{"event": "hook-installed", "needle": "createWupProtoInfo", "address": "0x71fd103f1c", "pid": 24428, "tid": 24450, "ts": 1787953111360, "seq": 1}
{"event": "hook-installed", "needle": "HuyaMd5C1", "pid": 24428, "tid": 24450, "ts": 1787953111362, "seq": 2}
{"event": "hook-installed", "needle": "HuyaMd58toString", "pid": 24428, "tid": 24450, "ts": 1787953111363, "seq": 3}
{"event": "module-found", "name": "libudbauthunify.so", "base": "0x71fce90000", "size": 4812800, "pid": 24428, "tid": 24450, "ts": 1787953111363, "seq": 4}
{"event": "hook-installed", "needle": "hyudb_otp_encrypt", "address": "0x71fd1bfa24", "pid": 24428, "tid": 24450, "ts": 1787953111391, "seq": 5}
{"event": "hook-installed", "needle": "BusinessCfg6getOtp", "address": "0x71fd0f916c", "pid": 24428, "tid": 24450, "ts": 1787953111410, "seq": 6}
{"event": "hook-installed", "needle": "setSafeDeviceId", "address": "0x71fd0fa2e0", "pid": 24428, "tid": 24450, "ts": 1787953111427, "seq": 7}
{"event": "hook-installed", "needle": "getHdid", "address": "0x71fd0fa484", "pid": 24428, "tid": 24450, "ts": 1787953111443, "seq": 8}
{"event": "hook-installed", "needle": "AESkeyMgr6getkey", "address": "0x71fd0f871c", "pid": 24428, "tid": 24450, "ts": 1787953111458, "seq": 9}
{"event": "hook-installed", "needle": "md5_char16", "address": "0x71fd1be71c", "pid": 24428, "tid": 24450, "ts": 1787953111472, "seq": 10}
{"event": "gethdid", "stage": "enter", "bt": "libudbauthunify.so!0x2749e8 (_Z19createWupDeviceInfoPN3wup10DeviceInfoE+0x348) <- libudbauthunify.so!0x3a7f34 (_ZN14WupDataPackageIN3wup13UserLogoffReqEE20createWupRequestDataERS1_RNSt6__ndk112basic_stringIcNS4_11char_traitsIcEENS4_9allocatorIcEEEEPKcSD_i+0x4c) <- libudbauthunify.so!0x3a755c (_ZN22HandlerRequestLoginOut9onHandlerEP10UdbMsgBase+0x248) <- libudbauthunify.so!0x24a5d8 (_ZN13UdbMsgHandler10handlerMsgEP10UdbMsgBase+0x3c) <- libudbauthunify.so!0x27b1e4 (_ZN16BusinessMsgChain5doMSGEP10UdbMsgBaseRPc+0xeb4) <- libudbauthunify.so!0x2453cc (_ZN7MsgLoop5doMSGEP10UdbMsgBaseRPc+0x18c)", "pid": 24428, "tid": 24582, "ts": 1787953128333, "seq": 11}
{"event": "gethdid", "stage": "leave", "slot1088": "37633533383765303533396330323363333163346666306538303765373235363131373338356565", "size": 40, "pid": 24428, "tid": 24582, "ts": 1787953128333, "seq": 12}
{"event": "appsign", "stage": "enter", "proto": "0x720dea9938", "g3": "\b500", "g2": "\u000e13.4.2", "g1": "<err:access violation accessing 0x3>", "joined": "\b500_\u000e13.4.2_<err:access violation accessing 0x3>", "bt": "", "pid": 24428, "tid": 24582, "ts": 1787953128334, "seq": 13}
{"event": "huya-md5", "stage": "ctor", "in": null, "bt": "", "pid": 24428, "tid": 24582, "ts": 1787953128334, "seq": 14}
{"event": "huya-md5", "stage": "tostr", "out": null, "pid": 24428, "tid": 24582, "ts": 1787953128334, "seq": 15}
{"event": "gethdid", "stage": "enter", "bt": "libudbauthunify.so!0x2749e8 (_Z19createWupDeviceInfoPN3wup10DeviceInfoE+0x348) <- libudbauthunify.so!0x336314 (_ZN14WupDataPackageIN3wup24AppLgnCredentialLoginReqEE20createWupRequestDataERS1_RNSt6__ndk112basic_stringIcNS4_11char_traitsIcEENS4_9allocatorIcEEEEPKcSD_i+0x4c) <- libudbauthunify.so!0x3341d8 (_ZN28HandlerRequestAnonyLoginCred9onHandlerEP10UdbMsgBase+0x558) <- libudbauthunify.so!0x24a5d8 (_ZN13UdbMsgHandler10handlerMsgEP10UdbMsgBase+0x3c) <- libudbauthunify.so!0x27bae4 (_ZN16BusinessMsgChain5doMSGEP10UdbMsgBaseRPc+0x17b4) <- libudbauthunify.so!0x2453cc (_ZN7MsgLoop5doMSGEP10UdbMsgBaseRPc+0x18c)", "pid": 24428, "tid": 24582, "ts": 1787953128363, "seq": 16}
{"event": "gethdid", "stage": "leave", "slot1088": "37633533383765303533396330323363333163346666306538303765373235363131373338356565", "size": 40, "pid": 24428, "tid": 24582, "ts": 1787953128363, "seq": 17}
{"event": "appsign", "stage": "enter", "proto": "0x720dea9818", "g3": "\b500", "g2": "\u000e13.4.2", "g1": "<err:access violation accessing 0x3>", "joined": "\b500_\u000e13.4.2_<err:access violation accessing 0x3>", "bt": "", "pid": 24428, "tid": 24582, "ts": 1787953128363, "seq": 18}
{"event": "huya-md5", "stage": "ctor", "in": null, "bt": "", "pid": 24428, "tid": 24582, "ts": 1787953128363, "seq": 19}
{"event": "huya-md5", "stage": "tostr", "out": null, "pid": 24428, "tid": 24582, "ts": 1787953128363, "seq": 20}
{"event": "gethdid", "stage": "enter", "bt": "libudbauthunify.so!0x3d60a8 (_ZN16BusinessLogBuild14buildLogHeaderER11BusinessLogi+0xec) <- libudbauthunify.so!0x3a7be0 (_ZN23HandlerResponseLoginOut9onHandlerEP10UdbMsgBase+0xc8) <- libudbauthunify.so!0x24a5d8 (_ZN13UdbMsgHandler10handlerMsgEP10UdbMsgBase+0x3c) <- libudbauthunify.so!0x27b244 (_ZN16BusinessMsgChain5doMSGEP10UdbMsgBaseRPc+0xf14) <- libudbauthunify.so!0x2453cc (_ZN7MsgLoop5doMSGEP10UdbMsgBaseRPc+0x18c) <- libudbauthunify.so!0x245b40 (_ZN7MsgLoop14processWorkingEv+0xec)", "pid": 24428, "tid": 24582, "ts": 1787953128461, "seq": 21}
{"event": "gethdid", "stage": "leave", "slot1088": "37633533383765303533396330323363333163346666306538303765373235363131373338356565", "size": 40, "pid": 24428, "tid": 24582, "ts": 1787953128461, "seq": 22}
{"event": "crypto-getotp", "stage": "enter", "bt": "libudbauthunify.so!0x275980 (_Z19copyWupLoginToBeansRN3wup12AppLoginDataER17BusBeansLoginData+0xac) <- libudbauthunify.so!0x334aa8 (_ZN29HandlerResponseAnonyLoginCred9onHandlerEP10UdbMsgBase+0x22c) <- libudbauthunify.so!0x24a5d8 (_ZN13UdbMsgHandler10handlerMsgEP10UdbMsgBase+0x3c) <- libudbauthunify.so!0x27bb44 (_ZN16BusinessMsgChain5doMSGEP10UdbMsgBaseRPc+0x1814) <- libudbauthunify.so!0x2453cc (_ZN7MsgLoop5doMSGEP10UdbMsgBaseRPc+0x18c) <- libudbauthunify.so!0x245b40 (_ZN7MsgLoop14processWorkingEv+0xec)", "uidLo": 2570448208, "uidHi": 3019898993, "pid": 24428, "tid": 24582, "ts": 1787953128488, "seq": 23}
{"event": "crypto-otp", "stage": "enter", "bt": "libudbauthunify.so!0x269328 (_ZN11BusinessCfg6getOtpERN3wup12AppLoginDataE+0x1bc) <- libudbauthunify.so!0x275980 (_Z19copyWupLoginToBeansRN3wup12AppLoginDataER17BusBeansLoginData+0xac) <- libudbauthunify.so!0x275980 (_Z19copyWupLoginToBeansRN3wup12AppLoginDataER17BusBeansLoginData+0xac)", "xxteaKeyStr": null, "xxteaKeyHex": "", "xxteaKeySize": 0, "arg1": 2, "arg2_cnt": 2, "arg3": "", "arg4": "3836356134393234613430383937616331666366653662346332636262306533", "arg5": "0a8066875728ac56814c316e2a466511c502bd76cf1ded554657b74729876cb9f7081cf1331add5a9f7ac54784e4d137cd79ba04e01ef74a2dc163726c3a7ced7c91bb4eb384075bc94ce2fdfde3276a64c300bfbd5d82b97f905d74c6c83a95bc42964d17f6bd1ac592c37301a49ba25748", "arg5Size": 114, "arg6": 4, "arg7_nonce": "1a04a4faa240000", "stMs": "1787953130020", "nc": 0, "pid": 24428, "tid": 24582, "ts": 1787953128495, "seq": 24}
{"event": "huya-md5", "stage": "tostr", "out": "<err:can't decode byte 0xc0 in posi>", "pid": 24428, "tid": 24582, "ts": 1787953128495, "seq": 25}
{"event": "crypto-aeskey", "stage": "enter", "a": 1, "b": 2, "pid": 24428, "tid": 24582, "ts": 1787953128496, "seq": 26}
{"event": "crypto-aeskey", "stage": "leave", "key": "MKDKeridjing7avnsasdSDHI", "pid": 24428, "tid": 24582, "ts": 1787953128496, "seq": 27}
{"event": "crypto-md5", "stage": "enter", "inStr": "865a4924a40897ac1fcfe6b4c2cbb0e3MKDKeridjing7avnsasdSDHI", "pid": 24428, "tid": 24582, "ts": 1787953128496, "seq": 28}
{"event": "crypto-md5", "stage": "leave", "keyHex": "", "pid": 24428, "tid": 24582, "ts": 1787953128496, "seq": 29}
{"event": "crypto-otp", "stage": "leave", "bt": "libudbauthunify.so!0x269328 (_ZN11BusinessCfg6getOtpERN3wup12AppLoginDataE+0x1bc) <- libudbauthunify.so!0x275980 (_Z19copyWupLoginToBeansRN3wup12AppLoginDataER17BusBeansLoginData+0xac) <- libudbauthunify.so!0x275980 (_Z19copyWupLoginToBeansRN3wup12AppLoginDataER17BusBeansLoginData+0xac)", "outStr": null, "outHex": "04027c8fe60a97a9c80fef4ae365ab8d404850a03b3877c0e5458cbcb2b2f8a97d07cb2cd37264f6fd9dcc92ac53966f8e565bf5895d65cc67c641a346df23df3e2e0af22f9ff84947b20e887687d9d38ef107fac73da5c45dc943a645989bc0ffa37464444fd7e07a228d30cad91d19d58957a52d6417372e1670ec9527e8df77dec01050c60bf18dde25e524bf854d65da", "outSize": 146, "pid": 24428, "tid": 24582, "ts": 1787953128503, "seq": 30}
{"event": "gethdid", "stage": "enter", "bt": "libudbauthunify.so!0x2749e8 (_Z19createWupDeviceInfoPN3wup10DeviceInfoE+0x348) <- libudbauthunify.so!0x38dafc (_ZN14WupDataPackageIN3wup13AppCommonDataEE20createWupRequestDataERS1_RNSt6__ndk112basic_stringIcNS4_11char_traitsIcEENS4_9allocatorIcEEEEPKcSD_i+0x4c) <- libudbauthunify.so!0x3e3af8 (_ZN18UdbUserFilterUtils15getAppComomDataENSt6__ndk112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEERN3wup12AppLoginDataE+0xd0) <- libudbauthunify.so!0x275994 (_Z19copyWupLoginToBeansRN3wup12AppLoginDataER17BusBeansLoginData+0xc0) <- libudbauthunify.so!0x334aa8 (_ZN29HandlerResponseAnonyLoginCred9onHandlerEP10UdbMsgBase+0x22c) <- libudbauthunify.so!0x24a5d8 (_ZN13UdbMsgHandler10handlerMsgEP10UdbMsgBase+0x3c)", "pid": 24428, "tid": 24582, "ts": 1787953128524, "seq": 31}
{"event": "gethdid", "stage": "leave", "slot1088": "37633533383765303533396330323363333163346666306538303765373235363131373338356565", "size": 40, "pid": 24428, "tid": 24582, "ts": 1787953128524, "seq": 32}
{"event": "appsign", "stage": "enter", "proto": "0x720dea93f0", "g3": "\b500", "g2": "\u000e13.4.2", "g1": "<err:access violation accessing 0x3>", "joined": "\b500_\u000e13.4.2_<err:access violation accessing 0x3>", "bt": "", "pid": 24428, "tid": 24582, "ts": 1787953128524, "seq": 33}
{"event": "huya-md5", "stage": "ctor", "in": null, "bt": "", "pid": 24428, "tid": 24582, "ts": 1787953128524, "seq": 34}
{"event": "huya-md5", "stage": "tostr", "out": null, "pid": 24428, "tid": 24582, "ts": 1787953128524, "seq": 35}
{"event": "gethdid", "stage": "enter", "bt": "libudbauthunify.so!0x3d60a8 (_ZN16BusinessLogBuild14buildLogHeaderER11BusinessLogi+0xec) <- libudbauthunify.so!0x334be4 (_ZN29HandlerResponseAnonyLoginCred9onHandlerEP10UdbMsgBase+0x368) <- libudbauthunify.so!0x24a5d8 (_ZN13UdbMsgHandler10handlerMsgEP10UdbMsgBase+0x3c) <- libudbauthunify.so!0x27bb44 (_ZN16BusinessMsgChain5doMSGEP10UdbMsgBaseRPc+0x1814) <- libudbauthunify.so!0x2453cc (_ZN7MsgLoop5doMSGEP10UdbMsgBaseRPc+0x18c) <- libudbauthunify.so!0x245b40 (_ZN7MsgLoop14processWorkingEv+0xec)", "pid": 24428, "tid": 24582, "ts": 1787953128562, "seq": 36}
{"event": "gethdid", "stage": "leave", "slot1088": "37633533383765303533396330323363333163346666306538303765373235363131373338356565", "size": 40, "pid": 24428, "tid": 24582, "ts": 1787953128562, "seq": 37}
{"event": "gethdid", "stage": "enter", "bt": "libudbauthunify.so!0x2749e8 (_Z19createWupDeviceInfoPN3wup10DeviceInfoE+0x348) <- libudbauthunify.so!0x3a9b04 (_ZN14WupDataPackageIN3wup22AppLgnPasswordLoginReqEE20createWupRequestDataERS1_RNSt6__ndk112basic_stringIcNS4_11char_traitsIcEENS4_9allocatorIcEEEEPKcSD_i+0x4c) <- libudbauthunify.so!0x3a8b04 (_ZN27HandlerRequestLoginPassport9onHandlerEP10UdbMsgBase+0x4e0) <- libudbauthunify.so!0x24a5d8 (_ZN13UdbMsgHandler10handlerMsgEP10UdbMsgBase+0x3c) <- libudbauthunify.so!0x27b664 (_ZN16BusinessMsgChain5doMSGEP10UdbMsgBaseRPc+0x1334) <- libudbauthunify.so!0x2453cc (_ZN7MsgLoop5doMSGEP10UdbMsgBaseRPc+0x18c)", "pid": 24428, "tid": 24582, "ts": 1787953155033, "seq": 38}
{"event": "gethdid", "stage": "leave", "slot1088": "37633533383765303533396330323363333163346666306538303765373235363131373338356565", "size": 40, "pid": 24428, "tid": 24582, "ts": 1787953155033, "seq": 39}
{"event": "appsign", "stage": "enter", "proto": "0x720dea98b8", "g3": "\b500", "g2": "\u000e13.4.2", "g1": "<err:access violation accessing 0x3>", "joined": "\b500_\u000e13.4.2_<err:access violation accessing 0x3>", "bt": "", "pid": 24428, "tid": 24582, "ts": 1787953155034, "seq": 40}
{"event": "huya-md5", "stage": "ctor", "in": null, "bt": "", "pid": 24428, "tid": 24582, "ts": 1787953155034, "seq": 41}
{"event": "huya-md5", "stage": "tostr", "out": null, "pid": 24428, "tid": 24582, "ts": 1787953155034, "seq": 42}
{"event": "crypto-getotp", "stage": "enter", "bt": "libudbauthunify.so!0x275980 (_Z19copyWupLoginToBeansRN3wup12AppLoginDataER17BusBeansLoginData+0xac) <- libudbauthunify.so!0x3a9464 (_ZN28HandlerResponseLoginPassport9onHandlerEP10UdbMsgBase+0x274) <- libudbauthunify.so!0x24a5d8 (_ZN13UdbMsgHandler10handlerMsgEP10UdbMsgBase+0x3c) <- libudbauthunify.so!0x27b6c4 (_ZN16BusinessMsgChain5doMSGEP10UdbMsgBaseRPc+0x1394) <- libudbauthunify.so!0x2453cc (_ZN7MsgLoop5doMSGEP10UdbMsgBaseRPc+0x18c) <- libudbauthunify.so!0x245b40 (_ZN7MsgLoop14processWorkingEv+0xec)", "uidLo": 2570749264, "uidHi": 3019898993, "pid": 24428, "tid": 24582, "ts": 1787953155225, "seq": 43}
{"event": "crypto-otp", "stage": "enter", "bt": "libudbauthunify.so!0x269328 (_ZN11BusinessCfg6getOtpERN3wup12AppLoginDataE+0x1bc) <- libudbauthunify.so!0x275980 (_Z19copyWupLoginToBeansRN3wup12AppLoginDataER17BusBeansLoginData+0xac) <- libudbauthunify.so!0x275980 (_Z19copyWupLoginToBeansRN3wup12AppLoginDataER17BusBeansLoginData+0xac)", "xxteaKeyStr": null, "xxteaKeyHex": "", "xxteaKeySize": 0, "arg1": 2, "arg2_cnt": 3, "arg3": "", "arg4": "3836356134393234613430383937616331666366653662346332636262306533", "arg5": "0a808cc19be90021734459ce575524b7c4190b85bd57b396a921b4be0f701848cbb34aeb65009f5eac2ca9e0dd922e5197f3e7c6492663984e8616d3e5f8964e6710ecb03603d3567518b80bd74776439d749c02407193390c35e7e02c6e6bdc8add6fb39036954eb5cd420f8cb23e1e48cc", "arg5Size": 114, "arg6": 4, "arg7_nonce": "1a04a500ec40000", "stMs": "1787953155780", "nc": 0, "pid": 24428, "tid": 24582, "ts": 1787953155231, "seq": 44}
{"event": "huya-md5", "stage": "tostr", "out": "<err:can't decode byte 0xc0 in posi>", "pid": 24428, "tid": 24582, "ts": 1787953155231, "seq": 45}
{"event": "crypto-aeskey", "stage": "enter", "a": 1, "b": 3, "pid": 24428, "tid": 24582, "ts": 1787953155231, "seq": 46}
{"event": "crypto-aeskey", "stage": "leave", "key": "nskdI7MDGKSDJsnadjdoonvs", "pid": 24428, "tid": 24582, "ts": 1787953155231, "seq": 47}
{"event": "crypto-md5", "stage": "enter", "inStr": "865a4924a40897ac1fcfe6b4c2cbb0e3nskdI7MDGKSDJsnadjdoonvs", "pid": 24428, "tid": 24582, "ts": 1787953155231, "seq": 48}
{"event": "crypto-md5", "stage": "leave", "keyHex": "", "pid": 24428, "tid": 24582, "ts": 1787953155231, "seq": 49}
{"event": "crypto-otp", "stage": "leave", "bt": "libudbauthunify.so!0x269328 (_ZN11BusinessCfg6getOtpERN3wup12AppLoginDataE+0x1bc) <- libudbauthunify.so!0x275980 (_Z19copyWupLoginToBeansRN3wup12AppLoginDataER17BusBeansLoginData+0xac) <- libudbauthunify.so!0x275980 (_Z19copyWupLoginToBeansRN3wup12AppLoginDataER17BusBeansLoginData+0xac)", "outStr": null, "outHex": "0403bc9f0a0563ca62ffbe2a1731207f1761bc3cd47cd82a849bbe21ea3ddd0f47ddd84b33cbf7e38ed36db4d8842992975be2392eb2a27d1d6a85b7b396bffaf2ed2f20b88ef4c38dddf3c8854961e8de7754b255ac2e6358f8afc5e26f09a66b97ac33d7616d4561252d0a995e44894256f010327785a561ef4af9e71f0542f2652aa323d92e2252511096c48a39788520", "outSize": 146, "pid": 24428, "tid": 24582, "ts": 1787953155239, "seq": 50}
{"event": "gethdid", "stage": "enter", "bt": "libudbauthunify.so!0x2749e8 (_Z19createWupDeviceInfoPN3wup10DeviceInfoE+0x348) <- libudbauthunify.so!0x38dafc (_ZN14WupDataPackageIN3wup13AppCommonDataEE20createWupRequestDataERS1_RNSt6__ndk112basic_stringIcNS4_11char_traitsIcEENS4_9allocatorIcEEEEPKcSD_i+0x4c) <- libudbauthunify.so!0x3e3af8 (_ZN18UdbUserFilterUtils15getAppComomDataENSt6__ndk112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEERN3wup12AppLoginDataE+0xd0) <- libudbauthunify.so!0x275994 (_Z19copyWupLoginToBeansRN3wup12AppLoginDataER17BusBeansLoginData+0xc0) <- libudbauthunify.so!0x3a9464 (_ZN28HandlerResponseLoginPassport9onHandlerEP10UdbMsgBase+0x274) <- libudbauthunify.so!0x24a5d8 (_ZN13UdbMsgHandler10handlerMsgEP10UdbMsgBase+0x3c)", "pid": 24428, "tid": 24582, "ts": 1787953155256, "seq": 51}
{"event": "gethdid", "stage": "leave", "slot1088": "37633533383765303533396330323363333163346666306538303765373235363131373338356565", "size": 40, "pid": 24428, "tid": 24582, "ts": 1787953155256, "seq": 52}
{"event": "appsign", "stage": "enter", "proto": "0x720dea9170", "g3": "\b500", "g2": "\u000e13.4.2", "g1": "<err:access violation accessing 0x3>", "joined": "\b500_\u000e13.4.2_<err:access violation accessing 0x3>", "bt": "", "pid": 24428, "tid": 24582, "ts": 1787953155256, "seq": 53}
{"event": "huya-md5", "stage": "ctor", "in": null, "bt": "", "pid": 24428, "tid": 24582, "ts": 1787953155256, "seq": 54}
{"event": "huya-md5", "stage": "tostr", "out": null, "pid": 24428, "tid": 24582, "ts": 1787953155256, "seq": 55}
{"event": "huya-md5", "stage": "tostr", "out": "<err:can't decode byte 0x00 in posi>", "pid": 24428, "tid": 24582, "ts": 1787953155257, "seq": 56}
{"event": "gethdid", "stage": "enter", "bt": "libudbauthunify.so!0x3d60a8 (_ZN16BusinessLogBuild14buildLogHeaderER11BusinessLogi+0xec) <- libudbauthunify.so!0x3a965c (_ZN28HandlerResponseLoginPassport9onHandlerEP10UdbMsgBase+0x46c) <- libudbauthunify.so!0x24a5d8 (_ZN13UdbMsgHandler10handlerMsgEP10UdbMsgBase+0x3c) <- libudbauthunify.so!0x27b6c4 (_ZN16BusinessMsgChain5doMSGEP10UdbMsgBaseRPc+0x1394) <- libudbauthunify.so!0x2453cc (_ZN7MsgLoop5doMSGEP10UdbMsgBaseRPc+0x18c) <- libudbauthunify.so!0x245b40 (_ZN7MsgLoop14processWorkingEv+0xec)", "pid": 24428, "tid": 24582, "ts": 1787953155289, "seq": 57}
{"event": "gethdid", "stage": "leave", "slot1088": "37633533383765303533396330323363333163346666306538303765373235363131373338356565", "size": 40, "pid": 24428, "tid": 24582, "ts": 1787953155289, "seq": 58}