Saying that, any proper investigation would read the firmware from the flash and identify the decryption routing anyway