Function at 0x48b72c
Capabilities:
Get disk information via ioctl

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x168d
push 0
push 0
dec ecx
jne 0x48b734
push ecx
push ebx
push esi
push edi
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
mov ecx, 0x1a
lea eax, [ebp - 0xb3d0]
mov edx, dword [0x48a7b0]
call fcn.00404f74
xor eax, eax
push ebp
push 0x48c33e
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 9], 0
call fcn.004aa4dc
test al, al
je 0x48c2ed
lea eax, [ebp - 0x2060]
xor ecx, ecx
mov edx, 0x2008
call fcn.00402f04
lea eax, [ebp - 0xb090]
xor ecx, ecx
mov edx, 0x9030
call fcn.00402f04
push 0
push 0
push 3
push 0
push 3
push 0x80000000
mov eax, dword [ebp - 4]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0xb3d8]
call fcn.00408e8c
mov ecx, dword [ebp - 0xb3d8]
lea eax, [ebp - 0xb3d4]
mov edx, 0x48c358
call fcn.0040483c
mov eax, dword [ebp - 0xb3d4]
call fcn.004049f0
push eax
call sub.kernel32.dll_CreateFileA
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffff
je 0x48c2ed
mov byte [ebp - 0x41], 0
mov byte [ebp - 0x42], 0
call fcn.004aa8cc
test al, al
je 0x48b831
push 0
lea eax, [ebp - 0x14]
push eax
push 0x9030
lea eax, [ebp - 0xb090]
push eax
push 0
push 0
push 0x70050
mov eax, dword [ebp - 0x10]
push eax
call sub.kernel32.dll_DeviceIoControl
cmp eax, 1
sbb eax, eax
inc eax
mov byte [ebp - 0x42], al
cmp byte [ebp - 0x42], 0
jne 0x48b864
push 0
lea eax, [ebp - 0x14]
push eax
push 0x2008
lea eax, [ebp - 0x2060]
push eax
push 0
push 0
push 0x7400c
mov eax, dword [ebp - 0x10]
push eax
call sub.kernel32.dll_DeviceIoControl
cmp eax, 1
sbb eax, eax
inc eax
mov byte [ebp - 0x41], al
mov al, byte [ebp - 0x41]
or al, byte [ebp - 0x42]
je 0x48c2e4
mov byte [ebp - 9], 1
mov dl, 1
mov eax, dword [0x417334]
call fcn.00403770
mov dword [ebp - 0x48], eax
mov dl, 1
mov eax, dword [0x417334]
call fcn.00403770
mov dword [ebp - 0x4c], eax
xor eax, eax
push ebp
push 0x48b8b4
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x48]
xor edx, edx
call fcn.004aa8e0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x48b8be
mov eax, dword [ebp - 0x48]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x48b9ee
inc eax
mov dword [ebp - 0x50], eax
xor ebx, ebx
lea ecx, [ebp - 0xb3dc]
mov edx, ebx
mov eax, dword [ebp - 0x48]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0xb3dc]
lea ecx, [ebp - 0x24]
mov edx, 0x48c374
call fcn.004bec60
lea ecx, [ebp - 0xb3e0]
mov edx, ebx
mov eax, dword [ebp - 0x48]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0xb3e0]
lea ecx, [ebp - 0x2c]
mov edx, 0x48c384
call fcn.004bec60
lea ecx, [ebp - 0xb3e4]
mov edx, ebx
mov eax, dword [ebp - 0x48]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0xb3e4]
lea ecx, [ebp - 0x28]
mov edx, 0x48c394
call fcn.004bec60
mov eax, dword [ebp - 0x24]
mov edx, 0x48c3a8
call fcn.0040493c
jb 0x48b9e4
lea edx, [ebp - 0xb3e8]
mov eax, dword [ebp - 0x2c]
call fcn.0040891c
mov eax, dword [ebp - 0xb3e8]
mov edx, 0x48c3b4
call fcn.0040493c
je 0x48b991
lea edx, [ebp - 0xb3ec]
mov eax, dword [ebp - 0x2c]
call fcn.0040891c
mov eax, dword [ebp - 0xb3ec]
mov edx, 0x48c3c8
call fcn.0040493c
jne 0x48b9e4
mov eax, dword [ebp - 0x24]
movzx esi, byte [eax]
sub esi, 0x41
mov edi, esi
shl edi, 2
lea eax, [ebp + edi*8 - 0xb3c0]
push eax
lea ecx, [ebp + edi*8 - 0xb3c8]
lea edx, [ebp + edi*8 - 0xb3cc]
mov eax, dword [ebp - 0x24]
mov al, byte [eax]
call fcn.0048a658
mov byte [ebp + edi*8 - 0xb3d0], al
mov eax, esi
shl eax, 2
cmp byte [ebp + eax*8 - 0xb3d0], 0
je 0x48b9e4
lea eax, [ebp + edi*8 - 0xb3b8]
mov edx, dword [ebp - 0x28]
call fcn.004045c8
inc ebx
dec dword [ebp - 0x50]
jne 0x48b8d5
cmp byte [ebp - 0x42], 0
je 0x48bfca
mov eax, dword [ebp - 0xb090]
sub eax, 1
jb 0x48ba0e
je 0x48bd27
jmp 0x48c2d4
lea eax, [ebp - 0xb090]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [eax + 4]
test eax, eax
jle 0x48c2d4
mov dword [ebp - 0x50], eax
mov ebx, 1
mov eax, ebx
add eax, eax
lea eax, [eax + eax*8]
mov edx, dword [ebp - 0x54]
lea edi, [edx + eax*8 - 0x60]
cmp dword [edi + 0x18], 0
je 0x48bd18
lea eax, [ebp - 0x38]
call fcn.00404530
lea eax, [ebp - 0x34]
call fcn.00404530
lea edx, [ebp - 0x40]
xor eax, eax
mov al, byte [edi + 0x20]
call fcn.0048a7d8
push 0
push 0x100000
mov eax, dword [edi + 8]
mov edx, dword [edi + 0xc]
call fcn.00405424
mov dword [ebp - 0x18], eax
push 0
push 0x100000
mov eax, dword [edi + 0x10]
mov edx, dword [edi + 0x14]
call fcn.00405424
mov dword [ebp - 0x1c], eax
xor eax, eax
mov dword [ebp - 0x20], eax
lea esi, [ebp - 0xb3d0]
cmp byte [esi], 0
je 0x48bb30
mov eax, dword [esi + 4]
cmp eax, dword [ebp - 4]
jne 0x48bb30
mov eax, dword [esi + 8]
mov edx, dword [esi + 0xc]
push edx
push eax
mov eax, dword [edi + 8]
mov edx, dword [edi + 0xc]
cmp edx, dword [esp + 4]
jne 0x48bac3
cmp eax, dword [esp]
pop edx
pop eax
jne 0x48bb30
mov eax, dword [esi + 0x10]
mov edx, dword [esi + 0x14]
push edx
push eax
mov eax, dword [edi + 0x10]
mov edx, dword [edi + 0x14]
cmp edx, dword [esp + 4]
jne 0x48bade
cmp eax, dword [esp]
pop edx
pop eax
jne 0x48bb30
lea eax, [ebp - 0xb3f0]
mov edx, dword [ebp - 0x20]
add edx, 0x41
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0xb3f0]
lea eax, [ebp - 0xb3f4]
call fcn.00402c7c
mov edx, 0x48c3d8
lea eax, [ebp - 0xb3f4]
mov cl, 2
call fcn.00402c4c
lea edx, [ebp - 0xb3f4]
lea eax, [ebp - 0x38]
call fcn.00404794
lea eax, [ebp - 0x34]
mov edx, dword [esi + 0x18]
call fcn.004045c8
inc dword [ebp - 0x20]
add esi, 0x20
cmp dword [ebp - 0x20], 0x1a
jne 0x48ba97
cmp dword [ebp - 0x1c], 0x800
jbe 0x48bb9f
mov eax, dword [ebp - 0x40]
mov edx, 0x48c3e4
call fcn.0040493c
je 0x48bb67
mov eax, dword [ebp - 0x40]
mov edx, 0x48c3f0
call fcn.0040493c
jne 0x48bb74
lea eax, [ebp - 0x40]
mov edx, 0x48c404
call fcn.004047f8
mov eax, dword [ebp - 0x40]
mov edx, 0x48c410
call fcn.0040493c
je 0x48bb92
mov eax, dword [ebp - 0x40]
mov edx, 0x48c420
call fcn.0040493c
jne 0x48bb9f
lea eax, [ebp - 0x40]
mov edx, 0x48c438
call fcn.004045c8
cmp dword [ebp - 0x18], 0
jne 0x48bbaf
cmp dword [ebp - 0x1c], 0
je 0x48bd18
mov eax, dword [edi + 0x18]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x3c]
call fcn.00408e8c
jmp 0x48bbd0
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x3c]
mov edx, 0x48c44c
call fcn.0040483c
mov eax, dword [ebp - 0x3c]
call fcn.004047f0
cmp eax, 3
jl 0x48bbc0
cmp byte [edi + 0x21], 0
je 0x48bbf2
lea eax, [ebp - 0x30]
mov edx, 0x48c458
call fcn.004045c8
jmp 0x48bbff
lea eax, [ebp - 0x30]
mov edx, 0x48c464
call fcn.004045c8
lea ecx, [ebp - 0xb3fc]
mov edx, dword [ebp - 0x3c]
mov eax, 0x48c470
call fcn.004bebbc
push dword [ebp - 0xb3fc]
lea ecx, [ebp - 0xb400]
mov edx, dword [ebp - 0x40]
mov eax, 0x48c480
call fcn.004bebbc
push dword [ebp - 0xb400]
lea ecx, [ebp - 0xb404]
mov edx, dword [ebp - 0x38]
mov eax, 0x48c374
call fcn.004bebbc
push dword [ebp - 0xb404]
lea ecx, [ebp - 0xb408]
mov edx, dword [ebp - 0x34]
mov eax, 0x48c394
call fcn.004bebbc
push dword [ebp - 0xb408]
mov eax, dword [ebp - 0x18]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0xb410]
call fcn.00408e8c
lea eax, [ebp - 0xb410]
mov edx, 0x48c494
call fcn.004047f8
mov edx, dword [ebp - 0xb410]
lea ecx, [ebp - 0xb40c]
mov eax, 0x48c4a0
call fcn.004bebbc
push dword [ebp - 0xb40c]
mov eax, dword [ebp - 0x1c]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0xb418]
call fcn.00408e8c
lea eax, [ebp - 0xb418]
mov edx, 0x48c494
call fcn.004047f8
mov edx, dword [ebp - 0xb418]
lea ecx, [ebp - 0xb414]
mov eax, 0x48c4b4
call fcn.004bebbc
push dword [ebp - 0xb414]
lea ecx, [ebp - 0xb41c]
mov edx, dword [ebp - 0x30]
mov eax, 0x48c4c8
call fcn.004bebbc
push dword [ebp - 0xb41c]
lea eax, [ebp - 0xb3f8]
mov edx, 7
call fcn.004048b0
mov edx, dword [ebp - 0xb3f8]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc ebx
dec dword [ebp - 0x50]
jne 0x48ba2d
jmp 0x48c2d4
lea eax, [ebp - 0xb090]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
mov eax, dword [eax + 4]
test eax, eax
jle 0x48c2d4
mov dword [ebp - 0x50], eax
mov ebx, 1
mov eax, ebx
add eax, eax
lea eax, [eax + eax*8]
mov edx, dword [ebp - 0x58]
lea edi, [edx + eax*8 - 0x60]
cmp dword [edi + 0x18], 0
je 0x48bfbb
lea eax, [ebp - 0x38]
call fcn.00404530
lea eax, [ebp - 0x34]
call fcn.00404530
lea edx, [ebp - 0x40]
lea eax, [edi + 0x20]
call fcn.0048b548
push 0
push 0x100000
mov eax, dword [edi + 8]
mov edx, dword [edi + 0xc]
call fcn.00405424
mov dword [ebp - 0x18], eax
push 0
push 0x100000
mov eax, dword [edi + 0x10]
mov edx, dword [edi + 0x14]
call fcn.00405424
mov dword [ebp - 0x1c], eax
xor eax, eax
mov dword [ebp - 0x20], eax
lea esi, [ebp - 0xb3d0]
cmp byte [esi], 0
je 0x48be47
mov eax, dword [esi + 4]
cmp eax, dword [ebp - 4]
jne 0x48be47
mov eax, dword [esi + 8]
mov edx, dword [esi + 0xc]
push edx
push eax
mov eax, dword [edi + 8]
mov edx, dword [edi + 0xc]
cmp edx, dword [esp + 4]
jne 0x48bdda
cmp eax, dword [esp]
pop edx
pop eax
jne 0x48be47
mov eax, dword [esi + 0x10]
mov edx, dword [esi + 0x14]
push edx
push eax
mov eax, dword [edi + 0x10]
mov edx, dword [edi + 0x14]
cmp edx, dword [esp + 4]
jne 0x48bdf5
cmp eax, dword [esp]
pop edx
pop eax
jne 0x48be47
lea eax, [ebp - 0xb3f0]
mov edx, dword [ebp - 0x20]
add edx, 0x41
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0xb3f0]
lea eax, [ebp - 0xb3f4]
call fcn.00402c7c
mov edx, 0x48c3d8
lea eax, [ebp - 0xb3f4]
mov cl, 2
call fcn.00402c4c
lea edx, [ebp - 0xb3f4]
lea eax, [ebp - 0x38]
call fcn.00404794
lea eax, [ebp - 0x34]
mov edx, dword [esi + 0x18]
call fcn.004045c8
inc dword [ebp - 0x20]
add esi, 0x20
cmp dword [ebp - 0x20], 0x1a
jne 0x48bdae
cmp dword [ebp - 0x18], 0
jne 0x48be67
cmp dword [ebp - 0x1c], 0
je 0x48bfbb
mov eax, dword [edi + 0x18]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x3c]
call fcn.00408e8c
jmp 0x48be88
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x3c]
mov edx, 0x48c44c
call fcn.0040483c
mov eax, dword [ebp - 0x3c]
call fcn.004047f0
cmp eax, 3
jl 0x48be78
lea eax, [ebp - 0x30]
mov edx, 0x48c464
call fcn.004045c8
lea ecx, [ebp - 0xb424]
mov edx, dword [ebp - 0x3c]
mov eax, 0x48c470
call fcn.004bebbc
push dword [ebp - 0xb424]
lea ecx, [ebp - 0xb428]
mov edx, dword [ebp - 0x40]
mov eax, 0x48c480
call fcn.004bebbc
push dword [ebp - 0xb428]
lea ecx, [ebp - 0xb42c]
mov edx, dword [ebp - 0x38]
mov eax, 0x48c374
call fcn.004bebbc
push dword [ebp - 0xb42c]
lea ecx, [ebp - 0xb430]
mov edx, dword [ebp - 0x34]
mov eax, 0x48c394
call fcn.004bebbc
push dword [ebp - 0xb430]
mov eax, dword [ebp - 0x18]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0xb438]
call fcn.00408e8c
lea eax, [ebp - 0xb438]
mov edx, 0x48c494
call fcn.004047f8
mov edx, dword [ebp - 0xb438]
lea ecx, [ebp - 0xb434]
mov eax, 0x48c4a0
call fcn.004bebbc
push dword [ebp - 0xb434]
mov eax, dword [ebp - 0x1c]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0xb440]
call fcn.00408e8c
lea eax, [ebp - 0xb440]
mov edx, 0x48c494
call fcn.004047f8
mov edx, dword [ebp - 0xb440]
lea ecx, [ebp - 0xb43c]
mov eax, 0x48c4b4
call fcn.004bebbc
push dword [ebp - 0xb43c]
lea ecx, [ebp - 0xb444]
mov edx, dword [ebp - 0x30]
mov eax, 0x48c4c8
call fcn.004bebbc
push dword [ebp - 0xb444]
lea eax, [ebp - 0xb420]
mov edx, 7
call fcn.004048b0
mov edx, dword [ebp - 0xb420]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc ebx
dec dword [ebp - 0x50]
jne 0x48bd46
jmp 0x48c2d4
cmp byte [ebp - 0x41], 0
je 0x48c2d4
mov eax, dword [ebp - 0x2060]
test eax, eax
jle 0x48c2d4
mov dword [ebp - 0x50], eax
lea esi, [ebp - 0x2058]
mov edi, esi
cmp dword [edi + 0x14], 0
je 0x48c2c8
lea eax, [ebp - 0x38]
call fcn.00404530
lea eax, [ebp - 0x34]
call fcn.00404530
lea edx, [ebp - 0x40]
xor eax, eax
mov al, byte [edi + 0x18]
call fcn.0048a7d8
push 0
push 0x100000
mov eax, dword [edi]
mov edx, dword [edi + 4]
call fcn.00405424
mov dword [ebp - 0x18], eax
push 0
push 0x100000
mov eax, dword [edi + 8]
mov edx, dword [edi + 0xc]
call fcn.00405424
mov dword [ebp - 0x1c], eax
xor eax, eax
mov dword [ebp - 0x20], eax
lea ebx, [ebp - 0xb3d0]
cmp byte [ebx], 0
je 0x48c0e0
mov eax, dword [ebx + 4]
cmp eax, dword [ebp - 4]
jne 0x48c0e0
mov eax, dword [ebx + 8]
mov edx, dword [ebx + 0xc]
push edx
push eax
mov eax, dword [edi]
mov edx, dword [edi + 4]
cmp edx, dword [esp + 4]
jne 0x48c073
cmp eax, dword [esp]
pop edx
pop eax
jne 0x48c0e0
mov eax, dword [ebx + 0x10]
mov edx, dword [ebx + 0x14]
push edx
push eax
mov eax, dword [edi + 8]
mov edx, dword [edi + 0xc]
cmp edx, dword [esp + 4]
jne 0x48c08e
cmp eax, dword [esp]
pop edx
pop eax
jne 0x48c0e0
lea eax, [ebp - 0xb3f0]
mov edx, dword [ebp - 0x20]
add edx, 0x41
mov byte [eax + 1], dl
mov byte [eax], 1
lea edx, [ebp - 0xb3f0]
lea eax, [ebp - 0xb3f4]
call fcn.00402c7c
mov edx, 0x48c3d8
lea eax, [ebp - 0xb3f4]
mov cl, 2
call fcn.00402c4c
lea edx, [ebp - 0xb3f4]
lea eax, [ebp - 0x38]
call fcn.00404794
lea eax, [ebp - 0x34]
mov edx, dword [ebx + 0x18]
call fcn.004045c8
inc dword [ebp - 0x20]
add ebx, 0x20
cmp dword [ebp - 0x20], 0x1a
jne 0x48c048
cmp dword [ebp - 0x1c], 0x800
jbe 0x48c14f
mov eax, dword [ebp - 0x40]
mov edx, 0x48c3e4
call fcn.0040493c
je 0x48c117
mov eax, dword [ebp - 0x40]
mov edx, 0x48c3f0
call fcn.0040493c
jne 0x48c124
lea eax, [ebp - 0x40]
mov edx, 0x48c404
call fcn.004047f8
mov eax, dword [ebp - 0x40]
mov edx, 0x48c410
call fcn.0040493c
je 0x48c142
mov eax, dword [ebp - 0x40]
mov edx, 0x48c420
call fcn.0040493c
jne 0x48c14f
lea eax, [ebp - 0x40]
mov edx, 0x48c438
call fcn.004045c8
cmp dword [ebp - 0x18], 0
jne 0x48c15f
cmp dword [ebp - 0x1c], 0
je 0x48c2c8
mov eax, dword [edi + 0x14]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0x3c]
call fcn.00408e8c
jmp 0x48c180
lea eax, [ebp - 0x3c]
mov ecx, dword [ebp - 0x3c]
mov edx, 0x48c44c
call fcn.0040483c
mov eax, dword [ebp - 0x3c]
call fcn.004047f0
cmp eax, 3
jl 0x48c170
cmp byte [edi + 0x19], 0
je 0x48c1a2
lea eax, [ebp - 0x30]
mov edx, 0x48c458
call fcn.004045c8
jmp 0x48c1af
lea eax, [ebp - 0x30]
mov edx, 0x48c464
call fcn.004045c8
lea ecx, [ebp - 0xb44c]
mov edx, dword [ebp - 0x3c]
mov eax, 0x48c470
call fcn.004bebbc
push dword [ebp - 0xb44c]
lea ecx, [ebp - 0xb450]
mov edx, dword [ebp - 0x40]
mov eax, 0x48c480
call fcn.004bebbc
push dword [ebp - 0xb450]
lea ecx, [ebp - 0xb454]
mov edx, dword [ebp - 0x38]
mov eax, 0x48c374
call fcn.004bebbc
push dword [ebp - 0xb454]
lea ecx, [ebp - 0xb458]
mov edx, dword [ebp - 0x34]
mov eax, 0x48c394
call fcn.004bebbc
push dword [ebp - 0xb458]
mov eax, dword [ebp - 0x18]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0xb460]
call fcn.00408e8c
lea eax, [ebp - 0xb460]
mov edx, 0x48c494
call fcn.004047f8
mov edx, dword [ebp - 0xb460]
lea ecx, [ebp - 0xb45c]
mov eax, 0x48c4a0
call fcn.004bebbc
push dword [ebp - 0xb45c]
mov eax, dword [ebp - 0x1c]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0xb468]
call fcn.00408e8c
lea eax, [ebp - 0xb468]
mov edx, 0x48c494
call fcn.004047f8
mov edx, dword [ebp - 0xb468]
lea ecx, [ebp - 0xb464]
mov eax, 0x48c4b4
call fcn.004bebbc
push dword [ebp - 0xb464]
lea ecx, [ebp - 0xb46c]
mov edx, dword [ebp - 0x30]
mov eax, 0x48c4c8
call fcn.004bebbc
push dword [ebp - 0xb46c]
lea eax, [ebp - 0xb448]
mov edx, 7
call fcn.004048b0
mov edx, dword [ebp - 0xb448]
mov eax, dword [ebp - 8]
mov eax, dword [eax]
mov ecx, dword [eax]
call dword [ecx + 0x38]
add esi, 0x20
dec dword [ebp - 0x50]
jne 0x48bfeb
mov eax, dword [ebp - 0x48]
call fcn.004037a0
mov eax, dword [ebp - 0x4c]
call fcn.004037a0
mov eax, dword [ebp - 0x10]
push eax
call sub.kernel32.dll_CloseHandle
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x48c345
lea eax, [ebp - 0xb46c]
mov edx, 0x1e
call fcn.00404554
lea eax, [ebp - 0xb3ec]
mov edx, 7
call fcn.00404554
lea eax, [ebp - 0xb3d0]
mov ecx, 0x1a
mov edx, dword [0x48a7b0]
call fcn.00405060
lea eax, [ebp - 0x40]
mov edx, 8
call fcn.00404554
ret