ChatApis.dll

Description: DLL for ChatRT

Authors: © Microsoft Corporation. All rights reserved.

Version: 10.0.19041.4355

Architecture: 32-bit

Operating System: Windows NT

SHA256: 81d042eedf669081f59a0d31b6891da7

File Size: 547.5 KB

Uploaded At: Dec. 1, 2025, 7:53 a.m.

Views: 5

Security Warning

This file has been flagged as potentially dangerous.


Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

  • DllCanUnloadNow (Ordinal: 1, Address: 0x1d570)
  • DllGetActivationFactory (Ordinal: 2, Address: 0x1d530)
  • DllGetClassObject (Ordinal: 3, Address: 0x1d550)

Imported DLLs & Functions

api-ms-win-core-debug-l1-1-0.dll
  • DebugBreak (Address: 0x1007c03c)
  • IsDebuggerPresent (Address: 0x1007c034)
  • OutputDebugStringA (Address: 0x1007c030)
  • OutputDebugStringW (Address: 0x1007c038)
api-ms-win-core-delayload-l1-1-0.dll
  • DelayLoadFailureHook (Address: 0x1007c044)
api-ms-win-core-delayload-l1-1-1.dll
  • ResolveDelayLoadedAPI (Address: 0x1007c04c)
api-ms-win-core-errorhandling-l1-1-0.dll
  • GetLastError (Address: 0x1007c054)
  • RaiseException (Address: 0x1007c05c)
  • SetLastError (Address: 0x1007c064)
  • SetUnhandledExceptionFilter (Address: 0x1007c058)
  • UnhandledExceptionFilter (Address: 0x1007c060)
api-ms-win-core-file-l1-1-0.dll
  • CompareFileTime (Address: 0x1007c06c)
api-ms-win-core-handle-l1-1-0.dll
  • CloseHandle (Address: 0x1007c074)
api-ms-win-core-heap-l1-1-0.dll
  • GetProcessHeap (Address: 0x1007c084)
  • HeapAlloc (Address: 0x1007c080)
  • HeapFree (Address: 0x1007c07c)
api-ms-win-core-heap-l2-1-0.dll
  • LocalAlloc (Address: 0x1007c08c)
  • LocalFree (Address: 0x1007c090)
api-ms-win-core-libraryloader-l1-2-0.dll
  • DisableThreadLibraryCalls (Address: 0x1007c098)
  • FindResourceExW (Address: 0x1007c0a0)
  • FreeLibrary (Address: 0x1007c0b8)
  • GetModuleFileNameA (Address: 0x1007c0c0)
  • GetModuleFileNameW (Address: 0x1007c0b4)
  • GetModuleHandleExW (Address: 0x1007c09c)
  • GetModuleHandleW (Address: 0x1007c0bc)
  • GetProcAddress (Address: 0x1007c0b0)
  • LoadLibraryExW (Address: 0x1007c0a8)
  • LoadResource (Address: 0x1007c0a4)
  • SizeofResource (Address: 0x1007c0ac)
api-ms-win-core-libraryloader-l1-2-1.dll
  • LoadLibraryW (Address: 0x1007c0c8)
api-ms-win-core-localization-l1-2-0.dll
  • FormatMessageW (Address: 0x1007c0d0)
api-ms-win-core-processthreads-l1-1-0.dll
  • GetCurrentProcess (Address: 0x1007c0f0)
  • GetCurrentProcessId (Address: 0x1007c0dc)
  • GetCurrentThread (Address: 0x1007c0ec)
  • GetCurrentThreadId (Address: 0x1007c0e8)
  • OpenProcessToken (Address: 0x1007c0e0)
  • OpenThreadToken (Address: 0x1007c0d8)
  • SetThreadToken (Address: 0x1007c0e4)
  • TerminateProcess (Address: 0x1007c0f4)
api-ms-win-core-processthreads-l1-1-1.dll
  • OpenProcess (Address: 0x1007c0fc)
api-ms-win-core-profile-l1-1-0.dll
  • QueryPerformanceCounter (Address: 0x1007c104)
api-ms-win-core-registry-l1-1-0.dll
  • RegCloseKey (Address: 0x1007c11c)
  • RegCreateKeyExW (Address: 0x1007c120)
  • RegDeleteValueW (Address: 0x1007c118)
  • RegEnumKeyExW (Address: 0x1007c124)
  • RegOpenKeyExW (Address: 0x1007c10c)
  • RegQueryInfoKeyW (Address: 0x1007c110)
  • RegSetValueExW (Address: 0x1007c114)
api-ms-win-core-string-l1-1-0.dll
  • CompareStringW (Address: 0x1007c12c)
  • MultiByteToWideChar (Address: 0x1007c130)
api-ms-win-core-string-l2-1-0.dll
  • CharNextW (Address: 0x1007c138)
api-ms-win-core-string-obsolete-l1-1-0.dll
  • lstrcmpiW (Address: 0x1007c140)
api-ms-win-core-synch-l1-1-0.dll
  • AcquireSRWLockExclusive (Address: 0x1007c160)
  • AcquireSRWLockShared (Address: 0x1007c14c)
  • CreateEventExW (Address: 0x1007c194)
  • CreateEventW (Address: 0x1007c158)
  • CreateMutexExW (Address: 0x1007c188)
  • CreateSemaphoreExW (Address: 0x1007c174)
  • DeleteCriticalSection (Address: 0x1007c148)
  • EnterCriticalSection (Address: 0x1007c154)
  • InitializeCriticalSection (Address: 0x1007c190)
  • InitializeCriticalSectionEx (Address: 0x1007c16c)
  • InitializeSRWLock (Address: 0x1007c164)
  • LeaveCriticalSection (Address: 0x1007c150)
  • OpenSemaphoreW (Address: 0x1007c184)
  • ReleaseMutex (Address: 0x1007c17c)
  • ReleaseSemaphore (Address: 0x1007c178)
  • ReleaseSRWLockExclusive (Address: 0x1007c168)
  • ReleaseSRWLockShared (Address: 0x1007c15c)
  • SetEvent (Address: 0x1007c170)
  • WaitForSingleObject (Address: 0x1007c18c)
  • WaitForSingleObjectEx (Address: 0x1007c180)
api-ms-win-core-synch-l1-2-0.dll
  • InitOnceBeginInitialize (Address: 0x1007c1a4)
  • InitOnceComplete (Address: 0x1007c1a0)
  • InitOnceExecuteOnce (Address: 0x1007c19c)
  • Sleep (Address: 0x1007c1a8)
api-ms-win-core-sysinfo-l1-1-0.dll
  • GetSystemTimeAsFileTime (Address: 0x1007c1b4)
  • GetTickCount (Address: 0x1007c1b0)
  • GetTickCount64 (Address: 0x1007c1b8)
api-ms-win-core-threadpool-l1-2-0.dll
  • CloseThreadpoolWait (Address: 0x1007c1d0)
  • CloseThreadpoolWork (Address: 0x1007c1d4)
  • CreateThreadpoolWait (Address: 0x1007c1c0)
  • CreateThreadpoolWork (Address: 0x1007c1c8)
  • FreeLibraryWhenCallbackReturns (Address: 0x1007c1dc)
  • SetThreadpoolWait (Address: 0x1007c1d8)
  • SubmitThreadpoolWork (Address: 0x1007c1cc)
  • WaitForThreadpoolWaitCallbacks (Address: 0x1007c1c4)
api-ms-win-core-url-l1-1-0.dll
  • UrlEscapeW (Address: 0x1007c1e4)
api-ms-win-core-util-l1-1-0.dll
  • DecodePointer (Address: 0x1007c1f0)
  • EncodePointer (Address: 0x1007c1ec)
api-ms-win-eventing-provider-l1-1-0.dll
  • EventActivityIdControl (Address: 0x1007c204)
  • EventRegister (Address: 0x1007c1f8)
  • EventSetInformation (Address: 0x1007c1fc)
  • EventUnregister (Address: 0x1007c200)
  • EventWriteTransfer (Address: 0x1007c208)
api-ms-win-service-management-l1-1-0.dll
  • CloseServiceHandle (Address: 0x1007c210)
  • OpenSCManagerW (Address: 0x1007c214)
  • OpenServiceW (Address: 0x1007c218)
api-ms-win-service-winsvc-l1-1-0.dll
  • QueryServiceStatus (Address: 0x1007c220)
msvcrt.dll
  • __CxxFrameHandler3 (Address: 0x1007c22c)
  • __dllonexit (Address: 0x1007c240)
  • _amsg_exit (Address: 0x1007c254)
  • _callnewh (Address: 0x1007c25c)
  • _errno (Address: 0x1007c270)
  • _except_handler4_common (Address: 0x1007c24c)
  • _ftol2 (Address: 0x1007c234)
  • _initterm (Address: 0x1007c250)
  • _lock (Address: 0x1007c248)
  • _onexit (Address: 0x1007c23c)
  • _purecall (Address: 0x1007c288)
  • _unlock (Address: 0x1007c244)
  • _vsnwprintf (Address: 0x1007c260)
  • _vsnwprintf_s (Address: 0x1007c274)
  • _wtoi (Address: 0x1007c27c)
  • _wtol (Address: 0x1007c268)
  • _XcptFilter (Address: 0x1007c258)
  • free (Address: 0x1007c294)
  • malloc (Address: 0x1007c290)
  • memcmp (Address: 0x1007c298)
  • memcpy (Address: 0x1007c230)
  • memcpy_s (Address: 0x1007c238)
  • memmove (Address: 0x1007c228)
  • memmove_s (Address: 0x1007c284)
  • memset (Address: 0x1007c29c)
  • realloc (Address: 0x1007c280)
  • tolower (Address: 0x1007c264)
  • wcsncpy_s (Address: 0x1007c28c)
  • wcstok_s (Address: 0x1007c26c)
  • wcstoul (Address: 0x1007c278)
ntdll.dll
  • RtlQueryWnfStateData (Address: 0x1007c2a4)
  • RtlSubscribeWnfStateChangeNotification (Address: 0x1007c2a8)
  • RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x1007c2ac)
SystemEventsBrokerClient.dll
  • SebCreateChatNotificationEvent (Address: 0x1007c000)
  • SebCreateMessageInterceptNotificationEvent (Address: 0x1007c004)
  • SebCreateRcsEndUserMessageNotificationEvent (Address: 0x1007c008)
  • SebDeleteEvent (Address: 0x1007c00c)
UserDataPlatformHelperUtil.dll
  • GenerateUserModeServiceName (Address: 0x1007c01c)
  • GetUserContextFromHandle (Address: 0x1007c028)
  • GetUserTokenFromContext (Address: 0x1007c024)
  • IsCommsSystemService (Address: 0x1007c018)
  • RunServicesInProc (Address: 0x1007c014)
  • StartAndWaitForServiceForUser (Address: 0x1007c020)