In reply to Jake.

Jake,

The section titled: "The Dropper -- Order of Operations (Continued)" should help with this. I discuss the basic functionality of decrypting the data. If you want to learn more, you can get more information on parsing bitmaps at MSDN.