sub_outside(): KERNEL32.Sleep MSVCRT.__set_app_type MSVCRT.__p__fmode MSVCRT.__p__commode MSVCRT.__setusermatherr MSVCRT._initterm MSVCRT.__getmainargs MSVCRT.__p___initenv MSVCRT.exit MSVCRT._XcptFilter MSVCRT._exit |
sub_1001665(08b4): ADVAPI32.RegisterServiceCtrlHandlerA WS2_32.WSAStartup WS2_32.WSAGetLastError MSVCRT.exit MSVCRT.time MSVCRT._errno MSVCRT._mkdir MSVCRT.fopen MSVCRT.ctime KERNEL32.WaitForSingleObject "Tftpd" "a+" "tftpd.log" |
sub_10027E1(0bdd): MSVCRT._read |
sub_1001FA6(0e43): IPHLPAPI.GetIpAddrTable MSVCRT.malloc MSVCRT.realloc MSVCRT.free |
sub_100333A(16fb): MSVCRT.malloc WS2_32.inet_ntoa WS2_32.htons MSVCRT.isupper MSVCRT.tolower MSVCRT._open WS2_32.socket WS2_32.WSAGetLastError WS2_32.bind KERNEL32.InitializeCriticalSection KERNEL32.CreateEventA NTDLL.RtlCreateTimer WS2_32.sendto MSVCRT._errno MSVCRT.free "octet" "Malformed file name" "File name too long" "Insufficient resources" "Insufficient resources" |
sub_1002219(17df): MSVCRT.free IPHLPAPI.NotifyAddrChange |
sub_1002F31(2908): MSVCRT.malloc WS2_32.inet_ntoa WS2_32.htons MSVCRT.tolower MSVCRT._errno MSVCRT._open WS2_32.socket WS2_32.bind WS2_32.WSAGetLastError KERNEL32.InitializeCriticalSection KERNEL32.CreateEventA NTDLL.RtlCreateTimer WS2_32.sendto MSVCRT.free "octet" "Malformed file name" "File name too long" "Insufficient resources" |
sub_1002B5E(2f71): WS2_32.htons NTDLL.RtlDeleteTimer NTDLL.RtlUpdateTimer WS2_32.sendto WS2_32.WSAGetLastError |
sub_100373A(3359): NTDLL._chkstk MSVCRT._write |
sub_1001F54(353d): NTDLL.RtlDeregisterWaitEx WS2_32.closesocket WS2_32.WSACloseEvent MSVCRT.free |
sub_1001A91(3bf6): NTDLL._chkstk WS2_32.ioctlsocket KERNEL32.ResetEvent KERNEL32.CreateEventA WS2_32.WSARecvFrom WS2_32.ntohs WS2_32.WSAGetLastError KERNEL32.WaitForMultipleObjects WS2_32.WSAGetOverlappedResult KERNEL32.WaitForSingleObject WS2_32.htons KERNEL32.InterlockedIncrement |
sub_1001E73(3f49): KERNEL32.SetEvent MSVCRT.fclose |
sub_10019F0(3f67): KERNEL32.InitializeCriticalSection KERNEL32.HeapCreate |
sub_100188E(4853): WS2_32.WSAEventSelect NTDLL.RtlRegisterWait |
HandlerProc(5b5c): MSVCRT.time MSVCRT.ctime KERNEL32.ResumeThread KERNEL32.SuspendThread ADVAPI32.SetServiceStatus |
sub_1003BB0(64f5): MSVCRT._controlfp |
sub_1010817(6bed): KERNEL32.CloseHandle |
sub_1003910(7204): MSVCRT.strncpy KERNEL32.ExpandEnvironmentStringsA "\\tftpdroot\\" "\\" |
sub_1002953(79ef): MSVCRT._close MSVCRT.free |
sub_1001570(7b13): MSVCRT.exit ADVAPI32.StartServiceCtrlDispatcherA KERNEL32.ExitProcess "-?" " ======================================"... "\\tftpdroot\\" " TFTPD_DEFAULT_DIR is %s\n" "tftpd.log" " TFTPD_LOGFILE is %s\n\n" "System\\CurrentControlSet\\Services\\tftpd"... "Registry key names, all strings: HKEY_L"... "directory" " o StartDirectory keyname \"%s\"\n" "These keys are shell patterns with * an"... "clients" " o ValidClients keyname \"%s\"\n" "masters" " o ValidMasters keyname \"%s\"\n" "readable" " o Readable files keyname \"%s\"\n" "writable" " o writable files keyname \"%s\"\n" |
sub_1002024(7c81): WS2_32.inet_ntoa |
sub_1002A3D(829d): KERNEL32.GetLocalTime WS2_32.ntohs WS2_32.htons WS2_32.sendto WS2_32.WSAGetLastError NTDLL.RtlUpdateTimer NTDLL.RtlDeleteTimer "Timeout" |
sub_100205A(9441): WS2_32.WSASocketA WS2_32.getservbyname WS2_32.WSAGetLastError KERNEL32.Sleep WS2_32.bind MSVCRT.malloc KERNEL32.CreateEventA WS2_32.closesocket KERNEL32.CloseHandle MSVCRT.free "udp" "tftp" |
sub_1002CE6(9da4): WS2_32.sendto WS2_32.WSAGetLastError NTDLL.RtlUpdateTimer NTDLL.RtlDeleteTimer |
sub_1002901(a3dc): WS2_32.closesocket NTDLL.RtlDeleteTimer NTDLL.RtlDeregisterWaitEx KERNEL32.CloseHandle |
sub_10023D8(b3fe): WS2_32.htons MSVCRT.atoi MSVCRT._itoa "blksize" "timeout" "tsize" |
sub_1001A1F(c1d2): KERNEL32.CloseHandle |
sub_10037BF(d482): ADVAPI32.RegOpenKeyExA ADVAPI32.RegCloseKey "System\\CurrentControlSet\\Services\\tftpd"... "directory" "clients" "masters" "readable" "writable" |
sub_100230A(da63): NTDLL._chkstk WS2_32.sendto WS2_32.WSAGetLastError |
sub_10029BA(f8e0): WS2_32.htons |
sub_10018DB(fe53): MSVCRT.free NTDLL.RtlCreateTimerQueue NTDLL.RtlCreateTimer KERNEL32.CreateEventA NTDLL.RtlRegisterWait IPHLPAPI.NotifyAddrChange |
sub_100273D(fee1): MSVCRT.memmove |