diff --git a/src/util/ppt97.js b/src/util/ppt97.js index 4b5786a..f1f54df 100644 --- a/src/util/ppt97.js +++ b/src/util/ppt97.js @@ -458,6 +458,11 @@ exports.decrypt = function decrypt(currCfb, powerPointBlob, password, input) { CFB.utils.cfb_add(output, 'Current User', newCurrentUserBuffer); CFB.utils.cfb_add(output, 'PowerPoint Document', powerPointDecBuf); + const Pictures = CFB.find(currCfb, 'Pictures'); + if (Pictures) { + CFB.utils.cfb_add(output, 'Pictures', Pictures.content); + } + const SummaryInformation = CFB.find(currCfb, '\u0005SummaryInformation'); if (SummaryInformation) { CFB.utils.cfb_add(output, '\u0005SummaryInformation', SummaryInformation.content); diff --git a/tests/data/decrypt/rc4_out_success.ppt b/tests/data/decrypt/rc4_out_success.ppt index fd0359c..ad91a49 100644 Binary files a/tests/data/decrypt/rc4_out_success.ppt and b/tests/data/decrypt/rc4_out_success.ppt differ diff --git a/tests/data/decrypt/rc4_pass.ppt b/tests/data/decrypt/rc4_pass.ppt index bbaf1e3..d6e8a23 100644 Binary files a/tests/data/decrypt/rc4_pass.ppt and b/tests/data/decrypt/rc4_pass.ppt differ