Function at 0x40ba8c
Capabilities:
Check os version
Create http request

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4d4
mov eax, dword [0x491330]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
xor ebx, ebx
lea eax, [ebp - 0x6f]
push 0x63
push ebx
xor esi, esi
mov dword [ebp - 0x4b4], ebx
push eax
inc esi
mov dword [ebp - 0x4b8], ebx
mov byte [ebp - 0x70], bl
call fcn.00447ae0
add esp, 0xc
mov byte [ebp - 0x370], bl
lea eax, [ebp - 0x36f]
push 0x1ff
push ebx
push eax
call fcn.00447ae0
pop ecx
pop ecx
lea eax, [ebp - 0x370]
push eax
push ecx
lea eax, [ebp - 0x70]
push eax
lea edx, [ebp - 0x4b8]
lea ecx, [ebp - 0x4b4]
call fcn.0040b8c7
mov ebx, eax
lea eax, [ebp - 0x370]
push eax
push 0
call fcn.00429ff7
add esp, 0x18
test eax, eax
jg 0x40bb17
xor edi, edi
jmp 0x40bb2e
lea eax, [ebp - 0x370]
push eax
push 0
call fcn.00429ff7
pop ecx
pop ecx
call fcn.00448470
mov edi, esp
lea eax, [ebp - 0x370]
push eax
push 0
call fcn.00429ff7
shr eax, 1
push eax
push edi
lea eax, [ebp - 0x370]
xor edi, edi
push eax
push edi
call fcn.00429fa9
mov dword [ebp - 0x4bc], eax
lea eax, [ebp - 0x70]
push eax
push edi
call fcn.00429ff7
add esp, 0x20
test eax, eax
jle 0x40bb79
lea eax, [ebp - 0x70]
push eax
push edi
call fcn.00429ff7
pop ecx
pop ecx
call fcn.00448470
mov edi, esp
push ebx
push dword [ebp - 0x4bc]
lea eax, [ebp - 0x70]
push eax
push 0
call fcn.00429ff7
shr eax, 1
push eax
push edi
lea eax, [ebp - 0x70]
push eax
push 0
call fcn.00429fa9
add esp, 0x18
push eax
push dword [ebp - 0x4b8]
push dword [ebp - 0x4b4]
push str.User_FF_proxy:_type:__d__port:_d__server:_s__byPass:_s__Return:_d
push 0
push 2
push str..._npatgpc_npbase_win.cpp
push 0x71a
call fcn.0042ab69
mov eax, dword [ebp - 0x4b4]
add esp, 0x28
xor ecx, ecx
test ebx, ebx
cmove eax, ecx
lea ecx, [ebp - 0x394]
push 0x24
mov dword [ebp - 0x4b4], eax
xor ebx, ebx
pop edx
mov byte [ecx], bl
inc ecx
dec edx
jne 0x40bbe3
push 0x14
pop edx
lea ecx, [ebp - 0x4d0]
mov byte [ecx], bl
inc ecx
dec edx
jne 0x40bbf2
sub eax, ebx
je 0x40bda1
dec eax
je 0x40bc7d
dec eax
je 0x40bc16
dec eax
dec eax
jne 0x40beb2
push 8
pop eax
jmp 0x40bda7
lea eax, [ebp - 0x70]
mov dword [ebp - 0x394], 4
push eax
push ebx
call fcn.00429ff7
pop ecx
pop ecx
test eax, eax
jg 0x40bc34
mov edi, ebx
jmp 0x40bc47
lea eax, [ebp - 0x70]
push eax
push ebx
call fcn.00429ff7
pop ecx
pop ecx
call fcn.00448470
mov edi, esp
lea eax, [ebp - 0x70]
push eax
push ebx
call fcn.00429ff7
shr eax, 1
push eax
push edi
lea eax, [ebp - 0x70]
push eax
push ebx
call fcn.00429fa9
add esp, 0x18
mov dword [ebp - 0x390], eax
mov dword [ebp - 0x388], esi
mov dword [ebp - 0x384], 4
jmp 0x40bdf3
mov edi, 0xff
mov byte [ebp - 0x170], bl
push edi
lea eax, [ebp - 0x16f]
push ebx
push eax
call fcn.00447ae0
add esp, 0xc
lea eax, [ebp - 0x70]
push dword [ebp - 0x4b8]
push eax
push str.http:___s:_d
lea eax, [ebp - 0x170]
push edi
push eax
call fcn.00443cd9
add esp, 0x14
mov dword [ebp - 0x394], 2
lea eax, [ebp - 0x170]
push eax
push ebx
call fcn.00429ff7
pop ecx
pop ecx
test eax, eax
jg 0x40bcd9
mov edi, ebx
jmp 0x40bcef
lea eax, [ebp - 0x170]
push eax
push ebx
call fcn.00429ff7
pop ecx
pop ecx
call fcn.00448470
mov edi, esp
lea eax, [ebp - 0x170]
push eax
push ebx
call fcn.00429ff7
shr eax, 1
push eax
push edi
lea eax, [ebp - 0x170]
push eax
push ebx
call fcn.00429fa9
push 3
pop edi
mov dword [ebp - 0x390], eax
lea eax, [ebp - 0x370]
push 0x200
push eax
mov dword [ebp - 0x388], edi
call fcn.004440e8
add esp, 0x20
test eax, eax
je 0x40bd89
lea eax, [ebp - 0x370]
push eax
push ebx
call fcn.00429ff7
pop ecx
pop ecx
test eax, eax
jle 0x40bd5d
lea eax, [ebp - 0x370]
push eax
push ebx
call fcn.00429ff7
pop ecx
pop ecx
call fcn.00448470
mov ebx, esp
lea eax, [ebp - 0x370]
push eax
push 0
call fcn.00429ff7
shr eax, 1
push eax
push ebx
lea eax, [ebp - 0x370]
xor ebx, ebx
push eax
push ebx
call fcn.00429fa9
add esp, 0x18
mov dword [ebp - 0x384], eax
jmp 0x40bd93
mov dword [ebp - 0x384], str.local
mov dword [ebp - 0x37c], esi
mov dword [ebp - 0x378], edi
jmp 0x40bdf6
mov eax, dword [ebp - 0x390]
or eax, esi
mov dword [ebp - 0x394], esi
mov dword [ebp - 0x390], eax
mov edi, esi
lea eax, [ebp - 0x4b0]
mov dword [ebp - 0x4b0], 0x114
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
cmp dword [ebp - 0x4ac], 5
jne 0x40bdf6
cmp dword [ebp - 0x4a8], ebx
jne 0x40bdf6
mov dword [ebp - 0x388], 4
mov dword [ebp - 0x384], 0x47bb10
push 2
pop edi
push ebx
push ebx
push ebx
push esi
lea eax, [ebp - 0x394]
mov dword [ebp - 0x4d0], 0x14
push str.webex.gpc
mov dword [ebp - 0x4cc], ebx
mov dword [ebp - 0x4c8], edi
mov dword [ebp - 0x4c4], ebx
mov dword [ebp - 0x4c0], eax
call dword [sym.imp.WININET.dll_InternetOpenW]
mov edi, eax
test edi, edi
jne 0x40be58
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.InternetOpen_error:_d
push ebx
push 8
push str..._npatgpc_npbase_win.cpp
push 0x792
call fcn.0042ab69
add esp, 0x18
xor eax, eax
jmp 0x40beb4
push 0x14
lea eax, [ebp - 0x4d0]
push eax
push 0x4b
push edi
call dword [sym.imp.WININET.dll_InternetSetOptionW]
test eax, eax
jne 0x40be91
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.InternetSetOption_error:__d
push ebx
push 8
push str..._npatgpc_npbase_win.cpp
push 0x797
call fcn.0042ab69
add esp, 0x18
mov esi, ebx
push str.Set_proxy_by_FF
push ebx
push 2
push str..._npatgpc_npbase_win.cpp
push 0x79b
call fcn.0042ab69
add esp, 0x14
push edi
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov eax, esi
lea esp, [ebp - 0x4e0]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00441f6f
mov esp, ebp
pop ebp
ret