Function at 0x101b1230
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x101e27bc
mov eax, dword fs:[0]
push eax
sub esp, 0x98
push ebx
push esi
push edi
mov eax, dword [0x1027e110]
xor eax, esp
push eax
lea eax, [esp + 0xa8]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0x10]
mov edi, dword [ebp + 0xc]
xor ebx, ebx
mov dword [esp + 0x34], ebx
mov dword [eax + 0x18], 0xf
mov dword [eax + 0x14], ebx
mov dword [esp + 0x24], eax
mov dword [esp + 0x20], esi
mov byte [eax + 4], bl
mov ecx, edi
mov dword [esp + 0xb0], ebx
mov dword [esp + 0x34], 1
mov byte [esi], 1
mov dword [esp + 0x28], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x30], ebx
call fcn.101ab400
test al, al
jne 0x101b12d4
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0xa8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov esi, dword [esp + 0x20]
mov ecx, edi
call fcn.101ab3e0
cmp al, 0x21
je 0x101b14e6
cmp byte [esi], bl
je 0x101b13d1
call fcn.101b0b30
mov esi, eax
xor ecx, ecx
mov eax, edi
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], eax
cmp dword [edi + 0x30], ebx
ja 0x101b131b
push ebx
mov ecx, edi
call fcn.101ab9f0
cmp al, bl
je case.default.0x101b1322
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
mov edx, dword [esi]
cmp edx, 6
ja case.default.0x101b1322
jmp dword [edx*4 + 0x101b1534]
push ecx
lea ecx, [eax + 0x14]
call fcn.101a5510
mov al, byte [eax]
xor ecx, ecx
cmp al, 4
sete cl
dec ecx
mov eax, ecx
jmp 0x101b13a4
push ecx
lea ecx, [eax + 0x14]
call fcn.101a5510
mov al, byte [eax]
xor edx, edx
cmp al, byte [esi + 4]
sete dl
lea edx, [edx + edx - 1]
mov eax, edx
jmp 0x101b13a4
lea eax, [esp + 0x10]
push eax
mov ecx, esi
call fcn.101a57a0
jmp 0x101b13a4
lea ecx, [esp + 0x10]
push ecx
mov ecx, esi
call fcn.101a5090
jmp 0x101b13a4
lea edx, [esp + 0x10]
push edx
mov ecx, esi
call fcn.101a50f0
jmp 0x101b13a4
lea eax, [esp + 0x10]
push eax
mov ecx, esi
call fcn.101a5160
jmp 0x101b13a4
lea ecx, [esp + 0x10]
push ecx
mov ecx, esi
call fcn.101a6c10
jmp 0x101b13a4
or eax, 0xffffffff
cmp eax, ebx
jg 0x101b13c5
mov edx, dword [esp + 0x20]
mov byte [edx], bl
mov eax, dword [edi + 4]
mov ecx, dword [edi + 8]
mov edx, dword [edi + 0xc]
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x30], edx
jmp 0x101b13d1
mov ecx, dword [esp + 0x20]
cmp byte [ecx], bl
jne 0x101b148a
call fcn.101b0e40
mov esi, eax
xor ecx, ecx
mov eax, edi
mov dword [esp + 0x18], ecx
mov dword [esp + 0x1c], eax
cmp dword [edi + 0x30], ebx
ja 0x101b1401
push ebx
mov ecx, edi
call fcn.101ab9f0
cmp al, bl
je case.default.0x101b1408
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov edx, dword [esi]
cmp edx, 6
ja case.default.0x101b1408
jmp dword [edx*4 + 0x101b1550]
push ecx
lea ecx, [eax + 0x14]
call fcn.101a5510
mov al, byte [eax]
xor edx, edx
cmp al, 4
sete dl
dec edx
mov eax, edx
jmp 0x101b148a
push ecx
lea ecx, [eax + 0x14]
call fcn.101a5510
mov al, byte [eax]
xor ecx, ecx
cmp al, byte [esi + 4]
sete cl
lea ecx, [ecx + ecx - 1]
mov eax, ecx
jmp 0x101b148a
lea edx, [esp + 0x18]
push edx
mov ecx, esi
call fcn.101a57a0
jmp 0x101b148a
lea eax, [esp + 0x18]
push eax
mov ecx, esi
call fcn.101a5090
jmp 0x101b148a
lea ecx, [esp + 0x18]
push ecx
mov ecx, esi
call fcn.101a50f0
jmp 0x101b148a
lea edx, [esp + 0x18]
push edx
mov ecx, esi
call fcn.101a5160
jmp 0x101b148a
lea eax, [esp + 0x18]
push eax
mov ecx, esi
call fcn.101a6c10
jmp 0x101b148a
or eax, 0xffffffff
cmp eax, ebx
jle 0x101b12af
push eax
lea ecx, [esp + 0x3c]
push ecx
mov ecx, edi
call fcn.101abcd0
mov ecx, dword [esp + 0x24]
push 0xffffffffffffffff
push ebx
push eax
mov dword [esp + 0xbc], 2
call fcn.10002d00
cmp dword [esp + 0x50], 0x10
mov byte [esp + 0xb0], bl
jb 0x101b14d2
mov edx, dword [esp + 0x3c]
push edx
call fcn.101b4654
add esp, 4
mov ecx, edi
call fcn.101ab400
test al, al
jne 0x101b12d0
jmp 0x101b12af
cmp byte [esi], bl
jne 0x101b12af
push str.illegal_character_found_while_scanning_tag_handle
lea ecx, [esp + 0x3c]
call fcn.10001cc0
lea eax, [esp + 0x38]
push eax
lea ecx, [esp + 0x2c]
push ecx
lea ecx, [esp + 0x5c]
mov dword [esp + 0xb8], 1
call fcn.10005eb0
push 0x1026ea5c
lea edx, [esp + 0x58]
push edx
mov dword [esp + 0x5c], vtable.YAML::ParserException.0
call fcn.101bc385
lea ecx, [ecx]
sub dword [ebx], edx
sbb edx, dword [eax]
inc eax
adc ebx, dword [ebx]
adc byte [ebx + 0x13], bl
sbb edx, dword [eax]
imul edx, dword [ebx], 0x1377101b
sbb edx, dword [eax]
test dword [ebx], edx
sbb edx, dword [eax]
xchg ebx, eax
adc ebx, dword [ebx]
adc byte [edi], cl
adc al, 0x1b
adc byte [esi], ah
adc al, 0x1b
adc byte [ecx + 0x14], al
sbb edx, dword [eax]
dec edi
adc al, 27
adc byte [ebp + 0x14], bl
sbb edx, dword [eax]
imul edx, dword [ebx + ebx], 0x10
jns 270210430
sbb edx, dword [eax]
int3
mov eax, dword [pe_dos_header]
push eax
sub esp, 0x88
push ebx
push esi
push edi
mov eax, dword [0x1027e110]
xor eax, esp
push eax
lea eax, [esp + 0x98]
mov dword fs:[0], eax
mov ebx, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
xor esi, esi
mov dword [esp + 0x20], esi
mov dword [ebx + 0x18], 0xf
mov dword [ebx + 0x14], esi
mov dword [esp + 0x40], ebx
mov byte [ebx + 4], 0
mov ecx, edi
mov dword [esp + 0xa0], esi
mov dword [esp + 0x20], 1
call fcn.101ab400
test al, al
je 0x101b16f2
mov edi, edi
call fcn.101b0e40
mov esi, eax
xor ecx, ecx
mov eax, edi
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], eax
cmp dword [edi + 0x30], ecx
ja 0x101b1610
push ecx
mov ecx, edi
call fcn.101ab9f0
test al, al
je case.default.0x101b161b
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esi]
cmp edx, 6
ja case.default.0x101b161b
jmp dword [edx*4 + 0x101b177c]
push ecx
lea ecx, [eax + 0x14]
call fcn.101a5510
mov al, byte [eax]
xor ecx, ecx
cmp al, 4
sete cl
dec ecx
mov eax, ecx
jmp 0x101b169d
push ecx
lea ecx, [eax + 0x14]
call fcn.101a5510
mov al, byte [eax]
xor edx, edx
cmp al, byte [esi + 4]
sete dl
lea edx, [edx + edx - 1]
mov eax, edx
jmp 0x101b169d
lea eax, [esp + 0x14]
push eax
mov ecx, esi
call fcn.101a57a0
jmp 0x101b169d
lea ecx, [esp + 0x14]
push ecx
mov ecx, esi
call fcn.101a5090
jmp 0x101b169d
lea edx, [esp + 0x14]
push edx
mov ecx, esi
call fcn.101a50f0
jmp 0x101b169d
lea eax, [esp + 0x14]
push eax
mov ecx, esi
call fcn.101a5160
jmp 0x101b169d
lea ecx, [esp + 0x14]
push ecx
mov ecx, esi
call fcn.101a6c10
jmp 0x101b169d
or eax, 0xffffffff
test eax, eax
jle 0x101b16f0
push eax
lea edx, [esp + 0x28]
push edx
mov ecx, edi
call fcn.101abcd0
push 0xffffffffffffffff
push 0
push eax
mov ecx, ebx
mov dword [esp + 0xac], 1
call fcn.10002d00
cmp dword [esp + 0x3c], 0x10
mov byte [esp + 0xa0], 0
jb 0x101b16e1
mov eax, dword [esp + 0x28]
push eax
call fcn.101b4654
add esp, 4
mov ecx, edi
call fcn.101ab400
test al, al
jne 0x101b15e0
xor esi, esi
cmp dword [ebx + 0x14], esi
jne 0x101b1762
push 0x19
push str.tag_handle_with_no_suffix
lea ecx, [esp + 0x2c]
mov dword [esp + 0x44], 0xf
mov dword [esp + 0x40], esi
mov byte [esp + 0x30], 0
call fcn.10002290
mov ecx, dword [edi + 4]
mov edx, dword [edi + 8]
mov eax, dword [edi + 0xc]
mov dword [esp + 0x14], ecx
lea ecx, [esp + 0x24]
mov dword [esp + 0x18], edx
push ecx
lea edx, [esp + 0x18]
push edx
lea ecx, [esp + 0x4c]
mov dword [esp + 0xa8], 2
mov dword [esp + 0x24], eax
call fcn.10005eb0
push 0x1026ea5c
lea eax, [esp + 0x48]
push eax
mov dword [esp + 0x4c], vtable.YAML::ParserException.0
call fcn.101bc385
mov eax, ebx
mov ecx, dword [esp + 0x98]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret