VMProtect and APIs

lava · Post by **lava** » Sat May 03, 2008 3:46 pm

did the VMProtect VM engine make any Windows API calls for its internal VM operations?

Post by **Admin** » Sun May 04, 2008 2:39 am

You talk about emulation APIs or calls APIs from virtualized code?

lava · Post by **lava** » Sun May 04, 2008 4:42 am

Admin wrote:You talk about emulation APIs or calls APIs from virtualized code?

I mean : did the VMProtect VM engine itself relies on windows APIs (uses windows apis itself) or just pure x86 machine codes are used for VM implementations.

I think that #2 is correct cuz if you've used win32 apis in your vm, then it can not be used to protectc driver sys files in ring 0.

Post by **Admin** » Sun May 04, 2008 5:13 am

I mean : did the VMProtect VM engine itself relies on windows APIs (uses windows apis itself) or just pure x86 machine codes are used for VM implementations.

VM executor does not use APIs in runtime itself (only x86 machine codes).