Function at 0x101f5c23
Capabilities:
Parse pe header

Disassembly:
call fcn.101ec48e
push eax
jmp 0x101ec489
call 0x101efae0
jmp 0x101f5cc3
movzx ebx, word [eax + 0x3c]
jmp 0x101f5cad
xchg ebx, eax
xchg ebx, eax
inc bx
xchg bx, ax
jmp 0x101f5911
mov ah, 0x29
mov ebx, dword [esp + 7]
sub esp, 0xf
dec ax
mov ax, 0x3791
lea esp, [esp + 0x16]
jmp 0x101f5928
mov dword [esp + 0xe], esi
mov ah, bh
pop dword [esp + 0x12]
add esp, 0x1e
push dword [esp]
xchg word [esp + 4], ax
jmp 0x101f58ee
neg ax
mov ah, dl
clc
bsr ax, di
push dword [esp]
or ebx, edi
jmp 0x101f5ac6
mov eax, esp
sub esp, 5
stc
lea ebx, [esp + eax]
mov ebx, 0x941f2b66
pushfd
jmp 0x101f5a0a
bswap eax
add esp, 0x10
mov ah, al
add esp, 1
xchg byte [esp + 3], bh
mov byte [esp + 1], ch
jmp 0x101f5965
not ax
call fcn.101f59a5
mov eax, 0x67b9814d
mov byte [esp], cl
call 0x101f59f2
fist dword [ebx - reloc.USER32.dll_GetTopWindow]
btr ax, cx
not bl
jmp 0x101f5a33
bswap eax
seto al
neg bx
pop dword [esp]
pop dword [esp]
lea ebx, [eax + eax]
jmp 0x101f59dc
mov bh, byte [esp + 5]
sub esp, 0xf
pop dword [esp + 6]
mov dword [esp + 0xd], esp
jmp 0x101f5a95
push dword [esp + 4]
add bx, 0x227c
push ax
xchg word [esp + 8], bx
jmp 0x101f5a1d
pop ebx
pop ax
setp ah
lea esp, [esp + 8]
xchg bx, ax
not eax
jmp 0x101f597b
mov bl, byte [esp + 4]
std
shr ebx, 0xe
mov ax, 0x879a
bts eax, edx
pop eax
jmp 0x101f5aab
mov eax, dword [esp + 1]
bsr bx, dx
mov bh, ch
pop bx
lea ebx, reloc.USER32.dll_GetTopWindow
lea eax, [eax + edi]
jmp 0x101f5a5e
btr bx, cx
neg bx
sub esp, 0x19
lea esp, [esp + 0x21]
mov dword [esp + 4], ebp
pop ax
jmp 0x101f5a74
setne al
neg ebx
inc ah
not bx
mov ebx, dword [esp + 2]
adc bx, cx
jmp 0x101f5b1e
clc
pop ebx
mov byte [esp], ch
mov ebx, dword [esp + 2]
lea ebx, [ecx + ecx]
pushal
jmp 0x101f5a4b
neg bx
xchg bh, bl
pop eax
lea esp, [esp + 0x1a]
mov byte [esp + 4], ch
xchg word [esp + 5], ax
jmp 0x101f5b08
neg ah
xchg byte [esp + 0xc], ah
lea ebx, [ebx - 0x54]
mov ah, byte [esp + 0x25]
xchg dword [esp + 0x1a], eax
xchg dword [esp], eax
jmp 0x101f5ad8
lea esp, [esp + 9]
mov eax, 0x94f945ed
lea esp, [esp]
neg bx
jmp 0x101f5b4d
pushal
mov byte [esp + 0xf], bh
stc
bsf bx, di
push word [esp + 0x17]
cmc
jmp 0x101f5af2
lea eax, [esi*4]
lea esp, [esp]
mov eax, 0x3604672a
setnp bh
add esp, 0
jmp 0x101f5b5f
xchg ah, bh
clc
mov eax, dword [esp]
mov bl, byte [esp]
mov ebx, dword [esp]
mov ax, word [esp]
jmp 0x101f5b30
add esp, 0
mov bh, byte [esp]
ror bx, 0xc
lea ebx, [ecx + edi]
mov eax, ebp
mov bh, 0x42
jmp 0x101f5d2f
lea esp, [esp + 0x18]
popfd
lea esp, [esp + 4]
push eax
call fcn.101f5bbf
mov dword [esp + 0x2c], edi
lea esp, [esp + 0x2c]
mov eax, dword fs:[0x30]
jmp 0x101f5ca5
push ecx
jmp 0x101f5c8a
lea ecx, [ecx + 0x1c]
mov eax, dword [ecx]
pop ecx
mov eax, dword [eax]
jmp 0x101f5c54
push eax
jmp 0x101efadb
mov ecx, eax
lea ecx, [ecx + 8]
mov eax, dword [ecx]
pop ecx
jmp 0x101f5c74
mov eax, dword [eax + 0xc]
push ecx
mov ecx, eax
jmp 0x101f5c6a
add ebx, eax
jmp 0x101f5cd2
pop eax
xor ax, ax
cmp word [eax], 0x5a4d
jmp 0x101f5d05
cmp word [ebx], 0x4550
je 0x101ec9e8
jne 0x101f5d0b
and dword [edx + reloc.USER32.dll_GetTopWindow], esp
popal
out 0x77, eax
adc ah, cl
sbb eax, 0x17e4f59a
mov ax, word [esp]
shl ax, cl
mov ah, byte [esp]
mov eax, edx
cld
mov eax, dword [esp + 0x14]
jmp 0x101f5c14
je 0x101efb01
sub eax, 0x10000
jmp 0x101f5cc7
lea esp, [esp + 1]
mov ax, bx
mov bh, 0x96
mov bl, al
mov ebx, dword [esp + 1]
xor eax, edi
jmp 0x101f5cef