{
  "schema": "autopoe2.re_extraction/v1",
  "generated_at": "10/09/2026 13:15:06",
  "elapsed_seconds": 8066.23,
  "tool": "PyGhidra (Ghidra 12.1.3)",
  "provenance": {
    "binary_path": "C:\\Program Files (x86)\\Grinding Gear Games\\Path of Exile 2\\PathOfExile.exe",
    "build_id": "6A9E477A",
    "time_date_stamp": "0x6A9E477A",
    "size_of_image": "0x4C9C000",
    "file_size": 78319448,
    "file_sha256": "e0cde00d395dbb339f2c2e0812c3d872fe5425c04a88af544ab06e19b07a7504",
    "section_layout_hash": "0x5C4322F5CDC0551A"
  },
  "invariants": {
    "INV-SIG-UNIQUE": "signature chỉ được chấp nhận khi match_count == 1",
    "INV-BUILD-01": "mọi tri thức khóa theo build_id ở trên"
  },
  "result": {
    "image_base": "140000000",
    "memory_blocks": [
      {
        "name": "Headers",
        "start": "140000000",
        "end": "1400003ff",
        "size": 1024,
        "execute": false,
        "write": false,
        "read": true,
        "initialized": true
      },
      {
        "name": ".text",
        "start": "140001000",
        "end": "142e84bff",
        "size": 48774144,
        "execute": true,
        "write": false,
        "read": true,
        "initialized": true
      },
      {
        "name": ".rdata",
        "start": "142e85000",
        "end": "143a013ff",
        "size": 12043264,
        "execute": false,
        "write": false,
        "read": true,
        "initialized": true
      },
      {
        "name": ".data",
        "start": "143a02000",
        "end": "14471855b",
        "size": 13722972,
        "execute": false,
        "write": true,
        "read": true,
        "initialized": true
      },
      {
        "name": ".pdata",
        "start": "144719000",
        "end": "1448ddbff",
        "size": 1854464,
        "execute": false,
        "write": false,
        "read": true,
        "initialized": true
      },
      {
        "name": "_RDATA",
        "start": "1448de000",
        "end": "1448e2fff",
        "size": 20480,
        "execute": false,
        "write": false,
        "read": true,
        "initialized": true
      },
      {
        "name": ".rsrc",
        "start": "1448e3000",
        "end": "144b62dff",
        "size": 2620928,
        "execute": false,
        "write": false,
        "read": true,
        "initialized": true
      },
      {
        "name": ".reloc",
        "start": "144b63000",
        "end": "144c9bbff",
        "size": 1281024,
        "execute": false,
        "write": false,
        "read": true,
        "initialized": true
      },
      {
        "name": "tdb",
        "start": "ff00000000",
        "end": "ff0000184f",
        "size": 6224,
        "execute": false,
        "write": true,
        "read": true,
        "initialized": true
      }
    ],
    "function_count": 115021,
    "scanned_references": 4602282,
    "text_block": {
      "name": ".text",
      "start": "140001000",
      "size": 48774144
    },
    "distinct_global_slots": 115566,
    "candidates": [
      {
        "address": "1445cf0a0",
        "block": ".data",
        "fan_in": 18744,
        "sources": [
          "140011f34",
          "14001abad",
          "140044d1d",
          "14010a1f1",
          "14010a3c1",
          "14010af6c",
          "14010b7f1",
          "14010b9d1"
        ],
        "signature": "F0 48 01 1D ? ? ? ? 4C 8D 04 07 0F ? ? ? ? 41 0F 11 40 F0 4D 89 00",
        "match_count": 1,
        "unique": true,
        "rip_offset": 4,
        "instruction_address": "140011f34",
        "mnemonic": "ADD.LOCK",
        "pattern_bytes": 25
      },
      {
        "address": "143a07fe8",
        "block": ".data",
        "fan_in": 17589,
        "sources": [
          "14010a20f",
          "14010a3df",
          "14010b522",
          "14010b553",
          "14010b579",
          "14010b59b",
          "14010b5bf",
          "14010b80f"
        ],
        "signature": "8B 05 ? ? ? ? 89 43 38 48 89 1E 48 8B C6 48 83 C4 70 41 5F 41 5E 41 5C 5F 5E 5D 5B C3 48 ? ? ? ? 53 55 56 57",
        "match_count": 0,
        "unique": false,
        "rip_offset": 2,
        "instruction_address": "14010a20f",
        "mnemonic": "MOV",
        "pattern_bytes": 39
      },
      {
        "address": "143607d60",
        "block": ".rdata",
        "fan_in": 5198,
        "sources": [
          "140062e28",
          "140063109",
          "1400633f9",
          "1400636e9",
          "140108f70",
          "140109c67",
          "14010b0d0",
          "14010b100"
        ],
        "signature": "F3 0F 59 05 ? ? ? ? 0F 28 CB",
        "match_count": 1,
        "unique": true,
        "rip_offset": 4,
        "instruction_address": "140062e28",
        "mnemonic": "MULSS",
        "pattern_bytes": 11
      },
      {
        "address": "142ee1038",
        "block": ".rdata",
        "fan_in": 5191,
        "sources": [
          "14010c1e0",
          "14010c1e7",
          "14010c5b4",
          "14010c5bb",
          "14010c685",
          "14010c6d7",
          "14010c6fd",
          "14010c775"
        ],
        "signature": "48 8D 05 ? ? ? ? 48 89 01 48 C7 41 08 00 00 00 00 4C 8B 42 08",
        "match_count": 1,
        "unique": true,
        "rip_offset": 3,
        "instruction_address": "14010c1e0",
        "mnemonic": "LEA",
        "pattern_bytes": 22
      },
      {
        "address": "144588795",
        "block": ".data",
        "fan_in": 4835,
        "sources": [
          "140117ebf",
          "140117eca",
          "140117ed1",
          "140117ed7",
          "14011d0b7",
          "1401222d4",
          "140127565",
          "140127a96"
        ],
        "signature": "0F B6 0D ? ? ? ? 3A C1 74 21",
        "match_count": 1,
        "unique": true,
        "rip_offset": 3,
        "instruction_address": "140117ebf",
        "mnemonic": "MOVZX",
        "pattern_bytes": 11
      },
      {
        "address": "14319dc38",
        "block": ".rdata",
        "fan_in": 4302,
        "sources": [
          "1413c9c87",
          "1413c9c8e",
          "1413c9e05",
          "1413c9e0c",
          "1413c9fb0",
          "1413c9fb7",
          "1413ca115",
          "1413ca11c"
        ],
        "signature": "48 8D 05 ? ? ? ? 48 89 83 ? ? ? ? 48 8D 05 ? ? ? ? 48 89 83 ? ? ? ? 33 C0 48 89 83 90 05 00 00",
        "match_count": 3,
        "unique": false,
        "rip_offset": 3,
        "instruction_address": "1413c9c87",
        "mnemonic": "LEA",
        "pattern_bytes": 37
      },
      {
        "address": "1439f77f0",
        "block": ".rdata",
        "fan_in": 4082,
        "sources": [
          "140120812",
          "140120d07",
          "1401212a9",
          "140121b44",
          "140270f2a",
          "140902e1a",
          "14090e737",
          "14093aa70"
        ],
        "signature": "48 8D 15 ? ? ? ? 48 8D 8C 24 ? ? ? ? E8 BA FE AE 02",
        "match_count": 1,
        "unique": true,
        "rip_offset": 3,
        "instruction_address": "140120812",
        "mnemonic": "LEA",
        "pattern_bytes": 20
      },
      {
        "address": "143607b18",
        "block": ".rdata",
        "fan_in": 4054,
        "sources": [
          "140032fd4",
          "140033004",
          "140133af2",
          "140133f9e",
          "140163994",
          "140163a67",
          "140164daa",
          "14018279e"
        ],
        "signature": "F3 0F 10 05 ? ? ? ? E8 2F 7F 1D 00",
        "match_count": 1,
        "unique": true,
        "rip_offset": 4,
        "instruction_address": "140032fd4",
        "mnemonic": "MOVSS",
        "pattern_bytes": 13
      },
      {
        "address": "142f7bb40",
        "block": ".rdata",
        "fan_in": 3589,
        "sources": [
          "14015946b",
          "140159472",
          "140159512",
          "140159519",
          "1401ae8c5",
          "1401ae8cc",
          "1401b19d6",
          "1401b19dd"
        ],
        "signature": "48 8D 05 ? ? ? ? 48 89 83 ? ? ? ? 48 8B C3 48 C7 83 88 00 00 00 C8 02 00 00 48 ? ? ? ? 48 83 C4 20 5F C3",
        "match_count": 2,
        "unique": false,
        "rip_offset": 3,
        "instruction_address": "14015946b",
        "mnemonic": "LEA",
        "pattern_bytes": 39
      },
      {
        "address": "ff00000058",
        "block": "tdb",
        "fan_in": 3471,
        "sources": [
          "140004420",
          "140020f60",
          "140062030",
          "14006efe0",
          "140075120",
          "140101a60",
          "140101fb0",
          "140103334"
        ],
        "signature": "65 48 8B 04 25 ? ? ? ? 0F 57 C0 B9 38 07 02 00",
        "match_count": 1,
        "unique": true,
        "rip_offset": 5,
        "instruction_address": "140004420",
        "mnemonic": "MOV",
        "pattern_bytes": 17
      },
      {
        "address": "142f7c7d8",
        "block": ".rdata",
        "fan_in": 3371,
        "sources": [
          "14015945d",
          "140159464",
          "1401ae8b7",
          "1401ae8be",
          "1401afb14",
          "1401afb1b",
          "1401b1785",
          "1401b178c"
        ],
        "signature": "48 8D 05 ? ? ? ? 48 89 83 ? ? ? ? 48 8D 05 ? ? ? ? 48 89 83 ? ? ? ? 48 8B C3",
        "match_count": 226,
        "unique": false,
        "rip_offset": 3,
        "instruction_address": "14015945d",
        "mnemonic": "LEA",
        "pattern_bytes": 31
      },
      {
        "address": "142ee12d8",
        "block": ".rdata",
        "fan_in": 3136,
        "sources": [
          "14013786f",
          "1401378b1",
          "140137926",
          "140137973",
          "140137a4b",
          "140137a76",
          "140137ab1",
          "14019d710"
        ],
        "signature": "48 8D 1D ? ? ? ? 48 85 C9 74 18 E8 A0 BE 09 02",
        "match_count": 1,
        "unique": true,
        "rip_offset": 3,
        "instruction_address": "14013786f",
        "mnemonic": "LEA",
        "pattern_bytes": 17
      },
      {
        "address": "142f71328",
        "block": ".rdata",
        "fan_in": 2709,
        "sources": [
          "14001c4b7",
          "14001c9b7",
          "14006a377",
          "14006a597",
          "1400e5847",
          "140110e3a",
          "140110ef5",
          "140110fb0"
        ],
        "signature": "48 8D 15 ? ? ? ? 48 8D 0D ? ? ? ? E8 76 61 13 00",
        "match_count": 1,
        "unique": true,
        "rip_offset": 3,
        "instruction_address": "14001c4b7",
        "mnemonic": "LEA",
        "pattern_bytes": 19
      },
      {
        "address": "1439fa338",
        "block": ".rdata",
        "fan_in": 2435,
        "sources": [
          "14086c32b",
          "14086c4e7",
          "14120fe14",
          "14120fe3c",
          "1413cadf4",
          "1413cc26c",
          "1413cc291",
          "1413cc2b3"
        ],
        "signature": "48 8D 15 ? ? ? ? 48 8D 4D 80 E8 A5 43 3A 02",
        "match_count": 1,
        "unique": true,
        "rip_offset": 3,
        "instruction_address": "14086c32b",
        "mnemonic": "LEA",
        "pattern_bytes": 16
      },
      {
        "address": "14360864c",
        "block": ".rdata",
        "fan_in": 2322,
        "sources": [
          "14012b645",
          "140130feb",
          "1401320e0",
          "1401a4fd7",
          "1401a4fdf",
          "1401a8a77",
          "1402271dc",
          "140228fef"
        ],
        "signature": "F3 44 0F 10 1D ? ? ? ? F3 44 0F 10 25 ? ? ? ? F3 44 0F 10 2D ? ? ? ? F3 44 0F 10 3D ? ? ? ?",
        "match_count": 3,
        "unique": false,
        "rip_offset": 5,
        "instruction_address": "14012b645",
        "mnemonic": "MOVSS",
        "pattern_bytes": 36
      },
      {
        "address": "143a08068",
        "block": ".data",
        "fan_in": 2216,
        "sources": [
          "140173a9a",
          "140173aaa",
          "140173b52",
          "140173b62",
          "140173bec",
          "140173bfc",
          "140173ca2",
          "140173cb2"
        ],
        "signature": "8B 05 ? ? ? ? 88 5D 7B EB 0F E8 E6 1E 33 02",
        "match_count": 1,
        "unique": true,
        "rip_offset": 2,
        "instruction_address": "140173a9a",
        "mnemonic": "MOV",
        "pattern_bytes": 16
      },
      {
        "address": "142ea84b8",
        "block": ".rdata",
        "fan_in": 2043,
        "sources": [
          "1401086ef",
          "1401086f6",
          "140108dbd",
          "140108dc4",
          "14010995d",
          "140109964",
          "1401134e7",
          "1401134ee"
        ],
        "signature": "48 8D 05 ? ? ? ? 48 89 01 E8 E6 41 A8 02",
        "match_count": 1,
        "unique": true,
        "rip_offset": 3,
        "instruction_address": "1401086ef",
        "mnemonic": "LEA",
        "pattern_bytes": 15
      },
      {
        "address": "142e85300",
        "block": ".rdata",
        "fan_in": 1957,
        "sources": [
          "140108a9d",
          "14010aa94",
          "14010aba9",
          "140119ffd",
          "14011b993",
          "14011b9f2",
          "14011cf4a",
          "140124902"
        ],
        "signature": "FF 15 ? ? ? ? 83 7E 10 00",
        "match_count": 1,
        "unique": true,
        "rip_offset": 2,
        "instruction_address": "140108a9d",
        "mnemonic": "CALL",
        "pattern_bytes": 10
      },
      {
        "address": "142ee10b0",
        "block": ".rdata",
        "fan_in": 1947,
        "sources": [
          "140108d9b",
          "140108da2",
          "14010993b",
          "140109942",
          "1401131fb",
          "140113202",
          "1401134c9",
          "140113593"
        ],
        "signature": "48 8D 05 ? ? ? ? 48 89 84 32 ? ? ? ? 48 8B 07 48 63 50 04 44 8D 42 E8 44 89 84 32 64 FF FF FF",
        "match_count": 2,
        "unique": false,
        "rip_offset": 3,
        "instruction_address": "140108d9b",
        "mnemonic": "LEA",
        "pattern_bytes": 34
      },
      {
        "address": "142e85308",
        "block": ".rdata",
        "fan_in": 1908,
        "sources": [
          "140108a13",
          "14010aa22",
          "14010aae6",
          "140119fd7",
          "14011b96a",
          "14011b9c9",
          "14011cf37",
          "1401248cb"
        ],
        "signature": "FF 15 ? ? ? ? E8 D2 FE FF FF",
        "match_count": 1,
        "unique": true,
        "rip_offset": 2,
        "instruction_address": "140108a13",
        "mnemonic": "CALL",
        "pattern_bytes": 11
      },
      {
        "address": "1445cb0f0",
        "block": ".data",
        "fan_in": 1740,
        "sources": [
          "1401afd8a",
          "1401b0fa7",
          "1401bac9c",
          "1401bb91d",
          "1401bb939",
          "1401bb977",
          "1401bfea4",
          "1401c4ec9"
        ],
        "signature": "4C 8D 25 ? ? ? ? 48 85 C9 74 0A E8 65 02 5C 02",
        "match_count": 1,
        "unique": true,
        "rip_offset": 3,
        "instruction_address": "1401afd8a",
        "mnemonic": "LEA",
        "pattern_bytes": 17
      },
      {
        "address": "142ee12a8",
        "block": ".rdata",
        "fan_in": 1715,
        "sources": [
          "140123a9a",
          "140143f0a",
          "140143f13",
          "14015d35b",
          "14015d36a",
          "14015d53b",
          "14015d54a",
          "14015d71b"
        ],
        "signature": "4C 8D 3D ? ? ? ? 8B 2F",
        "match_count": 1,
        "unique": true,
        "rip_offset": 3,
        "instruction_address": "140123a9a",
        "mnemonic": "LEA",
        "pattern_bytes": 9
      },
      {
        "address": "142ee12dc",
        "block": ".rdata",
        "fan_in": 1688,
        "sources": [
          "1401378a1",
          "14013792c",
          "14013793b",
          "1401379a6",
          "1401379fe",
          "140137a46",
          "140137aac",
          "140137add"
        ],
        "signature": "F3 ? ? ? ? F3 0F 59 15 ? ? ? ? 49 8B 06 F3 0F 59 09",
        "match_count": 1,
        "unique": true,
        "rip_offset": 1,
        "instruction_address": "1401378a1",
        "mnemonic": "MULSS",
        "pattern_bytes": 20
      },
      {
        "address": "142e85600",
        "block": ".rdata",
        "fan_in": 1683,
        "sources": [
          "14010a205",
          "14010a3d5",
          "14010b805",
          "14010b9e5",
          "14010bbb5",
          "14010bf35",
          "14010cc95",
          "14010d5b5"
        ],
        "signature": "FF 15 ? ? ? ? F0 FF 43 3C 8B 05 ? ? ? ? 89 43 38 48 89 1E 48 8B C6 48 83 C4 70 41 5F 41 5E 41 5C 5F 5E 5D 5B C3",
        "match_count": 669,
        "unique": false,
        "rip_offset": 2,
        "instruction_address": "14010a205",
        "mnemonic": "CALL",
        "pattern_bytes": 40
      },
      {
        "address": "142f711ed",
        "block": ".rdata",
        "fan_in": 1669,
        "sources": [
          "140022437",
          "1400225e4",
          "140105f67",
          "140107644",
          "140107b94",
          "140107ed4",
          "140110aae",
          "140110ad0"
        ],
        "signature": "48 8D 15 ? ? ? ? 48 8D 0D ? ? ? ? E8 B6 03 13 00",
        "match_count": 1,
        "unique": true,
        "rip_offset": 3,
        "instruction_address": "140022437",
        "mnemonic": "LEA",
        "pattern_bytes": 19
      },
      {
        "address": "142e857e8",
        "block": ".rdata",
        "fan_in": 1667,
        "sources": [
          "14010a0ff",
          "14010a2cf",
          "14010b6ff",
          "14010b8df",
          "14010baaf",
          "14010be2f",
          "14010cb8f",
          "14010d4af"
        ],
        "signature": "FF 15 ? ? ? ? C6 ? ? ? ? 4C ? ? ? ? 4C 89 BC 24 ? ? ? ? 4C 6B F3 38 4C 03 F5 4C 8D 84 24 ? ? ? ?",
        "match_count": 855,
        "unique": false,
        "rip_offset": 2,
        "instruction_address": "14010a0ff",
        "mnemonic": "CALL",
        "pattern_bytes": 39
      },
      {
        "address": "142e85410",
        "block": ".rdata",
        "fan_in": 1616,
        "sources": [
          "14010a7a3",
          "14010a96e",
          "14010f254",
          "14010f2a2",
          "14010f2f7",
          "14010f493",
          "14010f585",
          "14010f680"
        ],
        "signature": "FF 15 ? ? ? ? 8B D8 48 8D 8D ? ? ? ? E8 F9 A3 B1 02",
        "match_count": 1,
        "unique": true,
        "rip_offset": 2,
        "instruction_address": "14010a7a3",
        "mnemonic": "CALL",
        "pattern_bytes": 20
      },
      {
        "address": "142f76bf8",
        "block": ".rdata",
        "fan_in": 1606,
        "sources": [
          "14013857a",
          "140138581",
          "140138594",
          "1401385d9",
          "1401ae042",
          "1401ae0c3",
          "1401ae0dc",
          "1401ae116"
        ],
        "signature": "48 8D 0D ? ? ? ? 48 ? ? ? ? 48 C7 44 24 38 ? ? ? ? 0F ? ? ? ? 66 0F ? ? ? ? 48 8D B8 58 01 00 00",
        "match_count": 5,
        "unique": false,
        "rip_offset": 3,
        "instruction_address": "14013857a",
        "mnemonic": "LEA",
        "pattern_bytes": 39
      },
      {
        "address": "14351e670",
        "block": ".rdata",
        "fan_in": 1602,
        "sources": [
          "1423cef1f",
          "1423cef85",
          "1423cf3f2",
          "1423cf458",
          "1423cfd31",
          "1423cfd97",
          "1423d0560",
          "1423d05c6"
        ],
        "signature": "48 8D 15 ? ? ? ? 48 8B C8 E8 72 0E D8 FD",
        "match_count": 1,
        "unique": true,
        "rip_offset": 3,
        "instruction_address": "1423cef1f",
        "mnemonic": "LEA",
        "pattern_bytes": 15
      },
      {
        "address": "1445c9c90",
        "block": ".data",
        "fan_in": 1441,
        "sources": [
          "1426c9519",
          "1426c9520",
          "1426c9527",
          "1426c956d",
          "1426c95ab",
          "1426c95e9",
          "1426c9627",
          "1426c9661"
        ],
        "signature": "48 8D 05 ? ? ? ? 48 89 85 ? ? ? ? 48 8D 0D ? ? ? ? E8 5D A4 01 00",
        "match_count": 1,
        "unique": true,
        "rip_offset": 3,
        "instruction_address": "1426c9519",
        "mnemonic": "LEA",
        "pattern_bytes": 26
      },
      {
        "address": "1445cb248",
        "block": ".data",
        "fan_in": 1397,
        "sources": [
          "1401b0fda",
          "1401bfedd",
          "1401c01fb",
          "1401c6f0c",
          "1401c938f",
          "1401cc723",
          "14020c4c8",
          "14020d7f7"
        ],
        "signature": "49 8D 8E ? ? ? ? E8 4A 06 FA FF",
        "match_count": 1,
        "unique": true,
        "rip_offset": 3,
        "instruction_address": "1401b0fda",
        "mnemonic": "LEA",
        "pattern_bytes": 12
      },
      {
        "address": "14360b360",
        "block": ".rdata",
        "fan_in": 1380,
        "sources": [
          "140069fc1",
          "1400e6496",
          "140113652",
          "140117795",
          "140117965",
          "140117991",
          "14011d5d6",
          "14012c5d3"
        ],
        "signature": "66 0F 6F 0D ? ? ? ? 66 0F 7F 0D ? ? ? ? 33 C0 66 89 05 ? ? ? ? 0F 11 05 ? ? ? ?",
        "match_count": 1,
        "unique": true,
        "rip_offset": 4,
        "instruction_address": "140069fc1",
        "mnemonic": "MOVDQA",
        "pattern_bytes": 32
      },
      {
        "address": "14361a130",
        "block": ".rdata",
        "fan_in": 1357,
        "sources": [
          "14001db7f",
          "1400227bf",
          "140033011",
          "140062116",
          "14006241a",
          "1400626fc",
          "1400629e2",
          "14010941e"
        ],
        "signature": "F3 0F 10 15 ? ? ? ? 0F 57 C2 F3 0F 11 05 ? ? ? ?",
        "match_count": 1,
        "unique": true,
        "rip_offset": 4,
        "instruction_address": "14001db7f",
        "mnemonic": "MOVSS",
        "pattern_bytes": 19
      },
      {
        "address": "1445c599c",
        "block": ".data",
        "fan_in": 1313,
        "sources": [
          "140115aad",
          "140173a85",
          "140173b3d",
          "140173bd7",
          "140173c8d",
          "140173d06",
          "140173dbd",
          "140173e36"
        ],
        "signature": "C6 05 E8 ? ? ? ? 0F 57 C0",
        "match_count": 1,
        "unique": true,
        "rip_offset": 3,
        "instruction_address": "140115aad",
        "mnemonic": "MOV",
        "pattern_bytes": 10
      },
      {
        "address": "142f76a98",
        "block": ".rdata",
        "fan_in": 1259,
        "sources": [
          "140137b7b",
          "140137b82",
          "1401b0fae",
          "1401b0fb5",
          "1401c01db",
          "1401c01e2",
          "1401c6ee0",
          "1401c6ee7"
        ],
        "signature": "48 8D 05 ? ? ? ? 48 ? ? ? ? 48 C7 44 24 38 ? ? ? ? 0F ? ? ? ? 66 0F ? ? ? ? 4C ? ? ? ?",
        "match_count": 623,
        "unique": false,
        "rip_offset": 3,
        "instruction_address": "140137b7b",
        "mnemonic": "LEA",
        "pattern_bytes": 37
      },
      {
        "address": "142f76a9e",
        "block": ".rdata",
        "fan_in": 1233,
        "sources": [
          "140137b95",
          "140137bcf",
          "1401b0fc8",
          "1401b1008",
          "1401c01f5",
          "1401c022f",
          "1401c0383",
          "1401c6efa"
        ],
        "signature": "66 0F ? ? ? ? 4C ? ? ? ? 48 8D 55 67 48 8D 8F 58 01 00 00 E8 80 9A 01 00",
        "match_count": 1,
        "unique": true,
        "rip_offset": 2,
        "instruction_address": "140137b95",
        "mnemonic": "MOVDQA",
        "pattern_bytes": 27
      },
      {
        "address": "1436081a4",
        "block": ".rdata",
        "fan_in": 1217,
        "sources": [
          "14023288b",
          "1402711d2",
          "140271206",
          "14028d0b6",
          "14028d251",
          "14029dbba",
          "1402b87a8",
          "1402e5369"
        ],
        "signature": "F3 0F 10 05 ? ? ? ? F3 0F 5C C1 0F 28 C8",
        "match_count": 1,
        "unique": true,
        "rip_offset": 4,
        "instruction_address": "14023288b",
        "mnemonic": "MOVSS",
        "pattern_bytes": 15
      },
      {
        "address": "14360b3b0",
        "block": ".rdata",
        "fan_in": 1182,
        "sources": [
          "14010d9e4",
          "14010f9d7",
          "14010fa7d",
          "14010fac2",
          "140110242",
          "14011027d",
          "1401102c0",
          "140112ef8"
        ],
        "signature": "66 0F 6F 0D ? ? ? ? F3 0F ? ? ? ? C6 ? ? ? ? 4D 8B 46 08",
        "match_count": 1,
        "unique": true,
        "rip_offset": 4,
        "instruction_address": "14010d9e4",
        "mnemonic": "MOVDQA",
        "pattern_bytes": 23
      },
      {
        "address": "14360974c",
        "block": ".rdata",
        "fan_in": 1146,
        "sources": [
          "14020e900",
          "14020e90c",
          "14025cee4",
          "140268371",
          "14026e42f",
          "14026e733",
          "14026e73f",
          "1402d9422"
        ],
        "signature": "F3 0F 59 15 ? ? ? ? F3 0F 10 00 F3 0F 59 05 ? ? ? ? F3 ? ? ? ? F3 ? ? ? ? 48 8D 55 77 48 8B CF FF D3",
        "match_count": 2,
        "unique": false,
        "rip_offset": 4,
        "instruction_address": "14020e900",
        "mnemonic": "MULSS",
        "pattern_bytes": 39
      },
      {
        "address": "1445cafa4",
        "block": ".data",
        "fan_in": 1041,
        "sources": [
          "140213fd4",
          "140213fe6",
          "140213ff9",
          "140214043",
          "140218546",
          "140218558",
          "140218572",
          "1402185a8"
        ],
        "signature": "8B 05 ? ? ? ? 89 02 48 83 05 E4 ? ? ? ? EB 13 4C 8D 05 ? ? ? ? 48 8D 0D ? ? ? ? E8 77 64 F4 FF",
        "match_count": 1,
        "unique": true,
        "rip_offset": 2,
        "instruction_address": "140213fd4",
        "mnemonic": "MOV",
        "pattern_bytes": 37
      }
    ],
    "unique_signatures": [
      {
        "address": "1445cf0a0",
        "block": ".data",
        "fan_in": 18744,
        "sources": [
          "140011f34",
          "14001abad",
          "140044d1d",
          "14010a1f1",
          "14010a3c1",
          "14010af6c",
          "14010b7f1",
          "14010b9d1"
        ],
        "signature": "F0 48 01 1D ? ? ? ? 4C 8D 04 07 0F ? ? ? ? 41 0F 11 40 F0 4D 89 00",
        "match_count": 1,
        "unique": true,
        "rip_offset": 4,
        "instruction_address": "140011f34",
        "mnemonic": "ADD.LOCK",
        "pattern_bytes": 25
      },
      {
        "address": "143607d60",
        "block": ".rdata",
        "fan_in": 5198,
        "sources": [
          "140062e28",
          "140063109",
          "1400633f9",
          "1400636e9",
          "140108f70",
          "140109c67",
          "14010b0d0",
          "14010b100"
        ],
        "signature": "F3 0F 59 05 ? ? ? ? 0F 28 CB",
        "match_count": 1,
        "unique": true,
        "rip_offset": 4,
        "instruction_address": "140062e28",
        "mnemonic": "MULSS",
        "pattern_bytes": 11
      },
      {
        "address": "142ee1038",
        "block": ".rdata",
        "fan_in": 5191,
        "sources": [
          "14010c1e0",
          "14010c1e7",
          "14010c5b4",
          "14010c5bb",
          "14010c685",
          "14010c6d7",
          "14010c6fd",
          "14010c775"
        ],
        "signature": "48 8D 05 ? ? ? ? 48 89 01 48 C7 41 08 00 00 00 00 4C 8B 42 08",
        "match_count": 1,
        "unique": true,
        "rip_offset": 3,
        "instruction_address": "14010c1e0",
        "mnemonic": "LEA",
        "pattern_bytes": 22
      },
      {
        "address": "144588795",
        "block": ".data",
        "fan_in": 4835,
        "sources": [
          "140117ebf",
          "140117eca",
          "140117ed1",
          "140117ed7",
          "14011d0b7",
          "1401222d4",
          "140127565",
          "140127a96"
        ],
        "signature": "0F B6 0D ? ? ? ? 3A C1 74 21",
        "match_count": 1,
        "unique": true,
        "rip_offset": 3,
        "instruction_address": "140117ebf",
        "mnemonic": "MOVZX",
        "pattern_bytes": 11
      },
      {
        "address": "1439f77f0",
        "block": ".rdata",
        "fan_in": 4082,
        "sources": [
          "140120812",
          "140120d07",
          "1401212a9",
          "140121b44",
          "140270f2a",
          "140902e1a",
          "14090e737",
          "14093aa70"
        ],
        "signature": "48 8D 15 ? ? ? ? 48 8D 8C 24 ? ? ? ? E8 BA FE AE 02",
        "match_count": 1,
        "unique": true,
        "rip_offset": 3,
        "instruction_address": "140120812",
        "mnemonic": "LEA",
        "pattern_bytes": 20
      },
      {
        "address": "143607b18",
        "block": ".rdata",
        "fan_in": 4054,
        "sources": [
          "140032fd4",
          "140033004",
          "140133af2",
          "140133f9e",
          "140163994",
          "140163a67",
          "140164daa",
          "14018279e"
        ],
        "signature": "F3 0F 10 05 ? ? ? ? E8 2F 7F 1D 00",
        "match_count": 1,
        "unique": true,
        "rip_offset": 4,
        "instruction_address": "140032fd4",
        "mnemonic": "MOVSS",
        "pattern_bytes": 13
      },
      {
        "address": "ff00000058",
        "block": "tdb",
        "fan_in": 3471,
        "sources": [
          "140004420",
          "140020f60",
          "140062030",
          "14006efe0",
          "140075120",
          "140101a60",
          "140101fb0",
          "140103334"
        ],
        "signature": "65 48 8B 04 25 ? ? ? ? 0F 57 C0 B9 38 07 02 00",
        "match_count": 1,
        "unique": true,
        "rip_offset": 5,
        "instruction_address": "140004420",
        "mnemonic": "MOV",
        "pattern_bytes": 17
      },
      {
        "address": "142ee12d8",
        "block": ".rdata",
        "fan_in": 3136,
        "sources": [
          "14013786f",
          "1401378b1",
          "140137926",
          "140137973",
          "140137a4b",
          "140137a76",
          "140137ab1",
          "14019d710"
        ],
        "signature": "48 8D 1D ? ? ? ? 48 85 C9 74 18 E8 A0 BE 09 02",
        "match_count": 1,
        "unique": true,
        "rip_offset": 3,
        "instruction_address": "14013786f",
        "mnemonic": "LEA",
        "pattern_bytes": 17
      },
      {
        "address": "142f71328",
        "block": ".rdata",
        "fan_in": 2709,
        "sources": [
          "14001c4b7",
          "14001c9b7",
          "14006a377",
          "14006a597",
          "1400e5847",
          "140110e3a",
          "140110ef5",
          "140110fb0"
        ],
        "signature": "48 8D 15 ? ? ? ? 48 8D 0D ? ? ? ? E8 76 61 13 00",
        "match_count": 1,
        "unique": true,
        "rip_offset": 3,
        "instruction_address": "14001c4b7",
        "mnemonic": "LEA",
        "pattern_bytes": 19
      },
      {
        "address": "1439fa338",
        "block": ".rdata",
        "fan_in": 2435,
        "sources": [
          "14086c32b",
          "14086c4e7",
          "14120fe14",
          "14120fe3c",
          "1413cadf4",
          "1413cc26c",
          "1413cc291",
          "1413cc2b3"
        ],
        "signature": "48 8D 15 ? ? ? ? 48 8D 4D 80 E8 A5 43 3A 02",
        "match_count": 1,
        "unique": true,
        "rip_offset": 3,
        "instruction_address": "14086c32b",
        "mnemonic": "LEA",
        "pattern_bytes": 16
      },
      {
        "address": "143a08068",
        "block": ".data",
        "fan_in": 2216,
        "sources": [
          "140173a9a",
          "140173aaa",
          "140173b52",
          "140173b62",
          "140173bec",
          "140173bfc",
          "140173ca2",
          "140173cb2"
        ],
        "signature": "8B 05 ? ? ? ? 88 5D 7B EB 0F E8 E6 1E 33 02",
        "match_count": 1,
        "unique": true,
        "rip_offset": 2,
        "instruction_address": "140173a9a",
        "mnemonic": "MOV",
        "pattern_bytes": 16
      },
      {
        "address": "142ea84b8",
        "block": ".rdata",
        "fan_in": 2043,
        "sources": [
          "1401086ef",
          "1401086f6",
          "140108dbd",
          "140108dc4",
          "14010995d",
          "140109964",
          "1401134e7",
          "1401134ee"
        ],
        "signature": "48 8D 05 ? ? ? ? 48 89 01 E8 E6 41 A8 02",
        "match_count": 1,
        "unique": true,
        "rip_offset": 3,
        "instruction_address": "1401086ef",
        "mnemonic": "LEA",
        "pattern_bytes": 15
      },
      {
        "address": "142e85300",
        "block": ".rdata",
        "fan_in": 1957,
        "sources": [
          "140108a9d",
          "14010aa94",
          "14010aba9",
          "140119ffd",
          "14011b993",
          "14011b9f2",
          "14011cf4a",
          "140124902"
        ],
        "signature": "FF 15 ? ? ? ? 83 7E 10 00",
        "match_count": 1,
        "unique": true,
        "rip_offset": 2,
        "instruction_address": "140108a9d",
        "mnemonic": "CALL",
        "pattern_bytes": 10
      },
      {
        "address": "142e85308",
        "block": ".rdata",
        "fan_in": 1908,
        "sources": [
          "140108a13",
          "14010aa22",
          "14010aae6",
          "140119fd7",
          "14011b96a",
          "14011b9c9",
          "14011cf37",
          "1401248cb"
        ],
        "signature": "FF 15 ? ? ? ? E8 D2 FE FF FF",
        "match_count": 1,
        "unique": true,
        "rip_offset": 2,
        "instruction_address": "140108a13",
        "mnemonic": "CALL",
        "pattern_bytes": 11
      },
      {
        "address": "1445cb0f0",
        "block": ".data",
        "fan_in": 1740,
        "sources": [
          "1401afd8a",
          "1401b0fa7",
          "1401bac9c",
          "1401bb91d",
          "1401bb939",
          "1401bb977",
          "1401bfea4",
          "1401c4ec9"
        ],
        "signature": "4C 8D 25 ? ? ? ? 48 85 C9 74 0A E8 65 02 5C 02",
        "match_count": 1,
        "unique": true,
        "rip_offset": 3,
        "instruction_address": "1401afd8a",
        "mnemonic": "LEA",
        "pattern_bytes": 17
      },
      {
        "address": "142ee12a8",
        "block": ".rdata",
        "fan_in": 1715,
        "sources": [
          "140123a9a",
          "140143f0a",
          "140143f13",
          "14015d35b",
          "14015d36a",
          "14015d53b",
          "14015d54a",
          "14015d71b"
        ],
        "signature": "4C 8D 3D ? ? ? ? 8B 2F",
        "match_count": 1,
        "unique": true,
        "rip_offset": 3,
        "instruction_address": "140123a9a",
        "mnemonic": "LEA",
        "pattern_bytes": 9
      },
      {
        "address": "142ee12dc",
        "block": ".rdata",
        "fan_in": 1688,
        "sources": [
          "1401378a1",
          "14013792c",
          "14013793b",
          "1401379a6",
          "1401379fe",
          "140137a46",
          "140137aac",
          "140137add"
        ],
        "signature": "F3 ? ? ? ? F3 0F 59 15 ? ? ? ? 49 8B 06 F3 0F 59 09",
        "match_count": 1,
        "unique": true,
        "rip_offset": 1,
        "instruction_address": "1401378a1",
        "mnemonic": "MULSS",
        "pattern_bytes": 20
      },
      {
        "address": "142f711ed",
        "block": ".rdata",
        "fan_in": 1669,
        "sources": [
          "140022437",
          "1400225e4",
          "140105f67",
          "140107644",
          "140107b94",
          "140107ed4",
          "140110aae",
          "140110ad0"
        ],
        "signature": "48 8D 15 ? ? ? ? 48 8D 0D ? ? ? ? E8 B6 03 13 00",
        "match_count": 1,
        "unique": true,
        "rip_offset": 3,
        "instruction_address": "140022437",
        "mnemonic": "LEA",
        "pattern_bytes": 19
      },
      {
        "address": "142e85410",
        "block": ".rdata",
        "fan_in": 1616,
        "sources": [
          "14010a7a3",
          "14010a96e",
          "14010f254",
          "14010f2a2",
          "14010f2f7",
          "14010f493",
          "14010f585",
          "14010f680"
        ],
        "signature": "FF 15 ? ? ? ? 8B D8 48 8D 8D ? ? ? ? E8 F9 A3 B1 02",
        "match_count": 1,
        "unique": true,
        "rip_offset": 2,
        "instruction_address": "14010a7a3",
        "mnemonic": "CALL",
        "pattern_bytes": 20
      },
      {
        "address": "14351e670",
        "block": ".rdata",
        "fan_in": 1602,
        "sources": [
          "1423cef1f",
          "1423cef85",
          "1423cf3f2",
          "1423cf458",
          "1423cfd31",
          "1423cfd97",
          "1423d0560",
          "1423d05c6"
        ],
        "signature": "48 8D 15 ? ? ? ? 48 8B C8 E8 72 0E D8 FD",
        "match_count": 1,
        "unique": true,
        "rip_offset": 3,
        "instruction_address": "1423cef1f",
        "mnemonic": "LEA",
        "pattern_bytes": 15
      },
      {
        "address": "1445c9c90",
        "block": ".data",
        "fan_in": 1441,
        "sources": [
          "1426c9519",
          "1426c9520",
          "1426c9527",
          "1426c956d",
          "1426c95ab",
          "1426c95e9",
          "1426c9627",
          "1426c9661"
        ],
        "signature": "48 8D 05 ? ? ? ? 48 89 85 ? ? ? ? 48 8D 0D ? ? ? ? E8 5D A4 01 00",
        "match_count": 1,
        "unique": true,
        "rip_offset": 3,
        "instruction_address": "1426c9519",
        "mnemonic": "LEA",
        "pattern_bytes": 26
      },
      {
        "address": "1445cb248",
        "block": ".data",
        "fan_in": 1397,
        "sources": [
          "1401b0fda",
          "1401bfedd",
          "1401c01fb",
          "1401c6f0c",
          "1401c938f",
          "1401cc723",
          "14020c4c8",
          "14020d7f7"
        ],
        "signature": "49 8D 8E ? ? ? ? E8 4A 06 FA FF",
        "match_count": 1,
        "unique": true,
        "rip_offset": 3,
        "instruction_address": "1401b0fda",
        "mnemonic": "LEA",
        "pattern_bytes": 12
      },
      {
        "address": "14360b360",
        "block": ".rdata",
        "fan_in": 1380,
        "sources": [
          "140069fc1",
          "1400e6496",
          "140113652",
          "140117795",
          "140117965",
          "140117991",
          "14011d5d6",
          "14012c5d3"
        ],
        "signature": "66 0F 6F 0D ? ? ? ? 66 0F 7F 0D ? ? ? ? 33 C0 66 89 05 ? ? ? ? 0F 11 05 ? ? ? ?",
        "match_count": 1,
        "unique": true,
        "rip_offset": 4,
        "instruction_address": "140069fc1",
        "mnemonic": "MOVDQA",
        "pattern_bytes": 32
      },
      {
        "address": "14361a130",
        "block": ".rdata",
        "fan_in": 1357,
        "sources": [
          "14001db7f",
          "1400227bf",
          "140033011",
          "140062116",
          "14006241a",
          "1400626fc",
          "1400629e2",
          "14010941e"
        ],
        "signature": "F3 0F 10 15 ? ? ? ? 0F 57 C2 F3 0F 11 05 ? ? ? ?",
        "match_count": 1,
        "unique": true,
        "rip_offset": 4,
        "instruction_address": "14001db7f",
        "mnemonic": "MOVSS",
        "pattern_bytes": 19
      },
      {
        "address": "1445c599c",
        "block": ".data",
        "fan_in": 1313,
        "sources": [
          "140115aad",
          "140173a85",
          "140173b3d",
          "140173bd7",
          "140173c8d",
          "140173d06",
          "140173dbd",
          "140173e36"
        ],
        "signature": "C6 05 E8 ? ? ? ? 0F 57 C0",
        "match_count": 1,
        "unique": true,
        "rip_offset": 3,
        "instruction_address": "140115aad",
        "mnemonic": "MOV",
        "pattern_bytes": 10
      },
      {
        "address": "142f76a9e",
        "block": ".rdata",
        "fan_in": 1233,
        "sources": [
          "140137b95",
          "140137bcf",
          "1401b0fc8",
          "1401b1008",
          "1401c01f5",
          "1401c022f",
          "1401c0383",
          "1401c6efa"
        ],
        "signature": "66 0F ? ? ? ? 4C ? ? ? ? 48 8D 55 67 48 8D 8F 58 01 00 00 E8 80 9A 01 00",
        "match_count": 1,
        "unique": true,
        "rip_offset": 2,
        "instruction_address": "140137b95",
        "mnemonic": "MOVDQA",
        "pattern_bytes": 27
      },
      {
        "address": "1436081a4",
        "block": ".rdata",
        "fan_in": 1217,
        "sources": [
          "14023288b",
          "1402711d2",
          "140271206",
          "14028d0b6",
          "14028d251",
          "14029dbba",
          "1402b87a8",
          "1402e5369"
        ],
        "signature": "F3 0F 10 05 ? ? ? ? F3 0F 5C C1 0F 28 C8",
        "match_count": 1,
        "unique": true,
        "rip_offset": 4,
        "instruction_address": "14023288b",
        "mnemonic": "MOVSS",
        "pattern_bytes": 15
      },
      {
        "address": "14360b3b0",
        "block": ".rdata",
        "fan_in": 1182,
        "sources": [
          "14010d9e4",
          "14010f9d7",
          "14010fa7d",
          "14010fac2",
          "140110242",
          "14011027d",
          "1401102c0",
          "140112ef8"
        ],
        "signature": "66 0F 6F 0D ? ? ? ? F3 0F ? ? ? ? C6 ? ? ? ? 4D 8B 46 08",
        "match_count": 1,
        "unique": true,
        "rip_offset": 4,
        "instruction_address": "14010d9e4",
        "mnemonic": "MOVDQA",
        "pattern_bytes": 23
      },
      {
        "address": "1445cafa4",
        "block": ".data",
        "fan_in": 1041,
        "sources": [
          "140213fd4",
          "140213fe6",
          "140213ff9",
          "140214043",
          "140218546",
          "140218558",
          "140218572",
          "1402185a8"
        ],
        "signature": "8B 05 ? ? ? ? 89 02 48 83 05 E4 ? ? ? ? EB 13 4C 8D 05 ? ? ? ? 48 8D 0D ? ? ? ? E8 77 64 F4 FF",
        "match_count": 1,
        "unique": true,
        "rip_offset": 2,
        "instruction_address": "140213fd4",
        "mnemonic": "MOV",
        "pattern_bytes": 37
      }
    ]
  }
}