TimeThreadLineFunctionMessage
08:45:00.4554D80365ftw1Loading (pid: 876)
08:45:00.4554DEC147ProcessHardwareRecorder::CommandThreadstarting recorder thread
08:45:00.4574D8048Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d11.dll) <0XDA190000>6|2|1203372419
08:45:00.4574D8048Update::DetectEnv (C:\WINDOWS\SYSTEM32\dxgi.dll) <0XDCC00000>6|2|1203373081
08:45:00.9654D80173DXManager::DetectFound in 0
08:45:00.9654D80209Initialize::GetLocation@ 0X4660|18016
08:45:00.9654D80209Initialize::GetLocation@ 0X661F0|418288
08:45:00.9654D80209Initialize::GetLocation@ 0X19DB0|105904
08:45:00.9654D80209Initialize::GetLocation@ 0X1350|4944
08:45:00.9654D80111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XDA190000 <> 0XDCC00000
08:45:00.9654D80209Initialize::GetLocation@ 0XFD6B2E80|-43307392
08:45:00.9654D80111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XDA190000 <> 0XDCC00000
08:45:00.9654D80209Initialize::GetLocation@ 0XFD6B7F80|-43286656
08:45:00.9654D80111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XDA190000 <> 0XDCC00000
08:45:00.9654D80209Initialize::GetLocation@ 0XFD6AE620|-43325920
08:45:00.9654D80111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XDA190000 <> 0XDCC00000
08:45:00.9654D80209Initialize::GetLocation@ 0XFD59AD10|-44454640
08:45:00.9724D8048Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d9.dll) <0XBD1C0000>6|2|1203373142
08:45:01.674D80129DXManager::DetectOK
08:45:01.834D80186DXManager::DetectDone
08:45:01.834D80215VTableHolderD3d9::initd3d offsest [sht]: 0x4060 , 0x53c0
08:45:01.844D80209Initialize::GetLocation@ 0X3AC00|240640
08:45:01.844D80209Initialize::GetLocation@ 0X2C5B0|181680
08:45:01.844D80209Initialize::GetLocation@ 0X36D00|224512
08:45:01.844D80209Initialize::GetLocation@ 0XAE210|713232
08:45:01.844D80209Initialize::GetLocation@ 0XADD60|712032
08:45:01.844D80209Initialize::GetLocation@ 0X5880|22656
08:45:01.844D80209Initialize::GetLocation@ 0XADE00|712192
08:45:01.844D80209Initialize::GetLocation@ 0X20FF0|135152
08:45:01.844D80209Initialize::GetLocation@ 0X1CA60|117344
08:45:01.844D80209Initialize::GetLocation@ 0X1C8E0|116960
08:45:01.844D80209Initialize::GetLocation@ 0X1086D0|1083088
08:45:01.844D80209Initialize::GetLocation@ 0X108180|1081728
08:45:01.844D80209Initialize::GetLocation@ 0X248B0|149680
08:45:01.844D80209Initialize::GetLocation@ 0X247A0|149408
08:45:01.844D80209Initialize::GetLocation@ 0X2C440|181312
08:45:01.844D80209Initialize::GetLocation@ 0X3F3F0|259056
08:45:01.844D80209Initialize::GetLocation@ 0XF3E0|62432
08:45:01.844D80209Initialize::GetLocation@ 0XF4E0|62688
08:45:01.844D80209Initialize::GetLocation@ 0XF5D0|62928
08:45:01.844D80209Initialize::GetLocation@ 0XF3E0|62432
08:45:01.844D80209Initialize::GetLocation@ 0XF280|62080
08:45:01.844D80209Initialize::GetLocation@ 0XF430|62512
08:45:01.3474D8048Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput.dll) <0X793F0000>6|2|1203372033
08:45:01.3764D8083VTableHolderDInput::initm_pDIW->CreateDevice - succeded.
08:45:01.3764D80209Initialize::GetLocation@ 0X3CC0|15552
08:45:01.3764D80209Initialize::GetLocation@ 0X5FD0|24528
08:45:01.3764D80209Initialize::GetLocation@ 0X6180|24960
08:45:01.3804D8048Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput8.dll) <0X75B70000>6|2|1203372033
08:45:01.3994D8093VTableHolderDInput8::initm_pDI8W->CreateDevice - succeded.
08:45:01.3994D80110VTableHolderDInput8::initm_pDI8A->CreateDevice - succeded.
08:45:01.3994D80209Initialize::GetLocation@ 0X10000|65536
08:45:01.3994D80209Initialize::GetLocation@ 0X12C80|76928
08:45:01.3994D80209Initialize::GetLocation@ 0X12A60|76384
08:45:01.4514D80225InterProcessElement::openInterProcess Overwolf_SHARED_MEMORY_2_2_173_4_876 opened succesfuly
08:45:01.4514D8072HookFunctionsTableInitializer::SetHookFunctionsDataD3D9 Sht offsets 0x4060 , 0x53c0
08:45:01.4514D80255InterProcessElement::closeInterProcess Overwolf_SHARED_MEMORY_2_2_173_4_876 close 2147483647 bytes
08:45:01.4514D80301InjectOWExplorerExplorer file name [C:\Program Files (x86)\Overwolf\0.173.0.14\OWExplorer.dll]
08:45:01.4634D80389ftw1OWExplorer injected
08:45:01.4634D1C71Common::ProcessExplorer::ProcessTrackerIPCAgent::OnConnectedconnected to process tracker server
08:45:02.0311C51`anonymous-namespace'::CreateProviderInitialize provider: NET
08:45:02.0311C117libprocess::NetworkTracer::Initializeinit res:0x5 [started:0 active:0 enbaled:0]
08:45:02.0311C54`anonymous-namespace'::CreateProviderFail to initlized provider: NET
08:45:02.0311C51`anonymous-namespace'::CreateProviderInitialize provider: GPU
08:45:02.164D20669ProcessInjector::InjectProcessprocess |fsatps.exe| missing h
08:45:02.164D20669ProcessInjector::InjectProcessprocess |fshoster32.exe| missing h
08:45:02.164D20669ProcessInjector::InjectProcessprocess |fshoster32.exe| missing h
08:45:02.164D20669ProcessInjector::InjectProcessprocess |openvpnserv.exe| missing h
08:45:02.164D20669ProcessInjector::InjectProcessprocess |fsulprothoster.exe| missing h
08:45:02.164D20669ProcessInjector::InjectProcessprocess |fsorsp64.exe| missing h
08:45:02.164D20669ProcessInjector::InjectProcessprocess |MicrosoftSearchInBing.exe| missing h
08:45:02.164D20669ProcessInjector::InjectProcessprocess |fshoster64.exe| missing h
08:45:02.164D20669ProcessInjector::InjectProcessprocess |fshoster64.exe| missing h
08:45:02.164D20669ProcessInjector::InjectProcessprocess |client64.exe| missing h
08:45:02.164D20669ProcessInjector::InjectProcessprocess |mysqld.exe| missing h
08:45:02.164D20669ProcessInjector::InjectProcessprocess |com.docker.service| missing h
08:45:02.164D20669ProcessInjector::InjectProcessprocess |fsatpl.exe| missing h
08:45:02.164D20669ProcessInjector::InjectProcessprocess |fsatpn.exe| missing h
08:45:02.164D20669ProcessInjector::InjectProcessprocess |mysqld.exe| missing h
08:45:02.164D20669ProcessInjector::InjectProcessprocess |fsdevcon.exe| missing h
08:45:02.164D20669ProcessInjector::InjectProcessprocess |HPFirmwareInstaller.exe| missing h
08:45:02.164D20669ProcessInjector::InjectProcessprocess |GoogleCrashHandler.exe| missing h
08:45:02.164D20669ProcessInjector::InjectProcessprocess |GoogleCrashHandler64.exe| missing h
08:45:09.4714D20669ProcessInjector::InjectProcessprocess |FsPisces.exe| missing h
08:46:02.394D1C76Common::ProcessExplorer::ProcessTrackerIPCAgent::OnDisconnecteddisconnected to process tracker server
08:46:02.3854D8066ProcessesMonitor::Stopstopping PM...
08:46:02.385311C119ProcessesMonitor::ProcessEnumerateThreadexit process listener
08:46:02.3854D80527ProcessInjector::Unhookunhook running process
08:46:08.3924D8066ProcessesMonitor::Stopstopping PM...