Function at 0x41b8d0
Capabilities:
Delete file
Get common file path

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x1614
call fcn.0044e0a0
push ebp
push esi
push edi
xor eax, eax
push str._____END_CERTIFICATE_____
mov byte [esp + 0xe24], 0
push str.NKELzTjDCwJS46mTQnRqD7ioBwUsOfsV_V95pQIFqOQLEsj
mov ecx, 0x1ff
lea edi, [esp + 0xe29]
rep stosd dword es:[edi], eax
push str.A00fwS20AvS2KWoJaRkdIrhTQJt6Y3_2yNJrMZY3_RCyi0N_VdZQUfkcSv5Ls8
stosw word es:[edi], ax
push str.A4GBAAE6fzEF1RdPSJ0Ub8YBhj8zeBTM77Df3hMxlmLBbIAxkAkTigiADpCm8wD
stosb byte es:[edi], al
push str.zugNIC5j4aEwTknITLJeh4HJivTJVKllucWKwIDAQABMA0GCSqGSIb3DQEBBAUA
push str.NV0Ookm_NEPK3gaJXWYHf0cUDmpQTm2uV6Xzye2VImWh6OBuuAe6g4uTV6XUVSx
xor eax, eax
mov byte [esp + 0x638], 0
push str.lR7dQZZtoiSl4G6KNcF94NDBdGzEX4dHvo7ERbLS3spNNyitZbLCchffSAr6GZz
mov ecx, 0x1ff
lea edi, [esp + 0x63d]
rep stosd dword es:[edi], eax
push str.A1UEAxMJU1NMQXBwbGV0MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQChbEZ7
push str.cHBsZXQwIhgPMjAwMzA3MzExNjAwMDBaGA8yMTAzMDczMTE2MDAwMFowFDESMBAG
stosw word es:[edi], ax
push str.MIIBoDCCAQkCBgD_O0mHODANBgkqhkiG9w0BAQQFADAUMRIwEAYDVQQDEwlTU0xB
push str._____BEGIN_CERTIFICATE_____
stosb byte es:[edi], al
lea eax, [esp + 0x64c]
push str._s_r_n_s_r_n_s_r_n_s_r_n_s_r_n_s_r_n_s_r_n_s_r_n_s_r_n_s_r_n_s_r_n
push eax
call fcn.0044dd9b
call fcn.00441cc0
call fcn.00441ba0
call fcn.00441b20
push eax
call fcn.004406a0
mov ebp, eax
push str.RC4_MD5
push ebp
call fcn.0043fba0
add esp, 0x40
lea ecx, [esp + 0x118]
push ecx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
lea edx, [esp + 0x10]
push edx
push 0
push 0x4806f8
lea eax, [esp + 0x124]
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameA]
lea eax, [esp + 0x620]
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b9c0
lea ecx, [esp + 0x10]
sub eax, edx
push 0x47bb78
push ecx
mov edi, eax
call fcn.0044dd88
mov esi, eax
add esp, 8
test esi, esi
je 0x41b9ff
push esi
push edi
lea edx, [esp + 0x628]
push 1
push edx
call fcn.0044ea05
push esi
call fcn.0044dc7d
add esp, 0x14
jmp 0x41ba41
xor eax, eax
mov byte [esp + 0x220], 0
mov ecx, 0xff
lea edi, [esp + 0x221]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
lea eax, [esp + 0x10]
push eax
lea ecx, [esp + 0x224]
push str.SSLTray:_Open_temp_cert_file__s_failed
push ecx
call fcn.0044dd9b
lea edx, [esp + 0x22c]
push edx
call fcn.00402a90
add esp, 0x10
push 0
lea eax, [esp + 0x14]
push eax
push ebp
call fcn.00440190
add esp, 0xc
test eax, eax
jne 0x41ba5f
push str.SSLTray:_Error_loading_trust_store
jmp 0x41bae1
push ebp
call fcn.00440180
add esp, 4
cmp eax, 1
je 0x41ba94
push str.SSLTray:_Error_set_trust_store
call fcn.00402a90
push ebp
call fcn.0043fdd0
add esp, 8
lea edx, [esp + 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
xor eax, eax
pop edi
pop esi
pop ebp
mov esp, ebp
pop ebp
ret
lea eax, [esp + 0x10]
push eax
push ebp
call fcn.00440f80
add esp, 8
cmp eax, 1
je 0x41baae
push str.SSLTray:_Error_loading_cert_chain
jmp 0x41bae1
push 0x800
lea edx, [esp + 0xe24]
push edx
push str.MIICXQIBAAKBgQChbEZ7lR7dQZZtoiSl4G6KNcF94NDBdGzEX4dHvo7ERbLS3spNNyitZbLCchffSAr6GZzNV0Ookm_NEPK3gaJXWYHf0cUDmpQTm2uV6Xzye2VImWh6OBuuAe6g4uTV6XUVSxzugNIC5j4aEwTknITLJeh4HJivTJVKllucWKwIDAQABAoGBAIdjX5RERT12SLPlNaWmijADjCjwTgwZPWDRdxnuChoaOayE60VoVllnbu2o80TCJnhl4EmOsoNIBY3q8s7v87NRAxC_jKtIUN9jaZkomkAhLQY9T5EnpvCEUd0QKvCcvAqjrr8VoaqgDfnSctr309EqEzaWW7mUwC5nn6MpAkEA2__DwpXxzamoh5ymwgG1o4eOQeQOJhOF_Y7ymxh_o_xwF0IrLylhybJDkGVtrgdkhPHxhC4xs66JNd5ev1kXXwJBALvWoWCFtKCxDopoERvXgPQreOK6WSwVgDoMvS55H4HJLeScnnFjdNTLB5okKFCOFyDRAPSt30pfleKBZQcLUCQQDVhhACNHZUHm6r8KcJdY9OAKtZ2HbDDf_mcWWiNiZ2NESQe6X_5ohoRtico9ZcWNmhUzb9dnXg3c5CXL8VQQRAkA7eybVGuHs9MRm_bdVOrPiHhYErf_o3tIhD8GkgsSAY8V9nD7sJxNrAvPgUs32YfLZENQr5cEn1nuscK1_C2_1AkAcZG37KbkrdCFgh30V7yQXsKbzTAQJ3bs9BFipGKaj72BoWph2_i5qfmPNXcrk_5fwpmlLrXL52j67sZxWVe1
call fcn.0041afb0
push eax
lea eax, [esp + 0xe30]
push eax
push ebp
call fcn.00440e40
add esp, 0x18
cmp eax, 1
je 0x41bb03
push str.SSLTray:_Error_loading_key
call fcn.00402a90
push ebp
call fcn.0043fdd0
add esp, 8
lea ecx, [esp + 0x10]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
xor eax, eax
pop edi
pop esi
pop ebp
mov esp, ebp
pop ebp
ret
lea edx, [esp + 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
pop edi
mov eax, ebp
pop esi
pop ebp
mov esp, ebp
pop ebp
ret