4a_4b | WeLiveSecurity

4a_4b

Figure 4 – Encryption routine used across the samples (decompiled and disassembled)