| Page | Module | Modified | Author |
| NtSetSystemInformation | ntdll | 02/25/2021 10:00 AM | -176.88.91.74 |
| NtRaiseHandError | ntdll | 02/25/2021 9:59 AM | -176.88.91.74 |
| RtlAdjustPrivilege | ntdll | 02/25/2021 9:53 AM | -176.88.91.74 |
| OpenProcess | kernel32 | 02/24/2021 7:43 AM | -82.217.243.244 |
| CredWrite | advapi32 | 02/19/2021 3:43 AM | -5.10.190.138 |
| Playground | misc | 02/16/2021 10:09 AM | -90.252.215.81 |
| WlanScan | wlanapi | 02/12/2021 7:09 PM | -182.1.99.150 |
| SetWindowPlacement | user32 | 02/11/2021 7:24 PM | -73.47.171.17 |
| GetWindowPlacement | user32 | 02/11/2021 7:16 PM | -73.47.171.17 |
| midiInGetDevCaps | winmm | 02/11/2021 11:01 AM | -70.166.33.5 |
| NtQueryWnfStateData | ntdll | 02/11/2021 6:27 AM | David Courtel-89.88.236.149 |
| SHQueryUserNotificationState | shell32 | 02/11/2021 3:30 AM | -89.88.236.149 |
| minaisabutt | user32 | 02/05/2021 10:53 PM | -73.47.171.17 |
| Idn poker | user32 | 02/05/2021 10:52 PM | -73.47.171.17 |
| GetCursorPos} | user32 | 02/05/2021 10:51 PM | -73.47.171.17 |
| 123 | user32 | 02/05/2021 10:47 PM | -73.47.171.17 |
| EnumYoMama | user32 | 02/05/2021 10:46 PM | -73.47.171.17 |
| MonitorFromPoint | user32 | 02/05/2021 8:25 AM | -82.192.246.90 |
| MapWindowPoints | user32 | 02/05/2021 8:24 AM | -82.192.246.90 |
| IsThemeActive | uxtheme | 02/02/2021 10:26 AM | -45.18.15.167 |
| DrawThemeIcon | uxtheme | 02/02/2021 10:25 AM | -45.18.15.167 |
| EnableThemeDialogTexture | uxtheme | 02/02/2021 10:24 AM | -45.18.15.167 |
| PresentationFramework | user32 | 01/18/2021 4:11 PM | -62.168.119.130 |
| OleCreatePictureIndirect | oleaut32 | 01/10/2021 4:46 PM | skuehlshelby-73.131.232.17 |
| LsaQueryInformationPolicy | netapi32 | 01/10/2021 4:03 PM | -165.225.114.95 |
| ZwQueryInformationProcess | ntdll | 01/10/2021 1:02 PM | -31.124.110.146 |
| TrackPopupMenuEx | coredll | 01/07/2021 6:27 PM | -109.78.197.28 |
| IShellItem | Interfaces | 12/30/2020 5:15 PM | -204.141.110.75 |
| AdjustWindowRectEx | user32 | 12/30/2020 4:35 AM | semihartan-88.235.51.102 |
| DeviceIoControl | kernel32 | 12/27/2020 2:45 AM | -84.110.53.106 |
| FormatMessage | kernel32 | 12/27/2020 2:24 AM | -84.110.53.106 |
| lmao | kernel32 | 12/21/2020 7:50 PM | -67.164.116.220 |
| CreateMutex | kernel32 | 12/16/2020 3:25 AM | -87.95.55.7 |
| CTL_CODE | kernel32 | 12/15/2020 3:11 AM | -84.110.53.106 |
| Win32ErrorCodes | Constants | 12/14/2020 4:00 PM | -71.244.49.157 |
| GetWindowText | user32 | 12/10/2020 12:10 PM | -71.239.92.169 |
| GetTopWindow | user32 | 12/10/2020 1:37 AM | -199.203.190.21 |
| SYSTEMTIME | Structures | 12/07/2020 4:47 AM | -185.211.159.214 |
| SYSTEM_POWER_POLICY | powrprof | 11/30/2020 3:55 PM | -76.247.6.185 |
| NtCreateSection | ntdll | 11/28/2020 6:49 PM | -186.136.223.176 |
| DhcpDeleteClientInfo | dhcpsapi | 11/20/2020 8:58 AM | -109.182.206.121 |
| AddAce | advapi32 | 11/18/2020 11:36 AM | -192.180.154.40 |
| NtQueryInformationProcess | ntdll | 11/16/2020 3:19 PM | -186.136.223.176 |
| NtWow64QueryInformationProcess64 | ntdll | 11/16/2020 3:19 PM | -186.136.223.176 |
| NtWow64WriteVirtualMemory64 | ntdll | 11/16/2020 3:18 PM | -186.136.223.176 |
| NtWow64ReadVirtualMemory64 | ntdll | 11/16/2020 3:18 PM | -186.136.223.176 |
| NtCreateUserProcess | ntdll | 11/16/2020 3:17 PM | -186.136.223.176 |
| CreateProcess | kernel32 | 11/16/2020 3:10 PM | -186.136.223.176 |
| ZwCreateThreadEx | ntdll | 11/16/2020 3:07 PM | -186.136.223.176 |
| NtMapViewOfSection | ntdll | 11/16/2020 3:05 PM | -186.136.223.176 |
| NtClose | ntdll | 11/16/2020 3:02 PM | -186.136.223.176 |
| NtCreateThreadEx | ntdll | 11/16/2020 3:02 PM | -186.136.223.176 |
| NtProtectVirtualMemory | ntdll | 11/16/2020 3:01 PM | -186.136.223.176 |
| NtWriteVirtualMemory | ntdll | 11/16/2020 3:01 PM | -186.136.223.176 |
| NtAllocateVirtualMemory | ntdll | 11/16/2020 3:00 PM | -186.136.223.176 |
| NtOpenProcess | ntdll | 11/16/2020 3:00 PM | -186.136.223.176 |
| NtTerminateProcess | ntdll | 11/16/2020 2:58 PM | -186.136.223.176 |
| NtTerminateThread | ntdll | 11/16/2020 2:56 PM | -186.136.223.176 |
| GetProcessId | kernel32 | 11/16/2020 2:53 PM | -186.136.223.176 |
| NtQueryVirtualMemory | ntdll | 11/16/2020 2:50 PM | -186.136.223.176 |
| VirtualQueryEx | kernel32 | 11/16/2020 2:47 PM | -186.136.223.176 |
| NtSetContextThread | ntdll | 11/16/2020 2:45 PM | -186.136.223.176 |
| NtGetContextThread | ntdll | 11/16/2020 2:43 PM | -186.136.223.176 |
| NtResumeThread | ntdll | 11/16/2020 2:39 PM | -186.136.223.176 |
| RtlDestroyProcessParameters | ntdll | 11/16/2020 2:37 PM | -186.136.223.176 |
| RtlGetCurrentPeb | ntdll | 11/16/2020 2:36 PM | -186.136.223.176 |
| RtlInitUnicodeString | ntdll | 11/16/2020 2:34 PM | -186.136.223.176 |
| RtlCreateProcessParametersEx | ntdll | 11/16/2020 2:32 PM | -186.136.223.176 |
| QueueUserAPC | kernel32 | 11/16/2020 2:30 PM | -186.136.223.176 |
| TerminateProcess | kernel32 | 11/16/2020 2:28 PM | -186.136.223.176 |
| TerminateThread | kernel32 | 11/16/2020 2:27 PM | -186.136.223.176 |
| Wow64GetThreadContext | kernel32 | 11/16/2020 2:26 PM | -186.136.223.176 |
| Wow64SetThreadContext | kernel32 | 11/16/2020 2:26 PM | -186.136.223.176 |
| SetThreadContext | kernel32 | 11/16/2020 2:23 PM | -186.136.223.176 |
| GetThreadContext | kernel32 | 11/16/2020 2:19 PM | -186.136.223.176 |
| ReadProcessMemory | kernel32 | 11/16/2020 2:14 PM | -186.136.223.176 |
| CloseHandle | kernel32 | 11/16/2020 2:06 PM | -186.136.223.176 |
| VirtualProtectEx | kernel32 | 11/16/2020 2:05 PM | -186.136.223.176 |
| VirtualAllocEx | kernel32 | 11/16/2020 2:04 PM | -186.136.223.176 |
| Sleep | kernel32 | 11/16/2020 2:03 PM | -186.136.223.176 |
| GetTickCount | kernel32 | 11/16/2020 2:02 PM | -186.136.223.176 |
| IsDebuggerPresent | kernel32 | 11/16/2020 2:00 PM | -186.136.223.176 |
| CheckRemoteDebuggerPresent | kernel32 | 11/16/2020 1:58 PM | -186.136.223.176 |
| DeleteProcThreadAttributeList | kernel32 | 11/16/2020 1:54 PM | -186.136.223.176 |
| UpdateProcThreadAttribute | kernel32 | 11/16/2020 1:53 PM | -186.136.223.176 |
| InitializeProcThreadAttributeList | kernel32 | 11/16/2020 1:51 PM | -186.136.223.176 |
| ResumeThread | kernel32 | 11/16/2020 1:48 PM | -186.136.223.176 |
| RtlCreateUserThread | ntdll | 11/16/2020 1:44 PM | -186.136.223.176 |
| CreateRemoteThread | kernel32 | 11/16/2020 1:38 PM | -186.136.223.176 |
| NtReadVirtualMemory | ntdll | 11/16/2020 1:32 PM | -186.136.223.176 |
| GetCurrentProcessId | kernel32 | 11/16/2020 1:27 PM | -186.136.223.176 |
| RtlGetVersion | ntdll | 11/16/2020 1:25 PM | -186.136.223.176 |
| VirtualProtect | kernel32 | 11/16/2020 1:23 PM | -186.136.223.176 |
| VirtualAlloc | kernel32 | 11/16/2020 1:14 PM | -186.136.223.176 |
| VirtualFree | kernel32 | 11/16/2020 1:14 PM | -186.136.223.176 |
| GetPixel | gdi32 | 11/16/2020 2:13 AM | -188.246.251.25 |
| Boshit | user32 | 11/15/2020 9:25 PM | -165.225.48.74 |
| GetLastInputInfo | user32 | 11/10/2020 12:41 PM | -70.130.76.223 |
| GetForegroundWindow | user32 | 11/10/2020 12:39 PM | -70.130.76.223 |
| CreateFile | kernel32 | 11/09/2020 11:09 AM | -81.82.109.244 |
