Function at 0x448d2d
Capabilities:
Get keyboard layout
Read file via mapping
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x68
mov eax, dword [ebp + 8]
push ebx
xor ebx, ebx
push esi
mov dword [0x47f598], eax
mov dword [0x47f57c], ebx
mov dword [0x47f578], 5
call fcn.0044b7f7
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
call fcn.004419d1
call fcn.0044b394
test eax, eax
jne 0x448d86
push dword [0x45d510]
push str._s_Fatal_Error
call fcn.0040c34a
pop ecx
pop ecx
push 0x30
mov esi, eax
push esi
push str.Windows_refuses_to_report_a_version
jmp 0x448deb
mov eax, dword [0x47f4c4]
cmp eax, 4
jb 0x448d9b
jne 0x448dab
cmp dword [0x47f4d0], 2
je 0x448dab
push str.MSWHEEL_ROLLMSG
call dword [sym.imp.USER32.dll_RegisterWindowMessageA]
mov dword [0x47b7f8], eax
call fcn.0044a6fc
call fcn.00443fd1
call fcn.004020d5
push ebx
mov dword [0x47f55c], eax
call dword [sym.imp.ole32.dll_CoInitialize]
cmp eax, ebx
je 0x448e02
cmp eax, 1
je 0x448e02
push dword [0x45d510]
push str._s_Fatal_Error
call fcn.0040c34a
pop ecx
pop ecx
push 0x30
mov esi, eax
push esi
push str.Failed_to_initialize_COM_subsystem
push ebx
call dword [sym.imp.USER32.dll_MessageBoxA]
push esi
call fcn.0040bda9
pop ecx
xor eax, eax
pop esi
inc eax
pop ebx
leave
ret 0x10
push ebx
call fcn.0044e7f9
test eax, eax
pop ecx
jne 0x448e30
push ebx
push str.Could_not_restrict_process_ACL:__s
call fcn.0040c34a
mov esi, eax
push esi
push ebx
call fcn.00441c0c
push esi
call fcn.0040bda9
push ebx
call fcn.0040bda9
add esp, 0x18
mov eax, dword [0x45d514]
push eax
mov dword [ebp - 8], ebx
mov dword [ebp - 0xc], ebx
mov dword [0x47f554], eax
call fcn.0040f41c
cmp eax, ebx
pop ecx
mov dword [0x47f560], ebx
je 0x448e59
mov eax, dword [eax + 0x48]
mov dword [0x47f560], eax
push ebx
push 0x73
push dword [0x47f55c]
call fcn.004026ac
push dword [0x47f55c]
push ebx
call fcn.00411cab
mov edi, dword [ebp + 0x10]
add esp, 0x14
cmp byte [edi], bl
mov esi, edi
je 0x448ead
cmp dword [0x47b8c8], 1
movsx eax, byte [esi]
jle 0x448e97
push 8
push eax
call fcn.004531ed
pop ecx
pop ecx
jmp 0x448ea4
mov ecx, dword [str.________________________________H]
movzx eax, byte [ecx + eax*2]
and eax, 8
cmp eax, ebx
je 0x448ead
inc esi
cmp byte [esi], bl
jne 0x448e7f
mov al, byte [esi]
cmp al, 0x40
jne 0x448fe6
push esi
call fcn.004521e0
pop ecx
mov edi, eax
jmp 0x448eee
cmp dword [0x47b8c8], 1
movsx eax, byte [edi + esi - 1]
jle 0x448edc
push 8
push eax
call fcn.004531ed
pop ecx
pop ecx
jmp 0x448ee9
mov ecx, dword [str.________________________________H]
movzx eax, byte [ecx + eax*2]
and eax, 8
cmp eax, ebx
je 0x448ef3
dec edi
cmp edi, 1
jg 0x448ec2
mov byte [edi + esi], bl
push dword [0x47f55c]
inc esi
push esi
call fcn.00411cab
push dword [0x47f55c]
call fcn.0040bdb6
add esp, 0xc
test eax, eax
jne 0x448f24
call fcn.00441a04
test eax, eax
jne 0x448f24
push ebx
jmp 0x44993b
mov dword [ebp - 0xc], 1
push dword [0x47f55c]
call fcn.00401ff8
cmp dword [0x47f58c], ebx
pop ecx
jne 0x448f44
cmp dword [ebp - 8], ebx
je 0x448f4b
mov dword [ebp - 0xc], 1
cmp dword [ebp - 0xc], ebx
je 0x448f60
push dword [0x47f55c]
call fcn.0040bdb6
test eax, eax
pop ecx
jne 0x448f69
call fcn.00441a04
test eax, eax
je 0x448f1e
push ebx
push dword [0x47f55c]
call fcn.0040235b
push eax
call fcn.0040c11d
push 0x463984
push eax
mov dword [ebp + 0x10], eax
call fcn.00454400
mov esi, eax
add esi, dword [ebp + 0x10]
add esp, 0x14
cmp byte [esi], bl
je 0x448fbb
push 0x40
push esi
call fcn.00454910
mov edi, eax
cmp edi, ebx
pop ecx
pop ecx
je 0x448fbb
push esi
mov byte [edi], bl
push 0x32
push dword [0x47f55c]
call fcn.00402785
add esp, 0xc
lea esi, [edi + 1]
push 0x3a
push esi
call fcn.0040ba8d
mov edi, eax
cmp edi, ebx
pop ecx
pop ecx
je 0x448fde
lea eax, [edi + 1]
push 0x3a
push eax
call fcn.0040ba8d
test eax, eax
pop ecx
pop ecx
jne 0x448fde
mov byte [edi], bl
mov ecx, dword [ebp + 0x10]
jmp 0x4492e9
cmp al, 0x26
jne 0x44904b
lea eax, [ebp + 0x10]
push eax
lea eax, [ebp - 0xc]
push eax
push str._p:_u
inc esi
push esi
call fcn.004545b5
add esp, 0x10
cmp eax, 2
jne 0x448f15
push dword [ebp + 0x10]
push ebx
push ebx
push 4
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov esi, eax
cmp esi, ebx
je 0x448f15
push dword [ebp + 0x10]
push esi
push dword [0x47f55c]
call fcn.00402b80
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x448f24
push ebx
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x10]
push eax
push edi
call fcn.00450cbf
mov ecx, dword [ebp - 0x10]
add esp, 0x10
cmp ecx, ebx
mov dword [ebp + 0x10], ebx
jle 0x448f2b
mov dword [ebp - 4], 1
cmp dword [ebp - 4], ecx
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp + 0x10]
lea eax, [eax + edx*4]
mov esi, dword [eax]
jge 0x449087
mov eax, dword [eax + 4]
jmp 0x449089
xor eax, eax
push dword [0x47f55c]
push 1
push eax
push esi
call fcn.00401189
add esp, 0x10
cmp eax, 0xfffffffe
jne 0x4490ab
push esi
push str.option___s__requires_an_argument
jmp 0x449236
cmp eax, 2
jne 0x4490bb
inc dword [ebp + 0x10]
inc dword [ebp - 4]
jmp 0x44923d
cmp eax, 1
je 0x44923d
push str._cleanup
push esi
call fcn.00452490
test eax, eax
pop ecx
pop ecx
je 0x44925d
push str._cleanup_during_uninstall
push esi
call fcn.00452490
test eax, eax
pop ecx
pop ecx
je 0x44925d
push str._pgpfp
push esi
call fcn.00452490
test eax, eax
pop ecx
pop ecx
je 0x449254
cmp byte [esi], 0x2d
je 0x449230
cmp dword [ebp - 8], ebx
mov edi, esi
je 0x44914e
push dword [0x47f55c]
push 1
push esi
push 0x45d6bc
call fcn.00401189
add esp, 0x10
cmp eax, 2
je 0x44923d
push 0x22d
push str...windowswindow.c
push str.ret__2
call fcn.00452518
add esp, 0xc
jmp 0x44923d
push 7
push str.telnet:
push esi
call fcn.00452270
add esp, 0xc
test eax, eax
jne 0x4491df
add esi, 7
cmp byte [esi], 0x2f
jne 0x449172
cmp byte [esi + 1], 0x2f
jne 0x449172
inc esi
inc esi
xor edi, edi
inc edi
push edi
push 2
push dword [0x47f55c]
call fcn.004026ac
push 0x4737b8
push esi
call fcn.0040ba68
add eax, esi
mov cl, byte [eax]
add esp, 0x14
cmp cl, bl
je 0x44919c
mov byte [eax], bl
inc eax
cmp cl, 0x3a
jne 0x4491b9
push eax
call fcn.00452483
push eax
push edi
push dword [0x47f55c]
call fcn.004026ac
add esp, 0x10
jmp 0x4491ca
push 0xffffffffffffffff
push edi
push dword [0x47f55c]
call fcn.004026ac
add esp, 0xc
push esi
push ebx
push dword [0x47f55c]
call fcn.00402785
add esp, 0xc
mov dword [ebp - 8], edi
jmp 0x44923d
cmp byte [esi], bl
je 0x449217
cmp dword [0x47b8c8], 1
movsx eax, byte [esi]
jle 0x4491fb
push 8
push eax
call fcn.004531ed
pop ecx
pop ecx
jmp 0x449208
mov ecx, dword [str.________________________________H]
movzx eax, byte [ecx + eax*2]
and eax, 8
cmp eax, ebx
jne 0x449211
inc esi
cmp byte [esi], bl
jne 0x4491e3
cmp byte [esi], bl
je 0x449217
mov byte [esi], bl
push edi
push ebx
push dword [0x47f55c]
call fcn.00402785
add esp, 0xc
mov dword [ebp - 8], 1
jmp 0x44923d
push esi
push str.unknown_option___s_
call fcn.004425a3
pop ecx
pop ecx
inc dword [ebp + 0x10]
mov ecx, dword [ebp - 0x10]
inc dword [ebp - 4]
cmp dword [ebp + 0x10], ecx
jl 0x449072
jmp 0x448f2b
call fcn.00450c5a
push 1
jmp 0x4492d6
push str._cleanup_during_uninstall
push esi
call fcn.00452490
test eax, eax
pop ecx
pop ecx
push dword [0x45d510]
jne 0x44928b
push str.Remove_saved_sessions_and_random_seed_file__n_nIf_you_hit_Yes__ALL_Registry_entries_associated_nwith__s_will_be_removed__as_well_as_the_nrandom_seed_file._THIS_PROCESS_WILL_nDESTROY_YOUR_SAVED_SESSIONS._n_This_only_affects_the_currently_logged_in_user.__n_nIf_you_hit_No__uninstallation_will_proceed__but_nsaved_sessions_etc_will_be_left_on_the_machine.
call fcn.0040c34a
push dword [0x45d510]
push str._s_Uninstallation
jmp 0x4492a0
push str.This_procedure_will_remove_ALL_Registry_entries_nassociated_with__s__and_will_also_remove_nthe_random_seed_file.__This_only_affects_the_ncurrently_logged_in_user.__n_nTHIS_PROCESS_WILL_DESTROY_YOUR_SAVED_SESSIONS._nAre_you_really_sure_you_want_to_continue_
call fcn.0040c34a
push dword [0x45d510]
push str._s_Warning
mov esi, eax
call fcn.0040c34a
add esp, 0x10
push 4
mov edi, eax
push 0x134
push edi
push esi
call fcn.00450bfd
add esp, 0x10
cmp eax, 6
jne 0x4492c7
call fcn.0044ffa3
push esi
call fcn.0040bda9
push edi
call fcn.0040bda9
pop ecx
pop ecx
push ebx
call fcn.00454efa
mov al, byte [esi]
cmp al, 0x20
je 0x4492e8
cmp al, 9
je 0x4492e8
mov byte [ecx], al
inc ecx
inc esi
cmp byte [esi], bl
jne 0x4492db
push dword [ebp + 0x10]
mov byte [ecx], bl
push ebx
push dword [0x47f55c]
call fcn.00402785
push dword [ebp + 0x10]
call fcn.0040bda9
add esp, 0x10
cmp dword [ebp + 0xc], ebx
jne 0x449365
mov eax, dword [ebp + 8]
push 0xc8
push eax
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], 0x446ffb
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], eax
call dword [sym.imp.USER32.dll_LoadIconA]
push 0x7f01
push ebx
mov dword [ebp - 0x38], eax
call dword [sym.imp.USER32.dll_LoadCursorA]
push dword [0x45d510]
mov dword [ebp - 0x34], eax
push ebx
push ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], ebx
call fcn.0040c453
mov dword [ebp - 0x28], eax
add esp, 0xc
lea eax, [ebp - 0x4c]
push eax
call dword [sym.imp.USER32.dll_RegisterClassW]
push 0xb10
push ebx
mov edi, 0x47d160
push edi
call fcn.00452e50
call fcn.004430c6
call fcn.0044530e
push 0x6e
push dword [0x47f55c]
mov dword [0x47d150], 0xa
mov dword [0x47dcb0], 0x14
mov dword [0x47cdfc], 0x19
mov dword [0x47dca4], 0x1c
call fcn.00402257
mov esi, eax
imul esi, dword [0x47d150]
add esi, dword [0x47cdfc]
push 0x6f
push dword [0x47f55c]
call fcn.00402257
imul eax, dword [0x47dcb0]
add eax, dword [0x47dca4]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x24]
push eax
call fcn.00445049
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x24]
add esp, 0x20
cmp esi, eax
jle 0x4493f9
mov esi, eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x20]
cmp dword [ebp - 0xc], eax
jle 0x449407
mov dword [ebp - 0xc], eax
push dword [0x45d510]
mov dword [ebp + 0x10], 0xef0000
push ebx
push ebx
mov dword [ebp + 0xc], ebx
call fcn.0040c453
push 0x68
push dword [0x47f55c]
mov dword [ebp - 8], eax
call fcn.00402257
add esp, 0x14
test eax, eax
jne 0x44943c
mov dword [ebp + 0x10], 0xcf0000
push 0x6a
push dword [0x47f55c]
call fcn.00402257
cmp eax, 1
pop ecx
pop ecx
jne 0x449454
and byte [ebp + 0x12], 0xfa
push 0x53
push dword [0x47f55c]
call fcn.00402257
test eax, eax
pop ecx
pop ecx
je 0x44946e
mov dword [ebp + 0xc], 8
push 0x79
push dword [0x47f55c]
call fcn.00402257
test eax, eax
pop ecx
pop ecx
je 0x449485
or byte [ebp + 0xd], 2
push ebx
push dword [ebp + 8]
mov eax, 0x80000000
push ebx
push ebx
push dword [ebp - 0xc]
push esi
push eax
push eax
push dword [ebp + 0x10]
push dword [ebp - 8]
push dword [ebp - 8]
push dword [ebp + 0xc]
call dword [sym.imp.USER32.dll_CreateWindowExW]
push dword [ebp - 8]
mov dword [0x47f57c], eax
call fcn.0040bda9
push ebx
push ebx
call fcn.004429ac
push ebx
push edi
push dword [0x47f55c]
call fcn.0043848d
push dword [0x47f55c]
mov dword [0x47f570], eax
push ebx
call fcn.004093f4
push eax
push dword [0x47f570]
mov dword [0x47f564], eax
call fcn.00436db1
push 0x5b
push dword [0x47f55c]
call fcn.00402257
add esp, 0x30
push eax
push 0x6e
push dword [0x47f55c]
call fcn.00402257
pop ecx
pop ecx
push eax
push 0x6f
push dword [0x47f55c]
call fcn.00402257
pop ecx
pop ecx
push eax
push dword [0x47f570]
call fcn.0043862d
add esp, 0x10
lea eax, [ebp - 0x34]
push eax
push dword [0x47f57c]
call dword [sym.imp.USER32.dll_GetWindowRect]
lea eax, [ebp - 0x24]
push eax
push dword [0x47f57c]
call dword [sym.imp.USER32.dll_GetClientRect]
push 0x7a
push dword [0x47f55c]
call fcn.00402257
lea edx, [eax + eax]
mov dword [0x47e0f4], eax
mov dword [0x47dc74], eax
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x1c]
pop ecx
sub eax, dword [ebp - 0x34]
pop ecx
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x18]
add eax, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0x30]
add eax, edx
add ecx, dword [ebp - 0x28]
mov dword [0x47cdfc], eax
add ecx, edx
mov dword [0x47dca4], ecx
push 0xe
mov edx, dword [0x47f570]
mov esi, dword [edx + 0x128]
imul esi, dword [0x47dcb0]
add esi, ecx
mov ecx, dword [edx + 0x12c]
imul ecx, dword [0x47d150]
push esi
add ecx, eax
push ecx
push ebx
push ebx
push ebx
push dword [0x47f57c]
call dword [sym.imp.USER32.dll_SetWindowPos]
mov eax, dword [0x47d150]
add eax, 0xf
push 0x10
pop ecx
cdq
idiv ecx
push 1
mov esi, eax
imul esi, dword [0x47dcb0]
shl esi, 1
push esi
call fcn.0040bcdf
push esi
mov edi, eax
push ebx
push edi
call fcn.00452e50
add esp, 0x14
push edi
push 1
push 1
push dword [0x47dcb0]
push dword [0x47d150]
call dword [sym.imp.GDI32.dll_CreateBitmap]
push edi
mov dword [0x47dcd0], eax
call fcn.0040bda9
pop ecx
push dword [0x47dcb0]
push dword [0x47d150]
push dword [0x47dcd0]
push dword [0x47f57c]
call dword [sym.imp.USER32.dll_CreateCaret]
mov eax, dword [0x47f570]
add eax, 0x128
mov dword [ebp - 0x40], 0x1c
mov dword [ebp - 0x3c], 0x1f
mov dword [ebp - 0x38], ebx
mov ecx, dword [eax]
dec ecx
mov dword [ebp - 0x34], ecx
mov eax, dword [eax]
push ebx
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x40]
push eax
push 1
push dword [0x47f57c]
mov dword [ebp - 0x2c], ebx
call dword [sym.imp.USER32.dll_SetScrollInfo]
mov dword [0x47cb98], ebx
mov dword [0x47d154], ebx
call dword [sym.imp.USER32.dll_GetDoubleClickTime]
push ebx
push dword [0x47f57c]
mov dword [0x47dca0], eax
call dword [sym.imp.USER32.dll_GetSystemMenu]
mov dword [0x47ce08], eax
call dword [sym.imp.USER32.dll_CreatePopupMenu]
mov esi, dword [sym.imp.USER32.dll_AppendMenuA]
push str.Paste
push 0x190
push ebx
push eax
mov dword [0x47ce0c], eax
call esi
call dword [sym.imp.USER32.dll_CreateMenu]
push 1
push 0x47dc80
mov dword [0x47dccc], eax
call fcn.00411ae0
pop ecx
pop ecx
call fcn.004422ed
mov dword [ebp + 0x10], ebx
mov edi, 0x800
mov eax, dword [ebp + 0x10]
mov eax, dword [eax + 0x47ce08]
push ebx
push ebx
push edi
push eax
mov dword [ebp + 8], eax
call esi
push str.Event_Log
push 0x10
push ebx
push dword [ebp + 8]
call esi
push ebx
push ebx
push edi
push dword [ebp + 8]
call esi
push str.New_Session...
push 0x20
push ebx
push dword [ebp + 8]
call esi
push str.Duplicate_Session
push 0x30
push ebx
push dword [ebp + 8]
call esi
push str.Saved_Sessions
push dword [0x47dccc]
push 0x10
push dword [ebp + 8]
call esi
push str.Change_Settings...
push 0x50
push ebx
push dword [ebp + 8]
call esi
push ebx
push ebx
push edi
push dword [ebp + 8]
call esi
push str.Copy_All_to_Clipboard
push 0x170
push ebx
push dword [ebp + 8]
call esi
push str.Clear_Scrollback
push 0x60
push ebx
push dword [ebp + 8]
call esi
push str.Reset_Terminal
push 0x70
push ebx
push dword [ebp + 8]
call esi
push ebx
push ebx
push edi
push dword [ebp + 8]
call esi
push str.Full_Screen
push 0x180
push 0x6a
push dword [0x47f55c]
call fcn.00402257
dec eax
neg eax
pop ecx
sbb eax, eax
pop ecx
inc eax
push eax
push dword [ebp + 8]
call esi
push ebx
push ebx
push edi
push dword [ebp + 8]
call esi
call fcn.0044a862
test eax, eax
je 0x4497bd
push str.Help
push 0x140
push ebx
push dword [ebp + 8]
call esi
push dword [0x45d510]
push str.About__s
call fcn.0040c34a
pop ecx
pop ecx
push eax
push 0x150
push ebx
push dword [ebp + 8]
mov dword [ebp + 0xc], eax
call esi
push dword [ebp + 0xc]
call fcn.0040bda9
add dword [ebp + 0x10], 4
cmp dword [ebp + 0x10], 8
pop ecx
jb 0x4496dd
call fcn.00445d8d
push ebx
call dword [sym.imp.USER32.dll_GetKeyboardLayout]
push eax
call fcn.00442f8e
pop ecx
push dword [ebp + 0x14]
push dword [0x47f57c]
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [0x47f57c]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov dword [0x47dcb4], ebx
mov dword [0x47ce04], ebx
call fcn.00442666
call dword [sym.imp.USER32.dll_GetForegroundWindow]
sub eax, dword [0x47f57c]
neg eax
sbb eax, eax
inc eax
push eax
push dword [0x47f570]
call fcn.00437718
pop ecx
pop ecx
push dword [0x47f57c]
call dword [sym.imp.USER32.dll_UpdateWindow]
call fcn.00401087
test eax, eax
jne 0x44989e
push ebx
push ebx
push ebx
push ebx
lea eax, [ebp - 0x68]
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
test eax, eax
jne 0x44989e
or edi, 0xffffffff
call dword [sym.imp.USER32.dll_GetForegroundWindow]
sub eax, dword [0x47f57c]
neg eax
sbb eax, eax
inc eax
push eax
push dword [0x47f570]
call fcn.00437718
pop ecx
pop ecx
jmp 0x4498a0
xor edi, edi
lea eax, [ebp + 8]
push eax
call fcn.0044a4b8
pop ecx
push 0xff
push edi
push ebx
mov esi, eax
push esi
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_MsgWaitForMultipleObjects]
cmp eax, dword [ebp + 8]
jae 0x4498d3
push dword [esi + eax*4]
call fcn.0044a5b7
push esi
call fcn.0040bda9
pop ecx
jmp 0x4498d9
push esi
call fcn.0040bda9
mov esi, dword [sym.imp.USER32.dll_PeekMessageW]
pop ecx
jmp 0x44991f
cmp dword [ebp - 0x64], 0x12
je 0x449938
push dword [0x47f568]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x44990c
lea eax, [ebp - 0x68]
push eax
push dword [0x47f568]
call dword [sym.imp.USER32.dll_IsDialogMessageA]
test eax, eax
jne 0x449916
lea eax, [ebp - 0x68]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
cmp dword [ebp - 0x64], 0x8005
jne 0x44992e
push 1
push ebx
push ebx
lea eax, [ebp - 0x68]
push ebx
push eax
call esi
test eax, eax
jne 0x4498e2
call fcn.00401055
jmp 0x44985f
push dword [ebp - 0x60]
call fcn.00445246
int3