TimeThreadLineFunctionMessage
15:33:20.5884BD4365ftw1Loading (pid: 26228)
15:33:20.5914BD448Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d11.dll) <0X38370000>6|2|1203373348
15:33:20.5914BD448Update::DetectEnv (C:\WINDOWS\SYSTEM32\dxgi.dll) <0X3A140000>6|2|1203373348
15:33:20.595468147ProcessHardwareRecorder::CommandThreadstarting recorder thread
15:33:20.7474BD4172DXManager::DetectFound in 0
15:33:20.7484BD4209Initialize::GetLocation@ 0X4660|18016
15:33:20.7484BD4209Initialize::GetLocation@ 0X662B0|418480
15:33:20.7494BD4209Initialize::GetLocation@ 0X19DB0|105904
15:33:20.7494BD4209Initialize::GetLocation@ 0X1350|4944
15:33:20.7494BD4111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X38370000 <> 0X3A140000
15:33:20.7494BD4209Initialize::GetLocation@ 0XFE353020|-30068704
15:33:20.7494BD4111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X38370000 <> 0X3A140000
15:33:20.7494BD4209Initialize::GetLocation@ 0XFE358060|-30048160
15:33:20.7494BD4111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X38370000 <> 0X3A140000
15:33:20.7494BD4209Initialize::GetLocation@ 0XFE34E620|-30087648
15:33:20.7494BD4111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X38370000 <> 0X3A140000
15:33:20.7494BD4209Initialize::GetLocation@ 0XFE23AA80|-31217024
15:33:20.7994BD448Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d9.dll) <0X31480000>6|2|1203373142
15:33:21.834BD4129DXManager::DetectOK
15:33:21.1904BD4186DXManager::DetectDone
15:33:21.1904BD4215VTableHolderD3d9::initd3d offsest [sht]: 0x4060 , 0x53c0
15:33:21.1904BD4209Initialize::GetLocation@ 0X3AC00|240640
15:33:21.1904BD4209Initialize::GetLocation@ 0X2C5B0|181680
15:33:21.1904BD4209Initialize::GetLocation@ 0X36D00|224512
15:33:21.1904BD4209Initialize::GetLocation@ 0XAE210|713232
15:33:21.1904BD4209Initialize::GetLocation@ 0XADD60|712032
15:33:21.1904BD4209Initialize::GetLocation@ 0X5880|22656
15:33:21.1904BD4209Initialize::GetLocation@ 0XADE00|712192
15:33:21.1904BD4209Initialize::GetLocation@ 0X20FF0|135152
15:33:21.1904BD4209Initialize::GetLocation@ 0X1CA60|117344
15:33:21.1904BD4209Initialize::GetLocation@ 0X1C8E0|116960
15:33:21.1904BD4209Initialize::GetLocation@ 0X1086D0|1083088
15:33:21.1904BD4209Initialize::GetLocation@ 0X108180|1081728
15:33:21.1904BD4209Initialize::GetLocation@ 0X248B0|149680
15:33:21.1904BD4209Initialize::GetLocation@ 0X247A0|149408
15:33:21.1904BD4209Initialize::GetLocation@ 0X2C440|181312
15:33:21.1904BD4209Initialize::GetLocation@ 0X3F3F0|259056
15:33:21.1914BD4209Initialize::GetLocation@ 0XF3E0|62432
15:33:21.1914BD4209Initialize::GetLocation@ 0XF4E0|62688
15:33:21.1914BD4209Initialize::GetLocation@ 0XF5D0|62928
15:33:21.1914BD4209Initialize::GetLocation@ 0XF3E0|62432
15:33:21.1914BD4209Initialize::GetLocation@ 0XF280|62080
15:33:21.1914BD4209Initialize::GetLocation@ 0XF430|62512
15:33:21.2174BD448Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput.dll) <0XF97B0000>6|2|1203372033
15:33:21.3794BD483VTableHolderDInput::initm_pDIW->CreateDevice - succeded.
15:33:21.3804BD4209Initialize::GetLocation@ 0X3CC0|15552
15:33:21.3804BD4209Initialize::GetLocation@ 0X5FD0|24528
15:33:21.3804BD4209Initialize::GetLocation@ 0X6180|24960
15:33:21.3814BD448Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput8.dll) <0XF9670000>6|2|1203372033
15:33:21.5274BD493VTableHolderDInput8::initm_pDI8W->CreateDevice - succeded.
15:33:21.5274BD4110VTableHolderDInput8::initm_pDI8A->CreateDevice - succeded.
15:33:21.5274BD4209Initialize::GetLocation@ 0X10000|65536
15:33:21.5274BD4209Initialize::GetLocation@ 0X12C80|76928
15:33:21.5274BD4209Initialize::GetLocation@ 0X12A60|76384
15:33:21.5804BD4225InterProcessElement::openInterProcess Overwolf_SHARED_MEMORY_2_2_84_12_26228 opened succesfuly
15:33:21.5804BD472HookFunctionsTableInitializer::SetHookFunctionsDataD3D9 Sht offsets 0x4060 , 0x53c0
15:33:21.5804BD4256InterProcessElement::closeInterProcess Overwolf_SHARED_MEMORY_2_2_84_12_26228 close 2147483647 bytes
15:33:21.5804BD4301InjectOWExplorerExplorer file name [C:\Program Files (x86)\Overwolf\0.165.0.25\OWExplorer.dll]
15:33:21.5834BD4389ftw1OWExplorer injected
15:33:21.600224870Common::ProcessExplorer::ProcessTrackerIPCAgent::OnConnectedconnected to process tracker server
15:33:22.70557451`anonymous-namespace'::CreateProviderInitialize provider: NET
15:33:22.715574117libprocess::NetworkTracer::Initializeinit res:0x5 [started:0 active:0 enbaled:0]
15:33:22.71557454`anonymous-namespace'::CreateProviderFail to initlized provider: NET
15:33:22.71557451`anonymous-namespace'::CreateProviderInitialize provider: GPU
15:33:22.1536924726ProcessInjector::InjectProcessprocess |vpnagent.exe| missing h
15:33:22.1536924726ProcessInjector::InjectProcessprocess |gameinputsvc.exe| missing h
15:33:22.1536924726ProcessInjector::InjectProcessprocess |vmware-authd.exe| missing h
15:33:22.1536924726ProcessInjector::InjectProcessprocess |WifiSvc.exe| missing h
15:33:22.1536924726ProcessInjector::InjectProcessprocess |sqlceip.exe| missing h
15:33:22.1536924726ProcessInjector::InjectProcessprocess |sqlservr.exe| missing h
15:33:22.1536924726ProcessInjector::InjectProcessprocess |DropboxUpdate.exe| missing h
15:33:22.1536924726ProcessInjector::InjectProcessprocess |GoogleCrashHandler.exe| missing h
15:33:22.1536924726ProcessInjector::InjectProcessprocess |GoogleCrashHandler64.exe| missing h
15:33:22.1536924726ProcessInjector::InjectProcessprocess |gameinputsvc.exe| missing h
15:33:22.5096924726ProcessInjector::InjectProcessprocess |OverwolfUpdater.exe| missing h