Function at 0x4993b0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x7413b6
mov eax, dword fs:[0]
push eax
sub esp, 0x8b0
mov eax, dword [0x899944]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov edx, dword [ebp + 0x1c]
mov esi, dword [ebp + 0xc]
mov ebx, dword [ebp + 0x10]
mov dword [ebp - 0x890], eax
mov eax, dword [ebp + 0x18]
mov edi, ecx
mov ecx, dword [ebp + 0x14]
mov dword [ebp - 0x8bc], eax
mov eax, dword [eax + 4]
mov dword [ecx], 0
cmp byte [edi + 0xc4], 0
mov dword [ebp - 0x8a8], ecx
mov dword [ebp - 0x898], edx
mov dword [ebp - 0x8b4], eax
je 0x4994bc
test esi, esi
je 0x4994a4
lea ecx, [ebp - 0x84]
call fcn.0040ac30
push esi
push 0x7a8108
lea ecx, [ebp - 0x84]
mov dword [ebp - 4], 0
call fcn.0040d180
push 0x76785c
lea ecx, [ebp - 0x84]
call fcn.0040a960
test al, al
jne 0x499471
push 0x76785c
lea ecx, [ebp - 0x84]
call fcn.0040a8e0
lea ecx, [ebp - 0x84]
call fcn.00409d90
mov ecx, dword [ebp - 0x890]
push eax
push ecx
push 0x7acd6c
mov ecx, edi
call fcn.00494c70
lea ecx, [ebp - 0x84]
mov dword [ebp - 4], 0xffffffff
call fcn.0040acf0
jmp 0x4994bc
mov edx, dword [ebp - 0x890]
push 0x76785c
push edx
push 0x7acd6c
mov ecx, edi
call fcn.00494c70
call sub.KERNEL32.dll_GetTickCount
inc dword [edi + 0x3a0]
lea esi, [edi + 0x478]
mov ecx, esi
mov dword [edi + 0x394], eax
mov dword [ebp - 0x89c], ebx
call fcn.0040fb90
cmp dword [edi + 0xa10], 0
je 0x499585
cmp byte [edi + 0x424], 0
je 0x499510
mov eax, dword [ebp - 0x898]
push eax
push esi
lea ecx, [edi + 0x428]
call fcn.00510510
mov byte [edi + 0x424], 0
mov eax, dword [edi + 0x520]
mov byte [ebp - 0x890], 0
test eax, eax
je 0x49952f
dec eax
mov byte [ebp - 0x890], 1
mov dword [edi + 0x520], eax
mov ecx, dword [ebp - 0x898]
mov edx, dword [ebp - 0x890]
push 0
push ecx
push esi
push edx
push ebx
lea ecx, [edi + 0x428]
call fcn.00510610
mov ecx, ebx
call fcn.004033b0
cmp byte [ebp - 0x890], 0
mov ebx, eax
jne 0x49957f
cmp ebx, 0x40
jbe 0x49957f
mov ecx, esi
call fcn.004033b0
mov ecx, ebx
shr ecx, 3
add eax, ecx
cmp eax, ebx
jbe 0x49957f
mov dword [edi + 0x520], 0x10
mov dword [ebp - 0x89c], esi
mov eax, dword [edi + 0xa38]
mov esi, 8
cmp eax, 1
je 0x4995b8
cmp eax, 2
je 0x4995b8
cmp eax, 0xc
je 0x4995b8
cmp eax, 9
je 0x4995b8
cmp eax, 0xa
je 0x4995b8
cmp eax, 0xb
je 0x4995b8
cmp eax, 3
je 0x4995b8
cmp eax, 4
jne 0x4995bd
mov esi, 0x10
mov ecx, dword [ebp - 0x89c]
call fcn.004033b0
xor edx, edx
cmp dword [edi + 0xa38], 0xd
lea ecx, [eax + 5]
setne dl
mov dword [ebp - 0x8b8], eax
mov eax, ecx
dec edx
and edx, 4
sub eax, edx
add eax, 4
xor edx, edx
div esi
mov eax, esi
sub eax, edx
xor edx, edx
div esi
lea ebx, [edx + 4]
lea eax, [ecx + ebx]
mov dword [ebp - 0x890], ebx
mov dword [ebp - 0x8ac], eax
cmp eax, 0x10
jae 0x499624
cmp dword [edi + 0xa38], 0xd
je 0x499624
add ebx, esi
add eax, esi
mov dword [ebp - 0x890], ebx
mov dword [ebp - 0x8ac], eax
mov ecx, dword [ebp - 0x8a8]
lea edx, [eax - 4]
mov dword [ecx], eax
lea esi, [edi + 0x4b0]
mov ecx, esi
mov dword [ebp - 0x8a0], edx
call fcn.0040fb90
mov eax, dword [edi + 0xa38]
cmp eax, 0xd
jne 0x4997b8
mov eax, dword [ebp - 0x8ac]
add eax, 0x10
push eax
mov ecx, esi
mov dword [ebp - 0x8a8], eax
call fcn.00414050
mov ebx, eax
mov eax, dword [ebp - 0x8a0]
mov byte [ebx + 3], al
mov edx, eax
shr edx, 0x18
mov byte [ebx], dl
mov ecx, eax
mov edx, eax
shr ecx, 0x10
mov byte [ebx + 1], cl
shr edx, 8
mov byte [ebx + 2], dl
mov eax, dword [edi + 0x59c]
mov ecx, eax
mov edx, eax
shr ecx, 0x10
mov byte [ebp - 0x8aa], cl
mov ecx, eax
movzx eax, al
shr edx, 8
movzx edx, dl
shl eax, 8
or eax, edx
movzx edx, byte [ebp - 0x8aa]
shr ecx, 0x18
shl eax, 8
mov byte [ebp - 0x8a9], cl
or eax, edx
movzx edx, byte [ebp - 0x8a9]
xor ecx, ecx
mov dword [edi + 0x217c4], ecx
mov dword [edi + 0x217c8], ecx
mov dword [edi + 0x217cc], ecx
shl eax, 8
or eax, edx
mov dword [edi + 0x217d0], eax
mov edx, 0x40
mov dword [edi + 0x217d4], edx
mov dword [edi + 0x21848], ecx
mov dword [edi + 0x2184c], ecx
mov dword [edi + 0x21850], ecx
push 4
mov dword [edi + 0x21854], eax
mov dword [edi + 0x21858], edx
inc dword [edi + 0x21848]
push ebx
lea ecx, [edi + 0x21794]
call fcn.00490d20
mov ecx, dword [ebp - 0x8b8]
mov al, byte [ebp - 0x890]
add esp, 8
push ecx
mov ecx, dword [ebp - 0x89c]
mov byte [ebx + 4], al
call fcn.0040fbb0
push eax
lea edx, [ebx + 5]
push edx
call fcn.0070d6a0
mov eax, dword [ebp - 0x8b8]
mov edx, dword [ebp - 0x890]
lea ecx, [ebx + eax + 5]
push ecx
push edx
call fcn.00425e10
mov eax, dword [ebp - 0x8a0]
push eax
lea eax, [ebx + 4]
push eax
lea ecx, [edi + 0x21818]
call fcn.00490d20
mov ecx, dword [ebp - 0x898]
mov edx, dword [edi + 0x59c]
add esp, 0x1c
push ecx
mov eax, dword [ebp - 0x8a0]
push edx
add eax, 4
push eax
push ebx
lea ecx, [edi + 0x21794]
call fcn.00493160
mov ecx, dword [ebp - 0x8a8]
push ecx
lea ecx, [edi + 0x4b0]
call fcn.0040fbc0
jmp 0x4998ee
push esi
test eax, eax
je 0x4998bf
mov edx, dword [ebp - 0x8a0]
push edx
call fcn.0048fb70
add esp, 8
push ebx
mov ecx, esi
call fcn.00410ec0
mov eax, dword [ebp - 0x89c]
push eax
mov ecx, esi
call fcn.00412840
push esi
push ebx
call fcn.004263a0
lea ebx, [edi + 0x494]
add esp, 8
mov ecx, ebx
call fcn.0040fb90
cmp dword [edi + 0xa54], 0
mov ecx, dword [ebp - 0x898]
jne 0x49981f
mov edx, dword [ecx]
mov eax, dword [edx + 0x14]
push str.No_output_encryptor_
call eax
xor al, al
jmp 0x499b5a
push ecx
push ebx
mov ecx, esi
call fcn.004033b0
push eax
mov ecx, esi
call fcn.0040fbb0
mov ecx, dword [edi + 0xa54]
push eax
lea edx, [edi + 0xaec]
push edx
lea eax, [edi + 0x110c0]
push eax
call fcn.004e1a40
mov ecx, ebx
call fcn.004033b0
mov ecx, esi
mov ebx, eax
call fcn.004033b0
cmp ebx, eax
je 0x4998ee
mov ebx, dword [ebp - 0x898]
mov edx, dword [ebx]
mov eax, dword [edx + 0x14]
push str.Size_of_encrypted_data_changed_
mov ecx, ebx
call eax
mov ecx, esi
call fcn.004033b0
push eax
push str.unencryptedPacketSize
mov ecx, ebx
call fcn.00474a80
lea ecx, [edi + 0x494]
call fcn.004033b0
push eax
push str.encryptedPacketSize
mov ecx, ebx
call fcn.00474a80
push 0x76785c
push str.Failed_to_encrypt.
push str.TRAN
mov ecx, edi
call fcn.00494c70
xor al, al
jmp 0x499b5a
mov ecx, dword [ebp - 0x8a0]
push ecx
call fcn.0048fb70
add esp, 8
push ebx
mov ecx, esi
call fcn.00410ec0
mov edx, dword [ebp - 0x89c]
push edx
mov ecx, esi
call fcn.00412840
push esi
push ebx
call fcn.004263a0
add esp, 8
cmp dword [edi + 0xa38], 0xd
je 0x499a48
lea ecx, [edi + 0x45c]
call fcn.0040fb90
xor esi, esi
cmp dword [edi + 0xa1c], esi
je 0x4999f6
movzx eax, byte [edi + 0x59f]
mov cl, byte [edi + 0x59e]
mov dl, byte [edi + 0x59d]
mov byte [ebp - 0x890], al
movzx eax, byte [edi + 0x59c]
mov byte [ebp - 0x88f], cl
lea ecx, [ebp - 0x88c]
mov byte [ebp - 0x88e], dl
mov byte [ebp - 0x88d], al
call fcn.00410520
lea ecx, [ebp - 0x890]
mov dword [ebp - 0x884], ecx
lea ecx, [edi + 0x4b0]
mov dword [ebp - 4], 1
mov dword [ebp - 0x88], 3
mov dword [ebp - 0x888], esi
mov dword [ebp - 0x488], esi
mov dword [ebp - 0x484], 4
call fcn.0040fbb0
lea ecx, [edi + 0x4b0]
mov dword [ebp - 0x880], eax
call fcn.004033b0
mov ebx, dword [ebp - 0x898]
mov edx, dword [edi + 0x21998]
mov dword [ebp - 0x480], eax
push ebx
lea eax, [edi + 0x45c]
push eax
push edx
lea ecx, [edi + 0x219b8]
call fcn.004033b0
push eax
lea ecx, [edi + 0x219b8]
call fcn.0040fbb0
push eax
lea eax, [ebp - 0x88c]
push eax
call fcn.004e9c00
add esp, 0x18
lea ecx, [ebp - 0x88c]
mov dword [ebp - 4], 0xffffffff
call fcn.00410540
jmp 0x4999fc
mov ebx, dword [ebp - 0x898]
cmp dword [edi + 0xa38], 0
je 0x499a17
lea ecx, [edi + 0x494]
push ecx
lea ecx, [edi + 0x4b0]
call fcn.004109b0
lea esi, [edi + 0x45c]
mov ecx, esi
call fcn.004033b0
test eax, eax
je 0x499a4e
cmp dword [edi + 0xa1c], 6
jne 0x499a3a
push 8
mov ecx, esi
call fcn.0040fde0
push esi
lea ecx, [edi + 0x4b0]
call fcn.00412840
jmp 0x499a4e
mov ebx, dword [ebp - 0x898]
mov eax, dword [edi + 0x5a4]
mov dword [ebp - 0x89c], eax
test eax, eax
je 0x499a75
cmp eax, 0xbb8
jae 0x499a75
mov dword [ebp - 0x89c], 0xbb8
mov eax, dword [ebp - 0x89c]
mov ecx, dword [ebp - 0x8b4]
test ecx, ecx
je 0x499a86
mov byte [ecx + 0x94], 1
mov edx, dword [ebp - 0x8bc]
push edx
push ebx
lea ecx, [ebp - 0x8a4]
push ecx
push eax
lea esi, [edi + 0x4b0]
push 0
mov ecx, esi
mov dword [ebp - 0x8a4], 0
call fcn.004033b0
push eax
push esi
lea ecx, [edi + 0x3a4]
call fcn.0050f340
mov byte [ebp - 0x891], al
test al, al
jne 0x499b1e
cmp dword [ebp - 0x8a4], 0
jbe 0x499b10
mov ecx, esi
call fcn.004033b0
push eax
push str.packetSize
mov ecx, ebx
call fcn.00474a80
mov edx, dword [ebp - 0x8a4]
push edx
push str.numBytesSent
mov ecx, ebx
call fcn.00474a80
mov eax, dword [ebp - 0x89c]
push eax
push str.idleTimeoutMs
mov ecx, ebx
call fcn.00474a80
push str.Failed_to_send_entire_SSH_packet.
jmp 0x499b15
push str.SSH_SendBytes_failed.
mov edx, dword [ebx]
mov eax, dword [edx + 0x14]
mov ecx, ebx
call eax
mov eax, dword [ebp - 0x8b4]
test eax, eax
je 0x499b2f
mov byte [eax + 0x94], 0
inc dword [edi + 0x59c]
cmp byte [ebp - 0x891], 0
jne 0x499b54
push 0x76785c
push str.Failed_to_send.
push str.TRAN
mov ecx, edi
call fcn.00494c70
mov al, byte [ebp - 0x891]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0070bb4c
mov esp, ebp
pop ebp
ret 0x18