Function at 0x100061c0
Capabilities:
Reference http user-agent string
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x10044c71
mov eax, dword fs:[0]
push eax
sub esp, 0x130
mov eax, dword [0x100591e0]
xor eax, esp
mov dword [esp + 0x128], eax
push ebx
push esi
push edi
mov eax, dword [0x100591e0]
xor eax, esp
push eax
lea eax, [esp + 0x140]
mov dword fs:[0], eax
xor ebx, ebx
mov byte [0x1005b14c], 1
cmp byte [0x1005b14d], bl
je 0x10006218
mov al, 1
jmp 0x100064f4
call dword [sym.imp.mfc100u.dll_AfxGetModuleState]
mov eax, dword [eax + 8]
mov dword [esp + 0x24], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x20], vtable.CefMainArgs.0
mov dword [esp + 0x24], eax
push 0x2c
mov dword [esp + 0x14c], ebx
call dword [sym.imp.mfc100u.dll_new]
add esp, 4
mov dword [esp + 0x30], eax
mov byte [esp + 0x148], 1
cmp eax, ebx
je 0x10006261
push eax
call fcn.100085d0
mov edi, eax
jmp 0x10006263
xor edi, edi
mov byte [esp + 0x148], bl
mov dword [esp + 0x30], edi
cmp edi, ebx
je 0x10006284
mov eax, dword [edi + 4]
mov ecx, dword [eax + 4]
mov edx, dword [ecx + edi + 4]
mov eax, dword [edx]
lea ecx, [ecx + edi + 4]
call eax
push ebx
push ecx
mov eax, esp
mov byte [esp + 0x150], 2
mov dword [esp + 0x34], esp
mov dword [eax], edi
cmp edi, ebx
je 0x100062ac
mov ecx, dword [edi + 4]
mov edx, dword [ecx + 4]
mov eax, dword [edx + edi + 4]
lea ecx, [edx + edi + 4]
mov edx, dword [eax]
call edx
lea eax, [esp + 0x28]
push eax
call fcn.100294a0
add esp, 0xc
cmp eax, ebx
jl 0x100062c4
push eax
call dword [sym.imp.MSVCR100.dll_exit]
push 0xc0
lea ecx, [esp + 0x3c]
push ebx
push ecx
mov dword [esp + 0x40], vtable.CefStructBase_struct_CefSettingsTraits_.0
call sub.MSVCR100.dll_memset
add esp, 0xc
mov dword [esp + 0xf8], ebx
mov eax, 1
lea edx, [esp + 0x94]
mov dword [esp + 0x38], 0xc0
mov dword [esp + 0x40], eax
mov dword [esp + 0x50], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0xd8], 0x1f98
mov dword [esp + 0x14], vtable.CefStringBase_struct_CefStringTraitsUTF16_.0
mov dword [esp + 0x18], edx
mov byte [esp + 0x1c], bl
mov ecx, str.zh_CN.pak
lea esi, [esp + 0x14]
mov byte [esp + 0x148], 4
call fcn.10006e30
mov byte [esp + 0x148], 3
mov esi, dword [esp + 0x18]
cmp esi, ebx
je 0x1000635e
cmp byte [esp + 0x1c], bl
je 0x1000635e
push esi
call dword [sym.imp.libcef.dll_cef_string_utf16_clear]
push esi
call dword [sym.imp.mfc100u.dll_delete_1]
add esp, 8
lea esi, [esp + 0x11c]
call fcn.10006520
push eax
mov eax, str.CacheChrome.log
lea esi, [esp + 0x104]
mov byte [esp + 0x14c], 5
call fcn.100071a0
add esp, 4
lea ecx, [esp + 0xa0]
mov dword [esp + 0x14], vtable.CefStringBase_struct_CefStringTraitsUTF16_.0
mov dword [esp + 0x18], ecx
mov byte [esp + 0x1c], bl
lea ecx, [esp + 0x14]
mov byte [esp + 0x148], 7
call fcn.10007060
mov esi, dword [esp + 0x18]
cmp esi, ebx
je 0x100063d2
cmp byte [esp + 0x1c], bl
je 0x100063d2
push esi
call dword [sym.imp.libcef.dll_cef_string_utf16_clear]
push esi
mov esi, dword [sym.imp.mfc100u.dll_delete_1]
call esi
add esp, 8
jmp 0x100063d8
mov esi, dword [sym.imp.mfc100u.dll_delete_1]
cmp dword [esp + 0x114], 0x10
jb 0x100063ef
mov edx, dword [esp + 0x100]
push edx
call esi
add esp, 4
cmp dword [esp + 0x130], 0x10
mov dword [esp + 0x114], 0xf
mov dword [esp + 0x110], ebx
mov byte [esp + 0x100], bl
jb 0x1000641f
mov eax, dword [esp + 0x11c]
push eax
call esi
add esp, 4
lea ecx, [esp + 0x7c]
mov dword [esp + 0x14], vtable.CefStringBase_struct_CefStringTraitsUTF16_.0
mov dword [esp + 0x18], ecx
mov byte [esp + 0x1c], bl
mov ecx, str.UserAgent:_Mozilla_5.0__Windows_NT_6.2__WOW64__AppleWebKit_537.36__KHTML__like_Gecko__Chrome_49.0.2623.110_Safari_537.36_ocsChrome_1.0.0.1
lea esi, [esp + 0x14]
mov byte [esp + 0x148], 8
call fcn.10006e30
mov byte [esp + 0x148], 3
mov esi, dword [esp + 0x18]
cmp esi, ebx
je 0x10006470
cmp byte [esp + 0x1c], bl
je 0x10006470
push esi
call dword [sym.imp.libcef.dll_cef_string_utf16_clear]
push esi
call dword [sym.imp.mfc100u.dll_delete_1]
add esp, 8
push ebx
push ecx
mov eax, esp
mov dword [esp + 0xb4], 0x63
mov dword [esp + 0x34], esp
mov dword [eax], edi
cmp edi, ebx
je 0x1000649b
mov edx, dword [edi + 4]
mov eax, dword [edx + 4]
mov edx, dword [eax + edi + 4]
lea ecx, [eax + edi + 4]
mov eax, dword [edx]
call eax
lea ecx, [esp + 0x3c]
push ecx
lea edx, [esp + 0x2c]
push edx
call fcn.10029570
add esp, 0x10
mov byte [esp + 0x13], al
mov byte [0x1005b14d], 1
mov dword [esp + 0x34], vtable.CefStructBase_struct_CefSettingsTraits_.0
cmp dword [esp + 0xf8], ebx
jne 0x100064d2
lea eax, [esp + 0x38]
call fcn.10007140
mov byte [esp + 0x148], bl
cmp edi, ebx
je 0x100064f0
mov eax, dword [edi + 4]
mov ecx, dword [eax + 4]
mov edx, dword [ecx + edi + 4]
mov eax, dword [edx + 4]
lea ecx, [ecx + edi + 4]
call eax
mov al, byte [esp + 0x13]
mov ecx, dword [esp + 0x140]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x128]
xor ecx, esp
call fcn.10040acf
mov esp, ebp
pop ebp
ret