vfsfitvnm / frida-il2cpp-bridge

A Frida module to dump, trace or hijack any Il2Cpp application at runtime, without needing the global-metadata.dat file.

Home Page:https://github.com/vfsfitvnm/frida-il2cpp-bridge/wiki

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Error : unable to find module 'libil2cpp.so'

XD-jeef opened this issue · comments

I tried and got this line:
my game Name Garina Free fire
Error : unable to find module 'libil2cpp.so'
Use memu player 8.1 emulator
In Windows

if you are using an emulator, you may need to use --realm=emulated frida flag

commented

I've been also facing the issue on emulator when using the realm flag, tried in Memu and LdPlayer

 frida -U -f com.some.game -l ./output/hook.js --realm=emulated

     ____
    / _  |   Frida 16.1.3 - A world-class dynamic instrumentation toolkit
   | (_| |
    > _  |   Commands:
   /_/ |_|       help      -> Displays the help system
   . . . .       object?   -> Display information about 'object'
   . . . .       exit/quit -> Exit
   . . . .
   . . . .   More info at https://frida.re/docs/home/
   . . . .
   . . . .   Connected to Android Emulator 5554 (id=emulator-5554)
**Failed to attach: the connection is closed**

Currently trying frida-gadget, on a real device it works, but in emulator it is freezing for some reason on init, some issues loading the injected library (sorry for offtop)

EDIT: after some digging in the logs of the emulator I get this and the similar with frida-gadget:
enter native_bridge3_loadLibraryExt /data/local/tmp/re.frida.server/frida-agent-arm.so, 1, 0x3
I mean after this gets stuck on this line

commented

I believe it has something to do with libc+houdini according to the tombstone logs

    #00 pc 00000cd9  [vdso:f7ea1000] (__kernel_vsyscall+9)
    #01 pc 00082e36  /system/lib/libc.so (offset 0x3f000) (__ppoll+38)
    #02 pc 0003ce1b  /system/lib/libc.so (offset 0x36000) (poll+75)
    #03 pc 000fcde2  /memfd:frida-agent-32.so (deleted) (offset 0xa25000)
    ```
    Edit:
    ahh 
    ```
    09-01 02:54:28.509  4975  4995 V libnb   : enter native_bridge3_loadLibraryExt /data/local/tmp/re.frida.server/frida-agent-arm.so, 1, 0x3
09-01 02:54:28.613  4975  4995 E ziparchive: Zip: lseek on fd -2 failed: Bad file descriptor

I assume a frida issue

Yep, it looks like it is. I've had success using frida on the official android emulator image (ref, ARM only), but I guess it won't work if your game can detect emulators and you are not prepared for that