889fd44dc1bef4f5bdd0d56b3ce10d2e0c4793f9188daf4e88472acaebdb8e7e

Sharing

Copy URL Twitter E-mail

General

Target

889fd44dc1bef4f5bdd0d56b3ce10d2e0c4793f9188daf4e88472acaebdb8e7e
Size

721KB
MD5

fe5ce48e61054c1fec7a5199e90557d0
SHA1

82802af10e55f6acf0fe407c1751d0b06c30057b
SHA256

889fd44dc1bef4f5bdd0d56b3ce10d2e0c4793f9188daf4e88472acaebdb8e7e
SHA512

0899c96da976888fb81b7ee508d33dda143793028599674828ccb4e3c61ec7bacd31e2c0609811bfb1142aad83b11d2cbb5e9de7bbda17bb59c6cdcf85960186
SSDEEP

12288:V90K/J4ryNQF7gilPYLyrtCiBJGWL77OaomS0OWYybJghS:Vf/J4ryNq7lPYGBzvGYXO8VTWw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
889fd44dc1bef4f5bdd0d56b3ce10d2e0c4793f9188daf4e88472acaebdb8e7e

Files

889fd44dc1bef4f5bdd0d56b3ce10d2e0c4793f9188daf4e88472acaebdb8e7e
.dll windows:6 windows x64

aad7024c7672cce1ee5109f779afe807

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

fgdutilu2021

?ConfirmBackslash@fgdutil@@YAXAEAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?StrArr2Str@fgdutil@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@AEAVCStringArray@@V23@@Z
?StrArrFindStr@fgdutil@@YA_NAEAVCStringArray@@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@AEAH@Z
?ExecuteFile@fgdutil@@YA_NPEB_W00@Z
?IsCtrlPressed@fgdutil@@YAHXZ
?Str2StrArr@fgdutil@@YAHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@AEAVCStringArray@@0@Z

fgbfileu2021

?SetValue@CIniFile@fgbfile@@QEAA_NV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@00_N@Z
?WriteFile@CIniFile@fgbfile@@QEAAXXZ
?FileExist@fgbfile@@YAHPEB_W@Z
?FindFile@fgbfile@@YAXAEAVCStringArray@@PEB_W@Z
?GetFnameWithoutExt@fgbfile@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V23@@Z
?GetFileName@fgbfile@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V23@@Z
?GetFilePath@fgbfile@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V23@@Z
?FGetCADCommonFilePath_DAT@fgbfile@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?GetFileExt@fgbfile@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V23@@Z
??0CFStdioFile@fgbfile@@QEAA@XZ
??1CFStdioFile@fgbfile@@UEAA@XZ
??0CIniFile@fgbfile@@QEAA@XZ
??0CIniFile@fgbfile@@QEAA@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@_N@Z
??1CIniFile@fgbfile@@UEAA@XZ
?SetPath@CIniFile@fgbfile@@QEAAXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?ReadFile@CIniFile@fgbfile@@QEAA_NXZ
?GetValueF@CIniFile@fgbfile@@QEAANV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@0@Z
?GetValue@CIniFile@fgbfile@@QEAA_NV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@AEAVCStringArray@@1@Z
?GetItemValue@CIniFile@fgbfile@@QEAA_NV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@AEAV34@@Z
?FGetCADCommonFilePath@fgbfile@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?GetUpPath@fgbfile@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V23@@Z
?FIsDirectory@fgbfile@@YAHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
??0CFRegistry@fgbfile@@QEAA@HH@Z
??1CFRegistry@fgbfile@@UEAA@XZ
?Open@CFRegistry@fgbfile@@UEAAHPEB_W@Z
?Write@CFRegistry@fgbfile@@UEAAHPEB_WK@Z
?Read@CFRegistry@fgbfile@@UEAAHPEB_WAEAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?GetValueI@CIniFile@fgbfile@@QEAAHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@0@Z
?GetAppPath@fgbfile@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PEAUHINSTANCE__@@@Z
?GetDwgVersionTag@fgbfile@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V23@@Z
?GetValue@CIniFile@fgbfile@@QEAA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V34@0@Z

fgbmfcu2021

??0CListCtrlEx@fgbmfc@@QEAA@XZ
?GetColumnCount@CListCtrlEx@fgbmfc@@QEBAHXZ
?DelAllHeader@CListCtrlEx@fgbmfc@@QEAAXXZ
??1CListCtrlEx@fgbmfc@@UEAA@XZ
?OnMouseMove@CListCtrlEx@fgbmfc@@IEAAXIVCPoint@@@Z
?GetThisMessageMap@CListCtrlEx@fgbmfc@@KAPEBUAFX_MSGMAP@@XZ
??0CToolTipXye@fgbmfc@@QEAA@XZ
?SetMargin@CToolTipXye@fgbmfc@@QEAAXPEAUtagRECT@@@Z
?SetTipTextColor@CToolTipXye@fgbmfc@@QEAAXK@Z
?DelTool@CToolTipXye@fgbmfc@@QEAAXPEAVCWnd@@@Z
?RelayEvent@CToolTipXye@fgbmfc@@QEAAXPEAUtagMSG@@@Z
?AddTool@CToolTipXye@fgbmfc@@QEAAHPEAVCWnd@@PEB_W@Z
?SetDelayTime@CToolTipXye@fgbmfc@@QEAAXKH@Z
?Create@CToolTipXye@fgbmfc@@QEAAHPEAVCWnd@@@Z
??1CToolTipXye@fgbmfc@@UEAA@XZ
??0CSortColumn@fgbmfc@@QEAA@PEAVCListCtrl@@AEBHAEB_NAEAH@Z
??1CSortColumn@fgbmfc@@UEAA@XZ
?Sort@CSortColumn@fgbmfc@@QEAAHAEB_N@Z
?SetWindowTitle@CEditDescription@fgbmfc@@QEAAXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?SetEditDes@CEditDescription@fgbmfc@@QEAAXAEAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?GetEditDes@CEditDescription@fgbmfc@@QEAA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
??0CEditDescription@fgbmfc@@QEAA@PEAVCWnd@@@Z
??1CEditDescription@fgbmfc@@UEAA@XZ
?SetCurSel@fgbmfc@@YAHAEAVCListCtrl@@H@Z
?ListCtrlSelAll@fgbmfc@@YAXPEAVCListCtrl@@@Z
?ListCtrlDelItem@fgbmfc@@YAXPEAVCListCtrl@@@Z
?ListCtrlSetArrow@fgbmfc@@YAXPEAVCListCtrl@@HH@Z
?GetMessageMap@CToolTipXye@fgbmfc@@MEBAPEBUAFX_MSGMAP@@XZ
?GetRuntimeClass@CListCtrlEx@fgbmfc@@UEBAPEAUCRuntimeClass@@XZ
?IsCanDropDest@CListCtrlEx@fgbmfc@@UEAAHH@Z
?GetThisClass@CSubclassWnd@fgbmfc@@SAPEAUCRuntimeClass@@XZ
??0CSubclassWnd@fgbmfc@@QEAA@XZ
??1CSubclassWnd@fgbmfc@@UEAA@XZ
?HookWindow@CSubclassWnd@fgbmfc@@QEAAHPEAVCWnd@@@Z
?WindowProc@CSubclassWnd@fgbmfc@@MEAA_JI_K_J@Z
?GetMFname@fgbmfc@@YAHPEB_W000AEAVCStringArray@@0@Z
??0CFTreeCtrlEx@fgbmfc@@QEAA@XZ
?GetThisClass@CFTreeCtrlEx@fgbmfc@@SAPEAUCRuntimeClass@@XZ
?PreTranslateMessage@CFTreeCtrlEx@fgbmfc@@UEAAHPEAUtagMSG@@@Z
?GetNextItem@CFTreeCtrlEx@fgbmfc@@QEAAPEAU_TREEITEM@@PEAU3@@Z
??1CFTreeCtrlEx@fgbmfc@@UEAA@XZ
?HasSameNameOnSameParentNode@CFTreeCtrlEx@fgbmfc@@QEAAHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PEAU_TREEITEM@@@Z
?OnCreate@CFTreeCtrlEx@fgbmfc@@IEAAHPEAUtagCREATESTRUCTW@@@Z
?GetThisMessageMap@CFTreeCtrlEx@fgbmfc@@KAPEBUAFX_MSGMAP@@XZ
?MsgBox@fgbmfc@@YAHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@0H@Z
?GetFolder@fgbmfc@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V23@@Z
?FindItem@CFTreeCtrlEx@fgbmfc@@UEAAPEAU_TREEITEM@@AEAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@HHHPEAU3@@Z
?IsFindValid@CFTreeCtrlEx@fgbmfc@@UEAAHPEAU_TREEITEM@@@Z
?OnDropTree@CFTreeCtrlEx@fgbmfc@@UEAAXPEAU_TREEITEM@@0@Z
?OnDropTreeItem@CFTreeCtrlEx@fgbmfc@@UEAAHPEAU_TREEITEM@@0@Z
?OnDropedTreeItem@CFTreeCtrlEx@fgbmfc@@UEAAHPEAU_TREEITEM@@@Z
?OnItemCopied@CFTreeCtrlEx@fgbmfc@@UEAAXPEAU_TREEITEM@@0@Z
?OnItemDel@CFTreeCtrlEx@fgbmfc@@UEAAHXZ
??0CNumEdit@fgbmfc@@QEAA@XZ
?ExpandBranch@CFTreeCtrlEx@fgbmfc@@QEAAXPEAU_TREEITEM@@@Z
?GetFolder@fgbmfc@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
??1CNumEdit@fgbmfc@@UEAA@XZ

fastbaseu2021

?InitCtrl@CGsPreviewCtrl@fast@@QEAAHXZ
?GetSysVar@cad@fast@@YA?AW4ErrorStatus@Acad@@PEB_WAEAH@Z
?FUndoEnd@CFUndoGroup@fast@@QEAA_NXZ
?FUndoBegin@CFUndoGroup@fast@@QEAA_NXZ
?FUndoInit@CFUndoGroup@fast@@QEAA_NXZ
?Move@ent@fast@@YAHAEBV?$AcArray@VAcDbObjectId@@V?$AcArrayMemCopyReallocator@VAcDbObjectId@@@@@@VAcGeVector3d@@@Z
?CreateBlkAll@ent@fast@@YAHV?$AcArray@VAcDbObjectId@@V?$AcArrayMemCopyReallocator@VAcDbObjectId@@@@@@PEB_WVAcGePoint3d@@AEAVAcDbObjectId@@3@Z
??1CGsPreviewCtrl@fast@@UEAA@XZ
??0CGsPreviewCtrl@fast@@QEAA@XZ
?CloneDwgToCurDoc@cad@fast@@YAHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@AEAVAcDbObjectId@@@Z
?ActivateAcad@cad@fast@@YAXXZ
?ZoomE@cad@fast@@YAHXZ
?update@CEntTransJig@fast@@EEAA_NXZ
?sampler@CEntTransJig@fast@@EEAA?AW4DragStatus@AcEdJig@@XZ
?entity@CEntTransJig@fast@@EEBAPEAVAcDbEntity@@XZ
?Revert@CEntTransJig@fast@@UEAAXPEAX@Z
?EntTrans@CEntTransJig@fast@@UEAAXXZ
?asArray@CFArxSelSet@fast@@QEAAXAEAV?$AcArray@VAcDbObjectId@@V?$AcArrayMemCopyReallocator@VAcDbObjectId@@@@@@@Z
?userSelect@CFArxSelSet@fast@@QEAA?AW4SelSetStatus@12@PEBUresbuf@@@Z
??1CFArxSelSet@fast@@UEAA@XZ
??0CFArxSelSet@fast@@QEAA@XZ
?FEntsel@CFEntsel@fast@@QEAAHXZ
??1CFEntsel@fast@@UEAA@XZ
??0CFEntsel@fast@@QEAA@PEB_W0000@Z
??1CSaveSysVar@fast@@UEAA@XZ
??0CSaveSysVar@fast@@QEAA@_N@Z
??1CEntTransJig@fast@@UEAA@XZ
?QueryPos@CEntTransJig@fast@@QEAA?AVAcGePoint3d@@XZ
?SetKwordList@CEntTransJig@fast@@QEAAXPEB_W@Z
??0CEntTransJig@fast@@QEAA@PEAVAcDbEntity@@VAcGePoint3d@@HIP6AXPEAVAcEdJig@@@Z_J@Z
?SetSym@dat@fast@@YAHPEB_WPEAXF@Z
?PointsAtN@cal@fast@@YAXVAcDbObjectId@@JAEAV?$AcArray@VAcGePoint3d@@V?$AcArrayMemCopyReallocator@VAcGePoint3d@@@@@@@Z
?GetCurSpace@cad@fast@@YAHPEAVAcDbDatabase@@@Z
?GetUcsAngle@cad@fast@@YANXZ
?GetSsFromLastEnt@cad@fast@@YA_NAEAY01_J@Z
?GetLastEnt@cad@fast@@YA_NAEAY01_J@Z
?ScrlbrtPt@cad@fast@@YAXAEAVAcGePoint3d@@0@Z
?SetSysVar@cad@fast@@YA?AW4ErrorStatus@Acad@@PEB_WN@Z
?GetSysVar@cad@fast@@YA?AW4ErrorStatus@Acad@@PEB_WAEAN@Z
?MakeLine@ent@fast@@YA?AVAcDbObjectId@@VAcGePoint3d@@0H@Z
?FillWithImage@ent@fast@@YA?AVAcDbObjectId@@V3@PEB_W@Z
?GetEntData@ent@fast@@YAHVAcDbObjectId@@FAEAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?GetEntRect@ent@fast@@YAHVAcDbObjectId@@AEAVAcGePoint3d@@1@Z
?MoveBottomOrTop@ent@fast@@YAHVAcDbObjectId@@H@Z
?MoveBelowOrAbove@ent@fast@@YAHVAcDbObjectId@@0H@Z
?CreateHatch@ent@fast@@YAHV?$AcArray@VAcDbObjectId@@V?$AcArrayMemCopyReallocator@VAcDbObjectId@@@@@@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@AEAVAcDbObjectId@@NN@Z
?SetCurveClose@ent@fast@@YAHVAcDbObjectId@@H@Z
?IsClosed@ent@fast@@YAHVAcDbObjectId@@@Z
?GetArea@ent@fast@@YAHVAcDbObjectId@@AEAN@Z
?DrawPline@ent@fast@@YAHAEAVAcDbObjectId@@@Z
?SS2ids@ent@fast@@YAHQEA_JAEAV?$AcArray@VAcDbObjectId@@V?$AcArrayMemCopyReallocator@VAcDbObjectId@@@@@@@Z
?Erase@ent@fast@@YAHAEAV?$AcArray@VAcDbObjectId@@V?$AcArrayMemCopyReallocator@VAcDbObjectId@@@@@@@Z
?Erase@ent@fast@@YAHVAcDbObjectId@@@Z
?AddToDb@ent@fast@@YAHPEAVAcDbEntity@@AEAVAcDbObjectId@@@Z
?AddToGroup@ent@fast@@YAHAEAVAcDbObjectId@@0@Z
?OpenGroup@ent@fast@@YA?AVAcDbObjectId@@PEB_W@Z
?GetCurveParam@ent@fast@@YAHVAcDbObjectId@@PEAV?$AcArray@VAcGePoint3d@@V?$AcArrayMemCopyReallocator@VAcGePoint3d@@@@@@PEAV?$AcArray@NV?$AcArrayMemCopyReallocator@N@@@@@Z
?CreateLayer@ent@fast@@YAHPEB_W@Z
?ChangeLayer@ent@fast@@YAHVAcDbObjectId@@PEB_W@Z
?ChangeColor@ent@fast@@YAHVAcDbObjectId@@G@Z
?GetSysVar@cad@fast@@YA?AW4ErrorStatus@Acad@@PEB_WAEAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?SetSysVar@cad@fast@@YA?AW4ErrorStatus@Acad@@PEB_WH@Z
?SendCmdToAcad@cad@fast@@YAHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?PrintErrorMsg@fast@@YAXW4ErrorStatus@Acad@@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?SetDwgBlkName@CGsPreviewCtrl@fast@@QEAAHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@0@Z
?SetDwgBlkNameFromCurOpenDwg@CGsPreviewCtrl@fast@@QEAAHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@0@Z
??0CFDocLock@fast@@QEAA@PEAVAcApDocument@@@Z
??1CFDocLock@fast@@QEAA@XZ
??0CFUndoGroup@fast@@QEAA@_N@Z
??1CFUndoGroup@fast@@QEAA@XZ
?ReSize@CGsPreviewCtrl@fast@@QEAAXXZ
??0fast_geo_rect@fast@@QEAA@XZ
??1fast_geo_rect@fast@@UEAA@XZ
?SetRect@fast_geo_rect@fast@@QEAAXVAcGePoint3d@@0@Z
?Ucs2wcs@geo@fast@@YAHQEANAEAY02N@Z
?Ucs2wcs@geo@fast@@YAHVAcGePoint3d@@AEAV3@@Z
?Wcs2ucs@geo@fast@@YAHVAcGePoint3d@@AEAV3@@Z
?GetPtByLine@geo@fast@@YAHAEAVAcGePoint3d@@@Z
?GetPtByPt@geo@fast@@YAHAEAVAcGePoint3d@@@Z

fxdatadealu2021

?SetTo@CFSimpleXData@ARX_DATA@@SAHVAcDbObjectId@@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@1@Z

acdb24

?textStyle@AcDbText@@QEBA?AVAcDbObjectId@@XZ
?setTextString@AcDbText@@QEAA?AW4ErrorStatus@Acad@@PEB_W@Z
?textString@AcDbText@@QEBA?AW4ErrorStatus@Acad@@AEAVAcString@@@Z
?setWidthFactor@AcDbText@@QEAA?AW4ErrorStatus@Acad@@N@Z
?widthFactor@AcDbText@@QEBANXZ
?setHeight@AcDbText@@QEAA?AW4ErrorStatus@Acad@@N@Z
?height@AcDbText@@QEBANXZ
?setRotation@AcDbText@@QEAA?AW4ErrorStatus@Acad@@N@Z
?setOblique@AcDbText@@QEAA?AW4ErrorStatus@Acad@@N@Z
?oblique@AcDbText@@QEBANXZ
?setThickness@AcDbText@@QEAA?AW4ErrorStatus@Acad@@N@Z
?thickness@AcDbText@@QEBANXZ
?setAlignmentPoint@AcDbText@@QEAA?AW4ErrorStatus@Acad@@AEBVAcGePoint3d@@@Z
?alignmentPoint@AcDbText@@QEBA?AVAcGePoint3d@@XZ
?setPosition@AcDbText@@QEAA?AW4ErrorStatus@Acad@@AEBVAcGePoint3d@@@Z
?position@AcDbText@@QEBA?AVAcGePoint3d@@XZ
?setFromRbChain@AcDbXrecord@@QEAA?AW4ErrorStatus@Acad@@AEBUresbuf@@PEAVAcDbDatabase@@@Z
?rbChain@AcDbXrecord@@QEBA?AW4ErrorStatus@Acad@@PEAPEAUresbuf@@PEAVAcDbDatabase@@@Z
??0AcDbXrecord@@QEAA@XZ
?step@AcDbBlockTableRecordIterator@@QEAAX_N0@Z
?getEntity@AcDbBlockTableRecordIterator@@QEBA?AW4ErrorStatus@Acad@@AEAPEAVAcDbEntity@@W4OpenMode@AcDb@@_N@Z
?getEntityId@AcDbBlockTableRecordIterator@@QEBA?AW4ErrorStatus@Acad@@AEAVAcDbObjectId@@@Z
?done@AcDbBlockTableRecordIterator@@QEBA_NXZ
?add@AcDbSymbolTable@@QEAA?AW4ErrorStatus@Acad@@AEAVAcDbObjectId@@PEAVAcDbSymbolTableRecord@@@Z
?setTextStyle@AcDbText@@QEAA?AW4ErrorStatus@Acad@@VAcDbObjectId@@@Z
?setPreviewIcon@AcDbBlockTableRecord@@QEAA?AW4ErrorStatus@Acad@@AEBV?$AcArray@EV?$AcArrayMemCopyReallocator@E@@@@@Z
?hasAttributeDefinitions@AcDbBlockTableRecord@@QEBA_NXZ
?startPoint@AcDbLine@@QEBA?AVAcGePoint3d@@XZ
?origin@AcDbBlockTableRecord@@QEBA?AVAcGePoint3d@@XZ
?setComments@AcDbBlockTableRecord@@QEAA?AW4ErrorStatus@Acad@@PEB_W@Z
?comments@AcDbBlockTableRecord@@QEBA?AW4ErrorStatus@Acad@@AEAPEB_W@Z
?newIterator@AcDbBlockTableRecord@@QEBA?AW4ErrorStatus@Acad@@AEAPEAVAcDbBlockTableRecordIterator@@_N1@Z
??0AcDbBlockTableRecord@@QEAA@XZ
?setName@AcDbSymbolTableRecord@@QEAA?AW4ErrorStatus@Acad@@PEB_W@Z
??0AcDbPolyline@@QEAA@XZ
?desc@AcDbCurve@@SAPEAVAcRxClass@@XZ
?setAt@AcDbDictionary@@QEAA?AW4ErrorStatus@Acad@@PEB_WPEAVAcDbObject@@AEAVAcDbObjectId@@@Z
?remove@AcDbDictionary@@QEAA?AW4ErrorStatus@Acad@@PEB_WAEAVAcDbObjectId@@@Z
?numEntries@AcDbDictionary@@QEBAIXZ
?getAt@AcDbDictionary@@QEBA?AW4ErrorStatus@Acad@@PEB_WAEAVAcDbObjectId@@@Z
??0AcDbDictionary@@QEAA@XZ
?addExt@AcDbExtents@@QEAAXAEBV1@@Z
?explode@AcDbEntity@@UEBA?AW4ErrorStatus@Acad@@AEAV?$AcArray@PEAXV?$AcArrayMemCopyReallocator@PEAX@@@@@Z
?transformBy@AcDbEntity@@UEAA?AW4ErrorStatus@Acad@@AEBVAcGeMatrix3d@@@Z
?getGeomExtents@AcDbEntity@@UEBA?AW4ErrorStatus@Acad@@AEAVAcDbExtents@@@Z
?setPropertiesFrom@AcDbEntity@@QEAA?AW4ErrorStatus@Acad@@PEBV1@_N@Z
??0AcDbDatabase@@QEAA@_N0@Z
?assertReadEnabled@AcDbObject@@QEBAXXZ
?erase@AcDbObject@@QEAA?AW4ErrorStatus@Acad@@_N@Z
?upgradeOpen@AcDbObject@@QEAA?AW4ErrorStatus@Acad@@XZ
?isMirroredInX@AcDbText@@QEBA_NXZ
?mirrorInX@AcDbText@@QEAA?AW4ErrorStatus@Acad@@_N@Z
?isMirroredInY@AcDbText@@QEBA_NXZ
?mirrorInY@AcDbText@@QEAA?AW4ErrorStatus@Acad@@_N@Z
?horizontalMode@AcDbText@@QEBA?AW4TextHorzMode@AcDb@@XZ
?setHorizontalMode@AcDbText@@QEAA?AW4ErrorStatus@Acad@@W4TextHorzMode@AcDb@@@Z
?verticalMode@AcDbText@@QEBA?AW4TextVertMode@AcDb@@XZ
?setVerticalMode@AcDbText@@QEAA?AW4ErrorStatus@Acad@@W4TextVertMode@AcDb@@@Z
?desc@AcDbAttributeDefinition@@SAPEAVAcRxClass@@XZ
?tag@AcDbAttributeDefinition@@QEBA?AW4ErrorStatus@Acad@@AEAVAcString@@@Z
?isInvisible@AcDbAttributeDefinition@@QEBA_NXZ
?isConstant@AcDbAttributeDefinition@@QEBA_NXZ
?fieldLength@AcDbAttributeDefinition@@QEBAGXZ
??0AcDbAttribute@@QEAA@XZ
?setTag@AcDbAttribute@@QEAA?AW4ErrorStatus@Acad@@PEB_W@Z
?setInvisible@AcDbAttribute@@QEAA?AW4ErrorStatus@Acad@@_N@Z
?setFieldLength@AcDbAttribute@@QEAA?AW4ErrorStatus@Acad@@G@Z
??0AcDbBlockReference@@QEAA@XZ
??0AcDbBlockReference@@QEAA@AEBVAcGePoint3d@@VAcDbObjectId@@@Z
?desc@AcDbBlockReference@@SAPEAVAcRxClass@@XZ
?rotation@AcDbBlockReference@@QEBANXZ
?blockTransform@AcDbBlockReference@@QEBA?AVAcGeMatrix3d@@XZ
?appendAttribute@AcDbBlockReference@@QEAA?AW4ErrorStatus@Acad@@PEAVAcDbAttribute@@@Z
?acutNewString@@YA?AW4ErrorStatus@Acad@@PEB_WAEAPEA_W@Z
?insert@AcDbDatabase@@QEAA?AW4ErrorStatus@Acad@@AEAVAcDbObjectId@@PEB_WPEAV1@_N@Z
?objectId@AcDbObject@@QEBA?AVAcDbObjectId@@XZ
?close@AcDbObject@@QEAA?AW4ErrorStatus@Acad@@XZ
??0AcDbExtents@@QEAA@XZ
?addBlockExt@AcDbExtents@@QEAA?AW4ErrorStatus@Acad@@PEAVAcDbBlockTableRecord@@@Z
?getName@AcDbSymbolTableRecord@@QEBA?AW4ErrorStatus@Acad@@AEAVAcString@@@Z
?desc@AcDbBlockTableRecord@@SAPEAVAcRxClass@@XZ
?comments@AcDbBlockTableRecord@@QEBA?AW4ErrorStatus@Acad@@AEAVAcString@@@Z
?hasPreviewIcon@AcDbBlockTableRecord@@QEBA_NXZ
?getPreviewIcon@AcDbBlockTableRecord@@QEBA?AW4ErrorStatus@Acad@@AEAV?$AcArray@EV?$AcArrayMemCopyReallocator@E@@@@@Z
?newIterator@AcDbBlockTable@@QEBA?AW4ErrorStatus@Acad@@AEAPEAVAcDbBlockTableIterator@@_N1@Z
?start@AcDbSymbolTableIterator@@QEAAX_N0@Z
?done@AcDbSymbolTableIterator@@QEBA_NXZ
?getRecordId@AcDbSymbolTableIterator@@QEBA?AW4ErrorStatus@Acad@@AEAVAcDbObjectId@@@Z
?step@AcDbSymbolTableIterator@@QEAAX_N0@Z
?acdbHostApplicationServices@@YAPEAVAcDbHostApplicationServices@@XZ
?acutDelBuffer@@YAXAEAPEAX@Z
?appendAcDbEntity@AcDbBlockTableRecord@@QEAA?AW4ErrorStatus@Acad@@AEAVAcDbObjectId@@PEAVAcDbEntity@@@Z
?getIdAt@AcDbSymbolTable@@QEBA?AW4ErrorStatus@Acad@@PEB_WAEAVAcDbObjectId@@_N@Z
??0AcDb2dPolyline@@QEAA@W4Poly2dType@AcDb@@AEAV?$AcArray@VAcGePoint3d@@V?$AcArrayMemCopyReallocator@VAcGePoint3d@@@@@@N_NNNPEAV?$AcArray@NV?$AcArrayMemCopyReallocator@N@@@@PEAV?$AcArray@HV?$AcArrayMemCopyReallocator@H@@@@@Z
?makeClosed@AcDb2dPolyline@@QEAA?AW4ErrorStatus@Acad@@XZ
??0AcDbCircle@@QEAA@AEBVAcGePoint3d@@AEBVAcGeVector3d@@N@Z
?isValid@AcDbObjectId@@QEBA_NXZ
?acutWcMatch@@YAHPEB_W0@Z
?acdbOpenObject@@YA?AW4ErrorStatus@Acad@@AEAPEAVAcDbObject@@VAcDbObjectId@@P6APEAVAcRxClass@@XZW4OpenMode@AcDb@@_N@Z
??1AcRxEventReactor@@UEAA@XZ
?isA@AcRxEventReactor@@UEBAPEAVAcRxClass@@XZ
?desc@AcRxDynamicLinker@@SAPEAVAcRxClass@@XZ
?desc@AcDbViewportTableRecord@@SAPEAVAcRxClass@@XZ
?viewDirection@AcDbAbstractViewTableRecord@@QEBA?AVAcGeVector3d@@XZ
?viewTwist@AcDbAbstractViewTableRecord@@QEBANXZ
?target@AcDbAbstractViewTableRecord@@QEBA?AVAcGePoint3d@@XZ
?width@AcDbAbstractViewTableRecord@@QEBANXZ
?height@AcDbAbstractViewTableRecord@@QEBANXZ
?wblock@AcDbDatabase@@QEAA?AW4ErrorStatus@Acad@@AEAPEAV1@AEBV?$AcArray@VAcDbObjectId@@V?$AcArrayMemCopyReallocator@VAcDbObjectId@@@@@@AEBVAcGePoint3d@@@Z
?getSymbolTable@AcDbDatabase@@QEAA?AW4ErrorStatus@Acad@@AEAPEAVAcDbViewportTable@@W4OpenMode@AcDb@@@Z
?addPersistentReactor@AcDbObject@@QEAA?AW4ErrorStatus@Acad@@VAcDbObjectId@@@Z
?addAcDbObject@AcDbDatabase@@QEAA?AW4ErrorStatus@Acad@@AEAVAcDbObjectId@@PEAVAcDbObject@@@Z
?acdbUcsMatrix@@YA_NAEAVAcGeMatrix3d@@PEAVAcDbDatabase@@@Z
??1AcDbIdMapping@@UEAA@XZ
??0AcDbIdMapping@@QEAA@XZ
?getBlockReferenceIds@AcDbBlockTableRecord@@QEBA?AW4ErrorStatus@Acad@@AEAV?$AcArray@VAcDbObjectId@@V?$AcArrayMemCopyReallocator@VAcDbObjectId@@@@@@_N1@Z
?endPoint@AcDbLine@@QEBA?AVAcGePoint3d@@XZ
?saveAs@AcDbDatabase@@QEAA?AW4ErrorStatus@Acad@@PEB_W_NW4AcDbDwgVersion@AcDb@@PEBUSecurityParams@@@Z
?readDwgFile@AcDbDatabase@@QEAA?AW4ErrorStatus@Acad@@PEB_WW4OpenMode@1@_N0@Z
?getSymbolTable@AcDbDatabase@@QEAA?AW4ErrorStatus@Acad@@AEAPEAVAcDbBlockTable@@W4OpenMode@AcDb@@@Z
?ownerId@AcDbObject@@QEBA?AVAcDbObjectId@@XZ
?wblockCloneObjects@AcDbDatabase@@QEAA?AW4ErrorStatus@Acad@@AEBV?$AcArray@VAcDbObjectId@@V?$AcArrayMemCopyReallocator@VAcDbObjectId@@@@@@AEBVAcDbObjectId@@AEAVAcDbIdMapping@@W4DuplicateRecordCloning@AcDb@@_N@Z
?setOrigin@AcDbBlockTableRecord@@QEAA?AW4ErrorStatus@Acad@@AEBVAcGePoint3d@@@Z
?deepCloneObjects@AcDbDatabase@@QEAA?AW4ErrorStatus@Acad@@AEBV?$AcArray@VAcDbObjectId@@V?$AcArrayMemCopyReallocator@VAcDbObjectId@@@@@@AEBVAcDbObjectId@@AEAVAcDbIdMapping@@_N@Z
?closeInput@AcDbDatabase@@QEAA?AW4ErrorStatus@Acad@@_N@Z
?purge@AcDbDatabase@@QEAA?AW4ErrorStatus@Acad@@AEAV?$AcArray@VAcDbObjectId@@V?$AcArrayMemCopyReallocator@VAcDbObjectId@@@@@@@Z
?getNamedObjectsDictionary@AcDbDatabase@@QEAA?AW4ErrorStatus@Acad@@AEAPEAVAcDbDictionary@@W4OpenMode@AcDb@@@Z
acdbGetObjectId
?acdbGetAdsName@@YA?AW4ErrorStatus@Acad@@AEAY01_JVAcDbObjectId@@@Z
?acdbOpenObject@@YA?AW4ErrorStatus@Acad@@AEAPEAVAcDbEntity@@VAcDbObjectId@@W4OpenMode@AcDb@@_N@Z
?acdbOpenObject@@YA?AW4ErrorStatus@Acad@@AEAPEAVAcDbObject@@VAcDbObjectId@@W4OpenMode@AcDb@@_NPEBVAcRxClass@@@Z
?acutAngle@@YANQEBN0@Z
?acutBuildList@@YAPEAUresbuf@@HZZ
?acutRelRb@@YAHPEAUresbuf@@@Z
?acutNewRb@@YAPEAUresbuf@@H@Z
?desc@AcDbLine@@SAPEAVAcRxClass@@XZ
?acutPrintf@@YAHPEB_WZZ

acge24

?setToIdentity@AcGeMatrix3d@@QEAAAEAV1@XZ
??0AcGeMatrix3d@@QEAA@XZ
??0AcGePlane@@QEAA@XZ
??1AcGeEntity3d@@QEAA@XZ
?isEqualTo@AcGePoint3d@@QEBA_NAEBV1@AEBVAcGeTol@@@Z
??0AcGeScale3d@@QEAA@XZ
?set@AcGeScale3d@@QEAAAEAV1@NNN@Z
?gTol@AcGeContext@@2VAcGeTol@@A
?transformBy@AcGeVector3d@@QEAAAEAV1@AEBVAcGeMatrix3d@@@Z
?length@AcGeVector3d@@QEBANXZ
?crossProduct@AcGeVector3d@@QEBA?AV1@AEBV1@@Z
??DAcGeMatrix3d@@QEBA?AV0@AEBV0@@Z
?inverse@AcGeMatrix3d@@QEBA?AV1@XZ
?kOrigin@AcGePoint3d@@2V1@B
?normalize@AcGeVector3d@@QEAAAEAV1@AEBVAcGeTol@@@Z
?angleOnPlane@AcGeVector3d@@QEBANAEBVAcGePlanarEnt@@@Z

acad.exe

?acedStartOverrideDropTarget@@YAHPEAVCOleDropTarget@@@Z
?acedGetAcadTextCmdLine@@YAPEAVCWnd@@XZ
?AcApGetDatabase@@YAPEAVAcDbDatabase@@PEAVCView@@@Z
?acedGetAcadFrame@@YAPEAVCMDIFrameWnd@@XZ
?acedEndOverrideDropTarget@@YAHPEAVCOleDropTarget@@@Z
?acedGetAcadDwgView@@YAPEAVCView@@XZ

acui24

?AppRootKey@CAcUiDialog@@UEAAPEB_WXZ
?EnableFloatingWindows@CAcUiDialog@@UEAAXH@Z
?IsMultiDocumentActivationEnabled@CAcUiDialog@@UEAAHXZ
?EnableMultiDocumentActivation@CAcUiDialog@@UEAAHH@Z
?AppResourceInstance@CAcUiDialog@@UEAAPEAUHINSTANCE__@@XZ
?OnInitDialog@CAcUiDialog@@UEAAHXZ
?OnOK@CAcUiDialog@@MEAAXXZ
?OnCancel@CAcUiDialog@@MEAAXXZ
?DoDataExchange@CAcUiDialog@@MEAAXPEAVCDataExchange@@@Z
?GetThisMessageMap@CAcUiDialog@@KAPEBUAFX_MSGMAP@@XZ
?InitAcUiDLL@@YAXXZ
?AppMainWindow@CAcUiDialog@@UEAAPEAVCWnd@@XZ
?FindContextHelpFullPath@CAcUiDialog@@MEAAHPEB_WAEAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
??0CAcUiDialog@@QEAA@IPEAVCWnd@@PEAUHINSTANCE__@@@Z
?GetRuntimeClass@CAcUiDialog@@UEBAPEAUCRuntimeClass@@XZ
??1CAcUiDialog@@UEAA@XZ
?OnDialogHelp@CAcUiDialog@@UEAAXXZ

acismobj24.dbx

??0AcDbRasterImageDefReactor@@QEAA@XZ
?imageDictionary@AcDbRasterImageDef@@SA?AVAcDbObjectId@@PEAVAcDbDatabase@@@Z
?createImageDictionary@AcDbRasterImageDef@@SA?AW4ErrorStatus@Acad@@PEAVAcDbDatabase@@AEAVAcDbObjectId@@@Z
??0AcDbRasterImageDef@@QEAA@XZ
??0AcDbRasterImage@@QEAA@XZ
?setEnable@AcDbRasterImageDefReactor@@SAX_N@Z

adui24

?GetBottomReservedHeight@CAdUiPaletteSet@@MEAAHXZ
?DoModal@CAdUiBaseDialog@@UEAA_JXZ
?OnUpdateCmdUI@CAdUiDockControlBar@@EEAAXPEAVCFrameWnd@@H@Z
?WindowProc@CAdUiDockControlBar@@EEAA_JI_K_J@Z
?Create@CAdUiDockControlBar@@UEAAHPEB_W0KAEBUtagRECT@@PEAVCWnd@@IPEAUCCreateContext@@@Z
?RestoreControlBar@CAdUiDockControlBar@@QEAAXIPEAVCRect@@@Z
?DoDialogHelp@CAdUiDialog@@UEAAHXZ
?OnInitDialogFinish@CAdUiDialog@@MEAAXXZ
?PreCreateWindow@CAdUiBaseDialog@@MEAAHAEAUtagCREATESTRUCTW@@@Z
?PostNcDestroy@CAdUiBaseDialog@@MEAAXXZ
?PreTranslateMessage@CAdUiBaseDialog@@UEAAHPEAUtagMSG@@@Z
?CalcFixedLayout@CAdUiDockControlBar@@UEAA?AVCSize@@HH@Z
?OnCommand@CAdUiDockControlBar@@MEAAH_K_J@Z
?OnHideBar@CAdUiDockControlBar@@IEAAXXZ
?ExchangeData@CAdUiBaseDialog@@UEAAHH@Z
?Create@CAdUiBaseDialog@@UEAAHIPEAVCWnd@@@Z
?Create@CAdUiBaseDialog@@UEAAHPEB_WPEAVCWnd@@@Z
?OnNotifyUpdateTip@CAdUiBaseDialog@@MEAA?AW4ADUI_REPLY@@PEAVCWnd@@@Z
?OnNotifyGeneric@CAdUiBaseDialog@@MEAA?AW4ADUI_REPLY@@I_J@Z
?OnNotifyControlValid@CAdUiBaseDialog@@MEAA?AW4ADUI_REPLY@@IH@Z
?OnNotifyControlChange@CAdUiBaseDialog@@MEAA?AW4ADUI_REPLY@@I_J@Z
?DoAdUiMessage@CAdUiBaseDialog@@MEAA?AW4ADUI_REPLY@@W4ADUI_NOTIFY@@I_J@Z
?GetThisMessageMap@CAdUiPaletteSet@@KAPEBUAFX_MSGMAP@@XZ
?OnEraseBkgnd@CAdUiPaletteSet@@IEAAHPEAVCDC@@@Z
?OnSize@CAdUiPaletteSet@@IEAAXIHH@Z
?OnCreate@CAdUiPaletteSet@@IEAAHPEAUtagCREATESTRUCTW@@@Z
?PreTranslateMessage@CAdUiPaletteSet@@UEAAHPEAUtagMSG@@@Z
?OnContextMenu@CAdUiPaletteSet@@MEAAXPEAVCWnd@@VCPoint@@@Z
?ThemeModified@CAdUiPaletteSet@@MEAAXW4AdUiThemeElement@@@Z
?OnTabDrag@CAdUiPaletteSet@@MEAAXAEAVCPtrArray@@@Z
?OnInitDialogBegin@CAdUiDialog@@MEAAXXZ
?GetTopReservedHeight@CAdUiPaletteSet@@MEAAHXZ
?GetMaximumSize@CAdUiPaletteSet@@MEAAXAEAVCSize@@@Z
?GetMinimumSize@CAdUiPaletteSet@@MEAAXAEAVCSize@@@Z
?AddContextMenuItems@CAdUiPaletteSet@@MEAAHPEAVCMenu@@HH@Z
?EditName@CAdUiPaletteSet@@MEAAXXZ
?NameEditValidation@CAdUiPaletteSet@@UEAAHPEAVCEdit@@@Z
?EnableDocking@CAdUiPaletteSet@@QEAAXK@Z
?Save@CAdUiPaletteSet@@UEAAHPEAUIUnknown@@@Z
?Load@CAdUiPaletteSet@@UEAAHPEAUIUnknown@@@Z
?Create@CAdUiPaletteSet@@QEAAHPEB_WKAEBUtagRECT@@PEAVCWnd@@K@Z
??1CAdUiPaletteSet@@UEAA@XZ
??0CAdUiPaletteSet@@QEAA@H@Z
?GetThisClass@CAdUiPaletteSet@@SAPEAUCRuntimeClass@@XZ
?AddCustomMenuItems@CAdUiDockControlBar@@MEAAH_J@Z
?GetFloatingMinSize@CAdUiDockControlBar@@MEAAXPEAJ0@Z
?OnClosing@CAdUiDockControlBar@@MEAA_NXZ
?CreateControlBar@CAdUiDockControlBar@@MEAAHPEAUtagCREATESTRUCTW@@@Z
?PaintControlBar@CAdUiDockControlBar@@MEAAXPEAVCDC@@@Z

accore

??1AcEditorReactor@@UEAA@XZ
?isA@AcEditorReactor@@UEBAPEAVAcRxClass@@XZ
?acedGetArgs@@YAPEAUresbuf@@XZ
?acedRegisterFilterWinMsg@@YA_NQ6A_NPEAUtagMSG@@@Z@Z
?desc@AcEditor@@SAPEAVAcRxClass@@XZ
?desc@AcEdCommandStack@@SAPEAVAcRxClass@@XZ
?acedRetVoid@@YAHXZ
?acedGetFunCode@@YAHXZ
?acedUndef@@YAHPEB_WH@Z
?acedDefun@@YAHPEB_WH@Z
?acedRegFunc@@YAHP6AHXZH@Z
??1AcApDocManagerReactor@@UEAA@XZ
?isA@AcApDocManagerReactor@@UEBAPEAVAcRxClass@@XZ
?acedVports2VportTableRecords@@YA?AW4ErrorStatus@Acad@@XZ
?acgsGetGsManager@@YAPEAVAcGsManager@@PEAVCView@@@Z
?acedGetVar@@YAHPEB_WPEAUresbuf@@@Z
?acedRemoveWatchWinMsg@@YA_NQ6AXPEBUtagMSG@@@Z@Z
?acedRegisterWatchWinMsg@@YA_NQ6AXPEBUtagMSG@@@Z@Z
?ads_regen@@YAXXZ
?acedPostCommand@@YA_NPEB_W@Z
acedCommandS
?setDimValue@AcEdJig@@UEAA?AW4ErrorStatus@Acad@@PEBVAcDbDimData@@N@Z
?dimData@AcEdJig@@UEAAPEAV?$AcArray@PEAVAcDbDimData@@V?$AcArrayMemCopyReallocator@PEAVAcDbDimData@@@@@@N@Z
?setDispPrompt@AcEdJig@@QEAAXPEB_WZZ
?drag@AcEdJig@@QEAA?AW4DragStatus@1@XZ
?isA@AcEdJig@@UEBAPEAVAcRxClass@@XZ
?acedUpdateDisplay@@YAXXZ
?acdbRegApp@@YAHPEB_W@Z
?acdbEntLast@@YAHQEA_J@Z
?acedGrDraw@@YAHQEBN0HH@Z
?acedRedraw@@YAHQEB_JH@Z
?acedGetInput@@YAHPEA_W_K@Z
?acedGetInt@@YAHPEB_WPEAH@Z
?acedGetPoint@@YAHQEBNPEB_WQEAN@Z
?acedGetDist@@YAHQEBNPEB_WPEAN@Z
?acedPrompt@@YAHPEB_W@Z
?acedGetString@@YAHHPEB_WPEA_W_K@Z
?acedArxLoad@@YAHPEB_W@Z
?acedArxLoaded@@YAPEAUresbuf@@XZ
?acedGetSym@@YAHPEB_WPEAPEAUresbuf@@@Z
?acedInitGet@@YAHHPEB_W@Z
?acedSSFree@@YAHQEB_J@Z
?acedSSGet@@YAHPEB_WPEBX1PEBUresbuf@@QEA_J@Z
?acedRemoveFilterWinMsg@@YA_NQ6A_NPEAUtagMSG@@@Z@Z
?acedGetWinNum@@YAHHH@Z
?acedCoordFromWorldToPixel@@YA_NHQEBNAEAVCPoint@@@Z
?acedCoordFromPixelToWorld@@YA_NHVCPoint@@QEAN@Z
?acDocManagerPtr@@YAPEAVAcApDocManager@@XZ
?acedPostCommandPrompt@@YAXXZ
?acedAlert@@YAHPEB_W@Z
?acedRestoreStatusBar@@YAXXZ
?acedSetStatusBarProgressMeterPos@@YAHH@Z
?acedSetStatusBarProgressMeter@@YAHPEB_WHH@Z
?acedGetAcadResourceInstance@@YAPEAUHINSTANCE__@@XZ

ac1st24

?empty@AcRxResourceInstance@@SAAEBV1@XZ
acrxSysRegistry
??0AcRxObject@@IEAA@XZ
?isDerivedFrom@AcRxClass@@SA_NPEBV1@0@Z
?subQueryX@AcRxObject@@MEBAPEAV1@PEBVAcRxClass@@@Z
?comparedTo@AcRxObject@@UEBA?AW4Ordering@AcRx@@PEBV1@@Z
?isEqualTo@AcRxObject@@UEBA_NPEBV1@@Z
?copyFrom@AcRxObject@@UEAA?AW4ErrorStatus@Acad@@PEBV1@@Z
?clone@AcRxObject@@UEBAPEAV1@XZ
??1AcString@@QEAA@XZ
??0AcString@@QEAA@XZ

acdrawbridge

?k3DDrawing@AcGsKernelDescriptor@@2PEBVAcUniqueString@@EB
?acquireGraphicsKernel@AcGsManager@@SAPEAVAcGsGraphicsKernel@@AEBVAcGsKernelDescriptor@@@Z

mfc140u

ord13758
ord2316
ord2571
ord1667
ord14038
ord4721
ord6256
ord9941
ord5749
ord5167
ord7869
ord841
ord12566
ord9216
ord1352
ord3168
ord265
ord4946
ord12240
ord8416
ord8058
ord488
ord11644
ord12033
ord14227
ord2801
ord1120
ord14299
ord11654
ord2815
ord8206
ord1637
ord6542
ord6006
ord489
ord1121
ord3952
ord6090
ord5742
ord12931
ord6224
ord4241
ord3879
ord8085
ord4926
ord6602
ord464
ord12664
ord2757
ord1101
ord370
ord2262
ord878
ord1369
ord13199
ord7394
ord2340
ord6505
ord12030
ord14225
ord12087
ord14278
ord12933
ord3143
ord4696
ord261
ord3090
ord5643
ord5607
ord13301
ord7785
ord7637
ord4913
ord2424
ord830
ord3720
ord3936
ord10911
ord10901
ord11052
ord1346
ord5570
ord12926
ord4510
ord14031
ord2357
ord320
ord12111
ord6549
ord3742
ord12762
ord8501
ord8063
ord13132
ord5240
ord13864
ord6586
ord954
ord3163
ord3529
ord3546
ord6230
ord13557
ord5055
ord13050
ord6044
ord7654
ord12164
ord9610
ord10217
ord9272
ord3523
ord3774
ord13895
ord13893
ord3760
ord3734
ord4877
ord12901
ord2639
ord1772
ord3948
ord3999
ord4000
ord1422
ord7635
ord5548
ord5487
ord14001
ord13994
ord4032
ord13605
ord13906
ord13919
ord8945
ord10690
ord5900
ord1454
ord3728
ord3697
ord3599
ord14128
ord3308
ord3307
ord11085
ord8901
ord2697
ord13397
ord6000
ord11813
ord6303
ord6285
ord3071
ord446
ord10163
ord8507
ord11854
ord7233
ord1670
ord473
ord2234
ord2336
ord543
ord1164
ord1424
ord4335
ord8003
ord10965
ord10968
ord9200
ord9215
ord9205
ord9677
ord9682
ord9217
ord10199
ord8614
ord8604
ord11435
ord9739
ord6630
ord8917
ord11770
ord6867
ord475
ord9948
ord10915
ord10913
ord11344
ord1112
ord12802
ord3736
ord10803
ord11783
ord6247
ord8700
ord10831
ord9736
ord2625
ord9113
ord7243
ord12207
ord9199
ord9676
ord9681
ord9204
ord13761
ord10807
ord10811
ord2597
ord10835
ord9738
ord2628
ord9158
ord375
ord9218
ord1065
ord3097
ord12965
ord6907
ord6344
ord4085
ord8824
ord11787
ord7250
ord5772
ord4866
ord4865
ord4868
ord4864
ord4863
ord11805
ord2627
ord10806
ord7518
ord10964
ord10967
ord11270
ord6878
ord499
ord1127
ord10194
ord9219
ord3080
ord11858
ord8611
ord8603
ord13399
ord6001
ord7244
ord448
ord10704
ord8731
ord5755
ord3171
ord7169
ord6606
ord11804
ord9157
ord7388
ord5910
ord6588
ord3164
ord4095
ord8826
ord2786
ord6879
ord502
ord3081
ord8095
ord4872
ord4873
ord5917
ord12142
ord1766
ord5722
ord13351
ord13360
ord5727
ord13358
ord5726
ord2510
ord4353
ord11119
ord5743
ord8521
ord1129
ord7912
ord8904
ord11489
ord11484
ord5189
ord11859
ord3723
ord4443
ord11784
ord8928
ord11763
ord11184
ord10093
ord8993
ord7245
ord956
ord13283
ord1425
ord2861
ord4967
ord12992
ord12985
ord972
ord7165
ord13613
ord7541
ord6074
ord8161
ord14033
ord14039
ord12443
ord1671
ord266
ord14073
ord8179
ord942
ord1331
ord810
ord8823
ord7780
ord4084
ord7775
ord7619
ord5604
ord13309
ord5641
ord5628
ord13299
ord13450
ord2270
ord2187
ord1111
ord3951
ord3713
ord4324
ord8471
ord8468
ord6724
ord6619
ord4357
ord2514
ord8441
ord4086
ord13999
ord2479
ord4725
ord3803
ord6361
ord1149
ord3745
ord4724
ord3089
ord528
ord1055
ord361
ord12746
ord1086
ord4030
ord4498
ord13679
ord12763
ord438
ord1089
ord2473
ord3756
ord2475
ord4722
ord6320
ord1428
ord12932
ord13612
ord14199
ord11760
ord11780
ord11853
ord3810
ord7883
ord12139
ord8037
ord3722
ord4114
ord4144
ord4110
ord4068
ord4038
ord3972
ord2598
ord4239
ord13811
ord4631
ord8819
ord1057
ord3746
ord2906
ord8439
ord4081
ord5672
ord3058
ord6258
ord5916
ord6002
ord13401
ord3212
ord3209
ord9946
ord7913
ord2698
ord14360
ord9976
ord9978
ord9977
ord9975
ord9979
ord5451
ord11414
ord11415
ord8830
ord11771
ord3718
ord11625
ord14209
ord8656
ord11902
ord6729
ord10691
ord8947
ord3173
ord13513
ord11944
ord11940
ord1700
ord1722
ord13597
ord962
ord4656
ord12600
ord14032
ord8409
ord4511
ord2909
ord2903
ord5709
ord1504
ord1503
ord1501
ord293
ord286
ord285
ord2921
ord1748
ord1734
ord1755
ord4776
ord4843
ord4181
ord2344
ord3274
ord4813
ord8683
ord4788
ord4806
ord4800
ord11465
ord4794
ord4853
ord4837
ord4782
ord4859
ord4814
ord4752
ord4767
ord11405
ord10808
ord2573
ord4828
ord4360
ord5582
ord9384
ord4352
ord2967
ord14211
ord7651
ord14217
ord6631
ord11406
ord13354
ord5723
ord7551
ord13767
ord2629
ord11806
ord3812
ord1438

kernel32

HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
InitializeCriticalSectionEx
DeleteCriticalSection
OutputDebugStringA
SetLastError
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
GetModuleHandleExW
LoadLibraryW
CreateActCtxW
ActivateActCtx
DeactivateActCtx
FindActCtxSectionStringW
QueryActCtxW
EnterCriticalSection
LeaveCriticalSection
GetLastError
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetProcAddress
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcess
GlobalFree
TerminateProcess
QueryPerformanceCounter
CreateFileW
GetModuleHandleW
OutputDebugStringW
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
RaiseException
DecodePointer
GetCurrentThreadId
MultiByteToWideChar
GetStringTypeExW
LocalFree
FindResourceW
SizeofResource
GetVersionExW
DeleteFileW
WideCharToMultiByte
lstrcpynW
GlobalSize
GlobalReAlloc
FindNextFileW
FindFirstFileW
CreateDirectoryW
FindClose
GlobalLock
GlobalUnlock
GlobalAlloc
CloseHandle
SetEvent
WriteFile

user32

MessageBoxW
LockWindowUpdate
ReleaseDC
GetDC
DeleteMenu
GetSubMenu
CheckMenuItem
GetFocus
LoadMenuW
PostMessageW
SendMessageW
EnableWindow
GetCursorPos
UnregisterClassW
SystemParametersInfoW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetSystemMetrics
IsZoomed
IsIconic
LoadStringW
RedrawWindow
WindowFromPoint
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
SetClassLongW
SetCursor
InvalidateRect
ReleaseCapture
SetCapture
GetDlgCtrlID
SetWindowPos
RemoveMenu
AppendMenuW
GetMenuItemCount
CreatePopupMenu
DrawMenuBar
GetClientRect
WindowFromDC
KillTimer
IsRectEmpty
SetRect
DrawFocusRect
SetActiveWindow
LoadCursorW
PtInRect
CopyRect
GetWindowRect
IsWindowVisible
LoadImageW
LoadBitmapW
GetParent
GetWindowLongW
UnionRect
ScreenToClient
ClientToScreen

gdi32

CreatePen
GetSystemPaletteEntries
CreatePalette
BitBlt
GetObjectW
SelectPalette
RealizePalette
GetStockObject
GetDIBits
GetDeviceCaps
DeleteObject
DeleteDC
CreateDIBitmap
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap

shell32

DragQueryPoint
DragQueryFileW
DragAcceptFiles
DragFinish

comctl32

ImageList_Remove
ImageList_AddMasked
ImageList_Draw
ord17

ole32

ReleaseStgMedium
OleInitialize
OleUninitialize

oleaut32

SysFreeString
VarDateFromStr
SysAllocStringLen
VariantTimeToSystemTime
SysReAllocStringLen

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

acpal

?acHeapAlloc@@YAPEAXPEAX_K@Z
?acHeapFree@@YAXPEAX0@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_terminate
_CxxThrowException
memcpy
memmove
memset
__std_exception_copy
__std_exception_destroy
memcmp
__C_specific_handler
__current_exception
__current_exception_context
__std_type_info_destroy_list

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_invalid_parameter_noinfo
_errno
_invalid_parameter_noinfo_noreturn
_register_onexit_function
_initterm_e
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
terminate
_initterm

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsscanf
__stdio_common_vswscanf
__stdio_common_vswprintf

api-ms-win-crt-string-l1-1-0

_wcsupr
_wcsicmp
wcspbrk
_wcslwr

api-ms-win-crt-filesystem-l1-1-0

_waccess

api-ms-win-crt-convert-l1-1-0

_wtof
wcstod
_wtol

api-ms-win-crt-math-l1-1-0

acos
cos
sin
asin
sqrt
atan2

api-ms-win-crt-heap-l1-1-0

_recalloc
free

Exports

Exports

?FClearInsertedBlkIds@dwglibapi@@YAHXZ
?FDwgLibAddBlk@dwglibapi@@YAHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@0AEAV?$AcArray@VAcDbObjectId@@V?$AcArrayMemCopyReallocator@VAcDbObjectId@@@@@@VAcGePoint3d@@@Z
?FDwglib@@YAHPEB_W0@Z
?FDwglibNew@dwglibapi@@YAHPEB_W00@Z
?FDwglibNewFastDwgPath@dwglibapi@@YAHPEB_W00@Z
?FDwglibNewOnePath@dwglibapi@@YAHPEB_W00@Z
?FGetInsertedBlkIds@dwglibapi@@YAHAEAV?$AcArray@VAcDbObjectId@@V?$AcArrayMemCopyReallocator@VAcDbObjectId@@@@@@@Z
?FInsDwgBlkNameFromOneLib@@YAXPEB_WAEAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@0HHH@Z
?FInsertBlkInFile@dwglibapi@@YAHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@0H@Z
?FInsertBlockAlongCurveInFile@dwglibapi@@YAHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@0VAcDbObjectId@@1NNNNPEB_WPEAV?$AcArray@VAcDbObjectId@@V?$AcArrayMemCopyReallocator@VAcDbObjectId@@@@@@@Z
?FInsertBlockAlongCurveInFile@dwglibapi@@YAHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@0VAcDbObjectId@@PEAV?$AcArray@VAcGePoint3d@@V?$AcArrayMemCopyReallocator@VAcGePoint3d@@@@@@PEAV?$AcArray@NV?$AcArrayMemCopyReallocator@N@@@@NNNNPEB_WPEAV?$AcArray@VAcDbObjectId@@V?$AcArrayMemCopyReallocator@VAcDbObjectId@@@@@@@Z
?FSelDwgBlkName@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PEB_W0HH@Z
?FSelDwgBlkNameFromOneLib@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PEB_WAEAV12@0HHH@Z
?FSelDwgBlkNameFromOneLibNotCloseDialog@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PEB_WAEAV12@0V12@HHHPEAVCWnd@@@Z
?GetCurDwgName@dwglibapi@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?IsBusy@dwglibapi@@YAHXZ
?RefreshDwgLib@dwglibapi@@YAXXZ
?SetBusy@dwglibapi@@YAXH@Z
?SetDwgLibPath@dwglibapi@@YAXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?SetDwgLibProc@@YAXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@P6AHAEAV?$AcArray@VAcDbObjectId@@V?$AcArrayMemCopyReallocator@VAcDbObjectId@@@@@@@Z@Z
?SetDwgLibProc@@YAXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@P6AHVAcDbObjectId@@@Z@Z
acrxEntryPoint
acrxGetApiVersion

Sections

.text
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 158KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

ARXCOMMA
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DBXCUSTO
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

ADSSYMBO
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 276KB - Virtual size: 275KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aad7024c7672cce1ee5109f779afe807

Headers

DLL Characteristics

File Characteristics

Imports

fgdutilu2021

fgbfileu2021

fgbmfcu2021

fastbaseu2021

fxdatadealu2021

acdb24

acge24

acad.exe

acui24

acismobj24.dbx

adui24

accore

ac1st24

acdrawbridge

mfc140u

kernel32

user32

gdi32

shell32

comctl32

ole32

oleaut32

msvcp140

acpal

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-heap-l1-1-0

Exports

Exports

Sections

.text Size: 256KB - Virtual size: 256KB

.rdata Size: 158KB - Virtual size: 158KB

.data Size: 5KB - Virtual size: 7KB

.pdata Size: 14KB - Virtual size: 14KB

ARXCOMMA Size: 512B - Virtual size: 16B

DBXCUSTO Size: 512B - Virtual size: 16B

ADSSYMBO Size: 512B - Virtual size: 16B

.rsrc Size: 276KB - Virtual size: 275KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 256KB - Virtual size: 256KB

.rdata
Size: 158KB - Virtual size: 158KB

.data
Size: 5KB - Virtual size: 7KB

.pdata
Size: 14KB - Virtual size: 14KB

ARXCOMMA
Size: 512B - Virtual size: 16B

DBXCUSTO
Size: 512B - Virtual size: 16B

ADSSYMBO
Size: 512B - Virtual size: 16B

.rsrc
Size: 276KB - Virtual size: 275KB

.reloc
Size: 8KB - Virtual size: 7KB