Referenced from goodix-fp-dump#20. These are the two scripts behind that write-up — cross-validated byte-for-byte against jenujari's independent implementation, so either should work as a reference.
Runs the actual white-box wrap routine from the Windows host driver (gfusb.dll) directly, via Unicorn (x86-64 emulation) — rather than reimplementing the algorithm by hand. This sidesteps any risk of subtly mistranscribing the KDF/AES-GCM construction from disassembly: it's the real vendor code executing, just outside a Windows process.
- Loads
gfusb.dll's PE sections into emulated memory at their real addresses (no relocations needed, mapped at the preferred image base) - Hooks only the four CRT allocator functions (
malloc/calloc/free/memset) with a trivial bump allocator — everything else (the KDF, AES-256-GCM, HMAC) runs as unmodified or
