Function at 0x1401e4a7a
Capabilities:
Hash data using murmur3
Write file on windows

Disassembly:
push rax
pushf
mov eax, 0x67ff2e97
pushf
not eax
add eax, 0xde167e3c
xor eax, 0xad05d82c
rol eax, 0xfd
popf
pushf
not eax
add eax, 0xed99e547
xor eax, 0xe3cafa1d
rol eax, 0x5e
popf
pushf
not eax
add eax, 0xe4d0fade
xor eax, 0xd5c10303
rol eax, 0x84
popf
pushf
not eax
add eax, 0xc538f09a
xor eax, 0xec2eb419
rol eax, 0x89
popf
cmp eax, 4
jne 0x1401e4add
popf
pop rax
jmp 0x1401e4ddc
cmp eax, 0
jne 0x1401e4aec
popf
pop rax
jmp 0x1401e4b82
cmp eax, 3
jne 0x1401e4afb
popf
pop rax
jmp 0x1401e4d43
cmp eax, 1
jne 0x1401e4b0a
popf
pop rax
jmp 0x1401e4cdc
cmp eax, 0xa
jne 0x1401e4b19
popf
pop rax
jmp 0x1401e5152
cmp eax, 7
jne 0x1401e4b28
popf
pop rax
jmp 0x1401e4fcb
cmp eax, 6
jne 0x1401e4b37
popf
pop rax
jmp 0x1401e4f37
cmp eax, 0xb
jne 0x1401e4b46
popf
pop rax
jmp 0x1401e51a0
cmp eax, 9
jne 0x1401e4b55
popf
pop rax
jmp 0x1401e5106
cmp eax, 8
jne 0x1401e4b64
popf
pop rax
jmp 0x1401e5062
cmp eax, 5
jne 0x1401e4b73
popf
pop rax
jmp 0x1401e4e71
cmp eax, 2
jne 0x1401e4b82
popf
pop rax
jmp 0x1401e4d3a
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rbp
push rsi
push rdi
push r14
mov eax, 0xe777d675
pushf
not eax
add eax, 0xdadde802
xor eax, 0xd66d2dcf
rol eax, 0xc9
popf
pushf
not eax
add eax, 0xd3daaf26
xor eax, 0x906665fd
rol eax, 0x74
popf
pushf
not eax
add eax, 0xd1f1368a
xor eax, 0xf56b72c2
rol eax, 0x61
popf
pushf
not eax
add eax, 0xffcf161c
xor eax, 0xfe04ed08
rol eax, 0xa
popf
call fcn.14029380f
sub rsp, rax
mov rax, qword [0x140103090]
xor rax, rsp
mov qword [rsp + 0x1440], rax
movsxd r10, edx
mov rdi, rcx
mov rax, r10
mov ebp, r9d
sar rax, 6
lea rcx, [0x1af858b1d]
pushf
sub rcx, 0x6f74eb8d
popf
and r10d, 0x3f
push r8
not r8
sub rbp, r8
pop r8
sub rbp, 1
mov rsi, r8
mov rax, qword [rcx + rax*8]
lea rdx, [r10 + r10*8]
mov r14, qword [rax + rdx*8 + 0x28]
xor eax, eax
mov qword [rdi], rax
mov dword [rdi + 8], eax
cmp r8, rbp
jae 0x1401e4ca9
push rax
pushf
mov eax, 0xbd23b1b
pushf
not eax
add eax, 0xbe544da8
xor eax, 0x86cdf7f6
rol eax, 0x1a
popf
pushf
not eax
add eax, 0xfe35b93c
xor eax, 0x9127cdfb
rol eax, 0xa7
popf
pushf
not eax
add eax, 0xeeb5f9d3
xor eax, 0xc1ddee37
rol eax, 0x28
popf
pushf
not eax
add eax, 0xfc69c0df
xor eax, 0xf74499d1
rol eax, 0x88
popf
jmp 0x1401e4ace
push rax
pushf
mov eax, 0xbcbc1bf6
pushf
not eax
add eax, 0xd549e1fa
xor eax, 0xe31e55ff
rol eax, 0x56
popf
pushf
not eax
add eax, 0x93d18554
xor eax, 0x94928c6f
rol eax, 0xb6
popf
jmp 0x1401e4ace
lea rbx, [rsp + 0x40]
push rax
pushf
mov eax, 0x6670cbc2
pushf
not eax
add eax, 0xe11f4d88
xor eax, 0xf8c35c51
rol eax, 0x5f
popf
pushf
not eax
add eax, 0xb546dadd
xor eax, 0xed343a29
rol eax, 0xed
popf
pushf
not eax
add eax, 0xb1aa4360
xor eax, 0xf4c16e76
rol eax, 0x2b
popf
pushf
not eax
add eax, 0xbf1f554e
xor eax, 0xa128df3c
rol eax, 0x2f
popf
jmp 0x1401e4ace
cmp rsi, rbp
jae 0x1401e4f37
movzx eax, word [rsi]
add rsi, 2
cmp ax, 0xa
jne 0x1401e4d96
push rax
pushf
mov eax, 0xd6995f7b
pushf
not eax
add eax, 0x86693980
xor eax, 0xa968278d
rol eax, 0x38
popf
pushf
not eax
add eax, 0xf3db1674
xor eax, 0xe36d7e1f
rol eax, 0xb7
popf
pushf
not eax
add eax, 0xb8a7b356
xor eax, 0x83e2d6c9
rol eax, 0x20
popf
jmp 0x1401e4ace
push rax
pushf
mov eax, 0x4f0790ba
pushf
not eax
add eax, 0xd7a66929
xor eax, 0xcfb94c0c
rol eax, 0x7e
popf
pushf
not eax
add eax, 0xf5c34e89
xor eax, 0xa10cf2b6
rol eax, 0xf
popf
pushf
not eax
add eax, 0xbda628b8
xor eax, 0xefc2d33d
rol eax, 0xd6
popf
jmp 0x1401e4ace
add dword [rdi + 8], 2
mov ecx, 0xef60b54
pushf
not ecx
add ecx, 0xc8c91a75
xor ecx, 0x9391af0d
rol ecx, 0x1d
popf
pushf
not ecx
add ecx, 0x85055c4d
xor ecx, 0xd03de834
rol ecx, 0x91
popf
pushf
not ecx
add ecx, 0xae74a223
xor ecx, 0xed880321
rol ecx, 0xd1
popf
mov word [rbx], cx
add rbx, 2
push rax
pushf
mov eax, 0x6a68a8d9
pushf
not eax
add eax, 0xbc927d00
xor eax, 0xdc64c6aa
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xdb047380
xor eax, 0xb472f7d2
rol eax, 0xaf
popf
pushf
not eax
add eax, 0xa8e39163
xor eax, 0xccd08059
rol eax, 0x4e
popf
jmp 0x1401e4ace
mov word [rbx], ax
add rbx, 2
lea rax, [rsp + 0x143e]
cmp rbx, rax
jb 0x1401e4ede
push rax
pushf
mov eax, 0xdfb4071c
pushf
not eax
add eax, 0xfe9b0ac4
xor eax, 0xe9254ded
rol eax, 0xc2
popf
pushf
not eax
add eax, 0xb0d3ec51
xor eax, 0x90c48073
rol eax, 0xda
popf
pushf
not eax
add eax, 0x875d5212
xor eax, 0xb3ca7042
rol eax, 0x56
popf
pushf
not eax
add eax, 0xf64c7d02
xor eax, 0xb4a5183f
rol eax, 0x3e
popf
jmp 0x1401e4ace
push rax
pushf
mov eax, 0xb7d50b74
pushf
not eax
add eax, 0x80cf0cf2
xor eax, 0xb21a1372
rol eax, 0x49
popf
pushf
not eax
add eax, 0xe97c9d2d
xor eax, 0xa92289d4
rol eax, 0x4e
popf
pushf
not eax
add eax, 0xb0a2408f
xor eax, 0x86770508
rol eax, 0xa8
popf
pushf
not eax
add eax, 0x8ab4ad25
xor eax, 0xac4f74b0
rol eax, 0x33
popf
jmp 0x1401e4ace
and qword [rsp + 0x20], 0
lea rax, [rsp + 0x40]
sub rbx, rax
lea r9, [rsp + 0x30]
sar rbx, 1
lea rdx, [rsp + 0x40]
add ebx, ebx
mov rcx, r14
mov r8d, ebx
jmp 0x1401e4f5b
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x1401e4f98
push rax
pushf
mov eax, 0xcdf5a0d7
pushf
not eax
add eax, 0xbf959c72
xor eax, 0x8dd3653a
rol eax, 0xe6
popf
pushf
not eax
add eax, 0xf42ed5ec
xor eax, 0xe1002dcc
rol eax, 0xf0
popf
jmp 0x1401e4ace
push rax
pushf
mov eax, 0xe1889f23
pushf
not eax
add eax, 0x81d1ba17
xor eax, 0xfed933fe
rol eax, 0xd6
popf
pushf
not eax
add eax, 0xf573e3e1
xor eax, 0xb71c3fd6
rol eax, 9
popf
jmp 0x1401e4ace
mov eax, dword [rsp + 0x30]
add dword [rdi + 4], eax
cmp eax, ebx
jb 0x1401e5009
push rax
pushf
mov eax, 0xe7771a95
pushf
not eax
add eax, 0xdf94e55c
xor eax, 0xa9a8f78d
rol eax, 0x94
popf
pushf
not eax
add eax, 0xb2a8ea0d
xor eax, 0xddb3ceb9
rol eax, 0xed
popf
jmp 0x1401e4ace
push rax
pushf
mov eax, 0xedea1525
pushf
not eax
add eax, 0xeb2f931c
xor eax, 0xd6a87c2d
rol eax, 0x3e
popf
pushf
not eax
add eax, 0xf5ee9c46
xor eax, 0xf29d61e1
rol eax, 0xb9
popf
pushf
not eax
add eax, 0xc34c2b41
xor eax, 0xd232076c
rol eax, 0x7b
popf
pushf
not eax
add eax, 0xf348177b
xor eax, 0xef4acd2d
rol eax, 0x2a
popf
jmp 0x1401e4ace
cmp rsi, rbp
jb 0x1401e50c0
push rax
pushf
mov eax, 0xaeef3b04
pushf
not eax
add eax, 0xb8e7ff9b
xor eax, 0xd9fb73a6
rol eax, 0x1e
popf
pushf
not eax
add eax, 0xa484c6a8
xor eax, 0x84cc635e
rol eax, 0x74
popf
pushf
not eax
add eax, 0xb171ae6f
xor eax, 0x84782b8b
rol eax, 0x92
popf
pushf
not eax
add eax, 0xf112debd
xor eax, 0xe578e913
rol eax, 0x6d
popf
jmp 0x1401e4ace
push rax
pushf
mov eax, 0x43e01d01
pushf
not eax
add eax, 0x8bbebfba
xor eax, 0x83a62e35
rol eax, 0x6e
popf
pushf
not eax
add eax, 0xac3ec63b
xor eax, 0x942579bb
rol eax, 0xb
popf
pushf
not eax
add eax, 0xe749382e
xor eax, 0xf7e3ff44
rol eax, 0xe7
popf
jmp 0x1401e4ace
jmp 0x1401e51a0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rdi], eax
push rax
pushf
mov eax, 0xa1ae85a3
pushf
not eax
add eax, 0x8f91687f
xor eax, 0xdb9a357a
rol eax, 0x45
popf
pushf
not eax
add eax, 0xb00fc72a
xor eax, 0xbf1ba303
rol eax, 4
popf
pushf
not eax
add eax, 0xa740d09f
xor eax, 0xa811d099
rol eax, 0xd
popf
jmp 0x1401e4ace
mov rax, rdi
mov rcx, qword [rsp + 0x1440]
xor rcx, rsp
call fcn.14027ae25
lea r11, [rsp + 0x1450]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x30]
mov rsp, r11
pop r14
pop rdi
pop rsi
ret