This project has been discontined. Use LGL mod menu for up-to-date project https://github.com/LGLTeam/Android-Mod-Menu

FloatingModMenu

Simple floating mod menu to il2cpp and other native Android games.

Arm64hook is not tested, i don't have arm64 phone

This project is for professional modders and programmers only. Do not use if you don't know how to use it

Features

Some codes are adopted from LGL Team

Menu types
- Switch
- Seekbar
- Button
Kitty Memory
Substrate (ARMv7)
And64InlineHook (ARM64)
AY obfuscator for C++ string
Package name just called com to avoid detection
Macros for hooks and patches
Hide JNI calls

Usage

Menu features:

Menu layout:

You can customize the menu layout in Menu.java and Style.java.

Too much to explain here. You can learn and figure out yourself

Hooking and Patching macros:

Strings in macros are automatically obfuscated. No need to obfuscate manually!

Hooking

HOOK("str", FunctionExample, old_FunctionExample);
HOOK_LIB("libFileB.so", "0x123456", FunctionExample, old_FunctionExample);
HOOK_NO_ORIG("0x123456", FunctionExample);
HOOK_LIB_NO_ORIG("libFileC.so", "0x123456", FunctionExample);
HOOKSYM("__SymbolNameExample", FunctionExample, old_FunctionExample);
HOOKSYM_LIB("libFileB.so", "__SymbolNameExample", FunctionExample, old_FunctionExample);
HOOKSYM_NO_ORIG("__SymbolNameExample", FunctionExample);
HOOKSYM_LIB_NO_ORIG("libFileB.so", "__SymbolNameExample", FunctionExample);

Patching

PATCHOFFSET("0x20D3A8", "00 00 A0 E3 1E FF 2F E1");
PATCHOFFSET_LIB("libFileB.so", "0x20D3A8", "00 00 A0 E3 1E FF 2F E1");

JNI signatures

These info can be obtained from smali file

V = Void
Z = Boolean
F = Float
I = Integer
Ljava/lang/String; = String
(I)V = void methodExample(int i)
(IZ)V = void methodExample(int i, boolean b)
(II)V = void methodExample(int i, int i2)
(IF)V = void methodExample(int i, float f)
(ILjava/lang/String;)V = void methodExample(int i, String s)
()[Ljava/lang/String; = String[] strArrayExample()
(Ljava/lang/String;)Ljava/lang/String; = String stringExample(String s)

How to inject menu to game

Compile this project: Build > Build bundle(s) / APK(s) > Build APK(s). app-debug.apk is created on \app\build\outputs\apk\debug
Decompile app-debug.apk
Decompile the game using apktool
Copy the needed assets from our app to the game
Copy the lib to the game, our armeabi-v7a lib to armeabi-v7a folder and/or arm64-v8a lib to arm64-v8a folder. Work only on armeabi-v7a as possible and delete arm64-v8a folder If the game has both armeabi-v7a and arm64-v8a available, to save your time.
Add com folder to the game. If the game has multidex, it's best you add to the last smali_classes to avoid compile error. it doesn't really matter what smali_classes you are adding too. Don't worry if com exists
Add overlay permission to AndroidManifest.xml. We only need one permission

<uses-permission android:name="android.permission.SYSTEM_ALERT_WINDOW" />

Add service to AndroidManifest.xml

<service android:name="com.Menu" android:enabled="true" android:exported="false"
    android:stopWithTask="true" />

Determine the launch activity by looking at the application’s manifest. The launch activity will always have the following MAIN and LAUNCHER intents listed.

<activity android:name="com.example.MainActivity">
    <intent-filter>
        <action android:name="android.intent.action.MAIN" />
        <category android:name="android.intent.category.LAUNCHER" />
    </intent-filter>
</activity>

So in the target game, it looks like this. We use Among Us as an example:

<activity
    android:configChanges="density|fontScale|keyboard|keyboardHidden|layoutDirection|locale|mcc|mnc|navigation|orientation|screenLayout|screenSize|smallestScreenSize|touchscreen|uiMode"
    android:hardwareAccelerated="false" android:label="@string/app_name"
    android:launchMode="singleTask" android:name="com.innersloth.spacemafia.EosUnityPlayerActivity"
    android:screenOrientation="sensorLandscape">
    <intent-filter>
        <action android:name="android.intent.action.MAIN" />
        <category android:name="android.intent.category.LAUNCHER" />
    </intent-filter>
    <meta-data android:name="unityplayer.UnityActivity" android:value="true" />
    <intent-filter>
        <action android:name="com.discord.intent.action.SDK" />
        <category android:name="android.intent.category.DEFAULT" />
        <category android:name="android.intent.category.BROWSABLE" />
        <data android:host="innersloth.com" android:pathPattern=".*" android:scheme="https" />
    </intent-filter>
    <intent-filter>
        <action android:name="android.intent.action.VIEW" />
        <category android:name="android.intent.category.DEFAULT" />
        <category android:name="android.intent.category.BROWSABLE" />
        <data android:scheme="amongus" />
    </intent-filter>
    <intent-filter>
        <action android:name="android.intent.action.VIEW" />
        <category android:name="android.intent.category.DEFAULT" />
        <category android:name="android.intent.category.BROWSABLE" />
        <data android:host="innersloth.com" android:pathPattern=".*" android:scheme="https" />
    </intent-filter>
</activity>

As you can see, the launch activity is com.innersloth.spacemafia.EosUnityPlayerActivity. It works like a path, like com/innersloth/spacemafia/EosUnityPlayerActivity.smali

Navigate though the path smali/com/innersloth/spacemafia/ and open the file EosUnityPlayerActivity.smali. Some games comes with multidex which means it will come with multiple smali folders, search though them and find the launch activity file
Find the onCreate function and place the static call below .locals

invoke-static {p0}, Lcom/MainActivity;->Start(Landroid/content/Context;)V

Like this

# virtual methods
    .method protected onCreate(Landroid/os/Bundle;)V
    .locals 1
    
    invoke-static {p0}, Lcom/MainActivity;->Start(Landroid/content/Context;)V

Now you can compile the game with apktool, sign and zipalign it and install it on your device or emulator.

Credits

VanHoevenTR (Redesigned layout)
MrIkso https://github.com/MrIkso/FloatingModMenu (His first mod menu)
MJx0 https://github.com/MJx0/KittyMemory
LGLTeam https://github.com/LGLTeam/Android-Mod-Menu
Rprop https://github.com/Rprop/And64InlineHook
Obfuscate https://github.com/adamyaxley/Obfuscate

Note: This is not Octowolve's menu, this is mine and sources is based of MrIkso, I posted on Platinmods since 2019 before he uploaded in 2020, but he declined, refused to credit and claims his own 100%, but there is nothing I can do now. If you believe I took his work, that's fine, but the fact i didn't.

VanHoevenTR / FloatingModMenu-Template