Got some bizzare memory translation: in the second exploration, there are many instructions accessing the memory directly, e.g. and rax, qword ptr [0xff5ff098];
mov edx, dword ptr [0xff5ff0a0]. The value return by passing the argument IARG_MEMORYREAD_EA is [0xffffffffff5ff098, ...],...