Function at 0x5521a0
Capabilities:
Check for time delay via gettickcount

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5b2476
mov eax, dword fs:[0]
push eax
sub esp, 0x8b4
mov eax, dword [0x676664]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov edx, dword [ebp + 0x1c]
mov ebx, dword [ebp + 0xc]
mov esi, dword [ebp + 0x10]
mov dword [ebp - 0x890], eax
mov eax, dword [ebp + 0x18]
mov edi, ecx
mov ecx, dword [ebp + 0x14]
mov dword [ebp - 0x8c0], eax
mov eax, dword [eax + 4]
mov dword [ecx], 0
cmp byte [edi + 0xc4], 0
mov dword [ebp - 0x8a0], ecx
mov dword [ebp - 0x898], edx
mov dword [ebp - 0x8b0], eax
je 0x5522ac
test ebx, ebx
je 0x552294
lea ecx, [ebp - 0x84]
call fcn.00444390
push ebx
push 0x5c056c
lea ecx, [ebp - 0x84]
mov dword [ebp - 4], 0
call fcn.00446d40
push 0x5bacc4
lea ecx, [ebp - 0x84]
call fcn.00444000
test al, al
jne 0x552261
push 0x5bacc4
lea ecx, [ebp - 0x84]
call fcn.00443f80
lea ecx, [ebp - 0x84]
call fcn.00410b70
mov ecx, dword [ebp - 0x890]
push eax
push ecx
push 0x63c628
mov ecx, edi
call fcn.0054e350
lea ecx, [ebp - 0x84]
mov dword [ebp - 4], 0xffffffff
call fcn.00444450
jmp 0x5522ac
mov edx, dword [ebp - 0x890]
push 0x5bacc4
push edx
push 0x63c628
mov ecx, edi
call fcn.0054e350
call sub.KERNEL32.dll_GetTickCount
inc dword [edi + 0x81c]
lea ebx, [edi + 0x8f4]
mov ecx, ebx
mov dword [edi + 0x810], eax
mov dword [ebp - 0x8a4], esi
call fcn.00410b40
cmp dword [edi + 0xe8c], 0
je 0x552375
cmp byte [edi + 0x8a0], 0
je 0x552300
mov eax, dword [ebp - 0x898]
push eax
push ebx
lea ecx, [edi + 0x8a4]
call fcn.004b02b0
mov byte [edi + 0x8a0], 0
mov eax, dword [edi + 0x99c]
mov byte [ebp - 0x890], 0
test eax, eax
je 0x55231f
dec eax
mov byte [ebp - 0x890], 1
mov dword [edi + 0x99c], eax
mov ecx, dword [ebp - 0x898]
mov edx, dword [ebp - 0x890]
push 0
push ecx
push ebx
push edx
push esi
lea ecx, [edi + 0x8a4]
call fcn.004b03b0
mov ecx, esi
call fcn.00410b60
cmp byte [ebp - 0x890], 0
mov esi, eax
jne 0x55236f
cmp esi, 0x40
jbe 0x55236f
mov ecx, ebx
call fcn.00410b60
mov ecx, esi
shr ecx, 3
add eax, ecx
cmp eax, esi
jbe 0x55236f
mov dword [edi + 0x99c], 0x10
mov dword [ebp - 0x8a4], ebx
mov eax, dword [edi + 0xeb4]
mov ebx, 8
cmp eax, 1
je 0x5523a8
cmp eax, 2
je 0x5523a8
cmp eax, 0xc
je 0x5523a8
cmp eax, 9
je 0x5523a8
cmp eax, 0xa
je 0x5523a8
cmp eax, 0xb
je 0x5523a8
cmp eax, 3
je 0x5523a8
cmp eax, 4
jne 0x5523ad
mov ebx, 0x10
mov ecx, dword [ebp - 0x8a4]
call fcn.00410b60
cmp byte [edi + 0x1f58], 0
mov dword [ebp - 0x890], eax
jne 0x5523d4
cmp dword [edi + 0xeb4], 0xd
je 0x5523d4
xor edx, edx
jmp 0x5523d9
mov edx, 4
lea ecx, [eax + 5]
mov eax, ecx
sub eax, edx
add eax, 4
xor edx, edx
div ebx
mov eax, ebx
lea esi, [edi + 0x92c]
sub eax, edx
xor edx, edx
div ebx
lea ebx, [edx + 4]
lea eax, [ecx + ebx]
mov ecx, dword [ebp - 0x8a0]
lea edx, [eax - 4]
mov dword [ecx], eax
mov ecx, esi
mov dword [ebp - 0x8b4], ebx
mov dword [ebp - 0x8ac], eax
mov dword [ebp - 0x89c], edx
call fcn.00410b40
mov eax, dword [edi + 0xeb4]
cmp eax, 0xd
jne 0x552595
mov eax, dword [ebp - 0x8ac]
add eax, 0x10
push eax
mov ecx, esi
mov dword [ebp - 0x8ac], eax
call fcn.00415e70
mov ebx, eax
mov eax, dword [ebp - 0x89c]
mov byte [ebx + 3], al
mov edx, eax
shr edx, 0x18
mov byte [ebx], dl
mov ecx, eax
mov edx, eax
shr ecx, 0x10
mov byte [ebx + 1], cl
shr edx, 8
mov byte [ebx + 2], dl
mov eax, dword [edi + 0xa18]
mov ecx, eax
mov edx, eax
shr ecx, 0x10
mov byte [ebp - 0x8b6], cl
mov ecx, eax
movzx eax, al
shr edx, 8
movzx edx, dl
shl eax, 8
or eax, edx
movzx edx, byte [ebp - 0x8b6]
shr ecx, 0x18
shl eax, 8
mov byte [ebp - 0x8b5], cl
or eax, edx
movzx edx, byte [ebp - 0x8b5]
xor ecx, ecx
mov dword [edi + 0x1d0c], ecx
mov dword [edi + 0x1d10], ecx
mov dword [edi + 0x1d14], ecx
shl eax, 8
or eax, edx
mov dword [edi + 0x1d18], eax
mov edx, 0x40
mov dword [edi + 0x1d1c], edx
mov dword [edi + 0x1d90], ecx
mov dword [edi + 0x1d94], ecx
mov dword [edi + 0x1d98], ecx
push 4
mov dword [edi + 0x1d9c], eax
mov dword [edi + 0x1da0], edx
inc dword [edi + 0x1d90]
push ebx
lea ecx, [edi + 0x1cdc]
call fcn.0054a0e0
mov ecx, dword [ebp - 0x890]
mov al, byte [ebp - 0x8b4]
add esp, 8
push ecx
mov ecx, dword [ebp - 0x8a4]
mov byte [ebx + 4], al
call fcn.00410b80
push eax
lea edx, [ebx + 5]
push edx
call sub.MSVCR100.dll_memcpy
mov eax, dword [ebp - 0x890]
mov edx, dword [ebp - 0x8b4]
lea ecx, [ebx + eax + 5]
push ecx
push edx
call fcn.00467700
mov eax, dword [ebp - 0x89c]
push eax
lea eax, [ebx + 4]
push eax
lea ecx, [edi + 0x1d60]
call fcn.0054a0e0
mov ecx, dword [ebp - 0x898]
mov edx, dword [edi + 0xa18]
add esp, 0x1c
push ecx
mov eax, dword [ebp - 0x89c]
push edx
add eax, 4
push eax
push ebx
lea ecx, [edi + 0x1cdc]
call fcn.0054c780
mov ecx, dword [ebp - 0x8ac]
push ecx
lea ecx, [edi + 0x92c]
call fcn.00410b90
jmp 0x5526d5
test eax, eax
je 0x5526a5
cmp byte [edi + 0x1f58], 0
jne 0x5525b6
mov edx, dword [ebp - 0x89c]
push esi
push edx
call fcn.0058dcc0
add esp, 8
push ebx
mov ecx, esi
call fcn.00411a20
mov eax, dword [ebp - 0x8a4]
push eax
mov ecx, esi
call fcn.00413bd0
push esi
push ebx
call fcn.00467ca0
lea ebx, [edi + 0x910]
add esp, 8
mov ecx, ebx
call fcn.00410b40
cmp dword [edi + 0xed0], 0
mov ecx, dword [ebp - 0x898]
jne 0x552605
mov edx, dword [ecx]
mov eax, dword [edx + 0x14]
push str.No_output_encryptor_
call eax
xor al, al
jmp 0x5529e0
push ecx
push ebx
mov ecx, esi
call fcn.00410b60
push eax
mov ecx, esi
call fcn.00410b80
mov ecx, dword [edi + 0xed0]
push eax
lea edx, [edi + 0xfa8]
push edx
lea eax, [edi + 0x15e0]
push eax
call fcn.0050b0b0
mov ecx, ebx
call fcn.00410b60
mov ecx, esi
mov ebx, eax
call fcn.00410b60
cmp ebx, eax
je 0x5526d5
mov ebx, dword [ebp - 0x898]
mov edx, dword [ebx]
mov eax, dword [edx + 0x14]
push str.Size_of_encrypted_data_changed_
mov ecx, ebx
call eax
mov ecx, esi
call fcn.00410b60
push eax
push str.unencryptedPacketSize
mov ecx, ebx
call fcn.0044e8c0
lea ecx, [edi + 0x910]
call fcn.00410b60
push eax
push str.encryptedPacketSize
mov ecx, ebx
call fcn.0044e8c0
push 0x5bacc4
push str.Failed_to_encrypt.
push str.TRAN
mov ecx, edi
call fcn.0054e350
xor al, al
jmp 0x5529e0
mov ecx, dword [ebp - 0x89c]
push esi
push ecx
call fcn.0058dcc0
add esp, 8
push ebx
mov ecx, esi
call fcn.00411a20
mov edx, dword [ebp - 0x8a4]
push edx
mov ecx, esi
call fcn.00413bd0
push esi
push ebx
call fcn.00467ca0
add esp, 8
cmp dword [edi + 0xeb4], 0xd
je 0x5528d6
lea ecx, [edi + 0x8d8]
call fcn.00410b40
xor esi, esi
cmp dword [edi + 0xe98], esi
je 0x552856
movzx eax, byte [edi + 0xa1b]
mov cl, byte [edi + 0xa1a]
mov dl, byte [edi + 0xa19]
mov byte [ebp - 0x8a0], al
movzx eax, byte [edi + 0xa18]
mov byte [ebp - 0x89f], cl
lea ecx, [ebp - 0x88c]
mov byte [ebp - 0x89e], dl
mov byte [ebp - 0x89d], al
call fcn.00411580
cmp byte [edi + 0x1f58], 0
lea ecx, [ebp - 0x8a0]
mov eax, 4
mov dword [ebp - 4], 1
mov dword [ebp - 0x88], 3
mov dword [ebp - 0x888], esi
mov dword [ebp - 0x488], esi
mov dword [ebp - 0x884], ecx
mov dword [ebp - 0x484], eax
je 0x5527de
mov ebx, dword [ebp - 0x89c]
mov edx, ebx
shr edx, 0x18
mov ecx, ebx
shr ecx, 0x10
mov byte [ebp - 0x890], dl
mov byte [ebp - 0x88f], cl
lea ecx, [ebp - 0x890]
mov edx, ebx
shr edx, 8
mov dword [ebp - 0x880], ecx
lea ecx, [edi + 0x910]
mov byte [ebp - 0x88e], dl
mov byte [ebp - 0x88d], bl
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x480], eax
call fcn.00410b80
lea ecx, [edi + 0x910]
mov dword [ebp - 0x87c], eax
call fcn.00410b60
mov dword [ebp - 0x47c], eax
jmp 0x552806
lea ecx, [edi + 0x92c]
call fcn.00410b80
lea ecx, [edi + 0x92c]
mov dword [ebp - 0x880], eax
call fcn.00410b60
mov ebx, dword [ebp - 0x89c]
mov dword [ebp - 0x480], eax
mov edx, dword [ebp - 0x898]
push edx
lea eax, [edi + 0x8d8]
push eax
mov eax, dword [edi + 0x1ee0]
push eax
lea ecx, [edi + 0x1f00]
call fcn.00410b60
push eax
lea ecx, [edi + 0x1f00]
call fcn.00410b80
push eax
lea ecx, [ebp - 0x88c]
push ecx
call fcn.004aa960
add esp, 0x18
lea ecx, [ebp - 0x88c]
mov dword [ebp - 4], 0xffffffff
call fcn.004115a0
jmp 0x55285c
mov ebx, dword [ebp - 0x89c]
cmp dword [edi + 0xeb4], 0
je 0x5528a7
cmp byte [edi + 0x1f58], 0
je 0x552895
lea esi, [edi + 0x92c]
mov ecx, esi
call fcn.00410b40
push esi
push ebx
call fcn.0058dcc0
add esp, 8
lea edx, [edi + 0x910]
push edx
mov ecx, esi
call fcn.00413bd0
jmp 0x5528a7
lea eax, [edi + 0x910]
push eax
lea ecx, [edi + 0x92c]
call fcn.004119b0
lea esi, [edi + 0x8d8]
mov ecx, esi
call fcn.00410b60
test eax, eax
je 0x5528d6
cmp dword [edi + 0xe98], 6
jne 0x5528ca
push 8
mov ecx, esi
call fcn.00410db0
push esi
lea ecx, [edi + 0x92c]
call fcn.00413bd0
mov ebx, dword [edi + 0xa20]
test ebx, ebx
je 0x5528ed
cmp ebx, 0xbb8
jae 0x5528ed
mov ebx, 0xbb8
mov eax, dword [ebp - 0x8b0]
test eax, eax
je 0x5528fe
mov byte [eax + 0x94], 1
mov ecx, dword [ebp - 0x8c0]
mov edx, dword [ebp - 0x898]
push ecx
push edx
lea eax, [ebp - 0x8a8]
push eax
push ebx
lea esi, [edi + 0x92c]
push 0
mov ecx, esi
mov dword [ebp - 0x8a8], 0
call fcn.00410b60
push eax
push esi
lea ecx, [edi + 0x820]
call fcn.0052ce00
mov byte [ebp - 0x891], al
test al, al
jne 0x5529a4
cmp dword [ebp - 0x8a8], 0
jbe 0x552992
mov ecx, esi
call fcn.00410b60
mov esi, dword [ebp - 0x898]
push eax
push str.packetSize
mov ecx, esi
call fcn.0044e8c0
mov ecx, dword [ebp - 0x8a8]
push ecx
push str.numBytesSent
mov ecx, esi
call fcn.0044e8c0
push ebx
push str.idleTimeoutMs
mov ecx, esi
call fcn.0044e8c0
mov edx, dword [esi]
push str.Failed_to_send_entire_SSH_packet.
mov ecx, esi
jmp 0x55299f
mov ecx, dword [ebp - 0x898]
mov edx, dword [ecx]
push str.SSH_SendBytes_failed.
mov eax, dword [edx + 0x14]
call eax
mov eax, dword [ebp - 0x8b0]
test eax, eax
je 0x5529b5
mov byte [eax + 0x94], 0
inc dword [edi + 0xa18]
cmp byte [ebp - 0x891], 0
jne 0x5529da
push 0x5bacc4
push str.Failed_to_send.
push str.TRAN
mov ecx, edi
call fcn.0054e350
mov al, byte [ebp - 0x891]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0059af98
mov esp, ebp
pop ebp
ret 0x18