My game is a Unity game compiled with static libraries, that is, there is no separate UnityFramework dynamic library. How can I dump

[etund]

frida -U -f com.cute.cat.house -l ./hook.js --auto-reload
____
/ _ | Frida 16.6.1 - A world-class dynamic instrumentation toolkit
| (| |
> _ | Commands:
// |_| help -> Displays the help system
. . . . object? -> Display information about 'object'
. . . . exit/quit -> Exit
. . . .
. . . . More info at https://frida.re/docs/home/
. . . .
. . . . Connected to iPhone (id=00008020-001D084C0AFA002E)
Spawned com.cute.cat.house. Resuming main thread!
[iPhone::com.cute.cat.house ]-> il2cpp: 10 seconds have passed and UnityFramework,GameAssembly.dylib has not been loaded yet, is the app running?

[vfsfitvnm]

This is the related logic:

frida-il2cpp-bridge/lib/module.ts

Line 83 in 5548257

(Process.platform == "darwin" ? Process.findModuleByAddress(DebugSymbol.fromName("il2cpp_init").address) : undefined)

On ios, frida-il2cpp-bridge also looks for il2cpp_init globally in case Unity library is statically linked. Perhaps this isn't the case? Are you able to find the il2cpp exports?

[etund]

This is the related logic:

frida-il2cpp-bridge/lib/module.ts

Line 83 in 5548257

(Process.platform == "darwin" ? Process.findModuleByAddress(DebugSymbol.fromName("il2cpp_init").address) : undefined)
On ios, frida-il2cpp-bridge also looks for il2cpp_init globally in case Unity library is statically linked. Perhaps this isn't the case? Are you able to find the il2cpp exports?

You are right, he hides the symbol, and the export table does not have this symbol, but I can find this method, so how should I deal with it next to il2cpp dump

[vfsfitvnm]

I believe this comment helps you:

frida-il2cpp-bridge/lib/exports.ts

Lines 2 to 28 in 5548257

	/**
	* The **core** object where all the necessary IL2CPP native functions are
	* held. \
	* `frida-il2cpp-bridge` is built around this object by providing an
	* easy-to-use abstraction layer: the user isn't expected to use it directly,
	* but it can in case of advanced use cases.
	*
	* The exports depends on the Unity version, hence some of them may be
	* unavailable; moreover, they are searched by **name** (e.g.
	* `il2cpp_class_from_name`) hence they might get stripped, hidden or
	* renamed by a nasty obfuscator.
	*
	* However, it is possible to override or set the handle of any of the
	* exports using {@link Il2Cpp.$config.exports}:
	* ```ts
	* Il2Cpp.$config.exports = {
	* il2cpp_image_get_class: () => Il2Cpp.module.base.add(0x1204c),
	* il2cpp_class_get_parent: () => {
	* return Memory.scanSync(Il2Cpp.module.base, Il2Cpp.module.size, "2f 10 ee 10 34 a8")[0].address;
	* },
	* };
	*
	* Il2Cpp.perform(() => {
	* // ...
	* });
	* ```
	*/