ReClass.NET-DMAPlugin

A plugin for ReClass.Net that enables memory input from DMA physical memory acquisition device. Only memory read feature is enabled, but can be extended to allow memory write and live debugging.

Installation

• Compile or download from release
• Copy DMAPlugin.dll and vmmsharp.exe into the Plugin folder (ReClass.NET/x64/Plugins)
• Download the latest MemProcFS release
• Download FTD3XX.dll in the Requirement section
• Place leechcore.dll, vmm.dll and FTD3XX.dll alongside DMAPlugin.dll and vmmsharp.exe in the Plugin folder.
• Download the latest ReClass.NET release
• Start ReClass.NET and check the plugins form if the DMA plugin is listed. Open the "Native Helper" tab and switch Function Provider to "DMA".

Compiling

1. Clone this Repository
2. Clone MemProcFS by ufrisk
3. Clone ReClass.Net by KN4CK3R
4. Create the following folder structure

..\ReClass.NET\
..\ReClass.NET\ReClass.NET\ReClass.NET.csproj
..\ReClass.NET-DMAPlugin
..\ReClass.NET-DMAPlugin\DMAPlugin.csproj
..\MemProcFS\
..\MemProcFS\vmmsharp\
..\MemProcFS\memprocfs\memprocfs.vcxproj

Known Issues

• Icon and Path are not supported in the Process Browser form
• Due to dependencies to vmm.dll and leechcore.dll, the plugin is x64 only.