Developer knowledge network · moderated exchange

Супольнасць UnreliableCode

Супольнасць распрацоўшчыкаў даследаванняў, зваротнага праектавання і кадавання

Knowledge indexжыць
4Categories
919Threads
2.8KПаведамленні
Analysis

Internal vs External Architecture: performance, latency and security trade-offs [v2.4 Technical Discussion]

vtable_slayer
Senior Reverser
MEMBER
прадстаўнік: 215
Дата далучэння: Mar 2018
Паведамленні: 86
Дзякуй: 61
1 месяцаў таму · Jul 5, 2026 8:07 AM
#1

Comparing Internal vs External modding architectures in modern games:

Internal (DLL Injection / VMT Hooks):

  • Pros: Direct memory access (sub-nanosecond pointer dereference), native hook execution on game threads, zero IPC latency.
  • Cons: Code exists within game process space, subject to memory page audits and integrity scans.

External (Separate Process / Kernel / DMA):

  • Pros: Completely isolated process address space, zero modified code in game binary.
  • Cons: Requires IPC synchronization, memory read latency (0.1 - 2.0 microseconds), requires external overlay rendering.

Which architecture do you prefer for your projects?

dma_ghost
DMA Guru
MEMBER
прадстаўнік: 115
Дата далучэння: Jan 2020
Паведамленні: 12
Дзякуй: 83
1 месяцаў таму · Jul 5, 2026 1:17 PM
#2

For single-player games and private servers, internal is unbeatable for instant hooks. For kernel-protected competitive games, external DMA is the only long-term route.

hook_doctor
Hooking Specialist
MEMBER
прадстаўнік: 181
Дата далучэння: Jul 2019
Паведамленні: 21
Дзякуй: 50
1 месяцаў таму · Jul 5, 2026 7:10 PM
#3

Great summary of the trade-offs.