Perfare/Il2CppDumper
Il2CppDumper
Il2CppDumper is a reverse engineering tool that recovers original .NET assembly structure from Unity games compiled with il2cpp. It parses il2cpp binaries across multiple executable formats including ELF, Mach-O, PE, NSO, and WASM, and reconstructs the original DLL structure from embedded metadata tables, enabling decompilation and analysis of game code.
The tool generates disassembler scripts for IDA, Ghidra, and Binary Ninja that apply recovered type definitions and structure layouts to the binary analysis. It also strips protection layers from memory-dumped libil2cpp.so files and simple PE-protected binaries, and recovers Unity MonoBehaviour and MonoScript metadata for use with asset extraction tools.
Il2CppDumper adapts its metadata parsing logic to handle variations across a wide range of Unity il2cpp versions, ensuring compatibility with different game builds. The tool is available as a command-line application with no graphical interface.