Function at 0x100145a0
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push esi
push edi
push ebx
and esp, 0xfffffff8
sub esp, 0x498
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
mov dx, word [esp + reloc.winhttp.dll_WinHttpOpenRequest]
mov dword [esp + 0x484], 0
mov dword [esp + 0x480], 0x1a5b5fb7
mov dword [esp + 0x470], 0x4c59d6b6
mov esi, dword [esp + 0x484]
mov edi, dword [esp + 0x480]
mov ebx, edi
xor ebx, 0x720da147
mov dword [esp + 0x54], esi
mov dword [esp + 0x50], ebx
mov ebx, ecx
mov dword [esp], ebx
mov dword [esp + 0x4c], eax
mov dword [esp + 0x48], ecx
mov word [esp + 0x46], dx
mov dword [esp + 0x40], esi
mov dword [esp + 0x3c], edi
mov dword [esp + 0x38], ebx
call fcn.100147e0
lea ecx, [esp + 0x70]
mov eax, dword [eax + 0x78]
mov esi, eax
xor esi, 0xffffffff
mov dword [esp + 0x490], esi
mov esi, dword [esp + 0x38]
add esi, eax
mov edi, ecx
mov dword [esp], ecx
mov dword [esp + 0x34], ecx
mov dword [esp + 0x30], eax
mov dword [esp + 0x2c], esi
mov dword [esp + 0x28], edi
call fcn.10014970
mov eax, 0x4c59d6b6
mov ecx, dword [esp + 0x2c]
add ecx, 0x18
mov esi, dword [esp + 0x470]
mov edi, dword [esp + 0x38]
mov ebx, dword [esp + 0x48]
mov edx, dword [esp + 0x30]
add edi, dword [ebx + edx + 0x20]
mov edx, dword [ebx + edx + 0x18]
sub eax, esi
cmp edx, eax
mov dword [esp + 0x24], edi
mov dword [esp + 0x20], ecx
je 0x100147b4
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x2c]
add eax, dword [ecx + 0x24]
mov dword [esp + 0x68], eax
mov dword [esp + 0x60], 0
mov eax, dword [esp + 0x60]
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x478], ecx
mov edx, dword [esp + 0x40]
mov dword [esp + 0x47c], edx
mov esi, dword [esp + 0x470]
xor esi, 0x3abaeadc
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x50]
mov edi, dword [esp + 0x54]
xor eax, 0x4b8f6001
or eax, edi
mov dword [esp + 0x68], 0
mov dword [esp + 0x60], esi
mov dword [esp + 0x1c], eax
je 0x100146a2
jmp 0x10014742
mov eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x3c]
add ecx, 0xeb4f5266
mov edx, dword [esp + 0x40]
adc edx, 0xffffffff
movzx eax, word [eax]
mov esi, dword [esp + 0x2c]
mov edi, dword [esi + 0x1c]
mov dword [esp + 0x478], ecx
mov dword [esp + 0x47c], edx
mov ecx, dword [esp + 0x38]
add ecx, edi
mov edx, dword [esp + 0x38]
add edx, dword [ecx + eax*4]
mov dword [esp + 0x5c], edx
mov eax, dword [esp + 0x5c]
lea esp, [ebp - 0xc]
pop ebx
pop edi
pop esi
pop ebp
ret
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x24]
add ecx, dword [edx + eax*4]
mov dword [esp], ecx
mov dword [esp + 0x18], ecx
call fcn.100136c0
mov edx, dword [esp + 0x34]
mov dword [esp], edx
mov esi, dword [esp + 0x18]
mov dword [esp + 8], esi
mov dword [esp + 0xc], eax
mov dword [esp + 0x14], ecx
call fcn.10013710
mov ecx, dword [esp + 0x4c]
cmp eax, ecx
je 0x100146f8
mov eax, dword [esp + 0x64]
mov ecx, dword [esp + 0x20]
mov edx, dword [ecx]
add eax, 1
mov esi, dword [esp + 0x6c]
add esi, 2
mov dword [esp + 0x490], 0x4e19b684
mov dword [esp + 0x68], esi
mov dword [esp + 0x60], eax
cmp eax, edx
jb 0x100146a2
mov dword [esp + 0x5c], 0
mov ax, word [esp + 0x46]
xor ax, ax
mov word [esp + reloc.winhttp.dll_WinHttpOpenRequest], ax
jmp 0x10014736