Function at 0x54045a
Capabilities:
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x64
push ebx
push esi
push edi
mov edi, ecx
call fcn.0053a9ac
mov ecx, edi
call fcn.0054133a
mov ecx, edi
call fcn.00541ab2
mov ecx, edi
call fcn.005412e4
mov ecx, edi
call fcn.00541a63
mov ecx, edi
call fcn.005419a2
mov ecx, edi
call fcn.00538a5b
sub esp, 0x18
mov ecx, edi
mov eax, esp
push 0
push eax
call fcn.0053b48e
call fcn.004d88a0
add esp, 0x18
call fcn.004d8780
test al, al
je 0x540502
push str.qbclipboard
lea ecx, [ebp - 0x34]
call fcn.00408fc4
push str.SoftwareMicrosoftWindowsCurrentVersionRun
lea ecx, [ebp - 0x1c]
call fcn.00408fc4
push 0x20006
push SysReAllocString
sub esp, 0x18
push esp
call fcn.004d7fd0
pop ecx
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.004bcb10
add esp, 0x28
lea ecx, [ebp - 0x1c]
call fcn.00403d40
lea ecx, [ebp - 0x34]
call fcn.00403d40
lea esi, [edi + 0xd4]
mov ecx, esi
call fcn.00530412
test al, al
je 0x54052f
mov ecx, edi
call fcn.0053b151
cmp eax, 1
jne 0x54052f
mov ecx, esi
call fcn.0053029a
test al, al
jne 0x54052f
xor ebx, ebx
inc ebx
jmp 0x540531
xor ebx, ebx
push str.DefaultBrowserFirstRun
lea ecx, [ebp - 0x34]
call fcn.00408fc4
push ebx
lea eax, [ebp - 0x34]
push eax
push 1
call fcn.004beab0
add esp, 0xc
lea ecx, [ebp - 0x34]
call fcn.00403d40
push str.www.baidu.com__tn98010089_dgch14www.baidu.com__www.sogou.com__hdqsogou_brse_e64c9ec33f19c7dewww.sogou.com_
lea ecx, [ebp - 0x4c]
call fcn.00408fc4
push str.CC_SRU0507
lea ecx, [ebp - 0x34]
call fcn.00408fc4
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x34]
push eax
push 8
call fcn.004beef0
add esp, 0xc
lea ecx, [ebp - 0x34]
call fcn.00403d40
mov ecx, esi
call fcn.005302a9
test al, al
jne 0x5405bc
push str.CheckIfDefaultBrowser
lea ecx, [ebp - 0x34]
call fcn.00408fc4
xor ebx, ebx
lea eax, [ebp - 0x34]
push ebx
push eax
push 7
call fcn.004beab0
add esp, 0xc
lea ecx, [ebp - 0x34]
call fcn.00403d40
jmp 0x5405be
xor ebx, ebx
push str.ExtendId
lea ecx, [ebp - 0x34]
call fcn.00408fc4
mov ecx, esi
call fcn.0052df9d
push eax
lea eax, [ebp - 0x34]
push eax
push 1
call fcn.004beab0
add esp, 0xc
lea ecx, [ebp - 0x34]
call fcn.00403d40
push str.FirstLaunch
lea ecx, [ebp - 0x34]
call fcn.00408fc4
push 1
lea eax, [ebp - 0x34]
push eax
push 1
call fcn.004beab0
add esp, 0xc
lea ecx, [ebp - 0x34]
call fcn.00403d40
push 0x60c5e0
lea ecx, [ebp - 0x34]
call fcn.00408fc4
push ebx
lea eax, [ebp - 0x1c]
push ebx
push eax
call fcn.004c08f0
push eax
lea eax, [ebp - 0x34]
push eax
push 0xd
call fcn.004beef0
add esp, 0x18
lea ecx, [ebp - 0x1c]
call fcn.00403d40
lea ecx, [ebp - 0x34]
call fcn.00403d40
push ebx
call fcn.00597c50
lea ecx, [ebp - 0x34]
mov dword [ebp - 8], edx
mov esi, eax
mov dword [esp], str.InstallTimeForDlg
call fcn.00408fc4
push esi
lea eax, [ebp - 0x34]
xor esi, esi
push eax
inc esi
push esi
call fcn.004beab0
add esp, 0xc
lea ecx, [ebp - 0x34]
call fcn.00403d40
push 0x5e6f1c
lea ecx, [ebp - 0x34]
call fcn.00408fc4
lea eax, [ebp - 0x34]
push eax
push 8
call fcn.004bf820
pop ecx
pop ecx
lea ecx, [ebp - 0x34]
call fcn.00403d40
mov ecx, edi
call fcn.0053b151
cmp eax, esi
jne 0x540738
mov ecx, edi
call fcn.0054185f
push str.NewInstall
lea ecx, [ebp - 0x34]
call fcn.00408fc4
push esi
lea eax, [ebp - 0x34]
push eax
push esi
call fcn.004beab0
add esp, 0xc
lea ecx, [ebp - 0x34]
call fcn.00403d40
push str.DefaultBrowser
lea ecx, [ebp - 0x34]
call fcn.00408fc4
lea eax, [ebp - 0x64]
push eax
call fcn.004d4850
push eax
lea eax, [ebp - 0x34]
push eax
push esi
call fcn.004beef0
add esp, 0x10
lea ecx, [ebp - 0x64]
call fcn.00403d40
lea ecx, [ebp - 0x34]
call fcn.00403d40
xor eax, eax
lea edi, [ebp - 0x14]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push str.NewInstallDate
lea ecx, [ebp - 0x34]
call fcn.00408fc4
push esi
lea eax, [ebp - 0x34]
push eax
push 2
call fcn.004beab0
add esp, 0xc
jmp 0x540752
push str.CC_NRPN
lea ecx, [ebp - 0x34]
call fcn.00408fc4
lea eax, [ebp - 0x34]
push eax
push 8
call fcn.004bf820
pop ecx
pop ecx
lea ecx, [ebp - 0x34]
call fcn.00403d40
mov edi, str.scrollSnapClick
mov dword [ebp - 4], ebx
push edi
lea ecx, [ebp - 0x34]
call fcn.00408fc4
push ebx
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0x34]
push eax
push 0x13
call fcn.004bdca0
add esp, 0x10
lea ecx, [ebp - 0x34]
mov esi, eax
call fcn.00403d40
test esi, esi
jne 0x5407ac
push edi
lea ecx, [ebp - 0x34]
call fcn.00408fc4
push ebx
lea eax, [ebp - 0x34]
push eax
push 0x13
call fcn.004beab0
add esp, 0xc
lea ecx, [ebp - 0x34]
call fcn.00403d40
lea ecx, [ebp - 0x4c]
call fcn.00403d40
pop edi
pop esi
pop ebx
leave
ret