If it runs it will be defeated (if reversers get enough motivation). This technique of decrypting the code only when it is needed is more than decade old. For e

If it runs it will be defeated (if reversers get enough motivation). This technique of decrypting the code only when it is needed is more than decade old. For example, Armadillo's CopyMem II [1] used that technique in 2002. Current state of the art in software protection is the combination of all available methods like code obfuscations, embedded virtual machines, "code splicing", "imports elimination", "stolen bytes", anti-debug tricks, etc. But again, if it runs it can be defeated. [1] - http://www.woodmann.com/forum/showthread.php?4027-Armadillo-and-CopyMem-II-decryption http://www.woodmann.com/forum/showthread.php?4027-Armadillo-...