Function at 0x140003310
Capabilities:
Check os version
Query environment variable

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x478
mov r14, rcx
mov r13, qword [0x1400f7448]
mov rax, qword [r13]
xor rax, rsp
mov qword [rsp + 0x470], rax
test rdx, rdx
je 0x140003421
mov esi, r8d
mov rbx, rdx
mov rcx, rdx
mov edx, 0x5c
call sub.api_ms_win_crt_private_l1_1_0.dll_strrchr
test rax, rax
je 0x1400036e1
mov rbp, rax
mov r15d, esi
sub rbp, rbx
lea rdi, [rbp + 1]
lea rcx, [rbp + 9]
call sub.mozglue.dll_malloc
mov rsi, rax
mov rcx, rax
mov rdx, rbx
mov r8, rdi
call sub.ntdll.dll_memcpy
movabs rax, 0x6c6c642e6c7578
mov qword [rsi + rbp + 1], rax
mov al, byte [rsi]
test al, al
je 0x140003437
xor ebx, ebx
mov rcx, rsi
nop word cs:[rax + rax]
cmp al, 0x2f
cmove rbx, rcx
cmp al, 0x5c
cmove rbx, rcx
movzx eax, byte [rcx + 1]
add rcx, 1
test al, al
jne 0x1400033b0
test rbx, rbx
je 0x140003437
sub rbx, rsi
cmp rbx, 0xf0
ja 0x1400036f7
lea rcx, [rsp + 0x150]
mov r9d, 0x104
mov rdx, rsi
mov r8, rbx
call fcn.140076310
movups xmm0, xmmword [0x1400f74a7]
movups xmmword [rsp + rbx + 0x150], xmm0
mov dword [rsp + rbx + 0x160], 0x747369
lea rax, [rsp + rbx]
add rax, 0x151
mov qword [rsp + 0x38], rax
jmp 0x14000345e
mov byte [r14 + 8], 1
mov byte [r14 + 4], 0
mov dword [r14], 0x80070057
jmp 0x14000377e
lea rax, [rsp + 0x150]
mov qword [rsp + 0x38], rax
movups xmm0, xmmword [str.dependentlibs.list]
movaps xmmword [rsp + 0x150], xmm0
mov dword [rsp + 0x15f], 0x747369
lea rcx, str.MOZ_RUN_GTEST
call sub.api_ms_win_crt_environment_l1_1_0.dll_getenv
test rax, rax
je 0x140003489
lea rdx, str..gtest
lea rcx, [rsp + 0x150]
mov r8d, 0x104
call fcn.140076540
lea rbp, [rsp + 0x260]
mov qword [rsp + 0x20], rbp
mov dword [rsp + 0x28], 0x104
lea r8, [rsp + 0x150]
mov ecx, 0xfde9
xor edx, edx
mov r9d, 0xffffffff
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea rdx, [0x1400f74e4]
mov rcx, rbp
call qword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__wfopen]
test rax, rax
je 0x1400036f7
mov rbx, rax
mov qword [rsp + 0x30], rsi
mov rax, qword [rsp + 0x38]
mov byte [rax], 0
lea rcx, [rsp + 0x40]
mov edx, 0x104
mov r8, rbx
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fgets
test rax, rax
je 0x14000370d
mov esi, r15d
mov r15, qword [rsp + 0x38]
lea rax, [rsp + 0x150]
sub r15, rax
lea r13, [rsp + 0x40]
jmp 0x140003539
mov rcx, r13
mov edx, 0x104
mov r8, rbx
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fgets
test rax, rax
je 0x14000370d
mov rcx, r13
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
mov r12, rax
test r12d, r12d
je 0x140003520
cmp byte [rsp + 0x40], 0x23
je 0x140003520
mov ecx, dword [0x140152674]
mov al, 1
cmp ecx, 0x9ffffff
ja 0x140003610
mov eax, dword [0x14014f004]
cmp eax, 0xa000001
jb 0x140003622
mov r8d, 0x110
lea rcx, [rsp + 0x26c]
xor edx, edx
call sub.ntdll.dll_memset
movabs rax, 0xa0000011c
mov qword [rsp + 0x260], rax
mov dword [rsp + 0x268], 0
xor ecx, ecx
mov edx, 2
mov r8b, 3
mov rdi, qword [sym.imp.ntdll.dll_VerSetConditionMask]
call rdi
mov rcx, rax
mov edx, 1
mov r8b, 3
call rdi
mov rcx, rax
mov edx, 0x20
mov r8b, 3
call rdi
mov rcx, rax
mov edx, 0x10
mov r8b, 3
call rdi
mov rcx, rbp
mov edx, 0x33
mov r8, rax
call qword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
test eax, eax
setne al
lea rcx, [0x140152674]
lea rdx, [0x14014f004]
cmove rcx, rdx
mov edx, 0xa000000
xchg dword [rcx], edx
test al, al
je 0x140003622
cmp dword [rsp + 0x40], 0x2d697061
je 0x140003520
shl r12, 0x20
movabs rax, 0xffffffff00000000
add rax, r12
sar rax, 0x20
cmp byte [rsp + rax + 0x40], 0xa
jne 0x140003643
mov byte [rsp + rax + 0x40], 0
sar r12, 0x20
add r12, r15
cmp r12, 0x104
ja 0x1400037ad
mov rcx, qword [rsp + 0x38]
mov rdx, r13
call sub.api_ms_win_crt_string_l1_1_0.dll_strcpy
mov qword [rsp + 0x20], rbp
mov dword [rsp + 0x28], 0x104
mov ecx, 0xfde9
xor edx, edx
lea r8, [rsp + 0x150]
mov r9d, 0xffffffff
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp esi, 1
jne 0x140003699
mov rcx, rbp
call fcn.140002750
mov rcx, rbp
xor edx, edx
mov r8d, 8
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
test rax, rax
je 0x1400037b7
mov rdi, rax
mov ecx, 0x10
call qword [sym.imp.mozglue.dll_moz_xmalloc]
mov rcx, qword [0x140150418]
mov qword [rax + 8], rcx
mov qword [rax], rdi
mov qword [0x140150418], rax
call qword [method.mozilla.PollPreXULSkeletonUIEvents__]
jmp 0x140003520
mov byte [r14 + 8], 1
mov byte [r14 + 4], 0
mov dword [r14], 0x80520009
jmp 0x14000377e
mov r12d, 0x80004005
xor edi, edi
mov byte [r14 + 8], 1
mov byte [r14 + 4], dil
mov dword [r14], r12d
jmp 0x140003776
mov rcx, rbx
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fclose
mov rax, qword [0x140150418]
mov rcx, qword [rax]
lea rdx, str.XRE_GetBootstrap
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
test rax, rax
je 0x140003759
mov qword [rsp + 0x260], 0
lea rcx, [rsp + 0x260]
call rax
mov byte [r14 + 8], 0
mov rax, qword [rsp + 0x260]
mov qword [r14], rax
jmp 0x14000376a
mov byte [r14 + 8], 1
mov byte [r14 + 4], 0
mov dword [r14], 0x80040111
mov r13, qword [0x1400f7448]
mov rsi, qword [rsp + 0x30]
mov rcx, rsi
call sub.mozglue.dll_free
mov rax, qword [rsp + 0x470]
xor rax, rsp
mov rcx, qword [r13]
cmp rcx, rax
jne 0x14000382e
mov rax, r14
add rsp, 0x478
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret
mov r12d, 0x80004005
xor edi, edi
jmp 0x140003815
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r12d, eax
mov rbp, qword [0x140150418]
mov dil, 1
test rbp, rbp
je 0x140003815
mov r15, qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov r13, qword [0x1400f7448]
mov rsi, qword [rsp + 0x30]
nop word cs:[rax + rax]
nop dword [rax]
mov rcx, qword [rbp]
call r15
mov rcx, qword [0x140150418]
mov rbp, qword [rcx + 8]
mov qword [0x140150418], rbp
call sub.mozglue.dll_free
test rbp, rbp
jne 0x1400037f0
jmp 0x140003821
mov r13, qword [0x1400f7448]
mov rsi, qword [rsp + 0x30]
mov rcx, rbx
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fclose
jmp 0x1400036ff
call fcn.1400763e0
int3