Function at 0x44b413
Capabilities:
Extract resource via kernel32 functions
Get file size
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4741f6
mov eax, dword fs:[0]
push eax
sub esp, 0x360
mov eax, dword [0x4a4300]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
and dword [ebp - 0x2fc], 0
and dword [ebp - 0x2f8], 0
cmp dword [ebp + 0xc], 0
jne 0x44b741
call sym.microClientTemplate.exe_public:_static_class_DuiLib::CDuiString_const____cdecl_DuiLib::CPaintManagerUI::GetResourcePath_void_
push eax
lea ecx, [ebp - 0xc0]
call sym.microClientTemplate.exe_public:_void___thiscall_DuiLib::CDuiString::constructor_class_DuiLib::CDuiString_const__
and dword [ebp - 4], 0
call sym.microClientTemplate.exe_public:_static_class_DuiLib::CDuiString_const____cdecl_DuiLib::CPaintManagerUI::GetResourceZip_void_
mov ecx, eax
call sym.microClientTemplate.exe_public:_bool___thiscall_DuiLib::CDuiString::IsEmpty_void_const
movzx eax, al
test eax, eax
je 0x44b5a1
push dword [ebp + 8]
lea ecx, [ebp - 0xc0]
call sym.microClientTemplate.exe_public:_class_DuiLib::CDuiString_const____thiscall_DuiLib::CDuiString::operator_wchar_t_const__
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
lea ecx, [ebp - 0xc0]
call sym.microClientTemplate.exe_public:_wchar_t_const____thiscall_DuiLib::CDuiString::operator_wchar_t_const__void_const
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x31c], eax
cmp dword [ebp - 0x31c], 0xffffffff
jne 0x44b4d8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc0]
call sym.microClientTemplate.exe_public:_void___thiscall_DuiLib::CDuiString::destructor_void_
jmp 0x44b80c
push 0
push dword [ebp - 0x31c]
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 0
jne 0x44b509
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc0]
call sym.microClientTemplate.exe_public:_void___thiscall_DuiLib::CDuiString::destructor_void_
jmp 0x44b80c
and dword [ebp - 0x33c], 0
push dword [ebp - 0x2f8]
call fcn.0040d073
pop ecx
mov dword [ebp - 0x350], eax
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0x2fc], eax
push 0
lea eax, [ebp - 0x33c]
push eax
push dword [ebp - 0x2f8]
push dword [ebp - 0x2fc]
push dword [ebp - 0x31c]
call dword [sym.imp.KERNEL32.dll_ReadFile]
push dword [ebp - 0x31c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x33c]
cmp eax, dword [ebp - 0x2f8]
je 0x44b59c
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x360], eax
push dword [ebp - 0x360]
call fcn.0046093f
pop ecx
and dword [ebp - 0x2fc], 0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc0]
call sym.microClientTemplate.exe_public:_void___thiscall_DuiLib::CDuiString::destructor_void_
jmp 0x44b80c
jmp 0x44b72d
call sym.microClientTemplate.exe_public:_static_class_DuiLib::CDuiString_const____cdecl_DuiLib::CPaintManagerUI::GetResourceZip_void_
push eax
lea ecx, [ebp - 0xc0]
call sym.microClientTemplate.exe_public:_class_DuiLib::CDuiString_const____thiscall_DuiLib::CDuiString::operator_class_DuiLib::CDuiString_const__
and dword [ebp - 0x30c], 0
call sym.microClientTemplate.exe_public:_static_bool___cdecl_DuiLib::CPaintManagerUI::IsCachedResourceZip_void_
movzx eax, al
test eax, eax
je 0x44b5d2
call sym.microClientTemplate.exe_public:_static_void____cdecl_DuiLib::CPaintManagerUI::GetResourceZipHandle_void_
mov dword [ebp - 0x30c], eax
jmp 0x44b5f0
push 2
push 0
lea ecx, [ebp - 0xc0]
call sym.microClientTemplate.exe_public:_wchar_t_const____thiscall_DuiLib::CDuiString::operator_wchar_t_const__void_const
push eax
call fcn.0044cf5d
add esp, 0xc
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 0
jne 0x44b60d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc0]
call sym.microClientTemplate.exe_public:_void___thiscall_DuiLib::CDuiString::destructor_void_
jmp 0x44b80c
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x364]
push eax
push 1
push dword [ebp + 8]
push dword [ebp - 0x30c]
call fcn.0044c4f8
add esp, 0x14
test eax, eax
je 0x44b646
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc0]
call sym.microClientTemplate.exe_public:_void___thiscall_DuiLib::CDuiString::destructor_void_
jmp 0x44b80c
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 0
jne 0x44b66f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc0]
call sym.microClientTemplate.exe_public:_void___thiscall_DuiLib::CDuiString::destructor_void_
jmp 0x44b80c
push dword [ebp - 0x2f8]
call fcn.0040d073
pop ecx
mov dword [ebp - 0x368], eax
mov eax, dword [ebp - 0x368]
mov dword [ebp - 0x2fc], eax
push 3
push dword [ebp - 0x2f8]
push dword [ebp - 0x2fc]
push dword [ebp - 0x364]
push dword [ebp - 0x30c]
call fcn.0044d572
add esp, 0x14
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 0
je 0x44b715
cmp dword [ebp - 0x338], 0x600
je 0x44b715
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x35c], eax
push dword [ebp - 0x35c]
call fcn.0046093f
pop ecx
and dword [ebp - 0x2fc], 0
call sym.microClientTemplate.exe_public:_static_bool___cdecl_DuiLib::CPaintManagerUI::IsCachedResourceZip_void_
movzx eax, al
test eax, eax
jne 0x44b701
push dword [ebp - 0x30c]
call fcn.0044c261
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc0]
call sym.microClientTemplate.exe_public:_void___thiscall_DuiLib::CDuiString::destructor_void_
jmp 0x44b80c
call sym.microClientTemplate.exe_public:_static_bool___cdecl_DuiLib::CPaintManagerUI::IsCachedResourceZip_void_
movzx eax, al
test eax, eax
jne 0x44b72d
push dword [ebp - 0x30c]
call fcn.0044c261
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc0]
call sym.microClientTemplate.exe_public:_void___thiscall_DuiLib::CDuiString::destructor_void_
jmp 0x44b804
push dword [ebp + 0xc]
push dword [ebp + 8]
call sym.microClientTemplate.exe_public:_static_struct_HINSTANCE______cdecl_DuiLib::CPaintManagerUI::GetResourceDll_void_
push eax
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 0
jne 0x44b767
jmp 0x44b80c
push dword [ebp - 0x310]
call sym.microClientTemplate.exe_public:_static_struct_HINSTANCE______cdecl_DuiLib::CPaintManagerUI::GetResourceDll_void_
push eax
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 0
jne 0x44b796
push dword [ebp - 0x310]
call dword [sym.imp.KERNEL32.dll_FreeResource]
jmp 0x44b80c
push dword [ebp - 0x310]
call sym.microClientTemplate.exe_public:_static_struct_HINSTANCE______cdecl_DuiLib::CPaintManagerUI::GetResourceDll_void_
push eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 0
jne 0x44b7b9
jmp 0x44b80c
push dword [ebp - 0x2f8]
call fcn.0040d073
pop ecx
mov dword [ebp - 0x344], eax
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0x2fc], eax
push dword [ebp - 0x2f8]
push dword [ebp - 0x340]
call dword [sym.imp.KERNEL32.dll_LockResource]
push eax
push dword [ebp - 0x2fc]
call fcn.004614c0
add esp, 0xc
push dword [ebp - 0x310]
call dword [sym.imp.KERNEL32.dll_FreeResource]
xor eax, eax
jne 0x44b44d
cmp dword [ebp - 0x2fc], 0
jne 0x44b8f0
push 0
push 0x80
push 3
push 0
push 1
push SysReAllocString
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 0xffffffff
jne 0x44b848
jmp 0x44b8f0
push 0
push dword [ebp - 0x324]
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 0
jne 0x44b86a
jmp 0x44b8f0
and dword [ebp - 0x328], 0
push dword [ebp - 0x2f8]
call fcn.0040d073
pop ecx
mov dword [ebp - 0x354], eax
mov eax, dword [ebp - 0x354]
mov dword [ebp - 0x2fc], eax
push 0
lea eax, [ebp - 0x328]
push eax
push dword [ebp - 0x2f8]
push dword [ebp - 0x2fc]
push dword [ebp - 0x324]
call dword [sym.imp.KERNEL32.dll_ReadFile]
push dword [ebp - 0x324]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x328]
cmp eax, dword [ebp - 0x2f8]
je 0x44b8e9
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x358], eax
push dword [ebp - 0x358]
call fcn.0046093f
pop ecx
and dword [ebp - 0x2fc], 0
jmp 0x44b8f0
cmp dword [ebp - 0x2fc], 0
jne 0x44b900
xor eax, eax
jmp 0x44bc7e
and dword [ebp - 0x308], 0
push 4
lea eax, [ebp - 0x36c]
push eax
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x318]
push eax
push dword [ebp - 0x2f8]
push dword [ebp - 0x2fc]
call fcn.00460624
add esp, 0x18
mov dword [ebp - 0x308], eax
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x348], eax
push dword [ebp - 0x348]
call fcn.0046093f
pop ecx
cmp dword [ebp - 0x308], 0
jne 0x44b960
xor eax, eax
jmp 0x44bc7e
push 0x2c
push 0
lea eax, [ebp - 0x3c]
push eax
call fcn.004622b0
add esp, 0xc
mov dword [ebp - 0x3c], 0x28
mov eax, dword [ebp - 0x318]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x320]
neg eax
mov dword [ebp - 0x34], eax
xor eax, eax
inc eax
mov word [ebp - 0x30], ax
push 0x20
pop eax
mov word [ebp - 0x2e], ax
and dword [ebp - 0x2c], 0
mov eax, dword [ebp - 0x318]
imul eax, dword [ebp - 0x320]
shl eax, 2
mov dword [ebp - 0x28], eax
mov byte [ebp - 0x2fd], 0
and dword [ebp - 0x304], 0
push 0
push 0
lea eax, [ebp - 0x304]
push eax
push 0
lea eax, [ebp - 0x3c]
push eax
push 0
call dword [sym.imp.GDI32.dll_CreateDIBSection]
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 0
jne 0x44b9ed
xor eax, eax
jmp 0x44bc7e
and dword [ebp - 0x2f4], 0
jmp 0x44ba03
mov eax, dword [ebp - 0x2f4]
inc eax
mov dword [ebp - 0x2f4], eax
mov eax, dword [ebp - 0x318]
imul eax, dword [ebp - 0x320]
cmp dword [ebp - 0x2f4], eax
jge 0x44bbda
mov eax, dword [ebp - 0x2f4]
mov ecx, dword [ebp - 0x304]
mov edx, dword [ebp - 0x2f4]
mov esi, dword [ebp - 0x308]
mov dl, byte [esi + edx*4 + 3]
mov byte [ecx + eax*4 + 3], dl
mov eax, dword [ebp - 0x2f4]
mov ecx, dword [ebp - 0x304]
movzx eax, byte [ecx + eax*4 + 3]
cmp eax, 0xff
jge 0x44bb19
mov eax, dword [ebp - 0x2f4]
mov ecx, dword [ebp - 0x308]
movzx eax, byte [ecx + eax*4 + 2]
mov ecx, dword [ebp - 0x2f4]
mov edx, dword [ebp - 0x308]
movzx ecx, byte [edx + ecx*4 + 3]
imul eax, ecx
xor edx, edx
mov ecx, 0xff
div ecx
mov ecx, dword [ebp - 0x2f4]
mov edx, dword [ebp - 0x304]
mov byte [edx + ecx*4], al
mov eax, dword [ebp - 0x2f4]
mov ecx, dword [ebp - 0x308]
movzx eax, byte [ecx + eax*4 + 1]
mov ecx, dword [ebp - 0x2f4]
mov edx, dword [ebp - 0x308]
movzx ecx, byte [edx + ecx*4 + 3]
imul eax, ecx
xor edx, edx
mov ecx, 0xff
div ecx
mov ecx, dword [ebp - 0x2f4]
mov edx, dword [ebp - 0x304]
mov byte [edx + ecx*4 + 1], al
mov eax, dword [ebp - 0x2f4]
mov ecx, dword [ebp - 0x308]
movzx eax, byte [ecx + eax*4]
mov ecx, dword [ebp - 0x2f4]
mov edx, dword [ebp - 0x308]
movzx ecx, byte [edx + ecx*4 + 3]
imul eax, ecx
xor edx, edx
mov ecx, 0xff
div ecx
mov ecx, dword [ebp - 0x2f4]
mov edx, dword [ebp - 0x304]
mov byte [edx + ecx*4 + 2], al
mov byte [ebp - 0x2fd], 1
jmp 0x44bb77
mov eax, dword [ebp - 0x2f4]
mov ecx, dword [ebp - 0x304]
mov edx, dword [ebp - 0x2f4]
mov esi, dword [ebp - 0x308]
mov dl, byte [esi + edx*4 + 2]
mov byte [ecx + eax*4], dl
mov eax, dword [ebp - 0x2f4]
mov ecx, dword [ebp - 0x304]
mov edx, dword [ebp - 0x2f4]
mov esi, dword [ebp - 0x308]
mov dl, byte [esi + edx*4 + 1]
mov byte [ecx + eax*4 + 1], dl
mov eax, dword [ebp - 0x2f4]
mov ecx, dword [ebp - 0x304]
mov edx, dword [ebp - 0x2f4]
mov esi, dword [ebp - 0x308]
mov dl, byte [esi + edx*4]
mov byte [ecx + eax*4 + 2], dl
mov eax, dword [ebp - 0x2f4]
mov ecx, dword [ebp - 0x304]
mov eax, dword [ecx + eax*4]
cmp eax, dword [ebp + 0x10]
jne 0x44bbd5
mov eax, dword [ebp - 0x2f4]
mov ecx, dword [ebp - 0x304]
mov byte [ecx + eax*4], 0
mov eax, dword [ebp - 0x2f4]
mov ecx, dword [ebp - 0x304]
mov byte [ecx + eax*4 + 1], 0
mov eax, dword [ebp - 0x2f4]
mov ecx, dword [ebp - 0x304]
mov byte [ecx + eax*4 + 2], 0
mov eax, dword [ebp - 0x2f4]
mov ecx, dword [ebp - 0x304]
mov byte [ecx + eax*4 + 3], 0
mov byte [ebp - 0x2fd], 1
jmp 0x44b9f6
push dword [ebp - 0x308]
call fcn.00460616
pop ecx
push 0x98
call fcn.004609b1
pop ecx
mov dword [ebp - 0x330], eax
mov dword [ebp - 4], 1
cmp dword [ebp - 0x330], 0
je 0x44bc1a
mov ecx, dword [ebp - 0x330]
call fcn.0042b866
mov dword [ebp - 0x334], eax
jmp 0x44bc21
and dword [ebp - 0x334], 0
mov eax, dword [ebp - 0x334]
mov dword [ebp - 0x34c], eax
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x34c]
mov dword [ebp - 0x314], eax
mov eax, dword [ebp - 0x314]
mov ecx, dword [ebp - 0x32c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x314]
mov ecx, dword [ebp - 0x318]
mov dword [eax + 4], ecx
mov eax, dword [ebp - 0x314]
mov ecx, dword [ebp - 0x320]
mov dword [eax + 8], ecx
mov eax, dword [ebp - 0x314]
mov cl, byte [ebp - 0x2fd]
mov byte [eax + 0xc], cl
mov eax, dword [ebp - 0x314]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004607fb
mov esp, ebp
pop ebp
ret