How to remove Imports from KERNEL32.dll

Issues related to VMProtect
Post Reply
fuzzing
Posts: 19
Joined: Fri Aug 07, 2020 2:33 am

How to remove Imports from KERNEL32.dll

Post by fuzzing »

Is there a chance to remove imports of KERNEL32.dll when using all protection options?:

GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

Regards!
Admin
Site Admin
Posts: 2586
Joined: Mon Aug 21, 2006 8:19 pm
Location: Russia, E-burg
Contact:

Re: How to remove Imports from KERNEL32.dll

Post by Admin »

Why do you need it?
fuzzing
Posts: 19
Joined: Fri Aug 07, 2020 2:33 am

Re: How to remove Imports from KERNEL32.dll

Post by fuzzing »

Admin wrote:Why do you need it?
As i posted before, with "Detect It Easy" tool a cracker can identify VMP:

viewtopic.php?f=2&t=30016&p=36570#p36570

kernel32.dll
PE.getImportFunctionName(x,x)=="GetSystemTimeAsFileTime"

And all combinations of the Import ...
Admin
Site Admin
Posts: 2586
Joined: Mon Aug 21, 2006 8:19 pm
Location: Russia, E-burg
Contact:

Re: How to remove Imports from KERNEL32.dll

Post by Admin »

Fixed in the 1790 build.
Post Reply