40c8685b87316c8f57e1a91c556335c1ca238087c91eb71a8246d804e2deda0e

Sharing

Copy URL Twitter E-mail

General

Target

40c8685b87316c8f57e1a91c556335c1ca238087c91eb71a8246d804e2deda0e
Size

604KB
MD5

d3b04ebb1653f78d77d11cf2f7745d7d
SHA1

c93882e11183f6221a0dcdd84f37319be55387f2
SHA256

40c8685b87316c8f57e1a91c556335c1ca238087c91eb71a8246d804e2deda0e
SHA512

c999ce945f6442aa49b6d89c4ace658e8d09be75c1bad3dbd119113308d4e53f01aca7fe91dbd6f65cc05e43d8dad41d62792580591f62991ed6497fa0b81072
SSDEEP

12288:+15MJuhgmij+JLlnptCiBJGWL77OaomS0OWYybJghS:+15MJPKN5zvGYXO8VTWw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40c8685b87316c8f57e1a91c556335c1ca238087c91eb71a8246d804e2deda0e

Files

40c8685b87316c8f57e1a91c556335c1ca238087c91eb71a8246d804e2deda0e
.dll windows:6 windows x64

4b63941c2c6172e12563d28b698e8750

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

acdb20

?desc@AcDbBlockReference@@SAPEAVAcRxClass@@XZ
??0AcDbBlockReference@@QEAA@AEBVAcGePoint3d@@VAcDbObjectId@@@Z
??0AcDbBlockReference@@QEAA@XZ
?desc@AcDbLine@@SAPEAVAcRxClass@@XZ
?startPoint@AcDbLine@@QEBA?AVAcGePoint3d@@XZ
?endPoint@AcDbLine@@QEBA?AVAcGePoint3d@@XZ
??0AcDbIdMapping@@QEAA@XZ
??1AcDbIdMapping@@UEAA@XZ
?setFromRbChain@AcDbXrecord@@QEAA?AW4ErrorStatus@Acad@@AEBUresbuf@@PEAVAcDbDatabase@@@Z
?xrefSubCommandStart@AcRxEventReactor@@UEAAXPEAVAcDbDatabase@@W4AcXrefSubCommand@@AEBV?$AcArray@VAcDbObjectId@@V?$AcArrayMemCopyReallocator@VAcDbObjectId@@@@@@PEBQEB_W3AEA_N@Z
?xrefSubCommandAborted@AcRxEventReactor@@UEAAXPEAVAcDbDatabase@@W4AcXrefSubCommand@@AEBV?$AcArray@VAcDbObjectId@@V?$AcArrayMemCopyReallocator@VAcDbObjectId@@@@@@PEBQEB_W3@Z
?xrefSubCommandEnd@AcRxEventReactor@@UEAAXPEAVAcDbDatabase@@W4AcXrefSubCommand@@AEBV?$AcArray@VAcDbObjectId@@V?$AcArrayMemCopyReallocator@VAcDbObjectId@@@@@@PEBQEB_W3@Z
?preXrefLockFile@AcRxEventReactor@@UEAAXPEAVAcDbDatabase@@VAcDbObjectId@@@Z
?rbChain@AcDbXrecord@@QEBA?AW4ErrorStatus@Acad@@PEAPEAUresbuf@@PEAVAcDbDatabase@@@Z
??0AcDbXrecord@@QEAA@XZ
?getBlockReferenceIds@AcDbBlockTableRecord@@QEBA?AW4ErrorStatus@Acad@@AEAV?$AcArray@VAcDbObjectId@@V?$AcArrayMemCopyReallocator@VAcDbObjectId@@@@@@_N1@Z
?setPreviewIcon@AcDbBlockTableRecord@@QEAA?AW4ErrorStatus@Acad@@AEBV?$AcArray@EV?$AcArrayMemCopyReallocator@E@@@@@Z
?hasAttributeDefinitions@AcDbBlockTableRecord@@QEBA_NXZ
?setOrigin@AcDbBlockTableRecord@@QEAA?AW4ErrorStatus@Acad@@AEBVAcGePoint3d@@@Z
?setComments@AcDbBlockTableRecord@@QEAA?AW4ErrorStatus@Acad@@PEB_W@Z
?comments@AcDbBlockTableRecord@@QEBA?AW4ErrorStatus@Acad@@AEAPEB_W@Z
?newIterator@AcDbBlockTableRecord@@QEBA?AW4ErrorStatus@Acad@@AEAPEAVAcDbBlockTableRecordIterator@@_N1@Z
?appendAcDbEntity@AcDbBlockTableRecord@@QEAA?AW4ErrorStatus@Acad@@AEAVAcDbObjectId@@PEAVAcDbEntity@@@Z
??0AcDbBlockTableRecord@@QEAA@XZ
?step@AcDbBlockTableRecordIterator@@QEAAX_N0@Z
?getEntityId@AcDbBlockTableRecordIterator@@QEBA?AW4ErrorStatus@Acad@@AEAVAcDbObjectId@@@Z
?done@AcDbBlockTableRecordIterator@@QEBA_NXZ
?setName@AcDbSymbolTableRecord@@QEAA?AW4ErrorStatus@Acad@@PEB_W@Z
?add@AcDbBlockTable@@QEAA?AW4ErrorStatus@Acad@@AEAVAcDbObjectId@@PEAVAcDbBlockTableRecord@@@Z
?has@AcDbBlockTable@@QEBA_NPEB_W@Z
?getAt@AcDbBlockTable@@QEBA?AW4ErrorStatus@Acad@@PEB_WAEAVAcDbObjectId@@_N@Z
??0AcDbPolyline@@QEAA@XZ
?desc@AcDbCurve@@SAPEAVAcRxClass@@XZ
?setAt@AcDbDictionary@@QEAA?AW4ErrorStatus@Acad@@PEB_WPEAVAcDbObject@@AEAVAcDbObjectId@@@Z
?remove@AcDbDictionary@@QEAA?AW4ErrorStatus@Acad@@PEB_W@Z
?numEntries@AcDbDictionary@@QEBAKXZ
?has@AcDbDictionary@@QEBA_NPEB_W@Z
?getAt@AcDbDictionary@@QEBA?AW4ErrorStatus@Acad@@PEB_WAEAPEAVAcDbObject@@W4OpenMode@AcDb@@@Z
??0AcDbDictionary@@QEAA@XZ
?explode@AcDbEntity@@UEBA?AW4ErrorStatus@Acad@@AEAV?$AcArray@PEAXV?$AcArrayMemCopyReallocator@PEAX@@@@@Z
?erase@AcDbObject@@QEAA?AW4ErrorStatus@Acad@@H@Z
?upgradeOpen@AcDbObject@@QEAA?AW4ErrorStatus@Acad@@XZ
?wblockCloneObjects@AcDbDatabase@@QEAA?AW4ErrorStatus@Acad@@AEAV?$AcArray@VAcDbObjectId@@V?$AcArrayMemCopyReallocator@VAcDbObjectId@@@@@@AEAVAcDbObjectId@@AEAVAcDbIdMapping@@W4DuplicateRecordCloning@AcDb@@_N@Z
?purge@AcDbDatabase@@QEAA?AW4ErrorStatus@Acad@@AEAV?$AcArray@VAcDbObjectId@@V?$AcArrayMemCopyReallocator@VAcDbObjectId@@@@@@@Z
?getNamedObjectsDictionary@AcDbDatabase@@QEAA?AW4ErrorStatus@Acad@@AEAPEAVAcDbDictionary@@W4OpenMode@AcDb@@@Z
acdbGetObjectId
?acdbOpenAcDbObject@@YA?AW4ErrorStatus@Acad@@AEAPEAVAcDbObject@@VAcDbObjectId@@W4OpenMode@AcDb@@PEBVAcRxClass@@_N@Z
?acdbOpenAcDbObject@@YA?AW4ErrorStatus@Acad@@AEAPEAVAcDbObject@@VAcDbObjectId@@W4OpenMode@AcDb@@_N@Z
?acutAngle@@YANQEBN0@Z
?acutBuildList@@YAPEAUresbuf@@HZZ
?acutRelRb@@YAHPEAUresbuf@@@Z
?acutWcMatch@@YAHPEB_W0@Z
?isValid@AcDbObjectId@@QEBA_NXZ
?acdbGetAdsName@@YA?AW4ErrorStatus@Acad@@AEAY01_JVAcDbObjectId@@@Z
?acutPrintf@@YAHPEB_WZZ
?c5ObjIdIsEqualTo@@YA_NPEBVAcDbStub@@0@Z
?closeInput@AcDbDatabase@@QEAA?AW4ErrorStatus@Acad@@_N@Z
?desc@AcRxDynamicLinker@@SAPEAVAcRxClass@@XZ
?getAt@AcDbBlockTable@@QEBA?AW4ErrorStatus@Acad@@PEB_WAEAPEAVAcDbBlockTableRecord@@W4OpenMode@AcDb@@_N@Z
?acutDelBuffer@@YAXAEAPEAX@Z
?acdbHostApplicationServices@@YAPEAVAcDbHostApplicationServices@@XZ
?getPreviewIcon@AcDbBlockTableRecord@@QEBA?AW4ErrorStatus@Acad@@AEAV?$AcArray@EV?$AcArrayMemCopyReallocator@E@@@@@Z
?hasPreviewIcon@AcDbBlockTableRecord@@QEBA_NXZ
?comments@AcDbBlockTableRecord@@QEBA?AW4ErrorStatus@Acad@@AEAPEA_W@Z
?getName@AcDbSymbolTableRecord@@QEBA?AW4ErrorStatus@Acad@@AEAPEA_W@Z
?getRecord@AcDbBlockTableIterator@@QEBA?AW4ErrorStatus@Acad@@AEAPEAVAcDbBlockTableRecord@@W4OpenMode@AcDb@@_N@Z
?step@AcDbSymbolTableIterator@@QEAAX_N0@Z
?done@AcDbSymbolTableIterator@@QEBA_NXZ
?start@AcDbSymbolTableIterator@@QEAAX_N0@Z
?newIterator@AcDbBlockTable@@QEBA?AW4ErrorStatus@Acad@@AEAPEAVAcDbBlockTableIterator@@_N1@Z
?addBlockExt@AcDbExtents@@QEAA?AW4ErrorStatus@Acad@@PEAVAcDbBlockTableRecord@@@Z
??0AcDbExtents@@QEAA@XZ
?close@AcDbObject@@QEAA?AW4ErrorStatus@Acad@@XZ
?objectId@AcDbObject@@QEBA?AVAcDbObjectId@@XZ
?insert@AcDbDatabase@@QEAA?AW4ErrorStatus@Acad@@AEAVAcDbObjectId@@PEB_WPEAV1@_N@Z
?saveAs@AcDbDatabase@@QEAA?AW4ErrorStatus@Acad@@PEB_W_NW4AcDbDwgVersion@AcDb@@PEBUSecurityParams@@@Z
?readDwgFile@AcDbDatabase@@QEAA?AW4ErrorStatus@Acad@@PEB_WH_N0@Z
?getSymbolTable@AcDbDatabase@@QEAA?AW4ErrorStatus@Acad@@AEAPEAVAcDbBlockTable@@W4OpenMode@AcDb@@@Z
??0AcDbDatabase@@QEAA@_N0@Z

acge20

?angleOnPlane@AcGeVector3d@@QEBANAEBVAcGePlanarEnt@@@Z
?normalize@AcGeVector3d@@QEAAAEAV1@AEBVAcGeTol@@@Z
?isEqualTo@AcGePoint3d@@QEBA_NAEBV1@AEBVAcGeTol@@@Z
??1AcGeEntity3d@@QEAA@XZ
??0AcGeScale3d@@QEAA@XZ
??0AcGePoint3d@@QEAA@XZ
?gTol@AcGeContext@@2VAcGeTol@@A
??0AcGeMatrix3d@@QEAA@XZ
??1AcGePlane@@QEAA@XZ
?set@AcGeScale3d@@QEAAAEAV1@NNN@Z
??0AcGePlane@@QEAA@XZ

acad.exe

?acedGetAcadFrame@@YAPEAVCMDIFrameWnd@@XZ
?acedGetAcadTextCmdLine@@YAPEAVCWnd@@XZ
?AcApGetDatabase@@YAPEAVAcDbDatabase@@PEAVCView@@@Z
?acedGetAcadDwgView@@YAPEAVCView@@XZ

acui20

?InitAcUiDLL@@YAXXZ
?GetThisMessageMap@CAcUiDialog@@KAPEBUAFX_MSGMAP@@XZ
?DoDataExchange@CAcUiDialog@@MEAAXPEAVCDataExchange@@@Z
?OnCancel@CAcUiDialog@@MEAAXXZ
?OnOK@CAcUiDialog@@MEAAXXZ
?OnInitDialog@CAcUiDialog@@UEAAHXZ
?OnDialogHelp@CAcUiDialog@@UEAAXXZ
?EnableMultiDocumentActivation@CAcUiDialog@@UEAAHH@Z
?IsMultiDocumentActivationEnabled@CAcUiDialog@@UEAAHXZ
?EnableFloatingWindows@CAcUiDialog@@UEAAXH@Z
?AppRootKey@CAcUiDialog@@UEAAPEB_WXZ
?AppResourceInstance@CAcUiDialog@@UEAAPEAUHINSTANCE__@@XZ
?AppMainWindow@CAcUiDialog@@UEAAPEAVCWnd@@XZ
?FindContextHelpFullPath@CAcUiDialog@@MEAAHPEB_WAEAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
??0CAcUiDialog@@QEAA@IPEAVCWnd@@PEAUHINSTANCE__@@@Z
?GetRuntimeClass@CAcUiDialog@@UEBAPEAUCRuntimeClass@@XZ
??1CAcUiDialog@@UEAA@XZ

adui20

?GetFloatingMinSize@CAdUiDockControlBar@@MEAAXPEAJ0@Z
?OnClosing@CAdUiDockControlBar@@MEAA_NXZ
?CreateControlBar@CAdUiDockControlBar@@MEAAHPEAUtagCREATESTRUCTW@@@Z
?PaintControlBar@CAdUiDockControlBar@@MEAAXPEAVCDC@@@Z
?OnHideBar@CAdUiDockControlBar@@IEAAXXZ
?OnCommand@CAdUiDockControlBar@@MEAAH_K_J@Z
?CalcFixedLayout@CAdUiDockControlBar@@UEAA?AVCSize@@HH@Z
?RestoreControlBar@CAdUiDockControlBar@@QEAAXIPEAVCRect@@@Z
?Create@CAdUiDockControlBar@@UEAAHPEB_W0KAEBUtagRECT@@PEAVCWnd@@IPEAUCCreateContext@@@Z
?WindowProc@CAdUiDockControlBar@@EEAA_JI_K_J@Z
?OnUpdateCmdUI@CAdUiDockControlBar@@EEAAXPEAVCFrameWnd@@H@Z
?DoDialogHelp@CAdUiDialog@@UEAAHXZ
?OnInitDialogFinish@CAdUiDialog@@MEAAXXZ
?OnInitDialogBegin@CAdUiDialog@@MEAAXXZ
?PreCreateWindow@CAdUiBaseDialog@@MEAAHAEAUtagCREATESTRUCTW@@@Z
?PostNcDestroy@CAdUiBaseDialog@@MEAAXXZ
?PreTranslateMessage@CAdUiBaseDialog@@UEAAHPEAUtagMSG@@@Z
?ExchangeData@CAdUiBaseDialog@@UEAAHH@Z
?Create@CAdUiBaseDialog@@UEAAHIPEAVCWnd@@@Z
?Create@CAdUiBaseDialog@@UEAAHPEB_WPEAVCWnd@@@Z
?OnNotifyUpdateTip@CAdUiBaseDialog@@MEAA?AW4ADUI_REPLY@@PEAVCWnd@@@Z
?OnNotifyGeneric@CAdUiBaseDialog@@MEAA?AW4ADUI_REPLY@@I_J@Z
?OnNotifyControlValid@CAdUiBaseDialog@@MEAA?AW4ADUI_REPLY@@IH@Z
?OnNotifyControlChange@CAdUiBaseDialog@@MEAA?AW4ADUI_REPLY@@I_J@Z
?DoAdUiMessage@CAdUiBaseDialog@@MEAA?AW4ADUI_REPLY@@W4ADUI_NOTIFY@@I_J@Z
?DoModal@CAdUiBaseDialog@@UEAA_JXZ
?GetThisMessageMap@CAdUiPaletteSet@@KAPEBUAFX_MSGMAP@@XZ
?OnEraseBkgnd@CAdUiPaletteSet@@IEAAHPEAVCDC@@@Z
?AddCustomMenuItems@CAdUiDockControlBar@@MEAAH_J@Z
?OnSize@CAdUiPaletteSet@@IEAAXIHH@Z
?OnCreate@CAdUiPaletteSet@@IEAAHPEAUtagCREATESTRUCTW@@@Z
?PreTranslateMessage@CAdUiPaletteSet@@UEAAHPEAUtagMSG@@@Z
?OnContextMenu@CAdUiPaletteSet@@MEAAXPEAVCWnd@@VCPoint@@@Z
?ThemeModified@CAdUiPaletteSet@@MEAAXW4AdUiThemeElement@@@Z
?OnTabDrag@CAdUiPaletteSet@@MEAAXAEAVCPtrArray@@@Z
?GetBottomReservedHeight@CAdUiPaletteSet@@MEAAHXZ
?GetTopReservedHeight@CAdUiPaletteSet@@MEAAHXZ
?GetMaximumSize@CAdUiPaletteSet@@MEAAXAEAVCSize@@@Z
?GetMinimumSize@CAdUiPaletteSet@@MEAAXAEAVCSize@@@Z
?AddContextMenuItems@CAdUiPaletteSet@@MEAAHPEAVCMenu@@HH@Z
?EditName@CAdUiPaletteSet@@MEAAXXZ
?NameEditValidation@CAdUiPaletteSet@@UEAAHPEAVCEdit@@@Z
?EnableDocking@CAdUiPaletteSet@@QEAAXK@Z
?Save@CAdUiPaletteSet@@UEAAHPEAUIUnknown@@@Z
?Load@CAdUiPaletteSet@@UEAAHPEAUIUnknown@@@Z
?Create@CAdUiPaletteSet@@QEAAHPEB_WKAEBUtagRECT@@PEAVCWnd@@K@Z
??1CAdUiPaletteSet@@UEAA@XZ
??0CAdUiPaletteSet@@QEAA@H@Z
?GetThisClass@CAdUiPaletteSet@@SAPEAUCRuntimeClass@@XZ

accore

?acedRegisterFilterWinMsg@@YAHQ6AHPEAUtagMSG@@@Z@Z
acedCommandS
?acedGetArgs@@YAPEAUresbuf@@XZ
?acedGetString@@YAHHPEB_WPEA_W_K@Z
?acedSSGet@@YAHPEB_WPEBX1PEBUresbuf@@QEA_J@Z
?acedSSFree@@YAHQEB_J@Z
?acedInitGet@@YAHHPEB_W@Z
?acedGetSym@@YAHPEB_WPEAPEAUresbuf@@@Z
?desc@AcEditor@@SAPEAVAcRxClass@@XZ
?acedArxLoad@@YAHPEB_W@Z
?acedPrompt@@YAHPEB_W@Z
?acedGetDist@@YAHQEBNPEB_WPEAN@Z
?acedGetPoint@@YAHQEBNPEB_WQEAN@Z
?acedGetInt@@YAHPEB_WPEAH@Z
?acedGetInput@@YAHPEA_W_K@Z
?acedRedraw@@YAHQEB_JH@Z
?acedGrDraw@@YAHQEBN0HH@Z
?acdbEntLast@@YAHQEA_J@Z
?acedUpdateDisplay@@YAXXZ
?isA@AcEdJig@@UEBAPEAVAcRxClass@@XZ
?drag@AcEdJig@@QEAA?AW4DragStatus@1@XZ
?setDispPrompt@AcEdJig@@QEAAXPEB_WZZ
?dimData@AcEdJig@@UEAAPEAV?$AcArray@PEAVAcDbDimData@@V?$AcArrayMemCopyReallocator@PEAVAcDbDimData@@@@@@N@Z
?setDimValue@AcEdJig@@UEAA?AW4ErrorStatus@Acad@@PEBVAcDbDimData@@N@Z
?acedPostCommand@@YAHPEB_W@Z
?ads_regen@@YAXXZ
?isA@AcEditorReactor@@UEBAPEAVAcRxClass@@XZ
?unknownCommand@AcEditorReactor@@UEAAXPEB_WPEAV?$AcArray@PEAXV?$AcArrayMemCopyReallocator@PEAX@@@@@Z
?commandWillStart@AcEditorReactor@@UEAAXPEB_W@Z
?commandEnded@AcEditorReactor@@UEAAXPEB_W@Z
?commandCancelled@AcEditorReactor@@UEAAXPEB_W@Z
?commandFailed@AcEditorReactor@@UEAAXPEB_W@Z
?lispWillStart@AcEditorReactor@@UEAAXPEB_W@Z
?desc@AcEdCommandStack@@SAPEAVAcRxClass@@XZ
?lispCancelled@AcEditorReactor@@UEAAXXZ
?beginClose@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@@Z
?beginDxfIn@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@@Z
?abortDxfIn@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@@Z
?dxfInComplete@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@@Z
?beginDxfOut@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@@Z
?abortDxfOut@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@@Z
?dxfOutComplete@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@@Z
?beginDwgOpen@AcEditorReactor@@UEAAXPEA_W@Z
?endDwgOpen@AcEditorReactor@@UEAAXPEB_WPEAVAcDbDatabase@@@Z
?initialDwgFileOpenComplete@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@@Z
?dwgFileOpened@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@PEA_W@Z
?databaseConstructed@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@@Z
?databaseToBeDestroyed@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@@Z
?beginSave@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@PEB_W@Z
?saveComplete@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@PEB_W@Z
?abortSave@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@@Z
?beginInsert@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@PEB_W0@Z
?beginInsert@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@AEBVAcGeMatrix3d@@0@Z
?otherInsert@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@AEAVAcDbIdMapping@@0@Z
?abortInsert@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@@Z
?endInsert@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@@Z
?wblockNotice@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@@Z
?beginWblock@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@0AEAPEBVAcGePoint3d@@@Z
?beginWblock@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@0VAcDbObjectId@@@Z
?beginWblock@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@0@Z
?otherWblock@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@AEAVAcDbIdMapping@@0@Z
?abortWblock@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@@Z
?endWblock@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@@Z
?beginDeepClone@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@AEAVAcDbIdMapping@@@Z
?beginDeepCloneXlation@AcEditorReactor@@UEAAXAEAVAcDbIdMapping@@PEAW4ErrorStatus@Acad@@@Z
?abortDeepClone@AcEditorReactor@@UEAAXAEAVAcDbIdMapping@@@Z
?endDeepClone@AcEditorReactor@@UEAAXAEAVAcDbIdMapping@@@Z
?sysVarChanged@AcEditorReactor@@UEAAXPEB_WH@Z
?sysVarWillChange@AcEditorReactor@@UEAAXPEB_W@Z
?beginAttach@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@PEB_W0@Z
?otherAttach@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@0@Z
?abortAttach@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@@Z
?endAttach@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@@Z
?redirected@AcEditorReactor@@UEAAXVAcDbObjectId@@0@Z
?comandeered@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@VAcDbObjectId@@0@Z
?beginRestore@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@PEB_W0@Z
?abortRestore@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@@Z
?endRestore@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@@Z
?xrefSubcommandBindItem@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@HVAcDbObjectId@@@Z
?xrefSubcommandAttachItem@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@HPEB_W@Z
?xrefSubcommandOverlayItem@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@HPEB_W@Z
?xrefSubcommandDetachItem@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@HVAcDbObjectId@@@Z
?xrefSubcommandPathItem@AcEditorReactor@@UEAAXHVAcDbObjectId@@PEB_W@Z
?xrefSubcommandReloadItem@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@HVAcDbObjectId@@@Z
?xrefSubcommandUnloadItem@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@HVAcDbObjectId@@@Z
?undoSubcommandAuto@AcEditorReactor@@UEAAXHH@Z
?undoSubcommandControl@AcEditorReactor@@UEAAXHH@Z
?undoSubcommandBegin@AcEditorReactor@@UEAAXH@Z
?undoSubcommandEnd@AcEditorReactor@@UEAAXH@Z
?undoSubcommandMark@AcEditorReactor@@UEAAXH@Z
?undoSubcommandBack@AcEditorReactor@@UEAAXH@Z
?undoSubcommandNumber@AcEditorReactor@@UEAAXHH@Z
?pickfirstModified@AcEditorReactor@@UEAAXXZ
?layoutSwitched@AcEditorReactor@@UEAAXPEB_W@Z
?docFrameMovedOrResized@AcEditorReactor@@UEAAX_J_N@Z
?mainFrameMovedOrResized@AcEditorReactor@@UEAAX_J_N@Z
?beginDoubleClick@AcEditorReactor@@UEAAXAEBVAcGePoint3d@@@Z
?beginRightClick@AcEditorReactor@@UEAAXAEBVAcGePoint3d@@@Z
?toolbarBitmapSizeWillChange@AcEditorReactor@@UEAAXH@Z
?toolbarBitmapSizeChanged@AcEditorReactor@@UEAAXH@Z
?beginWblockObjects@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@AEAVAcDbIdMapping@@@Z
?partialOpenNotice@AcEditorReactor@@UEAAXPEAVAcDbDatabase@@@Z
?objectsLazyLoaded@AcEditorReactor@@UEAAXAEBV?$AcArray@VAcDbObjectId@@V?$AcArrayMemCopyReallocator@VAcDbObjectId@@@@@@@Z
?beginQuit@AcEditorReactor@@UEAAXXZ
?quitAborted@AcEditorReactor@@UEAAXXZ
?quitWillStart@AcEditorReactor@@UEAAXXZ
?modelessOperationWillStart@AcEditorReactor@@UEAAXPEB_W@Z
?modelessOperationEnded@AcEditorReactor@@UEAAXPEB_W@Z
?cmdIUnkModified@AcEditorReactor@@UEAAXPEB_W@Z
?xrefSubCommandStart@AcEditorReactor@@UEAA?AW4ErrorStatus@Acad@@W4AcXrefSubCommand@@AEBV?$AcArray@VAcDbObjectId@@V?$AcArrayMemCopyReallocator@VAcDbObjectId@@@@@@PEBQEB_W2@Z
?preXrefLockFile@AcEditorReactor@@UEAAXVAcDbObjectId@@@Z
?viewChanged@AcEditorReactor@@UEAAXXZ
?acedRetVoid@@YAHXZ
?acedGetFunCode@@YAHXZ
?acedUndef@@YAHPEB_WH@Z
?acedDefun@@YAHPEB_WH@Z
?acedRegFunc@@YAHP6AHXZH@Z
?acedRemoveFilterWinMsg@@YAHQ6AHPEAUtagMSG@@@Z@Z
?acedGetWinNum@@YAHHH@Z
?acedCoordFromPixelToWorld@@YAHHVCPoint@@QEAN@Z
acedPostCommandPrompt
?documentActivated@AcApDocManagerReactor@@UEAAXPEAVAcApDocument@@@Z
?documentActivationModified@AcApDocManagerReactor@@UEAAX_N@Z
?documentToBeDeactivated@AcApDocManagerReactor@@UEAAXPEAVAcApDocument@@@Z
?documentToBeActivated@AcApDocManagerReactor@@UEAAXPEAVAcApDocument@@@Z
?documentBecameCurrent@AcApDocManagerReactor@@UEAAXPEAVAcApDocument@@@Z
?documentLockModeChanged@AcApDocManagerReactor@@UEAAXPEAVAcApDocument@@W4DocLockMode@AcAp@@11PEB_W@Z
?documentLockModeChangeVetoed@AcApDocManagerReactor@@UEAAXPEAVAcApDocument@@PEB_W@Z
?documentLockModeWillChange@AcApDocManagerReactor@@UEAAXPEAVAcApDocument@@W4DocLockMode@AcAp@@11PEB_W@Z
?documentCreateCanceled@AcApDocManagerReactor@@UEAAXPEAVAcApDocument@@@Z
?documentDestroyed@AcApDocManagerReactor@@UEAAXPEB_W@Z
?documentCreated@AcApDocManagerReactor@@UEAAXPEAVAcApDocument@@@Z
?documentCreateStarted@AcApDocManagerReactor@@UEAAXPEAVAcApDocument@@@Z
?isA@AcApDocManagerReactor@@UEBAPEAVAcRxClass@@XZ
?acedRestoreStatusBar@@YAXXZ
?acedSetStatusBarProgressMeterPos@@YAHH@Z
?acedSetStatusBarProgressMeter@@YAHPEB_WHH@Z
?acDocManagerPtr@@YAPEAVAcApDocManager@@XZ
?acedGetAcadResourceInstance@@YAPEAUHINSTANCE__@@XZ
?lispEnded@AcEditorReactor@@UEAAXXZ
?acedArxLoaded@@YAPEAUresbuf@@XZ

ac1st20

?copyFrom@AcRxObject@@UEAA?AW4ErrorStatus@Acad@@PEBV1@@Z
?comparedTo@AcRxObject@@UEBA?AW4Ordering@AcRx@@PEBV1@@Z
acrxSysRegistry
?isDerivedFrom@AcRxClass@@QEBA_NPEBV1@@Z
?isEqualTo@AcRxObject@@UEBAHPEBV1@@Z
?subQueryX@AcRxObject@@MEBAPEAV1@PEBVAcRxClass@@@Z
?allocRawMem@AcHeapOperators@@CAPEAX_K@Z
?clone@AcRxObject@@UEBAPEAV1@XZ
??0AcRxObject@@IEAA@XZ
?freeRawMem@AcHeapOperators@@CAXPEAX@Z

mfc110u

ord10651
ord7365
ord10808
ord10811
ord11108
ord6738
ord498
ord1120
ord10039
ord9069
ord3025
ord11696
ord8463
ord8455
ord13220
ord5872
ord7096
ord447
ord10549
ord8582
ord5626
ord3116
ord7025
ord11642
ord9007
ord7240
ord4182
ord3820
ord2210
ord12753
ord3035
ord5479
ord13122
ord7632
ord7485
ord6739
ord501
ord3026
ord7939
ord4754
ord4755
ord5788
ord11976
ord1717
ord5593
ord13172
ord13181
ord5598
ord13179
ord5597
ord2456
ord4292
ord10957
ord5614
ord8374
ord1122
ord7757
ord8754
ord11327
ord11322
ord5065
ord11697
ord3665
ord4382
ord11622
ord8778
ord11601
ord11022
ord9938
ord8843
ord7097
ord950
ord13104
ord1416
ord2807
ord4848
ord12812
ord12805
ord5915
ord4795
ord12746
ord4449
ord13852
ord2303
ord319
ord11945
ord6415
ord3684
ord12594
ord8354
ord7907
ord12953
ord5116
ord6452
ord948
ord3108
ord3471
ord3488
ord6100
ord13378
ord4936
ord12871
ord7502
ord11998
ord9455
ord10062
ord9120
ord3465
ord3715
ord13716
ord13714
ord3702
ord3676
ord4759
ord12721
ord2585
ord1723
ord3889
ord3940
ord3941
ord1413
ord7483
ord5423
ord5363
ord13822
ord13815
ord3973
ord13426
ord13727
ord13740
ord8795
ord10535
ord5771
ord5500
ord13120
ord13271
ord2217
ord2136
ord1104
ord3892
ord3655
ord8324
ord8321
ord6586
ord4296
ord2460
ord8294
ord4027
ord13820
ord2425
ord4664
ord2573
ord6231
ord1142
ord3687
ord4663
ord3034
ord527
ord1048
ord360
ord12578
ord1079
ord3971
ord4437
ord13500
ord12595
ord437
ord2419
ord6117
ord3698
ord2421
ord4661
ord6190
ord1419
ord12752
ord13418
ord956
ord4595
ord12432
ord13853
ord8262
ord4450
ord2854
ord2848
ord5580
ord1495
ord1494
ord1492
ord293
ord286
ord285
ord2866
ord13770
ord5545
ord4122
ord2290
ord7236
ord4722
ord8534
ord11303
ord11243
ord2519
ord2543
ord1429
ord5504
ord8017
ord3219
ord3113
ord966
ord7021
ord13434
ord13433
ord14019
ord11598
ord11618
ord11691
ord3751
ord7728
ord11973
ord7882
ord3664
ord4055
ord4085
ord4051
ord4009
ord3979
ord3913
ord2544
ord4180
ord13632
ord8670
ord1050
ord3688
ord2851
ord8292
ord4022
ord5543
ord3003
ord6128
ord5787
ord5873
ord13222
ord3157
ord3154
ord9791
ord7758
ord2644
ord9821
ord9823
ord9822
ord9820
ord9824
ord5327
ord11252
ord11253
ord8681
ord11609
ord3660
ord11463
ord14029
ord8507
ord11740
ord6591
ord10536
ord8797
ord3118
ord13334
ord11779
ord11777
ord1685
ord1694
ord1702
ord1698
ord1707
ord4698
ord4735
ord4706
ord4718
ord4714
ord4710
ord4741
ord4731
ord4702
ord4745
ord4723
ord4687
ord4693
ord4726
ord4299
ord5456
ord9232
ord4291
ord2912
ord14031
ord7499
ord14037
ord6493
ord11244
ord11643
ord4747
ord4748
ord4751
ord13175
ord5594
ord7398
ord13588
ord2575
ord11644
ord3753
ord3223
ord3224
ord3117
ord11688
ord4665
ord984
ord3943
ord4959
ord5239
ord5427
ord8891
ord5215
ord4962
ord5105
ord4943
ord7310
ord7311
ord7301
ord5103
ord7767
ord8750
ord2160
ord1027
ord290
ord280
ord296
ord7738
ord1632
ord1480
ord266
ord265
ord1482
ord4749
ord4750
ord7102
ord11625
ord8675
ord4026
ord6767
ord12785
ord3042
ord1058
ord374
ord9008
ord2574
ord9583
ord10680
ord8553
ord10656
ord10652
ord13582
ord9054
ord9526
ord9521
ord9049
ord12040
ord7095
ord8963
ord2571
ord9581
ord10676
ord8551
ord10653
ord11621
ord10648
ord3678
ord12634
ord1105
ord11182
ord10757
ord10759
ord9793
ord474
ord6727
ord11608
ord8767
ord6492
ord9584
ord11273
ord8456
ord8466
ord10044
ord9067
ord9527
ord9522
ord9055
ord9065
ord9050
ord10812
ord10809
ord7849
ord4274
ord5960
ord3893
ord1114
ord488
ord5877
ord1628
ord8050
ord7902
ord12073
ord4828
ord2761
ord11492
ord14119
ord8269
ord261
ord3088
ord1157
ord542
ord14098
ord11921
ord14045
ord11864
ord6371
ord2286
ord2282
ord2182
ord472
ord4635
ord5447
ord1343
ord9066
ord12398
ord835
ord5620
ord9786
ord6126
ord1658
ord2517
ord2263
ord13579
ord7388
ord13854
ord13860
ord1662
ord8005
ord13859
ord12275
ord1661
ord7085
ord11692
ord1082
ord10008
ord445
ord3016
ord6155
ord8360
ord6173
ord11651
ord5871
ord13218
ord2643
ord8751
ord10922
ord3252
ord5513
ord13949
ord13020
ord13685
ord5945
ord3541
ord3639
ord13894
ord8023
ord936
ord1322
ord804
ord8674
ord7627
ord4025
ord7622
ord7467
ord5476
ord3744
ord13130
ord3253

msvcr110

_initterm_e
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
?terminate@@YAXXZ
_onexit
__C_specific_handler
__dllonexit
_calloc_crt
_unlock
_lock
_purecall
memmove
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCapturePreviousContext
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
sin
cos
ldiv
sqrt
_wtof
_waccess
wcspbrk
memcpy_s
_CxxThrowException
memset
memcpy
__CxxFrameHandler3
free
swscanf
__clean_type_info_names_internal

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer
DeleteFileW
lstrcpynW
FindNextFileW
FindFirstFileW
FindClose
CreateDirectoryW
GetCurrentThreadId
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
CloseHandle
WriteFile
CreateFileW
WideCharToMultiByte

user32

LockWindowUpdate
MessageBoxW
GetCursorPos
ClientToScreen
ScreenToClient
UnionRect
GetWindowLongW
GetParent
LoadBitmapW
LoadImageW
GetClientRect
IsWindowVisible
GetWindowRect
CopyRect
ReleaseDC
LoadCursorW
SetActiveWindow
SetRect
IsIconic
IsZoomed
GetSystemMetrics
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
SystemParametersInfoW
KillTimer
GetDC
DeleteMenu
GetSubMenu
CheckMenuItem
LoadMenuW
PostMessageW
EnableWindow
GetFocus
SendMessageW
PtInRect
RedrawWindow
GetDlgCtrlID
SetWindowPos
LoadStringW

gdi32

CreatePen
GetObjectW
SelectPalette
RealizePalette
GetStockObject
GetDIBits
GetDeviceCaps
DeleteObject
DeleteDC
CreateDIBitmap
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap

shell32

DragAcceptFiles
DragFinish
DragQueryPoint
DragQueryFileW

comctl32

ImageList_Draw
ImageList_AddMasked

ole32

OleInitialize
OleUninitialize

msvcp110

?_Winerror_map@std@@YAPEBDH@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Orphan_all@_Container_base0@std@@QEAAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ

fastbaseu2015

?EnableOrbit@CGsPreviewCtrl@fast@@QEAAX_N@Z
?OnDropTreeItem@CFTreeCtrlEx@fgbmfc@@UEAAHPEAU_TREEITEM@@0@Z
?OnDropTree@CFTreeCtrlEx@fgbmfc@@UEAAXPEAU_TREEITEM@@0@Z
?CloneDwgToCurDoc@cad@fast@@YAHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@AEAVAcDbObjectId@@@Z
?ActivateAcad@cad@fast@@YAXXZ
?ZoomE@cad@fast@@YAHXZ
?SetDragMode@CEntTransJig@fast@@QEAAXI@Z
?SetDragLine@CEntTransJig@fast@@QEAAXH@Z
?SetBasePoint@CEntTransJig@fast@@QEAAXVAcGePoint3d@@@Z
??0CEntTransJig@fast@@QEAA@PEAVAcDbEntity@@VAcGePoint3d@@HIP6AXPEAVAcEdJig@@@Z_J@Z
?SetSym@dat@fast@@YAHPEB_WPEAXF@Z
?PointsAtN@cal@fast@@YAXVAcDbObjectId@@JAEAV?$AcArray@VAcGePoint3d@@V?$AcArrayMemCopyReallocator@VAcGePoint3d@@@@@@@Z
?GetCurSpace@cad@fast@@YAHPEAVAcDbDatabase@@@Z
?GetUcsAngle@cad@fast@@YANXZ
?GetSsFromLastEnt@cad@fast@@YA_NAEAY01_J@Z
?GetLastEnt@cad@fast@@YA_NAEAY01_J@Z
?ScrlbrtPt@cad@fast@@YAXAEAVAcGePoint3d@@0@Z
?SetSysVar@cad@fast@@YA?AW4ErrorStatus@Acad@@PEB_WN@Z
?GetSysVar@cad@fast@@YA?AW4ErrorStatus@Acad@@PEB_WAEAN@Z
?MakeLine@ent@fast@@YA?AVAcDbObjectId@@VAcGePoint3d@@0H@Z
?FillWithImage@ent@fast@@YA?AVAcDbObjectId@@V3@PEB_W@Z
?GetEntData@ent@fast@@YAHVAcDbObjectId@@FAEAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?InitCtrl@CGsPreviewCtrl@fast@@QEAAHXZ
?MoveBottomOrTop@ent@fast@@YAHVAcDbObjectId@@H@Z
?MoveBelowOrAbove@ent@fast@@YAHVAcDbObjectId@@0H@Z
?SetCurveClose@ent@fast@@YAHVAcDbObjectId@@H@Z
?IsClosed@ent@fast@@YAHVAcDbObjectId@@@Z
?DrawPline@ent@fast@@YAHAEAVAcDbObjectId@@@Z
?SS2ids@ent@fast@@YAHQEA_JAEAV?$AcArray@VAcDbObjectId@@V?$AcArrayMemCopyReallocator@VAcDbObjectId@@@@@@@Z
?AddToDb@ent@fast@@YAHPEAVAcDbEntity@@AEAVAcDbObjectId@@@Z
?AddToGroup@ent@fast@@YAHAEAVAcDbObjectId@@0@Z
?OpenGroup@ent@fast@@YA?AVAcDbObjectId@@PEB_W@Z
?GetCurveParam@ent@fast@@YAHVAcDbObjectId@@PEAV?$AcArray@VAcGePoint3d@@V?$AcArrayMemCopyReallocator@VAcGePoint3d@@@@@@PEAV?$AcArray@NV?$AcArrayMemCopyReallocator@N@@@@@Z
?ChangeColor@ent@fast@@YAHVAcDbObjectId@@G@Z
?GetPtByPt@geo@fast@@YAHAEAVAcGePoint3d@@@Z
?GetPtByLine@geo@fast@@YAHAEAVAcGePoint3d@@@Z
?Wcs2ucs@geo@fast@@YAHVAcGePoint3d@@AEAV3@@Z
?Ucs2wcs@geo@fast@@YAHVAcGePoint3d@@AEAV3@@Z
?Ucs2wcs@geo@fast@@YAHQEANAEAY02N@Z
?SetRect@fast_geo_rect@fast@@QEAAXVAcGePoint3d@@0@Z
??1fast_geo_rect@fast@@UEAA@XZ
??0fast_geo_rect@fast@@QEAA@XZ
?GetSysVar@cad@fast@@YA?AW4ErrorStatus@Acad@@PEB_WAEAH@Z
?CreateHatch@ent@fast@@YAHV?$AcArray@VAcDbObjectId@@V?$AcArrayMemCopyReallocator@VAcDbObjectId@@@@@@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@AEAVAcDbObjectId@@NN@Z
?update@CEntTransJig@fast@@EEAAHXZ
?sampler@CEntTransJig@fast@@EEAA?AW4DragStatus@AcEdJig@@XZ
?entity@CEntTransJig@fast@@EEBAPEAVAcDbEntity@@XZ
?Revert@CEntTransJig@fast@@UEAAXPEAX@Z
?EntTrans@CEntTransJig@fast@@UEAAXXZ
?asArray@CFArxSelSet@fast@@QEAAXAEAV?$AcArray@VAcDbObjectId@@V?$AcArrayMemCopyReallocator@VAcDbObjectId@@@@@@@Z
?userSelect@CFArxSelSet@fast@@QEAA?AW4SelSetStatus@12@PEBUresbuf@@@Z
??1CFArxSelSet@fast@@UEAA@XZ
??0CFArxSelSet@fast@@QEAA@XZ
?GetSelEnt@CFEntsel@fast@@QEAA?AVAcDbObjectId@@XZ
?FEntsel@CFEntsel@fast@@QEAAHXZ
??1CFEntsel@fast@@UEAA@XZ
??0CFEntsel@fast@@QEAA@PEB_W0000@Z
??1CEntTransJig@fast@@UEAA@XZ
?QueryDist@CEntTransJig@fast@@QEAANXZ
?QueryAngle@CEntTransJig@fast@@QEAANXZ
??1CEditDescription@fgbmfc@@UEAA@XZ
?GetSysVar@cad@fast@@YA?AW4ErrorStatus@Acad@@PEB_WAEAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?SetSysVar@cad@fast@@YA?AW4ErrorStatus@Acad@@PEB_WH@Z
?SendCmdToAcad@cad@fast@@YAHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?PrintErrorMsg@fast@@YAXW4ErrorStatus@Acad@@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?SetDwgBlkName@CGsPreviewCtrl@fast@@QEAAHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@0@Z
?SetDwgBlkNameFromCurOpenDwg@CGsPreviewCtrl@fast@@QEAAHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@0@Z
??0CFDocLock@fast@@QEAA@PEAVAcApDocument@@@Z
??1CFDocLock@fast@@QEAA@XZ
??0CFUndoGroup@fast@@QEAA@_N@Z
??1CFUndoGroup@fast@@QEAA@XZ
?IsInit@CGsPreviewCtrl@fast@@QEAAHXZ
??0CGsPreviewCtrl@fast@@QEAA@XZ
??1CGsPreviewCtrl@fast@@UEAA@XZ
?IsHooked@CSubclassWnd@fgbmfc@@QEAAHXZ
?ReSize@CGsPreviewCtrl@fast@@QEAAXXZ
?SetAutoSave@CIniFile@fgbfile@@QEAAX_N@Z
?CreateBlkAll@ent@fast@@YAHV?$AcArray@VAcDbObjectId@@V?$AcArrayMemCopyReallocator@VAcDbObjectId@@@@@@PEB_WVAcGePoint3d@@AEAVAcDbObjectId@@3@Z
?Move@ent@fast@@YAHAEBV?$AcArray@VAcDbObjectId@@V?$AcArrayMemCopyReallocator@VAcDbObjectId@@@@@@VAcGeVector3d@@@Z
??0CSaveSysVar@fast@@QEAA@_N@Z
??1CSaveSysVar@fast@@UEAA@XZ
?FUndoInit@CFUndoGroup@fast@@QEAA_NXZ
?FUndoBegin@CFUndoGroup@fast@@QEAA_NXZ
?FUndoEnd@CFUndoGroup@fast@@QEAA_NXZ
?Erase@ent@fast@@YAHVAcDbObjectId@@@Z
?Erase@ent@fast@@YAHAEAV?$AcArray@VAcDbObjectId@@V?$AcArrayMemCopyReallocator@VAcDbObjectId@@@@@@@Z
?GetArea@ent@fast@@YAHVAcDbObjectId@@AEAN@Z
?QueryPos@CEntTransJig@fast@@QEAA?AVAcGePoint3d@@XZ
?SetControls@CEntTransJig@fast@@QEAAXH@Z
?GetEntRect@ent@fast@@YAHVAcDbObjectId@@AEAVAcGePoint3d@@1@Z
?SetKwordList@CEntTransJig@fast@@QEAAXPEB_W@Z

fgdutilu2015

?IsCtrlPressed@fgdutil@@YAHXZ
?StrArr2Str@fgdutil@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@AEAVCStringArray@@V23@@Z
?StrArrFindStr@fgdutil@@YA_NAEAVCStringArray@@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@AEAH@Z
?ConfirmBackslash@fgdutil@@YAXAEAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?Str2StrArr@fgdutil@@YAHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@AEAVCStringArray@@0@Z
?ExecuteFile@fgdutil@@YA_NPEB_W00@Z

fgbfileu2015

?GetFilePath@fgbfile@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V23@@Z
?GetFileName@fgbfile@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V23@@Z
?GetFnameWithoutExt@fgbfile@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V23@@Z
?FindFile@fgbfile@@YAXAEAVCStringArray@@PEB_W@Z
?FileExist@fgbfile@@YAHPEB_W@Z
?SetValue@CIniFile@fgbfile@@QEAA_NV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@00_N@Z
?GetValue@CIniFile@fgbfile@@QEAA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V34@0@Z
?WriteFile@CIniFile@fgbfile@@QEAAXXZ
?FGetCADCommonFilePath_DAT@fgbfile@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
??0CIniFile@fgbfile@@QEAA@XZ
??1CIniFile@fgbfile@@UEAA@XZ
?GetFileExt@fgbfile@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V23@@Z
?GetAppPath@fgbfile@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PEAUHINSTANCE__@@@Z
?GetUpPath@fgbfile@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V23@@Z
??0CIniFile@fgbfile@@QEAA@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@_N@Z
?SetPath@CIniFile@fgbfile@@QEAAXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?ReadFile@CIniFile@fgbfile@@QEAA_NXZ
??1CFStdioFile@fgbfile@@UEAA@XZ
?GetDwgVersionTag@fgbfile@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V23@@Z
?GetValueF@CIniFile@fgbfile@@QEAANV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@0@Z
?GetValue@CIniFile@fgbfile@@QEAA_NV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@AEAVCStringArray@@1@Z
?GetItemValue@CIniFile@fgbfile@@QEAA_NV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@AEAV34@@Z
?FGetCADCommonFilePath@fgbfile@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?FIsDirectory@fgbfile@@YAHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?GetValueI@CIniFile@fgbfile@@QEAAHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@0@Z
??0CFStdioFile@fgbfile@@QEAA@XZ

fgbmfcu2015

??1CNumEdit@fgbmfc@@UEAA@XZ
??0CListCtrlEx@fgbmfc@@QEAA@XZ
?GetColumnCount@CListCtrlEx@fgbmfc@@QEBAHXZ
?DelAllHeader@CListCtrlEx@fgbmfc@@QEAAXXZ
??1CListCtrlEx@fgbmfc@@UEAA@XZ
?OnMouseMove@CListCtrlEx@fgbmfc@@IEAAXIVCPoint@@@Z
?GetThisMessageMap@CListCtrlEx@fgbmfc@@KAPEBUAFX_MSGMAP@@XZ
?DelTool@CToolTipXye@fgbmfc@@QEAAXPEAVCWnd@@@Z
?RelayEvent@CToolTipXye@fgbmfc@@QEAAXPEAUtagMSG@@@Z
?AddTool@CToolTipXye@fgbmfc@@QEAAHPEAVCWnd@@PEB_W@Z
??0CSortColumn@fgbmfc@@QEAA@PEAVCListCtrl@@AEBHAEB_NAEAH@Z
??1CSortColumn@fgbmfc@@UEAA@XZ
?Sort@CSortColumn@fgbmfc@@QEAAHAEB_N@Z
?SetWindowTitle@CEditDescription@fgbmfc@@QEAAXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?SetEditDes@CEditDescription@fgbmfc@@QEAAXAEAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?GetEditDes@CEditDescription@fgbmfc@@QEAA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
??0CEditDescription@fgbmfc@@QEAA@PEAVCWnd@@@Z
?SetCurSel@fgbmfc@@YAHAEAVCListCtrl@@H@Z
?ListCtrlSelAll@fgbmfc@@YAXPEAVCListCtrl@@@Z
?ListCtrlDelItem@fgbmfc@@YAXPEAVCListCtrl@@@Z
?ListCtrlSetArrow@fgbmfc@@YAXPEAVCListCtrl@@HH@Z
?GetRuntimeClass@CListCtrlEx@fgbmfc@@UEBAPEAUCRuntimeClass@@XZ
?IsCanDropDest@CListCtrlEx@fgbmfc@@UEAAHH@Z
??0CNumEdit@fgbmfc@@QEAA@XZ
?ExpandBranch@CFTreeCtrlEx@fgbmfc@@QEAAXPEAU_TREEITEM@@@Z
?GetThisClass@CSubclassWnd@fgbmfc@@SAPEAUCRuntimeClass@@XZ
??0CSubclassWnd@fgbmfc@@QEAA@XZ
??1CSubclassWnd@fgbmfc@@UEAA@XZ
?HookWindow@CSubclassWnd@fgbmfc@@QEAAHPEAVCWnd@@@Z
?WindowProc@CSubclassWnd@fgbmfc@@MEAA_JI_K_J@Z
?GetFolder@fgbmfc@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?GetMFname@fgbmfc@@YAHPEB_W000AEAVCStringArray@@0@Z
??0CFTreeCtrlEx@fgbmfc@@QEAA@XZ
?GetThisClass@CFTreeCtrlEx@fgbmfc@@SAPEAUCRuntimeClass@@XZ
?PreTranslateMessage@CFTreeCtrlEx@fgbmfc@@UEAAHPEAUtagMSG@@@Z
?GetNextItem@CFTreeCtrlEx@fgbmfc@@QEAAPEAU_TREEITEM@@PEAU3@@Z
??1CFTreeCtrlEx@fgbmfc@@UEAA@XZ
?HasSameNameOnSameParentNode@CFTreeCtrlEx@fgbmfc@@QEAAHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PEAU_TREEITEM@@@Z
?OnCreate@CFTreeCtrlEx@fgbmfc@@IEAAHPEAUtagCREATESTRUCTW@@@Z
?GetThisMessageMap@CFTreeCtrlEx@fgbmfc@@KAPEBUAFX_MSGMAP@@XZ
?MsgBox@fgbmfc@@YAHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@0H@Z
?GetFolder@fgbmfc@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@V23@@Z
?FindItem@CFTreeCtrlEx@fgbmfc@@UEAAPEAU_TREEITEM@@AEAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@HHHPEAU3@@Z
?OnItemCopied@CFTreeCtrlEx@fgbmfc@@UEAAXPEAU_TREEITEM@@0@Z
?OnItemDel@CFTreeCtrlEx@fgbmfc@@UEAAHXZ
?OnDropedTreeItem@CFTreeCtrlEx@fgbmfc@@UEAAHPEAU_TREEITEM@@@Z
?IsFindValid@CFTreeCtrlEx@fgbmfc@@UEAAHPEAU_TREEITEM@@@Z

fxdatadealu2015

?SetTo@CFSimpleXData@ARX_DATA@@SAHVAcDbObjectId@@V?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@1@Z

Exports

Exports

?FClearInsertedBlkIds@dwglibapi@@YAHXZ
?FDwgLibAddBlk@dwglibapi@@YAHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@0AEAV?$AcArray@VAcDbObjectId@@V?$AcArrayMemCopyReallocator@VAcDbObjectId@@@@@@VAcGePoint3d@@@Z
?FDwglib@@YAHPEB_W0@Z
?FDwglibNew@dwglibapi@@YAHPEB_W00@Z
?FDwglibNewFastDwgPath@dwglibapi@@YAHPEB_W00@Z
?FDwglibNewOnePath@dwglibapi@@YAHPEB_W00@Z
?FGetInsertedBlkIds@dwglibapi@@YAHAEAV?$AcArray@VAcDbObjectId@@V?$AcArrayMemCopyReallocator@VAcDbObjectId@@@@@@@Z
?FInsDwgBlkNameFromOneLib@@YAXPEB_WAEAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@0HHH@Z
?FInsertBlkInFile@dwglibapi@@YAHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@0H@Z
?FInsertBlockAlongCurveInFile@dwglibapi@@YAHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@0VAcDbObjectId@@1NNNNPEB_WPEAV?$AcArray@VAcDbObjectId@@V?$AcArrayMemCopyReallocator@VAcDbObjectId@@@@@@@Z
?FInsertBlockAlongCurveInFile@dwglibapi@@YAHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@0VAcDbObjectId@@PEAV?$AcArray@VAcGePoint3d@@V?$AcArrayMemCopyReallocator@VAcGePoint3d@@@@@@PEAV?$AcArray@NV?$AcArrayMemCopyReallocator@N@@@@NNNNPEB_WPEAV?$AcArray@VAcDbObjectId@@V?$AcArrayMemCopyReallocator@VAcDbObjectId@@@@@@@Z
?FSelDwgBlkName@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PEB_W0HH@Z
?FSelDwgBlkNameFromOneLib@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PEB_WAEAV12@0HHH@Z
?FSelDwgBlkNameFromOneLibNotCloseDialog@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PEB_WAEAV12@0V12@HHHPEAVCWnd@@@Z
?GetCurDwgName@dwglibapi@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?IsBusy@dwglibapi@@YAHXZ
?RefreshDwgLib@dwglibapi@@YAXXZ
?SetBusy@dwglibapi@@YAXH@Z
?SetDwgLibPath@dwglibapi@@YAXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?SetDwgLibProc@@YAXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@P6AHAEAV?$AcArray@VAcDbObjectId@@V?$AcArrayMemCopyReallocator@VAcDbObjectId@@@@@@@Z@Z
?SetDwgLibProc@@YAXV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@P6AHVAcDbObjectId@@@Z@Z
acrxEntryPoint
acrxGetApiVersion

Sections

.text
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 276KB - Virtual size: 275KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4b63941c2c6172e12563d28b698e8750

Headers

DLL Characteristics

File Characteristics

Imports

acdb20

acge20

acad.exe

acui20

adui20

accore

ac1st20

mfc110u

msvcr110

kernel32

user32

gdi32

shell32

comctl32

ole32

msvcp110

fastbaseu2015

fgdutilu2015

fgbfileu2015

fgbmfcu2015

fxdatadealu2015

Exports

Exports

Sections

.text Size: 169KB - Virtual size: 168KB

.rdata Size: 138KB - Virtual size: 138KB

.data Size: 4KB - Virtual size: 6KB

.pdata Size: 7KB - Virtual size: 7KB

.rsrc Size: 276KB - Virtual size: 275KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 169KB - Virtual size: 168KB

.rdata
Size: 138KB - Virtual size: 138KB

.data
Size: 4KB - Virtual size: 6KB

.pdata
Size: 7KB - Virtual size: 7KB

.rsrc
Size: 276KB - Virtual size: 275KB

.reloc
Size: 8KB - Virtual size: 7KB