Under the Hood of AFD.sys Part 2: TCP handshake | Mateusz Lewczak

https://leftarcode.com/posts/afd-reverse-engineering-part2/