Bypassing detection using GetProcAddress with Windows APIs

What did you use as a sample payload?
When it calls kernel, is that just for scantime? or runtime as well?

I'm interested in testing this out with some known malware like Quasar to see the difference.
Thanks for the share!