Function at 0x1801e34a0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xba8]
sub rsp, 0xca8
mov qword [rsp + 0x70], 0xfffffffffffffffe
mov rax, qword [0x18036d060]
xor rax, rsp
mov qword [rbp + 0xb90], rax
mov rdi, r9
mov qword [rsp + 0x50], r9
mov rbx, r8
mov rsi, rdx
mov r13, rcx
mov rax, qword [rbp + 0xc10]
mov qword [rsp + 0x58], rax
mov rcx, qword [rbp + 0xc18]
mov qword [rsp + 0x68], rcx
mov r12, qword [rbp + 0xc20]
mov r15, qword [rcx + 8]
mov qword [rsp + 0x60], r15
xor r14d, r14d
mov dword [rax], r14d
cmp byte [r13 + 0x118], r14b
je 0x1801e35d6
test rbx, rbx
je 0x1801e35bd
xorps xmm0, xmm0
movups xmmword [rbp - 0x80], xmm0
movups xmmword [rbp - 0x70], xmm0
movups xmmword [rbp - 0x60], xmm0
movups xmmword [rbp - 0x50], xmm0
movups xmmword [rbp - 0x40], xmm0
movups xmmword [rbp - 0x30], xmm0
movups xmmword [rbp - 0x20], xmm0
movups xmmword [rbp - 0x10], xmm0
movups xmmword [rbp], xmm0
lea rcx, [rbp - 0x80]
call fcn.1800d27d0
nop
mov r8, rbx
lea rdx, [0x180304040]
lea rcx, [rbp - 0x80]
call fcn.1800d2ae0
lea rdx, [0x180266db4]
lea rcx, [rbp - 0x80]
call fcn.1800d65b0
test al, al
jne 0x1801e3593
lea rdx, [0x180266db4]
lea rcx, [rbp - 0x80]
call fcn.1800d2e50
lea rcx, [rbp - 0x80]
call fcn.1800d6d80
mov r9, rax
mov r8, rsi
lea rdx, [0x1802e98d0]
mov rcx, r13
call fcn.1801e91e0
nop
lea rcx, [rbp - 0x80]
call fcn.1800d28c0
jmp 0x1801e35d6
lea r9, [0x180266db4]
mov r8, rsi
lea rdx, [0x1802e98d0]
mov rcx, r13
call fcn.1801e91e0
call sub.KERNEL32.dll_GetTickCount
mov dword [r13 + 0x65c], eax
inc dword [r13 + 0x668]
lea rbx, [r13 + 0x7f0]
mov rcx, rbx
call fcn.1800bc850
cmp dword [r13 + 0xfbc], 0
je 0x1801e36b0
cmp byte [r13 + 0x750], 0
je 0x1801e362a
lea rcx, [r13 + 0x758]
mov r8, r12
mov rdx, rbx
call fcn.180190940
mov byte [r13 + 0x750], 0
xor sil, sil
mov eax, dword [r13 + 0x910]
test eax, eax
je 0x1801e3644
mov sil, 1
dec eax
mov dword [r13 + 0x910], eax
lea rcx, [r13 + 0x758]
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], r12
mov r9, rbx
movzx r8d, sil
mov rdx, rdi
call fcn.1801907e0
mov rcx, rdi
call fcn.1800be430
mov edi, eax
test sil, sil
jne 0x1801e36a1
cmp eax, 0x40
jbe 0x1801e36a1
mov rcx, rbx
call fcn.1800be430
mov ecx, edi
shr ecx, 3
add eax, ecx
mov ecx, reloc.WS2_32.dll_recv
cmp eax, edi
jbe 0x1801e36a6
mov dword [r13 + 0x910], ecx
mov rdi, rbx
mov qword [rsp + 0x50], rbx
jmp 0x1801e36b5
mov ecx, reloc.WS2_32.dll_recv
mov rdi, rbx
mov qword [rsp + 0x50], rbx
jmp 0x1801e36b5
mov ecx, reloc.WS2_32.dll_recv
mov eax, dword [r13 + 0xfe4]
dec eax
test eax, 0xfffffff4
mov esi, 8
cmove esi, ecx
mov rcx, rdi
call fcn.1800be430
mov dword [rsp + 0x40], eax
mov r8d, dword [r13 + 0xfe4]
mov ecx, r14d
mov edx, 4
cmp r8d, 0xd
cmove ecx, edx
lea r9d, [rax + 5]
mov eax, r9d
sub eax, ecx
add eax, edx
xor edx, edx
div esi
mov eax, esi
sub eax, edx
xor edx, edx
div esi
lea ebx, [rdx + 4]
mov dword [rsp + 0x44], ebx
lea r14d, [r9 + rbx]
mov dword [rsp + 0x48], r14d
cmp r14d, 0x10
jae 0x1801e372e
cmp r8d, 0xd
je 0x1801e372e
add ebx, esi
mov dword [rsp + 0x44], ebx
add r14d, esi
mov dword [rsp + 0x48], r14d
lea eax, [r14 - 4]
mov dword [rsp + 0x78], eax
mov rcx, qword [rsp + 0x58]
mov dword [rcx], r14d
lea rsi, [r13 + 0x850]
mov rcx, rsi
call fcn.1800bc850
mov eax, dword [r13 + 0xfe4]
lea rcx, [r13 + 0x850]
cmp eax, 0xd
jne 0x1801e388e
lea r15d, [r14 + 0x10]
mov edx, r15d
call fcn.1800bdf30
mov r14, rax
mov eax, dword [rsp + 0x78]
mov ecx, eax
shr ecx, 0x18
mov byte [r14], cl
mov ecx, eax
shr ecx, 0x10
mov byte [r14 + 1], cl
mov ecx, eax
shr ecx, 8
mov byte [r14 + 2], cl
mov byte [r14 + 3], al
lea rsi, [r13 + 0x1e70]
mov ecx, dword [r13 + 0x9a8]
mov dword [rsp + 0x20], ecx
mov r9d, 4
mov r8, r14
mov rdx, rsi
mov rcx, r13
call fcn.1801d7330
mov byte [r14 + 4], bl
mov ebx, dword [rsp + 0x40]
mov rcx, qword [rsp + 0x50]
call fcn.1800bdfb0
mov rdx, rax
lea rcx, [r14 + 5]
mov r8d, ebx
call fcn.180210e90
mov edx, dword [rsp + 0x40]
add edx, 5
add rdx, r14
mov ecx, dword [rsp + 0x44]
call fcn.1800df700
lea rcx, [r13 + 0x1ef4]
mov r8d, dword [rsp + 0x78]
lea rdx, [r14 + 4]
call fcn.1801d6f40
mov ecx, dword [r13 + 0x9a8]
mov dword [rsi + 0x108], 0
xor eax, eax
mov qword [rsi + 0x10c], rax
mov eax, ecx
shr eax, 0x18
mov byte [rsp + 0x78], al
mov eax, ecx
shr eax, 0x10
mov byte [rsp + 0x79], al
mov eax, ecx
shr eax, 8
mov byte [rsp + 0x7a], al
mov byte [rsp + 0x7b], cl
mov r8d, 4
lea rdx, [rsp + 0x78]
mov rcx, rsi
call fcn.1801d5e50
mov ebx, dword [rsp + 0x48]
mov r8d, ebx
mov rdx, r14
mov rcx, rsi
call fcn.1801d5e50
lea rdx, [r14 + rbx]
lea rcx, [rsi + 0x118]
call fcn.180205660
mov edx, r15d
lea rsi, [r13 + 0x850]
mov rcx, rsi
call fcn.1800badc0
mov r15, qword [rsp + 0x60]
jmp 0x1801e39d8
mov rdx, rcx
mov ecx, dword [rsp + 0x78]
test eax, eax
je 0x1801e39b3
call fcn.1801f1d80
movzx edx, bl
mov rcx, rsi
call fcn.1800bb260
mov rdx, rdi
mov rcx, rsi
call fcn.1800baf20
mov rdx, rsi
mov ecx, ebx
call fcn.1800df5b0
lea rdi, [r13 + 0x820]
mov rcx, rdi
call fcn.1800bc850
cmp qword [r13 + 0x1000], 0
jne 0x1801e38f3
mov rax, qword [r12]
lea rdx, str.No_output_encryptor_
mov rcx, r12
call qword [rax + 0x28]
xor al, al
jmp 0x1801e3c19
mov rcx, rsi
call fcn.1800be430
mov ebx, eax
mov rcx, rsi
call fcn.1800bdfb0
mov r9, rax
lea r8, [r13 + 0x1100]
lea rdx, [r13 + 0x1760]
mov qword [rsp + 0x30], r12
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], ebx
mov rcx, qword [r13 + 0x1000]
call fcn.18018c5d0
mov rcx, rdi
call fcn.1800be430
mov ebx, eax
mov rcx, rsi
call fcn.1800be430
cmp ebx, eax
je 0x1801e39d8
mov rax, qword [r12]
lea rdx, str.Size_of_encrypted_data_changed_
mov rcx, r12
call qword [rax + 0x28]
mov rcx, rsi
call fcn.1800be430
mov r8d, eax
lea rdx, str.unencryptedPacketSize
mov rcx, r12
call fcn.180106220
mov rcx, rdi
call fcn.1800be430
mov r8d, eax
lea rdx, str.encryptedPacketSize
mov rcx, r12
call fcn.180106220
lea r9, [0x180266db4]
lea r8, str.Failed_to_encrypt.
lea rdx, str.TRAN
mov rcx, r13
call fcn.1801e91e0
xor al, al
jmp 0x1801e3c19
call fcn.1801f1d80
movzx edx, bl
mov rcx, rsi
call fcn.1800bb260
mov rdx, rdi
mov rcx, rsi
call fcn.1800baf20
mov rdx, rsi
mov ecx, ebx
call fcn.1800df5b0
cmp dword [r13 + 0xfe4], 0xd
je 0x1801e3b11
lea r14, [r13 + 0x7c0]
mov rcx, r14
call fcn.1800bc850
cmp dword [r13 + 0xfc8], 0
je 0x1801e3aca
movzx eax, byte [r13 + 0x9ab]
mov byte [rsp + 0x78], al
movzx eax, byte [r13 + 0x9aa]
mov byte [rsp + 0x79], al
movzx eax, byte [r13 + 0x9a9]
mov byte [rsp + 0x7a], al
movzx eax, byte [r13 + 0x9a8]
mov byte [rsp + 0x7b], al
lea rcx, [rbp - 0x80]
call fcn.1800ba850
nop
mov dword [rbp + 0xb88], 3
mov qword [rbp - 0x78], 0
mov dword [rbp + 0x788], 0
lea rax, [rsp + 0x78]
mov qword [rbp - 0x70], rax
mov dword [rbp + 0x78c], 4
mov rcx, rsi
call fcn.1800bdfb0
mov qword [rbp - 0x68], rax
mov rcx, rsi
call fcn.1800be430
mov dword [rbp + 0x790], eax
lea rcx, [r13 + 0x2108]
call fcn.1800be430
mov edi, eax
lea rcx, [r13 + 0x2108]
call fcn.1800bdfb0
mov rdx, rax
mov qword [rsp + 0x28], r12
mov qword [rsp + 0x20], r14
mov r9d, dword [r13 + 0x20d0]
mov r8d, edi
lea rcx, [rbp - 0x80]
call fcn.18019de90
nop
lea rcx, [rbp - 0x80]
call fcn.1800baa80
cmp dword [r13 + 0xfe4], 0
je 0x1801e3ae3
lea rdx, [r13 + 0x820]
mov rcx, rsi
call fcn.1800bf680
mov rcx, r14
call fcn.1800be430
test eax, eax
je 0x1801e3b11
cmp dword [r13 + 0xfc8], 6
jne 0x1801e3b06
mov edx, 8
mov rcx, r14
call fcn.1800bf4f0
mov rdx, r14
mov rcx, rsi
call fcn.1800baf20
mov ebx, dword [r13 + 0x9b0]
lea eax, [rbx - 1]
mov ecx, 0xbb8
cmp eax, 0xbb6
cmovbe ebx, ecx
test r15, r15
je 0x1801e3b35
mov byte [r15 + 0xdc], 1
mov dword [rsp + 0x7c], 0
mov rcx, rsi
call fcn.1800be430
mov r8d, eax
lea rcx, [r13 + 0x670]
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x30], r12
lea rax, [rsp + 0x7c]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], ebx
xor r9d, r9d
mov rdx, rsi
call fcn.1801c4fc0
movzx edi, al
test al, al
jne 0x1801e3bdf
cmp dword [rsp + 0x7c], 0
jbe 0x1801e3bce
mov rcx, rsi
call fcn.1800be430
mov r8d, eax
lea rdx, str.packetSize
mov rcx, r12
call fcn.180106220
mov r8d, dword [rsp + 0x7c]
lea rdx, str.numBytesSent
mov rcx, r12
call fcn.180106220
mov r8d, ebx
lea rdx, str.idleTimeoutMs
mov rcx, r12
call fcn.180106220
lea rdx, str.Failed_to_send_entire_SSH_packet.
jmp 0x1801e3bd5
lea rdx, str.SSH_SendBytes_failed.
mov rax, qword [r12]
mov rcx, r12
call qword [rax + 0x28]
test r15, r15
je 0x1801e3bec
mov byte [r15 + 0xdc], 0
inc dword [r13 + 0x9a8]
test dil, dil
jne 0x1801e3c15
lea r9, [0x180266db4]
lea r8, str.Failed_to_send.
lea rdx, str.TRAN
mov rcx, r13
call fcn.1801e91e0
movzx eax, dil
mov rcx, qword [rbp + 0xb90]
xor rcx, rsp
call fcn.18007b140
add rsp, 0xca8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret