Function at 0x489aaa
Capabilities:
Encode data using xor

Disassembly:
xchg ebx, eax
mov al, 0xc0
cld
mov cl, 0xf8
aas
push esp
retf
fbstp tbyte [eax]
adc esi, dword [ebp + eax*8 + 0x78]
dec esi
lahf
jb 0x489afd
sbb al, 0x1c
xchg ecx, eax
rcl byte [edx + edi*2 - 0x54]
ror dword [ecx + 0x460237d2], cl
mov al, byte [0xb4e8d40]
sal byte [edi], cl
add al, byte [esi - 0x60]
inc eax
lea ecx, [esi + 0xb]
sbb al, bl
stosd dword es:[edi], eax
jne 0x489abe
inc ebp
outsd dx, dword [esi]
invalid
leave
cmpsb byte [si], byte es:[di]
test esi, edx
xchg edx, eax
lodsb al, byte [esi]
inc ebp
loop 0x489b6e
add al, 0xef
dec ebp
test al, 0xa3
sahf
fistp word [ecx - 0x1c]
xchg ebp, eax
in eax, dx
jb 0x489a97
vpacksswb ymm1, ymm6, ymm4
fnstenv [ecx - 0x1c907e91]
mov ecx, 0xb5eb22eb
xchg edi, eax
test esi, ebx
adc edx, dword [ecx + 0x3e]
lea edi, [edi - 0x54]
outsb dx, byte [esi]
pop esp
bound ebx, qword [ebx - 0x2fd90534]
jns 0x489b81
not byte [edx + 0x71]
out dx, eax
inc ecx
popfd
test dword [ecx], ecx
ja 0x489b0f
lcall 0x896a, 0xd3693aa0
js 0x489baa
cld
popal
stosb byte es:[edi], al
push 0x14
movsd dword es:[edi], dword [esi]
xor edx, dword [edx]
mov ch, 0x40
cld
inc esp
bound ebx, qword [ecx - 0x71]
test dword [ecx], esi
cmp dword [ecx], eax
cli
shl dword [eax - 0x2abf8433], 0xc2
cmp byte [edi], 0xff
xor byte [ebx + 0x7cd7948], ah
jecxz 0x489ae7
jbe 0x489b9e
jmp 0xf0a34d62
or eax, 0x9e108b5d
sti
lds edi, [edx - 0x39]
jbe 0x489b19
xchg edx, eax
mov eax, dword [0x38407b3f]
wait
insb byte es:[edi], dx
insb byte es:[edi], dx
push 0x5ec009be
lahf
aas
invalid
cmp dword [ebx + 0x6c94a532], ebp
mov esi, gs
wait
imul edi, dword [esi], 0xd9a2d5c
jl 0x489b81
sub eax, 0xd27c0d9a
jns 0x7c19c598
or eax, 0xe8c3570
jg 0x489bf5
mul byte [edx - 0x408f62ed]
add ebx, esp
les edx, [eax + eax*2 + 0x28]
imul ebx, ecx, 0x144548c0
shr dl, cl
test eax, 0x24304358
xchg edi, eax
test al, 0x32
adc al, 0x59
mov ebp, 0xd4b11937
mov dh, 0x70
lsl esp, word [esi + 0x7c3479ab]
push 0x6b6ab204
sub eax, 0xa0839845
mov ebp, 0x9b1afca7
pop edx
pop ebp
push 0xfffffffffffffffc
sbb bl, byte [ebx - 0x395a2a6]
xor al, 0x1a
push ebp
sbb byte [ebx], bl
sal byte [ebx + 0x73], 1
mov ecx, 0x63c4ca03
lodsd eax, dword [esi]
xchg esp, eax
xor eax, 0x3df1bab0
push esi
cmp bl, dl
les ecx, [ebx + ecx*2 - 0x358bfb3]
push esi
outsb dx, byte [esi]
jno 0x489c56
or eax, 0x9ee76a17
mov dh, 0xab
pop ds
pop ebp
cmp ebp, ebx
nop
push ebp
in al, dx
js 0x489c58
jmp [ebp + eax*4 + 0x1c392848]
lodsd eax, dword [esi]
push edx
fist word [ecx]
out dx, al
mov ebp, 0x7657b8c
xor al, 0x5f
sub edx, edi
sbb cl, byte [eax - 0x79]
xor byte [edi + 0x48], al
and dword [eax + 0x1c], ecx
pop esi
salc
mov ebp, 0x57128ac1
loopne 0x489c10
inc esp
repe scasd eax, dword es:[edi]
inc eax
sbb al, 0x2e
fnstcw word [esi + 0x7b]
out 0xf6, al
cmp al, 0x6e
invalid

Function at 0x49f95b
Capabilities:
Encode data using xor

Disassembly:
mov byte [0x498acc10], al
lodsd eax, dword [esi]
cwde
cli
lea ebx, [edx]
fidiv word [edx]
cmpsd dword [esi], dword es:[edi]
mov dword [esi - 0x1a], ecx
inc edi
sbb bl, dh
xor ah, byte [edi + 0x47e64e89]
call 0x108131ad
fst st(6)
aaa
std
nop
xchg ebp, eax
mov dword [eax - 0x791039ac], ecx
jns 0x49f964
ljmp 0x857d:0xdf0845af