Function at 0xb0d440
Capabilities:
Contain obfuscated stackstrings
Encode data using xor
Get common file path
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xce0
mov eax, dword [str.5716f8210a0744e3ba86f9d57d14207c]
mov dword [esp + 0xc0], 0x347732c
mov dword [esp + 0xc4], 0
mov dword [esp + 0xc7], 0
mov dword [esp + 0x1c0], 0x6813a52d
mov ecx, dword [esp + 0x1c0]
add cl, 0xf9
mov byte [esp + 0xc0], cl
movzx ecx, byte [esp + 0xc1]
lea edx, [ecx + ecx]
and edx, 4
neg edx
add ecx, edx
add ecx, 0x6813a502
mov dword [esp + 0x1c0], ecx
mov ecx, dword [esp + 0x1c0]
add cl, 0xf9
mov byte [esp + 0xc1], cl
movzx ecx, byte [esp + 0xc2]
lea edx, [ecx + ecx]
and edx, 6
neg edx
add ecx, edx
add ecx, 0x6813a503
mov dword [esp + 0x1c0], ecx
mov ecx, dword [esp + 0x1c0]
add cl, 0xf9
mov byte [esp + 0xc2], cl
movzx ecx, byte [esp + 0xc3]
lea edx, [ecx + ecx]
and edx, 8
neg edx
add ecx, edx
add ecx, 0x6813a504
mov dword [esp + 0x1c0], ecx
mov ecx, dword [esp + 0x1c0]
add cl, 0xf9
mov byte [esp + 0xc3], cl
movzx ecx, byte [esp + 0xc4]
lea edx, [ecx + ecx]
and edx, 0xa
neg edx
add ecx, edx
add ecx, 0x6813a505
mov dword [esp + 0x1c0], ecx
mov ecx, dword [esp + 0x1c0]
add cl, 0xf9
mov byte [esp + 0xc4], cl
movzx ecx, byte [esp + 0xc5]
lea edx, [ecx + ecx]
and edx, 0xc
neg edx
add ecx, edx
add ecx, 0x6813a506
mov dword [esp + 0x1c0], ecx
mov ecx, dword [esp + 0x1c0]
add cl, 0xf9
mov byte [esp + 0xc5], cl
movzx ecx, byte [esp + 0xc6]
lea edx, [ecx + ecx]
and edx, 0xe
neg edx
add ecx, edx
add ecx, 0x6813a507
mov dword [esp + 0x1c0], ecx
mov ecx, dword [esp + 0x1c0]
add cl, 0xf9
mov byte [esp + 0xc6], cl
movzx ecx, byte [esp + 0xc7]
lea edx, [ecx + ecx]
and edx, 0x10
neg edx
add ecx, edx
add ecx, 0x6813a508
mov dword [esp + 0x1c0], ecx
mov ecx, dword [esp + 0x1c0]
add cl, 0xf9
mov byte [esp + 0xc7], cl
movzx ecx, byte [esp + 0xc8]
lea edx, [ecx + ecx]
and edx, 0x12
neg edx
add ecx, edx
add ecx, 0x6813a509
mov dword [esp + 0x1c0], ecx
mov ecx, dword [esp + 0x1c0]
add cl, 0xf9
mov byte [esp + 0xc8], cl
movzx ecx, byte [esp + 0xc9]
lea edx, [ecx + ecx]
and edx, 0x14
neg edx
add ecx, edx
add ecx, 0x6813a50a
mov dword [esp + 0x1c0], ecx
mov ecx, dword [esp + 0x1c0]
add cl, 0xf9
mov byte [esp + 0xc9], cl
movzx ecx, byte [esp + 0xca]
lea edx, [ecx + ecx]
and edx, 0x16
neg edx
add ecx, edx
add ecx, 0x6813a50b
mov dword [esp + 0x1c0], ecx
mov ecx, dword [esp + 0x1c0]
add cl, 0xf9
mov byte [esp + 0xca], cl
mov edx, dword [str.BVnUqo___meganlone]
mov dword [esp + 0x1c0], 0x346c1c25
mov dword [esp + 0x1c4], 0x64191a68
mov dword [esp + 0x1c8], 0x6c111668
mov dword [esp + 0x1cc], 0x14616015
mov dword [esp + 0x1d0], 0x7dce0e6f
mov dword [esp + 0x1d4], 0x3b237f0d
mov dword [esp + 0x1d8], 0x7fc63130
mov dword [esp + 0x1dc], 0xe72b0179
mov word [esp + 0x1e0], 0
mov ecx, 0xd2e5ed9f
nop
nop
movzx esi, byte [esp + ecx + 0x2d1a1421]
mov edi, ecx
and edi, esi
add edi, edi
sub esi, edi
add esi, ecx
mov dword [esp + 0x20], esi
mov ebx, dword [esp + 0x20]
add bl, 0xa7
mov byte [esp + ecx + 0x2d1a1421], bl
movzx esi, byte [esp + ecx + 0x2d1a1422]
lea edi, [ecx + 1]
and edi, esi
add edi, edi
sub esi, edi
add esi, ecx
inc esi
mov dword [esp + 0x20], esi
mov ebx, dword [esp + 0x20]
add bl, 0xa7
mov byte [esp + ecx + 0x2d1a1422], bl
add ecx, 2
cmp ecx, 0xd2e5edc1
jne 0xb0d6e0
movzx ebx, byte [esp + 0x1c0]
lea ecx, [esp + 0xa50]
test bl, bl
je 0xb0d75b
lea esi, [esp + 0x1c1]
nop
mov byte [ecx], bl
inc ecx
movzx ebx, byte [esi]
inc esi
test bl, bl
jne 0xb0d750
mov byte [ecx], 0
movzx ebx, byte [edx]
test bl, bl
je 0xb0d77b
inc edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ecx], bl
inc ecx
movzx ebx, byte [edx]
inc edx
test bl, bl
jne 0xb0d770
mov byte [ecx], 0
movzx edx, byte [esp + 0xc0]
test dl, dl
je 0xb0d7ab
lea esi, [esp + 0xc1]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ecx], dl
inc ecx
movzx edx, byte [esi]
inc esi
test dl, dl
jne 0xb0d7a0
mov byte [ecx], 0
movzx edx, byte [eax]
test dl, dl
je 0xb0d7cb
inc eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [ecx], dl
inc ecx
movzx edx, byte [eax]
inc eax
test dl, dl
jne 0xb0d7c0
mov byte [ecx], 0
mov dword [esp + 0x1c0], 0x4bd54503
mov dword [esp + 0x1c4], 0x4fdc49d8
mov dword [esp + 0x1c8], 0xb3de4de5
mov dword [esp + 0x1cc], 0xb7e3b126
mov dword [esp + 0x1d0], 0xbb2bb502
mov dword [esp + 0x1d4], 0xbf13b92a
mov dword [esp + 0x1d8], 0xa3dcbde0
mov dword [esp + 0x1dc], 0xa730a105
mov dword [esp + 0x1e0], 0xab08a536
mov dword [esp + 0x1e4], 0xaf0da905
mov dword [esp + 0x1e8], 0x9338ad09
mov dword [esp + 0x1ec], 0x9701913d
mov dword [esp + 0x1f0], 0x9bc59504
mov dword [esp + 0x1f4], 0x9fcb9902
mov dword [esp + 0x1f8], 0x83059d07
mov dword [esp + 0x1fc], 0x87d3811b
mov dword [esp + 0x200], 0x8b15852c
mov dword [esp + 0x204], 0x8f1b891c
mov dword [esp + 0x208], 0xf3178ddd
mov dword [esp + 0x20c], 0xf75cf164
mov dword [esp + 0x210], 0xfb66f55d
mov dword [esp + 0x214], 0xff69f95f
mov dword [esp + 0x218], 0xe357fd5a
mov dword [esp + 0x21c], 0xe793e146
mov dword [esp + 0x220], 0xebe4e5e8
mov byte [esp + 0x22c], 0
mov dword [esp + 0x228], 0
mov dword [esp + 0x224], 0
mov eax, 0xcb083b75
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + eax + 0x34f7c64b]
mov esi, eax
and esi, edx
add esi, esi
sub edx, esi
add edx, eax
mov dword [esp + 0xc0], edx
mov edx, dword [esp + 0xc0]
add dl, 0xcd
mov byte [esp + eax + 0x34f7c64b], dl
cmp eax, 0xcb083be1
je 0xb0d972
movzx edx, byte [esp + eax + 0x34f7c64c]
lea esi, [eax + 1]
and esi, edx
add esi, esi
sub edx, esi
add edx, eax
inc edx
mov dword [esp + 0xc0], edx
mov edx, dword [esp + 0xc0]
add dl, 0xcd
mov byte [esp + eax + 0x34f7c64c], dl
add eax, 2
jmp 0xb0d910
mov dword [esp + 0xc0], 0xbe305d7
mov dword [esp + 0xc4], 0xfe7099a
mov word [esp + 0xc8], 0xd0e
mov dword [esp + 0xca], 0
mov dword [esp + 0xce], 0
mov word [esp + 0xd2], 0
mov eax, 0x170ad256
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx edx, byte [esp + eax - 0x170ad196]
lea esi, [eax - 1]
and esi, edx
add esi, esi
sub edx, esi
add edx, eax
dec edx
mov dword [esp + 0x20], edx
mov edx, dword [esp + 0x20]
add dl, 0xad
mov byte [esp + eax - 0x170ad196], dl
movzx edx, byte [esp + eax - 0x170ad195]
mov esi, eax
and esi, edx
add esi, esi
sub edx, esi
add edx, eax
mov dword [esp + 0x20], edx
mov edx, dword [esp + 0x20]
add dl, 0xad
mov byte [esp + eax - 0x170ad195], dl
add eax, 2
cmp eax, 0x170ad26a
jne 0xb0d9c0
lea eax, [esp + 0xa50]
sub ecx, eax
lea edx, [esp + 0xbc]
lea esi, [esp + 0xb4]
lea edi, [esp + 0x1c0]
lea ebx, [esp + 0xc0]
push edx
push esi
mov esi, edi
push ecx
push eax
push edi
push ebx
push 0xb4a2a0
call fcn.00b0c6d0
add esp, 0x1c
movzx eax, al
jmp dword [eax*4 + 0xb45360]