* detecting the shellcode during static analysis (when it inspects the file on disk). * XOR is the simplest operation: A ^ B = C, and C ^ B = A back. * The same function works for both encryption and ...