Function at 0x49b7dd
Capabilities:
Encrypt data using chaskey
Resolve function by parsing pe exports

Disassembly:
jne 0x49c297
xor ecx, esi
xor edx, 0xd657da3f
and ebx, esi
nop
mov ebx, ecx
xor ecx, edx
jmp 0x49aff2
add dword [esp + 0xf4], 0x78
bswap edx
ror ecx, 0x1c
mov ebx, edx
mov ecx, ebx
xor esi, 0xd67d0115
sub ebx, esi
add esi, 0xd67e857f
and ecx, 0xd67f143d
mov esi, ecx
bswap ebx
or ebx, edx
inc ebx
shr ebx, 0x11
xor ecx, ebx
jmp 0x49b5c8
add edi, dword [esp + 0x14]
mov esi, edx
inc edx
sub edx, 0xd7a9a717
nop
add esi, ebx
not edx
jmp 0x49d745
add dword [esp + 0xf4], 4
xchg ecx, esi
bswap ecx
inc ebx
or ebx, 0xd7f6f7e3
mov ecx, esi
bswap esi
xor esi, edx
shr ebx, 0xf
jmp 0x49c7bf
mov dword [esp + 0x94], 0
add esi, 0xd8ed7cd1
and ecx, esi
xor ebx, 0xd8f0137f
mov edx, ecx
xor ecx, 0xd8f2b4b9
not ebx
add ebx, 0xd8f56259
xor ebx, 0xd902006b
and ecx, edx
mov edx, 0xd9032251
dec esi
xchg ebx, edx
jmp 0x49e193
cmp byte [edi], 0
jmp 0x49a39e
mov edi, dword [edi]
rol ecx, 4
and ebx, esi
inc ebx
sub esi, ebx
ror ebx, 0x1f
xchg ebx, edx
jmp 0x49a679
sub dword [esp + 0xf4], 8
add ecx, esi
and ecx, ebx
xchg ebx, edx
neg esi
jmp 0x49ca63
mov dword [esp + 0xf4], 0
xchg esi, ecx
sub ebx, 0xdb8743f3
and esi, 0xdb87b101
mov ecx, edx
not esi
and ebx, 0xdb89016f
or ecx, ebx
ror ecx, 0x11
xor ebx, 0xdb8a5de7
and esi, edx
add ebx, esi
bswap edx
jmp 0x49de04
mov edi, dword [edi]
ror esi, 0x18
ror edx, 0x14
ror edx, 6
or ebx, edx
xor esi, 0xdb9425e3
add ecx, 0xdb94947d
xor ebx, edx
shr ecx, 0x1f
sub ecx, esi
xchg edx, ecx
xor ebx, edx
mov esi, ecx
jmp 0x49d224
pop edi
sub ecx, ebx
mov esi, ebx
mov ecx, 0xdb9cd84d
add ebx, 0xdb9d4175
and ecx, ebx
rol edx, 8
jmp 0x49c7de
add edi, dword [esp + 0x14]
or ebx, esi
xor ecx, ebx
add esi, edx
and esi, 0xdba9c32b
and ecx, edx
dec edx
add esi, ecx
mov ebx, 0xdbab8565
sub ebx, esi
dec ebx
xor ebx, 0xdbacd13f
ror ebx, 0x16
jmp 0x49d9ee
mov edi, dword [edi]
shr edx, 0x18
neg ebx
sub esi, 0xdbfbd1dd
xor ebx, 0xdbfc4077
or ebx, esi
or esi, 0xdbfd2849
jmp 0x49c803
mov edi, dword [esp + 0x14]
xor ecx, edx
and ebx, edx
sub ecx, ebx
or ecx, ebx
and ebx, edx
xchg esi, ecx
or ecx, edx
and ecx, ebx
jmp 0x49daf4
add edi, 0x3c
sub ecx, esi
rol ebx, 7
add ebx, esi
bswap esi
dec esi
or ecx, esi
add ecx, ebx
xchg ecx, edx
sub ebx, esi
add ebx, ecx
jmp 0x49c1cc
mov edi, dword [esp + 0x14]
dec ecx
and ecx, edx
bswap ebx
inc ebx
sub edx, ecx
rol ebx, 1
or edx, ebx
dec ecx
and esi, ebx
mov esi, 0xdd3850c7
jmp 0x49cda5
mov edi, dword [esp + 0x94]
xor edx, ecx
sub esi, ecx
and ecx, esi
xchg edx, ecx
xor ebx, esi
and ecx, ebx
bswap ecx
sub ecx, edx
sub ebx, 0xdd3fe76f
and edx, ebx
jmp 0x49b7b5
mov dword [esp + 0x14], edi
xor esi, 0xdd678b8b
rol edx, 7
mov ecx, edx
xchg ebx, edx
add edx, 0xdd6944d9
mov ebx, esi
or esi, ebx
xchg edx, esi
sub esi, edx
xchg edx, esi
xchg ecx, ebx
xchg esi, ecx
jmp 0x49c9f5
inc dword [esp + 0x10c]
and esi, 0xdd715987
not esi
xor esi, edx
or edx, esi
and edx, ebx
sub esi, ebx
jmp 0x49bbb2
mov edi, dword [edi]
or ebx, ecx
mov ecx, edx
and edx, 0xdd74fedb
sub ebx, 0xdd756c41
shl ebx, 0x1c
or esi, ebx
xor esi, ebx
xor edx, 0xdd772511
xchg ecx, edx
xchg ecx, esi
jmp 0x49b054
sub esp, 0x124
and edx, esi
or esi, ebx
or ecx, 0xdd795ded
ror ecx, 0x1a
add ebx, esi
neg ebx
jmp 0x49e1af
add edi, dword [esp + 0x14]
and esi, 0xdd7b45ff
xor esi, 0xdd7bb303
dec ebx
sub ecx, esi
mov edx, ecx
add esi, edx
mov ebx, esi
xchg ecx, edx
dec edx
dec ebx
jmp 0x49c86a
mov edi, dword [esp + 0x10c]
and ecx, ebx
and edx, ebx
xchg ebx, ecx
xchg edx, esi
shl edx, 0xb
sub ebx, ecx
or edx, ebx
ror ecx, 0x1e
neg edx
shr edx, 0x1e
or esi, edx
xor ebx, edx
or esi, edx
mov ebx, edx
and ebx, 0xdd9c3ea3
neg ebx
jmp 0x49c48d
mov dword [esp + 0x10c], eax
or ecx, 0xdd9d3b21
and esi, ebx
xor ebx, edx
xor ebx, ecx
mov edx, 0xdd9f015b
mov esi, ecx
jmp 0x49adb6
mov edi, dword [edi]
add esi, ecx
xor ebx, ecx
dec ebx
xchg ebx, ecx
jmp 0x49c1fd
add edi, dword [esp + 0x14]
and esi, ebx
xor esi, 0xe38dc47d
sub edx, ebx
and edx, esi
xor ebx, 0xe38f2669
sub ebx, edx
xor ebx, edx
xor ecx, ebx
sub esi, ecx
add ebx, ecx
xchg ecx, esi
shl edx, 0x15
jmp 0x49cc9f
add dword [esp + 0x94], 4
sub ebx, esi
mov esi, 0xe3be5761
or ecx, 0xe3bed18d
mov ecx, esi
and ecx, 0xe3bfb8f3
rol edx, 0x12
xchg ecx, ebx
sub esi, 0xe3c11543
inc edx
or ecx, ebx
sub ecx, 0xe3c2880f
ror ecx, 0x19
add ecx, ebx
and ebx, ecx
jmp 0x49b604
mov edi, dword [edi]
rol esi, 0x1e
xor ecx, edx
or esi, ecx
add esi, ebx
inc esi
or edx, ecx
rol esi, 0x17
mov ecx, 0xe3d28b4b
jmp 0x49c847
mul edi
and esi, 0xe45c568d
and edx, esi
or ebx, ecx
or edx, ebx
sub ebx, ecx
or esi, 0xe45fad17
sub ebx, edx
dec ecx
xor ecx, ebx
and ecx, ebx
jmp 0x49cab8
mov dword [esp + 0xf4], edi
or edx, ebx
mov ebx, esi
add ebx, ecx
sub esi, ecx
xor ecx, edx
or edx, esi
jmp 0x49d27d
jne 0x49b799
add esi, 0xe4710be1
dec ebx
add ecx, ebx
shr ebx, 0xe
dec edx
mov ecx, edx
mov esi, edx
xor ebx, 0xe474271d
xchg ebx, ecx
ror esi, 0x15
jmp 0x49a75a
mov edi, dword [edi]
and esi, ebx
rol esi, 5
add ebx, 0xe496a83b
xchg esi, ecx
mov ebx, edx
sub ecx, esi
add ecx, edx
add ebx, ecx
and ebx, edx
or ebx, ecx
and ecx, 0xe49a655f
add esi, edx
shr ebx, 0xd
and ebx, ecx
and ecx, edx
mov ebx, ecx
jmp 0x49d38d
add edi, 0x18
xor edx, esi
and ebx, edx
and esi, ebx
xor ecx, edx
and edx, ebx
mov ebx, edx
and edx, ecx
or esi, ecx
sub ecx, edx
mov ebx, edx
jmp 0x49cec9
xor al, byte [edi]
dec ecx
mov ecx, esi
inc ecx
neg esi
mov edx, esi
mov edx, ecx
and edx, ebx
or ebx, 0xe4b81c7d
mov edx, ebx
xchg ebx, edx
xor edx, ecx
mov esi, edx
rol ebx, 0xd
add esi, ecx
jmp 0x49c5e8
mul edi
xchg esi, ebx
mov edx, 0xe648f7b5
and ecx, esi
and edx, esi
add ecx, 0xe64a4af5
or esi, ebx
sub esi, ecx
sub ecx, 0xe64baa3b
neg ebx
xor esi, 0xe64c8df9
jmp 0x49b8ff
rol eax, 8
rol ecx, 0x12
sub esi, ecx
xchg esi, ecx
xchg edx, ebx
xchg esi, ebx
or edx, ecx
bswap edx
ror ecx, 7
nop
sub ebx, edx
or ecx, ebx
xchg edx, ecx
jmp 0x49d88e
mov edi, dword [esp + 0xf4]
dec ebx
sub ebx, 0xe691ae01
add esi, ecx
or edx, ebx
mov ecx, esi
mov edx, ecx
mov esi, 0xe693d06d
sub esi, ebx
jmp 0x49e149
mov edi, dword [esp + 0xf4]
xor edx, ebx
mov ecx, esi
or esi, ecx
ror edx, 0x13
xor edx, ebx
shr edx, 0x10
shr edx, 4
xor ecx, esi
jmp 0x49ada2
cmp eax, dword [esp + 0x74]
jmp 0x49c0aa
mov edi, dword [edi]
mov esi, ecx
add ecx, esi
sub edx, ebx
or esi, ebx
xor ebx, 0xe6c5f3d9
and edx, ebx
add edx, ebx
ror ecx, 0x16
xor ecx, edx
xchg edx, ebx
rol ebx, 0xd
sub ecx, ebx
jmp 0x49ba62
add edi, dword [esp + 0x14]
add ebx, ecx
xor ebx, esi
shl esi, 0x1d
and ebx, edx
or edx, ecx
mov ecx, 0xe6cfdfb7
mov edx, 0xe6d04e4b
xchg esi, ecx
jmp 0x49c092
mov dword [esp + 0x94], edi
shl ecx, 0x1d
xor esi, ebx
add esi, 0xe6d22781
or esi, ecx
and edx, ebx
or edx, ecx
or ecx, 0xe6d3e121
xor ebx, esi
neg esi
inc ebx
ror ebx, 0x1a
bswap ecx
jmp 0x49b799
mov edi, dword [esp + 0x14]
add ebx, ecx
xor ebx, 0xe709b593
xchg ebx, esi
rol ebx, 3
sub edx, 0xe70b292f
and ecx, ebx
and ebx, ecx
sub ebx, edx
jmp 0x49b41a
mov edi, dword [esp + 0xf4]
inc ecx
add ecx, 0xe7188c71
xchg esi, ebx
add ecx, ebx
sub edx, ecx
nop
mov esi, 0xe71ad083
sub esi, ecx
xor ecx, ebx
mov ecx, 0xe71c1925
jmp 0x49bc44
add dword [esp + 0xf4], eax
and edx, 0xe723c549
add esi, ecx
xor ebx, esi
shl edx, 0x15
or esi, ecx
mov edx, 0xe725ff6f
jmp 0x49c656
mov edi, dword [edi]
add esi, ecx
sub ecx, ebx
shr esi, 0x18
xor esi, ecx
sub edx, ecx
neg esi
dec esi
mov ecx, 0xe729ad8b
jmp 0x49b7f9
add esp, 0x124
sub edx, ebx
bswap edx
add ebx, 0xe80321b9
mov ecx, esi
xor ebx, esi
xor edx, esi
add ebx, ecx
shr ecx, 0x1a
sub ecx, ebx
mov edx, ecx
and esi, ecx
shl esi, 0x16
jmp 0x49d521
add edi, dword [esp + 0x10c]
and ebx, 0xe807aaa7
mov esi, 0xe808177d
mov ecx, edx
or ecx, esi
xor esi, 0xe8096b0b
or ecx, ebx
add ecx, ebx
xchg ebx, edx
and edx, esi
xchg ecx, edx
mov ecx, edx
sub ebx, 0xe80c77ef
jmp 0x49e122
add edi, dword [esp + 0xf4]
or ecx, edx
or edx, esi
xor esi, 0xe824e6f1
xchg ecx, esi
mov ecx, ebx
xchg edx, ebx
add esi, ebx
and ecx, 0xe8272845
jmp 0x49afab
mov edi, dword [edi]
neg edx
and edx, ecx
xchg edx, ecx
bswap ebx
jmp 0x49b750
add dword [esp + 0xf4], 0x20
inc ecx
sub ecx, edx
rol ecx, 0x1d
sub esi, 0xe84cdf13
mov esi, ecx
or esi, ebx
xor edx, ecx
or edx, esi
xor esi, ecx
or ecx, edx
xchg esi, ecx
ror ebx, 0xa
jmp 0x49df28
mov dword [esp + 0xf4], edi
sub ecx, edx
and ebx, 0xe9a582d1
xor ebx, esi
ror ebx, 0x18
jmp 0x49b370
mov edi, dword fs:[edi]
mov edx, ecx
xchg ecx, ebx
mov edx, 0xea57660f
mov esi, edx
not ecx
add ecx, esi
jmp 0x49e203
mov edi, dword [esp + 0x94]
and esi, ecx
sub edx, ecx
or ecx, esi
ror esi, 0x12
mov ecx, edx
or esi, 0xea5b5c1d
xor ecx, 0xea5bde53
inc esi
and ebx, ecx
and ebx, esi
jmp 0x49ccc8
mov dword [esp + 0xf4], edi
mov ecx, esi
or ecx, ebx
sub ecx, ebx
or ecx, esi
or edx, ecx
shl ecx, 0xc
bswap edx
neg ebx
xor ebx, esi
mov esi, edx
mov edx, 0xea832a27
xor ebx, ecx
rol esi, 0x11
add ebx, ecx
jmp 0x49a406
ret
mov dword [esp + 0x94], edi
mov edx, 0xec8d8ba5
or esi, ecx
add esi, 0xec8e81fb
mov ecx, ebx
mov ebx, edx
rol esi, 0x1a
not ebx
sub esi, ecx
and edx, esi
rol esi, 0xd
xor ebx, esi
shr edx, 0x1e
add esi, 0xec93620b
dec ebx
and esi, 0xec945ec9
or ebx, 0xec94d861
jmp 0x49e049
inc edi
bswap edx
or edx, ecx
sub ecx, 0xecb6bd73
xor ecx, edx
mov esi, 0xecb7b703
and esi, edx
sub edx, 0xecb894b7
sub esi, 0xecb909b7
xor edx, esi
dec edx
jmp 0x49abde
push edi
and esi, edx
xchg edx, ecx
add esi, 0xece88b87
dec esi
and esi, edx
or ecx, esi
sub edx, 0xecea5151
dec ebx
and ebx, ecx
neg ebx
jmp 0x49da0e
xor eax, eax
xor esi, 0xecec289f
xchg esi, ebx
mov ebx, 0xeced0fdb
mov esi, edx
xchg ecx, ebx
add ecx, ebx
xor edx, ecx
mov ebx, 0xecef6af5
jmp 0x49c297
add dword [esp + 0xf4], edi
mov esi, 0xed0a9cc3
rol ebx, 9
mov ebx, 0xed0ba4d3
inc esi
bswap ebx
mov ecx, ebx
xor esi, edx
xchg esi, edx
jmp 0x49ced8
mov edi, 0x30
xchg ecx, edx
xchg esi, ebx
dec esi
and esi, ecx
jmp 0x49d266
add edi, 0xc
sub ecx, edx
mov esi, edx
sub ecx, edx
sub ecx, 0xee0a88b5
bswap esi
and edx, ebx
and edx, ecx
xchg ebx, ecx
sub esi, 0xee0ceaf9
and ecx, ebx
mov esi, ecx
xchg ebx, ecx
mov ebx, edx
shl ecx, 0x16
jmp 0x49b2ba
mov dword [esp + 0x74], edi
shl edx, 0x1e
add ebx, ecx
xchg ebx, esi
mov edx, 0xee1128cf
add esi, ecx
bswap ebx
inc esi
add ecx, esi
rol edx, 3
mov ebx, esi
jmp 0x49dc8b
mov edi, dword [esp + 0xf4]
mov esi, 0xee364ecf
xor ebx, 0xee36bd43
or ebx, ecx
neg edx
or esi, ebx
and esi, ecx
sub ecx, edx
dec ecx
jmp 0x49cad8
mov edi, dword [edi]
mov ebx, esi
shr ecx, 0x12
dec ecx
neg edx
xchg edx, esi
and ecx, 0xee3f4b47
or ebx, 0xee3fc5eb
bswap ecx
and edx, 0xee40bf75
add edx, esi
jmp 0x49ddd7
movzx edi, word [edi]
or ecx, 0xee50ac6b
sub esi, ebx
neg ebx
xor ecx, edx
ror edx, 0xd
shr ecx, 0x10
or esi, edx
xor esi, ebx
jmp 0x49c026
mov eax, 2
and ecx, edx
or edx, ecx
ror esi, 0x11
ror ecx, 0x12
jmp 0x49b8cc
mov eax, 4
shl edx, 4
or edx, 0xefa59351
or edx, ecx
or ecx, edx
xor esi, ebx
add ecx, 0xefa76f4d
add ebx, edx
xchg ecx, ebx
xor edx, ecx
neg ecx
jmp 0x49e002
mov edi, dword [edi]
add ebx, ecx
sub edx, 0xefaa3baf
sub ecx, ebx
mov esi, edx
shl ebx, 0x15
not esi
and esi, ecx
shl ebx, 0x16
shr ecx, 0x13
neg edx
and edx, 0xefae3b7f
xchg esi, edx
jmp 0x49ba70
mov dword [esp + 0x14], 0
xor edx, esi
mov ecx, esi
xor esi, edx
dec ebx
rol ebx, 4
and ebx, ecx
jmp 0x49af4e
mov dword [esp + 0x10c], 0
sub ecx, 0xefb6566f
dec edx
or edx, ecx
or edx, 0xefb7a2c7
add edx, 0xefb820a7
xor ecx, edx
or edx, ecx
and ebx, edx
xor ecx, 0xefb9de6b
add edx, 0xefba4fed
jmp 0x49a9e2
add edi, 0xc
xor ecx, 0xefbece8f
mov ebx, 0xefbf43d1
or esi, ebx
and ebx, esi
xor ecx, ebx
rol ebx, 0x1c
shr ebx, 0xd
add esi, 0xefc216eb
and esi, ecx
sub ebx, edx
sub ebx, esi
xor edx, 0xefc3e8ed
jmp 0x49df65