TimeThreadLineFunctionMessage
09:15:42.34390C361ftw1Loading (pid: 16216)
09:15:42.3433CEC146ProcessHardwareRecorder::CommandThreadstarting recorder thread
09:15:42.34490C48Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d11.dll) <0XAB830000>6|2|1247871522
09:15:42.34490C48Update::DetectEnv (C:\WINDOWS\SYSTEM32\dxgi.dll) <0XADFF0000>6|2|1247871522
09:15:42.39190C172DXManager::DetectFound in 0
09:15:42.39190C209Initialize::GetLocation@ 0X4F80|20352
09:15:42.39190C209Initialize::GetLocation@ 0X69640|431680
09:15:42.39190C209Initialize::GetLocation@ 0X206F0|132848
09:15:42.39190C209Initialize::GetLocation@ 0X1DE0|7648
09:15:42.39190C111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XAB830000 <> 0XADFF0000
09:15:42.39190C209Initialize::GetLocation@ 0XFD968860|-40466336
09:15:42.39190C111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XAB830000 <> 0XADFF0000
09:15:42.39190C209Initialize::GetLocation@ 0XFD96DC30|-40444880
09:15:42.39190C111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XAB830000 <> 0XADFF0000
09:15:42.39190C209Initialize::GetLocation@ 0XFD96C5F0|-40450576
09:15:42.39190C111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XAB830000 <> 0XADFF0000
09:15:42.39190C209Initialize::GetLocation@ 0XFD84A7F0|-41637904
09:15:42.39990C48Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d9.dll) <0X8CEE0000>6|2|1247871522
09:15:42.42990C129DXManager::DetectOK
09:15:42.43790C186DXManager::DetectDone
09:15:42.43790C215VTableHolderD3d9::initd3d offsest [sht]: 0x4060 , 0x53c0
09:15:42.43790C209Initialize::GetLocation@ 0X41060|266336
09:15:42.43790C209Initialize::GetLocation@ 0X33320|209696
09:15:42.43790C209Initialize::GetLocation@ 0X3CB90|248720
09:15:42.43790C209Initialize::GetLocation@ 0XB75B0|751024
09:15:42.43790C209Initialize::GetLocation@ 0XB7100|749824
09:15:42.43790C209Initialize::GetLocation@ 0XA1F0|41456
09:15:42.43790C209Initialize::GetLocation@ 0XB71A0|749984
09:15:42.43790C209Initialize::GetLocation@ 0X1ABB0|109488
09:15:42.43790C209Initialize::GetLocation@ 0X1D600|120320
09:15:42.43790C209Initialize::GetLocation@ 0X25C30|154672
09:15:42.43790C209Initialize::GetLocation@ 0X113820|1128480
09:15:42.43790C209Initialize::GetLocation@ 0X1132E0|1127136
09:15:42.43790C209Initialize::GetLocation@ 0X1AAA0|109216
09:15:42.43790C209Initialize::GetLocation@ 0X1A9B0|108976
09:15:42.43790C209Initialize::GetLocation@ 0XCB80|52096
09:15:42.43790C209Initialize::GetLocation@ 0X47F90|294800
09:15:42.43790C209Initialize::GetLocation@ 0X9D60|40288
09:15:42.43790C209Initialize::GetLocation@ 0XCE7A0|845728
09:15:42.43790C209Initialize::GetLocation@ 0XCEE70|847472
09:15:42.43790C209Initialize::GetLocation@ 0X9D60|40288
09:15:42.43790C209Initialize::GetLocation@ 0XCF960|850272
09:15:42.43790C209Initialize::GetLocation@ 0XCFFC0|851904
09:15:42.44390C48Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput.dll) <0XA6AC0000>6|2|1247870977
09:15:42.45490C83VTableHolderDInput::initm_pDIW->CreateDevice - succeded.
09:15:42.45490C209Initialize::GetLocation@ 0X4040|16448
09:15:42.45490C209Initialize::GetLocation@ 0X6410|25616
09:15:42.45490C209Initialize::GetLocation@ 0X65C0|26048
09:15:42.45590C48Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput8.dll) <0X87F60000>6|2|1247870977
09:15:42.46290C93VTableHolderDInput8::initm_pDI8W->CreateDevice - succeded.
09:15:42.46390C110VTableHolderDInput8::initm_pDI8A->CreateDevice - succeded.
09:15:42.46390C209Initialize::GetLocation@ 0XA5D0|42448
09:15:42.46390C209Initialize::GetLocation@ 0XD4D0|54480
09:15:42.46390C209Initialize::GetLocation@ 0XD290|53904
09:15:42.52390C225InterProcessElement::openInterProcess Overwolf_SHARED_MEMORY_2_2_80_3_16216 opened succesfuly
09:15:42.52390C72HookFunctionsTableInitializer::SetHookFunctionsDataD3D9 Sht offsets 0x4060 , 0x53c0
09:15:42.52390C256InterProcessElement::closeInterProcess Overwolf_SHARED_MEMORY_2_2_80_3_16216 close 2147483647 bytes
09:15:42.52390C297InjectOWExplorerExplorer file name [C:\Program Files (x86)\Overwolf\0.157.0.16\OWExplorer.dll]
09:15:42.53090C385ftw1OWExplorer injected
09:15:42.7053E2051`anonymous-namespace'::CreateProviderInitialize provider: NET
09:15:42.7053E20117libprocess::NetworkTracer::Initializeinit res:0x5 [started:0 active:0 enbaled:0]
09:15:42.7053E2054`anonymous-namespace'::CreateProviderFail to initlized provider: NET
09:15:42.7053E2051`anonymous-namespace'::CreateProviderInitialize provider: GPU
09:18:12.88310CC394ProcessInjector::HandleElevatedProcessFail injection to process [3860] [t: 0 w_t_id: 0]- MsMpEng.exe (elevated True) 0x0
09:18:12.88310CC333ProcessInjector::HandlePendingProccesssFail to inject pending process |3860|: MsMpEng.exe
09:18:13.89010CC394ProcessInjector::HandleElevatedProcessFail injection to process [12404] [t: 0 w_t_id: 0]- lghub.exe (elevated True) 0x0
09:18:13.89010CC333ProcessInjector::HandlePendingProccesssFail to inject pending process |12404|: lghub.exe
09:18:13.89010CC394ProcessInjector::HandleElevatedProcessFail injection to process [12484] [t: 0 w_t_id: 0]- lghub.exe (elevated True) 0x0
09:18:13.89010CC333ProcessInjector::HandlePendingProccesssFail to inject pending process |12484|: lghub.exe
09:19:08.26810CC394ProcessInjector::HandleElevatedProcessFail injection to process [19808] [t: 0 w_t_id: 0]- DTShellHlp.exe (elevated True) 0x0
09:19:08.26810CC333ProcessInjector::HandlePendingProccesssFail to inject pending process |19808|: DTShellHlp.exe
10:01:14.85310CC394ProcessInjector::HandleElevatedProcessFail injection to process [2016] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x5
10:01:14.85410CC333ProcessInjector::HandlePendingProccesssFail to inject pending process |2016|: Code.exe
10:01:14.85410CC394ProcessInjector::HandleElevatedProcessFail injection to process [11304] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x5
10:01:14.85410CC333ProcessInjector::HandlePendingProccesssFail to inject pending process |11304|: Code.exe
10:01:14.85410CC394ProcessInjector::HandleElevatedProcessFail injection to process [17308] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x5
10:01:14.85410CC333ProcessInjector::HandlePendingProccesssFail to inject pending process |17308|: Code.exe
10:01:16.85510CC394ProcessInjector::HandleElevatedProcessFail injection to process [10548] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x5
10:01:16.85510CC333ProcessInjector::HandlePendingProccesssFail to inject pending process |10548|: Code.exe
10:01:17.85710CC394ProcessInjector::HandleElevatedProcessFail injection to process [14752] [t: 0 w_t_id: 0]- bash.exe (elevated True) 0x5
10:01:17.85710CC333ProcessInjector::HandlePendingProccesssFail to inject pending process |14752|: bash.exe
10:01:17.85710CC394ProcessInjector::HandleElevatedProcessFail injection to process [18100] [t: 0 w_t_id: 0]- bash.exe (elevated True) 0x5
10:01:17.85710CC333ProcessInjector::HandlePendingProccesssFail to inject pending process |18100|: bash.exe
10:01:17.85710CC394ProcessInjector::HandleElevatedProcessFail injection to process [21472] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x5
10:01:17.85710CC333ProcessInjector::HandlePendingProccesssFail to inject pending process |21472|: Code.exe
10:01:20.87710CC394ProcessInjector::HandleElevatedProcessFail injection to process [6352] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x5
10:01:20.87710CC333ProcessInjector::HandlePendingProccesssFail to inject pending process |6352|: Code.exe
10:01:20.87710CC394ProcessInjector::HandleElevatedProcessFail injection to process [7992] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x5
10:01:20.87710CC333ProcessInjector::HandlePendingProccesssFail to inject pending process |7992|: Code.exe
10:01:20.87710CC394ProcessInjector::HandleElevatedProcessFail injection to process [8772] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x5
10:01:20.87710CC333ProcessInjector::HandlePendingProccesssFail to inject pending process |8772|: Code.exe
10:01:20.87710CC394ProcessInjector::HandleElevatedProcessFail injection to process [11768] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x5
10:01:20.87710CC333ProcessInjector::HandlePendingProccesssFail to inject pending process |11768|: Code.exe
10:01:20.87710CC394ProcessInjector::HandleElevatedProcessFail injection to process [14012] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x5
10:01:20.87810CC333ProcessInjector::HandlePendingProccesssFail to inject pending process |14012|: Code.exe
01:30:52.94390C66ProcessesMonitor::Stopstopping PM...
01:30:52.9433E20119ProcessesMonitor::ProcessEnumerateThreadexit process listener