Function at 0x101cfd90
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ecx
push ebx
push ebp
push esi
push edi
push 0x9c
push 1
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
mov edi, eax
add esp, 8
test edi, edi
je 0x101d07a1
mov bl, byte [esp + 0x28]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x18]
mov ebp, dword [esp + 0x24]
movzx ecx, bl
push ecx
mov dword [edi], eax
mov dword [edi + 0x1c], 0
push dword [esi + 0x14]
push dword [esi + 4]
push ebp
push str.Received_a__s_channel_request_for_channel___d:_d___want_reply_hhd_
push str.ssh_message_handle_channel_request
push 3
call fcn.101ceb90
add esp, 0x1c
mov dword [edi + 4], 3
mov dword [edi + 0x48], esi
mov ecx, str.pty_req
mov byte [edi + 0x4c], bl
mov eax, ebp
nop dword [eax + eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x101cfe20
test dl, dl
je 0x101cfe1c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x101cfe20
add eax, 2
add ecx, 2
test dl, dl
jne 0x101cfe00
xor eax, eax
jmp 0x101cfe25
sbb eax, eax
or eax, 1
test eax, eax
jne 0x101cfe6d
push 0x4f65feb3
lea eax, [edi + 0x64]
push eax
lea eax, [edi + 0x60]
push eax
lea eax, [edi + 0x5c]
push eax
lea eax, [edi + 0x58]
push eax
lea eax, [edi + 0x54]
push eax
lea eax, [edi + 0x50]
push eax
push 6
push str.sddddS
push dword [esp + 0x44]
call fcn.101d43c0
add esp, 0x28
mov dword [edi + 0x44], 1
test eax, eax
jne 0x101d00ad
jmp 0x101d025b
mov ecx, str.window_change
mov eax, ebp
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x101cfe94
test dl, dl
je 0x101cfe90
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x101cfe94
add eax, 2
add ecx, 2
test dl, dl
jne 0x101cfe74
xor eax, eax
jmp 0x101cfe99
sbb eax, eax
or eax, 1
test eax, eax
jne 0x101cfed9
push 0x4f65feb3
lea eax, [edi + 0x60]
mov dword [edi + 0x44], 6
push eax
lea eax, [edi + 0x5c]
push eax
lea eax, [edi + 0x58]
push eax
lea eax, [edi + 0x54]
push eax
push 4
push str.dddd
push dword [esp + 0x3c]
call fcn.101d43c0
add esp, 0x20
test eax, eax
jne 0x101d00ad
jmp 0x101d025b
mov ecx, str.subsystem
mov eax, ebp
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x101cff00
test dl, dl
je 0x101cfefc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x101cff00
add eax, 2
add ecx, 2
test dl, dl
jne 0x101cfee0
xor eax, eax
jmp 0x101cff05
sbb eax, eax
or eax, 1
test eax, eax
jne 0x101cff39
push 0x4f65feb3
lea eax, [edi + 0x74]
push eax
push 1
push 0x10252c30
push dword [esp + 0x30]
call fcn.101d43c0
add esp, 0x14
mov dword [edi + 0x44], 5
test eax, eax
jne 0x101d00ad
jmp 0x101d025b
mov ecx, str.shell
mov eax, ebp
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x101cff60
test dl, dl
je 0x101cff5c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x101cff60
add eax, 2
add ecx, 2
test dl, dl
jne 0x101cff40
xor eax, eax
jmp 0x101cff65
sbb eax, eax
or eax, 1
test eax, eax
jne 0x101cff75
mov dword [edi + 0x44], 3
jmp 0x101d025b
mov ecx, 0x10279468
mov eax, ebp
nop dword [eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x101cffa0
test dl, dl
je 0x101cff9c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x101cffa0
add eax, 2
add ecx, 2
test dl, dl
jne 0x101cff80
xor eax, eax
jmp 0x101cffa5
sbb eax, eax
or eax, 1
test eax, eax
jne 0x101cffd9
push 0x4f65feb3
lea eax, [edi + 0x70]
push eax
push 1
push 0x10252c30
push dword [esp + 0x30]
call fcn.101d43c0
add esp, 0x14
mov dword [edi + 0x44], 2
test eax, eax
jne 0x101d00ad
jmp 0x101d025b
mov ecx, 0x10279464
mov eax, ebp
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x101d0000
test dl, dl
je 0x101cfffc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x101d0000
add eax, 2
add ecx, 2
test dl, dl
jne 0x101cffe0
xor eax, eax
jmp 0x101d0005
sbb eax, eax
or eax, 1
test eax, eax
jne 0x101d003d
push 0x4f65feb3
lea eax, [edi + 0x6c]
push eax
lea eax, [edi + 0x68]
push eax
push 2
push 0x10279460
push dword [esp + 0x34]
call fcn.101d43c0
add esp, 0x18
mov dword [edi + 0x44], 4
test eax, eax
jne 0x101d00ad
jmp 0x101d025b
mov eax, str.x11_req
mov cl, byte [ebp]
cmp cl, byte [eax]
jne 0x101d0063
test cl, cl
je 0x101d005f
mov cl, byte [ebp + 1]
cmp cl, byte [eax + 1]
jne 0x101d0063
add ebp, 2
add eax, 2
test cl, cl
jne 0x101d0042
xor eax, eax
jmp 0x101d0068
sbb eax, eax
or eax, 1
test eax, eax
jne 0x101d0254
push 0x4f65feb3
lea eax, [edi + 0x84]
push eax
lea eax, [edi + 0x80]
push eax
lea eax, [edi + 0x7c]
push eax
lea eax, [edi + 0x78]
push eax
push 4
push str.bssd
push dword [esp + 0x3c]
call fcn.101d43c0
add esp, 0x20
mov dword [edi + 0x44], 7
test eax, eax
je 0x101d025b
mov eax, dword [edi + 4]
mov esi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
dec eax
cmp eax, 4
ja case.0x101d01d3.3
jmp dword [eax*4 + 0x101d07bc]
mov eax, dword [edi + 8]
test eax, eax
je 0x101d00db
push eax
call esi
add esp, 4
mov dword [edi + 8], 0
mov eax, dword [edi + 0x18]
test eax, eax
je 0x101d00ef
push eax
call esi
add esp, 4
mov dword [edi + 0x18], 0
mov edx, dword [edi + 0x10]
test edx, edx
je 0x101d0127
mov ecx, edx
lea ebx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x101d0100
sub ecx, ebx
push ecx
push edx
call fcn.101cdfb0
mov eax, dword [edi + 0x10]
add esp, 8
test eax, eax
je 0x101d0127
push eax
call esi
add esp, 4
mov dword [edi + 0x10], 0
push dword [edi + 0x14]
call fcn.101ccb60
jmp 0x101d0235
mov eax, dword [edi + 0x34]
test eax, eax
je 0x101d0148
push eax
call esi
add esp, 4
mov dword [edi + 0x34], 0
mov eax, dword [edi + 0x3c]
jmp 0x101d022e
mov eax, dword [edi + 0x50]
test eax, eax
je 0x101d0164
push eax
call esi
add esp, 4
mov dword [edi + 0x50], 0
mov eax, dword [edi + 0x64]
test eax, eax
je 0x101d0178
push eax
call esi
add esp, 4
mov dword [edi + 0x64], 0
mov eax, dword [edi + 0x68]
test eax, eax
je 0x101d018c
push eax
call esi
add esp, 4
mov dword [edi + 0x68], 0
mov eax, dword [edi + 0x6c]
test eax, eax
je 0x101d01a0
push eax
call esi
add esp, 4
mov dword [edi + 0x6c], 0
mov eax, dword [edi + 0x70]
test eax, eax
je 0x101d01b4
push eax
call esi
add esp, 4
mov dword [edi + 0x70], 0
mov ecx, dword [edi + 0x74]
test ecx, ecx
je 0x101d01ca
push ecx
call esi
add esp, 4
mov dword [edi + 0x74], 0
xor ecx, ecx
mov eax, dword [edi + 0x44]
dec eax
cmp eax, 6
ja case.0x101d01d3.3
jmp dword [eax*4 + 0x101d07d0]
mov eax, dword [edi + 0x70]
jmp 0x101d022e
mov eax, dword [edi + 0x68]
test eax, eax
je 0x101d01f3
push eax
call esi
add esp, 4
mov dword [edi + 0x68], 0
mov eax, dword [edi + 0x6c]
jmp 0x101d022e
mov eax, dword [edi + 0x50]
jmp 0x101d022e
test ecx, ecx
je case.0x101d01d3.3
push ecx
jmp 0x101d0233
mov eax, dword [edi + 0x7c]
test eax, eax
je 0x101d0218
push eax
call esi
add esp, 4
mov dword [edi + 0x7c], 0
mov eax, dword [edi + 0x80]
jmp 0x101d022e
mov eax, dword [edi + 0x88]
jmp 0x101d022e
mov eax, dword [edi + 0x94]
test eax, eax
je case.0x101d01d3.3
push eax
call esi
add esp, 4
push 0x9c
push 0
push edi
call fcn.101eec70
push edi
call esi
add esp, 0x10
or eax, 0xffffffff
pop edi
pop esi
pop ebp
pop ebx
pop ecx
ret
mov dword [edi + 0x44], 0
mov ebp, dword [esp + 0x18]
mov ebx, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
cmp dword [ebp + 0x4e4], 0
je 0x101d027d
push edi
push ebp
call fcn.101cf550
add esp, 8
jmp 0x101d039e
mov ecx, dword [ebp + 0x404]
test ecx, ecx
je 0x101d03a2
cmp dword [edi + 4], 2
jne 0x101d03a2
mov eax, dword [edi + 0x24]
cmp eax, 4
jne 0x101d02c9
mov eax, dword [ecx]
lea edx, [ecx + 0x18]
add eax, ecx
cmp edx, eax
jae 0x101d03a2
mov edx, dword [edx]
test edx, edx
je 0x101d03a2
push dword [ecx + 4]
movzx eax, word [edi + 0x38]
push eax
push dword [edi + 0x34]
push ebp
call edx
add esp, 0x10
jmp 0x101d02f4
cmp eax, 5
jne 0x101d03a2
mov eax, dword [ecx]
lea edx, [ecx + 0x1c]
add eax, ecx
cmp edx, eax
jae 0x101d03a2
mov eax, dword [edx]
test eax, eax
je 0x101d03a2
push dword [ecx + 4]
push ebp
call eax
add esp, 8
mov ebp, eax
test ebp, ebp
je 0x101d03c1
mov eax, dword [edi]
push eax
mov dword [esp + 0x14], eax
call fcn.101c8aa0
push 0x4f65feb3
push 0x88b8
mov esi, eax
mov dword [ebp + 4], esi
mov dword [ebp + 0x10], 0x88b8
mov dword [ebp + 8], 0x7d00
mov edx, dword [edi + 0x28]
push 0x7d00
push esi
mov esi, dword [esp + 0x24]
mov dword [ebp + 0x14], edx
mov ecx, dword [edi + 0x30]
push edx
mov dword [ebp + 0x20], ecx
mov eax, dword [edi + 0x2c]
push 0x5b
mov dword [ebp + 0x18], eax
push 5
mov dword [ebp + 0x24], 3
and dword [ebp + 0x2c], 0xfffffff7
push str.bdddd
push dword [esi + 0x464]
call fcn.101d4210
add esp, 0x28
test eax, eax
je 0x101d037d
push str.ssh_message_channel_request_open_reply_accept_channel
push esi
call fcn.101c9220
add esp, 8
or eax, 0xffffffff
jmp 0x101d039a
push dword [ebp + 0x14]
push str.Accepting_a_channel_request_open_for_chan__d
push str.ssh_message_channel_request_open_reply_accept_channel
push 3
call fcn.101ceb90
push esi
call fcn.101d5d70
add esp, 0x14
mov ebp, dword [esp + 0x18]
test eax, eax
je 0x101d03ca
cmp dword [ebp + 0x4dc], 0
je 0x101d052a
push edi
push ebp
call fcn.101cef70
add esp, 8
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
pop ecx
ret
push edi
call fcn.101deb70
add esp, 4
mov eax, dword [edi + 4]
dec eax
cmp eax, 4
ja case.0x101d0756.3
jmp dword [eax*4 + 0x101d07ec]
mov eax, dword [edi + 8]
test eax, eax
je 0x101d03f2
push eax
call ebx
add esp, 4
mov dword [edi + 8], 0
mov eax, dword [edi + 0x18]
test eax, eax
je 0x101d0406
push eax
call ebx
add esp, 4
mov dword [edi + 0x18], 0
mov edx, dword [edi + 0x10]
test edx, edx
je 0x101d0439
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x101d0412
sub ecx, esi
push ecx
push edx
call fcn.101cdfb0
mov eax, dword [edi + 0x10]
add esp, 8
test eax, eax
je 0x101d0439
push eax
call ebx
add esp, 4
mov dword [edi + 0x10], 0
push dword [edi + 0x14]
call fcn.101ccb60
jmp 0x101d0771
mov eax, dword [edi + 0x34]
test eax, eax
je 0x101d045a
push eax
call ebx
add esp, 4
mov dword [edi + 0x34], 0
mov eax, dword [edi + 0x3c]
jmp 0x101d076a
mov eax, dword [edi + 0x50]
test eax, eax
je 0x101d0476
push eax
call ebx
add esp, 4
mov dword [edi + 0x50], 0
mov eax, dword [edi + 0x64]
test eax, eax
je 0x101d048a
push eax
call ebx
add esp, 4
mov dword [edi + 0x64], 0
mov eax, dword [edi + 0x68]
test eax, eax
je 0x101d049e
push eax
call ebx
add esp, 4
mov dword [edi + 0x68], 0
mov eax, dword [edi + 0x6c]
test eax, eax
je 0x101d04b2
push eax
call ebx
add esp, 4
mov dword [edi + 0x6c], 0
mov eax, dword [edi + 0x70]
test eax, eax
je 0x101d04c6
push eax
call ebx
add esp, 4
mov dword [edi + 0x70], 0
mov ecx, dword [edi + 0x74]
test ecx, ecx
je 0x101d04dc
push ecx
call ebx
add esp, 4
mov dword [edi + 0x74], 0
xor ecx, ecx
mov eax, dword [edi + 0x44]
dec eax
cmp eax, 6
ja case.0x101d0756.3
jmp dword [eax*4 + 0x101d0800]
mov eax, dword [edi + 0x70]
jmp 0x101d076a
mov eax, dword [edi + 0x50]
jmp 0x101d076a
mov eax, dword [edi + 0x7c]
test eax, eax
je 0x101d0514
push eax
call ebx
add esp, 4
mov dword [edi + 0x7c], 0
mov eax, dword [edi + 0x80]
jmp 0x101d076a
mov eax, dword [edi + 0x88]
jmp 0x101d076a
cmp dword [ebp + 0x4e4], 0
je 0x101d0646
push edi
call fcn.101deb70
mov eax, dword [edi + 4]
add esp, 4
dec eax
cmp eax, 4
ja case.0x101d0756.3
jmp dword [eax*4 + 0x101d081c]
mov eax, dword [edi + 8]
test eax, eax
je 0x101d0568
push eax
call ebx
add esp, 4
mov dword [edi + 8], 0
mov eax, dword [edi + 0x18]
test eax, eax
je 0x101d057c
push eax
call ebx
add esp, 4
mov dword [edi + 0x18], 0
mov edx, dword [edi + 0x10]
test edx, edx
je 0x101d0439
mov ecx, edx
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x101d0590
jmp 0x101d0419
mov eax, dword [edi + 0x50]
test eax, eax
je 0x101d05b0
push eax
call ebx
add esp, 4
mov dword [edi + 0x50], 0
mov eax, dword [edi + 0x64]
test eax, eax
je 0x101d05c4
push eax
call ebx
add esp, 4
mov dword [edi + 0x64], 0
mov eax, dword [edi + 0x68]
test eax, eax
je 0x101d05d8
push eax
call ebx
add esp, 4
mov dword [edi + 0x68], 0
mov eax, dword [edi + 0x6c]
test eax, eax
je 0x101d05ec
push eax
call ebx
add esp, 4
mov dword [edi + 0x6c], 0
mov eax, dword [edi + 0x70]
test eax, eax
je 0x101d0600
push eax
call ebx
add esp, 4
mov dword [edi + 0x70], 0
mov ecx, dword [edi + 0x74]
test ecx, ecx
je 0x101d0616
push ecx
call ebx
add esp, 4
mov dword [edi + 0x74], 0
xor ecx, ecx
mov eax, dword [edi + 0x44]
dec eax
cmp eax, 6
ja case.0x101d0756.3
jmp dword [eax*4 + 0x101d0830]
mov eax, dword [edi + 0x68]
test eax, eax
je 0x101d063e
push eax
call ebx
add esp, 4
mov dword [edi + 0x68], 0
mov eax, dword [edi + 0x6c]
jmp 0x101d076a
mov eax, dword [ebp + 0x4d8]
test eax, eax
jne 0x101d078f
call fcn.101ce1c0
mov dword [ebp + 0x4d8], eax
test eax, eax
jne 0x101d078f
push edi
call fcn.101deb70
push str.ssh_message_queue
push ebp
call fcn.101c9220
mov eax, dword [edi + 4]
add esp, 0xc
dec eax
cmp eax, 4
ja case.0x101d0756.3
jmp dword [eax*4 + 0x101d084c]
mov eax, dword [edi + 8]
test eax, eax
je 0x101d06a3
push eax
call ebx
add esp, 4
mov dword [edi + 8], 0
mov eax, dword [edi + 0x18]
test eax, eax
je 0x101d06b7
push eax
call ebx
add esp, 4
mov dword [edi + 0x18], 0
mov edx, dword [edi + 0x10]
test edx, edx
je 0x101d0439
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x101d06c7
jmp 0x101d0419
mov eax, dword [edi + 0x50]
test eax, eax
je 0x101d06e7
push eax
call ebx
add esp, 4
mov dword [edi + 0x50], 0
mov eax, dword [edi + 0x64]
test eax, eax
je 0x101d06fb
push eax
call ebx
add esp, 4
mov dword [edi + 0x64], 0
mov eax, dword [edi + 0x68]
test eax, eax
je 0x101d070f
push eax
call ebx
add esp, 4
mov dword [edi + 0x68], 0
mov eax, dword [edi + 0x6c]
test eax, eax
je 0x101d0723
push eax
call ebx
add esp, 4
mov dword [edi + 0x6c], 0
mov eax, dword [edi + 0x70]
test eax, eax
je 0x101d0737
push eax
call ebx
add esp, 4
mov dword [edi + 0x70], 0
mov ecx, dword [edi + 0x74]
test ecx, ecx
je 0x101d074d
push ecx
call ebx
add esp, 4
mov dword [edi + 0x74], 0
xor ecx, ecx
mov eax, dword [edi + 0x44]
dec eax
cmp eax, 6
ja case.0x101d0756.3
jmp dword [eax*4 + 0x101d0860]
test ecx, ecx
je case.0x101d0756.3
push ecx
jmp 0x101d076f
mov eax, dword [edi + 0x94]
test eax, eax
je case.0x101d0756.3
push eax
call ebx
add esp, 4
push 0x9c
push 0
push edi
call fcn.101eec70
push edi
call ebx
add esp, 0x10
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
pop ecx
ret
push edi
push eax
call fcn.101ce100
add esp, 8
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
pop ecx
ret
push str.ssh_message_handle_channel_request
push dword [esp + 0x1c]
call fcn.101c9220
add esp, 8
or eax, 0xffffffff
pop edi
pop esi
pop ebp
pop ebx
pop ecx
ret