Function at 0x44f6a6
Capabilities:
Create process on windows
Create thread

Disassembly:
push 0x148
mov eax, 0x546a23
call fcn.00522fd4
mov edi, dword [ebp + 8]
mov esi, ecx
push str.windowinit
mov ecx, edi
call fcn.004f8f2b
test al, al
jne 0x44f9f1
push str.click
mov ecx, edi
call fcn.004f8f2b
test al, al
je 0x44f9a5
mov eax, dword [edi + 0x108]
cmp eax, dword [esi + 0x260]
je 0x44f915
cmp eax, dword [esi + 0x264]
jne 0x44f715
push 0
push 0xf020
push 0x112
lea ecx, [esi - 0x10]
call fcn.004f70e0
jmp 0x44f9f1
cmp eax, dword [esi + 0x26c]
je 0x44f755
cmp eax, dword [esi + 0x270]
jne 0x44f736
add esi, 0xfffffff0
push 3
mov ecx, esi
call fcn.0044ea8d
jmp 0x44f93e
cmp eax, dword [esi + 0x274]
jne 0x44f74d
push 1
lea ecx, [esi - 0x10]
call fcn.0044ea8d
jmp 0x44f9f1
cmp eax, dword [esi + 0x278]
jne 0x44f76d
add esi, 0xfffffff0
push 2
mov ecx, esi
call fcn.0044ea8d
mov ecx, esi
call fcn.0044eb18
jmp 0x44f9f1
cmp eax, dword [esi + 0x27c]
jne 0x44f842
mov ecx, dword [esi + 0x290]
mov eax, dword [ecx]
lea edx, [ebp - 0x154]
push edx
call dword [eax + 0x28]
xor edi, edi
mov ecx, eax
mov dword [ebp - 4], edi
call fcn.004f8b0a
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xd0], esp
push eax
call fcn.004091f0
mov ecx, dword [esi + 0x2b8]
call fcn.004037d0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x154]
mov ebx, eax
call fcn.004f8b57
cmp ebx, edi
jne 0x44f9f1
lea ebx, [esi - 0x10]
push 4
mov ecx, ebx
call fcn.0044ea8d
mov ecx, dword [esi + 0x260]
mov eax, dword [ecx]
push edi
call dword [eax + 0xd8]
mov ecx, dword [0x5b1f00]
push edi
push 0xa
push 1
call fcn.004f6d14
push eax
call dword [sym.imp.USER32.dll_SetTimer]
mov ecx, ebx
call fcn.0044f43d
mov ecx, dword [esi + 0x2b8]
push 0x44ee5a
call fcn.00402cb0
mov ecx, dword [esi + 0x2b8]
push 0x44ee77
call fcn.00402cc0
push edi
push edi
push 0x44eb40
call fcn.005238d5
add esp, 0xc
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
jmp 0x44f9f1
cmp eax, dword [esi + 0x280]
jne 0x44f90d
xor edi, edi
push edi
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x14], 7
call fcn.0040cdc0
mov ecx, dword [esi + 0x2b8]
xor ebx, ebx
lea eax, [ebp - 0x2c]
inc ebx
push eax
mov dword [ebp - 4], ebx
call fcn.00405640
push 0xffffffffffffffff
push 0x588980
lea ecx, [ebp - 0x2c]
call fcn.00409360
push eax
push edi
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00409390
mov eax, dword [esi + 0x2b8]
mov ecx, dword [ebp - 0x44]
mov byte [ebp - 4], 2
cmp dword [eax + 0x1ec], edi
je 0x44f8c0
cmp dword [ebp - 0x30], 8
jae 0x44f8b0
lea ecx, [ebp - 0x44]
cmp dword [ebp - 0x14], 8
mov eax, dword [ebp - 0x28]
jae 0x44f8bc
lea eax, [ebp - 0x28]
push 5
jmp 0x44f8d6
cmp dword [ebp - 0x30], 8
jae 0x44f8c9
lea ecx, [ebp - 0x44]
cmp dword [ebp - 0x14], 8
mov eax, dword [ebp - 0x28]
jae 0x44f8d5
lea eax, [ebp - 0x28]
push edi
push ecx
mov ecx, dword [0x5b1f00]
push edi
push eax
push str.open
call fcn.004f6d14
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
push edi
lea ecx, [esi - 0x10]
call fcn.0044ee31
push edi
push ebx
lea ecx, [ebp - 0x48]
call fcn.0040afe0
push edi
push ebx
lea ecx, [ebp - 0x2c]
jmp 0x44f99e
cmp eax, dword [esi + 0x284]
jne 0x44f924
push 0
lea ecx, [esi - 0x10]
call fcn.0044ee31
jmp 0x44f9f1
cmp eax, dword [esi + 0x288]
jne 0x44f94a
add esi, 0xfffffff0
mov ecx, esi
call fcn.0044f117
test al, al
je 0x44f9f1
mov ecx, esi
call fcn.0044f1e2
jmp 0x44f9f1
cmp eax, dword [esi + 0x268]
jne 0x44f9f1
mov ecx, dword [esi + 0x2b8]
lea eax, [ebp - 0x48]
push eax
call fcn.004047a0
cmp dword [eax + 0x18], 8
mov dword [ebp - 4], 3
jb 0x44f977
mov eax, dword [eax + 4]
jmp 0x44f97a
add eax, 4
xor edi, edi
push edi
push edi
push 0x588b1c
push eax
push str.open
lea ecx, [esi - 0x10]
call fcn.004f6d14
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
push edi
push 1
lea ecx, [ebp - 0x48]
call fcn.0040afe0
jmp 0x44f9f1
push str.selectchanged
mov ecx, edi
call fcn.004f8f2b
test al, al
je 0x44f9f1
add edi, 0x108
mov ecx, dword [edi]
mov eax, dword [ecx]
lea edx, [ebp - 0xcc]
push edx
call dword [eax + 4]
mov eax, dword [edi]
mov dword [ebp - 4], 4
cmp eax, dword [esi + 0x28c]
jne 0x44f9e2
lea ecx, [esi - 0x10]
call fcn.0044eb18
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcc]
call fcn.004f8b57
call fcn.00523057
ret 4