frida-ue4dump

UE4 dump frida script for UE >= 4.23 64bit
Heavily based on UE4Dumper
Tested on the games listed below. It might not work correctly with other games unless you fix the offsets in script.js

• NIGHT CROWS (Android, iOS, UE5? seems fine)
• Arena Breakout (Android, iOS)
• Odin, Vahalla Rising (Android, iOS)
• Real Boxing 2 (Android, iOS)
• Mortal Kombat (Android)
• Dislyte (Android)
• Octopath Traveler: Champions of the Continent (Android, iOS)
• Torchlight: Infinite (Android, iOS)
• Black Clover Mobile (KR, JP) (Android, iOS)
• Tower of Fantasy (Android, iOS)

Usage

1. Attach

frida -Ul script.js <UE4 Game>

2. Set

Call set(<moduleName>) on terminal(ex. set("libUE4.so"))

It will set moduleBase, GUObjectArray, GName
If it cannot find GUObjectArray, GName, need to provide those values manually

3. Dump

dumpSdk()

Credits

• UE4Dumper
• AndUE4Dumper