AarSvc.dll
v10.0.19041.5794
32-bit
Windows NT
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 4
DllCanUnloadNow
#1 · 0x17350
DllGetActivationFactory
#2 · 0x17310
DllGetClassObject
#3 · 0x17330
ServiceMain
#4 · 0x174c0
No function matches your filter.
Imported DLLs & functions 175
?CreateAgentActivationRuntime@@YG?AV?$shared_ptr@VIAgentActivationRuntime@VoiceAgentServices@Microsoft@@@std@@XZ
0x1004e018
?GetAgentActivationRuntime@@YG?AV?$shared_ptr@VIAgentActivationRuntime@VoiceAgentServices@Microsoft@@@std@@XZ
0x1004e014
?GetLoggerInstance@@YGAAVLogger@VoiceAgentServices@Microsoft@@XZ
0x1004e010
?ReleaseAgentActivationRuntime@@YGXXZ
0x1004e00c
CoAddRefServerProcess
0x1004e050
CoCreateFreeThreadedMarshaler
0x1004e054
CoCreateInstance
0x1004e040
CoDecrementMTAUsage
0x1004e034
CoDisconnectContext
0x1004e05c
CoGetMalloc
0x1004e044
CoInitializeEx
0x1004e038
CoInitializeSecurity
0x1004e024
CoRegisterClassObject
0x1004e048
CoReleaseServerProcess
0x1004e02c
CoResumeClassObjects
0x1004e058
CoRevokeClassObject
0x1004e020
CoTaskMemAlloc
0x1004e030
CoTaskMemFree
0x1004e03c
CoUninitialize
0x1004e04c
CoWaitForMultipleHandles
0x1004e028
RoGetAgileReference
0x1004e064
DebugBreak
0x1004e070
IsDebuggerPresent
0x1004e074
OutputDebugStringW
0x1004e06c
GetLastError
0x1004e07c
RaiseException
0x1004e088
SetLastError
0x1004e08c
SetUnhandledExceptionFilter
0x1004e080
UnhandledExceptionFilter
0x1004e084
CloseHandle
0x1004e094
GetProcessHeap
0x1004e0a0
HeapAlloc
0x1004e09c
HeapFree
0x1004e0a4
InitializeSListHead
0x1004e0ac
DisableThreadLibraryCalls
0x1004e0c0
GetModuleFileNameA
0x1004e0b4
GetModuleHandleExW
0x1004e0bc
GetModuleHandleW
0x1004e0b8
GetProcAddress
0x1004e0c4
FormatMessageW
0x1004e0cc
CreateThread
0x1004e0e0
GetCurrentProcess
0x1004e0dc
GetCurrentProcessId
0x1004e0e4
GetCurrentThreadId
0x1004e0e8
OpenProcessToken
0x1004e0ec
TerminateProcess
0x1004e0d8
TerminateThread
0x1004e0d4
IsProcessorFeaturePresent
0x1004e0f4
OpenProcess
0x1004e0f8
QueryPerformanceCounter
0x1004e100
RegCloseKey
0x1004e108
RegCreateKeyExW
0x1004e114
RegFlushKey
0x1004e118
RegGetValueW
0x1004e110
RegQueryValueExW
0x1004e11c
RegSetValueExW
0x1004e10c
AcquireSRWLockExclusive
0x1004e158
AcquireSRWLockShared
0x1004e174
CreateEventExW
0x1004e160
CreateEventW
0x1004e140
CreateMutexExW
0x1004e170
CreateMutexW
0x1004e178
CreateSemaphoreExW
0x1004e17c
DeleteCriticalSection
0x1004e130
EnterCriticalSection
0x1004e138
InitializeCriticalSectionEx
0x1004e134
InitializeSRWLock
0x1004e150
LeaveCriticalSection
0x1004e14c
OpenSemaphoreW
0x1004e168
ReleaseMutex
0x1004e13c
ReleaseSemaphore
0x1004e164
ReleaseSRWLockExclusive
0x1004e144
ReleaseSRWLockShared
0x1004e16c
ResetEvent
0x1004e148
SetEvent
0x1004e180
WaitForSingleObject
0x1004e154
WaitForSingleObjectEx
0x1004e15c
InitOnceBeginInitialize
0x1004e190
InitOnceComplete
0x1004e18c
InitOnceExecuteOnce
0x1004e188
GetSystemTimeAsFileTime
0x1004e198
CloseThreadpoolTimer
0x1004e1a0
CreateThreadpoolTimer
0x1004e1a4
SetThreadpoolTimer
0x1004e1ac
WaitForThreadpoolTimerCallbacks
0x1004e1a8
RoOriginateError
0x1004e1c0
RoOriginateErrorW
0x1004e1c4
RoTransformError
0x1004e1c8
IsErrorPropagationEnabled
0x1004e1d4
RoGetMatchingRestrictedErrorInfo
0x1004e1d0
RoReportFailedDelegate
0x1004e1d8
RoGetActivationFactory
0x1004e1e4
RoInitialize
0x1004e1e8
RoRegisterActivationFactories
0x1004e1f0
RoRevokeActivationFactories
0x1004e1ec
RoUninitialize
0x1004e1e0
WindowsCreateString
0x1004e20c
WindowsCreateStringReference
0x1004e210
WindowsDeleteString
0x1004e1f8
WindowsDuplicateString
0x1004e1fc
WindowsGetStringRawBuffer
0x1004e200
WindowsIsStringEmpty
0x1004e204
WindowsStringHasEmbeddedNull
0x1004e208
__CxxFrameHandler3
0x1004e288
__RTDynamicCast
0x1004e28c
__std_terminate
0x1004e284
_CxxThrowException
0x1004e25c
_except_handler4_common
0x1004e258
_o___std_exception_copy
0x1004e274
_o___std_exception_destroy
0x1004e270
_o___std_type_info_destroy_list
0x1004e26c
_o___stdio_common_vsnprintf_s
0x1004e264
_o___stdio_common_vswprintf
0x1004e260
_o__callnewh
0x1004e27c
_o__cexit
0x1004e278
_o__configure_narrow_argv
0x1004e268
_o__crt_atexit
0x1004e218
_o__errno
0x1004e21c
_o__execute_onexit_table
0x1004e220
_o__initialize_narrow_environment
0x1004e224
_o__initialize_onexit_table
0x1004e228
_o__invalid_parameter_noinfo
0x1004e22c
_o__invalid_parameter_noinfo_noreturn
0x1004e230
_o__purecall
0x1004e234
_o__register_onexit_function
0x1004e238
_o__seh_filter_dll
0x1004e23c
_o_free
0x1004e244
_o_malloc
0x1004e248
_o_realloc
0x1004e24c
_o_terminate
0x1004e250
_o_toupper
0x1004e254
memcmp
0x1004e290
memcpy
0x1004e294
memmove
0x1004e240
wcschr
0x1004e280
memset
0x1004e2a8
EventRegister
0x1004e2bc
EventSetInformation
0x1004e2b4
EventUnregister
0x1004e2b8
EventWriteTransfer
0x1004e2b0
MakeAbsoluteSD
0x1004e2c4
ConvertStringSecurityDescriptorToSecurityDescriptorW
0x1004e2cc
RegisterServiceCtrlHandlerExW
0x1004e2d8
SetServiceStatus
0x1004e2d4
?_Addfac@_Locimp@locale@std@@AAEXPAVfacet@23@I@Z
0x1004e31c
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
0x1004e320
?_Incref@facet@locale@std@@UAEXXZ
0x1004e324
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
0x1004e300
?_New_Locimp@_Locimp@locale@std@@CAPAV123@ABV123@@Z
0x1004e2f8
?_Xlength_error@std@@YAXPBD@Z
0x1004e2fc
?_Xout_of_range@std@@YAXPBD@Z
0x1004e314
??0?$codecvt@GDU_Mbstatet@@@std@@QAE@I@Z
0x1004e30c
??1?$codecvt@GDU_Mbstatet@@@std@@MAE@XZ
0x1004e308
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
0x1004e2f4
??Bid@locale@std@@QAEIXZ
0x1004e304
?id@?$codecvt@GDU_Mbstatet@@@std@@2V0locale@2@A
0x1004e310
?out@?$codecvt@GDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBG1AAPBGPAD3AAPAD@Z
0x1004e318
NtQueryInformationToken
0x1004e330
RtlAllocateHeap
0x1004e338
RtlCompareUnicodeString
0x1004e340
RtlFreeHeap
0x1004e32c
RtlInitUnicodeString
0x1004e334
RtlNtStatusToDosErrorNoTeb
0x1004e33c
No function matches your filter.