frida ue4dump

frida-ue4dump

Skrip frida dump UE4 untuk UE >= 4.23 64bit
Sangat didasarkan pada UE4Dumper
Diuji pada game yang tercantum di bawah ini. Ini mungkin tidak berfungsi dengan benar dengan game lain kecuali Anda memperbaiki offset di script.js

• MALAM MALAM (Android, iOS, UE5? sepertinya baik-baik saja)
• Arena Breakout (KR, CN) (Android, iOS)
• Odin, Vahalla Bangkit (Android, iOS)
• Tinju Nyata 2 (Android, iOS)
• Mortal Kombat (Android)
• Dislyte (Android)
• Pelancong Octopath: Juara Benua (Android, iOS)
• Senter: Tak Terbatas (Android, iOS)
• Ponsel Black Clover (KR, JP) (Android, iOS)
• Menara Fantasi (Android, iOS)
• 아스달 연대기: 세개의 세력 (Arthdal ​​Chronicles) (Android, iOS)
• 아키에이지 워 (Perang ArcheAge) (Android)
• Aplikasi: 워더링 웨이브 (Wuthering Waves) (Android, iOS)

Wiki

Penggunaan

1. Menempel

• Perangkat Nyata

 frida -Ul script.js <UE4 Game>

• Emulator

 frida -Ul script.js --realm=emulated <UE4 Game>

2. Mengatur

 Call set(<moduleName>) on terminal(ex. set("libUE4.so"))

It will set moduleBase, GUObjectArray, GName
If it cannot find GUObjectArray, GName, need to provide those values manually

3. Membuang

 dumpSdk()

4. Acara Proses Kait (Opsional)
   

 (1) After successfully completing the dump, call `hookProcessEvent()`

atau

 (2) If you already know the ProcessInternal offset and have found and fixed all the offsets for the game, then...
set(<moduleName>)
processInternal_offset = <ProcessInternal offset you found. e.g, 0x123123>
hookProcessEvent()

atau

 (3) If you already know the ProcessEvent offset and have found and fixed all the offsets for the game, then...
set(<moduleName>)
processEvent = moduleBase.add(<ProcessEvent offset you found. e.g, 0x123123>)
hookProcessEvent()

Kontak

• Saluran: https://t.me/hackcatml1
  
• Obrolan: https://t.me/hackcatmlchat

Kredit

• UE4Dumper
• DanUE4Dumper