Function at 0x14018cde0
Capabilities:
Manipulate boot configuration
Read .ini file

Disassembly:
push rdi
mov eax, 0x1300
call fcn.1401da720
sub rsp, rax
mov rax, qword [0x1402aa5c0]
xor rax, rsp
mov qword [rsp + 0x12f8], rax
lea rax, [rsp + 0x1230]
mov qword [rsp + 0x1238], rax
lea rdx, [0x1403b58d0]
add rdx, 0x228
lea r8, [0x140245dc8]
mov rcx, qword [rsp + 0x1238]
call fcn.1400010b0
mov qword [rsp + 0x12a0], rax
mov rcx, qword [rsp + 0x12a0]
call fcn.1401bedc0
mov r8d, 0x3e8
lea rdx, [rsp + 0x810]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov dx, 0x2e
lea rcx, [rsp + 0x810]
call fcn.140001460
mov rdx, rax
xor eax, eax
mov word [rdx], ax
lea rdx, [0x140245dd8]
lea rcx, [rsp + 0x810]
call fcn.1400a99b0
lea rdx, [rsp + 0x810]
mov qword [rsp + 0x28], rdx
mov dword [rsp + 0x20], 0x3e8
lea r9, [rsp + 0x40]
lea r8, [0x140245de8]
lea rdx, str.ServerBindIP
lea rcx, [0x140245e18]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
lea rdx, [0x1403b58d0]
add rdx, 0x228
lea r8, [0x140245e28]
lea rcx, [rsp + 0x1248]
call fcn.1400010b0
mov qword [rsp + 0x12a8], rax
mov rcx, qword [rsp + 0x12a8]
call fcn.14000f8f0
mov r9, rax
mov r8d, 1
lea rdx, str.StartTFTP
lea rcx, [0x140245e58]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
test eax, eax
jne 0x14018cf25
mov dword [rsp + 0x12b0], 1
jmp 0x14018cf30
mov dword [rsp + 0x12b0], 0
movzx eax, byte [rsp + 0x12b0]
mov byte [rsp + 0x1240], al
lea rcx, [rsp + 0x1248]
call fcn.140001490
movzx edx, byte [rsp + 0x1240]
test edx, edx
je 0x14018cf74
lea rdx, str.Stop_TFTP_Service
xor ecx, ecx
call fcn.1400dcf70
lea rcx, [0x1403b4b60]
call fcn.1400d90d0
jmp 0x14018cfa9
lea rdx, [0x140245e90]
xor ecx, ecx
call fcn.1400dcf70
lea rcx, [0x1403b4b60]
call fcn.1400d90d0
mov r9d, 1
lea r8, [0x140245eb8]
xor edx, edx
lea rcx, [0x1403b4b60]
call fcn.1400e29c0
lea rdx, [0x1403b58d0]
add rdx, 0x228
lea r8, [0x140245ec8]
lea rcx, [rsp + 0x1258]
call fcn.1400010b0
mov qword [rsp + 0x12b8], rax
mov rcx, qword [rsp + 0x12b8]
call fcn.14000f8f0
mov r9, rax
mov r8d, 1
lea rdx, str.StartDHCP
lea rcx, [0x140245ef8]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
test eax, eax
jne 0x14018d00e
mov dword [rsp + 0x12c0], 1
jmp 0x14018d019
mov dword [rsp + 0x12c0], 0
movzx eax, byte [rsp + 0x12c0]
mov byte [rsp + 0x1250], al
lea rcx, [rsp + 0x1258]
call fcn.140001490
movzx edx, byte [rsp + 0x1250]
test edx, edx
je 0x14018d05d
lea rdx, str.Stop_DHCP_Service
xor ecx, ecx
call fcn.1400dcf70
lea rcx, [0x1403b3ce0]
call fcn.1400d90d0
jmp 0x14018d08f
lea rdx, [0x140245f30]
xor ecx, ecx
call fcn.1400dcf70
lea rcx, [0x1403b3ce0]
call fcn.1400d90d0
lea r8, [0x140245f58]
mov edx, 0x43
lea rcx, [0x1403b3ce0]
call fcn.140115b00
lea rdx, [0x1403b58d0]
add rdx, 0x228
lea r8, [0x140245f68]
lea rcx, [rsp + 0x1268]
call fcn.1400010b0
mov qword [rsp + 0x12c8], rax
mov rcx, qword [rsp + 0x12c8]
call fcn.14000f8f0
mov r9, rax
mov r8d, 1
lea rdx, str.StartProxyDHCP
lea rcx, [0x140245fa0]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
test eax, eax
jne 0x14018d0f4
mov dword [rsp + 0x12d0], 1
jmp 0x14018d0ff
mov dword [rsp + 0x12d0], 0
movzx eax, byte [rsp + 0x12d0]
mov byte [rsp + 0x1260], al
lea rcx, [rsp + 0x1268]
call fcn.140001490
movzx edx, byte [rsp + 0x1260]
test edx, edx
je 0x14018d146
lea rdx, str.Stop_Proxy_DHCP_Service
xor ecx, ecx
call fcn.1400dcf70
lea rcx, [0x1403b4060]
call fcn.1400d90d0
jmp 0x14018d210
lea rdx, str.Change_Proxy_DHCP_Service
xor ecx, ecx
call fcn.1400dcf70
lea rcx, [0x1403b4060]
call fcn.1400d90d0
lea rdx, [0x1403b58d0]
add rdx, 0x228
lea r8, [0x140246018]
lea rcx, [rsp + 0x1270]
call fcn.1400010b0
mov qword [rsp + 0x12d8], rax
mov rcx, qword [rsp + 0x12d8]
call fcn.14000f8f0
mov r9, rax
mov r8d, 0xfab
lea rdx, str.ProxyDhcpPort
lea rcx, [0x140246050]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [rsp + 0x1010], eax
lea rcx, [rsp + 0x1270]
call fcn.140001490
cmp dword [rsp + 0x1010], 0x43
jne 0x14018d1f8
lea rcx, [0x1403b3ce0]
call fcn.1400d90d0
lea r8, [0x140246060]
mov edx, 0x43
lea rcx, [0x1403b3ce0]
call fcn.140115b00
jmp 0x14018d210
lea r8, [0x140246070]
mov edx, 0xfab
lea rcx, [0x1403b4060]
call fcn.140115b00
lea rdx, [0x1403b58d0]
add rdx, 0x228
lea r8, [0x140246080]
lea rcx, [rsp + 0x1280]
call fcn.1400010b0
mov qword [rsp + 0x12e0], rax
mov rcx, qword [rsp + 0x12e0]
call fcn.14000f8f0
mov r9, rax
mov r8d, 1
lea rdx, str.StartiSCSI
lea rcx, [0x1402460b0]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [rsp + 0x1278], eax
lea rcx, [rsp + 0x1280]
call fcn.140001490
cmp dword [rsp + 0x1278], 0
je 0x14018d3f7
lea rdx, [0x1403b58d0]
add rdx, 0x228
lea r8, [0x1402460c0]
lea rcx, [rsp + 0x1288]
call fcn.1400010b0
mov qword [rsp + 0x12e8], rax
mov rcx, qword [rsp + 0x12e8]
call fcn.14000f8f0
mov r9, rax
xor r8d, r8d
lea rdx, str.iSCSIPort
lea rcx, [0x1402460f0]
call qword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
mov dword [rsp + 0x1014], eax
lea rcx, [rsp + 0x1288]
call fcn.140001490
cmp dword [rsp + 0x1014], 0
jne 0x14018d3b0
xor eax, eax
mov word [rsp + 0x1020], ax
lea rdi, [rsp + 0x1022]
xor eax, eax
mov ecx, 0x206
rep stosb byte [rdi], al
mov r8d, 0x104
lea rdx, [rsp + 0x1020]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov dword [rsp + 0x1014], 0xcbc
jmp 0x14018d348
mov eax, dword [rsp + 0x1014]
add eax, 1
mov dword [rsp + 0x1014], eax
cmp dword [rsp + 0x1014], 0xcc1
jae 0x14018d3b0
mov r8d, 1
mov edx, dword [rsp + 0x1014]
lea rcx, [rsp + 0x1298]
call fcn.1400dc1a0
mov qword [rsp + 0x12f0], rax
lea rdx, [rsp + 0x1020]
mov rcx, qword [rsp + 0x12f0]
call fcn.140006d50
mov byte [rsp + 0x1290], al
lea rcx, [rsp + 0x1298]
call fcn.140001490
movzx edx, byte [rsp + 0x1290]
test edx, edx
je 0x14018d3ae
jmp 0x14018d3b0
jmp 0x14018d337
lea rdx, str.Change_iSCSI_Target_Service
xor ecx, ecx
call fcn.1400dcf70
lea r8, [rsp + 0x40]
mov edx, dword [rsp + 0x1014]
lea rcx, [0x1403b36c0]
call fcn.140140450
test eax, eax
jne 0x14018d3f5
mov r8d, dword [rsp + 0x1014]
lea rdx, [0x140246170]
lea rcx, [0x1403b58d0]
call fcn.1401c3600
jmp 0x14018d411
lea rdx, [0x140246138]
xor ecx, ecx
call fcn.1400dcf70
lea rcx, [0x1403b36c0]
call fcn.1401401b0
mov eax, 1
mov rcx, qword [rsp + 0x12f8]
xor rcx, rsp
call fcn.1400a8790
add rsp, 0x1300
pop rdi
ret