Skip to content

Repository files navigation

VolkDMA

A direct memory access library for memory analysis & manipulation, reverse engineering, and debugging.

Currently supports:

  • DMA session management

    • RAII DMA handle
    • Optional memory map bootstrapping on construction
    • FPGA prepping routine for stable initialization
    • PID lookup (single and list by name)
  • Process memory & modules

    • Module metadata (base, size, path), enumeration, and in-memory PE image dumping
    • Typed reads/writes, pointer-chain reads, and string reads
    • Signature scanning in a given VA range with wildcard support
    • RAII move-only scatter handles
    • Preparing and executing scatter reads/writes
    • CR3 fix
  • Input state (kernel-derived)

    • Cursor position
    • Detecting pressed keys and mouse buttons
    • Built-in VK code to name table

Included Binaries

To simplify both compilation and usage, this repository includes all required binaries, unmodified from the official MemProcFS and LeechCore releases.

When using this library, place FTD3XX.dll, leechcore.dll, and vmm.dll in the same directory as your executable. All required DLLs are available in the dlls folder.

Contributors

Credits

This project builds upon and utilizes components from LeechCore and MemProcFS, both created by Ulf Frisk.

License

This project is licensed under the MIT License - see the LICENSE file for details.

The bundled MemProcFS files are licensed under AGPL-3.0 and the LeechCore files under GPL-3.0.

About

A direct memory access library for memory analysis & manipulation, reverse engineering, and debugging.

Topics

Resources

Stars

12 stars

Watchers

1 watching

Forks

Releases

Packages

Contributors

Languages