UEDumper

If the target game encrypts FName, you must implement a custom decryption function in Engine/Core/FName_decryption.h:

1. Set the macro USE_FNAME_ENCRYPTION to TRUE.
2. The function must return the decrypted name via the inputBuf parameter in Engine/Core/Core.cpp at EngineCore::FNameToString.
3. Verify if the engine correctly retrieves namePoolChunk/FNameEntry for your specific game.
4. You can use custom macros in UEdefinitions.h to manage decryption settings for different games.

UEDumper does not work out of the box for every game. To support a specific game, you must manually reverse-engineer it to find the following information:

1. UE Version: Determine the exact Unreal Engine version (e.g., by checking the shipping application's properties).
2. Offsets or Signatures: You need offsets for GObjects, GNames, and GWorld (and other offsets required for the live editor).
3. FName Decryption: If the game encrypts FName, you must find the decryption function.
4. Game Settings: Identify if the game uses specific engine macros (e.g., WITH_CASE_PRESERVING_NAME, UE_BLUEPRINT_EVENTGRAPH_FASTCALLS) that change internal engine structures.

The Live Editor allows reading and writing game memory at runtime using dumped structs.

Key Features & Limitations:

• Refresh Rate: The editor reads memory every 500ms by default.
• Addressing: You can inspect a specific address (pointing to a UObject) or use a defined offset from Offsets.h. If using an offset, it should point to a pointer of the UObject (e.g., a UWorld signature) so the editor can automatically track the object if it changes.
• Write Restrictions: Currently, you can only overwrite members that are not pointers or custom datatypes to prevent crashes.
• Stability: The live editor can crash at any time; save your changes frequently.

Customizing Type Names

To change how types (like uint8_t or int64_t) appear in the editor or dump, modify Engine/Userdefined/Datatypes.h.

Overriding Classes and Members

To completely or partially override a class, use Engine/Userdefined/StructDefinitions.h:

• Runtime Changes: When making changes at runtime, you must enter the case-sensitive PropertyType.
• Safety Warning: Only overwrite the member itself. Do not add members at different offsets or with incorrect sizes, as this will break SDK generation and cause the Live Editor to crash. The engine assumes your provided size is correct.

To bypass anti-cheat or use custom memory access methods, implement your own routines in Memory/driver.h.

Guidelines:

• The default implementation uses ReadProcessMemory / WriteProcessMemory.
• If you modify the function signatures, ensure they remain compatible with the callers in Memory/Memory.cpp (Memory::read, Memory::write, and getBaseAddress).

To set the target Unreal Engine version and specific engine behavior macros, modify the file Engine/Userdefined/UEdefinitions.h:

• Set the UE_VERSION macro to match your target UE version.
• Configure specific macros for internal engine structs (e.g., WITH_CASE_PRESERVING_NAME).
• You can also add custom macros here to facilitate easier switching between different game configurations.

Add game-specific offsets in Engine/Userdefined/Offsets.h.

Requirements:

• Ensure the name parameter for each offset is unique to avoid errors.
• The offsets for GObjects and GNames must be named OFFSET_GOBJECTS and OFFSET_GNAMES respectively.
• You can use custom macros in UEdefinitions.h to switch between different offset sets easily.

The compiled UEDumper.exe binary contains embedded versioning and product metadata. This information can be retrieved from the file's properties in Windows or via resource inspection tools.

Product Metadata:

• ProductName: UEDumper
• ProductVersion: 2.0.0.0
• FileDescription: Unreal engine dumper with live inspect
• InternalName: UEDumper.exe
• OriginalFilename: UEDumper.exe
• LegalCopyright: Copyright (C) 2023 Spuckwaffel
• FileVersion: 2.0.0.0