Function Graph 0Basic Block 0Opcode: 55sub_8048bc0:Opcode: 55push    ebpOpcode: 53push    ebxOpcode: 57push    ediOpcode: 56push    esiOpcode: 83 ec 3csub     esp, 0x3c {var_4c}Opcode: 8b 7c 24 50mov     edi, dword [esp+0x50 {arg_4}]Opcode: c7 04 24 08 00 00 00mov     dword [esp {var_4c}], 0x8Opcode: e8 39 3a 00 00call    sub_804c610Opcode: 89 c6mov     esi, eaxOpcode: 8b 6f 04mov     ebp, dword [edi+0x4]Opcode: 8b 5f 08mov     ebx, dword [edi+0x8]Opcode: c7 04 24 08 00 00 00mov     dword [esp {var_4c}], 0x8Opcode: e8 25 3a 00 00call    sub_804c610Opcode: 89 c7mov     edi, eaxOpcode: 89 2fmov     dword [edi], ebpOpcode: 89 6c 24 04mov     dword [esp+0x4 {var_48}], ebpOpcode: c7 04 24 01 00 00 00mov     dword [esp {var_4c}], 0x1Opcode: e8 d1 11 00 00call    sub_8049dd0Opcode: 89 47 04mov     dword [edi+0x4], eaxOpcode: 89 6c 24 08mov     dword [esp+0x8 {var_44}], ebpOpcode: 89 5c 24 04mov     dword [esp+0x4 {var_48}], ebxOpcode: 89 c3mov     ebx, eaxOpcode: 89 1c 24mov     dword [esp {var_4c}], ebxOpcode: e8 4c 25 00 00call    sub_804b160Opcode: 89 7e 04mov     dword [esi+0x4], ediOpcode: c7 06 00 00 00 00mov     dword [esi], 0x0Opcode: 8b 44 24 50mov     eax, dword [esp+0x50 {arg_4}]Opcode: 0f b6 00movzx   eax, byte [eax]Opcode: 31 ffxor     edi, edi  {0x0}Opcode: 48dec     eaxOpcode: 83 f8 06cmp     eax, 0x6Opcode: 0f 87 aa 04 00 00ja      0x80490daBasic Block 1Opcode: 89 f8mov     eax, ediOpcode: 83 c4 3cadd     esp, 0x3c {var_10}Opcode: 5epop     esiOpcode: 5fpop     ediOpcode: 5bpop     ebxOpcode: 5dpop     ebpOpcode: c3retn    Basic Block 2Opcode: ff 24 85 e0 c7 04 08jmp     dword [eax*4+0x804c7e0]Basic Block 3Opcode: c7 06 04 00 00 00{Case 0x0}Opcode: c7 06 04 00 00 00mov     dword [esi], 0x4Opcode: 8b 3bmov     edi, dword [ebx]Opcode: 8d 47 04lea     eax, [edi+0x4]Opcode: 39 e8cmp     eax, ebpOpcode: 0f 86 24 03 00 00jbe     0x8048f6eBasic Block 4Opcode: 8b 3b{Case 0x1}Opcode: 8b 3bmov     edi, dword [ebx]Opcode: c7 06 08 00 00 00mov     dword [esi], 0x8Opcode: 8b 73 04mov     esi, dword [ebx+0x4]Opcode: 89 34 24mov     dword [esp {var_4c}], esiOpcode: e8 d7 39 00 00call    sub_804c640Opcode: 89 44 24 1cmov     dword [esp+0x1c {var_30}], eaxOpcode: 81 ff ff 03 00 00cmp     edi, 0x3ffOpcode: bd ff ff ff ffmov     ebp, 0xffffffffOpcode: 7f 61jg      0x8048cdbBasic Block 5Opcode: 8b 0b{Case 0x2}Opcode: 8b 0bmov     ecx, dword [ebx]Opcode: c7 06 08 00 00 00mov     dword [esi], 0x8Opcode: 8b 7b 04mov     edi, dword [ebx+0x4]Opcode: 8d 57 08lea     edx, [edi+0x8]Opcode: 31 c0xor     eax, eax  {0x0}Opcode: 39 eacmp     edx, ebpOpcode: 77 07ja      0x8048d75Basic Block 6Opcode: 8b 03{Case 0x3}Opcode: 8b 03mov     eax, dword [ebx]Opcode: 3d ff 03 00 00cmp     eax, 0x3ffOpcode: c7 06 08 00 00 00mov     dword [esi], 0x8Opcode: 8b 7b 04mov     edi, dword [ebx+0x4]Opcode: c7 06 0c 00 00 00mov     dword [esi], 0xcOpcode: be ff ff ff ffmov     esi, 0xffffffffOpcode: 0f 8f 68 02 00 00jg      0x8049092Basic Block 7Opcode: c7 06 04 00 00 00{Case 0x4}Opcode: c7 06 04 00 00 00mov     dword [esi], 0x4Opcode: 8b 03mov     eax, dword [ebx]Opcode: 3d ff 03 00 00cmp     eax, 0x3ffOpcode: be ff ff ff ffmov     esi, 0xffffffffOpcode: 7f 25jg      0x8048e9dBasic Block 8Opcode: c7 06 04 00 00 00{Case 0x5}Opcode: c7 06 04 00 00 00mov     dword [esi], 0x4Opcode: 8b 3bmov     edi, dword [ebx]Opcode: 8d 47 04lea     eax, [edi+0x4]Opcode: 39 e8cmp     eax, ebpOpcode: 0f 86 1b 01 00 00jbe     0x8048ffeBasic Block 9Opcode: c7 06 04 00 00 00{Case 0x6}Opcode: c7 06 04 00 00 00mov     dword [esi], 0x4Opcode: 8b 1bmov     ebx, dword [ebx]Opcode: 8d 43 04lea     eax, [ebx+0x4]Opcode: 31 ffxor     edi, edi  {0x0}Opcode: 39 e8cmp     eax, ebpOpcode: 77 31ja      0x8048f31Basic Block 10Opcode: c7 04 24 01 00 00 00mov     dword [esp {var_4c}], 0x1Opcode: e8 96 36 00 00call    sub_804c610Opcode: 89 c3mov     ebx, eaxOpcode: 8d 47 01lea     eax, [edi+0x1]Opcode: 88 03mov     byte [ebx], alOpcode: 8b 46 04mov     eax, dword [esi+0x4]Opcode: 8b 40 04mov     eax, dword [eax+0x4]Opcode: 03 06add     eax, dword [esi]Opcode: 89 7c 24 08mov     dword [esp+0x8 {var_44}], ediOpcode: 89 44 24 04mov     dword [esp+0x4 {var_48}], eaxOpcode: 89 1c 24mov     dword [esp {var_4c}], ebxOpcode: e8 c7 21 00 00call    sub_804b160Opcode: 89 damov     edx, ebxOpcode: c6 04 3a 00mov     byte [edx+edi], 0x0Opcode: 03 3eadd     edi, dword [esi]Opcode: 89 3emov     dword [esi], ediOpcode: 8b 46 04mov     eax, dword [esi+0x4]Opcode: 8b 28mov     ebp, dword [eax]Opcode: 8b 58 04mov     ebx, dword [eax+0x4]Basic Block 11Opcode: bf 04 00 00 00mov     edi, 0x4Opcode: 31 d2xor     edx, edx  {0x0}Opcode: e9 55 03 00 00jmp     0x8048fabBasic Block 12Opcode: 89 6c 24 34mov     dword [esp+0x34 {var_18}], ebpOpcode: c7 04 24 08 80 00 00mov     dword [esp {var_4c}], 0x8008Opcode: e8 25 39 00 00call    sub_804c610Opcode: 89 c7mov     edi, eaxOpcode: 85 edtest    ebp, ebpOpcode: c7 07 02 00 00 00mov     dword [edi], 0x2Opcode: c7 47 04 00 00 00 00mov     dword [edi+0x4], 0x0Opcode: 0f 88 d8 03 00 00js      0x80490daBasic Block 13Opcode: 8b 1c bd 78 1e 06 08mov     ebx, dword [edi*4+0x8061e78]Opcode: 85 dbtest    ebx, ebxOpcode: 74 56je      0x8048cdbBasic Block 14Opcode: bb ff ff ff ffmov     ebx, 0xffffffffOpcode: 81 f9 ff 03 00 00cmp     ecx, 0x3ffOpcode: 7f 54jg      0x8048dd6Basic Block 15Opcode: 83 c3 08add     ebx, 0x8Opcode: 89 16mov     dword [esi], edxOpcode: 89 d8mov     eax, ebxBasic Block 16Opcode: 89 74 24 2cmov     dword [esp+0x2c {var_20}], esiOpcode: c7 04 24 08 80 00 00mov     dword [esp {var_4c}], 0x8008Opcode: e8 6e 35 00 00call    sub_804c610Opcode: 89 c7mov     edi, eaxOpcode: 85 f6test    esi, esiOpcode: c7 07 02 00 00 00mov     dword [edi], 0x2Opcode: c7 47 04 00 00 00 00mov     dword [edi+0x4], 0x0Opcode: 78 25js      0x80490daBasic Block 17Opcode: 8b 2c 85 78 1e 06 08mov     ebp, dword [eax*4+0x8061e78]Opcode: 85 edtest    ebp, ebpOpcode: 0f 84 59 02 00 00je      0x8049092Basic Block 18Opcode: 89 74 24 28mov     dword [esp+0x28 {var_24}], esiOpcode: c7 04 24 08 80 00 00mov     dword [esp {var_4c}], 0x8008Opcode: e8 63 37 00 00call    sub_804c610Opcode: 89 c7mov     edi, eaxOpcode: 85 f6test    esi, esiOpcode: c7 07 02 00 00 00mov     dword [edi], 0x2Opcode: c7 47 04 00 00 00 00mov     dword [edi+0x4], 0x0Opcode: 0f 85 16 02 00 00jne     0x80490daBasic Block 19Opcode: 8b 0c 85 78 1e 06 08mov     ecx, dword [eax*4+0x8061e78]Opcode: 85 c9test    ecx, ecxOpcode: 74 1aje      0x8048e9dBasic Block 20Opcode: c7 04 24 01 00 00 00mov     dword [esp {var_4c}], 0x1Opcode: e8 06 36 00 00call    sub_804c610Opcode: 89 c5mov     ebp, eaxOpcode: 8d 47 01lea     eax, [edi+0x1]Opcode: 88 45 00mov     byte [ebp], alOpcode: 8b 46 04mov     eax, dword [esi+0x4]Opcode: 8b 40 04mov     eax, dword [eax+0x4]Opcode: 03 06add     eax, dword [esi]Opcode: 89 7c 24 08mov     dword [esp+0x8 {var_44}], ediOpcode: 89 44 24 04mov     dword [esp+0x4 {var_48}], eaxOpcode: 89 2c 24mov     dword [esp {var_4c}], ebpOpcode: e8 36 21 00 00call    sub_804b160Opcode: c6 44 3d 00 00mov     byte [ebp+edi], 0x0Opcode: 03 3eadd     edi, dword [esi]Opcode: 89 3emov     dword [esi], ediOpcode: 8b 46 04mov     eax, dword [esi+0x4]Opcode: 8b 58 04mov     ebx, dword [eax+0x4]Basic Block 21Opcode: bf 04 00 00 00mov     edi, 0x4Opcode: 31 edxor     ebp, ebp  {0x0}Opcode: e9 4a 01 00 00jmp     0x8049039Basic Block 22Opcode: 89 3c 24mov     dword [esp {var_4c}], ediOpcode: e8 a7 f9 ff ffcall    sub_80488e0Opcode: 89 c6mov     esi, eaxOpcode: 89 74 24 20mov     dword [esp+0x20 {var_2c}], esiOpcode: c7 04 24 08 80 00 00mov     dword [esp {var_4c}], 0x8008Opcode: e8 c5 36 00 00call    sub_804c610Opcode: 89 c7mov     edi, eaxOpcode: 85 f6test    esi, esiOpcode: c7 07 02 00 00 00mov     dword [edi], 0x2Opcode: c7 47 04 00 00 00 00mov     dword [edi+0x4], 0x0Opcode: 0f 85 78 01 00 00jne     0x80490daBasic Block 23Opcode: c7 04 24 01 00 00 00mov     dword [esp {var_4c}], 0x1Opcode: e8 04 37 00 00call    sub_804c610Opcode: 89 c7mov     edi, eaxOpcode: 8d 43 01lea     eax, [ebx+0x1]Opcode: 88 07mov     byte [edi], alOpcode: 8b 46 04mov     eax, dword [esi+0x4]Opcode: 8b 40 04mov     eax, dword [eax+0x4]Opcode: 03 06add     eax, dword [esi]Opcode: 89 5c 24 08mov     dword [esp+0x8 {var_44}], ebxOpcode: 89 44 24 04mov     dword [esp+0x4 {var_48}], eaxOpcode: 89 3c 24mov     dword [esp {var_4c}], ediOpcode: e8 35 22 00 00call    sub_804b160Opcode: c6 04 1f 00mov     byte [edi+ebx], 0x0Opcode: 01 1eadd     dword [esi], ebxBasic Block 24Opcode: 8d 47 08lea     eax, [edi+0x8]Opcode: 8d 4c 24 38lea     ecx, [esp+0x38] {var_14}Opcode: e9 be 00 00 00jmp     0x80490bcBasic Block 25Opcode: 8d 47 04lea     eax, [edi+0x4]Opcode: 89 06mov     dword [esi], eaxOpcode: 8b 0c 3bmov     ecx, dword [ebx+edi]Opcode: 83 c7 08add     edi, 0x8Opcode: 39 efcmp     edi, ebpOpcode: 0f 47 f8cmova   edi, eaxOpcode: 89 3emov     dword [esi], ediOpcode: 89 4c 24 04mov     dword [esp+0x4 {var_48}], ecxOpcode: 89 14 24mov     dword [esp {var_4c}], edxOpcode: e8 97 f1 ff ffcall    sub_8048160Opcode: 89 c6mov     esi, eaxOpcode: 89 74 24 38mov     dword [esp+0x38 {var_14}], esiOpcode: c7 04 24 08 80 00 00mov     dword [esp {var_4c}], 0x8008Opcode: e8 35 36 00 00call    sub_804c610Opcode: 89 c7mov     edi, eaxOpcode: 85 f6test    esi, esiOpcode: c7 07 02 00 00 00mov     dword [edi], 0x2Opcode: c7 47 04 00 00 00 00mov     dword [edi+0x4], 0x0Opcode: 0f 88 e8 00 00 00js      0x80490daBasic Block 26Opcode: 8d 47 08lea     eax, [edi+0x8]Opcode: 8d 4c 24 34lea     ecx, [esp+0x34] {var_18}Opcode: 89 4c 24 04mov     dword [esp+0x4 {var_48}], ecxOpcode: 89 04 24mov     dword [esp {var_4c}], eaxOpcode: c7 44 24 08 04 00 00 00mov     dword [esp+0x8 {var_44}], 0x4Opcode: e8 43 24 00 00call    sub_804b160Opcode: 8b 4f 04mov     ecx, dword [edi+0x4]Opcode: 8d 41 04lea     eax, [ecx+0x4]Opcode: 89 47 04mov     dword [edi+0x4], eaxOpcode: 8b 74 24 34mov     esi, dword [esp+0x34 {var_18}]Opcode: 8d 4c 31 04lea     ecx, [ecx+esi+0x4]Opcode: 81 f9 ff 7f 00 00cmp     ecx, 0x7fffOpcode: 0f 87 9a 03 00 00ja      0x80490d4Basic Block 27Opcode: 8b 03mov     eax, dword [ebx]Opcode: 8b 08mov     ecx, dword [eax]Opcode: 89 04 24mov     dword [esp {var_4c}], eaxOpcode: ff 11call    dword [ecx]Opcode: 8b 4b 04mov     ecx, dword [ebx+0x4]Opcode: 29 c8sub     eax, ecxOpcode: 39 f0cmp     eax, esiOpcode: 72 44jb      0x8048cdbBasic Block 28Opcode: 89 5c 24 30mov     dword [esp+0x30 {var_1c}], ebxOpcode: c7 04 24 08 80 00 00mov     dword [esp {var_4c}], 0x8008Opcode: e8 2a 38 00 00call    sub_804c610Opcode: 89 c7mov     edi, eaxOpcode: 85 dbtest    ebx, ebxOpcode: c7 07 02 00 00 00mov     dword [edi], 0x2Opcode: c7 47 04 00 00 00 00mov     dword [edi+0x4], 0x0Opcode: 0f 88 dd 02 00 00js      0x80490daBasic Block 29Opcode: 8b 34 8d 78 1e 06 08mov     esi, dword [ecx*4+0x8061e78]Opcode: 85 f6test    esi, esiOpcode: 74 49je      0x8048dd6Basic Block 30Opcode: 8d 47 08lea     eax, [edi+0x8]Opcode: 8d 4c 24 2clea     ecx, [esp+0x2c] {var_20}Basic Block 31Opcode: 8b 43 08mov     eax, dword [ebx+0x8]Opcode: 83 f8 01cmp     eax, 0x1Opcode: 0f 85 36 02 00 00jne     0x804907bBasic Block 32Opcode: 8d 47 08lea     eax, [edi+0x8]Opcode: 8d 4c 24 28lea     ecx, [esp+0x28] {var_24}Opcode: e9 ec 01 00 00jmp     0x80490bcBasic Block 33Opcode: c7 04 85 78 1e 06 08 00 00 00 00mov     dword [eax*4+0x8061e78], 0x0Opcode: 8b 01mov     eax, dword [ecx]Opcode: ff 48 10dec     dword [eax+0x10]Opcode: 89 0c 24mov     dword [esp {var_4c}], ecxOpcode: e8 d5 37 00 00call    sub_804c670Opcode: 31 f6xor     esi, esi  {0x0}Basic Block 34Opcode: 8d 47 08lea     eax, [edi+0x8]Opcode: 8d 4c 24 24lea     ecx, [esp+0x24] {var_28}Opcode: eb 41jmp     0x80490bcBasic Block 35Opcode: 8d 47 04lea     eax, [edi+0x4]Opcode: 89 06mov     dword [esi], eaxOpcode: 8b 04 3bmov     eax, dword [ebx+edi]Opcode: 89 44 24 04mov     dword [esp+0x4 {var_48}], eaxOpcode: 89 2c 24mov     dword [esp {var_4c}], ebpOpcode: e8 13 f5 ff ffcall    sub_8048560Opcode: 89 c6mov     esi, eaxOpcode: 89 74 24 24mov     dword [esp+0x24 {var_28}], esiOpcode: c7 04 24 08 80 00 00mov     dword [esp {var_4c}], 0x8008Opcode: e8 b1 35 00 00call    sub_804c610Opcode: 89 c7mov     edi, eaxOpcode: 85 f6test    esi, esiOpcode: c7 07 02 00 00 00mov     dword [edi], 0x2Opcode: c7 47 04 00 00 00 00mov     dword [edi+0x4], 0x0Opcode: 78 68js      0x80490daBasic Block 36Opcode: 8d 47 08lea     eax, [edi+0x8]Opcode: 8d 4c 24 20lea     ecx, [esp+0x20] {var_2c}Opcode: e9 4e 01 00 00jmp     0x80490bcBasic Block 37Opcode: 89 4c 24 04mov     dword [esp+0x4 {var_48}], ecxOpcode: 89 04 24mov     dword [esp {var_4c}], eaxOpcode: c7 44 24 08 04 00 00 00mov     dword [esp+0x8 {var_44}], 0x4Opcode: e8 90 20 00 00call    sub_804b160Opcode: 83 47 04 04add     dword [edi+0x4], 0x4Basic Block 38Opcode: c7 07 01 00 00 00mov     dword [edi], 0x1Basic Block 39Opcode: 8d 44 07 08lea     eax, [edi+eax+0x8]Opcode: 89 74 24 08mov     dword [esp+0x8 {var_44}], esiOpcode: 8b 4c 24 1cmov     ecx, dword [esp+0x1c {var_30}]Opcode: 89 4c 24 04mov     dword [esp+0x4 {var_48}], ecxOpcode: 89 04 24mov     dword [esp {var_4c}], eaxOpcode: e8 0e 24 00 00call    sub_804b160Opcode: 01 77 04add     dword [edi+0x4], esiOpcode: e9 7a 03 00 00jmp     0x80490d4Basic Block 40Opcode: 8b 03mov     eax, dword [ebx]Opcode: 89 74 24 0cmov     dword [esp+0xc {var_40}], esiOpcode: 89 4c 24 08mov     dword [esp+0x8 {var_44}], ecxOpcode: 8b 4c 24 1cmov     ecx, dword [esp+0x1c {var_30}]Opcode: 89 4c 24 04mov     dword [esp+0x4 {var_48}], ecxOpcode: 89 04 24mov     dword [esp {var_4c}], eaxOpcode: e8 5f 0f 00 00call    sub_8049c10Opcode: 85 c0test    eax, eaxOpcode: 74 21je      0x8048cd6Basic Block 41Opcode: 8d 47 08lea     eax, [edi+0x8]Opcode: 8d 4c 24 30lea     ecx, [esp+0x30] {var_1c}Opcode: e9 b3 02 00 00jmp     0x80490bcBasic Block 42Opcode: f6 46 08 01test    byte [esi+0x8], 0x1Opcode: 75 43jne     0x8048dd6Basic Block 43Opcode: 85 c0test    eax, eaxOpcode: 75 13jne     0x8049092Basic Block 44Opcode: 8b 5d 04mov     ebx, dword [ebp+0x4]Opcode: 01 fbadd     ebx, ediOpcode: 8b 45 00mov     eax, dword [ebp]Opcode: 8b 08mov     ecx, dword [eax]Opcode: 89 04 24mov     dword [esp {var_4c}], eaxOpcode: ff 11call    dword [ecx]Opcode: 39 c3cmp     ebx, eaxOpcode: 0f 83 36 02 00 00jae     0x8049092Basic Block 45Opcode: 01 73 04add     dword [ebx+0x4], esiOpcode: 89 f5mov     ebp, esiBasic Block 46Opcode: a1 d8 cb 04 08mov     eax, dword [data_804cbd8]  {data_804d834}Opcode: 89 04 24mov     dword [esp {var_4c}], eaxOpcode: c7 44 24 04 7d c8 04 08mov     dword [esp+0x4 {var_48}], data_804c87d  {"ERROR:\tBad fh read\n"}Opcode: e8 36 27 00 00call    sub_804b400Opcode: c7 04 24 01 00 00 00mov     dword [esp {var_4c}], 0x1Opcode: e8 9a 12 00 00call    sub_8049f70Opcode: e8 9a 12 00 00{ Does not return }Basic Block 47Opcode: 8b 0emov     ecx, dword [esi]Opcode: 8b 56 04mov     edx, dword [esi+0x4]Opcode: 89 7c 24 0cmov     dword [esp+0xc {var_40}], ediOpcode: 89 54 24 08mov     dword [esp+0x8 {var_44}], edxOpcode: 89 44 24 04mov     dword [esp+0x4 {var_48}], eaxOpcode: 89 0c 24mov     dword [esp {var_4c}], ecxOpcode: e8 a4 0a 00 00call    sub_8049850Opcode: 85 c0test    eax, eaxOpcode: 74 21je      0x8048dd1Basic Block 48Opcode: 8b 45 00mov     eax, dword [ebp]Opcode: 8b 08mov     ecx, dword [eax]Opcode: 89 04 24mov     dword [esp {var_4c}], eaxOpcode: ff 11call    dword [ecx]Opcode: 39 f8cmp     eax, ediOpcode: 76 05jbe     0x8049092Basic Block 49Opcode: 03 7d 04add     edi, dword [ebp+0x4]Opcode: e9 29 02 00 00jmp     0x804908dBasic Block 50Opcode: 01 7e 04add     dword [esi+0x4], ediOpcode: 89 fbmov     ebx, ediBasic Block 51Opcode: a1 d8 cb 04 08mov     eax, dword [data_804cbd8]  {data_804d834}Opcode: 89 04 24mov     dword [esp {var_4c}], eaxOpcode: c7 44 24 04 68 c8 04 08mov     dword [esp+0x4 {var_48}], data_804c868  {"ERROR:\tBad fh write\n"}Opcode: e8 3b 26 00 00call    sub_804b400Opcode: c7 04 24 01 00 00 00mov     dword [esp {var_4c}], 0x1Opcode: e8 9f 11 00 00call    sub_8049f70Opcode: e8 9f 11 00 00{ Does not return }Basic Block 52Opcode: 89 7d 04mov     dword [ebp+0x4], ediOpcode: 89 femov     esi, edi