4a_4b

4a_4b

Figure 4 – Encryption routine used across the samples (decompiled and disassembled)