E:\_KingSEMIDevelop\01 KingExGem\IDE_VisualStudio\Eq\2.0.1.11\04产品代码\KingExGemV C++\KingExGem\Release\KingExGem_CPlus_X86.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4ac8033b1d1b8bb7ede677ac6cd1cd058c6039cc3d5574671b4876b7e66ca4c7.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4ac8033b1d1b8bb7ede677ac6cd1cd058c6039cc3d5574671b4876b7e66ca4c7.dll
Resource
win10v2004-20240802-en
General
-
Target
4ac8033b1d1b8bb7ede677ac6cd1cd058c6039cc3d5574671b4876b7e66ca4c7
-
Size
9.2MB
-
MD5
44ee6d246d09d6a363b78febfda6dd22
-
SHA1
141b6b06d2276cd8bbdac3a6fbc04c67c7261926
-
SHA256
4ac8033b1d1b8bb7ede677ac6cd1cd058c6039cc3d5574671b4876b7e66ca4c7
-
SHA512
24d68d419665603d18804da76be8d66cfc9f35bb5751f362e35960e674f0bf330faf498c79d3cf78d4d61a0dc1ed311d6a909a63912886f0345c83b484b930f2
-
SSDEEP
196608:rouCHWbPPgyZKH2auR3sSxGhR6pCllRWLyegq9rQeWfDH7weWVp8WK5/QRrH5HV:0uC2TPJI2aoxYReeILyk98eiH7wpv8vw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ac8033b1d1b8bb7ede677ac6cd1cd058c6039cc3d5574671b4876b7e66ca4c7
Files
-
4ac8033b1d1b8bb7ede677ac6cd1cd058c6039cc3d5574671b4876b7e66ca4c7.dll windows:6 windows x86 arch:x86
cf348de4d727a3e4ae5f653b24fad222
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcp140
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??Bid@locale@std@@QAEIXZ
?always_noconv@codecvt_base@std@@QBE_NXZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Xbad_function_call@std@@YAXXZ
?_BADOFF@std@@3_JB
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
mfc140u
ord2389
ord2385
ord6751
ord500
ord3236
ord11962
ord2383
ord5886
ord12351
ord2378
ord2990
ord5117
ord4856
ord296
ord1523
ord1525
ord8464
ord14606
ord2885
ord1142
ord1045
ord290
ord286
ord280
ord265
ord266
ord12348
ord4815
ord1511
ord14657
ord5110
ord14405
ord12405
ord1513
ord12559
ord12763
ord14604
ord12884
ord8360
kernel32
ReleaseSemaphore
CreateSemaphoreA
SetEvent
CancelIo
InterlockedExchange
TerminateProcess
UnregisterWaitEx
GetExitCodeProcess
DuplicateHandle
SetHandleInformation
PeekNamedPipe
CreateEventA
RegisterWaitForSingleObject
ConnectNamedPipe
WaitNamedPipeW
SwitchToThread
CreateNamedPipeW
UnregisterWait
SetNamedPipeHandleState
WriteConsoleInputW
QueueUserWorkItem
SetLastError
GetLongPathNameW
GetCurrentDirectoryW
ReadDirectoryChangesW
GetQueuedCompletionStatus
CreateIoCompletionPort
SetErrorMode
PostQueuedCompletionStatus
InterlockedDecrement
LocalAlloc
ReadConsoleA
InterlockedIncrement
InterlockedCompareExchange
CreateThreadpoolWork
SubmitThreadpoolWork
SetThreadpoolThreadMaximum
SetThreadpoolThreadMinimum
WaitForThreadpoolWorkCallbacks
CreateThreadpool
CloseThreadpool
CloseThreadpoolWork
WriteConsoleW
SetConsoleCursorPosition
FillConsoleOutputAttribute
FillConsoleOutputCharacterW
InitializeSListHead
DisableThreadLibraryCalls
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
CheckRemoteDebuggerPresent
FindFirstFileA
SearchPathA
GetSystemDirectoryA
IsBadReadPtr
ProcessIdToSessionId
GetComputerNameA
GetModuleFileNameA
GetModuleHandleA
FlushFileBuffers
QueryPerformanceFrequency
GetNumberOfConsoleInputEvents
ReadConsoleInputW
HeapFree
InitializeCriticalSectionEx
HeapSize
GetLastError
HeapReAlloc
HeapAlloc
HeapDestroy
DeleteCriticalSection
GetProcessHeap
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
Sleep
CreateFileW
UnmapViewOfFile
CloseHandle
GetSystemInfo
GetFileSize
CreateFileMappingW
MapViewOfFile
CreateDirectoryW
GetFileAttributesA
GetLocalTime
SystemTimeToFileTime
WaitForSingleObject
CreateThread
SystemTimeToTzSpecificLocalTime
GetSystemTime
DeleteFileW
GetModuleHandleW
CopyFileW
SetConsoleCtrlHandler
FindFirstFileW
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
GetCurrentProcess
GetEnvironmentVariableA
FindClose
LoadLibraryW
GetProcAddress
GetCurrentProcessId
FreeLibrary
AreFileApisANSI
ReadFile
TryEnterCriticalSection
HeapCreate
GetFullPathNameW
WriteFile
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
SetFilePointer
GetFullPathNameA
SetEndOfFile
UnlockFileEx
GetTempPathW
CreateMutexW
GetFileAttributesW
GetCurrentThreadId
HeapValidate
GetTempPathA
FormatMessageW
GetDiskFreeSpaceA
GetFileAttributesExW
OutputDebugStringW
FlushViewOfFile
CreateFileA
LoadLibraryA
WaitForSingleObjectEx
DeleteFileA
HeapCompact
UnlockFile
LocalFree
LockFileEx
GetSystemTimeAsFileTime
FormatMessageA
QueryPerformanceCounter
GetTickCount
advapi32
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
shlwapi
PathRemoveFileSpecA
oleaut32
SystemTimeToVariantTime
VarUdateFromDate
VariantTimeToSystemTime
ws2_32
WSARecvFrom
WSASetLastError
WSADuplicateSocketW
WSASend
WSAGetLastError
ioctlsocket
htons
getsockopt
recv
connect
socket
send
inet_addr
WSAStartup
listen
select
closesocket
bind
accept
WSACleanup
FreeAddrInfoW
WSASocketW
WSAIoctl
setsockopt
WSARecv
shutdown
kingexlog_cplus_x86
?SetLogPath@KingExLog@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?MakeLogEx@KingExLog@@QAEJPAEKEV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV23@PAUcSecson@@K@Z
?MakeLog@KingExLog@@QAEJPAEKEV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAUcSecson@@K@Z
?LogClose@KingExLog@@QAEJXZ
?LogStop@KingExLog@@QAEJXZ
?LogStart@KingExLog@@QAEJXZ
?LogInitialize@KingExLog@@QAEJAAULogParameter@@@Z
??1KingExLog@@QAE@XZ
??0KingExLog@@QAE@XZ
iphlpapi
GetAdaptersInfo
rpcrt4
UuidFromStringA
vcruntime140
memcmp
memcpy
memset
_CxxThrowException
memmove
__CxxFrameHandler3
__std_terminate
__vcrt_InitializeCriticalSectionEx
_except_handler4_common
__std_type_info_destroy_list
strchr
_purecall
__std_exception_copy
__std_exception_destroy
memchr
strrchr
api-ms-win-crt-runtime-l1-1-0
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_configure_narrow_argv
terminate
_seh_filter_dll
_invalid_parameter_noinfo_noreturn
abort
_cexit
_errno
_initterm
_initterm_e
_beginthreadex
_endthreadex
_crt_atexit
_invalid_parameter_noinfo
api-ms-win-crt-heap-l1-1-0
_recalloc
malloc
calloc
realloc
_msize
free
api-ms-win-crt-string-l1-1-0
strncpy
_strlwr
_stricmp
toupper
strcspn
strlen
strcat
strcpy
strcmp
wcsncpy
_wcsdup
wcslen
_wcsnicmp
isspace
strncmp
tolower
isalnum
api-ms-win-crt-convert-l1-1-0
atof
atoi
_strtoui64
_wtoi
_atoi64
strtoul
atol
api-ms-win-crt-stdio-l1-1-0
fclose
fgetc
fflush
__stdio_common_vfprintf
fputc
__stdio_common_vsprintf
fwrite
__stdio_common_vsprintf_s
fopen_s
fgetpos
setvbuf
ungetc
fsetpos
_fseeki64
_get_stream_buffer_pointers
ftell
fseek
fread
__acrt_iob_func
fgets
feof
fopen
__stdio_common_vswprintf
rewind
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_findnext64i32
_findclose
_findfirst64i32
_stat64i32
_unlock_file
api-ms-win-crt-time-l1-1-0
_localtime64_s
wcsftime
_gmtime64_s
_time64
_mktime64
api-ms-win-crt-math-l1-1-0
pow
floor
fabs
_libm_sse2_pow_precise
_except1
api-ms-win-crt-utility-l1-1-0
qsort
Exports
Exports
??0KingExGem@@QAE@XZ
??1KingExGem@@QAE@XZ
??4KingExGem@@QAEAAV0@ABV0@@Z
?GEMClose@KingExGem@@QAEJXZ
?GEMCloseObject@KingExGem@@SAXPAUcSemion@@@Z
?GEMGetAlarmEnableState@KingExGem@@QAEJKPAJPAH@Z
?GEMGetAlarmInfo@KingExGem@@QAEJKPAJ0PAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAH@Z
?GEMGetAllAlarmInfo@KingExGem@@QAEJXZ
?GEMGetAllDVInfo@KingExGem@@QAEJXZ
?GEMGetAllEcvInfo@KingExGem@@QAEJXZ
?GEMGetAllEnabledAlarm@KingExGem@@QAEJXZ
?GEMGetAllEnabledEvent@KingExGem@@QAEJXZ
?GEMGetAllEventInfo@KingExGem@@QAEJXZ
?GEMGetAllReportInfo@KingExGem@@QAEJXZ
?GEMGetAllSVInfo@KingExGem@@QAEJXZ
?GEMGetAsciiItem@KingExGem@@SAJPAUcSemion@@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GEMGetAsciiItem@KingExGem@@SAJPAUcSemion@@PACKAAK@Z
?GEMGetBinaryItem@KingExGem@@SAJPAUcSemion@@PAEKAAK@Z
?GEMGetBoolItem@KingExGem@@SAJPAUcSemion@@PAEKAAK@Z
?GEMGetDVInfo@KingExGem@@QAEJKPAJPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@1PAK111@Z
?GEMGetEcvInfo@KingExGem@@QAEJKPAJPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@1PAK1111@Z
?GEMGetEventEnableState@KingExGem@@QAEJKPAJPAH@Z
?GEMGetEventInfo@KingExGem@@QAEJKPAJPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAH1PAK0@Z
?GEMGetFloat4Item@KingExGem@@SAJPAUcSemion@@PAMKAAK@Z
?GEMGetFloat8Item@KingExGem@@SAJPAUcSemion@@PANKAAK@Z
?GEMGetFmtVariable@KingExGem@@QAEJJPAUcSemion@@AAE@Z
?GEMGetInt1Item@KingExGem@@SAJPAUcSemion@@PACKAAK@Z
?GEMGetInt2Item@KingExGem@@SAJPAUcSemion@@PAFKAAK@Z
?GEMGetInt4Item@KingExGem@@SAJPAUcSemion@@PAJKAAK@Z
?GEMGetInt8Item@KingExGem@@SAJPAUcSemion@@PA_JKAAK@Z
?GEMGetItemToString@KingExGem@@SAJPAUcSemion@@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GEMGetListItem@KingExGem@@SAJPAUcSemion@@AAK@Z
?GEMGetParam@KingExGem@@QAEJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV23@@Z
?GEMGetReportInfo@KingExGem@@QAEJKPAJPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAK0@Z
?GEMGetSVInfo@KingExGem@@QAEJKPAJPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@1PAK111@Z
?GEMGetUint1Item@KingExGem@@SAJPAUcSemion@@PAEKAAK@Z
?GEMGetUint2Item@KingExGem@@SAJPAUcSemion@@PAGKAAK@Z
?GEMGetUint4Item@KingExGem@@SAJPAUcSemion@@PAKKAAK@Z
?GEMGetUint8Item@KingExGem@@SAJPAUcSemion@@PA_KKAAK@Z
?GEMGetVariable2@KingExGem@@QAEJKPAJPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAE@Z
?GEMGetVariable@KingExGem@@QAEJKPAJPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GEMInitialize@KingExGem@@QAEJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GEMLoadSecsMsg@KingExGem@@SAJPAUcSemion@@AAFAAE2AAJ2@Z
?GEMMakeObject@KingExGem@@SAPAUcSemion@@_N@Z
?GEMReqDateTime@KingExGem@@QAEJXZ
?GEMReqLoopDiagnostic@KingExGem@@QAEJKPAE@Z
?GEMReqOnlineTest@KingExGem@@QAEJXZ
?GEMReqPP@KingExGem@@QAEJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GEMReqPPFmt@KingExGem@@QAEJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GEMReqPPFmtSend@KingExGem@@QAEJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00KPAV23@PAK1@Z
?GEMReqPPLoadInquire@KingExGem@@QAEJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@K@Z
?GEMReqPPSend@KingExGem@@QAEJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@KPAE@Z
?GEMReqPPSendEx@KingExGem@@QAEJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GEMReqPPVerification@KingExGem@@QAEJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@KPAJPAKPAV23@@Z
?GEMReqPPVerificationInquire@KingExGem@@QAEJK@Z
?GEMReqTerminalMessageSend@KingExGem@@QAEJJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GEMRspDateTime@KingExGem@@QAEJJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GEMRspDateTimeSend@KingExGem@@QAEJJE@Z
?GEMRspEcvChange@KingExGem@@QAEJJE@Z
?GEMRspEcvChangeEx@KingExGem@@QAEJJE@Z
?GEMRspEnhancedRemoteCommand@KingExGem@@QAEJJEKPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAE@Z
?GEMRspMultiTerminalMessageSend@KingExGem@@QAEJJE@Z
?GEMRspOffline@KingExGem@@QAEJJE@Z
?GEMRspOnline@KingExGem@@QAEJJE@Z
?GEMRspPP@KingExGem@@QAEJJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@KPAE@Z
?GEMRspPPDelete@KingExGem@@QAEJJE@Z
?GEMRspPPEx@KingExGem@@QAEJJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GEMRspPPFmt@KingExGem@@QAEJJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00KPAV23@PAK1@Z
?GEMRspPPFmtSend@KingExGem@@QAEJJE@Z
?GEMRspPPList@KingExGem@@QAEJJKPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GEMRspPPLoadInquire@KingExGem@@QAEJJE@Z
?GEMRspPPSend@KingExGem@@QAEJJE@Z
?GEMRspRemoteCommand@KingExGem@@QAEJJEKPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAE@Z
?GEMRspSimpleRemoteCommand@KingExGem@@QAEJJE@Z
?GEMRspTerminalMessageSend@KingExGem@@QAEJJE@Z
?GEMSendSecsMessage@KingExGem@@QAEJPAUcSemion@@EEJ@Z
?GEMSetAlarm@KingExGem@@QAEJJH@Z
?GEMSetAlarmEnableState@KingExGem@@QAEJKPAJH@Z
?GEMSetAlarmEx@KingExGem@@QAEJJH@Z
?GEMSetAlarmReportEnabled@KingExGem@@QAEJH@Z
?GEMSetAsciiItem@KingExGem@@SAJPAUcSemion@@PBDK@Z
?GEMSetAsciiItem@KingExGem@@SAJPAUcSemion@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GEMSetBinaryItem@KingExGem@@SAJPAUcSemion@@PAEK@Z
?GEMSetBoolItem@KingExGem@@SAJPAUcSemion@@PAEK@Z
?GEMSetCallBackHandle@KingExGem@@QAEJPAX@Z
?GEMSetConnectionEnable@KingExGem@@QAEJH@Z
?GEMSetControlState@KingExGem@@QAEJJ@Z
?GEMSetEcvValue@KingExGem@@QAEJKPAJPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GEMSetEvent@KingExGem@@QAEJJ@Z
?GEMSetEventEnableState@KingExGem@@QAEJKPAJH@Z
?GEMSetFloat4Item@KingExGem@@SAJPAUcSemion@@PAMK@Z
?GEMSetFloat8Item@KingExGem@@SAJPAUcSemion@@PANK@Z
?GEMSetFmtVariable@KingExGem@@QAEJJPAUcSemion@@@Z
?GEMSetInt1Item@KingExGem@@SAJPAUcSemion@@PBDK@Z
?GEMSetInt2Item@KingExGem@@SAJPAUcSemion@@PAFK@Z
?GEMSetInt4Item@KingExGem@@SAJPAUcSemion@@PAJK@Z
?GEMSetInt8Item@KingExGem@@SAJPAUcSemion@@PA_JK@Z
?GEMSetListItem@KingExGem@@SAJPAUcSemion@@K@Z
?GEMSetLogEnable@KingExGem@@QAEJ_N@Z
?GEMSetPPChanged@KingExGem@@QAEJJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GEMSetPPSelected@KingExGem@@QAEJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GEMSetParam@KingExGem@@QAEJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?GEMSetProcessingCommand@KingExGem@@QAEJJ@Z
?GEMSetUint1Item@KingExGem@@SAJPAUcSemion@@PAEK@Z
?GEMSetUint2Item@KingExGem@@SAJPAUcSemion@@PAGK@Z
?GEMSetUint4Item@KingExGem@@SAJPAUcSemion@@PAKK@Z
?GEMSetUint8Item@KingExGem@@SAJPAUcSemion@@PA_KK@Z
?GEMSetVariable2@KingExGem@@QAEJKPAJPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAK@Z
?GEMSetVariable@KingExGem@@QAEJKPAJPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GEMStart@KingExGem@@QAEJXZ
?GEMStop@KingExGem@@QAEJXZ
?GEMUsingStringSetItem@KingExGem@@SAJPAUcSemion@@EV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?RegistOnGEMAlarmEnableStateChanged@KingExGem@@QAEJP6AXPAXEKPAJ@Z@Z
?RegistOnGEMCommStateChanged@KingExGem@@QAEJP6AXPAXJJ@Z@Z
?RegistOnGEMControlStateChanged@KingExGem@@QAEJP6AXPAXJJ@Z@Z
?RegistOnGEMECVChanged@KingExGem@@QAEJP6AXPAXKPAJPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@Z
?RegistOnGEMErrorEvent@KingExGem@@QAEJP6AXPAXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@1@Z@Z
?RegistOnGEMErrorMessage@KingExGem@@QAEJP6AXPAXJEPAE@Z@Z
?RegistOnGEMEvent@KingExGem@@QAEJP6AXPAXFJ@Z@Z
?RegistOnGEMEventEnableStateChanged@KingExGem@@QAEJP6AXPAXEKPAJ@Z@Z
?RegistOnGEMEventSend@KingExGem@@QAEJP6AXPAXJJ@Z@Z
?RegistOnGEMLogMessage@KingExGem@@QAEJP6AXPAXPBD@Z@Z
?RegistOnGEMMessage@KingExGem@@QAEJP6AXPAXPAUcSemion@@@Z@Z
?RegistOnGEMProcessingStateChanged@KingExGem@@QAEJP6AXPAXJJ@Z@Z
?RegistOnGEMRemoteEvent@KingExGem@@QAEJP6AXPAXGFJ@Z@Z
?RegistOnGEMReqChangeECV@KingExGem@@QAEJP6AXPAXJKPAJPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@Z
?RegistOnGEMReqDateTime@KingExGem@@QAEJP6AXPAXJ@Z@Z
?RegistOnGEMReqDateTimeSend@KingExGem@@QAEJP6AXPAXJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@Z
?RegistOnGEMReqEnhancedRemoteCommand@KingExGem@@QAEJP6AXPAXJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@1KPAV23@2@Z@Z
?RegistOnGEMReqOffline@KingExGem@@QAEJP6AXPAXJJJ@Z@Z
?RegistOnGEMReqOnline@KingExGem@@QAEJP6AXPAXJJJ@Z@Z
?RegistOnGEMReqPP@KingExGem@@QAEJP6AXPAXJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@Z
?RegistOnGEMReqPPDelete@KingExGem@@QAEJP6AXPAXJKPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@Z
?RegistOnGEMReqPPEx@KingExGem@@QAEJP6AXPAXJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@1@Z@Z
?RegistOnGEMReqPPFmt@KingExGem@@QAEJP6AXPAXJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@Z
?RegistOnGEMReqPPFmtSend@KingExGem@@QAEJP6AXPAXJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@11KPAV23@PAK2@Z@Z
?RegistOnGEMReqPPList@KingExGem@@QAEJP6AXPAXJ@Z@Z
?RegistOnGEMReqPPLoadInquire@KingExGem@@QAEJP6AXPAXJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@K@Z@Z
?RegistOnGEMReqPPSend@KingExGem@@QAEJP6AXPAXJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@KPAE@Z@Z
?RegistOnGEMReqPPSendEx@KingExGem@@QAEJP6AXPAXJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@1@Z@Z
?RegistOnGEMReqRemoteCommand@KingExGem@@QAEJP6AXPAXJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@KPAV23@2@Z@Z
?RegistOnGEMReqSimpleRemoteCommand@KingExGem@@QAEJP6AXPAXJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@Z
?RegistOnGEMRspAllAlarmInfo@KingExGem@@QAEJP6AXPAXKPAJ1PAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAH@Z@Z
?RegistOnGEMRspAllDvInfo@KingExGem@@QAEJP6AXPAXKPAJPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2PAK222@Z@Z
?RegistOnGEMRspAllEcvInfo@KingExGem@@QAEJP6AXPAXKPAJPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2PAK2222@Z@Z
?RegistOnGEMRspAllEnabledAlarm@KingExGem@@QAEJP6AXPAXKPAJ@Z@Z
?RegistOnGEMRspAllEnabledEvent@KingExGem@@QAEJP6AXPAXKPAJ@Z@Z
?RegistOnGEMRspAllEventInfo@KingExGem@@QAEJP6AXPAXKPAJPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAH2PAK1@Z@Z
?RegistOnGEMRspAllReportInfo@KingExGem@@QAEJP6AXPAXKPAJPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAK1@Z@Z
?RegistOnGEMRspAllSvInfo@KingExGem@@QAEJP6AXPAXKPAJPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2PAK222@Z@Z
?RegistOnGEMRspDateTime@KingExGem@@QAEJP6AXPAXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@Z
?RegistOnGEMRspLoopback@KingExGem@@QAEJP6AXPAXKPAE@Z@Z
?RegistOnGEMRspPP@KingExGem@@QAEJP6AXPAXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@KPAE@Z@Z
?RegistOnGEMRspPPEx@KingExGem@@QAEJP6AXPAXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@1@Z@Z
?RegistOnGEMRspPPFmt@KingExGem@@QAEJP6AXPAXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@11KPAV23@PAK2@Z@Z
?RegistOnGEMRspPPFmtSend@KingExGem@@QAEJP6AXPAXJ@Z@Z
?RegistOnGEMRspPPLoadInquire@KingExGem@@QAEJP6AXPAXJ@Z@Z
?RegistOnGEMRspPPSend@KingExGem@@QAEJP6AXPAXJ@Z@Z
?RegistOnGEMRspPPSendEx@KingExGem@@QAEJP6AXPAXJ@Z@Z
?RegistOnGEMRspPPVerification@KingExGem@@QAEJP6AXPAX@Z@Z
?RegistOnGEMRspPPVerificationInquire@KingExGem@@QAEJP6AXPAXJ@Z@Z
?RegistOnGEMSecondaryMsgReceived@KingExGem@@QAEJP6AXPAXJJJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@11@Z@Z
?RegistOnGEMStateEvent@KingExGem@@QAEJP6AXPAXJ@Z@Z
?RegistOnGEMTerminalMessage@KingExGem@@QAEJP6AXPAXJJV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@Z
?RegistOnGEMTerminalMultiMessage@KingExGem@@QAEJP6AXPAXJJKPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@Z
Sections
.text Size: 8.4MB - Virtual size: 8.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 488KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mark Size: 512B - Virtual size: 448B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.encode Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 217KB - Virtual size: 217KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ