TimeThreadLineFunctionMessage
21:28:30.4243390361ftw1Loading (pid: 18716)
21:28:30.4245C84146ProcessHardwareRecorder::CommandThreadstarting recorder thread
21:28:30.425339048Update::DetectEnv (C:\Windows\SYSTEM32\d3d11.dll) <0XBC650000>6|2|1247870977
21:28:30.425339048Update::DetectEnv (C:\Windows\SYSTEM32\dxgi.dll) <0XC2BE0000>6|2|1247870977
21:28:30.4733390172DXManager::DetectFound in 0
21:28:30.4733390209Initialize::GetLocation@ 0X4F80|20352
21:28:30.4733390209Initialize::GetLocation@ 0X69160|430432
21:28:30.4733390209Initialize::GetLocation@ 0X20410|132112
21:28:30.4733390209Initialize::GetLocation@ 0X1DE0|7648
21:28:30.4733390111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0XBC650000 <> 0XC2BE0000
21:28:30.4733390209Initialize::GetLocation@ 0XF9B98850|-105281456
21:28:30.4733390111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0XBC650000 <> 0XC2BE0000
21:28:30.4733390209Initialize::GetLocation@ 0XF9B9DE80|-105259392
21:28:30.4733390111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0XBC650000 <> 0XC2BE0000
21:28:30.4733390209Initialize::GetLocation@ 0XF9B9C5E0|-105265696
21:28:30.4733390111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0XBC650000 <> 0XC2BE0000
21:28:30.4733390209Initialize::GetLocation@ 0XF9A7A7F0|-106453008
21:28:30.479339048Update::DetectEnv (C:\Windows\SYSTEM32\d3d9.dll) <0XB9FF0000>6|2|1247870977
21:28:30.5103390129DXManager::DetectOK
21:28:30.5293390186DXManager::DetectDone
21:28:30.5293390215VTableHolderD3d9::initd3d offsest [sht]: 0x4060 , 0x53c0
21:28:30.5293390209Initialize::GetLocation@ 0X3FC10|261136
21:28:30.5293390209Initialize::GetLocation@ 0X33840|211008
21:28:30.5293390209Initialize::GetLocation@ 0X3BFA0|245664
21:28:30.5293390209Initialize::GetLocation@ 0XB70E0|749792
21:28:30.5293390209Initialize::GetLocation@ 0XB6C30|748592
21:28:30.5293390209Initialize::GetLocation@ 0XAF40|44864
21:28:30.5293390209Initialize::GetLocation@ 0XB6CD0|748752
21:28:30.5293390209Initialize::GetLocation@ 0X20C40|134208
21:28:30.5293390209Initialize::GetLocation@ 0X16A10|92688
21:28:30.5293390209Initialize::GetLocation@ 0X2D530|185648
21:28:30.5293390209Initialize::GetLocation@ 0X113350|1127248
21:28:30.5293390209Initialize::GetLocation@ 0X112E10|1125904
21:28:30.5293390209Initialize::GetLocation@ 0X20B30|133936
21:28:30.5293390209Initialize::GetLocation@ 0X20A40|133696
21:28:30.5293390209Initialize::GetLocation@ 0XD8D0|55504
21:28:30.5293390209Initialize::GetLocation@ 0X466B0|288432
21:28:30.5293390209Initialize::GetLocation@ 0XAAB0|43696
21:28:30.5293390209Initialize::GetLocation@ 0XCE2D0|844496
21:28:30.5293390209Initialize::GetLocation@ 0XCE9A0|846240
21:28:30.5293390209Initialize::GetLocation@ 0XAAB0|43696
21:28:30.5293390209Initialize::GetLocation@ 0XCF490|849040
21:28:30.5293390209Initialize::GetLocation@ 0XCFAF0|850672
21:28:30.538339048Update::DetectEnv (C:\Windows\SYSTEM32\dinput.dll) <0X6B100000>6|2|1247870977
21:28:30.557339083VTableHolderDInput::initm_pDIW->CreateDevice - succeded.
21:28:30.5573390209Initialize::GetLocation@ 0X4040|16448
21:28:30.5573390209Initialize::GetLocation@ 0X6410|25616
21:28:30.5573390209Initialize::GetLocation@ 0X65C0|26048
21:28:30.558339048Update::DetectEnv (C:\Windows\SYSTEM32\dinput8.dll) <0X59A30000>6|2|1247870977
21:28:30.572339093VTableHolderDInput8::initm_pDI8W->CreateDevice - succeded.
21:28:30.5723390110VTableHolderDInput8::initm_pDI8A->CreateDevice - succeded.
21:28:30.5723390209Initialize::GetLocation@ 0XA5D0|42448
21:28:30.5723390209Initialize::GetLocation@ 0XD4D0|54480
21:28:30.5723390209Initialize::GetLocation@ 0XD290|53904
21:28:30.6333390225InterProcessElement::openInterProcess Overwolf_SHARED_MEMORY_2_2_78_14_18716 opened succesfuly
21:28:30.633339072HookFunctionsTableInitializer::SetHookFunctionsDataD3D9 Sht offsets 0x4060 , 0x53c0
21:28:30.6333390256InterProcessElement::closeInterProcess Overwolf_SHARED_MEMORY_2_2_78_14_18716 close 2147483647 bytes
21:28:30.6333390297InjectOWExplorerExplorer file name [C:\Program Files (x86)\Overwolf\0.149.2.30\OWExplorer.dll]
21:28:30.6413390385ftw1OWExplorer injected
21:28:31.525A6851`anonymous-namespace'::CreateProviderInitialize provider: NET
21:28:31.525A68117libprocess::NetworkTracer::Initializeinit res:0x5 [started:0 active:0 enbaled:0]
21:28:31.525A6854`anonymous-namespace'::CreateProviderFail to initlized provider: NET
21:28:31.525A6851`anonymous-namespace'::CreateProviderInitialize provider: GPU
21:31:01.7261F1C352ProcessInjector::HandleElevatedProcessFail injection to process [2692] [t: 0 w_t_id: 0]- NVDisplay.Container.exe (elevated True) 0x0
21:31:01.7261F1C291ProcessInjector::HandlePendingProccesssFail to inject pending process |2692|: NVDisplay.Container.exe
21:31:01.7261F1C352ProcessInjector::HandleElevatedProcessFail injection to process [5112] [t: 0 w_t_id: 0]- nvcontainer.exe (elevated True) 0x0
21:31:01.7261F1C291ProcessInjector::HandlePendingProccesssFail to inject pending process |5112|: nvcontainer.exe
21:31:01.7261F1C352ProcessInjector::HandleElevatedProcessFail injection to process [5484] [t: 0 w_t_id: 0]- MsMpEng.exe (elevated True) 0x0
21:31:01.7261F1C291ProcessInjector::HandlePendingProccesssFail to inject pending process |5484|: MsMpEng.exe
21:31:01.7261F1C352ProcessInjector::HandleElevatedProcessFail injection to process [9932] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
21:31:01.7261F1C291ProcessInjector::HandlePendingProccesssFail to inject pending process |9932|: firefox.exe
21:31:01.7261F1C352ProcessInjector::HandleElevatedProcessFail injection to process [14236] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
21:31:01.7261F1C291ProcessInjector::HandlePendingProccesssFail to inject pending process |14236|: firefox.exe
21:31:01.7261F1C352ProcessInjector::HandleElevatedProcessFail injection to process [19032] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
21:31:01.7261F1C291ProcessInjector::HandlePendingProccesssFail to inject pending process |19032|: firefox.exe
21:31:01.7261F1C352ProcessInjector::HandleElevatedProcessFail injection to process [19880] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
21:31:01.7261F1C291ProcessInjector::HandlePendingProccesssFail to inject pending process |19880|: firefox.exe
21:31:01.7261F1C352ProcessInjector::HandleElevatedProcessFail injection to process [20124] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
21:31:01.7261F1C291ProcessInjector::HandlePendingProccesssFail to inject pending process |20124|: firefox.exe
21:31:01.7261F1C352ProcessInjector::HandleElevatedProcessFail injection to process [20492] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
21:31:01.7261F1C291ProcessInjector::HandlePendingProccesssFail to inject pending process |20492|: firefox.exe
21:31:01.7261F1C352ProcessInjector::HandleElevatedProcessFail injection to process [22276] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
21:31:01.7261F1C291ProcessInjector::HandlePendingProccesssFail to inject pending process |22276|: firefox.exe
21:31:01.7261F1C352ProcessInjector::HandleElevatedProcessFail injection to process [24896] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x0
21:31:01.7261F1C291ProcessInjector::HandlePendingProccesssFail to inject pending process |24896|: node.exe
21:31:01.7261F1C352ProcessInjector::HandleElevatedProcessFail injection to process [26104] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
21:31:01.7261F1C291ProcessInjector::HandlePendingProccesssFail to inject pending process |26104|: firefox.exe
21:31:02.7411F1C352ProcessInjector::HandleElevatedProcessFail injection to process [7220] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
21:31:02.7411F1C291ProcessInjector::HandlePendingProccesssFail to inject pending process |7220|: Code.exe
21:31:02.7411F1C352ProcessInjector::HandleElevatedProcessFail injection to process [9168] [t: 0 w_t_id: 0]- openvpn.exe (elevated True) 0x0
21:31:02.7411F1C291ProcessInjector::HandlePendingProccesssFail to inject pending process |9168|: openvpn.exe
21:31:02.7411F1C352ProcessInjector::HandleElevatedProcessFail injection to process [9276] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
21:31:02.7411F1C291ProcessInjector::HandlePendingProccesssFail to inject pending process |9276|: Code.exe
21:31:02.7411F1C352ProcessInjector::HandleElevatedProcessFail injection to process [11336] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
21:31:02.7411F1C291ProcessInjector::HandlePendingProccesssFail to inject pending process |11336|: firefox.exe
21:31:02.7411F1C352ProcessInjector::HandleElevatedProcessFail injection to process [14740] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
21:31:02.7411F1C291ProcessInjector::HandlePendingProccesssFail to inject pending process |14740|: Code.exe
21:31:02.7411F1C352ProcessInjector::HandleElevatedProcessFail injection to process [18308] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
21:31:02.7411F1C291ProcessInjector::HandlePendingProccesssFail to inject pending process |18308|: Code.exe
21:31:02.7411F1C352ProcessInjector::HandleElevatedProcessFail injection to process [24580] [t: 0 w_t_id: 0]- Code.exe (elevated True) 0x0
21:31:02.7411F1C291ProcessInjector::HandlePendingProccesssFail to inject pending process |24580|: Code.exe
21:34:03.4441F1C352ProcessInjector::HandleElevatedProcessFail injection to process [4440] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
21:34:03.4441F1C291ProcessInjector::HandlePendingProccesssFail to inject pending process |4440|: firefox.exe
21:34:04.4241F1C352ProcessInjector::HandleElevatedProcessFail injection to process [21576] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
21:34:04.4241F1C291ProcessInjector::HandlePendingProccesssFail to inject pending process |21576|: firefox.exe
21:48:56.8461F1C352ProcessInjector::HandleElevatedProcessFail injection to process [3564] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x1f
21:48:56.8461F1C291ProcessInjector::HandlePendingProccesssFail to inject pending process |3564|: firefox.exe
22:08:05.1881F1C352ProcessInjector::HandleElevatedProcessFail injection to process [25968] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x578
22:08:05.1881F1C291ProcessInjector::HandlePendingProccesssFail to inject pending process |25968|: firefox.exe
22:09:34.130339066ProcessesMonitor::Stopstopping PM...
22:09:34.1305A68119ProcessesMonitor::ProcessEnumerateThreadexit process listener