Function at 0x8a210
Capabilities:
Register network filter via wfp api

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
push rdi
sub rsp, 0x1d0
mov rax, qword [0x000a7100]
xor rax, rsp
mov qword [rsp + 0x1c0], rax
mov rdi, qword [rsp + 0x200]
mov rbx, qword [rsp + 0x208]
mov rsi, rcx
lea rcx, [rsp + 0xf0]
xor edx, edx
mov r8d, 0xc8
call fcn.00091d10
lea rcx, [rsp + 0x20]
xor edx, edx
mov r8d, 0xc8
call fcn.00091d10
mov rdx, qword [rdi]
and dword [rsp + 0x150], 0
movdqu xmm5, xmmword [rdi]
movdqu xmm0, xmmword [rbx]
movdqu xmm1, xmmword [0x0009f8d0]
and qword [rsp + 0x188], 0
lea rax, [0x0009db50]
or r9d, 0xffffffff
mov qword [rsp + 0x100], rax
lea rax, [0x0009db00]
lea r10, [0x00010000]
movdqu xmmword [rsp + 0x130], xmm5
movdqu xmmword [rsp + 0x174], xmm0
movdqu xmmword [rsp + 0x140], xmm1
mov qword [rsp + 0x108], rax
lea rax, [rsp + 0x20]
mov dword [rsp + 0x170], 0x5003
lea r8d, [r9 + 9]
mov qword [rsp + 0x168], rax
cmp rdx, qword [r10 + 0x8f7f0]
jne 0x8a30d
mov rdx, qword [rdi + r8]
cmp rdx, qword [r10 + r8 + 0x8f7f0]
jne 0x8a30d
xor eax, eax
jmp 0x8a312
sbb eax, eax
sbb eax, r9d
mov r11d, 1
test eax, eax
je 0x8a509
mov rdx, qword [rdi]
cmp rdx, qword [r10 + 0x8f800]
jne 0x8a33e
mov rdx, qword [rdi + r8]
cmp rdx, qword [r10 + r8 + 0x8f800]
jne 0x8a33e
xor eax, eax
jmp 0x8a343
sbb eax, eax
sbb eax, r9d
test eax, eax
je 0x8a509
mov rdx, qword [rdi]
cmp rdx, qword [r10 + 0x8f870]
jne 0x8a369
mov rdx, qword [rdi + r8]
cmp rdx, qword [r10 + r8 + 0x8f870]
jne 0x8a369
xor eax, eax
jmp 0x8a36e
sbb eax, eax
sbb eax, r9d
test eax, eax
je 0x8a509
mov rdx, qword [rdi]
cmp rdx, qword [r10 + 0x8f880]
jne 0x8a394
mov rdx, qword [rdi + r8]
cmp rdx, qword [r10 + r8 + 0x8f880]
jne 0x8a394
xor eax, eax
jmp 0x8a399
sbb eax, eax
sbb eax, r9d
test eax, eax
je 0x8a509
mov rdx, qword [rdi]
cmp rdx, qword [r10 + 0x8f850]
jne 0x8a3bf
mov rdx, qword [rdi + r8]
cmp rdx, qword [r10 + r8 + 0x8f850]
jne 0x8a3bf
xor eax, eax
jmp 0x8a3c4
sbb eax, eax
sbb eax, r9d
test eax, eax
je 0x8a509
mov rdx, qword [rdi]
cmp rdx, qword [r10 + 0x8f860]
jne 0x8a3ea
mov rdx, qword [rdi + r8]
cmp rdx, qword [r10 + r8 + 0x8f860]
jne 0x8a3ea
xor eax, eax
jmp 0x8a3ef
sbb eax, eax
sbb eax, r9d
test eax, eax
je 0x8a509
mov rdx, qword [rdi]
cmp rdx, qword [r10 + 0x8f810]
jne 0x8a415
mov rdx, qword [rdi + r8]
cmp rdx, qword [r10 + r8 + 0x8f810]
jne 0x8a415
xor eax, eax
jmp 0x8a41a
sbb eax, eax
sbb eax, r9d
test eax, eax
je 0x8a509
mov rdx, qword [rdi]
cmp rdx, qword [r10 + 0x8f820]
jne 0x8a440
mov rdx, qword [rdi + r8]
cmp rdx, qword [r10 + r8 + 0x8f820]
jne 0x8a440
xor eax, eax
jmp 0x8a445
sbb eax, eax
sbb eax, r9d
test eax, eax
je 0x8a509
mov rdx, qword [rdi]
cmp rdx, qword [r10 + 0x8f830]
jne 0x8a46b
mov rdx, qword [rdi + r8]
cmp rdx, qword [r10 + r8 + 0x8f830]
jne 0x8a46b
xor eax, eax
jmp 0x8a470
sbb eax, eax
sbb eax, r9d
test eax, eax
je 0x8a509
mov rdx, qword [rdi]
cmp rdx, qword [r10 + 0x8f840]
jne 0x8a496
mov rdx, qword [rdi + r8]
cmp rdx, qword [r10 + r8 + 0x8f840]
jne 0x8a496
xor eax, eax
jmp 0x8a49b
sbb eax, eax
sbb eax, r9d
test eax, eax
je 0x8a509
mov rdx, qword [rdi]
cmp rdx, qword [r10 + 0x8f7d0]
jne 0x8a4bd
mov rdx, qword [rdi + r8]
cmp rdx, qword [r10 + r8 + 0x8f7d0]
jne 0x8a4bd
xor eax, eax
jmp 0x8a4c2
sbb eax, eax
sbb eax, r9d
test eax, eax
je 0x8a4ed
mov rcx, qword [rdi]
cmp rcx, qword [r10 + 0x8f7e0]
jne 0x8a4e4
mov rcx, qword [rdi + r8]
cmp rcx, qword [r10 + r8 + 0x8f7e0]
jne 0x8a4e4
xor eax, eax
jmp 0x8a4e9
sbb eax, eax
sbb eax, r9d
test eax, eax
jne 0x8a509
movdqu xmm0, xmmword [0x0009f8c0]
mov eax, 0xffff
mov dword [rsp + 0x38], 2
mov word [rsp + 0x40], ax
jmp 0x8a51b
movdqu xmm0, xmmword [0x0009f8b0]
mov dword [rsp + 0x38], r11d
mov byte [rsp + 0x40], 0xff
lea rdx, [rsp + 0xf0]
xor r9d, r9d
xor r8d, r8d
mov rcx, rsi
mov dword [rsp + 0x30], 4
movdqu xmmword [rsp + 0x20], xmm0
mov dword [rsp + 0x160], r11d
call sub.fwpkclnt.sys_FwpmFilterAdd0
mov ecx, eax
mov ebx, eax
mov eax, 0xc0000000
and ecx, eax
cmp ecx, eax
jne 0x8a564
lea rcx, [0x0009d9c0]
mov edx, ebx
call fcn.0004505c
mov eax, ebx
mov rcx, qword [rsp + 0x1c0]
xor rcx, rsp
call fcn.000916b0
lea r11, [rsp + 0x1d0]
mov rbx, qword [r11 + 0x18]
mov rsi, qword [r11 + 0x20]
mov rsp, r11
pop rdi
ret