Source Valorant — Memory Unprotect and Auto-Dumper for IDA (C++)

[byte_corvus]

Been digging into some Valorant structures lately and figured I would share this utility for anyone needing to pull a clean dump for IDA. I know a lot of you have been struggling with the protections on the client, so this should save some time.

Technical Overview:
This is essentially a wrapper that automates the memory unprotect process and dumping. It handles unprotecting every memory page and dumps the process data. It is not reinventing the wheel, but it cleans up the workflow significantly.

Prerequisites:

1. VGK Bypass: You need to stop the Vanguard driver. Use

   sc stop vgk

   in an elevated CMD. You can restart it later with

   sc start vgk

2. Launch Args: Run the client manually using the following parameters:
   

   "C:\Riot Games\VALORANT\live\VALORANT.exe" -remoting-app-port=58088 -remoting-auth-token=lalalalala -patchline=live -subject=lalalala -ares-deployment=eu -config-endpoint=https://shared.eu.a.pvp.net -savetouserdir -culture=en_US -riotgamesapi-settings-token=dafuq

3. Injection: Use Process Hacker or any standard injector to load the DLL.

Media:

Spoiler: IDA Result Preview

Credits:
- isometimescheat (For the memory page unprotect logic)
- armvirus (For the dumper architecture)

Download:

Has anyone else managed to get a clean map of the latest build using this? I am curious if anyone has run into issues with the protection layers re-initializing during the dump process. Drop your findings or any fix you found for the offset scanning below.