Function at 0x1004017c0
Capabilities:
Enumerate pe sections

Disassembly:
push r14
push r13
push r12
push rbp
push rdi
push rsi
push rbx
sub rsp, 0x50
mov rbx, rdx
call sym.inet_ntoa
lea rcx, str._nPacket_dump_for_Host__s:_n_n
mov rdx, rax
call sym.printf
mov edx, dword [rbx + 0x18]
test edx, edx
jne 0x100401b50
mov rax, qword [rbx]
test rax, rax
je 0x1004018db
movzx edx, word [rax]
lea rcx, str.Transaction_ID:_0x_04x___1_d__n
call sym.printf
mov rax, qword [rbx]
lea rcx, str.Flags:_0x_04x___1_d__n
movzx edx, word [rax + 2]
call sym.printf
mov rax, qword [rbx]
lea rcx, str.Question_count:_0x_04x___1_d__n
movzx edx, word [rax + 4]
call sym.printf
mov rax, qword [rbx]
lea rcx, str.Answer_count:_0x_04x___1_d__n
movzx edx, word [rax + 6]
call sym.printf
mov rax, qword [rbx]
lea rcx, str.Name_service_count:_0x_04x___1_d__n
movzx edx, word [rax + 8]
call sym.printf
mov rax, qword [rbx]
lea rcx, str.Additional_record_count:_0x_04x___1_d__n
movzx edx, word [rax + 0xa]
call sym.printf
mov rax, qword [rbx]
lea rcx, str.Question_name:__s_n
lea rdx, [rax + 0xc]
call sym.printf
mov rax, qword [rbx]
lea rcx, str.Question_type:_0x_04x___1_d__n
movzx edx, word [rax + 0x2e]
call sym.printf
mov rax, qword [rbx]
lea rcx, str.Question_class:_0x_04x___1_d__n
movzx edx, word [rax + 0x30]
call sym.printf
mov rax, qword [rbx]
lea rcx, str.Time_to_live:_0x_08x___1_d__n
mov edx, dword [rax + 0x34]
call sym.printf
mov rax, qword [rbx]
lea rcx, str.Rdata_length:_0x_04x___1_d__n
movzx edx, word [rax + 0x38]
call sym.printf
mov rax, qword [rbx]
lea rcx, str.Number_of_names:_0x_02x___1_d__n
movzx edx, byte [rax + 0x3a]
call sym.printf
cmp qword [rbx + 8], 0
je 0x100401958
lea rcx, str.Names_received:
call sym.puts
mov rax, qword [rbx]
cmp byte [rax + 0x3a], 0
je 0x100401958
xor ebp, ebp
lea r12, [rsp + 0x40]
lea r13, str.__17s_Service:_0x_02x_Flags:_0x_04x_n
xor edi, edi
nop word [rax + rax]
mov rsi, qword [rbx + 8]
mov r8d, 0xf
mov rcx, r12
add edi, 1
add rsi, rbp
add rbp, 0x12
movzx r14d, byte [rsi + 0xf]
mov rdx, rsi
call sym.strncpy
mov byte [rsp + 0x50], 0
mov rdx, r12
mov rcx, r13
movzx r9d, word [rsi + 0x10]
movzx r8d, r14b
call sym.printf
mov rax, qword [rbx]
movzx eax, byte [rax + 0x3a]
cmp eax, edi
jg 0x100401910
mov rax, qword [rbx + 0x10]
test rax, rax
je 0x100401b38
movzx ecx, byte [rax + 5]
movzx r9d, byte [rax + 2]
movzx r8d, byte [rax + 1]
movzx edx, byte [rax]
mov dword [rsp + 0x30], ecx
movzx ecx, byte [rax + 4]
mov dword [rsp + 0x28], ecx
movzx eax, byte [rax + 3]
lea rcx, str.Adapter_address:__02x__02x__02x__02x__02x__02x_n
mov dword [rsp + 0x20], eax
call sym.printf
mov rax, qword [rbx + 0x10]
lea rcx, str.Version_major:_0x_02x___1_d__n
movzx edx, byte [rax + 6]
call sym.printf
mov rax, qword [rbx + 0x10]
lea rcx, str.Version_minor:_0x_02x___1_d__n
movzx edx, byte [rax + 7]
call sym.printf
mov rax, qword [rbx + 0x10]
lea rcx, str.Duration:_0x_04x___1_d__n
movzx edx, word [rax + 8]
call sym.printf
mov rax, qword [rbx + 0x10]
lea rcx, str.FRMRs_Received:_0x_04___1_d__n
movzx edx, word [rax + 0xa]
call sym.printf
mov rax, qword [rbx + 0x10]
lea rcx, str.FRMRs_Transmitted:_0x_04___1_d__n
movzx edx, word [rax + 0xc]
call sym.printf
mov rax, qword [rbx + 0x10]
lea rcx, str.IFrame_Receive_errors:_0x_04___1_d__n
movzx edx, word [rax + 0xe]
call sym.printf
mov rax, qword [rbx + 0x10]
lea rcx, str.Transmit_aborts:_0x_04___1_d__n
movzx edx, word [rax + 0x10]
call sym.printf
mov rax, qword [rbx + 0x10]
lea rcx, str.Transmitted:_0x_08___1_d__n
mov edx, dword [rax + 0x14]
call sym.printf
mov rax, qword [rbx + 0x10]
lea rcx, str.Received:_0x_08___1_d__n
mov edx, dword [rax + 0x18]
call sym.printf
mov rax, qword [rbx + 0x10]
lea rcx, str.IFrame_transmit_errors:_0x_04___1_d__n
movzx edx, word [rax + 0x1c]
call sym.printf
mov rax, qword [rbx + 0x10]
lea rcx, str.No_receive_buffers:_0x_04___1_d__n
movzx edx, word [rax + 0x1e]
call sym.printf
mov rax, qword [rbx + 0x10]
lea rcx, str.tl_timeouts:_0x_04___1_d__n
movzx edx, word [rax + 0x20]
call sym.printf
mov rax, qword [rbx + 0x10]
lea rcx, str.ti_timeouts:_0x_04___1_d__n
movzx edx, word [rax + 0x22]
call sym.printf
mov rax, qword [rbx + 0x10]
lea rcx, str.Free_NCBS:_0x_04___1_d__n
movzx edx, word [rax + 0x24]
call sym.printf
mov rax, qword [rbx + 0x10]
lea rcx, str.NCBS:_0x_04___1_d__n
movzx edx, word [rax + 0x26]
call sym.printf
mov rax, qword [rbx + 0x10]
lea rcx, str.Max_NCBS:_0x_04___1_d__n
movzx edx, word [rax + 0x28]
call sym.printf
mov rax, qword [rbx + 0x10]
lea rcx, str.No_transmit_buffers:_0x_04___1_d__n
movzx edx, word [rax + 0x2a]
call sym.printf
mov rax, qword [rbx + 0x10]
lea rcx, str.Max_datagram:_0x_04___1_d__n
movzx edx, word [rax + 0x2c]
call sym.printf
mov rax, qword [rbx + 0x10]
lea rcx, str.Pending_sessions:_0x_04___1_d__n
movzx edx, word [rax + 0x2e]
call sym.printf
mov rax, qword [rbx + 0x10]
lea rcx, str.Max_sessions:_0x_04___1_d__n
movzx edx, word [rax + 0x30]
call sym.printf
mov rax, qword [rbx + 0x10]
lea rcx, str.Packet_sessions:_0x_04___1_d__n
movzx edx, word [rax + 0x32]
call sym.printf
add rsp, 0x50
pop rbx
pop rsi
pop rdi
pop rbp
pop r12
pop r13
pop r14
ret
lea rcx, str.Incomplete_packet___d_bytes_long._n
call sym.printf
jmp 0x1004017f0