sub_outside():
	USER32.wsprintfA
	KERNEL32.ExitProcess

sub_401321(0ee2):
	KERNEL32.GetModuleFileNameA
	KERNEL32.SetFileAttributesA
	KERNEL32.GetFileAttributesA
	KERNEL32.GetTempPathA
	KERNEL32.lstrcpy
	KERNEL32.lstrcat
	KERNEL32.CreateFileA
	KERNEL32.WriteFile
	KERNEL32.CloseHandle
	KERNEL32.CreateProcessA

	"removalfile.bat"
	"@echo	off\r\n:df\r\ndel %1\r\nif exist %1 got"...
	" \""
	"\""

sub_401169(0ffc):
	KERNEL32.GetSystemDirectoryA
	KERNEL32.lstrcpy
	KERNEL32.lstrcat
	KERNEL32.SetFileAttributesA
	KERNEL32.GetModuleHandleA
	KERNEL32.FindResourceA
	KERNEL32.LoadResource
	KERNEL32.LockResource
	KERNEL32.SizeofResource

	"\\"
	"BIN"

sub_401000(3a7e):
	KERNEL32.CreateFileA
	KERNEL32.WriteFile
	KERNEL32.CloseHandle

sub_401059(6454):
	KERNEL32.lstrlen
	KERNEL32.GetModuleFileNameA
	KERNEL32.CreateFileA
	KERNEL32.CloseHandle
	KERNEL32.SetFilePointer
	KERNEL32.ReadFile
	KERNEL32.WriteFile

	"azxcdsweq"

sub_4012A9(78d9):
	KERNEL32.LoadLibraryA
	KERNEL32.GetProcAddress
	KERNEL32.FreeLibrary

	"dll"
	"Start"

sub_40120F(ea41):
	USER32.GetCursorPos
	KERNEL32.GetSystemTimeAsFileTime
	KERNEL32.GetTickCount
	KERNEL32.lstrcpy