sub_outside():
	KERNEL32.Sleep
	KERNEL32.CreateFileA
	KERNEL32.CreateFileMappingA
	KERNEL32.MapViewOfFile
	KERNEL32.GetFileSize
	KERNEL32.UnmapViewOfFile
	KERNEL32.CloseHandle
	NTDLL.RtlFreeHeap
	KERNEL32.GetVersionExA
	KERNEL32.GetModuleHandleA
	KERNEL32.GetCommandLineA
	KERNEL32.GetStartupInfoA
	KERNEL32.GetModuleFileNameA
	NTDLL.RtlReAllocateHeap
	NTDLL.RtlDeleteCriticalSection

sub_41EC77(0126):
	KERNEL32.SetUnhandledExceptionFilter

sub_401EB0(02ff):
	KERNEL32.CreateFileA
	KERNEL32.ReadFile
	KERNEL32.CloseHandle

sub_40A6A0(0359):
	ADVAPI32.RegOpenKeyExA
	ADVAPI32.RegQueryValueExA
	ADVAPI32.RegCloseKey
	KERNEL32.LoadLibraryA
	KERNEL32.GetProcAddress

	"Software\\Microsoft\\WAB\\DLLPath"

sub_410BA0(05e6):
	WS2_32.htons

sub_40EDF0(063b):
	WS2_32.socket
	WS2_32.inet_addr
	WS2_32.htons
	WS2_32.connect
	WS2_32.closesocket

sub_41EC64(088b):
	KERNEL32.SetUnhandledExceptionFilter

sub_40C950(08b0):
	KERNEL32.Sleep
	KERNEL32.WaitForSingleObject

sub_4073E0(08b7):
	KERNEL32.VirtualFree

sub_4069B0(0a6c):
	ADVAPI32.RegCreateKeyExA
	ADVAPI32.RegSetValueExA

sub_409E30(0e2b):
	KERNEL32.GetCurrentThread
	KERNEL32.SetThreadPriority
	KERNEL32.Sleep
	WS2_32.inet_ntoa
	KERNEL32.CopyFileA

sub_404C60(0f6e):
	WS2_32.htons

sub_4163B0(101c):
	WS2_32.gethostname

sub_421FEC(10cf):
	NTDLL.RtlLeaveCriticalSection

sub_4033F0(1215):
	KERNEL32.GetCurrentDirectoryA
	WININET.InternetOpenA
	WININET.InternetConnectA
	WININET.HttpOpenRequestA
	WININET.HttpSendRequestA
	WININET.HttpQueryInfoA
	KERNEL32.CreateFileA
	WININET.InternetReadFile
	KERNEL32.WriteFile
	KERNEL32.CloseHandle
	KERNEL32.WinExec
	WININET.InternetCloseHandle

sub_41D5C5(128c):
	KERNEL32.VirtualAlloc

sub_421AC1(1387):
	KERNEL32.SetFilePointer
	NTDLL.RtlGetLastWin32Error

sub_4200DF(13fb):
	KERNEL32.GetModuleFileNameA

	"C:\\m_unpacker\\packed.exe"

sub_401FC0(14f1):
	KERNEL32.lstrcpyn
	USER32.CharLowerA
	KERNEL32.lstrcmp

sub_415690(18fd):
	"--\r\n"

sub_4156E0(1f04):
	KERNEL32.lstrlen

sub_4160F0(1f30):
	WS2_32.select
	WS2_32.WSAGetLastError
	USER32.wsprintfA
	WS2_32.send
	KERNEL32.Sleep

	"connection::put_data() unexpected error"...
	"connection::put_data() unexpected error"...

sub_404DB0(2153):
	WS2_32.inet_ntoa
	WS2_32.socket
	WS2_32.htons
	WS2_32.connect
	WS2_32.send
	WS2_32.recv
	WS2_32.closesocket

sub_421394(219a):
	KERNEL32.GetOEMCP
	KERNEL32.GetACP

sub_40A7C0(21e2):
	KERNEL32.FreeLibrary

sub_41D50E(2299):
	NTDLL.RtlReAllocateHeap
	NTDLL.RtlAllocateHeap
	KERNEL32.VirtualAlloc
	NTDLL.RtlFreeHeap

sub_4139F0(24b3):
	"ONCE"
	"TWICE"
	"THRICE"
	"-1"

sub_41D183(2585):
	NTDLL.RtlAllocateHeap

sub_419130(25d3):
	KERNEL32.CreateEventA

sub_413B10(2865):
	KERNEL32.lstrlen
	KERNEL32.Sleep

	"%u.%u.%u"

sub_41B330(2998):
	NTDLL.RtlGetLastWin32Error
	KERNEL32.TlsGetValue
	KERNEL32.TlsSetValue
	KERNEL32.GetCurrentThreadId
	NTDLL.RtlRestoreLastWin32Error

sub_40F480(2a62):
	WS2_32.send
	WS2_32.WSAGetLastError
	NTDLL.RtlGetLastWin32Error

sub_4190E0(2b28):
	KERNEL32.CloseHandle

sub_4056D0(2d70):
	KERNEL32.GetCurrentThread
	KERNEL32.SetThreadPriority
	USER32.FindWindowA
	USER32.FindWindowExA
	USER32.SendMessageA
	KERNEL32.Sleep

sub_4120B0(2ecc):
	KERNEL32.lstrlen

sub_42200E(3072):
	NTDLL.RtlEnterCriticalSection
	NTDLL.RtlLeaveCriticalSection

sub_419160(31e7):
	KERNEL32.WaitForSingleObject

sub_419120(31f7):
	KERNEL32.ReleaseMutex

sub_419180(31f7):
	KERNEL32.SetEvent

sub_403950(33a5):
	KERNEL32.GetCurrentThread
	KERNEL32.SetThreadPriority
	WININET.InternetOpenA
	WININET.InternetConnectA
	WININET.InternetCloseHandle
	KERNEL32.Sleep

	"?a=%d&d=0:0:%d:%d:%s:%04x"

sub_40F1E0(3436):
	WS2_32.inet_addr
	WS2_32.gethostbyname
	WS2_32.htons
	WS2_32.WSASetLastError

sub_408C40(35d7):
	KERNEL32.GetCurrentThread
	KERNEL32.SetThreadPriority

sub_406730(3787):
	ADVAPI32.RegCreateKeyExA
	ADVAPI32.RegSetValueExA

sub_41E70A(3814):
	NTDLL.RtlEnterCriticalSection

sub_4202A3(3c57):
	KERNEL32.GetStartupInfoA
	KERNEL32.GetFileType
	KERNEL32.GetStdHandle
	KERNEL32.LockResource

sub_42067F(3cd4):
	KERNEL32.LoadLibraryA
	KERNEL32.GetProcAddress

	"user32.dll"
	"MessageBoxA"
	"GetActiveWindow"
	"GetLastActivePopup"
	"GetUserObjectInformationA"
	"GetProcessWindowStation"

sub_4190C0(3cdb):
	KERNEL32.CreateMutexA

sub_41BEF0(3fd7):
	KERNEL32.TlsFree

sub_41EA9D(4141):
	KERNEL32.GetCurrentProcess
	KERNEL32.TerminateProcess

sub_422752(414a):
	KERNEL32.MultiByteToWideChar

sub_421E10(428c):
	KERNEL32.SetStdHandle

sub_40F540(431d):
	WS2_32.recv
	WS2_32.WSAGetLastError
	NTDLL.RtlGetLastWin32Error

sub_412CA0(4497):
	KERNEL32.Sleep

	"smtp"
	"EHLO	%s"
	"HELO	%s"
	"auth"
	"login"

sub_40BA70(45a3):
	WS2_32.socket
	WS2_32.inet_addr
	WS2_32.htons
	WS2_32.connect
	WS2_32.closesocket

sub_410A50(45d7):
	WS2_32.htons

sub_41B4E8(45fd):
	KERNEL32.GetModuleHandleA
	KERNEL32.GetProcAddress
	KERNEL32.TlsSetValue
	KERNEL32.GetCurrentThreadId

	"kernel32.dll"
	"FlsAlloc"
	"FlsGetValue"
	"FlsSetValue"
	"FlsFree"

sub_413870(4628):
	KERNEL32.FreeLibrary

sub_415460(4685):
	"\n\r\n"
	"This is a multi-part message in MIME fo"...
	"\n\r\n"
	"Content-description: Mail message body\r"...
	"Content-Transfer-Encoding: 7BIT\r\n"
	"Content-Type:	text/%s; charset=%s\r\n\r\n"
	"\n\r\n"
	""

sub_40B1E0(4790):
	KERNEL32.GetCurrentThreadId

sub_404B60(47b4):
	WS2_32.socket
	WS2_32.htons
	KERNEL32.Sleep
	WS2_32.connect
	WS2_32.closesocket
	WS2_32.select
	WS2_32.send

sub_412210(4859):
	KERNEL32.lstrlen

sub_418F90(486d):
	KERNEL32.CloseHandle

sub_421D75(48c7):
	KERNEL32.InitializeCriticalSection

sub_406AE0(4968):
	KERNEL32.WaitForSingleObject
	KERNEL32.SetEvent

sub_419190(49be):
	KERNEL32.ResetEvent

sub_414280(4a79):
	WS2_32.gethostname
	WS2_32.gethostbyname
	KERNEL32.lstrcpyn
	KERNEL32.GetSystemTime
	KERNEL32.SystemTimeToFileTime

	"%08x"
	"LocalHost"
	"Message-ID: <%04x%08.8lx$%08.8lx$%s@%s>"...

sub_401D10(4afa):
	KERNEL32.TerminateThread

sub_4082D0(4c83):
	WS2_32.socket
	WS2_32.WSAGetLastError

sub_405390(4ccd):
	KERNEL32.GetCurrentThread
	KERNEL32.SetThreadPriority
	KERNEL32.GetCurrentThreadId
	WS2_32.inet_ntoa
	KERNEL32.Sleep

sub_41AB5D(4f5e):
	NTDLL.RtlEnterCriticalSection

sub_41ABAF(4f5e):
	NTDLL.RtlLeaveCriticalSection

sub_414370(502b):
	KERNEL32.lstrlen

	"\r\n "
	"\r\n "

sub_406670(5096):
	ADVAPI32.RegCreateKeyExA
	ADVAPI32.RegQueryValueExA

sub_4109A0(5192):
	WS2_32.htons
	WS2_32.htonl

sub_4030C0(525e):
	KERNEL32.MoveFileA
	WININET.InternetOpenA
	WININET.InternetConnectA
	WININET.HttpOpenRequestA
	WININET.HttpSendRequestA
	WININET.HttpQueryInfoA
	KERNEL32.CreateFileA
	WININET.InternetReadFile
	KERNEL32.WriteFile
	KERNEL32.CloseHandle
	WININET.InternetCloseHandle

sub_421E8C(52a1):
	KERNEL32.SetStdHandle

sub_41C0A8(55d4):
	KERNEL32.VirtualQuery
	KERNEL32.GetSystemInfo
	KERNEL32.VirtualAlloc
	KERNEL32.VirtualProtect

sub_421C4E(5651):
	KERNEL32.WideCharToMultiByte

sub_414220(5723):
	"QUIT\r\n"

sub_402FE0(5743):
	WININET.HttpOpenRequestA
	WININET.HttpSendRequestA
	WININET.InternetCloseHandle
	WININET.InternetReadFile

sub_41D132(5769):
	KERNEL32.HeapCreate
	KERNEL32.HeapDestroy

sub_420529(58c9):
	NTDLL.RtlAllocateHeap

sub_41CFDD(5be9):
	NTDLL.RtlDeleteCriticalSection

sub_42151E(5cb8):
	KERNEL32.IsBadWritePtr

sub_421502(5cb8):
	KERNEL32.IsBadReadPtr

sub_40AEA0(6179):
	KERNEL32.VirtualAlloc

sub_410D50(6254):
	WS2_32.htons

sub_407140(631f):
	KERNEL32.CreateFileA
	KERNEL32.CreateFileMappingA
	KERNEL32.MapViewOfFile
	KERNEL32.GetFileSize
	KERNEL32.VirtualAlloc
	KERNEL32.UnmapViewOfFile
	KERNEL32.CloseHandle

sub_41FCEB(63d5):
	KERNEL32.UnhandledExceptionFilter

sub_420181(6487):
	KERNEL32.GetEnvironmentStringsW
	NTDLL.RtlGetLastWin32Error
	KERNEL32.WideCharToMultiByte
	KERNEL32.FreeEnvironmentStringsW
	KERNEL32.GetEnvironmentStrings
	KERNEL32.FreeEnvironmentStringsA

sub_420778(64e8):
	KERNEL32.VirtualQuery
	KERNEL32.InterlockedExchange

sub_413410(64ec):
	KERNEL32.Sleep

sub_4218B5(6848):
	KERNEL32.GetLocaleInfoA

sub_40BAE0(6928):
	WININET.InternetGetConnectedState
	WININET.InternetOpenA
	WININET.InternetConnectA
	WININET.HttpOpenRequestA
	WININET.HttpSendRequestA
	WININET.InternetCloseHandle
	KERNEL32.Sleep

sub_4106A0(6b48):
	NTDLL.RtlGetLastWin32Error

sub_4164F0(6be1):
	WS2_32.closesocket

sub_405FB0(715d):
	ADVAPI32.RegOpenKeyExA
	ADVAPI32.RegQueryValueExA

sub_408780(723c):
	KERNEL32.GetTickCount

sub_41C18B(72cc):
	KERNEL32.LCMapStringW
	NTDLL.RtlGetLastWin32Error
	KERNEL32.MultiByteToWideChar
	KERNEL32.WideCharToMultiByte
	KERNEL32.LCMapStringA

sub_419D24(736f):
	NTDLL.RtlAllocateHeap

sub_4091D0(744e):
	KERNEL32.GetVersionExA
	KERNEL32.LoadLibraryA
	KERNEL32.GetProcAddress
	KERNEL32.MultiByteToWideChar
	KERNEL32.WideCharToMultiByte

sub_415CE0(74f3):
	WS2_32.htons
	WS2_32.getservbyname
	WS2_32.inet_addr
	WS2_32.gethostbyname
	WS2_32.socket
	WS2_32.setsockopt
	WS2_32.connect
	KERNEL32.Sleep
	WS2_32.WSAGetLastError
	USER32.wsprintfA
	WS2_32.ioctlsocket
	WS2_32.getsockopt

	"tcp"
	"unexpected error %d from winsock"

sub_40C7C0(7574):
	WS2_32.WSAStartup

sub_41D1F6(76df):
	KERNEL32.VirtualFree
	NTDLL.RtlFreeHeap

sub_421078(7906):
	KERNEL32.GetCPInfo

sub_4164B0(7964):
	WS2_32.closesocket

sub_4021E0(79db):
	KERNEL32.lstrcpy
	KERNEL32.lstrlen
	KERNEL32.lstrcat
	KERNEL32.FindFirstFileA
	KERNEL32.FindNextFileA
	KERNEL32.Sleep
	KERNEL32.FindClose

sub_409710(7a6f):
	KERNEL32.GetCurrentThread
	KERNEL32.SetThreadPriority
	KERNEL32.GetCurrentDirectoryA
	KERNEL32.CreateDirectoryA
	KERNEL32.CopyFileA
	KERNEL32.Sleep

sub_421D85(7dab):
	KERNEL32.GetModuleHandleA
	KERNEL32.GetProcAddress
	KERNEL32.InitializeCriticalSectionAndSpinCount
	NTDLL.RtlRestoreLastWin32Error

	"kernel32.dll"
	"InitializeCriticalSectionAndSpinCount"

sub_42218A(814f):
	KERNEL32.FlushFileBuffers
	NTDLL.RtlGetLastWin32Error

sub_4137C0(84aa):
	KERNEL32.GetModuleHandleA

sub_4067D0(8580):
	ADVAPI32.RegCreateKeyExA
	ADVAPI32.RegQueryInfoKeyA
	ADVAPI32.RegEnumValueA

sub_4062A0(88c1):
	ADVAPI32.RegOpenKeyExA
	ADVAPI32.RegQueryValueExA
	ADVAPI32.RegSetValueExA
	ADVAPI32.RegCloseKey

sub_40ABB0(88f9):
	KERNEL32.GetCurrentThread
	KERNEL32.SetThreadPriority
	KERNEL32.Sleep

sub_419758(8af0):
	NTDLL.RtlUnwind

sub_4141F0(8b59):
	"QUIT\r\n"

sub_41FB3B(8f02):
	KERNEL32.GetModuleFileNameA
	KERNEL32.GetStdHandle
	KERNEL32.WriteFile

	""
	"..."
	"Runtime Error!\n\nProgram: "
	"\n\n"
	"Microsoft Visual C++ Runtime Library"

sub_40AC50(8fb0):
	KERNEL32.Sleep

sub_40B140(9472):
	KERNEL32.VirtualFree

sub_41BEB6(9954):
	KERNEL32.TlsFree

sub_410810(9af0):
	WS2_32.htons

sub_40BF40(9b22):
	KERNEL32.GetSystemDirectoryA
	KERNEL32.CopyFileA
	KERNEL32.SetCurrentDirectoryA
	KERNEL32.WinExec
	KERNEL32.CreateDirectoryA

sub_422246(a160):
	KERNEL32.SetFilePointer
	NTDLL.RtlGetLastWin32Error

sub_4141C0(a345):
	"QUIT\r\n"

sub_40BC80(a37a):
	ADVAPI32.RegOpenKeyExA
	ADVAPI32.RegQueryValueExA
	KERNEL32.CreateDirectoryA
	KERNEL32.SetCurrentDirectoryA

sub_41B313(a417):
	KERNEL32.TlsFree

sub_416350(a527):
	WS2_32.inet_addr
	WS2_32.gethostbyname
	WS2_32.WSAGetLastError

sub_404730(a798):
	KERNEL32.TerminateThread

sub_405940(ad57):
	KERNEL32.GetCurrentProcessId
	KERNEL32.CreateToolhelp32Snapshot
	KERNEL32.Module32First
	KERNEL32.Module32Next
	KERNEL32.CloseHandle
	KERNEL32.CreateFileA
	KERNEL32.GetFileSize

sub_41DCA6(ae67):
	KERNEL32.CloseHandle
	NTDLL.RtlGetLastWin32Error

sub_41A2B3(aeff):
	KERNEL32.RaiseException

sub_41EBA0(b2ae):
	NTDLL.RtlSizeHeap

sub_41AD1F(b408):
	KERNEL32.GetSystemTimeAsFileTime
	KERNEL32.GetCurrentProcessId
	KERNEL32.GetCurrentThreadId
	KERNEL32.GetTickCount
	KERNEL32.QueryPerformanceCounter

sub_422A31(b4cc):
	KERNEL32.SetEndOfFile
	NTDLL.RtlGetLastWin32Error

sub_402550(b501):
	KERNEL32.GetCurrentThread
	KERNEL32.SetThreadPriority
	KERNEL32.GetDriveTypeA
	KERNEL32.Sleep

sub_40A2D0(b528):
	USER32.wsprintfA
	ADVAPI32.RegOpenKeyExA
	ADVAPI32.RegQueryValueExA
	ADVAPI32.RegCloseKey

	"Software\\Microsoft\\Internet Account Man"...

sub_415AE0(bc73):
	ADVAPI32.RegOpenKeyExA
	ADVAPI32.RegQueryValueExA
	ADVAPI32.RegCloseKey
	KERNEL32.lstrcmpi

	"application/octet-stream"
	"Content-Type:	%s;\r\n	name=\"%s\"\r\n"

sub_41E82C(bec6):
	NTDLL.RtlAllocateHeap
	NTDLL.RtlReAllocateHeap

sub_420DD8(bf7b):
	KERNEL32.GetStringTypeW
	NTDLL.RtlGetLastWin32Error
	KERNEL32.MultiByteToWideChar
	KERNEL32.GetStringTypeA

sub_411FB0(bfe9):
	KERNEL32.lstrlen

sub_421F4C(c136):
	NTDLL.RtlEnterCriticalSection

sub_41D0E7(c36e):
	NTDLL.RtlEnterCriticalSection

sub_415F90(c444):
	WS2_32.select
	WS2_32.WSAGetLastError
	USER32.wsprintfA
	WS2_32.recv

	"connection::get_buffer() unexpected err"...
	"connection::get_buffer() unexpected err"...

sub_41D032(c70d):
	NTDLL.RtlLeaveCriticalSection

sub_421204(c71f):
	KERNEL32.GetCPInfo

sub_41E9D9(c884):
	KERNEL32.GetModuleHandleA
	KERNEL32.GetProcAddress
	KERNEL32.ExitProcess

	"mscoree.dll"
	"CorExitProcess"

sub_407E70(ca3d):
	WS2_32.htonl
	WS2_32.htons
	WS2_32.bind
	WS2_32.inet_addr
	WS2_32.WSASetLastError

sub_40BC40(cac3):
	KERNEL32.CreateFileA

sub_4193B2(cba9):
	NTDLL.RtlUnwind

sub_419224(cbf7):
	KERNEL32.ExitProcess

sub_4061E0(cca0):
	ADVAPI32.RegOpenKeyExA
	KERNEL32.GetSystemTime
	KERNEL32.SystemTimeToFileTime
	ADVAPI32.RegSetValueExA

sub_404800(cca4):
	WS2_32.gethostname
	WS2_32.gethostbyname
	KERNEL32.Sleep

sub_406CE0(cee6):
	KERNEL32.GetTickCount

sub_4105E0(d05a):
	WS2_32.connect
	WS2_32.WSAGetLastError
	WS2_32.closesocket
	WS2_32.setsockopt

sub_408ED0(d062):
	KERNEL32.TerminateThread

sub_40AB20(d10a):
	KERNEL32.TerminateThread

sub_40F3B0(d2c3):
	WS2_32.htons
	WS2_32.send
	WS2_32.WSAGetLastError
	NTDLL.RtlGetLastWin32Error

sub_4218F8(d361):
	KERNEL32.GetCPInfo
	KERNEL32.MultiByteToWideChar
	KERNEL32.WideCharToMultiByte

sub_41AB80(d432):
	NTDLL.RtlLeaveCriticalSection

sub_41AB2E(d432):
	NTDLL.RtlEnterCriticalSection

sub_405510(d4a8):
	USER32.FindWindowA
	USER32.FindWindowExA
	USER32.SendMessageA
	KERNEL32.Sleep

sub_422B72(d9a1):
	KERNEL32.ReadFile
	NTDLL.RtlGetLastWin32Error

sub_411360(da89):
	KERNEL32.Sleep

sub_4190F0(db57):
	KERNEL32.WaitForSingleObject

sub_419070(dbf5):
	KERNEL32.CreateThread

sub_414690(dca2):
	KERNEL32.GetLocalTime
	KERNEL32.GetTimeZoneInformation
	KERNEL32.lstrlen
	KERNEL32.GetSystemTime
	KERNEL32.SystemTimeToFileTime

	"<%s>"
	"Date:	%s, %.2d %s %.4d %.2d:%.2d:%.2d	%"...
	"From: %s\r\n"
	"%s%s,	%.2d %s	%.2d %.2d:%.2d:%.2d %+03d"...
	"Sender: %s\r\n"
	"Reply-to:	%s\r\n"
	"Sender: %s\r\n"
	"Reply-To: %s\r\n"
	"To: "
	"To: Undisclosed recipients:;\r\n"
	"Cc: "
	"Disposition-Notification-To: %s\r\n"
	"Return-Receipt-To: %s\r\n"
	"X-MSMail-Priority: Low\r\nX-Priority:	5\r\n"...
	"X-MSMail-Priority: High\r\nX-Priority: 1\r"...
	"Return-Path: %s\r\n"
	"User-Agent: Microsoft	Outlook	Express	6"...
	"X-Mailer: Microsoft Outlook Express 6.0"...
	"Subject: "
	" \""
	"----=_NextPart_%03d_%04X_%08.8lX.%08.8l"...
	"MIME-Version:	1.0\r\n"
	"MIME-Version: 1.0\r\n"
	"Content-Type:"
	"Content-Type:"
	" multipart/mixed;\r\n"
	"	multipart/mixed;\r\n"
	" boundary=\""
	"\""
	"\""
	"\r\nThis is a	multi-part message in MIME "...
	"\r\nThis	is a multi-part	message	in MIME	"...
	"Content-Transfer-Encoding: 7BIT\r\n"
	"Content-Transfer-Encoding: 7BIT\r\n"
	"Content-Type:	text/%s; charset=%s\r\n"
	"----=_NextPart"

sub_40CBE0(de76):
	WS2_32.WSACleanup

sub_406B60(e2f6):
	KERNEL32.CreateEventA

sub_40F2E0(e394):
	WS2_32.recv
	WS2_32.WSAGetLastError
	NTDLL.RtlGetLastWin32Error
	WS2_32.htons

sub_419020(e56e):
	KERNEL32.TerminateThread

sub_41DF58(e7a9):
	KERNEL32.WriteFile
	NTDLL.RtlGetLastWin32Error

sub_42153A(eaec):
	KERNEL32.IsBadCodePtr

sub_40BA20(eb3e):
	KERNEL32.OpenMutexA
	KERNEL32.CreateMutexA

sub_4108F0(eee7):
	WS2_32.htons

sub_41B30A(ef17):
	KERNEL32.TlsAlloc

sub_417290(efc0):
	KERNEL32.GetCurrentProcessId

sub_411F80(efee):
	USER32.CharNextA

sub_419875(f094):
	KERNEL32.GetSystemTimeAsFileTime

sub_4023D0(f277):
	KERNEL32.GetCurrentThread
	KERNEL32.SetThreadPriority
	KERNEL32.GetDriveTypeA

sub_406C20(f281):
	KERNEL32.CloseHandle

sub_407E30(f3b8):
	WS2_32.setsockopt

sub_4222C9(f816):
	KERNEL32.CreateFileA
	KERNEL32.GetFileType
	KERNEL32.CloseHandle
	NTDLL.RtlGetLastWin32Error

sub_412860(fa2c):
	KERNEL32.lstrlen

	"Content-Disposition: ATTACHMENT;\r\n file"...
	"Content-Transfer-Encoding: BASE64\r\n"

sub_408FC0(fad5):
	KERNEL32.GetVersionExA
	KERNEL32.LoadLibraryA
	KERNEL32.GetProcAddress
	KERNEL32.MultiByteToWideChar

sub_4138E0(fb87):
	KERNEL32.lstrlen

	"\r\n\r\n"
	"\r\r\n"
	"\r"
	"\r\n.\r\n"
	".\r\n"

sub_409C50(fbe9):
	WS2_32.gethostname
	WS2_32.gethostbyname

sub_4130B0(fca7):
	KERNEL32.lstrlen

	"No email address was found for the send"...
	"MAIL FROM:%s"
	"MAIL FROM:<%s>"
	"The SMTP server does not like	the sende"...
	"No email address was found for recipien"...
	"RCPT	TO:<%s>"
	"DATA\r\n"
	"SMTP server error accepting message dat"...

sub_409B00(fd5f):
	KERNEL32.TerminateThread