[OK] Da gan vao PID 25032 (elevated) === MAP (PID 25032) === PathOfExile.exe base=0x7FF70EB60000 size=0x4C9D000 ntdll.dll base=0x7FFC16FF0000 size=0x1F9000 KERNEL32.DLL base=0x7FFC15310000 size=0xC2000 KERNELBASE.dll base=0x7FFC14A60000 size=0x2F7000 apphelp.dll base=0x7FFC0F5F0000 size=0x94000 WS2_32.dll base=0x7FFC16E10000 size=0x6B000 RPCRT4.dll base=0x7FFC163D0000 size=0x126000 IMM32.dll base=0x7FFC151B0000 size=0x2F000 USER32.dll base=0x7FFC16C70000 size=0x19D000 win32u.dll base=0x7FFC14840000 size=0x22000 GDI32.dll base=0x7FFC165B0000 size=0x2B000 dbghelp.dll base=0x7FFC02780000 size=0x201000 gdi32full.dll base=0x7FFC14D60000 size=0x11A000 msvcp_win.dll base=0x7FFC14ED0000 size=0x9D000 ucrtbase.dll base=0x7FFC14710000 size=0x100000 CRYPT32.dll base=0x7FFC14900000 size=0x15D000 WINMM.dll base=0x7FFC03160000 size=0x27000 COMCTL32.dll base=0x7FFBF9970000 size=0x29B000 COMDLG32.dll base=0x7FFC15070000 size=0xDA000 IPHLPAPI.DLL base=0x7FFC13980000 size=0x3B000 msvcrt.dll base=0x7FFC16510000 size=0x9E000 combase.dll base=0x7FFC165F0000 size=0x353000 gdiplus.dll base=0x7FFBFAD50000 size=0x1AB000 dxgi.dll base=0x7FFC12E70000 size=0xF6000 shcore.dll base=0x7FFC16E80000 size=0xAD000 USP10.dll base=0x7FFBD6E40000 size=0x19000 SHLWAPI.dll base=0x7FFC16C10000 size=0x5B000 SHELL32.dll base=0x7FFC15C50000 size=0x771000 ADVAPI32.dll base=0x7FFC15980000 size=0xB2000 sechost.dll base=0x7FFC151E0000 size=0xA0000 bcrypt.dll base=0x7FFC14810000 size=0x27000 ole32.dll base=0x7FFC15850000 size=0x12B000 OLEAUT32.dll base=0x7FFC15B70000 size=0xD6000 SETUPAPI.dll base=0x7FFC153E0000 size=0x470000 cfgmgr32.dll base=0x7FFC14E80000 size=0x4E000 imagehlp.dll base=0x7FFC16F90000 size=0x1D000 WLDAP32.dll base=0x7FFC15150000 size=0x5F000 HID.DLL base=0x7FFC12E60000 size=0xD000 Normaliz.dll base=0x7FFC165E0000 size=0x8000 VERSION.dll base=0x7FFC0C530000 size=0xA000 dbgcore.DLL base=0x7FFBF3640000 size=0x34000 kernel.appcore.dll base=0x7FFC124A0000 size=0x12000 bcryptPrimitives.dll base=0x7FFC14870000 size=0x82000 clbcatq.dll base=0x7FFC16B60000 size=0xA9000 amsi.dll base=0x7FFBF0DE0000 size=0x1F000 USERENV.dll base=0x7FFC14500000 size=0x2E000 profapi.dll base=0x7FFC14590000 size=0x25000 MpOav.dll base=0x7FFBF0D30000 size=0xA4000 windows.storage.dll base=0x7FFC126B0000 size=0x7AC000 Wldp.dll base=0x7FFC13F30000 size=0x2B000 uxtheme.dll base=0x7FFC11FB0000 size=0x9E000 secur32.dll base=0x7FFBF7F60000 size=0xC000 SSPICLI.DLL base=0x7FFC14530000 size=0x32000 coml2.dll base=0x7FFC14FF0000 size=0x79000 asycfilt.dll base=0x7FFBAE340000 size=0x1A000 uvh64.dll base=0x7FFB9E010000 size=0x2B000 MSCTF.dll base=0x7FFC15A50000 size=0x116000 Riched20.dll base=0x7FFBD6E60000 size=0x9A000 msls31.dll base=0x7FFBD6E00000 size=0x39000 dataexchange.dll base=0x7FFBD6870000 size=0x3E000 d3d11.dll base=0x7FFC0FFA0000 size=0x264000 dcomp.dll base=0x7FFC10D80000 size=0x1E5000 twinapi.appcore.dll base=0x7FFC0CBB0000 size=0x203000 textinputframework.dll base=0x7FFC09D90000 size=0xF9000 CoreUIComponents.dll base=0x7FFC0F040000 size=0x35B000 CoreMessaging.dll base=0x7FFC10C80000 size=0xF2000 ntmarta.dll base=0x7FFC13810000 size=0x33000 wintypes.dll base=0x7FFC0F9E0000 size=0x157000 TextShaping.dll base=0x7FFBF4330000 size=0xAC000 lsp64.dll base=0x7FFBFB5F0000 size=0x2E3000 mswsock.dll base=0x7FFC13C80000 size=0x6A000 MSASN1.dll base=0x7FFC143A0000 size=0x12000 CRYPTSP.dll base=0x7FFC142F0000 size=0x18000 rsaenh.dll base=0x7FFC135C0000 size=0x38000 CRYPTBASE.dll base=0x7FFC13EA0000 size=0xC000 DNSAPI.dll base=0x7FFC139C0000 size=0xCC000 NSI.dll base=0x7FFC15A40000 size=0x8000 rasadhlp.dll base=0x7FFC02120000 size=0xA000 fwpuclnt.dll base=0x7FFC0D250000 size=0x80000 schannel.DLL base=0x7FFC134D0000 size=0x9B000 mskeyprotect.dll base=0x7FFBEDBB0000 size=0x15000 NTASN1.dll base=0x7FFC13F60000 size=0x3B000 ncrypt.dll base=0x7FFC13FA0000 size=0x27000 ncryptsslp.dll base=0x7FFBEE380000 size=0x26000 bink2w64.dll base=0x7FFBEB220000 size=0x74000 fmod.dll base=0x7FFB47110000 size=0x21A000 DSOUND.DLL base=0x7FFB9DCC0000 size=0x9C000 powrprof.dll base=0x7FFC140E0000 size=0x4B000 winmmbase.dll base=0x7FFBE3CE0000 size=0x26000 UMPDC.dll base=0x7FFC140C0000 size=0x12000 fmodstudio.dll base=0x7FFB46F80000 size=0x190000 MMDevApi.dll base=0x7FFC0CF30000 size=0x85000 DEVOBJ.dll base=0x7FFC143E0000 size=0x33000 AUDIOSES.DLL base=0x7FFC0CFC0000 size=0x181000 resourcepolicyclient.dll base=0x7FFC120A0000 size=0x14000 WINTRUST.dll base=0x7FFC14F70000 size=0x74000 d3d12.dll base=0x7FFC0B670000 size=0x25000 D3D12Core.dll base=0x7FFB46DB0000 size=0x1CD000 dxcore.dll base=0x7FFC0EBB0000 size=0x3B000 cryptnet.dll base=0x7FFC0C4F0000 size=0x31000 drvstore.dll base=0x7FFC0C130000 size=0x148000 nvspcap64.dll base=0x7FFB94D00000 size=0x147000 xinput1_4.dll base=0x7FFBE5DD0000 size=0x11000 inputhost.dll base=0x7FFC09E90000 size=0x152000 PROPSYS.dll base=0x7FFC11790000 size=0xFA000 gpapi.dll base=0x7FFC13CF0000 size=0x23000 WINNSI.DLL base=0x7FFC0ED90000 size=0xB000 WINHTTP.dll base=0x7FFC0D7A0000 size=0x10D000 dhcpcsvc6.DLL base=0x7FFC0E430000 size=0x17000 dhcpcsvc.DLL base=0x7FFC0E270000 size=0x1E000 webio.dll base=0x7FFBFA940000 size=0x99000 sl.interposer.dll base=0x7FFBEB170000 size=0xA1000 MSVCP140.dll base=0x7FFBF37A0000 size=0x88000 VCRUNTIME140_1.dll base=0x7FFBFAC60000 size=0xB000 VCRUNTIME140.dll base=0x7FFBF9E40000 size=0x1E000 nvapi64.dll base=0x7FFC019E0000 size=0x585000 sl.common.dll base=0x7FFB5D410000 size=0xDD000 _nvngx.dll base=0x7FFB46C30000 size=0x176000 DEVRTL.dll base=0x7FFBF9F70000 size=0x14000 SPINF.dll base=0x7FFC040B0000 size=0x1C000 sl.pcl.dll base=0x7FFBE5E00000 size=0x58000 sl.reflex.dll base=0x7FFB5D3B0000 size=0x5E000 D3D12Core.dll base=0x7FFB467A0000 size=0x48F000 nvldumdx.dll base=0x7FFC09BB0000 size=0xC4000 nvgpucomp64.dll base=0x7FFC047F0000 size=0x3D93000 NvMessageBus.dll base=0x7FFBFB9B0000 size=0x363000 NvMemMapStoragex.dll base=0x7FFC018A0000 size=0xDE000 nvwgf2umx.dll base=0x7FFBFBE80000 size=0x5834000 nvppex.dll base=0x7FFB94B40000 size=0x1B7000 D3DSCache.dll base=0x7FFBEB350000 size=0x2B000 libxess.dll base=0x7FFB3B500000 size=0x4A3A000 dwmapi.dll base=0x7FFC122C0000 size=0x2E000 wbemprox.dll base=0x7FFC0C6F0000 size=0x11000 wbemcomn.dll base=0x7FFC0E6B0000 size=0x90000 wbemsvc.dll base=0x7FFC0BA20000 size=0x14000 fastprox.dll base=0x7FFC0BBB0000 size=0x10C000 dxcompiler.dll base=0x7FFB40DB0000 size=0x112A000 dxil.dll base=0x7FFB46630000 size=0x168000 Windows.UI.dll base=0x7FFC09FF0000 size=0x140000 WindowManagementAPI.dll base=0x7FFC0CE00000 size=0xA1000 --- PE Sections (PathOfExile.exe) --- .section .text VA=0x1000 VSize=0x2E840BE .section .rdata VA=0x2E86000 VSize=0xB7C3A6 .section .data VA=0x3A03000 VSize=0xD163DC .section .pdata VA=0x471A000 VSize=0x1C4B20 .section _RDATA VA=0x48DF000 VSize=0x4E10 .section .rsrc VA=0x48E4000 VSize=0x27FDF8 .section .reloc VA=0x4B64000 VSize=0x138B0C [OK] Da gan vao PID 25032 (elevated) === AOB SCAN (PID 25032) === Module: base=0x7FF70EB60000 size=0x4C9D000 [OK] Da gan vao PID 25032 (elevated) === READ 0x7FF70EB60000 (64 bytes) === hex64: 4D 5A 90 00 03 00 00 00 04 00 00 00 FF FF 00 00 B8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 01 00 00 [OK] Da gan vao PID 25032 (elevated) === AOB SCAN (PID 25032) === Module: base=0x7FF70EB60000 size=0x4C9D000 [MISS] InGameStateBase (pattern khong khop ban build nay) [MISS] VolumetricFog (pattern khong khop ban build nay) [MISS] EntityListRoot (pattern khong khop ban build nay) [MISS] AreaExploration (pattern khong khop ban build nay) [OK] Da gan vao PID 14672 (elevated) === SCAN-HP value=42 (full scan) === [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 9 ung vien [progress] 0 MB, 9 ung vien [progress] 0 MB, 9 ung vien [progress] 0 MB, 10 ung vien [progress] 0 MB, 10 ung vien [progress] 0 MB, 10 ung vien [progress] 2048 MB, 11999 ung vien [progress] 4096 MB, 31808 ung vien [progress] 5120 MB, 48072 ung vien [progress] 5120 MB, 48072 ung vien [progress] 10752 MB, 180709 ung vien [progress] 10752 MB, 180709 ung vien [progress] 10752 MB, 180709 ung vien [progress] 10752 MB, 180709 ung vien [progress] 10752 MB, 180709 ung vien [progress] 10752 MB, 180718 ung vien [progress] 10752 MB, 180718 ung vien [progress] 10752 MB, 180766 ung vien [progress] 10752 MB, 180766 ung vien [progress] 10752 MB, 180799 ung vien [progress] 10752 MB, 180802 ung vien [progress] 10752 MB, 180876 ung vien [progress] 10752 MB, 180876 ung vien [progress] 10752 MB, 180877 ung vien [progress] 10752 MB, 180877 ung vien [progress] 10752 MB, 180877 ung vien [progress] 10752 MB, 180877 ung vien [progress] 10752 MB, 180877 ung vien [progress] 10752 MB, 180877 ung vien [progress] 10752 MB, 180877 ung vien [progress] 10752 MB, 180877 ung vien [progress] 10752 MB, 180877 ung vien [progress] 10752 MB, 180878 ung vien [progress] 10752 MB, 180878 ung vien [progress] 10752 MB, 180878 ung vien [progress] 10752 MB, 180878 ung vien [progress] 10752 MB, 180885 ung vien [progress] 10752 MB, 180890 ung vien [progress] 10752 MB, 180890 ung vien [progress] 10752 MB, 180890 ung vien [progress] 10752 MB, 180890 ung vien Ket qua: 183550 ung vien (luu tai C:\Projects\AutoPOE2\bin\Release !'-3i9o?e{qwMCP4"@5"Y_UC:\Projects\AutoPOE2\bin\Release\hp_candidates.txt) 0xB9855E9F00 0xB9855E9F28 0xB9855E9F60 0xB9855E9F84 0xB9855ED088 0xB9855ED0E0 0xB9855ED1C8 0xB9855ED1D0 0xB9855ED1D8 0xB987DFF380 0xB98E5FB9D8 0xB9905F60C8 0xB9905F6188 0xB9905FE194 0xB9915FDC8C 0xB991DFBBF4 0xB991DFD97C 0xB9925FD4FC 0xB9925FDC54 0xB993DF61E8 0xB993DF64C8 0xB993DFB838 0xB993DFB850 0xB993DFB8A0 0xB993DFB900 0xB9965FDF54 0xB996DF2160 0xB996DF2270 0xB996DF2518 0xB99ADE4C90 ... va 183520 dia chi khac trong file Huong dan: de nhan vat mat/hoi mau roi chay: memprobe.exe scan-hp --rescan C:\Projects\AutoPOE2\bin\Release !'-3i9o?e{qwMCP4"@5"Y_UC:\Projects\AutoPOE2\bin\Release\hp_candidates.txt [OK] Da gan vao PID 14672 (elevated) === SCAN-HP value=42 (full scan) === [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 9 ung vien [progress] 0 MB, 9 ung vien [progress] 0 MB, 9 ung vien [progress] 4096 MB, 29065 ung vien [progress] 4096 MB, 29065 ung vien [progress] 4096 MB, 29080 ung vien [progress] 4096 MB, 29080 ung vien [progress] 4096 MB, 29114 ung vien [progress] 4096 MB, 29139 ung vien [progress] 4096 MB, 29167 ung vien [progress] 4096 MB, 29210 ung vien [progress] 4608 MB, 36472 ung vien [progress] 4608 MB, 36498 ung vien [progress] 4608 MB, 36518 ung vien [progress] 4608 MB, 36533 ung vien [progress] 4608 MB, 36533 ung vien [progress] 4608 MB, 36627 ung vien [progress] 4608 MB, 36627 ung vien [progress] 4608 MB, 36722 ung vien [progress] 4608 MB, 36736 ung vien [progress] 4608 MB, 36869 ung vien [progress] 4608 MB, 36869 ung vien [progress] 4608 MB, 36896 ung vien [progress] 4608 MB, 36952 ung vien [progress] 4608 MB, 36952 ung vien [progress] 4608 MB, 37011 ung vien [progress] 4608 MB, 37030 ung vien [progress] 4608 MB, 37061 ung vien [progress] 4608 MB, 37073 ung vien [progress] 4608 MB, 37073 ung vien [progress] 4608 MB, 37124 ung vien [progress] 4608 MB, 37192 ung vien [progress] 4608 MB, 37217 ung vien [progress] 4608 MB, 37240 ung vien [progress] 4608 MB, 37288 ung vien [progress] 5632 MB, 53596 ung vien [OK] Da ghi 195791 ung vien vao hp_candidates.txt Ket qua: 195791 ung vien 0xB9855E9F00 0xB9855E9F28 0xB9855E9F60 0xB9855E9F84 0xB9855ED088 0xB9855ED0E0 0xB9855ED1C8 0xB9855ED1D0 0xB9855ED1D8 0xB9895F3374 0xB9905F60C8 0xB9905F6188 0xB9915F7BA8 0xB9935FE1A4 0xB993DF61E8 0xB993DF64C8 0xB996DF2160 0xB996DF2270 0xB996DF2518 0xB996DF8E98 0xB996DF9108 0xB996DF9978 0xB998DF8E88 0xB99ADE4C90 0xB99ADE4D48 0xB99ADE4DE0 0xB99ADE4E28 0xB99FDF9238 0xB9A05F6660 0xB9A05F84A4 ... va 195761 dia chi khac trong hp_candidates.txt Huong dan: de nhan vat mat/hoi mau roi chay: memprobe.exe scan-hp --rescan hp_candidates.txt [SCAN DONE] [OK] Da gan vao PID 14672 (elevated) === SCAN-HP rescan-changed (bo dia chi van == 42) === [OK] Da ghi 4235 ung vien vao hp_candidates.txt Ket qua: 4235 ung vien 0xB9935FE1A4 0xB996DF9108 0xB9A05FEFD0 0xB9A05FF210 0xB9A85FD438 0xB9A8DFDF78 0xB9A8DFDFB8 0xB9A8DFDFD0 0xB9A8DFDFF0 0xB9A8DFF608 0x255001B3DD8 0x255001B50BC 0x255001B5E84 0x255001BB628 0x255001C3ED8 0x255001C51BC 0x255001C5F84 0x255001CB728 0x255001CD95C 0x255001DDA5C 0x255001EDB5C 0x255001EE67C 0x255001F73E0 0x255001F76C0 0x255001FAFC0 0x255001FB158 0x255001FB638 0x255001FBBBC 0x255001FF91C 0x255002244F8 ... va 4205 dia chi khac trong hp_candidates.txt Huong dan: de nhan vat mat/hoi mau roi chay: memprobe.exe scan-hp --rescan hp_candidates.txt [SCAN DONE] [OK] Da gan vao PID 14672 (elevated) === SCAN-HP rescan value=42 === [OK] Da ghi 58 ung vien vao hp_candidates.txt Ket qua: 58 ung vien 0xB996DF9108 0x2550922A384 0x287545A3BC4 0x2875A965D60 0x2875A965D6C 0x2875A965D78 0x2875A965D84 0x2875A965D90 0x2875A965D9C 0x2875A965DA8 0x2875A965DB4 0x2875A965DC0 0x2875A965DCC 0x2875A965DD8 0x2875A965DE4 0x2875A965DF0 0x2875A965DFC 0x287606DA080 0x288B608CBB4 0x288B608CBBC 0x289336E17C0 0x2893382AE30 0x2893DBC1F10 0x28947F2C2F0 0x28965E6F510 0x28965E6F548 0x289A1145150 0x289D89625F4 0x289DE7FF3DC 0x289E7D2CAF4 ... va 28 dia chi khac trong hp_candidates.txt Huong dan: de nhan vat mat/hoi mau roi chay: memprobe.exe scan-hp --rescan hp_candidates.txt [SCAN DONE] [OK] Da gan vao PID 14672 (elevated) === SCAN-HP rescan-changed (bo dia chi van == 42) === [OK] Da ghi 19 ung vien vao hp_candidates.txt Ket qua: 19 ung vien 0x2875A965D60 0x2875A965D6C 0x2875A965D78 0x2875A965D84 0x2875A965D90 0x2875A965D9C 0x2875A965DA8 0x2875A965DB4 0x2875A965DC0 0x2875A965DCC 0x2875A965DD8 0x2875A965DE4 0x2875A965DF0 0x2875A965DFC 0x287606DA080 0x2893DBC1F10 0x28965E6F510 0x28965E6F548 0x289D89625F4 Huong dan: de nhan vat mat/hoi mau roi chay: memprobe.exe scan-hp --rescan hp_candidates.txt [SCAN DONE] [OK] Da gan vao PID 14672 (elevated) === SCAN-HP rescan value=42 === [OK] Da ghi 14 ung vien vao hp_candidates.txt Ket qua: 14 ung vien 0x2875A965D60 0x2875A965D6C 0x2875A965D78 0x2875A965D84 0x2875A965D90 0x2875A965D9C 0x2875A965DA8 0x2875A965DB4 0x2875A965DC0 0x2875A965DCC 0x2875A965DD8 0x2875A965DE4 0x2875A965DF0 0x2875A965DFC Huong dan: de nhan vat mat/hoi mau roi chay: memprobe.exe scan-hp --rescan hp_candidates.txt [SCAN DONE] [OK] Da gan vao PID 14672 (elevated) === READALL (C:\Projects\AutoPOE2\bin\Release]WN`` DBXC:\Projects\AutoPOE2\bin\Release\hp_candidates.txt) === [ERROR] Khong doc duoc file: C:\Projects\AutoPOE2\bin\Release]WN`` DBXC:\Projects\AutoPOE2\bin\Release\hp_candidates.txt [OK] Da gan vao PID 14672 (elevated) === READALL (C:\Projects\AutoPOE2\bin\Release\hp_candidates.txt) === 0x2875A965D60 = 35 0x2875A965D6C = 35 0x2875A965D78 = 35 0x2875A965D84 = 35 0x2875A965D90 = 35 0x2875A965D9C = 35 0x2875A965DA8 = 35 0x2875A965DB4 = 35 0x2875A965DC0 = 35 0x2875A965DCC = 35 0x2875A965DD8 = 35 0x2875A965DE4 = 35 0x2875A965DF0 = 35 0x2875A965DFC = 35 [READALL DONE] [OK] Da gan vao PID 14672 (elevated) === READ 0x2875A965D40 (160 bytes) === hex64: 20 00 00 00 00 00 00 00 FF FF FF FF 00 00 00 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 00 00 00 00 00 FF FF FF FF 20 00 00 00 00 00 00 00 FF FF FF FF 20 00 00 00 00 00 00 00 [OK] Da gan vao PID 14672 (elevated) === READALL (C:\Projects\AutoPOE2\bin\Release\hp_candidates.txt) === 0x2875A965D60 = 25 0x2875A965D6C = 25 0x2875A965D78 = 25 0x2875A965D84 = 25 0x2875A965D90 = 25 0x2875A965D9C = 25 0x2875A965DA8 = 25 0x2875A965DB4 = 25 0x2875A965DC0 = 35 0x2875A965DCC = 35 0x2875A965DD8 = 35 0x2875A965DE4 = 35 0x2875A965DF0 = 35 0x2875A965DFC = 35 [READALL DONE] [OK] Da gan vao PID 14672 (elevated) === READ 0x2875A965C60 (320 bytes) === hex64: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 00 00 00 0A 00 00 FF F5 FF FF 04 00 00 00 [OK] Da gan vao PID 14672 (elevated) === PTRSCAN target=0x2875A965D60 === Gia tri hien tai tai target = 32 Allocation: base=0x2875A740000 span=0x2000000 [pass 1] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 6144 MB, 991 match [progress] 6144 MB, 991 match [progress] 6144 MB, 991 match [progress] 8192 MB, 1042 match [pass 1] xong: 1068 match Trung gian heap: 68 con tro (dung cho Pass 2) [pass 2] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 3 match [progress] 0 MB, 3 match [progress] 0 MB, 3 match [progress] 0 MB, 3 match [progress] 0 MB, 3 match [progress] 6144 MB, 9472 match [progress] 6144 MB, 9472 match [progress] 6144 MB, 9472 match [progress] 8192 MB, 10518 match [progress] 10240 MB, 10658 match [progress] 10240 MB, 10658 match [pass 2] xong: 10685 match [heap L2] 0xB9855EEB50 +0x39A8 -> 0x2874D7DD408 +0x3050 -> HP [heap L2] 0xB9855EEB50 +0x39B0 -> 0x2874D7DD410 +0x2E70 -> HP [heap L2] 0xB9855EEB50 +0xFB28 -> 0x2874D7E9588 +0x1060 -> HP [heap L2] 0xB9855EEB50 +0xFB30 -> 0x2874D7E9590 +0xF40 -> HP [heap L2] 0xB9855EF230 +0x39A8 -> 0x2874D7DD408 +0x3050 -> HP [heap L2] 0xB9855EF230 +0x39B0 -> 0x2874D7DD410 +0x2E70 -> HP [heap L2] 0xB9855EF230 +0xFB28 -> 0x2874D7E9588 +0x1060 -> HP [heap L2] 0xB9855EF230 +0xFB30 -> 0x2874D7E9590 +0xF40 -> HP [heap L2] 0xB9855FDE60 +0x69A8 -> 0x2874D7E9588 +0x1060 -> HP [heap L2] 0xB9855FDE60 +0x69B0 -> 0x2874D7E9590 +0xF40 -> HP [heap L2] 0xB9855FDE60 +0x7628 -> 0x2874D7EA208 +0x70 -> HP [heap L2] 0xB9855FDE60 +0x7630 -> 0x2874D7EA210 +0x64 -> HP [heap L2] 0xB9855FDE60 +0x8E28 -> 0x2874D7EBA08 +0x0 -> HP [heap L2] 0xB9855FDE60 +0x8F28 -> 0x2874D7EBB08 +0x50 -> HP [heap L2] 0xB9855FDE60 +0x8F30 -> 0x2874D7EBB10 +0x14 -> HP [heap L2] 0xB9855FDE60 +0x9528 -> 0x2874D7EC108 +0xD0 -> HP [heap L2] 0xB9855FDE60 +0x9530 -> 0x2874D7EC110 +0x7C -> HP [heap L2] 0xB9895EF550 +0x39A8 -> 0x2874D7DD408 +0x3050 -> HP [heap L2] 0xB9895EF550 +0x39B0 -> 0x2874D7DD410 +0x2E70 -> HP [heap L2] 0xB9895EF550 +0xFB28 -> 0x2874D7E9588 +0x1060 -> HP [heap L2] 0xB9895EF550 +0xFB30 -> 0x2874D7E9590 +0xF40 -> HP [heap L2] 0xB9895FA8E0 +0x39A8 -> 0x2874D7DD408 +0x3050 -> HP [heap L2] 0xB9895FA8E0 +0x39B0 -> 0x2874D7DD410 +0x2E70 -> HP [heap L2] 0xB9895FA8E0 +0xFB28 -> 0x2874D7E9588 +0x1060 -> HP [heap L2] 0xB9895FA8E0 +0xFB30 -> 0x2874D7E9590 +0xF40 -> HP [heap L2] 0xB9895FB310 +0x3930 -> 0x287A31A5940 +0x760 -> HP [heap L2] 0xB9895FBF78 +0x3328 -> 0x2874D7DD408 +0x3050 -> HP [heap L2] 0xB9895FBF78 +0x3330 -> 0x2874D7DD410 +0x2E70 -> HP [heap L2] 0xB9895FBF78 +0xF4A8 -> 0x2874D7E9588 +0x1060 -> HP [heap L2] 0xB9895FBF78 +0xF4B0 -> 0x2874D7E9590 +0xF40 -> HP [heap L2] 0xB9895FCBC0 +0xB10 -> 0x2874D7EA208 +0x70 -> HP [heap L2] 0xB9895FCBC0 +0xB18 -> 0x2874D7EA210 +0x64 -> HP [heap L2] 0xB9895FCBC0 +0x2310 -> 0x2874D7EBA08 +0x0 -> HP [heap L2] 0xB9895FCBC0 +0x2410 -> 0x2874D7EBB08 +0x50 -> HP [heap L2] 0xB9895FCBC0 +0x2418 -> 0x2874D7EBB10 +0x14 -> HP [heap L2] 0xB9895FCBC0 +0x2A10 -> 0x2874D7EC108 +0xD0 -> HP [heap L2] 0xB9895FCBC0 +0x2A18 -> 0x2874D7EC110 +0x7C -> HP [heap L2] 0xB9895FCDB8 +0xB28 -> 0x2874D7EA208 +0x70 -> HP [heap L2] 0xB9895FCDB8 +0xB30 -> 0x2874D7EA210 +0x64 -> HP [heap L2] 0xB9895FCDB8 +0x2328 -> 0x2874D7EBA08 +0x0 -> HP [PTRSCAN DONE] [OK] Da gan vao PID 14672 (elevated) === PTRSCAN target=0x2875A965D60 === Gia tri hien tai tai target = 37 Allocation: base=0x2875A740000 span=0x2000000 [pass 1] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 2048 MB, 808 match [progress] 6144 MB, 910 match [progress] 6144 MB, 910 match [progress] 6144 MB, 910 match [progress] 6144 MB, 910 match [progress] 6144 MB, 910 match [progress] 10240 MB, 986 match [progress] 10240 MB, 986 match [pass 1] xong: 988 match Trung gian heap: 61 con tro (dung cho Pass 2) [pass 2] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 2 match [progress] 0 MB, 2 match [progress] 0 MB, 2 match [progress] 2048 MB, 5001 match [progress] 6144 MB, 9457 match [progress] 6144 MB, 9457 match [progress] 6144 MB, 9457 match [progress] 6144 MB, 9457 match [progress] 6144 MB, 9457 match [progress] 10240 MB, 10617 match [progress] 10240 MB, 10617 match [pass 2] xong: 10644 match [heap L2] 0xB9855EEB50 +0x39A8 -> 0x2874D7DD408 +0x3050 -> HP [heap L2] 0xB9855EEB50 +0x39B0 -> 0x2874D7DD410 +0x2E70 -> HP [heap L2] 0xB9855EEB50 +0xFB28 -> 0x2874D7E9588 +0x1060 -> HP [heap L2] 0xB9855EEB50 +0xFB30 -> 0x2874D7E9590 +0xF40 -> HP [heap L2] 0xB9855EF230 +0x39A8 -> 0x2874D7DD408 +0x3050 -> HP [heap L2] 0xB9855EF230 +0x39B0 -> 0x2874D7DD410 +0x2E70 -> HP [heap L2] 0xB9855EF230 +0xFB28 -> 0x2874D7E9588 +0x1060 -> HP [heap L2] 0xB9855EF230 +0xFB30 -> 0x2874D7E9590 +0xF40 -> HP [heap L2] 0xB9895EF550 +0x39A8 -> 0x2874D7DD408 +0x3050 -> HP [heap L2] 0xB9895EF550 +0x39B0 -> 0x2874D7DD410 +0x2E70 -> HP [heap L2] 0xB9895EF550 +0xFB28 -> 0x2874D7E9588 +0x1060 -> HP [heap L2] 0xB9895EF550 +0xFB30 -> 0x2874D7E9590 +0xF40 -> HP [heap L2] 0xB9895FABD0 +0x3DC0 -> 0x287A31A5940 +0x760 -> HP [heap L2] 0xB9895FB3F0 +0xE7E0 -> 0x287A31A0BB0 +0xE60 -> HP [heap L2] 0xB9895FB488 +0xE7E0 -> 0x287A31A0BB0 +0xE60 -> HP [heap L2] 0xB9895FB4D8 +0xE7E0 -> 0x287A31A0BB0 +0xE60 -> HP [heap L2] 0xB9895FD0F0 +0x3A8 -> 0x2874D7EC108 +0xD0 -> HP [heap L2] 0xB9895FD0F0 +0x3B0 -> 0x2874D7EC110 +0x7C -> HP [heap L2] 0xB9895FD200 +0x3A8 -> 0x2874D7EC108 +0xD0 -> HP [heap L2] 0xB9895FD200 +0x3B0 -> 0x2874D7EC110 +0x7C -> HP [heap L2] 0xB9895FD220 +0x3A8 -> 0x2874D7EC108 +0xD0 -> HP [heap L2] 0xB9895FD220 +0x3B0 -> 0x2874D7EC110 +0x7C -> HP [heap L2] 0xB98B5EF7F0 +0x39A8 -> 0x2874D7DD408 +0x3050 -> HP [heap L2] 0xB98B5EF7F0 +0x39B0 -> 0x2874D7DD410 +0x2E70 -> HP [heap L2] 0xB98B5EF7F0 +0xFB28 -> 0x2874D7E9588 +0x1060 -> HP [heap L2] 0xB98B5EF7F0 +0xFB30 -> 0x2874D7E9590 +0xF40 -> HP [heap L2] 0xB98B5FAB80 +0x39A8 -> 0x2874D7DD408 +0x3050 -> HP [heap L2] 0xB98B5FAB80 +0x39B0 -> 0x2874D7DD410 +0x2E70 -> HP [heap L2] 0xB98B5FAB80 +0xFB28 -> 0x2874D7E9588 +0x1060 -> HP [heap L2] 0xB98B5FAB80 +0xFB30 -> 0x2874D7E9590 +0xF40 -> HP [heap L2] 0xB98B5FAED0 +0xC940 -> 0x287A31A0BB0 +0xE60 -> HP [heap L2] 0xB98B5FAF68 +0xC940 -> 0x287A31A0BB0 +0xE60 -> HP [heap L2] 0xB98B5FAFB8 +0xC940 -> 0x287A31A0BB0 +0xE60 -> HP [heap L2] 0xB98B5FB778 +0xE7E0 -> 0x287A31A0BB0 +0xE60 -> HP [heap L2] 0xB98B5FED10 +0xF0A0 -> 0x287A31A0BB0 +0xE60 -> HP [heap L2] 0xB98B5FED40 +0xF0A0 -> 0x287A31A0BB0 +0xE60 -> HP [heap L2] 0xB98B5FEDA8 +0xF0A0 -> 0x287A31A0BB0 +0xE60 -> HP [heap L2] 0xB98B5FEE18 +0xF0A0 -> 0x287A31A0BB0 +0xE60 -> HP [heap L2] 0xB98B5FEE90 +0xF0A0 -> 0x287A31A0BB0 +0xE60 -> HP [heap L2] 0xB98B5FF8C8 +0x7200 -> 0x287A31A0BB0 +0xE60 -> HP [pass 3] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 18 match [progress] 0 MB, 21 match [progress] 0 MB, 32 match [progress] 0 MB, 32 match [progress] 0 MB, 32 match [progress] 0 MB, 36 match [progress] 0 MB, 36 match [progress] 0 MB, 48 match [progress] 0 MB, 57 match [progress] 0 MB, 57 match [progress] 0 MB, 62 match [progress] 0 MB, 579 match [progress] 0 MB, 597 match [progress] 0 MB, 684 match [progress] 2048 MB, 1068768 match [progress] 6144 MB, 1935833 match [progress] 6144 MB, 1935838 match [progress] 6144 MB, 1935838 match [progress] 6144 MB, 1935838 match [progress] 6144 MB, 1935848 match [pass 3] xong: 2458977 match [CHAIN L3 - STATIC] [[[0xB984A9E960]+0x1118]+0x4A0] + 0x50 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E960]+0x2C10]+0x656F] + 0x1060 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E960]+0x2C10]+0x6577] + 0xF40 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E960]+0x2C10]+0x71EF] + 0x70 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E960]+0x2C10]+0x71F7] + 0x64 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E960]+0x2C10]+0x89EF] + 0x0 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E960]+0x2C10]+0x8AEF] + 0x50 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E960]+0x2C10]+0x8AF7] + 0x14 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E960]+0x2C10]+0x90EF] + 0xD0 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E960]+0x2C10]+0x90F7] + 0x7C -> HP [CHAIN L3 - STATIC] [[[0xB984A9E960]+0x42E8]+0x556D] + 0x1060 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E960]+0x42E8]+0x5575] + 0xF40 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E960]+0x42E8]+0x61ED] + 0x70 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E960]+0x42E8]+0x61F5] + 0x64 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E960]+0x42E8]+0x79ED] + 0x0 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E960]+0x42E8]+0x7AED] + 0x50 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E960]+0x42E8]+0x7AF5] + 0x14 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E960]+0x42E8]+0x80ED] + 0xD0 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E960]+0x42E8]+0x80F5] + 0x7C -> HP [CHAIN L3 - STATIC] [[[0xB984A9EBD0]+0x18]+0xB680] + 0x0 -> HP [CHAIN L3 - STATIC] [[[0xB984A9EBD0]+0x18]+0xBE00] + 0x50 -> HP [CHAIN L3 - STATIC] [[[0xB984A9EBD0]+0xC28]+0xB680] + 0x0 -> HP [CHAIN L3 - STATIC] [[[0xB984A9EBD0]+0xC28]+0xBE00] + 0x50 -> HP [CHAIN L3 - STATIC] [[[0xB984A9EC10]+0x18]+0xB680] + 0x0 -> HP [CHAIN L3 - STATIC] [[[0xB984A9EC10]+0x18]+0xBE00] + 0x50 -> HP (du 25 chain - ngung liet ke) [PTRSCAN DONE] [OK] Da gan vao PID 14672 (elevated) === MAP (PID 14672) === PathOfExile.exe base=0x7FF70EB60000 size=0x4C9D000 ntdll.dll base=0x7FFC16FF0000 size=0x1F9000 KERNEL32.DLL base=0x7FFC15310000 size=0xC2000 KERNELBASE.dll base=0x7FFC14A60000 size=0x2F7000 apphelp.dll base=0x7FFC0F5F0000 size=0x94000 WS2_32.dll base=0x7FFC16E10000 size=0x6B000 RPCRT4.dll base=0x7FFC163D0000 size=0x126000 IMM32.dll base=0x7FFC151B0000 size=0x2F000 USER32.dll base=0x7FFC16C70000 size=0x19D000 win32u.dll base=0x7FFC14840000 size=0x22000 GDI32.dll base=0x7FFC165B0000 size=0x2B000 dbghelp.dll base=0x7FFC02780000 size=0x201000 gdi32full.dll base=0x7FFC14D60000 size=0x11A000 ucrtbase.dll base=0x7FFC14710000 size=0x100000 msvcp_win.dll base=0x7FFC14ED0000 size=0x9D000 CRYPT32.dll base=0x7FFC14900000 size=0x15D000 COMCTL32.dll base=0x7FFBF9970000 size=0x29B000 IPHLPAPI.DLL base=0x7FFC13980000 size=0x3B000 COMDLG32.dll base=0x7FFC15070000 size=0xDA000 WINMM.dll base=0x7FFC03160000 size=0x27000 msvcrt.dll base=0x7FFC16510000 size=0x9E000 gdiplus.dll base=0x7FFBFAD50000 size=0x1AB000 combase.dll base=0x7FFC165F0000 size=0x353000 shcore.dll base=0x7FFC16E80000 size=0xAD000 dxgi.dll base=0x7FFC12E70000 size=0xF6000 USP10.dll base=0x7FFBD6E40000 size=0x19000 SHLWAPI.dll base=0x7FFC16C10000 size=0x5B000 SHELL32.dll base=0x7FFC15C50000 size=0x771000 ADVAPI32.dll base=0x7FFC15980000 size=0xB2000 sechost.dll base=0x7FFC151E0000 size=0xA0000 bcrypt.dll base=0x7FFC14810000 size=0x27000 ole32.dll base=0x7FFC15850000 size=0x12B000 OLEAUT32.dll base=0x7FFC15B70000 size=0xD6000 SETUPAPI.dll base=0x7FFC153E0000 size=0x470000 cfgmgr32.dll base=0x7FFC14E80000 size=0x4E000 imagehlp.dll base=0x7FFC16F90000 size=0x1D000 WLDAP32.dll base=0x7FFC15150000 size=0x5F000 HID.DLL base=0x7FFC12E60000 size=0xD000 Normaliz.dll base=0x7FFC165E0000 size=0x8000 VERSION.dll base=0x7FFC0C530000 size=0xA000 dbgcore.DLL base=0x7FFBF3640000 size=0x34000 kernel.appcore.dll base=0x7FFC124A0000 size=0x12000 bcryptPrimitives.dll base=0x7FFC14870000 size=0x82000 clbcatq.dll base=0x7FFC16B60000 size=0xA9000 amsi.dll base=0x7FFBF0DE0000 size=0x1F000 USERENV.dll base=0x7FFC14500000 size=0x2E000 profapi.dll base=0x7FFC14590000 size=0x25000 MpOav.dll base=0x7FFBF0D30000 size=0xA4000 windows.storage.dll base=0x7FFC126B0000 size=0x7AC000 Wldp.dll base=0x7FFC13F30000 size=0x2B000 uxtheme.dll base=0x7FFC11FB0000 size=0x9E000 secur32.dll base=0x7FFBF7F60000 size=0xC000 SSPICLI.DLL base=0x7FFC14530000 size=0x32000 coml2.dll base=0x7FFC14FF0000 size=0x79000 asycfilt.dll base=0x7FFBEE620000 size=0x1A000 uvh64.dll base=0x7FFB9E010000 size=0x2B000 MSCTF.dll base=0x7FFC15A50000 size=0x116000 Riched20.dll base=0x7FFBD6E60000 size=0x9A000 msls31.dll base=0x7FFBD6E00000 size=0x39000 dataexchange.dll base=0x7FFBD6870000 size=0x3E000 d3d11.dll base=0x7FFC0FFA0000 size=0x264000 dcomp.dll base=0x7FFC10D80000 size=0x1E5000 twinapi.appcore.dll base=0x7FFC0CBB0000 size=0x203000 textinputframework.dll base=0x7FFC09D90000 size=0xF9000 CoreMessaging.dll base=0x7FFC10C80000 size=0xF2000 CoreUIComponents.dll base=0x7FFC0F040000 size=0x35B000 ntmarta.dll base=0x7FFC13810000 size=0x33000 wintypes.dll base=0x7FFC0F9E0000 size=0x157000 TextShaping.dll base=0x7FFBF4330000 size=0xAC000 lsp64.dll base=0x7FFBFB5F0000 size=0x2E3000 mswsock.dll base=0x7FFC13C80000 size=0x6A000 WINTRUST.DLL base=0x7FFC14F70000 size=0x74000 MSASN1.dll base=0x7FFC143A0000 size=0x12000 CRYPTSP.dll base=0x7FFC142F0000 size=0x18000 rsaenh.dll base=0x7FFC135C0000 size=0x38000 CRYPTBASE.dll base=0x7FFC13EA0000 size=0xC000 DNSAPI.dll base=0x7FFC139C0000 size=0xCC000 NSI.dll base=0x7FFC15A40000 size=0x8000 rasadhlp.dll base=0x7FFC02120000 size=0xA000 fwpuclnt.dll base=0x7FFC0D250000 size=0x80000 bink2w64.dll base=0x7FFB46710000 size=0x74000 fmod.dll base=0x7FFB41CC0000 size=0x21A000 DSOUND.DLL base=0x7FFB9DCC0000 size=0x9C000 powrprof.dll base=0x7FFC140E0000 size=0x4B000 winmmbase.dll base=0x7FFBE3CE0000 size=0x26000 UMPDC.dll base=0x7FFC140C0000 size=0x12000 fmodstudio.dll base=0x7FFB41B30000 size=0x190000 MMDevApi.dll base=0x7FFC0CF30000 size=0x85000 DEVOBJ.dll base=0x7FFC143E0000 size=0x33000 AUDIOSES.DLL base=0x7FFC0CFC0000 size=0x181000 resourcepolicyclient.dll base=0x7FFC120A0000 size=0x14000 d3d12.dll base=0x7FFC0B670000 size=0x25000 D3D12Core.dll base=0x7FFB46DB0000 size=0x1CD000 dxcore.dll base=0x7FFC0EBB0000 size=0x3B000 cryptnet.dll base=0x7FFC0C4F0000 size=0x31000 drvstore.dll base=0x7FFC0C130000 size=0x148000 nvspcap64.dll base=0x7FFB94D00000 size=0x147000 xinput1_4.dll base=0x7FFBE5DD0000 size=0x11000 inputhost.dll base=0x7FFC09E90000 size=0x152000 PROPSYS.dll base=0x7FFC11790000 size=0xFA000 gpapi.dll base=0x7FFC13CF0000 size=0x23000 WINNSI.DLL base=0x7FFC0ED90000 size=0xB000 sl.interposer.dll base=0x7FFB46660000 size=0xA1000 VCRUNTIME140_1.dll base=0x7FFBFAC60000 size=0xB000 MSVCP140.dll base=0x7FFBF37A0000 size=0x88000 VCRUNTIME140.dll base=0x7FFBF9E40000 size=0x1E000 nvapi64.dll base=0x7FFC019E0000 size=0x585000 sl.common.dll base=0x7FFB41A50000 size=0xDD000 _nvngx.dll base=0x7FFB418D0000 size=0x176000 DEVRTL.dll base=0x7FFBF9F70000 size=0x14000 SPINF.dll base=0x7FFC040B0000 size=0x1C000 sl.pcl.dll base=0x7FFB41870000 size=0x58000 sl.reflex.dll base=0x7FFB41810000 size=0x5E000 D3D12Core.dll base=0x7FFB41380000 size=0x48F000 nvldumdx.dll base=0x7FFC09BB0000 size=0xC4000 nvgpucomp64.dll base=0x7FFC047F0000 size=0x3D93000 NvMessageBus.dll base=0x7FFBFB9B0000 size=0x363000 NvMemMapStoragex.dll base=0x7FFC018A0000 size=0xDE000 nvwgf2umx.dll base=0x7FFBFBE80000 size=0x5834000 schannel.DLL base=0x7FFC134D0000 size=0x9B000 nvppex.dll base=0x7FFB94B40000 size=0x1B7000 mskeyprotect.dll base=0x7FFBEDBB0000 size=0x15000 NTASN1.dll base=0x7FFC13F60000 size=0x3B000 ncrypt.dll base=0x7FFC13FA0000 size=0x27000 ncryptsslp.dll base=0x7FFBEE380000 size=0x26000 D3DSCache.dll base=0x7FFBEB350000 size=0x2B000 libxess.dll base=0x7FFB3B500000 size=0x4A3A000 dwmapi.dll base=0x7FFC122C0000 size=0x2E000 wbemprox.dll base=0x7FFC0C6F0000 size=0x11000 wbemcomn.dll base=0x7FFC0E6B0000 size=0x90000 wbemsvc.dll base=0x7FFC0BA20000 size=0x14000 fastprox.dll base=0x7FFC0BBB0000 size=0x10C000 dxcompiler.dll base=0x7FFAF5630000 size=0x112A000 dxil.dll base=0x7FFB371C0000 size=0x168000 --- PE Sections (PathOfExile.exe) --- .section .text VA=0x1000 VSize=0x2E840BE .section .rdata VA=0x2E86000 VSize=0xB7C3A6 .section .data VA=0x3A03000 VSize=0xD163DC .section .pdata VA=0x471A000 VSize=0x1C4B20 .section _RDATA VA=0x48DF000 VSize=0x4E10 .section .rsrc VA=0x48E4000 VSize=0x27FDF8 .section .reloc VA=0x4B64000 VSize=0x138B0C [OK] Da gan vao PID 14672 (elevated) === PTRSCAN target=0xB984A9E960 === Gia tri hien tai tai target = 1452655280 Allocation: base=0xB984A90000 span=0x10000 [pass 1] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 54 match [progress] 0 MB, 54 match [progress] 0 MB, 54 match [progress] 0 MB, 54 match [progress] 0 MB, 54 match [progress] 0 MB, 54 match [progress] 0 MB, 54 match [progress] 0 MB, 54 match [progress] 0 MB, 55 match [progress] 0 MB, 55 match [progress] 0 MB, 55 match [progress] 0 MB, 55 match [progress] 0 MB, 55 match [progress] 0 MB, 55 match [progress] 2048 MB, 55 match [progress] 6144 MB, 55 match [progress] 6144 MB, 55 match [progress] 6144 MB, 55 match [progress] 6144 MB, 55 match [progress] 6144 MB, 55 match [progress] 8192 MB, 55 match [pass 1] xong: 55 match Trung gian heap: 12 con tro (dung cho Pass 2) [pass 2] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 19 match [progress] 0 MB, 19 match [progress] 0 MB, 19 match [progress] 0 MB, 19 match [progress] 0 MB, 19 match [progress] 0 MB, 19 match [progress] 0 MB, 19 match [progress] 0 MB, 43 match [progress] 0 MB, 56 match [progress] 0 MB, 56 match [progress] 0 MB, 56 match [progress] 0 MB, 56 match [progress] 0 MB, 56 match [progress] 0 MB, 56 match [progress] 2048 MB, 70 match [progress] 6144 MB, 70 match [progress] 6144 MB, 70 match [progress] 6144 MB, 70 match [progress] 6144 MB, 70 match [progress] 6144 MB, 70 match [progress] 8192 MB, 70 match [pass 2] xong: 71 match [heap L2] 0xB984A9E778 +0x538 -> 0xB984A9EE08 +0x960 -> HP [heap L2] 0xB984A9E778 +0x578 -> 0xB984A9EE48 +0x90 -> HP [heap L2] 0xB984A9E778 +0x688 -> 0xB984A9EF58 +0xE92D -> HP [heap L2] 0xB984A9E7B0 +0x538 -> 0xB984A9EE08 +0x960 -> HP [heap L2] 0xB984A9E7B0 +0x578 -> 0xB984A9EE48 +0x90 -> HP [heap L2] 0xB984A9E7B0 +0x688 -> 0xB984A9EF58 +0xE92D -> HP [heap L2] 0xB984A9E7C0 +0x10 -> 0xB984A9E838 +0x90 -> HP [heap L2] 0xB984A9E7C0 +0x28 -> 0xB984A9E850 +0x90 -> HP [heap L2] 0xB984A9E7C0 +0x88 -> 0xB984A9E8B0 +0x90 -> HP [heap L2] 0xB984A9E7C0 +0x5E0 -> 0xB984A9EE08 +0x960 -> HP [heap L2] 0xB984A9E7C0 +0x620 -> 0xB984A9EE48 +0x90 -> HP [heap L2] 0xB984A9E7C0 +0x730 -> 0xB984A9EF58 +0xE92D -> HP [heap L2] 0xB984A9E7C8 +0x48 -> 0xB984A9E8B0 +0x90 -> HP [heap L2] 0xB984A9E7C8 +0x5A0 -> 0xB984A9EE08 +0x960 -> HP [heap L2] 0xB984A9E7C8 +0x5E0 -> 0xB984A9EE48 +0x90 -> HP [heap L2] 0xB984A9E7C8 +0x6F0 -> 0xB984A9EF58 +0xE92D -> HP [heap L2] 0xB984A9E800 +0x538 -> 0xB984A9EE08 +0x960 -> HP [heap L2] 0xB984A9E800 +0x578 -> 0xB984A9EE48 +0x90 -> HP [heap L2] 0xB984A9E800 +0x688 -> 0xB984A9EF58 +0xE92D -> HP [heap L2] 0xB984A9E838 +0x538 -> 0xB984A9EE08 +0x960 -> HP [heap L2] 0xB984A9E838 +0x578 -> 0xB984A9EE48 +0x90 -> HP [heap L2] 0xB984A9E838 +0x688 -> 0xB984A9EF58 +0xE92D -> HP [heap L2] 0xB984A9E850 +0x538 -> 0xB984A9EE08 +0x960 -> HP [heap L2] 0xB984A9E850 +0x578 -> 0xB984A9EE48 +0x90 -> HP [heap L2] 0xB984A9E850 +0x688 -> 0xB984A9EF58 +0xE92D -> HP [heap L2] 0xB984A9E878 +0x38 -> 0xB984A9EE08 +0x960 -> HP [heap L2] 0xB984A9E878 +0x78 -> 0xB984A9EE48 +0x90 -> HP [heap L2] 0xB984A9E878 +0x188 -> 0xB984A9EF58 +0xE92D -> HP [heap L2] 0xB984A9E8B0 +0x538 -> 0xB984A9EE08 +0x960 -> HP [heap L2] 0xB984A9E8B0 +0x578 -> 0xB984A9EE48 +0x90 -> HP [heap L2] 0xB984A9E8B0 +0x688 -> 0xB984A9EF58 +0xE92D -> HP [heap L2] 0xB984A9E8B8 +0x18 -> 0xB984A9EE08 +0x960 -> HP [heap L2] 0xB984A9E8B8 +0x58 -> 0xB984A9EE48 +0x90 -> HP [heap L2] 0xB984A9E8B8 +0x168 -> 0xB984A9EF58 +0xE92D -> HP [heap L2] 0xB984A9E8C0 +0x28 -> 0xB984A9EE08 +0x960 -> HP [heap L2] 0xB984A9E8C0 +0x68 -> 0xB984A9EE48 +0x90 -> HP [heap L2] 0xB984A9E8C0 +0x178 -> 0xB984A9EF58 +0xE92D -> HP [heap L2] 0xB984A9EDD8 +0xE8 -> 0xB984A9EF58 +0xE92D -> HP [heap L2] 0xB984A9EE08 +0x778 -> 0xB984A9E778 +0x90 -> HP [heap L2] 0xB984A9EE08 +0x7B0 -> 0xB984A9E7B0 +0x90 -> HP [pass 3] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 38 match [progress] 0 MB, 38 match [progress] 0 MB, 38 match [progress] 0 MB, 38 match [progress] 0 MB, 38 match [progress] 0 MB, 38 match [progress] 0 MB, 38 match [progress] 0 MB, 103 match [progress] 0 MB, 121 match [progress] 0 MB, 121 match [progress] 0 MB, 121 match [progress] 0 MB, 121 match [progress] 0 MB, 121 match [progress] 0 MB, 121 match [progress] 2048 MB, 206 match [progress] 6144 MB, 206 match [progress] 6144 MB, 206 match [progress] 6144 MB, 206 match [progress] 6144 MB, 206 match [progress] 6144 MB, 206 match [progress] 8192 MB, 206 match [pass 3] xong: 208 match [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x508]+0xE8] + 0xE92D -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x538]+0x778] + 0x90 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x538]+0x7B0] + 0x90 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x538]+0x7C0] + 0x138 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x538]+0x7C8] + 0xF8 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x538]+0x800] + 0x90 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x538]+0x838] + 0x90 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x538]+0x850] + 0x90 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x538]+0x8B0] + 0x90 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x538]+0xE08] + 0x960 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x538]+0xE48] + 0x90 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x538]+0xF58] + 0xE92D -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x578]+0x538] + 0x960 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x578]+0x578] + 0x90 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x578]+0x688] + 0xE92D -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x590]+0xE8] + 0xE92D -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x600]+0x20] + 0xE92D -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x688]+0xE745] + 0x90 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x688]+0xE77D] + 0x90 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x688]+0xE78D] + 0x138 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x688]+0xE795] + 0xF8 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x688]+0xE7CD] + 0x90 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x688]+0xE805] + 0x90 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x688]+0xE81D] + 0x90 -> HP [CHAIN L3 - STATIC] [[[0xB984A9E778]+0x688]+0xE87D] + 0x90 -> HP (du 25 chain - ngung liet ke) [PTRSCAN DONE] [OK] Da gan vao PID 14672 (elevated) === PTRDEEP target=0x2875A965D60 === Gia tri hien tai = 45 So module: 134 [pass 1] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 5120 MB, 22 match [pass 1] xong: 22 match [depth 1] matches=22 [depth 1] frontier=22 [pass 2] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [OK] Da gan vao PID 14672 (elevated) === MAP (PID 14672) === PathOfExile.exe base=0x7FF70EB60000 size=0x4C9D000 ntdll.dll base=0x7FFC16FF0000 size=0x1F9000 KERNEL32.DLL base=0x7FFC15310000 size=0xC2000 KERNELBASE.dll base=0x7FFC14A60000 size=0x2F7000 apphelp.dll base=0x7FFC0F5F0000 size=0x94000 WS2_32.dll base=0x7FFC16E10000 size=0x6B000 RPCRT4.dll base=0x7FFC163D0000 size=0x126000 IMM32.dll base=0x7FFC151B0000 size=0x2F000 USER32.dll base=0x7FFC16C70000 size=0x19D000 win32u.dll base=0x7FFC14840000 size=0x22000 GDI32.dll base=0x7FFC165B0000 size=0x2B000 dbghelp.dll base=0x7FFC02780000 size=0x201000 gdi32full.dll base=0x7FFC14D60000 size=0x11A000 ucrtbase.dll base=0x7FFC14710000 size=0x100000 msvcp_win.dll base=0x7FFC14ED0000 size=0x9D000 CRYPT32.dll base=0x7FFC14900000 size=0x15D000 COMCTL32.dll base=0x7FFBF9970000 size=0x29B000 IPHLPAPI.DLL base=0x7FFC13980000 size=0x3B000 COMDLG32.dll base=0x7FFC15070000 size=0xDA000 WINMM.dll base=0x7FFC03160000 size=0x27000 msvcrt.dll base=0x7FFC16510000 size=0x9E000 gdiplus.dll base=0x7FFBFAD50000 size=0x1AB000 combase.dll base=0x7FFC165F0000 size=0x353000 shcore.dll base=0x7FFC16E80000 size=0xAD000 dxgi.dll base=0x7FFC12E70000 size=0xF6000 USP10.dll base=0x7FFBD6E40000 size=0x19000 SHLWAPI.dll base=0x7FFC16C10000 size=0x5B000 SHELL32.dll base=0x7FFC15C50000 size=0x771000 ADVAPI32.dll base=0x7FFC15980000 size=0xB2000 sechost.dll base=0x7FFC151E0000 size=0xA0000 bcrypt.dll base=0x7FFC14810000 size=0x27000 ole32.dll base=0x7FFC15850000 size=0x12B000 OLEAUT32.dll base=0x7FFC15B70000 size=0xD6000 SETUPAPI.dll base=0x7FFC153E0000 size=0x470000 cfgmgr32.dll base=0x7FFC14E80000 size=0x4E000 imagehlp.dll base=0x7FFC16F90000 size=0x1D000 WLDAP32.dll base=0x7FFC15150000 size=0x5F000 HID.DLL base=0x7FFC12E60000 size=0xD000 Normaliz.dll base=0x7FFC165E0000 size=0x8000 VERSION.dll base=0x7FFC0C530000 size=0xA000 dbgcore.DLL base=0x7FFBF3640000 size=0x34000 kernel.appcore.dll base=0x7FFC124A0000 size=0x12000 bcryptPrimitives.dll base=0x7FFC14870000 size=0x82000 clbcatq.dll base=0x7FFC16B60000 size=0xA9000 amsi.dll base=0x7FFBF0DE0000 size=0x1F000 USERENV.dll base=0x7FFC14500000 size=0x2E000 profapi.dll base=0x7FFC14590000 size=0x25000 MpOav.dll base=0x7FFBF0D30000 size=0xA4000 windows.storage.dll base=0x7FFC126B0000 size=0x7AC000 Wldp.dll base=0x7FFC13F30000 size=0x2B000 uxtheme.dll base=0x7FFC11FB0000 size=0x9E000 secur32.dll base=0x7FFBF7F60000 size=0xC000 SSPICLI.DLL base=0x7FFC14530000 size=0x32000 coml2.dll base=0x7FFC14FF0000 size=0x79000 asycfilt.dll base=0x7FFBEE620000 size=0x1A000 uvh64.dll base=0x7FFB9E010000 size=0x2B000 MSCTF.dll base=0x7FFC15A50000 size=0x116000 Riched20.dll base=0x7FFBD6E60000 size=0x9A000 msls31.dll base=0x7FFBD6E00000 size=0x39000 dataexchange.dll base=0x7FFBD6870000 size=0x3E000 d3d11.dll base=0x7FFC0FFA0000 size=0x264000 dcomp.dll base=0x7FFC10D80000 size=0x1E5000 twinapi.appcore.dll base=0x7FFC0CBB0000 size=0x203000 textinputframework.dll base=0x7FFC09D90000 size=0xF9000 CoreMessaging.dll base=0x7FFC10C80000 size=0xF2000 CoreUIComponents.dll base=0x7FFC0F040000 size=0x35B000 ntmarta.dll base=0x7FFC13810000 size=0x33000 wintypes.dll base=0x7FFC0F9E0000 size=0x157000 TextShaping.dll base=0x7FFBF4330000 size=0xAC000 lsp64.dll base=0x7FFBFB5F0000 size=0x2E3000 mswsock.dll base=0x7FFC13C80000 size=0x6A000 WINTRUST.DLL base=0x7FFC14F70000 size=0x74000 MSASN1.dll base=0x7FFC143A0000 size=0x12000 CRYPTSP.dll base=0x7FFC142F0000 size=0x18000 rsaenh.dll base=0x7FFC135C0000 size=0x38000 CRYPTBASE.dll base=0x7FFC13EA0000 size=0xC000 DNSAPI.dll base=0x7FFC139C0000 size=0xCC000 NSI.dll base=0x7FFC15A40000 size=0x8000 rasadhlp.dll base=0x7FFC02120000 size=0xA000 fwpuclnt.dll base=0x7FFC0D250000 size=0x80000 bink2w64.dll base=0x7FFB46710000 size=0x74000 fmod.dll base=0x7FFB41CC0000 size=0x21A000 DSOUND.DLL base=0x7FFB9DCC0000 size=0x9C000 powrprof.dll base=0x7FFC140E0000 size=0x4B000 winmmbase.dll base=0x7FFBE3CE0000 size=0x26000 UMPDC.dll base=0x7FFC140C0000 size=0x12000 fmodstudio.dll base=0x7FFB41B30000 size=0x190000 MMDevApi.dll base=0x7FFC0CF30000 size=0x85000 DEVOBJ.dll base=0x7FFC143E0000 size=0x33000 AUDIOSES.DLL base=0x7FFC0CFC0000 size=0x181000 resourcepolicyclient.dll base=0x7FFC120A0000 size=0x14000 d3d12.dll base=0x7FFC0B670000 size=0x25000 D3D12Core.dll base=0x7FFB46DB0000 size=0x1CD000 dxcore.dll base=0x7FFC0EBB0000 size=0x3B000 cryptnet.dll base=0x7FFC0C4F0000 size=0x31000 drvstore.dll base=0x7FFC0C130000 size=0x148000 nvspcap64.dll base=0x7FFB94D00000 size=0x147000 xinput1_4.dll base=0x7FFBE5DD0000 size=0x11000 inputhost.dll base=0x7FFC09E90000 size=0x152000 PROPSYS.dll base=0x7FFC11790000 size=0xFA000 gpapi.dll base=0x7FFC13CF0000 size=0x23000 WINNSI.DLL base=0x7FFC0ED90000 size=0xB000 sl.interposer.dll base=0x7FFB46660000 size=0xA1000 VCRUNTIME140_1.dll base=0x7FFBFAC60000 size=0xB000 MSVCP140.dll base=0x7FFBF37A0000 size=0x88000 VCRUNTIME140.dll base=0x7FFBF9E40000 size=0x1E000 nvapi64.dll base=0x7FFC019E0000 size=0x585000 sl.common.dll base=0x7FFB41A50000 size=0xDD000 _nvngx.dll base=0x7FFB418D0000 size=0x176000 DEVRTL.dll base=0x7FFBF9F70000 size=0x14000 SPINF.dll base=0x7FFC040B0000 size=0x1C000 sl.pcl.dll base=0x7FFB41870000 size=0x58000 sl.reflex.dll base=0x7FFB41810000 size=0x5E000 D3D12Core.dll base=0x7FFB41380000 size=0x48F000 nvldumdx.dll base=0x7FFC09BB0000 size=0xC4000 nvgpucomp64.dll base=0x7FFC047F0000 size=0x3D93000 NvMessageBus.dll base=0x7FFBFB9B0000 size=0x363000 NvMemMapStoragex.dll base=0x7FFC018A0000 size=0xDE000 nvwgf2umx.dll base=0x7FFBFBE80000 size=0x5834000 schannel.DLL base=0x7FFC134D0000 size=0x9B000 nvppex.dll base=0x7FFB94B40000 size=0x1B7000 mskeyprotect.dll base=0x7FFBEDBB0000 size=0x15000 NTASN1.dll base=0x7FFC13F60000 size=0x3B000 ncrypt.dll base=0x7FFC13FA0000 size=0x27000 ncryptsslp.dll base=0x7FFBEE380000 size=0x26000 D3DSCache.dll base=0x7FFBEB350000 size=0x2B000 libxess.dll base=0x7FFB3B500000 size=0x4A3A000 dwmapi.dll base=0x7FFC122C0000 size=0x2E000 wbemprox.dll base=0x7FFC0C6F0000 size=0x11000 wbemcomn.dll base=0x7FFC0E6B0000 size=0x90000 wbemsvc.dll base=0x7FFC0BA20000 size=0x14000 fastprox.dll base=0x7FFC0BBB0000 size=0x10C000 dxcompiler.dll base=0x7FFAF5630000 size=0x112A000 dxil.dll base=0x7FFB371C0000 size=0x168000 --- PE Sections (PathOfExile.exe) --- .section .text VA=0x1000 VSize=0x2E840BE .section .rdata VA=0x2E86000 VSize=0xB7C3A6 .section .data VA=0x3A03000 VSize=0xD163DC .section .pdata VA=0x471A000 VSize=0x1C4B20 .section _RDATA VA=0x48DF000 VSize=0x4E10 .section .rsrc VA=0x48E4000 VSize=0x27FDF8 .section .reloc VA=0x4B64000 VSize=0x138B0C [OK] Da gan vao PID 14672 (elevated) === READALL (C:\Projects\AutoPOE2\bin\Release\hp_candidates.txt) === 0x2875A965D60 = 35 0x2875A965D6C = 35 0x2875A965D78 = 35 0x2875A965D84 = 35 0x2875A965D90 = 35 0x2875A965D9C = 35 0x2875A965DA8 = 35 0x2875A965DB4 = 35 0x2875A965DC0 = 35 0x2875A965DCC = 35 0x2875A965DD8 = 35 0x2875A965DE4 = 35 0x2875A965DF0 = 35 0x2875A965DFC = 35 [READALL DONE] [OK] Da gan vao PID 14672 (elevated) === PTRDEEP target=0x2875A965D60 === Gia tri hien tai = 45 So module: 134 [pass 1] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [pass 1] xong: 22 match [depth 1] matches=22 [depth 1] frontier=22 [pass 2] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 2048 MB, 703 match [progress] 3072 MB, 1171 match [progress] 5120 MB, 1241 match [pass 2] xong: 1454 match [depth 2] matches=1454 [STATIC ROOT] 0x7FFB41EBC528 (depth 2) [CHAIN] static=0x2875A965D60 offsets=+0x7DB5E680 +0x7D73699F8948 -> HP (u32) [PTRDEEP DONE] Tim thay 1 static chain o depth 2 [OK] Da gan vao PID 14672 (elevated) === PTRDEEP target=0x2875A965D60 === Gia tri hien tai = 35 So module: 134 [pass 1] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 2048 MB, 15 match [progress] 3072 MB, 22 match [progress] 5120 MB, 22 match [pass 1] xong: 22 match [depth 1] matches=22 [depth 1] frontier=22 [pass 2] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 4 match [progress] 0 MB, 4 match [progress] 0 MB, 4 match [progress] 0 MB, 4 match [progress] 2048 MB, 710 match [progress] 3072 MB, 1177 match [progress] 5120 MB, 1247 match [pass 2] xong: 1461 match [depth 2] matches=1461 [STATIC ROOT] 0x7FFB41EBC528 (depth 2) [PTRDEEP DONE] Tim thay 0 static chain o depth 2 [CHAIN] S=0x7FFB41EBC528 offsets=+0xA0 +0x760 -> HP (u32) | off_hien_tai: off1=0xA0 off2=0x760 Static nam trong module base=0x7FFB41CC0000 size=0x21A000 RVA=0x1FC528 [OK] Da gan vao PID 14672 (elevated) === READ 0x7FFB41EBC528 (16 bytes) === hex64: E0 3B 4C D8 87 02 00 00 FF FF FF FF 00 00 00 00 [OK] Da gan vao PID 14672 (elevated) === MAP (PID 14672) === PathOfExile.exe base=0x7FF70EB60000 size=0x4C9D000 ntdll.dll base=0x7FFC16FF0000 size=0x1F9000 KERNEL32.DLL base=0x7FFC15310000 size=0xC2000 KERNELBASE.dll base=0x7FFC14A60000 size=0x2F7000 apphelp.dll base=0x7FFC0F5F0000 size=0x94000 WS2_32.dll base=0x7FFC16E10000 size=0x6B000 RPCRT4.dll base=0x7FFC163D0000 size=0x126000 IMM32.dll base=0x7FFC151B0000 size=0x2F000 USER32.dll base=0x7FFC16C70000 size=0x19D000 win32u.dll base=0x7FFC14840000 size=0x22000 GDI32.dll base=0x7FFC165B0000 size=0x2B000 dbghelp.dll base=0x7FFC02780000 size=0x201000 gdi32full.dll base=0x7FFC14D60000 size=0x11A000 ucrtbase.dll base=0x7FFC14710000 size=0x100000 msvcp_win.dll base=0x7FFC14ED0000 size=0x9D000 CRYPT32.dll base=0x7FFC14900000 size=0x15D000 COMCTL32.dll base=0x7FFBF9970000 size=0x29B000 IPHLPAPI.DLL base=0x7FFC13980000 size=0x3B000 COMDLG32.dll base=0x7FFC15070000 size=0xDA000 WINMM.dll base=0x7FFC03160000 size=0x27000 msvcrt.dll base=0x7FFC16510000 size=0x9E000 gdiplus.dll base=0x7FFBFAD50000 size=0x1AB000 combase.dll base=0x7FFC165F0000 size=0x353000 shcore.dll base=0x7FFC16E80000 size=0xAD000 dxgi.dll base=0x7FFC12E70000 size=0xF6000 USP10.dll base=0x7FFBD6E40000 size=0x19000 SHLWAPI.dll base=0x7FFC16C10000 size=0x5B000 SHELL32.dll base=0x7FFC15C50000 size=0x771000 ADVAPI32.dll base=0x7FFC15980000 size=0xB2000 sechost.dll base=0x7FFC151E0000 size=0xA0000 bcrypt.dll base=0x7FFC14810000 size=0x27000 ole32.dll base=0x7FFC15850000 size=0x12B000 OLEAUT32.dll base=0x7FFC15B70000 size=0xD6000 SETUPAPI.dll base=0x7FFC153E0000 size=0x470000 cfgmgr32.dll base=0x7FFC14E80000 size=0x4E000 imagehlp.dll base=0x7FFC16F90000 size=0x1D000 WLDAP32.dll base=0x7FFC15150000 size=0x5F000 HID.DLL base=0x7FFC12E60000 size=0xD000 Normaliz.dll base=0x7FFC165E0000 size=0x8000 VERSION.dll base=0x7FFC0C530000 size=0xA000 dbgcore.DLL base=0x7FFBF3640000 size=0x34000 kernel.appcore.dll base=0x7FFC124A0000 size=0x12000 bcryptPrimitives.dll base=0x7FFC14870000 size=0x82000 clbcatq.dll base=0x7FFC16B60000 size=0xA9000 amsi.dll base=0x7FFBF0DE0000 size=0x1F000 USERENV.dll base=0x7FFC14500000 size=0x2E000 profapi.dll base=0x7FFC14590000 size=0x25000 MpOav.dll base=0x7FFBF0D30000 size=0xA4000 windows.storage.dll base=0x7FFC126B0000 size=0x7AC000 Wldp.dll base=0x7FFC13F30000 size=0x2B000 uxtheme.dll base=0x7FFC11FB0000 size=0x9E000 secur32.dll base=0x7FFBF7F60000 size=0xC000 SSPICLI.DLL base=0x7FFC14530000 size=0x32000 coml2.dll base=0x7FFC14FF0000 size=0x79000 asycfilt.dll base=0x7FFBEE620000 size=0x1A000 uvh64.dll base=0x7FFB9E010000 size=0x2B000 MSCTF.dll base=0x7FFC15A50000 size=0x116000 Riched20.dll base=0x7FFBD6E60000 size=0x9A000 msls31.dll base=0x7FFBD6E00000 size=0x39000 dataexchange.dll base=0x7FFBD6870000 size=0x3E000 d3d11.dll base=0x7FFC0FFA0000 size=0x264000 dcomp.dll base=0x7FFC10D80000 size=0x1E5000 twinapi.appcore.dll base=0x7FFC0CBB0000 size=0x203000 textinputframework.dll base=0x7FFC09D90000 size=0xF9000 CoreMessaging.dll base=0x7FFC10C80000 size=0xF2000 CoreUIComponents.dll base=0x7FFC0F040000 size=0x35B000 ntmarta.dll base=0x7FFC13810000 size=0x33000 wintypes.dll base=0x7FFC0F9E0000 size=0x157000 TextShaping.dll base=0x7FFBF4330000 size=0xAC000 lsp64.dll base=0x7FFBFB5F0000 size=0x2E3000 mswsock.dll base=0x7FFC13C80000 size=0x6A000 WINTRUST.DLL base=0x7FFC14F70000 size=0x74000 MSASN1.dll base=0x7FFC143A0000 size=0x12000 CRYPTSP.dll base=0x7FFC142F0000 size=0x18000 rsaenh.dll base=0x7FFC135C0000 size=0x38000 CRYPTBASE.dll base=0x7FFC13EA0000 size=0xC000 DNSAPI.dll base=0x7FFC139C0000 size=0xCC000 NSI.dll base=0x7FFC15A40000 size=0x8000 rasadhlp.dll base=0x7FFC02120000 size=0xA000 fwpuclnt.dll base=0x7FFC0D250000 size=0x80000 bink2w64.dll base=0x7FFB46710000 size=0x74000 fmod.dll base=0x7FFB41CC0000 size=0x21A000 DSOUND.DLL base=0x7FFB9DCC0000 size=0x9C000 powrprof.dll base=0x7FFC140E0000 size=0x4B000 winmmbase.dll base=0x7FFBE3CE0000 size=0x26000 UMPDC.dll base=0x7FFC140C0000 size=0x12000 fmodstudio.dll base=0x7FFB41B30000 size=0x190000 MMDevApi.dll base=0x7FFC0CF30000 size=0x85000 DEVOBJ.dll base=0x7FFC143E0000 size=0x33000 AUDIOSES.DLL base=0x7FFC0CFC0000 size=0x181000 resourcepolicyclient.dll base=0x7FFC120A0000 size=0x14000 d3d12.dll base=0x7FFC0B670000 size=0x25000 D3D12Core.dll base=0x7FFB46DB0000 size=0x1CD000 dxcore.dll base=0x7FFC0EBB0000 size=0x3B000 cryptnet.dll base=0x7FFC0C4F0000 size=0x31000 drvstore.dll base=0x7FFC0C130000 size=0x148000 nvspcap64.dll base=0x7FFB94D00000 size=0x147000 xinput1_4.dll base=0x7FFBE5DD0000 size=0x11000 inputhost.dll base=0x7FFC09E90000 size=0x152000 PROPSYS.dll base=0x7FFC11790000 size=0xFA000 gpapi.dll base=0x7FFC13CF0000 size=0x23000 WINNSI.DLL base=0x7FFC0ED90000 size=0xB000 sl.interposer.dll base=0x7FFB46660000 size=0xA1000 VCRUNTIME140_1.dll base=0x7FFBFAC60000 size=0xB000 MSVCP140.dll base=0x7FFBF37A0000 size=0x88000 VCRUNTIME140.dll base=0x7FFBF9E40000 size=0x1E000 nvapi64.dll base=0x7FFC019E0000 size=0x585000 sl.common.dll base=0x7FFB41A50000 size=0xDD000 _nvngx.dll base=0x7FFB418D0000 size=0x176000 DEVRTL.dll base=0x7FFBF9F70000 size=0x14000 SPINF.dll base=0x7FFC040B0000 size=0x1C000 sl.pcl.dll base=0x7FFB41870000 size=0x58000 sl.reflex.dll base=0x7FFB41810000 size=0x5E000 D3D12Core.dll base=0x7FFB41380000 size=0x48F000 nvldumdx.dll base=0x7FFC09BB0000 size=0xC4000 nvgpucomp64.dll base=0x7FFC047F0000 size=0x3D93000 NvMessageBus.dll base=0x7FFBFB9B0000 size=0x363000 NvMemMapStoragex.dll base=0x7FFC018A0000 size=0xDE000 nvwgf2umx.dll base=0x7FFBFBE80000 size=0x5834000 schannel.DLL base=0x7FFC134D0000 size=0x9B000 nvppex.dll base=0x7FFB94B40000 size=0x1B7000 mskeyprotect.dll base=0x7FFBEDBB0000 size=0x15000 NTASN1.dll base=0x7FFC13F60000 size=0x3B000 ncrypt.dll base=0x7FFC13FA0000 size=0x27000 ncryptsslp.dll base=0x7FFBEE380000 size=0x26000 D3DSCache.dll base=0x7FFBEB350000 size=0x2B000 libxess.dll base=0x7FFB3B500000 size=0x4A3A000 dwmapi.dll base=0x7FFC122C0000 size=0x2E000 wbemprox.dll base=0x7FFC0C6F0000 size=0x11000 wbemcomn.dll base=0x7FFC0E6B0000 size=0x90000 wbemsvc.dll base=0x7FFC0BA20000 size=0x14000 fastprox.dll base=0x7FFC0BBB0000 size=0x10C000 dxcompiler.dll base=0x7FFAF5630000 size=0x112A000 dxil.dll base=0x7FFB371C0000 size=0x168000 --- PE Sections (PathOfExile.exe) --- .section .text VA=0x1000 VSize=0x2E840BE .section .rdata VA=0x2E86000 VSize=0xB7C3A6 .section .data VA=0x3A03000 VSize=0xD163DC .section .pdata VA=0x471A000 VSize=0x1C4B20 .section _RDATA VA=0x48DF000 VSize=0x4E10 .section .rsrc VA=0x48E4000 VSize=0x27FDF8 .section .reloc VA=0x4B64000 VSize=0x138B0C [OK] Da gan vao PID 14672 (elevated) === READ 0x287D84C3C80 (16 bytes) === hex64: 00 56 96 5A 87 02 00 00 00 B6 33 04 00 00 00 00 [OK] Da gan vao PID 14672 (elevated) === READ 0x2875A965D60 (16 bytes) === hex64: 10 00 00 00 00 00 00 00 FF FF FF FF 10 00 00 00 [OK] Da gan vao PID 34188 (elevated) === MAP (PID 34188) === PathOfExile.exe base=0x7FF70EB60000 size=0x4C9D000 ntdll.dll base=0x7FFC16FF0000 size=0x1F9000 KERNEL32.DLL base=0x7FFC15310000 size=0xC2000 KERNELBASE.dll base=0x7FFC14A60000 size=0x2F7000 WS2_32.dll base=0x7FFC16E10000 size=0x6B000 RPCRT4.dll base=0x7FFC163D0000 size=0x126000 IMM32.dll base=0x7FFC151B0000 size=0x2F000 USER32.dll base=0x7FFC16C70000 size=0x19D000 win32u.dll base=0x7FFC14840000 size=0x22000 GDI32.dll base=0x7FFC165B0000 size=0x2B000 dbghelp.dll base=0x7FFC02780000 size=0x201000 gdi32full.dll base=0x7FFC14D60000 size=0x11A000 ucrtbase.dll base=0x7FFC14710000 size=0x100000 msvcp_win.dll base=0x7FFC14ED0000 size=0x9D000 CRYPT32.dll base=0x7FFC14900000 size=0x15D000 COMCTL32.dll base=0x7FFBF9970000 size=0x29B000 IPHLPAPI.DLL base=0x7FFC13980000 size=0x3B000 WINMM.dll base=0x7FFC03160000 size=0x27000 COMDLG32.dll base=0x7FFC15070000 size=0xDA000 msvcrt.dll base=0x7FFC16510000 size=0x9E000 gdiplus.dll base=0x7FFBFAD50000 size=0x1AB000 combase.dll base=0x7FFC165F0000 size=0x353000 shcore.dll base=0x7FFC16E80000 size=0xAD000 dxgi.dll base=0x7FFC12E70000 size=0xF6000 USP10.dll base=0x7FFBD6E40000 size=0x19000 SHLWAPI.dll base=0x7FFC16C10000 size=0x5B000 SHELL32.dll base=0x7FFC15C50000 size=0x771000 ADVAPI32.dll base=0x7FFC15980000 size=0xB2000 sechost.dll base=0x7FFC151E0000 size=0xA0000 bcrypt.dll base=0x7FFC14810000 size=0x27000 ole32.dll base=0x7FFC15850000 size=0x12B000 OLEAUT32.dll base=0x7FFC15B70000 size=0xD6000 SETUPAPI.dll base=0x7FFC153E0000 size=0x470000 cfgmgr32.dll base=0x7FFC14E80000 size=0x4E000 imagehlp.dll base=0x7FFC16F90000 size=0x1D000 WLDAP32.dll base=0x7FFC15150000 size=0x5F000 HID.DLL base=0x7FFC12E60000 size=0xD000 Normaliz.dll base=0x7FFC165E0000 size=0x8000 VERSION.dll base=0x7FFC0C530000 size=0xA000 dbgcore.DLL base=0x7FFBF3640000 size=0x34000 kernel.appcore.dll base=0x7FFC124A0000 size=0x12000 bcryptPrimitives.dll base=0x7FFC14870000 size=0x82000 clbcatq.dll base=0x7FFC16B60000 size=0xA9000 amsi.dll base=0x7FFBF0DE0000 size=0x1F000 USERENV.dll base=0x7FFC14500000 size=0x2E000 profapi.dll base=0x7FFC14590000 size=0x25000 MpOav.dll base=0x7FFBF0D30000 size=0xA4000 windows.storage.dll base=0x7FFC126B0000 size=0x7AC000 Wldp.dll base=0x7FFC13F30000 size=0x2B000 uxtheme.dll base=0x7FFC11FB0000 size=0x9E000 secur32.dll base=0x7FFBF7F60000 size=0xC000 SSPICLI.DLL base=0x7FFC14530000 size=0x32000 coml2.dll base=0x7FFC14FF0000 size=0x79000 asycfilt.dll base=0x7FFBEE620000 size=0x1A000 uvh64.dll base=0x7FFB9E010000 size=0x2B000 MSCTF.dll base=0x7FFC15A50000 size=0x116000 Riched20.dll base=0x7FFBD6E60000 size=0x9A000 msls31.dll base=0x7FFBD6E00000 size=0x39000 dataexchange.dll base=0x7FFBD6870000 size=0x3E000 d3d11.dll base=0x7FFC0FFA0000 size=0x264000 dcomp.dll base=0x7FFC10D80000 size=0x1E5000 twinapi.appcore.dll base=0x7FFC0CBB0000 size=0x203000 textinputframework.dll base=0x7FFC09D90000 size=0xF9000 CoreUIComponents.dll base=0x7FFC0F040000 size=0x35B000 CoreMessaging.dll base=0x7FFC10C80000 size=0xF2000 ntmarta.dll base=0x7FFC13810000 size=0x33000 wintypes.dll base=0x7FFC0F9E0000 size=0x157000 TextShaping.dll base=0x7FFBF4330000 size=0xAC000 lsp64.dll base=0x7FFBFB5F0000 size=0x2E3000 mswsock.dll base=0x7FFC13C80000 size=0x6A000 WINTRUST.DLL base=0x7FFC14F70000 size=0x74000 MSASN1.dll base=0x7FFC143A0000 size=0x12000 CRYPTSP.dll base=0x7FFC142F0000 size=0x18000 rsaenh.dll base=0x7FFC135C0000 size=0x38000 CRYPTBASE.dll base=0x7FFC13EA0000 size=0xC000 DNSAPI.dll base=0x7FFC139C0000 size=0xCC000 NSI.dll base=0x7FFC15A40000 size=0x8000 rasadhlp.dll base=0x7FFC02120000 size=0xA000 fwpuclnt.dll base=0x7FFC0D250000 size=0x80000 bink2w64.dll base=0x7FFB466C0000 size=0x74000 fmod.dll base=0x7FFB413D0000 size=0x21A000 DSOUND.DLL base=0x7FFB9DCC0000 size=0x9C000 powrprof.dll base=0x7FFC140E0000 size=0x4B000 winmmbase.dll base=0x7FFBE3CE0000 size=0x26000 UMPDC.dll base=0x7FFC140C0000 size=0x12000 fmodstudio.dll base=0x7FFB3FDB0000 size=0x190000 MMDevApi.dll base=0x7FFC0CF30000 size=0x85000 DEVOBJ.dll base=0x7FFC143E0000 size=0x33000 AUDIOSES.DLL base=0x7FFC0CFC0000 size=0x181000 resourcepolicyclient.dll base=0x7FFC120A0000 size=0x14000 d3d12.dll base=0x7FFC0B670000 size=0x25000 D3D12Core.dll base=0x7FFB46DB0000 size=0x1CD000 dxcore.dll base=0x7FFC0EBB0000 size=0x3B000 cryptnet.dll base=0x7FFC0C4F0000 size=0x31000 drvstore.dll base=0x7FFC0C130000 size=0x148000 nvspcap64.dll base=0x7FFB94D00000 size=0x147000 xinput1_4.dll base=0x7FFBE5DD0000 size=0x11000 inputhost.dll base=0x7FFC09E90000 size=0x152000 PROPSYS.dll base=0x7FFC11790000 size=0xFA000 gpapi.dll base=0x7FFC13CF0000 size=0x23000 WINNSI.DLL base=0x7FFC0ED90000 size=0xB000 sl.interposer.dll base=0x7FFB41170000 size=0xA1000 VCRUNTIME140.dll base=0x7FFBF9E40000 size=0x1E000 MSVCP140.dll base=0x7FFBF37A0000 size=0x88000 VCRUNTIME140_1.dll base=0x7FFBFAC60000 size=0xB000 nvapi64.dll base=0x7FFC019E0000 size=0x585000 sl.common.dll base=0x7FFB3FCD0000 size=0xDD000 _nvngx.dll base=0x7FFB3FB50000 size=0x176000 DEVRTL.dll base=0x7FFBF9F70000 size=0x14000 SPINF.dll base=0x7FFC040B0000 size=0x1C000 sl.pcl.dll base=0x7FFB46660000 size=0x58000 sl.reflex.dll base=0x7FFB40220000 size=0x5E000 D3D12Core.dll base=0x7FFB3F6C0000 size=0x48F000 nvldumdx.dll base=0x7FFC09BB0000 size=0xC4000 nvgpucomp64.dll base=0x7FFC047F0000 size=0x3D93000 NvMessageBus.dll base=0x7FFBFB9B0000 size=0x363000 NvMemMapStoragex.dll base=0x7FFC018A0000 size=0xDE000 schannel.DLL base=0x7FFC134D0000 size=0x9B000 nvwgf2umx.dll base=0x7FFBFBE80000 size=0x5834000 mskeyprotect.dll base=0x7FFBEDBB0000 size=0x15000 NTASN1.dll base=0x7FFC13F60000 size=0x3B000 ncrypt.dll base=0x7FFC13FA0000 size=0x27000 ncryptsslp.dll base=0x7FFBEE380000 size=0x26000 nvppex.dll base=0x7FFB94B40000 size=0x1B7000 D3DSCache.dll base=0x7FFBEB350000 size=0x2B000 libxess.dll base=0x7FFAECD40000 size=0x4A3A000 dwmapi.dll base=0x7FFC122C0000 size=0x2E000 wbemprox.dll base=0x7FFC0C6F0000 size=0x11000 wbemcomn.dll base=0x7FFC0E6B0000 size=0x90000 wbemsvc.dll base=0x7FFC0BA20000 size=0x14000 fastprox.dll base=0x7FFC0BBB0000 size=0x10C000 --- PE Sections (PathOfExile.exe) --- .section .text VA=0x1000 VSize=0x2E840BE .section .rdata VA=0x2E86000 VSize=0xB7C3A6 .section .data VA=0x3A03000 VSize=0xD163DC .section .pdata VA=0x471A000 VSize=0x1C4B20 .section _RDATA VA=0x48DF000 VSize=0x4E10 .section .rsrc VA=0x48E4000 VSize=0x27FDF8 .section .reloc VA=0x4B64000 VSize=0x138B0C [OK] Da gan vao PID 34188 (elevated) === READ 0x7FFB415CC528 (16 bytes) === hex64: D0 F2 07 5B DC 02 00 00 FF FF FF FF 00 00 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x2DC075BF370 (16 bytes) === hex64: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x2875A965D60 (64 bytes) === [FAIL] Khong doc duoc (dia chi khong hop le / khong commit) [OK] Da gan vao PID 34188 (elevated) === SCAN-HP value=21 (full scan) === [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 0 ung vien [progress] 0 MB, 1 ung vien [progress] 0 MB, 5 ung vien [progress] 0 MB, 7 ung vien [progress] 0 MB, 11 ung vien [progress] 0 MB, 20 ung vien [progress] 0 MB, 20 ung vien [progress] 0 MB, 29 ung vien [progress] 0 MB, 29 ung vien [progress] 0 MB, 29 ung vien [progress] 0 MB, 30 ung vien [progress] 0 MB, 30 ung vien [progress] 0 MB, 30 ung vien [progress] 0 MB, 30 ung vien [progress] 0 MB, 31 ung vien [progress] 0 MB, 31 ung vien [progress] 0 MB, 31 ung vien [progress] 0 MB, 31 ung vien [progress] 0 MB, 34 ung vien [progress] 0 MB, 34 ung vien [progress] 0 MB, 35 ung vien [progress] 0 MB, 35 ung vien [progress] 0 MB, 36 ung vien [progress] 0 MB, 37 ung vien [progress] 0 MB, 37 ung vien [progress] 0 MB, 38 ung vien [progress] 0 MB, 39 ung vien [progress] 0 MB, 39 ung vien [progress] 0 MB, 41 ung vien [progress] 0 MB, 42 ung vien [progress] 0 MB, 43 ung vien [progress] 0 MB, 44 ung vien [progress] 0 MB, 44 ung vien [progress] 0 MB, 44 ung vien [progress] 0 MB, 44 ung vien [progress] 0 MB, 46 ung vien [progress] 0 MB, 47 ung vien [progress] 0 MB, 48 ung vien [progress] 0 MB, 49 ung vien [progress] 0 MB, 50 ung vien [progress] 0 MB, 51 ung vien [progress] 0 MB, 52 ung vien [progress] 0 MB, 54 ung vien [progress] 0 MB, 54 ung vien [progress] 0 MB, 54 ung vien [progress] 0 MB, 60 ung vien [progress] 0 MB, 61 ung vien [progress] 0 MB, 61 ung vien [progress] 0 MB, 61 ung vien [progress] 0 MB, 61 ung vien [progress] 0 MB, 61 ung vien [progress] 0 MB, 61 ung vien [progress] 0 MB, 61 ung vien [progress] 0 MB, 61 ung vien [progress] 0 MB, 61 ung vien [progress] 0 MB, 61 ung vien [progress] 0 MB, 61 ung vien [progress] 0 MB, 61 ung vien [progress] 0 MB, 61 ung vien [progress] 0 MB, 65 ung vien [progress] 0 MB, 65 ung vien [progress] 0 MB, 65 ung vien [progress] 3584 MB, 58439 ung vien [progress] 3584 MB, 58505 ung vien [progress] 3584 MB, 58505 ung vien [progress] 3584 MB, 58557 ung vien [progress] 3584 MB, 58655 ung vien [progress] 3584 MB, 58667 ung vien [progress] 3584 MB, 58732 ung vien [progress] 3584 MB, 58774 ung vien [progress] 3584 MB, 58776 ung vien [progress] 3584 MB, 58776 ung vien [OK] Da ghi 357811 ung vien vao hp_candidates.txt Ket qua: 357811 ung vien 0xE6817FDD6C 0xE681FE6080 0xE681FFE090 0xE681FFE108 0xE681FFE1F0 0xE6827E79F0 0xE6827F5178 0xE682FF92E8 0xE682FFEB60 0xE682FFEBD8 0xE682FFECC0 0xE6837F90D4 0xE6837F918C 0xE6837F9684 0xE6837F973C 0xE6837F9B54 0xE6837F9C0C 0xE6837F9E44 0xE6837F9EFC 0xE6837FA5C8 0xE6847F95E4 0xE6847F969C 0xE6847F9B94 0xE6847F9C4C 0xE6847FA064 0xE6847FA11C 0xE6847FA354 0xE6847FA40C 0xE6847FAAD8 0xE685FFA238 ... va 357781 dia chi khac trong hp_candidates.txt Huong dan: de nhan vat mat/hoi mau roi chay: memprobe.exe scan-hp --rescan hp_candidates.txt [SCAN DONE] [OK] Da gan vao PID 34188 (elevated) === SCAN-HP rescan-changed (bo dia chi van == 21) === [OK] Da ghi 3287 ung vien vao hp_candidates.txt Ket qua: 3287 ung vien 0xE6817FDD6C 0xE6927FB7C8 0xE6927FD558 0xE6EEBF4828 0xE6EEBF4B70 0xE6EEBF4BE0 0xE6EEBF7938 0xE6F2BF5318 0xE6F2BF5660 0xE6F2BF56D0 0xE6F2BF8428 0xE6F2BFA1D4 0xE6F4BF4E68 0xE6F4BF51B0 0xE6F4BF5220 0xE6F4BF7F78 0xE6F53F4F58 0xE6F53F52A0 0xE6F53F5310 0xE6F53F8068 0xE6F53F9E14 0xE6F5BF83E8 0xE6F7BFEA60 0xE6F7BFEAD8 0xE6F7BFEBC0 0x2A9124303F8 0x2A912430438 0x2A912430938 0x2A9124309B8 0x2A912430AB8 ... va 3257 dia chi khac trong hp_candidates.txt Huong dan: de nhan vat mat/hoi mau roi chay: memprobe.exe scan-hp --rescan hp_candidates.txt [SCAN DONE] [OK] Da gan vao PID 34188 (elevated) === SCAN-HP rescan value=21 === [OK] Da ghi 5 ung vien vao hp_candidates.txt Ket qua: 5 ung vien 0xE6F2BF8428 0x501D91D34AC 0x501F0EBAB88 0x501F196C088 0x50206FF5088 Huong dan: de nhan vat mat/hoi mau roi chay: memprobe.exe scan-hp --rescan hp_candidates.txt [SCAN DONE] [OK] Da gan vao PID 34188 (elevated) === READALL (C:\Projects\AutoPOE2\bin\Release\hp_candidates.txt) === 0xE6F2BF8428 = 21 0x501D91D34AC = 20 0x501F0EBAB88 = 0 0x501F196C088 = 12 0x50206FF5088 = 22 [READALL DONE] [OK] Da gan vao PID 34188 (elevated) === READ 0xE6F2BF83C8 (256 bytes) === hex64: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0xE6F2BF8428 (256 bytes) === hex64: 15 00 00 00 01 01 00 00 B0 DB 01 D8 01 05 00 00 A0 DB 01 D8 01 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E6 00 00 00 00 00 00 00 00 00 00 00 00 0A 00 00 A0 05 00 00 00 00 00 00 00 00 00 00 [OK] Da gan vao PID 34188 (elevated) === PTRDEEP target=0xE6F2BF8428 maxOff=0x10000 maxDepth=8 === Gia tri hien tai = 21 So module: 131 [pass 1] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 4096 MB, 359 match [progress] 4096 MB, 359 match [progress] 4096 MB, 359 match [progress] 4096 MB, 359 match [progress] 4096 MB, 359 match [pass 1] xong: 480 match [depth 1] matches=480 [depth 1] frontier=480 [pass 2] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 4096 MB, 364 match [progress] 4096 MB, 364 match [progress] 4096 MB, 364 match [progress] 4096 MB, 364 match [progress] 4096 MB, 364 match [pass 2] xong: 33571 match [depth 2] matches=33571 [STATIC ROOT] 0x7FF71312C1D0 (depth 2) [STATIC ROOT] 0x7FF71312C1D8 (depth 2) [STATIC ROOT] 0x7FF71312C1E0 (depth 2) [STATIC ROOT] 0x7FF71312C4A0 (depth 2) [STATIC ROOT] 0x7FF71312C4A8 (depth 2) [STATIC ROOT] 0x7FF71312C4B0 (depth 2) [STATIC ROOT] 0x7FF71312C5A0 (depth 2) [STATIC ROOT] 0x7FF71312C5A8 (depth 2) [STATIC ROOT] 0x7FF71312C5B0 (depth 2) [STATIC ROOT] 0x7FF71312C5F8 (depth 2) [STATIC ROOT] 0x7FF71312C600 (depth 2) [STATIC ROOT] 0x7FF71312C608 (depth 2) [STATIC ROOT] 0x7FF71312CA20 (depth 2) [STATIC ROOT] 0x7FF71312CA28 (depth 2) [STATIC ROOT] 0x7FF71312CA30 (depth 2) [STATIC ROOT] 0x7FF71312FEF8 (depth 2) [STATIC ROOT] 0x7FF713133280 (depth 2) [STATIC ROOT] 0x7FF713133288 (depth 2) [STATIC ROOT] 0x7FF713133290 (depth 2) [STATIC ROOT] 0x7FF713275740 (depth 2) [PTRDEEP DONE] Tim thay 0 static chain o depth 2 [CHAIN] S=0x7FF713275740 offsets=+0x1120 +0x115F -> HP (u32) | off_hien_tai: off1=0x1120 off2=0x115F Static nam trong module base=0x7FF70EB60000 size=0x4C9D000 RVA=0x4715740 [OK] Da gan vao PID 34188 (elevated) === READ 0x7FF713275740 (16 bytes) === hex64: 00 42 F6 F0 01 05 00 00 A4 01 00 80 00 00 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x7FF713275740 (16 bytes) === hex64: 00 42 F6 F0 01 05 00 00 A4 01 00 80 00 00 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x501F0F65320 (16 bytes) === hex64: C9 72 BF F2 E6 00 00 00 60 CE F9 F0 01 05 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0xE6F2BF8428 (16 bytes) === hex64: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [OK] Da gan vao PID 34188 (elevated) === SCAN-HP value=10 (full scan) === [progress] 0 MB, 1 ung vien [progress] 0 MB, 1 ung vien [progress] 0 MB, 16 ung vien [progress] 0 MB, 27 ung vien [progress] 0 MB, 59 ung vien [progress] 0 MB, 72 ung vien [progress] 0 MB, 79 ung vien [progress] 0 MB, 87 ung vien [progress] 0 MB, 113 ung vien [progress] 0 MB, 139 ung vien [progress] 0 MB, 150 ung vien [progress] 0 MB, 155 ung vien [progress] 0 MB, 156 ung vien [progress] 0 MB, 157 ung vien [progress] 0 MB, 159 ung vien [progress] 0 MB, 160 ung vien [progress] 0 MB, 161 ung vien [progress] 0 MB, 162 ung vien [progress] 0 MB, 162 ung vien [progress] 0 MB, 162 ung vien [progress] 0 MB, 166 ung vien [progress] 0 MB, 171 ung vien [progress] 0 MB, 171 ung vien [progress] 0 MB, 171 ung vien [progress] 0 MB, 173 ung vien [progress] 0 MB, 173 ung vien [progress] 0 MB, 173 ung vien [progress] 0 MB, 173 ung vien [progress] 0 MB, 173 ung vien [progress] 0 MB, 173 ung vien [progress] 0 MB, 174 ung vien [progress] 0 MB, 177 ung vien [progress] 0 MB, 179 ung vien [progress] 0 MB, 179 ung vien [progress] 0 MB, 191 ung vien [progress] 0 MB, 202 ung vien [progress] 0 MB, 215 ung vien [progress] 0 MB, 229 ung vien [progress] 0 MB, 229 ung vien [progress] 0 MB, 230 ung vien [progress] 0 MB, 231 ung vien [progress] 0 MB, 232 ung vien [progress] 0 MB, 232 ung vien [progress] 0 MB, 233 ung vien [progress] 0 MB, 234 ung vien [progress] 0 MB, 235 ung vien [progress] 0 MB, 237 ung vien [progress] 0 MB, 237 ung vien [progress] 0 MB, 237 ung vien [progress] 0 MB, 238 ung vien [progress] 0 MB, 238 ung vien [progress] 0 MB, 238 ung vien [progress] 0 MB, 238 ung vien [progress] 0 MB, 238 ung vien [progress] 0 MB, 238 ung vien [progress] 0 MB, 238 ung vien [progress] 0 MB, 238 ung vien [progress] 0 MB, 238 ung vien [progress] 0 MB, 238 ung vien [progress] 0 MB, 248 ung vien [progress] 0 MB, 251 ung vien [progress] 3584 MB, 119207 ung vien [progress] 3584 MB, 119478 ung vien [progress] 4096 MB, 162348 ung vien [progress] 4096 MB, 162348 ung vien [progress] 4096 MB, 162379 ung vien [progress] 4096 MB, 162379 ung vien [progress] 4096 MB, 162379 ung vien [progress] 4096 MB, 162379 ung vien [progress] 4096 MB, 162442 ung vien [progress] 6144 MB, 273288 ung vien [OK] Da ghi 750427 ung vien vao hp_candidates.txt Ket qua: 750427 ung vien 0x7FFE026C 0xE6807E5880 0xE6807E58F8 0xE6807E5910 0xE6807F9464 0xE6807F951C 0xE6807F9A14 0xE6807F9ACC 0xE6807F9EE4 0xE6807F9F9C 0xE6807FA1D4 0xE6807FA28C 0xE6807FA958 0xE6807FC3FC 0xE6807FCEF0 0xE6807FD698 0xE680FE57C4 0xE680FE7250 0xE680FE72F8 0xE680FF1CF0 0xE680FF1E00 0xE680FF1F10 0xE680FF1F98 0xE680FFA5EC 0xE680FFAEA8 0xE680FFE6B8 0xE680FFE758 0xE6817E97D0 0xE6817EDD50 0xE6817EDFF8 ... va 750397 dia chi khac trong hp_candidates.txt Huong dan: de nhan vat mat/hoi mau roi chay: memprobe.exe scan-hp --rescan hp_candidates.txt [SCAN DONE] [OK] Da gan vao PID 34188 (elevated) === SCAN-HP rescan-changed (bo dia chi van == 10) === [OK] Da ghi 4602 ung vien vao hp_candidates.txt Ket qua: 4602 ung vien 0xE6897F90D8 0xE689FFF2B8 0xE690FF8418 0xE690FF87A8 0xE690FF9928 0xE690FF992C 0xE690FF99D8 0xE690FF99F0 0xE690FF9A58 0xE690FF9BF0 0xE690FF9E80 0xE690FFCF14 0xE690FFCF18 0xE6917FA0B8 0xE6917FB8D0 0xE691FF95B8 0xE691FFC538 0xE691FFE508 0xE6927F7E38 0xE6927F9348 0xE6927F934C 0xE6927F93F8 0xE6927F9410 0xE6927F9478 0xE6927F9610 0xE6927F98A0 0xE6927FAD78 0xE6927FADF0 0xE6927FB358 0xE6927FB554 ... va 4572 dia chi khac trong hp_candidates.txt Huong dan: de nhan vat mat/hoi mau roi chay: memprobe.exe scan-hp --rescan hp_candidates.txt [SCAN DONE] [OK] Da gan vao PID 34188 (elevated) === SCAN-HP rescan value=33 === [OK] Da ghi 6 ung vien vao hp_candidates.txt Ket qua: 6 ung vien 0x2A95EEAD054 0x2DC9907FF98 0x502433F50FC 0x502654103E8 0x502704E25B8 0x502837037B0 Huong dan: de nhan vat mat/hoi mau roi chay: memprobe.exe scan-hp --rescan hp_candidates.txt [SCAN DONE] [OK] Da gan vao PID 34188 (elevated) === READ 0x2A95EEAD054 (64 bytes) === hex64: 21 00 00 00 00 00 41 00 00 E4 0F 00 23 72 02 20 29 00 00 00 03 00 01 00 00 E4 0F 00 20 72 30 29 23 00 00 00 00 00 41 00 00 E4 0F 00 23 72 34 23 32 00 00 00 1A 00 01 00 00 C4 0F 00 23 72 2A 23 [OK] Da gan vao PID 34188 (elevated) === READ 0x2DC9907FF98 (64 bytes) === hex64: 21 00 00 00 00 00 00 00 F8 FF FF FF FF FF FF FF BA BC F7 77 DC 02 00 00 0F 00 00 00 00 00 00 00 F8 FF FF FF FF FF FF FF BA BC F7 77 DC 02 00 00 10 00 00 00 00 00 00 00 FC FF FF FF FF FF FF FF [OK] Da gan vao PID 34188 (elevated) === READ 0x502433F50FC (64 bytes) === hex64: 21 00 00 00 01 00 00 13 00 00 C0 3F 63 08 80 3C 00 00 00 00 00 35 C9 65 02 05 00 00 00 00 00 00 00 00 3C 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x502654103E8 (64 bytes) === hex64: 21 00 00 00 2A 00 00 00 2A 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 FF FF FF FF 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x502704E25B8 (64 bytes) === hex64: 21 00 00 00 00 00 00 00 90 3F BE 6F 02 05 00 00 90 01 01 6E 02 05 00 00 E0 01 00 00 00 00 00 00 52 01 00 00 00 00 00 00 28 7E 54 41 FB 7F 00 00 ED 5E AD DE 05 00 00 00 00 00 00 00 02 02 00 02 [OK] Da gan vao PID 34188 (elevated) === READ 0x502837037B0 (64 bytes) === hex64: 21 00 00 00 00 00 00 00 64 22 00 00 DF 37 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 5C 02 12 F7 7F 00 00 92 6A 00 00 92 6A 00 00 D0 35 70 83 02 05 00 00 00 00 00 00 00 00 00 00 [OK] Da gan vao PID 34188 (elevated) === PTRDEEP target=0x502654103E8 maxOff=0x10000 maxDepth=8 === Gia tri hien tai = 33 So module: 131 [pass 1] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 2048 MB, 0 match [progress] 6144 MB, 0 match [progress] 7168 MB, 0 match [progress] 7168 MB, 0 match [progress] 7168 MB, 0 match [progress] 7168 MB, 0 match [progress] 7168 MB, 0 match [progress] 7168 MB, 0 match [progress] 7168 MB, 0 match [progress] 7168 MB, 0 match [progress] 7168 MB, 0 match [pass 1] xong: 481 match [depth 1] matches=481 [depth 1] frontier=481 [pass 2] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 2048 MB, 19 match [progress] 6144 MB, 19 match [progress] 7168 MB, 22 match [progress] 7168 MB, 22 match [progress] 7168 MB, 22 match [progress] 7168 MB, 22 match [progress] 7168 MB, 22 match [progress] 7168 MB, 22 match [progress] 7168 MB, 22 match [progress] 7168 MB, 22 match [progress] 7168 MB, 22 match [pass 2] xong: 93087 match [depth 2] matches=93087 [depth 2] frontier=50000 [pass 3] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 23 match [progress] 0 MB, 36 match [progress] 0 MB, 40 match [progress] 0 MB, 42 match [progress] 0 MB, 52 match [progress] 0 MB, 54 match [progress] 0 MB, 56 match [progress] 0 MB, 58 match [progress] 0 MB, 60 match [progress] 0 MB, 62 match [progress] 0 MB, 69 match [progress] 0 MB, 77 match [progress] 0 MB, 81 match [progress] 0 MB, 85 match [progress] 0 MB, 85 match [progress] 0 MB, 85 match [progress] 0 MB, 85 match [progress] 0 MB, 87 match [progress] 0 MB, 91 match [progress] 0 MB, 91 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 110 match [progress] 0 MB, 156 match [progress] 0 MB, 161 match [progress] 2048 MB, 1438 match [progress] 7168 MB, 1755 match [progress] 7168 MB, 1755 match [progress] 7168 MB, 1755 match [progress] 7168 MB, 1755 match [progress] 7168 MB, 1756 match [progress] 7168 MB, 1756 match [progress] 7168 MB, 1756 match [progress] 7168 MB, 1756 match [progress] 7168 MB, 1756 match [progress] 7168 MB, 1756 match [pass 3] xong: 1018811 match [depth 3] matches=1018811 [depth 3] frontier=50000 [pass 4] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 574 match [progress] 0 MB, 1156 match [progress] 0 MB, 1890 match [progress] 0 MB, 2442 match [progress] 0 MB, 2801 match [progress] 0 MB, 3407 match [progress] 0 MB, 3910 match [progress] 0 MB, 4446 match [progress] 0 MB, 4988 match [progress] 0 MB, 5458 match [progress] 0 MB, 5707 match [progress] 0 MB, 5955 match [progress] 0 MB, 6212 match [progress] 0 MB, 6460 match [progress] 0 MB, 6466 match [progress] 0 MB, 6472 match [progress] 0 MB, 6472 match [progress] 0 MB, 6518 match [progress] 0 MB, 6599 match [progress] 0 MB, 6608 match [progress] 0 MB, 6645 match [progress] 0 MB, 6671 match [progress] 0 MB, 6671 match [progress] 0 MB, 6684 match [progress] 0 MB, 6684 match [progress] 0 MB, 6684 match [progress] 0 MB, 6684 match [progress] 0 MB, 6685 match [progress] 0 MB, 6686 match [progress] 0 MB, 6687 match [progress] 0 MB, 6687 match [progress] 0 MB, 6688 match [progress] 0 MB, 6689 match [progress] 0 MB, 6689 match [progress] 0 MB, 6689 match [progress] 0 MB, 6689 match [progress] 0 MB, 6689 match [progress] 0 MB, 6689 match [progress] 0 MB, 6689 match [progress] 0 MB, 6689 match [progress] 0 MB, 6689 match [progress] 0 MB, 6689 match [progress] 0 MB, 6689 match [progress] 0 MB, 6695 match [progress] 0 MB, 6695 match [progress] 0 MB, 6702 match [progress] 0 MB, 6702 match [progress] 0 MB, 6702 match [progress] 0 MB, 6702 match [progress] 0 MB, 6702 match [progress] 0 MB, 6703 match [progress] 0 MB, 6703 match [progress] 0 MB, 6703 match [progress] 0 MB, 6703 match [progress] 0 MB, 6703 match [progress] 0 MB, 6703 match [progress] 0 MB, 6703 match [progress] 0 MB, 6703 match [progress] 0 MB, 6703 match [progress] 0 MB, 6703 match [progress] 0 MB, 8093 match [progress] 0 MB, 8365 match [progress] 4096 MB, 31672 match [pass 4] xong: 825015 match [depth 4] matches=825015 [depth 4] frontier=50000 [pass 5] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 686 match [progress] 0 MB, 1444 match [progress] 0 MB, 2324 match [progress] 0 MB, 3024 match [progress] 0 MB, 3459 match [progress] 0 MB, 4355 match [progress] 0 MB, 5162 match [progress] 0 MB, 5904 match [progress] 0 MB, 6589 match [progress] 0 MB, 7206 match [progress] 0 MB, 7656 match [progress] 0 MB, 8126 match [progress] 0 MB, 8592 match [progress] 0 MB, 9063 match [progress] 0 MB, 9143 match [progress] 0 MB, 9214 match [progress] 0 MB, 9219 match [progress] 0 MB, 9267 match [progress] 0 MB, 9356 match [progress] 0 MB, 10219 match [progress] 0 MB, 10261 match [progress] 0 MB, 10572 match [progress] 0 MB, 10627 match [progress] 0 MB, 10715 match [progress] 0 MB, 10761 match [progress] 0 MB, 10819 match [progress] 0 MB, 10862 match [progress] 0 MB, 10903 match [progress] 0 MB, 10966 match [progress] 0 MB, 11009 match [progress] 0 MB, 11108 match [progress] 0 MB, 11201 match [progress] 0 MB, 11258 match [progress] 0 MB, 11408 match [progress] 0 MB, 11629 match [progress] 0 MB, 11872 match [progress] 0 MB, 12058 match [progress] 0 MB, 12103 match [progress] 0 MB, 12188 match [progress] 0 MB, 12264 match [progress] 0 MB, 12310 match [progress] 0 MB, 12335 match [progress] 0 MB, 12358 match [progress] 0 MB, 12502 match [progress] 0 MB, 12530 match [progress] 0 MB, 12550 match [progress] 0 MB, 12572 match [progress] 0 MB, 12618 match [progress] 0 MB, 12651 match [progress] 0 MB, 12675 match [progress] 0 MB, 12682 match [progress] 0 MB, 12813 match [progress] 0 MB, 12819 match [progress] 0 MB, 12840 match [progress] 0 MB, 12856 match [progress] 0 MB, 12860 match [progress] 0 MB, 12891 match [progress] 0 MB, 12907 match [progress] 0 MB, 12908 match [progress] 0 MB, 12912 match [progress] 0 MB, 14332 match [progress] 0 MB, 14670 match [progress] 2048 MB, 341708 match [progress] 7168 MB, 1815511 match [progress] 7168 MB, 1816092 match [progress] 7168 MB, 1816342 match [progress] 7168 MB, 1816371 match [progress] 7168 MB, 1816580 match [pass 5] xong: 2233072 match [depth 5] matches=2233072 [depth 5] frontier=50000 [pass 6] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 533 match [progress] 0 MB, 1080 match [progress] 0 MB, 1756 match [progress] 0 MB, 2349 match [progress] 0 MB, 2733 match [progress] 0 MB, 3302 match [progress] 0 MB, 3902 match [progress] 0 MB, 4386 match [progress] 0 MB, 4858 match [progress] 0 MB, 5312 match [progress] 0 MB, 5497 match [progress] 0 MB, 5680 match [progress] 0 MB, 5871 match [progress] 0 MB, 6086 match [progress] 0 MB, 6162 match [progress] 0 MB, 6216 match [progress] 0 MB, 6261 match [progress] 0 MB, 6305 match [progress] 0 MB, 6417 match [progress] 0 MB, 7272 match [progress] 0 MB, 7300 match [progress] 0 MB, 7375 match [progress] 0 MB, 7473 match [progress] 0 MB, 7494 match [progress] 0 MB, 7531 match [progress] 0 MB, 7536 match [progress] 0 MB, 7554 match [progress] 0 MB, 7595 match [progress] 0 MB, 7619 match [progress] 0 MB, 7663 match [progress] 0 MB, 7687 match [progress] 0 MB, 7707 match [progress] 0 MB, 8409 match [progress] 0 MB, 9187 match [progress] 0 MB, 9928 match [progress] 0 MB, 10675 match [progress] 0 MB, 10697 match [progress] 0 MB, 10719 match [progress] 0 MB, 10741 match [progress] 0 MB, 10762 match [progress] 0 MB, 10795 match [progress] 0 MB, 10863 match [progress] 0 MB, 11064 match [progress] 0 MB, 11066 match [progress] 0 MB, 11092 match [progress] 0 MB, 11094 match [progress] 0 MB, 11107 match [progress] 0 MB, 11117 match [progress] 0 MB, 11126 match [progress] 0 MB, 11355 match [progress] 0 MB, 11367 match [progress] 0 MB, 11398 match [progress] 0 MB, 11426 match [progress] 0 MB, 11433 match [progress] 0 MB, 11524 match [progress] 0 MB, 11576 match [progress] 0 MB, 11579 match [progress] 0 MB, 12594 match [progress] 0 MB, 12839 match [progress] 2048 MB, 362839 match [progress] 7168 MB, 438908 match [progress] 7168 MB, 438908 match [progress] 7168 MB, 438909 match [progress] 7168 MB, 438909 match [progress] 7168 MB, 438909 match [pass 6] xong: 698846 match [depth 6] matches=698846 [depth 6] frontier=50000 [pass 7] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 166 match [progress] 0 MB, 588 match [progress] 0 MB, 1165 match [progress] 0 MB, 1629 match [progress] 0 MB, 1930 match [progress] 0 MB, 2486 match [progress] 0 MB, 2727 match [progress] 0 MB, 3148 match [progress] 0 MB, 3609 match [progress] 0 MB, 4022 match [progress] 0 MB, 4189 match [progress] 0 MB, 4338 match [progress] 0 MB, 4495 match [progress] 0 MB, 4646 match [progress] 0 MB, 4705 match [progress] 0 MB, 4709 match [progress] 0 MB, 4752 match [progress] 0 MB, 4803 match [progress] 0 MB, 4916 match [progress] 0 MB, 5765 match [progress] 0 MB, 5765 match [progress] 0 MB, 5834 match [progress] 0 MB, 5928 match [progress] 0 MB, 5949 match [progress] 0 MB, 5978 match [progress] 0 MB, 5982 match [progress] 0 MB, 5997 match [progress] 0 MB, 6030 match [progress] 0 MB, 6050 match [progress] 0 MB, 6091 match [progress] 0 MB, 6112 match [progress] 0 MB, 6132 match [progress] 0 MB, 6831 match [progress] 0 MB, 7608 match [progress] 0 MB, 8348 match [progress] 0 MB, 9094 match [progress] 0 MB, 9113 match [progress] 0 MB, 9132 match [progress] 0 MB, 9151 match [progress] 0 MB, 9170 match [progress] 0 MB, 9203 match [progress] 0 MB, 9266 match [progress] 0 MB, 9467 match [progress] 0 MB, 9469 match [progress] 0 MB, 9500 match [progress] 0 MB, 9502 match [progress] 0 MB, 9513 match [progress] 0 MB, 9522 match [progress] 0 MB, 9529 match [progress] 0 MB, 9756 match [progress] 0 MB, 9768 match [progress] 0 MB, 9798 match [progress] 0 MB, 9825 match [progress] 0 MB, 9832 match [progress] 0 MB, 9923 match [progress] 0 MB, 9973 match [progress] 0 MB, 9976 match [progress] 0 MB, 11034 match [progress] 0 MB, 11238 match [progress] 2048 MB, 81725 match [progress] 7168 MB, 146821 match [progress] 7168 MB, 146821 match [progress] 7168 MB, 146822 match [progress] 7168 MB, 146822 match [progress] 7168 MB, 146822 match [pass 7] xong: 312066 match [depth 7] matches=312066 [depth 7] frontier=50000 [pass 8] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 173 match [progress] 0 MB, 326 match [progress] 0 MB, 641 match [progress] 0 MB, 816 match [progress] 0 MB, 854 match [progress] 0 MB, 1091 match [progress] 0 MB, 1326 match [progress] 0 MB, 1528 match [progress] 0 MB, 1764 match [progress] 0 MB, 1960 match [progress] 0 MB, 2454 match [progress] 0 MB, 2773 match [progress] 0 MB, 3074 match [progress] 0 MB, 3359 match [progress] 0 MB, 3362 match [progress] 0 MB, 3372 match [progress] 0 MB, 3388 match [progress] 0 MB, 3448 match [progress] 0 MB, 3558 match [progress] 0 MB, 4412 match [progress] 0 MB, 4429 match [progress] 0 MB, 4570 match [progress] 0 MB, 4588 match [progress] 0 MB, 4636 match [progress] 0 MB, 4673 match [progress] 0 MB, 4724 match [progress] 0 MB, 4759 match [progress] 0 MB, 4811 match [progress] 0 MB, 4845 match [progress] 0 MB, 4959 match [progress] 0 MB, 5038 match [progress] 0 MB, 5077 match [progress] 0 MB, 5212 match [progress] 0 MB, 5417 match [progress] 0 MB, 5649 match [progress] 0 MB, 5795 match [progress] 0 MB, 5819 match [progress] 0 MB, 5868 match [progress] 0 MB, 5909 match [progress] 0 MB, 5945 match [progress] 0 MB, 5979 match [progress] 0 MB, 5987 match [progress] 0 MB, 5990 match [progress] 0 MB, 6022 match [progress] 0 MB, 6045 match [progress] 0 MB, 6061 match [progress] 0 MB, 6084 match [progress] 0 MB, 6091 match [progress] 0 MB, 6096 match [progress] 0 MB, 6164 match [progress] 0 MB, 6168 match [progress] 0 MB, 6183 match [progress] 0 MB, 6192 match [progress] 0 MB, 6194 match [progress] 0 MB, 6216 match [progress] 0 MB, 6237 match [progress] 0 MB, 6237 match [progress] 0 MB, 7612 match [progress] 0 MB, 7687 match [progress] 2048 MB, 997333 match [progress] 7168 MB, 2019286 match [progress] 7168 MB, 2019591 match [progress] 7168 MB, 2019718 match [progress] 7168 MB, 2019743 match [progress] 7168 MB, 2020016 match [pass 8] xong: 2222534 match [depth 8] matches=2222534 [depth 8] frontier=50000 [PTRDEEP DONE] Het 8 tang - chua gap static root. Co the can tang kMaxDepth/kMaxOff. [OK] Da gan vao PID 34188 (elevated) === READ 0x7FF71312CA20 (8 bytes) === hex64: 10 3C F6 F0 01 05 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x7FF71312CA28 (8 bytes) === hex64: 50 41 F6 F0 01 05 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x7FF71312CA30 (8 bytes) === hex64: 50 41 F6 F0 01 05 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x7FF71312FEF8 (8 bytes) === hex64: 00 17 F4 F0 01 05 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x7FF713133280 (8 bytes) === hex64: 10 1E F6 F0 01 05 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x7FF713133288 (8 bytes) === hex64: 50 23 F6 F0 01 05 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x7FF713133290 (8 bytes) === hex64: 50 23 F6 F0 01 05 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x7FF713275740 (8 bytes) === hex64: 00 42 F6 F0 01 05 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x7FF71312CA20 (8 bytes) === hex64: 10 3C F6 F0 01 05 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x7FF71312CA28 (8 bytes) === hex64: 50 41 F6 F0 01 05 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x7FF71312CA30 (8 bytes) === hex64: 50 41 F6 F0 01 05 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x7FF71312FEF8 (8 bytes) === hex64: 00 17 F4 F0 01 05 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x7FF713133280 (8 bytes) === hex64: 10 1E F6 F0 01 05 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x7FF713133288 (8 bytes) === hex64: 50 23 F6 F0 01 05 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x7FF713133290 (8 bytes) === hex64: 50 23 F6 F0 01 05 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x7FF713275740 (8 bytes) === hex64: 00 42 F6 F0 01 05 00 00 [OK] Da gan vao PID 34188 (elevated) === FINDPLAYER maxHP=42 (full scan) === [OK] 3051 stat block (luu player_candidates.txt) 0x2A93ECFCB00 (HP=0) 0x2A93ED14D60 (HP=0) 0x2A93EE906B0 (HP=0) 0x2A93EEDBDE4 (HP=0) 0x2A93EF02918 (HP=0) 0x2A93EF7DD90 (HP=0) 0x2A93F1C5208 (HP=0) 0x2A93F250058 (HP=0) 0x2A93F3DA040 (HP=0) 0x2A93F418280 (HP=0) 0x2A93F4C3290 (HP=0) 0x2A93F52EDAC (HP=0) 0x2A93F54B840 (HP=0) 0x2A93F76E800 (HP=0) 0x2A93F7C3970 (HP=0) 0x2A93F880D20 (HP=0) 0x2A93F8BCA20 (HP=0) 0x2A93F9138C0 (HP=0) 0x2A93F991D00 (HP=0) 0x2A93FBCD4FC (HP=0) 0x2A9506D2FB0 (HP=0) 0x2A95081CC8C (HP=0) 0x2A95084F3D4 (HP=0) 0x2A95084FCE4 (HP=0) 0x2A950A835F0 (HP=0) 0x2A950CAA568 (HP=0) 0x2A950F734E0 (HP=0) 0x2A9514EAEA0 (HP=0) 0x2A9514F4030 (HP=0) 0x2A95155FF88 (HP=0) Huong dan: mat mau roi chay: findplayer 42 --rescan [FINDPLAYER DONE] [OK] Da gan vao PID 34188 (elevated) === FINDPLAYER rescan HP=26 === [OK] 1 stat block (luu player_candidates.txt) 0x502654103E8 (HP=26) Huong dan: mat mau roi chay: findplayer 42 --rescan [FINDPLAYER DONE] [OK] Da gan vao PID 34188 (elevated) === READ 0x502654103E8 (16 bytes) === hex64: 1A 00 00 00 2A 00 00 00 2A 00 00 00 00 00 00 00 [OK] Da gan vao PID 34188 (elevated) === BRIDGE SEARCH target=0x502654103E8 === Target xac nhan: HP=26 / 42 PathOfExile.exe: base=0x7FF70EB60000 size=0x4C9D000 [Root] RVA 0x45CCA20 -> *(0x7FF71312CA20) = 0x501F0F63C10 [Root] RVA 0x45CCA28 -> *(0x7FF71312CA28) = 0x501F0F64150 [Root] RVA 0x45CCA30 -> *(0x7FF71312CA30) = 0x501F0F64150 [Root] RVA 0x45CFEF8 -> *(0x7FF71312FEF8) = 0x501F0F41700 [Root] RVA 0x45D3280 -> *(0x7FF713133280) = 0x501F0F61E10 [Root] RVA 0x45D3288 -> *(0x7FF713133288) = 0x501F0F62350 [Root] RVA 0x45D3290 -> *(0x7FF713133290) = 0x501F0F62350 [Root] RVA 0x4715740 -> *(0x7FF713275740) = 0x501F0F64200 So static root doc duoc: 8 [pass B1] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 1024 MB, 0 match [pass B1] xong: 114 match [pass B2] bat dau quet... [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 0 MB, 0 match [progress] 1024 MB, 0 match [pass B2] xong: 1199 match [STATIC CHAIN FOUND] [[[0x7FF712F94CE0]+0x48]+0x1AD] -> HP Da ghi chuoi offset vao: C:\Projects\AutoPOE2\bin\Release\offsets.toml [OK] Da gan vao PID 34188 (elevated) === READ 0x7FF712F94CE0 (16 bytes) === hex64: 10 00 D7 93 02 05 00 00 08 BB DB 93 02 05 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x50293D70058 (16 bytes) === hex64: 3B 02 41 65 02 05 00 00 F0 B6 2D 43 02 05 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x502654103E8 (16 bytes) === hex64: 1A 00 00 00 2A 00 00 00 2A 00 00 00 00 00 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x502654103E8 (16 bytes) === hex64: 1A 00 00 00 2A 00 00 00 2A 00 00 00 00 00 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x502654102E8 (512 bytes) === hex64: 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 70 64 1B 50 02 05 00 00 30 15 39 EC 01 05 00 00 30 1C 39 EC 01 05 00 00 B0 75 1B 50 02 05 00 00 30 69 39 EC 01 05 00 00 [OK] Da gan vao PID 34188 (elevated) === READ 0x502654103E8 (512 bytes) === 0502654103E8 1A 00 00 00 2A 00 00 00 2A 00 00 00 00 00 00 00 |....*...*.......| 0502654103F8 00 00 00 00 01 00 00 00 00 00 00 00 FF FF FF FF |................| 050265410408 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410418 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410428 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410438 00 00 00 00 00 00 00 00 10 00 41 65 02 05 00 00 |..........Ae....| 050265410448 00 00 00 00 00 00 00 00 20 7B AF 11 F7 7F 00 00 |........ {......| 050265410458 50 04 41 65 02 05 00 00 78 04 41 65 02 05 00 00 |P.Ae....x.Ae....| 050265410468 80 04 41 65 02 05 00 00 98 04 41 65 02 05 00 00 |..Ae......Ae....| 050265410478 30 CC 05 8C 02 05 00 00 00 00 00 00 00 00 00 00 |0...............| 050265410488 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410498 B0 04 41 65 02 05 00 00 B8 04 41 65 02 05 00 00 |..Ae......Ae....| 0502654104A8 D0 04 41 65 02 05 00 00 30 CC 05 8C 02 05 00 00 |..Ae....0.......| 0502654104B8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 0502654104C8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 0502654104D8 08 04 00 00 00 00 00 00 00 0A D3 42 02 05 00 00 |...........B....| 0502654104E8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 0502654104F8 00 00 00 00 00 00 00 00 07 00 00 00 00 00 00 00 |................| 050265410508 10 04 3F 43 02 05 00 00 00 00 00 00 00 00 00 00 |..?C............| 050265410518 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410528 07 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410538 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410548 66 66 66 3F 00 00 00 00 00 00 2C 42 00 00 8A C2 |fff?......,B....| 050265410558 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410568 00 00 80 3F 00 00 00 00 00 00 00 00 00 00 00 00 |...?............| 050265410578 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410588 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410598 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 0502654105A8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 0502654105B8 F1 2E 50 00 FF FF FF FF 00 00 02 05 00 60 FF FF |..P..........`..| 0502654105C8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 0502654105D8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| [OK] Da gan vao PID 34188 (elevated) === READ 0x502654103E8 (512 bytes) === 0502654103E8 1A 00 00 00 2A 00 00 00 2A 00 00 00 00 00 00 00 |....*...*.......| 0502654103F8 00 00 00 00 01 00 00 00 00 00 00 00 FF FF FF FF |................| 050265410408 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410418 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410428 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410438 00 00 00 00 00 00 00 00 10 00 41 65 02 05 00 00 |..........Ae....| 050265410448 00 00 00 00 00 00 00 00 20 7B AF 11 F7 7F 00 00 |........ {......| 050265410458 50 04 41 65 02 05 00 00 78 04 41 65 02 05 00 00 |P.Ae....x.Ae....| 050265410468 80 04 41 65 02 05 00 00 98 04 41 65 02 05 00 00 |..Ae......Ae....| 050265410478 30 CC 05 8C 02 05 00 00 00 00 00 00 00 00 00 00 |0...............| 050265410488 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410498 B0 04 41 65 02 05 00 00 B8 04 41 65 02 05 00 00 |..Ae......Ae....| 0502654104A8 D0 04 41 65 02 05 00 00 30 CC 05 8C 02 05 00 00 |..Ae....0.......| 0502654104B8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 0502654104C8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 0502654104D8 08 04 00 00 00 00 00 00 00 0A D3 42 02 05 00 00 |...........B....| 0502654104E8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 0502654104F8 00 00 00 00 00 00 00 00 07 00 00 00 00 00 00 00 |................| 050265410508 10 04 3F 43 02 05 00 00 00 00 00 00 00 00 00 00 |..?C............| 050265410518 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410528 07 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410538 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410548 66 66 66 3F 00 00 00 00 00 00 2C 42 00 00 8A C2 |fff?......,B....| 050265410558 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410568 00 00 80 3F 00 00 00 00 00 00 00 00 00 00 00 00 |...?............| 050265410578 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410588 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 050265410598 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 0502654105A8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 0502654105B8 F1 2E 50 00 FF FF FF FF 00 00 02 05 00 60 FF FF |..P..........`..| 0502654105C8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| 0502654105D8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................| [OK] Da gan vao PID 34188 (elevated) === READ 0x502654103E8 (16 bytes) === 0502654103E8 12 00 00 00 2A 00 00 00 2A 00 00 00 00 00 00 00 |....*...*.......| [OK] Da gan vao PID 34188 (elevated) [USAGE] memprobe.exe [OK] Da gan vao PID 34188 (elevated) === SCAN-FLOAT INIT ref=0x502654103E8 === Allocation: base=0x5022E000000 span=0x11010000 [OK] 6596047 float ung vien (luu float_candidates.txt) [SCAN-FLOAT DONE] [OK] Da gan vao PID 34188 (elevated) === SCAN-FLOAT MOVED delta=1.000000 === [OK] con 8775 ung vien 0x5022FBE8A70 = -1.192 0x5022FC308B4 = 0.000 0x5022FC309A8 = 0.000 0x5022FC30ABC = 0.000 0x5022FC30AC8 = 0.000 0x5022FC32148 = 0.000 0x5022FC32210 = 0.000 0x5022FC32270 = -1.192 0x5022FC3238C = 0.000 0x5022FC32390 = 0.000 0x5022FC326E8 = 0.000 0x5022FC326F4 = 0.000 0x502326FBDF0 = 71538094813711494545408.000 0x502328EBD04 = 0.000 0x502328EBD1C = 0.000 0x50232C8D424 = 72070807599234641035264.000 0x50232C8D438 = 17699277253142158817656595021824.000 0x50232C8D498 = 0.000 0x50232C8D534 = 0.000 0x50232C8D548 = 0.000 [SCAN-FLOAT DONE] [OK] Da gan vao PID 34188 (elevated) === SCAN-FLOAT MOVED delta=1.000000 === [OK] con 0 ung vien [SCAN-FLOAT DONE] [OK] Da gan vao PID 34188 (elevated) === READ 0x502654103E8 (16 bytes) === 0502654103E8 23 00 00 00 2A 00 00 00 2A 00 00 00 00 00 00 00 |#...*...*.......| [OK] Da gan vao PID 34188 (elevated) === SCAN-FLOAT INIT2 window=0x502634103E8 size=0x4000000 === [OK] 162662 float ung vien (luu float_candidates.txt) [SCAN-FLOAT DONE] [OK] Da gan vao PID 34188 (elevated) === SCAN-FLOAT MOVED delta=1.000000 === [OK] con 2456 ung vien 0x50264004F70 = -0.000 0x50264007728 = -0.000 0x50264009E90 = -0.000 0x50264444184 = -0.000 0x50264444220 = -3.508 0x50264444270 = 188324046327927703577378684928.000 0x502644442B8 = 2.016 0x502644442E8 = 0.000 0x50264444330 = 0.000 0x502644443D4 = -50801729696646037504.000 0x50264444424 = -0.000 0x50264444444 = 0.000 0x50264444478 = 1542508710897647616.000 0x502644444D0 = 0.000 0x502644444E4 = 0.000 0x50264444548 = 0.000 0x502644445C4 = -223424.500 0x50264444630 = -1313366487938999209668452963844096.000 0x502644446C0 = 0.000 0x50264444720 = 0.000 [SCAN-FLOAT DONE] [OK] Da gan vao PID 34188 (elevated) === SCAN-FLOAT STILL delta=0.050000 === [OK] con 2454 ung vien 0x50264004F70 = -0.000 0x50264007728 = -0.000 0x50264009E90 = -0.000 0x50264444184 = -0.000 0x50264444220 = -3.508 0x50264444270 = 188324046327927703577378684928.000 0x502644442B8 = 2.016 0x502644442E8 = 0.000 0x50264444330 = 0.000 0x502644443D4 = -50801729696646037504.000 0x50264444424 = -0.000 0x50264444444 = 0.000 0x50264444478 = 1542508710897647616.000 0x502644444D0 = 0.000 0x502644444E4 = 0.000 0x50264444548 = 0.000 0x502644445C4 = -223424.500 0x50264444630 = -1313366487938999209668452963844096.000 0x502644446C0 = 0.000 0x50264444720 = 0.000 [SCAN-FLOAT DONE]