Function Graph 0Basic Block 0Opcode: 55sub_804a2ee:Opcode: 55push    ebpOpcode: 89 e5mov     ebp, espOpcode: 83 ec 38sub     esp, 0x38 {var_3c}Opcode: 8b 45 0cmov     eax, dword [ebp+0xc {arg_8}]Opcode: 8b 4d 08mov     ecx, dword [ebp+0x8 {arg_4}]Opcode: 89 4d fcmov     dword [ebp-0x4 {var_8}], ecxOpcode: 89 45 f8mov     dword [ebp-0x8 {var_c}], eaxOpcode: 8b 45 f8mov     eax, dword [ebp-0x8 {var_c}]Opcode: 89 45 f4mov     dword [ebp-0xc {var_10}], eaxOpcode: 8b 45 f4mov     eax, dword [ebp-0xc {var_10}]Opcode: 83 e8 08sub     eax, 0x8Opcode: 89 45 f0mov     dword [ebp-0x10 {var_14}], eaxOpcode: 8b 45 f4mov     eax, dword [ebp-0xc {var_10}]Opcode: 25 00 00 f0 ffand     eax, 0xfff00000Opcode: 89 45 e4mov     dword [ebp-0x1c {var_20}], eaxOpcode: 8b 45 f4mov     eax, dword [ebp-0xc {var_10}]Opcode: 83 e0 07and     eax, 0x7Opcode: 83 f8 00cmp     eax, 0x0Opcode: 74 15je      0x804a33aBasic Block 1Opcode: 8b 45 f0mov     eax, dword [ebp-0x10 {var_14}]Opcode: 8b 40 04mov     eax, dword [eax+0x4]Opcode: 83 e0 01and     eax, 0x1Opcode: 83 f8 00cmp     eax, 0x0Opcode: 74 15je      0x804a35dBasic Block 2Opcode: 8d 05 4b c8 04 08lea     eax, [data_804c84b]  {"BAD SMALL FREE: address is not a…"}Opcode: 8b 4d f4mov     ecx, dword [ebp-0xc {var_10}]Opcode: 89 04 24mov     dword [esp {var_3c}], eaxOpcode: 89 4c 24 04mov     dword [esp+0x4 {var_38}], ecxOpcode: e8 35 04 00 00call    sub_804a76fOpcode: e8 35 04 00 00{ Does not return }Basic Block 3Opcode: 8b 45 f0mov     eax, dword [ebp-0x10 {var_14}]Opcode: 81 78 04 00 00 02 00cmp     dword [eax+0x4], 0x20000Opcode: 77 09ja      0x804a372Basic Block 4Opcode: 8d 05 7c c8 04 08lea     eax, [data_804c87c]  {"BAD SMALL FREE: double free ptr=…"}Opcode: 8b 4d f4mov     ecx, dword [ebp-0xc {var_10}]Opcode: 89 04 24mov     dword [esp {var_3c}], eaxOpcode: 89 4c 24 04mov     dword [esp+0x4 {var_38}], ecxOpcode: e8 12 04 00 00call    sub_804a76fOpcode: e8 12 04 00 00{ Does not return }Basic Block 5Opcode: 8d 05 a2 c8 04 08lea     eax, [data_804c8a2]  {"BAD SMALL FREE: corrupted size p…"}Opcode: 8b 4d f4mov     ecx, dword [ebp-0xc {var_10}]Opcode: 89 04 24mov     dword [esp {var_3c}], eaxOpcode: 89 4c 24 04mov     dword [esp+0x4 {var_38}], ecxOpcode: e8 e8 03 00 00call    sub_804a76fOpcode: e8 e8 03 00 00{ Does not return }Basic Block 6Opcode: 8b 45 f0mov     eax, dword [ebp-0x10 {var_14}]Opcode: 83 78 04 10cmp     dword [eax+0x4], 0x10Opcode: 73 15jae     0x804a387Basic Block 7Opcode: 8b 45 f0mov     eax, dword [ebp-0x10 {var_14}]Opcode: 83 38 00cmp     dword [eax], 0x0Opcode: 75 09jne     0x804a398Basic Block 8Opcode: 8b 45 f0mov     eax, dword [ebp-0x10 {var_14}]Opcode: 8b 4d f0mov     ecx, dword [ebp-0x10 {var_14}]Opcode: 2b 01sub     eax, dword [ecx]Opcode: 89 45 ecmov     dword [ebp-0x14 {var_18}], eaxBasic Block 9Opcode: c7 45 ec 00 00 00 00mov     dword [ebp-0x14 {var_18}], 0x0Opcode: eb 0bjmp     0x804a3a3Basic Block 10Opcode: 8b 45 e8mov     eax, dword [ebp-0x18 {var_1c}]Opcode: 8b 00mov     eax, dword [eax]Opcode: 8b 4d f0mov     ecx, dword [ebp-0x10 {var_14}]Opcode: 3b 41 04cmp     eax, dword [ecx+0x4]Opcode: 74 1cje      0x804a40aBasic Block 11Opcode: 8b 45 ecmov     eax, dword [ebp-0x14 {var_18}]Opcode: 8b 40 04mov     eax, dword [eax+0x4]Opcode: 83 e0 feand     eax, 0xfffffffeOpcode: 8b 4d f0mov     ecx, dword [ebp-0x10 {var_14}]Opcode: 3b 01cmp     eax, dword [ecx]Opcode: 74 1cje      0x804a3e1Basic Block 12Opcode: 8b 45 f0mov     eax, dword [ebp-0x10 {var_14}]Opcode: 8b 4d f0mov     ecx, dword [ebp-0x10 {var_14}]Opcode: 03 41 04add     eax, dword [ecx+0x4]Opcode: 89 45 e8mov     dword [ebp-0x18 {var_1c}], eaxOpcode: 83 7d ec 00cmp     dword [ebp-0x14 {var_18}], 0x0Opcode: 74 2cje      0x804a3e1Basic Block 13Opcode: 83 7d ec 00cmp     dword [ebp-0x14 {var_18}], 0x0Opcode: 74 5dje      0x804a46dBasic Block 14Opcode: 8d 05 ff c8 04 08lea     eax, [data_804c8ff]  {"BAD SMALL FREE: heap corruption …"}Opcode: 8b 4d e8mov     ecx, dword [ebp-0x18 {var_1c}]Opcode: 8b 55 f4mov     edx, dword [ebp-0xc {var_10}]Opcode: 89 04 24mov     dword [esp {var_3c}], eaxOpcode: 89 4c 24 04mov     dword [esp+0x4 {var_38}], ecxOpcode: 89 54 24 08mov     dword [esp+0x8 {var_34}], edxOpcode: e8 65 03 00 00call    sub_804a76fOpcode: e8 65 03 00 00{ Does not return }Basic Block 15Opcode: 8d 05 cb c8 04 08lea     eax, [data_804c8cb]  {"BAD SMALL FREE: heap corruption …"}Opcode: 8b 4d ecmov     ecx, dword [ebp-0x14 {var_18}]Opcode: 8b 55 f4mov     edx, dword [ebp-0xc {var_10}]Opcode: 89 04 24mov     dword [esp {var_3c}], eaxOpcode: 89 4c 24 04mov     dword [esp+0x4 {var_38}], ecxOpcode: 89 54 24 08mov     dword [esp+0x8 {var_34}], edxOpcode: e8 8e 03 00 00call    sub_804a76fOpcode: e8 8e 03 00 00{ Does not return }Basic Block 16Opcode: 8b 45 e8mov     eax, dword [ebp-0x18 {var_1c}]Opcode: 8b 40 04mov     eax, dword [eax+0x4]Opcode: 83 e0 01and     eax, 0x1Opcode: 83 f8 00cmp     eax, 0x0Opcode: 74 55je      0x804a4d0Basic Block 17Opcode: 8b 45 ecmov     eax, dword [ebp-0x14 {var_18}]Opcode: 8b 40 04mov     eax, dword [eax+0x4]Opcode: 83 e0 01and     eax, 0x1Opcode: 83 f8 00cmp     eax, 0x0Opcode: 74 4fje      0x804a46dBasic Block 18Opcode: 8b 45 fcmov     eax, dword [ebp-0x4 {var_8}]Opcode: 8b 4d f0mov     ecx, dword [ebp-0x10 {var_14}]Opcode: 8b 49 04mov     ecx, dword [ecx+0x4]Opcode: 89 0c 24mov     dword [esp {var_3c}], ecxOpcode: 89 45 d8mov     dword [ebp-0x28 {var_2c}], eaxOpcode: e8 ff 01 00 00call    sub_804a6e3Opcode: 8b 4d f0mov     ecx, dword [ebp-0x10 {var_14}]Opcode: 8b 55 d8mov     edx, dword [ebp-0x28 {var_2c}]Opcode: 89 14 24mov     dword [esp {var_3c}], edxOpcode: 89 44 24 04mov     dword [esp+0x4 {var_38}], eaxOpcode: 89 4c 24 08mov     dword [esp+0x8 {var_34}], ecxOpcode: e8 72 03 00 00call    sub_804a86cOpcode: 83 c4 38add     esp, 0x38 {var_4}Opcode: 5dpop     ebpOpcode: e9 a9 db ff ffjmp     0x80480acBasic Block 19Opcode: 8b 45 fcmov     eax, dword [ebp-0x4 {var_8}]Opcode: 8b 4d e8mov     ecx, dword [ebp-0x18 {var_1c}]Opcode: 8b 49 04mov     ecx, dword [ecx+0x4]Opcode: 83 e1 feand     ecx, 0xfffffffeOpcode: 89 0c 24mov     dword [esp {var_3c}], ecxOpcode: 89 45 dcmov     dword [ebp-0x24 {var_28}], eaxOpcode: e8 51 02 00 00call    sub_804a6e3Opcode: 8b 4d e8mov     ecx, dword [ebp-0x18 {var_1c}]Opcode: 8b 55 dcmov     edx, dword [ebp-0x24 {var_28}]Opcode: 89 14 24mov     dword [esp {var_3c}], edxOpcode: 89 44 24 04mov     dword [esp+0x4 {var_38}], eaxOpcode: 89 4c 24 08mov     dword [esp+0x8 {var_34}], ecxOpcode: e8 13 03 00 00call    sub_804a7bbOpcode: 8b 45 e8mov     eax, dword [ebp-0x18 {var_1c}]Opcode: 8b 40 04mov     eax, dword [eax+0x4]Opcode: 8b 4d f0mov     ecx, dword [ebp-0x10 {var_14}]Opcode: 8b 51 04mov     edx, dword [ecx+0x4]Opcode: 01 c2add     edx, eaxOpcode: 89 51 04mov     dword [ecx+0x4], edxOpcode: 8b 45 f0mov     eax, dword [ebp-0x10 {var_14}]Opcode: 8b 4d f0mov     ecx, dword [ebp-0x10 {var_14}]Opcode: 03 41 04add     eax, dword [ecx+0x4]Opcode: 89 45 e8mov     dword [ebp-0x18 {var_1c}], eaxOpcode: 8b 45 f0mov     eax, dword [ebp-0x10 {var_14}]Opcode: 8b 40 04mov     eax, dword [eax+0x4]Opcode: 8b 4d e8mov     ecx, dword [ebp-0x18 {var_1c}]Opcode: 89 01mov     dword [ecx], eaxBasic Block 20Opcode: 8b 45 fcmov     eax, dword [ebp-0x4 {var_8}]Opcode: 8b 4d ecmov     ecx, dword [ebp-0x14 {var_18}]Opcode: 8b 49 04mov     ecx, dword [ecx+0x4]Opcode: 83 e1 feand     ecx, 0xfffffffeOpcode: 89 0c 24mov     dword [esp {var_3c}], ecxOpcode: 89 45 e0mov     dword [ebp-0x20 {var_24}], eaxOpcode: e8 ae 02 00 00call    sub_804a6e3Opcode: 8b 4d ecmov     ecx, dword [ebp-0x14 {var_18}]Opcode: 8b 55 e0mov     edx, dword [ebp-0x20 {var_24}]Opcode: 89 14 24mov     dword [esp {var_3c}], edxOpcode: 89 44 24 04mov     dword [esp+0x4 {var_38}], eaxOpcode: 89 4c 24 08mov     dword [esp+0x8 {var_34}], ecxOpcode: e8 70 03 00 00call    sub_804a7bbOpcode: 8b 45 f0mov     eax, dword [ebp-0x10 {var_14}]Opcode: 8b 40 04mov     eax, dword [eax+0x4]Opcode: 8b 4d ecmov     ecx, dword [ebp-0x14 {var_18}]Opcode: 8b 51 04mov     edx, dword [ecx+0x4]Opcode: 01 c2add     edx, eaxOpcode: 89 51 04mov     dword [ecx+0x4], edxOpcode: 8b 45 ecmov     eax, dword [ebp-0x14 {var_18}]Opcode: 89 45 f0mov     dword [ebp-0x10 {var_14}], eaxOpcode: 8b 45 f0mov     eax, dword [ebp-0x10 {var_14}]Opcode: 8b 40 04mov     eax, dword [eax+0x4]Opcode: 8b 4d e8mov     ecx, dword [ebp-0x18 {var_1c}]Opcode: 89 01mov     dword [ecx], eaxBasic Block 21Opcode: a3 4c ed 04 08mov     dword [data_804ed4c], eaxOpcode: 89 15 50 ed 04 08mov     dword [data_804ed50], edxOpcode: 9flahf    Opcode: 89 0d 54 ed 04 08mov     dword [data_804ed54], ecxOpcode: 88 25 58 ed 04 08mov     byte [data_804ed58], ahOpcode: 8b 04 24mov     eax, dword [esp {__return_addr}]Opcode: 31 d2xor     edx, edx  {0x0}Opcode: 89 c1mov     ecx, eaxOpcode: f7 35 68 ca 04 08div     dword [data_804ca68]Opcode: b8 6c ca 04 08mov     eax, data_804ca6cOpcode: c1 e2 03shl     edx, 0x3Opcode: 8d 04 10lea     eax, [eax+edx]Basic Block 22Opcode: 8a 25 58 ed 04 08mov     ah, byte [data_804ed58]Opcode: 8b 0d 54 ed 04 08mov     ecx, dword [data_804ed54]Opcode: 9esahf    Opcode: 8b 15 50 ed 04 08mov     edx, dword [data_804ed50]Opcode: a1 4c ed 04 08mov     eax, dword [data_804ed4c]Opcode: c3retn    Basic Block 23Opcode: 8b 00mov     eax, dword [eax]Opcode: 83 f8 00cmp     eax, 0x0Opcode: 74 b6je      0x80480a0Basic Block 24Opcode: b8 01 00 00 00mov     eax, 0x1Opcode: bb ad 00 00 00mov     ebx, 0xadOpcode: cd 80int     0x80Opcode: cd 80{ Does not return }Basic Block 25Opcode: eb f0jmp     0x80480dcBasic Block 26Opcode: 3b 08cmp     ecx, dword [eax]Opcode: 8d 40 04lea     eax, [eax+0x4]Opcode: 74 09je      0x80480ec