diff --git a/de4dot.code/deobfuscators/CryptoObfuscator/ResourceDecrypter.cs b/de4dot.code/deobfuscators/CryptoObfuscator/ResourceDecrypter.cs index 95a26ae2..6fe509e1 100644 --- a/de4dot.code/deobfuscators/CryptoObfuscator/ResourceDecrypter.cs +++ b/de4dot.code/deobfuscators/CryptoObfuscator/ResourceDecrypter.cs @@ -76,6 +76,15 @@ namespace de4dot.deobfuscators.CryptoObfuscator { sourceStream = memStream; } + if ((flags & 4) != 0) { + var memStream = new MemoryStream((int)resourceStream.Length); + sourceStream.Position = 0; + for (int i = 0; i < sourceStream.Length; i++) + memStream.WriteByte((byte)~sourceStream.ReadByte()); + + sourceStream = memStream; + } + if (sourceStream is MemoryStream) { var memStream = (MemoryStream)sourceStream; return memStream.ToArray();