Perfare/Zygisk-Il2CppDumper logo

Perfare/Zygisk-Il2CppDumper

Free

Using Zygisk to dump il2cpp data at runtime

FreeFree tier
Type
Open Source

About Perfare/Zygisk-Il2CppDumper

Perfare/Zygisk-Il2CppDumper is a Zygisk-based module that dumps il2cpp metadata at runtime from Unity games on Android. It bypasses protection, encryption, and obfuscation layers commonly applied to il2cpp binaries. The module works with Magisk v24+ and requires Zygisk enabled. Developers can either fork the repository and use GitHub Actions to build a flashable module with a target game package name, or compile locally via Android Studio. Once installed, starting the game generates a dump.cs file in the game's data directory containing the decompressed il2cpp structures.

Key Features

Runtime dumping of il2cpp data from Unity Android games
Bypasses protection, encryption, and obfuscation
Works with Magisk v24+ and Zygisk
Outputs a comprehensive dump.cs file
Build via GitHub Actions workflow or Android Studio
Open-source under MIT license

Pros & Cons

Pros
  • Effectively bypasses common il2cpp obfuscation techniques
  • Open-source (MIT) with transparent code and active community
  • Easy to build via automated GitHub Actions workflow
  • Low runtime overhead as a Zygisk module
  • Well-documented with both English and Chinese guides
Cons
  • Requires a rooted Android device with Magisk and Zygisk enabled
  • Only targets Android Unity games using il2cpp scripting backend
  • Must build the module before use (no pre-built releases)
  • Dumps data at runtime, requiring the game to be launchable
  • Limited to dumping metadata; does not reconstruct full source code

Best For

Reverse engineering il2cpp-based Unity games on AndroidSecurity research and vulnerability analysis of game binariesModding and game modification developmentEducational understanding of il2cpp runtime internals

FAQ

What is il2cpp?
il2cpp is a Unity scripting backend that converts IL bytecode into native C++ code, commonly used in Android games. Dumping il2cpp data helps in reverse engineering and modding.
Do I need root to use this tool?
Yes. Zygisk-Il2CppDumper is a Magisk module that requires a rooted device with Magisk v24 or later and Zygisk enabled.
How do I build the module?
You can either fork the repository and run the GitHub Actions workflow (providing the game package name), or compile locally using Android Studio by editing game.h and running the gradle task :module:assembleRelease.
Where is the dump generated?
After installing the module and starting the target game, a dump.cs file is generated in /data/data/GamePackageName/files/ on the device.