Function at 0x401d3d
Capabilities:
Read file on windows

Disassembly:
push 0xe8
mov eax, 0x432905
call fcn.0041cd86
mov eax, dword [ebp + 0xc]
mov esi, ecx
mov dword [ebp - 0xe8], eax
xor ebx, ebx
mov dword [ebp - 4], ebx
call fcn.00401317
push esi
lea ecx, [ebp - 0x88]
call fcn.00405601
push str..zip
lea eax, [ebp - 0x88]
push eax
mov byte [ebp - 4], 1
call fcn.00405653
cmp dword [ebp - 0x70], 0x10
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0xe0], ebx
jae 0x401d9a
lea eax, [ebp - 0x84]
push 0x439118
push eax
lea eax, [ebp - 0xe0]
push eax
call fcn.00419f08
add esp, 0xc
cmp dword [ebp - 0xe0], ebx
jne 0x401dda
xor edi, edi
push ebx
push 1
lea ecx, [ebp - 0x88]
call fcn.004059be
push ebx
push 1
lea esi, [ebp + 0x10]
call fcn.00405f67
mov eax, edi
call fcn.0041cdd0
ret
push 2
push ebx
push dword [ebp - 0xe0]
call fcn.0041a8fb
add esp, 0xc
push dword [ebp - 0xe0]
call fcn.0041a7cc
pop ecx
push dword [ebp - 0xe0]
mov esi, eax
mov dword [ebp - 0xe4], esi
call fcn.00419cba
pop ecx
lea eax, [esi + 1]
push eax
call fcn.00419bf0
pop ecx
push dword [ebp - 0xe0]
mov dword [ebp - 0xec], eax
push esi
push 1
push eax
call fcn.0041a3d4
push dword [ebp - 0xe0]
call fcn.0041aab7
add esp, 0x14
xor eax, eax
push 0x3e
mov word [ebp - 0x50], ax
lea eax, [ebp - 0x4e]
push ebx
push eax
mov dword [ebp - 0xe0], ebx
call fcn.0041c7e0
add esp, 0xc
push dword [ebp + 8]
lea edi, [ebp - 0x50]
push 0x4396f4
push 0x20
pop ecx
call fcn.00401164
pop ecx
pop ecx
push str.http:__websearch.ask.com_report_install_tb
lea esi, [ebp - 0x6c]
call fcn.004056d6
mov byte [ebp - 4], 2
push dword [ebp - 0xe8]
mov eax, esi
push eax
call fcn.0040576e
push 0x4396fc
mov eax, esi
push eax
call fcn.0040576e
push 0xffffffffffffffff
push ebx
lea eax, [ebp + 0x10]
mov ecx, esi
call fcn.00406291
push str.typelogfileretcode
mov eax, esi
push eax
call fcn.0040576e
mov eax, edi
push eax
mov eax, esi
push eax
call fcn.0040576e
xor eax, eax
mov dword [ebp - 0xa8], 7
mov dword [ebp - 0xac], ebx
mov word [ebp - 0xbc], ax
mov byte [ebp - 4], 3
push dword [ebp - 0xe8]
lea edi, [ebp - 0xf4]
call fcn.004011f0
mov byte [ebp - 4], 4
push dword [eax + 4]
lea ecx, [ebp - 0xdc]
call fcn.00405601
mov byte [ebp - 4], 6
push dword [ebp - 0xf4]
call fcn.0041a129
pop ecx
push dword [ebp - 0xf0]
call fcn.0041a129
lea esi, [ebp - 0xa4]
mov dword [esp], str.http:__s3.amazonaws.com_apnanalytics
call fcn.004056d6
sub esp, 0x1c
mov byte [ebp - 4], 7
lea eax, [ebp - 0xdc]
mov ecx, esp
mov dword [ebp - 0xe8], esp
push eax
call fcn.00405623
push dword [ebp + 8]
mov byte [ebp - 4], 8
sub esp, 0x1c
lea eax, [ebp + 0x10]
mov esi, esp
mov dword [ebp - 0xf0], esp
push eax
call fcn.004056f5
cmp dword [ebp - 0x8c], 8
mov ecx, dword [ebp - 0xa0]
jae 0x401f71
lea ecx, [ebp - 0xa0]
lea eax, [ebp - 0xc0]
push eax
push dword [ebp - 0xe4]
mov byte [ebp - 4], 7
push dword [ebp - 0xec]
call fcn.00401544
push dword [ebp - 0xec]
mov dword [ebp - 0xe4], eax
call fcn.00419b13
add esp, 0x4c
xor edi, edi
push ebx
inc edi
push edi
lea esi, [ebp - 0xa4]
call fcn.00405f67
push ebx
push edi
lea ecx, [ebp - 0xdc]
call fcn.004059be
push ebx
push edi
lea esi, [ebp - 0xc0]
call fcn.00405f67
push ebx
push edi
lea esi, [ebp - 0x6c]
call fcn.00405f67
mov edi, dword [ebp - 0xe4]
jmp 0x401db9