Function at 0x41cbc0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x2c
mov eax, dword [esp + 0x40]
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call sub.libgcrypt_20.dll_gcry_sexp_canon_len
mov dword [esp + 0xc], 0
mov ebx, eax
mov eax, dword [esp + 0x44]
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov dword [esp], eax
call sub.libgcrypt_20.dll_gcry_sexp_canon_len
mov dword [esp + 0x18], eax
test ebx, ebx
je 0x41cc84
test eax, eax
je 0x41cc84
mov eax, dword [esp + 0x40]
mov esi, 0x4000053
cmp byte [eax], 0x28
je 0x41cc35
add esp, 0x2c
mov eax, esi
pop ebx
pop esi
pop edi
pop ebp
ret
lea ecx, [eax + 1]
movzx eax, byte [eax + 1]
lea edx, [eax - 0x30]
cmp dl, 9
ja 0x41cc2b
xor edx, edx
mov esi, ebx
lea esi, [esi]
nop
lea edx, [edx + edx*4]
lea edi, [ecx + 1]
lea edx, [eax + edx*2 - 0x30]
movzx eax, byte [ecx + 1]
cmp al, 0x3a
setne bl
test al, al
je 0x41cc90
test bl, bl
je 0x41cc90
lea ebx, [eax - 0x30]
mov ecx, edi
cmp bl, 9
jbe 0x41cc50
add esp, 0x2c
mov esi, 0x4000053
pop ebx
mov eax, esi
pop esi
pop edi
pop ebp
ret
mov esi, 0x4000037
jmp 0x41cc2b
mov eax, ebx
mov ebx, esi
test edx, edx
je 0x41cc75
test al, al
jne 0x41cc75
cmp edx, 0xa
jne 0x41ccaa
cmp dword [ecx + 2], 0x6c627570
je 0x41ccb4
mov esi, 0x4000068
jmp 0x41cc2b
cmp dword [ecx + 6], 0x6b2d6369
jne 0x41ccaa
cmp word [ecx + 0xa], 0x7965
jne 0x41ccaa
xor esi, esi
cmp byte [edi + 0xb], 0x28
jne 0x41ccaa
movzx eax, byte [edi + 0xc]
lea ecx, [edi + 0xc]
lea edx, [eax - 0x30]
cmp dl, 9
ja 0x41cc75
xor edx, edx
mov edi, ebx
lea edx, [edx + edx*4]
lea ebp, [ecx + 1]
lea edx, [eax + edx*2 - 0x30]
movzx eax, byte [ecx + 1]
cmp al, 0x3a
setne bl
test al, al
je 0x41cd10
test bl, bl
je 0x41cd10
lea ebx, [eax - 0x30]
mov ecx, ebp
cmp bl, 9
jbe 0x41cce0
jmp 0x41cc75
mov eax, ebx
mov ebx, edi
test edx, edx
je 0x41cc75
test al, al
jne 0x41cc75
lea edi, [ecx + edx + 2]
movzx eax, byte [edi]
cmp al, 0x29
je 0x41ce07
mov ebp, ebx
cmp al, 0x28
jne 0x41cc75
lea esi, [esi]
movzx eax, byte [edi + 1]
lea ecx, [edi + 1]
lea edx, [eax - 0x30]
cmp dl, 9
ja 0x41cc75
xor edx, edx
lea edx, [edx + edx*4]
lea edi, [ecx + 1]
lea edx, [eax + edx*2 - 0x30]
movzx eax, byte [ecx + 1]
cmp al, 0x3a
setne bl
test al, al
je 0x41cd80
test bl, bl
je 0x41cd80
lea ebx, [eax - 0x30]
mov ecx, edi
cmp bl, 9
jbe 0x41cd55
jmp 0x41cc75
test edx, edx
je 0x41cc75
test bl, bl
jne 0x41cc75
lea edx, [ecx + edx + 2]
movzx eax, byte [edx]
lea ecx, [eax - 0x30]
cmp cl, 9
ja 0x41cc75
xor ecx, ecx
lea ecx, [ecx + ecx*4]
lea edi, [edx + 1]
lea ecx, [eax + ecx*2 - 0x30]
movzx eax, byte [edx + 1]
cmp al, 0x3a
setne bl
test al, al
je 0x41cdd0
test bl, bl
je 0x41cdd0
lea ebx, [eax - 0x30]
mov edx, edi
cmp bl, 9
jbe 0x41cda5
jmp 0x41cc75
test ecx, ecx
je 0x41cc75
test bl, bl
jne 0x41cc75
lea eax, [edx + ecx + 2]
cmp byte [eax], 0x29
jne 0x41cc75
lea edi, [eax + 1]
movzx eax, byte [eax + 1]
cmp al, 0x29
je 0x41ce05
cmp al, 0x28
je 0x41cd40
jmp 0x41cc75
mov ebx, ebp
mov eax, dword [esp + 0x18]
lea eax, [ebx + eax + 0x20]
mov dword [esp], eax
call sub.libgcrypt_20.dll_gcry_malloc
mov edx, dword [esp + 0x48]
mov dword [edx], eax
test eax, eax
je 0x41cee6
mov dword [eax], 0x3a303228
lea edx, [eax + 0x18]
mov ebp, edi
mov dword [eax + 4], 0x64616873
mov dword [eax + 8], 0x6465776f
mov dword [eax + 0xc], 0x6972702d
mov dword [eax + 0x10], 0x65746176
mov dword [eax + 0x14], 0x79656b2d
mov byte [eax + 0x18], 0
mov eax, dword [esp + 0x40]
mov dword [esp], edx
add eax, 0xe
mov dword [esp + 0x1c], edx
sub ebp, eax
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
call sub.msvcrt.dll_memcpy
mov edx, dword [esp + 0x1c]
mov eax, 0x3176
mov ecx, dword [esp + 0x44]
add ebp, edx
mov word [ebp + 0x10], ax
mov eax, dword [esp + 0x18]
add ebp, 0x12
mov dword [ebp - 0x12], 0x733a3828
mov dword [ebp - 0xe], 0x6f646168
mov dword [ebp - 0xa], 0x35646577
mov dword [ebp - 6], 0x2d31743a
mov byte [ebp], 0
mov dword [esp], ebp
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
call sub.msvcrt.dll_memcpy
add ebp, dword [esp + 0x18]
mov eax, edi
sub eax, dword [esp + 0x40]
mov byte [ebp], 0x29
sub ebx, eax
add ebp, 1
mov dword [esp + 8], ebx
mov dword [esp + 4], edi
mov dword [esp], ebp
call sub.msvcrt.dll_memcpy
jmp 0x41cc2b
call sub.libgpg_error_0.dll_gpg_err_code_from_syserror
movzx edx, ax
or edx, 0x4000000
test eax, eax
cmovne esi, edx
jmp 0x41cc2b