decompile the following x86:                              **************************************************************
                             *                          FUNCTION                          *
                             **************************************************************
                             undefined UdpReceiveDatagrams()
             undefined         AL:1           <RETURN>
             undefined8        Stack[0x18]:8  local_res18                             XREF[2]:     1c0029c27(W), 
                                                                                                   1c002aea8(R)  
             undefined8        Stack[-0x38]:8 local_38                                XREF[2]:     1c0029c32(W), 
                                                                                                   1c002aea0(R)  
             undefined8        Stack[-0x40]:8 local_40                                XREF[2]:     1c0029bc3(W), 
                                                                                                   1c002aeb0(R)  
             undefined8        Stack[-0x48]:8 local_48                                XREF[1]:     1c0029bd0(W)  
             undefined1[16]    Stack[-0x58]   local_58                                XREF[1]:     1c0029bfc(W)  
             undefined1[16]    Stack[-0x68]   local_68                                XREF[4]:     1c0029bda(*), 
                                                                                                   1c0029bed(W), 
                                                                                                   1c002a1ae(*), 
                                                                                                   1c002a960(*)  
             undefined1[16]    Stack[-0x78]   local_78                                XREF[1]:     1c002a612(W)  
             undefined1[16]    Stack[-0x88]   local_88                                XREF[1]:     1c002a60b(W)  
             undefined1[16]    Stack[-0x98]   local_98                                XREF[1]:     1c002a604(W)  
             undefined1[16]    Stack[-0xa8]   local_a8                                XREF[1]:     1c002a5fd(W)  
             undefined1[16]    Stack[-0xb8]   local_b8                                XREF[1]:     1c002a5f6(W)  
             undefined1[16]    Stack[-0xc8]   local_c8                                XREF[1]:     1c002a5ef(W)  
             undefined1[16]    Stack[-0xd8]   local_d8                                XREF[1]:     1c002a5e8(W)  
             undefined1[16]    Stack[-0xe8]   local_e8                                XREF[3]:     1c002a5da(*), 
                                                                                                   1c002a5e1(W), 
                                                                                                   1c002a7eb(*)  
             undefined1[16]    Stack[-0xf8]   local_f8                                XREF[1]:     1c002a64a(W)  
             undefined1[16]    Stack[-0x108   local_108                               XREF[1]:     1c002a643(W)  
             undefined1[16]    Stack[-0x118   local_118                               XREF[1]:     1c002a63c(W)  
             undefined1[16]    Stack[-0x128   local_128                               XREF[1]:     1c002a635(W)  
             undefined1[16]    Stack[-0x138   local_138                               XREF[1]:     1c002a62e(W)  
             undefined1[16]    Stack[-0x148   local_148                               XREF[1]:     1c002a627(W)  
             undefined1[16]    Stack[-0x158   local_158                               XREF[1]:     1c002a620(W)  
             undefined1[16]    Stack[-0x168   local_168                               XREF[3]:     1c002a619(W), 
                                                                                                   1c002a796(*), 
                                                                                                   1c002a7d1(*)  
             undefined1[16]    Stack[-0x178   local_178                               XREF[1]:     1c002a257(W)  
             undefined1[16]    Stack[-0x188   local_188                               XREF[1]:     1c002a250(W)  
             undefined1[16]    Stack[-0x198   local_198                               XREF[1]:     1c002a249(W)  
             undefined1[16]    Stack[-0x1a8   local_1a8                               XREF[1]:     1c002a242(W)  
             undefined1[16]    Stack[-0x1b8   local_1b8                               XREF[1]:     1c002a23b(W)  
             undefined1[16]    Stack[-0x1c8   local_1c8                               XREF[1]:     1c002a234(W)  
             undefined1[16]    Stack[-0x1d8   local_1d8                               XREF[1]:     1c002a22d(W)  
             undefined1[16]    Stack[-0x1e8   local_1e8                               XREF[3]:     1c002a21f(*), 
                                                                                                   1c002a226(W), 
                                                                                                   1c002a313(*)  
             undefined1[16]    Stack[-0x1f8   local_1f8                               XREF[1]:     1c002a28f(W)  
             undefined1[16]    Stack[-0x208   local_208                               XREF[1]:     1c002a288(W)  
             undefined1[16]    Stack[-0x218   local_218                               XREF[1]:     1c002a281(W)  
             undefined1[16]    Stack[-0x228   local_228                               XREF[1]:     1c002a27a(W)  
             undefined1[16]    Stack[-0x238   local_238                               XREF[1]:     1c002a273(W)  
             undefined1[16]    Stack[-0x248   local_248                               XREF[1]:     1c002a26c(W)  
             undefined1[16]    Stack[-0x258   local_258                               XREF[1]:     1c002a265(W)  
             undefined1[16]    Stack[-0x268   local_268                               XREF[3]:     1c002a25e(W), 
                                                                                                   1c002a2c2(*), 
                                                                                                   1c002a2f9(*)  
             undefined8        Stack[-0x278   local_278                               XREF[1]:     1c002ad1d(W)  
             undefined1[16]    Stack[-0x288   local_288                               XREF[3]:     1c002ad24(W), 
                                                                                                   1c002ad46(*), 
                                                                                                   1c002ad60(*)  
             undefined8        Stack[-0x290   local_290                               XREF[1]:     1c002aafc(W)  
             undefined1[16]    Stack[-0x2a0   local_2a0                               XREF[3]:     1c002aad9(W), 
                                                                                                   1c002ab21(*), 
                                                                                                   1c002ab39(*)  
             undefined8        Stack[-0x2a8   local_2a8                               XREF[1]:     1c002a982(W)  
             undefined1[16]    Stack[-0x2b8   local_2b8                               XREF[3]:     1c002a97e(W), 
                                                                                                   1c002a9a1(*), 
                                                                                                   1c002a9b8(*)  
             undefined8        Stack[-0x2c0   local_2c0                               XREF[1]:     1c0029f7a(W)  
             undefined1[16]    Stack[-0x2d0   local_2d0                               XREF[3]:     1c0029f4d(W), 
                                                                                                   1c0029f9b(*), 
                                                                                                   1c0029fb3(*)  
             undefined1[16]    Stack[-0x2e0   local_2e0                               XREF[2,2]:   1c002a677(W), 
                                                                                                   1c002a72a(W), 
                                                                                                   1c002a72f(W), 
                                                                                                   1c002a736(W)  
             undefined1[16]    Stack[-0x2f0   local_2f0                               XREF[2,1]:   1c002a673(W), 
                                                                                                   1c002a710(W), 
                                                                                                   1c002a723(W)  
             undefined1[16]    Stack[-0x300   local_300                               XREF[3,1]:   1c002a66f(W), 
                                                                                                   1c002a700(W), 
                                                                                                   1c002a71f(*), 
                                                                                                   1c002a708(W)  
             undefined1[16]    Stack[-0x310   local_310                               XREF[2,3]:   1c0029d98(W), 
                                                                                                   1c0029e46(W), 
                                                                                                   1c0029e4e(W), 
                                                                                                   1c0029baa(*), 
                                                                                                   1c0029e55(*)  
             undefined1[16]    Stack[-0x320   local_320                               XREF[2,1]:   1c0029d94(W), 
                                                                                                   1c0029e2e(W), 
                                                                                                   1c0029e3f(W)  
             undefined1[16]    Stack[-0x330   local_330                               XREF[3,1]:   1c0029d90(W), 
                                                                                                   1c0029e1e(W), 
                                                                                                   1c0029e51(*), 
                                                                                                   1c0029e26(W)  
             undefined8        Stack[-0x338   local_338                               XREF[4]:     1c002a1de(W), 
                                                                                                   1c002a590(R), 
                                                                                                   1c002ab00(W), 
                                                                                                   1c002acdd(R)  
             undefined4        Stack[-0x340   local_340                               XREF[2]:     1c0029c2f(W), 
                                                                                                   1c002aa74(R)  
             undefined4        Stack[-0x344   local_344                               XREF[2]:     1c0029c0b(W), 
                                                                                                   1c002aa63(R)  
             undefined4        Stack[-0x348   local_348                               XREF[3]:     1c002aa89(W), 
                                                                                                   1c002aaa8(*), 
                                                                                                   1c002aac7(R)  
             undefined8        Stack[-0x350   local_350                               XREF[5]:     1c0029ecc(W), 
                                                                                                   1c002a0ff(R), 
                                                                                                   1c002a1be(W), 
                                                                                                   1c002a932(R), 
                                                                                                   1c002aa3b(R)  
             undefined4        Stack[-0x358   local_358                               XREF[3]:     1c0029eef(W), 
                                                                                                   1c0029f0e(*), 
                                                                                                   1c0029f2d(R)  
             undefined8        Stack[-0x360   local_360                               XREF[9]:     1c0029ec4(W), 
                                                                                                   1c002a94a(W), 
                                                                                                   1c002a9e0(*), 
                                                                                                   1c002acfe(*), 
                                                                                                   1c002ad8f(*), 
                                                                                                   1c002ada9(*), 
                                                                                                   1c002ae50(R), 
                                                                                                   1c002ae5a(R), 
                                                                                                   1c002ae74(R)  
             undefined8        Stack[-0x368   local_368                               XREF[8]:     1c0029ec8(W), 
                                                                                                   1c002a572(W), 
                                                                                                   1c002a8e2(W), 
                                                                                                   1c002a8fd(W), 
                                                                                                   1c002a9cf(*), 
                                                                                                   1c002acf2(*), 
                                                                                                   1c002ad7f(*), 
                                                                                                   1c002ae56(R)  
             undefined8        Stack[-0x370   local_370                               XREF[7]:     1c0029be1(W), 
                                                                                                   1c0029d7b(W), 
                                                                                                   1c002a91b(R), 
                                                                                                   1c002aa53(R), 
                                                                                                   1c002acee(R), 
                                                                                                   1c002ad79(R), 
                                                                                                   1c002ae5e(W)  
             undefined8        Stack[-0x378   local_378                               XREF[10]:    1c0029bcc(W), 
                                                                                                   1c002a425(R), 
                                                                                                   1c002a43f(R), 
                                                                                                   1c002a4c1(R), 
                                                                                                   1c002a4eb(R), 
                                                                                                   1c002a518(R), 
                                                                                                   1c002a557(R), 
                                                                                                   1c002a6ad(R), 
                                                                                                   1c002a77d(R), 
                                                                                                   1c002a8e9(R)  
             undefined2        Stack[-0x380   local_380                               XREF[3]:     1c002ac46(W), 
                                                                                                   1c002ac5d(*), 
                                                                                                   1c002ac7e(R)  
             undefined2        Stack[-0x384   local_384                               XREF[3]:     1c002a130(W), 
                                                                                                   1c002a148(*), 
                                                                                                   1c002a15f(R)  
             undefined2        Stack[-0x388   local_388                               XREF[3]:     1c0029ff0(W), 
                                                                                                   1c002a008(*), 
                                                                                                   1c002a01f(R)  
             undefined8        Stack[-0x390   local_390                               XREF[10]:    1c0029be5(W), 
                                                                                                   1c0029f54(R), 
                                                                                                   1c0029f59(W), 
                                                                                                   1c002a09b(R), 
                                                                                                   1c002a0be(R), 
                                                                                                   1c002a0d9(W), 
                                                                                                   1c002a0e0(R), 
                                                                                                   1c002a1a7(R), 
                                                                                                   1c002a942(R), 
                                                                                                   1c002adfd(R)  
             undefined4        Stack[-0x398   local_398                               XREF[6]:     1c0029c0e(W), 
                                                                                                   1c002a050(R), 
                                                                                                   1c002a066(W), 
                                                                                                   1c002a19d(R), 
                                                                                                   1c002a2ad(W), 
                                                                                                   1c002a938(R)  
             undefined8        Stack[-0x3a0   local_3a0                               XREF[8,5]:   1c0029eaf(W), 
                                                                                                   1c002a1d3(R), 
                                                                                                   1c002a55b(R), 
                                                                                                   1c002a9db(*), 
                                                                                                   1c002ad05(*), 
                                                                                                   1c002ad8a(*), 
                                                                                                   1c002adad(*), 
                                                                                                   1c002ae6f(W), 
                                                                                                   1c0029f5e(R), 
                                                                                                   1c002a1d8(R), 
                                                                                                   1c002a57f(R), 
                                                                                                   1c002a812(R), 
                                                                                                   1c002aae0(R)  
             undefined4        Stack[-0x3a4   local_3a4                               XREF[3]:     1c002a1e6(W), 
                                                                                                   1c002a5a2(RW), 
                                                                                                   1c002a90e(R)  
             undefined1        Stack[-0x3a5   local_3a5                               XREF[3]:     1c002aa84(W), 
                                                                                                   1c002aaa0(*), 
                                                                                                   1c002aabe(R)  
             undefined1        Stack[-0x3a6   local_3a6                               XREF[2]:     1c0029f48(W), 
                                                                                                   1c002a190(R)  
             undefined1        Stack[-0x3a7   local_3a7                               XREF[3]:     1c0029eea(W), 
                                                                                                   1c0029f06(*), 
                                                                                                   1c0029f24(R)  
             undefined1        Stack[-0x3a8   local_3a8                               XREF[4]:     1c0029c16(W), 
                                                                                                   1c002a0b7(R), 
                                                                                                   1c002a0d4(W), 
                                                                                                   1c002ae85(R)  
             undefined4        Stack[-0x3b0   local_3b0                               XREF[4]:     1c002a360(W), 
                                                                                                   1c002a3b8(W), 
                                                                                                   1c002a83d(W), 
                                                                                                   1c002a895(W)  
             undefined8        Stack[-0x3b8   local_3b8                               XREF[6]:     1c002a2f4(W), 
                                                                                                   1c002a368(W), 
                                                                                                   1c002a3c0(W), 
                                                                                                   1c002a7c9(W), 
                                                                                                   1c002a845(W), 
                                                                                                   1c002a89d(W)  
             undefined4        Stack[-0x3c0   local_3c0                               XREF[6]:     1c002a300(W), 
                                                                                                   1c002a371(W), 
                                                                                                   1c002a3c9(W), 
                                                                                                   1c002a7d8(W), 
                                                                                                   1c002a84d(W), 
                                                                                                   1c002a8a5(W)  
             undefined8        Stack[-0x3c8   local_3c8                               XREF[6]:     1c002a30e(W), 
                                                                                                   1c002a379(W), 
                                                                                                   1c002a3d1(W), 
                                                                                                   1c002a7e6(W), 
                                                                                                   1c002a855(W), 
                                                                                                   1c002a8ad(W)  
             undefined4        Stack[-0x3d0   local_3d0                               XREF[6]:     1c002a31d(W), 
                                                                                                   1c002a37e(W), 
                                                                                                   1c002a3d6(W), 
                                                                                                   1c002a7f5(W), 
                                                                                                   1c002a85a(W), 
                                                                                                   1c002a8b2(W)  
             undefined8        Stack[-0x3d8   local_3d8                               XREF[8]:     1c0029d37(W), 
                                                                                                   1c002a321(W), 
                                                                                                   1c002a386(W), 
                                                                                                   1c002a3de(W), 
                                                                                                   1c002a51f(W), 
                                                                                                   1c002a7f9(W), 
                                                                                                   1c002a862(W), 
                                                                                                   1c002a8ba(W)  
             undefined8        Stack[-0x3e0   local_3e0                               XREF[10]:    1c0029d3e(W), 
                                                                                                   1c002a32d(W), 
                                                                                                   1c002a38a(W), 
                                                                                                   1c002a3e2(W), 
                                                                                                   1c002a52a(W), 
                                                                                                   1c002a805(W), 
                                                                                                   1c002a867(W), 
                                                                                                   1c002a8bf(W), 
                                                                                                   1c002a9d6(W), 
                                                                                                   1c002ad85(W)  
             undefined8        Stack[-0x3e8   local_3e8                               XREF[23]:    1c0029c95(W), 
                                                                                                   1c0029d45(W), 
                                                                                                   1c002a105(W), 
                                                                                                   1c002a216(W), 
                                                                                                   1c002a2cd(W), 
                                                                                                   1c002a331(W), 
                                                                                                   1c002a392(W), 
                                                                                                   1c002a3ea(W), 
                                                                                                   1c002a476(W), 
                                                                                                   1c002a537(W), 
                                                                                                   1c002a5d2(W), 
                                                                                                   1c002a7a1(W), 
                                                                                                   1c002a809(W), 
                                                                                                   1c002a86f(W), 
                                                                                                   1c002a8c7(W), 
                                                                                                   1c002a9ea(W), 
                                                                                                   1c002aba5(W), 
                                                                                                   1c002abdf(W), 
                                                                                                   1c002ac15(W), 
                                                                                                   1c002acb3(W)  
                             UdpReceiveDatagrams                             XREF[4]:     UdpNlClientReceiveDatagrams:1c00
                                                                                          1c01e30ec(*), 1c01e30fc(*), 
                                                                                          1c020dc18(*)  
       1c0029ba0 40 55           PUSH       RBP
       1c0029ba2 56              PUSH       RSI
       1c0029ba3 57              PUSH       RDI
       1c0029ba4 41 54           PUSH       R12
       1c0029ba6 41 55           PUSH       R13
       1c0029ba8 41 56           PUSH       R14
       1c0029baa 48 8d ac        LEA        RBP=>local_310[8],[RSP + -0x2d8]
                 24 28 fd 
                 ff ff
       1c0029bb2 48 81 ec        SUB        RSP,0x3d8
                 d8 03 00 00
       1c0029bb9 48 8b 05        MOV        RAX,qword ptr [__security_cookie]                = 00002B992DDFA232h
                 00 9d 1d 00
       1c0029bc0 48 33 c4        XOR        RAX,RSP
       1c0029bc3 48 89 85        MOV        qword ptr [RBP + local_40],RAX
                 c8 02 00 00
       1c0029bca 33 c0           XOR        EAX,EAX
       1c0029bcc 48 89 4d 90     MOV        qword ptr [RBP + local_378],RCX
       1c0029bd0 48 89 85        MOV        qword ptr [RBP + local_48],RAX
                 c0 02 00 00
       1c0029bd7 0f 57 c0        XORPS      XMM0,XMM0
       1c0029bda 48 8d 85        LEA        RAX=>local_68,[RBP + 0x2a0]
                 a0 02 00 00
       1c0029be1 48 89 55 98     MOV        qword ptr [RBP + local_370],RDX
       1c0029be5 48 89 44        MOV        qword ptr [RSP + local_390],RAX
                 24 78
       1c0029bea 4c 8b e1        MOV        R12,RCX
       1c0029bed 0f 11 85        MOVUPS     xmmword ptr [RBP + local_68[0]],XMM0
                 a0 02 00 00
       1c0029bf4 b9 ff ff        MOV        ECX,0xffff
                 00 00
       1c0029bf9 4c 8b ea        MOV        R13,RDX
       1c0029bfc 0f 11 85        MOVUPS     xmmword ptr [RBP + local_58[0]],XMM0
                 b0 02 00 00
       1c0029c03 65 8b 04        MOV        EAX,dword ptr GS:[0x1a4]
                 25 a4 01 
                 00 00
       1c0029c0b 89 45 c4        MOV        dword ptr [RBP + local_344],EAX
       1c0029c0e c7 44 24        MOV        dword ptr [RSP + local_398],0x5
                 70 05 00 
                 00 00
       1c0029c16 c6 44 24        MOV        byte ptr [RSP + local_3a8],0x1
                 60 01
       1c0029c1b 48 ff 15        CALL       qword ptr [->NTOSKRNL.EXE::KeQueryActiveProces   = 002243ac
                 16 8a 1f 00
       1c0029c22 0f 1f 44        NOP        dword ptr [RAX + RAX*0x1]
                 00 00
                             LAB_1c0029c27                                   XREF[4]:     1c01e30f0(*), 1c01e3100(*), 
                                                                                          1c020dc1c(*), 1c020dc24(*)  
       1c0029c27 48 89 9c        MOV        qword ptr [RSP + local_res18],RBX
                 24 20 04 
                 00 00
       1c0029c2f 89 45 c8        MOV        dword ptr [RBP + local_340],EAX
       1c0029c32 4c 89 bc        MOV        qword ptr [RSP + local_38],R15
                 24 d0 03 
                 00 00
                             LAB_1c0029c3a                                   XREF[1]:     1c0029d88(j)  
       1c0029c3a 49 8b 7d 48     MOV        RDI,qword ptr [R13 + 0x48]
       1c0029c3e 45 33 c9        XOR        R9D,R9D
       1c0029c41 41 be 0d        MOV        R14D,0xc000000d
                 00 00 c0
       1c0029c47 41 8d 71 02     LEA        ESI,[R9 + 0x2]
       1c0029c4b 48 85 ff        TEST       RDI,RDI
       1c0029c4e 0f 85 58        JNZ        LAB_1c0029eac
                 02 00 00
       1c0029c54 49 8b 5d 08     MOV        RBX,qword ptr [R13 + 0x8]
       1c0029c58 39 bb 8c        CMP        dword ptr [RBX + 0x8c],EDI
                 00 00 00
       1c0029c5e 0f 8c 13        JL         LAB_1c0029d77
                 01 00 00
       1c0029c64 66 41 83        CMP        word ptr [R12 + 0x18],0x17
                 7c 24 18 17
       1c0029c6b 49 8b 4d 18     MOV        RCX,qword ptr [R13 + 0x18]
       1c0029c6f 0f 85 a0        JNZ        LAB_1c0029d15
                 00 00 00
       1c0029c75 e8 c2 29        CALL       IN6_IS_ADDR_UNSPECIFIED                          undefined IN6_IS_ADDR_UNSPECIFIE
                 00 00
       1c0029c7a 84 c0           TEST       AL,AL
       1c0029c7c 0f 85 9c        JNZ        LAB_1c0029d1e
                 00 00 00
                             LAB_1c0029c82                                   XREF[2]:     1c0029d18(j), 1c0029d26(j)  
       1c0029c82 48 8b 5b 08     MOV        RBX,qword ptr [RBX + 0x8]
       1c0029c86 83 7b 18 08     CMP        dword ptr [RBX + 0x18],0x8
       1c0029c8a 0f 82 9f        JC         LAB_1c0029d2f
                 00 00 00
       1c0029c90 ba 08 00        MOV        EDX,0x8
                 00 00
       1c0029c95 44 89 4c        MOV        dword ptr [RSP + local_3e8],R9D
                 24 20
       1c0029c9a 4d 8d 45 58     LEA        R8,[R13 + 0x58]
       1c0029c9e 48 8b cb        MOV        RCX,RBX
       1c0029ca1 44 8d 4a f9     LEA        R9D,[RDX + -0x7]
       1c0029ca5 48 ff 15        CALL       qword ptr [->NDIS.SYS::NdisGetDataBuffer]        = 002255d4
                 cc 74 1f 00
       1c0029cac 0f 1f 44        NOP        dword ptr [RAX + RAX*0x1]
                 00 00
       1c0029cb1 48 8b f8        MOV        RDI,RAX
       1c0029cb4 0f b7 48 04     MOVZX      ECX,word ptr [RAX + 0x4]
       1c0029cb8 66 c1 c9 08     ROR        CX,0x8
       1c0029cbc 44 0f b7 f9     MOVZX      R15D,CX
       1c0029cc0 41 83 ff 08     CMP        R15D,0x8
       1c0029cc4 72 69           JC         LAB_1c0029d2f
       1c0029cc6 44 3b 7b 18     CMP        R15D,dword ptr [RBX + 0x18]
       1c0029cca 77 63           JA         LAB_1c0029d2f
       1c0029ccc 49 8b 4d 08     MOV        RCX,qword ptr [R13 + 0x8]
       1c0029cd0 66 83 b9        CMP        word ptr [RCX + 0x118],0x0
                 18 01 00 
                 00 00
       1c0029cd8 77 18           JA         LAB_1c0029cf2
       1c0029cda 66 83 78        CMP        word ptr [RAX + 0x6],0x0
                 06 00
       1c0029cdf 0f 85 a8        JNZ        LAB_1c0029d8d
                 00 00 00
       1c0029ce5 66 41 83        CMP        word ptr [R12 + 0x18],0x17
                 7c 24 18 17
       1c0029cec 0f 84 7c        JZ         LAB_1c0029e6e
                 01 00 00
                             LAB_1c0029cf2                                   XREF[5]:     1c0029cd8(j), 1c0029dc8(j), 
                                                                                          1c0029de7(j), 1c0029e0e(j), 
                                                                                          1c0029e68(j)  
       1c0029cf2 48 8b 43 08     MOV        RAX,qword ptr [RBX + 0x8]
       1c0029cf6 8b 4b 10        MOV        ECX,dword ptr [RBX + 0x10]
       1c0029cf9 83 c1 08        ADD        ECX,0x8
       1c0029cfc 3b 48 28        CMP        ECX,dword ptr [RAX + 0x28]
       1c0029cff 0f 83 79        JNC        LAB_1c0029e7e
                 01 00 00
       1c0029d05 83 43 28 08     ADD        dword ptr [RBX + 0x28],0x8
       1c0029d09 83 43 18 f8     ADD        dword ptr [RBX + 0x18],-0x8
       1c0029d0d 89 4b 10        MOV        dword ptr [RBX + 0x10],ECX
       1c0029d10 e9 82 01        JMP        LAB_1c0029e97
                 00 00
                             LAB_1c0029d15                                   XREF[1]:     1c0029c6f(j)  
       1c0029d15 83 39 00        CMP        dword ptr [RCX],0x0
       1c0029d18 0f 85 64        JNZ        LAB_1c0029c82
                 ff ff ff
                             LAB_1c0029d1e                                   XREF[1]:     1c0029c7c(j)  
       1c0029d1e 49 8b 45 20     MOV        RAX,qword ptr [R13 + 0x20]
       1c0029d22 83 78 18 04     CMP        dword ptr [RAX + 0x18],0x4
       1c0029d26 0f 84 56        JZ         LAB_1c0029c82
                 ff ff ff
       1c0029d2c 41 8b f1        MOV        ESI,R9D
                             LAB_1c0029d2f                                   XREF[5]:     1c0029c8a(j), 1c0029cc4(j), 
                                                                                          1c0029cca(j), 1c0029dfc(j), 
                                                                                          1c0029e79(j)  
       1c0029d2f 41 0f b7        MOVZX      ECX,word ptr [R12 + 0x18]
                 4c 24 18
       1c0029d35 33 c0           XOR        EAX,EAX
       1c0029d37 89 74 24 30     MOV        dword ptr [RSP + local_3d8],ESI
       1c0029d3b 45 33 c9        XOR        R9D,R9D
       1c0029d3e 89 44 24 28     MOV        dword ptr [RSP + local_3e0],EAX
       1c0029d42 45 33 c0        XOR        R8D,R8D
       1c0029d45 4c 89 6c        MOV        qword ptr [RSP + local_3e8],R13
                 24 20
       1c0029d4a 8d 50 11        LEA        EDX,[RAX + 0x11]
       1c0029d4d e8 22 2c        CALL       InetInspectReceiveDiscard                        undefined InetInspectReceiveDisc
                 00 00
       1c0029d52 49 8b 45 08     MOV        RAX,qword ptr [R13 + 0x8]
       1c0029d56 44 89 b0        MOV        dword ptr [RAX + 0x8c],R14D
                 8c 00 00 00
       1c0029d5d 65 8b 04        MOV        EAX,dword ptr GS:[0x1a4]
                 25 a4 01 
                 00 00
       1c0029d65 8b c8           MOV        ECX,EAX
       1c0029d67 49 8b 84        MOV        RAX,qword ptr [R12 + 0x80]
                 24 80 00 
                 00 00
       1c0029d6f 48 c1 e1 06     SHL        RCX,0x6
       1c0029d73 ff 44 01 0c     INC        dword ptr [RCX + RAX*0x1 + 0xc]
                             LAB_1c0029d77                                   XREF[2]:     1c0029c5e(j), 1c0029ea6(j)  
       1c0029d77 4d 8b 6d 00     MOV        R13,qword ptr [R13]
       1c0029d7b 4c 89 6d 98     MOV        qword ptr [RBP + local_370],R13
       1c0029d7f 4d 85 ed        TEST       R13,R13
       1c0029d82 0f 84 18        JZ         LAB_1c002aea0
                 11 00 00
       1c0029d88 e9 ad fe        JMP        LAB_1c0029c3a
                 ff ff
                             LAB_1c0029d8d                                   XREF[1]:     1c0029cdf(j)  
       1c0029d8d 0f 57 c0        XORPS      XMM0,XMM0
       1c0029d90 0f 11 45 d8     MOVUPS     xmmword ptr [RBP + local_330[0]],XMM0
       1c0029d94 0f 11 45 e8     MOVUPS     xmmword ptr [RBP + local_320[0]],XMM0
       1c0029d98 0f 11 45 f8     MOVUPS     xmmword ptr [RBP + local_310[0]],XMM0
       1c0029d9c 48 ff 15        CALL       qword ptr [->NETIO.SYS::WfpNblInfoGet]           = 0022479c
                 35 74 1f 00
       1c0029da3 0f 1f 44        NOP        dword ptr [RAX + RAX*0x1]
                 00 00
       1c0029da8 48 85 c0        TEST       RAX,RAX
       1c0029dab 74 21           JZ         LAB_1c0029dce
       1c0029dad 48 8b 0d        MOV        RCX,qword ptr [->NTOSKRNL.EXE::MmBadPointer]     = 0022693a
                 14 8a 1f 00
       1c0029db4 48 3b 01        CMP        RAX,qword ptr [RCX]
       1c0029db7 74 15           JZ         LAB_1c0029dce
       1c0029db9 48 8b 48 18     MOV        RCX,qword ptr [RAX + 0x18]
       1c0029dbd 48 85 c9        TEST       RCX,RCX
       1c0029dc0 74 0c           JZ         LAB_1c0029dce
       1c0029dc2 f7 01 00        TEST       dword ptr [RCX],0x100000
                 00 10 00
       1c0029dc8 0f 85 24        JNZ        LAB_1c0029cf2
                 ff ff ff
                             LAB_1c0029dce                                   XREF[3]:     1c0029dab(j), 1c0029db7(j), 
                                                                                          1c0029dc0(j)  
       1c0029dce 49 8b 54        MOV        RDX,qword ptr [R12 + 0x20]
                 24 20
       1c0029dd3 49 8b 4d 08     MOV        RCX,qword ptr [R13 + 0x8]
       1c0029dd7 8b 42 10        MOV        EAX,dword ptr [RDX + 0x10]
       1c0029dda 83 f8 06        CMP        EAX,0x6
       1c0029ddd 75 22           JNZ        LAB_1c0029e01
       1c0029ddf 8b 81 90        MOV        EAX,dword ptr [RCX + 0x90]
                 00 00 00
       1c0029de5 a8 08           TEST       AL,0x8
       1c0029de7 0f 85 05        JNZ        LAB_1c0029cf2
                 ff ff ff
       1c0029ded a8 01           TEST       AL,0x1
       1c0029def 74 28           JZ         LAB_1c0029e19
       1c0029df1 be 03 00        MOV        ESI,0x3
                 00 00
       1c0029df6 41 be 3f        MOV        R14D,0xc000003f
                 00 00 c0
       1c0029dfc e9 2e ff        JMP        LAB_1c0029d2f
                 ff ff
                             LAB_1c0029e01                                   XREF[1]:     1c0029ddd(j)  
       1c0029e01 83 f8 11        CMP        EAX,0x11
       1c0029e04 75 13           JNZ        LAB_1c0029e19
       1c0029e06 8b 81 90        MOV        EAX,dword ptr [RCX + 0x90]
                 00 00 00
       1c0029e0c a8 10           TEST       AL,0x10
       1c0029e0e 0f 85 de        JNZ        LAB_1c0029cf2
                 fe ff ff
       1c0029e14 40 84 c6        TEST       SIL,AL
       1c0029e17 75 55           JNZ        LAB_1c0029e6e
                             LAB_1c0029e19                                   XREF[2]:     1c0029def(j), 1c0029e04(j)  
       1c0029e19 49 8b 44        MOV        RAX,qword ptr [R12 + 0x28]
                 24 28
       1c0029e1e 48 89 45 d8     MOV        qword ptr [RBP + local_330[0]],RAX
       1c0029e22 48 8b 41 08     MOV        RAX,qword ptr [RCX + 0x8]
       1c0029e26 48 89 45 e0     MOV        qword ptr [RBP + local_330[8]],RAX
       1c0029e2a 49 8b 45 18     MOV        RAX,qword ptr [R13 + 0x18]
       1c0029e2e 48 89 45 e8     MOV        qword ptr [RBP + local_320[0]],RAX
       1c0029e32 49 8b 45 20     MOV        RAX,qword ptr [R13 + 0x20]
       1c0029e36 48 8b 48 10     MOV        RCX,qword ptr [RAX + 0x10]
       1c0029e3a 48 8b 01        MOV        RAX,qword ptr [RCX]
       1c0029e3d 33 c9           XOR        ECX,ECX
       1c0029e3f 48 89 45 f0     MOV        qword ptr [RBP + local_320[8]],RAX
       1c0029e43 8b 42 10        MOV        EAX,dword ptr [RDX + 0x10]
       1c0029e46 89 45 f8        MOV        dword ptr [RBP + local_310[0]],EAX
       1c0029e49 49 8b 44        MOV        RAX,qword ptr [R12 + 0x30]
                 24 30
       1c0029e4e 89 4d fc        MOV        dword ptr [RBP + local_310[4]],ECX
       1c0029e51 48 8d 4d d8     LEA        RCX=>local_330,[RBP + -0x28]
       1c0029e55 44 89 7d 00     MOV        dword ptr [RBP]=>local_310[8],R15D
       1c0029e59 48 8b 40 08     MOV        RAX,qword ptr [RAX + 0x8]
       1c0029e5d ff 15 05        CALL       qword ptr [->_guard_dispatch_icall]              undefined _guard_dispatch_icall()
                 8a 1f 00                                                                    = 1c00a83f0
       1c0029e63 3d ff ff        CMP        EAX,0xffff
                 00 00
       1c0029e68 0f 84 84        JZ         LAB_1c0029cf2
                 fe ff ff
                             LAB_1c0029e6e                                   XREF[2]:     1c0029cec(j), 1c0029e17(j)  
       1c0029e6e be 03 00        MOV        ESI,0x3
                 00 00
       1c0029e73 41 be 3f        MOV        R14D,0xc000003f
                 00 00 c0
       1c0029e79 e9 b1 fe        JMP        LAB_1c0029d2f
                 ff ff
                             LAB_1c0029e7e                                   XREF[1]:     1c0029cff(j)  
       1c0029e7e 45 33 c9        XOR        R9D,R9D
       1c0029e81 45 33 c0        XOR        R8D,R8D
       1c0029e84 48 8b cb        MOV        RCX,RBX
       1c0029e87 41 8d 51 08     LEA        EDX,[R9 + 0x8]
       1c0029e8b 48 ff 15        CALL       qword ptr [->NDIS.SYS::NdisAdvanceNetBufferDat   = 00225534
                 0e 73 1f 00
       1c0029e92 0f 1f 44        NOP        dword ptr [RAX + RAX*0x1]
                 00 00
                             LAB_1c0029e97                                   XREF[1]:     1c0029d10(j)  
       1c0029e97 41 83 45        ADD        dword ptr [R13 + 0x30],0x8
                 30 08
       1c0029e9c 45 33 c9        XOR        R9D,R9D
       1c0029e9f 49 89 7d 48     MOV        qword ptr [R13 + 0x48],RDI
       1c0029ea3 48 85 ff        TEST       RDI,RDI
       1c0029ea6 0f 84 cb        JZ         LAB_1c0029d77
                 fe ff ff
                             LAB_1c0029eac                                   XREF[1]:     1c0029c4e(j)  
       1c0029eac 48 8b 07        MOV        RAX,qword ptr [RDI]
       1c0029eaf 48 89 44        MOV        qword ptr [RSP + local_3a0],RAX
                 24 68
       1c0029eb4 0f 1f 40 00     NOP        dword ptr [RAX]
       1c0029eb8 0f 1f 84        NOP        dword ptr [RAX + RAX*0x1]
                 00 00 00 
                 00 00
                             LAB_1c0029ec0                                   XREF[1]:     1c002ae7f(j)  
       1c0029ec0 4d 8b 75 20     MOV        R14,qword ptr [R13 + 0x20]
       1c0029ec4 4c 89 4d a8     MOV        qword ptr [RBP + local_360],R9
       1c0029ec8 4c 89 4d a0     MOV        qword ptr [RBP + local_368],R9
       1c0029ecc 4c 89 75 b8     MOV        qword ptr [RBP + local_350],R14
       1c0029ed0 41 8b 46 18     MOV        EAX,dword ptr [R14 + 0x18]
       1c0029ed4 ff c8           DEC        EAX
       1c0029ed6 83 f8 01        CMP        EAX,0x1
       1c0029ed9 0f 86 7d        JBE        LAB_1c002aa5c
                 0b 00 00
       1c0029edf 49 8b 46 08     MOV        RAX,qword ptr [R14 + 0x8]
       1c0029ee3 48 8b 1d        MOV        RBX,qword ptr [UdpCompartmentSet]
                 3e df 1d 00
       1c0029eea c6 44 24        MOV        byte ptr [RSP + local_3a7],0x0
                 61 00
       1c0029eef 44 89 4d b0     MOV        dword ptr [RBP + local_358],R9D
       1c0029ef3 48 8b 08        MOV        RCX,qword ptr [RAX]
       1c0029ef6 8b 39           MOV        EDI,dword ptr [RCX]
       1c0029ef8 83 ff 01        CMP        EDI,0x1
       1c0029efb 75 09           JNZ        LAB_1c0029f06
       1c0029efd 48 8b bb        MOV        RDI,qword ptr [RBX + 0x148]
                 48 01 00 00
       1c0029f04 eb 35           JMP        LAB_1c0029f3b
                             LAB_1c0029f06                                   XREF[1]:     1c0029efb(j)  
       1c0029f06 4c 8d 44        LEA        R8=>local_3a7,[RSP + 0x61]
                 24 61
       1c0029f0b 48 8b cb        MOV        RCX,RBX
       1c0029f0e 48 8d 55 b0     LEA        RDX=>local_358,[RBP + -0x50]
       1c0029f12 e8 4d ab        CALL       RtlAcquireScalableReadLock                       undefined RtlAcquireScalableRead
                 04 00
       1c0029f17 45 33 c0        XOR        R8D,R8D
       1c0029f1a 8b d7           MOV        EDX,EDI
       1c0029f1c 48 8b cb        MOV        RCX,RBX
       1c0029f1f e8 e0 08        CALL       InetGetCompartmentUnderLock                      undefined InetGetCompartmentUnde
                 19 00
       1c0029f24 44 0f b6        MOVZX      R8D,byte ptr [RSP + local_3a7]
                 44 24 61
       1c0029f2a 48 8b cb        MOV        RCX,RBX
       1c0029f2d 8b 55 b0        MOV        EDX,dword ptr [RBP + local_358]
       1c0029f30 48 8b f8        MOV        RDI,RAX
       1c0029f33 e8 0c b7        CALL       RtlReleaseScalableReadLock                       undefined RtlReleaseScalableRead
                 04 00
       1c0029f38 45 33 c9        XOR        R9D,R9D
                             LAB_1c0029f3b                                   XREF[1]:     1c0029f04(j)  
       1c0029f3b 48 8b 47 20     MOV        RAX,qword ptr [RDI + 0x20]
       1c0029f3f 0f 57 c0        XORPS      XMM0,XMM0
       1c0029f42 40 b7 01        MOV        DIL,0x1
       1c0029f45 41 8b f1        MOV        ESI,R9D
       1c0029f48 40 88 7c        MOV        byte ptr [RSP + local_3a6],DIL
                 24 62
       1c0029f4d 0f 11 45 38     MOVUPS     xmmword ptr [RBP + local_2d0[0]],XMM0
       1c0029f51 4c 8b 30        MOV        R14,qword ptr [RAX]
       1c0029f54 48 8b 44        MOV        RAX,qword ptr [RSP + local_390]
                 24 78
       1c0029f59 48 89 44        MOV        qword ptr [RSP + local_390],RAX
                 24 78
       1c0029f5e 0f b7 44        MOVZX      EAX,word ptr [RSP + local_3a0+0x2]
                 24 6a
       1c0029f63 66 c1 c8 08     ROR        AX,0x8
       1c0029f67 0f b7 d8        MOVZX      EBX,AX
       1c0029f6a 8b c3           MOV        EAX,EBX
       1c0029f6c 48 c1 e8 08     SHR        RAX,0x8
       1c0029f70 4d 8b bc        MOV        R15,qword ptr [R14 + RAX*0x8 + 0xe0]
                 c6 e0 00 
                 00 00
       1c0029f78 33 c0           XOR        EAX,EAX
       1c0029f7a 48 89 45 48     MOV        qword ptr [RBP + local_2c0],RAX
       1c0029f7e f0 41 ff        INC.LOCK   dword ptr [R15 + 0x8]
                 47 08
       1c0029f83 49 8b cf        MOV        RCX,R15
       1c0029f86 48 ff 15        CALL       qword ptr [->NTOSKRNL.EXE::KeTestSpinLock]       = 002244d4
                 3b 86 1f 00
       1c0029f8d 0f 1f 44        NOP        dword ptr [RAX + RAX*0x1]
                 00 00
       1c0029f92 84 c0           TEST       AL,AL
       1c0029f94 75 2d           JNZ        LAB_1c0029fc3
       1c0029f96 f0 41 ff        DEC.LOCK   dword ptr [R15 + 0x8]
                 4f 08
       1c0029f9b 48 8d 55 38     LEA        RDX=>local_2d0,[RBP + 0x38]
       1c0029f9f 49 8b cf        MOV        RCX,R15
       1c0029fa2 48 ff 15        CALL       qword ptr [->NTOSKRNL.EXE::KeAcquireInStackQue   = 002244e6
                 17 86 1f 00
       1c0029fa9 0f 1f 44        NOP        dword ptr [RAX + RAX*0x1]
                 00 00
       1c0029fae f0 41 ff        INC.LOCK   dword ptr [R15 + 0x8]
                 47 08
       1c0029fb3 48 8d 4d 38     LEA        RCX=>local_2d0,[RBP + 0x38]
       1c0029fb7 48 ff 15        CALL       qword ptr [->NTOSKRNL.EXE::KeReleaseInStackQue   = 00224534
                 f2 85 1f 00
       1c0029fbe 0f 1f 44        NOP        dword ptr [RAX + RAX*0x1]
                 00 00
                             LAB_1c0029fc3                                   XREF[1]:     1c0029f94(j)  
       1c0029fc3 66 41 83        CMP        word ptr [R15 + 0x10],0x0
                 7f 10 00
       1c0029fc9 0f 86 c6        JBE        LAB_1c002a195
                 01 00 00
       1c0029fcf 0f b6 cb        MOVZX      ECX,BL
       1c0029fd2 49 8b 5f 18     MOV        RBX,qword ptr [R15 + 0x18]
       1c0029fd6 48 c1 e1 05     SHL        RCX,0x5
       1c0029fda 48 83 c1 10     ADD        RCX,0x10
       1c0029fde 48 03 d9        ADD        RBX,RCX
       1c0029fe1 48 83 3b 00     CMP        qword ptr [RBX],0x0
       1c0029fe5 0f 84 aa        JZ         LAB_1c002a195
                 01 00 00
       1c0029feb 33 c0           XOR        EAX,EAX
       1c0029fed 0f 1f 00        NOP        dword ptr [RAX]
                             LAB_1c0029ff0                                   XREF[1]:     1c002a042(j)  
       1c0029ff0 66 89 45 80     MOV        word ptr [RBP + local_388],AX
       1c0029ff4 48 8b 0b        MOV        RCX,qword ptr [RBX]
       1c0029ff7 0f b6 d1        MOVZX      EDX,CL
       1c0029ffa 48 85 c9        TEST       RCX,RCX
       1c0029ffd 74 05           JZ         LAB_1c002a004
       1c0029fff f6 c1 03        TEST       CL,0x3
       1c002a002 74 33           JZ         LAB_1c002a037
                             LAB_1c002a004                                   XREF[1]:     1c0029ffd(j)  
       1c002a004 49 8b 46 70     MOV        RAX,qword ptr [R14 + 0x70]
       1c002a008 4c 8d 45 80     LEA        R8=>local_388,[RBP + -0x80]
       1c002a00c 80 e2 03        AND        DL,0x3
       1c002a00f 48 83 e1 fc     AND        RCX,-0x4
       1c002a013 ff 15 4f        CALL       qword ptr [->_guard_dispatch_icall]              undefined _guard_dispatch_icall()
                 88 1f 00                                                                    = 1c00a83f0
       1c002a019 48 83 f8 ff     CMP        RAX,-0x1
       1c002a01d 74 16           JZ         LAB_1c002a035
       1c002a01f 0f b7 45 80     MOVZX      EAX,word ptr [RBP + local_388]
       1c002a023 66 85 c0        TEST       AX,AX
       1c002a026 74 28           JZ         LAB_1c002a050
       1c002a028 4d 85 e4        TEST       R12,R12
       1c002a02b 74 23           JZ         LAB_1c002a050
       1c002a02d 66 41 3b        CMP        AX,word ptr [R12 + 0x18]
                 44 24 18
       1c002a033 74 1b           JZ         LAB_1c002a050
                             LAB_1c002a035                                   XREF[1]:     1c002a01d(j)  
       1c002a035 33 c0           XOR        EAX,EAX
                             LAB_1c002a037                                   XREF[1]:     1c002a002(j)  
       1c002a037 48 8b 1b        MOV        RBX,qword ptr [RBX]
       1c002a03a 48 83 e3 fc     AND        RBX,-0x4
       1c002a03e 48 83 3b 00     CMP        qword ptr [RBX],0x0
       1c002a042 75 ac           JNZ        LAB_1c0029ff0
       1c002a044 e9 4c 01        JMP        LAB_1c002a195
                 00 00
                             LAB_1c002a050                                   XREF[6]:     1c002a026(j), 1c002a02b(j), 
                                                                                          1c002a033(j), 1c002a166(j), 
                                                                                          1c002a16f(j), 1c002a17b(j)  
       1c002a050 8b 4c 24 70     MOV        ECX,dword ptr [RSP + local_398]
       1c002a054 3b f1           CMP        ESI,ECX
       1c002a056 0f 82 84        JC         LAB_1c002a0e0
                 00 00 00
       1c002a05c 8d 04 89        LEA        EAX,[RCX + RCX*0x4]
       1c002a05f 8d 0c 45        LEA        ECX,[0x1 + RAX*0x2]
                 01 00 00 00
       1c002a066 89 4c 24 70     MOV        dword ptr [RSP + local_398],ECX
       1c002a06a 3b ce           CMP        ECX,ESI
       1c002a06c 0f 86 38        JBE        LAB_1c002a2aa
                 02 00 00
       1c002a072 8b d1           MOV        EDX,ECX
       1c002a074 41 b8 49        MOV        R8D,0x43456e49
                 6e 45 43
       1c002a07a 48 c1 e2 03     SHL        RDX,0x3
       1c002a07e b9 00 02        MOV        ECX,0x200
                 00 00
       1c002a083 48 ff 15        CALL       qword ptr [->NTOSKRNL.EXE::ExAllocatePoolWithT   = 0022448c
                 5e 85 1f 00
       1c002a08a 0f 1f 44        NOP        dword ptr [RAX + RAX*0x1]
                 00 00
       1c002a08f 48 8b f8        MOV        RDI,RAX
       1c002a092 48 85 c0        TEST       RAX,RAX
       1c002a095 0f 84 0f        JZ         LAB_1c002a2aa
                 02 00 00
       1c002a09b 48 8b 44        MOV        RAX,qword ptr [RSP + local_390]
                 24 78
       1c002a0a0 48 85 c0        TEST       RAX,RAX
       1c002a0a3 74 2f           JZ         LAB_1c002a0d4
       1c002a0a5 44 8b c6        MOV        R8D,ESI
       1c002a0a8 48 8b d0        MOV        RDX,RAX
       1c002a0ab 49 c1 e0 03     SHL        R8,0x3
       1c002a0af 48 8b cf        MOV        RCX,RDI
       1c002a0b2 e8 49 e3        CALL       memcpy                                           undefined memcpy()
                 07 00
       1c002a0b7 80 7c 24        CMP        byte ptr [RSP + local_3a8],0x0
                 60 00
       1c002a0bc 75 16           JNZ        LAB_1c002a0d4
       1c002a0be 48 8b 4c        MOV        RCX,qword ptr [RSP + local_390]
                 24 78
       1c002a0c3 ba 49 6e        MOV        EDX,0x43456e49
                 45 43
       1c002a0c8 48 ff 15        CALL       qword ptr [->NTOSKRNL.EXE::ExFreePoolWithTag]    = 002244b2
                 09 85 1f 00
       1c002a0cf 0f 1f 44        NOP        dword ptr [RAX + RAX*0x1]
                 00 00
                             LAB_1c002a0d4                                   XREF[2]:     1c002a0a3(j), 1c002a0bc(j)  
       1c002a0d4 c6 44 24        MOV        byte ptr [RSP + local_3a8],0x0
                 60 00
       1c002a0d9 48 89 7c        MOV        qword ptr [RSP + local_390],RDI
                 24 78
       1c002a0de eb 05           JMP        LAB_1c002a0e5
                             LAB_1c002a0e0                                   XREF[1]:     1c002a056(j)  
       1c002a0e0 48 8b 7c        MOV        RDI,qword ptr [RSP + local_390]
                 24 78
                             LAB_1c002a0e5                                   XREF[1]:     1c002a0de(j)  
       1c002a0e5 0f b6 03        MOVZX      EAX,byte ptr [RBX]
       1c002a0e8 24 03           AND        AL,0x3
       1c002a0ea 3c 01           CMP        AL,0x1
       1c002a0ec 75 31           JNZ        LAB_1c002a11f
       1c002a0ee 48 8b 0b        MOV        RCX,qword ptr [RBX]
       1c002a0f1 4d 8b c4        MOV        R8,R12
       1c002a0f4 49 8b 86        MOV        RAX,qword ptr [R14 + 0x80]
                 80 00 00 00
       1c002a0fb 48 83 e1 fc     AND        RCX,-0x4
       1c002a0ff 4c 8b 4d b8     MOV        R9,qword ptr [RBP + local_350]
       1c002a103 b2 01           MOV        DL,0x1
       1c002a105 4c 89 6c        MOV        qword ptr [RSP + local_3e8],R13
                 24 20
       1c002a10a ff 15 58        CALL       qword ptr [->_guard_dispatch_icall]              undefined _guard_dispatch_icall()
                 87 1f 00                                                                    = 1c00a83f0
       1c002a110 84 c0           TEST       AL,AL
       1c002a112 74 0b           JZ         LAB_1c002a11f
       1c002a114 48 8b 03        MOV        RAX,qword ptr [RBX]
       1c002a117 8b ce           MOV        ECX,ESI
       1c002a119 ff c6           INC        ESI
       1c002a11b 48 89 04 cf     MOV        qword ptr [RDI + RCX*0x8],RAX
                             LAB_1c002a11f                                   XREF[2]:     1c002a0ec(j), 1c002a112(j)  
       1c002a11f 48 8b 1b        MOV        RBX,qword ptr [RBX]
       1c002a122 48 83 e3 fc     AND        RBX,-0x4
       1c002a126 48 83 3b 00     CMP        qword ptr [RBX],0x0
       1c002a12a 74 64           JZ         LAB_1c002a190
       1c002a12c 33 c0           XOR        EAX,EAX
       1c002a12e 66 90           NOP
                             LAB_1c002a130                                   XREF[1]:     1c002a18e(j)  
       1c002a130 66 89 45 84     MOV        word ptr [RBP + local_384],AX
       1c002a134 48 8b 0b        MOV        RCX,qword ptr [RBX]
       1c002a137 0f b6 d1        MOVZX      EDX,CL
       1c002a13a 48 85 c9        TEST       RCX,RCX
       1c002a13d 74 05           JZ         LAB_1c002a144
       1c002a13f f6 c1 03        TEST       CL,0x3
       1c002a142 74 3f           JZ         LAB_1c002a183
                             LAB_1c002a144                                   XREF[1]:     1c002a13d(j)  
       1c002a144 49 8b 46 70     MOV        RAX,qword ptr [R14 + 0x70]
       1c002a148 4c 8d 45 84     LEA        R8=>local_384,[RBP + -0x7c]
       1c002a14c 80 e2 03        AND        DL,0x3
       1c002a14f 48 83 e1 fc     AND        RCX,-0x4
       1c002a153 ff 15 0f        CALL       qword ptr [->_guard_dispatch_icall]              undefined _guard_dispatch_icall()
                 87 1f 00                                                                    = 1c00a83f0
       1c002a159 48 83 f8 ff     CMP        RAX,-0x1
       1c002a15d 74 22           JZ         LAB_1c002a181
       1c002a15f 0f b7 45 84     MOVZX      EAX,word ptr [RBP + local_384]
       1c002a163 66 85 c0        TEST       AX,AX
       1c002a166 0f 84 e4        JZ         LAB_1c002a050
                 fe ff ff
       1c002a16c 4d 85 e4        TEST       R12,R12
       1c002a16f 0f 84 db        JZ         LAB_1c002a050
                 fe ff ff
       1c002a175 66 41 3b        CMP        AX,word ptr [R12 + 0x18]
                 44 24 18
       1c002a17b 0f 84 cf        JZ         LAB_1c002a050
                 fe ff ff
                             LAB_1c002a181                                   XREF[1]:     1c002a15d(j)  
       1c002a181 33 c0           XOR        EAX,EAX
                             LAB_1c002a183                                   XREF[1]:     1c002a142(j)  
       1c002a183 48 8b 1b        MOV        RBX,qword ptr [RBX]
       1c002a186 48 83 e3 fc     AND        RBX,-0x4
       1c002a18a 48 83 3b 00     CMP        qword ptr [RBX],0x0
       1c002a18e 75 a0           JNZ        LAB_1c002a130
                             LAB_1c002a190                                   XREF[1]:     1c002a12a(j)  
       1c002a190 0f b6 7c        MOVZX      EDI,byte ptr [RSP + local_3a6]
                 24 62
                             LAB_1c002a195                                   XREF[4]:     1c0029fc9(j), 1c0029fe5(j), 
                                                                                          1c002a044(j), 1c002a2b1(j)  
       1c002a195 f0 41 ff        DEC.LOCK   dword ptr [R15 + 0x8]
                 4f 08
       1c002a19a 45 33 c0        XOR        R8D,R8D
       1c002a19d 44 8b 7c        MOV        R15D,dword ptr [RSP + local_398]
                 24 70
       1c002a1a2 41 3b f7        CMP        ESI,R15D
       1c002a1a5 73 0b           JNC        LAB_1c002a1b2
       1c002a1a7 48 8b 4c        MOV        RCX,qword ptr [RSP + local_390]
                 24 78
       1c002a1ac 8b c6           MOV        EAX,ESI
       1c002a1ae 4c 89 04 c1     MOV        qword ptr [RCX + RAX*0x8]=>local_68,R8
                             LAB_1c002a1b2                                   XREF[1]:     1c002a1a5(j)  
       1c002a1b2 85 f6           TEST       ESI,ESI
       1c002a1b4 40 0f b6 c7     MOVZX      EAX,DIL
       1c002a1b8 41 8b c8        MOV        ECX,R8D
       1c002a1bb 0f 45 c8        CMOVNZ     ECX,EAX
       1c002a1be 89 4d b8        MOV        dword ptr [RBP + local_350],ECX
       1c002a1c1 84 c9           TEST       CL,CL
       1c002a1c3 0f 85 76        JNZ        LAB_1c002a93f
                 07 00 00
       1c002a1c9 49 8b 45 20     MOV        RAX,qword ptr [R13 + 0x20]
       1c002a1cd 41 bf 01        MOV        R15D,0x1
                 00 00 00
       1c002a1d3 48 8b 5c        MOV        RBX,qword ptr [RSP + local_3a0]
                 24 68
       1c002a1d8 44 0f b7        MOVZX      R14D,word ptr [RSP + local_3a0+0x2]
                 74 24 6a
       1c002a1de 48 89 45 d0     MOV        qword ptr [RBP + local_338],RAX
       1c002a1e2 49 8b 45 08     MOV        RAX,qword ptr [R13 + 0x8]
       1c002a1e6 44 89 7c        MOV        dword ptr [RSP + local_3a4],R15D
                 24 64
       1c002a1eb c7 80 8c        MOV        dword ptr [RAX + 0x8c],0xc000023f
                 00 00 00 
                 3f 02 00 c0
       1c002a1f5 41 8b 75 30     MOV        ESI,dword ptr [R13 + 0x30]
       1c002a1f9 41 0f b7        MOVZX      EDI,word ptr [R12 + 0x18]
                 7c 24 18
       1c002a1ff 83 ee 08        SUB        ESI,0x8
       1c002a202 f6 05 7d        TEST       byte ptr [DAT_1c0208d86],0x2
                 eb 1d 00 02
       1c002a209 0f 84 2b        JZ         LAB_1c002a33a
                 01 00 00
       1c002a20f 49 8b 45 20     MOV        RAX,qword ptr [R13 + 0x20]
       1c002a213 0f 57 c0        XORPS      XMM0,XMM0
       1c002a216 66 44 89        MOV        word ptr [RSP + local_3e8],R14W
                 74 24 20
       1c002a21c 0f 57 c9        XORPS      XMM1,XMM1
       1c002a21f 48 8d 95        LEA        RDX=>local_1e8,[RBP + 0x120]
                 20 01 00 00
       1c002a226 0f 11 85        MOVUPS     xmmword ptr [RBP + local_1e8[0]],XMM0
                 20 01 00 00
       1c002a22d 0f 11 85        MOVUPS     xmmword ptr [RBP + local_1d8[0]],XMM0
                 30 01 00 00
       1c002a234 0f 11 85        MOVUPS     xmmword ptr [RBP + local_1c8[0]],XMM0
                 40 01 00 00
       1c002a23b 0f 11 85        MOVUPS     xmmword ptr [RBP + local_1b8[0]],XMM0
                 50 01 00 00
       1c002a242 0f 11 85        MOVUPS     xmmword ptr [RBP + local_1a8[0]],XMM0
                 60 01 00 00
       1c002a249 0f 11 85        MOVUPS     xmmword ptr [RBP + local_198[0]],XMM0
                 70 01 00 00
       1c002a250 0f 11 85        MOVUPS     xmmword ptr [RBP + local_188[0]],XMM0
                 80 01 00 00
       1c002a257 0f 11 85        MOVUPS     xmmword ptr [RBP + local_178[0]],XMM0
                 90 01 00 00
       1c002a25e 0f 11 8d        MOVUPS     xmmword ptr [RBP + local_268[0]],XMM1
                 a0 00 00 00
       1c002a265 0f 11 8d        MOVUPS     xmmword ptr [RBP + local_258[0]],XMM1
                 b0 00 00 00
       1c002a26c 0f 11 8d        MOVUPS     xmmword ptr [RBP + local_248[0]],XMM1
                 c0 00 00 00
       1c002a273 0f 11 8d        MOVUPS     xmmword ptr [RBP + local_238[0]],XMM1
                 d0 00 00 00
       1c002a27a 0f 11 8d        MOVUPS     xmmword ptr [RBP + local_228[0]],XMM1
                 e0 00 00 00
       1c002a281 0f 11 8d        MOVUPS     xmmword ptr [RBP + local_218[0]],XMM1
                 f0 00 00 00
       1c002a288 0f 11 8d        MOVUPS     xmmword ptr [RBP + local_208[0]],XMM1
                 00 01 00 00
       1c002a28f 0f 11 8d        MOVUPS     xmmword ptr [RBP + local_1f8[0]],XMM1
                 10 01 00 00
       1c002a296 48 8b 48 10     MOV        RCX,qword ptr [RAX + 0x10]
       1c002a29a 44 8b 49 08     MOV        R9D,dword ptr [RCX + 0x8]
       1c002a29e 4c 8b 01        MOV        R8,qword ptr [RCX]
       1c002a2a1 83 ff 17        CMP        EDI,0x17
       1c002a2a4 75 10           JNZ        LAB_1c002a2b6
       1c002a2a6 8b cf           MOV        ECX,EDI
       1c002a2a8 eb 0f           JMP        LAB_1c002a2b9
                             LAB_1c002a2aa                                   XREF[2]:     1c002a06c(j), 1c002a095(j)  
       1c002a2aa 40 32 ff        XOR        DIL,DIL
       1c002a2ad 89 74 24 70     MOV        dword ptr [RSP + local_398],ESI
       1c002a2b1 e9 df fe        JMP        LAB_1c002a195
                 ff ff
                             LAB_1c002a2b6                                   XREF[1]:     1c002a2a4(j)  
       1c002a2b6 0f b7 cf        MOVZX      ECX,DI
                             LAB_1c002a2b9                                   XREF[1]:     1c002a2a8(j)  
       1c002a2b9 e8 8e be        CALL       INETADDR_SETSOCKADDR                             undefined INETADDR_SETSOCKADDR(u
                 fd ff
       1c002a2be 45 8b 4d 14     MOV        R9D,dword ptr [R13 + 0x14]
       1c002a2c2 48 8d 95        LEA        RDX=>local_268,[RBP + 0xa0]
                 a0 00 00 00
       1c002a2c9 4d 8b 45 18     MOV        R8,qword ptr [R13 + 0x18]
       1c002a2cd 66 89 5c        MOV        word ptr [RSP + local_3e8],BX
                 24 20
       1c002a2d2 83 ff 17        CMP        EDI,0x17
       1c002a2d5 75 04           JNZ        LAB_1c002a2db
       1c002a2d7 8b cf           MOV        ECX,EDI
       1c002a2d9 eb 03           JMP        LAB_1c002a2de
                             LAB_1c002a2db                                   XREF[1]:     1c002a2d5(j)  
       1c002a2db 0f b7 cf        MOVZX      ECX,DI
                             LAB_1c002a2de                                   XREF[1]:     1c002a2d9(j)  
       1c002a2de e8 69 be        CALL       INETADDR_SETSOCKADDR                             undefined INETADDR_SETSOCKADDR(u
                 fd ff
       1c002a2e3 44 39 3d        CMP        dword ptr [DAT_1c0200d24],R15D
                 3a 6a 1d 00
       1c002a2ea 75 4e           JNZ        LAB_1c002a33a
       1c002a2ec 0f b7 cf        MOVZX      ECX,DI
       1c002a2ef e8 0c dd        CALL       SOCKADDR_SIZE                                    undefined SOCKADDR_SIZE()
                 05 00
       1c002a2f4 44 89 7c        MOV        dword ptr [RSP + local_3b8],R15D
                 24 50
       1c002a2f9 48 8d 8d        LEA        RCX=>local_268,[RBP + 0xa0]
                 a0 00 00 00
       1c002a300 c7 44 24        MOV        dword ptr [RSP + local_3c0],0x4
                 48 04 00 
                 00 00
       1c002a308 41 b9 11        MOV        R9D,0x11
                 00 00 00
       1c002a30e 48 89 4c        MOV        qword ptr [RSP + local_3c8],RCX
                 24 40
       1c002a313 48 8d 8d        LEA        RCX=>local_1e8,[RBP + 0x120]
                 20 01 00 00
       1c002a31a 0f b6 d0        MOVZX      EDX,AL
       1c002a31d 89 54 24 38     MOV        dword ptr [RSP + local_3d0],EDX
       1c002a321 48 89 4c        MOV        qword ptr [RSP + local_3d8],RCX
                 24 30
       1c002a326 48 8d 0d        LEA        RCX,[MICROSOFT_TCPIP_PROVIDER_Context]
                 d3 69 1d 00
       1c002a32d 89 54 24 28     MOV        dword ptr [RSP + local_3e0],EDX
       1c002a331 89 7c 24 20     MOV        dword ptr [RSP + local_3e8],EDI
       1c002a335 e8 32 74        CALL       McTemplateK0qqqbr2qbr4qq_EtwWriteTransfer        undefined McTemplateK0qqqbr2qbr4
                 0c 00
                             LAB_1c002a33a                                   XREF[2]:     1c002a209(j), 1c002a2ea(j)  
       1c002a33a 83 ff 02        CMP        EDI,0x2
       1c002a33d 74 5f           JZ         LAB_1c002a39e
       1c002a33f 83 ff 17        CMP        EDI,0x17
       1c002a342 0f 85 ac        JNZ        LAB_1c002a3f4
                 00 00 00
       1c002a348 49 8b 45 08     MOV        RAX,qword ptr [R13 + 0x8]
       1c002a34c 44 8d 47 fa     LEA        R8D,[RDI + -0x6]
       1c002a350 41 0f b6        MOVZX      ECX,byte ptr [R13 + 0x10]
                 4d 10
       1c002a355 45 0f b7 ce     MOVZX      R9D,R14W
       1c002a359 49 8b 55 18     MOV        RDX,qword ptr [R13 + 0x18]
       1c002a35d 41 22 cf        AND        CL,R15B
       1c002a360 c7 44 24        MOV        dword ptr [RSP + local_3b0],0x4
                 58 04 00 
                 00 00
       1c002a368 48 89 44        MOV        qword ptr [RSP + local_3b8],RAX
                 24 50
       1c002a36d 41 8b 45 40     MOV        EAX,dword ptr [R13 + 0x40]
       1c002a371 89 44 24 48     MOV        dword ptr [RSP + local_3c0],EAX
       1c002a375 49 8b 45 38     MOV        RAX,qword ptr [R13 + 0x38]
       1c002a379 48 89 44        MOV        qword ptr [RSP + local_3c8],RAX
                 24 40
       1c002a37e c7 44 24        MOV        dword ptr [RSP + local_3d0],0x8
                 38 08 00 
                 00 00
       1c002a386 89 74 24 30     MOV        dword ptr [RSP + local_3d8],ESI
       1c002a38a 88 4c 24 28     MOV        byte ptr [RSP + local_3e0],CL
       1c002a38e 49 8b 4d 20     MOV        RCX,qword ptr [R13 + 0x20]
       1c002a392 66 89 5c        MOV        word ptr [RSP + local_3e8],BX
                 24 20
       1c002a397 e8 80 28        CALL       WfpInTransportShimV6Discard                      undefined WfpInTransportShimV6Di
                 00 00
       1c002a39c eb 56           JMP        LAB_1c002a3f4
                             LAB_1c002a39e                                   XREF[1]:     1c002a33d(j)  
       1c002a39e 49 8b 45 08     MOV        RAX,qword ptr [R13 + 0x8]
       1c002a3a2 45 0f b7 ce     MOVZX      R9D,R14W
       1c002a3a6 41 0f b6        MOVZX      ECX,byte ptr [R13 + 0x10]
                 4d 10
       1c002a3ab 41 b8 11        MOV        R8D,0x11
                 00 00 00
       1c002a3b1 49 8b 55 18     MOV        RDX,qword ptr [R13 + 0x18]
       1c002a3b5 41 22 cf        AND        CL,R15B
       1c002a3b8 c7 44 24        MOV        dword ptr [RSP + local_3b0],0x4
                 58 04 00 
                 00 00
       1c002a3c0 48 89 44        MOV        qword ptr [RSP + local_3b8],RAX
                 24 50
       1c002a3c5 41 8b 45 40     MOV        EAX,dword ptr [R13 + 0x40]
       1c002a3c9 89 44 24 48     MOV        dword ptr [RSP + local_3c0],EAX
       1c002a3cd 49 8b 45 38     MOV        RAX,qword ptr [R13 + 0x38]
       1c002a3d1 48 89 44        MOV        qword ptr [RSP + local_3c8],RAX
                 24 40
       1c002a3d6 c7 44 24        MOV        dword ptr [RSP + local_3d0],0x8
                 38 08 00 
                 00 00
       1c002a3de 89 74 24 30     MOV        dword ptr [RSP + local_3d8],ESI
       1c002a3e2 88 4c 24 28     MOV        byte ptr [RSP + local_3e0],CL
       1c002a3e6 49 8b 4d 20     MOV        RCX,qword ptr [R13 + 0x20]
       1c002a3ea 66 89 5c        MOV        word ptr [RSP + local_3e8],BX
                 24 20
       1c002a3ef e8 f8 f1        CALL       WfpInTransportShimV4Discard                      undefined WfpInTransportShimV4Di
                 ff ff
                             LAB_1c002a3f4                                   XREF[2]:     1c002a342(j), 1c002a39c(j)  
       1c002a3f4 49 8b 7d 00     MOV        RDI,qword ptr [R13]
       1c002a3f8 48 85 ff        TEST       RDI,RDI
       1c002a3fb 0f 84 12        JZ         LAB_1c002a913
                 05 00 00
       1c002a401 0f 1f 40 00     NOP        dword ptr [RAX]
       1c002a405 66 66 66        NOP        word ptr [RAX + RAX*0x1]
                 0f 1f 84 
                 00 00 00 
                             LAB_1c002a410                                   XREF[1]:     1c002a8d8(j)  
       1c002a410 4c 8b 77 48     MOV        R14,qword ptr [RDI + 0x48]
       1c002a414 41 bc 0d        MOV        R12D,0xc000000d
                 00 00 c0
       1c002a41a 41 bf 02        MOV        R15D,0x2
                 00 00 00
       1c002a420 4d 85 f6        TEST       R14,R14
       1c002a423 74 09           JZ         LAB_1c002a42e
       1c002a425 4c 8b 65 90     MOV        R12,qword ptr [RBP + local_378]
       1c002a429 e9 44 01        JMP        LAB_1c002a572
                 00 00
                             LAB_1c002a42e                                   XREF[1]:     1c002a423(j)  
       1c002a42e 48 8b 77 08     MOV        RSI,qword ptr [RDI + 0x8]
       1c002a432 83 be 8c        CMP        dword ptr [RSI + 0x8c],0x0
                 00 00 00 00
       1c002a439 0f 8c a1        JL         LAB_1c002a8e0
                 04 00 00
       1c002a43f 48 8b 45 90     MOV        RAX,qword ptr [RBP + local_378]
       1c002a443 48 8b 4f 18     MOV        RCX,qword ptr [RDI + 0x18]
       1c002a447 66 83 78        CMP        word ptr [RAX + 0x18],0x17
                 18 17
       1c002a44c 0f 85 aa        JNZ        LAB_1c002a4fc
                 00 00 00
       1c002a452 e8 e5 21        CALL       IN6_IS_ADDR_UNSPECIFIED                          undefined IN6_IS_ADDR_UNSPECIFIE
                 00 00
       1c002a457 84 c0           TEST       AL,AL
       1c002a459 0f 85 a6        JNZ        LAB_1c002a505
                 00 00 00
                             LAB_1c002a45f                                   XREF[2]:     1c002a4ff(j), 1c002a50d(j)  
       1c002a45f 48 8b 76 08     MOV        RSI,qword ptr [RSI + 0x8]
       1c002a463 83 7e 18 08     CMP        dword ptr [RSI + 0x18],0x8
       1c002a467 0f 82 ab        JC         LAB_1c002a518
                 00 00 00
       1c002a46d 33 c0           XOR        EAX,EAX
       1c002a46f 4c 8d 47 58     LEA        R8,[RDI + 0x58]
       1c002a473 48 8b ce        MOV        RCX,RSI
       1c002a476 89 44 24 20     MOV        dword ptr [RSP + local_3e8],EAX
       1c002a47a 8d 50 08        LEA        EDX,[RAX + 0x8]
       1c002a47d 44 8d 48 01     LEA        R9D,[RAX + 0x1]
       1c002a481 48 ff 15        CALL       qword ptr [->NDIS.SYS::NdisGetDataBuffer]        = 002255d4
                 f0 6c 1f 00
       1c002a488 0f 1f 44        NOP        dword ptr [RAX + RAX*0x1]
                 00 00
       1c002a48d 4c 8b f0        MOV        R14,RAX
       1c002a490 0f b7 48 04     MOVZX      ECX,word ptr [RAX + 0x4]
       1c002a494 66 c1 c9 08     ROR        CX,0x8
       1c002a498 44 0f b7 e9     MOVZX      R13D,CX
       1c002a49c 41 83 fd 08     CMP        R13D,0x8
       1c002a4a0 72 76           JC         LAB_1c002a518
       1c002a4a2 44 3b 6e 18     CMP        R13D,dword ptr [RSI + 0x18]
       1c002a4a6 77 70           JA         LAB_1c002a518
       1c002a4a8 48 8b 4f 08     MOV        RCX,qword ptr [RDI + 0x8]
       1c002a4ac 66 83 b9        CMP        word ptr [RCX + 0x118],0x0
                 18 01 00 
                 00 00
       1c002a4b4 77 1a           JA         LAB_1c002a4d0
       1c002a4b6 66 83 78        CMP        word ptr [RAX + 0x6],0x0
                 06 00
       1c002a4bb 0f 85 ab        JNZ        LAB_1c002a66c
                 01 00 00
       1c002a4c1 48 8b 45 90     MOV        RAX,qword ptr [RBP + local_378]
       1c002a4c5 66 83 78        CMP        word ptr [RAX + 0x18],0x17
                 18 17
       1c002a4ca 0f 84 7f        JZ         LAB_1c002a74f
                 02 00 00
                             LAB_1c002a4d0                                   XREF[5]:     1c002a4b4(j), 1c002a6a7(j), 
                                                                                          1c002a6c9(j), 1c002a6f1(j), 
                                                                                          1c002a749(j)  
       1c002a4d0 48 8b 46 08     MOV        RAX,qword ptr [RSI + 0x8]
       1c002a4d4 8b 4e 10        MOV        ECX,dword ptr [RSI + 0x10]
       1c002a4d7 83 c1 08        ADD        ECX,0x8
       1c002a4da 3b 48 28        CMP        ECX,dword ptr [RAX + 0x28]
       1c002a4dd 0f 83 7d        JNC        LAB_1c002a760
                 02 00 00
       1c002a4e3 83 46 28 08     ADD        dword ptr [RSI + 0x28],0x8
       1c002a4e7 83 46 18 f8     ADD        dword ptr [RSI + 0x18],-0x8
       1c002a4eb 4c 8b 65 90     MOV        R12,qword ptr [RBP + local_378]
       1c002a4ef 89 4e 10        MOV        dword ptr [RSI + 0x10],ECX
       1c002a4f2 83 47 30 08     ADD        dword ptr [RDI + 0x30],0x8
       1c002a4f6 4c 89 77 48     MOV        qword ptr [RDI + 0x48],R14
       1c002a4fa eb 76           JMP        LAB_1c002a572
                             LAB_1c002a4fc                                   XREF[1]:     1c002a44c(j)  
       1c002a4fc 83 39 00        CMP        dword ptr [RCX],0x0
       1c002a4ff 0f 85 5a        JNZ        LAB_1c002a45f
                 ff ff ff
                             LAB_1c002a505                                   XREF[1]:     1c002a459(j)  
       1c002a505 48 8b 47 20     MOV        RAX,qword ptr [RDI + 0x20]
       1c002a509 83 78 18 04     CMP        dword ptr [RAX + 0x18],0x4
       1c002a50d 0f 84 4c        JZ         LAB_1c002a45f
                 ff ff ff
       1c002a513 33 c0           XOR        EAX,EAX
       1c002a515 44 8b f8        MOV        R15D,EAX
                             LAB_1c002a518                                   XREF[5]:     1c002a467(j), 1c002a4a0(j), 
                                                                                          1c002a4a6(j), 1c002a6df(j), 
                                                                                          1c002a75b(j)  
       1c002a518 48 8b 45 90     MOV        RAX,qword ptr [RBP + local_378]
       1c002a51c 45 33 c9        XOR        R9D,R9D
       1c002a51f 44 89 7c        MOV        dword ptr [RSP + local_3d8],R15D
                 24 30
       1c002a524 45 33 c0        XOR        R8D,R8D
       1c002a527 45 33 ff        XOR        R15D,R15D
       1c002a52a 44 89 7c        MOV        dword ptr [RSP + local_3e0],R15D
                 24 28
       1c002a52f 0f b7 48 18     MOVZX      ECX,word ptr [RAX + 0x18]
       1c002a533 41 8d 51 11     LEA        EDX,[R9 + 0x11]
       1c002a537 48 89 7c        MOV        qword ptr [RSP + local_3e8],RDI
                 24 20
       1c002a53c e8 33 24        CALL       InetInspectReceiveDiscard                        undefined InetInspectReceiveDisc
                 00 00
       1c002a541 48 8b 47 08     MOV        RAX,qword ptr [RDI + 0x8]
       1c002a545 45 8b f7        MOV        R14D,R15D
       1c002a548 44 89 a0        MOV        dword ptr [RAX + 0x8c],R12D
                 8c 00 00 00
       1c002a54f 65 8b 04        MOV        EAX,dword ptr GS:[0x1a4]
                 25 a4 01 
                 00 00
       1c002a557 4c 8b 65 90     MOV        R12,qword ptr [RBP + local_378]
       1c002a55b 48 8b 5c        MOV        RBX,qword ptr [RSP + local_3a0]
                 24 68
       1c002a560 8b c8           MOV        ECX,EAX
       1c002a562 48 c1 e1 06     SHL        RCX,0x6
       1c002a566 49 8b 84        MOV        RAX,qword ptr [R12 + 0x80]
                 24 80 00 
                 00 00
       1c002a56e ff 44 01 0c     INC        dword ptr [RCX + RAX*0x1 + 0xc]
                             LAB_1c002a572                                   XREF[3]:     1c002a429(j), 1c002a4fa(j), 
                                                                                          1c002a785(j)  
       1c002a572 4c 89 75 a0     MOV        qword ptr [RBP + local_368],R14
       1c002a576 4d 85 f6        TEST       R14,R14
       1c002a579 0f 84 67        JZ         LAB_1c002a8e6
                 03 00 00
       1c002a57f 44 0f b7        MOVZX      R11D,word ptr [RSP + local_3a0+0x2]
                 5c 24 6a
       1c002a585 66 45 3b        CMP        R11W,word ptr [R14 + 0x2]
                 5e 02
       1c002a58a 0f 85 7e        JNZ        LAB_1c002a90e
                 03 00 00
       1c002a590 48 8b 45 d0     MOV        RAX,qword ptr [RBP + local_338]
       1c002a594 48 3b 47 20     CMP        RAX,qword ptr [RDI + 0x20]
       1c002a598 0f 85 70        JNZ        LAB_1c002a90e
                 03 00 00
       1c002a59e 48 8b 47 08     MOV        RAX,qword ptr [RDI + 0x8]
       1c002a5a2 ff 44 24 64     INC        dword ptr [RSP + local_3a4]
       1c002a5a6 c7 80 8c        MOV        dword ptr [RAX + 0x8c],0xc000023f
                 00 00 00 
                 3f 02 00 c0
       1c002a5b0 44 8b 77 30     MOV        R14D,dword ptr [RDI + 0x30]
       1c002a5b4 41 0f b7        MOVZX      ESI,word ptr [R12 + 0x18]
                 74 24 18
       1c002a5ba 41 83 ee 08     SUB        R14D,0x8
       1c002a5be f6 05 c1        TEST       byte ptr [DAT_1c0208d86],0x2
                 e7 1d 00 02
       1c002a5c5 0f 84 4d        JZ         LAB_1c002a818
                 02 00 00
       1c002a5cb 48 8b 47 20     MOV        RAX,qword ptr [RDI + 0x20]
       1c002a5cf 0f 57 c0        XORPS      XMM0,XMM0
       1c002a5d2 66 89 5c        MOV        word ptr [RSP + local_3e8],BX
                 24 20
       1c002a5d7 0f 57 c9        XORPS      XMM1,XMM1
       1c002a5da 48 8d 95        LEA        RDX=>local_e8,[RBP + 0x220]
                 20 02 00 00
       1c002a5e1 0f 11 85        MOVUPS     xmmword ptr [RBP + local_e8[0]],XMM0
                 20 02 00 00
       1c002a5e8 0f 11 85        MOVUPS     xmmword ptr [RBP + local_d8[0]],XMM0
                 30 02 00 00
       1c002a5ef 0f 11 85        MOVUPS     xmmword ptr [RBP + local_c8[0]],XMM0
                 40 02 00 00
       1c002a5f6 0f 11 85        MOVUPS     xmmword ptr [RBP + local_b8[0]],XMM0
                 50 02 00 00
       1c002a5fd 0f 11 85        MOVUPS     xmmword ptr [RBP + local_a8[0]],XMM0
                 60 02 00 00
       1c002a604 0f 11 85        MOVUPS     xmmword ptr [RBP + local_98[0]],XMM0
                 70 02 00 00
       1c002a60b 0f 11 85        MOVUPS     xmmword ptr [RBP + local_88[0]],XMM0
                 80 02 00 00
       1c002a612 0f 11 85        MOVUPS     xmmword ptr [RBP + local_78[0]],XMM0
                 90 02 00 00
       1c002a619 0f 11 8d        MOVUPS     xmmword ptr [RBP + local_168[0]],XMM1
                 a0 01 00 00
       1c002a620 0f 11 8d        MOVUPS     xmmword ptr [RBP + local_158[0]],XMM1
                 b0 01 00 00
       1c002a627 0f 11 8d        MOVUPS     xmmword ptr [RBP + local_148[0]],XMM1
                 c0 01 00 00
       1c002a62e 0f 11 8d        MOVUPS     xmmword ptr [RBP + local_138[0]],XMM1
                 d0 01 00 00
       1c002a635 0f 11 8d        MOVUPS     xmmword ptr [RBP + local_128[0]],XMM1
                 e0 01 00 00
       1c002a63c 0f 11 8d        MOVUPS     xmmword ptr [RBP + local_118[0]],XMM1
                 f0 01 00 00
       1c002a643 0f 11 8d        MOVUPS     xmmword ptr [RBP + local_108[0]],XMM1
                 00 02 00 00
       1c002a64a 0f 11 8d        MOVUPS     xmmword ptr [RBP + local_f8[0]],XMM1
                 10 02 00 00
       1c002a651 48 8b 48 10     MOV        RCX,qword ptr [RAX + 0x10]
       1c002a655 44 8b 49 08     MOV        R9D,dword ptr [RCX + 0x8]
       1c002a659 4c 8b 01        MOV        R8,qword ptr [RCX]
       1c002a65c 83 fe 17        CMP        ESI,0x17
       1c002a65f 0f 85 25        JNZ        LAB_1c002a78a
                 01 00 00
       1c002a665 8b ce           MOV        ECX,ESI
       1c002a667 e9 21 01        JMP        LAB_1c002a78d
                 00 00
                             LAB_1c002a66c                                   XREF[1]:     1c002a4bb(j)  
       1c002a66c 0f 57 c0        XORPS      XMM0,XMM0
       1c002a66f 0f 11 45 08     MOVUPS     xmmword ptr [RBP + local_300[0]],XMM0
       1c002a673 0f 11 45 18     MOVUPS     xmmword ptr [RBP + local_2f0[0]],XMM0
       1c002a677 0f 11 45 28     MOVUPS     xmmword ptr [RBP + local_2e0[0]],XMM0
       1c002a67b 48 ff 15        CALL       qword ptr [->NETIO.SYS::WfpNblInfoGet]           = 0022479c
                 56 6b 1f 00
       1c002a682 0f 1f 44        NOP        dword ptr [RAX + RAX*0x1]
                 00 00
       1c002a687 48 85 c0        TEST       RAX,RAX
       1c002a68a 74 21           JZ         LAB_1c002a6ad
       1c002a68c 48 8b 0d        MOV        RCX,qword ptr [->NTOSKRNL.EXE::MmBadPointer]     = 0022693a
                 35 81 1f 00
       1c002a693 48 3b 01        CMP        RAX,qword ptr [RCX]
       1c002a696 74 15           JZ         LAB_1c002a6ad
       1c002a698 48 8b 48 18     MOV        RCX,qword ptr [RAX + 0x18]
       1c002a69c 48 85 c9        TEST       RCX,RCX
       1c002a69f 74 0c           JZ         LAB_1c002a6ad
       1c002a6a1 f7 01 00        TEST       dword ptr [RCX],0x100000
                 00 10 00
       1c002a6a7 0f 85 23        JNZ        LAB_1c002a4d0
                 fe ff ff
                             LAB_1c002a6ad                                   XREF[3]:     1c002a68a(j), 1c002a696(j), 
                                                                                          1c002a69f(j)  
       1c002a6ad 4c 8b 45 90     MOV        R8,qword ptr [RBP + local_378]
       1c002a6b1 48 8b 4f 08     MOV        RCX,qword ptr [RDI + 0x8]
       1c002a6b5 49 8b 50 20     MOV        RDX,qword ptr [R8 + 0x20]
       1c002a6b9 8b 42 10        MOV        EAX,dword ptr [RDX + 0x10]
       1c002a6bc 83 f8 06        CMP        EAX,0x6
       1c002a6bf 75 23           JNZ        LAB_1c002a6e4
       1c002a6c1 8b 81 90        MOV        EAX,dword ptr [RCX + 0x90]
                 00 00 00
       1c002a6c7 a8 08           TEST       AL,0x8
       1c002a6c9 0f 85 01        JNZ        LAB_1c002a4d0
                 fe ff ff
       1c002a6cf a8 01           TEST       AL,0x1
       1c002a6d1 74 29           JZ         LAB_1c002a6fc
       1c002a6d3 41 bf 03        MOV        R15D,0x3
                 00 00 00
       1c002a6d9 41 bc 3f        MOV        R12D,0xc000003f
                 00 00 c0
       1c002a6df e9 34 fe        JMP        LAB_1c002a518
                 ff ff
                             LAB_1c002a6e4                                   XREF[1]:     1c002a6bf(j)  
       1c002a6e4 83 f8 11        CMP        EAX,0x11
       1c002a6e7 75 13           JNZ        LAB_1c002a6fc
       1c002a6e9 8b 81 90        MOV        EAX,dword ptr [RCX + 0x90]
                 00 00 00
       1c002a6ef a8 10           TEST       AL,0x10
       1c002a6f1 0f 85 d9        JNZ        LAB_1c002a4d0
                 fd ff ff
       1c002a6f7 41 84 c7        TEST       R15B,AL
       1c002a6fa 75 53           JNZ        LAB_1c002a74f
                             LAB_1c002a6fc                                   XREF[2]:     1c002a6d1(j), 1c002a6e7(j)  
       1c002a6fc 49 8b 40 28     MOV        RAX,qword ptr [R8 + 0x28]
       1c002a700 48 89 45 08     MOV        qword ptr [RBP + local_300[0]],RAX
       1c002a704 48 8b 41 08     MOV        RAX,qword ptr [RCX + 0x8]
       1c002a708 48 89 45 10     MOV        qword ptr [RBP + local_300[8]],RAX
       1c002a70c 48 8b 47 18     MOV        RAX,qword ptr [RDI + 0x18]
       1c002a710 48 89 45 18     MOV        qword ptr [RBP + local_2f0[0]],RAX
       1c002a714 48 8b 47 20     MOV        RAX,qword ptr [RDI + 0x20]
       1c002a718 48 8b 48 10     MOV        RCX,qword ptr [RAX + 0x10]
       1c002a71c 48 8b 01        MOV        RAX,qword ptr [RCX]
       1c002a71f 48 8d 4d 08     LEA        RCX=>local_300,[RBP + 0x8]
       1c002a723 48 89 45 20     MOV        qword ptr [RBP + local_2f0[8]],RAX
       1c002a727 8b 42 10        MOV        EAX,dword ptr [RDX + 0x10]
       1c002a72a 89 45 28        MOV        dword ptr [RBP + local_2e0[0]],EAX
       1c002a72d 33 c0           XOR        EAX,EAX
       1c002a72f 89 45 2c        MOV        dword ptr [RBP + local_2e0[4]],EAX
       1c002a732 49 8b 40 30     MOV        RAX,qword ptr [R8 + 0x30]
       1c002a736 44 89 6d 30     MOV        dword ptr [RBP + local_2e0[8]],R13D
       1c002a73a 48 8b 40 08     MOV        RAX,qword ptr [RAX + 0x8]
       1c002a73e ff 15 24        CALL       qword ptr [->_guard_dispatch_icall]              undefined _guard_dispatch_icall()
                 81 1f 00                                                                    = 1c00a83f0
       1c002a744 3d ff ff        CMP        EAX,0xffff
                 00 00
       1c002a749 0f 84 81        JZ         LAB_1c002a4d0
                 fd ff ff
                             LAB_1c002a74f                                   XREF[2]:     1c002a4ca(j), 1c002a6fa(j)  
       1c002a74f 41 bf 03        MOV        R15D,0x3
                 00 00 00
       1c002a755 41 bc 3f        MOV        R12D,0xc000003f
                 00 00 c0
       1c002a75b e9 b8 fd        JMP        LAB_1c002a518
                 ff ff
                             LAB_1c002a760                                   XREF[1]:     1c002a4dd(j)  
       1c002a760 45 33 c9        XOR        R9D,R9D
       1c002a763 45 33 c0        XOR        R8D,R8D
       1c002a766 48 8b ce        MOV        RCX,RSI
       1c002a769 41 8d 51 08     LEA        EDX,[R9 + 0x8]
       1c002a76d 48 ff 15        CALL       qword ptr [->NDIS.SYS::NdisAdvanceNetBufferDat   = 00225534
                 2c 6a 1f 00
       1c002a774 0f 1f 44        NOP        dword ptr [RAX + RAX*0x1]
                 00 00
       1c002a779 83 47 30 08     ADD        dword ptr [RDI + 0x30],0x8
       1c002a77d 4c 8b 65 90     MOV        R12,qword ptr [RBP + local_378]
       1c002a781 4c 89 77 48     MOV        qword ptr [RDI + 0x48],R14
       1c002a785 e9 e8 fd        JMP        LAB_1c002a572
                 ff ff
                             LAB_1c002a78a                                   XREF[1]:     1c002a65f(j)  
       1c002a78a 0f b7 ce        MOVZX      ECX,SI
                             LAB_1c002a78d                                   XREF[1]:     1c002a667(j)  
       1c002a78d e8 ba b9        CALL       INETADDR_SETSOCKADDR                             undefined INETADDR_SETSOCKADDR(u
                 fd ff
       1c002a792 44 8b 4f 14     MOV        R9D,dword ptr [RDI + 0x14]
       1c002a796 48 8d 95        LEA        RDX=>local_168,[RBP + 0x1a0]
                 a0 01 00 00
       1c002a79d 4c 8b 47 18     MOV        R8,qword ptr [RDI + 0x18]
       1c002a7a1 66 44 89        MOV        word ptr [RSP + local_3e8],R11W
                 5c 24 20
       1c002a7a7 83 fe 17        CMP        ESI,0x17
       1c002a7aa 75 04           JNZ        LAB_1c002a7b0
       1c002a7ac 8b ce           MOV        ECX,ESI
       1c002a7ae eb 03           JMP        LAB_1c002a7b3
                             LAB_1c002a7b0                                   XREF[1]:     1c002a7aa(j)  
       1c002a7b0 0f b7 ce        MOVZX      ECX,SI
                             LAB_1c002a7b3                                   XREF[1]:     1c002a7ae(j)  
       1c002a7b3 e8 94 b9        CALL       INETADDR_SETSOCKADDR                             undefined INETADDR_SETSOCKADDR(u
                 fd ff
       1c002a7b8 83 3d 65        CMP        dword ptr [DAT_1c0200d24],0x1
                 65 1d 00 01
       1c002a7bf 75 57           JNZ        LAB_1c002a818
       1c002a7c1 0f b7 ce        MOVZX      ECX,SI
       1c002a7c4 e8 37 d8        CALL       SOCKADDR_SIZE                                    undefined SOCKADDR_SIZE()
                 05 00
       1c002a7c9 c7 44 24        MOV        dword ptr [RSP + local_3b8],0x1
                 50 01 00 
                 00 00
       1c002a7d1 48 8d 8d        LEA        RCX=>local_168,[RBP + 0x1a0]
                 a0 01 00 00
       1c002a7d8 c7 44 24        MOV        dword ptr [RSP + local_3c0],0x4
                 48 04 00 
                 00 00
       1c002a7e0 41 b9 11        MOV        R9D,0x11
                 00 00 00
       1c002a7e6 48 89 4c        MOV        qword ptr [RSP + local_3c8],RCX
                 24 40
       1c002a7eb 48 8d 8d        LEA        RCX=>local_e8,[RBP + 0x220]
                 20 02 00 00
       1c002a7f2 0f b6 d0        MOVZX      EDX,AL
       1c002a7f5 89 54 24 38     MOV        dword ptr [RSP + local_3d0],EDX
       1c002a7f9 48 89 4c        MOV        qword ptr [RSP + local_3d8],RCX
                 24 30
       1c002a7fe 48 8d 0d        LEA        RCX,[MICROSOFT_TCPIP_PROVIDER_Context]
                 fb 64 1d 00
       1c002a805 89 54 24 28     MOV        dword ptr [RSP + local_3e0],EDX
       1c002a809 89 74 24 20     MOV        dword ptr [RSP + local_3e8],ESI
       1c002a80d e8 5a 6f        CALL       McTemplateK0qqqbr2qbr4qq_EtwWriteTransfer        undefined McTemplateK0qqqbr2qbr4
                 0c 00
       1c002a812 44 0f b7        MOVZX      R11D,word ptr [RSP + local_3a0+0x2]
                 5c 24 6a
                             LAB_1c002a818                                   XREF[2]:     1c002a5c5(j), 1c002a7bf(j)  
       1c002a818 83 fe 02        CMP        ESI,0x2
       1c002a81b 74 5f           JZ         LAB_1c002a87c
       1c002a81d 83 fe 17        CMP        ESI,0x17
       1c002a820 0f 85 ac        JNZ        LAB_1c002a8d2
                 00 00 00
       1c002a826 48 8b 47 08     MOV        RAX,qword ptr [RDI + 0x8]
       1c002a82a 44 8d 46 fa     LEA        R8D,[RSI + -0x6]
       1c002a82e 0f b6 4f 10     MOVZX      ECX,byte ptr [RDI + 0x10]
       1c002a832 44 0f b7 cb     MOVZX      R9D,BX
       1c002a836 48 8b 57 18     MOV        RDX,qword ptr [RDI + 0x18]
       1c002a83a 80 e1 01        AND        CL,0x1
       1c002a83d c7 44 24        MOV        dword ptr [RSP + local_3b0],0x4
                 58 04 00 
                 00 00
       1c002a845 48 89 44        MOV        qword ptr [RSP + local_3b8],RAX
                 24 50
       1c002a84a 8b 47 40        MOV        EAX,dword ptr [RDI + 0x40]
       1c002a84d 89 44 24 48     MOV        dword ptr [RSP + local_3c0],EAX
       1c002a851 48 8b 47 38     MOV        RAX,qword ptr [RDI + 0x38]
       1c002a855 48 89 44        MOV        qword ptr [RSP + local_3c8],RAX
                 24 40
       1c002a85a c7 44 24        MOV        dword ptr [RSP + local_3d0],0x8
                 38 08 00 
                 00 00
       1c002a862 44 89 74        MOV        dword ptr [RSP + local_3d8],R14D
                 24 30
       1c002a867 88 4c 24 28     MOV        byte ptr [RSP + local_3e0],CL
       1c002a86b 48 8b 4f 20     MOV        RCX,qword ptr [RDI + 0x20]
       1c002a86f 66 44 89        MOV        word ptr [RSP + local_3e8],R11W
                 5c 24 20
       1c002a875 e8 a2 23        CALL       WfpInTransportShimV6Discard                      undefined WfpInTransportShimV6Di
                 00 00
       1c002a87a eb 56           JMP        LAB_1c002a8d2
                             LAB_1c002a87c                                   XREF[1]:     1c002a81b(j)  
       1c002a87c 48 8b 47 08     MOV        RAX,qword ptr [RDI + 0x8]
       1c002a880 44 0f b7 cb     MOVZX      R9D,BX
       1c002a884 0f b6 4f 10     MOVZX      ECX,byte ptr [RDI + 0x10]
       1c002a888 41 b8 11        MOV        R8D,0x11
                 00 00 00
       1c002a88e 48 8b 57 18     MOV        RDX,qword ptr [RDI + 0x18]
       1c002a892 80 e1 01        AND        CL,0x1
       1c002a895 c7 44 24        MOV        dword ptr [RSP + local_3b0],0x4
                 58 04 00 
                 00 00
       1c002a89d 48 89 44        MOV        qword ptr [RSP + local_3b8],RAX
                 24 50
       1c002a8a2 8b 47 40        MOV        EAX,dword ptr [RDI + 0x40]
       1c002a8a5 89 44 24 48     MOV        dword ptr [RSP + local_3c0],EAX
       1c002a8a9 48 8b 47 38     MOV        RAX,qword ptr [RDI + 0x38]
       1c002a8ad 48 89 44        MOV        qword ptr [RSP + local_3c8],RAX
                 24 40
       1c002a8b2 c7 44 24        MOV        dword ptr [RSP + local_3d0],0x8
                 38 08 00 
                 00 00
       1c002a8ba 44 89 74        MOV        dword ptr [RSP + local_3d8],R14D
                 24 30
       1c002a8bf 88 4c 24 28     MOV        byte ptr [RSP + local_3e0],CL
       1c002a8c3 48 8b 4f 20     MOV        RCX,qword ptr [RDI + 0x20]
       1c002a8c7 66 44 89        MOV        word ptr [RSP + local_3e8],R11W
                 5c 24 20
       1c002a8cd e8 1a ed        CALL       WfpInTransportShimV4Discard                      undefined WfpInTransportShimV4Di
                 ff ff
                             LAB_1c002a8d2                                   XREF[2]:     1c002a820(j), 1c002a87a(j)  
       1c002a8d2 48 8b 3f        MOV        RDI,qword ptr [RDI]
       1c002a8d5 48 85 ff        TEST       RDI,RDI
       1c002a8d8 0f 85 32        JNZ        LAB_1c002a410
                 fb ff ff
       1c002a8de eb 2e           JMP        LAB_1c002a90e
                             LAB_1c002a8e0                                   XREF[1]:     1c002a439(j)  
       1c002a8e0 33 c0           XOR        EAX,EAX
       1c002a8e2 48 89 45 a0     MOV        qword ptr [RBP + local_368],RAX
                             LAB_1c002a8e6                                   XREF[1]:     1c002a579(j)  
       1c002a8e6 48 8b 3f        MOV        RDI,qword ptr [RDI]
       1c002a8e9 4c 8b 65 90     MOV        R12,qword ptr [RBP + local_378]
       1c002a8ed 48 85 ff        TEST       RDI,RDI
       1c002a8f0 74 1c           JZ         LAB_1c002a90e
                             LAB_1c002a8f2                                   XREF[1]:     1c002a90c(j)  
       1c002a8f2 48 8b d7        MOV        RDX,RDI
       1c002a8f5 49 8b cc        MOV        RCX,R12
       1c002a8f8 e8 fb 3c        CALL       UdpBeginDelivery                                 undefined UdpBeginDelivery()
                 0f 00
       1c002a8fd 48 89 45 a0     MOV        qword ptr [RBP + local_368],RAX
       1c002a901 48 85 c0        TEST       RAX,RAX
       1c002a904 75 08           JNZ        LAB_1c002a90e
       1c002a906 48 8b 3f        MOV        RDI,qword ptr [RDI]
       1c002a909 48 85 ff        TEST       RDI,RDI
       1c002a90c 75 e4           JNZ        LAB_1c002a8f2
                             LAB_1c002a90e                                   XREF[5]:     1c002a58a(j), 1c002a598(j), 
                                                                                          1c002a8de(j), 1c002a8f0(j), 
                                                                                          1c002a904(j)  
       1c002a90e 44 8b 7c        MOV        R15D,dword ptr [RSP + local_3a4]
                 24 64
                             LAB_1c002a913                                   XREF[1]:     1c002a3fb(j)  
       1c002a913 65 8b 04        MOV        EAX,dword ptr GS:[0x1a4]
                 25 a4 01 
                 00 00
       1c002a91b 4c 8b 6d 98     MOV        R13,qword ptr [RBP + local_370]
       1c002a91f 8b c8           MOV        ECX,EAX
       1c002a921 49 8b 84        MOV        RAX,qword ptr [R12 + 0x80]
                 24 80 00 
                 00 00
       1c002a929 48 c1 e1 06     SHL        RCX,0x6
       1c002a92d 44 01 7c        ADD        dword ptr [RCX + RAX*0x1 + 0x8],R15D
                 01 08
       1c002a932 8b 4d b8        MOV        ECX,dword ptr [RBP + local_350]
       1c002a935 45 33 c0        XOR        R8D,R8D
       1c002a938 44 8b 7c        MOV        R15D,dword ptr [RSP + local_398]
                 24 70
       1c002a93d eb 03           JMP        LAB_1c002a942
                             LAB_1c002a93f                                   XREF[1]:     1c002a1c3(j)  
       1c002a93f 49 8b f8        MOV        RDI,R8
                             LAB_1c002a942                                   XREF[1]:     1c002a93d(j)  
       1c002a942 4c 8b 74        MOV        R14,qword ptr [RSP + local_390]
                 24 78
       1c002a947 41 8b f0        MOV        ESI,R8D
       1c002a94a 48 89 7d a8     MOV        qword ptr [RBP + local_360],RDI
       1c002a94e 45 85 ff        TEST       R15D,R15D
       1c002a951 0f 84 fc        JZ         LAB_1c002aa53
                 00 00 00
       1c002a957 49 8b fe        MOV        RDI,R14
       1c002a95a 66 0f 1f        NOP        word ptr [RAX + RAX*0x1]
                 44 00 00
                             LAB_1c002a960                                   XREF[1]:     1c002aa4d(j)  
       1c002a960 48 8b 1f        MOV        RBX,qword ptr [RDI]=>local_68
       1c002a963 48 83 e3 fc     AND        RBX,-0x4
       1c002a967 0f 84 e6        JZ         LAB_1c002aa53
                 00 00 00
       1c002a96d 48 83 c3 90     ADD        RBX,-0x70
       1c002a971 84 c9           TEST       CL,CL
       1c002a973 0f 84 84        JZ         LAB_1c002a9fd
                 00 00 00
       1c002a979 0f 57 c0        XORPS      XMM0,XMM0
       1c002a97c 33 c0           XOR        EAX,EAX
       1c002a97e 0f 11 45 50     MOVUPS     xmmword ptr [RBP + local_2b8[0]],XMM0
       1c002a982 48 89 45 60     MOV        qword ptr [RBP + local_2a8],RAX
       1c002a986 f0 ff 43 08     INC.LOCK   dword ptr [RBX + 0x8]
       1c002a98a 48 8b cb        MOV        RCX,RBX
       1c002a98d 48 ff 15        CALL       qword ptr [->NTOSKRNL.EXE::KeTestSpinLock]       = 002244d4
                 34 7c 1f 00
       1c002a994 0f 1f 44        NOP        dword ptr [RAX + RAX*0x1]
                 00 00
       1c002a999 84 c0           TEST       AL,AL
       1c002a99b 75 2b           JNZ        LAB_1c002a9c8
       1c002a99d f0 ff 4b 08     DEC.LOCK   dword ptr [RBX + 0x8]
       1c002a9a1 48 8d 55 50     LEA        RDX=>local_2b8,[RBP + 0x50]
       1c002a9a5 48 8b cb        MOV        RCX,RBX
       1c002a9a8 48 ff 15        CALL       qword ptr [->NTOSKRNL.EXE::KeAcquireInStackQue   = 002244e6
                 11 7c 1f 00
       1c002a9af 0f 1f 44        NOP        dword ptr [RAX + RAX*0x1]
                 00 00
       1c002a9b4 f0 ff 43 08     INC.LOCK   dword ptr [RBX + 0x8]
       1c002a9b8 48 8d 4d 50     LEA        RCX=>local_2b8,[RBP + 0x50]
       1c002a9bc 48 ff 15        CALL       qword ptr [->NTOSKRNL.EXE::KeReleaseInStackQue   = 00224534
                 ed 7b 1f 00
       1c002a9c3 0f 1f 44        NOP        dword ptr [RAX + RAX*0x1]
                 00 00
                             LAB_1c002a9c8                                   XREF[1]:     1c002a99b(j)  
       1c002a9c8 8b 43 14        MOV        EAX,dword ptr [RBX + 0x14]
       1c002a9cb a8 08           TEST       AL,0x8
       1c002a9cd 74 27           JZ         LAB_1c002a9f6
       1c002a9cf 48 8d 45 a0     LEA        RAX=>local_368,[RBP + -0x60]
       1c002a9d3 4d 8b c5        MOV        R8,R13
       1c002a9d6 48 89 44        MOV        qword ptr [RSP + local_3e0],RAX
                 24 28
       1c002a9db 4c 8d 4c        LEA        R9=>local_3a0,[RSP + 0x68]
                 24 68
       1c002a9e0 48 8d 45 a8     LEA        RAX=>local_360,[RBP + -0x58]
       1c002a9e4 48 8b d3        MOV        RDX,RBX
       1c002a9e7 49 8b cc        MOV        RCX,R12
       1c002a9ea 48 89 44        MOV        qword ptr [RSP + local_3e8],RAX
                 24 20
       1c002a9ef e8 ec 04        CALL       UdpDeliverDatagrams                              undefined UdpDeliverDatagrams(un
                 00 00
       1c002a9f4 eb 04           JMP        LAB_1c002a9fa
                             LAB_1c002a9f6                                   XREF[1]:     1c002a9cd(j)  
       1c002a9f6 f0 ff 4b 08     DEC.LOCK   dword ptr [RBX + 0x8]
                             LAB_1c002a9fa                                   XREF[1]:     1c002a9f4(j)  
       1c002a9fa 45 33 c0        XOR        R8D,R8D
                             LAB_1c002a9fd                                   XREF[1]:     1c002a973(j)  
       1c002a9fd b8 ff ff        MOV        EAX,0xffffffff
                 ff ff
       1c002aa02 f0 0f c1        XADD.LOCK  dword ptr [RBX + 0x10],EAX
                 43 10
       1c002aa07 83 f8 01        CMP        EAX,0x1
       1c002aa0a 75 2f           JNZ        LAB_1c002aa3b
       1c002aa0c 48 8d 93        LEA        RDX,[RBX + 0xc8]
                 c8 00 00 00
       1c002aa13 44 0f 20 c0     MOV        RAX,CR8
       1c002aa17 84 c0           TEST       AL,AL
       1c002aa19 75 0d           JNZ        LAB_1c002aa28
       1c002aa1b 48 8b ca        MOV        RCX,RDX
       1c002aa1e 4c 89 02        MOV        qword ptr [RDX],R8
       1c002aa21 e8 ea 92        CALL       UdpCleanupEndpointWorkQueueRoutine               undefined UdpCleanupEndpointWork
                 03 00
       1c002aa26 eb 13           JMP        LAB_1c002aa3b
                             LAB_1c002aa28                                   XREF[1]:     1c002aa19(j)  
       1c002aa28 48 8d 0d        LEA        RCX,[UdpCleanupEndpointWorkQueue]
                 11 cf 1d 00
       1c002aa2f 48 ff 15        CALL       qword ptr [->NETIO.SYS::NetioInsertWorkQueue]    = 002248b0
                 fa 67 1f 00
       1c002aa36 0f 1f 44        NOP        dword ptr [RAX + RAX*0x1]
                 00 00
                             LAB_1c002aa3b                                   XREF[2]:     1c002aa0a(j), 1c002aa26(j)  
       1c002aa3b 8b 4d b8        MOV        ECX,dword ptr [RBP + local_350]
       1c002aa3e ff c6           INC        ESI
       1c002aa40 48 83 c7 08     ADD        RDI,0x8
       1c002aa44 41 b8 00        MOV        R8D,0x0
                 00 00 00
       1c002aa4a 41 3b f7        CMP        ESI,R15D
       1c002aa4d 0f 82 0d        JC         LAB_1c002a960
                 ff ff ff
                             LAB_1c002aa53                                   XREF[2]:     1c002a951(j), 1c002a967(j)  
       1c002aa53 48 8b 7d 98     MOV        RDI,qword ptr [RBP + local_370]
       1c002aa57 e9 a6 03        JMP        LAB_1c002ae02
                 00 00
                             LAB_1c002aa5c                                   XREF[1]:     1c0029ed9(j)  
       1c002aa5c 41 f6 45        TEST       byte ptr [R13 + 0x10],0x1
                 10 01
       1c002aa61 75 05           JNZ        LAB_1c002aa68
       1c002aa63 8b 75 c4        MOV        ESI,dword ptr [RBP + local_344]
       1c002aa66 eb 11           JMP        LAB_1c002aa79
                             LAB_1c002aa68                                   XREF[1]:     1c002aa61(j)  
       1c002aa68 49 8b 45 08     MOV        RAX,qword ptr [R13 + 0x8]
       1c002aa6c 33 d2           XOR        EDX,EDX
       1c002aa6e 8b 80 d0        MOV        EAX,dword ptr [RAX + 0xd0]
                 00 00 00
       1c002aa74 f7 75 c8        DIV        dword ptr [RBP + local_340]
       1c002aa77 8b f2           MOV        ESI,EDX
                             LAB_1c002aa79                                   XREF[1]:     1c002aa66(j)  
       1c002aa79 49 8b 46 08     MOV        RAX,qword ptr [R14 + 0x8]
       1c002aa7d 48 8b 1d        MOV        RBX,qword ptr [UdpCompartmentSet]
                 a4 d3 1d 00
       1c002aa84 c6 44 24        MOV        byte ptr [RSP + local_3a5],0x0
                 63 00
       1c002aa89 44 89 4d c0     MOV        dword ptr [RBP + local_348],R9D
       1c002aa8d 48 8b 08        MOV        RCX,qword ptr [RAX]
       1c002aa90 8b 39           MOV        EDI,dword ptr [RCX]
       1c002aa92 83 ff 01        CMP        EDI,0x1
       1c002aa95 75 09           JNZ        LAB_1c002aaa0
       1c002aa97 48 8b bb        MOV        RDI,qword ptr [RBX + 0x148]
                 48 01 00 00
       1c002aa9e eb 32           JMP        LAB_1c002aad2
                             LAB_1c002aaa0                                   XREF[1]:     1c002aa95(j)  
       1c002aaa0 4c 8d 44        LEA        R8=>local_3a5,[RSP + 0x63]
                 24 63
       1c002aaa5 48 8b cb        MOV        RCX,RBX
       1c002aaa8 48 8d 55 c0     LEA        RDX=>local_348,[RBP + -0x40]
       1c002aaac e8 b3 9f        CALL       RtlAcquireScalableReadLock                       undefined RtlAcquireScalableRead
                 04 00
       1c002aab1 45 33 c0        XOR        R8D,R8D
       1c002aab4 8b d7           MOV        EDX,EDI
       1c002aab6 48 8b cb        MOV        RCX,RBX
       1c002aab9 e8 46 fd        CALL       InetGetCompartmentUnderLock                      undefined InetGetCompartmentUnde
                 18 00
       1c002aabe 44 0f b6        MOVZX      R8D,byte ptr [RSP + local_3a5]
                 44 24 63
       1c002aac4 48 8b cb        MOV        RCX,RBX
       1c002aac7 8b 55 c0        MOV        EDX,dword ptr [RBP + local_348]
       1c002aaca 48 8b f8        MOV        RDI,RAX
       1c002aacd e8 72 ab        CALL       RtlReleaseScalableReadLock                       undefined RtlReleaseScalableRead
                 04 00
                             LAB_1c002aad2                                   XREF[1]:     1c002aa9e(j)  
       1c002aad2 48 8b 47 20     MOV        RAX,qword ptr [RDI + 0x20]
       1c002aad6 0f 57 c0        XORPS      XMM0,XMM0
       1c002aad9 0f 11 45 68     MOVUPS     xmmword ptr [RBP + local_2a0[0]],XMM0
       1c002aadd 4c 8b 28        MOV        R13,qword ptr [RAX]
       1c002aae0 0f b7 44        MOVZX      EAX,word ptr [RSP + local_3a0+0x2]
                 24 6a
       1c002aae5 66 c1 c8 08     ROR        AX,0x8
       1c002aae9 0f b7 d8        MOVZX      EBX,AX
       1c002aaec 8b c3           MOV        EAX,EBX
       1c002aaee 48 c1 e8 08     SHR        RAX,0x8
       1c002aaf2 4d 8b bc        MOV        R15,qword ptr [R13 + RAX*0x8 + 0xe0]
                 c5 e0 00 
                 00 00
       1c002aafa 33 c0           XOR        EAX,EAX
       1c002aafc 48 89 45 78     MOV        qword ptr [RBP + local_290],RAX
       1c002ab00 4c 89 7d d0     MOV        qword ptr [RBP + local_338],R15
       1c002ab04 f0 41 ff        INC.LOCK   dword ptr [R15 + 0x8]
                 47 08
       1c002ab09 49 8b cf        MOV        RCX,R15
       1c002ab0c 48 ff 15        CALL       qword ptr [->NTOSKRNL.EXE::KeTestSpinLock]       = 002244d4
                 b5 7a 1f 00
       1c002ab13 0f 1f 44        NOP        dword ptr [RAX + RAX*0x1]
                 00 00
       1c002ab18 84 c0           TEST       AL,AL
       1c002ab1a 75 2d           JNZ        LAB_1c002ab49
       1c002ab1c f0 41 ff        DEC.LOCK   dword ptr [R15 + 0x8]
                 4f 08
       1c002ab21 48 8d 55 68     LEA        RDX=>local_2a0,[RBP + 0x68]
       1c002ab25 49 8b cf        MOV        RCX,R15
       1c002ab28 48 ff 15        CALL       qword ptr [->NTOSKRNL.EXE::KeAcquireInStackQue   = 002244e6
                 91 7a 1f 00
       1c002ab2f 0f 1f 44        NOP        dword ptr [RAX + RAX*0x1]
                 00 00
       1c002ab34 f0 41 ff        INC.LOCK   dword ptr [R15 + 0x8]
                 47 08
       1c002ab39 48 8d 4d 68     LEA        RCX=>local_2a0,[RBP + 0x68]
       1c002ab3d 48 ff 15        CALL       qword ptr [->NTOSKRNL.EXE::KeReleaseInStackQue   = 00224534
                 6c 7a 1f 00
       1c002ab44 0f 1f 44        NOP        dword ptr [RAX + RAX*0x1]
                 00 00
                             LAB_1c002ab49                                   XREF[1]:     1c002ab1a(j)  
       1c002ab49 66 41 83        CMP        word ptr [R15 + 0x10],0x0
                 7f 10 00
       1c002ab4f 75 09           JNZ        LAB_1c002ab5a
       1c002ab51 33 f6           XOR        ESI,ESI
       1c002ab53 8b de           MOV        EBX,ESI
       1c002ab55 e9 89 01        JMP        LAB_1c002ace3
                 00 00
                             LAB_1c002ab5a                                   XREF[1]:     1c002ab4f(j)  
       1c002ab5a 0f b6 fb        MOVZX      EDI,BL
       1c002ab5d 48 c1 e7 05     SHL        RDI,0x5
       1c002ab61 49 03 7f 18     ADD        RDI,qword ptr [R15 + 0x18]
       1c002ab65 48 83 7f        CMP        qword ptr [RDI + 0x10],0x0
                 10 00
       1c002ab6a 0f 84 c0        JZ         LAB_1c002ac30
                 00 00 00
       1c002ab70 8b 07           MOV        EAX,dword ptr [RDI]
       1c002ab72 a8 02           TEST       AL,0x2
       1c002ab74 0f 84 b6        JZ         LAB_1c002ac30
                 00 00 00
       1c002ab7a 48 83 7f        CMP        qword ptr [RDI + 0x18],0x0
                 18 00
       1c002ab7f 0f 84 ab        JZ         LAB_1c002ac30
                 00 00 00
       1c002ab85 4d 8b 46 10     MOV        R8,qword ptr [R14 + 0x10]
       1c002ab89 44 8b ce        MOV        R9D,ESI
       1c002ab8c 41 0f b7        MOVZX      EDX,word ptr [R12 + 0x18]
                 54 24 18
       1c002ab92 48 8b cf        MOV        RCX,RDI
       1c002ab95 e8 de 90        CALL       LookupEndpointFromPerProcEndpointTable           undefined LookupEndpointFromPerP
                 0c 00
       1c002ab9a 48 8b d8        MOV        RBX,RAX
       1c002ab9d 48 85 c0        TEST       RAX,RAX
       1c002aba0 74 1e           JZ         LAB_1c002abc0
       1c002aba2 4d 8b ce        MOV        R9,R14
       1c002aba5 c6 44 24        MOV        byte ptr [RSP + local_3e8],0x1
                 20 01
       1c002abaa 4d 8b c4        MOV        R8,R12
       1c002abad 48 8b d0        MOV        RDX,RAX
       1c002abb0 49 8b cd        MOV        RCX,R13
       1c002abb3 e8 c0 51        CALL       ReferenceEndpointInAssignmentIfMatched           undefined ReferenceEndpointInAss
                 07 00
       1c002abb8 84 c0           TEST       AL,AL
       1c002abba 0f 85 21        JNZ        LAB_1c002ace1
                 01 00 00
                             LAB_1c002abc0                                   XREF[1]:     1c002aba0(j)  
       1c002abc0 41 0f b7        MOVZX      EDX,word ptr [R12 + 0x18]
                 54 24 18
       1c002abc6 44 8b ce        MOV        R9D,ESI
       1c002abc9 45 33 c0        XOR        R8D,R8D
       1c002abcc 48 8b cf        MOV        RCX,RDI
       1c002abcf e8 a4 90        CALL       LookupEndpointFromPerProcEndpointTable           undefined LookupEndpointFromPerP
                 0c 00
       1c002abd4 48 8b d8        MOV        RBX,RAX
       1c002abd7 48 85 c0        TEST       RAX,RAX
       1c002abda 74 1e           JZ         LAB_1c002abfa
       1c002abdc 4d 8b ce        MOV        R9,R14
       1c002abdf c6 44 24        MOV        byte ptr [RSP + local_3e8],0x1
                 20 01
       1c002abe4 4d 8b c4        MOV        R8,R12
       1c002abe7 48 8b d0        MOV        RDX,RAX
       1c002abea 49 8b cd        MOV        RCX,R13
       1c002abed e8 86 51        CALL       ReferenceEndpointInAssignmentIfMatched           undefined ReferenceEndpointInAss
                 07 00
       1c002abf2 84 c0           TEST       AL,AL
       1c002abf4 0f 85 e7        JNZ        LAB_1c002ace1
                 00 00 00
                             LAB_1c002abfa                                   XREF[1]:     1c002abda(j)  
       1c002abfa 33 d2           XOR        EDX,EDX
       1c002abfc 44 8b ce        MOV        R9D,ESI
       1c002abff 45 33 c0        XOR        R8D,R8D
       1c002ac02 48 8b cf        MOV        RCX,RDI
       1c002ac05 e8 6e 90        CALL       LookupEndpointFromPerProcEndpointTable           undefined LookupEndpointFromPerP
                 0c 00
       1c002ac0a 48 8b d8        MOV        RBX,RAX
       1c002ac0d 48 85 c0        TEST       RAX,RAX
       1c002ac10 74 1e           JZ         LAB_1c002ac30
       1c002ac12 4d 8b ce        MOV        R9,R14
       1c002ac15 c6 44 24        MOV        byte ptr [RSP + local_3e8],0x1
                 20 01
       1c002ac1a 4d 8b c4        MOV        R8,R12
       1c002ac1d 48 8b d0        MOV        RDX,RAX
       1c002ac20 49 8b cd        MOV        RCX,R13
       1c002ac23 e8 50 51        CALL       ReferenceEndpointInAssignmentIfMatched           undefined ReferenceEndpointInAss
                 07 00
       1c002ac28 84 c0           TEST       AL,AL
       1c002ac2a 0f 85 b1        JNZ        LAB_1c002ace1
                 00 00 00
                             LAB_1c002ac30                                   XREF[4]:     1c002ab6a(j), 1c002ab74(j), 
                                                                                          1c002ab7f(j), 1c002ac10(j)  
       1c002ac30 48 8b 5f 10     MOV        RBX,qword ptr [RDI + 0x10]
       1c002ac34 48 85 db        TEST       RBX,RBX
       1c002ac37 0f 84 a4        JZ         LAB_1c002ace1
                 00 00 00
       1c002ac3d 4d 8b fe        MOV        R15,R14
       1c002ac40 33 c0           XOR        EAX,EAX
                             LAB_1c002ac42                                   XREF[1]:     1c002acd7(j)  
       1c002ac42 44 0f b6 f3     MOVZX      R14D,BL
       1c002ac46 66 89 45 88     MOV        word ptr [RBP + local_380],AX
       1c002ac4a 41 80 e6 03     AND        R14B,0x3
       1c002ac4e 75 09           JNZ        LAB_1c002ac59
       1c002ac50 48 83 e3 fc     AND        RBX,-0x4
       1c002ac54 48 8b f3        MOV        RSI,RBX
       1c002ac57 eb 78           JMP        LAB_1c002acd1
                             LAB_1c002ac59                                   XREF[1]:     1c002ac4e(j)  
       1c002ac59 49 8b 45 70     MOV        RAX,qword ptr [R13 + 0x70]
       1c002ac5d 4c 8d 45 88     LEA        R8=>local_380,[RBP + -0x78]
       1c002ac61 48 8b fb        MOV        RDI,RBX
       1c002ac64 41 0f b6 d6     MOVZX      EDX,R14B
       1c002ac68 48 83 e7 fc     AND        RDI,-0x4
       1c002ac6c 48 8b cf        MOV        RCX,RDI
       1c002ac6f ff 15 f3        CALL       qword ptr [->_guard_dispatch_icall]              undefined _guard_dispatch_icall()
                 7b 1f 00                                                                    = 1c00a83f0
       1c002ac75 48 8b f7        MOV        RSI,RDI
       1c002ac78 48 83 f8 ff     CMP        RAX,-0x1
       1c002ac7c 74 51           JZ         LAB_1c002accf
       1c002ac7e 0f b7 4d 88     MOVZX      ECX,word ptr [RBP + local_380]
       1c002ac82 66 85 c9        TEST       CX,CX
       1c002ac85 74 08           JZ         LAB_1c002ac8f
       1c002ac87 66 41 3b        CMP        CX,word ptr [R12 + 0x18]
                 4c 24 18
       1c002ac8d 75 40           JNZ        LAB_1c002accf
                             LAB_1c002ac8f                                   XREF[1]:     1c002ac85(j)  
       1c002ac8f 48 8b f7        MOV        RSI,RDI
       1c002ac92 48 85 c0        TEST       RAX,RAX
       1c002ac95 74 06           JZ         LAB_1c002ac9d
       1c002ac97 49 3b 47 10     CMP        RAX,qword ptr [R15 + 0x10]
       1c002ac9b 75 32           JNZ        LAB_1c002accf
                             LAB_1c002ac9d                                   XREF[1]:     1c002ac95(j)  
       1c002ac9d 41 80 fe 01     CMP        R14B,0x1
       1c002aca1 75 2c           JNZ        LAB_1c002accf
       1c002aca3 8b 47 10        MOV        EAX,dword ptr [RDI + 0x10]
       1c002aca6 a8 02           TEST       AL,0x2
       1c002aca8 75 25           JNZ        LAB_1c002accf
       1c002acaa 49 8b 85        MOV        RAX,qword ptr [R13 + 0x80]
                 80 00 00 00
       1c002acb1 33 c9           XOR        ECX,ECX
       1c002acb3 48 89 4c        MOV        qword ptr [RSP + local_3e8],RCX
                 24 20
       1c002acb8 4d 8b cf        MOV        R9,R15
       1c002acbb 48 8b cf        MOV        RCX,RDI
       1c002acbe 4d 8b c4        MOV        R8,R12
       1c002acc1 41 0f b6 d6     MOVZX      EDX,R14B
       1c002acc5 ff 15 9d        CALL       qword ptr [->_guard_dispatch_icall]              undefined _guard_dispatch_icall()
                 7b 1f 00                                                                    = 1c00a83f0
       1c002accb 84 c0           TEST       AL,AL
       1c002accd 75 0e           JNZ        LAB_1c002acdd
                             LAB_1c002accf                                   XREF[5]:     1c002ac7c(j), 1c002ac8d(j), 
                                                                                          1c002ac9b(j), 1c002aca1(j), 
                                                                                          1c002aca8(j)  
       1c002accf 33 c0           XOR        EAX,EAX
                             LAB_1c002acd1                                   XREF[1]:     1c002ac57(j)  
       1c002acd1 48 8b 1e        MOV        RBX,qword ptr [RSI]
       1c002acd4 48 85 db        TEST       RBX,RBX
       1c002acd7 0f 85 65        JNZ        LAB_1c002ac42
                 ff ff ff
                             LAB_1c002acdd                                   XREF[1]:     1c002accd(j)  
       1c002acdd 4c 8b 7d d0     MOV        R15,qword ptr [RBP + local_338]
                             LAB_1c002ace1                                   XREF[4]:     1c002abba(j), 1c002abf4(j), 
                                                                                          1c002ac2a(j), 1c002ac37(j)  
       1c002ace1 33 f6           XOR        ESI,ESI
                             LAB_1c002ace3                                   XREF[1]:     1c002ab55(j)  
       1c002ace3 f0 41 ff        DEC.LOCK   dword ptr [R15 + 0x8]
                 4f 08
       1c002ace8 48 83 e3 fc     AND        RBX,-0x4
       1c002acec 75 26           JNZ        LAB_1c002ad14
       1c002acee 48 8b 7d 98     MOV        RDI,qword ptr [RBP + local_370]
       1c002acf2 48 8d 45 a0     LEA        RAX=>local_368,[RBP + -0x60]
       1c002acf6 48 8b d7        MOV        RDX,RDI
       1c002acf9 48 89 44        MOV        qword ptr [RSP + local_3e8],RAX
                 24 20
       1c002acfe 4c 8d 4d a8     LEA        R9=>local_360,[RBP + -0x58]
       1c002ad02 49 8b cc        MOV        RCX,R12
       1c002ad05 4c 8d 44        LEA        R8=>local_3a0,[RSP + 0x68]
                 24 68
       1c002ad0a e8 a5 1b        CALL       UdpDiscardDatagrams                              undefined UdpDiscardDatagrams(un
                 00 00
       1c002ad0f e9 e9 00        JMP        LAB_1c002adfd
                 00 00
                             LAB_1c002ad14                                   XREF[1]:     1c002acec(j)  
       1c002ad14 48 83 c3 90     ADD        RBX,-0x70
       1c002ad18 0f 57 c0        XORPS      XMM0,XMM0
       1c002ad1b 33 c0           XOR        EAX,EAX
       1c002ad1d 48 89 85        MOV        qword ptr [RBP + local_278],RAX
                 90 00 00 00
       1c002ad24 0f 11 85        MOVUPS     xmmword ptr [RBP + local_288[0]],XMM0
                 80 00 00 00
       1c002ad2b f0 ff 43 08     INC.LOCK   dword ptr [RBX + 0x8]
       1c002ad2f 48 8b cb        MOV        RCX,RBX
       1c002ad32 48 ff 15        CALL       qword ptr [->NTOSKRNL.EXE::KeTestSpinLock]       = 002244d4
                 8f 78 1f 00
       1c002ad39 0f 1f 44        NOP        dword ptr [RAX + RAX*0x1]
                 00 00
       1c002ad3e 84 c0           TEST       AL,AL
       1c002ad40 75 31           JNZ        LAB_1c002ad73
       1c002ad42 f0 ff 4b 08     DEC.LOCK   dword ptr [RBX + 0x8]
       1c002ad46 48 8d 95        LEA        RDX=>local_288,[RBP + 0x80]
                 80 00 00 00
       1c002ad4d 48 8b cb        MOV        RCX,RBX
       1c002ad50 48 ff 15        CALL       qword ptr [->NTOSKRNL.EXE::KeAcquireInStackQue   = 002244e6
                 69 78 1f 00
       1c002ad57 0f 1f 44        NOP        dword ptr [RAX + RAX*0x1]
                 00 00
       1c002ad5c f0 ff 43 08     INC.LOCK   dword ptr [RBX + 0x8]
       1c002ad60 48 8d 8d        LEA        RCX=>local_288,[RBP + 0x80]
                 80 00 00 00
       1c002ad67 48 ff 15        CALL       qword ptr [->NTOSKRNL.EXE::KeReleaseInStackQue   = 00224534
                 42 78 1f 00
       1c002ad6e 0f 1f 44        NOP        dword ptr [RAX + RAX*0x1]
                 00 00
                             LAB_1c002ad73                                   XREF[1]:     1c002ad40(j)  
       1c002ad73 8b 43 14        MOV        EAX,dword ptr [RBX + 0x14]
       1c002ad76 49 8b cc        MOV        RCX,R12
       1c002ad79 48 8b 7d 98     MOV        RDI,qword ptr [RBP + local_370]
       1c002ad7d a8 08           TEST       AL,0x8
       1c002ad7f 48 8d 45 a0     LEA        RAX=>local_368,[RBP + -0x60]
       1c002ad83 74 20           JZ         LAB_1c002ada5
       1c002ad85 48 89 44        MOV        qword ptr [RSP + local_3e0],RAX
                 24 28
       1c002ad8a 4c 8d 4c        LEA        R9=>local_3a0,[RSP + 0x68]
                 24 68
       1c002ad8f 48 8d 45 a8     LEA        RAX=>local_360,[RBP + -0x58]
       1c002ad93 4c 8b c7        MOV        R8,RDI
       1c002ad96 48 8b d3        MOV        RDX,RBX
       1c002ad99 48 89 44        MOV        qword ptr [RSP + local_3e8],RAX
                 24 20
       1c002ad9e e8 3d 01        CALL       UdpDeliverDatagrams                              undefined UdpDeliverDatagrams(un
                 00 00
       1c002ada3 eb 1a           JMP        LAB_1c002adbf
                             LAB_1c002ada5                                   XREF[1]:     1c002ad83(j)  
       1c002ada5 f0 ff 4b 08     DEC.LOCK   dword ptr [RBX + 0x8]
       1c002ada9 4c 8d 4d a8     LEA        R9=>local_360,[RBP + -0x58]
       1c002adad 4c 8d 44        LEA        R8=>local_3a0,[RSP + 0x68]
                 24 68
       1c002adb2 48 89 44        MOV        qword ptr [RSP + local_3e8],RAX
                 24 20
       1c002adb7 48 8b d7        MOV        RDX,RDI
       1c002adba e8 f5 1a        CALL       UdpDiscardDatagrams                              undefined UdpDiscardDatagrams(un
                 00 00
                             LAB_1c002adbf                                   XREF[1]:     1c002ada3(j)  
       1c002adbf b8 ff ff        MOV        EAX,0xffffffff
                 ff ff
       1c002adc4 f0 0f c1        XADD.LOCK  dword ptr [RBX + 0x10],EAX
                 43 10
       1c002adc9 83 f8 01        CMP        EAX,0x1
       1c002adcc 75 2f           JNZ        LAB_1c002adfd
       1c002adce 48 8d 93        LEA        RDX,[RBX + 0xc8]
                 c8 00 00 00
       1c002add5 44 0f 20 c0     MOV        RAX,CR8
       1c002add9 84 c0           TEST       AL,AL
       1c002addb 75 0d           JNZ        LAB_1c002adea
       1c002addd 48 8b ca        MOV        RCX,RDX
       1c002ade0 48 89 32        MOV        qword ptr [RDX],RSI
       1c002ade3 e8 28 8f        CALL       UdpCleanupEndpointWorkQueueRoutine               undefined UdpCleanupEndpointWork
                 03 00
       1c002ade8 eb 13           JMP        LAB_1c002adfd
                             LAB_1c002adea                                   XREF[1]:     1c002addb(j)  
       1c002adea 48 8d 0d        LEA        RCX,[UdpCleanupEndpointWorkQueue]
                 4f cb 1d 00
       1c002adf1 48 ff 15        CALL       qword ptr [->NETIO.SYS::NetioInsertWorkQueue]    = 002248b0
                 38 64 1f 00
       1c002adf8 0f 1f 44        NOP        dword ptr [RAX + RAX*0x1]
                 00 00
                             LAB_1c002adfd                                   XREF[3]:     1c002ad0f(j), 1c002adcc(j), 
                                                                                          1c002ade8(j)  
       1c002adfd 4c 8b 74        MOV        R14,qword ptr [RSP + local_390]
                 24 78
                             LAB_1c002ae02                                   XREF[1]:     1c002aa57(j)  
       1c002ae02 f6 47 10 08     TEST       byte ptr [RDI + 0x10],0x8
       1c002ae06 75 4e           JNZ        LAB_1c002ae56
                             LAB_1c002ae08                                   XREF[1]:     1c002ae54(j)  
       1c002ae08 48 83 7f        CMP        qword ptr [RDI + 0x48],0x0
                 48 00
       1c002ae0d 74 3e           JZ         LAB_1c002ae4d
       1c002ae0f 48 8b 47 08     MOV        RAX,qword ptr [RDI + 0x8]
       1c002ae13 48 8b 48 08     MOV        RCX,qword ptr [RAX + 0x8]
       1c002ae17 8b 41 10        MOV        EAX,dword ptr [RCX + 0x10]
       1c002ae1a 83 f8 08        CMP        EAX,0x8
       1c002ae1d 72 10           JC         LAB_1c002ae2f
       1c002ae1f 83 41 28 f8     ADD        dword ptr [RCX + 0x28],-0x8
       1c002ae23 83 c0 f8        ADD        EAX,-0x8
       1c002ae26 83 41 18 08     ADD        dword ptr [RCX + 0x18],0x8
       1c002ae2a 89 41 10        MOV        dword ptr [RCX + 0x10],EAX
       1c002ae2d eb 1a           JMP        LAB_1c002ae49
                             LAB_1c002ae2f                                   XREF[1]:     1c002ae1d(j)  
       1c002ae2f 4c 8b 0d        MOV        R9,qword ptr [->NETIO.SYS::NetioAllocateMdl]     = 002247d6
                 ba 63 1f 00
       1c002ae36 45 33 c0        XOR        R8D,R8D
       1c002ae39 41 8d 50 08     LEA        EDX,[R8 + 0x8]
       1c002ae3d 48 ff 15        CALL       qword ptr [->NDIS.SYS::NdisRetreatNetBufferDat   = 00225514
                 64 63 1f 00
       1c002ae44 0f 1f 44        NOP        dword ptr [RAX + RAX*0x1]
                 00 00
                             LAB_1c002ae49                                   XREF[1]:     1c002ae2d(j)  
       1c002ae49 83 47 30 f8     ADD        dword ptr [RDI + 0x30],-0x8
                             LAB_1c002ae4d                                   XREF[1]:     1c002ae0d(j)  
       1c002ae4d 48 8b 3f        MOV        RDI,qword ptr [RDI]
       1c002ae50 48 3b 7d a8     CMP        RDI,qword ptr [RBP + local_360]
       1c002ae54 75 b2           JNZ        LAB_1c002ae08
                             LAB_1c002ae56                                   XREF[1]:     1c002ae06(j)  
       1c002ae56 48 8b 45 a0     MOV        RAX,qword ptr [RBP + local_368]
       1c002ae5a 4c 8b 6d a8     MOV        R13,qword ptr [RBP + local_360]
       1c002ae5e 4c 89 6d 98     MOV        qword ptr [RBP + local_370],R13
       1c002ae62 48 85 c0        TEST       RAX,RAX
       1c002ae65 74 0d           JZ         LAB_1c002ae74
       1c002ae67 4d 85 ed        TEST       R13,R13
       1c002ae6a 74 19           JZ         LAB_1c002ae85
       1c002ae6c 48 8b 00        MOV        RAX,qword ptr [RAX]
       1c002ae6f 48 89 44        MOV        qword ptr [RSP + local_3a0],RAX
                 24 68
                             LAB_1c002ae74                                   XREF[1]:     1c002ae65(j)  
       1c002ae74 48 83 7d        CMP        qword ptr [RBP + local_360],0x0
                 a8 00
       1c002ae79 41 b9 00        MOV        R9D,0x0
                 00 00 00
       1c002ae7f 0f 85 3b        JNZ        LAB_1c0029ec0
                 f0 ff ff
                             LAB_1c002ae85                                   XREF[1]:     1c002ae6a(j)  
       1c002ae85 80 7c 24        CMP        byte ptr [RSP + local_3a8],0x0
                 60 00
       1c002ae8a 75 14           JNZ        LAB_1c002aea0
       1c002ae8c ba 49 6e        MOV        EDX,0x43456e49
                 45 43
       1c002ae91 49 8b ce        MOV        RCX,R14
       1c002ae94 48 ff 15        CALL       qword ptr [->NTOSKRNL.EXE::ExFreePoolWithTag]    = 002244b2
                 3d 77 1f 00
       1c002ae9b 0f 1f 44        NOP        dword ptr [RAX + RAX*0x1]
                 00 00
                             LAB_1c002aea0                                   XREF[2]:     1c0029d82(j), 1c002ae8a(j)  
       1c002aea0 4c 8b bc        MOV        R15,qword ptr [RSP + local_38]
                 24 d0 03 
                 00 00
       1c002aea8 48 8b 9c        MOV        RBX,qword ptr [RSP + local_res18]
                 24 20 04 
                 00 00
       1c002aeb0 48 8b 8d        MOV        RCX,qword ptr [RBP + local_40]
                 c8 02 00 00
       1c002aeb7 48 33 cc        XOR        RCX,RSP
       1c002aeba e8 d1 9f        CALL       __security_check_cookie                          undefined __security_check_cooki
                 07 00
       1c002aebf 48 81 c4        ADD        RSP,0x3d8
                 d8 03 00 00
       1c002aec6 41 5e           POP        R14
       1c002aec8 41 5d           POP        R13
       1c002aeca 41 5c           POP        R12
       1c002aecc 5f              POP        RDI
       1c002aecd 5e              POP        RSI
       1c002aece 5d              POP        RBP
       1c002aecf c3              RET