TimeThreadLineFunctionMessage
18:51:13.805BFC361ftw1Loading (pid: 11760)
18:51:13.805337C146ProcessHardwareRecorder::CommandThreadstarting recorder thread
18:51:13.807BFC48Update::DetectEnv (C:\Windows\SYSTEM32\d3d11.dll) <0XF4060000>6|2|1247870977
18:51:13.807BFC48Update::DetectEnv (C:\Windows\SYSTEM32\dxgi.dll) <0XF6BD0000>6|2|1247870977
18:51:13.838BFC172DXManager::DetectFound in 0
18:51:13.838BFC209Initialize::GetLocation@ 0X4F80|20352
18:51:13.838BFC209Initialize::GetLocation@ 0X69160|430432
18:51:13.838BFC209Initialize::GetLocation@ 0X20410|132112
18:51:13.838BFC209Initialize::GetLocation@ 0X1DE0|7648
18:51:13.838BFC111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0XF4060000 <> 0XF6BD0000
18:51:13.838BFC209Initialize::GetLocation@ 0XFD5B8850|-44332976
18:51:13.838BFC111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0XF4060000 <> 0XF6BD0000
18:51:13.838BFC209Initialize::GetLocation@ 0XFD5BDE80|-44310912
18:51:13.838BFC111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0XF4060000 <> 0XF6BD0000
18:51:13.838BFC209Initialize::GetLocation@ 0XFD5BC5E0|-44317216
18:51:13.838BFC111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0XF4060000 <> 0XF6BD0000
18:51:13.838BFC209Initialize::GetLocation@ 0XFD49A7F0|-45504528
18:51:13.842BFC48Update::DetectEnv (C:\Windows\SYSTEM32\d3d9.dll) <0XEE2A0000>6|2|1247871399
18:51:13.863BFC129DXManager::DetectOK
18:51:13.872BFC186DXManager::DetectDone
18:51:13.873BFC215VTableHolderD3d9::initd3d offsest [sht]: 0x4060 , 0x53c0
18:51:13.873BFC209Initialize::GetLocation@ 0X41000|266240
18:51:13.873BFC209Initialize::GetLocation@ 0X332C0|209600
18:51:13.873BFC209Initialize::GetLocation@ 0X3CB30|248624
18:51:13.873BFC209Initialize::GetLocation@ 0XB7000|749568
18:51:13.873BFC209Initialize::GetLocation@ 0XB6B50|748368
18:51:13.873BFC209Initialize::GetLocation@ 0XA190|41360
18:51:13.873BFC209Initialize::GetLocation@ 0XB6BF0|748528
18:51:13.873BFC209Initialize::GetLocation@ 0X1AB50|109392
18:51:13.873BFC209Initialize::GetLocation@ 0X1D5A0|120224
18:51:13.873BFC209Initialize::GetLocation@ 0X25BD0|154576
18:51:13.873BFC209Initialize::GetLocation@ 0X113270|1127024
18:51:13.873BFC209Initialize::GetLocation@ 0X112D30|1125680
18:51:13.873BFC209Initialize::GetLocation@ 0X1AA40|109120
18:51:13.873BFC209Initialize::GetLocation@ 0X1A950|108880
18:51:13.873BFC209Initialize::GetLocation@ 0XCB20|52000
18:51:13.873BFC209Initialize::GetLocation@ 0X47AE0|293600
18:51:13.873BFC209Initialize::GetLocation@ 0X9D00|40192
18:51:13.873BFC209Initialize::GetLocation@ 0XCE1F0|844272
18:51:13.873BFC209Initialize::GetLocation@ 0XCE8C0|846016
18:51:13.873BFC209Initialize::GetLocation@ 0X9D00|40192
18:51:13.873BFC209Initialize::GetLocation@ 0XCF3B0|848816
18:51:13.873BFC209Initialize::GetLocation@ 0XCFA10|850448
18:51:13.879BFC48Update::DetectEnv (C:\Windows\SYSTEM32\dinput.dll) <0X97480000>6|2|1247870977
18:51:13.893BFC83VTableHolderDInput::initm_pDIW->CreateDevice - succeded.
18:51:13.893BFC209Initialize::GetLocation@ 0X4040|16448
18:51:13.893BFC209Initialize::GetLocation@ 0X6410|25616
18:51:13.893BFC209Initialize::GetLocation@ 0X65C0|26048
18:51:13.895BFC48Update::DetectEnv (C:\Windows\SYSTEM32\dinput8.dll) <0X97430000>6|2|1247870977
18:51:13.901BFC93VTableHolderDInput8::initm_pDI8W->CreateDevice - succeded.
18:51:13.902BFC110VTableHolderDInput8::initm_pDI8A->CreateDevice - succeded.
18:51:13.902BFC209Initialize::GetLocation@ 0XA5D0|42448
18:51:13.902BFC209Initialize::GetLocation@ 0XD4D0|54480
18:51:13.902BFC209Initialize::GetLocation@ 0XD290|53904
18:51:13.968BFC225InterProcessElement::openInterProcess Overwolf_SHARED_MEMORY_2_2_79_8_11760 opened succesfuly
18:51:13.968BFC72HookFunctionsTableInitializer::SetHookFunctionsDataD3D9 Sht offsets 0x4060 , 0x53c0
18:51:13.968BFC256InterProcessElement::closeInterProcess Overwolf_SHARED_MEMORY_2_2_79_8_11760 close 2147483647 bytes
18:51:13.968BFC297InjectOWExplorerExplorer file name [C:\Program Files (x86)\Overwolf\0.153.0.13\OWExplorer.dll]
18:51:13.975BFC385ftw1OWExplorer injected
18:51:14.173278C51`anonymous-namespace'::CreateProviderInitialize provider: NET
18:51:14.173278C117libprocess::NetworkTracer::Initializeinit res:0x5 [started:0 active:0 enbaled:0]
18:51:14.173278C54`anonymous-namespace'::CreateProviderFail to initlized provider: NET
18:51:14.173278C51`anonymous-namespace'::CreateProviderInitialize provider: GPU
18:53:45.1322788394ProcessInjector::HandleElevatedProcessFail injection to process [2068] [t: 0 w_t_id: 0]- NVDisplay.Container.exe (elevated True) 0x0
18:53:45.1322788333ProcessInjector::HandlePendingProccesssFail to inject pending process |2068|: NVDisplay.Container.exe
18:53:45.1322788394ProcessInjector::HandleElevatedProcessFail injection to process [3868] [t: 0 w_t_id: 0]- nvcontainer.exe (elevated True) 0x0
18:53:45.1322788333ProcessInjector::HandlePendingProccesssFail to inject pending process |3868|: nvcontainer.exe
18:53:45.1322788394ProcessInjector::HandleElevatedProcessFail injection to process [9688] [t: 0 w_t_id: 0]- NVIDIA Share.exe (elevated True) 0x0
18:53:45.1322788333ProcessInjector::HandlePendingProccesssFail to inject pending process |9688|: NVIDIA Share.exe
18:53:45.1322788394ProcessInjector::HandleElevatedProcessFail injection to process [9880] [t: 0 w_t_id: 0]- NVIDIA Share.exe (elevated True) 0x0
18:53:45.1322788333ProcessInjector::HandlePendingProccesssFail to inject pending process |9880|: NVIDIA Share.exe
23:13:11.260BFC66ProcessesMonitor::Stopstopping PM...
23:13:11.261278C119ProcessesMonitor::ProcessEnumerateThreadexit process listener