Function at 0x492640
Capabilities:
Load windows common language runtime

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4da7e0
push eax
mov dword fs:[0], esp
sub esp, 0x24
push ebx
push esi
mov esi, ecx
cmp dword [esi + 0x1e4], 8
lea ebx, [esi + 0x1d0]
push edi
jb 0x492673
mov edi, dword [ebx]
jmp 0x492675
mov edi, ebx
push 1
call fcn.00492ee0
mov eax, 0x9f
mov ecx, esi
mov word [ebp - 0x1c], ax
push dword [ebp - 0x1c]
call fcn.00492e30
push edi
push ecx
push str.Secure.Net.Host.Runtime.HostRuntime:_Loading_.net_Framework
mov ecx, esi
call fcn.00492d70
add esp, 4
mov ecx, eax
call fcn.00492d70
mov ecx, eax
call fcn.00492f90
mov dword [ebp - 0x18], 0
lea eax, [ebp - 0x18]
mov dword [ebp - 4], 0
push eax
push 0x55bd8c
push 0x55bd9c
call dword [sym.imp.mscoree.dll_CLRCreateInstance]
mov edi, eax
test edi, edi
je 0x492768
mov dword [ebp - 0x2c], vtable._com_error.0
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
push 3
mov ecx, esi
mov byte [ebp - 4], 1
call fcn.00492ee0
mov eax, 0xce
mov ecx, esi
mov word [ebp + 8], ax
push dword [ebp + 8]
call fcn.00492e30
lea ecx, [ebp - 0x2c]
call fcn.004924b0
push eax
push ecx
push str.Secure.Net.Host.Runtime.HostRuntime:_Creating_Instance_of_CLR_Meta_Host_failed.
mov ecx, esi
call fcn.00492d70
add esp, 4
mov ecx, eax
call fcn.00492d70
mov ecx, eax
call fcn.00492f90
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2c], vtable._com_error.0
test ecx, ecx
je 0x492751
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x492963
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
jmp 0x492963
mov dword [ebp - 0x14], 0
mov byte [ebp - 4], 2
cmp dword [ebx + 0x14], 8
jb 0x49277b
mov ebx, dword [ebx]
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x14]
push edx
push 0x55be54
push ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 0xc]
mov edi, eax
test edi, edi
je 0x4927e0
mov dword [ebp - 0x2c], vtable._com_error.0
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
push 3
mov ecx, esi
mov byte [ebp - 4], 3
call fcn.00492ee0
mov eax, 0xce
mov ecx, esi
mov word [ebp + 8], ax
push dword [ebp + 8]
call fcn.00492e30
lea ecx, [ebp - 0x2c]
call fcn.004924b0
push eax
push ecx
push str.Secure.Net.Host.Runtime.HostRuntime:_Creating_Instance_of_CLR_Runtime_Info_failed.
jmp 0x4928e1
mov edx, dword [ebp + 8]
cmp dword [edx + 0x10], 0
jbe 0x492876
cmp dword [edx + 0x14], 8
jb 0x4927f5
mov edx, dword [edx]
mov eax, dword [ebp - 0x14]
push edx
push 0x110
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov edi, eax
test edi, edi
je 0x492876
mov dword [ebp - 0x2c], vtable._com_error.0
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
push 3
mov ecx, esi
mov byte [ebp - 4], 4
call fcn.00492ee0
mov eax, 0xce
mov ecx, esi
mov word [ebp + 8], ax
push dword [ebp + 8]
call fcn.00492e30
lea ecx, [ebp - 0x2c]
call fcn.004924b0
push eax
push ecx
push str.Secure.Net.Host.Runtime.HostRuntime:_Setting_Startup_Flags_failed.
mov ecx, esi
call fcn.00492d70
add esp, 4
mov ecx, eax
call fcn.00492d70
mov ecx, eax
call fcn.00492f90
lea ecx, [ebp - 0x2c]
call fcn.00492610
jmp 0x492952
mov eax, dword [ebp - 0x14]
lea ecx, [esi + 0x1c8]
push ecx
push 0x55bf98
push 0x55bfa8
mov edx, dword [eax]
push eax
call dword [edx + 0x24]
mov edi, eax
test edi, edi
je 0x492921
mov dword [ebp - 0x2c], vtable._com_error.0
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
push 3
mov ecx, esi
mov byte [ebp - 4], 5
call fcn.00492ee0
mov eax, 0xce
mov ecx, esi
mov word [ebp + 8], ax
push dword [ebp + 8]
call fcn.00492e30
lea ecx, [ebp - 0x2c]
call fcn.004924b0
push eax
push ecx
push str.Secure.Net.Host.Runtime.HostRuntime:_Creating_Instance_of_CLR_Runtime_Host_failed.
mov ecx, esi
call fcn.00492d70
add esp, 4
mov ecx, eax
call fcn.00492d70
mov ecx, eax
call fcn.00492f90
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2c], vtable._com_error.0
test ecx, ecx
je 0x492911
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x492952
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
jmp 0x492952
push 1
mov ecx, esi
call fcn.00492ee0
mov eax, 0x9f
mov ecx, esi
mov word [ebp + 8], ax
push dword [ebp + 8]
call fcn.00492e30
push str.Secure.Net.Host.Runtime.HostRuntime:_.net_Framework_successfully_loaded
mov ecx, esi
call fcn.00492d70
mov ecx, eax
call fcn.00492f90
xor edi, edi
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x492963
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x18]
test ecx, ecx
je 0x492977
mov edx, dword [ecx]
push ecx
call dword [edx + 8]
mov ecx, dword [ebp - 0xc]
mov eax, edi
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 4