WRPEE2A.tmp
Description: GameInput
Authors: © Microsoft Corporation. All rights reserved.
Version: 3.3.221.0
Architecture: 64-bit
Operating System: Windows NT
SHA256: 3f9f7e49868639f00ff1942bb3a4d9bc
File Size: 1.1 MB
Uploaded At: June 13, 2026, 11:38 a.m.
Views: 30
Security Warning
This file has been flagged as potentially dangerous.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported Functions
- GameInputCreate (Ordinal: 1, Address: 0x15250)
- GameInputInitialize (Ordinal: 2, Address: 0x15260)
- DllCanUnloadNow (Ordinal: 3, Address: 0x14e90)
- DllGetClassObject (Ordinal: 4, Address: 0x14f10)
- DllRegisterServer (Ordinal: 5, Address: 0x151e0)
- DllUnregisterServer (Ordinal: 6, Address: 0x15220)
- GetProxyDllInfo (Ordinal: 7, Address: 0xa2a60)
Imported DLLs & Functions
ADVAPI32.dll
- SetEntriesInAclW (Address: 0x1800cb000)
api-ms-win-core-com-l1-1-0.dll
- CoCreateFreeThreadedMarshaler (Address: 0x1800cb218)
- CoCreateInstance (Address: 0x1800cb228)
- CoGetApartmentType (Address: 0x1800cb208)
- CoGetInterfaceAndReleaseStream (Address: 0x1800cb248)
- CoInitializeEx (Address: 0x1800cb230)
- CoTaskMemAlloc (Address: 0x1800cb250)
- CoTaskMemFree (Address: 0x1800cb240)
- CoUninitialize (Address: 0x1800cb238)
- CoWaitForMultipleHandles (Address: 0x1800cb210)
- PropVariantClear (Address: 0x1800cb220)
api-ms-win-core-com-l1-1-1.dll
- RoGetAgileReference (Address: 0x1800cb260)
api-ms-win-core-console-l1-1-0.dll
- GetConsoleMode (Address: 0x1800cb280)
- GetConsoleOutputCP (Address: 0x1800cb278)
- WriteConsoleW (Address: 0x1800cb270)
api-ms-win-core-debug-l1-1-0.dll
- DebugBreak (Address: 0x1800cb298)
- IsDebuggerPresent (Address: 0x1800cb290)
- OutputDebugStringW (Address: 0x1800cb2a0)
api-ms-win-core-errorhandling-l1-1-0.dll
- GetLastError (Address: 0x1800cb2b0)
- RaiseException (Address: 0x1800cb2d0)
- SetLastError (Address: 0x1800cb2c8)
- SetUnhandledExceptionFilter (Address: 0x1800cb2b8)
- UnhandledExceptionFilter (Address: 0x1800cb2c0)
api-ms-win-core-fibers-l1-1-0.dll
- FlsAlloc (Address: 0x1800cb2e8)
- FlsFree (Address: 0x1800cb2e0)
- FlsGetValue (Address: 0x1800cb2f8)
- FlsSetValue (Address: 0x1800cb2f0)
api-ms-win-core-file-l1-1-0.dll
- CreateFileW (Address: 0x1800cb350)
- FindClose (Address: 0x1800cb348)
- FindFirstFileExW (Address: 0x1800cb330)
- FindNextFileW (Address: 0x1800cb360)
- FlushFileBuffers (Address: 0x1800cb328)
- GetFileAttributesW (Address: 0x1800cb318)
- GetFileType (Address: 0x1800cb338)
- ReadFile (Address: 0x1800cb320)
- ReadFileEx (Address: 0x1800cb358)
- SetFilePointerEx (Address: 0x1800cb340)
- WriteFile (Address: 0x1800cb310)
- WriteFileEx (Address: 0x1800cb308)
api-ms-win-core-handle-l1-1-0.dll
- CloseHandle (Address: 0x1800cb370)
- DuplicateHandle (Address: 0x1800cb378)
api-ms-win-core-heap-l1-1-0.dll
- GetProcessHeap (Address: 0x1800cb390)
- HeapAlloc (Address: 0x1800cb3a0)
- HeapFree (Address: 0x1800cb388)
- HeapReAlloc (Address: 0x1800cb3a8)
- HeapSize (Address: 0x1800cb398)
api-ms-win-core-heap-l2-1-0.dll
- LocalFree (Address: 0x1800cb3b8)
api-ms-win-core-interlocked-l1-1-0.dll
- InitializeSListHead (Address: 0x1800cb3d0)
- InterlockedFlushSList (Address: 0x1800cb3c8)
api-ms-win-core-io-l1-1-0.dll
- CancelIoEx (Address: 0x1800cb3f0)
- DeviceIoControl (Address: 0x1800cb3e0)
- GetOverlappedResult (Address: 0x1800cb3e8)
api-ms-win-core-libraryloader-l1-2-0.dll
- DisableThreadLibraryCalls (Address: 0x1800cb400)
- FreeLibrary (Address: 0x1800cb440)
- FreeLibraryAndExitThread (Address: 0x1800cb420)
- GetModuleFileNameA (Address: 0x1800cb410)
- GetModuleFileNameW (Address: 0x1800cb408)
- GetModuleHandleExW (Address: 0x1800cb430)
- GetModuleHandleW (Address: 0x1800cb428)
- GetProcAddress (Address: 0x1800cb418)
- LoadLibraryExW (Address: 0x1800cb438)
api-ms-win-core-libraryloader-l1-2-1.dll
- LoadLibraryW (Address: 0x1800cb450)
api-ms-win-core-localization-l1-2-0.dll
- FormatMessageW (Address: 0x1800cb480)
- GetACP (Address: 0x1800cb478)
- GetCPInfo (Address: 0x1800cb470)
- GetOEMCP (Address: 0x1800cb468)
- IsValidCodePage (Address: 0x1800cb460)
- LCMapStringW (Address: 0x1800cb488)
api-ms-win-core-memory-l1-1-0.dll
- VirtualProtect (Address: 0x1800cb498)
api-ms-win-core-namedpipe-l1-1-0.dll
- ConnectNamedPipe (Address: 0x1800cb4b0)
- CreateNamedPipeW (Address: 0x1800cb4a8)
api-ms-win-core-processenvironment-l1-1-0.dll
- FreeEnvironmentStringsW (Address: 0x1800cb4e8)
- GetCommandLineA (Address: 0x1800cb4c0)
- GetCommandLineW (Address: 0x1800cb4c8)
- GetEnvironmentStringsW (Address: 0x1800cb4d0)
- GetStdHandle (Address: 0x1800cb4d8)
- SetStdHandle (Address: 0x1800cb4e0)
api-ms-win-core-processthreads-l1-1-0.dll
- CreateProcessW (Address: 0x1800cb518)
- CreateThread (Address: 0x1800cb500)
- ExitProcess (Address: 0x1800cb540)
- GetCurrentProcess (Address: 0x1800cb578)
- GetCurrentProcessId (Address: 0x1800cb560)
- GetCurrentThread (Address: 0x1800cb510)
- GetCurrentThreadId (Address: 0x1800cb568)
- GetStartupInfoW (Address: 0x1800cb508)
- GetThreadId (Address: 0x1800cb520)
- OpenProcessToken (Address: 0x1800cb530)
- OpenThread (Address: 0x1800cb580)
- QueueUserAPC (Address: 0x1800cb528)
- SetThreadPriority (Address: 0x1800cb588)
- SuspendThread (Address: 0x1800cb4f8)
- TerminateProcess (Address: 0x1800cb538)
- TlsAlloc (Address: 0x1800cb570)
- TlsFree (Address: 0x1800cb548)
- TlsGetValue (Address: 0x1800cb558)
- TlsSetValue (Address: 0x1800cb550)
api-ms-win-core-processthreads-l1-1-1.dll
- IsProcessorFeaturePresent (Address: 0x1800cb5a0)
- OpenProcess (Address: 0x1800cb598)
api-ms-win-core-processthreads-l1-1-3.dll
- SetThreadDescription (Address: 0x1800cb5b0)
api-ms-win-core-profile-l1-1-0.dll
- QueryPerformanceCounter (Address: 0x1800cb5c8)
- QueryPerformanceFrequency (Address: 0x1800cb5c0)
api-ms-win-core-registry-l1-1-0.dll
- RegCloseKey (Address: 0x1800cb5d8)
- RegEnumKeyExW (Address: 0x1800cb5f0)
- RegGetValueW (Address: 0x1800cb600)
- RegOpenKeyExW (Address: 0x1800cb5e0)
- RegQueryInfoKeyW (Address: 0x1800cb5e8)
- RegQueryValueExW (Address: 0x1800cb5f8)
api-ms-win-core-rtlsupport-l1-1-0.dll
- RtlCaptureContext (Address: 0x1800cb620)
- RtlLookupFunctionEntry (Address: 0x1800cb618)
- RtlPcToFileHeader (Address: 0x1800cb628)
- RtlUnwindEx (Address: 0x1800cb610)
- RtlVirtualUnwind (Address: 0x1800cb630)
api-ms-win-core-string-l1-1-0.dll
- GetStringTypeW (Address: 0x1800cb650)
- MultiByteToWideChar (Address: 0x1800cb640)
- WideCharToMultiByte (Address: 0x1800cb648)
api-ms-win-core-synch-l1-1-0.dll
- AcquireSRWLockExclusive (Address: 0x1800cb6e0)
- AcquireSRWLockShared (Address: 0x1800cb6d0)
- CreateEventExW (Address: 0x1800cb6f8)
- CreateEventW (Address: 0x1800cb698)
- CreateMutexExW (Address: 0x1800cb710)
- CreateSemaphoreExW (Address: 0x1800cb718)
- DeleteCriticalSection (Address: 0x1800cb680)
- EnterCriticalSection (Address: 0x1800cb6e8)
- InitializeCriticalSectionAndSpinCount (Address: 0x1800cb6c0)
- InitializeCriticalSectionEx (Address: 0x1800cb6a0)
- InitializeSRWLock (Address: 0x1800cb660)
- LeaveCriticalSection (Address: 0x1800cb6b0)
- OpenSemaphoreW (Address: 0x1800cb708)
- ReleaseMutex (Address: 0x1800cb678)
- ReleaseSemaphore (Address: 0x1800cb6b8)
- ReleaseSRWLockExclusive (Address: 0x1800cb6a8)
- ReleaseSRWLockShared (Address: 0x1800cb6d8)
- ResetEvent (Address: 0x1800cb690)
- SetEvent (Address: 0x1800cb6f0)
- SleepEx (Address: 0x1800cb668)
- TryAcquireSRWLockExclusive (Address: 0x1800cb670)
- WaitForMultipleObjectsEx (Address: 0x1800cb688)
- WaitForSingleObject (Address: 0x1800cb6c8)
- WaitForSingleObjectEx (Address: 0x1800cb700)
api-ms-win-core-synch-l1-2-0.dll
- InitOnceExecuteOnce (Address: 0x1800cb728)
- Sleep (Address: 0x1800cb730)
- SleepConditionVariableSRW (Address: 0x1800cb738)
- WakeAllConditionVariable (Address: 0x1800cb740)
api-ms-win-core-synch-l1-2-1.dll
- CreateSemaphoreW (Address: 0x1800cb758)
- WaitForMultipleObjects (Address: 0x1800cb750)
api-ms-win-core-sysinfo-l1-1-0.dll
- GetSystemTimeAsFileTime (Address: 0x1800cb768)
- GetTickCount (Address: 0x1800cb778)
- GetTickCount64 (Address: 0x1800cb770)
api-ms-win-core-sysinfo-l1-2-0.dll
- GetSystemTimePreciseAsFileTime (Address: 0x1800cb788)
api-ms-win-core-threadpool-l1-2-0.dll
- CallbackMayRunLong (Address: 0x1800cb7a8)
- CloseThreadpoolTimer (Address: 0x1800cb798)
- CreateThreadpoolTimer (Address: 0x1800cb7b8)
- FreeLibraryWhenCallbackReturns (Address: 0x1800cb7c8)
- SetThreadpoolTimer (Address: 0x1800cb7a0)
- TrySubmitThreadpoolCallback (Address: 0x1800cb7b0)
- WaitForThreadpoolTimerCallbacks (Address: 0x1800cb7c0)
api-ms-win-core-util-l1-1-0.dll
- EncodePointer (Address: 0x1800cb7d8)
api-ms-win-core-version-l1-1-0.dll
- VerQueryValueW (Address: 0x1800cb7e8)
api-ms-win-core-version-l1-1-1.dll
- GetFileVersionInfoSizeW (Address: 0x1800cb7f8)
- GetFileVersionInfoW (Address: 0x1800cb800)
api-ms-win-core-winrt-error-l1-1-0.dll
- GetRestrictedErrorInfo (Address: 0x1800cb820)
- RoOriginateError (Address: 0x1800cb830)
- RoOriginateErrorW (Address: 0x1800cb818)
- RoTransformError (Address: 0x1800cb828)
- SetRestrictedErrorInfo (Address: 0x1800cb810)
api-ms-win-core-winrt-l1-1-0.dll
- RoGetActivationFactory (Address: 0x1800cb840)
api-ms-win-core-winrt-string-l1-1-0.dll
- WindowsCompareStringOrdinal (Address: 0x1800cb888)
- WindowsCreateString (Address: 0x1800cb860)
- WindowsCreateStringReference (Address: 0x1800cb868)
- WindowsDeleteString (Address: 0x1800cb890)
- WindowsDeleteStringBuffer (Address: 0x1800cb858)
- WindowsDuplicateString (Address: 0x1800cb870)
- WindowsGetStringRawBuffer (Address: 0x1800cb878)
- WindowsPreallocateStringBuffer (Address: 0x1800cb850)
- WindowsPromoteStringBuffer (Address: 0x1800cb880)
api-ms-win-devices-config-l1-1-1.dll
- CM_Get_Device_ID_List_SizeW (Address: 0x1800cb8c0)
- CM_Get_Device_ID_ListW (Address: 0x1800cb8a0)
- CM_Get_Device_Interface_List_SizeW (Address: 0x1800cb8d0)
- CM_Get_Device_Interface_ListW (Address: 0x1800cb8d8)
- CM_Get_Device_Interface_PropertyW (Address: 0x1800cb8c8)
- CM_Get_DevNode_PropertyW (Address: 0x1800cb8e0)
- CM_Get_Parent (Address: 0x1800cb8e8)
- CM_Locate_DevNodeW (Address: 0x1800cb8b8)
- CM_Open_Device_Interface_KeyW (Address: 0x1800cb8f0)
- CM_Register_Notification (Address: 0x1800cb8b0)
- CM_Unregister_Notification (Address: 0x1800cb8a8)
api-ms-win-eventing-provider-l1-1-0.dll
- EventRegister (Address: 0x1800cb908)
- EventSetInformation (Address: 0x1800cb900)
- EventUnregister (Address: 0x1800cb910)
- EventWriteTransfer (Address: 0x1800cb918)
api-ms-win-security-base-l1-1-0.dll
- GetTokenInformation (Address: 0x1800cb930)
- InitializeSecurityDescriptor (Address: 0x1800cb928)
- InitializeSid (Address: 0x1800cb938)
- SetSecurityDescriptorDacl (Address: 0x1800cb940)
api-ms-win-security-base-l1-2-0.dll
- CheckTokenMembershipEx (Address: 0x1800cb950)
bcrypt.dll
- BCryptCloseAlgorithmProvider (Address: 0x1800cb978)
- BCryptCreateHash (Address: 0x1800cb988)
- BCryptDestroyHash (Address: 0x1800cb980)
- BCryptFinishHash (Address: 0x1800cb960)
- BCryptHashData (Address: 0x1800cb968)
- BCryptOpenAlgorithmProvider (Address: 0x1800cb970)
KERNEL32.dll
- CreateTimerQueueTimer (Address: 0x1800cb018)
- DeleteTimerQueueTimer (Address: 0x1800cb020)
- MulDiv (Address: 0x1800cb010)
ntdll.dll
- RtlGetDeviceFamilyInfoEnum (Address: 0x1800cb9a0)
- RtlGetVersion (Address: 0x1800cb998)
RPCRT4.dll
- CStdStubBuffer_AddRef (Address: 0x1800cb038)
- CStdStubBuffer_Connect (Address: 0x1800cb040)
- CStdStubBuffer_CountRefs (Address: 0x1800cb068)
- CStdStubBuffer_DebugServerQueryInterface (Address: 0x1800cb0b0)
- CStdStubBuffer_DebugServerRelease (Address: 0x1800cb0a8)
- CStdStubBuffer_Disconnect (Address: 0x1800cb088)
- CStdStubBuffer_Invoke (Address: 0x1800cb050)
- CStdStubBuffer_IsIIDSupported (Address: 0x1800cb058)
- CStdStubBuffer_QueryInterface (Address: 0x1800cb030)
- IUnknown_AddRef_Proxy (Address: 0x1800cb090)
- IUnknown_QueryInterface_Proxy (Address: 0x1800cb070)
- IUnknown_Release_Proxy (Address: 0x1800cb0b8)
- NdrCStdStubBuffer_Release (Address: 0x1800cb080)
- NdrDllGetClassObject (Address: 0x1800cb078)
- NdrDllRegisterProxy (Address: 0x1800cb060)
- NdrDllUnregisterProxy (Address: 0x1800cb048)
- NdrOleAllocate (Address: 0x1800cb0a0)
- NdrOleFree (Address: 0x1800cb098)
SETUPAPI.dll
- SetupDiDestroyDeviceInfoList (Address: 0x1800cb0d0)
- SetupDiEnumDeviceInfo (Address: 0x1800cb0c8)
- SetupDiGetClassDevsW (Address: 0x1800cb0d8)
- SetupDiGetDeviceInstanceIdW (Address: 0x1800cb0e0)
SHLWAPI.dll
- SHCreateThreadRef (Address: 0x1800cb100)
- SHGetThreadRef (Address: 0x1800cb0f8)
- SHSetThreadRef (Address: 0x1800cb0f0)
USER32.dll
- CreateWindowExW (Address: 0x1800cb1a0)
- DefWindowProcW (Address: 0x1800cb1d8)
- DestroyWindow (Address: 0x1800cb110)
- DispatchMessageW (Address: 0x1800cb1b8)
- EnumWindows (Address: 0x1800cb168)
- GetClassNameW (Address: 0x1800cb160)
- GetCursorPos (Address: 0x1800cb140)
- GetForegroundWindow (Address: 0x1800cb178)
- GetKeyboardLayout (Address: 0x1800cb118)
- GetKeyboardType (Address: 0x1800cb1e0)
- GetMessageW (Address: 0x1800cb1b0)
- GetRawInputBuffer (Address: 0x1800cb198)
- GetRawInputData (Address: 0x1800cb190)
- GetRawInputDeviceInfoW (Address: 0x1800cb128)
- GetSystemMetrics (Address: 0x1800cb148)
- GetWindowLongPtrW (Address: 0x1800cb130)
- GetWindowTextW (Address: 0x1800cb170)
- GetWindowThreadProcessId (Address: 0x1800cb158)
- MapVirtualKeyExW (Address: 0x1800cb120)
- MsgWaitForMultipleObjectsEx (Address: 0x1800cb188)
- PeekMessageW (Address: 0x1800cb180)
- PostMessageW (Address: 0x1800cb1c8)
- PostThreadMessageW (Address: 0x1800cb1d0)
- RegisterClassExW (Address: 0x1800cb1a8)
- RegisterRawInputDevices (Address: 0x1800cb1f0)
- SetWindowLongPtrW (Address: 0x1800cb138)
- SetWinEventHook (Address: 0x1800cb150)
- TranslateMessage (Address: 0x1800cb1c0)
- UnhookWinEvent (Address: 0x1800cb1f8)
- UnregisterClassW (Address: 0x1800cb1e8)