Function at 0x4989b0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x740fc3
mov eax, dword fs:[0]
push eax
push ecx
push ebx
push esi
push edi
mov eax, dword [0x899944]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0x10], esi
call fcn.00448f30
xor ebx, ebx
lea ecx, [esi + 0x28]
mov dword [ebp - 4], ebx
mov dword [esi], vtable.SshTransport.0
call fcn.0040c7a0
lea ecx, [esi + 0xc8]
mov byte [ebp - 4], 1
mov dword [esi + 0xc4], 0x1000000
call fcn.0048c870
lea ecx, [esi + 0x190]
mov byte [ebp - 4], 2
call fcn.0048c870
lea ecx, [esi + 0x258]
mov byte [ebp - 4], 3
call fcn.0048c870
lea ecx, [esi + 0x320]
mov byte [ebp - 4], 4
call fcn.0048f200
lea ecx, [esi + 0x3a4]
mov byte [ebp - 4], 5
mov dword [esi + 0x380], ebx
mov word [esi + 0x384], 1
mov dword [esi + 0x394], ebx
mov dword [esi + 0x39c], ebx
mov dword [esi + 0x3a0], ebx
call fcn.0050ee00
lea ecx, [esi + 0x428]
mov byte [ebp - 4], 6
mov word [esi + 0x424], 0x101
call fcn.00510480
lea ecx, [esi + 0x440]
mov byte [ebp - 4], 7
call fcn.00510480
lea ecx, [esi + 0x45c]
mov byte [ebp - 4], 8
mov dword [esi + 0x458], ebx
call fcn.0040fe80
lea ecx, [esi + 0x478]
mov byte [ebp - 4], 9
call fcn.0040fe80
lea ecx, [esi + 0x494]
mov byte [ebp - 4], 0xa
call fcn.0040fe80
lea ecx, [esi + 0x4b0]
mov byte [ebp - 4], 0xb
call fcn.0040fe80
lea ecx, [esi + 0x4cc]
mov byte [ebp - 4], 0xc
call fcn.0040fe80
lea ecx, [esi + 0x4e8]
mov byte [ebp - 4], 0xd
call fcn.0040fe80
lea ecx, [esi + 0x504]
mov byte [ebp - 4], 0xe
call fcn.0040fe80
lea ecx, [esi + 0x528]
mov byte [ebp - 4], 0xf
mov dword [esi + 0x520], ebx
mov dword [esi + 0x524], 0x16
call fcn.0040ac30
mov byte [ebp - 4], 0x10
mov dword [esi + 0x59c], ebx
mov word [esi + 0x5a0], 0x100
mov eax, 0x7530
lea ecx, [esi + 0x5ac]
mov byte [esi + 0x5a2], 1
mov dword [esi + 0x5a4], eax
mov dword [esi + 0x5a8], eax
call fcn.0040ac30
lea ecx, [esi + 0x620]
mov byte [ebp - 4], 0x11
call fcn.0040ac30
lea ecx, [esi + 0x694]
mov byte [ebp - 4], 0x12
call fcn.0040fe80
lea ecx, [esi + 0x6b0]
mov byte [ebp - 4], 0x13
call fcn.0040fe80
lea ecx, [esi + 0x6cc]
mov byte [ebp - 4], 0x14
call fcn.00403e00
lea ecx, [esi + 0x7e4]
mov byte [ebp - 4], 0x15
call fcn.00403e00
lea ecx, [esi + 0x8fc]
mov byte [ebp - 4], 0x16
call fcn.0040fe80
lea ecx, [esi + 0x918]
mov byte [ebp - 4], 0x17
call fcn.0040fe80
lea ecx, [esi + 0x934]
mov byte [ebp - 4], 0x18
call fcn.0040fe80
lea ecx, [esi + 0x950]
mov byte [ebp - 4], 0x19
call fcn.004fd3d0
lea ecx, [esi + 0x95c]
mov byte [ebp - 4], 0x1a
call fcn.0040ac30
lea ecx, [esi + 0x9d4]
mov byte [ebp - 4], 0x1b
mov dword [esi + 0x9d0], 4
call fcn.0040fe80
lea ecx, [esi + 0x9f0]
mov byte [ebp - 4], 0x1c
call fcn.0040fe80
mov eax, 1
lea ecx, [esi + 0xa5c]
mov byte [ebp - 4], 0x1d
mov dword [esi + 0xa0c], ebx
mov dword [esi + 0xa10], ebx
mov byte [esi + 0xa14], bl
mov dword [esi + 0xa18], ebx
mov dword [esi + 0xa1c], ebx
mov dword [esi + 0xa20], ebx
mov dword [esi + 0xa24], ebx
mov dword [esi + 0xa28], eax
mov dword [esi + 0xa2c], eax
mov dword [esi + 0xa30], eax
mov dword [esi + 0xa34], ebx
mov dword [esi + 0xa38], ebx
mov dword [esi + 0xa54], ebx
mov dword [esi + 0xa58], ebx
call fcn.004e1640
lea ecx, [esi + 0xaec]
mov byte [ebp - 4], 0x1e
call fcn.004e1640
mov byte [ebp - 4], 0x1f
lea ecx, [esi + 0xb80]
call fcn.004e1530
lea ecx, [esi + 0x110c0]
mov byte [ebp - 4], 0x20
call fcn.004e1530
lea ecx, [esi + 0x21714]
mov byte [ebp - 4], 0x21
call fcn.0050e150
lea ecx, [esi + 0x218a8]
mov byte [ebp - 4], 0x22
call fcn.0050e150
lea ecx, [esi + 0x21928]
mov byte [ebp - 4], 0x23
call fcn.0040fe80
lea ecx, [esi + 0x21944]
mov byte [ebp - 4], 0x24
call fcn.0040fe80
lea ecx, [esi + 0x21960]
mov byte [ebp - 4], 0x25
call fcn.0040fe80
lea ecx, [esi + 0x2197c]
mov byte [ebp - 4], 0x26
call fcn.0040fe80
lea ecx, [esi + 0x2199c]
mov byte [ebp - 4], 0x27
mov dword [esi + 0x21998], 1
call fcn.0040fe80
lea ecx, [esi + 0x219b8]
mov byte [ebp - 4], 0x28
call fcn.0040fe80
lea ecx, [esi + 0x219d8]
mov byte [ebp - 4], 0x29
mov dword [esi + 0x219d4], 1
call fcn.0040fe80
lea ecx, [esi + 0x219f4]
mov byte [ebp - 4], 0x2a
call fcn.0040fe80
lea ecx, [esi + 0x21a10]
mov byte [ebp - 4], 0x2b
call fcn.00510b30
lea ecx, [esi + 0x21aec]
mov byte [ebp - 4], 0x2c
call fcn.005006b0
lea ecx, [esi + 0x21ef8]
mov byte [ebp - 4], 0x2d
call fcn.0040fe80
lea ecx, [esi + 0x21f14]
mov byte [ebp - 4], 0x2e
call fcn.0040fe80
lea ecx, [esi + 0x21f30]
mov byte [ebp - 4], 0x2f
call fcn.004895e0
lea ecx, [esi + 0x222b8]
mov byte [ebp - 4], 0x30
mov byte [esi + 0x222b0], bl
mov dword [esi + 0x222b4], ebx
call fcn.0040ac30
push str.SSH_2.0_PuTTY_Release_0.70
lea ecx, [esi + 0x620]
mov byte [ebp - 4], 0x31
call fcn.0040a8e0
call fcn.00407f10
mov byte [esi + 0x398], al
call sub.KERNEL32.dll_GetTickCount
mov dword [esi + 0x394], eax
mov byte [esi + 0x21f2c], 1
mov byte [esi + 0x21f10], 1
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret