Function at 0x75e48608
Capabilities:
Query environment variable
Read file on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x45c
mov eax, dword [0x75ea0720]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
or dword [ebp - 0x428], 0xffffffff
push ebx
push esi
mov esi, dword [ebp + 0x18]
xor ebx, ebx
push edi
mov edi, dword [ebp + 0x1c]
mov dword [ebp - 0x430], eax
mov dword [ebp - 0x42c], esi
mov dword [ebp - 0x424], ebx
cmp esi, ebx
je 0x75e4aa75
mov edx, dword [ebp + 0x20]
cmp edx, ebx
jbe 0x75e4866e
mov ecx, esi
mov eax, edi
sub ecx, edi
cmp esi, ebx
je 0x75e48660
mov dword [ecx + eax], ebx
cmp edi, ebx
jne 0x75e6cb58
add eax, 4
dec edx
jne 0x75e48659
push dword [ebp - 0x430]
call fcn.75e484aa
cmp eax, 0x646d632e
je 0x75e487a3
cmp eax, 0x6669702e
je 0x75e487a3
cmp eax, 0x6b6e6c2e
je 0x75e487a3
cmp eax, 0x6d6f632e
je 0x75e487a3
cmp eax, 0x7461622e
je 0x75e487a3
push 0x104
lea eax, [ebp - 0x420]
push eax
push dword [ebp - 0x430]
call dword [sym.imp.kernel32.dll_ExpandEnvironmentStringsW]
xor eax, eax
mov word [ebp - 0x21a], ax
lea eax, [ebp - 0x420]
push eax
call fcn.75e487bf
test eax, eax
jne 0x75e6cb60
push ebx
lea eax, [ebp - 0x218]
push eax
push 0x104
push ebx
lea eax, [ebp - 0x420]
push eax
push ebx
call dword [sym.imp.kernel32.dll_SearchPathW]
test eax, eax
je 0x75e6cb8e
push 0x22
push ebx
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.kernel32.dll_LoadLibraryExW]
mov dword [ebp - 0x430], eax
push ebx
cmp eax, ebx
je 0x75e4a926
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x45c], ecx
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0x458], ecx
mov ecx, dword [ebp + 0x14]
mov dword [ebp - 0x454], ecx
mov ecx, dword [ebp + 0x20]
mov dword [ebp - 0x448], ecx
mov ecx, dword [ebp + 0x24]
push ebx
mov dword [ebp - 0x444], ecx
lea ecx, [ebp - 0x45c]
push ecx
push 0x75e48aae
push 0xe
push eax
mov dword [ebp - 0x450], esi
mov dword [ebp - 0x44c], edi
mov dword [ebp - 0x440], ebx
mov dword [ebp - 0x43c], ebx
call dword [sym.imp.kernel32.dll_EnumResourceNamesExW]
push dword [ebp - 0x430]
call dword [sym.imp.kernel32.dll_FreeLibrary]
cmp esi, ebx
je 0x75e6cb7d
mov eax, dword [ebp - 0x43c]
mov dword [ebp - 0x424], eax
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x424]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.75e36120
leave
ret 0x20
mov esi, dword [sym.imp.kernel32.dll_CreateFileW]
mov edi, 0x10000080
push edi
push 3
push ebx
push 3
push 0x80000100
lea eax, [ebp - 0x218]
push eax
call esi
mov dword [ebp - 0x428], eax
push ebx
cmp eax, 0xffffffff
je 0x75e4aa4d
or dword [ebp - 0x434], 0xffffffff
or dword [ebp - 0x430], 0xffffffff
lea ecx, [ebp - 0x434]
push ecx
push ebx
push eax
call dword [sym.imp.kernel32.dll_SetFileTime]
push ebx
lea eax, [ebp - 0x438]
push eax
push 0xc
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x428]
call dword [sym.imp.kernel32.dll_ReadFile]
cmp dword [ebp - 0x438], 0xc
jne 0x75e4a9d0
movzx eax, word [ebp - 0x10]
cmp eax, ebx
jne 0x75e6cb9d
cmp word [ebp - 0xe], 1
jne 0x75e6cc18
push dword [ebp + 0x24]
lea eax, [ebp - 0x218]
push dword [ebp - 0x42c]
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push eax
call fcn.75e4a9f3
mov dword [ebp - 0x424], eax
cmp dword [ebp - 0x428], 0xffffffff
je 0x75e487a3
push dword [ebp - 0x428]
call dword [sym.imp.kernel32.dll_CloseHandle]
jmp 0x75e487a3
push edi
push 3
push ebx
push 1
push 0x80000000
lea eax, [ebp - 0x218]
push eax
call esi
mov dword [ebp - 0x428], eax
cmp eax, 0xffffffff
jne 0x75e4a972
jmp 0x75e6cb88
cmp edi, ebx
jne 0x75e4864c
jmp 0x75e4866e
je 0x75e4a9ac
jmp 0x75e4a9d0
or dword [eax], 0xffffffff
jmp 0x75e48668
lea eax, [ebp - 0x420]
push eax
push 0x104
lea eax, [ebp - 0x218]
push eax
call fcn.75e46dea
jmp 0x75e48709
mov eax, dword [ebp - 0x440]
jmp 0x75e4879d
mov esi, dword [ebp - 0x42c]
neg esi
sbb esi, esi
mov dword [ebp - 0x424], esi
jmp 0x75e4a9d0
cmp eax, 0x4952
je 0x75e6cbdf
cmp eax, 0x4d42
jne 0x75e4a9d0
test dword [ebp + 0x24], 0x10000
jne 0x75e4a9d0
push dword [ebp + 0x24]
lea eax, [ebp - 0x218]
push dword [ebp - 0x42c]
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push eax
call fcn.75e88217
jmp 0x75e4a9ca
test dword [ebp + 0x24], 0x10000
jne 0x75e4a9d0
mov eax, 0x4646
cmp word [ebp - 0xe], ax
jne 0x75e4a9d0
mov eax, 0x4341
cmp word [ebp - 8], ax
jne 0x75e4a9d0
mov eax, 0x4e4f
cmp word [ebp - 6], ax
jmp 0x75e4aa82
cmp word [ebp - 0xe], 2
jmp 0x75e4aa82