TimeThreadLineFunctionMessage
18:37:13.2683144361ftw1Loading (pid: 13820)
18:37:13.26820B0146ProcessHardwareRecorder::CommandThreadstarting recorder thread
18:37:13.268314448Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d11.dll) <0X6F490000>6|2|1247871522
18:37:13.269314448Update::DetectEnv (C:\WINDOWS\SYSTEM32\dxgi.dll) <0X71B00000>6|2|1247871522
18:37:13.3223144172DXManager::DetectFound in 0
18:37:13.3233144209Initialize::GetLocation@ 0X4F80|20352
18:37:13.3233144209Initialize::GetLocation@ 0X69640|431680
18:37:13.3233144209Initialize::GetLocation@ 0X206F0|132848
18:37:13.3233144209Initialize::GetLocation@ 0X1DE0|7648
18:37:13.3233144111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X6F490000 <> 0X71B00000
18:37:13.3233144209Initialize::GetLocation@ 0XFDAB8860|-39090080
18:37:13.3233144111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X6F490000 <> 0X71B00000
18:37:13.3233144209Initialize::GetLocation@ 0XFDABDC30|-39068624
18:37:13.3233144111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X6F490000 <> 0X71B00000
18:37:13.3233144209Initialize::GetLocation@ 0XFDABC5F0|-39074320
18:37:13.3233144111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X6F490000 <> 0X71B00000
18:37:13.3233144209Initialize::GetLocation@ 0XFD99A7F0|-40261648
18:37:13.338314448Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d9.dll) <0X69A70000>6|2|1247871522
18:37:13.3913144129DXManager::DetectOK
18:37:13.4173144186DXManager::DetectDone
18:37:13.4183144215VTableHolderD3d9::initd3d offsest [sht]: 0x4060 , 0x53c0
18:37:13.4183144209Initialize::GetLocation@ 0X41060|266336
18:37:13.4183144209Initialize::GetLocation@ 0X33320|209696
18:37:13.4183144209Initialize::GetLocation@ 0X3CB90|248720
18:37:13.4183144209Initialize::GetLocation@ 0XB75B0|751024
18:37:13.4183144209Initialize::GetLocation@ 0XB7100|749824
18:37:13.4183144209Initialize::GetLocation@ 0XA1F0|41456
18:37:13.4183144209Initialize::GetLocation@ 0XB71A0|749984
18:37:13.4183144209Initialize::GetLocation@ 0X1ABB0|109488
18:37:13.4183144209Initialize::GetLocation@ 0X1D600|120320
18:37:13.4183144209Initialize::GetLocation@ 0X25C30|154672
18:37:13.4183144209Initialize::GetLocation@ 0X113820|1128480
18:37:13.4183144209Initialize::GetLocation@ 0X1132E0|1127136
18:37:13.4183144209Initialize::GetLocation@ 0X1AAA0|109216
18:37:13.4183144209Initialize::GetLocation@ 0X1A9B0|108976
18:37:13.4183144209Initialize::GetLocation@ 0XCB80|52096
18:37:13.4183144209Initialize::GetLocation@ 0X47F90|294800
18:37:13.4183144209Initialize::GetLocation@ 0X9D60|40288
18:37:13.4183144209Initialize::GetLocation@ 0XCE7A0|845728
18:37:13.4183144209Initialize::GetLocation@ 0XCEE70|847472
18:37:13.4183144209Initialize::GetLocation@ 0X9D60|40288
18:37:13.4183144209Initialize::GetLocation@ 0XCF960|850272
18:37:13.4183144209Initialize::GetLocation@ 0XCFFC0|851904
18:37:13.426314448Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput.dll) <0X14290000>6|2|1247870977
18:37:13.432314483VTableHolderDInput::initm_pDIW->CreateDevice - succeded.
18:37:13.4323144209Initialize::GetLocation@ 0X4040|16448
18:37:13.4323144209Initialize::GetLocation@ 0X6410|25616
18:37:13.4323144209Initialize::GetLocation@ 0X65C0|26048
18:37:13.434314448Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput8.dll) <0X11BB0000>6|2|1247870977
18:37:13.439314493VTableHolderDInput8::initm_pDI8W->CreateDevice - succeded.
18:37:13.4393144110VTableHolderDInput8::initm_pDI8A->CreateDevice - succeded.
18:37:13.4393144209Initialize::GetLocation@ 0XA5D0|42448
18:37:13.4393144209Initialize::GetLocation@ 0XD4D0|54480
18:37:13.4393144209Initialize::GetLocation@ 0XD290|53904
18:37:13.4913144225InterProcessElement::openInterProcess Overwolf_SHARED_MEMORY_2_2_81_2_13820 opened succesfuly
18:37:13.491314472HookFunctionsTableInitializer::SetHookFunctionsDataD3D9 Sht offsets 0x4060 , 0x53c0
18:37:13.4913144256InterProcessElement::closeInterProcess Overwolf_SHARED_MEMORY_2_2_81_2_13820 close 2147483647 bytes
18:37:13.4913144297InjectOWExplorerExplorer file name [C:\Program Files (x86)\Overwolf\0.158.1.1\OWExplorer.dll]
18:37:13.4953144385ftw1OWExplorer injected
18:37:13.607392451`anonymous-namespace'::CreateProviderInitialize provider: NET
18:37:13.6073924117libprocess::NetworkTracer::Initializeinit res:0x5 [started:0 active:0 enbaled:0]
18:37:13.607392454`anonymous-namespace'::CreateProviderFail to initlized provider: NET
18:37:13.607392451`anonymous-namespace'::CreateProviderInitialize provider: GPU
18:37:13.7442DD0421ProcessInjector::DoElevetedInjectionFailed to inject process [13532] 0x57
18:37:13.7442DD0377ProcessInjector::HandleElevatedProcessFail injection to process (will retry again in 5 ses) [13532] [t: 3048 w_t_id: 3048]- SetThreadAffinityMaskX64.exe (elevated True) 0x57
18:37:14.4942DD0421ProcessInjector::DoElevetedInjectionFailed to inject process [13532] 0x57
18:37:14.4952DD0394ProcessInjector::HandleElevatedProcessFail injection to process [13532] [t: 3048 w_t_id: 3048]- SetThreadAffinityMaskX64.exe (elevated True) 0x57
18:37:14.4952DD0333ProcessInjector::HandlePendingProccesssFail to inject pending process |13532|: SetThreadAffinityMaskX64.exe
18:39:44.5342DD0394ProcessInjector::HandleElevatedProcessFail injection to process [1988] [t: 0 w_t_id: 0]- NVDisplay.Container.exe (elevated True) 0x0
18:39:44.5342DD0333ProcessInjector::HandlePendingProccesssFail to inject pending process |1988|: NVDisplay.Container.exe
18:39:44.5342DD0394ProcessInjector::HandleElevatedProcessFail injection to process [3796] [t: 0 w_t_id: 0]- nvcontainer.exe (elevated True) 0x0
18:39:44.5342DD0333ProcessInjector::HandlePendingProccesssFail to inject pending process |3796|: nvcontainer.exe
18:39:44.5342DD0394ProcessInjector::HandleElevatedProcessFail injection to process [3804] [t: 0 w_t_id: 0]- NvBroadcast.Container.exe (elevated True) 0x0
18:39:44.5342DD0333ProcessInjector::HandlePendingProccesssFail to inject pending process |3804|: NvBroadcast.Container.exe
18:39:44.5342DD0394ProcessInjector::HandleElevatedProcessFail injection to process [3936] [t: 0 w_t_id: 0]- MsMpEng.exe (elevated True) 0x0
18:39:44.5342DD0333ProcessInjector::HandlePendingProccesssFail to inject pending process |3936|: MsMpEng.exe
18:45:28.5742DD0394ProcessInjector::HandleElevatedProcessFail injection to process [15688] [t: 0 w_t_id: 0]- dynamiclinkmanager.exe (elevated True) 0x0
18:45:28.5742DD0333ProcessInjector::HandlePendingProccesssFail to inject pending process |15688|: dynamiclinkmanager.exe
18:45:29.5742DD0394ProcessInjector::HandleElevatedProcessFail injection to process [4104] [t: 0 w_t_id: 0]- TeamProjectsLocalHub.exe (elevated True) 0x0
18:45:29.5742DD0333ProcessInjector::HandlePendingProccesssFail to inject pending process |4104|: TeamProjectsLocalHub.exe
18:45:35.5732DD0394ProcessInjector::HandleElevatedProcessFail injection to process [9552] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x0
18:45:35.5732DD0333ProcessInjector::HandlePendingProccesssFail to inject pending process |9552|: node.exe
18:45:35.5732DD0394ProcessInjector::HandleElevatedProcessFail injection to process [11260] [t: 0 w_t_id: 0]- CCXProcess.exe (elevated True) 0x0
18:45:35.5732DD0333ProcessInjector::HandlePendingProccesssFail to inject pending process |11260|: CCXProcess.exe
19:03:10.7672DD0394ProcessInjector::HandleElevatedProcessFail injection to process [1428] [t: 0 w_t_id: 0]- WhatsApp.exe (elevated True) 0x0
19:03:10.7672DD0333ProcessInjector::HandlePendingProccesssFail to inject pending process |1428|: WhatsApp.exe
19:03:10.7672DD0394ProcessInjector::HandleElevatedProcessFail injection to process [8892] [t: 0 w_t_id: 0]- WhatsApp.exe (elevated True) 0x0
19:03:10.7672DD0333ProcessInjector::HandlePendingProccesssFail to inject pending process |8892|: WhatsApp.exe
19:03:14.7662DD0394ProcessInjector::HandleElevatedProcessFail injection to process [180] [t: 0 w_t_id: 0]- WhatsApp.exe (elevated True) 0x0
19:03:14.7662DD0333ProcessInjector::HandlePendingProccesssFail to inject pending process |180|: WhatsApp.exe
20:07:09.662314466ProcessesMonitor::Stopstopping PM...
20:07:09.6623924119ProcessesMonitor::ProcessEnumerateThreadexit process listener
20:07:15.674314466ProcessesMonitor::Stopstopping PM...