TimeThreadLineFunctionMessage
21:08:09.1871EA8363ftw1Loading (pid: 13116)
21:08:09.1872EDC146ProcessHardwareRecorder::CommandThreadstarting recorder thread
21:08:09.1911EA848Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d11.dll) <0X91460000>6|2|1203372419
21:08:09.1921EA848Update::DetectEnv (C:\WINDOWS\SYSTEM32\dxgi.dll) <0X93200000>6|2|1203372725
21:08:09.2881EA8172DXManager::DetectFound in 0
21:08:09.2881EA8209Initialize::GetLocation@ 0X4670|18032
21:08:09.2881EA8209Initialize::GetLocation@ 0X663F0|418800
21:08:09.2881EA8209Initialize::GetLocation@ 0X19DE0|105952
21:08:09.2881EA8209Initialize::GetLocation@ 0X1350|4944
21:08:09.2881EA8111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X91460000 <> 0X93200000
21:08:09.2881EA8209Initialize::GetLocation@ 0XFE382E80|-29872512
21:08:09.2881EA8111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X91460000 <> 0X93200000
21:08:09.2881EA8209Initialize::GetLocation@ 0XFE387F80|-29851776
21:08:09.2881EA8111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X91460000 <> 0X93200000
21:08:09.2881EA8209Initialize::GetLocation@ 0XFE37E620|-29891040
21:08:09.2881EA8111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X91460000 <> 0X93200000
21:08:09.2881EA8209Initialize::GetLocation@ 0XFE26AD10|-31019760
21:08:09.3311EA848Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d9.dll) <0X598E0000>6|2|1203372419
21:08:09.4291EA8129DXManager::DetectOK
21:08:09.5001EA8186DXManager::DetectDone
21:08:09.5001EA8215VTableHolderD3d9::initd3d offsest [sht]: 0x4060 , 0x53c0
21:08:09.5011EA8209Initialize::GetLocation@ 0X3AC00|240640
21:08:09.5011EA8209Initialize::GetLocation@ 0X2C5B0|181680
21:08:09.5011EA8209Initialize::GetLocation@ 0X36D00|224512
21:08:09.5011EA8209Initialize::GetLocation@ 0XAE020|712736
21:08:09.5011EA8209Initialize::GetLocation@ 0XADB70|711536
21:08:09.5011EA8209Initialize::GetLocation@ 0X5880|22656
21:08:09.5011EA8209Initialize::GetLocation@ 0XADC10|711696
21:08:09.5011EA8209Initialize::GetLocation@ 0X20FF0|135152
21:08:09.5011EA8209Initialize::GetLocation@ 0X1CA60|117344
21:08:09.5011EA8209Initialize::GetLocation@ 0X1C8E0|116960
21:08:09.5011EA8209Initialize::GetLocation@ 0X1084E0|1082592
21:08:09.5011EA8209Initialize::GetLocation@ 0X107F90|1081232
21:08:09.5011EA8209Initialize::GetLocation@ 0X248B0|149680
21:08:09.5011EA8209Initialize::GetLocation@ 0X247A0|149408
21:08:09.5011EA8209Initialize::GetLocation@ 0X2C440|181312
21:08:09.5011EA8209Initialize::GetLocation@ 0X3F210|258576
21:08:09.5011EA8209Initialize::GetLocation@ 0XF3E0|62432
21:08:09.5011EA8209Initialize::GetLocation@ 0XF4E0|62688
21:08:09.5011EA8209Initialize::GetLocation@ 0XF5D0|62928
21:08:09.5011EA8209Initialize::GetLocation@ 0XF3E0|62432
21:08:09.5011EA8209Initialize::GetLocation@ 0XF280|62080
21:08:09.5011EA8209Initialize::GetLocation@ 0XF430|62512
21:08:09.5261EA848Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput.dll) <0X51B00000>6|2|1203372033
21:08:09.5721EA883VTableHolderDInput::initm_pDIW->CreateDevice - succeded.
21:08:09.5731EA8209Initialize::GetLocation@ 0X3CC0|15552
21:08:09.5731EA8209Initialize::GetLocation@ 0X5FD0|24528
21:08:09.5731EA8209Initialize::GetLocation@ 0X6180|24960
21:08:09.5781EA848Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput8.dll) <0X51980000>6|2|1203372033
21:08:09.6121EA893VTableHolderDInput8::initm_pDI8W->CreateDevice - succeded.
21:08:09.6121EA8110VTableHolderDInput8::initm_pDI8A->CreateDevice - succeded.
21:08:09.6131EA8209Initialize::GetLocation@ 0X10000|65536
21:08:09.6131EA8209Initialize::GetLocation@ 0X12C80|76928
21:08:09.6131EA8209Initialize::GetLocation@ 0X12A60|76384
21:08:09.6671EA8225InterProcessElement::openInterProcess Overwolf_SHARED_MEMORY_2_2_75_2_13116 opened succesfuly
21:08:09.6671EA872HookFunctionsTableInitializer::SetHookFunctionsDataD3D9 Sht offsets 0x4060 , 0x53c0
21:08:09.6671EA8256InterProcessElement::closeInterProcess Overwolf_SHARED_MEMORY_2_2_75_2_13116 close 2147483647 bytes
21:08:09.6671EA8299InjectOWExplorerExplorer file name [C:\Program Files (x86)\Overwolf\0.142.0.22\OWExplorer.dll]
21:08:09.7611EA8387ftw1OWExplorer injected
21:08:10.371382051`anonymous-namespace'::CreateProviderInitialize provider: NET
21:08:10.3713820117libprocess::NetworkTracer::Initializeinit res:0x5 [started:0 active:0 enbaled:0]
21:08:10.371382054`anonymous-namespace'::CreateProviderFail to initlized provider: NET
21:08:10.371382051`anonymous-namespace'::CreateProviderInitialize provider: GPU
21:10:40.9692D58349ProcessInjector::HandleElevatedProcessFail injection to process [12792] [t: 0 w_t_id: 0]- lghub.exe (elevated True) 0x0
21:10:40.9692D58288ProcessInjector::HandlePendingProccesssFail to inject pending process |12792|: lghub.exe
21:11:14.9782D58349ProcessInjector::HandleElevatedProcessFail injection to process [16620] [t: 0 w_t_id: 0]- DTShellHlp.exe (elevated True) 0x578
21:11:14.9782D58288ProcessInjector::HandlePendingProccesssFail to inject pending process |16620|: DTShellHlp.exe
00:32:24.772D58349ProcessInjector::HandleElevatedProcessFail injection to process [3600] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
00:32:24.772D58288ProcessInjector::HandlePendingProccesssFail to inject pending process |3600|: Code.exe
00:32:24.772D58349ProcessInjector::HandleElevatedProcessFail injection to process [10800] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
00:32:24.772D58288ProcessInjector::HandlePendingProccesssFail to inject pending process |10800|: Code.exe
00:32:25.772D58349ProcessInjector::HandleElevatedProcessFail injection to process [6356] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
00:32:25.772D58288ProcessInjector::HandlePendingProccesssFail to inject pending process |6356|: Code.exe
00:32:25.772D58349ProcessInjector::HandleElevatedProcessFail injection to process [7692] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
00:32:25.772D58288ProcessInjector::HandlePendingProccesssFail to inject pending process |7692|: Code.exe
00:32:25.772D58349ProcessInjector::HandleElevatedProcessFail injection to process [10132] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
00:32:25.772D58288ProcessInjector::HandlePendingProccesssFail to inject pending process |10132|: Code.exe
00:32:25.772D58349ProcessInjector::HandleElevatedProcessFail injection to process [13960] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
00:32:25.772D58288ProcessInjector::HandlePendingProccesssFail to inject pending process |13960|: Code.exe
00:32:26.772D58349ProcessInjector::HandleElevatedProcessFail injection to process [2336] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
00:32:26.772D58288ProcessInjector::HandlePendingProccesssFail to inject pending process |2336|: Code.exe
00:32:26.772D58349ProcessInjector::HandleElevatedProcessFail injection to process [11004] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
00:32:26.772D58288ProcessInjector::HandlePendingProccesssFail to inject pending process |11004|: Code.exe
00:32:26.772D58349ProcessInjector::HandleElevatedProcessFail injection to process [12980] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
00:32:26.772D58288ProcessInjector::HandlePendingProccesssFail to inject pending process |12980|: Code.exe
00:36:25.1242D58349ProcessInjector::HandleElevatedProcessFail injection to process [4124] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
00:36:25.1242D58288ProcessInjector::HandlePendingProccesssFail to inject pending process |4124|: Code.exe
00:36:53.1252D58349ProcessInjector::HandleElevatedProcessFail injection to process [3992] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
00:36:53.1252D58288ProcessInjector::HandlePendingProccesssFail to inject pending process |3992|: Code.exe
01:56:40.6102D58349ProcessInjector::HandleElevatedProcessFail injection to process [3284] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x5
01:56:40.6102D58288ProcessInjector::HandlePendingProccesssFail to inject pending process |3284|: Code.exe
01:56:41.6112D58349ProcessInjector::HandleElevatedProcessFail injection to process [19844] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x5
01:56:41.6112D58288ProcessInjector::HandlePendingProccesssFail to inject pending process |19844|: Code.exe
01:57:44.6322D58349ProcessInjector::HandleElevatedProcessFail injection to process [6744] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x5
01:57:44.6322D58288ProcessInjector::HandlePendingProccesssFail to inject pending process |6744|: Code.exe
01:57:45.6292D58349ProcessInjector::HandleElevatedProcessFail injection to process [4920] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x5
01:57:45.6292D58288ProcessInjector::HandlePendingProccesssFail to inject pending process |4920|: Code.exe
02:16:20.7522D58349ProcessInjector::HandleElevatedProcessFail injection to process [2272] [t: 0 w_t_id: 0]- MongoDBCompassCommunity.exe (elevated True) 0x0
02:16:20.7522D58288ProcessInjector::HandlePendingProccesssFail to inject pending process |2272|: MongoDBCompassCommunity.exe
04:52:08.7222D58349ProcessInjector::HandleElevatedProcessFail injection to process [15828] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x1f
04:52:08.7222D58288ProcessInjector::HandlePendingProccesssFail to inject pending process |15828|: Code.exe
05:27:29.5522D58349ProcessInjector::HandleElevatedProcessFail injection to process [14540] [t: 0 w_t_id: 0]- MongoDBCompassCommunity.exe (elevated True) 0x1f
05:27:29.5522D58288ProcessInjector::HandlePendingProccesssFail to inject pending process |14540|: MongoDBCompassCommunity.exe
21:31:01.8822D58349ProcessInjector::HandleElevatedProcessFail injection to process [22444] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x5
21:31:01.8832D58288ProcessInjector::HandlePendingProccesssFail to inject pending process |22444|: Code.exe
22:01:01.3222D58349ProcessInjector::HandleElevatedProcessFail injection to process [3316] [t: 0 w_t_id: 0]- MongoDBCompassCommunity.exe (elevated True) 0x0
22:01:01.3222D58288ProcessInjector::HandlePendingProccesssFail to inject pending process |3316|: MongoDBCompassCommunity.exe
01:12:06.4282D58349ProcessInjector::HandleElevatedProcessFail injection to process [12192] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
01:12:06.4292D58288ProcessInjector::HandlePendingProccesssFail to inject pending process |12192|: Code.exe
01:15:34.4212D58349ProcessInjector::HandleElevatedProcessFail injection to process [8924] [t: 0 w_t_id: 0]- owobs-ffmpeg-mux.exe (elevated True) 0x0
01:15:34.4212D58288ProcessInjector::HandlePendingProccesssFail to inject pending process |8924|: owobs-ffmpeg-mux.exe