Function at 0x14004ed80
Capabilities:
Terminate process

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 7]
sub rsp, 0xe0
mov r12, r9
mov rbx, r8
mov rsi, rdx
movzx eax, byte [rbp + 0x6f]
mov byte [0x1401bc5cc], al
movups xmm0, xmmword [rcx]
movups xmmword [0x1401af070], xmm0
movsd xmm1, qword [rcx + 0x10]
movsd qword [0x1401af080], xmm1
lea rcx, [0x1401bc480]
call fcn.140042f30
lea rcx, [0x1401bc5b0]
cmp rcx, rbx
je 0x14004ee2e
mov rdi, qword [rbx + 8]
mov r15, qword [rbx]
sub rdi, r15
mov rdx, rdi
sar rdx, 3
mov rax, qword [0x1401bc5c0]
mov r14, qword [0x1401bc5b0]
sub rax, r14
sar rax, 3
cmp rdx, rax
jbe 0x14004ee15
call fcn.140045990
mov r14, qword [0x1401bc5b0]
mov r8, rdi
mov rdx, r15
mov rcx, r14
call fcn.1400ee610
lea rax, [rdi + r14]
mov qword [0x1401bc5b8], rax
mov edi, dword [rsi + 0xe0]
cmp dword [0x1401bc560], 0x15
jbe 0x14004ee6e
mov ecx, 2
call fcn.1400f6cc8
mov rcx, rax
mov edi, 0x15
mov r8d, edi
lea rdx, str.Fossilize_ERROR:_Will_hit_MAXIMUM_WAIT_OBJECTS_limit__restricting_number_of_processes_to__u._n
call fcn.140002150
lea ecx, [rdi - 0x13]
call fcn.1400f6cc8
mov rcx, rax
call fcn.1400f7084
mov r14, qword [rbp + 0x77]
mov qword [0x1401bc618], r14
mov r15, qword [rbp + 0x7f]
mov qword [0x1401bc620], r15
mov ecx, edi
mov r8d, 1
cmp edi, r8d
cmovb ecx, r8d
xor edx, edx
mov eax, dword [0x1401bc568]
div ecx
mov dword [0x1401bc568], eax
mov dword [0x1401bc560], r8d
xor edx, edx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateJobObjectA]
mov qword [0x1401bc630], rax
test rax, rax
jne 0x14004eef5
lea ecx, [rax + 2]
call fcn.1400f6cc8
mov rcx, rax
lea rdx, str.Fossilize_ERROR:_Failed_to_create_job_handle._n
call fcn.140002150
mov ecx, 2
call fcn.1400f6cc8
mov rcx, rax
call fcn.1400f7084
mov rax, qword [0x1401bc630]
test rax, rax
je 0x14004ef6a
xorps xmm0, xmm0
movups xmmword [rsp + 0x50], xmm0
movups xmmword [rbp - 0x79], xmm0
movups xmmword [rbp - 0x69], xmm0
movups xmmword [rbp - 0x59], xmm0
movups xmmword [rbp - 0x49], xmm0
movups xmmword [rbp - 0x39], xmm0
movups xmmword [rbp - 0x29], xmm0
movups xmmword [rbp - 0x19], xmm0
movups xmmword [rbp - 9], xmm0
mov dword [rbp - 0x79], 0x2000
mov r9d, 0x90
lea r8, [rsp + 0x50]
mov edx, 9
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SetInformationJobObject]
test eax, eax
jne 0x14004ef6a
lea ecx, [rax + 2]
call fcn.1400f6cc8
mov rcx, rax
lea rdx, str.Fossilize_ERROR:_Failed_to_set_information_for_job_object._n
call fcn.140002150
mov ecx, 2
call fcn.1400f6cc8
mov rcx, rax
call fcn.1400f7084
test r14, r14
je 0x14004efb8
test r15, r15
je 0x14004efb8
mov rdx, r15
mov rcx, r14
call fcn.14004d300
test al, al
jne 0x14004efb8
mov ecx, 2
call fcn.1400f6cc8
mov rcx, rax
lea rdx, str.Fossilize_ERROR:_Failed_to_map_external_memory_resources._n
call fcn.140002150
mov ecx, 2
call fcn.1400f6cc8
mov rcx, rax
call fcn.1400f7084
mov eax, 1
jmp 0x14004f7fb
mov r14d, dword [rsi + 0xfc]
sub r14d, dword [rsi + 0xf8]
mov r15d, dword [rsi + 0x104]
sub r15d, dword [rsi + 0x100]
mov rdx, rbx
lea rcx, [rbp + 0x77]
call fcn.140048b90
nop
test r12, r12
je 0x14004f023
mov edx, dword [rbp + 0x67]
mov rcx, qword [rbp + 0x77]
call fcn.140028b80
mov rdx, r12
mov rcx, qword [rbp + 0x77]
call fcn.140026880
test al, al
jne 0x14004f023
mov ecx, 2
call fcn.1400f6cc8
mov rcx, rax
mov r8, r12
lea rdx, str.Fossilize_ERROR:_Failed_to_load_whitelist_database:__s._n
call fcn.140002150
jmp 0x14004f0c6
mov rcx, qword [rbp + 0x77]
mov rax, qword [rcx]
call qword [rax + 8]
test al, al
jne 0x14004f080
mov rsi, qword [rbx + 8]
mov rdi, qword [rbx]
cmp rdi, rsi
je 0x14004f1ab
mov rbx, qword [rdi]
mov ecx, 2
call fcn.1400f6cc8
mov r8, rbx
lea rdx, str.Fossilize_ERROR:_Failed_to_parse_database__s._n
mov rcx, rax
call fcn.140002150
mov ecx, 2
call fcn.1400f6cc8
mov rcx, rax
call fcn.1400f7084
add rdi, 8
cmp rdi, rsi
jne 0x14004f041
jmp 0x14004f1ab
mov edx, 0x40
lea rcx, [0x1401bc640]
call fcn.140026320
lea rdx, [0x1401bc640]
mov rcx, qword [rbp + 0x77]
call fcn.140025ba0
mov rcx, rax
call fcn.140026970
test al, al
jne 0x14004f0dd
mov ecx, 2
call fcn.1400f6cc8
mov rcx, rax
lea rdx, str.Fossilize_ERROR:_Failed_to_export_metadata._n
call fcn.140002150
mov ecx, 2
call fcn.1400f6cc8
mov rcx, rax
call fcn.1400f7084
jmp 0x14004f1ab
mov rcx, qword [rbp + 0x77]
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [rbp + 0x47]
lea edx, [r9 + 6]
call qword [rax + 0x28]
test al, al
jne 0x14004f14c
mov rsi, qword [rbx + 8]
mov rdi, qword [rbx]
cmp rdi, rsi
je 0x14004f1ab
nop word [rax + rax]
mov rbx, qword [rdi]
mov ecx, 2
call fcn.1400f6cc8
mov r8, rbx
lea rdx, str.Fossilize_ERROR:_Failed_to_parse_database__s._n
mov rcx, rax
call fcn.140002150
mov ecx, 2
call fcn.1400f6cc8
mov rcx, rax
call fcn.1400f7084
add rdi, 8
cmp rdi, rsi
jne 0x14004f110
jmp 0x14004f1ab
mov rcx, qword [rbp + 0x77]
mov rax, qword [rcx]
xor r9d, r9d
lea r8, [rbp + 0x4f]
lea edx, [r9 + 7]
call qword [rax + 0x28]
test al, al
jne 0x14004f1cc
mov rsi, qword [rbx + 8]
mov rdi, qword [rbx]
cmp rdi, rsi
je 0x14004f1ab
mov rbx, qword [rdi]
mov ecx, 2
call fcn.1400f6cc8
mov r8, rbx
lea rdx, str.Fossilize_ERROR:_Failed_to_parse_database__s._n
mov rcx, rax
call fcn.140002150
mov ecx, 2
call fcn.1400f6cc8
mov rcx, rax
call fcn.1400f7084
add rdi, 8
cmp rdi, rsi
jne 0x14004f171
mov rcx, qword [rbp + 0x77]
test rcx, rcx
je 0x14004f714
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
mov eax, 1
jmp 0x14004f7fb
xor edx, edx
mov r13d, edx
cmp r14, qword [rbp + 0x47]
jae 0x14004f1e2
mov qword [rbp + 0x47], r14
mov r13d, dword [rsi + 0xf8]
mov r12d, edx
cmp r15, qword [rbp + 0x4f]
jae 0x14004f1f6
mov qword [rbp + 0x4f], r15
mov r12d, dword [rsi + 0x100]
mov rcx, qword [0x1401bc610]
test rcx, rcx
je 0x14004f215
mov eax, dword [rbp + 0x47]
xchg dword [rcx + 0x5c], eax
mov rcx, qword [0x1401bc610]
mov eax, dword [rbp + 0x4f]
xchg dword [rcx + 0x60], eax
mov rcx, qword [rbp + 0x77]
test rcx, rcx
je 0x14004f22a
mov rax, qword [rcx]
mov edx, 1
call qword [rax]
xor edx, edx
mov rcx, qword [0x1401bc610]
test rcx, rcx
je 0x14004f23e
nop
mov dword [rcx + 0x54], 1
mov dword [0x1401bc5c8], edx
mov esi, edi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x38], xmm0
mov r15, rdx
mov qword [rsp + 0x48], rdx
test edi, edi
je 0x14004f335
imul r14, rsi, 0x460
cmp r14, 0x1000
jb 0x14004f29f
lea rcx, [r14 + 0x27]
cmp rcx, r14
jbe 0x14004f81c
call fcn.1400ec60c
test rax, rax
je 0x14004f816
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
lea r15, [rbx + r14]
mov r14, rbx
jmp 0x14004f2c2
test r14, r14
je 0x14004f2b8
mov rcx, r14
call fcn.1400ec60c
mov rbx, rax
lea r15, [rax + r14]
mov r14, rax
jmp 0x14004f2c2
mov rbx, rdx
lea r15, [rdx + r14]
mov r14, rdx
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x48], r15
nop dword [rax]
lea rcx, [rbx + 0x50]
xor edx, edx
mov r8d, 0x400
call fcn.1400eee20
xor eax, eax
mov qword [rbx + 0x458], rax
xor edx, edx
mov qword [rbx], rdx
mov qword [rbx + 8], 0xffffffffffffffff
mov qword [rbx + 0x10], rdx
mov qword [rbx + 0x18], 0xffffffffffffffff
mov qword [rbx + 0x20], rdx
mov qword [rbx + 0x28], rdx
xorps xmm0, xmm0
movups xmmword [rbx + 0x30], xmm0
movups xmmword [rbx + 0x40], xmm0
mov qword [rbx + 0x450], 0xffffffffffffffff
add rbx, 0x460
sub rsi, 1
jne 0x14004f2d0
mov qword [rsp + 0x40], rbx
jmp 0x14004f33f
mov rbx, qword [rsp + 0x40]
mov r14, qword [rsp + 0x38]
movdqu xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], rdx
mov r8d, edx
test edi, edi
je 0x14004f3c9
nop dword [rax]
nop word [rax + rax]
mov eax, r8d
imul rcx, rax, 0x460
add rcx, r14
mov eax, r8d
imul eax, dword [rbp + 0x47]
xor edx, edx
div edi
add eax, r13d
mov dword [rcx], eax
lea esi, [r8 + 1]
mov eax, esi
imul eax, dword [rbp + 0x47]
xor edx, edx
div edi
add eax, r13d
mov dword [rcx + 8], eax
mov eax, r8d
imul eax, dword [rbp + 0x4f]
xor edx, edx
div edi
add eax, r12d
mov dword [rcx + 4], eax
mov eax, esi
imul eax, dword [rbp + 0x4f]
xor edx, edx
div edi
add eax, r12d
mov dword [rcx + 0xc], eax
mov dword [rcx + 0x458], r8d
call fcn.140052610
test al, al
je 0x14004f439
mov r8d, esi
cmp esi, edi
jb 0x14004f360
lea edx, [rdi + rdi*2]
mov rax, qword [rsp + 0x30]
mov r10, qword [rsp + 0x20]
sub rax, r10
sar rax, 3
cmp rdx, rax
jbe 0x14004f3f1
lea rcx, [rsp + 0x20]
call fcn.1400478f0
mov r10, qword [rsp + 0x20]
cmp dword [0x1401bc5c8], 0
je 0x14004f71e
mov rax, r10
mov qword [rsp + 0x28], rax
cmp r14, rbx
je 0x14004f4e9
lea rdi, [r14 + 0x10]
lea r8, [rdi + 0x18]
mov rcx, qword [r8]
test rcx, rcx
je 0x14004f461
cmp rax, qword [rsp + 0x30]
je 0x14004f44f
mov qword [rax], rcx
mov rax, qword [rsp + 0x28]
add rax, 8
mov qword [rsp + 0x28], rax
jmp 0x14004f461
mov ecx, 2
call fcn.1400f6cc8
lea rdx, str.Fossilize_ERROR:_Failed_to_start_child_process._n
jmp 0x14004f648
mov rdx, rax
lea rcx, [rsp + 0x20]
call fcn.14003bad0
mov rax, qword [rsp + 0x28]
mov rcx, qword [rdi]
test rcx, rcx
je 0x14004f498
cmp rax, qword [rsp + 0x30]
je 0x14004f483
mov qword [rax], rcx
mov rax, qword [rsp + 0x28]
add rax, 8
mov qword [rsp + 0x28], rax
jmp 0x14004f498
mov r8, rdi
mov rdx, rax
lea rcx, [rsp + 0x20]
call fcn.14003bad0
mov rax, qword [rsp + 0x28]
lea r8, [rdi + 0x10]
mov rcx, qword [r8]
test rcx, rcx
je 0x14004f4d0
cmp rax, qword [rsp + 0x30]
je 0x14004f4be
mov qword [rax], rcx
mov rax, qword [rsp + 0x28]
add rax, 8
mov qword [rsp + 0x28], rax
jmp 0x14004f4d0
mov rdx, rax
lea rcx, [rsp + 0x20]
call fcn.14003bad0
mov rax, qword [rsp + 0x28]
add rdi, 0x460
lea rcx, [rdi - 0x10]
cmp rcx, rbx
jne 0x14004f413
mov r10, qword [rsp + 0x20]
sub rax, r10
sar rax, 3
mov r9d, 0xffffffff
xor r8d, r8d
mov rdx, r10
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
cmp eax, 0xffffffff
je 0x14004f822
cmp eax, 0x7f
ja 0x14004f3ec
mov rcx, qword [rsp + 0x28]
mov r10, qword [rsp + 0x20]
sub rcx, r10
sar rcx, 3
mov eax, eax
cmp rax, rcx
jae 0x14004f3f1
mov rax, qword [r10 + rax*8]
mov rsi, r14
cmp r14, rbx
je 0x14004f552
nop
cmp qword [rsi + 0x10], rax
je 0x14004f552
add rsi, 0x460
cmp rsi, rbx
jne 0x14004f540
mov rcx, r14
cmp r14, rbx
je 0x14004f572
nop word [rax + rax]
cmp qword [rcx + 0x28], rax
je 0x14004f572
add rcx, 0x460
cmp rcx, rbx
jne 0x14004f560
mov rdi, r14
cmp r14, rbx
je 0x14004f592
nop word [rax + rax]
cmp qword [rdi + 0x20], rax
je 0x14004f592
add rdi, 0x460
cmp rdi, rbx
jne 0x14004f580
cmp rsi, rbx
je 0x14004f5bc
mov rcx, rsi
call fcn.14004dec0
test al, al
je 0x14004f3ec
mov rcx, rsi
call fcn.140052610
test al, al
je 0x14004f439
jmp 0x14004f3ec
cmp rcx, rbx
je 0x14004f5cb
call fcn.14004de00
jmp 0x14004f3ec
cmp rdi, rbx
je 0x14004f3f1
mov ecx, 2
call fcn.1400f6cc8
mov rcx, rax
lea rdx, str.Fossilize_ERROR:_Terminating_process_due_to_timeout_..._n
call fcn.140002150
mov ecx, 2
call fcn.1400f6cc8
mov rcx, rax
call fcn.1400f7084
mov edx, 3
mov rcx, qword [rdi + 0x10]
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
je 0x14004f637
mov rcx, rdi
call fcn.14004dec0
test al, al
je 0x14004f3ec
mov rcx, rdi
call fcn.140052610
test al, al
je 0x14004f439
jmp 0x14004f3ec
mov ecx, 2
call fcn.1400f6cc8
lea rdx, str.Fossilize_ERROR:_Failed_to_terminate_child_process._n
mov rcx, rax
call fcn.140002150
mov ecx, 2
call fcn.1400f6cc8
mov rcx, rax
call fcn.1400f7084
nop
mov rcx, qword [rsp + 0x20]
test rcx, rcx
je 0x14004f6bd
mov rax, qword [rsp + 0x30]
sub rax, rcx
sar rax, 3
lea rdx, [rax*8]
cmp rdx, 0x1000
mov rax, rcx
jb 0x14004f6a6
mov rcx, qword [rcx - 8]
sub rax, rcx
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004f853
call fcn.1400ec648
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], 0
test r14, r14
je 0x14004f714
movabs rax, 0xea0ea0ea0ea0ea1
sub r15, r14
imul r15
sar rdx, 6
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rdx, rdx, 0x460
cmp rdx, 0x1000
mov rax, r14
jb 0x14004f70c
mov r14, qword [r14 - 8]
sub rax, r14
add rdx, 0x27
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004f816
mov rcx, r14
call fcn.1400ec648
mov eax, 1
jmp 0x14004f7fb
mov rcx, qword [0x1401bc630]
test rcx, rcx
je 0x14004f735
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r10, qword [rsp + 0x20]
mov rcx, qword [0x1401bc610]
test rcx, rcx
je 0x14004f74e
nop
mov dword [rcx + 0x58], 1
mov r10, qword [rsp + 0x20]
test r10, r10
je 0x14004f7a6
mov rax, qword [rsp + 0x30]
sub rax, r10
sar rax, 3
lea rdx, [rax*8]
mov rax, r10
cmp rdx, 0x1000
jb 0x14004f78c
add rdx, 0x27
mov r10, qword [r10 - 8]
sub rax, r10
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004f853
mov rcx, r10
call fcn.1400ec648
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], 0
test r14, r14
je 0x14004f7f9
sub r15, r14
movabs rax, 0xea0ea0ea0ea0ea1
imul r15
sar rdx, 6
mov rax, rdx
shr rax, 0x3f
add rdx, rax
imul rdx, rdx, 0x460
mov rax, r14
cmp rdx, 0x1000
jb 0x14004f7f1
add rdx, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14004f816
mov rcx, r14
call fcn.1400ec648
xor eax, eax
mov rbx, qword [rsp + 0x130]
add rsp, 0xe0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1400f2c0c
int3
call fcn.140001b10
nop
mov ecx, 2
call fcn.1400f6cc8
mov rcx, rax
lea rdx, str.Fossilize_ERROR:_WaitForMultipleObjects_failed._n
call fcn.140002150
mov ecx, 2
call fcn.1400f6cc8
mov rcx, rax
call fcn.1400f7084
call fcn.14004c480
nop
call fcn.1400f2c0c
int3