XInput1_4.dll

Description: Microsoft Common Controller API

Version: 10.0.22621.1

Architecture: 64-bit

Operating System: Windows NT

SHA256: edb390c2902b4da2c59400fa245d1755

File Size: 435.4 KB

Uploaded At: Aug. 22, 2026, 10:06 a.m.

Views: 16

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, OpenProcess

Exported Functions

XInputEnable (Ordinal: 1, Address: 0x26d0)
XInputGetAudioDeviceIds (Ordinal: 2, Address: 0x2710)
XInputGetBatteryInformation (Ordinal: 3, Address: 0x2780)
XInputGetCapabilities (Ordinal: 4, Address: 0x2660)
XInputGetKeystroke (Ordinal: 5, Address: 0x27f0)
XInputGetState (Ordinal: 6, Address: 0x25c0)
XInputSetState (Ordinal: 7, Address: 0x2610)

Imported DLLs & Functions

ADVAPI32.dll

ClearEventLogW (Address: 0x18004b020)
CloseEventLog (Address: 0x18004b028)
ConvertSidToStringSidA (Address: 0x18004b030)
GetTokenInformation (Address: 0x18004b050)
GetUserNameA (Address: 0x18004b010)
OpenEventLogW (Address: 0x18004b000)
OpenProcessToken (Address: 0x18004b008)
RegCloseKey (Address: 0x18004b018)
RegDeleteValueW (Address: 0x18004b040)
RegEnumValueW (Address: 0x18004b048)
RegOpenKeyExW (Address: 0x18004b038)

CRYPT32.dll

CryptBinaryToStringW (Address: 0x18004b060)

gdiplus.dll

GdipAlloc (Address: 0x18004b598)
GdipCloneBrush (Address: 0x18004b548)
GdipCloneImage (Address: 0x18004b5b0)
GdipCreateBitmapFromScan0 (Address: 0x18004b520)
GdipCreateFont (Address: 0x18004b4f8)
GdipCreateFontFamilyFromName (Address: 0x18004b5b8)
GdipCreatePen1 (Address: 0x18004b508)
GdipCreateSolidFill (Address: 0x18004b530)
GdipDeleteBrush (Address: 0x18004b5a0)
GdipDeleteFont (Address: 0x18004b500)
GdipDeleteFontFamily (Address: 0x18004b5d0)
GdipDeleteGraphics (Address: 0x18004b518)
GdipDeletePen (Address: 0x18004b5e0)
GdipDisposeImage (Address: 0x18004b590)
GdipDrawLine (Address: 0x18004b580)
GdipDrawRectangle (Address: 0x18004b578)
GdipDrawRectangleI (Address: 0x18004b5c0)
GdipDrawString (Address: 0x18004b558)
GdipFillRectangle (Address: 0x18004b570)
GdipFillRectangleI (Address: 0x18004b510)
GdipFree (Address: 0x18004b560)
GdipGetGenericFontFamilySansSerif (Address: 0x18004b568)
GdipGetImageEncoders (Address: 0x18004b5c8)
GdipGetImageEncodersSize (Address: 0x18004b5a8)
GdipGetImageGraphicsContext (Address: 0x18004b538)
GdiplusStartup (Address: 0x18004b5d8)
GdipMeasureString (Address: 0x18004b540)
GdipSaveImageToStream (Address: 0x18004b528)
GdipSetSmoothingMode (Address: 0x18004b588)
GdipSetTextRenderingHint (Address: 0x18004b550)

KERNEL32.dll

AcquireSRWLockExclusive (Address: 0x18004b380)
CloseHandle (Address: 0x18004b1a0)
CompareStringW (Address: 0x18004b258)
CreateFileW (Address: 0x18004b138)
CreateMutexW (Address: 0x18004b320)
CreateThread (Address: 0x18004b190)
CreateToolhelp32Snapshot (Address: 0x18004b098)
DecodePointer (Address: 0x18004b368)
DeleteCriticalSection (Address: 0x18004b358)
DeleteFileW (Address: 0x18004b128)
DisableThreadLibraryCalls (Address: 0x18004b1a8)
EncodePointer (Address: 0x18004b360)
EnterCriticalSection (Address: 0x18004b168)
EnumSystemLocalesW (Address: 0x18004b230)
ExitProcess (Address: 0x18004b2c0)
ExitThread (Address: 0x18004b2d8)
FindClose (Address: 0x18004b118)
FindFirstFileExW (Address: 0x18004b218)
FindFirstFileW (Address: 0x18004b0f0)
FindNextFileW (Address: 0x18004b0f8)
FlsAlloc (Address: 0x18004b290)
FlsFree (Address: 0x18004b278)
FlsGetValue (Address: 0x18004b288)
FlsSetValue (Address: 0x18004b280)
FlushFileBuffers (Address: 0x18004b160)
FreeEnvironmentStringsW (Address: 0x18004b1e0)
FreeLibrary (Address: 0x18004b178)
FreeLibraryAndExitThread (Address: 0x18004b2d0)
GetACP (Address: 0x18004b208)
GetCommandLineA (Address: 0x18004b1f8)
GetCommandLineW (Address: 0x18004b1f0)
GetComputerNameA (Address: 0x18004b0e8)
GetConsoleMode (Address: 0x18004b148)
GetConsoleOutputCP (Address: 0x18004b150)
GetCPInfo (Address: 0x18004b3b8)
GetCurrentProcess (Address: 0x18004b070)
GetCurrentProcessId (Address: 0x18004b180)
GetCurrentThreadId (Address: 0x18004b348)
GetDateFormatW (Address: 0x18004b268)
GetEnvironmentStringsW (Address: 0x18004b1e8)
GetEnvironmentVariableW (Address: 0x18004b108)
GetFileType (Address: 0x18004b298)
GetLastError (Address: 0x18004b1b0)
GetLocaleInfoW (Address: 0x18004b248)
GetModuleFileNameW (Address: 0x18004b328)
GetModuleHandleExW (Address: 0x18004b2c8)
GetModuleHandleW (Address: 0x18004b3b0)
GetOEMCP (Address: 0x18004b200)
GetProcAddress (Address: 0x18004b188)
GetProcessHeap (Address: 0x18004b1d0)
GetStartupInfoW (Address: 0x18004b400)
GetStdHandle (Address: 0x18004b2a0)
GetStringTypeW (Address: 0x18004b338)
GetSystemDirectoryW (Address: 0x18004b1b8)
GetSystemInfo (Address: 0x18004b0b8)
GetSystemTimeAsFileTime (Address: 0x18004b3a8)
GetTempPathW (Address: 0x18004b110)
GetTickCount (Address: 0x18004b0d8)
GetTimeFormatW (Address: 0x18004b260)
GetTimeZoneInformation (Address: 0x18004b2b0)
GetUserDefaultLCID (Address: 0x18004b238)
HeapAlloc (Address: 0x18004b2b8)
HeapFree (Address: 0x18004b2a8)
HeapReAlloc (Address: 0x18004b228)
HeapSize (Address: 0x18004b140)
InitializeCriticalSection (Address: 0x18004b080)
InitializeCriticalSectionAndSpinCount (Address: 0x18004b308)
InitializeCriticalSectionEx (Address: 0x18004b350)
InitializeSListHead (Address: 0x18004b408)
InterlockedFlushSList (Address: 0x18004b318)
IsDebuggerPresent (Address: 0x18004b3f8)
IsProcessorFeaturePresent (Address: 0x18004b3f0)
IsValidCodePage (Address: 0x18004b210)
IsValidLocale (Address: 0x18004b240)
LCMapStringEx (Address: 0x18004b370)
LCMapStringW (Address: 0x18004b250)
LeaveCriticalSection (Address: 0x18004b078)
LoadLibraryExW (Address: 0x18004b2e0)
LoadLibraryW (Address: 0x18004b198)
LocalFree (Address: 0x18004b0c8)
MultiByteToWideChar (Address: 0x18004b330)
OpenProcess (Address: 0x18004b090)
Process32FirstW (Address: 0x18004b0b0)
Process32NextW (Address: 0x18004b0a8)
QueryPerformanceCounter (Address: 0x18004b3a0)
RaiseException (Address: 0x18004b420)
ReadProcessMemory (Address: 0x18004b0d0)
ReleaseMutex (Address: 0x18004b1c0)
ReleaseSRWLockExclusive (Address: 0x18004b378)
RemoveDirectoryW (Address: 0x18004b100)
RtlCaptureContext (Address: 0x18004b3c0)
RtlLookupFunctionEntry (Address: 0x18004b3c8)
RtlPcToFileHeader (Address: 0x18004b418)
RtlUnwindEx (Address: 0x18004b410)
RtlVirtualUnwind (Address: 0x18004b3d0)
SetEnvironmentVariableW (Address: 0x18004b1d8)
SetFileAttributesW (Address: 0x18004b120)
SetFilePointerEx (Address: 0x18004b220)
SetLastError (Address: 0x18004b310)
SetStdHandle (Address: 0x18004b1c8)
SetUnhandledExceptionFilter (Address: 0x18004b3e0)
Sleep (Address: 0x18004b0a0)
SleepConditionVariableSRW (Address: 0x18004b398)
TerminateProcess (Address: 0x18004b3e8)
TlsAlloc (Address: 0x18004b300)
TlsFree (Address: 0x18004b2e8)
TlsGetValue (Address: 0x18004b2f8)
TlsSetValue (Address: 0x18004b2f0)
TryAcquireSRWLockExclusive (Address: 0x18004b388)
UnhandledExceptionFilter (Address: 0x18004b3d8)
VirtualProtect (Address: 0x18004b270)
VirtualProtectEx (Address: 0x18004b0c0)
VirtualQueryEx (Address: 0x18004b0e0)
WaitForSingleObject (Address: 0x18004b088)
WakeAllConditionVariable (Address: 0x18004b390)
WideCharToMultiByte (Address: 0x18004b340)
WriteConsoleW (Address: 0x18004b130)
WriteFile (Address: 0x18004b158)
WriteProcessMemory (Address: 0x18004b170)

ole32.dll

CreateStreamOnHGlobal (Address: 0x18004b5f0)

SHELL32.dll

ShellExecuteW (Address: 0x18004b430)

USER32.dll

EnumWindows (Address: 0x18004b460)
FindWindowW (Address: 0x18004b440)
GetAsyncKeyState (Address: 0x18004b450)
GetClassNameW (Address: 0x18004b478)
GetCursorInfo (Address: 0x18004b458)
GetWindowThreadProcessId (Address: 0x18004b448)
IsWindowVisible (Address: 0x18004b470)
mouse_event (Address: 0x18004b468)

WINHTTP.dll

WinHttpAddRequestHeaders (Address: 0x18004b4c0)
WinHttpCloseHandle (Address: 0x18004b498)
WinHttpConnect (Address: 0x18004b488)
WinHttpOpen (Address: 0x18004b4c8)
WinHttpOpenRequest (Address: 0x18004b4a8)
WinHttpQueryHeaders (Address: 0x18004b4b8)
WinHttpReadData (Address: 0x18004b4b0)
WinHttpReceiveResponse (Address: 0x18004b4d0)
WinHttpSendRequest (Address: 0x18004b490)
WinHttpSetOption (Address: 0x18004b4a0)

WINMM.dll

timeBeginPeriod (Address: 0x18004b4e0)
timeEndPeriod (Address: 0x18004b4e8)