Function at 0x401d3d
Capabilities:
Read file on windows

Disassembly:
push pe_nt_image_headers32
mov eax, 0x432f39
call fcn.0041d016
mov eax, dword [ebp + 0xc]
mov esi, ecx
mov dword [ebp - 0xe8], eax
xor ebx, ebx
mov dword [ebp - 4], ebx
call fcn.00401317
push esi
lea ecx, [ebp - 0x88]
call fcn.00405500
push str..zip
lea eax, [ebp - 0x88]
push eax
mov byte [ebp - 4], 1
call fcn.00405552
cmp dword [ebp - 0x70], 0x10
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0xe0], ebx
jae 0x401d9a
lea eax, [ebp - 0x84]
push 0x43a060
push eax
lea eax, [ebp - 0xe0]
push eax
call fcn.0041a131
add esp, 0xc
cmp dword [ebp - 0xe0], ebx
jne 0x401dda
xor edi, edi
push ebx
push 1
lea ecx, [ebp - 0x88]
call fcn.004057d3
push ebx
push 1
lea esi, [ebp + 0x10]
call fcn.00405d7c
mov eax, edi
call fcn.0041d060
ret
push 2
push ebx
push dword [ebp - 0xe0]
call fcn.0041ab24
add esp, 0xc
push dword [ebp - 0xe0]
call fcn.0041a9f5
pop ecx
push dword [ebp - 0xe0]
mov esi, eax
mov dword [ebp - 0xe4], esi
call fcn.00419d94
pop ecx
lea eax, [esi + 1]
push eax
call fcn.00419cca
pop ecx
push dword [ebp - 0xe0]
mov dword [ebp - 0xec], eax
push esi
push 1
push eax
call fcn.0041a5fd
push dword [ebp - 0xe0]
call fcn.0041ac71
add esp, 0x14
xor eax, eax
push 0x3e
mov word [ebp - 0x50], ax
lea eax, [ebp - 0x4e]
push ebx
push eax
mov dword [ebp - 0xe0], ebx
call fcn.0041ca70
add esp, 0xc
push dword [ebp + 8]
lea edi, [ebp - 0x50]
push 0x43a63c
push 0x20
pop ecx
call fcn.00401164
pop ecx
pop ecx
push str.http:__websearch.ask.com_report_install_tb
lea esi, [ebp - 0x6c]
call fcn.00405586
mov byte [ebp - 4], 2
push dword [ebp - 0xe8]
mov eax, esi
push eax
call fcn.0040561e
push 0x43a644
mov eax, esi
push eax
call fcn.0040561e
push 0xffffffffffffffff
push ebx
lea eax, [ebp + 0x10]
mov ecx, esi
call fcn.004060a6
push str.typelogfileretcode
mov eax, esi
push eax
call fcn.0040561e
mov eax, edi
push eax
mov eax, esi
push eax
call fcn.0040561e
xor eax, eax
mov dword [ebp - 0xa8], 7
mov dword [ebp - 0xac], ebx
mov word [ebp - 0xbc], ax
mov byte [ebp - 4], 3
push dword [ebp - 0xe8]
lea edi, [ebp - 0xf4]
call fcn.004011f0
mov byte [ebp - 4], 4
push dword [eax + 4]
lea ecx, [ebp - 0xdc]
call fcn.00405500
mov byte [ebp - 4], 6
push dword [ebp - 0xf4]
call fcn.0041a352
pop ecx
push dword [ebp - 0xf0]
call fcn.0041a352
lea esi, [ebp - 0xa4]
mov dword [esp], str.http:__s3.amazonaws.com_apnanalytics
call fcn.00405586
sub esp, 0x1c
mov byte [ebp - 4], 7
lea eax, [ebp - 0xdc]
mov ecx, esp
mov dword [ebp - 0xe8], esp
push eax
call fcn.00405522
push dword [ebp + 8]
mov byte [ebp - 4], 8
sub esp, 0x1c
lea eax, [ebp + 0x10]
mov esi, esp
mov dword [ebp - 0xf0], esp
push eax
call fcn.004055a5
cmp dword [ebp - 0x8c], 8
mov ecx, dword [ebp - 0xa0]
jae 0x401f71
lea ecx, [ebp - 0xa0]
lea eax, [ebp - 0xc0]
push eax
push dword [ebp - 0xe4]
mov byte [ebp - 4], 7
push dword [ebp - 0xec]
call fcn.00401544
push dword [ebp - 0xec]
mov dword [ebp - 0xe4], eax
call fcn.00419a5d
add esp, 0x4c
xor edi, edi
push ebx
inc edi
push edi
lea esi, [ebp - 0xa4]
call fcn.00405d7c
push ebx
push edi
lea ecx, [ebp - 0xdc]
call fcn.004057d3
push ebx
push edi
lea esi, [ebp - 0xc0]
call fcn.00405d7c
push ebx
push edi
lea esi, [ebp - 0x6c]
call fcn.00405d7c
mov edi, dword [ebp - 0xe4]
jmp 0x401db9