How the SoH parser works, without injecting

Most DPS meters inject themselves into the game process. We don't.

Instead, we open the running game with PROCESS_VM_READ and walk a documented IL2CPP route to find the RC4 keystream. Then we use Npcap to capture inbound TCP frames externally, reassemble them, and decrypt them ourselves.

The parser is fully external. The game never knows we're there.