Function at 0x42a360
Capabilities:
Get file size
Read file on windows
Write file on windows

Disassembly:
push ebp
lea ebp, [esp - 0xb08]
sub esp, 0xb88
mov eax, dword [0x451fbc]
xor eax, ebp
mov dword [ebp + 0xb04], eax
push ebx
push esi
push edi
mov edi, dword [ebp + 0xb10]
push 0x208
xor ebx, ebx
lea eax, [ebp + 0x8fc]
push ebx
push eax
mov esi, ecx
call fcn.0042bbb0
add esp, 0xc
push 0x104
lea eax, [ebp + 0x8fc]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push str...whitelist.dat
lea eax, [ebp + 0x8fc]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
test eax, eax
jne 0x42a3cc
inc eax
jmp 0x42a6ec
push ebx
push 0x80
push 2
push ebx
push 3
push 0x40000000
lea eax, [ebp + 0x8fc]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x58], eax
cmp eax, 0xffffffff
jne 0x42a3fe
call dword [sym.imp.KERNEL32.dll_GetLastError]
xor eax, eax
jmp 0x42a6ec
lea ecx, [ebp - 0x78]
push ecx
push eax
mov dword [ebp - 0x78], ebx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
push 0x10
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x74]
push ebx
push eax
mov dword [ebp - 0x50], ebx
call fcn.0042bbb0
add esp, 0xc
push ebx
lea eax, [ebp - 0x7c]
push eax
push 0x10
lea eax, [ebp - 0x74]
push eax
push dword [ebp - 0x58]
mov dword [ebp - 0x7c], ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
cmp dword [ebp - 0x70], ebx
je 0x42a447
cmp dword [ebp - 0x70], 2
jb 0x42a6d2
push 0x4a0
lea eax, [ebp - 0x44]
push ebx
push eax
call fcn.0042bbb0
lea eax, [edi + 0x20c]
push eax
lea eax, [edi + 4]
push eax
push dword [edi]
mov edi, 0x250
push str._d_s_s
lea eax, [ebp - 0x44]
push edi
push eax
call fcn.0040db88
add esp, 0x24
lea eax, [ebp - 0x44]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
cmp eax, 0x3fffffff
jle 0x42a491
mov dword [ebp - 0x5c], ebx
jmp 0x42a4ad
lea ebx, [eax + eax]
mov eax, ebx
call fcn.0042f610
mov eax, esp
push 3
push ebx
lea ecx, [ebp - 0x44]
push ecx
push eax
call fcn.00422a53
mov dword [ebp - 0x5c], eax
mov eax, dword [esi + 0x18]
sub eax, dword [esi + 0x14]
add esi, 8
cdq
mov ecx, edi
idiv ecx
mov ebx, eax
xor eax, eax
imul ebx, ebx, 0x253
cmp dword [ebp - 0x4c], eax
jne 0x42a4cd
push 0x10
pop ebx
cmp dword [ebp - 0x5c], eax
je 0x42a4e1
push 0x25a
push dword [ebp - 0x5c]
call fcn.0042f9f1
pop ecx
pop ecx
add eax, 5
add ebx, eax
push 0x4550b8
push ebx
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x4c], ebx
call fcn.0042f9e6
mov ebx, eax
pop ecx
pop ecx
mov dword [ebp - 0x60], ebx
test ebx, ebx
je 0x42a6d0
push dword [ebp - 0x4c]
push 0
push ebx
call fcn.0042bbb0
add esp, 0xc
push 2
pop eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x70], eax
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
mov ecx, edi
cdq
idiv ecx
mov dword [ebp - 0x74], 0x4c573351
test eax, eax
jbe 0x42a542
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
cdq
idiv ecx
inc eax
mov dword [ebp - 0x68], eax
jmp 0x42a549
mov dword [ebp - 0x68], 1
push 0x10
lea eax, [ebp - 0x74]
push eax
push ebx
call fcn.0042ed70
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
mov ecx, edi
cdq
idiv ecx
and dword [ebp - 0x50], 0
and dword [ebp - 0x54], 0
add esp, 0xc
add ebx, 0x10
test eax, eax
jbe 0x42a66d
push 0x4a0
lea eax, [ebp + 0x45c]
push 0
push eax
call fcn.0042bbb0
add esp, 0xc
push dword [ebp - 0x54]
mov ecx, esi
call fcn.0042a054
push dword [ebp - 0x54]
mov ecx, esi
mov dword [ebp - 0x48], eax
call fcn.0042a054
add eax, 0x20c
push eax
push dword [ebp - 0x54]
mov ecx, esi
call fcn.0042a054
add eax, 4
push eax
mov eax, dword [ebp - 0x48]
push dword [eax]
lea eax, [ebp + 0x45c]
push str._d_s_s
push edi
push eax
call fcn.0040db88
add esp, 0x18
lea eax, [ebp + 0x45c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
cmp eax, 0x3fffffff
jle 0x42a5ec
and dword [ebp - 0x48], 0
jmp 0x42a611
add eax, eax
mov dword [ebp - 0x48], eax
call fcn.0042f610
mov eax, esp
push 3
push dword [ebp - 0x48]
lea ecx, [ebp + 0x45c]
push ecx
push eax
call fcn.00422a53
mov dword [ebp - 0x48], eax
test eax, eax
jne 0x42a615
xor eax, eax
jmp 0x42a624
push 0x25a
push dword [ebp - 0x48]
call fcn.0042f9f1
pop ecx
pop ecx
add eax, 5
mov dword [ebp - 0x4c], eax
push 4
lea eax, [ebp - 0x4c]
push eax
push ebx
call fcn.0042ed70
mov eax, dword [ebp - 0x4c]
add eax, 0xfffffffc
push eax
push dword [ebp - 0x48]
add ebx, 4
push ebx
call fcn.0042ed70
mov eax, dword [ebp - 0x4c]
add dword [ebp - 0x50], eax
lea ebx, [ebx + eax - 4]
mov eax, dword [esi + 0x10]
sub eax, dword [esi + 0xc]
mov ecx, edi
cdq
idiv ecx
add esp, 0x18
inc dword [ebp - 0x54]
cmp dword [ebp - 0x54], eax
jb 0x42a576
push 4
lea eax, [ebp - 0x64]
push eax
push ebx
call fcn.0042ed70
mov eax, dword [ebp - 0x64]
add eax, 0xfffffffc
push eax
push dword [ebp - 0x5c]
add ebx, 4
push ebx
call fcn.0042ed70
mov esi, dword [ebp - 0x50]
add esi, dword [ebp - 0x64]
mov eax, dword [ebp - 0x60]
push esi
add eax, 0x10
push 0x4c573351
push eax
call fcn.0042a018
add esp, 0x24
xor edi, edi
push edi
push edi
push edi
push dword [ebp - 0x58]
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push edi
lea eax, [ebp - 0x80]
push eax
add esi, 0x10
push esi
push dword [ebp - 0x60]
mov dword [ebp - 0x80], edi
push dword [ebp - 0x58]
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [ebp - 0x50], eax
xor ebx, ebx
push dword [ebp - 0x58]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x60], ebx
je 0x42a6e9
push dword [ebp - 0x60]
call fcn.0042c033
pop ecx
mov eax, dword [ebp - 0x50]
lea esp, [ebp - 0x8c]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0xb04]
xor ecx, ebp
call fcn.0042bb9b
add ebp, 0xb08
leave
ret 4