Generate sdk and functions script for unreal engine 4 games on android.
The dumper is based on UE4Dumper-4.25 project.
- Supported ABI ARM64, ARM, x86 and x86_64
- Can be compiled as executable for external and as library for internal use
- Dump UE4 classes, structs, enums and functions
- Generate function names json script to use with IDA & Ghidra etc
- Symbol and pattern scanning to find GUObjectArray, GNames and NamePoolData addresses automatically
- Dump UE4 library from memory
- Dead by Daylight Mobile (64bit only)
- PUBG Mobile (32bit & 64bit)
- ARK Survival (32bit & 64bit)
- Mortal Kombat (32bit & 64bit)
- eFootBall 2023 (64bit only)
- Distyle (64bit only)
- Farlight 84 (32bit & 64bit)
- Torchlight: Infinite (64bit only)
- Arena Breakout (64bit only)
Simply load or inject the library with whichever method and let it do its thing. run logcat with tag filter "UE4Dump3r" for dump logs. The dump output will be at the game's external data folder (/sdcard/Android/data/< game >/files) to avoid external storage permission.
You will have to push the dumper in an executable directory like /data/local/tmp then give it execute permission. Its recommended to have adb, you can check push script for this. Use the compatible dumper, if game is 64bit use arm64 or x86_64, if 32bit then use arm or x86 version.
Usage: ./UE4Dump3r [-h] [-o] [ options ]
Required arguments:
-o, --output specify output directory path.
Optional arguments:
-h, --help show available arguments.
-p specify game package ID in advance.
-dump_lib dump UE4 library from memory.
Example to generate full dump with headers and functions scripts:
./UE4Dump3r_arm64 -o /sdcard/Download
Choose from the available games:
1 : eFootball 2023 | jp.konami.pesam
2 : Distyle | com.lilithgames.xgame.gp
3 : Mortal Kombat | com.wb.goog.mkx
4 : Ark Survival | com.studiowildcard.wardrumstudios.ark
5 : Dead by Daylight | com.bhvr.deadbydaylight
6 : PUBG | com.tencent.ig
7 : PUBG | com.rekoo.pubgm
8 : PUBG | com.pubg.imobile
9 : PUBG | com.pubg.krmobile
10 : PUBG | com.vng.pubgmobile
11 : Farlight 84 | com.miraclegames.farlight84
12 : Torchlight: Infinite | com.xd.TLglobal
Game number: 1
- C++ headers that you can use in your source, however the headers might not compile directly without a change
- An all-in-one dump file header
- ObjObjects dump
- If you are familiar with Il2cppDumper script.json, this is similar. It contains a json array of function names and addresses
Follow the prototype in GameProfiles
You can also use the provided patterns to find GUObjectArray, GNames or NamePoolData.
You need to have make installed on your OS and an ndk (I used ndk v25), then simply run build script. make sure to set NDK_Home in Makefile.