Il2CppDumper GUI Tool (Windows)

1781118216220.png

Note:

Due to the variety and complexity of protection and encryption methods utilized by many games, I cannot offer support or assistance for protected games. All comments related to game protections are IGNORED!

Features:
  • Complete DLL restore (except code), can be used to extract MonoBehaviour and MonoScript
  • Supports ELF, ELF64, Mach-O, PE, NSO and WASM format
  • Supports Unity 5.3 - 6000
  • Supports Metadata 16 - 39
  • Supports generate IDA, Ghidra and Binary Ninja scripts to help them better analyze il2cpp files
  • Supports generate structures header file
  • Supports Android memory dumped libil2cpp.so file to bypass protection
  • Support bypassing simple PE protection
  • Set output directory
  • Set registration offsets
  • Support drag and drop
  • Performance settings
  • Fast mode (skip the slow metadata-usage binary scan)
  • Support APK and IPA dump automations

 

Requirements:

  • Net Framework 4.8
  • Windows 7 and above 

Download:

https://github.com/AndnixSH/Il2CppDumper-GUI/releases


https://mega.nz/folder/aZJj1bDI#OdiCH4yXi0GfoLQfue7zDA


How to use:
Drop APK, APKS, XAPK, ZIP or decrypted IPA file on the Start button to dump

To manually select files, drop binary file and global-metadata.dat on the textboxes or the Select button, or click Select and choose a file. After that, press the start button to dump

To obtain CodeRegistration and MetadataRegistration, read the following tutorials:
- https://tomorrowisnew.com/posts/Finding-CodeRegistration-and-MetadataRegistration/
- https://il2cppdumper.com/reverse/examining-the-binary

Outputs:​

DummyDll

Folder, containing all restored dll files

Use dnSpy, ILSpy or other .Net decompiler tools to view

Can be used to extract Unity MonoBehaviour and MonoScript, for UtinyRipper, UABE

ida.py

For IDA (Python 2 / IDAPython 2, older IDA versions)

ida_py3.py

For IDA (Python 3 / IDAPython 3, IDA 7.4 and newer). Same as ida.py but updated for Python 3 syntax

ida_with_struct.py

For IDA, read il2cpp.h file and apply structure information in IDA (Python 2 version)

ida_with_struct_py3.py

For IDA, read il2cpp.h file and apply structure information in IDA (Python 3 version, IDA 7.4 and newer)

il2cpp.h

Structure information header file

ghidra.py

For Ghidra

ghidra_with_struct.py

For Ghidra, read il2cpp.h file and apply structure/function signature information in Ghidra

ghidra_wasm.py

For Ghidra, work with ghidra-wasm-plugin

il2cpp_header_to_ghidra.py

For Ghidra, run inside Ghidra's Script Manager to parse il2cpp.h and import all il2cpp structures into Ghidra's Data Type Manager

Il2CppBinaryNinja

For Binary Ninja

il2cpp_header_to_binja.py

For Binary Ninja, converts il2cpp.h into a Binary Ninja-compatible header so its structures can be imported

hopper-py3.py

For Hopper Disassembler (Python 3). Reads script.json and renames the addresses/methods in Hopper

script.json

For ida.py, ghidra.py and Il2CppBinaryNinja

stringliteral.json

Contains all stringLiteral information

Common errors:​

ERROR: Metadata file supplied is not valid metadata file.

Make sure you choose the correct file. Sometimes games may obfuscate this file for content protection purposes and so on. Deobfuscating of such files is beyond the scope of this program, so please DO NOT file an issue regarding to deobfuscating.

ERROR: Can't use auto mode to process file, try manual mode.

Please note that the executable file for the PC platform is GameAssembly.dll or *Assembly.dll

ERROR: This file may be protected.

Il2CppDumper detected that the executable file has been protected, use GameGuardian to dump libil2cpp.so from the game memory, then use Il2CppDumper to load and follow the prompts, can bypass most protections.

Credits:

Popular Posts

[TOOL] Unity Assets Bundle Extractor

VMOS Pro - FREE Custom ROMs without VIP | GMS, ROOT, Xposed | Android 4.4.4, 5.1.1, 7.1.2, 9.0 ROMs