Function at 0x14008a530
Capabilities:
Enumerate process modules

Disassembly:
mov qword [rsp + 8], rbx
push rbp
nop
mov qword [rsp - 8], rsi
sub rsp, 8
nop
mov qword [rsp - 8], rdi
jmp 0x14008a8a9
xchg r13, rbx
mov r13, rax
xchg r13, rbx
mov qword [rsp + 0x38], rax
jmp 0x14008a60a
lea rdx, [rbp - 0x70]
xchg rbx, rcx
mov rbx, rcx
xchg rcx, rbx
call sub.KERNEL32.dll_Module32First
jmp 0x14008a685
xchg r9, r13
xchg r9, r15
mov r9, qword [rsp + 0x48]
xchg r15, r9
mov rsi, qword [r12]
mov rax, qword [r12 + 8]
jmp 0x14008a70c
xor qword [rbp - 0x80], 0x218d7dfa
mov r14, qword [rsi + 0x10]
mov dword [rsp - 0x44], esi
jmp 0x14008a75e
add rsp, 0xfffffffffffffd20
mov rax, qword [0x140248220]
xchg rdi, rdi
xor rax, rsp
mov qword [rbp + 0x1d0], rax
jmp 0x14008a985
cmp byte [rax + r8], 0
jne 0x14008a895
lea rdx, [rbp - 0x40]
xchg r8, r8
lea rcx, [rsp + 0x48]
call fcn.140018620
nop
jmp 0x14008a966
xor ecx, 0x1cd28324
add ecx, 0x7288fb3e
xor ecx, 0x5ff15ab5
xor ecx, 0x275744cc
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
jmp 0x14008a54b
mov dword [rsp - 0x40], 0x2e386d2a
xor edx, edx
mov r8d, 0x3ff9e723
add r8d, 0x112dd431
add r8d, 0x1116458f
sub r8d, 0xaf95df9
sub r8d, 0x12d641ef
jmp 0x14008a79c
add r8, 0x135215b9
add r8, 0x11dbcc84
xor r8, 0x1d70848f
jmp 0x14008a86d
sub qword [rsp + 0x60], 0x3bf68aa
sub qword [rsp + 0x60], 0x2827d57f
mov byte [rsp + 0x48], 0x32
xor byte [rsp + 0x48], 0x60
xor byte [rsp + 0x48], 0x6f
sub byte [rsp + 0x48], 0x1c
add byte [rsp + 0x48], 0x34
jmp 0x14008a7f3
mov dword [rsp - 0x34], 0x2dd36c98
test eax, eax
je 0x14008acf2
xchg rbx, rdi
mov qword [rsp + 0x48], rbx
xchg rdi, rbx
jmp 0x14008a937
mov dword [rsp - 0x10], 0x5cabe2a3
lea rcx, [rsp + 0x48]
cmovae rcx, r15
xchg r15, rsi
mov r15, qword [rsp + 0x58]
xchg r15, rsi
add rsi, rcx
jmp 0x14008a8e7
movups xmmword [r8 + 0x68], xmm0
xchg r8, rsp
mov edi, 0xbdd1ab
add edi, 0x705572ed
sub edi, 0x53a1dfde
add edi, 0x151c54b4
xor edi, 0x58c8aa63
jmp 0x14008a8c2
call fcn.1400df580
mov dword [rsp - 0x40], 0xc3db04e
mov dword [rbp - 0x70], 0x647cc858
jmp 0x14008a806
mov dword [rsp - 0xc], ebp
mov qword [rsp + 0x28], rax
cmp rsi, rax
je 0x14008ac6c
jmp 0x14008a723
mov dword [rsp - 0x14], 0x82f59d6
nop word [rax + rax]
mov qword [rbp - 0x80], 0x148e0f54
add qword [rbp - 0x80], 0x56bec332
sub qword [rbp - 0x80], 0x5404fd0f
add qword [rbp - 0x80], 0x345066a9
xor qword [rbp - 0x80], 0x6a1541da
jmp 0x14008a591
xchg r12, rsi
mov rsi, r12
xchg rsi, r12
cmp qword [rsi + 0x18], 0x10
jb 0x14008a851
mov r12, qword [rsi]
mov dword [rsp - 0x10], ecx
jmp 0x14008a851
nop
movabs r8, 0xffffffff2c8eed24
xor r8, 0x7cba352a
sub r8, 0xe5aa237
jmp 0x14008a63b
sub r8d, 0x3bce00d5
sub r8d, 0x8a05df2
lea rcx, [rbp - 0x6c]
jmp 0x14008a6f3
cmp rbx, rsi
mov dword [rsp - 0x3c], esi
je 0x14008a583
sub rdi, rbx
jmp 0x14008a950
add dword [rbp - 0x70], 0x797235f8
sub dword [rbp - 0x70], 0x5a1afd2b
sub dword [rbp - 0x70], 0x2405b078
xor edi, edi
mov r14d, edi
mov dword [rsp - 0xc], 0x5cb983a0
mov dword [rsp + 0x20], edi
jmp 0x14008a55e
xor byte [rsp + 0x48], 0x29
sub byte [rsp + 0x48], 0x7c
lea rax, [rbp - 0x40]
jmp 0x14008a77e
sub dword [rbp - 0x70], 0x12998abd
sub dword [rbp - 0x70], 0x94060e8
add dword [rbp - 0x70], 0x2b474ec4
sub dword [rbp - 0x70], 0x6f3bb194
jmp 0x14008a7c8
xchg rbx, r13
cmp r13, 0x10
cmovae rdi, r15
jmp 0x14008a6a5
cmp rbx, rsi
mov dword [rsp - 0x14], edi
jne 0x14008a950
xchg r13, r9
mov r9, qword [rsp + 0x60]
jmp 0x14008a575
cmp r14, 0x10
jae 0x14008a9b7
xchg r15, r12
movups xmm0, xmmword [r15]
xchg r12, r15
xchg r8, rsp
jmp 0x14008a6c9
xor r8, 0x1cc3a6b8
sub r8, 0x23d4b134
add r8, 0x7fffffff
add r8, 0x3d197711
nop word [rax + rax]
mov r11, r11
inc r8
jmp 0x14008a5c6
sub rsp, 8
push r14
nop
jmp 0x14008a921
sub rsp, 8
nop
mov qword [rsp - 8], r12
sub rsp, 8
nop
mov qword [rsp - 8], r13
jmp 0x14008a89d
xor edi, 0x7eaff6e0
add edi, 0x9036bca
xor edi, 0x1dee51b8
lea rdx, [rsp + 0x68]
mov rbx, qword [rsp + 0x68]
mov dword [rsp - 0x10], edx
jmp 0x14008a980
lea rbx, [rsp + 0x48]
mov dword [rsp - 0xc], 0x1781007d
cmp r13, 0x10
cmovae rbx, r15
jmp 0x14008a7b3
sub qword [rsp + 0x60], 0x2b7c6dda
add qword [rsp + 0x60], 0x34fa1f60
sub qword [rsp + 0x60], 0x465d59b4
jmp 0x14008a655
mov qword [rsp - 8], r15
sub rsp, 8
lea rbp, [rsp - 0x1e0]
jmp 0x14008a5a6
xchg rdi, rbx
mov qword [rsp + 0x58], rbx
xchg rbx, rdi
mov qword [rsp + 0x60], 0x68c6e666
jmp 0x14008a901
movsx ecx, byte [rbx]
mov rdx, rdx
call fcn.1400a9590
mov byte [rbx + rdi], al
inc rbx
jmp 0x14008a837
lea rdi, [rsp + 0x48]
xchg r11, r11
mov r15, qword [rsp + 0x48]
xchg r13, rbx
mov rbx, qword [rsp + 0x60]
jmp 0x14008a827
jmp 0x14008ab18
xchg r8, rcx
mov r12, rcx
xchg rcx, r8
jmp 0x14008a993
mov qword [rsp + 0x30], r8
mov dword [rsp - 0xc], ebp
xchg rbx, r8
mov qword [rsp + 0x40], rbx
xchg rbx, r8
mov ecx, 0x6906a7bf
xor ecx, 0x73c907a8
jmp 0x14008a5e8
mov rdi, r14
or rdi, 0xf
mov dword [rsp - 0xc], edi
movabs rax, 0x7fffffff009cf67d
add rax, 0x7851e9b7
jmp 0x14008aa41
xchg r15, rax
jmp 0x14008aaac
xchg rcx, rax
call fcn.1400dccdc
test rax, rax
jmp 0x14008aa07
lea rax, [rcx + 0x27]
xchg r13, r13
cmp rax, rcx
jbe 0x14008ad92
xchg rcx, rax
mov rax, rcx
jmp 0x14008a9de
je 0x14008ad9d
mov dword [rsp - 0x18], 0x3e025057
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
xchg r15, rax
mov qword [rbx - 8], r15
jmp 0x14008a9d7
xchg r12, r12
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jb 0x14008aa82
jmp 0x14008a9ed
sub rax, 0x77a35a
sub rax, 0x4b1202fc
sub rax, 0x10db7c43
add rax, 0x156c1c1f
jmp 0x14008aa5e
add rax, 0xa7c336
sub rax, 0x24e77885
add rax, 0x7fffffff
add rax, 0x7249db95
cmp rdi, rax
cmova rdi, rax
jmp 0x14008aa28
test rcx, rcx
je 0x14008aaaa
mov dword [rsp - 0x28], esp
jmp 0x14008aa94
call fcn.1400dccdc
xchg rsp, rax
mov rbx, rsp
xchg rsp, rax
jmp 0x14008aaa5
jmp 0x14008aaac
xor ebx, ebx
mov qword [rsp + 0x68], rbx
lea r8, [r14 + 1]
jmp 0x14008ab32
mov qword [rsp + 0x78], r14
lea rcx, [rsp + 0x48]
mov dword [rsp - 0x10], esp
cmp r13, 0x10
cmovae rcx, r15
xchg rcx, r8
jmp 0x14008aaf6
call fcn.1400dfad0
test eax, eax
mov dword [rsp - 0x1c], esi
jne 0x14008ab6c
mov cl, socket
xor cl, 5
add cl, 0x6b
jmp 0x14008ab21
mov rcx, qword [rsp + 0x58]
xchg rcx, r8
cmp r8, r14
mov dword [rsp - 0x28], esp
jne 0x14008ab6c
jmp 0x14008aad8
mov r15, r15
mov r15, qword [rsp + 0x48]
mov qword [rbp - 0x80], rdi
jmp 0x14008aaba
sub cl, 0x6f
add cl, 0x1a
xor cl, 9
sub cl, 0x1f
jmp 0x14008ab6e
mov dword [rsp - 0x38], ecx
xchg rcx, r12
mov rdx, rcx
xchg r12, rcx
xchg rcx, r13
mov r13, rbx
jmp 0x14008ab4a
xchg r13, rcx
call fcn.1400deed0
xchg rcx, rcx
lea rdx, [rsp + 0x68]
cmp rdi, 0x10
cmovae rdx, rbx
mov r13, qword [rsp + 0x60]
jmp 0x14008ab10
xor cl, cl
mov r14d, dword [rsp + 0x20]
lea eax, [r14 + 1]
mov dword [rsp - 0x20], edi
test cl, cl
cmove eax, r14d
jmp 0x14008ac90
mov rsi, rsi
xchg rsp, rbx
mov rax, rsp
jmp 0x14008abfa
mov dword [rsp - 0x38], 0x281d3b71
xchg r11, rbx
mov r11, qword [rsp + 0x38]
xchg rbx, r11
mov rcx, rbx
jmp 0x14008abe3
sub rax, rbx
sub rax, 8
cmp rax, 0x1f
mov rdx, rdx
ja 0x14008ad9d
jmp 0x14008abc8
xchg r10, rcx
mov r10, rbx
xchg rcx, r10
call fcn.1400dcd18
xchg r13, rcx
mov rcx, qword [rsp + 0x60]
jmp 0x14008ac75
mov r11, r11
call sub.KERNEL32.dll_Module32Next
test eax, eax
je 0x14008acf2
xor edi, edi
jmp 0x14008ac2b
xchg rbx, rsp
cmp rdx, 0x1000
jb 0x14008abc8
add rdx, 0x27
mov r14, r14
mov rbx, qword [rbx - 8]
jmp 0x14008abaf
xchg r15, r12
call fcn.1400dcd18
lea rdx, [rbp - 0x70]
jmp 0x14008ab94
mov dword [rsp - 0x1c], 0x578d930e
jmp 0x14008a695
mov dword [rsp - 0x38], ecx
jb 0x14008ac22
lea rdx, [r13 + 1]
xchg r15, rax
mov r15, rax
xchg r15, rax
jmp 0x14008accd
add rsi, 0x749e93d5
cmp rsi, qword [rsp + 0x28]
xchg rbp, rbp
jne 0x14008a731
mov r12, qword [rsp + 0x30]
cmp r13, 0x10
jmp 0x14008ac38
xchg rcx, r13
xchg r9, r15
mov r9, qword [rsp + 0x48]
xchg r9, r15
nop
sub rsi, 0x749e93b5
jmp 0x14008ac52
mov r14d, eax
mov dword [rsp + 0x20], eax
mov dword [rsp - 0x44], esp
cmp rdi, 0x10
jb 0x14008ac83
lea rdx, [rdi + 1]
jmp 0x14008ab86
sub rax, r15
sub rax, 8
cmp rax, 0x1f
xchg rsi, rsi
ja 0x14008ad89
xchg r15, r12
mov rcx, r12
jmp 0x14008ac1a
cmp rdx, 0x1000
mov r13, r13
jb 0x14008acc2
sub rdx, 0xffffffffffffffd9
mov r15, qword [r15 - 8]
mov dword [rsp - 0xc], 0x4c00142b
jmp 0x14008acae
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
mov r11, r11
xchg r8, rcx
mov r8, r12
xchg rcx, r8
jmp 0x14008ad75
nop
add rsp, 8
mov rbp, qword [rsp - 8]
ret
mov dword [rsp - 0x28], edi
xor rcx, rsp
call fcn.1400dce30
mov rbx, qword [rsp + 0x320]
add rsp, 0x2e0
mov dword [rsp - 0x40], ebx
nop
jmp 0x14008ad4f
pop rdi
xchg rsp, rsp
nop
mov rsi, qword [rsp]
add rsp, 8
jmp 0x14008ad0d
mov r15, qword [rsp]
add rsp, 8
pop r14
nop
mov r13, qword [rsp]
jmp 0x14008ad63
add rsp, 8
nop
mov r12, qword [rsp]
add rsp, 8
jmp 0x14008ad3d
call 0x14008f750
mov eax, r14d
mov rcx, qword [rbp + 0x1d0]
jmp 0x14008ad18
call fcn.1400e39cc
mov rdx, rdx
nop
call fcn.14000ded0
jmp 0x14008ad9c
int3
call fcn.1400e39cc
mov dword [rsp - 0x18], 0x655fd9c5
jmp 0x14008adaf
int3