it's not Delphi :facepalm:Quote:
Executable's PE is Borland Delphi 4. Which means he used a PE Mangler in order to protect his exe. Though I kinda suck at reversing. But I'm good at debugging/disassembling. I have looked into this with IDA Q. And I can say that this thing is clean. It's the packer / mangler giving those false positives :)
it's assembler code in masm32 syntax contain injector and dll plus my PE Loader...