Function at 0x442150
Capabilities:
Check for time delay via queryperformancecounter
Enumerate pe sections

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x68
mov ebx, dword [ebp + 0xc]
mov esi, dword [ebx + 0x10]
mov eax, dword [esi + 0x48]
mov dword [esp + 0x14], eax
test eax, eax
je 0x4424e4
mov ecx, dword [esi + 0x80]
mov eax, esi
cmp ecx, 2
je 0x442219
mov eax, esi
cmp ecx, 1
jne 0x44227c
mov edi, dword [esi + 0x90]
mov eax, dword [esi + 0x94]
mov dword [esp + 8], eax
lea eax, [esp + 0x38]
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
lea eax, [esp + 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
fild qword [esp + 0x38]
fstp qword [esp + 0x50]
movsd xmm0, qword [0x523460]
divsd xmm0, qword [esp + 0x50]
fild qword [esp + 0x30]
fstp qword [esp + 0x58]
mulsd xmm0, qword [esp + 0x58]
movsd qword [esp + 0x28], xmm0
fld qword [esp + 0x28]
fnstcw word [esp + 6]
movzx eax, word [esp + 6]
or eax, 0xc00
mov word [esp + 0x12], ax
fldcw word [esp + 0x12]
fistp qword [esp + 0x28]
fldcw word [esp + 6]
cmp dword [esp + 0x28], edi
mov eax, dword [esp + 0x2c]
sbb eax, dword [esp + 8]
mov eax, dword [ebx + 0x10]
jge 0x442274
test eax, eax
je 0x4424dd
mov ecx, dword [eax + 0x48]
test ecx, ecx
je 0x4424d6
cmp dword [ebx + 8], 1
jne 0x442260
lea eax, [ebx + 8]
mov dword [ebx + 8], 0
mov edx, dword [ecx + 0xa4]
mov dword [ebx + 0xc], edx
mov dword [edx], ebx
mov dword [ecx + 0xa4], eax
movq xmm0, qword [ecx + 0xa8]
pcmpeqd xmm1, xmm1
psubd xmm0, xmm1
movq qword [ecx + 0xa8], xmm0
mov eax, dword [ebx + 0x10]
mov dword [esi + 0x94], 0x80000000
mov dword [esi + 0x90], 0
test eax, eax
je 0x442538
cmp dword [ebx], 1
jne 0x4424f9
mov dword [ebx], 0
mov ecx, dword [eax + 0x12c]
mov dword [ebx + 4], ecx
mov dword [ecx], ebx
mov dword [eax + 0x12c], ebx
mov ecx, dword [eax + 0x130]
mov edx, dword [eax + 0x134]
lea edi, [ecx + 1]
mov dword [eax + 0x130], edi
cmp edi, edx
jb 0x44250e
sub ecx, edx
add ecx, 2
cmp edx, ecx
ja 0x442523
sub esp, 8
mov dword [esp + 4], eax
call fcn.00442bb0
add esp, 8
mov eax, dword [esi + 0x120]
test eax, eax
je 0x4424ce
lea ebx, [eax - 1]
jmp 0x4423bf
lea eax, [esp + 0x38]
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
lea eax, [esp + 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
fild qword [esp + 0x38]
fstp qword [esp + 0x40]
movsd xmm0, qword [0x523460]
divsd xmm0, qword [esp + 0x40]
fild qword [esp + 0x30]
fstp qword [esp + 0x48]
mulsd xmm0, qword [esp + 0x48]
movsd qword [esp + 0x20], xmm0
fld qword [esp + 0x20]
fnstcw word [esp + 4]
movzx eax, word [esp + 4]
or eax, 0xc00
mov word [esp + 0x10], ax
fldcw word [esp + 0x10]
fistp qword [esp + 0x20]
fldcw word [esp + 4]
mov eax, dword [esp + 0x14]
movsd xmm0, qword [eax + 0x60]
mulsd xmm0, qword [0x523468]
movsd qword [esp + 0x18], xmm0
fld qword [esp + 0x18]
fnstcw word [esp + 2]
movzx eax, word [esp + 2]
or eax, 0xc00
mov word [esp + 0xe], ax
fldcw word [esp + 0xe]
fistp qword [esp + 0x18]
fldcw word [esp + 2]
mov eax, dword [esp + 0x18]
add eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
adc ecx, dword [esp + 0x24]
mov dword [edi + 0x90], eax
mov dword [edi + 0x94], ecx
nop word cs:[eax + eax]
dec ebx
mov eax, dword [esi + 0x120]
cmp ebx, eax
jae 0x4424ce
mov ecx, dword [esi + 0x124]
mov edx, dword [ecx + ebx*4]
mov edi, dword [esp + 0x14]
mov edi, dword [edi + 0x94]
test edi, edi
je 0x4423ec
nop word cs:[eax + eax]
cmp dword [edi + 0x4c], edx
je 0x442440
mov edi, dword [edi + 0x40]
test edi, edi
jne 0x4423e0
xor edi, edi
nop
cmp dword [ecx + edi*4], edx
je 0x442400
inc edi
cmp eax, edi
jne 0x4423f0
jmp 0x4423b0
cmp eax, edi
je 0x4423b0
mov edx, eax
dec edx
mov dword [esi + 0x120], edx
je 0x4424b8
mov eax, dword [ecx + eax*4 - 4]
mov dword [ecx + edi*4], eax
mov eax, dword [esi + 0x120]
shl eax, 2
push eax
push ecx
call sub.api_ms_win_crt_heap_l1_1_0.dll_realloc
add esp, 8
test eax, eax
je 0x4423b0
mov dword [esi + 0x124], eax
jmp 0x4423b0
cmp dword [edi + 0x80], 1
jne 0x4423b0
mov eax, dword [edi + 0x12c]
mov eax, dword [eax + 4]
mov eax, dword [eax]
test eax, eax
je 0x4422eb
mov ecx, dword [eax + 0x10]
test ecx, ecx
je 0x4424dd
mov ecx, dword [ecx + 0x48]
test ecx, ecx
je 0x4424d6
cmp dword [eax + 8], 1
jne 0x4422eb
lea edx, [eax + 8]
mov dword [esp + 8], edx
mov dword [eax + 8], 0
mov edx, dword [ecx + 0xa4]
mov dword [eax + 0xc], edx
mov dword [edx], eax
mov eax, dword [esp + 8]
mov dword [ecx + 0xa4], eax
movq xmm0, qword [ecx + 0xa8]
psubd xmm0, xmmword [0x523470]
movq qword [ecx + 0xa8], xmm0
jmp 0x4422eb
push ecx
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
add esp, 4
xor eax, eax
mov dword [esi + 0x124], eax
jmp 0x4423b0
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
push 0xe3cf
jmp 0x4424e9
push 0xe3cc
jmp 0x44253d
push 0xe3e8
push str..._Server_include_OPCUA_open62541_open62541.c
push 0x529f48
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
push 0xe3ae
push str..._Server_include_OPCUA_open62541_open62541.c
push str.__n___localEntry.tqe_next_____UA_Notification_0x01_
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
push 0xe3ba
push str..._Server_include_OPCUA_open62541_open62541.c
push str.mon__queueSize___mon__eventOverflows
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
push 0xe3bb
push str..._Server_include_OPCUA_open62541_open62541.c
push str.mon__eventOverflows___mon__queueSize___mon__eventOverflows__1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
push 0xe3ad
push str..._Server_include_OPCUA_open62541_open62541.c
push 0x55a3ba
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__wassert]
int3