Function at 0x100b5107
Capabilities:
Send data
Send data on socket

Disassembly:
sub esp, 0x14c
mov eax, dword [0x1012604c]
xor eax, esp
mov dword [esp + 0x148], eax
push ebx
push ebp
push esi
mov esi, dword [esp + 0x15c]
xor ebx, ebx
push edi
mov eax, str.netascii
mov edi, str.octet
mov ebp, dword [esi + 0x10]
cmp byte [ebp + 0xd1b], bl
cmovne edi, eax
mov eax, dword [esp + 0x164]
cmp eax, 7
ja case.0x100b4b67.1
jmp dword [eax*4 + 0x100b4fa8]
inc dword [esi + 0x18]
mov eax, dword [esi + 0x18]
cmp eax, dword [esi + 0x20]
jle 0x100b4b8d
mov dword [esi + 8], 0xffffff9e
xor eax, eax
mov dword [esi], 3
jmp 0x100b4f8f
mov eax, dword [esi + 0x14c]
cmp byte [ebp + 0x6dd], bl
mov byte [eax], bl
mov eax, dword [esi + 0x14c]
je 0x100b4bdb
mov byte [eax + 1], 2
mov eax, dword [esi + 0x10]
mov ecx, dword [esi + 0x14c]
add ecx, 4
mov dword [eax + 0x130], ecx
mov edx, dword [ebp + 0xc48]
mov eax, edx
mov ecx, dword [ebp + 0xc4c]
and eax, ecx
cmp eax, 0xffffffff
je 0x100b4bdf
push ecx
push edx
push ebp
call fcn.1009abc0
add esp, 0xc
jmp 0x100b4bdf
mov byte [eax + 1], 1
push 4
push 0
lea eax, [esp + 0x18]
push eax
mov eax, dword [esi + 0x10]
push 0
mov eax, dword [eax + 0xc74]
inc eax
push eax
call fcn.100b90d0
mov ebx, eax
add esp, 0x14
test ebx, ebx
jne 0x100b4f8d
mov ecx, dword [esp + 0x10]
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b4c10
sub ecx, edx
mov edx, edi
lea eax, [edx + 1]
mov dword [esp + 0x14], eax
mov al, byte [edx]
inc edx
test al, al
jne 0x100b4c22
sub edx, dword [esp + 0x14]
mov eax, dword [esi + 0x13c]
sub eax, edx
sub eax, 4
cmp ecx, eax
jbe 0x100b4c5e
push str.TFTP_file_name_too_long
push ebp
call fcn.1008b9e0
push dword [esp + 0x18]
call dword [0x10126004]
add esp, 0xc
mov eax, 0x47
jmp 0x100b4f8f
mov eax, dword [esi + 0x14c]
push 0
push edi
push 0
push dword [esp + 0x1c]
add eax, 2
push str._s_c_s_c
push dword [esi + 0x13c]
push eax
call fcn.1009d830
mov ecx, dword [esp + 0x2c]
add esp, 0x1c
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b4c90
sub ecx, edx
lea edx, [edi + 1]
nop dword [eax]
mov al, byte [edi]
inc edi
test al, al
jne 0x100b4ca0
sub edi, edx
add edi, 4
add edi, ecx
cmp byte [ebp + 0x6c3], al
jne 0x100b4ef5
cmp byte [ebp + 0x6dd], al
je 0x100b4cef
mov edx, dword [ebp + 0xc48]
mov eax, edx
mov ecx, dword [ebp + 0xc4c]
and eax, ecx
cmp eax, 0xffffffff
je 0x100b4cef
push ecx
push edx
push 0x10101ca0
lea eax, [esp + 0x24]
push 0x40
push eax
call fcn.1009d830
add esp, 0x14
jmp 0x100b4cf9
mov eax, 0x30
mov word [esp + 0x18], ax
lea ebx, [edi + 6]
cmp ebx, dword [esi + 0x13c]
jbe 0x100b4d3c
push dword [esi + 0x140]
lea eax, [esp + 0x1c]
push 0x100fa164
push 0x40
push eax
call fcn.1009d830
push dword [esi + 0x1c]
lea eax, [esp + 0x2c]
push 0x100fa164
push 0x40
push eax
call fcn.1009d830
add esp, 0x20
push str.TFTP_buffer_too_small_for_options
jmp 0x100b4c41
mov ecx, dword [esi + 0x14c]
mov edx, str.tsize
add ecx, edi
nop dword [eax]
mov al, byte [edx]
lea edx, [edx + 1]
mov byte [ecx], al
lea ecx, [ecx + 1]
test al, al
jne 0x100b4d50
lea ecx, [esp + 0x18]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b4d65
sub ecx, edx
lea eax, [ebx + 1]
add eax, ecx
cmp eax, dword [esi + 0x13c]
ja 0x100b4d04
mov ecx, dword [esi + 0x14c]
lea edx, [esp + 0x18]
add ecx, ebx
mov al, byte [edx]
lea edx, [edx + 1]
mov byte [ecx], al
lea ecx, [ecx + 1]
test al, al
jne 0x100b4d87
lea ecx, [esp + 0x18]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b4da0
push dword [esi + 0x140]
lea eax, [esp + 0x1c]
sub ecx, edx
push 0x100fa164
push 0x40
lea edi, [ebx + 1]
push eax
add edi, ecx
call fcn.1009d830
lea ebx, [edi + 8]
add esp, 0x10
cmp ebx, dword [esi + 0x13c]
ja 0x100b4e0b
mov ecx, dword [esi + 0x14c]
mov edx, str.blksize
add ecx, edi
mov al, byte [edx]
lea edx, [edx + 1]
mov byte [ecx], al
lea ecx, [ecx + 1]
test al, al
jne 0x100b4de0
lea ecx, [esp + 0x18]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b4df5
sub ecx, edx
lea eax, [ebx + 1]
add eax, ecx
cmp eax, dword [esi + 0x13c]
jbe 0x100b4e2c
push dword [esi + 0x1c]
lea eax, [esp + 0x1c]
push 0x100fa164
push 0x40
push eax
call fcn.1009d830
add esp, 0x10
push str.TFTP_buffer_too_small_for_options
jmp 0x100b4c41
mov ecx, dword [esi + 0x14c]
lea edx, [esp + 0x18]
add ecx, ebx
mov al, byte [edx]
lea edx, [edx + 1]
mov byte [ecx], al
lea ecx, [ecx + 1]
test al, al
jne 0x100b4e38
lea ecx, [esp + 0x18]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b4e50
push dword [esi + 0x1c]
lea eax, [esp + 0x1c]
sub ecx, edx
push 0x100fa164
push 0x40
lea edi, [ebx + 1]
push eax
add edi, ecx
call fcn.1009d830
lea ebx, [edi + 8]
add esp, 0x10
cmp ebx, dword [esi + 0x13c]
ja 0x100b4d32
mov ecx, dword [esi + 0x14c]
mov edx, str.timeout
add ecx, edi
mov al, byte [edx]
lea edx, [edx + 1]
mov byte [ecx], al
lea ecx, [ecx + 1]
test al, al
jne 0x100b4e91
lea ecx, [esp + 0x18]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b4ea6
sub ecx, edx
lea eax, [ebx + 1]
add eax, ecx
cmp eax, dword [esi + 0x13c]
ja 0x100b4d32
mov ecx, dword [esi + 0x14c]
lea edx, [esp + 0x18]
add ecx, ebx
nop dword [eax]
mov al, byte [edx]
lea edx, [edx + 1]
mov byte [ecx], al
lea ecx, [ecx + 1]
test al, al
jne 0x100b4ed0
lea ecx, [esp + 0x18]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100b4ee5
sub ecx, edx
lea edi, [ebx + 1]
add edi, ecx
xor ebx, ebx
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x48]
push dword [eax + 0x10]
push dword [eax + 0x18]
push 0
push edi
push dword [esi + 0x14c]
push dword [esi + 0x14]
call dword [sym.imp.WS2_32.dll_sendto]
cmp eax, edi
je 0x100b4f3c
push 0x100
lea eax, [esp + 0x5c]
push eax
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
push eax
call fcn.1009f3a0
push eax
push 0x100f9c24
push ebp
call fcn.1008b9e0
add esp, 0x18
push dword [esp + 0x10]
call dword [0x10126004]
add esp, 4
jmp 0x100b4f8d
push 6
push esi
cmp byte [ebp + 0x6dd], bl
je 0x100b4f6e
call fcn.100b4330
mov ebx, eax
jmp 0x100b4f8a
push 4
push esi
call fcn.100b4330
mov ebx, eax
jmp 0x100b4f8a
push 3
push esi
call fcn.100b42f0
mov ebx, eax
jmp 0x100b4f8a
mov dword [esi], 3
jmp 0x100b4f8d
push str.tftp_send_first:_internal_error
push ebp
call fcn.1008b9e0
add esp, 8
mov eax, ebx
mov ecx, dword [esp + 0x158]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.100ca7cd
add esp, 0x14c
ret
mov eax, dword [esp + 4]
mov edx, dword [eax]
mov ecx, dword [eax + 0x10]
cmp edx, 3
ja case.default.0x100b50ee
jmp dword [edx*4 + 0x100b5140]
mov dword [esp + 4], eax
jmp 0x100b4b20
mov dword [esp + 4], eax
jmp fcn.100b47d0
mov dword [esp + 4], eax
jmp fcn.100b5280
push str.TFTP_finished
push 0x100f9c24
push ecx
call fcn.1008bab0
add esp, 0xc
xor eax, eax
ret
push str.Internal_state_machine_error
push 0x100f9c24
push ecx
call fcn.1008b9e0
add esp, 0xc
mov eax, 0x47
ret