UE5CEDumper
Health Uyari
- License — License: MIT
- Description — Repository has a description
- Active repo — Last push 0 days ago
- Low visibility — Only 8 GitHub stars
Code Basarisiz
- exec() — Shell command execution in tools/ghidra/run_all_aob_export.py
- exec() — Shell command execution in tools/ghidra/run_headless_export.py
Permissions Gecti
- Permissions — No dangerous permissions requested
This tool acts as a runtime data inspector and structure explorer for Unreal Engine 4 and 5 applications, designed primarily to assist with game development and reverse engineering.
Security Assessment
The overall risk is rated as Medium. The primary security concern is the presence of shell command execution within the codebase, specifically located in two Ghidra-related Python scripts (`run_all_aob_export.py` and `run_headless_export.py`). If these scripts are integrated into automated workflows or exposed to untrusted inputs, they could potentially facilitate arbitrary command execution. The scan did not identify any hardcoded secrets or dangerous broad permissions. Network requests and sensitive data access cannot be fully verified without a README, but the immediate automated risks center around the execution of those shell commands.
Quality Assessment
The project is currently active, with its most recent code push occurring just today. It is properly licensed under the standard MIT license, which is a positive indicator for open-source collaboration and clear usage rights. However, community trust and visibility are exceptionally low. With only 8 GitHub stars and no available README documentation, the project lacks community validation and basic instructions, making it difficult for new users to evaluate its functionality or intended setup safely.
Verdict
Use with caution — the project is active and properly licensed, but the low community adoption, missing documentation, and embedded shell execution risks require a thorough manual code review before implementation.
A UE4/UE5 runtime data inspector and structure explorer for development
UE5CEDumper
The Live Bridge between Unreal Engine Runtime and Cheat Engine.
UE5CEDumper is a interactive inspector toolchain. It provides a live window into the game's memory, allowing you to browse objects, find instances, and export CE-ready structures in real-time.
It's built for the active table maker. It bridges the gap between seeing an offset and actually using it in Cheat Engine.
UE5CEDumper is not meant to be a another dumper that extracts large amounts of data for analysis. Instead, it focuses on quickly finding UE structures and integrating with CE for live development. Think of it as a general-purpose UE tool rather than a specialized dumper.
Tested Version Matrix
| UE Version | GObjects | GNames | DynOff | Verified Games |
|---|---|---|---|---|
| 4.18 | ✅ | ✅ | ✅ | FF7 Remake Intergrade |
| 4.21 – 4.24 | ✅ | ✅ | ✅ | Star Wars Jedi, DQ XI S, IDOLM@STER STARLIT SEASON, Octopath Traveler, DQ I&II / III HD-2D Remaster |
| 4.25 – 4.27 | ✅ | ✅ | ✅ | FF7 Rebirth, Tower of Mask, Hogwarts Legacy, Romancing SaGa 2 RotS, Ghostwire: Tokyo |
| 5.0 – 5.2 | ✅ | ✅ | ✅ | (Confirmed support via generic patterns) |
| 5.3 – 5.4 | ✅ | ✅ | ✅ | Satisfactory (v1.1.3.1) |
| 5.5 – 5.7 | ✅ | ✅* | ✅** | Titan Quest II, EverSpace 2, Lushfoil Photography Sim, Manor Lords, Cat Island Petrichor Demo, Way of the Hunter 2 Demo, COMBAT PILOT: CARRIER QUALIFICATION Demo |
*GNames uses .data pointer-scan fallback for 5.5+
**DynOff supports CasePreservingName (FName = 16 bytes) layout.
Features for Table Makers
| Feature | Description |
|---|---|
| AOB Scanning | 132 AOB patterns + 5 symbol exports from 14 sources. Supports FChunkedFixed and FFixed object arrays. Encrypted GObjects + preset layout detection. Scan Hint Cache remembers winning patterns per game for 3× faster repeat scans, with UI buttons to clear/reset the cache. |
| DynOff (Dynamic Offsets) | Runtime probing of FField, FProperty, and UStruct. No more manual offset updating after game patches. |
| Live Walker | Inspect instance memory data with real-time value updates. Navigate into pointers (→), inline structs ({}), and containers ([]). Breadcrumb trail for full navigation history. Auto-refresh with configurable interval. |
| Definition View | Drill into UScriptStruct/UClass definitions to see field layouts, types, and live hex values. Works seamlessly with CE XML export for pointer chain navigation. |
| Container Drill-Down | Drill into Array, Map, and Set containers. ObjectProperty elements show resolved names and support click-through navigation. |
| UFunction Invoker | Call game functions via ProcessEvent directly from the UI. Game-thread safe dispatch via MinHook hook. Supports ScriptStruct parameters — 12 known engine structs (FVector, FRotator, FColor, etc.) + dynamic struct layout discovery. |
| Instance Finder | Locate all active objects of a class instantly. One-click to open in Live Walker. |
| Property Search | Search across all classes for specific property names. Find where a field is defined without browsing the full object hierarchy. |
| Class Structure | Browse class definitions with full field layouts, types, offsets, and inheritance chains. |
| Multi-Format CE Export | CE XML (pointer chain address records), CSX (CE Structure Dissect), SDK Header (.h), CE Field (single field), CE AA Script (Auto Assembler). Supports scalars, bitfields, structs, arrays, Map/Set, and UEnum DropDownLists. |
| Proxy DLL | version.dll proxy injection — no Cheat Engine required. Place next to the game exe, launch, and connect the UI. |
| Modern UI | External Avalonia UI connected via high-speed Named Pipe (30 JSON-RPC commands). Native AOT published. Keep your game performance smooth. |
Architecture & Workflow
Option A: Cheat Engine DLL injection
- Inject DLL: Run Cheat Engine, attach game process, load a save. Make sure game data is loaded first. Open
UE5CEDumper.CT. - Enable Script: Enable
init <== enable after process attached, thenInject DLL + Start Pipe Server. The DLL locates global engine pointers and detects the UE version/layout automatically. - Connect UI: Wait a few seconds for the scan to finish. Launch UE5DumpUI.exe and click Connect. Live data streams to the UI via Named Pipes (JSON-RPC).
- Navigate & Analyze: Browse the
UObjecthierarchy, find a class, drill into containers, or paste an address from CE to reverse-lookup and export.
Option B: Proxy DLL (Recommended)
- Place DLL: Copy
version.dll(frombuild.ps1 -Target ProxyDLL) into the game's root folder (next to the.exe). - Launch Game: Start the game normally. The proxy DLL loads automatically and starts the pipe server.
- Load a Save: Reach the main game world so UE objects are populated in memory.
- Connect + Scan: Launch UE5DumpUI.exe, click Connect, then click Start Scan. The DLL performs the AOB scan and returns engine data to the UI.
- Navigate & Analyze: Same workflow as Option A — browse objects, find instances, export CE structures.
Note: Do not use both methods simultaneously. If the proxy DLL is in the game folder, do not also inject
UE5Dumper.dllvia CE. The DLL detects duplicate instances and skips auto-start to prevent conflicts.
| Game Process (Injected) |
|---|
| DLL + CE Lua Bridge (or Proxy DLL) |
| ⬇️ |
| Named Pipe IPC (JSON-RPC Protocol) |
| ⬇️ |
| External GUI (Avalonia UI App) |
Optional: integration with AOBMaker CE DLL plugin
AOBMaker is a tool used to generate AOB patterns and CE Auto Assembler scripts. It has a CE DLL plugin that can communicate with UE5CEDumper to share detected patterns and offsets. If you have AOBMaker, you can enable the integration with UE5CEDumper UI:
- Direct browse memory region or code in CE by one-click in UI.
- Generate CE AA scripts with dynamic GWorld AOB AA scripts directly.
- Generate CE memory records for UE types and fields.
- Generate dissect data for UE structs to use with CE Structure Dissect.
Note: AOBMaker integration is optional and not required to use UE5CEDumper. The core features of UE5CEDumper work independently of AOBMaker.
Download AOBMaker here (register is required): https://opencheattables.com/viewtopic.php?t=1788
Requirements
Build
| Tool | Version |
|---|---|
| Visual Studio / MSVC | 2022 v17+ (MSVC v143) |
| CMake | 3.25+ |
| Ninja | any recent |
| .NET SDK | 10.0 |
build.cmd/build.ps1locate MSVC automatically viavswhere. No hardcoded paths.
Runtime
- Windows 10/11 x64
- Cheat Engine 7.6+ (for CE injection method) or Proxy DLL (no CE required)
- A running Unreal Engine 4 or 5 game process (x64)
Important Notes
- Custom Data Structures: In games like FF7 Rebirth, some critical data (e.g., HP) is stored in custom structures outside standard
UObjects. The Live Walker can help investigate these regions, but direct discovery is not possible. - GWorld Connectivity:
GWorldtraversal works in ~95% of tested games (19 of 20). For the remainder, use the Object Tree or Instance Finder as the primary entry point. - Container Limits: Array/Map/Set element reading respects a configurable limit to avoid excessive memory reads. Adjust the Array Limit slider in the Live Walker when working with large containers.
Contributing
See CONTRIBUTING.md for guidelines on:
- Reporting detection failures — what logs and info to include (most helpful!)
- Submitting AOB patterns — for reverse engineers who want to contribute directly
- Code contributions — PR process and code style
References & Credits
| Project | Use |
|---|---|
| Encryqed/Dumper-7 | Dynamic offset detection patterns, FField/FProperty probing strategy |
| UE4SS-RE/RE-UE4SS | UE5 runtime reflection, alternative angle |
| Spuckwaffel/UEDumper | Live editor UI architecture reference |
| trumank/patternsleuth | Additional AOB patterns for GObjects/GNames |
| Do0ks/GSpots | Additional AOB patterns for GObjects/GNames |
| nlohmann/json | Header-only JSON library used in DLL |
| cheat-engine/cheat-engine | CE Lua scripting API reference |
| AOBMaker (private) | AOB pattern generation tooling, AA script generation and fast CE-Goto (not a must) |
| UE4 Dumper.CT | Cake-san's cheat table — additional UE4 AOB patterns (CT-series in Signatures.h) |
Built with Claude Code
This project is developed with the assistance of Claude Code by Anthropic. The C++ DLL, C# Avalonia UI, build scripts, and documentation are collaboratively authored by the developer and Claude Code.
Download
Build from source with the current version to create your own binaries, or use the link below to download my pre-compiled release:
https://opencheattables.com/viewtopic.php?f=17&t=1797
License: MIT © 2026 bbfox0703
Yorumlar (0)
Yorum birakmak icin giris yap.
Yorum birakSonuc bulunamadi