Modified version of Il2CppDumper allows you to dump methods of GameAssembly.dll of the game Zero Zenless Zone.
If this project affects you, please contact: [email protected]
Modified version of Il2CppDumper allows you to dump methods of GameAssembly.dll of the game Zero Zenless Zone
Only supports Zero Zenless Zone
中文说明请戳这里
Unity il2cpp reverse engineer
MonoBehaviour
and MonoScript
libil2cpp.so
file to bypass protectionRun Il2CppDumper.exe
and choose the il2cpp executable file and global-metadata.dat
file, then enter the information as prompted
The program will then generate all the output files in current working directory
Il2CppDumper.exe <executable-file> <global-metadata> <output-directory>
Folder, containing all restored dll files
Use dnSpy, ILSpy or other .Net decompiler tools to view
Can be used to extract Unity MonoBehaviour
and MonoScript
, for UtinyRipper, UABE
For IDA
For IDA, read il2cpp.h file and apply structure information in IDA
structure information header file
For Ghidra
For BinaryNinja
For Ghidra, work with ghidra-wasm-plugin
For ida.py, ghidra.py and Il2CppBinaryNinja
Contains all stringLiteral information
All the configuration options are located in config.json
Available options:
DumpMethod
, DumpField
, DumpProperty
, DumpAttribute
, DumpFieldOffset
, DumpMethodOffset
, DumpTypeDefIndex
GenerateDummyDll
, GenerateScript
DummyDllAddToken
RequireAnyKey
ForceIl2CppVersion
, ForceVersion
ForceIl2CppVersion
is true
, the program will use the version number specified in ForceVersion
to choose parser for il2cpp binaries (does not affect the choice of metadata parser). This may be useful on some older il2cpp version (e.g. the program may need to use v16 parser on il2cpp v20 (Android) binaries in order to work properly)ForceDump
NoRedirectedPointer
true
for files dumped from some devicesShouldn't execute to here.
An update may have occurred in global-metadata.dat, and there is an unsupported situation.
ERROR: It not genshin's metadata!
An update may have occurred in global-metadata.dat, the file structure has changed.