Function at 0x1400047c0
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov r11, rsp
mov qword [r11 + 0x10], rdx
mov qword [r11 + 8], rcx
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xf60
mov qword [r11 - 0xe30], 0xfffffffffffffffe
mov r15, rdx
mov r13, rcx
lea rax, str.base_stor_vssmodulescoord_src_svc.cxx
mov qword [r11 - 0xd60], rax
lea rax, str.CVsServiceModule::OnStopping
mov qword [r11 - 0xd58], rax
lea rax, str.CORSVCC
mov qword [r11 - 0xd50], rax
mov dword [rsp + 0x250], 0x30c
mov r12d, 1
mov dword [r11 - 0xd44], r12d
mov dword [rsp + 0x258], 0xff
xor edi, edi
mov dword [rsp + 0x2d8], 0x1000000
xor edx, edx
lea r8d, [r12 + 0x77]
lea rcx, [r11 - 0xd38]
call sub.msvcrt.dll_memset
mov dword [rsp + 0x68], edi
mov rax, qword [rsp + 0x240]
mov qword [rsp + 0x88], rax
mov rax, qword [rsp + 0x238]
mov qword [rsp + 0x70], rax
mov rax, qword [rsp + 0x248]
mov qword [rsp + 0x78], rax
mov eax, dword [rsp + 0x250]
mov dword [rsp + 0x80], eax
mov eax, dword [rsp + 0x254]
mov dword [rsp + 0x84], eax
call qword [sym.imp.api_ms_win_core_sysinfo_l1_2_1.dll_GetTickCount]
mov dword [rsp + 0x94], eax
mov dword [rsp + 0x64], 0xffffffff
mov eax, dword [rsp + 0x258]
mov dword [rsp + 0x98], eax
mov dword [rsp + 0x60], edi
mov qword [rsp + 0xc0], rdi
mov qword [rsp + 0xa0], rdi
mov qword [rsp + 0xa8], rdi
mov qword [rsp + 0xb0], rdi
mov qword [rsp + 0xb8], rdi
mov qword [rsp + 0xfb0], rdi
lea rcx, [rsp + 0xfb0]
call qword [sym.imp.VssTrace.DLL_Ordinal_10]
test eax, eax
js 0x1400391dc
lea rcx, [rsp + 0x60]
call qword [sym.imp.VssTrace.DLL_Ordinal_9]
test eax, eax
js 0x1400391dc
mov rax, qword [rsp + 0xfb0]
mov qword [rsp + 0xc0], rax
test rax, rax
je 0x1400391e9
mov eax, dword [rax + 0x30]
inc eax
mov dword [rsp + 0x90], eax
mov ebx, dword [rsp + 0x98]
cmp ebx, 0xff
jne 0x14000495e
mov ebx, RegisterTypeLib
mov esi, dword [rsp + 0x84]
call qword [sym.imp.VssTrace.DLL_Ordinal_5]
test eax, eax
jne 0x1400391f5
mov r14d, 0xf
cmp byte [rsp + 0x2db], dil
je 0x1400049a5
lea rbx, [rsp + 0x260]
mov esi, r14d
nop
mov rcx, qword [rbx]
test rcx, rcx
jne 0x14003926c
add rbx, 8
sub rsi, r12
jne 0x140004990
xor eax, eax
lock cmpxchg dword [r13 + 0x168], r12d
jne 0x14003927a
lea rsi, str.base_stor_vssmoduleswriters_regwriter.cxx
mov qword [rsp + 0x468], rsi
lea rax, str.CRegistryWriter::DestroyWriter
mov qword [rsp + 0x470], rax
lea r15, str.WRTREGRC
mov qword [rsp + 0x478], r15
mov dword [rsp + 0x480], 0x240
mov dword [rsp + 0x484], 4
mov dword [rsp + 0x488], 0xff
mov dword [rsp + 0x508], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0x490]
call sub.msvcrt.dll_memset
xor r8d, r8d
lea rdx, [rsp + 0x468]
lea rcx, [rsp + 0xc50]
call fcn.140003840
nop
mov rbx, qword [0x140154cc8]
test rbx, rbx
je 0x140004b17
mov qword [rsp + 0x3c0], rsi
lea rax, str.CRegistryWriter::Uninitialize
mov qword [rsp + 0x3c8], rax
mov qword [rsp + 0x3d0], r15
mov dword [rsp + 0x3d8], 0x91
mov dword [rsp + 0x3dc], 4
mov dword [rsp + 0x3e0], 0xff
mov dword [rsp + 0x460], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0x3e8]
call sub.msvcrt.dll_memset
xor r8d, r8d
lea rdx, [rsp + 0x3c0]
lea rcx, [rsp + 0xcc0]
call fcn.140003840
nop
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140004ad9
mov rax, qword [rcx]
mov rax, qword [rax + 0x28]
call qword [case.0x140007ddd.0]
nop
lea rcx, [rsp + 0xcc0]
call fcn.140003960
mov rcx, qword [0x140154cc8]
test rcx, rcx
je 0x140004b10
mov rax, qword [rcx]
mov rax, qword [rax]
lea rdx, [fcn.1400012c0]
cmp rax, rdx
mov edx, r12d
jne 0x14003929a
call fcn.1400012c0
mov qword [0x140154cc8], rdi
lea rcx, [rsp + 0xc50]
call fcn.140003960
lea rax, str.base_stor_vssmoduleswriterscomregdbwriter.cxx
mov qword [rsp + 0x510], rax
lea rax, str.CComRegDBWriterWrapper::DestroyWriter
mov qword [rsp + 0x518], rax
lea rax, str.WRTCDBRC
mov qword [rsp + 0x520], rax
mov dword [rsp + 0x528], 0x90
mov dword [rsp + 0x52c], 4
mov dword [rsp + 0x530], 0xff
mov dword [rsp + 0x5b0], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0x538]
call sub.msvcrt.dll_memset
xor r8d, r8d
lea rdx, [rsp + 0x510]
lea rcx, [rsp + 0xe80]
call fcn.140003840
nop
cmp qword [0x140154f88], 0
je 0x140004be9
call fcn.140006090
mov rcx, qword [0x140154f88]
test rcx, rcx
je 0x140004be2
mov rax, qword [rcx]
mov rax, qword [rax]
lea rdx, [fcn.140006020]
cmp rax, rdx
mov edx, r12d
jne 0x1400392a6
call fcn.140006020
mov qword [0x140154f88], rdi
lea rcx, [rsp + 0xe80]
call fcn.140003960
call fcn.1400011b0
lea rax, str.base_stor_vssmoduleswritersdeletewriter.cpp
mov qword [rsp + 0x5b8], rax
lea rax, str.CVssDeletingWriter::DestroyWriter
mov qword [rsp + 0x5c0], rax
lea rax, str.WRTDELET
mov qword [rsp + 0x5c8], rax
mov dword [rsp + 0x5d0], 0xf6
mov dword [rsp + 0x5d4], 4
mov dword [rsp + 0x5d8], 0xff
mov dword [rsp + 0x658], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0x5e0]
call sub.msvcrt.dll_memset
xor r8d, r8d
lea rdx, [rsp + 0x5b8]
lea rcx, [rsp + 0xe10]
call fcn.140003840
nop
mov rcx, qword [0x140154cd0]
test rcx, rcx
je 0x140004cb1
mov rax, qword [rcx]
mov rax, qword [rax]
lea rdx, [fcn.140001500]
cmp rax, rdx
mov edx, r12d
jne 0x1400392b2
call fcn.140001500
mov qword [0x140154cd0], rdi
lea rcx, [rsp + 0xe10]
call fcn.140003960
lea rsi, [r13 + 0x170]
cmp qword [rsi], 0
je 0x140004fb3
lea r15, str.base_stor_vssmodulescoord_src_svc.cxx
mov qword [rsp + 0x660], r15
lea rax, str.CVsServiceModule::OnStopping
mov qword [rsp + 0x668], rax
lea rax, str.CORSVCC
mov qword [rsp + 0x670], rax
mov dword [rsp + 0x678], 0x325
mov dword [rsp + 0x67c], r12d
mov dword [rsp + 0x680], 0xff
mov dword [rsp + 0x700], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0x688]
call sub.msvcrt.dll_memset
lea r8, str.about_to_enter_context_callback_for_disconnect
lea rdx, [rsp + 0x660]
lea rcx, [rsp + 0x60]
call fcn.1400037d0
mov rcx, qword [rsi]
mov rax, qword [rcx]
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 5
lea r9, [0x1400e9f90]
xor r8d, r8d
lea rdx, [0x140005ef0]
mov rax, qword [rax + 0x18]
call qword [case.0x140007ddd.0]
mov ebx, eax
mov dword [rsp + 0x68], eax
test eax, eax
js 0x1400392be
lea r15, str.base_stor_vssinc_vs_types.hxx
mov qword [rsp + 0x7b0], r15
lea rax, str.CVssSafeComPtr_struct_IContextCallback_::Reset
mov qword [rsp + 0x7b8], rax
lea r15, str.INCTYPEH
mov qword [rsp + 0x7c0], r15
mov dword [rsp + 0x7c8], 0x445
mov dword [rsp + 0x7cc], 0xb
mov dword [rsp + 0x7d0], 0xff
mov dword [rsp + 0x850], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0x7d8]
call sub.msvcrt.dll_memset
xor r8d, r8d
lea rdx, [rsp + 0x7b0]
lea rcx, [rsp + 0x2e0]
call fcn.140003840
nop
movzx eax, byte [r13 + 0x1b8]
test al, al
je 0x140004e99
lea rbx, [r13 + 0x188]
lea rax, [0x1400e5550]
mov qword [rsp + 0x148], rax
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_EnterCriticalSection]
mov qword [rsp + 0x150], rbx
movzx eax, byte [r13 + 0x1b8]
test al, al
je 0x140039342
mov rcx, qword [r13 + 0x178]
mov rax, qword [rcx]
mov edx, dword [r13 + 0x180]
mov rax, qword [rax + 0x20]
call qword [case.0x140007ddd.0]
mov r15d, eax
mov dword [rsp + 0x2e8], eax
test eax, eax
js 0x140039363
mov byte [r13 + 0x1b8], 0
test rbx, rbx
je 0x140004e99
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_LeaveCriticalSection]
nop
mov rbx, rdi
mov rcx, qword [rsp + rbx*8 + 0x320]
call qword [sym.imp.api_ms_win_core_com_l1_1_1.dll_CoTaskMemFree]
mov qword [rsp + rbx*8 + 0x320], rdi
inc rbx
cmp rbx, 4
jl 0x140004e9c
call qword [sym.imp.api_ms_win_core_sysinfo_l1_2_1.dll_GetTickCount]
mov r9d, eax
sub r9d, dword [rsp + 0x314]
mov eax, 0x10624dd3
mul r9d
mov r10d, edx
shr r10d, 6
imul ecx, r10d, 0x3e8
mov ebx, r9d
sub ebx, ecx
mov eax, 0x88888889
mul r10d
shr edx, 5
imul eax, edx, 0x3c
sub r10d, eax
mov eax, 0x45e7b273
mul r9d
mov ecx, edx
shr ecx, 0xe
mov eax, 0x88888889
mul ecx
shr edx, 5
imul eax, edx, 0x3c
sub ecx, eax
mov eax, 0x95217cb1
mul r9d
mov r11d, edx
shr r11d, 0x15
mov eax, 0x88888889
mul r11d
shr edx, 5
imul eax, edx, 0x3c
sub r11d, eax
mov r8d, dword [rsp + 0x318]
cmp r8d, 0xff
jne 0x140004f4b
mov r8d, RegisterTypeLib
mov eax, dword [rsp + 0x2e8]
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x40], r9d
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], r10d
mov dword [rsp + 0x28], ecx
mov dword [rsp + 0x20], r11d
lea r9, str.Time_spent:__02ld:_02ld:_02ld__04ld__total:__x__HRESULT:__x
lea rdx, str.EXIT
lea rcx, [rsp + 0x2e0]
call fcn.1400035a0
mov rcx, qword [rsp + 0x340]
call qword [sym.imp.VssTrace.DLL_Ordinal_9]
test rsi, rsi
je 0x140004fb3
mov rcx, qword [rsi]
test rcx, rcx
je 0x140004fb0
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x140007ddd.0]
mov qword [rsi], rdi
call fcn.140001930
lea rbx, str.base_stor_vssmodulescoord_srcprovmgr.cxx
mov qword [rsp + 0x900], rbx
lea rax, str.CVssProviderManager::UnloadGlobalProviderItfCache
mov qword [rsp + 0x908], rax
lea rbx, str.CORPRVMC
mov qword [rsp + 0x910], rbx
mov dword [rsp + 0x918], 0x198
mov dword [rsp + 0x91c], r12d
mov dword [rsp + 0x920], 0xff
mov dword [rsp + 0x9a0], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0x928]
call sub.msvcrt.dll_memset
xor r8d, r8d
lea rdx, [rsp + 0x900]
lea rcx, [rsp + 0xef0]
call fcn.140003840
nop
mov r15d, edi
lea rdx, [fcn.140002840]
mov rcx, qword [0x140154f18]
cmp r15d, dword [0x140154f20]
jb 0x14000581e
mov rax, qword [0x140154f10]
test rax, rax
je 0x14000507b
mov rcx, rax
call qword [sym.imp.msvcrt.dll_free]
mov qword [0x140154f10], rdi
mov rcx, qword [0x140154f18]
test rcx, rcx
je 0x14000508d
call qword [sym.imp.msvcrt.dll_free]
mov qword [0x140154f18], rdi
mov dword [0x140154f20], edi
lea rcx, [rsp + 0xef0]
call fcn.140003960
nop
lea rax, str.base_stor_vssmodulescoord_srcprovmgr.cxx
mov qword [rsp + 0x9a8], rax
lea rax, str.CVssProviderManager::DeactivateAll
mov qword [rsp + 0x9b0], rax
lea rax, str.CORPRVMC
mov qword [rsp + 0x9b8], rax
mov dword [rsp + 0x9c0], 0x68a
mov dword [rsp + 0x9c4], r12d
mov dword [rsp + 0x9c8], 0xff
mov dword [rsp + 0xa48], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0x9d0]
call sub.msvcrt.dll_memset
xor r8d, r8d
lea rdx, [rsp + 0x9a8]
lea rcx, [rsp + 0xda0]
call fcn.140003840
nop
lea r15, [0x140154ee0]
mov qword [rsp + 0x158], r15
mov byte [rsp + 0x160], 0
lea rbx, str.base_stor_vssinc_vs_types.hxx
mov qword [rsp + 0x190], rbx
lea rax, [0x1400e9380]
mov qword [rsp + 0x198], rax
lea rsi, str.INCTYPEH
mov qword [rsp + 0x1a0], rsi
mov dword [rsp + 0x1a8], 0x100
mov dword [rsp + 0x1ac], reloc.VssTrace.DLL_Ordinal_11
mov dword [rsp + 0x1b0], 0xff
mov dword [rsp + 0x230], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0x1b8]
call sub.msvcrt.dll_memset
mov dword [rsp + 0xd8], edi
mov rax, qword [rsp + 0x198]
mov qword [rsp + 0xf8], rax
mov rax, qword [rsp + 0x190]
mov qword [rsp + 0xe0], rax
mov rax, qword [rsp + 0x1a0]
mov qword [rsp + 0xe8], rax
mov eax, dword [rsp + 0x1a8]
mov dword [rsp + 0xf0], eax
mov eax, dword [rsp + 0x1ac]
mov dword [rsp + 0xf4], eax
call qword [sym.imp.api_ms_win_core_sysinfo_l1_2_1.dll_GetTickCount]
mov dword [rsp + 0x104], eax
mov dword [rsp + 0xd4], 0xffffffff
mov eax, dword [rsp + 0x1b0]
mov dword [rsp + 0x108], eax
mov dword [rsp + 0xd0], edi
mov qword [rsp + 0x130], rdi
mov qword [rsp + 0x110], rdi
mov qword [rsp + 0x118], rdi
mov qword [rsp + 0x120], rdi
mov qword [rsp + 0x128], rdi
mov qword [rsp + 0xfb8], rdi
lea rcx, [rsp + 0xfb8]
call qword [sym.imp.VssTrace.DLL_Ordinal_10]
test eax, eax
js 0x140039409
lea rcx, [rsp + 0xd0]
call qword [sym.imp.VssTrace.DLL_Ordinal_9]
test eax, eax
js 0x140039409
mov rax, qword [rsp + 0xfb8]
mov qword [rsp + 0x130], rax
test rax, rax
je 0x140039416
mov eax, dword [rax + 0x30]
inc eax
mov dword [rsp + 0x100], eax
mov ebx, dword [rsp + 0x108]
cmp ebx, 0xff
jne 0x1400052bb
mov ebx, RegisterTypeLib
mov esi, dword [rsp + 0xf4]
call qword [sym.imp.VssTrace.DLL_Ordinal_5]
test eax, eax
jne 0x140039422
cmp byte [rsp + 0x233], 0
je 0x1400052f8
lea rbx, [rsp + 0x1b8]
mov rcx, qword [rbx]
test rcx, rcx
jne 0x1400394a6
add rbx, 8
sub r14, 1
jne 0x1400052e2
mov rcx, r15
call fcn.140003280
mov sil, 1
mov byte [rsp + 0x160], sil
mov rbx, rdi
mov rcx, qword [rsp + rbx*8 + 0x110]
call qword [sym.imp.api_ms_win_core_com_l1_1_1.dll_CoTaskMemFree]
mov qword [rsp + rbx*8 + 0x110], rdi
inc rbx
cmp rbx, 4
jl 0x14000530e
call qword [sym.imp.api_ms_win_core_sysinfo_l1_2_1.dll_GetTickCount]
mov r9d, eax
sub r9d, dword [rsp + 0x104]
mov eax, 0x10624dd3
mul r9d
mov r10d, edx
shr r10d, 6
imul ecx, r10d, 0x3e8
mov ebx, r9d
sub ebx, ecx
mov eax, 0x88888889
mul r10d
shr edx, 5
imul eax, edx, 0x3c
sub r10d, eax
mov eax, 0x45e7b273
mul r9d
mov ecx, edx
shr ecx, 0xe
mov eax, 0x88888889
mul ecx
shr edx, 5
imul eax, edx, 0x3c
sub ecx, eax
mov eax, 0x95217cb1
mul r9d
mov r11d, edx
shr r11d, 0x15
mov eax, 0x88888889
mul r11d
shr edx, 5
imul eax, edx, 0x3c
sub r11d, eax
mov r8d, dword [rsp + 0x108]
cmp r8d, 0xff
jne 0x1400053bd
mov r8d, RegisterTypeLib
mov eax, dword [rsp + 0xd8]
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x40], r9d
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], r10d
mov dword [rsp + 0x28], ecx
mov dword [rsp + 0x20], r11d
lea r9, str.Time_spent:__02ld:_02ld:_02ld__04ld__total:__x__HRESULT:__x
lea rdx, str.EXIT
lea rcx, [rsp + 0xd0]
call fcn.1400035a0
mov rcx, qword [rsp + 0x130]
call qword [sym.imp.VssTrace.DLL_Ordinal_9]
nop
mov rcx, qword [0x140154f78]
test rcx, rcx
jne 0x1400394b4
lea rax, str.base_stor_vssinc_vs_types.hxx
mov qword [rsp + 0xa50], rax
lea rax, str.CVssAutomaticLock2::CVssAutomaticLock2
mov qword [rsp + 0xa58], rax
lea rax, str.INCTYPEH
mov qword [rsp + 0xa60], rax
mov dword [rsp + 0xa68], 0x108
mov dword [rsp + 0xa6c], 0xb
mov dword [rsp + 0xa70], 0xff
mov dword [rsp + 0xaf0], 0x1000000
xor edx, edx
lea r8d, [rcx + 0x78]
lea rcx, [rsp + 0xa78]
call sub.msvcrt.dll_memset
xor r8d, r8d
lea rdx, [rsp + 0xa50]
lea rcx, [rsp + 0xd30]
call fcn.140003840
nop
test sil, sil
je 0x1400054ac
mov rcx, r15
call fcn.140002fe0
nop
lea rcx, [rsp + 0xd30]
call fcn.140003960
nop
lea rcx, [rsp + 0xda0]
call fcn.140003960
nop
lea rsi, str.base_stor_vssmodulescoord_src_svc.cxx
lea r14, str.CVsServiceModule::OnStopping
lea r15, str.CORSVCC
mov rbx, qword [rsp + 0xfa8]
cmp byte [rbx], 0
je 0x1400054f3
call qword [sym.imp.api_ms_win_core_com_l1_1_1.dll_CoUninitialize]
mov byte [rbx], 0
mov rcx, qword [r13 + 0x148]
call qword [sym.imp.api_ms_win_core_handle_l1_1_0.dll_CloseHandle]
test eax, eax
je 0x1400394f7
cmp dword [0x140154fd0], 0
je 0x140039573
cmp dword [0x140154fcc], 2
je 0x14003957e
mov rsi, qword [r13 + 0x160]
test rsi, rsi
je 0x1400056f8
lea rax, str.base_stor_vssmodulescoord_srchwdeviceobj.cxx
mov qword [rsp + 0xba0], rax
lea rax, str.CVssDeviceNotifier::CVssDeviceNotifier
mov qword [rsp + 0xba8], rax
lea rax, str.HWDVOBJC
mov qword [rsp + 0xbb0], rax
mov dword [rsp + 0xbb8], 0x61e
mov dword [rsp + 0xbbc], r12d
mov dword [rsp + 0xbc0], 0xff
mov dword [rsp + 0xc40], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0xbc8]
call sub.msvcrt.dll_memset
xor r8d, r8d
lea rdx, [rsp + 0xba0]
lea rcx, [rsp + 0x350]
call fcn.140003840
mov rbx, rdi
mov rcx, qword [rsp + rbx*8 + 0x390]
call qword [sym.imp.api_ms_win_core_com_l1_1_1.dll_CoTaskMemFree]
mov qword [rsp + rbx*8 + 0x390], rdi
inc rbx
cmp rbx, 4
jl 0x1400055b6
call qword [sym.imp.api_ms_win_core_sysinfo_l1_2_1.dll_GetTickCount]
mov r8d, eax
sub r8d, dword [rsp + 0x384]
mov eax, 0x10624dd3
mul r8d
mov r9d, edx
shr r9d, 6
imul ecx, r9d, 0x3e8
mov r11d, r8d
sub r11d, ecx
mov eax, 0x88888889
mul r9d
shr edx, 5
imul eax, edx, 0x3c
sub r9d, eax
mov eax, 0x45e7b273
mul r8d
mov ecx, edx
shr ecx, 0xe
mov eax, 0x88888889
mul ecx
shr edx, 5
imul eax, edx, 0x3c
sub ecx, eax
mov eax, 0x95217cb1
mul r8d
mov r10d, edx
shr r10d, 0x15
mov eax, 0x88888889
mul r10d
shr edx, 5
imul eax, edx, 0x3c
sub r10d, eax
mov edx, dword [rsp + 0x388]
cmp edx, 0xff
jne 0x140005663
mov edx, RegisterTypeLib
mov eax, dword [rsp + 0x358]
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x40], r8d
mov dword [rsp + 0x38], r11d
mov dword [rsp + 0x30], r9d
mov dword [rsp + 0x28], ecx
mov dword [rsp + 0x20], r10d
lea r9, str.Time_spent:__02ld:_02ld:_02ld__04ld__total:__x__HRESULT:__x
mov r8d, edx
lea rdx, str.EXIT
lea rcx, [rsp + 0x350]
call fcn.1400035a0
mov rcx, qword [rsp + 0x3b0]
call qword [sym.imp.VssTrace.DLL_Ordinal_9]
lea rcx, [rsi + 0x38]
mov eax, dword [rcx + 0x28]
cmp eax, 1
je 0x1400395bd
mov rax, qword [rsi + 0x28]
mov rcx, qword [rax]
mov qword [rax], rax
mov rax, qword [rsi + 0x28]
mov qword [rax + 8], rax
mov qword [rsi + 0x30], rdi
cmp rcx, qword [rsi + 0x28]
jne 0x1400395c9
mov rcx, qword [rsi + 0x28]
call fcn.14001fa98
mov qword [rsi + 0x28], rdi
mov rcx, rsi
call fcn.14001fa98
nop
mov rcx, qword [0x140154160]
call qword [sym.imp.api_ms_win_eventing_provider_l1_1_0.dll_EventUnregister]
mov qword [0x140154160], rdi
mov dword [0x140154140], edi
mov rbx, rdi
mov rcx, qword [rsp + rbx*8 + 0xa0]
call qword [sym.imp.api_ms_win_core_com_l1_1_1.dll_CoTaskMemFree]
mov qword [rsp + rbx*8 + 0xa0], rdi
inc rbx
cmp rbx, 4
jl 0x140005715
call qword [sym.imp.api_ms_win_core_sysinfo_l1_2_1.dll_GetTickCount]
mov r8d, eax
sub r8d, dword [rsp + 0x94]
mov eax, 0x10624dd3
mul r8d
mov r9d, edx
shr r9d, 6
imul ecx, r9d, 0x3e8
mov r11d, r8d
sub r11d, ecx
mov eax, 0x88888889
mul r9d
shr edx, 5
imul ecx, edx, 0x3c
sub r9d, ecx
mov eax, 0x45e7b273
mul r8d
mov r10d, edx
shr r10d, 0xe
mov eax, 0x88888889
mul r10d
shr edx, 5
imul ecx, edx, 0x3c
sub r10d, ecx
mov eax, 0x95217cb1
mul r8d
mov ecx, edx
shr ecx, 0x15
mov eax, 0x88888889
mul ecx
shr edx, 5
imul eax, edx, 0x3c
sub ecx, eax
mov edx, dword [rsp + 0x98]
cmp edx, 0xff
jne 0x1400057c2
mov edx, RegisterTypeLib
mov eax, dword [rsp + 0x68]
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x40], r8d
mov dword [rsp + 0x38], r11d
mov dword [rsp + 0x30], r9d
mov dword [rsp + 0x28], r10d
mov dword [rsp + 0x20], ecx
lea r9, str.Time_spent:__02ld:_02ld:_02ld__04ld__total:__x__HRESULT:__x
mov r8d, edx
lea rdx, str.EXIT
lea rcx, [rsp + 0x60]
call fcn.1400035a0
mov rcx, qword [rsp + 0xc0]
call qword [sym.imp.VssTrace.DLL_Ordinal_9]
add rsp, 0xf60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
movsxd rax, r15d
mov rbx, qword [rcx + rax*8]
test rbx, rbx
je 0x14000589f
cmp qword [rbx], 0
je 0x140005873
mov esi, edi
cmp esi, dword [rbx + 0x10]
jge 0x140005867
movsxd rcx, esi
mov rax, qword [rbx + 8]
mov rcx, qword [rax + rcx*8]
test rcx, rcx
je 0x140005863
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
cmp rax, rdx
jne 0x1400393fd
call fcn.140002840
lea rdx, [fcn.140002840]
inc esi
jmp 0x140005832
mov rcx, qword [rbx]
call qword [sym.imp.msvcrt.dll_free]
mov qword [rbx], rdi
mov rcx, qword [rbx + 8]
test rcx, rcx
je 0x140005886
call qword [sym.imp.msvcrt.dll_free]
mov qword [rbx + 8], rdi
mov dword [rbx + 0x10], edi
mov rcx, rbx
call fcn.14001fa98
mov rcx, qword [0x140154f18]
lea rdx, [fcn.140002840]
inc r15d
jmp 0x14000504b
mov rax, qword [rsp + 0xc0]
jmp 0x140004935
mov dword [rsp + 0x90], edi
jmp 0x14000494a
mov ecx, esi
call qword [sym.imp.VssTrace.DLL_Ordinal_7]
test eax, eax
je 0x140004973
lea rcx, [rsp + 0x60]
call fcn.1400ba0d8
cmp dword [rsp + 0x60], edi
je 0x140004973
mov qword [rsp + 0x40], rdi
mov dword [rsp + 0x38], ebx
lea rax, str.ENTER
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x88]
mov qword [rsp + 0x28], rax
mov eax, dword [rsp + 0x84]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x90]
mov r8d, dword [rsp + 0x80]
mov rdx, qword [rsp + 0x78]
mov rcx, qword [rsp + 0x70]
call qword [sym.imp.VssTrace.DLL_Ordinal_3]
nop
jmp 0x140004973
call qword [sym.imp.api_ms_win_core_com_l1_1_1.dll_CoTaskMemFree]
mov qword [rbx], rdi
jmp 0x14000499c
cmp byte [r15], 0
je 0x14003928a
call qword [sym.imp.api_ms_win_core_com_l1_1_1.dll_CoUninitialize]
mov byte [r15], 0
lea rcx, [rsp + 0x60]
call fcn.140003960
nop
jmp 0x14000580b
call qword [case.0x140007ddd.0]
nop
jmp 0x140004b10
call qword [case.0x140007ddd.0]
nop
jmp 0x140004be2
call qword [case.0x140007ddd.0]
nop
jmp 0x140004caa
mov qword [rsp + 0x708], r15
lea rax, str.CVsServiceModule::OnStopping
mov qword [rsp + 0x710], rax
lea rax, str.CORSVCC
mov qword [rsp + 0x718], rax
mov dword [rsp + 0x720], 0x328
mov dword [rsp + 0x724], r12d
mov dword [rsp + 0x728], 0xff
mov dword [rsp + 0x7a8], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0x730]
call sub.msvcrt.dll_memset
mov r9d, ebx
lea r8, str.IContextCallback::ContextCallback_DisconnectCallback__failed_wiht_0x_08lx
lea rdx, [rsp + 0x708]
lea rcx, [rsp + 0x60]
call fcn.1400037d0
nop
jmp 0x140004d8d
lea rcx, [rsp + 0x148]
call fcn.14003ec90
nop
lea rcx, [rsp + 0x2e0]
call fcn.140003960
nop
jmp 0x140004f96
lea rax, str.base_stor_vssinc_vs_types.hxx
mov qword [rsp + 0x858], rax
lea rax, str.CVssSafeComPtr_struct_IContextCallback_::Reset
mov qword [rsp + 0x860], rax
lea rax, str.INCTYPEH
mov qword [rsp + 0x868], rax
mov dword [rsp + 0x870], 0x453
mov dword [rsp + 0x874], 0xb
mov dword [rsp + 0x878], 0xff
mov dword [rsp + 0x8f8], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0x880]
call sub.msvcrt.dll_memset
mov dword [rsp + 0x20], r15d
mov r9d, dword [r13 + 0x180]
lea r8, str.RevokeInterfaceFromGlobal__lu____0x08lx_
lea rdx, [rsp + 0x858]
lea rcx, [rsp + 0x2e0]
call fcn.1400037d0
nop
jmp 0x140004e82
call qword [case.0x140007ddd.0]
nop
jmp 0x14000585c
mov rax, qword [rsp + 0x130]
jmp 0x140005292
mov dword [rsp + 0x100], edi
jmp 0x1400052a7
mov ecx, esi
call qword [sym.imp.VssTrace.DLL_Ordinal_7]
test eax, eax
je 0x1400052d0
lea rcx, [rsp + 0xd0]
call fcn.1400ba0d8
cmp dword [rsp + 0xd0], 0
je 0x1400052d0
mov qword [rsp + 0x40], rdi
mov dword [rsp + 0x38], ebx
lea rax, str.ENTER
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0xf8]
mov qword [rsp + 0x28], rax
mov eax, dword [rsp + 0xf4]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x100]
mov r8d, dword [rsp + 0xf0]
mov rdx, qword [rsp + 0xe8]
mov rcx, qword [rsp + 0xe0]
call qword [sym.imp.VssTrace.DLL_Ordinal_3]
nop
jmp 0x1400052d0
call qword [sym.imp.api_ms_win_core_com_l1_1_1.dll_CoTaskMemFree]
mov qword [rbx], rdi
jmp 0x1400052ee
mov byte [rcx + 0x18], 0
mov rax, qword [rcx + 8]
mov qword [0x140154f78], rax
test rax, rax
je 0x1400394d0
mov qword [rax + 0x10], rdi
mov qword [rcx + 8], rdi
mov rax, qword [rcx]
mov rax, qword [rax]
call qword [case.0x140007ddd.0]
nop
jmp 0x140005409
mov qword [rsp + 0xaf8], rsi
mov qword [rsp + 0xb00], r14
mov qword [rsp + 0xb08], r15
mov dword [rsp + 0xb10], 0x347
mov dword [rsp + 0xb14], r12d
mov dword [rsp + 0xb18], 0xff
mov dword [rsp + 0xb98], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0xb20]
call sub.msvcrt.dll_memset
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_1.dll_GetLastError]
mov r9d, eax
lea r8, str.Error_closing_the_sub_sync_event_0x_08lx
lea rdx, [rsp + 0xaf8]
lea rcx, [rsp + 0x60]
call fcn.1400037d0
nop
jmp 0x140005508
call fcn.14001cf60
nop
jmp 0x140005515
cmp byte [r13 + 0x151], 0
je 0x140005522
mov rbx, qword [r13 + 0x160]
lea rdx, [rbx + 0x18]
mov rcx, rbx
call fcn.1400a5b70
lea rdx, [rbx + 0x10]
mov rcx, rbx
call fcn.1400a5b70
lea rdx, [rbx + 8]
mov rcx, rbx
call fcn.1400a5b70
nop
jmp 0x140005522
call qword [sym.imp.api_ms_win_core_synch_l1_2_0.dll_DeleteCriticalSection]
nop
jmp 0x1400056c2
mov rbx, qword [rcx]
call fcn.14001fa98
mov rcx, rbx
cmp rbx, qword [rsi + 0x28]
jne 0x1400395c9
jmp 0x1400056e2