Symantec has so many nice diagrams in their Stuxnet dossier that we thought we should draw one, too. Here is the state machine of the 417 attack code.

 | 417-state-machine