UE5CEDumper

skill
Guvenlik Denetimi
Basarisiz
Health Uyari
  • License — License: MIT
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Low visibility — Only 8 GitHub stars
Code Basarisiz
  • exec() — Shell command execution in tools/ghidra/run_all_aob_export.py
  • exec() — Shell command execution in tools/ghidra/run_headless_export.py
Permissions Gecti
  • Permissions — No dangerous permissions requested
Purpose
This tool acts as a runtime data inspector and structure explorer for Unreal Engine 4 and 5 applications, designed primarily to assist with game development and reverse engineering.

Security Assessment
The overall risk is rated as Medium. The primary security concern is the presence of shell command execution within the codebase, specifically located in two Ghidra-related Python scripts (`run_all_aob_export.py` and `run_headless_export.py`). If these scripts are integrated into automated workflows or exposed to untrusted inputs, they could potentially facilitate arbitrary command execution. The scan did not identify any hardcoded secrets or dangerous broad permissions. Network requests and sensitive data access cannot be fully verified without a README, but the immediate automated risks center around the execution of those shell commands.

Quality Assessment
The project is currently active, with its most recent code push occurring just today. It is properly licensed under the standard MIT license, which is a positive indicator for open-source collaboration and clear usage rights. However, community trust and visibility are exceptionally low. With only 8 GitHub stars and no available README documentation, the project lacks community validation and basic instructions, making it difficult for new users to evaluate its functionality or intended setup safely.

Verdict
Use with caution — the project is active and properly licensed, but the low community adoption, missing documentation, and embedded shell execution risks require a thorough manual code review before implementation.
SUMMARY

A UE4/UE5 runtime data inspector and structure explorer for development

README.md

UE5CEDumper

UE5CEDumper

The Live Bridge between Unreal Engine Runtime and Cheat Engine.

UE5CEDumper is a interactive inspector toolchain. It provides a live window into the game's memory, allowing you to browse objects, find instances, and export CE-ready structures in real-time.

It's built for the active table maker. It bridges the gap between seeing an offset and actually using it in Cheat Engine.

UE5CEDumper is not meant to be a another dumper that extracts large amounts of data for analysis. Instead, it focuses on quickly finding UE structures and integrating with CE for live development. Think of it as a general-purpose UE tool rather than a specialized dumper.


Platform
UE Version
.NET
C++
Avalonia
License
Built with Claude Code

Tested Version Matrix

UE Version GObjects GNames DynOff Verified Games
4.18 FF7 Remake Intergrade
4.21 – 4.24 Star Wars Jedi, DQ XI S, IDOLM@STER STARLIT SEASON, Octopath Traveler, DQ I&II / III HD-2D Remaster
4.25 – 4.27 FF7 Rebirth, Tower of Mask, Hogwarts Legacy, Romancing SaGa 2 RotS, Ghostwire: Tokyo
5.0 – 5.2 (Confirmed support via generic patterns)
5.3 – 5.4 Satisfactory (v1.1.3.1)
5.5 – 5.7 ✅* ✅** Titan Quest II, EverSpace 2, Lushfoil Photography Sim, Manor Lords, Cat Island Petrichor Demo, Way of the Hunter 2 Demo, COMBAT PILOT: CARRIER QUALIFICATION Demo

*GNames uses .data pointer-scan fallback for 5.5+
**DynOff supports CasePreservingName (FName = 16 bytes) layout.


Features for Table Makers

Feature Description
AOB Scanning 132 AOB patterns + 5 symbol exports from 14 sources. Supports FChunkedFixed and FFixed object arrays. Encrypted GObjects + preset layout detection. Scan Hint Cache remembers winning patterns per game for 3× faster repeat scans, with UI buttons to clear/reset the cache.
DynOff (Dynamic Offsets) Runtime probing of FField, FProperty, and UStruct. No more manual offset updating after game patches.
Live Walker Inspect instance memory data with real-time value updates. Navigate into pointers (→), inline structs ({}), and containers ([]). Breadcrumb trail for full navigation history. Auto-refresh with configurable interval.
Definition View Drill into UScriptStruct/UClass definitions to see field layouts, types, and live hex values. Works seamlessly with CE XML export for pointer chain navigation.
Container Drill-Down Drill into Array, Map, and Set containers. ObjectProperty elements show resolved names and support click-through navigation.
UFunction Invoker Call game functions via ProcessEvent directly from the UI. Game-thread safe dispatch via MinHook hook. Supports ScriptStruct parameters — 12 known engine structs (FVector, FRotator, FColor, etc.) + dynamic struct layout discovery.
Instance Finder Locate all active objects of a class instantly. One-click to open in Live Walker.
Property Search Search across all classes for specific property names. Find where a field is defined without browsing the full object hierarchy.
Class Structure Browse class definitions with full field layouts, types, offsets, and inheritance chains.
Multi-Format CE Export CE XML (pointer chain address records), CSX (CE Structure Dissect), SDK Header (.h), CE Field (single field), CE AA Script (Auto Assembler). Supports scalars, bitfields, structs, arrays, Map/Set, and UEnum DropDownLists.
Proxy DLL version.dll proxy injection — no Cheat Engine required. Place next to the game exe, launch, and connect the UI.
Modern UI External Avalonia UI connected via high-speed Named Pipe (30 JSON-RPC commands). Native AOT published. Keep your game performance smooth.

Architecture & Workflow

Option A: Cheat Engine DLL injection

  1. Inject DLL: Run Cheat Engine, attach game process, load a save. Make sure game data is loaded first. Open UE5CEDumper.CT.
  2. Enable Script: Enable init <== enable after process attached, then Inject DLL + Start Pipe Server. The DLL locates global engine pointers and detects the UE version/layout automatically.
  3. Connect UI: Wait a few seconds for the scan to finish. Launch UE5DumpUI.exe and click Connect. Live data streams to the UI via Named Pipes (JSON-RPC).
  4. Navigate & Analyze: Browse the UObject hierarchy, find a class, drill into containers, or paste an address from CE to reverse-lookup and export.

Option B: Proxy DLL (Recommended)

  1. Place DLL: Copy version.dll (from build.ps1 -Target ProxyDLL) into the game's root folder (next to the .exe).
  2. Launch Game: Start the game normally. The proxy DLL loads automatically and starts the pipe server.
  3. Load a Save: Reach the main game world so UE objects are populated in memory.
  4. Connect + Scan: Launch UE5DumpUI.exe, click Connect, then click Start Scan. The DLL performs the AOB scan and returns engine data to the UI.
  5. Navigate & Analyze: Same workflow as Option A — browse objects, find instances, export CE structures.

Note: Do not use both methods simultaneously. If the proxy DLL is in the game folder, do not also inject UE5Dumper.dll via CE. The DLL detects duplicate instances and skips auto-start to prevent conflicts.

Game Process (Injected)
DLL + CE Lua Bridge (or Proxy DLL)
⬇️
Named Pipe IPC (JSON-RPC Protocol)
⬇️
External GUI (Avalonia UI App)

Optional: integration with AOBMaker CE DLL plugin

AOBMaker is a tool used to generate AOB patterns and CE Auto Assembler scripts. It has a CE DLL plugin that can communicate with UE5CEDumper to share detected patterns and offsets. If you have AOBMaker, you can enable the integration with UE5CEDumper UI:

  • Direct browse memory region or code in CE by one-click in UI.
  • Generate CE AA scripts with dynamic GWorld AOB AA scripts directly.
  • Generate CE memory records for UE types and fields.
  • Generate dissect data for UE structs to use with CE Structure Dissect.

Note: AOBMaker integration is optional and not required to use UE5CEDumper. The core features of UE5CEDumper work independently of AOBMaker.

Download AOBMaker here (register is required): https://opencheattables.com/viewtopic.php?t=1788

Requirements

Build

Tool Version
Visual Studio / MSVC 2022 v17+ (MSVC v143)
CMake 3.25+
Ninja any recent
.NET SDK 10.0

build.cmd / build.ps1 locate MSVC automatically via vswhere. No hardcoded paths.

Runtime

  • Windows 10/11 x64
  • Cheat Engine 7.6+ (for CE injection method) or Proxy DLL (no CE required)
  • A running Unreal Engine 4 or 5 game process (x64)

Important Notes

  • Custom Data Structures: In games like FF7 Rebirth, some critical data (e.g., HP) is stored in custom structures outside standard UObjects. The Live Walker can help investigate these regions, but direct discovery is not possible.
  • GWorld Connectivity: GWorld traversal works in ~95% of tested games (19 of 20). For the remainder, use the Object Tree or Instance Finder as the primary entry point.
  • Container Limits: Array/Map/Set element reading respects a configurable limit to avoid excessive memory reads. Adjust the Array Limit slider in the Live Walker when working with large containers.

Contributing

See CONTRIBUTING.md for guidelines on:

  • Reporting detection failures — what logs and info to include (most helpful!)
  • Submitting AOB patterns — for reverse engineers who want to contribute directly
  • Code contributions — PR process and code style

References & Credits

Project Use
Encryqed/Dumper-7 Dynamic offset detection patterns, FField/FProperty probing strategy
UE4SS-RE/RE-UE4SS UE5 runtime reflection, alternative angle
Spuckwaffel/UEDumper Live editor UI architecture reference
trumank/patternsleuth Additional AOB patterns for GObjects/GNames
Do0ks/GSpots Additional AOB patterns for GObjects/GNames
nlohmann/json Header-only JSON library used in DLL
cheat-engine/cheat-engine CE Lua scripting API reference
AOBMaker (private) AOB pattern generation tooling, AA script generation and fast CE-Goto (not a must)
UE4 Dumper.CT Cake-san's cheat table — additional UE4 AOB patterns (CT-series in Signatures.h)

Built with Claude Code

This project is developed with the assistance of Claude Code by Anthropic. The C++ DLL, C# Avalonia UI, build scripts, and documentation are collaboratively authored by the developer and Claude Code.


Download

Build from source with the current version to create your own binaries, or use the link below to download my pre-compiled release:

https://opencheattables.com/viewtopic.php?f=17&t=1797


License: MIT © 2026 bbfox0703

Yorumlar (0)

Sonuc bulunamadi