/PADumper

Process Android Memory Dumper

Primary LanguageKotlinGNU General Public License v3.0GPL-3.0

PADumper (Process Android Dumper)

Android process memory file dumper, especially for the il2cpp game at runtime.

Feature

  • Support Fix ELF dump
  • Support global-metadata.dat searching
  • Support detects ELF arch
  • Support root or non-root with virtual space

How To Use

  • Run Game
  • Open PADumper
  • Put the process name manually or you can click Select Apps to select running apps
  • Put the ELF Name or you can leave it with the default name libil2cpp.so
  • [Optional] Check Fix ELF if you want to fix the ELF
  • [Optional] Check global-metadata.dat if you want to dump unity metadata from memory
  • Dump and wait until the dumping finish
  • Output:
    • Root Method: /sdcard/PADumper/[Process]/[startAddress-endAddress-file]
    • Non Root Method: {HOME}/Download/PADumper/[Process]/[startAddress-endAddress-file]

Credits