TimeThreadLineFunctionMessage
17:43:01.80847FC361ftw1Loading (pid: 14964)
17:43:01.8084410146ProcessHardwareRecorder::CommandThreadstarting recorder thread
17:43:01.81047FC48Update::DetectEnv (C:\Windows\SYSTEM32\d3d11.dll) <0X4F200000>6|2|1203373203
17:43:01.81047FC48Update::DetectEnv (C:\Windows\SYSTEM32\dxgi.dll) <0X50CD0000>6|2|1203373081
17:43:01.89747FC172DXManager::DetectFound in 0
17:43:01.89747FC209Initialize::GetLocation@ 0X4660|18016
17:43:01.89747FC209Initialize::GetLocation@ 0X661F0|418288
17:43:01.89747FC209Initialize::GetLocation@ 0X19DB0|105904
17:43:01.89747FC209Initialize::GetLocation@ 0X1350|4944
17:43:01.89747FC111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0X4F200000 <> 0X50CD0000
17:43:01.89747FC209Initialize::GetLocation@ 0XFE653020|-26922976
17:43:01.89747FC111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0X4F200000 <> 0X50CD0000
17:43:01.89747FC209Initialize::GetLocation@ 0XFE658060|-26902432
17:43:01.89747FC111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0X4F200000 <> 0X50CD0000
17:43:01.89747FC209Initialize::GetLocation@ 0XFE64E620|-26941920
17:43:01.89747FC111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0X4F200000 <> 0X50CD0000
17:43:01.89747FC209Initialize::GetLocation@ 0XFE53AA80|-28071296
17:43:01.90847FC48Update::DetectEnv (C:\Windows\SYSTEM32\d3d9.dll) <0X45C70000>6|2|1203373142
17:43:01.99847FC129DXManager::DetectOK
17:43:02.3247FC186DXManager::DetectDone
17:43:02.3247FC215VTableHolderD3d9::initd3d offsest [sht]: 0x4060 , 0x53c0
17:43:02.3247FC209Initialize::GetLocation@ 0X3AC00|240640
17:43:02.3247FC209Initialize::GetLocation@ 0X2C5B0|181680
17:43:02.3247FC209Initialize::GetLocation@ 0X36D00|224512
17:43:02.3247FC209Initialize::GetLocation@ 0XAE210|713232
17:43:02.3247FC209Initialize::GetLocation@ 0XADD60|712032
17:43:02.3247FC209Initialize::GetLocation@ 0X5880|22656
17:43:02.3247FC209Initialize::GetLocation@ 0XADE00|712192
17:43:02.3247FC209Initialize::GetLocation@ 0X20FF0|135152
17:43:02.3247FC209Initialize::GetLocation@ 0X1CA60|117344
17:43:02.3247FC209Initialize::GetLocation@ 0X1C8E0|116960
17:43:02.3247FC209Initialize::GetLocation@ 0X1086D0|1083088
17:43:02.3247FC209Initialize::GetLocation@ 0X108180|1081728
17:43:02.3247FC209Initialize::GetLocation@ 0X248B0|149680
17:43:02.3247FC209Initialize::GetLocation@ 0X247A0|149408
17:43:02.3247FC209Initialize::GetLocation@ 0X2C440|181312
17:43:02.3247FC209Initialize::GetLocation@ 0X3F3F0|259056
17:43:02.3247FC209Initialize::GetLocation@ 0XF3E0|62432
17:43:02.3247FC209Initialize::GetLocation@ 0XF4E0|62688
17:43:02.3247FC209Initialize::GetLocation@ 0XF5D0|62928
17:43:02.3247FC209Initialize::GetLocation@ 0XF3E0|62432
17:43:02.3247FC209Initialize::GetLocation@ 0XF280|62080
17:43:02.3247FC209Initialize::GetLocation@ 0XF430|62512
17:43:02.4647FC48Update::DetectEnv (C:\Windows\SYSTEM32\dinput.dll) <0XE7610000>6|2|1203372033
17:43:02.6247FC83VTableHolderDInput::initm_pDIW->CreateDevice - succeded.
17:43:02.6347FC209Initialize::GetLocation@ 0X3CC0|15552
17:43:02.6347FC209Initialize::GetLocation@ 0X5FD0|24528
17:43:02.6347FC209Initialize::GetLocation@ 0X6180|24960
17:43:02.6347FC48Update::DetectEnv (C:\Windows\SYSTEM32\dinput8.dll) <0X37330000>6|2|1203372033
17:43:02.7047FC93VTableHolderDInput8::initm_pDI8W->CreateDevice - succeded.
17:43:02.7147FC110VTableHolderDInput8::initm_pDI8A->CreateDevice - succeded.
17:43:02.7147FC209Initialize::GetLocation@ 0X10000|65536
17:43:02.7147FC209Initialize::GetLocation@ 0X12C80|76928
17:43:02.7147FC209Initialize::GetLocation@ 0X12A60|76384
17:43:02.13147FC225InterProcessElement::openInterProcess Overwolf_SHARED_MEMORY_2_2_81_2_14964 opened succesfuly
17:43:02.13147FC72HookFunctionsTableInitializer::SetHookFunctionsDataD3D9 Sht offsets 0x4060 , 0x53c0
17:43:02.13147FC256InterProcessElement::closeInterProcess Overwolf_SHARED_MEMORY_2_2_81_2_14964 close 2147483647 bytes
17:43:02.13147FC297InjectOWExplorerExplorer file name [G:\Facecheck\Overwolf\0.158.1.1\OWExplorer.dll]
17:43:02.13647FC385ftw1OWExplorer injected
17:43:02.24145F451`anonymous-namespace'::CreateProviderInitialize provider: NET
17:43:02.24145F4117libprocess::NetworkTracer::Initializeinit res:0x5 [started:0 active:0 enbaled:0]
17:43:02.24145F454`anonymous-namespace'::CreateProviderFail to initlized provider: NET
17:43:02.24145F451`anonymous-namespace'::CreateProviderInitialize provider: GPU
17:45:33.18145F8394ProcessInjector::HandleElevatedProcessFail injection to process [1872] [t: 0 w_t_id: 0]- NVDisplay.Container.exe (elevated True) 0x0
17:45:33.18145F8333ProcessInjector::HandlePendingProccesssFail to inject pending process |1872|: NVDisplay.Container.exe
17:45:33.18145F8394ProcessInjector::HandleElevatedProcessFail injection to process [3632] [t: 0 w_t_id: 0]- NVIDIA Share.exe (elevated True) 0x0
17:45:33.18145F8333ProcessInjector::HandlePendingProccesssFail to inject pending process |3632|: NVIDIA Share.exe
17:45:33.18145F8394ProcessInjector::HandleElevatedProcessFail injection to process [4520] [t: 0 w_t_id: 0]- nvcontainer.exe (elevated True) 0x0
17:45:33.18145F8333ProcessInjector::HandlePendingProccesssFail to inject pending process |4520|: nvcontainer.exe
17:45:33.18145F8394ProcessInjector::HandleElevatedProcessFail injection to process [12796] [t: 0 w_t_id: 0]- NVIDIA Share.exe (elevated True) 0x0
17:45:33.18145F8333ProcessInjector::HandlePendingProccesssFail to inject pending process |12796|: NVIDIA Share.exe
17:45:33.18145F8394ProcessInjector::HandleElevatedProcessFail injection to process [14552] [t: 0 w_t_id: 0]- lghub.exe (elevated True) 0x0
17:45:33.18145F8333ProcessInjector::HandlePendingProccesssFail to inject pending process |14552|: lghub.exe
17:45:33.18145F8394ProcessInjector::HandleElevatedProcessFail injection to process [15388] [t: 0 w_t_id: 0]- lghub.exe (elevated True) 0x0
17:45:33.18145F8333ProcessInjector::HandlePendingProccesssFail to inject pending process |15388|: lghub.exe
17:47:20.20545F8394ProcessInjector::HandleElevatedProcessFail injection to process [7548] [t: 0 w_t_id: 0]- FPSAimTrainer.exe (elevated True) 0x0
17:47:20.20545F8333ProcessInjector::HandlePendingProccesssFail to inject pending process |7548|: FPSAimTrainer.exe
20:26:54.65647FC66ProcessesMonitor::Stopstopping PM...
20:26:54.65645F4119ProcessesMonitor::ProcessEnumerateThreadexit process listener
20:26:54.65747FC479ProcessInjector::Unhookunhook running process