マジカミ DX http://games.dmm.com/detail/magicami/ https://asset.magicami.jp/v1/list/14/0 Save This download as magicami.bundle along with the python script into the same directory then it will download all the files. Game uses unity. Added bundle magicami.zip The link to the assets isn't working. if yo...

omiusoktto wrote: ↑

Wed Mar 31, 2021 1:26 am

Hi i tried the method with nutaku's project qt but i couldn't find any csv, maybe it's tunneled, but i don't know how to find the address using process hacker :/

Just use chrome and right click choose inspect and go to network tab.
then reload the page.

what is the game?

ReVolt wrote: ↑

Mon Mar 08, 2021 10:18 pm

chrrox wrote: ↑

Sun Mar 07, 2021 11:32 pm

the built in internet browser in nox.

there's nothing

Then he proxy is not setup correctly.

the built in internet browser in nox.

Did you try opening the normal browser and see if you see anything.

That is encrypted.

This game?
https://zenhax.com/viewtopic.php?t=13086
https://store.steampowered.com/app/1140 ... Universal/

set ARCHIVE_PASSWORD string "dhfuhsudfh98vhdsovnfdhiouer8u8hgjbkjciudsuifsjdiosajfn"

I use the module in magisk for frida.

If you don't see hook called then the game never called the function after you tried to hook it.
This is the latest version of the game I found.

Make a new topic for your game and show where you are stuck.
https://www.tap.io/app/195056?region=us

quickbms script to decompress files. Needs to add support for extracting sub archives (align data to 0x800 after last file and start over again) Run this first for now. getdstring DIV 4 goto 0 for findloc OFFSET string DIV print "%OFFSET%" getdstring TMP 0x20 findloc SIZE string DIV goto SIZE math S...

You can dump any file with the code.
You can hook the function and just play the game and it will dump the files as they load.
or manually supply the file list and tell the game to decrypt them by calling its function.

I reuploaded that apk for you to use for the example.
https://www100.zippyshare.com/v/XBTE3aAV/file.html

The address should never change.
Your creating a normal string instead of a Unicode string.
The address for the function can be seen in gidra when you click the start of the function.