ChatApis.dll

Description: DLL for ChatRT

Version: 10.0.19041.4355

Architecture: 64-bit

Operating System: Windows NT

SHA256: 051f67eb85c05b189e7c77b2ce7b6b52

File Size: 773.0 KB

Uploaded At: Dec. 1, 2025, 7:24 a.m.

Views: 9

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

DllCanUnloadNow (Ordinal: 1, Address: 0x23b0)
DllGetActivationFactory (Ordinal: 2, Address: 0x20e0)
DllGetClassObject (Ordinal: 3, Address: 0x22c0)

Imported DLLs & Functions

api-ms-win-core-debug-l1-1-0.dll

DebugBreak (Address: 0x18009c308)
IsDebuggerPresent (Address: 0x18009c310)
OutputDebugStringA (Address: 0x18009c318)
OutputDebugStringW (Address: 0x18009c320)

api-ms-win-core-delayload-l1-1-0.dll

DelayLoadFailureHook (Address: 0x18009c330)

api-ms-win-core-delayload-l1-1-1.dll

ResolveDelayLoadedAPI (Address: 0x18009c340)

api-ms-win-core-errorhandling-l1-1-0.dll

GetLastError (Address: 0x18009c368)
RaiseException (Address: 0x18009c350)
SetLastError (Address: 0x18009c370)
SetUnhandledExceptionFilter (Address: 0x18009c358)
UnhandledExceptionFilter (Address: 0x18009c360)

api-ms-win-core-file-l1-1-0.dll

CompareFileTime (Address: 0x18009c380)

api-ms-win-core-handle-l1-1-0.dll

CloseHandle (Address: 0x18009c390)

api-ms-win-core-heap-l1-1-0.dll

GetProcessHeap (Address: 0x18009c3b0)
HeapAlloc (Address: 0x18009c3a8)
HeapFree (Address: 0x18009c3a0)

api-ms-win-core-heap-l2-1-0.dll

LocalAlloc (Address: 0x18009c3c0)
LocalFree (Address: 0x18009c3c8)

api-ms-win-core-libraryloader-l1-2-0.dll

DisableThreadLibraryCalls (Address: 0x18009c3d8)
FindResourceExW (Address: 0x18009c3e8)
FreeLibrary (Address: 0x18009c428)
GetModuleFileNameA (Address: 0x18009c408)
GetModuleFileNameW (Address: 0x18009c410)
GetModuleHandleExW (Address: 0x18009c3e0)
GetModuleHandleW (Address: 0x18009c420)
GetProcAddress (Address: 0x18009c400)
LoadLibraryExW (Address: 0x18009c3f8)
LoadResource (Address: 0x18009c3f0)
SizeofResource (Address: 0x18009c418)

api-ms-win-core-libraryloader-l1-2-1.dll

LoadLibraryW (Address: 0x18009c438)

api-ms-win-core-localization-l1-2-0.dll

FormatMessageW (Address: 0x18009c448)

api-ms-win-core-processthreads-l1-1-0.dll

GetCurrentProcess (Address: 0x18009c488)
GetCurrentProcessId (Address: 0x18009c468)
GetCurrentThread (Address: 0x18009c458)
GetCurrentThreadId (Address: 0x18009c480)
OpenProcessToken (Address: 0x18009c470)
OpenThreadToken (Address: 0x18009c478)
SetThreadToken (Address: 0x18009c460)
TerminateProcess (Address: 0x18009c490)

api-ms-win-core-processthreads-l1-1-1.dll

OpenProcess (Address: 0x18009c4a0)

api-ms-win-core-profile-l1-1-0.dll

QueryPerformanceCounter (Address: 0x18009c4b0)

api-ms-win-core-registry-l1-1-0.dll

RegCloseKey (Address: 0x18009c4e8)
RegCreateKeyExW (Address: 0x18009c4f0)
RegDeleteValueW (Address: 0x18009c4c8)
RegEnumKeyExW (Address: 0x18009c4e0)
RegOpenKeyExW (Address: 0x18009c4d0)
RegQueryInfoKeyW (Address: 0x18009c4d8)
RegSetValueExW (Address: 0x18009c4c0)

api-ms-win-core-rtlsupport-l1-1-0.dll

RtlCaptureContext (Address: 0x18009c510)
RtlLookupFunctionEntry (Address: 0x18009c508)
RtlVirtualUnwind (Address: 0x18009c500)

api-ms-win-core-string-l1-1-0.dll

CompareStringW (Address: 0x18009c520)
MultiByteToWideChar (Address: 0x18009c528)

api-ms-win-core-string-l2-1-0.dll

CharNextW (Address: 0x18009c538)

api-ms-win-core-string-obsolete-l1-1-0.dll

lstrcmpiW (Address: 0x18009c548)

api-ms-win-core-synch-l1-1-0.dll

AcquireSRWLockExclusive (Address: 0x18009c560)
AcquireSRWLockShared (Address: 0x18009c5e0)
CreateEventExW (Address: 0x18009c5e8)
CreateEventW (Address: 0x18009c558)
CreateMutexExW (Address: 0x18009c5b8)
CreateSemaphoreExW (Address: 0x18009c590)
DeleteCriticalSection (Address: 0x18009c588)
EnterCriticalSection (Address: 0x18009c5c8)
InitializeCriticalSection (Address: 0x18009c5f0)
InitializeCriticalSectionEx (Address: 0x18009c578)
InitializeSRWLock (Address: 0x18009c568)
LeaveCriticalSection (Address: 0x18009c580)
OpenSemaphoreW (Address: 0x18009c5b0)
ReleaseMutex (Address: 0x18009c5a0)
ReleaseSemaphore (Address: 0x18009c598)
ReleaseSRWLockExclusive (Address: 0x18009c570)
ReleaseSRWLockShared (Address: 0x18009c5c0)
SetEvent (Address: 0x18009c5d0)
WaitForSingleObject (Address: 0x18009c5d8)
WaitForSingleObjectEx (Address: 0x18009c5a8)

api-ms-win-core-synch-l1-2-0.dll

InitOnceBeginInitialize (Address: 0x18009c600)
InitOnceComplete (Address: 0x18009c608)
InitOnceExecuteOnce (Address: 0x18009c618)
Sleep (Address: 0x18009c610)

api-ms-win-core-sysinfo-l1-1-0.dll

GetSystemTimeAsFileTime (Address: 0x18009c628)
GetTickCount (Address: 0x18009c638)
GetTickCount64 (Address: 0x18009c630)

api-ms-win-core-threadpool-l1-2-0.dll

CloseThreadpoolWait (Address: 0x18009c678)
CloseThreadpoolWork (Address: 0x18009c668)
CreateThreadpoolWait (Address: 0x18009c658)
CreateThreadpoolWork (Address: 0x18009c648)
FreeLibraryWhenCallbackReturns (Address: 0x18009c680)
SetThreadpoolWait (Address: 0x18009c660)
SubmitThreadpoolWork (Address: 0x18009c670)
WaitForThreadpoolWaitCallbacks (Address: 0x18009c650)

api-ms-win-core-url-l1-1-0.dll

UrlEscapeW (Address: 0x18009c690)

api-ms-win-core-util-l1-1-0.dll

DecodePointer (Address: 0x18009c6a0)
EncodePointer (Address: 0x18009c6a8)

api-ms-win-eventing-provider-l1-1-0.dll

EventActivityIdControl (Address: 0x18009c6b8)
EventRegister (Address: 0x18009c6c8)
EventSetInformation (Address: 0x18009c6d8)
EventUnregister (Address: 0x18009c6d0)
EventWriteTransfer (Address: 0x18009c6c0)

api-ms-win-service-management-l1-1-0.dll

CloseServiceHandle (Address: 0x18009c6f8)
OpenSCManagerW (Address: 0x18009c6e8)
OpenServiceW (Address: 0x18009c6f0)

api-ms-win-service-winsvc-l1-1-0.dll

QueryServiceStatus (Address: 0x18009c708)

msvcrt.dll

__C_specific_handler (Address: 0x18009c7f0)
__CxxFrameHandler3 (Address: 0x18009c718)
__dllonexit (Address: 0x18009c740)
_amsg_exit (Address: 0x18009c760)
_callnewh (Address: 0x18009c770)
_errno (Address: 0x18009c798)
_initterm (Address: 0x18009c758)
_lock (Address: 0x18009c750)
_onexit (Address: 0x18009c738)
_purecall (Address: 0x18009c7c8)
_unlock (Address: 0x18009c748)
_vsnwprintf (Address: 0x18009c778)
_vsnwprintf_s (Address: 0x18009c7a0)
_wtoi (Address: 0x18009c7a8)
_wtol (Address: 0x18009c788)
_XcptFilter (Address: 0x18009c768)
free (Address: 0x18009c7e0)
malloc (Address: 0x18009c7d8)
memcmp (Address: 0x18009c730)
memcpy (Address: 0x18009c728)
memcpy_s (Address: 0x18009c7e8)
memmove (Address: 0x18009c720)
memmove_s (Address: 0x18009c7c0)
memset (Address: 0x18009c7f8)
realloc (Address: 0x18009c7b0)
tolower (Address: 0x18009c780)
wcsncpy_s (Address: 0x18009c7d0)
wcstok_s (Address: 0x18009c790)
wcstoul (Address: 0x18009c7b8)

ntdll.dll

RtlQueryWnfStateData (Address: 0x18009c808)
RtlSubscribeWnfStateChangeNotification (Address: 0x18009c810)
RtlUnsubscribeWnfNotificationWaitForCompletion (Address: 0x18009c818)

SystemEventsBrokerClient.dll

SebCreateChatNotificationEvent (Address: 0x18009c2b8)
SebCreateMessageInterceptNotificationEvent (Address: 0x18009c2c0)
SebCreateRcsEndUserMessageNotificationEvent (Address: 0x18009c2a8)
SebDeleteEvent (Address: 0x18009c2b0)

UserDataPlatformHelperUtil.dll

GenerateUserModeServiceName (Address: 0x18009c2e0)
GetUserContextFromHandle (Address: 0x18009c2e8)
GetUserTokenFromContext (Address: 0x18009c2d0)
IsCommsSystemService (Address: 0x18009c2d8)
RunServicesInProc (Address: 0x18009c2f0)
StartAndWaitForServiceForUser (Address: 0x18009c2f8)