Function at 0x43d2ad
Capabilities:
Connect to http server
Create http request

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x2ac
mov eax, dword [0x5005d0]
xor eax, esp
mov dword [esp + 0x2a8], eax
mov eax, dword [ebp + 0x18]
push ebx
push esi
mov esi, dword [ebp + 0x10]
push edi
xor ebx, ebx
push 0x13c
mov dword [esp + 0x14], eax
lea eax, [esp + 0x50]
push ebx
push eax
mov dword [esp + 0x2c], esi
mov dword [esp + 0x20], ebx
mov dword [esp + 0x54], ebx
call fcn.004a7110
add esp, 0xc
mov byte [esp + 0x188], bl
push 7
xor eax, eax
pop ecx
lea edi, [esp + 0x189]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
call fcn.00498efc
cmp dword [ebp + 8], ebx
mov dword [esp + 0x18], eax
je 0x43d32c
mov esi, 0x5f9da4
call fcn.0043da61
xor eax, eax
jmp 0x43d991
cmp dword [0x5f9da8], ebx
je 0x43d33a
push esi
jmp 0x43d981
push 0xc
push ebx
push 0x5f9da4
call fcn.004a7110
add esp, 0xc
call fcn.0043f4db
test eax, eax
je 0x43d325
call fcn.0043cd05
cmp dword [ebp + 0xc], ebx
mov dword [esp + 0x24], eax
je 0x43d36c
push str._nPhase_1...
call fcn.00447f5d
pop ecx
mov esi, dword [ebp + 0x14]
mov dword [esp + 0x1c], ebx
push ebx
push ebx
push ebx
push 1
push 0x4c7e48
call dword [sym.imp.WININET.dll_InternetOpenA]
cmp eax, ebx
mov dword [0x5f9da4], eax
mov edi, str._nTIME_OUT__n
jne 0x43d3ff
cmp esi, ebx
jbe 0x43d3a2
call fcn.00498efc
sub eax, dword [esp + 0x18]
cmp eax, esi
jae 0x43d3f3
mov eax, dword [esp + 0x10]
cmp eax, ebx
je 0x43d3ae
cmp dword [eax], ebx
jne 0x43d3f3
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [ebp + 0xc], ebx
je 0x43d3c9
push 0x4c53a0
call fcn.00447f5d
pop ecx
cmp esi, ebx
jbe 0x43d3da
call fcn.00498efc
sub eax, dword [esp + 0x18]
cmp eax, esi
jae 0x43d3f3
mov eax, dword [esp + 0x10]
cmp eax, ebx
je 0x43d3e6
cmp dword [eax], ebx
jne 0x43d3f3
inc dword [esp + 0x1c]
cmp dword [esp + 0x1c], 3
jl 0x43d373
jmp 0x43d3ff
cmp dword [ebp + 0xc], ebx
je 0x43d3ff
push edi
call fcn.00447f5d
pop ecx
cmp esi, ebx
jbe 0x43d410
call fcn.00498efc
sub eax, dword [esp + 0x18]
cmp eax, esi
jae 0x43d41c
mov eax, dword [esp + 0x10]
cmp eax, ebx
je 0x43d431
cmp dword [eax], ebx
je 0x43d431
cmp dword [ebp + 0xc], ebx
je 0x43d31b
push edi
call fcn.00447f5d
pop ecx
jmp 0x43d31b
cmp dword [0x5f9da4], ebx
je 0x43d643
cmp dword [ebp + 0xc], ebx
je 0x43d459
push 0x4db360
call fcn.00447f5d
mov dword [esp], str._nPhase_2...IC1..
call fcn.00447f5d
pop ecx
mov edi, dword [sym.imp.WININET.dll_InternetConnectA]
push ebx
push dword [esp + 0x28]
mov esi, str.PAULA
push 1
push str.PAULAWAULA
push esi
push 0x15
lea eax, [esp + 0x1a0]
push eax
push dword [0x5f9da4]
call edi
cmp dword [ebp + 0x14], ebx
mov dword [0x5f9da8], eax
jbe 0x43d49b
call fcn.00498efc
sub eax, dword [esp + 0x18]
cmp eax, dword [ebp + 0x14]
jae 0x43d4a7
mov eax, dword [esp + 0x10]
cmp eax, ebx
je 0x43d4ba
cmp dword [eax], ebx
je 0x43d4ba
cmp dword [ebp + 0xc], ebx
je 0x43d31b
push str._nTIME_OUT__n
jmp 0x43d426
mov eax, dword [0x5f9da8]
cmp eax, ebx
mov dword [esp + 0x14], ebx
je 0x43d4de
push ebx
push ebx
lea ecx, [esp + 0x50]
push ecx
push str._PAULA_LiveUpdate_DownLoad_
push eax
call dword [sym.imp.WININET.dll_FtpFindFirstFileA]
mov dword [esp + 0x14], eax
cmp dword [ebp + 0x14], ebx
jbe 0x43d4f1
call fcn.00498efc
sub eax, dword [esp + 0x18]
cmp eax, dword [ebp + 0x14]
jae 0x43d4a7
mov eax, dword [esp + 0x10]
cmp eax, ebx
je 0x43d4fd
cmp dword [eax], ebx
jne 0x43d4a7
cmp dword [esp + 0x14], ebx
jne 0x43d66f
cmp dword [esp + 0x24], 0x8000000
mov eax, dword [0x5f9da8]
je 0x43d5b7
cmp eax, ebx
je 0x43d533
push eax
call dword [sym.imp.WININET.dll_InternetCloseHandle]
push 0x19
mov dword [0x5f9da8], ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebx
push 0x8000000
push 1
push str.PAULAWAULA
push esi
push 0x15
lea eax, [esp + 0x1a0]
push eax
push dword [0x5f9da4]
call edi
cmp eax, ebx
mov dword [0x5f9da8], eax
mov dword [esp + 0x14], ebx
je 0x43d577
push ebx
push ebx
lea ecx, [esp + 0x50]
push ecx
push str._PAULA_LiveUpdate_DownLoad_
push eax
call dword [sym.imp.WININET.dll_FtpFindFirstFileA]
mov dword [esp + 0x14], eax
cmp dword [ebp + 0x14], ebx
jbe 0x43d58e
call fcn.00498efc
sub eax, dword [esp + 0x18]
cmp eax, dword [ebp + 0x14]
jae 0x43d4a7
mov eax, dword [esp + 0x10]
cmp eax, ebx
je 0x43d59e
cmp dword [eax], ebx
jne 0x43d4a7
cmp dword [esp + 0x14], ebx
je 0x43d659
push 0x8000000
call fcn.0043ce48
jmp 0x43d652
cmp eax, ebx
je 0x43d5d0
push eax
call dword [sym.imp.WININET.dll_InternetCloseHandle]
push 0x19
mov dword [0x5f9da8], ebx
call dword [sym.imp.KERNEL32.dll_Sleep]
push ebx
push ebx
push 1
push str.PAULAWAULA
push esi
push 0x15
lea eax, [esp + 0x1a0]
push eax
push dword [0x5f9da4]
call edi
cmp eax, ebx
mov dword [0x5f9da8], eax
mov dword [esp + 0x14], ebx
je 0x43d610
push ebx
push ebx
lea ecx, [esp + 0x50]
push ecx
push str._PAULA_LiveUpdate_DownLoad_
push eax
call dword [sym.imp.WININET.dll_FtpFindFirstFileA]
mov dword [esp + 0x14], eax
cmp dword [ebp + 0x14], ebx
jbe 0x43d627
call fcn.00498efc
sub eax, dword [esp + 0x18]
cmp eax, dword [ebp + 0x14]
jae 0x43d4a7
mov eax, dword [esp + 0x10]
cmp eax, ebx
je 0x43d637
cmp dword [eax], ebx
jne 0x43d4a7
cmp dword [esp + 0x14], ebx
je 0x43d659
push ebx
jmp 0x43d5ad
cmp dword [ebp + 0xc], ebx
je 0x43d659
push str.FAILED_
call fcn.00447f5d
cmp dword [esp + 0x18], ebx
pop ecx
jne 0x43d66f
mov eax, dword [0x5f9da8]
cmp eax, ebx
je 0x43d67c
push eax
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov dword [0x5f9da8], ebx
mov eax, dword [0x5f9da8]
cmp eax, ebx
jne 0x43d8c6
cmp dword [0x5f9eb4], ebx
jne 0x43d70b
cmp dword [0x5f9eb0], ebx
jne 0x43d70b
cmp dword [ebp + 0xc], ebx
je 0x43d6a0
push str._nAttempting_backup_server...
call fcn.00447f5d
pop ecx
cmp dword [ebp + 0x14], ebx
jbe 0x43d6b7
call fcn.00498efc
sub eax, dword [esp + 0x18]
cmp eax, dword [ebp + 0x14]
jae 0x43d4a7
mov eax, dword [esp + 0x10]
cmp eax, ebx
je 0x43d6c7
cmp dword [eax], ebx
jne 0x43d4a7
mov esi, 0x5f9da4
mov dword [0x5f9eb4], 1
call fcn.0043da61
push dword [esp + 0x10]
call fcn.00498efc
mov edx, dword [ebp + 0x14]
mov ecx, dword [esp + 0x1c]
add ecx, edx
sub ecx, eax
push ecx
push dword [esp + 0x28]
push dword [ebp + 0xc]
push ebx
call fcn.0043d2ad
add esp, 0x14
mov dword [0x5f9eb4], ebx
jmp 0x43d991
cmp eax, ebx
jne 0x43d8c6
cmp dword [ebp + 0xc], ebx
je 0x43d723
push str..FAILED.._n____...Attempting_IC_SAT..
call fcn.00447f5d
pop ecx
mov eax, dword [0x5f9da4]
cmp eax, ebx
je 0x43d739
push eax
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov dword [0x5f9da4], ebx
cmp dword [ebp + 0x14], ebx
jbe 0x43d750
call fcn.00498efc
sub eax, dword [esp + 0x18]
cmp eax, dword [ebp + 0x14]
jae 0x43d4a7
mov eax, dword [esp + 0x10]
cmp eax, ebx
je 0x43d760
cmp dword [eax], ebx
jne 0x43d4a7
cmp dword [0x5f9eb0], ebx
jne 0x43d325
push 0x103
lea eax, [esp + 0x1ad]
push ebx
push eax
mov byte [esp + 0x1b4], bl
call fcn.004a7110
xor eax, eax
mov word [esp + 0x44], bx
lea edi, [esp + 0x46]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
xor eax, eax
mov word [esp + 0x34], bx
lea edi, [esp + 0x36]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
add esp, 0xc
stosw word es:[edi], ax
push str.StoreId.dat
lea edi, [esp + 0x1ac]
call fcn.004412cb
mov dword [esp], 0x875
lea eax, [esp + 0x2c]
push str..Network.c
push eax
call fcn.004998ed
add esp, 0xc
test eax, eax
je 0x43d325
lea eax, [esp + 0x38]
push eax
mov ecx, edi
call fcn.004460aa
test eax, eax
pop ecx
je 0x43d325
sub esp, 0x10
mov edi, esp
lea esi, [esp + 0x48]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
sub esp, 0x10
lea esi, [esp + 0x48]
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.00498649
push eax
call fcn.004a863d
add esp, 0x24
cmp eax, 0x6ddd00
jle 0x43d325
cmp dword [ebp + 0xc], ebx
je 0x43d833
push str._nAttempting_to_establish_INet_connection...
call fcn.00447f5d
pop ecx
mov eax, dword [esp + 0x18]
mov edi, dword [ebp + 0x14]
lea esi, [eax + edi]
call fcn.00498efc
mov ecx, esi
sub ecx, eax
push ecx
push dword [ebp + 0xc]
mov ecx, dword [esp + 0x18]
push 0x1b7740
call fcn.0043dfea
add esp, 0xc
test eax, eax
je 0x43d325
cmp dword [ebp + 0xc], ebx
je 0x43d873
push str._nTrying_FTP_connection_process_again...
call fcn.00447f5d
pop ecx
cmp edi, ebx
jbe 0x43d888
call fcn.00498efc
sub eax, dword [esp + 0x18]
cmp eax, edi
jae 0x43d4a7
mov eax, dword [esp + 0x10]
cmp eax, ebx
je 0x43d898
cmp dword [eax], ebx
jne 0x43d4a7
push eax
mov dword [0x5f9eb0], 1
call fcn.00498efc
sub esi, eax
push esi
push dword [esp + 0x28]
push dword [ebp + 0xc]
push ebx
call fcn.0043d2ad
add esp, 0x14
mov dword [0x5f9eb0], ebx
jmp 0x43d991
cmp dword [ebp + 0xc], ebx
je 0x43d8e2
push str..OK.
call fcn.00447f5d
mov dword [esp], str._nEnumerating_FTP_server_root_directory...
call fcn.00447f5d
pop ecx
push 0x896
mov ecx, str..Network.c
call fcn.004782ee
cmp eax, ebx
pop ecx
mov dword [0x5f9dac], eax
je 0x43d31b
lea edx, [esp + 0x74]
call fcn.00475851
test eax, eax
jne 0x43d960
test byte [esp + 0x48], 0x10
jne 0x43d960
cmp byte [esp + 0x74], 0x2e
je 0x43d960
test byte [esp + 0x48], 6
jne 0x43d960
lea eax, [esp + 0x74]
push eax
mov esi, str._AltHT
call fcn.00475992
test eax, eax
pop ecx
jne 0x43d944
lea ecx, [esp + 0x74]
call fcn.0043d058
inc ebx
cmp ebx, 1
jle 0x43d960
lea eax, [esp + 0x74]
push eax
push dword [0x5f9dac]
call fcn.00478677
test eax, eax
pop ecx
pop ecx
jne 0x43d960
inc dword [0x5f9eb8]
lea eax, [esp + 0x48]
push eax
push dword [esp + 0x18]
call dword [sym.imp.WININET.dll_InternetFindNextFileA]
test eax, eax
jne 0x43d8ff
push dword [esp + 0x14]
call dword [sym.imp.WININET.dll_InternetCloseHandle]
push dword [esp + 0x20]
mov ebx, 0x5f9da4
call fcn.0043d9a6
mov eax, dword [0x5f9da8]
pop ecx
mov ecx, dword [esp + 0x2b4]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.004a69f5
mov esp, ebp
pop ebp
ret