TimeThreadLineFunctionMessage
08:40:49.9304F48365ftw1Loading (pid: 18208)
08:40:49.9313110147ProcessHardwareRecorder::CommandThreadstarting recorder thread
08:40:49.9334F4848Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d11.dll) <0X3D930000>6|2|1203372419
08:40:49.9344F4848Update::DetectEnv (C:\WINDOWS\SYSTEM32\dxgi.dll) <0X40640000>6|2|1203373081
08:40:49.9954F48173DXManager::DetectFound in 0
08:40:49.9954F48209Initialize::GetLocation@ 0X4660|18016
08:40:49.9954F48209Initialize::GetLocation@ 0X661F0|418288
08:40:49.9954F48209Initialize::GetLocation@ 0X19DB0|105904
08:40:49.9954F48209Initialize::GetLocation@ 0X1350|4944
08:40:49.9954F48111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X3D930000 <> 0X40640000
08:40:49.9954F48209Initialize::GetLocation@ 0XFD412E80|-46059904
08:40:49.9954F48111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X3D930000 <> 0X40640000
08:40:49.9954F48209Initialize::GetLocation@ 0XFD417F80|-46039168
08:40:49.9954F48111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X3D930000 <> 0X40640000
08:40:49.9954F48209Initialize::GetLocation@ 0XFD40E620|-46078432
08:40:49.9954F48111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X3D930000 <> 0X40640000
08:40:49.9954F48209Initialize::GetLocation@ 0XFD2FAD10|-47207152
08:40:50.24F4848Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d9.dll) <0X1D7C0000>6|2|1203373142
08:40:50.524F48129DXManager::DetectOK
08:40:50.734F48186DXManager::DetectDone
08:40:50.734F48215VTableHolderD3d9::initd3d offsest [sht]: 0x4060 , 0x53c0
08:40:50.734F48209Initialize::GetLocation@ 0X3AC00|240640
08:40:50.734F48209Initialize::GetLocation@ 0X2C5B0|181680
08:40:50.734F48209Initialize::GetLocation@ 0X36D00|224512
08:40:50.734F48209Initialize::GetLocation@ 0XAE210|713232
08:40:50.734F48209Initialize::GetLocation@ 0XADD60|712032
08:40:50.734F48209Initialize::GetLocation@ 0X5880|22656
08:40:50.734F48209Initialize::GetLocation@ 0XADE00|712192
08:40:50.734F48209Initialize::GetLocation@ 0X20FF0|135152
08:40:50.734F48209Initialize::GetLocation@ 0X1CA60|117344
08:40:50.734F48209Initialize::GetLocation@ 0X1C8E0|116960
08:40:50.734F48209Initialize::GetLocation@ 0X1086D0|1083088
08:40:50.734F48209Initialize::GetLocation@ 0X108180|1081728
08:40:50.734F48209Initialize::GetLocation@ 0X248B0|149680
08:40:50.734F48209Initialize::GetLocation@ 0X247A0|149408
08:40:50.734F48209Initialize::GetLocation@ 0X2C440|181312
08:40:50.734F48209Initialize::GetLocation@ 0X3F3F0|259056
08:40:50.734F48209Initialize::GetLocation@ 0XF3E0|62432
08:40:50.734F48209Initialize::GetLocation@ 0XF4E0|62688
08:40:50.734F48209Initialize::GetLocation@ 0XF5D0|62928
08:40:50.734F48209Initialize::GetLocation@ 0XF3E0|62432
08:40:50.734F48209Initialize::GetLocation@ 0XF280|62080
08:40:50.734F48209Initialize::GetLocation@ 0XF430|62512
08:40:50.914F4848Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput.dll) <0X10430000>6|2|1203372033
08:40:50.1144F4883VTableHolderDInput::initm_pDIW->CreateDevice - succeded.
08:40:50.1144F48209Initialize::GetLocation@ 0X3CC0|15552
08:40:50.1144F48209Initialize::GetLocation@ 0X5FD0|24528
08:40:50.1144F48209Initialize::GetLocation@ 0X6180|24960
08:40:50.1174F4848Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput8.dll) <0X100E0000>6|2|1203372033
08:40:50.1364F4893VTableHolderDInput8::initm_pDI8W->CreateDevice - succeded.
08:40:50.1364F48110VTableHolderDInput8::initm_pDI8A->CreateDevice - succeded.
08:40:50.1374F48209Initialize::GetLocation@ 0X10000|65536
08:40:50.1374F48209Initialize::GetLocation@ 0X12C80|76928
08:40:50.1374F48209Initialize::GetLocation@ 0X12A60|76384
08:40:50.1904F48225InterProcessElement::openInterProcess Overwolf_SHARED_MEMORY_2_2_173_4_18208 opened succesfuly
08:40:50.1904F4872HookFunctionsTableInitializer::SetHookFunctionsDataD3D9 Sht offsets 0x4060 , 0x53c0
08:40:50.1904F48255InterProcessElement::closeInterProcess Overwolf_SHARED_MEMORY_2_2_173_4_18208 close 2147483647 bytes
08:40:50.1904F48301InjectOWExplorerExplorer file name [C:\Program Files (x86)\Overwolf\0.173.0.14\OWExplorer.dll]
08:40:50.2044F48389ftw1OWExplorer injected
08:40:50.2054CA871Common::ProcessExplorer::ProcessTrackerIPCAgent::OnConnectedconnected to process tracker server
08:40:50.8214CA451`anonymous-namespace'::CreateProviderInitialize provider: NET
08:40:50.8224CA4117libprocess::NetworkTracer::Initializeinit res:0x5 [started:0 active:0 enbaled:0]
08:40:50.8224CA454`anonymous-namespace'::CreateProviderFail to initlized provider: NET
08:40:50.8224CA451`anonymous-namespace'::CreateProviderInitialize provider: GPU
08:40:50.8384CD8669ProcessInjector::InjectProcessprocess |fshoster32.exe| missing h
08:40:50.8384CD8669ProcessInjector::InjectProcessprocess |fsatps.exe| missing h
08:40:50.8384CD8669ProcessInjector::InjectProcessprocess |fshoster32.exe| missing h
08:40:50.8384CD8669ProcessInjector::InjectProcessprocess |fsorsp64.exe| missing h
08:40:50.8384CD8669ProcessInjector::InjectProcessprocess |fsulprothoster.exe| missing h
08:40:50.8384CD8669ProcessInjector::InjectProcessprocess |fshoster64.exe| missing h
08:40:50.8384CD8669ProcessInjector::InjectProcessprocess |fshoster64.exe| missing h
08:40:50.8384CD8669ProcessInjector::InjectProcessprocess |MicrosoftSearchInBing.exe| missing h
08:40:50.8384CD8669ProcessInjector::InjectProcessprocess |openvpnserv.exe| missing h
08:40:50.8384CD8669ProcessInjector::InjectProcessprocess |client64.exe| missing h
08:40:50.8384CD8669ProcessInjector::InjectProcessprocess |mysqld.exe| missing h
08:40:50.8384CD8669ProcessInjector::InjectProcessprocess |com.docker.service| missing h
08:40:50.8384CD8669ProcessInjector::InjectProcessprocess |fsatpl.exe| missing h
08:40:50.8384CD8669ProcessInjector::InjectProcessprocess |mysqld.exe| missing h
08:40:50.8384CD8669ProcessInjector::InjectProcessprocess |fsatpn.exe| missing h
08:40:50.8384CD8669ProcessInjector::InjectProcessprocess |fsdevcon.exe| missing h
08:40:50.8394CD8669ProcessInjector::InjectProcessprocess |GoogleCrashHandler.exe| missing h
08:40:50.8394CD8669ProcessInjector::InjectProcessprocess |GoogleCrashHandler64.exe| missing h
08:41:12.3404CD8669ProcessInjector::InjectProcessprocess |Microsoft.Management.Services.IntuneWindowsAgent.exe| missing h
08:41:12.3404CD8669ProcessInjector::InjectProcessprocess |MBAMAgent.exe| missing h
08:41:15.3664CD8669ProcessInjector::InjectProcessprocess |FsPisces.exe| missing h
08:41:20.4084CD8669ProcessInjector::InjectProcessprocess |policyHost.exe| missing h
08:41:55.9844CA876Common::ProcessExplorer::ProcessTrackerIPCAgent::OnDisconnecteddisconnected to process tracker server
08:41:56.3384F4866ProcessesMonitor::Stopstopping PM...
08:41:56.3384CA4119ProcessesMonitor::ProcessEnumerateThreadexit process listener
08:41:56.3394F48527ProcessInjector::Unhookunhook running process
08:42:02.3514F4866ProcessesMonitor::Stopstopping PM...