_WinMain16():
	KERNEL32.GetModuleFileNameA
	USER32.MessageBoxA
	KERNEL32.SetFileAttributesA
	KERNEL32.GetModuleHandleA
	KERNEL32.GetProcAddress
	KERNEL32.WriteProcessMemory

sub_outside():
	KERNEL32.GetModuleHandleA
	KERNEL32.HeapDestroy
	KERNEL32.VirtualFree

sub_401000(344b):
	KERNEL32.LoadLibraryA
	KERNEL32.FreeLibrary

	"ntdll.dll"
	"RtlDecompressBuffer"
	"RtlGetCompressionWorkSpaceSize"

sub_4015A2(3a7c):
	KERNEL32.VirtualProtectEx
	NTDLL.ZwUnmapViewOfSection
	KERNEL32.GetModuleHandleA
	KERNEL32.GetProcAddress
	KERNEL32.SetThreadContext

	"WriteProcessMemory"
	"kernel32.dll"

sub_4017DA(4af1):
	ADVAPI32.GetUserNameA

	"USER"
	"CurrentUser"

sub_40171B(4c70):
	KERNEL32.CreateFileA
	KERNEL32.GetFileSize
	KERNEL32.ReadFile

sub_401707(5d2d):
	KERNEL32.ResumeThread

sub_405FA0(9db0):
	KERNEL32.GetModuleHandleA
	KERNEL32.GetProcAddress

	"WriteProcessMemory"
	"kernel32.dll"

sub_405F83(9db0):
	KERNEL32.GetModuleHandleA
	KERNEL32.GetProcAddress

	"SetThreadContext"
	"kernel32.dll"

sub_405F66(9db0):
	KERNEL32.GetModuleHandleA
	KERNEL32.GetProcAddress

	"ZwUnmapViewOfSection"
	"ntdll.dll"

sub_4014E8(c3c8):
	KERNEL32.CreateProcessA
	KERNEL32.GetThreadContext
	KERNEL32.ReadProcessMemory