bbfox0703/UE5CEDumper v3649

UE5CEDumper v3649

on GitHub

UE5CEDumper — Unreal Engine 4/5 dumper (C++ DLL + Cheat Engine bridge + Avalonia UI).

About this release

A pass over the known issues. Games that hide their engine version now read their real UE 5.5 / 5.6, the ProcessEvent hook that Live Funcs, Call Trace and function calls rely on no longer depends on free memory near the game's code, and turning the experimental features off now stops everything they were running. It also fixes the three known issues listed in v3646.

New

• The UE version override shows an amber Does not fit this game badge, with a note, when the game's own functions contradict the version you set.
• Force and God Mode work on Blueprint bools (a whole byte, written as 1 / 0); packed bitfield bools are unchanged.

Fixed

• Games that strip their engine version are read as their real UE 5.5 or 5.6 instead of 5.4 (FINAL FANTASY RESONANCE DEMO and The Adventures of Elliot read UE 5.6).
• The ProcessEvent hook no longer fails at first with "the trampoline could not be placed" when the memory near the game's code fills up: a proxy DLL keeps that memory from the moment the game starts.
• Unticking the experimental features turns off what they run — Fly, See-through, a Stealth hold, Keep Foreground and a kept Live Funcs trace — connected or not; unticked while disconnected, the cleanup happens at the next connect.
• After the experimental features are turned off, Live Funcs no longer offers Open in Call Trace for a trace recorded before.
• A game refused as too old no longer shows "Object-array stride not detected".
• Call Trace's list keeps Time and Duration clickable beside the detail pane, so the pane widens to about 800 px at the default window size.
• Dragging a Call Trace pane or column edge into its limit no longer changes the width it remembers.
• Stealth: Hold @0 with no live target yet shows Armed @0 instead of a failure, and Detect no longer drops a running hold.
• UE 4.11–4.17 asset pointers (TAssetPtr) show their paths (Extinction).
• Non-ASCII names in UE 4.10–4.22 games are read whole (OCTOPATH TRAVELER).
• Int8 values in struct previews show -1, not 255.
• When a game's version fields disagree with the engine build string in its own exe, the build string wins; every game re-detects its version once after this update.
• The pointer scan no longer matches inside our own proxy DLL.
• When offset detection gives up on a UE4 game older than 4.25, it falls back to that version's layout.
• Re-binding a hotkey to a combo that cannot be registered keeps the old hotkey working, and a saved hotkey another program held at startup is no longer erased by the next save.
• A snapshot capture cut short by a crash is no longer listed as a snapshot, and the next capture removes it.

Known issues

• The SDK, CE XML, CSX and USMAP exports do not decode UE 4.11–4.17 asset pointers yet.
• A UE version override is raised by the structural version checks, like a detected version (by design).

ℹ️ v3646 listed "UE 411" as the too-old notice's wording; that was not reproducible — the notice reads UE 4.11 / 4.10.

⚠ Leave the UE version override on Auto unless detection is clearly wrong: a wrong version misreads data, and a function call built on it can crash the game.

ℹ️ If you use a proxy DLL, redeploy it from the Proxy Deploy tab: the hook memory is kept only by this release's DLL, loaded with the game.

Details for anyone who wants them: v3646…v3649

⚠ If anything regresses for you, fall back to v3646.

Setup

• Deploy proxy DLL from UI's Proxy Deploy tab (recommended), inject via UI's Proxy Deploy tab (AntiVirus may block UI; add it to exclude list), inject via the bundled Cheat Engine table (UE5CEDumper.CT), or drop the proxy version.dll into the game's Binaries\Win64 (manual mode).
• If neither version.dll nor dinput8.dll is loaded by your game, try dxgi.dll; if that filename is already taken (ReShade commonly uses it), try winmm.dll.
• See README.md for details.

The exe is unsigned — Windows SmartScreen / antivirus may warn on first run. Verify the download with the included .sha256.
Inject scripts like inject-ue.ps1 or UE5DumpUI.exe may be labeled as a hacking tool by antivirus. Add them to your exclusion list, or review the code in this repository and compile it yourself.