Similarity

004feb30
004feb30github.com/bishopfox/sliver/implant/sliver/handlers.reconfigureHandler: ; void github.com/bishopfox/sliver/implant/sliver/handlers.reconfigureHandler(struct []uint8 data, github.com/bishopfox/sliver/implant/sliver/handlers.RPCResponse resp)
004feb30ldr x16, [x28+16]
004feb34sub x17, sp, 176
004feb38subs xzr, x17, x16
004feb3cb.ls 0x4fedd0
004feb40sub x20, sp, 304
004feb44stp x29, x30, [x20-8]
004feb48add sp, x20, 0
004feb4csub x29, sp, 8
004feb50str x0, [sp+312]
004feb54str x1, [sp+320]
004feb58str x2, [sp+328]
004feb5cstr x3, [sp+336]
004feb60adrp x0, 0x186000
004feb64add x0, x0, 1984
004feb68bl runtime.newobject
004feb6cstr x0, [sp+248]
004feb70adrp x27, 0x54d000
004feb74ldr w1, [x27+3056]
004feb78cbz w1, 0x4feb80
004feb7cb 0x4feb84
004feb80
004feb80loc_4feb80:
004feb80b 0x4feba0
004feb84
004feb84loc_4feb84:
004feb84str x0, [sp+176]
004feb88mov x1, x0
004feb8cadrp x0, 0x186000
004feb90add x0, x0, 1984
004feb94bl runtime.wbZero
004feb98ldr x0, [sp+176]
004feb9cb 0x4feba0
004feba0
004feba0loc_4feba0:
004feba0stp xzr, xzr, [x0]
004feba4stp xzr, xzr, [x0+16]
004feba8stp xzr, xzr, [x0+32]
004febacstp xzr, xzr, [x0+48]
004febb0str xzr, [x0+64]
004febb4ldr x4, [sp+248]
004febb8str x4, [sp+72]
004febbcstr x4, [sp+120]
004febc0ldr x0, [sp+312]
004febc4ldr x1, [sp+320]
004febc8ldr x2, [sp+328]
004febccadrp x3, 0x215000
004febd0add x3, x3, 4064
004febd4bl google.golang.org/protobuf/proto.Unmarshal
004febd8str x0, [sp+80]
004febdcstr x1, [sp+88]
004febe0cbnz x0, 0x4febe8
004febe4b 0x4feca4
004febe8
004febe8loc_4febe8:
004febe8stp xzr, xzr, [sp+104]
004febecadd x5, sp, 104
004febf0str x5, [sp+216]
004febf4ldr x5, [sp+80]
004febf8ldr x6, [sp+88]
004febfcstr x5, [sp+200]
004fec00str x6, [sp+208]
004fec04str x5, [sp+192]
004fec08ldr x5, [sp+192]
004fec0ccbnz x5, 0x4fec14
004fec10b 0x4fec24
004fec14
004fec14loc_4fec14:
004fec14ldr x5, [sp+192]
004fec18ldr x5, [x5+8]
004fec1cstr x5, [sp+192]
004fec20b 0x4fec28
004fec24
004fec24loc_4fec24:
004fec24b 0x4fec28
004fec28
004fec28loc_4fec28:
004fec28ldr x5, [sp+216]
004fec2cldrsb x27, [x5]
004fec30ldr x6, [sp+208]
004fec34ldr x7, [sp+192]
004fec38str x7, [x5]
004fec3cadrp x27, 0x54d000
004fec40ldr w7, [x27+3056]
004fec44cbz w7, 0x4fec4c
004fec48b 0x4fec50
004fec4c
004fec4cloc_4fec4c:
004fec4cb 0x4fec64
004fec50
004fec50loc_4fec50:
004fec50bl runtime.gcWriteBarrier2
004fec54str x6, [x25]
004fec58ldr x7, [x5+8]
004fec5cstr x7, [x25+8]
004fec60b 0x4fec64
004fec64
004fec64loc_4fec64:
004fec64str x6, [x5+8]
004fec68ldr x2, [sp+216]
004fec6cldrsb x27, [x2]
004fec70b 0x4fec74
004fec74
004fec74loc_4fec74:
004fec74str x2, [sp+224]
004fec78orr x4, xzr, 1
004fec7cstr x4, [sp+232]
004fec80str x4, [sp+240]
004fec84adrp x0, 0x1bc000
004fec88add x0, x0, 3983
004fec8cmovz x1, 27
004fec90mov x3, x4
004fec94bl log.Printf
004fec98ldp x29, x30, [sp-8]
004fec9cadd sp, sp, 304
004feca0ret x30
004feca4
004feca4loc_4feca4:
004feca4ldr x1, [sp+72]
004feca8ldrsb x27, [x1]
004fecacldr x1, [x1+8]
004fecb0cbnz x1, 0x4fecb8
004fecb4b 0x4fecd0
004fecb8
004fecb8loc_4fecb8:
004fecb8ldr x1, [sp+72]
004fecbcldrsb x27, [x1]
004fecc0ldr x0, [x1+8]
004fecc4str x0, [sp+56]
004fecc8bl github.com/bishopfox/sliver/implant/sliver/transports.SetReconnectInterval
004fecccb 0x4fecd4
004fecd0
004fecd0loc_4fecd0:
004fecd0b 0x4fecd4
004fecd4
004fecd4loc_4fecd4:
004fecd4adrp x0, 0x165000
004fecd8add x0, x0, 3424
004fecdcbl runtime.newobject
004fece0str x0, [sp+184]
004fece4adrp x27, 0x54d000
004fece8ldr w1, [x27+3056]
004fececcbz w1, 0x4fecf4
004fecf0b 0x4fecf8
004fecf4
004fecf4loc_4fecf4:
004fecf4b 0x4fed14
004fecf8
004fecf8loc_4fecf8:
004fecf8str x0, [sp+168]
004fecfcmov x1, x0
004fed00adrp x0, 0x165000
004fed04add x0, x0, 3424
004fed08bl runtime.wbZero
004fed0cldr x0, [sp+168]
004fed10b 0x4fed14
004fed14
004fed14loc_4fed14:
004fed14stp xzr, xzr, [x0]
004fed18stp xzr, xzr, [x0+16]
004fed1cstp xzr, xzr, [x0+32]
004fed20ldr x2, [sp+184]
004fed24str x2, [sp+64]
004fed28str x2, [sp+96]
004fed2cstp xzr, xzr, [sp+272]
004fed30str xzr, [sp+288]
004fed34stp xzr, xzr, [sp+256]
004fed38ldr x1, [sp+96]
004fed3cadrp x0, 0x216000
004fed40add x0, x0, 0
004fed44bl google.golang.org/protobuf/proto.Marshal
004fed48str x0, [sp+272]
004fed4cstr x1, [sp+280]
004fed50str x2, [sp+288]
004fed54str x3, [sp+256]
004fed58str x4, [sp+264]
004fed5cldr x2, [sp+272]
004fed60ldr x3, [sp+280]
004fed64ldr x4, [sp+288]
004fed68str x2, [sp+144]
004fed6cstr x3, [sp+152]
004fed70str x4, [sp+160]
004fed74ldr x2, [sp+256]
004fed78ldr x3, [sp+264]
004fed7cstr x2, [sp+128]
004fed80str x3, [sp+136]
004fed84ldr x2, [sp+144]
004fed88ldr x3, [sp+152]
004fed8cldr x4, [sp+160]
004fed90str x2, [sp+312]
004fed94str x3, [sp+320]
004fed98str x4, [sp+328]
004fed9cldr x3, [sp+128]
004feda0ldr x4, [sp+136]
004feda4str x3, [sp+80]
004feda8str x4, [sp+88]
004fedacldr x0, [sp+312]
004fedb0ldr x1, [sp+320]
004fedb4ldr x2, [sp+328]
004fedb8ldr x26, [sp+336]
004fedbcldr x5, [x26]
004fedc0blr x5
004fedc4ldp x29, x30, [sp-8]
004fedc8add sp, sp, 304
004fedccret x30
004fedd0
004fedd0loc_4fedd0:
004fedd0stp x0, x1, [sp+8]
004fedd4stp x2, x3, [sp+24]
004fedd8mov x3, x30
004feddcbl runtime.morestack_noctxt.abi0
004fede0ldp x0, x1, [sp+8]
004fede4ldp x2, x3, [sp+24]
004fede8b 0x4feb30
004fedecudf 0
004feb30

004fedf0
004fedf0github.com/bishopfox/sliver/implant/sliver/handlers.gzipWrite: ; void github.com/bishopfox/sliver/implant/sliver/handlers.gzipWrite(io.Writer w, struct []uint8 data)
004fedf0ldr x16, [x28+16]
004fedf4sub x17, sp, 96
004fedf8subs xzr, x17, x16
004fedfcb.ls 0x4fef64
004fee00str x30, [sp-224]!
004fee04stur x29, [sp-8]
004fee08sub x29, sp, 8
004fee0cstr x0, [sp+232]
004fee10str x1, [sp+240]
004fee14str x2, [sp+248]
004fee18str x3, [sp+256]
004fee1cstr x4, [sp+264]
004fee20stp xzr, xzr, [sp+96]
004fee24str xzr, [sp+152]
004fee28stp xzr, xzr, [sp+136]
004fee2cldr x0, [sp+232]
004fee30ldr x1, [sp+240]
004fee34orr x2, xzr, 1
004fee38bl compress/gzip.NewWriterLevel
004fee3cstr x0, [sp+152]
004fee40str x1, [sp+136]
004fee44str x2, [sp+144]
004fee48ldr x3, [sp+152]
004fee4cstr x3, [sp+184]
004fee50ldr x3, [sp+144]
004fee54ldr x4, [sp+136]
004fee58str x4, [sp+168]
004fee5cstr x3, [sp+176]
004fee60ldr x3, [sp+184]
004fee64str x3, [sp+112]
004fee68ldr x3, [sp+176]
004fee6cldr x4, [sp+168]
004fee70str x4, [sp+120]
004fee74str x3, [sp+128]
004fee78cbnz x4, 0x4fee80
004fee7cb 0x4feea0
004fee80
004fee80loc_4fee80:
004fee80str x4, [sp+96]
004fee84str x3, [sp+104]
004fee88bl runtime.deferreturn
004fee8cldr x0, [sp+96]
004fee90ldr x1, [sp+104]
004fee94ldur x29, [sp-8]
004fee98ldr x30, [sp], 224
004fee9cret x30
004feea0
004feea0loc_4feea0:
004feea0ldr x1, [sp+112]
004feea4str x1, [sp+160]
004feea8stp xzr, xzr, [sp+192]
004feeacadd x1, sp, 192
004feeb0str x1, [sp+208]
004feeb4ldrsb x27, [x1]
004feeb8adrp x2, 0
004feebcadd x2, x2, 3984
004feec0str x2, [x1]
004feec4ldrsb x27, [x1]
004feec8ldr x2, [sp+160]
004feeccadrp x27, 0x54d000
004feed0ldr w3, [x27+3056]
004feed4cbz w3, 0x4feedc
004feed8b 0x4feee0
004feedc
004feedcloc_4feedc:
004feedcb 0x4feef4
004feee0
004feee0loc_4feee0:
004feee0bl runtime.gcWriteBarrier2
004feee4str x2, [x25]
004feee8ldr x3, [x1+8]
004feeecstr x3, [x25+8]
004feef0b 0x4feef4
004feef4
004feef4loc_4feef4:
004feef4str x2, [x1+8]
004feef8str x1, [sp+72]
004feefcadd x0, sp, 48
004fef00bl runtime.deferprocStack
004fef04subs xzr, x0, 0
004fef08b.ne 0x4fef4c
004fef0cb 0x4fef10
004fef10
004fef10loc_4fef10:
004fef10ldr x1, [sp+248]
004fef14ldr x2, [sp+256]
004fef18ldr x3, [sp+264]
004fef1cldr x0, [sp+112]
004fef20bl compress/gzip.(*Writer).Write
004fef24ldr x4, [sp+120]
004fef28ldr x5, [sp+128]
004fef2cstr x4, [sp+96]
004fef30str x5, [sp+104]
004fef34bl runtime.deferreturn
004fef38ldr x0, [sp+96]
004fef3cldr x1, [sp+104]
004fef40ldur x29, [sp-8]
004fef44ldr x30, [sp], 224
004fef48ret x30
004fef4c
004fef4cloc_4fef4c:
004fef4cbl runtime.deferreturn
004fef50ldr x0, [sp+96]
004fef54ldr x1, [sp+104]
004fef58ldur x29, [sp-8]
004fef5cldr x30, [sp], 224
004fef60ret x30
004fef64
004fef64loc_4fef64:
004fef64stp x0, x1, [sp+8]
004fef68stp x2, x3, [sp+24]
004fef6cstr x4, [sp+40]
004fef70mov x3, x30
004fef74bl runtime.morestack_noctxt.abi0
004fef78ldp x0, x1, [sp+8]
004fef7cldp x2, x3, [sp+24]
004fef80ldr x4, [sp+40]
004fef84b 0x4fedf0
004fef88udf 0
004fef8cudf 0
004fedf0

004fef90
004fef90github.com/bishopfox/sliver/implant/sliver/handlers.gzipWrite.deferwrap1: ; void github.com/bishopfox/sliver/implant/sliver/handlers.gzipWrite.deferwrap1(void)
004fef90ldr x16, [x28+16]
004fef94subs xzr, sp, x16
004fef98b.ls 0x4fefc8
004fef9cstr x30, [sp-32]!
004fefa0stur x29, [sp-8]
004fefa4sub x29, sp, 8
004fefa8ldr x16, [x28+32]
004fefaccbnz x16, 0x4fefd4
004fefb0
004fefb0loc_4fefb0:
004fefb0ldr x0, [x26+8]
004fefb4str x0, [sp+16]
004fefb8bl compress/gzip.(*Writer).Close
004fefbcldur x29, [sp-8]
004fefc0ldr x30, [sp], 32
004fefc4ret x30
004fefc8
004fefc8loc_4fefc8:
004fefc8mov x3, x30
004fefccbl runtime.morestack.abi0
004fefd0b 0x4fef90
004fefd4
004fefd4loc_4fefd4:
004fefd4ldr x17, [x16]
004fefd8add x20, sp, 40
004fefdcsubs xzr, x20, x17
004fefe0b.ne 0x4fefb0
004fefe4add x20, sp, 8
004fefe8str x20, [x16]
004fefecb 0x4fefb0
004fef90

004feff0
004feff0github.com/bishopfox/sliver/implant/sliver/handlers.gzipRead: ; void github.com/bishopfox/sliver/implant/sliver/handlers.gzipRead(struct []uint8 data)
004feff0ldr x16, [x28+16]
004feff4sub x17, sp, 144
004feff8subs xzr, x17, x16
004feffcb.ls 0x4ff198
004ff000sub x20, sp, 272
004ff004stp x29, x30, [x20-8]
004ff008add sp, x20, 0
004ff00csub x29, sp, 8
004ff010str x0, [sp+280]
004ff014str x1, [sp+288]
004ff018str x2, [sp+296]
004ff01cstr xzr, [sp+72]
004ff020stp xzr, xzr, [sp+80]
004ff024stp xzr, xzr, [sp+56]
004ff028ldr x0, [sp+280]
004ff02cldr x1, [sp+288]
004ff030ldr x2, [sp+296]
004ff034bl bytes.NewReader
004ff038str x0, [sp+256]
004ff03cstr x0, [sp+248]
004ff040str xzr, [sp+240]
004ff044stp xzr, xzr, [sp+224]
004ff048ldr x1, [sp+248]
004ff04cadrp x0, 0x214000
004ff050add x0, x0, 2880
004ff054bl compress/gzip.NewReader
004ff058str x0, [sp+240]
004ff05cstr x1, [sp+224]
004ff060str x2, [sp+232]
004ff064ldr x3, [sp+240]
004ff068str x3, [sp+192]
004ff06cldr x3, [sp+232]
004ff070ldr x4, [sp+224]
004ff074str x4, [sp+176]
004ff078str x3, [sp+184]
004ff07cldr x3, [sp+192]
004ff080str x3, [sp+96]
004ff084ldr x3, [sp+184]
004ff088ldr x4, [sp+176]
004ff08cstr x4, [sp+104]
004ff090str x3, [sp+112]
004ff094cbnz x4, 0x4ff09c
004ff098b 0x4ff0cc
004ff09c
004ff09cloc_4ff09c:
004ff09cstr xzr, [sp+72]
004ff0a0stp xzr, xzr, [sp+80]
004ff0a4ldr x3, [sp+104]
004ff0a8ldr x4, [sp+112]
004ff0acstr x3, [sp+56]
004ff0b0str x4, [sp+64]
004ff0b4ldr x0, [sp+72]
004ff0b8ldr x1, [sp+80]
004ff0bcldr x2, [sp+88]
004ff0c0ldp x29, x30, [sp-8]
004ff0c4add sp, sp, 272
004ff0c8ret x30
004ff0cc
004ff0ccloc_4ff0cc:
004ff0ccstp xzr, xzr, [sp+120]
004ff0d0stp xzr, xzr, [sp+136]
004ff0d4str xzr, [sp+152]
004ff0d8ldr x3, [sp+96]
004ff0dcstr x3, [sp+240]
004ff0e0stp xzr, xzr, [sp+224]
004ff0e4ldr x2, [sp+240]
004ff0e8add x0, sp, 120
004ff0ecadrp x1, 0x214000
004ff0f0add x1, x1, 2912
004ff0f4bl bytes.(*Buffer).ReadFrom
004ff0f8str x0, [sp+48]
004ff0fcstr x1, [sp+224]
004ff100str x2, [sp+232]
004ff104ldr x3, [sp+48]
004ff108str x3, [sp+40]
004ff10cstr x1, [sp+160]
004ff110str x2, [sp+168]
004ff114str x1, [sp+104]
004ff118str x2, [sp+112]
004ff11ccbnz x1, 0x4ff124
004ff120b 0x4ff154
004ff124
004ff124loc_4ff124:
004ff124str xzr, [sp+72]
004ff128stp xzr, xzr, [sp+80]
004ff12cldr x3, [sp+104]
004ff130ldr x4, [sp+112]
004ff134str x3, [sp+56]
004ff138str x4, [sp+64]
004ff13cldr x0, [sp+72]
004ff140ldr x1, [sp+80]
004ff144ldr x2, [sp+88]
004ff148ldp x29, x30, [sp-8]
004ff14cadd sp, sp, 272
004ff150ret x30
004ff154
004ff154loc_4ff154:
004ff154add x0, sp, 120
004ff158bl bytes.(*Buffer).Bytes
004ff15cstr x0, [sp+200]
004ff160str x1, [sp+208]
004ff164str x2, [sp+216]
004ff168str x0, [sp+72]
004ff16cstr x1, [sp+80]
004ff170str x2, [sp+88]
004ff174stp xzr, xzr, [sp+56]
004ff178ldr x0, [sp+72]
004ff17cldr x1, [sp+80]
004ff180ldr x2, [sp+88]
004ff184mov x3, xzr
004ff188mov x4, xzr
004ff18cldp x29, x30, [sp-8]
004ff190add sp, sp, 272
004ff194ret x30
004ff198
004ff198loc_4ff198:
004ff198stp x0, x1, [sp+8]
004ff19cstr x2, [sp+24]
004ff1a0mov x3, x30
004ff1a4bl runtime.morestack_noctxt.abi0
004ff1a8ldp x0, x1, [sp+8]
004ff1acldr x2, [sp+24]
004ff1b0b 0x4feff0
004ff1b4udf 0
004ff1b8udf 0
004ff1bcudf 0
004feff0

004ff1c0
004ff1c0github.com/bishopfox/sliver/implant/sliver/handlers.standarizeArchiveFileName: ; void github.com/bishopfox/sliver/implant/sliver/handlers.standarizeArchiveFileName(struct string path)
004ff1c0ldr x16, [x28+16]
004ff1c4sub x17, sp, 64
004ff1c8subs xzr, x17, x16
004ff1ccb.ls 0x4ff3b0
004ff1d0str x30, [sp-192]!
004ff1d4stur x29, [sp-8]
004ff1d8sub x29, sp, 8
004ff1dcstr x0, [sp+200]
004ff1e0str x1, [sp+208]
004ff1e4stp xzr, xzr, [sp+80]
004ff1e8ldr x0, [sp+200]
004ff1ecldr x1, [sp+208]
004ff1f0adrp x2, 0x211000
004ff1f4add x2, x2, 3320
004ff1f8orr x3, xzr, 1
004ff1fcadrp x4, 0x1b0000
004ff200add x4, x4, 4032
004ff204mov x5, x3
004ff208bl strings.ReplaceAll
004ff20cstr x0, [sp+96]
004ff210str x1, [sp+104]
004ff214adrp x2, 0x1b1000
004ff218add x2, x2, 19
004ff21corr x3, xzr, 2
004ff220bl strings.HasPrefix
004ff224strb w0, [sp+71]
004ff228tbnz w0, 0, 0x4ff230
004ff22cb 0x4ff274
004ff230
004ff230loc_4ff230:
004ff230ldr x1, [sp+104]
004ff234ldr x2, [sp+96]
004ff238subs xzr, x1, 2
004ff23cb.hs 0x4ff244
004ff240b 0x4ff3a4
004ff244
004ff244loc_4ff244:
004ff244sub x1, x1, 2
004ff248sub x3, xzr, x1
004ff24csbfm x3, x3, 63, 63
004ff250and x3, x3, 2
004ff254add x0, x2, x3
004ff258str x0, [sp+168]
004ff25cstr x1, [sp+176]
004ff260str x0, [sp+80]
004ff264str x1, [sp+88]
004ff268ldur x29, [sp-8]
004ff26cldr x30, [sp], 192
004ff270ret x30
004ff274
004ff274loc_4ff274:
004ff274ldr x0, [sp+96]
004ff278ldr x1, [sp+104]
004ff27cadrp x2, 0x1b0000
004ff280add x2, x2, 4032
004ff284orr x3, xzr, 1
004ff288orr x4, xzr, 2
004ff28cbl strings.SplitN
004ff290str x0, [sp+112]
004ff294str x1, [sp+120]
004ff298str x2, [sp+128]
004ff29cstr x1, [sp+72]
004ff2a0subs xzr, x1, 2
004ff2a4b.lt 0x4ff2ac
004ff2a8b 0x4ff2c8
004ff2ac
004ff2acloc_4ff2ac:
004ff2acldr x0, [sp+96]
004ff2b0ldr x1, [sp+104]
004ff2b4str x0, [sp+80]
004ff2b8str x1, [sp+88]
004ff2bcldur x29, [sp-8]
004ff2c0ldr x30, [sp], 192
004ff2c4ret x30
004ff2c8
004ff2c8loc_4ff2c8:
004ff2c8subs xzr, x1, 0
004ff2ccb.hi 0x4ff2d4
004ff2d0b 0x4ff39c
004ff2d4
004ff2d4loc_4ff2d4:
004ff2d4ldr x6, [x0]
004ff2d8ldr x7, [x0+8]
004ff2dcstr x6, [sp+152]
004ff2e0str x7, [sp+160]
004ff2e4ldr x6, [sp+112]
004ff2e8ldr x1, [sp+120]
004ff2ecsubs xzr, x1, 1
004ff2f0b.hi 0x4ff2f8
004ff2f4b 0x4ff394
004ff2f8
004ff2f8loc_4ff2f8:
004ff2f8ldr x0, [x6+16]
004ff2fcldr x1, [x6+24]
004ff300str x0, [sp+136]
004ff304str x1, [sp+144]
004ff308ldr x6, [sp+160]
004ff30ccbz x6, 0x4ff314
004ff310b 0x4ff328
004ff314
004ff314loc_4ff314:
004ff314str x0, [sp+80]
004ff318str x1, [sp+88]
004ff31cldur x29, [sp-8]
004ff320ldr x30, [sp], 192
004ff324ret x30
004ff328
004ff328loc_4ff328:
004ff328ldr x0, [sp+152]
004ff32cldr x1, [sp+160]
004ff330adrp x2, 0x210000
004ff334add x2, x2, 376
004ff338orr x3, xzr, 1
004ff33cmov x4, xzr
004ff340mov x5, xzr
004ff344bl strings.ReplaceAll
004ff348str x0, [sp+152]
004ff34cstr x1, [sp+160]
004ff350bl strings.ToLower
004ff354str x0, [sp+152]
004ff358str x1, [sp+160]
004ff35cldr x6, [sp+144]
004ff360ldr x5, [sp+136]
004ff364mov x2, x1
004ff368adrp x3, 0x1b0000
004ff36cadd x3, x3, 4032
004ff370orr x4, xzr, 1
004ff374mov x1, x0
004ff378mov x0, xzr
004ff37cbl runtime.concatstring3
004ff380str x0, [sp+80]
004ff384str x1, [sp+88]
004ff388ldur x29, [sp-8]
004ff38cldr x30, [sp], 192
004ff390ret x30
004ff394
004ff394loc_4ff394:
004ff394orr x0, xzr, 1
004ff398bl runtime.panicIndex
004ff39c
004ff39cloc_4ff39c:
004ff39cmov x0, xzr
004ff3a0bl runtime.panicIndex
004ff3a4
004ff3a4loc_4ff3a4:
004ff3a4orr x0, xzr, 2
004ff3a8bl runtime.panicSliceB
004ff3achint
004ff3b0
004ff3b0loc_4ff3b0:
004ff3b0stp x0, x1, [sp+8]
004ff3b4mov x3, x30
004ff3b8bl runtime.morestack_noctxt.abi0
004ff3bcldp x0, x1, [sp+8]
004ff3c0b 0x4ff1c0
004ff3c4udf 0
004ff3c8udf 0
004ff3ccudf 0
004ff1c0

004ff3d0
004ff3d0github.com/bishopfox/sliver/implant/sliver/handlers.buildFileList: ; void github.com/bishopfox/sliver/implant/sliver/handlers.buildFileList(struct string path, struct string filter, bool recurse)
004ff3d0ldr x16, [x28+16]
004ff3d4sub x17, sp, 416
004ff3d8subs xzr, x17, x16
004ff3dcb.ls 0x4ff8fc
004ff3e0sub x20, sp, 544
004ff3e4stp x29, x30, [x20-8]
004ff3e8add sp, x20, 0
004ff3ecsub x29, sp, 8
004ff3f0str x0, [sp+552]
004ff3f4str x1, [sp+560]
004ff3f8str x2, [sp+568]
004ff3fcstr x3, [sp+576]
004ff400strb w4, [sp+584]
004ff404str xzr, [sp+168]
004ff408stp xzr, xzr, [sp+176]
004ff40cstp xzr, xzr, [sp+152]
004ff410str xzr, [sp+224]
004ff414stp xzr, xzr, [sp+232]
004ff418ldrb w6, [sp+584]
004ff41ctbnz w6, 0, 0x4ff424
004ff420b 0x4ff4cc
004ff424
004ff424loc_4ff424:
004ff424stp xzr, xzr, [sp+384]
004ff428stp xzr, xzr, [sp+400]
004ff42cadd x3, sp, 384
004ff430str x3, [sp+336]
004ff434ldrsb x27, [x3]
004ff438adrp x4, 0
004ff43cadd x4, x4, 2336
004ff440str x4, [x3]
004ff444ldrsb x27, [x3]
004ff448ldr x4, [sp+568]
004ff44cldr x5, [sp+576]
004ff450str x5, [x3+16]
004ff454adrp x27, 0x54c000
004ff458ldr w5, [x27+3056]
004ff45ccbz w5, 0x4ff464
004ff460b 0x4ff468
004ff464
004ff464loc_4ff464:
004ff464b 0x4ff47c
004ff468
004ff468loc_4ff468:
004ff468bl runtime.gcWriteBarrier2
004ff46cstr x4, [x25]
004ff470ldr x5, [x3+8]
004ff474str x5, [x25+8]
004ff478b 0x4ff47c
004ff47c
004ff47cloc_4ff47c:
004ff47cstr x4, [x3+8]
004ff480ldrsb x27, [x3]
004ff484adrp x27, 0x54c000
004ff488ldr w4, [x27+3056]
004ff48ccbz w4, 0x4ff494
004ff490b 0x4ff498
004ff494
004ff494loc_4ff494:
004ff494b 0x4ff4b0
004ff498
004ff498loc_4ff498:
004ff498bl runtime.gcWriteBarrier2
004ff49cadd x4, sp, 224
004ff4a0str x4, [x25]
004ff4a4ldr x5, [x3+24]
004ff4a8str x5, [x25+8]
004ff4acb 0x4ff4b0
004ff4b0
004ff4b0loc_4ff4b0:
004ff4b0add x4, sp, 224
004ff4b4str x4, [x3+24]
004ff4b8ldr x0, [sp+552]
004ff4bcldr x1, [sp+560]
004ff4c0ldr x2, [sp+336]
004ff4c4bl path/filepath.WalkDir
004ff4c8b 0x4ff8c0
004ff4cc
004ff4ccloc_4ff4cc:
004ff4ccldr x0, [sp+552]
004ff4d0ldr x1, [sp+560]
004ff4d4adrp x2, 0x211000
004ff4d8add x2, x2, 3320
004ff4dcorr x3, xzr, 1
004ff4e0adrp x4, 0x1b0000
004ff4e4add x4, x4, 4032
004ff4e8mov x5, x3
004ff4ecbl strings.ReplaceAll
004ff4f0str x0, [sp+192]
004ff4f4str x1, [sp+200]
004ff4f8str xzr, [sp+456]
004ff4fcstp xzr, xzr, [sp+440]
004ff500ldr x0, [sp+552]
004ff504ldr x1, [sp+560]
004ff508bl os.Open
004ff50cstr x0, [sp+456]
004ff510str x1, [sp+440]
004ff514str x2, [sp+448]
004ff518ldr x6, [sp+456]
004ff51cstr x6, [sp+328]
004ff520ldr x6, [sp+448]
004ff524ldr x7, [sp+440]
004ff528str x7, [sp+520]
004ff52cstr x6, [sp+528]
004ff530ldr x6, [sp+328]
004ff534str x6, [sp+320]
004ff538ldr x6, [sp+528]
004ff53cldr x7, [sp+520]
004ff540str x7, [sp+280]
004ff544str x6, [sp+288]
004ff548cbnz x7, 0x4ff550
004ff54cb 0x4ff580
004ff550
004ff550loc_4ff550:
004ff550str xzr, [sp+168]
004ff554stp xzr, xzr, [sp+176]
004ff558ldr x3, [sp+280]
004ff55cldr x4, [sp+288]
004ff560str x3, [sp+152]
004ff564str x4, [sp+160]
004ff568ldr x0, [sp+168]
004ff56cldr x1, [sp+176]
004ff570ldr x2, [sp+184]
004ff574ldp x29, x30, [sp-8]
004ff578add sp, sp, 544
004ff57cret x30
004ff580
004ff580loc_4ff580:
004ff580str xzr, [sp+416]
004ff584stp xzr, xzr, [sp+424]
004ff588stp xzr, xzr, [sp+440]
004ff58cldr x0, [sp+320]
004ff590mov x1, xzr
004ff594bl os.(*File).Readdirnames
004ff598str x0, [sp+416]
004ff59cstr x1, [sp+424]
004ff5a0str x2, [sp+432]
004ff5a4str x3, [sp+440]
004ff5a8str x4, [sp+448]
004ff5acldr x2, [sp+416]
004ff5b0ldr x3, [sp+424]
004ff5b4ldr x4, [sp+432]
004ff5b8str x2, [sp+496]
004ff5bcstr x3, [sp+504]
004ff5c0str x4, [sp+512]
004ff5c4ldr x2, [sp+440]
004ff5c8ldr x3, [sp+448]
004ff5ccstr x2, [sp+480]
004ff5d0str x3, [sp+488]
004ff5d4ldr x2, [sp+496]
004ff5d8ldr x3, [sp+504]
004ff5dcldr x4, [sp+512]
004ff5e0str x2, [sp+296]
004ff5e4str x3, [sp+304]
004ff5e8str x4, [sp+312]
004ff5ecldr x2, [sp+480]
004ff5f0ldr x3, [sp+488]
004ff5f4str x2, [sp+280]
004ff5f8str x3, [sp+288]
004ff5fcldr x0, [sp+320]
004ff600bl os.(*File).Close
004ff604ldr x2, [sp+280]
004ff608cbnz x2, 0x4ff610
004ff60cb 0x4ff640
004ff610
004ff610loc_4ff610:
004ff610str xzr, [sp+168]
004ff614stp xzr, xzr, [sp+176]
004ff618ldr x3, [sp+280]
004ff61cldr x4, [sp+288]
004ff620str x3, [sp+152]
004ff624str x4, [sp+160]
004ff628ldr x0, [sp+168]
004ff62cldr x1, [sp+176]
004ff630ldr x2, [sp+184]
004ff634ldp x29, x30, [sp-8]
004ff638add sp, sp, 544
004ff63cret x30
004ff640
004ff640loc_4ff640:
004ff640ldr x5, [sp+304]
004ff644ldr x6, [sp+296]
004ff648ldr x7, [sp+312]
004ff64cstr x6, [sp+416]
004ff650str x5, [sp+424]
004ff654str x7, [sp+432]
004ff658str xzr, [sp+144]
004ff65cstr x5, [sp+136]
004ff660ldr x5, [sp+416]
004ff664str x5, [sp+128]
004ff668b 0x4ff66c
004ff66c
004ff66cloc_4ff66c:
004ff66cldr x5, [sp+136]
004ff670ldr x6, [sp+144]
004ff674subs xzr, x5, x6
004ff678b.gt 0x4ff680
004ff67cb 0x4ff8bc
004ff680
004ff680loc_4ff680:
004ff680ldr x5, [sp+128]
004ff684str x5, [sp+376]
004ff688ldr x5, [sp+376]
004ff68cldr x3, [x5]
004ff690ldr x4, [x5+8]
004ff694str x3, [sp+248]
004ff698str x4, [sp+256]
004ff69cldr x1, [sp+192]
004ff6a0ldr x2, [sp+200]
004ff6a4mov x0, xzr
004ff6a8bl runtime.concatstring2
004ff6acstr x0, [sp+360]
004ff6b0str x1, [sp+368]
004ff6b4adrp x2, 0x211000
004ff6b8add x2, x2, 3320
004ff6bcorr x3, xzr, 1
004ff6c0adrp x4, 0x1b0000
004ff6c4add x4, x4, 4032
004ff6c8mov x5, x3
004ff6ccbl strings.ReplaceAll
004ff6d0str x0, [sp+208]
004ff6d4str x1, [sp+216]
004ff6d8ldr x5, [sp+576]
004ff6dccbnz x5, 0x4ff6e4
004ff6e0b 0x4ff814
004ff6e4
004ff6e4loc_4ff6e4:
004ff6e4stp xzr, xzr, [sp+440]
004ff6e8ldr x1, [sp+192]
004ff6ecldr x3, [sp+568]
004ff6f0ldr x2, [sp+200]
004ff6f4ldr x4, [sp+576]
004ff6f8add x0, sp, 94
004ff6fcbl runtime.concatstring2
004ff700str x0, [sp+344]
004ff704str x1, [sp+352]
004ff708ldr x3, [sp+216]
004ff70cldr x2, [sp+208]
004ff710bl github.com/bishopfox/sliver/implant/sliver/handlers/matcher.Match
004ff714strb w0, [sp+126]
004ff718str x1, [sp+440]
004ff71cstr x2, [sp+448]
004ff720ldrb w5, [sp+126]
004ff724strb w5, [sp+127]
004ff728ldr x5, [sp+440]
004ff72cldr x6, [sp+448]
004ff730str x5, [sp+464]
004ff734str x6, [sp+472]
004ff738ldrb w5, [sp+127]
004ff73cstrb w5, [sp+93]
004ff740ldr x5, [sp+472]
004ff744ldr x6, [sp+464]
004ff748str x6, [sp+264]
004ff74cstr x5, [sp+272]
004ff750subs xzr, x6, 0
004ff754cset x5, ne
004ff758eor x5, x5, 1
004ff75cstrb w5, [sp+126]
004ff760cbnz x6, 0x4ff768
004ff764b 0x4ff76c
004ff768
004ff768loc_4ff768:
004ff768b 0x4ff778
004ff76c
004ff76cloc_4ff76c:
004ff76cldrb w5, [sp+93]
004ff770strb w5, [sp+126]
004ff774b 0x4ff778
004ff778
004ff778loc_4ff778:
004ff778ldrb w5, [sp+126]
004ff77ctbnz w5, 0, 0x4ff784
004ff780b 0x4ff80c
004ff784
004ff784loc_4ff784:
004ff784ldr x2, [sp+240]
004ff788ldr x0, [sp+224]
004ff78cldr x5, [sp+232]
004ff790add x1, x5, 1
004ff794subs xzr, x2, x1
004ff798b.hs 0x4ff7a0
004ff79cb 0x4ff7a4
004ff7a0
004ff7a0loc_4ff7a0:
004ff7a0b 0x4ff7b8
004ff7a4
004ff7a4loc_4ff7a4:
004ff7a4orr x3, xzr, 1
004ff7a8adrp x4, 0xf6000
004ff7acadd x4, x4, 2944
004ff7b0bl runtime.growslice
004ff7b4b 0x4ff7b8
004ff7b8
004ff7b8loc_4ff7b8:
004ff7b8ldr x5, [sp+208]
004ff7bcldr x6, [sp+216]
004ff7c0sub x7, x1, 1
004ff7c4add x8, x0, x7, lsl #4
004ff7c8str x6, [x8+8]
004ff7ccubfm x6, x7, 60, 59
004ff7d0adrp x27, 0x54c000
004ff7d4ldr w7, [x27+3056]
004ff7d8cbz w7, 0x4ff7e0
004ff7dcb 0x4ff7e4
004ff7e0
004ff7e0loc_4ff7e0:
004ff7e0b 0x4ff7f8
004ff7e4
004ff7e4loc_4ff7e4:
004ff7e4bl runtime.gcWriteBarrier2
004ff7e8str x5, [x25]
004ff7ecldr x7, [x0+x6]
004ff7f0str x7, [x25+8]
004ff7f4b 0x4ff7f8
004ff7f8
004ff7f8loc_4ff7f8:
004ff7f8str x5, [x0+x6]
004ff7fcstr x0, [sp+224]
004ff800str x1, [sp+232]
004ff804str x2, [sp+240]
004ff808b 0x4ff810
004ff80c
004ff80cloc_4ff80c:
004ff80cb 0x4ff810
004ff810
004ff810loc_4ff810:
004ff810b 0x4ff89c
004ff814
004ff814loc_4ff814:
004ff814ldr x2, [sp+240]
004ff818ldr x0, [sp+224]
004ff81cldr x5, [sp+232]
004ff820add x1, x5, 1
004ff824subs xzr, x2, x1
004ff828b.hs 0x4ff830
004ff82cb 0x4ff834
004ff830
004ff830loc_4ff830:
004ff830b 0x4ff848
004ff834
004ff834loc_4ff834:
004ff834orr x3, xzr, 1
004ff838adrp x4, 0xf6000
004ff83cadd x4, x4, 2944
004ff840bl runtime.growslice
004ff844b 0x4ff848
004ff848
004ff848loc_4ff848:
004ff848ldr x5, [sp+208]
004ff84cldr x6, [sp+216]
004ff850sub x7, x1, 1
004ff854add x8, x0, x7, lsl #4
004ff858str x6, [x8+8]
004ff85cubfm x6, x7, 60, 59
004ff860adrp x27, 0x54c000
004ff864ldr w7, [x27+3056]
004ff868cbz w7, 0x4ff870
004ff86cb 0x4ff874
004ff870
004ff870loc_4ff870:
004ff870b 0x4ff888
004ff874
004ff874loc_4ff874:
004ff874bl runtime.gcWriteBarrier2
004ff878str x5, [x25]
004ff87cldr x7, [x0+x6]
004ff880str x7, [x25+8]
004ff884b 0x4ff888
004ff888
004ff888loc_4ff888:
004ff888str x5, [x0+x6]
004ff88cstr x0, [sp+224]
004ff890str x1, [sp+232]
004ff894str x2, [sp+240]
004ff898b 0x4ff89c
004ff89c
004ff89cloc_4ff89c:
004ff89cb 0x4ff8a0
004ff8a0
004ff8a0loc_4ff8a0:
004ff8a0ldr x5, [sp+144]
004ff8a4add x5, x5, 1
004ff8a8str x5, [sp+144]
004ff8acldr x5, [sp+376]
004ff8b0add x5, x5, 16
004ff8b4str x5, [sp+128]
004ff8b8b 0x4ff66c
004ff8bc
004ff8bcloc_4ff8bc:
004ff8bcb 0x4ff8c0
004ff8c0
004ff8c0loc_4ff8c0:
004ff8c0ldr x5, [sp+224]
004ff8c4ldr x6, [sp+232]
004ff8c8ldr x7, [sp+240]
004ff8ccstr x5, [sp+168]
004ff8d0str x6, [sp+176]
004ff8d4str x7, [sp+184]
004ff8d8stp xzr, xzr, [sp+152]
004ff8dcldr x0, [sp+168]
004ff8e0ldr x1, [sp+176]
004ff8e4ldr x2, [sp+184]
004ff8e8mov x3, xzr
004ff8ecmov x4, xzr
004ff8f0ldp x29, x30, [sp-8]
004ff8f4add sp, sp, 544
004ff8f8ret x30
004ff8fc
004ff8fcloc_4ff8fc:
004ff8fcstp x0, x1, [sp+8]
004ff900stp x2, x3, [sp+24]
004ff904strb w4, [sp+40]
004ff908mov x3, x30
004ff90cbl runtime.morestack_noctxt.abi0
004ff910ldp x0, x1, [sp+8]
004ff914ldp x2, x3, [sp+24]
004ff918ldrb w4, [sp+40]
004ff91cb 0x4ff3d0
004ff3d0

004ff920
004ff920github.com/bishopfox/sliver/implant/sliver/handlers.buildFileList.func1: ; void github.com/bishopfox/sliver/implant/sliver/handlers.buildFileList.func1(struct string file, io/fs.DirEntry d, error err)
004ff920ldr x16, [x28+16]
004ff924sub x17, sp, 208
004ff928subs xzr, x17, x16
004ff92cb.ls 0x4ffc4c
004ff930sub x20, sp, 336
004ff934stp x29, x30, [x20-8]
004ff938add sp, x20, 0
004ff93csub x29, sp, 8
004ff940str x0, [sp+344]
004ff944str x1, [sp+352]
004ff948str x2, [sp+360]
004ff94cstr x3, [sp+368]
004ff950str x4, [sp+376]
004ff954str x5, [sp+384]
004ff958ldr x6, [x26+8]
004ff95cldr x7, [x26+16]
004ff960str x6, [sp+208]
004ff964str x7, [sp+216]
004ff968ldr x6, [x26+24]
004ff96cstr x6, [sp+320]
004ff970stp xzr, xzr, [sp+160]
004ff974ldr x0, [sp+344]
004ff978ldr x1, [sp+352]
004ff97cadrp x2, 0x211000
004ff980add x2, x2, 3320
004ff984orr x3, xzr, 1
004ff988adrp x4, 0x1b0000
004ff98cadd x4, x4, 4032
004ff990mov x5, x3
004ff994bl strings.ReplaceAll
004ff998str x0, [sp+224]
004ff99cstr x1, [sp+232]
004ff9a0ldr x6, [sp+216]
004ff9a4cbnz x6, 0x4ff9ac
004ff9a8b 0x4ffb7c
004ff9ac
004ff9acloc_4ff9ac:
004ff9acldr x0, [sp+344]
004ff9b0ldr x1, [sp+352]
004ff9b4bl path/filepath.Dir
004ff9b8str x0, [sp+304]
004ff9bcstr x1, [sp+312]
004ff9c0adrp x2, 0x211000
004ff9c4add x2, x2, 3320
004ff9c8orr x3, xzr, 1
004ff9ccadrp x4, 0x1b0000
004ff9d0add x4, x4, 4032
004ff9d4mov x5, x3
004ff9d8bl strings.ReplaceAll
004ff9dcstr x0, [sp+288]
004ff9e0str x1, [sp+296]
004ff9e4mov x2, x1
004ff9e8adrp x3, 0x1b0000
004ff9ecadd x3, x3, 4032
004ff9f0orr x4, xzr, 1
004ff9f4mov x1, x0
004ff9f8add x0, sp, 127
004ff9fcbl runtime.concatstring2
004ffa00str x0, [sp+176]
004ffa04str x1, [sp+184]
004ffa08stp xzr, xzr, [sp+272]
004ffa0cldr x1, [sp+176]
004ffa10ldr x3, [sp+208]
004ffa14ldr x2, [sp+184]
004ffa18ldr x4, [sp+216]
004ffa1cadd x0, sp, 95
004ffa20bl runtime.concatstring2
004ffa24str x0, [sp+256]
004ffa28str x1, [sp+264]
004ffa2cldr x3, [sp+232]
004ffa30ldr x2, [sp+224]
004ffa34bl github.com/bishopfox/sliver/implant/sliver/handlers/matcher.Match
004ffa38strb w0, [sp+159]
004ffa3cstr x1, [sp+272]
004ffa40str x2, [sp+280]
004ffa44ldrb w2, [sp+159]
004ffa48strb w2, [sp+94]
004ffa4cldr x2, [sp+272]
004ffa50ldr x3, [sp+280]
004ffa54str x2, [sp+240]
004ffa58str x3, [sp+248]
004ffa5cldrb w2, [sp+94]
004ffa60strb w2, [sp+93]
004ffa64ldr x2, [sp+240]
004ffa68ldr x3, [sp+248]
004ffa6cstr x2, [sp+192]
004ffa70str x3, [sp+200]
004ffa74ldrb w2, [sp+93]
004ffa78eor x3, x2, 1
004ffa7cstrb w3, [sp+159]
004ffa80tbnz w2, 0, 0x4ffa88
004ffa84b 0x4ffa9c
004ffa88
004ffa88loc_4ffa88:
004ffa88ldr x5, [sp+192]
004ffa8csubs xzr, x5, 0
004ffa90cset x5, ne
004ffa94strb w5, [sp+159]
004ffa98b 0x4ffaa0
004ffa9c
004ffa9cloc_4ffa9c:
004ffa9cb 0x4ffaa0
004ffaa0
004ffaa0loc_4ffaa0:
004ffaa0ldrb w5, [sp+159]
004ffaa4tbnz w5, 0, 0x4ffaac
004ffaa8b 0x4ffac4
004ffaac
004ffaacloc_4ffaac:
004ffaacstp xzr, xzr, [sp+160]
004ffab0mov x0, xzr
004ffab4mov x1, xzr
004ffab8ldp x29, x30, [sp-8]
004ffabcadd sp, sp, 336
004ffac0ret x30
004ffac4
004ffac4loc_4ffac4:
004ffac4ldr x5, [sp+320]
004ffac8ldr x2, [x5+16]
004ffaccldr x0, [x5]
004ffad0ldr x5, [x5+8]
004ffad4add x1, x5, 1
004ffad8subs xzr, x2, x1
004ffadcb.hs 0x4ffae4
004ffae0b 0x4ffae8
004ffae4
004ffae4loc_4ffae4:
004ffae4b 0x4ffafc
004ffae8
004ffae8loc_4ffae8:
004ffae8orr x3, xzr, 1
004ffaecadrp x4, 0xf6000
004ffaf0add x4, x4, 2944
004ffaf4bl runtime.growslice
004ffaf8b 0x4ffafc
004ffafc
004ffafcloc_4ffafc:
004ffafcldr x3, [sp+344]
004ffb00ldr x4, [sp+352]
004ffb04sub x5, x1, 1
004ffb08add x6, x0, x5, lsl #4
004ffb0cstr x4, [x6+8]
004ffb10ubfm x4, x5, 60, 59
004ffb14adrp x27, 0x54c000
004ffb18ldr w5, [x27+3056]
004ffb1ccbz w5, 0x4ffb24
004ffb20b 0x4ffb28
004ffb24
004ffb24loc_4ffb24:
004ffb24b 0x4ffb3c
004ffb28
004ffb28loc_4ffb28:
004ffb28bl runtime.gcWriteBarrier2
004ffb2cstr x3, [x25]
004ffb30ldr x5, [x0+x4]
004ffb34str x5, [x25+8]
004ffb38b 0x4ffb3c
004ffb3c
004ffb3cloc_4ffb3c:
004ffb3cstr x3, [x0+x4]
004ffb40ldr x3, [sp+320]
004ffb44str x1, [x3+8]
004ffb48str x2, [x3+16]
004ffb4cadrp x27, 0x54c000
004ffb50ldr w2, [x27+3056]
004ffb54cbz w2, 0x4ffb5c
004ffb58b 0x4ffb60
004ffb5c
004ffb5cloc_4ffb5c:
004ffb5cb 0x4ffb74
004ffb60
004ffb60loc_4ffb60:
004ffb60bl runtime.gcWriteBarrier2
004ffb64str x0, [x25]
004ffb68ldr x2, [x3]
004ffb6cstr x2, [x25+8]
004ffb70b 0x4ffb74
004ffb74
004ffb74loc_4ffb74:
004ffb74str x0, [x3]
004ffb78b 0x4ffc34
004ffb7c
004ffb7cloc_4ffb7c:
004ffb7cldr x5, [sp+320]
004ffb80ldr x2, [x5+16]
004ffb84ldr x0, [x5]
004ffb88ldr x5, [x5+8]
004ffb8cadd x1, x5, 1
004ffb90subs xzr, x2, x1
004ffb94b.hs 0x4ffb9c
004ffb98b 0x4ffba0
004ffb9c
004ffb9cloc_4ffb9c:
004ffb9cb 0x4ffbb4
004ffba0
004ffba0loc_4ffba0:
004ffba0orr x3, xzr, 1
004ffba4adrp x4, 0xf6000
004ffba8add x4, x4, 2944
004ffbacbl runtime.growslice
004ffbb0b 0x4ffbb4
004ffbb4
004ffbb4loc_4ffbb4:
004ffbb4ldr x3, [sp+344]
004ffbb8ldr x4, [sp+352]
004ffbbcsub x5, x1, 1
004ffbc0add x6, x0, x5, lsl #4
004ffbc4str x4, [x6+8]
004ffbc8ubfm x4, x5, 60, 59
004ffbccadrp x27, 0x54c000
004ffbd0ldr w5, [x27+3056]
004ffbd4cbz w5, 0x4ffbdc
004ffbd8b 0x4ffbe0
004ffbdc
004ffbdcloc_4ffbdc:
004ffbdcb 0x4ffbf4
004ffbe0
004ffbe0loc_4ffbe0:
004ffbe0bl runtime.gcWriteBarrier2
004ffbe4str x3, [x25]
004ffbe8ldr x5, [x0+x4]
004ffbecstr x5, [x25+8]
004ffbf0b 0x4ffbf4
004ffbf4
004ffbf4loc_4ffbf4:
004ffbf4str x3, [x0+x4]
004ffbf8ldr x3, [sp+320]
004ffbfcstr x1, [x3+8]
004ffc00str x2, [x3+16]
004ffc04adrp x27, 0x54c000
004ffc08ldr w2, [x27+3056]
004ffc0ccbz w2, 0x4ffc14
004ffc10b 0x4ffc18
004ffc14
004ffc14loc_4ffc14:
004ffc14b 0x4ffc2c
004ffc18
004ffc18loc_4ffc18:
004ffc18bl runtime.gcWriteBarrier2
004ffc1cstr x0, [x25]
004ffc20ldr x2, [x3]
004ffc24str x2, [x25+8]
004ffc28b 0x4ffc2c
004ffc2c
004ffc2cloc_4ffc2c:
004ffc2cstr x0, [x3]
004ffc30b 0x4ffc34
004ffc34
004ffc34loc_4ffc34:
004ffc34stp xzr, xzr, [sp+160]
004ffc38mov x0, xzr
004ffc3cmov x1, xzr
004ffc40ldp x29, x30, [sp-8]
004ffc44add sp, sp, 336
004ffc48ret x30
004ffc4c
004ffc4cloc_4ffc4c:
004ffc4cstp x0, x1, [sp+8]
004ffc50stp x2, x3, [sp+24]
004ffc54stp x4, x5, [sp+40]
004ffc58mov x3, x30
004ffc5cbl runtime.morestack.abi0
004ffc60ldp x0, x1, [sp+8]
004ffc64ldp x2, x3, [sp+24]
004ffc68ldp x4, x5, [sp+40]
004ffc6cb 0x4ff920
004ff920

004ffc70
004ffc70github.com/bishopfox/sliver/implant/sliver/handlers.compressDir: ; void github.com/bishopfox/sliver/implant/sliver/handlers.compressDir(struct string path, struct string filter, bool recurse, io.Writer buf)
004ffc70ldr x16, [x28+16]
004ffc74sub x17, sp, 656
004ffc78subs xzr, x17, x16
004ffc7cb.ls 0x500460
004ffc80sub x20, sp, 784
004ffc84stp x29, x30, [x20-8]
004ffc88add sp, x20, 0
004ffc8csub x29, sp, 8
004ffc90str x0, [sp+792]
004ffc94str x1, [sp+800]
004ffc98str x2, [sp+808]
004ffc9cstr x3, [sp+816]
004ffca0strb w4, [sp+824]
004ffca4str x5, [sp+832]
004ffca8str x6, [sp+840]
004ffcacstr xzr, [sp+72]
004ffcb0str xzr, [sp+64]
004ffcb4stp xzr, xzr, [sp+136]
004ffcb8ldr x0, [sp+832]
004ffcbcldr x1, [sp+840]
004ffcc0bl compress/gzip.NewWriter
004ffcc4str x0, [sp+152]
004ffcc8str x0, [sp+504]
004ffcccmov x1, x0
004ffcd0adrp x0, 0x214000
004ffcd4add x0, x0, 2816
004ffcd8bl archive/tar.NewWriter
004ffcdcstr x0, [sp+160]
004ffce0str xzr, [sp+88]
004ffce4str xzr, [sp+80]
004ffce8str xzr, [sp+184]
004ffcecstp xzr, xzr, [sp+192]
004ffcf0stp xzr, xzr, [sp+488]
004ffcf4stp xzr, xzr, [sp+472]
004ffcf8ldr x0, [sp+792]
004ffcfcldr x1, [sp+800]
004ffd00bl os.Lstat
004ffd04str x0, [sp+488]
004ffd08str x1, [sp+496]
004ffd0cstr x2, [sp+472]
004ffd10str x3, [sp+480]
004ffd14ldr x2, [sp+496]
004ffd18ldr x3, [sp+488]
004ffd1cstr x3, [sp+760]
004ffd20str x2, [sp+768]
004ffd24ldr x2, [sp+472]
004ffd28ldr x3, [sp+480]
004ffd2cstr x2, [sp+744]
004ffd30str x3, [sp+752]
004ffd34ldr x2, [sp+760]
004ffd38ldr x3, [sp+768]
004ffd3cstr x2, [sp+168]
004ffd40str x3, [sp+176]
004ffd44ldr x3, [sp+752]
004ffd48ldr x2, [sp+744]
004ffd4cstr x2, [sp+376]
004ffd50str x3, [sp+384]
004ffd54cbnz x2, 0x4ffd5c
004ffd58b 0x4ffd88
004ffd5c
004ffd5cloc_4ffd5c:
004ffd5cldr x4, [sp+88]
004ffd60str x4, [sp+72]
004ffd64ldr x4, [sp+80]
004ffd68str x4, [sp+64]
004ffd6cstr x2, [sp+136]
004ffd70str x3, [sp+144]
004ffd74ldr x0, [sp+72]
004ffd78ldr x1, [sp+64]
004ffd7cldp x29, x30, [sp-8]
004ffd80add sp, sp, 784
004ffd84ret x30
004ffd88
004ffd88loc_4ffd88:
004ffd88ldr x1, [sp+168]
004ffd8cldrsb x27, [x1]
004ffd90ldr x1, [x1+40]
004ffd94ldr x0, [sp+176]
004ffd98blr x1
004ffd9cstr w0, [sp+60]
004ffda0tbnz w0, 27, 0x4ffda8
004ffda4b 0x4ffe68
004ffda8
004ffda8loc_4ffda8:
004ffda8stp xzr, xzr, [sp+456]
004ffdacstp xzr, xzr, [sp+472]
004ffdb0ldr x0, [sp+792]
004ffdb4ldr x1, [sp+800]
004ffdb8bl path/filepath.EvalSymlinks
004ffdbcstr x0, [sp+456]
004ffdc0str x1, [sp+464]
004ffdc4str x2, [sp+472]
004ffdc8str x3, [sp+480]
004ffdccldr x2, [sp+464]
004ffdd0ldr x3, [sp+456]
004ffdd4str x3, [sp+728]
004ffdd8str x2, [sp+736]
004ffddcldr x2, [sp+472]
004ffde0ldr x3, [sp+480]
004ffde4str x2, [sp+712]
004ffde8str x3, [sp+720]
004ffdecldr x2, [sp+728]
004ffdf0ldr x3, [sp+736]
004ffdf4str x2, [sp+792]
004ffdf8str x3, [sp+800]
004ffdfcldr x3, [sp+720]
004ffe00ldr x2, [sp+712]
004ffe04str x2, [sp+376]
004ffe08str x3, [sp+384]
004ffe0ccbnz x2, 0x4ffe14
004ffe10b 0x4ffe40
004ffe14
004ffe14loc_4ffe14:
004ffe14ldr x4, [sp+88]
004ffe18str x4, [sp+72]
004ffe1cldr x4, [sp+80]
004ffe20str x4, [sp+64]
004ffe24str x2, [sp+136]
004ffe28str x3, [sp+144]
004ffe2cldr x0, [sp+72]
004ffe30ldr x1, [sp+64]
004ffe34ldp x29, x30, [sp-8]
004ffe38add sp, sp, 784
004ffe3cret x30
004ffe40
004ffe40loc_4ffe40:
004ffe40ldr x1, [sp+792]
004ffe44ldr x2, [sp+800]
004ffe48mov x0, xzr
004ffe4cadrp x3, 0x1b0000
004ffe50add x3, x3, 4032
004ffe54orr x4, xzr, 1
004ffe58bl runtime.concatstring2
004ffe5cstr x0, [sp+792]
004ffe60str x1, [sp+800]
004ffe64b 0x4ffe6c
004ffe68
004ffe68loc_4ffe68:
004ffe68b 0x4ffe6c
004ffe6c
004ffe6cloc_4ffe6c:
004ffe6cstr xzr, [sp+432]
004ffe70stp xzr, xzr, [sp+440]
004ffe74stp xzr, xzr, [sp+472]
004ffe78ldrb w4, [sp+824]
004ffe7cldr x0, [sp+792]
004ffe80ldr x2, [sp+808]
004ffe84ldr x1, [sp+800]
004ffe88ldr x3, [sp+816]
004ffe8cbl github.com/bishopfox/sliver/implant/sliver/handlers.buildFileList
004ffe90str x0, [sp+432]
004ffe94str x1, [sp+440]
004ffe98str x2, [sp+448]
004ffe9cstr x3, [sp+472]
004ffea0str x4, [sp+480]
004ffea4ldr x5, [sp+440]
004ffea8ldr x6, [sp+448]
004ffeacldr x7, [sp+432]
004ffeb0str x7, [sp+688]
004ffeb4str x5, [sp+696]
004ffeb8str x6, [sp+704]
004ffebcldr x5, [sp+472]
004ffec0ldr x6, [sp+480]
004ffec4str x5, [sp+672]
004ffec8str x6, [sp+680]
004ffeccldr x5, [sp+688]
004ffed0ldr x6, [sp+696]
004ffed4ldr x7, [sp+704]
004ffed8str x5, [sp+184]
004ffedcstr x6, [sp+192]
004ffee0str x7, [sp+200]
004ffee4ldr x3, [sp+680]
004ffee8ldr x2, [sp+672]
004ffeecstr x2, [sp+376]
004ffef0str x3, [sp+384]
004ffef4cbnz x2, 0x4ffefc
004ffef8b 0x4fff28
004ffefc
004ffefcloc_4ffefc:
004ffefcldr x4, [sp+88]
004fff00str x4, [sp+72]
004fff04ldr x4, [sp+80]
004fff08str x4, [sp+64]
004fff0cstr x2, [sp+136]
004fff10str x3, [sp+144]
004fff14ldr x0, [sp+72]
004fff18ldr x1, [sp+64]
004fff1cldp x29, x30, [sp-8]
004fff20add sp, sp, 784
004fff24ret x30
004fff28
004fff28loc_4fff28:
004fff28ldr x2, [sp+192]
004fff2cldr x3, [sp+184]
004fff30ldr x4, [sp+200]
004fff34str x3, [sp+432]
004fff38str x2, [sp+440]
004fff3cstr x4, [sp+448]
004fff40str xzr, [sp+112]
004fff44str x2, [sp+104]
004fff48ldr x2, [sp+432]
004fff4cstr x2, [sp+96]
004fff50b 0x4fff54
004fff54
004fff54loc_4fff54:
004fff54ldr x2, [sp+104]
004fff58ldr x3, [sp+112]
004fff5csubs xzr, x2, x3
004fff60b.gt 0x4fff68
004fff64b 0x500388
004fff68
004fff68loc_4fff68:
004fff68ldr x2, [sp+96]
004fff6cstr x2, [sp+400]
004fff70ldr x2, [sp+400]
004fff74ldr x3, [x2]
004fff78ldr x2, [x2+8]
004fff7cstr x3, [sp+232]
004fff80str x2, [sp+240]
004fff84stp xzr, xzr, [sp+488]
004fff88stp xzr, xzr, [sp+472]
004fff8cldr x0, [sp+232]
004fff90ldr x1, [sp+240]
004fff94bl os.Stat
004fff98str x0, [sp+488]
004fff9cstr x1, [sp+496]
004fffa0str x2, [sp+472]
004fffa4str x3, [sp+480]
004fffa8ldr x2, [sp+496]
004fffacldr x3, [sp+488]
004fffb0str x3, [sp+656]
004fffb4str x2, [sp+664]
004fffb8ldr x2, [sp+472]
004fffbcldr x3, [sp+480]
004fffc0str x2, [sp+640]
004fffc4str x3, [sp+648]
004fffc8ldr x2, [sp+656]
004fffccldr x3, [sp+664]
004fffd0str x2, [sp+248]
004fffd4str x3, [sp+256]
004fffd8ldr x2, [sp+648]
004fffdcldr x3, [sp+640]
004fffe0str x3, [sp+360]
004fffe4str x2, [sp+368]
004fffe8cbnz x3, 0x4ffff0
004fffecb 0x500000
004ffff0
004ffff0loc_4ffff0:
004ffff0ldr x2, [sp+80]
004ffff4add x2, x2, 1
004ffff8str x2, [sp+80]
004ffffcb 0x50036c
00500000
00500000loc_500000:
00500000ldr x0, [sp+232]
00500004ldr x1, [sp+240]
00500008bl github.com/bishopfox/sliver/implant/sliver/handlers.standarizeArchiveFileName
0050000cstr x0, [sp+216]
00500010str x1, [sp+224]
00500014ldr x2, [sp+248]
00500018ldrsb x27, [x2]
0050001cldr x2, [x2+40]
00500020ldr x0, [sp+256]
00500024blr x2
00500028str w0, [sp+60]
0050002ctbnz w0, 27, 0x500034
00500030b 0x500130
00500034
00500034loc_500034:
00500034stp xzr, xzr, [sp+456]
00500038stp xzr, xzr, [sp+472]
0050003cldr x0, [sp+232]
00500040ldr x1, [sp+240]
00500044bl path/filepath.EvalSymlinks
00500048str x0, [sp+456]
0050004cstr x1, [sp+464]
00500050str x2, [sp+472]
00500054str x3, [sp+480]
00500058ldr x2, [sp+464]
0050005cldr x3, [sp+456]
00500060str x3, [sp+624]
00500064str x2, [sp+632]
00500068ldr x2, [sp+472]
0050006cldr x3, [sp+480]
00500070str x2, [sp+608]
00500074str x3, [sp+616]
00500078ldr x2, [sp+624]
0050007cldr x3, [sp+632]
00500080str x2, [sp+232]
00500084str x3, [sp+240]
00500088ldr x2, [sp+616]
0050008cldr x3, [sp+608]
00500090str x3, [sp+360]
00500094str x2, [sp+368]
00500098cbnz x3, 0x5000a0
0050009cb 0x5000b0
005000a0
005000a0loc_5000a0:
005000a0ldr x2, [sp+80]
005000a4add x2, x2, 1
005000a8str x2, [sp+80]
005000acb 0x50036c
005000b0
005000b0loc_5000b0:
005000b0stp xzr, xzr, [sp+488]
005000b4stp xzr, xzr, [sp+472]
005000b8ldr x0, [sp+232]
005000bcldr x1, [sp+240]
005000c0bl os.Lstat
005000c4str x0, [sp+488]
005000c8str x1, [sp+496]
005000ccstr x2, [sp+472]
005000d0str x3, [sp+480]
005000d4ldr x2, [sp+496]
005000d8ldr x3, [sp+488]
005000dcstr x3, [sp+592]
005000e0str x2, [sp+600]
005000e4ldr x2, [sp+472]
005000e8ldr x3, [sp+480]
005000ecstr x2, [sp+576]
005000f0str x3, [sp+584]
005000f4ldr x2, [sp+592]
005000f8ldr x3, [sp+600]
005000fcstr x2, [sp+248]
00500100str x3, [sp+256]
00500104ldr x2, [sp+584]
00500108ldr x3, [sp+576]
0050010cstr x3, [sp+360]
00500110str x2, [sp+368]
00500114cbnz x3, 0x50011c
00500118b 0x50012c
0050011c
0050011cloc_50011c:
0050011cldr x2, [sp+80]
00500120add x2, x2, 1
00500124str x2, [sp+80]
00500128b 0x50036c
0050012c
0050012cloc_50012c:
0050012cb 0x500134
00500130
00500130loc_500130:
00500130b 0x500134
00500134
00500134loc_500134:
00500134str xzr, [sp+424]
00500138stp xzr, xzr, [sp+472]
0050013cldr x0, [sp+248]
00500140ldr x2, [sp+232]
00500144ldr x3, [sp+240]
00500148ldr x1, [sp+256]
0050014cbl archive/tar.FileInfoHeader
00500150str x0, [sp+424]
00500154str x1, [sp+472]
00500158str x2, [sp+480]
0050015cldr x4, [sp+424]
00500160str x4, [sp+568]
00500164ldr x4, [sp+480]
00500168ldr x5, [sp+472]
0050016cstr x5, [sp+552]
00500170str x4, [sp+560]
00500174ldr x4, [sp+568]
00500178str x4, [sp+208]
0050017cldr x4, [sp+560]
00500180ldr x5, [sp+552]
00500184str x5, [sp+360]
00500188str x4, [sp+368]
0050018ccbnz x5, 0x500194
00500190b 0x5001a4
00500194
00500194loc_500194:
00500194ldr x2, [sp+80]
00500198add x2, x2, 1
0050019cstr x2, [sp+80]
005001a0b 0x50036c
005001a4
005001a4loc_5001a4:
005001a4ldr x0, [sp+216]
005001a8ldr x1, [sp+224]
005001acbl path/filepath.ToSlash
005001b0str x0, [sp+456]
005001b4str x1, [sp+464]
005001b8ldr x2, [sp+208]
005001bcldrsb x27, [x2]
005001c0str x1, [x2+16]
005001c4adrp x27, 0x54b000
005001c8ldr w3, [x27+3056]
005001cccbz w3, 0x5001d4
005001d0b 0x5001d8
005001d4
005001d4loc_5001d4:
005001d4b 0x5001ec
005001d8
005001d8loc_5001d8:
005001d8bl runtime.gcWriteBarrier2
005001dcstr x0, [x25]
005001e0ldr x1, [x2+8]
005001e4str x1, [x25+8]
005001e8b 0x5001ec
005001ec
005001ecloc_5001ec:
005001ecstr x0, [x2+8]
005001f0ldr x1, [sp+248]
005001f4ldrsb x27, [x1]
005001f8ldr x1, [x1+24]
005001fcldr x0, [sp+256]
00500200blr x1
00500204strb w0, [sp+59]
00500208tbnz w0, 0, 0x500210
0050020cb 0x500240
00500210
00500210loc_500210:
00500210ldr x1, [sp+208]
00500214ldr x0, [sp+160]
00500218bl archive/tar.(*Writer).WriteHeader
0050021cstr x0, [sp+296]
00500220str x1, [sp+304]
00500224cbnz x0, 0x50022c
00500228b 0x50023c
0050022c
0050022cloc_50022c:
0050022cldr x2, [sp+80]
00500230add x2, x2, 1
00500234str x2, [sp+80]
00500238b 0x50036c
0050023c
0050023cloc_50023c:
0050023cb 0x500368
00500240
00500240loc_500240:
00500240str xzr, [sp+416]
00500244stp xzr, xzr, [sp+472]
00500248ldr x0, [sp+232]
0050024cldr x1, [sp+240]
00500250bl os.Open
00500254str x0, [sp+416]
00500258str x1, [sp+472]
0050025cstr x2, [sp+480]
00500260ldr x2, [sp+416]
00500264str x2, [sp+544]
00500268ldr x2, [sp+480]
0050026cldr x3, [sp+472]
00500270str x3, [sp+528]
00500274str x2, [sp+536]
00500278ldr x2, [sp+544]
0050027cstr x2, [sp+392]
00500280ldr x2, [sp+536]
00500284ldr x3, [sp+528]
00500288str x3, [sp+344]
0050028cstr x2, [sp+352]
00500290cbnz x3, 0x500298
00500294b 0x5002a8
00500298
00500298loc_500298:
00500298ldr x2, [sp+80]
0050029cadd x2, x2, 1
005002a0str x2, [sp+80]
005002a4b 0x50036c
005002a8
005002a8loc_5002a8:
005002a8ldr x1, [sp+208]
005002acldr x0, [sp+160]
005002b0bl archive/tar.(*Writer).WriteHeader
005002b4str x0, [sp+328]
005002b8str x1, [sp+336]
005002bccbnz x0, 0x5002c4
005002c0b 0x5002dc
005002c4
005002c4loc_5002c4:
005002c4ldr x1, [sp+80]
005002c8add x1, x1, 1
005002ccstr x1, [sp+80]
005002d0ldr x0, [sp+392]
005002d4bl os.(*File).Close
005002d8b 0x50036c
005002dc
005002dcloc_5002dc:
005002dcldr x4, [sp+160]
005002e0str x4, [sp+408]
005002e4ldr x4, [sp+392]
005002e8str x4, [sp+416]
005002ecstp xzr, xzr, [sp+472]
005002f0ldr x1, [sp+408]
005002f4ldr x3, [sp+416]
005002f8adrp x0, 0x213000
005002fcadd x0, x0, 2848
00500300adrp x2, 0x213000
00500304add x2, x2, 2456
00500308bl io.Copy
0050030cstr x0, [sp+120]
00500310str x1, [sp+472]
00500314str x2, [sp+480]
00500318ldr x4, [sp+120]
0050031cstr x4, [sp+128]
00500320str x1, [sp+512]
00500324str x2, [sp+520]
00500328str x1, [sp+312]
0050032cstr x2, [sp+320]
00500330cbnz x1, 0x500338
00500334b 0x500350
00500338
00500338loc_500338:
00500338ldr x1, [sp+80]
0050033cadd x1, x1, 1
00500340str x1, [sp+80]
00500344ldr x0, [sp+392]
00500348bl os.(*File).Close
0050034cb 0x50036c
00500350
00500350loc_500350:
00500350ldr x0, [sp+392]
00500354bl os.(*File).Close
00500358ldr x1, [sp+88]
0050035cadd x1, x1, 1
00500360str x1, [sp+88]
00500364b 0x500368
00500368
00500368loc_500368:
00500368b 0x50036c
0050036c
0050036cloc_50036c:
0050036cldr x2, [sp+112]
00500370add x2, x2, 1
00500374str x2, [sp+112]
00500378ldr x2, [sp+400]
0050037cadd x2, x2, 16
00500380str x2, [sp+96]
00500384b 0x4fff54
00500388
00500388loc_500388:
00500388ldr x0, [sp+160]
0050038cbl archive/tar.(*Writer).Close
00500390str x0, [sp+280]
00500394str x1, [sp+288]
00500398cbnz x0, 0x5003a0
0050039cb 0x5003dc
005003a0
005003a0loc_5003a0:
005003a0ldr x4, [sp+88]
005003a4str x4, [sp+72]
005003a8ldr x4, [sp+80]
005003acstr x4, [sp+64]
005003b0str x0, [sp+136]
005003b4str x1, [sp+144]
005003b8ldr x4, [sp+72]
005003bcldr x5, [sp+64]
005003c0mov x2, x0
005003c4mov x3, x1
005003c8mov x0, x4
005003ccmov x1, x5
005003d0ldp x29, x30, [sp-8]
005003d4add sp, sp, 784
005003d8ret x30
005003dc
005003dcloc_5003dc:
005003dcldr x0, [sp+152]
005003e0bl compress/gzip.(*Writer).Close
005003e4str x0, [sp+264]
005003e8str x1, [sp+272]
005003eccbnz x0, 0x5003f4
005003f0b 0x500430
005003f4
005003f4loc_5003f4:
005003f4ldr x4, [sp+88]
005003f8str x4, [sp+72]
005003fcldr x4, [sp+80]
00500400str x4, [sp+64]
00500404str x0, [sp+136]
00500408str x1, [sp+144]
0050040cldr x4, [sp+72]
00500410ldr x5, [sp+64]
00500414mov x2, x0
00500418mov x3, x1
0050041cmov x0, x4
00500420mov x1, x5
00500424ldp x29, x30, [sp-8]
00500428add sp, sp, 784
0050042cret x30
00500430
00500430loc_500430:
00500430ldr x4, [sp+88]
00500434str x4, [sp+72]
00500438ldr x4, [sp+80]
0050043cstr x4, [sp+64]
00500440stp xzr, xzr, [sp+136]
00500444ldr x0, [sp+72]
00500448ldr x1, [sp+64]
0050044cmov x2, xzr
00500450mov x3, xzr
00500454ldp x29, x30, [sp-8]
00500458add sp, sp, 784
0050045cret x30
00500460
00500460loc_500460:
00500460stp x0, x1, [sp+8]
00500464stp x2, x3, [sp+24]
00500468strb w4, [sp+40]
0050046cstp x5, x6, [sp+48]
00500470mov x3, x30
00500474bl runtime.morestack_noctxt.abi0
00500478ldp x0, x1, [sp+8]
0050047cldp x2, x3, [sp+24]
00500480ldrb w4, [sp+40]
00500484ldp x5, x6, [sp+48]
00500488b 0x4ffc70
0050048cudf 0
004ffc70

00500490
00500490github.com/bishopfox/sliver/implant/sliver/handlers.expandPath: ; void github.com/bishopfox/sliver/implant/sliver/handlers.expandPath(struct string exePath)
00500490ldr x16, [x28+16]
00500494sub x17, sp, 64
00500498subs xzr, x17, x16
0050049cb.ls 0x5005dc
005004a0str x30, [sp-192]!
005004a4stur x29, [sp-8]
005004a8sub x29, sp, 8
005004acstr x0, [sp+200]
005004b0str x1, [sp+208]
005004b4stp xzr, xzr, [sp+56]
005004b8stp xzr, xzr, [sp+40]
005004bcldr x0, [sp+200]
005004c0ldr x1, [sp+208]
005004c4movz x2, 47
005004c8bl strings.ContainsRune
005004ccstrb w0, [sp+39]
005004d0tbnz w0, 0, 0x5004d8
005004d4b 0x5004dc
005004d8
005004d8loc_5004d8:
005004d8b 0x5005ac
005004dc
005004dcloc_5004dc:
005004dcstp xzr, xzr, [sp+88]
005004e0stp xzr, xzr, [sp+168]
005004e4ldr x0, [sp+200]
005004e8ldr x1, [sp+208]
005004ecbl os/exec.LookPath
005004f0str x0, [sp+88]
005004f4str x1, [sp+96]
005004f8str x2, [sp+168]
005004fcstr x3, [sp+176]
00500500ldr x2, [sp+96]
00500504ldr x3, [sp+88]
00500508str x3, [sp+152]
0050050cstr x2, [sp+160]
00500510ldr x2, [sp+176]
00500514ldr x3, [sp+168]
00500518str x3, [sp+136]
0050051cstr x2, [sp+144]
00500520str x3, [sp+72]
00500524str x2, [sp+80]
00500528cbnz x3, 0x500530
0050052cb 0x5005a8
00500530
00500530loc_500530:
00500530stp xzr, xzr, [sp+88]
00500534stp xzr, xzr, [sp+168]
00500538ldr x0, [sp+200]
0050053cldr x1, [sp+208]
00500540bl path/filepath.Abs
00500544str x0, [sp+88]
00500548str x1, [sp+96]
0050054cstr x2, [sp+168]
00500550str x3, [sp+176]
00500554ldr x2, [sp+96]
00500558ldr x3, [sp+88]
0050055cstr x3, [sp+120]
00500560str x2, [sp+128]
00500564ldr x2, [sp+168]
00500568ldr x3, [sp+176]
0050056cstr x2, [sp+104]
00500570str x3, [sp+112]
00500574ldr x2, [sp+120]
00500578ldr x3, [sp+128]
0050057cstr x2, [sp+56]
00500580str x3, [sp+64]
00500584ldr x2, [sp+104]
00500588ldr x3, [sp+112]
0050058cstr x2, [sp+40]
00500590str x3, [sp+48]
00500594ldr x0, [sp+56]
00500598ldr x1, [sp+64]
0050059cldur x29, [sp-8]
005005a0ldr x30, [sp], 192
005005a4ret x30
005005a8
005005a8loc_5005a8:
005005a8b 0x5005ac
005005ac
005005acloc_5005ac:
005005acldr x4, [sp+200]
005005b0ldr x5, [sp+208]
005005b4str x4, [sp+56]
005005b8str x5, [sp+64]
005005bcstp xzr, xzr, [sp+40]
005005c0ldr x0, [sp+56]
005005c4ldr x1, [sp+64]
005005c8mov x2, xzr
005005ccmov x3, xzr
005005d0ldur x29, [sp-8]
005005d4ldr x30, [sp], 192
005005d8ret x30
005005dc
005005dcloc_5005dc:
005005dcstp x0, x1, [sp+8]
005005e0mov x3, x30
005005e4bl runtime.morestack_noctxt.abi0
005005e8ldp x0, x1, [sp+8]
005005ecb 0x500490
00500490

005005f0
005005f0github.com/bishopfox/sliver/implant/sliver/handlers.chtimesHandler: ; void github.com/bishopfox/sliver/implant/sliver/handlers.chtimesHandler(struct []uint8 data, github.com/bishopfox/sliver/implant/sliver/handlers.RPCResponse resp)
005005f0ldr x16, [x28+16]
005005f4sub x17, sp, 400
005005f8subs xzr, x17, x16
005005fcb.ls 0x500b50
00500600sub x20, sp, 528
00500604stp x29, x30, [x20-8]
00500608add sp, x20, 0
0050060csub x29, sp, 8
00500610str x0, [sp+536]
00500614str x1, [sp+544]
00500618str x2, [sp+552]
0050061cstr x3, [sp+560]
00500620adrp x0, 0x184000
00500624add x0, x0, 4000
00500628bl runtime.newobject
0050062cstr x0, [sp+368]
00500630adrp x27, 0x54b000
00500634ldr w1, [x27+3056]
00500638cbz w1, 0x500640
0050063cb 0x500644
00500640
00500640loc_500640:
00500640b 0x500660
00500644
00500644loc_500644:
00500644str x0, [sp+272]
00500648mov x1, x0
0050064cadrp x0, 0x184000
00500650add x0, x0, 4000
00500654bl runtime.wbZero
00500658ldr x0, [sp+272]
0050065cb 0x500660
00500660
00500660loc_500660:
00500660mov x20, x0
00500664adr x27, 16
00500668stp x29, x27, [sp-24]
0050066csub x29, sp, 24
00500670bl fn_87cfc
00500674sub x29, sp, 8
00500678ldr x4, [sp+368]
0050067cstr x4, [sp+152]
00500680str x4, [sp+472]
00500684ldr x0, [sp+536]
00500688ldr x1, [sp+544]
0050068cldr x2, [sp+552]
00500690adrp x3, 0x213000
00500694add x3, x3, 3488
00500698bl google.golang.org/protobuf/proto.Unmarshal
0050069cstr x0, [sp+136]
005006a0str x1, [sp+144]
005006a4cbnz x0, 0x5006ac
005006a8b 0x500768
005006ac
005006acloc_5006ac:
005006acstp xzr, xzr, [sp+456]
005006b0add x5, sp, 456
005006b4str x5, [sp+336]
005006b8ldr x5, [sp+136]
005006bcldr x6, [sp+144]
005006c0str x5, [sp+320]
005006c4str x6, [sp+328]
005006c8str x5, [sp+312]
005006ccldr x5, [sp+312]
005006d0cbnz x5, 0x5006d8
005006d4b 0x5006e8
005006d8
005006d8loc_5006d8:
005006d8ldr x5, [sp+312]
005006dcldr x5, [x5+8]
005006e0str x5, [sp+312]
005006e4b 0x5006ec
005006e8
005006e8loc_5006e8:
005006e8b 0x5006ec
005006ec
005006ecloc_5006ec:
005006ecldr x5, [sp+336]
005006f0ldrsb x27, [x5]
005006f4ldr x6, [sp+312]
005006f8ldr x7, [sp+328]
005006fcstr x6, [x5]
00500700adrp x27, 0x54b000
00500704ldr w6, [x27+3056]
00500708cbz w6, 0x500710
0050070cb 0x500714
00500710
00500710loc_500710:
00500710b 0x500728
00500714
00500714loc_500714:
00500714bl runtime.gcWriteBarrier2
00500718str x7, [x25]
0050071cldr x6, [x5+8]
00500720str x6, [x25+8]
00500724b 0x500728
00500728
00500728loc_500728:
00500728str x7, [x5+8]
0050072cldr x2, [sp+336]
00500730ldrsb x27, [x2]
00500734b 0x500738
00500738
00500738loc_500738:
00500738str x2, [sp+344]
0050073corr x4, xzr, 1
00500740str x4, [sp+352]
00500744str x4, [sp+360]
00500748adrp x0, 0x1ba000
0050074cadd x0, x0, 981
00500750movz x1, 26
00500754mov x3, x4
00500758bl log.Printf
0050075cldp x29, x30, [sp-8]
00500760add sp, sp, 528
00500764ret x30
00500768
00500768loc_500768:
00500768adrp x0, 0x172000
0050076cadd x0, x0, 384
00500770bl runtime.newobject
00500774str x0, [sp+304]
00500778adrp x27, 0x54b000
0050077cldr w1, [x27+3056]
00500780cbz w1, 0x500788
00500784b 0x50078c
00500788
00500788loc_500788:
00500788b 0x5007a8
0050078c
0050078cloc_50078c:
0050078cstr x0, [sp+264]
00500790mov x1, x0
00500794adrp x0, 0x172000
00500798add x0, x0, 384
0050079cbl runtime.wbZero
005007a0ldr x0, [sp+264]
005007a4b 0x5007a8
005007a8
005007a8loc_5007a8:
005007a8stp xzr, xzr, [x0]
005007acstp xzr, xzr, [x0+16]
005007b0stp xzr, xzr, [x0+32]
005007b4stp xzr, xzr, [x0+48]
005007b8ldr x2, [sp+304]
005007bcstr x2, [sp+160]
005007c0stp xzr, xzr, [sp+440]
005007c4stp xzr, xzr, [sp+424]
005007c8ldr x2, [sp+152]
005007ccldrsb x27, [x2]
005007d0ldr x0, [x2+8]
005007d4ldr x1, [x2+16]
005007d8str x0, [sp+288]
005007dcstr x1, [sp+296]
005007e0bl path/filepath.Abs
005007e4str x0, [sp+440]
005007e8str x1, [sp+448]
005007ecstr x2, [sp+424]
005007f0str x3, [sp+432]
005007f4ldr x2, [sp+440]
005007f8ldr x3, [sp+448]
005007fcstr x2, [sp+240]
00500800str x3, [sp+248]
00500804ldr x2, [sp+424]
00500808ldr x3, [sp+432]
0050080cstr x2, [sp+224]
00500810str x3, [sp+232]
00500814ldr x2, [sp+240]
00500818ldr x3, [sp+248]
0050081cstr x2, [sp+96]
00500820str x3, [sp+104]
00500824ldr x4, [sp+160]
00500828ldrsb x27, [x4]
0050082cstr x3, [x4+16]
00500830adrp x27, 0x54b000
00500834ldr w3, [x27+3056]
00500838cbz w3, 0x500840
0050083cb 0x500844
00500840
00500840loc_500840:
00500840b 0x500858
00500844
00500844loc_500844:
00500844bl runtime.gcWriteBarrier2
00500848str x2, [x25]
0050084cldr x3, [x4+8]
00500850str x3, [x25+8]
00500854b 0x500858
00500858
00500858loc_500858:
00500858str x2, [x4+8]
0050085cstp xzr, xzr, [sp+408]
00500860stp xzr, xzr, [sp+424]
00500864ldr x0, [sp+96]
00500868ldr x1, [sp+104]
0050086cbl os.Stat
00500870str x0, [sp+408]
00500874str x1, [sp+416]
00500878str x2, [sp+424]
0050087cstr x3, [sp+432]
00500880ldr x2, [sp+408]
00500884ldr x3, [sp+416]
00500888str x2, [sp+208]
0050088cstr x3, [sp+216]
00500890ldr x2, [sp+424]
00500894ldr x3, [sp+432]
00500898str x2, [sp+192]
0050089cstr x3, [sp+200]
005008a0str x2, [sp+136]
005008a4str x3, [sp+144]
005008a8adrp x0, 0x185000
005008acadd x0, x0, 3648
005008b0bl runtime.newobject
005008b4str x0, [sp+280]
005008b8adrp x27, 0x54b000
005008bcldr w2, [x27+3056]
005008c0cbz w2, 0x5008c8
005008c4b 0x5008cc
005008c8
005008c8loc_5008c8:
005008c8b 0x5008e8
005008cc
005008ccloc_5008cc:
005008ccstr x0, [sp+256]
005008d0mov x1, x0
005008d4adrp x0, 0x185000
005008d8add x0, x0, 3648
005008dcbl runtime.wbZero
005008e0ldr x0, [sp+256]
005008e4b 0x5008e8
005008e8
005008e8loc_5008e8:
005008e8mov x20, x0
005008ecadr x27, 16
005008f0stp x29, x27, [sp-24]
005008f4sub x29, sp, 24
005008f8bl fn_87cf8
005008fcsub x29, sp, 8
00500900ldr x2, [sp+160]
00500904ldrsb x27, [x2]
00500908ldr x3, [sp+280]
0050090cadrp x27, 0x54b000
00500910ldr w4, [x27+3056]
00500914cbz w4, 0x50091c
00500918b 0x500920
0050091c
0050091cloc_50091c:
0050091cb 0x500934
00500920
00500920loc_500920:
00500920bl runtime.gcWriteBarrier2
00500924str x3, [x25]
00500928ldr x4, [x2+24]
0050092cstr x4, [x25+8]
00500930b 0x500934
00500934
00500934loc_500934:
00500934str x3, [x2+24]
00500938ldr x2, [sp+136]
0050093ccbnz x2, 0x500944
00500940b 0x5009a4
00500944
00500944loc_500944:
00500944ldr x1, [sp+136]
00500948ldrsb x27, [x1]
0050094cldr x1, [x1+24]
00500950ldr x0, [sp+144]
00500954blr x1
00500958str x0, [sp+440]
0050095cstr x1, [sp+448]
00500960ldr x2, [sp+160]
00500964ldrsb x27, [x2]
00500968ldr x2, [x2+24]
0050096cldrsb x27, [x2]
00500970str x1, [x2+16]
00500974adrp x27, 0x54b000
00500978ldr w1, [x27+3056]
0050097ccbz w1, 0x500984
00500980b 0x500988
00500984
00500984loc_500984:
00500984b 0x50099c
00500988
00500988loc_500988:
00500988bl runtime.gcWriteBarrier2
0050098cstr x0, [x25]
00500990ldr x3, [x2+8]
00500994str x3, [x25+8]
00500998b 0x50099c
0050099c
0050099cloc_50099c:
0050099cstr x0, [x2+8]
005009a0b 0x500aa4
005009a4
005009a4loc_5009a4:
005009a4ldr x2, [sp+152]
005009a8ldrsb x27, [x2]
005009acldr x0, [x2+24]
005009b0str x0, [sp+88]
005009b4mov x1, xzr
005009b8bl time.Unix
005009bcstr x0, [sp+168]
005009c0str x1, [sp+176]
005009c4str x2, [sp+184]
005009c8ldr x2, [sp+152]
005009ccldrsb x27, [x2]
005009d0ldr x0, [x2+32]
005009d4str x0, [sp+80]
005009d8mov x1, xzr
005009dcbl time.Unix
005009e0str x0, [sp+112]
005009e4str x1, [sp+120]
005009e8str x2, [sp+128]
005009ecldr x3, [sp+168]
005009f0ldr x4, [sp+176]
005009f4ldr x5, [sp+184]
005009f8ldr x6, [sp+96]
005009fcldr x7, [sp+104]
00500a00mov x8, x0
00500a04mov x0, x6
00500a08mov x9, x1
00500a0cmov x1, x7
00500a10mov x10, x2
00500a14mov x2, x3
00500a18mov x3, x4
00500a1cmov x4, x5
00500a20mov x5, x8
00500a24mov x6, x9
00500a28mov x7, x10
00500a2cbl os.Chtimes
00500a30str x0, [sp+136]
00500a34str x1, [sp+144]
00500a38cbnz x0, 0x500a40
00500a3cb 0x500a9c
00500a40
00500a40loc_500a40:
00500a40ldrsb x27, [x0]
00500a44ldr x2, [x0+24]
00500a48mov x0, x1
00500a4cblr x2
00500a50str x0, [sp+440]
00500a54str x1, [sp+448]
00500a58ldr x2, [sp+160]
00500a5cldrsb x27, [x2]
00500a60ldr x2, [x2+24]
00500a64ldrsb x27, [x2]
00500a68str x1, [x2+16]
00500a6cadrp x27, 0x54b000
00500a70ldr w1, [x27+3056]
00500a74cbz w1, 0x500a7c
00500a78b 0x500a80
00500a7c
00500a7cloc_500a7c:
00500a7cb 0x500a94
00500a80
00500a80loc_500a80:
00500a80bl runtime.gcWriteBarrier2
00500a84str x0, [x25]
00500a88ldr x3, [x2+8]
00500a8cstr x3, [x25+8]
00500a90b 0x500a94
00500a94
00500a94loc_500a94:
00500a94str x0, [x2+8]
00500a98b 0x500aa0
00500a9c
00500a9cloc_500a9c:
00500a9cb 0x500aa0
00500aa0
00500aa0loc_500aa0:
00500aa0b 0x500aa4
00500aa4
00500aa4loc_500aa4:
00500aa4ldr x2, [sp+160]
00500aa8str x2, [sp+400]
00500aacstr xzr, [sp+376]
00500ab0stp xzr, xzr, [sp+384]
00500ab4stp xzr, xzr, [sp+424]
00500ab8ldr x1, [sp+400]
00500abcadrp x0, 0x213000
00500ac0add x0, x0, 3520
00500ac4bl google.golang.org/protobuf/proto.Marshal
00500ac8str x0, [sp+376]
00500accstr x1, [sp+384]
00500ad0str x2, [sp+392]
00500ad4str x3, [sp+424]
00500ad8str x4, [sp+432]
00500adcldr x2, [sp+376]
00500ae0ldr x3, [sp+384]
00500ae4ldr x4, [sp+392]
00500ae8str x2, [sp+496]
00500aecstr x3, [sp+504]
00500af0str x4, [sp+512]
00500af4ldr x2, [sp+424]
00500af8ldr x3, [sp+432]
00500afcstr x2, [sp+480]
00500b00str x3, [sp+488]
00500b04ldr x2, [sp+496]
00500b08ldr x3, [sp+504]
00500b0cldr x4, [sp+512]
00500b10str x2, [sp+536]
00500b14str x3, [sp+544]
00500b18str x4, [sp+552]
00500b1cldr x3, [sp+480]
00500b20ldr x4, [sp+488]
00500b24str x3, [sp+136]
00500b28str x4, [sp+144]
00500b2cldr x0, [sp+536]
00500b30ldr x1, [sp+544]
00500b34ldr x2, [sp+552]
00500b38ldr x26, [sp+560]
00500b3cldr x5, [x26]
00500b40blr x5
00500b44ldp x29, x30, [sp-8]
00500b48add sp, sp, 528
00500b4cret x30
00500b50
00500b50loc_500b50:
00500b50stp x0, x1, [sp+8]
00500b54stp x2, x3, [sp+24]
00500b58mov x3, x30
00500b5cbl runtime.morestack_noctxt.abi0
00500b60ldp x0, x1, [sp+8]
00500b64ldp x2, x3, [sp+24]
00500b68b 0x5005f0
00500b6cudf 0
005005f0

00500b70
00500b70github.com/bishopfox/sliver/implant/sliver/handlers.GetSystemHandlers: ; void github.com/bishopfox/sliver/implant/sliver/handlers.GetSystemHandlers(void)
00500b70str x30, [sp-32]!
00500b74stur x29, [sp-8]
00500b78sub x29, sp, 8
00500b7cstr xzr, [sp+16]
00500b80adrp x27, 0x520000
00500b84ldr x0, [x27+3168]
00500b88str x0, [sp+16]
00500b8cadd x29, sp, 24
00500b90add sp, sp, 32
00500b94ret x30
00500b98udf 0
00500b9cudf 0
00500b70