Combat Arms Module Dumper
Combat Arms Module Dumper
Combat Arms Module Dumper
Combat Arms Module Dumper is a tool designed to make dumping of modules (such as Engine.exe and CShell.dll) quick and easy, coded entirely in C#. It works on 64-bit OSes unlike other alternatives such as Kernel Detective that require a driver to operate. I've tested it on Combat Arms NA however I'm guessing it'd work on EU (and other countries) as well. Note that it only dumps the memory, it does not generate a valid EXE or DLL, read on to find out more about that.
Instructions: (make sure to follow them properly)
- Start Combat Arms Module Dumper first.
- Start Combat Arms
- Wait until you are in the login screen
- Alt+Tab to the Combat Arms Module Dumper and click Refresh
- Find the module you'd like to dump (you can order them by name) and click Dump.
- Browse where you'd like to save the file and enjoy.
How can I convert this dump into a proper EXE or DLL?
There are a couple of tools out there that can fix dumps into valid files, in this example I will be using LordPE, you can find it on Google.
Start up LordPE and click on Options. Tick the Dumpfix box and click OK.
Click on Rebuild PE and browse to the .dmp file. Wait for it to fix the file.
Now, remove the .dmp extension from the file and do whatever you want.
Requirements:
.NET Framework 3.5
Credits:
Christoph Husse and spazzarama - EasyHook
Virus Scans:
Combat Arms Module Dumper by master131.rar - Jotti's malware scan
https://www.virustotal.com/file/8fd0...is/1340426944/
Obviously a false positive.
Combat Arms Module Dumper is a tool designed to make dumping of modules (such as Engine.exe and CShell.dll) quick and easy, coded entirely in C#. It works on 64-bit OSes unlike other alternatives such as Kernel Detective that require a driver to operate. I've tested it on Combat Arms NA however I'm guessing it'd work on EU (and other countries) as well. Note that it only dumps the memory, it does not generate a valid EXE or DLL, read on to find out more about that.
Instructions: (make sure to follow them properly)
- Start Combat Arms Module Dumper first.
- Start Combat Arms
- Wait until you are in the login screen
- Alt+Tab to the Combat Arms Module Dumper and click Refresh
- Find the module you'd like to dump (you can order them by name) and click Dump.
- Browse where you'd like to save the file and enjoy.
How can I convert this dump into a proper EXE or DLL?
There are a couple of tools out there that can fix dumps into valid files, in this example I will be using LordPE, you can find it on Google.
Start up LordPE and click on Options. Tick the Dumpfix box and click OK.
Click on Rebuild PE and browse to the .dmp file. Wait for it to fix the file.
Now, remove the .dmp extension from the file and do whatever you want.
Requirements:
.NET Framework 3.5
Credits:
Christoph Husse and spazzarama - EasyHook
Virus Scans:
Combat Arms Module Dumper by master131.rar - Jotti's malware scan
https://www.virustotal.com/file/8fd0...is/1340426944/
Obviously a false positive.
Forgot my credits ??
anyways good job man!
anyways good job man!
Wow thank you man finally i been waiting for a 64 bit dumper finally!!! YOUR AWESOME!
Found a bug @master131
I followed the directions:
ran as a admin
started ca and waited
alt tabbed back
Hit refresh
selected Engine.exe
Hit dump and the button disabled nothing else happened
Yes i have the latest framwork
I followed the directions:
ran as a admin
started ca and waited
alt tabbed back
Hit refresh
selected Engine.exe
Hit dump and the button disabled nothing else happened
Yes i have the latest framwork
Nice work, thanks
Now i can post my release to CAEU more often 
Nice thanks
Looks nice. but update the icon. 
Works perfectly. Thanks for this.
Originally Posted by ac1d_buRn
Works perfectly. Thanks for this.
Originally Posted by Saltine
WHAT ACID BURN YOU'RE STILL ALIVE? Also this thing is amazing and a great alternative for people that don't have 32 bit.
& I have 32 bit and still cant dump. Even installed XP and still BSoD so this tool is EXTREMELY helpful.
Nice man works fine on Windows 7 32 bits thanks 
nifty little program, will it work for anything else?
I tried dumping Cshell and it wasn't correct, even when I searched the correct address it gave wrong information. It seems odd it's working for everyone else. I used IDA Full Version to look through the dump.
Not working for me....i follow the instructions and push dump but it just stays frozen help please?
EDIT: NVM it works (sorry for posting again....I cant edit my last post!) thanks
EDIT: NVM it works (sorry for posting again....I cant edit my last post!) thanks
This thread is closed for replies.
