Function at 0x436b50
Capabilities:
Enumerate threads

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x45d8f8
mov eax, dword fs:[0]
push eax
sub esp, 0x64
mov eax, dword [0x4714d0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor eax, eax
push eax
push 4
mov dword [ebp - 0x58], eax
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov edi, eax
cmp edi, 0xffffffff
je 0x436bb9
lea eax, [ebp - 0x44]
mov dword [ebp - 0x44], 0x1c
xorps xmm0, xmm0
push eax
push edi
movdqu xmmword [ebp - 0x40], xmm0
movq qword [ebp - 0x30], xmm0
call dword [sym.imp.KERNEL32.dll_Thread32First]
test eax, eax
jne 0x436bc0
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
jmp 0x436d47
xorps xmm0, xmm0
mov dword [ebp - 0x20], 0
movq qword [ebp - 0x28], xmm0
movlpd qword [ebp - 0x1c], xmm0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 4], 0
mov eax, dword [ebp + 8]
cmp dword [ebp - 0x38], eax
jne 0x436c38
push dword [ebp - 0x3c]
push 0
push 0x840
call dword [sym.imp.KERNEL32.dll_OpenThread]
mov esi, eax
test esi, esi
je 0x436c38
lea eax, [ebp - 0x1c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_QueryThreadCycleTime]
test eax, eax
je 0x436c38
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x6c]
push eax
mov dword [ebp - 0x6c], esi
call fcn.004373c0
lea eax, [ebp - 0x44]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_Thread32Next]
test eax, eax
jne 0x436bf0
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [ebp - 0x24]
xorps xmm0, xmm0
sub esi, dword [ebp - 0x28]
movlpd qword [ebp - 0x64], xmm0
mov eax, dword [ebp - 0x60]
mov edi, dword [ebp - 0x64]
sar esi, 4
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x48], edi
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
test esi, esi
jle 0x436cff
mov esi, dword [ebp - 0x28]
mov eax, dword [ebp - 0x4c]
add esi, 8
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x1c]
xorps xmm0, xmm0
push eax
movlpd qword [ebp - 0x1c], xmm0
push dword [esi - 8]
call dword [sym.imp.KERNEL32.dll_QueryThreadCycleTime]
test eax, eax
je 0x436cf4
mov edi, dword [esi + 4]
mov ecx, dword [ebp - 0x18]
mov edx, dword [esi]
cmp ecx, edi
jb 0x436cf1
mov eax, dword [ebp - 0x1c]
ja 0x436cbe
cmp eax, edx
jbe 0x436cf1
sub eax, edx
sbb ecx, edi
cmp ecx, dword [ebp - 0x50]
jb 0x436cf1
ja 0x436cd0
mov edi, dword [ebp - 0x48]
cmp eax, edi
jbe 0x436cf4
push dword [esi - 8]
mov edi, eax
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x48], edi
call dword [sym.imp.KERNEL32.dll_GetThreadId]
mov ecx, dword [ebp - 0x1c]
mov dword [esi], ecx
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x58], eax
mov dword [esi + 4], ecx
jmp 0x436cf4
mov edi, dword [ebp - 0x48]
add esi, 0x10
dec dword [ebp - 0x60]
jne 0x436c90
mov esi, dword [ebp - 0x4c]
cmp dword [ebp - 0x50], 0
ja 0x436d1b
jb 0x436d0b
test edi, edi
jne 0x436d1b
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp eax, 0x1e
jl 0x436c75
test esi, esi
jle 0x436d34
mov esi, dword [ebp - 0x28]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [esi]
call edi
dec dword [ebp - 0x4c]
lea esi, [esi + 0x10]
jne 0x436d28
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x436d44
push eax
call fcn.0043e223
add esp, 4
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0043d8bb
mov esp, ebp
pop ebp
ret 4