[Squidge]

I'd change the code at the OEP to start with. However, to ensure it's not picked up by the hardcore methods, you need to ensure that the original UPX code is mangled and decrypted upon startup.