Skip to content

New bypass is detected in 1.64 #2

Description

@maybegreat48
char sub_7FF606898B80()
{
  int timeInterval; // eax
  int v2; // edx
  char v3[16]; // [rsp+20h] [rbp-A88h] BYREF
  int v4; // [rsp+30h] [rbp-A78h]
  int v5; // [rsp+34h] [rbp-A74h]
  int v6; // [rsp+38h] [rbp-A70h]
  int v7; // [rsp+3Ch] [rbp-A6Ch]
  __int64 v8; // [rsp+78h] [rbp-A30h]
  __int16 v9; // [rsp+82h] [rbp-A26h]
  unsigned int v10; // [rsp+AB8h] [rbp+10h] BYREF

  v10 = -1;
  sub_7FF606892C2C(v3, qword_7FF608477CF8);
  timeInterval = v7 & v4 | v5 & ~v7;
  v6 = 214013 * qword_7FF607B74FA8 + 2531011;
  v2 = 214013 * v6 + 2531011;
  LODWORD(qword_7FF607B74FA8) = v2;
  v7 = v2;
  v4 = timeInterval & v2;
  v5 = timeInterval & ~v2;
  if ( timeInterval != 30000 )
  {
    j__sub_7FF6097EB5A4_self_healing(qword_7FF607DBA918, &v10, -1135378931, -1375457012, -1251759802, -50712147, 0, 2); // bonus transaction
    j__sub_7FF6094C1471_self_healing(qword_7FF607DBA918, v10);
  }
  if ( v9 )
    sub_7FF605E0101C(v8);
  return 1;
}

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions