The virus allocates memory for the decrypted code and data. This can be a serious disadvantage for the attacker because nonencrypted code needs to allocate memory firstbefore the decryptor.

• 现在的难点是解密的时候，分配一块内存存放解密的代码，后来怎么调用这块解密得到的代码呢？