ImGui RevDex Android 16 No Touch Problem

I will try to fix the touch issue.
I have successfully fixed it.

If you want better performance and compatibility, use a combo of EGL + Vulkan.

You will need to add Vulkan engine support yourself, okay

#nojava
#fullcppgui

Today, I spent a significant amount of time experimenting with and debugging the Android SDK, and during this process, I discovered a powerful exploit. This exploit makes it possible to bypass SSL pinning in any Android application, whether it is built with Flutter, React Native, or native Java.
The exploit operates at the Android SDK level, which means it is not limited to a specific framework or implementation. The next step is to transform this discovery into a practical and reliable hook.
I strongly believe that this work will be highly beneficial for the next generation of modders and security researchers, opening new possibilities for analysis, testing, and reverse engineering.

Exploit - Android SDK

Sigmaker Radare2.zip

Developed - @aantik_mods


///------ Sigmaker R2 ------///

Credit - https://github.com/radareorg/radare2

Credit - https://github.com/capstone-engine/capstone

Credit - https://github.com/Enlightenment/efl

Credit - https://github.com/cubicdaiya/dtl

-- how to use --

./Sigmaker libapp.so 0x1FD348 10

[*_*] ready


.. .. .. .. e1 03 16 aa .. .. .. .. .. .. .. .. .. .. .. .. 10 72 42 f9 10 f0 00 b8 a1 0b 40 f9 01 30 01 b8 e0 01 00 f9

#2

radare2 command

r2 -w libapp.so

[0x678333] > /x .. .. .. .. e1 03 16 aa .. .. .. .. .. .. .. .. .. .. .. .. 10 72 42 f9 10 f0 00 b8 a1 0b 40 f9 01 30 01 b8 e0 01 00 f9

0x0001FD348
hit0_0

210b0034e10316aa820080d2717e2294709f4091107242f910f000b8a10b40f9013001b8e00100f9

Final offset - 0x001FD348

With every update, just decrease it a little and you can find the same function without any problem

Pattern Signature Assembly

Chorki App Reverse Engineering & How to Create Assembly Signature Patterns for Flutter Apps


Stay on RevDex

In 80% of modder cases, it’s hard, and sometimes XML editing doesn’t work 🙂
But if you use the method shown in this video, it works 100% every time

https://youtube.com/shorts/eTV03aiRIhE?si=3J0SAF-81OsO-9P4

Mac is Updating Everyone wait 2 hours then I will upload Dialog Killer Apk XD :)

MemTool 1.2 RevDex

- Inspector: Fixed imgui Negative ImGUI

- Misc: Misc Function Upgraded

- AddrTracer: Interface Access or Write Detector Realtime

- Universal Printer

- Keyboard Fix System IMM Hooked

- Menu Backend Negative Native Ui

You can catch any memory address to lib static offset

free purchase hook code

//WARNING: Possible PIC construction at 0x00400710: Changing call to branch

void fcn.00400670(ulong noname_0,int64_t arg2)

{
int *piVar1;
int iVar2;
int iVar3;
int64_t iVar4;
uint64_t uVar5;
ulong uVar6;
int iVar7;
int64_t unaff_x19;
int64_t unaff_x20;
uchar unaff_w21;
int64_t unaff_x22;
int64_t iVar8;
uchar auVar9 [12];
uint8_t in_stack_00000000;
ulong in_stack_00000010;
int64_t in_stack_00000018;

*(arg2 + 0xfc) = unaff_w21;
func_0x001d1fb4();
iVar4 = func_0x001d1a60();
*(iVar4 + 0xfc) = unaff_w21;
iVar2 = func_0x001d20bc();
piVar1 = *0x7e45b8;
iVar7 = *(unaff_x19 + 0x628);
**0x7e45b8 = iVar7;
if (0 < iVar7 + iVar2) {
iVar4 = 0;
iVar8 = 100;
do {
if (*(*(unaff_x19 + 0x5b8) + iVar8) == *(unaff_x20 + 4)) {
func_0x00417dd0();
func_0x003fc664();
uVar5 = func_0x00417dd0();
if ((uVar5 & 1) != 0) {
iVar7 = iVar4;
goto code_r0x004007d0;
}
break;
}
iVar4 = iVar4 + 1;
iVar2 = func_0x001d20bc();
iVar7 = *(unaff_x19 + 0x628);
iVar8 = iVar8 + 0x90;
*piVar1 = iVar7;
} while (iVar4 < iVar7 + iVar2);
}
func_0x002f3aac(1);
func_0x003c7ae8(0);
func_0x00302ae0(1);
func_0x001c5608();
iVar4 = func_0x00346e00();
if (iVar4 != 0) {
func_0x0018a3fc();
uVar5 = func_0x003475a8();
if ((in_stack_00000000 & 1) != 0) {
func_0x00168710(in_stack_00000010);
}
if ((uVar5 & 1) != 0) {
func_0x001c5608();
func_0x00346de0();
}
}
*(unaff_x19 + 0x598) = 1;
if (*(unaff_x22 + 0x28) == in_stack_00000018) {
return;
}
uVar6 = func_0x00168d70();
if ((in_stack_00000000 & 1) != 0) {
func_0x00168710(in_stack_00000010);
}
auVar9 = func_0x0061c7ec(uVar6);
iVar7 = auVar9._8_4_;
unaff_x19 = auVar9._0_8_;
code_r0x004007d0:
iVar2 = func_0x001d20bc();
if (1 < iVar2) {
iVar2 = 1;
do {
iVar4 = func_0x001d1a60(iVar2);
if ((*(iVar4 + 0xfc) != '\0') && (uVar5 = func_0x00417e78(), (uVar5 & 1) == 0)) {
func_0x003fc664(unaff_x19,iVar7 + iVar2,0,0);
}
iVar2 = iVar2 + 1;
iVar3 = func_0x001d20bc();
} while (iVar2 < iVar3);
}
return;
}

// LGL Hook //

// type cast 1

void (*old_Update)(void *instance);

void Update(void *instance) {
if (instance != NULL && featureHookToggle) {
*(bool *)((uint64_t)instance + 0x2C) = true;
}
old_Update(instance);
}

HOOK_LIB("libgame.so", 0x400670, Update, old_Update);

// type cast 2

void (*old_Purchase)(void *a1, void *a2);

void PurchaseHook(void *a1, void *a2) {
return;
}

HOOK_LIB("libgame.so", 0x400670, PurchaseHook, old_Purchase);


free shopping 😁