Function Graph 0Basic Block 0Opcode: 55sub_804a3a7:Opcode: 55push    ebpOpcode: 89 e5mov     ebp, espOpcode: 53push    ebxOpcode: 57push    ediOpcode: 56push    esiOpcode: 83 ec 3csub     esp, 0x3c {var_4c}Opcode: 8b 45 0cmov     eax, dword [ebp+0xc {arg_8}]Opcode: 8b 4d 08mov     ecx, dword [ebp+0x8 {arg_4}]Opcode: 89 4d f0mov     dword [ebp-0x10 {var_14}], ecxOpcode: 89 45 ecmov     dword [ebp-0x14 {var_18}], eaxOpcode: 8b 45 f0mov     eax, dword [ebp-0x10 {var_14}]Opcode: 83 7d ec 00cmp     dword [ebp-0x14 {var_18}], 0x0Opcode: 89 45 ccmov     dword [ebp-0x34 {var_38}], eaxOpcode: 75 05jne     0x804a3cdBasic Block 1Opcode: c6 45 eb 00mov     byte [ebp-0x15 {var_19}], 0x0Opcode: c6 45 eb 00mov     byte [ebp-0x15 {var_19}], 0x0Basic Block 2Opcode: e9 b4 03 00 00jmp     0x804a781Basic Block 3Opcode: 83 c4 3cadd     esp, 0x3c {var_10}Opcode: 5epop     esiOpcode: 5fpop     ediOpcode: 5bpop     ebxOpcode: 5dpop     ebpOpcode: a3 f8 36 05 08mov     dword [data_80536f8], eaxOpcode: 89 15 fc 36 05 08mov     dword [data_80536fc], edxOpcode: 8b 04 24mov     eax, dword [esp {__return_addr}]Opcode: 31 d2xor     edx, edx  {0x0}Opcode: 89 c1mov     ecx, eaxOpcode: f7 35 e4 1c 05 08div     dword [data_8051ce4]Opcode: b8 e8 1c 05 08mov     eax, data_8051ce8Opcode: c1 e2 03shl     edx, 0x3Opcode: 8d 04 10lea     eax, [eax+edx]Basic Block 4Opcode: 0f b6 45 ebmovzx   eax, byte [ebp-0x15 {var_19}]Opcode: 83 f8 04cmp     eax, 0x4Opcode: 72 05jb      0x804a3f6Basic Block 5Opcode: 8b 15 fc 36 05 08mov     edx, dword [data_80536fc]Opcode: a1 f8 36 05 08mov     eax, dword [data_80536f8]Opcode: c3retn    Basic Block 6Opcode: 8b 00mov     eax, dword [eax]Opcode: 83 f8 00cmp     eax, 0x0Opcode: 0f 84 e3 d8 ff ffje      0x80480a0Basic Block 7Opcode: 8b 45 ccmov     eax, dword [ebp-0x34 {var_38}]Opcode: 8a 48 3dmov     cl, byte [eax+0x3d]Opcode: 88 4d eamov     byte [ebp-0x16 {var_1a}], clOpcode: c6 45 e9 00mov     byte [ebp-0x17 {var_1b}], 0x0Opcode: c7 45 e4 00 00 00 00mov     dword [ebp-0x1c {var_20}], 0x0Opcode: c7 45 e4 00 00 00 00mov     dword [ebp-0x1c {var_20}], 0x0Basic Block 8Opcode: e9 8b 03 00 00jmp     0x804a781Basic Block 9Opcode: b8 01 00 00 00mov     eax, 0x1Opcode: bb ad 00 00 00mov     ebx, 0xadOpcode: cd 80int     0x80Opcode: cd 80{ Does not return }Basic Block 10Opcode: eb ecjmp     0x804a7abBasic Block 11Opcode: f6 45 e9 01test    byte [ebp-0x17 {var_1b}], 0x1Opcode: 0f 84 08 03 00 00je      0x804a769Basic Block 12Opcode: 0f b6 45 eamovzx   eax, byte [ebp-0x16 {var_1a}]Opcode: 83 f8 05cmp     eax, 0x5Opcode: 72 04jb      0x804a424Basic Block 13Opcode: 3b 08cmp     ecx, dword [eax]Opcode: 8d 40 04lea     eax, [eax+0x4]Opcode: 74 0dje      0x804a7bfBasic Block 14Opcode: 8b 45 ccmov     eax, dword [ebp-0x34 {var_38}]Opcode: c6 40 3d 00mov     byte [eax+0x3d], 0x0Opcode: eb 0fjmp     0x804a781Basic Block 15Opcode: 0f b6 45 eamovzx   eax, byte [ebp-0x16 {var_1a}]Opcode: 6b c0 0cimul    eax, eax, 0xcOpcode: 8b 4d ccmov     ecx, dword [ebp-0x34 {var_38}]Opcode: 01 c1add     ecx, eaxOpcode: 89 0c 24mov     dword [esp {var_4c}], ecxOpcode: e8 0e 04 00 00call    sub_804a883Opcode: 88 45 e3mov     byte [ebp-0x1d {var_21}], alOpcode: 0f b6 4d eamovzx   ecx, byte [ebp-0x16 {var_1a}]Opcode: 6b c9 0cimul    ecx, ecx, 0xcOpcode: 8b 55 ccmov     edx, dword [ebp-0x34 {var_38}]Opcode: 01 caadd     edx, ecxOpcode: 89 14 24mov     dword [esp {var_4c}], edxOpcode: e8 0d 04 00 00call    sub_804a899Opcode: 66 89 45 e0mov     word [ebp-0x20 {var_24}], axOpcode: 0f b6 4d eamovzx   ecx, byte [ebp-0x16 {var_1a}]Opcode: 6b c9 0cimul    ecx, ecx, 0xcOpcode: 8b 55 ccmov     edx, dword [ebp-0x34 {var_38}]Opcode: 01 caadd     edx, ecxOpcode: 89 14 24mov     dword [esp {var_4c}], edxOpcode: e8 0b 04 00 00call    sub_804a8afOpcode: 66 89 45 demov     word [ebp-0x22 {var_26}], axOpcode: 0f b6 4d eamovzx   ecx, byte [ebp-0x16 {var_1a}]Opcode: 6b c9 0cimul    ecx, ecx, 0xcOpcode: 8b 55 ccmov     edx, dword [ebp-0x34 {var_38}]Opcode: 01 caadd     edx, ecxOpcode: 89 14 24mov     dword [esp {var_4c}], edxOpcode: e8 09 04 00 00call    sub_804a8c5Opcode: 66 89 45 dcmov     word [ebp-0x24 {var_28}], axOpcode: 0f b6 4d eamovzx   ecx, byte [ebp-0x16 {var_1a}]Opcode: 6b c9 0cimul    ecx, ecx, 0xcOpcode: 8b 55 ccmov     edx, dword [ebp-0x34 {var_38}]Opcode: 01 caadd     edx, ecxOpcode: 89 14 24mov     dword [esp {var_4c}], edxOpcode: e8 07 04 00 00call    sub_804a8dbOpcode: 89 45 d8mov     dword [ebp-0x28 {var_2c}], eaxOpcode: 0f b7 45 demovzx   eax, word [ebp-0x22 {var_26}]Opcode: 0f b7 4d dcmovzx   ecx, word [ebp-0x24 {var_28}]Opcode: 29 c8sub     eax, ecxOpcode: 89 45 d4mov     dword [ebp-0x2c {var_30}], eaxOpcode: 83 7d d4 04cmp     dword [ebp-0x2c {var_30}], 0x4Opcode: 76 07jbe     0x804a4f1Basic Block 16Opcode: 0f b6 45 eamovzx   eax, byte [ebp-0x16 {var_1a}]Opcode: 6b c0 0cimul    eax, eax, 0xcOpcode: 8b 4d ccmov     ecx, dword [ebp-0x34 {var_38}]Opcode: 01 c1add     ecx, eaxOpcode: 89 0c 24mov     dword [esp {var_4c}], ecxOpcode: e8 2d 04 00 00call    sub_804a865Opcode: a8 01test    al, 0x1Opcode: 75 02jne     0x804a43eBasic Block 17Opcode: c6 45 ea 00mov     byte [ebp-0x16 {var_1a}], 0x0Basic Block 18Opcode: 83 7d d4 00cmp     dword [ebp-0x2c {var_30}], 0x0Opcode: 75 22jne     0x804a519Basic Block 19Opcode: c7 45 d4 04 00 00 00mov     dword [ebp-0x2c {var_30}], 0x4Basic Block 20Opcode: c6 45 e9 01mov     byte [ebp-0x17 {var_1b}], 0x1Opcode: eb 13jmp     0x804a457Basic Block 21Opcode: eb 06jmp     0x804a444Basic Block 22Opcode: 0f b6 45 e3movzx   eax, byte [ebp-0x1d {var_21}]Opcode: 8b 4d ccmov     ecx, dword [ebp-0x34 {var_38}]Opcode: 83 7c 81 40 00cmp     dword [ecx+eax*4+0x40], 0x0Opcode: 0f 84 09 02 00 00je      0x804a734Basic Block 23Opcode: 8b 45 ccmov     eax, dword [ebp-0x34 {var_38}]Opcode: 8a 48 3cmov     cl, byte [eax+0x3c]Opcode: 80 c1 ffadd     cl, 0xffOpcode: 88 48 3cmov     byte [eax+0x3c], clOpcode: 0f b6 55 eamovzx   edx, byte [ebp-0x16 {var_1a}]Opcode: 6b d2 0cimul    edx, edx, 0xcOpcode: 01 d0add     eax, edxOpcode: 89 04 24mov     dword [esp {var_4c}], eaxOpcode: e8 de 02 00 00call    sub_804a7f2Opcode: e9 3d 02 00 00jmp     0x804a756Basic Block 24Opcode: 8a 45 eamov     al, byte [ebp-0x16 {var_1a}]Opcode: 04 01add     al, 0x1Opcode: 88 45 eamov     byte [ebp-0x16 {var_1a}], alOpcode: 8b 45 e4mov     eax, dword [ebp-0x1c {var_20}]Opcode: 83 c0 01add     eax, 0x1Opcode: 89 45 e4mov     dword [ebp-0x1c {var_20}], eaxOpcode: eb bajmp     0x804a411Basic Block 25Opcode: 0f b6 45 eamovzx   eax, byte [ebp-0x16 {var_1a}]Opcode: 6b c0 0cimul    eax, eax, 0xcOpcode: 8b 4d ccmov     ecx, dword [ebp-0x34 {var_38}]Opcode: 01 c1add     ecx, eaxOpcode: 89 0c 24mov     dword [esp {var_4c}], ecxOpcode: e8 aa 00 00 00call    sub_804a7f2Opcode: 8b 45 ccmov     eax, dword [ebp-0x34 {var_38}]Opcode: 8a 50 3cmov     dl, byte [eax+0x3c]Opcode: 80 c2 ffadd     dl, 0xffOpcode: 88 50 3cmov     byte [eax+0x3c], dlBasic Block 26Opcode: 83 7d d8 01cmp     dword [ebp-0x28 {var_2c}], 0x1Opcode: 0f 85 d7 00 00 00jne     0x804a60cBasic Block 27Opcode: 8a 45 eamov     al, byte [ebp-0x16 {var_1a}]Opcode: 88 c1mov     cl, alOpcode: 80 c1 01add     cl, 0x1Opcode: 88 4d eamov     byte [ebp-0x16 {var_1a}], clOpcode: 8b 55 ccmov     edx, dword [ebp-0x34 {var_38}]Opcode: 88 42 3dmov     byte [edx+0x3d], alOpcode: eb 09jmp     0x804a772Basic Block 28Opcode: 83 7d e4 05cmp     dword [ebp-0x1c {var_20}], 0x5Opcode: 73 40jae     0x804a457Basic Block 29Opcode: 8d 45 d0lea     eax, [ebp-0x30] {var_34}Opcode: 8b 4d ecmov     ecx, dword [ebp-0x14 {var_18}]Opcode: 0f b7 55 e0movzx   edx, word [ebp-0x20 {var_24}]Opcode: 0f b7 75 dcmovzx   esi, word [ebp-0x24 {var_28}]Opcode: 01 f2add     edx, esiOpcode: 66 89 d7mov     di, dxOpcode: 8b 55 d4mov     edx, dword [ebp-0x2c {var_30}]Opcode: 66 89 d3mov     bx, dxOpcode: 89 0c 24mov     dword [esp {var_4c}], ecxOpcode: 0f b7 cfmovzx   ecx, diOpcode: 89 4c 24 04mov     dword [esp+0x4 {var_48}], ecxOpcode: 89 44 24 08mov     dword [esp+0x8 {var_44}], eaxOpcode: 0f b7 c3movzx   eax, bxOpcode: 89 44 24 0cmov     dword [esp+0xc {var_40}], eaxOpcode: e8 c2 07 00 00call    sub_804ae01Opcode: a8 01test    al, 0x1Opcode: 75 05jne     0x804a648Basic Block 30Opcode: 8d 45 d0lea     eax, [ebp-0x30] {var_34}Opcode: 0f b6 4d e3movzx   ecx, byte [ebp-0x1d {var_21}]Opcode: 8b 55 ccmov     edx, dword [ebp-0x34 {var_38}]Opcode: 8b 4c 8a 40mov     ecx, dword [edx+ecx*4+0x40]Opcode: 8b 31mov     esi, dword [ecx]Opcode: 8b 76 0cmov     esi, dword [esi+0xc]Opcode: 8b 7d d4mov     edi, dword [ebp-0x2c {var_30}]Opcode: 66 89 fbmov     bx, diOpcode: 89 0c 24mov     dword [esp {var_4c}], ecxOpcode: 89 44 24 04mov     dword [esp+0x4 {var_48}], eaxOpcode: 0f b7 c3movzx   eax, bxOpcode: 89 44 24 08mov     dword [esp+0x8 {var_44}], eaxOpcode: a3 f8 36 05 08mov     dword [data_80536f8], eaxOpcode: 9flahf    Opcode: 89 15 fc 36 05 08mov     dword [data_80536fc], edxOpcode: 89 0d 00 37 05 08mov     dword [data_8053700], ecxOpcode: 88 25 04 37 05 08mov     byte [data_8053704], ahOpcode: a1 f8 36 05 08mov     eax, dword [data_80536f8]Opcode: 89 f2mov     edx, esiOpcode: f6 05 06 37 05 08 01test    byte [data_8053706], 0x1Opcode: 74 11je      0x804a595Basic Block 31Opcode: eb 00jmp     0x804a774Basic Block 32Opcode: 8d 45 d0lea     eax, [ebp-0x30] {var_34}Opcode: 0f b6 4d e3movzx   ecx, byte [ebp-0x1d {var_21}]Opcode: 8b 55 ccmov     edx, dword [ebp-0x34 {var_38}]Opcode: 8b 4c 8a 40mov     ecx, dword [edx+ecx*4+0x40]Opcode: 8b 31mov     esi, dword [ecx]Opcode: 8b 76 10mov     esi, dword [esi+0x10]Opcode: 8b 7d d4mov     edi, dword [ebp-0x2c {var_30}]Opcode: 66 89 fbmov     bx, diOpcode: 89 0c 24mov     dword [esp {var_4c}], ecxOpcode: 89 44 24 04mov     dword [esp+0x4 {var_48}], eaxOpcode: 0f b7 c3movzx   eax, bxOpcode: 89 44 24 08mov     dword [esp+0x8 {var_44}], eaxOpcode: a3 f8 36 05 08mov     dword [data_80536f8], eaxOpcode: 9flahf    Opcode: 89 15 fc 36 05 08mov     dword [data_80536fc], edxOpcode: 89 0d 00 37 05 08mov     dword [data_8053700], ecxOpcode: 88 25 04 37 05 08mov     byte [data_8053704], ahOpcode: a1 f8 36 05 08mov     eax, dword [data_80536f8]Opcode: 89 f2mov     edx, esiOpcode: f6 05 06 37 05 08 01test    byte [data_8053706], 0x1Opcode: 74 11je      0x804a6a8Basic Block 33Opcode: e9 99 00 00 00jmp     0x804a6e1Basic Block 34Opcode: 8d 0d d0 1c 05 08lea     ecx, [data_8051cd0]Basic Block 35Opcode: a1 08 37 05 08mov     eax, dword [data_8053708]Opcode: 39 c2cmp     edx, eaxOpcode: 77 08ja      0x804a595Basic Block 36Opcode: 8a 45 ebmov     al, byte [ebp-0x15 {var_19}]Opcode: 04 01add     al, 0x1Opcode: 88 45 ebmov     byte [ebp-0x15 {var_19}], alOpcode: e9 54 fc ff ffjmp     0x804a3d5Basic Block 37Opcode: 8d 0d d0 1c 05 08lea     ecx, [data_8051cd0]Basic Block 38Opcode: a1 08 37 05 08mov     eax, dword [data_8053708]Opcode: 39 c2cmp     edx, eaxOpcode: 77 08ja      0x804a6a8Basic Block 39Opcode: eb 00jmp     0x804a6e3Basic Block 40Opcode: 39 c2cmp     edx, eaxOpcode: 72 efjb      0x804a59bBasic Block 41Opcode: 3b 15 0c 37 05 08cmp     edx, dword [data_805370c]Opcode: 72 1cjb      0x804a5b1Basic Block 42Opcode: 0f b6 45 ebmovzx   eax, byte [ebp-0x15 {var_19}]Opcode: 8b 4d ccmov     ecx, dword [ebp-0x34 {var_38}]Opcode: 0f b6 51 3cmovzx   edx, byte [ecx+0x3c]Opcode: 39 d0cmp     eax, edxOpcode: 0f 8d 99 03 00 00jge     0x804a781Basic Block 43Opcode: 39 c2cmp     edx, eaxOpcode: 72 efjb      0x804a6aeBasic Block 44Opcode: 3b 15 0c 37 05 08cmp     edx, dword [data_805370c]Opcode: 72 1cjb      0x804a6c4Basic Block 45Opcode: 0f b7 45 dcmovzx   eax, word [ebp-0x24 {var_28}]Opcode: 03 45 d4add     eax, dword [ebp-0x2c {var_30}]Opcode: 0f b7 4d demovzx   ecx, word [ebp-0x22 {var_26}]Opcode: 39 c8cmp     eax, ecxOpcode: 72 1fjb      0x804a711Basic Block 46Opcode: 8b 01mov     eax, dword [ecx]Opcode: 8d 49 08lea     ecx, [ecx+0x8]Opcode: 85 c0test    eax, eaxOpcode: 0f 84 f8 da ff ffje      0x80480a0Basic Block 47Opcode: 3b 51 fccmp     edx, dword [ecx-0x4]Opcode: 73 eajae     0x804a59bBasic Block 48Opcode: 8a 25 04 37 05 08mov     ah, byte [data_8053704]Opcode: 8b 15 fc 36 05 08mov     edx, dword [data_80536fc]Opcode: 8b 0d 00 37 05 08mov     ecx, dword [data_8053700]Opcode: 9esahf    Opcode: a1 f8 36 05 08mov     eax, dword [data_80536f8]Opcode: ff d6call    esiOpcode: a8 01test    al, 0x1Opcode: 75 02jne     0x804a5d1Basic Block 49Opcode: 8b 01mov     eax, dword [ecx]Opcode: 8d 49 08lea     ecx, [ecx+0x8]Opcode: 85 c0test    eax, eaxOpcode: 0f 84 e5 d9 ff ffje      0x80480a0Basic Block 50Opcode: 3b 51 fccmp     edx, dword [ecx-0x4]Opcode: 73 eajae     0x804a6aeBasic Block 51Opcode: 8a 25 04 37 05 08mov     ah, byte [data_8053704]Opcode: 8b 15 fc 36 05 08mov     edx, dword [data_80536fc]Opcode: 8b 0d 00 37 05 08mov     ecx, dword [data_8053700]Opcode: 9esahf    Opcode: a1 f8 36 05 08mov     eax, dword [data_80536f8]Opcode: ff d6call    esiOpcode: 88 45 camov     byte [ebp-0x36 {var_3a}], alBasic Block 52Opcode: 0f b6 45 eamovzx   eax, byte [ebp-0x16 {var_1a}]Opcode: 6b c0 0cimul    eax, eax, 0xcOpcode: 8b 4d ccmov     ecx, dword [ebp-0x34 {var_38}]Opcode: 01 c1add     ecx, eaxOpcode: 8b 45 d4mov     eax, dword [ebp-0x2c {var_30}]Opcode: 66 89 c2mov     dx, axOpcode: 89 0c 24mov     dword [esp {var_4c}], ecxOpcode: 0f b7 c2movzx   eax, dxOpcode: 89 44 24 04mov     dword [esp+0x4 {var_48}], eaxOpcode: e8 bd 01 00 00call    sub_804a8efBasic Block 53Opcode: 8b 45 ccmov     eax, dword [ebp-0x34 {var_38}]Opcode: 8a 48 3cmov     cl, byte [eax+0x3c]Opcode: 80 c1 ffadd     cl, 0xffOpcode: 88 48 3cmov     byte [eax+0x3c], clOpcode: 0f b6 55 eamovzx   edx, byte [ebp-0x16 {var_1a}]Opcode: 6b d2 0cimul    edx, edx, 0xcOpcode: 01 d0add     eax, edxOpcode: 89 04 24mov     dword [esp {var_4c}], eaxOpcode: e8 e3 00 00 00call    sub_804a7f2Opcode: eb 21jmp     0x804a732Basic Block 54Opcode: 8d 45 d0lea     eax, [ebp-0x30] {var_34}Opcode: 8b 4d ecmov     ecx, dword [ebp-0x14 {var_18}]Opcode: 0f b7 55 e0movzx   edx, word [ebp-0x20 {var_24}]Opcode: 0f b7 75 dcmovzx   esi, word [ebp-0x24 {var_28}]Opcode: 01 f2add     edx, esiOpcode: 66 89 d7mov     di, dxOpcode: 8b 55 d4mov     edx, dword [ebp-0x2c {var_30}]Opcode: 66 89 d3mov     bx, dxOpcode: 89 0c 24mov     dword [esp {var_4c}], ecxOpcode: 0f b7 cfmovzx   ecx, diOpcode: 89 4c 24 04mov     dword [esp+0x4 {var_48}], ecxOpcode: 89 44 24 08mov     dword [esp+0x8 {var_44}], eaxOpcode: 0f b7 c3movzx   eax, bxOpcode: 89 44 24 0cmov     dword [esp+0xc {var_40}], eaxOpcode: e8 70 09 00 00call    sub_804af74Opcode: 88 45 cbmov     byte [ebp-0x35 {var_39}], alBasic Block 55Opcode: eb 36jmp     0x804a607Basic Block 56Opcode: eb 00jmp     0x804a756Basic Block 57Opcode: eb 20jmp     0x804a754Basic Block 58Opcode: e9 d7 00 00 00jmp     0x804a6e3