sub_outside(): NTDLL.RtlTryEnterCriticalSection KERNEL32.Sleep NTDLL.RtlLeaveCriticalSection MSVCRT.__set_app_type MSVCRT.__p__fmode MSVCRT.__p__commode MSVCRT.__setusermatherr MSVCRT._initterm MSVCRT.__getmainargs MSVCRT.__p___initenv MSVCRT.exit |
sub_100230A(0076): NTDLL._chkstk WS2_32.ntohs WS2_32.sendto WS2_32.WSAGetLastError |
sub_100273D(02bc): NTDLL.memmove |
sub_1002A3D(0772): KERNEL32.GetLocalTime WS2_32.ntohs WS2_32.sendto WS2_32.WSAGetLastError NTDLL.RtlUpdateTimer NTDLL.RtlGetLastWin32Error NTDLL.RtlDeleteTimer NTDLL.RtlLeaveCriticalSection "Timeout" |
sub_1001665(08b4): ADVAPI32.RegisterServiceCtrlHandlerA ADVAPI32.SetServiceStatus KERNEL32.CreateEventA WS2_32.WSAStartup WS2_32.WSAGetLastError MSVCRT.exit NTDLL.RtlGetLastWin32Error MSVCRT.time MSVCRT._chdir MSVCRT._errno MSVCRT.ctime KERNEL32.WaitForSingleObject "Tftpd" "a+" "tftpd.log" |
sub_100188E(0a4c): WS2_32.WSAEventSelect NTDLL.RtlGetLastWin32Error NTDLL.RtlRegisterWait |
sub_10027E1(0bdd): WS2_32.ntohs MSVCRT._read MSVCRT._errno NTDLL.RtlSetLastWin32Error |
sub_1001A91(1e97): NTDLL._chkstk NTDLL.RtlEnterCriticalSection KERNEL32.CreateEventA NTDLL.RtlLeaveCriticalSection WS2_32.WSARecvFrom WS2_32.ntohs WS2_32.WSAGetLastError WS2_32.WSAGetOverlappedResult KERNEL32.WaitForSingleObject KERNEL32.InterlockedIncrement |
sub_1003910(1f56): NTDLL.strncpy KERNEL32.ExpandEnvironmentStringsA "\\tftpdroot\\" "\\" |
sub_10023D8(3139): WS2_32.ntohs NTDLL._stricmp NTDLL.atoi NTDLL._itoa "blksize" "timeout" "tsize" |
sub_100373A(3359): NTDLL._chkstk MSVCRT._write MSVCRT._errno NTDLL.RtlSetLastWin32Error |
sub_1001E73(3f49): ADVAPI32.SetServiceStatus NTDLL.RtlGetLastWin32Error KERNEL32.SetEvent KERNEL32.CloseHandle MSVCRT.fclose |
sub_10019F0(3f67): KERNEL32.InitializeCriticalSection KERNEL32.HeapCreate |
sub_10018DB(5196): KERNEL32.InitializeCriticalSection MSVCRT.free NTDLL.RtlCreateTimerQueue NTDLL.RtlCreateTimer KERNEL32.CreateEventA NTDLL.RtlRegisterWait IPHLPAPI.NotifyAddrChange |
sub_100287F(5a11): NTDLL.RtlEnterCriticalSection NTDLL.RtlLeaveCriticalSection |
sub_1003BB0(64f5): MSVCRT._controlfp |
sub_100333A(75a0): MSVCRT.malloc WS2_32.inet_ntoa WS2_32.ntohs NTDLL.isupper NTDLL.tolower MSVCRT._open MSVCRT._errno NTDLL.RtlSetLastWin32Error WS2_32.socket WS2_32.WSAGetLastError WS2_32.bind KERNEL32.InitializeCriticalSection KERNEL32.CreateEventA NTDLL.RtlGetLastWin32Error NTDLL.RtlCreateTimer WS2_32.sendto NTDLL.RtlLeaveCriticalSection MSVCRT.free "octet" "Malformed file name" "File name too long" "Insufficient resources" "Insufficient resources" |
sub_1001570(82ff): MSVCRT.printf MSVCRT.exit ADVAPI32.StartServiceCtrlDispatcherA NTDLL.RtlGetLastWin32Error KERNEL32.ExitProcess "-?" " ======================================"... "\\tftpdroot\\" " TFTPD_DEFAULT_DIR is %s\n" "tftpd.log" " TFTPD_LOGFILE is %s\n\n" "System\\CurrentControlSet\\Services\\tftpd"... "Registry key names, all strings: HKEY_L"... "directory" " o StartDirectory keyname \"%s\"\n" "These keys are shell patterns with * an"... "clients" " o ValidClients keyname \"%s\"\n" "masters" " o ValidMasters keyname \"%s\"\n" "readable" " o Readable files keyname \"%s\"\n" "writable" " o writable files keyname \"%s\"\n" |
sub_1001FA6(8bd0): IPHLPAPI.GetIpAddrTable MSVCRT.malloc MSVCRT.realloc MSVCRT.free |
sub_1001DEB(8f0a): MSVCRT.time MSVCRT.ctime KERNEL32.ResumeThread KERNEL32.SuspendThread ADVAPI32.SetServiceStatus NTDLL.RtlGetLastWin32Error |
sub_1001F54(917a): NTDLL.RtlDeregisterWaitEx WS2_32.closesocket WS2_32.WSACloseEvent MSVCRT.free |
sub_1002219(9763): NTDLL.RtlEnterCriticalSection MSVCRT.free IPHLPAPI.NotifyAddrChange NTDLL.RtlLeaveCriticalSection |
sub_1002901(a498): WS2_32.closesocket NTDLL.RtlDeleteTimer NTDLL.RtlDeregisterWaitEx KERNEL32.CloseHandle NTDLL.RtlDeleteCriticalSection |
sub_1002024(ade7): WS2_32.inet_ntoa |
sub_1002953(af9c): MSVCRT._close MSVCRT.free |
sub_1002B5E(bec8): WS2_32.ntohs NTDLL.RtlDeleteTimer NTDLL.RtlLeaveCriticalSection NTDLL.RtlUpdateTimer WS2_32.sendto WS2_32.WSAGetLastError |
sub_1001A1F(c1d2): NTDLL.RtlEnterCriticalSection KERNEL32.CloseHandle NTDLL.RtlFreeHeap NTDLL.RtlLeaveCriticalSection |
sub_100205A(cc33): WS2_32.WSASocketA WS2_32.getservbyname WS2_32.WSAGetLastError KERNEL32.Sleep WS2_32.bind NTDLL.RtlGetLastWin32Error MSVCRT.malloc KERNEL32.CreateEventA WS2_32.closesocket KERNEL32.CloseHandle MSVCRT.free "udp" "tftp" |
sub_1002CE6(d97f): WS2_32.ntohs WS2_32.sendto WS2_32.WSAGetLastError NTDLL.RtlLeaveCriticalSection NTDLL.RtlUpdateTimer NTDLL.RtlDeleteTimer |
sub_10028B5(dc1e): NTDLL.RtlEnterCriticalSection NTDLL.RtlLeaveCriticalSection |
sub_1002F31(e9a3): MSVCRT.malloc WS2_32.inet_ntoa WS2_32.ntohs NTDLL.tolower MSVCRT._errno MSVCRT._open NTDLL.RtlSetLastWin32Error MSVCRT._lseek WS2_32.socket WS2_32.bind WS2_32.WSAGetLastError KERNEL32.InitializeCriticalSection KERNEL32.CreateEventA NTDLL.RtlGetLastWin32Error NTDLL.RtlCreateTimer WS2_32.sendto NTDLL.RtlLeaveCriticalSection MSVCRT.free "octet" "Malformed file name" "File name too long" "Insufficient resources" |
sub_10029BA(f8e0): NTDLL.RtlEnterCriticalSection WS2_32.ntohs NTDLL.RtlLeaveCriticalSection |
sub_10037BF(fd6f): ADVAPI32.RegOpenKeyExA NTDLL.RtlGetLastWin32Error ADVAPI32.RegQueryValueExA ADVAPI32.RegCloseKey "System\\CurrentControlSet\\Services\\tftpd"... "directory" "clients" "masters" "readable" "writable" |