Android Unreal Engine Dumper / UE Dumper

Generate sdk and functions script for unreal engine games on android.

The dumper is based on UE4Dumper-4.25 project.

Features

• Supported ABI ARM64, ARM, x86 and x86_64
• Can be compiled as executable for external and as library for internal use
• Dump UE offsets, classes, structs, enums and functions
• Generate function names json script to use with IDA & Ghidra etc
• Symbol and pattern scanning to find GUObjectArray, GNames and NamePoolData addresses automatically
• Find GEngine and GWorld in Data segment
• Find ProcessEvent index and offset (64bit only for now)
• Dump UE library from memory

Currently Supported Games

• Arena Breakout
• Ark Ultimate
• Auroria
• Black Clover M
• Blade Soul Revolution
• Case 2 Animatronics
• Century Age of Ashes
• Delta Force
• Dislyte
• Farlight 84
• Hello Neighbor
• Hello Neighbor Nicky's Diaries
• Injustice 2
• King Arthur Legends Rise
• Lineage 2 Revolution
• Lineage W
• Mortal Kombat
• Night Crows
• Odin Valhalla Rising
• PUBG
• RL Sideswipe
• Real Boxing 2
• Rooftops Parkour Pro
• Special Forces Group 2
• The Baby In Yellow
• Torchlight: Infinite
• Tower Of Fantasy
• Wuthering Waves
• eFootball (PES)

Library Usage

Simply load or inject the library with whichever method and let it do it's thing. Run logcat with tag filter "UEDump3r" for dump logs. The dump output will be at the game's external data folder (/sdcard/Android/data/< game >/files) to avoid external storage permission.

Executable Usage

You will have to push the dumper in an executable directory like /data/local/tmp then give it execute permission. Its recommended to have adb, you can check push script for this. Use the compatible dumper, if game is 64bit use arm64 or x86_64, if 32bit then use arm or x86 version.

Usage: ./UEDump3r [-h] [-o] [ options ]

Required arguments:
   -o, --output        specify output directory path.

Optional arguments:
   -h, --help          show available arguments
   -p, --package       specify game package ID in advance.
   -d, --dumplib       dump UE library from memory.

Output Files

AIOHeader.hpp

• An all-in-one dump file header

Offsets.hpp

• Header containing UE Offsets

Logs.txt

• Log file containing dump process logs

Objects.txt

• ObjObjects dump

script.json

• If you are familiar with Il2cppDumper script.json, this is similar. It contains a json array of function names and addresses

Adding a new game to the Dumper

Follow the prototype in GameProfiles

You can also use the provided patterns to find GUObjectArray, GNames or NamePoolData.

Building

You need to have 'make' installed on your OS and NDK_HOME env variable should be set.

git clone --recursive https://github.com/MJx0/AndUEDumper
cd AndUEDumper/AndUEDumper
make clean && make

TODO

• Sort Generated Packages & Solve Dependencies
• Dumper-7 Auto Find Offsets

Credits & Thanks

• UE4Dumper-4.25
• Il2cppDumper
• Dumper-7
• UEDumper