Function at 0x14000a0c8
Capabilities:
Patch event tracing for windows function

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r15
lea rbp, [rax - 0x138]
sub rsp, 0x220
lea rdx, [0x1400087d8]
lea rcx, [rbp - 0x80]
call fcn.14000b170
nop
lea rdx, [rbp - 0x80]
lea rcx, [rsp + 0x40]
call fcn.14000992c
nop
mov rdx, rax
lea rcx, [rsp + 0x60]
call fcn.140009994
mov r15d, 0xf
cmp qword [rax + 0x18], r15
jbe 0x14000a126
mov rax, qword [rax]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov rbx, rax
mov r12d, 0x1000
mov rdx, qword [rsp + 0x78]
cmp rdx, r15
jbe 0x14000a170
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, r12
jb 0x14000a16b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a53e
call fcn.14000bcdc
movdqa xmm0, xmmword [0x140008950]
movdqu xmmword [rsp + 0x70], xmm0
mov byte [rsp + 0x60], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, r15
jbe 0x14000a1c3
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, r12
jb 0x14000a1b6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a544
call fcn.14000bcdc
movdqa xmm0, xmmword [0x140008950]
movdqu xmmword [rsp + 0x50], xmm0
mov byte [rsp + 0x40], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, r15
jbe 0x14000a204
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, r12
jb 0x14000a1ff
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a54a
call fcn.14000bcdc
test rbx, rbx
je 0x14000a515
lea rdx, [0x1400087e8]
lea rcx, [rbp - 0x20]
call fcn.14000b170
nop
lea rdx, [0x1400087f8]
lea rcx, [rbp]
call fcn.14000b170
nop
lea rdx, [0x140008808]
lea rcx, [rbp + 0x20]
call fcn.14000b170
nop
lea rdx, [0x140008810]
lea rcx, [rbp + 0x40]
call fcn.14000b170
nop
lea rdx, [0x140008828]
lea rcx, [rbp + 0x60]
call fcn.14000b170
nop
lea rdx, [0x140008838]
lea rcx, [rbp + 0x80]
call fcn.14000b170
nop
lea rdx, [0x140008848]
lea rcx, [rbp + 0xa0]
call fcn.14000b170
nop
lea rdx, [0x140008858]
lea rcx, [rbp + 0xc0]
call fcn.14000b170
nop
lea rdx, [0x140008868]
lea rcx, [rbp + 0xe0]
call fcn.14000b170
nop
lea rdx, [0x140008880]
lea rcx, [rbp + 0x100]
call fcn.14000b170
nop
lea rax, [rbp - 0x20]
mov qword [rsp + 0x20], rax
lea rax, [rbp + 0x120]
mov qword [rsp + 0x28], rax
movaps xmm0, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm0
lea rdx, [rsp + 0x20]
lea rcx, [rbp - 0x60]
call fcn.14000af7c
nop
lea r9, [0x14000b114]
mov edx, 0x20
lea r8d, [rdx - 0x16]
lea rcx, [rbp - 0x20]
call fcn.14000bc0c
mov rdi, qword [rbp - 0x60]
mov rsi, qword [rbp - 0x58]
jmp 0x14000a503
lea rdx, [0x1400087d8]
lea rcx, [rbp - 0x48]
call fcn.14000b170
nop
mov rdx, rdi
lea rcx, [rsp + 0x60]
call fcn.14000992c
nop
mov rdx, rax
lea rcx, [rsp + 0x40]
call fcn.140009994
mov rbx, rax
lea rdx, [rbp - 0x48]
lea rcx, [rbp - 0x80]
call fcn.14000992c
nop
mov rdx, rax
lea rcx, [rsp + 0x20]
call fcn.140009994
mov rdx, rbx
mov rcx, rax
call fcn.1400098ec
mov rbx, rax
mov rdx, qword [rsp + 0x38]
cmp rdx, r15
jbe 0x14000a3ab
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, r12
jb 0x14000a3a6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a550
call fcn.14000bcdc
and qword [rsp + 0x30], 0
mov qword [rsp + 0x38], r15
mov byte [rsp + 0x20], 0
mov rdx, qword [rbp - 0x68]
cmp rdx, r15
jbe 0x14000a3f1
inc rdx
mov rcx, qword [rbp - 0x80]
mov rax, rcx
cmp rdx, r12
jb 0x14000a3ec
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a556
call fcn.14000bcdc
and qword [rbp - 0x70], 0
mov qword [rbp - 0x68], r15
mov byte [rbp - 0x80], 0
mov rdx, qword [rsp + 0x58]
cmp rdx, r15
jbe 0x14000a436
inc rdx
mov rcx, qword [rsp + 0x40]
mov rax, rcx
cmp rdx, r12
jb 0x14000a431
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a55c
call fcn.14000bcdc
and qword [rsp + 0x50], 0
mov qword [rsp + 0x58], r15
mov byte [rsp + 0x40], 0
mov rdx, qword [rsp + 0x78]
cmp rdx, r15
jbe 0x14000a47e
inc rdx
mov rcx, qword [rsp + 0x60]
mov rax, rcx
cmp rdx, r12
jb 0x14000a479
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a532
call fcn.14000bcdc
and qword [rsp + 0x70], 0
mov qword [rsp + 0x78], r15
mov byte [rsp + 0x60], 0
mov rdx, qword [rbp - 0x30]
cmp rdx, r15
jbe 0x14000a4c0
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, r12
jb 0x14000a4bb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000a538
call fcn.14000bcdc
test rbx, rbx
je 0x14000a4ff
lea r9, [rbp + 0x140]
mov edx, 2
lea r8d, [rdx + 0x3e]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
mov word [rbx], 0x9090
lea r9, [rbp + 0x140]
mov r8d, dword [rbp + 0x140]
mov edx, 2
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
add rdi, 0x20
cmp rdi, rsi
jne 0x14000a31b
lea rcx, [rbp - 0x60]
call fcn.14000b3c0
lea r11, [rsp + 0x220]
mov rbx, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r12
pop rbp
ret
call fcn.140011a6c
nop
call fcn.140011a6c
nop
call fcn.140011a6c
nop
call fcn.140011a6c
nop
call fcn.140011a6c
nop
call fcn.140011a6c
nop
call fcn.140011a6c
nop
call fcn.140011a6c
int3