Hotcakes #1 it decrypts and launches the executable from memory You're right I did misunderstand, sorry, I just read this bit wrong.