ARKCmdFS.dll
v6.0.98.0
32-bit
Windows
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 3
GetCommandObject
#1 · 0x1ffa0
SetARKController
#2 · 0x1fff0
SetLogger
#3 · 0x20050
No function matches your filter.
Imported DLLs & functions 256
ADVAPI32.dll
40
AdjustTokenPrivileges
0x10050018
AllocateAndInitializeSid
0x10050068
ChangeServiceConfig2W
0x10050088
ChangeServiceConfigW
0x10050090
CloseServiceHandle
0x10050070
ControlService
0x1005009c
CreateProcessAsUserW
0x10050010
CreateRestrictedToken
0x1005000c
CreateServiceW
0x1005006c
CreateWellKnownSid
0x1005001c
DeleteService
0x10050074
FreeSid
0x10050004
GetNamedSecurityInfoW
0x10050024
GetSecurityDescriptorDacl
0x10050064
GetServiceDisplayNameW
0x10050098
GetServiceKeyNameW
0x10050000
InitializeSecurityDescriptor
0x10050034
LookupPrivilegeValueW
0x10050014
OpenProcessToken
0x10050008
OpenSCManagerW
0x10050078
OpenServiceW
0x10050080
QueryServiceConfig2W
0x10050084
QueryServiceConfigW
0x1005007c
QueryServiceStatusEx
0x10050094
RegCloseKey
0x1005005c
RegCreateKeyExW
0x10050028
RegDeleteKeyW
0x10050038
RegDeleteValueW
0x10050044
RegEnumKeyExW
0x10050058
RegEnumValueW
0x1005004c
RegGetKeySecurity
0x10050040
RegOpenKeyExW
0x10050054
RegQueryInfoKeyW
0x10050030
RegQueryValueExW
0x1005002c
RegSetKeySecurity
0x10050050
RegSetValueExW
0x10050060
SetEntriesInAclW
0x10050048
SetNamedSecurityInfoW
0x10050020
SetSecurityDescriptorDacl
0x1005003c
StartServiceW
0x1005008c
??0ARKCommand@@QAE@AAVLogAppender@@@Z
0x100500b8
??1ARKCommand@@UAE@XZ
0x100500b4
?GetDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z
0x100500a4
?GetInstallSequenceNumber@ARKCommand@@UBEIXZ
0x100500c4
?GetLogger@ARKCommand@@UBEAAVLogAppender@@XZ
0x100500bc
?GetTargetFileName@ARKCommand@@UBE_NAAVFileSystemPath@@@Z
0x100500c0
?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
0x100500b0
?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z
0x100500ac
?Perform@ARKCommand@@QAE_NXZ
0x100500a8
?SetInstallSequenceNumber@ARKCommand@@UAEXI@Z
0x100500c8
KERNEL32.dll
66
CloseHandle
0x10050154
CopyFileW
0x10050164
CreateDirectoryW
0x100501e0
CreateFileW
0x10050188
CreateProcessW
0x10050138
DecodePointer
0x100500e8
DeleteFileW
0x100501d4
EncodePointer
0x10050100
FindClose
0x100501c4
FindFirstFileW
0x100501a4
FindNextFileW
0x100501d0
FormatMessageW
0x100501ac
FreeLibrary
0x10050114
GetCurrentDirectoryW
0x100501bc
GetCurrentProcess
0x1005013c
GetCurrentProcessId
0x100500f0
GetCurrentThreadId
0x100500ec
GetExitCodeProcess
0x10050148
GetFileAttributesW
0x100501b0
GetFileSize
0x10050190
GetLastError
0x10050134
GetModuleFileNameW
0x1005019c
GetModuleHandleW
0x10050120
GetProcAddress
0x10050178
GetProcessHeap
0x10050170
GetStringTypeExW
0x1005010c
GetSystemTime
0x1005018c
GetSystemTimeAsFileTime
0x100500f4
GetTempPathW
0x100501b8
GetTickCount
0x1005017c
GetUserDefaultLCID
0x10050110
HeapAlloc
0x10050168
HeapFree
0x1005016c
InterlockedCompareExchange
0x1005011c
InterlockedExchange
0x10050118
IsDebuggerPresent
0x100500e4
LCMapStringW
0x10050104
LoadLibraryA
0x10050108
LoadLibraryW
0x10050174
LocalAlloc
0x10050150
LocalFree
0x10050158
lstrcatW
0x10050124
lstrcmpiW
0x1005012c
lstrcmpW
0x100501b4
lstrcpyW
0x100501d8
lstrlenW
0x10050130
MoveFileExW
0x100501a8
MoveFileW
0x10050128
MultiByteToWideChar
0x100501a0
OpenProcess
0x10050144
QueryPerformanceCounter
0x100500fc
RaiseException
0x100500f8
ReadFile
0x10050194
RemoveDirectoryW
0x100501cc
SetCurrentDirectoryW
0x100501c8
SetDllDirectoryW
0x10050198
SetFileAttributesW
0x100501dc
SetFileTime
0x10050184
SetLastError
0x100501c0
SetUnhandledExceptionFilter
0x100500e0
Sleep
0x1005015c
SystemTimeToFileTime
0x10050180
TerminateProcess
0x1005014c
UnhandledExceptionFilter
0x100500dc
WaitForSingleObject
0x10050140
WideCharToMultiByte
0x10050160
MSVCP100.dll
36
?_BADOFF@std@@3_JB
0x10050238
?_Decref@facet@locale@std@@QAEPAV123@XZ
0x100501f0
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
0x1005024c
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
0x10050258
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
0x10050248
?_Incref@facet@locale@std@@QAEXXZ
0x100501ec
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
0x10050260
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
0x1005025c
?_Xlength_error@std@@YAXPBD@Z
0x10050230
?_Xout_of_range@std@@YAXPBD@Z
0x1005022c
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
0x10050234
??0_Lockit@std@@QAE@H@Z
0x10050240
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
0x10050228
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
0x10050274
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
0x1005026c
??1_Lockit@std@@QAE@XZ
0x1005023c
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
0x10050208
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
0x10050210
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
0x100501f8
??Bid@locale@std@@QAEIXZ
0x100501e8
?always_noconv@codecvt_base@std@@QBE_NXZ
0x100501f4
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
0x10050224
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
0x10050214
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
0x10050268
?id@?$codecvt@DDH@std@@2V0locale@2@A
0x10050250
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
0x10050218
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
0x1005021c
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
0x10050264
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
0x1005020c
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
0x100501fc
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
0x10050220
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
0x10050254
?uncaught_exception@std@@YA_NXZ
0x10050244
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
0x10050270
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
0x10050200
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
0x10050204
MSVCR100.dll
63
__clean_type_info_names_internal
0x10050288
__CppXcptFilter
0x10050298
__CxxFrameHandler3
0x100502c8
__dllonexit
0x100502c0
_amsg_exit
0x1005029c
_crt_debugger_hook
0x10050294
_CxxThrowException
0x10050280
_encoded_null
0x100502a8
_except_handler4_common
0x10050290
_fseeki64
0x10050330
_initterm
0x100502a4
_initterm_e
0x100502a0
_lock
0x100502bc
_lock_file
0x10050344
_malloc_crt
0x100502ac
_onexit
0x100502b8
_purecall
0x1005030c
_snwprintf_s
0x10050360
_time64
0x1005036c
_unlock
0x100502c4
_unlock_file
0x10050324
_vsnwprintf_s
0x10050310
_wstat64i32
0x1005035c
_wtoi
0x100502e0
?_type_info_dtor_internal_method@type_info@@QAEXXZ
0x1005028c
??_V@YAXPAX@Z
0x100502ec
??0bad_cast@std@@QAE@ABV01@@Z
0x10050320
??0bad_cast@std@@QAE@PBD@Z
0x1005031c
??0exception@std@@QAE@ABQBD@Z
0x100502d4
??0exception@std@@QAE@ABV01@@Z
0x100502d8
??1bad_cast@std@@UAE@XZ
0x10050318
??1exception@std@@UAE@XZ
0x100502d0
??2@YAPAXI@Z
0x100502e8
??3@YAXPAX@Z
0x100502e4
??8type_info@@QBE_NABV0@@Z
0x100502b0
?terminate@@YAXXZ
0x100502b4
?what@exception@std@@UBEPBDXZ
0x100502cc
fclose
0x10050350
fflush
0x10050334
fgetc
0x10050338
fgetpos
0x1005032c
fputc
0x10050314
free
0x100502f0
fsetpos
0x1005033c
fwrite
0x1005034c
malloc
0x100502f4
memchr
0x10050354
memcpy
0x1005027c
memcpy_s
0x10050348
memmove
0x100502dc
memset
0x10050284
rand
0x10050364
setvbuf
0x10050340
sprintf_s
0x10050308
srand
0x10050368
strcat_s
0x100502f8
swprintf_s
0x10050358
toupper
0x10050300
ungetc
0x10050328
vswprintf_s
0x10050370
wcscpy_s
0x10050304
wcstoul
0x100502fc
wprintf
0x10050374
CoCreateInstance
0x1005042c
CoInitialize
0x10050424
CoTaskMemFree
0x10050420
CoUninitialize
0x10050428
0x100503a4
0x100503ac
SHChangeNotify
0x100503a0
SHCreateDirectoryExW
0x100503a8
SHGetFolderLocation
0x100503b8
SHGetFolderPathW
0x100503b0
SHGetPathFromIDListW
0x100503b4
SHSetLocalizedName
0x1005039c
SHLWAPI.dll
18
PathAddBackslashW
0x100503f8
PathAppendW
0x100503d4
PathCombineW
0x100503dc
PathFileExistsW
0x100503f4
PathFindExtensionW
0x10050400
PathFindFileNameW
0x100503fc
PathIsDirectoryW
0x100503e0
PathIsRelativeW
0x100503d0
PathIsRootW
0x100503f0
PathIsUNCW
0x100503c0
PathMakePrettyW
0x100503d8
PathMakeSystemFolderW
0x100503cc
PathRemoveBackslashW
0x100503e8
PathRemoveFileSpecW
0x100503c4
PathRenameExtensionW
0x100503ec
PathStripPathW
0x100503e4
PathStripToRootW
0x10050404
PathUnmakeSystemFolderW
0x100503c8
LoadStringW
0x1005040c
No function matches your filter.