Sat Apr 08 05:30:18 2017 UTC - Module file name: C:\Program Files (x86)\Steam\ga

meoverlayrenderer64.dll
Sat Apr 08 05:30:18 2017 UTC - GameID = 570
Sat Apr 08 05:30:18 2017 UTC - System page size: 4096
Sat Apr 08 05:30:18 2017 UTC - Failed loading shell32.dll, not hooking ShellExec
ute calls
Sat Apr 08 05:30:18 2017 UTC - Hooking SetCursorPos, GetCursorPos, ShowCursor, a
nd SetCursor
Sat Apr 08 05:30:18 2017 UTC - Modules at GameOverlayRenderer.dll attach
Sat Apr 08 05:30:18 2017 UTC - 01: dota2.exe - (0X00007FF618260000 to 0X00007FF6
182B0000)
Sat Apr 08 05:30:18 2017 UTC - 02: ntdll.dll - (0X00007FFC4A830000 to 0X00007FFC
4AA01000)
Sat Apr 08 05:30:18 2017 UTC - 03: KERNEL32.DLL - (0X00007FFC49F80000 to 0X00007
FFC4A02B000)
Sat Apr 08 05:30:18 2017 UTC - 04: KERNELBASE.dll - (0X00007FFC47990000 to 0X000
07FFC47BAD000)
Sat Apr 08 05:30:18 2017 UTC - 05: USER32.dll - (0X00007FFC485B0000 to 0X00007FF
C48715000)
Sat Apr 08 05:30:18 2017 UTC - 06: win32u.dll - (0X00007FFC478C0000 to 0X00007FF
C478DE000)
Sat Apr 08 05:30:18 2017 UTC - 07: GDI32.dll - (0X00007FFC47DC0000 to 0X00007FFC
47DF4000)
Sat Apr 08 05:30:18 2017 UTC - 08: gdi32full.dll - (0X00007FFC47560000 to 0X0000
7FFC476E2000)
Sat Apr 08 05:30:18 2017 UTC - 09: IMM32.DLL - (0X00007FFC48720000 to 0X00007FFC
4874E000)
Sat Apr 08 05:30:18 2017 UTC - 10: gameoverlayrenderer64.dll - (0X00007FFC0DD000
00 to 0X00007FFC0DE72000)
Sat Apr 08 05:30:18 2017 UTC - 11: ADVAPI32.dll - (0X00007FFC4A030000 to 0X00007
FFC4A0D2000)
Sat Apr 08 05:30:18 2017 UTC - 12: msvcrt.dll - (0X00007FFC48140000 to 0X00007FF
C481DE000)
Sat Apr 08 05:30:18 2017 UTC - 13: WINMM.dll - (0X00007FFC44D50000 to 0X00007FFC
44D73000)
Sat Apr 08 05:30:18 2017 UTC - 14: sechost.dll - (0X00007FFC489A0000 to 0X00007F
FC489F9000)
Sat Apr 08 05:30:18 2017 UTC - 15: RPCRT4.dll - (0X00007FFC48480000 to 0X00007FF
C485A1000)
Sat Apr 08 05:30:18 2017 UTC - 16: WINMMBASE.dll - (0X000001C748D00000 to 0X0000
01C748D2B000)
Sat Apr 08 05:30:18 2017 UTC - 17: ole32.dll - (0X00007FFC48860000 to 0X00007FFC
48997000)
Sat Apr 08 05:30:18 2017 UTC - 18: combase.dll - (0X00007FFC47E70000 to 0X00007F
FC48138000)
Sat Apr 08 05:30:18 2017 UTC - 19: cfgmgr32.dll - (0X00007FFC47510000 to 0X00007
FFC47552000)
Sat Apr 08 05:30:18 2017 UTC - 20: ucrtbase.dll - (0X00007FFC47CC0000 to 0X00007
FFC47DB5000)
Sat Apr 08 05:30:18 2017 UTC - 21: bcryptPrimitives.dll - (0X00007FFC474A0000 to
0X00007FFC4750A000)
Sat Apr 08 05:30:18 2017 UTC - 22: PSAPI.DLL - (0X00007FFC4A2A0000 to 0X00007FFC
4A2A8000)
Sat Apr 08 05:30:18 2017 UTC - ----------------------------
Sat Apr 08 05:30:22 2017 UTC - XInput Hooked XInputEnable Version 13
Sat Apr 08 05:30:22 2017 UTC - XInput Hooked XInputGetBatteryInformation Version
13
Sat Apr 08 05:30:22 2017 UTC - XInput Hooked XInputGetCapabilities Version 13
Sat Apr 08 05:30:22 2017 UTC - XInput Hooked XInputGetDSoundAudioDeviceGuids Ver
sion 13
Sat Apr 08 05:30:22 2017 UTC
Sat Apr 08 05:30:22 2017 UTC
Sat Apr 08 05:30:22 2017 UTC
Sat Apr 08 05:30:22 2017 UTC
Sat Apr 08 05:30:22 2017 UTC
Sat Apr 08 05:30:22 2017 UTC
ace 000001C74A88C780
Sat Apr 08 05:30:22 2017 UTC
not hooked
Sat Apr 08 05:30:22 2017 UTC
not hooked
Sat Apr 08 05:30:22 2017 UTC
not hooked
Sat Apr 08 05:30:22 2017 UTC
not hooked
Sat Apr 08 05:30:22 2017 UTC
not hooked
Sat Apr 08 05:30:22 2017 UTC
not hooked
Sat Apr 08 05:30:22 2017 UTC
not hooked
Sat Apr 08 05:30:22 2017 UTC
not hooked
Sat Apr 08 05:30:22 2017 UTC
Sat Apr 08 05:30:22 2017 UTC
Sat Apr 08 05:30:22 2017 UTC
14
Sat Apr 08 05:30:22 2017 UTC
Sat Apr 08 05:30:22 2017 UTC
Sat Apr 08 05:30:22 2017 UTC
Sat Apr 08 05:30:22 2017 UTC
Sat Apr 08 05:30:22 2017 UTC
Sat Apr 08 05:30:22 2017 UTC
ace 000001C74A88C900
Sat Apr 08 05:30:22 2017 UTC
Sat Apr 08 05:30:22 2017 UTC
Sat Apr 08 05:30:22 2017 UTC
.
Sat Apr 08 05:30:22 2017 UTC
Sat Apr 08 05:30:22 2017 UTC
Sat Apr 08 05:30:22 2017 UTC
DXGIFactory or IDXGIFactory1
Sat Apr 08 05:30:22 2017 UTC
emoving from map.
Sat Apr 08 05:30:22 2017 UTC
emoving from map.
Sat Apr 08 05:30:22 2017 UTC
emoving from map.
Sat Apr 08 05:30:22 2017 UTC
emoving from map.
Sat Apr 08 05:30:22 2017 UTC
emoving from map.
Sat Apr 08 05:30:22 2017 UTC
emoving from map.
Sat Apr 08 05:30:22 2017 UTC
emoving from map.
Sat Apr 08 05:30:23 2017 UTC
: 1, behavior flags: 56!)
Sat Apr 08 05:30:23 2017 UTC
Sat Apr 08 05:30:23 2017 UTC
- XInput Hooked XInputGetKeystroke Version 13
- XInput Hooked XInputGetState Version 13
- XInput Hooked XInputGetStateEX Version 13
- XInput Hooked XInputSetState Version 13
- Game is using dinput8, preparing to hook.
- CoCreateInstance hook created DirectInput8 interf
- Aborting UnhookFunc because pRealFunctionAddr is
- Aborting UnhookFunc because pRealFunctionAddr is
- Aborting UnhookFunc because pRealFunctionAddr is
- Aborting UnhookFunc because pRealFunctionAddr is
- Aborting UnhookFunc because pRealFunctionAddr is
- Aborting UnhookFunc because pRealFunctionAddr is
- Aborting UnhookFunc because pRealFunctionAddr is
- Aborting UnhookFunc because pRealFunctionAddr is
- XInput Hooked XInputEnable Version 14
- XInput Hooked XInputGetAudioDeviceIds Version 14
- XInput Hooked XInputGetBatteryInformation Version
- XInput Hooked XInputGetCapabilities Version 14
- XInput Hooked XInputGetKeystroke Version 14
- XInput Hooked XInputGetState Version 14
- XInput Hooked XInputGetStateEX Version 14
- XInput Hooked XInputSetState Version 14
- CoCreateInstance hook created DirectInput8 interf
- Game is using D3D9 or D3D9Ex, preparing to hook.
- hookDirect3DCreate9Ex called
- Game is using dxgi (dx10/dx11), preparing to hook
- hookCreateDXGIFactory1 called
- Hooking vtable for factory
- DXGIFactory2_CreateSwapChain already hooked via I
- Found a hooked function in now unloaded module, r
- Found a hooked function in now unloaded module, r
- Found a hooked function in now unloaded module, r
- Found a hooked function in now unloaded module, r
- Found a hooked function in now unloaded module, r
- Found a hooked function in now unloaded module, r
- Found a hooked function in now unloaded module, r
- IWrapIDirect3D9Ex::CreateDevice hook called (type
- Creating D3D9Ex renderer
- Initializing Audio...
Sat Apr 08 05:30:38 2017 UTC - IAudioClient_Initialize - SUCCEEDED
Sat Apr 08 05:30:38 2017 UTC - Audio client initialized: 0x000001C76A754960
Sat Apr 08 05:30:38 2017 UTC - Device:
Sat Apr 08 05:30:38 2017 UTC - Audio client mix format:
Sat Apr 08 05:30:38 2017 UTC - format: 65534
Sat Apr 08 05:30:38 2017 UTC - channels: 2
Sat Apr 08 05:30:38 2017 UTC - samples/sec: 48000
Sat Apr 08 05:30:38 2017 UTC - bytes/sec: 384000
Sat Apr 08 05:30:38 2017 UTC - alignment: 8
Sat Apr 08 05:30:38 2017 UTC - bits/sample: 32
Sat Apr 08 05:30:38 2017 UTC - channel mask: 0x3
Sat Apr 08 05:30:38 2017 UTC - data format: {00000001-0000-0010-8000-00AA00389B
71}
Sat Apr 08 05:30:38 2017 UTC - Audio hooked
Sat Apr 08 05:30:38 2017 UTC - Audio client started: 0x000001C76A754960, 1
Sat Apr 08 05:31:19 2017 UTC - Trying to setup input hook...
Sat Apr 08 05:31:19 2017 UTC - Set input hook...