Function Graph 0Basic Block 0Opcode: 55sub_804e302:Opcode: 55push    ebpOpcode: 89 e5mov     ebp, espOpcode: 56push    esiOpcode: 81 ec e4 00 00 00sub     esp, 0xe4 {var_ec}Opcode: 8b 45 0cmov     eax, dword [ebp+data_c {arg_8}]Opcode: 8b 4d 08mov     ecx, dword [ebp+data_8 {arg_4}]Opcode: 89 4d f4mov     dword [ebp-0xc {var_10}], ecxOpcode: 89 45 f0mov     dword [ebp-0x10 {var_14}], eaxOpcode: 81 7d f4 00 00 00 00cmp     dword [ebp-0xc {var_10}], data_0Opcode: 0f 85 4f fe ff ffjne     0x804e174Basic Block 1Opcode: 81 7d f0 00 00 00 00cmp     dword [ebp-0x10 {var_14}], data_0Opcode: 0f 85 a4 fd ff ffjne     0x804df25Basic Block 2Opcode: 8d 05 ac 02 05 08lea     eax, [data_80502ac]  {"Invalid username"}Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 56 9f ff ffcall    sub_8048289Opcode: 90nop     Opcode: c6 45 fb 00mov     byte [ebp-0x5 {var_9}], 0x0Opcode: e9 86 a3 ff ffjmp     0x80486c3Basic Block 3Opcode: 8d 05 a7 02 05 08lea     eax, [data_80502a7]  {"root"}Opcode: 8b 0d 7c 56 06 08mov     ecx, dword [data_806567c]Opcode: 89 0c 24mov     dword [esp {var_ec}], ecxOpcode: 89 44 24 04mov     dword [esp+data_4 {var_e8}], eaxOpcode: e8 3a a9 ff ffcall    sub_8048877Opcode: 90nop     Opcode: 85 c0test    eax, eaxOpcode: 0f 84 e0 f3 ff ffje      0x804d326Basic Block 4Opcode: 8d 05 10 03 05 08lea     eax, [data_8050310]  {"Invalid password"}Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 fa a0 ff ffcall    sub_8048289Opcode: 90nop     Opcode: c6 45 fb 00mov     byte [ebp-0x5 {var_9}], 0x0Opcode: e9 2a a5 ff ffjmp     0x80486c3Basic Block 5Opcode: 0f b6 45 fbmovzx   eax, byte [ebp-0x5 {var_9}]Opcode: 81 c4 e4 00 00 00add     esp, 0xe4 {var_8}Opcode: 5epop     esiOpcode: 5dpop     ebpOpcode: e9 69 fb ff ffjmp     0x804823dBasic Block 6Opcode: 8b 45 f4mov     eax, dword [ebp-0xc {var_10}]Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 a1 af ff ffcall    sub_80482d2Opcode: 90nop     Opcode: 3d 20 00 00 00cmp     eax, data_20Opcode: 0f 86 a7 f2 ff ffjbe     0x804c5e4Basic Block 7Opcode: 8d 05 9f 02 05 08lea     eax, [data_805029f]  {"Must be root"}Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 35 a3 ff ffcall    sub_8048289Opcode: 90nop     Opcode: c6 45 fb 00mov     byte [ebp-0x5 {var_9}], 0x0Opcode: e9 65 a7 ff ffjmp     0x80486c3Basic Block 8Opcode: 81 24 24 ff ff ff 7fand     dword [esp], 0x7fffffffOpcode: 8b 0c 24mov     ecx, dword [esp]Opcode: 80 39 90cmp     byte [ecx], 0x90Opcode: 0f 85 1f 24 00 00jne     0x804a66fBasic Block 9Opcode: 8b 45 f0mov     eax, dword [ebp-0x10 {var_14}]Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 e3 bc ff ffcall    sub_80482d2Opcode: 90nop     Opcode: 3d 20 00 00 00cmp     eax, data_20Opcode: 0f 86 19 f5 ff ffjbe     0x804bb14Basic Block 10Opcode: 8d 05 ac 02 05 08lea     eax, [data_80502ac]  {"Invalid username"}Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 3e af ff ffcall    sub_8048289Opcode: 90nop     Opcode: c6 45 fb 00mov     byte [ebp-0x5 {var_9}], 0x0Opcode: e9 6e b3 ff ffjmp     0x80486c3Basic Block 11Opcode: 59pop     ecxOpcode: 80 79 ff f4cmp     byte [ecx-0x1], 0xf4Opcode: 75 08jne     0x804a67eBasic Block 12Opcode: c3retn    Basic Block 13Opcode: 8b 45 f4mov     eax, dword [ebp-0xc {var_10}]Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 d3 fc ff ffcall    sub_804b7f2Opcode: 90nop     Opcode: 3c 00cmp     al, 0x0Opcode: 0f 84 ce f8 ff ffje      0x804b3f6Basic Block 14Opcode: 8d 05 10 03 05 08lea     eax, [data_8050310]  {"Invalid password"}Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 80 bc ff ffcall    sub_8048289Opcode: 90nop     Opcode: c6 45 fb 00mov     byte [ebp-0x5 {var_9}], 0x0Opcode: e9 b0 c0 ff ffjmp     0x80486c3Basic Block 15Opcode: 81 f9 77 83 04 08cmp     ecx, sub_804c417-0x40a0Opcode: 0f 84 44 04 00 00je      0x804aaceBasic Block 16Opcode: 81 e1 ff ff ff 7fand     ecx, 0x7fffffffOpcode: ff e1jmp     ecxBasic Block 17Opcode: 8d 05 2e 00 05 08lea     eax, [data_805002e]  {"passwd"}Opcode: 8d 0d df 01 05 08lea     ecx, [data_80501df]Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: 89 4c 24 04mov     dword [esp+data_4 {var_e8}], ecxOpcode: e8 30 e5 ff ffcall    sub_804993eOpcode: 90nop     Opcode: 89 45 ecmov     dword [ebp-0x14 {var_18}], eaxOpcode: 85 c0test    eax, eaxOpcode: 75 18jne     0x804b42eBasic Block 18Opcode: 8d 05 21 03 05 08lea     eax, [data_8050321]  {"User already exists"}Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 53 c7 ff ffcall    sub_8048289Opcode: 90nop     Opcode: c6 45 fb 00mov     byte [ebp-0x5 {var_9}], 0x0Opcode: e9 83 cb ff ffjmp     0x80486c3Basic Block 19Opcode: b8 06 00 00 00mov     eax, data_6Opcode: 8d 4d eelea     ecx, [ebp-0x12]Opcode: 81 c1 01 00 00 00add     ecx, data_1Opcode: 89 0c 24mov     dword [esp], ecxOpcode: c7 44 24 04 06 00 00 00mov     dword [esp+data_4], data_6Opcode: 89 45 b0mov     dword [ebp-0x50], eaxOpcode: e8 0f ea ff ffcall    sub_80494feOpcode: 90nop     Opcode: 8d 4d eelea     ecx, [ebp-0x12]Opcode: 81 c1 01 00 00 00add     ecx, data_1Opcode: 89 4d dcmov     dword [ebp-0x24], ecxOpcode: 8b 4d e4mov     ecx, dword [ebp-0x1c]Opcode: 81 c1 0c 00 00 00add     ecx, data_cOpcode: 8b 55 dcmov     edx, dword [ebp-0x24]Opcode: 89 0c 24mov     dword [esp], ecxOpcode: 0f b6 4a 05movzx   ecx, byte [edx+data_5]Opcode: 89 4c 24 04mov     dword [esp+data_4], ecxOpcode: 89 45 acmov     dword [ebp-0x54], eaxOpcode: e8 40 e8 ff ffcall    sub_804935bOpcode: 90nop     Opcode: 8b 45 dcmov     eax, dword [ebp-0x24]Opcode: 8b 00mov     eax, dword [eax]Opcode: 8b 4d e4mov     ecx, dword [ebp-0x1c]Opcode: 89 41 1cmov     dword [ecx+0x1c], eaxOpcode: 8b 45 dcmov     eax, dword [ebp-0x24]Opcode: 8a 58 04mov     bl, byte [eax+data_4]Opcode: 8b 45 e4mov     eax, dword [ebp-0x1c]Opcode: 88 58 20mov     byte [eax+data_20], blOpcode: e9 b5 03 00 00jmp     0x804aeedBasic Block 20Opcode: b8 01 00 00 00mov     eax, data_1Opcode: cd 80int     0x80Opcode: cd 80{ Does not return }Basic Block 21Opcode: 8d 05 35 03 05 08lea     eax, [data_8050335]  {"~passwd"}Opcode: 8d 0d 28 00 05 08lea     ecx, [data_8050028]Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: 89 4c 24 04mov     dword [esp+data_4 {var_e8}], ecxOpcode: e8 f8 e4 ff ffcall    sub_804993eOpcode: 90nop     Opcode: 89 45 e8mov     dword [ebp-0x18 {var_1c}], eaxOpcode: 85 c0test    eax, eaxOpcode: 0f 85 72 2e 00 00jne     0x804e2c4Basic Block 22Opcode: 8d 05 d3 02 05 08lea     eax, [data_80502d3]  {"Unable to open passwd file"}Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 65 ce ff ffcall    sub_8048289Opcode: 90nop     Opcode: c6 45 fb 00mov     byte [ebp-0x5 {var_9}], 0x0Opcode: e9 95 d2 ff ffjmp     0x80486c3Basic Block 23Opcode: 8b 45 e4mov     eax, dword [ebp-0x1c]Opcode: 83 c4 70add     esp, 0x70Opcode: 5epop     esiOpcode: 5bpop     ebxOpcode: 5dpop     ebpOpcode: e9 42 d3 ff ffjmp     0x804823dBasic Block 24Opcode: e9 45 a1 ff ffjmp     0x804840eBasic Block 25Opcode: 8d 05 3d 03 05 08lea     eax, [data_805033d]  {"Unable to open tmp passwd file"}Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 29 ce ff ffcall    sub_8048289Opcode: 90nop     Opcode: 8b 45 ecmov     eax, dword [ebp-0x14 {var_18}]Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 a0 d0 ff ffcall    sub_804850cOpcode: 90nop     Opcode: c6 45 fb 00mov     byte [ebp-0x5 {var_9}], 0x0Opcode: 88 85 67 ff ff ffmov     byte [ebp-0x99 {var_9d}], alOpcode: e9 47 d2 ff ffjmp     0x80486c3Basic Block 26Opcode: b8 7f 00 00 00mov     eax, data_7fOpcode: 8d 8d 68 ff ff fflea     ecx, [ebp-0x98] {var_9c}Opcode: 8b 55 ecmov     edx, dword [ebp-0x14 {var_18}]Opcode: 89 0c 24mov     dword [esp {var_ec}], ecxOpcode: c7 44 24 04 7f 00 00 00mov     dword [esp+data_4 {var_e8}], data_7fOpcode: 89 54 24 08mov     dword [esp+data_8 {var_e4}], edxOpcode: 89 85 60 ff ff ffmov     dword [ebp-0xa0 {var_a4}], eaxOpcode: e8 cc 48 00 00call    sub_804cd02Opcode: 90nop     Opcode: 85 c0test    eax, eaxOpcode: 0f 84 ad 01 00 00je      0x80485ecBasic Block 27Opcode: 8d 05 7c 03 05 08lea     eax, [data_805037c]  {"$s:$s"}Opcode: 8d 8d 68 ff ff fflea     ecx, [ebp-0x98] {var_9c}Opcode: 8b 55 f4mov     edx, dword [ebp-0xc {var_10}]Opcode: 8b 75 f0mov     esi, dword [ebp-0x10 {var_14}]Opcode: 89 0c 24mov     dword [esp {var_ec}], ecxOpcode: 89 44 24 04mov     dword [esp+data_4 {var_e8}], eaxOpcode: 89 54 24 08mov     dword [esp+data_8 {var_e4}], edxOpcode: 89 74 24 0cmov     dword [esp+data_c {var_e0}], esiOpcode: e8 22 01 00 00call    sub_8048734Opcode: 90nop     Opcode: 8d 8d 68 ff ff fflea     ecx, [ebp-0x98] {var_9c}Opcode: 89 0c 24mov     dword [esp {var_ec}], ecxOpcode: 89 85 44 ff ff ffmov     dword [ebp-0xbc {var_c0}], eaxOpcode: 89 8d 40 ff ff ffmov     dword [ebp-0xc0 {var_c4}], ecxOpcode: e8 a5 fc ff ffcall    sub_80482d2Opcode: 90nop     Opcode: b9 01 00 00 00mov     ecx, data_1Opcode: 8b 55 e8mov     edx, dword [ebp-0x18 {var_1c}]Opcode: 8b b5 40 ff ff ffmov     esi, dword [ebp-0xc0 {var_c4}]Opcode: 89 34 24mov     dword [esp {var_ec}], esiOpcode: 89 44 24 04mov     dword [esp+data_4 {var_e8}], eaxOpcode: c7 44 24 08 01 00 00 00mov     dword [esp+data_8 {var_e4}], data_1Opcode: 89 54 24 0cmov     dword [esp+data_c {var_e0}], edxOpcode: 89 8d 3c ff ff ffmov     dword [ebp-0xc4 {var_c8}], ecxOpcode: e8 32 0a 00 00call    sub_804908cOpcode: 90nop     Opcode: 8b 4d ecmov     ecx, dword [ebp-0x14 {var_18}]Opcode: 89 0c 24mov     dword [esp {var_ec}], ecxOpcode: 89 85 38 ff ff ffmov     dword [ebp-0xc8 {var_cc}], eaxOpcode: e8 a0 fe ff ffcall    sub_804850cOpcode: 90nop     Opcode: 8b 4d e8mov     ecx, dword [ebp-0x18 {var_1c}]Opcode: 89 0c 24mov     dword [esp {var_ec}], ecxOpcode: 88 85 37 ff ff ffmov     byte [ebp-0xc9 {var_cd}], alOpcode: e8 8e fe ff ffcall    sub_804850cOpcode: 90nop     Opcode: 8d 0d 2e 00 05 08lea     ecx, [data_805002e]  {"passwd"}Opcode: 89 0c 24mov     dword [esp {var_ec}], ecxOpcode: 88 85 36 ff ff ffmov     byte [ebp-0xca {var_ce}], alOpcode: e8 5a 16 00 00call    sub_8049cedOpcode: 90nop     Opcode: 8d 0d 35 03 05 08lea     ecx, [data_8050335]  {"~passwd"}Opcode: 8d 15 2e 00 05 08lea     edx, [data_805002e]  {"passwd"}Opcode: 89 0c 24mov     dword [esp {var_ec}], ecxOpcode: 89 54 24 04mov     dword [esp+data_4 {var_e8}], edxOpcode: 88 85 35 ff ff ffmov     byte [ebp-0xcb {var_cf}], alOpcode: e8 36 12 00 00call    sub_80498e8Opcode: 90nop     Opcode: 88 85 34 ff ff ffmov     byte [ebp-0xcc {var_d0}], alOpcode: e8 55 08 00 00call    sub_8048f13Opcode: 90nop     Opcode: c6 45 fb 01mov     byte [ebp-0x5 {var_9}], 0x1Basic Block 28Opcode: 8d 85 68 ff ff fflea     eax, [ebp-0x98] {var_9c}Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: 89 85 5c ff ff ffmov     dword [ebp-0xa4 {var_a8}], eaxOpcode: e8 7f fe ff ffcall    sub_80482d2Opcode: 90nop     Opcode: b9 01 00 00 00mov     ecx, data_1Opcode: eb 0ajmp     0x8048465Basic Block 29Opcode: 8b 55 e8mov     edx, dword [ebp-0x18 {var_1c}]Opcode: 8b b5 5c ff ff ffmov     esi, dword [ebp-0xa4 {var_a8}]Opcode: 89 34 24mov     dword [esp {var_ec}], esiOpcode: 89 44 24 04mov     dword [esp+data_4 {var_e8}], eaxOpcode: c7 44 24 08 01 00 00 00mov     dword [esp+data_8 {var_e4}], data_1Opcode: 89 54 24 0cmov     dword [esp+data_c {var_e0}], edxOpcode: 89 8d 58 ff ff ffmov     dword [ebp-0xa8 {var_ac}], ecxOpcode: e8 00 0c 00 00call    sub_804908cOpcode: 90nop     Opcode: 8d 8d 68 ff ff fflea     ecx, [ebp-0x98] {var_9c}Opcode: 89 0c 24mov     dword [esp {var_ec}], ecxOpcode: 89 85 54 ff ff ffmov     dword [ebp-0xac {var_b0}], eaxOpcode: e8 31 fe ff ffcall    sub_80482d2Opcode: 90nop     Opcode: 8b 8d 54 ff ff ffmov     ecx, dword [ebp-0xac {var_b0}]Opcode: 39 c1cmp     ecx, eaxOpcode: eb 09jmp     0x80484b5Basic Block 30Opcode: 0f 84 7d 00 00 00je      0x8048538Basic Block 31Opcode: 8d 85 68 ff ff fflea     eax, [ebp-0x98] {var_9c}Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 8c fd ff ffcall    sub_80482d2Opcode: 90nop     Opcode: 2d 01 00 00 00sub     eax, data_1Opcode: 0f be 84 05 68 ff ff ffmovsx   eax, byte [ebp+eax-0x98] {var_4}Opcode: 3d 0a 00 00 00cmp     eax, data_aOpcode: 0f 84 19 4f 00 00je      0x804d478Basic Block 32Opcode: 8b 45 ecmov     eax, dword [ebp-0x14 {var_18}]Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 46 00 00 00call    sub_804850cOpcode: 90nop     Opcode: 8b 4d e8mov     ecx, dword [ebp-0x18 {var_1c}]Opcode: 89 0c 24mov     dword [esp {var_ec}], ecxOpcode: 88 85 53 ff ff ffmov     byte [ebp-0xad {var_b1}], alOpcode: e8 34 00 00 00call    sub_804850cOpcode: 90nop     Opcode: 8d 0d 5c 03 05 08lea     ecx, [data_805035c]  {"Unable to write tmp passwd file"}Opcode: 89 0c 24mov     dword [esp {var_ec}], ecxOpcode: 88 85 52 ff ff ffmov     byte [ebp-0xae {var_b2}], alOpcode: e8 9c fd ff ffcall    sub_8048289Opcode: 90nop     Opcode: 8d 0d 35 03 05 08lea     ecx, [data_8050335]  {"~passwd"}Opcode: 89 0c 24mov     dword [esp {var_ec}], ecxOpcode: e8 f1 17 00 00call    sub_8049cedOpcode: 90nop     Opcode: c6 45 fb 00mov     byte [ebp-0x5 {var_9}], 0x0Opcode: 88 85 51 ff ff ffmov     byte [ebp-0xaf {var_b3}], alOpcode: e9 b7 01 00 00jmp     0x80486c3Basic Block 33Opcode: e9 91 af ff ffjmp     0x804840eBasic Block 34Opcode: 8d 05 05 04 05 08lea     eax, [data_8050405]Opcode: b9 01 00 00 00mov     ecx, data_1Opcode: 8b 55 e8mov     edx, dword [ebp-0x18 {var_1c}]Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: c7 44 24 04 01 00 00 00mov     dword [esp+data_4 {var_e8}], data_1Opcode: c7 44 24 08 01 00 00 00mov     dword [esp+data_8 {var_e4}], data_1Opcode: 89 54 24 0cmov     dword [esp+data_c {var_e0}], edxOpcode: 89 8d 4c ff ff ffmov     dword [ebp-0xb4 {var_b8}], ecxOpcode: e8 fd 0a 00 00call    sub_804908cOpcode: 90nop     Opcode: 3d 01 00 00 00cmp     eax, data_1Opcode: 0f 84 e2 4e 00 00je      0x804d47dBasic Block 35Opcode: eb f9jmp     0x804d478Basic Block 36Opcode: 8b 45 ecmov     eax, dword [ebp-0x14 {var_18}]Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 66 ff ff ffcall    sub_804850cOpcode: 90nop     Opcode: 8b 4d e8mov     ecx, dword [ebp-0x18 {var_1c}]Opcode: 89 0c 24mov     dword [esp {var_ec}], ecxOpcode: 88 85 4b ff ff ffmov     byte [ebp-0xb5 {var_b9}], alOpcode: e8 54 ff ff ffcall    sub_804850cOpcode: 90nop     Opcode: 8d 0d 5c 03 05 08lea     ecx, [data_805035c]  {"Unable to write tmp passwd file"}Opcode: 89 0c 24mov     dword [esp {var_ec}], ecxOpcode: 88 85 4a ff ff ffmov     byte [ebp-0xb6 {var_ba}], alOpcode: e8 bc fc ff ffcall    sub_8048289Opcode: 90nop     Opcode: 8d 0d 35 03 05 08lea     ecx, [data_8050335]  {"~passwd"}Opcode: 89 0c 24mov     dword [esp {var_ec}], ecxOpcode: e8 11 17 00 00call    sub_8049cedOpcode: 90nop     Opcode: c6 45 fb 00mov     byte [ebp-0x5 {var_9}], 0x0Opcode: 88 85 49 ff ff ffmov     byte [ebp-0xb7 {var_bb}], alOpcode: e9 d7 00 00 00jmp     0x80486c3