MobileSubstrate Tweak to dump Unreal Engine 4 games on iOS.
The dumper is based on UE4Dumper-4.25 project.
- Supports ARM64 & ARM64e
- CodeSign friendly, you can use this as a jailed tweak
- Dumps UE4 classes, structs, enums and functions
- Generates function names json script to use with IDA & Ghidra
- pattern scanning to find the GUObjectArray, GNames and FNamePoolData addresses automatically
- Transfer dump files over IP
- Dead by Daylight Mobile
- Farlight 84
- PUBGM International
- ARK Survival
- eFootBall 2023 (PES Mobile)
- Distyle
- Mortal Kombat
- Torchlight: Infinite
- Arena Breakout
- Black Clover
Download the pre-compiled deb or compile it by yourself. Install the debian package on your device with Filza or by any method you prefer. Open one of the supported games and wait for the message pop-up to appear. It will say that the dumping will begin soon. Wait for the dumper to complete the process. Another pop-up will appear showing the dump result and the dump files location. After this a third pop-up will appear showing you the optional function to directly transfer the dump files to your pc.
- C++ headers that you can use in your source, however the headers might not compile directly without a change
- An all-in-one dump file header
- Logfile containing dump process logs
- ObjObjects dump
- If you are familiar with Il2cppDumper script.json, this is similar
- It contains a json array of function names and addresses
The transfer process uses TCP to connect to an ip on a port. You can use netcat for example on your pc to listen on a specific port. make sure your pc and iOS device connected to the same wifi. in the dumper transfer UI type your pc ip and the port you chose. You need to open a port on your pc before clicking "transfer".
NetCat comes with NMap and you can download it from here After you install it, make sure NMap binary folder is in your windows environment path. Now open the command line and type:
ncat -l <port> > <filename>.zip
You can download NetCat from your terminal directly. Make sure the incomming connections are not blocked before using this.
nc -l <port> > <filename>.zip
Follow the prototype in Tweak/src/Core/GameProfiles
You can also use the provided patterns to find GUObjectArray, GNames or NamePoolData.
- UE4Dumper-4.25
- Il2cppDumper
- @Katzi for testing and writing this README for me XD