Combat Arms Module Dumper v2.1
Combat Arms Module Dumper v2.1
Combat Arms Module Dumper is a tool designed to make dumping of modules (such as Engine.exe and CShell.dll) quick and easy, coded entirely in C#. It works on 64-bit OSes unlike other alternatives such as Kernel Detective that require a driver to operate. I've tested it on Combat Arms NA however I'm guessing it'd work on EU (and other countries) as well.
Features:
- Fully user-mode, no drivers used.
- No DLL injection required.
- Works when the game is in fullscreen and when HackShield has hidden the game.
- IAT/Imports reconstruction.
- Removes bad sections from Themida protection.
Instructions:
- Start Combat Arms or Combat Arms Module Dumper, does not matter which order (still works when game is in fullscreen)
- Hit Refresh if you started the tool first (should be over 100 modules or so)
- Select the module to dump and click Dump
Changes in v2.1:
- Fixed bug where PE dumps produced were not debuggable due to gaps in the section headers and misaligned header fields. @J
- Minor tweak to module list to prevent redrawing while list is populating.
Notes:
- You may notice Task Manager opening, please do not close it while the tool is "Waiting for Combat Arms" because it needs it to work.
- The dumper still works when the game is in fullscreen mode where most tools can't access the game.
- This version produces proper EXEs or DLLs, it doesn't do memory dumps anymore.
- If you get a message saying "Unable to communicate with/start Task Manager, the program will now close." try starting the dumper again while Task Manager is already open.
I've only fully tested on Windows 8.1 x64 and a little on XP x86 but hopefully it works on everything else.
Virus Scans:
https://www.virustotal.com/en/file/8...70e38/analysis
http://virusscan.jotti.org/en/scanre...2f5fa23e1be283
Please ignore the false positives, it's not a trojan.
Combat Arms Module Dumper is a tool designed to make dumping of modules (such as Engine.exe and CShell.dll) quick and easy, coded entirely in C#. It works on 64-bit OSes unlike other alternatives such as Kernel Detective that require a driver to operate. I've tested it on Combat Arms NA however I'm guessing it'd work on EU (and other countries) as well.
Features:
- Fully user-mode, no drivers used.
- No DLL injection required.
- Works when the game is in fullscreen and when HackShield has hidden the game.
- IAT/Imports reconstruction.
- Removes bad sections from Themida protection.
Instructions:
- Start Combat Arms or Combat Arms Module Dumper, does not matter which order (still works when game is in fullscreen)
- Hit Refresh if you started the tool first (should be over 100 modules or so)
- Select the module to dump and click Dump
Changes in v2.1:
- Fixed bug where PE dumps produced were not debuggable due to gaps in the section headers and misaligned header fields. @J
- Minor tweak to module list to prevent redrawing while list is populating.
Notes:
- You may notice Task Manager opening, please do not close it while the tool is "Waiting for Combat Arms" because it needs it to work.
- The dumper still works when the game is in fullscreen mode where most tools can't access the game.
- This version produces proper EXEs or DLLs, it doesn't do memory dumps anymore.
- If you get a message saying "Unable to communicate with/start Task Manager, the program will now close." try starting the dumper again while Task Manager is already open.
I've only fully tested on Windows 8.1 x64 and a little on XP x86 but hopefully it works on everything else.
Virus Scans:
https://www.virustotal.com/en/file/8...70e38/analysis
http://virusscan.jotti.org/en/scanre...2f5fa23e1be283
Please ignore the false positives, it's not a trojan.
Originally Posted by J
