npggNT.des
- ntdll.dll
- NtLoadDriver
- NtOpenProcess
- NtProtectVirtualMemory
- NtQuerySystemInformation
- NtReadVirtualMemory
- NtSuspendProcess
- NtSuspendThread
- NtTerminateProcess
- NtTerminateThread
- NtWriteVirtualMemory
- RtlGetNativeSystemInfor
- ZwLoadDriver
- ZwOpenProcess
- ZwProtectVirtualMemory
- ZwQuerySystemInformatio
- ZwReadVirtualMemory
- ZwSuspendProcess
- ZwSuspendThread
- ZwTerminateProcess
- ZwTerminateThread
- ZwWriteVirtualMemory
- kernel32.dll
- CreateProcessInternalW
- DebugActiveProcess
- DeviceIoControl
- GetProcAddress
- LoadLibraryExW
- MapViewOfFile
- MapViewOfFileEx
- MoveFileW
- OpenProcess
- ReadProcessMemory
- VirtualProtect
- VirtualProtectEx
- WriteProcessMemory
- advapi32.dll
- CreateProcessWithLogonW
- gdi32.dll
- GetPixel
- user32.dll
- GetWindowThreadProcessI
- PostMessageA
- PostMessageW
- SendInput
- SendMessageA
- SendMessageW
- SetCursorPos
- SetWindowsHookExA
- SetWindowsHookExW
- keybd_event
- mouse_event
- winsta.dll
- WinStationTerminateProc
dump_wmimmc.sys
- NtConnectPort
- ZwConnectPort
- NtOpenProcess
- ZwOpenProcess
- NtProtectVirtualMemory
- ZwProtectVirtualMemory
- NtReadVirtualMemory
- ZwReadVirtualMemory
- NtWriteVirtualMemory
- ZwWriteVirtualMemory
- SendInput
http://www.networktemple.com/forum/maplestory-discussion/17512-how-d-gameguard-work.html