KernelHex Labs 🇦🇫

Some losses are self-made Right

Leaks?😆

static const char* ORIGINAL_APK = NULL; void SigsysHandler(int sig, siginfo_t *info, void *ctx) { ucontext_t *uc = (ucontext_t *)ctx; #ifdef __aarch64__ long nr = uc->uc_mcontext.regs[8]; //syscall number unsigned long long *args = &uc->uc_mcontext.regs[0]; //x0-x5 args if (nr == __NR_openat) { const char *path = (const char *)args[1]; if (strstr(path, "base.apk")) { //Redirect args[0] = (_QWORD)ORIGINAL_APK; //x0 = path } } uc->uc_mcontext.pc -= 4; //re-execute #endif }CP: Yahdikallah Kill Sign Termination Fix Global PRO ~ @Yahdikallah

YAHDI(__int64, sub_3A564C, (__int64 a1, unsigned __int64 a2, void* a3, double a4)) { switch (a2) { case 769: // 10year offline case 770: // 10year offline if (a1) *(_BYTE*)(a1 + 97) = 0; return osub_3A564C(a1, a2, a3, a4); } if (a2 == 804 || a2 == 884 || a2 == 851 || a2 == 896 || //(a2 >= 860 && a2 <= 863) || //give termination last zone (a2 >= 934 && a2 <= 938) || a2 == 918 || a2 == 897) { return 0LL; } return osub_3A564C(a1, a2, a3, a4); } 10Year Offline Fixed 100% | VTable Global PRO ~ @Yahdikallah

YAHDI(int, Pthread_attr_init, (pthread_attr_t *attr)) { if (__builtin_expect(!attr, 0)) { return 22; //EINVAL (Block) } int result = oPthread_attr_init(attr); if (__builtin_expect(result == 0, 1)) { uintptr_t return_address = (uintptr_t)__builtin_return_address(0); if (libanogsBase && return_address >= libanogsBase && return_address < (libanogsBase + libanogsSize)) { struct sched_param param; param.sched_priority = sched_get_priority_min(SCHED_NORMAL); pthread_attr_setschedpolicy(attr, SCHED_BATCH); pthread_attr_setschedparam(attr, &param); } } return result; } HOOK_LIB("libanogs.so", "0x520240", hPthread_attr_init, oPthread_attr_init); //Violation (new) Fix 1Day Offline Crc 64 Global PRO ~ @Yahdikallah

YAHDI(__int64, C34Main, (__int64 a1, __int64 a2)) { if (!a2 || !*(void**)a2) return 0; char* odata = *(char**)a2; size_t Data = *(size_t*)(a2 + 8); if (Data > 0 && Data <= 8192) { char* Buffer = (char*)malloc(Data); if (Buffer) { memset(Buffer, 0, Data); *(char**)a2 = Buffer; *(_DWORD*)(a2 + 24) = 0; } } return oC34Main(a1, a2); } HOOK_LIB("libanogs.so", "0x21FF80",hC34Main, oC34Main); Just Enjoy, Wait for Lizard King (Leaks)😁 PRO ~ @Yahdikallah

YAHDI(__int64, sub_379220, (__int64 a1, const char *a2, const char *a3)) { return osub_379220(a1, "", ""); } HOOK_LIB("libanogs.so", "0x379220",hsub_379220, osub_379220); 10Year Offline Global 64 PRO ~ @Yahdikallah

Leaking Soon

__int64 (*osub_2F7FF4)(__int64 a1, __int64 a2, __int64 a3, unsig __int64 hsub_2F7FF4(__int64 a1, __int64 a2, __int64 a3, unsigned int a4, unsigned int a5) { if (a2) { *(volatile _BYTE*)(a2 + 1) &= 0xFE; *(volatile _BYTE*)(a2 + 2) &= 0xFE; *(volatile _BYTE*)(a2 + 3) &= 0xFE; *(volatile _BYTE*)(a2 + 4) &= 0xFE; } __int64 result = osub_2F7FF4(a1, a2, a3, a4, a5); if (a2) { *(volatile _BYTE*)(a2 + 64) = 0; *(volatile _BOOL4*)(a2 + 72) = 0; } LOGI("Violation BLOCKED"); return result; } HOOK_LIB("libanogs.so", "0x2F7FF4", hsub_2F7FF4, osub_2F7FF4); Violation Fixer Anogs Cr ~ @NgrLeader