Function at 0x44ea28
Capabilities:
Encode data using xor
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffe4
push ebx
push esi
push edi
mov dword [ebp - 4], edx
mov ebx, eax
mov eax, dword [ebp - 4]
call fcn.00406aa0
lea edi, [ebp - 0xc]
xor eax, eax
push ebp
push 0x44ec7f
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 5], 0
push 0xa
mov eax, dword [ebp - 4]
call fcn.00407508
push eax
mov eax, dword [0x45cc4c]
push eax
call sub.kernel32.dll_FindResourceW
mov esi, eax
mov dword [ebx + 4], esi
test esi, esi
je 0x44ec69
push esi
mov eax, dword [0x45cc4c]
push eax
call sub.kernel32.dll_LoadResource
mov dword [ebx + 8], eax
cmp dword [ebx + 8], 0
je 0x44ec69
mov eax, 0x44eca0
call fcn.0044e718
call fcn.0044e66c
mov eax, dword [ebx + 8]
push eax
call sub.kernel32.dll_LockResource
mov dword [ebx + 0xc], eax
mov eax, dword [ebx + 4]
push eax
mov eax, dword [0x45cc4c]
push eax
call sub.kernel32.dll_SizeofResource
xor edx, edx
mov dword [ebx + 0x30], eax
mov dword [ebx + 0x34], edx
mov eax, dword [ebx + 0x30]
call fcn.00403e9c
mov dword [ebx + 0x3c], eax
mov eax, dword [ebx + 0xc]
mov dword [ebx + 0x10], eax
mov eax, dword [ebx + 0x3c]
mov dword [ebx + 0x14], eax
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x2c], 0
jmp 0x44ec17
lea edx, [ebx + 0x18]
mov eax, dword [ebx + 0x10]
mov ecx, 0x10
call fcn.00404040
lea eax, [ebx + 0x18]
mov dword [edi], eax
mov eax, dword [0x4598bc]
mov eax, dword [eax + 0xac]
mov edx, dword [edi]
sub dword [edx + 8], eax
mov eax, dword [0x4598bc]
mov eax, dword [eax + 0xa8]
mov edx, dword [edi]
sub dword [edx], eax
mov esi, 0x14
mov eax, dword [edi]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x1c], eax
mov eax, dword [edi]
mov eax, dword [eax + 8]
mov edx, dword [edi]
mov dword [edx + 0xc], eax
mov eax, dword [edi]
mov eax, dword [eax + 4]
mov edx, dword [edi]
mov dword [edx + 8], eax
mov eax, dword [edi]
mov eax, dword [eax]
mov edx, dword [edi]
mov dword [edx + 4], eax
mov eax, dword [edi]
mov edx, dword [ebp - 0x1c]
mov dword [eax], edx
mov eax, dword [edi]
mov eax, dword [eax + 0xc]
mov edx, dword [edi]
mov edx, dword [edx + 0xc]
add edx, edx
inc edx
imul edx
mov edx, 5
call fcn.0044e518
mov dword [ebp - 0x18], eax
mov eax, dword [edi]
mov eax, dword [eax + 4]
mov edx, dword [edi]
mov edx, dword [edx + 4]
add edx, edx
inc edx
imul edx
mov edx, 5
call fcn.0044e518
mov dword [ebp - 0x14], eax
mov eax, esi
add eax, eax
mov edx, dword [0x4598bc]
push dword [edx + eax*4 + 4]
mov eax, dword [edi]
mov eax, dword [eax + 8]
pop edx
sub eax, edx
mov edx, dword [ebp - 0x14]
call fcn.0044e538
xor eax, dword [ebp - 0x18]
mov edx, dword [edi]
mov dword [edx + 8], eax
mov eax, esi
add eax, eax
mov edx, dword [0x4598bc]
push dword [edx + eax*4]
mov eax, dword [edi]
mov eax, dword [eax]
pop edx
sub eax, edx
mov edx, dword [ebp - 0x18]
call fcn.0044e538
xor eax, dword [ebp - 0x14]
mov edx, dword [edi]
mov dword [edx], eax
dec esi
test esi, esi
jne 0x44eb24
mov eax, dword [0x4598bc]
mov eax, dword [eax + 4]
mov edx, dword [edi]
sub dword [edx + 0xc], eax
mov eax, dword [0x4598bc]
mov eax, dword [eax]
mov edx, dword [edi]
sub dword [edx + 4], eax
mov byte [ebp - 0xd], 1
mov edx, dword [ebx + 0x14]
lea eax, [ebx + 0x18]
mov ecx, 0x10
call fcn.00404040
add dword [ebx + 0x28], 0x10
adc dword [ebx + 0x2c], 0
add dword [ebx + 0x10], 0x10
add dword [ebx + 0x14], 0x10
mov eax, dword [ebx + 0x30]
mov edx, dword [ebx + 0x34]
sub eax, dword [ebx + 0x28]
sbb edx, dword [ebx + 0x2c]
cmp edx, 0
jne 0x44ec33
cmp eax, 0x10
jae 0x44eaeb
jmp 0x44ec39
jge 0x44eaeb
call fcn.0044e750
mov eax, dword [ebx + 0x30]
mov ecx, eax
add ecx, dword [ebx + 0x3c]
dec ecx
mov dword [ebx + 0x10], ecx
movzx eax, byte [ecx]
mov byte [ebx + 0x38], al
mov byte [ebp - 5], 1
movzx eax, al
mov edx, dword [ebx + 0x30]
sub edx, eax
dec edx
mov dword [ebx + 0x40], edx
mov eax, dword [ebx + 8]
push eax
call sub.kernel32.dll_FreeResource
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x44ec86
lea eax, [ebp - 4]
call fcn.004069bc
ret