A runtime IL2CPP metadata dumper for jailbroken iOS.
Extracts full C# metadata (dump.cs, per-assembly headers, il2cpp.h, script.json, DummyDll/) from any Unity game at runtime — no offsets needed, no version lock-in.
Works on all IL2CPP versions (Unity 2018.3 → Unity 6).
- Dump.cs — full C# pseudocode of every class, field, property, method
- Per-assembly
.csfiles — split output for each managed DLL il2cpp.h— C struct definitions for IDA/Ghidra importscript.json— method RVAs with full namespace.Class$$method namesDummyDll/— real .NET PE assemblies with[Address(RVA="…")]and[FieldOffset(Offset="…")]custom attributes, ready to open in dnSpy/ILSpy- RE scripts bundled —
ida.py,ida_py3.py,ghidra.py,hopper-py3.py, binja/ghidra header converters - Preferences UI in Settings.app — per-app toggles, metadata detection, live search
- In-app HUD overlay — blur backdrop, gradient card, live progress bar, status text, stats, Share & Done buttons
- Crash-safe — every class / field / method is wrapped in
@try/@catch; a single broken class doesn't abort the dump
- Build the
.debwithmake package(Theos + rootless scheme required) - Install on jailbroken device (Dopamine / palera1n)
- Open Settings → Il2CppDumper:
- Enable the master switch
- Select target apps (the Unity Apps category auto-detects IL2CPP metadata)
- Configure output files and wait time
- Launch the game — the HUD will appear and show live dump progress
- Tap Share on success to send the
.zipvia AirDrop / Files / Messages
AppName_UNITYDUMP.zip
├── dump.cs # full combined C# dump
├── script.json # method RVAs for IDA/Ghidra
├── il2cpp.h # C struct definitions
├── logs.txt # dump statistics
├── Assembly/
│ ├── Assembly-CSharp.cs
│ ├── mscorlib.cs
│ └── ... # per-assembly splits
├── DummyDll/
│ ├── Assembly-CSharp.dll # .NET DLLs with RVA attributes
│ └── ... # open in dnSpy
└── scripts/
├── ida.py
├── ida_py3.py
├── ghidra.py
└── ... # bundled RE helper scripts
cd Il2CppDumper
# Rootless (Dopamine, palera1n rootless)
THEOS_PACKAGE_SCHEME=rootless make clean package FINALPACKAGE=1
# Rootful (unc0ver, Taurine)
THEOS_PACKAGE_SCHEME= make clean package FINALPACKAGE=1The resulting .deb appears in Il2CppDumper/packages/.
- Tien0246 — original IOS-Il2CppDumper
- Batchhh
- Perfare / Il2CppDumper — reference implementation
- UE4Dumper-4.25
- Zygisk-Il2CppDumper
- zxsrxt-kebab-case — runtime dumper improvements




