What Is a DMA Cheat?
A DMA (Direct Memory Access) cheat is a cheating method that reads the memory of the PC running the game from the outside, using a specialized FPGA hardware card installed in a PCIe slot. The fundamental difference from conventional cheat software: the cheat never runs on the target computer. The FPGA card plugged into the PC uses its physical DMA capability to read RAM directly; the data is forwarded to a second computer (control PC) via USB or network. ESP, radar, or other visual overlays are displayed on this second screen.
While the user plays the game, the PC the anti-cheat examines is completely clean — no software injection, no hooks, no suspicious processes.
Why Can't Anti-Cheat Detect It?
All detection methods of anti-cheat systems (EAC, BattlEye, VAC, Ricochet) rest on one assumption: the cheat software must be running on the game computer.
Memory scanning: Anti-cheat looks for code that modifies its own process or game memory. DMA reads game memory but writes nothing — there is no process to scan.
Driver signature checks: EAC and BattlEye scan the list of loaded kernel drivers. The FPGA card is a hardware component, not a software driver — it doesn't appear on the list.
Process/file detection: Anti-cheat scans process names and file paths of known cheat tools. The control PC is an entirely separate machine and never appears in the game PC's process list.
Screenshot analysis: Some anti-cheat systems take screenshots for overlay detection. ESP is displayed on the control PC, not the game PC — there is nothing to catch in a screenshot.
Conclusion: Anti-cheat fights an enemy that doesn't exist. Because DMA operates at the hardware layer, all software-based detection mechanisms are rendered ineffective.
How Does PCIe DMA Work? Technical Details
PCIe (Peripheral Component Interconnect Express) architecture allows installed hardware cards to access system RAM directly — a feature called DMA, which is actually a standard hardware feature used every day by components like GPUs and NVMe SSDs.
The FPGA card (e.g., based on Xilinx Artix-7 or Kintex-7) is installed in the PCIe slot and its device firmware configures the card to be recognized by the motherboard as legitimate hardware. When the firmware is written correctly, the card appears as a network adapter or storage controller.
Software like DMA Reader reads the game process's virtual address map through this hardware, parsing structures like entity list and player base. For CS2, this traverses the Unity ECS-based entity system; offsets are updated server-side, so nothing manual is required when the game updates.
DMA Limitations and Realistic Expectations
DMA is the most powerful method against anti-cheat detection — but it doesn't solve everything.
Hardware cost: PCIe FPGA cards and a second computer are required. Setup demands more upfront investment than buying software.
No physical input capability: DMA only reads memory. Features requiring input simulation like aimbot need a separate mechanism (mouse/keyboard emulation). DMA Reader is focused on ESP and radar.
Behavioral detection: Server-side analysis (aim patterns, stat anomalies) is unaffected by DMA. Playing in a way that doesn't draw attention is the only guarantee against behavioral bans.
Firmware quality matters: FPGA cards with cheap or poorly written firmware can be noticed during PCIe scans. DMA Reader comes with tested and compatible firmware recommendations.
That said, against the software-based detection mechanisms of all known anti-cheat systems, DMA remains firmly in the undetectable category.