TimeThreadLineFunctionMessage
09:43:21.1684290361ftw1Loading (pid: 14148)
09:43:21.173429048Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d11.dll) <0XF4B70000>6|2|1203372419
09:43:21.173429048Update::DetectEnv (C:\WINDOWS\SYSTEM32\dxgi.dll) <0XF6A60000>6|2|1203372847
09:43:21.187415C146ProcessHardwareRecorder::CommandThreadstarting recorder thread
09:43:21.3334290172DXManager::DetectFound in 0
09:43:21.3334290209Initialize::GetLocation@ 0X4670|18032
09:43:21.3334290209Initialize::GetLocation@ 0X66400|418816
09:43:21.3334290209Initialize::GetLocation@ 0X19DE0|105952
09:43:21.3334290209Initialize::GetLocation@ 0X1350|4944
09:43:21.3334290111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XF4B70000 <> 0XF6A60000
09:43:21.3334290209Initialize::GetLocation@ 0XFE232E80|-31248768
09:43:21.3334290111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XF4B70000 <> 0XF6A60000
09:43:21.3334290209Initialize::GetLocation@ 0XFE237F80|-31228032
09:43:21.3334290111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XF4B70000 <> 0XF6A60000
09:43:21.3334290209Initialize::GetLocation@ 0XFE22E620|-31267296
09:43:21.3334290111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XF4B70000 <> 0XF6A60000
09:43:21.3334290209Initialize::GetLocation@ 0XFE11AD10|-32396016
09:43:21.426429048Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d9.dll) <0XEB9C0000>6|2|1203372419
09:43:22.3124290129DXManager::DetectOK
09:43:22.3754290186DXManager::DetectDone
09:43:22.3754290215VTableHolderD3d9::initd3d offsest [sht]: 0x4060 , 0x53c0
09:43:22.3754290209Initialize::GetLocation@ 0X3AC00|240640
09:43:22.3754290209Initialize::GetLocation@ 0X2C5B0|181680
09:43:22.3754290209Initialize::GetLocation@ 0X36D00|224512
09:43:22.3754290209Initialize::GetLocation@ 0XAE020|712736
09:43:22.3754290209Initialize::GetLocation@ 0XADB70|711536
09:43:22.3754290209Initialize::GetLocation@ 0X5880|22656
09:43:22.3754290209Initialize::GetLocation@ 0XADC10|711696
09:43:22.3754290209Initialize::GetLocation@ 0X20FF0|135152
09:43:22.3754290209Initialize::GetLocation@ 0X1CA60|117344
09:43:22.3754290209Initialize::GetLocation@ 0X1C8E0|116960
09:43:22.3754290209Initialize::GetLocation@ 0X1084E0|1082592
09:43:22.3754290209Initialize::GetLocation@ 0X107F90|1081232
09:43:22.3754290209Initialize::GetLocation@ 0X248B0|149680
09:43:22.3754290209Initialize::GetLocation@ 0X247A0|149408
09:43:22.3754290209Initialize::GetLocation@ 0X2C440|181312
09:43:22.3754290209Initialize::GetLocation@ 0X3F210|258576
09:43:22.3754290209Initialize::GetLocation@ 0XF3E0|62432
09:43:22.3754290209Initialize::GetLocation@ 0XF4E0|62688
09:43:22.3754290209Initialize::GetLocation@ 0XF5D0|62928
09:43:22.3754290209Initialize::GetLocation@ 0XF3E0|62432
09:43:22.3754290209Initialize::GetLocation@ 0XF280|62080
09:43:22.3754290209Initialize::GetLocation@ 0XF430|62512
09:43:22.578429048Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput.dll) <0XC9310000>6|2|1203372033
09:43:23.124429083VTableHolderDInput::initm_pDIW->CreateDevice - succeded.
09:43:23.1244290209Initialize::GetLocation@ 0X3CC0|15552
09:43:23.1244290209Initialize::GetLocation@ 0X5FD0|24528
09:43:23.1244290209Initialize::GetLocation@ 0X6180|24960
09:43:23.201429048Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput8.dll) <0X8F790000>6|2|1203372033
09:43:23.231429093VTableHolderDInput8::initm_pDI8W->CreateDevice - succeded.
09:43:23.2324290110VTableHolderDInput8::initm_pDI8A->CreateDevice - succeded.
09:43:23.2324290209Initialize::GetLocation@ 0X10000|65536
09:43:23.2324290209Initialize::GetLocation@ 0X12C80|76928
09:43:23.2324290209Initialize::GetLocation@ 0X12A60|76384
09:43:23.2854290225InterProcessElement::openInterProcess Overwolf_SHARED_MEMORY_2_2_78_12_14148 opened succesfuly
09:43:23.285429072HookFunctionsTableInitializer::SetHookFunctionsDataD3D9 Sht offsets 0x4060 , 0x53c0
09:43:23.2854290256InterProcessElement::closeInterProcess Overwolf_SHARED_MEMORY_2_2_78_12_14148 close 2147483647 bytes
09:43:23.2854290297InjectOWExplorerExplorer file name [C:\Program Files (x86)\Overwolf\0.148.0.4\OWExplorer.dll]
09:43:23.3724290385ftw1OWExplorer injected
09:43:23.9692F0051`anonymous-namespace'::CreateProviderInitialize provider: NET
09:43:23.9702F00117libprocess::NetworkTracer::Initializeinit res:0x5 [started:0 active:0 enbaled:0]
09:43:23.9702F0054`anonymous-namespace'::CreateProviderFail to initlized provider: NET
09:43:23.9702F0051`anonymous-namespace'::CreateProviderInitialize provider: GPU
09:45:54.81027E0352ProcessInjector::HandleElevatedProcessFail injection to process [2288] [t: 0 w_t_id: 0]- NVDisplay.Container.exe (elevated True) 0x578
09:45:54.81027E0291ProcessInjector::HandlePendingProccesssFail to inject pending process |2288|: NVDisplay.Container.exe
09:45:54.81027E0352ProcessInjector::HandleElevatedProcessFail injection to process [4660] [t: 0 w_t_id: 0]- nvcontainer.exe (elevated True) 0x578
09:45:54.81027E0291ProcessInjector::HandlePendingProccesssFail to inject pending process |4660|: nvcontainer.exe
09:45:54.81027E0352ProcessInjector::HandleElevatedProcessFail injection to process [4776] [t: 0 w_t_id: 0]- MsMpEng.exe (elevated True) 0x578
09:45:54.81027E0291ProcessInjector::HandlePendingProccesssFail to inject pending process |4776|: MsMpEng.exe
09:45:54.81027E0352ProcessInjector::HandleElevatedProcessFail injection to process [11988] [t: 0 w_t_id: 0]- googledrivesync.exe (elevated True) 0x578
09:45:54.81027E0291ProcessInjector::HandlePendingProccesssFail to inject pending process |11988|: googledrivesync.exe
09:45:54.81027E0352ProcessInjector::HandleElevatedProcessFail injection to process [12860] [t: 0 w_t_id: 0]- node.exe (elevated True) 0x578
09:45:54.81027E0291ProcessInjector::HandlePendingProccesssFail to inject pending process |12860|: node.exe
09:45:54.81027E0352ProcessInjector::HandleElevatedProcessFail injection to process [13240] [t: 0 w_t_id: 0]- CCXProcess.exe (elevated True) 0x578
09:45:54.81027E0291ProcessInjector::HandlePendingProccesssFail to inject pending process |13240|: CCXProcess.exe
09:45:54.81027E0352ProcessInjector::HandleElevatedProcessFail injection to process [15956] [t: 0 w_t_id: 0]- OverwolfTSHelper.exe (elevated True) 0x578
09:45:54.81027E0291ProcessInjector::HandlePendingProccesssFail to inject pending process |15956|: OverwolfTSHelper.exe
09:47:26.82727E0352ProcessInjector::HandleElevatedProcessFail injection to process [2432] [t: 0 w_t_id: 0]- splwow64.exe (elevated True) 0x578
09:47:26.82727E0291ProcessInjector::HandlePendingProccesssFail to inject pending process |2432|: splwow64.exe
15:28:36.5727E0352ProcessInjector::HandleElevatedProcessFail injection to process [7204] [t: 0 w_t_id: 0]- NVIDIA GeForce Experience.exe (elevated True) 0x0
15:28:36.5827E0291ProcessInjector::HandlePendingProccesssFail to inject pending process |7204|: NVIDIA GeForce Experience.exe
16:45:38.55527E0352ProcessInjector::HandleElevatedProcessFail injection to process [13552] [t: 0 w_t_id: 0]- VALORANT.exe (elevated True) 0x0
16:45:38.55527E0291ProcessInjector::HandlePendingProccesssFail to inject pending process |13552|: VALORANT.exe
18:23:15.404429066ProcessesMonitor::Stopstopping PM...
18:23:15.4042F00119ProcessesMonitor::ProcessEnumerateThreadexit process listener