VMProtect Software » Forum

did the VMProtect VM engine make any Windows API calls for its internal VM operations?

You talk about emulation APIs or calls APIs from virtualized code?

Admin wrote:You talk about emulation APIs or calls APIs from virtualized code?

I mean : did the VMProtect VM engine itself relies on windows APIs (uses windows apis itself) or just pure x86 machine codes are used for VM implementations.

I think that #2 is correct cuz if you've used win32 apis in your vm, then it can not be used to protectc driver sys files in ring 0.

I mean : did the VMProtect VM engine itself relies on windows APIs (uses windows apis itself) or just pure x86 machine codes are used for VM implementations.

VM executor does not use APIs in runtime itself (only x86 machine codes).