对于反WG做初步的解释：



没有采用驱动技术，而是采用了大众化的动态链接库技术（DLL），兼容性强，可在xp 、win7、 win8 等操作系统上运作。



功能如下：



1、启动线程检测 网速主流和非主流内存搜索工具的检测（比如金山游侠、ce等）



2、启动线程检测 检测游戏自身的DLL是否出了非法模块，比如 speed.dll等变速齿轮的dll 或wpe.dll封包拦截工具WPE的dll，沙盘的dll



3、非法主流WG的窗口标题



4、采用 Code Virtualizer 对DLL本身的敏感代码上进行了加壳处理 //虚拟机保护，正常的反汇编代码会变为杂乱无章的 怪异汇编指令。-For a preliminary interpretation of anti-WG: do not use drive technology, instead of using a popular dynamic link library technology (DLL), compatibility, available in xp, win7, win8 other operating systems operation. Functions are as follows: 1, start threads detect the mainstream and non-mainstream memory speed search tool detection (such as Jinshan Ranger, ce, etc.) 2, start the game thread detection detects whether the DLL itself out of the illegal modules, such speed.dll other gear The dll or wpe.dll packet interception tools WPE the dll, sand table dll 3, illegal mainstream WG window title 4, Code Virtualizer sensitive code for the DLL itself on the packers processing// virtual machine protection, the normal anti- assembly code becomes chaotic strange assembly instructions.