Function at 0x492cf0
Capabilities:
Load windows common language runtime

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4daf90
push eax
mov dword fs:[0], esp
sub esp, 0x24
push ebx
push esi
mov esi, ecx
cmp dword [esi + 0x1e4], 8
lea ebx, [esi + 0x1d0]
push edi
jb 0x492d23
mov edi, dword [ebx]
jmp 0x492d25
mov edi, ebx
push 1
call fcn.00493590
mov eax, 0x9f
mov ecx, esi
mov word [ebp - 0x1c], ax
push dword [ebp - 0x1c]
call fcn.004934e0
push edi
push ecx
push str.Secure.Net.Host.Runtime.HostRuntime:_Loading_.net_Framework
mov ecx, esi
call fcn.00493420
add esp, 4
mov ecx, eax
call fcn.00493420
mov ecx, eax
call fcn.00493640
mov dword [ebp - 0x18], 0
lea eax, [ebp - 0x18]
mov dword [ebp - 4], 0
push eax
push 0x50009c
push 0x5000ac
call dword [sym.imp.mscoree.dll_CLRCreateInstance]
mov edi, eax
test edi, edi
je 0x492e18
mov dword [ebp - 0x2c], vtable._com_error.0
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
push 3
mov ecx, esi
mov byte [ebp - 4], 1
call fcn.00493590
mov eax, 0xce
mov ecx, esi
mov word [ebp + 8], ax
push dword [ebp + 8]
call fcn.004934e0
lea ecx, [ebp - 0x2c]
call fcn.00492b60
push eax
push ecx
push str.Secure.Net.Host.Runtime.HostRuntime:_Creating_Instance_of_CLR_Meta_Host_failed.
mov ecx, esi
call fcn.00493420
add esp, 4
mov ecx, eax
call fcn.00493420
mov ecx, eax
call fcn.00493640
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2c], vtable._com_error.0
test ecx, ecx
je 0x492e01
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x493013
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
jmp 0x493013
mov dword [ebp - 0x14], 0
mov byte [ebp - 4], 2
cmp dword [ebx + 0x14], 8
jb 0x492e2b
mov ebx, dword [ebx]
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x14]
push edx
push 0x500164
push ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 0xc]
mov edi, eax
test edi, edi
je 0x492e90
mov dword [ebp - 0x2c], vtable._com_error.0
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
push 3
mov ecx, esi
mov byte [ebp - 4], 3
call fcn.00493590
mov eax, 0xce
mov ecx, esi
mov word [ebp + 8], ax
push dword [ebp + 8]
call fcn.004934e0
lea ecx, [ebp - 0x2c]
call fcn.00492b60
push eax
push ecx
push str.Secure.Net.Host.Runtime.HostRuntime:_Creating_Instance_of_CLR_Runtime_Info_failed.
jmp 0x492f91
mov edx, dword [ebp + 8]
cmp dword [edx + 0x10], 0
jbe 0x492f26
cmp dword [edx + 0x14], 8
jb 0x492ea5
mov edx, dword [edx]
mov eax, dword [ebp - 0x14]
push edx
push 0x110
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov edi, eax
test edi, edi
je 0x492f26
mov dword [ebp - 0x2c], vtable._com_error.0
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
push 3
mov ecx, esi
mov byte [ebp - 4], 4
call fcn.00493590
mov eax, 0xce
mov ecx, esi
mov word [ebp + 8], ax
push dword [ebp + 8]
call fcn.004934e0
lea ecx, [ebp - 0x2c]
call fcn.00492b60
push eax
push ecx
push str.Secure.Net.Host.Runtime.HostRuntime:_Setting_Startup_Flags_failed.
mov ecx, esi
call fcn.00493420
add esp, 4
mov ecx, eax
call fcn.00493420
mov ecx, eax
call fcn.00493640
lea ecx, [ebp - 0x2c]
call fcn.00492cc0
jmp 0x493002
mov eax, dword [ebp - 0x14]
lea ecx, [esi + 0x1c8]
push ecx
push 0x5002a8
push 0x5002b8
mov edx, dword [eax]
push eax
call dword [edx + 0x24]
mov edi, eax
test edi, edi
je 0x492fd1
mov dword [ebp - 0x2c], vtable._com_error.0
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
push 3
mov ecx, esi
mov byte [ebp - 4], 5
call fcn.00493590
mov eax, 0xce
mov ecx, esi
mov word [ebp + 8], ax
push dword [ebp + 8]
call fcn.004934e0
lea ecx, [ebp - 0x2c]
call fcn.00492b60
push eax
push ecx
push str.Secure.Net.Host.Runtime.HostRuntime:_Creating_Instance_of_CLR_Runtime_Host_failed.
mov ecx, esi
call fcn.00493420
add esp, 4
mov ecx, eax
call fcn.00493420
mov ecx, eax
call fcn.00493640
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2c], vtable._com_error.0
test ecx, ecx
je 0x492fc1
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x493002
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
jmp 0x493002
push 1
mov ecx, esi
call fcn.00493590
mov eax, 0x9f
mov ecx, esi
mov word [ebp + 8], ax
push dword [ebp + 8]
call fcn.004934e0
push str.Secure.Net.Host.Runtime.HostRuntime:_.net_Framework_successfully_loaded
mov ecx, esi
call fcn.00493420
mov ecx, eax
call fcn.00493640
xor edi, edi
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x493013
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x18]
test ecx, ecx
je 0x493027
mov edx, dword [ecx]
push ecx
call dword [edx + 8]
mov ecx, dword [ebp - 0xc]
mov eax, edi
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 4