sub_outside():
	KERNEL32.Sleep
	MSVCRT.exit
	MSVCRT._XcptFilter
	MSVCRT._exit

sub_1001665(08b4):
	ADVAPI32.RegisterServiceCtrlHandlerA
	WS2_32.WSAStartup
	WS2_32.WSAGetLastError
	MSVCRT.exit
	MSVCRT.time
	MSVCRT._errno
	MSVCRT._mkdir
	MSVCRT.fopen
	MSVCRT.ctime
	KERNEL32.WaitForSingleObject

	"Tftpd"
	"a+"
	"tftpd.log"

sub_10027E1(0bdd):
	MSVCRT._read

sub_1001FA6(0e43):
	IPHLPAPI.GetIpAddrTable
	MSVCRT.malloc
	MSVCRT.realloc
	MSVCRT.free

sub_100333A(16fb):
	MSVCRT.malloc
	WS2_32.inet_ntoa
	WS2_32.htons
	MSVCRT.isupper
	MSVCRT.tolower
	MSVCRT._open
	WS2_32.socket
	WS2_32.WSAGetLastError
	WS2_32.bind
	KERNEL32.InitializeCriticalSection
	KERNEL32.CreateEventA
	NTDLL.RtlCreateTimer
	WS2_32.sendto
	MSVCRT._errno
	MSVCRT.free

	"octet"
	"Malformed file name"
	"File name too	long"
	"Insufficient resources"
	"Insufficient resources"

sub_1002219(17df):
	MSVCRT.free
	IPHLPAPI.NotifyAddrChange

_main(1982):
	MSVCRT.exit
	ADVAPI32.StartServiceCtrlDispatcherA
	KERNEL32.ExitProcess

	"-?"
	" ======================================"...
	"\\tftpdroot\\"
	" TFTPD_DEFAULT_DIR is	%s\n"
	"tftpd.log"
	" TFTPD_LOGFILE     is	%s\n\n"
	"System\\CurrentControlSet\\Services\\tftpd"...
	"Registry key names, all strings: HKEY_L"...
	"directory"
	" o StartDirectory keyname \"%s\"\n"
	"These	keys are shell patterns	with * an"...
	"clients"
	" o ValidClients   keyname \"%s\"\n"
	"masters"
	" o ValidMasters   keyname \"%s\"\n"
	"readable"
	" o Readable files keyname \"%s\"\n"
	"writable"
	" o writable files keyname \"%s\"\n"

sub_1002F31(2908):
	MSVCRT.malloc
	WS2_32.inet_ntoa
	WS2_32.htons
	MSVCRT.tolower
	MSVCRT._errno
	MSVCRT._open
	WS2_32.socket
	WS2_32.bind
	WS2_32.WSAGetLastError
	KERNEL32.InitializeCriticalSection
	KERNEL32.CreateEventA
	NTDLL.RtlCreateTimer
	WS2_32.sendto
	MSVCRT.free

	"octet"
	"Malformed file name"
	"File name too	long"
	"Insufficient resources"

sub_1002B5E(2f71):
	WS2_32.htons
	NTDLL.RtlDeleteTimer
	NTDLL.RtlUpdateTimer
	WS2_32.sendto
	WS2_32.WSAGetLastError

sub_100373A(3359):
	NTDLL._chkstk
	MSVCRT._write

sub_1001F54(353d):
	NTDLL.RtlDeregisterWaitEx
	WS2_32.closesocket
	WS2_32.WSACloseEvent
	MSVCRT.free

sub_1001A91(3bf6):
	NTDLL._chkstk
	WS2_32.ioctlsocket
	KERNEL32.ResetEvent
	KERNEL32.CreateEventA
	WS2_32.WSARecvFrom
	WS2_32.ntohs
	WS2_32.WSAGetLastError
	KERNEL32.WaitForMultipleObjects
	WS2_32.WSAGetOverlappedResult
	KERNEL32.WaitForSingleObject
	WS2_32.htons
	KERNEL32.InterlockedIncrement

sub_1001E73(3f49):
	KERNEL32.SetEvent
	MSVCRT.fclose

sub_10019F0(3f67):
	KERNEL32.InitializeCriticalSection
	KERNEL32.HeapCreate

sub_100188E(4853):
	WS2_32.WSAEventSelect
	NTDLL.RtlRegisterWait

HandlerProc(5b5c):
	MSVCRT.time
	MSVCRT.ctime
	KERNEL32.ResumeThread
	KERNEL32.SuspendThread
	ADVAPI32.SetServiceStatus

sub_1003910(7204):
	MSVCRT.strncpy
	KERNEL32.ExpandEnvironmentStringsA

	"\\tftpdroot\\"
	"\\"

sub_1002953(79ef):
	MSVCRT._close
	MSVCRT.free

sub_1002024(7c81):
	WS2_32.inet_ntoa

sub_1002A3D(829d):
	KERNEL32.GetLocalTime
	WS2_32.ntohs
	WS2_32.htons
	WS2_32.sendto
	WS2_32.WSAGetLastError
	NTDLL.RtlUpdateTimer
	NTDLL.RtlDeleteTimer

	"Timeout"

sub_100205A(9441):
	WS2_32.WSASocketA
	WS2_32.getservbyname
	WS2_32.WSAGetLastError
	KERNEL32.Sleep
	WS2_32.bind
	MSVCRT.malloc
	KERNEL32.CreateEventA
	WS2_32.closesocket
	KERNEL32.CloseHandle
	MSVCRT.free

	"udp"
	"tftp"

sub_1002CE6(9da4):
	WS2_32.sendto
	WS2_32.WSAGetLastError
	NTDLL.RtlUpdateTimer
	NTDLL.RtlDeleteTimer

sub_1002901(a3dc):
	WS2_32.closesocket
	NTDLL.RtlDeleteTimer
	NTDLL.RtlDeregisterWaitEx
	KERNEL32.CloseHandle

sub_10023D8(b3fe):
	WS2_32.htons
	MSVCRT.atoi
	MSVCRT._itoa

	"blksize"
	"timeout"
	"tsize"

sub_1001A1F(c1d2):
	KERNEL32.CloseHandle

sub_10037BF(d482):
	ADVAPI32.RegOpenKeyExA
	ADVAPI32.RegCloseKey

	"System\\CurrentControlSet\\Services\\tftpd"...
	"directory"
	"clients"
	"masters"
	"readable"
	"writable"

sub_100230A(da63):
	NTDLL._chkstk
	WS2_32.sendto
	WS2_32.WSAGetLastError

sub_10029BA(f8e0):
	WS2_32.htons

sub_10018DB(fe53):
	MSVCRT.free
	NTDLL.RtlCreateTimerQueue
	NTDLL.RtlCreateTimer
	KERNEL32.CreateEventA
	NTDLL.RtlRegisterWait
	IPHLPAPI.NotifyAddrChange

sub_100273D(fee1):
	MSVCRT.memmove