0x0","0x27e70065","0x51f8654","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51f8654","0x0","0x27e70065","0x51f8654","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51f8654","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 b0 01 6e 49 84 d4 dc 01 06 0a 00 00 00 b0 01 6e 49 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u87e8\u051e\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51f8654","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 b0 01 6e 49 84 d4 dc 01 06 0a 00 00 00 b0 01 6e 49 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u87e8\u051e\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:34.766Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x62","0x51f8654","0x0","0x27e701ad","0x51f8654","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51f8654","0x0","0x27e701ad","0x51f8654","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51f8654","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51f8654","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 b0 01 6e 49 84 d4 dc 01 06 0a 00 00 00 b0 01 6e 49 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51f8654","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 b0 01 6e 49 84 d4 dc 01 06 0a 00 00 00 b0 01 6e 49 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:34.772Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:34.773Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:34.773Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:34.773Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:34.773Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x18b480c","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x18b480c","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x187bb50","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b480c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a3 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 b0 01 6e 49 84 d4 dc 01 06 0a 00 00 00 b0 01 6e 49 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18b480c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a3 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 b0 01 6e 49 84 d4 dc 01 06 0a 00 00 00 b0 01 6e 49 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:34.781Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x7ffe","0x62","0x18b480c","0x27e700f5","0x23eefb0","0x187bb4c","0x187baa8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x18b480c","0x27e700f5","0x23eefb0","0x187bb4c","0x187baa8","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b480c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a3 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 b0 01 6e 49 84 d4 dc 01 06 0a 00 00 00 b0 01 6e 49 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b480c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a3 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 b0 01 6e 49 84 d4 dc 01 06 0a 00 00 00 b0 01 6e 49 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:34.788Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x62","0x18b480c","0x0","0x27e70065","0x18b480c","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18b480c","0x0","0x27e70065","0x18b480c","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b480c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a3 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 b0 01 6e 49 84 d4 dc 01 06 0a 00 00 00 b0 01 6e 49 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\ubb50\u0187\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b480c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a3 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 b0 01 6e 49 84 d4 dc 01 06 0a 00 00 00 b0 01 6e 49 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\ubb50\u0187\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:34.795Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x62","0x18b480c","0x0","0x27e701ad","0x18b480c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18b480c","0x0","0x27e701ad","0x18b480c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b480c","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18b480c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a3 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 b0 01 6e 49 84 d4 dc 01 06 0a 00 00 00 b0 01 6e 49 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b480c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a3 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 b0 01 6e 49 84 d4 dc 01 06 0a 00 00 00 b0 01 6e 49 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:34.801Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:34.802Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:34.802Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:34.802Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:34.802Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x51b3944","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x51b3944","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51ec228","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51b3944","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a3 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x51b3944","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a3 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:34.868Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x1","0x2e","0x51b3944","0x27e700f5","0x23eefb0","0x51ec224","0x51ec180","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x51b3944","0x27e700f5","0x23eefb0","0x51ec224","0x51ec180","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51b3944","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a3 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51b3944","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a3 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:34.874Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x2e","0x51b3944","0x0","0x27e70065","0x51b3944","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x51b3944","0x0","0x27e70065","0x51b3944","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51b3944","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a3 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u2b0c\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\uc228\u051e\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51b3944","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a3 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u2b0c\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\uc228\u051e\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:34.879Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x2e","0x51b3944","0x0","0x27e701ad","0x51b3944","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x51b3944","0x0","0x27e701ad","0x51b3944","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51b3944","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x51b3944","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a3 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51b3944","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a3 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:34.885Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x18301a4","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x18301a4","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x187bb50","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18301a4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a2 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18301a4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a2 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:34.893Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:34.894Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:34.894Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:34.894Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:34.895Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x1","0x2e","0x18301a4","0x24a705d5","0x17eea90","0x187bb4c","0x187baa8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18301a4","0x24a705d5","0x17eea90","0x187bb4c","0x187baa8","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18301a4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a2 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18301a4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a2 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:34.901Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x2e","0x18301a4","0x0","0x24a70545","0x18301a4","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18301a4","0x0","0x24a70545","0x18301a4","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18301a4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a2 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\ubb50\u0187\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18301a4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a2 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\ubb50\u0187\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:34.909Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x2e","0x18301a4","0x0","0x24a7068d","0x18301a4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18301a4","0x0","0x24a7068d","0x18301a4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18301a4","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18301a4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a2 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18301a4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a2 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:34.914Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:34.914Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:34.914Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:34.914Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:34.914Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18278d4","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18278d4","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51741f0","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18278d4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 9e 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 fb 8c 49 84 d4 dc 01 06 0a 00 00 00 60 fb 8c 49 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18278d4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 9e 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 fb 8c 49 84 d4 dc 01 06 0a 00 00 00 60 fb 8c 49 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:34.924Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x7ffd","0x62","0x18278d4","0x27e700f5","0x23eefb0","0x51741ec","0x5174148","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18278d4","0x27e700f5","0x23eefb0","0x51741ec","0x5174148","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18278d4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 9e 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 fb 8c 49 84 d4 dc 01 06 0a 00 00 00 60 fb 8c 49 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18278d4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 9e 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 fb 8c 49 84 d4 dc 01 06 0a 00 00 00 60 fb 8c 49 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:34.930Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x62","0x18278d4","0x0","0x27e70065","0x18278d4","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18278d4","0x0","0x27e70065","0x18278d4","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18278d4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 9e 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 fb 8c 49 84 d4 dc 01 06 0a 00 00 00 60 fb 8c 49 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u41f0\u0517\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18278d4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 9e 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 fb 8c 49 84 d4 dc 01 06 0a 00 00 00 60 fb 8c 49 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u41f0\u0517\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:34.936Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x62","0x18278d4","0x0","0x27e701ad","0x18278d4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18278d4","0x0","0x27e701ad","0x18278d4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18278d4","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18278d4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 9e 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 fb 8c 49 84 d4 dc 01 06 0a 00 00 00 60 fb 8c 49 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18278d4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 9e 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 fb 8c 49 84 d4 dc 01 06 0a 00 00 00 60 fb 8c 49 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:34.941Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:34.942Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:34.942Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:34.942Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:34.942Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x18378dc","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x18378dc","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51ea4d0","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18378dc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 9e 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18378dc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 9e 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:34.974Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x2","0x2e","0x18378dc","0x27e700f5","0x23eefb0","0x51ea4cc","0x51ea428","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x18378dc","0x27e700f5","0x23eefb0","0x51ea4cc","0x51ea428","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18378dc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 9e 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18378dc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 9e 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:34.980Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x2e","0x18378dc","0x0","0x27e70065","0x18378dc","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18378dc","0x0","0x27e70065","0x18378dc","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18378dc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 9e 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\ua4d0\u051e\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18378dc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 9e 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\ua4d0\u051e\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:34.986Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x2e","0x18378dc","0x0","0x27e701ad","0x18378dc","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18378dc","0x0","0x27e701ad","0x18378dc","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18378dc","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18378dc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 9e 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18378dc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 9e 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:34.991Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:34.992Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:34.992Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:34.992Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:34.992Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x183bcfc","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x183bcfc","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51e87e8","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x183bcfc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a4 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 00 74 ba 49 84 d4 dc 01 06 0a 00 00 00 00 74 ba 49 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x183bcfc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a4 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 00 74 ba 49 84 d4 dc 01 06 0a 00 00 00 00 74 ba 49 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:35.259Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x7ffd","0x62","0x183bcfc","0x27e700f5","0x23eefb0","0x51e87e4","0x51e8740","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x183bcfc","0x27e700f5","0x23eefb0","0x51e87e4","0x51e8740","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x183bcfc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a4 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 00 74 ba 49 84 d4 dc 01 06 0a 00 00 00 00 74 ba 49 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x183bcfc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a4 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 00 74 ba 49 84 d4 dc 01 06 0a 00 00 00 00 74 ba 49 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:35.268Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x62","0x183bcfc","0x0","0x27e70065","0x183bcfc","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x183bcfc","0x0","0x27e70065","0x183bcfc","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x183bcfc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a4 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 00 74 ba 49 84 d4 dc 01 06 0a 00 00 00 00 74 ba 49 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u87e8\u051e\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x183bcfc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a4 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 00 74 ba 49 84 d4 dc 01 06 0a 00 00 00 00 74 ba 49 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u87e8\u051e\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:35.277Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x62","0x183bcfc","0x0","0x27e701ad","0x183bcfc","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x183bcfc","0x0","0x27e701ad","0x183bcfc","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x183bcfc","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x183bcfc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a4 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 00 74 ba 49 84 d4 dc 01 06 0a 00 00 00 00 74 ba 49 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x183bcfc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a4 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 00 74 ba 49 84 d4 dc 01 06 0a 00 00 00 00 74 ba 49 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:35.281Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:35.282Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:35.282Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:35.282Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:35.282Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x18278d4","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x18278d4","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51741f0","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18278d4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a5 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 00 74 ba 49 84 d4 dc 01 06 0a 00 00 00 00 74 ba 49 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18278d4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a5 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 00 74 ba 49 84 d4 dc 01 06 0a 00 00 00 00 74 ba 49 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:35.292Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x7ffe","0x62","0x18278d4","0x27e700f5","0x23eefb0","0x51741ec","0x5174148","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x18278d4","0x27e700f5","0x23eefb0","0x51741ec","0x5174148","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18278d4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a5 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 00 74 ba 49 84 d4 dc 01 06 0a 00 00 00 00 74 ba 49 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18278d4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a5 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 00 74 ba 49 84 d4 dc 01 06 0a 00 00 00 00 74 ba 49 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:35.299Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x62","0x18278d4","0x0","0x27e70065","0x18278d4","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18278d4","0x0","0x27e70065","0x18278d4","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18278d4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a5 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 00 74 ba 49 84 d4 dc 01 06 0a 00 00 00 00 74 ba 49 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u41f0\u0517\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18278d4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a5 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 00 74 ba 49 84 d4 dc 01 06 0a 00 00 00 00 74 ba 49 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u41f0\u0517\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:35.306Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x62","0x18278d4","0x0","0x27e701ad","0x18278d4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18278d4","0x0","0x27e701ad","0x18278d4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18278d4","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18278d4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a5 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 00 74 ba 49 84 d4 dc 01 06 0a 00 00 00 00 74 ba 49 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18278d4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a5 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 00 74 ba 49 84 d4 dc 01 06 0a 00 00 00 00 74 ba 49 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:35.312Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x18c6a24","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x18c6a24","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x51ecdb8","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18c6a24","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a4 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18c6a24","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a4 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:35.319Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:35.320Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:35.320Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:35.320Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:35.320Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x1","0x2e","0x18c6a24","0x24a705d5","0x17eea90","0x51ecdb4","0x51ecd10","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18c6a24","0x24a705d5","0x17eea90","0x51ecdb4","0x51ecd10","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18c6a24","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a4 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18c6a24","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a4 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:35.328Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x2e","0x18c6a24","0x0","0x24a70545","0x18c6a24","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18c6a24","0x0","0x24a70545","0x18c6a24","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18c6a24","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a4 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\ucdb8\u051e\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18c6a24","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a4 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\ucdb8\u051e\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:35.334Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x2e","0x18c6a24","0x0","0x24a7068d","0x18c6a24","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18c6a24","0x0","0x24a7068d","0x18c6a24","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18c6a24","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18c6a24","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a4 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18c6a24","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a4 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:35.339Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:35.339Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:35.339Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:35.339Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:35.339Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18b480c","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18b480c","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x51ecdb8","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b480c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 9f 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 1f d9 49 84 d4 dc 01 06 0a 00 00 00 90 1f d9 49 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18b480c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 9f 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 1f d9 49 84 d4 dc 01 06 0a 00 00 00 90 1f d9 49 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:35.408Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x7ffd","0x62","0x18b480c","0x24a705d5","0x17eea90","0x51ecdb4","0x51ecd10","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18b480c","0x24a705d5","0x17eea90","0x51ecdb4","0x51ecd10","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b480c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 9f 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 1f d9 49 84 d4 dc 01 06 0a 00 00 00 90 1f d9 49 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b480c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 9f 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 1f d9 49 84 d4 dc 01 06 0a 00 00 00 90 1f d9 49 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:35.414Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x62","0x18b480c","0x0","0x24a70545","0x18b480c","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18b480c","0x0","0x24a70545","0x18b480c","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b480c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 9f 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 1f d9 49 84 d4 dc 01 06 0a 00 00 00 90 1f d9 49 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\ucdc4\u0126\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\ucdb8\u051e\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b480c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 9f 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 1f d9 49 84 d4 dc 01 06 0a 00 00 00 90 1f d9 49 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\ucdc4\u0126\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\ucdb8\u051e\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:35.422Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x62","0x18b480c","0x0","0x24a7068d","0x18b480c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18b480c","0x0","0x24a7068d","0x18b480c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b480c","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18b480c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 9f 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 1f d9 49 84 d4 dc 01 06 0a 00 00 00 90 1f d9 49 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b480c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 9f 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 1f d9 49 84 d4 dc 01 06 0a 00 00 00 90 1f d9 49 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:35.427Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:35.428Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:35.428Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:35.428Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:35.428Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x18323b4","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x18323b4","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51741f0","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18323b4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a5 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18323b4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a5 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:35.436Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x1","0x2e","0x18323b4","0x27e700f5","0x23eefb0","0x51741ec","0x5174148","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18323b4","0x27e700f5","0x23eefb0","0x51741ec","0x5174148","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18323b4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a5 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18323b4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a5 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:35.442Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x2e","0x18323b4","0x0","0x27e70065","0x18323b4","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18323b4","0x0","0x27e70065","0x18323b4","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18323b4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a5 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u2b0c\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u41f0\u0517\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18323b4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a5 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u2b0c\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u41f0\u0517\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:35.448Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x2e","0x18323b4","0x0","0x27e701ad","0x18323b4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18323b4","0x0","0x27e701ad","0x18323b4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18323b4","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18323b4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a5 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18323b4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a5 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:35.453Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:35.453Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:35.453Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:35.454Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:35.454Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x18212a4","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x18212a4","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x187bb50","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18212a4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 9f 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18212a4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 9f 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:35.521Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x2","0x2e","0x18212a4","0x27e700f5","0x23eefb0","0x187bb4c","0x187baa8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x18212a4","0x27e700f5","0x23eefb0","0x187bb4c","0x187baa8","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18212a4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 9f 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18212a4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 9f 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:35.529Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x2e","0x18212a4","0x0","0x27e70065","0x18212a4","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18212a4","0x0","0x27e70065","0x18212a4","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18212a4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 9f 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\ubb50\u0187\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18212a4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 9f 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\ubb50\u0187\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:35.535Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x2e","0x18212a4","0x0","0x27e701ad","0x18212a4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18212a4","0x0","0x27e701ad","0x18212a4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18212a4","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18212a4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 9f 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18212a4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 9f 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:35.541Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:35.541Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:35.542Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:35.542Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:35.542Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x183bcfc","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x183bcfc","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51e87e8","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x183bcfc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a6 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 71 06 4a 84 d4 dc 01 06 0a 00 00 00 20 71 06 4a 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x183bcfc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a6 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 71 06 4a 84 d4 dc 01 06 0a 00 00 00 20 71 06 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:35.750Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x7ffd","0x62","0x183bcfc","0x27e700f5","0x23eefb0","0x51e87e4","0x51e8740","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x183bcfc","0x27e700f5","0x23eefb0","0x51e87e4","0x51e8740","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x183bcfc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a6 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 71 06 4a 84 d4 dc 01 06 0a 00 00 00 20 71 06 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x183bcfc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a6 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 71 06 4a 84 d4 dc 01 06 0a 00 00 00 20 71 06 4a 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:35.754Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x62","0x183bcfc","0x0","0x27e70065","0x183bcfc","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x183bcfc","0x0","0x27e70065","0x183bcfc","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x183bcfc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a6 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 71 06 4a 84 d4 dc 01 06 0a 00 00 00 20 71 06 4a 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u87e8\u051e\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x183bcfc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a6 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 71 06 4a 84 d4 dc 01 06 0a 00 00 00 20 71 06 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u87e8\u051e\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:35.762Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x62","0x183bcfc","0x0","0x27e701ad","0x183bcfc","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x183bcfc","0x0","0x27e701ad","0x183bcfc","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x183bcfc","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x183bcfc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a6 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 71 06 4a 84 d4 dc 01 06 0a 00 00 00 20 71 06 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x183bcfc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a6 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 71 06 4a 84 d4 dc 01 06 0a 00 00 00 20 71 06 4a 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:35.768Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:35.769Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:35.769Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:35.769Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:35.769Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x51bf114","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x51bf114","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51ebc60","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51bf114","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a7 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 71 06 4a 84 d4 dc 01 06 0a 00 00 00 20 71 06 4a 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51bf114","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a7 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 71 06 4a 84 d4 dc 01 06 0a 00 00 00 20 71 06 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:35.780Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x7ffe","0x62","0x51bf114","0x27e700f5","0x23eefb0","0x51ebc5c","0x51ebbb8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x51bf114","0x27e700f5","0x23eefb0","0x51ebc5c","0x51ebbb8","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51bf114","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a7 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 71 06 4a 84 d4 dc 01 06 0a 00 00 00 20 71 06 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51bf114","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a7 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 71 06 4a 84 d4 dc 01 06 0a 00 00 00 20 71 06 4a 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:35.791Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x62","0x51bf114","0x0","0x27e70065","0x51bf114","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51bf114","0x0","0x27e70065","0x51bf114","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51bf114","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a7 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 71 06 4a 84 d4 dc 01 06 0a 00 00 00 20 71 06 4a 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\ubc60\u051e\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51bf114","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a7 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 71 06 4a 84 d4 dc 01 06 0a 00 00 00 20 71 06 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\ubc60\u051e\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:35.799Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x62","0x51bf114","0x0","0x27e701ad","0x51bf114","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51bf114","0x0","0x27e701ad","0x51bf114","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51bf114","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51bf114","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a7 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 71 06 4a 84 d4 dc 01 06 0a 00 00 00 20 71 06 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51bf114","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a7 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 71 06 4a 84 d4 dc 01 06 0a 00 00 00 20 71 06 4a 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:35.804Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:35.805Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:35.805Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:35.805Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:35.805Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x18234b4","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x18234b4","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51e7690","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18234b4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a7 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18234b4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a7 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:35.854Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x1","0x2e","0x18234b4","0x27e700f5","0x23eefb0","0x51e768c","0x51e75e8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18234b4","0x27e700f5","0x23eefb0","0x51e768c","0x51e75e8","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18234b4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a7 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18234b4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a7 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:35.860Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x2e","0x18234b4","0x0","0x27e70065","0x18234b4","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18234b4","0x0","0x27e70065","0x18234b4","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18234b4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a7 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u2b0c\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u7690\u051e\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18234b4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a7 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u2b0c\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u7690\u051e\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:35.866Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x2e","0x18234b4","0x0","0x27e701ad","0x18234b4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18234b4","0x0","0x27e701ad","0x18234b4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18234b4","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18234b4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a7 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18234b4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a7 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:35.871Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x51b1734","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x51b1734","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x51ed948","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51b1734","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a6 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x51b1734","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a6 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:35.882Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:35.883Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:35.883Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:35.883Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:35.884Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x1","0x2e","0x51b1734","0x24a705d5","0x17eea90","0x51ed944","0x51ed8a0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x51b1734","0x24a705d5","0x17eea90","0x51ed944","0x51ed8a0","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51b1734","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a6 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51b1734","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a6 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:35.892Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x2e","0x51b1734","0x0","0x24a70545","0x51b1734","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x51b1734","0x0","0x24a70545","0x51b1734","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51b1734","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a6 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51b1734","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a6 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:35.901Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x2e","0x51b1734","0x0","0x24a7068d","0x51b1734","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x51b1734","0x0","0x24a7068d","0x51b1734","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51b1734","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x51b1734","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a6 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51b1734","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a6 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:35.906Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:35.907Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:35.907Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:35.907Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:35.907Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18323b4","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18323b4","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51741f0","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18323b4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a0 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 91 25 4a 84 d4 dc 01 06 0a 00 00 00 e0 91 25 4a 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18323b4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a0 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 91 25 4a 84 d4 dc 01 06 0a 00 00 00 e0 91 25 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:35.915Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x7ffd","0x62","0x18323b4","0x27e700f5","0x23eefb0","0x51741ec","0x5174148","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18323b4","0x27e700f5","0x23eefb0","0x51741ec","0x5174148","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18323b4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a0 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 91 25 4a 84 d4 dc 01 06 0a 00 00 00 e0 91 25 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18323b4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a0 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 91 25 4a 84 d4 dc 01 06 0a 00 00 00 e0 91 25 4a 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:35.922Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x62","0x18323b4","0x0","0x27e70065","0x18323b4","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18323b4","0x0","0x27e70065","0x18323b4","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18323b4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a0 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 91 25 4a 84 d4 dc 01 06 0a 00 00 00 e0 91 25 4a 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u41f0\u0517\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18323b4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a0 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 91 25 4a 84 d4 dc 01 06 0a 00 00 00 e0 91 25 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u41f0\u0517\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:35.929Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x62","0x18323b4","0x0","0x27e701ad","0x18323b4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18323b4","0x0","0x27e701ad","0x18323b4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18323b4","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18323b4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a0 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 91 25 4a 84 d4 dc 01 06 0a 00 00 00 e0 91 25 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18323b4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a0 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 91 25 4a 84 d4 dc 01 06 0a 00 00 00 e0 91 25 4a 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:35.934Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:35.934Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:35.935Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:35.935Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:35.935Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x51f975c","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x51f975c","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x1922c08","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51f975c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a0 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x51f975c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a0 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:35.964Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x2","0x2e","0x51f975c","0x27e700f5","0x23eefb0","0x1922c04","0x1922b60","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x51f975c","0x27e700f5","0x23eefb0","0x1922c04","0x1922b60","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51f975c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a0 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51f975c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a0 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:35.970Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x2e","0x51f975c","0x0","0x27e70065","0x51f975c","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x51f975c","0x0","0x27e70065","0x51f975c","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51f975c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a0 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u2c08�\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51f975c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a0 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u2c08�\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:35.976Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x2e","0x51f975c","0x0","0x27e701ad","0x51f975c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x51f975c","0x0","0x27e701ad","0x51f975c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51f975c","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x51f975c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a0 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51f975c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a0 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:35.982Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:35.983Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:35.983Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:35.983Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:35.983Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x51f8654","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x51f8654","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51e87e8","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51f8654","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a8 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 70 e3 52 4a 84 d4 dc 01 06 0a 00 00 00 70 e3 52 4a 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51f8654","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a8 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 70 e3 52 4a 84 d4 dc 01 06 0a 00 00 00 70 e3 52 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:36.267Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x7ffd","0x62","0x51f8654","0x27e700f5","0x23eefb0","0x51e87e4","0x51e8740","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x51f8654","0x27e700f5","0x23eefb0","0x51e87e4","0x51e8740","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51f8654","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a8 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 70 e3 52 4a 84 d4 dc 01 06 0a 00 00 00 70 e3 52 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51f8654","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a8 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 70 e3 52 4a 84 d4 dc 01 06 0a 00 00 00 70 e3 52 4a 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:36.273Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x62","0x51f8654","0x0","0x27e70065","0x51f8654","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51f8654","0x0","0x27e70065","0x51f8654","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51f8654","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a8 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 70 e3 52 4a 84 d4 dc 01 06 0a 00 00 00 70 e3 52 4a 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u87e8\u051e\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51f8654","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a8 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 70 e3 52 4a 84 d4 dc 01 06 0a 00 00 00 70 e3 52 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u87e8\u051e\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:36.279Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x62","0x51f8654","0x0","0x27e701ad","0x51f8654","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51f8654","0x0","0x27e701ad","0x51f8654","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51f8654","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51f8654","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a8 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 70 e3 52 4a 84 d4 dc 01 06 0a 00 00 00 70 e3 52 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51f8654","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a8 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 70 e3 52 4a 84 d4 dc 01 06 0a 00 00 00 70 e3 52 4a 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:36.284Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:36.284Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:36.285Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:36.285Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:36.285Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x18323b4","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x18323b4","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51741f0","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18323b4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a9 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 70 e3 52 4a 84 d4 dc 01 06 0a 00 00 00 70 e3 52 4a 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18323b4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a9 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 70 e3 52 4a 84 d4 dc 01 06 0a 00 00 00 70 e3 52 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:36.292Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x7ffe","0x62","0x18323b4","0x27e700f5","0x23eefb0","0x51741ec","0x5174148","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x18323b4","0x27e700f5","0x23eefb0","0x51741ec","0x5174148","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18323b4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a9 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 70 e3 52 4a 84 d4 dc 01 06 0a 00 00 00 70 e3 52 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18323b4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a9 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 70 e3 52 4a 84 d4 dc 01 06 0a 00 00 00 70 e3 52 4a 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:36.298Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x62","0x18323b4","0x0","0x27e70065","0x18323b4","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18323b4","0x0","0x27e70065","0x18323b4","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18323b4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a9 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 70 e3 52 4a 84 d4 dc 01 06 0a 00 00 00 70 e3 52 4a 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u41f0\u0517\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18323b4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a9 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 70 e3 52 4a 84 d4 dc 01 06 0a 00 00 00 70 e3 52 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u41f0\u0517\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:36.304Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x62","0x18323b4","0x0","0x27e701ad","0x18323b4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18323b4","0x0","0x27e701ad","0x18323b4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18323b4","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18323b4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a9 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 70 e3 52 4a 84 d4 dc 01 06 0a 00 00 00 70 e3 52 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18323b4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a9 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 70 e3 52 4a 84 d4 dc 01 06 0a 00 00 00 70 e3 52 4a 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:36.309Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:36.310Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:36.310Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:36.310Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:36.310Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x18256c4","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x18256c4","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x959400","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18256c4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a8 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18256c4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a8 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:36.397Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x1","0x2e","0x18256c4","0x27e700f5","0x23eefb0","0x9593fc","0x959358","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18256c4","0x27e700f5","0x23eefb0","0x9593fc","0x959358","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18256c4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a8 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18256c4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a8 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:36.404Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x2e","0x18256c4","0x0","0x27e70065","0x18256c4","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18256c4","0x0","0x27e70065","0x18256c4","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18256c4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a8 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u9400\x95\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18256c4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a8 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u9400\x95\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:36.410Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x2e","0x18256c4","0x0","0x27e701ad","0x18256c4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18256c4","0x0","0x27e701ad","0x18256c4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18256c4","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18256c4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a8 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18256c4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a8 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:36.414Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x523dfc4","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x523dfc4","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x524aae0","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x523dfc4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a9 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x523dfc4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a9 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:36.421Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x1914e64","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x1914e64","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x19265d8","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x1914e64","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a1 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 b6 71 4a 84 d4 dc 01 06 0a 00 00 00 10 b6 71 4a 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x1914e64","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a1 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 b6 71 4a 84 d4 dc 01 06 0a 00 00 00 10 b6 71 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:36.436Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:36.437Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:36.437Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:36.437Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:36.437Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x1","0x2e","0x523dfc4","0x24a705d5","0x17eea90","0x524aadc","0x524aa38","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x523dfc4","0x24a705d5","0x17eea90","0x524aadc","0x524aa38","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x523dfc4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a9 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x523dfc4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a9 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:36.442Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x2e","0x523dfc4","0x0","0x24a70545","0x523dfc4","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x523dfc4","0x0","0x24a70545","0x523dfc4","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x523dfc4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a9 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u2b0c\u021f\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\uaae0\u0524\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x523dfc4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a9 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u2b0c\u021f\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\uaae0\u0524\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:36.449Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x2e","0x523dfc4","0x0","0x24a7068d","0x523dfc4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x523dfc4","0x0","0x24a7068d","0x523dfc4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x523dfc4","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x523dfc4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a9 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x523dfc4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a9 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:36.455Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:36.456Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:36.456Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:36.456Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:36.456Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffd","0x62","0x1914e64","0x255c009d","0x85efc8","0x19265d4","0x1926530","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x1914e64","0x255c009d","0x85efc8","0x19265d4","0x1926530","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x1914e64","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a1 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 b6 71 4a 84 d4 dc 01 06 0a 00 00 00 10 b6 71 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x1914e64","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a1 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 b6 71 4a 84 d4 dc 01 06 0a 00 00 00 10 b6 71 4a 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:36.463Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x1914e64","0x0","0x255c000d","0x1914e64","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x1914e64","0x0","0x255c000d","0x1914e64","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x1914e64","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a1 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 b6 71 4a 84 d4 dc 01 06 0a 00 00 00 10 b6 71 4a 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\ucdc4\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u65d8�\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x1914e64","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a1 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 b6 71 4a 84 d4 dc 01 06 0a 00 00 00 10 b6 71 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\ucdc4\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u65d8�\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:36.471Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x1914e64","0x0","0x255c0055","0x1914e64","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x1914e64","0x0","0x255c0055","0x1914e64","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1914e64","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x1914e64","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a1 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 b6 71 4a 84 d4 dc 01 06 0a 00 00 00 10 b6 71 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x1914e64","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a1 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 b6 71 4a 84 d4 dc 01 06 0a 00 00 00 10 b6 71 4a 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:36.477Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:36.477Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:36.477Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:36.477Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:36.477Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x1913d5c","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x1913d5c","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x5175910","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1913d5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a1 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x1913d5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a1 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:36.511Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x2","0x2e","0x1913d5c","0x255c009d","0x85efc8","0x517590c","0x5175868","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x1913d5c","0x255c009d","0x85efc8","0x517590c","0x5175868","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1913d5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a1 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1913d5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a1 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:36.518Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x1913d5c","0x0","0x255c000d","0x1913d5c","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x1913d5c","0x0","0x255c000d","0x1913d5c","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1913d5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a1 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u5910\u0517\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1913d5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a1 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u5910\u0517\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:36.524Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x1913d5c","0x0","0x255c0055","0x1913d5c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x1913d5c","0x0","0x255c0055","0x1913d5c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1913d5c","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x1913d5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a1 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1913d5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a1 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:36.529Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:36.529Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:36.529Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:36.529Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:36.530Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x51b6c5c","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x51b6c5c","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x524aae0","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51b6c5c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 aa 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 07 9f 4a 84 d4 dc 01 06 0a 00 00 00 a0 07 9f 4a 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51b6c5c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 aa 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 07 9f 4a 84 d4 dc 01 06 0a 00 00 00 a0 07 9f 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:36.765Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffd","0x62","0x51b6c5c","0x255c009d","0x85efc8","0x524aadc","0x524aa38","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x51b6c5c","0x255c009d","0x85efc8","0x524aadc","0x524aa38","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51b6c5c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 aa 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 07 9f 4a 84 d4 dc 01 06 0a 00 00 00 a0 07 9f 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51b6c5c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 aa 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 07 9f 4a 84 d4 dc 01 06 0a 00 00 00 a0 07 9f 4a 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:36.772Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x51b6c5c","0x0","0x255c000d","0x51b6c5c","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51b6c5c","0x0","0x255c000d","0x51b6c5c","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51b6c5c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 aa 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 07 9f 4a 84 d4 dc 01 06 0a 00 00 00 a0 07 9f 4a 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\uaae0\u0524\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51b6c5c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 aa 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 07 9f 4a 84 d4 dc 01 06 0a 00 00 00 a0 07 9f 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\uaae0\u0524\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:36.781Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x51b6c5c","0x0","0x255c0055","0x51b6c5c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51b6c5c","0x0","0x255c0055","0x51b6c5c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51b6c5c","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51b6c5c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 aa 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 07 9f 4a 84 d4 dc 01 06 0a 00 00 00 a0 07 9f 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51b6c5c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 aa 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 07 9f 4a 84 d4 dc 01 06 0a 00 00 00 a0 07 9f 4a 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:36.786Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:36.786Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:36.787Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:36.787Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:36.787Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x1915f6c","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x1915f6c","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x5172508","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x1915f6c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ab 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 07 9f 4a 84 d4 dc 01 06 0a 00 00 00 a0 07 9f 4a 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x1915f6c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ab 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 07 9f 4a 84 d4 dc 01 06 0a 00 00 00 a0 07 9f 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:36.799Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffe","0x62","0x1915f6c","0x255c009d","0x85efc8","0x5172504","0x5172460","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x1915f6c","0x255c009d","0x85efc8","0x5172504","0x5172460","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x1915f6c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ab 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 07 9f 4a 84 d4 dc 01 06 0a 00 00 00 a0 07 9f 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x1915f6c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ab 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 07 9f 4a 84 d4 dc 01 06 0a 00 00 00 a0 07 9f 4a 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:36.805Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x1915f6c","0x0","0x255c000d","0x1915f6c","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x1915f6c","0x0","0x255c000d","0x1915f6c","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x1915f6c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ab 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 07 9f 4a 84 d4 dc 01 06 0a 00 00 00 a0 07 9f 4a 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u2508\u0517\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x1915f6c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ab 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 07 9f 4a 84 d4 dc 01 06 0a 00 00 00 a0 07 9f 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u2508\u0517\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:36.812Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x1915f6c","0x0","0x255c0055","0x1915f6c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x1915f6c","0x0","0x255c0055","0x1915f6c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1915f6c","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x1915f6c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ab 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 07 9f 4a 84 d4 dc 01 06 0a 00 00 00 a0 07 9f 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x1915f6c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ab 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 07 9f 4a 84 d4 dc 01 06 0a 00 00 00 a0 07 9f 4a 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:36.822Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:36.823Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:36.823Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:36.823Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:36.823Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x523688c","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x523688c","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x958870","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x523688c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ab 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x523688c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ab 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:36.835Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x1","0x2e","0x523688c","0x255c009d","0x85efc8","0x95886c","0x9587c8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x523688c","0x255c009d","0x85efc8","0x95886c","0x9587c8","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x523688c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ab 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x523688c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ab 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:36.841Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x523688c","0x0","0x255c000d","0x523688c","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x523688c","0x0","0x255c000d","0x523688c","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x523688c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ab 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u2b0c\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u8870\x95\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x523688c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ab 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u2b0c\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u8870\x95\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:36.848Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x523688c","0x0","0x255c0055","0x523688c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x523688c","0x0","0x255c0055","0x523688c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x523688c","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x523688c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ab 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x523688c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ab 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:36.853Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x191a38c","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x191a38c","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x9599c8","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x191a38c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 aa 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x191a38c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 aa 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:36.861Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:36.862Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:36.862Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:36.862Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:36.863Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x1","0x2e","0x191a38c","0x24a705d5","0x17eea90","0x9599c4","0x959920","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x191a38c","0x24a705d5","0x17eea90","0x9599c4","0x959920","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x191a38c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 aa 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x191a38c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 aa 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:36.868Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x2e","0x191a38c","0x0","0x24a70545","0x191a38c","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x191a38c","0x0","0x24a70545","0x191a38c","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x191a38c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 aa 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u99c8\x95\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x191a38c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 aa 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u99c8\x95\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:36.875Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x2e","0x191a38c","0x0","0x24a7068d","0x191a38c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x191a38c","0x0","0x24a7068d","0x191a38c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x191a38c","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x191a38c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 aa 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x191a38c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 aa 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:36.880Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:36.881Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:36.881Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:36.881Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:36.881Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x51b1734","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x51b1734","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x524aae0","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51b1734","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a2 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 28 be 4a 84 d4 dc 01 06 0a 00 00 00 60 28 be 4a 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51b1734","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a2 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 28 be 4a 84 d4 dc 01 06 0a 00 00 00 60 28 be 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:36.909Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x7ffd","0x62","0x51b1734","0x24a705d5","0x17eea90","0x524aadc","0x524aa38","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x51b1734","0x24a705d5","0x17eea90","0x524aadc","0x524aa38","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51b1734","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a2 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 28 be 4a 84 d4 dc 01 06 0a 00 00 00 60 28 be 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51b1734","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a2 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 28 be 4a 84 d4 dc 01 06 0a 00 00 00 60 28 be 4a 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:36.915Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x62","0x51b1734","0x0","0x24a70545","0x51b1734","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51b1734","0x0","0x24a70545","0x51b1734","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51b1734","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a2 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 28 be 4a 84 d4 dc 01 06 0a 00 00 00 60 28 be 4a 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\ucdc4\u0126\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\uaae0\u0524\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51b1734","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a2 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 28 be 4a 84 d4 dc 01 06 0a 00 00 00 60 28 be 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\ucdc4\u0126\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\uaae0\u0524\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:36.922Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x62","0x51b1734","0x0","0x24a7068d","0x51b1734","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51b1734","0x0","0x24a7068d","0x51b1734","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51b1734","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51b1734","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a2 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 28 be 4a 84 d4 dc 01 06 0a 00 00 00 60 28 be 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51b1734","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a2 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 28 be 4a 84 d4 dc 01 06 0a 00 00 00 60 28 be 4a 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:36.926Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:36.927Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:36.927Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:36.927Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:36.927Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x18836ec","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x18836ec","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x17f23d0","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18836ec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a2 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18836ec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a2 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:36.947Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x2","0x2e","0x18836ec","0x24a705d5","0x17eea90","0x17f23cc","0x17f2328","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x18836ec","0x24a705d5","0x17eea90","0x17f23cc","0x17f2328","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18836ec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a2 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18836ec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a2 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:36.954Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x2e","0x18836ec","0x0","0x24a70545","0x18836ec","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18836ec","0x0","0x24a70545","0x18836ec","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18836ec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a2 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u23d0\u017f\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18836ec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a2 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u23d0\u017f\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:36.961Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x2e","0x18836ec","0x0","0x24a7068d","0x18836ec","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18836ec","0x0","0x24a7068d","0x18836ec","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18836ec","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18836ec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a2 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18836ec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a2 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:36.965Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:36.966Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:36.966Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:36.966Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:36.966Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x523467c","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x523467c","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x17f0120","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x523467c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ac 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 10 c8 eb 4a 84 d4 dc 01 06 0a 00 00 00 10 c8 eb 4a 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x523467c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ac 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 10 c8 eb 4a 84 d4 dc 01 06 0a 00 00 00 10 c8 eb 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:37.254Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x7ffd","0x62","0x523467c","0x24a705d5","0x17eea90","0x17f011c","0x17f0078","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x523467c","0x24a705d5","0x17eea90","0x17f011c","0x17f0078","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x523467c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ac 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 10 c8 eb 4a 84 d4 dc 01 06 0a 00 00 00 10 c8 eb 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x523467c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ac 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 10 c8 eb 4a 84 d4 dc 01 06 0a 00 00 00 10 c8 eb 4a 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:37.262Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x62","0x523467c","0x0","0x24a70545","0x523467c","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x523467c","0x0","0x24a70545","0x523467c","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x523467c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ac 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 10 c8 eb 4a 84 d4 dc 01 06 0a 00 00 00 10 c8 eb 4a 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u9e84\u0126\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u0120\u017f\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x523467c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ac 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 10 c8 eb 4a 84 d4 dc 01 06 0a 00 00 00 10 c8 eb 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u9e84\u0126\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u0120\u017f\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:37.271Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x62","0x523467c","0x0","0x24a7068d","0x523467c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x523467c","0x0","0x24a7068d","0x523467c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x523467c","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x523467c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ac 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 10 c8 eb 4a 84 d4 dc 01 06 0a 00 00 00 10 c8 eb 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x523467c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ac 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 10 c8 eb 4a 84 d4 dc 01 06 0a 00 00 00 10 c8 eb 4a 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:37.280Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:37.280Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:37.281Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:37.281Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:37.281Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x51b1734","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x51b1734","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x524aae0","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51b1734","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ad 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 10 c8 eb 4a 84 d4 dc 01 06 0a 00 00 00 10 c8 eb 4a 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51b1734","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ad 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 10 c8 eb 4a 84 d4 dc 01 06 0a 00 00 00 10 c8 eb 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:37.293Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x7ffe","0x62","0x51b1734","0x24a705d5","0x17eea90","0x524aadc","0x524aa38","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x51b1734","0x24a705d5","0x17eea90","0x524aadc","0x524aa38","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51b1734","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ad 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 10 c8 eb 4a 84 d4 dc 01 06 0a 00 00 00 10 c8 eb 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51b1734","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ad 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 10 c8 eb 4a 84 d4 dc 01 06 0a 00 00 00 10 c8 eb 4a 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:37.302Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x62","0x51b1734","0x0","0x24a70545","0x51b1734","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51b1734","0x0","0x24a70545","0x51b1734","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51b1734","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ad 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 10 c8 eb 4a 84 d4 dc 01 06 0a 00 00 00 10 c8 eb 4a 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u9e84\u0126\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\uaae0\u0524\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51b1734","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ad 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 10 c8 eb 4a 84 d4 dc 01 06 0a 00 00 00 10 c8 eb 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u9e84\u0126\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\uaae0\u0524\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:37.313Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x62","0x51b1734","0x0","0x24a7068d","0x51b1734","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51b1734","0x0","0x24a7068d","0x51b1734","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51b1734","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51b1734","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ad 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 10 c8 eb 4a 84 d4 dc 01 06 0a 00 00 00 10 c8 eb 4a 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51b1734","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ad 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 10 c8 eb 4a 84 d4 dc 01 06 0a 00 00 00 10 c8 eb 4a 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:37.321Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:37.322Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:37.322Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:37.322Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:37.322Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x51c463c","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x51c463c","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x51ebc60","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51c463c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ac 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x51c463c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ac 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:37.389Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x1","0x2e","0x51c463c","0x24a705d5","0x17eea90","0x51ebc5c","0x51ebbb8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x51c463c","0x24a705d5","0x17eea90","0x51ebc5c","0x51ebbb8","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51c463c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ac 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51c463c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ac 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:37.399Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x2e","0x51c463c","0x0","0x24a70545","0x51c463c","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x51c463c","0x0","0x24a70545","0x51c463c","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51c463c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ac 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\ubc60\u051e\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51c463c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ac 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\ubc60\u051e\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:37.415Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x2e","0x51c463c","0x0","0x24a7068d","0x51c463c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x51c463c","0x0","0x24a7068d","0x51c463c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51c463c","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x51c463c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ac 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51c463c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ac 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:37.422Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18278d4","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18278d4","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51741f0","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18278d4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a3 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 4c 0a 4b 84 d4 dc 01 06 0a 00 00 00 90 4c 0a 4b 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18278d4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a3 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 4c 0a 4b 84 d4 dc 01 06 0a 00 00 00 90 4c 0a 4b 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:37.433Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x51f8654","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x51f8654","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x958870","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51f8654","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ad 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x51f8654","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ad 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:37.444Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:37.445Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:37.445Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:37.445Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:37.445Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x7ffd","0x62","0x18278d4","0x27e700f5","0x23eefb0","0x51741ec","0x5174148","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18278d4","0x27e700f5","0x23eefb0","0x51741ec","0x5174148","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18278d4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a3 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 4c 0a 4b 84 d4 dc 01 06 0a 00 00 00 90 4c 0a 4b 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18278d4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a3 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 4c 0a 4b 84 d4 dc 01 06 0a 00 00 00 90 4c 0a 4b 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:37.453Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x62","0x18278d4","0x0","0x27e70065","0x18278d4","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18278d4","0x0","0x27e70065","0x18278d4","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18278d4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a3 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 4c 0a 4b 84 d4 dc 01 06 0a 00 00 00 90 4c 0a 4b 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u41f0\u0517\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18278d4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a3 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 4c 0a 4b 84 d4 dc 01 06 0a 00 00 00 90 4c 0a 4b 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u41f0\u0517\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:37.459Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x62","0x18278d4","0x0","0x27e701ad","0x18278d4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18278d4","0x0","0x27e701ad","0x18278d4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18278d4","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18278d4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a3 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 4c 0a 4b 84 d4 dc 01 06 0a 00 00 00 90 4c 0a 4b 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18278d4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a3 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 4c 0a 4b 84 d4 dc 01 06 0a 00 00 00 90 4c 0a 4b 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:37.465Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:37.466Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:37.466Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:37.466Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:37.466Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x1","0x2e","0x51f8654","0x255c009d","0x85efc8","0x95886c","0x9587c8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x51f8654","0x255c009d","0x85efc8","0x95886c","0x9587c8","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51f8654","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ad 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51f8654","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ad 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:37.475Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x51f8654","0x0","0x255c000d","0x51f8654","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x51f8654","0x0","0x255c000d","0x51f8654","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51f8654","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ad 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u2b0c\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u8870\x95\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51f8654","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ad 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u2b0c\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u8870\x95\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:37.485Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x51f8654","0x0","0x255c0055","0x51f8654","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x51f8654","0x0","0x255c0055","0x51f8654","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51f8654","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x51f8654","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ad 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51f8654","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ad 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:37.492Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x18c14fc","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x18c14fc","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51e87e8","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18c14fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a3 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18c14fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a3 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:37.500Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:37.500Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:37.500Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:37.501Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:37.501Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x2","0x2e","0x18c14fc","0x27e700f5","0x23eefb0","0x51e87e4","0x51e8740","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x18c14fc","0x27e700f5","0x23eefb0","0x51e87e4","0x51e8740","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18c14fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a3 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18c14fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a3 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:37.506Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x2e","0x18c14fc","0x0","0x27e70065","0x18c14fc","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18c14fc","0x0","0x27e70065","0x18c14fc","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18c14fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a3 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u87e8\u051e\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18c14fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a3 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u87e8\u051e\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:37.512Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x2e","0x18c14fc","0x0","0x27e701ad","0x18c14fc","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18c14fc","0x0","0x27e701ad","0x18c14fc","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18c14fc","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18c14fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a3 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18c14fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a3 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:37.517Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:37.517Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:37.517Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:37.518Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:37.518Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x18323b4","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x18323b4","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51741f0","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18323b4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ae 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 c5 37 4b 84 d4 dc 01 06 0a 00 00 00 30 c5 37 4b 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18323b4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ae 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 c5 37 4b 84 d4 dc 01 06 0a 00 00 00 30 c5 37 4b 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:37.753Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x7ffd","0x62","0x18323b4","0x27e700f5","0x23eefb0","0x51741ec","0x5174148","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18323b4","0x27e700f5","0x23eefb0","0x51741ec","0x5174148","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18323b4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ae 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 c5 37 4b 84 d4 dc 01 06 0a 00 00 00 30 c5 37 4b 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18323b4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ae 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 c5 37 4b 84 d4 dc 01 06 0a 00 00 00 30 c5 37 4b 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:37.758Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x62","0x18323b4","0x0","0x27e70065","0x18323b4","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18323b4","0x0","0x27e70065","0x18323b4","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18323b4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ae 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 c5 37 4b 84 d4 dc 01 06 0a 00 00 00 30 c5 37 4b 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u41f0\u0517\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18323b4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ae 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 c5 37 4b 84 d4 dc 01 06 0a 00 00 00 30 c5 37 4b 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u41f0\u0517\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:37.765Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x62","0x18323b4","0x0","0x27e701ad","0x18323b4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18323b4","0x0","0x27e701ad","0x18323b4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18323b4","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18323b4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ae 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 c5 37 4b 84 d4 dc 01 06 0a 00 00 00 30 c5 37 4b 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18323b4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ae 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 c5 37 4b 84 d4 dc 01 06 0a 00 00 00 30 c5 37 4b 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:37.770Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:37.770Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:37.770Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:37.770Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:37.771Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x18345c4","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x18345c4","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x187a9f8","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 af 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 c5 37 4b 84 d4 dc 01 06 0a 00 00 00 30 c5 37 4b 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 af 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 c5 37 4b 84 d4 dc 01 06 0a 00 00 00 30 c5 37 4b 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:37.778Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x7ffe","0x62","0x18345c4","0x27e700f5","0x23eefb0","0x187a9f4","0x187a950","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x18345c4","0x27e700f5","0x23eefb0","0x187a9f4","0x187a950","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 af 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 c5 37 4b 84 d4 dc 01 06 0a 00 00 00 30 c5 37 4b 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 af 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 c5 37 4b 84 d4 dc 01 06 0a 00 00 00 30 c5 37 4b 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:37.784Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x62","0x18345c4","0x0","0x27e70065","0x18345c4","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18345c4","0x0","0x27e70065","0x18345c4","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 af 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 c5 37 4b 84 d4 dc 01 06 0a 00 00 00 30 c5 37 4b 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\ua9f8\u0187\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 af 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 c5 37 4b 84 d4 dc 01 06 0a 00 00 00 30 c5 37 4b 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\ua9f8\u0187\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:37.790Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x62","0x18345c4","0x0","0x27e701ad","0x18345c4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18345c4","0x0","0x27e701ad","0x18345c4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18345c4","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 af 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 c5 37 4b 84 d4 dc 01 06 0a 00 00 00 30 c5 37 4b 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 af 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 c5 37 4b 84 d4 dc 01 06 0a 00 00 00 30 c5 37 4b 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:37.796Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:37.796Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:37.796Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:37.796Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:37.796Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x18245bc","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x18245bc","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x8dced0","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18245bc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ae 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18245bc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ae 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:37.820Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x1","0x2e","0x18245bc","0x27e700f5","0x23eefb0","0x8dcecc","0x8dce28","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18245bc","0x27e700f5","0x23eefb0","0x8dcecc","0x8dce28","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18245bc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ae 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18245bc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ae 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:37.827Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x1917074","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x1917074","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x1878180","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1917074","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 af 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x1917074","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 af 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:37.834Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x2e","0x18245bc","0x0","0x27e70065","0x18245bc","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18245bc","0x0","0x27e70065","0x18245bc","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18245bc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ae 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\uced0\x8d\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18245bc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ae 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\uced0\x8d\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:37.841Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x2e","0x18245bc","0x0","0x27e701ad","0x18245bc","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18245bc","0x0","0x27e701ad","0x18245bc","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18245bc","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18245bc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ae 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18245bc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ae 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:37.847Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:37.847Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:37.847Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:37.847Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:37.847Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x1","0x2e","0x1917074","0x255c009d","0x85efc8","0x187817c","0x18780d8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x1917074","0x255c009d","0x85efc8","0x187817c","0x18780d8","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1917074","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 af 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1917074","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 af 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:37.855Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x1917074","0x0","0x255c000d","0x1917074","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x1917074","0x0","0x255c000d","0x1917074","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1917074","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 af 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u2b0c\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u8180\u0187\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1917074","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 af 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u2b0c\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u8180\u0187\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:37.863Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x1917074","0x0","0x255c0055","0x1917074","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x1917074","0x0","0x255c0055","0x1917074","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1917074","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x1917074","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 af 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1917074","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 af 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:37.868Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:37.869Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:37.869Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:37.869Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:37.869Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x191a38c","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x191a38c","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x5173660","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x191a38c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a4 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 97 56 4b 84 d4 dc 01 06 0a 00 00 00 d0 97 56 4b 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x191a38c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a4 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 97 56 4b 84 d4 dc 01 06 0a 00 00 00 d0 97 56 4b 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:37.909Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffd","0x62","0x191a38c","0x255c009d","0x85efc8","0x517365c","0x51735b8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x191a38c","0x255c009d","0x85efc8","0x517365c","0x51735b8","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x191a38c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a4 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 97 56 4b 84 d4 dc 01 06 0a 00 00 00 d0 97 56 4b 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x191a38c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a4 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 97 56 4b 84 d4 dc 01 06 0a 00 00 00 d0 97 56 4b 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:37.916Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x191a38c","0x0","0x255c000d","0x191a38c","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x191a38c","0x0","0x255c000d","0x191a38c","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x191a38c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a4 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 97 56 4b 84 d4 dc 01 06 0a 00 00 00 d0 97 56 4b 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\ucdc4\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u3660\u0517\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x191a38c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a4 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 97 56 4b 84 d4 dc 01 06 0a 00 00 00 d0 97 56 4b 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\ucdc4\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u3660\u0517\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:37.924Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x191a38c","0x0","0x255c0055","0x191a38c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x191a38c","0x0","0x255c0055","0x191a38c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x191a38c","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x191a38c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a4 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 97 56 4b 84 d4 dc 01 06 0a 00 00 00 d0 97 56 4b 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x191a38c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a4 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 97 56 4b 84 d4 dc 01 06 0a 00 00 00 d0 97 56 4b 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:37.929Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:37.930Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:37.930Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:37.930Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:37.930Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x191b494","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x191b494","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x5173660","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x191b494","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a4 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x191b494","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a4 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:38.039Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x2","0x2e","0x191b494","0x255c009d","0x85efc8","0x517365c","0x51735b8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x191b494","0x255c009d","0x85efc8","0x517365c","0x51735b8","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x191b494","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a4 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x191b494","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a4 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:38.044Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x191b494","0x0","0x255c000d","0x191b494","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x191b494","0x0","0x255c000d","0x191b494","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x191b494","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a4 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u3660\u0517\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x191b494","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a4 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u3660\u0517\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:38.051Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x191b494","0x0","0x255c0055","0x191b494","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x191b494","0x0","0x255c0055","0x191b494","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x191b494","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x191b494","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a4 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x191b494","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a4 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:38.056Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:38.056Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:38.056Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:38.056Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:38.056Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x18814dc","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x18814dc","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x17f0120","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18814dc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b0 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 80 37 84 4b 84 d4 dc 01 06 0a 00 00 00 80 37 84 4b 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18814dc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b0 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 80 37 84 4b 84 d4 dc 01 06 0a 00 00 00 80 37 84 4b 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:38.254Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffd","0x62","0x18814dc","0x255c009d","0x85efc8","0x17f011c","0x17f0078","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18814dc","0x255c009d","0x85efc8","0x17f011c","0x17f0078","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18814dc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b0 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 80 37 84 4b 84 d4 dc 01 06 0a 00 00 00 80 37 84 4b 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18814dc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b0 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 80 37 84 4b 84 d4 dc 01 06 0a 00 00 00 80 37 84 4b 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:38.261Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x18814dc","0x0","0x255c000d","0x18814dc","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18814dc","0x0","0x255c000d","0x18814dc","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18814dc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b0 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 80 37 84 4b 84 d4 dc 01 06 0a 00 00 00 80 37 84 4b 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u0120\u017f\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18814dc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b0 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 80 37 84 4b 84 d4 dc 01 06 0a 00 00 00 80 37 84 4b 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u0120\u017f\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:38.269Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x18814dc","0x0","0x255c0055","0x18814dc","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18814dc","0x0","0x255c0055","0x18814dc","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18814dc","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18814dc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b0 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 80 37 84 4b 84 d4 dc 01 06 0a 00 00 00 80 37 84 4b 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18814dc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b0 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 80 37 84 4b 84 d4 dc 01 06 0a 00 00 00 80 37 84 4b 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:38.274Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:38.275Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:38.275Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:38.275Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:38.276Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x191b494","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x191b494","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x5173660","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x191b494","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b1 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 80 37 84 4b 84 d4 dc 01 06 0a 00 00 00 80 37 84 4b 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x191b494","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b1 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 80 37 84 4b 84 d4 dc 01 06 0a 00 00 00 80 37 84 4b 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:38.283Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffe","0x62","0x191b494","0x255c009d","0x85efc8","0x517365c","0x51735b8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x191b494","0x255c009d","0x85efc8","0x517365c","0x51735b8","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x191b494","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b1 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 80 37 84 4b 84 d4 dc 01 06 0a 00 00 00 80 37 84 4b 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x191b494","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b1 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 80 37 84 4b 84 d4 dc 01 06 0a 00 00 00 80 37 84 4b 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:38.289Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x191b494","0x0","0x255c000d","0x191b494","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x191b494","0x0","0x255c000d","0x191b494","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x191b494","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b1 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 80 37 84 4b 84 d4 dc 01 06 0a 00 00 00 80 37 84 4b 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u3660\u0517\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x191b494","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b1 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 80 37 84 4b 84 d4 dc 01 06 0a 00 00 00 80 37 84 4b 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u3660\u0517\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:38.296Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x191b494","0x0","0x255c0055","0x191b494","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x191b494","0x0","0x255c0055","0x191b494","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x191b494","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x191b494","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b1 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 80 37 84 4b 84 d4 dc 01 06 0a 00 00 00 80 37 84 4b 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x191b494","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b1 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 80 37 84 4b 84 d4 dc 01 06 0a 00 00 00 80 37 84 4b 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:38.301Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:38.301Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:38.301Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:38.302Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:38.302Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x1905274","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x1905274","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x187a9f8","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1905274","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b1 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x1905274","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b1 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:38.368Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x1","0x2e","0x1905274","0x255c009d","0x85efc8","0x187a9f4","0x187a950","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x1905274","0x255c009d","0x85efc8","0x187a9f4","0x187a950","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1905274","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b1 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1905274","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b1 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:38.374Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x1905274","0x0","0x255c000d","0x1905274","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x1905274","0x0","0x255c000d","0x1905274","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1905274","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b1 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u2b0c\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ua9f8\u0187\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1905274","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b1 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u2b0c\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ua9f8\u0187\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:38.380Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x1905274","0x0","0x255c0055","0x1905274","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x1905274","0x0","0x255c0055","0x1905274","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1905274","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x1905274","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b1 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1905274","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b1 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:38.385Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:38.386Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:38.386Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:38.386Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x191a38c","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x191a38c","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x5173660","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x191a38c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b0 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x191a38c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b0 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:38.400Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x1","0x2e","0x191a38c","0x27e700f5","0x23eefb0","0x517365c","0x51735b8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x191a38c","0x27e700f5","0x23eefb0","0x517365c","0x51735b8","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x191a38c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b0 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x191a38c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b0 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:38.408Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x2e","0x191a38c","0x0","0x27e70065","0x191a38c","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x191a38c","0x0","0x27e70065","0x191a38c","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x191a38c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b0 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u3660\u0517\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x191a38c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b0 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u3660\u0517\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:38.419Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x2e","0x191a38c","0x0","0x27e701ad","0x191a38c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x191a38c","0x0","0x27e701ad","0x191a38c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x191a38c","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x191a38c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b0 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x191a38c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b0 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:38.426Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:38.427Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:38.427Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:38.427Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:38.428Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:38.428Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x523467c","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x523467c","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x17f0120","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x523467c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a5 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 30 31 a3 4b 84 d4 dc 01 06 0a 00 00 00 30 31 a3 4b 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x523467c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a5 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 30 31 a3 4b 84 d4 dc 01 06 0a 00 00 00 30 31 a3 4b 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:38.449Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x7ffd","0x62","0x523467c","0x24a705d5","0x17eea90","0x17f011c","0x17f0078","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x523467c","0x24a705d5","0x17eea90","0x17f011c","0x17f0078","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x523467c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a5 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 30 31 a3 4b 84 d4 dc 01 06 0a 00 00 00 30 31 a3 4b 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x523467c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a5 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 30 31 a3 4b 84 d4 dc 01 06 0a 00 00 00 30 31 a3 4b 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:38.465Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x62","0x523467c","0x0","0x24a70545","0x523467c","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x523467c","0x0","0x24a70545","0x523467c","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x523467c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a5 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 30 31 a3 4b 84 d4 dc 01 06 0a 00 00 00 30 31 a3 4b 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\ucdc4\u0126\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u0120\u017f\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x523467c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a5 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 30 31 a3 4b 84 d4 dc 01 06 0a 00 00 00 30 31 a3 4b 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\ucdc4\u0126\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u0120\u017f\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:38.477Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x62","0x523467c","0x0","0x24a7068d","0x523467c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x523467c","0x0","0x24a7068d","0x523467c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x523467c","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x523467c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a5 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 30 31 a3 4b 84 d4 dc 01 06 0a 00 00 00 30 31 a3 4b 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x523467c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a5 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 30 31 a3 4b 84 d4 dc 01 06 0a 00 00 00 30 31 a3 4b 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:38.487Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:38.487Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:38.488Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:38.488Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:38.488Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x51b6c5c","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x51b6c5c","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x524aae0","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51b6c5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a5 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x51b6c5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a5 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:38.586Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x2","0x2e","0x51b6c5c","0x24a705d5","0x17eea90","0x524aadc","0x524aa38","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x51b6c5c","0x24a705d5","0x17eea90","0x524aadc","0x524aa38","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51b6c5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a5 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51b6c5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a5 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:38.591Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x2e","0x51b6c5c","0x0","0x24a70545","0x51b6c5c","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x51b6c5c","0x0","0x24a70545","0x51b6c5c","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51b6c5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a5 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\uaae0\u0524\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51b6c5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a5 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\uaae0\u0524\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:38.597Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x2e","0x51b6c5c","0x0","0x24a7068d","0x51b6c5c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x51b6c5c","0x0","0x24a7068d","0x51b6c5c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51b6c5c","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x51b6c5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a5 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51b6c5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a5 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:38.602Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:38.602Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:38.602Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:38.602Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:38.602Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x51b6c5c","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x51b6c5c","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x524aae0","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51b6c5c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 c0 82 d0 4b 84 d4 dc 01 06 0a 00 00 00 c0 82 d0 4b 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51b6c5c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 c0 82 d0 4b 84 d4 dc 01 06 0a 00 00 00 c0 82 d0 4b 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:38.756Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x7ffd","0x62","0x51b6c5c","0x24a705d5","0x17eea90","0x524aadc","0x524aa38","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x51b6c5c","0x24a705d5","0x17eea90","0x524aadc","0x524aa38","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51b6c5c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 c0 82 d0 4b 84 d4 dc 01 06 0a 00 00 00 c0 82 d0 4b 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51b6c5c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 c0 82 d0 4b 84 d4 dc 01 06 0a 00 00 00 c0 82 d0 4b 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:38.763Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x62","0x51b6c5c","0x0","0x24a70545","0x51b6c5c","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51b6c5c","0x0","0x24a70545","0x51b6c5c","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51b6c5c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 c0 82 d0 4b 84 d4 dc 01 06 0a 00 00 00 c0 82 d0 4b 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u9e84\u0126\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\uaae0\u0524\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51b6c5c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 c0 82 d0 4b 84 d4 dc 01 06 0a 00 00 00 c0 82 d0 4b 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u9e84\u0126\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\uaae0\u0524\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:38.771Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x62","0x51b6c5c","0x0","0x24a7068d","0x51b6c5c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51b6c5c","0x0","0x24a7068d","0x51b6c5c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51b6c5c","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51b6c5c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 c0 82 d0 4b 84 d4 dc 01 06 0a 00 00 00 c0 82 d0 4b 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51b6c5c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 c0 82 d0 4b 84 d4 dc 01 06 0a 00 00 00 c0 82 d0 4b 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:38.779Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:38.780Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:38.780Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:38.780Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:38.780Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x182df04","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x182df04","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x51ea4d0","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x182df04","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b3 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 c0 82 d0 4b 84 d4 dc 01 06 0a 00 00 00 c0 82 d0 4b 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x182df04","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b3 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 c0 82 d0 4b 84 d4 dc 01 06 0a 00 00 00 c0 82 d0 4b 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:38.792Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x7ffe","0x62","0x182df04","0x24a705d5","0x17eea90","0x51ea4cc","0x51ea428","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x182df04","0x24a705d5","0x17eea90","0x51ea4cc","0x51ea428","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x182df04","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b3 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 c0 82 d0 4b 84 d4 dc 01 06 0a 00 00 00 c0 82 d0 4b 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x182df04","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b3 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 c0 82 d0 4b 84 d4 dc 01 06 0a 00 00 00 c0 82 d0 4b 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:38.799Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x62","0x182df04","0x0","0x24a70545","0x182df04","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x182df04","0x0","0x24a70545","0x182df04","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x182df04","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b3 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 c0 82 d0 4b 84 d4 dc 01 06 0a 00 00 00 c0 82 d0 4b 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u9e84\u0126\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\ua4d0\u051e\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x182df04","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b3 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 c0 82 d0 4b 84 d4 dc 01 06 0a 00 00 00 c0 82 d0 4b 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u9e84\u0126\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\ua4d0\u051e\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:38.807Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x62","0x182df04","0x0","0x24a7068d","0x182df04","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x182df04","0x0","0x24a7068d","0x182df04","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x182df04","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x182df04","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b3 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 c0 82 d0 4b 84 d4 dc 01 06 0a 00 00 00 c0 82 d0 4b 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x182df04","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b3 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 c0 82 d0 4b 84 d4 dc 01 06 0a 00 00 00 c0 82 d0 4b 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:38.813Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:38.814Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:38.814Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:38.814Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:38.814Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x51b1734","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x51b1734","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x524aae0","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51b1734","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b2 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x51b1734","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b2 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:38.822Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x1","0x2e","0x51b1734","0x255c009d","0x85efc8","0x524aadc","0x524aa38","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x51b1734","0x255c009d","0x85efc8","0x524aadc","0x524aa38","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51b1734","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b2 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51b1734","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b2 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:38.828Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x51b1734","0x0","0x255c000d","0x51b1734","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x51b1734","0x0","0x255c000d","0x51b1734","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51b1734","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b2 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\uaae0\u0524\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51b1734","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b2 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\uaae0\u0524\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:38.835Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x51b1734","0x0","0x255c0055","0x51b1734","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x51b1734","0x0","0x255c0055","0x51b1734","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51b1734","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x51b1734","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b2 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51b1734","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b2 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:38.839Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:38.840Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:38.840Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:38.840Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:38.840Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18345c4","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18345c4","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x187a9f8","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a6 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 55 ef 4b 84 d4 dc 01 06 0a 00 00 00 60 55 ef 4b 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a6 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 55 ef 4b 84 d4 dc 01 06 0a 00 00 00 60 55 ef 4b 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:38.910Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffd","0x62","0x18345c4","0x255c009d","0x85efc8","0x187a9f4","0x187a950","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18345c4","0x255c009d","0x85efc8","0x187a9f4","0x187a950","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a6 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 55 ef 4b 84 d4 dc 01 06 0a 00 00 00 60 55 ef 4b 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a6 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 55 ef 4b 84 d4 dc 01 06 0a 00 00 00 60 55 ef 4b 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:38.920Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x18345c4","0x0","0x255c000d","0x18345c4","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18345c4","0x0","0x255c000d","0x18345c4","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a6 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 55 ef 4b 84 d4 dc 01 06 0a 00 00 00 60 55 ef 4b 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\ucdc4\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ua9f8\u0187\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a6 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 55 ef 4b 84 d4 dc 01 06 0a 00 00 00 60 55 ef 4b 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\ucdc4\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ua9f8\u0187\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:38.933Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x18345c4","0x0","0x255c0055","0x18345c4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18345c4","0x0","0x255c0055","0x18345c4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18345c4","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a6 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 55 ef 4b 84 d4 dc 01 06 0a 00 00 00 60 55 ef 4b 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a6 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 55 ef 4b 84 d4 dc 01 06 0a 00 00 00 60 55 ef 4b 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:38.940Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x5235784","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x5235784","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x17f2f60","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x5235784","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b3 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x5235784","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b3 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:38.948Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:38.948Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:38.948Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:38.949Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:38.949Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x1","0x2e","0x5235784","0x24a705d5","0x17eea90","0x17f2f5c","0x17f2eb8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x5235784","0x24a705d5","0x17eea90","0x17f2f5c","0x17f2eb8","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x5235784","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b3 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x5235784","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b3 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:38.955Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x2e","0x5235784","0x0","0x24a70545","0x5235784","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x5235784","0x0","0x24a70545","0x5235784","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x5235784","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b3 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u2b0c\u021f\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u2f60\u017f\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x5235784","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b3 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u2b0c\u021f\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u2f60\u017f\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:38.962Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x2e","0x5235784","0x0","0x24a7068d","0x5235784","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x5235784","0x0","0x24a7068d","0x5235784","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x5235784","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x5235784","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b3 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x5235784","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b3 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:38.967Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:38.967Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:38.967Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:38.967Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:38.967Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x1888c14","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x1888c14","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x17f0cb0","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1888c14","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a6 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x1888c14","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a6 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:39.024Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x2","0x2e","0x1888c14","0x24a705d5","0x17eea90","0x17f0cac","0x17f0c08","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x1888c14","0x24a705d5","0x17eea90","0x17f0cac","0x17f0c08","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1888c14","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a6 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1888c14","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a6 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:39.030Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x2e","0x1888c14","0x0","0x24a70545","0x1888c14","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x1888c14","0x0","0x24a70545","0x1888c14","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1888c14","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a6 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u0cb0\u017f\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1888c14","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a6 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u0cb0\u017f\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:39.037Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x2e","0x1888c14","0x0","0x24a7068d","0x1888c14","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x1888c14","0x0","0x24a7068d","0x1888c14","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1888c14","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x1888c14","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a6 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1888c14","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a6 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:39.045Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:39.045Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:39.046Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:39.046Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:39.046Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x523025c","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x523025c","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x17f1278","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x523025c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b4 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 00 ce 1c 4c 84 d4 dc 01 06 0a 00 00 00 00 ce 1c 4c 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x523025c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b4 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 00 ce 1c 4c 84 d4 dc 01 06 0a 00 00 00 00 ce 1c 4c 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:39.260Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x7ffd","0x62","0x523025c","0x24a705d5","0x17eea90","0x17f1274","0x17f11d0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x523025c","0x24a705d5","0x17eea90","0x17f1274","0x17f11d0","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x523025c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b4 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 00 ce 1c 4c 84 d4 dc 01 06 0a 00 00 00 00 ce 1c 4c 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x523025c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b4 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 00 ce 1c 4c 84 d4 dc 01 06 0a 00 00 00 00 ce 1c 4c 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:39.265Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x62","0x523025c","0x0","0x24a70545","0x523025c","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x523025c","0x0","0x24a70545","0x523025c","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x523025c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b4 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 00 ce 1c 4c 84 d4 dc 01 06 0a 00 00 00 00 ce 1c 4c 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u9e84\u0126\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u1278\u017f\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x523025c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b4 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 00 ce 1c 4c 84 d4 dc 01 06 0a 00 00 00 00 ce 1c 4c 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u9e84\u0126\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u1278\u017f\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:39.273Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x62","0x523025c","0x0","0x24a7068d","0x523025c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x523025c","0x0","0x24a7068d","0x523025c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x523025c","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x523025c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b4 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 00 ce 1c 4c 84 d4 dc 01 06 0a 00 00 00 00 ce 1c 4c 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x523025c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b4 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 00 ce 1c 4c 84 d4 dc 01 06 0a 00 00 00 00 ce 1c 4c 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:39.279Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:39.279Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:39.279Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:39.279Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:39.279Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x18345c4","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x18345c4","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x187a9f8","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b5 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 00 ce 1c 4c 84 d4 dc 01 06 0a 00 00 00 00 ce 1c 4c 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b5 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 00 ce 1c 4c 84 d4 dc 01 06 0a 00 00 00 00 ce 1c 4c 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:39.287Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x7ffe","0x62","0x18345c4","0x24a705d5","0x17eea90","0x187a9f4","0x187a950","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x18345c4","0x24a705d5","0x17eea90","0x187a9f4","0x187a950","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b5 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 00 ce 1c 4c 84 d4 dc 01 06 0a 00 00 00 00 ce 1c 4c 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b5 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 00 ce 1c 4c 84 d4 dc 01 06 0a 00 00 00 00 ce 1c 4c 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:39.293Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x62","0x18345c4","0x0","0x24a70545","0x18345c4","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18345c4","0x0","0x24a70545","0x18345c4","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b5 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 00 ce 1c 4c 84 d4 dc 01 06 0a 00 00 00 00 ce 1c 4c 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u9e84\u0126\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\ua9f8\u0187\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b5 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 00 ce 1c 4c 84 d4 dc 01 06 0a 00 00 00 00 ce 1c 4c 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u9e84\u0126\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\ua9f8\u0187\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:39.299Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x62","0x18345c4","0x0","0x24a7068d","0x18345c4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18345c4","0x0","0x24a7068d","0x18345c4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18345c4","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b5 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 00 ce 1c 4c 84 d4 dc 01 06 0a 00 00 00 00 ce 1c 4c 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b5 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 00 ce 1c 4c 84 d4 dc 01 06 0a 00 00 00 00 ce 1c 4c 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:39.304Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:39.305Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:39.305Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:39.305Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:39.305Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x1905274","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x1905274","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x187a9f8","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1905274","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b5 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x1905274","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b5 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:39.351Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x1","0x2e","0x1905274","0x24a705d5","0x17eea90","0x187a9f4","0x187a950","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x1905274","0x24a705d5","0x17eea90","0x187a9f4","0x187a950","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1905274","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b5 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1905274","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b5 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:39.357Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x2e","0x1905274","0x0","0x24a70545","0x1905274","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x1905274","0x0","0x24a70545","0x1905274","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1905274","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b5 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u2b0c\u021f\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\ua9f8\u0187\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1905274","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b5 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u2b0c\u021f\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\ua9f8\u0187\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:39.364Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x2e","0x1905274","0x0","0x24a7068d","0x1905274","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x1905274","0x0","0x24a7068d","0x1905274","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1905274","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x1905274","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b5 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1905274","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b5 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:39.369Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x18b3704","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x18b3704","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x5174d80","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18b3704","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b4 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18b3704","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b4 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:39.377Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:39.377Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:39.377Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:39.377Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:39.378Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x1","0x2e","0x18b3704","0x255c009d","0x85efc8","0x5174d7c","0x5174cd8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18b3704","0x255c009d","0x85efc8","0x5174d7c","0x5174cd8","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18b3704","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b4 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18b3704","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b4 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:39.383Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x18b3704","0x0","0x255c000d","0x18b3704","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18b3704","0x0","0x255c000d","0x18b3704","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18b3704","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b4 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u4d80\u0517\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18b3704","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b4 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u4d80\u0517\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:39.389Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x18b3704","0x0","0x255c0055","0x18b3704","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18b3704","0x0","0x255c0055","0x18b3704","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b3704","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18b3704","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b4 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18b3704","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b4 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:39.394Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:39.395Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:39.395Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:39.395Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:39.395Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18389e4","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18389e4","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51747b8","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18389e4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a7 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 b0 c7 3b 4c 84 d4 dc 01 06 0a 00 00 00 b0 c7 3b 4c 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18389e4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a7 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 b0 c7 3b 4c 84 d4 dc 01 06 0a 00 00 00 b0 c7 3b 4c 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:39.417Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffd","0x62","0x18389e4","0x255c009d","0x85efc8","0x51747b4","0x5174710","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18389e4","0x255c009d","0x85efc8","0x51747b4","0x5174710","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18389e4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a7 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 b0 c7 3b 4c 84 d4 dc 01 06 0a 00 00 00 b0 c7 3b 4c 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18389e4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a7 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 b0 c7 3b 4c 84 d4 dc 01 06 0a 00 00 00 b0 c7 3b 4c 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:39.424Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x18389e4","0x0","0x255c000d","0x18389e4","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18389e4","0x0","0x255c000d","0x18389e4","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18389e4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a7 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 b0 c7 3b 4c 84 d4 dc 01 06 0a 00 00 00 b0 c7 3b 4c 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\ucdc4\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u47b8\u0517\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18389e4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a7 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 b0 c7 3b 4c 84 d4 dc 01 06 0a 00 00 00 b0 c7 3b 4c 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\ucdc4\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u47b8\u0517\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:39.432Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x18389e4","0x0","0x255c0055","0x18389e4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18389e4","0x0","0x255c0055","0x18389e4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18389e4","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18389e4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a7 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 b0 c7 3b 4c 84 d4 dc 01 06 0a 00 00 00 b0 c7 3b 4c 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18389e4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a7 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 b0 c7 3b 4c 84 d4 dc 01 06 0a 00 00 00 b0 c7 3b 4c 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:39.438Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:39.438Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:39.438Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:39.438Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:39.438Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x51c5744","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x51c5744","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x8da658","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51c5744","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a7 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x51c5744","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a7 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:39.466Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x2","0x2e","0x51c5744","0x255c009d","0x85efc8","0x8da654","0x8da5b0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x51c5744","0x255c009d","0x85efc8","0x8da654","0x8da5b0","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51c5744","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a7 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51c5744","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a7 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:39.473Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x51c5744","0x0","0x255c000d","0x51c5744","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x51c5744","0x0","0x255c000d","0x51c5744","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51c5744","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a7 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ua658\x8d\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51c5744","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a7 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ua658\x8d\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:39.480Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x51c5744","0x0","0x255c0055","0x51c5744","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x51c5744","0x0","0x255c0055","0x51c5744","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51c5744","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x51c5744","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a7 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51c5744","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a7 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:39.485Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:39.486Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:39.486Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:39.486Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:39.486Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x183df0c","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x183df0c","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x5247ca0","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b6 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 cb 68 4c 84 d4 dc 01 06 0a 00 00 00 20 cb 68 4c 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b6 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 cb 68 4c 84 d4 dc 01 06 0a 00 00 00 20 cb 68 4c 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:39.765Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffd","0x62","0x183df0c","0x255c009d","0x85efc8","0x5247c9c","0x5247bf8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x183df0c","0x255c009d","0x85efc8","0x5247c9c","0x5247bf8","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b6 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 cb 68 4c 84 d4 dc 01 06 0a 00 00 00 20 cb 68 4c 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b6 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 cb 68 4c 84 d4 dc 01 06 0a 00 00 00 20 cb 68 4c 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:39.772Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x183df0c","0x0","0x255c000d","0x183df0c","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x183df0c","0x0","0x255c000d","0x183df0c","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b6 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 cb 68 4c 84 d4 dc 01 06 0a 00 00 00 20 cb 68 4c 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u7ca0\u0524\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b6 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 cb 68 4c 84 d4 dc 01 06 0a 00 00 00 20 cb 68 4c 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u7ca0\u0524\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:39.780Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x183df0c","0x0","0x255c0055","0x183df0c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x183df0c","0x0","0x255c0055","0x183df0c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x183df0c","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b6 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 cb 68 4c 84 d4 dc 01 06 0a 00 00 00 20 cb 68 4c 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b6 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 cb 68 4c 84 d4 dc 01 06 0a 00 00 00 20 cb 68 4c 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:39.787Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:39.787Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:39.787Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:39.787Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:39.787Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x1829ae4","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x1829ae4","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x1922c08","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x1829ae4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b7 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 cb 68 4c 84 d4 dc 01 06 0a 00 00 00 20 cb 68 4c 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x1829ae4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b7 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 cb 68 4c 84 d4 dc 01 06 0a 00 00 00 20 cb 68 4c 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:39.797Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffe","0x62","0x1829ae4","0x255c009d","0x85efc8","0x1922c04","0x1922b60","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x1829ae4","0x255c009d","0x85efc8","0x1922c04","0x1922b60","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x1829ae4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b7 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 cb 68 4c 84 d4 dc 01 06 0a 00 00 00 20 cb 68 4c 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x1829ae4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b7 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 cb 68 4c 84 d4 dc 01 06 0a 00 00 00 20 cb 68 4c 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:39.805Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x1829ae4","0x0","0x255c000d","0x1829ae4","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x1829ae4","0x0","0x255c000d","0x1829ae4","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x1829ae4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b7 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 cb 68 4c 84 d4 dc 01 06 0a 00 00 00 20 cb 68 4c 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u2c08�\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x1829ae4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b7 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 cb 68 4c 84 d4 dc 01 06 0a 00 00 00 20 cb 68 4c 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u2c08�\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:39.817Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x1829ae4","0x0","0x255c0055","0x1829ae4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x1829ae4","0x0","0x255c0055","0x1829ae4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1829ae4","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x1829ae4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b7 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 cb 68 4c 84 d4 dc 01 06 0a 00 00 00 20 cb 68 4c 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x1829ae4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b7 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 cb 68 4c 84 d4 dc 01 06 0a 00 00 00 20 cb 68 4c 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:39.825Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:39.826Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:39.826Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:39.826Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:39.826Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x18389e4","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x18389e4","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51747b8","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18389e4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b6 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18389e4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b6 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:39.901Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x1","0x2e","0x18389e4","0x255c009d","0x85efc8","0x51747b4","0x5174710","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18389e4","0x255c009d","0x85efc8","0x51747b4","0x5174710","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18389e4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b6 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18389e4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b6 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:39.910Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x18389e4","0x0","0x255c000d","0x18389e4","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18389e4","0x0","0x255c000d","0x18389e4","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18389e4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b6 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u47b8\u0517\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18389e4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b6 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u47b8\u0517\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:39.916Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x18389e4","0x0","0x255c0055","0x18389e4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18389e4","0x0","0x255c0055","0x18389e4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18389e4","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18389e4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b6 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18389e4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b6 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:39.920Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x18825e4","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x18825e4","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x17f1278","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18825e4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b7 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18825e4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b7 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:39.928Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18278d4","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18278d4","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51741f0","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18278d4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a8 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 eb 87 4c 84 d4 dc 01 06 0a 00 00 00 e0 eb 87 4c 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18278d4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a8 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 eb 87 4c 84 d4 dc 01 06 0a 00 00 00 e0 eb 87 4c 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:39.936Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:39.936Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:39.936Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:39.936Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:39.937Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x1","0x2e","0x18825e4","0x24a705d5","0x17eea90","0x17f1274","0x17f11d0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18825e4","0x24a705d5","0x17eea90","0x17f1274","0x17f11d0","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18825e4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b7 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18825e4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b7 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:39.942Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x2e","0x18825e4","0x0","0x24a70545","0x18825e4","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18825e4","0x0","0x24a70545","0x18825e4","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18825e4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b7 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u2b0c\u021f\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u1278\u017f\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18825e4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b7 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u2b0c\u021f\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u1278\u017f\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:39.949Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x2e","0x18825e4","0x0","0x24a7068d","0x18825e4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18825e4","0x0","0x24a7068d","0x18825e4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18825e4","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18825e4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b7 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18825e4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b7 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:39.954Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:39.954Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:39.955Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:39.955Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:39.955Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x7ffd","0x62","0x18278d4","0x27e700f5","0x23eefb0","0x51741ec","0x5174148","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18278d4","0x27e700f5","0x23eefb0","0x51741ec","0x5174148","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18278d4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a8 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 eb 87 4c 84 d4 dc 01 06 0a 00 00 00 e0 eb 87 4c 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18278d4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a8 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 eb 87 4c 84 d4 dc 01 06 0a 00 00 00 e0 eb 87 4c 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:39.962Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x62","0x18278d4","0x0","0x27e70065","0x18278d4","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18278d4","0x0","0x27e70065","0x18278d4","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18278d4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a8 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 eb 87 4c 84 d4 dc 01 06 0a 00 00 00 e0 eb 87 4c 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u41f0\u0517\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18278d4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a8 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 eb 87 4c 84 d4 dc 01 06 0a 00 00 00 e0 eb 87 4c 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u41f0\u0517\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:39.969Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x62","0x18278d4","0x0","0x27e701ad","0x18278d4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18278d4","0x0","0x27e701ad","0x18278d4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18278d4","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18278d4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a8 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 eb 87 4c 84 d4 dc 01 06 0a 00 00 00 e0 eb 87 4c 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18278d4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a8 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 eb 87 4c 84 d4 dc 01 06 0a 00 00 00 e0 eb 87 4c 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:39.974Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:39.974Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:39.974Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:39.975Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:39.975Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x523246c","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x523246c","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x52476d8","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x523246c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a8 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x523246c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a8 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:40.013Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x2","0x2e","0x523246c","0x27e700f5","0x23eefb0","0x52476d4","0x5247630","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x523246c","0x27e700f5","0x23eefb0","0x52476d4","0x5247630","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x523246c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a8 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x523246c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a8 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:40.022Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x2e","0x523246c","0x0","0x27e70065","0x523246c","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x523246c","0x0","0x27e70065","0x523246c","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x523246c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a8 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u76d8\u0524\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x523246c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a8 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u76d8\u0524\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:40.032Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x2e","0x523246c","0x0","0x27e701ad","0x523246c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x523246c","0x0","0x27e701ad","0x523246c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x523246c","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x523246c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a8 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x523246c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a8 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:40.039Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:40.039Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:40.039Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:40.040Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:40.040Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x523467c","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x523467c","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51e9940","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x523467c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b8 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 60 16 b5 4c 84 d4 dc 01 06 0a 00 00 00 60 16 b5 4c 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x523467c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b8 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 60 16 b5 4c 84 d4 dc 01 06 0a 00 00 00 60 16 b5 4c 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:40.269Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x7ffd","0x62","0x523467c","0x27e700f5","0x23eefb0","0x51e993c","0x51e9898","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x523467c","0x27e700f5","0x23eefb0","0x51e993c","0x51e9898","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x523467c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b8 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 60 16 b5 4c 84 d4 dc 01 06 0a 00 00 00 60 16 b5 4c 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x523467c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b8 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 60 16 b5 4c 84 d4 dc 01 06 0a 00 00 00 60 16 b5 4c 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:40.278Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x62","0x523467c","0x0","0x27e70065","0x523467c","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x523467c","0x0","0x27e70065","0x523467c","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x523467c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b8 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 60 16 b5 4c 84 d4 dc 01 06 0a 00 00 00 60 16 b5 4c 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u9940\u051e\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x523467c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b8 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 60 16 b5 4c 84 d4 dc 01 06 0a 00 00 00 60 16 b5 4c 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u9940\u051e\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:40.287Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x62","0x523467c","0x0","0x27e701ad","0x523467c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x523467c","0x0","0x27e701ad","0x523467c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x523467c","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x523467c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b8 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 60 16 b5 4c 84 d4 dc 01 06 0a 00 00 00 60 16 b5 4c 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x523467c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b8 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 60 16 b5 4c 84 d4 dc 01 06 0a 00 00 00 60 16 b5 4c 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:40.293Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:40.293Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:40.294Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:40.294Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:40.294Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x18c03f4","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x18c03f4","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x8dac20","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18c03f4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b9 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 60 16 b5 4c 84 d4 dc 01 06 0a 00 00 00 60 16 b5 4c 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18c03f4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b9 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 60 16 b5 4c 84 d4 dc 01 06 0a 00 00 00 60 16 b5 4c 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:40.303Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x7ffe","0x62","0x18c03f4","0x27e700f5","0x23eefb0","0x8dac1c","0x8dab78","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x18c03f4","0x27e700f5","0x23eefb0","0x8dac1c","0x8dab78","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18c03f4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b9 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 60 16 b5 4c 84 d4 dc 01 06 0a 00 00 00 60 16 b5 4c 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18c03f4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b9 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 60 16 b5 4c 84 d4 dc 01 06 0a 00 00 00 60 16 b5 4c 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:40.309Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x62","0x18c03f4","0x0","0x27e70065","0x18c03f4","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18c03f4","0x0","0x27e70065","0x18c03f4","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18c03f4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b9 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 60 16 b5 4c 84 d4 dc 01 06 0a 00 00 00 60 16 b5 4c 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\uac20\x8d\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18c03f4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b9 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 60 16 b5 4c 84 d4 dc 01 06 0a 00 00 00 60 16 b5 4c 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\uac20\x8d\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:40.319Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x62","0x18c03f4","0x0","0x27e701ad","0x18c03f4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18c03f4","0x0","0x27e701ad","0x18c03f4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18c03f4","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18c03f4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b9 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 60 16 b5 4c 84 d4 dc 01 06 0a 00 00 00 60 16 b5 4c 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18c03f4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b9 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 60 16 b5 4c 84 d4 dc 01 06 0a 00 00 00 60 16 b5 4c 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:40.328Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x190858c","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x190858c","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x5247ca0","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x190858c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b8 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x190858c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b8 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:40.335Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:40.336Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:40.336Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:40.336Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:40.336Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x1","0x2e","0x190858c","0x24a705d5","0x17eea90","0x5247c9c","0x5247bf8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x190858c","0x24a705d5","0x17eea90","0x5247c9c","0x5247bf8","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x190858c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b8 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x190858c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b8 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:40.342Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x2e","0x190858c","0x0","0x24a70545","0x190858c","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x190858c","0x0","0x24a70545","0x190858c","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x190858c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b8 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u7ca0\u0524\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x190858c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b8 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u7ca0\u0524\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:40.348Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x2e","0x190858c","0x0","0x24a7068d","0x190858c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x190858c","0x0","0x24a7068d","0x190858c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x190858c","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x190858c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b8 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x190858c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b8 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:40.352Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:40.353Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:40.353Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:40.353Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:40.353Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18345c4","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18345c4","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x187a9f8","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a9 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 10 d4 4c 84 d4 dc 01 06 0a 00 00 00 10 10 d4 4c 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a9 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 10 d4 4c 84 d4 dc 01 06 0a 00 00 00 10 10 d4 4c 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:40.408Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x7ffd","0x62","0x18345c4","0x24a705d5","0x17eea90","0x187a9f4","0x187a950","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18345c4","0x24a705d5","0x17eea90","0x187a9f4","0x187a950","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a9 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 10 d4 4c 84 d4 dc 01 06 0a 00 00 00 10 10 d4 4c 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a9 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 10 d4 4c 84 d4 dc 01 06 0a 00 00 00 10 10 d4 4c 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:40.414Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x62","0x18345c4","0x0","0x24a70545","0x18345c4","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18345c4","0x0","0x24a70545","0x18345c4","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a9 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 10 d4 4c 84 d4 dc 01 06 0a 00 00 00 10 10 d4 4c 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\ucdc4\u0126\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\ua9f8\u0187\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a9 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 10 d4 4c 84 d4 dc 01 06 0a 00 00 00 10 10 d4 4c 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\ucdc4\u0126\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\ua9f8\u0187\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:40.423Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x62","0x18345c4","0x0","0x24a7068d","0x18345c4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18345c4","0x0","0x24a7068d","0x18345c4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18345c4","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a9 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 10 d4 4c 84 d4 dc 01 06 0a 00 00 00 10 10 d4 4c 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 a9 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 10 d4 4c 84 d4 dc 01 06 0a 00 00 00 10 10 d4 4c 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:40.429Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:40.429Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:40.429Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:40.430Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:40.430Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x1886a04","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x1886a04","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x17f0cb0","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1886a04","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a9 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x1886a04","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a9 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:40.447Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x2","0x2e","0x1886a04","0x24a705d5","0x17eea90","0x17f0cac","0x17f0c08","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x1886a04","0x24a705d5","0x17eea90","0x17f0cac","0x17f0c08","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1886a04","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a9 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1886a04","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a9 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:40.453Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x2e","0x1886a04","0x0","0x24a70545","0x1886a04","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x1886a04","0x0","0x24a70545","0x1886a04","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1886a04","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a9 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u0cb0\u017f\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1886a04","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a9 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u0cb0\u017f\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:40.461Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x2e","0x1886a04","0x0","0x24a7068d","0x1886a04","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x1886a04","0x0","0x24a7068d","0x1886a04","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1886a04","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x1886a04","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a9 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1886a04","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 a9 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:40.469Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x18b25fc","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x18b25fc","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51e70c8","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18b25fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b9 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18b25fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b9 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:40.477Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:40.478Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:40.478Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:40.479Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:40.479Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x1","0x2e","0x18b25fc","0x27e700f5","0x23eefb0","0x51e70c4","0x51e7020","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18b25fc","0x27e700f5","0x23eefb0","0x51e70c4","0x51e7020","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18b25fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b9 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18b25fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b9 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:40.486Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x2e","0x18b25fc","0x0","0x27e70065","0x18b25fc","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18b25fc","0x0","0x27e70065","0x18b25fc","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18b25fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b9 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u2b0c\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u70c8\u051e\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18b25fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b9 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u2b0c\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u70c8\u051e\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:40.493Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x2e","0x18b25fc","0x0","0x27e701ad","0x18b25fc","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18b25fc","0x0","0x27e701ad","0x18b25fc","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b25fc","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18b25fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b9 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18b25fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b9 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:40.499Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:40.499Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:40.500Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:40.500Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:40.500Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x1888c14","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x1888c14","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x17f0cb0","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x1888c14","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ba 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 61 01 4d 84 d4 dc 01 06 0a 00 00 00 a0 61 01 4d 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x1888c14","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ba 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 61 01 4d 84 d4 dc 01 06 0a 00 00 00 a0 61 01 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:40.756Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x7ffd","0x62","0x1888c14","0x27e700f5","0x23eefb0","0x17f0cac","0x17f0c08","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x1888c14","0x27e700f5","0x23eefb0","0x17f0cac","0x17f0c08","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x1888c14","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ba 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 61 01 4d 84 d4 dc 01 06 0a 00 00 00 a0 61 01 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x1888c14","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ba 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 61 01 4d 84 d4 dc 01 06 0a 00 00 00 a0 61 01 4d 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:40.765Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x62","0x1888c14","0x0","0x27e70065","0x1888c14","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x1888c14","0x0","0x27e70065","0x1888c14","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x1888c14","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ba 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 61 01 4d 84 d4 dc 01 06 0a 00 00 00 a0 61 01 4d 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u0cb0\u017f\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x1888c14","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ba 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 61 01 4d 84 d4 dc 01 06 0a 00 00 00 a0 61 01 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u0cb0\u017f\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:40.773Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x62","0x1888c14","0x0","0x27e701ad","0x1888c14","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x1888c14","0x0","0x27e701ad","0x1888c14","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1888c14","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x1888c14","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ba 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 61 01 4d 84 d4 dc 01 06 0a 00 00 00 a0 61 01 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x1888c14","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ba 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 61 01 4d 84 d4 dc 01 06 0a 00 00 00 a0 61 01 4d 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:40.780Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:40.781Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:40.781Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:40.781Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:40.781Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x18b25fc","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x18b25fc","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51e70c8","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bb 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 61 01 4d 84 d4 dc 01 06 0a 00 00 00 a0 61 01 4d 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bb 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 61 01 4d 84 d4 dc 01 06 0a 00 00 00 a0 61 01 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:40.790Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x7ffe","0x62","0x18b25fc","0x27e700f5","0x23eefb0","0x51e70c4","0x51e7020","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x18b25fc","0x27e700f5","0x23eefb0","0x51e70c4","0x51e7020","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bb 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 61 01 4d 84 d4 dc 01 06 0a 00 00 00 a0 61 01 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bb 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 61 01 4d 84 d4 dc 01 06 0a 00 00 00 a0 61 01 4d 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:40.797Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x62","0x18b25fc","0x0","0x27e70065","0x18b25fc","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18b25fc","0x0","0x27e70065","0x18b25fc","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bb 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 61 01 4d 84 d4 dc 01 06 0a 00 00 00 a0 61 01 4d 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u70c8\u051e\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bb 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 61 01 4d 84 d4 dc 01 06 0a 00 00 00 a0 61 01 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u70c8\u051e\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:40.804Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x62","0x18b25fc","0x0","0x27e701ad","0x18b25fc","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18b25fc","0x0","0x27e701ad","0x18b25fc","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b25fc","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bb 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 61 01 4d 84 d4 dc 01 06 0a 00 00 00 a0 61 01 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bb 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 61 01 4d 84 d4 dc 01 06 0a 00 00 00 a0 61 01 4d 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:40.809Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:40.809Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:40.809Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:40.809Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:40.810Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x51b6c5c","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x51b6c5c","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x524aae0","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51b6c5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bb 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x51b6c5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bb 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:40.883Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x1","0x2e","0x51b6c5c","0x27e700f5","0x23eefb0","0x524aadc","0x524aa38","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x51b6c5c","0x27e700f5","0x23eefb0","0x524aadc","0x524aa38","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51b6c5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bb 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51b6c5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bb 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:40.890Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x2e","0x51b6c5c","0x0","0x27e70065","0x51b6c5c","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x51b6c5c","0x0","0x27e70065","0x51b6c5c","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51b6c5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bb 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u2b0c\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\uaae0\u0524\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51b6c5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bb 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u2b0c\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\uaae0\u0524\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:40.898Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x2e","0x51b6c5c","0x0","0x27e701ad","0x51b6c5c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x51b6c5c","0x0","0x27e701ad","0x51b6c5c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51b6c5c","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x51b6c5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bb 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51b6c5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bb 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:40.904Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x1886a04","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x1886a04","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x17f0cb0","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1886a04","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ba 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x1886a04","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ba 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:40.911Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:40.911Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:40.911Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:40.911Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x183df0c","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x183df0c","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x5247ca0","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 aa 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 f7 20 4d 84 d4 dc 01 06 0a 00 00 00 90 f7 20 4d 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 aa 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 f7 20 4d 84 d4 dc 01 06 0a 00 00 00 90 f7 20 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:40.919Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:40.919Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x1","0x2e","0x1886a04","0x24a705d5","0x17eea90","0x17f0cac","0x17f0c08","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x1886a04","0x24a705d5","0x17eea90","0x17f0cac","0x17f0c08","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1886a04","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ba 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1886a04","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ba 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:40.926Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x2e","0x1886a04","0x0","0x24a70545","0x1886a04","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x1886a04","0x0","0x24a70545","0x1886a04","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1886a04","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ba 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u0cb0\u017f\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1886a04","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ba 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u0cb0\u017f\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:40.933Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x2e","0x1886a04","0x0","0x24a7068d","0x1886a04","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x1886a04","0x0","0x24a7068d","0x1886a04","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1886a04","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x1886a04","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ba 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1886a04","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ba 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:40.936Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:40.938Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:40.938Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:40.938Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:40.938Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffd","0x62","0x183df0c","0x255c009d","0x85efc8","0x5247c9c","0x5247bf8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x183df0c","0x255c009d","0x85efc8","0x5247c9c","0x5247bf8","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 aa 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 f7 20 4d 84 d4 dc 01 06 0a 00 00 00 90 f7 20 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 aa 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 f7 20 4d 84 d4 dc 01 06 0a 00 00 00 90 f7 20 4d 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:40.944Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x183df0c","0x0","0x255c000d","0x183df0c","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x183df0c","0x0","0x255c000d","0x183df0c","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 aa 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 f7 20 4d 84 d4 dc 01 06 0a 00 00 00 90 f7 20 4d 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\ucdc4\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u7ca0\u0524\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 aa 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 f7 20 4d 84 d4 dc 01 06 0a 00 00 00 90 f7 20 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\ucdc4\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u7ca0\u0524\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:40.950Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x183df0c","0x0","0x255c0055","0x183df0c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x183df0c","0x0","0x255c0055","0x183df0c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x183df0c","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 aa 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 f7 20 4d 84 d4 dc 01 06 0a 00 00 00 90 f7 20 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 aa 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 f7 20 4d 84 d4 dc 01 06 0a 00 00 00 90 f7 20 4d 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:40.956Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:40.957Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:40.957Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:40.957Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:40.957Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x191b494","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x191b494","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x5175348","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x191b494","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 aa 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x191b494","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 aa 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:40.992Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x2","0x2e","0x191b494","0x255c009d","0x85efc8","0x5175344","0x51752a0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x191b494","0x255c009d","0x85efc8","0x5175344","0x51752a0","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x191b494","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 aa 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x191b494","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 aa 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:40.999Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x191b494","0x0","0x255c000d","0x191b494","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x191b494","0x0","0x255c000d","0x191b494","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x191b494","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 aa 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u5348\u0517\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x191b494","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 aa 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u5348\u0517\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:41.004Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x191b494","0x0","0x255c0055","0x191b494","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x191b494","0x0","0x255c0055","0x191b494","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x191b494","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x191b494","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 aa 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x191b494","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 aa 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:41.010Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:41.010Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:41.010Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:41.010Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:41.010Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x1905274","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x1905274","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x187a9f8","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x1905274","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bc 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 ac 4d 4d 84 d4 dc 01 06 0a 00 00 00 e0 ac 4d 4d 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x1905274","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bc 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 ac 4d 4d 84 d4 dc 01 06 0a 00 00 00 e0 ac 4d 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:41.260Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffd","0x62","0x1905274","0x255c009d","0x85efc8","0x187a9f4","0x187a950","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x1905274","0x255c009d","0x85efc8","0x187a9f4","0x187a950","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x1905274","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bc 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 ac 4d 4d 84 d4 dc 01 06 0a 00 00 00 e0 ac 4d 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x1905274","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bc 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 ac 4d 4d 84 d4 dc 01 06 0a 00 00 00 e0 ac 4d 4d 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:41.267Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x1905274","0x0","0x255c000d","0x1905274","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x1905274","0x0","0x255c000d","0x1905274","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x1905274","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bc 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 ac 4d 4d 84 d4 dc 01 06 0a 00 00 00 e0 ac 4d 4d 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ua9f8\u0187\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x1905274","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bc 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 ac 4d 4d 84 d4 dc 01 06 0a 00 00 00 e0 ac 4d 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ua9f8\u0187\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:41.274Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x1905274","0x0","0x255c0055","0x1905274","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x1905274","0x0","0x255c0055","0x1905274","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1905274","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x1905274","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bc 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 ac 4d 4d 84 d4 dc 01 06 0a 00 00 00 e0 ac 4d 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x1905274","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bc 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 ac 4d 4d 84 d4 dc 01 06 0a 00 00 00 e0 ac 4d 4d 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:41.279Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:41.280Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:41.280Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:41.280Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:41.280Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x183df0c","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x183df0c","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x5247ca0","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bd 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 ac 4d 4d 84 d4 dc 01 06 0a 00 00 00 e0 ac 4d 4d 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bd 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 ac 4d 4d 84 d4 dc 01 06 0a 00 00 00 e0 ac 4d 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:41.289Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffe","0x62","0x183df0c","0x255c009d","0x85efc8","0x5247c9c","0x5247bf8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x183df0c","0x255c009d","0x85efc8","0x5247c9c","0x5247bf8","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bd 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 ac 4d 4d 84 d4 dc 01 06 0a 00 00 00 e0 ac 4d 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bd 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 ac 4d 4d 84 d4 dc 01 06 0a 00 00 00 e0 ac 4d 4d 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:41.295Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x183df0c","0x0","0x255c000d","0x183df0c","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x183df0c","0x0","0x255c000d","0x183df0c","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bd 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 ac 4d 4d 84 d4 dc 01 06 0a 00 00 00 e0 ac 4d 4d 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u7ca0\u0524\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bd 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 ac 4d 4d 84 d4 dc 01 06 0a 00 00 00 e0 ac 4d 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u7ca0\u0524\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:41.301Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x183df0c","0x0","0x255c0055","0x183df0c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x183df0c","0x0","0x255c0055","0x183df0c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x183df0c","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bd 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 ac 4d 4d 84 d4 dc 01 06 0a 00 00 00 e0 ac 4d 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bd 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 ac 4d 4d 84 d4 dc 01 06 0a 00 00 00 e0 ac 4d 4d 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:41.307Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:41.307Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:41.307Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:41.307Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:41.307Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x190858c","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x190858c","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x5247ca0","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x190858c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bd 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x190858c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bd 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:41.318Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x1","0x2e","0x190858c","0x255c009d","0x85efc8","0x5247c9c","0x5247bf8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x190858c","0x255c009d","0x85efc8","0x5247c9c","0x5247bf8","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x190858c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bd 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x190858c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bd 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:41.324Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x190858c","0x0","0x255c000d","0x190858c","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x190858c","0x0","0x255c000d","0x190858c","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x190858c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bd 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u2b0c\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u7ca0\u0524\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x190858c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bd 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u2b0c\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u7ca0\u0524\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:41.331Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x190858c","0x0","0x255c0055","0x190858c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x190858c","0x0","0x255c0055","0x190858c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x190858c","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x190858c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bd 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x190858c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bd 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:41.335Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x182abec","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x182abec","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x51ed948","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x182abec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bc 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x182abec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bc 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:41.342Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:41.343Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:41.343Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:41.343Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:41.343Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x1","0x2e","0x182abec","0x24a705d5","0x17eea90","0x51ed944","0x51ed8a0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x182abec","0x24a705d5","0x17eea90","0x51ed944","0x51ed8a0","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x182abec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bc 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x182abec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bc 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:41.348Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x2e","0x182abec","0x0","0x24a70545","0x182abec","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x182abec","0x0","0x24a70545","0x182abec","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x182abec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bc 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x182abec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bc 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:41.356Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x2e","0x182abec","0x0","0x24a7068d","0x182abec","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x182abec","0x0","0x24a7068d","0x182abec","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x182abec","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x182abec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bc 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x182abec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bc 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:41.361Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:41.361Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:41.361Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:41.361Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:41.361Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18212a4","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18212a4","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x51ed948","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18212a4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ab 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 b0 f4 6c 4d 84 d4 dc 01 06 0a 00 00 00 b0 f4 6c 4d 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18212a4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ab 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 b0 f4 6c 4d 84 d4 dc 01 06 0a 00 00 00 b0 f4 6c 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:41.411Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x7ffd","0x62","0x18212a4","0x24a705d5","0x17eea90","0x51ed944","0x51ed8a0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18212a4","0x24a705d5","0x17eea90","0x51ed944","0x51ed8a0","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18212a4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ab 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 b0 f4 6c 4d 84 d4 dc 01 06 0a 00 00 00 b0 f4 6c 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18212a4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ab 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 b0 f4 6c 4d 84 d4 dc 01 06 0a 00 00 00 b0 f4 6c 4d 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:41.417Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x62","0x18212a4","0x0","0x24a70545","0x18212a4","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18212a4","0x0","0x24a70545","0x18212a4","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18212a4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ab 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 b0 f4 6c 4d 84 d4 dc 01 06 0a 00 00 00 b0 f4 6c 4d 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\ucdc4\u0126\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18212a4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ab 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 b0 f4 6c 4d 84 d4 dc 01 06 0a 00 00 00 b0 f4 6c 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\ucdc4\u0126\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:41.425Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x62","0x18212a4","0x0","0x24a7068d","0x18212a4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18212a4","0x0","0x24a7068d","0x18212a4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18212a4","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18212a4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ab 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 b0 f4 6c 4d 84 d4 dc 01 06 0a 00 00 00 b0 f4 6c 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18212a4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ab 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 b0 f4 6c 4d 84 d4 dc 01 06 0a 00 00 00 b0 f4 6c 4d 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:41.430Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:41.431Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:41.431Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:41.431Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:41.431Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x18356cc","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x18356cc","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x51e9f08","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18356cc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ab 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18356cc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ab 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:41.537Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x2","0x2e","0x18356cc","0x24a705d5","0x17eea90","0x51e9f04","0x51e9e60","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x18356cc","0x24a705d5","0x17eea90","0x51e9f04","0x51e9e60","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18356cc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ab 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18356cc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ab 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:41.543Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x2e","0x18356cc","0x0","0x24a70545","0x18356cc","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18356cc","0x0","0x24a70545","0x18356cc","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18356cc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ab 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u9f08\u051e\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18356cc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ab 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u9f08\u051e\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:41.549Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x2e","0x18356cc","0x0","0x24a7068d","0x18356cc","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18356cc","0x0","0x24a7068d","0x18356cc","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18356cc","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18356cc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ab 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18356cc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ab 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:41.554Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:41.554Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:41.554Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:41.554Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:41.554Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x523025c","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x523025c","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x17f0cb0","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x523025c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 be 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 1f 9a 4d 84 d4 dc 01 06 0a 00 00 00 30 1f 9a 4d 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x523025c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 be 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 1f 9a 4d 84 d4 dc 01 06 0a 00 00 00 30 1f 9a 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:41.756Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x7ffd","0x62","0x523025c","0x24a705d5","0x17eea90","0x17f0cac","0x17f0c08","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x523025c","0x24a705d5","0x17eea90","0x17f0cac","0x17f0c08","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x523025c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 be 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 1f 9a 4d 84 d4 dc 01 06 0a 00 00 00 30 1f 9a 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x523025c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 be 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 1f 9a 4d 84 d4 dc 01 06 0a 00 00 00 30 1f 9a 4d 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:41.765Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x62","0x523025c","0x0","0x24a70545","0x523025c","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x523025c","0x0","0x24a70545","0x523025c","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x523025c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 be 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 1f 9a 4d 84 d4 dc 01 06 0a 00 00 00 30 1f 9a 4d 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u9e84\u0126\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u0cb0\u017f\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x523025c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 be 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 1f 9a 4d 84 d4 dc 01 06 0a 00 00 00 30 1f 9a 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u9e84\u0126\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u0cb0\u017f\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:41.773Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x62","0x523025c","0x0","0x24a7068d","0x523025c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x523025c","0x0","0x24a7068d","0x523025c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x523025c","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x523025c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 be 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 1f 9a 4d 84 d4 dc 01 06 0a 00 00 00 30 1f 9a 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x523025c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 be 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 1f 9a 4d 84 d4 dc 01 06 0a 00 00 00 30 1f 9a 4d 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:41.778Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:41.779Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:41.779Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:41.779Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:41.779Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x51f312c","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x51f312c","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x51e9f08","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51f312c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bf 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 1f 9a 4d 84 d4 dc 01 06 0a 00 00 00 30 1f 9a 4d 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51f312c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bf 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 1f 9a 4d 84 d4 dc 01 06 0a 00 00 00 30 1f 9a 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:41.787Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x7ffe","0x62","0x51f312c","0x24a705d5","0x17eea90","0x51e9f04","0x51e9e60","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x51f312c","0x24a705d5","0x17eea90","0x51e9f04","0x51e9e60","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51f312c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bf 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 1f 9a 4d 84 d4 dc 01 06 0a 00 00 00 30 1f 9a 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51f312c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bf 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 1f 9a 4d 84 d4 dc 01 06 0a 00 00 00 30 1f 9a 4d 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:41.795Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x62","0x51f312c","0x0","0x24a70545","0x51f312c","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51f312c","0x0","0x24a70545","0x51f312c","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51f312c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bf 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 1f 9a 4d 84 d4 dc 01 06 0a 00 00 00 30 1f 9a 4d 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u9e84\u0126\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u9f08\u051e\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51f312c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bf 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 1f 9a 4d 84 d4 dc 01 06 0a 00 00 00 30 1f 9a 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u9e84\u0126\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u9f08\u051e\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:41.802Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x62","0x51f312c","0x0","0x24a7068d","0x51f312c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51f312c","0x0","0x24a7068d","0x51f312c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51f312c","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51f312c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bf 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 1f 9a 4d 84 d4 dc 01 06 0a 00 00 00 30 1f 9a 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51f312c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bf 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 1f 9a 4d 84 d4 dc 01 06 0a 00 00 00 30 1f 9a 4d 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:41.807Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:41.807Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:41.807Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:41.807Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:41.808Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x18212a4","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x18212a4","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x51ed948","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18212a4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bf 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18212a4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bf 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:41.867Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x1","0x2e","0x18212a4","0x24a705d5","0x17eea90","0x51ed944","0x51ed8a0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18212a4","0x24a705d5","0x17eea90","0x51ed944","0x51ed8a0","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18212a4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bf 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18212a4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bf 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:41.872Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x2e","0x18212a4","0x0","0x24a70545","0x18212a4","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18212a4","0x0","0x24a70545","0x18212a4","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18212a4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bf 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u2b0c\u021f\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18212a4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bf 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u2b0c\u021f\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:41.878Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x2e","0x18212a4","0x0","0x24a7068d","0x18212a4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18212a4","0x0","0x24a7068d","0x18212a4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18212a4","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18212a4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bf 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18212a4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bf 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:41.883Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x190858c","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x190858c","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x5247ca0","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x190858c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 be 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x190858c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 be 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:41.890Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:41.891Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:41.891Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:41.891Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:41.892Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x1","0x2e","0x190858c","0x255c009d","0x85efc8","0x5247c9c","0x5247bf8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x190858c","0x255c009d","0x85efc8","0x5247c9c","0x5247bf8","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x190858c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 be 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x190858c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 be 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:41.897Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x190858c","0x0","0x255c000d","0x190858c","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x190858c","0x0","0x255c000d","0x190858c","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x190858c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 be 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u7ca0\u0524\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x190858c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 be 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u7ca0\u0524\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:41.904Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x190858c","0x0","0x255c0055","0x190858c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x190858c","0x0","0x255c0055","0x190858c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x190858c","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x190858c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 be 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x190858c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 be 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:41.908Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:41.909Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:41.909Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:41.909Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:41.909Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x182abec","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x182abec","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x51ed948","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x182abec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ac 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 18 b9 4d 84 d4 dc 01 06 0a 00 00 00 e0 18 b9 4d 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x182abec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ac 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 18 b9 4d 84 d4 dc 01 06 0a 00 00 00 e0 18 b9 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:41.917Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x7ffd","0x62","0x182abec","0x24a705d5","0x17eea90","0x51ed944","0x51ed8a0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x182abec","0x24a705d5","0x17eea90","0x51ed944","0x51ed8a0","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x182abec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ac 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 18 b9 4d 84 d4 dc 01 06 0a 00 00 00 e0 18 b9 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x182abec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ac 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 18 b9 4d 84 d4 dc 01 06 0a 00 00 00 e0 18 b9 4d 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:41.923Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x62","0x182abec","0x0","0x24a70545","0x182abec","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x182abec","0x0","0x24a70545","0x182abec","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x182abec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ac 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 18 b9 4d 84 d4 dc 01 06 0a 00 00 00 e0 18 b9 4d 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\ucdc4\u0126\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x182abec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ac 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 18 b9 4d 84 d4 dc 01 06 0a 00 00 00 e0 18 b9 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\ucdc4\u0126\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:41.929Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x62","0x182abec","0x0","0x24a7068d","0x182abec","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x182abec","0x0","0x24a7068d","0x182abec","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x182abec","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x182abec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ac 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 18 b9 4d 84 d4 dc 01 06 0a 00 00 00 e0 18 b9 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x182abec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ac 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 18 b9 4d 84 d4 dc 01 06 0a 00 00 00 e0 18 b9 4d 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:41.935Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:41.935Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:41.935Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:41.935Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:41.936Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x1914e64","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x1914e64","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x5175910","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1914e64","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ac 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x1914e64","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ac 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:41.974Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x2","0x2e","0x1914e64","0x24a705d5","0x17eea90","0x517590c","0x5175868","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x1914e64","0x24a705d5","0x17eea90","0x517590c","0x5175868","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1914e64","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ac 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1914e64","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ac 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:41.979Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x2e","0x1914e64","0x0","0x24a70545","0x1914e64","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x1914e64","0x0","0x24a70545","0x1914e64","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1914e64","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ac 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u5910\u0517\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1914e64","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ac 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u5910\u0517\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:41.987Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x2e","0x1914e64","0x0","0x24a7068d","0x1914e64","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x1914e64","0x0","0x24a7068d","0x1914e64","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1914e64","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x1914e64","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ac 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1914e64","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ac 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:41.992Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:41.993Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:41.993Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:41.993Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:41.993Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x1901f5c","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x1901f5c","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x1923d60","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x1901f5c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c0 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 60 43 e6 4d 84 d4 dc 01 06 0a 00 00 00 60 43 e6 4d 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x1901f5c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c0 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 60 43 e6 4d 84 d4 dc 01 06 0a 00 00 00 60 43 e6 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:42.255Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x7ffd","0x62","0x1901f5c","0x24a705d5","0x17eea90","0x1923d5c","0x1923cb8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x1901f5c","0x24a705d5","0x17eea90","0x1923d5c","0x1923cb8","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x1901f5c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c0 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 60 43 e6 4d 84 d4 dc 01 06 0a 00 00 00 60 43 e6 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x1901f5c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c0 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 60 43 e6 4d 84 d4 dc 01 06 0a 00 00 00 60 43 e6 4d 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:42.261Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x62","0x1901f5c","0x0","0x24a70545","0x1901f5c","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x1901f5c","0x0","0x24a70545","0x1901f5c","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x1901f5c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c0 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 60 43 e6 4d 84 d4 dc 01 06 0a 00 00 00 60 43 e6 4d 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u9e84\u0126\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u3d60�\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x1901f5c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c0 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 60 43 e6 4d 84 d4 dc 01 06 0a 00 00 00 60 43 e6 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u9e84\u0126\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u3d60�\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:42.268Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x62","0x1901f5c","0x0","0x24a7068d","0x1901f5c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x1901f5c","0x0","0x24a7068d","0x1901f5c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1901f5c","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x1901f5c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c0 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 60 43 e6 4d 84 d4 dc 01 06 0a 00 00 00 60 43 e6 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x1901f5c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c0 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 60 43 e6 4d 84 d4 dc 01 06 0a 00 00 00 60 43 e6 4d 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:42.274Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:42.274Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:42.274Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:42.275Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:42.275Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x18212a4","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x18212a4","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x51ed948","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18212a4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c1 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 60 43 e6 4d 84 d4 dc 01 06 0a 00 00 00 60 43 e6 4d 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18212a4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c1 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 60 43 e6 4d 84 d4 dc 01 06 0a 00 00 00 60 43 e6 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:42.282Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x7ffe","0x62","0x18212a4","0x24a705d5","0x17eea90","0x51ed944","0x51ed8a0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x18212a4","0x24a705d5","0x17eea90","0x51ed944","0x51ed8a0","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18212a4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c1 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 60 43 e6 4d 84 d4 dc 01 06 0a 00 00 00 60 43 e6 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18212a4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c1 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 60 43 e6 4d 84 d4 dc 01 06 0a 00 00 00 60 43 e6 4d 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:42.288Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x62","0x18212a4","0x0","0x24a70545","0x18212a4","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18212a4","0x0","0x24a70545","0x18212a4","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18212a4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c1 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 60 43 e6 4d 84 d4 dc 01 06 0a 00 00 00 60 43 e6 4d 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u9e84\u0126\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18212a4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c1 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 60 43 e6 4d 84 d4 dc 01 06 0a 00 00 00 60 43 e6 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u9e84\u0126\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:42.294Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x62","0x18212a4","0x0","0x24a7068d","0x18212a4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18212a4","0x0","0x24a7068d","0x18212a4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18212a4","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18212a4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c1 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 60 43 e6 4d 84 d4 dc 01 06 0a 00 00 00 60 43 e6 4d 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18212a4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c1 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 60 43 e6 4d 84 d4 dc 01 06 0a 00 00 00 60 43 e6 4d 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:42.299Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x183ce04","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x183ce04","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51ee4d8","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x183ce04","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c0 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x183ce04","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c0 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:42.306Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:42.307Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:42.307Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:42.307Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:42.307Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x1","0x2e","0x183ce04","0x255c009d","0x85efc8","0x51ee4d4","0x51ee430","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x183ce04","0x255c009d","0x85efc8","0x51ee4d4","0x51ee430","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x183ce04","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c0 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x183ce04","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c0 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:42.312Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x183ce04","0x0","0x255c000d","0x183ce04","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x183ce04","0x0","0x255c000d","0x183ce04","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x183ce04","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c0 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ue4d8\u051e\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x183ce04","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c0 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ue4d8\u051e\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:42.318Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x183ce04","0x0","0x255c0055","0x183ce04","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x183ce04","0x0","0x255c0055","0x183ce04","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x183ce04","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x183ce04","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c0 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x183ce04","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c0 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:42.324Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:42.324Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:42.325Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:42.325Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:42.325Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x522f154","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x522f154","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51ee4d8","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x522f154","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ad 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 64 05 4e 84 d4 dc 01 06 0a 00 00 00 20 64 05 4e 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x522f154","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ad 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 64 05 4e 84 d4 dc 01 06 0a 00 00 00 20 64 05 4e 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:42.410Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffd","0x62","0x522f154","0x255c009d","0x85efc8","0x51ee4d4","0x51ee430","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x522f154","0x255c009d","0x85efc8","0x51ee4d4","0x51ee430","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x522f154","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ad 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 64 05 4e 84 d4 dc 01 06 0a 00 00 00 20 64 05 4e 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x522f154","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ad 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 64 05 4e 84 d4 dc 01 06 0a 00 00 00 20 64 05 4e 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:42.420Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x522f154","0x0","0x255c000d","0x522f154","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x522f154","0x0","0x255c000d","0x522f154","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x522f154","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ad 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 64 05 4e 84 d4 dc 01 06 0a 00 00 00 20 64 05 4e 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\ucdc4\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ue4d8\u051e\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x522f154","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ad 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 64 05 4e 84 d4 dc 01 06 0a 00 00 00 20 64 05 4e 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\ucdc4\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ue4d8\u051e\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:42.431Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x522f154","0x0","0x255c0055","0x522f154","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x522f154","0x0","0x255c0055","0x522f154","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x522f154","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x522f154","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ad 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 64 05 4e 84 d4 dc 01 06 0a 00 00 00 20 64 05 4e 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x522f154","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ad 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 64 05 4e 84 d4 dc 01 06 0a 00 00 00 20 64 05 4e 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:42.440Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:42.441Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:42.441Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:42.441Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:42.441Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x1905274","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x1905274","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x187a9f8","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1905274","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c1 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x1905274","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c1 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:42.449Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x1","0x2e","0x1905274","0x24a705d5","0x17eea90","0x187a9f4","0x187a950","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x1905274","0x24a705d5","0x17eea90","0x187a9f4","0x187a950","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1905274","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c1 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1905274","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c1 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:42.457Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x2e","0x1905274","0x0","0x24a70545","0x1905274","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x1905274","0x0","0x24a70545","0x1905274","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1905274","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c1 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u2b0c\u021f\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\ua9f8\u0187\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1905274","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c1 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u2b0c\u021f\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\ua9f8\u0187\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:42.464Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x2e","0x1905274","0x0","0x24a7068d","0x1905274","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x1905274","0x0","0x24a7068d","0x1905274","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1905274","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x1905274","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c1 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1905274","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c1 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:42.469Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:42.469Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:42.470Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:42.470Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:42.470Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x191817c","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x191817c","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x52476d8","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x191817c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ad 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x191817c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ad 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:42.527Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x2","0x2e","0x191817c","0x24a705d5","0x17eea90","0x52476d4","0x5247630","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x191817c","0x24a705d5","0x17eea90","0x52476d4","0x5247630","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x191817c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ad 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x191817c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ad 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:42.541Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x2e","0x191817c","0x0","0x24a70545","0x191817c","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x191817c","0x0","0x24a70545","0x191817c","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x191817c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ad 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u76d8\u0524\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x191817c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ad 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u76d8\u0524\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:42.556Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x2e","0x191817c","0x0","0x24a7068d","0x191817c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x191817c","0x0","0x24a7068d","0x191817c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x191817c","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x191817c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ad 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x191817c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ad 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:42.569Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:42.570Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:42.570Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:42.570Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:42.570Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x182abec","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x182abec","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x51ed948","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x182abec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 b0 b5 32 4e 84 d4 dc 01 06 0a 00 00 00 b0 b5 32 4e 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x182abec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 b0 b5 32 4e 84 d4 dc 01 06 0a 00 00 00 b0 b5 32 4e 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:42.762Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x7ffd","0x62","0x182abec","0x24a705d5","0x17eea90","0x51ed944","0x51ed8a0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x182abec","0x24a705d5","0x17eea90","0x51ed944","0x51ed8a0","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x182abec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 b0 b5 32 4e 84 d4 dc 01 06 0a 00 00 00 b0 b5 32 4e 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x182abec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 b0 b5 32 4e 84 d4 dc 01 06 0a 00 00 00 b0 b5 32 4e 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:42.770Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x62","0x182abec","0x0","0x24a70545","0x182abec","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x182abec","0x0","0x24a70545","0x182abec","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x182abec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 b0 b5 32 4e 84 d4 dc 01 06 0a 00 00 00 b0 b5 32 4e 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u9e84\u0126\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x182abec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 b0 b5 32 4e 84 d4 dc 01 06 0a 00 00 00 b0 b5 32 4e 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u9e84\u0126\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:42.780Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x62","0x182abec","0x0","0x24a7068d","0x182abec","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x182abec","0x0","0x24a7068d","0x182abec","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x182abec","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x182abec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 b0 b5 32 4e 84 d4 dc 01 06 0a 00 00 00 b0 b5 32 4e 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x182abec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 b0 b5 32 4e 84 d4 dc 01 06 0a 00 00 00 b0 b5 32 4e 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:42.787Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:42.787Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:42.787Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:42.788Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:42.788Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x51f975c","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x51f975c","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x1922c08","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51f975c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c3 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 b0 b5 32 4e 84 d4 dc 01 06 0a 00 00 00 b0 b5 32 4e 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51f975c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c3 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 b0 b5 32 4e 84 d4 dc 01 06 0a 00 00 00 b0 b5 32 4e 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:42.795Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x7ffe","0x62","0x51f975c","0x24a705d5","0x17eea90","0x1922c04","0x1922b60","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x51f975c","0x24a705d5","0x17eea90","0x1922c04","0x1922b60","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51f975c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c3 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 b0 b5 32 4e 84 d4 dc 01 06 0a 00 00 00 b0 b5 32 4e 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51f975c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c3 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 b0 b5 32 4e 84 d4 dc 01 06 0a 00 00 00 b0 b5 32 4e 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:42.801Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x62","0x51f975c","0x0","0x24a70545","0x51f975c","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51f975c","0x0","0x24a70545","0x51f975c","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51f975c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c3 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 b0 b5 32 4e 84 d4 dc 01 06 0a 00 00 00 b0 b5 32 4e 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u9e84\u0126\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u2c08�\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51f975c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c3 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 b0 b5 32 4e 84 d4 dc 01 06 0a 00 00 00 b0 b5 32 4e 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u9e84\u0126\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u2c08�\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:42.808Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x62","0x51f975c","0x0","0x24a7068d","0x51f975c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51f975c","0x0","0x24a7068d","0x51f975c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51f975c","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51f975c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c3 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 b0 b5 32 4e 84 d4 dc 01 06 0a 00 00 00 b0 b5 32 4e 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51f975c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c3 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 b0 b5 32 4e 84 d4 dc 01 06 0a 00 00 00 b0 b5 32 4e 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:42.814Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:42.814Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:42.814Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:42.814Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:42.814Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x1829ae4","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x1829ae4","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x1922c08","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1829ae4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c3 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x1829ae4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c3 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:42.853Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x1","0x2e","0x1829ae4","0x24a705d5","0x17eea90","0x1922c04","0x1922b60","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x1829ae4","0x24a705d5","0x17eea90","0x1922c04","0x1922b60","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1829ae4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c3 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1829ae4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c3 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:42.859Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x2e","0x1829ae4","0x0","0x24a70545","0x1829ae4","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x1829ae4","0x0","0x24a70545","0x1829ae4","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1829ae4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c3 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u2b0c\u021f\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u2c08�\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1829ae4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c3 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u2b0c\u021f\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u2c08�\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:42.865Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x2e","0x1829ae4","0x0","0x24a7068d","0x1829ae4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x1829ae4","0x0","0x24a7068d","0x1829ae4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1829ae4","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x1829ae4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c3 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1829ae4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c3 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:42.870Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x18323b4","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x18323b4","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51741f0","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18323b4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c2 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18323b4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c2 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:42.878Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:42.878Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:42.878Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:42.879Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:42.879Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x1","0x2e","0x18323b4","0x255c009d","0x85efc8","0x51741ec","0x5174148","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18323b4","0x255c009d","0x85efc8","0x51741ec","0x5174148","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18323b4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c2 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18323b4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c2 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:42.884Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x18323b4","0x0","0x255c000d","0x18323b4","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18323b4","0x0","0x255c000d","0x18323b4","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18323b4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c2 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u41f0\u0517\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18323b4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c2 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u41f0\u0517\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:42.891Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x18323b4","0x0","0x255c0055","0x18323b4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18323b4","0x0","0x255c0055","0x18323b4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18323b4","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18323b4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c2 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18323b4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c2 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:42.895Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:42.896Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:42.896Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:42.896Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:42.896Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18278d4","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18278d4","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51741f0","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18278d4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ae 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 88 51 4e 84 d4 dc 01 06 0a 00 00 00 50 88 51 4e 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18278d4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ae 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 88 51 4e 84 d4 dc 01 06 0a 00 00 00 50 88 51 4e 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:42.908Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffd","0x62","0x18278d4","0x255c009d","0x85efc8","0x51741ec","0x5174148","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18278d4","0x255c009d","0x85efc8","0x51741ec","0x5174148","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18278d4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ae 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 88 51 4e 84 d4 dc 01 06 0a 00 00 00 50 88 51 4e 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18278d4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ae 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 88 51 4e 84 d4 dc 01 06 0a 00 00 00 50 88 51 4e 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:42.914Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x18278d4","0x0","0x255c000d","0x18278d4","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18278d4","0x0","0x255c000d","0x18278d4","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18278d4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ae 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 88 51 4e 84 d4 dc 01 06 0a 00 00 00 50 88 51 4e 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\ucdc4\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u41f0\u0517\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18278d4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ae 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 88 51 4e 84 d4 dc 01 06 0a 00 00 00 50 88 51 4e 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\ucdc4\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u41f0\u0517\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:42.921Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x18278d4","0x0","0x255c0055","0x18278d4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18278d4","0x0","0x255c0055","0x18278d4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18278d4","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18278d4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ae 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 88 51 4e 84 d4 dc 01 06 0a 00 00 00 50 88 51 4e 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18278d4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ae 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 88 51 4e 84 d4 dc 01 06 0a 00 00 00 50 88 51 4e 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:42.926Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:42.927Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:42.927Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:42.927Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:42.927Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x18825e4","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x18825e4","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x17f0cb0","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18825e4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ae 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18825e4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ae 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:42.963Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x2","0x2e","0x18825e4","0x255c009d","0x85efc8","0x17f0cac","0x17f0c08","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x18825e4","0x255c009d","0x85efc8","0x17f0cac","0x17f0c08","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18825e4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ae 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18825e4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ae 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:42.969Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x18825e4","0x0","0x255c000d","0x18825e4","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18825e4","0x0","0x255c000d","0x18825e4","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18825e4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ae 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u0cb0\u017f\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18825e4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ae 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u0cb0\u017f\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:42.975Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x18825e4","0x0","0x255c0055","0x18825e4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18825e4","0x0","0x255c0055","0x18825e4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18825e4","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18825e4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ae 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18825e4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ae 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:42.981Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:42.981Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:42.981Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:42.981Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:42.982Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x18323b4","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x18323b4","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51741f0","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18323b4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c4 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 f0 00 7f 4e 84 d4 dc 01 06 0a 00 00 00 f0 00 7f 4e 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18323b4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c4 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 f0 00 7f 4e 84 d4 dc 01 06 0a 00 00 00 f0 00 7f 4e 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:43.263Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffd","0x62","0x18323b4","0x255c009d","0x85efc8","0x51741ec","0x5174148","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18323b4","0x255c009d","0x85efc8","0x51741ec","0x5174148","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18323b4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c4 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 f0 00 7f 4e 84 d4 dc 01 06 0a 00 00 00 f0 00 7f 4e 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18323b4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c4 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 f0 00 7f 4e 84 d4 dc 01 06 0a 00 00 00 f0 00 7f 4e 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:43.269Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x18323b4","0x0","0x255c000d","0x18323b4","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18323b4","0x0","0x255c000d","0x18323b4","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18323b4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c4 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 f0 00 7f 4e 84 d4 dc 01 06 0a 00 00 00 f0 00 7f 4e 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u41f0\u0517\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18323b4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c4 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 f0 00 7f 4e 84 d4 dc 01 06 0a 00 00 00 f0 00 7f 4e 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u41f0\u0517\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:43.277Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x18323b4","0x0","0x255c0055","0x18323b4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18323b4","0x0","0x255c0055","0x18323b4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18323b4","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18323b4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c4 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 f0 00 7f 4e 84 d4 dc 01 06 0a 00 00 00 f0 00 7f 4e 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18323b4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c4 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 f0 00 7f 4e 84 d4 dc 01 06 0a 00 00 00 f0 00 7f 4e 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:43.282Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:43.283Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:43.283Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:43.283Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:43.283Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x1829ae4","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x1829ae4","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x1922c08","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x1829ae4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c5 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 f0 00 7f 4e 84 d4 dc 01 06 0a 00 00 00 f0 00 7f 4e 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x1829ae4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c5 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 f0 00 7f 4e 84 d4 dc 01 06 0a 00 00 00 f0 00 7f 4e 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:43.291Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffe","0x62","0x1829ae4","0x255c009d","0x85efc8","0x1922c04","0x1922b60","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x1829ae4","0x255c009d","0x85efc8","0x1922c04","0x1922b60","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x1829ae4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c5 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 f0 00 7f 4e 84 d4 dc 01 06 0a 00 00 00 f0 00 7f 4e 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x1829ae4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c5 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 f0 00 7f 4e 84 d4 dc 01 06 0a 00 00 00 f0 00 7f 4e 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:43.297Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x1829ae4","0x0","0x255c000d","0x1829ae4","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x1829ae4","0x0","0x255c000d","0x1829ae4","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x1829ae4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c5 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 f0 00 7f 4e 84 d4 dc 01 06 0a 00 00 00 f0 00 7f 4e 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u2c08�\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x1829ae4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c5 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 f0 00 7f 4e 84 d4 dc 01 06 0a 00 00 00 f0 00 7f 4e 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u2c08�\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:43.303Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x1829ae4","0x0","0x255c0055","0x1829ae4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x1829ae4","0x0","0x255c0055","0x1829ae4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1829ae4","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x1829ae4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c5 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 f0 00 7f 4e 84 d4 dc 01 06 0a 00 00 00 f0 00 7f 4e 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x1829ae4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c5 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 f0 00 7f 4e 84 d4 dc 01 06 0a 00 00 00 f0 00 7f 4e 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:43.308Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:43.309Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:43.309Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:43.309Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:43.309Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x18356cc","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x18356cc","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51e9f08","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18356cc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c4 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18356cc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c4 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:43.402Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x1","0x2e","0x18356cc","0x255c009d","0x85efc8","0x51e9f04","0x51e9e60","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18356cc","0x255c009d","0x85efc8","0x51e9f04","0x51e9e60","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18356cc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c4 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18356cc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c4 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:43.410Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x18356cc","0x0","0x255c000d","0x18356cc","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18356cc","0x0","0x255c000d","0x18356cc","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18356cc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c4 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u9f08\u051e\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18356cc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c4 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u9f08\u051e\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:43.419Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x18356cc","0x0","0x255c0055","0x18356cc","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18356cc","0x0","0x255c0055","0x18356cc","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18356cc","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18356cc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c4 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18356cc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c4 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:43.426Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x182019c","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x182019c","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51e70c8","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x182019c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 af 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 fa 9d 4e 84 d4 dc 01 06 0a 00 00 00 a0 fa 9d 4e 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x182019c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 af 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 fa 9d 4e 84 d4 dc 01 06 0a 00 00 00 a0 fa 9d 4e 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:43.434Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x18234b4","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x18234b4","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x51e9940","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18234b4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c5 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18234b4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c5 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:43.441Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:43.441Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:43.442Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:43.442Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:43.442Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x7ffd","0x62","0x182019c","0x27e700f5","0x23eefb0","0x51e70c4","0x51e7020","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x182019c","0x27e700f5","0x23eefb0","0x51e70c4","0x51e7020","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x182019c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 af 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 fa 9d 4e 84 d4 dc 01 06 0a 00 00 00 a0 fa 9d 4e 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x182019c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 af 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 fa 9d 4e 84 d4 dc 01 06 0a 00 00 00 a0 fa 9d 4e 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:43.447Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x62","0x182019c","0x0","0x27e70065","0x182019c","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x182019c","0x0","0x27e70065","0x182019c","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x182019c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 af 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 fa 9d 4e 84 d4 dc 01 06 0a 00 00 00 a0 fa 9d 4e 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u70c8\u051e\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x182019c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 af 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 fa 9d 4e 84 d4 dc 01 06 0a 00 00 00 a0 fa 9d 4e 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u70c8\u051e\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:43.457Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x62","0x182019c","0x0","0x27e701ad","0x182019c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x182019c","0x0","0x27e701ad","0x182019c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x182019c","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x182019c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 af 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 fa 9d 4e 84 d4 dc 01 06 0a 00 00 00 a0 fa 9d 4e 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x182019c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 af 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 fa 9d 4e 84 d4 dc 01 06 0a 00 00 00 a0 fa 9d 4e 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:43.463Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:43.463Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:43.463Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:43.464Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:43.464Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x1","0x2e","0x18234b4","0x24a705d5","0x17eea90","0x51e993c","0x51e9898","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18234b4","0x24a705d5","0x17eea90","0x51e993c","0x51e9898","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18234b4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c5 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18234b4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c5 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:43.469Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x2e","0x18234b4","0x0","0x24a70545","0x18234b4","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18234b4","0x0","0x24a70545","0x18234b4","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18234b4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c5 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u2b0c\u021f\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u9940\u051e\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18234b4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c5 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u2b0c\u021f\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u9940\u051e\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:43.476Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x2e","0x18234b4","0x0","0x24a7068d","0x18234b4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18234b4","0x0","0x24a7068d","0x18234b4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18234b4","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18234b4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c5 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18234b4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c5 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:43.481Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:43.481Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:43.481Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:43.481Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:43.481Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x18212a4","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x18212a4","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x1922c08","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18212a4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 af 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18212a4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 af 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:43.509Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x2","0x2e","0x18212a4","0x24a705d5","0x17eea90","0x1922c04","0x1922b60","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x18212a4","0x24a705d5","0x17eea90","0x1922c04","0x1922b60","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18212a4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 af 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18212a4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 af 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:43.515Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x2e","0x18212a4","0x0","0x24a70545","0x18212a4","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18212a4","0x0","0x24a70545","0x18212a4","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18212a4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 af 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u2c08�\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18212a4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 af 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u2c08�\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:43.521Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x2e","0x18212a4","0x0","0x24a7068d","0x18212a4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18212a4","0x0","0x24a7068d","0x18212a4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18212a4","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18212a4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 af 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18212a4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 af 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:43.526Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:43.527Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:43.527Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:43.527Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:43.527Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x51ad314","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x51ad314","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x1923d60","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51ad314","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c6 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 25 cb 4e 84 d4 dc 01 06 0a 00 00 00 20 25 cb 4e 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51ad314","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c6 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 25 cb 4e 84 d4 dc 01 06 0a 00 00 00 20 25 cb 4e 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:43.754Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x7ffd","0x62","0x51ad314","0x24a705d5","0x17eea90","0x1923d5c","0x1923cb8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x51ad314","0x24a705d5","0x17eea90","0x1923d5c","0x1923cb8","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51ad314","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c6 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 25 cb 4e 84 d4 dc 01 06 0a 00 00 00 20 25 cb 4e 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51ad314","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c6 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 25 cb 4e 84 d4 dc 01 06 0a 00 00 00 20 25 cb 4e 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:43.763Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x62","0x51ad314","0x0","0x24a70545","0x51ad314","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51ad314","0x0","0x24a70545","0x51ad314","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51ad314","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c6 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 25 cb 4e 84 d4 dc 01 06 0a 00 00 00 20 25 cb 4e 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u9e84\u0126\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u3d60�\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51ad314","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c6 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 25 cb 4e 84 d4 dc 01 06 0a 00 00 00 20 25 cb 4e 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u9e84\u0126\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u3d60�\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:43.773Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x62","0x51ad314","0x0","0x24a7068d","0x51ad314","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51ad314","0x0","0x24a7068d","0x51ad314","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51ad314","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51ad314","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c6 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 25 cb 4e 84 d4 dc 01 06 0a 00 00 00 20 25 cb 4e 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51ad314","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c6 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 25 cb 4e 84 d4 dc 01 06 0a 00 00 00 20 25 cb 4e 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:43.781Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:43.782Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:43.782Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:43.782Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:43.782Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x1886a04","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x1886a04","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x524a518","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x1886a04","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c7 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 25 cb 4e 84 d4 dc 01 06 0a 00 00 00 20 25 cb 4e 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x1886a04","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c7 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 25 cb 4e 84 d4 dc 01 06 0a 00 00 00 20 25 cb 4e 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:43.791Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x7ffe","0x62","0x1886a04","0x24a705d5","0x17eea90","0x524a514","0x524a470","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x1886a04","0x24a705d5","0x17eea90","0x524a514","0x524a470","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x1886a04","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c7 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 25 cb 4e 84 d4 dc 01 06 0a 00 00 00 20 25 cb 4e 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x1886a04","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c7 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 25 cb 4e 84 d4 dc 01 06 0a 00 00 00 20 25 cb 4e 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:43.800Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x62","0x1886a04","0x0","0x24a70545","0x1886a04","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x1886a04","0x0","0x24a70545","0x1886a04","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x1886a04","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c7 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 25 cb 4e 84 d4 dc 01 06 0a 00 00 00 20 25 cb 4e 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u9e84\u0126\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\ua518\u0524\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x1886a04","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c7 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 25 cb 4e 84 d4 dc 01 06 0a 00 00 00 20 25 cb 4e 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u9e84\u0126\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\ua518\u0524\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:43.810Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x62","0x1886a04","0x0","0x24a7068d","0x1886a04","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x1886a04","0x0","0x24a7068d","0x1886a04","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1886a04","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x1886a04","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c7 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 25 cb 4e 84 d4 dc 01 06 0a 00 00 00 20 25 cb 4e 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x1886a04","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c7 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 25 cb 4e 84 d4 dc 01 06 0a 00 00 00 20 25 cb 4e 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:43.817Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:43.818Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:43.818Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:43.818Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:43.818Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x523246c","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x523246c","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x52476d8","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x523246c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c7 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x523246c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c7 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:43.838Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x1","0x2e","0x523246c","0x24a705d5","0x17eea90","0x52476d4","0x5247630","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x523246c","0x24a705d5","0x17eea90","0x52476d4","0x5247630","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x523246c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c7 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x523246c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c7 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:43.843Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x2e","0x523246c","0x0","0x24a70545","0x523246c","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x523246c","0x0","0x24a70545","0x523246c","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x523246c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c7 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u2b0c\u021f\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u76d8\u0524\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x523246c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c7 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u2b0c\u021f\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u76d8\u0524\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:43.849Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x2e","0x523246c","0x0","0x24a7068d","0x523246c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x523246c","0x0","0x24a7068d","0x523246c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x523246c","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x523246c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c7 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x523246c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c7 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:43.854Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:43.854Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:43.854Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:43.854Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:43.854Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x5233574","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x5233574","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51e7c58","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x5233574","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c6 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x5233574","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c6 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:43.873Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x1","0x2e","0x5233574","0x27e700f5","0x23eefb0","0x51e7c54","0x51e7bb0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x5233574","0x27e700f5","0x23eefb0","0x51e7c54","0x51e7bb0","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x5233574","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c6 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x5233574","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c6 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:43.885Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x2e","0x5233574","0x0","0x27e70065","0x5233574","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x5233574","0x0","0x27e70065","0x5233574","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x5233574","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c6 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u7c58\u051e\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x5233574","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c6 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u7c58\u051e\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:43.898Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x2e","0x5233574","0x0","0x27e701ad","0x5233574","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x5233574","0x0","0x27e701ad","0x5233574","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x5233574","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x5233574","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c6 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x5233574","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c6 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:43.912Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18212a4","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18212a4","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x1922c08","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18212a4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b0 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 1e ea 4e 84 d4 dc 01 06 0a 00 00 00 d0 1e ea 4e 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18212a4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b0 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 1e ea 4e 84 d4 dc 01 06 0a 00 00 00 d0 1e ea 4e 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:43.925Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:43.926Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:43.926Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:43.926Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:43.927Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x7ffd","0x62","0x18212a4","0x24a705d5","0x17eea90","0x1922c04","0x1922b60","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18212a4","0x24a705d5","0x17eea90","0x1922c04","0x1922b60","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18212a4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b0 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 1e ea 4e 84 d4 dc 01 06 0a 00 00 00 d0 1e ea 4e 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18212a4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b0 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 1e ea 4e 84 d4 dc 01 06 0a 00 00 00 d0 1e ea 4e 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:43.937Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x62","0x18212a4","0x0","0x24a70545","0x18212a4","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18212a4","0x0","0x24a70545","0x18212a4","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18212a4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b0 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 1e ea 4e 84 d4 dc 01 06 0a 00 00 00 d0 1e ea 4e 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\ucdc4\u0126\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u2c08�\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18212a4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b0 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 1e ea 4e 84 d4 dc 01 06 0a 00 00 00 d0 1e ea 4e 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\ucdc4\u0126\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u2c08�\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:43.949Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x62","0x18212a4","0x0","0x24a7068d","0x18212a4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18212a4","0x0","0x24a7068d","0x18212a4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18212a4","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18212a4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b0 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 1e ea 4e 84 d4 dc 01 06 0a 00 00 00 d0 1e ea 4e 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18212a4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b0 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 d0 1e ea 4e 84 d4 dc 01 06 0a 00 00 00 d0 1e ea 4e 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:43.961Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:43.963Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:43.963Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:43.964Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:43.964Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x182df04","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x182df04","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x51ea4d0","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x182df04","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b0 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x182df04","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b0 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:44.056Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x2","0x2e","0x182df04","0x24a705d5","0x17eea90","0x51ea4cc","0x51ea428","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x182df04","0x24a705d5","0x17eea90","0x51ea4cc","0x51ea428","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x182df04","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b0 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x182df04","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b0 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:44.064Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x2e","0x182df04","0x0","0x24a70545","0x182df04","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x182df04","0x0","0x24a70545","0x182df04","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x182df04","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b0 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\ua4d0\u051e\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x182df04","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b0 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\ua4d0\u051e\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:44.073Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x2e","0x182df04","0x0","0x24a7068d","0x182df04","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x182df04","0x0","0x24a7068d","0x182df04","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x182df04","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x182df04","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b0 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x182df04","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b0 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:44.080Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:44.080Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:44.080Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:44.081Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:44.081Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x1829ae4","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x1829ae4","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x1922c08","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x1829ae4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c8 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 90 e5 17 4f 84 d4 dc 01 06 0a 00 00 00 90 e5 17 4f 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x1829ae4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c8 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 90 e5 17 4f 84 d4 dc 01 06 0a 00 00 00 90 e5 17 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:44.263Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x7ffd","0x62","0x1829ae4","0x24a705d5","0x17eea90","0x1922c04","0x1922b60","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x1829ae4","0x24a705d5","0x17eea90","0x1922c04","0x1922b60","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x1829ae4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c8 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 90 e5 17 4f 84 d4 dc 01 06 0a 00 00 00 90 e5 17 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x1829ae4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c8 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 90 e5 17 4f 84 d4 dc 01 06 0a 00 00 00 90 e5 17 4f 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:44.269Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x62","0x1829ae4","0x0","0x24a70545","0x1829ae4","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x1829ae4","0x0","0x24a70545","0x1829ae4","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x1829ae4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c8 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 90 e5 17 4f 84 d4 dc 01 06 0a 00 00 00 90 e5 17 4f 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u9e84\u0126\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u2c08�\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x1829ae4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c8 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 90 e5 17 4f 84 d4 dc 01 06 0a 00 00 00 90 e5 17 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u9e84\u0126\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u2c08�\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:44.276Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x62","0x1829ae4","0x0","0x24a7068d","0x1829ae4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x1829ae4","0x0","0x24a7068d","0x1829ae4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1829ae4","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x1829ae4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c8 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 90 e5 17 4f 84 d4 dc 01 06 0a 00 00 00 90 e5 17 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x1829ae4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c8 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 90 e5 17 4f 84 d4 dc 01 06 0a 00 00 00 90 e5 17 4f 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:44.281Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:44.281Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:44.281Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:44.281Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:44.282Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x18836ec","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x18836ec","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x524a518","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18836ec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c9 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 90 e5 17 4f 84 d4 dc 01 06 0a 00 00 00 90 e5 17 4f 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18836ec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c9 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 90 e5 17 4f 84 d4 dc 01 06 0a 00 00 00 90 e5 17 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:44.290Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x7ffe","0x62","0x18836ec","0x24a705d5","0x17eea90","0x524a514","0x524a470","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x18836ec","0x24a705d5","0x17eea90","0x524a514","0x524a470","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18836ec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c9 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 90 e5 17 4f 84 d4 dc 01 06 0a 00 00 00 90 e5 17 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18836ec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c9 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 90 e5 17 4f 84 d4 dc 01 06 0a 00 00 00 90 e5 17 4f 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:44.296Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x62","0x18836ec","0x0","0x24a70545","0x18836ec","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18836ec","0x0","0x24a70545","0x18836ec","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18836ec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c9 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 90 e5 17 4f 84 d4 dc 01 06 0a 00 00 00 90 e5 17 4f 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u9e84\u0126\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\ua518\u0524\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18836ec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c9 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 90 e5 17 4f 84 d4 dc 01 06 0a 00 00 00 90 e5 17 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u9e84\u0126\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\ua518\u0524\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:44.302Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x62","0x18836ec","0x0","0x24a7068d","0x18836ec","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18836ec","0x0","0x24a7068d","0x18836ec","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18836ec","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18836ec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c9 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 90 e5 17 4f 84 d4 dc 01 06 0a 00 00 00 90 e5 17 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18836ec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c9 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 90 e5 17 4f 84 d4 dc 01 06 0a 00 00 00 90 e5 17 4f 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:44.308Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:44.308Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:44.308Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:44.308Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:44.308Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x191817c","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x191817c","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x52476d8","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x191817c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c9 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x191817c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c9 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:44.381Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x1","0x2e","0x191817c","0x24a705d5","0x17eea90","0x52476d4","0x5247630","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x191817c","0x24a705d5","0x17eea90","0x52476d4","0x5247630","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x191817c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c9 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x191817c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c9 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:44.388Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x2e","0x191817c","0x0","0x24a70545","0x191817c","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x191817c","0x0","0x24a70545","0x191817c","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x191817c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c9 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u2b0c\u021f\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u76d8\u0524\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x191817c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c9 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u2b0c\u021f\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u76d8\u0524\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:44.395Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x2e","0x191817c","0x0","0x24a7068d","0x191817c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x191817c","0x0","0x24a7068d","0x191817c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x191817c","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x191817c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c9 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x191817c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c9 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:44.400Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x18223ac","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x18223ac","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51e7c58","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18223ac","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c8 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18223ac","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c8 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:44.411Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:44.412Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:44.412Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:44.413Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:44.413Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x51f312c","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x51f312c","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51e9f08","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51f312c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b1 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 91 36 4f 84 d4 dc 01 06 0a 00 00 00 20 91 36 4f 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51f312c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b1 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 91 36 4f 84 d4 dc 01 06 0a 00 00 00 20 91 36 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:44.424Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x1","0x2e","0x18223ac","0x27e700f5","0x23eefb0","0x51e7c54","0x51e7bb0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18223ac","0x27e700f5","0x23eefb0","0x51e7c54","0x51e7bb0","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18223ac","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c8 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18223ac","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c8 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:44.433Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x2e","0x18223ac","0x0","0x27e70065","0x18223ac","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18223ac","0x0","0x27e70065","0x18223ac","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18223ac","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c8 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u7c58\u051e\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18223ac","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c8 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u7c58\u051e\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:44.442Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x2e","0x18223ac","0x0","0x27e701ad","0x18223ac","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18223ac","0x0","0x27e701ad","0x18223ac","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18223ac","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18223ac","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c8 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18223ac","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c8 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:44.449Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:44.451Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:44.451Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:44.451Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:44.451Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffd","0x62","0x51f312c","0x255c009d","0x85efc8","0x51e9f04","0x51e9e60","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x51f312c","0x255c009d","0x85efc8","0x51e9f04","0x51e9e60","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51f312c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b1 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 91 36 4f 84 d4 dc 01 06 0a 00 00 00 20 91 36 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51f312c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b1 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 91 36 4f 84 d4 dc 01 06 0a 00 00 00 20 91 36 4f 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:44.457Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x51f312c","0x0","0x255c000d","0x51f312c","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51f312c","0x0","0x255c000d","0x51f312c","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51f312c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b1 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 91 36 4f 84 d4 dc 01 06 0a 00 00 00 20 91 36 4f 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\ucdc4\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u9f08\u051e\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51f312c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b1 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 91 36 4f 84 d4 dc 01 06 0a 00 00 00 20 91 36 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\ucdc4\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u9f08\u051e\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:44.465Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x51f312c","0x0","0x255c0055","0x51f312c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51f312c","0x0","0x255c0055","0x51f312c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51f312c","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51f312c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b1 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 91 36 4f 84 d4 dc 01 06 0a 00 00 00 20 91 36 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51f312c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b1 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 91 36 4f 84 d4 dc 01 06 0a 00 00 00 20 91 36 4f 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:44.471Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:44.471Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:44.471Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:44.471Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:44.471Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x18345c4","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x18345c4","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51747b8","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18345c4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b1 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18345c4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b1 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:44.492Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x2","0x2e","0x18345c4","0x255c009d","0x85efc8","0x51747b4","0x5174710","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x18345c4","0x255c009d","0x85efc8","0x51747b4","0x5174710","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18345c4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b1 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18345c4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b1 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:44.498Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x18345c4","0x0","0x255c000d","0x18345c4","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18345c4","0x0","0x255c000d","0x18345c4","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18345c4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b1 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u47b8\u0517\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18345c4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b1 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u47b8\u0517\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:44.504Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x18345c4","0x0","0x255c0055","0x18345c4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18345c4","0x0","0x255c0055","0x18345c4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18345c4","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18345c4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b1 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18345c4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b1 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:44.510Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:44.510Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:44.510Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:44.510Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:44.510Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x18212a4","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x18212a4","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x1922c08","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18212a4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ca 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 b0 e2 63 4f 84 d4 dc 01 06 0a 00 00 00 b0 e2 63 4f 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18212a4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ca 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 b0 e2 63 4f 84 d4 dc 01 06 0a 00 00 00 b0 e2 63 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:44.751Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffd","0x62","0x18212a4","0x255c009d","0x85efc8","0x1922c04","0x1922b60","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18212a4","0x255c009d","0x85efc8","0x1922c04","0x1922b60","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18212a4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ca 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 b0 e2 63 4f 84 d4 dc 01 06 0a 00 00 00 b0 e2 63 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18212a4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ca 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 b0 e2 63 4f 84 d4 dc 01 06 0a 00 00 00 b0 e2 63 4f 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:44.757Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x18212a4","0x0","0x255c000d","0x18212a4","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18212a4","0x0","0x255c000d","0x18212a4","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18212a4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ca 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 b0 e2 63 4f 84 d4 dc 01 06 0a 00 00 00 b0 e2 63 4f 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u2c08�\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18212a4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ca 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 b0 e2 63 4f 84 d4 dc 01 06 0a 00 00 00 b0 e2 63 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u2c08�\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:44.765Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x18212a4","0x0","0x255c0055","0x18212a4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18212a4","0x0","0x255c0055","0x18212a4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18212a4","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18212a4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ca 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 b0 e2 63 4f 84 d4 dc 01 06 0a 00 00 00 b0 e2 63 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18212a4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ca 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 b0 e2 63 4f 84 d4 dc 01 06 0a 00 00 00 b0 e2 63 4f 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:44.772Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:44.772Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:44.772Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:44.772Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:44.773Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x18825e4","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x18825e4","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x17f0cb0","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18825e4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 cb 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 b0 e2 63 4f 84 d4 dc 01 06 0a 00 00 00 b0 e2 63 4f 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18825e4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 cb 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 b0 e2 63 4f 84 d4 dc 01 06 0a 00 00 00 b0 e2 63 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:44.780Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffe","0x62","0x18825e4","0x255c009d","0x85efc8","0x17f0cac","0x17f0c08","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x18825e4","0x255c009d","0x85efc8","0x17f0cac","0x17f0c08","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18825e4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 cb 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 b0 e2 63 4f 84 d4 dc 01 06 0a 00 00 00 b0 e2 63 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18825e4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 cb 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 b0 e2 63 4f 84 d4 dc 01 06 0a 00 00 00 b0 e2 63 4f 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:44.786Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x18825e4","0x0","0x255c000d","0x18825e4","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18825e4","0x0","0x255c000d","0x18825e4","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18825e4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 cb 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 b0 e2 63 4f 84 d4 dc 01 06 0a 00 00 00 b0 e2 63 4f 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u0cb0\u017f\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18825e4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 cb 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 b0 e2 63 4f 84 d4 dc 01 06 0a 00 00 00 b0 e2 63 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u0cb0\u017f\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:44.794Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x18825e4","0x0","0x255c0055","0x18825e4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18825e4","0x0","0x255c0055","0x18825e4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18825e4","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18825e4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 cb 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 b0 e2 63 4f 84 d4 dc 01 06 0a 00 00 00 b0 e2 63 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18825e4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 cb 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 b0 e2 63 4f 84 d4 dc 01 06 0a 00 00 00 b0 e2 63 4f 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:44.801Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:44.801Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:44.801Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:44.801Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:44.801Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x51f312c","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x51f312c","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51e9f08","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51f312c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 cb 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x51f312c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 cb 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:44.820Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x1","0x2e","0x51f312c","0x255c009d","0x85efc8","0x51e9f04","0x51e9e60","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x51f312c","0x255c009d","0x85efc8","0x51e9f04","0x51e9e60","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51f312c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 cb 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51f312c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 cb 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:44.825Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x51f312c","0x0","0x255c000d","0x51f312c","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x51f312c","0x0","0x255c000d","0x51f312c","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51f312c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 cb 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u2b0c\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u9f08\u051e\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51f312c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 cb 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u2b0c\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u9f08\u051e\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:44.831Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x51f312c","0x0","0x255c0055","0x51f312c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x51f312c","0x0","0x255c0055","0x51f312c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51f312c","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x51f312c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 cb 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51f312c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 cb 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:44.837Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x1829ae4","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x1829ae4","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x1922c08","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1829ae4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ca 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x1829ae4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ca 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:44.844Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:44.845Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:44.845Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:44.845Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:44.845Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x1","0x2e","0x1829ae4","0x27e700f5","0x23eefb0","0x1922c04","0x1922b60","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x1829ae4","0x27e700f5","0x23eefb0","0x1922c04","0x1922b60","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1829ae4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ca 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1829ae4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ca 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:44.851Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x2e","0x1829ae4","0x0","0x27e70065","0x1829ae4","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x1829ae4","0x0","0x27e70065","0x1829ae4","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1829ae4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ca 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u2c08�\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1829ae4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ca 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u2c08�\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:44.857Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x2e","0x1829ae4","0x0","0x27e701ad","0x1829ae4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x1829ae4","0x0","0x27e701ad","0x1829ae4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1829ae4","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x1829ae4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ca 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1829ae4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ca 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:44.862Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:44.862Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:44.862Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:44.862Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:44.862Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18b25fc","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18b25fc","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51e70c8","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b2 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 dc 82 4f 84 d4 dc 01 06 0a 00 00 00 60 dc 82 4f 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b2 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 dc 82 4f 84 d4 dc 01 06 0a 00 00 00 60 dc 82 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:44.913Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x7ffd","0x62","0x18b25fc","0x27e700f5","0x23eefb0","0x51e70c4","0x51e7020","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18b25fc","0x27e700f5","0x23eefb0","0x51e70c4","0x51e7020","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b2 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 dc 82 4f 84 d4 dc 01 06 0a 00 00 00 60 dc 82 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b2 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 dc 82 4f 84 d4 dc 01 06 0a 00 00 00 60 dc 82 4f 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:44.922Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x62","0x18b25fc","0x0","0x27e70065","0x18b25fc","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18b25fc","0x0","0x27e70065","0x18b25fc","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b2 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 dc 82 4f 84 d4 dc 01 06 0a 00 00 00 60 dc 82 4f 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u70c8\u051e\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b2 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 dc 82 4f 84 d4 dc 01 06 0a 00 00 00 60 dc 82 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u70c8\u051e\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:44.930Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x62","0x18b25fc","0x0","0x27e701ad","0x18b25fc","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18b25fc","0x0","0x27e701ad","0x18b25fc","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b25fc","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b2 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 dc 82 4f 84 d4 dc 01 06 0a 00 00 00 60 dc 82 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b2 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 60 dc 82 4f 84 d4 dc 01 06 0a 00 00 00 60 dc 82 4f 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:44.935Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:44.936Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:44.936Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:44.936Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:44.936Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x182abec","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x182abec","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51ed948","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x182abec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b2 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x182abec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b2 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:45.040Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x2","0x2e","0x182abec","0x27e700f5","0x23eefb0","0x51ed944","0x51ed8a0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x182abec","0x27e700f5","0x23eefb0","0x51ed944","0x51ed8a0","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x182abec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b2 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x182abec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b2 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:45.045Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x2e","0x182abec","0x0","0x27e70065","0x182abec","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x182abec","0x0","0x27e70065","0x182abec","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x182abec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b2 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x182abec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b2 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:45.051Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x2e","0x182abec","0x0","0x27e701ad","0x182abec","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x182abec","0x0","0x27e701ad","0x182abec","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x182abec","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x182abec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b2 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x182abec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b2 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:45.056Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:45.056Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:45.057Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:45.057Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:45.057Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x182019c","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x182019c","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51e70c8","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x182019c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 cc 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 f0 2d b0 4f 84 d4 dc 01 06 0a 00 00 00 f0 2d b0 4f 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x182019c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 cc 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 f0 2d b0 4f 84 d4 dc 01 06 0a 00 00 00 f0 2d b0 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:45.262Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x7ffd","0x62","0x182019c","0x27e700f5","0x23eefb0","0x51e70c4","0x51e7020","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x182019c","0x27e700f5","0x23eefb0","0x51e70c4","0x51e7020","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x182019c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 cc 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 f0 2d b0 4f 84 d4 dc 01 06 0a 00 00 00 f0 2d b0 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x182019c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 cc 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 f0 2d b0 4f 84 d4 dc 01 06 0a 00 00 00 f0 2d b0 4f 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:45.269Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x62","0x182019c","0x0","0x27e70065","0x182019c","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x182019c","0x0","0x27e70065","0x182019c","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x182019c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 cc 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 f0 2d b0 4f 84 d4 dc 01 06 0a 00 00 00 f0 2d b0 4f 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u70c8\u051e\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x182019c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 cc 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 f0 2d b0 4f 84 d4 dc 01 06 0a 00 00 00 f0 2d b0 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u70c8\u051e\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:45.277Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x62","0x182019c","0x0","0x27e701ad","0x182019c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x182019c","0x0","0x27e701ad","0x182019c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x182019c","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x182019c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 cc 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 f0 2d b0 4f 84 d4 dc 01 06 0a 00 00 00 f0 2d b0 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x182019c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 cc 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 f0 2d b0 4f 84 d4 dc 01 06 0a 00 00 00 f0 2d b0 4f 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:45.283Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:45.283Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:45.283Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:45.283Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:45.283Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x18356cc","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x18356cc","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51e9f08","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18356cc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 cd 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 f0 2d b0 4f 84 d4 dc 01 06 0a 00 00 00 f0 2d b0 4f 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18356cc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 cd 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 f0 2d b0 4f 84 d4 dc 01 06 0a 00 00 00 f0 2d b0 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:45.293Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x7ffe","0x62","0x18356cc","0x27e700f5","0x23eefb0","0x51e9f04","0x51e9e60","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x18356cc","0x27e700f5","0x23eefb0","0x51e9f04","0x51e9e60","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18356cc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 cd 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 f0 2d b0 4f 84 d4 dc 01 06 0a 00 00 00 f0 2d b0 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18356cc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 cd 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 f0 2d b0 4f 84 d4 dc 01 06 0a 00 00 00 f0 2d b0 4f 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:45.301Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x62","0x18356cc","0x0","0x27e70065","0x18356cc","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18356cc","0x0","0x27e70065","0x18356cc","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18356cc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 cd 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 f0 2d b0 4f 84 d4 dc 01 06 0a 00 00 00 f0 2d b0 4f 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u9f08\u051e\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18356cc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 cd 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 f0 2d b0 4f 84 d4 dc 01 06 0a 00 00 00 f0 2d b0 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u9f08\u051e\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:45.309Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x62","0x18356cc","0x0","0x27e701ad","0x18356cc","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18356cc","0x0","0x27e701ad","0x18356cc","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18356cc","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18356cc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 cd 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 f0 2d b0 4f 84 d4 dc 01 06 0a 00 00 00 f0 2d b0 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18356cc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 cd 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 f0 2d b0 4f 84 d4 dc 01 06 0a 00 00 00 f0 2d b0 4f 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:45.314Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:45.315Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:45.315Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:45.315Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:45.315Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x1915f6c","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x1915f6c","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x5175348","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1915f6c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 cd 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x1915f6c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 cd 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:45.364Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x1","0x2e","0x1915f6c","0x27e700f5","0x23eefb0","0x5175344","0x51752a0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x1915f6c","0x27e700f5","0x23eefb0","0x5175344","0x51752a0","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1915f6c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 cd 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1915f6c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 cd 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:45.369Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x2e","0x1915f6c","0x0","0x27e70065","0x1915f6c","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x1915f6c","0x0","0x27e70065","0x1915f6c","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1915f6c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 cd 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u2b0c\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u5348\u0517\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1915f6c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 cd 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u2b0c\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u5348\u0517\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:45.376Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x2e","0x1915f6c","0x0","0x27e701ad","0x1915f6c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x1915f6c","0x0","0x27e701ad","0x1915f6c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1915f6c","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x1915f6c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 cd 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1915f6c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 cd 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:45.381Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x182abec","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x182abec","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51ed948","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x182abec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 cc 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x182abec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 cc 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:45.389Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:45.390Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:45.390Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:45.390Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:45.390Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x1","0x2e","0x182abec","0x255c009d","0x85efc8","0x51ed944","0x51ed8a0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x182abec","0x255c009d","0x85efc8","0x51ed944","0x51ed8a0","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x182abec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 cc 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x182abec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 cc 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:45.396Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x182abec","0x0","0x255c000d","0x182abec","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x182abec","0x0","0x255c000d","0x182abec","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x182abec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 cc 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x182abec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 cc 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:45.403Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x182abec","0x0","0x255c0055","0x182abec","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x182abec","0x0","0x255c0055","0x182abec","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x182abec","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x182abec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 cc 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x182abec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 cc 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:45.408Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18b25fc","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18b25fc","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51e70c8","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b3 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 27 cf 4f 84 d4 dc 01 06 0a 00 00 00 a0 27 cf 4f 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b3 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 27 cf 4f 84 d4 dc 01 06 0a 00 00 00 a0 27 cf 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:45.419Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:45.420Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:45.420Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:45.420Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:45.420Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x7ffd","0x62","0x18b25fc","0x27e700f5","0x23eefb0","0x51e70c4","0x51e7020","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18b25fc","0x27e700f5","0x23eefb0","0x51e70c4","0x51e7020","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b3 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 27 cf 4f 84 d4 dc 01 06 0a 00 00 00 a0 27 cf 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b3 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 27 cf 4f 84 d4 dc 01 06 0a 00 00 00 a0 27 cf 4f 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:45.427Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x62","0x18b25fc","0x0","0x27e70065","0x18b25fc","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18b25fc","0x0","0x27e70065","0x18b25fc","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b3 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 27 cf 4f 84 d4 dc 01 06 0a 00 00 00 a0 27 cf 4f 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u70c8\u051e\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b3 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 27 cf 4f 84 d4 dc 01 06 0a 00 00 00 a0 27 cf 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u70c8\u051e\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:45.435Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x62","0x18b25fc","0x0","0x27e701ad","0x18b25fc","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18b25fc","0x0","0x27e701ad","0x18b25fc","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b25fc","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b3 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 27 cf 4f 84 d4 dc 01 06 0a 00 00 00 a0 27 cf 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b3 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 27 cf 4f 84 d4 dc 01 06 0a 00 00 00 a0 27 cf 4f 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:45.440Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:45.440Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:45.440Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:45.440Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:45.441Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x182019c","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x182019c","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51e70c8","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x182019c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b3 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x182019c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b3 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:45.475Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x2","0x2e","0x182019c","0x27e700f5","0x23eefb0","0x51e70c4","0x51e7020","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x182019c","0x27e700f5","0x23eefb0","0x51e70c4","0x51e7020","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x182019c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b3 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x182019c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b3 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:45.481Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x2e","0x182019c","0x0","0x27e70065","0x182019c","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x182019c","0x0","0x27e70065","0x182019c","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x182019c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b3 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u70c8\u051e\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x182019c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b3 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u70c8\u051e\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:45.488Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x2e","0x182019c","0x0","0x27e701ad","0x182019c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x182019c","0x0","0x27e701ad","0x182019c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x182019c","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x182019c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b3 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x182019c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b3 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:45.493Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:45.494Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:45.494Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:45.494Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:45.494Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x18b25fc","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x18b25fc","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51e70c8","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ce 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 79 fc 4f 84 d4 dc 01 06 0a 00 00 00 30 79 fc 4f 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ce 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 79 fc 4f 84 d4 dc 01 06 0a 00 00 00 30 79 fc 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:45.753Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x7ffd","0x62","0x18b25fc","0x27e700f5","0x23eefb0","0x51e70c4","0x51e7020","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18b25fc","0x27e700f5","0x23eefb0","0x51e70c4","0x51e7020","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ce 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 79 fc 4f 84 d4 dc 01 06 0a 00 00 00 30 79 fc 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ce 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 79 fc 4f 84 d4 dc 01 06 0a 00 00 00 30 79 fc 4f 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:45.759Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x62","0x18b25fc","0x0","0x27e70065","0x18b25fc","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18b25fc","0x0","0x27e70065","0x18b25fc","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ce 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 79 fc 4f 84 d4 dc 01 06 0a 00 00 00 30 79 fc 4f 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u70c8\u051e\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ce 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 79 fc 4f 84 d4 dc 01 06 0a 00 00 00 30 79 fc 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u70c8\u051e\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:45.767Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x62","0x18b25fc","0x0","0x27e701ad","0x18b25fc","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18b25fc","0x0","0x27e701ad","0x18b25fc","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b25fc","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ce 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 79 fc 4f 84 d4 dc 01 06 0a 00 00 00 30 79 fc 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ce 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 79 fc 4f 84 d4 dc 01 06 0a 00 00 00 30 79 fc 4f 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:45.775Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:45.776Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:45.776Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:45.776Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:45.776Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x183df0c","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x183df0c","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51e9940","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 cf 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 79 fc 4f 84 d4 dc 01 06 0a 00 00 00 30 79 fc 4f 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 cf 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 79 fc 4f 84 d4 dc 01 06 0a 00 00 00 30 79 fc 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:45.785Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x7ffe","0x62","0x183df0c","0x27e700f5","0x23eefb0","0x51e993c","0x51e9898","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x183df0c","0x27e700f5","0x23eefb0","0x51e993c","0x51e9898","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 cf 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 79 fc 4f 84 d4 dc 01 06 0a 00 00 00 30 79 fc 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 cf 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 79 fc 4f 84 d4 dc 01 06 0a 00 00 00 30 79 fc 4f 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:45.791Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x62","0x183df0c","0x0","0x27e70065","0x183df0c","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x183df0c","0x0","0x27e70065","0x183df0c","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 cf 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 79 fc 4f 84 d4 dc 01 06 0a 00 00 00 30 79 fc 4f 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u9940\u051e\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 cf 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 79 fc 4f 84 d4 dc 01 06 0a 00 00 00 30 79 fc 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u9940\u051e\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:45.798Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x62","0x183df0c","0x0","0x27e701ad","0x183df0c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x183df0c","0x0","0x27e701ad","0x183df0c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x183df0c","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 cf 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 79 fc 4f 84 d4 dc 01 06 0a 00 00 00 30 79 fc 4f 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 cf 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 79 fc 4f 84 d4 dc 01 06 0a 00 00 00 30 79 fc 4f 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:45.804Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x1913d5c","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x1913d5c","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x5175910","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1913d5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ce 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x1913d5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ce 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:45.811Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:45.812Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:45.812Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:45.812Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:45.812Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x1","0x2e","0x1913d5c","0x24a705d5","0x17eea90","0x517590c","0x5175868","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x1913d5c","0x24a705d5","0x17eea90","0x517590c","0x5175868","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1913d5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ce 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1913d5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ce 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:45.817Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x2e","0x1913d5c","0x0","0x24a70545","0x1913d5c","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x1913d5c","0x0","0x24a70545","0x1913d5c","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1913d5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ce 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u5910\u0517\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1913d5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ce 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u5910\u0517\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:45.823Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x2e","0x1913d5c","0x0","0x24a7068d","0x1913d5c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x1913d5c","0x0","0x24a7068d","0x1913d5c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1913d5c","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x1913d5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ce 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1913d5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ce 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:45.828Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:45.829Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:45.829Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:45.829Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:45.830Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x1914e64","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x1914e64","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x5175910","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x1914e64","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b4 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 72 1b 50 84 d4 dc 01 06 0a 00 00 00 e0 72 1b 50 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x1914e64","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b4 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 72 1b 50 84 d4 dc 01 06 0a 00 00 00 e0 72 1b 50 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:45.910Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x7ffd","0x62","0x1914e64","0x24a705d5","0x17eea90","0x517590c","0x5175868","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x1914e64","0x24a705d5","0x17eea90","0x517590c","0x5175868","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x1914e64","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b4 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 72 1b 50 84 d4 dc 01 06 0a 00 00 00 e0 72 1b 50 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x1914e64","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b4 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 72 1b 50 84 d4 dc 01 06 0a 00 00 00 e0 72 1b 50 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:45.916Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x62","0x1914e64","0x0","0x24a70545","0x1914e64","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x1914e64","0x0","0x24a70545","0x1914e64","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x1914e64","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b4 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 72 1b 50 84 d4 dc 01 06 0a 00 00 00 e0 72 1b 50 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\ucdc4\u0126\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u5910\u0517\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x1914e64","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b4 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 72 1b 50 84 d4 dc 01 06 0a 00 00 00 e0 72 1b 50 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\ucdc4\u0126\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u5910\u0517\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:45.922Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x62","0x1914e64","0x0","0x24a7068d","0x1914e64","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x1914e64","0x0","0x24a7068d","0x1914e64","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1914e64","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x1914e64","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b4 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 72 1b 50 84 d4 dc 01 06 0a 00 00 00 e0 72 1b 50 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x1914e64","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b4 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 72 1b 50 84 d4 dc 01 06 0a 00 00 00 e0 72 1b 50 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:45.928Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x18356cc","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x18356cc","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51ed948","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18356cc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 cf 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18356cc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 cf 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:45.935Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:45.935Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:45.936Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:45.936Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:45.936Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x1","0x2e","0x18356cc","0x255c009d","0x85efc8","0x51ed944","0x51ed8a0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18356cc","0x255c009d","0x85efc8","0x51ed944","0x51ed8a0","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18356cc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 cf 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18356cc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 cf 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:45.942Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x18356cc","0x0","0x255c000d","0x18356cc","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18356cc","0x0","0x255c000d","0x18356cc","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18356cc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 cf 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u2b0c\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18356cc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 cf 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u2b0c\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:45.949Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x18356cc","0x0","0x255c0055","0x18356cc","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18356cc","0x0","0x255c0055","0x18356cc","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18356cc","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18356cc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 cf 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18356cc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 cf 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:45.955Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:45.955Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:45.955Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:45.955Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:45.955Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x51f312c","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x51f312c","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51ed948","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51f312c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b4 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x51f312c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b4 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:46.025Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x2","0x2e","0x51f312c","0x255c009d","0x85efc8","0x51ed944","0x51ed8a0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x51f312c","0x255c009d","0x85efc8","0x51ed944","0x51ed8a0","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51f312c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b4 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51f312c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b4 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:46.030Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x51f312c","0x0","0x255c000d","0x51f312c","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x51f312c","0x0","0x255c000d","0x51f312c","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51f312c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b4 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51f312c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b4 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:46.035Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x51f312c","0x0","0x255c0055","0x51f312c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x51f312c","0x0","0x255c0055","0x51f312c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51f312c","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x51f312c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b4 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51f312c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b4 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:46.041Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:46.041Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:46.041Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:46.042Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:46.042Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x182019c","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x182019c","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51e70c8","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x182019c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d0 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 80 eb 48 50 84 d4 dc 01 06 0a 00 00 00 70 c4 48 50 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x182019c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d0 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 80 eb 48 50 84 d4 dc 01 06 0a 00 00 00 70 c4 48 50 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:46.252Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffd","0x62","0x182019c","0x255c009d","0x85efc8","0x51e70c4","0x51e7020","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x182019c","0x255c009d","0x85efc8","0x51e70c4","0x51e7020","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x182019c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d0 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 80 eb 48 50 84 d4 dc 01 06 0a 00 00 00 70 c4 48 50 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x182019c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d0 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 80 eb 48 50 84 d4 dc 01 06 0a 00 00 00 70 c4 48 50 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:46.258Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x182019c","0x0","0x255c000d","0x182019c","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x182019c","0x0","0x255c000d","0x182019c","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x182019c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d0 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 80 eb 48 50 84 d4 dc 01 06 0a 00 00 00 70 c4 48 50 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u70c8\u051e\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x182019c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d0 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 80 eb 48 50 84 d4 dc 01 06 0a 00 00 00 70 c4 48 50 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u70c8\u051e\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:46.265Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x182019c","0x0","0x255c0055","0x182019c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x182019c","0x0","0x255c0055","0x182019c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x182019c","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x182019c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d0 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 80 eb 48 50 84 d4 dc 01 06 0a 00 00 00 70 c4 48 50 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x182019c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d0 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 80 eb 48 50 84 d4 dc 01 06 0a 00 00 00 70 c4 48 50 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:46.271Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:46.271Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:46.271Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:46.271Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:46.271Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x51f312c","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x51f312c","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51ed948","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51f312c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d1 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 80 eb 48 50 84 d4 dc 01 06 0a 00 00 00 70 c4 48 50 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51f312c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d1 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 80 eb 48 50 84 d4 dc 01 06 0a 00 00 00 70 c4 48 50 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:46.279Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffe","0x62","0x51f312c","0x255c009d","0x85efc8","0x51ed944","0x51ed8a0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x51f312c","0x255c009d","0x85efc8","0x51ed944","0x51ed8a0","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51f312c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d1 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 80 eb 48 50 84 d4 dc 01 06 0a 00 00 00 70 c4 48 50 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51f312c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d1 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 80 eb 48 50 84 d4 dc 01 06 0a 00 00 00 70 c4 48 50 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:46.285Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x51f312c","0x0","0x255c000d","0x51f312c","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51f312c","0x0","0x255c000d","0x51f312c","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51f312c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d1 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 80 eb 48 50 84 d4 dc 01 06 0a 00 00 00 70 c4 48 50 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51f312c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d1 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 80 eb 48 50 84 d4 dc 01 06 0a 00 00 00 70 c4 48 50 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:46.292Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x51f312c","0x0","0x255c0055","0x51f312c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51f312c","0x0","0x255c0055","0x51f312c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51f312c","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51f312c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d1 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 80 eb 48 50 84 d4 dc 01 06 0a 00 00 00 70 c4 48 50 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51f312c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d1 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 80 eb 48 50 84 d4 dc 01 06 0a 00 00 00 70 c4 48 50 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:46.298Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:46.299Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:46.299Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:46.299Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:46.299Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x1913d5c","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x1913d5c","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x5175910","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1913d5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d1 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x1913d5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d1 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:46.350Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x1","0x2e","0x1913d5c","0x255c009d","0x85efc8","0x517590c","0x5175868","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x1913d5c","0x255c009d","0x85efc8","0x517590c","0x5175868","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1913d5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d1 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1913d5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d1 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:46.356Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x1913d5c","0x0","0x255c000d","0x1913d5c","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x1913d5c","0x0","0x255c000d","0x1913d5c","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1913d5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d1 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u2b0c\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u5910\u0517\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1913d5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d1 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u2b0c\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u5910\u0517\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:46.363Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x1913d5c","0x0","0x255c0055","0x1913d5c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x1913d5c","0x0","0x255c0055","0x1913d5c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1913d5c","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x1913d5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d1 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1913d5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d1 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:46.371Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x18b6a1c","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x18b6a1c","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x5247110","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18b6a1c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d0 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18b6a1c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d0 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:46.379Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:46.379Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:46.379Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:46.379Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:46.379Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x1","0x2e","0x18b6a1c","0x24a705d5","0x17eea90","0x524710c","0x5247068","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18b6a1c","0x24a705d5","0x17eea90","0x524710c","0x5247068","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18b6a1c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d0 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18b6a1c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d0 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:46.385Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x2e","0x18b6a1c","0x0","0x24a70545","0x18b6a1c","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18b6a1c","0x0","0x24a70545","0x18b6a1c","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18b6a1c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d0 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u7110\u0524\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18b6a1c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d0 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u7110\u0524\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:46.392Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x2e","0x18b6a1c","0x0","0x24a7068d","0x18b6a1c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18b6a1c","0x0","0x24a7068d","0x18b6a1c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b6a1c","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18b6a1c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d0 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18b6a1c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d0 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:46.397Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:46.398Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:46.398Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:46.398Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:46.398Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18356cc","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18356cc","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x51ed948","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18356cc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b5 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 be 67 50 84 d4 dc 01 06 0a 00 00 00 20 be 67 50 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18356cc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b5 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 be 67 50 84 d4 dc 01 06 0a 00 00 00 20 be 67 50 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:46.415Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x7ffd","0x62","0x18356cc","0x24a705d5","0x17eea90","0x51ed944","0x51ed8a0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18356cc","0x24a705d5","0x17eea90","0x51ed944","0x51ed8a0","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18356cc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b5 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 be 67 50 84 d4 dc 01 06 0a 00 00 00 20 be 67 50 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18356cc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b5 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 be 67 50 84 d4 dc 01 06 0a 00 00 00 20 be 67 50 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:46.424Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x62","0x18356cc","0x0","0x24a70545","0x18356cc","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18356cc","0x0","0x24a70545","0x18356cc","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18356cc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b5 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 be 67 50 84 d4 dc 01 06 0a 00 00 00 20 be 67 50 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\ucdc4\u0126\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18356cc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b5 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 be 67 50 84 d4 dc 01 06 0a 00 00 00 20 be 67 50 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\ucdc4\u0126\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:46.431Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x62","0x18356cc","0x0","0x24a7068d","0x18356cc","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18356cc","0x0","0x24a7068d","0x18356cc","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18356cc","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18356cc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b5 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 be 67 50 84 d4 dc 01 06 0a 00 00 00 20 be 67 50 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18356cc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b5 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 be 67 50 84 d4 dc 01 06 0a 00 00 00 20 be 67 50 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:46.436Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:46.436Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:46.436Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:46.436Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:46.436Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x1914e64","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x1914e64","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x5175910","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1914e64","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b5 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x1914e64","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b5 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:46.464Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x2","0x2e","0x1914e64","0x24a705d5","0x17eea90","0x517590c","0x5175868","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x1914e64","0x24a705d5","0x17eea90","0x517590c","0x5175868","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1914e64","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b5 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1914e64","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b5 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:46.469Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x2e","0x1914e64","0x0","0x24a70545","0x1914e64","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x1914e64","0x0","0x24a70545","0x1914e64","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1914e64","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b5 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u5910\u0517\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1914e64","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b5 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u5910\u0517\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:46.476Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x2e","0x1914e64","0x0","0x24a7068d","0x1914e64","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x1914e64","0x0","0x24a7068d","0x1914e64","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1914e64","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x1914e64","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b5 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1914e64","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b5 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:46.481Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:46.482Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:46.482Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:46.482Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:46.482Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x51f312c","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x51f312c","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x51ed948","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51f312c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 b0 0f 95 50 84 d4 dc 01 06 0a 00 00 00 b0 0f 95 50 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51f312c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 b0 0f 95 50 84 d4 dc 01 06 0a 00 00 00 b0 0f 95 50 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:46.768Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x7ffd","0x62","0x51f312c","0x24a705d5","0x17eea90","0x51ed944","0x51ed8a0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x51f312c","0x24a705d5","0x17eea90","0x51ed944","0x51ed8a0","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51f312c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 b0 0f 95 50 84 d4 dc 01 06 0a 00 00 00 b0 0f 95 50 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51f312c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 b0 0f 95 50 84 d4 dc 01 06 0a 00 00 00 b0 0f 95 50 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:46.777Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x62","0x51f312c","0x0","0x24a70545","0x51f312c","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51f312c","0x0","0x24a70545","0x51f312c","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51f312c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 b0 0f 95 50 84 d4 dc 01 06 0a 00 00 00 b0 0f 95 50 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u9e84\u0126\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51f312c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 b0 0f 95 50 84 d4 dc 01 06 0a 00 00 00 b0 0f 95 50 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u9e84\u0126\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:46.789Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x62","0x51f312c","0x0","0x24a7068d","0x51f312c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51f312c","0x0","0x24a7068d","0x51f312c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51f312c","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51f312c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 b0 0f 95 50 84 d4 dc 01 06 0a 00 00 00 b0 0f 95 50 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51f312c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 b0 0f 95 50 84 d4 dc 01 06 0a 00 00 00 b0 0f 95 50 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:46.797Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:46.797Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:46.798Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:46.798Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:46.798Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x183abf4","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x183abf4","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x17f1e08","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x183abf4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d3 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 b0 0f 95 50 84 d4 dc 01 06 0a 00 00 00 b0 0f 95 50 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x183abf4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d3 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 b0 0f 95 50 84 d4 dc 01 06 0a 00 00 00 b0 0f 95 50 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:46.810Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x7ffe","0x62","0x183abf4","0x24a705d5","0x17eea90","0x17f1e04","0x17f1d60","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x183abf4","0x24a705d5","0x17eea90","0x17f1e04","0x17f1d60","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x183abf4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d3 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 b0 0f 95 50 84 d4 dc 01 06 0a 00 00 00 b0 0f 95 50 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x183abf4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d3 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 b0 0f 95 50 84 d4 dc 01 06 0a 00 00 00 b0 0f 95 50 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:46.816Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x62","0x183abf4","0x0","0x24a70545","0x183abf4","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x183abf4","0x0","0x24a70545","0x183abf4","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x183abf4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d3 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 b0 0f 95 50 84 d4 dc 01 06 0a 00 00 00 b0 0f 95 50 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u9e84\u0126\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u1e08\u017f\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x183abf4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d3 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 b0 0f 95 50 84 d4 dc 01 06 0a 00 00 00 b0 0f 95 50 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u9e84\u0126\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\u1e08\u017f\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:46.822Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x62","0x183abf4","0x0","0x24a7068d","0x183abf4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x183abf4","0x0","0x24a7068d","0x183abf4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x183abf4","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x183abf4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d3 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 b0 0f 95 50 84 d4 dc 01 06 0a 00 00 00 b0 0f 95 50 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x183abf4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d3 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 b0 0f 95 50 84 d4 dc 01 06 0a 00 00 00 b0 0f 95 50 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:46.828Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:46.829Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:46.829Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:46.829Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:46.829Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x51c021c","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x51c021c","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x8dda60","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51c021c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d3 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x51c021c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d3 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:46.899Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x1","0x2e","0x51c021c","0x24a705d5","0x17eea90","0x8dda5c","0x8dd9b8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x51c021c","0x24a705d5","0x17eea90","0x8dda5c","0x8dd9b8","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51c021c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d3 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x51c021c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d3 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:46.905Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x2e","0x51c021c","0x0","0x24a70545","0x51c021c","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x51c021c","0x0","0x24a70545","0x51c021c","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51c021c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d3 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u2b0c\u021f\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x51c021c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d3 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u2b0c\u021f\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:46.913Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x183df0c","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x183df0c","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51e9940","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b6 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 e2 b3 50 84 d4 dc 01 06 0a 00 00 00 50 e2 b3 50 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b6 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 e2 b3 50 84 d4 dc 01 06 0a 00 00 00 50 e2 b3 50 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:46.922Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x1915f6c","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x1915f6c","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x5174d80","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1915f6c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d2 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x1915f6c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d2 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:46.935Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x2e","0x51c021c","0x0","0x24a7068d","0x51c021c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x51c021c","0x0","0x24a7068d","0x51c021c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51c021c","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x51c021c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d3 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x51c021c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d3 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:46.940Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:46.940Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:46.940Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:46.941Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:46.941Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x7ffd","0x62","0x183df0c","0x27e700f5","0x23eefb0","0x51e993c","0x51e9898","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x183df0c","0x27e700f5","0x23eefb0","0x51e993c","0x51e9898","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b6 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 e2 b3 50 84 d4 dc 01 06 0a 00 00 00 50 e2 b3 50 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b6 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 e2 b3 50 84 d4 dc 01 06 0a 00 00 00 50 e2 b3 50 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:46.946Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x62","0x183df0c","0x0","0x27e70065","0x183df0c","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x183df0c","0x0","0x27e70065","0x183df0c","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b6 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 e2 b3 50 84 d4 dc 01 06 0a 00 00 00 50 e2 b3 50 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u9940\u051e\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b6 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 e2 b3 50 84 d4 dc 01 06 0a 00 00 00 50 e2 b3 50 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u9940\u051e\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:46.953Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x62","0x183df0c","0x0","0x27e701ad","0x183df0c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x183df0c","0x0","0x27e701ad","0x183df0c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x183df0c","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b6 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 e2 b3 50 84 d4 dc 01 06 0a 00 00 00 50 e2 b3 50 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b6 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 e2 b3 50 84 d4 dc 01 06 0a 00 00 00 50 e2 b3 50 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:46.960Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:46.961Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:46.961Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:46.961Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:46.961Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x1","0x2e","0x1915f6c","0x255c009d","0x85efc8","0x5174d7c","0x5174cd8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x1915f6c","0x255c009d","0x85efc8","0x5174d7c","0x5174cd8","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1915f6c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d2 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1915f6c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d2 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:46.970Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x1915f6c","0x0","0x255c000d","0x1915f6c","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x1915f6c","0x0","0x255c000d","0x1915f6c","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1915f6c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d2 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u4d80\u0517\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1915f6c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d2 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u4d80\u0517\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:46.982Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x1915f6c","0x0","0x255c0055","0x1915f6c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x1915f6c","0x0","0x255c0055","0x1915f6c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1915f6c","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x1915f6c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d2 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1915f6c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d2 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:46.987Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:46.987Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:46.988Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:46.988Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:46.988Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x523467c","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x523467c","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x5172508","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x523467c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b6 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x523467c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b6 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:47.000Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x2","0x2e","0x523467c","0x255c009d","0x85efc8","0x5172504","0x5172460","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x523467c","0x255c009d","0x85efc8","0x5172504","0x5172460","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x523467c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b6 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x523467c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b6 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:47.007Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x523467c","0x0","0x255c000d","0x523467c","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x523467c","0x0","0x255c000d","0x523467c","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x523467c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b6 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u2508\u0517\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x523467c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b6 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u2508\u0517\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:47.014Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x523467c","0x0","0x255c0055","0x523467c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x523467c","0x0","0x255c0055","0x523467c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x523467c","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x523467c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b6 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x523467c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b6 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:47.019Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:47.019Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:47.019Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:47.019Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:47.019Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.LocalCallbackDataReceived","address":"0x9beea5","ecx":"0x5db38eab","esp":"0x666fd48","args":["0x2209b38","0x666fd60","0x7508fcc9","0x2209b38","0x7508fcb0","0x666fdbc","0x772482ae","0x2209b38","0x5c608d67","0x0"],"stack":["0x9bf6b0","0x2209b38","0x666fd60","0x7508fcc9","0x2209b38","0x7508fcb0","0x666fdbc","0x772482ae","0x2209b38","0x5c608d67","0x0","0x0","0x2209b38","0x0","0x0","0x0","0x0","0x0"],"candidates":[],"time":"2026-04-25T07:22:47.041Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x18356cc","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x18356cc","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51ed948","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18356cc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d4 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 f0 5a e1 50 84 d4 dc 01 06 0a 00 00 00 f0 5a e1 50 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18356cc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d4 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 f0 5a e1 50 84 d4 dc 01 06 0a 00 00 00 f0 5a e1 50 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:47.258Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffd","0x62","0x18356cc","0x255c009d","0x85efc8","0x51ed944","0x51ed8a0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18356cc","0x255c009d","0x85efc8","0x51ed944","0x51ed8a0","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18356cc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d4 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 f0 5a e1 50 84 d4 dc 01 06 0a 00 00 00 f0 5a e1 50 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18356cc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d4 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 f0 5a e1 50 84 d4 dc 01 06 0a 00 00 00 f0 5a e1 50 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:47.264Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x18356cc","0x0","0x255c000d","0x18356cc","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18356cc","0x0","0x255c000d","0x18356cc","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18356cc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d4 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 f0 5a e1 50 84 d4 dc 01 06 0a 00 00 00 f0 5a e1 50 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18356cc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d4 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 f0 5a e1 50 84 d4 dc 01 06 0a 00 00 00 f0 5a e1 50 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:47.271Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x18356cc","0x0","0x255c0055","0x18356cc","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18356cc","0x0","0x255c0055","0x18356cc","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18356cc","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18356cc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d4 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 f0 5a e1 50 84 d4 dc 01 06 0a 00 00 00 f0 5a e1 50 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18356cc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d4 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 f0 5a e1 50 84 d4 dc 01 06 0a 00 00 00 f0 5a e1 50 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:47.277Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:47.277Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:47.277Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:47.277Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:47.278Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x18b25fc","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x18b25fc","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51e70c8","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d5 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 f0 5a e1 50 84 d4 dc 01 06 0a 00 00 00 f0 5a e1 50 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d5 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 f0 5a e1 50 84 d4 dc 01 06 0a 00 00 00 f0 5a e1 50 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:47.287Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffe","0x62","0x18b25fc","0x255c009d","0x85efc8","0x51e70c4","0x51e7020","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x18b25fc","0x255c009d","0x85efc8","0x51e70c4","0x51e7020","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d5 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 f0 5a e1 50 84 d4 dc 01 06 0a 00 00 00 f0 5a e1 50 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d5 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 f0 5a e1 50 84 d4 dc 01 06 0a 00 00 00 f0 5a e1 50 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:47.293Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x18b25fc","0x0","0x255c000d","0x18b25fc","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18b25fc","0x0","0x255c000d","0x18b25fc","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d5 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 f0 5a e1 50 84 d4 dc 01 06 0a 00 00 00 f0 5a e1 50 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u70c8\u051e\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d5 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 f0 5a e1 50 84 d4 dc 01 06 0a 00 00 00 f0 5a e1 50 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u70c8\u051e\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:47.300Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x18b25fc","0x0","0x255c0055","0x18b25fc","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18b25fc","0x0","0x255c0055","0x18b25fc","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b25fc","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d5 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 f0 5a e1 50 84 d4 dc 01 06 0a 00 00 00 f0 5a e1 50 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d5 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 f0 5a e1 50 84 d4 dc 01 06 0a 00 00 00 f0 5a e1 50 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:47.305Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x21f3604","0x1","0x1","0x1","0x168","0x51f312c","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x21f3604","0x1","0x1","0x1","0x168","0x51f312c","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51ed948","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":360,"ptr":"0x51f312c","utf16":"\u0001\u013a","hex":"01 00 3a 01 00 00 00 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 02 00 00 30 75 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 6a 00 00 00 40 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 d0 fc 42 09 1f 01 00 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 00 00 01 00 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 76 00 00 00 4c 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 50 03 43 09 20 01 00 02 00 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":360,"ptr":"0x51f312c","utf16":"\u0001\u013a","hex":"01 00 3a 01 00 00 00 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 02 00 00 30 75 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 6a 00 00 00 40 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 d0 fc 42 09 1f 01 00 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 00 00 01 00 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 76 00 00 00 4c 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 50 03 43 09 20 01 00 02 00 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:47.315Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:47.315Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:47.315Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:47.315Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:47.316Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x1","0x168","0x51f312c","0x27e700f5","0x23eefb0","0x51ed944","0x51ed8a0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x168","0x51f312c","0x27e700f5","0x23eefb0","0x51ed944","0x51ed8a0","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":360,"ptr":"0x51f312c","utf16":"\u0001\u013a","hex":"01 00 3a 01 00 00 00 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 02 00 00 30 75 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 6a 00 00 00 40 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 d0 fc 42 09 1f 01 00 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 00 00 01 00 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 76 00 00 00 4c 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 50 03 43 09 20 01 00 02 00 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":360,"ptr":"0x51f312c","utf16":"\u0001\u013a","hex":"01 00 3a 01 00 00 00 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 02 00 00 30 75 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 6a 00 00 00 40 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 d0 fc 42 09 1f 01 00 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 00 00 01 00 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 76 00 00 00 4c 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 50 03 43 09 20 01 00 02 00 00 00"}],"time":"2026-04-25T07:22:47.323Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x168","0x51f312c","0x0","0x27e70065","0x51f312c","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x168","0x51f312c","0x0","0x27e70065","0x51f312c","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":360,"ptr":"0x51f312c","utf16":"\u0001\u013a","hex":"01 00 3a 01 00 00 00 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 02 00 00 30 75 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 6a 00 00 00 40 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 d0 fc 42 09 1f 01 00 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 00 00 01 00 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 76 00 00 00 4c 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 50 03 43 09 20 01 00 02 00 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u3604\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":360,"ptr":"0x51f312c","utf16":"\u0001\u013a","hex":"01 00 3a 01 00 00 00 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 02 00 00 30 75 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 6a 00 00 00 40 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 d0 fc 42 09 1f 01 00 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 00 00 01 00 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 76 00 00 00 4c 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 50 03 43 09 20 01 00 02 00 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u3604\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:47.334Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x168","0x51f312c","0x0","0x27e701ad","0x51f312c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x168","0x51f312c","0x0","0x27e701ad","0x51f312c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51f312c","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":360,"ptr":"0x51f312c","utf16":"\u0001\u013a","hex":"01 00 3a 01 00 00 00 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 02 00 00 30 75 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 6a 00 00 00 40 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 d0 fc 42 09 1f 01 00 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 00 00 01 00 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 76 00 00 00 4c 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 50 03 43 09 20 01 00 02 00 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":360,"ptr":"0x51f312c","utf16":"\u0001\u013a","hex":"01 00 3a 01 00 00 00 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 02 00 00 30 75 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 6a 00 00 00 40 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 d0 fc 42 09 1f 01 00 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 00 00 01 00 00 00 17 01 00 01 01 00 01 00 00 00 65 00 71 00 0a 00 00 00 00 00 08 76 00 00 00 4c 00 00 81 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 01 50 03 43 09 20 01 00 02 00 00 00"}],"time":"2026-04-25T07:22:47.341Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x17eea90","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x18378dc","0x206","0x6","0x8f5cac","0x17eec54"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x18378dc","0x206","0x6","0x8f5cac","0x17eec54","0x76fc4ef5","0x9c1b20","0x51ea4d0","0x6","0xd7b576c4","0x8f5cac","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18378dc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d4 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18378dc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d4 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8f5cac","utf16":"\u8a80\x88\u0010","hex":"80 8a 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888a80","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:47.348Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x182019c","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x182019c","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51e70c8","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x182019c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d5 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x182019c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d5 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:47.355Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:47.356Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:47.356Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:47.356Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:47.356Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x17eea20","args":["0x1","0x1","0x1","0x2e","0x18378dc","0x24a705d5","0x17eea90","0x51ea4cc","0x51ea428","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18378dc","0x24a705d5","0x17eea90","0x51ea4cc","0x51ea428","0x7700459e","0x17eea28","0x17eeadc","0x17eec44","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18378dc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d4 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18378dc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d4 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:47.362Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x17ee9d8","args":["0x1","0x1200","0x2e","0x18378dc","0x0","0x24a70545","0x18378dc","0x9effe8","0x1","0x17eea8c"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18378dc","0x0","0x24a70545","0x18378dc","0x9effe8","0x1","0x17eea8c","0x17eea20","0x1","0x1","0x17eea80","0x9cf3a6","0xffffffff","0x17eea8c"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18378dc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d4 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\ua4d0\u051e\u0006","hex":"54"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18378dc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d4 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eea8c","utf16":"\ueab8�\u0a0f\u0538\u47ac\u021f\u0001","hex":"b8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x17eeab8","utf16":"\uec54�\u4ef5\u76fc\u1b20\x9c\ua4d0\u051e\u0006","hex":"54"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eea80","utf16":"\uec44�\uf8b7\x9c\u0002","hex":"44"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x17eec44","utf16":"\uec8c�\uee30\u76ff\u89f0\ua1cd\u0002","hex":"8c"}],"time":"2026-04-25T07:22:47.368Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x17ee974","args":["0x1","0x2e","0x18378dc","0x0","0x24a7068d","0x18378dc","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18378dc","0x0","0x24a7068d","0x18378dc","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18378dc","0x9effe8","0x17eea1c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18378dc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d4 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18378dc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d4 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:47.373Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:47.373Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:47.373Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:47.373Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:47.373Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x1","0x2e","0x182019c","0x255c009d","0x85efc8","0x51e70c4","0x51e7020","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x182019c","0x255c009d","0x85efc8","0x51e70c4","0x51e7020","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x182019c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d5 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x182019c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d5 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:47.380Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x182019c","0x0","0x255c000d","0x182019c","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x182019c","0x0","0x255c000d","0x182019c","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x182019c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d5 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u2b0c\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u70c8\u051e\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x182019c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d5 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u2b0c\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u70c8\u051e\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:47.389Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x182019c","0x0","0x255c0055","0x182019c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x182019c","0x0","0x255c0055","0x182019c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x182019c","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x182019c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d5 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x182019c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d5 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:47.395Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:47.395Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:47.395Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:47.396Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:47.396Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x1269e84","0x1","0x1","0x7ffb","0x2c2","0x18b25fc","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffb","0x2c2","0x18b25fc","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51e70c8","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":706,"ptr":"0x18b25fc","utf16":"\u0001\u0294","hex":"01 00 94 02 00 00 00 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 40 1f 50 80 08 a6 00 00 00 40 00 00 91 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 18 00 00 00 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 00 00 28 00 00 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 53 f2 9a 00 6a 00 0a 00 5f f1 00 00 01 6c 00 00 00 41 00 6e 00 20 00 69 00 6e 00 74 00 65 00 72 00 6e 00 61 00 6c 00 20 00 65 00 72 00 72 00 6f 00 72 00 20 00 6f 00 63 00 63 00 75 00 72 00 72 00 65 00 64 00 20 00 69 00 6e 00 20 00 74 00 68 00 65 00 20 00 42 00 61 00 73 00 65 00 20 00 52 00 75 00 6e 00 74 00 69 00 6d 00 65 00 20 00 4f 00 62 00 6a 00 65 00 63 00 74 00 00 00 1f 00 00 50 80 01 00 01 00 01 00 30 75 00 00 a7 9b b8 8f 32 13 9f 4e 80 6b db 39 c9 c8 f8 b7 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 40 1f 50 80 08 be 00 00 00 4c 00 00 91 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 18 00 00 00 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 00 00 34 00 00 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 53 f2 9a 00 6b 00 0a 00 87 3a 00 00 01 6c 00 00 00 41 00 6e 00 20 00 69 00 6e 00 74 00 65 00 72 00 6e 00 61 00 6c 00 20 00 65 00 72 00 72 00 6f 00 72 00 20 00 6f 00 63 00 63 00 75 00 72 00 72 00 65 00 64 00 20 00 69 00 6e 00 20 00 74 00 68 00 65 00 20 00 42 00 61 00 73 00 65 00 20 00 52 00 75 00 6e 00 74 00 69 00 6d 00 65 00 20 00 4f 00 62 00 6a 00 65 00 63 00 74 00 00 00 20 00 00 50 80 01 00 01 00 01 00 30 75 00 00"},{"source":"args.byref","sizeIndex":4,"ptrIndex":5,"size":706,"ptr":"0x2940001","utf16":"\u6600\u6900\u6c00\u6500\u2000\u7300\u7900\u7300\u7400\u6500\u6d00\u2000\u7300\u7500\u6300\u6300\u6500\u7300\u7300\u6600\u7500\u6c00\u6c00\u7900\u2000\u7700\u7200\u6f00\u7400\u6500\u2000\u6100\u2000\u7200\u6500\u6400\u7500\u6e00\u6400\u6100\u6e00\u7400\u2000\u6300\u6f00\u7000\u7900\u2000\u6f00\u6600\u2000\u7400\u6800\u6500\u2000\u6900\u6e00\u6600\u6f00\u7200\u6d00\u6100\u7400\u6900\u6f00\u6e00\u2e00\u0d00\u0a00\u5400\u6800\u6900\u7300\u2000\u7700\u6100\u7300\u2000\u6400\u6f00\u6e00\u6500\u2000\u6200\u6500\u6300\u6100\u7500\u7300\u6500\u2000\u7400\u6800\u6500\u2000\u6600","hex":"00 66 00 69 00 6c 00 65 00 20 00 73 00 79 00 73 00 74 00 65 00 6d 00 20 00 73 00 75 00 63 00 63 00 65 00 73 00 73 00 66 00 75 00 6c 00 6c 00 79 00 20 00 77 00 72 00 6f 00 74 00 65 00 20 00 61 00 20 00 72 00 65 00 64 00 75 00 6e 00 64 00 61 00 6e 00 74 00 20 00 63 00 6f 00 70 00 79 00 20 00 6f 00 66 00 20 00 74 00 68 00 65 00 20 00 69 00 6e 00 66 00 6f 00 72 00 6d 00 61 00 74 00 69 00 6f 00 6e 00 2e 00 0d 00 0a 00 54 00 68 00 69 00 73 00 20 00 77 00 61 00 73 00 20 00 64 00 6f 00 6e 00 65 00 20 00 62 00 65 00 63 00 61 00 75 00 73 00 65 00 20 00 74 00 68 00 65 00 20 00 66 00 69 00 6c 00 65 00 20 00 73 00 79 00 73 00 74 00 65 00 6d 00 20 00 65 00 6e 00 63 00 6f 00 75 00 6e 00 74 00 65 00 72 00 65 00 64 00 20 00 61 00 20 00 66 00 61 00 69 00 6c 00 75 00 72 00 65 00 20 00 6f 00 6e 00 20 00 61 00 20 00 6d 00 65 00 6d 00 62 00 65 00 72 00 20 00 6f 00 66 00 20 00 74 00 68 00 65 00 20 00 66 00 61 00 75 00 6c 00 74 00 2d 00 74 00 6f 00 6c 00 65 00 72 00 61 00 6e 00 74 00 20 00 76 00 6f 00 6c 00 75 00 6d 00 65 00 2c 00 20 00 62 00 75 00 74 00 20 00 77 00 61 00 73 00 20 00 6e 00 6f 00 74 00 20 00 61 00 62 00 6c 00 65 00 20 00 74 00 6f 00 20 00 72 00 65 00 61 00 73 00 73 00 69 00 67 00 6e 00 20 00 74 00 68 00 65 00 20 00 66 00 61 00 69 00 6c 00 69 00 6e 00 67 00 20 00 61 00 72 00 65 00 61 00 20 00 6f 00 66 00 20 00 74 00 68 00 65 00 20 00 64 00 65 00 76 00 69 00 63 00 65 00 2e 00 0d 00 0a 00 00 00 00 00 58 01 01 00 7b 00 4d 00 61 00 63 00 68 00 69 00 6e 00 65 00 20 00 54 00 79 00 70 00 65 00 20 00 4d 00 69 00 73 00 6d 00 61 00 74 00 63 00 68 00 7d 00 0d 00 0a 00 54 00 68 00 65 00 20 00 69 00 6d 00 61 00 67 00 65 00 20 00 66 00 69 00 6c 00 65 00 20 00 25 00 68 00 73 00 20 00 69 00 73 00 20 00 76 00 61 00 6c 00 69 00 64 00 2c 00 20 00 62 00 75 00 74 00 20 00 69 00 73 00 20 00 66 00 6f 00 72 00 20 00 61 00 20 00 6d 00 61 00 63 00 68 00 69 00 6e 00 65 00 20 00 74 00 79 00 70 00 65 00 20 00 6f 00 74 00 68 00 65 00 72 00 20 00 74 00 68 00 61 00 6e 00 20 00 74 00 68 00 65 00 20 00 63 00 75 00 72 00 72 00 65 00 6e 00 74 00 20 00 6d 00 61 00 63 00 68 00 69 00 6e 00 65 00 2e 00 20 00 53 00 65 00 6c 00 65"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":706,"ptr":"0x18b25fc","utf16":"\u0001\u0294","hex":"01 00 94 02 00 00 00 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 40 1f 50 80 08 a6 00 00 00 40 00 00 91 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 18 00 00 00 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 00 00 28 00 00 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 53 f2 9a 00 6a 00 0a 00 5f f1 00 00 01 6c 00 00 00 41 00 6e 00 20 00 69 00 6e 00 74 00 65 00 72 00 6e 00 61 00 6c 00 20 00 65 00 72 00 72 00 6f 00 72 00 20 00 6f 00 63 00 63 00 75 00 72 00 72 00 65 00 64 00 20 00 69 00 6e 00 20 00 74 00 68 00 65 00 20 00 42 00 61 00 73 00 65 00 20 00 52 00 75 00 6e 00 74 00 69 00 6d 00 65 00 20 00 4f 00 62 00 6a 00 65 00 63 00 74 00 00 00 1f 00 00 50 80 01 00 01 00 01 00 30 75 00 00 a7 9b b8 8f 32 13 9f 4e 80 6b db 39 c9 c8 f8 b7 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 40 1f 50 80 08 be 00 00 00 4c 00 00 91 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 18 00 00 00 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 00 00 34 00 00 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 53 f2 9a 00 6b 00 0a 00 87 3a 00 00 01 6c 00 00 00 41 00 6e 00 20 00 69 00 6e 00 74 00 65 00 72 00 6e 00 61 00 6c 00 20 00 65 00 72 00 72 00 6f 00 72 00 20 00 6f 00 63 00 63 00 75 00 72 00 72 00 65 00 64 00 20 00 69 00 6e 00 20 00 74 00 68 00 65 00 20 00 42 00 61 00 73 00 65 00 20 00 52 00 75 00 6e 00 74 00 69 00 6d 00 65 00 20 00 4f 00 62 00 6a 00 65 00 63 00 74 00 00 00 20 00 00 50 80 01 00 01 00 01 00 30 75 00 00"},{"source":"stack.byref","sizeIndex":5,"ptrIndex":6,"size":706,"ptr":"0x2940001","utf16":"\u6600\u6900\u6c00\u6500\u2000\u7300\u7900\u7300\u7400\u6500\u6d00\u2000\u7300\u7500\u6300\u6300\u6500\u7300\u7300\u6600\u7500\u6c00\u6c00\u7900\u2000\u7700\u7200\u6f00\u7400\u6500\u2000\u6100\u2000\u7200\u6500\u6400\u7500\u6e00\u6400\u6100\u6e00\u7400\u2000\u6300\u6f00\u7000\u7900\u2000\u6f00\u6600\u2000\u7400\u6800\u6500\u2000\u6900\u6e00\u6600\u6f00\u7200\u6d00\u6100\u7400\u6900\u6f00\u6e00\u2e00\u0d00\u0a00\u5400\u6800\u6900\u7300\u2000\u7700\u6100\u7300\u2000\u6400\u6f00\u6e00\u6500\u2000\u6200\u6500\u6300\u6100\u7500\u7300\u6500\u2000\u7400\u6800\u6500\u2000\u6600","hex":"00 66 00 69 00 6c 00 65 00 20 00 73 00 79 00 73 00 74 00 65 00 6d 00 20 00 73 00 75 00 63 00 63 00 65 00 73 00 73 00 66 00 75 00 6c 00 6c 00 79 00 20 00 77 00 72 00 6f 00 74 00 65 00 20 00 61 00 20 00 72 00 65 00 64 00 75 00 6e 00 64 00 61 00 6e 00 74 00 20 00 63 00 6f 00 70 00 79 00 20 00 6f 00 66 00 20 00 74 00 68 00 65 00 20 00 69 00 6e 00 66 00 6f 00 72 00 6d 00 61 00 74 00 69 00 6f 00 6e 00 2e 00 0d 00 0a 00 54 00 68 00 69 00 73 00 20 00 77 00 61 00 73 00 20 00 64 00 6f 00 6e 00 65 00 20 00 62 00 65 00 63 00 61 00 75 00 73 00 65 00 20 00 74 00 68 00 65 00 20 00 66 00 69 00 6c 00 65 00 20 00 73 00 79 00 73 00 74 00 65 00 6d 00 20 00 65 00 6e 00 63 00 6f 00 75 00 6e 00 74 00 65 00 72 00 65 00 64 00 20 00 61 00 20 00 66 00 61 00 69 00 6c 00 75 00 72 00 65 00 20 00 6f 00 6e 00 20 00 61 00 20 00 6d 00 65 00 6d 00 62 00 65 00 72 00 20 00 6f 00 66 00 20 00 74 00 68 00 65 00 20 00 66 00 61 00 75 00 6c 00 74 00 2d 00 74 00 6f 00 6c 00 65 00 72 00 61 00 6e 00 74 00 20 00 76 00 6f 00 6c 00 75 00 6d 00 65 00 2c 00 20 00 62 00 75 00 74 00 20 00 77 00 61 00 73 00 20 00 6e 00 6f 00 74 00 20 00 61 00 62 00 6c 00 65 00 20 00 74 00 6f 00 20 00 72 00 65 00 61 00 73 00 73 00 69 00 67 00 6e 00 20 00 74 00 68 00 65 00 20 00 66 00 61 00 69 00 6c 00 69 00 6e 00 67 00 20 00 61 00 72 00 65 00 61 00 20 00 6f 00 66 00 20 00 74 00 68 00 65 00 20 00 64 00 65 00 76 00 69 00 63 00 65 00 2e 00 0d 00 0a 00 00 00 00 00 58 01 01 00 7b 00 4d 00 61 00 63 00 68 00 69 00 6e 00 65 00 20 00 54 00 79 00 70 00 65 00 20 00 4d 00 69 00 73 00 6d 00 61 00 74 00 63 00 68 00 7d 00 0d 00 0a 00 54 00 68 00 65 00 20 00 69 00 6d 00 61 00 67 00 65 00 20 00 66 00 69 00 6c 00 65 00 20 00 25 00 68 00 73 00 20 00 69 00 73 00 20 00 76 00 61 00 6c 00 69 00 64 00 2c 00 20 00 62 00 75 00 74 00 20 00 69 00 73 00 20 00 66 00 6f 00 72 00 20 00 61 00 20 00 6d 00 61 00 63 00 68 00 69 00 6e 00 65 00 20 00 74 00 79 00 70 00 65 00 20 00 6f 00 74 00 68 00 65 00 72 00 20 00 74 00 68 00 61 00 6e 00 20 00 74 00 68 00 65 00 20 00 63 00 75 00 72 00 72 00 65 00 6e 00 74 00 20 00 6d 00 61 00 63 00 68 00 69 00 6e 00 65 00 2e 00 20 00 53 00 65 00 6c 00 65"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:47.414Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffb","0x2c2","0x18b25fc","0x255c009d","0x85efc8","0x51e70c4","0x51e7020","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffb","0x2c2","0x18b25fc","0x255c009d","0x85efc8","0x51e70c4","0x51e7020","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":706,"ptr":"0x18b25fc","utf16":"\u0001\u0294","hex":"01 00 94 02 00 00 00 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 40 1f 50 80 08 a6 00 00 00 40 00 00 91 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 18 00 00 00 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 00 00 28 00 00 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 53 f2 9a 00 6a 00 0a 00 5f f1 00 00 01 6c 00 00 00 41 00 6e 00 20 00 69 00 6e 00 74 00 65 00 72 00 6e 00 61 00 6c 00 20 00 65 00 72 00 72 00 6f 00 72 00 20 00 6f 00 63 00 63 00 75 00 72 00 72 00 65 00 64 00 20 00 69 00 6e 00 20 00 74 00 68 00 65 00 20 00 42 00 61 00 73 00 65 00 20 00 52 00 75 00 6e 00 74 00 69 00 6d 00 65 00 20 00 4f 00 62 00 6a 00 65 00 63 00 74 00 00 00 1f 00 00 50 80 01 00 01 00 01 00 30 75 00 00 a7 9b b8 8f 32 13 9f 4e 80 6b db 39 c9 c8 f8 b7 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 40 1f 50 80 08 be 00 00 00 4c 00 00 91 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 18 00 00 00 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 00 00 34 00 00 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 53 f2 9a 00 6b 00 0a 00 87 3a 00 00 01 6c 00 00 00 41 00 6e 00 20 00 69 00 6e 00 74 00 65 00 72 00 6e 00 61 00 6c 00 20 00 65 00 72 00 72 00 6f 00 72 00 20 00 6f 00 63 00 63 00 75 00 72 00 72 00 65 00 64 00 20 00 69 00 6e 00 20 00 74 00 68 00 65 00 20 00 42 00 61 00 73 00 65 00 20 00 52 00 75 00 6e 00 74 00 69 00 6d 00 65 00 20 00 4f 00 62 00 6a 00 65 00 63 00 74 00 00 00 20 00 00 50 80 01 00 01 00 01 00 30 75 00 00"},{"source":"args.byref","sizeIndex":3,"ptrIndex":4,"size":706,"ptr":"0x2940001","utf16":"\u6600\u6900\u6c00\u6500\u2000\u7300\u7900\u7300\u7400\u6500\u6d00\u2000\u7300\u7500\u6300\u6300\u6500\u7300\u7300\u6600\u7500\u6c00\u6c00\u7900\u2000\u7700\u7200\u6f00\u7400\u6500\u2000\u6100\u2000\u7200\u6500\u6400\u7500\u6e00\u6400\u6100\u6e00\u7400\u2000\u6300\u6f00\u7000\u7900\u2000\u6f00\u6600\u2000\u7400\u6800\u6500\u2000\u6900\u6e00\u6600\u6f00\u7200\u6d00\u6100\u7400\u6900\u6f00\u6e00\u2e00\u0d00\u0a00\u5400\u6800\u6900\u7300\u2000\u7700\u6100\u7300\u2000\u6400\u6f00\u6e00\u6500\u2000\u6200\u6500\u6300\u6100\u7500\u7300\u6500\u2000\u7400\u6800\u6500\u2000\u6600","hex":"00 66 00 69 00 6c 00 65 00 20 00 73 00 79 00 73 00 74 00 65 00 6d 00 20 00 73 00 75 00 63 00 63 00 65 00 73 00 73 00 66 00 75 00 6c 00 6c 00 79 00 20 00 77 00 72 00 6f 00 74 00 65 00 20 00 61 00 20 00 72 00 65 00 64 00 75 00 6e 00 64 00 61 00 6e 00 74 00 20 00 63 00 6f 00 70 00 79 00 20 00 6f 00 66 00 20 00 74 00 68 00 65 00 20 00 69 00 6e 00 66 00 6f 00 72 00 6d 00 61 00 74 00 69 00 6f 00 6e 00 2e 00 0d 00 0a 00 54 00 68 00 69 00 73 00 20 00 77 00 61 00 73 00 20 00 64 00 6f 00 6e 00 65 00 20 00 62 00 65 00 63 00 61 00 75 00 73 00 65 00 20 00 74 00 68 00 65 00 20 00 66 00 69 00 6c 00 65 00 20 00 73 00 79 00 73 00 74 00 65 00 6d 00 20 00 65 00 6e 00 63 00 6f 00 75 00 6e 00 74 00 65 00 72 00 65 00 64 00 20 00 61 00 20 00 66 00 61 00 69 00 6c 00 75 00 72 00 65 00 20 00 6f 00 6e 00 20 00 61 00 20 00 6d 00 65 00 6d 00 62 00 65 00 72 00 20 00 6f 00 66 00 20 00 74 00 68 00 65 00 20 00 66 00 61 00 75 00 6c 00 74 00 2d 00 74 00 6f 00 6c 00 65 00 72 00 61 00 6e 00 74 00 20 00 76 00 6f 00 6c 00 75 00 6d 00 65 00 2c 00 20 00 62 00 75 00 74 00 20 00 77 00 61 00 73 00 20 00 6e 00 6f 00 74 00 20 00 61 00 62 00 6c 00 65 00 20 00 74 00 6f 00 20 00 72 00 65 00 61 00 73 00 73 00 69 00 67 00 6e 00 20 00 74 00 68 00 65 00 20 00 66 00 61 00 69 00 6c 00 69 00 6e 00 67 00 20 00 61 00 72 00 65 00 61 00 20 00 6f 00 66 00 20 00 74 00 68 00 65 00 20 00 64 00 65 00 76 00 69 00 63 00 65 00 2e 00 0d 00 0a 00 00 00 00 00 58 01 01 00 7b 00 4d 00 61 00 63 00 68 00 69 00 6e 00 65 00 20 00 54 00 79 00 70 00 65 00 20 00 4d 00 69 00 73 00 6d 00 61 00 74 00 63 00 68 00 7d 00 0d 00 0a 00 54 00 68 00 65 00 20 00 69 00 6d 00 61 00 67 00 65 00 20 00 66 00 69 00 6c 00 65 00 20 00 25 00 68 00 73 00 20 00 69 00 73 00 20 00 76 00 61 00 6c 00 69 00 64 00 2c 00 20 00 62 00 75 00 74 00 20 00 69 00 73 00 20 00 66 00 6f 00 72 00 20 00 61 00 20 00 6d 00 61 00 63 00 68 00 69 00 6e 00 65 00 20 00 74 00 79 00 70 00 65 00 20 00 6f 00 74 00 68 00 65 00 72 00 20 00 74 00 68 00 61 00 6e 00 20 00 74 00 68 00 65 00 20 00 63 00 75 00 72 00 72 00 65 00 6e 00 74 00 20 00 6d 00 61 00 63 00 68 00 69 00 6e 00 65 00 2e 00 20 00 53 00 65 00 6c 00 65"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":706,"ptr":"0x18b25fc","utf16":"\u0001\u0294","hex":"01 00 94 02 00 00 00 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 40 1f 50 80 08 a6 00 00 00 40 00 00 91 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 18 00 00 00 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 00 00 28 00 00 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 53 f2 9a 00 6a 00 0a 00 5f f1 00 00 01 6c 00 00 00 41 00 6e 00 20 00 69 00 6e 00 74 00 65 00 72 00 6e 00 61 00 6c 00 20 00 65 00 72 00 72 00 6f 00 72 00 20 00 6f 00 63 00 63 00 75 00 72 00 72 00 65 00 64 00 20 00 69 00 6e 00 20 00 74 00 68 00 65 00 20 00 42 00 61 00 73 00 65 00 20 00 52 00 75 00 6e 00 74 00 69 00 6d 00 65 00 20 00 4f 00 62 00 6a 00 65 00 63 00 74 00 00 00 1f 00 00 50 80 01 00 01 00 01 00 30 75 00 00 a7 9b b8 8f 32 13 9f 4e 80 6b db 39 c9 c8 f8 b7 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 40 1f 50 80 08 be 00 00 00 4c 00 00 91 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 18 00 00 00 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 00 00 34 00 00 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 53 f2 9a 00 6b 00 0a 00 87 3a 00 00 01 6c 00 00 00 41 00 6e 00 20 00 69 00 6e 00 74 00 65 00 72 00 6e 00 61 00 6c 00 20 00 65 00 72 00 72 00 6f 00 72 00 20 00 6f 00 63 00 63 00 75 00 72 00 72 00 65 00 64 00 20 00 69 00 6e 00 20 00 74 00 68 00 65 00 20 00 42 00 61 00 73 00 65 00 20 00 52 00 75 00 6e 00 74 00 69 00 6d 00 65 00 20 00 4f 00 62 00 6a 00 65 00 63 00 74 00 00 00 20 00 00 50 80 01 00 01 00 01 00 30 75 00 00"},{"source":"stack.byref","sizeIndex":4,"ptrIndex":5,"size":706,"ptr":"0x2940001","utf16":"\u6600\u6900\u6c00\u6500\u2000\u7300\u7900\u7300\u7400\u6500\u6d00\u2000\u7300\u7500\u6300\u6300\u6500\u7300\u7300\u6600\u7500\u6c00\u6c00\u7900\u2000\u7700\u7200\u6f00\u7400\u6500\u2000\u6100\u2000\u7200\u6500\u6400\u7500\u6e00\u6400\u6100\u6e00\u7400\u2000\u6300\u6f00\u7000\u7900\u2000\u6f00\u6600\u2000\u7400\u6800\u6500\u2000\u6900\u6e00\u6600\u6f00\u7200\u6d00\u6100\u7400\u6900\u6f00\u6e00\u2e00\u0d00\u0a00\u5400\u6800\u6900\u7300\u2000\u7700\u6100\u7300\u2000\u6400\u6f00\u6e00\u6500\u2000\u6200\u6500\u6300\u6100\u7500\u7300\u6500\u2000\u7400\u6800\u6500\u2000\u6600","hex":"00 66 00 69 00 6c 00 65 00 20 00 73 00 79 00 73 00 74 00 65 00 6d 00 20 00 73 00 75 00 63 00 63 00 65 00 73 00 73 00 66 00 75 00 6c 00 6c 00 79 00 20 00 77 00 72 00 6f 00 74 00 65 00 20 00 61 00 20 00 72 00 65 00 64 00 75 00 6e 00 64 00 61 00 6e 00 74 00 20 00 63 00 6f 00 70 00 79 00 20 00 6f 00 66 00 20 00 74 00 68 00 65 00 20 00 69 00 6e 00 66 00 6f 00 72 00 6d 00 61 00 74 00 69 00 6f 00 6e 00 2e 00 0d 00 0a 00 54 00 68 00 69 00 73 00 20 00 77 00 61 00 73 00 20 00 64 00 6f 00 6e 00 65 00 20 00 62 00 65 00 63 00 61 00 75 00 73 00 65 00 20 00 74 00 68 00 65 00 20 00 66 00 69 00 6c 00 65 00 20 00 73 00 79 00 73 00 74 00 65 00 6d 00 20 00 65 00 6e 00 63 00 6f 00 75 00 6e 00 74 00 65 00 72 00 65 00 64 00 20 00 61 00 20 00 66 00 61 00 69 00 6c 00 75 00 72 00 65 00 20 00 6f 00 6e 00 20 00 61 00 20 00 6d 00 65 00 6d 00 62 00 65 00 72 00 20 00 6f 00 66 00 20 00 74 00 68 00 65 00 20 00 66 00 61 00 75 00 6c 00 74 00 2d 00 74 00 6f 00 6c 00 65 00 72 00 61 00 6e 00 74 00 20 00 76 00 6f 00 6c 00 75 00 6d 00 65 00 2c 00 20 00 62 00 75 00 74 00 20 00 77 00 61 00 73 00 20 00 6e 00 6f 00 74 00 20 00 61 00 62 00 6c 00 65 00 20 00 74 00 6f 00 20 00 72 00 65 00 61 00 73 00 73 00 69 00 67 00 6e 00 20 00 74 00 68 00 65 00 20 00 66 00 61 00 69 00 6c 00 69 00 6e 00 67 00 20 00 61 00 72 00 65 00 61 00 20 00 6f 00 66 00 20 00 74 00 68 00 65 00 20 00 64 00 65 00 76 00 69 00 63 00 65 00 2e 00 0d 00 0a 00 00 00 00 00 58 01 01 00 7b 00 4d 00 61 00 63 00 68 00 69 00 6e 00 65 00 20 00 54 00 79 00 70 00 65 00 20 00 4d 00 69 00 73 00 6d 00 61 00 74 00 63 00 68 00 7d 00 0d 00 0a 00 54 00 68 00 65 00 20 00 69 00 6d 00 61 00 67 00 65 00 20 00 66 00 69 00 6c 00 65 00 20 00 25 00 68 00 73 00 20 00 69 00 73 00 20 00 76 00 61 00 6c 00 69 00 64 00 2c 00 20 00 62 00 75 00 74 00 20 00 69 00 73 00 20 00 66 00 6f 00 72 00 20 00 61 00 20 00 6d 00 61 00 63 00 68 00 69 00 6e 00 65 00 20 00 74 00 79 00 70 00 65 00 20 00 6f 00 74 00 68 00 65 00 72 00 20 00 74 00 68 00 61 00 6e 00 20 00 74 00 68 00 65 00 20 00 63 00 75 00 72 00 72 00 65 00 6e 00 74 00 20 00 6d 00 61 00 63 00 68 00 69 00 6e 00 65 00 2e 00 20 00 53 00 65 00 6c 00 65"}],"time":"2026-04-25T07:22:47.428Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2c2","0x18b25fc","0x0","0x255c000d","0x18b25fc","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2c2","0x18b25fc","0x0","0x255c000d","0x18b25fc","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":706,"ptr":"0x18b25fc","utf16":"\u0001\u0294","hex":"01 00 94 02 00 00 00 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 40 1f 50 80 08 a6 00 00 00 40 00 00 91 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 18 00 00 00 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 00 00 28 00 00 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 53 f2 9a 00 6a 00 0a 00 5f f1 00 00 01 6c 00 00 00 41 00 6e 00 20 00 69 00 6e 00 74 00 65 00 72 00 6e 00 61 00 6c 00 20 00 65 00 72 00 72 00 6f 00 72 00 20 00 6f 00 63 00 63 00 75 00 72 00 72 00 65 00 64 00 20 00 69 00 6e 00 20 00 74 00 68 00 65 00 20 00 42 00 61 00 73 00 65 00 20 00 52 00 75 00 6e 00 74 00 69 00 6d 00 65 00 20 00 4f 00 62 00 6a 00 65 00 63 00 74 00 00 00 1f 00 00 50 80 01 00 01 00 01 00 30 75 00 00 a7 9b b8 8f 32 13 9f 4e 80 6b db 39 c9 c8 f8 b7 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 40 1f 50 80 08 be 00 00 00 4c 00 00 91 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 18 00 00 00 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 00 00 34 00 00 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 53 f2 9a 00 6b 00 0a 00 87 3a 00 00 01 6c 00 00 00 41 00 6e 00 20 00 69 00 6e 00 74 00 65 00 72 00 6e 00 61 00 6c 00 20 00 65 00 72 00 72 00 6f 00 72 00 20 00 6f 00 63 00 63 00 75 00 72 00 72 00 65 00 64 00 20 00 69 00 6e 00 20 00 74 00 68 00 65 00 20 00 42 00 61 00 73 00 65 00 20 00 52 00 75 00 6e 00 74 00 69 00 6d 00 65 00 20 00 4f 00 62 00 6a 00 65 00 63 00 74 00 00 00 20 00 00 50 80 01 00 01 00 01 00 30 75 00 00"},{"source":"args.byref","sizeIndex":2,"ptrIndex":3,"size":706,"ptr":"0x2940001","utf16":"\u6600\u6900\u6c00\u6500\u2000\u7300\u7900\u7300\u7400\u6500\u6d00\u2000\u7300\u7500\u6300\u6300\u6500\u7300\u7300\u6600\u7500\u6c00\u6c00\u7900\u2000\u7700\u7200\u6f00\u7400\u6500\u2000\u6100\u2000\u7200\u6500\u6400\u7500\u6e00\u6400\u6100\u6e00\u7400\u2000\u6300\u6f00\u7000\u7900\u2000\u6f00\u6600\u2000\u7400\u6800\u6500\u2000\u6900\u6e00\u6600\u6f00\u7200\u6d00\u6100\u7400\u6900\u6f00\u6e00\u2e00\u0d00\u0a00\u5400\u6800\u6900\u7300\u2000\u7700\u6100\u7300\u2000\u6400\u6f00\u6e00\u6500\u2000\u6200\u6500\u6300\u6100\u7500\u7300\u6500\u2000\u7400\u6800\u6500\u2000\u6600","hex":"00 66 00 69 00 6c 00 65 00 20 00 73 00 79 00 73 00 74 00 65 00 6d 00 20 00 73 00 75 00 63 00 63 00 65 00 73 00 73 00 66 00 75 00 6c 00 6c 00 79 00 20 00 77 00 72 00 6f 00 74 00 65 00 20 00 61 00 20 00 72 00 65 00 64 00 75 00 6e 00 64 00 61 00 6e 00 74 00 20 00 63 00 6f 00 70 00 79 00 20 00 6f 00 66 00 20 00 74 00 68 00 65 00 20 00 69 00 6e 00 66 00 6f 00 72 00 6d 00 61 00 74 00 69 00 6f 00 6e 00 2e 00 0d 00 0a 00 54 00 68 00 69 00 73 00 20 00 77 00 61 00 73 00 20 00 64 00 6f 00 6e 00 65 00 20 00 62 00 65 00 63 00 61 00 75 00 73 00 65 00 20 00 74 00 68 00 65 00 20 00 66 00 69 00 6c 00 65 00 20 00 73 00 79 00 73 00 74 00 65 00 6d 00 20 00 65 00 6e 00 63 00 6f 00 75 00 6e 00 74 00 65 00 72 00 65 00 64 00 20 00 61 00 20 00 66 00 61 00 69 00 6c 00 75 00 72 00 65 00 20 00 6f 00 6e 00 20 00 61 00 20 00 6d 00 65 00 6d 00 62 00 65 00 72 00 20 00 6f 00 66 00 20 00 74 00 68 00 65 00 20 00 66 00 61 00 75 00 6c 00 74 00 2d 00 74 00 6f 00 6c 00 65 00 72 00 61 00 6e 00 74 00 20 00 76 00 6f 00 6c 00 75 00 6d 00 65 00 2c 00 20 00 62 00 75 00 74 00 20 00 77 00 61 00 73 00 20 00 6e 00 6f 00 74 00 20 00 61 00 62 00 6c 00 65 00 20 00 74 00 6f 00 20 00 72 00 65 00 61 00 73 00 73 00 69 00 67 00 6e 00 20 00 74 00 68 00 65 00 20 00 66 00 61 00 69 00 6c 00 69 00 6e 00 67 00 20 00 61 00 72 00 65 00 61 00 20 00 6f 00 66 00 20 00 74 00 68 00 65 00 20 00 64 00 65 00 76 00 69 00 63 00 65 00 2e 00 0d 00 0a 00 00 00 00 00 58 01 01 00 7b 00 4d 00 61 00 63 00 68 00 69 00 6e 00 65 00 20 00 54 00 79 00 70 00 65 00 20 00 4d 00 69 00 73 00 6d 00 61 00 74 00 63 00 68 00 7d 00 0d 00 0a 00 54 00 68 00 65 00 20 00 69 00 6d 00 61 00 67 00 65 00 20 00 66 00 69 00 6c 00 65 00 20 00 25 00 68 00 73 00 20 00 69 00 73 00 20 00 76 00 61 00 6c 00 69 00 64 00 2c 00 20 00 62 00 75 00 74 00 20 00 69 00 73 00 20 00 66 00 6f 00 72 00 20 00 61 00 20 00 6d 00 61 00 63 00 68 00 69 00 6e 00 65 00 20 00 74 00 79 00 70 00 65 00 20 00 6f 00 74 00 68 00 65 00 72 00 20 00 74 00 68 00 61 00 6e 00 20 00 74 00 68 00 65 00 20 00 63 00 75 00 72 00 72 00 65 00 6e 00 74 00 20 00 6d 00 61 00 63 00 68 00 69 00 6e 00 65 00 2e 00 20 00 53 00 65 00 6c 00 65"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u70c8\u051e\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":706,"ptr":"0x18b25fc","utf16":"\u0001\u0294","hex":"01 00 94 02 00 00 00 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 40 1f 50 80 08 a6 00 00 00 40 00 00 91 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 18 00 00 00 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 00 00 28 00 00 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 53 f2 9a 00 6a 00 0a 00 5f f1 00 00 01 6c 00 00 00 41 00 6e 00 20 00 69 00 6e 00 74 00 65 00 72 00 6e 00 61 00 6c 00 20 00 65 00 72 00 72 00 6f 00 72 00 20 00 6f 00 63 00 63 00 75 00 72 00 72 00 65 00 64 00 20 00 69 00 6e 00 20 00 74 00 68 00 65 00 20 00 42 00 61 00 73 00 65 00 20 00 52 00 75 00 6e 00 74 00 69 00 6d 00 65 00 20 00 4f 00 62 00 6a 00 65 00 63 00 74 00 00 00 1f 00 00 50 80 01 00 01 00 01 00 30 75 00 00 a7 9b b8 8f 32 13 9f 4e 80 6b db 39 c9 c8 f8 b7 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 40 1f 50 80 08 be 00 00 00 4c 00 00 91 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 18 00 00 00 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 00 00 34 00 00 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 53 f2 9a 00 6b 00 0a 00 87 3a 00 00 01 6c 00 00 00 41 00 6e 00 20 00 69 00 6e 00 74 00 65 00 72 00 6e 00 61 00 6c 00 20 00 65 00 72 00 72 00 6f 00 72 00 20 00 6f 00 63 00 63 00 75 00 72 00 72 00 65 00 64 00 20 00 69 00 6e 00 20 00 74 00 68 00 65 00 20 00 42 00 61 00 73 00 65 00 20 00 52 00 75 00 6e 00 74 00 69 00 6d 00 65 00 20 00 4f 00 62 00 6a 00 65 00 63 00 74 00 00 00 20 00 00 50 80 01 00 01 00 01 00 30 75 00 00"},{"source":"stack.byref","sizeIndex":3,"ptrIndex":4,"size":706,"ptr":"0x2940001","utf16":"\u6600\u6900\u6c00\u6500\u2000\u7300\u7900\u7300\u7400\u6500\u6d00\u2000\u7300\u7500\u6300\u6300\u6500\u7300\u7300\u6600\u7500\u6c00\u6c00\u7900\u2000\u7700\u7200\u6f00\u7400\u6500\u2000\u6100\u2000\u7200\u6500\u6400\u7500\u6e00\u6400\u6100\u6e00\u7400\u2000\u6300\u6f00\u7000\u7900\u2000\u6f00\u6600\u2000\u7400\u6800\u6500\u2000\u6900\u6e00\u6600\u6f00\u7200\u6d00\u6100\u7400\u6900\u6f00\u6e00\u2e00\u0d00\u0a00\u5400\u6800\u6900\u7300\u2000\u7700\u6100\u7300\u2000\u6400\u6f00\u6e00\u6500\u2000\u6200\u6500\u6300\u6100\u7500\u7300\u6500\u2000\u7400\u6800\u6500\u2000\u6600","hex":"00 66 00 69 00 6c 00 65 00 20 00 73 00 79 00 73 00 74 00 65 00 6d 00 20 00 73 00 75 00 63 00 63 00 65 00 73 00 73 00 66 00 75 00 6c 00 6c 00 79 00 20 00 77 00 72 00 6f 00 74 00 65 00 20 00 61 00 20 00 72 00 65 00 64 00 75 00 6e 00 64 00 61 00 6e 00 74 00 20 00 63 00 6f 00 70 00 79 00 20 00 6f 00 66 00 20 00 74 00 68 00 65 00 20 00 69 00 6e 00 66 00 6f 00 72 00 6d 00 61 00 74 00 69 00 6f 00 6e 00 2e 00 0d 00 0a 00 54 00 68 00 69 00 73 00 20 00 77 00 61 00 73 00 20 00 64 00 6f 00 6e 00 65 00 20 00 62 00 65 00 63 00 61 00 75 00 73 00 65 00 20 00 74 00 68 00 65 00 20 00 66 00 69 00 6c 00 65 00 20 00 73 00 79 00 73 00 74 00 65 00 6d 00 20 00 65 00 6e 00 63 00 6f 00 75 00 6e 00 74 00 65 00 72 00 65 00 64 00 20 00 61 00 20 00 66 00 61 00 69 00 6c 00 75 00 72 00 65 00 20 00 6f 00 6e 00 20 00 61 00 20 00 6d 00 65 00 6d 00 62 00 65 00 72 00 20 00 6f 00 66 00 20 00 74 00 68 00 65 00 20 00 66 00 61 00 75 00 6c 00 74 00 2d 00 74 00 6f 00 6c 00 65 00 72 00 61 00 6e 00 74 00 20 00 76 00 6f 00 6c 00 75 00 6d 00 65 00 2c 00 20 00 62 00 75 00 74 00 20 00 77 00 61 00 73 00 20 00 6e 00 6f 00 74 00 20 00 61 00 62 00 6c 00 65 00 20 00 74 00 6f 00 20 00 72 00 65 00 61 00 73 00 73 00 69 00 67 00 6e 00 20 00 74 00 68 00 65 00 20 00 66 00 61 00 69 00 6c 00 69 00 6e 00 67 00 20 00 61 00 72 00 65 00 61 00 20 00 6f 00 66 00 20 00 74 00 68 00 65 00 20 00 64 00 65 00 76 00 69 00 63 00 65 00 2e 00 0d 00 0a 00 00 00 00 00 58 01 01 00 7b 00 4d 00 61 00 63 00 68 00 69 00 6e 00 65 00 20 00 54 00 79 00 70 00 65 00 20 00 4d 00 69 00 73 00 6d 00 61 00 74 00 63 00 68 00 7d 00 0d 00 0a 00 54 00 68 00 65 00 20 00 69 00 6d 00 61 00 67 00 65 00 20 00 66 00 69 00 6c 00 65 00 20 00 25 00 68 00 73 00 20 00 69 00 73 00 20 00 76 00 61 00 6c 00 69 00 64 00 2c 00 20 00 62 00 75 00 74 00 20 00 69 00 73 00 20 00 66 00 6f 00 72 00 20 00 61 00 20 00 6d 00 61 00 63 00 68 00 69 00 6e 00 65 00 20 00 74 00 79 00 70 00 65 00 20 00 6f 00 74 00 68 00 65 00 72 00 20 00 74 00 68 00 61 00 6e 00 20 00 74 00 68 00 65 00 20 00 63 00 75 00 72 00 72 00 65 00 6e 00 74 00 20 00 6d 00 61 00 63 00 68 00 69 00 6e 00 65 00 2e 00 20 00 53 00 65 00 6c 00 65"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u70c8\u051e\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:47.443Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2c2","0x18b25fc","0x0","0x255c0055","0x18b25fc","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2c2","0x18b25fc","0x0","0x255c0055","0x18b25fc","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b25fc","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":706,"ptr":"0x18b25fc","utf16":"\u0001\u0294","hex":"01 00 94 02 00 00 00 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 40 1f 50 80 08 a6 00 00 00 40 00 00 91 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 18 00 00 00 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 00 00 28 00 00 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 53 f2 9a 00 6a 00 0a 00 5f f1 00 00 01 6c 00 00 00 41 00 6e 00 20 00 69 00 6e 00 74 00 65 00 72 00 6e 00 61 00 6c 00 20 00 65 00 72 00 72 00 6f 00 72 00 20 00 6f 00 63 00 63 00 75 00 72 00 72 00 65 00 64 00 20 00 69 00 6e 00 20 00 74 00 68 00 65 00 20 00 42 00 61 00 73 00 65 00 20 00 52 00 75 00 6e 00 74 00 69 00 6d 00 65 00 20 00 4f 00 62 00 6a 00 65 00 63 00 74 00 00 00 1f 00 00 50 80 01 00 01 00 01 00 30 75 00 00 a7 9b b8 8f 32 13 9f 4e 80 6b db 39 c9 c8 f8 b7 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 40 1f 50 80 08 be 00 00 00 4c 00 00 91 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 18 00 00 00 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 00 00 34 00 00 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 53 f2 9a 00 6b 00 0a 00 87 3a 00 00 01 6c 00 00 00 41 00 6e 00 20 00 69 00 6e 00 74 00 65 00 72 00 6e 00 61 00 6c 00 20 00 65 00 72 00 72 00 6f 00 72 00 20 00 6f 00 63 00 63 00 75 00 72 00 72 00 65 00 64 00 20 00 69 00 6e 00 20 00 74 00 68 00 65 00 20 00 42 00 61 00 73 00 65 00 20 00 52 00 75 00 6e 00 74 00 69 00 6d 00 65 00 20 00 4f 00 62 00 6a 00 65 00 63 00 74 00 00 00 20 00 00 50 80 01 00 01 00 01 00 30 75 00 00"},{"source":"args.byref","sizeIndex":1,"ptrIndex":2,"size":706,"ptr":"0x2940001","utf16":"\u6600\u6900\u6c00\u6500\u2000\u7300\u7900\u7300\u7400\u6500\u6d00\u2000\u7300\u7500\u6300\u6300\u6500\u7300\u7300\u6600\u7500\u6c00\u6c00\u7900\u2000\u7700\u7200\u6f00\u7400\u6500\u2000\u6100\u2000\u7200\u6500\u6400\u7500\u6e00\u6400\u6100\u6e00\u7400\u2000\u6300\u6f00\u7000\u7900\u2000\u6f00\u6600\u2000\u7400\u6800\u6500\u2000\u6900\u6e00\u6600\u6f00\u7200\u6d00\u6100\u7400\u6900\u6f00\u6e00\u2e00\u0d00\u0a00\u5400\u6800\u6900\u7300\u2000\u7700\u6100\u7300\u2000\u6400\u6f00\u6e00\u6500\u2000\u6200\u6500\u6300\u6100\u7500\u7300\u6500\u2000\u7400\u6800\u6500\u2000\u6600","hex":"00 66 00 69 00 6c 00 65 00 20 00 73 00 79 00 73 00 74 00 65 00 6d 00 20 00 73 00 75 00 63 00 63 00 65 00 73 00 73 00 66 00 75 00 6c 00 6c 00 79 00 20 00 77 00 72 00 6f 00 74 00 65 00 20 00 61 00 20 00 72 00 65 00 64 00 75 00 6e 00 64 00 61 00 6e 00 74 00 20 00 63 00 6f 00 70 00 79 00 20 00 6f 00 66 00 20 00 74 00 68 00 65 00 20 00 69 00 6e 00 66 00 6f 00 72 00 6d 00 61 00 74 00 69 00 6f 00 6e 00 2e 00 0d 00 0a 00 54 00 68 00 69 00 73 00 20 00 77 00 61 00 73 00 20 00 64 00 6f 00 6e 00 65 00 20 00 62 00 65 00 63 00 61 00 75 00 73 00 65 00 20 00 74 00 68 00 65 00 20 00 66 00 69 00 6c 00 65 00 20 00 73 00 79 00 73 00 74 00 65 00 6d 00 20 00 65 00 6e 00 63 00 6f 00 75 00 6e 00 74 00 65 00 72 00 65 00 64 00 20 00 61 00 20 00 66 00 61 00 69 00 6c 00 75 00 72 00 65 00 20 00 6f 00 6e 00 20 00 61 00 20 00 6d 00 65 00 6d 00 62 00 65 00 72 00 20 00 6f 00 66 00 20 00 74 00 68 00 65 00 20 00 66 00 61 00 75 00 6c 00 74 00 2d 00 74 00 6f 00 6c 00 65 00 72 00 61 00 6e 00 74 00 20 00 76 00 6f 00 6c 00 75 00 6d 00 65 00 2c 00 20 00 62 00 75 00 74 00 20 00 77 00 61 00 73 00 20 00 6e 00 6f 00 74 00 20 00 61 00 62 00 6c 00 65 00 20 00 74 00 6f 00 20 00 72 00 65 00 61 00 73 00 73 00 69 00 67 00 6e 00 20 00 74 00 68 00 65 00 20 00 66 00 61 00 69 00 6c 00 69 00 6e 00 67 00 20 00 61 00 72 00 65 00 61 00 20 00 6f 00 66 00 20 00 74 00 68 00 65 00 20 00 64 00 65 00 76 00 69 00 63 00 65 00 2e 00 0d 00 0a 00 00 00 00 00 58 01 01 00 7b 00 4d 00 61 00 63 00 68 00 69 00 6e 00 65 00 20 00 54 00 79 00 70 00 65 00 20 00 4d 00 69 00 73 00 6d 00 61 00 74 00 63 00 68 00 7d 00 0d 00 0a 00 54 00 68 00 65 00 20 00 69 00 6d 00 61 00 67 00 65 00 20 00 66 00 69 00 6c 00 65 00 20 00 25 00 68 00 73 00 20 00 69 00 73 00 20 00 76 00 61 00 6c 00 69 00 64 00 2c 00 20 00 62 00 75 00 74 00 20 00 69 00 73 00 20 00 66 00 6f 00 72 00 20 00 61 00 20 00 6d 00 61 00 63 00 68 00 69 00 6e 00 65 00 20 00 74 00 79 00 70 00 65 00 20 00 6f 00 74 00 68 00 65 00 72 00 20 00 74 00 68 00 61 00 6e 00 20 00 74 00 68 00 65 00 20 00 63 00 75 00 72 00 72 00 65 00 6e 00 74 00 20 00 6d 00 61 00 63 00 68 00 69 00 6e 00 65 00 2e 00 20 00 53 00 65 00 6c 00 65"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":706,"ptr":"0x18b25fc","utf16":"\u0001\u0294","hex":"01 00 94 02 00 00 00 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 40 1f 50 80 08 a6 00 00 00 40 00 00 91 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 18 00 00 00 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 00 00 28 00 00 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 44 00 65 00 70 00 6c 00 6f 00 79 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 53 f2 9a 00 6a 00 0a 00 5f f1 00 00 01 6c 00 00 00 41 00 6e 00 20 00 69 00 6e 00 74 00 65 00 72 00 6e 00 61 00 6c 00 20 00 65 00 72 00 72 00 6f 00 72 00 20 00 6f 00 63 00 63 00 75 00 72 00 72 00 65 00 64 00 20 00 69 00 6e 00 20 00 74 00 68 00 65 00 20 00 42 00 61 00 73 00 65 00 20 00 52 00 75 00 6e 00 74 00 69 00 6d 00 65 00 20 00 4f 00 62 00 6a 00 65 00 63 00 74 00 00 00 1f 00 00 50 80 01 00 01 00 01 00 30 75 00 00 a7 9b b8 8f 32 13 9f 4e 80 6b db 39 c9 c8 f8 b7 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 40 1f 50 80 08 be 00 00 00 4c 00 00 91 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 2e 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 18 00 00 00 44 00 65 00 76 00 50 00 6c 00 61 00 74 00 66 00 6f 00 72 00 6d 00 00 00 34 00 00 00 47 00 52 00 2e 00 54 00 69 00 6d 00 65 00 4f 00 66 00 4c 00 61 00 73 00 74 00 43 00 6f 00 6e 00 66 00 69 00 67 00 43 00 68 00 61 00 6e 00 67 00 65 00 00 00 02 00 00 00 00 00 01 01 00 01 00 01 00 53 f2 9a 00 6b 00 0a 00 87 3a 00 00 01 6c 00 00 00 41 00 6e 00 20 00 69 00 6e 00 74 00 65 00 72 00 6e 00 61 00 6c 00 20 00 65 00 72 00 72 00 6f 00 72 00 20 00 6f 00 63 00 63 00 75 00 72 00 72 00 65 00 64 00 20 00 69 00 6e 00 20 00 74 00 68 00 65 00 20 00 42 00 61 00 73 00 65 00 20 00 52 00 75 00 6e 00 74 00 69 00 6d 00 65 00 20 00 4f 00 62 00 6a 00 65 00 63 00 74 00 00 00 20 00 00 50 80 01 00 01 00 01 00 30 75 00 00"},{"source":"stack.byref","sizeIndex":2,"ptrIndex":3,"size":706,"ptr":"0x2940001","utf16":"\u6600\u6900\u6c00\u6500\u2000\u7300\u7900\u7300\u7400\u6500\u6d00\u2000\u7300\u7500\u6300\u6300\u6500\u7300\u7300\u6600\u7500\u6c00\u6c00\u7900\u2000\u7700\u7200\u6f00\u7400\u6500\u2000\u6100\u2000\u7200\u6500\u6400\u7500\u6e00\u6400\u6100\u6e00\u7400\u2000\u6300\u6f00\u7000\u7900\u2000\u6f00\u6600\u2000\u7400\u6800\u6500\u2000\u6900\u6e00\u6600\u6f00\u7200\u6d00\u6100\u7400\u6900\u6f00\u6e00\u2e00\u0d00\u0a00\u5400\u6800\u6900\u7300\u2000\u7700\u6100\u7300\u2000\u6400\u6f00\u6e00\u6500\u2000\u6200\u6500\u6300\u6100\u7500\u7300\u6500\u2000\u7400\u6800\u6500\u2000\u6600","hex":"00 66 00 69 00 6c 00 65 00 20 00 73 00 79 00 73 00 74 00 65 00 6d 00 20 00 73 00 75 00 63 00 63 00 65 00 73 00 73 00 66 00 75 00 6c 00 6c 00 79 00 20 00 77 00 72 00 6f 00 74 00 65 00 20 00 61 00 20 00 72 00 65 00 64 00 75 00 6e 00 64 00 61 00 6e 00 74 00 20 00 63 00 6f 00 70 00 79 00 20 00 6f 00 66 00 20 00 74 00 68 00 65 00 20 00 69 00 6e 00 66 00 6f 00 72 00 6d 00 61 00 74 00 69 00 6f 00 6e 00 2e 00 0d 00 0a 00 54 00 68 00 69 00 73 00 20 00 77 00 61 00 73 00 20 00 64 00 6f 00 6e 00 65 00 20 00 62 00 65 00 63 00 61 00 75 00 73 00 65 00 20 00 74 00 68 00 65 00 20 00 66 00 69 00 6c 00 65 00 20 00 73 00 79 00 73 00 74 00 65 00 6d 00 20 00 65 00 6e 00 63 00 6f 00 75 00 6e 00 74 00 65 00 72 00 65 00 64 00 20 00 61 00 20 00 66 00 61 00 69 00 6c 00 75 00 72 00 65 00 20 00 6f 00 6e 00 20 00 61 00 20 00 6d 00 65 00 6d 00 62 00 65 00 72 00 20 00 6f 00 66 00 20 00 74 00 68 00 65 00 20 00 66 00 61 00 75 00 6c 00 74 00 2d 00 74 00 6f 00 6c 00 65 00 72 00 61 00 6e 00 74 00 20 00 76 00 6f 00 6c 00 75 00 6d 00 65 00 2c 00 20 00 62 00 75 00 74 00 20 00 77 00 61 00 73 00 20 00 6e 00 6f 00 74 00 20 00 61 00 62 00 6c 00 65 00 20 00 74 00 6f 00 20 00 72 00 65 00 61 00 73 00 73 00 69 00 67 00 6e 00 20 00 74 00 68 00 65 00 20 00 66 00 61 00 69 00 6c 00 69 00 6e 00 67 00 20 00 61 00 72 00 65 00 61 00 20 00 6f 00 66 00 20 00 74 00 68 00 65 00 20 00 64 00 65 00 76 00 69 00 63 00 65 00 2e 00 0d 00 0a 00 00 00 00 00 58 01 01 00 7b 00 4d 00 61 00 63 00 68 00 69 00 6e 00 65 00 20 00 54 00 79 00 70 00 65 00 20 00 4d 00 69 00 73 00 6d 00 61 00 74 00 63 00 68 00 7d 00 0d 00 0a 00 54 00 68 00 65 00 20 00 69 00 6d 00 61 00 67 00 65 00 20 00 66 00 69 00 6c 00 65 00 20 00 25 00 68 00 73 00 20 00 69 00 73 00 20 00 76 00 61 00 6c 00 69 00 64 00 2c 00 20 00 62 00 75 00 74 00 20 00 69 00 73 00 20 00 66 00 6f 00 72 00 20 00 61 00 20 00 6d 00 61 00 63 00 68 00 69 00 6e 00 65 00 20 00 74 00 79 00 70 00 65 00 20 00 6f 00 74 00 68 00 65 00 72 00 20 00 74 00 68 00 61 00 6e 00 20 00 74 00 68 00 65 00 20 00 63 00 75 00 72 00 72 00 65 00 6e 00 74 00 20 00 6d 00 61 00 63 00 68 00 69 00 6e 00 65 00 2e 00 20 00 53 00 65 00 6c 00 65"}],"time":"2026-04-25T07:22:47.457Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x183df0c","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x183df0c","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51e9940","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b7 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 2d 00 51 84 d4 dc 01 06 0a 00 00 00 90 2d 00 51 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b7 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 2d 00 51 84 d4 dc 01 06 0a 00 00 00 90 2d 00 51 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:47.465Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x62be9b0","args":["0x21f3604","0x1","0x1","0x2","0x55","0x18847f4","0x206","0x6","0x900184","0x62beb74"],"stack":["0x76ffedd8","0x21f3604","0x1","0x1","0x2","0x55","0x18847f4","0x206","0x6","0x900184","0x62beb74","0x76fc4ef5","0x9c1b20","0x19248f0","0x6","0xd0e071e4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":85,"ptr":"0x18847f4","utf16":"\u0001'","hex":"01 00 27 00 00 00 00 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 1f 01 00 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 00 00 05 00 36 d7 02 00 9b 00 0a 00 3e da 00 00 03 00 00 00"},{"source":"args.byref","sizeIndex":4,"ptrIndex":5,"size":85,"ptr":"0x270001","utf16":"","hex":"00 00 00 a4 c8 01 00 00 00 00 00 7b 03 00 00 1c 00 00 00 cc ac 01 00 1f 00 00 00 01 00 00 00 a4 53 00 00 4a 00 00 00 46 00 00 00 f0 53 00 00 01 00 00 00 01 00 00 00 30 54 00 00 46 00 00 00 42 00 00 00 78 54 00 00 01 00 00 00 01 00 00 00 b0 54 00 00 56 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":85,"ptr":"0x18847f4","utf16":"\u0001'","hex":"01 00 27 00 00 00 00 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 1f 01 00 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 00 00 05 00 36 d7 02 00 9b 00 0a 00 3e da 00 00 03 00 00 00"},{"source":"stack.byref","sizeIndex":5,"ptrIndex":6,"size":85,"ptr":"0x270001","utf16":"","hex":"00 00 00 a4 c8 01 00 00 00 00 00 7b 03 00 00 1c 00 00 00 cc ac 01 00 1f 00 00 00 01 00 00 00 a4 53 00 00 4a 00 00 00 46 00 00 00 f0 53 00 00 01 00 00 00 01 00 00 00 30 54 00 00 46 00 00 00 42 00 00 00 78 54 00 00 01 00 00 00 01 00 00 00 b0 54 00 00 56 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:47.477Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:47.478Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:47.478Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:47.478Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:47.478Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x7ffd","0x62","0x183df0c","0x27e700f5","0x23eefb0","0x51e993c","0x51e9898","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x183df0c","0x27e700f5","0x23eefb0","0x51e993c","0x51e9898","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b7 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 2d 00 51 84 d4 dc 01 06 0a 00 00 00 90 2d 00 51 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b7 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 2d 00 51 84 d4 dc 01 06 0a 00 00 00 90 2d 00 51 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:47.484Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x62","0x183df0c","0x0","0x27e70065","0x183df0c","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x183df0c","0x0","0x27e70065","0x183df0c","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b7 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 2d 00 51 84 d4 dc 01 06 0a 00 00 00 90 2d 00 51 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u9940\u051e\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b7 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 2d 00 51 84 d4 dc 01 06 0a 00 00 00 90 2d 00 51 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u9940\u051e\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:47.491Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x62","0x183df0c","0x0","0x27e701ad","0x183df0c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x183df0c","0x0","0x27e701ad","0x183df0c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x183df0c","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b7 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 2d 00 51 84 d4 dc 01 06 0a 00 00 00 90 2d 00 51 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x183df0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b7 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 2d 00 51 84 d4 dc 01 06 0a 00 00 00 90 2d 00 51 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:47.496Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x1269e84","0x1","0x1","0x7ffb","0x97","0x1914e64","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffb","0x97","0x1914e64","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x5175910","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":151,"ptr":"0x1914e64","utf16":"\u0001i","hex":"01 00 69 00 00 00 00 00 00 00 d6 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 32 01 00 02 00 00 00 a7 9b b8 8f 32 13 9f 4e 80 6b db 39 c9 c8 f8 b7 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 01 00 00 00 03 00 00 00 c0 00 20 2e 5a 46 28 d3 dc 01 06 0a 00 00 00 00 a0 41 c3 55 bd dc 01 00 00 02 00 00 00 03 00 00 00 c0 00 80 18 5b 46 28 d3 dc 01 06 0a 00 00 00 80 c1 75 25 a5 bd dc 01 00 00"},{"source":"args.byref","sizeIndex":4,"ptrIndex":5,"size":151,"ptr":"0x690001","utf16":"","hex":"00 00 00 14 00 79 00 79 00 79 00 79 00 27 00 74 5e 27 00 4d 00 27 00 08 67 27 00 64 00 27 00 e5 65 27 00 20 00 64 00 64 00 64 00 64 00 00 00 16 00 79 00 79 00 79 00 79 00 27 00 74 5e 27 00 4d 00 4d 00 27 00 08 67 27 00 64 00 64 00 27 00 e5 65 27 00 20 00 64 00 64 00 64 00 64 00 00 00 0a 00 79 00 79 00 79 00 79 00 74 5e 4d 00 4d 00 4d 00 64 00 e5 65 00 00 0f 00 79 00 79 00 79 00 79 00 74 5e 4d 00 4d 00 4d 00 64 00 e5 65 20 00 64 00 64 00 64 00 64 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":151,"ptr":"0x1914e64","utf16":"\u0001i","hex":"01 00 69 00 00 00 00 00 00 00 d6 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 32 01 00 02 00 00 00 a7 9b b8 8f 32 13 9f 4e 80 6b db 39 c9 c8 f8 b7 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 01 00 00 00 03 00 00 00 c0 00 20 2e 5a 46 28 d3 dc 01 06 0a 00 00 00 00 a0 41 c3 55 bd dc 01 00 00 02 00 00 00 03 00 00 00 c0 00 80 18 5b 46 28 d3 dc 01 06 0a 00 00 00 80 c1 75 25 a5 bd dc 01 00 00"},{"source":"stack.byref","sizeIndex":5,"ptrIndex":6,"size":151,"ptr":"0x690001","utf16":"","hex":"00 00 00 14 00 79 00 79 00 79 00 79 00 27 00 74 5e 27 00 4d 00 27 00 08 67 27 00 64 00 27 00 e5 65 27 00 20 00 64 00 64 00 64 00 64 00 00 00 16 00 79 00 79 00 79 00 79 00 27 00 74 5e 27 00 4d 00 4d 00 27 00 08 67 27 00 64 00 64 00 27 00 e5 65 27 00 20 00 64 00 64 00 64 00 64 00 00 00 0a 00 79 00 79 00 79 00 79 00 74 5e 4d 00 4d 00 4d 00 64 00 e5 65 00 00 0f 00 79 00 79 00 79 00 79 00 74 5e 4d 00 4d 00 4d 00 64 00 e5 65 20 00 64 00 64 00 64 00 64 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:47.505Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:47.506Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:47.506Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:47.506Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:47.506Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x62be940","args":["0x1","0x1","0x2","0x55","0x18847f4","0x23f206f5","0x62be9b0","0x19248ec","0x1924848","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x55","0x18847f4","0x23f206f5","0x62be9b0","0x19248ec","0x1924848","0x7700459e","0x62be948","0x62be9fc","0x62beb64","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":85,"ptr":"0x18847f4","utf16":"\u0001'","hex":"01 00 27 00 00 00 00 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 1f 01 00 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 00 00 05 00 36 d7 02 00 9b 00 0a 00 3e da 00 00 03 00 00 00"},{"source":"args.byref","sizeIndex":3,"ptrIndex":4,"size":85,"ptr":"0x270001","utf16":"","hex":"00 00 00 a4 c8 01 00 00 00 00 00 7b 03 00 00 1c 00 00 00 cc ac 01 00 1f 00 00 00 01 00 00 00 a4 53 00 00 4a 00 00 00 46 00 00 00 f0 53 00 00 01 00 00 00 01 00 00 00 30 54 00 00 46 00 00 00 42 00 00 00 78 54 00 00 01 00 00 00 01 00 00 00 b0 54 00 00 56 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":85,"ptr":"0x18847f4","utf16":"\u0001'","hex":"01 00 27 00 00 00 00 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 1f 01 00 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 00 00 05 00 36 d7 02 00 9b 00 0a 00 3e da 00 00 03 00 00 00"},{"source":"stack.byref","sizeIndex":4,"ptrIndex":5,"size":85,"ptr":"0x270001","utf16":"","hex":"00 00 00 a4 c8 01 00 00 00 00 00 7b 03 00 00 1c 00 00 00 cc ac 01 00 1f 00 00 00 01 00 00 00 a4 53 00 00 4a 00 00 00 46 00 00 00 f0 53 00 00 01 00 00 00 01 00 00 00 30 54 00 00 46 00 00 00 42 00 00 00 78 54 00 00 01 00 00 00 01 00 00 00 b0 54 00 00 56 00"}],"time":"2026-04-25T07:22:47.515Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x62be8f8","args":["0x1","0x1200","0x55","0x18847f4","0x0","0x23f20665","0x18847f4","0x9effe8","0x1","0x62be9ac"],"stack":["0x9bdd43","0x1","0x1200","0x55","0x18847f4","0x0","0x23f20665","0x18847f4","0x9effe8","0x1","0x62be9ac","0x62be940","0x1","0x1","0x62be9a0","0x9cf3a6","0xffffffff","0x62be9ac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":85,"ptr":"0x18847f4","utf16":"\u0001'","hex":"01 00 27 00 00 00 00 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 1f 01 00 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 00 00 05 00 36 d7 02 00 9b 00 0a 00 3e da 00 00 03 00 00 00"},{"source":"args.byref","sizeIndex":2,"ptrIndex":3,"size":85,"ptr":"0x270001","utf16":"","hex":"00 00 00 a4 c8 01 00 00 00 00 00 7b 03 00 00 1c 00 00 00 cc ac 01 00 1f 00 00 00 01 00 00 00 a4 53 00 00 4a 00 00 00 46 00 00 00 f0 53 00 00 01 00 00 00 01 00 00 00 30 54 00 00 46 00 00 00 42 00 00 00 78 54 00 00 01 00 00 00 01 00 00 00 b0 54 00 00 56 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\u3604\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\u48f0�\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":85,"ptr":"0x18847f4","utf16":"\u0001'","hex":"01 00 27 00 00 00 00 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 1f 01 00 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 00 00 05 00 36 d7 02 00 9b 00 0a 00 3e da 00 00 03 00 00 00"},{"source":"stack.byref","sizeIndex":3,"ptrIndex":4,"size":85,"ptr":"0x270001","utf16":"","hex":"00 00 00 a4 c8 01 00 00 00 00 00 7b 03 00 00 1c 00 00 00 cc ac 01 00 1f 00 00 00 01 00 00 00 a4 53 00 00 4a 00 00 00 46 00 00 00 f0 53 00 00 01 00 00 00 01 00 00 00 30 54 00 00 46 00 00 00 42 00 00 00 78 54 00 00 01 00 00 00 01 00 00 00 b0 54 00 00 56 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\u3604\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\u48f0�\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:47.526Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x62be894","args":["0x1","0x55","0x18847f4","0x0","0x23f207ad","0x18847f4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x55","0x18847f4","0x0","0x23f207ad","0x18847f4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18847f4","0x9effe8","0x62be93c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":85,"ptr":"0x18847f4","utf16":"\u0001'","hex":"01 00 27 00 00 00 00 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 1f 01 00 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 00 00 05 00 36 d7 02 00 9b 00 0a 00 3e da 00 00 03 00 00 00"},{"source":"args.byref","sizeIndex":1,"ptrIndex":2,"size":85,"ptr":"0x270001","utf16":"","hex":"00 00 00 a4 c8 01 00 00 00 00 00 7b 03 00 00 1c 00 00 00 cc ac 01 00 1f 00 00 00 01 00 00 00 a4 53 00 00 4a 00 00 00 46 00 00 00 f0 53 00 00 01 00 00 00 01 00 00 00 30 54 00 00 46 00 00 00 42 00 00 00 78 54 00 00 01 00 00 00 01 00 00 00 b0 54 00 00 56 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":85,"ptr":"0x18847f4","utf16":"\u0001'","hex":"01 00 27 00 00 00 00 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 1f 01 00 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 00 00 05 00 36 d7 02 00 9b 00 0a 00 3e da 00 00 03 00 00 00"},{"source":"stack.byref","sizeIndex":2,"ptrIndex":3,"size":85,"ptr":"0x270001","utf16":"","hex":"00 00 00 a4 c8 01 00 00 00 00 00 7b 03 00 00 1c 00 00 00 cc ac 01 00 1f 00 00 00 01 00 00 00 a4 53 00 00 4a 00 00 00 46 00 00 00 f0 53 00 00 01 00 00 00 01 00 00 00 30 54 00 00 46 00 00 00 42 00 00 00 78 54 00 00 01 00 00 00 01 00 00 00 b0 54 00 00 56 00"}],"time":"2026-04-25T07:22:47.535Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:47.535Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:47.536Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:47.536Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:47.536Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffb","0x97","0x1914e64","0x255c009d","0x85efc8","0x517590c","0x5175868","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffb","0x97","0x1914e64","0x255c009d","0x85efc8","0x517590c","0x5175868","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":151,"ptr":"0x1914e64","utf16":"\u0001i","hex":"01 00 69 00 00 00 00 00 00 00 d6 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 32 01 00 02 00 00 00 a7 9b b8 8f 32 13 9f 4e 80 6b db 39 c9 c8 f8 b7 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 01 00 00 00 03 00 00 00 c0 00 20 2e 5a 46 28 d3 dc 01 06 0a 00 00 00 00 a0 41 c3 55 bd dc 01 00 00 02 00 00 00 03 00 00 00 c0 00 80 18 5b 46 28 d3 dc 01 06 0a 00 00 00 80 c1 75 25 a5 bd dc 01 00 00"},{"source":"args.byref","sizeIndex":3,"ptrIndex":4,"size":151,"ptr":"0x690001","utf16":"","hex":"00 00 00 14 00 79 00 79 00 79 00 79 00 27 00 74 5e 27 00 4d 00 27 00 08 67 27 00 64 00 27 00 e5 65 27 00 20 00 64 00 64 00 64 00 64 00 00 00 16 00 79 00 79 00 79 00 79 00 27 00 74 5e 27 00 4d 00 4d 00 27 00 08 67 27 00 64 00 64 00 27 00 e5 65 27 00 20 00 64 00 64 00 64 00 64 00 00 00 0a 00 79 00 79 00 79 00 79 00 74 5e 4d 00 4d 00 4d 00 64 00 e5 65 00 00 0f 00 79 00 79 00 79 00 79 00 74 5e 4d 00 4d 00 4d 00 64 00 e5 65 20 00 64 00 64 00 64 00 64 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":151,"ptr":"0x1914e64","utf16":"\u0001i","hex":"01 00 69 00 00 00 00 00 00 00 d6 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 32 01 00 02 00 00 00 a7 9b b8 8f 32 13 9f 4e 80 6b db 39 c9 c8 f8 b7 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 01 00 00 00 03 00 00 00 c0 00 20 2e 5a 46 28 d3 dc 01 06 0a 00 00 00 00 a0 41 c3 55 bd dc 01 00 00 02 00 00 00 03 00 00 00 c0 00 80 18 5b 46 28 d3 dc 01 06 0a 00 00 00 80 c1 75 25 a5 bd dc 01 00 00"},{"source":"stack.byref","sizeIndex":4,"ptrIndex":5,"size":151,"ptr":"0x690001","utf16":"","hex":"00 00 00 14 00 79 00 79 00 79 00 79 00 27 00 74 5e 27 00 4d 00 27 00 08 67 27 00 64 00 27 00 e5 65 27 00 20 00 64 00 64 00 64 00 64 00 00 00 16 00 79 00 79 00 79 00 79 00 27 00 74 5e 27 00 4d 00 4d 00 27 00 08 67 27 00 64 00 64 00 27 00 e5 65 27 00 20 00 64 00 64 00 64 00 64 00 00 00 0a 00 79 00 79 00 79 00 79 00 74 5e 4d 00 4d 00 4d 00 64 00 e5 65 00 00 0f 00 79 00 79 00 79 00 79 00 74 5e 4d 00 4d 00 4d 00 64 00 e5 65 20 00 64 00 64 00 64 00 64 00"}],"time":"2026-04-25T07:22:47.542Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x97","0x1914e64","0x0","0x255c000d","0x1914e64","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x97","0x1914e64","0x0","0x255c000d","0x1914e64","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":151,"ptr":"0x1914e64","utf16":"\u0001i","hex":"01 00 69 00 00 00 00 00 00 00 d6 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 32 01 00 02 00 00 00 a7 9b b8 8f 32 13 9f 4e 80 6b db 39 c9 c8 f8 b7 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 01 00 00 00 03 00 00 00 c0 00 20 2e 5a 46 28 d3 dc 01 06 0a 00 00 00 00 a0 41 c3 55 bd dc 01 00 00 02 00 00 00 03 00 00 00 c0 00 80 18 5b 46 28 d3 dc 01 06 0a 00 00 00 80 c1 75 25 a5 bd dc 01 00 00"},{"source":"args.byref","sizeIndex":2,"ptrIndex":3,"size":151,"ptr":"0x690001","utf16":"","hex":"00 00 00 14 00 79 00 79 00 79 00 79 00 27 00 74 5e 27 00 4d 00 27 00 08 67 27 00 64 00 27 00 e5 65 27 00 20 00 64 00 64 00 64 00 64 00 00 00 16 00 79 00 79 00 79 00 79 00 27 00 74 5e 27 00 4d 00 4d 00 27 00 08 67 27 00 64 00 64 00 27 00 e5 65 27 00 20 00 64 00 64 00 64 00 64 00 00 00 0a 00 79 00 79 00 79 00 79 00 74 5e 4d 00 4d 00 4d 00 64 00 e5 65 00 00 0f 00 79 00 79 00 79 00 79 00 74 5e 4d 00 4d 00 4d 00 64 00 e5 65 20 00 64 00 64 00 64 00 64 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u5910\u0517\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":151,"ptr":"0x1914e64","utf16":"\u0001i","hex":"01 00 69 00 00 00 00 00 00 00 d6 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 32 01 00 02 00 00 00 a7 9b b8 8f 32 13 9f 4e 80 6b db 39 c9 c8 f8 b7 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 01 00 00 00 03 00 00 00 c0 00 20 2e 5a 46 28 d3 dc 01 06 0a 00 00 00 00 a0 41 c3 55 bd dc 01 00 00 02 00 00 00 03 00 00 00 c0 00 80 18 5b 46 28 d3 dc 01 06 0a 00 00 00 80 c1 75 25 a5 bd dc 01 00 00"},{"source":"stack.byref","sizeIndex":3,"ptrIndex":4,"size":151,"ptr":"0x690001","utf16":"","hex":"00 00 00 14 00 79 00 79 00 79 00 79 00 27 00 74 5e 27 00 4d 00 27 00 08 67 27 00 64 00 27 00 e5 65 27 00 20 00 64 00 64 00 64 00 64 00 00 00 16 00 79 00 79 00 79 00 79 00 27 00 74 5e 27 00 4d 00 4d 00 27 00 08 67 27 00 64 00 64 00 27 00 e5 65 27 00 20 00 64 00 64 00 64 00 64 00 00 00 0a 00 79 00 79 00 79 00 79 00 74 5e 4d 00 4d 00 4d 00 64 00 e5 65 00 00 0f 00 79 00 79 00 79 00 79 00 74 5e 4d 00 4d 00 4d 00 64 00 e5 65 20 00 64 00 64 00 64 00 64 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u5910\u0517\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:47.553Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x97","0x1914e64","0x0","0x255c0055","0x1914e64","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x97","0x1914e64","0x0","0x255c0055","0x1914e64","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1914e64","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":151,"ptr":"0x1914e64","utf16":"\u0001i","hex":"01 00 69 00 00 00 00 00 00 00 d6 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 32 01 00 02 00 00 00 a7 9b b8 8f 32 13 9f 4e 80 6b db 39 c9 c8 f8 b7 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 01 00 00 00 03 00 00 00 c0 00 20 2e 5a 46 28 d3 dc 01 06 0a 00 00 00 00 a0 41 c3 55 bd dc 01 00 00 02 00 00 00 03 00 00 00 c0 00 80 18 5b 46 28 d3 dc 01 06 0a 00 00 00 80 c1 75 25 a5 bd dc 01 00 00"},{"source":"args.byref","sizeIndex":1,"ptrIndex":2,"size":151,"ptr":"0x690001","utf16":"","hex":"00 00 00 14 00 79 00 79 00 79 00 79 00 27 00 74 5e 27 00 4d 00 27 00 08 67 27 00 64 00 27 00 e5 65 27 00 20 00 64 00 64 00 64 00 64 00 00 00 16 00 79 00 79 00 79 00 79 00 27 00 74 5e 27 00 4d 00 4d 00 27 00 08 67 27 00 64 00 64 00 27 00 e5 65 27 00 20 00 64 00 64 00 64 00 64 00 00 00 0a 00 79 00 79 00 79 00 79 00 74 5e 4d 00 4d 00 4d 00 64 00 e5 65 00 00 0f 00 79 00 79 00 79 00 79 00 74 5e 4d 00 4d 00 4d 00 64 00 e5 65 20 00 64 00 64 00 64 00 64 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":151,"ptr":"0x1914e64","utf16":"\u0001i","hex":"01 00 69 00 00 00 00 00 00 00 d6 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 32 01 00 02 00 00 00 a7 9b b8 8f 32 13 9f 4e 80 6b db 39 c9 c8 f8 b7 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 01 00 00 00 03 00 00 00 c0 00 20 2e 5a 46 28 d3 dc 01 06 0a 00 00 00 00 a0 41 c3 55 bd dc 01 00 00 02 00 00 00 03 00 00 00 c0 00 80 18 5b 46 28 d3 dc 01 06 0a 00 00 00 80 c1 75 25 a5 bd dc 01 00 00"},{"source":"stack.byref","sizeIndex":2,"ptrIndex":3,"size":151,"ptr":"0x690001","utf16":"","hex":"00 00 00 14 00 79 00 79 00 79 00 79 00 27 00 74 5e 27 00 4d 00 27 00 08 67 27 00 64 00 27 00 e5 65 27 00 20 00 64 00 64 00 64 00 64 00 00 00 16 00 79 00 79 00 79 00 79 00 27 00 74 5e 27 00 4d 00 4d 00 27 00 08 67 27 00 64 00 64 00 27 00 e5 65 27 00 20 00 64 00 64 00 64 00 64 00 00 00 0a 00 79 00 79 00 79 00 79 00 74 5e 4d 00 4d 00 4d 00 64 00 e5 65 00 00 0f 00 79 00 79 00 79 00 79 00 74 5e 4d 00 4d 00 4d 00 64 00 e5 65 20 00 64 00 64 00 64 00 64 00"}],"time":"2026-04-25T07:22:47.559Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x182019c","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x182019c","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51e70c8","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x182019c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b7 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x182019c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b7 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:47.572Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:47.573Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:47.573Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:47.573Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:47.573Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x2","0x2e","0x182019c","0x27e700f5","0x23eefb0","0x51e70c4","0x51e7020","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x182019c","0x27e700f5","0x23eefb0","0x51e70c4","0x51e7020","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x182019c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b7 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x182019c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b7 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:47.580Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x2e","0x182019c","0x0","0x27e70065","0x182019c","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x182019c","0x0","0x27e70065","0x182019c","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x182019c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b7 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u70c8\u051e\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x182019c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b7 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u70c8\u051e\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:47.587Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x2e","0x182019c","0x0","0x27e701ad","0x182019c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x182019c","0x0","0x27e701ad","0x182019c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x182019c","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x182019c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b7 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x182019c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b7 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:47.591Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:47.592Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:47.592Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:47.592Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:47.592Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f3604","0x1","0x1","0x1","0x2e","0x1913d5c","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f3604","0x1","0x1","0x1","0x2e","0x1913d5c","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x5175910","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1913d5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d6 20 09 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x1913d5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d6 20 09 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:47.602Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x1","0x2e","0x1913d5c","0x255c009d","0x85efc8","0x517590c","0x5175868","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x1913d5c","0x255c009d","0x85efc8","0x517590c","0x5175868","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1913d5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d6 20 09 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1913d5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d6 20 09 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:47.608Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x1913d5c","0x0","0x255c000d","0x1913d5c","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x1913d5c","0x0","0x255c000d","0x1913d5c","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1913d5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d6 20 09 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u3604\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u5910\u0517\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1913d5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d6 20 09 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u3604\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u5910\u0517\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:47.614Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x1913d5c","0x0","0x255c0055","0x1913d5c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x1913d5c","0x0","0x255c0055","0x1913d5c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1913d5c","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x1913d5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d6 20 09 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1913d5c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d6 20 09 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:47.619Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x126cdc4","0x1","0x1","0x7ffb","0x5c","0x1887b0c","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffb","0x5c","0x1887b0c","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x19248f0","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":92,"ptr":"0x1887b0c","utf16":"\u0001.","hex":"01 00 2e 00 00 00 00 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 00 00 50 80 01 00 01 00 02 00 30 75 00 00 56 88 8a b4 ee d6 10 48 a1 ac 1d 2b f6 1d 9c f0 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":92,"ptr":"0x1887b0c","utf16":"\u0001.","hex":"01 00 2e 00 00 00 00 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 00 00 50 80 01 00 01 00 02 00 30 75 00 00 56 88 8a b4 ee d6 10 48 a1 ac 1d 2b f6 1d 9c f0 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:47.627Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:47.627Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:47.628Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:47.628Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:47.628Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x7ffb","0x5c","0x1887b0c","0x27e700f5","0x23eefb0","0x19248ec","0x1924848","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffb","0x5c","0x1887b0c","0x27e700f5","0x23eefb0","0x19248ec","0x1924848","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":92,"ptr":"0x1887b0c","utf16":"\u0001.","hex":"01 00 2e 00 00 00 00 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 00 00 50 80 01 00 01 00 02 00 30 75 00 00 56 88 8a b4 ee d6 10 48 a1 ac 1d 2b f6 1d 9c f0 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":92,"ptr":"0x1887b0c","utf16":"\u0001.","hex":"01 00 2e 00 00 00 00 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 00 00 50 80 01 00 01 00 02 00 30 75 00 00 56 88 8a b4 ee d6 10 48 a1 ac 1d 2b f6 1d 9c f0 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c"}],"time":"2026-04-25T07:22:47.634Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x5c","0x1887b0c","0x0","0x27e70065","0x1887b0c","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x5c","0x1887b0c","0x0","0x27e70065","0x1887b0c","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":92,"ptr":"0x1887b0c","utf16":"\u0001.","hex":"01 00 2e 00 00 00 00 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 00 00 50 80 01 00 01 00 02 00 30 75 00 00 56 88 8a b4 ee d6 10 48 a1 ac 1d 2b f6 1d 9c f0 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u48f0�\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":92,"ptr":"0x1887b0c","utf16":"\u0001.","hex":"01 00 2e 00 00 00 00 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 00 00 50 80 01 00 01 00 02 00 30 75 00 00 56 88 8a b4 ee d6 10 48 a1 ac 1d 2b f6 1d 9c f0 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u48f0�\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:47.641Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x5c","0x1887b0c","0x0","0x27e701ad","0x1887b0c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x5c","0x1887b0c","0x0","0x27e701ad","0x1887b0c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1887b0c","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":92,"ptr":"0x1887b0c","utf16":"\u0001.","hex":"01 00 2e 00 00 00 00 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 00 00 50 80 01 00 01 00 02 00 30 75 00 00 56 88 8a b4 ee d6 10 48 a1 ac 1d 2b f6 1d 9c f0 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":92,"ptr":"0x1887b0c","utf16":"\u0001.","hex":"01 00 2e 00 00 00 00 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 00 00 50 80 01 00 01 00 02 00 30 75 00 00 56 88 8a b4 ee d6 10 48 a1 ac 1d 2b f6 1d 9c f0 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c"}],"time":"2026-04-25T07:22:47.647Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:47.647Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:47.647Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:47.647Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:47.647Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x126cdc4","0x1","0x1","0x7ffb","0x6c","0x1914e64","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffb","0x6c","0x1914e64","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x5175910","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":108,"ptr":"0x1914e64","utf16":"\u0001>","hex":"01 00 3e 00 00 00 00 00 00 00 b8 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 32 01 00 01 00 00 00 56 88 8a b4 ee d6 10 48 a1 ac 1d 2b f6 1d 9c f0 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 03 00 00 00 03 00 00 00 c0 00 20 53 26 90 82 d4 dc 01 02 15 cd 5b 07"},{"source":"args.byref","sizeIndex":4,"ptrIndex":5,"size":108,"ptr":"0x3e0001","utf16":"\u7463\u2078","hex":"63 74 78 20 00 00 00 01 00 00 00 48 04 00 00 64 00 00 00 00 00 00 00 20 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 02 00 00 00 34 00 00 00 e4 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 01 00 00 e0 00 00 00 10 00 00 00 07 00 00 00 74"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":108,"ptr":"0x1914e64","utf16":"\u0001>","hex":"01 00 3e 00 00 00 00 00 00 00 b8 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 32 01 00 01 00 00 00 56 88 8a b4 ee d6 10 48 a1 ac 1d 2b f6 1d 9c f0 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 03 00 00 00 03 00 00 00 c0 00 20 53 26 90 82 d4 dc 01 02 15 cd 5b 07"},{"source":"stack.byref","sizeIndex":5,"ptrIndex":6,"size":108,"ptr":"0x3e0001","utf16":"\u7463\u2078","hex":"63 74 78 20 00 00 00 01 00 00 00 48 04 00 00 64 00 00 00 00 00 00 00 20 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 02 00 00 00 34 00 00 00 e4 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 01 00 00 e0 00 00 00 10 00 00 00 07 00 00 00 74"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:47.656Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x7ffb","0x6c","0x1914e64","0x27e700f5","0x23eefb0","0x517590c","0x5175868","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffb","0x6c","0x1914e64","0x27e700f5","0x23eefb0","0x517590c","0x5175868","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":108,"ptr":"0x1914e64","utf16":"\u0001>","hex":"01 00 3e 00 00 00 00 00 00 00 b8 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 32 01 00 01 00 00 00 56 88 8a b4 ee d6 10 48 a1 ac 1d 2b f6 1d 9c f0 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 03 00 00 00 03 00 00 00 c0 00 20 53 26 90 82 d4 dc 01 02 15 cd 5b 07"},{"source":"args.byref","sizeIndex":3,"ptrIndex":4,"size":108,"ptr":"0x3e0001","utf16":"\u7463\u2078","hex":"63 74 78 20 00 00 00 01 00 00 00 48 04 00 00 64 00 00 00 00 00 00 00 20 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 02 00 00 00 34 00 00 00 e4 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 01 00 00 e0 00 00 00 10 00 00 00 07 00 00 00 74"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":108,"ptr":"0x1914e64","utf16":"\u0001>","hex":"01 00 3e 00 00 00 00 00 00 00 b8 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 32 01 00 01 00 00 00 56 88 8a b4 ee d6 10 48 a1 ac 1d 2b f6 1d 9c f0 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 03 00 00 00 03 00 00 00 c0 00 20 53 26 90 82 d4 dc 01 02 15 cd 5b 07"},{"source":"stack.byref","sizeIndex":4,"ptrIndex":5,"size":108,"ptr":"0x3e0001","utf16":"\u7463\u2078","hex":"63 74 78 20 00 00 00 01 00 00 00 48 04 00 00 64 00 00 00 00 00 00 00 20 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 02 00 00 00 34 00 00 00 e4 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 01 00 00 e0 00 00 00 10 00 00 00 07 00 00 00 74"}],"time":"2026-04-25T07:22:47.662Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x6c","0x1914e64","0x0","0x27e70065","0x1914e64","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x6c","0x1914e64","0x0","0x27e70065","0x1914e64","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":108,"ptr":"0x1914e64","utf16":"\u0001>","hex":"01 00 3e 00 00 00 00 00 00 00 b8 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 32 01 00 01 00 00 00 56 88 8a b4 ee d6 10 48 a1 ac 1d 2b f6 1d 9c f0 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 03 00 00 00 03 00 00 00 c0 00 20 53 26 90 82 d4 dc 01 02 15 cd 5b 07"},{"source":"args.byref","sizeIndex":2,"ptrIndex":3,"size":108,"ptr":"0x3e0001","utf16":"\u7463\u2078","hex":"63 74 78 20 00 00 00 01 00 00 00 48 04 00 00 64 00 00 00 00 00 00 00 20 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 02 00 00 00 34 00 00 00 e4 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 01 00 00 e0 00 00 00 10 00 00 00 07 00 00 00 74"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u5910\u0517\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":108,"ptr":"0x1914e64","utf16":"\u0001>","hex":"01 00 3e 00 00 00 00 00 00 00 b8 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 32 01 00 01 00 00 00 56 88 8a b4 ee d6 10 48 a1 ac 1d 2b f6 1d 9c f0 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 03 00 00 00 03 00 00 00 c0 00 20 53 26 90 82 d4 dc 01 02 15 cd 5b 07"},{"source":"stack.byref","sizeIndex":3,"ptrIndex":4,"size":108,"ptr":"0x3e0001","utf16":"\u7463\u2078","hex":"63 74 78 20 00 00 00 01 00 00 00 48 04 00 00 64 00 00 00 00 00 00 00 20 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 02 00 00 00 34 00 00 00 e4 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 01 00 00 e0 00 00 00 10 00 00 00 07 00 00 00 74"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u5910\u0517\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:47.670Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x6c","0x1914e64","0x0","0x27e701ad","0x1914e64","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x6c","0x1914e64","0x0","0x27e701ad","0x1914e64","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1914e64","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":108,"ptr":"0x1914e64","utf16":"\u0001>","hex":"01 00 3e 00 00 00 00 00 00 00 b8 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 32 01 00 01 00 00 00 56 88 8a b4 ee d6 10 48 a1 ac 1d 2b f6 1d 9c f0 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 03 00 00 00 03 00 00 00 c0 00 20 53 26 90 82 d4 dc 01 02 15 cd 5b 07"},{"source":"args.byref","sizeIndex":1,"ptrIndex":2,"size":108,"ptr":"0x3e0001","utf16":"\u7463\u2078","hex":"63 74 78 20 00 00 00 01 00 00 00 48 04 00 00 64 00 00 00 00 00 00 00 20 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 02 00 00 00 34 00 00 00 e4 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 01 00 00 e0 00 00 00 10 00 00 00 07 00 00 00 74"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":108,"ptr":"0x1914e64","utf16":"\u0001>","hex":"01 00 3e 00 00 00 00 00 00 00 b8 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 32 01 00 01 00 00 00 56 88 8a b4 ee d6 10 48 a1 ac 1d 2b f6 1d 9c f0 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 03 00 00 00 03 00 00 00 c0 00 20 53 26 90 82 d4 dc 01 02 15 cd 5b 07"},{"source":"stack.byref","sizeIndex":2,"ptrIndex":3,"size":108,"ptr":"0x3e0001","utf16":"\u7463\u2078","hex":"63 74 78 20 00 00 00 01 00 00 00 48 04 00 00 64 00 00 00 00 00 00 00 20 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 02 00 00 00 34 00 00 00 e4 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 01 00 00 e0 00 00 00 10 00 00 00 07 00 00 00 74"}],"time":"2026-04-25T07:22:47.676Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:47.676Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:47.676Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:47.676Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:47.677Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x18223ac","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x18223ac","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51e9940","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18223ac","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d7 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 a6 2d 51 84 d4 dc 01 06 0a 00 00 00 30 a6 2d 51 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18223ac","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d7 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 a6 2d 51 84 d4 dc 01 06 0a 00 00 00 30 a6 2d 51 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:47.759Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x7ffd","0x62","0x18223ac","0x27e700f5","0x23eefb0","0x51e993c","0x51e9898","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18223ac","0x27e700f5","0x23eefb0","0x51e993c","0x51e9898","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18223ac","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d7 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 a6 2d 51 84 d4 dc 01 06 0a 00 00 00 30 a6 2d 51 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18223ac","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d7 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 a6 2d 51 84 d4 dc 01 06 0a 00 00 00 30 a6 2d 51 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:47.766Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x62","0x18223ac","0x0","0x27e70065","0x18223ac","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18223ac","0x0","0x27e70065","0x18223ac","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18223ac","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d7 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 a6 2d 51 84 d4 dc 01 06 0a 00 00 00 30 a6 2d 51 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u9940\u051e\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18223ac","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d7 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 a6 2d 51 84 d4 dc 01 06 0a 00 00 00 30 a6 2d 51 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u9940\u051e\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:47.774Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x62","0x18223ac","0x0","0x27e701ad","0x18223ac","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18223ac","0x0","0x27e701ad","0x18223ac","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18223ac","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18223ac","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d7 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 a6 2d 51 84 d4 dc 01 06 0a 00 00 00 30 a6 2d 51 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18223ac","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d7 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 a6 2d 51 84 d4 dc 01 06 0a 00 00 00 30 a6 2d 51 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:47.780Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f3604","0x1","0x1","0x2","0x2e","0x18b25fc","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f3604","0x1","0x1","0x2","0x2e","0x18b25fc","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51e70c8","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18b25fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b8 90 04 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18b25fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b8 90 04 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:47.787Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:47.788Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:47.788Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:47.788Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:47.788Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x2","0x2e","0x18b25fc","0x255c009d","0x85efc8","0x51e70c4","0x51e7020","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x18b25fc","0x255c009d","0x85efc8","0x51e70c4","0x51e7020","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18b25fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b8 90 04 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18b25fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b8 90 04 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:47.794Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x18b25fc","0x0","0x255c000d","0x18b25fc","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18b25fc","0x0","0x255c000d","0x18b25fc","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18b25fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b8 90 04 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u3604\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u70c8\u051e\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18b25fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b8 90 04 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u3604\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u70c8\u051e\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:47.800Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x18b25fc","0x0","0x255c0055","0x18b25fc","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18b25fc","0x0","0x255c0055","0x18b25fc","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b25fc","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18b25fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b8 90 04 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18b25fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b8 90 04 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:47.805Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:47.806Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:47.806Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:47.806Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:47.806Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x182df04","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x182df04","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51ea4d0","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x182df04","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d8 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 a6 2d 51 84 d4 dc 01 06 0a 00 00 00 30 a6 2d 51 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x182df04","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d8 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 a6 2d 51 84 d4 dc 01 06 0a 00 00 00 30 a6 2d 51 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:47.813Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x7ffe","0x62","0x182df04","0x27e700f5","0x23eefb0","0x51ea4cc","0x51ea428","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x182df04","0x27e700f5","0x23eefb0","0x51ea4cc","0x51ea428","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x182df04","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d8 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 a6 2d 51 84 d4 dc 01 06 0a 00 00 00 30 a6 2d 51 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x182df04","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d8 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 a6 2d 51 84 d4 dc 01 06 0a 00 00 00 30 a6 2d 51 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:47.819Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x62","0x182df04","0x0","0x27e70065","0x182df04","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x182df04","0x0","0x27e70065","0x182df04","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x182df04","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d8 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 a6 2d 51 84 d4 dc 01 06 0a 00 00 00 30 a6 2d 51 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\ua4d0\u051e\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x182df04","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d8 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 a6 2d 51 84 d4 dc 01 06 0a 00 00 00 30 a6 2d 51 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\ua4d0\u051e\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:47.826Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x62","0x182df04","0x0","0x27e701ad","0x182df04","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x182df04","0x0","0x27e701ad","0x182df04","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x182df04","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x182df04","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d8 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 a6 2d 51 84 d4 dc 01 06 0a 00 00 00 30 a6 2d 51 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x182df04","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d8 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 a6 2d 51 84 d4 dc 01 06 0a 00 00 00 30 a6 2d 51 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:47.832Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:47.832Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:47.832Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:47.832Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:47.832Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x18389e4","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x18389e4","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51e7c58","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18389e4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d8 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18389e4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d8 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:47.880Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x1","0x2e","0x18389e4","0x27e700f5","0x23eefb0","0x51e7c54","0x51e7bb0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18389e4","0x27e700f5","0x23eefb0","0x51e7c54","0x51e7bb0","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18389e4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d8 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18389e4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d8 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:47.886Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x2e","0x18389e4","0x0","0x27e70065","0x18389e4","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18389e4","0x0","0x27e70065","0x18389e4","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18389e4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d8 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u2b0c\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u7c58\u051e\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18389e4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d8 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u2b0c\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u7c58\u051e\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:47.893Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x2e","0x18389e4","0x0","0x27e701ad","0x18389e4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18389e4","0x0","0x27e701ad","0x18389e4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18389e4","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18389e4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d8 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18389e4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d8 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:47.898Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x18b25fc","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x18b25fc","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51e70c8","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18b25fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d7 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18b25fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d7 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:47.906Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:47.906Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x62be9b0","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18b03ec","0x206","0x6","0x900184","0x62beb74"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18b03ec","0x206","0x6","0x900184","0x62beb74","0x76fc4ef5","0x9c1b20","0x1879e68","0x6","0xd0e071e4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b03ec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b9 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 9f 4c 51 84 d4 dc 01 06 0a 00 00 00 e0 9f 4c 51 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18b03ec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b9 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 9f 4c 51 84 d4 dc 01 06 0a 00 00 00 e0 9f 4c 51 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:47.914Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:47.914Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:47.914Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:47.915Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x1","0x2e","0x18b25fc","0x255c009d","0x85efc8","0x51e70c4","0x51e7020","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18b25fc","0x255c009d","0x85efc8","0x51e70c4","0x51e7020","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18b25fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d7 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18b25fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d7 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:47.922Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x18b25fc","0x0","0x255c000d","0x18b25fc","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18b25fc","0x0","0x255c000d","0x18b25fc","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18b25fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d7 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u70c8\u051e\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18b25fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d7 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u70c8\u051e\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:47.929Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x18b25fc","0x0","0x255c0055","0x18b25fc","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18b25fc","0x0","0x255c0055","0x18b25fc","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b25fc","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18b25fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d7 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18b25fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d7 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:47.934Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:47.935Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:47.935Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:47.935Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:47.935Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x62be940","args":["0x1","0x1","0x7ffd","0x62","0x18b03ec","0x23f206f5","0x62be9b0","0x1879e64","0x1879dc0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18b03ec","0x23f206f5","0x62be9b0","0x1879e64","0x1879dc0","0x7700459e","0x62be948","0x62be9fc","0x62beb64","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b03ec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b9 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 9f 4c 51 84 d4 dc 01 06 0a 00 00 00 e0 9f 4c 51 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b03ec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b9 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 9f 4c 51 84 d4 dc 01 06 0a 00 00 00 e0 9f 4c 51 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:47.941Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x62be8f8","args":["0x1","0x1200","0x62","0x18b03ec","0x0","0x23f20665","0x18b03ec","0x9effe8","0x1","0x62be9ac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18b03ec","0x0","0x23f20665","0x18b03ec","0x9effe8","0x1","0x62be9ac","0x62be940","0x1","0x1","0x62be9a0","0x9cf3a6","0xffffffff","0x62be9ac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b03ec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b9 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 9f 4c 51 84 d4 dc 01 06 0a 00 00 00 e0 9f 4c 51 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\u9e68\u0187\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b03ec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b9 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 9f 4c 51 84 d4 dc 01 06 0a 00 00 00 e0 9f 4c 51 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\u9e68\u0187\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:47.948Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x62be894","args":["0x1","0x62","0x18b03ec","0x0","0x23f207ad","0x18b03ec","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18b03ec","0x0","0x23f207ad","0x18b03ec","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b03ec","0x9effe8","0x62be93c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18b03ec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b9 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 9f 4c 51 84 d4 dc 01 06 0a 00 00 00 e0 9f 4c 51 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b03ec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 b9 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 9f 4c 51 84 d4 dc 01 06 0a 00 00 00 e0 9f 4c 51 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:47.953Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:47.953Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:47.954Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:47.954Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:47.954Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x62be9b0","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x183ce04","0x206","0x6","0x900184","0x62beb74"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x183ce04","0x206","0x6","0x900184","0x62beb74","0x76fc4ef5","0x9c1b20","0x5174d80","0x6","0xd0e071e4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x183ce04","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b9 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x183ce04","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b9 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:47.991Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x62be940","args":["0x1","0x1","0x2","0x2e","0x183ce04","0x23f206f5","0x62be9b0","0x5174d7c","0x5174cd8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x183ce04","0x23f206f5","0x62be9b0","0x5174d7c","0x5174cd8","0x7700459e","0x62be948","0x62be9fc","0x62beb64","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x183ce04","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b9 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x183ce04","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b9 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:47.997Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x62be8f8","args":["0x1","0x1200","0x2e","0x183ce04","0x0","0x23f20665","0x183ce04","0x9effe8","0x1","0x62be9ac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x183ce04","0x0","0x23f20665","0x183ce04","0x9effe8","0x1","0x62be9ac","0x62be940","0x1","0x1","0x62be9a0","0x9cf3a6","0xffffffff","0x62be9ac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x183ce04","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b9 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\u4d80\u0517\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x183ce04","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b9 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\u4d80\u0517\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:48.008Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x62be894","args":["0x1","0x2e","0x183ce04","0x0","0x23f207ad","0x183ce04","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x183ce04","0x0","0x23f207ad","0x183ce04","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x183ce04","0x9effe8","0x62be93c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x183ce04","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b9 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x183ce04","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 b9 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:48.013Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:48.014Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:48.014Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:48.014Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:48.014Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x62be9b0","args":["0x21f3604","0x1","0x1","0x2","0x56","0x18b3704","0x206","0x6","0x900184","0x62beb74"],"stack":["0x76ffedd8","0x21f3604","0x1","0x1","0x2","0x56","0x18b3704","0x206","0x6","0x900184","0x62beb74","0x76fc4ef5","0x9c1b20","0x1879e68","0x6","0xd0e071e4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":86,"ptr":"0x18b3704","utf16":"\u0001(","hex":"01 00 28 00 00 00 00 00 00 00 03 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 37 01 00 05 00 36 d7 02 00 9b 00 0a 00 3e da 00 00 02 16 cd 5b 07 ff ff 00 00 00 00 00 00 00 00 41 7f eb 08 01 00 00 00"},{"source":"args.byref","sizeIndex":4,"ptrIndex":5,"size":86,"ptr":"0x280001","utf16":"\u6e00\u2d00\u6300\u6f00\u7200\u6500\u2d00\u6c00\u6900\u6300\u6500\u6e00\u7300\u6500\u6d00\u6100\u6e00\u6100\u6700\u6500\u7200\u2d00\u6c00\u3100\u2d00\u3100\u2d00\u3000","hex":"00 6e 00 2d 00 63 00 6f 00 72 00 65 00 2d 00 6c 00 69 00 63 00 65 00 6e 00 73 00 65 00 6d 00 61 00 6e 00 61 00 67 00 65 00 72 00 2d 00 6c 00 31 00 2d 00 31 00 2d 00 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 65 00 78 00 74 00 2d"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":86,"ptr":"0x18b3704","utf16":"\u0001(","hex":"01 00 28 00 00 00 00 00 00 00 03 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 37 01 00 05 00 36 d7 02 00 9b 00 0a 00 3e da 00 00 02 16 cd 5b 07 ff ff 00 00 00 00 00 00 00 00 41 7f eb 08 01 00 00 00"},{"source":"stack.byref","sizeIndex":5,"ptrIndex":6,"size":86,"ptr":"0x280001","utf16":"\u6e00\u2d00\u6300\u6f00\u7200\u6500\u2d00\u6c00\u6900\u6300\u6500\u6e00\u7300\u6500\u6d00\u6100\u6e00\u6100\u6700\u6500\u7200\u2d00\u6c00\u3100\u2d00\u3100\u2d00\u3000","hex":"00 6e 00 2d 00 63 00 6f 00 72 00 65 00 2d 00 6c 00 69 00 63 00 65 00 6e 00 73 00 65 00 6d 00 61 00 6e 00 61 00 67 00 65 00 72 00 2d 00 6c 00 31 00 2d 00 31 00 2d 00 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 65 00 78 00 74 00 2d"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:48.034Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x62be940","args":["0x1","0x1","0x2","0x56","0x18b3704","0x23f206f5","0x62be9b0","0x1879e64","0x1879dc0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x56","0x18b3704","0x23f206f5","0x62be9b0","0x1879e64","0x1879dc0","0x7700459e","0x62be948","0x62be9fc","0x62beb64","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":86,"ptr":"0x18b3704","utf16":"\u0001(","hex":"01 00 28 00 00 00 00 00 00 00 03 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 37 01 00 05 00 36 d7 02 00 9b 00 0a 00 3e da 00 00 02 16 cd 5b 07 ff ff 00 00 00 00 00 00 00 00 41 7f eb 08 01 00 00 00"},{"source":"args.byref","sizeIndex":3,"ptrIndex":4,"size":86,"ptr":"0x280001","utf16":"\u6e00\u2d00\u6300\u6f00\u7200\u6500\u2d00\u6c00\u6900\u6300\u6500\u6e00\u7300\u6500\u6d00\u6100\u6e00\u6100\u6700\u6500\u7200\u2d00\u6c00\u3100\u2d00\u3100\u2d00\u3000","hex":"00 6e 00 2d 00 63 00 6f 00 72 00 65 00 2d 00 6c 00 69 00 63 00 65 00 6e 00 73 00 65 00 6d 00 61 00 6e 00 61 00 67 00 65 00 72 00 2d 00 6c 00 31 00 2d 00 31 00 2d 00 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 65 00 78 00 74 00 2d"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":86,"ptr":"0x18b3704","utf16":"\u0001(","hex":"01 00 28 00 00 00 00 00 00 00 03 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 37 01 00 05 00 36 d7 02 00 9b 00 0a 00 3e da 00 00 02 16 cd 5b 07 ff ff 00 00 00 00 00 00 00 00 41 7f eb 08 01 00 00 00"},{"source":"stack.byref","sizeIndex":4,"ptrIndex":5,"size":86,"ptr":"0x280001","utf16":"\u6e00\u2d00\u6300\u6f00\u7200\u6500\u2d00\u6c00\u6900\u6300\u6500\u6e00\u7300\u6500\u6d00\u6100\u6e00\u6100\u6700\u6500\u7200\u2d00\u6c00\u3100\u2d00\u3100\u2d00\u3000","hex":"00 6e 00 2d 00 63 00 6f 00 72 00 65 00 2d 00 6c 00 69 00 63 00 65 00 6e 00 73 00 65 00 6d 00 61 00 6e 00 61 00 67 00 65 00 72 00 2d 00 6c 00 31 00 2d 00 31 00 2d 00 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 65 00 78 00 74 00 2d"}],"time":"2026-04-25T07:22:48.040Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x62be8f8","args":["0x1","0x1200","0x56","0x18b3704","0x0","0x23f20665","0x18b3704","0x9effe8","0x1","0x62be9ac"],"stack":["0x9bdd43","0x1","0x1200","0x56","0x18b3704","0x0","0x23f20665","0x18b3704","0x9effe8","0x1","0x62be9ac","0x62be940","0x1","0x1","0x62be9a0","0x9cf3a6","0xffffffff","0x62be9ac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":86,"ptr":"0x18b3704","utf16":"\u0001(","hex":"01 00 28 00 00 00 00 00 00 00 03 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 37 01 00 05 00 36 d7 02 00 9b 00 0a 00 3e da 00 00 02 16 cd 5b 07 ff ff 00 00 00 00 00 00 00 00 41 7f eb 08 01 00 00 00"},{"source":"args.byref","sizeIndex":2,"ptrIndex":3,"size":86,"ptr":"0x280001","utf16":"\u6e00\u2d00\u6300\u6f00\u7200\u6500\u2d00\u6c00\u6900\u6300\u6500\u6e00\u7300\u6500\u6d00\u6100\u6e00\u6100\u6700\u6500\u7200\u2d00\u6c00\u3100\u2d00\u3100\u2d00\u3000","hex":"00 6e 00 2d 00 63 00 6f 00 72 00 65 00 2d 00 6c 00 69 00 63 00 65 00 6e 00 73 00 65 00 6d 00 61 00 6e 00 61 00 67 00 65 00 72 00 2d 00 6c 00 31 00 2d 00 31 00 2d 00 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 65 00 78 00 74 00 2d"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\u3604\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\u9e68\u0187\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":86,"ptr":"0x18b3704","utf16":"\u0001(","hex":"01 00 28 00 00 00 00 00 00 00 03 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 37 01 00 05 00 36 d7 02 00 9b 00 0a 00 3e da 00 00 02 16 cd 5b 07 ff ff 00 00 00 00 00 00 00 00 41 7f eb 08 01 00 00 00"},{"source":"stack.byref","sizeIndex":3,"ptrIndex":4,"size":86,"ptr":"0x280001","utf16":"\u6e00\u2d00\u6300\u6f00\u7200\u6500\u2d00\u6c00\u6900\u6300\u6500\u6e00\u7300\u6500\u6d00\u6100\u6e00\u6100\u6700\u6500\u7200\u2d00\u6c00\u3100\u2d00\u3100\u2d00\u3000","hex":"00 6e 00 2d 00 63 00 6f 00 72 00 65 00 2d 00 6c 00 69 00 63 00 65 00 6e 00 73 00 65 00 6d 00 61 00 6e 00 61 00 67 00 65 00 72 00 2d 00 6c 00 31 00 2d 00 31 00 2d 00 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 65 00 78 00 74 00 2d"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\u3604\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\u9e68\u0187\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:48.047Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x62be894","args":["0x1","0x56","0x18b3704","0x0","0x23f207ad","0x18b3704","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x56","0x18b3704","0x0","0x23f207ad","0x18b3704","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b3704","0x9effe8","0x62be93c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":86,"ptr":"0x18b3704","utf16":"\u0001(","hex":"01 00 28 00 00 00 00 00 00 00 03 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 37 01 00 05 00 36 d7 02 00 9b 00 0a 00 3e da 00 00 02 16 cd 5b 07 ff ff 00 00 00 00 00 00 00 00 41 7f eb 08 01 00 00 00"},{"source":"args.byref","sizeIndex":1,"ptrIndex":2,"size":86,"ptr":"0x280001","utf16":"\u6e00\u2d00\u6300\u6f00\u7200\u6500\u2d00\u6c00\u6900\u6300\u6500\u6e00\u7300\u6500\u6d00\u6100\u6e00\u6100\u6700\u6500\u7200\u2d00\u6c00\u3100\u2d00\u3100\u2d00\u3000","hex":"00 6e 00 2d 00 63 00 6f 00 72 00 65 00 2d 00 6c 00 69 00 63 00 65 00 6e 00 73 00 65 00 6d 00 61 00 6e 00 61 00 67 00 65 00 72 00 2d 00 6c 00 31 00 2d 00 31 00 2d 00 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 65 00 78 00 74 00 2d"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":86,"ptr":"0x18b3704","utf16":"\u0001(","hex":"01 00 28 00 00 00 00 00 00 00 03 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 37 01 00 05 00 36 d7 02 00 9b 00 0a 00 3e da 00 00 02 16 cd 5b 07 ff ff 00 00 00 00 00 00 00 00 41 7f eb 08 01 00 00 00"},{"source":"stack.byref","sizeIndex":2,"ptrIndex":3,"size":86,"ptr":"0x280001","utf16":"\u6e00\u2d00\u6300\u6f00\u7200\u6500\u2d00\u6c00\u6900\u6300\u6500\u6e00\u7300\u6500\u6d00\u6100\u6e00\u6100\u6700\u6500\u7200\u2d00\u6c00\u3100\u2d00\u3100\u2d00\u3000","hex":"00 6e 00 2d 00 63 00 6f 00 72 00 65 00 2d 00 6c 00 69 00 63 00 65 00 6e 00 73 00 65 00 6d 00 61 00 6e 00 61 00 67 00 65 00 72 00 2d 00 6c 00 31 00 2d 00 31 00 2d 00 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 65 00 78 00 74 00 2d"}],"time":"2026-04-25T07:22:48.053Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:48.053Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:48.053Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:48.053Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:48.053Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x62be9b0","args":["0x126cdc4","0x1","0x1","0x7ffb","0x33","0x18b03ec","0x206","0x6","0x900184","0x62beb74"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffb","0x33","0x18b03ec","0x206","0x6","0x900184","0x62beb74","0x76fc4ef5","0x9c1b20","0x1879e68","0x6","0xd0e071e4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":51,"ptr":"0x18b03ec","utf16":"\u0001\u0005","hex":"01 00 05 00 00 00 00 00 00 00 03 00 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 00 00 50 80 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":51,"ptr":"0x18b03ec","utf16":"\u0001\u0005","hex":"01 00 05 00 00 00 00 00 00 00 03 00 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 00 00 50 80 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:48.086Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x62be940","args":["0x1","0x1","0x7ffb","0x33","0x18b03ec","0x23f206f5","0x62be9b0","0x1879e64","0x1879dc0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffb","0x33","0x18b03ec","0x23f206f5","0x62be9b0","0x1879e64","0x1879dc0","0x7700459e","0x62be948","0x62be9fc","0x62beb64","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":51,"ptr":"0x18b03ec","utf16":"\u0001\u0005","hex":"01 00 05 00 00 00 00 00 00 00 03 00 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 00 00 50 80 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":51,"ptr":"0x18b03ec","utf16":"\u0001\u0005","hex":"01 00 05 00 00 00 00 00 00 00 03 00 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 00 00 50 80 00"}],"time":"2026-04-25T07:22:48.092Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x62be8f8","args":["0x1","0x1200","0x33","0x18b03ec","0x0","0x23f20665","0x18b03ec","0x9effe8","0x1","0x62be9ac"],"stack":["0x9bdd43","0x1","0x1200","0x33","0x18b03ec","0x0","0x23f20665","0x18b03ec","0x9effe8","0x1","0x62be9ac","0x62be940","0x1","0x1","0x62be9a0","0x9cf3a6","0xffffffff","0x62be9ac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":51,"ptr":"0x18b03ec","utf16":"\u0001\u0005","hex":"01 00 05 00 00 00 00 00 00 00 03 00 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 00 00 50 80 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\u9e68\u0187\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":51,"ptr":"0x18b03ec","utf16":"\u0001\u0005","hex":"01 00 05 00 00 00 00 00 00 00 03 00 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 00 00 50 80 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\u9e68\u0187\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:48.097Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x62be894","args":["0x1","0x33","0x18b03ec","0x0","0x23f207ad","0x18b03ec","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x33","0x18b03ec","0x0","0x23f207ad","0x18b03ec","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b03ec","0x9effe8","0x62be93c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":51,"ptr":"0x18b03ec","utf16":"\u0001\u0005","hex":"01 00 05 00 00 00 00 00 00 00 03 00 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 00 00 50 80 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":51,"ptr":"0x18b03ec","utf16":"\u0001\u0005","hex":"01 00 05 00 00 00 00 00 00 00 03 00 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00 00 00 50 80 00"}],"time":"2026-04-25T07:22:48.102Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:48.102Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:48.103Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:48.103Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:48.103Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x62be9b0","args":["0x126cdc4","0x1","0x1","0x7ffb","0x58","0x1887b0c","0x206","0x6","0x900184","0x62beb74"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffb","0x58","0x1887b0c","0x206","0x6","0x900184","0x62beb74","0x76fc4ef5","0x9c1b20","0x19248f0","0x6","0xd0e071e4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":88,"ptr":"0x1887b0c","utf16":"\u0001*","hex":"01 00 2a 00 00 00 00 00 00 00 ba 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 88 8a b4 ee d6 10 48 a1 ac 1d 2b f6 1d 9c f0 03 00 00 00 c0 00 f0 a1 67 51 84 d4 dc 01 02 16 cd 5b 07"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":88,"ptr":"0x1887b0c","utf16":"\u0001*","hex":"01 00 2a 00 00 00 00 00 00 00 ba 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 88 8a b4 ee d6 10 48 a1 ac 1d 2b f6 1d 9c f0 03 00 00 00 c0 00 f0 a1 67 51 84 d4 dc 01 02 16 cd 5b 07"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:48.112Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x62be940","args":["0x1","0x1","0x7ffb","0x58","0x1887b0c","0x23f206f5","0x62be9b0","0x19248ec","0x1924848","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffb","0x58","0x1887b0c","0x23f206f5","0x62be9b0","0x19248ec","0x1924848","0x7700459e","0x62be948","0x62be9fc","0x62beb64","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":88,"ptr":"0x1887b0c","utf16":"\u0001*","hex":"01 00 2a 00 00 00 00 00 00 00 ba 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 88 8a b4 ee d6 10 48 a1 ac 1d 2b f6 1d 9c f0 03 00 00 00 c0 00 f0 a1 67 51 84 d4 dc 01 02 16 cd 5b 07"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":88,"ptr":"0x1887b0c","utf16":"\u0001*","hex":"01 00 2a 00 00 00 00 00 00 00 ba 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 88 8a b4 ee d6 10 48 a1 ac 1d 2b f6 1d 9c f0 03 00 00 00 c0 00 f0 a1 67 51 84 d4 dc 01 02 16 cd 5b 07"}],"time":"2026-04-25T07:22:48.118Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x62be8f8","args":["0x1","0x1200","0x58","0x1887b0c","0x0","0x23f20665","0x1887b0c","0x9effe8","0x1","0x62be9ac"],"stack":["0x9bdd43","0x1","0x1200","0x58","0x1887b0c","0x0","0x23f20665","0x1887b0c","0x9effe8","0x1","0x62be9ac","0x62be940","0x1","0x1","0x62be9a0","0x9cf3a6","0xffffffff","0x62be9ac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":88,"ptr":"0x1887b0c","utf16":"\u0001*","hex":"01 00 2a 00 00 00 00 00 00 00 ba 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 88 8a b4 ee d6 10 48 a1 ac 1d 2b f6 1d 9c f0 03 00 00 00 c0 00 f0 a1 67 51 84 d4 dc 01 02 16 cd 5b 07"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\u48f0�\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":88,"ptr":"0x1887b0c","utf16":"\u0001*","hex":"01 00 2a 00 00 00 00 00 00 00 ba 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 88 8a b4 ee d6 10 48 a1 ac 1d 2b f6 1d 9c f0 03 00 00 00 c0 00 f0 a1 67 51 84 d4 dc 01 02 16 cd 5b 07"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\u48f0�\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:48.125Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x62be894","args":["0x1","0x58","0x1887b0c","0x0","0x23f207ad","0x1887b0c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x58","0x1887b0c","0x0","0x23f207ad","0x1887b0c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1887b0c","0x9effe8","0x62be93c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":88,"ptr":"0x1887b0c","utf16":"\u0001*","hex":"01 00 2a 00 00 00 00 00 00 00 ba 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 88 8a b4 ee d6 10 48 a1 ac 1d 2b f6 1d 9c f0 03 00 00 00 c0 00 f0 a1 67 51 84 d4 dc 01 02 16 cd 5b 07"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":88,"ptr":"0x1887b0c","utf16":"\u0001*","hex":"01 00 2a 00 00 00 00 00 00 00 ba 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 88 8a b4 ee d6 10 48 a1 ac 1d 2b f6 1d 9c f0 03 00 00 00 c0 00 f0 a1 67 51 84 d4 dc 01 02 16 cd 5b 07"}],"time":"2026-04-25T07:22:48.130Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:48.131Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:48.131Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:48.131Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:48.131Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x62be9b0","args":["0x126cdc4","0x1","0x1","0x7ffd","0x58","0x1914e64","0x206","0x6","0x900184","0x62beb74"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x58","0x1914e64","0x206","0x6","0x900184","0x62beb74","0x76fc4ef5","0x9c1b20","0x5175910","0x6","0xd0e071e4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":88,"ptr":"0x1914e64","utf16":"\u0001*","hex":"01 00 2a 00 00 00 00 00 00 00 bb 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 05 00 00 00 c0 00 f0 a1 67 51 84 d4 dc 01 02 16 cd 5b 07"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":88,"ptr":"0x1914e64","utf16":"\u0001*","hex":"01 00 2a 00 00 00 00 00 00 00 bb 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 05 00 00 00 c0 00 f0 a1 67 51 84 d4 dc 01 02 16 cd 5b 07"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:48.140Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x62be940","args":["0x1","0x1","0x7ffd","0x58","0x1914e64","0x23f206f5","0x62be9b0","0x517590c","0x5175868","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x58","0x1914e64","0x23f206f5","0x62be9b0","0x517590c","0x5175868","0x7700459e","0x62be948","0x62be9fc","0x62beb64","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":88,"ptr":"0x1914e64","utf16":"\u0001*","hex":"01 00 2a 00 00 00 00 00 00 00 bb 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 05 00 00 00 c0 00 f0 a1 67 51 84 d4 dc 01 02 16 cd 5b 07"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":88,"ptr":"0x1914e64","utf16":"\u0001*","hex":"01 00 2a 00 00 00 00 00 00 00 bb 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 05 00 00 00 c0 00 f0 a1 67 51 84 d4 dc 01 02 16 cd 5b 07"}],"time":"2026-04-25T07:22:48.146Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x62be8f8","args":["0x1","0x1200","0x58","0x1914e64","0x0","0x23f20665","0x1914e64","0x9effe8","0x1","0x62be9ac"],"stack":["0x9bdd43","0x1","0x1200","0x58","0x1914e64","0x0","0x23f20665","0x1914e64","0x9effe8","0x1","0x62be9ac","0x62be940","0x1","0x1","0x62be9a0","0x9cf3a6","0xffffffff","0x62be9ac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":88,"ptr":"0x1914e64","utf16":"\u0001*","hex":"01 00 2a 00 00 00 00 00 00 00 bb 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 05 00 00 00 c0 00 f0 a1 67 51 84 d4 dc 01 02 16 cd 5b 07"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\u5910\u0517\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":88,"ptr":"0x1914e64","utf16":"\u0001*","hex":"01 00 2a 00 00 00 00 00 00 00 bb 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 05 00 00 00 c0 00 f0 a1 67 51 84 d4 dc 01 02 16 cd 5b 07"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\u5910\u0517\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:48.152Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x62be894","args":["0x1","0x58","0x1914e64","0x0","0x23f207ad","0x1914e64","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x58","0x1914e64","0x0","0x23f207ad","0x1914e64","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1914e64","0x9effe8","0x62be93c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":88,"ptr":"0x1914e64","utf16":"\u0001*","hex":"01 00 2a 00 00 00 00 00 00 00 bb 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 05 00 00 00 c0 00 f0 a1 67 51 84 d4 dc 01 02 16 cd 5b 07"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":88,"ptr":"0x1914e64","utf16":"\u0001*","hex":"01 00 2a 00 00 00 00 00 00 00 bb 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 05 00 00 00 c0 00 f0 a1 67 51 84 d4 dc 01 02 16 cd 5b 07"}],"time":"2026-04-25T07:22:48.157Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:48.157Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:48.157Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:48.158Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:48.158Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x62be9b0","args":["0x21f3604","0x1","0x1","0x2","0x2e","0x1914e64","0x206","0x6","0x900184","0x62beb74"],"stack":["0x76ffedd8","0x21f3604","0x1","0x1","0x2","0x2e","0x1914e64","0x206","0x6","0x900184","0x62beb74","0x76fc4ef5","0x9c1b20","0x5175910","0x6","0xd0e071e4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1914e64","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ba 90 04 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x1914e64","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ba 90 04 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:48.167Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x62be940","args":["0x1","0x1","0x2","0x2e","0x1914e64","0x23f206f5","0x62be9b0","0x517590c","0x5175868","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x1914e64","0x23f206f5","0x62be9b0","0x517590c","0x5175868","0x7700459e","0x62be948","0x62be9fc","0x62beb64","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1914e64","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ba 90 04 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1914e64","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ba 90 04 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:48.173Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x62be8f8","args":["0x1","0x1200","0x2e","0x1914e64","0x0","0x23f20665","0x1914e64","0x9effe8","0x1","0x62be9ac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x1914e64","0x0","0x23f20665","0x1914e64","0x9effe8","0x1","0x62be9ac","0x62be940","0x1","0x1","0x62be9a0","0x9cf3a6","0xffffffff","0x62be9ac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1914e64","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ba 90 04 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\u3604\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\u5910\u0517\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1914e64","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ba 90 04 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\u3604\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\u5910\u0517\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:48.180Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x62be894","args":["0x1","0x2e","0x1914e64","0x0","0x23f207ad","0x1914e64","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x1914e64","0x0","0x23f207ad","0x1914e64","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1914e64","0x9effe8","0x62be93c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x1914e64","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ba 90 04 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1914e64","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ba 90 04 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:48.186Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:48.186Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:48.186Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:48.186Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:48.186Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x62be9b0","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x18b6a1c","0x206","0x6","0x900184","0x62beb74"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x18b6a1c","0x206","0x6","0x900184","0x62beb74","0x76fc4ef5","0x9c1b20","0x51741f0","0x6","0xd0e071e4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18b6a1c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bb 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18b6a1c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bb 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:48.217Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x62be940","args":["0x1","0x1","0x2","0x2e","0x18b6a1c","0x23f206f5","0x62be9b0","0x51741ec","0x5174148","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x18b6a1c","0x23f206f5","0x62be9b0","0x51741ec","0x5174148","0x7700459e","0x62be948","0x62be9fc","0x62beb64","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18b6a1c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bb 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18b6a1c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bb 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:48.222Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x62be8f8","args":["0x1","0x1200","0x2e","0x18b6a1c","0x0","0x23f20665","0x18b6a1c","0x9effe8","0x1","0x62be9ac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18b6a1c","0x0","0x23f20665","0x18b6a1c","0x9effe8","0x1","0x62be9ac","0x62be940","0x1","0x1","0x62be9a0","0x9cf3a6","0xffffffff","0x62be9ac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18b6a1c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bb 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\u41f0\u0517\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18b6a1c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bb 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\u41f0\u0517\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:48.228Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x62be894","args":["0x1","0x2e","0x18b6a1c","0x0","0x23f207ad","0x18b6a1c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18b6a1c","0x0","0x23f207ad","0x18b6a1c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b6a1c","0x9effe8","0x62be93c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18b6a1c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bb 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18b6a1c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bb 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:48.233Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:48.234Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:48.234Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:48.234Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:48.234Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x62be9b0","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x18b3704","0x206","0x6","0x900184","0x62beb74"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x18b3704","0x206","0x6","0x900184","0x62beb74","0x76fc4ef5","0x9c1b20","0x5175910","0x6","0xd0e071e4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b3704","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d9 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 70 f1 79 51 84 d4 dc 01 06 0a 00 00 00 70 f1 79 51 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18b3704","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d9 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 70 f1 79 51 84 d4 dc 01 06 0a 00 00 00 70 f1 79 51 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:48.264Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x62be940","args":["0x1","0x1","0x7ffd","0x62","0x18b3704","0x23f206f5","0x62be9b0","0x517590c","0x5175868","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18b3704","0x23f206f5","0x62be9b0","0x517590c","0x5175868","0x7700459e","0x62be948","0x62be9fc","0x62beb64","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b3704","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d9 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 70 f1 79 51 84 d4 dc 01 06 0a 00 00 00 70 f1 79 51 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b3704","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d9 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 70 f1 79 51 84 d4 dc 01 06 0a 00 00 00 70 f1 79 51 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:48.270Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x62be8f8","args":["0x1","0x1200","0x62","0x18b3704","0x0","0x23f20665","0x18b3704","0x9effe8","0x1","0x62be9ac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18b3704","0x0","0x23f20665","0x18b3704","0x9effe8","0x1","0x62be9ac","0x62be940","0x1","0x1","0x62be9a0","0x9cf3a6","0xffffffff","0x62be9ac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b3704","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d9 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 70 f1 79 51 84 d4 dc 01 06 0a 00 00 00 70 f1 79 51 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\u5910\u0517\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b3704","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d9 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 70 f1 79 51 84 d4 dc 01 06 0a 00 00 00 70 f1 79 51 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\u5910\u0517\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:48.277Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x62be894","args":["0x1","0x62","0x18b3704","0x0","0x23f207ad","0x18b3704","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18b3704","0x0","0x23f207ad","0x18b3704","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b3704","0x9effe8","0x62be93c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18b3704","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d9 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 70 f1 79 51 84 d4 dc 01 06 0a 00 00 00 70 f1 79 51 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b3704","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 d9 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 70 f1 79 51 84 d4 dc 01 06 0a 00 00 00 70 f1 79 51 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:48.282Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:48.282Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:48.283Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:48.283Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:48.283Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x62be9b0","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x18847f4","0x206","0x6","0x900184","0x62beb74"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x18847f4","0x206","0x6","0x900184","0x62beb74","0x76fc4ef5","0x9c1b20","0x19248f0","0x6","0xd0e071e4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18847f4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 da 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 70 f1 79 51 84 d4 dc 01 06 0a 00 00 00 70 f1 79 51 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18847f4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 da 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 70 f1 79 51 84 d4 dc 01 06 0a 00 00 00 70 f1 79 51 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:48.293Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x62be940","args":["0x1","0x1","0x7ffe","0x62","0x18847f4","0x23f206f5","0x62be9b0","0x19248ec","0x1924848","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x18847f4","0x23f206f5","0x62be9b0","0x19248ec","0x1924848","0x7700459e","0x62be948","0x62be9fc","0x62beb64","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18847f4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 da 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 70 f1 79 51 84 d4 dc 01 06 0a 00 00 00 70 f1 79 51 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18847f4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 da 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 70 f1 79 51 84 d4 dc 01 06 0a 00 00 00 70 f1 79 51 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:48.300Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x62be8f8","args":["0x1","0x1200","0x62","0x18847f4","0x0","0x23f20665","0x18847f4","0x9effe8","0x1","0x62be9ac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18847f4","0x0","0x23f20665","0x18847f4","0x9effe8","0x1","0x62be9ac","0x62be940","0x1","0x1","0x62be9a0","0x9cf3a6","0xffffffff","0x62be9ac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18847f4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 da 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 70 f1 79 51 84 d4 dc 01 06 0a 00 00 00 70 f1 79 51 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\u48f0�\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18847f4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 da 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 70 f1 79 51 84 d4 dc 01 06 0a 00 00 00 70 f1 79 51 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\u48f0�\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:48.307Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x62be894","args":["0x1","0x62","0x18847f4","0x0","0x23f207ad","0x18847f4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18847f4","0x0","0x23f207ad","0x18847f4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18847f4","0x9effe8","0x62be93c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18847f4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 da 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 70 f1 79 51 84 d4 dc 01 06 0a 00 00 00 70 f1 79 51 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18847f4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 da 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 70 f1 79 51 84 d4 dc 01 06 0a 00 00 00 70 f1 79 51 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:48.313Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:48.313Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:48.313Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:48.313Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:48.314Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x62be9b0","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x183bcfc","0x206","0x6","0x900184","0x62beb74"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x183bcfc","0x206","0x6","0x900184","0x62beb74","0x76fc4ef5","0x9c1b20","0x18e9d30","0x6","0xd0e071e4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x183bcfc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d9 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x183bcfc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d9 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:48.323Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x62be940","args":["0x1","0x1","0x1","0x2e","0x183bcfc","0x23f206f5","0x62be9b0","0x18e9d2c","0x18e9c88","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x183bcfc","0x23f206f5","0x62be9b0","0x18e9d2c","0x18e9c88","0x7700459e","0x62be948","0x62be9fc","0x62beb64","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x183bcfc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d9 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x183bcfc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d9 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:48.330Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x62be8f8","args":["0x1","0x1200","0x2e","0x183bcfc","0x0","0x23f20665","0x183bcfc","0x9effe8","0x1","0x62be9ac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x183bcfc","0x0","0x23f20665","0x183bcfc","0x9effe8","0x1","0x62be9ac","0x62be940","0x1","0x1","0x62be9a0","0x9cf3a6","0xffffffff","0x62be9ac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x183bcfc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d9 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\u9d30\u018e\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x183bcfc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d9 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\u9d30\u018e\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:48.336Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x62be894","args":["0x1","0x2e","0x183bcfc","0x0","0x23f207ad","0x183bcfc","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x183bcfc","0x0","0x23f207ad","0x183bcfc","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x183bcfc","0x9effe8","0x62be93c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x183bcfc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d9 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x183bcfc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 d9 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:48.341Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:48.341Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:48.342Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:48.342Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:48.342Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x62be9b0","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x1914e64","0x206","0x6","0x900184","0x62beb74"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x1914e64","0x206","0x6","0x900184","0x62beb74","0x76fc4ef5","0x9c1b20","0x5175910","0x6","0xd0e071e4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x1914e64","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bc 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 c4 98 51 84 d4 dc 01 06 0a 00 00 00 10 c4 98 51 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x1914e64","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bc 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 c4 98 51 84 d4 dc 01 06 0a 00 00 00 10 c4 98 51 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:48.409Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x62be940","args":["0x1","0x1","0x7ffd","0x62","0x1914e64","0x23f206f5","0x62be9b0","0x517590c","0x5175868","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x1914e64","0x23f206f5","0x62be9b0","0x517590c","0x5175868","0x7700459e","0x62be948","0x62be9fc","0x62beb64","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x1914e64","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bc 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 c4 98 51 84 d4 dc 01 06 0a 00 00 00 10 c4 98 51 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x1914e64","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bc 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 c4 98 51 84 d4 dc 01 06 0a 00 00 00 10 c4 98 51 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:48.415Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x62be8f8","args":["0x1","0x1200","0x62","0x1914e64","0x0","0x23f20665","0x1914e64","0x9effe8","0x1","0x62be9ac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x1914e64","0x0","0x23f20665","0x1914e64","0x9effe8","0x1","0x62be9ac","0x62be940","0x1","0x1","0x62be9a0","0x9cf3a6","0xffffffff","0x62be9ac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x1914e64","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bc 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 c4 98 51 84 d4 dc 01 06 0a 00 00 00 10 c4 98 51 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\u5910\u0517\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x1914e64","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bc 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 c4 98 51 84 d4 dc 01 06 0a 00 00 00 10 c4 98 51 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\u5910\u0517\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:48.423Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x62be894","args":["0x1","0x62","0x1914e64","0x0","0x23f207ad","0x1914e64","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x1914e64","0x0","0x23f207ad","0x1914e64","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1914e64","0x9effe8","0x62be93c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x1914e64","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bc 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 c4 98 51 84 d4 dc 01 06 0a 00 00 00 10 c4 98 51 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x1914e64","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bc 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 c4 98 51 84 d4 dc 01 06 0a 00 00 00 10 c4 98 51 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:48.428Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:48.428Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:48.429Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:48.429Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:48.429Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x18b7b24","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x18b7b24","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51741f0","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18b7b24","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 da 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18b7b24","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 da 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:48.437Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x1","0x2e","0x18b7b24","0x255c009d","0x85efc8","0x51741ec","0x5174148","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18b7b24","0x255c009d","0x85efc8","0x51741ec","0x5174148","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18b7b24","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 da 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18b7b24","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 da 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:48.443Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x18b7b24","0x0","0x255c000d","0x18b7b24","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18b7b24","0x0","0x255c000d","0x18b7b24","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18b7b24","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 da 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u2b0c\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u41f0\u0517\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18b7b24","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 da 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u2b0c\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u41f0\u0517\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:48.450Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x18b7b24","0x0","0x255c0055","0x18b7b24","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18b7b24","0x0","0x255c0055","0x18b7b24","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b7b24","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18b7b24","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 da 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18b7b24","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 da 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:48.455Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:48.456Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:48.456Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:48.456Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:48.456Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x517e3fc","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x517e3fc","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x18e9d30","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x517e3fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bc 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x517e3fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bc 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:48.539Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x2","0x2e","0x517e3fc","0x255c009d","0x85efc8","0x18e9d2c","0x18e9c88","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x517e3fc","0x255c009d","0x85efc8","0x18e9d2c","0x18e9c88","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x517e3fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bc 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x517e3fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bc 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:48.546Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x517e3fc","0x0","0x255c000d","0x517e3fc","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x517e3fc","0x0","0x255c000d","0x517e3fc","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x517e3fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bc 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u9d30\u018e\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x517e3fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bc 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u9d30\u018e\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:48.551Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x517e3fc","0x0","0x255c0055","0x517e3fc","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x517e3fc","0x0","0x255c0055","0x517e3fc","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x517e3fc","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x517e3fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bc 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x517e3fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bc 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:48.556Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:48.556Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:48.556Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:48.556Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:48.557Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x18d6a2c","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x18d6a2c","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x187bb50","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18d6a2c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 db 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 15 c6 51 84 d4 dc 01 06 0a 00 00 00 a0 15 c6 51 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18d6a2c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 db 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 15 c6 51 84 d4 dc 01 06 0a 00 00 00 a0 15 c6 51 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:48.755Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffd","0x62","0x18d6a2c","0x255c009d","0x85efc8","0x187bb4c","0x187baa8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18d6a2c","0x255c009d","0x85efc8","0x187bb4c","0x187baa8","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18d6a2c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 db 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 15 c6 51 84 d4 dc 01 06 0a 00 00 00 a0 15 c6 51 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18d6a2c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 db 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 15 c6 51 84 d4 dc 01 06 0a 00 00 00 a0 15 c6 51 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:48.763Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x18d6a2c","0x0","0x255c000d","0x18d6a2c","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18d6a2c","0x0","0x255c000d","0x18d6a2c","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18d6a2c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 db 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 15 c6 51 84 d4 dc 01 06 0a 00 00 00 a0 15 c6 51 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ubb50\u0187\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18d6a2c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 db 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 15 c6 51 84 d4 dc 01 06 0a 00 00 00 a0 15 c6 51 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ubb50\u0187\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:48.772Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x18d6a2c","0x0","0x255c0055","0x18d6a2c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18d6a2c","0x0","0x255c0055","0x18d6a2c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18d6a2c","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18d6a2c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 db 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 15 c6 51 84 d4 dc 01 06 0a 00 00 00 a0 15 c6 51 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18d6a2c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 db 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 15 c6 51 84 d4 dc 01 06 0a 00 00 00 a0 15 c6 51 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:48.778Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:48.778Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:48.779Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:48.779Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:48.779Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x517e3fc","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x517e3fc","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x18e9d30","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x517e3fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 dc 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 15 c6 51 84 d4 dc 01 06 0a 00 00 00 a0 15 c6 51 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x517e3fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 dc 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 15 c6 51 84 d4 dc 01 06 0a 00 00 00 a0 15 c6 51 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:48.789Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffe","0x62","0x517e3fc","0x255c009d","0x85efc8","0x18e9d2c","0x18e9c88","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x517e3fc","0x255c009d","0x85efc8","0x18e9d2c","0x18e9c88","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x517e3fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 dc 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 15 c6 51 84 d4 dc 01 06 0a 00 00 00 a0 15 c6 51 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x517e3fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 dc 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 15 c6 51 84 d4 dc 01 06 0a 00 00 00 a0 15 c6 51 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:48.799Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x517e3fc","0x0","0x255c000d","0x517e3fc","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x517e3fc","0x0","0x255c000d","0x517e3fc","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x517e3fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 dc 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 15 c6 51 84 d4 dc 01 06 0a 00 00 00 a0 15 c6 51 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u9d30\u018e\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x517e3fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 dc 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 15 c6 51 84 d4 dc 01 06 0a 00 00 00 a0 15 c6 51 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u9d30\u018e\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:48.806Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x517e3fc","0x0","0x255c0055","0x517e3fc","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x517e3fc","0x0","0x255c0055","0x517e3fc","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x517e3fc","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x517e3fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 dc 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 15 c6 51 84 d4 dc 01 06 0a 00 00 00 a0 15 c6 51 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x517e3fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 dc 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 15 c6 51 84 d4 dc 01 06 0a 00 00 00 a0 15 c6 51 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:48.811Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:48.811Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:48.811Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:48.811Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:48.811Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x1917074","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x1917074","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51747b8","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1917074","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 dc 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x1917074","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 dc 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:48.865Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x1","0x2e","0x1917074","0x255c009d","0x85efc8","0x51747b4","0x5174710","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x1917074","0x255c009d","0x85efc8","0x51747b4","0x5174710","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1917074","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 dc 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1917074","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 dc 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:48.871Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x1917074","0x0","0x255c000d","0x1917074","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x1917074","0x0","0x255c000d","0x1917074","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1917074","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 dc 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u2b0c\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u47b8\u0517\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1917074","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 dc 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u2b0c\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u47b8\u0517\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:48.876Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x1917074","0x0","0x255c0055","0x1917074","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x1917074","0x0","0x255c0055","0x1917074","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1917074","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x1917074","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 dc 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1917074","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 dc 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:48.881Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x62be9b0","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x517d2f4","0x206","0x6","0x900184","0x62beb74"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x517d2f4","0x206","0x6","0x900184","0x62beb74","0x76fc4ef5","0x9c1b20","0x18e91a0","0x6","0xd0e071e4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x517d2f4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 db 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x517d2f4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 db 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:48.890Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:48.891Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:48.891Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:48.892Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:48.892Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x62be940","args":["0x1","0x1","0x1","0x2e","0x517d2f4","0x23f206f5","0x62be9b0","0x18e919c","0x18e90f8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x517d2f4","0x23f206f5","0x62be9b0","0x18e919c","0x18e90f8","0x7700459e","0x62be948","0x62be9fc","0x62beb64","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x517d2f4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 db 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x517d2f4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 db 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:48.897Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x62be8f8","args":["0x1","0x1200","0x2e","0x517d2f4","0x0","0x23f20665","0x517d2f4","0x9effe8","0x1","0x62be9ac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x517d2f4","0x0","0x23f20665","0x517d2f4","0x9effe8","0x1","0x62be9ac","0x62be940","0x1","0x1","0x62be9a0","0x9cf3a6","0xffffffff","0x62be9ac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x517d2f4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 db 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\u91a0\u018e\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x517d2f4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 db 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\u91a0\u018e\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:48.906Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x62be894","args":["0x1","0x2e","0x517d2f4","0x0","0x23f207ad","0x517d2f4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x517d2f4","0x0","0x23f207ad","0x517d2f4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x517d2f4","0x9effe8","0x62be93c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x517d2f4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 db 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x517d2f4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 db 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:48.913Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18345c4","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18345c4","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51747b8","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bd 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 0f e5 51 84 d4 dc 01 06 0a 00 00 00 50 0f e5 51 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bd 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 0f e5 51 84 d4 dc 01 06 0a 00 00 00 50 0f e5 51 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:48.921Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:48.921Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:48.921Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:48.921Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:48.921Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffd","0x62","0x18345c4","0x255c009d","0x85efc8","0x51747b4","0x5174710","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18345c4","0x255c009d","0x85efc8","0x51747b4","0x5174710","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bd 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 0f e5 51 84 d4 dc 01 06 0a 00 00 00 50 0f e5 51 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bd 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 0f e5 51 84 d4 dc 01 06 0a 00 00 00 50 0f e5 51 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:48.928Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x18345c4","0x0","0x255c000d","0x18345c4","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18345c4","0x0","0x255c000d","0x18345c4","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bd 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 0f e5 51 84 d4 dc 01 06 0a 00 00 00 50 0f e5 51 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\ucdc4\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u47b8\u0517\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bd 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 0f e5 51 84 d4 dc 01 06 0a 00 00 00 50 0f e5 51 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\ucdc4\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u47b8\u0517\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:48.935Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x18345c4","0x0","0x255c0055","0x18345c4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18345c4","0x0","0x255c0055","0x18345c4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18345c4","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bd 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 0f e5 51 84 d4 dc 01 06 0a 00 00 00 50 0f e5 51 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bd 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 0f e5 51 84 d4 dc 01 06 0a 00 00 00 50 0f e5 51 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:48.939Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:48.940Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:48.940Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:48.940Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:48.940Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x1917074","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x1917074","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51747b8","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1917074","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bd 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x1917074","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bd 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:48.976Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x2","0x2e","0x1917074","0x255c009d","0x85efc8","0x51747b4","0x5174710","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x1917074","0x255c009d","0x85efc8","0x51747b4","0x5174710","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1917074","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bd 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1917074","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bd 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:48.980Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x1917074","0x0","0x255c000d","0x1917074","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x1917074","0x0","0x255c000d","0x1917074","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1917074","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bd 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u47b8\u0517\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1917074","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bd 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u47b8\u0517\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:48.986Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x1917074","0x0","0x255c0055","0x1917074","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x1917074","0x0","0x255c0055","0x1917074","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1917074","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x1917074","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bd 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1917074","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bd 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:48.990Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:48.991Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:48.991Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:48.991Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:48.991Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x1917074","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x1917074","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51747b8","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x1917074","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 dd 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 10 d6 12 52 84 d4 dc 01 06 0a 00 00 00 10 d6 12 52 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x1917074","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 dd 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 10 d6 12 52 84 d4 dc 01 06 0a 00 00 00 10 d6 12 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:49.256Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffd","0x62","0x1917074","0x255c009d","0x85efc8","0x51747b4","0x5174710","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x1917074","0x255c009d","0x85efc8","0x51747b4","0x5174710","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x1917074","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 dd 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 10 d6 12 52 84 d4 dc 01 06 0a 00 00 00 10 d6 12 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x1917074","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 dd 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 10 d6 12 52 84 d4 dc 01 06 0a 00 00 00 10 d6 12 52 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:49.262Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x1917074","0x0","0x255c000d","0x1917074","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x1917074","0x0","0x255c000d","0x1917074","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x1917074","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 dd 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 10 d6 12 52 84 d4 dc 01 06 0a 00 00 00 10 d6 12 52 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u47b8\u0517\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x1917074","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 dd 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 10 d6 12 52 84 d4 dc 01 06 0a 00 00 00 10 d6 12 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u47b8\u0517\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:49.270Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x1917074","0x0","0x255c0055","0x1917074","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x1917074","0x0","0x255c0055","0x1917074","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1917074","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x1917074","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 dd 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 10 d6 12 52 84 d4 dc 01 06 0a 00 00 00 10 d6 12 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x1917074","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 dd 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 10 d6 12 52 84 d4 dc 01 06 0a 00 00 00 10 d6 12 52 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:49.274Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:49.274Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:49.274Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:49.275Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:49.275Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x18d5924","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x18d5924","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x187bb50","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18d5924","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 de 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 10 d6 12 52 84 d4 dc 01 06 0a 00 00 00 10 d6 12 52 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18d5924","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 de 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 10 d6 12 52 84 d4 dc 01 06 0a 00 00 00 10 d6 12 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:49.284Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffe","0x62","0x18d5924","0x255c009d","0x85efc8","0x187bb4c","0x187baa8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x18d5924","0x255c009d","0x85efc8","0x187bb4c","0x187baa8","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18d5924","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 de 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 10 d6 12 52 84 d4 dc 01 06 0a 00 00 00 10 d6 12 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18d5924","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 de 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 10 d6 12 52 84 d4 dc 01 06 0a 00 00 00 10 d6 12 52 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:49.290Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x18d5924","0x0","0x255c000d","0x18d5924","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18d5924","0x0","0x255c000d","0x18d5924","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18d5924","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 de 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 10 d6 12 52 84 d4 dc 01 06 0a 00 00 00 10 d6 12 52 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ubb50\u0187\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18d5924","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 de 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 10 d6 12 52 84 d4 dc 01 06 0a 00 00 00 10 d6 12 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ubb50\u0187\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:49.297Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x18d5924","0x0","0x255c0055","0x18d5924","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18d5924","0x0","0x255c0055","0x18d5924","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18d5924","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18d5924","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 de 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 10 d6 12 52 84 d4 dc 01 06 0a 00 00 00 10 d6 12 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18d5924","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 de 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 10 d6 12 52 84 d4 dc 01 06 0a 00 00 00 10 d6 12 52 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:49.303Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x62be9b0","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x518060c","0x206","0x6","0x900184","0x62beb74"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x518060c","0x206","0x6","0x900184","0x62beb74","0x76fc4ef5","0x9c1b20","0x18e9768","0x6","0xd0e071e4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x518060c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 dd 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x518060c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 dd 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:49.311Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:49.311Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:49.311Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:49.311Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:49.312Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x62be940","args":["0x1","0x1","0x1","0x2e","0x518060c","0x23f206f5","0x62be9b0","0x18e9764","0x18e96c0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x518060c","0x23f206f5","0x62be9b0","0x18e9764","0x18e96c0","0x7700459e","0x62be948","0x62be9fc","0x62beb64","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x518060c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 dd 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x518060c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 dd 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:49.318Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x62be8f8","args":["0x1","0x1200","0x2e","0x518060c","0x0","0x23f20665","0x518060c","0x9effe8","0x1","0x62be9ac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x518060c","0x0","0x23f20665","0x518060c","0x9effe8","0x1","0x62be9ac","0x62be940","0x1","0x1","0x62be9a0","0x9cf3a6","0xffffffff","0x62be9ac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x518060c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 dd 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\u9768\u018e\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x518060c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 dd 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\u9768\u018e\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:49.326Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x62be894","args":["0x1","0x2e","0x518060c","0x0","0x23f207ad","0x518060c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x518060c","0x0","0x23f207ad","0x518060c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x518060c","0x9effe8","0x62be93c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x518060c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 dd 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x518060c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 dd 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:49.332Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:49.333Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:49.333Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:49.333Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:49.333Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x62be9b0","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18b3704","0x206","0x6","0x900184","0x62beb74"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18b3704","0x206","0x6","0x900184","0x62beb74","0x76fc4ef5","0x9c1b20","0x18e91a0","0x6","0xd0e071e4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b3704","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 be 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 81 31 52 84 d4 dc 01 06 0a 00 00 00 a0 81 31 52 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18b3704","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 be 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 81 31 52 84 d4 dc 01 06 0a 00 00 00 a0 81 31 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:49.411Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x62be940","args":["0x1","0x1","0x7ffd","0x62","0x18b3704","0x23f206f5","0x62be9b0","0x18e919c","0x18e90f8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18b3704","0x23f206f5","0x62be9b0","0x18e919c","0x18e90f8","0x7700459e","0x62be948","0x62be9fc","0x62beb64","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b3704","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 be 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 81 31 52 84 d4 dc 01 06 0a 00 00 00 a0 81 31 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b3704","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 be 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 81 31 52 84 d4 dc 01 06 0a 00 00 00 a0 81 31 52 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:49.419Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x62be8f8","args":["0x1","0x1200","0x62","0x18b3704","0x0","0x23f20665","0x18b3704","0x9effe8","0x1","0x62be9ac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18b3704","0x0","0x23f20665","0x18b3704","0x9effe8","0x1","0x62be9ac","0x62be940","0x1","0x1","0x62be9a0","0x9cf3a6","0xffffffff","0x62be9ac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b3704","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 be 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 81 31 52 84 d4 dc 01 06 0a 00 00 00 a0 81 31 52 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\u91a0\u018e\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b3704","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 be 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 81 31 52 84 d4 dc 01 06 0a 00 00 00 a0 81 31 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\u91a0\u018e\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:49.426Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x62be894","args":["0x1","0x62","0x18b3704","0x0","0x23f207ad","0x18b3704","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18b3704","0x0","0x23f207ad","0x18b3704","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b3704","0x9effe8","0x62be93c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18b3704","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 be 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 81 31 52 84 d4 dc 01 06 0a 00 00 00 a0 81 31 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b3704","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 be 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 81 31 52 84 d4 dc 01 06 0a 00 00 00 a0 81 31 52 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:49.431Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:49.432Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:49.432Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:49.432Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:49.432Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x18345c4","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x18345c4","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x187bb50","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18345c4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 de 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18345c4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 de 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:49.440Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x1","0x2e","0x18345c4","0x255c009d","0x85efc8","0x187bb4c","0x187baa8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18345c4","0x255c009d","0x85efc8","0x187bb4c","0x187baa8","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18345c4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 de 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18345c4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 de 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:49.447Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x18345c4","0x0","0x255c000d","0x18345c4","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18345c4","0x0","0x255c000d","0x18345c4","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18345c4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 de 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u2b0c\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ubb50\u0187\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18345c4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 de 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u2b0c\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ubb50\u0187\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:49.454Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x18345c4","0x0","0x255c0055","0x18345c4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18345c4","0x0","0x255c0055","0x18345c4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18345c4","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18345c4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 de 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18345c4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 de 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:49.459Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:49.460Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:49.460Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:49.460Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:49.460Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x18d3714","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x18d3714","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51bc7d8","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18d3714","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 be 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18d3714","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 be 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:49.524Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x2","0x2e","0x18d3714","0x255c009d","0x85efc8","0x51bc7d4","0x51bc730","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x18d3714","0x255c009d","0x85efc8","0x51bc7d4","0x51bc730","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18d3714","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 be 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18d3714","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 be 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:49.531Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x18d3714","0x0","0x255c000d","0x18d3714","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18d3714","0x0","0x255c000d","0x18d3714","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18d3714","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 be 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\uc7d8\u051b\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18d3714","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 be 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\uc7d8\u051b\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:49.538Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x18d3714","0x0","0x255c0055","0x18d3714","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18d3714","0x0","0x255c0055","0x18d3714","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18d3714","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18d3714","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 be 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18d3714","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 be 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:49.544Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:49.544Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:49.544Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:49.544Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:49.544Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x18345c4","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x18345c4","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51bc7d8","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 df 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 d3 5e 52 84 d4 dc 01 06 0a 00 00 00 30 d3 5e 52 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 df 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 d3 5e 52 84 d4 dc 01 06 0a 00 00 00 30 d3 5e 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:49.759Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffd","0x62","0x18345c4","0x255c009d","0x85efc8","0x51bc7d4","0x51bc730","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18345c4","0x255c009d","0x85efc8","0x51bc7d4","0x51bc730","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 df 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 d3 5e 52 84 d4 dc 01 06 0a 00 00 00 30 d3 5e 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 df 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 d3 5e 52 84 d4 dc 01 06 0a 00 00 00 30 d3 5e 52 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:49.768Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x18345c4","0x0","0x255c000d","0x18345c4","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18345c4","0x0","0x255c000d","0x18345c4","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 df 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 d3 5e 52 84 d4 dc 01 06 0a 00 00 00 30 d3 5e 52 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\uc7d8\u051b\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 df 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 d3 5e 52 84 d4 dc 01 06 0a 00 00 00 30 d3 5e 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\uc7d8\u051b\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:49.778Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x18345c4","0x0","0x255c0055","0x18345c4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18345c4","0x0","0x255c0055","0x18345c4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18345c4","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 df 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 d3 5e 52 84 d4 dc 01 06 0a 00 00 00 30 d3 5e 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18345c4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 df 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 d3 5e 52 84 d4 dc 01 06 0a 00 00 00 30 d3 5e 52 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:49.786Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:49.787Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:49.787Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:49.787Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:49.787Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x523467c","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x523467c","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x5172508","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x523467c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e0 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 d3 5e 52 84 d4 dc 01 06 0a 00 00 00 30 d3 5e 52 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x523467c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e0 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 d3 5e 52 84 d4 dc 01 06 0a 00 00 00 30 d3 5e 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:49.796Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffe","0x62","0x523467c","0x255c009d","0x85efc8","0x5172504","0x5172460","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x523467c","0x255c009d","0x85efc8","0x5172504","0x5172460","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x523467c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e0 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 d3 5e 52 84 d4 dc 01 06 0a 00 00 00 30 d3 5e 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x523467c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e0 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 d3 5e 52 84 d4 dc 01 06 0a 00 00 00 30 d3 5e 52 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:49.802Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x523467c","0x0","0x255c000d","0x523467c","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x523467c","0x0","0x255c000d","0x523467c","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x523467c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e0 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 d3 5e 52 84 d4 dc 01 06 0a 00 00 00 30 d3 5e 52 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u2508\u0517\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x523467c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e0 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 d3 5e 52 84 d4 dc 01 06 0a 00 00 00 30 d3 5e 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u2508\u0517\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:49.809Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x523467c","0x0","0x255c0055","0x523467c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x523467c","0x0","0x255c0055","0x523467c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x523467c","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x523467c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e0 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 d3 5e 52 84 d4 dc 01 06 0a 00 00 00 30 d3 5e 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x523467c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e0 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 d3 5e 52 84 d4 dc 01 06 0a 00 00 00 30 d3 5e 52 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:49.815Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:49.815Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:49.815Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:49.815Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:49.815Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x1917074","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x1917074","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51bc7d8","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1917074","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e0 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x1917074","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e0 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:49.851Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x1","0x2e","0x1917074","0x255c009d","0x85efc8","0x51bc7d4","0x51bc730","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x1917074","0x255c009d","0x85efc8","0x51bc7d4","0x51bc730","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1917074","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e0 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1917074","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e0 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:49.857Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x1917074","0x0","0x255c000d","0x1917074","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x1917074","0x0","0x255c000d","0x1917074","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1917074","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e0 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u2b0c\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\uc7d8\u051b\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1917074","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e0 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u2b0c\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\uc7d8\u051b\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:49.863Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x1917074","0x0","0x255c0055","0x1917074","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x1917074","0x0","0x255c0055","0x1917074","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1917074","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x1917074","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e0 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1917074","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e0 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:49.867Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x62be9b0","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x1914e64","0x206","0x6","0x900184","0x62beb74"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x1914e64","0x206","0x6","0x900184","0x62beb74","0x76fc4ef5","0x9c1b20","0x18e91a0","0x6","0xd0e071e4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1914e64","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 df 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x1914e64","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 df 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:49.875Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:49.876Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:49.876Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:49.876Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:49.876Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x62be940","args":["0x1","0x1","0x1","0x2e","0x1914e64","0x23f206f5","0x62be9b0","0x18e919c","0x18e90f8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x1914e64","0x23f206f5","0x62be9b0","0x18e919c","0x18e90f8","0x7700459e","0x62be948","0x62be9fc","0x62beb64","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1914e64","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 df 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x1914e64","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 df 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:49.882Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x62be8f8","args":["0x1","0x1200","0x2e","0x1914e64","0x0","0x23f20665","0x1914e64","0x9effe8","0x1","0x62be9ac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x1914e64","0x0","0x23f20665","0x1914e64","0x9effe8","0x1","0x62be9ac","0x62be940","0x1","0x1","0x62be9a0","0x9cf3a6","0xffffffff","0x62be9ac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1914e64","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 df 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\u91a0\u018e\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x1914e64","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 df 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\u91a0\u018e\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:49.890Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x62be894","args":["0x1","0x2e","0x1914e64","0x0","0x23f207ad","0x1914e64","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x1914e64","0x0","0x23f207ad","0x1914e64","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1914e64","0x9effe8","0x62be93c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x1914e64","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 df 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x1914e64","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 df 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:49.897Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:49.897Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:49.897Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:49.897Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:49.897Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x62be9b0","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18b03ec","0x206","0x6","0x900184","0x62beb74"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18b03ec","0x206","0x6","0x900184","0x62beb74","0x76fc4ef5","0x9c1b20","0x5175910","0x6","0xd0e071e4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b03ec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bf 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 cc 7d 52 84 d4 dc 01 06 0a 00 00 00 e0 cc 7d 52 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18b03ec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bf 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 cc 7d 52 84 d4 dc 01 06 0a 00 00 00 e0 cc 7d 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:49.910Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x62be940","args":["0x1","0x1","0x7ffd","0x62","0x18b03ec","0x23f206f5","0x62be9b0","0x517590c","0x5175868","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18b03ec","0x23f206f5","0x62be9b0","0x517590c","0x5175868","0x7700459e","0x62be948","0x62be9fc","0x62beb64","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b03ec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bf 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 cc 7d 52 84 d4 dc 01 06 0a 00 00 00 e0 cc 7d 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b03ec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bf 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 cc 7d 52 84 d4 dc 01 06 0a 00 00 00 e0 cc 7d 52 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:49.916Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x62be8f8","args":["0x1","0x1200","0x62","0x18b03ec","0x0","0x23f20665","0x18b03ec","0x9effe8","0x1","0x62be9ac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18b03ec","0x0","0x23f20665","0x18b03ec","0x9effe8","0x1","0x62be9ac","0x62be940","0x1","0x1","0x62be9a0","0x9cf3a6","0xffffffff","0x62be9ac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b03ec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bf 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 cc 7d 52 84 d4 dc 01 06 0a 00 00 00 e0 cc 7d 52 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\u5910\u0517\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b03ec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bf 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 cc 7d 52 84 d4 dc 01 06 0a 00 00 00 e0 cc 7d 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\u5910\u0517\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:49.923Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x62be894","args":["0x1","0x62","0x18b03ec","0x0","0x23f207ad","0x18b03ec","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18b03ec","0x0","0x23f207ad","0x18b03ec","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b03ec","0x9effe8","0x62be93c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18b03ec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bf 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 cc 7d 52 84 d4 dc 01 06 0a 00 00 00 e0 cc 7d 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b03ec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 bf 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 e0 cc 7d 52 84 d4 dc 01 06 0a 00 00 00 e0 cc 7d 52 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:49.928Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:49.929Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:49.929Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:49.929Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:49.929Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x62be9b0","args":["0x21f3604","0x1","0x1","0x1","0x68","0x18847f4","0x206","0x6","0x900184","0x62beb74"],"stack":["0x76ffedd8","0x21f3604","0x1","0x1","0x1","0x68","0x18847f4","0x206","0x6","0x900184","0x62beb74","0x76fc4ef5","0x9c1b20","0x19248f0","0x6","0xd0e071e4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":104,"ptr":"0x18847f4","utf16":"\u0001:","hex":"01 00 3a 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 02 00 00 30 75 00 00 21 01 00 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 01 00 53 f2 9a 00 6a 00 0a 00 5f f1 00 00 01 00 00 00 22 01 00 01 00 53 f2 9a 00 6b 00 0a 00 87 3a 00 00 02 00 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":104,"ptr":"0x18847f4","utf16":"\u0001:","hex":"01 00 3a 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 02 00 00 30 75 00 00 21 01 00 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 01 00 53 f2 9a 00 6a 00 0a 00 5f f1 00 00 01 00 00 00 22 01 00 01 00 53 f2 9a 00 6b 00 0a 00 87 3a 00 00 02 00 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:49.956Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x62be940","args":["0x1","0x1","0x1","0x68","0x18847f4","0x23f206f5","0x62be9b0","0x19248ec","0x1924848","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x68","0x18847f4","0x23f206f5","0x62be9b0","0x19248ec","0x1924848","0x7700459e","0x62be948","0x62be9fc","0x62beb64","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":104,"ptr":"0x18847f4","utf16":"\u0001:","hex":"01 00 3a 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 02 00 00 30 75 00 00 21 01 00 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 01 00 53 f2 9a 00 6a 00 0a 00 5f f1 00 00 01 00 00 00 22 01 00 01 00 53 f2 9a 00 6b 00 0a 00 87 3a 00 00 02 00 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":104,"ptr":"0x18847f4","utf16":"\u0001:","hex":"01 00 3a 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 02 00 00 30 75 00 00 21 01 00 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 01 00 53 f2 9a 00 6a 00 0a 00 5f f1 00 00 01 00 00 00 22 01 00 01 00 53 f2 9a 00 6b 00 0a 00 87 3a 00 00 02 00 00 00"}],"time":"2026-04-25T07:22:49.962Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x62be8f8","args":["0x1","0x1200","0x68","0x18847f4","0x0","0x23f20665","0x18847f4","0x9effe8","0x1","0x62be9ac"],"stack":["0x9bdd43","0x1","0x1200","0x68","0x18847f4","0x0","0x23f20665","0x18847f4","0x9effe8","0x1","0x62be9ac","0x62be940","0x1","0x1","0x62be9a0","0x9cf3a6","0xffffffff","0x62be9ac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":104,"ptr":"0x18847f4","utf16":"\u0001:","hex":"01 00 3a 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 02 00 00 30 75 00 00 21 01 00 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 01 00 53 f2 9a 00 6a 00 0a 00 5f f1 00 00 01 00 00 00 22 01 00 01 00 53 f2 9a 00 6b 00 0a 00 87 3a 00 00 02 00 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\u3604\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\u48f0�\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":104,"ptr":"0x18847f4","utf16":"\u0001:","hex":"01 00 3a 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 02 00 00 30 75 00 00 21 01 00 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 01 00 53 f2 9a 00 6a 00 0a 00 5f f1 00 00 01 00 00 00 22 01 00 01 00 53 f2 9a 00 6b 00 0a 00 87 3a 00 00 02 00 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\u3604\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\u48f0�\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:49.969Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x62be894","args":["0x1","0x68","0x18847f4","0x0","0x23f207ad","0x18847f4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x68","0x18847f4","0x0","0x23f207ad","0x18847f4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18847f4","0x9effe8","0x62be93c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":104,"ptr":"0x18847f4","utf16":"\u0001:","hex":"01 00 3a 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 02 00 00 30 75 00 00 21 01 00 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 01 00 53 f2 9a 00 6a 00 0a 00 5f f1 00 00 01 00 00 00 22 01 00 01 00 53 f2 9a 00 6b 00 0a 00 87 3a 00 00 02 00 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":104,"ptr":"0x18847f4","utf16":"\u0001:","hex":"01 00 3a 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 02 00 00 30 75 00 00 21 01 00 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 01 00 53 f2 9a 00 6a 00 0a 00 5f f1 00 00 01 00 00 00 22 01 00 01 00 53 f2 9a 00 6b 00 0a 00 87 3a 00 00 02 00 00 00"}],"time":"2026-04-25T07:22:49.976Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x18d03fc","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x18d03fc","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51bcda0","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18d03fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bf 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18d03fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bf 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:49.985Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:49.985Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:49.985Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:49.985Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:49.985Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x2","0x2e","0x18d03fc","0x255c009d","0x85efc8","0x51bcd9c","0x51bccf8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x18d03fc","0x255c009d","0x85efc8","0x51bcd9c","0x51bccf8","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18d03fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bf 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18d03fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bf 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:49.991Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x18d03fc","0x0","0x255c000d","0x18d03fc","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18d03fc","0x0","0x255c000d","0x18d03fc","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18d03fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bf 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ucda0\u051b\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18d03fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bf 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ucda0\u051b\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:49.998Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x18d03fc","0x0","0x255c0055","0x18d03fc","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18d03fc","0x0","0x255c0055","0x18d03fc","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18d03fc","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18d03fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bf 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18d03fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 bf 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:50.004Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:50.004Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:50.004Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:50.005Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:50.005Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x1269e84","0x1","0x1","0x7ffb","0x2e","0x18345c4","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffb","0x2e","0x18345c4","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51bc7d8","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18345c4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18345c4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:50.015Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x7ffb","0x2e","0x18345c4","0x27e700f5","0x23eefb0","0x51bc7d4","0x51bc730","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffb","0x2e","0x18345c4","0x27e700f5","0x23eefb0","0x51bc7d4","0x51bc730","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18345c4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18345c4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:50.022Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x2e","0x18345c4","0x0","0x27e70065","0x18345c4","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18345c4","0x0","0x27e70065","0x18345c4","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18345c4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\uc7d8\u051b\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18345c4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\uc7d8\u051b\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:50.030Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x2e","0x18345c4","0x0","0x27e701ad","0x18345c4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18345c4","0x0","0x27e701ad","0x18345c4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18345c4","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18345c4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18345c4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:50.036Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f3604","0x1","0x1","0x2","0x53","0x5239ba4","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f3604","0x1","0x1","0x2","0x53","0x5239ba4","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51bc210","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":83,"ptr":"0x5239ba4","utf16":"\u0001%","hex":"01 00 25 00 00 00 00 00 00 00 05 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 21 01 00 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 05 00 36 d7 02 00 9b 00 0a 00 3e da 00 00 03 00 00 00"},{"source":"args.byref","sizeIndex":4,"ptrIndex":5,"size":83,"ptr":"0x250001","utf16":"\u0002\u4e00\ubc61\u1f00","hex":"02 00 00 4e 61 bc 00 1f 00 00 00 00 00 00 00 15 ec 65 01 10 00 00 00 00 00 00 00 3e 55 6b 01 20 00 00 00 00 00 00 00 8c 25 a4 01 10 00 00 00 00 00 00 00 92 d4 c4 01 20 00 00 00 00 00 00 00 be 23 ec 01 20 00 00 00 00 00 00 00 d2 76 0f 02 2f 00 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":83,"ptr":"0x5239ba4","utf16":"\u0001%","hex":"01 00 25 00 00 00 00 00 00 00 05 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 21 01 00 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 05 00 36 d7 02 00 9b 00 0a 00 3e da 00 00 03 00 00 00"},{"source":"stack.byref","sizeIndex":5,"ptrIndex":6,"size":83,"ptr":"0x250001","utf16":"\u0002\u4e00\ubc61\u1f00","hex":"02 00 00 4e 61 bc 00 1f 00 00 00 00 00 00 00 15 ec 65 01 10 00 00 00 00 00 00 00 3e 55 6b 01 20 00 00 00 00 00 00 00 8c 25 a4 01 10 00 00 00 00 00 00 00 92 d4 c4 01 20 00 00 00 00 00 00 00 be 23 ec 01 20 00 00 00 00 00 00 00 d2 76 0f 02 2f 00 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:50.044Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:50.045Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:50.045Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:50.045Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:50.045Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x2","0x53","0x5239ba4","0x255c009d","0x85efc8","0x51bc20c","0x51bc168","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x53","0x5239ba4","0x255c009d","0x85efc8","0x51bc20c","0x51bc168","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":83,"ptr":"0x5239ba4","utf16":"\u0001%","hex":"01 00 25 00 00 00 00 00 00 00 05 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 21 01 00 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 05 00 36 d7 02 00 9b 00 0a 00 3e da 00 00 03 00 00 00"},{"source":"args.byref","sizeIndex":3,"ptrIndex":4,"size":83,"ptr":"0x250001","utf16":"\u0002\u4e00\ubc61\u1f00","hex":"02 00 00 4e 61 bc 00 1f 00 00 00 00 00 00 00 15 ec 65 01 10 00 00 00 00 00 00 00 3e 55 6b 01 20 00 00 00 00 00 00 00 8c 25 a4 01 10 00 00 00 00 00 00 00 92 d4 c4 01 20 00 00 00 00 00 00 00 be 23 ec 01 20 00 00 00 00 00 00 00 d2 76 0f 02 2f 00 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":83,"ptr":"0x5239ba4","utf16":"\u0001%","hex":"01 00 25 00 00 00 00 00 00 00 05 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 21 01 00 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 05 00 36 d7 02 00 9b 00 0a 00 3e da 00 00 03 00 00 00"},{"source":"stack.byref","sizeIndex":4,"ptrIndex":5,"size":83,"ptr":"0x250001","utf16":"\u0002\u4e00\ubc61\u1f00","hex":"02 00 00 4e 61 bc 00 1f 00 00 00 00 00 00 00 15 ec 65 01 10 00 00 00 00 00 00 00 3e 55 6b 01 20 00 00 00 00 00 00 00 8c 25 a4 01 10 00 00 00 00 00 00 00 92 d4 c4 01 20 00 00 00 00 00 00 00 be 23 ec 01 20 00 00 00 00 00 00 00 d2 76 0f 02 2f 00 00 00"}],"time":"2026-04-25T07:22:50.051Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x53","0x5239ba4","0x0","0x255c000d","0x5239ba4","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x53","0x5239ba4","0x0","0x255c000d","0x5239ba4","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":83,"ptr":"0x5239ba4","utf16":"\u0001%","hex":"01 00 25 00 00 00 00 00 00 00 05 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 21 01 00 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 05 00 36 d7 02 00 9b 00 0a 00 3e da 00 00 03 00 00 00"},{"source":"args.byref","sizeIndex":2,"ptrIndex":3,"size":83,"ptr":"0x250001","utf16":"\u0002\u4e00\ubc61\u1f00","hex":"02 00 00 4e 61 bc 00 1f 00 00 00 00 00 00 00 15 ec 65 01 10 00 00 00 00 00 00 00 3e 55 6b 01 20 00 00 00 00 00 00 00 8c 25 a4 01 10 00 00 00 00 00 00 00 92 d4 c4 01 20 00 00 00 00 00 00 00 be 23 ec 01 20 00 00 00 00 00 00 00 d2 76 0f 02 2f 00 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u3604\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\uc210\u051b\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":83,"ptr":"0x5239ba4","utf16":"\u0001%","hex":"01 00 25 00 00 00 00 00 00 00 05 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 21 01 00 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 05 00 36 d7 02 00 9b 00 0a 00 3e da 00 00 03 00 00 00"},{"source":"stack.byref","sizeIndex":3,"ptrIndex":4,"size":83,"ptr":"0x250001","utf16":"\u0002\u4e00\ubc61\u1f00","hex":"02 00 00 4e 61 bc 00 1f 00 00 00 00 00 00 00 15 ec 65 01 10 00 00 00 00 00 00 00 3e 55 6b 01 20 00 00 00 00 00 00 00 8c 25 a4 01 10 00 00 00 00 00 00 00 92 d4 c4 01 20 00 00 00 00 00 00 00 be 23 ec 01 20 00 00 00 00 00 00 00 d2 76 0f 02 2f 00 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u3604\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\uc210\u051b\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:50.058Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x53","0x5239ba4","0x0","0x255c0055","0x5239ba4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x53","0x5239ba4","0x0","0x255c0055","0x5239ba4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x5239ba4","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":83,"ptr":"0x5239ba4","utf16":"\u0001%","hex":"01 00 25 00 00 00 00 00 00 00 05 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 21 01 00 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 05 00 36 d7 02 00 9b 00 0a 00 3e da 00 00 03 00 00 00"},{"source":"args.byref","sizeIndex":1,"ptrIndex":2,"size":83,"ptr":"0x250001","utf16":"\u0002\u4e00\ubc61\u1f00","hex":"02 00 00 4e 61 bc 00 1f 00 00 00 00 00 00 00 15 ec 65 01 10 00 00 00 00 00 00 00 3e 55 6b 01 20 00 00 00 00 00 00 00 8c 25 a4 01 10 00 00 00 00 00 00 00 92 d4 c4 01 20 00 00 00 00 00 00 00 be 23 ec 01 20 00 00 00 00 00 00 00 d2 76 0f 02 2f 00 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":83,"ptr":"0x5239ba4","utf16":"\u0001%","hex":"01 00 25 00 00 00 00 00 00 00 05 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 02 00 00 30 75 00 00 21 01 00 b4 d8 98 04 a6 7d 58 42 ba b6 f9 c4 8d f0 ea 9c 05 00 36 d7 02 00 9b 00 0a 00 3e da 00 00 03 00 00 00"},{"source":"stack.byref","sizeIndex":2,"ptrIndex":3,"size":83,"ptr":"0x250001","utf16":"\u0002\u4e00\ubc61\u1f00","hex":"02 00 00 4e 61 bc 00 1f 00 00 00 00 00 00 00 15 ec 65 01 10 00 00 00 00 00 00 00 3e 55 6b 01 20 00 00 00 00 00 00 00 8c 25 a4 01 10 00 00 00 00 00 00 00 92 d4 c4 01 20 00 00 00 00 00 00 00 be 23 ec 01 20 00 00 00 00 00 00 00 d2 76 0f 02 2f 00 00 00"}],"time":"2026-04-25T07:22:50.063Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:50.064Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:50.065Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:50.065Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:50.065Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85edf4","args":["0x1","0x1","0x1","0x51","0x94e7b0","0x255c01fd","0x85eeb8","0x85eee0","0x2209b38","0x0"],"stack":["0x9be1db","0x1","0x1","0x1","0x51","0x94e7b0","0x255c01fd","0x85eeb8","0x85eee0","0x2209b38","0x0","0x3","0x2","0x70ec0005","0x21f3c50","0x9d2b7c","0x23","0x21f3c50"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":81,"ptr":"0x94e7b0","utf16":"\u0001#","hex":"01 00 23 00 00 00 05 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 03 00 ff 80 ee 36 00 16 01 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 00 00 00 00 03 00 00 00 02 00 00 00 05 00 ec 70"},{"source":"args.direct","sizeIndex":11,"ptrIndex":12,"size":2,"ptr":"0x70ec0005","utf16":"","hex":"00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":81,"ptr":"0x94e7b0","utf16":"\u0001#","hex":"01 00 23 00 00 00 05 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 03 00 ff 80 ee 36 00 16 01 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 00 00 00 00 03 00 00 00 02 00 00 00 05 00 ec 70"},{"source":"stack.direct","sizeIndex":12,"ptrIndex":13,"size":2,"ptr":"0x70ec0005","utf16":"","hex":"00 00"},{"source":"stack.direct","sizeIndex":16,"ptrIndex":17,"size":35,"ptr":"0x21f3c50","utf16":"\u0116\u0100","hex":"16 01 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 00 00 00 00 03 00 00 00 02 00 00 00 05 00 ec 70"},{"source":"stack.byref","sizeIndex":16,"ptrIndex":17,"size":35,"ptr":"0x1000116","utf16":"","hex":"00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00"}],"time":"2026-04-25T07:22:50.084Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85edac","args":["0x1","0x1200","0x51","0x94e7b0","0x0","0x255c02a9","0x94e7b0","0x70ec0110","0x51","0x85eea4"],"stack":["0x9bdd43","0x1","0x1200","0x51","0x94e7b0","0x0","0x255c02a9","0x94e7b0","0x70ec0110","0x51","0x85eea4","0x85edf4","0x51","0x1","0x85ee98","0x9cf3a6","0xffffffff","0x85eea4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":81,"ptr":"0x94e7b0","utf16":"\u0001#","hex":"01 00 23 00 00 00 05 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 03 00 ff 80 ee 36 00 16 01 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 00 00 00 00 03 00 00 00 02 00 00 00 05 00 ec 70"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":81,"ptr":"0x85eea4","utf16":"\uef00\x85\ue596\x9b\u0001","hex":"00 ef 85 00 96 e5 9b 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 05 00 00 00 e8 ff 9e 00 08 c0 26 01 fb 7f 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":81,"ptr":"0x85ef00","utf16":"\uef70\x85\u037f\x9c\u3078\u021f\u0001","hex":"70 ef 85 00 7f 03 9c 00 78 30 1f 02 01 00 00 00 29 00 5c 25 a8 01 9f 00 bc e4 1b 05 00 00 00 00 08 c0 26 01 5e 80 fe 70 01 00 00 00 c0 ef 85 00 1c 38 fe 70 b8 6f 26 01 00 00 00 00 43 ef 85 00 b0 6b 26 00 58 ef 85 00 4d 5a fe 70 b8 6f 26 01 00"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ee98","utf16":"\uef64\x85\uf3c9\x9c","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef64","utf16":"\uefc8\x85\uf613\x9c\uffff\uffff\uefd4\x85\u16a0\x9c\u7ffb","hex":"c8"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":81,"ptr":"0x94e7b0","utf16":"\u0001#","hex":"01 00 23 00 00 00 05 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 03 00 ff 80 ee 36 00 16 01 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 00 00 00 00 03 00 00 00 02 00 00 00 05 00 ec 70"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":81,"ptr":"0x85eea4","utf16":"\uef00\x85\ue596\x9b\u0001","hex":"00 ef 85 00 96 e5 9b 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 05 00 00 00 e8 ff 9e 00 08 c0 26 01 fb 7f 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":81,"ptr":"0x85ef00","utf16":"\uef70\x85\u037f\x9c\u3078\u021f\u0001","hex":"70 ef 85 00 7f 03 9c 00 78 30 1f 02 01 00 00 00 29 00 5c 25 a8 01 9f 00 bc e4 1b 05 00 00 00 00 08 c0 26 01 5e 80 fe 70 01 00 00 00 c0 ef 85 00 1c 38 fe 70 b8 6f 26 01 00 00 00 00 43 ef 85 00 b0 6b 26 00 58 ef 85 00 4d 5a fe 70 b8 6f 26 01 00"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ee98","utf16":"\uef64\x85\uf3c9\x9c","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef64","utf16":"\uefc8\x85\uf613\x9c\uffff\uffff\uefd4\x85\u16a0\x9c\u7ffb","hex":"c8"}],"time":"2026-04-25T07:22:50.092Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ed48","args":["0x1","0x51","0x94e7b0","0x0","0x255c02f1","0x94e7b0","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x51","0x94e7b0","0x0","0x255c02f1","0x94e7b0","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x94e7b0","0x9effe8","0x85edf0"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":81,"ptr":"0x94e7b0","utf16":"\u0001#","hex":"01 00 23 00 00 00 05 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 03 00 ff 80 ee 36 00 16 01 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 00 00 00 00 03 00 00 00 02 00 00 00 05 00 ec 70"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":81,"ptr":"0x94e7b0","utf16":"\u0001#","hex":"01 00 23 00 00 00 05 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 03 00 ff 80 ee 36 00 16 01 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 00 00 00 00 03 00 00 00 02 00 00 00 05 00 ec 70"}],"time":"2026-04-25T07:22:50.098Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:50.099Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:50.099Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:50.099Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85edf4","args":["0x1","0x1","0x2","0x51","0x94ebd0","0x255c01fd","0x85eeb8","0x85eee0","0x2209b38","0x77260000"],"stack":["0x9be1db","0x1","0x1","0x2","0x51","0x94ebd0","0x255c01fd","0x85eeb8","0x85eee0","0x2209b38","0x77260000","0x3","0x2","0x21f0005","0x21f3c50","0x9d2b7c","0x23","0x21f3c50"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":81,"ptr":"0x94ebd0","utf16":"\u0001#","hex":"01 00 23 00 00 00 05 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 03 00 3e 80 ee 36 00 16 01 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 00 00 26 77 03 00 00 00 02 00 00 00 05 00 1f 02"},{"source":"args.direct","sizeIndex":11,"ptrIndex":12,"size":2,"ptr":"0x21f0005","utf16":"\u01f3\uee01\ueeff\u02ff","hex":"f3 01"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":81,"ptr":"0x94ebd0","utf16":"\u0001#","hex":"01 00 23 00 00 00 05 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 03 00 3e 80 ee 36 00 16 01 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 00 00 26 77 03 00 00 00 02 00 00 00 05 00 1f 02"},{"source":"stack.direct","sizeIndex":12,"ptrIndex":13,"size":2,"ptr":"0x21f0005","utf16":"\u01f3\uee01\ueeff\u02ff","hex":"f3 01"},{"source":"stack.direct","sizeIndex":16,"ptrIndex":17,"size":35,"ptr":"0x21f3c50","utf16":"\u0116\u0100","hex":"16 01 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 00 00 26 77 03 00 00 00 02 00 00 00 05 00 1f 02"},{"source":"stack.byref","sizeIndex":16,"ptrIndex":17,"size":35,"ptr":"0x1000116","utf16":"","hex":"00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00"}],"time":"2026-04-25T07:22:50.108Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85edac","args":["0x1","0x1200","0x51","0x94ebd0","0x0","0x255c02a9","0x94ebd0","0x70ec0110","0x51","0x85eea4"],"stack":["0x9bdd43","0x1","0x1200","0x51","0x94ebd0","0x0","0x255c02a9","0x94ebd0","0x70ec0110","0x51","0x85eea4","0x85edf4","0x51","0x1","0x85ee98","0x9cf3a6","0xffffffff","0x85eea4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":81,"ptr":"0x94ebd0","utf16":"\u0001#","hex":"01 00 23 00 00 00 05 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 03 00 3e 80 ee 36 00 16 01 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 00 00 26 77 03 00 00 00 02 00 00 00 05 00 1f 02"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":81,"ptr":"0x85eea4","utf16":"\uef00\x85\ue596\x9b\u0001","hex":"00 ef 85 00 96 e5 9b 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 05 00 00 00 e8 ff 9e 00 08 c0 26 01 fb 7f 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 02"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":81,"ptr":"0x85ef00","utf16":"\uef70\x85\u037f\x9c\u3280\u021f\u0001","hex":"70 ef 85 00 7f 03 9c 00 80 32 1f 02 01 00 00 00 29 00 5c 25 a8 01 9f 00 bc e4 1b 05 00 00 00 00 08 c0 26 01 5e 80 fe 70 01 00 00 00 c0 ef 85 00 1c 38 fe 70 b8 6f 26 01 00 00 00 00 43 ef 85 00 b0 6b 26 00 58 ef 85 00 4d 5a fe 70 b8 6f 26 01 00"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ee98","utf16":"\uef64\x85\uf3c9\x9c","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85ef64","utf16":"\uefc8\x85\uf613\x9c\uffff\uffff\uefd4\x85\u16a0\x9c\u7ffb","hex":"c8"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":81,"ptr":"0x94ebd0","utf16":"\u0001#","hex":"01 00 23 00 00 00 05 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 03 00 3e 80 ee 36 00 16 01 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 00 00 26 77 03 00 00 00 02 00 00 00 05 00 1f 02"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":81,"ptr":"0x85eea4","utf16":"\uef00\x85\ue596\x9b\u0001","hex":"00 ef 85 00 96 e5 9b 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 05 00 00 00 e8 ff 9e 00 08 c0 26 01 fb 7f 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 02"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":81,"ptr":"0x85ef00","utf16":"\uef70\x85\u037f\x9c\u3280\u021f\u0001","hex":"70 ef 85 00 7f 03 9c 00 80 32 1f 02 01 00 00 00 29 00 5c 25 a8 01 9f 00 bc e4 1b 05 00 00 00 00 08 c0 26 01 5e 80 fe 70 01 00 00 00 c0 ef 85 00 1c 38 fe 70 b8 6f 26 01 00 00 00 00 43 ef 85 00 b0 6b 26 00 58 ef 85 00 4d 5a fe 70 b8 6f 26 01 00"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ee98","utf16":"\uef64\x85\uf3c9\x9c","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85ef64","utf16":"\uefc8\x85\uf613\x9c\uffff\uffff\uefd4\x85\u16a0\x9c\u7ffb","hex":"c8"}],"time":"2026-04-25T07:22:50.117Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85ed48","args":["0x1","0x51","0x94ebd0","0x0","0x255c02f1","0x94ebd0","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x51","0x94ebd0","0x0","0x255c02f1","0x94ebd0","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x94ebd0","0x9effe8","0x85edf0"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":81,"ptr":"0x94ebd0","utf16":"\u0001#","hex":"01 00 23 00 00 00 05 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 03 00 3e 80 ee 36 00 16 01 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 00 00 26 77 03 00 00 00 02 00 00 00 05 00 1f 02"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":81,"ptr":"0x94ebd0","utf16":"\u0001#","hex":"01 00 23 00 00 00 05 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 03 00 3e 80 ee 36 00 16 01 00 01 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 00 00 26 77 03 00 00 00 02 00 00 00 05 00 1f 02"}],"time":"2026-04-25T07:22:50.124Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x126cdc4","0x1","0x1","0x7ffb","0x2e","0x18d1504","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffb","0x2e","0x18d1504","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51bc210","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18d1504","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 05 00 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18d1504","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 05 00 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:50.133Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:50.133Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:50.133Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:50.134Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.LocalCallbackDataReceived","retval":"0x0","time":"2026-04-25T07:22:50.134Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x7ffb","0x2e","0x18d1504","0x27e700f5","0x23eefb0","0x51bc20c","0x51bc168","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffb","0x2e","0x18d1504","0x27e700f5","0x23eefb0","0x51bc20c","0x51bc168","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18d1504","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 05 00 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18d1504","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 05 00 00 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fb 7f 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:50.140Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x1","time":"2026-04-25T07:22:50.141Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x1","time":"2026-04-25T07:22:50.141Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x18d9d44","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x18d9d44","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51be4c0","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18d9d44","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e1 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 70 1e ab 52 84 d4 dc 01 06 0a 00 00 00 70 1e ab 52 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18d9d44","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e1 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 70 1e ab 52 84 d4 dc 01 06 0a 00 00 00 70 1e ab 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:50.254Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffd","0x62","0x18d9d44","0x255c009d","0x85efc8","0x51be4bc","0x51be418","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18d9d44","0x255c009d","0x85efc8","0x51be4bc","0x51be418","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18d9d44","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e1 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 70 1e ab 52 84 d4 dc 01 06 0a 00 00 00 70 1e ab 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18d9d44","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e1 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 70 1e ab 52 84 d4 dc 01 06 0a 00 00 00 70 1e ab 52 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:50.261Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x18d9d44","0x0","0x255c000d","0x18d9d44","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18d9d44","0x0","0x255c000d","0x18d9d44","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18d9d44","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e1 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 70 1e ab 52 84 d4 dc 01 06 0a 00 00 00 70 1e ab 52 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ue4c0\u051b\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18d9d44","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e1 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 70 1e ab 52 84 d4 dc 01 06 0a 00 00 00 70 1e ab 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ue4c0\u051b\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:50.268Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x18d9d44","0x0","0x255c0055","0x18d9d44","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18d9d44","0x0","0x255c0055","0x18d9d44","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18d9d44","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18d9d44","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e1 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 70 1e ab 52 84 d4 dc 01 06 0a 00 00 00 70 1e ab 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18d9d44","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e1 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 70 1e ab 52 84 d4 dc 01 06 0a 00 00 00 70 1e ab 52 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:50.273Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:50.274Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:50.274Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:50.274Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:50.274Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x18b25fc","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x18b25fc","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51e70c8","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 70 1e ab 52 84 d4 dc 01 06 0a 00 00 00 70 1e ab 52 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 70 1e ab 52 84 d4 dc 01 06 0a 00 00 00 70 1e ab 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:50.282Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffe","0x62","0x18b25fc","0x255c009d","0x85efc8","0x51e70c4","0x51e7020","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x18b25fc","0x255c009d","0x85efc8","0x51e70c4","0x51e7020","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 70 1e ab 52 84 d4 dc 01 06 0a 00 00 00 70 1e ab 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 70 1e ab 52 84 d4 dc 01 06 0a 00 00 00 70 1e ab 52 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:50.289Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x18b25fc","0x0","0x255c000d","0x18b25fc","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18b25fc","0x0","0x255c000d","0x18b25fc","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 70 1e ab 52 84 d4 dc 01 06 0a 00 00 00 70 1e ab 52 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u70c8\u051e\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 70 1e ab 52 84 d4 dc 01 06 0a 00 00 00 70 1e ab 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u70c8\u051e\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:50.296Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x18b25fc","0x0","0x255c0055","0x18b25fc","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18b25fc","0x0","0x255c0055","0x18b25fc","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b25fc","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 70 1e ab 52 84 d4 dc 01 06 0a 00 00 00 70 1e ab 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b25fc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 70 1e ab 52 84 d4 dc 01 06 0a 00 00 00 70 1e ab 52 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:50.301Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x5233574","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x5233574","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51be4c0","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x5233574","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e1 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x5233574","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e1 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:50.308Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:50.308Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:50.309Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:50.309Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:50.309Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x1","0x2e","0x5233574","0x27e700f5","0x23eefb0","0x51be4bc","0x51be418","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x5233574","0x27e700f5","0x23eefb0","0x51be4bc","0x51be418","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x5233574","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e1 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x5233574","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e1 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:50.315Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x2e","0x5233574","0x0","0x27e70065","0x5233574","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x5233574","0x0","0x27e70065","0x5233574","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x5233574","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e1 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\ue4c0\u051b\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x5233574","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e1 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\ue4c0\u051b\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:50.321Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x2e","0x5233574","0x0","0x27e701ad","0x5233574","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x5233574","0x0","0x27e701ad","0x5233574","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x5233574","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x5233574","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e1 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x5233574","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e1 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:50.326Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:50.327Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:50.327Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:50.327Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:50.327Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x191817c","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x191817c","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x5172508","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x191817c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e2 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x191817c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e2 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:50.402Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x1","0x2e","0x191817c","0x27e700f5","0x23eefb0","0x5172504","0x5172460","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x191817c","0x27e700f5","0x23eefb0","0x5172504","0x5172460","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x191817c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e2 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x191817c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e2 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:50.409Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x2e","0x191817c","0x0","0x27e70065","0x191817c","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x191817c","0x0","0x27e70065","0x191817c","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x191817c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e2 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u2b0c\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u2508\u0517\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x191817c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e2 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u2b0c\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u2508\u0517\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:50.416Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x2e","0x191817c","0x0","0x27e701ad","0x191817c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x191817c","0x0","0x27e701ad","0x191817c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x191817c","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x191817c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e2 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x191817c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e2 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:50.421Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18b6a1c","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18b6a1c","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51bea88","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b6a1c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c0 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 18 ca 52 84 d4 dc 01 06 0a 00 00 00 20 18 ca 52 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18b6a1c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c0 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 18 ca 52 84 d4 dc 01 06 0a 00 00 00 20 18 ca 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:50.430Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:50.431Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:50.432Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:50.432Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:50.432Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffd","0x62","0x18b6a1c","0x255c009d","0x85efc8","0x51bea84","0x51be9e0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18b6a1c","0x255c009d","0x85efc8","0x51bea84","0x51be9e0","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b6a1c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c0 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 18 ca 52 84 d4 dc 01 06 0a 00 00 00 20 18 ca 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b6a1c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c0 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 18 ca 52 84 d4 dc 01 06 0a 00 00 00 20 18 ca 52 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:50.438Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x18b6a1c","0x0","0x255c000d","0x18b6a1c","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18b6a1c","0x0","0x255c000d","0x18b6a1c","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b6a1c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c0 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 18 ca 52 84 d4 dc 01 06 0a 00 00 00 20 18 ca 52 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\ucdc4\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\uea88\u051b\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b6a1c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c0 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 18 ca 52 84 d4 dc 01 06 0a 00 00 00 20 18 ca 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\ucdc4\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\uea88\u051b\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:50.444Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x18b6a1c","0x0","0x255c0055","0x18b6a1c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18b6a1c","0x0","0x255c0055","0x18b6a1c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b6a1c","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18b6a1c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c0 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 18 ca 52 84 d4 dc 01 06 0a 00 00 00 20 18 ca 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b6a1c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c0 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 20 18 ca 52 84 d4 dc 01 06 0a 00 00 00 20 18 ca 52 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:50.449Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:50.450Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:50.450Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:50.451Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:50.451Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x18d03fc","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x18d03fc","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51bb680","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18d03fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c0 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18d03fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c0 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:50.506Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x2","0x2e","0x18d03fc","0x255c009d","0x85efc8","0x51bb67c","0x51bb5d8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x18d03fc","0x255c009d","0x85efc8","0x51bb67c","0x51bb5d8","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18d03fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c0 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18d03fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c0 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:50.511Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x18d03fc","0x0","0x255c000d","0x18d03fc","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18d03fc","0x0","0x255c000d","0x18d03fc","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18d03fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c0 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ub680\u051b\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18d03fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c0 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ub680\u051b\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:50.518Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x18d03fc","0x0","0x255c0055","0x18d03fc","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18d03fc","0x0","0x255c0055","0x18d03fc","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18d03fc","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18d03fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c0 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18d03fc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c0 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:50.523Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:50.523Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:50.523Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:50.523Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:50.523Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x1913d5c","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x1913d5c","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51e70c8","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x1913d5c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e3 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 42 f7 52 84 d4 dc 01 06 0a 00 00 00 a0 42 f7 52 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x1913d5c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e3 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 42 f7 52 84 d4 dc 01 06 0a 00 00 00 a0 42 f7 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:50.754Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffd","0x62","0x1913d5c","0x255c009d","0x85efc8","0x51e70c4","0x51e7020","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x1913d5c","0x255c009d","0x85efc8","0x51e70c4","0x51e7020","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x1913d5c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e3 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 42 f7 52 84 d4 dc 01 06 0a 00 00 00 a0 42 f7 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x1913d5c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e3 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 42 f7 52 84 d4 dc 01 06 0a 00 00 00 a0 42 f7 52 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:50.759Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x1913d5c","0x0","0x255c000d","0x1913d5c","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x1913d5c","0x0","0x255c000d","0x1913d5c","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x1913d5c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e3 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 42 f7 52 84 d4 dc 01 06 0a 00 00 00 a0 42 f7 52 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u70c8\u051e\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x1913d5c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e3 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 42 f7 52 84 d4 dc 01 06 0a 00 00 00 a0 42 f7 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u70c8\u051e\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:50.766Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x1913d5c","0x0","0x255c0055","0x1913d5c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x1913d5c","0x0","0x255c0055","0x1913d5c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1913d5c","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x1913d5c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e3 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 42 f7 52 84 d4 dc 01 06 0a 00 00 00 a0 42 f7 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x1913d5c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e3 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 a0 42 f7 52 84 d4 dc 01 06 0a 00 00 00 a0 42 f7 52 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:50.771Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:50.771Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:50.771Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:50.772Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:50.772Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x18389e4","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x18389e4","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51bb0b8","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18389e4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e4 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 42 f7 52 84 d4 dc 01 06 0a 00 00 00 a0 42 f7 52 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18389e4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e4 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 42 f7 52 84 d4 dc 01 06 0a 00 00 00 a0 42 f7 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:50.784Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffe","0x62","0x18389e4","0x255c009d","0x85efc8","0x51bb0b4","0x51bb010","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x18389e4","0x255c009d","0x85efc8","0x51bb0b4","0x51bb010","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18389e4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e4 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 42 f7 52 84 d4 dc 01 06 0a 00 00 00 a0 42 f7 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18389e4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e4 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 42 f7 52 84 d4 dc 01 06 0a 00 00 00 a0 42 f7 52 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:50.793Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x18389e4","0x0","0x255c000d","0x18389e4","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18389e4","0x0","0x255c000d","0x18389e4","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18389e4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e4 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 42 f7 52 84 d4 dc 01 06 0a 00 00 00 a0 42 f7 52 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ub0b8\u051b\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18389e4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e4 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 42 f7 52 84 d4 dc 01 06 0a 00 00 00 a0 42 f7 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ub0b8\u051b\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:50.802Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x18389e4","0x0","0x255c0055","0x18389e4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18389e4","0x0","0x255c0055","0x18389e4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18389e4","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18389e4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e4 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 42 f7 52 84 d4 dc 01 06 0a 00 00 00 a0 42 f7 52 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18389e4","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e4 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 a0 42 f7 52 84 d4 dc 01 06 0a 00 00 00 a0 42 f7 52 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:50.807Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:50.808Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:50.808Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:50.808Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:50.808Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x18d5924","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x18d5924","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51bb680","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18d5924","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e4 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18d5924","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e4 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:50.835Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x1","0x2e","0x18d5924","0x255c009d","0x85efc8","0x51bb67c","0x51bb5d8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18d5924","0x255c009d","0x85efc8","0x51bb67c","0x51bb5d8","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18d5924","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e4 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18d5924","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e4 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:50.843Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x18d5924","0x0","0x255c000d","0x18d5924","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18d5924","0x0","0x255c000d","0x18d5924","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18d5924","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e4 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u2b0c\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ub680\u051b\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18d5924","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e4 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u2b0c\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ub680\u051b\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:50.853Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x18d5924","0x0","0x255c0055","0x18d5924","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18d5924","0x0","0x255c0055","0x18d5924","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18d5924","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18d5924","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e4 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18d5924","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e4 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:50.860Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:50.860Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:50.860Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:50.860Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:50.860Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x18d8c3c","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x18d8c3c","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51bd368","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18d8c3c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e3 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18d8c3c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e3 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:50.868Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x1","0x2e","0x18d8c3c","0x27e700f5","0x23eefb0","0x51bd364","0x51bd2c0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18d8c3c","0x27e700f5","0x23eefb0","0x51bd364","0x51bd2c0","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18d8c3c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e3 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18d8c3c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e3 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:50.874Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x2e","0x18d8c3c","0x0","0x27e70065","0x18d8c3c","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18d8c3c","0x0","0x27e70065","0x18d8c3c","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18d8c3c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e3 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\ud368\u051b\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18d8c3c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e3 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\ud368\u051b\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:50.880Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x2e","0x18d8c3c","0x0","0x27e701ad","0x18d8c3c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18d8c3c","0x0","0x27e701ad","0x18d8c3c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18d8c3c","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18d8c3c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e3 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18d8c3c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e3 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:50.885Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:50.885Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:50.885Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:50.885Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:50.885Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x523467c","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x523467c","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x5172508","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x523467c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c1 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 3c 16 53 84 d4 dc 01 06 0a 00 00 00 50 3c 16 53 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x523467c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c1 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 3c 16 53 84 d4 dc 01 06 0a 00 00 00 50 3c 16 53 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:50.911Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x7ffd","0x62","0x523467c","0x27e700f5","0x23eefb0","0x5172504","0x5172460","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x523467c","0x27e700f5","0x23eefb0","0x5172504","0x5172460","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x523467c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c1 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 3c 16 53 84 d4 dc 01 06 0a 00 00 00 50 3c 16 53 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x523467c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c1 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 3c 16 53 84 d4 dc 01 06 0a 00 00 00 50 3c 16 53 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:50.918Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x62","0x523467c","0x0","0x27e70065","0x523467c","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x523467c","0x0","0x27e70065","0x523467c","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x523467c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c1 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 3c 16 53 84 d4 dc 01 06 0a 00 00 00 50 3c 16 53 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u2508\u0517\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x523467c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c1 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 3c 16 53 84 d4 dc 01 06 0a 00 00 00 50 3c 16 53 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u2508\u0517\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:50.925Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x62","0x523467c","0x0","0x27e701ad","0x523467c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x523467c","0x0","0x27e701ad","0x523467c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x523467c","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x523467c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c1 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 3c 16 53 84 d4 dc 01 06 0a 00 00 00 50 3c 16 53 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x523467c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c1 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 50 3c 16 53 84 d4 dc 01 06 0a 00 00 00 50 3c 16 53 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:50.930Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:50.930Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:50.930Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:50.931Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:50.931Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x18278d4","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x18278d4","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51e7690","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18278d4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c1 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18278d4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c1 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:50.961Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x2","0x2e","0x18278d4","0x27e700f5","0x23eefb0","0x51e768c","0x51e75e8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x18278d4","0x27e700f5","0x23eefb0","0x51e768c","0x51e75e8","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18278d4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c1 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18278d4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c1 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:50.969Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x2e","0x18278d4","0x0","0x27e70065","0x18278d4","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18278d4","0x0","0x27e70065","0x18278d4","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18278d4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c1 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u7690\u051e\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18278d4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c1 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u7690\u051e\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:50.978Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x2e","0x18278d4","0x0","0x27e701ad","0x18278d4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18278d4","0x0","0x27e701ad","0x18278d4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18278d4","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18278d4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c1 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18278d4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c1 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:50.985Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:50.985Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:50.986Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:50.986Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:50.986Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x1913d5c","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x1913d5c","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51e70c8","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x1913d5c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e5 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 f0 b4 43 53 84 d4 dc 01 06 0a 00 00 00 f0 b4 43 53 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x1913d5c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e5 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 f0 b4 43 53 84 d4 dc 01 06 0a 00 00 00 f0 b4 43 53 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:51.250Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x7ffd","0x62","0x1913d5c","0x27e700f5","0x23eefb0","0x51e70c4","0x51e7020","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x1913d5c","0x27e700f5","0x23eefb0","0x51e70c4","0x51e7020","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x1913d5c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e5 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 f0 b4 43 53 84 d4 dc 01 06 0a 00 00 00 f0 b4 43 53 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x1913d5c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e5 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 f0 b4 43 53 84 d4 dc 01 06 0a 00 00 00 f0 b4 43 53 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:51.256Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x62","0x1913d5c","0x0","0x27e70065","0x1913d5c","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x1913d5c","0x0","0x27e70065","0x1913d5c","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x1913d5c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e5 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 f0 b4 43 53 84 d4 dc 01 06 0a 00 00 00 f0 b4 43 53 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u70c8\u051e\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x1913d5c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e5 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 f0 b4 43 53 84 d4 dc 01 06 0a 00 00 00 f0 b4 43 53 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u70c8\u051e\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:51.263Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x62","0x1913d5c","0x0","0x27e701ad","0x1913d5c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x1913d5c","0x0","0x27e701ad","0x1913d5c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1913d5c","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x1913d5c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e5 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 f0 b4 43 53 84 d4 dc 01 06 0a 00 00 00 f0 b4 43 53 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x1913d5c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e5 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 f0 b4 43 53 84 d4 dc 01 06 0a 00 00 00 f0 b4 43 53 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:51.268Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:51.269Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:51.269Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:51.269Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:51.269Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x18d3714","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x18d3714","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x187bb50","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18d3714","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e6 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 f0 b4 43 53 84 d4 dc 01 06 0a 00 00 00 f0 b4 43 53 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18d3714","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e6 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 f0 b4 43 53 84 d4 dc 01 06 0a 00 00 00 f0 b4 43 53 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:51.276Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x7ffe","0x62","0x18d3714","0x27e700f5","0x23eefb0","0x187bb4c","0x187baa8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x18d3714","0x27e700f5","0x23eefb0","0x187bb4c","0x187baa8","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18d3714","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e6 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 f0 b4 43 53 84 d4 dc 01 06 0a 00 00 00 f0 b4 43 53 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18d3714","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e6 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 f0 b4 43 53 84 d4 dc 01 06 0a 00 00 00 f0 b4 43 53 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:51.282Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x62","0x18d3714","0x0","0x27e70065","0x18d3714","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18d3714","0x0","0x27e70065","0x18d3714","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18d3714","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e6 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 f0 b4 43 53 84 d4 dc 01 06 0a 00 00 00 f0 b4 43 53 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\ubb50\u0187\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18d3714","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e6 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 f0 b4 43 53 84 d4 dc 01 06 0a 00 00 00 f0 b4 43 53 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\ubb50\u0187\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:51.289Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x62","0x18d3714","0x0","0x27e701ad","0x18d3714","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18d3714","0x0","0x27e701ad","0x18d3714","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18d3714","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18d3714","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e6 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 f0 b4 43 53 84 d4 dc 01 06 0a 00 00 00 f0 b4 43 53 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18d3714","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e6 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 f0 b4 43 53 84 d4 dc 01 06 0a 00 00 00 f0 b4 43 53 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:51.294Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:51.295Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:51.295Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:51.295Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:51.295Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x523467c","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x523467c","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x5172508","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x523467c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e6 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x523467c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e6 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:51.383Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x1","0x2e","0x523467c","0x27e700f5","0x23eefb0","0x5172504","0x5172460","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x523467c","0x27e700f5","0x23eefb0","0x5172504","0x5172460","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x523467c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e6 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x523467c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e6 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:51.388Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x2e","0x523467c","0x0","0x27e70065","0x523467c","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x523467c","0x0","0x27e70065","0x523467c","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x523467c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e6 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u2b0c\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u2508\u0517\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x523467c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e6 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u2b0c\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u2508\u0517\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:51.395Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x2e","0x523467c","0x0","0x27e701ad","0x523467c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x523467c","0x0","0x27e701ad","0x523467c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x523467c","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x523467c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e6 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x523467c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e6 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:51.400Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x18d1504","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x18d1504","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51bd930","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18d1504","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e5 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18d1504","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e5 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:51.407Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:51.407Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:51.408Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:51.408Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:51.408Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x62be9b0","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18334bc","0x206","0x6","0x900184","0x62beb74"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18334bc","0x206","0x6","0x900184","0x62beb74","0x76fc4ef5","0x9c1b20","0x8dac20","0x6","0xd0e071e4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18334bc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c2 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 87 62 53 84 d4 dc 01 06 0a 00 00 00 90 87 62 53 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18334bc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c2 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 87 62 53 84 d4 dc 01 06 0a 00 00 00 90 87 62 53 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:51.416Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x1","0x2e","0x18d1504","0x255c009d","0x85efc8","0x51bd92c","0x51bd888","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18d1504","0x255c009d","0x85efc8","0x51bd92c","0x51bd888","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18d1504","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e5 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18d1504","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e5 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:51.422Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x18d1504","0x0","0x255c000d","0x18d1504","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18d1504","0x0","0x255c000d","0x18d1504","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18d1504","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e5 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18d1504","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e5 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:51.428Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x18d1504","0x0","0x255c0055","0x18d1504","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18d1504","0x0","0x255c0055","0x18d1504","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18d1504","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18d1504","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e5 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18d1504","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e5 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:51.433Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:51.433Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:51.433Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:51.433Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:51.433Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x62be940","args":["0x1","0x1","0x7ffd","0x62","0x18334bc","0x23f206f5","0x62be9b0","0x8dac1c","0x8dab78","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18334bc","0x23f206f5","0x62be9b0","0x8dac1c","0x8dab78","0x7700459e","0x62be948","0x62be9fc","0x62beb64","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18334bc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c2 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 87 62 53 84 d4 dc 01 06 0a 00 00 00 90 87 62 53 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18334bc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c2 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 87 62 53 84 d4 dc 01 06 0a 00 00 00 90 87 62 53 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:51.440Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x62be8f8","args":["0x1","0x1200","0x62","0x18334bc","0x0","0x23f20665","0x18334bc","0x9effe8","0x1","0x62be9ac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18334bc","0x0","0x23f20665","0x18334bc","0x9effe8","0x1","0x62be9ac","0x62be940","0x1","0x1","0x62be9a0","0x9cf3a6","0xffffffff","0x62be9ac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18334bc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c2 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 87 62 53 84 d4 dc 01 06 0a 00 00 00 90 87 62 53 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\uac20\x8d\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18334bc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c2 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 87 62 53 84 d4 dc 01 06 0a 00 00 00 90 87 62 53 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\uac20\x8d\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:51.447Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x62be894","args":["0x1","0x62","0x18334bc","0x0","0x23f207ad","0x18334bc","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18334bc","0x0","0x23f207ad","0x18334bc","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18334bc","0x9effe8","0x62be93c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18334bc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c2 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 87 62 53 84 d4 dc 01 06 0a 00 00 00 90 87 62 53 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18334bc","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c2 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 90 87 62 53 84 d4 dc 01 06 0a 00 00 00 90 87 62 53 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:51.455Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:51.456Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:51.456Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:51.456Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:51.457Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x62be9b0","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x18312ac","0x206","0x6","0x900184","0x62beb74"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x18312ac","0x206","0x6","0x900184","0x62beb74","0x76fc4ef5","0x9c1b20","0x18ea2f8","0x6","0xd0e071e4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18312ac","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c2 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18312ac","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c2 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:51.492Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x62be940","args":["0x1","0x1","0x2","0x2e","0x18312ac","0x23f206f5","0x62be9b0","0x18ea2f4","0x18ea250","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x18312ac","0x23f206f5","0x62be9b0","0x18ea2f4","0x18ea250","0x7700459e","0x62be948","0x62be9fc","0x62beb64","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18312ac","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c2 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18312ac","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c2 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:51.498Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x62be8f8","args":["0x1","0x1200","0x2e","0x18312ac","0x0","0x23f20665","0x18312ac","0x9effe8","0x1","0x62be9ac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18312ac","0x0","0x23f20665","0x18312ac","0x9effe8","0x1","0x62be9ac","0x62be940","0x1","0x1","0x62be9a0","0x9cf3a6","0xffffffff","0x62be9ac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18312ac","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c2 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\ua2f8\u018e\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18312ac","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c2 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\ua2f8\u018e\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:51.504Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x62be894","args":["0x1","0x2e","0x18312ac","0x0","0x23f207ad","0x18312ac","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18312ac","0x0","0x23f207ad","0x18312ac","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18312ac","0x9effe8","0x62be93c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18312ac","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c2 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18312ac","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c2 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:51.509Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:51.510Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:51.510Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:51.510Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:51.510Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x62be9b0","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x18dbf54","0x206","0x6","0x900184","0x62beb74"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x18dbf54","0x206","0x6","0x900184","0x62beb74","0x76fc4ef5","0x9c1b20","0x51bd930","0x6","0xd0e071e4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e7 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 00 90 53 84 d4 dc 01 06 0a 00 00 00 30 00 90 53 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e7 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 00 90 53 84 d4 dc 01 06 0a 00 00 00 30 00 90 53 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:51.756Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x62be940","args":["0x1","0x1","0x7ffd","0x62","0x18dbf54","0x23f206f5","0x62be9b0","0x51bd92c","0x51bd888","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18dbf54","0x23f206f5","0x62be9b0","0x51bd92c","0x51bd888","0x7700459e","0x62be948","0x62be9fc","0x62beb64","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e7 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 00 90 53 84 d4 dc 01 06 0a 00 00 00 30 00 90 53 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e7 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 00 90 53 84 d4 dc 01 06 0a 00 00 00 30 00 90 53 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:51.763Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x62be8f8","args":["0x1","0x1200","0x62","0x18dbf54","0x0","0x23f20665","0x18dbf54","0x9effe8","0x1","0x62be9ac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18dbf54","0x0","0x23f20665","0x18dbf54","0x9effe8","0x1","0x62be9ac","0x62be940","0x1","0x1","0x62be9a0","0x9cf3a6","0xffffffff","0x62be9ac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e7 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 00 90 53 84 d4 dc 01 06 0a 00 00 00 30 00 90 53 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9d8","utf16":"","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e7 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 00 90 53 84 d4 dc 01 06 0a 00 00 00 30 00 90 53 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9d8","utf16":"","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:51.772Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x62be894","args":["0x1","0x62","0x18dbf54","0x0","0x23f207ad","0x18dbf54","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18dbf54","0x0","0x23f207ad","0x18dbf54","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18dbf54","0x9effe8","0x62be93c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e7 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 00 90 53 84 d4 dc 01 06 0a 00 00 00 30 00 90 53 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e7 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 30 00 90 53 84 d4 dc 01 06 0a 00 00 00 30 00 90 53 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:51.779Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:51.780Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:51.780Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:51.780Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:51.780Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x62be9b0","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x1887b0c","0x206","0x6","0x900184","0x62beb74"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x1887b0c","0x206","0x6","0x900184","0x62beb74","0x76fc4ef5","0x9c1b20","0x8dac20","0x6","0xd0e071e4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x1887b0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e8 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 00 90 53 84 d4 dc 01 06 0a 00 00 00 30 00 90 53 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x1887b0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e8 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 00 90 53 84 d4 dc 01 06 0a 00 00 00 30 00 90 53 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:51.788Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x62be940","args":["0x1","0x1","0x7ffe","0x62","0x1887b0c","0x23f206f5","0x62be9b0","0x8dac1c","0x8dab78","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x1887b0c","0x23f206f5","0x62be9b0","0x8dac1c","0x8dab78","0x7700459e","0x62be948","0x62be9fc","0x62beb64","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x1887b0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e8 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 00 90 53 84 d4 dc 01 06 0a 00 00 00 30 00 90 53 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x1887b0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e8 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 00 90 53 84 d4 dc 01 06 0a 00 00 00 30 00 90 53 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:51.797Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x62be8f8","args":["0x1","0x1200","0x62","0x1887b0c","0x0","0x23f20665","0x1887b0c","0x9effe8","0x1","0x62be9ac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x1887b0c","0x0","0x23f20665","0x1887b0c","0x9effe8","0x1","0x62be9ac","0x62be940","0x1","0x1","0x62be9a0","0x9cf3a6","0xffffffff","0x62be9ac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x1887b0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e8 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 00 90 53 84 d4 dc 01 06 0a 00 00 00 30 00 90 53 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\uac20\x8d\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x1887b0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e8 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 00 90 53 84 d4 dc 01 06 0a 00 00 00 30 00 90 53 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\u9e84\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\uac20\x8d\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:51.804Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x62be894","args":["0x1","0x62","0x1887b0c","0x0","0x23f207ad","0x1887b0c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x1887b0c","0x0","0x23f207ad","0x1887b0c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1887b0c","0x9effe8","0x62be93c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x1887b0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e8 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 00 90 53 84 d4 dc 01 06 0a 00 00 00 30 00 90 53 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x1887b0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e8 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 30 00 90 53 84 d4 dc 01 06 0a 00 00 00 30 00 90 53 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:51.810Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:51.810Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:51.811Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:51.811Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:51.811Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x62be9b0","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x18847f4","0x206","0x6","0x900184","0x62beb74"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x18847f4","0x206","0x6","0x900184","0x62beb74","0x76fc4ef5","0x9c1b20","0x8dac20","0x6","0xd0e071e4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18847f4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e7 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18847f4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e7 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:51.818Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x62be940","args":["0x1","0x1","0x1","0x2e","0x18847f4","0x23f206f5","0x62be9b0","0x8dac1c","0x8dab78","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18847f4","0x23f206f5","0x62be9b0","0x8dac1c","0x8dab78","0x7700459e","0x62be948","0x62be9fc","0x62beb64","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18847f4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e7 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18847f4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e7 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:51.823Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x62be8f8","args":["0x1","0x1200","0x2e","0x18847f4","0x0","0x23f20665","0x18847f4","0x9effe8","0x1","0x62be9ac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18847f4","0x0","0x23f20665","0x18847f4","0x9effe8","0x1","0x62be9ac","0x62be940","0x1","0x1","0x62be9a0","0x9cf3a6","0xffffffff","0x62be9ac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18847f4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e7 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\uac20\x8d\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18847f4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e7 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\uac20\x8d\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:51.830Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x62be894","args":["0x1","0x2e","0x18847f4","0x0","0x23f207ad","0x18847f4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18847f4","0x0","0x23f207ad","0x18847f4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18847f4","0x9effe8","0x62be93c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18847f4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e7 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18847f4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e7 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:51.834Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:51.835Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:51.835Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:51.835Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:51.835Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x62be9b0","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x1887b0c","0x206","0x6","0x900184","0x62beb74"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x1887b0c","0x206","0x6","0x900184","0x62beb74","0x76fc4ef5","0x9c1b20","0x8dac20","0x6","0xd0e071e4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x1887b0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c3 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 f0 20 af 53 84 d4 dc 01 06 0a 00 00 00 f0 20 af 53 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x1887b0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c3 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 f0 20 af 53 84 d4 dc 01 06 0a 00 00 00 f0 20 af 53 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:51.911Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x62be940","args":["0x1","0x1","0x7ffd","0x62","0x1887b0c","0x23f206f5","0x62be9b0","0x8dac1c","0x8dab78","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x1887b0c","0x23f206f5","0x62be9b0","0x8dac1c","0x8dab78","0x7700459e","0x62be948","0x62be9fc","0x62beb64","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x1887b0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c3 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 f0 20 af 53 84 d4 dc 01 06 0a 00 00 00 f0 20 af 53 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x1887b0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c3 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 f0 20 af 53 84 d4 dc 01 06 0a 00 00 00 f0 20 af 53 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:51.916Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x62be8f8","args":["0x1","0x1200","0x62","0x1887b0c","0x0","0x23f20665","0x1887b0c","0x9effe8","0x1","0x62be9ac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x1887b0c","0x0","0x23f20665","0x1887b0c","0x9effe8","0x1","0x62be9ac","0x62be940","0x1","0x1","0x62be9a0","0x9cf3a6","0xffffffff","0x62be9ac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x1887b0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c3 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 f0 20 af 53 84 d4 dc 01 06 0a 00 00 00 f0 20 af 53 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\uac20\x8d\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x1887b0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c3 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 f0 20 af 53 84 d4 dc 01 06 0a 00 00 00 f0 20 af 53 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\uac20\x8d\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:51.923Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x62be894","args":["0x1","0x62","0x1887b0c","0x0","0x23f207ad","0x1887b0c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x1887b0c","0x0","0x23f207ad","0x1887b0c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1887b0c","0x9effe8","0x62be93c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x1887b0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c3 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 f0 20 af 53 84 d4 dc 01 06 0a 00 00 00 f0 20 af 53 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x1887b0c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c3 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 f0 20 af 53 84 d4 dc 01 06 0a 00 00 00 f0 20 af 53 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:51.928Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:51.928Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:51.929Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:51.929Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:51.929Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x18d6a2c","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x18d6a2c","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51bbc48","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18d6a2c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e8 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18d6a2c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e8 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:51.940Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x1","0x2e","0x18d6a2c","0x255c009d","0x85efc8","0x51bbc44","0x51bbba0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18d6a2c","0x255c009d","0x85efc8","0x51bbc44","0x51bbba0","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18d6a2c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e8 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18d6a2c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e8 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:51.948Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x18d6a2c","0x0","0x255c000d","0x18d6a2c","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18d6a2c","0x0","0x255c000d","0x18d6a2c","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18d6a2c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e8 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u2b0c\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ubc48\u051b\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18d6a2c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e8 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u2b0c\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ubc48\u051b\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:51.957Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x18d6a2c","0x0","0x255c0055","0x18d6a2c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18d6a2c","0x0","0x255c0055","0x18d6a2c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18d6a2c","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18d6a2c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e8 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18d6a2c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e8 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:51.965Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:51.965Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:51.965Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:51.966Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:51.966Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x5181714","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x5181714","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x18ea2f8","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x5181714","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c3 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x5181714","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c3 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:52.042Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x2","0x2e","0x5181714","0x255c009d","0x85efc8","0x18ea2f4","0x18ea250","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x5181714","0x255c009d","0x85efc8","0x18ea2f4","0x18ea250","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x5181714","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c3 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x5181714","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c3 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:52.048Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x5181714","0x0","0x255c000d","0x5181714","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x5181714","0x0","0x255c000d","0x5181714","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x5181714","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c3 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ua2f8\u018e\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x5181714","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c3 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ua2f8\u018e\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:52.053Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x5181714","0x0","0x255c0055","0x5181714","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x5181714","0x0","0x255c0055","0x5181714","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x5181714","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x5181714","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c3 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x5181714","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c3 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:52.058Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:52.059Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:52.059Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:52.059Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:52.059Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x18d1504","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x18d1504","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51bd930","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18d1504","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e9 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 90 99 dc 53 84 d4 dc 01 06 0a 00 00 00 90 99 dc 53 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18d1504","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e9 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 90 99 dc 53 84 d4 dc 01 06 0a 00 00 00 90 99 dc 53 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:52.258Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffd","0x62","0x18d1504","0x255c009d","0x85efc8","0x51bd92c","0x51bd888","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18d1504","0x255c009d","0x85efc8","0x51bd92c","0x51bd888","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18d1504","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e9 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 90 99 dc 53 84 d4 dc 01 06 0a 00 00 00 90 99 dc 53 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18d1504","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e9 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 90 99 dc 53 84 d4 dc 01 06 0a 00 00 00 90 99 dc 53 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:52.265Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x18d1504","0x0","0x255c000d","0x18d1504","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18d1504","0x0","0x255c000d","0x18d1504","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18d1504","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e9 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 90 99 dc 53 84 d4 dc 01 06 0a 00 00 00 90 99 dc 53 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18d1504","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e9 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 90 99 dc 53 84 d4 dc 01 06 0a 00 00 00 90 99 dc 53 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:52.273Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x18d1504","0x0","0x255c0055","0x18d1504","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18d1504","0x0","0x255c0055","0x18d1504","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18d1504","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18d1504","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e9 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 90 99 dc 53 84 d4 dc 01 06 0a 00 00 00 90 99 dc 53 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18d1504","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 e9 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 90 99 dc 53 84 d4 dc 01 06 0a 00 00 00 90 99 dc 53 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:52.279Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:52.279Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:52.279Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:52.279Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:52.280Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x51f4234","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x51f4234","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51bdef8","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51f4234","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ea 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 90 99 dc 53 84 d4 dc 01 06 0a 00 00 00 90 99 dc 53 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x51f4234","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ea 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 90 99 dc 53 84 d4 dc 01 06 0a 00 00 00 90 99 dc 53 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:52.288Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffe","0x62","0x51f4234","0x255c009d","0x85efc8","0x51bdef4","0x51bde50","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x51f4234","0x255c009d","0x85efc8","0x51bdef4","0x51bde50","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51f4234","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ea 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 90 99 dc 53 84 d4 dc 01 06 0a 00 00 00 90 99 dc 53 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x51f4234","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ea 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 90 99 dc 53 84 d4 dc 01 06 0a 00 00 00 90 99 dc 53 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:52.294Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x51f4234","0x0","0x255c000d","0x51f4234","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x51f4234","0x0","0x255c000d","0x51f4234","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51f4234","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ea 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 90 99 dc 53 84 d4 dc 01 06 0a 00 00 00 90 99 dc 53 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x51f4234","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ea 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 90 99 dc 53 84 d4 dc 01 06 0a 00 00 00 90 99 dc 53 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:52.301Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x51f4234","0x0","0x255c0055","0x51f4234","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x51f4234","0x0","0x255c0055","0x51f4234","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x51f4234","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x51f4234","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ea 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 90 99 dc 53 84 d4 dc 01 06 0a 00 00 00 90 99 dc 53 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x51f4234","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ea 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 90 99 dc 53 84 d4 dc 01 06 0a 00 00 00 90 99 dc 53 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:52.306Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:52.306Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:52.306Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:52.306Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:52.307Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x18d481c","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x18d481c","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51bc7d8","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18d481c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ea 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18d481c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ea 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:52.371Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x1","0x2e","0x18d481c","0x255c009d","0x85efc8","0x51bc7d4","0x51bc730","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18d481c","0x255c009d","0x85efc8","0x51bc7d4","0x51bc730","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18d481c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ea 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18d481c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ea 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:52.377Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x18d481c","0x0","0x255c000d","0x18d481c","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18d481c","0x0","0x255c000d","0x18d481c","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18d481c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ea 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u2b0c\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\uc7d8\u051b\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18d481c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ea 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u2b0c\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\uc7d8\u051b\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:52.383Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x18d481c","0x0","0x255c0055","0x18d481c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18d481c","0x0","0x255c0055","0x18d481c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18d481c","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18d481c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ea 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18d481c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ea 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:52.388Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x62be9b0","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x18847f4","0x206","0x6","0x900184","0x62beb74"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x18847f4","0x206","0x6","0x900184","0x62beb74","0x76fc4ef5","0x9c1b20","0x8dac20","0x6","0xd0e071e4","0x900184","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18847f4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e9 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18847f4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e9 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x900184","utf16":"\u87e0\x88\u0010","hex":"e0 87 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8887e0","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:52.396Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:52.397Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:52.397Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:52.397Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:52.397Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x62be940","args":["0x1","0x1","0x1","0x2e","0x18847f4","0x23f206f5","0x62be9b0","0x8dac1c","0x8dab78","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18847f4","0x23f206f5","0x62be9b0","0x8dac1c","0x8dab78","0x7700459e","0x62be948","0x62be9fc","0x62beb64","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18847f4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e9 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18847f4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e9 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:52.404Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x62be8f8","args":["0x1","0x1200","0x2e","0x18847f4","0x0","0x23f20665","0x18847f4","0x9effe8","0x1","0x62be9ac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18847f4","0x0","0x23f20665","0x18847f4","0x9effe8","0x1","0x62be9ac","0x62be940","0x1","0x1","0x62be9a0","0x9cf3a6","0xffffffff","0x62be9ac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18847f4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e9 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\uac20\x8d\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18847f4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e9 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9ac","utf16":"\ue9d8\u062b\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x62be9d8","utf16":"\ueb74\u062b\u4ef5\u76fc\u1b20\x9c\uac20\x8d\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62be9a0","utf16":"\ueb64\u062b\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x62beb64","utf16":"\uebac\u062b\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:52.411Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x62be894","args":["0x1","0x2e","0x18847f4","0x0","0x23f207ad","0x18847f4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18847f4","0x0","0x23f207ad","0x18847f4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18847f4","0x9effe8","0x62be93c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18847f4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e9 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18847f4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 e9 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:52.416Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18dbf54","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18dbf54","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51bd930","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c4 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 1e fb 53 84 d4 dc 01 06 0a 00 00 00 10 1e fb 53 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c4 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 1e fb 53 84 d4 dc 01 06 0a 00 00 00 10 1e fb 53 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:52.425Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:52.425Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:52.425Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:52.425Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:52.425Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffd","0x62","0x18dbf54","0x255c009d","0x85efc8","0x51bd92c","0x51bd888","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18dbf54","0x255c009d","0x85efc8","0x51bd92c","0x51bd888","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c4 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 1e fb 53 84 d4 dc 01 06 0a 00 00 00 10 1e fb 53 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c4 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 1e fb 53 84 d4 dc 01 06 0a 00 00 00 10 1e fb 53 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:52.432Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x18dbf54","0x0","0x255c000d","0x18dbf54","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18dbf54","0x0","0x255c000d","0x18dbf54","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c4 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 1e fb 53 84 d4 dc 01 06 0a 00 00 00 10 1e fb 53 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\ucdc4\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c4 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 1e fb 53 84 d4 dc 01 06 0a 00 00 00 10 1e fb 53 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\ucdc4\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:52.439Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x18dbf54","0x0","0x255c0055","0x18dbf54","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18dbf54","0x0","0x255c0055","0x18dbf54","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18dbf54","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c4 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 1e fb 53 84 d4 dc 01 06 0a 00 00 00 10 1e fb 53 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c4 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 10 1e fb 53 84 d4 dc 01 06 0a 00 00 00 10 1e fb 53 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:52.445Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:52.445Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:52.445Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:52.445Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:52.446Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x18d1504","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x18d1504","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51bd930","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18d1504","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c4 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18d1504","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c4 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:52.475Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x2","0x2e","0x18d1504","0x255c009d","0x85efc8","0x51bd92c","0x51bd888","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x18d1504","0x255c009d","0x85efc8","0x51bd92c","0x51bd888","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18d1504","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c4 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18d1504","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c4 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:52.481Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x18d1504","0x0","0x255c000d","0x18d1504","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18d1504","0x0","0x255c000d","0x18d1504","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18d1504","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c4 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18d1504","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c4 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:52.487Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x18d1504","0x0","0x255c0055","0x18d1504","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18d1504","0x0","0x255c0055","0x18d1504","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18d1504","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18d1504","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c4 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18d1504","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c4 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:52.492Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:52.492Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:52.492Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:52.492Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:52.492Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x18dbf54","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x18dbf54","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51bd930","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 eb 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 d0 e4 28 54 84 d4 dc 01 06 0a 00 00 00 c0 bd 28 54 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 eb 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 d0 e4 28 54 84 d4 dc 01 06 0a 00 00 00 c0 bd 28 54 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:52.754Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffd","0x62","0x18dbf54","0x255c009d","0x85efc8","0x51bd92c","0x51bd888","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18dbf54","0x255c009d","0x85efc8","0x51bd92c","0x51bd888","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 eb 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 d0 e4 28 54 84 d4 dc 01 06 0a 00 00 00 c0 bd 28 54 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 eb 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 d0 e4 28 54 84 d4 dc 01 06 0a 00 00 00 c0 bd 28 54 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:52.760Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x18dbf54","0x0","0x255c000d","0x18dbf54","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18dbf54","0x0","0x255c000d","0x18dbf54","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 eb 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 d0 e4 28 54 84 d4 dc 01 06 0a 00 00 00 c0 bd 28 54 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 eb 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 d0 e4 28 54 84 d4 dc 01 06 0a 00 00 00 c0 bd 28 54 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:52.766Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x18dbf54","0x0","0x255c0055","0x18dbf54","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18dbf54","0x0","0x255c0055","0x18dbf54","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18dbf54","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 eb 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 d0 e4 28 54 84 d4 dc 01 06 0a 00 00 00 c0 bd 28 54 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 eb 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 d0 e4 28 54 84 d4 dc 01 06 0a 00 00 00 c0 bd 28 54 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:52.771Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:52.772Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:52.772Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:52.772Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:52.772Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x1886a04","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x1886a04","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x524a518","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x1886a04","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ec 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 d0 e4 28 54 84 d4 dc 01 06 0a 00 00 00 c0 bd 28 54 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x1886a04","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ec 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 d0 e4 28 54 84 d4 dc 01 06 0a 00 00 00 c0 bd 28 54 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:52.781Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffe","0x62","0x1886a04","0x255c009d","0x85efc8","0x524a514","0x524a470","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x1886a04","0x255c009d","0x85efc8","0x524a514","0x524a470","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x1886a04","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ec 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 d0 e4 28 54 84 d4 dc 01 06 0a 00 00 00 c0 bd 28 54 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x1886a04","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ec 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 d0 e4 28 54 84 d4 dc 01 06 0a 00 00 00 c0 bd 28 54 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:52.787Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x1886a04","0x0","0x255c000d","0x1886a04","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x1886a04","0x0","0x255c000d","0x1886a04","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x1886a04","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ec 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 d0 e4 28 54 84 d4 dc 01 06 0a 00 00 00 c0 bd 28 54 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ua518\u0524\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x1886a04","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ec 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 d0 e4 28 54 84 d4 dc 01 06 0a 00 00 00 c0 bd 28 54 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ua518\u0524\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:52.796Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x1886a04","0x0","0x255c0055","0x1886a04","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x1886a04","0x0","0x255c0055","0x1886a04","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x1886a04","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x1886a04","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ec 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 d0 e4 28 54 84 d4 dc 01 06 0a 00 00 00 c0 bd 28 54 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x1886a04","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ec 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 d0 e4 28 54 84 d4 dc 01 06 0a 00 00 00 c0 bd 28 54 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:52.802Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x18b480c","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x18b480c","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51e87e8","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18b480c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 eb 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18b480c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 eb 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:52.809Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:52.809Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:52.809Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:52.810Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:52.810Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x1","0x2e","0x18b480c","0x27e700f5","0x23eefb0","0x51e87e4","0x51e8740","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18b480c","0x27e700f5","0x23eefb0","0x51e87e4","0x51e8740","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18b480c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 eb 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18b480c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 eb 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:52.815Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x2e","0x18b480c","0x0","0x27e70065","0x18b480c","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18b480c","0x0","0x27e70065","0x18b480c","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18b480c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 eb 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u87e8\u051e\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18b480c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 eb 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u87e8\u051e\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:52.821Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x2e","0x18b480c","0x0","0x27e701ad","0x18b480c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18b480c","0x0","0x27e701ad","0x18b480c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b480c","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18b480c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 eb 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18b480c","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 eb 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:52.827Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:52.827Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:52.827Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:52.827Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:52.827Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x191817c","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x191817c","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x5172508","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x191817c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c5 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 70 b7 47 54 84 d4 dc 01 06 0a 00 00 00 70 b7 47 54 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x191817c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c5 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 70 b7 47 54 84 d4 dc 01 06 0a 00 00 00 70 b7 47 54 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:52.910Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x7ffd","0x62","0x191817c","0x27e700f5","0x23eefb0","0x5172504","0x5172460","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x191817c","0x27e700f5","0x23eefb0","0x5172504","0x5172460","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x191817c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c5 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 70 b7 47 54 84 d4 dc 01 06 0a 00 00 00 70 b7 47 54 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x191817c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c5 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 70 b7 47 54 84 d4 dc 01 06 0a 00 00 00 70 b7 47 54 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:52.916Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x62","0x191817c","0x0","0x27e70065","0x191817c","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x191817c","0x0","0x27e70065","0x191817c","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x191817c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c5 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 70 b7 47 54 84 d4 dc 01 06 0a 00 00 00 70 b7 47 54 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u2508\u0517\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x191817c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c5 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 70 b7 47 54 84 d4 dc 01 06 0a 00 00 00 70 b7 47 54 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\ucdc4\u0126\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u2508\u0517\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:52.923Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x62","0x191817c","0x0","0x27e701ad","0x191817c","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x191817c","0x0","0x27e701ad","0x191817c","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x191817c","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x191817c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c5 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 70 b7 47 54 84 d4 dc 01 06 0a 00 00 00 70 b7 47 54 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x191817c","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c5 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 70 b7 47 54 84 d4 dc 01 06 0a 00 00 00 70 b7 47 54 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:52.928Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x18d1504","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x18d1504","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51bd930","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18d1504","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ec 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18d1504","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ec 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:52.935Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:52.936Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:52.936Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:52.936Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:52.936Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x1","0x2e","0x18d1504","0x255c009d","0x85efc8","0x51bd92c","0x51bd888","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18d1504","0x255c009d","0x85efc8","0x51bd92c","0x51bd888","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18d1504","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ec 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18d1504","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ec 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:52.942Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x18d1504","0x0","0x255c000d","0x18d1504","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18d1504","0x0","0x255c000d","0x18d1504","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18d1504","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ec 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u2b0c\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18d1504","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ec 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u2b0c\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:52.948Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x18d1504","0x0","0x255c0055","0x18d1504","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18d1504","0x0","0x255c0055","0x18d1504","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18d1504","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18d1504","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ec 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18d1504","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ec 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:52.953Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:52.954Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:52.954Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:52.954Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:52.954Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x191e7ac","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x191e7ac","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x1923798","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x191e7ac","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c5 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x191e7ac","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c5 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:53.032Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x2","0x2e","0x191e7ac","0x255c009d","0x85efc8","0x1923794","0x19236f0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x191e7ac","0x255c009d","0x85efc8","0x1923794","0x19236f0","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x191e7ac","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c5 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x191e7ac","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c5 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:53.040Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x191e7ac","0x0","0x255c000d","0x191e7ac","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x191e7ac","0x0","0x255c000d","0x191e7ac","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x191e7ac","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c5 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u3798�\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x191e7ac","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c5 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u3798�\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:53.049Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x191e7ac","0x0","0x255c0055","0x191e7ac","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x191e7ac","0x0","0x255c0055","0x191e7ac","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x191e7ac","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x191e7ac","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c5 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x191e7ac","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c5 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:53.054Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:53.055Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:53.055Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:53.055Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:53.055Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x18dbf54","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x18dbf54","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51bd930","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ed 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 ba 74 54 84 d4 dc 01 06 0a 00 00 00 e0 ba 74 54 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ed 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 ba 74 54 84 d4 dc 01 06 0a 00 00 00 e0 ba 74 54 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:53.254Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffd","0x62","0x18dbf54","0x255c009d","0x85efc8","0x51bd92c","0x51bd888","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18dbf54","0x255c009d","0x85efc8","0x51bd92c","0x51bd888","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ed 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 ba 74 54 84 d4 dc 01 06 0a 00 00 00 e0 ba 74 54 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ed 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 ba 74 54 84 d4 dc 01 06 0a 00 00 00 e0 ba 74 54 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:53.263Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x18dbf54","0x0","0x255c000d","0x18dbf54","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18dbf54","0x0","0x255c000d","0x18dbf54","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ed 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 ba 74 54 84 d4 dc 01 06 0a 00 00 00 e0 ba 74 54 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ed 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 ba 74 54 84 d4 dc 01 06 0a 00 00 00 e0 ba 74 54 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:53.274Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x18dbf54","0x0","0x255c0055","0x18dbf54","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18dbf54","0x0","0x255c0055","0x18dbf54","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18dbf54","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ed 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 ba 74 54 84 d4 dc 01 06 0a 00 00 00 e0 ba 74 54 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ed 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 e0 ba 74 54 84 d4 dc 01 06 0a 00 00 00 e0 ba 74 54 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:53.282Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:53.283Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:53.283Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:53.283Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:53.283Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x18312ac","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x18312ac","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x18ea2f8","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18312ac","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ee 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 ba 74 54 84 d4 dc 01 06 0a 00 00 00 e0 ba 74 54 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18312ac","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ee 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 ba 74 54 84 d4 dc 01 06 0a 00 00 00 e0 ba 74 54 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:53.291Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffe","0x62","0x18312ac","0x255c009d","0x85efc8","0x18ea2f4","0x18ea250","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x18312ac","0x255c009d","0x85efc8","0x18ea2f4","0x18ea250","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18312ac","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ee 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 ba 74 54 84 d4 dc 01 06 0a 00 00 00 e0 ba 74 54 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18312ac","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ee 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 ba 74 54 84 d4 dc 01 06 0a 00 00 00 e0 ba 74 54 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:53.298Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x18312ac","0x0","0x255c000d","0x18312ac","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18312ac","0x0","0x255c000d","0x18312ac","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18312ac","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ee 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 ba 74 54 84 d4 dc 01 06 0a 00 00 00 e0 ba 74 54 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ua2f8\u018e\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18312ac","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ee 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 ba 74 54 84 d4 dc 01 06 0a 00 00 00 e0 ba 74 54 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ua2f8\u018e\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:53.305Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x18312ac","0x0","0x255c0055","0x18312ac","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18312ac","0x0","0x255c0055","0x18312ac","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18312ac","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18312ac","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ee 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 ba 74 54 84 d4 dc 01 06 0a 00 00 00 e0 ba 74 54 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18312ac","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ee 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 e0 ba 74 54 84 d4 dc 01 06 0a 00 00 00 e0 ba 74 54 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:53.313Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:53.313Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:53.314Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:53.314Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:53.314Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x18d1504","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x18d1504","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51bd930","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18d1504","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ed 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18d1504","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ed 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:53.353Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x1","0x2e","0x18d1504","0x255c009d","0x85efc8","0x51bd92c","0x51bd888","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18d1504","0x255c009d","0x85efc8","0x51bd92c","0x51bd888","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18d1504","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ed 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18d1504","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ed 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:53.362Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x18d1504","0x0","0x255c000d","0x18d1504","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18d1504","0x0","0x255c000d","0x18d1504","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18d1504","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ed 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18d1504","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ed 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:53.371Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x18d1504","0x0","0x255c0055","0x18d1504","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18d1504","0x0","0x255c0055","0x18d1504","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18d1504","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18d1504","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ed 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18d1504","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ed 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:53.378Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x5181714","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x5181714","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x18ea2f8","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x5181714","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ee 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x5181714","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ee 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:53.386Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:53.386Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:53.386Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:53.386Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:53.387Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x1","0x2e","0x5181714","0x27e700f5","0x23eefb0","0x18ea2f4","0x18ea250","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x5181714","0x27e700f5","0x23eefb0","0x18ea2f4","0x18ea250","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x5181714","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ee 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x5181714","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ee 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:53.392Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x2e","0x5181714","0x0","0x27e70065","0x5181714","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x5181714","0x0","0x27e70065","0x5181714","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x5181714","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ee 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u2b0c\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\ua2f8\u018e\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x5181714","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ee 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u2b0c\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\ua2f8\u018e\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:53.400Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x2e","0x5181714","0x0","0x27e701ad","0x5181714","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x5181714","0x0","0x27e701ad","0x5181714","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x5181714","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x5181714","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ee 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x5181714","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ee 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:53.405Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18dbf54","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18dbf54","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51bd930","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c6 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 db 93 54 84 d4 dc 01 06 0a 00 00 00 a0 db 93 54 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c6 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 db 93 54 84 d4 dc 01 06 0a 00 00 00 a0 db 93 54 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:53.413Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:53.413Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:53.413Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:53.414Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:53.414Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffd","0x62","0x18dbf54","0x255c009d","0x85efc8","0x51bd92c","0x51bd888","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18dbf54","0x255c009d","0x85efc8","0x51bd92c","0x51bd888","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c6 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 db 93 54 84 d4 dc 01 06 0a 00 00 00 a0 db 93 54 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c6 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 db 93 54 84 d4 dc 01 06 0a 00 00 00 a0 db 93 54 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:53.420Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x18dbf54","0x0","0x255c000d","0x18dbf54","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18dbf54","0x0","0x255c000d","0x18dbf54","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c6 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 db 93 54 84 d4 dc 01 06 0a 00 00 00 a0 db 93 54 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\ucdc4\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c6 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 db 93 54 84 d4 dc 01 06 0a 00 00 00 a0 db 93 54 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\ucdc4\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:53.427Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x18dbf54","0x0","0x255c0055","0x18dbf54","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18dbf54","0x0","0x255c0055","0x18dbf54","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18dbf54","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c6 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 db 93 54 84 d4 dc 01 06 0a 00 00 00 a0 db 93 54 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c6 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 a0 db 93 54 84 d4 dc 01 06 0a 00 00 00 a0 db 93 54 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:53.432Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:53.433Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:53.433Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:53.433Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:53.433Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x18312ac","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x18312ac","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x18ea2f8","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18312ac","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c6 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18312ac","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c6 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:53.465Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x2","0x2e","0x18312ac","0x255c009d","0x85efc8","0x18ea2f4","0x18ea250","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x18312ac","0x255c009d","0x85efc8","0x18ea2f4","0x18ea250","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18312ac","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c6 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18312ac","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c6 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:53.470Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x18312ac","0x0","0x255c000d","0x18312ac","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18312ac","0x0","0x255c000d","0x18312ac","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18312ac","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c6 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ua2f8\u018e\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18312ac","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c6 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ua2f8\u018e\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:53.476Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x18312ac","0x0","0x255c0055","0x18312ac","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18312ac","0x0","0x255c0055","0x18312ac","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18312ac","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18312ac","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c6 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18312ac","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c6 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:53.481Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:53.481Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:53.482Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:53.482Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:53.482Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x18d1504","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x18d1504","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51bd930","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18d1504","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ef 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 06 c1 54 84 d4 dc 01 06 0a 00 00 00 20 06 c1 54 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18d1504","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ef 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 06 c1 54 84 d4 dc 01 06 0a 00 00 00 20 06 c1 54 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:53.749Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffd","0x62","0x18d1504","0x255c009d","0x85efc8","0x51bd92c","0x51bd888","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18d1504","0x255c009d","0x85efc8","0x51bd92c","0x51bd888","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18d1504","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ef 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 06 c1 54 84 d4 dc 01 06 0a 00 00 00 20 06 c1 54 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18d1504","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ef 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 06 c1 54 84 d4 dc 01 06 0a 00 00 00 20 06 c1 54 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:53.757Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x18d1504","0x0","0x255c000d","0x18d1504","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18d1504","0x0","0x255c000d","0x18d1504","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18d1504","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ef 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 06 c1 54 84 d4 dc 01 06 0a 00 00 00 20 06 c1 54 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18d1504","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ef 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 06 c1 54 84 d4 dc 01 06 0a 00 00 00 20 06 c1 54 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:53.766Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x18d1504","0x0","0x255c0055","0x18d1504","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18d1504","0x0","0x255c0055","0x18d1504","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18d1504","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18d1504","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ef 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 06 c1 54 84 d4 dc 01 06 0a 00 00 00 20 06 c1 54 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18d1504","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 ef 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 20 06 c1 54 84 d4 dc 01 06 0a 00 00 00 20 06 c1 54 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:53.773Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:53.773Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:53.773Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:53.774Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:53.774Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x18b03ec","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x18b03ec","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51bbc48","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b03ec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 f0 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 06 c1 54 84 d4 dc 01 06 0a 00 00 00 20 06 c1 54 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18b03ec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 f0 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 06 c1 54 84 d4 dc 01 06 0a 00 00 00 20 06 c1 54 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:53.785Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffe","0x62","0x18b03ec","0x255c009d","0x85efc8","0x51bbc44","0x51bbba0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x18b03ec","0x255c009d","0x85efc8","0x51bbc44","0x51bbba0","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b03ec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 f0 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 06 c1 54 84 d4 dc 01 06 0a 00 00 00 20 06 c1 54 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b03ec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 f0 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 06 c1 54 84 d4 dc 01 06 0a 00 00 00 20 06 c1 54 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:53.794Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x18b03ec","0x0","0x255c000d","0x18b03ec","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18b03ec","0x0","0x255c000d","0x18b03ec","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b03ec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 f0 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 06 c1 54 84 d4 dc 01 06 0a 00 00 00 20 06 c1 54 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ubc48\u051b\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b03ec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 f0 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 06 c1 54 84 d4 dc 01 06 0a 00 00 00 20 06 c1 54 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ubc48\u051b\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:53.803Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x18b03ec","0x0","0x255c0055","0x18b03ec","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18b03ec","0x0","0x255c0055","0x18b03ec","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b03ec","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18b03ec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 f0 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 06 c1 54 84 d4 dc 01 06 0a 00 00 00 20 06 c1 54 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b03ec","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 f0 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 20 06 c1 54 84 d4 dc 01 06 0a 00 00 00 20 06 c1 54 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:53.808Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x18847f4","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x18847f4","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x8dac20","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18847f4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ef 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18847f4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ef 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:53.815Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:53.816Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:53.816Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:53.816Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x1","0x2e","0x18847f4","0x27e700f5","0x23eefb0","0x8dac1c","0x8dab78","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18847f4","0x27e700f5","0x23eefb0","0x8dac1c","0x8dab78","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18847f4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ef 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18847f4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ef 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:53.822Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:53.823Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x2e","0x18847f4","0x0","0x27e70065","0x18847f4","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18847f4","0x0","0x27e70065","0x18847f4","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18847f4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ef 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\uac20\x8d\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18847f4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ef 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\uac20\x8d\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:53.831Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x2e","0x18847f4","0x0","0x27e701ad","0x18847f4","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18847f4","0x0","0x27e701ad","0x18847f4","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18847f4","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18847f4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ef 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18847f4","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 ef 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:53.835Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:53.836Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:53.836Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:53.836Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:53.836Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x5181714","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x5181714","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x18ea2f8","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x5181714","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 f0 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x5181714","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 f0 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:53.894Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x1","0x2e","0x5181714","0x27e700f5","0x23eefb0","0x18ea2f4","0x18ea250","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x5181714","0x27e700f5","0x23eefb0","0x18ea2f4","0x18ea250","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x5181714","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 f0 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x5181714","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 f0 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:53.900Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x2e","0x5181714","0x0","0x27e70065","0x5181714","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x5181714","0x0","0x27e70065","0x5181714","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x5181714","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 f0 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u2b0c\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\ua2f8\u018e\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x5181714","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 f0 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u2b0c\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\ua2f8\u018e\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:53.906Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x2e","0x5181714","0x0","0x27e701ad","0x5181714","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x5181714","0x0","0x27e701ad","0x5181714","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x5181714","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x5181714","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 f0 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x5181714","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 f0 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:53.910Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x191e7ac","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x191e7ac","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x1923798","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x191e7ac","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c7 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 f0 4d e0 54 84 d4 dc 01 06 0a 00 00 00 f0 4d e0 54 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x191e7ac","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c7 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 f0 4d e0 54 84 d4 dc 01 06 0a 00 00 00 f0 4d e0 54 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:53.918Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:53.918Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:53.918Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:53.918Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:53.918Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffd","0x62","0x191e7ac","0x255c009d","0x85efc8","0x1923794","0x19236f0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x191e7ac","0x255c009d","0x85efc8","0x1923794","0x19236f0","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x191e7ac","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c7 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 f0 4d e0 54 84 d4 dc 01 06 0a 00 00 00 f0 4d e0 54 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x191e7ac","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c7 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 f0 4d e0 54 84 d4 dc 01 06 0a 00 00 00 f0 4d e0 54 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:53.926Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x191e7ac","0x0","0x255c000d","0x191e7ac","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x191e7ac","0x0","0x255c000d","0x191e7ac","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x191e7ac","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c7 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 f0 4d e0 54 84 d4 dc 01 06 0a 00 00 00 f0 4d e0 54 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\ucdc4\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u3798�\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x191e7ac","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c7 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 f0 4d e0 54 84 d4 dc 01 06 0a 00 00 00 f0 4d e0 54 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\ucdc4\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\u3798�\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:53.933Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x191e7ac","0x0","0x255c0055","0x191e7ac","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x191e7ac","0x0","0x255c0055","0x191e7ac","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x191e7ac","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x191e7ac","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c7 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 f0 4d e0 54 84 d4 dc 01 06 0a 00 00 00 f0 4d e0 54 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x191e7ac","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c7 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 f0 4d e0 54 84 d4 dc 01 06 0a 00 00 00 f0 4d e0 54 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:53.940Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:53.940Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:53.940Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:53.940Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:53.940Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f47ac","0x1","0x1","0x2","0x2e","0x18836ec","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x2","0x2e","0x18836ec","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x524a518","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18836ec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c7 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18836ec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c7 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:54.008Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x2","0x2e","0x18836ec","0x255c009d","0x85efc8","0x524a514","0x524a470","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x2","0x2e","0x18836ec","0x255c009d","0x85efc8","0x524a514","0x524a470","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18836ec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c7 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18836ec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c7 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:54.014Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x18836ec","0x0","0x255c000d","0x18836ec","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18836ec","0x0","0x255c000d","0x18836ec","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18836ec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c7 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ua518\u0524\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18836ec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c7 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u47ac\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ua518\u0524\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:54.020Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x18836ec","0x0","0x255c0055","0x18836ec","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18836ec","0x0","0x255c0055","0x18836ec","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18836ec","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18836ec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c7 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18836ec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 c7 90 04 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 02 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:54.025Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:54.026Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:54.026Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:54.026Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:54.026Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x1269e84","0x1","0x1","0x7ffd","0x62","0x18dbf54","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffd","0x62","0x18dbf54","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x51bd930","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 f1 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 70 78 0d 55 84 d4 dc 01 06 0a 00 00 00 70 78 0d 55 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 f1 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 70 78 0d 55 84 d4 dc 01 06 0a 00 00 00 70 78 0d 55 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:54.257Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffd","0x62","0x18dbf54","0x255c009d","0x85efc8","0x51bd92c","0x51bd888","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18dbf54","0x255c009d","0x85efc8","0x51bd92c","0x51bd888","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 f1 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 70 78 0d 55 84 d4 dc 01 06 0a 00 00 00 70 78 0d 55 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 f1 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 70 78 0d 55 84 d4 dc 01 06 0a 00 00 00 70 78 0d 55 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:54.264Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x18dbf54","0x0","0x255c000d","0x18dbf54","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18dbf54","0x0","0x255c000d","0x18dbf54","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 f1 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 70 78 0d 55 84 d4 dc 01 06 0a 00 00 00 70 78 0d 55 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 f1 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 70 78 0d 55 84 d4 dc 01 06 0a 00 00 00 70 78 0d 55 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:54.272Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x18dbf54","0x0","0x255c0055","0x18dbf54","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18dbf54","0x0","0x255c0055","0x18dbf54","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18dbf54","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 f1 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 70 78 0d 55 84 d4 dc 01 06 0a 00 00 00 70 78 0d 55 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18dbf54","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 f1 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 b5 00 b9 5e 9b 78 68 4c a9 c8 01 af 32 f6 b4 e9 03 00 00 00 c0 00 70 78 0d 55 84 d4 dc 01 06 0a 00 00 00 70 78 0d 55 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:54.277Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:54.278Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:54.278Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:54.278Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:54.278Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x1269e84","0x1","0x1","0x7ffe","0x62","0x18b7b24","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x1269e84","0x1","0x1","0x7ffe","0x62","0x18b7b24","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x187bb50","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b7b24","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 f2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 70 78 0d 55 84 d4 dc 01 06 0a 00 00 00 70 78 0d 55 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18b7b24","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 f2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 70 78 0d 55 84 d4 dc 01 06 0a 00 00 00 70 78 0d 55 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:54.286Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x7ffe","0x62","0x18b7b24","0x255c009d","0x85efc8","0x187bb4c","0x187baa8","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffe","0x62","0x18b7b24","0x255c009d","0x85efc8","0x187bb4c","0x187baa8","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b7b24","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 f2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 70 78 0d 55 84 d4 dc 01 06 0a 00 00 00 70 78 0d 55 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18b7b24","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 f2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 70 78 0d 55 84 d4 dc 01 06 0a 00 00 00 70 78 0d 55 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:54.295Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x62","0x18b7b24","0x0","0x255c000d","0x18b7b24","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x62","0x18b7b24","0x0","0x255c000d","0x18b7b24","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b7b24","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 f2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 70 78 0d 55 84 d4 dc 01 06 0a 00 00 00 70 78 0d 55 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ubb50\u0187\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18b7b24","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 f2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 70 78 0d 55 84 d4 dc 01 06 0a 00 00 00 70 78 0d 55 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u9e84\u0126\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ubb50\u0187\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:54.302Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x62","0x18b7b24","0x0","0x255c0055","0x18b7b24","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x62","0x18b7b24","0x0","0x255c0055","0x18b7b24","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18b7b24","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":98,"ptr":"0x18b7b24","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 f2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 70 78 0d 55 84 d4 dc 01 06 0a 00 00 00 70 78 0d 55 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":98,"ptr":"0x18b7b24","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 f2 20 09 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 56 6a 1f b1 96 71 fc 47 bf f9 24 00 c7 84 17 14 03 00 00 00 c0 00 70 78 0d 55 84 d4 dc 01 06 0a 00 00 00 70 78 0d 55 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:54.308Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:54.308Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:54.308Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:54.308Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:54.308Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x85efc8","args":["0x21f2b0c","0x1","0x1","0x1","0x2e","0x18836ec","0x206","0x6","0x94f0dc","0x85f18c"],"stack":["0x76ffedd8","0x21f2b0c","0x1","0x1","0x1","0x2e","0x18836ec","0x206","0x6","0x94f0dc","0x85f18c","0x76fc4ef5","0x9c1b20","0x524a518","0x6","0xd64e6b1c","0x94f0dc","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18836ec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 f2 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18836ec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 f2 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x94f0dc","utf16":"\u8e70\x88\u0010","hex":"70 8e 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888e70","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:54.335Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x85ef58","args":["0x1","0x1","0x1","0x2e","0x18836ec","0x255c009d","0x85efc8","0x524a514","0x524a470","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18836ec","0x255c009d","0x85efc8","0x524a514","0x524a470","0x7700459e","0x85ef60","0x85f014","0x85f17c","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18836ec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 f2 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18836ec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 f2 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:54.343Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x85ef10","args":["0x1","0x1200","0x2e","0x18836ec","0x0","0x255c000d","0x18836ec","0x9effe8","0x1","0x85efc4"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18836ec","0x0","0x255c000d","0x18836ec","0x9effe8","0x1","0x85efc4","0x85ef58","0x1","0x1","0x85efb8","0x9cf3a6","0xffffffff","0x85efc4"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18836ec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 f2 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u2b0c\u021f\u0001","hex":"f0"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ua518\u0524\u0006","hex":"8c"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18836ec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 f2 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85efc4","utf16":"\ueff0\x85\u0a0f\u0538\u2b0c\u021f\u0001","hex":"f0"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x85eff0","utf16":"\uf18c\x85\u4ef5\u76fc\u1b20\x9c\ua518\u0524\u0006","hex":"8c"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85efb8","utf16":"\uf17c\x85\uf8b7\x9c\u0002","hex":"7c"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x85f17c","utf16":"\uf1c4\x85\uee30\u76ff\u89f0\ua1cd\u0002","hex":"c4"}],"time":"2026-04-25T07:22:54.352Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x85eeac","args":["0x1","0x2e","0x18836ec","0x0","0x255c0055","0x18836ec","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18836ec","0x0","0x255c0055","0x18836ec","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18836ec","0x9effe8","0x85ef54"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18836ec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 f2 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18836ec","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 f2 20 09 00 01 00 00 00 01 00 00 00 fe 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:54.359Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x21f47ac","0x1","0x1","0x1","0x2e","0x18245bc","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x21f47ac","0x1","0x1","0x1","0x2e","0x18245bc","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x51e7c58","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18245bc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 f1 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":46,"ptr":"0x18245bc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 f1 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:54.368Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:54.370Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:54.370Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:54.370Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:54.370Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x1","0x2e","0x18245bc","0x27e700f5","0x23eefb0","0x51e7c54","0x51e7bb0","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x1","0x2e","0x18245bc","0x27e700f5","0x23eefb0","0x51e7c54","0x51e7bb0","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18245bc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 f1 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":46,"ptr":"0x18245bc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 f1 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:54.382Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","address":"0x9bd910","ecx":"0x9effe8","esp":"0x23eeef8","args":["0x1","0x1200","0x2e","0x18245bc","0x0","0x27e70065","0x18245bc","0x9effe8","0x1","0x23eefac"],"stack":["0x9bdd43","0x1","0x1200","0x2e","0x18245bc","0x0","0x27e70065","0x18245bc","0x9effe8","0x1","0x23eefac","0x23eef40","0x1","0x1","0x23eefa0","0x9cf3a6","0xffffffff","0x23eefac"],"candidates":[{"source":"args.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18245bc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 f1 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"args.direct","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"args.byref","sizeIndex":8,"ptrIndex":9,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u7c58\u051e\u0006","hex":"74"},{"source":"args.direct","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"args.byref","sizeIndex":12,"ptrIndex":13,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"},{"source":"stack.direct","sizeIndex":3,"ptrIndex":4,"size":46,"ptr":"0x18245bc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 f1 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefac","utf16":"\uefd8\u023e\u0a0f\u0538\u47ac\u021f\u0001","hex":"d8"},{"source":"stack.byref","sizeIndex":9,"ptrIndex":10,"size":1,"ptr":"0x23eefd8","utf16":"\uf174\u023e\u4ef5\u76fc\u1b20\x9c\u7c58\u051e\u0006","hex":"74"},{"source":"stack.direct","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23eefa0","utf16":"\uf164\u023e\uf8b7\x9c\u0002","hex":"64"},{"source":"stack.byref","sizeIndex":13,"ptrIndex":14,"size":1,"ptr":"0x23ef164","utf16":"\uf1ac\u023e\uee30\u76ff\u89f0\ua1cd\u0002","hex":"ac"}],"time":"2026-04-25T07:22:54.388Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","address":"0x9b807f","ecx":"0x9effe8","esp":"0x23eee94","args":["0x1","0x2e","0x18245bc","0x0","0x27e701ad","0x18245bc","0x9effe8","0x1","0xffffffff","0x70fe2dc6"],"stack":["0x9bdb07","0x1","0x2e","0x18245bc","0x0","0x27e701ad","0x18245bc","0x9effe8","0x1","0xffffffff","0x70fe2dc6","0x70fe381c","0x1266fb8","0x0","0x9bd910","0x18245bc","0x9effe8","0x23eef3c"],"candidates":[{"source":"args.direct","sizeIndex":1,"ptrIndex":2,"size":46,"ptr":"0x18245bc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 f1 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"},{"source":"stack.direct","sizeIndex":2,"ptrIndex":3,"size":46,"ptr":"0x18245bc","utf16":"\u0001","hex":"01 00 00 00 00 00 00 00 00 00 f1 20 09 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 00 00 00 01 00 00 00 01 00 00 00 02 02 00 00 30 75 00 00"}],"time":"2026-04-25T07:22:54.393Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.ProcessDataReceivedForEngine","retval":"0x0","time":"2026-04-25T07:22:54.394Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.DataReceived","retval":"0x0","time":"2026-04-25T07:22:54.394Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxControler.TransferData","retval":"0x0","time":"2026-04-25T07:22:54.394Z"}
|
|
{"event":"nmxsvc.leave","module":"NmxSvc.exe","name":"CNmxService.TransferData","retval":"0x0","time":"2026-04-25T07:22:54.394Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxService.TransferData","address":"0x9c1b20","ecx":"0x9c1b20","esp":"0x23eefb0","args":["0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18312ac","0x206","0x6","0x8ac17c","0x23ef174"],"stack":["0x76ffedd8","0x126cdc4","0x1","0x1","0x7ffd","0x62","0x18312ac","0x206","0x6","0x8ac17c","0x23ef174","0x76fc4ef5","0x9c1b20","0x18ea2f8","0x6","0xd4f56be4","0x8ac17c","0x0"],"candidates":[{"source":"args.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18312ac","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c8 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 30 99 2c 55 84 d4 dc 01 06 0a 00 00 00 30 99 2c 55 84 d4 dc 01 00 00"},{"source":"args.direct","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"args.byref","sizeIndex":7,"ptrIndex":8,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"},{"source":"stack.direct","sizeIndex":5,"ptrIndex":6,"size":98,"ptr":"0x18312ac","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c8 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 30 99 2c 55 84 d4 dc 01 06 0a 00 00 00 30 99 2c 55 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x8ac17c","utf16":"\u8b28\x88\u0010","hex":"28 8b 88 00 10 00"},{"source":"stack.byref","sizeIndex":8,"ptrIndex":9,"size":6,"ptr":"0x888b28","utf16":"\u80b8\u7551\u6db8\u7553\u80a8\u7551\u6db0\u7553","hex":"b8 80 51 75 b8 6d"}],"time":"2026-04-25T07:22:54.411Z"}
|
|
{"event":"nmxsvc.enter","module":"NmxSvc.exe","name":"CNmxControler.TransferData","address":"0x9bdcb5","ecx":"0x9effe8","esp":"0x23eef40","args":["0x1","0x1","0x7ffd","0x62","0x18312ac","0x27e700f5","0x23eefb0","0x18ea2f4","0x18ea250","0x7700459e"],"stack":["0x9c1bcc","0x1","0x1","0x7ffd","0x62","0x18312ac","0x27e700f5","0x23eefb0","0x18ea2f4","0x18ea250","0x7700459e","0x23eef48","0x23eeffc","0x23ef164","0x76ffee30","0xa1cd8ff0","0xfffffffe","0x9c1b20"],"candidates":[{"source":"args.direct","sizeIndex":3,"ptrIndex":4,"size":98,"ptr":"0x18312ac","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c8 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 30 99 2c 55 84 d4 dc 01 06 0a 00 00 00 30 99 2c 55 84 d4 dc 01 00 00"},{"source":"stack.direct","sizeIndex":4,"ptrIndex":5,"size":98,"ptr":"0x18312ac","utf16":"\u00014","hex":"01 00 34 00 00 00 00 00 00 00 c8 90 04 00 01 00 00 00 01 00 00 00 02 00 00 00 01 00 00 00 01 00 00 00 fd 7f 00 00 01 02 00 00 30 75 00 00 33 01 00 01 00 00 00 24 d2 59 01 86 9c b9 47 b7 15 e4 c5 19 f5 93 ef 0e 00 00 00 c0 00 30 99 2c 55 84 d4 dc 01 06 0a 00 00 00 30 99 2c 55 84 d4 dc 01 00 00"}],"time":"2026-04-25T07:22:54.417Z"} |