Function at 0x1400049b0
Capabilities:
Check for time delay via gettickcount

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
mov qword [rsp + 8], rcx
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1c0]
sub rsp, 0x2c0
mov esi, 1
mov dword [rbp - 0x28], 0x386
lea r15, str.base_stor_vssmodulescoord_src_svc.cxx
mov dword [rbp - 0x24], esi
lea r12, str.CVsServiceModule::Lock
mov qword [rbp - 0x40], r15
lea r13, str.CORSVCC
mov qword [rbp - 0x38], r12
lea r8d, [rsi + 0x77]
mov qword [rbp - 0x30], r13
xor edx, edx
mov dword [rbp - 0x20], 0xff
lea rcx, [rbp - 0x18]
mov dword [rbp + 0x60], 0x1000000
xor r14d, r14d
call sub.msvcrt.dll_memset
mov rax, qword [rbp - 0x38]
mov qword [rsp + 0x78], rax
mov rax, qword [rbp - 0x40]
mov qword [rsp + 0x60], rax
mov rax, qword [rbp - 0x30]
mov qword [rsp + 0x68], rax
mov eax, dword [rbp - 0x28]
mov dword [rsp + 0x70], eax
mov eax, dword [rbp - 0x24]
mov dword [rsp + 0x74], eax
mov dword [rsp + 0x58], r14d
call qword [sym.imp.api_ms_win_core_sysinfo_l1_1_0.dll_GetTickCount]
lea rcx, [rbp + 0x1f0]
mov dword [rsp + 0x54], 0xffffffff
mov dword [rbp - 0x7c], eax
mov eax, dword [rbp - 0x20]
mov dword [rbp - 0x78], eax
mov dword [rsp + 0x50], r14d
mov qword [rbp - 0x50], r14
mov qword [rbp - 0x70], r14
mov qword [rbp - 0x68], r14
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x58], r14
mov qword [rbp + 0x1f0], r14
call qword [sym.imp.VssTrace.DLL_Ordinal_10]
test eax, eax
js 0x14003ecbe
lea rcx, [rsp + 0x50]
call qword [sym.imp.VssTrace.DLL_Ordinal_9]
test eax, eax
js 0x14003ecbe
mov rax, qword [rbp + 0x1f0]
mov qword [rbp - 0x50], rax
test rax, rax
je 0x140004cad
mov eax, dword [rax + 0x30]
inc eax
mov dword [rbp - 0x80], eax
cmp dword [rbp - 0x78], 0xff
mov ebx, RegisterTypeLib
mov edi, dword [rsp + 0x74]
cmovne ebx, dword [rbp - 0x78]
call qword [sym.imp.VssTrace.DLL_Ordinal_5]
test eax, eax
jne 0x14003ecc7
cmp byte [rbp + 0x63], r14b
je 0x140004b25
lea rbx, [rbp - 0x18]
mov edi, 0xf
nop word [rax + rax]
mov rcx, qword [rbx]
test rcx, rcx
jne 0x14003ed32
add rbx, 8
sub rdi, rsi
jne 0x140004b10
movzx eax, byte [0x14016be40]
test al, al
jne 0x140004b9c
xor edx, edx
mov qword [rbp + 0x68], r15
lea rcx, [rbp + 0x90]
mov qword [rbp + 0x70], r12
mov qword [rbp + 0x78], r13
mov dword [rbp + 0x80], 0x38c
lea r8d, [rdx + 0x78]
mov dword [rbp + 0x84], esi
mov dword [rbp + 0x88], 0xff
mov dword [rbp + 0x108], 0x1000000
call sub.msvcrt.dll_memset
lea r8, str.VSSVC:_Idle_period_is_finished
lea rdx, [rbp + 0x68]
lea rcx, [rsp + 0x50]
call fcn.14001cc70
mov rcx, qword [0x14016be38]
call qword [sym.imp.api_ms_win_core_synch_l1_1_0.dll_CancelWaitableTimer]
test eax, eax
je 0x14003ed40
lock xadd dword [0x14016bd30], esi
mov rbx, r14
mov rcx, qword [rbp + rbx*8 - 0x70]
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
mov qword [rbp + rbx*8 - 0x70], r14
inc rbx
cmp rbx, 4
jl 0x140004ba7
call qword [sym.imp.api_ms_win_core_sysinfo_l1_1_0.dll_GetTickCount]
mov r8d, dword [rbp - 0x78]
mov r9d, eax
sub r9d, dword [rbp - 0x7c]
mov eax, 0x10624dd3
mul r9d
mov eax, 0x88888889
mov edi, r9d
mov r10d, edx
shr r10d, 6
mul r10d
imul ecx, r10d, 0x3e8
shr edx, 5
imul eax, edx, 0x3c
sub edi, ecx
sub r10d, eax
mov eax, 0x45e7b273
mul r9d
mov eax, 0x88888889
mov r11d, edx
shr r11d, 0xe
mul r11d
mov eax, 0x95217cb1
shr edx, 5
imul ecx, edx, 0x3c
mul r9d
mov eax, 0x88888889
sub r11d, ecx
mov ebx, edx
shr ebx, 0x15
mul ebx
shr edx, 5
imul eax, edx, 0x3c
sub ebx, eax
cmp r8d, 0xff
jne 0x140004c48
mov r8d, RegisterTypeLib
mov ecx, dword [rsp + 0x58]
lea rdx, str.EXIT
mov dword [rsp + 0x48], ecx
lea rcx, [rsp + 0x50]
mov dword [rsp + 0x40], r9d
lea r9, str.Time_spent:__02ld:_02ld:_02ld__04ld__total:__x__HRESULT:__x
mov dword [rsp + 0x38], edi
mov dword [rsp + 0x30], r10d
mov dword [rsp + 0x28], r11d
mov dword [rsp + 0x20], ebx
call fcn.14001d380
mov rcx, qword [rbp - 0x50]
call qword [sym.imp.VssTrace.DLL_Ordinal_9]
lea r11, [rsp + 0x2c0]
mov rbx, qword [r11 + 0x38]
lea eax, [rsi + 1]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov dword [rbp - 0x80], r14d
jmp 0x140004ad5
mov rax, qword [rbp - 0x50]
jmp 0x140004ac4
mov ecx, edi
call qword [sym.imp.VssTrace.DLL_Ordinal_7]
test eax, eax
je 0x140004af7
lea rcx, [rsp + 0x50]
call fcn.1400dde58
cmp dword [rsp + 0x50], r14d
je 0x140004af7
mov r9d, dword [rbp - 0x80]
lea rax, str.ENTER
mov r8d, dword [rsp + 0x70]
mov rdx, qword [rsp + 0x68]
mov rcx, qword [rsp + 0x60]
mov qword [rsp + 0x40], r14
mov dword [rsp + 0x38], ebx
mov qword [rsp + 0x30], rax
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x28], rax
mov eax, dword [rsp + 0x74]
mov dword [rsp + 0x20], eax
call qword [sym.imp.VssTrace.DLL_Ordinal_3]
nop
jmp 0x140004af7
call qword [sym.imp.api_ms_win_core_com_l1_1_0.dll_CoTaskMemFree]
mov qword [rbx], r14
jmp 0x140004b1c
xor edx, edx
mov qword [rbp + 0x110], r15
lea rcx, [rbp + 0x138]
mov qword [rbp + 0x118], r12
mov qword [rbp + 0x120], r13
mov dword [rbp + 0x128], 0x390
lea r8d, [rdx + 0x78]
mov dword [rbp + 0x12c], esi
mov dword [rbp + 0x130], 0xff
mov dword [rbp + 0x1b0], 0x1000000
call sub.msvcrt.dll_memset
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
mov r9d, eax
lea r8, str.Error_cancelling_the_waitable_timer_0x_08lx
lea rdx, [rbp + 0x110]
lea rcx, [rsp + 0x50]
call fcn.14001cc70
nop
jmp 0x140004b9c