Function at 0x4111f0
Capabilities:
Encode data using xor
Encrypt data using chaskey
Hash data using murmur3
Read file via mapping
Resolve function by parsing pe exports

Disassembly:
and dword [0xe6899b], edi
xchg ebx, edx
or ebx, dword [0xe46bba]
add esi, 0x9de2e20c
ror edx, 0x18
sub ebx, edi
xor eax, 0xadc66da
test edi, 0x51bfdaa7
jbe 0x4111eb
xchg edi, esi
mov ebx, esp
cmp ebp, 0xfed06283
invalid
sar dh, 1
sar dh, 1
jle 0x4111fb
and edx, 0xfdaed19
mov ebx, eax
not edx
and edx, 0x501a3119
xchg edx, eax
dec ecx
jne 0x4111c2
mov ecx, 0x32d3cc96
ror edi, 0x1b
neg edi
xor ebx, 0x9a11bf9d
not edx
test edi, edx
jne 0x411227
mov dword [0xe6851c], eax
xor dword [0xe68741], ebx
call fcn.00b7024a
not esi
ror ebx, 0xb
add esi, ebp
dec ecx
jne 0x411210
mov ecx, 0x516b473d
add dword [0xe68554], ebx
add eax, ebp
or edx, eax
not ebx
mov esi, edx
and edx, eax
inc esi
call fcn.004d1bcf
mov dword [0xe68419], ebx
mov edi, 0xbee26969
and dword [0xe687d1], 0x602d0cbf
not edi
mov eax, dword [0xe585ab]
not esi
sub ebx, dword [0xe49f2b]
xor dword [0xe68662], ecx
xchg dh, ah
add byte [edi + 0x75058bd6], al
stosd dword es:[edi], eax
in al, 0
xor dword [0xe68626], esi
call fcn.004d4db3
dec ecx
jne 0x411242
mov eax, 0x529f8f81
rol eax, 0x19
add eax, 0xeccd21f4
add esi, dword [0xe68f52]
or ecx, dword [0xe68a55]
not esi
add dword [0xe684aa], edi
dec ecx
add dword [0xe68910], edx
not eax
rol esi, 0x17
call fcn.004ae7a5
or edx, dword [0xe68f75]
not edx
call fcn.009f3050
inc edi
not eax
rol ebx, 0xc
call fcn.00ca0682
call fcn.00870f2f
ror ebx, 0xc
not eax
dec edi
call fcn.0067256c
not edx
ror esi, 0x17
not eax
add dword [0xe68552], esi
inc ecx
and dword [0xe686ca], ecx
not esi
sub eax, 0xeccd21f4
ror eax, 0x19
and eax, 0xe05d62fe
inc esi
not esi
ror esi, 0x11
xor dword [0xe6849b], 0x16233aca
xor edx, dword [0xe68ed3]
call fcn.0054de4d
add dword [0xe6878d], edi
xor dword [0xe687b5], edx
ror edx, 0x1f
call fcn.00625781
rol edx, 0x1f
xor dword [0xe68508], eax
mov dword [0xe68468], 0xa503dfab
rol esi, 0x11
not esi
dec esi
sub eax, 0x401d0280
neg ecx
inc ebx
rol ecx, 0x1f
call fcn.0050a449
xor esi, dword [0xe68dc1]
inc esi
xor esi, 0xeab404b
inc eax
sub eax, ebx
add dword [0xe686c1], eax
xor esi, 0x5ed0c556
neg edi
call fcn.00c25a7e
sub edx, dword [0xe68d34]
not edi
xor ebx, eax
not ecx
add esi, 0xab248ce6
and dword [0xe68629], eax
add edx, ecx
xor edx, dword [0xe68af2]
sub edx, ecx
sub esi, 0xab248ce6
not ecx
xor ebx, eax
not edi
call fcn.0069fbeb
neg edi
xor esi, 0x5ed0c556
sub dword [0xe686cf], eax
add eax, ebx
dec eax
xor esi, 0xeab404b
dec esi
call fcn.0079fc2e
ror ecx, 0x1f
dec ebx
neg ecx
push eax
sub ecx, ebx
sub dword [0xe684b1], ecx
neg esi
or dword [0xe68790], ebx
add esi, ebx
call fcn.00ba2211
add eax, 0xd7aa00aa
xchg ecx, esi
inc esi
xor ecx, dword [0xe68b9c]
dec esi
xchg ecx, esi
sub eax, 0xd7aa00aa
sub esi, ebx
sub dword [0xe6878a], eax
neg esi
and dword [0xe684b6], esi
add ecx, ebx
mov ebx, 0x4e92e
neg esi
ror ecx, 8
sub ecx, dword [0xe68df6]
call fcn.008793f5
xchg ebx, esi
xor esi, dword [0xe68f7c]
ror ebx, 0xe
call fcn.007872ed
xchg eax, edx
call fcn.00646e85
call fcn.0050cb6c
xchg eax, edx
call fcn.00593efc
rol ebx, 0xe
xchg ebx, esi
rol ecx, 8
neg esi
push ebx
or edx, dword [0xe68a3c]
sub dword [0xe6873a], eax
inc eax
sub ebx, dword [0xe68e37]
xor ebx, 0x1dfffe98
call fcn.00b4d07c
dec edi
sub dword [0xe6892b], ebx
or dword [0xe684bc], edi
dec esi
sub edx, dword [0xe68e3d]
dec edx
neg ecx
dec esi
neg esi
dec edi
or eax, dword [0xe68ae7]
call fcn.00a581be
inc edi
neg esi
inc esi
neg ecx
inc edx
inc esi
and dword [0xe688bd], edx
add dword [0xe68707], edx
inc edi
call fcn.009491cb
xor ebx, 0x1dfffe98
dec eax
mov dword [0xe685d8], ecx
mov eax, 0x67129e61
inc edx
xor ebx, 0x89b5de69
call fcn.00c7b440
add dword [0xe684d3], esi
xchg edi, eax
rol edi, 0x1e
xor ebx, dword [0xe68ccf]
and dword [0xe68428], 0x42947eb
or ecx, dword [0xe68ed9]
sub esi, 0x52db85e5
not ebx
xor dword [0xe68752], ecx
sub edi, ecx
xor edx, ecx
call fcn.0048660c
call fcn.0053ee39
call fcn.00b45c92
call fcn.00862981
xor edx, ecx
add edi, ecx
and dword [0xe689c5], edi
not ebx
add esi, 0x52db85e5
mov dword [0xe68695], 0x2620a142
ror edi, 0x1e
xchg edi, eax
sub dword [0xe68551], eax
call fcn.007ed50f
xor ebx, 0x89b5de69
dec edx
add eax, 0x8e8d82c
xor ecx, dword [0xe68e46]
inc edx
rol edi, 1
xor ecx, 0xa908b105
sub dword [0xe685a0], edx
add ebx, 0xde97eb6
xor edx, dword [0xe68c3a]
call fcn.0077276e
ror edi, 7
call fcn.00b55044
rol edi, 7
call fcn.00cb66a1
sub ebx, 0xde97eb6
and dword [0xe689dd], edx
xor ecx, 0xa908b105
ror edi, 1
dec edx
sub eax, 0x6ffb768d
xor dword [0xe687f0], ebx
inc edi
neg eax
dec edx
xor eax, ebx
add esi, dword [0xe689fd]
or dword [0xe689d7], ecx
sub esi, dword [0xe68c99]
xor ebx, edi
dec edx
ror edi, 0x18
xchg edi, edx
not esi
xor edx, dword [0xe68f13]
neg eax
xor esi, ecx
xor edx, eax
or edi, dword [0xe68bd8]
xor edx, eax
xor esi, ecx
neg eax
not esi
xchg edi, edx
rol edi, 0x18
inc edx
xor ebx, edi
or dword [0xe689b9], ebx
xor eax, ebx
inc edx
neg eax
dec edi
push eax
call fcn.00c638a2
inc ecx
and dword [0xe685f8], ebx
sub eax, dword [0xe68aff]
and dword [0xe6872d], 0x94e56329
xor ebx, esi
neg ecx
add eax, ecx
mov dword [0xe68707], eax
rol ecx, 9
call fcn.00516fbf
xor dword [0xe684b6], edx
dec esi
add edx, ebp
or esi, dword [0xe68fb9]
xor esi, ebx
add edi, ebx
xor eax, 0xc013d398
add ecx, 0x8b5b7d37
sub ecx, 0xbaaf664d
xchg edi, edx
call fcn.00cba13a
xchg edi, edx
add ecx, 0xbaaf664d
sub ecx, 0x8b5b7d37
xor eax, 0xc013d398
sub edi, ebx
xor esi, ebx
sub edx, ebp
inc esi
add dword [0xe68883], edi
ror ecx, 9
mov dword [0xe6865f], esi
sub eax, ecx
neg ecx
xor ebx, esi
mov dword [0xe6869b], 0x17727047
add dword [0xe68753], eax
dec ecx
call fcn.00b78579
mov esi, 0xac4edcf3
inc eax
sub edx, esp
or esi, dword [0xe68ee6]
xchg edi, edx
add esi, dword [0xe68d55]
xor edi, 0x84d23c44
inc edx
sub ebx, 0x3c24c9fd
call fcn.006a8fd2
xor ebx, eax
xor dword [0xe6876b], 0x42c70f01
xchg edi, eax
neg esi
xchg esi, eax
ror edi, 0x1b
add ecx, 0x4ae7e961
not ebx
or dword [0xe6848c], edx
neg edx
xchg eax, edx
xchg eax, edx
neg edx
and dword [0xe68728], edi
not ebx
sub ecx, 0x4ae7e961
rol edi, 0x1b
xchg esi, eax
neg esi
xchg edi, eax
xor ebx, eax
call fcn.00b63d1c
add ebx, 0x3c24c9fd
dec edx
xor edi, 0x84d23c44
xchg edi, edx
add edx, esp
dec eax
or esi, 0x7c395fc0
sub dword [0xe686ac], 0xd6893c6a
or dword [0xe68523], ebx
sub ecx, 0xffd2c811
add eax, dword [0xe68eae]
neg eax
sub dword [0xe685fd], ecx
xor eax, edx
sub dword [0xe68403], ecx
neg esi
ror eax, 0xb
neg eax
mov dword [0xe6870f], 0x295b73bb
xor eax, esi
xor ebx, esp
xor ebx, 0x77ebcb79
sub esi, dword [0xe68f3b]
not esi
call fcn.00886dac
call fcn.006a35f4
not esi
xor ebx, 0x77ebcb79
xor ebx, esp
xor eax, esi
xor dword [0xe6888a], 0x6d822607
neg eax
rol eax, 0xb
neg esi
mov dword [0xe68852], edi
xor eax, edx
neg eax
add ecx, 0xffd2c811
add dword [0xe687fd], ebx
mov dword [0xe68910], 0x3f63a5c0
xor esi, 0xfc7fdfb3
xor edi, 0xbeed10b
rol eax, 0xc
xor edx, edi
add esi, dword [0xe68cd6]
sub dword [0xe68439], 0x3dc58131
add esi, 0x90c07697
call fcn.00605297
xor edx, dword [0xe68cad]
sub edx, 0x139abafd
add ecx, 0x390fa8a9
neg esi
xor dword [0xe6875a], eax
neg esi
sub ecx, 0x390fa8a9
add edx, 0x139abafd
sub esi, 0x90c07697
xor dword [0xe687d2], 0x242daefd
xor edx, edi
ror eax, 0xc
xor edi, 0xbeed10b
push esi
ror eax, 3
neg edx
or dword [0xe6861b], edx
sub eax, dword [0xe68a66]
rol eax, 5
sub eax, ebx
xor edx, edi
mov dword [0xe687a4], esi
add dword [0xe687fa], eax
xor eax, esi
add ebx, dword [0xe68d04]
xchg ecx, esi
call fcn.00c5dce5
call fcn.005f9745
xchg ecx, esi
xor eax, esi
or dword [0xe6895b], ebx
add dword [0xe6889a], edi
xor edx, edi
add eax, ebx
ror eax, 5
neg edx
rol eax, 3
mov esi, 0x36e6b8d0
sub eax, ebx
call fcn.00c2e0dc
sub edi, dword [0xe68e04]
xor ebx, dword [0xe68d95]
inc edi
dec eax
xor esi, 0x63f9415c
add ebx, dword [0xe68cdf]
dec ebx
xchg edi, esi
add ecx, dword [0xe68f26]
sub dword [0xe6853a], edx
xor ecx, dword [0xe68c47]
neg ebx
xor eax, ebp
sub edx, 0xfdc9f0f6
add edx, 0xfdc9f0f6
xor eax, ebp
neg ebx
or dword [0xe68939], ebx
xchg edi, esi
inc ebx
xor esi, 0x63f9415c
inc eax
dec edi
call fcn.00bb528a
add eax, ebx
xor esi, 0x6ccff5ce
not edx
add esi, 0x98e28c59
sub ebx, edx
dec edi
add dword [0xe688ba], ebx
sub esi, dword [0xe68a4d]
rol eax, 0x19
xor eax, dword [0xe68f0d]
ror esi, 1
inc esi
sub edi, dword [0xe68e6d]
or dword [0xe68906], 0xdc5d02d9
and dword [0xe68525], eax
xor esi, eax
add edi, esp
rol esi, 0x1d
call fcn.00b72bcd
call fcn.00b68f2b
call fcn.0050b5ff
call fcn.009e2e29
ror esi, 0x1d
sub edi, esp
xor esi, eax
add dword [0xe6896b], esi
sub dword [0xe6862c], 0x3e3cabef
dec esi
rol esi, 1
ror eax, 0x19
add dword [0xe68806], edx
inc edi
add ebx, edx
sub esi, 0x98e28c59
not edx
add esi, 0xa5d6b2e2
xor ecx, dword [0xe68abe]
rol edx, 0x1e
inc eax
not edi
or eax, dword [0xe68e3e]
ror esi, 0xc
inc ebx
not esi
ror ecx, 0xd
add ecx, eax
dec ecx
mov dword [0xe687b0], eax
inc edi
or ebx, dword [0xe68a3b]
ror esi, 0xb
rol esi, 0xb
dec edi
mov dword [0xe68625], esi
inc ecx
sub ecx, eax
rol ecx, 0xd
not esi
dec ebx
rol esi, 0xc
not edi
dec eax
ror edx, 0x1e
push esi
xchg ebx, esi
xor dword [0xe68637], edx
xor ecx, 0x63506bb2
sub ecx, 0x429ea9bc
sub dword [0xe684e3], edi
add edi, dword [0xe68b3f]
call fcn.0066c12b
xor dword [0xe68447], edi
sub eax, dword [0xe68eee]
call fcn.005ac0dc
dec esi
xchg ebx, eax
xor edi, eax
xor ebx, dword [0xe68aca]
xchg esi, eax
xor ebx, edi
ror esi, 0x18
rol esi, 0x18
xor ebx, edi
xchg esi, eax
xor edi, eax
xchg ebx, eax
inc esi
call fcn.004f1a63
call fcn.00bb258b
add ecx, 0x429ea9bc
xor ecx, 0x63506bb2
xor dword [0xe6870e], ebx
xchg ebx, esi
mov esi, 0x53202f39
and dword [0xe68624], esi
sub edi, 0xe707995c
sub dword [0xe684b0], esi
sub dword [0xe6869f], ecx
add eax, esi
xchg eax, edx
sub dword [0xe68787], edx
neg esi
add dword [0xe68922], esi
add edx, esi
add esi, dword [0xe68b51]
ror ecx, 5
rol ecx, 5
sub edx, esi
neg esi
or dword [0xe6853d], ecx
xchg eax, edx
sub eax, esi
and dword [0xe687f4], ecx
add edi, 0xe707995c
or dword [0xe68849], edx
xor esi, 0xdf539de6
sub esi, 0xf7ef03d2
not ecx
ror edx, 0x1a
not esi
ror edi, 8
sub edx, edi
inc ecx
xchg edi, esi
inc edi
mov dword [0xe6840b], eax
xor dword [0xe689bc], edi
not esi
sub dword [0xe687db], ecx
call fcn.004070c2
push dword [ebx]
cmp eax, 0xe68c41