noobdumper-v2 icon indicating copy to clipboard operation
noobdumper-v2 copied to clipboard

A dumper for CS:GO cheat loaders that use manual map injection method

NoobDumper v2

A (mostly dll) dumper for CS:GO cheat loaders that use manual map injection method

How to use this

Inject the dumper into the loader ( x86 ).
  1. Let the loader try to inject (manual map) the binary into the target process.
  2. Watch how the binary is being exported.

Changelog

0.2: Switched from userland api (WriteProcessMemory -> NtWriteVirtualMemory) to kernel mode function. (Calling a userland function would automatically call the kernel mode one).

Configuration

Variables ( dllmain.cpp - DllMain ).
  1. bool
    • bConsole

      • true - shows you the debug console
      • false - hides the debug console
    • bLogConsole

      • true - log the debug output to a file and not to the comnsole
      • false - don't log anything and let everything be as it was

Tip

The second VirtualAllocEx (and the next WriteProcessMemory after it) is/are called just for loader' stub, it/they isn't/aren't useful on its/their own at all.

These last 2 files are not part of the binary as they are loader' stub!!!

image

Screenshots

image

Dump process:

image

File output:

image