xorhex

## Tiny R2 Emulation - Code Snippet 1: Brute Forcing XOR Key
>>> for x in range(0xffffffff):
...   if 0x978710a1 ^ x == 0x90909090:
...     print(hex(x))
...     break
...
0x7178031

## Tiny R2 Emulation - Code Snippet 2: Pre-emulation Setup Commands
e asm.bits=32
e asm.arch=x86
e asm.emu.write=true
e io.cache=true

## Tiny R2 Emulation - Code Snippet 3: Initialize Emulation Engine Commands
aei
aeim

## Tiny R2 Emulation - Code Snippet 4: Configure Memory Commands
aeim 0x800000 0x28000

## Tiny R2 Emulation - Code Snippet 5: Configure Registers Commands
s 0x40104b
aeip
aer eax=0x800000

## Tiny R2 Emulation - Code Snippet 6: Run Command
aecu 0x401070

## Tiny R2 Emjulation - Code Snippet 7: Deobfuscation emulation commands
aer ecx=0x7178031
aecu 0x401096

## Pin to Unpin - Code Snippet 1 - Demo App
#pragma comment(lib, "User32.lib")
#pragma comment(lib, "Kernel32.lib")

#define STRICT
#include <windows.h>

int WINAPI WinMain(HINSTANCE hInstance, HINSTANCE hPrevInstance, LPSTR lpCmdLine, int nCmdShow)
{
    if (GetSystemDefaultUILanguage() == 0x40E)
        MessageBox(NULL, "Hi there! Wait while I do something bad!", "Success", MB_OK);

## Pin to Unpin - Code Snippet 2 - Pin Tool `main` function
int main(int argc, char *argv[])
{
...
    IMG_AddInstrumentFunction(Image, 0);
...
}

## Pin to Unpin - Code Snippet 3 - Pin Tool instrumentation function
VOID Image(IMG img, VOID *v)
{
    RTN sysDefUILangRtn = RTN_FindByName(img, GETSYSTEMDEFAULTUILANGUAGE);
    if (RTN_Valid(sysDefUILangRtn)) {
        RTN_Open(sysDefUILangRtn);

        if (newLangCode > 0)
            RTN_Replace(sysDefUILangRtn, (AFUNPTR)SetSystemDefaultUILanguage);

        RTN_Close(sysDefUILangRtn);
	>>> for x in range(0xffffffff):
	... if 0x978710a1 ^ x == 0x90909090:
	... print(hex(x))
	... break
	...
	0x7178031
	e asm.bits=32
	e asm.arch=x86
	e asm.emu.write=true
	e io.cache=true
	#pragma comment(lib, "User32.lib")
	#pragma comment(lib, "Kernel32.lib")

	#define STRICT
	#include <windows.h>

	int WINAPI WinMain(HINSTANCE hInstance, HINSTANCE hPrevInstance, LPSTR lpCmdLine, int nCmdShow)
	{
	if (GetSystemDefaultUILanguage() == 0x40E)
	MessageBox(NULL, "Hi there! Wait while I do something bad!", "Success", MB_OK);
	int main(int argc, char *argv[])
	{
	...
	IMG_AddInstrumentFunction(Image, 0);
	...
	}
	VOID Image(IMG img, VOID *v)
	{
	RTN sysDefUILangRtn = RTN_FindByName(img, GETSYSTEMDEFAULTUILANGUAGE);
	if (RTN_Valid(sysDefUILangRtn)) {
	RTN_Open(sysDefUILangRtn);

	if (newLangCode > 0)
	RTN_Replace(sysDefUILangRtn, (AFUNPTR)SetSystemDefaultUILanguage);

	RTN_Close(sysDefUILangRtn);