TimeThreadLineFunctionMessage
16:16:31.6512F30361ftw1Loading (pid: 15904)
16:16:31.651415C146ProcessHardwareRecorder::CommandThreadstarting recorder thread
16:16:31.6532F3048Update::DetectEnv (C:\Windows\SYSTEM32\d3d11.dll) <0X901C0000>6|2|1203372419
16:16:31.6532F3048Update::DetectEnv (C:\Windows\SYSTEM32\dxgi.dll) <0X92180000>6|2|1203372847
16:16:32.42F30172DXManager::DetectFound in 0
16:16:32.52F30209Initialize::GetLocation@ 0X4670|18032
16:16:32.52F30209Initialize::GetLocation@ 0X66400|418816
16:16:32.52F30209Initialize::GetLocation@ 0X19DE0|105952
16:16:32.52F30209Initialize::GetLocation@ 0X1350|4944
16:16:32.52F30111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0X901C0000 <> 0X92180000
16:16:32.52F30209Initialize::GetLocation@ 0XFE162E80|-32100736
16:16:32.52F30111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0X901C0000 <> 0X92180000
16:16:32.52F30209Initialize::GetLocation@ 0XFE167F80|-32080000
16:16:32.52F30111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0X901C0000 <> 0X92180000
16:16:32.52F30209Initialize::GetLocation@ 0XFE15E620|-32119264
16:16:32.52F30111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0X901C0000 <> 0X92180000
16:16:32.52F30209Initialize::GetLocation@ 0XFE04AD10|-33247984
16:16:32.222F3048Update::DetectEnv (C:\Windows\SYSTEM32\d3d9.dll) <0X89450000>6|2|1203372419
16:16:32.842F30129DXManager::DetectOK
16:16:32.1192F30186DXManager::DetectDone
16:16:32.1192F30215VTableHolderD3d9::initd3d offsest [sht]: 0x4060 , 0x53c0
16:16:32.1202F30209Initialize::GetLocation@ 0X3AC00|240640
16:16:32.1202F30209Initialize::GetLocation@ 0X2C5B0|181680
16:16:32.1202F30209Initialize::GetLocation@ 0X36D00|224512
16:16:32.1202F30209Initialize::GetLocation@ 0XAE020|712736
16:16:32.1202F30209Initialize::GetLocation@ 0XADB70|711536
16:16:32.1202F30209Initialize::GetLocation@ 0X5880|22656
16:16:32.1202F30209Initialize::GetLocation@ 0XADC10|711696
16:16:32.1202F30209Initialize::GetLocation@ 0X20FF0|135152
16:16:32.1202F30209Initialize::GetLocation@ 0X1CA60|117344
16:16:32.1202F30209Initialize::GetLocation@ 0X1C8E0|116960
16:16:32.1202F30209Initialize::GetLocation@ 0X1084E0|1082592
16:16:32.1202F30209Initialize::GetLocation@ 0X107F90|1081232
16:16:32.1202F30209Initialize::GetLocation@ 0X248B0|149680
16:16:32.1202F30209Initialize::GetLocation@ 0X247A0|149408
16:16:32.1202F30209Initialize::GetLocation@ 0X2C440|181312
16:16:32.1202F30209Initialize::GetLocation@ 0X3F210|258576
16:16:32.1202F30209Initialize::GetLocation@ 0XF3E0|62432
16:16:32.1202F30209Initialize::GetLocation@ 0XF4E0|62688
16:16:32.1202F30209Initialize::GetLocation@ 0XF5D0|62928
16:16:32.1202F30209Initialize::GetLocation@ 0XF3E0|62432
16:16:32.1202F30209Initialize::GetLocation@ 0XF280|62080
16:16:32.1202F30209Initialize::GetLocation@ 0XF430|62512
16:16:32.1482F3048Update::DetectEnv (C:\Windows\SYSTEM32\dinput.dll) <0X7AC90000>6|2|1203372033
16:16:32.2662F3083VTableHolderDInput::initm_pDIW->CreateDevice - succeded.
16:16:32.2662F30209Initialize::GetLocation@ 0X3CC0|15552
16:16:32.2662F30209Initialize::GetLocation@ 0X5FD0|24528
16:16:32.2662F30209Initialize::GetLocation@ 0X6180|24960
16:16:32.2682F3048Update::DetectEnv (C:\Windows\SYSTEM32\dinput8.dll) <0X63250000>6|2|1203372033
16:16:32.2752F3093VTableHolderDInput8::initm_pDI8W->CreateDevice - succeded.
16:16:32.2762F30110VTableHolderDInput8::initm_pDI8A->CreateDevice - succeded.
16:16:32.2762F30209Initialize::GetLocation@ 0X10000|65536
16:16:32.2762F30209Initialize::GetLocation@ 0X12C80|76928
16:16:32.2762F30209Initialize::GetLocation@ 0X12A60|76384
16:16:32.3342F30225InterProcessElement::openInterProcess Overwolf_SHARED_MEMORY_2_2_78_13_15904 opened succesfuly
16:16:32.3342F3072HookFunctionsTableInitializer::SetHookFunctionsDataD3D9 Sht offsets 0x4060 , 0x53c0
16:16:32.3342F30256InterProcessElement::closeInterProcess Overwolf_SHARED_MEMORY_2_2_78_13_15904 close 2147483647 bytes
16:16:32.3342F30297InjectOWExplorerExplorer file name [C:\Program Files (x86)\Overwolf\0.148.81.15\OWExplorer.dll]
16:16:32.3722F30385ftw1OWExplorer injected
16:16:32.617335851`anonymous-namespace'::CreateProviderInitialize provider: NET
16:16:32.6183358117libprocess::NetworkTracer::Initializeinit res:0x5 [started:0 active:0 enbaled:0]
16:16:32.618335854`anonymous-namespace'::CreateProviderFail to initlized provider: NET
16:16:32.618335851`anonymous-namespace'::CreateProviderInitialize provider: GPU
16:19:03.35130D0352ProcessInjector::HandleElevatedProcessFail injection to process [796] [t: 0 w_t_id: 0]- NVDisplay.Container.exe (elevated True) 0x0
16:19:03.35130D0291ProcessInjector::HandlePendingProccesssFail to inject pending process |796|: NVDisplay.Container.exe
16:19:03.35130D0352ProcessInjector::HandleElevatedProcessFail injection to process [2232] [t: 0 w_t_id: 0]- NVIDIA Share.exe (elevated True) 0x0
16:19:03.35130D0291ProcessInjector::HandlePendingProccesssFail to inject pending process |2232|: NVIDIA Share.exe
16:19:03.35130D0352ProcessInjector::HandleElevatedProcessFail injection to process [4104] [t: 0 w_t_id: 0]- nvcontainer.exe (elevated True) 0x0
16:19:03.35130D0291ProcessInjector::HandlePendingProccesssFail to inject pending process |4104|: nvcontainer.exe
16:19:03.35130D0352ProcessInjector::HandleElevatedProcessFail injection to process [12300] [t: 0 w_t_id: 0]- lghub.exe (elevated True) 0x0
16:19:03.35130D0291ProcessInjector::HandlePendingProccesssFail to inject pending process |12300|: lghub.exe
16:19:03.35130D0352ProcessInjector::HandleElevatedProcessFail injection to process [14900] [t: 0 w_t_id: 0]- NVIDIA Share.exe (elevated True) 0x0
16:19:03.35130D0291ProcessInjector::HandlePendingProccesssFail to inject pending process |14900|: NVIDIA Share.exe
16:19:03.35130D0352ProcessInjector::HandleElevatedProcessFail injection to process [15240] [t: 0 w_t_id: 0]- Nahimic2Svc64.exe (elevated True) 0x0
16:19:03.35130D0291ProcessInjector::HandlePendingProccesssFail to inject pending process |15240|: Nahimic2Svc64.exe
16:19:03.35130D0352ProcessInjector::HandleElevatedProcessFail injection to process [15916] [t: 0 w_t_id: 0]- MsMpEng.exe (elevated True) 0x0
16:19:03.35130D0291ProcessInjector::HandlePendingProccesssFail to inject pending process |15916|: MsMpEng.exe
20:20:10.4592F3066ProcessesMonitor::Stopstopping PM...
20:20:10.4593358119ProcessesMonitor::ProcessEnumerateThreadexit process listener