Function at 0xccea4e
Capabilities:
Authenticate hmac
Encode data using base64
Encode data using xor
Encrypt data using aes mixcolumns step
Encrypt data using chaskey
Execute anti-debugging instructions

Disassembly:
or eax, 0xee28c61a
int1
xchg esp, eax
sbb dword [ebp - 0x6d], edi
daa
mov edx, cs
invalid
inc dword [eax]
add byte [eax], al
add byte [ecx], dh
scasd eax, dword es:[edi]
out 0xf, al
das
adc esi, dword [ebx + edi*2 - 0x5dcfa201]
add bl, bh
cmp byte [edi], ah
lodsb al, byte [esi]
add bh, byte [eax + 0x30]
dec edx
mov cl, 0x8e
push es
push ebx
sahf
rol ebp, cl
cld
jmp 0xcce9a3
jne 0x15bc0d1
fstp dword [edx - 0x45]
movsd dword es:[edi], dword [esi]
jns 0xcce9e6
xchg edx, eax
mov dword [si + 0x52], edx
daa
dec ebp
xchg byte [ebx + 0x7c76661f], ah
lodsd eax, dword [esi]
xor byte [ebp - 0x14ed1077], ah
dec ebx
xchg byte [ebx + 0x3d], al
mov byte [0x1876167e], al
invalid
xor eax, esi
inc ecx
ror dword [esp + 8], 0x5c
push 0xbc9d5031
push 0xf18c2a87
xor eax, 0xec2c089b
dec edx
push 0xe1b526bd
push 0x2dba16ab
lea esp, [esp + 0x1c]
jne 0x1205666
pop esi
mov edx, 0x633dc38
and dl, 0xbf
movsx ecx, dl
not eax
sal dl, 0x21
mov dword [esi + edx - 0x633dc70], eax
mov eax, ecx
cwde
jg 0xd73f11
inc ecx
mov ecx, dword [eax]
dec ecx
add eax, 4
inc ecx
xor ecx, ecx
inc ecx
mov edx, 0x97b92729
inc ecx
mov esi, 0xbea83c11
dec ecx
inc ebp
mov ebx, edx
inc ecx
movzx ebp, dx
dec esp
imul esi, ebp
xor ecx, 0xe0a56535
inc ecx
movzx edx, dx
sub ecx, 0x96bee6b2
dec eax
btc ebp, 0x39
inc ecx
push ebx
rol ecx, 2
dec esp
mov dword [esp + edx - 0x2729], ecx
inc cx
shr ebx, 0xe8
inc eax
setne ch
xor dword [esp + edx*8 - 0x13948], ecx
inc esp
movzx ecx, dx
dec esp
lea esp, [ebp + 0xeb0cb12]
inc ecx
pop ecx
inc ebp
movzx edi, bl
inc ebp
sub dh, dh
inc bp
add edx, esp
dec eax
lea edi, [edi + edx*2 - 0x4e56]
mov dword [edi + edx - 0x2729], ecx
jg 0x126751a
lea ebp, [edx + ebp - 0x182aa6d1]
setp dl
xor eax, ebx
mov ecx, edx
lea eax, [eax + edx*4 - 0x672735a]
bt dx, cx
sbb ecx, 0x3929d398
sal ecx, 0x89
xor eax, 0x438e3a91
sal ecx, 0xf9
ror dl, 0xc3
btr edx, 0x88
rol eax, 1
call fcn.01178113
inc ecx
bswap edx
inc ecx
xor edx, 0xc92a481f
inc cx
ror ebp, 3
dec eax
shr dword [esp + edx - 0x9e97], cl
inc ecx
bt esi, 0x88
dec esp
mov dword [esp + edx*2 - 0x13d2e], ecx
inc esp
xor dword [esp + edx*4 - 0x27a5c], edx
inc cx
sub edi, 0xf440c82
mov esi, 0xebf749ca
inc ecx
pop ecx
sbb esi, ebp
inc sp
xor ebp, edx
dec ebp
arpl dx, dx
dec ecx
imul esi
inc ecx
rol ebp, cl
dec ecx
add ebx, edx
dec eax
cwde
inc ecx
push edi
xchg word [esp + edx*2 - 0x44d57d05], ax
dec eax
mov dword [esp + edx - 0x226abe84], ebx
ret
inc ebp
mov edx, dword [eax + edx - 0x2729]
inc esp
movsx ebp, dl
ja 0x12b302a
call fcn.00c8a29c
inc dword [esp + edx - 0x9e96]
shr dword [esp + edx - 0x9e95], cl
jns 0x15a4690
aad 0x47
idiv byte [esi + 3]
xchg ebx, eax
ja 0x12b301c
lcall 0x2be4, 0x118ecbf1
dec ebx
invalid
inc ebp
mov edx, dword [eax + edx - 0x9e97]
not word [esp + edx - 0x9e96]
dec esi
lea eax, [edx + eax - 0x9e93]
dec ecx
rol esp, cl
inc ebp
movsx ebx, bh
inc ebp
xor edx, ecx
inc ecx
ror edx, 1
dec eax
neg dword [esp + edx - 0x9e97]
dec ecx
btc ebx, ecx
inc esp
movsx ebp, byte [esp + edx*4 - 0x27a5c]
inc ebp
lea edx, [edx + edx*2 - 0x40ba2aba]
inc ecx
mov eax, esp
jae 0x1164e0d
shr eax, 8
jmp 0xcff26a