Function at 0x14008a010
Capabilities:
Enumerate process modules

Disassembly:
xchg r12, rbx
mov qword [rsp + 8], r12
xchg r12, rbx
nop
jmp 0x14008a2bf
mov rdx, qword [rsp + 0x60]
xchg r13, rdx
mov r15, qword [rsp + 0x48]
xchg r14, r14
xchg rbx, rsi
jmp 0x14008a40e
mov dword [rsp - 0x40], esi
nop word [rax + rax]
mov qword [rbp - 0x80], 0x1a5b917
add qword [rbp - 0x80], 0x26ec0cf1
add qword [rbp - 0x80], 0x1aaa78de
sub qword [rbp - 0x80], 0x13110578
jmp 0x14008a374
xchg rdx, rdx
add rsi, rcx
lea rbx, [rsp + 0x48]
cmp r13, 0x10
cmovae rbx, r15
mov dword [rsp - 0x34], edx
jmp 0x14008a42a
xchg rdi, r12
movups xmm0, xmmword [rdi]
xchg rdi, r12
xchg rsp, r9
movups xmmword [r9 + 0x68], xmm0
xchg r9, rsp
jmp 0x14008a27d
xchg r8, rsi
mov qword [rsp + 0x30], rsi
xchg rsi, r8
xchg rbx, r8
mov qword [rsp + 0x40], rbx
xchg rbx, r8
mov ecx, 0x3c3ff7d9
jmp 0x14008a34b
nop
sub rsp, 8
mov qword [rsp], r15
lea rbp, [rsp - 0x1e0]
add rsp, 0xfffffffffffffd20
mov dword [rsp - 0x10], ebp
jmp 0x14008a185
add qword [rsp + 0x60], 0x2834080c
sub qword [rsp + 0x60], 0x3333170
xor qword [rsp + 0x60], 0x78cfcac4
sub qword [rsp + 0x60], 0x2af894b9
jmp 0x14008a2ab
add r8, 0x3a581471
sub r8, 0x30900b4e
sub r8, 0xf48e741
add r8, 0x7fffffff
jmp 0x14008a2eb
mov dword [rsp - 0x1c], 0x5da51c8e
mov dword [rsp + 0x20], edi
lea rdx, [rbp - 0x70]
xchg rbx, r15
mov rcx, r15
xchg rbx, r15
jmp 0x14008a3f0
lea rdx, [rsp + 0x68]
xchg rbp, rbx
mov rbp, qword [rsp + 0x68]
xchg rbp, rbx
jmp 0x14008a15b
jmp 0x14008a622
xchg r12, rdi
xchg rdx, rdi
mov qword [rsp + 0x58], rdx
xchg rdi, rdx
mov qword [rsp + 0x60], 0x29af791e
add qword [rsp + 0x60], 0x3870e52
jmp 0x14008a0de
mov rax, qword [0x140248220]
xor rax, rsp
mov qword [rbp + 0x1d0], rax
mov rbx, rbx
mov r12, r8
jmp 0x14008a09d
lea rcx, [rsp + 0x48]
cmovae rcx, r15
mov rsi, qword [rsp + 0x58]
jmp 0x14008a068
add dword [rbp - 0x70], 0x175dea63
xor dword [rbp - 0x70], 0x1f3d7b2f
sub dword [rbp - 0x70], 0x594d353a
xor edi, edi
mov r14d, edi
jmp 0x14008a128
lea rcx, [rbp - 0x6c]
call fcn.1400df070
mov dword [rbp - 0x70], 0x6741cd25
xor dword [rbp - 0x70], 0x3376ca7b
sub dword [rbp - 0x70], 0x2524a564
jmp 0x14008a1b4
sub rsp, 8
mov qword [rsp], r12
push r13
nop
mov qword [rsp - 8], r14
sub rsp, 8
jmp 0x14008a0bd
jb 0x14008a21b
xchg rsp, rsp
mov r12, qword [rsi]
cmp r14, 0x10
jae 0x14008a46d
mov dword [rsp - 0x18], edx
jmp 0x14008a084
sub r8d, 0x24c105aa
xor r8d, 0x72f337e5
sub r8d, 0x1e5abb50
add r8d, 0x52b8f168
xor r8d, 0x789612a4
xor r8d, 0xfb59cc7
jmp 0x14008a1d3
mov r15, qword [rsp + 0x48]
xchg r10, r13
mov r10, qword [rsp + 0x60]
xchg r10, r13
cmp r13, 0x10
cmovae rdi, r15
mov r15, r15
jmp 0x14008a1a1
mov edi, 0x1cebd183
add edi, 0x5cb7f1e8
xor edi, 0x5ae8e4a3
add edi, 0x22f83a91
sub edi, 0x2af0caf4
add edi, 0x4e294173
xor edi, 0x697bd8d7
jmp 0x14008a146
mov byte [rsp + 0x48], socket
xor byte [rsp + 0x48], 0x21
sub byte [rsp + 0x48], 0x25
jmp 0x14008a3be
push r14
mov qword [rsp], rbp
nop
sub rsp, 8
mov qword [rsp], rsi
nop
jmp 0x14008a41c
inc rbx
mov rcx, rcx
cmp rbx, rsi
jne 0x14008a43e
xchg r13, rdx
jmp 0x14008a021
add r8, 0x5f539fca
nop word [rax + rax]
mov dword [rsp - 0xc], 0x636ee6e
inc r8
cmp byte [rax + r8], 0
jne 0x14008a303
jmp 0x14008a44e
call sub.KERNEL32.dll_CreateToolhelp32Snapshot
mov rbx, rax
mov dword [rsp - 0x44], 0x772cd796
jmp 0x14008a32b
mov qword [rsp + 0x38], rax
xor edx, edx
mov r8d, 0x665d62f0
xor r8d, 0x3b786ad5
xor r8d, 0x9d26fa1
jmp 0x14008a22e
add ecx, 0x38d30de5
sub ecx, 0x1b8f1163
sub ecx, 0x7ec8d67
xor ecx, 0x71446382
add ecx, 0x1caa52a8
sub ecx, 0x3d7d5816
jmp 0x14008a316
xor qword [rbp - 0x80], 0x66fda748
sub qword [rbp - 0x80], 0x56d69e26
mov r14, qword [rsi + 0x10]
mov dword [rsp - 0x10], edx
mov r12, rsi
cmp qword [rsi + 0x18], 0x10
jmp 0x14008a20f
xor byte [rsp + 0x48], 2
sub byte [rsp + 0x48], 0x10
lea rax, [rbp - 0x40]
nop
movabs r8, 0xffffffff2319cc2b
add r8, 0x3137229
jmp 0x14008a107
xor byte [rsp + 0x48], 0x7a
xor byte [rsp + 0x48], 0x48
sub byte [rsp + 0x48], 0xe
jmp 0x14008a399
mov r15, qword [r12 + 8]
xchg r15, rax
xchg r10, rax
mov qword [rsp + 0x28], r10
xchg r10, rax
cmp rsi, rax
je 0x14008a699
jmp 0x14008a039
call sub.KERNEL32.dll_Module32First
test eax, eax
je 0x14008a7e6
mov dword [rsp - 0x38], edx
xchg r12, rdi
mov qword [rsp + 0x48], r12
jmp 0x14008a160
mov rbx, qword [r12]
xchg rsi, rbx
xchg r15, rax
jmp 0x14008a3d2
sub rsp, 8
mov qword [rsp], rdi
nop
jmp 0x14008a1f6
cmp rbx, rsi
je 0x14008a031
sub rdi, rbx
mov dword [rsp - 0x14], 0x12292240
movsx ecx, byte [rbx]
call fcn.1400a9060
mov byte [rbx + rdi], al
jmp 0x14008a2d4
mov rdx, rdx
lea rdx, [rbp - 0x40]
lea rcx, [rsp + 0x48]
call fcn.140018350
mov rdx, rdx
nop
lea rdi, [rsp + 0x48]
jmp 0x14008a25d
xchg r14, r12
mov rdi, r12
xchg r12, r14
or rdi, 0xf
jmp 0x14008a47f
movabs rax, 0x7fffffff2eeba7ea
sub rax, 0x1728fa30
add rax, 0x5d7d11fb
sub rax, 0x4012d9e4
sub rax, 0x1a6fecc9
jmp 0x14008a4a6
add rax, 0x7fffffff
add rax, 0x654306f8
cmp rdi, rax
jmp 0x14008a517
mov qword [rbx - 8], rax
jmp 0x14008a55c
jb 0x14008a533
mov dword [rsp - 0x24], 0x293d27a8
lea rax, [rcx + 0x27]
cmp rax, rcx
jmp 0x14008a4dd
jbe 0x14008a8b0
xchg rcx, rbp
mov rbp, rax
xchg rcx, rbp
jmp 0x14008a4f1
call fcn.1400dc7cc
mov r12, r12
test rax, rax
je 0x14008a8b6
lea rbx, [rax + 0x27]
mov dword [rsp - 0x24], 0x4dba44
and rbx, 0xffffffffffffffe0
jmp 0x14008a4ba
cmova rdi, rax
mov dword [rsp - 0x18], 0x12903c4e
lea rcx, [rdi + 1]
cmp rcx, 0x1000
jmp 0x14008a4c3
test rcx, rcx
je 0x14008a55a
mov dword [rsp - 0x2c], 0x717fd15f
call fcn.1400dc7cc
xchg rsi, rax
mov rbx, rsi
xchg rsi, rax
jmp 0x14008a555
jmp 0x14008a55c
xor ebx, ebx
xchg rbx, rcx
mov qword [rsp + 0x68], rcx
xchg rbx, rcx
lea r8, [r14 + 1]
xchg rbp, r12
jmp 0x14008a59e
xchg r10, rdi
xchg r14, r13
mov qword [rsp + 0x78], r13
xchg r13, r14
lea rcx, [rsp + 0x48]
jmp 0x14008a5d6
cmp rdi, 0x10
xchg rbp, rbp
cmovae rdx, rbx
xchg r13, rsi
jmp 0x14008a5f7
mov rdx, rbp
xchg rbp, r12
xchg rbx, rcx
mov rbx, rcx
xchg rcx, rbx
call fcn.1400de9c0
lea rdx, [rsp + 0x68]
jmp 0x14008a58b
call fcn.1400df5c0
mov dword [rsp - 0x38], 0x1de291e5
test eax, eax
jne 0x14008a62e
jmp 0x14008a609
mov rsp, rsp
cmp r13, 0x10
cmovae rcx, r15
mov r8, qword [rsp + 0x58]
mov r8, r8
cmp r8, r14
jne 0x14008a62e
jmp 0x14008a5bc
mov rsi, qword [rsp + 0x60]
xchg rsi, r13
mov r15, qword [rsp + 0x48]
jmp 0x14008a61f
mov cl, 1
add cl, 0x46
sub cl, 1
add cl, 0x30
xor cl, 0x71
xor cl, 6
jmp 0x14008a630
xchg r8, r8
xchg rdi, r10
mov qword [rbp - 0x80], r10
jmp 0x14008a573
xor cl, cl
mov r14d, dword [rsp + 0x20]
mov dword [rsp - 0x28], 0xe6fcead
jmp 0x14008a7cc
sub rdx, 0x4f5dafbe
add rdx, 0x4f5dafe5
mov rbx, qword [rbx - 8]
mov dword [rsp - 0x30], ebx
sub rax, rbx
jmp 0x14008a777
xor edi, edi
jmp 0x14008a401
xchg r15, rcx
mov rax, rcx
xchg r15, rcx
cmp rdx, 0x1000
mov dword [rsp - 0x20], esi
jmp 0x14008a764
neg rax
cmp rax, 0x1f
mov dword [rsp - 0x28], esp
ja 0x14008a8a2
jmp 0x14008a6c5
xchg r12, r8
cmp r13, 0x10
jb 0x14008a6d0
lea rdx, [r13 + 1]
mov dword [rsp - 0x44], esp
jmp 0x14008a667
call fcn.1400dc808
xchg r11, r13
mov r11, qword [rsp + 0x60]
xchg r13, r11
jmp 0x14008a7a4
mov rcx, r15
call fcn.1400dc808
mov rbx, rbx
lea rdx, [rbp - 0x70]
mov rbx, qword [rsp + 0x38]
jmp 0x14008a746
cmp rdx, 0x1000
jb 0x14008a796
mov dword [rsp - 0x18], edx
nop
jmp 0x14008a642
cmp rsi, qword [rsp + 0x28]
mov dword [rsp - 0x3c], 0x2369c5ac
jne 0x14008a043
xchg r8, r12
mov r8, qword [rsp + 0x30]
jmp 0x14008a696
sub rdx, 0x6c14ead6
mov r15, qword [r15 - 8]
sub rax, r15
jmp 0x14008a7bd
cmp rdi, 0x10
jb 0x14008a7a9
mov dword [rsp - 0xc], ecx
lea rdx, [rdi + 1]
xchg r8, rax
mov r8, rbx
xchg r8, rax
jmp 0x14008a6de
xchg rcx, rsi
mov rsi, rbx
xchg rsi, rcx
call sub.KERNEL32.dll_Module32Next
test eax, eax
xchg r12, r12
je 0x14008a7e6
jmp 0x14008a660
jb 0x14008a6c5
nop
add rdx, 0x6c14eafd
jmp 0x14008a715
nop
add rax, 0xffffffff98bf21ee
sub rax, 0xffffffff98bf21f6
cmp rax, 0x1f
xchg r10, r10
ja 0x14008a8b6
jmp 0x14008a796
xchg r11, rbx
mov rcx, r11
xchg r11, rbx
jmp 0x14008a6b0
mov r15, qword [rsp + 0x48]
nop
sub rsi, 0x2fa98e16
add rsi, 0x2fa98e36
jmp 0x14008a6f5
mov r14, r14
neg rax
add rax, 8
jmp 0x14008a680
lea eax, [r14 + 1]
test cl, cl
cmove eax, r14d
mov dword [rsp - 0x18], esp
mov r14d, eax
mov dword [rsp + 0x20], eax
jmp 0x14008a728
xchg rbx, r11
mov rcx, r11
xchg r11, rbx
jmp 0x14008a848
nop
mov r15, qword [rsp]
add rsp, 8
jmp 0x14008a893
mov rcx, rbx
xchg r12, rbx
call 0x14008f300
jmp 0x14008a85a
nop
mov r13, qword [rsp]
add rsp, 8
pop r12
mov dword [rsp - 0x30], 0x412687e0
jmp 0x14008a883
mov rbp, qword [rsp + 0x320]
xchg rbp, rbx
sub rsp, 0x18784ec7
add rsp, 0x187851a7
jmp 0x14008a7f4
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
xchg rcx, rcx
xchg rbx, r12
jmp 0x14008a802
mov eax, r14d
mov dword [rsp - 0x10], ecx
mov rcx, qword [rbp + 0x1d0]
xor rcx, rsp
call fcn.1400dc920
xchg rbx, rbp
jmp 0x14008a82a
nop
add rsp, 8
mov rbp, qword [rsp - 8]
ret
nop
add rsp, 8
mov rdi, qword [rsp - 8]
pop rsi
jmp 0x14008a878
nop
add rsp, 8
mov r14, qword [rsp - 8]
jmp 0x14008a812
call fcn.1400e34bc
nop
mov dword [rsp - 0x3c], 0x67e3fc27
call fcn.14000dd30
int3
call fcn.1400e34bc
mov dword [rsp - 0x38], edx
jmp 0x14008a8c4
int3