fix?

Author: jurre111

lara/kexploit/pe/rc.m

@@ -442,6 +442,59 @@ int enable_grid_app_switcher(RemoteCall *proc) {
     return 0;
 }
 
+static uint64_t get_main_window(RemoteCall *proc) {
+    if (!proc) return 0;
+    
+    uint64_t clsUIApplication = remote_getClass(proc, "UIApplication");
+    if (!clsUIApplication) return 0;
+    
+    uint64_t selSharedApp = remote_sel(proc, "sharedApplication");
+    uint64_t app = remote_msg(proc, clsUIApplication, selSharedApp, 0, 0, 0, 0);
+    if (!app) return 0;
+    
+    uint64_t selKeyWindow = remote_sel(proc, "keyWindow");
+    uint64_t selWindows = remote_sel(proc, "windows");
+    uint64_t selCount = remote_sel(proc, "count");
+    uint64_t selObjAtIdx = remote_sel(proc, "objectAtIndex:");
+    
+    uint64_t window = remote_msg(proc, app, selKeyWindow, 0, 0, 0, 0);
+    if (window) return window;
+    
+    uint64_t windows = remote_msg(proc, app, selWindows, 0, 0, 0, 0);
+    if (windows) {
+        uint64_t count = remote_msg(proc, windows, selCount, 0, 0, 0, 0);
+        for (uint64_t i = 0; i < count && i < 10; i++) {
+            uint64_t w = remote_msg(proc, windows, selObjAtIdx, i, 0, 0, 0);
+            if (w) return w;
+        }
+    }
+    
+    uint64_t selConnectedScenes = remote_sel(proc, "connectedScenes");
+    uint64_t scenes = remote_msg(proc, app, selConnectedScenes, 0, 0, 0, 0);
+    if (scenes) {
+        uint64_t selAllObjects = remote_sel(proc, "allObjects");
+        uint64_t sceneArray = remote_msg(proc, scenes, selAllObjects, 0, 0, 0, 0);
+        if (sceneArray) {
+            uint64_t scCount = remote_msg(proc, sceneArray, selCount, 0, 0, 0, 0);
+            for (uint64_t i = 0; i < scCount && i < 5; i++) {
+                uint64_t scene = remote_msg(proc, sceneArray, selObjAtIdx, i, 0, 0, 0);
+                if (scene) {
+                    uint64_t sceneWindows = remote_msg(proc, scene, selWindows, 0, 0, 0, 0);
+                    if (sceneWindows) {
+                        uint64_t wCount = remote_msg(proc, sceneWindows, selCount, 0, 0, 0, 0);
+                        for (uint64_t j = 0; j < wCount && j < 10; j++) {
+                            uint64_t w = remote_msg(proc, sceneWindows, selObjAtIdx, j, 0, 0, 0);
+                            if (w) return w;
+                        }
+                    }
+                }
+            }
+        }
+    }
+    
+    return 0;
+}
+
 static uint64_t get_main_window_scene(RemoteCall *proc) {
     if (!proc) return 0;
     uint64_t selMainWindowScene = remote_sel(proc, "mainWindowScene");
@@ -456,29 +509,18 @@ static uint64_t get_main_window_scene(RemoteCall *proc) {
         }
     }
 
+    uint64_t window = get_main_window(proc);
+    if (window) {
+        uint64_t selWindowScene = remote_sel(proc, "windowScene");
+        uint64_t scene = remote_msg(proc, window, selWindowScene, 0, 0, 0, 0);
+        if (scene) return scene;
+    }
+    
     uint64_t clsUIApplication = remote_getClass(proc, "UIApplication");
     if (clsUIApplication) {
         uint64_t selSharedApp = remote_sel(proc, "sharedApplication");
         uint64_t app = remote_msg(proc, clsUIApplication, selSharedApp, 0,0,0,0);
         if (app) {
-            uint64_t selKeyWindow = remote_sel(proc, "keyWindow");
-            uint64_t selWindows = remote_sel(proc, "windows");
-            uint64_t selFirstObj = remote_sel(proc, "firstObject");
-            uint64_t selWindowScene = remote_sel(proc, "windowScene");
-            
-            uint64_t window = remote_msg(proc, app, selKeyWindow, 0,0,0,0);
-            if (!window) {
-                uint64_t windows = remote_msg(proc, app, selWindows, 0,0,0,0);
-                if (windows) {
-                    window = remote_msg(proc, windows, selFirstObj, 0,0,0,0);
-                }
-            }
-            
-            if (window) {
-                uint64_t scene = remote_msg(proc, window, selWindowScene, 0,0,0,0);
-                if (scene) return scene;
-            }
-            
             uint64_t selConnectedScenes = remote_sel(proc, "connectedScenes");
             uint64_t selAnyObject = remote_sel(proc, "anyObject");
             uint64_t scenes = remote_msg(proc, app, selConnectedScenes, 0,0,0,0);
@@ -505,67 +547,90 @@ int enable_debug_overlay(RemoteCall *proc) {
         return -1;
     }
 
-    uint64_t selAddGestureRecognizer = remote_sel(proc, "addGestureRecognizer:");
-    uint64_t selHandleActivation = remote_sel(proc, "_handleActivationGesture:");
     uint64_t selInit = remote_sel(proc, "init");
-    uint64_t selInitWithTargetAction = remote_sel(proc, "initWithTarget:action:");
-    uint64_t selMainHandler = remote_sel(proc, "mainHandler");
     uint64_t selOverlay = remote_sel(proc, "overlay");
+    uint64_t selPrepare = remote_sel(proc, "prepareDebuggingOverlay");
     uint64_t selPerform = remote_sel(proc, "performSelectorOnMainThread:withObject:waitUntilDone:");
-    uint64_t selSetNumberOfTapsRequired = remote_sel(proc, "setNumberOfTapsRequired:");
-    uint64_t selSetWindowScene = remote_sel(proc, "setWindowScene:");
-    uint64_t selSharedApplication = remote_sel(proc, "sharedApplication");
-    uint64_t selStatusBar = remote_sel(proc, "statusBarForEmbeddedDisplay");
 
-    // Swizzle -[UIDebuggingInformationOverlay init] to -[UIWindow init] to bypass internal check
+    // 1. Swizzle -[UIDebuggingInformationOverlay init] to -[UIWindow init] to bypass internal check
     uint64_t methodWindowInit = RemoteArbCall(proc, class_getInstanceMethod, clsUIWindow, selInit);
     uint64_t methodOverlayInit = RemoteArbCall(proc, class_getInstanceMethod, clsDebugOverlayWindow, selInit);
     uint64_t impWindowInit = RemoteArbCall(proc, method_getImplementation, methodWindowInit);
     if (methodOverlayInit && impWindowInit) {
         RemoteArbCall(proc, method_setImplementation, methodOverlayInit, impWindowInit);
     }
+
+    // 2. Call +[UIDebuggingInformationOverlay prepareDebuggingOverlay] to prevent UIDebuggingInformationOverlayNotPrepared exception
+    remote_msg(proc, clsDebugOverlayWindow, selPerform, selPrepare, 0, 1, 0);
 
-    // Set windowScene
-    uint64_t mainWindowScene = get_main_window_scene(proc);
-    remote_msg(proc, clsDebugOverlayWindow, selPerform, selOverlay, 0, 1, 0); // init window
+    // 3. Get or allocate overlay window
+    remote_msg(proc, clsDebugOverlayWindow, selPerform, selOverlay, 0, 1, 0);
     uint64_t debugOverlay = remote_msg(proc, clsDebugOverlayWindow, selOverlay, 0, 0, 0, 0);
+    if (!debugOverlay) {
+        debugOverlay = RemoteArbCall(proc, objc_alloc, clsDebugOverlayWindow);
+        if (debugOverlay) {
+            debugOverlay = remote_msg(proc, debugOverlay, selInit, 0, 0, 0, 0);
+        }
+    }
+    
+    // 4. Set windowScene
+    uint64_t mainWindowScene = get_main_window_scene(proc);
     if (debugOverlay && mainWindowScene) {
+        uint64_t selSetWindowScene = remote_sel(proc, "setWindowScene:");
         remote_msg(proc, debugOverlay, selPerform, selSetWindowScene, mainWindowScene, 1, 0);
     }
 
+    // 5. Show overlay window immediately
     if (debugOverlay) {
+        uint64_t selSetHidden = remote_sel(proc, "setHidden:");
+        uint64_t selMakeKeyAndVisible = remote_sel(proc, "makeKeyAndVisible");
         uint64_t selToggle = remote_sel(proc, "toggleVisibility");
+        
+        remote_msg(proc, debugOverlay, selPerform, selSetHidden, 0, 1, 0);
+        remote_msg(proc, debugOverlay, selPerform, selMakeKeyAndVisible, 0, 1, 0);
         remote_msg(proc, debugOverlay, selPerform, selToggle, 0, 1, 0);
     }
 
-    // register gesture recognizer to status bar or key window
+    // 6. Register gesture recognizer to status bar and main window
     if (clsDebugOverlayHandler && clsUITapGestureRecognizer) {
+        uint64_t selMainHandler = remote_sel(proc, "mainHandler");
+        uint64_t selSharedInstance = remote_sel(proc, "sharedInstance");
         uint64_t target = remote_msg(proc, clsDebugOverlayHandler, selMainHandler, 0, 0, 0, 0);
+        if (!target) {
+            target = remote_msg(proc, clsDebugOverlayHandler, selSharedInstance, 0, 0, 0, 0);
+        }
+        
         if (target) {
-            uint64_t doubleTapGesture = RemoteArbCall(proc, objc_alloc, clsUITapGestureRecognizer);
-            doubleTapGesture = remote_msg(proc, doubleTapGesture, selInitWithTargetAction, target, selHandleActivation, 0, 0);
-            remote_msg(proc, doubleTapGesture, selSetNumberOfTapsRequired, 2, 0, 0, 0);
-            
-            uint64_t app = remote_msg(proc, clsUIApplication, selSharedApplication, 0, 0, 0, 0);
-            uint64_t targetView = 0;
+            uint64_t selInitWithTargetAction = remote_sel(proc, "initWithTarget:action:");
+            uint64_t selHandleActivation = remote_sel(proc, "_handleActivationGesture:");
+            uint64_t selSetNumberOfTapsRequired = remote_sel(proc, "setNumberOfTapsRequired:");
+            uint64_t selAddGesture = remote_sel(proc, "addGestureRecognizer:");
+
+            // Gesture 1: Status bar double tap
+            uint64_t app = remote_msg(proc, clsUIApplication, remote_sel(proc, "sharedApplication"), 0, 0, 0, 0);
+            uint64_t statusBar = 0;
             if (app) {
-                targetView = remote_msg(proc, app, selStatusBar, 0, 0, 0, 0);
-                if (!targetView) {
-                    uint64_t selKeyWindow = remote_sel(proc, "keyWindow");
-                    targetView = remote_msg(proc, app, selKeyWindow, 0, 0, 0, 0);
-                }
-                if (!targetView) {
-                    uint64_t selWindows = remote_sel(proc, "windows");
-                    uint64_t windows = remote_msg(proc, app, selWindows, 0, 0, 0, 0);
-                    if (windows) {
-                        targetView = remote_msg(proc, windows, remote_sel(proc, "firstObject"), 0, 0, 0, 0);
-                    }
-                }
+                statusBar = remote_msg(proc, app, remote_sel(proc, "statusBarForEmbeddedDisplay"), 0, 0, 0, 0);
+            }
+            if (statusBar) {
+                uint64_t sbGesture = RemoteArbCall(proc, objc_alloc, clsUITapGestureRecognizer);
+                sbGesture = remote_msg(proc, sbGesture, selInitWithTargetAction, target, selHandleActivation, 0, 0);
+                remote_msg(proc, sbGesture, selSetNumberOfTapsRequired, 2, 0, 0, 0);
+                remote_msg(proc, statusBar, selPerform, selAddGesture, sbGesture, 1, 0);
+                RemoteArbCall(proc, objc_release, sbGesture);
             }
-            if (targetView) {
-                remote_msg(proc, targetView, selPerform, selAddGestureRecognizer, doubleTapGesture, 1, 0);
+
+            // Gesture 2: Main window 2-finger double tap
+            uint64_t mainWindow = get_main_window(proc);
+            if (mainWindow) {
+                uint64_t winGesture = RemoteArbCall(proc, objc_alloc, clsUITapGestureRecognizer);
+                winGesture = remote_msg(proc, winGesture, selInitWithTargetAction, target, selHandleActivation, 0, 0);
+                remote_msg(proc, winGesture, selSetNumberOfTapsRequired, 2, 0, 0, 0);
+                uint64_t selSetTouches = remote_sel(proc, "setNumberOfTouchesRequired:");
+                remote_msg(proc, winGesture, selSetTouches, 2, 0, 0, 0);
+                remote_msg(proc, mainWindow, selPerform, selAddGesture, winGesture, 1, 0);
+                RemoteArbCall(proc, objc_release, winGesture);
             }
-            RemoteArbCall(proc, objc_release, doubleTapGesture);
         }
     }
 

lara/views/tweaks/RemoteView.swift

@@ -25,6 +25,8 @@ struct RemoteView: View {
     @State private var hsColumns: Int = 4
     @State private var freakyrunning: Bool = false
     @State private var freakyseq: Int = 0
+    @State private var debugProcessName: String = "Maps"
+    @State private var debugLastResult: String = ""
 
     private var dockMaxColumns: Int { rcdockunlimited ? 50 : 10 }
 
@@ -171,22 +173,67 @@ struct RemoteView: View {
             }
 
             Section {
+                TextField("Process name (e.g. Maps, Preferences)", text: $debugProcessName)
+                    .textInputAutocapitalization(.never)
+                    .autocorrectionDisabled()
+
+                HStack(spacing: 8) {
+                    Button("Maps") {
+                        debugProcessName = "Maps"
+                    }
+                    .buttonStyle(.bordered)
+
+                    Button("Settings") {
+                        debugProcessName = "Preferences"
+                    }
+                    .buttonStyle(.bordered)
+
+                    Button("SpringBoard") {
+                        debugProcessName = "SpringBoard"
+                    }
+                    .buttonStyle(.bordered)
+                }
+
                 Button {
-                    run("Enable Apple Maps UI Debugging Menu") {
-                        guard let proc = RemoteCall(process: "Maps", useMigFilterBypass: false) else {
-                            return "RemoteCall init failed for Maps (Please ensure Apple Maps is running)"
+                    let procName = debugProcessName.trimmingCharacters(in: .whitespacesAndNewlines)
+                    guard !procName.isEmpty else { return }
+                    run("Enable UI Debugging Menu on \(procName)") {
+                        guard let proc = RemoteCall(process: procName, useMigFilterBypass: false) else {
+                            let lastErr = RemoteCall.lastInitError() ?? "Process not found"
+                            return "RemoteCall init failed for '\(procName)': \(lastErr). Ensure app is open!"
                         }
                         defer { proc.destroy() }
-                        let result = enable_maps_debug_menu(proc)
-                        return result == 0 ? "enable_maps_debug_menu() -> success" : "enable_maps_debug_menu() -> failed (\(result))"
+
+                        let result: Int32
+                        if procName.lowercased() == "maps" {
+                            result = enable_maps_debug_menu(proc)
+                        } else {
+                            result = enable_debug_overlay(proc)
+                        }
+
+                        return result == 0
+                            ? "UI Debugging Menu successfully enabled on \(procName)!"
+                            : "enable_debug_overlay(\(procName)) failed with error code \(result)."
+                    } onComplete: { msg in
+                        self.debugLastResult = msg
                     }
                 } label: {
-                    Text("Enable Apple Maps UI Debugging Menu")
+                    HStack {
+                        Image(systemName: "ladybug")
+                        Text("Enable UI Debugging Menu")
+                    }
+                }
+
+                if !debugLastResult.isEmpty {
+                    Text(debugLastResult)
+                        .font(.system(.footnote, design: .monospaced))
+                        .foregroundColor(.secondary)
+                        .textSelection(.enabled)
                 }
             } header: {
-                Text("Apple Maps")
+                Text("UI Debugging Menu (Any App)")
             } footer: {
-                Text("Ensure Apple Maps is running before enabling. Double-tap the status bar or screen to toggle the debug overlay.")
+                Text("Ensure the target application is running before tapping enable. Double-tap with 2 fingers or double-tap the top status bar to toggle the debug overlay.")
             }
 
             Section {