Function at 0x180003fa0
Capabilities:
Enumerate process modules
Link many functions at runtime

Disassembly:
push rbx
sub rsp, 0x270
mov rax, qword [0x180012020]
xor rax, rsp
mov qword [rsp + 0x260], rax
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov edx, eax
mov ecx, 0x18
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
xor edx, edx
lea rcx, [rsp + 0x24]
mov r8d, 0x234
mov rbx, rax
call sub.VCRUNTIME140.dll_memset
lea rdx, [rsp + 0x20]
mov dword [rsp + 0x20], 0x238
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_Module32First]
test eax, eax
je 0x180004032
nop dword [rax]
mov r8d, 4
lea rdx, str.mono
lea rcx, [rsp + 0x50]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_strncmp]
mov rcx, rbx
test eax, eax
je 0x180004230
lea rdx, [rsp + 0x20]
call qword [sym.imp.KERNEL32.dll_Module32Next]
test eax, eax
jne 0x180004000
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
xor ebx, ebx
mov r8d, 0x40
lea rdx, str.D:NIISIcheatsCppHaxSDKCppHaxSDKmonomono_api.cpp
lea rcx, str.hMono___Mono_not_found_
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
lea rdx, str.mono_get_root_domain
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.mono_domain_assembly_open
mov rcx, rbx
mov qword [0x180012ad8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.mono_thread_attach
mov rcx, rbx
mov qword [0x180012ab0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.mono_domain_get
mov rcx, rbx
mov qword [0x180012b00], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.mono_assembly_get_image
mov rcx, rbx
mov qword [0x180012b10], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.mono_class_from_name
mov rcx, rbx
mov qword [0x180012af0], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.mono_class_get_methods
mov rcx, rbx
mov qword [0x180012b20], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.mono_class_get_field_from_name
mov rcx, rbx
mov qword [0x180012a98], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.mono_class_vtable
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.mono_object_get_class
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.mono_class_get_type
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.mono_class_get_property_from_name
mov rcx, rbx
mov qword [0x180012b18], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.mono_method_full_name
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.mono_compile_method
mov rcx, rbx
mov qword [0x180012af8], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.mono_jit_info_table_find
mov rcx, rbx
mov qword [0x180012b28], rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.mono_jit_info_get_method
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.mono_runtime_invoke
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.mono_object_unbox
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.mono_vtable_get_static_field_data
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.mono_string_new
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
lea rdx, str.mono_type_get_object
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x180012b08], rax
call qword [0x180012ad8]
mov rcx, rax
call qword [0x180012b00]
call qword [0x180012b10]
mov rcx, rax
call qword [0x180012b00]
call fcn.180004250
mov rcx, qword [rsp + 0x260]
xor rcx, rsp
call fcn.180005a60
add rsp, 0x270
pop rbx
ret
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rbx, qword [rsp + 0x48]
test rbx, rbx
jne 0x180004057
jmp 0x18000403d