Function at 0x44f9f9
Capabilities:
Create process on windows
Create thread

Disassembly:
push 0x148
mov eax, 0x5477a3
call fcn.00523ca4
mov edi, dword [ebp + 8]
mov esi, ecx
push str.windowinit
mov ecx, edi
call fcn.004602b1
test al, al
jne 0x44fd44
push str.click
mov ecx, edi
call fcn.004602b1
test al, al
je 0x44fcf8
mov eax, dword [edi + 0x108]
cmp eax, dword [esi + 0x260]
je 0x44fc68
cmp eax, dword [esi + 0x264]
jne 0x44fa68
push 0
push 0xf020
push 0x112
lea ecx, [esi - 0x10]
call fcn.0045e3ef
jmp 0x44fd44
cmp eax, dword [esi + 0x26c]
je 0x44faa8
cmp eax, dword [esi + 0x270]
jne 0x44fa89
add esi, 0xfffffff0
push 3
mov ecx, esi
call fcn.0044edc1
jmp 0x44fc91
cmp eax, dword [esi + 0x274]
jne 0x44faa0
push 1
lea ecx, [esi - 0x10]
call fcn.0044edc1
jmp 0x44fd44
cmp eax, dword [esi + 0x278]
jne 0x44fac0
add esi, 0xfffffff0
push 2
mov ecx, esi
call fcn.0044edc1
mov ecx, esi
call fcn.0044ee4c
jmp 0x44fd44
cmp eax, dword [esi + 0x27c]
jne 0x44fb95
mov ecx, dword [esi + 0x290]
mov eax, dword [ecx]
lea edx, [ebp - 0x154]
push edx
call dword [eax + 0x28]
xor edi, edi
mov ecx, eax
mov dword [ebp - 4], edi
call fcn.0045ac39
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0xd0], esp
push eax
call fcn.00408b80
mov ecx, dword [esi + 0x2b8]
call fcn.004035c0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x154]
mov ebx, eax
call fcn.0045fedd
cmp ebx, edi
jne 0x44fd44
lea ebx, [esi - 0x10]
push 4
mov ecx, ebx
call fcn.0044edc1
mov ecx, dword [esi + 0x260]
mov eax, dword [ecx]
push edi
call dword [eax + 0xd8]
mov ecx, dword [0x5b2f00]
push edi
push 0xa
push 1
call fcn.004775e4
push eax
call dword [sym.imp.USER32.dll_SetTimer]
mov ecx, ebx
call fcn.0044f790
mov ecx, dword [esi + 0x2b8]
push 0x44f1ad
call fcn.00402a90
mov ecx, dword [esi + 0x2b8]
push 0x44f1ca
call fcn.00402aa0
push edi
push edi
push 0x44ee74
call fcn.005245a5
add esp, 0xc
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
jmp 0x44fd44
cmp eax, dword [esi + 0x280]
jne 0x44fc60
xor edi, edi
push edi
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x14], 7
call fcn.0040c770
mov ecx, dword [esi + 0x2b8]
xor ebx, ebx
lea eax, [ebp - 0x2c]
inc ebx
push eax
mov dword [ebp - 4], ebx
call fcn.00405100
push 0xffffffffffffffff
push 0x589808
lea ecx, [ebp - 0x2c]
call fcn.00408cf0
push eax
push edi
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x2c]
call fcn.00408d20
mov eax, dword [esi + 0x2b8]
mov ecx, dword [ebp - 0x44]
mov byte [ebp - 4], 2
cmp dword [eax + 0x198], edi
je 0x44fc13
cmp dword [ebp - 0x30], 8
jae 0x44fc03
lea ecx, [ebp - 0x44]
cmp dword [ebp - 0x14], 8
mov eax, dword [ebp - 0x28]
jae 0x44fc0f
lea eax, [ebp - 0x28]
push 5
jmp 0x44fc29
cmp dword [ebp - 0x30], 8
jae 0x44fc1c
lea ecx, [ebp - 0x44]
cmp dword [ebp - 0x14], 8
mov eax, dword [ebp - 0x28]
jae 0x44fc28
lea eax, [ebp - 0x28]
push edi
push ecx
mov ecx, dword [0x5b2f00]
push edi
push eax
push str.open
call fcn.004775e4
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
push edi
lea ecx, [esi - 0x10]
call fcn.0044f184
push edi
push ebx
lea ecx, [ebp - 0x48]
call fcn.0040a970
push edi
push ebx
lea ecx, [ebp - 0x2c]
jmp 0x44fcf1
cmp eax, dword [esi + 0x284]
jne 0x44fc77
push 0
lea ecx, [esi - 0x10]
call fcn.0044f184
jmp 0x44fd44
cmp eax, dword [esi + 0x288]
jne 0x44fc9d
add esi, 0xfffffff0
mov ecx, esi
call fcn.0044f46a
test al, al
je 0x44fd44
mov ecx, esi
call fcn.0044f535
jmp 0x44fd44
cmp eax, dword [esi + 0x268]
jne 0x44fd44
mov ecx, dword [esi + 0x2b8]
lea eax, [ebp - 0x48]
push eax
call fcn.00404550
cmp dword [eax + 0x18], 8
mov dword [ebp - 4], 3
jb 0x44fcca
mov eax, dword [eax + 4]
jmp 0x44fccd
add eax, 4
xor edi, edi
push edi
push edi
push 0x589988
push eax
push str.open
lea ecx, [esi - 0x10]
call fcn.004775e4
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
push edi
push 1
lea ecx, [ebp - 0x48]
call fcn.0040a970
jmp 0x44fd44
push str.selectchanged
mov ecx, edi
call fcn.004602b1
test al, al
je 0x44fd44
add edi, 0x108
mov ecx, dword [edi]
mov eax, dword [ecx]
lea edx, [ebp - 0xcc]
push edx
call dword [eax + 4]
mov eax, dword [edi]
mov dword [ebp - 4], 4
cmp eax, dword [esi + 0x28c]
jne 0x44fd35
lea ecx, [esi - 0x10]
call fcn.0044ee4c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcc]
call fcn.0045fedd
call fcn.00523d27
ret 4