TimeThreadLineFunctionMessage
18:54:54.4933FA8361ftw1Loading (pid: 13104)
18:54:54.4975FC146ProcessHardwareRecorder::CommandThreadstarting recorder thread
18:54:54.4973FA848Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d11.dll) <0XF2A50000>6|2|1203372419
18:54:54.4983FA848Update::DetectEnv (C:\WINDOWS\SYSTEM32\dxgi.dll) <0XF43A0000>6|2|1203372847
18:54:54.6583FA8172DXManager::DetectFound in 0
18:54:54.6603FA8209Initialize::GetLocation@ 0X4670|18032
18:54:54.6603FA8209Initialize::GetLocation@ 0X66400|418816
18:54:54.6603FA8209Initialize::GetLocation@ 0X19DE0|105952
18:54:54.6603FA8209Initialize::GetLocation@ 0X1350|4944
18:54:54.6603FA8111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XF2A50000 <> 0XF43A0000
18:54:54.6603FA8209Initialize::GetLocation@ 0XFE7D2E80|-25350528
18:54:54.6603FA8111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XF2A50000 <> 0XF43A0000
18:54:54.6603FA8209Initialize::GetLocation@ 0XFE7D7F80|-25329792
18:54:54.6603FA8111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XF2A50000 <> 0XF43A0000
18:54:54.6603FA8209Initialize::GetLocation@ 0XFE7CE620|-25369056
18:54:54.6603FA8111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XF2A50000 <> 0XF43A0000
18:54:54.6603FA8209Initialize::GetLocation@ 0XFE6BAD10|-26497776
18:54:54.6973FA848Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d9.dll) <0XB66C0000>6|2|1203372419
18:54:54.8123FA8129DXManager::DetectOK
18:54:54.8733FA8186DXManager::DetectDone
18:54:54.8733FA8215VTableHolderD3d9::initd3d offsest [sht]: 0x4060 , 0x53c0
18:54:54.8743FA8209Initialize::GetLocation@ 0X3AC00|240640
18:54:54.8743FA8209Initialize::GetLocation@ 0X2C5B0|181680
18:54:54.8743FA8209Initialize::GetLocation@ 0X36D00|224512
18:54:54.8743FA8209Initialize::GetLocation@ 0XAE020|712736
18:54:54.8743FA8209Initialize::GetLocation@ 0XADB70|711536
18:54:54.8743FA8209Initialize::GetLocation@ 0X5880|22656
18:54:54.8743FA8209Initialize::GetLocation@ 0XADC10|711696
18:54:54.8743FA8209Initialize::GetLocation@ 0X20FF0|135152
18:54:54.8743FA8209Initialize::GetLocation@ 0X1CA60|117344
18:54:54.8743FA8209Initialize::GetLocation@ 0X1C8E0|116960
18:54:54.8743FA8209Initialize::GetLocation@ 0X1084E0|1082592
18:54:54.8743FA8209Initialize::GetLocation@ 0X107F90|1081232
18:54:54.8743FA8209Initialize::GetLocation@ 0X248B0|149680
18:54:54.8743FA8209Initialize::GetLocation@ 0X247A0|149408
18:54:54.8743FA8209Initialize::GetLocation@ 0X2C440|181312
18:54:54.8743FA8209Initialize::GetLocation@ 0X3F210|258576
18:54:54.8743FA8209Initialize::GetLocation@ 0XF3E0|62432
18:54:54.8743FA8209Initialize::GetLocation@ 0XF4E0|62688
18:54:54.8743FA8209Initialize::GetLocation@ 0XF5D0|62928
18:54:54.8743FA8209Initialize::GetLocation@ 0XF3E0|62432
18:54:54.8743FA8209Initialize::GetLocation@ 0XF280|62080
18:54:54.8743FA8209Initialize::GetLocation@ 0XF430|62512
18:54:54.8863FA848Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput.dll) <0XBF0F0000>6|2|1203372033
18:54:54.9083FA883VTableHolderDInput::initm_pDIW->CreateDevice - succeded.
18:54:54.9083FA8209Initialize::GetLocation@ 0X3CC0|15552
18:54:54.9083FA8209Initialize::GetLocation@ 0X5FD0|24528
18:54:54.9083FA8209Initialize::GetLocation@ 0X6180|24960
18:54:54.9093FA848Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput8.dll) <0XAD360000>6|2|1203372033
18:54:54.9273FA893VTableHolderDInput8::initm_pDI8W->CreateDevice - succeded.
18:54:54.9273FA8110VTableHolderDInput8::initm_pDI8A->CreateDevice - succeded.
18:54:54.9273FA8209Initialize::GetLocation@ 0X10000|65536
18:54:54.9273FA8209Initialize::GetLocation@ 0X12C80|76928
18:54:54.9273FA8209Initialize::GetLocation@ 0X12A60|76384
18:54:54.9813FA8225InterProcessElement::openInterProcess Overwolf_SHARED_MEMORY_2_2_78_12_13104 opened succesfuly
18:54:54.9813FA872HookFunctionsTableInitializer::SetHookFunctionsDataD3D9 Sht offsets 0x4060 , 0x53c0
18:54:54.9813FA8256InterProcessElement::closeInterProcess Overwolf_SHARED_MEMORY_2_2_78_12_13104 close 2147483647 bytes
18:54:54.9813FA8297InjectOWExplorerExplorer file name [C:\Program Files (x86)\Overwolf\0.148.0.4\OWExplorer.dll]
18:54:54.9943FA8385ftw1OWExplorer injected
18:54:55.556447451`anonymous-namespace'::CreateProviderInitialize provider: NET
18:54:55.5564474120libprocess::NetworkTracer::Initializeinit res:0xb7 [started:0 active:1 enbaled:1]
18:54:55.556447451`anonymous-namespace'::CreateProviderInitialize provider: GPU
18:57:26.2346AC352ProcessInjector::HandleElevatedProcessFail injection to process [15692] [t: 0 w_t_id: 0]- Bluestacks.exe (elevated True) 0x0
18:57:26.2346AC291ProcessInjector::HandlePendingProccesssFail to inject pending process |15692|: Bluestacks.exe
18:57:26.2346AC352ProcessInjector::HandleElevatedProcessFail injection to process [17052] [t: 0 w_t_id: 0]- Bluestacks.exe (elevated True) 0x0
18:57:26.2346AC291ProcessInjector::HandlePendingProccesssFail to inject pending process |17052|: Bluestacks.exe
18:57:26.2346AC352ProcessInjector::HandleElevatedProcessFail injection to process [19236] [t: 0 w_t_id: 0]- googledrivesync.exe (elevated True) 0x0
18:57:26.2346AC291ProcessInjector::HandlePendingProccesssFail to inject pending process |19236|: googledrivesync.exe
18:57:27.2446AC352ProcessInjector::HandleElevatedProcessFail injection to process [892] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
18:57:27.2446AC291ProcessInjector::HandlePendingProccesssFail to inject pending process |892|: firefox.exe
18:57:27.2446AC352ProcessInjector::HandleElevatedProcessFail injection to process [4112] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
18:57:27.2446AC291ProcessInjector::HandlePendingProccesssFail to inject pending process |4112|: firefox.exe
18:57:27.2446AC352ProcessInjector::HandleElevatedProcessFail injection to process [7984] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
18:57:27.2446AC291ProcessInjector::HandlePendingProccesssFail to inject pending process |7984|: firefox.exe
18:57:27.2446AC352ProcessInjector::HandleElevatedProcessFail injection to process [8764] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
18:57:27.2446AC291ProcessInjector::HandlePendingProccesssFail to inject pending process |8764|: firefox.exe
18:57:27.2446AC352ProcessInjector::HandleElevatedProcessFail injection to process [10260] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
18:57:27.2446AC291ProcessInjector::HandlePendingProccesssFail to inject pending process |10260|: firefox.exe
18:57:27.2446AC352ProcessInjector::HandleElevatedProcessFail injection to process [14552] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
18:57:27.2446AC291ProcessInjector::HandlePendingProccesssFail to inject pending process |14552|: firefox.exe
18:57:27.2446AC352ProcessInjector::HandleElevatedProcessFail injection to process [15604] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
18:57:27.2446AC291ProcessInjector::HandlePendingProccesssFail to inject pending process |15604|: firefox.exe
18:57:27.2446AC352ProcessInjector::HandleElevatedProcessFail injection to process [16264] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
18:57:27.2446AC291ProcessInjector::HandlePendingProccesssFail to inject pending process |16264|: firefox.exe
18:57:27.2446AC352ProcessInjector::HandleElevatedProcessFail injection to process [16336] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
18:57:27.2446AC291ProcessInjector::HandlePendingProccesssFail to inject pending process |16336|: firefox.exe
18:57:27.2446AC352ProcessInjector::HandleElevatedProcessFail injection to process [20136] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
18:57:27.2446AC291ProcessInjector::HandlePendingProccesssFail to inject pending process |20136|: firefox.exe
18:57:36.1133FA866ProcessesMonitor::Stopstopping PM...
18:57:36.1134474119ProcessesMonitor::ProcessEnumerateThreadexit process listener
18:57:42.1163FA866ProcessesMonitor::Stopstopping PM...