[OK] Da gan vao PID 25032 (elevated) === MAP (PID 25032) === PathOfExile.exe base=0x7FF70EB60000 size=0x4C9D000 ntdll.dll base=0x7FFC16FF0000 size=0x1F9000 KERNEL32.DLL base=0x7FFC15310000 size=0xC2000 KERNELBASE.dll base=0x7FFC14A60000 size=0x2F7000 apphelp.dll base=0x7FFC0F5F0000 size=0x94000 WS2_32.dll base=0x7FFC16E10000 size=0x6B000 RPCRT4.dll base=0x7FFC163D0000 size=0x126000 IMM32.dll base=0x7FFC151B0000 size=0x2F000 USER32.dll base=0x7FFC16C70000 size=0x19D000 win32u.dll base=0x7FFC14840000 size=0x22000 GDI32.dll base=0x7FFC165B0000 size=0x2B000 dbghelp.dll base=0x7FFC02780000 size=0x201000 gdi32full.dll base=0x7FFC14D60000 size=0x11A000 msvcp_win.dll base=0x7FFC14ED0000 size=0x9D000 ucrtbase.dll base=0x7FFC14710000 size=0x100000 CRYPT32.dll base=0x7FFC14900000 size=0x15D000 WINMM.dll base=0x7FFC03160000 size=0x27000 COMCTL32.dll base=0x7FFBF9970000 size=0x29B000 COMDLG32.dll base=0x7FFC15070000 size=0xDA000 IPHLPAPI.DLL base=0x7FFC13980000 size=0x3B000 msvcrt.dll base=0x7FFC16510000 size=0x9E000 combase.dll base=0x7FFC165F0000 size=0x353000 gdiplus.dll base=0x7FFBFAD50000 size=0x1AB000 dxgi.dll base=0x7FFC12E70000 size=0xF6000 shcore.dll base=0x7FFC16E80000 size=0xAD000 USP10.dll base=0x7FFBD6E40000 size=0x19000 SHLWAPI.dll base=0x7FFC16C10000 size=0x5B000 SHELL32.dll base=0x7FFC15C50000 size=0x771000 ADVAPI32.dll base=0x7FFC15980000 size=0xB2000 sechost.dll base=0x7FFC151E0000 size=0xA0000 bcrypt.dll base=0x7FFC14810000 size=0x27000 ole32.dll base=0x7FFC15850000 size=0x12B000 OLEAUT32.dll base=0x7FFC15B70000 size=0xD6000 SETUPAPI.dll base=0x7FFC153E0000 size=0x470000 cfgmgr32.dll base=0x7FFC14E80000 size=0x4E000 imagehlp.dll base=0x7FFC16F90000 size=0x1D000 WLDAP32.dll base=0x7FFC15150000 size=0x5F000 HID.DLL base=0x7FFC12E60000 size=0xD000 Normaliz.dll base=0x7FFC165E0000 size=0x8000 VERSION.dll base=0x7FFC0C530000 size=0xA000 dbgcore.DLL base=0x7FFBF3640000 size=0x34000 kernel.appcore.dll base=0x7FFC124A0000 size=0x12000 bcryptPrimitives.dll base=0x7FFC14870000 size=0x82000 clbcatq.dll base=0x7FFC16B60000 size=0xA9000 amsi.dll base=0x7FFBF0DE0000 size=0x1F000 USERENV.dll base=0x7FFC14500000 size=0x2E000 profapi.dll base=0x7FFC14590000 size=0x25000 MpOav.dll base=0x7FFBF0D30000 size=0xA4000 windows.storage.dll base=0x7FFC126B0000 size=0x7AC000 Wldp.dll base=0x7FFC13F30000 size=0x2B000 uxtheme.dll base=0x7FFC11FB0000 size=0x9E000 secur32.dll base=0x7FFBF7F60000 size=0xC000 SSPICLI.DLL base=0x7FFC14530000 size=0x32000 coml2.dll base=0x7FFC14FF0000 size=0x79000 asycfilt.dll base=0x7FFBAE340000 size=0x1A000 uvh64.dll base=0x7FFB9E010000 size=0x2B000 MSCTF.dll base=0x7FFC15A50000 size=0x116000 Riched20.dll base=0x7FFBD6E60000 size=0x9A000 msls31.dll base=0x7FFBD6E00000 size=0x39000 dataexchange.dll base=0x7FFBD6870000 size=0x3E000 d3d11.dll base=0x7FFC0FFA0000 size=0x264000 dcomp.dll base=0x7FFC10D80000 size=0x1E5000 twinapi.appcore.dll base=0x7FFC0CBB0000 size=0x203000 textinputframework.dll base=0x7FFC09D90000 size=0xF9000 CoreUIComponents.dll base=0x7FFC0F040000 size=0x35B000 CoreMessaging.dll base=0x7FFC10C80000 size=0xF2000 ntmarta.dll base=0x7FFC13810000 size=0x33000 wintypes.dll base=0x7FFC0F9E0000 size=0x157000 TextShaping.dll base=0x7FFBF4330000 size=0xAC000 lsp64.dll base=0x7FFBFB5F0000 size=0x2E3000 mswsock.dll base=0x7FFC13C80000 size=0x6A000 MSASN1.dll base=0x7FFC143A0000 size=0x12000 CRYPTSP.dll base=0x7FFC142F0000 size=0x18000 rsaenh.dll base=0x7FFC135C0000 size=0x38000 CRYPTBASE.dll base=0x7FFC13EA0000 size=0xC000 DNSAPI.dll base=0x7FFC139C0000 size=0xCC000 NSI.dll base=0x7FFC15A40000 size=0x8000 rasadhlp.dll base=0x7FFC02120000 size=0xA000 fwpuclnt.dll base=0x7FFC0D250000 size=0x80000 schannel.DLL base=0x7FFC134D0000 size=0x9B000 mskeyprotect.dll base=0x7FFBEDBB0000 size=0x15000 NTASN1.dll base=0x7FFC13F60000 size=0x3B000 ncrypt.dll base=0x7FFC13FA0000 size=0x27000 ncryptsslp.dll base=0x7FFBEE380000 size=0x26000 bink2w64.dll base=0x7FFBEB220000 size=0x74000 fmod.dll base=0x7FFB47110000 size=0x21A000 DSOUND.DLL base=0x7FFB9DCC0000 size=0x9C000 powrprof.dll base=0x7FFC140E0000 size=0x4B000 winmmbase.dll base=0x7FFBE3CE0000 size=0x26000 UMPDC.dll base=0x7FFC140C0000 size=0x12000 fmodstudio.dll base=0x7FFB46F80000 size=0x190000 MMDevApi.dll base=0x7FFC0CF30000 size=0x85000 DEVOBJ.dll base=0x7FFC143E0000 size=0x33000 AUDIOSES.DLL base=0x7FFC0CFC0000 size=0x181000 resourcepolicyclient.dll base=0x7FFC120A0000 size=0x14000 WINTRUST.dll base=0x7FFC14F70000 size=0x74000 d3d12.dll base=0x7FFC0B670000 size=0x25000 D3D12Core.dll base=0x7FFB46DB0000 size=0x1CD000 dxcore.dll base=0x7FFC0EBB0000 size=0x3B000 cryptnet.dll base=0x7FFC0C4F0000 size=0x31000 drvstore.dll base=0x7FFC0C130000 size=0x148000 nvspcap64.dll base=0x7FFB94D00000 size=0x147000 xinput1_4.dll base=0x7FFBE5DD0000 size=0x11000 inputhost.dll base=0x7FFC09E90000 size=0x152000 PROPSYS.dll base=0x7FFC11790000 size=0xFA000 gpapi.dll base=0x7FFC13CF0000 size=0x23000 WINNSI.DLL base=0x7FFC0ED90000 size=0xB000 WINHTTP.dll base=0x7FFC0D7A0000 size=0x10D000 dhcpcsvc6.DLL base=0x7FFC0E430000 size=0x17000 dhcpcsvc.DLL base=0x7FFC0E270000 size=0x1E000 webio.dll base=0x7FFBFA940000 size=0x99000 sl.interposer.dll base=0x7FFBEB170000 size=0xA1000 MSVCP140.dll base=0x7FFBF37A0000 size=0x88000 VCRUNTIME140_1.dll base=0x7FFBFAC60000 size=0xB000 VCRUNTIME140.dll base=0x7FFBF9E40000 size=0x1E000 nvapi64.dll base=0x7FFC019E0000 size=0x585000 sl.common.dll base=0x7FFB5D410000 size=0xDD000 _nvngx.dll base=0x7FFB46C30000 size=0x176000 DEVRTL.dll base=0x7FFBF9F70000 size=0x14000 SPINF.dll base=0x7FFC040B0000 size=0x1C000 sl.pcl.dll base=0x7FFBE5E00000 size=0x58000 sl.reflex.dll base=0x7FFB5D3B0000 size=0x5E000 D3D12Core.dll base=0x7FFB467A0000 size=0x48F000 nvldumdx.dll base=0x7FFC09BB0000 size=0xC4000 nvgpucomp64.dll base=0x7FFC047F0000 size=0x3D93000 NvMessageBus.dll base=0x7FFBFB9B0000 size=0x363000 NvMemMapStoragex.dll base=0x7FFC018A0000 size=0xDE000 nvwgf2umx.dll base=0x7FFBFBE80000 size=0x5834000 nvppex.dll base=0x7FFB94B40000 size=0x1B7000 D3DSCache.dll base=0x7FFBEB350000 size=0x2B000 libxess.dll base=0x7FFB3B500000 size=0x4A3A000 dwmapi.dll base=0x7FFC122C0000 size=0x2E000 wbemprox.dll base=0x7FFC0C6F0000 size=0x11000 wbemcomn.dll base=0x7FFC0E6B0000 size=0x90000 wbemsvc.dll base=0x7FFC0BA20000 size=0x14000 fastprox.dll base=0x7FFC0BBB0000 size=0x10C000 dxcompiler.dll base=0x7FFB40DB0000 size=0x112A000 dxil.dll base=0x7FFB46630000 size=0x168000 Windows.UI.dll base=0x7FFC09FF0000 size=0x140000 WindowManagementAPI.dll base=0x7FFC0CE00000 size=0xA1000 --- PE Sections (PathOfExile.exe) --- .section .text VA=0x1000 VSize=0x2E840BE .section .rdata VA=0x2E86000 VSize=0xB7C3A6 .section .data VA=0x3A03000 VSize=0xD163DC .section .pdata VA=0x471A000 VSize=0x1C4B20 .section _RDATA VA=0x48DF000 VSize=0x4E10 .section .rsrc VA=0x48E4000 VSize=0x27FDF8 .section .reloc VA=0x4B64000 VSize=0x138B0C [OK] Da gan vao PID 25032 (elevated) === AOB SCAN (PID 25032) === Module: base=0x7FF70EB60000 size=0x4C9D000 [OK] Da gan vao PID 25032 (elevated) === READ 0x7FF70EB60000 (64 bytes) === hex64: 4D 5A 90 00 03 00 00 00 04 00 00 00 FF FF 00 00 B8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 01 00 00 [OK] Da gan vao PID 25032 (elevated) === AOB SCAN (PID 25032) === Module: base=0x7FF70EB60000 size=0x4C9D000 [MISS] InGameStateBase (pattern khong khop ban build nay) [MISS] VolumetricFog (pattern khong khop ban build nay) [MISS] EntityListRoot (pattern khong khop ban build nay) [MISS] AreaExploration (pattern khong khop ban build nay) [OK] Da gan vao PID 14672 (elevated) === SCAN-HP value=42 (full scan) === [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 9 ung vien [progress] 0 MB, 9 ung vien [progress] 0 MB, 9 ung vien [progress] 0 MB, 10 ung vien [progress] 0 MB, 10 ung vien [progress] 0 MB, 10 ung vien [progress] 2048 MB, 11999 ung vien [progress] 4096 MB, 31808 ung vien [progress] 5120 MB, 48072 ung vien [progress] 5120 MB, 48072 ung vien [progress] 10752 MB, 180709 ung vien [progress] 10752 MB, 180709 ung vien [progress] 10752 MB, 180709 ung vien [progress] 10752 MB, 180709 ung vien [progress] 10752 MB, 180709 ung vien [progress] 10752 MB, 180718 ung vien [progress] 10752 MB, 180718 ung vien [progress] 10752 MB, 180766 ung vien [progress] 10752 MB, 180766 ung vien [progress] 10752 MB, 180799 ung vien [progress] 10752 MB, 180802 ung vien [progress] 10752 MB, 180876 ung vien [progress] 10752 MB, 180876 ung vien [progress] 10752 MB, 180877 ung vien [progress] 10752 MB, 180877 ung vien [progress] 10752 MB, 180877 ung vien [progress] 10752 MB, 180877 ung vien [progress] 10752 MB, 180877 ung vien [progress] 10752 MB, 180877 ung vien [progress] 10752 MB, 180877 ung vien [progress] 10752 MB, 180877 ung vien [progress] 10752 MB, 180877 ung vien [progress] 10752 MB, 180878 ung vien [progress] 10752 MB, 180878 ung vien [progress] 10752 MB, 180878 ung vien [progress] 10752 MB, 180878 ung vien [progress] 10752 MB, 180885 ung vien [progress] 10752 MB, 180890 ung vien [progress] 10752 MB, 180890 ung vien [progress] 10752 MB, 180890 ung vien [progress] 10752 MB, 180890 ung vien Ket qua: 183550 ung vien (luu tai C:\Projects\AutoPOE2\bin\Release !'-3i9o?e{qwMCP4"@5"Y_UC:\Projects\AutoPOE2\bin\Release\hp_candidates.txt) 0xB9855E9F00 0xB9855E9F28 0xB9855E9F60 0xB9855E9F84 0xB9855ED088 0xB9855ED0E0 0xB9855ED1C8 0xB9855ED1D0 0xB9855ED1D8 0xB987DFF380 0xB98E5FB9D8 0xB9905F60C8 0xB9905F6188 0xB9905FE194 0xB9915FDC8C 0xB991DFBBF4 0xB991DFD97C 0xB9925FD4FC 0xB9925FDC54 0xB993DF61E8 0xB993DF64C8 0xB993DFB838 0xB993DFB850 0xB993DFB8A0 0xB993DFB900 0xB9965FDF54 0xB996DF2160 0xB996DF2270 0xB996DF2518 0xB99ADE4C90 ... va 183520 dia chi khac trong file Huong dan: de nhan vat mat/hoi mau roi chay: memprobe.exe scan-hp --rescan C:\Projects\AutoPOE2\bin\Release !'-3i9o?e{qwMCP4"@5"Y_UC:\Projects\AutoPOE2\bin\Release\hp_candidates.txt [OK] Da gan vao PID 14672 (elevated) === SCAN-HP value=42 (full scan) === [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 9 ung vien [progress] 0 MB, 9 ung vien [progress] 0 MB, 9 ung vien [progress] 4096 MB, 29065 ung vien [progress] 4096 MB, 29065 ung vien [progress] 4096 MB, 29080 ung vien [progress] 4096 MB, 29080 ung vien [progress] 4096 MB, 29114 ung vien [progress] 4096 MB, 29139 ung vien [progress] 4096 MB, 29167 ung vien [progress] 4096 MB, 29210 ung vien [progress] 4608 MB, 36472 ung vien [progress] 4608 MB, 36498 ung vien [progress] 4608 MB, 36518 ung vien [progress] 4608 MB, 36533 ung vien [progress] 4608 MB, 36533 ung vien [progress] 4608 MB, 36627 ung vien [progress] 4608 MB, 36627 ung vien [progress] 4608 MB, 36722 ung vien [progress] 4608 MB, 36736 ung vien [progress] 4608 MB, 36869 ung vien [progress] 4608 MB, 36869 ung vien [progress] 4608 MB, 36896 ung vien [progress] 4608 MB, 36952 ung vien [progress] 4608 MB, 36952 ung vien [progress] 4608 MB, 37011 ung vien [progress] 4608 MB, 37030 ung vien [progress] 4608 MB, 37061 ung vien [progress] 4608 MB, 37073 ung vien [progress] 4608 MB, 37073 ung vien [progress] 4608 MB, 37124 ung vien [progress] 4608 MB, 37192 ung vien [progress] 4608 MB, 37217 ung vien [progress] 4608 MB, 37240 ung vien [progress] 4608 MB, 37288 ung vien [progress] 5632 MB, 53596 ung vien [OK] Da ghi 195791 ung vien vao hp_candidates.txt Ket qua: 195791 ung vien 0xB9855E9F00 0xB9855E9F28 0xB9855E9F60 0xB9855E9F84 0xB9855ED088 0xB9855ED0E0 0xB9855ED1C8 0xB9855ED1D0 0xB9855ED1D8 0xB9895F3374 0xB9905F60C8 0xB9905F6188 0xB9915F7BA8 0xB9935FE1A4 0xB993DF61E8 0xB993DF64C8 0xB996DF2160 0xB996DF2270 0xB996DF2518 0xB996DF8E98 0xB996DF9108 0xB996DF9978 0xB998DF8E88 0xB99ADE4C90 0xB99ADE4D48 0xB99ADE4DE0 0xB99ADE4E28 0xB99FDF9238 0xB9A05F6660 0xB9A05F84A4 ... va 195761 dia chi khac trong hp_candidates.txt Huong dan: de nhan vat mat/hoi mau roi chay: memprobe.exe scan-hp --rescan hp_candidates.txt [SCAN DONE] [OK] Da gan vao PID 14672 (elevated) === SCAN-HP rescan-changed (bo dia chi van == 42) === [OK] Da ghi 4235 ung vien vao hp_candidates.txt Ket qua: 4235 ung vien 0xB9935FE1A4 0xB996DF9108 0xB9A05FEFD0 0xB9A05FF210 0xB9A85FD438 0xB9A8DFDF78 0xB9A8DFDFB8 0xB9A8DFDFD0 0xB9A8DFDFF0 0xB9A8DFF608 0x255001B3DD8 0x255001B50BC 0x255001B5E84 0x255001BB628 0x255001C3ED8 0x255001C51BC 0x255001C5F84 0x255001CB728 0x255001CD95C 0x255001DDA5C 0x255001EDB5C 0x255001EE67C 0x255001F73E0 0x255001F76C0 0x255001FAFC0 0x255001FB158 0x255001FB638 0x255001FBBBC 0x255001FF91C 0x255002244F8 ... va 4205 dia chi khac trong hp_candidates.txt Huong dan: de nhan vat mat/hoi mau roi chay: memprobe.exe scan-hp --rescan hp_candidates.txt [SCAN DONE] [OK] Da gan vao PID 14672 (elevated) === SCAN-HP rescan value=42 === [OK] Da ghi 58 ung vien vao hp_candidates.txt Ket qua: 58 ung vien 0xB996DF9108 0x2550922A384 0x287545A3BC4 0x2875A965D60 0x2875A965D6C 0x2875A965D78 0x2875A965D84 0x2875A965D90 0x2875A965D9C 0x2875A965DA8 0x2875A965DB4 0x2875A965DC0 0x2875A965DCC 0x2875A965DD8 0x2875A965DE4 0x2875A965DF0 0x2875A965DFC 0x287606DA080 0x288B608CBB4 0x288B608CBBC 0x289336E17C0 0x2893382AE30 0x2893DBC1F10 0x28947F2C2F0 0x28965E6F510 0x28965E6F548 0x289A1145150 0x289D89625F4 0x289DE7FF3DC 0x289E7D2CAF4 ... va 28 dia chi khac trong hp_candidates.txt Huong dan: de nhan vat mat/hoi mau roi chay: memprobe.exe scan-hp --rescan hp_candidates.txt [SCAN DONE] [OK] Da gan vao PID 14672 (elevated) === SCAN-HP rescan-changed (bo dia chi van == 42) === [OK] Da ghi 19 ung vien vao hp_candidates.txt Ket qua: 19 ung vien 0x2875A965D60 0x2875A965D6C 0x2875A965D78 0x2875A965D84 0x2875A965D90 0x2875A965D9C 0x2875A965DA8 0x2875A965DB4 0x2875A965DC0 0x2875A965DCC 0x2875A965DD8 0x2875A965DE4 0x2875A965DF0 0x2875A965DFC 0x287606DA080 0x2893DBC1F10 0x28965E6F510 0x28965E6F548 0x289D89625F4 Huong dan: de nhan vat mat/hoi mau roi chay: memprobe.exe scan-hp --rescan hp_candidates.txt [SCAN DONE] [OK] Da gan vao PID 14672 (elevated) === SCAN-HP rescan value=42 === [OK] Da ghi 14 ung vien vao hp_candidates.txt Ket qua: 14 ung vien 0x2875A965D60 0x2875A965D6C 0x2875A965D78 0x2875A965D84 0x2875A965D90 0x2875A965D9C 0x2875A965DA8 0x2875A965DB4 0x2875A965DC0 0x2875A965DCC 0x2875A965DD8 0x2875A965DE4 0x2875A965DF0 0x2875A965DFC Huong dan: de nhan vat mat/hoi mau roi chay: memprobe.exe scan-hp --rescan hp_candidates.txt [SCAN DONE] [OK] Da gan vao PID 14672 (elevated) === READALL (C:\Projects\AutoPOE2\bin\Release]WN`` DBXC:\Projects\AutoPOE2\bin\Release\hp_candidates.txt) === [ERROR] Khong doc duoc file: C:\Projects\AutoPOE2\bin\Release]WN`` DBXC:\Projects\AutoPOE2\bin\Release\hp_candidates.txt [OK] Da gan vao PID 14672 (elevated) === READALL (C:\Projects\AutoPOE2\bin\Release\hp_candidates.txt) === 0x2875A965D60 = 35 0x2875A965D6C = 35 0x2875A965D78 = 35 0x2875A965D84 = 35 0x2875A965D90 = 35 0x2875A965D9C = 35 0x2875A965DA8 = 35 0x2875A965DB4 = 35 0x2875A965DC0 = 35 0x2875A965DCC = 35 0x2875A965DD8 = 35 0x2875A965DE4 = 35 0x2875A965DF0 = 35 0x2875A965DFC = 35 [READALL DONE] [OK] Da gan vao PID 14672 (elevated) === READ 0x2875A965D40 (160 bytes) === hex64: 20 00 00 00 00 00 00 00 FF FF FF FF 00 00 00 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 00 00 00 00 00 FF FF FF FF 20 00 00 00 00 00 00 00 FF FF FF FF 20 00 00 00 00 00 00 00 [OK] Da gan vao PID 14672 (elevated) === READALL (C:\Projects\AutoPOE2\bin\Release\hp_candidates.txt) === 0x2875A965D60 = 25 0x2875A965D6C = 25 0x2875A965D78 = 25 0x2875A965D84 = 25 0x2875A965D90 = 25 0x2875A965D9C = 25 0x2875A965DA8 = 25 0x2875A965DB4 = 25 0x2875A965DC0 = 35 0x2875A965DCC = 35 0x2875A965DD8 = 35 0x2875A965DE4 = 35 0x2875A965DF0 = 35 0x2875A965DFC = 35 [READALL DONE] [OK] Da gan vao PID 14672 (elevated) === READ 0x2875A965C60 (320 bytes) === hex64: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 00 00 00 0A 00 00 FF F5 FF FF 04 00 00 00 [OK] Da gan vao PID 14672 (elevated) === PTRSCAN target=0x2875A965D60 === Gia tri hien tai tai target = 32 Allocation: base=0x2875A740000 span=0x2000000 [pass 1] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 6144 MB, 991 match [progress] 6144 MB, 991 match [progress] 6144 MB, 991 match [progress] 8192 MB, 1042 match [pass 1] xong: 1068 match Trung gian heap: 68 con tro (dung cho Pass 2) [pass 2] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 3 match [progress] 0 MB, 3 match [progress] 0 MB, 3 match [progress] 0 MB, 3 match [progress] 0 MB, 3 match [progress] 6144 MB, 9472 match [progress] 6144 MB, 9472 match [progress] 6144 MB, 9472 match [progress] 8192 MB, 10518 match [progress] 10240 MB, 10658 match [progress] 10240 MB, 10658 match [pass 2] xong: 10685 match [heap L2] 0xB9855EEB50 +0x39A8 -> 0x2874D7DD408 +0x3050 -> HP [heap L2] 0xB9855EEB50 +0x39B0 -> 0x2874D7DD410 +0x2E70 -> HP [heap L2] 0xB9855EEB50 +0xFB28 -> 0x2874D7E9588 +0x1060 -> HP [heap L2] 0xB9855EEB50 +0xFB30 -> 0x2874D7E9590 +0xF40 -> HP [heap L2] 0xB9855EF230 +0x39A8 -> 0x2874D7DD408 +0x3050 -> HP [heap L2] 0xB9855EF230 +0x39B0 -> 0x2874D7DD410 +0x2E70 -> HP [heap L2] 0xB9855EF230 +0xFB28 -> 0x2874D7E9588 +0x1060 -> HP [heap L2] 0xB9855EF230 +0xFB30 -> 0x2874D7E9590 +0xF40 -> HP [heap L2] 0xB9855FDE60 +0x69A8 -> 0x2874D7E9588 +0x1060 -> HP [heap L2] 0xB9855FDE60 +0x69B0 -> 0x2874D7E9590 +0xF40 -> HP [heap L2] 0xB9855FDE60 +0x7628 -> 0x2874D7EA208 +0x70 -> HP [heap L2] 0xB9855FDE60 +0x7630 -> 0x2874D7EA210 +0x64 -> HP [heap L2] 0xB9855FDE60 +0x8E28 -> 0x2874D7EBA08 +0x0 -> HP [heap L2] 0xB9855FDE60 +0x8F28 -> 0x2874D7EBB08 +0x50 -> HP [heap L2] 0xB9855FDE60 +0x8F30 -> 0x2874D7EBB10 +0x14 -> HP [heap L2] 0xB9855FDE60 +0x9528 -> 0x2874D7EC108 +0xD0 -> HP [heap L2] 0xB9855FDE60 +0x9530 -> 0x2874D7EC110 +0x7C -> HP [heap L2] 0xB9895EF550 +0x39A8 -> 0x2874D7DD408 +0x3050 -> HP [heap L2] 0xB9895EF550 +0x39B0 -> 0x2874D7DD410 +0x2E70 -> HP [heap L2] 0xB9895EF550 +0xFB28 -> 0x2874D7E9588 +0x1060 -> HP [heap L2] 0xB9895EF550 +0xFB30 -> 0x2874D7E9590 +0xF40 -> HP [heap L2] 0xB9895FA8E0 +0x39A8 -> 0x2874D7DD408 +0x3050 -> HP [heap L2] 0xB9895FA8E0 +0x39B0 -> 0x2874D7DD410 +0x2E70 -> HP [heap L2] 0xB9895FA8E0 +0xFB28 -> 0x2874D7E9588 +0x1060 -> HP [heap L2] 0xB9895FA8E0 +0xFB30 -> 0x2874D7E9590 +0xF40 -> HP [heap L2] 0xB9895FB310 +0x3930 -> 0x287A31A5940 +0x760 -> HP [heap L2] 0xB9895FBF78 +0x3328 -> 0x2874D7DD408 +0x3050 -> HP [heap L2] 0xB9895FBF78 +0x3330 -> 0x2874D7DD410 +0x2E70 -> HP [heap L2] 0xB9895FBF78 +0xF4A8 -> 0x2874D7E9588 +0x1060 -> HP [heap L2] 0xB9895FBF78 +0xF4B0 -> 0x2874D7E9590 +0xF40 -> HP [heap L2] 0xB9895FCBC0 +0xB10 -> 0x2874D7EA208 +0x70 -> HP [heap L2] 0xB9895FCBC0 +0xB18 -> 0x2874D7EA210 +0x64 -> HP [heap L2] 0xB9895FCBC0 +0x2310 -> 0x2874D7EBA08 +0x0 -> HP [heap L2] 0xB9895FCBC0 +0x2410 -> 0x2874D7EBB08 +0x50 -> HP [heap L2] 0xB9895FCBC0 +0x2418 -> 0x2874D7EBB10 +0x14 -> HP [heap L2] 0xB9895FCBC0 +0x2A10 -> 0x2874D7EC108 +0xD0 -> HP [heap L2] 0xB9895FCBC0 +0x2A18 -> 0x2874D7EC110 +0x7C -> HP [heap L2] 0xB9895FCDB8 +0xB28 -> 0x2874D7EA208 +0x70 -> HP [heap L2] 0xB9895FCDB8 +0xB30 -> 0x2874D7EA210 +0x64 -> HP [heap L2] 0xB9895FCDB8 +0x2328 -> 0x2874D7EBA08 +0x0 -> HP [PTRSCAN DONE] [OK] Da gan vao PID 14672 (elevated) === PTRSCAN target=0x2875A965D60 === Gia tri hien tai tai target = 37 Allocation: base=0x2875A740000 span=0x2000000 [pass 1] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 2048 MB, 808 match [progress] 6144 MB, 910 match [progress] 6144 MB, 910 match [progress] 6144 MB, 910 match [progress] 6144 MB, 910 match [progress] 6144 MB, 910 match [progress] 10240 MB, 986 match [progress] 10240 MB, 986 match [pass 1] xong: 988 match Trung gian heap: 61 con tro (dung cho Pass 2) [pass 2] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 2 match [progress] 0 MB, 2 match [progress] 0 MB, 2 match [progress] 2048 MB, 5001 match [progress] 6144 MB, 9457 match [progress] 6144 MB, 9457 match [progress] 6144 MB, 9457 match [progress] 6144 MB, 9457 match [progress] 6144 MB, 9457 match [progress] 10240 MB, 10617 match [progress] 10240 MB, 10617 match [pass 2] xong: 10644 match [heap L2] 0xB9855EEB50 +0x39A8 -> 0x2874D7DD408 +0x3050 -> HP [heap L2] 0xB9855EEB50 +0x39B0 -> 0x2874D7DD410 +0x2E70 -> HP [heap L2] 0xB9855EEB50 +0xFB28 -> 0x2874D7E9588 +0x1060 -> HP [heap L2] 0xB9855EEB50 +0xFB30 -> 0x2874D7E9590 +0xF40 -> HP [heap L2] 0xB9855EF230 +0x39A8 -> 0x2874D7DD408 +0x3050 -> HP [heap L2] 0xB9855EF230 +0x39B0 -> 0x2874D7DD410 +0x2E70 -> HP [heap L2] 0xB9855EF230 +0xFB28 -> 0x2874D7E9588 +0x1060 -> HP [heap L2] 0xB9855EF230 +0xFB30 -> 0x2874D7E9590 +0xF40 -> HP [heap L2] 0xB9895EF550 +0x39A8 -> 0x2874D7DD408 +0x3050 -> HP [heap L2] 0xB9895EF550 +0x39B0 -> 0x2874D7DD410 +0x2E70 -> HP [heap L2] 0xB9895EF550 +0xFB28 -> 0x2874D7E9588 +0x1060 -> HP [heap L2] 0xB9895EF550 +0xFB30 -> 0x2874D7E9590 +0xF40 -> HP [heap L2] 0xB9895FABD0 +0x3DC0 -> 0x287A31A5940 +0x760 -> HP [heap L2] 0xB9895FB3F0 +0xE7E0 -> 0x287A31A0BB0 +0xE60 -> HP [heap L2] 0xB9895FB488 +0xE7E0 -> 0x287A31A0BB0 +0xE60 -> HP [heap L2] 0xB9895FB4D8 +0xE7E0 -> 0x287A31A0BB0 +0xE60 -> HP [heap L2] 0xB9895FD0F0 +0x3A8 -> 0x2874D7EC108 +0xD0 -> HP [heap L2] 0xB9895FD0F0 +0x3B0 -> 0x2874D7EC110 +0x7C -> HP [heap L2] 0xB9895FD200 +0x3A8 -> 0x2874D7EC108 +0xD0 -> HP [heap L2] 0xB9895FD200 +0x3B0 -> 0x2874D7EC110 +0x7C -> HP [heap L2] 0xB9895FD220 +0x3A8 -> 0x2874D7EC108 +0xD0 -> HP [heap L2] 0xB9895FD220 +0x3B0 -> 0x2874D7EC110 +0x7C -> HP [heap L2] 0xB98B5EF7F0 +0x39A8 -> 0x2874D7DD408 +0x3050 -> HP [heap L2] 0xB98B5EF7F0 +0x39B0 -> 0x2874D7DD410 +0x2E70 -> HP [heap L2] 0xB98B5EF7F0 +0xFB28 -> 0x2874D7E9588 +0x1060 -> HP [heap L2] 0xB98B5EF7F0 +0xFB30 -> 0x2874D7E9590 +0xF40 -> HP [heap L2] 0xB98B5FAB80 +0x39A8 -> 0x2874D7DD408 +0x3050 -> HP [heap L2] 0xB98B5FAB80 +0x39B0 -> 0x2874D7DD410 +0x2E70 -> HP [heap L2] 0xB98B5FAB80 +0xFB28 -> 0x2874D7E9588 +0x1060 -> HP [heap L2] 0xB98B5FAB80 +0xFB30 -> 0x2874D7E9590 +0xF40 -> HP [heap L2] 0xB98B5FAED0 +0xC940 -> 0x287A31A0BB0 +0xE60 -> HP [heap L2] 0xB98B5FAF68 +0xC940 -> 0x287A31A0BB0 +0xE60 -> HP [heap L2] 0xB98B5FAFB8 +0xC940 -> 0x287A31A0BB0 +0xE60 -> HP [heap L2] 0xB98B5FB778 +0xE7E0 -> 0x287A31A0BB0 +0xE60 -> HP [heap L2] 0xB98B5FED10 +0xF0A0 -> 0x287A31A0BB0 +0xE60 -> HP [heap L2] 0xB98B5FED40 +0xF0A0 -> 0x287A31A0BB0 +0xE60 -> HP [heap L2] 0xB98B5FEDA8 +0xF0A0 -> 0x287A31A0BB0 +0xE60 -> HP [heap L2] 0xB98B5FEE18 +0xF0A0 -> 0x287A31A0BB0 +0xE60 -> HP [heap L2] 0xB98B5FEE90 +0xF0A0 -> 0x287A31A0BB0 +0xE60 -> HP [heap L2] 0xB98B5FF8C8 +0x7200 -> 0x287A31A0BB0 +0xE60 -> HP [pass 3] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 18 match [progress] 0 MB, 21 match [progress] 0 MB, 32 match [progress] 0 MB, 32 match [progress] 0 MB, 32 match [progress] 0 MB, 36 match [progress] 0 MB, 36 match [progress] 0 MB, 48 match [progress] 0 MB, 57 match [progress] 0 MB, 57 match [progress] 0 MB, 62 match [progress] 0 MB, 579 match [progress] 0 MB, 597 match [progress] 0 MB, 684 match [progress] 2048 MB, 1068768 match [progress] 6144 MB, 1935833 match [progress] 6144 MB, 1935838 match [progress] 6144 MB, 1935838 match [progress] 6144 MB, 1935838 match [progress] 6144 MB, 1935848 match [pass 3] xong: 2458977 match [CHAIN L3 - STATIC] [[[0xB984A9E960]+0x1118]+0x4A0] + 0x50 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E960]+0x2C10]+0x656F] + 0x1060 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E960]+0x2C10]+0x6577] + 0xF40 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E960]+0x2C10]+0x71EF] + 0x70 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E960]+0x2C10]+0x71F7] + 0x64 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E960]+0x2C10]+0x89EF] + 0x0 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E960]+0x2C10]+0x8AEF] + 0x50 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E960]+0x2C10]+0x8AF7] + 0x14 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E960]+0x2C10]+0x90EF] + 0xD0 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E960]+0x2C10]+0x90F7] + 0x7C -> HP [CHAIN L3 - STATIC] [[[0xB984A9E960]+0x42E8]+0x556D] + 0x1060 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E960]+0x42E8]+0x5575] + 0xF40 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E960]+0x42E8]+0x61ED] + 0x70 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E960]+0x42E8]+0x61F5] + 0x64 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E960]+0x42E8]+0x79ED] + 0x0 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E960]+0x42E8]+0x7AED] + 0x50 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E960]+0x42E8]+0x7AF5] + 0x14 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E960]+0x42E8]+0x80ED] + 0xD0 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E960]+0x42E8]+0x80F5] + 0x7C -> HP [CHAIN L3 - STATIC] [[[0xB984A9EBD0]+0x18]+0xB680] + 0x0 -> HP [CHAIN L3 - STATIC] [[[0xB984A9EBD0]+0x18]+0xBE00] + 0x50 -> HP [CHAIN L3 - STATIC] [[[0xB984A9EBD0]+0xC28]+0xB680] + 0x0 -> HP [CHAIN L3 - STATIC] [[[0xB984A9EBD0]+0xC28]+0xBE00] + 0x50 -> HP [CHAIN L3 - STATIC] [[[0xB984A9EC10]+0x18]+0xB680] + 0x0 -> HP [CHAIN L3 - STATIC] [[[0xB984A9EC10]+0x18]+0xBE00] + 0x50 -> HP (du 25 chain - ngung liet ke) [PTRSCAN DONE] [OK] Da gan vao PID 14672 (elevated) === MAP (PID 14672) === PathOfExile.exe base=0x7FF70EB60000 size=0x4C9D000 ntdll.dll base=0x7FFC16FF0000 size=0x1F9000 KERNEL32.DLL base=0x7FFC15310000 size=0xC2000 KERNELBASE.dll base=0x7FFC14A60000 size=0x2F7000 apphelp.dll base=0x7FFC0F5F0000 size=0x94000 WS2_32.dll base=0x7FFC16E10000 size=0x6B000 RPCRT4.dll base=0x7FFC163D0000 size=0x126000 IMM32.dll base=0x7FFC151B0000 size=0x2F000 USER32.dll base=0x7FFC16C70000 size=0x19D000 win32u.dll base=0x7FFC14840000 size=0x22000 GDI32.dll base=0x7FFC165B0000 size=0x2B000 dbghelp.dll base=0x7FFC02780000 size=0x201000 gdi32full.dll base=0x7FFC14D60000 size=0x11A000 ucrtbase.dll base=0x7FFC14710000 size=0x100000 msvcp_win.dll base=0x7FFC14ED0000 size=0x9D000 CRYPT32.dll base=0x7FFC14900000 size=0x15D000 COMCTL32.dll base=0x7FFBF9970000 size=0x29B000 IPHLPAPI.DLL base=0x7FFC13980000 size=0x3B000 COMDLG32.dll base=0x7FFC15070000 size=0xDA000 WINMM.dll base=0x7FFC03160000 size=0x27000 msvcrt.dll base=0x7FFC16510000 size=0x9E000 gdiplus.dll base=0x7FFBFAD50000 size=0x1AB000 combase.dll base=0x7FFC165F0000 size=0x353000 shcore.dll base=0x7FFC16E80000 size=0xAD000 dxgi.dll base=0x7FFC12E70000 size=0xF6000 USP10.dll base=0x7FFBD6E40000 size=0x19000 SHLWAPI.dll base=0x7FFC16C10000 size=0x5B000 SHELL32.dll base=0x7FFC15C50000 size=0x771000 ADVAPI32.dll base=0x7FFC15980000 size=0xB2000 sechost.dll base=0x7FFC151E0000 size=0xA0000 bcrypt.dll base=0x7FFC14810000 size=0x27000 ole32.dll base=0x7FFC15850000 size=0x12B000 OLEAUT32.dll base=0x7FFC15B70000 size=0xD6000 SETUPAPI.dll base=0x7FFC153E0000 size=0x470000 cfgmgr32.dll base=0x7FFC14E80000 size=0x4E000 imagehlp.dll base=0x7FFC16F90000 size=0x1D000 WLDAP32.dll base=0x7FFC15150000 size=0x5F000 HID.DLL base=0x7FFC12E60000 size=0xD000 Normaliz.dll base=0x7FFC165E0000 size=0x8000 VERSION.dll base=0x7FFC0C530000 size=0xA000 dbgcore.DLL base=0x7FFBF3640000 size=0x34000 kernel.appcore.dll base=0x7FFC124A0000 size=0x12000 bcryptPrimitives.dll base=0x7FFC14870000 size=0x82000 clbcatq.dll base=0x7FFC16B60000 size=0xA9000 amsi.dll base=0x7FFBF0DE0000 size=0x1F000 USERENV.dll base=0x7FFC14500000 size=0x2E000 profapi.dll base=0x7FFC14590000 size=0x25000 MpOav.dll base=0x7FFBF0D30000 size=0xA4000 windows.storage.dll base=0x7FFC126B0000 size=0x7AC000 Wldp.dll base=0x7FFC13F30000 size=0x2B000 uxtheme.dll base=0x7FFC11FB0000 size=0x9E000 secur32.dll base=0x7FFBF7F60000 size=0xC000 SSPICLI.DLL base=0x7FFC14530000 size=0x32000 coml2.dll base=0x7FFC14FF0000 size=0x79000 asycfilt.dll base=0x7FFBEE620000 size=0x1A000 uvh64.dll base=0x7FFB9E010000 size=0x2B000 MSCTF.dll base=0x7FFC15A50000 size=0x116000 Riched20.dll base=0x7FFBD6E60000 size=0x9A000 msls31.dll base=0x7FFBD6E00000 size=0x39000 dataexchange.dll base=0x7FFBD6870000 size=0x3E000 d3d11.dll base=0x7FFC0FFA0000 size=0x264000 dcomp.dll base=0x7FFC10D80000 size=0x1E5000 twinapi.appcore.dll base=0x7FFC0CBB0000 size=0x203000 textinputframework.dll base=0x7FFC09D90000 size=0xF9000 CoreMessaging.dll base=0x7FFC10C80000 size=0xF2000 CoreUIComponents.dll base=0x7FFC0F040000 size=0x35B000 ntmarta.dll base=0x7FFC13810000 size=0x33000 wintypes.dll base=0x7FFC0F9E0000 size=0x157000 TextShaping.dll base=0x7FFBF4330000 size=0xAC000 lsp64.dll base=0x7FFBFB5F0000 size=0x2E3000 mswsock.dll base=0x7FFC13C80000 size=0x6A000 WINTRUST.DLL base=0x7FFC14F70000 size=0x74000 MSASN1.dll base=0x7FFC143A0000 size=0x12000 CRYPTSP.dll base=0x7FFC142F0000 size=0x18000 rsaenh.dll base=0x7FFC135C0000 size=0x38000 CRYPTBASE.dll base=0x7FFC13EA0000 size=0xC000 DNSAPI.dll base=0x7FFC139C0000 size=0xCC000 NSI.dll base=0x7FFC15A40000 size=0x8000 rasadhlp.dll base=0x7FFC02120000 size=0xA000 fwpuclnt.dll base=0x7FFC0D250000 size=0x80000 bink2w64.dll base=0x7FFB46710000 size=0x74000 fmod.dll base=0x7FFB41CC0000 size=0x21A000 DSOUND.DLL base=0x7FFB9DCC0000 size=0x9C000 powrprof.dll base=0x7FFC140E0000 size=0x4B000 winmmbase.dll base=0x7FFBE3CE0000 size=0x26000 UMPDC.dll base=0x7FFC140C0000 size=0x12000 fmodstudio.dll base=0x7FFB41B30000 size=0x190000 MMDevApi.dll base=0x7FFC0CF30000 size=0x85000 DEVOBJ.dll base=0x7FFC143E0000 size=0x33000 AUDIOSES.DLL base=0x7FFC0CFC0000 size=0x181000 resourcepolicyclient.dll base=0x7FFC120A0000 size=0x14000 d3d12.dll base=0x7FFC0B670000 size=0x25000 D3D12Core.dll base=0x7FFB46DB0000 size=0x1CD000 dxcore.dll base=0x7FFC0EBB0000 size=0x3B000 cryptnet.dll base=0x7FFC0C4F0000 size=0x31000 drvstore.dll base=0x7FFC0C130000 size=0x148000 nvspcap64.dll base=0x7FFB94D00000 size=0x147000 xinput1_4.dll base=0x7FFBE5DD0000 size=0x11000 inputhost.dll base=0x7FFC09E90000 size=0x152000 PROPSYS.dll base=0x7FFC11790000 size=0xFA000 gpapi.dll base=0x7FFC13CF0000 size=0x23000 WINNSI.DLL base=0x7FFC0ED90000 size=0xB000 sl.interposer.dll base=0x7FFB46660000 size=0xA1000 VCRUNTIME140_1.dll base=0x7FFBFAC60000 size=0xB000 MSVCP140.dll base=0x7FFBF37A0000 size=0x88000 VCRUNTIME140.dll base=0x7FFBF9E40000 size=0x1E000 nvapi64.dll base=0x7FFC019E0000 size=0x585000 sl.common.dll base=0x7FFB41A50000 size=0xDD000 _nvngx.dll base=0x7FFB418D0000 size=0x176000 DEVRTL.dll base=0x7FFBF9F70000 size=0x14000 SPINF.dll base=0x7FFC040B0000 size=0x1C000 sl.pcl.dll base=0x7FFB41870000 size=0x58000 sl.reflex.dll base=0x7FFB41810000 size=0x5E000 D3D12Core.dll base=0x7FFB41380000 size=0x48F000 nvldumdx.dll base=0x7FFC09BB0000 size=0xC4000 nvgpucomp64.dll base=0x7FFC047F0000 size=0x3D93000 NvMessageBus.dll base=0x7FFBFB9B0000 size=0x363000 NvMemMapStoragex.dll base=0x7FFC018A0000 size=0xDE000 nvwgf2umx.dll base=0x7FFBFBE80000 size=0x5834000 schannel.DLL base=0x7FFC134D0000 size=0x9B000 nvppex.dll base=0x7FFB94B40000 size=0x1B7000 mskeyprotect.dll base=0x7FFBEDBB0000 size=0x15000 NTASN1.dll base=0x7FFC13F60000 size=0x3B000 ncrypt.dll base=0x7FFC13FA0000 size=0x27000 ncryptsslp.dll base=0x7FFBEE380000 size=0x26000 D3DSCache.dll base=0x7FFBEB350000 size=0x2B000 libxess.dll base=0x7FFB3B500000 size=0x4A3A000 dwmapi.dll base=0x7FFC122C0000 size=0x2E000 wbemprox.dll base=0x7FFC0C6F0000 size=0x11000 wbemcomn.dll base=0x7FFC0E6B0000 size=0x90000 wbemsvc.dll base=0x7FFC0BA20000 size=0x14000 fastprox.dll base=0x7FFC0BBB0000 size=0x10C000 dxcompiler.dll base=0x7FFAF5630000 size=0x112A000 dxil.dll base=0x7FFB371C0000 size=0x168000 --- PE Sections (PathOfExile.exe) --- .section .text VA=0x1000 VSize=0x2E840BE .section .rdata VA=0x2E86000 VSize=0xB7C3A6 .section .data VA=0x3A03000 VSize=0xD163DC .section .pdata VA=0x471A000 VSize=0x1C4B20 .section _RDATA VA=0x48DF000 VSize=0x4E10 .section .rsrc VA=0x48E4000 VSize=0x27FDF8 .section .reloc VA=0x4B64000 VSize=0x138B0C [OK] Da gan vao PID 14672 (elevated) === PTRSCAN target=0xB984A9E960 === Gia tri hien tai tai target = 1452655280 Allocation: base=0xB984A90000 span=0x10000 [pass 1] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 54 match [progress] 0 MB, 54 match [progress] 0 MB, 54 match [progress] 0 MB, 54 match [progress] 0 MB, 54 match [progress] 0 MB, 54 match [progress] 0 MB, 54 match [progress] 0 MB, 54 match [progress] 0 MB, 55 match [progress] 0 MB, 55 match [progress] 0 MB, 55 match [progress] 0 MB, 55 match [progress] 0 MB, 55 match [progress] 0 MB, 55 match [progress] 2048 MB, 55 match [progress] 6144 MB, 55 match [progress] 6144 MB, 55 match [progress] 6144 MB, 55 match [progress] 6144 MB, 55 match [progress] 6144 MB, 55 match [progress] 8192 MB, 55 match [pass 1] xong: 55 match Trung gian heap: 12 con tro (dung cho Pass 2) [pass 2] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 19 match [progress] 0 MB, 19 match [progress] 0 MB, 19 match [progress] 0 MB, 19 match [progress] 0 MB, 19 match [progress] 0 MB, 19 match [progress] 0 MB, 19 match [progress] 0 MB, 43 match [progress] 0 MB, 56 match [progress] 0 MB, 56 match [progress] 0 MB, 56 match [progress] 0 MB, 56 match [progress] 0 MB, 56 match [progress] 0 MB, 56 match [progress] 2048 MB, 70 match [progress] 6144 MB, 70 match [progress] 6144 MB, 70 match [progress] 6144 MB, 70 match [progress] 6144 MB, 70 match [progress] 6144 MB, 70 match [progress] 8192 MB, 70 match [pass 2] xong: 71 match [heap L2] 0xB984A9E778 +0x538 -> 0xB984A9EE08 +0x960 -> HP [heap L2] 0xB984A9E778 +0x578 -> 0xB984A9EE48 +0x90 -> HP [heap L2] 0xB984A9E778 +0x688 -> 0xB984A9EF58 +0xE92D -> HP [heap L2] 0xB984A9E7B0 +0x538 -> 0xB984A9EE08 +0x960 -> HP [heap L2] 0xB984A9E7B0 +0x578 -> 0xB984A9EE48 +0x90 -> HP [heap L2] 0xB984A9E7B0 +0x688 -> 0xB984A9EF58 +0xE92D -> HP [heap L2] 0xB984A9E7C0 +0x10 -> 0xB984A9E838 +0x90 -> HP [heap L2] 0xB984A9E7C0 +0x28 -> 0xB984A9E850 +0x90 -> HP [heap L2] 0xB984A9E7C0 +0x88 -> 0xB984A9E8B0 +0x90 -> HP [heap L2] 0xB984A9E7C0 +0x5E0 -> 0xB984A9EE08 +0x960 -> HP [heap L2] 0xB984A9E7C0 +0x620 -> 0xB984A9EE48 +0x90 -> HP [heap L2] 0xB984A9E7C0 +0x730 -> 0xB984A9EF58 +0xE92D -> HP [heap L2] 0xB984A9E7C8 +0x48 -> 0xB984A9E8B0 +0x90 -> HP [heap L2] 0xB984A9E7C8 +0x5A0 -> 0xB984A9EE08 +0x960 -> HP [heap L2] 0xB984A9E7C8 +0x5E0 -> 0xB984A9EE48 +0x90 -> HP [heap L2] 0xB984A9E7C8 +0x6F0 -> 0xB984A9EF58 +0xE92D -> HP [heap L2] 0xB984A9E800 +0x538 -> 0xB984A9EE08 +0x960 -> HP [heap L2] 0xB984A9E800 +0x578 -> 0xB984A9EE48 +0x90 -> HP [heap L2] 0xB984A9E800 +0x688 -> 0xB984A9EF58 +0xE92D -> HP [heap L2] 0xB984A9E838 +0x538 -> 0xB984A9EE08 +0x960 -> HP [heap L2] 0xB984A9E838 +0x578 -> 0xB984A9EE48 +0x90 -> HP [heap L2] 0xB984A9E838 +0x688 -> 0xB984A9EF58 +0xE92D -> HP [heap L2] 0xB984A9E850 +0x538 -> 0xB984A9EE08 +0x960 -> HP [heap L2] 0xB984A9E850 +0x578 -> 0xB984A9EE48 +0x90 -> HP [heap L2] 0xB984A9E850 +0x688 -> 0xB984A9EF58 +0xE92D -> HP [heap L2] 0xB984A9E878 +0x38 -> 0xB984A9EE08 +0x960 -> HP [heap L2] 0xB984A9E878 +0x78 -> 0xB984A9EE48 +0x90 -> HP [heap L2] 0xB984A9E878 +0x188 -> 0xB984A9EF58 +0xE92D -> HP [heap L2] 0xB984A9E8B0 +0x538 -> 0xB984A9EE08 +0x960 -> HP [heap L2] 0xB984A9E8B0 +0x578 -> 0xB984A9EE48 +0x90 -> HP [heap L2] 0xB984A9E8B0 +0x688 -> 0xB984A9EF58 +0xE92D -> HP [heap L2] 0xB984A9E8B8 +0x18 -> 0xB984A9EE08 +0x960 -> HP [heap L2] 0xB984A9E8B8 +0x58 -> 0xB984A9EE48 +0x90 -> HP [heap L2] 0xB984A9E8B8 +0x168 -> 0xB984A9EF58 +0xE92D -> HP [heap L2] 0xB984A9E8C0 +0x28 -> 0xB984A9EE08 +0x960 -> HP [heap L2] 0xB984A9E8C0 +0x68 -> 0xB984A9EE48 +0x90 -> HP [heap L2] 0xB984A9E8C0 +0x178 -> 0xB984A9EF58 +0xE92D -> HP [heap L2] 0xB984A9EDD8 +0xE8 -> 0xB984A9EF58 +0xE92D -> HP [heap L2] 0xB984A9EE08 +0x778 -> 0xB984A9E778 +0x90 -> HP [heap L2] 0xB984A9EE08 +0x7B0 -> 0xB984A9E7B0 +0x90 -> HP [pass 3] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 38 match [progress] 0 MB, 38 match [progress] 0 MB, 38 match [progress] 0 MB, 38 match [progress] 0 MB, 38 match [progress] 0 MB, 38 match [progress] 0 MB, 38 match [progress] 0 MB, 103 match [progress] 0 MB, 121 match [progress] 0 MB, 121 match [progress] 0 MB, 121 match [progress] 0 MB, 121 match [progress] 0 MB, 121 match [progress] 0 MB, 121 match [progress] 2048 MB, 206 match [progress] 6144 MB, 206 match [progress] 6144 MB, 206 match [progress] 6144 MB, 206 match [progress] 6144 MB, 206 match [progress] 6144 MB, 206 match [progress] 8192 MB, 206 match [pass 3] xong: 208 match [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x508]+0xE8] + 0xE92D -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x538]+0x778] + 0x90 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x538]+0x7B0] + 0x90 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x538]+0x7C0] + 0x138 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x538]+0x7C8] + 0xF8 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x538]+0x800] + 0x90 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x538]+0x838] + 0x90 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x538]+0x850] + 0x90 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x538]+0x8B0] + 0x90 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x538]+0xE08] + 0x960 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x538]+0xE48] + 0x90 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x538]+0xF58] + 0xE92D -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x578]+0x538] + 0x960 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x578]+0x578] + 0x90 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x578]+0x688] + 0xE92D -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x590]+0xE8] + 0xE92D -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x600]+0x20] + 0xE92D -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x688]+0xE745] + 0x90 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x688]+0xE77D] + 0x90 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x688]+0xE78D] + 0x138 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x688]+0xE795] + 0xF8 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x688]+0xE7CD] + 0x90 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x688]+0xE805] + 0x90 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x688]+0xE81D] + 0x90 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x688]+0xE87D] + 0x90 -> HP (du 25 chain - ngung liet ke) [PTRSCAN DONE] [OK] Da gan vao PID 14672 (elevated) === PTRDEEP target=0x2875A965D60 === Gia tri hien tai = 45 So module: 134 [pass 1] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 5120 MB, 22 match [pass 1] xong: 22 match [depth 1] matches=22 [depth 1] frontier=22 [pass 2] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [OK] Da gan vao PID 14672 (elevated) === MAP (PID 14672) === PathOfExile.exe base=0x7FF70EB60000 size=0x4C9D000 ntdll.dll base=0x7FFC16FF0000 size=0x1F9000 KERNEL32.DLL base=0x7FFC15310000 size=0xC2000 KERNELBASE.dll base=0x7FFC14A60000 size=0x2F7000 apphelp.dll base=0x7FFC0F5F0000 size=0x94000 WS2_32.dll base=0x7FFC16E10000 size=0x6B000 RPCRT4.dll base=0x7FFC163D0000 size=0x126000 IMM32.dll base=0x7FFC151B0000 size=0x2F000 USER32.dll base=0x7FFC16C70000 size=0x19D000 win32u.dll base=0x7FFC14840000 size=0x22000 GDI32.dll base=0x7FFC165B0000 size=0x2B000 dbghelp.dll base=0x7FFC02780000 size=0x201000 gdi32full.dll base=0x7FFC14D60000 size=0x11A000 ucrtbase.dll base=0x7FFC14710000 size=0x100000 msvcp_win.dll base=0x7FFC14ED0000 size=0x9D000 CRYPT32.dll base=0x7FFC14900000 size=0x15D000 COMCTL32.dll base=0x7FFBF9970000 size=0x29B000 IPHLPAPI.DLL base=0x7FFC13980000 size=0x3B000 COMDLG32.dll base=0x7FFC15070000 size=0xDA000 WINMM.dll base=0x7FFC03160000 size=0x27000 msvcrt.dll base=0x7FFC16510000 size=0x9E000 gdiplus.dll base=0x7FFBFAD50000 size=0x1AB000 combase.dll base=0x7FFC165F0000 size=0x353000 shcore.dll base=0x7FFC16E80000 size=0xAD000 dxgi.dll base=0x7FFC12E70000 size=0xF6000 USP10.dll base=0x7FFBD6E40000 size=0x19000 SHLWAPI.dll base=0x7FFC16C10000 size=0x5B000 SHELL32.dll base=0x7FFC15C50000 size=0x771000 ADVAPI32.dll base=0x7FFC15980000 size=0xB2000 sechost.dll base=0x7FFC151E0000 size=0xA0000 bcrypt.dll base=0x7FFC14810000 size=0x27000 ole32.dll base=0x7FFC15850000 size=0x12B000 OLEAUT32.dll base=0x7FFC15B70000 size=0xD6000 SETUPAPI.dll base=0x7FFC153E0000 size=0x470000 cfgmgr32.dll base=0x7FFC14E80000 size=0x4E000 imagehlp.dll base=0x7FFC16F90000 size=0x1D000 WLDAP32.dll base=0x7FFC15150000 size=0x5F000 HID.DLL base=0x7FFC12E60000 size=0xD000 Normaliz.dll base=0x7FFC165E0000 size=0x8000 VERSION.dll base=0x7FFC0C530000 size=0xA000 dbgcore.DLL base=0x7FFBF3640000 size=0x34000 kernel.appcore.dll base=0x7FFC124A0000 size=0x12000 bcryptPrimitives.dll base=0x7FFC14870000 size=0x82000 clbcatq.dll base=0x7FFC16B60000 size=0xA9000 amsi.dll base=0x7FFBF0DE0000 size=0x1F000 USERENV.dll base=0x7FFC14500000 size=0x2E000 profapi.dll base=0x7FFC14590000 size=0x25000 MpOav.dll base=0x7FFBF0D30000 size=0xA4000 windows.storage.dll base=0x7FFC126B0000 size=0x7AC000 Wldp.dll base=0x7FFC13F30000 size=0x2B000 uxtheme.dll base=0x7FFC11FB0000 size=0x9E000 secur32.dll base=0x7FFBF7F60000 size=0xC000 SSPICLI.DLL base=0x7FFC14530000 size=0x32000 coml2.dll base=0x7FFC14FF0000 size=0x79000 asycfilt.dll base=0x7FFBEE620000 size=0x1A000 uvh64.dll base=0x7FFB9E010000 size=0x2B000 MSCTF.dll base=0x7FFC15A50000 size=0x116000 Riched20.dll base=0x7FFBD6E60000 size=0x9A000 msls31.dll base=0x7FFBD6E00000 size=0x39000 dataexchange.dll base=0x7FFBD6870000 size=0x3E000 d3d11.dll base=0x7FFC0FFA0000 size=0x264000 dcomp.dll base=0x7FFC10D80000 size=0x1E5000 twinapi.appcore.dll base=0x7FFC0CBB0000 size=0x203000 textinputframework.dll base=0x7FFC09D90000 size=0xF9000 CoreMessaging.dll base=0x7FFC10C80000 size=0xF2000 CoreUIComponents.dll base=0x7FFC0F040000 size=0x35B000 ntmarta.dll base=0x7FFC13810000 size=0x33000 wintypes.dll base=0x7FFC0F9E0000 size=0x157000 TextShaping.dll base=0x7FFBF4330000 size=0xAC000 lsp64.dll base=0x7FFBFB5F0000 size=0x2E3000 mswsock.dll base=0x7FFC13C80000 size=0x6A000 WINTRUST.DLL base=0x7FFC14F70000 size=0x74000 MSASN1.dll base=0x7FFC143A0000 size=0x12000 CRYPTSP.dll base=0x7FFC142F0000 size=0x18000 rsaenh.dll base=0x7FFC135C0000 size=0x38000 CRYPTBASE.dll base=0x7FFC13EA0000 size=0xC000 DNSAPI.dll base=0x7FFC139C0000 size=0xCC000 NSI.dll base=0x7FFC15A40000 size=0x8000 rasadhlp.dll base=0x7FFC02120000 size=0xA000 fwpuclnt.dll base=0x7FFC0D250000 size=0x80000 bink2w64.dll base=0x7FFB46710000 size=0x74000 fmod.dll base=0x7FFB41CC0000 size=0x21A000 DSOUND.DLL base=0x7FFB9DCC0000 size=0x9C000 powrprof.dll base=0x7FFC140E0000 size=0x4B000 winmmbase.dll base=0x7FFBE3CE0000 size=0x26000 UMPDC.dll base=0x7FFC140C0000 size=0x12000 fmodstudio.dll base=0x7FFB41B30000 size=0x190000 MMDevApi.dll base=0x7FFC0CF30000 size=0x85000 DEVOBJ.dll base=0x7FFC143E0000 size=0x33000 AUDIOSES.DLL base=0x7FFC0CFC0000 size=0x181000 resourcepolicyclient.dll base=0x7FFC120A0000 size=0x14000 d3d12.dll base=0x7FFC0B670000 size=0x25000 D3D12Core.dll base=0x7FFB46DB0000 size=0x1CD000 dxcore.dll base=0x7FFC0EBB0000 size=0x3B000 cryptnet.dll base=0x7FFC0C4F0000 size=0x31000 drvstore.dll base=0x7FFC0C130000 size=0x148000 nvspcap64.dll base=0x7FFB94D00000 size=0x147000 xinput1_4.dll base=0x7FFBE5DD0000 size=0x11000 inputhost.dll base=0x7FFC09E90000 size=0x152000 PROPSYS.dll base=0x7FFC11790000 size=0xFA000 gpapi.dll base=0x7FFC13CF0000 size=0x23000 WINNSI.DLL base=0x7FFC0ED90000 size=0xB000 sl.interposer.dll base=0x7FFB46660000 size=0xA1000 VCRUNTIME140_1.dll base=0x7FFBFAC60000 size=0xB000 MSVCP140.dll base=0x7FFBF37A0000 size=0x88000 VCRUNTIME140.dll base=0x7FFBF9E40000 size=0x1E000 nvapi64.dll base=0x7FFC019E0000 size=0x585000 sl.common.dll base=0x7FFB41A50000 size=0xDD000 _nvngx.dll base=0x7FFB418D0000 size=0x176000 DEVRTL.dll base=0x7FFBF9F70000 size=0x14000 SPINF.dll base=0x7FFC040B0000 size=0x1C000 sl.pcl.dll base=0x7FFB41870000 size=0x58000 sl.reflex.dll base=0x7FFB41810000 size=0x5E000 D3D12Core.dll base=0x7FFB41380000 size=0x48F000 nvldumdx.dll base=0x7FFC09BB0000 size=0xC4000 nvgpucomp64.dll base=0x7FFC047F0000 size=0x3D93000 NvMessageBus.dll base=0x7FFBFB9B0000 size=0x363000 NvMemMapStoragex.dll base=0x7FFC018A0000 size=0xDE000 nvwgf2umx.dll base=0x7FFBFBE80000 size=0x5834000 schannel.DLL base=0x7FFC134D0000 size=0x9B000 nvppex.dll base=0x7FFB94B40000 size=0x1B7000 mskeyprotect.dll base=0x7FFBEDBB0000 size=0x15000 NTASN1.dll base=0x7FFC13F60000 size=0x3B000 ncrypt.dll base=0x7FFC13FA0000 size=0x27000 ncryptsslp.dll base=0x7FFBEE380000 size=0x26000 D3DSCache.dll base=0x7FFBEB350000 size=0x2B000 libxess.dll base=0x7FFB3B500000 size=0x4A3A000 dwmapi.dll base=0x7FFC122C0000 size=0x2E000 wbemprox.dll base=0x7FFC0C6F0000 size=0x11000 wbemcomn.dll base=0x7FFC0E6B0000 size=0x90000 wbemsvc.dll base=0x7FFC0BA20000 size=0x14000 fastprox.dll base=0x7FFC0BBB0000 size=0x10C000 dxcompiler.dll base=0x7FFAF5630000 size=0x112A000 dxil.dll base=0x7FFB371C0000 size=0x168000 --- PE Sections (PathOfExile.exe) --- .section .text VA=0x1000 VSize=0x2E840BE .section .rdata VA=0x2E86000 VSize=0xB7C3A6 .section .data VA=0x3A03000 VSize=0xD163DC .section .pdata VA=0x471A000 VSize=0x1C4B20 .section _RDATA VA=0x48DF000 VSize=0x4E10 .section .rsrc VA=0x48E4000 VSize=0x27FDF8 .section .reloc VA=0x4B64000 VSize=0x138B0C [OK] Da gan vao PID 14672 (elevated) === READALL (C:\Projects\AutoPOE2\bin\Release\hp_candidates.txt) === 0x2875A965D60 = 35 0x2875A965D6C = 35 0x2875A965D78 = 35 0x2875A965D84 = 35 0x2875A965D90 = 35 0x2875A965D9C = 35 0x2875A965DA8 = 35 0x2875A965DB4 = 35 0x2875A965DC0 = 35 0x2875A965DCC = 35 0x2875A965DD8 = 35 0x2875A965DE4 = 35 0x2875A965DF0 = 35 0x2875A965DFC = 35 [READALL DONE] [OK] Da gan vao PID 14672 (elevated) === PTRDEEP target=0x2875A965D60 === Gia tri hien tai = 45 So module: 134 [pass 1] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [pass 1] xong: 22 match [depth 1] matches=22 [depth 1] frontier=22 [pass 2] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 2048 MB, 703 match [progress] 3072 MB, 1171 match [progress] 5120 MB, 1241 match [pass 2] xong: 1454 match [depth 2] matches=1454 [STATIC ROOT] 0x7FFB41EBC528 (depth 2) [CHAIN] static=0x2875A965D60 offsets=+0x7DB5E680 +0x7D73699F8948 -> HP (u32) [PTRDEEP DONE] Tim thay 1 static chain o depth 2 [OK] Da gan vao PID 14672 (elevated) === PTRDEEP target=0x2875A965D60 === Gia tri hien tai = 35 So module: 134 [pass 1] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 2048 MB, 15 match [progress] 3072 MB, 22 match [progress] 5120 MB, 22 match [pass 1] xong: 22 match [depth 1] matches=22 [depth 1] frontier=22 [pass 2] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 4 match [progress] 0 MB, 4 match [progress] 0 MB, 4 match [progress] 0 MB, 4 match [progress] 2048 MB, 710 match [progress] 3072 MB, 1177 match [progress] 5120 MB, 1247 match [pass 2] xong: 1461 match [depth 2] matches=1461 [STATIC ROOT] 0x7FFB41EBC528 (depth 2) [PTRDEEP DONE] Tim thay 0 static chain o depth 2 [CHAIN] S=0x7FFB41EBC528 offsets=+0xA0 +0x760 -> HP (u32) | off_hien_tai: off1=0xA0 off2=0x760 Static nam trong module base=0x7FFB41CC0000 size=0x21A000 RVA=0x1FC528 [OK] Da gan vao PID 14672 (elevated) === READ 0x7FFB41EBC528 (16 bytes) === hex64: E0 3B 4C D8 87 02 00 00 FF FF FF FF 00 00 00 00 [OK] Da gan vao PID 14672 (elevated) === MAP (PID 14672) === PathOfExile.exe base=0x7FF70EB60000 size=0x4C9D000 ntdll.dll base=0x7FFC16FF0000 size=0x1F9000 KERNEL32.DLL base=0x7FFC15310000 size=0xC2000 KERNELBASE.dll base=0x7FFC14A60000 size=0x2F7000 apphelp.dll base=0x7FFC0F5F0000 size=0x94000 WS2_32.dll base=0x7FFC16E10000 size=0x6B000 RPCRT4.dll base=0x7FFC163D0000 size=0x126000 IMM32.dll base=0x7FFC151B0000 size=0x2F000 USER32.dll base=0x7FFC16C70000 size=0x19D000 win32u.dll base=0x7FFC14840000 size=0x22000 GDI32.dll base=0x7FFC165B0000 size=0x2B000 dbghelp.dll base=0x7FFC02780000 size=0x201000 gdi32full.dll base=0x7FFC14D60000 size=0x11A000 ucrtbase.dll base=0x7FFC14710000 size=0x100000 msvcp_win.dll base=0x7FFC14ED0000 size=0x9D000 CRYPT32.dll base=0x7FFC14900000 size=0x15D000 COMCTL32.dll base=0x7FFBF9970000 size=0x29B000 IPHLPAPI.DLL base=0x7FFC13980000 size=0x3B000 COMDLG32.dll base=0x7FFC15070000 size=0xDA000 WINMM.dll base=0x7FFC03160000 size=0x27000 msvcrt.dll base=0x7FFC16510000 size=0x9E000 gdiplus.dll base=0x7FFBFAD50000 size=0x1AB000 combase.dll base=0x7FFC165F0000 size=0x353000 shcore.dll base=0x7FFC16E80000 size=0xAD000 dxgi.dll base=0x7FFC12E70000 size=0xF6000 USP10.dll base=0x7FFBD6E40000 size=0x19000 SHLWAPI.dll base=0x7FFC16C10000 size=0x5B000 SHELL32.dll base=0x7FFC15C50000 size=0x771000 ADVAPI32.dll base=0x7FFC15980000 size=0xB2000 sechost.dll base=0x7FFC151E0000 size=0xA0000 bcrypt.dll base=0x7FFC14810000 size=0x27000 ole32.dll base=0x7FFC15850000 size=0x12B000 OLEAUT32.dll base=0x7FFC15B70000 size=0xD6000 SETUPAPI.dll base=0x7FFC153E0000 size=0x470000 cfgmgr32.dll base=0x7FFC14E80000 size=0x4E000 imagehlp.dll base=0x7FFC16F90000 size=0x1D000 WLDAP32.dll base=0x7FFC15150000 size=0x5F000 HID.DLL base=0x7FFC12E60000 size=0xD000 Normaliz.dll base=0x7FFC165E0000 size=0x8000 VERSION.dll base=0x7FFC0C530000 size=0xA000 dbgcore.DLL base=0x7FFBF3640000 size=0x34000 kernel.appcore.dll base=0x7FFC124A0000 size=0x12000 bcryptPrimitives.dll base=0x7FFC14870000 size=0x82000 clbcatq.dll base=0x7FFC16B60000 size=0xA9000 amsi.dll base=0x7FFBF0DE0000 size=0x1F000 USERENV.dll base=0x7FFC14500000 size=0x2E000 profapi.dll base=0x7FFC14590000 size=0x25000 MpOav.dll base=0x7FFBF0D30000 size=0xA4000 windows.storage.dll base=0x7FFC126B0000 size=0x7AC000 Wldp.dll base=0x7FFC13F30000 size=0x2B000 uxtheme.dll base=0x7FFC11FB0000 size=0x9E000 secur32.dll base=0x7FFBF7F60000 size=0xC000 SSPICLI.DLL base=0x7FFC14530000 size=0x32000 coml2.dll base=0x7FFC14FF0000 size=0x79000 asycfilt.dll base=0x7FFBEE620000 size=0x1A000 uvh64.dll base=0x7FFB9E010000 size=0x2B000 MSCTF.dll base=0x7FFC15A50000 size=0x116000 Riched20.dll base=0x7FFBD6E60000 size=0x9A000 msls31.dll base=0x7FFBD6E00000 size=0x39000 dataexchange.dll base=0x7FFBD6870000 size=0x3E000 d3d11.dll base=0x7FFC0FFA0000 size=0x264000 dcomp.dll base=0x7FFC10D80000 size=0x1E5000 twinapi.appcore.dll base=0x7FFC0CBB0000 size=0x203000 textinputframework.dll base=0x7FFC09D90000 size=0xF9000 CoreMessaging.dll base=0x7FFC10C80000 size=0xF2000 CoreUIComponents.dll base=0x7FFC0F040000 size=0x35B000 ntmarta.dll base=0x7FFC13810000 size=0x33000 wintypes.dll base=0x7FFC0F9E0000 size=0x157000 TextShaping.dll base=0x7FFBF4330000 size=0xAC000 lsp64.dll base=0x7FFBFB5F0000 size=0x2E3000 mswsock.dll base=0x7FFC13C80000 size=0x6A000 WINTRUST.DLL base=0x7FFC14F70000 size=0x74000 MSASN1.dll base=0x7FFC143A0000 size=0x12000 CRYPTSP.dll base=0x7FFC142F0000 size=0x18000 rsaenh.dll base=0x7FFC135C0000 size=0x38000 CRYPTBASE.dll base=0x7FFC13EA0000 size=0xC000 DNSAPI.dll base=0x7FFC139C0000 size=0xCC000 NSI.dll base=0x7FFC15A40000 size=0x8000 rasadhlp.dll base=0x7FFC02120000 size=0xA000 fwpuclnt.dll base=0x7FFC0D250000 size=0x80000 bink2w64.dll base=0x7FFB46710000 size=0x74000 fmod.dll base=0x7FFB41CC0000 size=0x21A000 DSOUND.DLL base=0x7FFB9DCC0000 size=0x9C000 powrprof.dll base=0x7FFC140E0000 size=0x4B000 winmmbase.dll base=0x7FFBE3CE0000 size=0x26000 UMPDC.dll base=0x7FFC140C0000 size=0x12000 fmodstudio.dll base=0x7FFB41B30000 size=0x190000 MMDevApi.dll base=0x7FFC0CF30000 size=0x85000 DEVOBJ.dll base=0x7FFC143E0000 size=0x33000 AUDIOSES.DLL base=0x7FFC0CFC0000 size=0x181000 resourcepolicyclient.dll base=0x7FFC120A0000 size=0x14000 d3d12.dll base=0x7FFC0B670000 size=0x25000 D3D12Core.dll base=0x7FFB46DB0000 size=0x1CD000 dxcore.dll base=0x7FFC0EBB0000 size=0x3B000 cryptnet.dll base=0x7FFC0C4F0000 size=0x31000 drvstore.dll base=0x7FFC0C130000 size=0x148000 nvspcap64.dll base=0x7FFB94D00000 size=0x147000 xinput1_4.dll base=0x7FFBE5DD0000 size=0x11000 inputhost.dll base=0x7FFC09E90000 size=0x152000 PROPSYS.dll base=0x7FFC11790000 size=0xFA000 gpapi.dll base=0x7FFC13CF0000 size=0x23000 WINNSI.DLL base=0x7FFC0ED90000 size=0xB000 sl.interposer.dll base=0x7FFB46660000 size=0xA1000 VCRUNTIME140_1.dll base=0x7FFBFAC60000 size=0xB000 MSVCP140.dll base=0x7FFBF37A0000 size=0x88000 VCRUNTIME140.dll base=0x7FFBF9E40000 size=0x1E000 nvapi64.dll base=0x7FFC019E0000 size=0x585000 sl.common.dll base=0x7FFB41A50000 size=0xDD000 _nvngx.dll base=0x7FFB418D0000 size=0x176000 DEVRTL.dll base=0x7FFBF9F70000 size=0x14000 SPINF.dll base=0x7FFC040B0000 size=0x1C000 sl.pcl.dll base=0x7FFB41870000 size=0x58000 sl.reflex.dll base=0x7FFB41810000 size=0x5E000 D3D12Core.dll base=0x7FFB41380000 size=0x48F000 nvldumdx.dll base=0x7FFC09BB0000 size=0xC4000 nvgpucomp64.dll base=0x7FFC047F0000 size=0x3D93000 NvMessageBus.dll base=0x7FFBFB9B0000 size=0x363000 NvMemMapStoragex.dll base=0x7FFC018A0000 size=0xDE000 nvwgf2umx.dll base=0x7FFBFBE80000 size=0x5834000 schannel.DLL base=0x7FFC134D0000 size=0x9B000 nvppex.dll base=0x7FFB94B40000 size=0x1B7000 mskeyprotect.dll base=0x7FFBEDBB0000 size=0x15000 NTASN1.dll base=0x7FFC13F60000 size=0x3B000 ncrypt.dll base=0x7FFC13FA0000 size=0x27000 ncryptsslp.dll base=0x7FFBEE380000 size=0x26000 D3DSCache.dll base=0x7FFBEB350000 size=0x2B000 libxess.dll base=0x7FFB3B500000 size=0x4A3A000 dwmapi.dll base=0x7FFC122C0000 size=0x2E000 wbemprox.dll base=0x7FFC0C6F0000 size=0x11000 wbemcomn.dll base=0x7FFC0E6B0000 size=0x90000 wbemsvc.dll base=0x7FFC0BA20000 size=0x14000 fastprox.dll base=0x7FFC0BBB0000 size=0x10C000 dxcompiler.dll base=0x7FFAF5630000 size=0x112A000 dxil.dll base=0x7FFB371C0000 size=0x168000 --- PE Sections (PathOfExile.exe) --- .section .text VA=0x1000 VSize=0x2E840BE .section .rdata VA=0x2E86000 VSize=0xB7C3A6 .section .data VA=0x3A03000 VSize=0xD163DC .section .pdata VA=0x471A000 VSize=0x1C4B20 .section _RDATA VA=0x48DF000 VSize=0x4E10 .section .rsrc VA=0x48E4000 VSize=0x27FDF8 .section .reloc VA=0x4B64000 VSize=0x138B0C [OK] Da gan vao PID 14672 (elevated) === READ 0x287D84C3C80 (16 bytes) === hex64: 00 56 96 5A 87 02 00 00 00 B6 33 04 00 00 00 00 [OK] Da gan vao PID 14672 (elevated) === READ 0x2875A965D60 (16 bytes) === hex64: 10 00 00 00 00 00 00 00 FF FF FF FF 10 00 00 00 [OK] Da gan vao PID 34188 (elevated) === MAP (PID 34188) === PathOfExile.exe base=0x7FF70EB60000 size=0x4C9D000 ntdll.dll base=0x7FFC16FF0000 size=0x1F9000 KERNEL32.DLL base=0x7FFC15310000 size=0xC2000 KERNELBASE.dll base=0x7FFC14A60000 size=0x2F7000 WS2_32.dll base=0x7FFC16E10000 size=0x6B000 RPCRT4.dll base=0x7FFC163D0000 size=0x126000 IMM32.dll base=0x7FFC151B0000 size=0x2F000 USER32.dll base=0x7FFC16C70000 size=0x19D000 win32u.dll base=0x7FFC14840000 size=0x22000 GDI32.dll base=0x7FFC165B0000 size=0x2B000 dbghelp.dll base=0x7FFC02780000 size=0x201000 gdi32full.dll base=0x7FFC14D60000 size=0x11A000 ucrtbase.dll base=0x7FFC14710000 size=0x100000 msvcp_win.dll base=0x7FFC14ED0000 size=0x9D000 CRYPT32.dll base=0x7FFC14900000 size=0x15D000 COMCTL32.dll base=0x7FFBF9970000 size=0x29B000 IPHLPAPI.DLL base=0x7FFC13980000 size=0x3B000 WINMM.dll base=0x7FFC03160000 size=0x27000 COMDLG32.dll base=0x7FFC15070000 size=0xDA000 msvcrt.dll base=0x7FFC16510000 size=0x9E000 gdiplus.dll base=0x7FFBFAD50000 size=0x1AB000 combase.dll base=0x7FFC165F0000 size=0x353000 shcore.dll base=0x7FFC16E80000 size=0xAD000 dxgi.dll base=0x7FFC12E70000 size=0xF6000 USP10.dll base=0x7FFBD6E40000 size=0x19000 SHLWAPI.dll base=0x7FFC16C10000 size=0x5B000 SHELL32.dll base=0x7FFC15C50000 size=0x771000 ADVAPI32.dll base=0x7FFC15980000 size=0xB2000 sechost.dll base=0x7FFC151E0000 size=0xA0000 bcrypt.dll base=0x7FFC14810000 size=0x27000 ole32.dll base=0x7FFC15850000 size=0x12B000 OLEAUT32.dll base=0x7FFC15B70000 size=0xD6000 SETUPAPI.dll base=0x7FFC153E0000 size=0x470000 cfgmgr32.dll base=0x7FFC14E80000 size=0x4E000 imagehlp.dll base=0x7FFC16F90000 size=0x1D000 WLDAP32.dll base=0x7FFC15150000 size=0x5F000 HID.DLL base=0x7FFC12E60000 size=0xD000 Normaliz.dll base=0x7FFC165E0000 size=0x8000 VERSION.dll base=0x7FFC0C530000 size=0xA000 dbgcore.DLL base=0x7FFBF3640000 size=0x34000 kernel.appcore.dll base=0x7FFC124A0000 size=0x12000 bcryptPrimitives.dll base=0x7FFC14870000 size=0x82000 clbcatq.dll base=0x7FFC16B60000 size=0xA9000 amsi.dll base=0x7FFBF0DE0000 size=0x1F000 USERENV.dll base=0x7FFC14500000 size=0x2E000 profapi.dll base=0x7FFC14590000 size=0x25000 MpOav.dll base=0x7FFBF0D30000 size=0xA4000 windows.storage.dll base=0x7FFC126B0000 size=0x7AC000 Wldp.dll base=0x7FFC13F30000 size=0x2B000 uxtheme.dll base=0x7FFC11FB0000 size=0x9E000 secur32.dll base=0x7FFBF7F60000 size=0xC000 SSPICLI.DLL base=0x7FFC14530000 size=0x32000 coml2.dll base=0x7FFC14FF0000 size=0x79000 asycfilt.dll base=0x7FFBEE620000 size=0x1A000 uvh64.dll base=0x7FFB9E010000 size=0x2B000 MSCTF.dll base=0x7FFC15A50000 size=0x116000 Riched20.dll base=0x7FFBD6E60000 size=0x9A000 msls31.dll base=0x7FFBD6E00000 size=0x39000 dataexchange.dll base=0x7FFBD6870000 size=0x3E000 d3d11.dll base=0x7FFC0FFA0000 size=0x264000 dcomp.dll base=0x7FFC10D80000 size=0x1E5000 twinapi.appcore.dll base=0x7FFC0CBB0000 size=0x203000 textinputframework.dll base=0x7FFC09D90000 size=0xF9000 CoreUIComponents.dll base=0x7FFC0F040000 size=0x35B000 CoreMessaging.dll base=0x7FFC10C80000 size=0xF2000 ntmarta.dll base=0x7FFC13810000 size=0x33000 wintypes.dll base=0x7FFC0F9E0000 size=0x157000 TextShaping.dll base=0x7FFBF4330000 size=0xAC000 lsp64.dll base=0x7FFBFB5F0000 size=0x2E3000 mswsock.dll base=0x7FFC13C80000 size=0x6A000 WINTRUST.DLL base=0x7FFC14F70000 size=0x74000 MSASN1.dll base=0x7FFC143A0000 size=0x12000 CRYPTSP.dll base=0x7FFC142F0000 size=0x18000 rsaenh.dll base=0x7FFC135C0000 size=0x38000 CRYPTBASE.dll base=0x7FFC13EA0000 size=0xC000 DNSAPI.dll base=0x7FFC139C0000 size=0xCC000 NSI.dll base=0x7FFC15A40000 size=0x8000 rasadhlp.dll base=0x7FFC02120000 size=0xA000 fwpuclnt.dll base=0x7FFC0D250000 size=0x80000 bink2w64.dll base=0x7FFB466C0000 size=0x74000 fmod.dll base=0x7FFB413D0000 size=0x21A000 DSOUND.DLL base=0x7FFB9DCC0000 size=0x9C000 powrprof.dll base=0x7FFC140E0000 size=0x4B000 winmmbase.dll base=0x7FFBE3CE0000 size=0x26000 UMPDC.dll base=0x7FFC140C0000 size=0x12000 fmodstudio.dll base=0x7FFB3FDB0000 size=0x190000 MMDevApi.dll base=0x7FFC0CF30000 size=0x85000 DEVOBJ.dll base=0x7FFC143E0000 size=0x33000 AUDIOSES.DLL base=0x7FFC0CFC0000 size=0x181000 resourcepolicyclient.dll base=0x7FFC120A0000 size=0x14000 d3d12.dll base=0x7FFC0B670000 size=0x25000 D3D12Core.dll base=0x7FFB46DB0000 size=0x1CD000 dxcore.dll base=0x7FFC0EBB0000 size=0x3B000 cryptnet.dll base=0x7FFC0C4F0000 size=0x31000 drvstore.dll base=0x7FFC0C130000 size=0x148000 nvspcap64.dll base=0x7FFB94D00000 size=0x147000 xinput1_4.dll base=0x7FFBE5DD0000 size=0x11000 inputhost.dll base=0x7FFC09E90000 size=0x152000 PROPSYS.dll base=0x7FFC11790000 size=0xFA000 gpapi.dll base=0x7FFC13CF0000 size=0x23000 WINNSI.DLL base=0x7FFC0ED90000 size=0xB000 sl.interposer.dll base=0x7FFB41170000 size=0xA1000 VCRUNTIME140.dll base=0x7FFBF9E40000 size=0x1E000 MSVCP140.dll base=0x7FFBF37A0000 size=0x88000 VCRUNTIME140_1.dll base=0x7FFBFAC60000 size=0xB000 nvapi64.dll base=0x7FFC019E0000 size=0x585000 sl.common.dll base=0x7FFB3FCD0000 size=0xDD000 _nvngx.dll base=0x7FFB3FB50000 size=0x176000 DEVRTL.dll base=0x7FFBF9F70000 size=0x14000 SPINF.dll base=0x7FFC040B0000 size=0x1C000 sl.pcl.dll base=0x7FFB46660000 size=0x58000 sl.reflex.dll base=0x7FFB40220000 size=0x5E000 D3D12Core.dll base=0x7FFB3F6C0000 size=0x48F000 nvldumdx.dll base=0x7FFC09BB0000 size=0xC4000 nvgpucomp64.dll base=0x7FFC047F0000 size=0x3D93000 NvMessageBus.dll base=0x7FFBFB9B0000 size=0x363000 NvMemMapStoragex.dll base=0x7FFC018A0000 size=0xDE000 schannel.DLL base=0x7FFC134D0000 size=0x9B000 nvwgf2umx.dll base=0x7FFBFBE80000 size=0x5834000 mskeyprotect.dll base=0x7FFBEDBB0000 size=0x15000 NTASN1.dll base=0x7FFC13F60000 size=0x3B000 ncrypt.dll base=0x7FFC13FA0000 size=0x27000 ncryptsslp.dll base=0x7FFBEE380000 size=0x26000 nvppex.dll base=0x7FFB94B40000 size=0x1B7000 D3DSCache.dll base=0x7FFBEB350000 size=0x2B000 libxess.dll base=0x7FFAECD40000 size=0x4A3A000 dwmapi.dll base=0x7FFC122C0000 size=0x2E000 wbemprox.dll base=0x7FFC0C6F0000 size=0x11000 wbemcomn.dll base=0x7FFC0E6B0000 size=0x90000 wbemsvc.dll base=0x7FFC0BA20000 size=0x14000 fastprox.dll base=0x7FFC0BBB0000 size=0x10C000 --- PE Sections (PathOfExile.exe) --- .section .text VA=0x1000 VSize=0x2E840BE .section .rdata VA=0x2E86000 VSize=0xB7C3A6 .section .data VA=0x3A03000 VSize=0xD163DC .section .pdata VA=0x471A000 VSize=0x1C4B20 .section _RDATA VA=0x48DF000 VSize=0x4E10 .section .rsrc VA=0x48E4000 VSize=0x27FDF8 .section .reloc VA=0x4B64000 VSize=0x138B0C [OK] Da gan vao PID 34188 (elevated) === READ 0x7FFB415CC528 (16 bytes) === hex64: D0 F2 07 5B DC 02 00 00 FF FF FF FF 00 00 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x2DC075BF370 (16 bytes) === hex64: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x2875A965D60 (64 bytes) === [FAIL] Khong doc duoc (dia chi khong hop le / khong commit) [OK] Da gan vao PID 34188 (elevated) === SCAN-HP value=21 (full scan) === [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 1 ung vien [progress] 0 MB, 5 ung vien [progress] 0 MB, 7 ung vien [progress] 0 MB, 11 ung vien [progress] 0 MB, 20 ung vien [progress] 0 MB, 20 ung vien [progress] 0 MB, 29 ung vien [progress] 0 MB, 29 ung vien [progress] 0 MB, 29 ung vien [progress] 0 MB, 30 ung vien [progress] 0 MB, 30 ung vien [progress] 0 MB, 30 ung vien [progress] 0 MB, 30 ung vien [progress] 0 MB, 31 ung vien [progress] 0 MB, 31 ung vien [progress] 0 MB, 31 ung vien [progress] 0 MB, 31 ung vien [progress] 0 MB, 34 ung vien [progress] 0 MB, 34 ung vien [progress] 0 MB, 35 ung vien [progress] 0 MB, 35 ung vien [progress] 0 MB, 36 ung vien [progress] 0 MB, 37 ung vien [progress] 0 MB, 37 ung vien [progress] 0 MB, 38 ung vien [progress] 0 MB, 39 ung vien [progress] 0 MB, 39 ung vien [progress] 0 MB, 41 ung vien [progress] 0 MB, 42 ung vien [progress] 0 MB, 43 ung vien [progress] 0 MB, 44 ung vien [progress] 0 MB, 44 ung vien [progress] 0 MB, 44 ung vien [progress] 0 MB, 44 ung vien [progress] 0 MB, 46 ung vien [progress] 0 MB, 47 ung vien [progress] 0 MB, 48 ung vien [progress] 0 MB, 49 ung vien [progress] 0 MB, 50 ung vien [progress] 0 MB, 51 ung vien [progress] 0 MB, 52 ung vien [progress] 0 MB, 54 ung vien [progress] 0 MB, 54 ung vien [progress] 0 MB, 54 ung vien [progress] 0 MB, 60 ung vien [progress] 0 MB, 61 ung vien [progress] 0 MB, 61 ung vien [progress] 0 MB, 61 ung vien [progress] 0 MB, 61 ung vien [progress] 0 MB, 61 ung vien [progress] 0 MB, 61 ung vien [progress] 0 MB, 61 ung vien [progress] 0 MB, 61 ung vien [progress] 0 MB, 61 ung vien [progress] 0 MB, 61 ung vien [progress] 0 MB, 61 ung vien [progress] 0 MB, 61 ung vien [progress] 0 MB, 61 ung vien [progress] 0 MB, 65 ung vien [progress] 0 MB, 65 ung vien [progress] 0 MB, 65 ung vien [progress] 3584 MB, 58439 ung vien [progress] 3584 MB, 58505 ung vien [progress] 3584 MB, 58505 ung vien [progress] 3584 MB, 58557 ung vien [progress] 3584 MB, 58655 ung vien [progress] 3584 MB, 58667 ung vien [progress] 3584 MB, 58732 ung vien [progress] 3584 MB, 58774 ung vien [progress] 3584 MB, 58776 ung vien [progress] 3584 MB, 58776 ung vien [OK] Da ghi 357811 ung vien vao hp_candidates.txt Ket qua: 357811 ung vien 0xE6817FDD6C 0xE681FE6080 0xE681FFE090 0xE681FFE108 0xE681FFE1F0 0xE6827E79F0 0xE6827F5178 0xE682FF92E8 0xE682FFEB60 0xE682FFEBD8 0xE682FFECC0 0xE6837F90D4 0xE6837F918C 0xE6837F9684 0xE6837F973C 0xE6837F9B54 0xE6837F9C0C 0xE6837F9E44 0xE6837F9EFC 0xE6837FA5C8 0xE6847F95E4 0xE6847F969C 0xE6847F9B94 0xE6847F9C4C 0xE6847FA064 0xE6847FA11C 0xE6847FA354 0xE6847FA40C 0xE6847FAAD8 0xE685FFA238 ... va 357781 dia chi khac trong hp_candidates.txt Huong dan: de nhan vat mat/hoi mau roi chay: memprobe.exe scan-hp --rescan hp_candidates.txt [SCAN DONE] [OK] Da gan vao PID 34188 (elevated) === SCAN-HP rescan-changed (bo dia chi van == 21) === [OK] Da ghi 3287 ung vien vao hp_candidates.txt Ket qua: 3287 ung vien 0xE6817FDD6C 0xE6927FB7C8 0xE6927FD558 0xE6EEBF4828 0xE6EEBF4B70 0xE6EEBF4BE0 0xE6EEBF7938 0xE6F2BF5318 0xE6F2BF5660 0xE6F2BF56D0 0xE6F2BF8428 0xE6F2BFA1D4 0xE6F4BF4E68 0xE6F4BF51B0 0xE6F4BF5220 0xE6F4BF7F78 0xE6F53F4F58 0xE6F53F52A0 0xE6F53F5310 0xE6F53F8068 0xE6F53F9E14 0xE6F5BF83E8 0xE6F7BFEA60 0xE6F7BFEAD8 0xE6F7BFEBC0 0x2A9124303F8 0x2A912430438 0x2A912430938 0x2A9124309B8 0x2A912430AB8 ... va 3257 dia chi khac trong hp_candidates.txt Huong dan: de nhan vat mat/hoi mau roi chay: memprobe.exe scan-hp --rescan hp_candidates.txt [SCAN DONE] [OK] Da gan vao PID 34188 (elevated) === SCAN-HP rescan value=21 === [OK] Da ghi 5 ung vien vao hp_candidates.txt Ket qua: 5 ung vien 0xE6F2BF8428 0x501D91D34AC 0x501F0EBAB88 0x501F196C088 0x50206FF5088 Huong dan: de nhan vat mat/hoi mau roi chay: memprobe.exe scan-hp --rescan hp_candidates.txt [SCAN DONE] [OK] Da gan vao PID 34188 (elevated) === READALL (C:\Projects\AutoPOE2\bin\Release\hp_candidates.txt) === 0xE6F2BF8428 = 21 0x501D91D34AC = 20 0x501F0EBAB88 = 0 0x501F196C088 = 12 0x50206FF5088 = 22 [READALL DONE] [OK] Da gan vao PID 34188 (elevated) === READ 0xE6F2BF83C8 (256 bytes) === hex64: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0xE6F2BF8428 (256 bytes) === hex64: 15 00 00 00 01 01 00 00 B0 DB 01 D8 01 05 00 00 A0 DB 01 D8 01 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E6 00 00 00 00 00 00 00 00 00 00 00 00 0A 00 00 A0 05 00 00 00 00 00 00 00 00 00 00 [OK] Da gan vao PID 34188 (elevated) === PTRDEEP target=0xE6F2BF8428 maxOff=0x10000 maxDepth=8 === Gia tri hien tai = 21 So module: 131 [pass 1] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 4096 MB, 359 match [progress] 4096 MB, 359 match [progress] 4096 MB, 359 match [progress] 4096 MB, 359 match [progress] 4096 MB, 359 match [pass 1] xong: 480 match [depth 1] matches=480 [depth 1] frontier=480 [pass 2] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 4096 MB, 364 match [progress] 4096 MB, 364 match [progress] 4096 MB, 364 match [progress] 4096 MB, 364 match [progress] 4096 MB, 364 match [pass 2] xong: 33571 match [depth 2] matches=33571 [STATIC ROOT] 0x7FF71312C1D0 (depth 2) [STATIC ROOT] 0x7FF71312C1D8 (depth 2) [STATIC ROOT] 0x7FF71312C1E0 (depth 2) [STATIC ROOT] 0x7FF71312C4A0 (depth 2) [STATIC ROOT] 0x7FF71312C4A8 (depth 2) [STATIC ROOT] 0x7FF71312C4B0 (depth 2) [STATIC ROOT] 0x7FF71312C5A0 (depth 2) [STATIC ROOT] 0x7FF71312C5A8 (depth 2) [STATIC ROOT] 0x7FF71312C5B0 (depth 2) [STATIC ROOT] 0x7FF71312C5F8 (depth 2) [STATIC ROOT] 0x7FF71312C600 (depth 2) [STATIC ROOT] 0x7FF71312C608 (depth 2) [STATIC ROOT] 0x7FF71312CA20 (depth 2) [STATIC ROOT] 0x7FF71312CA28 (depth 2) [STATIC ROOT] 0x7FF71312CA30 (depth 2) [STATIC ROOT] 0x7FF71312FEF8 (depth 2) [STATIC ROOT] 0x7FF713133280 (depth 2) [STATIC ROOT] 0x7FF713133288 (depth 2) [STATIC ROOT] 0x7FF713133290 (depth 2) [STATIC ROOT] 0x7FF713275740 (depth 2) [PTRDEEP DONE] Tim thay 0 static chain o depth 2 [CHAIN] S=0x7FF713275740 offsets=+0x1120 +0x115F -> HP (u32) | off_hien_tai: off1=0x1120 off2=0x115F Static nam trong module base=0x7FF70EB60000 size=0x4C9D000 RVA=0x4715740 [OK] Da gan vao PID 34188 (elevated) === READ 0x7FF713275740 (16 bytes) === hex64: 00 42 F6 F0 01 05 00 00 A4 01 00 80 00 00 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x7FF713275740 (16 bytes) === hex64: 00 42 F6 F0 01 05 00 00 A4 01 00 80 00 00 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x501F0F65320 (16 bytes) === hex64: C9 72 BF F2 E6 00 00 00 60 CE F9 F0 01 05 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0xE6F2BF8428 (16 bytes) === hex64: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [OK] Da gan vao PID 34188 (elevated) === SCAN-HP value=10 (full scan) === [progress] 0 MB, 1 ung vien [progress] 0 MB, 1 ung vien [progress] 0 MB, 16 ung vien [progress] 0 MB, 27 ung vien [progress] 0 MB, 59 ung vien [progress] 0 MB, 72 ung vien [progress] 0 MB, 79 ung vien [progress] 0 MB, 87 ung vien [progress] 0 MB, 113 ung vien [progress] 0 MB, 139 ung vien [progress] 0 MB, 150 ung vien [progress] 0 MB, 155 ung vien [progress] 0 MB, 156 ung vien [progress] 0 MB, 157 ung vien [progress] 0 MB, 159 ung vien [progress] 0 MB, 160 ung vien [progress] 0 MB, 161 ung vien [progress] 0 MB, 162 ung vien [progress] 0 MB, 162 ung vien [progress] 0 MB, 162 ung vien [progress] 0 MB, 166 ung vien [progress] 0 MB, 171 ung vien [progress] 0 MB, 171 ung vien [progress] 0 MB, 171 ung vien [progress] 0 MB, 173 ung vien [progress] 0 MB, 173 ung vien [progress] 0 MB, 173 ung vien [progress] 0 MB, 173 ung vien [progress] 0 MB, 173 ung vien [progress] 0 MB, 173 ung vien [progress] 0 MB, 174 ung vien [progress] 0 MB, 177 ung vien [progress] 0 MB, 179 ung vien [progress] 0 MB, 179 ung vien [progress] 0 MB, 191 ung vien [progress] 0 MB, 202 ung vien [progress] 0 MB, 215 ung vien [progress] 0 MB, 229 ung vien [progress] 0 MB, 229 ung vien [progress] 0 MB, 230 ung vien [progress] 0 MB, 231 ung vien [progress] 0 MB, 232 ung vien [progress] 0 MB, 232 ung vien [progress] 0 MB, 233 ung vien [progress] 0 MB, 234 ung vien [progress] 0 MB, 235 ung vien [progress] 0 MB, 237 ung vien [progress] 0 MB, 237 ung vien [progress] 0 MB, 237 ung vien [progress] 0 MB, 238 ung vien [progress] 0 MB, 238 ung vien [progress] 0 MB, 238 ung vien [progress] 0 MB, 238 ung vien [progress] 0 MB, 238 ung vien [progress] 0 MB, 238 ung vien [progress] 0 MB, 238 ung vien [progress] 0 MB, 238 ung vien [progress] 0 MB, 238 ung vien [progress] 0 MB, 238 ung vien [progress] 0 MB, 248 ung vien [progress] 0 MB, 251 ung vien [progress] 3584 MB, 119207 ung vien [progress] 3584 MB, 119478 ung vien [progress] 4096 MB, 162348 ung vien [progress] 4096 MB, 162348 ung vien [progress] 4096 MB, 162379 ung vien [progress] 4096 MB, 162379 ung vien [progress] 4096 MB, 162379 ung vien [progress] 4096 MB, 162379 ung vien [progress] 4096 MB, 162442 ung vien [progress] 6144 MB, 273288 ung vien [OK] Da ghi 750427 ung vien vao hp_candidates.txt Ket qua: 750427 ung vien 0x7FFE026C 0xE6807E5880 0xE6807E58F8 0xE6807E5910 0xE6807F9464 0xE6807F951C 0xE6807F9A14 0xE6807F9ACC 0xE6807F9EE4 0xE6807F9F9C 0xE6807FA1D4 0xE6807FA28C 0xE6807FA958 0xE6807FC3FC 0xE6807FCEF0 0xE6807FD698 0xE680FE57C4 0xE680FE7250 0xE680FE72F8 0xE680FF1CF0 0xE680FF1E00 0xE680FF1F10 0xE680FF1F98 0xE680FFA5EC 0xE680FFAEA8 0xE680FFE6B8 0xE680FFE758 0xE6817E97D0 0xE6817EDD50 0xE6817EDFF8 ... va 750397 dia chi khac trong hp_candidates.txt Huong dan: de nhan vat mat/hoi mau roi chay: memprobe.exe scan-hp --rescan hp_candidates.txt [SCAN DONE] [OK] Da gan vao PID 34188 (elevated) === SCAN-HP rescan-changed (bo dia chi van == 10) === [OK] Da ghi 4602 ung vien vao hp_candidates.txt Ket qua: 4602 ung vien 0xE6897F90D8 0xE689FFF2B8 0xE690FF8418 0xE690FF87A8 0xE690FF9928 0xE690FF992C 0xE690FF99D8 0xE690FF99F0 0xE690FF9A58 0xE690FF9BF0 0xE690FF9E80 0xE690FFCF14 0xE690FFCF18 0xE6917FA0B8 0xE6917FB8D0 0xE691FF95B8 0xE691FFC538 0xE691FFE508 0xE6927F7E38 0xE6927F9348 0xE6927F934C 0xE6927F93F8 0xE6927F9410 0xE6927F9478 0xE6927F9610 0xE6927F98A0 0xE6927FAD78 0xE6927FADF0 0xE6927FB358 0xE6927FB554 ... va 4572 dia chi khac trong hp_candidates.txt Huong dan: de nhan vat mat/hoi mau roi chay: memprobe.exe scan-hp --rescan hp_candidates.txt [SCAN DONE] [OK] Da gan vao PID 34188 (elevated) === SCAN-HP rescan value=33 === [OK] Da ghi 6 ung vien vao hp_candidates.txt Ket qua: 6 ung vien 0x2A95EEAD054 0x2DC9907FF98 0x502433F50FC 0x502654103E8 0x502704E25B8 0x502837037B0 Huong dan: de nhan vat mat/hoi mau roi chay: memprobe.exe scan-hp --rescan hp_candidates.txt [SCAN DONE] [OK] Da gan vao PID 34188 (elevated) === READ 0x2A95EEAD054 (64 bytes) === hex64: 21 00 00 00 00 00 41 00 00 E4 0F 00 23 72 02 20 29 00 00 00 03 00 01 00 00 E4 0F 00 20 72 30 29 23 00 00 00 00 00 41 00 00 E4 0F 00 23 72 34 23 32 00 00 00 1A 00 01 00 00 C4 0F 00 23 72 2A 23 [OK] Da gan vao PID 34188 (elevated) === READ 0x2DC9907FF98 (64 bytes) === hex64: 21 00 00 00 00 00 00 00 F8 FF FF FF FF FF FF FF BA BC F7 77 DC 02 00 00 0F 00 00 00 00 00 00 00 F8 FF FF FF FF FF FF FF BA BC F7 77 DC 02 00 00 10 00 00 00 00 00 00 00 FC FF FF FF FF FF FF FF [OK] Da gan vao PID 34188 (elevated) === READ 0x502433F50FC (64 bytes) === hex64: 21 00 00 00 01 00 00 13 00 00 C0 3F 63 08 80 3C 00 00 00 00 00 35 C9 65 02 05 00 00 00 00 00 00 00 00 3C 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x502654103E8 (64 bytes) === hex64: 21 00 00 00 2A 00 00 00 2A 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 FF FF FF FF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x502704E25B8 (64 bytes) === hex64: 21 00 00 00 00 00 00 00 90 3F BE 6F 02 05 00 00 90 01 01 6E 02 05 00 00 E0 01 00 00 00 00 00 00 52 01 00 00 00 00 00 00 28 7E 54 41 FB 7F 00 00 ED 5E AD DE 05 00 00 00 00 00 00 00 02 02 00 02 [OK] Da gan vao PID 34188 (elevated) === READ 0x502837037B0 (64 bytes) === hex64: 21 00 00 00 00 00 00 00 64 22 00 00 DF 37 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 5C 02 12 F7 7F 00 00 92 6A 00 00 92 6A 00 00 D0 35 70 83 02 05 00 00 00 00 00 00 00 00 00 00 [OK] Da gan vao PID 34188 (elevated) === PTRDEEP target=0x502654103E8 maxOff=0x10000 maxDepth=8 === Gia tri hien tai = 33 So module: 131 [pass 1] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 2048 MB, 0 match [progress] 6144 MB, 0 match [progress] 7168 MB, 0 match [progress] 7168 MB, 0 match [progress] 7168 MB, 0 match [progress] 7168 MB, 0 match [progress] 7168 MB, 0 match [progress] 7168 MB, 0 match [progress] 7168 MB, 0 match [progress] 7168 MB, 0 match [progress] 7168 MB, 0 match [pass 1] xong: 481 match [depth 1] matches=481 [depth 1] frontier=481 [pass 2] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 2048 MB, 19 match [progress] 6144 MB, 19 match [progress] 7168 MB, 22 match [progress] 7168 MB, 22 match [progress] 7168 MB, 22 match [progress] 7168 MB, 22 match [progress] 7168 MB, 22 match [progress] 7168 MB, 22 match [progress] 7168 MB, 22 match [progress] 7168 MB, 22 match [progress] 7168 MB, 22 match [pass 2] xong: 93087 match [depth 2] matches=93087 [depth 2] frontier=50000 [pass 3] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 23 match [progress] 0 MB, 36 match [progress] 0 MB, 40 match [progress] 0 MB, 42 match [progress] 0 MB, 52 match [progress] 0 MB, 54 match [progress] 0 MB, 56 match [progress] 0 MB, 58 match [progress] 0 MB, 60 match [progress] 0 MB, 62 match [progress] 0 MB, 69 match [progress] 0 MB, 77 match [progress] 0 MB, 81 match [progress] 0 MB, 85 match [progress] 0 MB, 85 match [progress] 0 MB, 85 match [progress] 0 MB, 85 match [progress] 0 MB, 87 match [progress] 0 MB, 91 match [progress] 0 MB, 91 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 156 match [progress] 0 MB, 161 match [progress] 2048 MB, 1438 match [progress] 7168 MB, 1755 match [progress] 7168 MB, 1755 match [progress] 7168 MB, 1755 match [progress] 7168 MB, 1755 match [progress] 7168 MB, 1756 match [progress] 7168 MB, 1756 match [progress] 7168 MB, 1756 match [progress] 7168 MB, 1756 match [progress] 7168 MB, 1756 match [progress] 7168 MB, 1756 match [pass 3] xong: 1018811 match [depth 3] matches=1018811 [depth 3] frontier=50000 [pass 4] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 574 match [progress] 0 MB, 1156 match [progress] 0 MB, 1890 match [progress] 0 MB, 2442 match [progress] 0 MB, 2801 match [progress] 0 MB, 3407 match [progress] 0 MB, 3910 match [progress] 0 MB, 4446 match [progress] 0 MB, 4988 match [progress] 0 MB, 5458 match [progress] 0 MB, 5707 match [progress] 0 MB, 5955 match [progress] 0 MB, 6212 match [progress] 0 MB, 6460 match [progress] 0 MB, 6466 match [progress] 0 MB, 6472 match [progress] 0 MB, 6472 match [progress] 0 MB, 6518 match [progress] 0 MB, 6599 match [progress] 0 MB, 6608 match [progress] 0 MB, 6645 match [progress] 0 MB, 6671 match [progress] 0 MB, 6671 match [progress] 0 MB, 6684 match [progress] 0 MB, 6684 match [progress] 0 MB, 6684 match [progress] 0 MB, 6684 match [progress] 0 MB, 6685 match [progress] 0 MB, 6686 match [progress] 0 MB, 6687 match [progress] 0 MB, 6687 match [progress] 0 MB, 6688 match [progress] 0 MB, 6689 match [progress] 0 MB, 6689 match [progress] 0 MB, 6689 match [progress] 0 MB, 6689 match [progress] 0 MB, 6689 match [progress] 0 MB, 6689 match [progress] 0 MB, 6689 match [progress] 0 MB, 6689 match [progress] 0 MB, 6689 match [progress] 0 MB, 6689 match [progress] 0 MB, 6689 match [progress] 0 MB, 6695 match [progress] 0 MB, 6695 match [progress] 0 MB, 6702 match [progress] 0 MB, 6702 match [progress] 0 MB, 6702 match [progress] 0 MB, 6702 match [progress] 0 MB, 6702 match [progress] 0 MB, 6703 match [progress] 0 MB, 6703 match [progress] 0 MB, 6703 match [progress] 0 MB, 6703 match [progress] 0 MB, 6703 match [progress] 0 MB, 6703 match [progress] 0 MB, 6703 match [progress] 0 MB, 6703 match [progress] 0 MB, 6703 match [progress] 0 MB, 6703 match [progress] 0 MB, 8093 match [progress] 0 MB, 8365 match [progress] 4096 MB, 31672 match [pass 4] xong: 825015 match [depth 4] matches=825015 [depth 4] frontier=50000 [pass 5] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 686 match [progress] 0 MB, 1444 match [progress] 0 MB, 2324 match [progress] 0 MB, 3024 match [progress] 0 MB, 3459 match [progress] 0 MB, 4355 match [progress] 0 MB, 5162 match [progress] 0 MB, 5904 match [progress] 0 MB, 6589 match [progress] 0 MB, 7206 match [progress] 0 MB, 7656 match [progress] 0 MB, 8126 match [progress] 0 MB, 8592 match [progress] 0 MB, 9063 match [progress] 0 MB, 9143 match [progress] 0 MB, 9214 match [progress] 0 MB, 9219 match [progress] 0 MB, 9267 match [progress] 0 MB, 9356 match [progress] 0 MB, 10219 match [progress] 0 MB, 10261 match [progress] 0 MB, 10572 match [progress] 0 MB, 10627 match [progress] 0 MB, 10715 match [progress] 0 MB, 10761 match [progress] 0 MB, 10819 match [progress] 0 MB, 10862 match [progress] 0 MB, 10903 match [progress] 0 MB, 10966 match [progress] 0 MB, 11009 match [progress] 0 MB, 11108 match [progress] 0 MB, 11201 match [progress] 0 MB, 11258 match [progress] 0 MB, 11408 match [progress] 0 MB, 11629 match [progress] 0 MB, 11872 match [progress] 0 MB, 12058 match [progress] 0 MB, 12103 match [progress] 0 MB, 12188 match [progress] 0 MB, 12264 match [progress] 0 MB, 12310 match [progress] 0 MB, 12335 match [progress] 0 MB, 12358 match [progress] 0 MB, 12502 match [progress] 0 MB, 12530 match [progress] 0 MB, 12550 match [progress] 0 MB, 12572 match [progress] 0 MB, 12618 match [progress] 0 MB, 12651 match [progress] 0 MB, 12675 match [progress] 0 MB, 12682 match [progress] 0 MB, 12813 match [progress] 0 MB, 12819 match [progress] 0 MB, 12840 match [progress] 0 MB, 12856 match [progress] 0 MB, 12860 match [progress] 0 MB, 12891 match [progress] 0 MB, 12907 match [progress] 0 MB, 12908 match [progress] 0 MB, 12912 match [progress] 0 MB, 14332 match [progress] 0 MB, 14670 match [progress] 2048 MB, 341708 match [progress] 7168 MB, 1815511 match [progress] 7168 MB, 1816092 match [progress] 7168 MB, 1816342 match [progress] 7168 MB, 1816371 match [progress] 7168 MB, 1816580 match [pass 5] xong: 2233072 match [depth 5] matches=2233072 [depth 5] frontier=50000 [pass 6] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 533 match [progress] 0 MB, 1080 match [progress] 0 MB, 1756 match [progress] 0 MB, 2349 match [progress] 0 MB, 2733 match [progress] 0 MB, 3302 match [progress] 0 MB, 3902 match [progress] 0 MB, 4386 match [progress] 0 MB, 4858 match [progress] 0 MB, 5312 match [progress] 0 MB, 5497 match [progress] 0 MB, 5680 match [progress] 0 MB, 5871 match [progress] 0 MB, 6086 match [progress] 0 MB, 6162 match [progress] 0 MB, 6216 match [progress] 0 MB, 6261 match [progress] 0 MB, 6305 match [progress] 0 MB, 6417 match [progress] 0 MB, 7272 match [progress] 0 MB, 7300 match [progress] 0 MB, 7375 match [progress] 0 MB, 7473 match [progress] 0 MB, 7494 match [progress] 0 MB, 7531 match [progress] 0 MB, 7536 match [progress] 0 MB, 7554 match [progress] 0 MB, 7595 match [progress] 0 MB, 7619 match [progress] 0 MB, 7663 match [progress] 0 MB, 7687 match [progress] 0 MB, 7707 match [progress] 0 MB, 8409 match [progress] 0 MB, 9187 match [progress] 0 MB, 9928 match [progress] 0 MB, 10675 match [progress] 0 MB, 10697 match [progress] 0 MB, 10719 match [progress] 0 MB, 10741 match [progress] 0 MB, 10762 match [progress] 0 MB, 10795 match [progress] 0 MB, 10863 match [progress] 0 MB, 11064 match [progress] 0 MB, 11066 match [progress] 0 MB, 11092 match [progress] 0 MB, 11094 match [progress] 0 MB, 11107 match [progress] 0 MB, 11117 match [progress] 0 MB, 11126 match [progress] 0 MB, 11355 match [progress] 0 MB, 11367 match [progress] 0 MB, 11398 match [progress] 0 MB, 11426 match [progress] 0 MB, 11433 match [progress] 0 MB, 11524 match [progress] 0 MB, 11576 match [progress] 0 MB, 11579 match [progress] 0 MB, 12594 match [progress] 0 MB, 12839 match [progress] 2048 MB, 362839 match [progress] 7168 MB, 438908 match [progress] 7168 MB, 438908 match [progress] 7168 MB, 438909 match [progress] 7168 MB, 438909 match [progress] 7168 MB, 438909 match [pass 6] xong: 698846 match [depth 6] matches=698846 [depth 6] frontier=50000 [pass 7] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 166 match [progress] 0 MB, 588 match [progress] 0 MB, 1165 match [progress] 0 MB, 1629 match [progress] 0 MB, 1930 match [progress] 0 MB, 2486 match [progress] 0 MB, 2727 match [progress] 0 MB, 3148 match [progress] 0 MB, 3609 match [progress] 0 MB, 4022 match [progress] 0 MB, 4189 match [progress] 0 MB, 4338 match [progress] 0 MB, 4495 match [progress] 0 MB, 4646 match [progress] 0 MB, 4705 match [progress] 0 MB, 4709 match [progress] 0 MB, 4752 match [progress] 0 MB, 4803 match [progress] 0 MB, 4916 match [progress] 0 MB, 5765 match [progress] 0 MB, 5765 match [progress] 0 MB, 5834 match [progress] 0 MB, 5928 match [progress] 0 MB, 5949 match [progress] 0 MB, 5978 match [progress] 0 MB, 5982 match [progress] 0 MB, 5997 match [progress] 0 MB, 6030 match [progress] 0 MB, 6050 match [progress] 0 MB, 6091 match [progress] 0 MB, 6112 match [progress] 0 MB, 6132 match [progress] 0 MB, 6831 match [progress] 0 MB, 7608 match [progress] 0 MB, 8348 match [progress] 0 MB, 9094 match [progress] 0 MB, 9113 match [progress] 0 MB, 9132 match [progress] 0 MB, 9151 match [progress] 0 MB, 9170 match [progress] 0 MB, 9203 match [progress] 0 MB, 9266 match [progress] 0 MB, 9467 match [progress] 0 MB, 9469 match [progress] 0 MB, 9500 match [progress] 0 MB, 9502 match [progress] 0 MB, 9513 match [progress] 0 MB, 9522 match [progress] 0 MB, 9529 match [progress] 0 MB, 9756 match [progress] 0 MB, 9768 match [progress] 0 MB, 9798 match [progress] 0 MB, 9825 match [progress] 0 MB, 9832 match [progress] 0 MB, 9923 match [progress] 0 MB, 9973 match [progress] 0 MB, 9976 match [progress] 0 MB, 11034 match [progress] 0 MB, 11238 match [progress] 2048 MB, 81725 match [progress] 7168 MB, 146821 match [progress] 7168 MB, 146821 match [progress] 7168 MB, 146822 match [progress] 7168 MB, 146822 match [progress] 7168 MB, 146822 match [pass 7] xong: 312066 match [depth 7] matches=312066 [depth 7] frontier=50000 [pass 8] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 173 match [progress] 0 MB, 326 match [progress] 0 MB, 641 match [progress] 0 MB, 816 match [progress] 0 MB, 854 match [progress] 0 MB, 1091 match [progress] 0 MB, 1326 match [progress] 0 MB, 1528 match [progress] 0 MB, 1764 match [progress] 0 MB, 1960 match [progress] 0 MB, 2454 match [progress] 0 MB, 2773 match [progress] 0 MB, 3074 match [progress] 0 MB, 3359 match [progress] 0 MB, 3362 match [progress] 0 MB, 3372 match [progress] 0 MB, 3388 match [progress] 0 MB, 3448 match [progress] 0 MB, 3558 match [progress] 0 MB, 4412 match [progress] 0 MB, 4429 match [progress] 0 MB, 4570 match [progress] 0 MB, 4588 match [progress] 0 MB, 4636 match [progress] 0 MB, 4673 match [progress] 0 MB, 4724 match [progress] 0 MB, 4759 match [progress] 0 MB, 4811 match [progress] 0 MB, 4845 match [progress] 0 MB, 4959 match [progress] 0 MB, 5038 match [progress] 0 MB, 5077 match [progress] 0 MB, 5212 match [progress] 0 MB, 5417 match [progress] 0 MB, 5649 match [progress] 0 MB, 5795 match [progress] 0 MB, 5819 match [progress] 0 MB, 5868 match [progress] 0 MB, 5909 match [progress] 0 MB, 5945 match [progress] 0 MB, 5979 match [progress] 0 MB, 5987 match [progress] 0 MB, 5990 match [progress] 0 MB, 6022 match [progress] 0 MB, 6045 match [progress] 0 MB, 6061 match [progress] 0 MB, 6084 match [progress] 0 MB, 6091 match [progress] 0 MB, 6096 match [progress] 0 MB, 6164 match [progress] 0 MB, 6168 match [progress] 0 MB, 6183 match [progress] 0 MB, 6192 match [progress] 0 MB, 6194 match [progress] 0 MB, 6216 match [progress] 0 MB, 6237 match [progress] 0 MB, 6237 match [progress] 0 MB, 7612 match [progress] 0 MB, 7687 match [progress] 2048 MB, 997333 match [progress] 7168 MB, 2019286 match [progress] 7168 MB, 2019591 match [progress] 7168 MB, 2019718 match [progress] 7168 MB, 2019743 match [progress] 7168 MB, 2020016 match [pass 8] xong: 2222534 match [depth 8] matches=2222534 [depth 8] frontier=50000 [PTRDEEP DONE] Het 8 tang - chua gap static root. Co the can tang kMaxDepth/kMaxOff. [OK] Da gan vao PID 34188 (elevated) === READ 0x7FF71312CA20 (8 bytes) === hex64: 10 3C F6 F0 01 05 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x7FF71312CA28 (8 bytes) === hex64: 50 41 F6 F0 01 05 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x7FF71312CA30 (8 bytes) === hex64: 50 41 F6 F0 01 05 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x7FF71312FEF8 (8 bytes) === hex64: 00 17 F4 F0 01 05 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x7FF713133280 (8 bytes) === hex64: 10 1E F6 F0 01 05 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x7FF713133288 (8 bytes) === hex64: 50 23 F6 F0 01 05 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x7FF713133290 (8 bytes) === hex64: 50 23 F6 F0 01 05 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x7FF713275740 (8 bytes) === hex64: 00 42 F6 F0 01 05 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x7FF71312CA20 (8 bytes) === hex64: 10 3C F6 F0 01 05 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x7FF71312CA28 (8 bytes) === hex64: 50 41 F6 F0 01 05 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x7FF71312CA30 (8 bytes) === hex64: 50 41 F6 F0 01 05 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x7FF71312FEF8 (8 bytes) === hex64: 00 17 F4 F0 01 05 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x7FF713133280 (8 bytes) === hex64: 10 1E F6 F0 01 05 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x7FF713133288 (8 bytes) === hex64: 50 23 F6 F0 01 05 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x7FF713133290 (8 bytes) === hex64: 50 23 F6 F0 01 05 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x7FF713275740 (8 bytes) === hex64: 00 42 F6 F0 01 05 00 00 [OK] Da gan vao PID 34188 (elevated) === FINDPLAYER maxHP=42 (full scan) === [OK] 3051 stat block (luu player_candidates.txt) 0x2A93ECFCB00 (HP=0) 0x2A93ED14D60 (HP=0) 0x2A93EE906B0 (HP=0) 0x2A93EEDBDE4 (HP=0) 0x2A93EF02918 (HP=0) 0x2A93EF7DD90 (HP=0) 0x2A93F1C5208 (HP=0) 0x2A93F250058 (HP=0) 0x2A93F3DA040 (HP=0) 0x2A93F418280 (HP=0) 0x2A93F4C3290 (HP=0) 0x2A93F52EDAC (HP=0) 0x2A93F54B840 (HP=0) 0x2A93F76E800 (HP=0) 0x2A93F7C3970 (HP=0) 0x2A93F880D20 (HP=0) 0x2A93F8BCA20 (HP=0) 0x2A93F9138C0 (HP=0) 0x2A93F991D00 (HP=0) 0x2A93FBCD4FC (HP=0) 0x2A9506D2FB0 (HP=0) 0x2A95081CC8C (HP=0) 0x2A95084F3D4 (HP=0) 0x2A95084FCE4 (HP=0) 0x2A950A835F0 (HP=0) 0x2A950CAA568 (HP=0) 0x2A950F734E0 (HP=0) 0x2A9514EAEA0 (HP=0) 0x2A9514F4030 (HP=0) 0x2A95155FF88 (HP=0) Huong dan: mat mau roi chay: findplayer 42 --rescan [FINDPLAYER DONE] [OK] Da gan vao PID 34188 (elevated) === FINDPLAYER rescan HP=26 === [OK] 1 stat block (luu player_candidates.txt) 0x502654103E8 (HP=26) Huong dan: mat mau roi chay: findplayer 42 --rescan [FINDPLAYER DONE] [OK] Da gan vao PID 34188 (elevated) === READ 0x502654103E8 (16 bytes) === hex64: 1A 00 00 00 2A 00 00 00 2A 00 00 00 00 00 00 00 [OK] Da gan vao PID 34188 (elevated) === BRIDGE SEARCH target=0x502654103E8 === Target xac nhan: HP=26 / 42 PathOfExile.exe: base=0x7FF70EB60000 size=0x4C9D000 [Root] RVA 0x45CCA20 -> *(0x7FF71312CA20) = 0x501F0F63C10 [Root] RVA 0x45CCA28 -> *(0x7FF71312CA28) = 0x501F0F64150 [Root] RVA 0x45CCA30 -> *(0x7FF71312CA30) = 0x501F0F64150 [Root] RVA 0x45CFEF8 -> *(0x7FF71312FEF8) = 0x501F0F41700 [Root] RVA 0x45D3280 -> *(0x7FF713133280) = 0x501F0F61E10 [Root] RVA 0x45D3288 -> *(0x7FF713133288) = 0x501F0F62350 [Root] RVA 0x45D3290 -> *(0x7FF713133290) = 0x501F0F62350 [Root] RVA 0x4715740 -> *(0x7FF713275740) = 0x501F0F64200 So static root doc duoc: 8 [pass B1] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 1024 MB, 0 match [pass B1] xong: 114 match [pass B2] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 1024 MB, 0 match [pass B2] xong: 1199 match [STATIC CHAIN FOUND] [[[0x7FF712F94CE0]+0x48]+0x1AD] -> HP Da ghi chuoi offset vao: C:\Projects\AutoPOE2\bin\Release\offsets.toml [OK] Da gan vao PID 34188 (elevated) === READ 0x7FF712F94CE0 (16 bytes) === hex64: 10 00 D7 93 02 05 00 00 08 BB DB 93 02 05 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x50293D70058 (16 bytes) === hex64: 3B 02 41 65 02 05 00 00 F0 B6 2D 43 02 05 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x502654103E8 (16 bytes) === hex64: 1A 00 00 00 2A 00 00 00 2A 00 00 00 00 00 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x502654103E8 (16 bytes) === hex64: 1A 00 00 00 2A 00 00 00 2A 00 00 00 00 00 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x502654102E8 (512 bytes) === hex64: 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 70 64 1B 50 02 05 00 00 30 15 39 EC 01 05 00 00 30 1C 39 EC 01 05 00 00 B0 75 1B 50 02 05 00 00 30 69 39 EC 01 05 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x502654103E8 (512 bytes) === 0502654103E8 1A 00 00 00 2A 00 00 00 2A 00 00 00 00 00 00 00 |....*...*.......| 0502654103F8 00 00 00 00 01 00 00 00 00 00 00 00 FF FF FF FF |................| 050265410408 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410418 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410428 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410438 00 00 00 00 00 00 00 00 10 00 41 65 02 05 00 00 |..........Ae....| 050265410448 00 00 00 00 00 00 00 00 20 7B AF 11 F7 7F 00 00 |........ {......| 050265410458 50 04 41 65 02 05 00 00 78 04 41 65 02 05 00 00 |P.Ae....x.Ae....| 050265410468 80 04 41 65 02 05 00 00 98 04 41 65 02 05 00 00 |..Ae......Ae....| 050265410478 30 CC 05 8C 02 05 00 00 00 00 00 00 00 00 00 00 |0...............| 050265410488 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410498 B0 04 41 65 02 05 00 00 B8 04 41 65 02 05 00 00 |..Ae......Ae....| 0502654104A8 D0 04 41 65 02 05 00 00 30 CC 05 8C 02 05 00 00 |..Ae....0.......| 0502654104B8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 0502654104C8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 0502654104D8 08 04 00 00 00 00 00 00 00 0A D3 42 02 05 00 00 |...........B....| 0502654104E8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 0502654104F8 00 00 00 00 00 00 00 00 07 00 00 00 00 00 00 00 |................| 050265410508 10 04 3F 43 02 05 00 00 00 00 00 00 00 00 00 00 |..?C............| 050265410518 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410528 07 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410538 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410548 66 66 66 3F 00 00 00 00 00 00 2C 42 00 00 8A C2 |fff?......,B....| 050265410558 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410568 00 00 80 3F 00 00 00 00 00 00 00 00 00 00 00 00 |...?............| 050265410578 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410588 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410598 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 0502654105A8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 0502654105B8 F1 2E 50 00 FF FF FF FF 00 00 02 05 00 60 FF FF |..P..........`..| 0502654105C8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 0502654105D8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| [OK] Da gan vao PID 34188 (elevated) === READ 0x502654103E8 (512 bytes) === 0502654103E8 1A 00 00 00 2A 00 00 00 2A 00 00 00 00 00 00 00 |....*...*.......| 0502654103F8 00 00 00 00 01 00 00 00 00 00 00 00 FF FF FF FF |................| 050265410408 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410418 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410428 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410438 00 00 00 00 00 00 00 00 10 00 41 65 02 05 00 00 |..........Ae....| 050265410448 00 00 00 00 00 00 00 00 20 7B AF 11 F7 7F 00 00 |........ {......| 050265410458 50 04 41 65 02 05 00 00 78 04 41 65 02 05 00 00 |P.Ae....x.Ae....| 050265410468 80 04 41 65 02 05 00 00 98 04 41 65 02 05 00 00 |..Ae......Ae....| 050265410478 30 CC 05 8C 02 05 00 00 00 00 00 00 00 00 00 00 |0...............| 050265410488 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410498 B0 04 41 65 02 05 00 00 B8 04 41 65 02 05 00 00 |..Ae......Ae....| 0502654104A8 D0 04 41 65 02 05 00 00 30 CC 05 8C 02 05 00 00 |..Ae....0.......| 0502654104B8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 0502654104C8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 0502654104D8 08 04 00 00 00 00 00 00 00 0A D3 42 02 05 00 00 |...........B....| 0502654104E8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 0502654104F8 00 00 00 00 00 00 00 00 07 00 00 00 00 00 00 00 |................| 050265410508 10 04 3F 43 02 05 00 00 00 00 00 00 00 00 00 00 |..?C............| 050265410518 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410528 07 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410538 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410548 66 66 66 3F 00 00 00 00 00 00 2C 42 00 00 8A C2 |fff?......,B....| 050265410558 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410568 00 00 80 3F 00 00 00 00 00 00 00 00 00 00 00 00 |...?............| 050265410578 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410588 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410598 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 0502654105A8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 0502654105B8 F1 2E 50 00 FF FF FF FF 00 00 02 05 00 60 FF FF |..P..........`..| 0502654105C8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 0502654105D8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| [OK] Da gan vao PID 34188 (elevated) === READ 0x502654103E8 (16 bytes) === 0502654103E8 12 00 00 00 2A 00 00 00 2A 00 00 00 00 00 00 00 |....*...*.......| [OK] Da gan vao PID 34188 (elevated) [USAGE] memprobe.exe [OK] Da gan vao PID 34188 (elevated) === SCAN-FLOAT INIT ref=0x502654103E8 === Allocation: base=0x5022E000000 span=0x11010000 [OK] 6596047 float ung vien (luu float_candidates.txt) [SCAN-FLOAT DONE] [OK] Da gan vao PID 34188 (elevated) === SCAN-FLOAT MOVED delta=1.000000 === [OK] con 8775 ung vien 0x5022FBE8A70 = -1.192 0x5022FC308B4 = 0.000 0x5022FC309A8 = 0.000 0x5022FC30ABC = 0.000 0x5022FC30AC8 = 0.000 0x5022FC32148 = 0.000 0x5022FC32210 = 0.000 0x5022FC32270 = -1.192 0x5022FC3238C = 0.000 0x5022FC32390 = 0.000 0x5022FC326E8 = 0.000 0x5022FC326F4 = 0.000 0x502326FBDF0 = 71538094813711494545408.000 0x502328EBD04 = 0.000 0x502328EBD1C = 0.000 0x50232C8D424 = 72070807599234641035264.000 0x50232C8D438 = 17699277253142158817656595021824.000 0x50232C8D498 = 0.000 0x50232C8D534 = 0.000 0x50232C8D548 = 0.000 [SCAN-FLOAT DONE] [OK] Da gan vao PID 34188 (elevated) === SCAN-FLOAT MOVED delta=1.000000 === [OK] con 0 ung vien [SCAN-FLOAT DONE] [OK] Da gan vao PID 34188 (elevated) === READ 0x502654103E8 (16 bytes) === 0502654103E8 23 00 00 00 2A 00 00 00 2A 00 00 00 00 00 00 00 |#...*...*.......| [OK] Da gan vao PID 34188 (elevated) === SCAN-FLOAT INIT2 window=0x502634103E8 size=0x4000000 === [OK] 162662 float ung vien (luu float_candidates.txt) [SCAN-FLOAT DONE] [OK] Da gan vao PID 34188 (elevated) === SCAN-FLOAT MOVED delta=1.000000 === [OK] con 2456 ung vien 0x50264004F70 = -0.000 0x50264007728 = -0.000 0x50264009E90 = -0.000 0x50264444184 = -0.000 0x50264444220 = -3.508 0x50264444270 = 188324046327927703577378684928.000 0x502644442B8 = 2.016 0x502644442E8 = 0.000 0x50264444330 = 0.000 0x502644443D4 = -50801729696646037504.000 0x50264444424 = -0.000 0x50264444444 = 0.000 0x50264444478 = 1542508710897647616.000 0x502644444D0 = 0.000 0x502644444E4 = 0.000 0x50264444548 = 0.000 0x502644445C4 = -223424.500 0x50264444630 = -1313366487938999209668452963844096.000 0x502644446C0 = 0.000 0x50264444720 = 0.000 [SCAN-FLOAT DONE] [OK] Da gan vao PID 34188 (elevated) === SCAN-FLOAT STILL delta=0.050000 === [OK] con 2454 ung vien 0x50264004F70 = -0.000 0x50264007728 = -0.000 0x50264009E90 = -0.000 0x50264444184 = -0.000 0x50264444220 = -3.508 0x50264444270 = 188324046327927703577378684928.000 0x502644442B8 = 2.016 0x502644442E8 = 0.000 0x50264444330 = 0.000 0x502644443D4 = -50801729696646037504.000 0x50264444424 = -0.000 0x50264444444 = 0.000 0x50264444478 = 1542508710897647616.000 0x502644444D0 = 0.000 0x502644444E4 = 0.000 0x50264444548 = 0.000 0x502644445C4 = -223424.500 0x50264444630 = -1313366487938999209668452963844096.000 0x502644446C0 = 0.000 0x50264444720 = 0.000 [SCAN-FLOAT DONE] [OK] Da gan vao PID 34188 (elevated) === READALL (C:\Projects\AutoPOE2\bin\Release\xyz_addrs.txt) === 0x502657E0398 = 29 0x502657E039C = 3 0x502657E03A0 = 3 0x50265E44E68 = 0 0x50265E44E6C = 43008 0x50265E44E70 = 1279393792 0x50265E44EA8 = 4477519 0x50265E44EAC = 1330926913 0x50265E44EB0 = 1330266463 0x50265E457B0 = 1389400401 0x50265E457B4 = 3507556690 0x50265E457B8 = 2234541446 0x50265E4CE40 = 3435725356 0x50265E4CE44 = 75313204 0x50265E4CE48 = 3876644876 0x50265E4D6F0 = 738892934 0x50265E4D6F4 = 166405273 0x50265E4D6F8 = 39986304 0x50265E50E40 = 295969488 0x50265E50E44 = 32759 0x50265E50E48 = 0 0x50265E516F0 = 0 0x50265E516F4 = 0 0x50265E516F8 = 0 0x50265E5C3C8 = 4067848448 0x50265E5C3CC = 85 0x50265E5C3D0 = 0 0x50265E5C578 = 65536 0x50265E5C57C = 16384 0x50265E5C580 = 1599025664 0x50265E5C57C = 16384 0x50265E5C580 = 1599025664 0x50265E5C584 = 132 0x50265E5C580 = 1599025664 0x50265E5C584 = 132 0x50265E5C588 = 0 0x50265F4AB2C = 0 0x50265F4AB30 = 0 0x50265F4AB34 = 0 0x50265F4AFEC = 0 0x50265F4AFF0 = 0 0x50265F4AFF4 = 2962303554 0x50265F4DC34 = 0 0x50265F4DC38 = 0 0x50265F4DC3C = 0 0x50265F4DFFC = 1282 0x50265F4E000 = 1710546968 0x50265F4E004 = 1282 0x50265F4FBFC = 0 0x50265F4FC00 = 0 0x50265F4FC04 = 4 0x50265F5024C = 0 0x50265F50250 = 0 0x50265F50254 = 0 [READALL DONE] [OK] Da gan vao PID 34188 (elevated) === READALL (C:\Projects\AutoPOE2\bin\Release\xyz_addrs.txt) === 0x502657E0398 = 98 0x502657E039C = 8 0x502657E03A0 = 8 0x50265E44E68 = 1701669217 0x50265E44E6C = 1851859044 0x50265E44E70 = 1937055844 0x50265E44EA8 = 1701079382 0x50265E44EAC = 574235247 0x50265E44EB0 = 1898064930 0x50265E457B0 = 1970234724 0x50265E457B4 = 1666396020 0x50265E457B8 = 1701668200 0x50265E4CE40 = 0 0x50265E4CE44 = 0 0x50265E4CE48 = 0 0x50265E4D6F0 = 3674341376 0x50265E4D6F4 = 1281 0x50265E4D6F8 = 0 0x50265E50E40 = 0 0x50265E50E44 = 0 0x50265E50E48 = 0 0x50265E516F0 = 3675717632 0x50265E516F4 = 1281 0x50265E516F8 = 0 0x50265E5C3C8 = 0 0x50265E5C3CC = 0 0x50265E5C3D0 = 2644836352 0x50265E5C578 = 0 0x50265E5C57C = 0 0x50265E5C580 = 2634874880 0x50265E5C57C = 0 0x50265E5C580 = 2634874880 0x50265E5C584 = 1282 0x50265E5C580 = 2634874880 0x50265E5C584 = 1282 0x50265E5C588 = 0 0x50265F4AB2C = 0 0x50265F4AB30 = 0 0x50265F4AB34 = 0 0x50265F4AFEC = 0 0x50265F4AFF0 = 14336 0x50265F4AFF4 = 0 0x50265F4DC34 = 0 0x50265F4DC38 = 0 0x50265F4DC3C = 0 0x50265F4DFFC = 0 0x50265F4E000 = 0 0x50265F4E004 = 0 0x50265F4FBFC = 0 0x50265F4FC00 = 0 0x50265F4FC04 = 0 0x50265F5024C = 0 0x50265F50250 = 0 0x50265F50254 = 0 [READALL DONE] [OK] Da gan vao PID 34188 (elevated) === READ 0x502657E0398 (12 bytes) === 0502657E0398 48 00 00 00 20 00 00 00 20 00 00 00 |H... ... ...| [OK] Da gan vao PID 34188 (elevated) === AOB SCAN (PID 34188) === Module: base=0x7FF70EB60000 size=0x4C9D000 [MISS] InGameStateBase (pattern khong khop ban build nay) [MISS] VolumetricFog (pattern khong khop ban build nay) [MISS] EntityListRoot (pattern khong khop ban build nay) [MISS] AreaExploration (pattern khong khop ban build nay) [OK] Da gan vao PID 34188 (elevated) === READ 0x502654103E8 (128 bytes) === 0502654103E8 E3 00 00 00 E3 00 00 00 E3 00 00 00 34 00 00 00 |............4...| 0502654103F8 34 00 00 00 01 00 00 00 00 00 00 00 FF FF FF FF |4...............| 050265410408 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410418 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410428 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410438 00 00 00 00 00 00 00 00 10 00 41 65 02 05 00 00 |..........Ae....| 050265410448 00 00 00 00 00 00 00 00 20 7B AF 11 F7 7F 00 00 |........ {......| 050265410458 50 04 41 65 02 05 00 00 78 04 41 65 02 05 00 00 |P.Ae....x.Ae....| [OK] Da gan vao PID 34188 (elevated) === READ 0x50265410368 (128 bytes) === 050265410368 30 23 39 EC 01 05 00 00 30 2A 39 EC 01 05 00 00 |0#9.....0*9.....| 050265410378 F0 6F 1B 50 02 05 00 00 30 4D 39 EC 01 05 00 00 |.o.P....0M9.....| 050265410388 30 54 39 EC 01 05 00 00 D0 72 1B 50 02 05 00 00 |0T9......r.P....| 050265410398 30 5B 39 EC 01 05 00 00 30 62 39 EC 01 05 00 00 |0[9.....0b9.....| 0502654103A8 90 78 1B 50 02 05 00 00 30 77 39 EC 01 05 00 00 |.x.P....0w9.....| 0502654103B8 30 7E 39 EC 01 05 00 00 70 7B 1B 50 02 05 00 00 |0~9.....p{.P....| 0502654103C8 30 85 39 EC 01 05 00 00 30 8C 39 EC 01 05 00 00 |0.9.....0.9.....| 0502654103D8 00 00 00 00 00 00 00 00 E3 00 00 00 00 00 00 00 |................| [OK] Da gan vao PID 34188 (elevated) === READ 0x50265411000 (128 bytes) === 050265411000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265411010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265411020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265411030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265411040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265411050 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265411060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265411070 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| [OK] Da gan vao PID 34188 (elevated) === BRIDGE SEARCH target=0x502654103E8 === Target xac nhan: HP=227 / 227 PathOfExile.exe: base=0x7FF70EB60000 size=0x4C9D000 [Root] RVA 0x45CCA20 -> *(0x7FF71312CA20) = 0x501F0F63C10 [Root] RVA 0x45CCA28 -> *(0x7FF71312CA28) = 0x501F0F64150 [Root] RVA 0x45CCA30 -> *(0x7FF71312CA30) = 0x501F0F64150 [Root] RVA 0x45CFEF8 -> *(0x7FF71312FEF8) = 0x501F0F41700 [Root] RVA 0x45D3280 -> *(0x7FF713133280) = 0x501F0F61E10 [Root] RVA 0x45D3288 -> *(0x7FF713133288) = 0x501F0F62350 [Root] RVA 0x45D3290 -> *(0x7FF713133290) = 0x501F0F62350 [Root] RVA 0x4715740 -> *(0x7FF713275740) = 0x501F0F64200 So static root doc duoc: 8 [pass B1] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 2048 MB, 0 match [OK] Da gan vao PID 34188 (elevated) === READ 0x501F0F63C10 (128 bytes) === 0501F0F63C10 40 13 F9 F0 01 05 00 00 00 00 00 00 00 00 00 00 |@...............| 0501F0F63C20 0A 00 00 00 00 00 00 00 0F 00 00 00 00 00 00 00 |................| 0501F0F63C30 46 00 6F 00 6E 00 74 00 69 00 6E 00 00 00 00 00 |F.o.n.t.i.n.....| 0501F0F63C40 06 00 00 00 00 00 00 00 07 00 00 00 00 00 00 00 |................| 0501F0F63C50 40 4E 7F 52 02 05 00 00 00 00 00 00 00 00 00 00 |@N.R............| 0501F0F63C60 1F 00 00 00 00 00 00 00 1F 00 00 00 00 00 00 00 |................| 0501F0F63C70 00 C3 00 F2 01 00 00 00 00 00 00 00 7B 01 DB 27 |............{..'| 0501F0F63C80 60 12 F9 F0 01 05 00 00 00 00 00 00 00 00 00 00 |`...............| [OK] Da gan vao PID 34188 (elevated) === READ 0x501F0F41700 (128 bytes) === 0501F0F41700 98 14 AD 11 F7 7F 00 00 58 17 AD 11 F7 7F 00 00 |........X.......| 0501F0F41710 00 00 00 00 00 00 00 00 20 17 F4 F0 01 05 00 00 |........ .......| 0501F0F41720 D8 17 AD 11 F7 7F 00 00 10 E0 3B 65 02 05 00 00 |..........;e....| 0501F0F41730 60 FC B4 0F F7 7F 00 00 00 00 00 00 00 00 00 00 |`...............| 0501F0F41740 00 00 00 00 00 00 00 00 D8 01 2D 52 02 05 00 00 |..........-R....| 0501F0F41750 44 00 00 00 00 00 00 00 38 01 2D 52 02 05 00 00 |D.......8.-R....| 0501F0F41760 4C 00 00 00 00 00 00 00 00 00 00 00 68 02 00 00 |L...........h...| 0501F0F41770 38 04 00 00 60 02 00 00 00 00 00 00 00 00 00 00 |8...`...........| [OK] Da gan vao PID 34188 (elevated) === READ 0x501F0F61E10 (128 bytes) === 0501F0F61E10 20 DE D1 F0 01 05 00 00 00 00 00 00 00 00 00 00 | ...............| 0501F0F61E20 0A 00 00 00 00 00 00 00 0F 00 00 00 00 00 00 00 |................| 0501F0F61E30 46 00 6F 00 6E 00 74 00 69 00 6E 00 00 00 00 00 |F.o.n.t.i.n.....| 0501F0F61E40 06 00 00 00 00 00 00 00 07 00 00 00 00 00 00 00 |................| 0501F0F61E50 00 B6 D3 F0 01 05 00 00 00 00 00 00 00 00 00 00 |................| 0501F0F61E60 1F 00 00 00 00 00 00 00 1F 00 00 00 00 00 00 00 |................| 0501F0F61E70 00 C3 00 F2 01 00 00 00 00 00 00 00 81 62 7B A1 |.............b{.| 0501F0F61E80 40 DE D1 F0 01 05 00 00 00 00 00 00 00 00 00 00 |@...............| [OK] Da gan vao PID 34188 (elevated) === READ 0x501F0F64200 (128 bytes) === 0501F0F64200 08 F3 0E 12 F7 7F 00 00 E8 D0 0E 12 F7 7F 00 00 |................| 0501F0F64210 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 0501F0F64220 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 0501F0F64230 00 00 00 00 00 00 00 00 10 00 2C 55 02 05 00 00 |..........,U....| 0501F0F64240 10 00 20 52 02 05 00 00 CD 14 EE 07 63 95 26 E8 |.. R........c.&.| 0501F0F64250 50 1C AD 11 F7 7F 00 00 10 D1 0E 12 F7 7F 00 00 |P...............| 0501F0F64260 00 00 00 00 8E 33 95 82 00 00 00 00 00 00 00 00 |.....3..........| 0501F0F64270 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| [OK] Da gan vao PID 34188 (elevated) === READ 0x502654103E8 (256 bytes) === 0502654103E8 E3 00 00 00 E3 00 00 00 E3 00 00 00 34 00 00 00 |............4...| 0502654103F8 34 00 00 00 01 00 00 00 00 00 00 00 FF FF FF FF |4...............| 050265410408 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410418 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410428 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410438 00 00 00 00 00 00 00 00 10 00 41 65 02 05 00 00 |..........Ae....| 050265410448 00 00 00 00 00 00 00 00 20 7B AF 11 F7 7F 00 00 |........ {......| 050265410458 50 04 41 65 02 05 00 00 78 04 41 65 02 05 00 00 |P.Ae....x.Ae....| 050265410468 80 04 41 65 02 05 00 00 98 04 41 65 02 05 00 00 |..Ae......Ae....| 050265410478 30 CC 05 8C 02 05 00 00 00 00 00 00 00 00 00 00 |0...............| 050265410488 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410498 B0 04 41 65 02 05 00 00 B8 04 41 65 02 05 00 00 |..Ae......Ae....| 0502654104A8 D0 04 41 65 02 05 00 00 30 CC 05 8C 02 05 00 00 |..Ae....0.......| 0502654104B8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 0502654104C8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 0502654104D8 08 04 00 00 00 00 00 00 00 0A D3 42 02 05 00 00 |...........B....| [OK] Da gan vao PID 34188 (elevated) === SCAN-HP value=189 (full scan) === [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 1 ung vien [progress] 0 MB, 1 ung vien [progress] 0 MB, 1 ung vien [progress] 0 MB, 2 ung vien [progress] 0 MB, 3 ung vien [progress] 0 MB, 3 ung vien [progress] 0 MB, 3 ung vien [progress] 0 MB, 3 ung vien [progress] 0 MB, 3 ung vien [progress] 0 MB, 3 ung vien [progress] 0 MB, 4 ung vien [progress] 0 MB, 4 ung vien [progress] 0 MB, 5 ung vien [progress] 0 MB, 5 ung vien [progress] 0 MB, 5 ung vien [progress] 0 MB, 5 ung vien [progress] 0 MB, 5 ung vien [progress] 0 MB, 5 ung vien [progress] 0 MB, 5 ung vien [progress] 0 MB, 5 ung vien [progress] 0 MB, 5 ung vien [progress] 0 MB, 5 ung vien [progress] 0 MB, 5 ung vien [progress] 0 MB, 5 ung vien [progress] 0 MB, 5 ung vien [progress] 0 MB, 5 ung vien [progress] 0 MB, 5 ung vien [progress] 0 MB, 5 ung vien [progress] 0 MB, 5 ung vien [progress] 0 MB, 5 ung vien [progress] 0 MB, 5 ung vien [progress] 0 MB, 5 ung vien [progress] 0 MB, 5 ung vien [progress] 0 MB, 5 ung vien [progress] 0 MB, 6 ung vien [progress] 0 MB, 6 ung vien [progress] 0 MB, 6 ung vien [progress] 0 MB, 6 ung vien [progress] 0 MB, 6 ung vien [progress] 0 MB, 6 ung vien [progress] 0 MB, 6 ung vien [progress] 0 MB, 6 ung vien [progress] 0 MB, 6 ung vien [progress] 0 MB, 6 ung vien [progress] 0 MB, 6 ung vien [progress] 0 MB, 6 ung vien [progress] 0 MB, 6 ung vien [progress] 0 MB, 6 ung vien [progress] 0 MB, 6 ung vien [progress] 0 MB, 6 ung vien [progress] 0 MB, 6 ung vien [progress] 0 MB, 6 ung vien [progress] 0 MB, 6 ung vien [progress] 0 MB, 6 ung vien [progress] 0 MB, 6 ung vien [progress] 0 MB, 6 ung vien [progress] 0 MB, 6 ung vien [progress] 0 MB, 6 ung vien [progress] 0 MB, 6 ung vien [OK] Da gan vao PID 34188 (elevated) === READALL (C:\Projects\AutoPOE2\bin\Release\player_candidates.txt) === 0x502654103E8 = 271 [READALL DONE] [OK] Da gan vao PID 34188 (elevated) === READALL (C:\Projects\AutoPOE2\bin\Release\hp_candidates.txt) === 0x2A95EEAD054 = 509845504 0x2DC9907FF98 = 0x502433F50FC = 271 0x502654103E8 = 271 0x502704E25B8 = 0 0x502837037B0 = 100 [READALL DONE] [OK] Da gan vao PID 34188 (elevated) === ENTSCAN statAddr=0x502654103E8 === Stat block CON SONG, gia tri = 271 [pass A] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 3072 MB, 0 match [progress] 3072 MB, 0 match [progress] 5120 MB, 0 match [progress] 5120 MB, 0 match [progress] 5120 MB, 0 match [progress] 5120 MB, 0 match [progress] 5120 MB, 0 match [progress] 5120 MB, 0 match [progress] 5120 MB, 0 match [progress] 5120 MB, 0 match [progress] 5120 MB, 0 match [pass A] xong: 1136 match Pass A: 1136 o nho chua con tro tro vao player entity object Array@0x5028C920058 statOff=0x1AD: 9/72 HP hop le Array@0x50265410088 statOff=0x338: 1/57 HP hop le Array@0x50265410080 statOff=0x350: 2/57 HP hop le Array@0x50265410078 statOff=0x358: 3/57 HP hop le Array@0x50265410050 statOff=0x370: 13/52 HP hop le Array@0x50265410048 statOff=0x388: 2/51 HP hop le Array@0x50265410040 statOff=0x390: 11/51 HP hop le Array@0x50265410038 statOff=0x3B8: 22/50 HP hop le Array@0x50265421060 statOff=0x3D8: 5/44 HP hop le Array@0x502640079B0 statOff=0x3E8: 14/75 HP hop le Array@0x5026540F738 statOff=0xC28: 1/21 HP hop le Array@0x5026540F730 statOff=0xC80: 1/21 HP hop le Array@0x5026540F728 statOff=0xCA8: 1/21 HP hop le Array@0x5026540F6D8 statOff=0xCC8: 1/21 HP hop le Array@0x5026540F6D0 statOff=0xCF4: 1/21 HP hop le Array@0x5026540F6C8 statOff=0xD08: 2/21 HP hop le >>> ENTITY ARRAY TIM THAY! <<< Array slot (player entry) = 0x50265410038 statOff (HP offset trong entity) = 0x3B8 So entry doc duoc: 50 | HP hop le: 22 [0] ent=0x50265410030 HP=231 name~"?" [89] ent=0x502501B6470 HP=7 name~"?" [90] ent=0x501EC391530 HP=8 name~"?" [91] ent=0x501EC391C30 HP=1 name~"?" [92] ent=0x502501B75B0 HP=7 name~"?" [93] ent=0x501EC396930 HP=4 name~"?" [94] ent=0x501EC397030 HP=7 name~"?" [95] ent=0x502501B6D10 HP=7 name~"?" [96] ent=0x501EC393F30 HP=6 name~"?" [97] ent=0x501EC394630 HP=5 name~"?" [98] ent=0x502501B6A30 HP=7 name~"?" [99] ent=0x501EC393130 HP=4 name~"?" [101] ent=0x502501B6750 HP=7 name~"?" [102] ent=0x501EC392330 HP=4 name~"?" [104] ent=0x502501B6FF0 HP=7 name~"?" [105] ent=0x501EC394D30 HP=6 name~"?" [107] ent=0x502501B72D0 HP=7 name~"?" [108] ent=0x501EC395B30 HP=8 name~"?" [110] ent=0x502501B7890 HP=7 name~"?" [111] ent=0x501EC397730 HP=14 name~"?" [113] ent=0x502501B7B70 HP=7 name~"?" [114] ent=0x501EC398530 HP=6 name~"?" [ENTSCAN DONE] [OK] Da gan vao PID 49688 (elevated) === FINDPLAYER maxHP=491 (full scan) === [OK] Da gan vao PID 36104 (elevated) === MAP (PID 36104) === PathOfExile.exe base=0x7FF69D570000 size=0x4C9C000 ntdll.dll base=0x7FFC16FF0000 size=0x1F9000 KERNEL32.DLL base=0x7FFC15310000 size=0xC2000 KERNELBASE.dll base=0x7FFC14A60000 size=0x2F7000 WS2_32.dll base=0x7FFC16E10000 size=0x6B000 RPCRT4.dll base=0x7FFC163D0000 size=0x126000 IMM32.dll base=0x7FFC151B0000 size=0x2F000 USER32.dll base=0x7FFC16C70000 size=0x19D000 win32u.dll base=0x7FFC14840000 size=0x22000 GDI32.dll base=0x7FFC165B0000 size=0x2B000 dbghelp.dll base=0x7FFC02780000 size=0x201000 gdi32full.dll base=0x7FFC14D60000 size=0x11A000 ucrtbase.dll base=0x7FFC14710000 size=0x100000 msvcp_win.dll base=0x7FFC14ED0000 size=0x9D000 CRYPT32.dll base=0x7FFC14900000 size=0x15D000 COMCTL32.dll base=0x7FFBF9970000 size=0x29B000 WINMM.dll base=0x7FFC03160000 size=0x27000 COMDLG32.dll base=0x7FFC15070000 size=0xDA000 IPHLPAPI.DLL base=0x7FFC13980000 size=0x3B000 msvcrt.dll base=0x7FFC16510000 size=0x9E000 combase.dll base=0x7FFC165F0000 size=0x353000 gdiplus.dll base=0x7FFBFAD50000 size=0x1AB000 shcore.dll base=0x7FFC16E80000 size=0xAD000 dxgi.dll base=0x7FFC12E70000 size=0xF6000 USP10.dll base=0x7FFBF9E60000 size=0x19000 SHLWAPI.dll base=0x7FFC16C10000 size=0x5B000 SHELL32.dll base=0x7FFC15C50000 size=0x771000 ADVAPI32.dll base=0x7FFC15980000 size=0xB2000 sechost.dll base=0x7FFC151E0000 size=0xA0000 bcrypt.dll base=0x7FFC14810000 size=0x27000 ole32.dll base=0x7FFC15850000 size=0x12B000 OLEAUT32.dll base=0x7FFC15B70000 size=0xD6000 SETUPAPI.dll base=0x7FFC153E0000 size=0x470000 cfgmgr32.dll base=0x7FFC14E80000 size=0x4E000 imagehlp.dll base=0x7FFC16F90000 size=0x1D000 WLDAP32.dll base=0x7FFC15150000 size=0x5F000 HID.DLL base=0x7FFC12E60000 size=0xD000 Normaliz.dll base=0x7FFC165E0000 size=0x8000 VERSION.dll base=0x7FFC0C530000 size=0xA000 dbgcore.DLL base=0x7FFBF3640000 size=0x34000 kernel.appcore.dll base=0x7FFC124A0000 size=0x12000 bcryptPrimitives.dll base=0x7FFC14870000 size=0x82000 clbcatq.dll base=0x7FFC16B60000 size=0xA9000 amsi.dll base=0x7FFBF0DE0000 size=0x1F000 USERENV.dll base=0x7FFC14500000 size=0x2E000 profapi.dll base=0x7FFC14590000 size=0x25000 MpOav.dll base=0x7FFBF0D30000 size=0xA4000 windows.storage.dll base=0x7FFC126B0000 size=0x7AC000 Wldp.dll base=0x7FFC13F30000 size=0x2B000 uxtheme.dll base=0x7FFC11FB0000 size=0x9E000 secur32.dll base=0x7FFBF7F60000 size=0xC000 SSPICLI.DLL base=0x7FFC14530000 size=0x32000 coml2.dll base=0x7FFC14FF0000 size=0x79000 asycfilt.dll base=0x7FFC0B7D0000 size=0x1A000 uvh64.dll base=0x7FFBB3320000 size=0x2B000 MSCTF.dll base=0x7FFC15A50000 size=0x116000 Riched20.dll base=0x7FFBEE770000 size=0x9A000 msls31.dll base=0x7FFC04530000 size=0x39000 dataexchange.dll base=0x7FFBF1C90000 size=0x3E000 d3d11.dll base=0x7FFC0FFA0000 size=0x264000 dcomp.dll base=0x7FFC10D80000 size=0x1E5000 twinapi.appcore.dll base=0x7FFC0CBB0000 size=0x203000 textinputframework.dll base=0x7FFC09D90000 size=0xF9000 CoreUIComponents.dll base=0x7FFC0F040000 size=0x35B000 CoreMessaging.dll base=0x7FFC10C80000 size=0xF2000 ntmarta.dll base=0x7FFC13810000 size=0x33000 wintypes.dll base=0x7FFC0F9E0000 size=0x157000 TextShaping.dll base=0x7FFBF4330000 size=0xAC000 lsp64.dll base=0x7FFBFB5F0000 size=0x2E3000 mswsock.dll base=0x7FFC13C80000 size=0x6A000 WINTRUST.DLL base=0x7FFC14F70000 size=0x74000 MSASN1.dll base=0x7FFC143A0000 size=0x12000 CRYPTSP.dll base=0x7FFC142F0000 size=0x18000 rsaenh.dll base=0x7FFC135C0000 size=0x38000 CRYPTBASE.dll base=0x7FFC13EA0000 size=0xC000 DNSAPI.dll base=0x7FFC139C0000 size=0xCC000 NSI.dll base=0x7FFC15A40000 size=0x8000 rasadhlp.dll base=0x7FFC02120000 size=0xA000 fwpuclnt.dll base=0x7FFC0D250000 size=0x80000 bink2w64.dll base=0x7FFBE3AF0000 size=0x74000 fmod.dll base=0x7FFBDB5C0000 size=0x21A000 DSOUND.DLL base=0x7FFBD0AE0000 size=0x9C000 powrprof.dll base=0x7FFC140E0000 size=0x4B000 winmmbase.dll base=0x7FFBEB520000 size=0x26000 UMPDC.dll base=0x7FFC140C0000 size=0x12000 fmodstudio.dll base=0x7FFBD5AE0000 size=0x190000 MMDevApi.dll base=0x7FFC0CF30000 size=0x85000 DEVOBJ.dll base=0x7FFC143E0000 size=0x33000 AUDIOSES.DLL base=0x7FFC0CFC0000 size=0x181000 resourcepolicyclient.dll base=0x7FFC120A0000 size=0x14000 d3d12.dll base=0x7FFBDCD60000 size=0x25000 D3D12Core.dll base=0x7FFB74FF0000 size=0x1CD000 dxcore.dll base=0x7FFC0EBB0000 size=0x3B000 cryptnet.dll base=0x7FFC0C4F0000 size=0x31000 drvstore.dll base=0x7FFC0C130000 size=0x148000 nvspcap64.dll base=0x7FFBE8EF0000 size=0x147000 xinput1_4.dll base=0x7FFBEE320000 size=0x11000 inputhost.dll base=0x7FFC09E90000 size=0x152000 PROPSYS.dll base=0x7FFC11790000 size=0xFA000 gpapi.dll base=0x7FFC13CF0000 size=0x23000 WINNSI.DLL base=0x7FFC0ED90000 size=0xB000 sl.interposer.dll base=0x7FFBE1470000 size=0xA1000 VCRUNTIME140.dll base=0x7FFBF9E40000 size=0x1E000 MSVCP140.dll base=0x7FFBF37A0000 size=0x88000 VCRUNTIME140_1.dll base=0x7FFBFAC60000 size=0xB000 nvapi64.dll base=0x7FFC019E0000 size=0x585000 sl.common.dll base=0x7FFBAEE20000 size=0xDD000 _nvngx.dll base=0x7FFBAA790000 size=0x176000 DEVRTL.dll base=0x7FFBF9F70000 size=0x14000 SPINF.dll base=0x7FFC040B0000 size=0x1C000 sl.pcl.dll base=0x7FFBE4D10000 size=0x58000 sl.reflex.dll base=0x7FFBE2CB0000 size=0x5E000 D3D12Core.dll base=0x7FFB72550000 size=0x48F000 schannel.DLL base=0x7FFC134D0000 size=0x9B000 nvldumdx.dll base=0x7FFC09BB0000 size=0xC4000 mskeyprotect.dll base=0x7FFBEDBB0000 size=0x15000 NTASN1.dll base=0x7FFC13F60000 size=0x3B000 ncrypt.dll base=0x7FFC13FA0000 size=0x27000 ncryptsslp.dll base=0x7FFBEE380000 size=0x26000 nvgpucomp64.dll base=0x7FFC047F0000 size=0x3D93000 NvMessageBus.dll base=0x7FFBFB9B0000 size=0x363000 NvMemMapStoragex.dll base=0x7FFC018A0000 size=0xDE000 nvwgf2umx.dll base=0x7FFBFBE80000 size=0x5834000 nvppex.dll base=0x7FFB9FE30000 size=0x1B7000 D3DSCache.dll base=0x7FFBEA960000 size=0x2B000 libxess.dll base=0x7FFB6DB10000 size=0x4A3A000 dwmapi.dll base=0x7FFC122C0000 size=0x2E000 wbemprox.dll base=0x7FFC0C6F0000 size=0x11000 wbemcomn.dll base=0x7FFC0E6B0000 size=0x90000 wbemsvc.dll base=0x7FFC0BA20000 size=0x14000 fastprox.dll base=0x7FFC0BBB0000 size=0x10C000 gep-loader.dll base=0x7FFC08D00000 size=0x2B000 GEPPlugin64.dll base=0x7FFBEA910000 size=0x50000 gep_poe2.dll base=0x7FFBA8090000 size=0xF4000 libowgameevents64.dll base=0x7FFBFA600000 size=0x3C000 owe-client-x64.dll base=0x7FFB6D5F0000 size=0x513000 D3DCOMPILER_47.dll base=0x7FFC0FB40000 size=0x45D000 d3d11on12.dll base=0x7FFBE13D0000 size=0x97000 dxilconv.dll base=0x7FFB9B4E0000 size=0x139000 dxcompiler.dll base=0x7FFB6B3D0000 size=0x112A000 dxil.dll base=0x7FFB84310000 size=0x168000 Windows.UI.dll base=0x7FFC09FF0000 size=0x140000 WindowManagementAPI.dll base=0x7FFC0CE00000 size=0xA1000 --- PE Sections (PathOfExile.exe) --- .section .text VA=0x1000 VSize=0x2E83B6E .section .rdata VA=0x2E85000 VSize=0xB7C366 .section .data VA=0x3A02000 VSize=0xD1655C .section .pdata VA=0x4719000 VSize=0x1C4AE4 .section _RDATA VA=0x48DE000 VSize=0x4E10 .section .rsrc VA=0x48E3000 VSize=0x27FDF8 .section .reloc VA=0x4B63000 VSize=0x138AF8 [OK] Da gan vao PID 36104 (elevated) === SCAN-HP value=1 (full scan) === [progress] 0 MB, 7 ung vien [progress] 0 MB, 7 ung vien [progress] 0 MB, 22 ung vien [progress] 0 MB, 24 ung vien [progress] 0 MB, 35 ung vien [progress] 0 MB, 36 ung vien [progress] 0 MB, 37 ung vien [progress] 0 MB, 50 ung vien [progress] 0 MB, 54 ung vien [progress] 0 MB, 55 ung vien [progress] 0 MB, 59 ung vien [progress] 0 MB, 65 ung vien [progress] 0 MB, 67 ung vien [progress] 0 MB, 68 ung vien [progress] 0 MB, 70 ung vien [progress] 0 MB, 76 ung vien [progress] 0 MB, 77 ung vien [progress] 0 MB, 119 ung vien [progress] 0 MB, 121 ung vien [progress] 0 MB, 277 ung vien [progress] 0 MB, 293 ung vien [progress] 0 MB, 304 ung vien [progress] 0 MB, 398 ung vien [progress] 0 MB, 405 ung vien [progress] 0 MB, 407 ung vien [progress] 0 MB, 425 ung vien [progress] 0 MB, 475 ung vien [progress] 4608 MB, 3367554 ung vien [progress] 4608 MB, 3368701 ung vien [progress] 4608 MB, 3368879 ung vien [progress] 4608 MB, 3368949 ung vien [progress] 4608 MB, 3369299 ung vien [progress] 4608 MB, 3370128 ung vien [progress] 4608 MB, 3370989 ung vien [progress] 4608 MB, 3372139 ung vien [progress] 4608 MB, 3374212 ung vien [progress] 4608 MB, 3374596 ung vien [progress] 4608 MB, 3377452 ung vien [progress] 4608 MB, 3377620 ung vien [progress] 4608 MB, 3377815 ung vien [progress] 4608 MB, 3378794 ung vien [progress] 4608 MB, 3379474 ung vien [progress] 4608 MB, 3381766 ung vien [progress] 4608 MB, 3382300 ung vien [progress] 4608 MB, 3382549 ung vien [progress] 4608 MB, 3382923 ung vien [progress] 4608 MB, 3384592 ung vien [progress] 4608 MB, 3388068 ung vien [progress] 4608 MB, 3389695 ung vien [progress] 4608 MB, 3390752 ung vien [progress] 5120 MB, 4776079 ung vien [OK] Da ghi 18940004 ung vien vao hp_candidates.txt Ket qua: 18940004 ung vien 0x7FFE0264 0x7FFE0290 0x7FFE0294 0x7FFE029C 0x7FFE02E0 0x7FFE03A4 0x7FFE03EC 0x88484E860 0x88484E8B8 0x88484E960 0x88484EAC0 0x88484EAD0 0x88484EAE0 0x88484EDE0 0x88484EE54 0x88484F1D0 0x88484F1E0 0x88484F1F0 0x88484F3E8 0x88484F438 0x88484F4A0 0x88484F5E8 0x884A1E2AC 0x884A202AC 0x884A302AC 0x884A322AC 0x884A328EC 0x884A342AC 0x884A362AC 0x884A382AC ... va 18939974 dia chi khac trong hp_candidates.txt Huong dan: de nhan vat mat/hoi mau roi chay: memprobe.exe scan-hp --rescan hp_candidates.txt [SCAN DONE] [OK] Da gan vao PID 36104 (elevated) === FINDPLAYER maxHP=1 (full scan) === [OK] 1221930 stat block (luu player_candidates.txt) 0x7FFE028C (HP=0) 0x8853EF068 (HP=0) 0x8853FD420 (HP=0) 0x8853FD984 (HP=0) 0x8853FDE24 (HP=0) 0x8853FE88C (HP=0) 0x886BFCE0C (HP=0) 0x886BFD09C (HP=0) 0x886BFD444 (HP=0) 0x886BFE6A4 (HP=0) 0x886BFEC54 (HP=0) 0x886BFEC94 (HP=0) 0x888BFF104 (HP=0) 0x8893EFB18 (HP=0) 0x8893FF3C8 (HP=0) 0x88B3EFA98 (HP=0) 0x88BBEFC68 (HP=0) 0x88BBFD834 (HP=0) 0x88BBFE32C (HP=0) 0x88BBFE374 (HP=0) 0x88C3EF848 (HP=0) 0x88CBEF818 (HP=0) 0x88D3EF618 (HP=0) 0x88DBEFAF8 (HP=0) 0x88E3ECB00 (HP=0) 0x88E3EE0B0 (HP=0) 0x88E3F289C (HP=0) 0x88E3F4464 (HP=1) 0x88E3F4BEC (HP=0) 0x88E3F71C4 (HP=0) Huong dan: mat mau roi chay: findplayer 1 --rescan [FINDPLAYER DONE] [OK] Da gan vao PID 36104 (elevated) === SCAN-HP value=2402 (full scan) === [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 5120 MB, 150 ung vien [progress] 5120 MB, 150 ung vien [progress] 5120 MB, 150 ung vien [progress] 11776 MB, 897 ung vien [progress] 11776 MB, 897 ung vien [OK] Da ghi 1043 ung vien vao hp_candidates.txt Ket qua: 1043 ung vien 0x16399666688 0x163B3F6F330 0x163BB2E4D1C 0x163C012B9C8 0x163C012B9D8 0x163CB37098C 0x163CB370E0C 0x163CB370E4C 0x163D02BB7EC 0x163D5116E74 0x163D74FC16C 0x17CDA520008 0x17CE434DF90 0x195ECD892F4 0x195EF1108D8 0x195F4204F58 0x195FA2FEC8C 0x1968560DFFC 0x19685780DFC 0x1968783DFFC 0x196879B0DFC 0x19687D3DFFC 0x19687EB0DFC 0x1968DA3A5FC 0x19698F24C0C 0x19698F24C14 0x19698F24C24 0x19698F24C34 0x19699438C10 0x19699438C14 ... va 1013 dia chi khac trong hp_candidates.txt Huong dan: de nhan vat mat/hoi mau roi chay: memprobe.exe scan-hp --rescan hp_candidates.txt [SCAN DONE] [OK] Da gan vao PID 36104 (elevated) === LABEL-REGISTRY (PID 36104) === [LABEL] build=6A9E477A toml=C:\Projects\AutoPOE2\bin\Release\offsets_6A9E477A.toml match=Match [LABEL] hits=37 labels=4 json=C:\Projects\AutoPOE2\bin\Release\live_label_6A9E477A.json target=LocalPlayer kind=relative_offset rva=0x10 evidence=InGameState+0x10 ResolvePlayer target=InGameState kind=static_root rva=0x45C9C90 evidence=ResolveInGameState+ResolvePlayer target=LocalPlayer kind=relative_offset rva=0x10 evidence=InGameState+0x10 ResolvePlayer target=InGameState kind=aob_pattern rva=0x45C9C90 evidence=ResolveInGameState+ResolvePlayer [OK] Da gan vao PID 36104 (elevated) === LABEL-REGISTRY (PID 36104) === [LABEL] fingerprint HP=1 ES=2416 Ward=826 Mana=828 Spirit=8/138 [LABEL] build=6A9E477A toml=C:\Projects\AutoPOE2\bin\Release\offsets_6A9E477A.toml match=Match [LABEL] hits=38 labels=0 json=C:\Projects\AutoPOE2\bin\Release\live_label_6A9E477A.json [LABEL] Khong gan duoc target — ValidateInGameState khong khop slot nao [OK] Da gan vao PID 36104 (elevated) === LABEL-REGISTRY (PID 36104) === [LABEL] fingerprint HP=1 ES=2416 Ward=826 Mana=828 Spirit=8/138 [LABEL] build=6A9E477A toml=C:\Projects\AutoPOE2\bin\Release\offsets_6A9E477A.toml match=Match [LABEL] hits=38 labels=0 json=C:\Projects\AutoPOE2\bin\Release\live_label_6A9E477A.json [LABEL] Khong gan duoc target — ValidateInGameState khong khop slot nao [OK] Da gan vao PID 36104 (elevated) === LABEL-REGISTRY (PID 36104) === [LABEL] fingerprint HP=1 ES=2416 Ward=826 Mana=828 Spirit=8/138 [LABEL] build=6A9E477A toml=C:\Projects\AutoPOE2\bin\Release\offsets_6A9E477A.toml match=Match [LABEL] hits=38 labels=0 json=C:\Projects\AutoPOE2\bin\Release\live_label_6A9E477A.json [LABEL] Khong gan duoc target — ValidateInGameState khong khop slot nao [OK] Da gan vao PID 36104 (elevated) === READ 0x5331D2003E8 (80 bytes) === 05331D2003E8 01 00 00 00 01 00 00 00 01 00 00 00 70 09 00 00 |............p...| 05331D2003F8 70 09 00 00 01 00 00 00 00 00 00 00 FF FF FF FF |p...............| 05331D200408 3A 03 00 00 3A 03 00 00 00 00 00 00 00 00 00 00 |:...:...........| 05331D200418 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 05331D200428 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| [OK] Da gan vao PID 36104 (elevated) === LABEL-REGISTRY (PID 36104) === [LABEL] fingerprint HP=1 ES=2416 Ward=826 Mana=828 Spirit=8/138 [LABEL] build=6A9E477A toml=C:\Projects\AutoPOE2\bin\Release\offsets_6A9E477A.toml match=Match [LABEL] hits=38 labels=2 json=C:\Projects\AutoPOE2\bin\Release\live_label_6A9E477A.json target=EnergyShield kind=relative_offset rva=0xC evidence=HeapFingerprint ES (no static root) target=Ward kind=relative_offset rva=0x20 evidence=HeapFingerprint Ward (no static root) [OK] Da gan vao PID 36104 (elevated) === READ 0x5331D2003C8 (160 bytes) === 05331D2003C8 30 85 54 F1 32 05 00 00 30 8C 54 F1 32 05 00 00 |0.T.2...0.T.2...| 05331D2003D8 00 00 00 00 00 00 00 00 70 09 00 00 00 00 00 00 |........p.......| 05331D2003E8 01 00 00 00 01 00 00 00 01 00 00 00 70 09 00 00 |............p...| 05331D2003F8 70 09 00 00 01 00 00 00 00 00 00 00 FF FF FF FF |p...............| 05331D200408 3A 03 00 00 3A 03 00 00 00 00 00 00 00 00 00 00 |:...:...........| 05331D200418 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 05331D200428 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 05331D200438 00 00 00 00 00 00 00 00 10 00 20 1D 33 05 00 00 |.......... .3...| 05331D200448 00 00 00 00 00 00 00 00 F0 6A 50 A0 F6 7F 00 00 |.........jP.....| 05331D200458 50 04 20 1D 33 05 00 00 78 04 20 1D 33 05 00 00 |P. .3...x. .3...| [OK] Da gan vao PID 36104 (elevated) === PTRDEEP target=0x5331D2003E8 maxOff=0x2000 maxDepth=4 === Gia tri hien tai = 1 So module: 143 [pass 1] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 2048 MB, 0 match [progress] 5120 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [progress] 6144 MB, 0 match [pass 1] xong: 131 match [depth 1] matches=131 [depth 1] frontier=131 [pass 2] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 11264 MB, 60819 match [pass 2] xong: 60832 match [depth 2] matches=60832 [depth 2] frontier=50000 [pass 3] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 3 match [progress] 0 MB, 3 match [progress] 0 MB, 3 match [progress] 0 MB, 3 match [progress] 0 MB, 3 match [progress] 0 MB, 3 match [progress] 0 MB, 3 match [progress] 11264 MB, 354467 match [pass 3] xong: 356011 match [depth 3] matches=356011 [depth 3] frontier=50000 [pass 4] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 453 match [progress] 0 MB, 453 match [progress] 0 MB, 453 match [progress] 0 MB, 454 match [progress] 0 MB, 454 match [progress] 0 MB, 454 match [progress] 0 MB, 459 match [progress] 2048 MB, 6117 match [progress] 3072 MB, 11173 match [progress] 3072 MB, 11173 match [progress] 3072 MB, 11174 match [progress] 3072 MB, 11174 match [progress] 3072 MB, 11252 match [progress] 3072 MB, 11252 match [progress] 3072 MB, 11252 match [progress] 3072 MB, 11252 match [progress] 3072 MB, 11252 match [progress] 3072 MB, 11254 match [progress] 3072 MB, 11254 match [progress] 3072 MB, 11254 match [progress] 3072 MB, 11254 match [progress] 3072 MB, 11254 match [progress] 3072 MB, 11254 match [progress] 3072 MB, 11258 match [progress] 3072 MB, 11258 match [progress] 3072 MB, 11258 match [progress] 3072 MB, 11258 match [progress] 3072 MB, 11258 match [progress] 3072 MB, 11258 match [progress] 3072 MB, 11258 match [progress] 3072 MB, 11258 match [progress] 3072 MB, 11258 match [progress] 3072 MB, 11258 match [progress] 3072 MB, 11258 match [progress] 3072 MB, 11258 match [progress] 3072 MB, 11258 match [progress] 3072 MB, 11258 match [progress] 3072 MB, 11258 match [progress] 3072 MB, 11258 match [progress] 3072 MB, 11258 match [progress] 3072 MB, 11258 match [progress] 3072 MB, 11258 match [progress] 3072 MB, 11258 match [progress] 3072 MB, 11258 match [progress] 3072 MB, 11258 match [progress] 3072 MB, 11258 match [progress] 3072 MB, 11258 match [progress] 3072 MB, 11258 match [progress] 3072 MB, 11258 match [progress] 3072 MB, 11258 match [progress] 3072 MB, 11258 match [progress] 3072 MB, 11258 match [progress] 3072 MB, 11258 match [progress] 3072 MB, 11258 match [progress] 3072 MB, 11258 match [progress] 3072 MB, 11258 match [progress] 3072 MB, 11258 match [progress] 3072 MB, 11258 match [progress] 3072 MB, 11258 match [progress] 3072 MB, 11258 match [progress] 3072 MB, 11258 match [progress] 3072 MB, 11258 match [progress] 6144 MB, 51503 match [pass 4] xong: 1392750 match [depth 4] matches=1392750 [depth 4] frontier=50000 [PTRDEEP DONE] Het 4 tang - chua gap static root. Co the can tang kMaxDepth/kMaxOff. ==== PROBE-POOLS FAST Thu 09/10/2026 18:21:59.24 ==== [OK] Da gan vao PID 36104 (elevated) === PROBE-POOLS life=0x5331D2003E8 mana=828 spirit=8/138 rageMax=0 fast=1 === [POOLS] Life HP=1/1 ES=2416/2416 Ward=826/826 [POOLS] Life window u32 != 0: life-128 = 4048823088 (0xF1542330) life-124 = 1330 (0x532) life-120 = 4048824880 (0xF1542A30) life-116 = 1330 (0x532) life-112 = 2451271664 (0x921B6FF0) life-108 = 1331 (0x533) life-104 = 4048833840 (0xF1544D30) life-100 = 1330 (0x532) life-96 = 4048835632 (0xF1545430) life-92 = 1330 (0x532) life-88 = 2451272400 (0x921B72D0) life-84 = 1331 (0x533) life-80 = 4048837424 (0xF1545B30) life-76 = 1330 (0x532) life-72 = 4048839216 (0xF1546230) life-68 = 1330 (0x532) life-64 = 2451273872 (0x921B7890) life-60 = 1331 (0x533) life-56 = 4048844592 (0xF1547730) life-52 = 1330 (0x532) life-48 = 4048846384 (0xF1547E30) life-44 = 1330 (0x532) life-40 = 2451274608 (0x921B7B70) life-36 = 1331 (0x533) life-32 = 4048848176 (0xF1548530) life-28 = 1330 (0x532) life-24 = 4048849968 (0xF1548C30) life-20 = 1330 (0x532) life-8 = 2416 (0x970) life+0 = 1 (0x1) life+4 = 1 (0x1) life+8 = 1 (0x1) life+12 = 2416 (0x970) life+16 = 2416 (0x970) life+20 = 1 (0x1) life+28 = 4294967295 (0xFFFFFFFF) life+32 = 826 (0x33A) life+36 = 826 (0x33A) life+88 = 488636432 (0x1D200010) life+92 = 1331 (0x533) life+104 = 2689624816 (0xA0506AF0) life+108 = 32758 (0x7FF6) life+112 = 488637520 (0x1D200450) life+116 = 1331 (0x533) life+120 = 488637560 (0x1D200478) life+124 = 1331 (0x533) life+128 = 488637568 (0x1D200480) life+132 = 1331 (0x533) life+136 = 488637592 (0x1D200498) life+140 = 1331 (0x533) life+144 = 477552176 (0x1C76DE30) life+148 = 1331 (0x533) life+176 = 488637616 (0x1D2004B0) life+180 = 1331 (0x533) life+184 = 488637624 (0x1D2004B8) life+188 = 1331 (0x533) life+192 = 488637648 (0x1D2004D0) life+196 = 1331 (0x533) life+200 = 477552176 (0x1C76DE30) life+204 = 1331 (0x533) life+240 = 1032 (0x408) life+248 = 1769902592 (0x697E9200) life+252 = 1331 (0x533) life+280 = 7 (0x7) life+288 = 1775004176 (0x69CC6A10) life+292 = 1331 (0x533) life+320 = 7 (0x7) life+352 = 1063675494 (0x3F666666) life+360 = 1106247680 (0x41F00000) life+364 = 3272015872 (0xC3070000) [POOLS] Follow heap pointers trong cua so: life-128 -> 0x532F1542330 [0]=2695920784 [1]=32758 [2]=4048823088 life-120 -> 0x532F1542A30 [0]=2695920784 [1]=32758 [2]=4048824880 life-112 -> 0x533921B6FF0 [0]=2689523264 [1]=32758 [2]=2451271664 life-104 -> 0x532F1544D30 [0]=2695920784 [1]=32758 [2]=4048833840 life-96 -> 0x532F1545430 [0]=2695920784 [1]=32758 [2]=4048835632 life-88 -> 0x533921B72D0 [0]=2689523264 [1]=32758 [2]=2451272400 life-80 -> 0x532F1545B30 [0]=2695920784 [1]=32758 [2]=4048837424 life-72 -> 0x532F1546230 [0]=2695920784 [1]=32758 [2]=4048839216 life-64 -> 0x533921B7890 [0]=2689523264 [1]=32758 [2]=2451273872 life-56 -> 0x532F1547730 [0]=2695920784 [1]=32758 [2]=4048844592 life-48 -> 0x532F1547E30 [0]=2695920784 [1]=32758 [2]=4048846384 life-40 -> 0x533921B7B70 [0]=2689523264 [1]=32758 [2]=2451274608 life-32 -> 0x532F1548530 [0]=2695920784 [1]=32758 [2]=4048848176 life-24 -> 0x532F1548C30 [0]=2695920784 [1]=32758 [2]=4048849968 life+88 -> 0x5331D200010 [0]=0 [1]=0 [2]=0 life+104 -> 0x7FF6A0506AF0 [0]=2640802704 [1]=32758 [2]=2640802704 life+112 -> 0x5331D200450 [0]=2689624816 [1]=32758 [2]=488637520 life+120 -> 0x5331D200478 [0]=477552176 [1]=1331 [2]=0 life+128 -> 0x5331D200480 [0]=0 [1]=0 [2]=0 life+136 -> 0x5331D200498 [0]=488637616 [1]=1331 [2]=488637624 life+144 -> 0x5331C76DE30 [0]=2689647432 [1]=32758 [2]=477552176 life+176 -> 0x5331D2004B0 [0]=477552176 [1]=1331 [2]=0 life+184 -> 0x5331D2004B8 [0]=0 [1]=0 [2]=0 life+192 -> 0x5331D2004D0 [0]=0 [1]=0 [2]=1032 life+200 -> 0x5331C76DE30 [0]=2689647432 [1]=32758 [2]=477552176 life+248 -> 0x533697E9200 [0]=2695886744 [1]=32758 [2]=0 life+288 -> 0x53369CC6A10 [0]=2689616176 [1]=32758 [2]=1775004176 [POOLS] Local±2MB spirit hits=9 spirit 0x5331D200834 8/138 dist=+1100 u32: [-64]=1330 [-52]=828 [-44]=828 [-40]=828 [-36]=828 [-16]=4294967295 [+0]=8 [+4]=138 [+44]=488636432 [+48]=1331 [+60]=2690955888 [+64]=32758 [+68]=488638576 [+72]=1331 [+76]=3291411920 [+80]=1331 [+84]=3291411976 [+88]=1331 [+92]=3291411992 spirit 0x5331D177214 8/138 dist=-561620 u32: [-56]=1976462613 [-52]=2382364686 [-48]=8 [-44]=231 [-32]=3841830459 [-28]=822083584 [-24]=1332 [-20]=323 [-8]=2521477879 [-4]=2382364687 [+0]=8 [+4]=138 [+12]=122 [+16]=1625125055 [+20]=822083584 [+24]=1332 [+28]=323 [+40]=1645497805 [+44]=2382364688 [+48]=8 [+52]=322 [+64]=3841830459 [+68]=822083584 [+72]=1332 [+76]=324 [+88]=3841830459 [+92]=2382364672 spirit 0x5331D176974 8/138 dist=-563828 u32: [-56]=1552295398 [-52]=2382364674 [-48]=8 [-44]=302 [-32]=3841830459 [-28]=822083584 [-24]=1332 [-20]=304 [-8]=3841830459 [-4]=2382364672 [+0]=8 [+4]=138 [+12]=121 [+16]=2049116607 [+20]=822083584 [+24]=1332 [+28]=305 [+40]=3841830459 [+44]=2382364672 [+48]=8 [+52]=304 [+64]=3841830459 [+68]=822083584 [+72]=1332 [+76]=307 [+84]=120 [+88]=3842360117 [+92]=2382364672 spirit 0x5331D176644 8/138 dist=-564644 u32: [-56]=3841830459 [-52]=2382364672 [-48]=8 [-44]=267 [-32]=3841830459 [-28]=822083584 [-24]=1332 [-20]=292 [-8]=3841830459 [-4]=2382364672 [+0]=8 [+4]=138 [+12]=120 [+16]=3842360117 [+20]=822083584 [+24]=1332 [+28]=293 [+40]=3841830459 [+44]=2382364672 [+48]=8 [+52]=292 [+64]=3841830459 [+68]=822083584 [+72]=1332 [+76]=294 [+88]=3841830459 [+92]=2382364672 spirit 0x5331D175E64 8/138 dist=-566660 u32: [-56]=3841830459 [-52]=2382364672 [-48]=8 [-44]=243 [-32]=3841830459 [-28]=822083584 [-24]=1332 [-20]=246 [-8]=3841830459 [-4]=2382364672 [+0]=8 [+4]=138 [+12]=120 [+16]=3842360117 [+20]=822083584 [+24]=1332 [+28]=247 [+40]=3841830459 [+44]=2382364672 [+48]=8 [+52]=245 [+64]=3841830459 [+68]=822083584 [+72]=1332 [+76]=247 [+88]=2701879587 [+92]=2382364673 spirit 0x5331D175A44 8/138 dist=-567716 u32: [-56]=2701879587 [-52]=2382364673 [-48]=8 [-44]=225 [-32]=3841830459 [-28]=822083584 [-24]=1332 [-20]=227 [-8]=3841830459 [-4]=2382364672 [+0]=8 [+4]=138 [+12]=120 [+16]=3842360117 [+20]=822083584 [+24]=1332 [+28]=229 [+40]=3841830459 [+44]=2382364672 [+48]=8 [+52]=227 [+64]=3841830459 [+68]=822083584 [+72]=1332 [+76]=229 [+88]=2701879587 [+92]=2382364673 spirit 0x5331D1743C4 8/138 dist=-573476 u32: [-56]=1552295398 [-52]=2382364674 [-48]=8 [-44]=144 [-32]=3841830459 [-28]=822083584 [-24]=1332 [-20]=147 [-8]=3841830459 [-4]=2382364672 [+0]=8 [+4]=138 [+12]=121 [+16]=2049116607 [+20]=822083584 [+24]=1332 [+28]=147 [+40]=2701879587 [+44]=2382364673 [+48]=8 [+52]=146 [+64]=3841830459 [+68]=822083584 [+72]=1332 [+76]=148 [+88]=3841830459 [+92]=2382364672 spirit 0x5331D1741E4 8/138 dist=-573956 u32: [-56]=3841830459 [-52]=2382364672 [-48]=8 [-44]=2 [-32]=3841830459 [-28]=822083584 [-24]=1332 [-20]=139 [-8]=3841830459 [-4]=2382364672 [+0]=8 [+4]=138 [+12]=121 [+16]=2049116607 [+20]=822083584 [+24]=1332 [+28]=141 [+40]=3841830459 [+44]=2382364672 [+48]=8 [+52]=139 [+64]=3841830459 [+68]=822083584 [+72]=1332 [+76]=141 [+88]=2701879587 [+92]=2382364673 [POOLS] Local±2MB mana hits=2 mana 0x5331D200808 828/828 dist=+1056 u32: [-64]=2451524848 [-60]=1331 [-56]=4049108016 [-52]=1330 [-48]=4049109808 [-44]=1330 [-40]=2451525584 [-36]=1331 [-32]=4049111600 [-28]=1330 [-24]=4049113392 [-20]=1330 [-8]=828 [+0]=828 [+4]=828 [+8]=828 [+28]=4294967295 [+44]=8 [+48]=138 [+88]=488636432 [+92]=1331 mana 0x5331D20080C 828/828 dist=+1060 u32: [-64]=1331 [-60]=4049108016 [-56]=1330 [-52]=4049109808 [-48]=1330 [-44]=2451525584 [-40]=1331 [-36]=4049111600 [-32]=1330 [-28]=4049113392 [-24]=1330 [-12]=828 [-4]=828 [+0]=828 [+4]=828 [+24]=4294967295 [+40]=8 [+44]=138 [+84]=488636432 [+88]=1331 [POOLS] Bo qua Full-RAM (--fast) [POOLS DONE] EXIT=0 ==== DUMP MANA/SPIRIT WINDOW Thu 09/10/2026 18:24:51.66 ==== [OK] Da gan vao PID 36104 (elevated) === READ 0x5331D2007E8 (192 bytes) === 05331D2007E8 30 8A 58 F1 32 05 00 00 30 91 58 F1 32 05 00 00 |0.X.2...0.X.2...| 05331D2007F8 00 00 00 00 00 00 00 00 3C 03 00 00 00 00 00 00 |........<.......| 05331D200808 3C 03 00 00 3C 03 00 00 3C 03 00 00 00 00 00 00 |<...<...<.......| 05331D200818 00 00 00 00 00 00 00 00 00 00 00 00 FF FF FF FF |................| 05331D200828 00 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 |................| 05331D200838 8A 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 05331D200848 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 05331D200858 00 00 00 00 00 00 00 00 10 00 20 1D 33 05 00 00 |.......... .3...| 05331D200868 00 00 00 00 00 00 00 00 70 BA 64 A0 F6 7F 00 00 |........p.d.....| 05331D200878 70 08 20 1D 33 05 00 00 D0 F5 2E C4 33 05 00 00 |p. .3.......3...| 05331D200888 08 F6 2E C4 33 05 00 00 18 F6 2E C4 33 05 00 00 |....3.......3...| 05331D200898 10 B6 31 1C 33 05 00 00 10 96 36 C4 33 05 00 00 |..1.3.....6.3...| [OK] Da gan vao PID 36104 (elevated) === READ 0x5331D200800 (128 bytes) === 05331D200800 3C 03 00 00 00 00 00 00 3C 03 00 00 3C 03 00 00 |<.......<...<...| 05331D200810 3C 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |<...............| 05331D200820 00 00 00 00 FF FF FF FF 00 00 00 00 00 00 00 00 |................| 05331D200830 00 00 00 00 08 00 00 00 8A 00 00 00 00 00 00 00 |................| 05331D200840 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 05331D200850 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 05331D200860 10 00 20 1D 33 05 00 00 00 00 00 00 00 00 00 00 |.. .3...........| 05331D200870 70 BA 64 A0 F6 7F 00 00 70 08 20 1D 33 05 00 00 |p.d.....p. .3...| ==== LABEL + DUMP Thu 09/10/2026 18:30:15.16 ==== [OK] Da gan vao PID 36104 (elevated) === READ 0x5331D2007E8 (192 bytes) === 05331D2007E8 30 8A 58 F1 32 05 00 00 30 91 58 F1 32 05 00 00 |0.X.2...0.X.2...| 05331D2007F8 00 00 00 00 00 00 00 00 3C 03 00 00 00 00 00 00 |........<.......| 05331D200808 3C 03 00 00 3C 03 00 00 3C 03 00 00 00 00 00 00 |<...<...<.......| 05331D200818 00 00 00 00 00 00 00 00 00 00 00 00 FF FF FF FF |................| 05331D200828 00 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 |................| 05331D200838 8A 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 05331D200848 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 05331D200858 00 00 00 00 00 00 00 00 10 00 20 1D 33 05 00 00 |.......... .3...| 05331D200868 00 00 00 00 00 00 00 00 70 BA 64 A0 F6 7F 00 00 |........p.d.....| 05331D200878 70 08 20 1D 33 05 00 00 D0 F5 2E C4 33 05 00 00 |p. .3.......3...| 05331D200888 08 F6 2E C4 33 05 00 00 18 F6 2E C4 33 05 00 00 |....3.......3...| 05331D200898 10 B6 31 1C 33 05 00 00 10 96 36 C4 33 05 00 00 |..1.3.....6.3...| [OK] Da gan vao PID 36104 (elevated) === LABEL-REGISTRY (PID 36104) === [LABEL] fingerprint HP=1 ES=2416 Ward=826 Mana=828 Spirit=8/138 [LABEL] build=6A9E477A toml=C:\Projects\AutoPOE2\bin\Release\offsets_6A9E477A.toml match=Match [LABEL] hits=38 labels=4 json=C:\Projects\AutoPOE2\bin\Release\live_label_6A9E477A.json target=EnergyShield kind=relative_offset rva=0xC evidence=HeapFingerprint ES (no static root) target=Ward kind=relative_offset rva=0x20 evidence=HeapFingerprint Ward (no static root) target=Mana kind=relative_offset rva=0x420 evidence=HeapFingerprint Mana (no static root) target=Spirit kind=relative_offset rva=0x44C evidence=HeapFingerprint Spirit (no static root) [FATAL] Khong thay tien trinh PathOfExile.exe [OK] Da gan vao PID 37676 (elevated) [USAGE] memprobe.exe probe-pools --mana .. --spirit .. --spirit-cur .. [OK] Da gan vao PID 37676 (elevated) [USAGE] memprobe.exe probe-pools --mana .. --spirit .. --spirit-cur .. [OK] Da gan vao PID 37676 (elevated) === MAP (PID 37676) === PathOfExile.exe base=0x7FF6AFC20000 size=0x4C9E000 ntdll.dll base=0x7FFC16FF0000 size=0x1F9000 KERNEL32.DLL base=0x7FFC15310000 size=0xC2000 KERNELBASE.dll base=0x7FFC14A60000 size=0x2F7000 WS2_32.dll base=0x7FFC16E10000 size=0x6B000 RPCRT4.dll base=0x7FFC163D0000 size=0x126000 IMM32.dll base=0x7FFC151B0000 size=0x2F000 USER32.dll base=0x7FFC16C70000 size=0x19D000 win32u.dll base=0x7FFC14840000 size=0x22000 GDI32.dll base=0x7FFC165B0000 size=0x2B000 dbghelp.dll base=0x7FFC02780000 size=0x201000 ucrtbase.dll base=0x7FFC14710000 size=0x100000 gdi32full.dll base=0x7FFC14D60000 size=0x11A000 msvcp_win.dll base=0x7FFC14ED0000 size=0x9D000 CRYPT32.dll base=0x7FFC14900000 size=0x15D000 COMCTL32.dll base=0x7FFBF9970000 size=0x29B000 WINMM.dll base=0x7FFC03160000 size=0x27000 IPHLPAPI.DLL base=0x7FFC13980000 size=0x3B000 COMDLG32.dll base=0x7FFC15070000 size=0xDA000 msvcrt.dll base=0x7FFC16510000 size=0x9E000 gdiplus.dll base=0x7FFBFAD50000 size=0x1AB000 combase.dll base=0x7FFC165F0000 size=0x353000 dxgi.dll base=0x7FFC12E70000 size=0xF6000 shcore.dll base=0x7FFC16E80000 size=0xAD000 USP10.dll base=0x7FFBF9E60000 size=0x19000 SHLWAPI.dll base=0x7FFC16C10000 size=0x5B000 SHELL32.dll base=0x7FFC15C50000 size=0x771000 ADVAPI32.dll base=0x7FFC15980000 size=0xB2000 sechost.dll base=0x7FFC151E0000 size=0xA0000 bcrypt.dll base=0x7FFC14810000 size=0x27000 ole32.dll base=0x7FFC15850000 size=0x12B000 OLEAUT32.dll base=0x7FFC15B70000 size=0xD6000 SETUPAPI.dll base=0x7FFC153E0000 size=0x470000 cfgmgr32.dll base=0x7FFC14E80000 size=0x4E000 imagehlp.dll base=0x7FFC16F90000 size=0x1D000 WLDAP32.dll base=0x7FFC15150000 size=0x5F000 HID.DLL base=0x7FFC12E60000 size=0xD000 Normaliz.dll base=0x7FFC165E0000 size=0x8000 VERSION.dll base=0x7FFC0C530000 size=0xA000 dbgcore.DLL base=0x7FFBF3640000 size=0x34000 kernel.appcore.dll base=0x7FFC124A0000 size=0x12000 bcryptPrimitives.dll base=0x7FFC14870000 size=0x82000 clbcatq.dll base=0x7FFC16B60000 size=0xA9000 amsi.dll base=0x7FFBF0DE0000 size=0x1F000 USERENV.dll base=0x7FFC14500000 size=0x2E000 profapi.dll base=0x7FFC14590000 size=0x25000 MpOav.dll base=0x7FFBF0D30000 size=0xA4000 windows.storage.dll base=0x7FFC126B0000 size=0x7AC000 Wldp.dll base=0x7FFC13F30000 size=0x2B000 uxtheme.dll base=0x7FFC11FB0000 size=0x9E000 secur32.dll base=0x7FFBF7F60000 size=0xC000 SSPICLI.DLL base=0x7FFC14530000 size=0x32000 coml2.dll base=0x7FFC14FF0000 size=0x79000 asycfilt.dll base=0x7FFC02380000 size=0x1A000 uvh64.dll base=0x7FFBB3320000 size=0x2B000 MSCTF.dll base=0x7FFC15A50000 size=0x116000 Riched20.dll base=0x7FFBD50C0000 size=0x9A000 msls31.dll base=0x7FFBE13F0000 size=0x39000 dataexchange.dll base=0x7FFBF1C90000 size=0x3E000 d3d11.dll base=0x7FFC0FFA0000 size=0x264000 dcomp.dll base=0x7FFC10D80000 size=0x1E5000 twinapi.appcore.dll base=0x7FFC0CBB0000 size=0x203000 textinputframework.dll base=0x7FFC09D90000 size=0xF9000 CoreUIComponents.dll base=0x7FFC0F040000 size=0x35B000 CoreMessaging.dll base=0x7FFC10C80000 size=0xF2000 ntmarta.dll base=0x7FFC13810000 size=0x33000 wintypes.dll base=0x7FFC0F9E0000 size=0x157000 TextShaping.dll base=0x7FFBF4330000 size=0xAC000 lsp64.dll base=0x7FFBFB5F0000 size=0x2E3000 mswsock.dll base=0x7FFC13C80000 size=0x6A000 WINTRUST.DLL base=0x7FFC14F70000 size=0x74000 MSASN1.dll base=0x7FFC143A0000 size=0x12000 CRYPTSP.dll base=0x7FFC142F0000 size=0x18000 rsaenh.dll base=0x7FFC135C0000 size=0x38000 CRYPTBASE.dll base=0x7FFC13EA0000 size=0xC000 DNSAPI.dll base=0x7FFC139C0000 size=0xCC000 NSI.dll base=0x7FFC15A40000 size=0x8000 rasadhlp.dll base=0x7FFC02120000 size=0xA000 fwpuclnt.dll base=0x7FFC0D250000 size=0x80000 bink2w64.dll base=0x7FFBE3C10000 size=0x74000 fmod.dll base=0x7FFBB09D0000 size=0x21A000 DSOUND.DLL base=0x7FFBD0AE0000 size=0x9C000 winmmbase.dll base=0x7FFBEB520000 size=0x26000 powrprof.dll base=0x7FFC140E0000 size=0x4B000 UMPDC.dll base=0x7FFC140C0000 size=0x12000 fmodstudio.dll base=0x7FFBAE9F0000 size=0x190000 MMDevApi.dll base=0x7FFC0CF30000 size=0x85000 DEVOBJ.dll base=0x7FFC143E0000 size=0x33000 AUDIOSES.DLL base=0x7FFC0CFC0000 size=0x181000 resourcepolicyclient.dll base=0x7FFC120A0000 size=0x14000 d3d12.dll base=0x7FFBE7B40000 size=0x25000 D3D12Core.dll base=0x7FFBADE50000 size=0x1CD000 dxcore.dll base=0x7FFC0EBB0000 size=0x3B000 cryptnet.dll base=0x7FFC0C4F0000 size=0x31000 drvstore.dll base=0x7FFC0C130000 size=0x148000 nvspcap64.dll base=0x7FFBE8EF0000 size=0x147000 xinput1_4.dll base=0x7FFBEE320000 size=0x11000 inputhost.dll base=0x7FFC09E90000 size=0x152000 PROPSYS.dll base=0x7FFC11790000 size=0xFA000 gpapi.dll base=0x7FFC13CF0000 size=0x23000 WINNSI.DLL base=0x7FFC0ED90000 size=0xB000 sl.interposer.dll base=0x7FFBE3B60000 size=0xA1000 MSVCP140.dll base=0x7FFBF37A0000 size=0x88000 VCRUNTIME140_1.dll base=0x7FFBFAC60000 size=0xB000 VCRUNTIME140.dll base=0x7FFBF9E40000 size=0x1E000 nvapi64.dll base=0x7FFC019E0000 size=0x585000 sl.common.dll base=0x7FFBCE8A0000 size=0xDD000 _nvngx.dll base=0x7FFBB1670000 size=0x176000 DEVRTL.dll base=0x7FFBF9F70000 size=0x14000 SPINF.dll base=0x7FFC040B0000 size=0x1C000 sl.pcl.dll base=0x7FFBB3450000 size=0x58000 sl.reflex.dll base=0x7FFBB33F0000 size=0x5E000 D3D12Core.dll base=0x7FFB9EE60000 size=0x48F000 nvldumdx.dll base=0x7FFC09BB0000 size=0xC4000 nvgpucomp64.dll base=0x7FFC047F0000 size=0x3D93000 NvMessageBus.dll base=0x7FFBFB9B0000 size=0x363000 NvMemMapStoragex.dll base=0x7FFC018A0000 size=0xDE000 nvwgf2umx.dll base=0x7FFBFBE80000 size=0x5834000 schannel.DLL base=0x7FFC134D0000 size=0x9B000 nvppex.dll base=0x7FFB9FE30000 size=0x1B7000 D3DSCache.dll base=0x7FFBEA360000 size=0x2B000 mskeyprotect.dll base=0x7FFBEDBB0000 size=0x15000 NTASN1.dll base=0x7FFC13F60000 size=0x3B000 ncrypt.dll base=0x7FFC13FA0000 size=0x27000 ncryptsslp.dll base=0x7FFBEE380000 size=0x26000 libxess.dll base=0x7FFB6A7E0000 size=0x4A3A000 dwmapi.dll base=0x7FFC122C0000 size=0x2E000 wbemprox.dll base=0x7FFC0C6F0000 size=0x11000 wbemcomn.dll base=0x7FFC0E6B0000 size=0x90000 wbemsvc.dll base=0x7FFC0BA20000 size=0x14000 fastprox.dll base=0x7FFC0BBB0000 size=0x10C000 dxcompiler.dll base=0x7FFB74470000 size=0x112A000 dxil.dll base=0x7FFBAE880000 size=0x168000 --- PE Sections (PathOfExile.exe) --- .section .text VA=0x1000 VSize=0x2E8555E .section .rdata VA=0x2E87000 VSize=0xB7C086 .section .data VA=0x3A04000 VSize=0xD163DC .section .pdata VA=0x471B000 VSize=0x1C4B98 .section _RDATA VA=0x48E0000 VSize=0x4E10 .section .rsrc VA=0x48E5000 VSize=0x27FDF8 .section .reloc VA=0x4B65000 VSize=0x138B54 [OK] Da gan vao PID 37676 (elevated) === LABEL-REGISTRY (PID 37676) === [LABEL] build=6AA2213C toml=C:\Projects\AutoPOE2\bin\Release\offsets.toml match=NoRecord [LABEL] hits=1 labels=0 json=C:\Projects\AutoPOE2\bin\Release\live_label_6AA2213C.json [LABEL] Khong gan duoc target — fingerprint CI+ES+Ward chua khop heap/static [OK] Da gan vao PID 37676 (elevated) === AOB SCAN (PID 37676) === Module: base=0x7FF6AFC20000 size=0x4C9E000 [MISS] InGameStateBase (pattern khong khop ban build nay) [MISS] VolumetricFog (pattern khong khop ban build nay) [MISS] EntityListRoot (pattern khong khop ban build nay) [MISS] AreaExploration (pattern khong khop ban build nay) [OK] Da gan vao PID 43084 (elevated) === LABEL-REGISTRY (PID 43084) === [LABEL] fingerprint HP=1 ES=4713 Ward=240 Mana=876 Spirit=7/147 [LABEL] build=6AA2213C toml=C:\Projects\AutoPOE2\bin\Release\offsets.toml match=NoRecord [LABEL] hits=2 labels=4 json=C:\Projects\AutoPOE2\bin\Release\live_label_6AA2213C.json target=EnergyShield kind=relative_offset rva=0xC evidence=HeapFingerprint ES (no static root) target=Ward kind=relative_offset rva=0x20 evidence=HeapFingerprint Ward (no static root) target=Mana kind=relative_offset rva=0x420 evidence=HeapFingerprint Mana (no static root) target=Spirit kind=relative_offset rva=0x44C evidence=HeapFingerprint Spirit (no static root) [OK] Da gan vao PID 43084 (elevated) === PTRSCAN target=0x2AF791A03E8 === Gia tri hien tai tai target = 1 Allocation: base=0x2AF70000000 span=0x1A010000 [pass 1] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 78 match [progress] 0 MB, 78 match [progress] 0 MB, 78 match [progress] 2048 MB, 3334 match [progress] 10240 MB, 1626781 match [progress] 10240 MB, 1626781 match [progress] 10240 MB, 1626781 match [progress] 10240 MB, 1626781 match [progress] 10240 MB, 1626781 match [progress] 10240 MB, 1626781 match [progress] 10240 MB, 1626781 match [progress] 10240 MB, 1626781 match [progress] 10240 MB, 1626781 match [progress] 10240 MB, 1626781 match [progress] 10240 MB, 1626781 match [progress] 10240 MB, 1626781 match [progress] 10240 MB, 1626781 match [progress] 10240 MB, 1626781 match [progress] 10240 MB, 1626781 match [progress] 10240 MB, 1626781 match [progress] 10240 MB, 1626781 match [progress] 10240 MB, 1626781 match [progress] 10240 MB, 1626781 match [progress] 10240 MB, 1626781 match [progress] 10240 MB, 1626781 match [progress] 10240 MB, 1626781 match [progress] 10240 MB, 1626781 match [pass 1] xong: 1626797 match Trung gian heap: 114 con tro (dung cho Pass 2) [pass 2] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 2048 MB, 26 match [pass 2] xong: 73139 match [heap L2] 0x207DB130008 +0xD070 -> 0x2AFDE3F17F0 +0x3E8 -> HP [heap L2] 0x207DB130158 +0x23D0 -> 0x2AF78006B10 +0x3E8 -> HP [heap L2] 0x207DB130160 +0x23D0 -> 0x2AF78006B10 +0x3E8 -> HP [heap L2] 0x207DB130178 +0x4170 -> 0x2AF78006B10 +0x3E8 -> HP [heap L2] 0x207DB130180 +0x4170 -> 0x2AF78006B10 +0x3E8 -> HP [heap L2] 0x207DB130188 +0x4170 -> 0x2AF78006B10 +0x3E8 -> HP [heap L2] 0x207DB130190 +0x4170 -> 0x2AF78006B10 +0x3E8 -> HP [heap L2] 0x207DB130238 +0x22B0 -> 0x2AF78006B10 +0x3E8 -> HP [heap L2] 0x207DB130240 +0x22B0 -> 0x2AF78006B10 +0x3E8 -> HP [heap L2] 0x207DB130248 +0x22B0 -> 0x2AF78006B10 +0x3E8 -> HP [heap L2] 0x207DB130250 +0x22B0 -> 0x2AF78006B10 +0x3E8 -> HP [heap L2] 0x207DB130258 +0x22B0 -> 0x2AF78006B10 +0x3E8 -> HP [heap L2] 0x207DB130260 +0x22B0 -> 0x2AF78006B10 +0x3E8 -> HP [heap L2] 0x207DB130268 +0x22B0 -> 0x2AF78006B10 +0x3E8 -> HP [heap L2] 0x207DB130270 +0x22B0 -> 0x2AF78006B10 +0x3E8 -> HP [heap L2] 0x207DB1305F0 +0x2190 -> 0x2AF78006B10 +0x3E8 -> HP [heap L2] 0x207DB130600 +0x23D0 -> 0x2AF78006B10 +0x3E8 -> HP [heap L2] 0x207DB130630 +0x4170 -> 0x2AF78006B10 +0x3E8 -> HP [heap L2] 0x207DB1306A8 +0x22B0 -> 0x2AF78006B10 +0x3E8 -> HP [heap L2] 0x207DB1306F8 +0x2310 -> 0x2AF78006B10 +0x3E8 -> HP [heap L2] 0x207DB130710 +0x2370 -> 0x2AF78006B10 +0x3E8 -> HP [heap L2] 0x207DB1307F8 +0x20D0 -> 0x2AF78006B10 +0x3E8 -> HP [heap L2] 0x207DB130860 +0x27F0 -> 0x2AF78006B10 +0x3E8 -> HP [heap L2] 0x207DB130870 +0x26D0 -> 0x2AF78006B10 +0x3E8 -> HP [heap L2] 0x207DB1308D8 +0x45F0 -> 0x2AF78006B10 +0x3E8 -> HP [heap L2] 0x207DB130900 +0x1E30 -> 0x2AF78006B10 +0x3E8 -> HP [heap L2] 0x2AEF04FCDD0 +0x5410 -> 0x2AF2AF3C6B0 +0x3B8 -> HP [heap L2] 0x2AEF0ACE6E0 +0x5CB4 -> 0x2AF3CDF1138 +0x3D8 -> HP [heap L2] 0x2AEF0ACE6F0 +0x5BB0 -> 0x2AF3CDF1138 +0x3D8 -> HP [heap L2] 0x2AEF0ACE6F8 +0x5B48 -> 0x2AF3CDF1138 +0x3D8 -> HP [heap L2] 0x2AEF0ACE700 +0x5C80 -> 0x2AF3CDF1138 +0x3D8 -> HP [heap L2] 0x2AEF0ACE708 +0x5D28 -> 0x2AF3CDF1138 +0x3D8 -> HP [heap L2] 0x2AEF0ACE710 +0x5D18 -> 0x2AF3CDF1138 +0x3D8 -> HP [heap L2] 0x2AEF0ACE720 +0x5CD0 -> 0x2AF3CDF1138 +0x3D8 -> HP [heap L2] 0x2AEF0ACE728 +0x5CE0 -> 0x2AF3CDF1138 +0x3D8 -> HP [heap L2] 0x2AEF0ACE788 +0x5CFC -> 0x2AF3CDF1138 +0x3D8 -> HP [heap L2] 0x2AEF0AD02E0 +0x47A8 -> 0x2AF3CDF1138 +0x3D8 -> HP [heap L2] 0x2AEF0AD02F0 +0x4690 -> 0x2AF3CDF1138 +0x3D8 -> HP [heap L2] 0x2AEF0AD02F8 +0x4620 -> 0x2AF3CDF1138 +0x3D8 -> HP [heap L2] 0x2AEF0AD0300 +0x4770 -> 0x2AF3CDF1138 +0x3D8 -> HP [CHAIN L2 - STATIC] [[0x7FF6B4055CF0]+0x48] + 0x1AD -> HP [CHAIN L2 - STATIC] [[0x7FF6B4055F90]+0x1510] + 0x3B8 -> HP [CHAIN L2 - STATIC] [[0x7FF6B4055F98]+0x14F8] + 0x3B8 -> HP [CHAIN L2 - STATIC] [[0x7FF6B4055FA0]+0x14F8] + 0x3B8 -> HP [CHAIN L2 - STATIC] [[0x7FF6B41ECFD8]+0xF28] + 0x3D8 -> HP [CHAIN L2 - STATIC] [[0x7FF6B41ECFE0]+0xBE0] + 0x3D8 -> HP [CHAIN L2 - STATIC] [[0x7FF6B41ECFE8]+0xBE0] + 0x3D8 -> HP [CHAIN L2 - STATIC] [[0x7FF6B41F3DD8]+0x4A8] + 0x3D8 -> HP [CHAIN L2 - STATIC] [[0x7FF6B41F3DE0]+0x4B8] + 0x3D8 -> HP [CHAIN L2 - STATIC] [[0x7FF6B41F40F8]+0x828] + 0x3D8 -> HP [CHAIN L2 - STATIC] [[0x7FF6B41F4100]+0x4E0] + 0x3D8 -> HP [CHAIN L2 - STATIC] [[0x7FF6B41F4108]+0x4E0] + 0x3D8 -> HP [CHAIN L2 - STATIC] [[0x7FF6B4336880]+0x128] + 0x3D8 -> HP [pass 3] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 14 match [progress] 0 MB, 14 match [progress] 0 MB, 14 match [progress] 2048 MB, 852 match [OK] Da gan vao PID 43084 (elevated) === MAP (PID 43084) === PathOfExile.exe base=0x7FF6AFC20000 size=0x4C9E000 ntdll.dll base=0x7FFC16FF0000 size=0x1F9000 KERNEL32.DLL base=0x7FFC15310000 size=0xC2000 KERNELBASE.dll base=0x7FFC14A60000 size=0x2F7000 WS2_32.dll base=0x7FFC16E10000 size=0x6B000 RPCRT4.dll base=0x7FFC163D0000 size=0x126000 IMM32.dll base=0x7FFC151B0000 size=0x2F000 USER32.dll base=0x7FFC16C70000 size=0x19D000 win32u.dll base=0x7FFC14840000 size=0x22000 GDI32.dll base=0x7FFC165B0000 size=0x2B000 dbghelp.dll base=0x7FFC02780000 size=0x201000 gdi32full.dll base=0x7FFC14D60000 size=0x11A000 ucrtbase.dll base=0x7FFC14710000 size=0x100000 msvcp_win.dll base=0x7FFC14ED0000 size=0x9D000 CRYPT32.dll base=0x7FFC14900000 size=0x15D000 COMCTL32.dll base=0x7FFBF9970000 size=0x29B000 WINMM.dll base=0x7FFC03160000 size=0x27000 IPHLPAPI.DLL base=0x7FFC13980000 size=0x3B000 COMDLG32.dll base=0x7FFC15070000 size=0xDA000 msvcrt.dll base=0x7FFC16510000 size=0x9E000 combase.dll base=0x7FFC165F0000 size=0x353000 gdiplus.dll base=0x7FFBFAD50000 size=0x1AB000 shcore.dll base=0x7FFC16E80000 size=0xAD000 dxgi.dll base=0x7FFC12E70000 size=0xF6000 USP10.dll base=0x7FFBF9E60000 size=0x19000 SHLWAPI.dll base=0x7FFC16C10000 size=0x5B000 SHELL32.dll base=0x7FFC15C50000 size=0x771000 ADVAPI32.dll base=0x7FFC15980000 size=0xB2000 sechost.dll base=0x7FFC151E0000 size=0xA0000 bcrypt.dll base=0x7FFC14810000 size=0x27000 ole32.dll base=0x7FFC15850000 size=0x12B000 OLEAUT32.dll base=0x7FFC15B70000 size=0xD6000 SETUPAPI.dll base=0x7FFC153E0000 size=0x470000 cfgmgr32.dll base=0x7FFC14E80000 size=0x4E000 imagehlp.dll base=0x7FFC16F90000 size=0x1D000 WLDAP32.dll base=0x7FFC15150000 size=0x5F000 HID.DLL base=0x7FFC12E60000 size=0xD000 Normaliz.dll base=0x7FFC165E0000 size=0x8000 VERSION.dll base=0x7FFC0C530000 size=0xA000 dbgcore.DLL base=0x7FFBF3640000 size=0x34000 kernel.appcore.dll base=0x7FFC124A0000 size=0x12000 bcryptPrimitives.dll base=0x7FFC14870000 size=0x82000 clbcatq.dll base=0x7FFC16B60000 size=0xA9000 amsi.dll base=0x7FFBF0DE0000 size=0x1F000 USERENV.dll base=0x7FFC14500000 size=0x2E000 profapi.dll base=0x7FFC14590000 size=0x25000 MpOav.dll base=0x7FFBF0D30000 size=0xA4000 windows.storage.dll base=0x7FFC126B0000 size=0x7AC000 Wldp.dll base=0x7FFC13F30000 size=0x2B000 uxtheme.dll base=0x7FFC11FB0000 size=0x9E000 secur32.dll base=0x7FFBF7F60000 size=0xC000 SSPICLI.DLL base=0x7FFC14530000 size=0x32000 coml2.dll base=0x7FFC14FF0000 size=0x79000 asycfilt.dll base=0x7FFC0ECF0000 size=0x1A000 uvh64.dll base=0x7FFBB3320000 size=0x2B000 MSCTF.dll base=0x7FFC15A50000 size=0x116000 Riched20.dll base=0x7FFBE3BF0000 size=0x9A000 msls31.dll base=0x7FFBE7DC0000 size=0x39000 dataexchange.dll base=0x7FFBF1C90000 size=0x3E000 dcomp.dll base=0x7FFC10D80000 size=0x1E5000 d3d11.dll base=0x7FFC0FFA0000 size=0x264000 twinapi.appcore.dll base=0x7FFC0CBB0000 size=0x203000 textinputframework.dll base=0x7FFC09D90000 size=0xF9000 CoreUIComponents.dll base=0x7FFC0F040000 size=0x35B000 CoreMessaging.dll base=0x7FFC10C80000 size=0xF2000 ntmarta.dll base=0x7FFC13810000 size=0x33000 wintypes.dll base=0x7FFC0F9E0000 size=0x157000 TextShaping.dll base=0x7FFBF4330000 size=0xAC000 lsp64.dll base=0x7FFBFB5F0000 size=0x2E3000 mswsock.dll base=0x7FFC13C80000 size=0x6A000 WINTRUST.DLL base=0x7FFC14F70000 size=0x74000 MSASN1.dll base=0x7FFC143A0000 size=0x12000 CRYPTSP.dll base=0x7FFC142F0000 size=0x18000 rsaenh.dll base=0x7FFC135C0000 size=0x38000 CRYPTBASE.dll base=0x7FFC13EA0000 size=0xC000 DNSAPI.dll base=0x7FFC139C0000 size=0xCC000 NSI.dll base=0x7FFC15A40000 size=0x8000 rasadhlp.dll base=0x7FFC02120000 size=0xA000 fwpuclnt.dll base=0x7FFC0D250000 size=0x80000 bink2w64.dll base=0x7FFBCF170000 size=0x74000 fmod.dll base=0x7FFB9EFB0000 size=0x21A000 DSOUND.DLL base=0x7FFBD0AE0000 size=0x9C000 winmmbase.dll base=0x7FFBEB520000 size=0x26000 powrprof.dll base=0x7FFC140E0000 size=0x4B000 UMPDC.dll base=0x7FFC140C0000 size=0x12000 fmodstudio.dll base=0x7FFBAE870000 size=0x190000 MMDevApi.dll base=0x7FFC0CF30000 size=0x85000 DEVOBJ.dll base=0x7FFC143E0000 size=0x33000 AUDIOSES.DLL base=0x7FFC0CFC0000 size=0x181000 resourcepolicyclient.dll base=0x7FFC120A0000 size=0x14000 d3d12.dll base=0x7FFBE7D50000 size=0x25000 D3D12Core.dll base=0x7FFB9E240000 size=0x1CD000 dxcore.dll base=0x7FFC0EBB0000 size=0x3B000 cryptnet.dll base=0x7FFC0C4F0000 size=0x31000 drvstore.dll base=0x7FFC0C130000 size=0x148000 nvspcap64.dll base=0x7FFBE8EF0000 size=0x147000 xinput1_4.dll base=0x7FFBEE320000 size=0x11000 inputhost.dll base=0x7FFC09E90000 size=0x152000 PROPSYS.dll base=0x7FFC11790000 size=0xFA000 gpapi.dll base=0x7FFC13CF0000 size=0x23000 WINNSI.DLL base=0x7FFC0ED90000 size=0xB000 sl.interposer.dll base=0x7FFBCA450000 size=0xA1000 MSVCP140.dll base=0x7FFBF37A0000 size=0x88000 VCRUNTIME140_1.dll base=0x7FFBFAC60000 size=0xB000 VCRUNTIME140.dll base=0x7FFBF9E40000 size=0x1E000 nvapi64.dll base=0x7FFC019E0000 size=0x585000 sl.common.dll base=0x7FFBB33D0000 size=0xDD000 _nvngx.dll base=0x7FFBAD710000 size=0x176000 DEVRTL.dll base=0x7FFBF9F70000 size=0x14000 SPINF.dll base=0x7FFC040B0000 size=0x1C000 sl.pcl.dll base=0x7FFBD5520000 size=0x58000 sl.reflex.dll base=0x7FFBCA3F0000 size=0x5E000 D3D12Core.dll base=0x7FFB9D450000 size=0x48F000 nvldumdx.dll base=0x7FFC09BB0000 size=0xC4000 nvgpucomp64.dll base=0x7FFC047F0000 size=0x3D93000 NvMessageBus.dll base=0x7FFBFB9B0000 size=0x363000 NvMemMapStoragex.dll base=0x7FFC018A0000 size=0xDE000 schannel.DLL base=0x7FFC134D0000 size=0x9B000 nvwgf2umx.dll base=0x7FFBFBE80000 size=0x5834000 mskeyprotect.dll base=0x7FFBEDBB0000 size=0x15000 NTASN1.dll base=0x7FFC13F60000 size=0x3B000 ncrypt.dll base=0x7FFC13FA0000 size=0x27000 ncryptsslp.dll base=0x7FFBEE380000 size=0x26000 nvppex.dll base=0x7FFB9FE30000 size=0x1B7000 D3DSCache.dll base=0x7FFBE7820000 size=0x2B000 libxess.dll base=0x7FFB6A7E0000 size=0x4A3A000 dwmapi.dll base=0x7FFC122C0000 size=0x2E000 wbemprox.dll base=0x7FFC0C6F0000 size=0x11000 wbemcomn.dll base=0x7FFC0E6B0000 size=0x90000 wbemsvc.dll base=0x7FFC0BA20000 size=0x14000 fastprox.dll base=0x7FFC0BBB0000 size=0x10C000 --- PE Sections (PathOfExile.exe) --- .section .text VA=0x1000 VSize=0x2E8555E .section .rdata VA=0x2E87000 VSize=0xB7C086 .section .data VA=0x3A04000 VSize=0xD163DC .section .pdata VA=0x471B000 VSize=0x1C4B98 .section _RDATA VA=0x48E0000 VSize=0x4E10 .section .rsrc VA=0x48E5000 VSize=0x27FDF8 .section .reloc VA=0x4B65000 VSize=0x138B54 [OK] Da gan vao PID 43084 (elevated) [USAGE] memprobe.exe probe-pools --mana .. --spirit .. --spirit-cur .. [OK] Da gan vao PID 43084 (elevated) === BRIDGE SEARCH target=0x0 === [ERROR] target = 0 va khong co player_candidates.txt [OK] Da gan vao PID 43084 (elevated) [USAGE] memprobe.exe probe-pools --mana .. --spirit .. --spirit-cur .. [OK] Da gan vao PID 43084 (elevated) === LABEL-REGISTRY (PID 43084) === [LABEL] fingerprint HP=1 ES=4713 Ward=240 Mana=876 Spirit=7/147 [LABEL] build=6AA2213C toml=C:\Projects\AutoPOE2\bin\Release\offsets_6AA2213C.toml match=Match [LABEL] hits=10 labels=4 json=C:\Projects\AutoPOE2\bin\Release\live_label_6AA2213C.json target=EnergyShield kind=relative_offset rva=0xC evidence=HeapFingerprint ES (no static root) target=Ward kind=relative_offset rva=0x20 evidence=HeapFingerprint Ward (no static root) target=Mana kind=relative_offset rva=0x420 evidence=HeapFingerprint Mana (no static root) target=Spirit kind=relative_offset rva=0x44C evidence=HeapFingerprint Spirit (no static root)