TimeThreadLineFunctionMessage
23:20:42.107FA0361ftw1Loading (pid: 13028)
23:20:42.1072B50146ProcessHardwareRecorder::CommandThreadstarting recorder thread
23:20:42.108FA048Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d11.dll) <0X68350000>6|2|1247871522
23:20:42.108FA048Update::DetectEnv (C:\WINDOWS\SYSTEM32\dxgi.dll) <0X6A9C0000>6|2|1247871522
23:20:42.166FA0172DXManager::DetectFound in 0
23:20:42.166FA0209Initialize::GetLocation@ 0X4F80|20352
23:20:42.166FA0209Initialize::GetLocation@ 0X69640|431680
23:20:42.166FA0209Initialize::GetLocation@ 0X206F0|132848
23:20:42.166FA0209Initialize::GetLocation@ 0X1DE0|7648
23:20:42.166FA0111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X68350000 <> 0X6A9C0000
23:20:42.166FA0209Initialize::GetLocation@ 0XFDAB8860|-39090080
23:20:42.166FA0111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X68350000 <> 0X6A9C0000
23:20:42.166FA0209Initialize::GetLocation@ 0XFDABDC30|-39068624
23:20:42.166FA0111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X68350000 <> 0X6A9C0000
23:20:42.166FA0209Initialize::GetLocation@ 0XFDABC5F0|-39074320
23:20:42.166FA0111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X68350000 <> 0X6A9C0000
23:20:42.166FA0209Initialize::GetLocation@ 0XFD99A7F0|-40261648
23:20:42.174FA048Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d9.dll) <0X502E0000>6|2|1247871638
23:20:42.238FA0129DXManager::DetectOK
23:20:42.277FA0186DXManager::DetectDone
23:20:42.277FA0215VTableHolderD3d9::initd3d offsest [sht]: 0x4060 , 0x53c0
23:20:42.277FA0209Initialize::GetLocation@ 0X41B90|269200
23:20:42.277FA0209Initialize::GetLocation@ 0X33E20|212512
23:20:42.277FA0209Initialize::GetLocation@ 0X3D6C0|251584
23:20:42.277FA0209Initialize::GetLocation@ 0XB8E10|757264
23:20:42.277FA0209Initialize::GetLocation@ 0XB8960|756064
23:20:42.277FA0209Initialize::GetLocation@ 0XACF0|44272
23:20:42.277FA0209Initialize::GetLocation@ 0XB8A00|756224
23:20:42.277FA0209Initialize::GetLocation@ 0X1B6B0|112304
23:20:42.277FA0209Initialize::GetLocation@ 0X1E100|123136
23:20:42.277FA0209Initialize::GetLocation@ 0X26730|157488
23:20:42.277FA0209Initialize::GetLocation@ 0X1146B0|1132208
23:20:42.277FA0209Initialize::GetLocation@ 0X114170|1130864
23:20:42.277FA0209Initialize::GetLocation@ 0X1B5A0|112032
23:20:42.277FA0209Initialize::GetLocation@ 0X1B4B0|111792
23:20:42.277FA0209Initialize::GetLocation@ 0XD680|54912
23:20:42.277FA0209Initialize::GetLocation@ 0X493C0|299968
23:20:42.277FA0209Initialize::GetLocation@ 0XA860|43104
23:20:42.277FA0209Initialize::GetLocation@ 0XD0000|851968
23:20:42.277FA0209Initialize::GetLocation@ 0XD06D0|853712
23:20:42.277FA0209Initialize::GetLocation@ 0XA860|43104
23:20:42.277FA0209Initialize::GetLocation@ 0XD11C0|856512
23:20:42.277FA0209Initialize::GetLocation@ 0XD1820|858144
23:20:42.298FA048Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput.dll) <0XD7070000>6|2|1247870977
23:20:42.339FA083VTableHolderDInput::initm_pDIW->CreateDevice - succeded.
23:20:42.339FA0209Initialize::GetLocation@ 0X4040|16448
23:20:42.339FA0209Initialize::GetLocation@ 0X6410|25616
23:20:42.339FA0209Initialize::GetLocation@ 0X65C0|26048
23:20:42.341FA048Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput8.dll) <0XD7020000>6|2|1247870977
23:20:42.381FA093VTableHolderDInput8::initm_pDI8W->CreateDevice - succeded.
23:20:42.381FA0110VTableHolderDInput8::initm_pDI8A->CreateDevice - succeded.
23:20:42.381FA0209Initialize::GetLocation@ 0XA5D0|42448
23:20:42.381FA0209Initialize::GetLocation@ 0XD4D0|54480
23:20:42.381FA0209Initialize::GetLocation@ 0XD290|53904
23:20:42.435FA0225InterProcessElement::openInterProcess Overwolf_SHARED_MEMORY_2_2_81_2_13028 opened succesfuly
23:20:42.435FA072HookFunctionsTableInitializer::SetHookFunctionsDataD3D9 Sht offsets 0x4060 , 0x53c0
23:20:42.435FA0256InterProcessElement::closeInterProcess Overwolf_SHARED_MEMORY_2_2_81_2_13028 close 2147483647 bytes
23:20:42.435FA0297InjectOWExplorerExplorer file name [C:\Program Files (x86)\Overwolf\0.158.1.1\OWExplorer.dll]
23:20:42.439FA0385ftw1OWExplorer injected
23:20:42.5512EE451`anonymous-namespace'::CreateProviderInitialize provider: NET
23:20:42.5512EE4117libprocess::NetworkTracer::Initializeinit res:0x5 [started:0 active:0 enbaled:0]
23:20:42.5512EE454`anonymous-namespace'::CreateProviderFail to initlized provider: NET
23:20:42.5512EE451`anonymous-namespace'::CreateProviderInitialize provider: GPU
23:20:42.7472F2C421ProcessInjector::DoElevetedInjectionFailed to inject process [8060] 0x57
23:20:42.7472F2C377ProcessInjector::HandleElevatedProcessFail injection to process (will retry again in 5 ses) [8060] [t: 8056 w_t_id: 8056]- SetThreadAffinityMaskX64.exe (elevated True) 0x57
23:20:43.4422F2C421ProcessInjector::DoElevetedInjectionFailed to inject process [8060] 0x57
23:20:43.4422F2C394ProcessInjector::HandleElevatedProcessFail injection to process [8060] [t: 8056 w_t_id: 8056]- SetThreadAffinityMaskX64.exe (elevated True) 0x57
23:20:43.4422F2C333ProcessInjector::HandlePendingProccesssFail to inject pending process |8060|: SetThreadAffinityMaskX64.exe
23:23:12.6552F2C394ProcessInjector::HandleElevatedProcessFail injection to process [1952] [t: 0 w_t_id: 0]- NVDisplay.Container.exe (elevated True) 0x57
23:23:12.6552F2C333ProcessInjector::HandlePendingProccesssFail to inject pending process |1952|: NVDisplay.Container.exe
23:23:12.6552F2C394ProcessInjector::HandleElevatedProcessFail injection to process [3748] [t: 0 w_t_id: 0]- NvBroadcast.Container.exe (elevated True) 0x57
23:23:12.6552F2C333ProcessInjector::HandlePendingProccesssFail to inject pending process |3748|: NvBroadcast.Container.exe
23:23:12.6552F2C394ProcessInjector::HandleElevatedProcessFail injection to process [3772] [t: 0 w_t_id: 0]- nvcontainer.exe (elevated True) 0x57
23:23:12.6552F2C333ProcessInjector::HandlePendingProccesssFail to inject pending process |3772|: nvcontainer.exe
23:23:12.6552F2C394ProcessInjector::HandleElevatedProcessFail injection to process [3940] [t: 0 w_t_id: 0]- MsMpEng.exe (elevated True) 0x57
23:23:12.6552F2C333ProcessInjector::HandlePendingProccesssFail to inject pending process |3940|: MsMpEng.exe
23:23:13.6652F2C394ProcessInjector::HandleElevatedProcessFail injection to process [4964] [t: 0 w_t_id: 0]- CCXProcess.exe (elevated True) 0x57
23:23:13.6652F2C333ProcessInjector::HandlePendingProccesssFail to inject pending process |4964|: CCXProcess.exe
23:23:13.6652F2C394ProcessInjector::HandleElevatedProcessFail injection to process [5592] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x57
23:23:13.6652F2C333ProcessInjector::HandlePendingProccesssFail to inject pending process |5592|: node.exe
00:34:50.769FA066ProcessesMonitor::Stopstopping PM...
00:34:50.7692EE4119ProcessesMonitor::ProcessEnumerateThreadexit process listener