Function Graph 0Basic Block 0Opcode: 55sub_804bb32:Opcode: 55push    ebpOpcode: 66 0f 7e f8movd    eax, xmm7Opcode: 31 44 24 04xor     dword [esp+0x4 {__return_addr}], eaxOpcode: 89 e5mov     ebp, espOpcode: 56push    esiOpcode: 81 ec e4 00 00 00sub     esp, 0xe4 {var_ec}Opcode: 8b 45 0cmov     eax, dword [ebp+0xc {arg_8}]Opcode: 8b 4d 08mov     ecx, dword [ebp+0x8 {arg_4}]Opcode: 89 4d f4mov     dword [ebp-0xc {var_10}], ecxOpcode: 89 45 f0mov     dword [ebp-0x10 {var_14}], eaxOpcode: 81 7d f4 00 00 00 00cmp     dword [ebp-0xc {var_10}], 0x0Opcode: 0f 85 17 00 00 00jne     0x804bb74Basic Block 1Opcode: 81 7d f0 00 00 00 00cmp     dword [ebp-0x10 {var_14}], 0x0Opcode: 0f 85 17 00 00 00jne     0x804bb98Basic Block 2Opcode: 8d 05 ac 10 05 08lea     eax, [data_80510ac]  {"Invalid username"}Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 67 dc ff ffcall    sub_80497d2Opcode: c6 45 fb 00mov     byte [ebp-0x5 {var_9}], 0x0Opcode: e9 db 03 00 00jmp     0x804bf4fBasic Block 3Opcode: 8d 05 a7 10 05 08lea     eax, [data_80510a7]  {"root"}Opcode: 8b 0d 1c 62 06 08mov     ecx, dword [data_806621c]Opcode: 89 0c 24mov     dword [esp {var_ec}], ecxOpcode: 89 44 24 04mov     dword [esp+0x4 {var_e8}], eaxOpcode: e8 72 48 00 00call    sub_8050422Opcode: 3d 00 00 00 00cmp     eax, 0x0Opcode: 0f 84 17 00 00 00je      0x804bbd2Basic Block 4Opcode: 8d 05 10 11 05 08lea     eax, [data_8051110]  {"Invalid password"}Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 43 dc ff ffcall    sub_80497d2Opcode: c6 45 fb 00mov     byte [ebp-0x5 {var_9}], 0x0Opcode: e9 b7 03 00 00jmp     0x804bf4fBasic Block 5Opcode: 0f b6 45 fbmovzx   eax, byte [ebp-0x5 {var_9}]Opcode: 81 c4 e4 00 00 00add     esp, 0xe4 {var_8}Opcode: 5epop     esiOpcode: 5dpop     ebpOpcode: 66 0f 7e f9movd    ecx, xmm7Opcode: 31 0c 24xor     dword [esp {__return_addr}], ecxOpcode: c3retn    Basic Block 6Opcode: 8b 45 f4mov     eax, dword [ebp-0xc {var_10}]Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 f5 43 00 00call    sub_804ffd2Opcode: 3d 20 00 00 00cmp     eax, 0x20Opcode: 0f 86 17 00 00 00jbe     0x804bbffBasic Block 7Opcode: 8d 05 9f 10 05 08lea     eax, [data_805109f]  {"Must be root"}Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 09 dc ff ffcall    sub_80497d2Opcode: c6 45 fb 00mov     byte [ebp-0x5 {var_9}], 0x0Opcode: e9 7d 03 00 00jmp     0x804bf4fBasic Block 8Opcode: 8b 45 f0mov     eax, dword [ebp-0x10 {var_14}]Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 c8 43 00 00call    sub_804ffd2Opcode: 3d 20 00 00 00cmp     eax, 0x20Opcode: 0f 86 17 00 00 00jbe     0x804bc2cBasic Block 9Opcode: 8d 05 ac 10 05 08lea     eax, [data_80510ac]  {"Invalid username"}Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 dc db ff ffcall    sub_80497d2Opcode: c6 45 fb 00mov     byte [ebp-0x5 {var_9}], 0x0Opcode: e9 50 03 00 00jmp     0x804bf4fBasic Block 10Opcode: 8b 45 f4mov     eax, dword [ebp-0xc {var_10}]Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 5b fd ff ffcall    sub_804b992Opcode: 3c 00cmp     al, 0x0Opcode: 0f 84 17 00 00 00je      0x804bc56Basic Block 11Opcode: 8d 05 10 11 05 08lea     eax, [data_8051110]  {"Invalid password"}Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 af db ff ffcall    sub_80497d2Opcode: c6 45 fb 00mov     byte [ebp-0x5 {var_9}], 0x0Opcode: e9 23 03 00 00jmp     0x804bf4fBasic Block 12Opcode: 8d 05 2e 0e 05 08lea     eax, [data_8050e2e]  {"passwd"}Opcode: 8d 0d df 0f 05 08lea     ecx, [data_8050fdf]Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: 89 4c 24 04mov     dword [esp+0x4 {var_e8}], ecxOpcode: e8 34 e6 ff ffcall    sub_804a2a2Opcode: 89 45 ecmov     dword [ebp-0x14 {var_18}], eaxOpcode: 3d 00 00 00 00cmp     eax, 0x0Opcode: 0f 85 17 00 00 00jne     0x804bc93Basic Block 13Opcode: 8d 05 21 11 05 08lea     eax, [data_8051121]  {"User already exists"}Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 85 db ff ffcall    sub_80497d2Opcode: c6 45 fb 00mov     byte [ebp-0x5 {var_9}], 0x0Opcode: e9 f9 02 00 00jmp     0x804bf4fBasic Block 14Opcode: 8d 05 35 11 05 08lea     eax, [data_8051135]  {"~passwd"}Opcode: 8d 0d 28 0e 05 08lea     ecx, [data_8050e28]Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: 89 4c 24 04mov     dword [esp+0x4 {var_e8}], ecxOpcode: e8 f7 e5 ff ffcall    sub_804a2a2Opcode: 89 45 e8mov     dword [ebp-0x18 {var_1c}], eaxOpcode: 3d 00 00 00 00cmp     eax, 0x0Opcode: 0f 85 28 00 00 00jne     0x804bce1Basic Block 15Opcode: 8d 05 d3 10 05 08lea     eax, [data_80510d3]  {"Unable to open passwd file"}Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 48 db ff ffcall    sub_80497d2Opcode: c6 45 fb 00mov     byte [ebp-0x5 {var_9}], 0x0Opcode: e9 bc 02 00 00jmp     0x804bf4fBasic Block 16Opcode: e9 00 00 00 00jmp     0x804bce6Basic Block 17Opcode: 8d 05 3d 11 05 08lea     eax, [data_805113d]  {"Unable to open tmp passwd file"}Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 0b db ff ffcall    sub_80497d2Opcode: 8b 45 ecmov     eax, dword [ebp-0x14 {var_18}]Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 00 eb ff ffcall    sub_804a7d2Opcode: c6 45 fb 00mov     byte [ebp-0x5 {var_9}], 0x0Opcode: 88 85 67 ff ff ffmov     byte [ebp-0x99 {var_9d}], alOpcode: e9 6e 02 00 00jmp     0x804bf4fBasic Block 18Opcode: b8 7f 00 00 00mov     eax, 0x7fOpcode: 8d 8d 68 ff ff fflea     ecx, [ebp-0x98] {var_9c}Opcode: 8b 55 ecmov     edx, dword [ebp-0x14 {var_18}]Opcode: 89 0c 24mov     dword [esp {var_ec}], ecxOpcode: c7 44 24 04 7f 00 00 00mov     dword [esp+0x4 {var_e8}], 0x7fOpcode: 89 54 24 08mov     dword [esp+0x8 {var_e4}], edxOpcode: 89 85 60 ff ff ffmov     dword [ebp-0xa0 {var_a4}], eaxOpcode: e8 44 ee ff ffcall    sub_804ab52Opcode: 3d 00 00 00 00cmp     eax, 0x0Opcode: 0f 84 67 01 00 00je      0x804be80Basic Block 19Opcode: 8d 05 7c 11 05 08lea     eax, [data_805117c]  {"$s:$s"}Opcode: 8d 8d 68 ff ff fflea     ecx, [ebp-0x98] {var_9c}Opcode: 8b 55 f4mov     edx, dword [ebp-0xc {var_10}]Opcode: 8b 75 f0mov     esi, dword [ebp-0x10 {var_14}]Opcode: 89 0c 24mov     dword [esp {var_ec}], ecxOpcode: 89 44 24 04mov     dword [esp+0x4 {var_e8}], eaxOpcode: 89 54 24 08mov     dword [esp+0x8 {var_e4}], edxOpcode: 89 74 24 0cmov     dword [esp+0xc {var_e0}], esiOpcode: e8 8c 25 00 00call    sub_804e432Opcode: 8d 8d 68 ff ff fflea     ecx, [ebp-0x98] {var_9c}Opcode: 89 0c 24mov     dword [esp {var_ec}], ecxOpcode: 89 85 44 ff ff ffmov     dword [ebp-0xbc {var_c0}], eaxOpcode: 89 8d 40 ff ff ffmov     dword [ebp-0xc0 {var_c4}], ecxOpcode: e8 12 41 00 00call    sub_804ffd2Opcode: b9 01 00 00 00mov     ecx, 0x1Opcode: 8b 55 e8mov     edx, dword [ebp-0x18 {var_1c}]Opcode: 8b b5 40 ff ff ffmov     esi, dword [ebp-0xc0 {var_c4}]Opcode: 89 34 24mov     dword [esp {var_ec}], esiOpcode: 89 44 24 04mov     dword [esp+0x4 {var_e8}], eaxOpcode: c7 44 24 08 01 00 00 00mov     dword [esp+0x8 {var_e4}], 0x1Opcode: 89 54 24 0cmov     dword [esp+0xc {var_e0}], edxOpcode: 89 8d 3c ff ff ffmov     dword [ebp-0xc4 {var_c8}], ecxOpcode: e8 06 eb ff ffcall    sub_804a9f2Opcode: 8b 4d ecmov     ecx, dword [ebp-0x14 {var_18}]Opcode: 89 0c 24mov     dword [esp {var_ec}], ecxOpcode: 89 85 38 ff ff ffmov     dword [ebp-0xc8 {var_cc}], eaxOpcode: e8 d5 e8 ff ffcall    sub_804a7d2Opcode: 8b 4d e8mov     ecx, dword [ebp-0x18 {var_1c}]Opcode: 89 0c 24mov     dword [esp {var_ec}], ecxOpcode: 88 85 37 ff ff ffmov     byte [ebp-0xc9 {var_cd}], alOpcode: e8 c4 e8 ff ffcall    sub_804a7d2Opcode: 8d 0d 2e 0e 05 08lea     ecx, [data_8050e2e]  {"passwd"}Opcode: 89 0c 24mov     dword [esp {var_ec}], ecxOpcode: 88 85 36 ff ff ffmov     byte [ebp-0xca {var_ce}], alOpcode: e8 00 f3 ff ffcall    sub_804b222Opcode: 8d 0d 35 11 05 08lea     ecx, [data_8051135]  {"~passwd"}Opcode: 8d 15 2e 0e 05 08lea     edx, [data_8050e2e]  {"passwd"}Opcode: 89 0c 24mov     dword [esp {var_ec}], ecxOpcode: 89 54 24 04mov     dword [esp+0x4 {var_e8}], edxOpcode: 88 85 35 ff ff ffmov     byte [ebp-0xcb {var_cf}], alOpcode: e8 64 f5 ff ffcall    sub_804b4a4Opcode: 88 85 34 ff ff ffmov     byte [ebp-0xcc {var_d0}], alOpcode: e8 e7 d8 ff ffcall    sub_8049832Opcode: c6 45 fb 01mov     byte [ebp-0x5 {var_9}], 0x1Basic Block 20Opcode: 8d 85 68 ff ff fflea     eax, [ebp-0x98] {var_9c}Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: 89 85 5c ff ff ffmov     dword [ebp-0xa4 {var_a8}], eaxOpcode: e8 a5 42 00 00call    sub_804ffd2Opcode: b9 01 00 00 00mov     ecx, 0x1Opcode: 8b 55 e8mov     edx, dword [ebp-0x18 {var_1c}]Opcode: 8b b5 5c ff ff ffmov     esi, dword [ebp-0xa4 {var_a8}]Opcode: 89 34 24mov     dword [esp {var_ec}], esiOpcode: 89 44 24 04mov     dword [esp+0x4 {var_e8}], eaxOpcode: c7 44 24 08 01 00 00 00mov     dword [esp+0x8 {var_e4}], 0x1Opcode: 89 54 24 0cmov     dword [esp+0xc {var_e0}], edxOpcode: 89 8d 58 ff ff ffmov     dword [ebp-0xa8 {var_ac}], ecxOpcode: e8 99 ec ff ffcall    sub_804a9f2Opcode: 8d 8d 68 ff ff fflea     ecx, [ebp-0x98] {var_9c}Opcode: 89 0c 24mov     dword [esp {var_ec}], ecxOpcode: 89 85 54 ff ff ffmov     dword [ebp-0xac {var_b0}], eaxOpcode: e8 65 42 00 00call    sub_804ffd2Opcode: 8b 8d 54 ff ff ffmov     ecx, dword [ebp-0xac {var_b0}]Opcode: 39 c1cmp     ecx, eaxOpcode: 0f 84 4d 00 00 00je      0x804bdc8Basic Block 21Opcode: 8d 85 68 ff ff fflea     eax, [ebp-0x98] {var_9c}Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 fc 41 00 00call    sub_804ffd2Opcode: 2d 01 00 00 00sub     eax, 0x1Opcode: 0f be 84 05 68 ff ff ffmovsx   eax, byte [ebp+eax-0x98] {var_4}Opcode: 3d 0a 00 00 00cmp     eax, 0xaOpcode: 0f 84 8d 00 00 00je      0x804be7bBasic Block 22Opcode: 8b 45 ecmov     eax, dword [ebp-0x14 {var_18}]Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 4c ea ff ffcall    sub_804a7d2Opcode: 8b 4d e8mov     ecx, dword [ebp-0x18 {var_1c}]Opcode: 89 0c 24mov     dword [esp {var_ec}], ecxOpcode: 88 85 53 ff ff ffmov     byte [ebp-0xad {var_b1}], alOpcode: e8 3b ea ff ffcall    sub_804a7d2Opcode: 8d 0d 5c 11 05 08lea     ecx, [data_805115c]  {"Unable to write tmp passwd file"}Opcode: 89 0c 24mov     dword [esp {var_ec}], ecxOpcode: 88 85 52 ff ff ffmov     byte [ebp-0xae {var_b2}], alOpcode: e8 27 da ff ffcall    sub_80497d2Opcode: 8d 0d 35 11 05 08lea     ecx, [data_8051135]  {"~passwd"}Opcode: 89 0c 24mov     dword [esp {var_ec}], ecxOpcode: e8 69 f4 ff ffcall    sub_804b222Opcode: c6 45 fb 00mov     byte [ebp-0x5 {var_9}], 0x0Opcode: 88 85 51 ff ff ffmov     byte [ebp-0xaf {var_b3}], alOpcode: e9 87 01 00 00jmp     0x804bf4fBasic Block 23Opcode: e9 66 fe ff ffjmp     0x804bce6Basic Block 24Opcode: 8d 05 05 12 05 08lea     eax, [data_8051205]Opcode: b9 01 00 00 00mov     ecx, 0x1Opcode: 8b 55 e8mov     edx, dword [ebp-0x18 {var_1c}]Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: c7 44 24 04 01 00 00 00mov     dword [esp+0x4 {var_e8}], 0x1Opcode: c7 44 24 08 01 00 00 00mov     dword [esp+0x8 {var_e4}], 0x1Opcode: 89 54 24 0cmov     dword [esp+0xc {var_e0}], edxOpcode: 89 8d 4c ff ff ffmov     dword [ebp-0xb4 {var_b8}], ecxOpcode: e8 d4 eb ff ffcall    sub_804a9f2Opcode: 3d 01 00 00 00cmp     eax, 0x1Opcode: 0f 84 4d 00 00 00je      0x804be76Basic Block 25Opcode: e9 00 00 00 00jmp     0x804be7bBasic Block 26Opcode: 8b 45 ecmov     eax, dword [ebp-0x14 {var_18}]Opcode: 89 04 24mov     dword [esp {var_ec}], eaxOpcode: e8 9e e9 ff ffcall    sub_804a7d2Opcode: 8b 4d e8mov     ecx, dword [ebp-0x18 {var_1c}]Opcode: 89 0c 24mov     dword [esp {var_ec}], ecxOpcode: 88 85 4b ff ff ffmov     byte [ebp-0xb5 {var_b9}], alOpcode: e8 8d e9 ff ffcall    sub_804a7d2Opcode: 8d 0d 5c 11 05 08lea     ecx, [data_805115c]  {"Unable to write tmp passwd file"}Opcode: 89 0c 24mov     dword [esp {var_ec}], ecxOpcode: 88 85 4a ff ff ffmov     byte [ebp-0xb6 {var_ba}], alOpcode: e8 79 d9 ff ffcall    sub_80497d2Opcode: 8d 0d 35 11 05 08lea     ecx, [data_8051135]  {"~passwd"}Opcode: 89 0c 24mov     dword [esp {var_ec}], ecxOpcode: e8 bb f3 ff ffcall    sub_804b222Opcode: c6 45 fb 00mov     byte [ebp-0x5 {var_9}], 0x0Opcode: 88 85 49 ff ff ffmov     byte [ebp-0xb7 {var_bb}], alOpcode: e9 d9 00 00 00jmp     0x804bf4f