Android Unreal Engine 4 Dumper / UE4 Dumper

Generate sdk and functions script for unreal engine 4 games on android.

The dumper is based on UE4Dumper-4.25 project.

Features

• Supported ABI ARM64, ARM, x86 and x86_64
• Can be compiled as executable for external and as library for internal use
• Dump UE4 classes, structs, enums and functions
• Generate function names json script to use with IDA & Ghidra etc
• Symbol and pattern scanning to find GUObjectArray, GNames and NamePoolData addresses automatically
• Dump UE4 library from memory

Currently Supported Games

• Dead by Daylight Mobile (64bit only)
• PUBG Mobile (32bit & 64bit)
• ARK Survival (32bit & 64bit)
• Mortal Kombat (32bit & 64bit)
• eFootBall 2023 (64bit only)
• Distyle (64bit only)
• Farlight 84 (32bit & 64bit)
• Torchlight: Infinite (64bit only)
• Arena Breakout (64bit only)

Library Usage

Simply load or inject the library with whichever method and let it do its thing. run logcat with tag filter "UE4Dump3r" for dump logs. The dump output will be at the game's external data folder (/sdcard/Android/data/< game >/files) to avoid external storage permission.

Executable Usage

You will have to push the dumper in an executable directory like /data/local/tmp then give it execute permission. Its recommended to have adb, you can check push script for this. Use the compatible dumper, if game is 64bit use arm64 or x86_64, if 32bit then use arm or x86 version.

Usage: ./UE4Dump3r [-h] [-o] [ options ]

Required arguments:
   -o, --output        specify output directory path.

Optional arguments:
   -h, --help          show available arguments.
   -p                  specify game package ID in advance.
   -dump_lib           dump UE4 library from memory.

Example to generate full dump with headers and functions scripts:

./UE4Dump3r_arm64 -o /sdcard/Download
Choose from the available games:
        1 : eFootball 2023 | jp.konami.pesam
        2 : Distyle | com.lilithgames.xgame.gp
        3 : Mortal Kombat | com.wb.goog.mkx
        4 : Ark Survival | com.studiowildcard.wardrumstudios.ark
        5 : Dead by Daylight | com.bhvr.deadbydaylight
        6 : PUBG | com.tencent.ig
        7 : PUBG | com.rekoo.pubgm
        8 : PUBG | com.pubg.imobile
        9 : PUBG | com.pubg.krmobile
        10 : PUBG | com.vng.pubgmobile
        11 : Farlight 84 | com.miraclegames.farlight84
        12 : Torchlight: Infinite | com.xd.TLglobal
Game number: 1

Output Files

Headers

• C++ headers that you can use in your source, however the headers might not compile directly without a change

AIOHeader.hpp

• An all-in-one dump file header

ObjectsDump.txt

• ObjObjects dump

script.json

• If you are familiar with Il2cppDumper script.json, this is similar. It contains a json array of function names and addresses

Adding a new game to the Dumper

Follow the prototype in GameProfiles
You can also use the provided patterns to find GUObjectArray, GNames or NamePoolData.

How to compile

You need to have make installed on your OS and an ndk (I used ndk v25), then simply run build script. make sure to set NDK_Home in Makefile.

Credits & Thanks

• UE4Dumper-4.25

• Il2cppDumper