pos 930B4: nProtectGameMon
pos 930D8: Thread32Next
pos 930EC: Thread32First
pos 93100: Module32Next
pos 93114: Module32First
pos 9313C: Process32First
pos 9316C: Kernel32
pos 9317C: NtOpenThread
pos 93190: NtQueryObject
pos 931A4: NtQueryInformationProcess
pos 931C4: NtQueryInformationThread
pos 93204: NTDLL
pos 93210: GetMappedFileNameA
pos 93228: GetModuleFileNameExA
pos 93244: EnumProcessModules
pos 9325C: EnumProcesses
pos 93270: PSAPI
pos 9327C: N/A (security restriction)
pos 9329C: N/A (error2)
pos 932B0: N/A (error1)
pos 932C4: N/A (error3)
pos 932D8: N/A (error4)
pos 932EC: N/A (error5)
pos 933F8: -_Exception in DisplayApiCode, code: %08x, addr: %08x
pos 93434: %s: %02X %02x %02X %02X %02X %02X %02X %02x %02X %02X
pos 93490: LAC oIGG AHResult: %x, %s
pos 934B0: peanut, parent: %lu
pos 934DC: LAC IGG AHResult: %x, %s
pos 934FC: HookProcess: pid: %lu
pos 93518: Rehooked. %lu
pos 9352C: CopyFile Fail %d, %s
pos 93560: npggNT.des
pos 93574: InitGameHook fail, bFail: %d, dwSuccess: %d, dwFail: %d
pos 935D4: Fail[%d] SetDriverEnable()
pos 935F4: -- InitGameHook Done.
pos 93610: InitGameHook bte fail
pos 9362C: version fail %d
pos 93640: procinfo: %x, %x, %x
pos 9365C: prena0
pos 93668: prenoop
pos 93674: procinfo: %x, %x, %x
pos 93690: Init Failed.
pos 936A4: LAC IGG Success
pos 936B8: not loaded. load now
pos 936D4: Already loaded.
pos 936E8: LAC IGG Success??
pos 93724: NATIVE SYSTEM PROCESS, %s, skip
pos 93754: -- InitGameHook Oncemore
pos 93774: InitGameHook fail, bFail: %d, bSuccess: %d
pos 937C0: Init Already.
pos 937D4: Init Failed.
pos 937E8: Init Failed. old
pos 93800: LAC IGG Success
pos 93820: exp fail
pos 93830: next: %x
pos 93854: free fail %d
pos 93868: AllocationBase: %x
pos 93880: not enough memory? try once aga\M
pos 938A8: rfl: %d
pos 938B4: kernel32.dll
pos 938C8: FreeLibrary
pos 938D8: procinfo: %x, %x, %x
pos 938F4: LAC IGG AHResult: %x, %s
pos 93914: GameHook: Hooking %lu='%s' ..
pos 93938: NATIVE SYSTEM PROCESS, %s, skip
pos 9395C: N/A, %lu, %s, %x
pos 93974: N/A
pos 9397C: OpenProcess %lu fail, %lu
pos 9399C: Shstat Process, %s, skip
pos 939BC: Slsvc Process, %s, skip
pos 939D8: Game Process, %s, skip
pos 939F4: GameMon Process, %s, skip
pos 93A64: ssm but setSDT fail
pos 93A7C: DoHide failed
pos 93A90: ss
pos 93A98: NtIce
pos 93AB4: sacs: %x, %x, %x, %x %x, %x
pos 93AD4: GGDrv loaded.
pos 93AE8: Fail[%d] SetHookInfo()
pos 93BB4: NtDeviceIoControl
pos 93BCC: GetWindowDC
pos 93BDC: GetDCEx
pos 93BE8: GetDC
pos 93BF4: NtWriteFile
pos 93C04: NtOpenSection
pos 93C18: NtCreateSection
pos 93C2C: NtQueryInformationProcess
pos 93C4C: NtOpenThread
pos 93C60: NtGetContextThread
pos 93C78: NtResumeThread
pos 93C8C: NtCreateThread
pos 93CA0: NtQuerySystemInformation
pos 93CC0: NtQueryVirtualMemory
pos 93CDC: SendInput
pos 93CEC: NtProtectVirtualMemory
pos 93D08: NtWriteVirtualMemory
pos 93D24: NtReadVirtualMemory
pos 93D3C: NtOpenProcess
pos 93D50: Fail[%d] SetExcludePid()
pos 93D70: ver: %d
pos 93D7C: GGDrv version: %d, o: %x
pos 93D9C: Admin Only
pos 93DAC: Limited Account
pos 93E10: Fail[%d] GmguardStartDriver()
pos 93E34: now try to load ggdrv
pos 93E50: Admin Account
pos 93E64: RtlAdjustPrivilege
pos 93E7C: NtResumeThread: %x
pos 93E94: NtQuerySystemInformation: %x
pos 93EB8: LdrGetDllHandle: %x
pos 93ED0: NtOpenProcess
pos 93EE4: LdrLoadDll
pos 93EF4: NtProtectVirtualMemory
pos 93F10: NtResumeThread
pos 93F24: NtQuerySystemInformation
pos 93F44: LdrGetDllHandle
pos 93F58: ntdll.dll
pos 93F68: send
pos 93F74: ws2_32.dll
pos 93F84: MapViewOfFileEx
pos 93F98: CreateProcessInternalW
pos 93FB4: LoadLibraryExW
pos 93FC8: Kernel32.dll
pos 93FDC: user32.dll
pos 93FEC: driver: KLIF
pos 94000: \\.\KLIF
pos 94010: Rav driver
pos 94020: \\.\BaseTDI
pos 94030: XprotEvent
pos 94040: ezktecas driver
pos 94054: \\.\EZKTECAS
pos 94068: prevx1 driver
pos 9407C: \\.\pxfsf
pos 9408C: ghostsec driver
pos 940A0: \\.\Ghostsec
pos 940B4: jamilah driver
pos 940C8: \\.\jamilah
pos 940D8: za driver
pos 940E8: \\.\vsdatant
pos 940FC: ssm driver
pos 9410C: \\.\MCNAHook
pos 94128: procguard
pos 94138: \\.\procguard
pos 9414C: NPGG_MUTEX: %x
pos 94188: MtxNPGG
pos 94194: Global\MtxNPGG
pos 941A8: g_dwAudiodgPID: %lu
pos 941C0: ShstatPID: %lu, %s
pos 941D8: \shstat.exe
pos 941E8: SlsvcPID: %lu, %s
pos 94200: \system32\slsvc.exe
pos 94218: CsrssPID: %lu, %s
pos 94248: LsassPID: %lu, %s
pos 94260: \system32\lsass.exe
pos 94278: SmssPID: %lu, %s
pos 942A8: ClonePID: %lu, %s
pos 942C0: CloneFile: %s
pos 942D4: DLL HashValue 3
pos 942E8: auth fail %s, %d %lu
pos 94304: HOOKSDLL: %s
pos 94318: not found hookdll, %s
pos 94334: npgg9x.des
pos 94344: DLL HashValue
pos 94358: auth fail %s, %d %lu
pos 94374: gamemon: %s
pos 94384: GetModuleFileName fail %d
pos 943A4: -- InitGameHook
pos 943B8: -- CloseGameHook Done
pos 943D4: GGDrv Unloaded
pos 943E8: SetSDT recover: %d
pos 94400: Terminate Game, terminate: %d
pos 94424: -_Exception in UnloadGameHook, code: %08x, addr: %08x
pos 94460: Fail[%d] SetDriverDisable()
pos 94480: -- CloseGameHook Start
pos 9449C: -- UnloadGameHook Done
pos 944B8: CloseGameHook fail, bSuccess: %d
pos 944E0: GameHookH: Unloading %lu='%s' ..
pos 94528: ULM AHResult: %x, %s
pos 94544: still present. Try once again.
pos 94568: Unload Success
pos 9457C: strange error!
pos 94590: LAC CGG AHResult: %x, %s
pos 945B0: Close Failed
pos 945C4: LAC CGG Success
pos 945D8: GameHook: Unloading %lu='%s' ..
pos 94620: Admin Account
pos 94634: RtlAdjustPrivilege
pos 9464C: -- UnloadGameHook
pos 94664: SetGameHook fail, bFail: %d, bSuccess: %d
pos 94694: -- SetGameHook Done.
pos 946B0: SetGameHookH: %lu='%s'
pos 946CC: strange error!
pos 946E0: LAC SGH AHResult: %x, %s
pos 94700: Failed.
pos 9470C: SetGameHook: %lu='%s'
pos 94728: NATIVE SYSTEM PROCESS, %s, skip
pos 9474C: RtlAdjustPrivilege
pos 94764: -- SetGameHook: %x, %lu, %x, %x
pos 94788: Check reg fail: %lu
pos 947A0: RegCrc diff %x, %x
pos 947B8: crc32file fail %s, %d %d
pos 947D8: SOFTWARE\INCAInternet\nProtectGameGuard\Update
pos 9480C: failed to close current registry hive
pos 94888: Fix api: %s
pos 948F4: vpe fail: %lu
pos 94908: wpm fail: %d, dwWrite: %d, %lu
pos 94AC8: diff %08x, %02x, %02x
pos 94AE4: -_Exception in OverwriteDll, code: %08x, addr: %08x
pos 94B1C: OWD: %d %d %d %d %d
pos 94B34: ws2_32.dll
pos 94B44: advapi32.dll
pos 94B68: kernel32.dll
pos 94B7C: ntdll.dll
pos 94B8C: owc fail %d
pos 94B9C: owc fail %d
pos 94BAC: - diff: %s %x
pos 94BD8: owc fail %d
pos 94BE8: diffIAT %08x, %02x, %02x
pos 94C08: ImageBase diff: mem: %x, file: %x
pos 94C30: TimeStamp diff: mem: %x, file: %x
pos 94C58: SizeOfImage diff: mem: %x, file: %x
pos 94C80: Bad SectionHeader
pos 94C98: MDOI: %s
pos 94CE4: MDO: %d %d %d %d
pos 94CFC: advapi32.dll
pos 94D2C: dwAddrAspr2: %x %x
pos 94D74: skip 1 byte(%x)
pos 94D88: dwAddrAspr4: dwMem:%x, aspr4:%x, crc:%x
pos 94DB4: 68: %x %x (%x): %x %x %x %x %x %x %x %x %x
pos 94DE4: skip 1 byte(%x)
pos 94DF8: not skip 1 byte(%x)
pos 94E10: dwAddrAspr3: dwMem:%x, aspr3:%x, crc:%x
pos 94E3C: e9: %x %x (%x): %x %x %x %x %x %x %x %x %x
pos 94E6C: poly start %x
pos 94E80: skip 1 btye(0004)
pos 94F3C: AnGunHapZa_2009.03.17
pos 94F5C: ZIZONAuto_2009.04.27
pos 94F78: BlackBox_2008.02.22
pos 94F90: IKan153_2007.01.31
pos 94FA8: Revolution_2006.11.07
pos 94FC4: Autostick_2006.11.07
pos 94FE0: Autonara_2006.11.07
pos 94FF8: useless: %d
pos 95008: BlackBox_2008.03.28
pos 95020: ATplay_2009.04.06
pos 95038: checkp HWM found: %x %x %x %x
pos 9505C: CM_Get_Parent
pos 95070: CM_Get_Sibling
pos 95084: CM_Get_Child
pos 95098: CM_Get_DevNode_Registry_PropertyA
pos 950C0: CM_Locate_DevNodeA
pos 950D8: \cfgmgr32.dll
pos 950EC: \setupapi.dll
pos 95108:  :  
pos 95114: [Port%d] 
pos 9512C: \\.\HCD%d
pos 95314: %10lu  %s
pos 95324:     PID     Process Name
pos 95344: --- Process List ---
pos 95360: ReadSMThread end
pos 95378: KERNEL MODE DETECT
pos 95390: Global\dump_wmimmc_event8
pos 953B0: Global\dump_wmimmc_event9
pos 953D0: dwLen >= SM_MAX_SIZE-4, %lu
pos 953F0: (SH-
pos 953FC: : %s
pos 95408: Check Running npsc
pos 95420: cgc fail %d, %d
pos 95434: Global\EnxNPGL
pos 95448: /NewSession, %lu, %s
pos 95470: *** SpeedHack Detect ***
pos 95490: ApiCheck %d
pos 954A0: *** Hack Detect ***
pos 954B8: ModuleCheck %d
pos 954CC: SpeedCheck hackinfo message %lu, %hs
pos 954F8: SpeedCheck erl message %lu, %hs
pos 95534: SpeedHack!
pos 95544: Rescan, %lu
pos 95554: checkpmapre 3 time fail %lu
pos 95588: NewModuleScan: (PID: %d, Base: %x, %s)
pos 955B4: :\Windows\System32\
pos 955E8: CronousJP
pos 955F8: psapi.dll
pos 95608: GameGuard.des
pos 9561C: push Ctrl+Alt+Del, close
pos 9563C: taskmgr
pos 95648: GetGameLibMutex: %d
pos 95660: NewProcess, %lu
pos 95674: CCP fail pid: %lu, Parent: %lu, PrevParent: %lu
pos 956A8: Check PID, %lu, ^%lu, m: %lu, g: %lu
pos 956D4: Hook Error, %lu
pos 956E8: NewScan Twice pid: %lu
pos 95704: NewScan Once pid: %lu
pos 95720: checkpmemrangei2 %lu, [%s]:%s, i: %d
pos 9574C: gscv0
pos 9595C: 0412
pos 95968: checkpbackdoor hzdll found :(  %lu, i: %d
pos 95998: NEW_GAME_MODULE_PATTERN
pos 959B4: checkpmemrangei %lu, i: %d
pos 959D4: 1003B pass
pos 959E4: ChkTerm : %lu
pos 959F8: ChkTerm long : %lu
pos 95A10: draw failed fk
pos 95A24: ttggtt4
pos 95A30: -- InitNPGM Done
pos 95A48: Run gmt: %x
pos 95A58: NPGE ProtectionLevel: %d
pos 95A78: NPGECMCW
pos 95A88: Game Process not exist
pos 95AA4: Can't Load GG SCAN, %d, %lu
pos 95AC4: ggscan hash fail
pos 95ADC: DLL HashValue 2
pos 95AF0: ggscan.des
pos 95B00: Mismatched a ggscan version. %ld
pos 95B28: --- ggscan.des revision: %d ---
pos 95B4C: auth fail ggscan.des, %d %lu
pos 95B70: ggscan.des not found
pos 95B8C: \ggscan.des
pos 95B9C: ReExec wait succb_V
pos 95BB4: DoHookProcessNT, %x
pos 95BCC: ReExec wait success, hook now
pos 95BF0: ReExec wait fail
pos 95C08: RE EPF %d %d
pos 95C1C: ODI: %x
pos 95C28: em %x
pos 95C34: ntdll.dll
pos 95C44: kernel32.dll
pos 95C58: ReExec, GameProcess is inited. fail! %x
pos 95C9C: bgg%d
pos 95CC0: ScanThread(%x) ID: %lu
pos 95CDC: CreateThread fail ScanThread, %d
pos 95D04: GameMonThread(%x) ID: %lu
pos 95D4C: CreateEvent fail MonThread, %d
pos 95D70: CreateEvent fail ScanThreadDone, %d
pos 95DB8: CreateThread fail ReadSMThread, %d
pos 95DE0: CreateEvent fail hReadSMDieEvent, %d
pos 95E2C: NPGG_SHAREDMEM: %x
pos 95E44: InitNPGM: Can't create sharedmem! %d
pos 95E70: SmxNPGG
pos 95E7C: Global\SmxNPGG
pos 95E90: GGSM_MUTEX: %x
pos 95EA4: InitNPGM: Can't create mutex! %d
pos 95ECC: MtxGGSM
pos 95ED8: Global\MtxGGS2
pos 95EEC: Limited Privilege
pos 95F04: \GameMon.des
pos 95F18: reggmns: %lu
pos 95F2C: Admin Privilege
pos 95F40: RtlAdjustPrivilege
pos 95F58: NtGetContextThread
pos 95F70: RegisterServiceProcess
pos 95F8C: -- InitNPGM
pos 95F9C: CloseNPGM Done
pos 95FB0: Try to turn off npscan
pos 95FCC: --- Explorer Module
pos 95FE4: --- GameMon Module
pos 95FFC: Terminate MSThread
pos 96014: \Microsoft\Internet Explorer\Recovery\Active
pos 96048: Terminate MonThread
pos 96060: Terminate ScanThread
pos 9607C: lol98
pos 96088: UserInfo[%d]: %s
pos 960A0: CloseNPGM
pos 960B0: -- InitNPSC Done
pos 960C8: InitSpeedCheck fail, %d
pos 960E4: auth fail npsc.dll
pos 960FC: npsc: %s
pos 9610C: npsc.des
pos 9611C: -- InitNPSC Start
pos 96134: CloseNPSC done
pos 96148: Kill process fail %lu, %d
pos 96168: Kill process %lu
pos 96180: Hard kill: %lu
pos 961BC: kernel32.dll
pos 961D0: ExitProcess
pos 96200: inproc, UnRegisterHook: ret: %lu
pos 96228: inproc.dll
pos 96238: UnRegisterHook
pos 9624C: hook.dll
pos 9625C: UnHookAPI9x
pos 9626C: SetGameHook no api swh: %lu
pos 9628C: File not found
pos 962A0: File does NOT exist, %d, %d, %s
pos 962C4: Scan ProcName: %s
pos 962DC: N/A
pos 962E4: Scan pid: %lu
pos 96334: -_Exception in GetWindowList, code: %08x, addr: %08x
pos 96370: Thread32Next
pos 96384: Thread32First
pos 96398: Module32Next
pos 963AC: Module32First
pos 963C0: Process32Next
pos 963D4: Process32First
pos 963E8: CreateToolhelp32Snapshot
pos 96408: !!! ProcessCount %d
pos 96420: audiodg.exe
pos 96430: VMwareService.exe
pos 96448: explorer.exe
pos 9645C: !%-20s  %5lu  %5lu      %3ld
pos 96480: !Process Name            PID  Threads  Priority
pos 964B4: GBL %d
pos 964C0: !%-20s  %08X   %8lu   %s
pos 96518: Run st: %x
pos 96528: st end
pos 96534: AutoMacro
pos 96544: BlueCodeMouse
pos 96558: auth fail npgmup.dll
pos 96574: npgmup.des
pos 96584: version fail
pos 96598: ScanThread scan done
pos 965B4: Terminated npsc
pos 965C8: Check processes
pos 965DC: Check kernel modules
pos 965F8: Check hack
pos 96608: Check hack once
pos 9661C: ScanThread Started
pos 96634: QueryDP, hPort: %x
pos 9664C: 2cnt: %d %d
pos 9665C: rsl
pos 96664: Fsd: %d
pos 96670: QuerySKD: %x
pos 96684: QueryDP, hMyPort: %x
pos 966AC: pidp th
pos 966B8: inicv changed: %x %x
pos 966D4: dwOption changed: %x
pos 966F0: mt end
pos 96708: npsc cgcd fail %d
pos 96720: cgc fail %d
pos 96730: cgcd fail %d %s
pos 96750: Game's SID [%d]: %d
pos 96768: SID: %d
pos 96774: /Session [%d] Closed
pos 96790: Game Process not exist
pos 967AC: can't received NPM_COMMPIPE_PID [%d]
pos 967D8: CREFC: HDR
pos 967E8: CREFC: %d %s %x %x %x %x %x
pos 96808: NPGEAE
pos 96814: doesn't enctypted?
pos 9682C: gamecrc[%d]: %x %x
pos 96844: gamecrcsc[%d]: %x %x
pos 96860: dwFileCrc[%d] recorded: %x
pos 9689C: NPGECMCW success, %s %x %x
pos 968BC: 3 unpacked?
pos 968CC: 3 unpacked? %x %x
pos 968E4: 3 unpacked? %x
pos 968F8: gamecrcpc[%d]: %x %x, size: %x
pos 9693C: d unpacked? %x
pos 96950: unpacked? %x
pos 96964: gamecrcpc2[%d]: %x %x, size: %x
pos 96988: wb
pos 96990: .dat
pos 969C0: dwNum is too large: %x
pos 969DC: Enc is zero, filesize: %lu
pos 969FC: Num: %x, Enc: %x, %x, dwSkipArrayOffset: %x
pos 96A2C: .rdata
pos 96A38: (%s) ts: %x, %x
pos 96A4C: .bak
pos 96A58: .text
pos 96A64: .textbss
pos 96A74: gamecrc3[%d]: ok
pos 96A8C: NPGEClient  
pos 96AA0: lac GMH fail: %x, %d
pos 96ABC: GetModuleHandleA
pos 96AD4: cgcd file not found
pos 96AEC: cgcd end, ret: %d %ld
pos 96B08: SpecialForce game client altered.
pos 96B30: cgc end, ret: %d %ld
pos 96B4C: cgc start %lu
pos 96B60: cgcd start %lu %s
pos 96B78: get version failed. GameGuard Folder Ver: %d, Game Folder Ver: %
pos 96BC0: copy ini failed GLE: %d
pos 96BDC: copy ini file success
pos 96BF8: ..\%s.ini
pos 96C08: copy GameGuard.des failed GLE: %d
pos 96C30: copy GameGuard.des success
pos 96C50: .ini
pos 96C5C: GameGuard.des version low, copy it. game folder: %d, GameGuard folder: %d
pos 96CAC: \GameGuard.des
pos 96CC0: cgcd fail %d, %d
pos 96CF0: PlayGame.dll
pos 96D04: Core.dll
pos 96D14: core.dll
pos 96D24: engine.dll
pos 96D34: DataPool.dll
pos 96D48: XmlScript.dll
pos 96D5C: CrySystem.dll
pos 96D70: Game.dll
pos 96D80: CRes.dll
pos 96D90: CShell.dll
pos 96DA0: SeData.dll
pos 96DB0: engine.dll
pos 96DC0: entitiesmp.dll
pos 96DD4: BOMB!!!!!!!!!!
pos 96DE8: Fail GTS path: %s, pBaseOfFile: %08x, dwSize: %08x, pIDH: %08x, pIDH->e_lfanew: %08x
pos 96E44: GAMEHACK RND
pos 96E58: GAMEHACK DOWN
pos 96E80: KERNEL DETECT
pos 96E94: GAMEHACK DETECT
pos 96EA8: GAMEHACK REPORT
pos 96EBC: GAMEHACK ACTIVTE TIME OUT
pos 96F10: -_Exception in creating a process, code: %08x, addr: %08x, szIEPath: %s
pos 96F5C: ie terminated
pos 96F8C: Run IE Fail for connect[%d] : %s
pos 96FB4:   
pos 96FBC: iexplore.exe
pos 96FD0: SOFTWARE\Classes\HTTP\shell\open\command
pos 97000: Adpath sended: %s
pos 97018: http://gateway.adpath.net/interface/request/action/nprotect/%s?g=%s
pos 97764: undef
pos 97CE0: --- ggsig.des revision: %d ---
pos 97D04: -_Exception in TurnOnGGScan, code: %08x, addr: %08x
pos 98550: Auto MacroScan Type1 Detect
pos 98570: Auto MacroScan Type2 Detect
pos 98590: Reset CheckAutoMouse
pos 985AC: Equl Move Pattern Count = %d
pos 985D0: Strange Y PixelCount = %d (MPS)
pos 985F4: MPS? = y : %d
pos 98608: Strange Y PixelCount = %d (P)
pos 9862C: Strange Y PixelCount = %d (L)
pos 98650: Strange X PixelCount = %d (MPS)
pos 98674: MPS = x : %d
pos 98688: Strange X PixelCount = %d (P)
pos 986AC: Strange X PixelCount = %d (L)
pos 986D0: SLineCount = %d
pos 986EC: np*.tmp
pos 986FC: SS
pos 98704: CE
pos 9874C: AddKernelPatch: bRet: %d, PatchAddr: %x, PatchSize: %x, dwWrite: %x
pos 98794: RestoreKernelPatch: bRet: %d, PatchAddr: %x, PatchSize: %x, OrgCode: %x, dwWrite: %x
pos 98804: DAD error4: %s, %d
pos 9881C: DAD error3: %x, %d
pos 98834: DAD error2: %x, %d
pos 98864: dump_wmimmc.sys
pos 98878: \
pos 98880: \drivers\
pos 98890: Type
pos 9889C: Start
pos 988A8: ImagePath
pos 988B8: ErrorControl
pos 988DC: dump_wmimmc
pos 988EC: Try unload first
pos 98904: SYSTEM\CurrentControlSet\Services\dump_wmimmc
pos 98938: InitGmguardSvcReg : New setup ==> %s
pos 98964: \??\%s\dump_wmimmc.sys
pos 98980: \??\%s\drivers\dump_wmimmc.sys
pos 989A4: SYSTEM\CurrentControlSet\Services\dump_wmimmc\Enum
pos 989DC: CleanGmguardSvcReg
pos 989F4: Success to NtLoadDriver(), %d
pos 98A18: Failed[0x%x] to NtLoadDriver()
pos 98A3C: status: %x, Try system32\drivers path.
pos 98A68: NtDeviceIoControlFile
pos 98A84: cannot get procedure 'NtLoadDriver' with error code %u
pos 98AC0: NtLoadDriver
pos 98AD4: cannot open library 'ntdll.dll' with error code %u
pos 98B0C: ntdll.dll
pos 98B1C: LoadGGDriver() : %d = %ws
pos 98B80: Success to NtUnloadDriver()
pos 98BC8: cannot get procedure 'NtUnloadDriver' with error code %u
pos 98C08: NtUnloadDriver
pos 98C54: ntdll.dll
pos 98C64: UnloadGGDriver() : %d = %ws
pos 98CC8: Fail2[%d] to CreateFile(%s)
pos 98CF8: Fail1[%d] to CreateFile(%s)
pos 98D20: GetDriverVersion(ver:%d, o: %x, lb: %x, ck: %d)
pos 98D7C: SetExcludePid()
pos 98D90: Fail : IOCTL_GMGUARD_SETPID, %x
pos 98DB4: AddProtectPid(%lu)
pos 98DCC: Fail : IOCTL_GGKERNEL_ADDPID, %x
pos 98DF4: SetDriverEnable()
pos 98E0C: Fail : IOCTL_GMGUARD_ENABLE, %x
pos 98E30: SetDriverDisable()
pos 98E48: Fail : IOCTL_GMGUARD_DISABLE, %x
pos 98E70: Fail : IOCTL_GGKERNEL_GET_DRVOBJECT, %x
pos 98E9C: DoHideProcess(%lu)
pos 98EB4: Fail : IOCTL_GMGUARD_HIDEPROCESS, %x
pos 98EE0: Fail : IOCTL_GMGUARD_HOOKINFO, %x
pos 98F08: NtWriteFile: %x -> %x
pos 98F24: NtOpenSection: %x -> %x
pos 98F40: NtCreateSection: %x -> %x
pos 98F60: NtDeviceIoControlFile: %x -> %x
pos 98F84: NtGetContextThread: %x -> %x
pos 98FA8: NtResumeThread: %x -> %x
pos 98FC8: NtCreateThread: %x -> %x
pos 98FE8: NtQuerySystemInformation: %x -> %x
pos 99010: NtQueryVirtualMemory: %x -> %x
pos 99034: NtProtectVirtualMemory: %x -> %x
pos 99080: NtReadVirtualMemory: %x -> %x
pos 990A4: NtOpenProcess: %x -> %x
pos 990C0: DoSetSDT(%lu) : %d
pos 990D8: Fail : IOCTL_GMGUARD_SETSDT, %x
pos 990FC: CollectSDTInfo failed, %d, %d
pos 99120: Fail : IOCTL_GMGUARD_HALT, %x
pos 99178: dpm closed ret: %x, %d, %s
pos 99208: Fail : IOCTL_GMGUARD_DUMP, %x, %x
pos 99230: KernelZwOpenProcess(%lu -> %x)
pos 99254: Fail : IOCTL_GMGUARD_OPR %lu, %x
pos 9927C: ioc: %x %x
pos 9928C: dcs ch: %x %x
pos 992A0: Fail : IOCTL_GMGUARD_INOUTCHECK, %x
pos 992C8: ; ProcessDeleted [PID: %d, PPID: %d] %s
pos 99320: Fail : IOCTL_GGKERNEL_GET_PROCINFO, %x
pos 9934C: ; (%d) %s
pos 9935C: Fail : IOCTL_GGKERNEL_GET_LOGINFO, %x
pos 99388: UnloadDriver()
pos 9939C: TPkd.sys
pos 993AC: DigiFilt.sys
pos 993C0: SysBoot.sys
pos 993D0: Syser.sys
pos 993E0: \regsys
pos 993EC: \filem
pos 993F8: \win32k.sys
pos 99408: [%d : 0x%x - 0x%x - 0x%x] %s
pos 9942C: NtQuerySystemInformation
pos 9944C: ntdll.dll
pos 9945C: NtWriteFile
pos 9946C: NtOpenSection
pos 99480: NtCreateSection
pos 99494: NtQueryInformationProcess
pos 994B4: NtOpenThread
pos 994E4: NtGetContextThread
pos 99510: kmas: %x
pos 99520: kap: %x
pos 9952C: KeAttachProcess
pos 99560: dwSEIP: %x %x
pos 99574: dwINIT: offset: %x, size: %x, code: %x
pos 995A0: iLok
pos 995AC: \win32k.sys
pos 995BC: dwKiServiceTable: %x, size: %x
pos 99604: KeServiceDescriptorTable
pos 99700: user32.dll
pos 99710: kernel32.dll
pos 99724: ntdll.dll
pos 99738: MACRO4U
pos 99744: pmap
pos 99750: checkpmap %lu %s
pos 99768: deamon.exe
pos 99778: gameguard.des
pos 9978C: checkpmemrangei2 %lu, i: %d -_-!!!!
pos 997B4: checkpmem2%s %lu [%s]:%s, i: %d
pos 997D8: gscv3
pos 997E4: HACK_APP_MEMORY_PATTERN
pos 99800: checkpmem3%s %lu [%s]:%s, i: %d
pos 99824: NPEW 1.0 nProtect Enable WPE
pos 99848: rdTest
pos 99854: peanut trrunw32
pos 99868: MuNewera
pos 99878: checkpmem %lu %s, i: %d
pos 99894: pmem i: %lu
pos 998A4: ggsas end
pos 998B4: checkpmemrange2%s %lu, [%s]:%s, i: %d
pos 998E0: gscv2
pos 998EC: ggsas start
pos 998FC: nsp2 end
pos 9990C: game memory i: %lu
pos 99924: checkpmemrange %lu %s, i: %d
pos 99948: nsp2 start
pos 99958: KartRiderCNTest
pos 9997C: - second Game Module Scan complete
pos 999A4: checkpmemrangei2%s %lu, [%s]:%s, i: %d
pos 999D4: gscv1
pos 999E0: - second Game Module Scan start
pos 99A04: - Game Module Scan complete
pos 99A24: checkpmemrangei %lu %s, i: %d
pos 99A48: - Game Module Scan
pos 99A60: checkpmm: %s, %s %x : %d
pos 99A80: PtTw
pos 99A8C: OpenKore 2006.02.03
pos 99AA4: TcpDog
pos 99AB0: _Proxy
pos 99ABC: Termination
pos 99ACC: _TwAddVarRO@20
pos 99AE0: _TwEventWin32@16
pos 99AF8: _TwTerminate@0
pos 99B0C: _TwGetTopBar@0
pos 99B20: TwelveSky CN Macro
pos 99B38: Out32
pos 99B44: Inp32
pos 99B50: stabch
pos 99B5C: MHOOK_IsMouseAttached
pos 99B78: MHOOK_MouseEnd
pos 99B8C: RTX 2006.04.13
pos 99BA0: GetMobHeight
pos 99BB4: GetMobCoords
pos 99BC8: AreTool 2006.01.06.01
pos 99BE4: SendPacket
pos 99BF4: \cps.dll
pos 99C04: _ProxyRecv@12
pos 99C18: _ProxyDisconnect@4
pos 99C30: _ProxyConnect@8
pos 99C44: TcpDogUninstall
pos 99C58: TcpDogInstall
pos 99C6C: injectSelf@4
pos 99C80: injectSelf
pos 99C90: FreeChobit
pos 99CA0: Dummy
pos 99CAC: \iprotect.dll
pos 99CC0: win mu
pos 99CCC: ?KeyboardProc@@YGJHIJ@Z
pos 99CE8: HookUnload
pos 99CF8: Tearayoot
pos 99D08: @Madcodehook@FlushHooks$qqrv
pos 99D2C: AutoDrinkWater
pos 99D40: QuickQuickQuick
pos 99D54: InstallHook_Message
pos 99D6C: ZZangMacro
pos 99D7C: UninstallKeyBoardHookingRoutine
pos 99DC4: Tasker macro 2006.12.08
pos 99DE0: TaskerKeyboardProc
pos 99DF8: ReloadServiceCache
pos 99E10: boot_Term__ReadKey
pos 99E28: _boot_Term__ReadKey
pos 99E40: perl
pos 99E4C: RagnarokJP
pos 99E70: boot_Socket
pos 99E80: HookBakery
pos 99E90: HookBakery.dll
pos 99EA4: JJOL
pos 99EB0: BeginAHunter
pos 99EC4: InstallHook
pos 99ED4: spy
pos 99EDC: HACK_MODULE
pos 99EEC: Rarpwns5
pos 99EFC: SPY_MEM.dll
pos 99F0C: SPY_IO.DLL
pos 99F1C: spy_sock32.dll
pos 99F30: GameMaster 2006.05.24
pos 99F4C: MemBrowse
pos 99F5C: SetupHook
pos 99F6C: Iolo Macro Magic 2006.05.16
pos 99F8C: EventHook_Stop
pos 99FA0: MouseCounter
pos 99FB4: Sniper 2006.04.18
pos 99FCC: TVICHW32
pos 99FDC: DebugCode
pos 9A004: WinDBG 2006.03.25
pos 9A01C: \syswow64\dbgeng.dll
pos 9A038: \system32\dbgeng.dll
pos 9A054: Werfault.exe
pos 9A068: DebugConnectWide
pos 9A080: DebugConnect
pos 9A094: same upside
pos 9A0A4: IsMouseMsg
pos 9A0B4: IsKeyboardMsg
pos 9A0C8: TrickSterTW macro 2006.03.23
pos 9A104: InstallKeyboardHook
pos 9A11C: MouseNeKr Plus 2006.02.02
pos 9A13C: VK_Press
pos 9A14C: \VirtualDevice.dll
pos 9A164: MouseNeKr Plus 2006.01.18
pos 9A184: UnmapPhysicalMemory
pos 9A19C: \Plus.dll
pos 9A1AC: MouseNeKr Plus 2006.02.07
pos 9A1CC: VK_Open
pos 9A1D8: VK_Open
pos 9A1E4: NeoSteam Macro 1.2 2006.01.07
pos 9A208: Load1
pos 9A214: \UML.dll
pos 9A224: GunBound Aimbot lhq
pos 9A23C: gdiPlaySpoolStream
pos 9A254: \lhq.dll
pos 9A264: Sleep2macro
pos 9A274: Get_Pixel2
pos 9A284: Get_Pixel
pos 9A294: aiwork
pos 9A2A0: MOUSECLK
pos 9A2B0: WRITEPMEM
pos 9A2C0: Makjaba
pos 9A2D8: Inp32
pos 9A2E4: inpout32.dll
pos 9A2F8: QMouse
pos 9A304: pkeyBoardEx
pos 9A314: RtnXPosVal
pos 9A324: QMouse
pos 9A330: ShutdownWinIo
pos 9A344: GetPortVal
pos 9A354: modKore-Hybrid
pos 9A368: CalcPath_destroy
pos 9A380: ExitKbdHk
pos 9A390: NineDragon_Macro
pos 9A3A8: DllGetPixel
pos 9A3B8: ezmouse
pos 9A3C4: EzDriverStart
pos 9A3D8: GetData
pos 9A3E4: PCWorker
pos 9A3F4: PCW_ExitModule
pos 9A408: PCW_InitModule
pos 9A41C: ?Close@CKMC_ClientSocket@@UAEXXZ
pos 9A444: ?GetFileName@CKMC_IniFile@@QAE?AVCString@@XZ
pos 9A478: LSO
pos 9A480: LinkDrvMoveLeft
pos 9A494: LinkDrvMoveUp
pos 9A4A8: Broom
pos 9A4B4: WritePhMemory
pos 9A4C8: GetPhAddress
pos 9A4DC: Lamhon
pos 9A4E8: lamGetPEProcess
pos 9A4FC: lamVQE
pos 9A508: MiniEngine
pos 9A530: mamaVQE
pos 9A53C: CheatEngine
pos 9A54C: GetPEProcess
pos 9A560: VQE
pos 9A568: WPE
pos 9A570: RagnarokJPTest
pos 9A584: SetTargetPid
pos 9A598: SetLoggingActi
pos 9A5AC: TSearch
pos 9A5B8: EnumTT4
pos 9A5C4: SpeakString
pos 9A5D4: Fake system dll
pos 9A5E8: Fgdi %d
pos 9A610: AngleArc
pos 9A620: gdi32.dll
pos 9A630: Fusr %d
pos 9A63C: GetKeyboardLayoutNameA
pos 9A658: MapVirtualKeyExA
pos 9A670: Fker %d
pos 9A67C: checkpmm: %s, %s %x
pos 9A694: SetEnvironmentVariableA
pos 9A6B0: CreateFileMappingA
pos 9A6C8: GameGuard.des
pos 9A6DC: newfix.dll: %lu, %s
pos 9A6F4: newfix.dll
pos 9A704: HACK_MODULE
pos 9A714: pm i: %s
pos 9A73C: \flyff revolution.rev
pos 9A758: aimbotcore.dll
pos 9A76C: \line2pcb_V;
pos 9A780: \browsevc.dll
pos 9A794: \musky.dll
pos 9A7A4: \mugscm.dll
pos 9A7B4: musockets.dll
pos 9A7C8: \ksknight.dll
pos 9A7DC: \muhook.dll
pos 9A7EC: \pyqj.dll
pos 9A7FC: \muhookpy.dll
pos 9A810: \attacheddll.dll
pos 9A828: \muboxdll.dll
pos 9A83C: HACK_APP_CONSTITUTION
pos 9A870: eAPI.fne
pos 9A880: WinIo.dll
pos 9A890: card.txt
pos 9A8A0: spifilter.dll
pos 9A8B4: Systemcallretriever.exe
pos 9A8D0: kerneldata.dat
pos 9A8E4: Stck.dll
pos 9A8F4: CfgMjh.dll
pos 9A904: kioport.sys
pos 9A914: Da2.DAT
pos 9A920: MapAdd.Dat
pos 9A930: arabic help.txt
pos 9A944: 1145821196.bin
pos 9A958: Finger.dat
pos 9A968: takeitem.ini
pos 9A97C: vmou98.inf
pos 9A98C: VMou.sys
pos 9A99C: UML.exe
pos 9A9A8: JSP.dll
pos 9A9B4: advapi32.dll
pos 9A9C8: ProcessKill.exe
pos 9A9DC: Mayday.dll
pos 9A9EC: Gloomysunday.dll
pos 9AA04: XTRAPD2.sys
pos 9AA14: qmouse_rohan.exe
pos 9AA2C: autoupdate.exe
pos 9AA40: hKeyboard.sys
pos 9AA54: KHook.dll
pos 9AA64: ItemfarmLogin.dll
pos 9AA7C: cehook.dll
pos 9AA8C: plork.dll
pos 9AA9C: dbk32.sys
pos 9AAAC: warning2.wav
pos 9AAC0: tstdll.dll
pos 9AAD0: launch.exe
pos 9AAE0: soset.ini
pos 9AAF0: linkdrv.dll
pos 9AB00: winio.dll
pos 9AB10: mis
pos 9AB18: gameexp.exe
pos 9AB28: tpt.exe
pos 9AB34: 17617.cer
pos 9AB44: muskyimage.dat
pos 9AB58: musky.ini
pos 9AB68: ksknight.ini
pos 9AB7C: ksknight.dll
pos 9AB90: jfmuclient.exe
pos 9ABA4: muhook.dll
pos 9ABB4: option.ini
pos 9ABC4: pyqj.dll
pos 9ABE0: base.dll
pos 9ABF0: mubox.exe
pos 9AC00: muboxdll.dll
pos 9AC14: muzs.exe
pos 9AC24: gamehook.dll
pos 9AC38: door.zs
pos 9AC44: authenclient.exe
pos 9AC5C: mubl.exe
pos 9AC6C: attacheddll.dll
pos 9AC80: kmap.ini
pos 9AC90: hookmu.dll
pos 9ACA0: komu.ini
pos 9ACB0: zntport.sys
pos 9ACC0: ntport.dll
pos 9ACD0: speeder.ini
pos 9ACE0: instructions.txt
pos 9ACF8: musockets.dll
pos 9AD0C: razor_config.ini
pos 9AD24: zle*.exe
pos 9AD44: msinet.ocx
pos 9AD54: tabctko.dll
pos 9AD64: zlemu.dat
pos 9AD74: drvinstall.dll
pos 9AD88: gasocket.dll
pos 9AD9C: ga.dll
pos 9ADA8: mugscm.dll
pos 9ADB8: unzdll.dll
pos 9ADC8: -_Exception in CheckProcesses, code: %08x, addr: %08x
pos 9AE04: -_Exception in CheckProcess, code: %08x, addr: %08x
pos 9AE3C: checkpl %lu %s
pos 9AE50: NEGiES found. block. [%d]:%s
pos 9AE74: negies
pos 9AE80: \drivers\Mouclas.sys
pos 9AE9C: ZZang macro
pos 9AEAC: \drivers\Kbdclas.sys
pos 9AEC8: zzangplay.exe
pos 9AEDC: checkpv %lu %s
pos 9AEF0: \jfmuclient.exe
pos 9AF04: \qijipy.exe
pos 9AF14: \mubl.exe
pos 9AF24: \komu.exe
pos 9AF34: NewScan: %lu, %s, filesize: %lu
pos 9AF58: \DUSuperControler.exe
pos 9AF74: 17617
pos 9AF80: FileDescription: %s, %d
pos 9AF9C: 17617
pos 9AFA8: \StringFileInfo\%04x%04x\FileDescription
pos 9AFD8: ezscript
pos 9AFE8: OriginalFilename: %s, %d
pos 9B008: ezscript
pos 9B024: \StringFileInfo\%04x%04x\OriginalFilename
pos 9B054: ProductName: %s, %d
pos 9B06C: automouse
pos 9B07C: automouse
pos 9B08C: \StringFileInfo\%04x%04x\ProductName
pos 9B0B8: CompanyName: %s, %d
pos 9B0D0: ZleGem
pos 9B0DC: ZleGame
pos 9B0E8: autoseal
pos 9B0F8: clothesframe.24cc.com
pos 9B114: plasticphork
pos 9B128: plasticphork
pos 9B13C: jb's production
pos 9B150: jb's production
pos 9B190: \VarFileInfo\Translation
pos 9B1B0: Han
pos 9B1B8: Addr: %x, lpData: %x, j: %lu, lpCode: %x, size: %lu
pos 9B1F0: Module name: %s
pos 9B204: File does NOT exist! Game hack doubt!, %d, %d, %s
pos 9B23C: Change page protect failed, %d
pos 9B294: fake gdi %x, time: %x
pos 9B2B0: fake user %x, time: %x
pos 9B2CC: fake kernel %x, time: %x
pos 9B2EC: fake ntdll %x, time: %x
pos 9B308: GetDC
pos 9B314: RtlMoveMemory
pos 9B328: rpm fail: %d, %d, %x, %x
pos 9B348: lpData: %x, Section: %s, j: %lu, lpCode: %x, dwSize: %lu
pos 9B388: Too many sections: %d
pos 9B3A4: GSC CheckKernelMem End
pos 9B3C0: KERNEL DRIVER HACK
pos 9B3D8: checkpkernelmem_gsc, addr: %x, base: %x size: %x, image: %s, i: %d
pos 9B420: TPkd.sys
pos 9B430: [%d : 0x%x - 0x%x] %s
pos 9B44C: GSC CheckKernelMem Start
pos 9B46C: Check kernel modules2 end
pos 9B48C: HIDEN KERNEL DRIVER HACK
pos 9B4AC: checkpkernelmemh, addr: %x, base: %x size: %x, image: %S, i: %d
pos 9B4F0: [h: 0x%x - 0x%x] %S
pos 9B514: checkpkernelmemff [%d : 0x%x - 0x%x] %S, %x - %d
pos 9B54C: Check kernel modules2 start
pos 9B56C: checkpkernelmem, addr: %x, base: %x size: %x, image: %s, i: %d
pos 9B5B0: JRSKD24.SYS
pos 9B5C0: npkcjpn.sys
pos 9B5D0: npkcrypt.sys
pos 9B5E4: checkpkernelmemkeysol %s, addr: %x, base: %x size: %x
pos 9B620: scsk4.sys
pos 9B630: \\.\JRSKD24
pos 9B640: \\.\npkcjpn
pos 9B650: \\.\npkcrypt
pos 9B664: \\.\scsk4
pos 9B6FC: 211.233.81.
pos 9B70C: 211.233.35.203
pos 9B720: 211.233.35.231
pos 9B734: 211.234.122.43
pos 9B748: 211.196.157.43
pos 9B75C: 218.234.76.254
pos 9B770: 61.33.48.33
pos 9B780: 211.45.21.1
pos 9B790: 211.109.0.72
pos 9B7A4: 211.109.5.
pos 9B7B4: 211.233.20.
pos 9B7C4: 202.30.244.
pos 9B7D4: 211.234.122.
pos 9B7E8: 211.58.56.
pos 9B7F8: 218.234.76.40
pos 9B80C: 203.66.220.
pos 9B81C: 202.31.178.
pos 9B82C: 202.57.111.
pos 9B83C: 10.1.87.
pos 9B84C: 209.67.170.
pos 9B85C: 210.245.86.
pos 9B86C: 206.82.200.
pos 9B87C: 172.16.1.
pos 9B88C: 210.245.21.
pos 9B89C: 202.57.110.
pos 9B8AC: 203.141.240.
pos 9B8C0: 219.127.138.
pos 9B8D4: 220.130.179.
pos 9B8E8: 203.66.136.
pos 9B8F8: 203.107.140.
pos 9B90C: 218.153.120.
pos 9B920: 221.148.39.
pos 9B930: 221.148.38.
pos 9B940: 172.25.3.
pos 9B950: 122.102.51.
pos 9B960: 114.80.165.
pos 9B970: 112.65.241.
pos 9B980: 121.254.252.
pos 9B994: 112.175.192.
pos 9B9A8: 124.109.145.
pos 9B9BC: 81.211.86.
pos 9B9CC: 89.249.27.
pos 9B9DC: 61.215.119.
pos 9B9EC: 216.107.242.
pos 9BA00: 172.31.30.
pos 9BA10: 216.107.242.
pos 9BA24: 216.107.244.
pos 9BA38: 206.127.155.
pos 9BA4C: 206.127.145.
pos 9BA60: 116.68.143.
pos 9BA70: 116.68.136.
pos 9BA80: 172.24.0.
pos 9BA90: 61.90.252.
pos 9BAA0: 10.220.3.
pos 9BAB0: 203.70.16.
pos 9BAC0: 61.215.117.
pos 9BAD0: 192.168.30.
pos 9BAE0: 210.51.41.
pos 9BAF0: 61.138.176.
pos 9BB00: 61.152.151.
pos 9BB10: 222.231.15.
pos 9BB20: 222.231.15.
pos 9BB30: 112.175.193.
pos 9BB44: 112.175.192.
pos 9BB58: 172.31.27.
pos 9BB68: 172.31.22.
pos 9BB78: 216.107.243.
pos 9BB8C: 202.80.108.
pos 9BB9C: 61.215.117.
pos 9BBAC: 70.1.0.
pos 9BBB8: 70.100.0.
pos 9BBC8: 172.20.2.
pos 9BBD8: 222.231.14.
pos 9BBE8: 210.208.86.
pos 9BBF8: 172.23.1.
pos 9BC08: 211.13.226.
pos 9BC18: 63.110.21.
pos 9BC28: 64.92.129.
pos 9BC38: 203.239.51.
pos 9BC48: 210.122.63.
pos 9BC58: 210.208.82.
pos 9BC68: 210.200.157.
pos 9BC7C: 210.122.63.
pos 9BC8C: 210.0.233.
pos 9BC9C: 211.13.227.
pos 9BCAC: 61.55.138.
pos 9BCBC: 211.90.118.
pos 9BCCC: 220.168.28.
pos 9BCDC: 218.1.72.
pos 9BCEC: 61.40.243.
pos 9BCFC: 211.13.241.
pos 9BD0C: 61.215.222.
pos 9BD1C: 211.13.228.
pos 9BD2C: 211.13.235.
pos 9BD3C: 211.13.232.
pos 9BD4C: 61.215.214.
pos 9BD5C: 61.215.212.
pos 9BD6C: p %s
pos 9BD78: 200.229.
pos 9BD88: 93.90.176.
pos 9BD98: 202.159.139.
pos 9BDAC: 202.8.162.
pos 9BDBC: 202.159.160.
pos 9BDD0: 59.188.22.
pos 9BDE0: 70.86.142.
pos 9BDF0: 70.86.159.
pos 9BE00: 10.0.0.
pos 9BE0C: 61.219.19.
pos 9BE1C: 203.161.232.211
pos 9BE30: 203.161.228.
pos 9BE44: 131.107.115.
pos 9BE58: 58.120.226.
pos 9BE68: 203.81.59.
pos 9BE8C: 10.10.3.
pos 9BE9C: 10.10.2.
pos 9BEAC: 60.28.19.
pos 9BEBC: 218.30.90.
pos 9BECC: 222.73.246.
pos 9BEDC: 222.73.1.
pos 9BEEC: 218.153.7.
pos 9BEFC: 204.2.134.
pos 9BF0C: 192.1.3.
pos 9BF1C: 84.203.140.
pos 9BF2C: 72.172.238.
pos 9BF3C: 38.112.58
pos 9BF4C: 38.99.82
pos 9BF5C: 38.99.100.
pos 9BF6C: 195.59.138
pos 9BF7C: 195.27.0.
pos 9BF8C: 203.195.98.
pos 9BF9C: 211.239.123.95
pos 9BFB0: 202.57.108.
pos 9BFC0: 58.64.24.
pos 9BFD0: 69.90.214.
pos 9BFE0: 211.39.132.
pos 9BFF0: 203.69.140.
pos 9C010: 125.5.127.
pos 9C020: 211.33.142.
pos 9C030: 64.79.126.
pos 9C040: 64.147.162.
pos 9C050: 64.127.103.
pos 9C060: 211.106.105.74
pos 9C074: 124.243.205.217
pos 9C088: 61.129.32.
pos 9C098: 61.74.62.
pos 9C0A8: 218.145.66.
pos 9C0B8: 211.54.74.
pos 9C0C8: 200.189.184.
pos 9C0DC: 61.74.68.
pos 9C0EC: 208.85.108.
pos 9C0FC: 211.218.233.
pos 9C110: 218.83.152.
pos 9C120: 123.234.4.
pos 9C130: 121.14.15.
pos 9C140: 222.73.209.
pos 9C150: 222.73.1.
pos 9C160: 10.103.147.
pos 9C170: 10.100.147.
pos 9C180: 222.73.1.
pos 9C190: 192.168.5.
pos 9C1A0: 218.83.152.
pos 9C1B0: 210.180.66.
pos 9C1C0: 222.122.59.
pos 9C1D0: 222.122.133.
pos 9C1E4: 220.90.205.
pos 9C1F4: 218.153.7.
pos 9C214: 220.90.205.
pos 9C224: 61.78.52.
pos 9C244: 10.10.30.
pos 9C254: 218.153.7.
pos 9C264: 222.122.133.
pos 9C278: 211.219.167.
pos 9C28C: 222.122.223.
pos 9C2A0: 222.122.222.
pos 9C2B4: 222.122.59.
pos 9C2C4: 91.202.203.
pos 9C2D4: 211.218.234.15
pos 9C2E8: 212.162.7.
pos 9C2F8: 220.90.205.
pos 9C308: 218.145.45.
pos 9C318: 218.153.7.
pos 9C328: 211.218.231.
pos 9C33C: 125.141.210.
pos 9C350: 10.10.150.
pos 9C360: 10.10.100.
pos 9C370: 220.90.204.
pos 9C380: 38.119.66.
pos 9C390: 38.144.194.
pos 9C3A0: 211.171.255.
pos 9C3B4: 211.218.230.31
pos 9C3C8: 222.233.53.
pos 9C3D8: 222.122.11.
pos 9C3E8: 221.139.107.
pos 9C3FC: 221.139.104.
pos 9C410: 221.139.48.
pos 9C420: 218.50.7.
pos 9C430: 211.233.86.
pos 9C440: 211.233.84.
pos 9C450: 211.233.76.
pos 9C460: 211.233.73.
pos 9C470: 211.233.72.
pos 9C480: 211.233.42.
pos 9C490: 211.233.41.
pos 9C4A0: 211.233.40.
pos 9C4B0: 211.233.10.
pos 9C4C0: 221.139.107.
pos 9C4D4: 211.39.150.
pos 9C4E4: 211.39.147.
pos 9C4F4: 211.39.137.
pos 9C504: 211.39.136.
pos 9C514: 211.39.135.
pos 9C524: 211.39.133.
pos 9C534: 210.181.96.
pos 9C544: 121.254.164.
pos 9C558: 121.156.67.
pos 9C568: 121.156.53.
pos 9C578: 121.78.65.
pos 9C588: 116.193.88.
pos 9C598: 116.193.84.
pos 9C5A8: 58.120.224.
pos 9C5B8: 211.189.29.
pos 9C5C8: 121.253.14.
pos 9C5D8: 60.28.26.
pos 9C5E8: 211.152.39.
pos 9C5F8: 211.152.39.78
pos 9C60C: 125.211.127.
pos 9C620: 121.9.214.
pos 9C630: 221.7.13.
pos 9C640: 202.57.110.
pos 9C650: 202.57.111.
pos 9C660: 211.55.81.
pos 9C670: 218.145.66.
pos 9C680: 61.74.68.
pos 9C690: 218.153.7.
pos 9C6A0: 218.145.45.
pos 9C6B0: 220.90.205.
pos 9C6C0: 210.101.84.
pos 9C6D0: 211.218.235.
pos 9C6E4: 210.101.85.
pos 9C6F4: 81.177.43.
pos 9C704: 255.255.255.
pos 9C718: 206.127.147.
pos 9C72C: 216.107.240.
pos 9C740: 206.127.144.
pos 9C754: 210.68.144.
pos 9C764: 203.70.17.
pos 9C774: 211.122.29.
pos 9C784: 60.217.255.
pos 9C794: 58.215.114.
pos 9C7A4: 118.123.228.
pos 9C7B8: 119.147.191.
pos 9C7CC: 210.51.28.
pos 9C7DC: 210.51.28.
pos 9C7EC: 116.211.25.
pos 9C7FC: 116.211.29.
pos 9C80C: 210.166.229.
pos 9C820: 202.131.203.
pos 9C834: 124.109.145.
pos 9C848: 61.215.119.
pos 9C858: 61.117.168.
pos 9C868: 61.215.119.
pos 9C878: 121.254.252.
pos 9C88C: 211.43.201.
pos 9C89C: 222.122.29.
pos 9C8AC: 210.51.28.
pos 9C8BC: 93.90.20.
pos 9C8CC: 93.90.19.
pos 9C8DC: 77.240.114.
pos 9C8EC: 217.116.19.
pos 9C8FC: 93.90.19.
pos 9C904: 
pos 9C90C: 211.42.131.
pos 9C91C: PROXY HACK SUSPICION
pos 9C938: %s:%d, 
pos 9C944: %s:%d
pos 9CA98: RagnarokBR
pos 9CAA8: hk %s
pos 9CAB4: 128.91.6.31
pos 9CAC4: DarkStoryTW
pos 9CAD4: MabinogiTest
pos 9CAE8: MabinogiKR
pos 9CAF8: TwelveSky
pos 9CB08: NanaimoKR
pos 9CB18: WarRockKR
pos 9CB28: LuniaKR
pos 9CB34: 121.253.66.
pos 9CB44: ||above xp initialize error #4
pos 9CB68: ||above xp initialize error #3
pos 9CB8C: ||above xp initialize error #2
pos 9CBF4: PROXY HACK SUSPICION
pos 9CC10: %s:%d, 
pos 9CC1C: RSVPSP.DLL
pos 9CC2C: WSPIRDA.DLL
pos 9CC3C: S5IMPL.DLL
pos 9CC4C: PROXY HACK DETECT
pos 9CC64: %s:%d
pos 9CD98: proxy bypass 2
pos 9CDAC: proxy bypass local
pos 9CDC4: 127.0.0.1
pos 9CDD4: RagnarokJP
pos 9CDE4: proxy bypass
pos 9CDF8: RagnarokBR
pos 9CE08: RYLHK
pos 9CE20: GunBoundBR
pos 9CE30: CTRacerCN
pos 9CE40: GunBoundLT
pos 9CE60: TwelveSky
pos 9CE70: CAKRTest
pos 9CE80: CAKR
pos 9CE8C: NanaimoKR
pos 9CE9C: WarRockKR
pos 9CEAC: LuniaKR
pos 9CEB8: allow only MapleStory98 / ip: %s, port: %d
pos 9CEE8: DekaronCNTest
pos 9CEFC: DekaronCN
pos 9CF0C: allow only Rakion98 / ip: %s, port: %d
pos 9CF38: 127.0.0.1
pos 9CF48: 0.0.0.0
pos 9CF54: Gateway : %s
pos 9CF68: wide subnet mask
pos 9CF80: 255
pos 9CF88: Subnet Mask: %s
pos 9CF9C: Local IP: %s
pos 9CFEC: AllocateAndGetTcpExTableFromStack
pos 9D014: GetTcpTable
pos 9D024: GetExtendedTcpTable
pos 9D03C: \iphlpapi.dll
pos 9D050: closesocket
pos 9D060: getpeername
pos 9D070: getsockname
pos 9D080: inet_ntoa
pos 9D090: ntohs
pos 9D09C: \ws2_32.dll
pos 9D0AC: 127.0.0.1
pos 9D0BC: GetIpAddrTable
pos 9D0D0: Iphlpapi.dll
pos 9D0E4: -_Exception in PrintTable, code: %08x, addr: %08x
pos 9D11C: proxy hack
pos 9D12C: gsc - CheckRegNewProcess()
pos 9D14C: gsc - CheckIPScan() %d -IH
pos 9D16C: gsc - CheckIPScan() %d
pos 9D1A8: NEW HWM Doubt!
pos 9D1BC: AkumaEngine
pos 9D1CC: sejthyperscansettings
pos 9D1E8: funny target
pos 9D1FC: L2Walker Mutex
pos 9D210: MutexToL2Walker
pos 9D224: NineDragon Mutex
pos 9D23C: NineDragon 2.1
pos 9D250: Sniper mutex
pos 9D264: GIS_Sniper
pos 9D274: keybat mutex
pos 9D288: mtxKeyBat
pos 9D298: QMacroNE Running
pos 9D2B0: qmacro mutex
pos 9D2C4: QMacro Run once
pos 9D2D8: neotex event
pos 9D2EC: Neotex
pos 9D2F8: mnk event
pos 9D308: MouseNeKr
pos 9D318: rgb event
pos 9D328: GBbyFRK
pos 9D334: sang CE event
pos 9D348: Global\sang3
pos 9D35C: zenos CE event
pos 9D370: Global\zenos3
pos 9D384: CE53 event
pos 9D394: Global\DBKProcList53
pos 9D3B0: CE52 event
pos 9D3C0: Global\DBKProcList52
pos 9D3DC: CE51 event
pos 9D3EC: Global\DBKProcList51
pos 9D408: CE50 event
pos 9D418: Global\DBKProcList
pos 9D430: qmacro event
pos 9D444: QMacroGetColorEvent
pos 9D45C: driver: NetPeeker.sys
pos 9D478: \\.\NetPeeker
pos 9D48C: driver: MoosePM(new) (GB)
pos 9D4AC: \\.\MooseKM
pos 9D4BC: driver: kylixM (jamilah)
pos 9D4EC: driver: MooseKOPM (GB)
pos 9D508: "\\.\MooseKOPM
pos 9D534: \\.\moukb
pos 9D544: driver: jamilah driver
pos 9D560: \\.\jamilah
pos 9D588: \\.\CEDRIVER52
pos 9D59C: driver: hwinterface
pos 9D5DC: \\.\EZMOUSE
pos 9D5EC: \\.\TCLOCK
pos 9D5FC: driver: dbkdrvr
pos 9D610: \\.\DBKDRVR
pos 9D620: driver: mnk
pos 9D630: \\.\df_kbd
pos 9D640: driver: GAMEAUTO
pos 9D658: \\.\GAMEAUTO
pos 9D66C: driver: MOUHOOK
pos 9D680: \\.\MOUHOOK
pos 9D690: driver: KBDHOOK
pos 9D6A4: \\.\KBDHOOK
pos 9D6B4: driver: MOUINP
pos 9D6C8: \\.\MOUINP
pos 9D6D8: driver: winspeeder
pos 9D6F0: \\.\BDCK
pos 9D700: driver: WINIO
pos 9D714: \\.\WINIO
pos 9D724: driver: KMCTRL
pos 9D738: \\.\KMCTRL
pos 9D748: driver: zlegame
pos 9D75C: \\.\ZLEGAME
pos 9D76C: driver: TKITSPY
pos 9D780: \\.\TKITSPY
pos 9D790: -_Exception in CheckHack, code: %08x, addr: %08x
pos 9D7C8: .AreTool
pos 9D7D8: portion
pos 9D7E4: portion
pos 9D7F0: neoauto
pos 9D7FC: uMutex
pos 9D808: ezmouse ezhook
pos 9D81C: ezhook
pos 9D828: http://www.kartmm.com
pos 9D844: kwon Engine
pos 9D854: kwonhyperscansettings
pos 9D870: zenos Engine
pos 9D884: zenoshyperscansettings
pos 9D8A0: Kaspersky Engine
pos 9D8D8: Cheat Engine
pos 9D8EC: CEHYPERSCANSETTINGS
pos 9D91C: _NEO_AUTO_MAP_
pos 9D930: DragonFarm macro
pos 9D998: C:\Program Files\ND
pos 9D9B0: NeoSteamMacro folder
pos 9D9CC: C:\Program Files\NeoSteam Macro
pos 9D9F0: EzMouse folder
pos 9DA24: Makjaba folder
pos 9DA54: MouseNekr Plus folder
pos 9DA70: C:\Program Files\PlusMouseNeKr
pos 9DA94: Sleep2(NineDragon) folder
pos 9DAB4: C:\Program Files\Indy21\NineDragon
pos 9DADC: Portion folder
pos 9DB1C: Qmouse folder
pos 9DB30: C:\Program Files\Qmouse
pos 9DB74: sangok folder
pos 9DB88: C:\Program Files\SANGOK
pos 9DBA4: mousenekr folder
pos 9DBBC: C:\Program Files\MouseNeKr
pos 9DBDC: gameauto folder
pos 9DBF0: C:\Program Files\GameAuto
pos 9DC10: zlemu folder
pos 9DC24: C:\Program Files\ZleGAME\ZleMU
pos 9DC48: -_Exception in CheckHackOnce, code: %08x, addr: %08x
pos 9DC84: %ld : %s
pos 9DC94: SetHackInfo : addr %x cHT[%d] AF[%x] idx[%d] TS[%x] dT[%d] wT[%d] CSA[%x] aT[%x] cD[%d] %s:%s
pos 9DCF8: QonlineKR
pos 9DD08: SpecialForceJP
pos 9DD1C: DragonicaTW
pos 9DD2C: CATW
pos 9DD38: hook: %x %x %02x %02x %02x %02x %02x
pos 9DD64: BeginPaint
pos 9DD74: GetWindowDC
pos 9DD84: GetDCEx
pos 9DD90: GetDC
pos 9DD9C: PostMessageA
pos 9DDB0: SendMessageA
pos 9DDC4: mouse_event
pos 9DDD4: keybd_event
pos 9DDE4: GetWindowThreadProcessId
pos 9DE04: SetCursorPos
pos 9DE18: SendInput
pos 9DE28: PostMessageW
pos 9DE50: user32.dll
pos 9DE60: DebugActiveProcess
pos 9DE78: TerminateProcess
pos 9DE90: VirtualProtectEx
pos 9DEA8: VirtualProtect
pos 9DEBC: TerminateThread
pos 9DED0: SuspendThread
pos 9DEE4: OpenProcess
pos 9DF0C: ReadProcessMemory
pos 9DF24: WinExec
pos 9DF30: LoadModule
pos 9DF40: CreateProcessA
pos 9DF54: MoveFileW
pos 9DF64: GetProcAddress
pos 9DF78: LoadLibraryExW
pos 9DF8C: CreateProcessInternalW
pos 9DFA8: CreateProcessW
pos 9DFBC: kernel32.dll
pos 9DFD0: BeginPaint
pos 9DFE0: GetWindowDC
pos 9DFF0: GetPixel
pos 9E000: GetDCEx
pos 9E00C: GetDC
pos 9E018: StretchBlt
pos 9E028: BitBlt
pos 9E034: gdi32.dll
pos 9E044: GetProcessHandle fake faild, pid: %lu, opened pid: %lu
pos 9E080: Read HackRecord: %d
pos 9E098: BagMDI
pos 9E0A4: Software\Microsoft\Windows\ShellNoRoam\MUICache
pos 9E0D8: period dll i: %d
pos 9E0F0: checkpmmr %lu %s, i: %d
pos 9E10C: UnCrypt
pos 9E118: Crypt
pos 9E124: CalcRouteByCandOutmap
pos 9E140: CalcRouteByC
pos 9E154: CalcChecksum
pos 9E168: test2
pos 9E174: test1
pos 9E180: RagnarokJPTest
pos 9E194: Can't get image base: %x
pos 9E1B4: WSP rename failed: %d
pos 9E1D0: WSP copy failed: %d
pos 9E1E8: _
pos 9E1F0: WSP not found def file: %s
pos 9E210: \msafd.dll
pos 9E220: \mswsock.dll
pos 9E234: WSP not found: %s
pos 9E24C: WSP: %s
pos 9E258: WSP doubt2! WSP can not normalized!
pos 9E280: WSP normalize 2
pos 9E294: %SystemRoot%\system32\msafd.dll
pos 9E2E0: WSP normalize
pos 9E2F4: WSP doubt1! WSP can not normalized!
pos 9E31C: WSCWriteProviderOrder
pos 9E338: WSCGetProviderPath
pos 9E350: WSCEnumProtocols
pos 9E378: WSP restore 2
pos 9E38C: WSP restore
pos 9E39C: WSP restore file failed
pos 9E3B8: %s_
pos 9E3C0: SuspendProcess [%ld]:%s
pos 9E3DC: threaddemo.exe
pos 9E3F0: PointBlank
pos 9E400: Exteel
pos 9E40C: LoveBeat
pos 9E41C: Aion
pos 9E428: Lineage
pos 9E434: lcdmon.exe
pos 9E444: lgdcore.exe
pos 9E454: checkpWnd CE !!!! [PID: %d] a:%d | b:%d, %d, %d | c:%d, %d, %d | d:%d | e:%x
pos 9E4A8: checkpWnd CE !!!! [SizeDoubt3] x: %d, y: %d
pos 9E4D8: Change Offset:
pos 9E4EC: game trainer
pos 9E500: ValueChangeForm
pos 9E514: TStandAlone
pos 9E524: checkpWnd CE !!!! [SizeDoubt2] x: %d, y: %d
pos 9E554: TPUtilWindow
pos 9E598: F0rm
pos 9E5A4: AdvancedOptions
pos 9E5B8: TMB
pos 9E5C0: ProcessWatcheh
pos 9E5D4: TFormDebugStrings
pos 9E5EC: Puma Engine(CE) 3.0
pos 9E604: Engi
pos 9E610: For Rev 10
pos 9E620: Revolution Engine(CE) 5.3
pos 9E640: ti0n
pos 9E64C: Engin
pos 9E658: luti
pos 9E664: Rev
pos 9E66C: VE 5.BY
pos 9E678: Vicious Engine(CE) 5.0
pos 9E694: Vicious Engine
pos 9E6A8: Cheat Engine set
pos 9E6C0: Process watcher
pos 9E6D4: Blorb Slayer Engine(CE)
pos 9E6F0: Blorb Slayer
pos 9E704: TTrainer2
pos 9E714: TMemoryBrowser
pos 9E728: Next Scan
pos 9E738: First Scan
pos 9E748: Fast Attack
pos 9E758: Speed Attack
pos 9E76C: SpeedHack
pos 9E77C: Hyper Scan
pos 9E78C: Cheat Engine
pos 9E7A0: checkp calc pid :%d, style: 0x%x, Window: %s Class: %s
pos 9E7DC: checkp calc kill pid :%d, style: 0x%x, Window: %s Class: %s
pos 9E81C: Desktop User Picture
pos 9E838: CiceroUIWndFrame
pos 9E850: CiceroUIWndFrame
pos 9E868: Button
pos 9E880: CiceroUIWndFrame
pos 9E8B8: tooltips_class32
pos 9E8D0: SysShadow
pos 9E8E0: SysFader
pos 9E8F0: calc normalize
pos 9E904: checkpwndonce: %s, %s
pos 9E920: Rootkit Unhooker
pos 9E938: XueTr
pos 9FB28: usprserv
pos 9FB38: User Privilege Service
pos 9FB5C: npggsvc
pos 9FB68: nProtect GameGuard Service
pos 9FC08: LastErrNum
pos 9FC18: LastErrGame
pos 9FC28: Error3
pos 9FC34: Error4
pos 9FC40: Error3
pos 9FC4C: Error2
pos 9FC58: Error1
pos 9FC64: Software\INCAInternet\nProtectGameGuard\GameGuardError
pos 9FCA0: LError4 : %d
pos 9FCB4: LError3 : %u
pos 9FCC8: LError2 : %d
pos 9FCDC: LError1 : %d
pos 9FCF0: Error4
pos 9FCFC: Error3
pos 9FD08: Error2
pos 9FD14: Error1
pos 9FD20: hacklog to gl : %s
pos 9FD84: LocoKR
pos 9FD90: YSOnline
pos 9FDA0: ExteelUS
pos 9FDB0: Exteel
pos 9FDBC: DarkStoryTW
pos 9FDCC: DarkStoryHK
pos 9FDDC: DarkStoryCN
pos 9FDEC: SP1KR
pos 9FDF8: WinBaramKRTest
pos 9FE0C: WinBaramKR
pos 9FE1C: NeoWizGamesKR
pos 9FE30: AionENU
pos 9FE3C: Aion
pos 9FE48: SPJam
pos 9FE54: FighterStoryKRTest
pos 9FE6C: FighterStoryKR
pos 9FE80: WolfTeam
pos 9FE90: VicGame
pos 9FE9C: CrossFire
pos 9FEAC: LastChaos
pos 9FEBC: HanPokerTest
pos 9FED0: HanGoStopTest
pos 9FEE4: HanBoardTest
pos 9FEF8: HanPoker
pos 9FF08: HanGoStop
pos 9FF18: HanBoard
pos 9FF28: Fez
pos 9FF30: FantaE
pos 9FF3C: MonsterH
pos 9FF4C: CabalOnline
pos 9FF5C: SpecialForceTH
pos 9FF70: SpecialForceKR
pos 9FF84: SuddenAttack
pos 9FF98: TalesWeaver
pos 9FFA8: Mabinogi
pos 9FFB8: ATrix
pos 9FFC4: SEGAPSU
pos 9FFD0: OrderOnlineA
pos 9FFE4: TestGame
pos 9FFF4: TestGameRemote
pos A0008: KartRider
pos A0018: Jianghu
pos A0024: TwelveSky
pos A0034: OZ
pos A003C: GTH
pos A0044: DragonGem
pos A0054: Trickster
pos A0064: Dekaron
pos A0070: HanPoker
pos A0080: RanOnline
pos A0090: MapleStory
pos A00A0: SilkRoad
pos A00B0: Rakion
pos A00BC: NeoSteam
pos A00CC: Shaiya
pos A00D8: Rohan
pos A00E4: NewBaseball
pos A00F4: DFighter
pos A0104: Rose
pos A0110: 1003B
pos A011C: NineDragons
pos A012C: Pangya
pos A0138: PSO
pos A0140: Muhan
pos A014C: Mu
pos A0154: Ragnarok
pos A0164: Flyff
pos A0170: PT2EU
pos A017C: PristonTale
pos A018C: RYL
pos A0194: Lineage
pos A01A0: Lineage2US
pos A01B0: Lineage2Test
pos A01C4: Lineage2
pos A01DC: Gersang
pos A01E8: GunBound
pos A01F8: Seal
pos A0204: === Init Done: %d, ScanWait: %d ===
pos A022C:  -ver
pos A0278: RedStoneJP
pos A0288: SilkRoadJP
pos A0298: MuJP
pos A02A4: 1003bJP
pos A02B0: CPID: %lu, CTID: %lu
pos A02CC: ConnectCommPipe fail %lu
pos A02EC: ReExec mode
pos A0318: AdjustPrivilege failed
pos A0334: AdjustPrivilege successfully
pos A0358: gmse
pos A0364: invalid id: %lu %lu
pos A037C: argc: %d, argv: %s
pos A0394: cmd: %s
pos A03A0: --- %s version %d : %hs ---
pos A03DC: GameMon.des
pos A0450: NL59NPGL
pos A0460: npgm.erl
pos A0478: %lu %lu %lu %lu %lu %s %x %x %x
pos A049C: ntdll.dll
pos A04AC: %lu %lu %lu %lu %lu %s %x %x %x %x
pos A04DC:  -service
pos A04EC: 0411
pos A04F8: DFighterJPTest
pos A050C: DFighterJP
pos A051C: 0412
pos A0528: DFighterTest
pos A053C: DFighter
pos A0558: 041e
pos A0564: RYLCIB
pos A0570: 0c09
pos A057C: 0809
pos A0588: 0409
pos A0594: 0412
pos A05A0: DekaronTest
pos A05B0: Dekaron
pos A05BC: 0804
pos A05C8: BattleRohanKRTest
pos A05E0: BattleRohanKR
pos A05F4: CronousJP
pos A0604: GersangTW
pos A0614: GersangJP
pos A0624: Gersang
pos A0630: MuJP
pos A063C: InitNPGM fail
pos A0650: FileRawSize: %x
pos A0664: CS2.5 GameMon ver : %d
pos A0680: CS2: %s
pos A068C: * OS: %s, ComputerName: %s, UserName: %s *
pos A06BC: ----- nProtect GameGuard Log Started -----
pos A06EC: hlog.erl
pos A06FC: sw 0
pos A0708: ws2_32.dll
pos A0718: BanOS, %s, %s
pos A072C: ParseIni fail
pos A0740: safe lc: %x
pos A0750: _lclose
pos A075C: safe lo: %x
pos A076C: _lopen
pos A0778: --- Explorer Module
pos A0790: --- GameMon Module
pos A07A8: NQSIm: %x
pos A07B8: code: %x, %x, %x, %x, %x
pos A07D8: NQSI2: %x
pos A07E8: NtQuerySystemInformation
pos A0808: ntdll.dll
pos A0818: FSD: %d
pos A0824: advapi32.dll
pos A0848: RK? hntdll: %x, NQSI: %x, %x
pos A088C: NtQuerySystemInformation
pos A08AC: ntdll.dll
pos A08BC: safe gmf: %x
pos A08D0: GetModuleFileName
pos A08E8: safe gtc: %x
pos A0910: safe vqx: %x
pos A0924: NtQueryVirtualMemory
pos A0940: VirtualQueryEx
pos A0954: safe vpx: %x
pos A0968: NtProtectVirtualMemory
pos A0984: VirtualProtectEx
pos A099C: safe wpm: %x
pos A09B0: WriteProcessMemory
pos A09C8: safe rpm: %x
pos A09DC: ReadProcessMemory
pos A09F4: safe tpr: %x
pos A0A08: TerminateProcess
pos A0A20: safe opr: %x
pos A0A34: OpenProcess
pos A0A44: safe slp: %x
pos A0A58: Sleep
pos A0A64: safe chd: %x
pos A0A78: CloseHandle
pos A0A88: safe gft: %x
pos A0A9C: GetFileTime
pos A0AAC: safe gwd: %x
pos A0AC0: GetWindowsDirectoryA
pos A0ADC: safe cfa: %x
pos A0AF0: CreateFileA
pos A0B00: WOW64 Mode!!
pos A0B14: safe IsWow64Process: %x
pos A0B30: IsWow64Process
pos A0B44: sk 0
pos A0B50: kernel32.dll
pos A0B64: sn 0
pos A0B70: idp: %d
pos A0B7C: turn off Netizen
pos A0B94: turn off nProtect Personal with FW
pos A0BBC: TfrmNPMONV
pos A0BCC: nProtect V
pos A0BDC: CreateSEvent fail %d
pos A0BF8: Global\EnxGMSE
pos A0C0C: GAMEMON_DIE_EVENT: %x
pos A0C28: CreateEvent fail %d
pos A0C40: Global\EnxNPGM
pos A0C54: EnxNPGM
pos A0C60: reboot counter %d
pos A0C78: CloseGameMon Done
pos A0C90: EAD %s
pos A0C9C: %lu %s
pos A0CA8: UserInfo[%d]: %s
pos A0CC0: turn on Netizen
pos A0CD4: turn on nProtect Personal with FW
pos A0CFC: CloseGameMon Start
pos A0D14: -- ParseIni done
pos A0D2C: pi6
pos A0D34: VirtualPC fail
pos A0D48: VMWare fail
pos A0D58: bte fail1
pos A0D68: bte fail2 vid
pos A0D7C: \\.\SIWVIDSTART
pos A0D90: \\.\SICE
pos A0DA0: \\.\NTICE
pos A0DB0: CSIR: %d
pos A0DC0: CSII3: %d
pos A0DD0: CFI: %d
pos A0DDC: pi5 %x
pos A0DE8: nuov %d %d
pos A0DF8: INF HashValue
pos A0E0C: gamename not match %s, %s
pos A0E2C: pi4
pos A0E34: License Expired! exdate: %d, today: %d
pos A0E60: 172.20.30.
pos A0E70: 70.101.
pos A0E7C: chkincops %ld : %ld
pos A0EB0: GGBuilder  
pos A0EC0: pi3.5
pos A0ECC: auth fail ggsig.des, %d %lu
pos A0EEC: ggsig.des not found
pos A0F04: \ggsig.des
pos A0F14: QATestMagicValue: %08x
pos A0F30: QA_TEST_MAGICVALUE
pos A0F48: CHECK_AUTOMOUSE
pos A0F5C: CHECK_MON64
pos A0F6C: NO_CHECK_DEG
pos A0F80: GAMESCAN_PERIOD
pos A0F94: USE_LOGITECHKBD
pos A0FA8: USE_NETPEEKER
pos A0FBC: SIG_MOD
pos A0FC8: SIG_CHECK
pos A0FD8: USE_GGSCAN_CC
pos A0FEC: NO_KILL_NODEVICEP
pos A1004: EXPIRE_DATE
pos A1014: FLASH_CLICK_ENDING
pos A102C: FLASH_SPLASH2
pos A1040: USE_DRV_MESSAGE
pos A1054: NO_CHECKOS
pos A1064: GID
pos A106C: ADPATH
pos A1078: OFF_NPPERSONAL_FW
pos A1090: NO_USE_DUMP
pos A10A0: BUILD_GAME
pos A10B0: USE_SUM
pos A10BC: USE_PROXY
pos A10CC: USE_WSP
pos A10D8: NO_ALT_TAB
pos A10E8: XIDX
pos A10F4: XIDX_ED2
pos A1104: XIDX_ST2
pos A1114: XIDX_ED
pos A1120: XIDX_ST
pos A112C: USE_GGFILESCAN
pos A1140: USE_GGSCAN
pos A1150: CALC
pos A115C: HWMSCAN
pos A1168: NO_DRV_INT1
pos A1178: NO_DRV_DEBUG
pos A118C: NO_DRV_FILTER
pos A11A0: NO_DRV_KERNEL
pos A11B4: NO_DRIVERSCAN
pos A11C8: COUNT_LOG_SERVER
pos A11E0: LOG_SERVER
pos A11F0: NO_CSAUTH
pos A1200: SCAN_WAIT
pos A1210: NO_TRAYICON
pos A1230: NO_FULLSCAN
pos A1240: NO_GATE
pos A124C: NO_PHIDE
pos A125C: ADMIN_ONLY
pos A126C: BLOCK_JOYTOKEY
pos A1280: NO_VMWARE
pos A1290: NO_SOFTICE
pos A12A0: GAMECRC
pos A12AC: SENDLOG
pos A12B8: SENDERL
pos A12DC: SPEEDCHECK_FLAG
pos A12F0: SPEEDCHECK_INTERVAL
pos A1308: NO_API_SDI2
pos A1318: API_DC
pos A1324: NO_API_VPT
pos A1334: NO_API_STH
pos A1344: NO_API_LLA
pos A1354: NO_API_SDM
pos A1364: NO_API_DIO
pos A1374: NO_API_SCP
pos A1384: NO_API_SWH
pos A1394: NO_API_OPR
pos A13A4: NO_API_SDI
pos A13C4: NO_API_MSE
pos A13E4: NO_API_RPM
pos A13F4: NO_REALTIMESCAN
pos A1408: NO_SPEEDCHECK
pos A141C: NO_GAMEGUARD
pos A1430: NO_UPDATE
pos A1440: OPTION_VALUE
pos A1454: szGameName not found
pos A1470: UNKNOWN
pos A147C: GAME_NAME
pos A148C: UNKNOWN
pos A1498: GAMEMON
pos A14A4: pi3
pos A14C4: Decrypt2 fail %d %d
pos A14DC: pi2
pos A14E4: ini Auth fail %d %lu
pos A1500: pi1
pos A1508: .ini
pos A1514: \GameGuard\
pos A1524: ini file not found
pos A153C: ini: %s
pos A1548: .ini
pos A1554: pi0-2
pos A1560: pi0-1
pos A156C: GetModuleFileName fail %d
pos A158C: -- ParseIni
pos A159C: GameMon already Exist!
pos A15DC: GameMon Can't create mutex! %lu
pos A1600: MtxNPGM
pos A160C: Global\MtxNPGM
pos A1620: nusi found2
pos A1630: instdir: %s
pos A1640: InstallDir
pos A1650: curver: %s
pos A1660: Current Version
pos A1674: nusi found
pos A16A4: fi: %d, %x
pos A16B4: -_Exception in CFI, code: %08x, addr: %08x
pos A16E4: IAT Hooked. %d
pos A16F8: == GameHWND Done.
pos A1728: GetWindowThreadProcessId fail, pid:%lu, gamepid:%lu
pos A1760: GetWindowThreadProcessId fail, %lu
pos A1788: GameHWND[%d] : %lu
pos A17A0: Hook fail
pos A17B0: pid diff, parent: %lu, arg: %lu
pos A17D4: pid diff
pos A17E4: Fail to create tray icon. %d
pos A1808: nProtect GameMon Rev %d
pos A1824: COMMPIPE_LOSE, count: %lu, bSend: %lu
pos A1850: dwReqTime: %lu, %lu, %lu
pos A1870: NO_CSAUTH
pos A1880: CS2 Send[%d]: %08lx %08lx %08lx %08lx
pos A18AC: Csauth's Alterd by hack detect
pos A18D0: alter value send
pos A18E8: byungJo %x
pos A18F8: FIRST AUTH 2
pos A190C: NO_CSAUTH 1
pos A191C: st: %d, acsv
pos A1930: lt: %d
pos A193C: lml: %d, %d, %d
pos A1950: gmt: %d, rsmt: %d
pos A1968: TricksterTW
pos A1978: DarkStoryHK
pos A1994: dwReqTime2: %lu, %d
pos A19AC: CS2 Recv[%d]: %08lx %08lx %08lx %08lx
pos A19D8: pipe callback[%d]: %lu %lu
pos A19F8: -_Exception in CSAuth2, code: %08x, addr: %08x
pos A1A2C: 125.91.10.22
pos A1A40: 59.57.15.136
pos A1A54: LocalIPAddress %s
pos A1A78: !-_- debug: %s
pos A1A8C: !-_- reg: %s
pos A1AA0: eax: %x, ebx: %x, ecx: %x, edx: %x, ebp: %x, esi: %x, edi: %x, eflag: %x
pos A1AF0: !-_- dump: %s
pos A1B04: %02X 
pos A1B10: !-_- code: %08X, addr: %08X, ctid: %lu
pos A1B3C: SetnSendErl: %s
pos A1BAC: why
pos A1BB4: once
pos A1BC0: info
pos A1BCC: info2
pos A1BD8: info3
pos A1BE4: info4
pos A1BF0: info5
pos A1BFC: info6
pos A1C08: info7
pos A1C14: info8
pos A1C20: info9
pos A1C2C: info10
pos A1C38: bcc
pos A1C40: bte
pos A1C48: virus
pos A1C54: hack
pos A1C60: api
pos A1C68: error
pos A1C74: ref
pos A1C7C: always
pos A1C88: _cm
pos A1C90: desk
pos A1C9C: note
pos A1CA8: 61.78.35.29
pos A1CB8: ggerl
pos A1CF8: npgma
pos A1D04: FtpPutFileA
pos A1D14: InternetCloseHandle
pos A1D44: InternetOpenA
pos A1D58: wininet.dll
pos A1D68: FtpSendErl!
pos A1D78: DLL TimeStamp
pos A1D8C: %hs
pos A1D94: ErrorCount
pos A1DA4: %hs
pos A1DC0: SOFTWARE\INCAInternet\nProtectGameGuard\GameMon
pos A1DF4: FtpSendErl
pos A1E04: npsc.erl
pos A1E9C: %d %lu %d %s
pos A1EB4: npsc
pos A1F1C: why
pos A1F24: macro
pos A1F30: detect
pos A1F3C: speed
pos A1F48: pattern
pos A1F54: memory
pos A1F60: _cm
pos A1F68: desk
pos A1F74: note
pos A1F80: npgmaa
pos A1F8C: FtpPutFileA
pos A1F9C: InternetCloseHandle
pos A1FB4: InternetConnectA
pos A1FCC: InternetOpehq
pos A1FE0: wininet.dll
pos A1FF0: FtpSendLog!
pos A2000: ----- nProtect GameGuard Log Finished -----
pos A2044: \GameGuard\npgm\%s_%s_%s_%s_%04d_%02d_%02d_%02d_%02d_%02d.%03d
pos A2088: FtpPutFileA
pos A2098: InternetCloseHandle
pos A20C8: InternetOpenA
pos A20DC: wininet.dll
pos A20EC: \*.*
pos A219C: Description
pos A21AC: SYSTEM\CurrentControlSet\Services\npggsvc
pos A21DC:  -service
pos A21EC: %SystemRoot%\System32\svchost.exe -k netsvcs
pos A2224: impersonate success
pos A2250: -_Exception in MGPA, code: %08x, addr: %08x
pos A2280: version %s, %lu, %lu
pos A229C: MemCrc diff %x, %x
pos A22B4: commpipe handle not found
pos A22FC: CommThread(%x) ID[%d]: %lu
pos A231C: AcceptNewSession diff game name, active: %s, new: %s
pos A2358: AcceptNewSession fail, diff game name, active: %s, new: %s
pos A2398: KAFighterKR
pos A23A8: KoongyaAdventure
pos A23C0: Yaburi
pos A23CC: pid diff: %lu %lu
pos A2408: MtxNPGL
pos A2414: Global\MtxNPGL
pos A2428: Hack object
pos A2438: etc GameHack Detect
pos A2450: Emergency Block
pos A2464: Socket Hooking
pos A2478: illegal game dll(by npsc.des)
pos A249C: illegal system dll
pos A24B4: Game Alter(by npsc.des)
pos A24D0: SpeedHack
pos A24E0: Hack program(by npsc.des)
pos A2510: Hack program
pos A2524: Hack driver
pos A2534: else hack (msg: %d, arg: %d)
pos A2558: etc hack
pos A2568: SpeedHack Detect
pos A2580: GameHack Kill
pos A2594: Check threads(%x): %x (%d)
pos A25B4: Check handles(%x): %lu
pos A25D0: ObtainSePrivilege success
pos A25F0: AdjustTokenPrivileges2 fail: %lu
pos A2618: AdjustTokenPrivileges1 fail: %lu
pos A2640: LookupPrivilegeValue fail: %lu
pos A2684: ObtainSePrivilege: %s
pos A26A0: AdjustPrivilegeRights success
pos A27AC: scecli.dll
pos A27D8: 4: %x, 5: %x, 6: %x
pos A27F0: 1: %x, 2: %x, 3: %x
pos A2808: c bad ter
pos A2818: repack
pos A2824: CurPath
pos A2830: RunFlag
pos A283C: RunFlag
pos A2848: Software\INCAInternet\nProtectGameGuard\GameMon
pos A287C: R.C
pos A2884: -DAF End %s
pos A2894: -DAF %s
pos A28BC: Microsoft Corporation
pos A28D8: !lud %-20s  %08X   %8lu   %s - %x %d
pos A2904: ISWSHEX.dll
pos A2914: plugin_fragments.m32
pos A2930: plugin_net.m32
pos A2944: plugin_extra.m32
pos A295C: plugin_registry.m32
pos A2974: plugin_base.m32
pos A2988: plugin_nt.m32
pos A299C: midas32.dll
pos A29AC: Syslay.dll
pos A29BC: comx3.dll
pos A29CC: APSHook.dll
pos A29DC: adialhk.dll
pos A29EC: AMInit.dll
pos A29FC: r3hook.dll
pos A2A0C: kloehk.dll
pos A2A1C: sbhook.dll
pos A2A2C: mzvkbd3.dll
pos A2A3C: mzvkbd.dll
pos A2A4C: PaperHK.dll
pos A2A5C: allayer.dll
pos A2A6C: themehelper.dll
pos A2A80: CloseTestMidiDrv
pos A2A98: Syncor11.dll
pos A2AAC: xgusb.cpl
pos A2ABC: !da&cf %-20s  %08X   %8lu   %s
pos A2AE0: \GameGuard
pos A2B04: ntdll.dll
pos A2B14: CSB: %x, %s
pos A2B24: apisetschema.dll
pos A2B3C: !ntt suc
pos A2B4C: !nat %d %x
pos A2B5C: NtSetInformationThread
pos A2B78: NtQueryInformationThread
pos A2B98: NtTerminateThread
pos A2BB0: NtClose
pos A2BBC: %s(%s)
pos A2BE4: DirectX 6.0
pos A2BF4: 4.06.02.0436
pos A2C08: DirectX 7.0
pos A2C18: 4.07.00.0700
pos A2C2C: DirectX 7.0a
pos A2C40: 4.07.00.0716
pos A2C54: DirectX 8.0
pos A2C64: 4.08.00.0400
pos A2C78: DirectX 8.1
pos A2C88: 4.08.01.0810
pos A2CAC: 4.08.01.0881
pos A2CC0: 4.09.00.0900
pos A2CD4: DirectX 9.0a
pos A2CE8: 4.09.00.0901
pos A2CFC: DirectX 9.0b
pos A2D10: 4.09.00.0902
pos A2D24: DirectX 9.0c
pos A2D38: 4.09.00.0904
pos A2D4C: Version
pos A2D78: Video Driver(1) : %s, Driver date : %s
pos A2DA4: DriverDate
pos A2DB4: DriverDesc
pos A2DC4: SYSTEM\CurrentControlSet\Control\Class\{4D36E968-E325-11CE-BFC1-08002BE10318}\0001
pos A2E1C: Video Driver(0) : %s, Driver date : %s
pos A2E48: DriverDate
pos A2E58: DriverDesc
pos A2E68: SYSTEM\CurrentControlSet\Control\Class\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000
pos A2EC0: c:\mslog%ld.cmd
pos A2ED4: c:\mslog%ld_o.txt
pos A2EEC: c:\pagefiIe.sys
pos A2F00: netstat -n
pos A2F10: creating SM 1 for GSS fail(type %d) %d
pos A2F3C: creating SM 2 for GSS fail(type %d) %d
pos A2F68: writing SM for GSS success(type %d)
pos A2F90: %d
pos A2F98: Icps
pos A2FA4: Global\GameGuardService3
pos A2FC4: Global\GameGuardService2
pos A2FE4: Global\GameGuardService
pos A3000: |%d|%s|0x%08x|
pos A3014: %04d/%02d/%02d %02d:%02d:%02d|
pos A3038: Rev %d|
pos A3044: KERNEL_HACK|
pos A307C: SPEED_HACK|
pos A308C: MODULE_HACK|
pos A30A0: HACK_PROGRAM|
pos A30B4: INCOPS for Wemade
pos A30CC: INCOPS for NHN
pos A30E0: INCOPS for NCSOFT
pos A30F8: incops20081024wemade%s
pos A3114: incops20080918nhn%s
pos A312C: incops20070821ncsoft%s
pos A3148: Global\incops20070821%d
pos A3164: NCSOFT DOMAIN
pos A3178: ncsoft.corp
pos A3188: ncsoft.dev
pos A3198: ncsoft.net
pos A31A8: NCSOFT DOMAIN for QA Test
pos A31C8: INCOPS for NCSOFT new
pos A31E4: chkincops Wemade %ld : %ld
pos A3204: chkincops NHN %ld : %ld
pos A3220: INCOPS has been detected.
pos A3240: Global\PM_ICTRAY
pos A3258: Global\EVT_ICATCAL
pos A3270: Global\EVT_ICDCMGR
pos A3288: CSS, P_A %lu, %s
pos A32A0: CSS, P_H %lu, %s