10001027 >/$ 55 PUSH EBP 10001028 |. 8BEC MOV EBP,ESP 1000102A |. 83C4 FC ADD ESP,-4 1000102D |. 60 PUSHAD 1000102E |. 8B75 08 MOV ESI,DWORD PTR SS:[EBP+8] 10001031 |. 0FB706 MOVZX EAX,WORD PTR DS:[ESI] 10001034 |. 83E8 02 SUB EAX,2 10001037 |. 66:8945 FE MOV WORD PTR SS:[EBP-2],AX 1000103B |. 83C6 02 ADD ESI,2 1000103E |. 8B7D 0C MOV EDI,DWORD PTR SS:[EBP+C] 10001041 |. EB 41 JMP SHORT rosecryp.10001084 10001043 |> 8B07 /MOV EAX,DWORD PTR DS:[EDI] 10001045 |. 8B5F 04 |MOV EBX,DWORD PTR DS:[EDI+4] 10001048 |. 40 |INC EAX 10001049 |. 25 FF000000 |AND EAX,0FF 1000104E |. 0FB64C38 08 |MOVZX ECX,BYTE PTR DS:[EAX+EDI+8] 10001053 |. 03D9 |ADD EBX,ECX 10001055 |. 81E3 FF000000 |AND EBX,0FF 1000105B |. 0FB6543B 08 |MOVZX EDX,BYTE PTR DS:[EBX+EDI+8] 10001060 |. 8907 |MOV DWORD PTR DS:[EDI],EAX 10001062 |. 895F 04 |MOV DWORD PTR DS:[EDI+4],EBX 10001065 |. 884C3B 08 |MOV BYTE PTR DS:[EBX+EDI+8],CL 10001069 |. 885438 08 |MOV BYTE PTR DS:[EAX+EDI+8],DL 1000106D |. 03D1 |ADD EDX,ECX 1000106F |. 81E2 FF000000 |AND EDX,0FF 10001075 |. 8A443A 08 |MOV AL,BYTE PTR DS:[EDX+EDI+8] 10001079 |. 8A1E |MOV BL,BYTE PTR DS:[ESI] 1000107B |. 32C3 |XOR AL,BL 1000107D |. 8806 |MOV BYTE PTR DS:[ESI],AL 1000107F |. 46 |INC ESI 10001080 |. 66:FF4D FE |DEC WORD PTR SS:[EBP-2] 10001084 |> 66:837D FE 00 CMP WORD PTR SS:[EBP-2],0 10001089 |.^75 B8 \JNZ SHORT rosecryp.10001043 1000108B |. 61 POPAD 1000108C |. C9 LEAVE 1000108D \. C2 0800 RETN 8