TimeThreadLineFunctionMessage
10:36:59.1642BF8365ftw1Loading (pid: 10464)
10:36:59.1662BF848Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d11.dll) <0XFFA00000>6|2|1247871722
10:36:59.1662AC0147ProcessHardwareRecorder::CommandThreadstarting recorder thread
10:36:59.1662BF848Update::DetectEnv (C:\WINDOWS\SYSTEM32\dxgi.dll) <0X1B90000>6|2|1247871940
10:36:59.2792BF8172DXManager::DetectFound in 0
10:36:59.2792BF8209Initialize::GetLocation@ 0X59E0|23008
10:36:59.2792BF8209Initialize::GetLocation@ 0X6AE20|437792
10:36:59.2792BF8209Initialize::GetLocation@ 0X211E0|135648
10:36:59.2792BF8209Initialize::GetLocation@ 0X2840|10304
10:36:59.2792BF8111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XFFA00000 <> 0X1B90000
10:36:59.2792BF8209Initialize::GetLocation@ 0XFDF98860|-33978272
10:36:59.2792BF8111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XFFA00000 <> 0X1B90000
10:36:59.2792BF8209Initialize::GetLocation@ 0XFDF9DC30|-33956816
10:36:59.2792BF8111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XFFA00000 <> 0X1B90000
10:36:59.2792BF8209Initialize::GetLocation@ 0XFDF9C5F0|-33962512
10:36:59.2792BF8111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XFFA00000 <> 0X1B90000
10:36:59.2792BF8209Initialize::GetLocation@ 0XFDE7A7F0|-35149840
10:36:59.2892BF848Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d9.dll) <0XF7F70000>6|2|1247871904
10:36:59.3862BF8129DXManager::DetectOK
10:36:59.4252BF8186DXManager::DetectDone
10:36:59.4252BF8215VTableHolderD3d9::initd3d offsest [sht]: 0x4060 , 0x53c0
10:36:59.4252BF8209Initialize::GetLocation@ 0X41090|266384
10:36:59.4252BF8209Initialize::GetLocation@ 0X33320|209696
10:36:59.4252BF8209Initialize::GetLocation@ 0X3CBC0|248768
10:36:59.4252BF8209Initialize::GetLocation@ 0XB76A0|751264
10:36:59.4252BF8209Initialize::GetLocation@ 0XB71F0|750064
10:36:59.4252BF8209Initialize::GetLocation@ 0XA1F0|41456
10:36:59.4252BF8209Initialize::GetLocation@ 0XB7290|750224
10:36:59.4252BF8209Initialize::GetLocation@ 0X1ABB0|109488
10:36:59.4252BF8209Initialize::GetLocation@ 0X1D600|120320
10:36:59.4252BF8209Initialize::GetLocation@ 0X25C30|154672
10:36:59.4252BF8209Initialize::GetLocation@ 0X113920|1128736
10:36:59.4252BF8209Initialize::GetLocation@ 0X1133E0|1127392
10:36:59.4252BF8209Initialize::GetLocation@ 0X1AAA0|109216
10:36:59.4252BF8209Initialize::GetLocation@ 0X1A9B0|108976
10:36:59.4252BF8209Initialize::GetLocation@ 0XCB80|52096
10:36:59.4252BF8209Initialize::GetLocation@ 0X48030|294960
10:36:59.4252BF8209Initialize::GetLocation@ 0X9D60|40288
10:36:59.4252BF8209Initialize::GetLocation@ 0XCE890|845968
10:36:59.4252BF8209Initialize::GetLocation@ 0XCEF60|847712
10:36:59.4252BF8209Initialize::GetLocation@ 0X9D60|40288
10:36:59.4252BF8209Initialize::GetLocation@ 0XCFA50|850512
10:36:59.4252BF8209Initialize::GetLocation@ 0XD00B0|852144
10:36:59.4412BF848Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput.dll) <0XC2C70000>6|2|1247870977
10:36:59.4542BF883VTableHolderDInput::initm_pDIW->CreateDevice - succeded.
10:36:59.4542BF8209Initialize::GetLocation@ 0X4040|16448
10:36:59.4542BF8209Initialize::GetLocation@ 0X6410|25616
10:36:59.4542BF8209Initialize::GetLocation@ 0X65C0|26048
10:36:59.4592BF848Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput8.dll) <0X9EBE0000>6|2|1247870977
10:36:59.4672BF893VTableHolderDInput8::initm_pDI8W->CreateDevice - succeded.
10:36:59.4682BF8110VTableHolderDInput8::initm_pDI8A->CreateDevice - succeded.
10:36:59.4682BF8209Initialize::GetLocation@ 0XA5D0|42448
10:36:59.4682BF8209Initialize::GetLocation@ 0XD4D0|54480
10:36:59.4682BF8209Initialize::GetLocation@ 0XD290|53904
10:36:59.5252BF8225InterProcessElement::openInterProcess Overwolf_SHARED_MEMORY_2_2_85_4_10464 opened succesfuly
10:36:59.5252BF872HookFunctionsTableInitializer::SetHookFunctionsDataD3D9 Sht offsets 0x4060 , 0x53c0
10:36:59.5252BF8256InterProcessElement::closeInterProcess Overwolf_SHARED_MEMORY_2_2_85_4_10464 close 2147483647 bytes
10:36:59.5252BF8301InjectOWExplorerExplorer file name [C:\Program Files (x86)\Overwolf\0.170.48.15\OWExplorer.dll]
10:36:59.5342BF8389ftw1OWExplorer injected
10:36:59.5352C5071Common::ProcessExplorer::ProcessTrackerIPCAgent::OnConnectedconnected to process tracker server
10:36:59.71528A851`anonymous-namespace'::CreateProviderInitialize provider: NET
10:36:59.71528A8117libprocess::NetworkTracer::Initializeinit res:0x5 [started:0 active:0 enbaled:0]
10:36:59.71528A854`anonymous-namespace'::CreateProviderFail to initlized provider: NET
10:36:59.71528A851`anonymous-namespace'::CreateProviderInitialize provider: GPU
10:36:59.7211284669ProcessInjector::InjectProcessprocess |ekrn.exe| missing h
10:36:59.7791284669ProcessInjector::InjectProcessprocess |culauncher.exe| missing h
10:36:59.7791284669ProcessInjector::InjectProcessprocess |remoting_host.exe| missing h
10:36:59.7791284669ProcessInjector::InjectProcessprocess |RzSDKServer.exe| missing h
10:36:59.7791284669ProcessInjector::InjectProcessprocess |ERAAgent.exe| missing h
10:38:26.921284470ProcessInjector::DoElevetedInjectionFailed to inject process [11316] 0x57
10:38:26.921284369ProcessInjector::HandleElevatedProcessFail injection to process (will retry again in 5 ses) [11316] [t: 12148 w_t_id: 12148]- msedge.exe (elevated True) 0x57
10:38:27.361284470ProcessInjector::DoElevetedInjectionFailed to inject process [11316] 0x57
10:38:27.361284386ProcessInjector::HandleElevatedProcessFail injection to process [11316] [t: 12148 w_t_id: 12148]- msedge.exe (elevated True) 0x57
10:38:27.361284318ProcessInjector::HandlePendingProccesssFail to inject pending process |11316|: msedge.exe
10:39:30.1241284386ProcessInjector::HandleElevatedProcessFail injection to process [2124] [t: 0 w_t_id: 0]- ekrn.exe (elevated True) 0x57
10:39:30.1241284318ProcessInjector::HandlePendingProccesssFail to inject pending process |2124|: ekrn.exe
10:39:30.1241284386ProcessInjector::HandleElevatedProcessFail injection to process [2396] [t: 0 w_t_id: 0]- NVDisplay.Container.exe (elevated True) 0x57
10:39:30.1241284318ProcessInjector::HandlePendingProccesssFail to inject pending process |2396|: NVDisplay.Container.exe
10:39:30.1241284386ProcessInjector::HandleElevatedProcessFail injection to process [4876] [t: 0 w_t_id: 0]- remoting_host.exe (elevated True) 0x57
10:39:30.1241284318ProcessInjector::HandlePendingProccesssFail to inject pending process |4876|: remoting_host.exe
10:39:30.1241284386ProcessInjector::HandleElevatedProcessFail injection to process [4944] [t: 0 w_t_id: 0]- nvcontainer.exe (elevated True) 0x57
10:39:30.1241284318ProcessInjector::HandlePendingProccesssFail to inject pending process |4944|: nvcontainer.exe
10:39:30.1241284386ProcessInjector::HandleElevatedProcessFail injection to process [4952] [t: 0 w_t_id: 0]- RzSDKServer.exe (elevated True) 0x57
10:39:30.1241284318ProcessInjector::HandlePendingProccesssFail to inject pending process |4952|: RzSDKServer.exe
10:39:30.1241284386ProcessInjector::HandleElevatedProcessFail injection to process [4996] [t: 0 w_t_id: 0]- ERAAgent.exe (elevated True) 0x57
10:39:30.1241284318ProcessInjector::HandlePendingProccesssFail to inject pending process |4996|: ERAAgent.exe
10:41:55.3281284669ProcessInjector::InjectProcessprocess |OverwolfUpdater.exe| missing h
10:46:34.6841284669ProcessInjector::InjectProcessprocess |dota2.exe| missing h
10:51:55.8061284386ProcessInjector::HandleElevatedProcessFail injection to process [14732] [t: 0 w_t_id: 0]- owobs-ffmpeg-mux.exe (elevated True) 0x0
10:51:55.8061284318ProcessInjector::HandlePendingProccesssFail to inject pending process |14732|: owobs-ffmpeg-mux.exe
10:54:33.6521284669ProcessInjector::InjectProcessprocess |culauncher.exe| missing h
11:00:38.1271284669ProcessInjector::InjectProcessprocess |culauncher.exe| missing h
11:01:08.4141284669ProcessInjector::InjectProcessprocess |dota2.exe| missing h
11:01:09.4071284669ProcessInjector::InjectProcessprocess |culauncher.exe| missing h
11:01:51.8511284669ProcessInjector::InjectProcessprocess |culauncher.exe| missing h
11:02:59.4541284669ProcessInjector::InjectProcessprocess |culauncher.exe| missing h
11:15:45.8521284386ProcessInjector::HandleElevatedProcessFail injection to process [12552] [t: 0 w_t_id: 0]- owobs-ffmpeg-mux.exe (elevated True) 0x0
11:15:45.8521284318ProcessInjector::HandlePendingProccesssFail to inject pending process |12552|: owobs-ffmpeg-mux.exe
11:16:20.1471284669ProcessInjector::InjectProcessprocess |EasyAntiCheat.exe| missing h
11:16:28.3242C5076Common::ProcessExplorer::ProcessTrackerIPCAgent::OnDisconnecteddisconnected to process tracker server
11:16:31.5702BF866ProcessesMonitor::Stopstopping PM...