TimeThreadLineFunctionMessage
10:47:09.491754361ftw1Loading (pid: 7612)
10:47:09.491530146ProcessHardwareRecorder::CommandThreadstarting recorder thread
10:47:09.81175448Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d11.dll) <0XD5830000>6|2|1203373203
10:47:09.82175448Update::DetectEnv (C:\WINDOWS\SYSTEM32\dxgi.dll) <0XD7210000>6|2|1203373081
10:47:09.3801754172DXManager::DetectFound in 0
10:47:09.3831754209Initialize::GetLocation@ 0X4660|18016
10:47:09.3831754209Initialize::GetLocation@ 0X661F0|418288
10:47:09.3831754209Initialize::GetLocation@ 0X19DB0|105904
10:47:09.3831754209Initialize::GetLocation@ 0X1350|4944
10:47:09.3831754111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XD5830000 <> 0XD7210000
10:47:09.3831754209Initialize::GetLocation@ 0XFE743020|-25939936
10:47:09.3831754111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XD5830000 <> 0XD7210000
10:47:09.3831754209Initialize::GetLocation@ 0XFE748060|-25919392
10:47:09.3831754111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XD5830000 <> 0XD7210000
10:47:09.3831754209Initialize::GetLocation@ 0XFE73E620|-25958880
10:47:09.3831754111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XD5830000 <> 0XD7210000
10:47:09.3831754209Initialize::GetLocation@ 0XFE62AA80|-27088256
10:47:09.506175448Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d9.dll) <0X90270000>6|2|1203373142
10:47:09.7121754129DXManager::DetectOK
10:47:09.7961754186DXManager::DetectDone
10:47:09.7961754215VTableHolderD3d9::initd3d offsest [sht]: 0x4060 , 0x53c0
10:47:09.7981754209Initialize::GetLocation@ 0X3AC00|240640
10:47:09.7981754209Initialize::GetLocation@ 0X2C5B0|181680
10:47:09.7991754209Initialize::GetLocation@ 0X36D00|224512
10:47:09.7991754209Initialize::GetLocation@ 0XAE210|713232
10:47:09.7991754209Initialize::GetLocation@ 0XADD60|712032
10:47:09.7991754209Initialize::GetLocation@ 0X5880|22656
10:47:09.7991754209Initialize::GetLocation@ 0XADE00|712192
10:47:09.7991754209Initialize::GetLocation@ 0X20FF0|135152
10:47:09.7991754209Initialize::GetLocation@ 0X1CA60|117344
10:47:09.7991754209Initialize::GetLocation@ 0X1C8E0|116960
10:47:09.7991754209Initialize::GetLocation@ 0X1086D0|1083088
10:47:09.7991754209Initialize::GetLocation@ 0X108180|1081728
10:47:09.7991754209Initialize::GetLocation@ 0X248B0|149680
10:47:09.7991754209Initialize::GetLocation@ 0X247A0|149408
10:47:09.7991754209Initialize::GetLocation@ 0X2C440|181312
10:47:09.7991754209Initialize::GetLocation@ 0X3F3F0|259056
10:47:09.7991754209Initialize::GetLocation@ 0XF3E0|62432
10:47:09.7991754209Initialize::GetLocation@ 0XF4E0|62688
10:47:09.7991754209Initialize::GetLocation@ 0XF5D0|62928
10:47:09.7991754209Initialize::GetLocation@ 0XF3E0|62432
10:47:09.7991754209Initialize::GetLocation@ 0XF280|62080
10:47:09.7991754209Initialize::GetLocation@ 0XF430|62512
10:47:09.964175448Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput.dll) <0XB1160000>6|2|1203372033
10:47:14.956175483VTableHolderDInput::initm_pDIW->CreateDevice - succeded.
10:47:14.9571754209Initialize::GetLocation@ 0X3CC0|15552
10:47:14.9571754209Initialize::GetLocation@ 0X5FD0|24528
10:47:14.9571754209Initialize::GetLocation@ 0X6180|24960
10:47:15.129175448Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput8.dll) <0XB1110000>6|2|1203372033
10:47:15.467175493VTableHolderDInput8::initm_pDI8W->CreateDevice - succeded.
10:47:15.5781754110VTableHolderDInput8::initm_pDI8A->CreateDevice - succeded.
10:47:15.5801754209Initialize::GetLocation@ 0X10000|65536
10:47:15.5801754209Initialize::GetLocation@ 0X12C80|76928
10:47:15.5801754209Initialize::GetLocation@ 0X12A60|76384
10:47:17.9101754225InterProcessElement::openInterProcess Overwolf_SHARED_MEMORY_2_2_83_1_7612 opened succesfuly
10:47:17.910175472HookFunctionsTableInitializer::SetHookFunctionsDataD3D9 Sht offsets 0x4060 , 0x53c0
10:47:17.9101754256InterProcessElement::closeInterProcess Overwolf_SHARED_MEMORY_2_2_83_1_7612 close 2147483647 bytes
10:47:17.9111754297InjectOWExplorerExplorer file name [C:\Program Files (x86)\Overwolf\0.162.0.13\OWExplorer.dll]
10:47:19.7171754385ftw1OWExplorer injected
10:47:24.62248851`anonymous-namespace'::CreateProviderInitialize provider: NET
10:47:24.632488117libprocess::NetworkTracer::Initializeinit res:0x5 [started:0 active:0 enbaled:0]
10:47:24.63248854`anonymous-namespace'::CreateProviderFail to initlized provider: NET
10:47:24.65248851`anonymous-namespace'::CreateProviderInitialize provider: GPU
10:47:24.6532924629ProcessInjector::InjectProcessprocess |wsc_proxy.exe| missing h
10:47:24.6542924629ProcessInjector::InjectProcessprocess |RtkAudioService64.exe| missing h
10:47:24.6542924629ProcessInjector::InjectProcessprocess |RAVBg64.exe| missing h
10:47:25.252924629ProcessInjector::InjectProcessprocess |RAVBg64.exe| missing h
10:47:25.1922924629ProcessInjector::InjectProcessprocess |AVGSvc.exe| missing h
10:47:25.1922924629ProcessInjector::InjectProcessprocess |avgToolsSvc.exe| missing h
10:47:25.1922924629ProcessInjector::InjectProcessprocess |TuneupSvc.exe| missing h
10:47:25.1922924629ProcessInjector::InjectProcessprocess |aswEngSrv.exe| missing h
10:47:25.2362924629ProcessInjector::InjectProcessprocess |aswidsagent.exe| missing h
10:47:25.2862924629ProcessInjector::InjectProcessprocess |AvEmUpdate.exe| missing h
10:47:25.2862924629ProcessInjector::InjectProcessprocess |DDVRulesProcessor.exe| missing h
10:47:25.2862924629ProcessInjector::InjectProcessprocess |DropboxUpdate.exe| missing h
10:47:25.5622924629ProcessInjector::InjectProcessprocess |LMS.exe| missing h
10:47:25.6072924629ProcessInjector::InjectProcessprocess |RichVideo.exe| missing h
10:47:25.6072924629ProcessInjector::InjectProcessprocess |DDVDataCollector.exe| missing h
10:47:25.6082924629ProcessInjector::InjectProcessprocess |DDVCollectorSvcApi.exe| missing h
10:47:25.6082924629ProcessInjector::InjectProcessprocess |instup.exe| missing h
10:47:25.6542924629ProcessInjector::InjectProcessprocess |MicrosoftEdgeUpdate.exe| missing h
10:47:53.6012924629ProcessInjector::InjectProcessprocess |OverwolfUpdater.exe| missing h
10:48:10.1062924629ProcessInjector::InjectProcessprocess |OverwolfUpdater.exe| missing h
10:48:34.5762924629ProcessInjector::InjectProcessprocess |OverwolfUpdater.exe| missing h
10:49:52.5562924468ProcessInjector::DoElevetedInjectionFailed to inject process [12576] 0x57
10:49:52.5562924424ProcessInjector::HandleElevatedProcessFail injection to process (will retry again in 5 ses) [12576] [t: 9252 w_t_id: 9252]- owver64.exe (elevated True) 0x57
10:49:55.5562924441ProcessInjector::HandleElevatedProcessFail injection to process [1856] [t: 0 w_t_id: 0]- aswidsagent.exe (elevated True) 0x0
10:49:55.5562924380ProcessInjector::HandlePendingProccesssFail to inject pending process |1856|: aswidsagent.exe
10:49:55.5562924441ProcessInjector::HandleElevatedProcessFail injection to process [2316] [t: 0 w_t_id: 0]- AvEmUpdate.exe (elevated True) 0x0
10:49:55.5562924380ProcessInjector::HandlePendingProccesssFail to inject pending process |2316|: AvEmUpdate.exe
10:49:55.5562924441ProcessInjector::HandleElevatedProcessFail injection to process [2452] [t: 0 w_t_id: 0]- wsc_proxy.exe (elevated True) 0x0
10:49:55.5572924380ProcessInjector::HandlePendingProccesssFail to inject pending process |2452|: wsc_proxy.exe
10:49:55.5572924441ProcessInjector::HandleElevatedProcessFail injection to process [3208] [t: 0 w_t_id: 0]- RtkAudioService64.exe (elevated True) 0x0
10:49:55.5572924380ProcessInjector::HandlePendingProccesssFail to inject pending process |3208|: RtkAudioService64.exe
10:49:55.5572924441ProcessInjector::HandleElevatedProcessFail injection to process [3880] [t: 0 w_t_id: 0]- AVGSvc.exe (elevated True) 0x0
10:49:55.5572924380ProcessInjector::HandlePendingProccesssFail to inject pending process |3880|: AVGSvc.exe
10:49:55.5572924441ProcessInjector::HandleElevatedProcessFail injection to process [4100] [t: 0 w_t_id: 0]- avgToolsSvc.exe (elevated True) 0x0
10:49:55.5572924380ProcessInjector::HandlePendingProccesssFail to inject pending process |4100|: avgToolsSvc.exe
10:49:55.5572924441ProcessInjector::HandleElevatedProcessFail injection to process [4688] [t: 0 w_t_id: 0]- TuneupSvc.exe (elevated True) 0x0
10:49:55.5572924380ProcessInjector::HandlePendingProccesssFail to inject pending process |4688|: TuneupSvc.exe
10:49:55.5572924441ProcessInjector::HandleElevatedProcessFail injection to process [6688] [t: 0 w_t_id: 0]- aswEngSrv.exe (elevated True) 0x0
10:49:55.5572924380ProcessInjector::HandlePendingProccesssFail to inject pending process |6688|: aswEngSrv.exe
10:49:55.5572924441ProcessInjector::HandleElevatedProcessFail injection to process [7144] [t: 0 w_t_id: 0]- DropboxUpdate.exe (elevated True) 0x0
10:49:55.5572924380ProcessInjector::HandlePendingProccesssFail to inject pending process |7144|: DropboxUpdate.exe
10:49:55.5572924441ProcessInjector::HandleElevatedProcessFail injection to process [8472] [t: 0 w_t_id: 0]- DDVRulesProcessor.exe (elevated True) 0x0
10:49:55.5572924380ProcessInjector::HandlePendingProccesssFail to inject pending process |8472|: DDVRulesProcessor.exe
10:49:55.5572924441ProcessInjector::HandleElevatedProcessFail injection to process [10772] [t: 0 w_t_id: 0]- LMS.exe (elevated True) 0x0
10:49:55.5572924380ProcessInjector::HandlePendingProccesssFail to inject pending process |10772|: LMS.exe
10:49:56.5582924441ProcessInjector::HandleElevatedProcessFail injection to process [316] [t: 0 w_t_id: 0]- UnityCrashHandler64.exe (elevated True) 0x0
10:49:56.5582924380ProcessInjector::HandlePendingProccesssFail to inject pending process |316|: UnityCrashHandler64.exe
10:49:56.5582924441ProcessInjector::HandleElevatedProcessFail injection to process [5368] [t: 0 w_t_id: 0]- DDVDataCollector.exe (elevated True) 0x0
10:49:56.5582924380ProcessInjector::HandlePendingProccesssFail to inject pending process |5368|: DDVDataCollector.exe
10:49:56.5582924441ProcessInjector::HandleElevatedProcessFail injection to process [6440] [t: 0 w_t_id: 0]- MicrosoftEdgeUpdate.exe (elevated True) 0x0
10:49:56.5582924380ProcessInjector::HandlePendingProccesssFail to inject pending process |6440|: MicrosoftEdgeUpdate.exe
10:49:56.5582924441ProcessInjector::HandleElevatedProcessFail injection to process [7900] [t: 0 w_t_id: 0]- AVGUI.exe (elevated True) 0x0
10:49:56.5582924380ProcessInjector::HandlePendingProccesssFail to inject pending process |7900|: AVGUI.exe
10:49:56.5582924441ProcessInjector::HandleElevatedProcessFail injection to process [11800] [t: 0 w_t_id: 0]- PlariumPlay.exe (elevated True) 0x0
10:49:56.5582924380ProcessInjector::HandlePendingProccesssFail to inject pending process |11800|: PlariumPlay.exe
10:49:56.5582924441ProcessInjector::HandleElevatedProcessFail injection to process [11876] [t: 0 w_t_id: 0]- DDVCollectorSvcApi.exe (elevated True) 0x0
10:49:56.5582924380ProcessInjector::HandlePendingProccesssFail to inject pending process |11876|: DDVCollectorSvcApi.exe
10:49:56.5582924441ProcessInjector::HandleElevatedProcessFail injection to process [11892] [t: 0 w_t_id: 0]- PlariumPlay.exe (elevated True) 0x0
10:49:56.5582924380ProcessInjector::HandlePendingProccesssFail to inject pending process |11892|: PlariumPlay.exe
10:49:56.5582924441ProcessInjector::HandleElevatedProcessFail injection to process [12124] [t: 0 w_t_id: 0]- RichVideo.exe (elevated True) 0x0
10:49:56.5582924380ProcessInjector::HandlePendingProccesssFail to inject pending process |12124|: RichVideo.exe
10:49:56.5582924441ProcessInjector::HandleElevatedProcessFail injection to process [12280] [t: 0 w_t_id: 0]- AVGUI.exe (elevated True) 0x0
10:49:56.5582924380ProcessInjector::HandlePendingProccesssFail to inject pending process |12280|: AVGUI.exe
10:49:56.5582924441ProcessInjector::HandleElevatedProcessFail injection to process [12820] [t: 0 w_t_id: 0]- instup.exe (elevated True) 0x0
10:49:56.5582924380ProcessInjector::HandlePendingProccesssFail to inject pending process |12820|: instup.exe