Similarity

0042f680
0042f680github.com/bishopfox/sliver/implant/sliver/pivots.(*NetConnPivot).readEnvelope: ; void github.com/bishopfox/sliver/implant/sliver/pivots.(*NetConnPivot).readEnvelope(github.com/bishopfox/sliver/implant/sliver/pivots.NetConnPivot * p)
0042f680ldr x16, [x28+16]
0042f684sub x17, sp, 336
0042f688subs xzr, x17, x16
0042f68cb.ls 0x42faf4
0042f690sub x20, sp, 464
0042f694stp x29, x30, [x20-8]
0042f698add sp, x20, 0
0042f69csub x29, sp, 8
0042f6a0str x0, [sp+472]
0042f6a4str xzr, [sp+64]
0042f6a8stp xzr, xzr, [sp+48]
0042f6acstr xzr, [sp+432]
0042f6b0stp xzr, xzr, [sp+440]
0042f6b4stp xzr, xzr, [sp+416]
0042f6b8ldr x0, [sp+472]
0042f6bcbl github.com/bishopfox/sliver/implant/sliver/pivots.(*NetConnPivot).read
0042f6c0str x0, [sp+432]
0042f6c4str x1, [sp+440]
0042f6c8str x2, [sp+448]
0042f6ccstr x3, [sp+416]
0042f6d0str x4, [sp+424]
0042f6d4ldr x1, [sp+432]
0042f6d8ldr x2, [sp+440]
0042f6dcldr x3, [sp+448]
0042f6e0str x1, [sp+176]
0042f6e4str x2, [sp+184]
0042f6e8str x3, [sp+192]
0042f6ecldr x1, [sp+416]
0042f6f0ldr x2, [sp+424]
0042f6f4str x1, [sp+160]
0042f6f8str x2, [sp+168]
0042f6fcldr x1, [sp+176]
0042f700ldr x2, [sp+184]
0042f704ldr x3, [sp+192]
0042f708str x1, [sp+96]
0042f70cstr x2, [sp+104]
0042f710str x3, [sp+112]
0042f714ldr x1, [sp+168]
0042f718ldr x2, [sp+160]
0042f71cstr x2, [sp+72]
0042f720str x1, [sp+80]
0042f724cbnz x2, 0x42f72c
0042f728b 0x42f800
0042f72c
0042f72cloc_42f72c:
0042f72cstp xzr, xzr, [sp+400]
0042f730add x5, sp, 400
0042f734str x5, [sp+360]
0042f738ldr x5, [sp+72]
0042f73cldr x6, [sp+80]
0042f740str x5, [sp+344]
0042f744str x6, [sp+352]
0042f748str x5, [sp+336]
0042f74cldr x5, [sp+336]
0042f750cbnz x5, 0x42f758
0042f754b 0x42f768
0042f758
0042f758loc_42f758:
0042f758ldr x5, [sp+336]
0042f75cldr x5, [x5+8]
0042f760str x5, [sp+336]
0042f764b 0x42f76c
0042f768
0042f768loc_42f768:
0042f768b 0x42f76c
0042f76c
0042f76cloc_42f76c:
0042f76cldr x5, [sp+360]
0042f770ldrsb x27, [x5]
0042f774ldr x6, [sp+352]
0042f778ldr x7, [sp+336]
0042f77cstr x7, [x5]
0042f780adrp x27, 0x61c000
0042f784ldr w7, [x27+3056]
0042f788cbz w7, 0x42f790
0042f78cb 0x42f794
0042f790
0042f790loc_42f790:
0042f790b 0x42f7a8
0042f794
0042f794loc_42f794:
0042f794bl runtime.gcWriteBarrier2
0042f798str x6, [x25]
0042f79cldr x7, [x5+8]
0042f7a0str x7, [x25+8]
0042f7a4b 0x42f7a8
0042f7a8
0042f7a8loc_42f7a8:
0042f7a8str x6, [x5+8]
0042f7acldr x2, [sp+360]
0042f7b0ldrsb x27, [x2]
0042f7b4b 0x42f7b8
0042f7b8
0042f7b8loc_42f7b8:
0042f7b8str x2, [sp+368]
0042f7bcorr x4, xzr, 1
0042f7c0str x4, [sp+376]
0042f7c4str x4, [sp+384]
0042f7c8adrp x0, 0x290000
0042f7ccadd x0, x0, 1167
0042f7d0movz x1, 33
0042f7d4mov x3, x4
0042f7d8bl log.Printf
0042f7dcstr xzr, [sp+64]
0042f7e0ldr x1, [sp+72]
0042f7e4ldr x2, [sp+80]
0042f7e8str x1, [sp+48]
0042f7ecstr x2, [sp+56]
0042f7f0ldr x0, [sp+64]
0042f7f4ldp x29, x30, [sp-8]
0042f7f8add sp, sp, 464
0042f7fcret x30
0042f800
0042f800loc_42f800:
0042f800str xzr, [sp+432]
0042f804stp xzr, xzr, [sp+440]
0042f808stp xzr, xzr, [sp+416]
0042f80cldr x4, [sp+472]
0042f810ldrsb x27, [x4]
0042f814ldr x0, [x4+40]
0042f818str x0, [sp+328]
0042f81cldr x1, [sp+96]
0042f820ldr x2, [sp+104]
0042f824ldr x3, [sp+112]
0042f828bl github.com/bishopfox/sliver/implant/sliver/cryptography.(*CipherContext).DecryptWithoutSignatureCheck
0042f82cstr x0, [sp+432]
0042f830str x1, [sp+440]
0042f834str x2, [sp+448]
0042f838str x3, [sp+416]
0042f83cstr x4, [sp+424]
0042f840ldr x4, [sp+432]
0042f844ldr x5, [sp+440]
0042f848ldr x6, [sp+448]
0042f84cstr x4, [sp+136]
0042f850str x5, [sp+144]
0042f854str x6, [sp+152]
0042f858ldr x4, [sp+416]
0042f85cldr x5, [sp+424]
0042f860str x4, [sp+120]
0042f864str x5, [sp+128]
0042f868ldr x4, [sp+136]
0042f86cldr x5, [sp+144]
0042f870ldr x6, [sp+152]
0042f874str x4, [sp+96]
0042f878str x5, [sp+104]
0042f87cstr x6, [sp+112]
0042f880ldr x4, [sp+128]
0042f884ldr x5, [sp+120]
0042f888str x5, [sp+72]
0042f88cstr x4, [sp+80]
0042f890cbnz x5, 0x42f898
0042f894b 0x42f96c
0042f898
0042f898loc_42f898:
0042f898stp xzr, xzr, [sp+400]
0042f89cadd x5, sp, 400
0042f8a0str x5, [sp+296]
0042f8a4ldr x5, [sp+72]
0042f8a8ldr x6, [sp+80]
0042f8acstr x5, [sp+280]
0042f8b0str x6, [sp+288]
0042f8b4str x5, [sp+272]
0042f8b8ldr x5, [sp+272]
0042f8bccbnz x5, 0x42f8c4
0042f8c0b 0x42f8d4
0042f8c4
0042f8c4loc_42f8c4:
0042f8c4ldr x5, [sp+272]
0042f8c8ldr x5, [x5+8]
0042f8ccstr x5, [sp+272]
0042f8d0b 0x42f8d8
0042f8d4
0042f8d4loc_42f8d4:
0042f8d4b 0x42f8d8
0042f8d8
0042f8d8loc_42f8d8:
0042f8d8ldr x5, [sp+296]
0042f8dcldrsb x27, [x5]
0042f8e0ldr x6, [sp+288]
0042f8e4ldr x7, [sp+272]
0042f8e8str x7, [x5]
0042f8ecadrp x27, 0x61c000
0042f8f0ldr w7, [x27+3056]
0042f8f4cbz w7, 0x42f8fc
0042f8f8b 0x42f900
0042f8fc
0042f8fcloc_42f8fc:
0042f8fcb 0x42f914
0042f900
0042f900loc_42f900:
0042f900bl runtime.gcWriteBarrier2
0042f904str x6, [x25]
0042f908ldr x7, [x5+8]
0042f90cstr x7, [x25+8]
0042f910b 0x42f914
0042f914
0042f914loc_42f914:
0042f914str x6, [x5+8]
0042f918ldr x2, [sp+296]
0042f91cldrsb x27, [x2]
0042f920b 0x42f924
0042f924
0042f924loc_42f924:
0042f924str x2, [sp+304]
0042f928orr x4, xzr, 1
0042f92cstr x4, [sp+312]
0042f930str x4, [sp+320]
0042f934adrp x0, 0x28c000
0042f938add x0, x0, 2732
0042f93corr x1, xzr, 28
0042f940mov x3, x4
0042f944bl log.Printf
0042f948str xzr, [sp+64]
0042f94cldr x1, [sp+72]
0042f950ldr x2, [sp+80]
0042f954str x1, [sp+48]
0042f958str x2, [sp+56]
0042f95cldr x0, [sp+64]
0042f960ldp x29, x30, [sp-8]
0042f964add sp, sp, 464
0042f968ret x30
0042f96c
0042f96cloc_42f96c:
0042f96cadrp x0, 0x255000
0042f970add x0, x0, 2848
0042f974bl runtime.newobject
0042f978str x0, [sp+264]
0042f97cadrp x27, 0x61c000
0042f980ldr w1, [x27+3056]
0042f984cbz w1, 0x42f98c
0042f988b 0x42f990
0042f98c
0042f98cloc_42f98c:
0042f98cb 0x42f9ac
0042f990
0042f990loc_42f990:
0042f990str x0, [sp+200]
0042f994mov x1, x0
0042f998adrp x0, 0x255000
0042f99cadd x0, x0, 2848
0042f9a0bl runtime.wbZero
0042f9a4ldr x0, [sp+200]
0042f9a8b 0x42f9ac
0042f9ac
0042f9acloc_42f9ac:
0042f9acmov x20, x0
0042f9b0adr x27, 16
0042f9b4stp x29, x27, [sp-24]
0042f9b8sub x29, sp, 24
0042f9bcbl fn_87cfc
0042f9c0sub x29, sp, 8
0042f9c4str xzr, [x0+80]
0042f9c8ldr x4, [sp+264]
0042f9ccstr x4, [sp+88]
0042f9d0str x4, [sp+392]
0042f9d4ldr x1, [sp+104]
0042f9d8ldr x2, [sp+112]
0042f9dcldr x0, [sp+96]
0042f9e0adrp x3, 0x2e5000
0042f9e4add x3, x3, 1184
0042f9e8bl google.golang.org/protobuf/proto.Unmarshal
0042f9ecstr x0, [sp+72]
0042f9f0str x1, [sp+80]
0042f9f4cbnz x0, 0x42f9fc
0042f9f8b 0x42fad0
0042f9fc
0042f9fcloc_42f9fc:
0042f9fcstp xzr, xzr, [sp+400]
0042fa00add x5, sp, 400
0042fa04str x5, [sp+232]
0042fa08ldr x5, [sp+72]
0042fa0cldr x6, [sp+80]
0042fa10str x5, [sp+216]
0042fa14str x6, [sp+224]
0042fa18str x5, [sp+208]
0042fa1cldr x5, [sp+208]
0042fa20cbnz x5, 0x42fa28
0042fa24b 0x42fa38
0042fa28
0042fa28loc_42fa28:
0042fa28ldr x5, [sp+208]
0042fa2cldr x5, [x5+8]
0042fa30str x5, [sp+208]
0042fa34b 0x42fa3c
0042fa38
0042fa38loc_42fa38:
0042fa38b 0x42fa3c
0042fa3c
0042fa3cloc_42fa3c:
0042fa3cldr x5, [sp+232]
0042fa40ldrsb x27, [x5]
0042fa44ldr x6, [sp+208]
0042fa48ldr x7, [sp+224]
0042fa4cstr x6, [x5]
0042fa50adrp x27, 0x61c000
0042fa54ldr w6, [x27+3056]
0042fa58cbz w6, 0x42fa60
0042fa5cb 0x42fa64
0042fa60
0042fa60loc_42fa60:
0042fa60b 0x42fa78
0042fa64
0042fa64loc_42fa64:
0042fa64bl runtime.gcWriteBarrier2
0042fa68str x7, [x25]
0042fa6cldr x6, [x5+8]
0042fa70str x6, [x25+8]
0042fa74b 0x42fa78
0042fa78
0042fa78loc_42fa78:
0042fa78str x7, [x5+8]
0042fa7cldr x2, [sp+232]
0042fa80ldrsb x27, [x2]
0042fa84b 0x42fa88
0042fa88
0042fa88loc_42fa88:
0042fa88str x2, [sp+240]
0042fa8corr x4, xzr, 1
0042fa90str x4, [sp+248]
0042fa94str x4, [sp+256]
0042fa98adrp x0, 0x292000
0042fa9cadd x0, x0, 1993
0042faa0movz x1, 36
0042faa4mov x3, x4
0042faa8bl log.Printf
0042faacstr xzr, [sp+64]
0042fab0ldr x1, [sp+72]
0042fab4ldr x2, [sp+80]
0042fab8str x1, [sp+48]
0042fabcstr x2, [sp+56]
0042fac0ldr x0, [sp+64]
0042fac4ldp x29, x30, [sp-8]
0042fac8add sp, sp, 464
0042faccret x30
0042fad0
0042fad0loc_42fad0:
0042fad0ldr x3, [sp+88]
0042fad4str x3, [sp+64]
0042fad8stp xzr, xzr, [sp+48]
0042fadcldr x0, [sp+64]
0042fae0mov x1, xzr
0042fae4mov x2, xzr
0042fae8ldp x29, x30, [sp-8]
0042faecadd sp, sp, 464
0042faf0ret x30
0042faf4
0042faf4loc_42faf4:
0042faf4str x0, [sp+8]
0042faf8mov x3, x30
0042fafcbl runtime.morestack_noctxt.abi0
0042fb00ldr x0, [sp+8]
0042fb04b 0x42f680
0042fb08udf 0
0042fb0cudf 0
0042f680

0042fb10
0042fb10github.com/bishopfox/sliver/implant/sliver/pivots.(*NetConnPivot).RemoteAddress: ; void github.com/bishopfox/sliver/implant/sliver/pivots.(*NetConnPivot).RemoteAddress(github.com/bishopfox/sliver/implant/sliver/pivots.NetConnPivot * p)
0042fb10ldr x16, [x28+16]
0042fb14subs xzr, sp, x16
0042fb18b.ls 0x42fba0
0042fb1cstr x30, [sp-80]!
0042fb20stur x29, [sp-8]
0042fb24sub x29, sp, 8
0042fb28str x0, [sp+88]
0042fb2cstp xzr, xzr, [sp+24]
0042fb30ldr x1, [sp+88]
0042fb34ldrsb x27, [x1]
0042fb38ldr x2, [x1+8]
0042fb3cldrsb x27, [x2]
0042fb40ldr x0, [x1+16]
0042fb44ldr x1, [x2+48]
0042fb48blr x1
0042fb4cstr x0, [sp+40]
0042fb50str x1, [sp+48]
0042fb54cbnz x0, 0x42fb5c
0042fb58b 0x42fb88
0042fb5c
0042fb5cloc_42fb5c:
0042fb5cldrsb x27, [x0]
0042fb60ldr x2, [x0+32]
0042fb64mov x0, x1
0042fb68blr x2
0042fb6cstr x0, [sp+56]
0042fb70str x1, [sp+64]
0042fb74str x0, [sp+24]
0042fb78str x1, [sp+32]
0042fb7cldur x29, [sp-8]
0042fb80ldr x30, [sp], 80
0042fb84ret x30
0042fb88
0042fb88loc_42fb88:
0042fb88stp xzr, xzr, [sp+24]
0042fb8cmov x0, xzr
0042fb90mov x1, xzr
0042fb94ldur x29, [sp-8]
0042fb98ldr x30, [sp], 80
0042fb9cret x30
0042fba0
0042fba0loc_42fba0:
0042fba0str x0, [sp+8]
0042fba4mov x3, x30
0042fba8bl runtime.morestack_noctxt.abi0
0042fbacldr x0, [sp+8]
0042fbb0b 0x42fb10
0042fbb4udf 0
0042fbb8udf 0
0042fbbcudf 0
0042fb10

0042fbc0
0042fbc0github.com/bishopfox/sliver/implant/sliver/pivots.(*NetConnPivot).Close: ; void github.com/bishopfox/sliver/implant/sliver/pivots.(*NetConnPivot).Close(github.com/bishopfox/sliver/implant/sliver/pivots.NetConnPivot * p)
0042fbc0ldr x16, [x28+16]
0042fbc4subs xzr, sp, x16
0042fbc8b.ls 0x42fc18
0042fbccstr x30, [sp-64]!
0042fbd0stur x29, [sp-8]
0042fbd4sub x29, sp, 8
0042fbd8str x0, [sp+72]
0042fbdcstp xzr, xzr, [sp+24]
0042fbe0ldr x1, [sp+72]
0042fbe4ldrsb x27, [x1]
0042fbe8ldr x2, [x1+8]
0042fbecldrsb x27, [x2]
0042fbf0ldr x0, [x1+16]
0042fbf4ldr x1, [x2+24]
0042fbf8blr x1
0042fbfcstr x0, [sp+40]
0042fc00str x1, [sp+48]
0042fc04str x0, [sp+24]
0042fc08str x1, [sp+32]
0042fc0cldur x29, [sp-8]
0042fc10ldr x30, [sp], 64
0042fc14ret x30
0042fc18
0042fc18loc_42fc18:
0042fc18str x0, [sp+8]
0042fc1cmov x3, x30
0042fc20bl runtime.morestack_noctxt.abi0
0042fc24ldr x0, [sp+8]
0042fc28b 0x42fbc0
0042fc2cudf 0
0042fbc0

0042fc30
0042fc30github.com/bishopfox/sliver/implant/sliver/pivots.mustMarshal: ; void github.com/bishopfox/sliver/implant/sliver/pivots.mustMarshal(google.golang.org/protobuf/reflect/protoreflect.ProtoMessage msg)
0042fc30ldr x16, [x28+16]
0042fc34sub x17, sp, 32
0042fc38subs xzr, x17, x16
0042fc3cb.ls 0x42fce0
0042fc40str x30, [sp-160]!
0042fc44stur x29, [sp-8]
0042fc48sub x29, sp, 8
0042fc4cstr x0, [sp+168]
0042fc50str x1, [sp+176]
0042fc54str xzr, [sp+24]
0042fc58stp xzr, xzr, [sp+32]
0042fc5cstr xzr, [sp+88]
0042fc60stp xzr, xzr, [sp+96]
0042fc64stp xzr, xzr, [sp+72]
0042fc68ldr x0, [sp+168]
0042fc6cldr x1, [sp+176]
0042fc70bl google.golang.org/protobuf/proto.Marshal
0042fc74str x0, [sp+88]
0042fc78str x1, [sp+96]
0042fc7cstr x2, [sp+104]
0042fc80str x3, [sp+72]
0042fc84str x4, [sp+80]
0042fc88ldr x2, [sp+96]
0042fc8cldr x3, [sp+104]
0042fc90ldr x4, [sp+88]
0042fc94str x4, [sp+128]
0042fc98str x2, [sp+136]
0042fc9cstr x3, [sp+144]
0042fca0ldr x2, [sp+72]
0042fca4ldr x3, [sp+80]
0042fca8str x2, [sp+112]
0042fcacstr x3, [sp+120]
0042fcb0ldr x0, [sp+128]
0042fcb4ldr x1, [sp+136]
0042fcb8ldr x2, [sp+144]
0042fcbcstr x0, [sp+48]
0042fcc0str x1, [sp+56]
0042fcc4str x2, [sp+64]
0042fcc8str x0, [sp+24]
0042fcccstr x1, [sp+32]
0042fcd0str x2, [sp+40]
0042fcd4ldur x29, [sp-8]
0042fcd8ldr x30, [sp], 160
0042fcdcret x30
0042fce0
0042fce0loc_42fce0:
0042fce0stp x0, x1, [sp+8]
0042fce4mov x3, x30
0042fce8bl runtime.morestack_noctxt.abi0
0042fcecldp x0, x1, [sp+8]
0042fcf0b 0x42fc30
0042fcf4udf 0
0042fcf8udf 0
0042fcfcudf 0
0042fc30

0042fd00
0042fd00github.com/bishopfox/sliver/implant/sliver/pivots.CreateTCPPivotListener: ; void github.com/bishopfox/sliver/implant/sliver/pivots.CreateTCPPivotListener(struct string address, chan<- *github.com/bishopfox/sliver/protobuf/sliverpb.Envelope upstream, struct []bool opts)
0042fd00ldr x16, [x28+16]
0042fd04sub x17, sp, 208
0042fd08subs xzr, x17, x16
0042fd0cb.ls 0x4300f8
0042fd10sub x20, sp, 336
0042fd14stp x29, x30, [x20-8]
0042fd18add sp, x20, 0
0042fd1csub x29, sp, 8
0042fd20str x0, [sp+344]
0042fd24str x1, [sp+352]
0042fd28str x2, [sp+360]
0042fd2cstr x3, [sp+368]
0042fd30str x4, [sp+376]
0042fd34str x5, [sp+384]
0042fd38str xzr, [sp+72]
0042fd3cstp xzr, xzr, [sp+56]
0042fd40stp xzr, xzr, [sp+312]
0042fd44add x2, sp, 312
0042fd48str x2, [sp+248]
0042fd4cldr x0, [sp+344]
0042fd50ldr x1, [sp+352]
0042fd54bl runtime.convTstring
0042fd58str x0, [sp+240]
0042fd5cldr x2, [sp+248]
0042fd60ldrsb x27, [x2]
0042fd64adrp x3, 0x1c6000
0042fd68add x3, x3, 2944
0042fd6cstr x3, [x2]
0042fd70adrp x27, 0x61c000
0042fd74ldr w3, [x27+3056]
0042fd78cbz w3, 0x42fd80
0042fd7cb 0x42fd84
0042fd80
0042fd80loc_42fd80:
0042fd80b 0x42fd98
0042fd84
0042fd84loc_42fd84:
0042fd84bl runtime.gcWriteBarrier2
0042fd88str x0, [x25]
0042fd8cldr x5, [x2+8]
0042fd90str x5, [x25+8]
0042fd94b 0x42fd98
0042fd98
0042fd98loc_42fd98:
0042fd98str x0, [x2+8]
0042fd9cldr x2, [sp+248]
0042fda0ldrsb x27, [x2]
0042fda4b 0x42fda8
0042fda8
0042fda8loc_42fda8:
0042fda8str x2, [sp+256]
0042fdacorr x4, xzr, 1
0042fdb0str x4, [sp+264]
0042fdb4str x4, [sp+272]
0042fdb8adrp x0, 0x290000
0042fdbcadd x0, x0, 1200
0042fdc0movz x1, 33
0042fdc4mov x3, x4
0042fdc8bl log.Printf
0042fdccstp xzr, xzr, [sp+296]
0042fdd0stp xzr, xzr, [sp+280]
0042fdd4ldr x2, [sp+344]
0042fdd8ldr x3, [sp+352]
0042fddcadrp x0, 0x281000
0042fde0add x0, x0, 459
0042fde4orr x1, xzr, 3
0042fde8bl net.Listen
0042fdecstr x0, [sp+296]
0042fdf0str x1, [sp+304]
0042fdf4str x2, [sp+280]
0042fdf8str x3, [sp+288]
0042fdfcldr x5, [sp+304]
0042fe00ldr x6, [sp+296]
0042fe04str x6, [sp+136]
0042fe08str x5, [sp+144]
0042fe0cldr x5, [sp+280]
0042fe10ldr x6, [sp+288]
0042fe14str x5, [sp+120]
0042fe18str x6, [sp+128]
0042fe1cldr x5, [sp+136]
0042fe20ldr x6, [sp+144]
0042fe24str x5, [sp+88]
0042fe28str x6, [sp+96]
0042fe2cldr x5, [sp+128]
0042fe30ldr x6, [sp+120]
0042fe34str x6, [sp+104]
0042fe38str x5, [sp+112]
0042fe3ccbnz x6, 0x42fe44
0042fe40b 0x42ff18
0042fe44
0042fe44loc_42fe44:
0042fe44stp xzr, xzr, [sp+312]
0042fe48add x5, sp, 312
0042fe4cstr x5, [sp+208]
0042fe50ldr x5, [sp+104]
0042fe54ldr x6, [sp+112]
0042fe58str x5, [sp+192]
0042fe5cstr x6, [sp+200]
0042fe60str x5, [sp+184]
0042fe64ldr x5, [sp+184]
0042fe68cbnz x5, 0x42fe70
0042fe6cb 0x42fe80
0042fe70
0042fe70loc_42fe70:
0042fe70ldr x5, [sp+184]
0042fe74ldr x5, [x5+8]
0042fe78str x5, [sp+184]
0042fe7cb 0x42fe84
0042fe80
0042fe80loc_42fe80:
0042fe80b 0x42fe84
0042fe84
0042fe84loc_42fe84:
0042fe84ldr x5, [sp+208]
0042fe88ldrsb x27, [x5]
0042fe8cldr x6, [sp+184]
0042fe90ldr x7, [sp+200]
0042fe94str x6, [x5]
0042fe98adrp x27, 0x61c000
0042fe9cldr w6, [x27+3056]
0042fea0cbz w6, 0x42fea8
0042fea4b 0x42feac
0042fea8
0042fea8loc_42fea8:
0042fea8b 0x42fec0
0042feac
0042feacloc_42feac:
0042feacbl runtime.gcWriteBarrier2
0042feb0str x7, [x25]
0042feb4ldr x6, [x5+8]
0042feb8str x6, [x25+8]
0042febcb 0x42fec0
0042fec0
0042fec0loc_42fec0:
0042fec0str x7, [x5+8]
0042fec4ldr x2, [sp+208]
0042fec8ldrsb x27, [x2]
0042feccb 0x42fed0
0042fed0
0042fed0loc_42fed0:
0042fed0str x2, [sp+216]
0042fed4orr x4, xzr, 1
0042fed8str x4, [sp+224]
0042fedcstr x4, [sp+232]
0042fee0adrp x0, 0x28e000
0042fee4add x0, x0, 562
0042fee8orr x1, xzr, 30
0042feecmov x3, x4
0042fef0bl log.Printf
0042fef4str xzr, [sp+72]
0042fef8ldr x1, [sp+104]
0042fefcldr x2, [sp+112]
0042ff00str x1, [sp+56]
0042ff04str x2, [sp+64]
0042ff08ldr x0, [sp+72]
0042ff0cldp x29, x30, [sp-8]
0042ff10add sp, sp, 336
0042ff14ret x30
0042ff18
0042ff18loc_42ff18:
0042ff18bl github.com/bishopfox/sliver/implant/sliver/pivots.ListenerID
0042ff1cstr w0, [sp+52]
0042ff20adrp x0, 0x254000
0042ff24add x0, x0, 4064
0042ff28bl runtime.newobject
0042ff2cstr x0, [sp+176]
0042ff30adrp x27, 0x61c000
0042ff34ldr w1, [x27+3056]
0042ff38cbz w1, 0x42ff40
0042ff3cb 0x42ff44
0042ff40
0042ff40loc_42ff40:
0042ff40b 0x42ff60
0042ff44
0042ff44loc_42ff44:
0042ff44str x0, [sp+160]
0042ff48mov x1, x0
0042ff4cadrp x0, 0x254000
0042ff50add x0, x0, 4064
0042ff54bl runtime.wbZero
0042ff58ldr x0, [sp+160]
0042ff5cb 0x42ff60
0042ff60
0042ff60loc_42ff60:
0042ff60mov x20, x0
0042ff64adr x27, 16
0042ff68stp x29, x27, [sp-24]
0042ff6csub x29, sp, 24
0042ff70bl fn_87cfc
0042ff74sub x29, sp, 8
0042ff78ldr x1, [sp+176]
0042ff7cldrsb x27, [x1]
0042ff80ldr w2, [sp+52]
0042ff84str w2, [x1]
0042ff88ldr x1, [sp+176]
0042ff8cldrsb x27, [x1]
0042ff90str wzr, [x1+4]
0042ff94ldr x1, [sp+176]
0042ff98ldrsb x27, [x1]
0042ff9cldr x2, [sp+96]
0042ffa0ldr x3, [sp+88]
0042ffa4str x3, [x1+8]
0042ffa8adrp x27, 0x61c000
0042ffacldr w3, [x27+3056]
0042ffb0cbz w3, 0x42ffb8
0042ffb4b 0x42ffbc
0042ffb8
0042ffb8loc_42ffb8:
0042ffb8b 0x42ffd0
0042ffbc
0042ffbcloc_42ffbc:
0042ffbcbl runtime.gcWriteBarrier2
0042ffc0str x2, [x25]
0042ffc4ldr x3, [x1+16]
0042ffc8str x3, [x25+8]
0042ffccb 0x42ffd0
0042ffd0
0042ffd0loc_42ffd0:
0042ffd0str x2, [x1+16]
0042ffd4adrp x0, 0x211000
0042ffd8add x0, x0, 2144
0042ffdcbl runtime.newobject
0042ffe0str x0, [sp+168]
0042ffe4adrp x27, 0x61c000
0042ffe8ldr w1, [x27+3056]
0042ffeccbz w1, 0x42fff4
0042fff0b 0x42fff8
0042fff4
0042fff4loc_42fff4:
0042fff4b 0x430014
0042fff8
0042fff8loc_42fff8:
0042fff8str x0, [sp+152]
0042fffcmov x1, x0
00430000adrp x0, 0x210000
00430004add x0, x0, 2144
00430008bl runtime.wbZero
0043000cldr x0, [sp+152]
00430010b 0x430014
00430014
00430014loc_430014:
00430014stp xzr, xzr, [x0]
00430018stp xzr, xzr, [x0+16]
0043001cstp xzr, xzr, [x0+32]
00430020ldr x3, [sp+176]
00430024ldrsb x27, [x3]
00430028ldr x4, [sp+168]
0043002cadrp x27, 0x61b000
00430030ldr w5, [x27+3056]
00430034cbz w5, 0x43003c
00430038b 0x430040
0043003c
0043003cloc_43003c:
0043003cb 0x430054
00430040
00430040loc_430040:
00430040bl runtime.gcWriteBarrier2
00430044str x4, [x25]
00430048ldr x5, [x3+24]
0043004cstr x5, [x25+8]
00430050b 0x430054
00430054
00430054loc_430054:
00430054str x4, [x3+24]
00430058ldr x3, [sp+176]
0043005cldrsb x27, [x3]
00430060ldr x4, [sp+344]
00430064ldr x5, [sp+352]
00430068str x5, [x3+40]
0043006cadrp x27, 0x61b000
00430070ldr w5, [x27+3056]
00430074cbz w5, 0x43007c
00430078b 0x430080
0043007c
0043007cloc_43007c:
0043007cb 0x430094
00430080
00430080loc_430080:
00430080bl runtime.gcWriteBarrier2
00430084str x4, [x25]
00430088ldr x5, [x3+32]
0043008cstr x5, [x25+8]
00430090b 0x430094
00430094
00430094loc_430094:
00430094str x4, [x3+32]
00430098ldr x3, [sp+176]
0043009cldrsb x27, [x3]
004300a0ldr x4, [sp+360]
004300a4adrp x27, 0x61b000
004300a8ldr w5, [x27+3056]
004300accbz w5, 0x4300b4
004300b0b 0x4300b8
004300b4
004300b4loc_4300b4:
004300b4b 0x4300cc
004300b8
004300b8loc_4300b8:
004300b8bl runtime.gcWriteBarrier2
004300bcstr x4, [x25]
004300c0ldr x5, [x3+48]
004300c4str x5, [x25+8]
004300c8b 0x4300cc
004300cc
004300ccloc_4300cc:
004300ccstr x4, [x3+48]
004300d0ldr x3, [sp+176]
004300d4str x3, [sp+80]
004300d8str x3, [sp+72]
004300dcstp xzr, xzr, [sp+56]
004300e0ldr x0, [sp+72]
004300e4mov x1, xzr
004300e8mov x2, xzr
004300ecldp x29, x30, [sp-8]
004300f0add sp, sp, 336
004300f4ret x30
004300f8
004300f8loc_4300f8:
004300f8stp x0, x1, [sp+8]
004300fcstp x2, x3, [sp+24]
00430100stp x4, x5, [sp+40]
00430104mov x3, x30
00430108bl runtime.morestack_noctxt.abi0
0043010cldp x0, x1, [sp+8]
00430110ldp x2, x3, [sp+24]
00430114ldp x4, x5, [sp+40]
00430118b 0x42fd00
0043011cudf 0
0042fd00

00430120
00430120github.com/bishopfox/sliver/implant/sliver/pivots.StopAllListeners.func1: ; void github.com/bishopfox/sliver/implant/sliver/pivots.StopAllListeners.func1(interface {} key, interface {} value)
00430120ldr x16, [x28+16]
00430124subs xzr, sp, x16
00430128b.ls 0x430198
0043012cstr x30, [sp-64]!
00430130stur x29, [sp-8]
00430134sub x29, sp, 8
00430138str x0, [sp+72]
0043013cstr x1, [sp+80]
00430140str x2, [sp+88]
00430144str x3, [sp+96]
00430148strb wzr, [sp+47]
0043014cldr x0, [sp+88]
00430150ldr x3, [sp+96]
00430154adrp x1, 0x1f8000
00430158add x1, x1, 2528
0043015csubs xzr, x0, x1
00430160b.eq 0x430168
00430164b 0x430188
00430168
00430168loc_430168:
00430168str x3, [sp+48]
0043016cmov x0, x3
00430170bl github.com/bishopfox/sliver/implant/sliver/pivots.(*PivotListener).Stop
00430174orr x0, xzr, 1
00430178strb w0, [sp+47]
0043017cldur x29, [sp-8]
00430180ldr x30, [sp], 64
00430184ret x30
00430188
00430188loc_430188:
00430188adrp x2, 0x1da000
0043018cadd x2, x2, 3520
00430190bl runtime.panicdottypeE
00430194hint
00430198
00430198loc_430198:
00430198stp x0, x1, [sp+8]
0043019cstp x2, x3, [sp+24]
004301a0mov x3, x30
004301a4bl runtime.morestack_noctxt.abi0
004301a8ldp x0, x1, [sp+8]
004301acldp x2, x3, [sp+24]
004301b0b 0x430120
004301b4udf 0
004301b8udf 0
004301bcudf 0
00430120

004301c0
004301c0type:.eq.github.com/bishopfox/sliver/implant/sliver/pivots.NetConnPivot: ; void type:.eq.github.com/bishopfox/sliver/implant/sliver/pivots.NetConnPivot(github.com/bishopfox/sliver/implant/sliver/pivots.NetConnPivot * p, github.com/bishopfox/sliver/implant/sliver/pivots.NetConnPivot * q)
004301c0ldr x16, [x28+16]
004301c4subs xzr, sp, x16
004301c8b.ls 0x43029c
004301ccstr x30, [sp-96]!
004301d0stur x29, [sp-8]
004301d4sub x29, sp, 8
004301d8str x0, [sp+104]
004301dcstr x1, [sp+112]
004301e0strb wzr, [sp+39]
004301e4ldr x3, [sp+104]
004301e8ldr x3, [x3]
004301ecldr x4, [sp+112]
004301f0ldr x4, [x4]
004301f4subs xzr, x4, x3
004301f8b.eq 0x430200
004301fcb 0x430280
00430200
00430200loc_430200:
00430200ldr x3, [sp+112]
00430204ldr x4, [x3+8]
00430208ldr x3, [x3+16]
0043020cstr x4, [sp+72]
00430210str x3, [sp+80]
00430214ldr x3, [sp+104]
00430218ldr x0, [x3+8]
0043021cldr x1, [x3+16]
00430220str x0, [sp+56]
00430224str x1, [sp+64]
00430228ldr x3, [sp+72]
0043022csubs xzr, x3, x0
00430230b.eq 0x430238
00430234b 0x430278
00430238
00430238loc_430238:
00430238ldr x2, [sp+80]
0043023cbl runtime.ifaceeq
00430240tbnz w0, 0, 0x430248
00430244b 0x430274
00430248
00430248loc_430248:
00430248ldr x3, [sp+104]
0043024cadd x3, x3, 24
00430250str x3, [sp+48]
00430254ldr x3, [sp+112]
00430258add x1, x3, 24
0043025cstr x1, [sp+40]
00430260ldr x0, [sp+48]
00430264orr x2, xzr, 56
00430268bl runtime.memequal
0043026cstrb w0, [sp+39]
00430270b 0x43028c
00430274
00430274loc_430274:
00430274b 0x43027c
00430278
00430278loc_430278:
00430278b 0x43027c
0043027c
0043027cloc_43027c:
0043027cb 0x430284
00430280
00430280loc_430280:
00430280b 0x430284
00430284
00430284loc_430284:
00430284strb wzr, [sp+39]
00430288b 0x43028c
0043028c
0043028cloc_43028c:
0043028cldrb w0, [sp+39]
00430290ldur x29, [sp-8]
00430294ldr x30, [sp], 96
00430298ret x30
0043029c
0043029cloc_43029c:
0043029cstp x0, x1, [sp+8]
004302a0mov x3, x30
004302a4bl runtime.morestack_noctxt.abi0
004302a8ldp x0, x1, [sp+8]
004302acb 0x4301c0
004301c0

004302b0
004302b0github.com/bishopfox/sliver/implant/sliver/netstat.init: ; void github.com/bishopfox/sliver/implant/sliver/netstat.init(void)
004302b0ldr x16, [x28+16]
004302b4subs xzr, sp, x16
004302b8b.ls 0x430320
004302bcstr x30, [sp-32]!
004302c0stur x29, [sp-8]
004302c4sub x29, sp, 8
004302c8adrp x0, 0x294000
004302ccadd x0, x0, 1059
004302d0movz x1, 40
004302d4bl errors.New
004302d8adrp x27, 0x5f1000
004302dcstr x0, [x27+2560]
004302e0adrp x27, 0x61b000
004302e4ldr w2, [x27+3056]
004302e8cbz w2, 0x4302f0
004302ecb 0x4302f4
004302f0
004302f0loc_4302f0:
004302f0b 0x43030c
004302f4
004302f4loc_4302f4:
004302f4bl runtime.gcWriteBarrier2
004302f8str x1, [x25]
004302fcadrp x27, 0x5f1000
00430300ldr x0, [x27+2568]
00430304str x0, [x25+8]
00430308b 0x43030c
0043030c
0043030cloc_43030c:
0043030cadrp x27, 0x5f1000
00430310str x1, [x27+2568]
00430314ldur x29, [sp-8]
00430318ldr x30, [sp], 32
0043031cret x30
00430320
00430320loc_430320:
00430320mov x3, x30
00430324bl runtime.morestack_noctxt.abi0
00430328b 0x4302b0
0043032cudf 0
004302b0

00430330
00430330github.com/bishopfox/sliver/implant/sliver/netstat.SkState.String: ; void github.com/bishopfox/sliver/implant/sliver/netstat.SkState.String(github.com/bishopfox/sliver/implant/sliver/netstat.SkState s)
00430330ldr x16, [x28+16]
00430334subs xzr, sp, x16
00430338b.ls 0x43039c
0043033cstr x30, [sp-48]!
00430340stur x29, [sp-8]
00430344sub x29, sp, 8
00430348strb w0, [sp+56]
0043034cstp xzr, xzr, [sp+24]
00430350ldrb w2, [sp+56]
00430354mov x0, x2
00430358subs xzr, x0, 12
0043035cb.lo 0x430364
00430360b 0x430390
00430364
00430364loc_430364:
00430364ubfm x2, x2, 60, 7
00430368adrp x3, 0x5e9000
0043036cadd x3, x3, 3712
00430370ldr x0, [x3+x2]
00430374add x2, x3, x2
00430378ldr x1, [x2+8]
0043037cstr x0, [sp+24]
00430380str x1, [sp+32]
00430384ldur x29, [sp-8]
00430388ldr x30, [sp], 48
0043038cret x30
00430390
00430390loc_430390:
00430390orr x1, xzr, 12
00430394bl runtime.panicIndex
00430398hint
0043039c
0043039cloc_43039c:
0043039cstrb w0, [sp+8]
004303a0mov x3, x30
004303a4bl runtime.morestack_noctxt.abi0
004303a8ldrb w0, [sp+8]
004303acb 0x430330
00430330

004303b0
004303b0github.com/bishopfox/sliver/implant/sliver/netstat.NoopFilter: ; void github.com/bishopfox/sliver/implant/sliver/netstat.NoopFilter(github.com/bishopfox/sliver/implant/sliver/netstat.SockTabEntry * p0)
004303b0str x30, [sp-32]!
004303b4stur x29, [sp-8]
004303b8sub x29, sp, 8
004303bcstr x0, [sp+40]
004303c0strb wzr, [sp+23]
004303c4orr x0, xzr, 1
004303c8strb w0, [sp+23]
004303ccadd x29, sp, 24
004303d0add sp, sp, 32
004303d4ret x30
004303d8udf 0
004303dcudf 0
004303b0

004303e0
004303e0github.com/bishopfox/sliver/implant/sliver/netstat.TCPSocks: ; void github.com/bishopfox/sliver/implant/sliver/netstat.TCPSocks(github.com/bishopfox/sliver/implant/sliver/netstat.AcceptFn accept)
004303e0ldr x16, [x28+16]
004303e4sub x17, sp, 16
004303e8subs xzr, x17, x16
004303ecb.ls 0x43049c
004303f0str x30, [sp-144]!
004303f4stur x29, [sp-8]
004303f8sub x29, sp, 8
004303fcstr x0, [sp+152]
00430400str xzr, [sp+32]
00430404stp xzr, xzr, [sp+40]
00430408stp xzr, xzr, [sp+16]
0043040cstr xzr, [sp+72]
00430410stp xzr, xzr, [sp+80]
00430414stp xzr, xzr, [sp+56]
00430418ldr x0, [sp+152]
0043041cbl github.com/bishopfox/sliver/implant/sliver/netstat.osTCPSocks
00430420str x0, [sp+72]
00430424str x1, [sp+80]
00430428str x2, [sp+88]
0043042cstr x3, [sp+56]
00430430str x4, [sp+64]
00430434ldr x1, [sp+72]
00430438ldr x2, [sp+80]
0043043cldr x3, [sp+88]
00430440str x1, [sp+112]
00430444str x2, [sp+120]
00430448str x3, [sp+128]
0043044cldr x1, [sp+56]
00430450ldr x2, [sp+64]
00430454str x1, [sp+96]
00430458str x2, [sp+104]
0043045cldr x1, [sp+112]
00430460ldr x2, [sp+120]
00430464ldr x3, [sp+128]
00430468str x1, [sp+32]
0043046cstr x2, [sp+40]
00430470str x3, [sp+48]
00430474ldr x3, [sp+96]
00430478ldr x4, [sp+104]
0043047cstr x3, [sp+16]
00430480str x4, [sp+24]
00430484ldr x0, [sp+32]
00430488ldr x1, [sp+40]
0043048cldr x2, [sp+48]
00430490ldur x29, [sp-8]
00430494ldr x30, [sp], 144
00430498ret x30
0043049c
0043049cloc_43049c:
0043049cstr x0, [sp+8]
004304a0mov x3, x30
004304a4bl runtime.morestack_noctxt.abi0
004304a8ldr x0, [sp+8]
004304acb 0x4303e0
004303e0

004304b0
004304b0github.com/bishopfox/sliver/implant/sliver/netstat.TCP6Socks: ; void github.com/bishopfox/sliver/implant/sliver/netstat.TCP6Socks(github.com/bishopfox/sliver/implant/sliver/netstat.AcceptFn accept)
004304b0ldr x16, [x28+16]
004304b4sub x17, sp, 16
004304b8subs xzr, x17, x16
004304bcb.ls 0x43056c
004304c0str x30, [sp-144]!
004304c4stur x29, [sp-8]
004304c8sub x29, sp, 8
004304ccstr x0, [sp+152]
004304d0str xzr, [sp+32]
004304d4stp xzr, xzr, [sp+40]
004304d8stp xzr, xzr, [sp+16]
004304dcstr xzr, [sp+72]
004304e0stp xzr, xzr, [sp+80]
004304e4stp xzr, xzr, [sp+56]
004304e8ldr x0, [sp+152]
004304ecbl github.com/bishopfox/sliver/implant/sliver/netstat.osTCP6Socks
004304f0str x0, [sp+72]
004304f4str x1, [sp+80]
004304f8str x2, [sp+88]
004304fcstr x3, [sp+56]
00430500str x4, [sp+64]
00430504ldr x1, [sp+72]
00430508ldr x2, [sp+80]
0043050cldr x3, [sp+88]
00430510str x1, [sp+112]
00430514str x2, [sp+120]
00430518str x3, [sp+128]
0043051cldr x1, [sp+56]
00430520ldr x2, [sp+64]
00430524str x1, [sp+96]
00430528str x2, [sp+104]
0043052cldr x1, [sp+112]
00430530ldr x2, [sp+120]
00430534ldr x3, [sp+128]
00430538str x1, [sp+32]
0043053cstr x2, [sp+40]
00430540str x3, [sp+48]
00430544ldr x3, [sp+96]
00430548ldr x4, [sp+104]
0043054cstr x3, [sp+16]
00430550str x4, [sp+24]
00430554ldr x0, [sp+32]
00430558ldr x1, [sp+40]
0043055cldr x2, [sp+48]
00430560ldur x29, [sp-8]
00430564ldr x30, [sp], 144
00430568ret x30
0043056c
0043056cloc_43056c:
0043056cstr x0, [sp+8]
00430570mov x3, x30
00430574bl runtime.morestack_noctxt.abi0
00430578ldr x0, [sp+8]
0043057cb 0x4304b0
004304b0

00430580
00430580github.com/bishopfox/sliver/implant/sliver/netstat.UDPSocks: ; void github.com/bishopfox/sliver/implant/sliver/netstat.UDPSocks(github.com/bishopfox/sliver/implant/sliver/netstat.AcceptFn accept)
00430580ldr x16, [x28+16]
00430584sub x17, sp, 16
00430588subs xzr, x17, x16
0043058cb.ls 0x43063c
00430590str x30, [sp-144]!
00430594stur x29, [sp-8]
00430598sub x29, sp, 8
0043059cstr x0, [sp+152]
004305a0str xzr, [sp+32]
004305a4stp xzr, xzr, [sp+40]
004305a8stp xzr, xzr, [sp+16]
004305acstr xzr, [sp+72]
004305b0stp xzr, xzr, [sp+80]
004305b4stp xzr, xzr, [sp+56]
004305b8ldr x0, [sp+152]
004305bcbl github.com/bishopfox/sliver/implant/sliver/netstat.osUDPSocks
004305c0str x0, [sp+72]
004305c4str x1, [sp+80]
004305c8str x2, [sp+88]
004305ccstr x3, [sp+56]
004305d0str x4, [sp+64]
004305d4ldr x1, [sp+72]
004305d8ldr x2, [sp+80]
004305dcldr x3, [sp+88]
004305e0str x1, [sp+112]
004305e4str x2, [sp+120]
004305e8str x3, [sp+128]
004305ecldr x1, [sp+56]
004305f0ldr x2, [sp+64]
004305f4str x1, [sp+96]
004305f8str x2, [sp+104]
004305fcldr x1, [sp+112]
00430600ldr x2, [sp+120]
00430604ldr x3, [sp+128]
00430608str x1, [sp+32]
0043060cstr x2, [sp+40]
00430610str x3, [sp+48]
00430614ldr x3, [sp+96]
00430618ldr x4, [sp+104]
0043061cstr x3, [sp+16]
00430620str x4, [sp+24]
00430624ldr x0, [sp+32]
00430628ldr x1, [sp+40]
0043062cldr x2, [sp+48]
00430630ldur x29, [sp-8]
00430634ldr x30, [sp], 144
00430638ret x30
0043063c
0043063cloc_43063c:
0043063cstr x0, [sp+8]
00430640mov x3, x30
00430644bl runtime.morestack_noctxt.abi0
00430648ldr x0, [sp+8]
0043064cb 0x430580
00430580

00430650
00430650github.com/bishopfox/sliver/implant/sliver/netstat.UDP6Socks: ; void github.com/bishopfox/sliver/implant/sliver/netstat.UDP6Socks(github.com/bishopfox/sliver/implant/sliver/netstat.AcceptFn accept)
00430650ldr x16, [x28+16]
00430654sub x17, sp, 16
00430658subs xzr, x17, x16
0043065cb.ls 0x43070c
00430660str x30, [sp-144]!
00430664stur x29, [sp-8]
00430668sub x29, sp, 8
0043066cstr x0, [sp+152]
00430670str xzr, [sp+32]
00430674stp xzr, xzr, [sp+40]
00430678stp xzr, xzr, [sp+16]
0043067cstr xzr, [sp+72]
00430680stp xzr, xzr, [sp+80]
00430684stp xzr, xzr, [sp+56]
00430688ldr x0, [sp+152]
0043068cbl github.com/bishopfox/sliver/implant/sliver/netstat.osUDP6Socks
00430690str x0, [sp+72]
00430694str x1, [sp+80]
00430698str x2, [sp+88]
0043069cstr x3, [sp+56]
004306a0str x4, [sp+64]
004306a4ldr x1, [sp+72]
004306a8ldr x2, [sp+80]
004306acldr x3, [sp+88]
004306b0str x1, [sp+112]
004306b4str x2, [sp+120]
004306b8str x3, [sp+128]
004306bcldr x1, [sp+56]
004306c0ldr x2, [sp+64]
004306c4str x1, [sp+96]
004306c8str x2, [sp+104]
004306ccldr x1, [sp+112]
004306d0ldr x2, [sp+120]
004306d4ldr x3, [sp+128]
004306d8str x1, [sp+32]
004306dcstr x2, [sp+40]
004306e0str x3, [sp+48]
004306e4ldr x3, [sp+96]
004306e8ldr x4, [sp+104]
004306ecstr x3, [sp+16]
004306f0str x4, [sp+24]
004306f4ldr x0, [sp+32]
004306f8ldr x1, [sp+40]
004306fcldr x2, [sp+48]
00430700ldur x29, [sp-8]
00430704ldr x30, [sp], 144
00430708ret x30
0043070c
0043070cloc_43070c:
0043070cstr x0, [sp+8]
00430710mov x3, x30
00430714bl runtime.morestack_noctxt.abi0
00430718ldr x0, [sp+8]
0043071cb 0x430650
00430650

00430720
00430720github.com/bishopfox/sliver/implant/sliver/netstat.parseIPv4: ; void github.com/bishopfox/sliver/implant/sliver/netstat.parseIPv4(struct string s)
00430720ldr x16, [x28+16]
00430724sub x17, sp, 64
00430728subs xzr, x17, x16
0043072cb.ls 0x430838
00430730str x30, [sp-192]!
00430734stur x29, [sp-8]
00430738sub x29, sp, 8
0043073cstr x0, [sp+200]
00430740str x1, [sp+208]
00430744str xzr, [sp+88]
00430748stp xzr, xzr, [sp+96]
0043074cstp xzr, xzr, [sp+72]
00430750stp xzr, xzr, [sp+152]
00430754ldr x0, [sp+200]
00430758ldr x1, [sp+208]
0043075corr x2, xzr, 16
00430760orr x3, xzr, 32
00430764bl strconv.ParseUint
00430768str x0, [sp+56]
0043076cstr x1, [sp+152]
00430770str x2, [sp+160]
00430774ldr x4, [sp+56]
00430778str x4, [sp+64]
0043077cstr x1, [sp+168]
00430780str x2, [sp+176]
00430784ldr x4, [sp+64]
00430788str x4, [sp+48]
0043078cstr x1, [sp+136]
00430790str x2, [sp+144]
00430794cbnz x1, 0x43079c
00430798b 0x4307cc
0043079c
0043079cloc_43079c:
0043079cstr xzr, [sp+88]
004307a0stp xzr, xzr, [sp+96]
004307a4ldr x3, [sp+136]
004307a8ldr x4, [sp+144]
004307acstr x3, [sp+72]
004307b0str x4, [sp+80]
004307b4ldr x0, [sp+88]
004307b8ldr x1, [sp+96]
004307bcldr x2, [sp+104]
004307c0ldur x29, [sp-8]
004307c4ldr x30, [sp], 192
004307c8ret x30
004307cc
004307ccloc_4307cc:
004307ccadrp x0, 0x1c5000
004307d0add x0, x0, 3072
004307d4orr x1, xzr, 4
004307d8mov x2, x1
004307dcbl runtime.makeslice
004307e0str x0, [sp+112]
004307e4orr x2, xzr, 4
004307e8str x2, [sp+120]
004307ecstr x2, [sp+128]
004307f0ldr x3, [sp+48]
004307f4mov x1, x2
004307f8bl encoding/binary.littleEndian.PutUint32
004307fcldr x3, [sp+112]
00430800ldr x4, [sp+120]
00430804ldr x5, [sp+128]
00430808str x3, [sp+88]
0043080cstr x4, [sp+96]
00430810str x5, [sp+104]
00430814stp xzr, xzr, [sp+72]
00430818ldr x0, [sp+88]
0043081cldr x1, [sp+96]
00430820ldr x2, [sp+104]
00430824mov x3, xzr
00430828mov x4, xzr
0043082cldur x29, [sp-8]
00430830ldr x30, [sp], 192
00430834ret x30
00430838
00430838loc_430838:
00430838stp x0, x1, [sp+8]
0043083cmov x3, x30
00430840bl runtime.morestack_noctxt.abi0
00430844ldp x0, x1, [sp+8]
00430848b 0x430720
0043084cudf 0
00430720

00430850
00430850github.com/bishopfox/sliver/implant/sliver/netstat.parseIPv6: ; void github.com/bishopfox/sliver/implant/sliver/netstat.parseIPv6(struct string s)
00430850ldr x16, [x28+16]
00430854sub x17, sp, 128
00430858subs xzr, x17, x16
0043085cb.ls 0x430a68
00430860sub x20, sp, 256
00430864stp x29, x30, [x20-8]
00430868add sp, x20, 0
0043086csub x29, sp, 8
00430870str x0, [sp+264]
00430874str x1, [sp+272]
00430878str xzr, [sp+112]
0043087cstp xzr, xzr, [sp+120]
00430880stp xzr, xzr, [sp+96]
00430884adrp x0, 0x1c5000
00430888add x0, x0, 3072
0043088corr x1, xzr, 16
00430890mov x2, x1
00430894bl runtime.makeslice
00430898str x0, [sp+136]
0043089corr x2, xzr, 16
004308a0str x2, [sp+144]
004308a4str x2, [sp+152]
004308a8str xzr, [sp+64]
004308acorr x3, xzr, 4
004308b0str x3, [sp+56]
004308b4b 0x4308b8
004308b8
004308b8loc_4308b8:
004308b8ldr x5, [sp+272]
004308bcstr x5, [sp+88]
004308c0cbnz x5, 0x4308c8
004308c4b 0x430a0c
004308c8
004308c8loc_4308c8:
004308c8ldr x4, [sp+272]
004308ccldr x5, [sp+264]
004308d0subs xzr, x4, 8
004308d4b.hs 0x4308dc
004308d8b 0x430a58
004308dc
004308dcloc_4308dc:
004308dcb 0x4308e0
004308e0
004308e0loc_4308e0:
004308e0str x5, [sp+160]
004308e4orr x4, xzr, 8
004308e8str x4, [sp+168]
004308ecstp xzr, xzr, [sp+216]
004308f0ldr x0, [sp+160]
004308f4ldr x1, [sp+168]
004308f8orr x3, xzr, 32
004308fcbl strconv.ParseUint
00430900str x0, [sp+80]
00430904str x1, [sp+216]
00430908str x2, [sp+224]
0043090cldr x4, [sp+80]
00430910str x4, [sp+72]
00430914str x1, [sp+232]
00430918str x2, [sp+240]
0043091cldr x4, [sp+72]
00430920str x4, [sp+48]
00430924str x1, [sp+176]
00430928str x2, [sp+184]
0043092cldr x1, [sp+56]
00430930ldr x0, [sp+64]
00430934ldr x2, [sp+152]
00430938ldr x4, [sp+136]
0043093csubs xzr, x2, x1
00430940b.hs 0x430948
00430944b 0x430a54
00430948
00430948loc_430948:
00430948subs xzr, x1, x0
0043094cb.hs 0x430954
00430950b 0x430a50
00430954
00430954loc_430954:
00430954sub x2, x2, x0
00430958sub x1, x1, x0
0043095csub x5, xzr, x2
00430960and x5, x0, x5, asr #63
00430964add x0, x4, x5
00430968str x0, [sp+192]
0043096cstr x1, [sp+200]
00430970str x2, [sp+208]
00430974ldr x3, [sp+48]
00430978bl encoding/binary.littleEndian.PutUint32
0043097cldr x4, [sp+176]
00430980cbnz x4, 0x430988
00430984b 0x4309b8
00430988
00430988loc_430988:
00430988str xzr, [sp+112]
0043098cstp xzr, xzr, [sp+120]
00430990ldr x3, [sp+176]
00430994ldr x4, [sp+184]
00430998str x3, [sp+96]
0043099cstr x4, [sp+104]
004309a0ldr x0, [sp+112]
004309a4ldr x1, [sp+120]
004309a8ldr x2, [sp+128]
004309acldp x29, x30, [sp-8]
004309b0add sp, sp, 256
004309b4ret x30
004309b8
004309b8loc_4309b8:
004309b8ldr x5, [sp+64]
004309bcadd x5, x5, 4
004309c0str x5, [sp+64]
004309c4ldr x5, [sp+56]
004309c8add x5, x5, 4
004309ccstr x5, [sp+56]
004309d0ldr x1, [sp+272]
004309d4ldr x5, [sp+264]
004309d8subs xzr, x1, 8
004309dcb.hs 0x4309e4
004309e0b 0x430a48
004309e4
004309e4loc_4309e4:
004309e4sub x6, x1, 8
004309e8sub x7, xzr, x6
004309ecsbfm x7, x7, 63, 63
004309f0and x7, x7, 8
004309f4add x5, x5, x7
004309f8str x5, [sp+264]
004309fcstr x6, [sp+272]
00430a00b 0x430a04
00430a04
00430a04loc_430a04:
00430a04orr x2, xzr, 16
00430a08b 0x4308b8
00430a0c
00430a0cloc_430a0c:
00430a0cldr x5, [sp+136]
00430a10ldr x6, [sp+144]
00430a14ldr x7, [sp+152]
00430a18str x5, [sp+112]
00430a1cstr x6, [sp+120]
00430a20str x7, [sp+128]
00430a24stp xzr, xzr, [sp+96]
00430a28ldr x0, [sp+112]
00430a2cldr x1, [sp+120]
00430a30ldr x2, [sp+128]
00430a34mov x3, xzr
00430a38mov x4, xzr
00430a3cldp x29, x30, [sp-8]
00430a40add sp, sp, 256
00430a44ret x30
00430a48
00430a48loc_430a48:
00430a48orr x0, xzr, 8
00430a4cbl runtime.panicSliceB
00430a50
00430a50loc_430a50:
00430a50bl runtime.panicSliceB
00430a54
00430a54loc_430a54:
00430a54bl runtime.panicSliceAcap
00430a58
00430a58loc_430a58:
00430a58orr x1, xzr, 8
00430a5cmov x2, x4
00430a60bl runtime.panicSliceAlen
00430a64hint
00430a68
00430a68loc_430a68:
00430a68stp x0, x1, [sp+8]
00430a6cmov x3, x30
00430a70bl runtime.morestack_noctxt.abi0
00430a74ldp x0, x1, [sp+8]
00430a78b 0x430850
00430a7cudf 0
00430850

00430a80
00430a80github.com/bishopfox/sliver/implant/sliver/netstat.parseAddr: ; void github.com/bishopfox/sliver/implant/sliver/netstat.parseAddr(struct string s)
00430a80ldr x16, [x28+16]
00430a84sub x17, sp, 304
00430a88subs xzr, x17, x16
00430a8cb.ls 0x430ed4
00430a90sub x20, sp, 432
00430a94stp x29, x30, [x20-8]
00430a98add sp, x20, 0
00430a9csub x29, sp, 8
00430aa0str x0, [sp+440]
00430aa4str x1, [sp+448]
00430aa8str xzr, [sp+104]
00430aacstp xzr, xzr, [sp+88]
00430ab0ldr x0, [sp+440]
00430ab4ldr x1, [sp+448]
00430ab8adrp x2, 0x2df000
00430abcadd x2, x2, 376
00430ac0orr x3, xzr, 1
00430ac4bl strings.Split
00430ac8str x0, [sp+136]
00430accstr x1, [sp+144]
00430ad0str x2, [sp+152]
00430ad4str x1, [sp+72]
00430ad8subs xzr, x1, 2
00430adcb.lt 0x430ae4
00430ae0b 0x430b9c
00430ae4
00430ae4loc_430ae4:
00430ae4stp xzr, xzr, [sp+392]
00430ae8add x2, sp, 392
00430aecstr x2, [sp+320]
00430af0ldr x0, [sp+440]
00430af4ldr x1, [sp+448]
00430af8bl runtime.convTstring
00430afcstr x0, [sp+312]
00430b00ldr x2, [sp+320]
00430b04ldrsb x27, [x2]
00430b08adrp x3, 0x1c5000
00430b0cadd x3, x3, 2944
00430b10str x3, [x2]
00430b14adrp x27, 0x61b000
00430b18ldr w3, [x27+3056]
00430b1ccbz w3, 0x430b24
00430b20b 0x430b28
00430b24
00430b24loc_430b24:
00430b24b 0x430b3c
00430b28
00430b28loc_430b28:
00430b28bl runtime.gcWriteBarrier2
00430b2cstr x0, [x25]
00430b30ldr x5, [x2+8]
00430b34str x5, [x25+8]
00430b38b 0x430b3c
00430b3c
00430b3cloc_430b3c:
00430b3cstr x0, [x2+8]
00430b40ldr x2, [sp+320]
00430b44ldrsb x27, [x2]
00430b48b 0x430b4c
00430b4c
00430b4cloc_430b4c:
00430b4cstr x2, [sp+328]
00430b50orr x4, xzr, 1
00430b54str x4, [sp+336]
00430b58str x4, [sp+344]
00430b5cadrp x0, 0x28d000
00430b60add x0, x0, 1072
00430b64orr x1, xzr, 30
00430b68mov x3, x4
00430b6cbl fmt.Errorf
00430b70str x0, [sp+376]
00430b74str x1, [sp+384]
00430b78str xzr, [sp+104]
00430b7cldr x1, [sp+376]
00430b80ldr x2, [sp+384]
00430b84str x1, [sp+88]
00430b88str x2, [sp+96]
00430b8cldr x0, [sp+104]
00430b90ldp x29, x30, [sp-8]
00430b94add sp, sp, 432
00430b98ret x30
00430b9c
00430b9cloc_430b9c:
00430b9cstr xzr, [sp+112]
00430ba0stp xzr, xzr, [sp+120]
00430ba4stp xzr, xzr, [sp+160]
00430ba8ldr x1, [sp+144]
00430bacldr x5, [sp+136]
00430bb0subs xzr, x1, 0
00430bb4b.hi 0x430bbc
00430bb8b 0x430ec8
00430bbc
00430bbcloc_430bbc:
00430bbcldr x5, [x5+8]
00430bc0str x5, [sp+72]
00430bc4str x5, [sp+56]
00430bc8subs xzr, x5, 8
00430bccb.eq 0x430bd4
00430bd0b 0x430c74
00430bd4
00430bd4loc_430bd4:
00430bd4b 0x430bd8
00430bd8
00430bd8loc_430bd8:
00430bd8str xzr, [sp+352]
00430bdcstp xzr, xzr, [sp+360]
00430be0stp xzr, xzr, [sp+376]
00430be4ldr x2, [sp+136]
00430be8ldr x1, [sp+144]
00430becsubs xzr, x1, 0
00430bf0b.hi 0x430bf8
00430bf4b 0x430ec0
00430bf8
00430bf8loc_430bf8:
00430bf8ldr x0, [x2]
00430bfcldr x1, [x2+8]
00430c00str x0, [sp+296]
00430c04str x1, [sp+304]
00430c08bl github.com/bishopfox/sliver/implant/sliver/netstat.parseIPv4
00430c0cstr x0, [sp+352]
00430c10str x1, [sp+360]
00430c14str x2, [sp+368]
00430c18str x3, [sp+376]
00430c1cstr x4, [sp+384]
00430c20ldr x2, [sp+352]
00430c24ldr x3, [sp+360]
00430c28ldr x4, [sp+368]
00430c2cstr x2, [sp+232]
00430c30str x3, [sp+240]
00430c34str x4, [sp+248]
00430c38ldr x2, [sp+376]
00430c3cldr x3, [sp+384]
00430c40str x2, [sp+216]
00430c44str x3, [sp+224]
00430c48ldr x2, [sp+232]
00430c4cldr x3, [sp+240]
00430c50ldr x4, [sp+248]
00430c54str x2, [sp+112]
00430c58str x3, [sp+120]
00430c5cstr x4, [sp+128]
00430c60ldr x2, [sp+216]
00430c64ldr x3, [sp+224]
00430c68str x2, [sp+160]
00430c6cstr x3, [sp+168]
00430c70b 0x430d20
00430c74
00430c74loc_430c74:
00430c74subs xzr, x5, 32
00430c78b.eq 0x430c80
00430c7cb 0x430e60
00430c80
00430c80loc_430c80:
00430c80b 0x430c84
00430c84
00430c84loc_430c84:
00430c84str xzr, [sp+352]
00430c88stp xzr, xzr, [sp+360]
00430c8cstp xzr, xzr, [sp+376]
00430c90ldr x2, [sp+136]
00430c94ldr x1, [sp+144]
00430c98subs xzr, x1, 0
00430c9cb.hi 0x430ca4
00430ca0b 0x430eb8
00430ca4
00430ca4loc_430ca4:
00430ca4ldr x0, [x2]
00430ca8ldr x1, [x2+8]
00430cacstr x0, [sp+280]
00430cb0str x1, [sp+288]
00430cb4bl github.com/bishopfox/sliver/implant/sliver/netstat.parseIPv6
00430cb8str x0, [sp+352]
00430cbcstr x1, [sp+360]
00430cc0str x2, [sp+368]
00430cc4str x3, [sp+376]
00430cc8str x4, [sp+384]
00430cccldr x2, [sp+352]
00430cd0ldr x3, [sp+360]
00430cd4ldr x4, [sp+368]
00430cd8str x2, [sp+192]
00430cdcstr x3, [sp+200]
00430ce0str x4, [sp+208]
00430ce4ldr x2, [sp+376]
00430ce8ldr x3, [sp+384]
00430cecstr x2, [sp+176]
00430cf0str x3, [sp+184]
00430cf4ldr x2, [sp+192]
00430cf8ldr x3, [sp+200]
00430cfcldr x4, [sp+208]
00430d00str x2, [sp+112]
00430d04str x3, [sp+120]
00430d08str x4, [sp+128]
00430d0cldr x2, [sp+176]
00430d10ldr x3, [sp+184]
00430d14str x2, [sp+160]
00430d18str x3, [sp+168]
00430d1cb 0x430d20
00430d20
00430d20loc_430d20:
00430d20ldr x4, [sp+160]
00430d24cbnz x4, 0x430d2c
00430d28b 0x430d50
00430d2c
00430d2cloc_430d2c:
00430d2cstr xzr, [sp+104]
00430d30ldr x1, [sp+160]
00430d34ldr x2, [sp+168]
00430d38str x1, [sp+88]
00430d3cstr x2, [sp+96]
00430d40ldr x0, [sp+104]
00430d44ldp x29, x30, [sp-8]
00430d48add sp, sp, 432
00430d4cret x30
00430d50
00430d50loc_430d50:
00430d50stp xzr, xzr, [sp+376]
00430d54ldr x4, [sp+136]
00430d58ldr x1, [sp+144]
00430d5csubs xzr, x1, 1
00430d60b.hi 0x430d68
00430d64b 0x430eb0
00430d68
00430d68loc_430d68:
00430d68ldr x0, [x4+16]
00430d6cldr x1, [x4+24]
00430d70str x0, [sp+264]
00430d74str x1, [sp+272]
00430d78orr x2, xzr, 16
00430d7cmov x3, x2
00430d80bl strconv.ParseUint
00430d84str x0, [sp+64]
00430d88str x1, [sp+376]
00430d8cstr x2, [sp+384]
00430d90ldr x4, [sp+64]
00430d94str x4, [sp+80]
00430d98str x1, [sp+408]
00430d9cstr x2, [sp+416]
00430da0ldr x4, [sp+80]
00430da4str x4, [sp+48]
00430da8str x1, [sp+160]
00430dacstr x2, [sp+168]
00430db0cbnz x1, 0x430db8
00430db4b 0x430ddc
00430db8
00430db8loc_430db8:
00430db8str xzr, [sp+104]
00430dbcldr x1, [sp+160]
00430dc0ldr x2, [sp+168]
00430dc4str x1, [sp+88]
00430dc8str x2, [sp+96]
00430dccldr x0, [sp+104]
00430dd0ldp x29, x30, [sp-8]
00430dd4add sp, sp, 432
00430dd8ret x30
00430ddc
00430ddcloc_430ddc:
00430ddcadrp x0, 0x212000
00430de0add x0, x0, 2752
00430de4bl runtime.newobject
00430de8str x0, [sp+256]
00430decldr x1, [sp+112]
00430df0ldr x2, [sp+120]
00430df4ldr x3, [sp+128]
00430df8str x2, [x0+8]
00430dfcstr x3, [x0+16]
00430e00adrp x27, 0x61b000
00430e04ldr w2, [x27+3056]
00430e08cbz w2, 0x430e10
00430e0cb 0x430e14
00430e10
00430e10loc_430e10:
00430e10b 0x430e28
00430e14
00430e14loc_430e14:
00430e14bl runtime.gcWriteBarrier2
00430e18str x1, [x25]
00430e1cldr x3, [x0]
00430e20str x3, [x25+8]
00430e24b 0x430e28
00430e28
00430e28loc_430e28:
00430e28str x1, [x0]
00430e2cldr x3, [sp+256]
00430e30ldrsb x27, [x3]
00430e34ldr x4, [sp+48]
00430e38strh w4, [x3+24]
00430e3cldr x3, [sp+256]
00430e40str x3, [sp+104]
00430e44stp xzr, xzr, [sp+88]
00430e48ldr x0, [sp+104]
00430e4cmov x1, xzr
00430e50mov x2, xzr
00430e54ldp x29, x30, [sp-8]
00430e58add sp, sp, 432
00430e5cret x30
00430e60
00430e60loc_430e60:
00430e60b 0x430e64
00430e64
00430e64loc_430e64:
00430e64b 0x430e68
00430e68
00430e68loc_430e68:
00430e68adrp x0, 0x286000
00430e6cadd x0, x0, 3427
00430e70movz x1, 20
00430e74mov x2, xzr
00430e78mov x3, xzr
00430e7cmov x4, x3
00430e80bl fmt.Errorf
00430e84str x0, [sp+376]
00430e88str x1, [sp+384]
00430e8cstr xzr, [sp+104]
00430e90ldr x1, [sp+376]
00430e94ldr x2, [sp+384]
00430e98str x1, [sp+88]
00430e9cstr x2, [sp+96]
00430ea0ldr x0, [sp+104]
00430ea4ldp x29, x30, [sp-8]
00430ea8add sp, sp, 432
00430eacret x30
00430eb0
00430eb0loc_430eb0:
00430eb0orr x0, xzr, 1
00430eb4bl runtime.panicIndex
00430eb8
00430eb8loc_430eb8:
00430eb8mov x0, xzr
00430ebcbl runtime.panicIndex
00430ec0
00430ec0loc_430ec0:
00430ec0mov x0, xzr
00430ec4bl runtime.panicIndex
00430ec8
00430ec8loc_430ec8:
00430ec8mov x0, xzr
00430eccbl runtime.panicIndex
00430ed0hint
00430ed4
00430ed4loc_430ed4:
00430ed4stp x0, x1, [sp+8]
00430ed8mov x3, x30
00430edcbl runtime.morestack_noctxt.abi0
00430ee0ldp x0, x1, [sp+8]
00430ee4b 0x430a80
00430ee8udf 0
00430eecudf 0
00430a80

00430ef0
00430ef0github.com/bishopfox/sliver/implant/sliver/netstat.parseSocktab: ; void github.com/bishopfox/sliver/implant/sliver/netstat.parseSocktab(io.Reader r, github.com/bishopfox/sliver/implant/sliver/netstat.AcceptFn accept)
00430ef0ldr x16, [x28+16]
00430ef4sub x17, sp, 448
00430ef8subs xzr, x17, x16
00430efcb.ls 0x431610
00430f00sub x20, sp, 576
00430f04stp x29, x30, [x20-8]
00430f08add sp, x20, 0
00430f0csub x29, sp, 8
00430f10str x0, [sp+584]
00430f14str x1, [sp+592]
00430f18str x2, [sp+600]
00430f1cstr xzr, [sp+168]
00430f20stp xzr, xzr, [sp+176]
00430f24stp xzr, xzr, [sp+152]
00430f28ldr x0, [sp+584]
00430f2cldr x1, [sp+592]
00430f30bl bufio.NewScanner
00430f34str x0, [sp+272]
00430f38adrp x0, 0x24e000
00430f3cadd x0, x0, 2336
00430f40mov x1, xzr
00430f44orr x2, xzr, 4
00430f48bl runtime.makeslice
00430f4cstr x0, [sp+192]
00430f50str xzr, [sp+200]
00430f54orr x2, xzr, 4
00430f58str x2, [sp+208]
00430f5cldr x0, [sp+272]
00430f60bl bufio.(*Scanner).Scan
00430f64b 0x430f68
00430f68
00430f68loc_430f68:
00430f68ldr x0, [sp+272]
00430f6cbl bufio.(*Scanner).Scan
00430f70strb w0, [sp+87]
00430f74tbnz w0, 0, 0x430f7c
00430f78b 0x43158c
00430f7c
00430f7cloc_430f7c:
00430f7cadrp x0, 0x24e000
00430f80add x0, x0, 2336
00430f84bl runtime.newobject
00430f88str x0, [sp+560]
00430f8cadrp x27, 0x61b000
00430f90ldr w1, [x27+3056]
00430f94cbz w1, 0x430f9c
00430f98b 0x430fa0
00430f9c
00430f9cloc_430f9c:
00430f9cb 0x430fbc
00430fa0
00430fa0loc_430fa0:
00430fa0str x0, [sp+304]
00430fa4mov x1, x0
00430fa8adrp x0, 0x24e000
00430facadd x0, x0, 2336
00430fb0bl runtime.wbZero
00430fb4ldr x0, [sp+304]
00430fb8b 0x430fbc
00430fbc
00430fbcloc_430fbc:
00430fbcstp xzr, xzr, [x0]
00430fc0stp xzr, xzr, [x0+16]
00430fc4stp xzr, xzr, [x0+32]
00430fc8ldr x0, [sp+272]
00430fccbl bufio.(*Scanner).Text
00430fd0str x0, [sp+216]
00430fd4str x1, [sp+224]
00430fd8adrp x2, 0x2df000
00430fdcadd x2, x2, 1344
00430fe0orr x3, xzr, 1
00430fe4bl strings.Index
00430fe8str x0, [sp+96]
00430fectbz x0, 63, 0x430ff4
00430ff0b 0x431010
00430ff4
00430ff4loc_430ff4:
00430ff4ldr x2, [sp+224]
00430ff8subs xzr, x0, x2
00430ffcb.ls 0x431004
00431000b 0x431604
00431004
00431004loc_431004:
00431004b 0x431008
00431008
00431008loc_431008:
00431008str x0, [sp+224]
0043100cb 0x431014
00431010
00431010loc_431010:
00431010b 0x431014
00431014
00431014loc_431014:
00431014ldr x0, [sp+216]
00431018ldr x1, [sp+224]
0043101cbl strings.Fields
00431020str x0, [sp+232]
00431024str x1, [sp+240]
00431028str x2, [sp+248]
0043102cstr x1, [sp+128]
00431030subs xzr, x1, 12
00431034b.lt 0x43103c
00431038b 0x431158
0043103c
0043103cloc_43103c:
0043103cstr x1, [sp+128]
00431040stp xzr, xzr, [sp+448]
00431044stp xzr, xzr, [sp+464]
00431048add x1, sp, 448
0043104cstr x1, [sp+392]
00431050ldr x0, [sp+128]
00431054bl runtime.convT64
00431058str x0, [sp+384]
0043105cldr x1, [sp+392]
00431060ldrsb x27, [x1]
00431064adrp x2, 0x1c4000
00431068add x2, x2, 3520
0043106cstr x2, [x1]
00431070adrp x27, 0x61a000
00431074ldr w2, [x27+3056]
00431078cbz w2, 0x431080
0043107cb 0x431084
00431080
00431080loc_431080:
00431080b 0x431098
00431084
00431084loc_431084:
00431084bl runtime.gcWriteBarrier2
00431088str x0, [x25]
0043108cldr x3, [x1+8]
00431090str x3, [x25+8]
00431094b 0x431098
00431098
00431098loc_431098:
00431098str x0, [x1+8]
0043109cldr x1, [sp+240]
004310a0ldr x2, [sp+248]
004310a4ldr x0, [sp+232]
004310a8bl runtime.convTslice
004310acstr x0, [sp+376]
004310b0ldr x3, [sp+392]
004310b4ldrsb x27, [x3]
004310b8adrp x4, 0x1bc000
004310bcadd x4, x4, 2112
004310c0str x4, [x3+16]
004310c4adrp x27, 0x61a000
004310c8ldr w4, [x27+3056]
004310cccbz w4, 0x4310d4
004310d0b 0x4310d8
004310d4
004310d4loc_4310d4:
004310d4b 0x4310ec
004310d8
004310d8loc_4310d8:
004310d8bl runtime.gcWriteBarrier2
004310dcstr x0, [x25]
004310e0ldr x5, [x3+24]
004310e4str x5, [x25+8]
004310e8b 0x4310ec
004310ec
004310ecloc_4310ec:
004310ecstr x0, [x3+24]
004310f0ldr x2, [sp+392]
004310f4ldrsb x27, [x2]
004310f8b 0x4310fc
004310fc
004310fcloc_4310fc:
004310fcstr x2, [sp+400]
00431100orr x4, xzr, 2
00431104str x4, [sp+408]
00431108str x4, [sp+416]
0043110cadrp x0, 0x28f000
00431110add x0, x0, 539
00431114movz x1, 34
00431118mov x3, x4
0043111cbl fmt.Errorf
00431120str x0, [sp+432]
00431124str x1, [sp+440]
00431128str xzr, [sp+168]
0043112cstp xzr, xzr, [sp+176]
00431130ldr x3, [sp+432]
00431134ldr x4, [sp+440]
00431138str x3, [sp+152]
0043113cstr x4, [sp+160]
00431140ldr x0, [sp+168]
00431144ldr x1, [sp+176]
00431148ldr x2, [sp+184]
0043114cldp x29, x30, [sp-8]
00431150add sp, sp, 576
00431154ret x30
00431158
00431158loc_431158:
00431158str xzr, [sp+424]
0043115cstp xzr, xzr, [sp+432]
00431160ldr x2, [sp+232]
00431164ldr x1, [sp+240]
00431168subs xzr, x1, 1
0043116cb.hi 0x431174
00431170b 0x4315fc
00431174
00431174loc_431174:
00431174ldr x0, [x2+16]
00431178ldr x1, [x2+24]
0043117cstr x0, [sp+360]
00431180str x1, [sp+368]
00431184bl github.com/bishopfox/sliver/implant/sliver/netstat.parseAddr
00431188str x0, [sp+424]
0043118cstr x1, [sp+432]
00431190str x2, [sp+440]
00431194ldr x2, [sp+424]
00431198str x2, [sp+552]
0043119cldr x2, [sp+432]
004311a0ldr x3, [sp+440]
004311a4str x2, [sp+536]
004311a8str x3, [sp+544]
004311acldr x2, [sp+552]
004311b0str x2, [sp+280]
004311b4ldr x2, [sp+544]
004311b8ldr x3, [sp+536]
004311bcstr x3, [sp+256]
004311c0str x2, [sp+264]
004311c4cbnz x3, 0x4311cc
004311c8b 0x4311fc
004311cc
004311ccloc_4311cc:
004311ccstr xzr, [sp+168]
004311d0stp xzr, xzr, [sp+176]
004311d4ldr x3, [sp+256]
004311d8ldr x4, [sp+264]
004311dcstr x3, [sp+152]
004311e0str x4, [sp+160]
004311e4ldr x0, [sp+168]
004311e8ldr x1, [sp+176]
004311ecldr x2, [sp+184]
004311f0ldp x29, x30, [sp-8]
004311f4add sp, sp, 576
004311f8ret x30
004311fc
004311fcloc_4311fc:
004311fcldr x2, [sp+560]
00431200ldr x3, [sp+280]
00431204adrp x27, 0x61a000
00431208ldr w4, [x27+3056]
0043120ccbz w4, 0x431214
00431210b 0x431218
00431214
00431214loc_431214:
00431214b 0x43122c
00431218
00431218loc_431218:
00431218bl runtime.gcWriteBarrier2
0043121cstr x3, [x25]
00431220ldr x4, [x2+16]
00431224str x4, [x25+8]
00431228b 0x43122c
0043122c
0043122cloc_43122c:
0043122cstr x3, [x2+16]
00431230str xzr, [sp+424]
00431234stp xzr, xzr, [sp+432]
00431238ldr x2, [sp+232]
0043123cldr x1, [sp+240]
00431240subs xzr, x1, 2
00431244b.hi 0x43124c
00431248b 0x4315f4
0043124c
0043124cloc_43124c:
0043124cldr x0, [x2+32]
00431250ldr x1, [x2+40]
00431254str x0, [sp+344]
00431258str x1, [sp+352]
0043125cbl github.com/bishopfox/sliver/implant/sliver/netstat.parseAddr
00431260str x0, [sp+424]
00431264str x1, [sp+432]
00431268str x2, [sp+440]
0043126cldr x2, [sp+424]
00431270str x2, [sp+528]
00431274ldr x2, [sp+432]
00431278ldr x3, [sp+440]
0043127cstr x2, [sp+512]
00431280str x3, [sp+520]
00431284ldr x2, [sp+528]
00431288str x2, [sp+280]
0043128cldr x2, [sp+520]
00431290ldr x3, [sp+512]
00431294str x3, [sp+256]
00431298str x2, [sp+264]
0043129ccbnz x3, 0x4312a4
004312a0b 0x4312d4
004312a4
004312a4loc_4312a4:
004312a4str xzr, [sp+168]
004312a8stp xzr, xzr, [sp+176]
004312acldr x3, [sp+256]
004312b0ldr x4, [sp+264]
004312b4str x3, [sp+152]
004312b8str x4, [sp+160]
004312bcldr x0, [sp+168]
004312c0ldr x1, [sp+176]
004312c4ldr x2, [sp+184]
004312c8ldp x29, x30, [sp-8]
004312ccadd sp, sp, 576
004312d0ret x30
004312d4
004312d4loc_4312d4:
004312d4ldr x4, [sp+560]
004312d8ldr x5, [sp+280]
004312dcadrp x27, 0x61a000
004312e0ldr w6, [x27+3056]
004312e4cbz w6, 0x4312ec
004312e8b 0x4312f0
004312ec
004312ecloc_4312ec:
004312ecb 0x431304
004312f0
004312f0loc_4312f0:
004312f0bl runtime.gcWriteBarrier2
004312f4str x5, [x25]
004312f8ldr x6, [x4+24]
004312fcstr x6, [x25+8]
00431300b 0x431304
00431304
00431304loc_431304:
00431304str x5, [x4+24]
00431308stp xzr, xzr, [sp+432]
0043130cldr x4, [sp+232]
00431310ldr x1, [sp+240]
00431314subs xzr, x1, 3
00431318b.hi 0x431320
0043131cb 0x4315ec
00431320
00431320loc_431320:
00431320ldr x0, [x4+48]
00431324ldr x1, [x4+56]
00431328str x0, [sp+328]
0043132cstr x1, [sp+336]
00431330orr x2, xzr, 16
00431334orr x3, xzr, 8
00431338bl strconv.ParseUint
0043133cstr x0, [sp+120]
00431340str x1, [sp+432]
00431344str x2, [sp+440]
00431348ldr x4, [sp+120]
0043134cstr x4, [sp+144]
00431350str x1, [sp+496]
00431354str x2, [sp+504]
00431358ldr x4, [sp+144]
0043135cstr x4, [sp+88]
00431360str x1, [sp+256]
00431364str x2, [sp+264]
00431368cbnz x1, 0x431370
0043136cb 0x4313a0
00431370
00431370loc_431370:
00431370str xzr, [sp+168]
00431374stp xzr, xzr, [sp+176]
00431378ldr x3, [sp+256]
0043137cldr x4, [sp+264]
00431380str x3, [sp+152]
00431384str x4, [sp+160]
00431388ldr x0, [sp+168]
0043138cldr x1, [sp+176]
00431390ldr x2, [sp+184]
00431394ldp x29, x30, [sp-8]
00431398add sp, sp, 576
0043139cret x30
004313a0
004313a0loc_4313a0:
004313a0ldr x4, [sp+560]
004313a4ldr x5, [sp+88]
004313a8strb w5, [x4+32]
004313acstp xzr, xzr, [sp+432]
004313b0ldr x4, [sp+232]
004313b4ldr x1, [sp+240]
004313b8subs xzr, x1, 7
004313bcb.hi 0x4313c4
004313c0b 0x4315e4
004313c4
004313c4loc_4313c4:
004313c4ldr x0, [x4+112]
004313c8ldr x1, [x4+120]
004313ccstr x0, [sp+312]
004313d0str x1, [sp+320]
004313d4movz x2, 10
004313d8orr x3, xzr, 32
004313dcbl strconv.ParseUint
004313e0str x0, [sp+120]
004313e4str x1, [sp+432]
004313e8str x2, [sp+440]
004313ecldr x4, [sp+120]
004313f0str x4, [sp+136]
004313f4str x1, [sp+480]
004313f8str x2, [sp+488]
004313fcldr x4, [sp+136]
00431400str x4, [sp+88]
00431404str x1, [sp+256]
00431408str x2, [sp+264]
0043140ccbnz x1, 0x431414
00431410b 0x431444
00431414
00431414loc_431414:
00431414str xzr, [sp+168]
00431418stp xzr, xzr, [sp+176]
0043141cldr x3, [sp+256]
00431420ldr x4, [sp+264]
00431424str x3, [sp+152]
00431428str x4, [sp+160]
0043142cldr x0, [sp+168]
00431430ldr x1, [sp+176]
00431434ldr x2, [sp+184]
00431438ldp x29, x30, [sp-8]
0043143cadd sp, sp, 576
00431440ret x30
00431444
00431444loc_431444:
00431444ldr x2, [sp+560]
00431448ldr x3, [sp+88]
0043144cstr w3, [x2+36]
00431450ldr x2, [sp+232]
00431454ldr x1, [sp+240]
00431458subs xzr, x1, 9
0043145cb.hi 0x431464
00431460b 0x4315dc
00431464
00431464loc_431464:
00431464ldr x1, [sp+560]
00431468ldr x3, [x2+144]
0043146cldr x2, [x2+152]
00431470str x2, [x1+8]
00431474adrp x27, 0x61a000
00431478ldr w2, [x27+3056]
0043147ccbz w2, 0x431484
00431480b 0x431488
00431484
00431484loc_431484:
00431484b 0x43149c
00431488
00431488loc_431488:
00431488bl runtime.gcWriteBarrier2
0043148cstr x3, [x25]
00431490ldr x2, [x1]
00431494str x2, [x25+8]
00431498b 0x43149c
0043149c
0043149cloc_43149c:
0043149cstr x3, [x1]
004314a0ldr x26, [sp+600]
004314a4ldr x1, [x26]
004314a8ldr x0, [sp+560]
004314acblr x1
004314b0strb w0, [sp+86]
004314b4tbnz w0, 0, 0x4314bc
004314b8b 0x431580
004314bc
004314bcloc_4314bc:
004314bcldr x2, [sp+208]
004314c0ldr x0, [sp+192]
004314c4ldr x5, [sp+200]
004314c8add x1, x5, 1
004314ccsubs xzr, x2, x1
004314d0b.hs 0x4314d8
004314d4b 0x4314dc
004314d8
004314d8loc_4314d8:
004314d8b 0x4314f0
004314dc
004314dcloc_4314dc:
004314dcorr x3, xzr, 1
004314e0adrp x4, 0x24d000
004314e4add x4, x4, 2336
004314e8bl runtime.growslice
004314ecb 0x4314f0
004314f0
004314f0loc_4314f0:
004314f0ldr x3, [sp+560]
004314f4add x4, x1, x1, lsl #1
004314f8ubfm x4, x4, 60, 59
004314fcsub x4, x4, 48
00431500add x4, x0, x4
00431504adrp x27, 0x61a000
00431508ldr w5, [x27+3056]
0043150ccbz w5, 0x431514
00431510b 0x431518
00431514
00431514loc_431514:
00431514b 0x431558
00431518
00431518loc_431518:
00431518str x0, [sp+304]
0043151cstr x1, [sp+112]
00431520str x2, [sp+104]
00431524str x3, [sp+296]
00431528str x4, [sp+288]
0043152cadrp x0, 0x24d000
00431530add x0, x0, 2336
00431534mov x1, x4
00431538mov x2, x3
0043153cbl runtime.wbMove
00431540ldr x0, [sp+304]
00431544ldr x1, [sp+112]
00431548ldr x2, [sp+104]
0043154cldr x3, [sp+296]
00431550ldr x4, [sp+288]
00431554b 0x431558
00431558
00431558loc_431558:
00431558ldp x5, x6, [x3]
0043155cldp x7, x8, [x3+16]
00431560ldp x3, x9, [x3+32]
00431564stp x5, x6, [x4]
00431568stp x7, x8, [x4+16]
0043156cstp x3, x9, [x4+32]
00431570str x0, [sp+192]
00431574str x1, [sp+200]
00431578str x2, [sp+208]
0043157cb 0x431584
00431580
00431580loc_431580:
00431580b 0x431584
00431584
00431584loc_431584:
00431584b 0x431588
00431588
00431588loc_431588:
00431588b 0x430f68
0043158c
0043158cloc_43158c:
0043158cldr x0, [sp+272]
00431590bl bufio.(*Scanner).Err
00431594str x0, [sp+432]
00431598str x1, [sp+440]
0043159cldr x1, [sp+192]
004315a0ldr x2, [sp+200]
004315a4ldr x3, [sp+208]
004315a8str x1, [sp+168]
004315acstr x2, [sp+176]
004315b0str x3, [sp+184]
004315b4ldr x3, [sp+432]
004315b8ldr x4, [sp+440]
004315bcstr x3, [sp+152]
004315c0str x4, [sp+160]
004315c4ldr x0, [sp+168]
004315c8ldr x1, [sp+176]
004315ccldr x2, [sp+184]
004315d0ldp x29, x30, [sp-8]
004315d4add sp, sp, 576
004315d8ret x30
004315dc
004315dcloc_4315dc:
004315dcmovz x0, 9
004315e0bl runtime.panicIndex
004315e4
004315e4loc_4315e4:
004315e4orr x0, xzr, 7
004315e8bl runtime.panicIndex
004315ec
004315ecloc_4315ec:
004315ecorr x0, xzr, 3
004315f0bl runtime.panicIndex
004315f4
004315f4loc_4315f4:
004315f4orr x0, xzr, 2
004315f8bl runtime.panicIndex
004315fc
004315fcloc_4315fc:
004315fcorr x0, xzr, 1
00431600bl runtime.panicIndex
00431604
00431604loc_431604:
00431604mov x1, x0
00431608bl runtime.panicSliceAlen
0043160chint
00431610
00431610loc_431610:
00431610stp x0, x1, [sp+8]
00431614str x2, [sp+24]
00431618mov x3, x30
0043161cbl runtime.morestack_noctxt.abi0
00431620ldp x0, x1, [sp+8]
00431624ldr x2, [sp+24]
00431628b 0x430ef0
0043162cudf 0
00430ef0

00431630
00431630github.com/bishopfox/sliver/implant/sliver/netstat.getProcName: ; void github.com/bishopfox/sliver/implant/sliver/netstat.getProcName(struct []uint8 s)
00431630ldr x16, [x28+16]
00431634sub x17, sp, 16
00431638subs xzr, x17, x16
0043163cb.ls 0x4317d0
00431640str x30, [sp-144]!
00431644stur x29, [sp-8]
00431648sub x29, sp, 8
0043164cstr x0, [sp+152]
00431650str x1, [sp+160]
00431654str x2, [sp+168]
00431658stp xzr, xzr, [sp+88]
0043165cadd x6, sp, 63
00431660str x6, [sp+104]
00431664ldrsb x27, [x6]
00431668movz x7, 40
0043166cstrb w7, [x6]
00431670ldr x3, [sp+104]
00431674ldrsb x27, [x3]
00431678b 0x43167c
0043167c
0043167cloc_43167c:
0043167cstr x3, [sp+112]
00431680orr x5, xzr, 1
00431684str x5, [sp+120]
00431688str x5, [sp+128]
0043168cldr x0, [sp+152]
00431690ldr x1, [sp+160]
00431694ldr x2, [sp+168]
00431698mov x4, x5
0043169cbl bytes.Index
004316a0str x0, [sp+72]
004316a4tbnz x0, 63, 0x4316ac
004316a8b 0x4316c4
004316ac
004316acloc_4316ac:
004316acstp xzr, xzr, [sp+88]
004316b0mov x0, xzr
004316b4mov x1, xzr
004316b8ldur x29, [sp-8]
004316bcldr x30, [sp], 144
004316c0ret x30
004316c4
004316c4loc_4316c4:
004316c4b 0x4316c8
004316c8
004316c8loc_4316c8:
004316c8b 0x4316cc
004316cc
004316ccloc_4316cc:
004316ccadrp x3, 0x2de000
004316d0add x3, x3, 304
004316d4str x3, [sp+112]
004316d8orr x5, xzr, 1
004316dcstr x5, [sp+120]
004316e0str x5, [sp+128]
004316e4ldr x0, [sp+152]
004316e8ldr x1, [sp+160]
004316ecldr x2, [sp+168]
004316f0mov x4, x5
004316f4bl bytes.LastIndex
004316f8str x0, [sp+64]
004316fcldr x6, [sp+72]
00431700tbnz x6, 63, 0x431708
00431704b 0x431720
00431708
00431708loc_431708:
00431708stp xzr, xzr, [sp+88]
0043170cmov x0, xzr
00431710mov x1, xzr
00431714ldur x29, [sp-8]
00431718ldr x30, [sp], 144
0043171cret x30
00431720
00431720loc_431720:
00431720ldr x3, [sp+72]
00431724subs xzr, x0, x3
00431728b.lt 0x431730
0043172cb 0x431748
00431730
00431730loc_431730:
00431730stp xzr, xzr, [sp+88]
00431734mov x0, xzr
00431738mov x1, xzr
0043173cldur x29, [sp-8]
00431740ldr x30, [sp], 144
00431744ret x30
00431748
00431748loc_431748:
00431748ldr x3, [sp+72]
0043174cadd x4, x3, 1
00431750str x4, [sp+80]
00431754ldr x2, [sp+168]
00431758ldr x5, [sp+152]
0043175csubs xzr, x0, x2
00431760b.ls 0x431768
00431764b 0x4317c4
00431768
00431768loc_431768:
00431768subs xzr, x0, x4
0043176cb.hs 0x431774
00431770b 0x4317b8
00431774
00431774loc_431774:
00431774sub x6, x0, x3
00431778sub x3, x2, x3
0043177csub x2, x6, 1
00431780sub x3, x3, 1
00431784sub x6, xzr, x3
00431788and x4, x4, x6, asr #63
0043178cadd x1, x5, x4
00431790str x1, [sp+112]
00431794str x2, [sp+120]
00431798str x3, [sp+128]
0043179cmov x0, xzr
004317a0bl runtime.slicebytetostring
004317a4str x0, [sp+88]
004317a8str x1, [sp+96]
004317acldur x29, [sp-8]
004317b0ldr x30, [sp], 144
004317b4ret x30
004317b8
004317b8loc_4317b8:
004317b8mov x1, x0
004317bcmov x0, x4
004317c0bl runtime.panicSliceB
004317c4
004317c4loc_4317c4:
004317c4mov x1, x0
004317c8bl runtime.panicSliceAcap
004317cchint
004317d0
004317d0loc_4317d0:
004317d0stp x0, x1, [sp+8]
004317d4str x2, [sp+24]
004317d8mov x3, x30
004317dcbl runtime.morestack_noctxt.abi0
004317e0ldp x0, x1, [sp+8]
004317e4ldr x2, [sp+24]
004317e8b 0x431630
004317ecudf 0
00431630