Function at 0x42a100
Capabilities:
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x54
mov ecx, dword [ebp + 0xc]
xorps xmm0, xmm0
movlpd qword [esp + 0x1c], xmm0
push ebx
push esi
push edi
cmp ecx, 0x28
jb 0x42a3bf
mov edi, dword [ebp + 8]
cmp dword [edi], 0x696c7062
jne 0x42a3bf
cmp word [edi + 4], 0x7473
jne 0x42a3bf
mov eax, 0x3030
cmp word [edi + 6], ax
jne 0x42a3bf
lea edx, [ecx - 0x20]
mov ecx, dword [edx + edi + 8]
add edx, edi
mov ebx, ecx
mov dword [esp + 0x18], edx
mov al, byte [edx + 6]
mov esi, dword [edx + 0xc]
mov byte [esp + 0x13], al
mov al, byte [edx + 7]
mov edx, esi
shld edx, ebx, 0x10
mov byte [esp + 0x12], al
mov eax, ecx
and eax, 0xff00
shl ebx, 0x10
or ebx, eax
mov dword [esp + 0x24], esi
shld edx, ebx, 0x10
mov eax, ecx
and eax, 0xff0000
shl ebx, 0x10
or ebx, eax
mov eax, ecx
shld edx, ebx, 0x10
and eax, 0xff000000
shl ebx, 0x10
or ebx, eax
movzx eax, byte [esp + 0x24]
shld edx, ebx, 8
mov dword [esp + 0x1c], edx
mov edx, esi
shrd ecx, edx, 0x10
xor ecx, ecx
shl ebx, 8
shr edx, 0x10
and esi, 0xff00
and edx, 0xff
or edx, esi
mov esi, dword [esp + 0x18]
shrd ecx, edx, 0x10
shr edx, 0x10
or edx, eax
movzx eax, byte [esi + 0xf]
shrd ecx, edx, 8
shr edx, 8
or ebx, ecx
mov ecx, dword [esp + 0x1c]
or ecx, edx
cdq
or ecx, edx
or ebx, eax
mov dword [esp + 0x1c], ecx
mov ecx, dword [esi + 0x10]
mov edx, ecx
mov esi, dword [esi + 0x14]
mov eax, esi
shld eax, edx, 0x10
mov dword [esp + 0x34], esi
mov dword [esp + 0x14], eax
mov eax, ecx
and eax, 0xff00
shl edx, 0x10
or edx, eax
mov eax, dword [esp + 0x14]
shld eax, edx, 0x10
mov dword [esp + 0x14], eax
mov eax, ecx
and eax, 0xff0000
shl edx, 0x10
or edx, eax
mov eax, dword [esp + 0x14]
shld eax, edx, 0x10
mov dword [esp + 0x14], eax
mov eax, ecx
and eax, 0xff000000
shl edx, 0x10
or edx, eax
mov eax, dword [esp + 0x14]
shld eax, edx, 8
mov dword [esp + 0x14], eax
shl edx, 8
movzx eax, byte [esp + 0x34]
mov dword [esp + 0x20], edx
mov edx, esi
shrd ecx, edx, 0x10
and esi, 0xff00
xor ecx, ecx
shr edx, 0x10
and edx, 0xff
or edx, esi
mov esi, dword [esp + 0x20]
shrd ecx, edx, 0x10
shr edx, 0x10
or edx, eax
shrd ecx, edx, 8
or esi, ecx
shr edx, 8
mov ecx, dword [esp + 0x18]
or dword [esp + 0x14], edx
movzx eax, byte [ecx + 0x17]
cdq
or dword [esp + 0x14], edx
or esi, eax
mov eax, ecx
mov dword [esp + 0x20], esi
mov ecx, dword [eax + 0x18]
mov esi, ecx
mov edx, dword [eax + 0x1c]
mov eax, edx
shrd esi, eax, 0x18
shr eax, 0x18
and esi, 0xff0000
mov eax, edx
shr eax, 8
and eax, 0xff00
or esi, eax
mov eax, edx
shrd ecx, eax, 8
shr edx, 0x18
and ecx, 0xff000000
shr eax, 8
or esi, ecx
mov eax, ebx
mov ecx, dword [esp + 0x1c]
or esi, edx
add esi, edi
or eax, ecx
je 0x42a3bf
mov dl, byte [esp + 0x13]
test dl, dl
je 0x42a3bf
cmp byte [esp + 0x12], 0
je 0x42a3bf
cmp dword [esp + 0x14], ecx
ja 0x42a3bf
jb 0x42a31b
cmp dword [esp + 0x20], ebx
jae 0x42a3bf
lea eax, [edi + 8]
cmp esi, eax
jb 0x42a3bf
cmp esi, dword [esp + 0x18]
jae 0x42a3bf
movzx eax, dl
cdq
push edx
push eax
push ecx
push ebx
lea ecx, [esp + 0x38]
call fcn.00429120
add esp, 0x10
test eax, eax
jne 0x42a3bf
mov eax, dword [esp + 0x28]
add eax, esi
cmp eax, esi
jb 0x42a3bf
cmp eax, dword [esp + 0x18]
ja 0x42a3bf
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x4c], eax
mov al, byte [esp + 0x12]
mov byte [esp + 0x50], al
mov al, byte [esp + 0x13]
mov dword [esp + 0x38], edi
mov dword [esp + 0x44], 0
mov dword [esp + 0x48], ebx
mov byte [esp + 0x51], al
mov dword [esp + 0x54], esi
mov dword [esp + 0x58], 0
call sym.fixios.exe_plist_new_array
mov dword [esp + 0x5c], eax
test eax, eax
je 0x42a3bf
mov edx, dword [esp + 0x20]
lea ecx, [esp + 0x38]
call fcn.00429fa0
mov ecx, dword [ebp + 0x10]
mov dword [ecx], eax
mov ecx, dword [esp + 0x5c]
test ecx, ecx
je 0x42a3bf
call fcn.00427a00
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret