Ted2

Yes, updating right now...

Game is updated. Will update the hack later

Lol I've no idea what to look for Thabks!

I tried 2 days straight...

<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>items</key> <array> <dict> <----> begin of under text <key>cell</key> <string>PSGroupCell</string> <key>footerText</key> <string>Premium + No Jailbreak Detection (On/Off)</string> </dict> <-----> end of under text <dict> <------> begin of first switch <key>cell</key> <string>PSSwitchCell</string> <key>default</key> <false/> <key>defaults</key> <string>com.majdawwad.lumosity</string> <key>key</key> <string>key1</string> <key>label</key> <string>Premium + No Jailbreak Detection</string> </dict> <------> end of first switch <dict> <------> begin under text 2 <key>cell</key> <string>PSGroupCell</string> <key>footerText</key> <string>This text will appear under your second switch.</string> </dict> <-----> end under text 2 <dict> <-----> begin switch 2 <key>cell</key> <string>PSSwitchCell</string> <key>default</key> <false/> <key>defaults</key> <string>com.majdawwad.lumosity</string> <key>key</key> <string>key2</string> <key>label</key> <string>Switch Text 2</string> </dict> <-----> end switch 2 <dict> <key>cell</key> <string>PSGroupCell</string> <key>footerText</key> <string>This text will appear under your third switch.</string> </dict> <dict> <key>cell</key> <string>PSSwitchCell</string> <key>default</key> <false/> <key>defaults</key> <string>com.majdawwad.lumosity</string> <key>key</key> <string>key3</string> <key>label</key> <string>Switch Text 3</string> </dict> <dict> <key>cell</key> <string>PSGroupCell</string> <key>footerText</key> <string>This text will appear under your fourth switch.</string> </dict> <dict> <key>cell</key> <string>PSSwitchCell</string> <key>default</key> <false/> <key>defaults</key> <string>com.majdawwad.lumosity</string> <key>key</key> <string>key4</string> <key>label</key> <string>Switch Text 4</string> </dict> <dict> <key>cell</key> <string>PSGroupCell</string> </dict> <dict> <key>cell</key> <string>PSTextCell</string> <key>label</key> <string>Made by Majd Awwad.</string> </dict> <dict> <key>action</key> <string>link</string> <key>cell</key> <string>PSButtonCell</string> <key>icon</key> <string>[email protected]</string> <key>label</key> <string>Visit iOSGods.com</string> </dict> </array> <key>title</key> <string>Lumosity Cheats</string> </dict> </plist> So what you do: <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>items</key> <array> <dict> <key>cell</key> <string>PSGroupCell</string> <key>footerText</key> <string>Premium + No Jailbreak Detection (On/Off)</string> </dict> <dict> <key>cell</key> <string>PSSwitchCell</string> <key>default</key> <false/> <key>defaults</key> <string>com.majdawwad.lumosity</string> <key>key</key> <string>key1</string> <key>label</key> <string>Premium + No Jailbreak Detection</string> </dict> <dict> <key>cell</key> <string>PSGroupCell</string> </dict> <dict> <key>cell</key> <string>PSTextCell</string> <key>label</key> <string>Made by Majd Awwad.</string> </dict> <dict> <key>action</key> <string>link</string> <key>cell</key> <string>PSButtonCell</string> <key>icon</key> <string>[email protected]</string> <key>label</key> <string>Visit iOSGods.com</string> </dict> </array> <key>title</key> <string>Lumosity Cheats</string> </dict> </plist>

Pase code here. We can't edit it for you know.

MOV R0, #1 for free cost (0x0020)

Try NOP ' 0x4cf248' Also, why do u got all those ;load from memory?

Is there any CMP near the function?

U need to do code injection. See tutorial section for how to do that.

text:004CF252 loc_4CF252 ; CODE XREF: sub_4CEE7C+3CCj __text:004CF252 ADD.W R0, R4, R11,LSL#2 ; Rd = Op1 + Op2 __text:004CF256 LDR R1, [SP,#0x34+var_2C] ; Load from Memory __text:004CF258 STR R1, [R0,#0x10] ; Store to Memory __text:004CF25A LDR.W R0, [R8,#0x30] ; Load from Memory __text:004CF25E ADDS R0, #1 ; Rd = Op1 + Op2 __text:004CF260 STR.W R0, [R8,#0x30] ; Store to Memory __text:004CF264 ADD SP, SP, #0x1C ; Rd = Op1 + Op2 __text:004CF266 POP.W {R8,R10,R11} ; Pop registers __text:004CF26A POP {R4-R7,PC} ; Pop registers to text:004CF252 loc_4CF252 ; CODE XREF: sub_4CEE7C+3CCj __text:004CF252 ADD.W R0, R4, R11,LSL#2 ; Rd = Op1 + Op2 __text:004CF256 LDR R1, [SP,#0x34+var_2C] ; Load from Memory __text:004CF258 STR R7, [R0,#0x10] ; Store to Memory <-------> __text:004CF25A LDR.W R0, [R8,#0x30] ; Load from Memory __text:004CF25E ADDS R0, #1 ; Rd = Op1 + Op2 __text:004CF260 STR.W R0, [R8,#0x30] ; Store to Memory __text:004CF264 ADD SP, SP, #0x1C ; Rd = Op1 + Op2 __text:004CF266 POP.W {R8,R10,R11} ; Pop registers __text:004CF26A POP {R4-R7,PC} ; Pop registers What this does is stores R7 instead of normal coin vlaue

read this comment @Clarify

Yes, but is also bin & nic.pl in it? PS; use quote button, otherwise I wont get a notificatio u replied to me

When you open up ifile, is theos there?

0x4cf25a

It's the address u got from ' w s e -- 0x*****

You need to know coding to build a app lol

AndroidStudio, but it's not that easy as it sounds.

Rip, that;s not what the register read command is for. It's a number in hex, which you need to convert to decimal to see which registers holds your value

doesn't seem to be right. Don't tell me you jumped to adress: 186b2 please

The offset your watchpoint gave you R1 holds 186b2 value (hex value) converted to decimal is ur coin value u said

Go to the offset you got from your watchpoint. You told me R1 holds your coins so hack instructions with R1 in it.

Isn't it just your apple id password

You don't need to enter something lldb. You already got everything you need.

Maybe a check, try hack store though. getCost, get_cost,getPricr, get_price