Manalyze report for b365af317ae730a67c936f21432b9c71

Summary

Architecture	`IMAGE_FILE_MACHINE_AMD64`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
Compilation Date	2016-Mar-29 01:34:01
Detected languages	English - Australia English - United States
Debug artifacts	D:\Projects\processhacker2\bin\Release64\ProcessHacker.pdb
CompanyName	wj32
FileDescription	Process Hacker
FileVersion	`2.39.0.124`
InternalName	Process Hacker
LegalCopyright	Licensed under the GNU GPL, v3.
OriginalFilename	ProcessHacker.exe
ProductName	Process Hacker
ProductVersion	`2.39.0.124`

Plugin Output

Suspicious	Strings found in the binary may indicate undesirable behavior:	`Contains references to system / monitoring tools: TASKMGR.EXE regedit.exe rundll32.exe taskmgr.exe` `Contains references to security software: nui.exe` `May have dropper capabilities: CurrentControlSet\Services CurrentVersion\Run` Contains domain names: SourceForge.net famfamfam.com fatcow.com forum.sysinternals.com google.com http://forum.sysinternals.com http://processhacker.sourceforge.net http://www.famfamfam.com http://www.famfamfam.com/lab/icons/silk http://www.fatcow.com http://www.fatcow.com/free-icons http://www.google.com http://www.google.com/search?q http://www.minixml.org http://www.pcre.org http://www.reactos.org https://sourceforge.net minixml.org processhacker.sourceforge.net reactos.org sourceforge.net sysinternals.com www.famfamfam.com www.fatcow.com www.google.com www.minixml.org www.pcre.org www.reactos.org
Info	Cryptographic algorithms detected in the binary:	`Uses constants related to CRC32` `Uses constants related to MD5` `Uses constants related to SHA1`
Malicious	The PE contains functions mostly used by malware.	`[!] The program may be hiding some of its imports: LdrLoadDll GetProcAddress LoadLibraryExW LoadLibraryW` `Functions which can be used for anti-debugging purposes: NtQueryInformationProcess NtQuerySystemInformation FindWindowW` `Code injection capabilities (PowerLoader): GetWindowLongW FindWindowW` `Possibly launches other programs: CreateProcessW CreateProcessWithLogonW CreateProcessAsUserW` Uses Windows's Native API: NtCreateTimer NtAlertThread NtSetTimer NtCreateSemaphore NtQueryObject NtClearEvent NtCreateKeyedEvent NtWaitForKeyedEvent NtReleaseKeyedEvent NtDeviceIoControlFile NtSetInformationObject NtQueryFullAttributesFile NtOpenFile NtQuerySecurityObject NtOpenSection NtQueryDirectoryFile NtCreateFile NtCreateKey NtQueryDirectoryObject NtFsControlFile NtOpenDirectoryObject NtSetSecurityObject NtOpenProcess NtQuerySymbolicLinkObject NtOpenKey NtQueueApcThread NtUnloadDriver NtOpenSymbolicLinkObject NtOpenThread NtDeleteKey NtQueryKey NtQueryValueKey NtGetContextThread NtQueryInformationFile NtFlushBuffersFile NtLockFile NtUnlockFile NtAllocateVirtualMemory NtFilterToken NtQueryAttributesFile NtDuplicateToken NtSetInformationToken NtPowerInformation NtTestAlert NtOpenThreadToken NtIsProcessInJob NtAcceptConnectPort NtReplyWaitReceivePort NtCompleteConnectPort NtCreatePort NtConnectPort NtRequestWaitReplyPort NtCreateSection NtQueryMutant NtSuspendThread NtQueryInformationProcess NtRemoveProcessDebug NtTerminateThread NtResumeProcess NtReleaseSemaphore NtSetHighEventPair NtQueryEvent NtQuerySemaphore NtCancelTimer NtPulseEvent NtSetLowEventPair NtQueryTimer NtResetEvent NtQueryVirtualMemory NtProtectVirtualMemory NtSetSystemInformation NtWriteVirtualMemory NtSetInformationFile NtQueryInformationToken NtCreateMutant NtOpenProcessToken NtAdjustPrivilegesToken NtTerminateJobObject NtAssignProcessToJobObject NtQueryInformationJobObject NtMapViewOfSection NtQuerySection NtQueryPerformanceCounter NtTerminateProcess NtSetValueKey NtDeleteValueKey NtAddAtom NtWaitForMultipleObjects NtSetEvent NtCreateEvent NtReadVirtualMemory NtReadFile NtWriteFile NtQueryInformationThread NtQuerySystemInformation NtSuspendProcess NtResumeThread NtWaitForSingleObject NtSetInformationDebugObject NtUnmapViewOfSection NtSetInformationProcess NtDuplicateObject NtInitiatePowerAction NtClose NtDelayExecution NtSetInformationThread NtFreeVirtualMemory `Uses functions commonly found in keyloggers: GetAsyncKeyState GetForegroundWindow` `Interacts with services: EnumServicesStatusExW QueryServiceConfigW QueryServiceConfig2W OpenServiceW CreateServiceW OpenSCManagerW ChangeServiceConfigW DeleteService ControlService` `Manipulates other processes: NtOpenProcess` `Changes object ACLs: SetSecurityInfo` `Can take screenshots: GetDCEx FindWindowW GetDC BitBlt CreateCompatibleDC` `Reads the contents of the clipboard: GetClipboardData` `Can shut the system down or lock the screen: LockWorkStation ExitWindowsEx`
Info	The PE is digitally signed.	`Signer: Wen Jia Liu` `Issuer: DigiCert High Assurance Code Signing CA-1`
Malicious	VirusTotal score: 16/66 (Scanned on 2021-08-23 04:02:18)	`Lionic: Riskware.Win32.ProcHack.1!c` `CAT-QuickHeal: Hacktool.ProcHacker.P7` `Cylance: Unsafe` `Sangfor: Suspicious.Win32.Save.a` `K7AntiVirus: Adware ( 005447321 )` `K7GW: Adware ( 005447321 )` `Kaspersky: not-a-virus:HEUR:RiskTool.Win32.ProcHack.gen` `Sophos: Process Hacker (PUA)` `TrendMicro: PUA.Win64.ProcHack.AC` `Antiy-AVL: Trojan/Generic.ASSuf.3C524` `ALYac: Misc.Riskware.ProcessHacker` `TrendMicro-HouseCall: PUA.Win64.ProcHack.AC` `eGambit: not-a-virus:Generic.Malware` `Fortinet: Riskware/ProcHackTool` `Webroot: W32.Riskware.Phacker` `Panda: HackingTool/ProcHack`

Hashes

MD5	`b365af317ae730a67c936f21432b9c71`
SHA1	`a0bdfac3ce1880b32ff9b696458327ce352e3b1d`
SHA256	`bd2c2cf0631d881ed382817afcce2b093f4e412ffb170a719e2762f250abfea4`
SHA3	`f3d001d38fe41ef39f79652e0baf45001b9d0c184a5de6318d7216aca8246ec4`
SSDeep	`24576:V7eokafnkAwgcU+29fR4PQviXq1pj3EDT5m+m8I:V6efnkdlUF92PGBOT3m8`
Imports Hash	`3695333c60dedecdcaff1590409aa462`

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x118`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_AMD64`
NumberofSections	`7`
TimeDateStamp	2016-Mar-29 01:34:01
PointerToSymbolTable	`0`
NumberOfSymbols	`0`
SizeOfOptionalHeader	`0xf0`
Characteristics	`IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LARGE_ADDRESS_AWARE`

Image Optional Header

Magic	`PE32+`
LinkerVersion	`14.0`
SizeOfCode	`0xffe00`
SizeOfInitializedData	`0xa7000`
SizeOfUninitializedData	`0`
AddressOfEntryPoint	`0x00000000000E2EFC (Section: .text)`
BaseOfCode	`0x1000`
ImageBase	`0x140000000`
SectionAlignment	`0x1000`
FileAlignment	`0x200`
OperatingSystemVersion	`5.2`
ImageVersion	`0.0`
SubsystemVersion	`5.2`
Win32VersionValue	`0`
SizeOfImage	`0x1ab000`
SizeOfHeaders	`0x400`
Checksum	`0x1b2b53`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_GUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT` `IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE`
SizeofStackReserve	`0x100000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`eca8352520f4b9dda07e80bc8229743e`
SHA1	`5656ab195665e8a94419b35595bbb3ffffd74fd0`
SHA256	`9f3d4ebc251a5296a43649509558e3649a4d076f4c13db54cf9ed30f0e2b4dbf`
SHA3	`172f5959329c0eb96467f77a950efbf7e7e113e3dfaf2dd4735266f803e70ae6`
VirtualSize	`0xffda0`
VirtualAddress	`0x1000`
SizeOfRawData	`0xffe00`
PointerToRawData	`0x400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`6.42959`

.rdata

MD5	`efc4ec8cc481b183bd5c0e824cbf9354`
SHA1	`e8aa7332be1ef5aac58b55540432b499f220bd40`
SHA256	`84a4b6a2a8e97fe3eea70cd299c5267e7625a6c2b75c729b5311ad1b13a41a1b`
SHA3	`9efaef06c4738d3dc9ad28b2eb1591c79656c956e9c6fe2b2dbeca6eb9e779b5`
VirtualSize	`0x505e6`
VirtualAddress	`0x101000`
SizeOfRawData	`0x50600`
PointerToRawData	`0x100200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`5.32253`

.data

MD5	`c14bd08711b2fe07b9f5ac5a3730770f`
SHA1	`298068cc54c9df2b79eb1c21b732739eaf8e97a7`
SHA256	`4c43815ead79965ebc8a6a76d488c7570903cd1e411e6f0ffeb3a2e172d7671d`
SHA3	`68dfe626b9dc8353bd69cc99e297e26f803006c465822060519fc8d98a71e8f8`
VirtualSize	`0xd410`
VirtualAddress	`0x152000`
SizeOfRawData	`0x6800`
PointerToRawData	`0x150800`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`2.71141`

.pdata

MD5	`f0ae2a668f95d86b63c06f8315aeec2a`
SHA1	`883a710d91e34f65a23473dea7897d7da57e6a08`
SHA256	`cf3a8b2873d900c765e7a0d537cf7ae8ccfdb30aace10569e469e90afb24d3c6`
SHA3	`aea08ea1d8916d91b9a6032b12fa3c2fae9c460d790041bbd7d0b42719751368`
VirtualSize	`0xbc40`
VirtualAddress	`0x160000`
SizeOfRawData	`0xbe00`
PointerToRawData	`0x157000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`6.10708`

.gfids

MD5	`1729715966e7faed8f4ff77b63ffdfc0`
SHA1	`e6c2565f0b517fe8616349264b00ae48f27389fc`
SHA256	`2bfd6e0c766e80e43156289a35208ad7185d5f409424e7c31a9c4baa20fbc9d5`
SHA3	`99b5d4d8e6269c6c28e8fbf657a3bba65af7689a5d2238638a9941c5f3c59e62`
VirtualSize	`0xd8`
VirtualAddress	`0x16c000`
SizeOfRawData	`0x200`
PointerToRawData	`0x162e00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`2.18669`

.rsrc

MD5	`e8b0ede1d50f51f153b90fb261b2e8cc`
SHA1	`788179c46d67230f063a1007dec0b46b1f8f3574`
SHA256	`2139622191e02159d9f5d3405f6745de976e2aca66384ef08cbafc8df1f1e796`
SHA3	`a70cf2e3c990f808a03066949390f7bdce9e9dcf18921acc2078c4e52574acf2`
VirtualSize	`0x3bcf0`
VirtualAddress	`0x16d000`
SizeOfRawData	`0x3be00`
PointerToRawData	`0x163000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`5.74653`

.reloc

MD5	`934c7b774e3832420945c4f0f141a311`
SHA1	`30242db523f39e53d5c50b9b100d333a12473fd8`
SHA256	`db8840f1dc0cddc201de1c405c51bf0ce3b2fe759d95454773bdfecd5368e3cc`
SHA3	`74461d9047e718b8dcb33e3c7a76dd1d68bd28ac86cd15271fdabbd1489d3607`
VirtualSize	`0x1500`
VirtualAddress	`0x1a9000`
SizeOfRawData	`0x1600`
PointerToRawData	`0x19ee00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`5.37313`

Imports

ntdll.dll	`NtCreateTimer` `NtAlertThread` `NtSetTimer` `RtlGetGroupSecurityDescriptor` `RtlGetOwnerSecurityDescriptor` `RtlGetSaclSecurityDescriptor` `RtlLengthSecurityDescriptor` `NtCreateSemaphore` `NtQueryObject` `NtClearEvent` `NtCreateKeyedEvent` `NtWaitForKeyedEvent` `NtReleaseKeyedEvent` `RtlGetVersion` `NtDeviceIoControlFile` `NtSetInformationObject` `NtQueryFullAttributesFile` `NtOpenFile` `NtQuerySecurityObject` `NtOpenSection` `NtQueryDirectoryFile` `NtCreateFile` `NtCreateKey` `RtlCreateUserThread` `NtQueryDirectoryObject` `NtFsControlFile` `NtOpenDirectoryObject` `RtlPrefixUnicodeString` `NtSetSecurityObject` `NtOpenProcess` `NtQuerySymbolicLinkObject` `RtlConvertSidToUnicodeString` `NtOpenKey` `NtQueueApcThread` `NtUnloadDriver` `RtlEqualUnicodeString` `NtOpenSymbolicLinkObject` `RtlQueueApcWow64Thread` `NtOpenThread` `NtDeleteKey` `NtQueryKey` `NtQueryValueKey` `LdrLoadDll` `LdrUnloadDll` `LdrGetProcedureAddress` `NtGetContextThread` `NtQueryInformationFile` `NtFlushBuffersFile` `NtLockFile` `NtUnlockFile` `RtlInterlockedPopEntrySList` `RtlUnicodeToMultiByteSize` `RtlMultiByteToUnicodeSize` `RtlMultiByteToUnicodeN` `RtlReAllocateHeap` `NtAllocateVirtualMemory` `RtlUpcaseUnicodeChar` `RtlUnicodeToMultiByteN` `RtlExpandEnvironmentStrings_U` `RtlGetDaclSecurityDescriptor` `RtlCreateUserProcess` `RtlNtStatusToDosError` `RtlCreateProcessParameters` `NtFilterToken` `RtlStringFromGUID` `RtlFindMessage` `NtQueryAttributesFile` `RtlAddAce` `RtlDestroyProcessParameters` `RtlDosPathNameToNtPathName_U` `RtlFreeUnicodeString` `RtlGetAce` `RtlRandomEx` `NtDuplicateToken` `RtlGetFullPathName_U` `NtSetInformationToken` `NtPowerInformation` `NtTestAlert` `NtOpenThreadToken` `RtlTimeToSecondsSince1980` `RtlEqualSid` `RtlSecondsSince1980ToTime` `NtIsProcessInJob` `RtlFirstEntrySList` `RtlCreateSecurityDescriptor` `RtlCreateAcl` `RtlAddAccessAllowedAce` `NtAcceptConnectPort` `NtReplyWaitReceivePort` `NtCompleteConnectPort` `RtlSetDaclSecurityDescriptor` `RtlSubAuthoritySid` `NtCreatePort` `RtlInitializeSid` `RtlLengthRequiredSid` `RtlValidRelativeSecurityDescriptor` `RtlSelfRelativeToAbsoluteSD2` `RtlValidSid` `NtConnectPort` `NtRequestWaitReplyPort` `RtlAbsoluteToSelfRelativeSD` `RtlLengthSid` `NtCreateSection` `NtQueryMutant` `NtSuspendThread` `NtQueryInformationProcess` `NtRemoveProcessDebug` `NtTerminateThread` `NtResumeProcess` `NtReleaseSemaphore` `NtSetHighEventPair` `RtlCaptureContext` `RtlLookupFunctionEntry` `RtlVirtualUnwind` `RtlUnwindEx` `NtQueryEvent` `NtQuerySemaphore` `NtCancelTimer` `NtPulseEvent` `NtSetLowEventPair` `NtQueryTimer` `NtResetEvent` `RtlIpv6AddressToStringW` `RtlIpv4AddressToStringW` `RtlInterlockedFlushSList` `RtlInitializeSListHead` `RtlInterlockedPushEntrySList` `RtlSecondsSince1970ToTime` `RtlCreateHeap` `RtlFreeHeap` `RtlAllocateHeap` `RtlDestroyHeap` `NtQueryVirtualMemory` `NtProtectVirtualMemory` `NtSetSystemInformation` `NtWriteVirtualMemory` `NtSetInformationFile` `NtQueryInformationToken` `NtCreateMutant` `NtOpenProcessToken` `NtAdjustPrivilegesToken` `NtTerminateJobObject` `NtAssignProcessToJobObject` `NtQueryInformationJobObject` `NtMapViewOfSection` `NtQuerySection` `RtlSetHeapInformation` `RtlLeaveCriticalSection` `RtlInitializeCriticalSection` `RtlEnterCriticalSection` `RtlQueryEnvironmentVariable_U` `NtQueryPerformanceCounter` `RtlDeleteCriticalSection` `NtTerminateProcess` `NtSetValueKey` `RtlDetermineDosPathNameType_U` `NtDeleteValueKey` `NtAddAtom` `RtlGUIDFromString` `NtWaitForMultipleObjects` `NtSetEvent` `NtCreateEvent` `NtReadVirtualMemory` `NtReadFile` `NtWriteFile` `NtQueryInformationThread` `NtQuerySystemInformation` `NtSuspendProcess` `NtResumeThread` `NtWaitForSingleObject` `RtlDoesFileExists_U` `NtSetInformationDebugObject` `NtUnmapViewOfSection` `RtlRaiseStatus` `NtSetInformationProcess` `NtDuplicateObject` `NtInitiatePowerAction` `NtClose` `NtDelayExecution` `NtSetInformationThread` `NtFreeVirtualMemory`
WINSTA.dll	`WinStationSendMessageW` `WinStationShadow` `WinStationGetAllProcesses` `WinStationFreeGAPMemory` `WinStationRegisterConsoleNotification` `WinStationQueryInformationW` `WinStationFreeMemory` `WinStationEnumerateW` `WinStationReset` `WinStationDisconnect` `WinStationConnectW`
COMCTL32.dll	`PropertySheetW` `InitCommonControlsEx` `CreatePropertySheetPageW` `ImageList_Remove` `ImageList_Destroy` `ImageList_Create` `ImageList_ReplaceIcon` `ImageList_Replace`
VERSION.dll	`GetFileVersionInfoW` `VerQueryValueW` `GetFileVersionInfoSizeW`
UxTheme.dll	`IsThemeActive` `GetThemeInt` `SetWindowTheme` `CloseThemeData` `DrawThemeBackground` `OpenThemeData` `IsThemePartDefined` `EnableThemeDialogTexture`
KERNEL32.dll	`GetProcAddress` `GetModuleHandleW` `CreatePipe` `FileTimeToSystemTime` `FileTimeToLocalFileTime` `CreateProcessW` `SetConsoleCtrlHandler` `FreeConsole` `RaiseException` `QueryPerformanceCounter` `GetCurrentProcessId` `GetCurrentThreadId` `GetSystemTimeAsFileTime` `InitializeSListHead` `IsDebuggerPresent` `UnhandledExceptionFilter` `SetUnhandledExceptionFilter` `GetStartupInfoW` `IsProcessorFeaturePresent` `GetModuleFileNameW` `InitializeCriticalSectionAndSpinCount` `TlsFree` `LoadLibraryExW` `EnterCriticalSection` `LeaveCriticalSection` `DeleteCriticalSection` `GetStringTypeW` `MultiByteToWideChar` `GetACP` `GetStdHandle` `WriteFile` `WideCharToMultiByte` `GetCurrentProcess` `TerminateProcess` `GetModuleHandleExW` `HeapFree` `HeapAlloc` `GetFileType` `LCMapStringW` `IsValidLocale` `GetUserDefaultLCID` `EnumSystemLocalesW` `GetCPInfo` `IsValidCodePage` `GetOEMCP` `CloseHandle` `FindClose` `FindFirstFileExW` `FindNextFileW` `GetCommandLineA` `GetCommandLineW` `GetEnvironmentStringsW` `FreeEnvironmentStringsW` `SetStdHandle` `GetProcessHeap` `CreateFileW` `GetConsoleCP` `GetConsoleMode` `GlobalSize` `LocalAlloc` `GlobalUnlock` `GlobalLock` `FindResourceW` `LoadResource` `GlobalFree` `GlobalAlloc` `LockResource` `SizeofResource` `CreateRemoteThread` `CreateThread` `GetDateFormatW` `GetTimeFormatW` `GetNumberFormatW` `WriteConsoleW` `GetSystemDefaultLangID` `GetSystemDirectoryW` `GetLocaleInfoW` `GetUserDefaultLangID` `SearchPathW` `LocalFree` `SetLastError` `GetComputerNameW` `TlsGetValue` `TlsAlloc` `TlsSetValue` `FreeLibrary` `LoadLibraryW` `SetProcessShutdownParameters` `ExitProcess` `SetErrorMode` `GetTickCount` `AllocConsole` `GetConsoleWindow` `SetFilePointerEx` `FlushFileBuffers` `ReadFile` `ReadConsoleW` `HeapSize` `HeapReAlloc` `SetEndOfFile` `GetLastError`
USER32.dll	`SetClipboardData` `GetDesktopWindow` `CreateDialogIndirectParamW` `GetWindowTextW` `InternalGetWindowText` `EmptyClipboard` `CloseClipboard` `OpenClipboard` `GetActiveWindow` `GetFocus` `GetWindowLongW` `DestroyMenu` `TrackPopupMenu` `CreatePopupMenu` `InsertMenuItemW` `EndPaint` `BeginPaint` `ReleaseCapture` `PtInRect` `SetScrollPos` `ShowCaret` `EnableScrollBar` `SetCapture` `DestroyCaret` `DragDetect` `GetClipboardData` `CreateCaret` `SetCaretPos` `GetScrollInfo` `RegisterClipboardFormatW` `SetScrollInfo` `GetDCEx` `ScreenToClient` `SetCursorPos` `ScrollWindowEx` `GetUpdateRect` `GetMessageTime` `DrawFocusRect` `GetCapture` `GetAsyncKeyState` `InvalidateRgn` `WaitMessage` `MessageBeep` `GetMessagePos` `GetUpdateRgn` `GetIconInfo` `FrameRect` `DialogBoxParamW` `SetDlgItemTextW` `EndDialog` `LockWorkStation` `ExitWindowsEx` `SendMessageW` `IsWindowVisible` `EnableWindow` `GetParent` `GetDlgItem` `SetPropW` `IsWindowEnabled` `RemovePropW` `GetPropW` `GetClassNameW` `GetWindowThreadProcessId` `IsIconic` `InvalidateRect` `SetForegroundWindow` `GetClientRect` `FindWindowW` `SetLayeredWindowAttributes` `MoveWindow` `ClientToScreen` `GetMonitorInfoW` `GetWindowInfo` `RedrawWindow` `ShowWindow` `GetSubMenu` `GetWindowPlacement` `GetWindowLongPtrW` `SetWindowLongPtrW` `GetMenuItemCount` `MonitorFromRect` `SetWindowPos` `GetMenu` `FindWindowExW` `PostMessageW` `GetKeyState` `GetMenuItemInfoW` `MapWindowPoints` `SetWindowTextW` `GetWindowRect` `MapDialogRect` `DestroyIcon` `EnableMenuItem` `BringWindowToTop` `DeleteMenu` `GetSystemMenu` `SetCursor` `LoadCursorW` `CreateDialogParamW` `GetSysColorBrush` `GetSysColor` `CopyIcon` `SetDlgItemInt` `SetTimer` `DestroyWindow` `ReleaseDC` `SystemParametersInfoW` `TranslateMessage` `TranslateAcceleratorW` `IsChild` `IsDialogMessageW` `DispatchMessageW` `LoadAcceleratorsW` `GetSystemMetrics` `GetDC` `SendMessageTimeoutW` `GetMessageW` `LoadImageW` `UpdateWindow` `PostQuitMessage` `KillTimer` `AppendMenuW` `EndDeferWindowPos` `DrawMenuBar` `LoadIconW` `SetFocus` `SetMenuInfo` `SetMenuItemInfoW` `BeginDeferWindowPos` `IsWindow` `RegisterClassExW` `CreateWindowExW` `ShowWindowAsync` `LoadMenuW` `DefWindowProcW` `DeferWindowPos` `GetCursorPos` `DrawIconEx` `DrawTextW` `TrackMouseEvent` `IsHungAppWindow` `SetActiveWindow` `MonitorFromWindow` `MonitorFromPoint` `CallWindowProcW` `GetForegroundWindow` `GetDoubleClickTime` `CreateIconIndirect` `FillRect` `GetDlgItemInt` `GetGuiResources` `GetWindowTextLengthW` `OpenWindowStationW` `GetProcessWindowStation` `OpenDesktopW` `GetUserObjectInformationW` `CloseDesktop` `CloseWindowStation` `EnumDesktopsW` `GetGUIThreadInfo` `PeekMessageW` `MsgWaitForMultipleObjects` `MessageBoxW`
GDI32.dll	`GetDIBits` `SaveDC` `TextOutW` `GetCharWidthW` `Rectangle` `SetBkMode` `BitBlt` `DeleteDC` `CreateDIBSection` `SetBoundsRect` `GetStockObject` `Polyline` `SetDCBrushColor` `SetDCPenColor` `SelectObject` `GetTextMetricsW` `GetTextExtentPoint32W` `GetTextColor` `DeleteObject` `CreateFontW` `GetDeviceCaps` `SetTextColor` `SetBkColor` `GetObjectW` `CreateFontIndirectW` `CreateRectRgn` `SelectClipRgn` `ExcludeClipRect` `RestoreDC` `CombineRgn` `IntersectClipRect` `GdiAlphaBlend` `CreateCompatibleDC` `CreateCompatibleBitmap` `GetClipRgn`
COMDLG32.dll	`GetOpenFileNameW` `GetSaveFileNameW` `ChooseFontW` `ChooseColorW`
ADVAPI32.dll	`SystemFunction036` `SetSecurityInfo` `LsaLookupSids` `LsaLookupPrivilegeValue` `LsaLookupPrivilegeDisplayName` `LsaLookupNames2` `LsaOpenPolicy` `LsaLookupPrivilegeName` `EnumServicesStatusExW` `QueryServiceConfigW` `CreateProcessWithLogonW` `LsaOpenAccount` `LsaEnumeratePrivilegesOfAccount` `LogonUserW` `CreateProcessAsUserW` `QueryServiceConfig2W` `OpenServiceW` `RegisterServiceCtrlHandlerExW` `LsaEnumerateAccounts` `LsaFreeMemory` `SetServiceStatus` `StartServiceCtrlDispatcherW` `CreateServiceW` `OpenSCManagerW` `ChangeServiceConfig2W` `ChangeServiceConfigW` `LsaAddAccountRights` `LsaClose` `CloseServiceHandle` `DeleteService` `ControlService` `StartServiceW` `GetSecurityInfo`
SHELL32.dll	`DuplicateIcon` `SHGetFileInfoW` `ShellExecuteExW` `SHGetFolderPathW` `SHCreateDirectoryExW` `Shell_NotifyIconW` `ExtractIconExW`
ole32.dll	`CoTaskMemFree` `CoInitializeEx` `CoCreateInstance` `CoUninitialize`
OLEAUT32.dll	`SysFreeString`

Delayed Imports

PhAddComboBoxStrings

Ordinal	`1`
Address	`0xc6050`

PhAddElementAvlTree

Ordinal	`2`
Address	`0xde640`

PhAddEntryHashtable

Ordinal	`3`
Address	`0xb3690`

PhAddEntryHashtableEx

Ordinal	`4`
Address	`0xb37a0`

PhAddItemArray

Ordinal	`5`
Address	`0xb2d60`

PhAddItemList

Ordinal	`6`
Address	`0xb2fe0`

PhAddItemPointerList

Ordinal	`7`
Address	`0xb3300`

PhAddItemSimpleHashtable

Ordinal	`8`
Address	`0xb3c10`

PhAddItemsArray

Ordinal	`9`
Address	`0xb2dd0`

PhAddItemsList

Ordinal	`10`
Address	`0xb3040`

PhAddLayoutItem

Ordinal	`11`
Address	`0xc74a0`

PhAddLayoutItemEx

Ordinal	`12`
Address	`0xc7520`

PhAddListViewColumn

Ordinal	`13`
Address	`0xc55d0`

PhAddListViewItem

Ordinal	`14`
Address	`0xc5660`

PhAddProcessPropPage

Ordinal	`15`
Address	`0x69cf0`

PhAddProcessPropPage2

Ordinal	`16`
Address	`0x69d70`

PhAddPropPageLayoutItem

Ordinal	`17`
Address	`0x69f30`

PhAddSettings

Ordinal	`18`
Address	`0x8c1d0`

PhAddTabControlTab

Ordinal	`19`
Address	`0xc5e20`

PhAddTreeNewFilter

Ordinal	`20`
Address	`0xbf80`

PhAdjustRectangleToBounds

Ordinal	`21`
Address	`0xa7600`

PhAdjustRectangleToWorkingArea

Ordinal	`22`
Address	`0xa76a0`

PhAllocate

Ordinal	`23`
Address	`0xaf250`

PhAllocateExSafe

Ordinal	`24`
Address	`0xaf270`

PhAllocateFromFreeList

Ordinal	`25`
Address	`0xb3d80`

PhAllocatePage

Ordinal	`26`
Address	`0xaf2d0`

PhAllocateSafe

Ordinal	`27`
Address	`0x51920`

PhAppendBytesBuilder

Ordinal	`28`
Address	`0xb2aa0`

PhAppendBytesBuilder2

Ordinal	`29`
Address	`0xb2b30`

PhAppendBytesBuilderEx

Ordinal	`30`
Address	`0xb2bd0`

PhAppendCharStringBuilder

Ordinal	`31`
Address	`0xb2600`

PhAppendCharStringBuilder2

Ordinal	`32`
Address	`0xb2660`

PhAppendFormatStringBuilder

Ordinal	`33`
Address	`0xb2700`

PhAppendFormatStringBuilder_V

Ordinal	`34`
Address	`0xb2730`

PhAppendStringBuilder

Ordinal	`35`
Address	`0xb2530`

PhAppendStringBuilder2

Ordinal	`36`
Address	`0xb2540`

PhAppendStringBuilderEx

Ordinal	`37`
Address	`0xb2580`

PhApplicationFont

Ordinal	`38`
Address	`0x15f3d8`

PhApplyTreeNewFilters

Ordinal	`39`
Address	`0xc180`

PhApplyTreeNewFiltersToNode

Ordinal	`40`
Address	`0xc0f0`

PhAutoDereferenceObject

Ordinal	`41`
Address	`0xaec90`

PhBufferToHexString

Ordinal	`42`
Address	`0xb41f0`

PhBufferToHexStringEx

Ordinal	`43`
Address	`0xb4200`

PhCenterRectangle

Ordinal	`44`
Address	`0xa7670`

PhCenterWindow

Ordinal	`45`
Address	`0xa77b0`

PhClearArray

Ordinal	`46`
Address	`0xb2e60`

PhClearCircularBuffer_FLOAT

Ordinal	`47`
Address	`0xcf850`

PhClearCircularBuffer_PVOID

Ordinal	`48`
Address	`0xcf850`

PhClearCircularBuffer_ULONG

Ordinal	`49`
Address	`0xcf850`

PhClearCircularBuffer_ULONG64

Ordinal	`50`
Address	`0xcf850`

PhClearHashtable

Ordinal	`51`
Address	`0xb38e0`

PhClearList

Ordinal	`52`
Address	`0xb30c0`

PhCmLoadSettings

Ordinal	`53`
Address	`0x102e0`

PhCmSaveSettings

Ordinal	`54`
Address	`0x10cf0`

PhCompareStringRef

Ordinal	`55`
Address	`0xafb60`

PhCompareStringZNatural

Ordinal	`56`
Address	`0xaf800`

PhCompareUnicodeStringZIgnoreMenuPrefix

Ordinal	`57`
Address	`0xa8b90`

PhConcatStringRef2

Ordinal	`58`
Address	`0xb0f10`

PhConcatStringRef3

Ordinal	`59`
Address	`0xb0fb0`

PhConcatStrings

Ordinal	`60`
Address	`0xb0be0`

PhConcatStrings2

Ordinal	`61`
Address	`0xb0e50`

PhConcatStrings_V

Ordinal	`62`
Address	`0xb0c10`

PhConvertMultiByteToUtf16

Ordinal	`63`
Address	`0xb1ad0`

PhConvertMultiByteToUtf16Ex

Ordinal	`64`
Address	`0xb1af0`

PhConvertUtf16ToAsciiEx

Ordinal	`65`
Address	`0xb1960`

PhConvertUtf16ToMultiByte

Ordinal	`66`
Address	`0xb1bc0`

PhConvertUtf16ToMultiByteEx

Ordinal	`67`
Address	`0xb1be0`

PhConvertUtf16ToUtf8

Ordinal	`68`
Address	`0xb22d0`

PhConvertUtf16ToUtf8Buffer

Ordinal	`69`
Address	`0xb2170`

PhConvertUtf16ToUtf8Ex

Ordinal	`70`
Address	`0xb22f0`

PhConvertUtf16ToUtf8Size

Ordinal	`71`
Address	`0xb2020`

PhConvertUtf8ToUtf16

Ordinal	`72`
Address	`0xb1f30`

PhConvertUtf8ToUtf16Buffer

Ordinal	`73`
Address	`0xb1de0`

PhConvertUtf8ToUtf16Ex

Ordinal	`74`
Address	`0xb1f50`

PhConvertUtf8ToUtf16Size

Ordinal	`75`
Address	`0xb1cb0`

PhCopyBytesZ

Ordinal	`76`
Address	`0xaf560`

PhCopyCircularBuffer_FLOAT

Ordinal	`77`
Address	`0xcf860`

PhCopyCircularBuffer_PVOID

Ordinal	`78`
Address	`0xcfa80`

PhCopyCircularBuffer_ULONG

Ordinal	`79`
Address	`0xcf860`

PhCopyCircularBuffer_ULONG64

Ordinal	`80`
Address	`0xcfa80`

PhCopyListView

Ordinal	`81`
Address	`0xaa50`

PhCopyListViewInfoTip

Ordinal	`82`
Address	`0xa9b0`

PhCopyStringZ

Ordinal	`83`
Address	`0xaf5e0`

PhCopyStringZFromBytes

Ordinal	`84`
Address	`0xaf690`

PhCopyStringZFromMultiByte

Ordinal	`85`
Address	`0xaf710`

PhCountStringZ

Ordinal	`86`
Address	`0xaf380`

PhCreateAlloc

Ordinal	`87`
Address	`0xaea90`

PhCreateBytes

Ordinal	`88`
Address	`0xb1190`

PhCreateBytesEx

Ordinal	`89`
Address	`0xb11b0`

PhCreateEMenu

Ordinal	`90`
Address	`0xc80f0`

PhCreateEMenuItem

Ordinal	`91`
Address	`0xc7990`

PhCreateFileStream

Ordinal	`92`
Address	`0xb4c80`

PhCreateFileStream2

Ordinal	`93`
Address	`0xb4d90`

PhCreateFileWin32

Ordinal	`94`
Address	`0xbf430`

PhCreateFileWin32Ex

Ordinal	`95`
Address	`0xbf470`

PhCreateHashtable

Ordinal	`96`
Address	`0xb3430`

PhCreateKey

Ordinal	`97`
Address	`0xbf0a0`

PhCreateList

Ordinal	`98`
Address	`0xb2f00`

PhCreateObject

Ordinal	`99`
Address	`0xae500`

PhCreateObjectType

Ordinal	`100`
Address	`0xae640`

PhCreateObjectTypeEx

Ordinal	`101`
Address	`0xae710`

PhCreateOpenFileDialog

Ordinal	`102`
Address	`0xac8b0`

PhCreatePointerList

Ordinal	`103`
Address	`0xb3260`

PhCreateProcess

Ordinal	`104`
Address	`0xaaca0`

PhCreateProcessAsUser

Ordinal	`105`
Address	`0xab1a0`

PhCreateProcessPropContext

Ordinal	`106`
Address	`0x694b0`

PhCreateProcessPropPageContext

Ordinal	`107`
Address	`0x69da0`

PhCreateProcessPropPageContextEx

Ordinal	`108`
Address	`0x69db0`

PhCreateProcessWin32

Ordinal	`109`
Address	`0xaaee0`

PhCreateProcessWin32Ex

Ordinal	`110`
Address	`0xaaf30`

PhCreateSaveFileDialog

Ordinal	`111`
Address	`0xac990`

PhCreateSecurityPage

Ordinal	`112`
Address	`0xcebb0`

PhCreateServiceListControl

Ordinal	`113`
Address	`0x8c8f0`

PhCreateSimpleHashtable

Ordinal	`114`
Address	`0xb3bf0`

PhCreateString

Ordinal	`115`
Address	`0xb0aa0`

PhCreateStringEx

Ordinal	`116`
Address	`0xb0ac0`

PhCreateSymbolProvider

Ordinal	`117`
Address	`0xb5b40`

PhCreateThread

Ordinal	`118`
Address	`0xaf090`

PhDecodeUnicodeDecoder

Ordinal	`119`
Address	`0xb1350`

PhDeleteArray

Ordinal	`120`
Address	`0xb2ce0`

PhDeleteAutoPool

Ordinal	`121`
Address	`0xaeb30`

PhDeleteBytesBuilder

Ordinal	`122`
Address	`0xb2440`

PhDeleteCallback

Ordinal	`123`
Address	`0xb3e30`

PhDeleteCircularBuffer_FLOAT

Ordinal	`124`
Address	`0xb32e0`

PhDeleteCircularBuffer_PVOID

Ordinal	`125`
Address	`0xb32e0`

PhDeleteCircularBuffer_ULONG

Ordinal	`126`
Address	`0xb32e0`

PhDeleteCircularBuffer_ULONG64

Ordinal	`127`
Address	`0xb32e0`

PhDeleteFastLock

Ordinal	`128`
Address	`0xcd6b0`

PhDeleteFileWin32

Ordinal	`129`
Address	`0xbf630`

PhDeleteFreeList

Ordinal	`130`
Address	`0xb3d40`

PhDeleteGraphState

Ordinal	`131`
Address	`0xd4750`

PhDeleteImageVersionInfo

Ordinal	`132`
Address	`0xa9cb0`

PhDeleteLayoutManager

Ordinal	`133`
Address	`0xc7430`

PhDeleteMemoryItemList

Ordinal	`134`
Address	`0x30e00`

PhDeleteStringBuilder

Ordinal	`135`
Address	`0xb2440`

PhDeleteTreeNewColumnMenu

Ordinal	`136`
Address	`0xbf20`

PhDeleteTreeNewFilterSupport

Ordinal	`137`
Address	`0xbf60`

PhDeleteWorkQueue

Ordinal	`138`
Address	`0xcdb20`

PhDereferenceObject

Ordinal	`139`
Address	`0xae580`

PhDereferenceObjectDeferDelete

Ordinal	`140`
Address	`0xae5a0`

PhDereferenceObjectEx

Ordinal	`141`
Address	`0xae5e0`

PhDereferenceObjects

Ordinal	`142`
Address	`0xa7960`

PhDereferenceProcessRecord

Ordinal	`143`
Address	`0x6f420`

PhDeselectAllProcessNodes

Ordinal	`144`
Address	`0x7a000`

PhDeselectAllServiceNodes

Ordinal	`145`
Address	`0x8f2f0`

PhDestroyEMenu

Ordinal	`146`
Address	`0xc81a0`

PhDestroyEMenuItem

Ordinal	`147`
Address	`0xc7ac0`

PhDisconnectNamedPipe

Ordinal	`148`
Address	`0xbf6d0`

PhDivideSinglesBySingle

Ordinal	`149`
Address	`0xb4aa0`

PhDoPropPageLayout

Ordinal	`150`
Address	`0x6a120`

PhDosErrorToNtStatus

Ordinal	`151`
Address	`0xde2d0`

PhDrainAutoPool

Ordinal	`152`
Address	`0xaebb0`

PhDrawGraphDirect

Ordinal	`153`
Address	`0xd2bc0`

PhDuplicateBytesZ

Ordinal	`154`
Address	`0xaf410`

PhDuplicateBytesZSafe

Ordinal	`155`
Address	`0xaf480`

PhDuplicateProcessNodeList

Ordinal	`156`
Address	`0x7a7b0`

PhDuplicateStringZ

Ordinal	`157`
Address	`0xaf500`

PhEditSecurity

Ordinal	`158`
Address	`0xced10`

PhEllipsisString

Ordinal	`159`
Address	`0xa8600`

PhEllipsisStringPath

Ordinal	`160`
Address	`0xa86e0`

PhEncodeUnicode

Ordinal	`161`
Address	`0xb16f0`

PhEnumAvlTree

Ordinal	`162`
Address	`0xdebc0`

PhEnumDirectoryFile

Ordinal	`163`
Address	`0xbd3f0`

PhEnumDirectoryObjects

Ordinal	`164`
Address	`0xbd230`

PhEnumFileStreams

Ordinal	`165`
Address	`0xbd550`

PhEnumGenericModules

Ordinal	`166`
Address	`0xbeb00`

PhEnumHandles

Ordinal	`167`
Address	`0xbc870`

PhEnumHandlesEx

Ordinal	`168`
Address	`0xbc970`

PhEnumHashtable

Ordinal	`169`
Address	`0xb3920`

PhEnumKernelModules

Ordinal	`170`
Address	`0xbc350`

PhEnumObjectTypes

Ordinal	`171`
Address	`0xc4dc0`

PhEnumPagefiles

Ordinal	`172`
Address	`0xbca70`

PhEnumPointerListEx

Ordinal	`173`
Address	`0xb3390`

PhEnumProcessEnvironmentVariables

Ordinal	`174`
Address	`0xb9410`

PhEnumProcessItems

Ordinal	`175`
Address	`0x6b1e0`

PhEnumProcessModules

Ordinal	`176`
Address	`0xbba50`

PhEnumProcessModules32

Ordinal	`177`
Address	`0xbbfd0`

PhEnumProcessModules32Ex

Ordinal	`178`
Address	`0xbc000`

PhEnumProcessModulesEx

Ordinal	`179`
Address	`0xbba80`

PhEnumProcesses

Ordinal	`180`
Address	`0xbc4f0`

PhEnumProcessesEx

Ordinal	`181`
Address	`0xbc500`

PhEnumProcessesForSession

Ordinal	`182`
Address	`0xbc600`

PhEnumServices

Ordinal	`183`
Address	`0xc21f0`

PhEqualStringRef

Ordinal	`184`
Address	`0xafc40`

PhEscapeCommandLinePart

Ordinal	`185`
Address	`0xadd90`

PhEscapeStringForMenuPrefix

Ordinal	`186`
Address	`0xa89e0`

PhExecuteRunAsCommand2

Ordinal	`187`
Address	`0x85860`

PhExpandAllProcessNodes

Ordinal	`188`
Address	`0x7a020`

PhExpandEnvironmentStrings

Ordinal	`189`
Address	`0xaa270`

PhExponentiate

Ordinal	`190`
Address	`0xb4130`

PhExponentiate64

Ordinal	`191`
Address	`0xb4150`

PhFillMemoryUlong

Ordinal	`192`
Address	`0xb49e0`

PhFinalArrayItems

Ordinal	`193`
Address	`0xb2d00`

PhFinalBytesBuilderBytes

Ordinal	`194`
Address	`0xb2460`

PhFinalHash

Ordinal	`195`
Address	`0xad740`

PhFinalStringBuilderString

Ordinal	`196`
Address	`0xb2460`

PhFindCharInStringRef

Ordinal	`197`
Address	`0xafdb0`

PhFindEMenuItem

Ordinal	`198`
Address	`0xc7af0`

PhFindElementAvlTree

Ordinal	`199`
Address	`0xde8d0`

PhFindEntryHashtable

Ordinal	`200`
Address	`0xb3960`

PhFindIntegerSiKeyValuePairs

Ordinal	`201`
Address	`0xa8200`

PhFindItemList

Ordinal	`202`
Address	`0xb30d0`

PhFindItemPointerList

Ordinal	`203`
Address	`0xb33e0`

PhFindItemSimpleHashtable

Ordinal	`204`
Address	`0xb3c40`

PhFindLastCharInStringRef

Ordinal	`205`
Address	`0xafec0`

PhFindListViewItemByFlags

Ordinal	`206`
Address	`0xc56a0`

PhFindListViewItemByParam

Ordinal	`207`
Address	`0xc56c0`

PhFindLoaderEntry

Ordinal	`208`
Address	`0xaa650`

PhFindNetworkNode

Ordinal	`209`
Address	`0x3c400`

PhFindPlugin

Ordinal	`210`
Address	`0x66500`

PhFindProcessInformation

Ordinal	`211`
Address	`0xbc6f0`

PhFindProcessInformationByImageName

Ordinal	`212`
Address	`0xbc710`

PhFindProcessNode

Ordinal	`213`
Address	`0x728c0`

PhFindProcessRecord

Ordinal	`214`
Address	`0x6f4c0`

PhFindServiceNode

Ordinal	`215`
Address	`0x8de10`

PhFindStringInStringRef

Ordinal	`216`
Address	`0xaffe0`

PhFindStringSiKeyValuePairs

Ordinal	`217`
Address	`0xa8280`

PhFlushFileStream

Ordinal	`218`
Address	`0xb5380`

PhFormat

Ordinal	`219`
Address	`0xc9da0`

PhFormatDate

Ordinal	`220`
Address	`0xa8c80`

PhFormatDateTime

Ordinal	`221`
Address	`0xa8e60`

PhFormatDecimal

Ordinal	`222`
Address	`0xa9500`

PhFormatGuid

Ordinal	`223`
Address	`0xa9740`

PhFormatImageVersionInfo

Ordinal	`224`
Address	`0xa9d40`

PhFormatLogEntry

Ordinal	`225`
Address	`0x205b0`

PhFormatNativeKeyName

Ordinal	`226`
Address	`0xc2fd0`

PhFormatSize

Ordinal	`227`
Address	`0xa9700`

PhFormatString

Ordinal	`228`
Address	`0xb1070`

PhFormatString_V

Ordinal	`229`
Address	`0xb10a0`

PhFormatTime

Ordinal	`230`
Address	`0xa8d70`

PhFormatTimeSpan

Ordinal	`231`
Address	`0xa8fc0`

PhFormatTimeSpanRelative

Ordinal	`232`
Address	`0xa9050`

PhFormatToBuffer

Ordinal	`233`
Address	`0xcb360`

PhFormatUInt64

Ordinal	`234`
Address	`0xa94d0`

PhFree

Ordinal	`235`
Address	`0x51940`

PhFreeFileDialog

Ordinal	`236`
Address	`0xaca70`

PhFreePage

Ordinal	`237`
Address	`0xaf340`

PhFreeToFreeList

Ordinal	`238`
Address	`0xb3dd0`

PhGenerateGuid

Ordinal	`239`
Address	`0xa82b0`

PhGenerateGuidFromName

Ordinal	`240`
Address	`0xa8380`

PhGenerateRandomAlphaString

Ordinal	`241`
Address	`0xa8570`

PhGetAccessEntries

Ordinal	`242`
Address	`0xce610`

PhGetAccessString

Ordinal	`243`
Address	`0xce930`

PhGetApplicationDirectory

Ordinal	`244`
Address	`0xaaa50`

PhGetApplicationFileName

Ordinal	`245`
Address	`0xaaa30`

PhGetBaseName

Ordinal	`246`
Address	`0xaa410`

PhGetClientIdName

Ordinal	`247`
Address	`0x6a8e0`

PhGetClientIdNameEx

Ordinal	`248`
Address	`0x6a9e0`

PhGetComboBoxString

Ordinal	`249`
Address	`0xc60a0`

PhGetDllFileName

Ordinal	`250`
Address	`0xaa910`

PhGetDrawInfoGraphBuffers

Ordinal	`251`
Address	`0xd4650`

PhGetFileDialogFileName

Ordinal	`252`
Address	`0xad0a0`

PhGetFileDialogFilterIndex

Ordinal	`253`
Address	`0xace70`

PhGetFileDialogOptions

Ordinal	`254`
Address	`0xacb80`

PhGetFileName

Ordinal	`255`
Address	`0xbdee0`

PhGetFileShellIcon

Ordinal	`256`
Address	`0xc6da0`

PhGetFileSize

Ordinal	`257`
Address	`0xba610`

PhGetFileVersionInfo

Ordinal	`258`
Address	`0xa9790`

PhGetFileVersionInfoLangCodePage

Ordinal	`259`
Address	`0xa9830`

PhGetFileVersionInfoString

Ordinal	`260`
Address	`0xa9870`

PhGetFileVersionInfoString2

Ordinal	`261`
Address	`0xa98d0`

PhGetFilterSupportNetworkTreeList

Ordinal	`262`
Address	`0x3c150`

PhGetFilterSupportProcessTreeList

Ordinal	`263`
Address	`0x722c0`

PhGetFilterSupportServiceTreeList

Ordinal	`264`
Address	`0x8dba0`

PhGetFullPath

Ordinal	`265`
Address	`0xaa0f0`

PhGetGeneralCallback

Ordinal	`266`
Address	`0x665d0`

PhGetGenericTreeNewLines

Ordinal	`267`
Address	`0xc95c0`

PhGetGlobalWorkQueue

Ordinal	`268`
Address	`0xcde30`

PhGetHandleInformation

Ordinal	`269`
Address	`0xc48e0`

PhGetHandleInformationEx

Ordinal	`270`
Address	`0xc49e0`

PhGetIntegerPairSetting

Ordinal	`271`
Address	`0x8aac0`

PhGetIntegerSetting

Ordinal	`272`
Address	`0x8a9a0`

PhGetJobProcessIdList

Ordinal	`273`
Address	`0xba070`

PhGetKernelFileName

Ordinal	`274`
Address	`0xbc400`

PhGetKnownLocation

Ordinal	`275`
Address	`0xaaac0`

PhGetLineFromAddress

Ordinal	`276`
Address	`0xb6140`

PhGetListBoxString

Ordinal	`277`
Address	`0xc6230`

PhGetListViewContextMenuPoint

Ordinal	`278`
Address	`0xaaf0`

PhGetListViewItemImageIndex

Ordinal	`279`
Address	`0xc56f0`

PhGetListViewItemParam

Ordinal	`280`
Address	`0xc5750`

PhGetMessage

Ordinal	`281`
Address	`0xa79b0`

PhGetModuleFromAddress

Ordinal	`282`
Address	`0xb62f0`

PhGetNtMessage

Ordinal	`283`
Address	`0xa7a80`

PhGetObjectSecurity

Ordinal	`284`
Address	`0xb8870`

PhGetObjectType

Ordinal	`285`
Address	`0xae630`

PhGetObjectTypeInformation

Ordinal	`286`
Address	`0xae800`

PhGetOwnTokenAttributes

Ordinal	`287`
Address	`0xb8480`

PhGetPhVersion

Ordinal	`288`
Address	`0xafe0`

PhGetPhVersionNumbers

Ordinal	`289`
Address	`0xb050`

PhGetPluginCallback

Ordinal	`290`
Address	`0x665a0`

PhGetPluginInformation

Ordinal	`291`
Address	`0x66590`

PhGetPositionFileStream

Ordinal	`292`
Address	`0xb5400`

PhGetPrimeNumber

Ordinal	`293`
Address	`0xb4060`

PhGetProcedureAddressRemote

Ordinal	`294`
Address	`0xbc1a0`

PhGetProcessCommandLine

Ordinal	`295`
Address	`0xb8e40`

PhGetProcessDepStatus

Ordinal	`296`
Address	`0xb91a0`

PhGetProcessEnvironment

Ordinal	`297`
Address	`0xb9200`

PhGetProcessImageFileName

Ordinal	`298`
Address	`0xb8a90`

PhGetProcessImageFileNameByProcessId

Ordinal	`299`
Address	`0xbcb50`

PhGetProcessImageFileNameWin32

Ordinal	`300`
Address	`0xb8af0`

PhGetProcessIsDotNet

Ordinal	`301`
Address	`0xbcc50`

PhGetProcessIsDotNetEx

Ordinal	`302`
Address	`0xbce80`

PhGetProcessIsSuspended

Ordinal	`303`
Address	`0x8ed0`

PhGetProcessKnownType

Ordinal	`304`
Address	`0x9510`

PhGetProcessMappedFileName

Ordinal	`305`
Address	`0xb94c0`

PhGetProcessPebString

Ordinal	`306`
Address	`0xb8b50`

PhGetProcessPriorityClassString

Ordinal	`307`
Address	`0x6ab50`

PhGetProcessWindowTitle

Ordinal	`308`
Address	`0xb8fd0`

PhGetProcessWorkingSetInformation

Ordinal	`309`
Address	`0xb95c0`

PhGetProcessWsCounters

Ordinal	`310`
Address	`0xb96c0`

PhGetProtocolTypeName

Ordinal	`311`
Address	`0x3ed40`

PhGetScalableIntegerPairSetting

Ordinal	`312`
Address	`0x8ac10`

PhGetSeObjectSecurity

Ordinal	`313`
Address	`0xcf520`

PhGetSelectedListViewItemParam

Ordinal	`314`
Address	`0xc63f0`

PhGetSelectedListViewItemParams

Ordinal	`315`
Address	`0xc6460`

PhGetSelectedProcessItem

Ordinal	`316`
Address	`0x79f10`

PhGetSelectedProcessItems

Ordinal	`317`
Address	`0x79f40`

PhGetSelectedServiceItem

Ordinal	`318`
Address	`0x8f200`

PhGetSelectedServiceItems

Ordinal	`319`
Address	`0x8f230`

PhGetServiceChange

Ordinal	`320`
Address	`0x907a0`

PhGetServiceConfig

Ordinal	`321`
Address	`0xc23e0`

PhGetServiceDelayedAutoStart

Ordinal	`322`
Address	`0xc25f0`

PhGetServiceDescription

Ordinal	`323`
Address	`0xc2580`

PhGetServiceErrorControlInteger

Ordinal	`324`
Address	`0xc2850`

PhGetServiceErrorControlString

Ordinal	`325`
Address	`0xc2810`

PhGetServiceNameFromTag

Ordinal	`326`
Address	`0xc28c0`

PhGetServiceStartTypeInteger

Ordinal	`327`
Address	`0xc27a0`

PhGetServiceStartTypeString

Ordinal	`328`
Address	`0xc2760`

PhGetServiceStateString

Ordinal	`329`
Address	`0xc2670`

PhGetServiceTypeInteger

Ordinal	`330`
Address	`0xc26f0`

PhGetServiceTypeString

Ordinal	`331`
Address	`0xc26b0`

PhGetSidFullName

Ordinal	`332`
Address	`0xcc7b0`

PhGetStatisticsTime

Ordinal	`333`
Address	`0x6d650`

PhGetStatisticsTimeString

Ordinal	`334`
Address	`0x6d6c0`

PhGetStockApplicationIcon

Ordinal	`335`
Address	`0xc6b40`

PhGetStringSetting

Ordinal	`336`
Address	`0x8add0`

PhGetSymbolFromAddress

Ordinal	`337`
Address	`0xb6490`

PhGetSymbolFromName

Ordinal	`338`
Address	`0xb6b20`

PhGetSystemDirectory

Ordinal	`339`
Address	`0xaa470`

PhGetSystemRoot

Ordinal	`340`
Address	`0xaa5d0`

PhGetTcpStateName

Ordinal	`341`
Address	`0x3ed80`

PhGetThreadServiceTag

Ordinal	`342`
Address	`0xc2990`

PhGetTokenGroups

Ordinal	`343`
Address	`0xba240`

PhGetTokenIntegrityLevel

Ordinal	`344`
Address	`0xba3d0`

PhGetTokenOwner

Ordinal	`345`
Address	`0xba220`

PhGetTokenPrimaryGroup

Ordinal	`346`
Address	`0xba230`

PhGetTokenPrivileges

Ordinal	`347`
Address	`0xba250`

PhGetTokenUser

Ordinal	`348`
Address	`0xba210`

PhGetTreeNewText

Ordinal	`349`
Address	`0xc9340`

PhGetWin32Message

Ordinal	`350`
Address	`0xa7bc0`

PhGetWindowText

Ordinal	`351`
Address	`0xc5e50`

PhGetWindowTextEx

Ordinal	`352`
Address	`0xc5e70`

PhGlobalDpi

Ordinal	`353`
Address	`0x155b6c`

PhGraphStateGetDrawInfo

Ordinal	`354`
Address	`0xd47e0`

PhHandleListViewNotifyForCopy

Ordinal	`355`
Address	`0xaaa0`

PhHandleTreeNewColumnMenu

Ordinal	`356`
Address	`0xbd80`

PhHashBytes

Ordinal	`357`
Address	`0xb3ae0`

PhHashStringRef

Ordinal	`358`
Address	`0xb3b10`

PhHeapHandle

Ordinal	`359`
Address	`0x15de68`

PhHexStringToBuffer

Ordinal	`360`
Address	`0xb4180`

PhIconToBitmap

Ordinal	`361`
Address	`0xddf80`

PhImpersonateClientOfNamedPipe

Ordinal	`362`
Address	`0xbfa60`

PhIndexOfEMenuItem

Ordinal	`363`
Address	`0xc7e90`

PhInitializeArray

Ordinal	`364`
Address	`0xb2c90`

PhInitializeAutoPool

Ordinal	`365`
Address	`0xaead0`

PhInitializeAvlTree

Ordinal	`366`
Address	`0xde410`

PhInitializeBytesBuilder

Ordinal	`367`
Address	`0xb2970`

PhInitializeCallback

Ordinal	`368`
Address	`0xb3e10`

PhInitializeCircularBuffer_FLOAT

Ordinal	`369`
Address	`0xcf6d0`

PhInitializeCircularBuffer_PVOID

Ordinal	`370`
Address	`0xcf900`

PhInitializeCircularBuffer_ULONG

Ordinal	`371`
Address	`0xcf6d0`

PhInitializeCircularBuffer_ULONG64

Ordinal	`372`
Address	`0xcf900`

PhInitializeFastLock

Ordinal	`373`
Address	`0xcd6a0`

PhInitializeFreeList

Ordinal	`374`
Address	`0xb3d00`

PhInitializeGraphState

Ordinal	`375`
Address	`0xd4730`

PhInitializeHash

Ordinal	`376`
Address	`0xad620`

PhInitializeImageVersionInfo

Ordinal	`377`
Address	`0xa9a70`

PhInitializeLayoutManager

Ordinal	`378`
Address	`0xc7380`

PhInitializeStringBuilder

Ordinal	`379`
Address	`0xb23c0`

PhInitializeTreeNewColumnMenu

Ordinal	`380`
Address	`0xb8f0`

PhInitializeTreeNewFilterSupport

Ordinal	`381`
Address	`0xbf50`

PhInitializeWorkQueue

Ordinal	`382`
Address	`0xcd9f0`

PhInitializeWorkQueueEnvironment

Ordinal	`383`
Address	`0xcde10`

PhInjectDllProcess

Ordinal	`384`
Address	`0xb97a0`

PhInsertEMenuItem

Ordinal	`385`
Address	`0xc7ec0`

PhInsertItemList

Ordinal	`386`
Address	`0xb3100`

PhInsertItemsList

Ordinal	`387`
Address	`0xb3120`

PhInsertStringBuilder

Ordinal	`388`
Address	`0xb27f0`

PhInsertStringBuilder2

Ordinal	`389`
Address	`0xb2800`

PhInsertStringBuilderEx

Ordinal	`390`
Address	`0xb2850`

PhIntegerToString64

Ordinal	`391`
Address	`0xb4720`

PhInvalidateAllProcessNodes

Ordinal	`392`
Address	`0x7a0b0`

PhInvokeCallback

Ordinal	`393`
Address	`0xb3f90`

PhIsExecutablePacked

Ordinal	`394`
Address	`0xad460`

PhIsExecutingInWow64

Ordinal	`395`
Address	`0x1570`

PhLayoutManagerLayout

Ordinal	`396`
Address	`0xc78c0`

PhLibImageBase

Ordinal	`397`
Address	`0x15dff0`

PhListenNamedPipe

Ordinal	`398`
Address	`0xbf690`

PhLoadIcon

Ordinal	`399`
Address	`0xc6750`

PhLoadListViewColumnSettings

Ordinal	`400`
Address	`0xc5850`

PhLoadListViewColumnsFromSetting

Ordinal	`401`
Address	`0xaf40`

PhLoadModuleSymbolProvider

Ordinal	`402`
Address	`0xb6cf0`

PhLoadResourceEMenuItem

Ordinal	`403`
Address	`0xc8770`

PhLoadSymbolProviderOptions

Ordinal	`404`
Address	`0xa860`

PhLoadWindowPlacementFromSetting

Ordinal	`405`
Address	`0xac80`

PhLocalTimeToSystemTime

Ordinal	`406`
Address	`0xaf210`

PhLockFileStream

Ordinal	`407`
Address	`0xb5560`

PhLogMessageEntry

Ordinal	`408`
Address	`0x20530`

PhLoggedCallback

Ordinal	`409`
Address	`0x152cb8`

PhLookupMemoryItemList

Ordinal	`410`
Address	`0x30e50`

PhLookupName

Ordinal	`411`
Address	`0xcc630`

PhLookupPrivilegeDisplayName

Ordinal	`412`
Address	`0xcc440`

PhLookupPrivilegeName

Ordinal	`413`
Address	`0xcc3d0`

PhLookupPrivilegeValue

Ordinal	`414`
Address	`0xcc4c0`

PhLookupSid

Ordinal	`415`
Address	`0xcc520`

PhLowerBoundElementAvlTree

Ordinal	`416`
Address	`0xde940`

PhLowerDualBoundElementAvlTree

Ordinal	`417`
Address	`0xdea00`

PhMainWndHandle

Ordinal	`418`
Address	`0x15f2b8`

PhMapFlags1

Ordinal	`419`
Address	`0xac6a0`

PhMapFlags2

Ordinal	`420`
Address	`0xac700`

PhMatchWildcards

Ordinal	`421`
Address	`0xa8860`

PhMaximumElementAvlTree

Ordinal	`422`
Address	`0xdeaf0`

PhMinimumElementAvlTree

Ordinal	`423`
Address	`0xdeac0`

PhModalPropertySheet

Ordinal	`424`
Address	`0xc7100`

PhModifyEMenuItem

Ordinal	`425`
Address	`0xc8a30`

PhNetworkItemAddedEvent

Ordinal	`426`
Address	`0x1531d0`

PhNetworkItemModifiedEvent

Ordinal	`427`
Address	`0x153190`

PhNetworkItemRemovedEvent

Ordinal	`428`
Address	`0x1531b0`

PhNetworkItemsUpdatedEvent

Ordinal	`429`
Address	`0x1531f0`

PhNtStatusFileNotFound

Ordinal	`430`
Address	`0xde3d0`

PhNtStatusToDosError

Ordinal	`431`
Address	`0xde2b0`

PhOpenKey

Ordinal	`432`
Address	`0xbf180`

PhOpenLsaPolicy

Ordinal	`433`
Address	`0xcc300`

PhOpenProcess

Ordinal	`434`
Address	`0xb8680`

PhOpenService

Ordinal	`435`
Address	`0xc2370`

PhOpenThread

Ordinal	`436`
Address	`0xb8760`

PhOpenThreadProcess

Ordinal	`437`
Address	`0xb87b0`

PhOsVersion

Ordinal	`438`
Address	`0x15dec0`

PhParseCommandLine

Ordinal	`439`
Address	`0xada70`

PhParseCommandLineFuzzy

Ordinal	`440`
Address	`0xae060`

PhParseCommandLinePart

Ordinal	`441`
Address	`0xad7e0`

PhPeekNamedPipe

Ordinal	`442`
Address	`0xbf730`

PhPluginAddMenuHook

Ordinal	`443`
Address	`0x66950`

PhPluginAddMenuItem

Ordinal	`444`
Address	`0x66620`

PhPluginAddTreeNewColumn

Ordinal	`445`
Address	`0x66b50`

PhPluginCallPhSvc

Ordinal	`446`
Address	`0x66c40`

PhPluginCreateEMenuItem

Ordinal	`447`
Address	`0x66870`

PhPluginEnableTreeNewNotify

Ordinal	`448`
Address	`0x66c00`

PhPluginGetObjectExtension

Ordinal	`449`
Address	`0x66ba0`

PhPluginGetSystemStatistics

Ordinal	`450`
Address	`0x666a0`

PhPluginQueryPhSvc

Ordinal	`451`
Address	`0x66c10`

PhPluginRegisterIcon

Ordinal	`452`
Address	`0x66bd0`

PhPluginReserveIds

Ordinal	`453`
Address	`0x66600`

PhPluginSetObjectExtension

Ordinal	`454`
Address	`0x66b90`

PhPredecessorElementAvlTree

Ordinal	`455`
Address	`0xdeb70`

PhPrintTimeSpan

Ordinal	`456`
Address	`0xb4780`

PhProcessAddedEvent

Ordinal	`457`
Address	`0x153928`

PhProcessModifiedEvent

Ordinal	`458`
Address	`0x153948`

PhProcessRemovedEvent

Ordinal	`459`
Address	`0x153908`

PhProcessesUpdatedEvent

Ordinal	`460`
Address	`0x153968`

PhPropPageDlgProcDestroy

Ordinal	`461`
Address	`0x69f10`

PhPropPageDlgProcHeader

Ordinal	`462`
Address	`0x69e80`

PhQueryFullAttributesFileWin32

Ordinal	`463`
Address	`0xbf5a0`

PhQueryKey

Ordinal	`464`
Address	`0xbf230`

PhQueryMemoryItemList

Ordinal	`465`
Address	`0x31a80`

PhQueryRegistryString

Ordinal	`466`
Address	`0xac5f0`

PhQueryServiceVariableSize

Ordinal	`467`
Address	`0xc24a0`

PhQuerySystemTime

Ordinal	`468`
Address	`0xaf170`

PhQueryTimeZoneBias

Ordinal	`469`
Address	`0xaf1a0`

PhQueryValueKey

Ordinal	`470`
Address	`0xbf310`

PhQueueItemWorkQueue

Ordinal	`471`
Address	`0xcdca0`

PhQueueItemWorkQueueEx

Ordinal	`472`
Address	`0xcdcc0`

PhReAllocate

Ordinal	`473`
Address	`0xaf290`

PhReAllocateSafe

Ordinal	`474`
Address	`0xaf2b0`

PhReadFileStream

Ordinal	`475`
Address	`0xb5010`

PhReferenceEmptyString

Ordinal	`476`
Address	`0xb0b40`

PhReferenceNetworkItem

Ordinal	`477`
Address	`0x3da90`

PhReferenceObject

Ordinal	`478`
Address	`0xae530`

PhReferenceObjectEx

Ordinal	`479`
Address	`0xae540`

PhReferenceObjectSafe

Ordinal	`480`
Address	`0xae550`

PhReferenceObjects

Ordinal	`481`
Address	`0xa7930`

PhReferenceProcessItem

Ordinal	`482`
Address	`0x6b140`

PhReferenceProcessItemForParent

Ordinal	`483`
Address	`0x6f8f0`

PhReferenceProcessItemForRecord

Ordinal	`484`
Address	`0x6f9b0`

PhReferenceProcessRecord

Ordinal	`485`
Address	`0x6f3d0`

PhReferenceProcessRecordForStatistics

Ordinal	`486`
Address	`0x6f410`

PhReferenceProcessRecordSafe

Ordinal	`487`
Address	`0x6f3e0`

PhReferenceServiceItem

Ordinal	`488`
Address	`0x90650`

PhRegisterCallback

Ordinal	`489`
Address	`0xb3e40`

PhRegisterCallbackEx

Ordinal	`490`
Address	`0xb3e60`

PhRegisterDialog

Ordinal	`491`
Address	`0x21d70`

PhRegisterMessageLoopFilter

Ordinal	`492`
Address	`0x21e90`

PhRegisterPlugin

Ordinal	`493`
Address	`0x662e0`

PhRemoveAllEMenuItems

Ordinal	`494`
Address	`0xc80a0`

PhRemoveEMenuItem

Ordinal	`495`
Address	`0xc7fd0`

PhRemoveElementAvlTree

Ordinal	`496`
Address	`0xde760`

PhRemoveEntryHashtable

Ordinal	`497`
Address	`0xb39f0`

PhRemoveItemArray

Ordinal	`498`
Address	`0xb2e70`

PhRemoveItemList

Ordinal	`499`
Address	`0xb31d0`

PhRemoveItemPointerList

Ordinal	`500`
Address	`0xb3410`

PhRemoveItemSimpleHashtable

Ordinal	`501`
Address	`0xb3ce0`

PhRemoveItemsArray

Ordinal	`502`
Address	`0xb2eb0`

PhRemoveItemsList

Ordinal	`503`
Address	`0xb3210`

PhRemoveListViewItem

Ordinal	`504`
Address	`0xc57b0`

PhRemoveStringBuilder

Ordinal	`505`
Address	`0xb2910`

PhRemoveTreeNewFilter

Ordinal	`506`
Address	`0xc070`

PhResizeArray

Ordinal	`507`
Address	`0xb2d10`

PhResizeCircularBuffer_FLOAT

Ordinal	`508`
Address	`0xcf730`

PhResizeCircularBuffer_PVOID

Ordinal	`509`
Address	`0xcf960`

PhResizeCircularBuffer_ULONG

Ordinal	`510`
Address	`0xcf730`

PhResizeCircularBuffer_ULONG64

Ordinal	`511`
Address	`0xcf960`

PhResizeList

Ordinal	`512`
Address	`0xb2f90`

PhResolveDevicePrefix

Ordinal	`513`
Address	`0xbdb40`

PhRoundUpToPowerOfTwo

Ordinal	`514`
Address	`0xb4100`

PhSaveListViewColumnSettings

Ordinal	`515`
Address	`0xc5ce0`

PhSaveListViewColumnsToSetting

Ordinal	`516`
Address	`0xaf90`

PhSaveWindowPlacementToSetting

Ordinal	`517`
Address	`0xae20`

PhSearchOnlineString

Ordinal	`518`
Address	`0xa530`

PhSeekFileStream

Ordinal	`519`
Address	`0xb54f0`

PhSelectAndEnsureVisibleProcessNode

Ordinal	`520`
Address	`0x7a150`

PhSelectAndEnsureVisibleServiceNode

Ordinal	`521`
Address	`0x8f310`

PhSelectComboBoxString

Ordinal	`522`
Address	`0xc61c0`

PhServiceAddedEvent

Ordinal	`523`
Address	`0x1554f0`

PhServiceModifiedEvent

Ordinal	`524`
Address	`0x155530`

PhServiceRemovedEvent

Ordinal	`525`
Address	`0x155510`

PhServicesUpdatedEvent

Ordinal	`526`
Address	`0x155550`

PhSetClipboardString

Ordinal	`527`
Address	`0xc6f30`

PhSetControlTheme

Ordinal	`528`
Address	`0xc55b0`

PhSetExtendedListView

Ordinal	`529`
Address	`0xccb10`

PhSetFileDialogFileName

Ordinal	`530`
Address	`0xad1c0`

PhSetFileDialogFilter

Ordinal	`531`
Address	`0xaceb0`

PhSetFileDialogOptions

Ordinal	`532`
Address	`0xacc60`

PhSetFileSize

Ordinal	`533`
Address	`0xba650`

PhSetFlagsAllEMenuItems

Ordinal	`534`
Address	`0xc89f0`

PhSetFlagsEMenuItem

Ordinal	`535`
Address	`0xc89a0`

PhSetGraphText

Ordinal	`536`
Address	`0xd3500`

PhSetHeaderSortIcon

Ordinal	`537`
Address	`0xcd1c0`

PhSetImageListBitmap

Ordinal	`538`
Address	`0xc6590`

PhSetIntegerPairSetting

Ordinal	`539`
Address	`0x8b060`

PhSetIntegerSetting

Ordinal	`540`
Address	`0x8af30`

PhSetListViewItemImageIndex

Ordinal	`541`
Address	`0xc57d0`

PhSetListViewSubItem

Ordinal	`542`
Address	`0xc5810`

PhSetObjectSecurity

Ordinal	`543`
Address	`0xb8970`

PhSetOptionsSymbolProvider

Ordinal	`544`
Address	`0xb7010`

PhSetScalableIntegerPairSetting

Ordinal	`545`
Address	`0x8b190`

PhSetScalableIntegerPairSetting2

Ordinal	`546`
Address	`0x8b300`

PhSetSeObjectSecurity

Ordinal	`547`
Address	`0xcf5d0`

PhSetSearchPathSymbolProvider

Ordinal	`548`
Address	`0xb70f0`

PhSetSelectThreadIdProcessPropContext

Ordinal	`549`
Address	`0x69690`

PhSetServiceDelayedAutoStart

Ordinal	`550`
Address	`0xc2640`

PhSetStateAllListViewItems

Ordinal	`551`
Address	`0xc6350`

PhSetStringSetting

Ordinal	`552`
Address	`0x8b340`

PhSetStringSetting2

Ordinal	`553`
Address	`0x8b4b0`

PhSetTokenIsVirtualizationEnabled

Ordinal	`554`
Address	`0xba3a0`

PhSetTokenPrivilege

Ordinal	`555`
Address	`0xba290`

PhSetTokenPrivilege2

Ordinal	`556`
Address	`0xba340`

PhSetTokenSessionId

Ordinal	`557`
Address	`0xba260`

PhShellExecute

Ordinal	`558`
Address	`0xabde0`

PhShellExecuteEx

Ordinal	`559`
Address	`0xabe50`

PhShellExecuteUserString

Ordinal	`560`
Address	`0xa560`

PhShellExploreFile

Ordinal	`561`
Address	`0xabf90`

PhShellOpenKey

Ordinal	`562`
Address	`0xac3b0`

PhShellProcessHacker

Ordinal	`563`
Address	`0xb1e0`

PhShellProperties

Ordinal	`564`
Address	`0xac160`

PhShowChooseProcessDialog

Ordinal	`565`
Address	`0xdf20`

PhShowConfirmMessage

Ordinal	`566`
Address	`0xa7f50`

PhShowContinueStatus

Ordinal	`567`
Address	`0xa7e20`

PhShowEMenu

Ordinal	`568`
Address	`0xc87d0`

PhShowFileDialog

Ordinal	`569`
Address	`0xacb00`

PhShowIconNotification

Ordinal	`570`
Address	`0x29a00`

PhShowMessage

Ordinal	`571`
Address	`0xa7c70`

PhShowMessage_V

Ordinal	`572`
Address	`0xa7c90`

PhShowProcessAffinityDialog2

Ordinal	`573`
Address	`0x6600`

PhShowProcessProperties

Ordinal	`574`
Address	`0x6a650`

PhShowProcessRecordDialog

Ordinal	`575`
Address	`0x6fa50`

PhShowStatus

Ordinal	`576`
Address	`0xa7d10`

PhSiSetColorsGraphDrawInfo

Ordinal	`577`
Address	`0x93840`

PhSiSizeLabelYFunction

Ordinal	`578`
Address	`0x93b10`

PhSidToStringSid

Ordinal	`579`
Address	`0xcc970`

PhSplitStringRefAtChar

Ordinal	`580`
Address	`0xb02c0`

PhSplitStringRefAtLastChar

Ordinal	`581`
Address	`0xb0360`

PhSplitStringRefAtString

Ordinal	`582`
Address	`0xb0400`

PhSplitStringRefEx

Ordinal	`583`
Address	`0xb04a0`

PhStackWalk

Ordinal	`584`
Address	`0xb7aa0`

PhStdGetClientIdName

Ordinal	`585`
Address	`0xc3620`

PhStdGetObjectSecurity

Ordinal	`586`
Address	`0xcf350`

PhStdSetObjectSecurity

Ordinal	`587`
Address	`0xcf450`

PhStringToDouble

Ordinal	`588`
Address	`0xb4690`

PhStringToInteger64

Ordinal	`589`
Address	`0xb42e0`

PhSuccessorElementAvlTree

Ordinal	`590`
Address	`0xdeb20`

PhSvcCallChangeServiceConfig

Ordinal	`591`
Address	`0x60e70`

PhSvcCallChangeServiceConfig2

Ordinal	`592`
Address	`0x612f0`

PhSvcCallPostMessage

Ordinal	`593`
Address	`0x61ab0`

PhSvcCallSendMessage

Ordinal	`594`
Address	`0x61b20`

PhSystemBasicInformation

Ordinal	`595`
Address	`0x15de80`

PhSystemTimeToLocalTime

Ordinal	`596`
Address	`0xaf1d0`

PhTerminateProcess

Ordinal	`597`
Address	`0xb89c0`

PhTransceiveNamedPipe

Ordinal	`598`
Address	`0xbf870`

PhTrimStringRef

Ordinal	`599`
Address	`0xb0850`

PhUiCloseConnections

Ordinal	`600`
Address	`0x4ff0`

PhUiCloseHandles

Ordinal	`601`
Address	`0x6210`

PhUiConnectSession

Ordinal	`602`
Address	`0x2030`

PhUiConnectToPhSvc

Ordinal	`603`
Address	`0x1880`

PhUiConnectToPhSvcEx

Ordinal	`604`
Address	`0x19e0`

PhUiContinueService

Ordinal	`605`
Address	`0x4990`

PhUiDebugProcess

Ordinal	`606`
Address	`0x36d0`

PhUiDeleteService

Ordinal	`607`
Address	`0x4e40`

PhUiDetachFromDebuggerProcess

Ordinal	`608`
Address	`0x3e40`

PhUiDisconnectFromPhSvc

Ordinal	`609`
Address	`0x1b80`

PhUiDisconnectSession

Ordinal	`610`
Address	`0x2280`

PhUiFreeMemory

Ordinal	`611`
Address	`0x6040`

PhUiHibernateComputer

Ordinal	`612`
Address	`0x1df0`

PhUiInjectDllProcess

Ordinal	`613`
Address	`0x3ff0`

PhUiLockComputer

Ordinal	`614`
Address	`0x1c40`

PhUiLogoffComputer

Ordinal	`615`
Address	`0x1cf0`

PhUiLogoffSession

Ordinal	`616`
Address	`0x2330`

PhUiPauseService

Ordinal	`617`
Address	`0x4b20`

PhUiReduceWorkingSetProcesses

Ordinal	`618`
Address	`0x3ad0`

PhUiRestartComputer

Ordinal	`619`
Address	`0x1e40`

PhUiRestartProcess

Ordinal	`620`
Address	`0x3390`

PhUiResumeProcesses

Ordinal	`621`
Address	`0x3100`

PhUiResumeThreads

Ordinal	`622`
Address	`0x5680`

PhUiSetAttributesHandle

Ordinal	`623`
Address	`0x6410`

PhUiSetIoPriorityProcesses

Ordinal	`624`
Address	`0x41b0`

PhUiSetIoPriorityThread

Ordinal	`625`
Address	`0x59e0`

PhUiSetPagePriorityProcess

Ordinal	`626`
Address	`0x4440`

PhUiSetPagePriorityThread

Ordinal	`627`
Address	`0x5b90`

PhUiSetPriorityProcesses

Ordinal	`628`
Address	`0x4580`

PhUiSetPriorityThread

Ordinal	`629`
Address	`0x5890`

PhUiSetVirtualizationProcess

Ordinal	`630`
Address	`0x3c50`

PhUiShutdownComputer

Ordinal	`631`
Address	`0x1f30`

PhUiSleepComputer

Ordinal	`632`
Address	`0x1da0`

PhUiStartService

Ordinal	`633`
Address	`0x4810`

PhUiStopService

Ordinal	`634`
Address	`0x4cb0`

PhUiSuspendProcesses

Ordinal	`635`
Address	`0x2e70`

PhUiSuspendThreads

Ordinal	`636`
Address	`0x5470`

PhUiTerminateProcesses

Ordinal	`637`
Address	`0x2900`

PhUiTerminateThreads

Ordinal	`638`
Address	`0x5210`

PhUiTerminateTreeProcess

Ordinal	`639`
Address	`0x2da0`

PhUiUnloadModule

Ordinal	`640`
Address	`0x5ca0`

PhUnloadDllProcess

Ordinal	`641`
Address	`0xb9a50`

PhUnloadDriver

Ordinal	`642`
Address	`0xbb4d0`

PhUnlockFileStream

Ordinal	`643`
Address	`0xb55d0`

PhUnregisterCallback

Ordinal	`644`
Address	`0xb3ef0`

PhUnregisterDialog

Ordinal	`645`
Address	`0x21e30`

PhUnregisterMessageLoopFilter

Ordinal	`646`
Address	`0x21f90`

PhUpdateDosDevicePrefixes

Ordinal	`647`
Address	`0xbd9f0`

PhUpdateHash

Ordinal	`648`
Address	`0xad6a0`

PhUpdateMupDevicePrefixes

Ordinal	`649`
Address	`0xbd560`

PhUpdateProcessNode

Ordinal	`650`
Address	`0x732f0`

PhUpdateServiceNode

Ordinal	`651`
Address	`0x8e160`

PhUpperBoundElementAvlTree

Ordinal	`652`
Address	`0xde9a0`

PhUpperDualBoundElementAvlTree

Ordinal	`653`
Address	`0xdea60`

PhVerifyFile

Ordinal	`654`
Address	`0xe0890`

PhVerifyFileStream

Ordinal	`655`
Address	`0xb4eb0`

PhWaitForNamedPipe

Ordinal	`656`
Address	`0xbf8d0`

PhWaitForWorkQueue

Ordinal	`657`
Address	`0xcdc10`

PhWalkThreadStack

Ordinal	`658`
Address	`0xb7cb0`

PhWriteFileStream

Ordinal	`659`
Address	`0xb51f0`

PhWriteMiniDumpProcess

Ordinal	`660`
Address	`0xb7c20`

PhWritePhTextHeader

Ordinal	`661`
Address	`0xb080`

PhWriteStringAsUtf8FileStream

Ordinal	`662`
Address	`0xb5600`

PhWriteStringAsUtf8FileStream2

Ordinal	`663`
Address	`0xb5610`

PhWriteStringAsUtf8FileStreamEx

Ordinal	`664`
Address	`0xb5630`

PhWriteStringFormatAsUtf8FileStream

Ordinal	`665`
Address	`0xb5820`

PhWriteStringFormatAsUtf8FileStream_V

Ordinal	`666`
Address	`0xb57c0`

PhWriteUnicodeDecoder

Ordinal	`667`
Address	`0xb1230`

PhZeroExtendToUtf16Buffer

Ordinal	`668`
Address	`0xb1850`

PhZeroExtendToUtf16Ex

Ordinal	`669`
Address	`0xb18d0`

PhaChoiceDialog

Ordinal	`670`
Address	`0xd600`

PhaGetProcessKnownCommandLine

Ordinal	`671`
Address	`0x9b40`

PhfAcquireFastLockExclusive

Ordinal	`672`
Address	`0xcd6f0`

PhfAcquireFastLockShared

Ordinal	`673`
Address	`0xcd7e0`

PhfAcquireQueuedLockExclusive

Ordinal	`674`
Address	`0xc15e0`

PhfAcquireQueuedLockShared

Ordinal	`675`
Address	`0xc1750`

PhfAcquireRundownProtection

Ordinal	`676`
Address	`0xc1110`

PhfBeginInitOnce

Ordinal	`677`
Address	`0xc1210`

PhfEndInitOnce

Ordinal	`678`
Address	`0xc0c90`

PhfInitializeBarrier

Ordinal	`679`
Address	`0xc0e00`

PhfInitializeEvent

Ordinal	`680`
Address	`0xc0c80`

PhfInitializeInitOnce

Ordinal	`681`
Address	`0xc0c80`

PhfInitializeRundownProtection

Ordinal	`682`
Address	`0xb2e60`

PhfPulseAllCondition

Ordinal	`683`
Address	`0xc1a60`

PhfPulseCondition

Ordinal	`684`
Address	`0xc19a0`

PhfQueueWakeEvent

Ordinal	`685`
Address	`0xc1ef0`

PhfReleaseFastLockExclusive

Ordinal	`686`
Address	`0xcd8e0`

PhfReleaseFastLockShared

Ordinal	`687`
Address	`0xcd940`

PhfReleaseQueuedLockExclusive

Ordinal	`688`
Address	`0xc18c0`

PhfReleaseQueuedLockShared

Ordinal	`689`
Address	`0xc1910`

PhfReleaseRundownProtection

Ordinal	`690`
Address	`0xc1140`

PhfResetEvent

Ordinal	`691`
Address	`0xc0df0`

PhfSetEvent

Ordinal	`692`
Address	`0xc0c90`

PhfSetWakeEvent

Ordinal	`693`
Address	`0xc1f30`

PhfTryAcquireFastLockExclusive

Ordinal	`694`
Address	`0xcd9a0`

PhfTryAcquireFastLockShared

Ordinal	`695`
Address	`0xcd9c0`

PhfWaitForBarrier

Ordinal	`696`
Address	`0xc0e10`

PhfWaitForCondition

Ordinal	`697`
Address	`0xc1b00`

PhfWaitForConditionEx

Ordinal	`698`
Address	`0xc1c60`

PhfWaitForEvent

Ordinal	`699`
Address	`0xc0d00`

PhfWaitForRundownProtection

Ordinal	`700`
Address	`0xc1190`

PhfWaitForWakeEvent

Ordinal	`701`
Address	`0xc1fd0`

PhfWakeForReleaseQueuedLock

Ordinal	`702`
Address	`0xc18f0`

ProcessAllAccess

Ordinal	`703`
Address	`0x15dffc`

ProcessQueryAccess

Ordinal	`704`
Address	`0x15dfe4`

ThreadAllAccess

Ordinal	`705`
Address	`0x15dff8`

ThreadQueryAccess

Ordinal	`706`
Address	`0x15dfdc`

ThreadSetAccess

Ordinal	`707`
Address	`0x15dfe0`

WindowsVersion

Ordinal	`708`
Address	`0x15dfe8`

mxmlAdd

Ordinal	`709`
Address	`0xa6830`

mxmlDelete

Ordinal	`710`
Address	`0xa6960`

mxmlElementDeleteAttr

Ordinal	`711`
Address	`0xa2f60`

mxmlElementGetAttr

Ordinal	`712`
Address	`0xa3050`

mxmlElementSetAttr

Ordinal	`713`
Address	`0xa30b0`

mxmlFindElement

Ordinal	`714`
Address	`0xa6f70`

mxmlLoadFd

Ordinal	`715`
Address	`0xa3390`

mxmlLoadString

Ordinal	`716`
Address	`0xa33d0`

mxmlNewCDATA

Ordinal	`717`
Address	`0xa6ae0`

mxmlNewCustom

Ordinal	`718`
Address	`0xa6b30`

mxmlNewElement

Ordinal	`719`
Address	`0xa6b70`

mxmlNewInteger

Ordinal	`720`
Address	`0xa6bc0`

mxmlNewOpaque

Ordinal	`721`
Address	`0xa6be0`

mxmlNewReal

Ordinal	`722`
Address	`0xa6c30`

mxmlNewText

Ordinal	`723`
Address	`0xa6c60`

mxmlNewXML

Ordinal	`724`
Address	`0xa6d20`

mxmlRelease

Ordinal	`725`
Address	`0xa6d80`

mxmlRemove

Ordinal	`726`
Address	`0xa6cc0`

mxmlRetain

Ordinal	`727`
Address	`0xa6db0`

mxmlSaveAllocString

Ordinal	`728`
Address	`0xa33f0`

mxmlSaveFd

Ordinal	`729`
Address	`0xa3570`

mxmlSaveString

Ordinal	`730`
Address	`0xa3670`

mxmlSetCDATA

Ordinal	`731`
Address	`0xa71e0`

mxmlSetCustom

Ordinal	`732`
Address	`0xa72c0`

mxmlSetCustomHandlers

Ordinal	`733`
Address	`0xa3720`

mxmlSetElement

Ordinal	`734`
Address	`0xa7340`

mxmlSetErrorCallback

Ordinal	`735`
Address	`0xa3730`

mxmlSetOpaque

Ordinal	`736`
Address	`0xa73a0`

mxmlSetText

Ordinal	`737`
Address	`0xa7420`

mxmlSetUserData

Ordinal	`738`
Address	`0xa74b0`

mxmlWalkNext

Ordinal	`739`
Address	`0xa7120`

mxmlWalkPrev

Ordinal	`740`
Address	`0xa7180`

103

Type	`AFX_DIALOG_LAYOUT`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x2`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`0`
MD5	`c4103f122d27677c9db144cae1394a66`
SHA1	`1489f923c4dca729178b3e3233458550d8dddf29`
SHA256	`96a296d224f285c67bee93c30f8a309157f0daa35dc5b87e410b78630a09cfc7`
SHA3	`762ba6a3d9312bf3e6dc71e74f34208e889fc44e6ff400724deecfeda7d5b3ce`

105

Type	`AFX_DIALOG_LAYOUT`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x2`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`0`
MD5	`c4103f122d27677c9db144cae1394a66`
SHA1	`1489f923c4dca729178b3e3233458550d8dddf29`
SHA256	`96a296d224f285c67bee93c30f8a309157f0daa35dc5b87e410b78630a09cfc7`
SHA3	`762ba6a3d9312bf3e6dc71e74f34208e889fc44e6ff400724deecfeda7d5b3ce`

107

Type	`AFX_DIALOG_LAYOUT`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x2`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`0`
MD5	`c4103f122d27677c9db144cae1394a66`
SHA1	`1489f923c4dca729178b3e3233458550d8dddf29`
SHA256	`96a296d224f285c67bee93c30f8a309157f0daa35dc5b87e410b78630a09cfc7`
SHA3	`762ba6a3d9312bf3e6dc71e74f34208e889fc44e6ff400724deecfeda7d5b3ce`

121

Type	`AFX_DIALOG_LAYOUT`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x2`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`0`
MD5	`c4103f122d27677c9db144cae1394a66`
SHA1	`1489f923c4dca729178b3e3233458550d8dddf29`
SHA256	`96a296d224f285c67bee93c30f8a309157f0daa35dc5b87e410b78630a09cfc7`
SHA3	`762ba6a3d9312bf3e6dc71e74f34208e889fc44e6ff400724deecfeda7d5b3ce`

129

Type	`AFX_DIALOG_LAYOUT`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x2`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`0`
MD5	`c4103f122d27677c9db144cae1394a66`
SHA1	`1489f923c4dca729178b3e3233458550d8dddf29`
SHA256	`96a296d224f285c67bee93c30f8a309157f0daa35dc5b87e410b78630a09cfc7`
SHA3	`762ba6a3d9312bf3e6dc71e74f34208e889fc44e6ff400724deecfeda7d5b3ce`

130

Type	`AFX_DIALOG_LAYOUT`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x2`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`0`
MD5	`c4103f122d27677c9db144cae1394a66`
SHA1	`1489f923c4dca729178b3e3233458550d8dddf29`
SHA256	`96a296d224f285c67bee93c30f8a309157f0daa35dc5b87e410b78630a09cfc7`
SHA3	`762ba6a3d9312bf3e6dc71e74f34208e889fc44e6ff400724deecfeda7d5b3ce`

162

Type	`AFX_DIALOG_LAYOUT`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x2`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`0`
MD5	`c4103f122d27677c9db144cae1394a66`
SHA1	`1489f923c4dca729178b3e3233458550d8dddf29`
SHA256	`96a296d224f285c67bee93c30f8a309157f0daa35dc5b87e410b78630a09cfc7`
SHA3	`762ba6a3d9312bf3e6dc71e74f34208e889fc44e6ff400724deecfeda7d5b3ce`

171

Type	`AFX_DIALOG_LAYOUT`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x2`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`0`
MD5	`c4103f122d27677c9db144cae1394a66`
SHA1	`1489f923c4dca729178b3e3233458550d8dddf29`
SHA256	`96a296d224f285c67bee93c30f8a309157f0daa35dc5b87e410b78630a09cfc7`
SHA3	`762ba6a3d9312bf3e6dc71e74f34208e889fc44e6ff400724deecfeda7d5b3ce`

189

Type	`AFX_DIALOG_LAYOUT`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x2`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`0`
MD5	`c4103f122d27677c9db144cae1394a66`
SHA1	`1489f923c4dca729178b3e3233458550d8dddf29`
SHA256	`96a296d224f285c67bee93c30f8a309157f0daa35dc5b87e410b78630a09cfc7`
SHA3	`762ba6a3d9312bf3e6dc71e74f34208e889fc44e6ff400724deecfeda7d5b3ce`

198

Type	`AFX_DIALOG_LAYOUT`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x2`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`0`
MD5	`c4103f122d27677c9db144cae1394a66`
SHA1	`1489f923c4dca729178b3e3233458550d8dddf29`
SHA256	`96a296d224f285c67bee93c30f8a309157f0daa35dc5b87e410b78630a09cfc7`
SHA3	`762ba6a3d9312bf3e6dc71e74f34208e889fc44e6ff400724deecfeda7d5b3ce`

207

Type	`AFX_DIALOG_LAYOUT`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x2`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`0`
MD5	`c4103f122d27677c9db144cae1394a66`
SHA1	`1489f923c4dca729178b3e3233458550d8dddf29`
SHA256	`96a296d224f285c67bee93c30f8a309157f0daa35dc5b87e410b78630a09cfc7`
SHA3	`762ba6a3d9312bf3e6dc71e74f34208e889fc44e6ff400724deecfeda7d5b3ce`

215

Type	`AFX_DIALOG_LAYOUT`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x2`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`0`
MD5	`c4103f122d27677c9db144cae1394a66`
SHA1	`1489f923c4dca729178b3e3233458550d8dddf29`
SHA256	`96a296d224f285c67bee93c30f8a309157f0daa35dc5b87e410b78630a09cfc7`
SHA3	`762ba6a3d9312bf3e6dc71e74f34208e889fc44e6ff400724deecfeda7d5b3ce`

221

Type	`AFX_DIALOG_LAYOUT`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x2`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`0`
MD5	`c4103f122d27677c9db144cae1394a66`
SHA1	`1489f923c4dca729178b3e3233458550d8dddf29`
SHA256	`96a296d224f285c67bee93c30f8a309157f0daa35dc5b87e410b78630a09cfc7`
SHA3	`762ba6a3d9312bf3e6dc71e74f34208e889fc44e6ff400724deecfeda7d5b3ce`

117

Type	`RT_BITMAP`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x428`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.42915`
MD5	`c8231f0b4132d5fa0e94c5d8eef59d55`
SHA1	`73833fcca42ccb5bad2b103354775fe8042f1f58`
SHA256	`00b70edaf2c64feb64a2e069f002f4b4fb39e31e3b64c75aa4f9445d340d340e`
SHA3	`d790e2d10213ab8d91ae299b0b5b96a29a3a6bec9ee27c130ab95e308c0451bc`
Preview

118

Type	`RT_BITMAP`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x428`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.07889`
MD5	`a94b42576dc9562726138b1a17ca90c5`
SHA1	`f9da080c77e48164a394e278fb02b868f6bfffef`
SHA256	`157065aa843e63a92060d47f45ece4b5f1c972a4570fe9b51f7bf6419fef78ac`
SHA3	`4143451b531956758050cf3a12432939e858267b56b6a967d96a5308599c2162`
Preview

1

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x668`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.5643`
MD5	`3ea3e1cf4fe7f7e8d9f859cd5702efdf`
SHA1	`ea5cee4510eff0133e4b74477a65d8db324b840e`
SHA256	`d368c00c6bedfa25e51759db86dd84bdfb22e3147c70d93cc626b0d062be5451`
SHA3	`a415b7b9358aa7caf1f6a3e42ba9da7a03a8302dab83b0045ed6c4eb9eb1bd52`

2

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x2e8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.80858`
MD5	`7ee269d400bf4ec22ca77e1394f72cd1`
SHA1	`15740f42cca4e892352e1e1f009aecb4a401f373`
SHA256	`18f0bfee695a524368bd3929decf21be6f1db571f5d7c5a17db06380d45ee0e0`
SHA3	`0ac26a5e3194b8cd2bcde1e06846e0e7bf78d1e864e9ca07d3e97c2105143efa`

3

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x1e8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.29425`
MD5	`f778b027f69cc1e815278902ca3e7bd1`
SHA1	`6e5859c6fe5b61a42f009a054a2d6b62055b547d`
SHA256	`9e229e6adb1428f6489399240b895a7217e185ae855fde0ff4e7d66866695141`
SHA3	`011bc7b1394cb966e541c99e2d5a9dd40b4e5139d64533dde238ac557d37a9f2`

4

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x128`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.1653`
MD5	`539cba4c2d15759faa82ef0bccc81a24`
SHA1	`53dca52b60b36249614b811c22ca5bab6c2e92f2`
SHA256	`984a0a59035bae5a6b67edb68f0f25164ccdc8481ecd9bcc797cd7f60d9a9db8`
SHA3	`f49fa0033d69634f1e99efaa5553fe2b922bf5601ceb3f30f4891275c8ebb138`

5

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0xea8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.5254`
MD5	`22187e6b07836a4515f61a460dd12b0a`
SHA1	`b556078bbdc8c6b85ae611abb974f1ec2ed30d17`
SHA256	`a2f7cba1bf1b7938b3745516188d2c32860fd00522a0594ee862746f5edafc9e`
SHA3	`6d6b7dcdd763305a7ebc7a2a620d7d413a5ed15a5786db7284e2ec4c3540135e`

6

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x8a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`6.002`
MD5	`d391ba9529fe5d1d547c996bd8de30b2`
SHA1	`90cc1fdfeb74f3587c2cb066dcb9da9dcfcd40f7`
SHA256	`ca193bcd3a72f5fe8a49685fd44e8966323e2c4a023794fa19a7e595c4fd8038`
SHA3	`001ae6529c738ef018de434c61d071666b4dc0fdb8695f04b9da7463e3e773c6`

7

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x6c8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.2012`
MD5	`20e5c7ab5c150607f78014e97f8e2360`
SHA1	`60ba1c9bc8e30bf83ae903da184e8a111a6522e7`
SHA256	`c62875ee2bd6a96e81036eadb24b375f9c820510b78798fd265164c4eb871a6a`
SHA3	`13e618472d530f9b4567da063baa7f876c5d74feac666d313158108d1f96e56d`

8

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x568`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.89511`
MD5	`2e80130263eb7482dabf6d02407a94ba`
SHA1	`07196785f294cf006f6e1068de6c3dd5cc70798e`
SHA256	`05fbcc33afc6ddb619660252f40f7ee4a2e9c4bba74ea84ea1fef7d51fdd3213`
SHA3	`2687cea0a0bd3869d6db26f6201dc03291d69f9271489e6e3ca56ed6edf98e8c`

9

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x107b3`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`7.94638`
Detected Filetype	PNG graphic file
MD5	`479052f8e7c46717f6d57a4eca83998f`
SHA1	`c76e6cdd6581dd15cce4e0526a10169c36338d3f`
SHA256	`556a44574f06504ee793e808679cef740bb6e95d8ff0325e977525c659096df6`
SHA3	`aa034e6b8435cb0896774befc0839b8111863a93e3d185f8cd00745dd180fe85`

10

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x25a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.27113`
MD5	`7ae3c7a743ffd77ea7a3700430f7e89b`
SHA1	`9b8aff5a0eccbca1e0805fd04fb47a6c6483a3ab`
SHA256	`4528dd67a67926a04edee42686258fb9629e3ccd8434d5c6a167252c557556ef`
SHA3	`a3df02159753919b4f8a2694570d7070b125ad901acc470506139cd976781307`

11

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x10a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.52272`
MD5	`795d9afcbee6668a843efc04a4c2cbe9`
SHA1	`1f957977f598a6b33af042e1728b76b8c98aac09`
SHA256	`bfdedafe88c4ae5d7b1efbba6f8ed37a368f03aca89a4ecc74d104e5faf126d0`
SHA3	`137772040067302782ca198910322097531a6b0024dd25e83dca868c0abc1fb8`

12

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x988`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.95226`
MD5	`f1c74fbe754bc806dd08a1eb6b72298b`
SHA1	`c0c1aff0942c4589e58b3147ef4f237f693f2416`
SHA256	`b7a2a191845984509c5ea7f822d7e7eda04253fc8aabcd5c7e37bb2d3815323d`
SHA3	`1215d882ac494f05cb3b8782b0a4d2ee89d6df075106204cf6eaba4874173139`

13

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x468`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.1049`
MD5	`ff6efd9e52d3c174032538fbdfe6a159`
SHA1	`76aed8ceaede338ad07cc00b821e02a80e915f79`
SHA256	`dc7f753f534ec5aba240963c11cdeafb64088457a1837d1947eb0eeef0d51021`
SHA3	`dff9dc64fd646f2d3bbb83f5d0c58651bcc7ff98787a171ae0bc0f08c841047d`

14

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0xca8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.31111`
MD5	`59f23946785823e744d12668b3e19347`
SHA1	`163ff9b4c2c65b6c6e93d8ca3897f1c21de19703`
SHA256	`f1465c4ee41d976f888e556172f1e1e4eaf9a7e32c43b3730ef5a90fd1486bec`
SHA3	`1b1f62a98881c54340506fd246d774815f221be4005a9170f6296a0459a99920`

15

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x368`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.76894`
MD5	`91b792de609bfbefc0f8ac21fd1b1947`
SHA1	`52763acadff9de3cd19abd4b3e94b9c1670b6f22`
SHA256	`498ed0051f3ea2e7519e3a7652969899c8b2d29b6bd1db5b5eef50c5397bc3be`
SHA3	`1787694e1ef2892385de9a0cfdde8282ef7c650b8ec1e80aacd58f7c90a1137d`

16

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x10a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.74389`
MD5	`0ebac7ba9c63ad50637f6b009b11b545`
SHA1	`5e61dc138024bf658482f499690b2e83e2d59492`
SHA256	`46ed7b1f8b32bfa9186aef95cc5764d30fe9f79ee6e90f30c04d484789b965b4`
SHA3	`9d2349a0d7a5d198703b0fe349d98558991c5e9cab05569b8e9fa1e60721bf79`

17

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x468`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.21153`
MD5	`4e458d0372135e10ad7fd48d2eab8249`
SHA1	`47d81f634e0ea24af10ea6825fc44322c5da515f`
SHA256	`65279daf1761ccf16cb730610c9a5f4948970e8179db7c4723e0a879928fbad1`
SHA3	`b3cd5692bf750e7d4e99bea066579fb6b061159745409d789fd78a681ed1fce8`

18

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0xca8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.91936`
MD5	`1b97bcb2cfd6b0b2004d8f2921de6cad`
SHA1	`1d4b1c3fa2f5dbffa5fcbadc662539e07d1377ed`
SHA256	`86330ce1c0d79dd73c036cdda42db785d482041d236da62ea0f3f13f8d11afe4`
SHA3	`3642889bd5b79c5e97dd3123a8fe97fb132936c49532f1f9c448bb07c0990584`

19

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x368`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.7755`
MD5	`e0d88814264ec3e7104b8b9618aa1fd4`
SHA1	`fc5e804ffcea24d78d32984c3c69a82f99b6f3fc`
SHA256	`d0bfcd24235d4b292f83aeb1eb034d097c39e8eb946f56063a293ffdcb2ad5ed`
SHA3	`b5da14b24ddd18df3637b4647162851d5b60910ff4684be7161476ffb378c961`

20

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x10a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.88679`
MD5	`4bafd6914da134cc5138fcbbbf5459d1`
SHA1	`cb0428eb93a65f2da92ce5cf24365f2c3c4aa914`
SHA256	`1358779ca75f2ec85201e9f1e55c7b39696236c3ea5b8917bea8b2b3be013e2b`
SHA3	`95898041aad4bc7612b26fd46d0afd2fc2269b6b6c52bb6494920eae535c7a8f`

21

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x468`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.55452`
MD5	`5b1c9d5d74dce9880df138ae6bc8b2b2`
SHA1	`ba938893de7d5418c5754308bf0b47aaf9256ee2`
SHA256	`dc49d82f2df093baa61d2a7623e588ff13a1a139456208f3551e4cb2a1cac243`
SHA3	`aa01d56301965644efc6c0fb71836d91cc2ad510f32c82bda150700c10251636`

22

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0xca8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.77959`
MD5	`2b701d7555a1ea121ea909180ae7ffca`
SHA1	`529378c9e7a87fb3811be2d604761bbf80d523ae`
SHA256	`2724f4998f25d3e187e8c594ed170274373a637fc62706ced7ec9c4eb2e92ebf`
SHA3	`7126466d2e90c3b8d2eefbfd2cdcbb66d4c3c0231866a60f07c60b013dcf5e86`

23

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x368`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.5598`
MD5	`08ef3101329fea9fb76483e07c2fa852`
SHA1	`1fd9efff433a3e7347947776cfdf14a265c7fce9`
SHA256	`d78b947b74ccda9ffccee276dbcc0c1bab8dd8e30c5f9829bc369f067b1cac45`
SHA3	`f2e65eeb2e37575d2298b0698c339e63c0bfaae2a96f67062132752bda390082`

24

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x10a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.27001`
MD5	`f9145b1b106b898768591fe8f8e19e14`
SHA1	`ddcd67fd510468d86a7aa113c75d105857bd3fa7`
SHA256	`a618c11ca913f9900700f2800bbbb998cce161da1b2ffada29475781857dd8f2`
SHA3	`3862ed37353f3f25c7be906ca78d4f25972776d067699d3dd8130d3cf5e9af0b`

25

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x468`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.96762`
MD5	`a6c150194f14e671cba7113019bd5b9a`
SHA1	`7a6d099ca500caa09bd9b35530b1cc2483ec5fcb`
SHA256	`b0c83062c9e4eced5f4ca5652e2568401df33da3bc17f43b3f5f6420b47cffb1`
SHA3	`cfb02f74408d849590881a5b5ff41e504773061fa5e212bd5026423b37945971`

26

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0xca8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.74298`
MD5	`40aa9747442839b94723a8e8cf55944b`
SHA1	`1bd58b2202fd5d1e31d6cdcc815c89a6516d6c84`
SHA256	`c10b3101e14c6aec5aff1cffde79be66ff0effd018b77449e99277c19a32630b`
SHA3	`9272c5ffe6da94fa01b92a0692bd37a44c5d88d608cd5c0159d51c750a7d0f88`

27

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x368`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.37433`
MD5	`e3508d1b73524791dc36e43d20110b2a`
SHA1	`2b53a6bec4b0522c1e080f80346ebf2cb1fa602f`
SHA256	`542d416877ad32023c2db010a0770aab1ea7263779d5dc26657522d105eafa23`
SHA3	`6e2c4eec84fcbb63afc55d93e8b41ec99a8f942f00937e1db98aed102c8680fb`

28

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x10a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.76206`
MD5	`1d87a8d9fe1ae82bc5c8d339e0f4caa1`
SHA1	`bede7d48161d78ba2a629f1fd5cfdeaac1145104`
SHA256	`86c07bf494275b4b764f827db040440499654674a728fd259f3ad9f38f1be63c`
SHA3	`72716ea37998f30c6f9e483ce58a874922dac490e2fb612ee778a7dc5217b7c9`

29

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x468`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.88831`
MD5	`4fc787621003b06ff4e6d1180f39a7bb`
SHA1	`e53bbaff7c531e14c505f73c5aabfb7c326dc985`
SHA256	`14a9ee7685b47a028c142666db8c5ba52a04266fb0d8e371fa16d6c7d000fb6d`
SHA3	`2eea321d092ecc8ab68ad36d8576eeaee003553703ae774229233a21ff6a38e0`

30

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0xca8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.02687`
MD5	`37e14c1e666cd56ff9297506b51e7dd0`
SHA1	`69c286209237d9d755c508b695a2899b98d24463`
SHA256	`72e39f361d58ee15a57392438fa796594452f498cb97357baf85fb62f08ab654`
SHA3	`5c69aac127863c2084f8649fa7cdce27cb9b4c9f0f109371cd1c2af5b33be747`

31

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x368`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.60997`
MD5	`fa9ffa9e3dc853bb6051b4cb7bda2f96`
SHA1	`65063369ec6abb7e4c140adef982536400dc7094`
SHA256	`8fb59149021e62c9c21499f6e6196d3dd5e55a7ce3d5971c45e2cc5233ea2f08`
SHA3	`785748d56e823379aacb63d3b73b95135900664d295381ebdd1e5ba08850ed31`

32

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x10a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.45159`
MD5	`4d5db025a77af1fa2737468af303383f`
SHA1	`e8c03f58bd07a302eab02689918e851872357e49`
SHA256	`22308b4a51e11164113f5e27b4bf8e304152ffbc5584f435722c1dd6f617363e`
SHA3	`3a2d86a9a9d11cf9bd529c18ba9bf5288d10f33462a3f9997e613bf8515bbc89`

33

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x468`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.0303`
MD5	`2cb7ac6ca50cc81e4755733eedd5c9af`
SHA1	`fd95657df4b300e8c7a9ba60638319577d6038ab`
SHA256	`849812250dc83d685a58afa2236ba18a312fc1f549289d9ec43ced1ce41b7277`
SHA3	`75e8dce2fd7fd42c1c6762786616efe45111a837dbfa57689f23f773c8c46eae`

34

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0xca8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.58346`
MD5	`4b194fa71b7a0a7474bb69a7cbcf271a`
SHA1	`5e80b8587ac88e0afe0d80d00ab8cadc2d90ddef`
SHA256	`68442f07150ae610632947f9f0e819103b2c7f01c6348502f1980142072920b2`
SHA3	`c7a1c109e812ed12dd3f42132dfb2ee8f43fd5eb87853d30901cff97c686dda5`

35

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x368`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.70107`
MD5	`16ab903adbf7f7cadde9e42b7d9a3360`
SHA1	`8137ffa4c1af74d4f566cb202db8f7ed95e60819`
SHA256	`d739d843bbb258eb1a1fb75ee03904967b498fd6e10271e02ec53dace38fe068`
SHA3	`d52d1207ba154bb04b4974e805dda55b56327fda5e9f3926a6f20123922fe3b7`

36

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x10a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.28049`
MD5	`35bf99533ad4a9e033b484b740ae4091`
SHA1	`f2af0aa6340b2cb292b54668fb6d0b4d40d8e144`
SHA256	`463cce45d78e0ad97bb2e047f5548bf8fc66d4bfa0d51fa61b82591daf69a8c4`
SHA3	`cd2da08ed2b10525717101538896637a49db7394585f3602293d4862c9691cab`

37

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x468`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.56916`
MD5	`65e29ddfe5643a3dcc7756f1e0af4136`
SHA1	`63968350a5b414202a8cc4ae3879272338042eca`
SHA256	`87e2a033a2fe9bb5e1c0a9e3305ee1311ab7cc9f6da223a679b694bb3553bbf2`
SHA3	`790fc87ab4d51bc4aea18033c6d23210a680a58fcae4a7d66f8e35a77d2e55d6`

38

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0xca8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.2951`
MD5	`7f5986ed27c9203018bbc2f97dbd6b3e`
SHA1	`719047868e1838a0f4e9f7032de535ebe4898721`
SHA256	`677d997013daf5c07af2683cb25c050e6ac0c91df2c4ca40e833183e50fe856c`
SHA3	`2c6d673eddb521ab65ab71c1610b187f137877cb380fe10299cb36cf7e1369b4`

39

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x368`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.72526`
MD5	`6869cb6e64ea8aaf344bb666ca0ebcd3`
SHA1	`a9d592196edd4990a40cb0354d248d470f178da7`
SHA256	`1f06e3bd7cb800c8bdd5b1915adb7cc20816e8cc2fc5248ac5c15f61a788a005`
SHA3	`6500333f27e69a3fe8026a5c90ef39f028f967fc2446175916431cd7a086ca54`

40

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x10a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.32705`
MD5	`57645a4f4d23dc531957a3456d35ef83`
SHA1	`2396d1fcfa314c5022a23a919ba1b1c5046a1a56`
SHA256	`0481c44f16bd3b79cdf26d02d165c5ac4e9663d06aa9c5bba79c3bd9320cdfa3`
SHA3	`f61a6e12ea7d201cfa313d7c24420201b858f8247ab17389675c1fddca733bd7`

41

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x468`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.48751`
MD5	`83c617d632973ca43b7a4b2778980286`
SHA1	`571b6adb55cced4a423564c4b87c9d0451c16d4c`
SHA256	`cd5f065f1b355388dcf9aa3288153b5aa948a4c5bb428d8a47a6cdafc7a3c8d4`
SHA3	`d881dc244989d64971236d592ebef40c06da30c645eedb5d2e95d2c56cc7dc2a`

42

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0xca8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.27716`
MD5	`2f3840f1337359628c223e46a4f31912`
SHA1	`2375b183d278081c9b4c6a3b9b7b25ff75700dc0`
SHA256	`3c574e06dd261cce8e59b55a71f846c30b2eba2e0ec4aa9f7c524d4e9f67c7e8`
SHA3	`10f086a701cf40a528126a84efaf095df5360d9e318289f1a1e8dabb7a7a89f4`

43

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x368`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.89761`
MD5	`93c26eb417fcf86ca08452594d692c8a`
SHA1	`2d513dde1388698931d4069c03efee78265eb94a`
SHA256	`98da48e95ae3da572df2ae25ba41d71b312432be333f2ca573ccaf7c6385939f`
SHA3	`74bad69c792e63fa7a603953acee1b010239d77e59873dc01355d070cae554ee`

44

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x10a8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.17714`
MD5	`3edce5f071313a86d3df633d23edbc77`
SHA1	`38a0334e8485fe03a3c698f0f2f9190b94e130b4`
SHA256	`28d3451989d55fb7c5d2a22d6d2d410e9a0e22b9d6433aa1af31b39e46117ab8`
SHA3	`6fa254246f43bb4ce4e26be3359f849a733a2d5fee0ef7cb55940328d79bbe0c`

45

Type	`RT_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x468`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`4.12451`
MD5	`1a436caa8b1c0cd391026273201a1a98`
SHA1	`b4caad7da32c714efd2856b4845f2ab8cb70f196`
SHA256	`6ee687e6a9f2ecdfcc9ca72028754dfbcb83acc51a91593e2daf7ec860b717e8`
SHA3	`e2b26394c28652f4ea96fd468a66b435e39f35b8ad4d713f7c153dba409cc81f`

102

Type	`RT_MENU`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x762`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.55774`
MD5	`3af48d6a0f2fdc30714901b7f01affe8`
SHA1	`15e6f205bea874dbcc3fcf049dfcb1171e2d3c11`
SHA256	`e3a9c6d5064387b65c16c58a17b265d4bad4d8f46aa632c13f9c7fb0e3c197e5`
SHA3	`2f270da761544a2c33e96380a2b95e759643f1c40257c5aa74a158ffaff7aafb`

110

Type	`RT_MENU`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x2ae`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.38823`
MD5	`c9742290f0e366f12127eeacdd2f2f66`
SHA1	`e3e1f14a0e16d98561783f670fbb67799c5950f3`
SHA256	`f7257e8cbd8aaf43ea7fe4552c23aeaee87f2c16090128eb73211408400cc644`
SHA3	`be72484a0a91457fdcdf11420ed5fed277f42daf32dad78e3b2387ba70eb9743`

111

Type	`RT_MENU`
Language	English - Australia
Codepage	UNKNOWN
Size	`0xaa`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.98557`
MD5	`c03c3dfdb028a79ec98fa85738c6f093`
SHA1	`1259c447d14aa349effa36bd87ebae35cd82ba7e`
SHA256	`071410d043198fcef2004ecfa71669b4ec58a7cc78cb879f02cc864326a4397e`
SHA3	`dab390b17ff6609f1dd2112377c63fd4a7acf3e64394bc618156d538ce349c0e`

112

Type	`RT_MENU`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x104`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.18906`
MD5	`80fcfe704c856d4b4ed2678c8817ae00`
SHA1	`980b4682b6dd353b865cb6c9586e89b238c723a5`
SHA256	`7eb5d78a276ee64e6c7341916d030efbdba7129c5541c88cc63477f49eae9dcc`
SHA3	`54e6b6e64daf7055966cdd81e71ba291e53e96d88ad0a420172355be62a45c0f`

120

Type	`RT_MENU`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x104`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.1117`
MD5	`4460d19a48c75d4108dfcfb87b4bd240`
SHA1	`d9628c57b65b3ceaa83f2aaf6f3b2111c6503853`
SHA256	`e10d5343df8efc9bc4b5815e1858fe88c5a0c85123a0e995ddd07a23180ffec6`
SHA3	`2c662254f50043f93ddca97c35fb2c7efd33b772d771b831de02c6cc3b70e4b3`

123

Type	`RT_MENU`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x4e8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.42376`
MD5	`9280c818c4346b3e4b312868678a9acb`
SHA1	`c1924e03e171cd8695c07a097dbe8ff140054724`
SHA256	`0b1316a2c4ae1bb2fd38a9a991d1572d40493b1838e36a8ea62972bd05318609`
SHA3	`b05988bdf0bc069f4896ab7a851715a58b1e9a8bfe70d2394fbd96e261150613`

124

Type	`RT_MENU`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x146`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.16704`
MD5	`ebf7bab12e055a3b483c7427a0fc6e27`
SHA1	`f9704bb0fc1c6c0d29148d48eb60e9ab2b90043f`
SHA256	`248bdf091d814ad34f6b2a1f5b4dd81dd43b971aa65a01e3da1c5c5bf4843d4b`
SHA3	`853ab38cc052841ce599042f25c4a28e4002a1303972d891c11b45ba49a91f0c`

133

Type	`RT_MENU`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x7c`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.98318`
MD5	`b3bd86df63ca827b42c53dfc8aad9a92`
SHA1	`9a92672fe4d4e5cc52cba2e3939a84685a1ad88b`
SHA256	`04df49fc877e272df04451e3c6ef21e05c42ff00c5bda8d00e9fa74e7222e748`
SHA3	`a20418686513db77762244a6277bd53a6e63d85e70c7cfb7d78617dd3e9b3677`

134

Type	`RT_MENU`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x9e`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.06419`
MD5	`8ce0e7f35a107d0bd6bac794b07aad5e`
SHA1	`4c15680c21f80b5fc7bdbdb721b37734d66d0fb2`
SHA256	`ff3bde43bd10435bcd34b29fca6152f4cb11219de62c804b9e4c77d5e5c0aa28`
SHA3	`8de54046b40a23a2eb002db940fb7bb2ec1a515f54a73ac81ffefb604eadbde3`

151

Type	`RT_MENU`
Language	English - Australia
Codepage	UNKNOWN
Size	`0xbc`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.11624`
MD5	`0bc00a3186ce05aeef81898647b7e724`
SHA1	`9af7996bdcb2f675ad0cec3d16f1c2e17504b9ab`
SHA256	`585931b2d0d3af5106c2482ee55bc16f5e155eeb49f85e01d91d201fca96ecb1`
SHA3	`6e4093882aaf88a260cc03d6c271957919511a2cd8ad195a291200839bab4611`

164

Type	`RT_MENU`
Language	English - Australia
Codepage	UNKNOWN
Size	`0xb6`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.06835`
MD5	`7fb77739f070cc4edced1d4fca5c379f`
SHA1	`66c7dfe5c7b9695e97e2aeb59bccb287b0bdde7d`
SHA256	`5b8f93196cee9c96a9571b698ea14ba139aec8710c38604f198d7a41b9853d72`
SHA3	`6b598e314f58b692626edb1af4f43e159369539345b4324fa39409c80ae61763`

173

Type	`RT_MENU`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x2ec`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.28265`
MD5	`36a1a850059f3b20be30a1bea42981e3`
SHA1	`6e2f02027ecd93727519af5a864d73c1b4447faa`
SHA256	`fb26c20948af7b07d2efcac645a78ef1b80ad5bc57930648654bbf087e7b7088`
SHA3	`5935daf5f3e657f3b966fda61c03af95ae844a27967aebbc8ec40a64086756df`

181

Type	`RT_MENU`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x102`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.17261`
MD5	`7ef525974b8072b3f34fa5d48d638c37`
SHA1	`77b7f270d853eebf6a4b030fd1f3628bc7894364`
SHA256	`6531c4c90f70c89bc4865306cc83af626e90f16e0abcedf89a4ee63bec397e00`
SHA3	`7aa46dbfb779dbfb4eb3006309d064b3969d69189258c4e4a57eb71fcc7598f9`

184

Type	`RT_MENU`
Language	English - Australia
Codepage	UNKNOWN
Size	`0xc4`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.00217`
MD5	`96c47c76cd92dac3ee1253989ad9b871`
SHA1	`420f74d0c0a890fa290e950e2c227a1b74326834`
SHA256	`e7ab6886077a2f8b4b8ffc11ac8f9c54e6f33a047e280c1909d9cfb057f6ddc7`
SHA3	`80f1d8ca0aa8f6fb59773b73a8ff6c37bf5cc22231045d25b810da946020d16a`

204

Type	`RT_MENU`
Language	English - Australia
Codepage	UNKNOWN
Size	`0xdc`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.05613`
MD5	`08b87722de0c35cdc9bf2f6ba5969c95`
SHA1	`5ef3cec42cddd3b4f433cd7fbd7d60a1f7045493`
SHA256	`ded16a834d9537e9859b5ea7af9e49dd43a9b11492eede95fb12776e4a9794af`
SHA3	`01a260e4b19df1a693db6b2e53488f6f6dae6f0b2f9703a1eb9729e151516502`

211

Type	`RT_MENU`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x106`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.28281`
MD5	`f76d2c7b714d89c3e98760b73ad68bef`
SHA1	`4de151af8da251a87620abca5a10b3721be4c5aa`
SHA256	`464198a1045c308d1087bdbfdd2137d24198b19740de34bce1ce92ed684a8156`
SHA3	`22ceab869b81c07043cc6c1122a8be6aa59e9febe8b118de744f2dcda683e331`

212

Type	`RT_MENU`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x3e`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.45823`
MD5	`c53e5504033fb8722ef7ec50cd0a45c6`
SHA1	`4e040aeb7c70304fdbc3e5d18eaaa15b703d1321`
SHA256	`59a79519421cec96d4843e115f0afcde7619f65f668a8a4fbae40384b994b057`
SHA3	`6ad2bd38aab1d91c74eebbb67582cbd67b55ece2ce3ac540b1f160d3b8d7cb7e`

214

Type	`RT_MENU`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x68`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.9518`
MD5	`80dcb788d60618acee7fb9334398e5b0`
SHA1	`c0cbf0cefcbd3e25a8543ce79ea7d444ce24c329`
SHA256	`bd5cce9f50881054fee449924adf128c9ca9bfac3aee128b7fe1b6dd06f99e4f`
SHA3	`f42ece79db9606af0dffcd14af4e911ca49b754d8d6b60fefb138f1808ad461b`

103 (#2)

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x634`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.31257`
MD5	`7a96004cfcb6943303321624f536a381`
SHA1	`402fa12a5cd98e12013bb921a3a60c3f1e878f37`
SHA256	`10815c4b884e6f5d8a1bdc560d4aa7808a8c106d1e55a8fe94e51013b317ae9c`
SHA3	`01528b0f5aa1fed863ba3d019874d2db9f3e500e6c79df08f0d0d0e1cef4f0f4`

104

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x80`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.88143`
MD5	`3ee145858c763ea00d0b272ca594f6ad`
SHA1	`31b05bab8eb2ee1b24f34186b12ac1a443eca36d`
SHA256	`ddf493a5daddffa92fe14eecbdc6f96dd2256a9a83eee289b7c261d1fe8e6657`
SHA3	`682a6be9e923fbad8371ed702ca0e3a46b9a14acd36d3905f1a6441b467dcb39`

105 (#2)

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x51e`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.13287`
MD5	`dffd6c3b3c372d81d0b75d3ee772c0f8`
SHA1	`5bc67d43bbf416a179ae5549fd5b76887c7cefb1`
SHA256	`4f64c2b99506b1536e07974bfaf389944873a4d5e0cff39bff1673814c6f5548`
SHA3	`fcd5ce3c3d84f9784d49c60e98cb54a77bd480b2ff3875d3581a983bf51d0e6b`

106

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0xc8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.0763`
MD5	`771ee28e4163e9a55450167120b89bc1`
SHA1	`0aa91c4a8adeae54bef509a1267f1152efeade3e`
SHA256	`d9a19b10daa1855c876fc51c017b10d1efaf3d5edc21dc270481a8902cf301f1`
SHA3	`3ecbb3ae45f85445b8002e6e9b6e9c5ba050fd91eec038a9c40ac8181e044eff`

107 (#2)

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x118`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.07209`
MD5	`744615599165501f05b91672c4a7516a`
SHA1	`d3e671a8a35029fa04cb23933e0f4cf3239bde52`
SHA256	`bc4cab5af970be25d6661ca3be24e1d3a55449b4115df1f17a0b182f27eb379c`
SHA3	`8db31351dfe0758a7b43ab2fd8bdd985b127ece45d8f1233be5f45b58e30a797`

108

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x112`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.09538`
MD5	`401c37edcf235b09a8b998b791312a9f`
SHA1	`22a8dc73e448bc69cd9706008b4b113bd4f62a41`
SHA256	`cda5c65b2ffd0885987a97259f10273b45ede84ac2b9330e006cddcd999cb84f`
SHA3	`009227443cd5a91af7d330646a95f175c77df19b85b845935d316ed3301d2089`

121 (#2)

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x2ec`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.47829`
MD5	`45f9948dd86b85e8c56b7bae1949cdac`
SHA1	`d68cb359a7d3c96a858c1fcf1e040ec02d6f75c4`
SHA256	`6fcd62f314d9645d9de8ffb6f80dc16ba007e9d3bc536393b1fb6e2fc4110278`
SHA3	`40a8c0e9c4f0d6921e5665a3e9ee9f587879d4c50be77f5ef3d3695f1f465673`

125

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0xf0`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.91208`
MD5	`28451bdfe39c395f3b35ff67d29e66db`
SHA1	`90cf583b6c4167ce8b418b3af249479904ef6b6c`
SHA256	`28cdb31f19d14f49ca344e790b8fb17fa114855ce839847457b3b0ecfd9dacaf`
SHA3	`b585333faf0619d39e786c7e564dbdf5d77314de1656b6d2cd4a7e714deb9b1a`

126

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x3aa`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.2366`
MD5	`a70c26e6f1379c1bdcaa16d03a5a7a5f`
SHA1	`33e78316e13dfbe94f21bdc6b69b2b49493cceb4`
SHA256	`0e62b0fa998c6987f51fe9bdef9e42ca04c0ca909feabddfca4387e6c36573ae`
SHA3	`4d64ca4ae1229cfc21bc6701387193b33a208701434b4fd295181cc88fc19475`

128

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x3d4`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.15287`
MD5	`0745f2459beceed645e2dff357116e0d`
SHA1	`0d320bcd71245043a9ae9d1556eba07ecdd12388`
SHA256	`d47726be4e843068ab6cc1b2de98d1b0fa61afc9c7a40ad92a6d2adca4c9bc00`
SHA3	`98c0d1987d5cb481e14b3124b8c82ed3ad375cc8f102af8605a44aa9ca1bebb4`

129 (#2)

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0xfa`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.02591`
MD5	`9a66936496bc181a9e184802098d2384`
SHA1	`97abdd973fc28f5b9ccef183eb9c227ca9400189`
SHA256	`81e7b7ff3d4b04e53303a34966cd713bf50f9ea4cb064ae9b59a2a10c61f1dcd`
SHA3	`a0c0f7e9fe2e44ba2629c95a9ca1012feed627370be3ffac668c4093d431a58d`

130 (#2)

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x144`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.21155`
MD5	`4e0b0210000b317ae4c722c42ebb4acc`
SHA1	`ec8fab65efdbed13bcb16f46e1e2ad0f1ea79616`
SHA256	`105654d7870b624c6706792f8c68521c4e8b96cd46ab94d4c945313007fd8ecc`
SHA3	`fad4759b0720efe5a00ab0ac8be42223235e3ba44baa823796b3dd8ad9076062`

131

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x3f4`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.31868`
MD5	`7f0b3a519e5a44b7eb89e39576b80887`
SHA1	`691e928e95635f6c63328585c0dd8ce278261f75`
SHA256	`d4069d4b89868e36d133397b10c44762726b510bac905575c9893dfdf5adacd9`
SHA3	`f9ac77c2cb89a811283817c1ed1dace34314f5107c76e1a41ee529e3fe97d275`

135

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x256`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.30253`
MD5	`7c63885b089e1da24c38a79132d2ec80`
SHA1	`67527239fe4be862dec235b74a34ca48d714bc02`
SHA256	`e04281a5bf11e97464cf8fdfb2c8e1024e5c639e889ea825ffa0923a7d15b55b`
SHA3	`a7194fe8f038e3878523f2f8220b40bd51cbeec321903f542415cacb78a47531`

136

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x3d0`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.26126`
MD5	`3490e8e4553fed0d40918b2202f6c126`
SHA1	`1e0ee90dd889634ad341af38699e0b1890a9f9d0`
SHA256	`51212df9af702d89e3fba7a2189bc8ada726f27f7f4907bad346ee6ab0b02558`
SHA3	`862e22c4102dcacd7ad882db854e17d443aecba5ccdf22a7d8f50ccf7fe52279`

137

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0xf8`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.01917`
MD5	`8c33b898bf75662ed728ab17ad667030`
SHA1	`a2be6fb972bca761730e1b3e66aaec06c64b2083`
SHA256	`ac66f3ee1533e26cdfd9b545a1a8b5f990785922df7ff79bb6b3372935d79608`
SHA3	`bd57d77ed5410cc59a8e9743724cb90832d165dcf462e3a0658d4d9f6679fbfa`

138

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0xe6`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.04654`
MD5	`219cce1e2e3f6616b5b9beefdb2d1e61`
SHA1	`b80dafdd99cdd62753464c64844f329c4b096353`
SHA256	`5751aef199ef2406f6fab32bf6fabc5195cf6331ce9d855106e6d4753df1a2d8`
SHA3	`4df21ba6d44fcf0fde0b4975e6595188c5e80b70b169461993171c76e08b78d9`

139

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x3cc`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.14254`
MD5	`387f865b1b39745e9ee5a6b68369cb00`
SHA1	`edbacf67b02730ccda548ef3ae792b147cd68059`
SHA256	`baf5f3e13e6f5fd7a3f9e5ff4a90cfbf05d71a101bc89019db5b621f3cc799b8`
SHA3	`9b5c40036e20e91f495a0a6f758277eb45425181d21fbdc671657da98dab3fdf`

140

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x280`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.18301`
MD5	`8f6d8f2e3ccd7cbdc21f3ed97413d439`
SHA1	`e544cf581af9a9507ffb6680d2bd772c816fdd87`
SHA256	`7554beea9cc4ef30f6c865b2536c9e03167057a24735bd0e79b6723184183e94`
SHA3	`e71ea8a4424a9f7d4e3df3d8b7307416eae2addbffea68bc41dd1a2b39b16a28`

141

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x208`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.21864`
MD5	`edfaf646d6c3b162114725f63366019a`
SHA1	`3a3e8ce23fff29e3c2f8bcd3e0519969716baa6e`
SHA256	`47c0c106e129a19dd82a39e1838c74f3ccf280f80e37741a6f86e87d4302de4b`
SHA3	`034f436b2017b51487ce3c56aefe4564dfe30d0b08bdec75c6fb193333b4de71`

142

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x18a`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.91665`
MD5	`197fec66c1b3c424759bb7c8c6b10125`
SHA1	`faac73fcc60f5a075a47c37fd5c56e0ea692532b`
SHA256	`e65d65dcf37ee64285b49615c5ff73ba2fca1866b8bb691bee0a96781a08f90e`
SHA3	`1574ec85ece3e669a2b246670bd69ced565e7ed860bc07aefc594cebe03bd48b`

143

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x166`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.96348`
MD5	`265f3c01bfdaae5bf7a775f4499aadad`
SHA1	`6b854e05e7e08391397cc9a9cfb5ce22e801242f`
SHA256	`56adaa4938a3f9b1d7407a9633ec6b5bd5d81c9f8228c899eb60e2b26a5abeb2`
SHA3	`1668af2b4dd270c15be16f7e10a768e57611055dba6695f86a5927cb5d0685dc`

144

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x18a`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.08232`
MD5	`b685b8bd16f2be531085cd4953bc52d8`
SHA1	`9e458982c5b57a2c1da5512679b86bc64537233c`
SHA256	`a5ac504be094a1550bb50789820016bb33eda3c9111af3ce8f7e68629477ce4c`
SHA3	`f6caf2d1db43e5a30c44d93cf99670eaff7d0f01b8675001886c6b169df52d94`

145

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0xdc`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.95929`
MD5	`cd23bcacec2ddffab649ed301718d99d`
SHA1	`c6ba7786b0cb7a8a27c022b9c42e75270505e7ba`
SHA256	`66383090d7b52377f7553869dfcb98f12e596439cf2fe5616e31198673546f60`
SHA3	`9324fa4f49145f57abfb167898f6bf0234f35a06cd503e7334c78943479a46ad`

146

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x760`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.22065`
MD5	`c463ecfd8630cdc34285d056796cc3ba`
SHA1	`b04d6b5800c3e30daa710c369c7057a5269e8aa5`
SHA256	`018943c88302902389da363a22603d4d9ff04ff94326a80bfbd904f48440d0ce`
SHA3	`7404ee6143c722bbb07b8c123a701d56373b0ab0ac12cd4693be24ed44ddf2f2`

147

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0xb4`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.89168`
MD5	`0409f453208f9778a6fe219420ff48bd`
SHA1	`8d3ab1e2584e7f6addb190ad8b425f17cb64732c`
SHA256	`b606a8d2a9273dc7caf268cf347e9b74310e2fd9e05700dd24217d386f11a218`
SHA3	`b6b2528402e15a64470c6e924e73070336d158074db1828fce2165fd7ee1d919`

148

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x154`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.89748`
MD5	`c46cf9c37157cad2f3e045344212a624`
SHA1	`3ba3c1ced1fa576c49cb865f5c5b7ac9a581e21f`
SHA256	`783dab5762136fae5399adeaca9815d00526f227f275e278057cf6965b77d29e`
SHA3	`07e01ec43fe88f8fa8c8d51044ce26afe6b49debccb192df8eed12af6ebea0e8`

149

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0xcac`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.08039`
MD5	`04391446f7bc545a374f6461d40d17d1`
SHA1	`bb90715cb29223ca107766c777ee21828c568c85`
SHA256	`444b717ffab547558f965f1b33f96a3a9fc5d6844db50db6b2a9f0e5717d2545`
SHA3	`729423a56fc6c3aa7e0c38f559904b37882da3c944dd4aef734f24df281f94a8`

150

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x14a`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.32398`
MD5	`f4dd9537aa9ddf0f7c450d29baca0e50`
SHA1	`1c147874e1ecb5b16086df68024b134604fa0c15`
SHA256	`c807dd7e95f09b9605b9cfb22f6951adfe90a39633ee2f56377591e9996f0b70`
SHA3	`495b82369d51da73679ffe97726e29423f1396228816d94e92b6814f3293df1f`

152

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x1dc`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.05978`
MD5	`016c99dabe4209a906a11b110724ee2e`
SHA1	`1cd806cb63fa2483be6414764094aac8fa743a9a`
SHA256	`260c8bf4f5c46b1193b31e8dc00b2308e7a62dd5a5e1a9e7074f9b8b50363dbf`
SHA3	`a5ad7d7832c0d1ce17be08b1825299950e5fa5a6b65313b9305c46022976b969`

153

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x462`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.0269`
MD5	`8df2d11c68a0ce8b5ef3f82099fe472e`
SHA1	`07850700e8ede0f7c55ccd14e94b5f4da8eeb288`
SHA256	`827b94844d7803c1fca6341025aa61270482f31aaa0f81ecf1ad81f4833b51d9`
SHA3	`794f47d8b7c9a5c79cc4fe5f7296b8e978c3676cdb78011a1c0779a232ba9463`

154

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x122`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.14342`
MD5	`cc33ecdfecf5d86e8224308e6a163935`
SHA1	`0ab128919bb854d07bd856fb2b8ca77f96b55195`
SHA256	`7f60bd0715768d2f1f2d51c3d86bd27e1b9c25d3694f63788a0d6a7d00bb0847`
SHA3	`6b8e185102382fb04b28988595099dec93588a8ae8d5d606ff736cc7c7325f73`

155

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x154`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.04406`
MD5	`dbed9ed8f3f3c1d1985f2772df6adcf8`
SHA1	`ebda691b5adbaa0f7013d6bfed8ad5fad94d51bd`
SHA256	`80bd3971445d94d13142ea5f7f1b6627e4aae6edd905703f3713217d45639fce`
SHA3	`bcc1942fe2a2f4eb6da52e3de2b5a2d56248c7f0abc0324aa8b1cceaaa3488e0`

162 (#2)

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x482`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.33272`
MD5	`a555f15a66cbae4e9b3a3039e7094d7f`
SHA1	`721e37f80b8200f4af15efa6f2b6001c0fa15a56`
SHA256	`da475f424be719fcfb6d8790b09dad196abfce1be0647d045fa149c3927e8e4c`
SHA3	`00829940c0880a0338ad337d7d98b56c78fc43ec1cfe1972f4e5d9d6b74e837d`

163

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x2da`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.37045`
MD5	`7ff7edf13c68a8291dfce692337a7afe`
SHA1	`0a70d2805f4fd10b94e0908a649996d153826324`
SHA256	`740f912801fca4a3e6885f5bda5b0a8408a26d8bba58f2fa312600ff9c41a7cb`
SHA3	`7dc41107083c5ee04caf60e39a35cb94e931433bf7ec6fe0da71ea6ce89d7f88`

166

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x2aa`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.27059`
MD5	`8ae523086cbf03c80d6109cd312ad75b`
SHA1	`367e1bd6392914cdfeb94439ced3bc42dbf0b052`
SHA256	`6be0451a3b103f32594931b1f36f4e1062023f8028d3f12cd2245adc08ca7eeb`
SHA3	`481014adca074ec910653be61d251a937f60bef682c5428c1ecb462d846a194f`

167

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0xbe`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.09378`
MD5	`73d5955e5887f969e8145002eccbd556`
SHA1	`1154f7e3cdaba652db08bb8bff62e370bb31d97a`
SHA256	`ea8e376555447ebfcbe4a2f618c9dc9d112cd26ffd247f83e59fd6a1997f3965`
SHA3	`38eee9dc4f4e5eff2fda03d9088c110743b5cb9c3c82eae2ecf8c9eed14797e2`

168

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x2e0`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.13156`
MD5	`a678c07e719838cfe99583114b3891ed`
SHA1	`d6f60d5e36d6da8cc842f49ba5e80260242125af`
SHA256	`6615419d32bb61f2bbddf09f63944cabff24e8313845ef5d245b58c930fe367b`
SHA3	`4c9d9fb55ac33d1b1b6bed2b3054f206be6f3707a7c7eccbf5f6a95efe6487f7`

169

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x168`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.88113`
MD5	`9477a3910e6ecd3650b9d86c68317ace`
SHA1	`21ae5620ae7f2de9c7726e1b3d6dbb262af6af77`
SHA256	`82e0208281aed2800fb731cfe249820c1433da28e5100e60cec712ff0fd53539`
SHA3	`baebf03226ce85d7dd0c7a978261187369623d638ad8edb5b6ba78a926291b01`

170

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0xb8c`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.22704`
MD5	`590b71c8601c922785081102b70af0e5`
SHA1	`21a9a0cbf4b63638c1260ffcd6cb65bc2cf8e85a`
SHA256	`8c055255168796ab17614f436c73b778499aeef75e43c34d18d7ae44047239d6`
SHA3	`136c32f1d3520cba77ca10e44035e7624cb28554929c041f9a9fc9d3ddea6100`

171 (#2)

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x4aa`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.39427`
MD5	`2abab27e10336e98d0a2b88c1db78d66`
SHA1	`21cd567068cd1b27b3f4bd0eb5e3f7462204f888`
SHA256	`de4ef38ea861d462c6a240d547f165d8889a8efced411a7f7568a878f253bb67`
SHA3	`da60be73b9c1c2501cdacd9b7bdc0fecb9d06592e8d3a2380027c876250fa6fc`

175

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0xea`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.17732`
MD5	`6301d016a42c1e40d2e9f989c220ba8b`
SHA1	`b0b1bc83e62f188408348c47c20b0bd31b5cd6b6`
SHA256	`e72a9d1058f3f25d4fe36f07e2981727ef3a18872b36cb596df13296b6f4c9f3`
SHA3	`f34b26c098becbe5579d701e87d470bf0b5c185704afe8a30153749384f655e7`

178

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x166`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.15569`
MD5	`daa6f76500026fceed748a9693ad2c87`
SHA1	`7edabaa342b4486b26cf02e8de1f3eb8979b38b5`
SHA256	`a22d31c883b572933f17580e02357d4d6781bf4cfbbec5ee4d11bc0118f22c45`
SHA3	`5cec57d331c1956d2f2cf48630862cf4fd204665b7a8502297280a6b71217073`

179

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x184`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.18863`
MD5	`aca58c28e99034c377291df934ebf5a3`
SHA1	`5645848e985e7b7b1ee64885df1c0bd653b6b5d9`
SHA256	`a4597083b933ff704141dcb45bbe397d0f0c3d3f349d03ffa3d46bdaf72e7029`
SHA3	`bd5a7ecc56a8aa2a9effcbca52a962e3f4e2a57a3934e972b3e29b07a0e1d618`

180

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x184`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.03159`
MD5	`fd9f4dc671b791d53845553c061bffd1`
SHA1	`f9f5a4de57a3623d71d97a94566e30549294f5d3`
SHA256	`b9be109c41d7861b454405e45b41a4496f49efd56015077c6341bf3cb7c3deed`
SHA3	`01f6e9e1dbce0f637f0c8248165d5029adbed9734bd6a1d88f63ac7bcacde9e6`

182

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x128`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.08875`
MD5	`42126912e6b9499e64328f7ffdcbd711`
SHA1	`0dcf3e0168b56a8bb8f4e0028cc21a787ba2abd9`
SHA256	`ba1d0d76587ad8b607318667896ac728a28c04fb265e4ea4056a7675ba8e4890`
SHA3	`4084302b763c4faf591f62bcc387f5628c32ed82e664a898b925de0280bb5a18`

183

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x166`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.09331`
MD5	`b3072b46ead00ca9bce67b4fdc527cd8`
SHA1	`9e314fede99321bd4a60170d9614b86f24cd4ade`
SHA256	`d3f5de350bccc7796bf90356c927132f03f7f7ed6ce20a7d561dd208fc9a0ca3`
SHA3	`458dd9decb19d62cff6e20d3f8449b7f0702591ffa934acec6803326641e1a88`

185

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x250`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.24947`
MD5	`ec3c7e91487189729e49122135f98f72`
SHA1	`0bfbc2e7a65eb7d4b3d5ecafc6b37adaca0bac34`
SHA256	`388eefe7dae32ed7789887f20b86c32bf5f20822c154658f808f67dcd49cefc1`
SHA3	`807fc8c5a67087be0e4542932fbdea8b5149c09075ac69debeb061cb2d508601`

186

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x468`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.29976`
MD5	`727232e3c5d2d54a85cf035181f582aa`
SHA1	`057842eb426b7cccd1dba6d0172efdd0424cfdb8`
SHA256	`e0f755b4fd2abe18453d11c06fd38eca437836c3821c5cb27931107e29555ab2`
SHA3	`c4a52c5a5117840317d4c106c08540b011080e374279d74d9bba1cf8ae4d9332`

187

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x46e`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.34757`
MD5	`ef588f7c98b762b2638f662f4f49a27b`
SHA1	`995c22fdd09b99c38393ba586e5320b43103aa78`
SHA256	`1588297907fa1d281783bbaa3179e2bfdcdfc0e635bb88da3f68c548406c1a24`
SHA3	`f14fa175d92bc75dfda39ad905f233c0779923c9f7e2ff8b62a0548c88b13d61`

188

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0xc6`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.07725`
MD5	`7a8b72c766ea3bd812ab58517129b003`
SHA1	`c24c1f61b95784fc7d865dee0e4d3360b2792a0e`
SHA256	`40af41f6bf82ead16913e462fafe06567cdd6e18c034021ddf2af6690ca8f7a8`
SHA3	`8eb23775ddd8df9f3770caf8f8a572021540422468adbe9efd69b20e3c2b66e2`

189 (#2)

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x41e`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.22091`
MD5	`a71422bccaad201f35b69dfd03ab4f80`
SHA1	`2ed1721b152d2d421f132d4bde34a51ee4461140`
SHA256	`cdfa13a2cdf3b9444821a143cfa90250e2cb3929309a2e45f7a2e487afcee118`
SHA3	`f41e85f4f8bc34f9a8fbfeba35bf07ffda8d7a8a3f4e7a919c3b06eb0b0e78d6`

190

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x184`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.22354`
MD5	`747123dd5c2afd40d83ac4ad51abaed6`
SHA1	`168cada2a529274b6c6ecc6bdaa75792b7898c4a`
SHA256	`74592a3b8bc0791279876f496474ff9c550e12a3e79991ff7a577daccad56245`
SHA3	`fa3c57eb1691a65df923e76015c75f5063abc2d9a03bd06b5418602957674e7b`

191

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x80`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.87989`
MD5	`091cac7ea39bebee9c5254afdfd3704d`
SHA1	`338e12eb89a566b7d9cd5b1d1068fd507a2089b8`
SHA256	`7e1704a5a3f6aa87cdb232d94c666de952d8a9ebe30fcc387c72907c278244a9`
SHA3	`152197fd570aab585676170d3386786aa2d27bfbe746b9a192b0e8af696fa632`

193

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x210`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.23728`
MD5	`8f8a2351f0b645d61916e02d1635681d`
SHA1	`901bcdd301440bd5e7e16a1f1b38366f4c21751b`
SHA256	`c53e7db94c0b7c579fa1210d21f0904d04755f033dfb52b374ce4a1849ccb41a`
SHA3	`a95c8d8b4a5d4c6035f84a58f799c178400bb3006330826af7c79652236e2bd1`

194

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x90`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.05526`
MD5	`a65a7661632910444a10b0dbff823b31`
SHA1	`f59e3a105285ba689327ec42076456443e571d36`
SHA256	`fca9f0954a283d59793967596ec30da046f535fba36290ecd7c3f99297cf7d6f`
SHA3	`0ef0493aaf26b61084f90ee742f624f367463f05e5e318a73be88de453018799`

195

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x84`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.97384`
MD5	`f1798cfa4eeea51351131df6c512a0d4`
SHA1	`87f1060c18694cae58cc5d403b5f0b5a3f5051d7`
SHA256	`8fdad4e5784e87a4c8f06a871aebb8f647ff8afeead0dc541cabf989d84963bb`
SHA3	`af765b81016b88def100b1163e21ae55eccb85861fa031068a44dc168e4eaff3`

196

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x110`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.07322`
MD5	`03db716c2dea38af2f27112a50d7138b`
SHA1	`08f53995d138510bce317af95169559d0bf4306b`
SHA256	`6a25e2fc4fbdd9d1e6808cd225bc04e3de2a1548b05f63a537a1e3d9dfa67c59`
SHA3	`3bfd67ce6808b18aa2a8f4c13828056fb378a25297fce363228a347ec768d2ea`

197

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x4c4`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.17368`
MD5	`72c55148b51f83097683cefbe8cce475`
SHA1	`fd838c6b3ddd70dcab0df2e256c189a7e5679eb0`
SHA256	`8c7e556de55f6e17827a70bd4b0e91d95976662a575be776d1da6a5f02017e1a`
SHA3	`a700f8b02d6914d3f8610a4b6e458cc3cf0b30e176be7dbb843cb55cbba29dbb`

198 (#2)

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0xf5c`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.23243`
MD5	`b6323962d28f8b116d081b96b814d8c8`
SHA1	`49965e263642ecba28acfa25aafcce1750423115`
SHA256	`d315018f6ee927067f79525fa091ac922b035dc883566db6ef4b9acf0ef804ed`
SHA3	`8fbde19e04743586283051fe53a9ab0382741ce817a0d0f07c0d5f6739f73fe7`

199

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x1a0`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.17896`
MD5	`cc430e31c2708c18c73072a5702bdea8`
SHA1	`11fd26587d45278942aad0f259bf1c7b790ef92d`
SHA256	`79de9dac55c0cbd1536555d6e3616d6756030a7a45912173c22ff86e2f04c8f1`
SHA3	`58cd1b897f7eaf4779abad97f61d3d1a2e5368cf3707d91c4d9992bed24ff087`

200

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0xe0`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.96836`
MD5	`943ab84cdb0106e48382c7f0fdbc8ab1`
SHA1	`144dfa862c2c7a5f9f0e8b49de5381ba5641d434`
SHA256	`5ac312577deff3924fa97c8e639073f842891e1c6715c87174a82f1cb79c1def`
SHA3	`c2e6428748e4f12c516c625403b0959733093d9a35a518ecbcdf637ae6a2aa0a`

201

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x550`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.1234`
MD5	`851ea4ba1daa466d95611d1788280c88`
SHA1	`f30f06ef1db0b77b6dad76391148f337380002cb`
SHA256	`8b0ef03385cec75fb56d99661824e03c4b2008aaa5c162e12d47566103f24b0b`
SHA3	`ca6b2a54d54e7fe64766ae3ef987a2fc8197874dc16969d094b57d7d780a5f89`

202

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x80c`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.14742`
MD5	`41ad85953f778c69ee26e9af7c3845bb`
SHA1	`0b7a82e42bf6160a8601157d75be70f443b99721`
SHA256	`c27f42017ce0f221939ef6e7985b8d4f00c42078291a6e7696ab8d07bc966e0f`
SHA3	`e9b81e6b25b8770e9a8fe3d49566f552856381ecf264d5b3c335e98406fed4f1`

205

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x40`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.60759`
MD5	`f053ef491f653db1ecfc5d82a8e77ebf`
SHA1	`8bfcbf16d97ab17bfe6acbc377145ab4a4a41306`
SHA256	`9926a219b6bcd4147f5130c28f010d85f3daaddf9497b93c807d3dbb4ef7c262`
SHA3	`114a3c6818d9ca7cf13d9b899f026276fbe450c6eaea3c4888fb00cfbb036449`

206

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x958`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.18271`
MD5	`f36fd4dc3af1e93d6c0b2bbef1154a92`
SHA1	`abea9004a86e71b224ad6c09067c537bf835ae6d`
SHA256	`0c100daa126997a2d976292cfe33e7393492791f8a953a2e15f633a1465dcad1`
SHA3	`29eb1f01a7114f97859387ff307b4b6094b14af8305c4416dbae99462ee725fc`

207 (#2)

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x102`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.13013`
MD5	`3f210da94455334cf44b027c5481fed1`
SHA1	`eccef2954ba4ccaefcfa80e2b4d31056947962ce`
SHA256	`a86d0151125b8d0dc2419b5a180537d88b2dc4c4f8a1a8371aa5c63bc1e161e3`
SHA3	`94a2fc44c5694b63d1e1f2b329a64be36ddb48147ae1c3a7f7cf2bb741edcbd9`

210

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x78`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.69417`
MD5	`f3ee114a064b7397f2503b7d035f8d0c`
SHA1	`1f4bb54d222eb8188f64d7d543dff4f3f40ee9da`
SHA256	`fc13be868320b54ebc05d0366cc01bd91a9e0f6d369f5406b6981e2546f9d91b`
SHA3	`c2f92ffc078d3349eb6f373a141dcdb5161c186c9eaaaf722a819aabaec5692f`

215 (#2)

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x11c`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.17703`
MD5	`5adbf2def6da66ec68ce9c8a632c0d8a`
SHA1	`75086ceb11102c3ddb41a2f8d8d4642362b006a1`
SHA256	`fca49662b2e86e104f9bc8375d2bc68b9436ac142ac2c25c56e730232a5a3e2a`
SHA3	`841bcd9a2121f0c74d8a659d0cf0862b8574d069791338651e6ac841c2291aad`

221 (#2)

Type	`RT_DIALOG`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x15c`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.12357`
MD5	`6af65e1c317f2f6e091b0fd74777960e`
SHA1	`d88c0b72036fce0b86277fb0300f91f987ead67b`
SHA256	`e441a1b150ea68b3440494dc43272793905086dc918f5544c4aa5289ab795f54`
SHA3	`7c3eccc1d23880aebe166fdd6f30494b45c56380380d67ac11b0772c068ef22d`

102 (#2)

Type	`RT_ACCELERATOR`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x68`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.18738`
MD5	`4e58992ea6c9fe611df5cd9e8fccbf14`
SHA1	`e057ffa24d42fabb12ed6c6cc06267b292d3187b`
SHA256	`6df0042aab0a53665f2f9826dcc12069c834cb94c83eb2a4753cb797645d9cd6`
SHA3	`57f5154835d7bb59bb0602d68fd917edc1d93f3a17b1bd3c9e78772c4043b910`

198 (#3)

Type	`RT_ACCELERATOR`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x70`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.9871`
MD5	`b7837a5fdd70185f61b3c34ba516a490`
SHA1	`1266fec719de18d2a12a46604ffda8c603443a05`
SHA256	`9e878de046c5aa913cad734dccd1ade3bf69b376165a6eb8154479b9ee7fd068`
SHA3	`bd0d30f990b3a48a28f34d14fab76026427623ffe227ed88e4259dd66737207e`

101

Type	`RT_GROUP_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0xbc`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.07117`
Detected Filetype	Icon file
MD5	`32cbad9e3771115c4404d41bbdb0cba7`
SHA1	`3597074a9e34adb31b0c5f7b4e96d50cfeaca1f6`
SHA256	`0312089ff04f88f5f75c226435e862e1637e2eddd6122688d9700c9e7b4de09f`
SHA3	`3b951cd955d8557c3551666277b349f974cc9e95dde19de63fe0f76d82b21aca`

191 (#2)

Type	`RT_GROUP_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x3e`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.55695`
Detected Filetype	Icon file
MD5	`18c40b420a3643925bc11934336e2c7e`
SHA1	`cac794f30e4b490cb06ba0b12978bf04f63970f8`
SHA256	`8ac3d97b0839d3d76649174e93a77ae36c2122537e40ee6a31a62a6c5a18bde7`
SHA3	`25a3f5c9956300d84b65d3b1456afef709b5f47b97e5799a7c612dee02d3b8e5`

192

Type	`RT_GROUP_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x3e`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.61986`
Detected Filetype	Icon file
MD5	`e158dcdefbad524322aa89119adc7ade`
SHA1	`b4152ce00b5a5c7923e01a80a29da106f7d4b28e`
SHA256	`c9903293cfccb2f78ad563cd5963acd21dcdf3df2642f6cf9889bb9bf65cb31e`
SHA3	`5b3cc91429a0cb0ba5cf5d29ba91fbe52bf8d3e9e4800aff734a76595b49058c`

194 (#2)

Type	`RT_GROUP_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x3e`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.57542`
Detected Filetype	Icon file
MD5	`c897cffbf74ac5abac4c41a96c7a9cd6`
SHA1	`3ba70228e794fe4e98da711d6bc157bec96c9205`
SHA256	`8167dbfa8a61dc556cd95c0e4a93da6d3d8502d06c8295d0f92c67ca9a086c1d`
SHA3	`b51469e314ecc50ea9b9143d8160351ad3e9732382af10bbffbfa0179952c06c`

195 (#2)

Type	`RT_GROUP_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x3e`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.61986`
Detected Filetype	Icon file
MD5	`e13a2a34d6ee919b691513042389432b`
SHA1	`7eff7c16e15a150d714570be3715a4e6c0384e27`
SHA256	`feb2bc06a05f027d55f715b18bd9fce0fc06fc00e46ab030ded25965fe4f3d29`
SHA3	`8285922e317ce5ed6c5397d3561d468efc72443ed35afc12b96f60e1b5b8a36d`

216

Type	`RT_GROUP_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x3e`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.55305`
Detected Filetype	Icon file
MD5	`c1ae71ec08e9f6b4825dc5d1779de534`
SHA1	`b34746cb1bea477fbba317cd28c40c0a07965142`
SHA256	`cc6fd7baaa78bbb9a605e76d2954a1aa68cc0ae7926c7327c0ecc8ae040b844f`
SHA3	`15fecf53cad1fe899bf1688d15115a82b17502263bf1a1b4ada371f086385a09`

217

Type	`RT_GROUP_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x3e`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.61986`
Detected Filetype	Icon file
MD5	`a8bf5860712f9f89ebdb243e78f111a7`
SHA1	`8f40acdff0d5a01d013c6b177ac0228c50630829`
SHA256	`017dcc2d65f036135c3b73eacdd154d887f9b1a582547a171bf30a10bb6166fb`
SHA3	`0ab18046db7da1fbe24cc1f6cfa75feda8b4f5de44277df9d560a4d7908a0bf6`

218

Type	`RT_GROUP_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x3e`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.61986`
Detected Filetype	Icon file
MD5	`94ae5daf5c35f76365d655b84f3f653e`
SHA1	`ce6eecbd8f8ecb7a4329c7581833d45a8ff19260`
SHA256	`18bfca20bc6db9f397fc5b9446c6cbb7e2af090c769adcd7b6f62593a33f94d0`
SHA3	`2696367d04e9c0b1d3479fbcc5d8f0a2cfac727ac1f72cb6cbe0de0bf77eabab`

219

Type	`RT_GROUP_ICON`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x3e`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`2.61986`
Detected Filetype	Icon file
MD5	`0f94240ad219582acc87baf27899e6be`
SHA1	`a505b603593528acbdf5f4fcaa577bc9e7c11d62`
SHA256	`44baecf014254407fcf9973974380b3db312d4944356159976924dda964d8211`
SHA3	`486d75098ce8d9bcf203bcc535eb2360a9cd1556cd6c10965d273567cb79e35b`

1 (#2)

Type	`RT_VERSION`
Language	English - United States
Codepage	UNKNOWN
Size	`0x2f4`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`3.40456`
MD5	`4405adc6240dcd1ef6ff91503aba9d07`
SHA1	`8a4de646b83e32270598b289fe40b9eb3fe11bda`
SHA256	`55e54447ff85ab0d0d3eeef625aa7c04b7a280abc45f2e89f27356610790d34c`
SHA3	`591b3871ac23e20bb0630ad99e5077f3aa584e914f3bbc3755a5bd40c9204123`

1 (#3)

Type	`RT_MANIFEST`
Language	English - Australia
Codepage	UNKNOWN
Size	`0x6dc`
TimeDateStamp	1980-Jan-01 00:00:00
Entropy	`5.21011`
MD5	`ab50e2cc1ccedefe61de8fa3a5922c50`
SHA1	`becced60f58ae7f190bb70df1507e604dfec5ea2`
SHA256	`a73095e194f35ef44d15548f7fbbda53e308747cc2d18a052518020df381ef28`
SHA3	`206b6035e8687f97bc1746b181c49a8d64304fe6185b8232fbed165003f4406a`

Version Info

Signature	`0xfeef04bd`
StructVersion	`0x10000`
FileVersion	2.39.0.124
ProductVersion	2.39.0.124
FileFlags	`(EMPTY)`
FileOs	`VOS_DOS_WINDOWS32` `VOS_NT_WINDOWS32` `VOS__WINDOWS32`
FileType	`VFT_APP`
Language	English - Australia
CompanyName	wj32
FileDescription	Process Hacker
FileVersion (#2)	2.39.0.124
InternalName	Process Hacker
LegalCopyright	Licensed under the GNU GPL, v3.
OriginalFilename	ProcessHacker.exe
ProductName	Process Hacker
ProductVersion (#2)	2.39.0.124

Resource LangID	English - United States

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics	`0`
TimeDateStamp	2016-Mar-29 01:34:01
Version	`0.0`
SizeofData	`83`
AddressOfRawData	`0x13a1bc`
PointerToRawData	`0x1393bc`
Referenced File	D:\Projects\processhacker2\bin\Release64\ProcessHacker.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics	`0`
TimeDateStamp	2016-Mar-29 01:34:01
Version	`0.0`
SizeofData	`20`
AddressOfRawData	`0x13a210`
PointerToRawData	`0x139410`

IMAGE_DEBUG_TYPE_POGO

Characteristics	`0`
TimeDateStamp	2016-Mar-29 01:34:01
Version	`0.0`
SizeofData	`848`
AddressOfRawData	`0x13a224`
PointerToRawData	`0x139424`

IMAGE_DEBUG_TYPE_ILTCG

Characteristics	`0`
TimeDateStamp	2016-Mar-29 01:34:01
Version	`0.0`
SizeofData	`0`
AddressOfRawData	`0`
PointerToRawData	`0`

TLS Callbacks

Load Configuration

Size	`0x94`
TimeDateStamp	`1970-Jan-01 00:00:00`
Version	`0.0`
GlobalFlagsClear	`(EMPTY)`
GlobalFlagsSet	`(EMPTY)`
CriticalSectionDefaultTimeout	`0`
DeCommitFreeBlockThreshold	`0`
DeCommitTotalFreeThreshold	`0`
LockPrefixTable	`0`
MaximumAllocationSize	`0`
VirtualMemoryThreshold	`0`
ProcessAffinityMask	`0`
ProcessHeapFlags	`(EMPTY)`
CSDVersion	`0`
Reserved1	`0`
EditList	`0`
SecurityCookie	`0x140152018`

RICH Header

XOR Key	`0xf9d1a093`
Unmarked objects	`0`
241 (40116)	`11`
243 (40116)	`143`
242 (40116)	`22`
ASM objects (23406)	`7`
C++ objects (23406)	`28`
C objects (23406)	`19`
244 (40116)	`2`
239 (40116)	`27`
Total imports	`571`
264 (VS2015 UPD1 build 23506)	`160`
Exports (VS2015 UPD1 build 23506)	`1`
Resource objects (VS2015 UPD1 build 23506)	`1`
151	`1`
Linker (VS2015 UPD1 build 23506)	`1`