Function at 0x7099a0
Capabilities:
Hook routines via microsoft detours

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2e4
mov eax, dword [reloc.kernel32.dll_WaitForMultipleObjects]
xor eax, ebp
mov dword [ebp - 4], eax
mov ecx, dword fs:[0x18]
mov eax, dword [reloc.kernel32.dll_WaitForMultipleObjects]
cmp eax, dword [ecx + 0x24]
je 0x7099d7
mov eax, 0x10dd
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0070b13b
mov esp, ebp
pop ebp
ret
cmp dword [reloc.kernel32.dll_WaitForMultipleObjects], 0
push ebx
push esi
push edi
je 0x709b1d
mov ecx, dword fs:[0x18]
mov eax, dword [reloc.kernel32.dll_WaitForMultipleObjects]
cmp eax, dword [ecx + 0x24]
jne 0x709eee
mov edi, dword [reloc.kernel32.dll_WaitForMultipleObjects]
mov ebx, dword [reloc.kernel32.dll_WaitForMultipleObjects]
test edi, edi
je 0x709ad7
mov eax, dword [edi + 0x10]
mov esi, dword [edi + 0x14]
movzx eax, byte [eax + 0x36]
mov dword [ebp - reloc.kernel32.dll_WaitForMultipleObjects], eax
mov eax, dword [edi + 0xc]
mov dword [ebp - reloc.kernel32.dll_WaitForMultipleObjects], eax
lea eax, reloc.kernel32.dll_WaitForMultipleObjects
push eax
push esi
lea eax, reloc.kernel32.dll_WaitForMultipleObjects
push eax
lea eax, reloc.kernel32.dll_WaitForMultipleObjects
push eax
push 0xffffffffffffffff
call dword [0x10004018]
cmp eax, 0xc0000045
jne 0x709a82
push dword [ebp - 0x2d8]
push dword [ebp - 0x2d4]
call dword [0x10004024]
test al, al
je 0x709a82
lea eax, reloc.kernel32.dll_WaitForMultipleObjects
push eax
push esi
lea eax, reloc.kernel32.dll_WaitForMultipleObjects
push eax
lea eax, reloc.kernel32.dll_WaitForMultipleObjects
push eax
push 0xffffffffffffffff
call dword [0x10004018]
cmp dword [edi + 4], 0
jne 0x709aba
mov ebx, dword [edi + 0x10]
test ebx, ebx
je 0x709ab4
push 0x48
push 0
mov esi, ebx
push ebx
and esi, 0xffff0000
call fcn.0070b7d7
mov eax, dword [esi + 8]
add esp, 0xc
mov dword [ebx + 0x40], eax
mov dword [esi + 8], ebx
mov dword [edi + 0x10], 0
mov ebx, dword [reloc.kernel32.dll_WaitForMultipleObjects]
mov eax, dword fs:[0x18]
mov esi, dword [edi]
push edi
push 0
mov eax, dword [eax + 0x30]
push dword [eax + 0x18]
call ebx
mov edi, esi
test esi, esi
jne 0x709a10
mov dword [reloc.kernel32.dll_WaitForMultipleObjects], 0
call fcn.00709770
mov edi, dword [reloc.kernel32.dll_WaitForMultipleObjects]
test edi, edi
je 0x709eda
push 0
push dword [edi + 4]
call dword [0x1000402c]
mov eax, dword fs:[0x18]
mov esi, dword [edi]
push edi
push 0
mov eax, dword [eax + 0x30]
push dword [eax + 0x18]
call ebx
mov edi, esi
test esi, esi
jne 0x709af4
jmp 0x709eda
mov esi, dword [reloc.kernel32.dll_WaitForMultipleObjects]
mov dword [ebp - reloc.kernel32.dll_WaitForMultipleObjects], 0
test esi, esi
je 0x709b95
cmp dword [esi + 4], 0
mov ecx, dword [esi + 0x10]
je 0x709b58
movzx eax, byte [ecx + 0x36]
push eax
lea eax, [ecx + 0x20]
push eax
push dword [esi + 0xc]
call fcn.0070b7d1
mov ecx, dword [esi + 8]
add esp, 0xc
mov eax, dword [esi + 0xc]
mov dword [ecx], eax
jmp 0x709b8f
mov edx, dword [esi + 0xc]
mov ecx, dword [ecx + 0x44]
lea eax, [edx + 5]
mov byte [edx], 0xe9
sub ecx, eax
mov dword [edx + 1], ecx
add edx, 5
mov ecx, dword [esi + 0x10]
mov eax, dword [ecx + 0x40]
cmp edx, eax
jae 0x709b8a
sub eax, edx
push eax
push 0xcc
push edx
call fcn.0070b7d7
mov ecx, dword [esi + 0x10]
add esp, 0xc
mov eax, dword [esi + 8]
mov dword [eax], ecx
mov esi, dword [esi]
test esi, esi
jne 0x709b31
mov ebx, dword [reloc.kernel32.dll_WaitForMultipleObjects]
mov dword [ebp - reloc.kernel32.dll_WaitForMultipleObjects], ebx
test ebx, ebx
je 0x709cad
lea esp, [esp]
lea eax, reloc.kernel32.dll_WaitForMultipleObjects
mov dword [ebp - reloc.kernel32.dll_WaitForMultipleObjects], 0x10001
push eax
push dword [ebx + 4]
call dword [0x10004004]
test eax, eax
js 0x709c9d
mov esi, dword [reloc.kernel32.dll_WaitForMultipleObjects]
test esi, esi
je 0x709c9d
cmp dword [esi + 4], 0
mov ecx, dword [ebp - reloc.kernel32.dll_WaitForMultipleObjects]
je 0x709c39
mov edx, dword [esi + 0x10]
cmp ecx, edx
jb 0x709c93
lea eax, [edx + 4]
cmp ecx, eax
jae 0x709c93
xor eax, eax
lea edi, [edx + 0x38]
mov bl, byte [eax + edi]
mov dl, cl
sub dl, byte [esi + 0x10]
mov cl, bl
shr cl, 3
cmp cl, dl
je 0x709c2e
mov ecx, dword [ebp - reloc.kernel32.dll_WaitForMultipleObjects]
inc eax
cmp eax, 8
jb 0x709c07
xor bl, bl
movzx eax, bl
add eax, dword [esi + 0xc]
jmp 0x709c77
and bl, 7
movzx eax, bl
add eax, dword [esi + 0xc]
jmp 0x709c77
mov edx, dword [esi + 0xc]
cmp ecx, edx
jb 0x709c93
mov edi, dword [esi + 0x10]
movzx eax, byte [edi + 0x36]
add eax, edx
cmp ecx, eax
jae 0x709c93
xor edx, edx
nop
mov bl, byte [edx + edi + 0x38]
sub cl, byte [esi + 0xc]
mov al, bl
and al, 7
cmp al, cl
je 0x709c6f
mov ecx, dword [ebp - reloc.kernel32.dll_WaitForMultipleObjects]
inc edx
cmp edx, 8
jb 0x709c50
xor eax, eax
jmp 0x709c75
movzx eax, bl
shr eax, 3
add eax, edi
mov ebx, dword [ebp - reloc.kernel32.dll_WaitForMultipleObjects]
mov dword [ebp - reloc.kernel32.dll_WaitForMultipleObjects], eax
lea eax, reloc.kernel32.dll_WaitForMultipleObjects
push eax
push dword [ebx + 4]
call dword [0x1000401c]
mov esi, dword [esi]
test esi, esi
jne 0x709be0
mov ebx, dword [ebx]
mov dword [ebp - reloc.kernel32.dll_WaitForMultipleObjects], ebx
test ebx, ebx
jne 0x709bb0
mov edi, dword [reloc.kernel32.dll_WaitForMultipleObjects]
test edi, edi
je 0x709da1
mov ebx, dword [reloc.kernel32.dll_WaitForMultipleObjects]
mov eax, dword [edi + 0x10]
mov esi, dword [edi + 0x14]
movzx eax, byte [eax + 0x36]
mov dword [ebp - reloc.kernel32.dll_WaitForMultipleObjects], eax
mov eax, dword [edi + 0xc]
mov dword [ebp - reloc.kernel32.dll_WaitForMultipleObjects], eax
lea eax, reloc.kernel32.dll_WaitForMultipleObjects
push eax
push esi
lea eax, reloc.kernel32.dll_WaitForMultipleObjects
push eax
lea eax, reloc.kernel32.dll_WaitForMultipleObjects
push eax
push 0xffffffffffffffff
call ebx
cmp eax, 0xc0000045
jne 0x709d2b
push dword [ebp - 0x2d8]
push dword [ebp - 0x2dc]
call dword [0x10004024]
test al, al
je 0x709d2b
lea eax, reloc.kernel32.dll_WaitForMultipleObjects
push eax
push esi
lea eax, reloc.kernel32.dll_WaitForMultipleObjects
push eax
lea eax, reloc.kernel32.dll_WaitForMultipleObjects
push eax
push 0xffffffffffffffff
call ebx
mov eax, dword [edi + 0x10]
movzx eax, byte [eax + 0x36]
push eax
push dword [edi + 0xc]
push 0xffffffffffffffff
call dword [0x10004008]
cmp dword [edi + 4], 0
je 0x709d80
mov ebx, dword [edi + 0x10]
test ebx, ebx
je 0x709d7a
push 0x48
push 0
mov esi, ebx
push ebx
and esi, 0xffff0000
call fcn.0070b7d7
mov eax, dword [esi + 8]
add esp, 0xc
mov dword [ebx + 0x40], eax
mov dword [esi + 8], ebx
mov dword [edi + 0x10], 0
mov dword [ebp - reloc.kernel32.dll_WaitForMultipleObjects], 1
mov ebx, dword [reloc.kernel32.dll_WaitForMultipleObjects]
mov eax, dword fs:[0x18]
mov esi, dword [edi]
push edi
push 0
mov eax, dword [eax + 0x30]
push dword [eax + 0x18]
call dword [0x10004020]
mov edi, esi
test esi, esi
jne 0x709cc1
cmp dword [ebp - reloc.kernel32.dll_WaitForMultipleObjects], 0
mov dword [reloc.kernel32.dll_WaitForMultipleObjects], 0
je 0x709ea1
cmp dword [reloc.kernel32.dll_WaitForMultipleObjects], 0
jne 0x709ea1
mov ecx, dword [reloc.kernel32.dll_WaitForMultipleObjects]
mov ebx, 0x10006354
test ecx, ecx
je 0x709ea1
jmp 0x709de0
cmp dword [ecx], reloc.kernel32.dll_WaitForMultipleObjects
jne 0x709e94
lea edi, reloc.kernel32.dll_WaitForMultipleObjects
xor esi, esi
lea edx, [ecx + 0x88]
lea ebx, [ebx]
mov eax, dword [edx]
test eax, eax
je 0x709e16
cmp eax, ecx
jb 0x709e94
cmp eax, edi
jae 0x709e94
inc esi
add edx, 0x48
cmp esi, 0x38d
jb 0x709e00
mov eax, dword [ecx + 4]
mov esi, dword [reloc.kernel32.dll_WaitForMultipleObjects]
mov dword [ebx], eax
lea eax, reloc.kernel32.dll_WaitForMultipleObjects
push 0x8000
push eax
lea eax, reloc.kernel32.dll_WaitForMultipleObjects
mov dword [ebp - reloc.kernel32.dll_WaitForMultipleObjects], 0
push eax
push 0xffffffffffffffff
mov dword [ebp - reloc.kernel32.dll_WaitForMultipleObjects], ecx
call esi
cmp eax, 0xc0000045
jne 0x709e88
push dword [ebp - 0x2dc]
push dword [ebp - 0x2d4]
call dword [0x10004024]
test al, al
je 0x709e88
push 0x8000
lea eax, reloc.kernel32.dll_WaitForMultipleObjects
push eax
lea eax, reloc.kernel32.dll_WaitForMultipleObjects
push eax
push 0xffffffffffffffff
call esi
mov dword [reloc.kernel32.dll_WaitForMultipleObjects], 0
jmp 0x709e97
lea ebx, [ecx + 4]
mov ecx, dword [ebx]
test ecx, ecx
jne 0x709de0
call fcn.00709770
mov edi, dword [reloc.kernel32.dll_WaitForMultipleObjects]
test edi, edi
je 0x709eda
mov ebx, dword [reloc.kernel32.dll_WaitForMultipleObjects]
push 0
push dword [edi + 4]
call ebx
mov eax, dword fs:[0x18]
mov esi, dword [edi]
push edi
push 0
mov eax, dword [eax + 0x30]
push dword [eax + 0x18]
call dword [0x10004020]
mov edi, esi
test esi, esi
jne 0x709eb6
mov dword [reloc.kernel32.dll_WaitForMultipleObjects], 0
mov dword [reloc.kernel32.dll_WaitForMultipleObjects], 0
mov ecx, dword [ebp - 4]
mov eax, dword [reloc.kernel32.dll_WaitForMultipleObjects]
xor ecx, ebp
pop edi
pop esi
pop ebx
call fcn.0070b13b
mov esp, ebp
pop ebp
ret