TimeThreadLineFunctionMessage
08:57:27.3523C14361ftw1Loading (pid: 5868)
08:57:27.353426C146ProcessHardwareRecorder::CommandThreadstarting recorder thread
08:57:27.3533C1448Update::DetectEnv (C:\Windows\SYSTEM32\d3d11.dll) <0XFBFF0000>6|2|1164117043
08:57:27.3533C1448Update::DetectEnv (C:\Windows\SYSTEM32\dxgi.dll) <0XFDDF0000>6|2|1164117043
08:57:27.4313C14172DXManager::DetectFound in 0
08:57:27.4313C14209Initialize::GetLocation@ 0X4910|18704
08:57:27.4313C14209Initialize::GetLocation@ 0X632A0|406176
08:57:27.4313C14209Initialize::GetLocation@ 0X1EF30|126768
08:57:27.4313C14209Initialize::GetLocation@ 0X1D70|7536
08:57:27.4313C14111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0XFBFF0000 <> 0XFDDF0000
08:57:27.4313C14209Initialize::GetLocation@ 0XFE32AB00|-30233856
08:57:27.4313C14111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0XFBFF0000 <> 0XFDDF0000
08:57:27.4313C14209Initialize::GetLocation@ 0XFE331400|-30206976
08:57:27.4313C14111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0XFBFF0000 <> 0XFDDF0000
08:57:27.4313C14209Initialize::GetLocation@ 0XFE326DE0|-30249504
08:57:27.4313C14111Update::CaughtC:\Windows\SYSTEM32\d3d11.dll|0XFBFF0000 <> 0XFDDF0000
08:57:27.4313C14209Initialize::GetLocation@ 0XFE20E9B0|-31397456
08:57:27.4503C1448Update::DetectEnv (C:\Windows\SYSTEM32\d3d9.dll) <0XF3850000>6|2|1164117043
08:57:27.5783C14129DXManager::DetectOK
08:57:27.6073C14186DXManager::DetectDone
08:57:27.6083C14215VTableHolderD3d9::initd3d offsest [sht]: 0x4060 , 0x53c0
08:57:27.6083C14209Initialize::GetLocation@ 0X3A0A0|237728
08:57:27.6083C14209Initialize::GetLocation@ 0X2DE30|187952
08:57:27.6083C14209Initialize::GetLocation@ 0X35CA0|220320
08:57:27.6083C14209Initialize::GetLocation@ 0XAA4C0|697536
08:57:27.6083C14209Initialize::GetLocation@ 0XAA010|696336
08:57:27.6083C14209Initialize::GetLocation@ 0X62B0|25264
08:57:27.6083C14209Initialize::GetLocation@ 0XAA0B0|696496
08:57:27.6083C14209Initialize::GetLocation@ 0X25E00|155136
08:57:27.6083C14209Initialize::GetLocation@ 0X1E290|123536
08:57:27.6083C14209Initialize::GetLocation@ 0X1E110|123152
08:57:27.6083C14209Initialize::GetLocation@ 0XEBA90|965264
08:57:27.6083C14209Initialize::GetLocation@ 0XEB540|963904
08:57:27.6083C14209Initialize::GetLocation@ 0X25F30|155440
08:57:27.6083C14209Initialize::GetLocation@ 0X25CF0|154864
08:57:27.6083C14209Initialize::GetLocation@ 0X2DCE0|187616
08:57:27.6083C14209Initialize::GetLocation@ 0X3D010|249872
08:57:27.6083C14209Initialize::GetLocation@ 0X10CD0|68816
08:57:27.6083C14209Initialize::GetLocation@ 0X10DD0|69072
08:57:27.6083C14209Initialize::GetLocation@ 0X10EC0|69312
08:57:27.6083C14209Initialize::GetLocation@ 0X10CD0|68816
08:57:27.6083C14209Initialize::GetLocation@ 0X10B70|68464
08:57:27.6083C14209Initialize::GetLocation@ 0X10D20|68896
08:57:27.6303C1448Update::DetectEnv (C:\Windows\SYSTEM32\dinput.dll) <0XD0D90000>6|2|1164115969
08:57:27.8213C1483VTableHolderDInput::initm_pDIW->CreateDevice - succeded.
08:57:27.8213C14209Initialize::GetLocation@ 0X3D10|15632
08:57:27.8213C14209Initialize::GetLocation@ 0X6130|24880
08:57:27.8213C14209Initialize::GetLocation@ 0X62E0|25312
08:57:27.8243C1448Update::DetectEnv (C:\Windows\SYSTEM32\dinput8.dll) <0XD04F0000>6|2|1164115969
08:57:27.8293C1493VTableHolderDInput8::initm_pDI8W->CreateDevice - succeded.
08:57:27.8293C14110VTableHolderDInput8::initm_pDI8A->CreateDevice - succeded.
08:57:27.8293C14209Initialize::GetLocation@ 0X100B0|65712
08:57:27.8293C14209Initialize::GetLocation@ 0X12DE0|77280
08:57:27.8293C14209Initialize::GetLocation@ 0X12BB0|76720
08:57:27.8833C14225InterProcessElement::openInterProcess Overwolf_SHARED_MEMORY_2_2_78_14_5868 opened succesfuly
08:57:27.8833C1472HookFunctionsTableInitializer::SetHookFunctionsDataD3D9 Sht offsets 0x4060 , 0x53c0
08:57:27.8833C14256InterProcessElement::closeInterProcess Overwolf_SHARED_MEMORY_2_2_78_14_5868 close 2147483647 bytes
08:57:27.8833C14297InjectOWExplorerExplorer file name [C:\Program Files (x86)\Overwolf\0.149.2.30\OWExplorer.dll]
08:57:27.8893C14385ftw1OWExplorer injected
08:57:28.16339FC51`anonymous-namespace'::CreateProviderInitialize provider: NET
08:57:28.16339FC117libprocess::NetworkTracer::Initializeinit res:0x5 [started:0 active:0 enbaled:0]
08:57:28.16339FC54`anonymous-namespace'::CreateProviderFail to initlized provider: NET
08:57:28.16339FC51`anonymous-namespace'::CreateProviderInitialize provider: GPU
08:59:58.9091D10352ProcessInjector::HandleElevatedProcessFail injection to process [1836] [t: 0 w_t_id: 0]- NVDisplay.Container.exe (elevated True) 0x0
08:59:58.9091D10291ProcessInjector::HandlePendingProccesssFail to inject pending process |1836|: NVDisplay.Container.exe
08:59:58.9091D10352ProcessInjector::HandleElevatedProcessFail injection to process [3076] [t: 0 w_t_id: 0]- NVIDIA Share.exe (elevated True) 0x0
08:59:58.9091D10291ProcessInjector::HandlePendingProccesssFail to inject pending process |3076|: NVIDIA Share.exe
08:59:58.9091D10352ProcessInjector::HandleElevatedProcessFail injection to process [3732] [t: 0 w_t_id: 0]- nvcontainer.exe (elevated True) 0x0
08:59:58.9091D10291ProcessInjector::HandlePendingProccesssFail to inject pending process |3732|: nvcontainer.exe
08:59:58.9091D10352ProcessInjector::HandleElevatedProcessFail injection to process [3804] [t: 0 w_t_id: 0]- MsMpEng.exe (elevated True) 0x0
08:59:58.9091D10291ProcessInjector::HandlePendingProccesssFail to inject pending process |3804|: MsMpEng.exe
08:59:58.9091D10352ProcessInjector::HandleElevatedProcessFail injection to process [16320] [t: 0 w_t_id: 0]- NVIDIA Share.exe (elevated True) 0x0
08:59:58.9091D10291ProcessInjector::HandlePendingProccesssFail to inject pending process |16320|: NVIDIA Share.exe
09:52:13.2001D10352ProcessInjector::HandleElevatedProcessFail injection to process [7092] [t: 0 w_t_id: 0]- plugin_host.exe (elevated True) 0x0
09:52:13.2011D10291ProcessInjector::HandlePendingProccesssFail to inject pending process |7092|: plugin_host.exe
10:33:56.351D10352ProcessInjector::HandleElevatedProcessFail injection to process [12240] [t: 0 w_t_id: 0]- MsMpEng.exe (elevated True) 0x5
10:33:56.351D10291ProcessInjector::HandlePendingProccesssFail to inject pending process |12240|: MsMpEng.exe