rev-u3d-dump — Claude Code skill: Unity IL2CPP symbols
Recovers C# method names and addresses from Unity IL2CPP builds on iOS and Android, then produces import scripts for IDA and Ghidra.
npx skills add P4nda0s/reverse-skills --skill rev-u3d-dump -a claude-codeWhat rev-u3d-dump does
IL2CPP turns C# into native code, so class and method names vanish from the binary. They survive inside global-metadata.dat. This skill walks through the whole job: where the binary and metadata sit in an IPA or APK, how to read the metadata version from the first bytes, and which tool handles that version.
Metadata v39 and Unity 6 need the v39 branch of the roytu/Il2CppDumper fork. The original Perfare/Il2CppDumper stops at v29. Build with dotnet build -c Release and run with DOTNET_ROLL_FORWARD=LatestMajor, because a project targeting .NET 6/8 will not start on a newer runtime without it. Output includes script.json with function addresses, dump.cs with RVA values, il2cpp.h structs and ida_py3.py.
Exit code 134 in non-interactive mode is expected — the dump already finished. Exit code 137 on macOS means the system killed the binary, and codesign -s - is what gets it running. An empty output directory usually points to a binary and metadata file taken from different builds, so check the pair.
What it helps with
- restore C# method names inside a native Unity binary
- map function addresses back to their original classes
- build
script.jsonfor function renaming in IDA - import type structs from
il2cpp.hinto a disassembler - handle v39 metadata from a Unity 6 build
Example prompts for the agent
- Dump the symbols from
libil2cpp.soandglobal-metadata.datin this APK and writescript.jsonfor IDA - Check the metadata version in
global-metadata.datand tell me which Il2CppDumper to use - Generate a Ghidra import script for this Unity build
How to install rev-u3d-dump
1Skills CLI (Vercel)
npx skills add P4nda0s/reverse-skills --skill rev-u3d-dump -a claude-code2Manually: put the files in place
~/.claude/skills/rev-u3d-dump/SKILL.mdCopy the whole skill folder; for one project use .claude/skills/rev-u3d-dump/
1Skills CLI (Vercel)
npx skills add P4nda0s/reverse-skills --skill rev-u3d-dump -a codex2Manually: put the files in place
.agents/skills/rev-u3d-dump/SKILL.mdFor all projects use ~/.agents/skills/
1Skills CLI (Vercel)
npx skills add P4nda0s/reverse-skills --skill rev-u3d-dump -a cursor2Manually: put the files in place
.cursor/skills/rev-u3d-dump/SKILL.mdCursor also reads .agents/skills/ and .claude/skills/
1GitHub CLI
gh skill install P4nda0s/reverse-skills rev-u3d-dump2Manually: put the files in place
.github/skills/rev-u3d-dump/SKILL.md1Skills CLI (Vercel)
npx skills add P4nda0s/reverse-skills --skill rev-u3d-dump -a gemini-cli2Platform CLI
gemini skills install https://github.com/P4nda0s/reverse-skills --path skills/rev-u3d-dumpManually: put the files in place
.devin/skills/rev-u3d-dump/SKILL.mdThe legacy .windsurf/skills/ path still works
Skills CLI (Vercel)
npx skills add P4nda0s/reverse-skills --skill rev-u3d-dump -a opencodeClaude.ai
Zip the folder and upload it in Settings → Capabilities → Skills
Step by step, with commands for each platform: How to install skills in Claude Code: five ways
Questions about rev-u3d-dump
How do I install rev-u3d-dump in Claude Code?
Run npx skills add P4nda0s/reverse-skills --skill rev-u3d-dump -a claude-code. The skill lands in ~/.claude/skills/rev-u3d-dump/SKILL.md.
What does rev-u3d-dump do?
It pulls method names, addresses and type info out of an IL2CPP binary and global-metadata.dat, then prepares files you can import into IDA or Ghidra.
Why doesn't the original Il2CppDumper work for Unity 6?
It only reads metadata up to v29. For v39 you need the v39 branch of the roytu/Il2CppDumper fork.
