Contents

Stolen bytes

This technology combines mixing part of the code (usually, several hundreds of bytes from the entry point) with polymorphic instructions, applying metamorphism to these commands and partially executing them on the virtual machine (the interpreter). All this code is moved to protection section and thus a cracker has absolutely no clues for unpacking the program and finding the original entry point.