[0x -]

Binary is an easy concept. Instead of using the number 10 base system you're counting with the number two base system.
0,
1,
10,
11, 100, 101,110,111,1000 etc
I don't understand how you can write code and not understand Binary.

No one cares, plenty of users have handled anti-emulation on their own.
Yeah i'm sure plenty of users have handled anti-emulation as they know what they're actually doing. Since you can't come up with pseudo code regarding this i'll just assume you cant

What's a binary? I really want to learn! 😅

fags with asian fantasies and worthless posts because they don't have the knowledge to join the argument.
That statement totally contradicts itself.

You're being hella troll and it's hilarious. But I do have to give you props for knowing what you're talking about.

A lot of people on this forum thinks they know what they're doing or talking about but they do not.

[d3agle]

I don't understand how you can write code and not understand Binary.

I don't think I have the patience to learn all the low level shit, at least for right now, but I do appreciate the share. It's prompted me to learn asm just to understand this mumbo jumbo shit. I'll attempt to pseudo code this considering you shared something that I can learn from.

You're obviously an experienced coder and you would make a good edition to the community, minus that bullshit troll nulling my MBR on my VM, spent 5 minutes of my time creating a new one when I could have been doing more important things. Was a clever bait though. I'm glad to see GOOD shares from people, so thank you for this.

[Ban]

The amount of brain cells that died reading the atrocities I see here in this thread is astounding.

[spdy]

I don't think I have the patience to learn all the low level shit, at least for right now, but I do appreciate the share. It's prompted me to learn asm just to understand this mumbo jumbo shit. I'll attempt to pseudo code this considering you shared something that I can learn from.

You're obviously an experienced coder and you would make a good edition to the community, minus that bullshit troll nulling my MBR on my VM, spent 5 minutes of my time creating a new one when I could have been doing more important things. Was a clever bait though. I'm glad to see GOOD shares from people, so thank you for this.

lol. Always take SNAPSHOTS of your VM. Hey now you got something to destroy an OS. Take it out in the keylogger section :P

---

The amount of brain cells that died reading the atrocities I see here in this thread is astounding.

Are you trying to sound somewhat intelligent?

[Corios]

Why do you case so much to keep making accounts lol?

[frontenhack]

Why do you case so much to keep making accounts lol?

he get banned like 1 time every 4 days :P

[katetem]

Assembly source plz? Or I'd like to deflate it my self.

[Qmz_]

There are plenty of ways on making an antiemulation. What most people don't realize, is that most of the old tricks still work. Maybe not something like sleep(60*1000), for loops for increasing a variable, or even counting prime numbers. However I'm pretty sure that something like bruteforcing the decryption key for the payload, works for most AV's - but you still need to avoid heuristics, and "look legitimate" in the eyes of an AV.

It's been some time since I last time played with crypters, but this was one part of my anti-emulation and it alone worked just nicely, when it was used as shellcode.

PHP Code


<?php 
BOOL example()
{
    DWORD x = 0xFFFFFFE, y = 0;

    VirtualProtectEx(reinterpret_cast<HANDLE>(0x253141), reinterpret_cast<LPVOID>(0x488148), 0x24862, NULL, NULL);

    __asm
    {
        mov eax, fs:[18h];
        mov eax, [eax + 34h];
        mov y, eax;
    }

    while (x != 0)
    {
        if (y != 87L)
        {
            break;
        }

        x--;
    }

    return x != 0;
} 


...anyway the point was that your antiemulation isn't so special that anyone should buy it. But instead, they could read more about it from here: https://hackforums.net/showthread.php?tid=4068529

[spdy]

There are plenty of ways on making an antiemulation. What most people don't realize, is that most of the old tricks still work. Maybe not something like sleep(60*1000), for loops for increasing a variable, or even counting prime numbers. However I'm pretty sure that something like bruteforcing the decryption key for the payload, works for most AV's - but you still need to avoid heuristics, and "look legitimate" in the eyes of an AV.

It's been some time since I last time played with crypters, but this was one part of my anti-emulation and it alone worked just nicely, when it was used as shellcode.

PHP Code


<?php 
BOOL example()
{
    DWORD x = 0xFFFFFFE, y = 0;

    VirtualProtectEx(reinterpret_cast<HANDLE>(0x253141), reinterpret_cast<LPVOID>(0x488148), 0x24862, NULL, NULL);

    __asm
    {
        mov eax, fs:[18h];
        mov eax, [eax + 34h];
        mov y, eax;
    }

    while (x != 0)
    {
        if (y != 87L)
        {
            break;
        }

        x--;
    }

    return x != 0;
} 


...anyway the point was that your antiemulation isn't so special that anyone should buy it. But instead, they could read more about it from here: https://hackforums.net/showthread.php?tid=4068529

You should implement mathematics in your code. I mean, it shouldn't be so hard to implement an algorithm that specifically bruteforces the key at the correct time to prevent heuristics.