E:\_KingSEMIDevelop\01 KingExGem\IDE_VisualStudio\Eq\2.0.1.11\04产品代码\KingExGemV C++\KingExGem\Release\KingExGem_CPlus_X86.pdb
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1a394f4719d56ed46c7c99d857256978321783ef611dd494ebaf8c65bdc3b4ac.dll
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
1a394f4719d56ed46c7c99d857256978321783ef611dd494ebaf8c65bdc3b4ac.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
1a394f4719d56ed46c7c99d857256978321783ef611dd494ebaf8c65bdc3b4ac
-
Size
9.3MB
-
MD5
f7456f584eabe34e680f5e145e801eef
-
SHA1
41605c5d0ad135539cf6a29cb88a8badc6b42a87
-
SHA256
1a394f4719d56ed46c7c99d857256978321783ef611dd494ebaf8c65bdc3b4ac
-
SHA512
c699fcd0c95dbab9fb52677bc2013ed3dde2594f92d0382a6b00fb21febd374640f5cf3adf752d95b14310187a301d4d3aa7608392ecf5a3fd90434c5632decf
-
SSDEEP
196608:mvzVwuakm1Uxbmp48FAWXb20dNveeqOiPOmelc0FC0by0eS2m3EgceVliuk50H:6zV1DmIip4ybddBATPOVcKCl0eSp0gd1
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a394f4719d56ed46c7c99d857256978321783ef611dd494ebaf8c65bdc3b4ac
Files
-
1a394f4719d56ed46c7c99d857256978321783ef611dd494ebaf8c65bdc3b4ac.dll windows:6 windows x86 arch:x86
842ba9b3aaccfa89b5458f735e08afca
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcp140
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??Bid@locale@std@@QAEIXZ
?always_noconv@codecvt_base@std@@QBE_NXZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Xbad_function_call@std@@YAXXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
mfc140u
ord5110
ord8464
ord1525
ord1523
ord296
ord12559
ord5117
ord2378
ord2385
ord2389
ord6751
ord12348
ord14604
ord12405
ord14657
ord4815
ord4856
ord2383
ord3236
ord500
ord11962
ord5886
ord12351
ord14606
ord2885
ord1142
ord1045
ord290
ord286
ord280
ord14405
ord265
ord266
ord1511
ord2990
ord1513
ord12763
ord12884
ord8360
kernel32
CreateSemaphoreA
SetEvent
CancelIo
InterlockedExchange
TerminateProcess
UnregisterWaitEx
GetExitCodeProcess
DuplicateHandle
SetHandleInformation
PeekNamedPipe
CreateEventA
RegisterWaitForSingleObject
ConnectNamedPipe
WaitNamedPipeW
SwitchToThread
LocalAlloc
UnregisterWait
SetNamedPipeHandleState
WriteConsoleInputW
QueueUserWorkItem
SetLastError
GetLongPathNameW
GetCurrentDirectoryW
ReadDirectoryChangesW
GetQueuedCompletionStatus
CreateIoCompletionPort
SetErrorMode
PostQueuedCompletionStatus
InterlockedDecrement
ReleaseSemaphore
CreateNamedPipeW
InterlockedIncrement
InterlockedCompareExchange
CreateThreadpoolWork
SubmitThreadpoolWork
SetThreadpoolThreadMaximum
SetThreadpoolThreadMinimum
WaitForThreadpoolWorkCallbacks
CreateThreadpool
CloseThreadpool
CloseThreadpoolWork
ReadConsoleA
WriteConsoleW
SetConsoleCursorPosition
FillConsoleOutputAttribute
FlushFileBuffers
InitializeSListHead
DisableThreadLibraryCalls
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
InitializeCriticalSectionAndSpinCount
CheckRemoteDebuggerPresent
FindFirstFileA
SearchPathA
GetSystemDirectoryA
IsBadReadPtr
ProcessIdToSessionId
GetComputerNameA
GetModuleFileNameA
GetModuleHandleA
GetTickCount
QueryPerformanceFrequency
GetNumberOfConsoleInputEvents
ReadConsoleInputW
HeapFree
InitializeCriticalSectionEx
HeapSize
GetLastError
HeapReAlloc
HeapAlloc
HeapDestroy
DeleteCriticalSection
GetProcessHeap
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
Sleep
CreateFileW
UnmapViewOfFile
CloseHandle
GetSystemInfo
GetFileSize
CreateFileMappingW
MapViewOfFile
CreateDirectoryW
GetFileAttributesA
GetLocalTime
SystemTimeToFileTime
WaitForSingleObject
CreateThread
SystemTimeToTzSpecificLocalTime
GetSystemTime
DeleteFileW
GetModuleHandleW
CopyFileW
SetConsoleCtrlHandler
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
GetCurrentProcess
FindClose
LoadLibraryW
GetProcAddress
GetCurrentProcessId
FreeLibrary
AreFileApisANSI
ReadFile
TryEnterCriticalSection
HeapCreate
GetFullPathNameW
WriteFile
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
SetFilePointer
GetFullPathNameA
SetEndOfFile
UnlockFileEx
GetTempPathW
CreateMutexW
GetFileAttributesW
GetCurrentThreadId
HeapValidate
GetTempPathA
FormatMessageW
GetDiskFreeSpaceA
GetFileAttributesExW
OutputDebugStringW
FlushViewOfFile
CreateFileA
LoadLibraryA
WaitForSingleObjectEx
DeleteFileA
HeapCompact
UnlockFile
LocalFree
LockFileEx
GetSystemTimeAsFileTime
FormatMessageA
QueryPerformanceCounter
FillConsoleOutputCharacterW
advapi32
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
shlwapi
PathRemoveFileSpecA
oleaut32
SystemTimeToVariantTime
VarUdateFromDate
VariantTimeToSystemTime
ws2_32
WSARecvFrom
WSASetLastError
WSADuplicateSocketW
WSASend
WSAGetLastError
ioctlsocket
htons
getsockopt
recv
connect
socket
send
inet_addr
WSAStartup
listen
select
closesocket
bind
accept
WSACleanup
FreeAddrInfoW
WSASocketW
WSAIoctl
setsockopt
shutdown
WSARecv
kingexlog_cplus_x86
?SetLogPath@KingExLog@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?MakeLogEx@KingExLog@@QAEJPAEKEV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV23@PAUcSecson@@K@Z
?MakeLog@KingExLog@@QAEJPAEKEV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAUcSecson@@K@Z
?LogClose@KingExLog@@QAEJXZ
?LogStop@KingExLog@@QAEJXZ
?LogStart@KingExLog@@QAEJXZ
?LogInitialize@KingExLog@@QAEJAAULogParameter@@@Z
??1KingExLog@@QAE@XZ
??0KingExLog@@QAE@XZ
iphlpapi
GetAdaptersInfo
rpcrt4
UuidFromStringA
vcruntime140
strrchr
memset
memcpy
strchr
__current_exception_context
_except_handler4_common
__std_type_info_destroy_list
memcmp
_CxxThrowException
__std_terminate
__CxxFrameHandler3
__std_exception_copy
memchr
memmove
__current_exception
__std_exception_destroy
api-ms-win-crt-heap-l1-1-0
free
realloc
calloc
malloc
_msize
_recalloc
api-ms-win-crt-string-l1-1-0
toupper
strcspn
strncmp
strlen
strncpy
strcpy
strcmp
tolower
wcsncpy
_wcsdup
wcslen
_wcsnicmp
isspace
_strlwr
strcat
_stricmp
api-ms-win-crt-runtime-l1-1-0
_execute_onexit_table
_crt_atexit
_initialize_onexit_table
_initialize_narrow_environment
_invalid_parameter_noinfo_noreturn
_cexit
_configure_narrow_argv
_initterm
_seh_filter_dll
_initterm_e
_endthreadex
_beginthreadex
terminate
abort
_errno
_invalid_parameter_noinfo
_register_onexit_function
api-ms-win-crt-convert-l1-1-0
_wtoi
strtoul
_atoi64
_strtoui64
atol
atof
atoi
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vfprintf
fwrite
fopen_s
fgetpos
setvbuf
ungetc
fsetpos
fread
_fseeki64
_get_stream_buffer_pointers
fflush
fputc
__stdio_common_vswprintf
ftell
fseek
fgetc
__acrt_iob_func
fgets
feof
__stdio_common_vsprintf
__stdio_common_vsprintf_s
fopen
fclose
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_lock_file
api-ms-win-crt-time-l1-1-0
_mktime64
_time64
_gmtime64_s
wcsftime
_localtime64_s
api-ms-win-crt-math-l1-1-0
floor
pow
_libm_sse2_pow_precise
fabs
api-ms-win-crt-utility-l1-1-0
qsort
Exports
Exports
??0KingExGem@@QAE@XZ
??1KingExGem@@QAE@XZ
??4KingExGem@@QAEAAV0@ABV0@@Z
?GEMClose@KingExGem@@QAEJXZ
?GEMCloseObject@KingExGem@@SAXPAUcSemion@@@Z
?GEMGetAlarmEnableState@KingExGem@@QAEJKPAJPAH@Z
?GEMGetAlarmInfo@KingExGem@@QAEJKPAJ0PAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAH@Z
?GEMGetAllAlarmInfo@KingExGem@@QAEJXZ
?GEMGetAllDVInfo@KingExGem@@QAEJXZ
?GEMGetAllEcvInfo@KingExGem@@QAEJXZ
?GEMGetAllEnabledAlarm@KingExGem@@QAEJXZ
?GEMGetAllEnabledEvent@KingExGem@@QAEJXZ
?GEMGetAllEventInfo@KingExGem@@QAEJXZ
?GEMGetAllReportInfo@KingExGem@@QAEJXZ
?GEMGetAllSVInfo@KingExGem@@QAEJXZ
?GEMGetAsciiItem@KingExGem@@SAJPAUcSemion@@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GEMGetAsciiItem@KingExGem@@SAJPAUcSemion@@PACKAAK@Z
?GEMGetBinaryItem@KingExGem@@SAJPAUcSemion@@PAEKAAK@Z
?GEMGetBoolItem@KingExGem@@SAJPAUcSemion@@PAEKAAK@Z
?GEMGetDVInfo@KingExGem@@QAEJKPAJPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@1PAK111@Z
?GEMGetEcvInfo@KingExGem@@QAEJKPAJPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@1PAK1111@Z
?GEMGetEventEnableState@KingExGem@@QAEJKPAJPAH@Z
?GEMGetEventInfo@KingExGem@@QAEJKPAJPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAH1PAK0@Z
?GEMGetFloat4Item@KingExGem@@SAJPAUcSemion@@PAMKAAK@Z
?GEMGetFloat8Item@KingExGem@@SAJPAUcSemion@@PANKAAK@Z
?GEMGetFmtVariable@KingExGem@@QAEJJPAUcSemion@@AAE@Z
?GEMGetInt1Item@KingExGem@@SAJPAUcSemion@@PACKAAK@Z
?GEMGetInt2Item@KingExGem@@SAJPAUcSemion@@PAFKAAK@Z
?GEMGetInt4Item@KingExGem@@SAJPAUcSemion@@PAJKAAK@Z
?GEMGetInt8Item@KingExGem@@SAJPAUcSemion@@PA_JKAAK@Z
?GEMGetItemToString@KingExGem@@SAJPAUcSemion@@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GEMGetListItem@KingExGem@@SAJPAUcSemion@@AAK@Z
?GEMGetParam@KingExGem@@QAEJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV23@@Z
?GEMGetReportInfo@KingExGem@@QAEJKPAJPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAK0@Z
?GEMGetSVInfo@KingExGem@@QAEJKPAJPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@1PAK111@Z
?GEMGetUint1Item@KingExGem@@SAJPAUcSemion@@PAEKAAK@Z
?GEMGetUint2Item@KingExGem@@SAJPAUcSemion@@PAGKAAK@Z
?GEMGetUint4Item@KingExGem@@SAJPAUcSemion@@PAKKAAK@Z
?GEMGetUint8Item@KingExGem@@SAJPAUcSemion@@PA_KKAAK@Z
?GEMGetVariable2@KingExGem@@QAEJKPAJPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAE@Z
?GEMGetVariable@KingExGem@@QAEJKPAJPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GEMInitialize@KingExGem@@QAEJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GEMLoadSecsMsg@KingExGem@@SAJPAUcSemion@@AAFAAE2AAJ2@Z
?GEMMakeObject@KingExGem@@SAPAUcSemion@@_N@Z
?GEMReqDateTime@KingExGem@@QAEJXZ
?GEMReqLoopDiagnostic@KingExGem@@QAEJKPAE@Z
?GEMReqOnlineTest@KingExGem@@QAEJXZ
?GEMReqPP@KingExGem@@QAEJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GEMReqPPFmt@KingExGem@@QAEJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GEMReqPPFmtSend@KingExGem@@QAEJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00KPAV23@PAK1@Z
?GEMReqPPLoadInquire@KingExGem@@QAEJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@K@Z
?GEMReqPPSend@KingExGem@@QAEJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@KPAE@Z
?GEMReqPPSendEx@KingExGem@@QAEJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GEMReqPPVerification@KingExGem@@QAEJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@KPAJPAKPAV23@@Z
?GEMReqPPVerificationInquire@KingExGem@@QAEJK@Z
?GEMReqTerminalMessageSend@KingExGem@@QAEJJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GEMRspDateTime@KingExGem@@QAEJJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GEMRspDateTimeSend@KingExGem@@QAEJJE@Z
?GEMRspEcvChange@KingExGem@@QAEJJE@Z
?GEMRspEcvChangeEx@KingExGem@@QAEJJE@Z
?GEMRspEnhancedRemoteCommand@KingExGem@@QAEJJEKPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAE@Z
?GEMRspMultiTerminalMessageSend@KingExGem@@QAEJJE@Z
?GEMRspOffline@KingExGem@@QAEJJE@Z
?GEMRspOnline@KingExGem@@QAEJJE@Z
?GEMRspPP@KingExGem@@QAEJJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@KPAE@Z
?GEMRspPPDelete@KingExGem@@QAEJJE@Z
?GEMRspPPEx@KingExGem@@QAEJJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GEMRspPPFmt@KingExGem@@QAEJJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00KPAV23@PAK1@Z
?GEMRspPPFmtSend@KingExGem@@QAEJJE@Z
?GEMRspPPList@KingExGem@@QAEJJKPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GEMRspPPLoadInquire@KingExGem@@QAEJJE@Z
?GEMRspPPSend@KingExGem@@QAEJJE@Z
?GEMRspRemoteCommand@KingExGem@@QAEJJEKPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAE@Z
?GEMRspSimpleRemoteCommand@KingExGem@@QAEJJE@Z
?GEMRspTerminalMessageSend@KingExGem@@QAEJJE@Z
?GEMSendSecsMessage@KingExGem@@QAEJPAUcSemion@@EEJ@Z
?GEMSetAlarm@KingExGem@@QAEJJH@Z
?GEMSetAlarmEnableState@KingExGem@@QAEJKPAJH@Z
?GEMSetAlarmEx@KingExGem@@QAEJJH@Z
?GEMSetAlarmReportEnabled@KingExGem@@QAEJH@Z
?GEMSetAsciiItem@KingExGem@@SAJPAUcSemion@@PBDK@Z
?GEMSetAsciiItem@KingExGem@@SAJPAUcSemion@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GEMSetBinaryItem@KingExGem@@SAJPAUcSemion@@PAEK@Z
?GEMSetBoolItem@KingExGem@@SAJPAUcSemion@@PAEK@Z
?GEMSetCallBackHandle@KingExGem@@QAEJPAX@Z
?GEMSetConnectionEnable@KingExGem@@QAEJH@Z
?GEMSetControlState@KingExGem@@QAEJJ@Z
?GEMSetEcvValue@KingExGem@@QAEJKPAJPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GEMSetEvent@KingExGem@@QAEJJ@Z
?GEMSetEventEnableState@KingExGem@@QAEJKPAJH@Z
?GEMSetFloat4Item@KingExGem@@SAJPAUcSemion@@PAMK@Z
?GEMSetFloat8Item@KingExGem@@SAJPAUcSemion@@PANK@Z
?GEMSetFmtVariable@KingExGem@@QAEJJPAUcSemion@@@Z
?GEMSetInt1Item@KingExGem@@SAJPAUcSemion@@PBDK@Z
?GEMSetInt2Item@KingExGem@@SAJPAUcSemion@@PAFK@Z
?GEMSetInt4Item@KingExGem@@SAJPAUcSemion@@PAJK@Z
?GEMSetInt8Item@KingExGem@@SAJPAUcSemion@@PA_JK@Z
?GEMSetListItem@KingExGem@@SAJPAUcSemion@@K@Z
?GEMSetLogEnable@KingExGem@@QAEJ_N@Z
?GEMSetPPChanged@KingExGem@@QAEJJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GEMSetPPSelected@KingExGem@@QAEJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GEMSetParam@KingExGem@@QAEJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?GEMSetProcessingCommand@KingExGem@@QAEJJ@Z
?GEMSetUint1Item@KingExGem@@SAJPAUcSemion@@PAEK@Z
?GEMSetUint2Item@KingExGem@@SAJPAUcSemion@@PAGK@Z
?GEMSetUint4Item@KingExGem@@SAJPAUcSemion@@PAKK@Z
?GEMSetUint8Item@KingExGem@@SAJPAUcSemion@@PA_KK@Z
?GEMSetVariable2@KingExGem@@QAEJKPAJPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAK@Z
?GEMSetVariable@KingExGem@@QAEJKPAJPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GEMStart@KingExGem@@QAEJXZ
?GEMStop@KingExGem@@QAEJXZ
?GEMUsingStringSetItem@KingExGem@@SAJPAUcSemion@@EV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?RegistOnGEMAlarmEnableStateChanged@KingExGem@@QAEJP6AXPAXEKPAJ@Z@Z
?RegistOnGEMCommStateChanged@KingExGem@@QAEJP6AXPAXJJ@Z@Z
?RegistOnGEMControlStateChanged@KingExGem@@QAEJP6AXPAXJJ@Z@Z
?RegistOnGEMECVChanged@KingExGem@@QAEJP6AXPAXKPAJPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@Z
?RegistOnGEMErrorEvent@KingExGem@@QAEJP6AXPAXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@1@Z@Z
?RegistOnGEMErrorMessage@KingExGem@@QAEJP6AXPAXJEPAE@Z@Z
?RegistOnGEMEvent@KingExGem@@QAEJP6AXPAXFJ@Z@Z
?RegistOnGEMEventEnableStateChanged@KingExGem@@QAEJP6AXPAXEKPAJ@Z@Z
?RegistOnGEMEventSend@KingExGem@@QAEJP6AXPAXJJ@Z@Z
?RegistOnGEMLogMessage@KingExGem@@QAEJP6AXPAXPBD@Z@Z
?RegistOnGEMMessage@KingExGem@@QAEJP6AXPAXPAUcSemion@@@Z@Z
?RegistOnGEMProcessingStateChanged@KingExGem@@QAEJP6AXPAXJJ@Z@Z
?RegistOnGEMRemoteEvent@KingExGem@@QAEJP6AXPAXGFJ@Z@Z
?RegistOnGEMReqChangeECV@KingExGem@@QAEJP6AXPAXJKPAJPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@Z
?RegistOnGEMReqDateTime@KingExGem@@QAEJP6AXPAXJ@Z@Z
?RegistOnGEMReqDateTimeSend@KingExGem@@QAEJP6AXPAXJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@Z
?RegistOnGEMReqEnhancedRemoteCommand@KingExGem@@QAEJP6AXPAXJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@1KPAV23@2@Z@Z
?RegistOnGEMReqOffline@KingExGem@@QAEJP6AXPAXJJJ@Z@Z
?RegistOnGEMReqOnline@KingExGem@@QAEJP6AXPAXJJJ@Z@Z
?RegistOnGEMReqPP@KingExGem@@QAEJP6AXPAXJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@Z
?RegistOnGEMReqPPDelete@KingExGem@@QAEJP6AXPAXJKPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@Z
?RegistOnGEMReqPPEx@KingExGem@@QAEJP6AXPAXJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@1@Z@Z
?RegistOnGEMReqPPFmt@KingExGem@@QAEJP6AXPAXJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@Z
?RegistOnGEMReqPPFmtSend@KingExGem@@QAEJP6AXPAXJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@11KPAV23@PAK2@Z@Z
?RegistOnGEMReqPPList@KingExGem@@QAEJP6AXPAXJ@Z@Z
?RegistOnGEMReqPPLoadInquire@KingExGem@@QAEJP6AXPAXJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@K@Z@Z
?RegistOnGEMReqPPSend@KingExGem@@QAEJP6AXPAXJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@KPAE@Z@Z
?RegistOnGEMReqPPSendEx@KingExGem@@QAEJP6AXPAXJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@1@Z@Z
?RegistOnGEMReqRemoteCommand@KingExGem@@QAEJP6AXPAXJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@KPAV23@2@Z@Z
?RegistOnGEMReqSimpleRemoteCommand@KingExGem@@QAEJP6AXPAXJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@Z
?RegistOnGEMRspAllAlarmInfo@KingExGem@@QAEJP6AXPAXKPAJ1PAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAH@Z@Z
?RegistOnGEMRspAllDvInfo@KingExGem@@QAEJP6AXPAXKPAJPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2PAK222@Z@Z
?RegistOnGEMRspAllEcvInfo@KingExGem@@QAEJP6AXPAXKPAJPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2PAK2222@Z@Z
?RegistOnGEMRspAllEnabledAlarm@KingExGem@@QAEJP6AXPAXKPAJ@Z@Z
?RegistOnGEMRspAllEnabledEvent@KingExGem@@QAEJP6AXPAXKPAJ@Z@Z
?RegistOnGEMRspAllEventInfo@KingExGem@@QAEJP6AXPAXKPAJPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAH2PAK1@Z@Z
?RegistOnGEMRspAllReportInfo@KingExGem@@QAEJP6AXPAXKPAJPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAK1@Z@Z
?RegistOnGEMRspAllSvInfo@KingExGem@@QAEJP6AXPAXKPAJPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2PAK222@Z@Z
?RegistOnGEMRspDateTime@KingExGem@@QAEJP6AXPAXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@Z
?RegistOnGEMRspLoopback@KingExGem@@QAEJP6AXPAXKPAE@Z@Z
?RegistOnGEMRspPP@KingExGem@@QAEJP6AXPAXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@KPAE@Z@Z
?RegistOnGEMRspPPEx@KingExGem@@QAEJP6AXPAXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@1@Z@Z
?RegistOnGEMRspPPFmt@KingExGem@@QAEJP6AXPAXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@11KPAV23@PAK2@Z@Z
?RegistOnGEMRspPPFmtSend@KingExGem@@QAEJP6AXPAXJ@Z@Z
?RegistOnGEMRspPPLoadInquire@KingExGem@@QAEJP6AXPAXJ@Z@Z
?RegistOnGEMRspPPSend@KingExGem@@QAEJP6AXPAXJ@Z@Z
?RegistOnGEMRspPPSendEx@KingExGem@@QAEJP6AXPAXJ@Z@Z
?RegistOnGEMRspPPVerification@KingExGem@@QAEJP6AXPAX@Z@Z
?RegistOnGEMRspPPVerificationInquire@KingExGem@@QAEJP6AXPAXJ@Z@Z
?RegistOnGEMSecondaryMsgReceived@KingExGem@@QAEJP6AXPAXJJJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@11@Z@Z
?RegistOnGEMStateEvent@KingExGem@@QAEJP6AXPAXJ@Z@Z
?RegistOnGEMTerminalMessage@KingExGem@@QAEJP6AXPAXJJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@Z
?RegistOnGEMTerminalMultiMessage@KingExGem@@QAEJP6AXPAXJJKPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@Z
Sections
.text Size: 8.5MB - Virtual size: 8.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 484KB - Virtual size: 484KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mark Size: 512B - Virtual size: 448B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.encode Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 221KB - Virtual size: 221KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ