frida-il2cpp icon indicating copy to clipboard operation
frida-il2cpp copied to clipboard

Not really an issue but!

Open Syrou opened this issue 5 years ago • 2 comments

Cool to see someone else who works in the il2cpp field for frida! Been working with a total port of the c library to typescript, your solution is very clean and straight forward, so well done on that!

A question! There is a specific thing I've noticed, that you might have experienced, on android, for example in Mario Kart. If you place a hook with Interceptor.attach on any libil2cpp.so export, you end up with a thread deadlock after a few seconds(20 seconds) when you are into the main menu. I'm not sure if you've encountered this, but if possible would you be up to check if you experience the same thing?

Syrou avatar Nov 09 '20 19:11 Syrou

I did not have this issue myself, is it not possible that they are checking for hooks and crashing the app on purpose? Have you tested this with other il2cpp games?

AeonLucid avatar Nov 11 '20 00:11 AeonLucid

Hey thanks for the response! Yeah so that was my initial hunch as well, but the crash seems to be originating inside il2cpp itself, and when it tries to initiate a class, rather than a protection layer. The hooks also work 100% after the "boot up phase" which makes the suspicion that there is a protection around, less likely. I know Unity is super anal about that everything must be run on the UnityMain for most render operations (even threads that join into them), and that is currently where my research has taken me. Would love to see if someone else arrives at the same conclusion though. I did try with other games, even games that have active protection, those I've gotten around, or did not have this problem. The most simliar case would be Gods of Boom. I'm totally lost on this one though, to date the most weird things I've seen.

Syrou avatar Nov 11 '20 15:11 Syrou