Function at 0x101afbf0
Capabilities:
Access peb ldr_data
Check os version
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x101e22a7
mov eax, dword fs:[0]
push eax
sub esp, 0x188
mov eax, dword [0x1027e110]
xor eax, esp
mov dword [esp + 0x180], eax
push ebx
push esi
push edi
mov eax, dword [0x1027e110]
xor eax, esp
push eax
lea eax, [esp + 0x198]
mov dword fs:[0], eax
mov esi, ecx
xor edi, edi
mov dword [esp + 0x24], esi
mov dword [esp + 0x138], 0xf
mov dword [esp + 0x134], edi
mov byte [esp + 0x124], 0
lea ecx, [esp + 0x5c]
mov dword [esp + 0x1a0], edi
call fcn.101abeb0
mov byte [esp + 0x7c], 0
mov byte [esp + 0x85], 0
mov byte [esp + 0x86], 0
mov dword [esp + 0x88], edi
mov byte [esp + 0x8c], 0
mov dword [esp + 0x90], edi
mov dword [esp + 0x94], edi
mov dword [esp + 0x98], edi
mov byte [esp + 0x9c], 0
mov ecx, dword [esi + 8]
mov eax, dword [esi + 4]
mov edx, dword [esi + 0xc]
mov dword [esp + 0xc8], ecx
mov ecx, esi
mov byte [esp + 0x1a0], 1
mov dword [esp + 0x80], 1
mov byte [esp + 0x84], 1
mov dword [esp + 0xc4], eax
mov dword [esp + 0xcc], edx
call fcn.101abc50
xor ecx, ecx
cmp al, 0x3e
sete cl
mov dword [esp + 0x90], edi
mov dword [esp + 0x88], ecx
call fcn.101adab0
mov ebx, eax
mov dword [esp + 0x14], edi
mov dword [esp + 0x18], esi
mov eax, dword [esi + 0x30]
cmp eax, edi
ja 0x101afd1a
push edi
mov ecx, esi
call fcn.101ab9f0
test al, al
je 0x101afd28
lea edx, [esp + 0x14]
push edx
mov ecx, ebx
call fcn.101a6a00
jmp 0x101afd2b
or eax, 0xffffffff
cmp eax, edi
mov dword [esp + 0x1c], eax
mov dword [esp + 0x34], edi
jle 0x101afda6
mov ecx, esi
call fcn.101abc50
mov bl, al
mov byte [esp + 0x14], bl
cmp bl, 0x2b
jne 0x101afd56
mov dword [esp + 0x90], 1
jmp 0x101afd97
cmp bl, 0x2d
jne 0x101afd68
mov dword [esp + 0x90], 0xffffffff
jmp 0x101afd97
mov eax, dword [esp + 0x14]
push eax
call fcn.101ad2f0
mov ecx, eax
call fcn.101ad360
test al, al
je 0x101afd97
cmp bl, 0x30
je 0x101afde8
movsx ecx, bl
sub ecx, 0x30
mov dword [esp + 0x80], ecx
mov byte [esp + 0x84], 0
mov eax, dword [esp + 0x34]
inc eax
cmp eax, dword [esp + 0x1c]
mov dword [esp + 0x34], eax
jl 0x101afd37
call fcn.101a5400
mov ebx, eax
xor ecx, ecx
mov eax, esi
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], eax
cmp dword [esi + 0x30], edi
ja 0x101afdd6
push edi
mov ecx, esi
call fcn.101ab9f0
test al, al
je case.default.0x101afde1
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
mov edx, dword [ebx]
cmp edx, 6
ja case.default.0x101afde1
jmp dword [edx*4 + 0x101b0680]
push 0x2e
push str.cannot_set_zero_indentation_for_a_block_scalar
lea ecx, [esp + 0x44]
mov dword [esp + 0x5c], 0xf
mov dword [esp + 0x58], edi
mov byte [esp + 0x48], 0
call fcn.10002290
mov edx, dword [esi + 4]
mov eax, dword [esi + 8]
mov ecx, dword [esi + 0xc]
mov dword [esp + 0x28], edx
lea edx, [esp + 0x3c]
mov dword [esp + 0x2c], eax
push edx
lea eax, [esp + 0x2c]
mov dword [esp + 0x34], ecx
push eax
lea ecx, [esp + 0xd8]
mov byte [esp + 0x1a8], 2
call fcn.10005eb0
push 0x1026ea5c
lea ecx, [esp + 0xd4]
push ecx
mov dword [esp + 0xd8], vtable.YAML::ParserException.0
call fcn.101bc385
mov esi, dword [eax + 0x2c]
mov edx, dword [eax + 0x30]
lea edi, [eax + 0x14]
add edx, esi
mov ebx, ecx
cmp esi, edx
jbe 0x101afe6f
call fcn.101b461a
mov edi, dword [edi]
mov dword [esp + 0x34], edi
mov dword [esp + 0x38], esi
test edi, edi
jne 0x101afe9a
call fcn.101b461a
xor eax, eax
xor ecx, ecx
mov ecx, dword [ecx + 0x1c]
add ecx, dword [eax + 0x18]
add esi, ebx
cmp esi, ecx
ja 0x101afea7
test edi, edi
je 0x101afea0
mov edi, dword [edi]
jmp 0x101afea2
mov eax, dword [edi]
mov ecx, eax
jmp 0x101afe86
xor edi, edi
cmp esi, dword [edi + 0x18]
jae 0x101afeac
call fcn.101b461a
mov edx, dword [esp + 0x34]
lea ecx, [esp + 0xbc]
mov dword [esp + 0xbc], edx
mov dword [esp + 0xc0], esi
call fcn.101a4de0
mov al, byte [eax]
xor ecx, ecx
cmp al, 4
sete cl
dec ecx
mov eax, ecx
jmp 0x101b0075
mov esi, dword [eax + 0x2c]
mov edx, dword [eax + 0x30]
lea edi, [eax + 0x14]
add edx, esi
mov dword [esp + 0x14], ecx
cmp esi, edx
jbe 0x101afef3
call fcn.101b461a
mov edi, dword [edi]
mov dword [esp + 0xb4], edi
mov dword [esp + 0xb8], esi
test edi, edi
jne 0x101aff28
call fcn.101b461a
xor eax, eax
xor ecx, ecx
mov ecx, dword [ecx + 0x1c]
mov edx, dword [esp + 0x14]
add ecx, dword [eax + 0x18]
add esi, edx
cmp esi, ecx
ja 0x101aff35
test edi, edi
je 0x101aff2e
mov eax, dword [edi]
jmp 0x101aff30
mov eax, dword [edi]
mov ecx, eax
jmp 0x101aff10
xor eax, eax
cmp esi, dword [eax + 0x18]
jae 0x101aff3a
call fcn.101b461a
mov edx, dword [esp + 0xb4]
lea ecx, [esp + 0xac]
mov dword [esp + 0xac], edx
mov dword [esp + 0xb0], esi
call fcn.101a4de0
mov al, byte [eax]
xor ecx, ecx
cmp al, byte [ebx + 4]
sete cl
lea ecx, [ecx + ecx - 1]
mov eax, ecx
jmp 0x101b0075
mov esi, dword [eax + 0x2c]
mov edx, dword [eax + 0x30]
lea edi, [eax + 0x14]
add edx, esi
mov dword [esp + 0x14], ecx
cmp esi, edx
jbe 0x101aff88
call fcn.101b461a
mov edi, dword [edi]
mov dword [esp + 0xa4], edi
mov dword [esp + 0xa8], esi
test edi, edi
jne 0x101affbd
call fcn.101b461a
xor eax, eax
xor ecx, ecx
mov ecx, dword [ecx + 0x1c]
mov edx, dword [esp + 0x14]
add ecx, dword [eax + 0x18]
add esi, edx
cmp esi, ecx
ja 0x101affca
test edi, edi
je 0x101affc3
mov eax, dword [edi]
jmp 0x101affc5
mov eax, dword [edi]
mov ecx, eax
jmp 0x101affa5
xor eax, eax
cmp esi, dword [eax + 0x18]
jae 0x101affcf
call fcn.101b461a
mov edx, dword [esp + 0xa4]
lea ecx, [esp + 0x28]
mov dword [esp + 0x28], edx
mov dword [esp + 0x2c], esi
call fcn.101a4de0
mov al, byte [eax]
cmp byte [ebx + 4], al
jg 0x101b0036
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x20]
push eax
add ecx, 0x14
call fcn.101a5510
mov al, byte [eax]
cmp byte [ebx + 5], al
jl 0x101b0036
mov eax, 1
jmp 0x101b0075
lea ecx, [esp + 0x1c]
push ecx
mov ecx, ebx
call fcn.101a5090
jmp 0x101b0075
lea edx, [esp + 0x1c]
push edx
mov ecx, ebx
call fcn.101a50f0
jmp 0x101b0075
mov eax, dword [ebx + 0x18]
sub eax, dword [ebx + 0x14]
test eax, 0xffffffe0
jne 0x101b003b
or eax, 0xffffffff
jmp 0x101b0075
mov ecx, dword [ebx + 0x18]
sub ecx, dword [ebx + 0x14]
sar ecx, 5
test ecx, ecx
ja 0x101b004d
call fcn.101b461a
mov ecx, dword [ebx + 0x14]
lea edx, [esp + 0x1c]
push edx
call fcn.101a6a00
xor ecx, ecx
test eax, eax
setl cl
lea ecx, [ecx + ecx - 1]
mov eax, ecx
jmp 0x101b0075
lea edx, [esp + 0x1c]
push edx
mov ecx, ebx
call fcn.101a6c10
test eax, eax
jl case.default.0x101afde1
mov ecx, dword [esp + 0x24]
push 1
call fcn.101abd90
mov esi, dword [esp + 0x24]
xor edi, edi
jmp 0x101afda6
lea eax, [esp + 0x3c]
push eax
call fcn.101a7360
add esp, 4
mov esi, eax
mov edi, dword [esp + 0x24]
xor ecx, ecx
mov eax, edi
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], eax
mov byte [esp + 0x1a0], 3
cmp dword [edi + 0x30], ecx
ja 0x101b00d3
push ecx
mov ecx, edi
call fcn.101ab9f0
test al, al
je case.default.0x101b00da
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esi]
cmp edx, 6
ja case.default.0x101b00da
jmp dword [edx*4 + 0x101b069c]
push ecx
lea ecx, [eax + 0x14]
call fcn.101a5510
mov al, byte [eax]
xor ecx, ecx
cmp al, 4
sete cl
dec ecx
mov eax, ecx
jmp 0x101b015c
push ecx
lea ecx, [eax + 0x14]
call fcn.101a5510
mov al, byte [eax]
xor edx, edx
cmp al, byte [esi + 4]
sete dl
lea edx, [edx + edx - 1]
mov eax, edx
jmp 0x101b015c
lea eax, [esp + 0x14]
push eax
mov ecx, esi
call fcn.101a57a0
jmp 0x101b015c
lea ecx, [esp + 0x14]
push ecx
mov ecx, esi
call fcn.101a5090
jmp 0x101b015c
lea edx, [esp + 0x14]
push edx
mov ecx, esi
call fcn.101a50f0
jmp 0x101b015c
lea eax, [esp + 0x14]
push eax
mov ecx, esi
call fcn.101a5160
jmp 0x101b015c
lea ecx, [esp + 0x14]
push ecx
mov ecx, esi
call fcn.101a6c10
jmp 0x101b015c
or eax, 0xffffffff
xor esi, esi
cmp eax, esi
lea edx, [esp + 0x44]
setge bl
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0x50]
mov byte [esp + 0x1a0], 4
cmp eax, esi
je 0x101b019d
mov ecx, dword [esp + 0x14]
push ecx
mov ecx, dword [esp + 0x58]
lea edx, [esp + 0x50]
push edx
push ecx
push eax
call fcn.101a6a60
mov edx, dword [esp + 0x60]
push edx
call fcn.101b4654
add esp, 0x14
mov eax, dword [esp + 0x44]
push eax
mov dword [esp + 0x54], esi
mov dword [esp + 0x58], esi
mov dword [esp + 0x5c], esi
mov byte [esp + 0x1a4], 1
call fcn.101b4654
add esp, 4
test bl, bl
je 0x101b0304
mov ecx, edi
call fcn.101ab400
test al, al
je 0x101b0304
call fcn.101a57f0
mov esi, eax
xor ecx, ecx
mov eax, edi
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], eax
cmp dword [edi + 0x30], ecx
ja 0x101b0205
push ecx
mov ecx, edi
call fcn.101ab9f0
test al, al
je case.default.0x101b0210
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esi]
cmp edx, 6
ja case.default.0x101b0210
jmp dword [edx*4 + 0x101b06b8]
push ecx
lea ecx, [eax + 0x14]
call fcn.101a5510
mov al, byte [eax]
xor ecx, ecx
cmp al, 4
sete cl
dec ecx
mov eax, ecx
jmp 0x101b02e8
push ecx
lea ecx, [eax + 0x14]
call fcn.101a5510
mov al, byte [eax]
xor edx, edx
cmp al, byte [esi + 4]
sete dl
lea edx, [edx + edx - 1]
mov eax, edx
jmp 0x101b02e8
push ecx
lea ecx, [eax + 0x14]
call fcn.101a5510
mov al, byte [eax]
cmp byte [esi + 4], al
jg 0x101b02a7
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
push eax
add ecx, 0x14
call fcn.101a5510
mov al, byte [eax]
cmp byte [esi + 5], al
jl 0x101b02a7
mov eax, 1
jmp 0x101b02e8
lea ecx, [esp + 0x14]
push ecx
mov ecx, esi
call fcn.101a5090
jmp 0x101b02e8
lea edx, [esp + 0x14]
push edx
mov ecx, esi
call fcn.101a50f0
jmp 0x101b02e8
mov eax, dword [esi + 0x18]
sub eax, dword [esi + 0x14]
test eax, 0xffffffe0
jne 0x101b02ac
or eax, 0xffffffff
jmp 0x101b02e8
mov ecx, dword [esi + 0x18]
sub ecx, dword [esi + 0x14]
sar ecx, 5
test ecx, ecx
ja 0x101b02be
call fcn.101b461a
mov esi, dword [esi + 0x14]
lea edx, [esp + 0x14]
push edx
mov ecx, esi
call fcn.101a6a00
xor ecx, ecx
test eax, eax
setl cl
lea ecx, [ecx + ecx - 1]
mov eax, ecx
jmp 0x101b02e8
lea edx, [esp + 0x14]
push edx
mov ecx, esi
call fcn.101a6c10
test eax, eax
jge 0x101b0304
push 1
mov ecx, edi
call fcn.101abd90
mov ecx, edi
call fcn.101ab400
test al, al
jne 0x101b01d5
mov ecx, edi
call fcn.101ab400
test al, al
je 0x101b0435
call fcn.101a57f0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], edi
cmp dword [edi + 0x30], 0
mov esi, eax
ja 0x101b033d
push 0
mov ecx, edi
call fcn.101ab9f0
test al, al
je case.default.0x101b0344
mov eax, dword [esi]
cmp eax, 6
ja case.default.0x101b0344
jmp dword [eax*4 + 0x101b06d4]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
push eax
add ecx, 0x14
call fcn.101a5510
mov al, byte [eax]
xor ecx, ecx
cmp al, 4
sete cl
dec ecx
mov eax, ecx
jmp 0x101b03bc
lea edx, [esp + 0x14]
push edx
mov ecx, esi
call fcn.101a5770
jmp 0x101b03bc
lea eax, [esp + 0x14]
push eax
mov ecx, esi
call fcn.101a57a0
jmp 0x101b03bc
lea ecx, [esp + 0x14]
push ecx
mov ecx, esi
call fcn.101a5090
jmp 0x101b03bc
lea edx, [esp + 0x14]
push edx
mov ecx, esi
call fcn.101a50f0
jmp 0x101b03bc
lea eax, [esp + 0x14]
push eax
mov ecx, esi
call fcn.101a5160
jmp 0x101b03bc
lea ecx, [esp + 0x14]
push ecx
mov ecx, esi
call fcn.101a6c10
test eax, eax
jge 0x101b0435
push 0x24
push str.unexpected_character_in_block_scalar
lea ecx, [esp + 0x44]
mov dword [esp + 0x5c], 0xf
mov dword [esp + 0x58], 0
mov byte [esp + 0x48], 0
call fcn.10002290
mov edx, dword [edi + 4]
mov eax, dword [edi + 8]
mov ecx, dword [edi + 0xc]
mov dword [esp + 0x28], edx
lea edx, [esp + 0x3c]
mov dword [esp + 0x2c], eax
push edx
lea eax, [esp + 0x2c]
mov dword [esp + 0x34], ecx
push eax
lea ecx, [esp + 0xd8]
mov byte [esp + 0x1a8], 5
call fcn.10005eb0
push 0x1026ea5c
lea ecx, [esp + 0xd4]
push ecx
mov dword [esp + 0xd8], vtable.YAML::ParserException.0
call fcn.101bc385
mov ecx, edi
call fcn.101a5620
test eax, eax
jl 0x101b044e
mov ecx, edi
call fcn.101a5620
add dword [esp + 0x80], eax
lea edx, [esp + 0x5c]
push edx
lea eax, [esp + 0x40]
push edi
push eax
mov byte [esp + 0x91], 0
mov byte [esp + 0x98], 0
mov dword [esp + 0xa4], 2
call fcn.101b1960
add esp, 0xc
push 0xffffffffffffffff
push 0
push eax
lea ecx, [esp + 0x12c]
mov byte [esp + 0x1ac], 6
call fcn.10001fe0
cmp dword [esp + 0x54], 0x10
mov byte [esp + 0x1a0], 1
jb 0x101b04b1
mov ecx, dword [esp + 0x40]
push ecx
call fcn.101b4654
add esp, 4
lea edx, [esp + 0xc4]
push edx
push 0x14
lea ecx, [esp + 0x144]
mov byte [edi + 0x62], 1
mov byte [edi + 0x63], 0
call fcn.101a6f60
push 0xffffffffffffffff
push 0
lea eax, [esp + 0x128]
push eax
lea ecx, [esp + 0x15c]
mov byte [esp + 0x1ac], 7
call fcn.10001fe0
mov ecx, dword [edi + 0x5c]
lea esi, [edi + 0x40]
inc ecx
cmp dword [esi + 0x14], ecx
ja 0x101b0504
push 1
mov ecx, esi
call fcn.101a6580
mov edi, dword [esi + 0x18]
add edi, dword [esi + 0x1c]
mov eax, dword [esi + 0x14]
cmp eax, edi
ja 0x101b0513
sub edi, eax
mov edx, dword [esi + 0x10]
xor ebx, ebx
cmp dword [edx + edi*4], ebx
jne 0x101b052d
push 0x4c
call fcn.101b46dc
mov ecx, dword [esi + 0x10]
add esp, 4
mov dword [ecx + edi*4], eax
mov edx, dword [esi + 0x10]
mov ecx, dword [edx + edi*4]
mov dword [esp + 0x14], ecx
mov dword [esp + 0x1c], ecx
mov byte [esp + 0x1a0], 8
cmp ecx, ebx
je 0x101b0554
lea eax, [esp + 0x13c]
push eax
call fcn.101a71c0
mov eax, dword [esp + 0x178]
inc dword [esi + 0x1c]
cmp eax, ebx
je 0x101b058d
mov ecx, dword [esp + 0x14]
push ecx
mov ecx, dword [esp + 0x180]
lea edx, [esp + 0x178]
push edx
push ecx
push eax
call fcn.1001d230
mov edx, dword [esp + 0x188]
push edx
call fcn.101b4654
add esp, 0x14
mov eax, dword [esp + 0x16c]
push eax
mov dword [esp + 0x17c], ebx
mov dword [esp + 0x180], ebx
mov dword [esp + 0x184], ebx
call fcn.101b4654
mov esi, 0x10
add esp, 4
cmp dword [esp + 0x168], esi
jb 0x101b05d0
mov ecx, dword [esp + 0x154]
push ecx
call fcn.101b4654
add esp, 4
lea edx, [esp + 0x64]
mov dword [esp + 0x168], 0xf
mov dword [esp + 0x164], ebx
mov byte [esp + 0x154], 0
mov dword [esp + 0x14], edx
mov eax, dword [esp + 0x70]
mov byte [esp + 0x1a0], 9
cmp eax, ebx
je 0x101b0627
mov ecx, dword [esp + 0x14]
push ecx
mov ecx, dword [esp + 0x78]
lea edx, [esp + 0x70]
push edx
push ecx
push eax
call fcn.101a6a60
mov edx, dword [esp + 0x80]
push edx
call fcn.101b4654
add esp, 0x14
mov eax, dword [esp + 0x64]
push eax
mov dword [esp + 0x74], ebx
mov dword [esp + 0x78], ebx
mov dword [esp + 0x7c], ebx
call fcn.101b4654
add esp, 4
cmp dword [esp + 0x138], esi
jb 0x101b0659
mov ecx, dword [esp + 0x124]
push ecx
call fcn.101b4654
add esp, 4
mov ecx, dword [esp + 0x198]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x180]
xor ecx, esp
call fcn.101b40e2
mov esp, ebp
pop ebp
ret