Function at 0x1004b6f0
Capabilities:
Send data
Send data on socket

Disassembly:
sub esp, 0x14c
mov eax, dword [0x100b2040]
xor eax, esp
mov dword [esp + 0x148], eax
push ebx
push ebp
push esi
mov esi, dword [esp + 0x15c]
xor ebx, ebx
push edi
mov eax, str.netascii
mov edi, str.octet
mov ebp, dword [esi + 0x10]
cmp byte [ebp + 0xd1b], bl
cmovne edi, eax
mov eax, dword [esp + 0x164]
cmp eax, 7
ja case.0x1004b197.1
jmp dword [eax*4 + 0x1004b5d0]
inc dword [esi + 0x18]
mov eax, dword [esi + 0x18]
cmp eax, dword [esi + 0x20]
jle 0x1004b1bd
mov dword [esi + 8], 0xffffff9e
xor eax, eax
mov dword [esi], 3
jmp 0x1004b5b5
mov eax, dword [esi + 0x14c]
cmp byte [ebp + 0x6dd], bl
mov byte [eax], bl
mov eax, dword [esi + 0x14c]
je 0x1004b20b
mov byte [eax + 1], 2
mov eax, dword [esi + 0x10]
mov ecx, dword [esi + 0x14c]
add ecx, 4
mov dword [eax + 0x130], ecx
mov edx, dword [ebp + 0xc48]
mov eax, edx
mov ecx, dword [ebp + 0xc4c]
and eax, ecx
cmp eax, 0xffffffff
je 0x1004b20f
push ecx
push edx
push ebp
call fcn.1003ffc0
add esp, 0xc
jmp 0x1004b20f
mov byte [eax + 1], 1
push 4
push 0
lea eax, [esp + 0x18]
push eax
mov eax, dword [esi + 0x10]
push 0
mov eax, dword [eax + 0xc74]
inc eax
push eax
call fcn.1005c020
mov ebx, eax
add esp, 0x14
test ebx, ebx
jne 0x1004b5b3
mov ecx, dword [esp + 0x10]
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1004b240
sub ecx, edx
mov edx, edi
lea eax, [edx + 1]
mov dword [esp + 0x14], eax
mov al, byte [edx]
inc edx
test al, al
jne 0x1004b252
sub edx, dword [esp + 0x14]
mov eax, dword [esi + 0x13c]
sub eax, edx
sub eax, 4
cmp ecx, eax
jbe 0x1004b28e
push str.TFTP_file_name_too_long
push ebp
call fcn.1002f850
push dword [esp + 0x18]
call dword [0x100b2004]
add esp, 0xc
mov eax, 0x47
jmp 0x1004b5b5
mov eax, dword [esi + 0x14c]
push 0
push edi
push 0
push dword [esp + 0x1c]
add eax, 2
push str._s_c_s_c
push dword [esi + 0x13c]
push eax
call fcn.100341e0
mov ecx, dword [esp + 0x2c]
add esp, 0x1c
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1004b2c0
sub ecx, edx
lea edx, [edi + 1]
nop dword [eax]
mov al, byte [edi]
inc edi
test al, al
jne 0x1004b2d0
sub edi, edx
add edi, 4
add edi, ecx
cmp byte [ebp + 0x6c3], al
jne 0x1004b51e
cmp byte [ebp + 0x6dd], al
je 0x1004b31f
mov edx, dword [ebp + 0xc48]
mov eax, edx
mov ecx, dword [ebp + 0xc4c]
and eax, ecx
cmp eax, 0xffffffff
je 0x1004b31f
push ecx
push edx
push str._I64d
lea eax, [esp + 0x24]
push 0x40
push eax
call fcn.100341e0
add esp, 0x14
jmp 0x1004b329
mov eax, 0x30
mov word [esp + 0x18], ax
lea ebx, [edi + 6]
cmp ebx, dword [esi + 0x13c]
ja 0x1004b36c
mov ecx, dword [esi + 0x14c]
mov edx, str.tsize
add ecx, edi
mov al, byte [edx]
lea edx, [edx + 1]
mov byte [ecx], al
lea ecx, [ecx + 1]
test al, al
jne 0x1004b341
lea ecx, [esp + 0x18]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1004b356
sub ecx, edx
lea eax, [ecx + 1]
add eax, ebx
cmp eax, dword [esi + 0x13c]
jbe 0x1004b3a4
push dword [esi + 0x140]
lea eax, [esp + 0x1c]
push 0x100976ec
push 0x40
push eax
call fcn.100341e0
push dword [esi + 0x1c]
lea eax, [esp + 0x2c]
push 0x100976ec
push 0x40
push eax
call fcn.100341e0
add esp, 0x20
push str.TFTP_buffer_too_small_for_options
jmp 0x1004b271
mov ecx, dword [esi + 0x14c]
lea edx, [esp + 0x18]
add ecx, ebx
mov al, byte [edx]
lea edx, [edx + 1]
mov byte [ecx], al
lea ecx, [ecx + 1]
test al, al
jne 0x1004b3b0
lea ecx, [esp + 0x18]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1004b3c5
push dword [esi + 0x140]
sub ecx, edx
lea eax, [esp + 0x1c]
push 0x100976ec
push 0x40
push eax
lea edi, [ecx + 1]
add edi, ebx
call fcn.100341e0
lea ebx, [edi + 8]
add esp, 0x10
cmp ebx, dword [esi + 0x13c]
ja 0x1004b436
mov ecx, dword [esi + 0x14c]
mov edx, str.blksize
add ecx, edi
mov al, byte [edx]
lea edx, [edx + 1]
mov byte [ecx], al
lea ecx, [ecx + 1]
test al, al
jne 0x1004b405
lea ecx, [esp + 0x18]
lea edx, [ecx + 1]
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1004b420
sub ecx, edx
lea eax, [ecx + 1]
add eax, ebx
cmp eax, dword [esi + 0x13c]
jbe 0x1004b457
push dword [esi + 0x1c]
lea eax, [esp + 0x1c]
push 0x100976ec
push 0x40
push eax
call fcn.100341e0
add esp, 0x10
push str.TFTP_buffer_too_small_for_options
jmp 0x1004b271
mov ecx, dword [esi + 0x14c]
lea edx, [esp + 0x18]
add ecx, ebx
mov al, byte [edx]
lea edx, [edx + 1]
mov byte [ecx], al
lea ecx, [ecx + 1]
test al, al
jne 0x1004b463
lea ecx, [esp + 0x18]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1004b478
push dword [esi + 0x1c]
sub ecx, edx
lea eax, [esp + 0x1c]
push 0x100976ec
inc ecx
push 0x40
push eax
add ebx, ecx
call fcn.100341e0
lea edi, [ebx + 8]
add esp, 0x10
cmp edi, dword [esi + 0x13c]
ja 0x1004b39a
mov ecx, dword [esi + 0x14c]
mov edx, str.timeout
add ecx, ebx
mov al, byte [edx]
lea edx, [edx + 1]
mov byte [ecx], al
lea ecx, [ecx + 1]
test al, al
jne 0x1004b4b7
lea ecx, [esp + 0x18]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1004b4d0
sub ecx, edx
lea eax, [edi + 1]
add eax, ecx
cmp eax, dword [esi + 0x13c]
ja 0x1004b39a
mov ecx, dword [esi + 0x14c]
lea edx, [esp + 0x18]
add ecx, edi
mov al, byte [edx]
lea edx, [edx + 1]
mov byte [ecx], al
lea ecx, [ecx + 1]
test al, al
jne 0x1004b4f6
lea ecx, [esp + 0x18]
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1004b510
sub ecx, edx
inc edi
add edi, ecx
xor ebx, ebx
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x48]
push dword [eax + 0x10]
push dword [eax + 0x18]
push 0
push edi
push dword [esi + 0x14c]
push dword [esi + 0x14]
call dword [sym.imp.WS2_32.dll_sendto]
cmp eax, edi
je 0x1004b565
push 0x100
lea eax, [esp + 0x5c]
push eax
call dword [sym.imp.WS2_32.dll_WSAGetLastError]
push eax
call fcn.1001b880
push eax
push 0x100971a0
push ebp
call fcn.1002f850
add esp, 0x18
push dword [esp + 0x10]
call dword [0x100b2004]
add esp, 4
jmp 0x1004b5b3
push eax
push esi
cmp byte [ebp + 0x6dd], bl
je 0x1004b594
call fcn.1004a960
mov ebx, eax
jmp 0x1004b5b0
push eax
push esi
call fcn.1004a960
mov ebx, eax
jmp 0x1004b5b0
push eax
push esi
call fcn.1004a920
mov ebx, eax
jmp 0x1004b5b0
mov dword [esi], 3
jmp 0x1004b5b3
push str.tftp_send_first:_internal_error
push ebp
call fcn.1002f850
add esp, 8
mov eax, ebx
mov ecx, dword [esp + 0x158]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.1006cacc
add esp, 0x14c
ret
mov eax, dword [esp + 4]
mov edx, dword [eax]
mov ecx, dword [eax + 0x10]
cmp edx, 3
ja case.default.0x1004b6fe
jmp dword [edx*4 + 0x1004b750]
mov dword [esp + 4], eax
jmp 0x1004b150
mov dword [esp + 4], eax
jmp fcn.1004ae00
mov dword [esp + 4], eax
jmp fcn.1004b890
push str.TFTP_finished
push 0x100971a0
push ecx
call fcn.1002f920
add esp, 0xc
xor eax, eax
ret
push str.Internal_state_machine_error
push 0x100971a0
push ecx
call fcn.1002f850
add esp, 0xc
mov eax, 0x47
ret