Similarity

00433590
00433590github.com/bishopfox/sliver/implant/sliver/ps.getProcessArchitecture: ; void github.com/bishopfox/sliver/implant/sliver/ps.getProcessArchitecture(int pid)
00433590ldr x16, [x28+16]
00433594sub x17, sp, 224
00433598subs xzr, x17, x16
0043359cb.ls 0x433960
004335a0sub x20, sp, 352
004335a4stp x29, x30, [x20-8]
004335a8add sp, x20, 0
004335acsub x29, sp, 8
004335b0str x0, [sp+360]
004335b4stp xzr, xzr, [sp+128]
004335b8stp xzr, xzr, [sp+112]
004335bcstp xzr, xzr, [sp+312]
004335c0add x1, sp, 312
004335c4str x1, [sp+256]
004335c8ldr x0, [sp+360]
004335ccbl runtime.convT64
004335d0str x0, [sp+248]
004335d4ldr x1, [sp+256]
004335d8ldrsb x27, [x1]
004335dcadrp x2, 0x1c2000
004335e0add x2, x2, 3520
004335e4str x2, [x1]
004335e8adrp x27, 0x618000
004335ecldr w2, [x27+3056]
004335f0cbz w2, 0x4335f8
004335f4b 0x4335fc
004335f8
004335f8loc_4335f8:
004335f8b 0x433610
004335fc
004335fcloc_4335fc:
004335fcbl runtime.gcWriteBarrier2
00433600str x0, [x25]
00433604ldr x5, [x1+8]
00433608str x5, [x25+8]
0043360cb 0x433610
00433610
00433610loc_433610:
00433610str x0, [x1+8]
00433614ldr x2, [sp+256]
00433618ldrsb x27, [x2]
0043361cb 0x433620
00433620
00433620loc_433620:
00433620str x2, [sp+264]
00433624orr x4, xzr, 1
00433628str x4, [sp+272]
0043362cstr x4, [sp+280]
00433630adrp x0, 0x280000
00433634add x0, x0, 648
00433638orr x1, xzr, 12
0043363cmov x3, x4
00433640bl fmt.Sprintf
00433644str x0, [sp+176]
00433648str x1, [sp+184]
0043364cstr xzr, [sp+304]
00433650stp xzr, xzr, [sp+288]
00433654ldr x0, [sp+176]
00433658ldr x1, [sp+184]
0043365cbl os.Open
00433660str x0, [sp+304]
00433664str x1, [sp+288]
00433668str x2, [sp+296]
0043366cldr x5, [sp+304]
00433670str x5, [sp+240]
00433674ldr x5, [sp+296]
00433678ldr x6, [sp+288]
0043367cstr x6, [sp+224]
00433680str x5, [sp+232]
00433684ldr x5, [sp+240]
00433688str x5, [sp+168]
0043368cldr x5, [sp+232]
00433690ldr x6, [sp+224]
00433694str x6, [sp+192]
00433698str x5, [sp+200]
0043369ccbnz x6, 0x4336a4
004336a0b 0x4336cc
004336a4
004336a4loc_4336a4:
004336a4stp xzr, xzr, [sp+128]
004336a8ldr x3, [sp+200]
004336acldr x2, [sp+192]
004336b0str x2, [sp+112]
004336b4str x3, [sp+120]
004336b8ldr x0, [sp+128]
004336bcldr x1, [sp+136]
004336c0ldp x29, x30, [sp-8]
004336c4add sp, sp, 352
004336c8ret x30
004336cc
004336ccloc_4336cc:
004336ccstp xzr, xzr, [sp+288]
004336d0ldr x0, [sp+168]
004336d4movz x1, 18
004336d8mov x2, xzr
004336dcbl os.(*File).Seek
004336e0str x0, [sp+96]
004336e4str x1, [sp+288]
004336e8str x2, [sp+296]
004336ecldr x3, [sp+96]
004336f0str x3, [sp+80]
004336f4str x1, [sp+208]
004336f8str x2, [sp+216]
004336fcstr x1, [sp+192]
00433700str x2, [sp+200]
00433704cbnz x1, 0x43370c
00433708b 0x433734
0043370c
0043370cloc_43370c:
0043370cstp xzr, xzr, [sp+128]
00433710ldr x3, [sp+200]
00433714ldr x2, [sp+192]
00433718str x2, [sp+112]
0043371cstr x3, [sp+120]
00433720ldr x0, [sp+128]
00433724ldr x1, [sp+136]
00433728ldp x29, x30, [sp-8]
0043372cadd sp, sp, 352
00433730ret x30
00433734
00433734loc_433734:
00433734adrp x0, 0x1c2000
00433738add x0, x0, 3072
0043373corr x1, xzr, 2
00433740mov x2, x1
00433744bl runtime.makeslice
00433748str x0, [sp+144]
0043374corr x5, xzr, 2
00433750str x5, [sp+152]
00433754str x5, [sp+160]
00433758ldr x3, [sp+168]
0043375cstr x3, [sp+304]
00433760stp xzr, xzr, [sp+288]
00433764ldr x2, [sp+144]
00433768ldr x3, [sp+152]
0043376cldr x4, [sp+160]
00433770ldr x1, [sp+304]
00433774adrp x0, 0x2e0000
00433778add x0, x0, 2456
0043377cbl io.ReadAtLeast
00433780str x0, [sp+88]
00433784str x1, [sp+288]
00433788str x2, [sp+296]
0043378cldr x3, [sp+88]
00433790str x3, [sp+104]
00433794str x1, [sp+328]
00433798str x2, [sp+336]
0043379cldr x3, [sp+104]
004337a0str x3, [sp+72]
004337a4str x1, [sp+192]
004337a8str x2, [sp+200]
004337acldr x0, [sp+168]
004337b0bl os.(*File).Close
004337b4ldr x3, [sp+192]
004337b8subs xzr, x3, 0
004337bccset x4, ne
004337c0strb w4, [sp+71]
004337c4cbnz x3, 0x4337cc
004337c8b 0x4337d0
004337cc
004337ccloc_4337cc:
004337ccb 0x4337e4
004337d0
004337d0loc_4337d0:
004337d0ldr x4, [sp+72]
004337d4subs xzr, x4, 2
004337d8cset x4, lt
004337dcstrb w4, [sp+71]
004337e0b 0x4337e4
004337e4
004337e4loc_4337e4:
004337e4ldrb w4, [sp+71]
004337e8tbnz w4, 0, 0x4337f0
004337ecb 0x433814
004337f0
004337f0loc_4337f0:
004337f0stp xzr, xzr, [sp+128]
004337f4stp xzr, xzr, [sp+112]
004337f8ldr x1, [sp+136]
004337fcldr x0, [sp+128]
00433800mov x2, xzr
00433804mov x3, xzr
00433808ldp x29, x30, [sp-8]
0043380cadd sp, sp, 352
00433810ret x30
00433814
00433814loc_433814:
00433814ldr x1, [sp+152]
00433818ldr x4, [sp+144]
0043381csubs xzr, x1, 0
00433820b.hi 0x433828
00433824b 0x433954
00433828
00433828loc_433828:
00433828ldrb w4, [x4]
0043382csubs wzr, w4, 179
00433830b.eq 0x433838
00433834b 0x43386c
00433838
00433838loc_433838:
00433838adrp x4, 0x27d000
0043383cadd x4, x4, 3969
00433840str x4, [sp+128]
00433844orr x4, xzr, 7
00433848str x4, [sp+136]
0043384cstp xzr, xzr, [sp+112]
00433850ldr x0, [sp+128]
00433854ldr x1, [sp+136]
00433858mov x2, xzr
0043385cmov x3, xzr
00433860ldp x29, x30, [sp-8]
00433864add sp, sp, 352
00433868ret x30
0043386c
0043386cloc_43386c:
0043386cldr x1, [sp+152]
00433870ldr x4, [sp+144]
00433874subs xzr, x1, 0
00433878b.hi 0x433880
0043387cb 0x43394c
00433880
00433880loc_433880:
00433880ldrb w4, [x4]
00433884subs wzr, w4, 3
00433888b.eq 0x433890
0043388cb 0x4338c4
00433890
00433890loc_433890:
00433890adrp x4, 0x27d000
00433894add x4, x4, 552
00433898str x4, [sp+128]
0043389corr x4, xzr, 3
004338a0str x4, [sp+136]
004338a4stp xzr, xzr, [sp+112]
004338a8ldr x0, [sp+128]
004338acldr x1, [sp+136]
004338b0mov x2, xzr
004338b4mov x3, xzr
004338b8ldp x29, x30, [sp-8]
004338bcadd sp, sp, 352
004338c0ret x30
004338c4
004338c4loc_4338c4:
004338c4ldr x1, [sp+152]
004338c8ldr x4, [sp+144]
004338ccsubs xzr, x1, 0
004338d0b.hi 0x4338d8
004338d4b 0x433944
004338d8
004338d8loc_4338d8:
004338d8ldrb w4, [x4]
004338dcsubs wzr, w4, 62
004338e0b.eq 0x4338e8
004338e4b 0x43391c
004338e8
004338e8loc_4338e8:
004338e8adrp x4, 0x27d000
004338ecadd x4, x4, 2923
004338f0str x4, [sp+128]
004338f4orr x4, xzr, 6
004338f8str x4, [sp+136]
004338fcstp xzr, xzr, [sp+112]
00433900ldr x0, [sp+128]
00433904ldr x1, [sp+136]
00433908mov x2, xzr
0043390cmov x3, xzr
00433910ldp x29, x30, [sp-8]
00433914add sp, sp, 352
00433918ret x30
0043391c
0043391cloc_43391c:
0043391cstp xzr, xzr, [sp+128]
00433920ldr x3, [sp+200]
00433924ldr x2, [sp+192]
00433928str x2, [sp+112]
0043392cstr x3, [sp+120]
00433930ldr x0, [sp+128]
00433934ldr x1, [sp+136]
00433938ldp x29, x30, [sp-8]
0043393cadd sp, sp, 352
00433940ret x30
00433944
00433944loc_433944:
00433944mov x0, xzr
00433948bl runtime.panicIndex
0043394c
0043394cloc_43394c:
0043394cmov x0, xzr
00433950bl runtime.panicIndex
00433954
00433954loc_433954:
00433954mov x0, xzr
00433958bl runtime.panicIndex
0043395chint
00433960
00433960loc_433960:
00433960str x0, [sp+8]
00433964mov x3, x30
00433968bl runtime.morestack_noctxt.abi0
0043396cldr x0, [sp+8]
00433970b 0x433590
00433974udf 0
00433978udf 0
0043397cudf 0
00433590

00433980
00433980github.com/bishopfox/sliver/implant/sliver/ps.(*UnixProcess).Refresh: ; void github.com/bishopfox/sliver/implant/sliver/ps.(*UnixProcess).Refresh(github.com/bishopfox/sliver/implant/sliver/ps.UnixProcess * p)
00433980ldr x16, [x28+16]
00433984sub x17, sp, 400
00433988subs xzr, x17, x16
0043398cb.ls 0x433e18
00433990sub x20, sp, 528
00433994stp x29, x30, [x20-8]
00433998add sp, x20, 0
0043399csub x29, sp, 8
004339a0str x0, [sp+536]
004339a4stp xzr, xzr, [sp+104]
004339a8stp xzr, xzr, [sp+488]
004339acadd x1, sp, 488
004339b0str x1, [sp+304]
004339b4ldr x1, [sp+536]
004339b8ldrsb x27, [x1]
004339bcldr x1, [x1]
004339c0str x1, [sp+80]
004339c4ldr x0, [sp+80]
004339c8bl runtime.convT64
004339ccstr x0, [sp+296]
004339d0ldr x1, [sp+304]
004339d4ldrsb x27, [x1]
004339d8adrp x2, 0x1c2000
004339dcadd x2, x2, 3520
004339e0str x2, [x1]
004339e4adrp x27, 0x618000
004339e8ldr w2, [x27+3056]
004339eccbz w2, 0x4339f4
004339f0b 0x4339f8
004339f4
004339f4loc_4339f4:
004339f4b 0x433a0c
004339f8
004339f8loc_4339f8:
004339f8bl runtime.gcWriteBarrier2
004339fcstr x0, [x25]
00433a00ldr x5, [x1+8]
00433a04str x5, [x25+8]
00433a08b 0x433a0c
00433a0c
00433a0cloc_433a0c:
00433a0cstr x0, [x1+8]
00433a10ldr x2, [sp+304]
00433a14ldrsb x27, [x2]
00433a18b 0x433a1c
00433a1c
00433a1cloc_433a1c:
00433a1cstr x2, [sp+312]
00433a20orr x4, xzr, 1
00433a24str x4, [sp+320]
00433a28str x4, [sp+328]
00433a2cadrp x0, 0x280000
00433a30add x0, x0, 2304
00433a34movz x1, 13
00433a38mov x3, x4
00433a3cbl fmt.Sprintf
00433a40str x0, [sp+120]
00433a44str x1, [sp+128]
00433a48str xzr, [sp+464]
00433a4cstp xzr, xzr, [sp+472]
00433a50stp xzr, xzr, [sp+448]
00433a54ldr x0, [sp+120]
00433a58ldr x1, [sp+128]
00433a5cbl os.ReadFile
00433a60str x0, [sp+464]
00433a64str x1, [sp+472]
00433a68str x2, [sp+480]
00433a6cstr x3, [sp+448]
00433a70str x4, [sp+456]
00433a74ldr x5, [sp+472]
00433a78ldr x6, [sp+480]
00433a7cldr x7, [sp+464]
00433a80str x7, [sp+208]
00433a84str x5, [sp+216]
00433a88str x6, [sp+224]
00433a8cldr x5, [sp+448]
00433a90ldr x6, [sp+456]
00433a94str x5, [sp+192]
00433a98str x6, [sp+200]
00433a9cldr x5, [sp+208]
00433aa0ldr x6, [sp+216]
00433aa4ldr x7, [sp+224]
00433aa8str x5, [sp+152]
00433aacstr x6, [sp+160]
00433ab0str x7, [sp+168]
00433ab4ldr x1, [sp+200]
00433ab8ldr x0, [sp+192]
00433abcstr x0, [sp+136]
00433ac0str x1, [sp+144]
00433ac4cbnz x0, 0x433acc
00433ac8b 0x433ae0
00433acc
00433accloc_433acc:
00433accstr x0, [sp+104]
00433ad0str x1, [sp+112]
00433ad4ldp x29, x30, [sp-8]
00433ad8add sp, sp, 528
00433adcret x30
00433ae0
00433ae0loc_433ae0:
00433ae0ldr x1, [sp+152]
00433ae4ldr x2, [sp+160]
00433ae8mov x0, xzr
00433aecbl runtime.slicebytetostring
00433af0str x0, [sp+176]
00433af4str x1, [sp+184]
00433af8movz x2, 40
00433afcbl strings.IndexRune
00433b00str x0, [sp+88]
00433b04add x3, x0, 1
00433b08str x3, [sp+64]
00433b0cldr x1, [sp+184]
00433b10ldr x4, [sp+176]
00433b14subs xzr, x1, x3
00433b18b.hs 0x433b20
00433b1cb 0x433e0c
00433b20
00433b20loc_433b20:
00433b20sub x5, x1, x0
00433b24sub x1, x5, 1
00433b28sub x5, xzr, x1
00433b2cand x3, x3, x5, asr #63
00433b30add x0, x4, x3
00433b34str x0, [sp+432]
00433b38str x1, [sp+440]
00433b3cmovz x2, 41
00433b40bl strings.IndexRune
00433b44str x0, [sp+72]
00433b48ldr x3, [sp+64]
00433b4cadd x1, x3, x0
00433b50str x1, [sp+88]
00433b54ldr x0, [sp+64]
00433b58ldr x2, [sp+184]
00433b5cldr x3, [sp+176]
00433b60subs xzr, x2, x1
00433b64b.hs 0x433b6c
00433b68b 0x433e08
00433b6c
00433b6cloc_433b6c:
00433b6csubs xzr, x0, x1
00433b70b.ls 0x433b78
00433b74b 0x433e04
00433b78
00433b78loc_433b78:
00433b78sub x7, x1, x0
00433b7csub x8, xzr, x7
00433b80and x8, x0, x8, asr #63
00433b84add x8, x3, x8
00433b88str x8, [sp+432]
00433b8cstr x7, [sp+440]
00433b90ldr x9, [sp+536]
00433b94ldrsb x27, [x9]
00433b98str x7, [x9+88]
00433b9cadrp x27, 0x618000
00433ba0ldr w7, [x27+3056]
00433ba4cbz w7, 0x433bac
00433ba8b 0x433bb0
00433bac
00433bacloc_433bac:
00433bacb 0x433bc4
00433bb0
00433bb0loc_433bb0:
00433bb0bl runtime.gcWriteBarrier2
00433bb4str x8, [x25]
00433bb8ldr x7, [x9+80]
00433bbcstr x7, [x25+8]
00433bc0b 0x433bc4
00433bc4
00433bc4loc_433bc4:
00433bc4str x8, [x9+80]
00433bc8ldr x7, [sp+72]
00433bccldr x8, [sp+64]
00433bd0add x7, x8, x7
00433bd4add x0, x7, 2
00433bd8str x0, [sp+88]
00433bdcldr x1, [sp+184]
00433be0ldr x8, [sp+176]
00433be4subs xzr, x1, x0
00433be8b.hs 0x433bf0
00433becb 0x433e00
00433bf0
00433bf0loc_433bf0:
00433bf0sub x7, x1, x7
00433bf4sub x7, x7, 2
00433bf8sub x9, xzr, x7
00433bfcand x9, x0, x9, asr #63
00433c00add x8, x8, x9
00433c04str x8, [sp+176]
00433c08str x7, [sp+184]
00433c0cldr x7, [sp+536]
00433c10ldrsb x27, [x7]
00433c14add x7, x7, 16
00433c18str x7, [sp+424]
00433c1cldr x7, [sp+536]
00433c20ldrsb x27, [x7]
00433c24add x7, x7, 8
00433c28str x7, [sp+416]
00433c2cldr x7, [sp+536]
00433c30ldrsb x27, [x7]
00433c34add x7, x7, 24
00433c38str x7, [sp+408]
00433c3cldr x7, [sp+536]
00433c40ldrsb x27, [x7]
00433c44add x7, x7, 32
00433c48str x7, [sp+400]
00433c4cstp xzr, xzr, [sp+448]
00433c50stp xzr, xzr, [sp+336]
00433c54stp xzr, xzr, [sp+352]
00433c58stp xzr, xzr, [sp+368]
00433c5cstp xzr, xzr, [sp+384]
00433c60add x7, sp, 336
00433c64str x7, [sp+264]
00433c68ldr x7, [sp+424]
00433c6cstr x7, [sp+256]
00433c70ldr x8, [sp+264]
00433c74ldrsb x27, [x8]
00433c78adrp x9, 0x1b0000
00433c7cadd x9, x9, 3328
00433c80str x9, [x8]
00433c84adrp x27, 0x618000
00433c88ldr w9, [x27+3056]
00433c8ccbz w9, 0x433c94
00433c90b 0x433c98
00433c94
00433c94loc_433c94:
00433c94b 0x433cac
00433c98
00433c98loc_433c98:
00433c98bl runtime.gcWriteBarrier2
00433c9cstr x7, [x25]
00433ca0ldr x9, [x8+8]
00433ca4str x9, [x25+8]
00433ca8b 0x433cac
00433cac
00433cacloc_433cac:
00433cacstr x7, [x8+8]
00433cb0ldr x7, [sp+416]
00433cb4str x7, [sp+248]
00433cb8ldr x8, [sp+264]
00433cbcldrsb x27, [x8]
00433cc0adrp x9, 0x1b0000
00433cc4add x9, x9, 3584
00433cc8str x9, [x8+16]
00433cccadrp x27, 0x618000
00433cd0ldr w9, [x27+3056]
00433cd4cbz w9, 0x433cdc
00433cd8b 0x433ce0
00433cdc
00433cdcloc_433cdc:
00433cdcb 0x433cf4
00433ce0
00433ce0loc_433ce0:
00433ce0bl runtime.gcWriteBarrier2
00433ce4str x7, [x25]
00433ce8ldr x9, [x8+24]
00433cecstr x9, [x25+8]
00433cf0b 0x433cf4
00433cf4
00433cf4loc_433cf4:
00433cf4str x7, [x8+24]
00433cf8ldr x7, [sp+408]
00433cfcstr x7, [sp+240]
00433d00ldr x8, [sp+264]
00433d04ldrsb x27, [x8]
00433d08adrp x9, 0x1b0000
00433d0cadd x9, x9, 3584
00433d10str x9, [x8+32]
00433d14adrp x27, 0x618000
00433d18ldr w9, [x27+3056]
00433d1ccbz w9, 0x433d24
00433d20b 0x433d28
00433d24
00433d24loc_433d24:
00433d24b 0x433d3c
00433d28
00433d28loc_433d28:
00433d28bl runtime.gcWriteBarrier2
00433d2cstr x7, [x25]
00433d30ldr x9, [x8+40]
00433d34str x9, [x25+8]
00433d38b 0x433d3c
00433d3c
00433d3cloc_433d3c:
00433d3cstr x7, [x8+40]
00433d40ldr x7, [sp+400]
00433d44str x7, [sp+232]
00433d48ldr x8, [sp+264]
00433d4cldrsb x27, [x8]
00433d50adrp x9, 0x1b0000
00433d54add x9, x9, 3584
00433d58str x9, [x8+48]
00433d5cadrp x27, 0x618000
00433d60ldr w9, [x27+3056]
00433d64cbz w9, 0x433d6c
00433d68b 0x433d70
00433d6c
00433d6cloc_433d6c:
00433d6cb 0x433d84
00433d70
00433d70loc_433d70:
00433d70bl runtime.gcWriteBarrier2
00433d74str x7, [x25]
00433d78ldr x9, [x8+56]
00433d7cstr x9, [x25+8]
00433d80b 0x433d84
00433d84
00433d84loc_433d84:
00433d84str x7, [x8+56]
00433d88ldr x4, [sp+264]
00433d8cldrsb x27, [x4]
00433d90b 0x433d94
00433d94
00433d94loc_433d94:
00433d94str x4, [sp+272]
00433d98orr x6, xzr, 4
00433d9cstr x6, [sp+280]
00433da0str x6, [sp+288]
00433da4ldr x0, [sp+176]
00433da8ldr x1, [sp+184]
00433dacadrp x2, 0x27f000
00433db0add x2, x2, 2813
00433db4movz x3, 11
00433db8mov x5, x6
00433dbcbl fmt.Sscanf
00433dc0str x0, [sp+88]
00433dc4str x1, [sp+448]
00433dc8str x2, [sp+456]
00433dccldr x7, [sp+88]
00433dd0str x7, [sp+96]
00433dd4str x1, [sp+504]
00433dd8str x2, [sp+512]
00433ddcstr x1, [sp+136]
00433de0str x2, [sp+144]
00433de4str x1, [sp+104]
00433de8str x2, [sp+112]
00433decmov x0, x1
00433df0mov x1, x2
00433df4ldp x29, x30, [sp-8]
00433df8add sp, sp, 528
00433dfcret x30
00433e00
00433e00loc_433e00:
00433e00bl runtime.panicSliceB
00433e04
00433e04loc_433e04:
00433e04bl runtime.panicSliceB
00433e08
00433e08loc_433e08:
00433e08bl runtime.panicSliceAlen
00433e0c
00433e0cloc_433e0c:
00433e0cmov x0, x3
00433e10bl runtime.panicSliceB
00433e14hint
00433e18
00433e18loc_433e18:
00433e18str x0, [sp+8]
00433e1cmov x3, x30
00433e20bl runtime.morestack_noctxt.abi0
00433e24ldr x0, [sp+8]
00433e28b 0x433980
00433e2cudf 0
00433980

00433e30
00433e30github.com/bishopfox/sliver/implant/sliver/ps.processes: ; void github.com/bishopfox/sliver/implant/sliver/ps.processes(bool fullInfo)
00433e30ldr x16, [x28+16]
00433e34sub x17, sp, 688
00433e38subs xzr, x17, x16
00433e3cb.ls 0x434734
00433e40sub x20, sp, 816
00433e44stp x29, x30, [x20-8]
00433e48add sp, x20, 0
00433e4csub x29, sp, 8
00433e50strb w0, [sp+824]
00433e54str xzr, [sp+208]
00433e58stp xzr, xzr, [sp+216]
00433e5cstp xzr, xzr, [sp+192]
00433e60str xzr, [sp+616]
00433e64add x27, sp, 600
00433e68stp xzr, xzr, [x27]
00433e6cadrp x0, 0x27d000
00433e70add x0, x0, 1757
00433e74movz x1, 5
00433e78bl os.Open
00433e7cstr x0, [sp+616]
00433e80str x1, [sp+600]
00433e84str x2, [sp+608]
00433e88ldr x2, [sp+616]
00433e8cstr x2, [sp+424]
00433e90ldr x2, [sp+600]
00433e94ldr x3, [sp+608]
00433e98str x2, [sp+408]
00433e9cstr x3, [sp+416]
00433ea0ldr x2, [sp+424]
00433ea4str x2, [sp+368]
00433ea8ldr x2, [sp+416]
00433eacldr x3, [sp+408]
00433eb0str x3, [sp+352]
00433eb4str x2, [sp+360]
00433eb8cbnz x3, 0x433ec0
00433ebcb 0x433efc
00433ec0
00433ec0loc_433ec0:
00433ec0str xzr, [sp+208]
00433ec4stp xzr, xzr, [sp+216]
00433ec8ldr x0, [sp+352]
00433eccldr x1, [sp+360]
00433ed0str x0, [sp+192]
00433ed4str x1, [sp+200]
00433ed8bl runtime.deferreturn
00433edcldr x3, [sp+192]
00433ee0ldr x0, [sp+208]
00433ee4ldr x1, [sp+216]
00433ee8ldr x4, [sp+200]
00433eecldr x2, [sp+224]
00433ef0ldp x29, x30, [sp-8]
00433ef4add sp, sp, 816
00433ef8ret x30
00433efc
00433efcloc_433efc:
00433efcldr x1, [sp+368]
00433f00str x1, [sp+400]
00433f04stp xzr, xzr, [sp+504]
00433f08add x1, sp, 504
00433f0cstr x1, [sp+520]
00433f10ldrsb x27, [x1]
00433f14adrp x2, 4096
00433f18add x2, x2, 1872
00433f1cstr x2, [x1]
00433f20ldrsb x27, [x1]
00433f24ldr x2, [sp+400]
00433f28adrp x27, 0x618000
00433f2cldr w3, [x27+3056]
00433f30cbz w3, 0x433f38
00433f34b 0x433f3c
00433f38
00433f38loc_433f38:
00433f38b 0x433f50
00433f3c
00433f3cloc_433f3c:
00433f3cbl runtime.gcWriteBarrier2
00433f40str x2, [x25]
00433f44ldr x3, [x1+8]
00433f48str x3, [x25+8]
00433f4cb 0x433f50
00433f50
00433f50loc_433f50:
00433f50str x2, [x1+8]
00433f54str x1, [sp+120]
00433f58add x0, sp, 96
00433f5cbl runtime.deferprocStack
00433f60subs xzr, x0, 0
00433f64b.ne 0x433f94
00433f68b 0x433f6c
00433f6c
00433f6cloc_433f6c:
00433f6cadrp x0, 0x208000
00433f70add x0, x0, 1888
00433f74mov x1, xzr
00433f78movz x2, 50
00433f7cbl runtime.makeslice
00433f80str x0, [sp+232]
00433f84str xzr, [sp+240]
00433f88movz x3, 50
00433f8cstr x3, [sp+248]
00433f90b 0x433fb8
00433f94
00433f94loc_433f94:
00433f94bl runtime.deferreturn
00433f98ldr x3, [sp+192]
00433f9cldr x0, [sp+208]
00433fa0ldr x1, [sp+216]
00433fa4ldr x4, [sp+200]
00433fa8ldr x2, [sp+224]
00433facldp x29, x30, [sp-8]
00433fb0add sp, sp, 816
00433fb4ret x30
00433fb8
00433fb8loc_433fb8:
00433fb8b 0x433fbc
00433fbc
00433fbcloc_433fbc:
00433fbcstr xzr, [sp+576]
00433fc0add x27, sp, 584
00433fc4stp xzr, xzr, [x27]
00433fc8add x27, sp, 600
00433fccstp xzr, xzr, [x27]
00433fd0ldr x0, [sp+368]
00433fd4movz x1, 10
00433fd8bl os.(*File).Readdir
00433fdcstr x0, [sp+576]
00433fe0str x1, [sp+584]
00433fe4str x2, [sp+592]
00433fe8str x3, [sp+600]
00433fecstr x4, [sp+608]
00433ff0ldr x2, [sp+576]
00433ff4ldr x3, [sp+584]
00433ff8ldr x4, [sp+592]
00433ffcstr x2, [sp+784]
00434000str x3, [sp+792]
00434004str x4, [sp+800]
00434008ldr x2, [sp+600]
0043400cldr x3, [sp+608]
00434010str x2, [sp+768]
00434014str x3, [sp+776]
00434018ldr x2, [sp+784]
0043401cldr x3, [sp+792]
00434020ldr x4, [sp+800]
00434024str x2, [sp+280]
00434028str x3, [sp+288]
0043402cstr x4, [sp+296]
00434030ldr x0, [sp+768]
00434034ldr x1, [sp+776]
00434038str x0, [sp+336]
0043403cstr x1, [sp+344]
00434040adrp x27, 0x5ed000
00434044ldr x2, [x27+1520]
00434048subs xzr, x2, x0
0043404cb.eq 0x434054
00434050b 0x4340c0
00434054
00434054loc_434054:
00434054adrp x27, 0x5ed000
00434058ldr x2, [x27+1528]
0043405cbl runtime.ifaceeq
00434060tbnz w0, 0, 0x434068
00434064b 0x4340bc
00434068
00434068loc_434068:
00434068b 0x43406c
0043406c
0043406cloc_43406c:
0043406cstp xzr, xzr, [sp+432]
00434070ldr x0, [sp+232]
00434074ldr x1, [sp+240]
00434078ldr x2, [sp+248]
0043407cstr x0, [sp+208]
00434080str x1, [sp+216]
00434084str x2, [sp+224]
00434088ldr x0, [sp+432]
0043408cldr x1, [sp+440]
00434090str x0, [sp+192]
00434094str x1, [sp+200]
00434098bl runtime.deferreturn
0043409cldr x3, [sp+192]
004340a0ldr x0, [sp+208]
004340a4ldr x1, [sp+216]
004340a8ldr x4, [sp+200]
004340acldr x2, [sp+224]
004340b0ldp x29, x30, [sp-8]
004340b4add sp, sp, 816
004340b8ret x30
004340bc
004340bcloc_4340bc:
004340bcb 0x4340c4
004340c0
004340c0loc_4340c0:
004340c0b 0x4340c4
004340c4
004340c4loc_4340c4:
004340c4ldr x2, [sp+336]
004340c8cbnz x2, 0x4340d0
004340ccb 0x43411c
004340d0
004340d0loc_4340d0:
004340d0ldr x0, [sp+336]
004340d4ldr x1, [sp+344]
004340d8str x0, [sp+488]
004340dcstr x1, [sp+496]
004340e0str xzr, [sp+208]
004340e4stp xzr, xzr, [sp+216]
004340e8ldr x0, [sp+488]
004340ecldr x1, [sp+496]
004340f0str x0, [sp+192]
004340f4str x1, [sp+200]
004340f8bl runtime.deferreturn
004340fcldr x3, [sp+192]
00434100ldr x0, [sp+208]
00434104ldr x1, [sp+216]
00434108ldr x4, [sp+200]
0043410cldr x2, [sp+224]
00434110ldp x29, x30, [sp-8]
00434114add sp, sp, 816
00434118ret x30
0043411c
0043411cloc_43411c:
0043411cldr x2, [sp+288]
00434120ldr x3, [sp+280]
00434124ldr x4, [sp+296]
00434128str x3, [sp+576]
0043412cstr x2, [sp+584]
00434130str x4, [sp+592]
00434134str xzr, [sp+160]
00434138str x2, [sp+152]
0043413cldr x2, [sp+576]
00434140str x2, [sp+144]
00434144b 0x434148
00434148
00434148loc_434148:
00434148ldr x2, [sp+152]
0043414cldr x3, [sp+160]
00434150subs xzr, x2, x3
00434154b.gt 0x43415c
00434158b 0x434700
0043415c
0043415cloc_43415c:
0043415cldr x1, [sp+144]
00434160str x1, [sp+480]
00434164ldr x1, [sp+480]
00434168ldr x2, [x1]
0043416cldr x0, [x1+8]
00434170str x2, [sp+304]
00434174str x0, [sp+312]
00434178ldrsb x27, [x2]
0043417cldr x1, [x2+24]
00434180blr x1
00434184strb w0, [sp+87]
00434188tbnz w0, 0, 0x434190
0043418cb 0x4346e0
00434190
00434190loc_434190:
00434190ldr x1, [sp+304]
00434194ldrsb x27, [x1]
00434198ldr x1, [x1+48]
0043419cldr x0, [sp+312]
004341a0blr x1
004341a4str x0, [sp+264]
004341a8str x1, [sp+272]
004341acsubs xzr, x1, 0
004341b0b.hi 0x4341b8
004341b4b 0x434728
004341b8
004341b8loc_4341b8:
004341b8ldrb w4, [x0]
004341bcsubs wzr, w4, 48
004341c0cset x4, lo
004341c4strb w4, [sp+87]
004341c8b.lo 0x4341d0
004341ccb 0x4341d4
004341d0
004341d0loc_4341d0:
004341d0b 0x4341fc
004341d4
004341d4loc_4341d4:
004341d4ldr x1, [sp+272]
004341d8ldr x4, [sp+264]
004341dcsubs xzr, x1, 0
004341e0b.hi 0x4341e8
004341e4b 0x434720
004341e8
004341e8loc_4341e8:
004341e8ldrb w4, [x4]
004341ecsubs wzr, w4, 57
004341f0cset x4, hi
004341f4strb w4, [sp+87]
004341f8b 0x4341fc
004341fc
004341fcloc_4341fc:
004341fcldrb w4, [sp+87]
00434200tbnz w4, 0, 0x434208
00434204b 0x43420c
00434208
00434208loc_434208:
00434208b 0x4346e4
0043420c
0043420cloc_43420c:
0043420cadd x27, sp, 600
00434210stp xzr, xzr, [x27]
00434214ldr x0, [sp+264]
00434218ldr x1, [sp+272]
0043421cmovz x2, 10
00434220mov x3, xzr
00434224bl strconv.ParseInt
00434228str x0, [sp+176]
0043422cstr x1, [sp+600]
00434230str x2, [sp+608]
00434234ldr x4, [sp+176]
00434238str x4, [sp+184]
0043423cstr x1, [sp+752]
00434240str x2, [sp+760]
00434244ldr x4, [sp+184]
00434248str x4, [sp+88]
0043424cstr x1, [sp+320]
00434250str x2, [sp+328]
00434254cbnz x1, 0x43425c
00434258b 0x434260
0043425c
0043425cloc_43425c:
0043425cb 0x4346e4
00434260
00434260loc_434260:
00434260str xzr, [sp+568]
00434264add x27, sp, 600
00434268stp xzr, xzr, [x27]
0043426cldr x0, [sp+88]
00434270bl github.com/bishopfox/sliver/implant/sliver/ps.newUnixProcess
00434274str x0, [sp+568]
00434278str x1, [sp+600]
0043427cstr x2, [sp+608]
00434280ldr x1, [sp+568]
00434284str x1, [sp+744]
00434288ldr x1, [sp+600]
0043428cldr x2, [sp+608]
00434290str x1, [sp+728]
00434294str x2, [sp+736]
00434298ldr x1, [sp+744]
0043429cstr x1, [sp+256]
004342a0ldr x1, [sp+736]
004342a4ldr x2, [sp+728]
004342a8str x2, [sp+320]
004342acstr x1, [sp+328]
004342b0cbnz x2, 0x4342b8
004342b4b 0x4342bc
004342b8
004342b8loc_4342b8:
004342b8b 0x4346e4
004342bc
004342bcloc_4342bc:
004342bcldrb w5, [sp+824]
004342c0tbnz w5, 0, 0x4342c8
004342c4b 0x434640
004342c8
004342c8loc_4342c8:
004342c8add x27, sp, 552
004342ccstp xzr, xzr, [x27]
004342d0add x27, sp, 600
004342d4stp xzr, xzr, [x27]
004342d8ldr x0, [sp+88]
004342dcbl github.com/bishopfox/sliver/implant/sliver/ps.getProcessOwner
004342e0str x0, [sp+552]
004342e4str x1, [sp+560]
004342e8str x2, [sp+600]
004342ecstr x3, [sp+608]
004342f0ldr x1, [sp+552]
004342f4ldr x2, [sp+560]
004342f8str x1, [sp+712]
004342fcstr x2, [sp+720]
00434300ldr x1, [sp+600]
00434304ldr x2, [sp+608]
00434308str x1, [sp+696]
0043430cstr x2, [sp+704]
00434310ldr x1, [sp+256]
00434314ldrsb x27, [x1]
00434318ldr x2, [sp+712]
0043431cldr x3, [sp+720]
00434320str x3, [x1+104]
00434324adrp x27, 0x617000
00434328ldr w3, [x27+3056]
0043432ccbz w3, 0x434334
00434330b 0x434338
00434334
00434334loc_434334:
00434334b 0x43434c
00434338
00434338loc_434338:
00434338bl runtime.gcWriteBarrier2
0043433cstr x2, [x25]
00434340ldr x3, [x1+96]
00434344str x3, [x25+8]
00434348b 0x43434c
0043434c
0043434cloc_43434c:
0043434cstr x2, [x1+96]
00434350ldr x2, [sp+704]
00434354ldr x3, [sp+696]
00434358str x3, [sp+320]
0043435cstr x2, [sp+328]
00434360cbnz x3, 0x434368
00434364b 0x43436c
00434368
00434368loc_434368:
00434368b 0x4346e4
0043436c
0043436cloc_43436c:
0043436cstr xzr, [sp+528]
00434370add x27, sp, 536
00434374stp xzr, xzr, [x27]
00434378add x27, sp, 600
0043437cstp xzr, xzr, [x27]
00434380ldr x0, [sp+88]
00434384bl github.com/bishopfox/sliver/implant/sliver/ps.getProcessCmdLine
00434388str x0, [sp+528]
0043438cstr x1, [sp+536]
00434390str x2, [sp+544]
00434394str x3, [sp+600]
00434398str x4, [sp+608]
0043439cldr x1, [sp+528]
004343a0ldr x2, [sp+536]
004343a4ldr x3, [sp+544]
004343a8str x1, [sp+672]
004343acstr x2, [sp+680]
004343b0str x3, [sp+688]
004343b4ldr x1, [sp+600]
004343b8ldr x2, [sp+608]
004343bcstr x1, [sp+656]
004343c0str x2, [sp+664]
004343c4ldr x1, [sp+672]
004343c8ldr x2, [sp+680]
004343ccldr x3, [sp+688]
004343d0str x1, [sp+376]
004343d4str x2, [sp+384]
004343d8str x3, [sp+392]
004343dcldr x1, [sp+664]
004343e0ldr x2, [sp+656]
004343e4str x2, [sp+320]
004343e8str x1, [sp+328]
004343eccbnz x2, 0x4343f4
004343f0b 0x4343f8
004343f4
004343f4loc_4343f4:
004343f4b 0x434508
004343f8
004343f8loc_4343f8:
004343f8ldr x2, [sp+256]
004343fcldrsb x27, [x2]
00434400ldr x3, [sp+376]
00434404ldr x4, [sp+384]
00434408ldr x5, [sp+392]
0043440cstr x4, [x2+64]
00434410str x5, [x2+72]
00434414adrp x27, 0x617000
00434418ldr w4, [x27+3056]
0043441ccbz w4, 0x434424
00434420b 0x434428
00434424
00434424loc_434424:
00434424b 0x43443c
00434428
00434428loc_434428:
00434428bl runtime.gcWriteBarrier2
0043442cstr x3, [x25]
00434430ldr x4, [x2+56]
00434434str x4, [x25+8]
00434438b 0x43443c
0043443c
0043443cloc_43443c:
0043443cstr x3, [x2+56]
00434440ldr x1, [sp+384]
00434444ldr x2, [sp+376]
00434448subs xzr, x1, 0
0043444cb.hi 0x434454
00434450b 0x434718
00434454
00434454loc_434454:
00434454ldr x2, [x2+8]
00434458subs xzr, x2, 0
0043445ccset x3, ne
00434460strb w3, [sp+87]
00434464cbnz x2, 0x43446c
00434468b 0x434498
0043446c
0043446cloc_43446c:
0043446cldr x1, [sp+384]
00434470ldr x2, [sp+376]
00434474subs xzr, x1, 0
00434478b.hi 0x434480
0043447cb 0x434710
00434480
00434480loc_434480:
00434480ldr x2, [x2+8]
00434484str x2, [sp+168]
00434488subs xzr, x2, 0
0043448ccset x2, ne
00434490strb w2, [sp+87]
00434494b 0x43449c
00434498
00434498loc_434498:
00434498b 0x43449c
0043449c
0043449cloc_43449c:
0043449cldrb w2, [sp+87]
004344a0tbnz w2, 0, 0x4344a8
004344a4b 0x434500
004344a8
004344a8loc_4344a8:
004344a8ldr x2, [sp+376]
004344acldr x1, [sp+384]
004344b0subs xzr, x1, 0
004344b4b.hi 0x4344bc
004344b8b 0x434708
004344bc
004344bcloc_4344bc:
004344bcldr x1, [sp+256]
004344c0ldrsb x27, [x1]
004344c4ldr x3, [x2]
004344c8ldr x2, [x2+8]
004344ccstr x2, [x1+88]
004344d0adrp x27, 0x617000
004344d4ldr w2, [x27+3056]
004344d8cbz w2, 0x4344e0
004344dcb 0x4344e4
004344e0
004344e0loc_4344e0:
004344e0b 0x4344f8
004344e4
004344e4loc_4344e4:
004344e4bl runtime.gcWriteBarrier2
004344e8str x3, [x25]
004344ecldr x2, [x1+80]
004344f0str x2, [x25+8]
004344f4b 0x4344f8
004344f8
004344f8loc_4344f8:
004344f8str x3, [x1+80]
004344fcb 0x434504
00434500
00434500loc_434500:
00434500b 0x434504
00434504
00434504loc_434504:
00434504b 0x434508
00434508
00434508loc_434508:
00434508add x27, sp, 552
0043450cstp xzr, xzr, [x27]
00434510add x27, sp, 600
00434514stp xzr, xzr, [x27]
00434518ldr x0, [sp+88]
0043451cbl github.com/bishopfox/sliver/implant/sliver/ps.getProcessArchitecture
00434520str x0, [sp+552]
00434524str x1, [sp+560]
00434528str x2, [sp+600]
0043452cstr x3, [sp+608]
00434530ldr x1, [sp+552]
00434534ldr x2, [sp+560]
00434538str x1, [sp+640]
0043453cstr x2, [sp+648]
00434540ldr x1, [sp+600]
00434544ldr x2, [sp+608]
00434548str x1, [sp+624]
0043454cstr x2, [sp+632]
00434550ldr x1, [sp+256]
00434554ldrsb x27, [x1]
00434558ldr x2, [sp+640]
0043455cldr x3, [sp+648]
00434560str x3, [x1+48]
00434564adrp x27, 0x617000
00434568ldr w3, [x27+3056]
0043456ccbz w3, 0x434574
00434570b 0x434578
00434574
00434574loc_434574:
00434574b 0x43458c
00434578
00434578loc_434578:
00434578bl runtime.gcWriteBarrier2
0043457cstr x2, [x25]
00434580ldr x5, [x1+40]
00434584str x5, [x25+8]
00434588b 0x43458c
0043458c
0043458cloc_43458c:
0043458cstr x2, [x1+40]
00434590ldr x5, [sp+624]
00434594ldr x6, [sp+632]
00434598str x5, [sp+320]
0043459cstr x6, [sp+328]
004345a0ldr x5, [sp+256]
004345a4str x5, [sp+568]
004345a8adrp x6, 0x2e5000
004345acadd x6, x6, 1872
004345b0str x6, [sp+448]
004345b4str x5, [sp+456]
004345b8ldr x2, [sp+248]
004345bcldr x0, [sp+232]
004345c0ldr x5, [sp+240]
004345c4add x1, x5, 1
004345c8subs xzr, x2, x1
004345ccb.hs 0x4345d4
004345d0b 0x4345d8
004345d4
004345d4loc_4345d4:
004345d4b 0x4345ec
004345d8
004345d8loc_4345d8:
004345d8orr x3, xzr, 1
004345dcadrp x4, 0x207000
004345e0add x4, x4, 1888
004345e4bl runtime.growslice
004345e8b 0x4345ec
004345ec
004345ecloc_4345ec:
004345ecsub x3, x1, 1
004345f0add x4, x0, x3, lsl #4
004345f4ubfm x3, x3, 60, 59
004345f8ldr x5, [sp+456]
004345fcldr x6, [sp+448]
00434600str x6, [x0+x3]
00434604adrp x27, 0x617000
00434608ldr w3, [x27+3056]
0043460ccbz w3, 0x434614
00434610b 0x434618
00434614
00434614loc_434614:
00434614b 0x43462c
00434618
00434618loc_434618:
00434618bl runtime.gcWriteBarrier2
0043461cstr x5, [x25]
00434620ldr x3, [x4+8]
00434624str x3, [x25+8]
00434628b 0x43462c
0043462c
0043462cloc_43462c:
0043462cstr x5, [x4+8]
00434630str x0, [sp+232]
00434634str x1, [sp+240]
00434638str x2, [sp+248]
0043463cb 0x4346e4
00434640
00434640loc_434640:
00434640ldr x5, [sp+256]
00434644str x5, [sp+568]
00434648adrp x6, 0x2e5000
0043464cadd x6, x6, 1872
00434650str x6, [sp+464]
00434654str x5, [sp+472]
00434658ldr x2, [sp+248]
0043465cldr x0, [sp+232]
00434660ldr x5, [sp+240]
00434664add x1, x5, 1
00434668subs xzr, x2, x1
0043466cb.hs 0x434674
00434670b 0x434678
00434674
00434674loc_434674:
00434674b 0x43468c
00434678
00434678loc_434678:
00434678orr x3, xzr, 1
0043467cadrp x4, 0x207000
00434680add x4, x4, 1888
00434684bl runtime.growslice
00434688b 0x43468c
0043468c
0043468cloc_43468c:
0043468csub x3, x1, 1
00434690add x4, x0, x3, lsl #4
00434694ubfm x3, x3, 60, 59
00434698ldr x5, [sp+472]
0043469cldr x6, [sp+464]
004346a0str x6, [x0+x3]
004346a4adrp x27, 0x617000
004346a8ldr w3, [x27+3056]
004346accbz w3, 0x4346b4
004346b0b 0x4346b8
004346b4
004346b4loc_4346b4:
004346b4b 0x4346cc
004346b8
004346b8loc_4346b8:
004346b8bl runtime.gcWriteBarrier2
004346bcstr x5, [x25]
004346c0ldr x3, [x4+8]
004346c4str x3, [x25+8]
004346c8b 0x4346cc
004346cc
004346ccloc_4346cc:
004346ccstr x5, [x4+8]
004346d0str x0, [sp+232]
004346d4str x1, [sp+240]
004346d8str x2, [sp+248]
004346dcb 0x4346e4
004346e0
004346e0loc_4346e0:
004346e0b 0x4346e4
004346e4
004346e4loc_4346e4:
004346e4ldr x2, [sp+160]
004346e8add x2, x2, 1
004346ecstr x2, [sp+160]
004346f0ldr x2, [sp+480]
004346f4add x2, x2, 16
004346f8str x2, [sp+144]
004346fcb 0x434148
00434700
00434700loc_434700:
00434700b 0x434704
00434704
00434704loc_434704:
00434704b 0x433fb8
00434708
00434708loc_434708:
00434708mov x0, xzr
0043470cbl runtime.panicIndex
00434710
00434710loc_434710:
00434710mov x0, xzr
00434714bl runtime.panicIndex
00434718
00434718loc_434718:
00434718mov x0, xzr
0043471cbl runtime.panicIndex
00434720
00434720loc_434720:
00434720mov x0, xzr
00434724bl runtime.panicIndex
00434728
00434728loc_434728:
00434728mov x0, xzr
0043472cbl runtime.panicIndex
00434730hint
00434734
00434734loc_434734:
00434734strb w0, [sp+8]
00434738mov x3, x30
0043473cbl runtime.morestack_noctxt.abi0
00434740ldrb w0, [sp+8]
00434744b 0x433e30
00434748udf 0
0043474cudf 0
00433e30

00434750
00434750github.com/bishopfox/sliver/implant/sliver/ps.processes.deferwrap1: ; void github.com/bishopfox/sliver/implant/sliver/ps.processes.deferwrap1(void)
00434750ldr x16, [x28+16]
00434754subs xzr, sp, x16
00434758b.ls 0x434788
0043475cstr x30, [sp-32]!
00434760stur x29, [sp-8]
00434764sub x29, sp, 8
00434768ldr x16, [x28+32]
0043476ccbnz x16, 0x434794
00434770
00434770loc_434770:
00434770ldr x0, [x26+8]
00434774str x0, [sp+16]
00434778bl os.(*File).Close
0043477cldur x29, [sp-8]
00434780ldr x30, [sp], 32
00434784ret x30
00434788
00434788loc_434788:
00434788mov x3, x30
0043478cbl runtime.morestack.abi0
00434790b 0x434750
00434794
00434794loc_434794:
00434794ldr x17, [x16]
00434798add x20, sp, 40
0043479csubs xzr, x20, x17
004347a0b.ne 0x434770
004347a4add x20, sp, 8
004347a8str x20, [x16]
004347acb 0x434770
00434750

004347b0
004347b0github.com/bishopfox/sliver/implant/sliver/ps.newUnixProcess: ; void github.com/bishopfox/sliver/implant/sliver/ps.newUnixProcess(int pid)
004347b0ldr x16, [x28+16]
004347b4subs xzr, sp, x16
004347b8b.ls 0x434878
004347bcstr x30, [sp-112]!
004347c0stur x29, [sp-8]
004347c4sub x29, sp, 8
004347c8str x0, [sp+120]
004347ccstr xzr, [sp+56]
004347d0stp xzr, xzr, [sp+40]
004347d4adrp x0, 0x25a000
004347d8add x0, x0, 3776
004347dcbl runtime.newobject
004347e0str x0, [sp+80]
004347e4adrp x27, 0x617000
004347e8ldr w1, [x27+3056]
004347eccbz w1, 0x4347f4
004347f0b 0x4347f8
004347f4
004347f4loc_4347f4:
004347f4b 0x434814
004347f8
004347f8loc_4347f8:
004347f8str x0, [sp+72]
004347fcmov x1, x0
00434800adrp x0, 0x25a000
00434804add x0, x0, 3776
00434808bl runtime.wbZero
0043480cldr x0, [sp+72]
00434810b 0x434814
00434814
00434814loc_434814:
00434814mov x20, x0
00434818adr x27, 16
0043481cstp x29, x27, [sp-24]
00434820sub x29, sp, 24
00434824bl fn_87cf4
00434828sub x29, sp, 8
0043482cldr x1, [sp+80]
00434830ldrsb x27, [x1]
00434834ldr x2, [sp+120]
00434838str x2, [x1]
0043483cldr x0, [sp+80]
00434840str x0, [sp+64]
00434844bl github.com/bishopfox/sliver/implant/sliver/ps.(*UnixProcess).Refresh
00434848str x0, [sp+88]
0043484cstr x1, [sp+96]
00434850ldr x1, [sp+64]
00434854str x1, [sp+56]
00434858ldr x1, [sp+88]
0043485cldr x2, [sp+96]
00434860str x1, [sp+40]
00434864str x2, [sp+48]
00434868ldr x0, [sp+56]
0043486cldur x29, [sp-8]
00434870ldr x30, [sp], 112
00434874ret x30
00434878
00434878loc_434878:
00434878str x0, [sp+8]
0043487cmov x3, x30
00434880bl runtime.morestack_noctxt.abi0
00434884ldr x0, [sp+8]
00434888b 0x4347b0
0043488cudf 0
004347b0

00434890
00434890gopkg.in/jcmturner/gokrb5.v7/crypto/common.ZeroPad: ; void gopkg.in/jcmturner/gokrb5.v7/crypto/common.ZeroPad(struct []uint8 b, int m)
00434890ldr x16, [x28+16]
00434894sub x17, sp, 96
00434898subs xzr, x17, x16
0043489cb.ls 0x434aec
004348a0str x30, [sp-224]!
004348a4stur x29, [sp-8]
004348a8sub x29, sp, 8
004348acstr x0, [sp+232]
004348b0str x1, [sp+240]
004348b4str x2, [sp+248]
004348b8str x3, [sp+256]
004348bcstr xzr, [sp+120]
004348c0stp xzr, xzr, [sp+128]
004348c4stp xzr, xzr, [sp+104]
004348c8ldr x5, [sp+256]
004348ccsubs xzr, x5, 0
004348d0b.le 0x4348d8
004348d4b 0x434920
004348d8
004348d8loc_4348d8:
004348d8adrp x0, 0x28f000
004348dcadd x0, x0, 3757
004348e0movz x1, 39
004348e4bl errors.New
004348e8str x0, [sp+168]
004348ecstr x1, [sp+176]
004348f0str xzr, [sp+120]
004348f4stp xzr, xzr, [sp+128]
004348f8ldr x3, [sp+168]
004348fcldr x4, [sp+176]
00434900str x3, [sp+104]
00434904str x4, [sp+112]
00434908ldr x0, [sp+120]
0043490cldr x1, [sp+128]
00434910ldr x2, [sp+136]
00434914ldur x29, [sp-8]
00434918ldr x30, [sp], 224
0043491cret x30
00434920
00434920loc_434920:
00434920ldr x5, [sp+232]
00434924subs xzr, x5, 0
00434928cset x6, ne
0043492ceor x6, x6, 1
00434930strb w6, [sp+63]
00434934cbnz x5, 0x43493c
00434938b 0x434954
0043493c
0043493cloc_43493c:
0043493cldr x5, [sp+240]
00434940str x5, [sp+80]
00434944subs xzr, x5, 0
00434948cset x5, eq
0043494cstrb w5, [sp+63]
00434950b 0x434958
00434954
00434954loc_434954:
00434954b 0x434958
00434958
00434958loc_434958:
00434958ldrb w5, [sp+63]
0043495ctbnz w5, 0, 0x434964
00434960b 0x4349ac
00434964
00434964loc_434964:
00434964adrp x0, 0x28a000
00434968add x0, x0, 4080
0043496corr x1, xzr, 32
00434970bl errors.New
00434974str x0, [sp+168]
00434978str x1, [sp+176]
0043497cstr xzr, [sp+120]
00434980stp xzr, xzr, [sp+128]
00434984ldr x3, [sp+168]
00434988ldr x4, [sp+176]
0043498cstr x3, [sp+104]
00434990str x4, [sp+112]
00434994ldr x0, [sp+120]
00434998ldr x1, [sp+128]
0043499cldr x2, [sp+136]
004349a0ldur x29, [sp-8]
004349a4ldr x30, [sp], 224
004349a8ret x30
004349ac
004349acloc_4349ac:
004349acldr x5, [sp+240]
004349b0str x5, [sp+80]
004349b4ldr x6, [sp+256]
004349b8cbnz x6, 0x4349c0
004349bcb 0x434ae4
004349c0
004349c0loc_4349c0:
004349c0sdiv x27, x5, x6
004349c4msub x5, x27, x6, x5
004349c8str x5, [sp+72]
004349cccbnz x5, 0x4349d4
004349d0b 0x434aa4
004349d4
004349d4loc_4349d4:
004349d4ldr x3, [sp+256]
004349d8sub x2, x3, x5
004349dcstr x2, [sp+64]
004349e0adrp x0, 0x1c1000
004349e4add x0, x0, 3072
004349e8mov x1, x2
004349ecbl runtime.makeslice
004349f0ldr x3, [sp+64]
004349f4ldr x4, [sp+64]
004349f8str x0, [sp+144]
004349fcstr x3, [sp+152]
00434a00str x4, [sp+160]
00434a04ldr x2, [sp+248]
00434a08ldr x0, [sp+232]
00434a0cldr x3, [sp+240]
00434a10str x0, [sp+192]
00434a14str x3, [sp+200]
00434a18str x2, [sp+208]
00434a1cldr x4, [sp+152]
00434a20add x1, x3, x4
00434a24str x1, [sp+96]
00434a28subs xzr, x2, x1
00434a2cb.hs 0x434a34
00434a30b 0x434a3c
00434a34
00434a34loc_434a34:
00434a34str x1, [sp+200]
00434a38b 0x434a5c
00434a3c
00434a3cloc_434a3c:
00434a3cldr x3, [sp+152]
00434a40adrp x4, 0x1c1000
00434a44add x4, x4, 3072
00434a48bl runtime.growslice
00434a4cstr x0, [sp+192]
00434a50str x1, [sp+200]
00434a54str x2, [sp+208]
00434a58b 0x434a5c
00434a5c
00434a5cloc_434a5c:
00434a5cldr x3, [sp+152]
00434a60str x3, [sp+88]
00434a64ldr x3, [sp+96]
00434a68ldr x4, [sp+152]
00434a6csub x3, x3, x4
00434a70ldr x4, [sp+192]
00434a74add x0, x4, x3
00434a78str x0, [sp+184]
00434a7cldr x2, [sp+88]
00434a80ldr x1, [sp+144]
00434a84bl runtime.memmove
00434a88ldr x3, [sp+192]
00434a8cldr x4, [sp+200]
00434a90ldr x5, [sp+208]
00434a94str x3, [sp+232]
00434a98str x4, [sp+240]
00434a9cstr x5, [sp+248]
00434aa0b 0x434aa8
00434aa4
00434aa4loc_434aa4:
00434aa4b 0x434aa8
00434aa8
00434aa8loc_434aa8:
00434aa8ldr x5, [sp+232]
00434aacldr x6, [sp+240]
00434ab0ldr x7, [sp+248]
00434ab4str x5, [sp+120]
00434ab8str x6, [sp+128]
00434abcstr x7, [sp+136]
00434ac0stp xzr, xzr, [sp+104]
00434ac4ldr x0, [sp+120]
00434ac8ldr x1, [sp+128]
00434accldr x2, [sp+136]
00434ad0mov x3, xzr
00434ad4mov x4, xzr
00434ad8ldur x29, [sp-8]
00434adcldr x30, [sp], 224
00434ae0ret x30
00434ae4
00434ae4loc_434ae4:
00434ae4bl runtime.panicdivide
00434ae8hint
00434aec
00434aecloc_434aec:
00434aecstp x0, x1, [sp+8]
00434af0stp x2, x3, [sp+24]
00434af4mov x3, x30
00434af8bl runtime.morestack_noctxt.abi0
00434afcldp x0, x1, [sp+8]
00434b00ldp x2, x3, [sp+24]
00434b04b 0x434890
00434b08udf 0
00434b0cudf 0
00434890

00434b10
00434b10gopkg.in/jcmturner/gokrb5.v7/crypto/common.GetHash: ; void gopkg.in/jcmturner/gokrb5.v7/crypto/common.GetHash(struct []uint8 pt, struct []uint8 key, struct []uint8 usage, gopkg.in/jcmturner/gokrb5.v7/crypto/etype.EType etype)
00434b10ldr x16, [x28+16]
00434b14sub x17, sp, 336
00434b18subs xzr, x17, x16
00434b1cb.ls 0x434e98
00434b20sub x20, sp, 464
00434b24stp x29, x30, [x20-8]
00434b28add sp, x20, 0
00434b2csub x29, sp, 8
00434b30str x0, [sp+472]
00434b34str x1, [sp+480]
00434b38str x2, [sp+488]
00434b3cstr x3, [sp+496]
00434b40str x4, [sp+504]
00434b44str x5, [sp+512]
00434b48str x6, [sp+520]
00434b4cstr x7, [sp+528]
00434b50str x8, [sp+536]
00434b54str x9, [sp+544]
00434b58str x10, [sp+552]
00434b5cstr xzr, [sp+120]
00434b60stp xzr, xzr, [sp+128]
00434b64stp xzr, xzr, [sp+104]
00434b68str xzr, [sp+432]
00434b6cstp xzr, xzr, [sp+440]
00434b70stp xzr, xzr, [sp+416]
00434b74ldr x4, [sp+520]
00434b78ldr x2, [sp+504]
00434b7cldr x5, [sp+528]
00434b80ldr x3, [sp+512]
00434b84ldr x6, [sp+536]
00434b88ldr x7, [sp+544]
00434b8cldrsb x27, [x7]
00434b90ldr x7, [x7+40]
00434b94ldr x1, [sp+496]
00434b98ldr x0, [sp+552]
00434b9cblr x7
00434ba0str x0, [sp+432]
00434ba4str x1, [sp+440]
00434ba8str x2, [sp+448]
00434bacstr x3, [sp+416]
00434bb0str x4, [sp+424]
00434bb4ldr x7, [sp+432]
00434bb8ldr x8, [sp+440]
00434bbcldr x9, [sp+448]
00434bc0str x7, [sp+240]
00434bc4str x8, [sp+248]
00434bc8str x9, [sp+256]
00434bccldr x7, [sp+416]
00434bd0ldr x8, [sp+424]
00434bd4str x7, [sp+224]
00434bd8str x8, [sp+232]
00434bdcldr x7, [sp+240]
00434be0ldr x8, [sp+248]
00434be4ldr x9, [sp+256]
00434be8str x7, [sp+184]
00434becstr x8, [sp+192]
00434bf0str x9, [sp+200]
00434bf4ldr x7, [sp+232]
00434bf8ldr x8, [sp+224]
00434bfcstr x8, [sp+208]
00434c00str x7, [sp+216]
00434c04cbnz x8, 0x434c0c
00434c08b 0x434cf4
00434c0c
00434c0cloc_434c0c:
00434c0cstp xzr, xzr, [sp+400]
00434c10add x5, sp, 400
00434c14str x5, [sp+336]
00434c18ldr x5, [sp+208]
00434c1cldr x6, [sp+216]
00434c20str x5, [sp+320]
00434c24str x6, [sp+328]
00434c28str x5, [sp+312]
00434c2cldr x5, [sp+312]
00434c30cbnz x5, 0x434c38
00434c34b 0x434c48
00434c38
00434c38loc_434c38:
00434c38ldr x5, [sp+312]
00434c3cldr x5, [x5+8]
00434c40str x5, [sp+312]
00434c44b 0x434c4c
00434c48
00434c48loc_434c48:
00434c48b 0x434c4c
00434c4c
00434c4cloc_434c4c:
00434c4cldr x5, [sp+336]
00434c50ldrsb x27, [x5]
00434c54ldr x6, [sp+328]
00434c58ldr x7, [sp+312]
00434c5cstr x7, [x5]
00434c60adrp x27, 0x617000
00434c64ldr w7, [x27+3056]
00434c68cbz w7, 0x434c70
00434c6cb 0x434c74
00434c70
00434c70loc_434c70:
00434c70b 0x434c88
00434c74
00434c74loc_434c74:
00434c74bl runtime.gcWriteBarrier2
00434c78str x6, [x25]
00434c7cldr x7, [x5+8]
00434c80str x7, [x25+8]
00434c84b 0x434c88
00434c88
00434c88loc_434c88:
00434c88str x6, [x5+8]
00434c8cldr x2, [sp+336]
00434c90ldrsb x27, [x2]
00434c94b 0x434c98
00434c98
00434c98loc_434c98:
00434c98str x2, [sp+344]
00434c9corr x4, xzr, 1
00434ca0str x4, [sp+352]
00434ca4str x4, [sp+360]
00434ca8adrp x0, 0x28e000
00434cacadd x0, x0, 2319
00434cb0movz x1, 37
00434cb4mov x3, x4
00434cb8bl fmt.Errorf
00434cbcstr x0, [sp+416]
00434cc0str x1, [sp+424]
00434cc4str xzr, [sp+120]
00434cc8stp xzr, xzr, [sp+128]
00434cccldr x3, [sp+416]
00434cd0ldr x4, [sp+424]
00434cd4str x3, [sp+104]
00434cd8str x4, [sp+112]
00434cdcldr x0, [sp+120]
00434ce0ldr x1, [sp+128]
00434ce4ldr x2, [sp+136]
00434ce8ldp x29, x30, [sp-8]
00434cecadd sp, sp, 464
00434cf0ret x30
00434cf4
00434cf4loc_434cf4:
00434cf4ldr x1, [sp+544]
00434cf8ldrsb x27, [x1]
00434cfcldr x1, [x1+120]
00434d00ldr x0, [sp+552]
00434d04blr x1
00434d08str x0, [sp+392]
00434d0cldr x2, [sp+192]
00434d10ldr x3, [sp+200]
00434d14ldr x1, [sp+184]
00434d18bl crypto/hmac.New
00434d1cstr x0, [sp+168]
00434d20str x1, [sp+176]
00434d24ldr x2, [sp+480]
00434d28str x2, [sp+96]
00434d2cadrp x0, 0x1c1000
00434d30add x0, x0, 3072
00434d34mov x1, x2
00434d38bl runtime.makeslice
00434d3cldr x1, [sp+96]
00434d40ldr x2, [sp+96]
00434d44str x0, [sp+144]
00434d48str x1, [sp+152]
00434d4cstr x2, [sp+160]
00434d50str x0, [sp+288]
00434d54str x1, [sp+296]
00434d58str x2, [sp+304]
00434d5cldr x1, [sp+480]
00434d60ldr x2, [sp+472]
00434d64ldr x3, [sp+488]
00434d68str x2, [sp+264]
00434d6cstr x1, [sp+272]
00434d70str x3, [sp+280]
00434d74ldr x2, [sp+296]
00434d78str x2, [sp+80]
00434d7csubs xzr, x2, x1
00434d80b.gt 0x434d88
00434d84b 0x434d90
00434d88
00434d88loc_434d88:
00434d88str x1, [sp+80]
00434d8cb 0x434d94
00434d90
00434d90loc_434d90:
00434d90b 0x434d94
00434d94
00434d94loc_434d94:
00434d94ldr x4, [sp+264]
00434d98ldr x5, [sp+288]
00434d9csubs xzr, x4, x5
00434da0b.ne 0x434da8
00434da4b 0x434dc4
00434da8
00434da8loc_434da8:
00434da8ldr x3, [sp+80]
00434dacstr x3, [sp+72]
00434db0ldr x2, [sp+72]
00434db4ldr x0, [sp+288]
00434db8ldr x1, [sp+264]
00434dbcbl runtime.memmove
00434dc0b 0x434dc8
00434dc4
00434dc4loc_434dc4:
00434dc4b 0x434dc8
00434dc8
00434dc8loc_434dc8:
00434dc8ldr x2, [sp+152]
00434dccldr x3, [sp+160]
00434dd0ldr x4, [sp+168]
00434dd4ldrsb x27, [x4]
00434dd8ldr x4, [x4+56]
00434ddcldr x1, [sp+144]
00434de0ldr x0, [sp+176]
00434de4blr x4
00434de8ldr x4, [sp+168]
00434decldrsb x27, [x4]
00434df0ldr x4, [x4+48]
00434df4ldr x0, [sp+176]
00434df8mov x1, xzr
00434dfcmov x2, xzr
00434e00mov x3, x2
00434e04blr x4
00434e08str x0, [sp+432]
00434e0cstr x1, [sp+440]
00434e10str x2, [sp+448]
00434e14ldr x0, [sp+552]
00434e18ldr x4, [sp+544]
00434e1cldrsb x27, [x4]
00434e20ldr x4, [x4+112]
00434e24blr x4
00434e28str x0, [sp+96]
00434e2csbfm x4, x0, 63, 63
00434e30add x4, x0, x4, lsr #61
00434e34sbfm x1, x4, 3, 63
00434e38str x1, [sp+88]
00434e3cldr x2, [sp+448]
00434e40ldr x5, [sp+432]
00434e44subs xzr, x2, x4, asr #3
00434e48b.hs 0x434e50
00434e4cb 0x434e90
00434e50
00434e50loc_434e50:
00434e50b 0x434e54
00434e54
00434e54loc_434e54:
00434e54str x5, [sp+368]
00434e58str x1, [sp+376]
00434e5cstr x2, [sp+384]
00434e60str x5, [sp+120]
00434e64str x1, [sp+128]
00434e68str x2, [sp+136]
00434e6cstp xzr, xzr, [sp+104]
00434e70ldr x0, [sp+120]
00434e74ldr x1, [sp+128]
00434e78ldr x2, [sp+136]
00434e7cmov x3, xzr
00434e80mov x4, xzr
00434e84ldp x29, x30, [sp-8]
00434e88add sp, sp, 464
00434e8cret x30
00434e90
00434e90loc_434e90:
00434e90bl runtime.panicSliceAcap
00434e94hint
00434e98
00434e98loc_434e98:
00434e98stp x0, x1, [sp+8]
00434e9cstp x2, x3, [sp+24]
00434ea0stp x4, x5, [sp+40]
00434ea4stp x6, x7, [sp+56]
00434ea8stp x8, x9, [sp+72]
00434eacstr x10, [sp+88]
00434eb0mov x3, x30
00434eb4bl runtime.morestack_noctxt.abi0
00434eb8ldp x0, x1, [sp+8]
00434ebcldp x2, x3, [sp+24]
00434ec0ldp x4, x5, [sp+40]
00434ec4ldp x6, x7, [sp+56]
00434ec8ldp x8, x9, [sp+72]
00434eccldr x10, [sp+88]
00434ed0b 0x434b10
00434ed4udf 0
00434ed8udf 0
00434edcudf 0
00434b10

00434ee0
00434ee0gopkg.in/jcmturner/gokrb5.v7/crypto/common.GetIntegrityHash: ; void gopkg.in/jcmturner/gokrb5.v7/crypto/common.GetIntegrityHash(struct []uint8 b, struct []uint8 key, uint32 usage, gopkg.in/jcmturner/gokrb5.v7/crypto/etype.EType etype)
00434ee0ldr x16, [x28+16]
00434ee4sub x17, sp, 128
00434ee8subs xzr, x17, x16
00434eecb.ls 0x434ffc
00434ef0sub x20, sp, 256
00434ef4stp x29, x30, [x20-8]
00434ef8add sp, x20, 0
00434efcsub x29, sp, 8
00434f00str x0, [sp+264]
00434f04str x1, [sp+272]
00434f08str x2, [sp+280]
00434f0cstr x3, [sp+288]
00434f10str x4, [sp+296]
00434f14str x5, [sp+304]
00434f18str w6, [sp+312]
00434f1cstr x7, [sp+320]
00434f20str x8, [sp+328]
00434f24str xzr, [sp+120]
00434f28stp xzr, xzr, [sp+128]
00434f2cstp xzr, xzr, [sp+104]
00434f30ldr w0, [sp+312]
00434f34bl gopkg.in/jcmturner/gokrb5.v7/crypto/common.GetUsageKi
00434f38str x0, [sp+168]
00434f3cstr x1, [sp+176]
00434f40str x2, [sp+184]
00434f44str xzr, [sp+144]
00434f48stp xzr, xzr, [sp+152]
00434f4cstp xzr, xzr, [sp+232]
00434f50ldr x9, [sp+320]
00434f54ldr x0, [sp+264]
00434f58ldr x3, [sp+288]
00434f5cldr x1, [sp+272]
00434f60ldr x4, [sp+296]
00434f64ldr x10, [sp+328]
00434f68ldr x2, [sp+280]
00434f6cldr x5, [sp+304]
00434f70ldr x6, [sp+168]
00434f74ldr x7, [sp+176]
00434f78ldr x8, [sp+184]
00434f7cbl gopkg.in/jcmturner/gokrb5.v7/crypto/common.GetHash
00434f80str x0, [sp+144]
00434f84str x1, [sp+152]
00434f88str x2, [sp+160]
00434f8cstr x3, [sp+232]
00434f90str x4, [sp+240]
00434f94ldr x1, [sp+144]
00434f98ldr x2, [sp+152]
00434f9cldr x3, [sp+160]
00434fa0str x1, [sp+208]
00434fa4str x2, [sp+216]
00434fa8str x3, [sp+224]
00434facldr x1, [sp+232]
00434fb0ldr x2, [sp+240]
00434fb4str x1, [sp+192]
00434fb8str x2, [sp+200]
00434fbcldr x1, [sp+208]
00434fc0ldr x2, [sp+216]
00434fc4ldr x3, [sp+224]
00434fc8str x1, [sp+120]
00434fccstr x2, [sp+128]
00434fd0str x3, [sp+136]
00434fd4ldr x3, [sp+192]
00434fd8ldr x4, [sp+200]
00434fdcstr x3, [sp+104]
00434fe0str x4, [sp+112]
00434fe4ldr x0, [sp+120]
00434fe8ldr x1, [sp+128]
00434fecldr x2, [sp+136]
00434ff0ldp x29, x30, [sp-8]
00434ff4add sp, sp, 256
00434ff8ret x30
00434ffc
00434ffcloc_434ffc:
00434ffcstp x0, x1, [sp+8]
00435000stp x2, x3, [sp+24]
00435004stp x4, x5, [sp+40]
00435008str w6, [sp+56]
0043500cstp x7, x8, [sp+64]
00435010mov x3, x30
00435014bl runtime.morestack_noctxt.abi0
00435018ldp x0, x1, [sp+8]
0043501cldp x2, x3, [sp+24]
00435020ldp x4, x5, [sp+40]
00435024ldr w6, [sp+56]
00435028ldp x7, x8, [sp+64]
0043502cb 0x434ee0
00434ee0

00435030
00435030gopkg.in/jcmturner/gokrb5.v7/crypto/common.GetUsageKc: ; void gopkg.in/jcmturner/gokrb5.v7/crypto/common.GetUsageKc(uint32 un)
00435030ldr x16, [x28+16]
00435034subs xzr, sp, x16
00435038b.ls 0x435084
0043503cstr x30, [sp-80]!
00435040stur x29, [sp-8]
00435044sub x29, sp, 8
00435048str w0, [sp+88]
0043504cstr xzr, [sp+24]
00435050stp xzr, xzr, [sp+32]
00435054ldr w0, [sp+88]
00435058movn x1, 102
0043505cbl gopkg.in/jcmturner/gokrb5.v7/crypto/common.getUsage
00435060str x0, [sp+48]
00435064str x1, [sp+56]
00435068str x2, [sp+64]
0043506cstr x0, [sp+24]
00435070str x1, [sp+32]
00435074str x2, [sp+40]
00435078ldur x29, [sp-8]
0043507cldr x30, [sp], 80
00435080ret x30
00435084
00435084loc_435084:
00435084str w0, [sp+8]
00435088mov x3, x30
0043508cbl runtime.morestack_noctxt.abi0
00435090ldr w0, [sp+8]
00435094b 0x435030
00435098udf 0
0043509cudf 0
00435030

004350a0
004350a0gopkg.in/jcmturner/gokrb5.v7/crypto/common.GetUsageKe: ; void gopkg.in/jcmturner/gokrb5.v7/crypto/common.GetUsageKe(uint32 un)
004350a0ldr x16, [x28+16]
004350a4subs xzr, sp, x16
004350a8b.ls 0x4350f4
004350acstr x30, [sp-80]!
004350b0stur x29, [sp-8]
004350b4sub x29, sp, 8
004350b8str w0, [sp+88]
004350bcstr xzr, [sp+24]
004350c0stp xzr, xzr, [sp+32]
004350c4ldr w0, [sp+88]
004350c8movn x1, 85
004350ccbl gopkg.in/jcmturner/gokrb5.v7/crypto/common.getUsage
004350d0str x0, [sp+48]
004350d4str x1, [sp+56]
004350d8str x2, [sp+64]
004350dcstr x0, [sp+24]
004350e0str x1, [sp+32]
004350e4str x2, [sp+40]
004350e8ldur x29, [sp-8]
004350ecldr x30, [sp], 80
004350f0ret x30
004350f4
004350f4loc_4350f4:
004350f4str w0, [sp+8]
004350f8mov x3, x30
004350fcbl runtime.morestack_noctxt.abi0
00435100ldr w0, [sp+8]
00435104b 0x4350a0
00435108udf 0
0043510cudf 0
004350a0

00435110
00435110gopkg.in/jcmturner/gokrb5.v7/crypto/common.GetUsageKi: ; void gopkg.in/jcmturner/gokrb5.v7/crypto/common.GetUsageKi(uint32 un)
00435110ldr x16, [x28+16]
00435114subs xzr, sp, x16
00435118b.ls 0x435164
0043511cstr x30, [sp-80]!
00435120stur x29, [sp-8]
00435124sub x29, sp, 8
00435128str w0, [sp+88]
0043512cstr xzr, [sp+24]
00435130stp xzr, xzr, [sp+32]
00435134ldr w0, [sp+88]
00435138movz x1, 85
0043513cbl gopkg.in/jcmturner/gokrb5.v7/crypto/common.getUsage
00435140str x0, [sp+48]
00435144str x1, [sp+56]
00435148str x2, [sp+64]
0043514cstr x0, [sp+24]
00435150str x1, [sp+32]
00435154str x2, [sp+40]
00435158ldur x29, [sp-8]
0043515cldr x30, [sp], 80
00435160ret x30
00435164
00435164loc_435164:
00435164str w0, [sp+8]
00435168mov x3, x30
0043516cbl runtime.morestack_noctxt.abi0
00435170ldr w0, [sp+8]
00435174b 0x435110
00435178udf 0
0043517cudf 0
00435110

00435180
00435180gopkg.in/jcmturner/gokrb5.v7/crypto/common.getUsage: ; void gopkg.in/jcmturner/gokrb5.v7/crypto/common.getUsage(uint32 un, uint8 o)
00435180ldr x16, [x28+16]
00435184sub x17, sp, 64
00435188subs xzr, x17, x16
0043518cb.ls 0x4352ac
00435190str x30, [sp-192]!
00435194stur x29, [sp-8]
00435198sub x29, sp, 8
0043519cstr w0, [sp+200]
004351a0strb w1, [sp+204]
004351a4stp xzr, xzr, [sp+88]
004351a8str xzr, [sp+104]
004351acadrp x0, 0x21d000
004351b0add x0, x0, 2048
004351b4bl runtime.newobject
004351b8str x0, [sp+176]
004351bcadrp x27, 0x616000
004351c0ldr w1, [x27+3056]
004351c4cbz w1, 0x4351cc
004351c8b 0x4351d0
004351cc
004351ccloc_4351cc:
004351ccb 0x4351ec
004351d0
004351d0loc_4351d0:
004351d0str x0, [sp+112]
004351d4mov x1, x0
004351d8adrp x0, 0x21d000
004351dcadd x0, x0, 2048
004351e0bl runtime.wbZero
004351e4ldr x0, [sp+112]
004351e8b 0x4351ec
004351ec
004351ecloc_4351ec:
004351ecstp xzr, xzr, [x0]
004351f0stp xzr, xzr, [x0+16]
004351f4str xzr, [x0+32]
004351f8ldr x6, [sp+176]
004351fcstr x6, [sp+168]
00435200ldr w6, [sp+200]
00435204str w6, [sp+84]
00435208ldr x1, [sp+168]
0043520cadrp x0, 0x2de000
00435210add x0, x0, 2976
00435214adrp x2, 0x2e5000
00435218add x2, x2, 2384
0043521cadrp x3, 0x616000
00435220add x3, x3, 1504
00435224adrp x4, 0x1c0000
00435228add x4, x4, 3328
0043522cadd x5, sp, 84
00435230bl encoding/binary.Write
00435234ldr x0, [sp+176]
00435238bl bytes.(*Buffer).Bytes
0043523cadd x6, x1, 1
00435240str x0, [sp+144]
00435244str x1, [sp+152]
00435248str x2, [sp+160]
0043524csubs xzr, x2, x6
00435250b.hs 0x435258
00435254b 0x43525c
00435258
00435258loc_435258:
00435258b 0x435278
0043525c
0043525cloc_43525c:
0043525cmov x1, x6
00435260orr x3, xzr, 1
00435264adrp x4, 0x1c0000
00435268add x4, x4, 3072
0043526cbl runtime.growslice
00435270mov x6, x1
00435274b 0x435278
00435278
00435278loc_435278:
00435278ldrb w3, [sp+204]
0043527csub x4, x6, 1
00435280strb w3, [x0+x4]
00435284str x0, [sp+120]
00435288str x6, [sp+128]
0043528cstr x2, [sp+136]
00435290str x0, [sp+88]
00435294str x6, [sp+96]
00435298str x2, [sp+104]
0043529cmov x1, x6
004352a0ldur x29, [sp-8]
004352a4ldr x30, [sp], 192
004352a8ret x30
004352ac
004352acloc_4352ac:
004352acstr w0, [sp+8]
004352b0strb w1, [sp+12]
004352b4mov x3, x30
004352b8bl runtime.morestack_noctxt.abi0
004352bcldr w0, [sp+8]
004352c0ldrb w1, [sp+12]
004352c4b 0x435180
004352c8udf 0
004352ccudf 0
00435180

004352d0
004352d0gopkg.in/jcmturner/gokrb5.v7/crypto/rfc3961.DES3EncryptData: ; void gopkg.in/jcmturner/gokrb5.v7/crypto/rfc3961.DES3EncryptData(struct []uint8 key, struct []uint8 data, gopkg.in/jcmturner/gokrb5.v7/crypto/etype.EType e)
004352d0ldr x16, [x28+16]
004352d4sub x17, sp, 416
004352d8subs xzr, x17, x16
004352dcb.ls 0x435804
004352e0sub x20, sp, 544
004352e4stp x29, x30, [x20-8]
004352e8add sp, x20, 0
004352ecsub x29, sp, 8
004352f0str x0, [sp+552]
004352f4str x1, [sp+560]
004352f8str x2, [sp+568]
004352fcstr x3, [sp+576]
00435300str x4, [sp+584]
00435304str x5, [sp+592]
00435308str x6, [sp+600]
0043530cstr x7, [sp+608]
00435310str xzr, [sp+136]
00435314stp xzr, xzr, [sp+144]
00435318str xzr, [sp+112]
0043531cstp xzr, xzr, [sp+120]
00435320stp xzr, xzr, [sp+96]
00435324ldr x1, [sp+560]
00435328str x1, [sp+88]
0043532cldr x0, [sp+608]
00435330ldr x1, [sp+600]
00435334ldrsb x27, [x1]
00435338ldr x1, [x1+136]
0043533cblr x1
00435340str x0, [sp+80]
00435344ldr x1, [sp+88]
00435348subs xzr, x0, x1
0043534cb.ne 0x435354
00435350b 0x435498
00435354
00435354loc_435354:
00435354ldr x1, [sp+600]
00435358ldrsb x27, [x1]
0043535cldr x1, [x1+136]
00435360ldr x0, [sp+608]
00435364blr x1
00435368str x0, [sp+80]
0043536cldr x1, [sp+560]
00435370str x1, [sp+88]
00435374stp xzr, xzr, [sp+472]
00435378stp xzr, xzr, [sp+488]
0043537cadd x1, sp, 472
00435380str x1, [sp+368]
00435384ldr x0, [sp+80]
00435388bl runtime.convT64
0043538cstr x0, [sp+360]
00435390ldr x1, [sp+368]
00435394ldrsb x27, [x1]
00435398adrp x2, 0x1c0000
0043539cadd x2, x2, 3520
004353a0str x2, [x1]
004353a4adrp x27, 0x616000
004353a8ldr w2, [x27+3056]
004353accbz w2, 0x4353b4
004353b0b 0x4353b8
004353b4
004353b4loc_4353b4:
004353b4b 0x4353cc
004353b8
004353b8loc_4353b8:
004353b8bl runtime.gcWriteBarrier2
004353bcstr x0, [x25]
004353c0ldr x2, [x1+8]
004353c4str x2, [x25+8]
004353c8b 0x4353cc
004353cc
004353ccloc_4353cc:
004353ccstr x0, [x1+8]
004353d0ldr x0, [sp+88]
004353d4bl runtime.convT64
004353d8str x0, [sp+352]
004353dcldr x1, [sp+368]
004353e0ldrsb x27, [x1]
004353e4adrp x2, 0x1c0000
004353e8add x2, x2, 3520
004353ecstr x2, [x1+16]
004353f0adrp x27, 0x616000
004353f4ldr w2, [x27+3056]
004353f8cbz w2, 0x435400
004353fcb 0x435404
00435400
00435400loc_435400:
00435400b 0x435418
00435404
00435404loc_435404:
00435404bl runtime.gcWriteBarrier2
00435408str x0, [x25]
0043540cldr x5, [x1+24]
00435410str x5, [x25+8]
00435414b 0x435418
00435418
00435418loc_435418:
00435418str x0, [x1+24]
0043541cldr x2, [sp+368]
00435420ldrsb x27, [x2]
00435424b 0x435428
00435428
00435428loc_435428:
00435428str x2, [sp+376]
0043542corr x4, xzr, 2
00435430str x4, [sp+384]
00435434str x4, [sp+392]
00435438adrp x0, 0x290000
0043543cadd x0, x0, 2755
00435440movz x1, 42
00435444mov x3, x4
00435448bl fmt.Errorf
0043544cstr x0, [sp+456]
00435450str x1, [sp+464]
00435454str xzr, [sp+136]
00435458stp xzr, xzr, [sp+144]
0043545cstr xzr, [sp+112]
00435460stp xzr, xzr, [sp+120]
00435464ldr x6, [sp+456]
00435468ldr x7, [sp+464]
0043546cstr x6, [sp+96]
00435470str x7, [sp+104]
00435474ldr x0, [sp+136]
00435478ldr x3, [sp+112]
0043547cldr x1, [sp+144]
00435480ldr x4, [sp+120]
00435484ldr x2, [sp+152]
00435488ldr x5, [sp+128]
0043548cldp x29, x30, [sp-8]
00435490add sp, sp, 544
00435494ret x30
00435498
00435498loc_435498:
00435498ldr x1, [sp+600]
0043549cldrsb x27, [x1]
004354a0ldr x1, [x1+152]
004354a4ldr x0, [sp+608]
004354a8blr x1
004354acstr x0, [sp+88]
004354b0str xzr, [sp+432]
004354b4stp xzr, xzr, [sp+440]
004354b8stp xzr, xzr, [sp+456]
004354bcldr x3, [sp+88]
004354c0ldr x1, [sp+584]
004354c4ldr x2, [sp+592]
004354c8ldr x0, [sp+576]
004354ccbl gopkg.in/jcmturner/gokrb5.v7/crypto/common.ZeroPad
004354d0str x0, [sp+432]
004354d4str x1, [sp+440]
004354d8str x2, [sp+448]
004354dcstr x3, [sp+456]
004354e0str x4, [sp+464]
004354e4ldr x1, [sp+432]
004354e8ldr x2, [sp+440]
004354ecldr x3, [sp+448]
004354f0str x1, [sp+272]
004354f4str x2, [sp+280]
004354f8str x3, [sp+288]
004354fcldr x1, [sp+456]
00435500ldr x2, [sp+464]
00435504str x1, [sp+256]
00435508str x2, [sp+264]
0043550cldr x1, [sp+272]
00435510ldr x2, [sp+280]
00435514ldr x3, [sp+288]
00435518str x1, [sp+576]
0043551cstr x2, [sp+584]
00435520str x3, [sp+592]
00435524stp xzr, xzr, [sp+416]
00435528stp xzr, xzr, [sp+456]
0043552cldr x0, [sp+552]
00435530ldr x1, [sp+560]
00435534ldr x2, [sp+568]
00435538bl crypto/des.NewTripleDESCipher
0043553cstr x0, [sp+416]
00435540str x1, [sp+424]
00435544str x2, [sp+456]
00435548str x3, [sp+464]
0043554cldr x1, [sp+424]
00435550ldr x2, [sp+416]
00435554str x2, [sp+520]
00435558str x1, [sp+528]
0043555cldr x1, [sp+456]
00435560ldr x2, [sp+464]
00435564str x1, [sp+504]
00435568str x2, [sp+512]
0043556cldr x1, [sp+520]
00435570ldr x2, [sp+528]
00435574str x1, [sp+240]
00435578str x2, [sp+248]
0043557cldr x1, [sp+512]
00435580ldr x2, [sp+504]
00435584str x2, [sp+200]
00435588str x1, [sp+208]
0043558ccbnz x2, 0x435594
00435590b 0x435690
00435594
00435594loc_435594:
00435594stp xzr, xzr, [sp+400]
00435598add x5, sp, 400
0043559cstr x5, [sp+320]
004355a0ldr x5, [sp+200]
004355a4ldr x6, [sp+208]
004355a8str x5, [sp+304]
004355acstr x6, [sp+312]
004355b0str x5, [sp+296]
004355b4ldr x5, [sp+296]
004355b8cbnz x5, 0x4355c0
004355bcb 0x4355d0
004355c0
004355c0loc_4355c0:
004355c0ldr x5, [sp+296]
004355c4ldr x5, [x5+8]
004355c8str x5, [sp+296]
004355ccb 0x4355d4
004355d0
004355d0loc_4355d0:
004355d0b 0x4355d4
004355d4
004355d4loc_4355d4:
004355d4ldr x5, [sp+320]
004355d8ldrsb x27, [x5]
004355dcldr x6, [sp+312]
004355e0ldr x7, [sp+296]
004355e4str x7, [x5]
004355e8adrp x27, 0x616000
004355ecldr w7, [x27+3056]
004355f0cbz w7, 0x4355f8
004355f4b 0x4355fc
004355f8
004355f8loc_4355f8:
004355f8b 0x435610
004355fc
004355fcloc_4355fc:
004355fcbl runtime.gcWriteBarrier2
00435600str x6, [x25]
00435604ldr x7, [x5+8]
00435608str x7, [x25+8]
0043560cb 0x435610
00435610
00435610loc_435610:
00435610str x6, [x5+8]
00435614ldr x2, [sp+320]
00435618ldrsb x27, [x2]
0043561cb 0x435620
00435620
00435620loc_435620:
00435620str x2, [sp+328]
00435624orr x4, xzr, 1
00435628str x4, [sp+336]
0043562cstr x4, [sp+344]
00435630adrp x0, 0x285000
00435634add x0, x0, 208
00435638movz x1, 25
0043563cmov x3, x4
00435640bl fmt.Errorf
00435644str x0, [sp+456]
00435648str x1, [sp+464]
0043564cstr xzr, [sp+136]
00435650stp xzr, xzr, [sp+144]
00435654str xzr, [sp+112]
00435658stp xzr, xzr, [sp+120]
0043565cldr x6, [sp+456]
00435660ldr x7, [sp+464]
00435664str x6, [sp+96]
00435668str x7, [sp+104]
0043566cldr x0, [sp+136]
00435670ldr x3, [sp+112]
00435674ldr x1, [sp+144]
00435678ldr x4, [sp+120]
0043567cldr x2, [sp+152]
00435680ldr x5, [sp+128]
00435684ldp x29, x30, [sp-8]
00435688add sp, sp, 544
0043568cret x30
00435690
00435690loc_435690:
00435690adrp x0, 0x1c0000
00435694add x0, x0, 3072
00435698orr x1, xzr, 8
0043569cmov x2, x1
004356a0bl runtime.makeslice
004356a4str x0, [sp+176]
004356a8orr x3, xzr, 8
004356acstr x3, [sp+184]
004356b0str x3, [sp+192]
004356b4ldr x2, [sp+584]
004356b8str x2, [sp+88]
004356bcadrp x0, 0x1c0000
004356c0add x0, x0, 3072
004356c4mov x1, x2
004356c8bl runtime.makeslice
004356ccldr x3, [sp+88]
004356d0ldr x4, [sp+88]
004356d4str x0, [sp+216]
004356d8str x3, [sp+224]
004356dcstr x4, [sp+232]
004356e0ldr x0, [sp+240]
004356e4ldr x2, [sp+176]
004356e8ldr x3, [sp+184]
004356ecldr x1, [sp+248]
004356f0ldr x4, [sp+192]
004356f4bl crypto/cipher.NewCBCEncrypter
004356f8str x0, [sp+160]
004356fcstr x1, [sp+168]
00435700ldrsb x27, [x0]
00435704ldr x3, [sp+216]
00435708ldr x4, [sp+576]
0043570cldr x2, [sp+224]
00435710ldr x5, [sp+584]
00435714ldr x6, [sp+232]
00435718ldr x7, [sp+592]
0043571cldr x8, [x0+32]
00435720mov x0, x1
00435724mov x1, x3
00435728mov x3, x6
0043572cmov x6, x7
00435730blr x8
00435734ldr x3, [sp+224]
00435738str x3, [sp+88]
0043573cldr x0, [sp+608]
00435740ldr x3, [sp+600]
00435744ldrsb x27, [x3]
00435748ldr x3, [x3+152]
0043574cblr x3
00435750str x0, [sp+80]
00435754ldr x3, [sp+88]
00435758sub x4, x3, x0
0043575cstr x4, [sp+72]
00435760ldr x1, [sp+224]
00435764ldr x5, [sp+216]
00435768ldr x6, [sp+232]
0043576cb 0x435770
00435770
00435770loc_435770:
00435770subs xzr, x1, x4
00435774b.hs 0x43577c
00435778b 0x4357f8
0043577c
0043577cloc_43577c:
0043577cadd x8, x1, x0
00435780sub x8, x8, x3
00435784add x9, x6, x0
00435788sub x9, x9, x3
0043578csub x10, xzr, x9
00435790and x10, x4, x10, asr #63
00435794add x10, x5, x10
00435798str x10, [sp+432]
0043579cstr x8, [sp+440]
004357a0str x9, [sp+448]
004357a4str x10, [sp+136]
004357a8str x8, [sp+144]
004357acstr x9, [sp+152]
004357b0ldr x8, [sp+216]
004357b4ldr x9, [sp+224]
004357b8ldr x10, [sp+232]
004357bcstr x8, [sp+112]
004357c0str x9, [sp+120]
004357c4str x10, [sp+128]
004357c8stp xzr, xzr, [sp+96]
004357ccldr x0, [sp+136]
004357d0ldr x3, [sp+112]
004357d4ldr x1, [sp+144]
004357d8ldr x4, [sp+120]
004357dcldr x2, [sp+152]
004357e0ldr x5, [sp+128]
004357e4mov x6, xzr
004357e8mov x7, xzr
004357ecldp x29, x30, [sp-8]
004357f0add sp, sp, 544
004357f4ret x30
004357f8
004357f8loc_4357f8:
004357f8mov x0, x4
004357fcbl runtime.panicSliceB
00435800hint
00435804
00435804loc_435804:
00435804stp x0, x1, [sp+8]
00435808stp x2, x3, [sp+24]
0043580cstp x4, x5, [sp+40]
00435810stp x6, x7, [sp+56]
00435814mov x3, x30
00435818bl runtime.morestack_noctxt.abi0
0043581cldp x0, x1, [sp+8]
00435820ldp x2, x3, [sp+24]
00435824ldp x4, x5, [sp+40]
00435828ldp x6, x7, [sp+56]
0043582cb 0x4352d0
004352d0