DXToolsMonitor.dll

Description: DirectX Tools Monitor

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.4355

Architecture: 64-bit

Operating System: Windows NT

SHA256: 3f2eef2f6df076d07980f21bdc26790e

File Size: 185.0 KB

Uploaded At: Dec. 1, 2025, 7:27 a.m.

Views: 11

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: WriteProcessMemory, OpenProcess

Exported Functions

  • CLSID_DXDefaultPlatformStorage (Ordinal: 1, Address: 0x2d3e8)
  • CLSID_DXToolsStockExperiment_FullCapture (Ordinal: 2, Address: 0x2d3f8)
  • CLSID_DXToolsStockExperiment_FullPlayback (Ordinal: 3, Address: 0x2d3d8)
  • CLSID_DXToolsStockExperiment_Overdraw (Ordinal: 4, Address: 0x2d3b8)
  • CLSID_DXToolsStockExperiment_Recapture (Ordinal: 5, Address: 0x2d3c8)
  • CreateWin8Injector (Ordinal: 6, Address: 0x7d30)
  • CreateSerializationController (Ordinal: 7, Address: 0xe0f0)

Imported DLLs & Functions

api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x180021108)
  • IsDebuggerPresent (Address: 0x180021118)
  • OutputDebugStringA (Address: 0x180021120)
  • OutputDebugStringW (Address: 0x180021110)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x180021130)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x180021140)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x180021160)
  • RaiseException (Address: 0x180021168)
  • SetLastError (Address: 0x180021158)
  • SetUnhandledExceptionFilter (Address: 0x180021150)
  • UnhandledExceptionFilter (Address: 0x180021170)
api-ms-win-core-file-l1-1-0.dll
  • CreateFileW (Address: 0x180021188)
  • FindClose (Address: 0x1800211a8)
  • FindFirstFileW (Address: 0x180021190)
  • GetFileSizeEx (Address: 0x1800211b0)
  • ReadFile (Address: 0x180021180)
  • SetFilePointerEx (Address: 0x1800211a0)
  • WriteFile (Address: 0x180021198)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x1800211c0)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x1800211e0)
  • HeapAlloc (Address: 0x1800211d8)
  • HeapFree (Address: 0x1800211d0)
api-ms-win-core-heap-obsolete-l1-1-0.dll
  • LocalAlloc (Address: 0x1800211f0)
  • LocalFree (Address: 0x1800211f8)
api-ms-win-core-interlocked-l1-1-0.dll
  • InitializeSListHead (Address: 0x180021218)
  • InterlockedFlushSList (Address: 0x180021208)
  • InterlockedPushEntrySList (Address: 0x180021210)
api-ms-win-core-io-l1-1-1.dll
  • CancelSynchronousIo (Address: 0x180021228)
api-ms-win-core-job-l2-1-0.dll
  • AssignProcessToJobObject (Address: 0x180021238)
  • CreateJobObjectW (Address: 0x180021240)
  • QueryInformationJobObject (Address: 0x180021248)
api-ms-win-core-kernel32-legacy-l1-1-0.dll
  • CreateSemaphoreW (Address: 0x180021258)
  • LoadLibraryW (Address: 0x180021260)
api-ms-win-core-libraryloader-l1-2-0.dll
  • FreeLibrary (Address: 0x180021298)
  • GetModuleFileNameA (Address: 0x180021288)
  • GetModuleFileNameW (Address: 0x180021290)
  • GetModuleHandleExW (Address: 0x1800212a0)
  • GetModuleHandleW (Address: 0x180021278)
  • GetProcAddress (Address: 0x180021280)
  • LoadLibraryExW (Address: 0x180021270)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageA (Address: 0x1800212b0)
  • FormatMessageW (Address: 0x1800212c0)
  • LCMapStringEx (Address: 0x1800212b8)
api-ms-win-core-memory-l1-1-0.dll
  • CreateFileMappingW (Address: 0x1800212d8)
  • MapViewOfFile (Address: 0x1800212e8)
  • OpenFileMappingW (Address: 0x1800212d0)
  • ReadProcessMemory (Address: 0x1800212f8)
  • UnmapViewOfFile (Address: 0x180021308)
  • VirtualAlloc (Address: 0x1800212f0)
  • VirtualFree (Address: 0x180021300)
  • WriteProcessMemory (Address: 0x1800212e0)
api-ms-win-core-namedpipe-l1-1-0.dll
  • ConnectNamedPipe (Address: 0x180021328)
  • CreateNamedPipeW (Address: 0x180021330)
  • DisconnectNamedPipe (Address: 0x180021318)
  • WaitNamedPipeW (Address: 0x180021320)
api-ms-win-core-processthreads-l1-1-0.dll
  • CreateProcessW (Address: 0x180021358)
  • CreateThread (Address: 0x180021360)
  • GetCurrentProcess (Address: 0x180021380)
  • GetCurrentProcessId (Address: 0x180021368)
  • GetCurrentThreadId (Address: 0x180021378)
  • GetExitCodeProcess (Address: 0x180021348)
  • ProcessIdToSessionId (Address: 0x180021370)
  • ResumeThread (Address: 0x180021350)
  • TerminateProcess (Address: 0x180021340)
api-ms-win-core-processthreads-l1-1-1.dll
  • IsProcessorFeaturePresent (Address: 0x180021398)
  • OpenProcess (Address: 0x180021390)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x1800213a8)
api-ms-win-core-registry-l2-1-0.dll
  • RegCreateKeyW (Address: 0x1800213b8)
api-ms-win-core-string-l1-1-0.dll
  • GetStringTypeW (Address: 0x1800213d8)
  • MultiByteToWideChar (Address: 0x1800213d0)
  • WideCharToMultiByte (Address: 0x1800213c8)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x180021420)
  • AcquireSRWLockShared (Address: 0x180021410)
  • CreateEventW (Address: 0x180021448)
  • CreateMutexExW (Address: 0x1800213f0)
  • CreateMutexW (Address: 0x180021458)
  • CreateSemaphoreExW (Address: 0x1800213f8)
  • DeleteCriticalSection (Address: 0x180021478)
  • EnterCriticalSection (Address: 0x180021468)
  • InitializeCriticalSection (Address: 0x180021408)
  • InitializeCriticalSectionEx (Address: 0x1800213e8)
  • InitializeSRWLock (Address: 0x180021430)
  • LeaveCriticalSection (Address: 0x180021460)
  • OpenSemaphoreW (Address: 0x180021480)
  • ReleaseMutex (Address: 0x180021450)
  • ReleaseSemaphore (Address: 0x180021400)
  • ReleaseSRWLockExclusive (Address: 0x180021428)
  • ReleaseSRWLockShared (Address: 0x180021418)
  • SetEvent (Address: 0x180021438)
  • WaitForSingleObject (Address: 0x180021440)
  • WaitForSingleObjectEx (Address: 0x180021470)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceExecuteOnce (Address: 0x180021498)
  • Sleep (Address: 0x180021490)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemDirectoryW (Address: 0x1800214a8)
  • GetSystemInfo (Address: 0x1800214c0)
  • GetSystemTimeAsFileTime (Address: 0x1800214b8)
  • GlobalMemoryStatusEx (Address: 0x1800214b0)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x1800214d0)
  • EncodePointer (Address: 0x1800214d8)
api-ms-win-core-winrt-l1-1-0.dll
  • RoActivateInstance (Address: 0x1800214f0)
  • RoInitialize (Address: 0x1800214e8)
  • RoUninitialize (Address: 0x1800214f8)
api-ms-win-core-winrt-string-l1-1-0.dll
  • WindowsCreateString (Address: 0x180021520)
  • WindowsCreateStringReference (Address: 0x180021518)
  • WindowsDeleteString (Address: 0x180021510)
  • WindowsGetStringRawBuffer (Address: 0x180021508)
api-ms-win-crt-locale-l1-1-0.dll
  • _lock_locales (Address: 0x180021538)
  • _unlock_locales (Address: 0x180021530)
api-ms-win-crt-private-l1-1-0.dll
  • __C_specific_handler (Address: 0x180021678)
  • __CxxFrameHandler3 (Address: 0x180021680)
  • __uncaught_exception (Address: 0x1800215d8)
  • _CxxThrowException (Address: 0x1800215d0)
  • _o____lc_codepage_func (Address: 0x180021670)
  • _o____lc_locale_name_func (Address: 0x180021668)
  • _o____mb_cur_max_func (Address: 0x180021660)
  • _o___pctype_func (Address: 0x180021658)
  • _o___std_exception_copy (Address: 0x180021650)
  • _o___std_exception_destroy (Address: 0x180021648)
  • _o___std_type_info_destroy_list (Address: 0x180021640)
  • _o___stdio_common_vfprintf (Address: 0x180021638)
  • _o___stdio_common_vsnprintf_s (Address: 0x180021630)
  • _o___stdio_common_vsnwprintf_s (Address: 0x180021628)
  • _o___stdio_common_vsprintf (Address: 0x180021620)
  • _o___stdio_common_vswprintf (Address: 0x180021618)
  • _o__aligned_free (Address: 0x180021610)
  • _o__aligned_malloc (Address: 0x180021608)
  • _o__callnewh (Address: 0x1800215f0)
  • _o__calloc_base (Address: 0x1800215e8)
  • _o__cexit (Address: 0x1800215e0)
  • _o__configure_narrow_argv (Address: 0x1800215c8)
  • _o__crt_atexit (Address: 0x180021580)
  • _o__errno (Address: 0x180021600)
  • _o__execute_onexit_table (Address: 0x1800215f8)
  • _o__initialize_narrow_environment (Address: 0x180021548)
  • _o__initialize_onexit_table (Address: 0x180021550)
  • _o__invalid_parameter_noinfo (Address: 0x180021558)
  • _o__invalid_parameter_noinfo_noreturn (Address: 0x180021560)
  • _o__purecall (Address: 0x180021568)
  • _o__register_onexit_function (Address: 0x180021570)
  • _o__seh_filter_dll (Address: 0x180021578)
  • _o__wcsdup (Address: 0x180021590)
  • _o_abort (Address: 0x180021598)
  • _o_free (Address: 0x1800215a0)
  • _o_malloc (Address: 0x1800215a8)
  • _o_setlocale (Address: 0x1800215b0)
  • _o_terminate (Address: 0x1800215b8)
  • _o_wcscat_s (Address: 0x1800215c0)
  • memcpy (Address: 0x180021688)
  • memmove (Address: 0x180021588)
api-ms-win-crt-runtime-l1-1-0.dll
  • _initterm (Address: 0x1800216a0)
  • _initterm_e (Address: 0x180021698)
api-ms-win-crt-string-l1-1-0.dll
  • memset (Address: 0x1800216b8)
  • wcscmp (Address: 0x1800216b0)
  • wcsnlen (Address: 0x1800216c0)
api-ms-win-downlevel-advapi32-l1-1-0.dll
  • AddMandatoryAce (Address: 0x1800216e0)
  • AllocateAndInitializeSid (Address: 0x180021708)
  • CopySid (Address: 0x180021720)
  • FreeSid (Address: 0x1800216f8)
  • GetLengthSid (Address: 0x180021738)
  • GetTokenInformation (Address: 0x180021740)
  • InitializeAcl (Address: 0x1800216e8)
  • InitializeSecurityDescriptor (Address: 0x1800216f0)
  • IsValidSid (Address: 0x180021728)
  • OpenProcessToken (Address: 0x180021730)
  • RegCloseKey (Address: 0x1800216d8)
  • RegGetValueW (Address: 0x180021718)
  • RegOpenKeyExW (Address: 0x180021748)
  • RegSetValueExW (Address: 0x1800216d0)
  • SetSecurityDescriptorDacl (Address: 0x180021710)
  • SetSecurityDescriptorSacl (Address: 0x180021700)
api-ms-win-downlevel-ole32-l1-1-0.dll
  • CoCreateInstance (Address: 0x180021760)
  • CoInitializeEx (Address: 0x180021758)
api-ms-win-downlevel-shlwapi-l2-1-0.dll
  • SHCreateStreamOnFileW (Address: 0x180021770)
api-ms-win-downlevel-version-l1-1-0.dll
  • GetFileVersionInfoExW (Address: 0x180021790)
  • GetFileVersionInfoSizeExW (Address: 0x180021780)
  • VerQueryValueW (Address: 0x180021788)
api-ms-win-security-appcontainer-l1-1-0.dll
  • GetAppContainerNamedObjectPath (Address: 0x1800217a0)
api-ms-win-security-provider-l1-1-0.dll
  • SetEntriesInAclW (Address: 0x1800217b0)
ntdll.dll
  • NtQueryInformationProcess (Address: 0x1800217c0)
  • RtlCaptureContext (Address: 0x1800217d0)
  • RtlConvertSidToUnicodeString (Address: 0x1800217d8)
  • RtlFreeUnicodeString (Address: 0x1800217e0)
  • RtlLookupFunctionEntry (Address: 0x1800217f0)
  • RtlNtStatusToDosError (Address: 0x1800217e8)
  • RtlVirtualUnwind (Address: 0x1800217c8)
XmlLite.dll
  • CreateXmlReader (Address: 0x1800210f8)