chore: 备份 TNG 注册/captcha 逆向与 MariBank SG bypass 进展

TngRootBypassHook 增强 captcha 诊断、TigerTally/JNIC 分层与 HWUI 策略；新增逆向脚本、Frida 工具与 UI dump；同步 MariBank SG hook 与 tng_exit_guard 更新。

reverse/scripts/find_user_register_i18n.py

@@ -0,0 +1,24 @@
+# -*- coding: utf-8 -*-
+import re
+import zipfile
+from pathlib import Path
+
+APK = Path(__file__).resolve().parent.parent / "apks" / "maribank_sg_base.apk"
+with zipfile.ZipFile(str(APK)) as zf:
+    for name in sorted(zf.namelist()):
+        low = name.lower()
+        if not name.endswith(".json"):
+            continue
+        if "user" not in low and "auth" not in low and "register" not in low and "ekyc" not in low:
+            continue
+        data = zf.read(name).decode("utf-8", errors="replace")
+        hits = []
+        for m in re.finditer(r'"[^"]+"\s*:\s*"[^"]{8,200}"', data):
+            s = m.group()
+            sl = s.lower()
+            if any(k in sl for k in ("unavailable", "register", "dfp", "phone", "otp", "system is")):
+                hits.append(s[:220])
+        if hits:
+            print("\n===", name, "===")
+            for h in hits[:40]:
+                print(h)