Function at 0x10012fd0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x124
mov eax, dword [0x1007a00c]
xor eax, ebp
mov dword [ebp - 0x10], eax
cmp byte [0x1007a828], 0
jne 0x1001328c
mov ebx, dword [ebp + 8]
mov byte [0x1007a828], 1
mov dword [0x1007a82c], ebx
push 0x1007a820
push 0x1007a02c
call fcn.10018320
add esp, 8
test bl, 2
jne 0x100132a1
test byte [0x1007a82c], 2
jne 0x100130e1
mov eax, dword [0x1007a848]
cmp eax, 0x3838
ja 0x100130ce
mov eax, dword [0x1007a03c]
cmp eax, 0x383a
jb 0x100130c5
lea esi, [ebp - 0x124]
xor ebx, ebx
push 0x114
push ebx
push esi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [esi - 8], 0x11c
mov dword [esi - 4], 0xa
mov dword [esi + 4], 0x3839
mov esi, dword [sym.imp.ntdll.dll_VerSetConditionMask]
mov edi, 3
push edi
push 2
push ebx
push ebx
call esi
push edi
push 1
push edx
push eax
call esi
push edi
push 4
push edx
push eax
call esi
push edi
push 0x20
push edx
push eax
call esi
push edi
push 0x10
push edx
push eax
call esi
lea ecx, [ebp - 0x12c]
push edx
push eax
push 0x37
push ecx
call dword [sym.imp.kernel32.dll_VerifyVersionInfoW]
test eax, eax
jne 0x100132cc
mov eax, 0x3839
xchg dword [0x1007a03c], eax
mov eax, dword [0x1007b50c]
test eax, eax
js 0x100130e1
push str.user32.dll
call dword [sym.imp.kernel32.dll_GetModuleHandleW]
test eax, eax
jne 0x100132dc
cmp dword [0x1007a7e4], 0
mov eax, 0x6c0064
mov dword [ebp - 0x12c], 0x74006e
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x124], 0x2e006c
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x11c], 0x6c
jne 0x1001312b
lea eax, [ebp - 0x12c]
push eax
call dword [sym.imp.kernel32.dll_LoadLibraryW]
mov dword [0x1007a7e4], eax
push 0x1007a798
call dword [sym.imp.kernel32.dll_InitializeCriticalSection]
push 8
call sym.mozglue.dll_moz_xmalloc
add esp, 4
xor edi, edi
mov esi, eax
mov dword [eax + 4], edi
push 0x18
call sym.mozglue.dll_moz_xmalloc
add esp, 4
mov dword [esi], eax
mov dword [0x1007a790], esi
lea esi, [ebp - 0x130]
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [esi], edi
lea edi, [ebp - 0x12c]
mov dword [edi], 0x1007a834
mov dword [edi + 4], 0x1007a7b0
mov dword [edi + 8], str.LdrLoadDll
mov dword [edi + 0xc], 0x100132f0
mov byte [edi + 0x10], 1
push esi
push edi
push 0x10014a30
push 0x1007a838
call dword [sym.imp.kernel32.dll_InitOnceExecuteOnce]
test eax, eax
je 0x100132c0
cmp dword [ebp - 0x130], 0
je 0x100132c0
cmp byte [0x1007a830], 0
jne 0x100131d8
call sym.mozglue.dll_bool___cdecl_mozilla::IsWin32kLockedDown_void_
test al, al
jne 0x100131d8
push str.user32.dll
call dword [sym.imp.kernel32.dll_LoadLibraryW]
cmp dword [0x1007a81c], 0
mov dword [ebp - 0x12c], 0x65006b
mov dword [ebp - 0x128], 0x6e0072
mov dword [ebp - 0x124], 0x6c0065
mov dword [ebp - 0x120], 0x320033
mov dword [ebp - 0x11c], 0x64002e
mov dword [ebp - 0x118], 0x6c006c
mov word [ebp - 0x114], 0
jne 0x10013232
push edi
call dword [sym.imp.kernel32.dll_LoadLibraryW]
mov dword [0x1007a81c], eax
push str.WRusr.dll
call dword [sym.imp.kernel32.dll_GetModuleHandleW]
test eax, eax
jne 0x1001328c
mov dword [ebp - 0x12c], 0x1007a840
mov dword [ebp - 0x128], 0x1007a7e8
mov dword [ebp - 0x124], str.BaseThreadInitThunk
mov dword [ebp - 0x120], 0x10013850
mov dword [ebp - 0x130], 0
mov byte [ebp - 0x11c], 1
push esi
push edi
push 0x10014a30
push 0x1007a844
call dword [sym.imp.kernel32.dll_InitOnceExecuteOnce]
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10069260
add esp, 0x124
pop esi
pop edi
pop ebx
pop ebp
ret
push 0
call dword [sym.imp.kernel32.dll_GetModuleHandleW]
push str.NativeNtBlockSet_Write
push eax
call dword [sym.imp.kernel32.dll_GetProcAddress]
test eax, eax
je 0x1001328c
mov dword [0x1007a028], eax
jmp 0x1001328c
mov byte [0x1007a83c], 1
jmp 0x100131bb
mov eax, 0x3839
xchg dword [0x1007a848], eax
jmp 0x100130ce
mov byte [0x1007a830], 1
jmp 0x100130e1