BryanGIG / PADumper

Process Android Memory Dumper

PADumper (Process Android Dumper)

Android process memory file dumper, especially for the il2cpp game at runtime.

Feature

• Support Fix ELF dump
• Support global-metadata.dat searching
• Support detects ELF arch
• Support root or non-root with virtual space

How To Use

• Run Game
• Open PADumper
• Put the process name manually or you can click Select Apps to select running apps
• Put the ELF Name or you can leave it with the default name libil2cpp.so
• [Optional] Check Fix ELF if you want to fix the ELF
• [Optional] Check global-metadata.dat if you want to dump unity metadata from memory
• Dump and wait until the dumping finish
• Output:
  • Root Method: /sdcard/PADumper/[Process]/[startAddress-endAddress-file]
  • Non Root Method: {HOME}/Download/PADumper/[Process]/[startAddress-endAddress-file]

Credits

• libsu
• SoFixer