Function at 0x140009ac0
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov r11, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x1a0
mov qword [r11 - 0x48], 0xfffffffffffffffe
mov qword [r11 + 8], rbx
mov qword [r11 + 0x20], rsi
mov r15, rdx
mov r14, rcx
lea r12, str.base_stor_vssmodules_registry_registry.cxx
mov qword [r11 - 0xf8], r12
lea r13, str.CVssDiag::Initialize
mov qword [r11 - 0xf0], r13
lea rax, str.REGREGSC
mov qword [r11 - 0xe8], rax
mov dword [rsp + 0xe8], 0x4e5
mov dword [rsp + 0xec], reloc.VssTrace.DLL_Ordinal_11
mov dword [rsp + 0xf0], 0xff
xor esi, esi
mov dword [r11 - 0x58], 0x1000000
xor edx, edx
lea r8d, [rsi + 0x78]
lea rcx, [r11 - 0xd0]
call sub.msvcrt.dll_memset
mov dword [rsp + 0x58], esi
mov rax, qword [rsp + 0xd8]
mov qword [rsp + 0x78], rax
mov rax, qword [rsp + 0xd0]
mov qword [rsp + 0x60], rax
mov rax, qword [rsp + 0xe0]
mov qword [rsp + 0x68], rax
mov eax, dword [rsp + 0xe8]
mov dword [rsp + 0x70], eax
mov eax, dword [rsp + 0xec]
mov dword [rsp + 0x74], eax
call qword [sym.imp.api_ms_win_core_sysinfo_l1_1_0.dll_GetTickCount]
nop dword [rax + rax]
mov dword [rsp + 0x84], eax
mov dword [rsp + 0x54], 0xffffffff
mov eax, dword [rsp + 0xf0]
mov dword [rsp + 0x88], eax
mov dword [rsp + 0x50], esi
mov qword [rsp + 0xb0], rsi
xorps xmm0, xmm0
movdqa xmmword [rsp + 0x90], xmm0
xorps xmm1, xmm1
movdqa xmmword [rsp + 0xa0], xmm1
mov qword [rsp + 0x1d8], rsi
lea rcx, [rsp + 0x1d8]
call qword [sym.imp.VssTrace.DLL_Ordinal_10]
nop dword [rax + rax]
test eax, eax
js 0x14001ffba
lea rcx, [rsp + 0x50]
call qword [sym.imp.VssTrace.DLL_Ordinal_9]
nop dword [rax + rax]
test eax, eax
js 0x14001ffba
mov rax, qword [rsp + 0x1d8]
mov qword [rsp + 0xb0], rax
test rax, rax
je 0x14001ffc7
mov eax, dword [rax + 0x30]
inc eax
mov dword [rsp + 0x80], eax
mov ebx, dword [rsp + 0x88]
cmp ebx, 0xff
jne 0x140009c54
mov ebx, RegisterTypeLib
mov edi, dword [rsp + 0x74]
call qword [sym.imp.VssTrace.DLL_Ordinal_5]
nop dword [rax + rax]
test eax, eax
jne 0x14001ffd3
cmp byte [rsp + 0x173], sil
je 0x140009c99
lea rbx, [rsp + 0xf8]
mov edi, 0xf
mov rcx, qword [rbx]
test rcx, rcx
jne 0x14002004d
add rbx, 8
sub rdi, 1
jne 0x140009c83
mov qword [rsp + 0xd0], r12
mov qword [rsp + 0xd8], r13
lea rdi, str.REGREGSC
mov qword [rsp + 0xe0], rdi
mov dword [rsp + 0xe8], 0x4e9
mov dword [rsp + 0xec], reloc.VssTrace.DLL_Ordinal_11
mov dword [rsp + 0xf0], 0xff
mov dword [rsp + 0x170], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0xf8]
call sub.msvcrt.dll_memset
mov r9, r15
lea r8, str.Parameters__s
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0x50]
call fcn.140009fb0
test r15, r15
je 0x140020101
cmp word [r15], 0
je 0x140020101
cmp byte [r14 + 0x20], 0
jne 0x140020061
lea r8, str.SYSTEMCurrentControlSetServicesVSSDiag
mov rdx, 0xffffffff80000002
mov rcx, r14
call fcn.14000a6b0
test al, al
je 0x140020071
lea rax, [0x1400f6250]
mov qword [rsp + 0xc0], rax
mov qword [rsp + 0xc8], rsi
lea r8, [rsp + 0xc8]
lea rdx, [0x1400fb658]
mov rcx, r14
call fcn.1400085b0
mov rbx, qword [rsp + 0xc8]
test al, al
jne 0x14002008d
mov qword [rsp + 0x20], r15
lea r9, str.SYSTEMCurrentControlSetServicesVSSDiag
lea r8, [0x1400f9fa8]
mov rdx, 0xffffffff80000002
mov rcx, r14
call fcn.14000a6b0
test al, al
jne 0x140009dd6
mov qword [rsp + 0x20], r15
lea r9, str.SYSTEMCurrentControlSetServicesVSSDiag
lea r8, [0x1400f9fa8]
mov rdx, 0xffffffff80000002
mov rcx, r14
call fcn.140008c00
mov qword [rsp + 0xd0], r12
mov qword [rsp + 0xd8], r13
mov qword [rsp + 0xe0], rdi
mov dword [rsp + 0xe8], 0x505
mov dword [rsp + 0xec], reloc.VssTrace.DLL_Ordinal_11
mov dword [rsp + 0xf0], 0xff
mov dword [rsp + 0x170], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0xf8]
call sub.msvcrt.dll_memset
mov r9, r15
lea r8, str.Diagnose_enabled_for___s_
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0x50]
call fcn.140009fb0
lea rcx, [r14 + 0x28]
test rcx, rcx
je 0x140009e5d
xor edx, edx
lea r8d, [rdx + 0x50]
call sub.msvcrt.dll_memset
mov byte [r14 + 0x20], 1
test rbx, rbx
jne 0x1400200ec
mov rbx, rsi
mov rcx, qword [rsp + rbx*8 + 0x90]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
nop dword [rax + rax]
mov qword [rsp + rbx*8 + 0x90], rsi
inc rbx
cmp rbx, 4
jl 0x140009e6e
call qword [sym.imp.api_ms_win_core_sysinfo_l1_1_0.dll_GetTickCount]
nop dword [rax + rax]
mov r9d, eax
sub r9d, dword [rsp + 0x84]
mov eax, 0x10624dd3
mul r9d
mov r10d, edx
shr r10d, 6
imul ecx, r10d, 0x3e8
mov ebx, r9d
sub ebx, ecx
mov eax, 0x88888889
mul r10d
shr edx, 5
imul eax, edx, 0x3c
sub r10d, eax
mov eax, 0x45e7b273
mul r9d
mov r11d, edx
shr r11d, 0xe
mov eax, 0x88888889
mul r11d
shr edx, 5
imul ecx, edx, 0x3c
sub r11d, ecx
mov eax, 0x95217cb1
mul r9d
mov ecx, edx
shr ecx, 0x15
mov eax, 0x88888889
mul ecx
shr edx, 5
imul eax, edx, 0x3c
sub ecx, eax
mov r8d, dword [rsp + 0x88]
cmp r8d, 0xff
jne 0x140009f29
mov r8d, RegisterTypeLib
mov eax, dword [rsp + 0x58]
mov dword [rsp + 0x48], eax
mov dword [rsp + 0x40], r9d
mov dword [rsp + 0x38], ebx
mov dword [rsp + 0x30], r10d
mov dword [rsp + 0x28], r11d
mov dword [rsp + 0x20], ecx
lea r9, str.Time_spent:__02ld:_02ld:_02ld__04ld__total:__x__HRESULT:__x
lea rdx, str.EXIT
lea rcx, [rsp + 0x50]
call fcn.14000a350
mov rcx, qword [rsp + 0xb0]
call qword [sym.imp.VssTrace.DLL_Ordinal_9]
nop dword [rax + rax]
lea r11, [rsp + 0x1a0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov rax, qword [rsp + 0xb0]
jmp 0x140009c2b
mov dword [rsp + 0x80], esi
jmp 0x140009c40
mov ecx, edi
call qword [sym.imp.VssTrace.DLL_Ordinal_7]
nop dword [rax + rax]
test eax, eax
je 0x140009c6c
lea rcx, [rsp + 0x50]
call fcn.1400c3fe4
cmp dword [rsp + 0x50], esi
je 0x140009c6c
mov qword [rsp + 0x40], rsi
mov dword [rsp + 0x38], ebx
lea rax, str.ENTER
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x28], rax
mov eax, dword [rsp + 0x74]
mov dword [rsp + 0x20], eax
mov r9d, dword [rsp + 0x80]
mov r8d, dword [rsp + 0x70]
mov rdx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x60]
call qword [sym.imp.VssTrace.DLL_Ordinal_3]
nop dword [rax + rax]
nop
jmp 0x140009c6c
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
nop dword [rax + rax]
mov qword [rbx], rsi
jmp 0x140009c8f
lea rcx, [rsp + 0x50]
call fcn.140009990
nop
jmp 0x140009f74
lea r8, str.SYSTEMCurrentControlSetServicesVSSDiag
mov rdx, 0xffffffff80000002
mov rcx, r14
call fcn.140008c00
nop
jmp 0x140009d50
test rbx, rbx
je 0x140009d8e
mov rax, rbx
lea r8, str.Disabled
sub r8, rbx
movzx ecx, word [rax]
movzx edx, word [rax + r8]
sub ecx, edx
jne 0x1400200b7
add rax, 2
test edx, edx
jne 0x1400200a3
test ecx, ecx
jne 0x140009d8e
lea rax, [0x1400f6250]
mov qword [rsp + 0xc0], rax
lea rcx, [rsp + 0xc0]
call fcn.1400313d4
nop
lea rcx, [rsp + 0x50]
call fcn.140009990
nop
jmp 0x140009f74
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
nop dword [rax + rax]
nop
jmp 0x140009e6b
mov qword [rsp + 0xd0], r12
mov qword [rsp + 0xd8], r13
mov qword [rsp + 0xe0], rdi
mov dword [rsp + 0xe8], 0x4ee
mov dword [rsp + 0xec], reloc.VssTrace.DLL_Ordinal_11
mov dword [rsp + 0xf0], 0xff
mov dword [rsp + 0x170], 0x1000000
xor edx, edx
lea r8d, [rdx + 0x78]
lea rcx, [rsp + 0xf8]
call sub.msvcrt.dll_memset
lea r9, str._NULL_or_empty_parameter
mov r8d, 0x8000ffff
lea rdx, [rsp + 0xd0]
lea rcx, [rsp + 0x50]
call fcn.1400c2a9c
nop
xor esi, esi
jmp 0x140009e6b