Function at 0x41b600
Capabilities:
Delete file
Get common file path

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x1a14
call fcn.0044e0a0
push ebp
push esi
push edi
xor eax, eax
push str._____END_CERTIFICATE_____
mov byte [esp + 0x1224], 0
push str.NKELzTjDCwJS46mTQnRqD7ioBwUsOfsV_V95pQIFqOQLEsj
mov ecx, 0x1ff
lea edi, [esp + 0x1229]
rep stosd dword es:[edi], eax
push str.A00fwS20AvS2KWoJaRkdIrhTQJt6Y3_2yNJrMZY3_RCyi0N_VdZQUfkcSv5Ls8
stosw word es:[edi], ax
push str.A4GBAAE6fzEF1RdPSJ0Ub8YBhj8zeBTM77Df3hMxlmLBbIAxkAkTigiADpCm8wD
stosb byte es:[edi], al
push str.zugNIC5j4aEwTknITLJeh4HJivTJVKllucWKwIDAQABMA0GCSqGSIb3DQEBBAUA
push str.NV0Ookm_NEPK3gaJXWYHf0cUDmpQTm2uV6Xzye2VImWh6OBuuAe6g4uTV6XUVSx
xor eax, eax
mov byte [esp + 0xa38], 0
push str.lR7dQZZtoiSl4G6KNcF94NDBdGzEX4dHvo7ERbLS3spNNyitZbLCchffSAr6GZz
mov ecx, 0x1ff
lea edi, [esp + 0xa3d]
rep stosd dword es:[edi], eax
push str.A1UEAxMJU1NMQXBwbGV0MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQChbEZ7
push str.cHBsZXQwIhgPMjAwMzA3MzExNjAwMDBaGA8yMTAzMDczMTE2MDAwMFowFDESMBAG
stosw word es:[edi], ax
push str.MIIBoDCCAQkCBgD_O0mHODANBgkqhkiG9w0BAQQFADAUMRIwEAYDVQQDEwlTU0xB
push str._____BEGIN_CERTIFICATE_____
stosb byte es:[edi], al
lea eax, [esp + 0xa4c]
push str._s_r_n_s_r_n_s_r_n_s_r_n_s_r_n_s_r_n_s_r_n_s_r_n_s_r_n_s_r_n_s_r_n
push eax
call fcn.0044dd9b
mov ecx, dword [0x49f26c]
push ecx
lea edx, [esp + 0x258]
push str.SSLTray:_ces_is__d
push edx
call fcn.0044dd9b
lea eax, [esp + 0x260]
add esp, 0x40
push eax
call fcn.00402a90
mov eax, dword [0x49f26c]
add esp, 4
test eax, eax
jne 0x41b6ef
call fcn.0040f590
push eax
lea ecx, [esp + 0x224]
push str.SSLTray:_ces_init_return__d
push ecx
call fcn.0044dd9b
lea edx, [esp + 0x22c]
push edx
call fcn.00402a90
add esp, 0x10
call fcn.00441cc0
call fcn.00441ba0
call fcn.00441b20
push eax
call fcn.004406a0
mov ebp, eax
mov eax, dword [0x49f26c]
add esp, 4
test eax, eax
jne 0x41b740
push str.AES128_SHA
push ebp
call fcn.0043fba0
push eax
lea eax, [esp + 0x22c]
push str.SSLTray:_SSL_CTX_set_cipher_list_return__d
push eax
call fcn.0044dd9b
lea ecx, [esp + 0x234]
push ecx
call fcn.00402a90
add esp, 0x18
lea edx, [esp + 0x118]
push edx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathA]
lea eax, [esp + 0x10]
push eax
push 0
push 0x4806f8
lea ecx, [esp + 0x124]
push ecx
call dword [sym.imp.KERNEL32.dll_GetTempFileNameA]
lea eax, [esp + 0xa20]
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41b777
sub eax, edx
lea edx, [esp + 0x10]
push 0x47bb78
push edx
mov edi, eax
call fcn.0044dd88
mov esi, eax
add esp, 8
test esi, esi
je 0x41b7b6
push esi
push edi
lea eax, [esp + 0xa28]
push 1
push eax
call fcn.0044ea05
push esi
call fcn.0044dc7d
add esp, 0x14
jmp 0x41b7f8
mov byte [esp + 0x620], 0
xor eax, eax
mov ecx, 0xff
lea edi, [esp + 0x621]
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x10]
push ecx
stosw word es:[edi], ax
lea edx, [esp + 0x624]
push str.SSLTray:_Open_temp_cert_file__s_failed
push edx
stosb byte es:[edi], al
call fcn.0044dd9b
lea eax, [esp + 0x62c]
push eax
call fcn.00402a90
add esp, 0x10
push 0
lea ecx, [esp + 0x14]
push ecx
push ebp
call fcn.00440190
add esp, 0xc
test eax, eax
jne 0x41b816
push str.SSLTray:_Error_loading_trust_store
jmp 0x41b898
push ebp
call fcn.00440180
add esp, 4
cmp eax, 1
je 0x41b84b
push str.SSLTray:_Error_set_trust_store
call fcn.00402a90
push ebp
call fcn.0043fdd0
add esp, 8
lea eax, [esp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
xor eax, eax
pop edi
pop esi
pop ebp
mov esp, ebp
pop ebp
ret
lea ecx, [esp + 0x10]
push ecx
push ebp
call fcn.00440f80
add esp, 8
cmp eax, 1
je 0x41b865
push str.SSLTray:_Error_loading_cert_chain
jmp 0x41b898
push 0x800
lea eax, [esp + 0x1224]
push eax
push str.MIICXQIBAAKBgQChbEZ7lR7dQZZtoiSl4G6KNcF94NDBdGzEX4dHvo7ERbLS3spNNyitZbLCchffSAr6GZzNV0Ookm_NEPK3gaJXWYHf0cUDmpQTm2uV6Xzye2VImWh6OBuuAe6g4uTV6XUVSxzugNIC5j4aEwTknITLJeh4HJivTJVKllucWKwIDAQABAoGBAIdjX5RERT12SLPlNaWmijADjCjwTgwZPWDRdxnuChoaOayE60VoVllnbu2o80TCJnhl4EmOsoNIBY3q8s7v87NRAxC_jKtIUN9jaZkomkAhLQY9T5EnpvCEUd0QKvCcvAqjrr8VoaqgDfnSctr309EqEzaWW7mUwC5nn6MpAkEA2__DwpXxzamoh5ymwgG1o4eOQeQOJhOF_Y7ymxh_o_xwF0IrLylhybJDkGVtrgdkhPHxhC4xs66JNd5ev1kXXwJBALvWoWCFtKCxDopoERvXgPQreOK6WSwVgDoMvS55H4HJLeScnnFjdNTLB5okKFCOFyDRAPSt30pfleKBZQcLUCQQDVhhACNHZUHm6r8KcJdY9OAKtZ2HbDDf_mcWWiNiZ2NESQe6X_5ohoRtico9ZcWNmhUzb9dnXg3c5CXL8VQQRAkA7eybVGuHs9MRm_bdVOrPiHhYErf_o3tIhD8GkgsSAY8V9nD7sJxNrAvPgUs32YfLZENQr5cEn1nuscK1_C2_1AkAcZG37KbkrdCFgh30V7yQXsKbzTAQJ3bs9BFipGKaj72BoWph2_i5qfmPNXcrk_5fwpmlLrXL52j67sZxWVe1
call fcn.0041afb0
push eax
lea ecx, [esp + 0x1230]
push ecx
push ebp
call fcn.00440e40
add esp, 0x18
cmp eax, 1
je 0x41b8ba
push str.SSLTray:_Error_loading_key
call fcn.00402a90
push ebp
call fcn.0043fdd0
add esp, 8
lea edx, [esp + 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
xor eax, eax
pop edi
pop esi
pop ebp
mov esp, ebp
pop ebp
ret
lea eax, [esp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
pop edi
mov eax, ebp
pop esi
pop ebp
mov esp, ebp
pop ebp
ret