Function at 0x54521a
Capabilities:
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x60
push ebx
push esi
push edi
mov edi, ecx
call fcn.0053de38
mov ecx, edi
call fcn.005461af
mov ecx, edi
call fcn.0054684b
mov ecx, edi
call fcn.00546159
mov ecx, edi
call fcn.005467fc
mov ecx, edi
call fcn.0054673b
mov ecx, edi
call fcn.0053c618
sub esp, 0x18
mov ecx, edi
mov eax, esp
push 0
push eax
call fcn.0053f11a
call fcn.004ee360
add esp, 0x18
call fcn.004ee220
test al, al
je 0x5452c2
push str.qbclipboard
lea ecx, [ebp - 0x30]
call fcn.00408981
push str.SoftwareMicrosoftWindowsCurrentVersionRun
lea ecx, [ebp - 0x18]
call fcn.00408981
push 0x20006
push SysReAllocString
sub esp, 0x18
push esp
call fcn.004eda30
pop ecx
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.004c67a0
add esp, 0x28
lea ecx, [ebp - 0x18]
call fcn.00403730
lea ecx, [ebp - 0x30]
call fcn.00403730
lea esi, [edi + 0xd4]
mov ecx, esi
call fcn.00536832
test al, al
je 0x5452ef
mov ecx, edi
call fcn.0053e5dd
cmp eax, 1
jne 0x5452ef
mov ecx, esi
call fcn.005366ba
test al, al
jne 0x5452ef
xor ebx, ebx
inc ebx
jmp 0x5452f1
xor ebx, ebx
push str.DefaultBrowserFirstRun
lea ecx, [ebp - 0x30]
call fcn.00408981
push ebx
lea eax, [ebp - 0x30]
xor ebx, ebx
push eax
inc ebx
push ebx
call fcn.004c8740
add esp, 0xc
lea ecx, [ebp - 0x30]
call fcn.00403730
push str.www.baidu.com__tn98010089_dgch14www.baidu.com__www.sogou.com__hdqsogou_brse_e64c9ec33f19c7dewww.sogou.com_
lea ecx, [ebp - 0x48]
call fcn.00408981
push str.CC_SRU0507
lea ecx, [ebp - 0x30]
call fcn.00408981
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x30]
push eax
push 8
call fcn.004c8b90
add esp, 0xc
lea ecx, [ebp - 0x30]
call fcn.00403730
mov ecx, esi
call fcn.005366c9
test al, al
jne 0x54537b
push str.CheckIfDefaultBrowser
lea ecx, [ebp - 0x30]
call fcn.00408981
push 0
lea eax, [ebp - 0x30]
push eax
push 7
call fcn.004c8740
add esp, 0xc
lea ecx, [ebp - 0x30]
call fcn.00403730
push str.ExtendId
lea ecx, [ebp - 0x30]
call fcn.00408981
mov ecx, esi
call fcn.00534133
push eax
lea eax, [ebp - 0x30]
push eax
push ebx
call fcn.004c8740
add esp, 0xc
lea ecx, [ebp - 0x30]
call fcn.00403730
push str.FirstLaunch
lea ecx, [ebp - 0x30]
call fcn.00408981
push ebx
lea eax, [ebp - 0x30]
push eax
push ebx
call fcn.004c8740
add esp, 0xc
lea ecx, [ebp - 0x30]
call fcn.00403730
push 0x605890
lea ecx, [ebp - 0x30]
call fcn.00408981
xor esi, esi
lea eax, [ebp - 0x18]
push esi
push esi
push eax
call fcn.004ca580
push eax
lea eax, [ebp - 0x30]
push eax
push 0xd
call fcn.004c8b90
add esp, 0x18
lea ecx, [ebp - 0x18]
call fcn.00403730
lea ecx, [ebp - 0x30]
call fcn.00403730
push esi
call fcn.005a1a5c
lea ecx, [ebp - 0x30]
mov dword [ebp - 4], edx
mov esi, eax
mov dword [esp], str.InstallTimeForDlg
call fcn.00408981
push esi
lea eax, [ebp - 0x30]
push eax
push ebx
call fcn.004c8740
add esp, 0xc
lea ecx, [ebp - 0x30]
call fcn.00403730
push 0x5e29b0
lea ecx, [ebp - 0x30]
call fcn.00408981
lea eax, [ebp - 0x30]
push eax
push 8
call fcn.004c94c0
pop ecx
pop ecx
lea ecx, [ebp - 0x30]
call fcn.00403730
mov ecx, edi
call fcn.0053e5dd
cmp eax, ebx
jne 0x5454f1
mov ecx, edi
call fcn.00546600
push str.NewInstall
lea ecx, [ebp - 0x30]
call fcn.00408981
push ebx
lea eax, [ebp - 0x30]
push eax
push ebx
call fcn.004c8740
add esp, 0xc
lea ecx, [ebp - 0x30]
call fcn.00403730
push str.DefaultBrowser
lea ecx, [ebp - 0x30]
call fcn.00408981
lea eax, [ebp - 0x60]
push eax
call fcn.004ea9d0
push eax
lea eax, [ebp - 0x30]
push eax
push ebx
call fcn.004c8b90
add esp, 0x10
lea ecx, [ebp - 0x60]
call fcn.00403730
lea ecx, [ebp - 0x30]
call fcn.00403730
xor eax, eax
lea edi, [ebp - 0x10]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x10]
push eax
call dword [sym.imp.KERNEL32.DLL_GetLocalTime]
push str.NewInstallDate
lea ecx, [ebp - 0x30]
call fcn.00408981
push ebx
lea eax, [ebp - 0x30]
push eax
push 2
call fcn.004c8740
add esp, 0xc
jmp 0x54550b
push str.CC_NRPN
lea ecx, [ebp - 0x30]
call fcn.00408981
lea eax, [ebp - 0x30]
push eax
push 8
call fcn.004c94c0
pop ecx
pop ecx
lea ecx, [ebp - 0x30]
call fcn.00403730
lea ecx, [ebp - 0x48]
call fcn.00403730
pop edi
pop esi
pop ebx
leave
ret