Function at 0x9ff160
Capabilities:
Send data
Send data on socket

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x150
mov eax, dword [0xa93064]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
xor ebx, ebx
push edi
mov eax, str.netascii
mov edi, str.octet
mov edx, dword [esi + 0x10]
mov dword [ebp - 0x14c], edx
cmp byte [edx + 0xd6e], bl
cmovne edi, eax
mov eax, dword [ebp + 0xc]
cmp eax, 7
ja case.0x9ff1a3.1
jmp dword [eax*4 + 0x9ff64c]
inc dword [esi + 0x18]
mov eax, dword [esi + 0x18]
cmp eax, dword [esi + 0x20]
jle 0x9ff1d5
pop edi
mov dword [esi + 8], 0xffffff9e
xor eax, eax
mov dword [esi], 3
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.009c04ba
mov esp, ebp
pop ebp
ret
mov eax, dword [esi + 0x14c]
cmp byte [edx + 0xd74], bl
mov byte [eax], bl
mov eax, dword [esi + 0x14c]
je 0x9ff223
mov byte [eax + 1], 2
mov eax, dword [esi + 0x10]
mov ecx, dword [esi + 0x14c]
add ecx, 4
mov dword [eax + 0x128], ecx
mov ebx, dword [edx + 0xc88]
mov eax, ebx
mov ecx, dword [edx + 0xc8c]
and eax, ecx
cmp eax, 0xffffffff
je 0x9ff227
push ecx
push ebx
push edx
call fcn.009e60b0
add esp, 0xc
jmp 0x9ff227
mov byte [eax + 1], 1
push 4
push 0
lea eax, [ebp - 0x148]
push eax
mov eax, dword [esi + 0x10]
push 0
mov eax, dword [eax + 0xcb4]
inc eax
push eax
call fcn.00a03670
mov ebx, eax
add esp, 0x14
test ebx, ebx
jne 0x9ff639
mov ecx, dword [ebp - 0x148]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x9ff260
sub ecx, edx
mov edx, edi
lea eax, [edx + 1]
mov dword [ebp - 0x150], eax
mov al, byte [edx]
inc edx
test al, al
jne 0x9ff274
sub edx, dword [ebp - 0x150]
mov eax, dword [esi + 0x13c]
sub eax, edx
sub eax, 4
cmp ecx, eax
jbe 0x9ff2c5
push str.TFTP_file_name_too_long
push dword [ebp - 0x14c]
call fcn.009d7dd0
push dword [ebp - 0x148]
call dword [0xa930fc]
add esp, 0xc
mov eax, 0x47
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.009c04ba
mov esp, ebp
pop ebp
ret
mov eax, dword [esi + 0x14c]
push 0
push edi
push 0
push dword [ebp - 0x148]
add eax, 2
push str._s_c_s_c
push dword [esi + 0x13c]
push eax
call fcn.009e7b30
mov ecx, dword [ebp - 0x148]
add esp, 0x1c
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x9ff2f6
sub ecx, edx
lea edx, [edi + 1]
mov al, byte [edi]
inc edi
test al, al
jne 0x9ff302
mov eax, dword [ebp - 0x14c]
sub edi, edx
add edi, 4
add edi, ecx
cmp byte [eax + 0x6bc], 0
jne 0x9ff578
cmp byte [eax + 0xd74], 0
je 0x9ff358
mov edx, dword [eax + 0xc88]
mov ecx, dword [eax + 0xc8c]
mov eax, edx
and eax, ecx
cmp eax, 0xffffffff
je 0x9ff358
push ecx
push edx
push str._I64d
lea eax, [ebp - 0x44]
push 0x40
push eax
call fcn.009e7b30
add esp, 0x14
jmp 0x9ff361
mov eax, 0x30
mov word [ebp - 0x44], ax
lea ebx, [edi + 6]
cmp ebx, dword [esi + 0x13c]
ja 0x9ff3aa
mov ecx, dword [esi + 0x14c]
mov edx, str.tsize
add ecx, edi
nop dword [eax]
mov al, byte [edx]
lea edx, [edx + 1]
mov byte [ecx], al
lea ecx, [ecx + 1]
test al, al
jne 0x9ff380
lea ecx, [ebp - 0x44]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x9ff394
sub ecx, edx
lea eax, [ecx + 1]
add eax, ebx
cmp eax, dword [esi + 0x13c]
jbe 0x9ff40b
push dword [esi + 0x140]
lea eax, [ebp - 0x44]
push 0xa6fee4
push 0x40
push eax
call fcn.009e7b30
push dword [esi + 0x1c]
lea eax, [ebp - 0x44]
push 0xa6fee4
push 0x40
push eax
call fcn.009e7b30
add esp, 0x20
push str.TFTP_buffer_too_small_for_options
push dword [ebp - 0x14c]
call fcn.009d7dd0
push dword [ebp - 0x148]
call dword [0xa930fc]
add esp, 0xc
mov eax, 0x47
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.009c04ba
mov esp, ebp
pop ebp
ret
mov ecx, dword [esi + 0x14c]
lea edx, [ebp - 0x44]
add ecx, ebx
mov al, byte [edx]
lea edx, [edx + 1]
mov byte [ecx], al
lea ecx, [ecx + 1]
test al, al
jne 0x9ff416
lea ecx, [ebp - 0x44]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x9ff430
push dword [esi + 0x140]
sub ecx, edx
lea eax, [ebp - 0x44]
push 0xa6fee4
push 0x40
push eax
lea edi, [ecx + 1]
add edi, ebx
call fcn.009e7b30
lea ebx, [edi + 8]
add esp, 0x10
cmp ebx, dword [esi + 0x13c]
ja 0x9ff49a
mov ecx, dword [esi + 0x14c]
mov edx, str.blksize
add ecx, edi
nop
mov al, byte [edx]
lea edx, [edx + 1]
mov byte [ecx], al
lea ecx, [ecx + 1]
test al, al
jne 0x9ff470
lea ecx, [ebp - 0x44]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x9ff484
sub ecx, edx
lea eax, [ecx + 1]
add eax, ebx
cmp eax, dword [esi + 0x13c]
jbe 0x9ff4b5
push dword [esi + 0x1c]
lea eax, [ebp - 0x44]
push 0xa6fee4
push 0x40
push eax
call fcn.009e7b30
add esp, 0x10
jmp 0x9ff3d6
mov ecx, dword [esi + 0x14c]
lea edx, [ebp - 0x44]
add ecx, ebx
mov al, byte [edx]
lea edx, [edx + 1]
mov byte [ecx], al
lea ecx, [ecx + 1]
test al, al
jne 0x9ff4c0
lea ecx, [ebp - 0x44]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x9ff4d4
push dword [esi + 0x1c]
sub ecx, edx
lea eax, [ebp - 0x44]
push 0xa6fee4
inc ecx
push 0x40
push eax
add ebx, ecx
call fcn.009e7b30
lea edi, [ebx + 8]
add esp, 0x10
cmp edi, dword [esi + 0x13c]
ja 0x9ff3d6
mov ecx, dword [esi + 0x14c]
mov edx, str.timeout
add ecx, ebx
mov al, byte [edx]
lea edx, [edx + 1]
mov byte [ecx], al
lea ecx, [ecx + 1]
test al, al
jne 0x9ff512
lea ecx, [ebp - 0x44]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x9ff526
sub ecx, edx
lea eax, [edi + 1]
add eax, ecx
cmp eax, dword [esi + 0x13c]
ja 0x9ff3d6
mov ecx, dword [esi + 0x14c]
lea edx, [ebp - 0x44]
add ecx, edi
nop dword [eax + eax]
mov al, byte [edx]
lea edx, [edx + 1]
mov byte [ecx], al
lea ecx, [ecx + 1]
test al, al
jne 0x9ff550
lea ecx, [ebp - 0x44]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x9ff564
mov eax, dword [ebp - 0x14c]
sub ecx, edx
inc edi
add edi, ecx
xor ebx, ebx
mov eax, dword [eax + 0x18]
mov eax, dword [eax + 0x44]
push dword [eax + 0xc]
add eax, 0x10
push eax
push 0
push edi
push dword [esi + 0x14c]
push dword [esi + 0x14]
call dword [sym.imp.WS2_32.dll_sendto]
cmp eax, edi
je 0x9ff5c7
push 0x100
lea eax, [ebp - 0x144]
push eax
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
push eax
call fcn.009e9b30
push eax
push 0xa6f90c
push dword [ebp - 0x14c]
call fcn.009d7dd0
add esp, 0x18
push dword [ebp - 0x148]
call dword [0xa930fc]
add esp, 4
mov eax, ebx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.009c04ba
mov esp, ebp
pop ebp
ret
push eax
push esi
cmp byte [edx + 0xd74], bl
je 0x9ff609
call fcn.009fe970
mov ebx, eax
jmp 0x9ff636
push eax
push esi
call fcn.009fe970
mov ebx, eax
jmp 0x9ff636
push eax
push esi
call fcn.009fe930
mov ebx, eax
jmp 0x9ff636
pop edi
mov dword [esi], 3
mov eax, ebx
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.009c04ba
mov esp, ebp
pop ebp
ret
push str.tftp_send_first:_internal_error
push edx
call fcn.009d7dd0
add esp, 8
mov ecx, dword [ebp - 4]
mov eax, ebx
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.009c04ba
mov esp, ebp
pop ebp
ret