feat(huya): jadx映射HDID32 Java链(NativeEntry.getHDID@0x20f0c8) + b()全语义表 + 签名锚定实验(仅HDID32锚,DEVID40自由)

- b(1)=5008/b(2)=ver/b(3)=1.14.68/b(107/108)=qimei → unidbg 桩补全 - 实验: 金样本hdid+随机DEVID40=1571B cred / 换hdid恒APP_SIGN - docs §11.12
2026-08-28 23:27:36 +08:00
parent eccc00e090
commit e5aee00a9c
3 changed files with 32 additions and 0 deletions
@@ -140,11 +140,17 @@ public class HyDeviceId extends AbstractJni {
            System.out.println("[JNI] NativeBridge.b FALLBACK-STUB (native not registered?)");
            int i = vaList.getIntArg(0);
            // 真机实测值 (2026-08-28): 100=GUID 101= MID 102= MID 106=64hex, 99/103=null, 104/105=""
+            // b()-语义来自 jadx (NativeBridge.b -> fj3.c): 1=APPID(5008) 2=versionName 3=SDK版本(1.14.68)
+            // 102=l5h.a=ANDROID_ID 104=l5h.f 105=pnc.f 106=l5h.i 107=qimei16 108=qimei36
            String v = null;
            if (i == 100) v = "0a7dfaa882938a6ab502511452142c57";
            else if (i == 101 || i == 102) v = "1e8bdf7d4f7a01d3";
            else if (i == 106) v = "a71a0917ab6d0d6a61947a007591cfb97290f88972b047252c0ec7baddcd57df";
            else if (i == 104 || i == 105) v = "";
+            else if (i == 1) v = "5008";
+            else if (i == 2) v = "13.4.22";
+            else if (i == 3) v = "1.14.68";
+            else if (i == 107 || i == 108) v = "67453f5aef55f776967c748a10001c318101";
            System.out.println("[JNI] NativeBridge.b(" + i + ") -> " + v);
            return v == null ? null : new StringObject(vm, v);
        }