Similarity

003da200
003da200golang.org/x/crypto/blake2b.init.0.func2: ; void golang.org/x/crypto/blake2b.init.0.func2(void)
003da200ldr x16, [x28+16]
003da204sub x17, sp, 16
003da208subs xzr, x17, x16
003da20cb.ls 0x3da28c
003da210str x30, [sp-144]!
003da214stur x29, [sp-8]
003da218sub x29, sp, 8
003da21cstp xzr, xzr, [sp+40]
003da220stp xzr, xzr, [sp+88]
003da224stp xzr, xzr, [sp+72]
003da228mov x0, xzr
003da22cmov x1, xzr
003da230mov x2, x1
003da234bl golang.org/x/crypto/blake2b.New384
003da238str x0, [sp+88]
003da23cstr x1, [sp+96]
003da240str x2, [sp+72]
003da244str x3, [sp+80]
003da248ldr x3, [sp+88]
003da24cldr x4, [sp+96]
003da250str x3, [sp+120]
003da254str x4, [sp+128]
003da258ldr x3, [sp+72]
003da25cldr x4, [sp+80]
003da260str x3, [sp+104]
003da264str x4, [sp+112]
003da268ldr x0, [sp+120]
003da26cldr x1, [sp+128]
003da270str x0, [sp+56]
003da274str x1, [sp+64]
003da278str x0, [sp+40]
003da27cstr x1, [sp+48]
003da280ldur x29, [sp-8]
003da284ldr x30, [sp], 144
003da288ret x30
003da28c
003da28cloc_3da28c:
003da28cmov x3, x30
003da290bl runtime.morestack_noctxt.abi0
003da294b 0x3da200
003da298udf 0
003da29cudf 0
003da200

003da2a0
003da2a0golang.org/x/crypto/blake2b.init.0.func3: ; void golang.org/x/crypto/blake2b.init.0.func3(void)
003da2a0ldr x16, [x28+16]
003da2a4sub x17, sp, 16
003da2a8subs xzr, x17, x16
003da2acb.ls 0x3da32c
003da2b0str x30, [sp-144]!
003da2b4stur x29, [sp-8]
003da2b8sub x29, sp, 8
003da2bcstp xzr, xzr, [sp+40]
003da2c0stp xzr, xzr, [sp+88]
003da2c4stp xzr, xzr, [sp+72]
003da2c8mov x0, xzr
003da2ccmov x1, xzr
003da2d0mov x2, x1
003da2d4bl golang.org/x/crypto/blake2b.New512
003da2d8str x0, [sp+88]
003da2dcstr x1, [sp+96]
003da2e0str x2, [sp+72]
003da2e4str x3, [sp+80]
003da2e8ldr x3, [sp+88]
003da2ecldr x4, [sp+96]
003da2f0str x3, [sp+120]
003da2f4str x4, [sp+128]
003da2f8ldr x3, [sp+72]
003da2fcldr x4, [sp+80]
003da300str x3, [sp+104]
003da304str x4, [sp+112]
003da308ldr x0, [sp+120]
003da30cldr x1, [sp+128]
003da310str x0, [sp+56]
003da314str x1, [sp+64]
003da318str x0, [sp+40]
003da31cstr x1, [sp+48]
003da320ldur x29, [sp-8]
003da324ldr x30, [sp], 144
003da328ret x30
003da32c
003da32cloc_3da32c:
003da32cmov x3, x30
003da330bl runtime.morestack_noctxt.abi0
003da334b 0x3da2a0
003da338udf 0
003da33cudf 0
003da2a0

003da340
003da340golang.org/x/crypto/ed25519.Verify: ; void golang.org/x/crypto/ed25519.Verify(crypto/ed25519.PublicKey publicKey, struct []uint8 message, struct []uint8 sig)
003da340ldr x16, [x28+16]
003da344subs xzr, sp, x16
003da348b.ls 0x3da3bc
003da34cstr x30, [sp-96]!
003da350stur x29, [sp-8]
003da354sub x29, sp, 8
003da358str x0, [sp+104]
003da35cstr x1, [sp+112]
003da360str x2, [sp+120]
003da364str x3, [sp+128]
003da368str x4, [sp+136]
003da36cstr x5, [sp+144]
003da370str x6, [sp+152]
003da374str x7, [sp+160]
003da378str x8, [sp+168]
003da37cstrb wzr, [sp+86]
003da380ldr x0, [sp+104]
003da384ldr x3, [sp+128]
003da388ldr x6, [sp+152]
003da38cldr x1, [sp+112]
003da390ldr x4, [sp+136]
003da394ldr x7, [sp+160]
003da398ldr x2, [sp+120]
003da39cldr x5, [sp+144]
003da3a0ldr x8, [sp+168]
003da3a4bl crypto/ed25519.Verify
003da3a8strb w0, [sp+87]
003da3acstrb w0, [sp+86]
003da3b0ldur x29, [sp-8]
003da3b4ldr x30, [sp], 96
003da3b8ret x30
003da3bc
003da3bcloc_3da3bc:
003da3bcstp x0, x1, [sp+8]
003da3c0stp x2, x3, [sp+24]
003da3c4stp x4, x5, [sp+40]
003da3c8stp x6, x7, [sp+56]
003da3ccstr x8, [sp+72]
003da3d0mov x3, x30
003da3d4bl runtime.morestack_noctxt.abi0
003da3d8ldp x0, x1, [sp+8]
003da3dcldp x2, x3, [sp+24]
003da3e0ldp x4, x5, [sp+40]
003da3e4ldp x6, x7, [sp+56]
003da3e8ldr x8, [sp+72]
003da3ecb 0x3da340
003da340

003da3f0
003da3f0github.com/bishopfox/sliver/implant/sliver/cryptography.init: ; void github.com/bishopfox/sliver/implant/sliver/cryptography.init(void)
003da3f0ldr x16, [x28+16]
003da3f4subs xzr, sp, x16
003da3f8b.ls 0x3da530
003da3fcstr x30, [sp-32]!
003da400stur x29, [sp-8]
003da404sub x29, sp, 8
003da408adrp x0, 0x2dd000
003da40cadd x0, x0, 3612
003da410movz x1, 22
003da414bl errors.New
003da418adrp x27, 0x647000
003da41cstr x0, [x27+2720]
003da420adrp x27, 0x671000
003da424ldr w2, [x27+3056]
003da428cbz w2, 0x3da430
003da42cb 0x3da434
003da430
003da430loc_3da430:
003da430b 0x3da44c
003da434
003da434loc_3da434:
003da434bl runtime.gcWriteBarrier2
003da438str x1, [x25]
003da43cadrp x27, 0x647000
003da440ldr x2, [x27+2728]
003da444str x2, [x25+8]
003da448b 0x3da44c
003da44c
003da44cloc_3da44c:
003da44cadrp x27, 0x647000
003da450str x1, [x27+2728]
003da454adrp x0, 0x2db000
003da458add x0, x0, 1220
003da45cmovz x1, 17
003da460bl errors.New
003da464adrp x27, 0x647000
003da468str x0, [x27+2736]
003da46cadrp x27, 0x671000
003da470ldr w2, [x27+3056]
003da474cbz w2, 0x3da47c
003da478b 0x3da480
003da47c
003da47cloc_3da47c:
003da47cb 0x3da498
003da480
003da480loc_3da480:
003da480bl runtime.gcWriteBarrier2
003da484str x1, [x25]
003da488adrp x27, 0x647000
003da48cldr x2, [x27+2744]
003da490str x2, [x25+8]
003da494b 0x3da498
003da498
003da498loc_3da498:
003da498adrp x27, 0x647000
003da49cstr x1, [x27+2744]
003da4a0adrp x0, 0x2da000
003da4a4add x0, x0, 3348
003da4a8orr x1, xzr, 16
003da4acbl errors.New
003da4b0adrp x27, 0x647000
003da4b4str x0, [x27+2752]
003da4b8adrp x27, 0x671000
003da4bcldr w2, [x27+3056]
003da4c0cbz w2, 0x3da4c8
003da4c4b 0x3da4cc
003da4c8
003da4c8loc_3da4c8:
003da4c8b 0x3da4e4
003da4cc
003da4ccloc_3da4cc:
003da4ccbl runtime.gcWriteBarrier2
003da4d0str x1, [x25]
003da4d4adrp x27, 0x647000
003da4d8ldr x0, [x27+2760]
003da4dcstr x0, [x25+8]
003da4e0b 0x3da4e4
003da4e4
003da4e4loc_3da4e4:
003da4e4adrp x27, 0x647000
003da4e8str x1, [x27+2760]
003da4ecbl github.com/bishopfox/sliver/implant/sliver/cryptography.newKeyLogger
003da4f0adrp x27, 0x671000
003da4f4ldr w1, [x27+3056]
003da4f8cbz w1, 0x3da500
003da4fcb 0x3da504
003da500
003da500loc_3da500:
003da500b 0x3da51c
003da504
003da504loc_3da504:
003da504bl runtime.gcWriteBarrier2
003da508str x0, [x25]
003da50cadrp x27, 0x646000
003da510ldr x1, [x27+3584]
003da514str x1, [x25+8]
003da518b 0x3da51c
003da51c
003da51cloc_3da51c:
003da51cadrp x27, 0x646000
003da520str x0, [x27+3584]
003da524ldur x29, [sp-8]
003da528ldr x30, [sp], 32
003da52cret x30
003da530
003da530loc_3da530:
003da530mov x3, x30
003da534bl runtime.morestack_noctxt.abi0
003da538b 0x3da3f0
003da53cudf 0
003da3f0

003da540
003da540github.com/bishopfox/sliver/implant/sliver/cryptography.init.0: ; void github.com/bishopfox/sliver/implant/sliver/cryptography.init.0(void)
003da540ldr x16, [x28+16]
003da544subs xzr, sp, x16
003da548b.ls 0x3da620
003da54cstr x30, [sp-64]!
003da550stur x29, [sp-8]
003da554sub x29, sp, 8
003da558adrp x0, 0x2a4000
003da55cadd x0, x0, 800
003da560bl runtime.newobject
003da564str x0, [sp+48]
003da568adrp x27, 0x671000
003da56cldr w1, [x27+3056]
003da570cbz w1, 0x3da578
003da574b 0x3da57c
003da578
003da578loc_3da578:
003da578b 0x3da598
003da57c
003da57cloc_3da57c:
003da57cstr x0, [sp+40]
003da580mov x1, x0
003da584adrp x0, 0x2a4000
003da588add x0, x0, 800
003da58cbl runtime.wbZero
003da590ldr x0, [sp+40]
003da594b 0x3da598
003da598
003da598loc_3da598:
003da598stp xzr, xzr, [x0]
003da59cstp xzr, xzr, [x0+16]
003da5a0str xzr, [x0+32]
003da5a4ldr x0, [sp+48]
003da5a8ldrsb x27, [x0]
003da5acadrp x27, 0x671000
003da5b0ldr w1, [x27+3056]
003da5b4cbz w1, 0x3da5bc
003da5b8b 0x3da5c0
003da5bc
003da5bcloc_3da5bc:
003da5bcb 0x3da5d0
003da5c0
003da5c0loc_3da5c0:
003da5c0ldr x1, [x0+32]
003da5c4bl runtime.gcWriteBarrier1
003da5c8str x1, [x25]
003da5ccb 0x3da5d0
003da5d0
003da5d0loc_3da5d0:
003da5d0adrp x1, 0x2ff000
003da5d4add x1, x1, 128
003da5d8str x1, [x0+32]
003da5dcldr x0, [sp+48]
003da5e0adrp x27, 0x671000
003da5e4ldr w1, [x27+3056]
003da5e8cbz w1, 0x3da5f0
003da5ecb 0x3da5f4
003da5f0
003da5f0loc_3da5f0:
003da5f0b 0x3da60c
003da5f4
003da5f4loc_3da5f4:
003da5f4bl runtime.gcWriteBarrier2
003da5f8str x0, [x25]
003da5fcadrp x27, 0x633000
003da600ldr x1, [x27+208]
003da604str x1, [x25+8]
003da608b 0x3da60c
003da60c
003da60cloc_3da60c:
003da60cadrp x27, 0x633000
003da610str x0, [x27+208]
003da614ldur x29, [sp-8]
003da618ldr x30, [sp], 64
003da61cret x30
003da620
003da620loc_3da620:
003da620mov x3, x30
003da624bl runtime.morestack_noctxt.abi0
003da628b 0x3da540
003da62cudf 0
003da540

003da630
003da630github.com/bishopfox/sliver/implant/sliver/cryptography.AgeEncrypt: ; void github.com/bishopfox/sliver/implant/sliver/cryptography.AgeEncrypt(struct string recipientPublicKey, struct []uint8 plaintext)
003da630ldr x16, [x28+16]
003da634sub x17, sp, 336
003da638subs xzr, x17, x16
003da63cb.ls 0x3da9d8
003da640sub x20, sp, 464
003da644stp x29, x30, [x20-8]
003da648add sp, x20, 0
003da64csub x29, sp, 8
003da650str x0, [sp+472]
003da654str x1, [sp+480]
003da658str x2, [sp+488]
003da65cstr x3, [sp+496]
003da660str x4, [sp+504]
003da664str xzr, [sp+96]
003da668stp xzr, xzr, [sp+104]
003da66cstp xzr, xzr, [sp+80]
003da670ldr x0, [sp+472]
003da674adrp x27, 0x633000
003da678ldr x2, [x27+2896]
003da67cldr x1, [sp+480]
003da680adrp x27, 0x633000
003da684ldr x3, [x27+2904]
003da688bl strings.HasPrefix
003da68cstrb w0, [sp+63]
003da690tbnz w0, 0, 0x3da698
003da694b 0x3da69c
003da698
003da698loc_3da698:
003da698b 0x3da6c8
003da69c
003da69cloc_3da69c:
003da69cadrp x27, 0x633000
003da6a0ldr x1, [x27+2896]
003da6a4ldr x3, [sp+472]
003da6a8adrp x27, 0x633000
003da6acldr x2, [x27+2904]
003da6b0ldr x4, [sp+480]
003da6b4mov x0, xzr
003da6b8bl runtime.concatstring2
003da6bcstr x0, [sp+472]
003da6c0str x1, [sp+480]
003da6c4b 0x3da6c8
003da6c8
003da6c8loc_3da6c8:
003da6c8str xzr, [sp+400]
003da6ccstp xzr, xzr, [sp+384]
003da6d0ldr x0, [sp+472]
003da6d4ldr x1, [sp+480]
003da6d8bl filippo.io/age.ParseX25519Recipient
003da6dcstr x0, [sp+400]
003da6e0str x1, [sp+384]
003da6e4str x2, [sp+392]
003da6e8ldr x2, [sp+400]
003da6ecstr x2, [sp+216]
003da6f0ldr x2, [sp+392]
003da6f4ldr x3, [sp+384]
003da6f8str x3, [sp+200]
003da6fcstr x2, [sp+208]
003da700ldr x2, [sp+216]
003da704str x2, [sp+136]
003da708ldr x2, [sp+208]
003da70cldr x3, [sp+200]
003da710str x3, [sp+176]
003da714str x2, [sp+184]
003da718cbnz x3, 0x3da720
003da71cb 0x3da750
003da720
003da720loc_3da720:
003da720str xzr, [sp+96]
003da724stp xzr, xzr, [sp+104]
003da728ldr x3, [sp+176]
003da72cldr x4, [sp+184]
003da730str x3, [sp+80]
003da734str x4, [sp+88]
003da738ldr x0, [sp+96]
003da73cldr x1, [sp+104]
003da740ldr x2, [sp+112]
003da744ldp x29, x30, [sp-8]
003da748add sp, sp, 464
003da74cret x30
003da750
003da750loc_3da750:
003da750adrp x0, 0x671000
003da754add x0, x0, 1504
003da758str x0, [sp+264]
003da75cb 0x3da760
003da760
003da760loc_3da760:
003da760str x0, [sp+272]
003da764stp xzr, xzr, [sp+280]
003da768mov x1, xzr
003da76cmov x2, x1
003da770bl bytes.NewBuffer
003da774str x0, [sp+192]
003da778str x0, [sp+376]
003da77cldr x3, [sp+136]
003da780str x3, [sp+400]
003da784stp xzr, xzr, [sp+344]
003da788stp xzr, xzr, [sp+384]
003da78cstp xzr, xzr, [sp+360]
003da790add x3, sp, 360
003da794str x3, [sp+232]
003da798ldr x3, [sp+400]
003da79cstr x3, [sp+224]
003da7a0ldr x4, [sp+232]
003da7a4ldrsb x27, [x4]
003da7a8adrp x5, 0x33b000
003da7acadd x5, x5, 2752
003da7b0str x5, [x4]
003da7b4adrp x27, 0x671000
003da7b8ldr w5, [x27+3056]
003da7bccbz w5, 0x3da7c4
003da7c0b 0x3da7c8
003da7c4
003da7c4loc_3da7c4:
003da7c4b 0x3da7dc
003da7c8
003da7c8loc_3da7c8:
003da7c8bl runtime.gcWriteBarrier2
003da7ccstr x3, [x25]
003da7d0ldr x5, [x4+8]
003da7d4str x5, [x25+8]
003da7d8b 0x3da7dc
003da7dc
003da7dcloc_3da7dc:
003da7dcstr x3, [x4+8]
003da7e0ldr x2, [sp+232]
003da7e4ldrsb x27, [x2]
003da7e8b 0x3da7ec
003da7ec
003da7ecloc_3da7ec:
003da7ecstr x2, [sp+240]
003da7f0orr x4, xzr, 1
003da7f4str x4, [sp+248]
003da7f8str x4, [sp+256]
003da7fcldr x1, [sp+376]
003da800adrp x0, 0x339000
003da804add x0, x0, 2976
003da808mov x3, x4
003da80cbl filippo.io/age.Encrypt
003da810str x0, [sp+344]
003da814str x1, [sp+352]
003da818str x2, [sp+384]
003da81cstr x3, [sp+392]
003da820ldr x5, [sp+344]
003da824ldr x6, [sp+352]
003da828str x5, [sp+440]
003da82cstr x6, [sp+448]
003da830ldr x5, [sp+384]
003da834ldr x6, [sp+392]
003da838str x5, [sp+424]
003da83cstr x6, [sp+432]
003da840ldr x5, [sp+440]
003da844ldr x6, [sp+448]
003da848str x5, [sp+120]
003da84cstr x6, [sp+128]
003da850ldr x5, [sp+432]
003da854ldr x6, [sp+424]
003da858str x6, [sp+176]
003da85cstr x5, [sp+184]
003da860cbnz x6, 0x3da868
003da864b 0x3da898
003da868
003da868loc_3da868:
003da868str xzr, [sp+96]
003da86cstp xzr, xzr, [sp+104]
003da870ldr x3, [sp+176]
003da874ldr x4, [sp+184]
003da878str x3, [sp+80]
003da87cstr x4, [sp+88]
003da880ldr x0, [sp+96]
003da884ldr x1, [sp+104]
003da888ldr x2, [sp+112]
003da88cldp x29, x30, [sp-8]
003da890add sp, sp, 464
003da894ret x30
003da898
003da898loc_3da898:
003da898stp xzr, xzr, [sp+384]
003da89cldr x2, [sp+496]
003da8a0ldr x3, [sp+504]
003da8a4ldr x4, [sp+120]
003da8a8ldrsb x27, [x4]
003da8acldr x4, [x4+32]
003da8b0ldr x1, [sp+488]
003da8b4ldr x0, [sp+128]
003da8b8blr x4
003da8bcstr x0, [sp+64]
003da8c0str x1, [sp+384]
003da8c4str x2, [sp+392]
003da8c8ldr x4, [sp+64]
003da8ccstr x4, [sp+72]
003da8d0str x1, [sp+408]
003da8d4str x2, [sp+416]
003da8d8str x1, [sp+160]
003da8dcstr x2, [sp+168]
003da8e0cbnz x1, 0x3da8e8
003da8e4b 0x3da918
003da8e8
003da8e8loc_3da8e8:
003da8e8str xzr, [sp+96]
003da8ecstp xzr, xzr, [sp+104]
003da8f0ldr x3, [sp+160]
003da8f4ldr x4, [sp+168]
003da8f8str x3, [sp+80]
003da8fcstr x4, [sp+88]
003da900ldr x0, [sp+96]
003da904ldr x1, [sp+104]
003da908ldr x2, [sp+112]
003da90cldp x29, x30, [sp-8]
003da910add sp, sp, 464
003da914ret x30
003da918
003da918loc_3da918:
003da918ldr x1, [sp+120]
003da91cldrsb x27, [x1]
003da920ldr x1, [x1+24]
003da924ldr x0, [sp+128]
003da928blr x1
003da92cstr x0, [sp+144]
003da930str x1, [sp+152]
003da934cbnz x0, 0x3da93c
003da938b 0x3da96c
003da93c
003da93cloc_3da93c:
003da93cstr xzr, [sp+96]
003da940stp xzr, xzr, [sp+104]
003da944ldr x3, [sp+144]
003da948ldr x4, [sp+152]
003da94cstr x3, [sp+80]
003da950str x4, [sp+88]
003da954ldr x0, [sp+96]
003da958ldr x1, [sp+104]
003da95cldr x2, [sp+112]
003da960ldp x29, x30, [sp-8]
003da964add sp, sp, 464
003da968ret x30
003da96c
003da96cloc_3da96c:
003da96cldr x0, [sp+192]
003da970bl bytes.(*Buffer).Bytes
003da974str x0, [sp+320]
003da978str x1, [sp+328]
003da97cstr x2, [sp+336]
003da980adrp x27, 0x634000
003da984ldr x3, [x27+3600]
003da988adrp x27, 0x634000
003da98cldr x4, [x27+3608]
003da990adrp x27, 0x634000
003da994ldr x5, [x27+3616]
003da998bl bytes.TrimPrefix
003da99cstr x0, [sp+296]
003da9a0str x1, [sp+304]
003da9a4str x2, [sp+312]
003da9a8str x0, [sp+96]
003da9acstr x1, [sp+104]
003da9b0str x2, [sp+112]
003da9b4stp xzr, xzr, [sp+80]
003da9b8ldr x0, [sp+96]
003da9bcldr x1, [sp+104]
003da9c0ldr x2, [sp+112]
003da9c4mov x3, xzr
003da9c8mov x4, xzr
003da9ccldp x29, x30, [sp-8]
003da9d0add sp, sp, 464
003da9d4ret x30
003da9d8
003da9d8loc_3da9d8:
003da9d8stp x0, x1, [sp+8]
003da9dcstp x2, x3, [sp+24]
003da9e0str x4, [sp+40]
003da9e4mov x3, x30
003da9e8bl runtime.morestack_noctxt.abi0
003da9ecldp x0, x1, [sp+8]
003da9f0ldp x2, x3, [sp+24]
003da9f4ldr x4, [sp+40]
003da9f8b 0x3da630
003da9fcudf 0
003da630

003daa00
003daa00github.com/bishopfox/sliver/implant/sliver/cryptography.RandomSymmetricKey: ; void github.com/bishopfox/sliver/implant/sliver/cryptography.RandomSymmetricKey(void)
003daa00ldr x16, [x28+16]
003daa04subs xzr, sp, x16
003daa08b.ls 0x3daa88
003daa0cstr x30, [sp-128]!
003daa10stur x29, [sp-8]
003daa14sub x29, sp, 8
003daa18stp xzr, xzr, [sp+136]
003daa1cstp xzr, xzr, [sp+152]
003daa20adrp x0, 0x21b000
003daa24add x0, x0, 3072
003daa28orr x1, xzr, 64
003daa2cmov x2, x1
003daa30bl runtime.makeslice
003daa34str x0, [sp+96]
003daa38orr x2, xzr, 64
003daa3cstr x2, [sp+104]
003daa40str x2, [sp+112]
003daa44mov x1, x2
003daa48bl crypto/rand.Read
003daa4cldr x0, [sp+96]
003daa50ldr x1, [sp+104]
003daa54ldr x2, [sp+112]
003daa58bl github.com/bishopfox/sliver/implant/sliver/cryptography.deriveKeyFrom
003daa5cldp x3, x4, [sp+8]
003daa60ldp x5, x6, [sp+24]
003daa64stp x3, x4, [sp+64]
003daa68stp x5, x6, [sp+80]
003daa6cldp x3, x4, [sp+64]
003daa70ldp x5, x6, [sp+80]
003daa74stp x3, x4, [sp+136]
003daa78stp x5, x6, [sp+152]
003daa7cldur x29, [sp-8]
003daa80ldr x30, [sp], 128
003daa84ret x30
003daa88
003daa88loc_3daa88:
003daa88mov x3, x30
003daa8cbl runtime.morestack_noctxt.abi0
003daa90b 0x3daa00
003daa94udf 0
003daa98udf 0
003daa9cudf 0
003daa00

003daaa0
003daaa0github.com/bishopfox/sliver/implant/sliver/cryptography.deriveKeyFrom: ; void github.com/bishopfox/sliver/implant/sliver/cryptography.deriveKeyFrom(struct []uint8 data)
003daaa0ldr x16, [x28+16]
003daaa4sub x17, sp, 128
003daaa8subs xzr, x17, x16
003daaacb.ls 0x3dabd0
003daab0sub x20, sp, 256
003daab4stp x29, x30, [x20-8]
003daab8add sp, x20, 0
003daabcsub x29, sp, 8
003daac0str x0, [sp+296]
003daac4str x1, [sp+304]
003daac8str x2, [sp+312]
003daaccstp xzr, xzr, [sp+264]
003daad0stp xzr, xzr, [sp+280]
003daad4ldr x0, [sp+296]
003daad8ldr x1, [sp+304]
003daadcldr x2, [sp+312]
003daae0bl crypto/sha256.Sum256
003daae4ldp x3, x4, [sp+8]
003daae8ldp x5, x6, [sp+24]
003daaecstp x3, x4, [sp+104]
003daaf0stp x5, x6, [sp+120]
003daaf4stp xzr, xzr, [sp+72]
003daaf8stp xzr, xzr, [sp+88]
003daafcadd x3, sp, 72
003dab00ldrsb x27, [x3]
003dab04b 0x3dab08
003dab08
003dab08loc_3dab08:
003dab08str x3, [sp+224]
003dab0corr x3, xzr, 32
003dab10str x3, [sp+232]
003dab14str x3, [sp+240]
003dab18add x4, sp, 104
003dab1cldrsb x27, [x4]
003dab20b 0x3dab24
003dab24
003dab24loc_3dab24:
003dab24str x4, [sp+200]
003dab28str x3, [sp+208]
003dab2cstr x3, [sp+216]
003dab30ldr x3, [sp+224]
003dab34ldr x4, [sp+232]
003dab38ldr x5, [sp+240]
003dab3cstr x3, [sp+176]
003dab40str x4, [sp+184]
003dab44str x5, [sp+192]
003dab48ldr x3, [sp+208]
003dab4cldr x4, [sp+200]
003dab50ldr x5, [sp+216]
003dab54str x4, [sp+152]
003dab58str x3, [sp+160]
003dab5cstr x5, [sp+168]
003dab60ldr x4, [sp+184]
003dab64str x4, [sp+144]
003dab68subs xzr, x4, x3
003dab6cb.gt 0x3dab74
003dab70b 0x3dab7c
003dab74
003dab74loc_3dab74:
003dab74str x3, [sp+144]
003dab78b 0x3dab80
003dab7c
003dab7cloc_3dab7c:
003dab7cb 0x3dab80
003dab80
003dab80loc_3dab80:
003dab80ldr x3, [sp+152]
003dab84ldr x4, [sp+176]
003dab88subs xzr, x3, x4
003dab8cb.ne 0x3dab94
003dab90b 0x3dabb0
003dab94
003dab94loc_3dab94:
003dab94ldr x3, [sp+144]
003dab98str x3, [sp+136]
003dab9cldr x2, [sp+136]
003daba0ldr x1, [sp+152]
003daba4ldr x0, [sp+176]
003daba8bl runtime.memmove
003dabacb 0x3dabb4
003dabb0
003dabb0loc_3dabb0:
003dabb0b 0x3dabb4
003dabb4
003dabb4loc_3dabb4:
003dabb4ldp x0, x1, [sp+72]
003dabb8ldp x2, x3, [sp+88]
003dabbcstp x0, x1, [sp+264]
003dabc0stp x2, x3, [sp+280]
003dabc4ldp x29, x30, [sp-8]
003dabc8add sp, sp, 256
003dabccret x30
003dabd0
003dabd0loc_3dabd0:
003dabd0stp x0, x1, [sp+40]
003dabd4str x2, [sp+56]
003dabd8mov x3, x30
003dabdcbl runtime.morestack_noctxt.abi0
003dabe0ldp x0, x1, [sp+40]
003dabe4ldr x2, [sp+56]
003dabe8b 0x3daaa0
003dabecudf 0
003daaa0

003dabf0
003dabf0github.com/bishopfox/sliver/implant/sliver/cryptography.Encrypt: ; void github.com/bishopfox/sliver/implant/sliver/cryptography.Encrypt(uint8[32] key, struct []uint8 plaintext)
003dabf0ldr x16, [x28+16]
003dabf4sub x17, sp, 288
003dabf8subs xzr, x17, x16
003dabfcb.ls 0x3dae9c
003dac00sub x20, sp, 416
003dac04stp x29, x30, [x20-8]
003dac08add sp, x20, 0
003dac0csub x29, sp, 8
003dac10str x0, [sp+456]
003dac14str x1, [sp+464]
003dac18str x2, [sp+472]
003dac1cstr xzr, [sp+176]
003dac20stp xzr, xzr, [sp+184]
003dac24stp xzr, xzr, [sp+160]
003dac28add x3, sp, 424
003dac2cldrsb x27, [x3]
003dac30b 0x3dac34
003dac34
003dac34loc_3dac34:
003dac34str x3, [sp+368]
003dac38orr x3, xzr, 32
003dac3cstr x3, [sp+376]
003dac40str x3, [sp+384]
003dac44stp xzr, xzr, [sp+352]
003dac48stp xzr, xzr, [sp+336]
003dac4cldr x0, [sp+368]
003dac50ldr x1, [sp+376]
003dac54ldr x2, [sp+384]
003dac58bl golang.org/x/crypto/chacha20poly1305.New
003dac5cstr x0, [sp+352]
003dac60str x1, [sp+360]
003dac64str x2, [sp+336]
003dac68str x3, [sp+344]
003dac6cldr x3, [sp+352]
003dac70ldr x4, [sp+360]
003dac74str x3, [sp+312]
003dac78str x4, [sp+320]
003dac7cldr x3, [sp+336]
003dac80ldr x4, [sp+344]
003dac84str x3, [sp+296]
003dac88str x4, [sp+304]
003dac8cldr x3, [sp+312]
003dac90ldr x4, [sp+320]
003dac94str x3, [sp+280]
003dac98str x4, [sp+288]
003dac9cldr x3, [sp+304]
003daca0ldr x4, [sp+296]
003daca4str x4, [sp+240]
003daca8str x3, [sp+248]
003dacaccbnz x4, 0x3dacb4
003dacb0b 0x3dace4
003dacb4
003dacb4loc_3dacb4:
003dacb4str xzr, [sp+176]
003dacb8stp xzr, xzr, [sp+184]
003dacbcldr x3, [sp+240]
003dacc0ldr x4, [sp+248]
003dacc4str x3, [sp+160]
003dacc8str x4, [sp+168]
003dacccldr x0, [sp+176]
003dacd0ldr x1, [sp+184]
003dacd4ldr x2, [sp+192]
003dacd8ldp x29, x30, [sp-8]
003dacdcadd sp, sp, 416
003dace0ret x30
003dace4
003dace4loc_3dace4:
003dace4ldr x0, [sp+456]
003dace8ldr x1, [sp+464]
003dacecldr x2, [sp+472]
003dacf0bl github.com/bishopfox/sliver/implant/sliver/cryptography.gzipBuf
003dacf4str x0, [sp+256]
003dacf8str x1, [sp+264]
003dacfcstr x2, [sp+272]
003dad00bl bytes.NewBuffer
003dad04str x0, [sp+328]
003dad08bl bytes.(*Buffer).Bytes
003dad0cstr x0, [sp+456]
003dad10str x1, [sp+464]
003dad14str x2, [sp+472]
003dad18ldr x3, [sp+280]
003dad1cldrsb x27, [x3]
003dad20ldr x3, [x3+24]
003dad24ldr x0, [sp+288]
003dad28blr x3
003dad2cstr x0, [sp+144]
003dad30ldr x0, [sp+288]
003dad34ldr x3, [sp+280]
003dad38ldrsb x27, [x3]
003dad3cldr x3, [x3+24]
003dad40blr x3
003dad44str x0, [sp+136]
003dad48ldr x3, [sp+464]
003dad4cstr x3, [sp+128]
003dad50ldr x3, [sp+280]
003dad54ldrsb x27, [x3]
003dad58ldr x0, [sp+288]
003dad5cldr x3, [x3+40]
003dad60blr x3
003dad64str x0, [sp+120]
003dad68ldr x1, [sp+144]
003dad6cldr x3, [sp+136]
003dad70ldr x4, [sp+128]
003dad74add x3, x3, x4
003dad78add x2, x3, x0
003dad7cadrp x0, 0x21b000
003dad80add x0, x0, 3072
003dad84bl runtime.makeslice
003dad88ldr x3, [sp+144]
003dad8cldr x4, [sp+136]
003dad90ldr x5, [sp+128]
003dad94add x4, x4, x5
003dad98ldr x5, [sp+120]
003dad9cstr x0, [sp+200]
003dada0str x3, [sp+208]
003dada4add x3, x4, x5
003dada8str x3, [sp+216]
003dadacstp xzr, xzr, [sp+336]
003dadb0ldr x0, [sp+200]
003dadb4ldr x1, [sp+208]
003dadb8ldr x2, [sp+216]
003dadbcbl crypto/rand.Read
003dadc0str x0, [sp+120]
003dadc4str x1, [sp+336]
003dadc8str x2, [sp+344]
003dadccldr x3, [sp+120]
003dadd0str x3, [sp+152]
003dadd4str x1, [sp+392]
003dadd8str x2, [sp+400]
003daddcstr x1, [sp+224]
003dade0str x2, [sp+232]
003dade4cbnz x1, 0x3dadec
003dade8b 0x3dae1c
003dadec
003dadecloc_3dadec:
003dadecstr xzr, [sp+176]
003dadf0stp xzr, xzr, [sp+184]
003dadf4ldr x3, [sp+224]
003dadf8ldr x4, [sp+232]
003dadfcstr x3, [sp+160]
003dae00str x4, [sp+168]
003dae04ldr x0, [sp+176]
003dae08ldr x1, [sp+184]
003dae0cldr x2, [sp+192]
003dae10ldp x29, x30, [sp-8]
003dae14add sp, sp, 416
003dae18ret x30
003dae1c
003dae1cloc_3dae1c:
003dae1cldr x4, [sp+200]
003dae20ldr x7, [sp+456]
003dae24ldr x2, [sp+208]
003dae28ldr x5, [sp+208]
003dae2cldr x8, [sp+464]
003dae30ldr x3, [sp+216]
003dae34ldr x6, [sp+216]
003dae38ldr x9, [sp+472]
003dae3cldr x13, [sp+280]
003dae40ldrsb x27, [x13]
003dae44ldr x13, [x13+48]
003dae48ldr x1, [sp+200]
003dae4cldr x0, [sp+288]
003dae50mov x10, xzr
003dae54mov x11, xzr
003dae58mov x12, x11
003dae5cblr x13
003dae60str x0, [sp+368]
003dae64str x1, [sp+376]
003dae68str x2, [sp+384]
003dae6cstr x0, [sp+176]
003dae70str x1, [sp+184]
003dae74str x2, [sp+192]
003dae78stp xzr, xzr, [sp+160]
003dae7cldr x0, [sp+176]
003dae80ldr x1, [sp+184]
003dae84ldr x2, [sp+192]
003dae88mov x3, xzr
003dae8cmov x4, xzr
003dae90ldp x29, x30, [sp-8]
003dae94add sp, sp, 416
003dae98ret x30
003dae9c
003dae9cloc_3dae9c:
003dae9cstp x0, x1, [sp+40]
003daea0str x2, [sp+56]
003daea4mov x3, x30
003daea8bl runtime.morestack_noctxt.abi0
003daeacldp x0, x1, [sp+40]
003daeb0ldr x2, [sp+56]
003daeb4b 0x3dabf0
003daeb8udf 0
003daebcudf 0
003dabf0

003daec0
003daec0github.com/bishopfox/sliver/implant/sliver/cryptography.Decrypt: ; void github.com/bishopfox/sliver/implant/sliver/cryptography.Decrypt(uint8[32] key, struct []uint8 ciphertext)
003daec0ldr x16, [x28+16]
003daec4sub x17, sp, 288
003daec8subs xzr, x17, x16
003daeccb.ls 0x3db234
003daed0sub x20, sp, 416
003daed4stp x29, x30, [x20-8]
003daed8add sp, x20, 0
003daedcsub x29, sp, 8
003daee0str x0, [sp+456]
003daee4str x1, [sp+464]
003daee8str x2, [sp+472]
003daeecstr xzr, [sp+152]
003daef0stp xzr, xzr, [sp+160]
003daef4stp xzr, xzr, [sp+136]
003daef8add x3, sp, 424
003daefcldrsb x27, [x3]
003daf00b 0x3daf04
003daf04
003daf04loc_3daf04:
003daf04str x3, [sp+344]
003daf08orr x3, xzr, 32
003daf0cstr x3, [sp+352]
003daf10str x3, [sp+360]
003daf14stp xzr, xzr, [sp+328]
003daf18stp xzr, xzr, [sp+312]
003daf1cldr x0, [sp+344]
003daf20ldr x1, [sp+352]
003daf24ldr x2, [sp+360]
003daf28bl golang.org/x/crypto/chacha20poly1305.New
003daf2cstr x0, [sp+328]
003daf30str x1, [sp+336]
003daf34str x2, [sp+312]
003daf38str x3, [sp+320]
003daf3cldr x3, [sp+328]
003daf40ldr x4, [sp+336]
003daf44str x3, [sp+272]
003daf48str x4, [sp+280]
003daf4cldr x3, [sp+312]
003daf50ldr x4, [sp+320]
003daf54str x3, [sp+256]
003daf58str x4, [sp+264]
003daf5cldr x3, [sp+272]
003daf60ldr x4, [sp+280]
003daf64str x3, [sp+240]
003daf68str x4, [sp+248]
003daf6cldr x3, [sp+264]
003daf70ldr x4, [sp+256]
003daf74str x4, [sp+224]
003daf78str x3, [sp+232]
003daf7ccbnz x4, 0x3daf84
003daf80b 0x3dafb4
003daf84
003daf84loc_3daf84:
003daf84str xzr, [sp+152]
003daf88stp xzr, xzr, [sp+160]
003daf8cldr x3, [sp+224]
003daf90ldr x4, [sp+232]
003daf94str x3, [sp+136]
003daf98str x4, [sp+144]
003daf9cldr x0, [sp+152]
003dafa0ldr x1, [sp+160]
003dafa4ldr x2, [sp+168]
003dafa8ldp x29, x30, [sp-8]
003dafacadd sp, sp, 416
003dafb0ret x30
003dafb4
003dafb4loc_3dafb4:
003dafb4ldr x1, [sp+464]
003dafb8str x1, [sp+128]
003dafbcldr x0, [sp+248]
003dafc0ldr x1, [sp+240]
003dafc4ldrsb x27, [x1]
003dafc8ldr x1, [x1+24]
003dafccblr x1
003dafd0str x0, [sp+120]
003dafd4ldr x1, [sp+128]
003dafd8subs xzr, x0, x1
003dafdcb.gt 0x3dafe4
003dafe0b 0x3db02c
003dafe4
003dafe4loc_3dafe4:
003dafe4adrp x0, 0x2dc000
003dafe8add x0, x0, 3447
003dafecmovz x1, 20
003daff0bl errors.New
003daff4str x0, [sp+312]
003daff8str x1, [sp+320]
003daffcstr xzr, [sp+152]
003db000stp xzr, xzr, [sp+160]
003db004ldr x3, [sp+312]
003db008ldr x4, [sp+320]
003db00cstr x3, [sp+136]
003db010str x4, [sp+144]
003db014ldr x0, [sp+152]
003db018ldr x1, [sp+160]
003db01cldr x2, [sp+168]
003db020ldp x29, x30, [sp-8]
003db024add sp, sp, 416
003db028ret x30
003db02c
003db02cloc_3db02c:
003db02cldr x1, [sp+240]
003db030ldrsb x27, [x1]
003db034ldr x1, [x1+24]
003db038ldr x0, [sp+248]
003db03cblr x1
003db040str x0, [sp+120]
003db044ldr x2, [sp+472]
003db048ldr x1, [sp+456]
003db04csubs xzr, x0, x2
003db050b.ls 0x3db058
003db054b 0x3db228
003db058
003db058loc_3db058:
003db058b 0x3db05c
003db05c
003db05cloc_3db05c:
003db05cstr x1, [sp+344]
003db060str x0, [sp+352]
003db064str x2, [sp+360]
003db068ldr x1, [sp+240]
003db06cldrsb x27, [x1]
003db070ldr x0, [sp+248]
003db074ldr x1, [x1+24]
003db078blr x1
003db07cstr x0, [sp+128]
003db080ldr x1, [sp+464]
003db084ldr x2, [sp+456]
003db088ldr x3, [sp+472]
003db08cb 0x3db090
003db090
003db090loc_3db090:
003db090subs xzr, x0, x1
003db094b.ls 0x3db09c
003db098b 0x3db224
003db09c
003db09cloc_3db09c:
003db09csub x13, x3, x0
003db0a0sub x14, x1, x0
003db0a4sub x15, xzr, x13
003db0a8and x15, x0, x15, asr #63
003db0acadd x15, x2, x15
003db0b0str x15, [sp+288]
003db0b4str x14, [sp+296]
003db0b8str x13, [sp+304]
003db0bcldr x13, [sp+344]
003db0c0ldr x14, [sp+352]
003db0c4ldr x15, [sp+360]
003db0c8str x13, [sp+200]
003db0ccstr x14, [sp+208]
003db0d0str x15, [sp+216]
003db0d4ldr x13, [sp+288]
003db0d8ldr x14, [sp+296]
003db0dcldr x15, [sp+304]
003db0e0str x13, [sp+456]
003db0e4str x14, [sp+464]
003db0e8str x15, [sp+472]
003db0ecstr xzr, [sp+288]
003db0f0stp xzr, xzr, [sp+296]
003db0f4stp xzr, xzr, [sp+312]
003db0f8ldr x7, [sp+456]
003db0fcldr x5, [sp+208]
003db100ldr x8, [sp+464]
003db104ldr x6, [sp+216]
003db108ldr x9, [sp+472]
003db10cldr x13, [sp+240]
003db110ldrsb x27, [x13]
003db114ldr x13, [x13+32]
003db118ldr x4, [sp+200]
003db11cldr x0, [sp+248]
003db120mov x1, xzr
003db124mov x2, xzr
003db128mov x3, x2
003db12cmov x10, x1
003db130mov x11, x2
003db134mov x12, x2
003db138blr x13
003db13cstr x0, [sp+288]
003db140str x1, [sp+296]
003db144str x2, [sp+304]
003db148str x3, [sp+312]
003db14cstr x4, [sp+320]
003db150ldr x13, [sp+288]
003db154ldr x14, [sp+296]
003db158ldr x15, [sp+304]
003db15cstr x13, [sp+384]
003db160str x14, [sp+392]
003db164str x15, [sp+400]
003db168ldr x13, [sp+312]
003db16cldr x14, [sp+320]
003db170str x13, [sp+368]
003db174str x14, [sp+376]
003db178ldr x13, [sp+384]
003db17cldr x14, [sp+392]
003db180ldr x15, [sp+400]
003db184str x13, [sp+176]
003db188str x14, [sp+184]
003db18cstr x15, [sp+192]
003db190ldr x13, [sp+376]
003db194ldr x14, [sp+368]
003db198str x14, [sp+224]
003db19cstr x13, [sp+232]
003db1a0cbnz x14, 0x3db1a8
003db1a4b 0x3db1d8
003db1a8
003db1a8loc_3db1a8:
003db1a8str xzr, [sp+152]
003db1acstp xzr, xzr, [sp+160]
003db1b0ldr x3, [sp+224]
003db1b4ldr x4, [sp+232]
003db1b8str x3, [sp+136]
003db1bcstr x4, [sp+144]
003db1c0ldr x0, [sp+152]
003db1c4ldr x1, [sp+160]
003db1c8ldr x2, [sp+168]
003db1ccldp x29, x30, [sp-8]
003db1d0add sp, sp, 416
003db1d4ret x30
003db1d8
003db1d8loc_3db1d8:
003db1d8ldr x0, [sp+176]
003db1dcldr x1, [sp+184]
003db1e0ldr x2, [sp+192]
003db1e4bl github.com/bishopfox/sliver/implant/sliver/cryptography.gunzipBuf
003db1e8str x0, [sp+288]
003db1ecstr x1, [sp+296]
003db1f0str x2, [sp+304]
003db1f4str x0, [sp+152]
003db1f8str x1, [sp+160]
003db1fcstr x2, [sp+168]
003db200stp xzr, xzr, [sp+136]
003db204ldr x0, [sp+152]
003db208ldr x1, [sp+160]
003db20cldr x2, [sp+168]
003db210mov x3, xzr
003db214mov x4, xzr
003db218ldp x29, x30, [sp-8]
003db21cadd sp, sp, 416
003db220ret x30
003db224
003db224loc_3db224:
003db224bl runtime.panicSliceB
003db228
003db228loc_3db228:
003db228mov x1, x0
003db22cbl runtime.panicSliceAcap
003db230hint
003db234
003db234loc_3db234:
003db234stp x0, x1, [sp+40]
003db238str x2, [sp+56]
003db23cmov x3, x30
003db240bl runtime.morestack_noctxt.abi0
003db244ldp x0, x1, [sp+40]
003db248ldr x2, [sp+56]
003db24cb 0x3daec0
003daec0

003db250
003db250github.com/bishopfox/sliver/implant/sliver/cryptography.NewCipherContext: ; void github.com/bishopfox/sliver/implant/sliver/cryptography.NewCipherContext(uint8[32] key)
003db250ldr x16, [x28+16]
003db254subs xzr, sp, x16
003db258b.ls 0x3db324
003db25cstr x30, [sp-80]!
003db260stur x29, [sp-8]
003db264sub x29, sp, 8
003db268str xzr, [sp+40]
003db26cadrp x0, 0x267000
003db270add x0, x0, 3072
003db274bl runtime.newobject
003db278str x0, [sp+64]
003db27cldp x1, x2, [sp+88]
003db280ldp x3, x4, [sp+104]
003db284stp x1, x2, [x0]
003db288stp x3, x4, [x0+16]
003db28cadrp x0, 0x265000
003db290add x0, x0, 2144
003db294bl runtime.newobject
003db298str x0, [sp+56]
003db29cadrp x27, 0x670000
003db2a0ldr w1, [x27+3056]
003db2a4cbz w1, 0x3db2ac
003db2a8b 0x3db2b0
003db2ac
003db2acloc_3db2ac:
003db2acb 0x3db2cc
003db2b0
003db2b0loc_3db2b0:
003db2b0str x0, [sp+48]
003db2b4mov x1, x0
003db2b8adrp x0, 0x265000
003db2bcadd x0, x0, 2144
003db2c0bl runtime.wbZero
003db2c4ldr x0, [sp+48]
003db2c8b 0x3db2cc
003db2cc
003db2ccloc_3db2cc:
003db2ccstp xzr, xzr, [x0]
003db2d0stp xzr, xzr, [x0+16]
003db2d4stp xzr, xzr, [x0+32]
003db2d8ldr x1, [sp+64]
003db2dcldrsb x27, [x1]
003db2e0ldr x2, [sp+56]
003db2e4adrp x27, 0x670000
003db2e8ldr w3, [x27+3056]
003db2eccbz w3, 0x3db2f4
003db2f0b 0x3db2f8
003db2f4
003db2f4loc_3db2f4:
003db2f4b 0x3db30c
003db2f8
003db2f8loc_3db2f8:
003db2f8bl runtime.gcWriteBarrier2
003db2fcstr x2, [x25]
003db300ldr x3, [x1+32]
003db304str x3, [x25+8]
003db308b 0x3db30c
003db30c
003db30cloc_3db30c:
003db30cstr x2, [x1+32]
003db310ldr x0, [sp+64]
003db314str x0, [sp+40]
003db318ldur x29, [sp-8]
003db31cldr x30, [sp], 80
003db320ret x30
003db324
003db324loc_3db324:
003db324mov x3, x30
003db328bl runtime.morestack_noctxt.abi0
003db32cb 0x3db250
003db250

003db330
003db330github.com/bishopfox/sliver/implant/sliver/cryptography.(*CipherContext).DecryptWithoutSignatureCheck: ; void github.com/bishopfox/sliver/implant/sliver/cryptography.(*CipherContext).DecryptWithoutSignatureCheck(github.com/bishopfox/sliver/implant/sliver/cryptography.CipherContext * c, struct []uint8 msg)
003db330ldr x16, [x28+16]
003db334sub x17, sp, 272
003db338subs xzr, x17, x16
003db33cb.ls 0x3db5c4
003db340sub x20, sp, 400
003db344stp x29, x30, [x20-8]
003db348add sp, x20, 0
003db34csub x29, sp, 8
003db350str x0, [sp+408]
003db354str x1, [sp+416]
003db358str x2, [sp+424]
003db35cstr x3, [sp+432]
003db360str xzr, [sp+168]
003db364stp xzr, xzr, [sp+176]
003db368stp xzr, xzr, [sp+152]
003db36cstr xzr, [sp+352]
003db370stp xzr, xzr, [sp+360]
003db374stp xzr, xzr, [sp+336]
003db378ldr x3, [sp+408]
003db37cldrsb x27, [x3]
003db380ldp x4, x5, [x3]
003db384ldp x3, x6, [x3+16]
003db388add x27, sp, 110
003db38cstp x4, x5, [x27]
003db390add x27, sp, 126
003db394stp x3, x6, [x27]
003db398add x27, sp, 110
003db39cldp x3, x4, [x27]
003db3a0add x27, sp, 126
003db3a4ldp x5, x6, [x27]
003db3a8ldr x0, [sp+416]
003db3acldr x1, [sp+424]
003db3b0ldr x2, [sp+432]
003db3b4stp x3, x4, [sp+8]
003db3b8stp x5, x6, [sp+24]
003db3bcbl github.com/bishopfox/sliver/implant/sliver/cryptography.Decrypt
003db3c0str x0, [sp+352]
003db3c4str x1, [sp+360]
003db3c8str x2, [sp+368]
003db3ccstr x3, [sp+336]
003db3d0str x4, [sp+344]
003db3d4ldr x3, [sp+352]
003db3d8ldr x4, [sp+360]
003db3dcldr x5, [sp+368]
003db3e0str x3, [sp+264]
003db3e4str x4, [sp+272]
003db3e8str x5, [sp+280]
003db3ecldr x3, [sp+336]
003db3f0ldr x4, [sp+344]
003db3f4str x3, [sp+248]
003db3f8str x4, [sp+256]
003db3fcldr x3, [sp+264]
003db400ldr x4, [sp+272]
003db404ldr x5, [sp+280]
003db408str x3, [sp+192]
003db40cstr x4, [sp+200]
003db410str x5, [sp+208]
003db414ldr x3, [sp+256]
003db418ldr x4, [sp+248]
003db41cstr x4, [sp+216]
003db420str x3, [sp+224]
003db424cbnz x4, 0x3db42c
003db428b 0x3db45c
003db42c
003db42cloc_3db42c:
003db42cstr xzr, [sp+168]
003db430stp xzr, xzr, [sp+176]
003db434ldr x3, [sp+216]
003db438ldr x4, [sp+224]
003db43cstr x3, [sp+152]
003db440str x4, [sp+160]
003db444ldr x0, [sp+168]
003db448ldr x1, [sp+176]
003db44cldr x2, [sp+184]
003db450ldp x29, x30, [sp-8]
003db454add sp, sp, 400
003db458ret x30
003db45c
003db45cloc_3db45c:
003db45cldr x5, [sp+424]
003db460str x5, [sp+144]
003db464cbnz x5, 0x3db46c
003db468b 0x3db584
003db46c
003db46cloc_3db46c:
003db46cldr x0, [sp+416]
003db470ldr x1, [sp+424]
003db474ldr x2, [sp+432]
003db478bl crypto/sha256.Sum256
003db47cldp x3, x4, [sp+8]
003db480ldp x5, x6, [sp+24]
003db484add x27, sp, 78
003db488stp x3, x4, [x27]
003db48cadd x27, sp, 94
003db490stp x5, x6, [x27]
003db494add x1, sp, 78
003db498ldrsb x27, [x1]
003db49cb 0x3db4a0
003db4a0
003db4a0loc_3db4a0:
003db4a0str x1, [sp+352]
003db4a4orr x3, xzr, 32
003db4a8str x3, [sp+360]
003db4acstr x3, [sp+368]
003db4b0adrp x27, 0x646000
003db4b4ldr x0, [x27+24]
003db4b8mov x2, x3
003db4bcbl encoding/base64.(*Encoding).EncodeToString
003db4c0str x0, [sp+232]
003db4c4str x1, [sp+240]
003db4c8stp xzr, xzr, [sp+320]
003db4ccldr x0, [sp+232]
003db4d0ldr x1, [sp+240]
003db4d4bl runtime.convTstring
003db4d8str x0, [sp+312]
003db4dcldr x4, [sp+408]
003db4e0ldrsb x27, [x4]
003db4e4ldr x4, [x4+32]
003db4e8str x4, [sp+304]
003db4ecadrp x3, 0x21a000
003db4f0add x3, x3, 3968
003db4f4str x3, [sp+288]
003db4f8adrp x4, 0x347000
003db4fcadd x4, x4, 648
003db500str x4, [sp+296]
003db504ldr x0, [sp+304]
003db508ldr x2, [sp+312]
003db50cadrp x1, 0x21a000
003db510add x1, x1, 2944
003db514bl sync.(*Map).LoadOrStore
003db518str x0, [sp+320]
003db51cstr x1, [sp+328]
003db520strb w2, [sp+142]
003db524ldr x4, [sp+328]
003db528ldr x5, [sp+320]
003db52cstr x5, [sp+376]
003db530str x4, [sp+384]
003db534ldrb w4, [sp+142]
003db538strb w4, [sp+143]
003db53cstrb w4, [sp+77]
003db540tbnz w4, 0, 0x3db548
003db544b 0x3db580
003db548
003db548loc_3db548:
003db548str xzr, [sp+168]
003db54cstp xzr, xzr, [sp+176]
003db550adrp x27, 0x646000
003db554ldr x3, [x27+2720]
003db558adrp x27, 0x646000
003db55cldr x4, [x27+2728]
003db560str x3, [sp+152]
003db564str x4, [sp+160]
003db568ldr x0, [sp+168]
003db56cldr x1, [sp+176]
003db570ldr x2, [sp+184]
003db574ldp x29, x30, [sp-8]
003db578add sp, sp, 400
003db57cret x30
003db580
003db580loc_3db580:
003db580b 0x3db588
003db584
003db584loc_3db584:
003db584b 0x3db588
003db588
003db588loc_3db588:
003db588ldr x5, [sp+192]
003db58cldr x6, [sp+200]
003db590ldr x7, [sp+208]
003db594str x5, [sp+168]
003db598str x6, [sp+176]
003db59cstr x7, [sp+184]
003db5a0stp xzr, xzr, [sp+152]
003db5a4ldr x0, [sp+168]
003db5a8ldr x1, [sp+176]
003db5acldr x2, [sp+184]
003db5b0mov x3, xzr
003db5b4mov x4, xzr
003db5b8ldp x29, x30, [sp-8]
003db5bcadd sp, sp, 400
003db5c0ret x30
003db5c4
003db5c4loc_3db5c4:
003db5c4stp x0, x1, [sp+8]
003db5c8stp x2, x3, [sp+24]
003db5ccmov x3, x30
003db5d0bl runtime.morestack_noctxt.abi0
003db5d4ldp x0, x1, [sp+8]
003db5d8ldp x2, x3, [sp+24]
003db5dcb 0x3db330
003db330

003db5e0
003db5e0github.com/bishopfox/sliver/implant/sliver/cryptography.(*CipherContext).Encrypt: ; void github.com/bishopfox/sliver/implant/sliver/cryptography.(*CipherContext).Encrypt(github.com/bishopfox/sliver/implant/sliver/cryptography.CipherContext * c, struct []uint8 plaintext)
003db5e0ldr x16, [x28+16]
003db5e4sub x17, sp, 224
003db5e8subs xzr, x17, x16
003db5ecb.ls 0x3db7e8
003db5f0sub x20, sp, 352
003db5f4stp x29, x30, [x20-8]
003db5f8add sp, x20, 0
003db5fcsub x29, sp, 8
003db600str x0, [sp+360]
003db604str x1, [sp+368]
003db608str x2, [sp+376]
003db60cstr x3, [sp+384]
003db610str xzr, [sp+152]
003db614stp xzr, xzr, [sp+160]
003db618stp xzr, xzr, [sp+136]
003db61cstr xzr, [sp+320]
003db620stp xzr, xzr, [sp+328]
003db624stp xzr, xzr, [sp+304]
003db628ldr x3, [sp+360]
003db62cldrsb x27, [x3]
003db630ldp x4, x5, [x3]
003db634ldp x3, x6, [x3+16]
003db638stp x4, x5, [sp+96]
003db63cstp x3, x6, [sp+112]
003db640ldp x3, x4, [sp+96]
003db644ldp x5, x6, [sp+112]
003db648ldr x0, [sp+368]
003db64cldr x1, [sp+376]
003db650ldr x2, [sp+384]
003db654stp x3, x4, [sp+8]
003db658stp x5, x6, [sp+24]
003db65cbl github.com/bishopfox/sliver/implant/sliver/cryptography.Encrypt
003db660str x0, [sp+320]
003db664str x1, [sp+328]
003db668str x2, [sp+336]
003db66cstr x3, [sp+304]
003db670str x4, [sp+312]
003db674ldr x3, [sp+320]
003db678ldr x4, [sp+328]
003db67cldr x5, [sp+336]
003db680str x3, [sp+248]
003db684str x4, [sp+256]
003db688str x5, [sp+264]
003db68cldr x3, [sp+304]
003db690ldr x4, [sp+312]
003db694str x3, [sp+232]
003db698str x4, [sp+240]
003db69cldr x3, [sp+248]
003db6a0ldr x4, [sp+256]
003db6a4ldr x5, [sp+264]
003db6a8str x3, [sp+192]
003db6acstr x4, [sp+200]
003db6b0str x5, [sp+208]
003db6b4ldr x3, [sp+240]
003db6b8ldr x4, [sp+232]
003db6bcstr x4, [sp+176]
003db6c0str x3, [sp+184]
003db6c4cbnz x4, 0x3db6cc
003db6c8b 0x3db6fc
003db6cc
003db6ccloc_3db6cc:
003db6ccstr xzr, [sp+152]
003db6d0stp xzr, xzr, [sp+160]
003db6d4ldr x3, [sp+176]
003db6d8ldr x4, [sp+184]
003db6dcstr x3, [sp+136]
003db6e0str x4, [sp+144]
003db6e4ldr x0, [sp+152]
003db6e8ldr x1, [sp+160]
003db6ecldr x2, [sp+168]
003db6f0ldp x29, x30, [sp-8]
003db6f4add sp, sp, 352
003db6f8ret x30
003db6fc
003db6fcloc_3db6fc:
003db6fcldr x5, [sp+200]
003db700str x5, [sp+128]
003db704cbnz x5, 0x3db70c
003db708b 0x3db7a8
003db70c
003db70cloc_3db70c:
003db70cldr x0, [sp+192]
003db710ldr x1, [sp+200]
003db714ldr x2, [sp+208]
003db718bl crypto/sha256.Sum256
003db71cldp x3, x4, [sp+8]
003db720ldp x5, x6, [sp+24]
003db724stp x3, x4, [sp+64]
003db728stp x5, x6, [sp+80]
003db72cadd x1, sp, 64
003db730ldrsb x27, [x1]
003db734b 0x3db738
003db738
003db738loc_3db738:
003db738str x1, [sp+320]
003db73corr x3, xzr, 32
003db740str x3, [sp+328]
003db744str x3, [sp+336]
003db748adrp x27, 0x646000
003db74cldr x0, [x27+24]
003db750mov x2, x3
003db754bl encoding/base64.(*Encoding).EncodeToString
003db758str x0, [sp+216]
003db75cstr x1, [sp+224]
003db760bl runtime.convTstring
003db764str x0, [sp+296]
003db768ldr x4, [sp+360]
003db76cldrsb x27, [x4]
003db770ldr x4, [x4+32]
003db774str x4, [sp+288]
003db778adrp x3, 0x21a000
003db77cadd x3, x3, 3968
003db780str x3, [sp+272]
003db784adrp x4, 0x347000
003db788add x4, x4, 648
003db78cstr x4, [sp+280]
003db790ldr x0, [sp+288]
003db794ldr x2, [sp+296]
003db798adrp x1, 0x21a000
003db79cadd x1, x1, 2944
003db7a0bl sync.(*Map).Store
003db7a4b 0x3db7ac
003db7a8
003db7a8loc_3db7a8:
003db7a8b 0x3db7ac
003db7ac
003db7acloc_3db7ac:
003db7acldr x5, [sp+192]
003db7b0ldr x6, [sp+200]
003db7b4ldr x7, [sp+208]
003db7b8str x5, [sp+152]
003db7bcstr x6, [sp+160]
003db7c0str x7, [sp+168]
003db7c4stp xzr, xzr, [sp+136]
003db7c8ldr x0, [sp+152]
003db7ccldr x1, [sp+160]
003db7d0ldr x2, [sp+168]
003db7d4mov x3, xzr
003db7d8mov x4, xzr
003db7dcldp x29, x30, [sp-8]
003db7e0add sp, sp, 352
003db7e4ret x30
003db7e8
003db7e8loc_3db7e8:
003db7e8stp x0, x1, [sp+8]
003db7ecstp x2, x3, [sp+24]
003db7f0mov x3, x30
003db7f4bl runtime.morestack_noctxt.abi0
003db7f8ldp x0, x1, [sp+8]
003db7fcldp x2, x3, [sp+24]
003db800b 0x3db5e0
003db804udf 0
003db808udf 0
003db80cudf 0
003db5e0

003db810
003db810github.com/bishopfox/sliver/implant/sliver/cryptography.RootOnlyVerifyCertificate: ; void github.com/bishopfox/sliver/implant/sliver/cryptography.RootOnlyVerifyCertificate(struct string caCertPEM, struct [][]uint8 rawCerts, struct [][]*crypto/x509.Certificate p2)
003db810ldr x16, [x28+16]
003db814sub x17, sp, 512
003db818subs xzr, x17, x16
003db81cb.ls 0x3dbaf0
003db820sub x20, sp, 640
003db824stp x29, x30, [x20-8]
003db828add sp, x20, 0
003db82csub x29, sp, 8
003db830str x0, [sp+648]
003db834str x1, [sp+656]
003db838str x2, [sp+664]
003db83cstr x3, [sp+672]
003db840str x4, [sp+680]
003db844str x5, [sp+688]
003db848str x6, [sp+696]
003db84cstr x7, [sp+704]
003db850stp xzr, xzr, [sp+240]
003db854bl crypto/x509.NewCertPool
003db858str x0, [sp+256]
003db85cldr x1, [sp+648]
003db860ldr x2, [sp+656]
003db864add x0, sp, 208
003db868bl runtime.stringtoslicebyte
003db86cstr x0, [sp+568]
003db870str x1, [sp+576]
003db874str x2, [sp+584]
003db878ldr x3, [sp+256]
003db87cmov x4, x0
003db880mov x0, x3
003db884mov x5, x1
003db888mov x1, x4
003db88cmov x6, x2
003db890mov x2, x5
003db894mov x3, x6
003db898bl crypto/x509.(*CertPool).AppendCertsFromPEM
003db89cstrb w0, [sp+143]
003db8a0tbnz w0, 0, 0x3db8a8
003db8a4b 0x3db8ac
003db8a8
003db8a8loc_3db8a8:
003db8a8b 0x3db8d4
003db8ac
003db8acloc_3db8ac:
003db8acadrp x0, 0x2e3000
003db8b0add x0, x0, 2384
003db8b4orr x1, xzr, 32
003db8b8mov x2, xzr
003db8bcmov x3, xzr
003db8c0mov x4, x3
003db8c4bl log.Printf
003db8c8orr x0, xzr, 3
003db8ccbl os.Exit
003db8d0b 0x3db8d4
003db8d4
003db8d4loc_3db8d4:
003db8d4str xzr, [sp+560]
003db8d8add x27, sp, 544
003db8dcstp xzr, xzr, [x27]
003db8e0ldr x3, [sp+664]
003db8e4ldr x1, [sp+672]
003db8e8subs xzr, x1, 0
003db8ecb.hi 0x3db8f4
003db8f0b 0x3dbae4
003db8f4
003db8f4loc_3db8f4:
003db8f4ldr x0, [x3]
003db8f8ldr x1, [x3+8]
003db8fcldr x2, [x3+16]
003db900str x0, [sp+480]
003db904str x1, [sp+488]
003db908str x2, [sp+496]
003db90cbl crypto/x509.ParseCertificate
003db910str x0, [sp+560]
003db914str x1, [sp+544]
003db918str x2, [sp+552]
003db91cldr x3, [sp+560]
003db920str x3, [sp+440]
003db924ldr x3, [sp+544]
003db928ldr x4, [sp+552]
003db92cstr x3, [sp+424]
003db930str x4, [sp+432]
003db934ldr x3, [sp+440]
003db938str x3, [sp+416]
003db93cldr x0, [sp+432]
003db940ldr x3, [sp+424]
003db944str x3, [sp+400]
003db948str x0, [sp+408]
003db94ccbnz x3, 0x3db954
003db950b 0x3db9b8
003db954
003db954loc_3db954:
003db954ldrsb x27, [x3]
003db958ldr x1, [x3+24]
003db95cblr x1
003db960str x0, [sp+528]
003db964str x1, [sp+536]
003db968movz x2, 29
003db96cmov x3, x0
003db970mov x4, x1
003db974add x0, sp, 176
003db978adrp x1, 0x2e1000
003db97cadd x1, x1, 2309
003db980bl runtime.concatstring2
003db984str x0, [sp+464]
003db988str x1, [sp+472]
003db98cmov x2, xzr
003db990mov x3, xzr
003db994mov x4, x3
003db998bl log.Printf
003db99cldr x0, [sp+400]
003db9a0ldr x1, [sp+408]
003db9a4str x0, [sp+240]
003db9a8str x1, [sp+248]
003db9acldp x29, x30, [sp-8]
003db9b0add sp, sp, 640
003db9b4ret x30
003db9b8
003db9b8loc_3db9b8:
003db9b8add x20, sp, 264
003db9bcadr x27, 16
003db9c0stp x29, x27, [sp-24]
003db9c4sub x29, sp, 24
003db9c8bl fn_87cf4
003db9ccsub x29, sp, 8
003db9d0str xzr, [sp+376]
003db9d4ldr x1, [sp+256]
003db9d8str x1, [sp+288]
003db9dcstr xzr, [sp+504]
003db9e0add x27, sp, 512
003db9e4stp xzr, xzr, [x27]
003db9e8add x27, sp, 544
003db9ecstp xzr, xzr, [x27]
003db9f0ldr x0, [sp+416]
003db9f4add x21, sp, 8
003db9f8add x20, sp, 264
003db9fcadr x27, 16
003dba00stp x29, x27, [sp-24]
003dba04sub x29, sp, 24
003dba08bl fn_87ee8
003dba0csub x29, sp, 8
003dba10ldr x1, [sp+376]
003dba14str x1, [sp+120]
003dba18bl crypto/x509.(*Certificate).Verify
003dba1cstr x0, [sp+504]
003dba20str x1, [sp+512]
003dba24str x2, [sp+520]
003dba28str x3, [sp+544]
003dba2cstr x4, [sp+552]
003dba30ldr x1, [sp+504]
003dba34ldr x2, [sp+512]
003dba38ldr x3, [sp+520]
003dba3cstr x1, [sp+608]
003dba40str x2, [sp+616]
003dba44str x3, [sp+624]
003dba48ldr x0, [sp+552]
003dba4cldr x1, [sp+544]
003dba50str x1, [sp+592]
003dba54str x0, [sp+600]
003dba58str x1, [sp+384]
003dba5cstr x0, [sp+392]
003dba60cbnz x1, 0x3dba68
003dba64b 0x3dbacc
003dba68
003dba68loc_3dba68:
003dba68ldrsb x27, [x1]
003dba6cldr x1, [x1+24]
003dba70blr x1
003dba74str x0, [sp+528]
003dba78str x1, [sp+536]
003dba7corr x2, xzr, 30
003dba80mov x3, x0
003dba84mov x4, x1
003dba88add x0, sp, 144
003dba8cadrp x1, 0x2e2000
003dba90add x1, x1, 1162
003dba94bl runtime.concatstring2
003dba98str x0, [sp+448]
003dba9cstr x1, [sp+456]
003dbaa0mov x2, xzr
003dbaa4mov x3, xzr
003dbaa8mov x4, x3
003dbaacbl log.Printf
003dbab0ldr x0, [sp+384]
003dbab4ldr x1, [sp+392]
003dbab8str x0, [sp+240]
003dbabcstr x1, [sp+248]
003dbac0ldp x29, x30, [sp-8]
003dbac4add sp, sp, 640
003dbac8ret x30
003dbacc
003dbaccloc_3dbacc:
003dbaccstp xzr, xzr, [sp+240]
003dbad0mov x0, xzr
003dbad4mov x1, xzr
003dbad8ldp x29, x30, [sp-8]
003dbadcadd sp, sp, 640
003dbae0ret x30
003dbae4
003dbae4loc_3dbae4:
003dbae4mov x0, xzr
003dbae8bl runtime.panicIndex
003dbaechint
003dbaf0
003dbaf0loc_3dbaf0:
003dbaf0stp x0, x1, [sp+8]
003dbaf4stp x2, x3, [sp+24]
003dbaf8stp x4, x5, [sp+40]
003dbafcstp x6, x7, [sp+56]
003dbb00mov x3, x30
003dbb04bl runtime.morestack_noctxt.abi0
003dbb08ldp x0, x1, [sp+8]
003dbb0cldp x2, x3, [sp+24]
003dbb10ldp x4, x5, [sp+40]
003dbb14ldp x6, x7, [sp+56]
003dbb18b 0x3db810
003dbb1cudf 0
003db810

003dbb20
003dbb20github.com/bishopfox/sliver/implant/sliver/cryptography.gzipBuf: ; void github.com/bishopfox/sliver/implant/sliver/cryptography.gzipBuf(struct []uint8 data)
003dbb20ldr x16, [x28+16]
003dbb24sub x17, sp, 32
003dbb28subs xzr, x17, x16
003dbb2cb.ls 0x3dbc58
003dbb30str x30, [sp-160]!
003dbb34stur x29, [sp-8]
003dbb38sub x29, sp, 8
003dbb3cstr x0, [sp+168]
003dbb40str x1, [sp+176]
003dbb44str x2, [sp+184]
003dbb48stp xzr, xzr, [sp+48]
003dbb4cstr xzr, [sp+64]
003dbb50adrp x0, 0x277000
003dbb54add x0, x0, 2048
003dbb58bl runtime.newobject
003dbb5cstr x0, [sp+144]
003dbb60adrp x27, 0x670000
003dbb64ldr w1, [x27+3056]
003dbb68cbz w1, 0x3dbb70
003dbb6cb 0x3dbb74
003dbb70
003dbb70loc_3dbb70:
003dbb70b 0x3dbb90
003dbb74
003dbb74loc_3dbb74:
003dbb74str x0, [sp+80]
003dbb78mov x1, x0
003dbb7cadrp x0, 0x277000
003dbb80add x0, x0, 2048
003dbb84bl runtime.wbZero
003dbb88ldr x0, [sp+80]
003dbb8cb 0x3dbb90
003dbb90
003dbb90loc_3dbb90:
003dbb90stp xzr, xzr, [x0]
003dbb94stp xzr, xzr, [x0+16]
003dbb98str xzr, [x0+32]
003dbb9cadrp x27, 0x632000
003dbba0ldr x0, [x27+208]
003dbba4bl sync.(*Pool).Get
003dbba8str x0, [sp+128]
003dbbacstr x1, [sp+136]
003dbbb0adrp x2, 0x286000
003dbbb4add x2, x2, 1440
003dbbb8subs xzr, x0, x2
003dbbbcb.eq 0x3dbbc4
003dbbc0b 0x3dbc44
003dbbc4
003dbbc4loc_3dbbc4:
003dbbc4str x1, [sp+72]
003dbbc8ldr x2, [sp+144]
003dbbccstr x2, [sp+120]
003dbbd0ldr x0, [sp+72]
003dbbd4adrp x1, 0x338000
003dbbd8add x1, x1, 2976
003dbbdcbl compress/gzip.(*Writer).Reset
003dbbe0ldr x1, [sp+168]
003dbbe4ldr x2, [sp+176]
003dbbe8ldr x3, [sp+184]
003dbbecldr x0, [sp+72]
003dbbf0bl compress/gzip.(*Writer).Write
003dbbf4ldr x0, [sp+72]
003dbbf8bl compress/gzip.(*Writer).Close
003dbbfcldr x2, [sp+72]
003dbc00str x2, [sp+112]
003dbc04adrp x27, 0x632000
003dbc08ldr x0, [x27+208]
003dbc0cadrp x1, 0x286000
003dbc10add x1, x1, 1440
003dbc14bl sync.(*Pool).Put
003dbc18ldr x0, [sp+144]
003dbc1cbl bytes.(*Buffer).Bytes
003dbc20str x0, [sp+88]
003dbc24str x1, [sp+96]
003dbc28str x2, [sp+104]
003dbc2cstr x0, [sp+48]
003dbc30str x1, [sp+56]
003dbc34str x2, [sp+64]
003dbc38ldur x29, [sp-8]
003dbc3cldr x30, [sp], 160
003dbc40ret x30
003dbc44
003dbc44loc_3dbc44:
003dbc44mov x1, x2
003dbc48adrp x2, 0x22f000
003dbc4cadd x2, x2, 3520
003dbc50bl runtime.panicdottypeE
003dbc54hint
003dbc58
003dbc58loc_3dbc58:
003dbc58stp x0, x1, [sp+8]
003dbc5cstr x2, [sp+24]
003dbc60mov x3, x30
003dbc64bl runtime.morestack_noctxt.abi0
003dbc68ldp x0, x1, [sp+8]
003dbc6cldr x2, [sp+24]
003dbc70b 0x3dbb20
003dbc74udf 0
003dbc78udf 0
003dbc7cudf 0
003dbb20

003dbc80
003dbc80github.com/bishopfox/sliver/implant/sliver/cryptography.gunzipBuf: ; void github.com/bishopfox/sliver/implant/sliver/cryptography.gunzipBuf(struct []uint8 data)
003dbc80ldr x16, [x28+16]
003dbc84sub x17, sp, 80
003dbc88subs xzr, x17, x16
003dbc8cb.ls 0x3dbd5c
003dbc90str x30, [sp-208]!
003dbc94stur x29, [sp-8]
003dbc98sub x29, sp, 8
003dbc9cstr x0, [sp+216]
003dbca0str x1, [sp+224]
003dbca4str x2, [sp+232]
003dbca8str xzr, [sp+40]
003dbcacstp xzr, xzr, [sp+48]
003dbcb0ldr x0, [sp+216]
003dbcb4ldr x1, [sp+224]
003dbcb8ldr x2, [sp+232]
003dbcbcbl bytes.NewBuffer
003dbcc0str x0, [sp+144]
003dbcc4str x0, [sp+136]
003dbcc8str xzr, [sp+128]
003dbcccstp xzr, xzr, [sp+112]
003dbcd0ldr x1, [sp+136]
003dbcd4adrp x0, 0x33a000
003dbcd8add x0, x0, 2720
003dbcdcbl compress/gzip.NewReader
003dbce0str x0, [sp+128]
003dbce4str x1, [sp+112]
003dbce8str x2, [sp+120]
003dbcecldr x3, [sp+128]
003dbcf0str x3, [sp+168]
003dbcf4ldr x3, [sp+120]
003dbcf8ldr x4, [sp+112]
003dbcfcstr x4, [sp+152]
003dbd00str x3, [sp+160]
003dbd04ldr x3, [sp+168]
003dbd08str x3, [sp+64]
003dbd0cstp xzr, xzr, [sp+72]
003dbd10stp xzr, xzr, [sp+88]
003dbd14str xzr, [sp+104]
003dbd18ldr x2, [sp+64]
003dbd1cstr x2, [sp+128]
003dbd20add x0, sp, 72
003dbd24adrp x1, 0x338000
003dbd28add x1, x1, 2912
003dbd2cbl bytes.(*Buffer).ReadFrom
003dbd30add x0, sp, 72
003dbd34bl bytes.(*Buffer).Bytes
003dbd38str x0, [sp+176]
003dbd3cstr x1, [sp+184]
003dbd40str x2, [sp+192]
003dbd44str x0, [sp+40]
003dbd48str x1, [sp+48]
003dbd4cstr x2, [sp+56]
003dbd50ldur x29, [sp-8]
003dbd54ldr x30, [sp], 208
003dbd58ret x30
003dbd5c
003dbd5cloc_3dbd5c:
003dbd5cstp x0, x1, [sp+8]
003dbd60str x2, [sp+24]
003dbd64mov x3, x30
003dbd68bl runtime.morestack_noctxt.abi0
003dbd6cldp x0, x1, [sp+8]
003dbd70ldr x2, [sp+24]
003dbd74b 0x3dbc80
003dbd78udf 0
003dbd7cudf 0
003dbc80

003dbd80
003dbd80github.com/bishopfox/sliver/implant/sliver/cryptography.MinisignVerify: ; void github.com/bishopfox/sliver/implant/sliver/cryptography.MinisignVerify(struct []uint8 message, struct string signature)
003dbd80ldr x16, [x28+16]
003dbd84sub x17, sp, 1056
003dbd88subs xzr, x17, x16
003dbd8cb.ls 0x3dc2c0
003dbd90sub x20, sp, 1184
003dbd94stp x29, x30, [x20-8]
003dbd98add sp, x20, 0
003dbd9csub x29, sp, 8
003dbda0str x0, [sp+1192]
003dbda4str x1, [sp+1200]
003dbda8str x2, [sp+1208]
003dbdacstr x3, [sp+1216]
003dbdb0str x4, [sp+1224]
003dbdb4strb wzr, [sp+221]
003dbdb8add x27, sp, 1144
003dbdbcstp xzr, xzr, [x27]
003dbdc0adrp x27, 0x632000
003dbdc4ldr x0, [x27+2944]
003dbdc8adrp x27, 0x632000
003dbdccldr x1, [x27+2952]
003dbdd0bl github.com/bishopfox/sliver/implant/sliver/cryptography.DecodeMinisignPublicKey
003dbdd4ldp x2, x3, [sp+8]
003dbdd8ldp x4, x5, [sp+24]
003dbddcadd x27, sp, 309
003dbde0stp x2, x3, [x27]
003dbde4add x27, sp, 325
003dbde8stp x4, x5, [x27]
003dbdecadd x27, sp, 34
003dbdf0ldp x2, x3, [x27]
003dbdf4add x27, sp, 335
003dbdf8stp x2, x3, [x27]
003dbdfcstr x0, [sp+1144]
003dbe00str x1, [sp+1152]
003dbe04add x27, sp, 309
003dbe08ldp x2, x3, [x27]
003dbe0cadd x27, sp, 325
003dbe10ldp x4, x5, [x27]
003dbe14add x27, sp, 265
003dbe18stp x2, x3, [x27]
003dbe1cadd x27, sp, 281
003dbe20stp x4, x5, [x27]
003dbe24add x27, sp, 335
003dbe28ldp x2, x3, [x27]
003dbe2cadd x27, sp, 291
003dbe30stp x2, x3, [x27]
003dbe34ldr x2, [sp+1152]
003dbe38ldr x3, [sp+1144]
003dbe3cstr x3, [sp+736]
003dbe40str x2, [sp+744]
003dbe44add x27, sp, 265
003dbe48ldp x2, x3, [x27]
003dbe4cadd x27, sp, 281
003dbe50ldp x4, x5, [x27]
003dbe54add x27, sp, 223
003dbe58stp x2, x3, [x27]
003dbe5cadd x27, sp, 239
003dbe60stp x4, x5, [x27]
003dbe64add x27, sp, 291
003dbe68ldp x2, x3, [x27]
003dbe6cadd x27, sp, 249
003dbe70stp x2, x3, [x27]
003dbe74ldr x2, [sp+744]
003dbe78ldr x3, [sp+736]
003dbe7cstr x3, [sp+528]
003dbe80str x2, [sp+536]
003dbe84cbnz x3, 0x3dbe8c
003dbe88b 0x3dbf54
003dbe8c
003dbe8cloc_3dbe8c:
003dbe8cadd x27, sp, 1128
003dbe90stp xzr, xzr, [x27]
003dbe94add x5, sp, 1128
003dbe98str x5, [sp+920]
003dbe9cldr x5, [sp+528]
003dbea0ldr x6, [sp+536]
003dbea4str x5, [sp+904]
003dbea8str x6, [sp+912]
003dbeacstr x5, [sp+896]
003dbeb0ldr x5, [sp+896]
003dbeb4cbnz x5, 0x3dbebc
003dbeb8b 0x3dbecc
003dbebc
003dbebcloc_3dbebc:
003dbebcldr x5, [sp+896]
003dbec0ldr x5, [x5+8]
003dbec4str x5, [sp+896]
003dbec8b 0x3dbed0
003dbecc
003dbeccloc_3dbecc:
003dbeccb 0x3dbed0
003dbed0
003dbed0loc_3dbed0:
003dbed0ldr x5, [sp+920]
003dbed4ldrsb x27, [x5]
003dbed8ldr x6, [sp+912]
003dbedcldr x7, [sp+896]
003dbee0str x7, [x5]
003dbee4adrp x27, 0x670000
003dbee8ldr w7, [x27+3056]
003dbeeccbz w7, 0x3dbef4
003dbef0b 0x3dbef8
003dbef4
003dbef4loc_3dbef4:
003dbef4b 0x3dbf0c
003dbef8
003dbef8loc_3dbef8:
003dbef8bl runtime.gcWriteBarrier2
003dbefcstr x6, [x25]
003dbf00ldr x7, [x5+8]
003dbf04str x7, [x25+8]
003dbf08b 0x3dbf0c
003dbf0c
003dbf0cloc_3dbf0c:
003dbf0cstr x6, [x5+8]
003dbf10ldr x2, [sp+920]
003dbf14ldrsb x27, [x2]
003dbf18b 0x3dbf1c
003dbf1c
003dbf1cloc_3dbf1c:
003dbf1cstr x2, [sp+928]
003dbf20orr x4, xzr, 1
003dbf24str x4, [sp+936]
003dbf28str x4, [sp+944]
003dbf2cadrp x0, 0x2e9000
003dbf30add x0, x0, 1139
003dbf34movz x1, 40
003dbf38mov x3, x4
003dbf3cbl log.Printf
003dbf40strb wzr, [sp+221]
003dbf44mov x0, xzr
003dbf48ldp x29, x30, [sp-8]
003dbf4cadd sp, sp, 1184
003dbf50ret x30
003dbf54
003dbf54loc_3dbf54:
003dbf54add x20, sp, 952
003dbf58adr x27, 16
003dbf5cstp x29, x27, [sp-24]
003dbf60sub x29, sp, 24
003dbf64bl fn_87ce4
003dbf68sub x29, sp, 8
003dbf6cadd x27, sp, 1144
003dbf70stp xzr, xzr, [x27]
003dbf74ldr x0, [sp+1216]
003dbf78ldr x1, [sp+1224]
003dbf7cbl github.com/bishopfox/sliver/implant/sliver/cryptography.DecodeMinisignSignature
003dbf80add x21, sp, 952
003dbf84add x20, sp, 8
003dbf88adr x27, 16
003dbf8cstp x29, x27, [sp-24]
003dbf90sub x29, sp, 24
003dbf94bl fn_87ec8
003dbf98sub x29, sp, 8
003dbf9cstr x0, [sp+1144]
003dbfa0str x1, [sp+1152]
003dbfa4add x21, sp, 560
003dbfa8add x20, sp, 952
003dbfacadr x27, 16
003dbfb0stp x29, x27, [sp-24]
003dbfb4sub x29, sp, 24
003dbfb8bl fn_87ec8
003dbfbcsub x29, sp, 8
003dbfc0ldr x2, [sp+1144]
003dbfc4ldr x3, [sp+1152]
003dbfc8str x2, [sp+544]
003dbfccstr x3, [sp+552]
003dbfd0add x21, sp, 352
003dbfd4add x20, sp, 560
003dbfd8adr x27, 16
003dbfdcstp x29, x27, [sp-24]
003dbfe0sub x29, sp, 24
003dbfe4bl fn_87ec8
003dbfe8sub x29, sp, 8
003dbfecldr x2, [sp+552]
003dbff0ldr x3, [sp+544]
003dbff4str x3, [sp+528]
003dbff8str x2, [sp+536]
003dbffccbnz x3, 0x3dc004
003dc000b 0x3dc0cc
003dc004
003dc004loc_3dc004:
003dc004add x27, sp, 1128
003dc008stp xzr, xzr, [x27]
003dc00cadd x5, sp, 1128
003dc010str x5, [sp+864]
003dc014ldr x5, [sp+528]
003dc018ldr x6, [sp+536]
003dc01cstr x5, [sp+848]
003dc020str x6, [sp+856]
003dc024str x5, [sp+840]
003dc028ldr x5, [sp+840]
003dc02ccbnz x5, 0x3dc034
003dc030b 0x3dc044
003dc034
003dc034loc_3dc034:
003dc034ldr x5, [sp+840]
003dc038ldr x5, [x5+8]
003dc03cstr x5, [sp+840]
003dc040b 0x3dc048
003dc044
003dc044loc_3dc044:
003dc044b 0x3dc048
003dc048
003dc048loc_3dc048:
003dc048ldr x5, [sp+864]
003dc04cldrsb x27, [x5]
003dc050ldr x6, [sp+840]
003dc054ldr x7, [sp+856]
003dc058str x6, [x5]
003dc05cadrp x27, 0x66f000
003dc060ldr w6, [x27+3056]
003dc064cbz w6, 0x3dc06c
003dc068b 0x3dc070
003dc06c
003dc06cloc_3dc06c:
003dc06cb 0x3dc084
003dc070
003dc070loc_3dc070:
003dc070bl runtime.gcWriteBarrier2
003dc074str x7, [x25]
003dc078ldr x6, [x5+8]
003dc07cstr x6, [x25+8]
003dc080b 0x3dc084
003dc084
003dc084loc_3dc084:
003dc084str x7, [x5+8]
003dc088ldr x2, [sp+864]
003dc08cldrsb x27, [x2]
003dc090b 0x3dc094
003dc094
003dc094loc_3dc094:
003dc094str x2, [sp+872]
003dc098orr x4, xzr, 1
003dc09cstr x4, [sp+880]
003dc0a0str x4, [sp+888]
003dc0a4adrp x0, 0x2e7000
003dc0a8add x0, x0, 2236
003dc0acmovz x1, 39
003dc0b0mov x3, x4
003dc0b4bl log.Printf
003dc0b8strb wzr, [sp+221]
003dc0bcmov x0, xzr
003dc0c0ldp x29, x30, [sp-8]
003dc0c4add sp, sp, 1184
003dc0c8ret x30
003dc0cc
003dc0ccloc_3dc0cc:
003dc0ccadd x27, sp, 1144
003dc0d0stp xzr, xzr, [x27]
003dc0d4ldr x1, [sp+1192]
003dc0d8ldr x2, [sp+1200]
003dc0dcldr x3, [sp+1208]
003dc0e0add x21, sp, 8
003dc0e4add x20, sp, 352
003dc0e8adr x27, 16
003dc0ecstp x29, x27, [sp-24]
003dc0f0sub x29, sp, 24
003dc0f4bl fn_87ec8
003dc0f8sub x29, sp, 8
003dc0fcadd x0, sp, 223
003dc100bl github.com/bishopfox/sliver/implant/sliver/cryptography.(*PublicKey).Verify
003dc104strb w0, [sp+308]
003dc108str x1, [sp+1144]
003dc10cstr x2, [sp+1152]
003dc110ldrb w4, [sp+308]
003dc114strb w4, [sp+351]
003dc118ldr x4, [sp+1152]
003dc11cldr x5, [sp+1144]
003dc120str x5, [sp+1160]
003dc124str x4, [sp+1168]
003dc128ldrb w4, [sp+351]
003dc12cstrb w4, [sp+222]
003dc130ldr x4, [sp+1168]
003dc134ldr x5, [sp+1160]
003dc138str x5, [sp+528]
003dc13cstr x4, [sp+536]
003dc140cbnz x5, 0x3dc148
003dc144b 0x3dc210
003dc148
003dc148loc_3dc148:
003dc148add x27, sp, 1128
003dc14cstp xzr, xzr, [x27]
003dc150add x5, sp, 1128
003dc154str x5, [sp+808]
003dc158ldr x5, [sp+528]
003dc15cldr x6, [sp+536]
003dc160str x5, [sp+792]
003dc164str x6, [sp+800]
003dc168str x5, [sp+784]
003dc16cldr x5, [sp+784]
003dc170cbnz x5, 0x3dc178
003dc174b 0x3dc188
003dc178
003dc178loc_3dc178:
003dc178ldr x5, [sp+784]
003dc17cldr x5, [x5+8]
003dc180str x5, [sp+784]
003dc184b 0x3dc18c
003dc188
003dc188loc_3dc188:
003dc188b 0x3dc18c
003dc18c
003dc18cloc_3dc18c:
003dc18cldr x5, [sp+808]
003dc190ldrsb x27, [x5]
003dc194ldr x6, [sp+784]
003dc198ldr x7, [sp+800]
003dc19cstr x6, [x5]
003dc1a0adrp x27, 0x66f000
003dc1a4ldr w6, [x27+3056]
003dc1a8cbz w6, 0x3dc1b0
003dc1acb 0x3dc1b4
003dc1b0
003dc1b0loc_3dc1b0:
003dc1b0b 0x3dc1c8
003dc1b4
003dc1b4loc_3dc1b4:
003dc1b4bl runtime.gcWriteBarrier2
003dc1b8str x7, [x25]
003dc1bcldr x6, [x5+8]
003dc1c0str x6, [x25+8]
003dc1c4b 0x3dc1c8
003dc1c8
003dc1c8loc_3dc1c8:
003dc1c8str x7, [x5+8]
003dc1ccldr x2, [sp+808]
003dc1d0ldrsb x27, [x2]
003dc1d4b 0x3dc1d8
003dc1d8
003dc1d8loc_3dc1d8:
003dc1d8str x2, [sp+816]
003dc1dcorr x4, xzr, 1
003dc1e0str x4, [sp+824]
003dc1e4str x4, [sp+832]
003dc1e8adrp x0, 0x2e7000
003dc1ecadd x0, x0, 2275
003dc1f0movz x1, 39
003dc1f4mov x3, x4
003dc1f8bl log.Printf
003dc1fcstrb wzr, [sp+221]
003dc200mov x0, xzr
003dc204ldp x29, x30, [sp-8]
003dc208add sp, sp, 1184
003dc20cret x30
003dc210
003dc210loc_3dc210:
003dc210ldrb w5, [sp+222]
003dc214strb w5, [sp+308]
003dc218add x27, sp, 1128
003dc21cstp xzr, xzr, [x27]
003dc220add x5, sp, 1128
003dc224str x5, [sp+752]
003dc228ldrb w5, [sp+308]
003dc22cstrb w5, [sp+307]
003dc230ldr x6, [sp+752]
003dc234ldrsb x27, [x6]
003dc238adrp x7, 0x219000
003dc23cadd x7, x7, 3968
003dc240str x7, [x6]
003dc244ubfm x5, x5, 61, 7
003dc248adrp x7, 0x346000
003dc24cadd x7, x7, 640
003dc250add x5, x7, x5
003dc254adrp x27, 0x66f000
003dc258ldr w7, [x27+3056]
003dc25ccbz w7, 0x3dc264
003dc260b 0x3dc268
003dc264
003dc264loc_3dc264:
003dc264b 0x3dc278
003dc268
003dc268loc_3dc268:
003dc268ldr x7, [x6+8]
003dc26cbl runtime.gcWriteBarrier1
003dc270str x7, [x25]
003dc274b 0x3dc278
003dc278
003dc278loc_3dc278:
003dc278str x5, [x6+8]
003dc27cldr x2, [sp+752]
003dc280ldrsb x27, [x2]
003dc284b 0x3dc288
003dc288
003dc288loc_3dc288:
003dc288str x2, [sp+760]
003dc28corr x4, xzr, 1
003dc290str x4, [sp+768]
003dc294str x4, [sp+776]
003dc298adrp x0, 0x2e3000
003dc29cadd x0, x0, 1959
003dc2a0movz x1, 33
003dc2a4mov x3, x4
003dc2a8bl log.Printf
003dc2acldrb w0, [sp+222]
003dc2b0strb w0, [sp+221]
003dc2b4ldp x29, x30, [sp-8]
003dc2b8add sp, sp, 1184
003dc2bcret x30
003dc2c0
003dc2c0loc_3dc2c0:
003dc2c0stp x0, x1, [sp+8]
003dc2c4stp x2, x3, [sp+24]
003dc2c8str x4, [sp+40]
003dc2ccmov x3, x30
003dc2d0bl runtime.morestack_noctxt.abi0
003dc2d4ldp x0, x1, [sp+8]
003dc2d8ldp x2, x3, [sp+24]
003dc2dcldr x4, [sp+40]
003dc2e0b 0x3dbd80
003dc2e4udf 0
003dc2e8udf 0
003dc2ecudf 0
003dbd80