Function at 0x118d700
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebx
push edi
push esi
sub esp, 0x60
mov eax, dword [esp + 0x70]
add eax, dword [ecx + 0x60]
mov word [esp + 0x14], 0xf7f5
mov byte [esp + 0x16], 0xfe
mov dword [esp + 0x17], 0
mov dword [esp + 8], 0
mov edx, dword [esp + 8]
cmp edx, 6
ja 0x118d7a5
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [esp + 8]
mov esi, dword [esp + 8]
movzx edi, byte [esp + esi + 0x14]
mov esi, edx
xor esi, 0x160d61aa
and edx, 0x160d61aa
lea esi, [esi + edx*2]
lea edx, [esi + edi]
and esi, edi
mov edi, edx
xor edi, esi
mov ebx, esi
not ebx
and edx, ebx
add edx, edx
sub edx, edi
xor esi, edx
and edx, ebx
add edx, edx
sub edx, esi
mov dword [esp + 0x1c], edx
mov edx, dword [esp + 0x1c]
mov esi, edx
not esi
and esi, 0x52
and edx, 0xad
sub edx, esi
mov esi, dword [esp + 8]
mov byte [esp + esi + 0x14], dl
inc dword [esp + 8]
mov edx, dword [esp + 8]
cmp edx, 7
jb 0x118d740
mov dword [esp + 8], 0x868884b2
mov dword [esp + 0xc], 0xadb6
mov byte [esp + 0x10], 0
mov dword [esp], 0
mov edx, dword [esp]
cmp edx, 8
ja 0x118d812
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [esp]
mov esi, dword [esp]
movzx esi, byte [esp + esi + 8]
mov edi, edx
xor edi, 0x496fb11c
and edx, 0xc96fb11c
lea edx, [edi + edx*2]
lea edi, [edx + esi]
and edx, esi
add edx, edx
sub edi, edx
mov dword [esp + 0x1c], edi
mov edx, dword [esp + 0x1c]
add dl, 0x74
mov esi, dword [esp]
mov byte [esp + esi + 8], dl
inc dword [esp]
mov edx, dword [esp]
cmp edx, 9
jb 0x118d7d0
mov dword [esp + 0x1c], 0x2e247073
mov dword [esp + 0x20], 0x222e7c78
mov dword [esp + 0x24], 0x253e2473
mov dword [esp + 0x28], 0x3a212639
mov dword [esp + 0x2c], 0x62392526
mov dword [esp + 0x30], 0x2c5f9987
mov dword [esp + 0x34], 0x2f31232a
mov dword [esp + 0x38], 0xce566c24
mov dword [esp + 0x3c], 0xdcd7d7d9
mov dword [esp + 0x40], 0xdcc9dfcb
mov dword [esp + 0x44], 0xc78e95da
mov dword [esp + 0x48], 0x82ddd9d9
mov dword [esp + 0x4c], 0xd2cad4d8
mov dword [esp + 0x50], 0xdec493b5
mov dword [esp + 0x54], 0x9bb9d0cb
mov byte [esp + 0x58], pe_nt_image_headers32
mov dword [esp + 0x59], 0
mov word [esp + 0x5d], 0
mov dword [esp + 4], 0
mov edx, dword [esp + 4]
cmp edx, 0x42
ja 0x118d8ee
nop
mov edx, dword [esp + 4]
mov esi, dword [esp + 4]
movzx esi, byte [esp + esi + 0x1c]
mov edi, edx
xor edi, 0x613328e1
and edx, 0xe13328e1
lea edx, [edi + edx*2]
xor edx, esi
mov dword [esp], edx
mov edx, dword [esp]
add dl, 0x9b
mov esi, dword [esp + 4]
mov byte [esp + esi + 0x1c], dl
inc dword [esp + 4]
mov edx, dword [esp + 4]
cmp edx, 0x43
jb 0x118d8b0
mov esi, dword [esp + 0x74]
movzx ebx, byte [esp + 0x1c]
mov edx, eax
test bl, bl
je 0x118d91b
lea edi, [esp + 0x1d]
mov edx, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edx], bl
inc edx
movzx ebx, byte [edi]
inc edi
test bl, bl
jne 0x118d910
mov byte [edx], 0
movzx ebx, byte [esi]
test bl, bl
je 0x118d93b
inc esi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edx], bl
inc edx
movzx ebx, byte [esi]
inc esi
test bl, bl
jne 0x118d930
mov esi, dword [esp + 0x78]
mov byte [edx], 0
movzx ebx, byte [esp + 8]
test bl, bl
je 0x118d95b
lea edi, [esp + 9]
nop
mov byte [edx], bl
inc edx
movzx ebx, byte [edi]
inc edi
test bl, bl
jne 0x118d950
mov byte [edx], 0
movzx ebx, byte [esi]
test bl, bl
je 0x118d97b
inc esi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edx], bl
inc edx
movzx ebx, byte [esi]
inc esi
test bl, bl
jne 0x118d970
mov byte [edx], 0
movzx ebx, byte [esp + 0x14]
test bl, bl
je 0x118d99b
lea esi, [esp + 0x15]
nop
nop
nop
nop
nop
mov byte [edx], bl
inc edx
movzx ebx, byte [esi]
inc esi
test bl, bl
jne 0x118d990
mov byte [edx], 0
sub edx, eax
add dword [ecx + 0x60], edx
add esp, 0x60
pop esi
pop edi
pop ebx
ret 0xc