Function Graph 0Basic Block 0Opcode: 55sub_804aa0e:Opcode: 55push    ebpOpcode: 89 e5mov     ebp, espOpcode: 56push    esiOpcode: 83 ec 24sub     esp, 0x24 {var_2c}Opcode: 8b 45 0cmov     eax, dword [ebp+data_c {arg_8}]Opcode: 8b 4d 08mov     ecx, dword [ebp+data_8 {arg_4}]Opcode: 89 4d f8mov     dword [ebp-0x8 {var_c}], ecxOpcode: 89 45 f4mov     dword [ebp-0xc {var_10}], eaxOpcode: 89 45 f0mov     dword [ebp-0x10 {var_14}], eaxOpcode: 25 ff 0f 00 00and     eax, 0xfffOpcode: 3d 08 00 00 00cmp     eax, data_8Opcode: 74 a4je      0x804a9d4Basic Block 1Opcode: 8b 45 f4mov     eax, dword [ebp-0xc {var_10}]Opcode: 05 f8 ff ff ffadd     eax, 0xfffffff8Opcode: 89 45 ecmov     dword [ebp-0x14 {var_18}], eaxOpcode: 8b 00mov     eax, dword [eax]Opcode: 3b 45 f8cmp     eax, dword [ebp-0x8 {var_c}]Opcode: 74 c1je      0x804a9a7Basic Block 2Opcode: 8d 05 88 fe 04 08lea     eax, [data_804fe88]  {"BAD FREE: large address is not a…"}Opcode: 8b 4d f0mov     ecx, dword [ebp-0x10 {var_14}]Opcode: 89 04 24mov     dword [esp {var_2c}], eaxOpcode: 89 4c 24 04mov     dword [esp+data_4 {var_28}], ecxOpcode: e8 3a e2 ff ffcall    sub_8048c7fOpcode: e8 3a e2 ff ff{ Does not return }Basic Block 3Opcode: 8b 45 ecmov     eax, dword [ebp-0x14 {var_18}]Opcode: 81 78 04 00 00 02 00cmp     dword [eax+data_4], 0x20000Opcode: 72 cfjb      0x804a982Basic Block 4Opcode: 8d 05 b9 fe 04 08lea     eax, [data_804feb9]  {"BAD FREE: wrong heap address ptr…"}Opcode: 8b 4d f0mov     ecx, dword [ebp-0x10 {var_14}]Opcode: 8b 55 ecmov     edx, dword [ebp-0x14 {var_18}]Opcode: 8b 12mov     edx, dword [edx]Opcode: 8b 75 f8mov     esi, dword [ebp-0x8 {var_c}]Opcode: 89 04 24mov     dword [esp {var_2c}], eaxOpcode: 89 4c 24 04mov     dword [esp+data_4 {var_28}], ecxOpcode: 89 54 24 08mov     dword [esp+data_8 {var_24}], edxOpcode: 89 74 24 0cmov     dword [esp+data_c {var_20}], esiOpcode: e8 74 e2 ff ffcall    sub_8048c7fOpcode: e8 74 e2 ff ff{ Does not return }Basic Block 5Opcode: 8d 05 ef fe 04 08lea     eax, [data_804feef]  {"BAD FREE: wrong block size ptr=%…"}Opcode: 8b 4d f0mov     ecx, dword [ebp-0x10 {var_14}]Opcode: 8b 55 ecmov     edx, dword [ebp-0x14 {var_18}]Opcode: 8b 52 04mov     edx, dword [edx+data_4]Opcode: 89 04 24mov     dword [esp {var_2c}], eaxOpcode: 89 4c 24 04mov     dword [esp+data_4 {var_28}], ecxOpcode: 89 54 24 08mov     dword [esp+data_8 {var_24}], edxOpcode: e8 de e2 ff ffcall    sub_8048c7fOpcode: e8 de e2 ff ff{ Does not return }Basic Block 6Opcode: 8b 45 ecmov     eax, dword [ebp-0x14 {var_18}]Opcode: 81 78 04 ff 0f 00 80cmp     dword [eax+data_4], 0x80000fffOpcode: 77 c3ja      0x804a982Basic Block 7Opcode: 8b 45 ecmov     eax, dword [ebp-0x14 {var_18}]Opcode: 8b 40 04mov     eax, dword [eax+data_4]Opcode: 25 ff 0f 00 00and     eax, 0xfffOpcode: 85 c0test    eax, eaxOpcode: 0f 84 27 ed ff ffje      0x80496f9Basic Block 8Opcode: 8b 45 ecmov     eax, dword [ebp-0x14 {var_18}]Opcode: 8b 4d ecmov     ecx, dword [ebp-0x14 {var_18}]Opcode: 8b 49 04mov     ecx, dword [ecx+data_4]Opcode: 89 04 24mov     dword [esp {var_2c}], eaxOpcode: 89 4c 24 04mov     dword [esp+data_4 {var_28}], ecxOpcode: e8 12 f3 ff ffcall    sub_8048a20Opcode: 90nop     Opcode: 89 45 e8mov     dword [ebp-0x18 {var_1c}], eaxOpcode: 83 c4 24add     esp, 0x24 {var_8}Opcode: 5epop     esiOpcode: 5dpop     ebpOpcode: e9 20 eb ff ffjmp     0x804823cBasic Block 9Opcode: eb aejmp     0x804a982Basic Block 10Opcode: 81 24 24 ff ff ff 7fand     dword [esp {__return_addr}], 0x7fffffffOpcode: 8b 0c 24mov     ecx, dword [esp {__return_addr}]Opcode: 80 39 90cmp     byte [ecx], 0x90Opcode: 0f 85 c2 2b 00 00jne     0x804ae11Basic Block 11Opcode: 59pop     ecxOpcode: 80 79 ff f4cmp     byte [ecx-0x1], 0xf4Opcode: 75 08jne     0x804ae20Basic Block 12Opcode: c3retn    Basic Block 13Opcode: 81 f9 a0 80 04 08cmp     ecx, data_80480a0Opcode: 0f 84 65 01 00 00je      0x804af91Basic Block 14Opcode: 81 e1 ff ff ff 7fand     ecx, 0x7fffffffOpcode: ff e1jmp     ecxBasic Block 15Opcode: 55push    ebpOpcode: 89 e5mov     ebp, espOpcode: 83 ec 0csub     esp, data_c {var_c}Opcode: 8b 45 0cmov     eax, dword [ebp+data_c {arg_c}]Opcode: 8b 4d 08mov     ecx, dword [ebp+data_8 {arg_8}]Opcode: 89 4d f8mov     dword [ebp-0x8 {var_8}], ecxOpcode: 89 45 f4mov     dword [ebp-0xc {var_c}], eaxOpcode: 8b 45 f8mov     eax, dword [ebp-0x8 {var_8}]Opcode: 8b 80 84 00 00 00mov     eax, dword [eax+0x84]Opcode: 8b 4d f4mov     ecx, dword [ebp-0xc {var_c}]Opcode: 3b 81 84 00 00 00cmp     eax, dword [ecx+0x84]Opcode: 0f 86 06 02 00 00jbe     0x804b1c1Basic Block 16Opcode: b8 01 00 00 00mov     eax, data_1Opcode: cd 80int     0x80Opcode: cd 80{ Does not return }Basic Block 17Opcode: 8b 45 f8mov     eax, dword [ebp-0x8 {var_8}]Opcode: 8b 80 84 00 00 00mov     eax, dword [eax+0x84]Opcode: 8b 4d f4mov     ecx, dword [ebp-0xc {var_c}]Opcode: 3b 81 84 00 00 00cmp     eax, dword [ecx+0x84]Opcode: 75 e5jne     0x804b1baBasic Block 18Opcode: ba 01 00 00 00mov     edx, data_1Opcode: e9 ee 01 00 00jmp     0x804b1b3Basic Block 19Opcode: ba ff ff ff ffmov     edx, 0xffffffffOpcode: eb f2jmp     0x804b1b3Basic Block 20Opcode: ba 00 00 00 00mov     edx, data_0Opcode: eb d7jmp     0x804b1b3Basic Block 21Opcode: 89 d0mov     eax, edxOpcode: 83 c4 0cadd     esp, data_c {__return_addr}Opcode: 5dpop     ebpOpcode: c3retn