Using Ghidra's XORMemoryScript.java plugin to XOR decode strings in a duqu2 sample.
No download links available.