928655082e7d2e16e4c3b47e8d601b7f
Summary
| Architecture |
IMAGE_FILE_MACHINE_I386
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2026-Jan-09 17:17:25 |
| Detected languages |
English - United States
|
| FileVersion | 5.3.109.125 |
| ProductVersion | 5.3.109 |
| ProgramID | com.embarcadero.freepcaudit |
| FileDescription | freepcaudit |
| ProductName | freepcaudit |
Plugin Output
| Info | Matching compiler(s): | Microsoft Visual C++ v6.0 DLL |
| Suspicious | Strings found in the binary may indicate undesirable behavior: |
Looks for VMWare presence:
|
| Info | Cryptographic algorithms detected in the binary: | Uses constants related to CRC32 |
| Suspicious | The PE is possibly packed. |
Unusual section name found: .itext
Unusual section name found: .didata |
| Malicious | The PE contains functions mostly used by malware. |
[!] The program may be hiding some of its imports:
|
| Suspicious | The PE is possibly a dropper. |
Resource WINDOWSMODERNDARK is possibly compressed or encrypted.
Resource WINDOWSWHITESMOKE is possibly compressed or encrypted. The binary may have been compiled on a machine in the UTC+1 timezone. Resources amount for 75.0478% of the executable. |
| Info | The PE is digitally signed. |
Signer: Volodymyr Karpus
Issuer: Certum Code Signing 2021 CA |
| Safe | VirusTotal score: 0/71 (Scanned on 2026-01-24 07:58:38) | All the AVs think this file is safe. |
Hashes
DOS Header
| e_magic | MZ |
|---|---|
| e_cblp | 0x50 |
| e_cp | 0x2 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0xf |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0x1a |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x100 |
PE Header
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_I386
|
| NumberofSections | 11 |
| TimeDateStamp | 2026-Jan-09 17:17:25 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xe0 |
| Characteristics |
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
|
Image Optional Header
| Magic | PE32 |
|---|---|
| LinkerVersion | 2.0 |
| SizeOfCode | 0x312200 |
| SizeOfInitializedData | 0xa94600 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x0031368C (Section: .itext) |
| BaseOfCode | 0x1000 |
| BaseOfData | 0x314000 |
| ImageBase | 0x400000 |
| SectionAlignment | 0x1000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 6.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 6.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0xdc7000 |
| SizeOfHeaders | 0x400 |
| Checksum | 0xdaa25a |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x4000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0 |
| NumberOfRvaAndSizes | 16 |
.text
.itext
.data
.bss
.idata
.didata
.edata
.tls
.rdata
.reloc
.rsrc
Imports
| winmm.dll |
sndPlaySoundW
|
|---|---|
| oleacc.dll |
LresultFromObject
|
| wininet.dll |
InternetCloseHandle
InternetGetLastResponseInfoW InternetReadFile InternetOpenW InternetOpenUrlW HttpQueryInfoW |
| winspool.drv |
DocumentPropertiesW
ClosePrinter OpenPrinterW GetDefaultPrinterW EnumPrintersW |
| comdlg32.dll |
GetSaveFileNameW
GetOpenFileNameW |
| comctl32.dll |
ImageList_GetImageInfo
FlatSB_SetScrollInfo InitCommonControls ImageList_DragMove ImageList_Destroy _TrackMouseEvent ImageList_DragShowNolock ImageList_Add FlatSB_SetScrollProp ImageList_GetDragImage ImageList_Create ImageList_EndDrag ImageList_DrawEx ImageList_SetImageCount FlatSB_GetScrollPos FlatSB_SetScrollPos InitializeFlatSB ImageList_Copy FlatSB_GetScrollInfo ImageList_Write ImageList_DrawIndirect ImageList_SetBkColor ImageList_GetBkColor ImageList_BeginDrag ImageList_GetIcon ImageList_Replace ImageList_GetImageCount ImageList_DragEnter ImageList_GetIconSize ImageList_SetIconSize ImageList_Read ImageList_DragLeave ImageList_LoadImageW ImageList_Draw ImageList_Remove ImageList_ReplaceIcon ImageList_SetOverlayImage |
| shell32.dll |
Shell_NotifyIconW
SHAppBarMessage ShellExecuteW |
| user32.dll |
CopyImage
SetMenuItemInfoW GetMenuItemInfoW DefFrameProcW GetDlgCtrlID FrameRect RegisterWindowMessageW GetMenuStringW FillRect SendMessageA IsClipboardFormatAvailable EnumWindows ShowOwnedPopups GetClassInfoExW GetClassInfoW GetScrollRange SetActiveWindow GetActiveWindow DrawEdge GetKeyboardLayoutList LoadBitmapW EnumChildWindows GetScrollBarInfo UnhookWindowsHookEx SetCapture GetCapture ShowCaret CreatePopupMenu GetMenuItemID CharLowerBuffW PostMessageW SetWindowLongW IsZoomed SetParent DrawMenuBar GetClientRect IsChild IsIconic CallNextHookEx ShowWindow GetWindowTextW SetForegroundWindow GetAsyncKeyState IsDialogMessageW DestroyWindow RegisterClassW EndMenu CharNextW GetFocus GetDC SetFocus ReleaseDC GetClassLongW SetScrollRange DrawTextW PeekMessageA MessageBeep SetClassLongW RemovePropW GetSubMenu DestroyIcon IsWindowVisible PtInRect DispatchMessageA UnregisterClassW GetTopWindow SendMessageW NotifyWinEvent GetComboBoxInfo LoadStringW CreateMenu CharLowerW SetWindowRgn SetWindowPos GetMenuItemCount GetSysColorBrush GetWindowDC DrawTextExW EnumClipboardFormats GetScrollInfo SetWindowTextW GetMessageExtraInfo GetSysColor EnableScrollBar TrackPopupMenu DrawIconEx GetClassNameW GetMessagePos GetIconInfo SetScrollInfo GetKeyNameTextW GetDesktopWindow SetCursorPos GetCursorPos SetMenu GetMenuState GetMenu SetRect GetKeyState IsRectEmpty ValidateRect GetCursor KillTimer WaitMessage TranslateMDISysAccel GetWindowPlacement GetMenuItemRect CreateIconIndirect CreateWindowExW ChildWindowFromPoint GetDCEx PeekMessageW MonitorFromWindow GetUpdateRect SetTimer WindowFromPoint BeginPaint DrawStateW RegisterClipboardFormatW MapVirtualKeyW OffsetRect IsWindowUnicode DispatchMessageW CreateAcceleratorTableW DefMDIChildProcW GetSystemMenu SetScrollPos GetScrollPos InflateRect DrawFocusRect ReleaseCapture LoadCursorW ScrollWindow GetLastActivePopup GetSystemMetrics CharUpperBuffW SetClipboardData GetClipboardData ClientToScreen SetWindowPlacement GetMonitorInfoW CheckMenuItem CharUpperW DefWindowProcW GetForegroundWindow EnableWindow GetWindowThreadProcessId RedrawWindow EndPaint MsgWaitForMultipleObjectsEx LoadKeyboardLayoutW ActivateKeyboardLayout GetParent MonitorFromRect InsertMenuItemW GetPropW MessageBoxW SetPropW UpdateWindow MsgWaitForMultipleObjects DestroyMenu SetWindowsHookExW EmptyClipboard GetDlgItem AdjustWindowRectEx IsWindow DrawIcon EnumThreadWindows InvalidateRect GetKeyboardState ScreenToClient DrawFrameControl SetCursor CreateIcon RemoveMenu GetKeyboardLayoutNameW OpenClipboard TranslateMessage MapWindowPoints EnumDisplayMonitors CallWindowProcW CountClipboardFormats CloseClipboard DestroyCursor CopyIcon PostQuitMessage ShowScrollBar EnableMenuItem HideCaret FindWindowExW MonitorFromPoint LoadIconW SystemParametersInfoW GetWindow GetWindowRect GetWindowLongW InsertMenuW IsWindowEnabled IsDialogMessageA FindWindowW GetKeyboardLayout DeleteMenu |
| version.dll |
GetFileVersionInfoSizeW
VerQueryValueW GetFileVersionInfoW |
| oleaut32.dll |
SafeArrayPutElement
GetErrorInfo VariantInit VariantClear SysFreeString SafeArrayAccessData SysReAllocStringLen SafeArrayCreate SafeArrayGetElement GetActiveObject SysAllocStringLen SafeArrayUnaccessData SafeArrayPtrOfIndex VariantCopy SafeArrayGetUBound SafeArrayGetLBound VariantCopyInd VariantChangeType |
| WTSAPI32.DLL |
WTSUnRegisterSessionNotification
WTSRegisterSessionNotification |
| advapi32.dll |
RegSetValueExW
RegConnectRegistryW RegEnumKeyExW RegLoadKeyW RegDeleteKeyW RegOpenKeyExW RegQueryInfoKeyW RegUnLoadKeyW RegSaveKeyW RegDeleteValueW RegReplaceKeyW RegFlushKey RegQueryValueExW RegEnumValueW RegCloseKey RegCreateKeyExW RegRestoreKeyW |
| msvcrt.dll |
memcpy
memset |
| kernel32.dll |
GetFileType
GetACP CloseHandle LocalFree GetCurrentProcessId SizeofResource QueryPerformanceFrequency IsDebuggerPresent GetFullPathNameW VirtualFree GetProcessHeap ExitProcess HeapAlloc GetCPInfoExW GlobalSize RtlUnwind GetCPInfo EnumSystemLocalesW GetStdHandle FileTimeToLocalFileTime GetModuleHandleW FreeLibrary TryEnterCriticalSection HeapDestroy ReadFile GetLastError GetModuleFileNameW SetLastError GlobalAlloc GlobalUnlock FindResourceW CreateThread CompareStringW CopyFileW LoadLibraryA ResetEvent MulDiv FreeResource GetVersion RaiseException MoveFileW GlobalAddAtomW FormatMessageW SwitchToThread GetExitCodeThread OutputDebugStringW GetCurrentThread LoadLibraryExW LockResource FileTimeToSystemTime GetCurrentThreadId UnhandledExceptionFilter VirtualQuery GlobalFindAtomW VirtualQueryEx GlobalFree Sleep EnterCriticalSection SetFilePointer LoadResource SuspendThread GetTickCount GetFileSize GetStartupInfoW GlobalDeleteAtom GetFileAttributesW InitializeCriticalSection GetThreadPriority GetCurrentProcess SetThreadPriority GlobalLock VirtualAlloc GetCommandLineW GetSystemInfo LeaveCriticalSection GetProcAddress ResumeThread GetVersionExW VerifyVersionInfoW HeapCreate LCMapStringW GetDiskFreeSpaceW VerSetConditionMask FindFirstFileW GetUserDefaultUILanguage GetConsoleOutputCP GetConsoleCP lstrlenW QueryPerformanceCounter SetEndOfFile lstrcmpW HeapFree WideCharToMultiByte FindClose MultiByteToWideChar LoadLibraryW SetEvent GetLocaleInfoW CreateFileW SystemTimeToFileTime EnumResourceNamesW DeleteFileW IsDBCSLeadByteEx GetLocalTime WaitForSingleObject WriteFile ExitThread DeleteCriticalSection GetDateFormatW TlsGetValue SetErrorMode GetComputerNameW IsValidLocale TlsSetValue GetSystemDefaultUILanguage EnumCalendarInfoW LocalAlloc RemoveDirectoryW CreateEventW WaitForMultipleObjectsEx GetThreadLocale SetThreadLocale |
| wsock32.dll |
WSAStartup
WSACleanup gethostbyname inet_ntoa |
| ole32.dll |
IsEqualGUID
ProgIDFromCLSID OleInitialize CLSIDFromProgID OleUninitialize CoInitialize CoCreateInstance CoUninitialize CoTaskMemFree CoTaskMemAlloc StringFromCLSID |
| gdi32.dll |
Pie
SetBkMode CreateCompatibleBitmap GetEnhMetaFileHeader RectVisible AngleArc SetAbortProc SetTextColor GetTextColor StretchBlt RoundRect SelectClipRgn RestoreDC SetRectRgn GetTextMetricsW GetWindowOrgEx CreatePalette PolyBezierTo CreateICW CreateDCW GetStockObject CreateSolidBrush GetBkMode Polygon MoveToEx PlayEnhMetaFile Ellipse StartPage GetBitmapBits StartDocW AbortDoc GetSystemPaletteEntries GetEnhMetaFileBits GetEnhMetaFilePaletteEntries CreatePenIndirect CreateFontIndirectW PolyBezier EndDoc GetObjectW GetCurrentObject GetWinMetaFileBits SetROP2 GetEnhMetaFileDescriptionW ArcTo Arc SelectPalette SetGraphicsMode ExcludeClipRect MaskBlt SetWindowOrgEx EndPage DeleteEnhMetaFile Chord SetDIBits GetViewportOrgEx SetViewportOrgEx CreateRectRgn RealizePalette SetDIBColorTable GetDIBColorTable CreateBrushIndirect PatBlt SetEnhMetaFileBits Rectangle SaveDC DeleteDC BitBlt SetWorldTransform FrameRgn GetDeviceCaps GetTextExtentPoint32W GetClipBox IntersectClipRect Polyline CreateBitmap CombineRgn SetWinMetaFileBits GetStretchBltMode CreateDIBitmap SetStretchBltMode GetDIBits CreateDIBSection ExtCreateRegion LineTo GetRgnBox EnumFontsW CreateHalftonePalette SelectObject DeleteObject ExtFloodFill UnrealizeObject CopyEnhMetaFileW SetBkColor CreateCompatibleDC GetBrushOrgEx GetCurrentPositionEx SetDCPenColor CreateRoundRectRgn GetTextExtentPointW ExtTextOutW SetBrushOrgEx GetPixel GdiFlush SetPixel EnumFontFamiliesExW StretchDIBits GetPaletteEntries |
| kernel32.dll (delay-loaded) |
GetFileType
GetACP CloseHandle LocalFree GetCurrentProcessId SizeofResource QueryPerformanceFrequency IsDebuggerPresent GetFullPathNameW VirtualFree GetProcessHeap ExitProcess HeapAlloc GetCPInfoExW GlobalSize RtlUnwind GetCPInfo EnumSystemLocalesW GetStdHandle FileTimeToLocalFileTime GetModuleHandleW FreeLibrary TryEnterCriticalSection HeapDestroy ReadFile GetLastError GetModuleFileNameW SetLastError GlobalAlloc GlobalUnlock FindResourceW CreateThread CompareStringW CopyFileW LoadLibraryA ResetEvent MulDiv FreeResource GetVersion RaiseException MoveFileW GlobalAddAtomW FormatMessageW SwitchToThread GetExitCodeThread OutputDebugStringW GetCurrentThread LoadLibraryExW LockResource FileTimeToSystemTime GetCurrentThreadId UnhandledExceptionFilter VirtualQuery GlobalFindAtomW VirtualQueryEx GlobalFree Sleep EnterCriticalSection SetFilePointer LoadResource SuspendThread GetTickCount GetFileSize GetStartupInfoW GlobalDeleteAtom GetFileAttributesW InitializeCriticalSection GetThreadPriority GetCurrentProcess SetThreadPriority GlobalLock VirtualAlloc GetCommandLineW GetSystemInfo LeaveCriticalSection GetProcAddress ResumeThread GetVersionExW VerifyVersionInfoW HeapCreate LCMapStringW GetDiskFreeSpaceW VerSetConditionMask FindFirstFileW GetUserDefaultUILanguage GetConsoleOutputCP GetConsoleCP lstrlenW QueryPerformanceCounter SetEndOfFile lstrcmpW HeapFree WideCharToMultiByte FindClose MultiByteToWideChar LoadLibraryW SetEvent GetLocaleInfoW CreateFileW SystemTimeToFileTime EnumResourceNamesW DeleteFileW IsDBCSLeadByteEx GetLocalTime WaitForSingleObject WriteFile ExitThread DeleteCriticalSection GetDateFormatW TlsGetValue SetErrorMode GetComputerNameW IsValidLocale TlsSetValue GetSystemDefaultUILanguage EnumCalendarInfoW LocalAlloc RemoveDirectoryW CreateEventW WaitForMultipleObjectsEx GetThreadLocale SetThreadLocale |
Delayed Imports
| Attributes | 0x1 |
|---|---|
| Name | kernel32.dll |
| ModuleHandle | 0x33e1a0 |
| DelayImportAddressTable | 0x33e1d4 |
| DelayImportNameTable | 0x33e30c |
| BoundDelayImportTable | 0x33e444 |
| UnloadDelayImportTable | 0x33e54c |
| TimeStamp | 1970-Jan-01 00:00:00 |
dbkFCallWrapperAddr
| Ordinal | 1 |
|---|---|
| Address | 0x322644 |
__dbk_fcall_wrapper
| Ordinal | 2 |
|---|---|
| Address | 0x12550 |
WINDOWSMODERNDARK
WINDOWSWHITESMOKE
1
2
3
4
5
6
7
8
PREVIEWGLYPH
1 (#2)
2 (#2)
3 (#2)
4 (#2)
5 (#2)
6 (#2)
DLGTEMPLATE
TEXTFILEDLG
4068
4069
4070
4071
4072
4073
4074
4075
4076
4077
4078
4079
4080
4081
4082
4083
4084
4085
4086
4087
4088
4089
4090
4091
4092
4093
4094
4095
4096
AMDCPU
BBABORT
BBABORT_DISABLED
BBALL
BBALL_DISABLED
BBCANCEL
BBCANCEL_DISABLED
BBCLOSE
BBCLOSE_DISABLED
BBHELP
BBHELP_DISABLED
BBIGNORE
BBIGNORE_DISABLED
BBNO
BBNO_DISABLED
BBOK
BBOK_DISABLED
BBRETRY
BBRETRY_DISABLED
BBYES
BBYES_DISABLED
DVCLAL
INTELCPU
MSG_ERROR
MSG_INFO
MSG_WARNING
OTHERCPU
PACKAGEINFO
PLATFORMTARGETS
TFRMABOUT
TFRMFPCAMAIN
TFRMWAIT
CAT_DRAG_COPY
32761
32762
32763
32764
32765
32766
32767
MAINICON
1 (#3)
1 (#4)
String Table contents
| Invalid owner |
| %d is an invalid PageIndex value. PageIndex must be between 0 and %d |
| This control requires version 4.70 or greater of COMCTL32.DLL |
| Unable to retrieve a pointer to a running object registered with OLE for %s/%s |
| OLE error %.8x |
| Method '%s' not supported by automation object |
| Variant does not reference an automation object |
| Dispatch methods do not support more than 64 parameters |
| DCOM not installed |
| Failed to clear tab control |
| Failed to delete tab at index %d |
| Failed to retrieve tab at index %d |
| Failed to get object at index %d |
| Failed to set tab "%s" at index %d |
| Failed to set object at index %d |
| MultiLine must be True when TabPosition is tpLeft or tpRight |
| Invalid item level assignment |
| Invalid level (%d) for item "%s" |
| Invalid index |
| Unable to insert an item |
| Style '%s' already registered |
| Style class '%s' already registered |
| Style '%s' not found |
| Style class '%s' not found |
| Invalid style handle |
| Invalid style format |
| VCL Style File |
| Class '%s' is already registered for '%s' |
| Class '%s' is not registered for '%s' |
| %s parameter cannot be nil |
| A StyleHook class has not been registered for %s |
| Feature not supported by this style |
| Style '%s' is not registered |
| Cannot unregister the system style |
| Style not registered |
| Cannot call BeginInvoke on a control with no parent or window handle |
| UTF-8 |
| UTF-7 |
| Cannot remove shell notification icon |
| PageControl must first be assigned |
| %s requires Windows Vista or later |
| Button%d |
| RadioButton%d |
| Caption cannot be empty |
| Invalid canvas operation |
| %s has no owner |
| Source and destination require the same owner |
| %s cannot be owned by a different canvas |
| Not a solid color brush |
| Invalid brush style |
| Unable to load style '%s' |
| Unable to load styles: %s |
| Error loading previously saved settings file: %s |
| Would you like to delete it? |
| (No Name) |
| &Add or Remove Buttons |
| Reset Toolbar |
| Circular references not allowed |
| %s does not allow hiding |
| Unable to save settings |
| Would you like to reset to the default Priority Schedule? |
| No OnGetItem event handler assigned |
| A style named %s has not been registered |
| No ActionBand style unit present in the uses clause. |
| Your application must include either XPStyleActnCtrls, StdStyleActnCtrls or a third party ActionBand style unit in its uses clause |
| %s ActionManager property has not been assigned |
| ANSI |
| ASCII |
| Unicode |
| Big Endian Unicode |
| - Dock zone not found |
| - Dock zone has no control |
| Error loading dock zone from the stream. Expecting version %d, but found %d. |
| Multiselect mode must be on for this feature |
| Length of value array must be >= length of prompt array |
| Prompt array must not be empty |
| &Username |
| &Password |
| &Domain |
| Login |
| Cannot assign a subitem to an actionbar when one of it's parent's is already assigned to an actionbar |
| Item %s has subitems, delete anyway? |
| You are not allowed to delete this item |
| Item %s is not allowed to be moved |
| More Buttons |
| Expand |
| Ins |
| Del |
| Shift+ |
| Ctrl+ |
| Alt+ |
| Value must be between %d and %d |
| All |
| Invalid clipboard format |
| Clipboard does not support Icons |
| Cannot open clipboard: %s |
| Text exceeds memo capacity |
| Operation not supported on selected printer |
| There is no default printer currently selected |
| Menu '%s' is already being used by another form |
| Docked control must have a name |
| Error removing control from dock tree |
| N&o to All |
| Yes to &All |
| &Close |
| BkSp |
| Tab |
| Esc |
| Enter |
| Space |
| PgUp |
| PgDn |
| End |
| Home |
| Left |
| Up |
| Right |
| Down |
| Icons |
| Bitmaps |
| TIFF Images |
| Warning |
| Error |
| Information |
| Confirm |
| &Yes |
| &No |
| OK |
| Cancel |
| &Help |
| &Abort |
| &Retry |
| &Ignore |
| &All |
| Can only modify an image if it contains a bitmap |
| A control cannot have itself as its parent |
| Control '%s' is used on a not main thread |
| OK |
| Cancel |
| &Yes |
| &No |
| &Help |
| &Close |
| &Ignore |
| &Retry |
| Abort |
| &All |
| Cannot drag a form |
| Metafiles |
| Enhanced Metafiles |
| Cannot make a visible window modal |
| Scrollbar property out of range |
| %s property out of range |
| Check state can only be set when CheckBoxes is True |
| Check state incompatible with treeview's CheckStyles |
| Menu index out of range |
| Menu inserted twice |
| Sub-menu is not in menu |
| Not enough timers available |
| Printer is not currently printing |
| Printing in progress |
| Printer index out of range |
| Printer selected is not valid |
| %s on %s |
| GroupIndex cannot be less than a previous menu item's GroupIndex |
| Cannot create form. No MDI forms are currently active |
| Invalid image frame index %d: there are %d frames (0-%d) |
| Invalid image size |
| Invalid ImageList |
| Unable to Replace Image |
| Unable to Insert Image |
| Invalid ImageList Index |
| Failed to read ImageList data from stream |
| Failed to write ImageList data to stream |
| Error creating window device context |
| Error creating window class |
| Cannot focus a disabled or invisible window |
| Control '%s' has no parent window |
| . Path: |
| %s |
| Parent given is not a parent of '%s' |
| Cannot hide an MDI Child Form |
| Cannot change Visible in OnShow or OnHide |
| Tab position incompatible with current tab style |
| Tab style incompatible with current tab position |
| Bitmap image is not valid |
| Icon image is not valid |
| Metafile is not valid |
| Invalid pixel format |
| Invalid image |
| Scan line index out of range |
| Cannot change the size of an icon |
| Cannot change the size of a WIC Image |
| Unknown picture file extension (.%s) |
| Unsupported clipboard format |
| Unsupported stream format |
| Out of system resources |
| Canvas does not allow drawing |
| Text format flag '%s' not supported |
| Windows 8 |
| Windows 8.1 |
| Windows 10 |
| Windows 11 |
| Cannot create instance of class %s |
| Observer is not supported |
| Cannot have multiple single cast observers added to the observers collection |
| The object does not implement the observer interface |
| No single cast observer with ID %d was added to the observer collection |
| No multi cast observer with ID %d was added to the observer collection |
| Observer is not available |
| Invalid date string: %s |
| Invalid time string: %s |
| Invalid time Offset string: %s |
| Must wait on at least one event |
| Cannot call BeginInvoke on a TComponent in the process of destruction |
| 32-bit Edition |
| 64-bit Edition |
| Windows |
| Windows Vista |
| Windows Server 2008 |
| Windows 7 |
| Windows Server 2008 R2 |
| Windows 2000 |
| Windows XP |
| Windows Server 2003 |
| Windows Server 2003 R2 |
| Windows Server 2012 |
| Windows Server 2012 R2 |
| Windows Server 2016 |
| Windows Server 2019 |
| Windows Server 2022 |
| No topic-based help system installed |
| No help found for %s |
| Argument out of range |
| Argument must not be nil |
| Item not found |
| Duplicates not allowed |
| Insufficient RTTI available to support this operation |
| Parameter count mismatch |
| Type '%s' is not declared in the interface section of a unit |
| VAR and OUT arguments must match parameter type exactly |
| Property '%s' is read-only |
| Property '%s' is write-only |
| RTTI objects cannot be manually destroyed by application code |
| Specified Login Credential Service not found |
| %s (Version %d.%d, Build %d, %5:s) |
| %s Service Pack %4:d (Version %1:d.%2:d, Build %3:d, %5:s) |
| Length of Strings and Objects arrays must be equal |
| Source and Destination arrays must not be the same |
| Class %s is not intended to be constructed |
| Invalid Timeout value: %s |
| SpinCount out of range. Must be between 0 and %d |
| Timespan too long |
| The duration cannot be returned because the absolute value exceeds the value of TTimeSpan.MaxValue |
| Value cannot be NaN |
| Negating the minimum value of a Timespan is invalid |
| Invalid Timespan format |
| Timespan element too long |
| No context-sensitive help installed |
| No help found for context %d |
| Unable to open Index |
| Unable to open Search |
| Unable to find a Table of Contents |
| Parameter %s cannot be a negative value |
| Input buffer exceeded for %s = %d, %s = %d |
| Invalid characters in path |
| Path is empty |
| The specified path is too long |
| The specified path was not found |
| The path format is not supported |
| The specified file was not found |
| The specified file already exists |
| ? |
| No help viewer that supports filters |
| Invalid argument |
| String index out of range (%d). Must be >= %d and <= %d |
| Invalid UTF32 character value. Must be >= 0 and <= $10FFFF, excluding surrogate pair ranges |
| High surrogate char without a following low surrogate char at index: %d. Check that the string is encoded properly |
| Low surrogate char without a preceding high surrogate char at index: %d. Check that the string is encoded properly |
| Resource %s not found |
| %s.Seek not implemented |
| Operation not allowed on sorted list |
| String expected |
| %s expected |
| %s not in a class registration group |
| Property %s does not exist |
| Stream write error |
| Thread creation error: %s |
| Thread Error: %s (%d) |
| Cannot terminate an externally created thread |
| Cannot wait for an externally created thread |
| Cannot call Start on a running or suspended thread |
| Cannot call CheckTerminated on an externally created thread |
| Cannot call SetReturnValue on an externally create thread |
| Parameter %s cannot be nil |
| List capacity out of bounds (%d) |
| List count out of bounds (%d) |
| List index out of bounds (%d) |
| . %s range is 0..%d |
| . %s is empty |
| Out of memory while expanding memory stream |
| %s has not been registered as a COM class |
| Number expected |
| ANSI or UTF8 encoding expected |
| %s on line %d |
| Error reading %s%s%s: %s |
| Stream read error |
| Property is read-only |
| Failed to create key %s |
| Failed to get data for '%s' |
| Failed to set data for '%s' |
| A class named %s already exists |
| List does not allow duplicates ($0%x) |
| A component named %s already exists |
| String list does not allow duplicates |
| Cannot create file "%s". %s |
| Cannot open file "%s". %s |
| Identifier expected |
| Invalid binary value |
| Invalid stream format |
| ''%s'' is not a valid component name |
| Invalid property value |
| Invalid property path |
| Invalid property value |
| Invalid data type for '%s' |
| Invalid string constant |
| Line too long |
| Character index out of bounds (%d) |
| Start index out of bounds (%d) |
| Invalid count (%d) |
| Invalid destination index (%d) |
| Invalid code page |
| Invalid encoding name |
| No mapping for the Unicode character exists in the target multi-byte code page |
| Invalid StringBaseIndex |
| '%s' is not a valid %s color value |
| Ancestor for '%s' not found |
| Cannot assign a %s to a %s |
| Bits index out of range |
| Can't write to a read-only resource stream |
| ''%s'' expected |
| CheckSynchronize called from thread $%x, which is NOT the main thread |
| Class %s not found |
| Sun |
| Mon |
| Tue |
| Wed |
| Thu |
| Fri |
| Sat |
| Sunday |
| Monday |
| Tuesday |
| Wednesday |
| Thursday |
| Friday |
| Saturday |
| Invalid source array |
| Invalid destination array |
| Sep |
| Oct |
| Nov |
| Dec |
| January |
| February |
| March |
| April |
| May |
| June |
| July |
| August |
| September |
| October |
| November |
| December |
| Monitor support function not initialized |
| Feature not implemented |
| Method called on disposed object |
| %s (%s, line %d) |
| Abstract Error |
| Access violation at address %p in module '%s'. %s of address %p |
| System Error. Code: %d. |
| %s%s |
| A call to an OS function failed |
| Jan |
| Feb |
| Mar |
| Apr |
| May |
| Jun |
| Jul |
| Aug |
| Custom variant type (%s%.4x) is out of range |
| Custom variant type (%s%.4x) already used by %s |
| Custom variant type (%s%.4x) is not usable |
| Too many custom variant types have been registered |
| Could not convert variant of type (%s) into type (%s) |
| Overflow while converting variant of type (%s) into type (%s) |
| Variant overflow |
| Invalid argument |
| Invalid variant type |
| Operation not supported |
| Unexpected variant error |
| External exception %x |
| Assertion failed |
| Interface not supported |
| Exception in safecall method |
| Object lock not owned |
| Application Error |
| Format '%s' invalid or incompatible with argument |
| No argument for format '%s' |
| Variant method calls not supported |
| Read |
| Write |
| Execution |
| Invalid access |
| Format string too long |
| Error creating variant or safe array |
| Variant or safe array index out of bounds |
| Variant or safe array is locked |
| Invalid variant type conversion |
| Invalid variant operation |
| Invalid NULL variant operation |
| Invalid variant operation (%s%.8x) |
| %s |
| Invalid numeric input |
| Division by zero |
| Range check error |
| Integer overflow |
| Invalid floating point operation |
| Floating point division by zero |
| Floating point overflow |
| Floating point underflow |
| Invalid pointer operation |
| Invalid class typecast |
| Access violation at address %p. %s of address %p |
| Access violation |
| Stack overflow |
| Control-C hit |
| Privileged instruction |
| Exception %s in module %s at %p. |
| %s%s |
| <unknown> |
| '%s' is not a valid integer value |
| '%s' is not a valid floating point value |
| '%s' is not a valid date and time |
| '%d.%d' is not a valid timestamp |
| '%s' is not a valid GUID value |
| Invalid argument to time encode |
| Invalid argument to date encode |
| Out of memory |
| I/O error %d |
| File not found |
| Invalid filename |
| Too many open files |
| File access denied |
| Read beyond end of file |
| Disk full |
Version Info
| Signature | 0xfeef04bd |
|---|---|
| StructVersion | 0x10000 |
| FileVersion | 5.3.109.125 |
| ProductVersion | 5.3.109.0 |
| FileFlags | (EMPTY) |
| FileOs |
VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
|
| FileType |
VFT_APP
|
| Language | English - United States |
| FileVersion (#2) | 5.3.109.125 |
| ProductVersion (#2) | 5.3.109 |
| ProgramID | com.embarcadero.freepcaudit |
| FileDescription | freepcaudit |
| ProductName | freepcaudit |
| Resource LangID | English - United States |
|---|
TLS Callbacks
| StartAddressOfRawData | 0x740000 |
|---|---|
| EndAddressOfRawData | 0x7400cc |
| AddressOfIndex | 0x714c48 |
| AddressOfCallbacks | 0x741010 |
| SizeOfZeroFill | 0 |
| Characteristics |
IMAGE_SCN_TYPE_REG
|
| Callbacks | (EMPTY) |
Load Configuration
RICH Header
Errors
[*] Warning: Section .bss has a size of 0!
[*] Warning: Section .tls has a size of 0!