TimeThreadLineFunctionMessage
19:41:29.872428361ftw1Loading (pid: 12036)
19:41:29.88242848Update::DetectEnv (C:\Windows\SYSTEM32\d3d11.dll) <0XCA490000>6|2|1203372419
19:41:29.88242848Update::DetectEnv (C:\Windows\SYSTEM32\dxgi.dll) <0XCBB30000>6|2|1203373081
19:41:29.11122A0146ProcessHardwareRecorder::CommandThreadstarting recorder thread
19:41:29.1982428172DXManager::DetectFound in 0
19:41:29.1992428209Initialize::GetLocation@ 0X4660|18016
19:41:29.1992428209Initialize::GetLocation@ 0X661F0|418288
19:41:29.1992428209Initialize::GetLocation@ 0X19DB0|105904
19:41:29.1992428209Initialize::GetLocation@ 0X1350|4944
19:41:29.1992428111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0XCA490000 <> 0XCBB30000
19:41:29.1992428209Initialize::GetLocation@ 0XFEA82E80|-22532480
19:41:29.1992428111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0XCA490000 <> 0XCBB30000
19:41:29.1992428209Initialize::GetLocation@ 0XFEA87F80|-22511744
19:41:29.1992428111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0XCA490000 <> 0XCBB30000
19:41:29.1992428209Initialize::GetLocation@ 0XFEA7E620|-22551008
19:41:29.1992428111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0XCA490000 <> 0XCBB30000
19:41:29.1992428209Initialize::GetLocation@ 0XFE96AD10|-23679728
19:41:29.389242848Update::DetectEnv (C:\Windows\SYSTEM32\d3d9.dll) <0XA29B0000>6|2|1203372419
19:41:29.5192428129DXManager::DetectOK
19:41:29.6792428186DXManager::DetectDone
19:41:29.6792428215VTableHolderD3d9::initd3d offsest [sht]: 0x4060 , 0x53c0
19:41:29.6802428209Initialize::GetLocation@ 0X3AC00|240640
19:41:29.6802428209Initialize::GetLocation@ 0X2C5B0|181680
19:41:29.6802428209Initialize::GetLocation@ 0X36D00|224512
19:41:29.6802428209Initialize::GetLocation@ 0XAE020|712736
19:41:29.6802428209Initialize::GetLocation@ 0XADB70|711536
19:41:29.6802428209Initialize::GetLocation@ 0X5880|22656
19:41:29.6802428209Initialize::GetLocation@ 0XADC10|711696
19:41:29.6802428209Initialize::GetLocation@ 0X20FF0|135152
19:41:29.6802428209Initialize::GetLocation@ 0X1CA60|117344
19:41:29.6802428209Initialize::GetLocation@ 0X1C8E0|116960
19:41:29.6802428209Initialize::GetLocation@ 0X1084E0|1082592
19:41:29.6802428209Initialize::GetLocation@ 0X107F90|1081232
19:41:29.6802428209Initialize::GetLocation@ 0X248B0|149680
19:41:29.6802428209Initialize::GetLocation@ 0X247A0|149408
19:41:29.6802428209Initialize::GetLocation@ 0X2C440|181312
19:41:29.6802428209Initialize::GetLocation@ 0X3F210|258576
19:41:29.6802428209Initialize::GetLocation@ 0XF3E0|62432
19:41:29.6802428209Initialize::GetLocation@ 0XF4E0|62688
19:41:29.6802428209Initialize::GetLocation@ 0XF5D0|62928
19:41:29.6802428209Initialize::GetLocation@ 0XF3E0|62432
19:41:29.6802428209Initialize::GetLocation@ 0XF280|62080
19:41:29.6802428209Initialize::GetLocation@ 0XF430|62512
19:41:29.695242848Update::DetectEnv (C:\Windows\SYSTEM32\dinput.dll) <0X7F200000>6|2|1203372033
19:41:29.707242883VTableHolderDInput::initm_pDIW->CreateDevice - succeded.
19:41:29.7072428209Initialize::GetLocation@ 0X3CC0|15552
19:41:29.7072428209Initialize::GetLocation@ 0X5FD0|24528
19:41:29.7072428209Initialize::GetLocation@ 0X6180|24960
19:41:29.708242848Update::DetectEnv (C:\Windows\SYSTEM32\dinput8.dll) <0X7CFA0000>6|2|1203372033
19:41:29.727242893VTableHolderDInput8::initm_pDI8W->CreateDevice - succeded.
19:41:29.7272428110VTableHolderDInput8::initm_pDI8A->CreateDevice - succeded.
19:41:29.7282428209Initialize::GetLocation@ 0X10000|65536
19:41:29.7282428209Initialize::GetLocation@ 0X12C80|76928
19:41:29.7282428209Initialize::GetLocation@ 0X12A60|76384
19:41:29.7982428225InterProcessElement::openInterProcess Overwolf_SHARED_MEMORY_2_2_80_3_12036 opened succesfuly
19:41:29.798242872HookFunctionsTableInitializer::SetHookFunctionsDataD3D9 Sht offsets 0x4060 , 0x53c0
19:41:29.7982428256InterProcessElement::closeInterProcess Overwolf_SHARED_MEMORY_2_2_80_3_12036 close 2147483647 bytes
19:41:29.7992428297InjectOWExplorerExplorer file name [C:\Program Files (x86)\Overwolf\0.157.0.13\OWExplorer.dll]
19:41:29.8702428385ftw1OWExplorer injected
19:41:30.321607451`anonymous-namespace'::CreateProviderInitialize provider: NET
19:41:30.3216074117libprocess::NetworkTracer::Initializeinit res:0x5 [started:0 active:0 enbaled:0]
19:41:30.321607454`anonymous-namespace'::CreateProviderFail to initlized provider: NET
19:41:30.321607451`anonymous-namespace'::CreateProviderInitialize provider: GPU
19:44:01.263CA0394ProcessInjector::HandleElevatedProcessFail injection to process [1708] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
19:44:01.263CA0333ProcessInjector::HandlePendingProccesssFail to inject pending process |1708|: Code.exe
19:44:01.263CA0394ProcessInjector::HandleElevatedProcessFail injection to process [1800] [t: 0 w_t_id: 0]- Microsoft.ServiceHub.Controller.exe (elevated True) 0x0
19:44:01.263CA0333ProcessInjector::HandlePendingProccesssFail to inject pending process |1800|: Microsoft.ServiceHub.Controller.exe
19:44:01.263CA0394ProcessInjector::HandleElevatedProcessFail injection to process [3136] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
19:44:01.263CA0333ProcessInjector::HandlePendingProccesssFail to inject pending process |3136|: Code.exe
19:44:01.263CA0394ProcessInjector::HandleElevatedProcessFail injection to process [4008] [t: 0 w_t_id: 0]- MsMpEng.exe (elevated True) 0x0
19:44:01.263CA0333ProcessInjector::HandlePendingProccesssFail to inject pending process |4008|: MsMpEng.exe
19:44:01.263CA0394ProcessInjector::HandleElevatedProcessFail injection to process [5448] [t: 0 w_t_id: 0]- ServiceHub.TestWindowStoreHost.exe (elevated True) 0x0
19:44:01.263CA0333ProcessInjector::HandlePendingProccesssFail to inject pending process |5448|: ServiceHub.TestWindowStoreHost.exe
19:44:01.263CA0394ProcessInjector::HandleElevatedProcessFail injection to process [7212] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
19:44:01.263CA0333ProcessInjector::HandlePendingProccesssFail to inject pending process |7212|: Code.exe
19:44:01.263CA0394ProcessInjector::HandleElevatedProcessFail injection to process [7640] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
19:44:01.263CA0333ProcessInjector::HandlePendingProccesssFail to inject pending process |7640|: Code.exe
19:44:01.263CA0394ProcessInjector::HandleElevatedProcessFail injection to process [9444] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
19:44:01.263CA0333ProcessInjector::HandlePendingProccesssFail to inject pending process |9444|: Code.exe
19:44:01.263CA0394ProcessInjector::HandleElevatedProcessFail injection to process [10412] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x0
19:44:01.263CA0333ProcessInjector::HandlePendingProccesssFail to inject pending process |10412|: Teams.exe
19:44:01.263CA0394ProcessInjector::HandleElevatedProcessFail injection to process [11380] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
19:44:01.263CA0333ProcessInjector::HandlePendingProccesssFail to inject pending process |11380|: Code.exe
19:44:01.263CA0394ProcessInjector::HandleElevatedProcessFail injection to process [11844] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x0
19:44:01.263CA0333ProcessInjector::HandlePendingProccesssFail to inject pending process |11844|: Teams.exe
19:44:01.263CA0394ProcessInjector::HandleElevatedProcessFail injection to process [14360] [t: 0 w_t_id: 0]- com.docker.backend.exe (elevated True) 0x0
19:44:01.263CA0333ProcessInjector::HandlePendingProccesssFail to inject pending process |14360|: com.docker.backend.exe
19:44:01.263CA0394ProcessInjector::HandleElevatedProcessFail injection to process [15260] [t: 0 w_t_id: 0]- vpnkit.exe (elevated True) 0x0
19:44:01.263CA0333ProcessInjector::HandlePendingProccesssFail to inject pending process |15260|: vpnkit.exe
19:44:01.263CA0394ProcessInjector::HandleElevatedProcessFail injection to process [16852] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
19:44:01.263CA0333ProcessInjector::HandlePendingProccesssFail to inject pending process |16852|: Code.exe
19:44:01.263CA0394ProcessInjector::HandleElevatedProcessFail injection to process [19192] [t: 0 w_t_id: 0]- com.docker.proxy.exe (elevated True) 0x0
19:44:01.263CA0333ProcessInjector::HandlePendingProccesssFail to inject pending process |19192|: com.docker.proxy.exe
19:44:01.263CA0394ProcessInjector::HandleElevatedProcessFail injection to process [19580] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
19:44:01.263CA0333ProcessInjector::HandlePendingProccesssFail to inject pending process |19580|: Code.exe
19:44:01.263CA0394ProcessInjector::HandleElevatedProcessFail injection to process [23256] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x0
19:44:01.263CA0333ProcessInjector::HandlePendingProccesssFail to inject pending process |23256|: node.exe
19:44:01.263CA0394ProcessInjector::HandleElevatedProcessFail injection to process [24520] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x0
19:44:01.263CA0333ProcessInjector::HandlePendingProccesssFail to inject pending process |24520|: node.exe
19:44:01.263CA0394ProcessInjector::HandleElevatedProcessFail injection to process [27952] [t: 0 w_t_id: 0]- Teams.exe (elevated True) 0x0
19:44:01.263CA0333ProcessInjector::HandlePendingProccesssFail to inject pending process |27952|: Teams.exe
19:44:01.263CA0394ProcessInjector::HandleElevatedProcessFail injection to process [28028] [t: 0 w_t_id: 0]- vpnkit-bridge.exe (elevated True) 0x0
19:44:01.263CA0333ProcessInjector::HandlePendingProccesssFail to inject pending process |28028|: vpnkit-bridge.exe
19:44:01.263CA0394ProcessInjector::HandleElevatedProcessFail injection to process [29884] [t: 0 w_t_id: 0]- docker-mutagen.exe (elevated True) 0x0
19:44:01.263CA0333ProcessInjector::HandlePendingProccesssFail to inject pending process |29884|: docker-mutagen.exe
20:53:25.960CA0394ProcessInjector::HandleElevatedProcessFail injection to process [6820] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
20:53:25.961CA0333ProcessInjector::HandlePendingProccesssFail to inject pending process |6820|: Code.exe
20:53:43.961CA0394ProcessInjector::HandleElevatedProcessFail injection to process [14084] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
20:53:43.961CA0333ProcessInjector::HandlePendingProccesssFail to inject pending process |14084|: Code.exe
20:53:47.962CA0394ProcessInjector::HandleElevatedProcessFail injection to process [5228] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
20:53:47.962CA0333ProcessInjector::HandlePendingProccesssFail to inject pending process |5228|: Code.exe
21:39:14.272CA0394ProcessInjector::HandleElevatedProcessFail injection to process [24728] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x1f
21:39:14.272CA0333ProcessInjector::HandlePendingProccesssFail to inject pending process |24728|: Code.exe