main 00360AC2 mov edx, edi EDX=03045390 main 00360AC4 call 0020C194 ESP=0048F028 main 0020C194 mov eax, 203874 EAX=00203874 main 0020C199 mov ebp, ebp main 0020C19B jmp 00360AF0 main 00360AF0 push ebp ESP=0048F024 main 00360AF1 mov ebp, esp EBP=0048F024 main 00360AF3 push edi ESP=0048F020 main 00360AF4 push esi ESP=0048F01C main 00360AF5 push ebx ESP=0048F018 main 00360AF6 sub esp, 2C ESP=0048EFEC main 00360AF9 mov [ebp-1C], eax main 00360AFC xor eax, eax EAX=00000000 main 00360AFE mov [ebp-14], eax main 00360B01 mov [ebp-18], eax main 00360B04 mov ebx, fs:[0E38] EBX=00292CF0 main 00360B0B mov dword ptr [ebp-34], 611BABC8 main 00360B12 mov dword ptr [ebp-38], C1619145 main 00360B19 mov eax, [ebx+0C] EAX=0048F2AC main 00360B1C mov [ebp-30], eax main 00360B1F mov [ebp-20], ebp main 00360B22 mov dword ptr [ebp-24], 0 main 00360B29 lea eax, [ebp-34] EAX=0048EFF0 main 00360B2C mov [ebx+0C], eax main 00360B2F mov edi, ecx EDI=05971030 main 00360B31 mov esi, edx ESI=03045390 main 00360B33 mov ecx, [ebp-1C] ECX=00203874 main 00360B36 call clr.StubHelpers::DemandPermission;ESP=0048EFE8 main clr.StubHelpers::DemandPermission;push 0BC ESP=0048EFE4 main clr.61243A6E mov eax, clr.61709D7C EAX=61709D7C main clr.61243A73 call clr._EH_prolog3_catch ESP=0048EFE0 main clr._EH_prolog3_catch push eax ESP=0048EFDC main clr.611B202B push dword ptr fs:[0] ESP=0048EFD8 main clr.611B2032 lea eax, [esp+0C] EAX=0048EFE4 main clr.611B2036 sub esp, [esp+0C] ESP=0048EF1C main clr.611B203A push ebx ESP=0048EF18 main clr.611B203B push esi ESP=0048EF14 main clr.611B203C push edi ESP=0048EF10 main clr.611B203D mov [eax], ebp main clr.611B203F mov ebp, eax EBP=0048EFE4 main clr.611B2041 mov eax, [clr.__security_cookie] EAX=E0A3CB04 main clr.611B2046 xor eax, ebp EAX=E0EB24E0 main clr.611B2048 push eax ESP=0048EF0C main clr.611B2049 mov [ebp-10], esp main clr.611B204C push dword ptr [ebp-4] ESP=0048EF08 main clr.611B204F mov dword ptr [ebp-4], -1 main clr.611B2056 lea eax, [ebp-0C] EAX=0048EFD8 main clr.611B2059 mov fs:[0], eax main clr.611B205F ret ESP=0048EF0C main clr.61243A78 mov esi, ecx ESI=00203874 main clr.61243A7A mov edi, clr.StubHelpers::DemandPermission;EDI=61243A69 main clr.61243A7F test esi, esi main clr.61243A81 jne clr.61243B1E main clr.61243B1E cmp dword ptr [clr.g_IBCLogger], 0 main clr.61243B25 jne clr.61444042 main clr.61243B2B test byte ptr [esi+6], 40 main clr.61243B2F je short clr.61243B18 main clr.61243B31 test byte ptr [esi+3], 40 main clr.61243B35 je clr.6144404C main clr.61243B3B call clr.GetThread ESP=0048EF08 main clr.GetThread mov eax, fs:[0E38] EAX=00292CF0 main clr.611B1BCE ret ESP=0048EF0C main clr.61243B40 cmp dword ptr [eax+38C], 0 main clr.61243B47 jne clr.6144404C main clr.61243B4D test byte ptr [eax+394], 81 main clr.61243B54 je clr.6144404C main clr.61243B5A mov ecx, [eax+14] ECX=0028AE30 main clr.61243B5D mov eax, [ecx] EAX=611B4A2C main clr.61243B5F call near [eax+14] ESP=0048EF08 main clr.AppDomain::GetSecurityDescriptor;mov eax, [ecx+634] EAX=0028C910 main clr.611C3602 ret ESP=0048EF0C main clr.61243B62 mov eax, [eax+30] EAX=FFFFFFFF main clr.61243B65 test al, 81 main clr.61243B67 je clr.6144404C main clr.61243B6D mov eax, [clr.PerfCounters::m_pPrivatePerf];EAX=00190028 main clr.61243B72 inc dword ptr [eax+0FC] main clr.61243B78 jmp short clr.61243B18 main clr.61243B18 call clr._EH_epilog3 ESP=0048EF08 main clr._EH_epilog3 mov ecx, [ebp-0C] ECX=0048F140 main clr.611B1003 mov fs:[0], ecx main clr.611B100A pop ecx ECX=61243B1D, ESP=0048EF0C main clr.611B100B pop edi ESP=0048EF10, EDI=E0EB24E0 main clr.611B100C pop edi ESP=0048EF14, EDI=05971030 main clr.611B100D pop esi ESP=0048EF18, ESI=03045390 main clr.611B100E pop ebx ESP=0048EF1C main clr.611B100F mov esp, ebp ESP=0048EFE4 main clr.611B1011 pop ebp ESP=0048EFE8, EBP=0048F024 main clr.611B1012 push ecx ESP=0048EFE4 main clr.611B1013 ret ESP=0048EFE8 main clr.61243B1D ret ESP=0048EFEC main 00360B3B xor edx, edx EDX=00000000 main 00360B3D mov [ebp-10], edx main 00360B40 test edi, edi main 00360B42 je short 00360B4F main 00360B44 mov [ebp-14], edi main 00360B47 mov eax, edi EAX=05971030 main 00360B49 add eax, 8 EAX=05971038 main 00360B4C mov [ebp-10], eax main 00360B4F xor edi, edi EDI=00000000 main 00360B51 test esi, esi main 00360B53 je short 00360B5F main 00360B55 mov [ebp-18], esi main 00360B58 mov eax, esi EAX=03045390 main 00360B5A add eax, 8 EAX=03045398 main 00360B5D mov edi, eax EDI=03045398 main 00360B5F mov eax, [ebp-1C] EAX=00203874 main 00360B62 mov eax, [eax+14] EAX=00203908 main 00360B65 mov ecx, [eax] ECX=75A97975 main 00360B67 push dword ptr [ebp+0C] ESP=0048EFE8 main 00360B6A push dword ptr [ebp+8] ESP=0048EFE4 main 00360B6D push edi ESP=0048EFE0 main 00360B6E push dword ptr [ebp-10] ESP=0048EFDC main 00360B71 mov dword ptr [ebp-2C], 0 main 00360B78 mov [ebp-28], esp main 00360B7B mov dword ptr [ebp-24], 360B88 main 00360B82 mov byte ptr [ebx+8], 0 main 00360B86 call ecx ESP=0048EFD8