Function Graph 0Basic Block 0Opcode: 55sub_804a720:Opcode: 55push    ebpOpcode: 89 e5mov     ebp, espOpcode: 83 ec 38sub     esp, 0x38 {var_3c}Opcode: 8b 45 0cmov     eax, dword [ebp+0xc {arg_8}]Opcode: 8b 4d 08mov     ecx, dword [ebp+0x8 {arg_4}]Opcode: 89 4d fcmov     dword [ebp-0x4 {var_8}], ecxOpcode: 89 45 f8mov     dword [ebp-0x8 {var_c}], eaxOpcode: 8b 45 f8mov     eax, dword [ebp-0x8 {var_c}]Opcode: 89 45 f4mov     dword [ebp-0xc {var_10}], eaxOpcode: 8b 45 f4mov     eax, dword [ebp-0xc {var_10}]Opcode: 83 e8 08sub     eax, 0x8Opcode: 89 45 f0mov     dword [ebp-0x10 {var_14}], eaxOpcode: 8b 45 f4mov     eax, dword [ebp-0xc {var_10}]Opcode: 25 00 00 f0 ffand     eax, 0xfff00000Opcode: 89 45 e4mov     dword [ebp-0x1c {var_20}], eaxOpcode: 8b 45 f4mov     eax, dword [ebp-0xc {var_10}]Opcode: 83 e0 07and     eax, 0x7Opcode: 83 f8 00cmp     eax, 0x0Opcode: 74 15je      0x804a76cBasic Block 1Opcode: 8b 45 f0mov     eax, dword [ebp-0x10 {var_14}]Opcode: 8b 40 04mov     eax, dword [eax+0x4]Opcode: 83 e0 01and     eax, 0x1Opcode: 83 f8 00cmp     eax, 0x0Opcode: 74 15je      0x804a78fBasic Block 2Opcode: 8d 05 cb d0 04 08lea     eax, [data_804d0cb]  {"BAD SMALL FREE: address is not a…"}Opcode: 8b 4d f4mov     ecx, dword [ebp-0xc {var_10}]Opcode: 89 04 24mov     dword [esp {var_3c}], eaxOpcode: 89 4c 24 04mov     dword [esp+0x4 {var_38}], ecxOpcode: e8 54 04 00 00call    sub_804abc0Opcode: e8 54 04 00 00{ Does not return }Basic Block 3Opcode: 8b 45 f0mov     eax, dword [ebp-0x10 {var_14}]Opcode: 81 78 04 00 00 02 00cmp     dword [eax+0x4], 0x20000Opcode: 77 09ja      0x804a7a4Basic Block 4Opcode: 8d 05 fc d0 04 08lea     eax, [data_804d0fc]  {"BAD SMALL FREE: double free ptr=…"}Opcode: 8b 4d f4mov     ecx, dword [ebp-0xc {var_10}]Opcode: 89 04 24mov     dword [esp {var_3c}], eaxOpcode: 89 4c 24 04mov     dword [esp+0x4 {var_38}], ecxOpcode: e8 31 04 00 00call    sub_804abc0Opcode: e8 31 04 00 00{ Does not return }Basic Block 5Opcode: 8d 05 22 d1 04 08lea     eax, [data_804d122]  {"BAD SMALL FREE: corrupted size p…"}Opcode: 8b 4d f4mov     ecx, dword [ebp-0xc {var_10}]Opcode: 89 04 24mov     dword [esp {var_3c}], eaxOpcode: 89 4c 24 04mov     dword [esp+0x4 {var_38}], ecxOpcode: e8 07 04 00 00call    sub_804abc0Opcode: e8 07 04 00 00{ Does not return }Basic Block 6Opcode: 8b 45 f0mov     eax, dword [ebp-0x10 {var_14}]Opcode: 83 78 04 10cmp     dword [eax+0x4], 0x10Opcode: 73 15jae     0x804a7b9Basic Block 7Opcode: 8b 45 f0mov     eax, dword [ebp-0x10 {var_14}]Opcode: 83 38 00cmp     dword [eax], 0x0Opcode: 75 09jne     0x804a7caBasic Block 8Opcode: 8b 45 f0mov     eax, dword [ebp-0x10 {var_14}]Opcode: 8b 4d f0mov     ecx, dword [ebp-0x10 {var_14}]Opcode: 2b 01sub     eax, dword [ecx]Opcode: 89 45 ecmov     dword [ebp-0x14 {var_18}], eaxBasic Block 9Opcode: c7 45 ec 00 00 00 00mov     dword [ebp-0x14 {var_18}], 0x0Opcode: eb 0bjmp     0x804a7d5Basic Block 10Opcode: 8b 45 e8mov     eax, dword [ebp-0x18 {var_1c}]Opcode: 8b 00mov     eax, dword [eax]Opcode: 8b 4d f0mov     ecx, dword [ebp-0x10 {var_14}]Opcode: 3b 41 04cmp     eax, dword [ecx+0x4]Opcode: 74 1cje      0x804a83cBasic Block 11Opcode: 8b 45 ecmov     eax, dword [ebp-0x14 {var_18}]Opcode: 8b 40 04mov     eax, dword [eax+0x4]Opcode: 83 e0 feand     eax, 0xfffffffeOpcode: 8b 4d f0mov     ecx, dword [ebp-0x10 {var_14}]Opcode: 3b 01cmp     eax, dword [ecx]Opcode: 74 1cje      0x804a813Basic Block 12Opcode: 8b 45 f0mov     eax, dword [ebp-0x10 {var_14}]Opcode: 8b 4d f0mov     ecx, dword [ebp-0x10 {var_14}]Opcode: 03 41 04add     eax, dword [ecx+0x4]Opcode: 89 45 e8mov     dword [ebp-0x18 {var_1c}], eaxOpcode: 83 7d ec 00cmp     dword [ebp-0x14 {var_18}], 0x0Opcode: 74 2cje      0x804a813Basic Block 13Opcode: 83 7d ec 00cmp     dword [ebp-0x14 {var_18}], 0x0Opcode: 74 5dje      0x804a89fBasic Block 14Opcode: 8d 05 7f d1 04 08lea     eax, [data_804d17f]  {"BAD SMALL FREE: heap corruption …"}Opcode: 8b 4d e8mov     ecx, dword [ebp-0x18 {var_1c}]Opcode: 8b 55 f4mov     edx, dword [ebp-0xc {var_10}]Opcode: 89 04 24mov     dword [esp {var_3c}], eaxOpcode: 89 4c 24 04mov     dword [esp+0x4 {var_38}], ecxOpcode: 89 54 24 08mov     dword [esp+0x8 {var_34}], edxOpcode: e8 84 03 00 00call    sub_804abc0Opcode: e8 84 03 00 00{ Does not return }Basic Block 15Opcode: 8d 05 4b d1 04 08lea     eax, [data_804d14b]  {"BAD SMALL FREE: heap corruption …"}Opcode: 8b 4d ecmov     ecx, dword [ebp-0x14 {var_18}]Opcode: 8b 55 f4mov     edx, dword [ebp-0xc {var_10}]Opcode: 89 04 24mov     dword [esp {var_3c}], eaxOpcode: 89 4c 24 04mov     dword [esp+0x4 {var_38}], ecxOpcode: 89 54 24 08mov     dword [esp+0x8 {var_34}], edxOpcode: e8 ad 03 00 00call    sub_804abc0Opcode: e8 ad 03 00 00{ Does not return }Basic Block 16Opcode: 8b 45 e8mov     eax, dword [ebp-0x18 {var_1c}]Opcode: 8b 40 04mov     eax, dword [eax+0x4]Opcode: 83 e0 01and     eax, 0x1Opcode: 83 f8 00cmp     eax, 0x0Opcode: 74 55je      0x804a902Basic Block 17Opcode: 8b 45 ecmov     eax, dword [ebp-0x14 {var_18}]Opcode: 8b 40 04mov     eax, dword [eax+0x4]Opcode: 83 e0 01and     eax, 0x1Opcode: 83 f8 00cmp     eax, 0x0Opcode: 74 4fje      0x804a89fBasic Block 18Opcode: 8b 45 fcmov     eax, dword [ebp-0x4 {var_8}]Opcode: 8b 4d f0mov     ecx, dword [ebp-0x10 {var_14}]Opcode: 8b 49 04mov     ecx, dword [ecx+0x4]Opcode: 89 0c 24mov     dword [esp {var_3c}], ecxOpcode: 89 45 d8mov     dword [ebp-0x28 {var_2c}], eaxOpcode: e8 1a 02 00 00call    sub_804ab30Opcode: 8b 4d f0mov     ecx, dword [ebp-0x10 {var_14}]Opcode: 8b 55 d8mov     edx, dword [ebp-0x28 {var_2c}]Opcode: 89 14 24mov     dword [esp {var_3c}], edxOpcode: 89 44 24 04mov     dword [esp+0x4 {var_38}], eaxOpcode: 89 4c 24 08mov     dword [esp+0x8 {var_34}], ecxOpcode: e8 94 03 00 00call    sub_804acc0Opcode: 83 c4 38add     esp, 0x38 {var_4}Opcode: 5dpop     ebpOpcode: c3retn    Basic Block 19Opcode: 8b 45 fcmov     eax, dword [ebp-0x4 {var_8}]Opcode: 8b 4d e8mov     ecx, dword [ebp-0x18 {var_1c}]Opcode: 8b 49 04mov     ecx, dword [ecx+0x4]Opcode: 83 e1 feand     ecx, 0xfffffffeOpcode: 89 0c 24mov     dword [esp {var_3c}], ecxOpcode: 89 45 dcmov     dword [ebp-0x24 {var_28}], eaxOpcode: e8 6c 02 00 00call    sub_804ab30Opcode: 8b 4d e8mov     ecx, dword [ebp-0x18 {var_1c}]Opcode: 8b 55 dcmov     edx, dword [ebp-0x24 {var_28}]Opcode: 89 14 24mov     dword [esp {var_3c}], edxOpcode: 89 44 24 04mov     dword [esp+0x4 {var_38}], eaxOpcode: 89 4c 24 08mov     dword [esp+0x8 {var_34}], ecxOpcode: e8 36 03 00 00call    sub_804ac10Opcode: 8b 45 e8mov     eax, dword [ebp-0x18 {var_1c}]Opcode: 8b 40 04mov     eax, dword [eax+0x4]Opcode: 8b 4d f0mov     ecx, dword [ebp-0x10 {var_14}]Opcode: 8b 51 04mov     edx, dword [ecx+0x4]Opcode: 01 c2add     edx, eaxOpcode: 89 51 04mov     dword [ecx+0x4], edxOpcode: 8b 45 f0mov     eax, dword [ebp-0x10 {var_14}]Opcode: 8b 4d f0mov     ecx, dword [ebp-0x10 {var_14}]Opcode: 03 41 04add     eax, dword [ecx+0x4]Opcode: 89 45 e8mov     dword [ebp-0x18 {var_1c}], eaxOpcode: 8b 45 f0mov     eax, dword [ebp-0x10 {var_14}]Opcode: 8b 40 04mov     eax, dword [eax+0x4]Opcode: 8b 4d e8mov     ecx, dword [ebp-0x18 {var_1c}]Opcode: 89 01mov     dword [ecx], eaxBasic Block 20Opcode: 8b 45 fcmov     eax, dword [ebp-0x4 {var_8}]Opcode: 8b 4d ecmov     ecx, dword [ebp-0x14 {var_18}]Opcode: 8b 49 04mov     ecx, dword [ecx+0x4]Opcode: 83 e1 feand     ecx, 0xfffffffeOpcode: 89 0c 24mov     dword [esp {var_3c}], ecxOpcode: 89 45 e0mov     dword [ebp-0x20 {var_24}], eaxOpcode: e8 c9 02 00 00call    sub_804ab30Opcode: 8b 4d ecmov     ecx, dword [ebp-0x14 {var_18}]Opcode: 8b 55 e0mov     edx, dword [ebp-0x20 {var_24}]Opcode: 89 14 24mov     dword [esp {var_3c}], edxOpcode: 89 44 24 04mov     dword [esp+0x4 {var_38}], eaxOpcode: 89 4c 24 08mov     dword [esp+0x8 {var_34}], ecxOpcode: e8 93 03 00 00call    sub_804ac10Opcode: 8b 45 f0mov     eax, dword [ebp-0x10 {var_14}]Opcode: 8b 40 04mov     eax, dword [eax+0x4]Opcode: 8b 4d ecmov     ecx, dword [ebp-0x14 {var_18}]Opcode: 8b 51 04mov     edx, dword [ecx+0x4]Opcode: 01 c2add     edx, eaxOpcode: 89 51 04mov     dword [ecx+0x4], edxOpcode: 8b 45 ecmov     eax, dword [ebp-0x14 {var_18}]Opcode: 89 45 f0mov     dword [ebp-0x10 {var_14}], eaxOpcode: 8b 45 f0mov     eax, dword [ebp-0x10 {var_14}]Opcode: 8b 40 04mov     eax, dword [eax+0x4]Opcode: 8b 4d e8mov     ecx, dword [ebp-0x18 {var_1c}]Opcode: 89 01mov     dword [ecx], eax