Function at 0x47b3d7
Capabilities:
Check os version
Get system information on windows

Disassembly:
push 0x154
mov eax, 0x4b5a74
call fcn.004952b6
xor edi, edi
cmp dword [0x4e9a98], edi
je 0x47b3f9
xor eax, eax
inc eax
call fcn.00495339
ret
mov esi, 0x11c
push esi
lea eax, [ebp - 0x130]
push edi
push eax
call fcn.00494b20
add esp, 0xc
lea eax, [ebp - 0x134]
push str.360Base.dll
push eax
mov dword [ebp - 0x130], esi
mov dword [ebp - 0x138], edi
call fcn.0047b079
mov dword [ebp - 4], edi
push dword [ebp - 0x134]
call fcn.0040d1a0
mov ebx, dword [sym.imp.KERNEL32.dll_GetProcAddress]
add esp, 0xc
test eax, eax
je 0x47b460
lea eax, [ebp - 0x138]
push eax
lea eax, [ebp - 0x130]
push eax
call fcn.0047b843
pop ecx
pop ecx
test eax, eax
jne 0x47b4a9
push str.RtlGetVersion
push str.NtDll.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call ebx
cmp eax, edi
je 0x47b4a9
lea ecx, [ebp - 0x130]
push ecx
call eax
test eax, eax
je 0x47b4a9
lea eax, [ebp - 0x130]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
jne 0x47b4a9
xor esi, esi
lea ecx, [ebp - 0x134]
call fcn.00406090
mov eax, esi
jmp 0x47b3f3
mov ax, word [ebp - 0x1c]
mov dword [0x4e882c], edi
mov esi, 0x4c4788
mov edx, esi
mov edi, 0x4e91e8
mov word [0x4e8834], ax
call fcn.004059e0
mov eax, dword [ebp - 0x120]
xor ecx, ecx
sub eax, ecx
je 0x47b66b
dec eax
je 0x47b626
dec eax
je 0x47b4eb
mov edx, esi
jmp 0x47b67a
mov eax, dword [ebp - 0x12c]
cmp eax, 4
ja 0x47b50a
mov dword [0x4e882c], 0x40
mov edx, str.Windows_NT
jmp 0x47b67a
cmp eax, 5
jne 0x47b569
cmp dword [ebp - 0x128], ecx
jne 0x47b52b
mov dword [0x4e882c], 0x80
mov edx, str.Windows_2000
jmp 0x47b67a
cmp dword [ebp - 0x128], 1
jne 0x47b548
mov dword [0x4e882c], 0x100
mov edx, str.Windows_XP
jmp 0x47b67a
cmp dword [ebp - 0x128], 2
jne 0x47b67f
mov dword [0x4e882c], 0x200
mov edx, str.Windows_2003
jmp 0x47b67a
cmp eax, 6
jne 0x47b619
mov eax, dword [ebp - 0x128]
cmp eax, ecx
jne 0x47b590
mov dword [0x4e882c], 0x400
mov edx, str.Windows_Vista
jmp 0x47b67a
cmp eax, 1
jne 0x47b5a9
mov dword [0x4e882c], 0x800
mov edx, str.Windows_7
jmp 0x47b67a
cmp eax, 2
jne 0x47b5c2
mov dword [0x4e882c], 0x1000
mov edx, str.Windows_8
jmp 0x47b67a
cmp eax, 3
jne 0x47b5db
mov dword [0x4e882c], 0x2000
mov edx, str.Windows_8.1
jmp 0x47b67a
cmp eax, 4
jne 0x47b67f
cmp dword [ebp - 0x124], 0x2671
je 0x47b608
cmp dword [ebp - 0x124], 0x2684
je 0x47b608
cmp dword [ebp - 0x124], 0x2697
jne 0x47b67f
mov dword [0x4e882c], 0x4000
mov edx, str.Windows_10
jmp 0x47b67a
cmp eax, 0xa
jne 0x47b67f
cmp dword [ebp - 0x128], ecx
jmp 0x47b606
cmp dword [ebp - 0x12c], 4
jne 0x47b67f
cmp dword [ebp - 0x128], ecx
jne 0x47b648
mov dword [0x4e882c], 8
mov edx, str.Windows_9x
jmp 0x47b67a
cmp dword [ebp - 0x128], 0xa
je 0x47b637
cmp dword [ebp - 0x128], 0x5a
jne 0x47b67f
mov dword [0x4e882c], 0x20
mov edx, str.Windows_ME
jmp 0x47b67a
mov dword [0x4e882c], 1
mov edx, str.Windows_3.2
call fcn.004059e0
push 9
pop ecx
push str.GetNativeSystemInfo
xor eax, eax
lea edi, [ebp - 0x15c]
push 0x4ccca8
rep stosd dword es:[edi], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push eax
call ebx
test eax, eax
je 0x47b6ae
lea ecx, [ebp - 0x15c]
push ecx
call eax
jmp 0x47b6bb
lea eax, [ebp - 0x15c]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
cmp word [ebp - 0x15c], 9
je 0x47b6e2
cmp word [ebp - 0x15c], 6
je 0x47b6e2
cmp word [ebp - 0x15c], 0
jne 0x47b6ec
and dword [0x4e8830], 0
jmp 0x47b6ec
mov dword [0x4e8830], 1
xor esi, esi
inc esi
mov dword [0x4e9a98], esi
jmp 0x47b497