A direct memory access library for memory analysis & manipulation, reverse engineering, and debugging.
-
DMA session management
- RAII DMA handle
- Optional memory map bootstrapping on construction
- FPGA prepping routine for stable initialization
- PID lookup (single and list by name)
-
Process memory & modules
- Module metadata (base, size, path), enumeration, and in-memory PE image dumping
- Typed reads/writes, pointer-chain reads, and string reads
- Signature scanning in a given VA range with wildcard support
- RAII move-only scatter handles
- Preparing and executing scatter reads/writes
- CR3 fix
-
Input state (kernel-derived)
- Cursor position
- Detecting pressed keys and mouse buttons
- Built-in VK code to name table
To simplify both compilation and usage, this repository includes all required binaries, unmodified from the official MemProcFS and LeechCore releases.
When using this library, place FTD3XX.dll, leechcore.dll, and vmm.dll in the same directory as your executable.
All required DLLs are available in the dlls folder.
- Creator: lyk64
- Stipulations
This project builds upon and utilizes components from LeechCore and MemProcFS, both created by Ulf Frisk.
This project is licensed under the MIT License - see the LICENSE file for details.
The bundled MemProcFS files are licensed under AGPL-3.0 and the LeechCore files under GPL-3.0.