the built in internet browser in nox.

Did you try opening the normal browser and see if you see anything.

That is encrypted.

This game?
https://zenhax.com/viewtopic.php?t=13086
https://store.steampowered.com/app/1140 ... Universal/

set ARCHIVE_PASSWORD string "dhfuhsudfh98vhdsovnfdhiouer8u8hgjbkjciudsuifsjdiosajfn"

I use the module in magisk for frida.

If you don't see hook called then the game never called the function after you tried to hook it.
This is the latest version of the game I found.

Make a new topic for your game and show where you are stuck.
https://www.tap.io/app/195056?region=us

quickbms script to decompress files. Needs to add support for extracting sub archives (align data to 0x800 after last file and start over again) Run this first for now. getdstring DIV 4 goto 0 for findloc OFFSET string DIV print "%OFFSET%" getdstring TMP 0x20 findloc SIZE string DIV goto S...

You can dump any file with the code.
You can hook the function and just play the game and it will dump the files as they load.
or manually supply the file list and tell the game to decrypt them by calling its function.

I reuploaded that apk for you to use for the example.
https://www100.zippyshare.com/v/XBTE3aAV/file.html

The address should never change.
Your creating a normal string instead of a Unicode string.
The address for the function can be seen in gidra when you click the start of the function.

The hook is hitting the string create as you showed in your example.
So use that function.
You should be able to paste in the hook function then call create string and it should automatically print it for you.

you should see it in the return part of it. I am guessing your device has low ram so its not keeping anything in memory after its read. so print the memory in this section. onLeave: function (retval) { console.log(retval); var keyDump2 = Memory.readByteArray(retval, 0x300); console.log(hexdump(keyDu...

You need to let it finish analyzing the program it takes several hours to do.
Yo need to wait till it says idle on the bottom then run he scripts.
It will run a 2nd time with the scripts.
Then you can start looking at code.
it has to say idle on the bottom between each step.

You can run the 32 bit frida server. the offset is most likely wrong from the way it was dumped would be my guess as to why your not hitting the function. or its not calling that function at all you can try a different function to hook. you can also try dumping with https://github.com/lasting-yang/f...