TimeThreadLineFunctionMessage
17:48:04.91212DC361ftw1Loading (pid: 7816)
17:48:04.91248C8146ProcessHardwareRecorder::CommandThreadstarting recorder thread
17:48:04.91412DC48Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d11.dll) <0XE1470000>6|2|1203372419
17:48:04.91412DC48Update::DetectEnv (C:\WINDOWS\SYSTEM32\dxgi.dll) <0XE2840000>6|2|1203372847
17:48:06.84712DC172DXManager::DetectFound in 0
17:48:06.84812DC209Initialize::GetLocation@ 0X4670|18032
17:48:06.84812DC209Initialize::GetLocation@ 0X66400|418816
17:48:06.84812DC209Initialize::GetLocation@ 0X19DE0|105952
17:48:06.84812DC209Initialize::GetLocation@ 0X1350|4944
17:48:06.84812DC111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XE1470000 <> 0XE2840000
17:48:06.84812DC209Initialize::GetLocation@ 0XFED52E80|-19583360
17:48:06.84812DC111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XE1470000 <> 0XE2840000
17:48:06.84812DC209Initialize::GetLocation@ 0XFED57F80|-19562624
17:48:06.84812DC111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XE1470000 <> 0XE2840000
17:48:06.84812DC209Initialize::GetLocation@ 0XFED4E620|-19601888
17:48:06.84812DC111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XE1470000 <> 0XE2840000
17:48:06.84812DC209Initialize::GetLocation@ 0XFEC3AD10|-20730608
17:48:06.85812DC48Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d9.dll) <0XDBEE0000>6|2|1203372419
17:48:07.99212DC129DXManager::DetectOK
17:48:08.1012DC186DXManager::DetectDone
17:48:08.1012DC215VTableHolderD3d9::initd3d offsest [sht]: 0x4060 , 0x53c0
17:48:08.1012DC209Initialize::GetLocation@ 0X3AC00|240640
17:48:08.1012DC209Initialize::GetLocation@ 0X2C5B0|181680
17:48:08.1012DC209Initialize::GetLocation@ 0X36D00|224512
17:48:08.1012DC209Initialize::GetLocation@ 0XAE020|712736
17:48:08.1012DC209Initialize::GetLocation@ 0XADB70|711536
17:48:08.1012DC209Initialize::GetLocation@ 0X5880|22656
17:48:08.1012DC209Initialize::GetLocation@ 0XADC10|711696
17:48:08.1012DC209Initialize::GetLocation@ 0X20FF0|135152
17:48:08.1012DC209Initialize::GetLocation@ 0X1CA60|117344
17:48:08.1012DC209Initialize::GetLocation@ 0X1C8E0|116960
17:48:08.1012DC209Initialize::GetLocation@ 0X1084E0|1082592
17:48:08.1012DC209Initialize::GetLocation@ 0X107F90|1081232
17:48:08.1012DC209Initialize::GetLocation@ 0X248B0|149680
17:48:08.1012DC209Initialize::GetLocation@ 0X247A0|149408
17:48:08.1012DC209Initialize::GetLocation@ 0X2C440|181312
17:48:08.1012DC209Initialize::GetLocation@ 0X3F210|258576
17:48:08.1012DC209Initialize::GetLocation@ 0XF3E0|62432
17:48:08.1012DC209Initialize::GetLocation@ 0XF4E0|62688
17:48:08.1012DC209Initialize::GetLocation@ 0XF5D0|62928
17:48:08.1012DC209Initialize::GetLocation@ 0XF3E0|62432
17:48:08.1012DC209Initialize::GetLocation@ 0XF280|62080
17:48:08.1012DC209Initialize::GetLocation@ 0XF430|62512
17:48:08.21812DC48Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput.dll) <0XB5200000>6|2|1203372033
17:48:08.48212DC83VTableHolderDInput::initm_pDIW->CreateDevice - succeded.
17:48:08.48212DC209Initialize::GetLocation@ 0X3CC0|15552
17:48:08.48212DC209Initialize::GetLocation@ 0X5FD0|24528
17:48:08.48212DC209Initialize::GetLocation@ 0X6180|24960
17:48:08.50812DC48Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput8.dll) <0XB3C90000>6|2|1203372033
17:48:08.51412DC93VTableHolderDInput8::initm_pDI8W->CreateDevice - succeded.
17:48:08.51412DC110VTableHolderDInput8::initm_pDI8A->CreateDevice - succeded.
17:48:08.51412DC209Initialize::GetLocation@ 0X10000|65536
17:48:08.51412DC209Initialize::GetLocation@ 0X12C80|76928
17:48:08.51412DC209Initialize::GetLocation@ 0X12A60|76384
17:48:08.82712DC225InterProcessElement::openInterProcess Overwolf_SHARED_MEMORY_2_2_78_13_7816 opened succesfuly
17:48:08.82712DC72HookFunctionsTableInitializer::SetHookFunctionsDataD3D9 Sht offsets 0x4060 , 0x53c0
17:48:08.82712DC256InterProcessElement::closeInterProcess Overwolf_SHARED_MEMORY_2_2_78_13_7816 close 2147483647 bytes
17:48:08.82712DC297InjectOWExplorerExplorer file name [C:\Program Files (x86)\Overwolf\0.148.81.21\OWExplorer.dll]
17:48:10.35012DC385ftw1OWExplorer injected
17:48:10.980394C51`anonymous-namespace'::CreateProviderInitialize provider: NET
17:48:10.980394C117libprocess::NetworkTracer::Initializeinit res:0x5 [started:0 active:0 enbaled:0]
17:48:10.980394C54`anonymous-namespace'::CreateProviderFail to initlized provider: NET
17:48:10.980394C51`anonymous-namespace'::CreateProviderInitialize provider: GPU
17:50:41.3544774352ProcessInjector::HandleElevatedProcessFail injection to process [1836] [t: 0 w_t_id: 0]- NVDisplay.Container.exe (elevated True) 0x0
17:50:41.3544774291ProcessInjector::HandlePendingProccesssFail to inject pending process |1836|: NVDisplay.Container.exe
17:50:41.3544774352ProcessInjector::HandleElevatedProcessFail injection to process [4672] [t: 0 w_t_id: 0]- MsMpEng.exe (elevated True) 0x0
17:50:41.3544774291ProcessInjector::HandlePendingProccesssFail to inject pending process |4672|: MsMpEng.exe
17:50:41.3544774352ProcessInjector::HandleElevatedProcessFail injection to process [18660] [t: 0 w_t_id: 0]- GoogleCrashHandler64.exe (elevated True) 0x0
17:50:41.3544774291ProcessInjector::HandlePendingProccesssFail to inject pending process |18660|: GoogleCrashHandler64.exe
17:56:42.3694774352ProcessInjector::HandleElevatedProcessFail injection to process [16240] [t: 0 w_t_id: 0]- AWCCApplicationWatcher64.exe (elevated True) 0x0
17:56:42.3694774291ProcessInjector::HandlePendingProccesssFail to inject pending process |16240|: AWCCApplicationWatcher64.exe
20:48:01.4284774352ProcessInjector::HandleElevatedProcessFail injection to process [3536] [t: 0 w_t_id: 0]- msedge.exe (elevated True) 0x0
20:48:01.4954774291ProcessInjector::HandlePendingProccesssFail to inject pending process |3536|: msedge.exe
20:48:14.4274774352ProcessInjector::HandleElevatedProcessFail injection to process [11008] [t: 0 w_t_id: 0]- msedge.exe (elevated True) 0x0
20:48:14.4274774291ProcessInjector::HandlePendingProccesssFail to inject pending process |11008|: msedge.exe
20:48:14.4274774352ProcessInjector::HandleElevatedProcessFail injection to process [15604] [t: 0 w_t_id: 0]- msedge.exe (elevated True) 0x0
20:48:14.4274774291ProcessInjector::HandlePendingProccesssFail to inject pending process |15604|: msedge.exe