ARKCmdFS.dll

Description: ARKCmdFS Dynamic Link Library

Version: 6.0.98.0

Architecture: 32-bit

Operating System: Windows

SHA256: 74fac5b1c7b2e8ab65c03495438f2714

File Size: 437.4 KB

Uploaded At: Dec. 2, 2025, 2:40 p.m.

Views: 6

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess

Exported Functions

GetCommandObject (Ordinal: 1, Address: 0x1ffa0)
SetARKController (Ordinal: 2, Address: 0x1fff0)
SetLogger (Ordinal: 3, Address: 0x20050)

Imported DLLs & Functions

ADVAPI32.dll

AdjustTokenPrivileges (Address: 0x10050018)
AllocateAndInitializeSid (Address: 0x10050068)
ChangeServiceConfig2W (Address: 0x10050088)
ChangeServiceConfigW (Address: 0x10050090)
CloseServiceHandle (Address: 0x10050070)
ControlService (Address: 0x1005009c)
CreateProcessAsUserW (Address: 0x10050010)
CreateRestrictedToken (Address: 0x1005000c)
CreateServiceW (Address: 0x1005006c)
CreateWellKnownSid (Address: 0x1005001c)
DeleteService (Address: 0x10050074)
FreeSid (Address: 0x10050004)
GetNamedSecurityInfoW (Address: 0x10050024)
GetSecurityDescriptorDacl (Address: 0x10050064)
GetServiceDisplayNameW (Address: 0x10050098)
GetServiceKeyNameW (Address: 0x10050000)
InitializeSecurityDescriptor (Address: 0x10050034)
LookupPrivilegeValueW (Address: 0x10050014)
OpenProcessToken (Address: 0x10050008)
OpenSCManagerW (Address: 0x10050078)
OpenServiceW (Address: 0x10050080)
QueryServiceConfig2W (Address: 0x10050084)
QueryServiceConfigW (Address: 0x1005007c)
QueryServiceStatusEx (Address: 0x10050094)
RegCloseKey (Address: 0x1005005c)
RegCreateKeyExW (Address: 0x10050028)
RegDeleteKeyW (Address: 0x10050038)
RegDeleteValueW (Address: 0x10050044)
RegEnumKeyExW (Address: 0x10050058)
RegEnumValueW (Address: 0x1005004c)
RegGetKeySecurity (Address: 0x10050040)
RegOpenKeyExW (Address: 0x10050054)
RegQueryInfoKeyW (Address: 0x10050030)
RegQueryValueExW (Address: 0x1005002c)
RegSetKeySecurity (Address: 0x10050050)
RegSetValueExW (Address: 0x10050060)
SetEntriesInAclW (Address: 0x10050048)
SetNamedSecurityInfoW (Address: 0x10050020)
SetSecurityDescriptorDacl (Address: 0x1005003c)
StartServiceW (Address: 0x1005008c)

ARKEngine.dll

??0ARKCommand@@QAE@AAVLogAppender@@@Z (Address: 0x100500b8)
??1ARKCommand@@UAE@XZ (Address: 0x100500b4)
?GetDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z (Address: 0x100500a4)
?GetInstallSequenceNumber@ARKCommand@@UBEIXZ (Address: 0x100500c4)
?GetLogger@ARKCommand@@UBEAAVLogAppender@@XZ (Address: 0x100500bc)
?GetTargetFileName@ARKCommand@@UBE_NAAVFileSystemPath@@@Z (Address: 0x100500c0)
?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z (Address: 0x100500b0)
?GetUnistallDBQueryString@ARKCommand@@UAE_NAAV?$list@UUninstallDBQuery@@V?$allocator@UUninstallDBQuery@@@std@@@std@@@Z (Address: 0x100500ac)
?Perform@ARKCommand@@QAE_NXZ (Address: 0x100500a8)
?SetInstallSequenceNumber@ARKCommand@@UAEXI@Z (Address: 0x100500c8)

GDI32.dll

AddFontResourceW (Address: 0x100500d0)
RemoveFontResourceW (Address: 0x100500d4)

KERNEL32.dll

CloseHandle (Address: 0x10050154)
CopyFileW (Address: 0x10050164)
CreateDirectoryW (Address: 0x100501e0)
CreateFileW (Address: 0x10050188)
CreateProcessW (Address: 0x10050138)
DecodePointer (Address: 0x100500e8)
DeleteFileW (Address: 0x100501d4)
EncodePointer (Address: 0x10050100)
FindClose (Address: 0x100501c4)
FindFirstFileW (Address: 0x100501a4)
FindNextFileW (Address: 0x100501d0)
FormatMessageW (Address: 0x100501ac)
FreeLibrary (Address: 0x10050114)
GetCurrentDirectoryW (Address: 0x100501bc)
GetCurrentProcess (Address: 0x1005013c)
GetCurrentProcessId (Address: 0x100500f0)
GetCurrentThreadId (Address: 0x100500ec)
GetExitCodeProcess (Address: 0x10050148)
GetFileAttributesW (Address: 0x100501b0)
GetFileSize (Address: 0x10050190)
GetLastError (Address: 0x10050134)
GetModuleFileNameW (Address: 0x1005019c)
GetModuleHandleW (Address: 0x10050120)
GetProcAddress (Address: 0x10050178)
GetProcessHeap (Address: 0x10050170)
GetStringTypeExW (Address: 0x1005010c)
GetSystemTime (Address: 0x1005018c)
GetSystemTimeAsFileTime (Address: 0x100500f4)
GetTempPathW (Address: 0x100501b8)
GetTickCount (Address: 0x1005017c)
GetUserDefaultLCID (Address: 0x10050110)
HeapAlloc (Address: 0x10050168)
HeapFree (Address: 0x1005016c)
InterlockedCompareExchange (Address: 0x1005011c)
InterlockedExchange (Address: 0x10050118)
IsDebuggerPresent (Address: 0x100500e4)
LCMapStringW (Address: 0x10050104)
LoadLibraryA (Address: 0x10050108)
LoadLibraryW (Address: 0x10050174)
LocalAlloc (Address: 0x10050150)
LocalFree (Address: 0x10050158)
lstrcatW (Address: 0x10050124)
lstrcmpiW (Address: 0x1005012c)
lstrcmpW (Address: 0x100501b4)
lstrcpyW (Address: 0x100501d8)
lstrlenW (Address: 0x10050130)
MoveFileExW (Address: 0x100501a8)
MoveFileW (Address: 0x10050128)
MultiByteToWideChar (Address: 0x100501a0)
OpenProcess (Address: 0x10050144)
QueryPerformanceCounter (Address: 0x100500fc)
RaiseException (Address: 0x100500f8)
ReadFile (Address: 0x10050194)
RemoveDirectoryW (Address: 0x100501cc)
SetCurrentDirectoryW (Address: 0x100501c8)
SetDllDirectoryW (Address: 0x10050198)
SetFileAttributesW (Address: 0x100501dc)
SetFileTime (Address: 0x10050184)
SetLastError (Address: 0x100501c0)
SetUnhandledExceptionFilter (Address: 0x100500e0)
Sleep (Address: 0x1005015c)
SystemTimeToFileTime (Address: 0x10050180)
TerminateProcess (Address: 0x1005014c)
UnhandledExceptionFilter (Address: 0x100500dc)
WaitForSingleObject (Address: 0x10050140)
WideCharToMultiByte (Address: 0x10050160)

mscms.dll

InstallColorProfileW (Address: 0x10050414)
UninstallColorProfileW (Address: 0x10050418)

MSVCP100.dll

?_BADOFF@std@@3_JB (Address: 0x10050238)
?_Decref@facet@locale@std@@QAEPAV123@XZ (Address: 0x100501f0)
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z (Address: 0x1005024c)
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z (Address: 0x10050258)
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ (Address: 0x10050248)
?_Incref@facet@locale@std@@QAEXXZ (Address: 0x100501ec)
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ (Address: 0x10050260)
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ (Address: 0x1005025c)
?_Xlength_error@std@@YAXPBD@Z (Address: 0x10050230)
?_Xout_of_range@std@@YAXPBD@Z (Address: 0x1005022c)
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@ (Address: 0x10050234)
??0_Lockit@std@@QAE@H@Z (Address: 0x10050240)
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ (Address: 0x10050228)
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z (Address: 0x10050274)
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ (Address: 0x1005026c)
??1_Lockit@std@@QAE@XZ (Address: 0x1005023c)
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x10050208)
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x10050210)
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ (Address: 0x100501f8)
??Bid@locale@std@@QAEIXZ (Address: 0x100501e8)
?always_noconv@codecvt_base@std@@QBE_NXZ (Address: 0x100501f4)
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z (Address: 0x10050224)
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ (Address: 0x10050214)
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ (Address: 0x10050268)
?id@?$codecvt@DDH@std@@2V0locale@2@A (Address: 0x10050250)
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z (Address: 0x10050218)
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z (Address: 0x1005021c)
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z (Address: 0x10050264)
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z (Address: 0x1005020c)
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ (Address: 0x100501fc)
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z (Address: 0x10050220)
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z (Address: 0x10050254)
?uncaught_exception@std@@YA_NXZ (Address: 0x10050244)
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z (Address: 0x10050270)
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z (Address: 0x10050200)
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z (Address: 0x10050204)

MSVCR100.dll

__clean_type_info_names_internal (Address: 0x10050288)
__CppXcptFilter (Address: 0x10050298)
__CxxFrameHandler3 (Address: 0x100502c8)
__dllonexit (Address: 0x100502c0)
_amsg_exit (Address: 0x1005029c)
_crt_debugger_hook (Address: 0x10050294)
_CxxThrowException (Address: 0x10050280)
_encoded_null (Address: 0x100502a8)
_except_handler4_common (Address: 0x10050290)
_fseeki64 (Address: 0x10050330)
_initterm (Address: 0x100502a4)
_initterm_e (Address: 0x100502a0)
_lock (Address: 0x100502bc)
_lock_file (Address: 0x10050344)
_malloc_crt (Address: 0x100502ac)
_onexit (Address: 0x100502b8)
_purecall (Address: 0x1005030c)
_snwprintf_s (Address: 0x10050360)
_time64 (Address: 0x1005036c)
_unlock (Address: 0x100502c4)
_unlock_file (Address: 0x10050324)
_vsnwprintf_s (Address: 0x10050310)
_wstat64i32 (Address: 0x1005035c)
_wtoi (Address: 0x100502e0)
?_type_info_dtor_internal_method@type_info@@QAEXXZ (Address: 0x1005028c)
??_V@YAXPAX@Z (Address: 0x100502ec)
??0bad_cast@std@@QAE@ABV01@@Z (Address: 0x10050320)
??0bad_cast@std@@QAE@PBD@Z (Address: 0x1005031c)
??0exception@std@@QAE@ABQBD@Z (Address: 0x100502d4)
??0exception@std@@QAE@ABV01@@Z (Address: 0x100502d8)
??1bad_cast@std@@UAE@XZ (Address: 0x10050318)
??1exception@std@@UAE@XZ (Address: 0x100502d0)
??2@YAPAXI@Z (Address: 0x100502e8)
??3@YAXPAX@Z (Address: 0x100502e4)
??8type_info@@QBE_NABV0@@Z (Address: 0x100502b0)
?terminate@@YAXXZ (Address: 0x100502b4)
?what@exception@std@@UBEPBDXZ (Address: 0x100502cc)
fclose (Address: 0x10050350)
fflush (Address: 0x10050334)
fgetc (Address: 0x10050338)
fgetpos (Address: 0x1005032c)
fputc (Address: 0x10050314)
free (Address: 0x100502f0)
fsetpos (Address: 0x1005033c)
fwrite (Address: 0x1005034c)
malloc (Address: 0x100502f4)
memchr (Address: 0x10050354)
memcpy (Address: 0x1005027c)
memcpy_s (Address: 0x10050348)
memmove (Address: 0x100502dc)
memset (Address: 0x10050284)
rand (Address: 0x10050364)
setvbuf (Address: 0x10050340)
sprintf_s (Address: 0x10050308)
srand (Address: 0x10050368)
strcat_s (Address: 0x100502f8)
swprintf_s (Address: 0x10050358)
toupper (Address: 0x10050300)
ungetc (Address: 0x10050328)
vswprintf_s (Address: 0x10050370)
wcscpy_s (Address: 0x10050304)
wcstoul (Address: 0x100502fc)
wprintf (Address: 0x10050374)

ole32.dll

CoCreateInstance (Address: 0x1005042c)
CoInitialize (Address: 0x10050424)
CoTaskMemFree (Address: 0x10050420)
CoUninitialize (Address: 0x10050428)

OLEAUT32.dll

SysAllocString (Address: 0x10050380)
SysFreeString (Address: 0x10050384)
VariantClear (Address: 0x1005037c)

PSAPI.DLL

EnumProcesses (Address: 0x10050390)
EnumProcessModules (Address: 0x1005038c)
GetModuleFileNameExW (Address: 0x10050394)

SHELL32.dll

(Address: 0x100503a4)
(Address: 0x100503ac)
SHChangeNotify (Address: 0x100503a0)
SHCreateDirectoryExW (Address: 0x100503a8)
SHGetFolderLocation (Address: 0x100503b8)
SHGetFolderPathW (Address: 0x100503b0)
SHGetPathFromIDListW (Address: 0x100503b4)
SHSetLocalizedName (Address: 0x1005039c)

SHLWAPI.dll

PathAddBackslashW (Address: 0x100503f8)
PathAppendW (Address: 0x100503d4)
PathCombineW (Address: 0x100503dc)
PathFileExistsW (Address: 0x100503f4)
PathFindExtensionW (Address: 0x10050400)
PathFindFileNameW (Address: 0x100503fc)
PathIsDirectoryW (Address: 0x100503e0)
PathIsRelativeW (Address: 0x100503d0)
PathIsRootW (Address: 0x100503f0)
PathIsUNCW (Address: 0x100503c0)
PathMakePrettyW (Address: 0x100503d8)
PathMakeSystemFolderW (Address: 0x100503cc)
PathRemoveBackslashW (Address: 0x100503e8)
PathRemoveFileSpecW (Address: 0x100503c4)
PathRenameExtensionW (Address: 0x100503ec)
PathStripPathW (Address: 0x100503e4)
PathStripToRootW (Address: 0x10050404)
PathUnmakeSystemFolderW (Address: 0x100503c8)

USER32.dll

LoadStringW (Address: 0x1005040c)