TimeThreadLineFunctionMessage
13:33:48.136EEC361ftw1Loading (pid: 16888)
13:33:48.136FB8146ProcessHardwareRecorder::CommandThreadstarting recorder thread
13:33:48.146EEC48Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d11.dll) <0X45DF0000>6|2|1247871522
13:33:48.156EEC48Update::DetectEnv (C:\WINDOWS\SYSTEM32\dxgi.dll) <0X48C40000>6|2|1247871522
13:33:48.2376EEC172DXManager::DetectFound in 0
13:33:48.2386EEC209Initialize::GetLocation@ 0X4F80|20352
13:33:48.2386EEC209Initialize::GetLocation@ 0X69640|431680
13:33:48.2386EEC209Initialize::GetLocation@ 0X206F0|132848
13:33:48.2386EEC209Initialize::GetLocation@ 0X1DE0|7648
13:33:48.2386EEC111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X45DF0000 <> 0X48C40000
13:33:48.2386EEC209Initialize::GetLocation@ 0XFD2D8860|-47347616
13:33:48.2386EEC111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X45DF0000 <> 0X48C40000
13:33:48.2386EEC209Initialize::GetLocation@ 0XFD2DDC30|-47326160
13:33:48.2386EEC111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X45DF0000 <> 0X48C40000
13:33:48.2386EEC209Initialize::GetLocation@ 0XFD2DC5F0|-47331856
13:33:48.2386EEC111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X45DF0000 <> 0X48C40000
13:33:48.2386EEC209Initialize::GetLocation@ 0XFD1BA7F0|-48519184
13:33:48.2566EEC48Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d9.dll) <0X293B0000>6|2|1247871638
13:33:48.3996EEC129DXManager::DetectOK
13:33:48.4546EEC186DXManager::DetectDone
13:33:48.4546EEC215VTableHolderD3d9::initd3d offsest [sht]: 0x4060 , 0x53c0
13:33:48.4566EEC209Initialize::GetLocation@ 0X41B90|269200
13:33:48.4566EEC209Initialize::GetLocation@ 0X33E20|212512
13:33:48.4566EEC209Initialize::GetLocation@ 0X3D6C0|251584
13:33:48.4566EEC209Initialize::GetLocation@ 0XB8E10|757264
13:33:48.4566EEC209Initialize::GetLocation@ 0XB8960|756064
13:33:48.4566EEC209Initialize::GetLocation@ 0XACF0|44272
13:33:48.4566EEC209Initialize::GetLocation@ 0XB8A00|756224
13:33:48.4566EEC209Initialize::GetLocation@ 0X1B6B0|112304
13:33:48.4566EEC209Initialize::GetLocation@ 0X1E100|123136
13:33:48.4566EEC209Initialize::GetLocation@ 0X26730|157488
13:33:48.4566EEC209Initialize::GetLocation@ 0X1146B0|1132208
13:33:48.4566EEC209Initialize::GetLocation@ 0X114170|1130864
13:33:48.4566EEC209Initialize::GetLocation@ 0X1B5A0|112032
13:33:48.4566EEC209Initialize::GetLocation@ 0X1B4B0|111792
13:33:48.4566EEC209Initialize::GetLocation@ 0XD680|54912
13:33:48.4566EEC209Initialize::GetLocation@ 0X493C0|299968
13:33:48.4566EEC209Initialize::GetLocation@ 0XA860|43104
13:33:48.4566EEC209Initialize::GetLocation@ 0XD0000|851968
13:33:48.4566EEC209Initialize::GetLocation@ 0XD06D0|853712
13:33:48.4566EEC209Initialize::GetLocation@ 0XA860|43104
13:33:48.4566EEC209Initialize::GetLocation@ 0XD11C0|856512
13:33:48.4566EEC209Initialize::GetLocation@ 0XD1820|858144
13:33:48.4726EEC48Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput.dll) <0X17FC0000>6|2|1247870977
13:33:48.5006EEC83VTableHolderDInput::initm_pDIW->CreateDevice - succeded.
13:33:48.5006EEC209Initialize::GetLocation@ 0X4040|16448
13:33:48.5006EEC209Initialize::GetLocation@ 0X6410|25616
13:33:48.5006EEC209Initialize::GetLocation@ 0X65C0|26048
13:33:48.5016EEC48Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput8.dll) <0X17F70000>6|2|1247870977
13:33:48.5216EEC93VTableHolderDInput8::initm_pDI8W->CreateDevice - succeded.
13:33:48.5216EEC110VTableHolderDInput8::initm_pDI8A->CreateDevice - succeded.
13:33:48.5216EEC209Initialize::GetLocation@ 0XA5D0|42448
13:33:48.5216EEC209Initialize::GetLocation@ 0XD4D0|54480
13:33:48.5216EEC209Initialize::GetLocation@ 0XD290|53904
13:33:48.5746EEC225InterProcessElement::openInterProcess Overwolf_SHARED_MEMORY_2_2_82_5_16888 opened succesfuly
13:33:48.5746EEC72HookFunctionsTableInitializer::SetHookFunctionsDataD3D9 Sht offsets 0x4060 , 0x53c0
13:33:48.5746EEC256InterProcessElement::closeInterProcess Overwolf_SHARED_MEMORY_2_2_82_5_16888 close 2147483647 bytes
13:33:48.5746EEC297InjectOWExplorerExplorer file name [C:\Program Files (x86)\Overwolf\0.159.0.31\OWExplorer.dll]
13:33:48.5826EEC385ftw1OWExplorer injected
13:33:48.978501C51`anonymous-namespace'::CreateProviderInitialize provider: NET
13:33:48.978501C117libprocess::NetworkTracer::Initializeinit res:0x5 [started:0 active:0 enbaled:0]
13:33:48.978501C54`anonymous-namespace'::CreateProviderFail to initlized provider: NET
13:33:48.978501C51`anonymous-namespace'::CreateProviderInitialize provider: GPU
13:33:48.9905014629ProcessInjector::InjectProcessprocess |MpCmdRun.exe| missing h
13:33:48.9905014629ProcessInjector::InjectProcessprocess |RogueKillerSvc.exe| missing h
13:33:49.1155014629ProcessInjector::InjectProcessprocess |RogueKiller64.exe| missing h
13:33:49.5345014629ProcessInjector::InjectProcessprocess |OverwolfUpdater.exe| missing h
13:33:51.5995014629ProcessInjector::InjectProcessprocess |owver64.exe| missing h
13:33:52.5945014629ProcessInjector::InjectProcessprocess |LiveHelpDesk.exe| missing h
13:34:12.6005014629ProcessInjector::InjectProcessprocess |OverwolfSetup.exe| missing h
13:34:12.6005014629ProcessInjector::InjectProcessprocess |OverwolfSetup.exe| missing h
13:34:15.6005014629ProcessInjector::InjectProcessprocess |OverwolfUpdater.exe| missing h
13:34:15.6005014629ProcessInjector::InjectProcessprocess |OverwolfUpdater.exe| missing h
13:35:00.5955014629ProcessInjector::InjectProcessprocess |CCleaner64.exe| missing h
13:35:06.5945014629ProcessInjector::InjectProcessprocess |wmpnetwk.exe| missing h
13:35:10.5945014629ProcessInjector::InjectProcessprocess |EasyAntiCheat.exe| missing h
13:36:19.5945014441ProcessInjector::HandleElevatedProcessFail injection to process [2232] [t: 0 w_t_id: 0]- NVDisplay.Container.exe (elevated True) 0x0
13:36:19.5945014380ProcessInjector::HandlePendingProccesssFail to inject pending process |2232|: NVDisplay.Container.exe
13:36:19.5945014441ProcessInjector::HandleElevatedProcessFail injection to process [4312] [t: 0 w_t_id: 0]- RogueKillerSvc.exe (elevated True) 0x0
13:36:19.5945014380ProcessInjector::HandlePendingProccesssFail to inject pending process |4312|: RogueKillerSvc.exe
13:36:19.5945014441ProcessInjector::HandleElevatedProcessFail injection to process [4328] [t: 0 w_t_id: 0]- nvcontainer.exe (elevated True) 0x0
13:36:19.5945014380ProcessInjector::HandlePendingProccesssFail to inject pending process |4328|: nvcontainer.exe
13:36:19.5945014441ProcessInjector::HandleElevatedProcessFail injection to process [4344] [t: 0 w_t_id: 0]- MsMpEng.exe (elevated True) 0x0
13:36:19.5945014380ProcessInjector::HandlePendingProccesssFail to inject pending process |4344|: MsMpEng.exe
13:36:19.5945014441ProcessInjector::HandleElevatedProcessFail injection to process [14592] [t: 0 w_t_id: 0]- splwow64.exe (elevated True) 0x0
13:36:19.5945014380ProcessInjector::HandlePendingProccesssFail to inject pending process |14592|: splwow64.exe
13:36:19.5945014441ProcessInjector::HandleElevatedProcessFail injection to process [17504] [t: 0 w_t_id: 0]- NZXT CAM Beta.exe (elevated True) 0x0
13:36:19.5945014380ProcessInjector::HandlePendingProccesssFail to inject pending process |17504|: NZXT CAM Beta.exe
13:36:19.5945014441ProcessInjector::HandleElevatedProcessFail injection to process [19500] [t: 0 w_t_id: 0]- EpicWebHelper.exe (elevated True) 0x0
13:36:19.5945014380ProcessInjector::HandlePendingProccesssFail to inject pending process |19500|: EpicWebHelper.exe
13:36:19.5945014441ProcessInjector::HandleElevatedProcessFail injection to process [20224] [t: 0 w_t_id: 0]- cam_helper.exe (elevated True) 0x0
13:36:19.5945014380ProcessInjector::HandlePendingProccesssFail to inject pending process |20224|: cam_helper.exe
13:36:35.5935014441ProcessInjector::HandleElevatedProcessFail injection to process [24668] [t: 0 w_t_id: 0]- EpicWebHelper.exe (elevated True) 0x0
13:36:35.5935014380ProcessInjector::HandlePendingProccesssFail to inject pending process |24668|: EpicWebHelper.exe
13:37:36.5915014441ProcessInjector::HandleElevatedProcessFail injection to process [10488] [t: 0 w_t_id: 0]- wmpnetwk.exe (elevated True) 0x0
13:37:36.5915014380ProcessInjector::HandlePendingProccesssFail to inject pending process |10488|: wmpnetwk.exe
13:37:40.5925014441ProcessInjector::HandleElevatedProcessFail injection to process [22884] [t: 0 w_t_id: 0]- EasyAntiCheat.exe (elevated True) 0x0
13:37:40.5925014380ProcessInjector::HandlePendingProccesssFail to inject pending process |22884|: EasyAntiCheat.exe
13:38:40.5965014629ProcessInjector::InjectProcessprocess |OverwolfUpdater.exe| missing h
13:38:41.5955014629ProcessInjector::InjectProcessprocess |OverwolfUpdater.exe| missing h
13:41:43.6015014441ProcessInjector::HandleElevatedProcessFail injection to process [20804] [t: 0 w_t_id: 0]- owobs-ffmpeg-mux.exe (elevated True) 0x5a4
13:41:43.6015014380ProcessInjector::HandlePendingProccesssFail to inject pending process |20804|: owobs-ffmpeg-mux.exe
13:42:00.6135014629ProcessInjector::InjectProcessprocess |MicrosoftEdgeUpdate.exe| missing h
13:42:00.6135014629ProcessInjector::InjectProcessprocess |CCUpdate.exe| missing h
13:42:00.6135014629ProcessInjector::InjectProcessprocess |GoogleUpdate.exe| missing h
13:42:00.6135014629ProcessInjector::InjectProcessprocess |MicrosoftEdgeUpdate.exe| missing h
13:42:00.6135014629ProcessInjector::InjectProcessprocess |GoogleUpdate.exe| missing h
13:42:00.6135014629ProcessInjector::InjectProcessprocess |GoogleCrashHandler.exe| missing h
13:42:02.6075014629ProcessInjector::InjectProcessprocess |CCleaner64.exe| missing h
13:42:04.6095014629ProcessInjector::InjectProcessprocess |MicrosoftEdgeUpdate.exe| missing h
13:42:48.6075014629ProcessInjector::InjectProcessprocess |GoogleUpdate.exe| missing h
13:43:04.6085014629ProcessInjector::InjectProcessprocess |MpCmdRun.exe| missing h
13:43:04.6085014629ProcessInjector::InjectProcessprocess |MpCmdRun.exe| missing h
13:44:30.6075014441ProcessInjector::HandleElevatedProcessFail injection to process [11232] [t: 0 w_t_id: 0]- MicrosoftEdgeUpdate.exe (elevated True) 0x0
13:44:30.6075014380ProcessInjector::HandlePendingProccesssFail to inject pending process |11232|: MicrosoftEdgeUpdate.exe
13:44:30.6075014441ProcessInjector::HandleElevatedProcessFail injection to process [19668] [t: 0 w_t_id: 0]- GoogleUpdate.exe (elevated True) 0x0
13:44:30.6075014380ProcessInjector::HandlePendingProccesssFail to inject pending process |19668|: GoogleUpdate.exe
13:53:43.6035014441ProcessInjector::HandleElevatedProcessFail injection to process [18380] [t: 0 w_t_id: 0]- owobs-ffmpeg-mux.exe (elevated True) 0x0
13:53:43.6035014380ProcessInjector::HandlePendingProccesssFail to inject pending process |18380|: owobs-ffmpeg-mux.exe
14:07:36.6225014441ProcessInjector::HandleElevatedProcessFail injection to process [22116] [t: 0 w_t_id: 0]- owobs-ffmpeg-mux.exe (elevated True) 0x0
14:07:36.6225014380ProcessInjector::HandlePendingProccesssFail to inject pending process |22116|: owobs-ffmpeg-mux.exe