Function at 0x14008b8f0
Capabilities:
Enumerate process modules

Disassembly:
xchg r14, rbx
mov qword [rsp + 8], r14
xchg rbx, r14
push rbp
jmp 0x14008bcb6
xor edi, 0xfcee741
sub edi, 0xce08f4
lea rdx, [rsp + 0x68]
mov r15, r15
mov rbx, qword [rsp + 0x68]
jmp 0x14008be78
xchg rdx, rcx
mov rdx, rbx
xchg rcx, rdx
call sub.KERNEL32.dll_Module32First
xchg r13, r13
test eax, eax
jmp 0x14008b9ed
lea rdi, [rsp + 0x48]
xchg r10, r10
mov r15, qword [rsp + 0x48]
mov r13, qword [rsp + 0x60]
cmp r13, 0x10
cmovae rdi, r15
xchg rdx, rdx
jmp 0x14008b959
lea rcx, [rsp + 0x48]
cmovae rcx, r15
mov rsi, qword [rsp + 0x58]
mov rdi, rdi
add rsi, rcx
jmp 0x14008ba97
sub rsp, 0x58002da2
mov rax, qword [0x14024f2e0]
xor rax, rsp
xchg rbx, rax
jmp 0x14008bcdf
mov qword [rsp + 0x30], r8
xchg r8, r15
mov qword [rsp + 0x40], r15
xchg r8, r15
mov ecx, 0x71a9b755
jmp 0x14008b9d6
sub rsp, 8
mov qword [rsp], r13
push r14
mov r12, r12
push r15
lea rbp, [rsp - 0x1e0]
add rsp, 0x58002ac2
jmp 0x14008b972
movups xmm0, xmmword [r15]
xchg r12, r15
xchg rsi, rsp
jmp 0x14008bd37
sub ecx, 0xc12f88f
xor ecx, 0x2caecfaf
xor ecx, 0x733181a6
jmp 0x14008bb98
je 0x14008c081
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x58], rdi
mov dword [rsp - 0x2c], edx
mov qword [rsp + 0x60], 0x7fba133e
jmp 0x14008bc44
add dword [rbp - 0x70], 0x361094ce
add dword [rbp - 0x70], 0x3c16e97
xor dword [rbp - 0x70], 0x7c0ce2d1
sub dword [rbp - 0x70], 0xa75921a
jmp 0x14008bbc4
nop word [rax + rax]
mov qword [rbp - 0x80], 0x22c33cfc
xor qword [rbp - 0x80], 0x7e73b584
jmp 0x14008baef
sub dword [rbp - 0x70], 0x5ca66d39
add dword [rbp - 0x70], 0x3eb02215
xor dword [rbp - 0x70], 0x63c083c1
xor dword [rbp - 0x70], 0x1bbe7fad
jmp 0x14008ba0f
mov rsi, r12
xchg rsi, r12
cmp qword [rsi + 0x18], 0x10
mov r8, r8
jb 0x14008ba8e
xchg r12, r15
jmp 0x14008ba88
mov r15, qword [rsi]
xchg r15, r12
cmp r14, 0x10
jmp 0x14008bb60
lea rbx, [rsp + 0x48]
cmp r13, 0x10
mov r9, r9
cmovae rbx, r15
cmp rbx, rsi
jmp 0x14008bcc3
add qword [rsp + 0x60], 0x405a4328
sub qword [rsp + 0x60], 0x51bd553c
mov byte [rsp + 0x48], 0x39
add byte [rsp + 0x48], 0x2f
xor byte [rsp + 0x48], 0x5d
jmp 0x14008bbda
sub r8, 0x36829cf3
xor r8, 0xfedc933
xor r8, 0x3a5c2caf
jmp 0x14008bc8d
sub qword [rbp - 0x80], 0x15034b50
add qword [rbp - 0x80], 0x34fd51a6
sub qword [rbp - 0x80], 0x70efdc8
sub qword [rbp - 0x80], 0x7250f6af
sub qword [rbp - 0x80], 0x34a9b57
xchg r14, rbx
jmp 0x14008bb72
mov r15, qword [rsp + 0x48]
mov dword [rsp - 0x14], esi
mov rsi, qword [r12]
xchg r11, rax
mov r11, qword [r12 + 8]
xchg r11, rax
xchg r10, rax
jmp 0x14008bc04
sub r8d, 0x62911e04
lea rcx, [rbp - 0x6c]
call fcn.1400e5df0
mov dword [rsp - 0x24], 0x68ca86e7
mov dword [rbp - 0x70], 0x62cfda96
jmp 0x14008ba4b
jae 0x14008bd4e
mov dword [rsp - 0x34], esi
xchg r15, r12
jmp 0x14008b9c7
mov rbx, qword [rsi + 0x10]
xchg r14, rbx
xchg r12, rsi
jmp 0x14008ba6c
xor edi, 0x5aa72b05
xor edi, 0x76a5b504
sub edi, 0x1b8a45c4
jmp 0x14008b901
add ecx, 0x30edf4a8
xor ecx, 0x48e53943
add ecx, 0x4f5c84c2
xor ecx, 0x7f499899
xor ecx, 0xe26f867
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov dword [rsp - 0x24], esp
jmp 0x14008bc6d
xor edi, edi
mov r14d, edi
mov dword [rsp + 0x20], edi
mov dword [rsp - 0x2c], ebp
lea rdx, [rbp - 0x70]
jmp 0x14008b91f
sub byte [rsp + 0x48], 6
add byte [rsp + 0x48], 0x1a
sub byte [rsp + 0x48], 0x49
lea rax, [rbp - 0x40]
nop
movabs r8, 0xffffffff1ab44b2c
xor r8, 0x2745cabc
jmp 0x14008bad5
mov qword [rsp + 0x28], r10
xchg r10, rax
cmp rsi, rax
xchg rsi, rsi
je 0x14008c01e
jmp 0x14008ba30
sub r8d, 0x2ed5034a
add r8d, 0x1c82f044
sub r8d, 0x3551f4a0
xor r8d, 0x51b95b2
add r8d, 0x371051a4
jmp 0x14008bb3c
sub qword [rsp + 0x60], 0x5cfbf3d0
sub qword [rsp + 0x60], 0x4ca7748
sub qword [rsp + 0x60], 0x1a1c8a0a
add qword [rsp + 0x60], 0xd8bf407
jmp 0x14008baaf
mov rbx, rax
xchg r10, rax
mov qword [rsp + 0x38], r10
xchg r10, rax
xor edx, edx
mov r8d, 0x786234c5
xor r8d, 0xe5d5609
jmp 0x14008bc1c
add r8, 0x11be6686
add r8, 0x7fffffff
xor r8, 0x3b629879
nop word [rax + rax]
inc r8
xchg r15, r15
jmp 0x14008bd14
mov r9, r9
push rsi
push rdi
push r12
nop
jmp 0x14008b9a4
je 0x14008bb28
sub rdi, rbx
xchg rsp, rsp
movsx ecx, byte [rbx]
call fcn.1400b00e0
mov byte [rbx + rdi], al
jmp 0x14008bcf6
mov qword [rbp + 0x1d0], rbx
xchg rbx, rax
xchg r8, r12
mov r8, r12
xchg r8, r12
jmp 0x14008b98a
inc rbx
mov dword [rsp - 0x1c], 0x27d73555
cmp rbx, rsi
jne 0x14008bccf
mov r13, qword [rsp + 0x60]
jmp 0x14008bb1f
cmp byte [rax + r8], 0
jne 0x14008bcab
lea rdx, [rbp - 0x40]
mov dword [rsp - 0x1c], edi
lea rcx, [rsp + 0x48]
call fcn.1400191c0
nop
jmp 0x14008b937
movups xmmword [rsi + 0x68], xmm0
xchg rsp, rsi
mov edi, 0x43bb8f63
sub edi, 0x3d31e55c
jmp 0x14008bb81
xchg r15, r14
mov rdi, r15
xchg r15, r14
or rdi, 0xf
mov dword [rsp - 0x10], 0x6fff29d0
movabs rax, 0x7fffffff1c317984
add rax, 0x49424f72
jmp 0x14008bd96
call fcn.1400e354c
xchg r14, r14
test rax, rax
je 0x14008c149
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
jmp 0x14008bdfc
sub rax, 0x61d46ac6
add rax, 0x2a2647b5
xor rax, 0x6782f3af
xor rax, 0x6c443bec
add rax, 0x7fffffff
add rax, 0x59fc925a
cmp rdi, rax
jmp 0x14008bdd7
cmp rax, rcx
jbe 0x14008c13e
xchg rcx, rax
mov rax, rcx
xchg rcx, rax
jmp 0x14008bd78
cmova rdi, rax
lea rcx, [rdi + 1]
mov r13, r13
cmp rcx, 0x1000
jb 0x14008be09
lea rax, [rcx + 0x27]
mov dword [rsp - 0xc], ecx
jmp 0x14008bdc2
mov dword [rsp - 0x2c], ebx
mov qword [rbx - 8], rax
jmp 0x14008be32
test rcx, rcx
mov dword [rsp - 0x28], 0x4fc51357
je 0x14008be30
call fcn.1400e354c
xchg rbx, rax
jmp 0x14008be26
mov rax, rbx
xchg rbx, rax
jmp 0x14008be32
xor ebx, ebx
xchg r13, rbx
mov qword [rsp + 0x68], r13
xchg rbx, r13
lea r8, [r14 + 1]
xchg r13, r12
jmp 0x14008bebe
mov dword [rsp - 0x28], 0x71eb4410
lea rcx, [rsp + 0x48]
cmp r13, 0x10
jmp 0x14008be9a
mov dword [rsp - 0x30], esp
mov r13, qword [rsp + 0x60]
xchg r15, r13
mov r13, qword [rsp + 0x48]
jmp 0x14008be75
xchg r13, r15
xchg r11, rdi
mov qword [rbp - 0x80], r11
xchg rdi, r11
mov qword [rsp + 0x78], r14
jmp 0x14008be49
xor cl, 0x55
sub cl, 0x2b
xor cl, 0xd
jmp 0x14008bf0b
cmovae rcx, r15
mov dword [rsp - 0x40], 0x52cd3e0a
mov r8, qword [rsp + 0x58]
cmp r8, r14
jne 0x14008bf09
call fcn.1400e6340
jmp 0x14008becc
mov rdx, r13
xchg r12, r13
xchg rbx, r9
jmp 0x14008bee8
mov dword [rsp - 0x14], ebx
test eax, eax
jne 0x14008bf09
mov cl, 0x25
add cl, 0x4c
sub cl, 0x46
add cl, 0x37
jmp 0x14008be8c
mov rcx, r9
xchg r9, rbx
call fcn.1400e5740
mov dword [rsp - 0x1c], edx
lea rdx, [rsp + 0x68]
cmp rdi, 0x10
cmovae rdx, rbx
jmp 0x14008be5f
xor cl, cl
mov r14d, dword [rsp + 0x20]
lea eax, [r14 + 1]
xchg r14, r14
test cl, cl
jmp 0x14008bf58
mov rbx, rbx
cmp rsi, qword [rsp + 0x28]
jne 0x14008ba36
mov r12, qword [rsp + 0x30]
jmp 0x14008c01b
cmp rdx, 0x1000
jb 0x14008bfad
sub rdx, 0xffffffffffffffd9
mov r15, qword [r15 - 8]
mov dword [rsp - 0x40], 0x4bf300fd
jmp 0x14008c037
cmove eax, r14d
mov r14d, eax
mov dword [rsp - 0x34], ecx
mov dword [rsp + 0x20], eax
cmp rdi, 0x10
jmp 0x14008bf8d
mov rbx, qword [rbx - 8]
sub rax, rbx
xchg rdx, rdx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008c149
jmp 0x14008c047
jb 0x14008c078
lea rdx, [rdi + 1]
mov dword [rsp - 0x10], 0x74b96690
jmp 0x14008c00f
mov r14, r14
ja 0x14008c134
xchg rsi, r15
mov rcx, rsi
jmp 0x14008bff0
xchg rdx, rcx
call sub.KERNEL32.dll_Module32Next
test eax, eax
je 0x14008c081
xchg r8, r8
xor edi, edi
jmp 0x14008bfd2
jmp 0x14008b9f3
cmp rdx, 0x1000
mov r14, r14
jb 0x14008c04f
add rdx, 0x27
jmp 0x14008bf70
xchg rsi, r15
call fcn.1400e3588
lea rdx, [rbp - 0x70]
xchg rdi, rdi
mov rbx, qword [rsp + 0x38]
xchg rcx, rdx
mov rdx, rbx
jmp 0x14008bfb8
xchg rsp, rax
mov rsp, rbx
xchg rsp, rax
jmp 0x14008bfd7
mov r11, r11
cmp r13, 0x10
jb 0x14008bff8
lea rdx, [r13 + 1]
mov rax, r15
xchg r11, r11
jmp 0x14008bf36
sub rax, r15
sub rax, 8
cmp rax, 0x1f
jmp 0x14008bfa4
mov dword [rsp - 0x10], 0x4ec8f11a
xchg r8, rcx
mov r8, rbx
xchg r8, rcx
call fcn.1400e3588
xchg r8, r13
jmp 0x14008c065
mov r8, qword [rsp + 0x60]
xchg r13, r8
xchg r15, r10
mov r10, qword [rsp + 0x48]
xchg r10, r15
add rsi, 0x20
jmp 0x14008bf1e
xchg rbx, rcx
mov rbx, rcx
xchg rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [rsp - 0x3c], edi
nop
jmp 0x14008c119
nop
mov rbp, qword [rsp]
add rsp, 8
jmp 0x14008c0bc
nop
add rsp, 8
mov r13, qword [rsp - 8]
nop
add rsp, 8
jmp 0x14008c0bd
ret
mov r12, qword [rsp - 8]
nop
mov rdi, qword [rsp]
add rsp, 8
pop rsi
mov dword [rsp - 0x24], 0x5e79231f
jmp 0x14008c09a
mov dword [rsp - 0x44], edx
call fcn.1400e36a0
mov rbx, qword [rsp + 0x320]
sub rsp, 0xfffffffffffffd20
jmp 0x14008c0f6
nop
add rsp, 8
mov r15, qword [rsp - 8]
pop r14
jmp 0x14008c0a8
mov r12, qword [rbp + 0x1d0]
xchg r12, rcx
xor rcx, rsp
jmp 0x14008c0d9
mov rcx, r12
call 0x140090bf0
mov dword [rsp - 0x3c], 0x4292cb25
mov eax, r14d
xchg r12, rcx
jmp 0x14008c107
call fcn.1400ea23c
nop
mov dword [rsp - 0x44], edx
call fcn.14000e800
jmp 0x14008c148
int3
call fcn.1400ea23c
int3