It looks like this is quite close to working. It is actually the network module that implements a fair amount of the network protocol stack (AB never makes this easy!), so this seems possible. I seem to remember someone suggesting that you explicitly add a network module to the emulator and then use that IP address to access it. I think this is less likely as the error is fairly explicit but I could be translating the error incorrectly. This will tell the library that the PLC is a Micro800 family PLC which speaks a limited dialect of the protocol. Perhaps the emulator only handles the older ForwardOpen packets. Usually 1 is the back plane, 2 is Channel A (if there is one), and 3 is Channel B (if there is one). If the port is not right, then perhaps you can try other numbers. It does look like the CPU should be in slot 1, so 1,1 would be what I would normally expect.
The error you saw with the ForwardOpen is definitely what is causing the library to stop trying. I have had people try with the emulator in the past, but they did not get this far. Thanks for the questions and excellent data to show what you have done! In the future, please start a new issue so that others can search this.