Time | Thread | Line | Function | Message |
14:22:43.563 | 588C | 361 | ftw1 | Loading (pid: 8152) |
14:22:43.563 | 4268 | 146 | ProcessHardwareRecorder::CommandThread | starting recorder thread |
14:22:43.564 | 588C | 48 | Update::Detect | Env (C:\Windows\SYSTEM32\d3d11.dll) <0XCCB70000>6|2|1247870977 |
14:22:43.565 | 588C | 48 | Update::Detect | Env (C:\Windows\SYSTEM32\dxgi.dll) <0XCF740000>6|2|1247870977 |
14:22:43.602 | 588C | 172 | DXManager::Detect | Found in 0 |
14:22:43.603 | 588C | 209 | Initialize::GetLocation | @ 0X4F80|20352 |
14:22:43.603 | 588C | 209 | Initialize::GetLocation | @ 0X69160|430432 |
14:22:43.603 | 588C | 209 | Initialize::GetLocation | @ 0X20410|132112 |
14:22:43.603 | 588C | 209 | Initialize::GetLocation | @ 0X1DE0|7648 |
14:22:43.603 | 588C | 111 | Update::Caught | C:\Windows\SYSTEM32\d3d11.dll|0XCCB70000 <> 0XCF740000 |
14:22:43.603 | 588C | 209 | Initialize::GetLocation | @ 0XFD558850|-44726192 |
14:22:43.603 | 588C | 111 | Update::Caught | C:\Windows\SYSTEM32\d3d11.dll|0XCCB70000 <> 0XCF740000 |
14:22:43.603 | 588C | 209 | Initialize::GetLocation | @ 0XFD55DE80|-44704128 |
14:22:43.603 | 588C | 111 | Update::Caught | C:\Windows\SYSTEM32\d3d11.dll|0XCCB70000 <> 0XCF740000 |
14:22:43.603 | 588C | 209 | Initialize::GetLocation | @ 0XFD55C5E0|-44710432 |
14:22:43.603 | 588C | 111 | Update::Caught | C:\Windows\SYSTEM32\d3d11.dll|0XCCB70000 <> 0XCF740000 |
14:22:43.603 | 588C | 209 | Initialize::GetLocation | @ 0XFD43A7F0|-45897744 |
14:22:43.608 | 588C | 48 | Update::Detect | Env (C:\Windows\SYSTEM32\d3d9.dll) <0XC5E40000>6|2|1247870977 |
14:22:43.635 | 588C | 129 | DXManager::Detect | OK |
14:22:43.648 | 588C | 186 | DXManager::Detect | Done |
14:22:43.648 | 588C | 215 | VTableHolderD3d9::init | d3d offsest [sht]: 0x4060 , 0x53c0 |
14:22:43.648 | 588C | 209 | Initialize::GetLocation | @ 0X3FC10|261136 |
14:22:43.648 | 588C | 209 | Initialize::GetLocation | @ 0X33840|211008 |
14:22:43.648 | 588C | 209 | Initialize::GetLocation | @ 0X3BFA0|245664 |
14:22:43.648 | 588C | 209 | Initialize::GetLocation | @ 0XB70E0|749792 |
14:22:43.648 | 588C | 209 | Initialize::GetLocation | @ 0XB6C30|748592 |
14:22:43.648 | 588C | 209 | Initialize::GetLocation | @ 0XAF40|44864 |
14:22:43.648 | 588C | 209 | Initialize::GetLocation | @ 0XB6CD0|748752 |
14:22:43.648 | 588C | 209 | Initialize::GetLocation | @ 0X20C40|134208 |
14:22:43.648 | 588C | 209 | Initialize::GetLocation | @ 0X16A10|92688 |
14:22:43.648 | 588C | 209 | Initialize::GetLocation | @ 0X2D530|185648 |
14:22:43.648 | 588C | 209 | Initialize::GetLocation | @ 0X113350|1127248 |
14:22:43.648 | 588C | 209 | Initialize::GetLocation | @ 0X112E10|1125904 |
14:22:43.648 | 588C | 209 | Initialize::GetLocation | @ 0X20B30|133936 |
14:22:43.648 | 588C | 209 | Initialize::GetLocation | @ 0X20A40|133696 |
14:22:43.648 | 588C | 209 | Initialize::GetLocation | @ 0XD8D0|55504 |
14:22:43.648 | 588C | 209 | Initialize::GetLocation | @ 0X466B0|288432 |
14:22:43.648 | 588C | 209 | Initialize::GetLocation | @ 0XAAB0|43696 |
14:22:43.648 | 588C | 209 | Initialize::GetLocation | @ 0XCE2D0|844496 |
14:22:43.648 | 588C | 209 | Initialize::GetLocation | @ 0XCE9A0|846240 |
14:22:43.648 | 588C | 209 | Initialize::GetLocation | @ 0XAAB0|43696 |
14:22:43.648 | 588C | 209 | Initialize::GetLocation | @ 0XCF490|849040 |
14:22:43.648 | 588C | 209 | Initialize::GetLocation | @ 0XCFAF0|850672 |
14:22:43.657 | 588C | 48 | Update::Detect | Env (C:\Windows\SYSTEM32\dinput.dll) <0X71090000>6|2|1247870977 |
14:22:43.676 | 588C | 83 | VTableHolderDInput::init | m_pDIW->CreateDevice - succeded. |
14:22:43.676 | 588C | 209 | Initialize::GetLocation | @ 0X4040|16448 |
14:22:43.676 | 588C | 209 | Initialize::GetLocation | @ 0X6410|25616 |
14:22:43.676 | 588C | 209 | Initialize::GetLocation | @ 0X65C0|26048 |
14:22:43.677 | 588C | 48 | Update::Detect | Env (C:\Windows\SYSTEM32\dinput8.dll) <0X5FDF0000>6|2|1247870977 |
14:22:43.691 | 588C | 93 | VTableHolderDInput8::init | m_pDI8W->CreateDevice - succeded. |
14:22:43.692 | 588C | 110 | VTableHolderDInput8::init | m_pDI8A->CreateDevice - succeded. |
14:22:43.693 | 588C | 209 | Initialize::GetLocation | @ 0XA5D0|42448 |
14:22:43.693 | 588C | 209 | Initialize::GetLocation | @ 0XD4D0|54480 |
14:22:43.693 | 588C | 209 | Initialize::GetLocation | @ 0XD290|53904 |
14:22:43.745 | 588C | 225 | InterProcessElement::open | InterProcess Overwolf_SHARED_MEMORY_2_2_79_8_8152 opened succesfuly |
14:22:43.745 | 588C | 72 | HookFunctionsTableInitializer::SetHookFunctionsData | D3D9 Sht offsets 0x4060 , 0x53c0 |
14:22:43.745 | 588C | 256 | InterProcessElement::close | InterProcess Overwolf_SHARED_MEMORY_2_2_79_8_8152 close 2147483647 bytes |
14:22:43.745 | 588C | 297 | InjectOWExplorer | Explorer file name [C:\Program Files (x86)\Overwolf\0.153.0.13\OWExplorer.dll] |
14:22:43.793 | 588C | 385 | ftw1 | OWExplorer injected |
14:22:44.181 | 386C | 51 | `anonymous-namespace'::CreateProvider | Initialize provider: NET |
14:22:44.181 | 386C | 117 | libprocess::NetworkTracer::Initialize | init res:0x5 [started:0 active:0 enbaled:0] |
14:22:44.181 | 386C | 54 | `anonymous-namespace'::CreateProvider | Fail to initlized provider: NET |
14:22:44.181 | 386C | 51 | `anonymous-namespace'::CreateProvider | Initialize provider: GPU |
14:25:15.139 | 54A4 | 394 | ProcessInjector::HandleElevatedProcess | Fail injection to process [1580] [t: 0 w_t_id: 0]- fzsftp.exe (elevated True) 0x0 |
14:25:15.139 | 54A4 | 333 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |1580|: fzsftp.exe |
14:25:15.139 | 54A4 | 394 | ProcessInjector::HandleElevatedProcess | Fail injection to process [2596] [t: 0 w_t_id: 0]- NVDisplay.Container.exe (elevated True) 0x0 |
14:25:15.139 | 54A4 | 333 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |2596|: NVDisplay.Container.exe |
14:25:15.139 | 54A4 | 394 | ProcessInjector::HandleElevatedProcess | Fail injection to process [4332] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0 |
14:25:15.139 | 54A4 | 333 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |4332|: firefox.exe |
14:25:15.139 | 54A4 | 394 | ProcessInjector::HandleElevatedProcess | Fail injection to process [5184] [t: 0 w_t_id: 0]- nvcontainer.exe (elevated True) 0x0 |
14:25:15.139 | 54A4 | 333 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |5184|: nvcontainer.exe |
14:25:15.139 | 54A4 | 394 | ProcessInjector::HandleElevatedProcess | Fail injection to process [5440] [t: 0 w_t_id: 0]- MsMpEng.exe (elevated True) 0x0 |
14:25:15.139 | 54A4 | 333 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |5440|: MsMpEng.exe |
14:25:15.139 | 54A4 | 394 | ProcessInjector::HandleElevatedProcess | Fail injection to process [8176] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0 |
14:25:15.139 | 54A4 | 333 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |8176|: firefox.exe |
14:25:15.139 | 54A4 | 394 | ProcessInjector::HandleElevatedProcess | Fail injection to process [8408] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0 |
14:25:15.139 | 54A4 | 333 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |8408|: firefox.exe |
14:25:15.139 | 54A4 | 394 | ProcessInjector::HandleElevatedProcess | Fail injection to process [8648] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0 |
14:25:15.139 | 54A4 | 333 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |8648|: firefox.exe |
14:25:15.139 | 54A4 | 394 | ProcessInjector::HandleElevatedProcess | Fail injection to process [9688] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0 |
14:25:15.139 | 54A4 | 333 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |9688|: firefox.exe |
14:25:15.139 | 54A4 | 394 | ProcessInjector::HandleElevatedProcess | Fail injection to process [11708] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0 |
14:25:15.139 | 54A4 | 333 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |11708|: firefox.exe |
14:25:15.139 | 54A4 | 394 | ProcessInjector::HandleElevatedProcess | Fail injection to process [12480] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0 |
14:25:15.139 | 54A4 | 333 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |12480|: firefox.exe |
14:25:15.139 | 54A4 | 394 | ProcessInjector::HandleElevatedProcess | Fail injection to process [13444] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0 |
14:25:15.139 | 54A4 | 333 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |13444|: firefox.exe |
14:25:15.139 | 54A4 | 394 | ProcessInjector::HandleElevatedProcess | Fail injection to process [14252] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0 |
14:25:15.139 | 54A4 | 333 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |14252|: firefox.exe |
14:25:15.139 | 54A4 | 394 | ProcessInjector::HandleElevatedProcess | Fail injection to process [16952] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x0 |
14:25:15.139 | 54A4 | 333 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |16952|: node.exe |
14:25:15.139 | 54A4 | 394 | ProcessInjector::HandleElevatedProcess | Fail injection to process [23268] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0 |
14:25:15.139 | 54A4 | 333 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |23268|: firefox.exe |
14:25:16.153 | 54A4 | 394 | ProcessInjector::HandleElevatedProcess | Fail injection to process [19488] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0 |
14:25:16.153 | 54A4 | 333 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |19488|: firefox.exe |
14:33:55.952 | 54A4 | 394 | ProcessInjector::HandleElevatedProcess | Fail injection to process [19992] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0 |
14:33:55.952 | 54A4 | 333 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |19992|: firefox.exe |
14:37:50.88 | 54A4 | 394 | ProcessInjector::HandleElevatedProcess | Fail injection to process [22700] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0 |
14:37:50.88 | 54A4 | 333 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |22700|: firefox.exe |
14:44:50.959 | 54A4 | 394 | ProcessInjector::HandleElevatedProcess | Fail injection to process [13880] [t: 0 w_t_id: 0]- git.exe (elevated True) 0x0 |
14:44:50.959 | 54A4 | 333 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |13880|: git.exe |
14:44:50.959 | 54A4 | 394 | ProcessInjector::HandleElevatedProcess | Fail injection to process [17336] [t: 0 w_t_id: 0]- git.exe (elevated True) 0x0 |
14:44:50.959 | 54A4 | 333 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |17336|: git.exe |
14:45:00.35 | 54A4 | 394 | ProcessInjector::HandleElevatedProcess | Fail injection to process [8296] [t: 0 w_t_id: 0]- git.exe (elevated True) 0x0 |
14:45:00.35 | 54A4 | 333 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |8296|: git.exe |
14:45:00.35 | 54A4 | 394 | ProcessInjector::HandleElevatedProcess | Fail injection to process [22024] [t: 0 w_t_id: 0]- git.exe (elevated True) 0x0 |
14:45:00.35 | 54A4 | 333 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |22024|: git.exe |
14:46:32.957 | 54A4 | 394 | ProcessInjector::HandleElevatedProcess | Fail injection to process [11748] [t: 0 w_t_id: 0]- splwow64.exe (elevated True) 0x0 |
14:46:32.957 | 54A4 | 333 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |11748|: splwow64.exe |
18:14:14.183 | 54A4 | 394 | ProcessInjector::HandleElevatedProcess | Fail injection to process [21964] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0 |
18:14:14.183 | 54A4 | 333 | ProcessInjector::HandlePendingProccesss | Fail to inject pending process |21964|: firefox.exe |
18:49:06.360 | 588C | 66 | ProcessesMonitor::Stop | stopping PM... |
18:49:06.360 | 386C | 119 | ProcessesMonitor::ProcessEnumerateThread | exit process listener |
18:49:06.362 | 588C | 479 | ProcessInjector::Unhook | unhook running process |
18:49:12.378 | 588C | 66 | ProcessesMonitor::Stop | stopping PM... |
| | | | |