Function at 0x41a9a0
Capabilities:
Load windows common language runtime

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x45e28b
mov eax, dword fs:[0]
push eax
sub esp, 0x22c
mov eax, dword [0x4786a0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [0x478034]
mov edx, dword [eax + 0xc]
mov ebx, ecx
xor edi, edi
mov ecx, 0x478034
xor esi, esi
mov dword [ebp - 0x224], edi
call edx
add eax, 0x10
mov dword [ebp - 0x214], eax
mov dword [ebp - 4], edi
mov dword [ebp - 0x21c], edi
mov dword [ebp - 0x218], edi
cmp dword [0x47b6c8], edi
jne 0x41acdf
mov eax, dword [ebx + 0x134]
cmp dword [eax - 0xc], edi
jne 0x41aa29
lea eax, [ebx + 0x130]
lea edi, [ebx + 0x134]
call fcn.0041db20
lea eax, [ebx + 0x134]
lea edi, [ebp - 0x214]
call fcn.0041db20
lea ecx, [ebp - 0x230]
push ecx
lea edx, [ebp - 0x220]
push edx
lea eax, [ebp - 0x22c]
push eax
mov eax, dword [ebp - 0x214]
lea ecx, [ebp - 0x228]
push ecx
push ecx
add eax, 0xfffffff0
mov dword [ebp - 0x228], 0
mov dword [ebp - 0x22c], esp
mov esi, esp
call fcn.004218e0
add eax, 0x10
mov dword [esi], eax
call fcn.0041b5b0
lea edi, [ebp - 0x224]
call fcn.004376c0
mov esi, eax
test esi, esi
jns 0x41aa9d
push esi
push str.Failed_to_load_mscoree.dll__HRESULT__0x_x_.
jmp 0x41ac94
mov edx, dword [ebp - 0x224]
push str.CLRCreateInstance
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
jne 0x41aadd
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x41aac7
and eax, 0xffff
or eax, 0x80070000
mov esi, eax
test esi, esi
js 0x41aad2
mov esi, 0x80004005
push esi
push str.Failed_to_get_procedure_address_for_CLRCreateInstance__HRESULT__0x_x_.
jmp 0x41ac94
lea ecx, [ebp - 0x21c]
push ecx
push 0x46ce6c
push 0x46ce7c
call eax
mov esi, eax
test esi, esi
jns 0x41ab01
push esi
push str.Failed_to_call_CLRCreateInstance__HRESULT__0x_x_.
jmp 0x41ac94
mov eax, dword [ebp - 0x21c]
mov edx, dword [eax]
mov edx, dword [edx + 0xc]
lea ecx, [ebp - 0x218]
push ecx
mov ecx, dword [ebp - 0x214]
push 0x46ce8c
push ecx
push eax
call edx
mov esi, eax
test esi, esi
jns 0x41ab81
mov ecx, dword [ebx + 0x130]
lea eax, [ebp - 0x214]
push eax
call fcn.0041dc60
test eax, eax
je 0x41ab76
lea eax, [ebx + 0x130]
lea edi, [ebp - 0x214]
call fcn.0041db20
mov eax, dword [ebx + 0x130]
mov ecx, dword [ebp - 0x21c]
mov edx, dword [ecx]
lea esi, [ebp - 0x218]
push esi
push 0x46ce8c
push eax
mov eax, dword [edx + 0xc]
push ecx
call eax
mov esi, eax
test esi, esi
jns 0x41ab81
push esi
push str.Failed_to_initialize_CLR__HRESULT__0x_x_.
jmp 0x41ac94
mov eax, dword [ebp - 0x218]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x24]
push 0x47b6c8
push 0x46ce5c
push 0x46ce4c
push eax
call edx
mov esi, eax
test esi, esi
jns 0x41abaf
push esi
push str.Failed_to_get_ICorRuntimeHost__HRESULT__0x_d_.
jmp 0x41ac94
mov eax, dword [0x47b6c8]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x28]
push eax
call edx
mov esi, eax
test esi, esi
js 0x41ac8e
xor eax, eax
push 0x1fe
push eax
lea ecx, [ebp - 0x20e]
push ecx
mov dword [ebp - 0x230], 0xff
mov word [ebp - 0x210], ax
call fcn.00449910
mov eax, dword [ebp - 0x218]
mov edx, dword [eax]
mov edx, dword [edx + 0xc]
add esp, 0xc
lea ecx, [ebp - 0x230]
push ecx
lea ecx, [ebp - 0x210]
push ecx
push eax
call edx
mov esi, eax
test esi, esi
js 0x41ac86
lea edi, [ebx + 0x138]
lea edx, [ebp - 0x210]
call fcn.004011b0
lea eax, [ebp - 0x22c]
push eax
lea ecx, [ebp - 0x238]
push ecx
lea edx, [ebp - 0x234]
push edx
lea eax, [ebp - 0x220]
push eax
mov eax, dword [edi]
push ecx
sub eax, 0x10
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x234], esp
mov ebx, esp
call fcn.004218e0
add eax, 0x10
mov dword [ebx], eax
call fcn.0041b5b0
cmp dword [ebp - 0x220], 4
jl 0x41aca8
cmp dword [ebp - 0x228], 2
jne 0x41aca8
mov eax, dword [ebp - 0x218]
mov ecx, dword [eax]
mov edx, dword [ecx + 0x34]
push eax
call edx
jmp 0x41aca8
push esi
push str.Failed_to_call_GetVersionString__HRESULT__0x_x_.
jmp 0x41ac94
push esi
push str.Failed_to_call_Start__HRESULT__0x_x_.
lea edi, [ebx + 0x100]
mov dword [ebx + 0x104], esi
call fcn.00422e30
add esp, 8
mov eax, dword [ebp - 0x218]
test eax, eax
je 0x41acba
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov eax, dword [ebp - 0x21c]
test eax, eax
je 0x41accc
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
test esi, esi
jns 0x41acdd
mov eax, dword [ebp - 0x224]
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
xor edi, edi
cmp esi, edi
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x214]
sete bl
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x41ad0d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00445447
mov esp, ebp
pop ebp
ret