[attack bcnt=255] rc=0(SMB_ENOERR=0) count_in=32 count_out=32
[attack bcnt=255] io: reads=149 writes=79 ec_sc_polls=114 | smb register fetches=35 OOB(>0x23 data-file end)=1 max logical reg=0x24
[attack bcnt=255] buf[0..7] = c0 c1 c2 c3 c4 c5 c6 c7  buf[30..33] = de df 00 00
[attack bcnt=255] PROOF: logical SMB registers 0x24..0x24 were fetched via the EC protocol -- beyond the 32-entry data register file (SMB_DATA=0x04 .. 0x23)
[attack bcnt=255] e.g. buf[32] (i=32 -> reg 0x24=BCNT) model value 0xff; buf[33] (reg 0x25=ALRM_A) 0x00; buf[36] (reg 0x28) 0x00
[edge bcnt=33] rc=0(SMB_ENOERR=0) count_in=32 count_out=32
[edge bcnt=33] io: reads=149 writes=79 ec_sc_polls=114 | smb register fetches=35 OOB(>0x23 data-file end)=1 max logical reg=0x24
[edge bcnt=33] buf[0..7] = c0 c1 c2 c3 c4 c5 c6 c7  buf[30..33] = de df 00 00
[edge bcnt=33] PROOF: logical SMB registers 0x24..0x24 were fetched via the EC protocol -- beyond the 32-entry data register file (SMB_DATA=0x04 .. 0x23)
[edge bcnt=33] e.g. buf[32] (i=32 -> reg 0x24=BCNT) model value 0x21; buf[33] (reg 0x25=ALRM_A) 0x00; buf[36] (reg 0x28) 0x00
[control bcnt=16] rc=0(SMB_ENOERR=0) count_in=32 count_out=16
[control bcnt=16] io: reads=85 writes=47 ec_sc_polls=66 | smb register fetches=19 OOB(>0x23 data-file end)=1 max logical reg=0x24
[control bcnt=16] buf[0..7] = c0 c1 c2 c3 c4 c5 c6 c7  buf[30..33] = 00 00 00 00
[control bcnt=16] PROOF: logical SMB registers 0x24..0x24 were fetched via the EC protocol -- beyond the 32-entry data register file (SMB_DATA=0x04 .. 0x23)
[control bcnt=16] e.g. buf[32] (i=32 -> reg 0x24=BCNT) model value 0x10; buf[33] (reg 0x25=ALRM_A) 0x00; buf[36] (reg 0x28) 0x00