TimeThreadLineFunctionMessage
09:32:24.10084361ftw1Loading (pid: 4872)
09:32:24.1048448Update::DetectEnv (C:\Windows\SYSTEM32\d3d11.dll) <0X65A50000>6|2|1203373203
09:32:24.1048448Update::DetectEnv (C:\Windows\SYSTEM32\dxgi.dll) <0X675A0000>6|2|1203373081
09:32:24.1121B54146ProcessHardwareRecorder::CommandThreadstarting recorder thread
09:32:24.89284172DXManager::DetectFound in 0
09:32:24.89284209Initialize::GetLocation@ 0X4660|18016
09:32:24.89284209Initialize::GetLocation@ 0X661F0|418288
09:32:24.89284209Initialize::GetLocation@ 0X19DB0|105904
09:32:24.89284209Initialize::GetLocation@ 0X1350|4944
09:32:24.89284111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0X65A50000 <> 0X675A0000
09:32:24.89284209Initialize::GetLocation@ 0XFE5D3020|-27447264
09:32:24.89284111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0X65A50000 <> 0X675A0000
09:32:24.89284209Initialize::GetLocation@ 0XFE5D8060|-27426720
09:32:24.89284111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0X65A50000 <> 0X675A0000
09:32:24.89284209Initialize::GetLocation@ 0XFE5CE620|-27466208
09:32:24.89284111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0X65A50000 <> 0X675A0000
09:32:24.89284209Initialize::GetLocation@ 0XFE4BAA80|-28595584
09:32:24.9848448Update::DetectEnv (C:\Windows\SYSTEM32\d3d9.dll) <0X428B0000>6|2|1203373142
09:32:25.5584129DXManager::DetectOK
09:32:25.9384186DXManager::DetectDone
09:32:25.9484215VTableHolderD3d9::initd3d offsest [sht]: 0x4060 , 0x53c0
09:32:25.9484209Initialize::GetLocation@ 0X3AC00|240640
09:32:25.9484209Initialize::GetLocation@ 0X2C5B0|181680
09:32:25.9484209Initialize::GetLocation@ 0X36D00|224512
09:32:25.9484209Initialize::GetLocation@ 0XAE210|713232
09:32:25.9484209Initialize::GetLocation@ 0XADD60|712032
09:32:25.9484209Initialize::GetLocation@ 0X5880|22656
09:32:25.9484209Initialize::GetLocation@ 0XADE00|712192
09:32:25.9484209Initialize::GetLocation@ 0X20FF0|135152
09:32:25.9484209Initialize::GetLocation@ 0X1CA60|117344
09:32:25.9484209Initialize::GetLocation@ 0X1C8E0|116960
09:32:25.9484209Initialize::GetLocation@ 0X1086D0|1083088
09:32:25.9484209Initialize::GetLocation@ 0X108180|1081728
09:32:25.9484209Initialize::GetLocation@ 0X248B0|149680
09:32:25.9484209Initialize::GetLocation@ 0X247A0|149408
09:32:25.9484209Initialize::GetLocation@ 0X2C440|181312
09:32:25.9484209Initialize::GetLocation@ 0X3F3F0|259056
09:32:25.9484209Initialize::GetLocation@ 0XF3E0|62432
09:32:25.9484209Initialize::GetLocation@ 0XF4E0|62688
09:32:25.9484209Initialize::GetLocation@ 0XF5D0|62928
09:32:25.9484209Initialize::GetLocation@ 0XF3E0|62432
09:32:25.9484209Initialize::GetLocation@ 0XF280|62080
09:32:25.9484209Initialize::GetLocation@ 0XF430|62512
09:32:25.1178448Update::DetectEnv (C:\Windows\SYSTEM32\dinput.dll) <0X50D00000>6|2|1203372033
09:32:25.1428483VTableHolderDInput::initm_pDIW->CreateDevice - succeded.
09:32:25.14284209Initialize::GetLocation@ 0X3CC0|15552
09:32:25.14284209Initialize::GetLocation@ 0X5FD0|24528
09:32:25.14284209Initialize::GetLocation@ 0X6180|24960
09:32:25.1518448Update::DetectEnv (C:\Windows\SYSTEM32\dinput8.dll) <0X37CF0000>6|2|1203372033
09:32:25.1658493VTableHolderDInput8::initm_pDI8W->CreateDevice - succeded.
09:32:25.16684110VTableHolderDInput8::initm_pDI8A->CreateDevice - succeded.
09:32:25.16684209Initialize::GetLocation@ 0X10000|65536
09:32:25.16684209Initialize::GetLocation@ 0X12C80|76928
09:32:25.16684209Initialize::GetLocation@ 0X12A60|76384
09:32:25.22084225InterProcessElement::openInterProcess Overwolf_SHARED_MEMORY_2_2_82_5_4872 opened succesfuly
09:32:25.2208472HookFunctionsTableInitializer::SetHookFunctionsDataD3D9 Sht offsets 0x4060 , 0x53c0
09:32:25.22084256InterProcessElement::closeInterProcess Overwolf_SHARED_MEMORY_2_2_82_5_4872 close 2147483647 bytes
09:32:25.22084297InjectOWExplorerExplorer file name [C:\Program Files (x86)\Overwolf\0.159.0.31\OWExplorer.dll]
09:32:25.27584385ftw1OWExplorer injected
09:32:27.81273851`anonymous-namespace'::CreateProviderInitialize provider: NET
09:32:27.822738117libprocess::NetworkTracer::Initializeinit res:0x5 [started:0 active:0 enbaled:0]
09:32:27.82273854`anonymous-namespace'::CreateProviderFail to initlized provider: NET
09:32:27.82273851`anonymous-namespace'::CreateProviderInitialize provider: GPU
09:32:27.9510A4629ProcessInjector::InjectProcessprocess |rtop_svc.exe| missing h
09:32:27.9510A4629ProcessInjector::InjectProcessprocess |GoogleCrashHandler.exe| missing h
09:32:27.9510A4629ProcessInjector::InjectProcessprocess |GoogleCrashHandler64.exe| missing h
09:34:57.20110A4441ProcessInjector::HandleElevatedProcessFail injection to process [3076] [t: 0 w_t_id: 0]- ExecPubg.exe (elevated True) 0x578
09:34:57.20110A4380ProcessInjector::HandlePendingProccesssFail to inject pending process |3076|: ExecPubg.exe
09:34:57.20110A4441ProcessInjector::HandleElevatedProcessFail injection to process [4044] [t: 0 w_t_id: 0]- rtop_svc.exe (elevated True) 0x578
09:34:57.20110A4380ProcessInjector::HandlePendingProccesssFail to inject pending process |4044|: rtop_svc.exe
09:34:57.20110A4441ProcessInjector::HandleElevatedProcessFail injection to process [4176] [t: 0 w_t_id: 0]- MsMpEng.exe (elevated True) 0x578
09:34:57.20110A4380ProcessInjector::HandlePendingProccesssFail to inject pending process |4176|: MsMpEng.exe
09:34:57.20110A4441ProcessInjector::HandleElevatedProcessFail injection to process [6032] [t: 0 w_t_id: 0]- GoogleCrashHandler64.exe (elevated True) 0x578
09:34:57.20110A4380ProcessInjector::HandlePendingProccesssFail to inject pending process |6032|: GoogleCrashHandler64.exe
09:34:57.20110A4441ProcessInjector::HandleElevatedProcessFail injection to process [7932] [t: 0 w_t_id: 0]- GoogleCrashHandler.exe (elevated True) 0x578
09:34:57.20110A4380ProcessInjector::HandlePendingProccesssFail to inject pending process |7932|: GoogleCrashHandler.exe
09:34:57.20210A4441ProcessInjector::HandleElevatedProcessFail injection to process [10108] [t: 0 w_t_id: 0]- TslGame.exe (elevated True) 0x578
09:34:57.20210A4380ProcessInjector::HandlePendingProccesssFail to inject pending process |10108|: TslGame.exe
09:37:18.27910A4629ProcessInjector::InjectProcessprocess |OverwolfUpdater.exe| missing h
09:53:24.73110A4629ProcessInjector::InjectProcessprocess |GoogleUpdate.exe| missing h
10:53:25.1810A4629ProcessInjector::InjectProcessprocess |GoogleUpdate.exe| missing h
10:53:30.2210A4629ProcessInjector::InjectProcessprocess |BraveUpdate.exe| missing h
10:53:35.1910A4629ProcessInjector::InjectProcessprocess |GoogleUpdate.exe| missing h
10:54:05.2910A4629ProcessInjector::InjectProcessprocess |BraveUpdate.exe| missing h
13:17:53.90010A4629ProcessInjector::InjectProcessprocess |OverwolfUpdater.exe| missing h
13:37:18.43610A4629ProcessInjector::InjectProcessprocess |OverwolfUpdater.exe| missing h
14:53:24.43510A4629ProcessInjector::InjectProcessprocess |GoogleCrashHandler64.exe| missing h
15:23:02.58210A4629ProcessInjector::InjectProcessprocess |EasyAntiCheat.exe| missing h
15:24:51.61510A4629ProcessInjector::InjectProcessprocess |MicrosoftEdgeUpdate.exe| missing h
15:25:20.62110A4441ProcessInjector::HandleElevatedProcessFail injection to process [16232] [t: 0 w_t_id: 0]- EpicWebHelper.exe (elevated True) 0x0
15:25:20.62110A4380ProcessInjector::HandlePendingProccesssFail to inject pending process |16232|: EpicWebHelper.exe
15:25:22.62110A4441ProcessInjector::HandleElevatedProcessFail injection to process [17396] [t: 0 w_t_id: 0]- EpicWebHelper.exe (elevated True) 0x0
15:25:22.62110A4380ProcessInjector::HandlePendingProccesssFail to inject pending process |17396|: EpicWebHelper.exe
15:25:32.61910A4441ProcessInjector::HandleElevatedProcessFail injection to process [9496] [t: 0 w_t_id: 0]- EasyAntiCheat.exe (elevated True) 0x0
15:25:32.61910A4380ProcessInjector::HandlePendingProccesssFail to inject pending process |9496|: EasyAntiCheat.exe
15:25:50.61810A4441ProcessInjector::HandleElevatedProcessFail injection to process [16544] [t: 0 w_t_id: 0]- EOSOverlayRenderer-Win64-Shipping.exe (elevated True) 0x0
15:25:50.61810A4380ProcessInjector::HandlePendingProccesssFail to inject pending process |16544|: EOSOverlayRenderer-Win64-Shipping.exe
15:53:25.48210A4629ProcessInjector::InjectProcessprocess |GoogleUpdate.exe| missing h
15:53:30.48110A4629ProcessInjector::InjectProcessprocess |BraveUpdate.exe| missing h
15:54:12.49310A4629ProcessInjector::InjectProcessprocess |BraveUpdate.exe| missing h
16:24:52.30910A4629ProcessInjector::InjectProcessprocess |MicrosoftEdgeUpdate.exe| missing h
17:17:54.18310A4629ProcessInjector::InjectProcessprocess |OverwolfUpdater.exe| missing h
17:24:52.26910A4629ProcessInjector::InjectProcessprocess |MicrosoftEdgeUpdate.exe| missing h
17:25:37.27110A4629ProcessInjector::InjectProcessprocess |MicrosoftEdgeUpdate.exe| missing h
17:37:18.43210A4629ProcessInjector::InjectProcessprocess |OverwolfUpdater.exe| missing h
17:56:55.4188466ProcessesMonitor::Stopstopping PM...
17:56:55.4182738119ProcessesMonitor::ProcessEnumerateThreadexit process listener
17:56:55.42184526ProcessInjector::Unhookunhook running process
17:57:01.4268466ProcessesMonitor::Stopstopping PM...