Function at 0x56b780
Capabilities:
Get file size
Read file on windows
Write file on windows

Disassembly:
sub esp, 0x278
push ebx
push ebp
push esi
push edi
lea eax, [esp + 0x3c]
mov esi, ecx
mov ecx, dword [esp + 0x28c]
push eax
xor edi, edi
push ecx
mov dword [esp + 0x18], edi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov ebx, eax
cmp dword [esi + 0x20], edi
mov dword [esp + 0x38], ebx
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], edi
mov dword [esp + 0x18], edi
mov dword [esp + 0x1c], edi
je 0x56b81d
mov edx, dword [esp + 0x290]
push 0x104
add edx, 0x48
push edx
lea eax, [esp + 0x88]
push eax
call dword [0x5d2618]
lea ecx, [esp + 0x8c]
add esp, 0xc
test ecx, ecx
mov word [esp + 0x286], di
je 0x56b800
mov edx, ecx
push edx
call dword [0x5d2620]
add esp, 4
mov ecx, dword [esi + 0x20]
lea eax, [esp + 0x80]
push eax
call fcn.00597b50
mov ecx, dword [esi + 0x20]
mov edx, dword [ecx]
push 0xaaaaaa1
call dword [edx + 0xc]
mov edi, dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push 0x40000
push 0x42
call edi
mov ebp, dword [sym.imp.KERNEL32.dll_GlobalLock]
push eax
call ebp
test eax, eax
mov dword [esp + 0x2c], eax
push 0
je 0x56bc43
push 0
push 0
call fcn.0058c670
push 0
push 0
push 0
mov dword [esp + 0x3c], eax
call fcn.0058c670
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x3c]
test eax, eax
jl 0x56bc23
jg 0x56b875
test ebx, ebx
jbe 0x56bc23
push 0x40a49
push 0x42
call edi
push eax
call ebp
mov edi, eax
xor ebp, ebp
cmp edi, ebp
je 0x56bc09
mov eax, dword [esi + 0x2c]
push 0x38
push str.1.1.3
push ebp
push 8
push 0xfffffffffffffff1
push 8
push eax
lea ecx, [esp + 0x64]
push ecx
mov dword [esp + 0x88], ebp
mov dword [esp + 0x8c], ebp
mov dword [esp + 0x90], ebp
call fcn.00591230
test eax, eax
jne 0x56bbea
mov dword [esp + 0x54], edi
mov dword [esp + 0x58], 0x40a49
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x28]
mov eax, ebx
sub eax, dword [esp + 0x24]
sbb ecx, edx
mov dword [esp + 0x34], ebp
js 0x56b8fc
jg 0x56b8f1
cmp eax, 0x40000
jbe 0x56b8fc
mov ebx, 0x40000
mov dword [esp + 0x44], ebp
jmp 0x56b902
mov ebx, eax
mov dword [esp + 0x44], ecx
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28c]
push ebp
lea edx, [esp + 0x38]
push edx
push ebx
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov edx, dword [esp + 0x2c]
mov ebp, eax
test ebp, ebp
mov dword [esp + 0x48], edx
mov dword [esp + 0x4c], ebx
je 0x56bb5d
mov ecx, dword [esi + 0x20]
test ecx, ecx
je 0x56b968
call fcn.005979b0
cmp eax, 0x8004e00c
mov dword [esp + 0x10], eax
je 0x56ba7d
mov ecx, dword [esi + 0x20]
mov edx, dword [esp + 0x34]
mov eax, dword [ecx]
push 0
push edx
call dword [eax + 0x10]
test eax, eax
mov dword [esp + 0x10], eax
jl 0x56ba7d
mov eax, dword [esp + 0x34]
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x28]
add edx, eax
adc ecx, 0
mov dword [esp + 0x28], ecx
mov ecx, dword [esp + 0x2c]
push ebx
mov dword [esp + 0x28], edx
mov edx, dword [esp + 0x34]
push ecx
push edx
call fcn.0058c670
mov dword [esp + 0x30], eax
push 0
lea eax, [esp + 0x4c]
push eax
call fcn.0058fcd0
test eax, eax
jne 0x56ba59
mov ecx, dword [esp + 0x58]
cmp ecx, 0x40a49
jae 0x56ba28
xor edx, edx
mov eax, 0x40a49
sub eax, ecx
push edx
mov ecx, edx
sbb ecx, edx
lea edx, [esp + 0x18]
push edx
push eax
mov eax, dword [esi + 0xc]
push edi
push eax
mov dword [esp + 0x58], ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ebp, eax
test ebp, ebp
je 0x56ba28
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x20]
push ecx
push edi
push edx
call fcn.0058c670
mov edx, dword [esi + 0x18]
mov ebx, dword [esi + 0x1c]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x14]
xor ecx, ecx
add edx, eax
mov dword [esi + 0x18], edx
mov edx, dword [esp + 0x18]
adc ebx, ecx
add edx, eax
mov eax, dword [esp + 0x1c]
adc eax, ecx
mov dword [esi + 0x1c], ebx
mov dword [esp + 0x18], edx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x58], 0x40a49
mov dword [esp + 0x54], edi
mov eax, dword [esp + 0x3c]
cmp dword [esp + 0x28], eax
jg 0x56ba7d
jl 0x56ba3e
mov ecx, dword [esp + 0x38]
cmp dword [esp + 0x24], ecx
jae 0x56ba7d
test ebp, ebp
je 0x56bb78
mov eax, dword [esp + 0x10]
test eax, eax
jl 0x56ba7d
mov ebx, dword [esp + 0x38]
xor ebp, ebp
jmp 0x56b8d2
cmp eax, 0xfffffffc
push 0
mov ecx, esi
push str.CompressZipFile
jne 0x56bb2a
push 0xaaaaaaa3
call fcn.0056a380
mov dword [esp + 0x10], 0x8007000e
test ebp, ebp
je 0x56bb78
push 4
lea edx, [esp + 0x4c]
push edx
call fcn.0058fcd0
mov ebx, eax
cmp ebx, 1
je 0x56baa0
test ebx, ebx
jne 0x56bbc3
mov ecx, dword [esp + 0x58]
xor edx, edx
mov eax, 0x40a49
sub eax, ecx
push edx
mov ecx, edx
sbb ecx, edx
lea edx, [esp + 0x18]
push edx
push eax
mov eax, dword [esi + 0xc]
push edi
push eax
mov dword [esp + 0x58], ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x56bb15
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x20]
push ecx
push edi
push edx
call fcn.0058c670
mov edx, dword [esi + 0x18]
mov ebp, dword [esi + 0x1c]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x14]
xor ecx, ecx
add edx, eax
mov dword [esi + 0x18], edx
mov edx, dword [esp + 0x18]
adc ebp, ecx
add edx, eax
mov eax, dword [esp + 0x1c]
adc eax, ecx
mov dword [esi + 0x1c], ebp
mov dword [esp + 0x18], edx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x58], 0x40a49
mov dword [esp + 0x54], edi
cmp ebx, 1
jne 0x56ba85
lea eax, [esp + 0x48]
push eax
call fcn.0058ff70
jmp 0x56bb78
cmp eax, 0xfffffffb
jne 0x56bb46
push 0xaaaaaaa7
call fcn.0056a380
mov dword [esp + 0x10], 0x8004e03c
jmp 0x56ba7d
push 0xaaaaaaa9
call fcn.0056a380
mov dword [esp + 0x10], 0x8004e009
jmp 0x56ba7d
push 0
push str.CompressZipFile
push 0xaaaaaaaa
mov ecx, esi
call fcn.0056a380
mov dword [esp + 0x10], 0x8004e008
xor ebp, ebp
mov ebx, dword [sym.imp.KERNEL32.dll_GlobalHandle]
push edi
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
push edi
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
cmp dword [esp + 0x10], ebp
jl 0x56bc23
mov eax, dword [esp + 0x290]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1c]
mov dword [eax + 0x24], ecx
mov ecx, dword [esp + 0x30]
mov dword [eax + 0x28], edx
mov edx, dword [esp + 0x20]
mov dword [eax + 0x20], ecx
mov dword [eax + 0x1c], edx
jmp 0x56bc23
push 0
push str.CompressZipFile
push 0xaaaaaaaa
mov ecx, esi
call fcn.0056a380
lea eax, [esp + 0x48]
push eax
mov dword [esp + 0x14], 0x8004e009
call fcn.0058ff70
jmp 0x56bb78
push ebp
push str.CompressZipFile
push 0xaaaaaaa3
mov ecx, esi
call fcn.0056a380
mov dword [esp + 0x10], 0x8007000e
jmp 0x56bb7a
push ebp
push str.CompressZipFile
push 0xaaaaaaa3
mov ecx, esi
call fcn.0056a380
mov dword [esp + 0x10], 0x8007000e
mov edi, dword [esp + 0x2c]
mov ebx, dword [sym.imp.KERNEL32.dll_GlobalHandle]
push edi
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
push edi
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
jmp 0x56bc5c
push str.CompressZipFile
push 0xaaaaaaa3
mov ecx, esi
call fcn.0056a380
mov dword [esp + 0x10], 0x8007000e
mov esi, dword [esi + 0x20]
test esi, esi
je 0x56bc6c
mov eax, dword [esi]
push 0
mov ecx, esi
call dword [eax + 0xc]
mov eax, dword [esp + 0x10]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x278
ret 8