Master will broadcast the CMD_STARTUP udp command since some PXE implementations won't allow read before you've actually sent something (NB-76)... Also the buffer pointer should be in ES:DI not ES:SI