TimeThreadLineFunctionMessage
00:38:44.396E4C363ftw1Loading (pid: 2548)
00:38:44.397E4C48Update::DetectEnv (C:\Windows\system32\d3d11.dll) <0XF8650000>6|2|602947770
00:38:44.397E4C48Update::DetectEnv (C:\Windows\system32\dxgi.dll) <0XF8850000>6|2|602947692
00:38:44.398E5C146ProcessHardwareRecorder::CommandThreadstarting recorder thread
00:38:44.430E4C169DXManager::DetectFound in 0
00:38:44.430E4C209Initialize::GetLocation@ 0X2B2F8|176888
00:38:44.430E4C209Initialize::GetLocation@ 0X2B510|177424
00:38:44.430E4C209Initialize::GetLocation@ 0X2F97C|194940
00:38:44.430E4C209Initialize::GetLocation@ 0X2583C|153660
00:38:44.430E4C111Update::CaughtC:\Windows\system32\d3d11.dll|0XF8650000 <> 0XF8850000
00:38:44.430E4C209Initialize::GetLocation@ 0XFFED6B30|-1217744
00:38:44.430E4C111Update::CaughtC:\Windows\system32\d3d11.dll|0XF8650000 <> 0XF8850000
00:38:44.430E4C209Initialize::GetLocation@ 0XFFED6EC0|-1216832
00:38:44.430E4C111Update::CaughtC:\Windows\system32\d3d11.dll|0XF8650000 <> 0XF8850000
00:38:44.430E4C209Initialize::GetLocation@ 0XFFED6F40|-1216704
00:38:44.430E4C111Update::CaughtC:\Windows\system32\d3d11.dll|0XF8650000 <> 0XF8850000
00:38:44.430E4C209Initialize::GetLocation@ 0XFFE3FF6C|-1835156
00:38:44.441E4C48Update::DetectEnv (C:\Windows\system32\d3d9.dll) <0XF9BD0000>6|1|498156650
00:38:44.612E4C128DXManager::DetectOK
00:38:44.634E4C185DXManager::DetectDone
00:38:44.635E4C214VTableHolderD3d9::initd3d offsest [sht]: 0x3db8 , 0x5068
00:38:44.635E4C209Initialize::GetLocation@ 0X2F30|12080
00:38:44.635E4C209Initialize::GetLocation@ 0X2F00|12032
00:38:44.635E4C209Initialize::GetLocation@ 0X4544|17732
00:38:44.635E4C209Initialize::GetLocation@ 0X30FF0|200688
00:38:44.635E4C209Initialize::GetLocation@ 0X34378|213880
00:38:44.635E4C209Initialize::GetLocation@ 0X10AD4|68308
00:38:44.635E4C209Initialize::GetLocation@ 0X9D5C0|644544
00:38:44.635E4C209Initialize::GetLocation@ 0X5A3C|23100
00:38:44.635E4C209Initialize::GetLocation@ 0X12B24|76580
00:38:44.635E4C209Initialize::GetLocation@ 0X41BD0|269264
00:38:44.635E4C209Initialize::GetLocation@ 0X37394|226196
00:38:44.635E4C209Initialize::GetLocation@ 0XD6A98|879256
00:38:44.635E4C209Initialize::GetLocation@ 0X10F00|69376
00:38:44.635E4C209Initialize::GetLocation@ 0X41E9C|269980
00:38:44.635E4C209Initialize::GetLocation@ 0X32F88|208776
00:38:44.635E4C209Initialize::GetLocation@ 0X1A54C|107852
00:38:44.635E4C209Initialize::GetLocation@ 0X3110|12560
00:38:44.635E4C209Initialize::GetLocation@ 0X12580|75136
00:38:44.635E4C209Initialize::GetLocation@ 0X12660|75360
00:38:44.635E4C209Initialize::GetLocation@ 0X3110|12560
00:38:44.635E4C209Initialize::GetLocation@ 0X3AF24|241444
00:38:44.635E4C209Initialize::GetLocation@ 0X3B050|241744
00:38:44.656E4C48Update::DetectEnv (C:\Windows\system32\dinput.dll) <0XE9C90000>6|1|498089985
00:38:44.690E4C83VTableHolderDInput::initm_pDIW->CreateDevice - succeded.
00:38:44.690E4C209Initialize::GetLocation@ 0X5664|22116
00:38:44.690E4C209Initialize::GetLocation@ 0X7BFC|31740
00:38:44.690E4C209Initialize::GetLocation@ 0X7DC4|32196
00:38:44.693E4C48Update::DetectEnv (C:\Windows\system32\dinput8.dll) <0XE9880000>6|1|498089985
00:38:44.712E4C91VTableHolderDInput8::initm_pDI8W->CreateDevice - succeded.
00:38:44.712E4C108VTableHolderDInput8::initm_pDI8A->CreateDevice - succeded.
00:38:44.712E4C209Initialize::GetLocation@ 0X9A4C|39500
00:38:44.712E4C209Initialize::GetLocation@ 0XD154|53588
00:38:44.712E4C209Initialize::GetLocation@ 0XD348|54088
00:38:44.773E4C225InterProcessElement::openInterProcess Overwolf_SHARED_MEMORY_2_2_72_5_2548 opened succesfuly
00:38:44.773E4C72HookFunctionsTableInitializer::SetHookFunctionsDataD3D9 Sht offsets 0x3db8 , 0x5068
00:38:44.773E4C256InterProcessElement::closeInterProcess Overwolf_SHARED_MEMORY_2_2_72_5_2548 close 2147483647 bytes
00:38:44.773E4C299InjectOWExplorerExplorer file name [C:\Program Files (x86)\Overwolf\0.134.0.26\OWExplorer.dll]
00:38:44.778E4C387ftw1OWExplorer injected
00:38:44.958EE451`anonymous-namespace'::CreateProviderInitialize provider: NET
00:38:44.958EE4120libprocess::NetworkTracer::Initializeinit res:0x0 [started:1 active:1 enbaled:1]
00:38:44.958EE451`anonymous-namespace'::CreateProviderInitialize provider: GPU
00:45:59.664EE8349ProcessInjector::HandleElevatedProcessFail injection to process [4316] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x5
00:45:59.664EE8288ProcessInjector::HandlePendingProccesssFail to inject pending process |4316|: firefox.exe
00:45:59.664EE8349ProcessInjector::HandleElevatedProcessFail injection to process [4332] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x5
00:45:59.664EE8288ProcessInjector::HandlePendingProccesssFail to inject pending process |4332|: firefox.exe
00:46:00.663EE8349ProcessInjector::HandleElevatedProcessFail injection to process [6648] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x5
00:46:00.663EE8288ProcessInjector::HandlePendingProccesssFail to inject pending process |6648|: firefox.exe
00:46:00.663EE8349ProcessInjector::HandleElevatedProcessFail injection to process [7280] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x5
00:46:00.663EE8288ProcessInjector::HandlePendingProccesssFail to inject pending process |7280|: firefox.exe
00:47:59.614EE8349ProcessInjector::HandleElevatedProcessFail injection to process [8176] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x5
00:47:59.614EE8288ProcessInjector::HandlePendingProccesssFail to inject pending process |8176|: firefox.exe
00:48:01.618EE8349ProcessInjector::HandleElevatedProcessFail injection to process [7120] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x5
00:48:01.618EE8288ProcessInjector::HandlePendingProccesssFail to inject pending process |7120|: firefox.exe
01:16:50.937EE8349ProcessInjector::HandleElevatedProcessFail injection to process [8720] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x5
01:16:50.937EE8288ProcessInjector::HandlePendingProccesssFail to inject pending process |8720|: firefox.exe