TimeThreadLineFunctionMessage
08:03:44.86065AC361ftw1Loading (pid: 25928)
08:03:44.8603310146ProcessHardwareRecorder::CommandThreadstarting recorder thread
08:03:44.86165AC48Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d11.dll) <0X70940000>6|2|1247870977
08:03:44.86165AC48Update::DetectEnv (C:\WINDOWS\SYSTEM32\dxgi.dll) <0X73080000>6|2|1247870977
08:03:44.99665AC172DXManager::DetectFound in 0
08:03:44.99665AC209Initialize::GetLocation@ 0X4F80|20352
08:03:44.99665AC209Initialize::GetLocation@ 0X69160|430432
08:03:44.99665AC209Initialize::GetLocation@ 0X20410|132112
08:03:44.99665AC209Initialize::GetLocation@ 0X1DE0|7648
08:03:44.99665AC111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X70940000 <> 0X73080000
08:03:44.99665AC209Initialize::GetLocation@ 0XFD9E8850|-39942064
08:03:44.99665AC111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X70940000 <> 0X73080000
08:03:44.99765AC209Initialize::GetLocation@ 0XFD9EDE80|-39920000
08:03:44.99765AC111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X70940000 <> 0X73080000
08:03:44.99765AC209Initialize::GetLocation@ 0XFD9EC5E0|-39926304
08:03:44.99765AC111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X70940000 <> 0X73080000
08:03:44.99765AC209Initialize::GetLocation@ 0XFD8CA7F0|-41113616
08:03:45.2665AC48Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d9.dll) <0X66F70000>6|2|1247870977
08:03:45.13965AC129DXManager::DetectOK
08:03:45.18165AC186DXManager::DetectDone
08:03:45.18165AC215VTableHolderD3d9::initd3d offsest [sht]: 0x4060 , 0x53c0
08:03:45.18265AC209Initialize::GetLocation@ 0X3FC10|261136
08:03:45.18265AC209Initialize::GetLocation@ 0X33840|211008
08:03:45.18265AC209Initialize::GetLocation@ 0X3BFA0|245664
08:03:45.18265AC209Initialize::GetLocation@ 0XB70E0|749792
08:03:45.18265AC209Initialize::GetLocation@ 0XB6C30|748592
08:03:45.18265AC209Initialize::GetLocation@ 0XAF40|44864
08:03:45.18265AC209Initialize::GetLocation@ 0XB6CD0|748752
08:03:45.18265AC209Initialize::GetLocation@ 0X20C40|134208
08:03:45.18265AC209Initialize::GetLocation@ 0X16A10|92688
08:03:45.18265AC209Initialize::GetLocation@ 0X2D530|185648
08:03:45.18265AC209Initialize::GetLocation@ 0X113350|1127248
08:03:45.18265AC209Initialize::GetLocation@ 0X112E10|1125904
08:03:45.18265AC209Initialize::GetLocation@ 0X20B30|133936
08:03:45.18265AC209Initialize::GetLocation@ 0X20A40|133696
08:03:45.18265AC209Initialize::GetLocation@ 0XD8D0|55504
08:03:45.18265AC209Initialize::GetLocation@ 0X466B0|288432
08:03:45.18265AC209Initialize::GetLocation@ 0XAAB0|43696
08:03:45.18265AC209Initialize::GetLocation@ 0XCE2D0|844496
08:03:45.18265AC209Initialize::GetLocation@ 0XCE9A0|846240
08:03:45.18265AC209Initialize::GetLocation@ 0XAAB0|43696
08:03:45.18265AC209Initialize::GetLocation@ 0XCF490|849040
08:03:45.18265AC209Initialize::GetLocation@ 0XCFAF0|850672
08:03:45.20565AC48Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput.dll) <0X4CE20000>6|2|1247870977
08:03:45.21465AC83VTableHolderDInput::initm_pDIW->CreateDevice - succeded.
08:03:45.21465AC209Initialize::GetLocation@ 0X4040|16448
08:03:45.21465AC209Initialize::GetLocation@ 0X6410|25616
08:03:45.21465AC209Initialize::GetLocation@ 0X65C0|26048
08:03:45.21565AC48Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput8.dll) <0X3F730000>6|2|1247870977
08:03:45.22265AC93VTableHolderDInput8::initm_pDI8W->CreateDevice - succeded.
08:03:45.22265AC110VTableHolderDInput8::initm_pDI8A->CreateDevice - succeded.
08:03:45.22265AC209Initialize::GetLocation@ 0XA5D0|42448
08:03:45.22265AC209Initialize::GetLocation@ 0XD4D0|54480
08:03:45.22265AC209Initialize::GetLocation@ 0XD290|53904
08:03:45.27765AC225InterProcessElement::openInterProcess Overwolf_SHARED_MEMORY_2_2_78_13_25928 opened succesfuly
08:03:45.27765AC72HookFunctionsTableInitializer::SetHookFunctionsDataD3D9 Sht offsets 0x4060 , 0x53c0
08:03:45.27765AC256InterProcessElement::closeInterProcess Overwolf_SHARED_MEMORY_2_2_78_13_25928 close 2147483647 bytes
08:03:45.27765AC297InjectOWExplorerExplorer file name [C:\Program Files (x86)\Overwolf\0.148.81.21\OWExplorer.dll]
08:03:45.27965AC385ftw1OWExplorer injected
08:03:45.502ED451`anonymous-namespace'::CreateProviderInitialize provider: NET
08:03:45.502ED4117libprocess::NetworkTracer::Initializeinit res:0x5 [started:0 active:0 enbaled:0]
08:03:45.502ED454`anonymous-namespace'::CreateProviderFail to initlized provider: NET
08:03:45.502ED451`anonymous-namespace'::CreateProviderInitialize provider: GPU
08:06:16.56C4C352ProcessInjector::HandleElevatedProcessFail injection to process [1848] [t: 0 w_t_id: 0]- NVDisplay.Container.exe (elevated True) 0x0
08:06:16.56C4C291ProcessInjector::HandlePendingProccesssFail to inject pending process |1848|: NVDisplay.Container.exe
08:06:16.56C4C352ProcessInjector::HandleElevatedProcessFail injection to process [2040] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
08:06:16.56C4C291ProcessInjector::HandlePendingProccesssFail to inject pending process |2040|: firefox.exe
08:06:16.56C4C352ProcessInjector::HandleElevatedProcessFail injection to process [5352] [t: 0 w_t_id: 0]- nvcontainer.exe (elevated True) 0x0
08:06:16.56C4C291ProcessInjector::HandlePendingProccesssFail to inject pending process |5352|: nvcontainer.exe
08:06:16.56C4C352ProcessInjector::HandleElevatedProcessFail injection to process [5732] [t: 0 w_t_id: 0]- MsMpEng.exe (elevated True) 0x0
08:06:16.56C4C291ProcessInjector::HandlePendingProccesssFail to inject pending process |5732|: MsMpEng.exe
08:06:16.56C4C352ProcessInjector::HandleElevatedProcessFail injection to process [6256] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
08:06:16.56C4C291ProcessInjector::HandlePendingProccesssFail to inject pending process |6256|: firefox.exe
08:06:16.56C4C352ProcessInjector::HandleElevatedProcessFail injection to process [7716] [t: 0 w_t_id: 0]- DTShellHlp.exe (elevated True) 0x0
08:06:16.56C4C291ProcessInjector::HandlePendingProccesssFail to inject pending process |7716|: DTShellHlp.exe
08:06:16.56C4C352ProcessInjector::HandleElevatedProcessFail injection to process [9596] [t: 0 w_t_id: 0]- robotaskbaricon-x64.exe (elevated True) 0x0
08:06:16.56C4C291ProcessInjector::HandlePendingProccesssFail to inject pending process |9596|: robotaskbaricon-x64.exe
08:06:16.56C4C352ProcessInjector::HandleElevatedProcessFail injection to process [14132] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
08:06:16.56C4C291ProcessInjector::HandlePendingProccesssFail to inject pending process |14132|: firefox.exe
08:06:16.56C4C352ProcessInjector::HandleElevatedProcessFail injection to process [15440] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
08:06:16.56C4C291ProcessInjector::HandlePendingProccesssFail to inject pending process |15440|: firefox.exe
08:06:16.56C4C352ProcessInjector::HandleElevatedProcessFail injection to process [16348] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
08:06:16.56C4C291ProcessInjector::HandlePendingProccesssFail to inject pending process |16348|: firefox.exe
08:06:16.56C4C352ProcessInjector::HandleElevatedProcessFail injection to process [16660] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
08:06:16.56C4C291ProcessInjector::HandlePendingProccesssFail to inject pending process |16660|: firefox.exe
08:06:16.56C4C352ProcessInjector::HandleElevatedProcessFail injection to process [24092] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
08:06:16.56C4C291ProcessInjector::HandlePendingProccesssFail to inject pending process |24092|: firefox.exe
08:06:16.56C4C352ProcessInjector::HandleElevatedProcessFail injection to process [25320] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
08:06:16.56C4C291ProcessInjector::HandlePendingProccesssFail to inject pending process |25320|: firefox.exe
08:06:17.56C4C352ProcessInjector::HandleElevatedProcessFail injection to process [12948] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
08:06:17.56C4C291ProcessInjector::HandlePendingProccesssFail to inject pending process |12948|: firefox.exe
08:06:17.56C4C352ProcessInjector::HandleElevatedProcessFail injection to process [17368] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
08:06:17.56C4C291ProcessInjector::HandlePendingProccesssFail to inject pending process |17368|: firefox.exe
08:06:17.56C4C352ProcessInjector::HandleElevatedProcessFail injection to process [20112] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
08:06:17.56C4C291ProcessInjector::HandlePendingProccesssFail to inject pending process |20112|: firefox.exe
08:06:17.56C4C352ProcessInjector::HandleElevatedProcessFail injection to process [22480] [t: 0 w_t_id: 0]- firefox.exe (elevated True) 0x0
08:06:17.56C4C291ProcessInjector::HandlePendingProccesssFail to inject pending process |22480|: firefox.exe
08:23:37.40165AC66ProcessesMonitor::Stopstopping PM...
08:23:37.401ED4119ProcessesMonitor::ProcessEnumerateThreadexit process listener
08:23:43.40865AC66ProcessesMonitor::Stopstopping PM...