Function at 0x10012e0d
Capabilities:
Get graphical window text
Hide graphical window
Initialize iwebbrowser2
Read .ini file
Read file on windows
Write file on windows

Disassembly:
mov eax, 0x1001b8f8
call fcn.1001a990
sub esp, 0x2c0
push ebx
mov ebx, ecx
push esi
push edi
mov eax, dword [ebx + 0x3a4]
push 0
add eax, 4
mov dword [ebp - 0x18], ebx
push dword [eax]
call dword [sym.imp.USER32.dll_ShowWindow]
lea eax, [ebx + 0x7ce]
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
mov dword [ebp - 0x20], eax
push eax
lea eax, [ebp - 0xa0]
push 0x1a
push eax
push str.true
mov edi, str.search
push str.localie
push edi
call esi
and byte [ebp - 0xd], 0
lea eax, [ebp - 0xa0]
push eax
push str.false
call dword [sym.imp.MSVCRT.dll__stricmp]
pop ecx
test eax, eax
pop ecx
jne 0x10012e83
mov byte [ebp - 0xd], 1
cmp dword [ebp + 8], 0xffffffff
jne 0x10012f1a
push dword [ebp - 0x20]
lea eax, [ebp - 0x64]
push 0x1a
push eax
push 0x10021acc
push str.current
push edi
call esi
lea eax, [ebp - 0x64]
push eax
call dword [sym.imp.MSVCRT.dll_atoi]
mov ebx, dword [sym.imp.MSVCRT.dll_sprintf]
mov dword [ebp + 8], eax
push eax
lea eax, [ebp - 0x64]
push str.encode_d
push eax
call ebx
mov eax, dword [ebp - 0x18]
add esp, 0x10
add eax, 0x7ce
push eax
lea eax, [ebp - 0x84]
push 0x10
push eax
lea eax, [ebp - 0x64]
push str.mbcs
push eax
push edi
call esi
push dword [ebp + 8]
lea eax, [ebp - 0x64]
push str.url_d
push eax
call ebx
mov eax, dword [ebp - 0x18]
add esp, 0xc
add eax, 0x7ce
push eax
lea eax, [ebp - 0x2cc]
push 0x100
push eax
lea eax, [ebp - 0x64]
push str.http:__www.baidu.com_s_tnwbank12345_pgwdkey
push eax
push edi
call esi
mov ebx, dword [ebp - 0x18]
jmp 0x10012f85
push dword [ebp + 8]
mov edi, dword [sym.imp.MSVCRT.dll_sprintf]
lea eax, [ebp - 0x64]
push 0x10021ad0
push eax
call edi
add esp, 0xc
lea eax, [ebx + 0x6ca]
push eax
lea eax, [ebp - 0x84]
push 0x10
push eax
push str.mbcs
lea eax, [ebp - 0x64]
push str.encode
push eax
call esi
push dword [ebp + 8]
lea eax, [ebp - 0x64]
push 0x10021ad0
push eax
call edi
add esp, 0xc
lea eax, [ebx + 0x6ca]
push eax
lea eax, [ebp - 0x2cc]
push 0x100
push eax
push str.http:__www.baidu.com_s_tnwbank12345_pgwdkey
lea eax, [ebp - 0x64]
push 0x10022274
push eax
call esi
lea eax, [ebp - 0x2cc]
lea ecx, [ebp - 0x24]
push eax
call fcn.100018e6
mov esi, dword [sym.imp.USER32.dll_GetWindowTextA]
lea eax, [ebp - 0x120]
push 0x7f
push eax
push dword [ebx + 0x3f4]
xor edi, edi
mov dword [ebp - 4], edi
call esi
lea eax, [ebp - 0x120]
push eax
call sub.MSVCRT.dll_strlen
and byte [ebp + 0xb], 0
cmp eax, edi
pop ecx
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x18], edi
jle 0x10013021
mov eax, dword [ebp - 0x18]
mov al, byte [ebp + eax - 0x120]
push eax
call dword [sym.imp.KERNEL32.dll_IsDBCSLeadByte]
test eax, eax
je 0x10012fea
cmp byte [ebp + 0xb], 0
sete al
mov byte [ebp + 0xb], al
inc dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x20]
jl 0x10012fcb
cmp byte [ebp + 0xb], 0
je 0x10013021
push 0x80
lea eax, [ebp - 0x120]
push edi
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
lea eax, [ebp - 0x120]
push 0x7e
push eax
push dword [ebx + 0x3f4]
call esi
cmp dword [ebp - 0x20], 1
jl 0x1001318a
and byte [ebp + 0xb], 0
lea eax, [ebp - 0x1cc]
lea esi, [ebx + 0x8d2]
push eax
push edi
push esi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesExA]
test eax, eax
jne 0x10013076
push 0x10022270
push esi
call dword [sym.imp.MSVCRT.dll_fopen]
pop ecx
cmp eax, edi
pop ecx
jne 0x1001306e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.100018ba
or eax, 0xffffffff
jmp 0x10013481
push eax
call dword [sym.imp.MSVCRT.dll_fclose]
pop ecx
push 0x1002226c
push esi
call dword [sym.imp.MSVCRT.dll_fopen]
mov esi, eax
pop ecx
test esi, esi
pop ecx
mov edi, 0x88
je 0x1001312f
test byte [esi + 0xc], 0x10
jne 0x10013121
push esi
push 1
lea eax, [ebp - 0x1a8]
push edi
push eax
call dword [sym.imp.MSVCRT.dll_fread]
add esp, 0x10
test eax, eax
jbe 0x10013121
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x1a2]
push eax
call dword [sym.imp.MSVCRT.dll__stricmp]
pop ecx
test eax, eax
pop ecx
jne 0x10013093
lea eax, [ebp - 0x1a8]
push eax
call dword [sym.imp.MSVCRT.dll_atoi]
lea ecx, [ebp - 0x1a8]
inc eax
push 0xa
push ecx
push eax
call dword [sym.imp.MSVCRT.dll__itoa]
push 1
push 0xffffff78
push esi
call dword [sym.imp.MSVCRT.dll_fseek]
push esi
push 1
lea eax, [ebp - 0x1a8]
push edi
push eax
call dword [sym.imp.MSVCRT.dll_fwrite]
push esi
call dword [sym.imp.MSVCRT.dll_fflush]
push esi
call dword [sym.imp.MSVCRT.dll_rewind]
add esp, 0x34
mov byte [ebp + 0xb], 1
push esi
call dword [sym.imp.MSVCRT.dll_fclose]
cmp byte [ebp + 0xb], 0
pop ecx
jne 0x10013188
lea eax, [ebx + 0x8d2]
push 0x10022268
push eax
call dword [sym.imp.MSVCRT.dll_fopen]
mov esi, eax
pop ecx
test esi, esi
pop ecx
je 0x10013188
lea eax, [ebp - 0x1a8]
push 0x10021acc
push eax
call sub.MSVCRT.dll_strcpy
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x1a2]
push eax
call sub.MSVCRT.dll_strcpy
push esi
push 1
lea eax, [ebp - 0x1a8]
push edi
push eax
call dword [sym.imp.MSVCRT.dll_fwrite]
push esi
call dword [sym.imp.MSVCRT.dll_fclose]
add esp, 0x24
xor edi, edi
lea eax, [ebp - 0x120]
lea ecx, [ebp - 0x14]
push eax
call fcn.100018e6
push edi
push ecx
lea eax, [ebp - 0x14]
mov ecx, esp
mov dword [ebp + 8], esp
push eax
mov byte [ebp - 4], 1
call fcn.1000c0ea
lea eax, [ebp + 8]
mov ecx, ebx
push eax
call fcn.100135d5
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 2
call fcn.1000350d
lea ecx, [ebp + 8]
mov byte [ebp - 4], 1
call fcn.100018ba
mov esi, 0x10022998
lea ecx, [ebp - 0x28]
push esi
call fcn.100018e6
push esi
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 3
call fcn.100018e6
lea eax, [ebp - 0x84]
push str.utf_8
push eax
mov byte [ebp - 4], 4
call dword [sym.imp.MSVCRT.dll__stricmp]
pop ecx
test eax, eax
pop ecx
jne 0x10013241
push 0xfde9
push edi
push ecx
lea eax, [ebp - 0x14]
mov ecx, esp
mov dword [ebp + 8], esp
push eax
call fcn.1000c0ea
lea eax, [ebp + 8]
mov ecx, ebx
push eax
call fcn.10013492
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 5
call fcn.1000350d
lea ecx, [ebp + 8]
mov byte [ebp - 4], 4
call fcn.100018ba
mov eax, dword [ebp - 0x14]
xor esi, esi
cmp dword [eax - 8], edi
jle 0x100132a3
mov al, byte [esi + eax]
cmp al, 0x80
movzx eax, al
push eax
jae 0x10013269
lea eax, [ebp - 0x1c]
push 0x1002225c
push eax
call fcn.1000c21f
add esp, 0xc
jmp 0x1001328b
lea eax, [ebp - 0x1c]
push str.___02x
push eax
call fcn.1000c21f
add esp, 0xc
lea ecx, [ebp - 0x1c]
call fcn.10001c0d
push dword [ebp - 0x1c]
call dword [sym.imp.USER32.dll_CharUpperA]
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x28]
push eax
push dword [eax - 8]
call fcn.1000197b
mov eax, dword [ebp - 0x14]
inc esi
cmp esi, dword [eax - 8]
jl 0x1001324b
push dword [ebp - 0x28]
lea ecx, [ebp - 0x24]
push str.key
call fcn.100035c0
cmp byte [ebp - 0xd], 0
jne 0x10013325
lea eax, [ebp - 0x38]
mov word [ebp - 0x48], di
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
push dword [ebp - 0x24]
lea ecx, [ebp + 8]
mov word [ebp - 0x38], 8
call fcn.10008e73
mov eax, dword [eax]
cmp eax, edi
je 0x100132e2
mov eax, dword [eax]
jmp 0x100132e4
xor eax, eax
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x30], eax
cmp ecx, edi
je 0x100132f3
call fcn.10008efa
lea ecx, [ebp - 0x48]
mov ebx, dword [ebx + 0xb6c]
push ecx
lea ecx, [ebp - 0x48]
push ecx
mov eax, dword [ebx]
lea ecx, [ebp - 0x48]
push ecx
lea ecx, [ebp - 0x48]
push ecx
lea ecx, [ebp - 0x38]
push ecx
push ebx
call dword [eax + 0xd0]
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp 0x100133f8
or word [ebp - 0x6c], 0xffff
mov word [ebp - 0x74], 0xb
lea eax, [ebp + 8]
mov byte [ebp - 4], 6
push eax
push 0x1001d31c
push 0x15
push edi
push 0x1001d2fc
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, edi
mov eax, dword [ebp + 8]
jl 0x1001342d
cmp eax, edi
je 0x10013437
mov esi, dword [eax]
lea ecx, [ebp - 0x74]
call fcn.10008f47
push eax
push dword [ebp + 8]
call dword [esi + 0xa4]
lea eax, [ebp - 0x48]
mov word [ebp - 0x38], di
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
push dword [ebp - 0x24]
lea ecx, [ebp - 0x20]
mov word [ebp - 0x48], 8
call fcn.10008e73
mov eax, dword [eax]
cmp eax, edi
je 0x1001339b
mov eax, dword [eax]
jmp 0x1001339d
xor eax, eax
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x40], eax
cmp ecx, edi
je 0x100133af
call fcn.10008efa
mov dword [ebp - 0x20], edi
lea edx, [ebp - 0x38]
mov eax, dword [ebp + 8]
push edx
lea edx, [ebp - 0x38]
push edx
mov ecx, dword [eax]
lea edx, [ebp - 0x38]
push edx
lea edx, [ebp - 0x38]
push edx
lea edx, [ebp - 0x48]
push edx
push eax
call dword [ecx + 0xd0]
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [ebp - 0x48]
push eax
call esi
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 4
push eax
call esi
cmp eax, edi
jge 0x100133f8
push eax
call fcn.1001a794
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 3
call fcn.100018ba
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.100018ba
and byte [ebp - 4], 0
lea ecx, [ebp - 0x14]
call fcn.100018ba
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.100018ba
push 1
pop eax
jmp 0x10013481
cmp eax, edi
je 0x10013437
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea eax, [ebp - 0x74]
mov byte [ebp - 4], 4
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
cmp eax, edi
jge 0x1001344f
push eax
call fcn.1001a794
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 3
call fcn.100018ba
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.100018ba
and byte [ebp - 4], 0
lea ecx, [ebp - 0x14]
call fcn.100018ba
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x24]
call fcn.100018ba
xor eax, eax
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 4