TimeThreadLineFunctionMessage
10:36:37.79716E8361ftw1Loading (pid: 7768)
10:36:37.79916E848Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d11.dll) <0XAB830000>6|2|1247871522
10:36:37.80016E848Update::DetectEnv (C:\WINDOWS\SYSTEM32\dxgi.dll) <0XADFF0000>6|2|1247871522
10:36:37.8083988146ProcessHardwareRecorder::CommandThreadstarting recorder thread
10:36:38.13716E8172DXManager::DetectFound in 0
10:36:38.13816E8209Initialize::GetLocation@ 0X4F80|20352
10:36:38.13816E8209Initialize::GetLocation@ 0X69640|431680
10:36:38.13816E8209Initialize::GetLocation@ 0X206F0|132848
10:36:38.13816E8209Initialize::GetLocation@ 0X1DE0|7648
10:36:38.13816E8111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XAB830000 <> 0XADFF0000
10:36:38.13816E8209Initialize::GetLocation@ 0XFD968860|-40466336
10:36:38.13816E8111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XAB830000 <> 0XADFF0000
10:36:38.13816E8209Initialize::GetLocation@ 0XFD96DC30|-40444880
10:36:38.13816E8111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XAB830000 <> 0XADFF0000
10:36:38.13816E8209Initialize::GetLocation@ 0XFD96C5F0|-40450576
10:36:38.13816E8111Update::CaughtC:\WINDOWS\SYSTEM32\d3d11.dll|0XAB830000 <> 0XADFF0000
10:36:38.13816E8209Initialize::GetLocation@ 0XFD84A7F0|-41637904
10:36:38.14616E848Update::DetectEnv (C:\WINDOWS\SYSTEM32\d3d9.dll) <0X85A40000>6|2|1247871522
10:36:38.18616E8129DXManager::DetectOK
10:36:38.19416E8186DXManager::DetectDone
10:36:38.19416E8215VTableHolderD3d9::initd3d offsest [sht]: 0x4060 , 0x53c0
10:36:38.19416E8209Initialize::GetLocation@ 0X41060|266336
10:36:38.19416E8209Initialize::GetLocation@ 0X33320|209696
10:36:38.19416E8209Initialize::GetLocation@ 0X3CB90|248720
10:36:38.19416E8209Initialize::GetLocation@ 0XB75B0|751024
10:36:38.19416E8209Initialize::GetLocation@ 0XB7100|749824
10:36:38.19416E8209Initialize::GetLocation@ 0XA1F0|41456
10:36:38.19416E8209Initialize::GetLocation@ 0XB71A0|749984
10:36:38.19416E8209Initialize::GetLocation@ 0X1ABB0|109488
10:36:38.19416E8209Initialize::GetLocation@ 0X1D600|120320
10:36:38.19416E8209Initialize::GetLocation@ 0X25C30|154672
10:36:38.19416E8209Initialize::GetLocation@ 0X113820|1128480
10:36:38.19416E8209Initialize::GetLocation@ 0X1132E0|1127136
10:36:38.19416E8209Initialize::GetLocation@ 0X1AAA0|109216
10:36:38.19416E8209Initialize::GetLocation@ 0X1A9B0|108976
10:36:38.19416E8209Initialize::GetLocation@ 0XCB80|52096
10:36:38.19416E8209Initialize::GetLocation@ 0X47F90|294800
10:36:38.19416E8209Initialize::GetLocation@ 0X9D60|40288
10:36:38.19416E8209Initialize::GetLocation@ 0XCE7A0|845728
10:36:38.19416E8209Initialize::GetLocation@ 0XCEE70|847472
10:36:38.19416E8209Initialize::GetLocation@ 0X9D60|40288
10:36:38.19416E8209Initialize::GetLocation@ 0XCF960|850272
10:36:38.19416E8209Initialize::GetLocation@ 0XCFFC0|851904
10:36:38.20716E848Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput.dll) <0X934D0000>6|2|1247870977
10:36:38.25316E883VTableHolderDInput::initm_pDIW->CreateDevice - succeded.
10:36:38.25316E8209Initialize::GetLocation@ 0X4040|16448
10:36:38.25316E8209Initialize::GetLocation@ 0X6410|25616
10:36:38.25316E8209Initialize::GetLocation@ 0X65C0|26048
10:36:38.25916E848Update::DetectEnv (C:\WINDOWS\SYSTEM32\dinput8.dll) <0X8CAC0000>6|2|1247870977
10:36:38.26716E893VTableHolderDInput8::initm_pDI8W->CreateDevice - succeded.
10:36:38.26716E8110VTableHolderDInput8::initm_pDI8A->CreateDevice - succeded.
10:36:38.26716E8209Initialize::GetLocation@ 0XA5D0|42448
10:36:38.26716E8209Initialize::GetLocation@ 0XD4D0|54480
10:36:38.26716E8209Initialize::GetLocation@ 0XD290|53904
10:36:38.32216E8225InterProcessElement::openInterProcess Overwolf_SHARED_MEMORY_2_2_80_3_7768 opened succesfuly
10:36:38.32216E872HookFunctionsTableInitializer::SetHookFunctionsDataD3D9 Sht offsets 0x4060 , 0x53c0
10:36:38.32216E8256InterProcessElement::closeInterProcess Overwolf_SHARED_MEMORY_2_2_80_3_7768 close 2147483647 bytes
10:36:38.32216E8297InjectOWExplorerExplorer file name [C:\Program Files (x86)\Overwolf\0.157.2.17\OWExplorer.dll]
10:36:38.37216E8385ftw1OWExplorer injected
10:36:38.7032A1C51`anonymous-namespace'::CreateProviderInitialize provider: NET
10:36:38.7032A1C117libprocess::NetworkTracer::Initializeinit res:0x5 [started:0 active:0 enbaled:0]
10:36:38.7032A1C54`anonymous-namespace'::CreateProviderFail to initlized provider: NET
10:36:38.7032A1C51`anonymous-namespace'::CreateProviderInitialize provider: GPU
10:39:09.75937BC394ProcessInjector::HandleElevatedProcessFail injection to process [7884] [t: 0 w_t_id: 0]- lghub.exe (elevated True) 0x0
10:39:09.75937BC333ProcessInjector::HandlePendingProccesssFail to inject pending process |7884|: lghub.exe
10:39:09.76037BC394ProcessInjector::HandleElevatedProcessFail injection to process [9668] [t: 0 w_t_id: 0]- lghub.exe (elevated True) 0x0
10:39:09.76037BC333ProcessInjector::HandlePendingProccesssFail to inject pending process |9668|: lghub.exe
10:39:09.76037BC394ProcessInjector::HandleElevatedProcessFail injection to process [18680] [t: 0 w_t_id: 0]- MsMpEng.exe (elevated True) 0x0
10:39:09.76037BC333ProcessInjector::HandlePendingProccesssFail to inject pending process |18680|: MsMpEng.exe
10:39:36.1337BC394ProcessInjector::HandleElevatedProcessFail injection to process [10356] [t: 0 w_t_id: 0]- DTShellHlp.exe (elevated True) 0x0
10:39:36.1337BC333ProcessInjector::HandlePendingProccesssFail to inject pending process |10356|: DTShellHlp.exe
11:28:37.59916E866ProcessesMonitor::Stopstopping PM...
11:28:37.5992A1C119ProcessesMonitor::ProcessEnumerateThreadexit process listener
11:28:37.60016E8479ProcessInjector::Unhookunhook running process
11:28:43.61716E866ProcessesMonitor::Stopstopping PM...