Function at 0x1c73110
Capabilities:
Contain obfuscated stackstrings
Enumerate pe sections

Disassembly:
ja 0x1c730e8
add esi, edi
mov ebx, dword [esi + 0x78]
call fcn.01c72fe8
mov gs, word [edx]
cmp bh, bl
push esi
push ebx
call fcn.01c73028
pop ecx
test eax, eax
pop ecx
je 0x1c7317b
push edi
push esi
push ebx
call fcn.01c73068
add esp, 0xc
call fcn.01c72fe8
inc ebx
fsubr st(3)
sub eax, 0x8578768b
test byte [edi], 0x84
xchg ecx, eax
add byte [eax], al
add byte [ebx + 0x3243e5c], cl
test dword [ebx], 0xfef1e8df
invalid
add byte [eax], al
mov ebx, dword [esi + edi + 0x24]
add esi, edi
add ebx, edi
call fcn.01c72fe8
into
jp 0x1c73140
cmp eax, 0x320468b
invalid
test eax, eax
je 0x1c7318a
and dword [ebp - 4], 0
mov eax, dword [edi]
pop es
mov dword [ebp - 0x10], eax
call fcn.01c72fe8
inc edx
aad 0x4a
loop 0x1c730aa
jge 0x1c73119
add byte [ebx + eax*2 - 0x75], dh
inc ebp
in al, dx
and dword [ebp - 0x10], 0
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], ebx
mov eax, dword [ebp - 8]
movzx eax, word [eax]
cmp eax, dword [ebp - 4]
inc ebp
cld
jne 0x1c7315b
mov eax, dword [ebp - 0xc]
push dword [ebp + 0xc]
mov eax, dword [eax]
add eax, dword [ebp + 8]
push eax
call fcn.01c72f7e
pop ecx
test eax, eax
pop ecx
je 0x1c73182
mov eax, dword [esi + 0x18]
inc dword [ebp - 0x10]
add dword [ebp - 8], 2
add dword [ebp - 0xc], 4
dec eax
cmp dword [ebp - 0x10], eax
jbe 0x1c73139
mov eax, dword [esi + 0x14]
inc dword [ebp - 4]
dec eax
cmp dword [ebp - 4], eax
jbe 0x1c73118
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret
mov eax, dword [ebp - 4]
mov eax, dword [edi + eax*4]
jmp 0x1c731bf
xor ebx, ebx
mov dword [ebp - 0x10], edi
mov eax, dword [esi + 0x10]
add eax, ebx
cmp dword [ebp + 0xc], eax
jne 0x1c731aa
call fcn.01c72fe8
je 0x1c731bc
jo 0x1c731e0
mov eax, dword [ebp - 0x10]
cmp dword [eax], 0
jne 0x1c731b9
mov eax, dword [esi + 0x14]
add dword [ebp - 0x10], 4
inc ebx
dec eax
cmp ebx, eax
jbe 0x1c7318f
jmp 0x1c7317b
mov eax, dword [edi + ebx*4]
shl eax, 6
add eax, dword [ebp + 8]
jmp 0x1c7317d
std
add eax, 0x788b0000
cmp al, 3
clc
movzx eax, word [edi + 0x14]
lea esi, [eax + edi + 0x18]
mov dword [ebp - 0x44], esi
call fcn.01c72fe8
mov bl, 0x32
outsd dx, dword [esi]
push ecx
movzx eax, word [edi + 6]
lea eax, [eax + eax*4]
shl eax, 3
sub eax, dword [ebp + 0x10]
add eax, esi
mov dword [ebp - 0xb4], eax
mov dword [ebp - 8], eax
call fcn.01c72fe8
ror byte [ecx + 0x70], cl
movsd dword es:[edi], dword [esi]
mov ax, word [edi + 6]
cmp ax, bx
jbe 0x1c73242
lea ecx, [esi + 0xc]
movzx edx, ax
mov eax, dword [ecx + 4]
mov esi, dword [ecx]
add eax, esi
cmp dword [ebp - 8], eax
jae 0x1c7323c
mov dword [ebp - 8], eax
add ecx, 0x28
dec edx
jne 0x1c7322d
mov byte [ebp - 0x58], bl
mov byte [ebp - 0x57], bl
mov byte [ebp - 0x56], 0x58
mov byte [ebp - 0x55], bl
mov byte [ebp - 0x54], 0xe0
mov byte [ebp - 0x53], 0xc2
mov byte [ebp - 0x52], 0xd3
mov byte [ebp - 0x51], 0xf4
mov byte [ebp - 0x50], 0xde
mov byte [ebp - 0x4f], 0xd4
mov byte [ebp - 0x4e], 0xd3
mov byte [ebp - 0x4d], 0xc2
mov byte [ebp - 0x4c], 0xca
mov byte [ebp - 0x4b], 0xee
mov byte [ebp - 0x4a], 0xc9
mov byte [ebp - 0x49], 0xc1
mov byte [ebp - 0x48], 0xc8
mov byte [ebp - 0x47], 0xa7
call fcn.01c72fe8
push edx
mov bh, 0x96
cwde
lea eax, [ebp - 0x58]
push eax
call fcn.01c72ff8
mov esi, dword [ebp + 0xc]
push eax
push esi
push dword [ebp + 8]
call fcn.01c72fad
add esp, 0x10
lea ecx, [ebp - 0xb0]
push ecx
call eax
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0xac]
xor edx, edx
div ecx
xor edx, edx
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 8]
div ecx
test edx, edx
je 0x1c732d6
inc dword [ebp - 0x8c]
imul ecx, dword [ebp - 0x8c]
mov dword [ebp + 0xc], ecx
mov byte [ebp - 0x40], bl
mov byte [ebp - 0x3f], bl
mov byte [ebp - 0x3e], 0xec
mov byte [ebp - 0x3d], bl
mov byte [ebp - 0x3c], 0x45
mov byte [ebp - 0x3b], 0x7a
mov byte [ebp - 0x3a], 0x61
mov byte [ebp - 0x39], 0x67
mov byte [ebp - 0x38], 0x66
mov byte [ebp - 0x37], 0x72
mov byte [ebp - 0x36], 0x7f
mov byte [ebp - 0x35], 0x52
mov byte [ebp - 0x34], 0x7f
mov byte [ebp - 0x33], 0x7f
mov byte [ebp - 0x32], 0x7c
mov byte [ebp - 0x31], 0x70
mov byte [ebp - 0x30], 0x13
call fcn.01c72fe8
xchg ebp, eax
cmp ecx, ebx
or eax, 0x50c0458d
call fcn.01c72ff8
push eax
push esi
push dword [ebp + 8]
call fcn.01c72fad
add esp, 0x10
mov dword [ebp - 0x88], eax
call fcn.01c72fe8
int3