Similarity

00502660
00502660github.com/bishopfox/sliver/implant/sliver/handlers.memfilesAddHandler: ; void github.com/bishopfox/sliver/implant/sliver/handlers.memfilesAddHandler(struct []uint8 p0, github.com/bishopfox/sliver/implant/sliver/handlers.RPCResponse resp)
00502660ldr x16, [x28+16]
00502664sub x17, sp, 400
00502668subs xzr, x17, x16
0050266cb.ls 0x502a64
00502670sub x20, sp, 528
00502674stp x29, x30, [x20-8]
00502678add sp, x20, 0
0050267csub x29, sp, 8
00502680str x0, [sp+536]
00502684str x1, [sp+544]
00502688str x2, [sp+552]
0050268cstr x3, [sp+560]
00502690str xzr, [sp+56]
00502694adrp x0, 0x170000
00502698add x0, x0, 608
0050269cbl runtime.newobject
005026a0str x0, [sp+376]
005026a4adrp x27, 0x549000
005026a8ldr w1, [x27+3056]
005026accbz w1, 0x5026b4
005026b0b 0x5026b8
005026b4
005026b4loc_5026b4:
005026b4b 0x5026d4
005026b8
005026b8loc_5026b8:
005026b8str x0, [sp+264]
005026bcmov x1, x0
005026c0adrp x0, 0x170000
005026c4add x0, x0, 608
005026c8bl runtime.wbZero
005026ccldr x0, [sp+264]
005026d0b 0x5026d4
005026d4
005026d4loc_5026d4:
005026d4stp xzr, xzr, [x0]
005026d8stp xzr, xzr, [x0+16]
005026dcstp xzr, xzr, [x0+32]
005026e0str xzr, [x0+48]
005026e4ldr x1, [sp+376]
005026e8str x1, [sp+144]
005026ecadrp x0, 0x183000
005026f0add x0, x0, 3648
005026f4bl runtime.newobject
005026f8str x0, [sp+368]
005026fcadrp x27, 0x549000
00502700ldr w1, [x27+3056]
00502704cbz w1, 0x50270c
00502708b 0x502710
0050270c
0050270cloc_50270c:
0050270cb 0x50272c
00502710
00502710loc_502710:
00502710str x0, [sp+256]
00502714mov x1, x0
00502718adrp x0, 0x183000
0050271cadd x0, x0, 3648
00502720bl runtime.wbZero
00502724ldr x0, [sp+256]
00502728b 0x50272c
0050272c
0050272cloc_50272c:
0050272cmov x20, x0
00502730adr x27, 16
00502734stp x29, x27, [sp-24]
00502738sub x29, sp, 24
0050273cbl fn_87cf8
00502740sub x29, sp, 8
00502744ldr x1, [sp+144]
00502748ldrsb x27, [x1]
0050274cldr x2, [sp+368]
00502750adrp x27, 0x549000
00502754ldr w3, [x27+3056]
00502758cbz w3, 0x502760
0050275cb 0x502764
00502760
00502760loc_502760:
00502760b 0x502778
00502764
00502764loc_502764:
00502764bl runtime.gcWriteBarrier2
00502768str x2, [x25]
0050276cldr x3, [x1+16]
00502770str x3, [x25+8]
00502774b 0x502778
00502778
00502778loc_502778:
00502778str x2, [x1+16]
0050277corr x0, xzr, 8
00502780bl github.com/bishopfox/sliver/implant/sliver/taskrunner.RandomString
00502784str x0, [sp+152]
00502788str x1, [sp+160]
0050278cstr xzr, [sp+448]
00502790stp xzr, xzr, [sp+432]
00502794ldr x0, [sp+152]
00502798ldr x1, [sp+160]
0050279cbl syscall.BytePtrFromString
005027a0str x0, [sp+448]
005027a4str x1, [sp+432]
005027a8str x2, [sp+440]
005027acldr x1, [sp+448]
005027b0str x1, [sp+248]
005027b4ldr x1, [sp+432]
005027b8ldr x2, [sp+440]
005027bcstr x1, [sp+232]
005027c0str x2, [sp+240]
005027c4ldr x1, [sp+248]
005027c8str x1, [sp+168]
005027ccldr x1, [sp+240]
005027d0ldr x2, [sp+232]
005027d4str x2, [sp+192]
005027d8str x1, [sp+200]
005027dccbnz x2, 0x5027e4
005027e0b 0x5028a0
005027e4
005027e4loc_5027e4:
005027e4stp xzr, xzr, [sp+416]
005027e8add x5, sp, 416
005027ecstr x5, [sp+336]
005027f0ldr x5, [sp+192]
005027f4ldr x6, [sp+200]
005027f8str x5, [sp+320]
005027fcstr x6, [sp+328]
00502800str x5, [sp+312]
00502804ldr x5, [sp+312]
00502808cbnz x5, 0x502810
0050280cb 0x502820
00502810
00502810loc_502810:
00502810ldr x5, [sp+312]
00502814ldr x5, [x5+8]
00502818str x5, [sp+312]
0050281cb 0x502824
00502820
00502820loc_502820:
00502820b 0x502824
00502824
00502824loc_502824:
00502824ldr x5, [sp+336]
00502828ldrsb x27, [x5]
0050282cldr x6, [sp+312]
00502830ldr x7, [sp+328]
00502834str x6, [x5]
00502838adrp x27, 0x549000
0050283cldr w6, [x27+3056]
00502840cbz w6, 0x502848
00502844b 0x50284c
00502848
00502848loc_502848:
00502848b 0x502860
0050284c
0050284cloc_50284c:
0050284cbl runtime.gcWriteBarrier2
00502850str x7, [x25]
00502854ldr x6, [x5+8]
00502858str x6, [x25+8]
0050285cb 0x502860
00502860
00502860loc_502860:
00502860str x7, [x5+8]
00502864ldr x2, [sp+336]
00502868ldrsb x27, [x2]
0050286cb 0x502870
00502870
00502870loc_502870:
00502870str x2, [sp+344]
00502874orr x4, xzr, 1
00502878str x4, [sp+352]
0050287cstr x4, [sp+360]
00502880adrp x0, 0x1b9000
00502884add x0, x0, 2620
00502888orr x1, xzr, 28
0050288cmov x3, x4
00502890bl log.Printf
00502894ldp x29, x30, [sp-8]
00502898add sp, sp, 528
0050289cret x30
005028a0
005028a0loc_5028a0:
005028a0movz x4, 319
005028a4str x4, [sp+56]
005028a8ldr x4, [sp+168]
005028acstr x4, [sp+456]
005028b0ldr x0, [sp+56]
005028b4ldr x1, [sp+456]
005028b8orr x2, xzr, 1
005028bcmov x3, xzr
005028c0bl syscall.Syscall
005028c4str x0, [sp+104]
005028c8str x1, [sp+96]
005028ccstr x2, [sp+88]
005028d0str x0, [sp+136]
005028d4str x1, [sp+128]
005028d8str x2, [sp+120]
005028dcstr x0, [sp+72]
005028e0stp xzr, xzr, [sp+416]
005028e4add x4, sp, 416
005028e8str x4, [sp+280]
005028ecldr x0, [sp+72]
005028f0bl runtime.convT64
005028f4str x0, [sp+272]
005028f8ldr x4, [sp+280]
005028fcldrsb x27, [x4]
00502900adrp x5, 0xf3000
00502904add x5, x5, 3648
00502908str x5, [x4]
0050290cadrp x27, 0x549000
00502910ldr w5, [x27+3056]
00502914cbz w5, 0x50291c
00502918b 0x502920
0050291c
0050291cloc_50291c:
0050291cb 0x502934
00502920
00502920loc_502920:
00502920bl runtime.gcWriteBarrier2
00502924str x0, [x25]
00502928ldr x5, [x4+8]
0050292cstr x5, [x25+8]
00502930b 0x502934
00502934
00502934loc_502934:
00502934str x0, [x4+8]
00502938ldr x2, [sp+280]
0050293cldrsb x27, [x2]
00502940b 0x502944
00502944
00502944loc_502944:
00502944str x2, [sp+288]
00502948orr x4, xzr, 1
0050294cstr x4, [sp+296]
00502950str x4, [sp+304]
00502954adrp x0, 0x1ae000
00502958add x0, x0, 21
0050295corr x1, xzr, 2
00502960mov x3, x4
00502964bl fmt.Sprintf
00502968str x0, [sp+176]
0050296cstr x1, [sp+184]
00502970stp xzr, xzr, [sp+432]
00502974ldr x0, [sp+176]
00502978ldr x1, [sp+184]
0050297cmov x2, xzr
00502980orr x3, xzr, 64
00502984bl strconv.ParseInt
00502988str x0, [sp+80]
0050298cstr x1, [sp+432]
00502990str x2, [sp+440]
00502994ldr x5, [sp+80]
00502998str x5, [sp+112]
0050299cstr x1, [sp+504]
005029a0str x2, [sp+512]
005029a4ldr x5, [sp+112]
005029a8str x5, [sp+64]
005029acldr x6, [sp+144]
005029b0ldrsb x27, [x6]
005029b4str x5, [x6+8]
005029b8ldr x5, [sp+144]
005029bcstr x5, [sp+408]
005029c0str xzr, [sp+384]
005029c4stp xzr, xzr, [sp+392]
005029c8stp xzr, xzr, [sp+432]
005029ccldr x1, [sp+408]
005029d0adrp x0, 0x211000
005029d4add x0, x0, 3424
005029d8bl google.golang.org/protobuf/proto.Marshal
005029dcstr x0, [sp+384]
005029e0str x1, [sp+392]
005029e4str x2, [sp+400]
005029e8str x3, [sp+432]
005029ecstr x4, [sp+440]
005029f0ldr x5, [sp+384]
005029f4ldr x6, [sp+392]
005029f8ldr x7, [sp+400]
005029fcstr x5, [sp+480]
00502a00str x6, [sp+488]
00502a04str x7, [sp+496]
00502a08ldr x5, [sp+432]
00502a0cldr x6, [sp+440]
00502a10str x5, [sp+464]
00502a14str x6, [sp+472]
00502a18ldr x5, [sp+480]
00502a1cldr x6, [sp+488]
00502a20ldr x7, [sp+496]
00502a24str x5, [sp+208]
00502a28str x6, [sp+216]
00502a2cstr x7, [sp+224]
00502a30ldr x3, [sp+464]
00502a34ldr x4, [sp+472]
00502a38str x3, [sp+192]
00502a3cstr x4, [sp+200]
00502a40ldr x0, [sp+208]
00502a44ldr x1, [sp+216]
00502a48ldr x2, [sp+224]
00502a4cldr x26, [sp+560]
00502a50ldr x5, [x26]
00502a54blr x5
00502a58ldp x29, x30, [sp-8]
00502a5cadd sp, sp, 528
00502a60ret x30
00502a64
00502a64loc_502a64:
00502a64stp x0, x1, [sp+8]
00502a68stp x2, x3, [sp+24]
00502a6cmov x3, x30
00502a70bl runtime.morestack_noctxt.abi0
00502a74ldp x0, x1, [sp+8]
00502a78ldp x2, x3, [sp+24]
00502a7cb 0x502660
00502660

00502a80
00502a80github.com/bishopfox/sliver/implant/sliver/handlers.memfilesRmHandler: ; void github.com/bishopfox/sliver/implant/sliver/handlers.memfilesRmHandler(struct []uint8 data, github.com/bishopfox/sliver/implant/sliver/handlers.RPCResponse resp)
00502a80ldr x16, [x28+16]
00502a84sub x17, sp, 448
00502a88subs xzr, x17, x16
00502a8cb.ls 0x5030e0
00502a90sub x20, sp, 576
00502a94stp x29, x30, [x20-8]
00502a98add sp, x20, 0
00502a9csub x29, sp, 8
00502aa0str x0, [sp+584]
00502aa4str x1, [sp+592]
00502aa8str x2, [sp+600]
00502aacstr x3, [sp+608]
00502ab0adrp x0, 0x170000
00502ab4add x0, x0, 832
00502ab8bl runtime.newobject
00502abcstr x0, [sp+352]
00502ac0adrp x27, 0x549000
00502ac4ldr w1, [x27+3056]
00502ac8cbz w1, 0x502ad0
00502accb 0x502ad4
00502ad0
00502ad0loc_502ad0:
00502ad0b 0x502af0
00502ad4
00502ad4loc_502ad4:
00502ad4str x0, [sp+224]
00502ad8mov x1, x0
00502adcadrp x0, 0x170000
00502ae0add x0, x0, 832
00502ae4bl runtime.wbZero
00502ae8ldr x0, [sp+224]
00502aecb 0x502af0
00502af0
00502af0loc_502af0:
00502af0stp xzr, xzr, [x0]
00502af4stp xzr, xzr, [x0+16]
00502af8stp xzr, xzr, [x0+32]
00502afcstr xzr, [x0+48]
00502b00ldr x4, [sp+352]
00502b04str x4, [sp+80]
00502b08str x4, [sp+488]
00502b0cldr x0, [sp+584]
00502b10ldr x1, [sp+592]
00502b14ldr x2, [sp+600]
00502b18adrp x3, 0x211000
00502b1cadd x3, x3, 3360
00502b20bl google.golang.org/protobuf/proto.Unmarshal
00502b24str x0, [sp+160]
00502b28str x1, [sp+168]
00502b2ccbnz x0, 0x502b34
00502b30b 0x502bf0
00502b34
00502b34loc_502b34:
00502b34stp xzr, xzr, [sp+472]
00502b38add x5, sp, 472
00502b3cstr x5, [sp+320]
00502b40ldr x5, [sp+160]
00502b44ldr x6, [sp+168]
00502b48str x5, [sp+304]
00502b4cstr x6, [sp+312]
00502b50str x5, [sp+296]
00502b54ldr x5, [sp+296]
00502b58cbnz x5, 0x502b60
00502b5cb 0x502b70
00502b60
00502b60loc_502b60:
00502b60ldr x5, [sp+296]
00502b64ldr x5, [x5+8]
00502b68str x5, [sp+296]
00502b6cb 0x502b74
00502b70
00502b70loc_502b70:
00502b70b 0x502b74
00502b74
00502b74loc_502b74:
00502b74ldr x5, [sp+320]
00502b78ldrsb x27, [x5]
00502b7cldr x6, [sp+296]
00502b80ldr x7, [sp+312]
00502b84str x6, [x5]
00502b88adrp x27, 0x549000
00502b8cldr w6, [x27+3056]
00502b90cbz w6, 0x502b98
00502b94b 0x502b9c
00502b98
00502b98loc_502b98:
00502b98b 0x502bb0
00502b9c
00502b9cloc_502b9c:
00502b9cbl runtime.gcWriteBarrier2
00502ba0str x7, [x25]
00502ba4ldr x6, [x5+8]
00502ba8str x6, [x25+8]
00502bacb 0x502bb0
00502bb0
00502bb0loc_502bb0:
00502bb0str x7, [x5+8]
00502bb4ldr x2, [sp+320]
00502bb8ldrsb x27, [x2]
00502bbcb 0x502bc0
00502bc0
00502bc0loc_502bc0:
00502bc0str x2, [sp+328]
00502bc4orr x4, xzr, 1
00502bc8str x4, [sp+336]
00502bccstr x4, [sp+344]
00502bd0adrp x0, 0x1b8000
00502bd4add x0, x0, 981
00502bd8movz x1, 26
00502bdcmov x3, x4
00502be0bl log.Printf
00502be4ldp x29, x30, [sp-8]
00502be8add sp, sp, 576
00502becret x30
00502bf0
00502bf0loc_502bf0:
00502bf0adrp x0, 0x170000
00502bf4add x0, x0, 1056
00502bf8bl runtime.newobject
00502bfcstr x0, [sp+288]
00502c00adrp x27, 0x549000
00502c04ldr w1, [x27+3056]
00502c08cbz w1, 0x502c10
00502c0cb 0x502c14
00502c10
00502c10loc_502c10:
00502c10b 0x502c30
00502c14
00502c14loc_502c14:
00502c14str x0, [sp+216]
00502c18mov x1, x0
00502c1cadrp x0, 0x170000
00502c20add x0, x0, 1056
00502c24bl runtime.wbZero
00502c28ldr x0, [sp+216]
00502c2cb 0x502c30
00502c30
00502c30loc_502c30:
00502c30stp xzr, xzr, [x0]
00502c34stp xzr, xzr, [x0+16]
00502c38stp xzr, xzr, [x0+32]
00502c3cstr xzr, [x0+48]
00502c40ldr x1, [sp+288]
00502c44str x1, [sp+88]
00502c48ldrsb x27, [x1]
00502c4cldr x2, [sp+80]
00502c50ldrsb x27, [x2]
00502c54ldr x2, [x2+8]
00502c58str x2, [x1+8]
00502c5cadrp x0, 0x183000
00502c60add x0, x0, 3648
00502c64bl runtime.newobject
00502c68str x0, [sp+280]
00502c6cadrp x27, 0x549000
00502c70ldr w1, [x27+3056]
00502c74cbz w1, 0x502c7c
00502c78b 0x502c80
00502c7c
00502c7cloc_502c7c:
00502c7cb 0x502c9c
00502c80
00502c80loc_502c80:
00502c80str x0, [sp+208]
00502c84mov x1, x0
00502c88adrp x0, 0x183000
00502c8cadd x0, x0, 3648
00502c90bl runtime.wbZero
00502c94ldr x0, [sp+208]
00502c98b 0x502c9c
00502c9c
00502c9cloc_502c9c:
00502c9cmov x20, x0
00502ca0adr x27, 16
00502ca4stp x29, x27, [sp-24]
00502ca8sub x29, sp, 24
00502cacbl fn_87cf8
00502cb0sub x29, sp, 8
00502cb4ldr x0, [sp+88]
00502cb8ldrsb x27, [x0]
00502cbcldr x1, [sp+280]
00502cc0adrp x27, 0x549000
00502cc4ldr w2, [x27+3056]
00502cc8cbz w2, 0x502cd0
00502cccb 0x502cd4
00502cd0
00502cd0loc_502cd0:
00502cd0b 0x502ce8
00502cd4
00502cd4loc_502cd4:
00502cd4bl runtime.gcWriteBarrier2
00502cd8str x1, [x25]
00502cdcldr x2, [x0+16]
00502ce0str x2, [x25+8]
00502ce4b 0x502ce8
00502ce8
00502ce8loc_502ce8:
00502ce8str x1, [x0+16]
00502cecbl os.Getpid
00502cf0str x0, [sp+56]
00502cf4stp xzr, xzr, [sp+440]
00502cf8stp xzr, xzr, [sp+456]
00502cfcadd x0, sp, 440
00502d00str x0, [sp+248]
00502d04ldr x0, [sp+56]
00502d08bl runtime.convT64
00502d0cstr x0, [sp+240]
00502d10ldr x1, [sp+248]
00502d14ldrsb x27, [x1]
00502d18adrp x2, 0xf3000
00502d1cadd x2, x2, 3520
00502d20str x2, [x1]
00502d24adrp x27, 0x549000
00502d28ldr w2, [x27+3056]
00502d2ccbz w2, 0x502d34
00502d30b 0x502d38
00502d34
00502d34loc_502d34:
00502d34b 0x502d4c
00502d38
00502d38loc_502d38:
00502d38bl runtime.gcWriteBarrier2
00502d3cstr x0, [x25]
00502d40ldr x2, [x1+8]
00502d44str x2, [x25+8]
00502d48b 0x502d4c
00502d4c
00502d4cloc_502d4c:
00502d4cstr x0, [x1+8]
00502d50ldr x1, [sp+80]
00502d54ldrsb x27, [x1]
00502d58ldr x1, [x1+8]
00502d5cstr x1, [sp+72]
00502d60ldr x0, [sp+72]
00502d64bl runtime.convT64
00502d68str x0, [sp+232]
00502d6cldr x1, [sp+248]
00502d70ldrsb x27, [x1]
00502d74adrp x2, 0xf3000
00502d78add x2, x2, 3392
00502d7cstr x2, [x1+16]
00502d80adrp x27, 0x549000
00502d84ldr w2, [x27+3056]
00502d88cbz w2, 0x502d90
00502d8cb 0x502d94
00502d90
00502d90loc_502d90:
00502d90b 0x502da8
00502d94
00502d94loc_502d94:
00502d94bl runtime.gcWriteBarrier2
00502d98str x0, [x25]
00502d9cldr x5, [x1+24]
00502da0str x5, [x25+8]
00502da4b 0x502da8
00502da8
00502da8loc_502da8:
00502da8str x0, [x1+24]
00502dacldr x2, [sp+248]
00502db0ldrsb x27, [x2]
00502db4b 0x502db8
00502db8
00502db8loc_502db8:
00502db8str x2, [sp+256]
00502dbcorr x4, xzr, 2
00502dc0str x4, [sp+264]
00502dc4str x4, [sp+272]
00502dc8adrp x0, 0x1b1000
00502dccadd x0, x0, 3542
00502dd0orr x1, xzr, 14
00502dd4mov x3, x4
00502dd8bl fmt.Sprintf
00502ddcstr x0, [sp+128]
00502de0str x1, [sp+136]
00502de4stp xzr, xzr, [sp+424]
00502de8stp xzr, xzr, [sp+408]
00502decldr x0, [sp+128]
00502df0ldr x1, [sp+136]
00502df4bl os.Lstat
00502df8str x0, [sp+424]
00502dfcstr x1, [sp+432]
00502e00str x2, [sp+408]
00502e04str x3, [sp+416]
00502e08ldr x5, [sp+432]
00502e0cldr x6, [sp+424]
00502e10str x6, [sp+192]
00502e14str x5, [sp+200]
00502e18ldr x5, [sp+408]
00502e1cldr x6, [sp+416]
00502e20str x5, [sp+176]
00502e24str x6, [sp+184]
00502e28ldr x5, [sp+192]
00502e2cldr x6, [sp+200]
00502e30str x5, [sp+112]
00502e34str x6, [sp+120]
00502e38ldr x0, [sp+184]
00502e3cldr x5, [sp+176]
00502e40str x5, [sp+160]
00502e44str x0, [sp+168]
00502e48cbnz x5, 0x502e50
00502e4cb 0x502ea8
00502e50
00502e50loc_502e50:
00502e50ldrsb x27, [x5]
00502e54ldr x1, [x5+24]
00502e58blr x1
00502e5cstr x0, [sp+392]
00502e60str x1, [sp+400]
00502e64ldr x2, [sp+88]
00502e68ldrsb x27, [x2]
00502e6cldr x2, [x2+16]
00502e70ldrsb x27, [x2]
00502e74str x1, [x2+16]
00502e78adrp x27, 0x549000
00502e7cldr w1, [x27+3056]
00502e80cbz w1, 0x502e88
00502e84b 0x502e8c
00502e88
00502e88loc_502e88:
00502e88b 0x502ea0
00502e8c
00502e8cloc_502e8c:
00502e8cbl runtime.gcWriteBarrier2
00502e90str x0, [x25]
00502e94ldr x3, [x2+8]
00502e98str x3, [x25+8]
00502e9cb 0x502ea0
00502ea0
00502ea0loc_502ea0:
00502ea0str x0, [x2+8]
00502ea4b 0x503034
00502ea8
00502ea8loc_502ea8:
00502ea8ldr x1, [sp+112]
00502eacldrsb x27, [x1]
00502eb0ldr x1, [x1+40]
00502eb4ldr x0, [sp+120]
00502eb8blr x1
00502ebcstr w0, [sp+52]
00502ec0tbnz w0, 27, 0x502ec8
00502ec4b 0x502fe4
00502ec8
00502ec8loc_502ec8:
00502ec8stp xzr, xzr, [sp+392]
00502eccstp xzr, xzr, [sp+408]
00502ed0ldr x0, [sp+128]
00502ed4ldr x1, [sp+136]
00502ed8bl os.Readlink
00502edcstr x0, [sp+392]
00502ee0str x1, [sp+400]
00502ee4str x2, [sp+408]
00502ee8str x3, [sp+416]
00502eecldr x2, [sp+400]
00502ef0ldr x3, [sp+392]
00502ef4str x3, [sp+552]
00502ef8str x2, [sp+560]
00502efcldr x2, [sp+408]
00502f00ldr x3, [sp+416]
00502f04str x2, [sp+536]
00502f08str x3, [sp+544]
00502f0cldr x2, [sp+552]
00502f10ldr x3, [sp+560]
00502f14str x2, [sp+96]
00502f18str x3, [sp+104]
00502f1cldr x2, [sp+544]
00502f20ldr x3, [sp+536]
00502f24str x3, [sp+144]
00502f28str x2, [sp+152]
00502f2csubs xzr, x3, 0
00502f30cset x2, ne
00502f34eor x2, x2, 1
00502f38strb w2, [sp+51]
00502f3ccbnz x3, 0x502f44
00502f40b 0x502f48
00502f44
00502f44loc_502f44:
00502f44b 0x502f6c
00502f48
00502f48loc_502f48:
00502f48ldr x0, [sp+96]
00502f4cldr x1, [sp+104]
00502f50adrp x2, 0x1ae000
00502f54add x2, x2, 3654
00502f58orr x3, xzr, 7
00502f5cbl strings.Contains
00502f60strb w0, [sp+50]
00502f64strb w0, [sp+51]
00502f68b 0x502f6c
00502f6c
00502f6cloc_502f6c:
00502f6cldrb w2, [sp+51]
00502f70tbnz w2, 0, 0x502f78
00502f74b 0x502f94
00502f78
00502f78loc_502f78:
00502f78ldr x1, [sp+80]
00502f7cldrsb x27, [x1]
00502f80ldr x1, [x1+8]
00502f84str x1, [sp+64]
00502f88ldr x0, [sp+64]
00502f8cbl syscall.Close
00502f90b 0x502fe0
00502f94
00502f94loc_502f94:
00502f94ldr x2, [sp+88]
00502f98ldrsb x27, [x2]
00502f9cldr x2, [x2+16]
00502fa0ldrsb x27, [x2]
00502fa4movz x3, 42
00502fa8str x3, [x2+16]
00502facadrp x27, 0x549000
00502fb0ldr w3, [x27+3056]
00502fb4cbz w3, 0x502fbc
00502fb8b 0x502fc0
00502fbc
00502fbcloc_502fbc:
00502fbcb 0x502fd0
00502fc0
00502fc0loc_502fc0:
00502fc0ldr x3, [x2+8]
00502fc4bl runtime.gcWriteBarrier1
00502fc8str x3, [x25]
00502fccb 0x502fd0
00502fd0
00502fd0loc_502fd0:
00502fd0adrp x3, 0x1c3000
00502fd4add x3, x3, 1453
00502fd8str x3, [x2+8]
00502fdcb 0x502fe0
00502fe0
00502fe0loc_502fe0:
00502fe0b 0x503030
00502fe4
00502fe4loc_502fe4:
00502fe4ldr x2, [sp+88]
00502fe8ldrsb x27, [x2]
00502fecldr x2, [x2+16]
00502ff0ldrsb x27, [x2]
00502ff4movz x3, 44
00502ff8str x3, [x2+16]
00502ffcadrp x27, 0x549000
00503000ldr w3, [x27+3056]
00503004cbz w3, 0x50300c
00503008b 0x503010
0050300c
0050300cloc_50300c:
0050300cb 0x503020
00503010
00503010loc_503010:
00503010ldr x3, [x2+8]
00503014bl runtime.gcWriteBarrier1
00503018str x3, [x25]
0050301cb 0x503020
00503020
00503020loc_503020:
00503020adrp x3, 0x1c3000
00503024add x3, x3, 1552
00503028str x3, [x2+8]
0050302cb 0x503030
00503030
00503030loc_503030:
00503030b 0x503034
00503034
00503034loc_503034:
00503034ldr x2, [sp+88]
00503038str x2, [sp+384]
0050303cstr xzr, [sp+360]
00503040stp xzr, xzr, [sp+368]
00503044stp xzr, xzr, [sp+408]
00503048ldr x1, [sp+384]
0050304cadrp x0, 0x210000
00503050add x0, x0, 3392
00503054bl google.golang.org/protobuf/proto.Marshal
00503058str x0, [sp+360]
0050305cstr x1, [sp+368]
00503060str x2, [sp+376]
00503064str x3, [sp+408]
00503068str x4, [sp+416]
0050306cldr x2, [sp+360]
00503070ldr x3, [sp+368]
00503074ldr x4, [sp+376]
00503078str x2, [sp+512]
0050307cstr x3, [sp+520]
00503080str x4, [sp+528]
00503084ldr x2, [sp+408]
00503088ldr x3, [sp+416]
0050308cstr x2, [sp+496]
00503090str x3, [sp+504]
00503094ldr x2, [sp+512]
00503098ldr x3, [sp+520]
0050309cldr x4, [sp+528]
005030a0str x2, [sp+584]
005030a4str x3, [sp+592]
005030a8str x4, [sp+600]
005030acldr x3, [sp+496]
005030b0ldr x4, [sp+504]
005030b4str x3, [sp+160]
005030b8str x4, [sp+168]
005030bcldr x0, [sp+584]
005030c0ldr x1, [sp+592]
005030c4ldr x2, [sp+600]
005030c8ldr x26, [sp+608]
005030ccldr x5, [x26]
005030d0blr x5
005030d4ldp x29, x30, [sp-8]
005030d8add sp, sp, 576
005030dcret x30
005030e0
005030e0loc_5030e0:
005030e0stp x0, x1, [sp+8]
005030e4stp x2, x3, [sp+24]
005030e8mov x3, x30
005030ecbl runtime.morestack_noctxt.abi0
005030f0ldp x0, x1, [sp+8]
005030f4ldp x2, x3, [sp+24]
005030f8b 0x502a80
005030fcudf 0
00502a80

00503100
00503100github.com/bishopfox/sliver/implant/sliver/handlers.chmodHandler: ; void github.com/bishopfox/sliver/implant/sliver/handlers.chmodHandler(struct []uint8 data, github.com/bishopfox/sliver/implant/sliver/handlers.RPCResponse resp)
00503100ldr x16, [x28+16]
00503104sub x17, sp, 448
00503108subs xzr, x17, x16
0050310cb.ls 0x503800
00503110sub x20, sp, 576
00503114stp x29, x30, [x20-8]
00503118add sp, x20, 0
0050311csub x29, sp, 8
00503120str x0, [sp+584]
00503124str x1, [sp+592]
00503128str x2, [sp+600]
0050312cstr x3, [sp+608]
00503130adrp x0, 0x181000
00503134add x0, x0, 3712
00503138bl runtime.newobject
0050313cstr x0, [sp+400]
00503140adrp x27, 0x548000
00503144ldr w1, [x27+3056]
00503148cbz w1, 0x503150
0050314cb 0x503154
00503150
00503150loc_503150:
00503150b 0x503170
00503154
00503154loc_503154:
00503154str x0, [sp+280]
00503158mov x1, x0
0050315cadrp x0, 0x181000
00503160add x0, x0, 3712
00503164bl runtime.wbZero
00503168ldr x0, [sp+280]
0050316cb 0x503170
00503170
00503170loc_503170:
00503170mov x20, x0
00503174adr x27, 16
00503178stp x29, x27, [sp-24]
0050317csub x29, sp, 24
00503180bl fn_87cfc
00503184sub x29, sp, 8
00503188str xzr, [x0+80]
0050318cldr x4, [sp+400]
00503190str x4, [sp+184]
00503194str x4, [sp+504]
00503198ldr x0, [sp+584]
0050319cldr x1, [sp+592]
005031a0ldr x2, [sp+600]
005031a4adrp x3, 0x210000
005031a8add x3, x3, 3616
005031acbl google.golang.org/protobuf/proto.Unmarshal
005031b0str x0, [sp+168]
005031b4str x1, [sp+176]
005031b8cbnz x0, 0x5031c0
005031bcb 0x50327c
005031c0
005031c0loc_5031c0:
005031c0stp xzr, xzr, [sp+488]
005031c4add x5, sp, 488
005031c8str x5, [sp+368]
005031ccldr x5, [sp+168]
005031d0ldr x6, [sp+176]
005031d4str x5, [sp+352]
005031d8str x6, [sp+360]
005031dcstr x5, [sp+344]
005031e0ldr x5, [sp+344]
005031e4cbnz x5, 0x5031ec
005031e8b 0x5031fc
005031ec
005031ecloc_5031ec:
005031ecldr x5, [sp+344]
005031f0ldr x5, [x5+8]
005031f4str x5, [sp+344]
005031f8b 0x503200
005031fc
005031fcloc_5031fc:
005031fcb 0x503200
00503200
00503200loc_503200:
00503200ldr x5, [sp+368]
00503204ldrsb x27, [x5]
00503208ldr x6, [sp+344]
0050320cldr x7, [sp+360]
00503210str x6, [x5]
00503214adrp x27, 0x548000
00503218ldr w6, [x27+3056]
0050321ccbz w6, 0x503224
00503220b 0x503228
00503224
00503224loc_503224:
00503224b 0x50323c
00503228
00503228loc_503228:
00503228bl runtime.gcWriteBarrier2
0050322cstr x7, [x25]
00503230ldr x6, [x5+8]
00503234str x6, [x25+8]
00503238b 0x50323c
0050323c
0050323cloc_50323c:
0050323cstr x7, [x5+8]
00503240ldr x2, [sp+368]
00503244ldrsb x27, [x2]
00503248b 0x50324c
0050324c
0050324cloc_50324c:
0050324cstr x2, [sp+376]
00503250orr x4, xzr, 1
00503254str x4, [sp+384]
00503258str x4, [sp+392]
0050325cadrp x0, 0x1b7000
00503260add x0, x0, 981
00503264movz x1, 26
00503268mov x3, x4
0050326cbl log.Printf
00503270ldp x29, x30, [sp-8]
00503274add sp, sp, 576
00503278ret x30
0050327c
0050327cloc_50327c:
0050327cadrp x0, 0x16e000
00503280add x0, x0, 3808
00503284bl runtime.newobject
00503288str x0, [sp+336]
0050328cadrp x27, 0x548000
00503290ldr w1, [x27+3056]
00503294cbz w1, 0x50329c
00503298b 0x5032a0
0050329c
0050329cloc_50329c:
0050329cb 0x5032bc
005032a0
005032a0loc_5032a0:
005032a0str x0, [sp+272]
005032a4mov x1, x0
005032a8adrp x0, 0x16e000
005032acadd x0, x0, 3808
005032b0bl runtime.wbZero
005032b4ldr x0, [sp+272]
005032b8b 0x5032bc
005032bc
005032bcloc_5032bc:
005032bcstp xzr, xzr, [x0]
005032c0stp xzr, xzr, [x0+16]
005032c4stp xzr, xzr, [x0+32]
005032c8stp xzr, xzr, [x0+48]
005032ccldr x2, [sp+336]
005032d0str x2, [sp+192]
005032d4stp xzr, xzr, [sp+472]
005032d8stp xzr, xzr, [sp+456]
005032dcldr x2, [sp+184]
005032e0ldrsb x27, [x2]
005032e4ldr x0, [x2+8]
005032e8ldr x1, [x2+16]
005032ecstr x0, [sp+320]
005032f0str x1, [sp+328]
005032f4bl path/filepath.Abs
005032f8str x0, [sp+472]
005032fcstr x1, [sp+480]
00503300str x2, [sp+456]
00503304str x3, [sp+464]
00503308ldr x2, [sp+472]
0050330cldr x3, [sp+480]
00503310str x2, [sp+248]
00503314str x3, [sp+256]
00503318ldr x2, [sp+456]
0050331cldr x3, [sp+464]
00503320str x2, [sp+232]
00503324str x3, [sp+240]
00503328ldr x2, [sp+248]
0050332cldr x3, [sp+256]
00503330str x2, [sp+120]
00503334str x3, [sp+128]
00503338ldr x4, [sp+192]
0050333cldrsb x27, [x4]
00503340str x3, [x4+16]
00503344adrp x27, 0x548000
00503348ldr w3, [x27+3056]
0050334ccbz w3, 0x503354
00503350b 0x503358
00503354
00503354loc_503354:
00503354b 0x50336c
00503358
00503358loc_503358:
00503358bl runtime.gcWriteBarrier2
0050335cstr x2, [x25]
00503360ldr x3, [x4+8]
00503364str x3, [x25+8]
00503368b 0x50336c
0050336c
0050336cloc_50336c:
0050336cstr x2, [x4+8]
00503370stp xzr, xzr, [sp+440]
00503374stp xzr, xzr, [sp+456]
00503378ldr x0, [sp+120]
0050337cldr x1, [sp+128]
00503380bl os.Stat
00503384str x0, [sp+440]
00503388str x1, [sp+448]
0050338cstr x2, [sp+456]
00503390str x3, [sp+464]
00503394ldr x2, [sp+440]
00503398ldr x3, [sp+448]
0050339cstr x2, [sp+216]
005033a0str x3, [sp+224]
005033a4ldr x2, [sp+456]
005033a8ldr x3, [sp+464]
005033acstr x2, [sp+200]
005033b0str x3, [sp+208]
005033b4str x2, [sp+168]
005033b8str x3, [sp+176]
005033bcadrp x0, 0x182000
005033c0add x0, x0, 3648
005033c4bl runtime.newobject
005033c8str x0, [sp+312]
005033ccadrp x27, 0x548000
005033d0ldr w2, [x27+3056]
005033d4cbz w2, 0x5033dc
005033d8b 0x5033e0
005033dc
005033dcloc_5033dc:
005033dcb 0x5033fc
005033e0
005033e0loc_5033e0:
005033e0str x0, [sp+264]
005033e4mov x1, x0
005033e8adrp x0, 0x182000
005033ecadd x0, x0, 3648
005033f0bl runtime.wbZero
005033f4ldr x0, [sp+264]
005033f8b 0x5033fc
005033fc
005033fcloc_5033fc:
005033fcmov x20, x0
00503400adr x27, 16
00503404stp x29, x27, [sp-24]
00503408sub x29, sp, 24
0050340cbl fn_87cf8
00503410sub x29, sp, 8
00503414ldr x4, [sp+192]
00503418ldrsb x27, [x4]
0050341cldr x5, [sp+312]
00503420adrp x27, 0x548000
00503424ldr w6, [x27+3056]
00503428cbz w6, 0x503430
0050342cb 0x503434
00503430
00503430loc_503430:
00503430b 0x503448
00503434
00503434loc_503434:
00503434bl runtime.gcWriteBarrier2
00503438str x5, [x25]
0050343cldr x6, [x4+24]
00503440str x6, [x25+8]
00503444b 0x503448
00503448
00503448loc_503448:
00503448str x5, [x4+24]
0050344cldr x4, [sp+168]
00503450cbnz x4, 0x503458
00503454b 0x5034b8
00503458
00503458loc_503458:
00503458ldr x1, [sp+168]
0050345cldrsb x27, [x1]
00503460ldr x1, [x1+24]
00503464ldr x0, [sp+176]
00503468blr x1
0050346cstr x0, [sp+472]
00503470str x1, [sp+480]
00503474ldr x2, [sp+192]
00503478ldrsb x27, [x2]
0050347cldr x2, [x2+24]
00503480ldrsb x27, [x2]
00503484str x1, [x2+16]
00503488adrp x27, 0x548000
0050348cldr w1, [x27+3056]
00503490cbz w1, 0x503498
00503494b 0x50349c
00503498
00503498loc_503498:
00503498b 0x5034b0
0050349c
0050349cloc_50349c:
0050349cbl runtime.gcWriteBarrier2
005034a0str x0, [x25]
005034a4ldr x3, [x2+8]
005034a8str x3, [x25+8]
005034acb 0x5034b0
005034b0
005034b0loc_5034b0:
005034b0str x0, [x2+8]
005034b4b 0x503754
005034b8
005034b8loc_5034b8:
005034b8stp xzr, xzr, [sp+456]
005034bcldr x4, [sp+184]
005034c0ldrsb x27, [x4]
005034c4ldr x0, [x4+24]
005034c8ldr x1, [x4+32]
005034ccstr x0, [sp+296]
005034d0str x1, [sp+304]
005034d4orr x2, xzr, 8
005034d8orr x3, xzr, 32
005034dcbl strconv.ParseInt
005034e0str x0, [sp+104]
005034e4str x1, [sp+456]
005034e8str x2, [sp+464]
005034ecldr x4, [sp+104]
005034f0str x4, [sp+112]
005034f4str x1, [sp+552]
005034f8str x2, [sp+560]
005034fcldr x4, [sp+112]
00503500str x4, [sp+80]
00503504str x1, [sp+152]
00503508str x2, [sp+160]
0050350ccbnz x1, 0x503514
00503510b 0x503570
00503514
00503514loc_503514:
00503514ldrsb x27, [x1]
00503518ldr x1, [x1+24]
0050351cmov x0, x2
00503520blr x1
00503524str x0, [sp+472]
00503528str x1, [sp+480]
0050352cldr x2, [sp+192]
00503530ldrsb x27, [x2]
00503534ldr x2, [x2+24]
00503538ldrsb x27, [x2]
0050353cstr x1, [x2+16]
00503540adrp x27, 0x548000
00503544ldr w1, [x27+3056]
00503548cbz w1, 0x503550
0050354cb 0x503554
00503550
00503550loc_503550:
00503550b 0x503568
00503554
00503554loc_503554:
00503554bl runtime.gcWriteBarrier2
00503558str x0, [x25]
0050355cldr x3, [x2+8]
00503560str x3, [x25+8]
00503564b 0x503568
00503568
00503568loc_503568:
00503568str x0, [x2+8]
0050356cb 0x503750
00503570
00503570loc_503570:
00503570ldr x3, [sp+80]
00503574and x3, x3, 2048
00503578str x3, [sp+56]
0050357cldr x3, [sp+80]
00503580and x3, x3, 1024
00503584str x3, [sp+72]
00503588ldr x3, [sp+80]
0050358cand x3, x3, 512
00503590str x3, [sp+64]
00503594ldr x3, [sp+80]
00503598str w3, [sp+52]
0050359cldr x4, [sp+56]
005035a0subs xzr, x4, 0
005035a4b.gt 0x5035ac
005035a8b 0x5035b8
005035ac
005035acloc_5035ac:
005035acorr x3, x3, 0x800000
005035b0str w3, [sp+52]
005035b4b 0x5035bc
005035b8
005035b8loc_5035b8:
005035b8b 0x5035bc
005035bc
005035bcloc_5035bc:
005035bcldr x3, [sp+72]
005035c0subs xzr, x3, 0
005035c4b.gt 0x5035cc
005035c8b 0x5035dc
005035cc
005035ccloc_5035cc:
005035ccldr w3, [sp+52]
005035d0orr x3, x3, 0x400000
005035d4str w3, [sp+52]
005035d8b 0x5035e0
005035dc
005035dcloc_5035dc:
005035dcb 0x5035e0
005035e0
005035e0loc_5035e0:
005035e0ldr x3, [sp+64]
005035e4subs xzr, x3, 0
005035e8b.gt 0x5035f0
005035ecb 0x503600
005035f0
005035f0loc_5035f0:
005035f0ldr w3, [sp+52]
005035f4orr x3, x3, 0x100000
005035f8str w3, [sp+52]
005035fcb 0x503604
00503600
00503600loc_503600:
00503600b 0x503604
00503604
00503604loc_503604:
00503604ldr x3, [sp+184]
00503608ldrsb x27, [x3]
0050360cldrb w3, [x3+40]
00503610tbnz w3, 0, 0x503618
00503614b 0x5036c8
00503618
00503618loc_503618:
00503618str xzr, [sp+88]
0050361cstr wzr, [sp+96]
00503620add x3, sp, 88
00503624str x3, [sp+288]
00503628ldrsb x27, [x3]
0050362cadrp x4, 0
00503630add x4, x4, 2080
00503634str x4, [x3]
00503638ldrsb x27, [x3]
0050363cldr w4, [sp+52]
00503640str w4, [x3+8]
00503644ldr x0, [sp+120]
00503648ldr x1, [sp+128]
0050364cldr x2, [sp+288]
00503650bl path/filepath.WalkDir
00503654str x0, [sp+136]
00503658str x1, [sp+144]
0050365ccbnz x0, 0x503664
00503660b 0x5036c0
00503664
00503664loc_503664:
00503664ldrsb x27, [x0]
00503668ldr x2, [x0+24]
0050366cmov x0, x1
00503670blr x2
00503674str x0, [sp+472]
00503678str x1, [sp+480]
0050367cldr x2, [sp+192]
00503680ldrsb x27, [x2]
00503684ldr x2, [x2+24]
00503688ldrsb x27, [x2]
0050368cstr x1, [x2+16]
00503690adrp x27, 0x548000
00503694ldr w1, [x27+3056]
00503698cbz w1, 0x5036a0
0050369cb 0x5036a4
005036a0
005036a0loc_5036a0:
005036a0b 0x5036b8
005036a4
005036a4loc_5036a4:
005036a4bl runtime.gcWriteBarrier2
005036a8str x0, [x25]
005036acldr x3, [x2+8]
005036b0str x3, [x25+8]
005036b4b 0x5036b8
005036b8
005036b8loc_5036b8:
005036b8str x0, [x2+8]
005036bcb 0x5036c4
005036c0
005036c0loc_5036c0:
005036c0b 0x5036c4
005036c4
005036c4loc_5036c4:
005036c4b 0x50374c
005036c8
005036c8loc_5036c8:
005036c8ldr w2, [sp+52]
005036ccldr x0, [sp+120]
005036d0ldr x1, [sp+128]
005036d4bl os.Chmod
005036d8str x0, [sp+152]
005036dcstr x1, [sp+160]
005036e0cbnz x0, 0x5036e8
005036e4b 0x503744
005036e8
005036e8loc_5036e8:
005036e8ldrsb x27, [x0]
005036ecldr x2, [x0+24]
005036f0mov x0, x1
005036f4blr x2
005036f8str x0, [sp+472]
005036fcstr x1, [sp+480]
00503700ldr x2, [sp+192]
00503704ldrsb x27, [x2]
00503708ldr x2, [x2+24]
0050370cldrsb x27, [x2]
00503710str x1, [x2+16]
00503714adrp x27, 0x548000
00503718ldr w1, [x27+3056]
0050371ccbz w1, 0x503724
00503720b 0x503728
00503724
00503724loc_503724:
00503724b 0x50373c
00503728
00503728loc_503728:
00503728bl runtime.gcWriteBarrier2
0050372cstr x0, [x25]
00503730ldr x3, [x2+8]
00503734str x3, [x25+8]
00503738b 0x50373c
0050373c
0050373cloc_50373c:
0050373cstr x0, [x2+8]
00503740b 0x503748
00503744
00503744loc_503744:
00503744b 0x503748
00503748
00503748loc_503748:
00503748b 0x50374c
0050374c
0050374cloc_50374c:
0050374cb 0x503750
00503750
00503750loc_503750:
00503750b 0x503754
00503754
00503754loc_503754:
00503754ldr x2, [sp+192]
00503758str x2, [sp+432]
0050375cstr xzr, [sp+408]
00503760stp xzr, xzr, [sp+416]
00503764stp xzr, xzr, [sp+456]
00503768ldr x1, [sp+432]
0050376cadrp x0, 0x210000
00503770add x0, x0, 3648
00503774bl google.golang.org/protobuf/proto.Marshal
00503778str x0, [sp+408]
0050377cstr x1, [sp+416]
00503780str x2, [sp+424]
00503784str x3, [sp+456]
00503788str x4, [sp+464]
0050378cldr x2, [sp+408]
00503790ldr x3, [sp+416]
00503794ldr x4, [sp+424]
00503798str x2, [sp+528]
0050379cstr x3, [sp+536]
005037a0str x4, [sp+544]
005037a4ldr x2, [sp+456]
005037a8ldr x3, [sp+464]
005037acstr x2, [sp+512]
005037b0str x3, [sp+520]
005037b4ldr x2, [sp+528]
005037b8ldr x3, [sp+536]
005037bcldr x4, [sp+544]
005037c0str x2, [sp+584]
005037c4str x3, [sp+592]
005037c8str x4, [sp+600]
005037ccldr x3, [sp+512]
005037d0ldr x4, [sp+520]
005037d4str x3, [sp+168]
005037d8str x4, [sp+176]
005037dcldr x0, [sp+584]
005037e0ldr x1, [sp+592]
005037e4ldr x2, [sp+600]
005037e8ldr x26, [sp+608]
005037ecldr x5, [x26]
005037f0blr x5
005037f4ldp x29, x30, [sp-8]
005037f8add sp, sp, 576
005037fcret x30
00503800
00503800loc_503800:
00503800stp x0, x1, [sp+8]
00503804stp x2, x3, [sp+24]
00503808mov x3, x30
0050380cbl runtime.morestack_noctxt.abi0
00503810ldp x0, x1, [sp+8]
00503814ldp x2, x3, [sp+24]
00503818b 0x503100
0050381cudf 0
00503100

00503820
00503820github.com/bishopfox/sliver/implant/sliver/handlers.chmodHandler.func1: ; void github.com/bishopfox/sliver/implant/sliver/handlers.chmodHandler.func1(struct string file, io/fs.DirEntry d, error err)
00503820ldr x16, [x28+16]
00503824subs xzr, sp, x16
00503828b.ls 0x5038d4
0050382cstr x30, [sp-64]!
00503830stur x29, [sp-8]
00503834sub x29, sp, 8
00503838str x0, [sp+72]
0050383cstr x1, [sp+80]
00503840str x2, [sp+88]
00503844str x3, [sp+96]
00503848str x4, [sp+104]
0050384cstr x5, [sp+112]
00503850ldr w3, [x26+8]
00503854str w3, [sp+36]
00503858stp xzr, xzr, [sp+40]
0050385cldr x3, [sp+104]
00503860cbnz x3, 0x503868
00503864b 0x503884
00503868
00503868loc_503868:
00503868ldr x0, [sp+104]
0050386cldr x1, [sp+112]
00503870str x0, [sp+40]
00503874str x1, [sp+48]
00503878ldur x29, [sp-8]
0050387cldr x30, [sp], 64
00503880ret x30
00503884
00503884loc_503884:
00503884ldr w2, [sp+36]
00503888ldr x0, [sp+72]
0050388cldr x1, [sp+80]
00503890bl os.Chmod
00503894str x0, [sp+104]
00503898str x1, [sp+112]
0050389ccbnz x0, 0x5038a4
005038a0b 0x5038b8
005038a4
005038a4loc_5038a4:
005038a4str x0, [sp+40]
005038a8str x1, [sp+48]
005038acldur x29, [sp-8]
005038b0ldr x30, [sp], 64
005038b4ret x30
005038b8
005038b8loc_5038b8:
005038b8b 0x5038bc
005038bc
005038bcloc_5038bc:
005038bcstp xzr, xzr, [sp+40]
005038c0mov x0, xzr
005038c4mov x1, xzr
005038c8ldur x29, [sp-8]
005038ccldr x30, [sp], 64
005038d0ret x30
005038d4
005038d4loc_5038d4:
005038d4stp x0, x1, [sp+8]
005038d8stp x2, x3, [sp+24]
005038dcstp x4, x5, [sp+40]
005038e0mov x3, x30
005038e4bl runtime.morestack.abi0
005038e8ldp x0, x1, [sp+8]
005038ecldp x2, x3, [sp+24]
005038f0ldp x4, x5, [sp+40]
005038f4b 0x503820
005038f8udf 0
005038fcudf 0
00503820

00503900
00503900github.com/bishopfox/sliver/implant/sliver/handlers.chownHandler: ; void github.com/bishopfox/sliver/implant/sliver/handlers.chownHandler(struct []uint8 data, github.com/bishopfox/sliver/implant/sliver/handlers.RPCResponse resp)
00503900ldr x16, [x28+16]
00503904sub x17, sp, 576
00503908subs xzr, x17, x16
0050390cb.ls 0x5041d8
00503910sub x20, sp, 704
00503914stp x29, x30, [x20-8]
00503918add sp, x20, 0
0050391csub x29, sp, 8
00503920str x0, [sp+712]
00503924str x1, [sp+720]
00503928str x2, [sp+728]
0050392cstr x3, [sp+736]
00503930stp xzr, xzr, [sp+128]
00503934stp xzr, xzr, [sp+168]
00503938str xzr, [sp+64]
0050393cstr xzr, [sp+56]
00503940stp xzr, xzr, [sp+200]
00503944str xzr, [sp+120]
00503948str xzr, [sp+160]
0050394cadrp x0, 0x187000
00503950add x0, x0, 3904
00503954bl runtime.newobject
00503958str x0, [sp+384]
0050395cadrp x27, 0x548000
00503960ldr w1, [x27+3056]
00503964cbz w1, 0x50396c
00503968b 0x503970
0050396c
0050396cloc_50396c:
0050396cb 0x50398c
00503970
00503970loc_503970:
00503970str x0, [sp+248]
00503974mov x1, x0
00503978adrp x0, 0x187000
0050397cadd x0, x0, 3904
00503980bl runtime.wbZero
00503984ldr x0, [sp+248]
00503988b 0x50398c
0050398c
0050398cloc_50398c:
0050398cmov x20, x0
00503990adr x27, 16
00503994stp x29, x27, [sp-24]
00503998sub x29, sp, 24
0050399cbl fn_87cf8
005039a0sub x29, sp, 8
005039a4str xzr, [x0+96]
005039a8ldr x4, [sp+384]
005039acstr x4, [sp+216]
005039b0str x4, [sp+504]
005039b4ldr x0, [sp+712]
005039b8ldr x1, [sp+720]
005039bcldr x2, [sp+728]
005039c0adrp x3, 0x210000
005039c4add x3, x3, 3552
005039c8bl google.golang.org/protobuf/proto.Unmarshal
005039ccstr x0, [sp+200]
005039d0str x1, [sp+208]
005039d4cbnz x0, 0x5039dc
005039d8b 0x503a98
005039dc
005039dcloc_5039dc:
005039dcstp xzr, xzr, [sp+488]
005039e0add x5, sp, 488
005039e4str x5, [sp+352]
005039e8ldr x5, [sp+200]
005039ecldr x6, [sp+208]
005039f0str x5, [sp+336]
005039f4str x6, [sp+344]
005039f8str x5, [sp+328]
005039fcldr x5, [sp+328]
00503a00cbnz x5, 0x503a08
00503a04b 0x503a18
00503a08
00503a08loc_503a08:
00503a08ldr x5, [sp+328]
00503a0cldr x5, [x5+8]
00503a10str x5, [sp+328]
00503a14b 0x503a1c
00503a18
00503a18loc_503a18:
00503a18b 0x503a1c
00503a1c
00503a1cloc_503a1c:
00503a1cldr x5, [sp+352]
00503a20ldrsb x27, [x5]
00503a24ldr x6, [sp+328]
00503a28ldr x7, [sp+344]
00503a2cstr x6, [x5]
00503a30adrp x27, 0x548000
00503a34ldr w6, [x27+3056]
00503a38cbz w6, 0x503a40
00503a3cb 0x503a44
00503a40
00503a40loc_503a40:
00503a40b 0x503a58
00503a44
00503a44loc_503a44:
00503a44bl runtime.gcWriteBarrier2
00503a48str x7, [x25]
00503a4cldr x6, [x5+8]
00503a50str x6, [x25+8]
00503a54b 0x503a58
00503a58
00503a58loc_503a58:
00503a58str x7, [x5+8]
00503a5cldr x2, [sp+352]
00503a60ldrsb x27, [x2]
00503a64b 0x503a68
00503a68
00503a68loc_503a68:
00503a68str x2, [sp+360]
00503a6corr x4, xzr, 1
00503a70str x4, [sp+368]
00503a74str x4, [sp+376]
00503a78adrp x0, 0x1b7000
00503a7cadd x0, x0, 981
00503a80movz x1, 26
00503a84mov x3, x4
00503a88bl log.Printf
00503a8cldp x29, x30, [sp-8]
00503a90add sp, sp, 704
00503a94ret x30
00503a98
00503a98loc_503a98:
00503a98adrp x0, 0x16e000
00503a9cadd x0, x0, 4032
00503aa0bl runtime.newobject
00503aa4str x0, [sp+320]
00503aa8adrp x27, 0x548000
00503aacldr w1, [x27+3056]
00503ab0cbz w1, 0x503ab8
00503ab4b 0x503abc
00503ab8
00503ab8loc_503ab8:
00503ab8b 0x503ad8
00503abc
00503abcloc_503abc:
00503abcstr x0, [sp+240]
00503ac0mov x1, x0
00503ac4adrp x0, 0x16e000
00503ac8add x0, x0, 4032
00503accbl runtime.wbZero
00503ad0ldr x0, [sp+240]
00503ad4b 0x503ad8
00503ad8
00503ad8loc_503ad8:
00503ad8stp xzr, xzr, [x0]
00503adcstp xzr, xzr, [x0+16]
00503ae0stp xzr, xzr, [x0+32]
00503ae4stp xzr, xzr, [x0+48]
00503ae8ldr x2, [sp+320]
00503aecstr x2, [sp+224]
00503af0stp xzr, xzr, [sp+472]
00503af4stp xzr, xzr, [sp+456]
00503af8ldr x2, [sp+216]
00503afcldrsb x27, [x2]
00503b00ldr x0, [x2+8]
00503b04ldr x1, [x2+16]
00503b08str x0, [sp+304]
00503b0cstr x1, [sp+312]
00503b10bl path/filepath.Abs
00503b14str x0, [sp+472]
00503b18str x1, [sp+480]
00503b1cstr x2, [sp+456]
00503b20str x3, [sp+464]
00503b24ldr x2, [sp+472]
00503b28ldr x3, [sp+480]
00503b2cstr x2, [sp+680]
00503b30str x3, [sp+688]
00503b34ldr x2, [sp+456]
00503b38ldr x3, [sp+464]
00503b3cstr x2, [sp+664]
00503b40str x3, [sp+672]
00503b44ldr x2, [sp+680]
00503b48ldr x3, [sp+688]
00503b4cstr x2, [sp+144]
00503b50str x3, [sp+152]
00503b54ldr x4, [sp+224]
00503b58ldrsb x27, [x4]
00503b5cstr x3, [x4+16]
00503b60adrp x27, 0x548000
00503b64ldr w3, [x27+3056]
00503b68cbz w3, 0x503b70
00503b6cb 0x503b74
00503b70
00503b70loc_503b70:
00503b70b 0x503b88
00503b74
00503b74loc_503b74:
00503b74bl runtime.gcWriteBarrier2
00503b78str x2, [x25]
00503b7cldr x3, [x4+8]
00503b80str x3, [x25+8]
00503b84b 0x503b88
00503b88
00503b88loc_503b88:
00503b88str x2, [x4+8]
00503b8cstp xzr, xzr, [sp+440]
00503b90stp xzr, xzr, [sp+456]
00503b94ldr x0, [sp+144]
00503b98ldr x1, [sp+152]
00503b9cbl os.Stat
00503ba0str x0, [sp+440]
00503ba4str x1, [sp+448]
00503ba8str x2, [sp+456]
00503bacstr x3, [sp+464]
00503bb0ldr x2, [sp+440]
00503bb4ldr x3, [sp+448]
00503bb8str x2, [sp+648]
00503bbcstr x3, [sp+656]
00503bc0ldr x2, [sp+456]
00503bc4ldr x3, [sp+464]
00503bc8str x2, [sp+632]
00503bccstr x3, [sp+640]
00503bd0str x2, [sp+200]
00503bd4str x3, [sp+208]
00503bd8adrp x0, 0x182000
00503bdcadd x0, x0, 3648
00503be0bl runtime.newobject
00503be4str x0, [sp+296]
00503be8adrp x27, 0x548000
00503becldr w2, [x27+3056]
00503bf0cbz w2, 0x503bf8
00503bf4b 0x503bfc
00503bf8
00503bf8loc_503bf8:
00503bf8b 0x503c18
00503bfc
00503bfcloc_503bfc:
00503bfcstr x0, [sp+232]
00503c00mov x1, x0
00503c04adrp x0, 0x182000
00503c08add x0, x0, 3648
00503c0cbl runtime.wbZero
00503c10ldr x0, [sp+232]
00503c14b 0x503c18
00503c18
00503c18loc_503c18:
00503c18mov x20, x0
00503c1cadr x27, 16
00503c20stp x29, x27, [sp-24]
00503c24sub x29, sp, 24
00503c28bl fn_87cf8
00503c2csub x29, sp, 8
00503c30ldr x2, [sp+224]
00503c34ldrsb x27, [x2]
00503c38ldr x3, [sp+296]
00503c3cadrp x27, 0x548000
00503c40ldr w4, [x27+3056]
00503c44cbz w4, 0x503c4c
00503c48b 0x503c50
00503c4c
00503c4cloc_503c4c:
00503c4cb 0x503c64
00503c50
00503c50loc_503c50:
00503c50bl runtime.gcWriteBarrier2
00503c54str x3, [x25]
00503c58ldr x4, [x2+24]
00503c5cstr x4, [x25+8]
00503c60b 0x503c64
00503c64
00503c64loc_503c64:
00503c64str x3, [x2+24]
00503c68ldr x2, [sp+200]
00503c6ccbnz x2, 0x503c74
00503c70b 0x503cd4
00503c74
00503c74loc_503c74:
00503c74ldr x1, [sp+200]
00503c78ldrsb x27, [x1]
00503c7cldr x1, [x1+24]
00503c80ldr x0, [sp+208]
00503c84blr x1
00503c88str x0, [sp+472]
00503c8cstr x1, [sp+480]
00503c90ldr x2, [sp+224]
00503c94ldrsb x27, [x2]
00503c98ldr x2, [x2+24]
00503c9cldrsb x27, [x2]
00503ca0str x1, [x2+16]
00503ca4adrp x27, 0x548000
00503ca8ldr w1, [x27+3056]
00503caccbz w1, 0x503cb4
00503cb0b 0x503cb8
00503cb4
00503cb4loc_503cb4:
00503cb4b 0x503ccc
00503cb8
00503cb8loc_503cb8:
00503cb8bl runtime.gcWriteBarrier2
00503cbcstr x0, [x25]
00503cc0ldr x3, [x2+8]
00503cc4str x3, [x25+8]
00503cc8b 0x503ccc
00503ccc
00503cccloc_503ccc:
00503cccstr x0, [x2+8]
00503cd0b 0x50412c
00503cd4
00503cd4loc_503cd4:
00503cd4ldr x2, [sp+216]
00503cd8ldrsb x27, [x2]
00503cdcldr x3, [x2+24]
00503ce0ldr x2, [x2+32]
00503ce4str x3, [sp+128]
00503ce8str x2, [sp+136]
00503cecstr xzr, [sp+432]
00503cf0stp xzr, xzr, [sp+456]
00503cf4ldr x0, [sp+128]
00503cf8ldr x1, [sp+136]
00503cfcbl os/user.Lookup
00503d00str x0, [sp+432]
00503d04str x1, [sp+456]
00503d08str x2, [sp+464]
00503d0cldr x2, [sp+432]
00503d10str x2, [sp+624]
00503d14ldr x2, [sp+464]
00503d18ldr x3, [sp+456]
00503d1cstr x3, [sp+608]
00503d20str x2, [sp+616]
00503d24ldr x2, [sp+624]
00503d28str x2, [sp+120]
00503d2cldr x0, [sp+616]
00503d30ldr x2, [sp+608]
00503d34str x2, [sp+200]
00503d38str x0, [sp+208]
00503d3ccbnz x2, 0x503d44
00503d40b 0x503d9c
00503d44
00503d44loc_503d44:
00503d44ldrsb x27, [x2]
00503d48ldr x1, [x2+24]
00503d4cblr x1
00503d50str x0, [sp+472]
00503d54str x1, [sp+480]
00503d58ldr x2, [sp+224]
00503d5cldrsb x27, [x2]
00503d60ldr x2, [x2+24]
00503d64ldrsb x27, [x2]
00503d68str x1, [x2+16]
00503d6cadrp x27, 0x548000
00503d70ldr w1, [x27+3056]
00503d74cbz w1, 0x503d7c
00503d78b 0x503d80
00503d7c
00503d7cloc_503d7c:
00503d7cb 0x503d94
00503d80
00503d80loc_503d80:
00503d80bl runtime.gcWriteBarrier2
00503d84str x0, [x25]
00503d88ldr x3, [x2+8]
00503d8cstr x3, [x25+8]
00503d90b 0x503d94
00503d94
00503d94loc_503d94:
00503d94str x0, [x2+8]
00503d98b 0x50412c
00503d9c
00503d9cloc_503d9c:
00503d9cstp xzr, xzr, [sp+456]
00503da0ldr x4, [sp+120]
00503da4ldrsb x27, [x4]
00503da8ldr x0, [x4]
00503dacldr x1, [x4+8]
00503db0str x0, [sp+280]
00503db4str x1, [sp+288]
00503db8movz x2, 10
00503dbcorr x3, xzr, 32
00503dc0bl strconv.ParseUint
00503dc4str x0, [sp+96]
00503dc8str x1, [sp+456]
00503dccstr x2, [sp+464]
00503dd0ldr x4, [sp+96]
00503dd4str x4, [sp+112]
00503dd8str x1, [sp+592]
00503ddcstr x2, [sp+600]
00503de0ldr x4, [sp+112]
00503de4str x4, [sp+56]
00503de8str x1, [sp+200]
00503decstr x2, [sp+208]
00503df0cbnz x1, 0x503df8
00503df4b 0x503e54
00503df8
00503df8loc_503df8:
00503df8ldrsb x27, [x1]
00503dfcldr x1, [x1+24]
00503e00mov x0, x2
00503e04blr x1
00503e08str x0, [sp+472]
00503e0cstr x1, [sp+480]
00503e10ldr x2, [sp+224]
00503e14ldrsb x27, [x2]
00503e18ldr x2, [x2+24]
00503e1cldrsb x27, [x2]
00503e20str x1, [x2+16]
00503e24adrp x27, 0x548000
00503e28ldr w1, [x27+3056]
00503e2ccbz w1, 0x503e34
00503e30b 0x503e38
00503e34
00503e34loc_503e34:
00503e34b 0x503e4c
00503e38
00503e38loc_503e38:
00503e38bl runtime.gcWriteBarrier2
00503e3cstr x0, [x25]
00503e40ldr x3, [x2+8]
00503e44str x3, [x25+8]
00503e48b 0x503e4c
00503e4c
00503e4cloc_503e4c:
00503e4cstr x0, [x2+8]
00503e50b 0x50412c
00503e54
00503e54loc_503e54:
00503e54ldr x2, [sp+216]
00503e58ldrsb x27, [x2]
00503e5cldr x3, [x2+40]
00503e60ldr x2, [x2+48]
00503e64str x3, [sp+168]
00503e68str x2, [sp+176]
00503e6cstr xzr, [sp+424]
00503e70stp xzr, xzr, [sp+456]
00503e74ldr x0, [sp+168]
00503e78ldr x1, [sp+176]
00503e7cbl os/user.LookupGroup
00503e80str x0, [sp+424]
00503e84str x1, [sp+456]
00503e88str x2, [sp+464]
00503e8cldr x2, [sp+424]
00503e90str x2, [sp+584]
00503e94ldr x2, [sp+464]
00503e98ldr x3, [sp+456]
00503e9cstr x3, [sp+568]
00503ea0str x2, [sp+576]
00503ea4ldr x2, [sp+584]
00503ea8str x2, [sp+160]
00503eacldr x0, [sp+576]
00503eb0ldr x2, [sp+568]
00503eb4str x2, [sp+200]
00503eb8str x0, [sp+208]
00503ebccbnz x2, 0x503ec4
00503ec0b 0x503f1c
00503ec4
00503ec4loc_503ec4:
00503ec4ldrsb x27, [x2]
00503ec8ldr x1, [x2+24]
00503eccblr x1
00503ed0str x0, [sp+472]
00503ed4str x1, [sp+480]
00503ed8ldr x2, [sp+224]
00503edcldrsb x27, [x2]
00503ee0ldr x2, [x2+24]
00503ee4ldrsb x27, [x2]
00503ee8str x1, [x2+16]
00503eecadrp x27, 0x548000
00503ef0ldr w1, [x27+3056]
00503ef4cbz w1, 0x503efc
00503ef8b 0x503f00
00503efc
00503efcloc_503efc:
00503efcb 0x503f14
00503f00
00503f00loc_503f00:
00503f00bl runtime.gcWriteBarrier2
00503f04str x0, [x25]
00503f08ldr x3, [x2+8]
00503f0cstr x3, [x25+8]
00503f10b 0x503f14
00503f14
00503f14loc_503f14:
00503f14str x0, [x2+8]
00503f18b 0x50412c
00503f1c
00503f1cloc_503f1c:
00503f1cstp xzr, xzr, [sp+456]
00503f20ldr x4, [sp+160]
00503f24ldrsb x27, [x4]
00503f28ldr x0, [x4]
00503f2cldr x1, [x4+8]
00503f30str x0, [sp+264]
00503f34str x1, [sp+272]
00503f38movz x2, 10
00503f3corr x3, xzr, 32
00503f40bl strconv.ParseUint
00503f44str x0, [sp+96]
00503f48str x1, [sp+456]
00503f4cstr x2, [sp+464]
00503f50ldr x4, [sp+96]
00503f54str x4, [sp+104]
00503f58str x1, [sp+552]
00503f5cstr x2, [sp+560]
00503f60ldr x4, [sp+104]
00503f64str x4, [sp+64]
00503f68str x1, [sp+200]
00503f6cstr x2, [sp+208]
00503f70cbnz x1, 0x503f78
00503f74b 0x503fd4
00503f78
00503f78loc_503f78:
00503f78ldrsb x27, [x1]
00503f7cldr x1, [x1+24]
00503f80mov x0, x2
00503f84blr x1
00503f88str x0, [sp+472]
00503f8cstr x1, [sp+480]
00503f90ldr x2, [sp+224]
00503f94ldrsb x27, [x2]
00503f98ldr x2, [x2+24]
00503f9cldrsb x27, [x2]
00503fa0str x1, [x2+16]
00503fa4adrp x27, 0x548000
00503fa8ldr w1, [x27+3056]
00503faccbz w1, 0x503fb4
00503fb0b 0x503fb8
00503fb4
00503fb4loc_503fb4:
00503fb4b 0x503fcc
00503fb8
00503fb8loc_503fb8:
00503fb8bl runtime.gcWriteBarrier2
00503fbcstr x0, [x25]
00503fc0ldr x3, [x2+8]
00503fc4str x3, [x25+8]
00503fc8b 0x503fcc
00503fcc
00503fccloc_503fcc:
00503fccstr x0, [x2+8]
00503fd0b 0x50412c
00503fd4
00503fd4loc_503fd4:
00503fd4ldr x4, [sp+216]
00503fd8ldrsb x27, [x4]
00503fdcldrb w4, [x4+56]
00503fe0tbnz w4, 0, 0x503fe8
00503fe4b 0x5040a0
00503fe8
00503fe8loc_503fe8:
00503fe8stp xzr, xzr, [sp+72]
00503fecstr xzr, [sp+88]
00503ff0add x2, sp, 72
00503ff4str x2, [sp+256]
00503ff8ldrsb x27, [x2]
00503ffcadrp x3, 4096
00504000add x3, x3, 512
00504004str x3, [x2]
00504008ldrsb x27, [x2]
0050400cldr x3, [sp+56]
00504010str x3, [x2+8]
00504014ldrsb x27, [x2]
00504018ldr x3, [sp+64]
0050401cstr x3, [x2+16]
00504020ldr x0, [sp+144]
00504024ldr x1, [sp+152]
00504028bl path/filepath.WalkDir
0050402cstr x0, [sp+184]
00504030str x1, [sp+192]
00504034cbnz x0, 0x50403c
00504038b 0x504098
0050403c
0050403cloc_50403c:
0050403cldrsb x27, [x0]
00504040ldr x2, [x0+24]
00504044mov x0, x1
00504048blr x2
0050404cstr x0, [sp+472]
00504050str x1, [sp+480]
00504054ldr x2, [sp+224]
00504058ldrsb x27, [x2]
0050405cldr x2, [x2+24]
00504060ldrsb x27, [x2]
00504064str x1, [x2+16]
00504068adrp x27, 0x547000
0050406cldr w1, [x27+3056]
00504070cbz w1, 0x504078
00504074b 0x50407c
00504078
00504078loc_504078:
00504078b 0x504090
0050407c
0050407cloc_50407c:
0050407cbl runtime.gcWriteBarrier2
00504080str x0, [x25]
00504084ldr x3, [x2+8]
00504088str x3, [x25+8]
0050408cb 0x504090
00504090
00504090loc_504090:
00504090str x0, [x2+8]
00504094b 0x50409c
00504098
00504098loc_504098:
00504098b 0x50409c
0050409c
0050409cloc_50409c:
0050409cb 0x504128
005040a0
005040a0loc_5040a0:
005040a0ldr x0, [sp+144]
005040a4ldr x1, [sp+152]
005040a8ldr x2, [sp+56]
005040acldr x3, [sp+64]
005040b0bl os.Chown
005040b4str x0, [sp+200]
005040b8str x1, [sp+208]
005040bccbnz x0, 0x5040c4
005040c0b 0x504120
005040c4
005040c4loc_5040c4:
005040c4ldrsb x27, [x0]
005040c8ldr x2, [x0+24]
005040ccmov x0, x1
005040d0blr x2
005040d4str x0, [sp+472]
005040d8str x1, [sp+480]
005040dcldr x2, [sp+224]
005040e0ldrsb x27, [x2]
005040e4ldr x2, [x2+24]
005040e8ldrsb x27, [x2]
005040ecstr x1, [x2+16]
005040f0adrp x27, 0x547000
005040f4ldr w1, [x27+3056]
005040f8cbz w1, 0x504100
005040fcb 0x504104
00504100
00504100loc_504100:
00504100b 0x504118
00504104
00504104loc_504104:
00504104bl runtime.gcWriteBarrier2
00504108str x0, [x25]
0050410cldr x3, [x2+8]
00504110str x3, [x25+8]
00504114b 0x504118
00504118
00504118loc_504118:
00504118str x0, [x2+8]
0050411cb 0x504124
00504120
00504120loc_504120:
00504120b 0x504124
00504124
00504124loc_504124:
00504124b 0x504128
00504128
00504128loc_504128:
00504128b 0x50412c
0050412c
0050412cloc_50412c:
0050412cldr x2, [sp+224]
00504130str x2, [sp+416]
00504134str xzr, [sp+392]
00504138stp xzr, xzr, [sp+400]
0050413cstp xzr, xzr, [sp+456]
00504140ldr x1, [sp+416]
00504144adrp x0, 0x20f000
00504148add x0, x0, 3584
0050414cbl google.golang.org/protobuf/proto.Marshal
00504150str x0, [sp+392]
00504154str x1, [sp+400]
00504158str x2, [sp+408]
0050415cstr x3, [sp+456]
00504160str x4, [sp+464]
00504164ldr x2, [sp+392]
00504168ldr x3, [sp+400]
0050416cldr x4, [sp+408]
00504170str x2, [sp+528]
00504174str x3, [sp+536]
00504178str x4, [sp+544]
0050417cldr x2, [sp+456]
00504180ldr x3, [sp+464]
00504184str x2, [sp+512]
00504188str x3, [sp+520]
0050418cldr x2, [sp+528]
00504190ldr x3, [sp+536]
00504194ldr x4, [sp+544]
00504198str x2, [sp+712]
0050419cstr x3, [sp+720]
005041a0str x4, [sp+728]
005041a4ldr x3, [sp+512]
005041a8ldr x4, [sp+520]
005041acstr x3, [sp+200]
005041b0str x4, [sp+208]
005041b4ldr x0, [sp+712]
005041b8ldr x1, [sp+720]
005041bcldr x2, [sp+728]
005041c0ldr x26, [sp+736]
005041c4ldr x5, [x26]
005041c8blr x5
005041ccldp x29, x30, [sp-8]
005041d0add sp, sp, 704
005041d4ret x30
005041d8
005041d8loc_5041d8:
005041d8stp x0, x1, [sp+8]
005041dcstp x2, x3, [sp+24]
005041e0mov x3, x30
005041e4bl runtime.morestack_noctxt.abi0
005041e8ldp x0, x1, [sp+8]
005041ecldp x2, x3, [sp+24]
005041f0b 0x503900
005041f4udf 0
005041f8udf 0
005041fcudf 0
00503900

00504200
00504200github.com/bishopfox/sliver/implant/sliver/handlers.chownHandler.func1: ; void github.com/bishopfox/sliver/implant/sliver/handlers.chownHandler.func1(struct string file, io/fs.DirEntry d, error err)
00504200ldr x16, [x28+16]
00504204subs xzr, sp, x16
00504208b.ls 0x5042c0
0050420cstr x30, [sp-80]!
00504210stur x29, [sp-8]
00504214sub x29, sp, 8
00504218str x0, [sp+88]
0050421cstr x1, [sp+96]
00504220str x2, [sp+104]
00504224str x3, [sp+112]
00504228str x4, [sp+120]
0050422cstr x5, [sp+128]
00504230ldr x4, [x26+8]
00504234str x4, [sp+40]
00504238ldr x4, [x26+16]
0050423cstr x4, [sp+48]
00504240stp xzr, xzr, [sp+56]
00504244ldr x4, [sp+120]
00504248cbnz x4, 0x504250
0050424cb 0x50426c
00504250
00504250loc_504250:
00504250ldr x0, [sp+120]
00504254ldr x1, [sp+128]
00504258str x0, [sp+56]
0050425cstr x1, [sp+64]
00504260ldur x29, [sp-8]
00504264ldr x30, [sp], 80
00504268ret x30
0050426c
0050426cloc_50426c:
0050426cldr x0, [sp+88]
00504270ldr x1, [sp+96]
00504274ldr x2, [sp+40]
00504278ldr x3, [sp+48]
0050427cbl os.Chown
00504280str x0, [sp+120]
00504284str x1, [sp+128]
00504288cbnz x0, 0x504290
0050428cb 0x5042a4
00504290
00504290loc_504290:
00504290str x0, [sp+56]
00504294str x1, [sp+64]
00504298ldur x29, [sp-8]
0050429cldr x30, [sp], 80
005042a0ret x30
005042a4
005042a4loc_5042a4:
005042a4b 0x5042a8
005042a8
005042a8loc_5042a8:
005042a8stp xzr, xzr, [sp+56]
005042acmov x0, xzr
005042b0mov x1, xzr
005042b4ldur x29, [sp-8]
005042b8ldr x30, [sp], 80
005042bcret x30
005042c0
005042c0loc_5042c0:
005042c0stp x0, x1, [sp+8]
005042c4stp x2, x3, [sp+24]
005042c8stp x4, x5, [sp+40]
005042ccmov x3, x30
005042d0bl runtime.morestack.abi0
005042d4ldp x0, x1, [sp+8]
005042d8ldp x2, x3, [sp+24]
005042dcldp x4, x5, [sp+40]
005042e0b 0x504200
005042e4udf 0
005042e8udf 0
005042ecudf 0
00504200

005042f0
005042f0github.com/bishopfox/sliver/implant/sliver/handlers.GetKillHandlers: ; void github.com/bishopfox/sliver/implant/sliver/handlers.GetKillHandlers(void)
005042f0str x30, [sp-32]!
005042f4stur x29, [sp-8]
005042f8sub x29, sp, 8
005042fcstr xzr, [sp+16]
00504300adrp x27, 0x51c000
00504304ldr x0, [x27+3176]
00504308str x0, [sp+16]
0050430cadd x29, sp, 24
00504310add sp, sp, 32
00504314ret x30
00504318udf 0
0050431cudf 0
005042f0

00504320
00504320github.com/bishopfox/sliver/implant/sliver/handlers.killHandler: ; void github.com/bishopfox/sliver/implant/sliver/handlers.killHandler(struct []uint8 data, github.com/bishopfox/sliver/implant/sliver/transports.Connection * p1)
00504320ldr x16, [x28+16]
00504324sub x17, sp, 80
00504328subs xzr, x17, x16
0050432cb.ls 0x5044f0
00504330str x30, [sp-208]!
00504334stur x29, [sp-8]
00504338sub x29, sp, 8
0050433cstr x0, [sp+216]
00504340str x1, [sp+224]
00504344str x2, [sp+232]
00504348str x3, [sp+240]
0050434cstp xzr, xzr, [sp+56]
00504350adrp x0, 0x16b000
00504354add x0, x0, 1472
00504358bl runtime.newobject
0050435cstr x0, [sp+128]
00504360adrp x27, 0x547000
00504364ldr w1, [x27+3056]
00504368cbz w1, 0x504370
0050436cb 0x504374
00504370
00504370loc_504370:
00504370b 0x504390
00504374
00504374loc_504374:
00504374str x0, [sp+160]
00504378mov x1, x0
0050437cadrp x0, 0x16b000
00504380add x0, x0, 1472
00504384bl runtime.wbZero
00504388ldr x0, [sp+160]
0050438cb 0x504390
00504390
00504390loc_504390:
00504390stp xzr, xzr, [x0]
00504394stp xzr, xzr, [x0+16]
00504398stp xzr, xzr, [x0+32]
0050439cstr xzr, [x0+48]
005043a0ldr x4, [sp+128]
005043a4str x4, [sp+72]
005043a8str x4, [sp+152]
005043acldr x0, [sp+216]
005043b0ldr x1, [sp+224]
005043b4ldr x2, [sp+232]
005043b8adrp x3, 0x20f000
005043bcadd x3, x3, 3328
005043c0bl google.golang.org/protobuf/proto.Unmarshal
005043c4str x0, [sp+80]
005043c8str x1, [sp+88]
005043ccstp xzr, xzr, [sp+136]
005043d0add x0, sp, 136
005043d4str x0, [sp+96]
005043d8ldrsb x27, [x0]
005043dcadrp x5, 0xf1000
005043e0add x5, x5, 2944
005043e4str x5, [x0]
005043e8adrp x27, 0x547000
005043ecldr w5, [x27+3056]
005043f0cbz w5, 0x5043f8
005043f4b 0x5043fc
005043f8
005043f8loc_5043f8:
005043f8b 0x50440c
005043fc
005043fcloc_5043fc:
005043fcldr x3, [x0+8]
00504400bl runtime.gcWriteBarrier1
00504404str x3, [x25]
00504408b 0x50440c
0050440c
0050440cloc_50440c:
0050440cadrp x3, 0x20d000
00504410add x3, x3, 784
00504414str x3, [x0+8]
00504418ldrsb x27, [x0]
0050441cb 0x504420
00504420
00504420loc_504420:
00504420str x0, [sp+104]
00504424orr x2, xzr, 1
00504428str x2, [sp+112]
0050442cstr x2, [sp+120]
00504430mov x1, x2
00504434bl log.Println
00504438ldr x3, [sp+80]
0050443ccbnz x3, 0x504444
00504440b 0x504460
00504444
00504444loc_504444:
00504444ldr x0, [sp+80]
00504448ldr x1, [sp+88]
0050444cstr x0, [sp+56]
00504450str x1, [sp+64]
00504454ldur x29, [sp-8]
00504458ldr x30, [sp], 208
0050445cret x30
00504460
00504460loc_504460:
00504460stp xzr, xzr, [sp+136]
00504464add x0, sp, 136
00504468str x0, [sp+168]
0050446cldrsb x27, [x0]
00504470adrp x3, 0xf1000
00504474add x3, x3, 2944
00504478str x3, [x0]
0050447cadrp x27, 0x547000
00504480ldr w3, [x27+3056]
00504484cbz w3, 0x50448c
00504488b 0x504490
0050448c
0050448cloc_50448c:
0050448cb 0x5044a0
00504490
00504490loc_504490:
00504490ldr x3, [x0+8]
00504494bl runtime.gcWriteBarrier1
00504498str x3, [x25]
0050449cb 0x5044a0
005044a0
005044a0loc_5044a0:
005044a0adrp x3, 0x20d000
005044a4add x3, x3, 800
005044a8str x3, [x0+8]
005044acldrsb x27, [x0]
005044b0b 0x5044b4
005044b4
005044b4loc_5044b4:
005044b4str x0, [sp+176]
005044b8orr x2, xzr, 1
005044bcstr x2, [sp+184]
005044c0str x2, [sp+192]
005044c4mov x1, x2
005044c8bl log.Println
005044ccadrp x0, 0x1d4000
005044d0add x0, x0, 2840
005044d4bl runtime.newproc
005044d8stp xzr, xzr, [sp+56]
005044dcmov x0, xzr
005044e0mov x1, xzr
005044e4ldur x29, [sp-8]
005044e8ldr x30, [sp], 208
005044ecret x30
005044f0
005044f0loc_5044f0:
005044f0stp x0, x1, [sp+8]
005044f4stp x2, x3, [sp+24]
005044f8mov x3, x30
005044fcbl runtime.morestack_noctxt.abi0
00504500ldp x0, x1, [sp+8]
00504504ldp x2, x3, [sp+24]
00504508b 0x504320
0050450cudf 0
00504320

00504510
00504510github.com/bishopfox/sliver/implant/sliver/handlers.GetPivotHandlers: ; void github.com/bishopfox/sliver/implant/sliver/handlers.GetPivotHandlers(void)
00504510str x30, [sp-32]!
00504514stur x29, [sp-8]
00504518sub x29, sp, 8
0050451cstr xzr, [sp+16]
00504520adrp x27, 0x51c000
00504524ldr x0, [x27+3184]
00504528str x0, [sp+16]
0050452cadd x29, sp, 24
00504530add sp, sp, 32
00504534ret x30
00504538udf 0
0050453cudf 0
00504510

00504540
00504540github.com/bishopfox/sliver/implant/sliver/handlers.pivotListenersHandler: ; void github.com/bishopfox/sliver/implant/sliver/handlers.pivotListenersHandler(github.com/bishopfox/sliver/protobuf/sliverpb.Envelope * envelope, github.com/bishopfox/sliver/implant/sliver/transports.Connection * connection)
00504540ldr x16, [x28+16]
00504544sub x17, sp, 112
00504548subs xzr, x17, x16
0050454cb.ls 0x504804
00504550str x30, [sp-240]!
00504554stur x29, [sp-8]
00504558sub x29, sp, 8
0050455cstr x0, [sp+248]
00504560str x1, [sp+256]
00504564bl github.com/bishopfox/sliver/implant/sliver/pivots.GetListeners
00504568str x0, [sp+112]
0050456cstr x1, [sp+120]
00504570str x2, [sp+128]
00504574adrp x0, 0x16c000
00504578add x0, x0, 2976
0050457cbl runtime.newobject
00504580str x0, [sp+224]
00504584adrp x27, 0x547000
00504588ldr w1, [x27+3056]
0050458ccbz w1, 0x504594
00504590b 0x504598
00504594
00504594loc_504594:
00504594b 0x5045b4
00504598
00504598loc_504598:
00504598str x0, [sp+192]
0050459cmov x1, x0
005045a0adrp x0, 0x16c000
005045a4add x0, x0, 2976
005045a8bl runtime.wbZero
005045acldr x0, [sp+192]
005045b0b 0x5045b4
005045b4
005045b4loc_5045b4:
005045b4stp xzr, xzr, [x0]
005045b8stp xzr, xzr, [x0+16]
005045bcstp xzr, xzr, [x0+32]
005045c0stp xzr, xzr, [x0+48]
005045c4str xzr, [x0+64]
005045c8ldr x1, [sp+224]
005045ccldrsb x27, [x1]
005045d0ldr x2, [sp+112]
005045d4ldr x3, [sp+120]
005045d8ldr x4, [sp+128]
005045dcstr x3, [x1+16]
005045e0str x4, [x1+24]
005045e4adrp x27, 0x547000
005045e8ldr w3, [x27+3056]
005045eccbz w3, 0x5045f4
005045f0b 0x5045f8
005045f4
005045f4loc_5045f4:
005045f4b 0x50460c
005045f8
005045f8loc_5045f8:
005045f8bl runtime.gcWriteBarrier2
005045fcstr x2, [x25]
00504600ldr x3, [x1+8]
00504604str x3, [x25+8]
00504608b 0x50460c
0050460c
0050460cloc_50460c:
0050460cstr x2, [x1+8]
00504610adrp x0, 0x181000
00504614add x0, x0, 3648
00504618bl runtime.newobject
0050461cstr x0, [sp+216]
00504620adrp x27, 0x547000
00504624ldr w1, [x27+3056]
00504628cbz w1, 0x504630
0050462cb 0x504634
00504630
00504630loc_504630:
00504630b 0x504650
00504634
00504634loc_504634:
00504634str x0, [sp+184]
00504638mov x1, x0
0050463cadrp x0, 0x181000
00504640add x0, x0, 3648
00504644bl runtime.wbZero
00504648ldr x0, [sp+184]
0050464cb 0x504650
00504650
00504650loc_504650:
00504650mov x20, x0
00504654adr x27, 16
00504658stp x29, x27, [sp-24]
0050465csub x29, sp, 24
00504660bl fn_87cf8
00504664sub x29, sp, 8
00504668ldr x2, [sp+224]
0050466cldrsb x27, [x2]
00504670ldr x3, [sp+216]
00504674adrp x27, 0x547000
00504678ldr w4, [x27+3056]
0050467ccbz w4, 0x504684
00504680b 0x504688
00504684
00504684loc_504684:
00504684b 0x50469c
00504688
00504688loc_504688:
00504688bl runtime.gcWriteBarrier2
0050468cstr x3, [x25]
00504690ldr x4, [x2+32]
00504694str x4, [x25+8]
00504698b 0x50469c
0050469c
0050469cloc_50469c:
0050469cstr x3, [x2+32]
005046a0ldr x2, [sp+224]
005046a4str x2, [sp+104]
005046a8stp xzr, xzr, [sp+80]
005046acstr xzr, [sp+96]
005046b0stp xzr, xzr, [sp+64]
005046b4ldr x1, [sp+104]
005046b8adrp x0, 0x20f000
005046bcadd x0, x0, 3296
005046c0bl google.golang.org/protobuf/proto.Marshal
005046c4str x0, [sp+80]
005046c8str x1, [sp+88]
005046ccstr x2, [sp+96]
005046d0str x3, [sp+64]
005046d4str x4, [sp+72]
005046d8ldr x2, [sp+80]
005046dcldr x3, [sp+88]
005046e0ldr x4, [sp+96]
005046e4str x2, [sp+152]
005046e8str x3, [sp+160]
005046ecstr x4, [sp+168]
005046f0ldr x2, [sp+64]
005046f4ldr x3, [sp+72]
005046f8str x2, [sp+136]
005046fcstr x3, [sp+144]
00504700ldr x2, [sp+152]
00504704ldr x3, [sp+160]
00504708ldr x4, [sp+168]
0050470cstr x2, [sp+32]
00504710str x3, [sp+40]
00504714str x4, [sp+48]
00504718adrp x0, 0x180000
0050471cadd x0, x0, 2848
00504720bl runtime.newobject
00504724str x0, [sp+208]
00504728adrp x27, 0x547000
0050472cldr w2, [x27+3056]
00504730cbz w2, 0x504738
00504734b 0x50473c
00504738
00504738loc_504738:
00504738b 0x504758
0050473c
0050473cloc_50473c:
0050473cstr x0, [sp+176]
00504740mov x1, x0
00504744adrp x0, 0x180000
00504748add x0, x0, 2848
0050474cbl runtime.wbZero
00504750ldr x0, [sp+176]
00504754b 0x504758
00504758
00504758loc_504758:
00504758mov x20, x0
0050475cadr x27, 16
00504760stp x29, x27, [sp-24]
00504764sub x29, sp, 24
00504768bl fn_87cfc
0050476csub x29, sp, 8
00504770str xzr, [x0+80]
00504774ldr x2, [sp+208]
00504778ldrsb x27, [x2]
0050477cldr x3, [sp+248]
00504780ldrsb x27, [x3]
00504784ldr x3, [x3+8]
00504788str x3, [x2+8]
0050478cldr x2, [sp+208]
00504790ldrsb x27, [x2]
00504794ldr x3, [sp+32]
00504798ldr x4, [sp+40]
0050479cldr x5, [sp+48]
005047a0str x4, [x2+32]
005047a4str x5, [x2+40]
005047a8adrp x27, 0x547000
005047acldr w4, [x27+3056]
005047b0cbz w4, 0x5047b8
005047b4b 0x5047bc
005047b8
005047b8loc_5047b8:
005047b8b 0x5047d0
005047bc
005047bcloc_5047bc:
005047bcbl runtime.gcWriteBarrier2
005047c0str x3, [x25]
005047c4ldr x4, [x2+24]
005047c8str x4, [x25+8]
005047ccb 0x5047d0
005047d0
005047d0loc_5047d0:
005047d0str x3, [x2+24]
005047d4ldr x2, [sp+208]
005047d8str x2, [sp+56]
005047dcldr x2, [sp+256]
005047e0ldrsb x27, [x2]
005047e4ldr x2, [x2]
005047e8str x2, [sp+200]
005047ecldr x0, [sp+200]
005047f0add x1, sp, 56
005047f4bl runtime.chansend1
005047f8ldur x29, [sp-8]
005047fcldr x30, [sp], 240
00504800ret x30
00504804
00504804loc_504804:
00504804stp x0, x1, [sp+8]
00504808mov x3, x30
0050480cbl runtime.morestack_noctxt.abi0
00504810ldp x0, x1, [sp+8]
00504814b 0x504540
00504818udf 0
0050481cudf 0
00504540