ARKCmdFS.dll
v6.0.29.0
32-bit
Windows
Analyzed
Security warning
This file has been flagged as potentially dangerous, and downloads are disabled.
Reason: Detected potentially dangerous functions used for process injection: OpenProcess
Exported functions 3
GetCommandObject
#1 · 0x1f680
SetARKController
#2 · 0x1f6b0
SetLogger
#3 · 0x1f710
No function matches your filter.
Imported DLLs & functions 254
ADVAPI32.dll
40
AdjustTokenPrivileges
0x1004f018
AllocateAndInitializeSid
0x1004f068
ChangeServiceConfig2W
0x1004f088
ChangeServiceConfigW
0x1004f090
CloseServiceHandle
0x1004f070
ControlService
0x1004f09c
CreateProcessAsUserW
0x1004f010
CreateRestrictedToken
0x1004f00c
CreateServiceW
0x1004f06c
CreateWellKnownSid
0x1004f01c
DeleteService
0x1004f074
FreeSid
0x1004f004
GetNamedSecurityInfoW
0x1004f024
GetSecurityDescriptorDacl
0x1004f064
GetServiceDisplayNameW
0x1004f098
GetServiceKeyNameW
0x1004f07c
InitializeSecurityDescriptor
0x1004f034
LookupPrivilegeValueW
0x1004f014
OpenProcessToken
0x1004f008
OpenSCManagerW
0x1004f000
OpenServiceW
0x1004f080
QueryServiceConfig2W
0x1004f084
QueryServiceConfigW
0x1004f078
QueryServiceStatusEx
0x1004f094
RegCloseKey
0x1004f05c
RegCreateKeyExW
0x1004f028
RegDeleteKeyW
0x1004f038
RegDeleteValueW
0x1004f044
RegEnumKeyExW
0x1004f058
RegEnumValueW
0x1004f04c
RegGetKeySecurity
0x1004f040
RegOpenKeyExW
0x1004f054
RegQueryInfoKeyW
0x1004f030
RegQueryValueExW
0x1004f02c
RegSetKeySecurity
0x1004f050
RegSetValueExW
0x1004f060
SetEntriesInAclW
0x1004f048
SetNamedSecurityInfoW
0x1004f020
SetSecurityDescriptorDacl
0x1004f03c
StartServiceW
0x1004f08c
??0ARKCommand@@QAE@AAVLogAppender@@@Z
0x1004f0b4
??1ARKCommand@@UAE@XZ
0x1004f0b0
?GetInstallSequenceNumber@ARKCommand@@UBEIXZ
0x1004f0bc
?GetTargetFileName@ARKCommand@@UBE_NAAVFileSystemPath@@@Z
0x1004f0b8
?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
0x1004f0ac
?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z
0x1004f0a4
?Perform@ARKCommand@@QAE_NXZ
0x1004f0a8
?SetInstallSequenceNumber@ARKCommand@@UAEXI@Z
0x1004f0c0
KERNEL32.dll
66
CloseHandle
0x1004f150
CopyFileW
0x1004f160
CreateDirectoryW
0x1004f124
CreateFileW
0x1004f184
CreateProcessW
0x1004f134
DecodePointer
0x1004f0f0
DeleteFileW
0x1004f1d0
EncodePointer
0x1004f0e0
FindClose
0x1004f1c0
FindFirstFileW
0x1004f1a0
FindNextFileW
0x1004f1cc
FormatMessageW
0x1004f1a8
FreeLibrary
0x1004f10c
GetCurrentDirectoryW
0x1004f1b8
GetCurrentProcess
0x1004f138
GetCurrentProcessId
0x1004f0e8
GetCurrentThreadId
0x1004f0e4
GetExitCodeProcess
0x1004f144
GetFileAttributesW
0x1004f1ac
GetFileSize
0x1004f18c
GetLastError
0x1004f130
GetModuleFileNameW
0x1004f198
GetModuleHandleW
0x1004f118
GetProcAddress
0x1004f174
GetProcessHeap
0x1004f16c
GetStringTypeExW
0x1004f104
GetSystemTime
0x1004f188
GetSystemTimeAsFileTime
0x1004f0ec
GetTempPathW
0x1004f1b4
GetTickCount
0x1004f178
GetUserDefaultLCID
0x1004f108
HeapAlloc
0x1004f164
HeapFree
0x1004f168
InterlockedCompareExchange
0x1004f114
InterlockedExchange
0x1004f110
IsDebuggerPresent
0x1004f0dc
LCMapStringW
0x1004f0fc
LoadLibraryA
0x1004f100
LoadLibraryW
0x1004f170
LocalAlloc
0x1004f14c
LocalFree
0x1004f154
lstrcatW
0x1004f11c
lstrcmpiW
0x1004f128
lstrcmpW
0x1004f1b0
lstrcpyW
0x1004f1d4
lstrlenW
0x1004f12c
MoveFileExW
0x1004f1a4
MoveFileW
0x1004f120
MultiByteToWideChar
0x1004f19c
OpenProcess
0x1004f140
QueryPerformanceCounter
0x1004f0f4
RaiseException
0x1004f0d4
ReadFile
0x1004f190
RemoveDirectoryW
0x1004f1c8
SetCurrentDirectoryW
0x1004f1c4
SetDllDirectoryW
0x1004f194
SetFileAttributesW
0x1004f1d8
SetFileTime
0x1004f180
SetLastError
0x1004f1bc
SetUnhandledExceptionFilter
0x1004f0d8
Sleep
0x1004f158
SystemTimeToFileTime
0x1004f17c
TerminateProcess
0x1004f148
UnhandledExceptionFilter
0x1004f0f8
WaitForSingleObject
0x1004f13c
WideCharToMultiByte
0x1004f15c
MSVCP100.dll
36
?_BADOFF@std@@3_JB
0x1004f230
?_Decref@facet@locale@std@@QAEPAV123@XZ
0x1004f1e8
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
0x1004f244
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
0x1004f250
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
0x1004f240
?_Incref@facet@locale@std@@QAEXXZ
0x1004f1e4
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
0x1004f258
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
0x1004f254
?_Xlength_error@std@@YAXPBD@Z
0x1004f228
?_Xout_of_range@std@@YAXPBD@Z
0x1004f224
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
0x1004f22c
??0_Lockit@std@@QAE@H@Z
0x1004f238
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
0x1004f220
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
0x1004f26c
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
0x1004f264
??1_Lockit@std@@QAE@XZ
0x1004f234
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
0x1004f200
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
0x1004f208
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
0x1004f1f0
??Bid@locale@std@@QAEIXZ
0x1004f1e0
?always_noconv@codecvt_base@std@@QBE_NXZ
0x1004f1ec
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
0x1004f21c
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
0x1004f20c
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
0x1004f260
?id@?$codecvt@DDH@std@@2V0locale@2@A
0x1004f248
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
0x1004f210
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
0x1004f214
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
0x1004f25c
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
0x1004f204
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
0x1004f1f4
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
0x1004f218
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
0x1004f24c
?uncaught_exception@std@@YA_NXZ
0x1004f23c
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
0x1004f268
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
0x1004f1f8
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
0x1004f1fc
MSVCR100.dll
63
__clean_type_info_names_internal
0x1004f280
__CppXcptFilter
0x1004f290
__CxxFrameHandler3
0x1004f2c0
__dllonexit
0x1004f2b8
_amsg_exit
0x1004f294
_crt_debugger_hook
0x1004f28c
_CxxThrowException
0x1004f274
_encoded_null
0x1004f2a4
_except_handler4_common
0x1004f288
_fseeki64
0x1004f328
_initterm
0x1004f29c
_initterm_e
0x1004f298
_lock
0x1004f2b4
_lock_file
0x1004f33c
_malloc_crt
0x1004f2a8
_onexit
0x1004f2b0
_purecall
0x1004f304
_snwprintf_s
0x1004f358
_time64
0x1004f364
_unlock
0x1004f2bc
_unlock_file
0x1004f31c
_vsnwprintf_s
0x1004f308
_wstat64i32
0x1004f354
_wtoi
0x1004f2d8
?_type_info_dtor_internal_method@type_info@@QAEXXZ
0x1004f284
??_V@YAXPAX@Z
0x1004f2e4
??0bad_cast@std@@QAE@ABV01@@Z
0x1004f318
??0bad_cast@std@@QAE@PBD@Z
0x1004f314
??0exception@std@@QAE@ABQBD@Z
0x1004f2cc
??0exception@std@@QAE@ABV01@@Z
0x1004f2d0
??1bad_cast@std@@UAE@XZ
0x1004f310
??1exception@std@@UAE@XZ
0x1004f2c8
??2@YAPAXI@Z
0x1004f2e0
??3@YAXPAX@Z
0x1004f2dc
??8type_info@@QBE_NABV0@@Z
0x1004f2a0
?terminate@@YAXXZ
0x1004f2ac
?what@exception@std@@UBEPBDXZ
0x1004f2c4
fclose
0x1004f348
fflush
0x1004f32c
fgetc
0x1004f330
fgetpos
0x1004f324
fputc
0x1004f30c
free
0x1004f2e8
fsetpos
0x1004f334
fwrite
0x1004f344
malloc
0x1004f2ec
memchr
0x1004f34c
memcpy
0x1004f278
memcpy_s
0x1004f340
memmove
0x1004f2d4
memset
0x1004f27c
rand
0x1004f35c
setvbuf
0x1004f338
sprintf_s
0x1004f300
srand
0x1004f360
strcat_s
0x1004f2f0
swprintf_s
0x1004f350
toupper
0x1004f2f8
ungetc
0x1004f320
vswprintf_s
0x1004f368
wcscpy_s
0x1004f2fc
wcstoul
0x1004f2f4
wprintf
0x1004f36c
CoCreateInstance
0x1004f424
CoInitialize
0x1004f41c
CoTaskMemFree
0x1004f418
CoUninitialize
0x1004f420
0x1004f39c
0x1004f3a4
SHChangeNotify
0x1004f398
SHCreateDirectoryExW
0x1004f3a0
SHGetFolderLocation
0x1004f3b0
SHGetFolderPathW
0x1004f3a8
SHGetPathFromIDListW
0x1004f3ac
SHSetLocalizedName
0x1004f394
SHLWAPI.dll
18
PathAddBackslashW
0x1004f3f0
PathAppendW
0x1004f3cc
PathCombineW
0x1004f3d4
PathFileExistsW
0x1004f3ec
PathFindExtensionW
0x1004f3f8
PathFindFileNameW
0x1004f3f4
PathIsDirectoryW
0x1004f3d8
PathIsRelativeW
0x1004f3c8
PathIsRootW
0x1004f3e8
PathIsUNCW
0x1004f3b8
PathMakePrettyW
0x1004f3d0
PathMakeSystemFolderW
0x1004f3c4
PathRemoveBackslashW
0x1004f3e0
PathRemoveFileSpecW
0x1004f3bc
PathRenameExtensionW
0x1004f3e4
PathStripPathW
0x1004f3dc
PathStripToRootW
0x1004f3fc
PathUnmakeSystemFolderW
0x1004f3c0
LoadStringW
0x1004f404
No function matches your filter.