feat(huya): OTP击穿 - arg语义(arg1=2) + 输出结构(0x03+可变+固定32hex尾8b38f1) - 32hex形态实锤

2026-08-29 00:11:52 +08:00
parent ebdbd05217
commit 92eb39cd9d
2 changed files with 21 additions and 1 deletions
@@ -145,7 +145,7 @@ public class AesProbe {
        // 尝试 4 位置: arg0=in, arg1=?, arg2=?, arg3=key, arg4=?, arg5=?, arg6=h, arg7=m, arg8=out
        try {
            Number r = module.callFunction(emulator, 0x32fa24L,
-                UnidbgPointer.nativeValue(pa), 1L, 2L,
+                UnidbgPointer.nativeValue(pa), 2L, 0L,
                UnidbgPointer.nativeValue(pb), UnidbgPointer.nativeValue(pc), UnidbgPointer.nativeValue(pd),
                3L, 4L, UnidbgPointer.nativeValue(pout));
            String out = readStdString(pout);