How to redirect where an app read/save its file?

[C33SAR]

I have an application running on an Android 12 emulator that saves its settings to /data/data and its downloaded files to /storage/emulated/0/Android/data/.

By "downloaded files", I am referring to the files necessary for its operation, which are downloaded after the first execution.

I am attempting to configure it to save and load these files from a folder that the emulator shares with Windows, generally referred to as "shared folder".

The total size of these files is approximately 6GB, and my goal is to avoid duplicating these files for each emulator, enabling them all to read from the same folder.

The application does not provide an option to move this data to the SD card, I have checked this by looking at settings > app > storage.

I tried hooking the app using Frida:

frida -U -p <system_server_pid> -l tracker.js

var functionsToHook = ['open', 'fopen', 'stat'];

function applyHooks(session) {
  functionsToHook.forEach(function(func) {
      Interceptor.attach(Module.findExportByName(null, func), {
          onEnter: function(args) {
              try {
                var path = Memory.readCString(ptr(args[0]));
                if (path.includes('/storage/emulated/0/Android/data/')) {
                    console.log('\n\n', func, path);
                    console.log(Thread.backtrace(this.context, Backtracer.ACCURATE).map(DebugSymbol.fromAddress).join('\n'));
                }
              } 
              catch (e) {
                    console.log(e);
              }
          }
      });
  });
}

; however, it seems the app has some form of anti-hook or anti-debug, as it crashes when it reach the login page.
It crashes even with an empty js script.

Until the point of the crash, i could see that console.log is printing the mentioned folder and
the app is reading it using "stat" and a custom library:

stat /storage/emulated/0/Android/data/...
0x7baaa055725d libabc.so!0x5125d

I attempted using the same script to hook the system_server process,
but as the app is using a custom lib to read the folder the hook on the server is not capturing it.

Is it possible to achieve this desired behavior by hooking into any other process or specific function?

My intention is to redirect the app to search for its file into the shared folder.