Combat Arms Module Dumper

[[MPGH]master131]

Combat Arms Module Dumper

Combat Arms Module Dumper is a tool designed to make dumping of modules (such as Engine.exe and CShell.dll) quick and easy, coded entirely in C#. It works on 64-bit OSes unlike other alternatives such as Kernel Detective that require a driver to operate. I've tested it on Combat Arms NA however I'm guessing it'd work on EU (and other countries) as well. Note that it only dumps the memory, it does not generate a valid EXE or DLL, read on to find out more about that.



Instructions: (make sure to follow them properly)
- Start Combat Arms Module Dumper first.
- Start Combat Arms
- Wait until you are in the login screen
- Alt+Tab to the Combat Arms Module Dumper and click Refresh
- Find the module you'd like to dump (you can order them by name) and click Dump.
- Browse where you'd like to save the file and enjoy.

How can I convert this dump into a proper EXE or DLL?
There are a couple of tools out there that can fix dumps into valid files, in this example I will be using LordPE, you can find it on Google.

Start up LordPE and click on Options. Tick the Dumpfix box and click OK.


Click on Rebuild PE and browse to the .dmp file. Wait for it to fix the file.


Now, remove the .dmp extension from the file and do whatever you want.

Requirements:
.NET Framework 3.5

Credits:
Christoph Husse and spazzarama - EasyHook

Virus Scans:
Combat Arms Module Dumper by master131.rar - Jotti's malware scan
https://www.virustotal.com/file/8fd0...is/1340426944/

Obviously a false positive.

[Alessandro10]

Forgot my credits ??

anyways good job man!

[MGKing1]

Wow thank you man finally i been waiting for a 64 bit dumper finally!!! YOUR AWESOME!

[Stigmas]

Found a bug @master131
I followed the directions:
ran as a admin
started ca and waited
alt tabbed back
Hit refresh
selected Engine.exe
Hit dump and the button disabled nothing else happened

Yes i have the latest framwork

[Beatz]

Nice work, thanks

[TokolocoSK]

Now i can post my release to CAEU more often

[Stik77]

Nice thanks

[Dead3nd]

Looks nice. but update the icon.

[ac1d_buRn]

Works perfectly. Thanks for this.

[Saltine]

Works perfectly. Thanks for this.

WHAT ACID BURN YOU'RE STILL ALIVE? Also this thing is amazing and a great alternative for people that don't have 32 bit.

[ac1d_buRn]

WHAT ACID BURN YOU'RE STILL ALIVE? Also this thing is amazing and a great alternative for people that don't have 32 bit.

Ofc im alive. I go under a different name on most forums now

& I have 32 bit and still cant dump. Even installed XP and still BSoD so this tool is EXTREMELY helpful.

[luccss]

Nice man works fine on Windows 7 32 bits thanks

[supercarz1991]

nifty little program, will it work for anything else?

[Shadow`]

I tried dumping Cshell and it wasn't correct, even when I searched the correct address it gave wrong information. It seems odd it's working for everyone else. I used IDA Full Version to look through the dump.

[jose91598]

Not working for me....i follow the instructions and push dump but it just stays frozen help please?

EDIT: NVM it works (sorry for posting again....I cant edit my last post!) thanks