Function at 0x14008c4f0
Capabilities:
Enumerate process modules

Disassembly:
xchg rbx, rcx
mov qword [rsp + 8], rcx
xchg rbx, rcx
nop
jmp 0x14008c68b
add ecx, 0x7c2fe141
xor ecx, 0x194c37c0
sub ecx, 0xc284473
sub ecx, 0x40ffc6eb
jmp 0x14008c7f8
mov r13, qword [rsp + 0x60]
mov r15, qword [rsp + 0x48]
mov dword [rsp - 0x14], 0x270e36e2
xchg rbp, rsi
jmp 0x14008c94d
je 0x14008ccd9
mov qword [rsp + 0x48], rdi
mov dword [rsp - 0x2c], esi
xchg r11, rdi
mov qword [rsp + 0x58], r11
xchg r11, rdi
jmp 0x14008c8b9
movabs r8, 0xffffffff1b67828a
add r8, 0x3533f44
sub r8, 0xb58f675
add r8, 0x5db1366e
sub r8, 0x4b2059cc
jmp 0x14008c7ca
xchg rdx, r15
mov rdx, qword [rsp + 0x48]
xchg r15, rdx
mov r13, qword [rsp + 0x60]
jmp 0x14008c911
add rsi, rcx
xchg r13, r13
lea rbx, [rsp + 0x48]
cmp r13, 0x10
cmovae rbx, r15
jmp 0x14008c5af
mov r14, r14
cmp rbx, rsi
je 0x14008c530
sub rdi, rbx
movsx ecx, byte [rbx]
mov dword [rsp - 0x38], ebx
jmp 0x14008c603
movups xmm0, xmmword [rbp]
xchg r12, rbp
xchg rsp, r9
movups xmmword [r9 + 0x68], xmm0
xchg rsp, r9
mov edi, 0x37a62e50
jmp 0x14008c5e6
xor edi, 0x737a62bf
xor edi, 0x37039221
sub edi, 0x261a0f39
xor edi, 0x754a8842
jmp 0x14008c926
call fcn.1400b68f0
mov byte [rbx + rdi], al
inc rbx
mov dword [rsp - 0x2c], 0x463e27ac
cmp rbx, rsi
jne 0x14008c5be
jmp 0x14008c51e
xchg rbx, rbx
xor edx, edx
mov r8d, 0x6f9ffbba
xor r8d, 0x6a1c8535
jmp 0x14008c705
mov dword [rsp - 0x3c], ecx
je 0x14008cb89
nop word [rax + rax]
jmp 0x14008c86c
mov rax, qword [0x1402567f0]
xor rax, rsp
mov qword [rbp + 0x1d0], rax
mov dword [rsp - 0x20], esp
jmp 0x14008c767
mov r14, qword [rsi + 0x10]
xchg r15, r12
mov r15, rsi
xchg r15, r12
cmp qword [rsi + 0x18], 0x10
jb 0x14008c783
mov dword [rsp - 0x1c], ecx
jmp 0x14008c780
sub rsp, 8
mov qword [rsp], rbp
push rsi
mov dword [rsp - 0x30], 0x649b3d43
nop
sub rsp, 8
mov qword [rsp], rdi
jmp 0x14008c8a1
sub qword [rsp + 0x60], 0x13bdfb0d
sub qword [rsp + 0x60], 0xd23907b
sub qword [rsp + 0x60], 0x35cfe530
jmp 0x14008c83f
sub r8d, 0x274d725c
lea rcx, [rbp - 0x6c]
mov dword [rsp - 0x18], ebp
call fcn.1400ec6c0
jmp 0x14008c960
jne 0x14008c7e8
lea rdx, [rbp - 0x40]
lea rcx, [rsp + 0x48]
xchg r11, r11
call fcn.140019700
nop
lea rdi, [rsp + 0x48]
jmp 0x14008c582
add r8d, 0x1efaad99
sub r8d, 0x22454679
add r8d, 0x4fb9e7dc
add r8d, 0x203e504c
sub r8d, 0x5191abf5
add r8d, 0x6ae02ae
jmp 0x14008c6ca
xchg r8, rbp
mov qword [rsp + 0x40], rbp
xchg rbp, r8
mov ecx, 0x6887496a
xor ecx, 0x69283af4
jmp 0x14008c501
cmovae rcx, r15
mov dword [rsp - 0x1c], ebx
xchg r11, rsi
mov r11, qword [rsp + 0x58]
xchg rsi, r11
jmp 0x14008c597
xchg rbx, r8
mov r12, rbx
xchg r8, rbx
xchg rdx, r8
mov qword [rsp + 0x30], rdx
xchg r8, rdx
jmp 0x14008c734
mov r12, qword [rsi]
cmp r14, 0x10
jae 0x14008c991
xchg rbp, r12
jmp 0x14008c5ca
nop
mov qword [rsp - 8], r14
sub rsp, 8
nop
mov qword [rsp - 8], r15
sub rsp, 8
jmp 0x14008c7ae
lea rbp, [rsp - 0x1e0]
mov dword [rsp - 0x24], 0xbafbb18
sub rsp, 0x2e0
jmp 0x14008c650
add r8, 0x205d4290
add r8, 0x7fffffff
add r8, 0x39b01575
nop word [rax + rax]
inc r8
xchg r8, r8
cmp byte [rax + r8], 0
jmp 0x14008c6e3
add ecx, 0x281a12da
sub ecx, 0x3f856a93
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov rbx, rax
mov qword [rsp + 0x38], rax
jmp 0x14008c624
mov dword [rsp - 0x28], 0x40c01674
jmp 0x14008cb4b
add byte [rsp + 0x48], 0x5c
xor byte [rsp + 0x48], 0x38
sub byte [rsp + 0x48], 0x4e
lea rax, [rbp - 0x40]
xchg r13, r13
nop
jmp 0x14008c557
mov byte [rsp + 0x48], 0x3d
add byte [rsp + 0x48], 0x2a
sub byte [rsp + 0x48], 0x34
add byte [rsp + 0x48], 0xa
sub byte [rsp + 0x48], 0x23
jmp 0x14008c823
mov qword [rsp + 0x28], r9
xchg r9, rax
cmp rsi, rax
jmp 0x14008c63b
mov qword [rbp - 0x80], 0x63b5f2a4
add qword [rbp - 0x80], 0x175645d8
xor qword [rbp - 0x80], 0x72684d79
add qword [rbp - 0x80], 0x519b4a9c
add qword [rbp - 0x80], 0x2ade6a0
sub qword [rbp - 0x80], 0x5dada641
jmp 0x14008c66a
nop
mov qword [rsp - 8], r12
sub rsp, 8
nop
sub rsp, 8
mov qword [rsp], r13
jmp 0x14008c795
mov qword [rsp + 0x60], 0x7ba66f30
sub qword [rsp + 0x60], 0x3226a0a4
xor qword [rsp + 0x60], 0x3c9910cf
xor qword [rsp + 0x60], 0x2357ae84
jmp 0x14008c6aa
lea rdx, [rbp - 0x70]
mov rcx, rbx
mov dword [rsp - 0x3c], 0x7b2eae44
call sub.KERNEL32.dll_Module32First
test eax, eax
jmp 0x14008c538
mov r14d, edi
mov dword [rsp - 0x38], 0x32c8fd3a
mov dword [rsp + 0x20], edi
jmp 0x14008c8e2
xchg rdx, rdx
cmp r13, 0x10
cmovae rdi, r15
lea rcx, [rsp + 0x48]
jmp 0x14008c74f
xor edi, 0x42c92a46
xor edi, 0x76cbb2b6
add edi, 0x693dd9a1
sub edi, 0x75cbb8b9
lea rdx, [rsp + 0x68]
mov rbx, qword [rsp + 0x68]
jmp 0x14008c816
mov rbp, qword [r12]
xchg rbp, rsi
mov rax, qword [r12 + 8]
xchg r9, rax
jmp 0x14008c85d
mov dword [rbp - 0x70], 0x1347095d
xor dword [rbp - 0x70], 0x2475e5a0
add dword [rbp - 0x70], 0x22e56cec
sub dword [rbp - 0x70], 0x28e69ddd
sub dword [rbp - 0x70], 0x2112cf47
sub dword [rbp - 0x70], 0x101eea8d
xor edi, edi
jmp 0x14008c8fd
xchg r14, rbx
mov rdi, rbx
xchg rbx, r14
or rdi, 0xf
mov dword [rsp - 0x10], esi
movabs rax, 0x7fffffff1d799ad4
jmp 0x14008ca08
xchg r11, rax
call fcn.1400e9e14
test rax, rax
xchg rdx, rdx
jmp 0x14008ca4f
xor rax, 0x220bbd94
cmp rdi, rax
mov dword [rsp - 0x1c], ecx
cmova rdi, rax
lea rcx, [rdi + 1]
cmp rcx, 0x1000
mov dword [rsp - 0x30], ecx
jmp 0x14008c9e8
jb 0x14008ca66
lea rax, [rcx + 0x27]
cmp rax, rcx
xchg rsi, rsi
jbe 0x14008cd88
xchg r11, rax
mov rcx, r11
jmp 0x14008c9b1
xor rax, 0xf9091ad
add rax, 0x543359d9
sub rax, 0x48d1ea3f
add rax, 0x5cec1c1d
sub rax, 0x22be426e
jmp 0x14008ca38
xchg r15, rax
mov qword [rbx - 8], r15
xchg r15, rax
jmp 0x14008ca85
xor rax, 0x1cdff45a
add rax, 0x194ca1d4
add rax, 0x7fffffff
jmp 0x14008c9c3
je 0x14008cd96
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov dword [rsp - 0x3c], edi
jmp 0x14008ca2b
test rcx, rcx
mov rsi, rsi
je 0x14008ca83
call fcn.1400e9e14
mov rbx, rax
mov dword [rsp - 0x40], ecx
jmp 0x14008ca85
xor ebx, ebx
xchg rbx, rdi
mov qword [rsp + 0x68], rdi
jmp 0x14008ca9d
add cl, 0x10
xor cl, 0x35
jmp 0x14008cb55
xchg rdi, rbx
lea r8, [r14 + 1]
xchg r10, r10
mov rdx, r12
mov rcx, rbx
jmp 0x14008cab2
call fcn.1400ec010
lea rdx, [rsp + 0x68]
mov rbp, rbp
cmp rdi, 0x10
jmp 0x14008cb34
mov qword [rbp - 0x80], rsp
xchg rsp, rdi
mov qword [rsp + 0x78], r14
jmp 0x14008cad9
mov r8, r8
lea rcx, [rsp + 0x48]
cmp r13, 0x10
cmovae rcx, r15
jmp 0x14008caee
mov dword [rsp - 0x18], 0x78fb671a
mov r8, qword [rsp + 0x58]
cmp r8, r14
jne 0x14008cb53
xchg r8, r8
call fcn.1400ecc10
test eax, eax
jmp 0x14008cb24
sub cl, 4
add cl, 0x21
sub cl, 0x5a
add cl, 0x1d
jmp 0x14008ca92
jne 0x14008cb53
xchg r15, r15
mov cl, 0x44
jmp 0x14008cb13
cmovae rdx, rbx
xchg r10, r13
mov r10, qword [rsp + 0x60]
xchg r13, r10
mov r15, qword [rsp + 0x48]
xchg r13, r13
xchg rdi, rsp
jmp 0x14008cac8
xor cl, cl
mov r14d, dword [rsp + 0x20]
lea eax, [r14 + 1]
mov dword [rsp - 0x18], esp
jmp 0x14008cc8e
neg rsi
cmp rsi, qword [rsp + 0x28]
mov dword [rsp - 0x10], ecx
jne 0x14008c86c
xchg r13, r12
mov r13, qword [rsp + 0x30]
jmp 0x14008cb86
xchg r12, r13
cmp r13, 0x10
jb 0x14008ccc5
jmp 0x14008cc1f
xchg rbx, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008cd7e
jmp 0x14008ccba
add rdx, 0x4d7e1cbd
mov r15, qword [r15 - 8]
sub rax, r15
jmp 0x14008cb98
xor edi, edi
jmp 0x14008c53e
xchg rdx, rax
cmp rdx, 0x1000
jb 0x14008cc05
nop
add rdx, 0x42f6e889
sub rdx, 0x42f6e862
jmp 0x14008cc3a
xchg r13, r15
mov r13, qword [rsp + 0x48]
xchg r13, r15
neg rsi
add rsi, 0xffffffffffffffe0
jmp 0x14008cb67
mov r11, r11
mov rcx, rbx
call fcn.1400e9e50
mov r13, qword [rsp + 0x60]
mov dword [rsp - 0x28], 0x167ca30
jmp 0x14008cbeb
mov dword [rsp - 0x28], ecx
lea rdx, [r13 + 1]
xchg rsi, rax
mov rsi, r15
xchg rsi, rax
cmp rdx, 0x1000
jmp 0x14008cc58
mov rbx, qword [rbx - 8]
mov dword [rsp - 0x3c], ecx
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14008cd96
jmp 0x14008cc02
jb 0x14008ccba
nop
sub rdx, 0x4d7e1c96
jmp 0x14008cbae
call sub.KERNEL32.dll_Module32Next
test eax, eax
je 0x14008ccd9
mov r12, r12
jmp 0x14008cbc1
lea rdx, [rdi + 1]
xchg rdx, rax
mov rdx, rbx
jmp 0x14008cbc8
test cl, cl
cmove eax, r14d
mov r14d, eax
mov dword [rsp - 0x18], 0x45efb95a
mov dword [rsp + 0x20], eax
jmp 0x14008cca8
cmp rdi, 0x10
jb 0x14008cbf6
xchg rdi, rdi
jmp 0x14008cc80
mov rcx, r15
mov r10, r10
call fcn.1400e9e50
lea rdx, [rbp - 0x70]
mov rbx, qword [rsp + 0x38]
mov rcx, rbx
xchg r10, r10
jmp 0x14008cc6b
xchg rcx, rbx
mov rbx, rcx
xchg rbx, rcx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
jmp 0x14008cd03
mov rbp, qword [rsp]
add rsp, 8
ret
pop r12
nop
add rsp, 8
jmp 0x14008cd26
mov rdx, rdx
xchg r9, rcx
mov r9, r12
xchg rcx, r9
call fcn.140091820
jmp 0x14008cd32
pop r14
pop r13
mov dword [rsp - 0x24], ebp
jmp 0x14008ccf7
mov rdi, qword [rsp - 8]
pop rsi
nop
jmp 0x14008ccee
mov rdx, rdx
mov eax, r14d
xchg rbx, rcx
mov rbx, qword [rbp + 0x1d0]
xchg rbx, rcx
xor rcx, rsp
call fcn.1400e9f70
jmp 0x14008cd52
mov dword [rsp - 0x28], 0x7a705f3a
mov rbx, qword [rsp + 0x320]
add rsp, 0x78269db6
sub rsp, 0x78269ad6
nop
mov r15, qword [rsp]
add rsp, 8
jmp 0x14008cd19
call fcn.1400f0b0c
mov dword [rsp - 0x1c], esp
nop
call fcn.14000e740
int3
call fcn.1400f0b0c
int3