TimeThreadLineFunctionMessage
01:15:24.12122BC365ftw1Loading (pid: 15352)
01:15:24.12222BC48Update::DetectEnv (C:\Windows\SYSTEM32\d3d11.dll) <0X6F040000>6|2|1247872178
01:15:24.12322BC48Update::DetectEnv (C:\Windows\SYSTEM32\dxgi.dll) <0X71C30000>6|2|1247872242
01:15:24.25122BC173DXManager::DetectFound in 0
01:15:24.25122BC209Initialize::GetLocation@ 0X2A40|10816
01:15:24.25122BC209Initialize::GetLocation@ 0X6AA70|436848
01:15:24.25122BC209Initialize::GetLocation@ 0X21390|136080
01:15:24.25122BC209Initialize::GetLocation@ 0X3C60|15456
01:15:24.25122BC111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0X6F040000 <> 0X71C30000
01:15:24.25122BC209Initialize::GetLocation@ 0XFD538860|-44857248
01:15:24.25222BC111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0X6F040000 <> 0X71C30000
01:15:24.25222BC209Initialize::GetLocation@ 0XFD53DC30|-44835792
01:15:24.25222BC111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0X6F040000 <> 0X71C30000
01:15:24.25222BC209Initialize::GetLocation@ 0XFD53C5F0|-44841488
01:15:24.25222BC111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0X6F040000 <> 0X71C30000
01:15:24.25222BC209Initialize::GetLocation@ 0XFD41A7F0|-46028816
01:15:24.26822BC48Update::DetectEnv (C:\Windows\SYSTEM32\d3d9.dll) <0X66740000>6|2|1247872363
01:15:24.40822BC129DXManager::DetectOK
01:15:24.46122BC186DXManager::DetectDone
01:15:24.46122BC215VTableHolderD3d9::initd3d offsest [sht]: 0x4060 , 0x55a0
01:15:24.46222BC209Initialize::GetLocation@ 0X43770|276336
01:15:24.46222BC209Initialize::GetLocation@ 0X3A070|237680
01:15:24.46222BC209Initialize::GetLocation@ 0X40050|262224
01:15:24.46222BC209Initialize::GetLocation@ 0XB9850|759888
01:15:24.46222BC209Initialize::GetLocation@ 0XB93A0|758688
01:15:24.46222BC209Initialize::GetLocation@ 0XA9F0|43504
01:15:24.46222BC209Initialize::GetLocation@ 0XB9440|758848
01:15:24.46222BC209Initialize::GetLocation@ 0X1B820|112672
01:15:24.46222BC209Initialize::GetLocation@ 0X1E270|123504
01:15:24.46222BC209Initialize::GetLocation@ 0X268A0|157856
01:15:24.46222BC209Initialize::GetLocation@ 0X115100|1134848
01:15:24.46222BC209Initialize::GetLocation@ 0X114BC0|1133504
01:15:24.46222BC209Initialize::GetLocation@ 0X1B710|112400
01:15:24.46222BC209Initialize::GetLocation@ 0X1B620|112160
01:15:24.46222BC209Initialize::GetLocation@ 0XD380|54144
01:15:24.46222BC209Initialize::GetLocation@ 0X4B1C0|307648
01:15:24.46222BC209Initialize::GetLocation@ 0XA560|42336
01:15:24.46222BC209Initialize::GetLocation@ 0XD0A40|854592
01:15:24.46222BC209Initialize::GetLocation@ 0XD1110|856336
01:15:24.46222BC209Initialize::GetLocation@ 0XA560|42336
01:15:24.46222BC209Initialize::GetLocation@ 0XD1C00|859136
01:15:24.46222BC209Initialize::GetLocation@ 0XD2260|860768
01:15:24.47822BC48Update::DetectEnv (C:\Windows\SYSTEM32\dinput.dll) <0XF270000>6|2|1247870977
01:15:24.48822BC83VTableHolderDInput::initm_pDIW->CreateDevice - succeded.
01:15:24.48822BC209Initialize::GetLocation@ 0X4040|16448
01:15:24.48822BC209Initialize::GetLocation@ 0X6410|25616
01:15:24.48822BC209Initialize::GetLocation@ 0X65C0|26048
01:15:24.49122BC48Update::DetectEnv (C:\Windows\SYSTEM32\dinput8.dll) <0XF220000>6|2|1247870977
01:15:24.49822BC93VTableHolderDInput8::initm_pDI8W->CreateDevice - succeded.
01:15:24.49822BC110VTableHolderDInput8::initm_pDI8A->CreateDevice - succeded.
01:15:24.49922BC209Initialize::GetLocation@ 0XA5D0|42448
01:15:24.49922BC209Initialize::GetLocation@ 0XD4D0|54480
01:15:24.49922BC209Initialize::GetLocation@ 0XD290|53904
01:15:24.56322BC225InterProcessElement::openInterProcess Overwolf_SHARED_MEMORY_2_2_18915352 opened succesfuly
01:15:24.56322BC72HookFunctionsTableInitializer::SetHookFunctionsDataD3D9 Sht offsets 0x4060 , 0x55a0
01:15:24.56322BC255InterProcessElement::closeInterProcess Overwolf_SHARED_MEMORY_2_2_18915352 close 2147483647 bytes
01:15:24.56822BC301InjectOWExplorerExplorer file name [C:\Program Files (x86)\Overwolf\0.188.0.22\OWExplorer.dll]
01:15:24.57722BC389ftw1OWExplorer injected
01:15:24.577467C71Common::ProcessExplorer::ProcessTrackerIPCAgent::OnConnectedconnected to process tracker server
01:15:24.9241F2853`anonymous-namespace'::CreateProviderInitialize provider: NET
01:15:24.9241F28117libprocess::NetworkTracer::Initializeinit res:0x5 [started:0 active:0 enbaled:0]
01:15:24.9241F2856`anonymous-namespace'::CreateProviderFail to initlized provider: NET
01:15:24.9241F2853`anonymous-namespace'::CreateProviderInitialize provider: GPU
01:17:25.4301D40267ProcessInjector::HandlePendingProccesssprocess detection skipped |148| (w: 0x0): Registry
01:17:25.4301D40267ProcessInjector::HandlePendingProccesssprocess detection skipped |2156| (w: 0x0): \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_b8346c359fcd6093\Display.NvContainer\NVDisplay.Container.exe
01:17:25.4301D40267ProcessInjector::HandlePendingProccesssprocess detection skipped |2376| (w: 0x0): \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_b8346c359fcd6093\Display.NvContainer\NVDisplay.Container.exe
01:17:25.4301D40267ProcessInjector::HandlePendingProccesssprocess detection skipped |2672| (w: 0x0): MemCompression
01:17:25.4301D40267ProcessInjector::HandlePendingProccesssprocess detection skipped |4300| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\ASUS\AXSP\4.00.42\atkexComSvc.exe
01:17:25.4301D40267ProcessInjector::HandlePendingProccesssprocess detection skipped |4352| (w: 0x0): \Device\HarddiskVolume3\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
01:17:25.4301D40267ProcessInjector::HandlePendingProccesssprocess detection skipped |4432| (w: 0x0): \Device\HarddiskVolume3\Program Files\LGHUB\lghub_updater.exe
01:17:25.4301D40267ProcessInjector::HandlePendingProccesssprocess detection skipped |5000| (w: 0x0): \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.GamingServices_3.60.12001.0_x64__8wekyb3d8bbwe\gamingservicesnet.exe
01:17:25.4301D40267ProcessInjector::HandlePendingProccesssprocess detection skipped |5028| (w: 0x0): \Device\HarddiskVolume3\Program Files\WindowsApps\Microsoft.GamingServices_3.60.12001.0_x64__8wekyb3d8bbwe\gamingservices.exe
01:17:25.4301D40267ProcessInjector::HandlePendingProccesssprocess detection skipped |6592| (w: 0x0): C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
01:17:25.4301D40267ProcessInjector::HandlePendingProccesssprocess detection skipped |6740| (w: 0x0): C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
01:17:25.4301D40267ProcessInjector::HandlePendingProccesssprocess detection skipped |10236| (w: 0x0): C:\Program Files\WindowsApps\Microsoft.YourPhone_1.21052.122.0_x64__8wekyb3d8bbwe\YourPhone.exe
01:17:25.4301D40267ProcessInjector::HandlePendingProccesssprocess detection skipped |10548| (w: 0x0): C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
01:17:25.4301D40267ProcessInjector::HandlePendingProccesssprocess detection skipped |11212| (w: 0x0): C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
01:17:25.4301D40267ProcessInjector::HandlePendingProccesssprocess detection skipped |11408| (w: 0x0): C:\Program Files\Riot Vanguard\vgtray.exe
01:17:25.4301D40267ProcessInjector::HandlePendingProccesssprocess detection skipped |11888| (w: 0x0): C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
01:17:25.4301D40267ProcessInjector::HandlePendingProccesssprocess detection skipped |14548| (w: 0x0): C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe
01:21:47.2751D40267ProcessInjector::HandlePendingProccesssprocess detection skipped |10200| (w: 0x0): \Device\HarddiskVolume3\Program Files (x86)\UCBrowser\Application\6.0.1308.1016\UCAgent.exe