-
-
Notifications
You must be signed in to change notification settings - Fork 393
API_CSharp
Most functionality in the Memory Process File System is made available in a C# API for the use by developers. The C# API is a wrapper for the C/C++ API. Since the MemProcFS native library is 64-bit only the C# process must be running in 64-bit mode to be able to make use of the C# library.
The C# library is a wrapper library. The native vmm.dll and leechcore.dll must still be pointed to by the library. Pre-built versions of the native library is found in the MemProcFS releases section.
The C# library exists in the Vmmsharp project. Examples about how to use Vmmsharp is found in the Vmmsharp example project.
A Vmmsharp NuGet package is available for use. Note that even with the NuGet package the native library is required.
An example file containing a lot of use cases are found in the file VmmsharpExample.cs in the Vmmsharp example project in the visual studio solution.
The functionality mirror the functionality of the C/C++ API at large. Please consult the C# API sources or the C/C++ API documentation for information and guidance.
Sponsor PCILeech and MemProcFS:
PCILeech and MemProcFS is free and open source!
I put a lot of time and energy into PCILeech and MemProcFS and related research to make this happen. Some aspects of the projects relate to hardware and I put quite some money into my projects and related research. If you think PCILeech and/or MemProcFS are awesome tools and/or if you had a use for them it's now possible to contribute by becoming a sponsor!
If you like what I've created with PCIleech and MemProcFS with regards to DMA, Memory Analysis and Memory Forensics and would like to give something back to support future development please consider becoming a sponsor at: https://github.com/sponsors/ufrisk
Thank You 💖