TimeThreadLineFunctionMessage
09:12:39.8011C14361ftw1Loading (pid: 12268)
09:12:39.8031C1448Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d11.dll) <0X14800000>6|2|1247871522
09:12:39.8031C1448Update::DetectEnv (C:\WINDOWS\SYSTEM32\dxgi.dll) <0X17760000>6|2|1247871522
09:12:39.8101A4146ProcessHardwareRecorder::CommandThreadstarting recorder thread
09:12:40.21C14172DXManager::DetectFound in 0
09:12:40.41C14209Initialize::GetLocation@ 0X4F80|20352
09:12:40.41C14209Initialize::GetLocation@ 0X69640|431680
09:12:40.41C14209Initialize::GetLocation@ 0X206F0|132848
09:12:40.41C14209Initialize::GetLocation@ 0X1DE0|7648
09:12:40.41C14111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X14800000 <> 0X17760000
09:12:40.41C14209Initialize::GetLocation@ 0XFD1C8860|-48461728
09:12:40.41C14111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X14800000 <> 0X17760000
09:12:40.41C14209Initialize::GetLocation@ 0XFD1CDC30|-48440272
09:12:40.41C14111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X14800000 <> 0X17760000
09:12:40.41C14209Initialize::GetLocation@ 0XFD1CC5F0|-48445968
09:12:40.41C14111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0X14800000 <> 0X17760000
09:12:40.41C14209Initialize::GetLocation@ 0XFD0AA7F0|-49633296
09:12:40.341C1448Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d9.dll) <0XF4510000>6|2|1247871638
09:12:40.1881C14129DXManager::DetectOK
09:12:40.3291C14186DXManager::DetectDone
09:12:40.3291C14215VTableHolderD3d9::initd3d offsest [sht]: 0x4060 , 0x53c0
09:12:40.3311C14209Initialize::GetLocation@ 0X41B90|269200
09:12:40.3311C14209Initialize::GetLocation@ 0X33E20|212512
09:12:40.3311C14209Initialize::GetLocation@ 0X3D6C0|251584
09:12:40.3311C14209Initialize::GetLocation@ 0XB8E10|757264
09:12:40.3311C14209Initialize::GetLocation@ 0XB8960|756064
09:12:40.3311C14209Initialize::GetLocation@ 0XACF0|44272
09:12:40.3311C14209Initialize::GetLocation@ 0XB8A00|756224
09:12:40.3311C14209Initialize::GetLocation@ 0X1B6B0|112304
09:12:40.3311C14209Initialize::GetLocation@ 0X1E100|123136
09:12:40.3311C14209Initialize::GetLocation@ 0X26730|157488
09:12:40.3311C14209Initialize::GetLocation@ 0X1146B0|1132208
09:12:40.3311C14209Initialize::GetLocation@ 0X114170|1130864
09:12:40.3311C14209Initialize::GetLocation@ 0X1B5A0|112032
09:12:40.3311C14209Initialize::GetLocation@ 0X1B4B0|111792
09:12:40.3311C14209Initialize::GetLocation@ 0XD680|54912
09:12:40.3311C14209Initialize::GetLocation@ 0X493C0|299968
09:12:40.3311C14209Initialize::GetLocation@ 0XA860|43104
09:12:40.3311C14209Initialize::GetLocation@ 0XD0000|851968
09:12:40.3311C14209Initialize::GetLocation@ 0XD06D0|853712
09:12:40.3311C14209Initialize::GetLocation@ 0XA860|43104
09:12:40.3311C14209Initialize::GetLocation@ 0XD11C0|856512
09:12:40.3311C14209Initialize::GetLocation@ 0XD1820|858144
09:12:40.3611C1448Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput.dll) <0XDC060000>6|2|1247870977
09:12:40.3851C1483VTableHolderDInput::initm_pDIW->CreateDevice - succeded.
09:12:40.3851C14209Initialize::GetLocation@ 0X4040|16448
09:12:40.3851C14209Initialize::GetLocation@ 0X6410|25616
09:12:40.3851C14209Initialize::GetLocation@ 0X65C0|26048
09:12:40.3871C1448Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput8.dll) <0XDC010000>6|2|1247870977
09:12:40.3981C1493VTableHolderDInput8::initm_pDI8W->CreateDevice - succeded.
09:12:40.3981C14110VTableHolderDInput8::initm_pDI8A->CreateDevice - succeded.
09:12:40.3981C14209Initialize::GetLocation@ 0XA5D0|42448
09:12:40.3981C14209Initialize::GetLocation@ 0XD4D0|54480
09:12:40.3981C14209Initialize::GetLocation@ 0XD290|53904
09:12:40.4501C14225InterProcessElement::openInterProcess Overwolf_SHARED_MEMORY_2_2_83_1_12268 opened succesfuly
09:12:40.4501C1472HookFunctionsTableInitializer::SetHookFunctionsDataD3D9 Sht offsets 0x4060 , 0x53c0
09:12:40.4501C14256InterProcessElement::closeInterProcess Overwolf_SHARED_MEMORY_2_2_83_1_12268 close 2147483647 bytes
09:12:40.4501C14297InjectOWExplorerExplorer file name [D:\Programs\Overwolf\0.162.0.8\OWExplorer.dll]
09:12:40.5181C14385ftw1OWExplorer injected
09:12:40.9741CBC51`anonymous-namespace'::CreateProviderInitialize provider: NET
09:12:40.9741CBC117libprocess::NetworkTracer::Initializeinit res:0x5 [started:0 active:0 enbaled:0]
09:12:40.9741CBC54`anonymous-namespace'::CreateProviderFail to initlized provider: NET
09:12:40.9741CBC51`anonymous-namespace'::CreateProviderInitialize provider: GPU
09:12:40.984C70629ProcessInjector::InjectProcessprocess |officeclicktorun.exe| missing h
09:12:40.984C70629ProcessInjector::InjectProcessprocess |hamachi-2.exe| missing h
09:12:40.984C70629ProcessInjector::InjectProcessprocess |lghub_updater.exe| missing h
09:12:40.984C70629ProcessInjector::InjectProcessprocess |LMIGuardianSvc.exe| missing h
09:12:40.985C70629ProcessInjector::InjectProcessprocess |GoogleUpdate.exe| missing h
09:12:40.985C70629ProcessInjector::InjectProcessprocess |MicrosoftEdgeUpdate.exe| missing h
09:12:41.46C70468ProcessInjector::DoElevetedInjectionFailed to inject process [16228] 0x57
09:12:41.46C70424ProcessInjector::HandleElevatedProcessFail injection to process (will retry again in 5 ses) [16228] [t: 4788 w_t_id: 4788]- OverwolfStore.exe (elevated True) 0x57
09:12:41.521C70468ProcessInjector::DoElevetedInjectionFailed to inject process [16228] 0x57
09:12:41.521C70441ProcessInjector::HandleElevatedProcessFail injection to process [16228] [t: 4788 w_t_id: 4788]- OverwolfStore.exe (elevated True) 0x57
09:12:41.521C70380ProcessInjector::HandlePendingProccesssFail to inject pending process |16228|: OverwolfStore.exe
09:12:46.801C1466ProcessesMonitor::Stopstopping PM...
09:12:46.801CBC119ProcessesMonitor::ProcessEnumerateThreadexit process listener
09:12:46.811C14526ProcessInjector::Unhookunhook running process
09:12:52.931C1466ProcessesMonitor::Stopstopping PM...