Function at 0x4b6a40
Capabilities:
Send data
Send data on socket

Disassembly:
sub esp, 0x14c
mov eax, dword [0x509040]
xor eax, esp
mov dword [esp + 0x148], eax
push ebx
push ebp
push esi
mov esi, dword [esp + 0x15c]
xor ebx, ebx
push edi
mov eax, str.netascii
mov edi, str.octet
mov ebp, dword [esi + 0x10]
cmp byte [ebp + 0xd6e], bl
cmovne edi, eax
mov eax, dword [esp + 0x164]
cmp eax, 7
ja case.0x4b64e7.1
jmp dword [eax*4 + 0x4b6920]
inc dword [esi + 0x18]
mov eax, dword [esi + 0x18]
cmp eax, dword [esi + 0x20]
jle 0x4b650d
mov dword [esi + 8], 0xffffff9e
xor eax, eax
mov dword [esi], 3
jmp 0x4b6906
mov eax, dword [esi + 0x14c]
cmp byte [ebp + 0xd74], bl
mov byte [eax], bl
mov eax, dword [esi + 0x14c]
je 0x4b655b
mov byte [eax + 1], 2
mov eax, dword [esi + 0x10]
mov ecx, dword [esi + 0x14c]
add ecx, 4
mov dword [eax + 0x128], ecx
mov edx, dword [ebp + 0xc88]
mov eax, edx
mov ecx, dword [ebp + 0xc8c]
and eax, ecx
cmp eax, 0xffffffff
je 0x4b655f
push ecx
push edx
push ebp
call fcn.004aaf50
add esp, 0xc
jmp 0x4b655f
mov byte [eax + 1], 1
push 4
push 0
lea eax, [esp + 0x18]
push eax
mov eax, dword [esi + 0x10]
push 0
mov eax, dword [eax + 0xcb4]
inc eax
push eax
call fcn.004c7640
mov ebx, eax
add esp, 0x14
test ebx, ebx
jne 0x4b6904
mov ecx, dword [esp + 0x10]
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4b6590
sub ecx, edx
mov edx, edi
lea eax, [edx + 1]
mov dword [esp + 0x14], eax
mov al, byte [edx]
inc edx
test al, al
jne 0x4b65a2
sub edx, dword [esp + 0x14]
mov eax, dword [esi + 0x13c]
sub eax, edx
sub eax, 4
cmp ecx, eax
jbe 0x4b65de
push str.TFTP_file_name_too_long
push ebp
call fcn.0049cc20
push dword [esp + 0x18]
call dword [0x50909c]
add esp, 0xc
mov eax, 0x47
jmp 0x4b6906
mov eax, dword [esi + 0x14c]
push 0
push edi
push 0
push dword [esp + 0x1c]
add eax, 2
push str._s_c_s_c
push dword [esi + 0x13c]
push eax
call fcn.004ac9d0
mov ecx, dword [esp + 0x2c]
add esp, 0x1c
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4b6610
sub ecx, edx
lea edx, [edi + 1]
nop dword [eax]
mov al, byte [edi]
inc edi
test al, al
jne 0x4b6620
sub edi, edx
add edi, 4
add edi, ecx
cmp byte [ebp + 0x6c0], al
jne 0x4b686e
cmp byte [ebp + 0xd74], al
je 0x4b666f
mov edx, dword [ebp + 0xc88]
mov eax, edx
mov ecx, dword [ebp + 0xc8c]
and eax, ecx
cmp eax, 0xffffffff
je 0x4b666f
push ecx
push edx
push str._I64d
lea eax, [esp + 0x24]
push 0x40
push eax
call fcn.004ac9d0
add esp, 0x14
jmp 0x4b6679
mov eax, 0x30
mov word [esp + 0x18], ax
lea ebx, [edi + 6]
cmp ebx, dword [esi + 0x13c]
ja 0x4b66bc
mov ecx, dword [esi + 0x14c]
mov edx, str.tsize
add ecx, edi
mov al, byte [edx]
lea edx, [edx + 1]
mov byte [ecx], al
lea ecx, [ecx + 1]
test al, al
jne 0x4b6691
lea ecx, [esp + 0x18]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4b66a6
sub ecx, edx
lea eax, [ecx + 1]
add eax, ebx
cmp eax, dword [esi + 0x13c]
jbe 0x4b66f4
push dword [esi + 0x140]
lea eax, [esp + 0x1c]
push 0x4eecd0
push 0x40
push eax
call fcn.004ac9d0
push dword [esi + 0x1c]
lea eax, [esp + 0x2c]
push 0x4eecd0
push 0x40
push eax
call fcn.004ac9d0
add esp, 0x20
push str.TFTP_buffer_too_small_for_options
jmp 0x4b65c1
mov ecx, dword [esi + 0x14c]
lea edx, [esp + 0x18]
add ecx, ebx
mov al, byte [edx]
lea edx, [edx + 1]
mov byte [ecx], al
lea ecx, [ecx + 1]
test al, al
jne 0x4b6700
lea ecx, [esp + 0x18]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4b6715
push dword [esi + 0x140]
sub ecx, edx
lea eax, [esp + 0x1c]
push 0x4eecd0
push 0x40
push eax
lea edi, [ecx + 1]
add edi, ebx
call fcn.004ac9d0
lea ebx, [edi + 8]
add esp, 0x10
cmp ebx, dword [esi + 0x13c]
ja 0x4b6786
mov ecx, dword [esi + 0x14c]
mov edx, str.blksize
add ecx, edi
mov al, byte [edx]
lea edx, [edx + 1]
mov byte [ecx], al
lea ecx, [ecx + 1]
test al, al
jne 0x4b6755
lea ecx, [esp + 0x18]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4b6770
sub ecx, edx
lea eax, [ecx + 1]
add eax, ebx
cmp eax, dword [esi + 0x13c]
jbe 0x4b67a7
push dword [esi + 0x1c]
lea eax, [esp + 0x1c]
push 0x4eecd0
push 0x40
push eax
call fcn.004ac9d0
add esp, 0x10
push str.TFTP_buffer_too_small_for_options
jmp 0x4b65c1
mov ecx, dword [esi + 0x14c]
lea edx, [esp + 0x18]
add ecx, ebx
mov al, byte [edx]
lea edx, [edx + 1]
mov byte [ecx], al
lea ecx, [ecx + 1]
test al, al
jne 0x4b67b3
lea ecx, [esp + 0x18]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4b67c8
push dword [esi + 0x1c]
sub ecx, edx
lea eax, [esp + 0x1c]
push 0x4eecd0
inc ecx
push 0x40
push eax
add ebx, ecx
call fcn.004ac9d0
lea edi, [ebx + 8]
add esp, 0x10
cmp edi, dword [esi + 0x13c]
ja 0x4b66ea
mov ecx, dword [esi + 0x14c]
mov edx, str.timeout
add ecx, ebx
mov al, byte [edx]
lea edx, [edx + 1]
mov byte [ecx], al
lea ecx, [ecx + 1]
test al, al
jne 0x4b6807
lea ecx, [esp + 0x18]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4b6820
sub ecx, edx
lea eax, [edi + 1]
add eax, ecx
cmp eax, dword [esi + 0x13c]
ja 0x4b66ea
mov ecx, dword [esi + 0x14c]
lea edx, [esp + 0x18]
add ecx, edi
mov al, byte [edx]
lea edx, [edx + 1]
mov byte [ecx], al
lea ecx, [ecx + 1]
test al, al
jne 0x4b6846
lea ecx, [esp + 0x18]
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4b6860
sub ecx, edx
inc edi
add edi, ecx
xor ebx, ebx
mov eax, dword [ebp + 0x18]
mov eax, dword [eax + 0x44]
push dword [eax + 0xc]
add eax, 0x10
push eax
push 0
push edi
push dword [esi + 0x14c]
push dword [esi + 0x14]
call dword [sym.imp.WS2_32.dll_sendto]
cmp eax, edi
je 0x4b68b6
push 0x100
lea eax, [esp + 0x5c]
push eax
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
push eax
call fcn.004ae510
push eax
push 0x4eeccc
push ebp
call fcn.0049cc20
add esp, 0x18
push dword [esp + 0x10]
call dword [0x50909c]
add esp, 4
jmp 0x4b6904
push eax
push esi
cmp byte [ebp + 0xd74], bl
je 0x4b68e5
call fcn.004b5cb0
mov ebx, eax
jmp 0x4b6901
push eax
push esi
call fcn.004b5cb0
mov ebx, eax
jmp 0x4b6901
push eax
push esi
call fcn.004b5c70
mov ebx, eax
jmp 0x4b6901
mov dword [esi], 3
jmp 0x4b6904
push str.tftp_send_first:_internal_error
push ebp
call fcn.0049cc20
add esp, 8
mov eax, ebx
mov ecx, dword [esp + 0x158]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.004870f9
add esp, 0x14c
ret
mov eax, dword [esp + 4]
mov edx, dword [eax]
mov ecx, dword [eax + 0x10]
cmp edx, 3
ja case.default.0x4b6a4e
jmp dword [edx*4 + 0x4b6aa0]
mov dword [esp + 4], eax
jmp 0x4b64a0
mov dword [esp + 4], eax
jmp fcn.004b6150
mov dword [esp + 4], eax
jmp fcn.004b6be0
push str.TFTP_finished
push 0x4eeccc
push ecx
call fcn.0049ccf0
add esp, 0xc
xor eax, eax
ret
push str.Internal_state_machine_error
push 0x4eeccc
push ecx
call fcn.0049cc20
add esp, 0xc
mov eax, 0x47
ret