_WinMain16():
	KERNEL32.CreateMutexA
	KERNEL32.GetTickCount
	NTDLL.RtlGetLastWin32Error
	KERNEL32.CreateThread
	ADVAPI32.AbortSystemShutdownA
	KERNEL32.Sleep

sub_401398(01d1):
	KERNEL32.lstrcpyA
	USER32.wsprintfA
	WS2_32.gethostbyname
	WS2_32.socket
	WS2_32.ntohs
	WS2_32.connect
	WS2_32.send
	WS2_32.recv
	WS2_32.closesocket

	"\\\\%s\\ipc$"
	"%s%c"

sub_401210(1cb4):
	USER32.wsprintfA
	KERNEL32._lcreat
	KERNEL32._lwrite
	KERNEL32._lclose

	"%i"
	"c:\\win2.log"

sub_4010D2(2796):
	WS2_32.gethostname
	WS2_32.gethostbyname
	WS2_32.inet_ntoa
	KERNEL32.lstrcpyA

	"127.0.0.1"

sub_40127D(3087):
	WS2_32.ntohs
	WS2_32.socket
	WS2_32.connect
	KERNEL32.lstrcpyA
	USER32.wsprintfA
	WS2_32.send
	KERNEL32.Sleep
	WS2_32.closesocket

sub_401153(34af):
	WS2_32.ntohs
	WS2_32.socket
	WS2_32.connect
	WS2_32.closesocket

sub_401B08(3762):
	WS2_32.send
	WS2_32.recv
	USER32.wsprintfA
	WS2_32.ntohs
	WS2_32.socket
	WS2_32.connect
	WS2_32.closesocket
	KERNEL32.GetModuleFileNameA
	KERNEL32._lopen
	KERNEL32._lread
	KERNEL32._lclose

	"USER"
	"PASS"
	"PORT"
	"%i.%i.%i.%i"
	"RETR"
	"QUIT"

sub_4011D5(518e):
	WS2_32.inet_addr
	WS2_32.gethostbyname

sub_401E65(80c4):
	WS2_32.socket
	WS2_32.ntohs
	WS2_32.bind
	WS2_32.listen
	WS2_32.closesocket
	WS2_32.accept
	KERNEL32.CreateThread
	KERNEL32.Sleep

sub_401028(a0f6):
	WS2_32.WSAStartup

sub_40159E(a6cc):
	USER32.wsprintfA
	WS2_32.ntohs
	WS2_32.socket
	WS2_32.connect
	WS2_32.send
	WS2_32.recv
	KERNEL32.Sleep
	WS2_32.closesocket

	"\\\\%s\\ipc$"
	"ë"
	"ë"

sub_401045(acd0):
	WS2_32.inet_addr

sub_401A84(ae07):
	"5.1"
	"5.0"

sub_401EF0(b707):
	WS2_32.inet_addr
	USER32.wsprintfA
	KERNEL32.GetModuleFileNameA
	KERNEL32.WinExec
	KERNEL32.Sleep

	"%i.%i.%i.%i"
	" "

sub_4020D7(f635):
	KERNEL32.GetModuleFileNameA
	KERNEL32.GetWindowsDirectoryA
	KERNEL32.CopyFileA
	ADVAPI32.RegOpenKeyA
	ADVAPI32.RegSetValueExA
	ADVAPI32.RegCloseKey

	"\\"
	"SOFTWARE\\Microsoft\\Windows\\CurrentVersi"...