_WinMain16():
	KERNEL32.GetTickCount
	KERNEL32.CreateMutexA
	NTDLL.RtlGetLastWin32Error
	KERNEL32.CreateThread
	ADVAPI32.AbortSystemShutdownA
	KERNEL32.Sleep
	USER32.MessageBoxA

sub_401B1B(13d4):
	IPHLPAPI.IcmpCreateFile
	IPHLPAPI.IcmpSendEcho
	IPHLPAPI.IcmpCloseHandle

sub_401F4B(150c):
	KERNEL32.GetCurrentThread
	KERNEL32.SetThreadPriority
	WININET.InternetGetConnectedState
	KERNEL32.Sleep
	WS2_32.inet_addr
	USER32.wsprintfA
	KERNEL32.GetModuleFileNameA
	KERNEL32.WinExec

	"%i.%i.%i.%i"
	" "

sub_4010D2(2796):
	WS2_32.gethostname
	WS2_32.gethostbyname
	WS2_32.inet_ntoa
	KERNEL32.lstrcpyA

	"127.0.0.1"

sub_401153(34af):
	WS2_32.ntohs
	WS2_32.socket
	WS2_32.connect
	WS2_32.closesocket

sub_4011D5(518e):
	WS2_32.inet_addr
	WS2_32.gethostbyname

sub_401EC0(80c4):
	WS2_32.socket
	WS2_32.ntohs
	WS2_32.bind
	WS2_32.listen
	WS2_32.closesocket
	WS2_32.accept
	KERNEL32.CreateThread
	KERNEL32.Sleep

sub_401AED(82de):
	ADVAPI32.RegOpenKeyA
	ADVAPI32.RegDeleteValueA
	ADVAPI32.RegCloseKey

sub_40219B(9a3e):
	KERNEL32.GetModuleFileNameA
	KERNEL32.GetWindowsDirectoryA
	KERNEL32.CopyFileA
	ADVAPI32.RegOpenKeyA
	ADVAPI32.RegSetValueExA
	ADVAPI32.RegCloseKey

	"\\"
	"SOFTWARE\\Microsoft\\Windows\\CurrentVersi"...
	"ssgrate.exe"
	"drvsys.exe"
	"Drvddll_exe"

sub_401028(a0f6):
	WS2_32.WSAStartup

sub_401583(a6cc):
	USER32.wsprintfA
	WS2_32.ntohs
	WS2_32.socket
	WS2_32.connect
	WS2_32.send
	WS2_32.recv
	KERNEL32.Sleep
	WS2_32.closesocket

	"\\\\%s\\ipc$"
	"ë"
	"ë"

sub_401045(acd0):
	WS2_32.inet_addr

sub_401A69(ae07):
	"5.1"
	"5.0"

sub_40126C(c0e6):
	WS2_32.ntohs
	WS2_32.socket
	WS2_32.connect
	KERNEL32.lstrcpyA
	USER32.wsprintfA
	WS2_32.send
	KERNEL32.Sleep
	WS2_32.closesocket

sub_40137D(ebcc):
	KERNEL32.lstrcpyA
	USER32.wsprintfA
	WS2_32.gethostbyname
	WS2_32.socket
	WS2_32.ntohs
	WS2_32.connect
	WS2_32.send
	WS2_32.recv
	WS2_32.closesocket

	"\\\\%s\\ipc$"
	"%s%c"

sub_401B59(fce5):
	WS2_32.send
	WS2_32.recv
	USER32.wsprintfA
	WS2_32.ntohs
	WS2_32.socket
	WS2_32.connect
	WS2_32.closesocket
	KERNEL32.GetModuleFileNameA
	KERNEL32._lopen
	KERNEL32._lread
	KERNEL32._lclose

	"USER"
	"PASS"
	"PORT"
	"%i.%i.%i.%i"
	"RETR"
	"QUIT"

sub_401210(fd81):
	KERNEL32._lcreat
	KERNEL32._llseek
	KERNEL32._lwrite
	KERNEL32._lclose

	"c:\\ftplog.txt"
	"\r\n"