TimeThreadLineFunctionMessage
14:41:35.9411854146ProcessHardwareRecorder::CommandThreadstarting recorder thread
14:41:35.9411240361ftw1Loading (pid: 11628)
14:41:35.942124048Update::DetectEnv (C:\Windows\SYSTEM32\d3d11.dll) <0X2BD00000>6|2|1164117043
14:41:35.942124048Update::DetectEnv (C:\Windows\SYSTEM32\dxgi.dll) <0X2DAA0000>6|2|1164117043
14:41:36.101240172DXManager::DetectFound in 0
14:41:36.101240209Initialize::GetLocation@ 0X4910|18704
14:41:36.101240209Initialize::GetLocation@ 0X632A0|406176
14:41:36.101240209Initialize::GetLocation@ 0X1EF30|126768
14:41:36.101240209Initialize::GetLocation@ 0X1D70|7536
14:41:36.101240111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0X2BD00000 <> 0X2DAA0000
14:41:36.101240209Initialize::GetLocation@ 0XFE38AB00|-29840640
14:41:36.101240111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0X2BD00000 <> 0X2DAA0000
14:41:36.101240209Initialize::GetLocation@ 0XFE391400|-29813760
14:41:36.101240111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0X2BD00000 <> 0X2DAA0000
14:41:36.101240209Initialize::GetLocation@ 0XFE386DE0|-29856288
14:41:36.101240111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0X2BD00000 <> 0X2DAA0000
14:41:36.101240209Initialize::GetLocation@ 0XFE26E9B0|-31004240
14:41:36.23124048Update::DetectEnv (C:\Windows\SYSTEM32\d3d9.dll) <0X23660000>6|2|1164117043
14:41:36.961240129DXManager::DetectOK
14:41:36.1311240186DXManager::DetectDone
14:41:36.1311240215VTableHolderD3d9::initd3d offsest [sht]: 0x4060 , 0x53c0
14:41:36.1321240209Initialize::GetLocation@ 0X3A0A0|237728
14:41:36.1321240209Initialize::GetLocation@ 0X2DE30|187952
14:41:36.1321240209Initialize::GetLocation@ 0X35CA0|220320
14:41:36.1321240209Initialize::GetLocation@ 0XAA4C0|697536
14:41:36.1321240209Initialize::GetLocation@ 0XAA010|696336
14:41:36.1321240209Initialize::GetLocation@ 0X62B0|25264
14:41:36.1321240209Initialize::GetLocation@ 0XAA0B0|696496
14:41:36.1321240209Initialize::GetLocation@ 0X25E00|155136
14:41:36.1321240209Initialize::GetLocation@ 0X1E290|123536
14:41:36.1321240209Initialize::GetLocation@ 0X1E110|123152
14:41:36.1321240209Initialize::GetLocation@ 0XEBA90|965264
14:41:36.1321240209Initialize::GetLocation@ 0XEB540|963904
14:41:36.1321240209Initialize::GetLocation@ 0X25F30|155440
14:41:36.1321240209Initialize::GetLocation@ 0X25CF0|154864
14:41:36.1321240209Initialize::GetLocation@ 0X2DCE0|187616
14:41:36.1321240209Initialize::GetLocation@ 0X3D010|249872
14:41:36.1321240209Initialize::GetLocation@ 0X10CD0|68816
14:41:36.1321240209Initialize::GetLocation@ 0X10DD0|69072
14:41:36.1321240209Initialize::GetLocation@ 0X10EC0|69312
14:41:36.1321240209Initialize::GetLocation@ 0X10CD0|68816
14:41:36.1321240209Initialize::GetLocation@ 0X10B70|68464
14:41:36.1321240209Initialize::GetLocation@ 0X10D20|68896
14:41:36.147124048Update::DetectEnv (C:\Windows\SYSTEM32\dinput.dll) <0X2B7F0000>6|2|1164115969
14:41:36.269124083VTableHolderDInput::initm_pDIW->CreateDevice - succeded.
14:41:36.2691240209Initialize::GetLocation@ 0X3D10|15632
14:41:36.2691240209Initialize::GetLocation@ 0X6130|24880
14:41:36.2691240209Initialize::GetLocation@ 0X62E0|25312
14:41:36.270124048Update::DetectEnv (C:\Windows\SYSTEM32\dinput8.dll) <0X159D0000>6|2|1164115969
14:41:36.275124093VTableHolderDInput8::initm_pDI8W->CreateDevice - succeded.
14:41:36.2751240110VTableHolderDInput8::initm_pDI8A->CreateDevice - succeded.
14:41:36.2751240209Initialize::GetLocation@ 0X100B0|65712
14:41:36.2751240209Initialize::GetLocation@ 0X12DE0|77280
14:41:36.2751240209Initialize::GetLocation@ 0X12BB0|76720
14:41:36.3281240225InterProcessElement::openInterProcess Overwolf_SHARED_MEMORY_2_2_79_8_11628 opened succesfuly
14:41:36.328124072HookFunctionsTableInitializer::SetHookFunctionsDataD3D9 Sht offsets 0x4060 , 0x53c0
14:41:36.3291240256InterProcessElement::closeInterProcess Overwolf_SHARED_MEMORY_2_2_79_8_11628 close 2147483647 bytes
14:41:36.3291240297InjectOWExplorerExplorer file name [C:\Program Files (x86)\Overwolf\0.153.0.13\OWExplorer.dll]
14:41:36.3641240385ftw1OWExplorer injected
14:41:36.61238E851`anonymous-namespace'::CreateProviderInitialize provider: NET
14:41:36.61238E8117libprocess::NetworkTracer::Initializeinit res:0x5 [started:0 active:0 enbaled:0]
14:41:36.61238E854`anonymous-namespace'::CreateProviderFail to initlized provider: NET
14:41:36.61238E851`anonymous-namespace'::CreateProviderInitialize provider: GPU
14:44:07.38838EC394ProcessInjector::HandleElevatedProcessFail injection to process [1856] [t: 0 w_t_id: 0]- NVDisplay.Container.exe (elevated True) 0x0
14:44:07.38838EC333ProcessInjector::HandlePendingProccesssFail to inject pending process |1856|: NVDisplay.Container.exe
14:44:07.38838EC394ProcessInjector::HandleElevatedProcessFail injection to process [3848] [t: 0 w_t_id: 0]- nvcontainer.exe (elevated True) 0x0
14:44:07.38838EC333ProcessInjector::HandlePendingProccesssFail to inject pending process |3848|: nvcontainer.exe
14:44:07.38838EC394ProcessInjector::HandleElevatedProcessFail injection to process [3964] [t: 0 w_t_id: 0]- MsMpEng.exe (elevated True) 0x0
14:44:07.38838EC333ProcessInjector::HandlePendingProccesssFail to inject pending process |3964|: MsMpEng.exe
14:44:07.38838EC394ProcessInjector::HandleElevatedProcessFail injection to process [10700] [t: 0 w_t_id: 0]- NVIDIA Share.exe (elevated True) 0x0
14:44:07.38838EC333ProcessInjector::HandlePendingProccesssFail to inject pending process |10700|: NVIDIA Share.exe
14:44:07.38838EC394ProcessInjector::HandleElevatedProcessFail injection to process [10876] [t: 0 w_t_id: 0]- NVIDIA Share.exe (elevated True) 0x0
14:44:07.38838EC333ProcessInjector::HandlePendingProccesssFail to inject pending process |10876|: NVIDIA Share.exe
14:48:12.39038EC421ProcessInjector::DoElevetedInjectionFailed to inject process [3392] 0x57
14:48:12.39038EC377ProcessInjector::HandleElevatedProcessFail injection to process (will retry again in 5 ses) [3392] [t: 2712 w_t_id: 2712]- pingsender.exe (elevated True) 0x57
14:48:13.38938EC421ProcessInjector::DoElevetedInjectionFailed to inject process [3392] 0x57
14:48:13.38938EC394ProcessInjector::HandleElevatedProcessFail injection to process [3392] [t: 2712 w_t_id: 2712]- pingsender.exe (elevated True) 0x57
14:48:13.38938EC333ProcessInjector::HandlePendingProccesssFail to inject pending process |3392|: pingsender.exe
22:46:20.532124066ProcessesMonitor::Stopstopping PM...
22:46:20.53238E8119ProcessesMonitor::ProcessEnumerateThreadexit process listener
22:46:20.5361240479ProcessInjector::Unhookunhook running process