il2cpp_dumper 0.4.0

🏆 Feature Comparison — Rust vs C# vs Python

⚡ Performance

4× faster than Python, 2.4× faster than C# — on the same binary.

✨ Features

Core Dumping

• dump.cs — Full C# class/method/field/property decompilation with RVA/VA/Offset and assembly names
• Inline Disassembly — Optional per-method native assembly embedded directly in dump.cs
• DiffableCs — Splits classes into individual .cs files by namespace, parallelized with rayon
• script.json — Method addresses/signatures for IDA/Ghidra scripting
• il2cpp.h — C struct definitions for native analysis with topological type ordering
• stringliteral.json — All string literal values and indices
• DummyDLL — Reconstructed .NET assemblies for dnSpy/ILSpy (parallelized)

C++ Headers & Scaffolding

• il2cpp-functions.h — C++ scaffold with function pointer typedefs for hooking
• Itanium ABI Name Mangling — Correct C++ mangled names for all IL2CPP types
• Unity Header Auto-Detection — Version-matched il2cpp-types.h and il2cpp-api.h from embedded header database
• cpp_project/ — Ready-to-compile C++ project scaffold with includes and CMake structure
• Topological Sort — Types emitted in dependency order; circular dependencies detected with fallback
• Type Group Classification — Types categorized into forward declarations, method types, generic types, usage types
• Compiler Layout — GCC (__attribute__) or MSVC (__declspec) layout attributes
• Enhanced IDA Metadata — Extra type info annotations for IDA Pro scripts

Disassembly Engine

• Multi-Architecture — ARM64 (yaxpeax-arm), ARM32, x86/x64 (iced-x86)
• Control Flow Graph (CFG) — Basic block detection, branch targets, loop back-edges, if (condition) reconstruction
• Metadata Annotations — String literals, type info, method/field references, vtable resolution via ADRP+LDR patterns
• Semantic Variable Tracking — Maps registers to parameter names (X0 → this, X1 → arg0)
• Configurable — Toggle hex bytes, field names, annotations, CFG independently

Supported Platforms

IL2CPP Versions

• v16 – v39 (Unity 5.3 → Unity 6)
• Variable-width indices for v39/Unity 6
• Latest undocumented formats: v104, v106
• Auto XOR metadata decryption (1-byte, 4-byte, 8-byte, rolling, position-dependent, header-only)
• Manual version override via config

Search Strategies

• SectionHelper — Format-aware section scanning
• Symbol Search — ELF/Mach-O symbol table lookup
• ARM32 Search — Dedicated binary pattern matching
• __mod_init_func — Mach-O initializer analysis
• Manual mode — Enter addresses as fallback

📦 Installation

From Source

git clone https://github.com/rodroidmods/il2cpp-dumper-rs.git
cd il2cpp-dumper-rs/il2cpp_dumper
cargo build --release

The binary will be at target/release/il2cpp_dumper (.exe on Windows).

Cross-Compilation

# Linux
cargo build --release --target x86_64-unknown-linux-gnu

# macOS
cargo build --release --target aarch64-apple-darwin

# Android (via cross)
cross build --release --target aarch64-linux-android

🔧 Usage

il2cpp_dumper <il2cpp-binary> <global-metadata.dat> [output-dir]

Examples

il2cpp_dumper libil2cpp.so global-metadata.dat
il2cpp_dumper GameAssembly.dll global-metadata.dat ./output
il2cpp_dumper UnityFramework global-metadata.dat

Example Output

  Rodroid Il2CppDumper

    ╦╦  ╔═╗╔═╗╔═╗  ╔╦╗╦ ╦╔╦╗╔═╗╔═╗╦═╗
    ║║  ╠═╝║  ╠═╝   ║║║ ║║║║╠═╝║╣ ╠╦╝
    ╩╩═╝╚  ╚═╝╩    ═╩╝╚═╝╩ ╩╩  ╚═╝╩╚═
    Version v0.4.0
  ─────────────────────────────────────

  📂 Output .\Dump0

  ─── Binary Analysis ───────────────────

  ✓ Binary loaded: libil2cpp.so (52.43 MB)
  Unity Version: 2022.3.62f2
  ✓ Metadata loaded: global-metadata.dat (10.88 MB)
  Metadata Version: 31
  Type Definitions: 13815
  Method Definitions: 93772

  ─── Format Detection ──────────────────

  🔍 Detected ELF64 format
  IL2CPP Version: 31
  CodeRegistration: 0x44e5ff8
  MetadataRegistration: 0x465a328

  ─── Output Generation ─────────────────

  ✓ dump.cs generated
  ✓ script.json, il2cpp.h, stringliteral.json generated
  ✓ Dummy DLL files generated

  ═══════════════════════════════════════
  ✨ All tasks completed successfully!
  ═══════════════════════════════════════

  📂 Output Directory: .\Dump0
  📦 Generated Files: dump.cs, script.json, il2cpp.h, stringliteral.json, DummyDll/*.dll
  🚀 Elapsed: 8.35s
  ───────────────────────────────────────

⚙️ Configuration

Create a config.json in the working directory (or use --config):

{
  "ForceIl2CppVersion": false,
  "ForceVersion": 29.0,
  "ForceDump": false,
  "NoRedirectedPointer": false,
  "GenerateStruct": true,
  "GenerateDummyDll": true,
  "DummyDllAddToken": true,
  "dumpDisassembly": false,
  "dumpDisassemblyHexBytes": true,
  "dumpDisassemblyFieldNames": true,
  "dumpDisassemblyAnnotations": true,
  "dumpDisassemblyCfg": true,
  "maxDisassemblyInstructions": 512,
  "generateCppScaffold": true,
  "mangleNames": true,
  "enhancedIdaMetadata": true,
  "generateUnityHeaders": true,
  "compilerLayout": "GCC",
  "useTopologicalSort": true
}

🏗️ Architecture

il2cpp_dumper/src/
├── main.rs                           # CLI, format detection, orchestration
├── config.rs                         # Configuration handling
├── formats/                          # Binary format parsers
│   ├── elf.rs                        # ELF32/64 (Android, Linux)
│   ├── pe.rs                         # PE32/64 (Windows)
│   ├── macho.rs                      # Mach-O + Fat Mach-O (iOS, macOS)
│   ├── nso.rs                        # NSO (Nintendo Switch)
│   └── wasm.rs                       # WebAssembly (WebGL)
├── il2cpp/                           # IL2CPP structures and metadata
│   ├── base.rs                       # Il2Cpp main struct
│   ├── metadata.rs                   # Metadata parser
│   └── structures.rs                 # IL2CPP type definitions
├── search/                           # Registration search algorithms
│   └── section_helper.rs
├── executor/                         # IL2CPP type resolution engine
├── disassembler/                     # Multi-arch disassembly engine
│   ├── mod.rs                        # CFG analysis, annotations, formatting
│   ├── arm.rs                        # ARM64/ARM32 decoder (yaxpeax)
│   └── x86.rs                        # x86/x64 decoder (iced-x86)
└── output/                           # Output generators
    ├── decompiler.rs                 # dump.cs + inline disassembly
    ├── struct_generator.rs           # script.json, il2cpp.h, type classification
    ├── dummy_assembly_generator.rs   # DummyDLL (parallel)
    ├── cpp_scaffolding.rs            # il2cpp-functions.h generation
    ├── cpp_ast.rs                    # C++ AST emission with group annotations
    ├── cpp_type_model.rs             # C++ type model from IL2CPP types
    ├── cpp_type_dependency_graph.rs  # Topological sort + cycle detection
    ├── name_mangler.rs               # Itanium ABI C++ name mangling
    ├── header_manager.rs             # Unity header version matching
    └── unity_version.rs              # Unity version parsing & ranges

📜 License

MIT

🙏 Credits

• Perfare/Il2CppDumper — Original C# implementation
• SamboyCoding/Cpp2IL — Advanced C# IL2CPP analysis tool
• springmusk026/Il2CppDumper-Python — Python port
• LukeFZ/Il2CppInspectorRedux — Thanks for the code i used in v4 of my il2cppdumper, but its more faster since the logic its on rust and not C#
• dotnetdll — .NET DLL generation crate
• rayon — Parallel processing
• console-rs — Terminal styling ecosystem (console, indicatif, dialoguer)

📬 Community

⚠️ Disclaimer: This tool is for educational and research purposes only. Respect game developers' rights and terms of service.