Function Graph 0Basic Block 0Opcode: 90sub_804b3d0:Opcode: 90nop     Opcode: 58pop     eaxOpcode: 33 05 4a 00 05 08xor     eax, dword [data_805004a]Opcode: 50push    eaxOpcode: c7 84 24 64 ff ff ff 00 00 00 00mov     dword [esp-0x9c {var_9c}], 0x0Opcode: 55push    ebpOpcode: 89 e5mov     ebp, espOpcode: 56push    esiOpcode: 81 ec e4 00 00 00sub     esp, 0xe4 {var_ec}Opcode: 8b 45 0cmov     eax, dword [ebp+0xc {arg_8}]Opcode: 8b 4d 08mov     ecx, dword [ebp+0x8 {arg_4}]Opcode: 89 4d f4mov     dword [ebp-0xc {var_10}], ecxOpcode: 89 45 f0mov     dword [ebp-0x10 {var_14}], eaxOpcode: 83 7d f4 00cmp     dword [ebp-0xc {var_10}], 0x0Opcode: 75 17jne     0x804b417Basic Block 1Opcode: 83 7d f0 00cmp     dword [ebp-0x10 {var_14}], 0x0Opcode: 75 17jne     0x804b434Basic Block 2Opcode: 8d 05 9c fc 04 08lea     eax, [data_804fc9c]  {"Invalid username"}Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 e2 e1 ff ffcall    sub_80495f0Opcode: c6 45 fb 00mov     byte [ebp-0x5 {var_9}], 0x0Opcode: e9 7f 03 00 00jmp     0x804b796Basic Block 3Opcode: 8d 05 97 fc 04 08lea     eax, [data_804fc97]  {"root"}Opcode: 8b 0d 54 00 05 08mov     ecx, dword [data_8050054]Opcode: 89 0c 24mov     dword [esp {var_ec}], ecxOpcode: 89 44 24 04mov     dword [esp+0x4 {var_e8}], eaxOpcode: e8 14 3b 00 00call    sub_804ef60Opcode: 83 f8 00cmp     eax, 0x0Opcode: 74 17je      0x804b468Basic Block 4Opcode: 8d 05 00 fd 04 08lea     eax, [data_804fd00]  {"Invalid password"}Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 c5 e1 ff ffcall    sub_80495f0Opcode: c6 45 fb 00mov     byte [ebp-0x5 {var_9}], 0x0Opcode: e9 62 03 00 00jmp     0x804b796Basic Block 5Opcode: 0f b6 45 fbmovzx   eax, byte [ebp-0x5 {var_9}]Opcode: 81 c4 e4 00 00 00add     esp, 0xe4 {var_8}Opcode: 5epop     esiOpcode: 5dpop     ebpOpcode: 59pop     ecxOpcode: 33 0d 4a 00 05 08xor     ecx, dword [data_805004a]Opcode: 51push    ecxOpcode: c3retn    Basic Block 6Opcode: 8b 45 f4mov     eax, dword [ebp-0xc {var_10}]Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 bd 37 00 00call    sub_804ec30Opcode: 83 f8 20cmp     eax, 0x20Opcode: 76 17jbe     0x804b48fBasic Block 7Opcode: 8d 05 8f fc 04 08lea     eax, [data_804fc8f]  {"Must be root"}Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 91 e1 ff ffcall    sub_80495f0Opcode: c6 45 fb 00mov     byte [ebp-0x5 {var_9}], 0x0Opcode: e9 2e 03 00 00jmp     0x804b796Basic Block 8Opcode: 8b 45 f0mov     eax, dword [ebp-0x10 {var_14}]Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 96 37 00 00call    sub_804ec30Opcode: 83 f8 20cmp     eax, 0x20Opcode: 76 17jbe     0x804b4b6Basic Block 9Opcode: 8d 05 9c fc 04 08lea     eax, [data_804fc9c]  {"Invalid username"}Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 6a e1 ff ffcall    sub_80495f0Opcode: c6 45 fb 00mov     byte [ebp-0x5 {var_9}], 0x0Opcode: e9 07 03 00 00jmp     0x804b796Basic Block 10Opcode: 8b 45 f4mov     eax, dword [ebp-0xc {var_10}]Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 9f fd ff ffcall    sub_804b260Opcode: 3c 00cmp     al, 0x0Opcode: 74 15je      0x804b4daBasic Block 11Opcode: 8d 05 00 fd 04 08lea     eax, [data_804fd00]  {"Invalid password"}Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 43 e1 ff ffcall    sub_80495f0Opcode: c6 45 fb 00mov     byte [ebp-0x5 {var_9}], 0x0Opcode: e9 e0 02 00 00jmp     0x804b796Basic Block 12Opcode: c7 04 24 1e fa 04 08mov     dword [esp {var_ec}], data_804fa1e  {"passwd"}Opcode: c7 44 24 04 cf fb 04 08mov     dword [esp+0x4 {var_e8}], data_804fbcfOpcode: e8 62 ea ff ffcall    sub_8049f50Opcode: 89 45 ecmov     dword [ebp-0x14 {var_18}], eaxOpcode: 83 f8 00cmp     eax, 0x0Opcode: 75 17jne     0x804b50dBasic Block 13Opcode: c7 04 24 11 fd 04 08mov     dword [esp {var_ec}], data_804fd11  {"User already exists"}Opcode: e8 1f e1 ff ffcall    sub_80495f0Opcode: c6 45 fb 00mov     byte [ebp-0x5 {var_9}], 0x0Opcode: e9 bc 02 00 00jmp     0x804b796Basic Block 14Opcode: 8d 05 25 fd 04 08lea     eax, [data_804fd25]  {"~passwd"}Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: c7 44 24 04 18 fa 04 08mov     dword [esp+0x4 {var_e8}], data_804fa18Opcode: e8 2d ea ff ffcall    sub_8049f50Opcode: 89 45 e8mov     dword [ebp-0x18 {var_1c}], eaxOpcode: 83 f8 00cmp     eax, 0x0Opcode: 75 28jne     0x804b553Basic Block 15Opcode: 8d 05 c3 fc 04 08lea     eax, [data_804fcc3]  {"Unable to open passwd file"}Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 ec e0 ff ffcall    sub_80495f0Opcode: c6 45 fb 00mov     byte [ebp-0x5 {var_9}], 0x0Opcode: e9 89 02 00 00jmp     0x804b796Basic Block 16Opcode: eb 00jmp     0x804b555Basic Block 17Opcode: 8d 05 2d fd 04 08lea     eax, [data_804fd2d]  {"Unable to open tmp passwd file"}Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 b7 e0 ff ffcall    sub_80495f0Opcode: 8b 45 ecmov     eax, dword [ebp-0x14 {var_18}]Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 2c ee ff ffcall    sub_804a370Opcode: c6 45 fb 00mov     byte [ebp-0x5 {var_9}], 0x0Opcode: 88 85 67 ff ff ffmov     byte [ebp-0x99 {var_9d}], alOpcode: e9 43 02 00 00jmp     0x804b796Basic Block 18Opcode: b8 7f 00 00 00mov     eax, 0x7fOpcode: 8d 8d 68 ff ff fflea     ecx, [ebp-0x98] {var_9c}Opcode: 8b 55 ecmov     edx, dword [ebp-0x14 {var_18}]Opcode: 89 0c 24mov     dword [esp {var_ec}], ecxOpcode: c7 44 24 04 7f 00 00 00mov     dword [esp+0x4 {var_e8}], 0x7fOpcode: 89 54 24 08mov     dword [esp+0x8 {var_e4}], edxOpcode: 89 85 60 ff ff ffmov     dword [ebp-0xa0 {var_a4}], eaxOpcode: e8 e3 f0 ff ffcall    sub_804a660Opcode: 83 f8 00cmp     eax, 0x0Opcode: 0f 84 48 01 00 00je      0x804b6ceBasic Block 19Opcode: 8d 05 6c fd 04 08lea     eax, [data_804fd6c]  {"$s:$s"}Opcode: 8d 8d 68 ff ff fflea     ecx, [ebp-0x98] {var_9c}Opcode: 8b 55 f4mov     edx, dword [ebp-0xc {var_10}]Opcode: 8b 75 f0mov     esi, dword [ebp-0x10 {var_14}]Opcode: 89 0c 24mov     dword [esp {var_ec}], ecxOpcode: 89 44 24 04mov     dword [esp+0x4 {var_e8}], eaxOpcode: 89 54 24 08mov     dword [esp+0x8 {var_e4}], edxOpcode: 89 74 24 0cmov     dword [esp+0xc {var_e0}], esiOpcode: e8 2c 20 00 00call    sub_804d720Opcode: 8d 8d 68 ff ff fflea     ecx, [ebp-0x98] {var_9c}Opcode: 89 0c 24mov     dword [esp {var_ec}], ecxOpcode: 89 85 44 ff ff ffmov     dword [ebp-0xbc {var_c0}], eaxOpcode: 89 8d 40 ff ff ffmov     dword [ebp-0xc0 {var_c4}], ecxOpcode: e8 22 35 00 00call    sub_804ec30Opcode: 8b 55 e8mov     edx, dword [ebp-0x18 {var_1c}]Opcode: 8b b5 40 ff ff ffmov     esi, dword [ebp-0xc0 {var_c4}]Opcode: 89 34 24mov     dword [esp {var_ec}], esiOpcode: 89 44 24 04mov     dword [esp+0x4 {var_e8}], eaxOpcode: c7 44 24 08 01 00 00 00mov     dword [esp+0x8 {var_e4}], 0x1Opcode: 89 54 24 0cmov     dword [esp+0xc {var_e0}], edxOpcode: c7 85 3c ff ff ff 01 00 00 00mov     dword [ebp-0xc4 {var_c8}], 0x1Opcode: e8 f7 ed ff ffcall    sub_804a530Opcode: 8b 4d ecmov     ecx, dword [ebp-0x14 {var_18}]Opcode: 89 0c 24mov     dword [esp {var_ec}], ecxOpcode: 89 85 38 ff ff ffmov     dword [ebp-0xc8 {var_cc}], eaxOpcode: e8 26 ec ff ffcall    sub_804a370Opcode: 8b 4d e8mov     ecx, dword [ebp-0x18 {var_1c}]Opcode: 89 0c 24mov     dword [esp {var_ec}], ecxOpcode: 88 85 37 ff ff ffmov     byte [ebp-0xc9 {var_cd}], alOpcode: e8 15 ec ff ffcall    sub_804a370Opcode: c7 04 24 1e fa 04 08mov     dword [esp {var_ec}], data_804fa1e  {"passwd"}Opcode: 88 85 36 ff ff ffmov     byte [ebp-0xca {var_ce}], alOpcode: e8 d3 f4 ff ffcall    sub_804ac40Opcode: c7 04 24 25 fd 04 08mov     dword [esp {var_ec}], data_804fd25  {"~passwd"}Opcode: c7 44 24 04 1e fa 04 08mov     dword [esp+0x4 {var_e8}], data_804fa1e  {"passwd"}Opcode: 88 85 35 ff ff ffmov     byte [ebp-0xcb {var_cf}], alOpcode: e8 b9 f6 ff ffcall    sub_804ae40Opcode: 88 85 34 ff ff ffmov     byte [ebp-0xcc {var_d0}], alOpcode: e8 be de ff ffcall    sub_8049650Opcode: c6 45 fb 01mov     byte [ebp-0x5 {var_9}], 0x1Basic Block 20Opcode: 8d 85 68 ff ff fflea     eax, [ebp-0x98] {var_9c}Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: 89 85 5c ff ff ffmov     dword [ebp-0xa4 {var_a8}], eaxOpcode: e8 96 36 00 00call    sub_804ec30Opcode: 8b 55 e8mov     edx, dword [ebp-0x18 {var_1c}]Opcode: 8b b5 5c ff ff ffmov     esi, dword [ebp-0xa4 {var_a8}]Opcode: 89 34 24mov     dword [esp {var_ec}], esiOpcode: 89 44 24 04mov     dword [esp+0x4 {var_e8}], eaxOpcode: c7 44 24 08 01 00 00 00mov     dword [esp+0x8 {var_e4}], 0x1Opcode: 89 54 24 0cmov     dword [esp+0xc {var_e0}], edxOpcode: c7 85 58 ff ff ff 01 00 00 00mov     dword [ebp-0xa8 {var_ac}], 0x1Opcode: e8 6b ef ff ffcall    sub_804a530Opcode: 8d 8d 68 ff ff fflea     ecx, [ebp-0x98] {var_9c}Opcode: 89 0c 24mov     dword [esp {var_ec}], ecxOpcode: 89 85 54 ff ff ffmov     dword [ebp-0xac {var_b0}], eaxOpcode: e8 57 36 00 00call    sub_804ec30Opcode: 8b 8d 54 ff ff ffmov     ecx, dword [ebp-0xac {var_b0}]Opcode: 39 c1cmp     ecx, eaxOpcode: 74 49je      0x804b62cBasic Block 21Opcode: 8d 85 68 ff ff fflea     eax, [ebp-0x98] {var_9c}Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 f6 35 00 00call    sub_804ec30Opcode: 83 e8 01sub     eax, 0x1Opcode: 0f be 84 05 68 ff ff ffmovsx   eax, byte [ebp+eax-0x98] {var_4}Opcode: 83 f8 0acmp     eax, 0xaOpcode: 74 7fje      0x804b6c9Basic Block 22Opcode: 8b 45 ecmov     eax, dword [ebp-0x14 {var_18}]Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 82 ed ff ffcall    sub_804a370Opcode: 8b 4d e8mov     ecx, dword [ebp-0x18 {var_1c}]Opcode: 89 0c 24mov     dword [esp {var_ec}], ecxOpcode: 88 85 53 ff ff ffmov     byte [ebp-0xad {var_b1}], alOpcode: e8 71 ed ff ffcall    sub_804a370Opcode: c7 04 24 4c fd 04 08mov     dword [esp {var_ec}], data_804fd4c  {"Unable to write tmp passwd file"}Opcode: 88 85 52 ff ff ffmov     byte [ebp-0xae {var_b2}], alOpcode: e8 df df ff ffcall    sub_80495f0Opcode: c7 04 24 25 fd 04 08mov     dword [esp {var_ec}], data_804fd25  {"~passwd"}Opcode: e8 23 f6 ff ffcall    sub_804ac40Opcode: c6 45 fb 00mov     byte [ebp-0x5 {var_9}], 0x0Opcode: 88 85 51 ff ff ffmov     byte [ebp-0xaf {var_b3}], alOpcode: e9 6a 01 00 00jmp     0x804b796Basic Block 23Opcode: e9 87 fe ff ffjmp     0x804b555Basic Block 24Opcode: 8d 05 f5 fd 04 08lea     eax, [data_804fdf5]Opcode: 8b 55 e8mov     edx, dword [ebp-0x18 {var_1c}]Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: c7 44 24 04 01 00 00 00mov     dword [esp+0x4 {var_e8}], 0x1Opcode: c7 44 24 08 01 00 00 00mov     dword [esp+0x8 {var_e4}], 0x1Opcode: 89 54 24 0cmov     dword [esp+0xc {var_e0}], edxOpcode: c7 85 4c ff ff ff 01 00 00 00mov     dword [ebp-0xb4 {var_b8}], 0x1Opcode: e8 b7 ee ff ffcall    sub_804a530Opcode: 83 f8 01cmp     eax, 0x1Opcode: 74 49je      0x804b6c7Basic Block 25Opcode: eb 00jmp     0x804b6c9Basic Block 26Opcode: 8b 45 ecmov     eax, dword [ebp-0x14 {var_18}]Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 e7 ec ff ffcall    sub_804a370Opcode: 8b 4d e8mov     ecx, dword [ebp-0x18 {var_1c}]Opcode: 89 0c 24mov     dword [esp {var_ec}], ecxOpcode: 88 85 4b ff ff ffmov     byte [ebp-0xb5 {var_b9}], alOpcode: e8 d6 ec ff ffcall    sub_804a370Opcode: c7 04 24 4c fd 04 08mov     dword [esp {var_ec}], data_804fd4c  {"Unable to write tmp passwd file"}Opcode: 88 85 4a ff ff ffmov     byte [ebp-0xb6 {var_ba}], alOpcode: e8 44 df ff ffcall    sub_80495f0Opcode: c7 04 24 25 fd 04 08mov     dword [esp {var_ec}], data_804fd25  {"~passwd"}Opcode: e8 88 f5 ff ffcall    sub_804ac40Opcode: c6 45 fb 00mov     byte [ebp-0x5 {var_9}], 0x0Opcode: 88 85 49 ff ff ffmov     byte [ebp-0xb7 {var_bb}], alOpcode: e9 cf 00 00 00jmp     0x804b796