Similarity

00505ac0
00505ac0github.com/bishopfox/sliver/implant/sliver/handlers.terminateHandler: ; void github.com/bishopfox/sliver/implant/sliver/handlers.terminateHandler(struct []uint8 data, github.com/bishopfox/sliver/implant/sliver/handlers.RPCResponse resp)
00505ac0ldr x16, [x28+16]
00505ac4sub x17, sp, 256
00505ac8subs xzr, x17, x16
00505accb.ls 0x505f78
00505ad0sub x20, sp, 384
00505ad4stp x29, x30, [x20-8]
00505ad8add sp, x20, 0
00505adcsub x29, sp, 8
00505ae0str x0, [sp+392]
00505ae4str x1, [sp+400]
00505ae8str x2, [sp+408]
00505aecstr x3, [sp+416]
00505af0adrp x0, 0x178000
00505af4add x0, x0, 288
00505af8bl runtime.newobject
00505afcstr x0, [sp+320]
00505b00adrp x27, 0x546000
00505b04ldr w1, [x27+3056]
00505b08cbz w1, 0x505b10
00505b0cb 0x505b14
00505b10
00505b10loc_505b10:
00505b10b 0x505b30
00505b14
00505b14loc_505b14:
00505b14str x0, [sp+184]
00505b18mov x1, x0
00505b1cadrp x0, 0x178000
00505b20add x0, x0, 288
00505b24bl runtime.wbZero
00505b28ldr x0, [sp+184]
00505b2cb 0x505b30
00505b30
00505b30loc_505b30:
00505b30stp xzr, xzr, [x0]
00505b34stp xzr, xzr, [x0+16]
00505b38stp xzr, xzr, [x0+32]
00505b3cstr xzr, [x0+48]
00505b40ldr x4, [sp+320]
00505b44str x4, [sp+64]
00505b48str x4, [sp+120]
00505b4cldr x0, [sp+392]
00505b50ldr x1, [sp+400]
00505b54ldr x2, [sp+408]
00505b58adrp x3, 0x20f000
00505b5cadd x3, x3, 1056
00505b60bl google.golang.org/protobuf/proto.Unmarshal
00505b64str x0, [sp+88]
00505b68str x1, [sp+96]
00505b6ccbnz x0, 0x505b74
00505b70b 0x505c30
00505b74
00505b74loc_505b74:
00505b74stp xzr, xzr, [sp+104]
00505b78add x5, sp, 104
00505b7cstr x5, [sp+288]
00505b80ldr x5, [sp+88]
00505b84ldr x6, [sp+96]
00505b88str x5, [sp+272]
00505b8cstr x6, [sp+280]
00505b90str x5, [sp+264]
00505b94ldr x5, [sp+264]
00505b98cbnz x5, 0x505ba0
00505b9cb 0x505bb0
00505ba0
00505ba0loc_505ba0:
00505ba0ldr x5, [sp+264]
00505ba4ldr x5, [x5+8]
00505ba8str x5, [sp+264]
00505bacb 0x505bb4
00505bb0
00505bb0loc_505bb0:
00505bb0b 0x505bb4
00505bb4
00505bb4loc_505bb4:
00505bb4ldr x5, [sp+288]
00505bb8ldrsb x27, [x5]
00505bbcldr x6, [sp+264]
00505bc0ldr x7, [sp+280]
00505bc4str x6, [x5]
00505bc8adrp x27, 0x546000
00505bccldr w6, [x27+3056]
00505bd0cbz w6, 0x505bd8
00505bd4b 0x505bdc
00505bd8
00505bd8loc_505bd8:
00505bd8b 0x505bf0
00505bdc
00505bdcloc_505bdc:
00505bdcbl runtime.gcWriteBarrier2
00505be0str x7, [x25]
00505be4ldr x6, [x5+8]
00505be8str x6, [x25+8]
00505becb 0x505bf0
00505bf0
00505bf0loc_505bf0:
00505bf0str x7, [x5+8]
00505bf4ldr x2, [sp+288]
00505bf8ldrsb x27, [x2]
00505bfcb 0x505c00
00505c00
00505c00loc_505c00:
00505c00str x2, [sp+296]
00505c04orr x4, xzr, 1
00505c08str x4, [sp+304]
00505c0cstr x4, [sp+312]
00505c10adrp x0, 0x1b5000
00505c14add x0, x0, 981
00505c18movz x1, 26
00505c1cmov x3, x4
00505c20bl log.Printf
00505c24ldp x29, x30, [sp-8]
00505c28add sp, sp, 384
00505c2cret x30
00505c30
00505c30loc_505c30:
00505c30stp xzr, xzr, [sp+72]
00505c34ldr x1, [sp+64]
00505c38ldrsb x27, [x1]
00505c3cldrsw x1, [x1+8]
00505c40subs xzr, x1, 1
00505c44cset x1, le
00505c48strb w1, [sp+55]
00505c4cb.le 0x505c54
00505c50b 0x505c6c
00505c54
00505c54loc_505c54:
00505c54ldr x1, [sp+64]
00505c58ldrsb x27, [x1]
00505c5cldrb w1, [x1+12]
00505c60eor x1, x1, 1
00505c64strb w1, [sp+55]
00505c68b 0x505c70
00505c6c
00505c6cloc_505c6c:
00505c6cb 0x505c70
00505c70
00505c70loc_505c70:
00505c70ldrb w1, [sp+55]
00505c74tbnz w1, 0, 0x505c7c
00505c78b 0x505c94
00505c7c
00505c7cloc_505c7c:
00505c7cadrp x1, 0x1c4000
00505c80add x1, x1, 3847
00505c84str x1, [sp+72]
00505c88movz x1, 52
00505c8cstr x1, [sp+80]
00505c90b 0x505d94
00505c94
00505c94loc_505c94:
00505c94ldr x1, [sp+64]
00505c98ldrsb x27, [x1]
00505c9cldrsw x1, [x1+8]
00505ca0mov x0, x1
00505ca4str x0, [sp+56]
00505ca8bl github.com/bishopfox/sliver/implant/sliver/ps.Kill
00505cacstr x0, [sp+88]
00505cb0str x1, [sp+96]
00505cb4cbnz x0, 0x505cbc
00505cb8b 0x505d8c
00505cbc
00505cbcloc_505cbc:
00505cbcstp xzr, xzr, [sp+104]
00505cc0add x5, sp, 104
00505cc4str x5, [sp+232]
00505cc8ldr x5, [sp+88]
00505cccldr x6, [sp+96]
00505cd0str x5, [sp+216]
00505cd4str x6, [sp+224]
00505cd8str x5, [sp+208]
00505cdcldr x5, [sp+208]
00505ce0cbnz x5, 0x505ce8
00505ce4b 0x505cf8
00505ce8
00505ce8loc_505ce8:
00505ce8ldr x5, [sp+208]
00505cecldr x5, [x5+8]
00505cf0str x5, [sp+208]
00505cf4b 0x505cfc
00505cf8
00505cf8loc_505cf8:
00505cf8b 0x505cfc
00505cfc
00505cfcloc_505cfc:
00505cfcldr x5, [sp+232]
00505d00ldrsb x27, [x5]
00505d04ldr x6, [sp+208]
00505d08ldr x7, [sp+224]
00505d0cstr x6, [x5]
00505d10adrp x27, 0x546000
00505d14ldr w6, [x27+3056]
00505d18cbz w6, 0x505d20
00505d1cb 0x505d24
00505d20
00505d20loc_505d20:
00505d20b 0x505d38
00505d24
00505d24loc_505d24:
00505d24bl runtime.gcWriteBarrier2
00505d28str x7, [x25]
00505d2cldr x6, [x5+8]
00505d30str x6, [x25+8]
00505d34b 0x505d38
00505d38
00505d38loc_505d38:
00505d38str x7, [x5+8]
00505d3cldr x2, [sp+232]
00505d40ldrsb x27, [x2]
00505d44b 0x505d48
00505d48
00505d48loc_505d48:
00505d48str x2, [sp+240]
00505d4corr x4, xzr, 1
00505d50str x4, [sp+248]
00505d54str x4, [sp+256]
00505d58adrp x0, 0x1b4000
00505d5cadd x0, x0, 2529
00505d60movz x1, 25
00505d64mov x3, x4
00505d68bl log.Printf
00505d6cldr x5, [sp+88]
00505d70ldrsb x27, [x5]
00505d74ldr x5, [x5+24]
00505d78ldr x0, [sp+96]
00505d7cblr x5
00505d80str x0, [sp+72]
00505d84str x1, [sp+80]
00505d88b 0x505d90
00505d8c
00505d8cloc_505d8c:
00505d8cb 0x505d90
00505d90
00505d90loc_505d90:
00505d90b 0x505d94
00505d94
00505d94loc_505d94:
00505d94adrp x0, 0x16b000
00505d98add x0, x0, 1856
00505d9cbl runtime.newobject
00505da0str x0, [sp+200]
00505da4adrp x27, 0x546000
00505da8ldr w1, [x27+3056]
00505daccbz w1, 0x505db4
00505db0b 0x505db8
00505db4
00505db4loc_505db4:
00505db4b 0x505dd4
00505db8
00505db8loc_505db8:
00505db8str x0, [sp+176]
00505dbcmov x1, x0
00505dc0adrp x0, 0x16b000
00505dc4add x0, x0, 1856
00505dc8bl runtime.wbZero
00505dccldr x0, [sp+176]
00505dd0b 0x505dd4
00505dd4
00505dd4loc_505dd4:
00505dd4stp xzr, xzr, [x0]
00505dd8stp xzr, xzr, [x0+16]
00505ddcstp xzr, xzr, [x0+32]
00505de0str xzr, [x0+48]
00505de4ldr x1, [sp+200]
00505de8ldrsb x27, [x1]
00505decldr x2, [sp+64]
00505df0ldrsb x27, [x2]
00505df4ldrsw x2, [x2+8]
00505df8str w2, [x1+8]
00505dfcadrp x0, 0x180000
00505e00add x0, x0, 3648
00505e04bl runtime.newobject
00505e08str x0, [sp+192]
00505e0cadrp x27, 0x546000
00505e10ldr w1, [x27+3056]
00505e14cbz w1, 0x505e1c
00505e18b 0x505e20
00505e1c
00505e1cloc_505e1c:
00505e1cb 0x505e3c
00505e20
00505e20loc_505e20:
00505e20str x0, [sp+168]
00505e24mov x1, x0
00505e28adrp x0, 0x180000
00505e2cadd x0, x0, 3648
00505e30bl runtime.wbZero
00505e34ldr x0, [sp+168]
00505e38b 0x505e3c
00505e3c
00505e3cloc_505e3c:
00505e3cmov x20, x0
00505e40adr x27, 16
00505e44stp x29, x27, [sp-24]
00505e48sub x29, sp, 24
00505e4cbl fn_87cf8
00505e50sub x29, sp, 8
00505e54ldr x2, [sp+192]
00505e58ldrsb x27, [x2]
00505e5cldr x3, [sp+72]
00505e60ldr x4, [sp+80]
00505e64str x4, [x2+16]
00505e68adrp x27, 0x546000
00505e6cldr w4, [x27+3056]
00505e70cbz w4, 0x505e78
00505e74b 0x505e7c
00505e78
00505e78loc_505e78:
00505e78b 0x505e90
00505e7c
00505e7cloc_505e7c:
00505e7cbl runtime.gcWriteBarrier2
00505e80str x3, [x25]
00505e84ldr x4, [x2+8]
00505e88str x4, [x25+8]
00505e8cb 0x505e90
00505e90
00505e90loc_505e90:
00505e90str x3, [x2+8]
00505e94ldr x2, [sp+200]
00505e98ldrsb x27, [x2]
00505e9cldr x3, [sp+192]
00505ea0adrp x27, 0x546000
00505ea4ldr w4, [x27+3056]
00505ea8cbz w4, 0x505eb0
00505eacb 0x505eb4
00505eb0
00505eb0loc_505eb0:
00505eb0b 0x505ec8
00505eb4
00505eb4loc_505eb4:
00505eb4bl runtime.gcWriteBarrier2
00505eb8str x3, [x25]
00505ebcldr x4, [x2+16]
00505ec0str x4, [x25+8]
00505ec4b 0x505ec8
00505ec8
00505ec8loc_505ec8:
00505ec8str x3, [x2+16]
00505eccldr x2, [sp+200]
00505ed0str x2, [sp+368]
00505ed4stp xzr, xzr, [sp+344]
00505ed8str xzr, [sp+360]
00505edcstp xzr, xzr, [sp+328]
00505ee0ldr x1, [sp+368]
00505ee4adrp x0, 0x20f000
00505ee8add x0, x0, 1088
00505eecbl google.golang.org/protobuf/proto.Marshal
00505ef0str x0, [sp+344]
00505ef4str x1, [sp+352]
00505ef8str x2, [sp+360]
00505efcstr x3, [sp+328]
00505f00str x4, [sp+336]
00505f04ldr x2, [sp+344]
00505f08ldr x3, [sp+352]
00505f0cldr x4, [sp+360]
00505f10str x2, [sp+144]
00505f14str x3, [sp+152]
00505f18str x4, [sp+160]
00505f1cldr x2, [sp+328]
00505f20ldr x3, [sp+336]
00505f24str x2, [sp+128]
00505f28str x3, [sp+136]
00505f2cldr x2, [sp+144]
00505f30ldr x3, [sp+152]
00505f34ldr x4, [sp+160]
00505f38str x2, [sp+392]
00505f3cstr x3, [sp+400]
00505f40str x4, [sp+408]
00505f44ldr x3, [sp+128]
00505f48ldr x4, [sp+136]
00505f4cstr x3, [sp+88]
00505f50str x4, [sp+96]
00505f54ldr x0, [sp+392]
00505f58ldr x1, [sp+400]
00505f5cldr x2, [sp+408]
00505f60ldr x26, [sp+416]
00505f64ldr x5, [x26]
00505f68blr x5
00505f6cldp x29, x30, [sp-8]
00505f70add sp, sp, 384
00505f74ret x30
00505f78
00505f78loc_505f78:
00505f78stp x0, x1, [sp+8]
00505f7cstp x2, x3, [sp+24]
00505f80mov x3, x30
00505f84bl runtime.morestack_noctxt.abi0
00505f88ldp x0, x1, [sp+8]
00505f8cldp x2, x3, [sp+24]
00505f90b 0x505ac0
00505f94udf 0
00505f98udf 0
00505f9cudf 0
00505ac0

00505fa0
00505fa0github.com/bishopfox/sliver/implant/sliver/handlers.sideloadHandler: ; void github.com/bishopfox/sliver/implant/sliver/handlers.sideloadHandler(struct []uint8 data, github.com/bishopfox/sliver/implant/sliver/handlers.RPCResponse resp)
00505fa0ldr x16, [x28+16]
00505fa4sub x17, sp, 320
00505fa8subs xzr, x17, x16
00505facb.ls 0x5063a0
00505fb0sub x20, sp, 448
00505fb4stp x29, x30, [x20-8]
00505fb8add sp, x20, 0
00505fbcsub x29, sp, 8
00505fc0str x0, [sp+456]
00505fc4str x1, [sp+464]
00505fc8str x2, [sp+472]
00505fccstr x3, [sp+480]
00505fd0adrp x0, 0x194000
00505fd4add x0, x0, 2336
00505fd8bl runtime.newobject
00505fdcstr x0, [sp+280]
00505fe0adrp x27, 0x546000
00505fe4ldr w1, [x27+3056]
00505fe8cbz w1, 0x505ff0
00505fecb 0x505ff4
00505ff0
00505ff0loc_505ff0:
00505ff0b 0x506010
00505ff4
00505ff4loc_505ff4:
00505ff4str x0, [sp+256]
00505ff8mov x1, x0
00505ffcadrp x0, 0x194000
00506000add x0, x0, 2336
00506004bl runtime.wbZero
00506008ldr x0, [sp+256]
0050600cb 0x506010
00506010
00506010loc_506010:
00506010mov x20, x0
00506014adr x27, 16
00506018stp x29, x27, [sp-24]
0050601csub x29, sp, 24
00506020bl fn_87ce8
00506024sub x29, sp, 8
00506028ldr x4, [sp+280]
0050602cstr x4, [sp+128]
00506030str x4, [sp+416]
00506034ldr x0, [sp+456]
00506038ldr x1, [sp+464]
0050603cldr x2, [sp+472]
00506040adrp x3, 0x20e000
00506044add x3, x3, 32
00506048bl google.golang.org/protobuf/proto.Unmarshal
0050604cstr x0, [sp+168]
00506050str x1, [sp+176]
00506054cbnz x0, 0x50605c
00506058b 0x506068
0050605c
0050605cloc_50605c:
0050605cldp x29, x30, [sp-8]
00506060add sp, sp, 448
00506064ret x30
00506068
00506068loc_506068:
00506068ldr x0, [sp+128]
0050606cbl github.com/bishopfox/sliver/protobuf/sliverpb.(*SideloadReq).GetProcessName
00506070str x0, [sp+400]
00506074str x1, [sp+408]
00506078ldr x0, [sp+128]
0050607cbl github.com/bishopfox/sliver/protobuf/sliverpb.(*SideloadReq).GetProcessArgs
00506080str x0, [sp+376]
00506084str x1, [sp+384]
00506088str x2, [sp+392]
0050608cldr x0, [sp+128]
00506090bl github.com/bishopfox/sliver/protobuf/sliverpb.(*SideloadReq).GetPPid
00506094str w0, [sp+116]
00506098ldr x0, [sp+128]
0050609cbl github.com/bishopfox/sliver/protobuf/sliverpb.(*SideloadReq).GetData
005060a0str x0, [sp+352]
005060a4str x1, [sp+360]
005060a8str x2, [sp+368]
005060acldr x0, [sp+128]
005060b0bl github.com/bishopfox/sliver/protobuf/sliverpb.(*SideloadReq).GetArgs
005060b4str x0, [sp+328]
005060b8str x1, [sp+336]
005060bcstr x2, [sp+344]
005060c0stp xzr, xzr, [sp+312]
005060c4stp xzr, xzr, [sp+296]
005060c8ldr x1, [sp+128]
005060ccldrsb x27, [x1]
005060d0ldrb w12, [x1+88]
005060d4strb w12, [sp+115]
005060d8ldr w5, [sp+116]
005060dcldr x2, [sp+376]
005060e0ldr x3, [sp+384]
005060e4ldr x4, [sp+392]
005060e8ldr x6, [sp+352]
005060ecldr x7, [sp+360]
005060f0ldr x8, [sp+368]
005060f4ldr x9, [sp+328]
005060f8ldr x10, [sp+336]
005060fcldr x11, [sp+344]
00506100ldr x0, [sp+400]
00506104ldr x1, [sp+408]
00506108bl github.com/bishopfox/sliver/implant/sliver/taskrunner.Sideload
0050610cstr x0, [sp+312]
00506110str x1, [sp+320]
00506114str x2, [sp+296]
00506118str x3, [sp+304]
0050611cldr x1, [sp+312]
00506120ldr x2, [sp+320]
00506124str x1, [sp+224]
00506128str x2, [sp+232]
0050612cldr x1, [sp+296]
00506130ldr x2, [sp+304]
00506134str x1, [sp+208]
00506138str x2, [sp+216]
0050613cldr x1, [sp+224]
00506140ldr x2, [sp+232]
00506144str x1, [sp+136]
00506148str x2, [sp+144]
0050614cldr x1, [sp+208]
00506150ldr x2, [sp+216]
00506154str x1, [sp+168]
00506158str x2, [sp+176]
0050615cstp xzr, xzr, [sp+152]
00506160ldr x1, [sp+168]
00506164cbnz x1, 0x50616c
00506168b 0x50618c
0050616c
0050616cloc_50616c:
0050616cldr x1, [sp+168]
00506170ldrsb x27, [x1]
00506174ldr x1, [x1+24]
00506178ldr x0, [sp+176]
0050617cblr x1
00506180str x0, [sp+152]
00506184str x1, [sp+160]
00506188b 0x506190
0050618c
0050618cloc_50618c:
0050618cb 0x506190
00506190
00506190loc_506190:
00506190adrp x0, 0x16a000
00506194add x0, x0, 960
00506198bl runtime.newobject
0050619cstr x0, [sp+272]
005061a0adrp x27, 0x545000
005061a4ldr w1, [x27+3056]
005061a8cbz w1, 0x5061b0
005061acb 0x5061b4
005061b0
005061b0loc_5061b0:
005061b0b 0x5061d0
005061b4
005061b4loc_5061b4:
005061b4str x0, [sp+248]
005061b8mov x1, x0
005061bcadrp x0, 0x16a000
005061c0add x0, x0, 960
005061c4bl runtime.wbZero
005061c8ldr x0, [sp+248]
005061ccb 0x5061d0
005061d0
005061d0loc_5061d0:
005061d0stp xzr, xzr, [x0]
005061d4stp xzr, xzr, [x0+16]
005061d8stp xzr, xzr, [x0+32]
005061dcstp xzr, xzr, [x0+48]
005061e0ldr x1, [sp+272]
005061e4ldrsb x27, [x1]
005061e8ldr x2, [sp+136]
005061ecldr x3, [sp+144]
005061f0str x3, [x1+16]
005061f4adrp x27, 0x545000
005061f8ldr w3, [x27+3056]
005061fccbz w3, 0x506204
00506200b 0x506208
00506204
00506204loc_506204:
00506204b 0x50621c
00506208
00506208loc_506208:
00506208bl runtime.gcWriteBarrier2
0050620cstr x2, [x25]
00506210ldr x3, [x1+8]
00506214str x3, [x25+8]
00506218b 0x50621c
0050621c
0050621cloc_50621c:
0050621cstr x2, [x1+8]
00506220adrp x0, 0x17f000
00506224add x0, x0, 3648
00506228bl runtime.newobject
0050622cstr x0, [sp+264]
00506230adrp x27, 0x545000
00506234ldr w1, [x27+3056]
00506238cbz w1, 0x506240
0050623cb 0x506244
00506240
00506240loc_506240:
00506240b 0x506260
00506244
00506244loc_506244:
00506244str x0, [sp+240]
00506248mov x1, x0
0050624cadrp x0, 0x17f000
00506250add x0, x0, 3648
00506254bl runtime.wbZero
00506258ldr x0, [sp+240]
0050625cb 0x506260
00506260
00506260loc_506260:
00506260mov x20, x0
00506264adr x27, 16
00506268stp x29, x27, [sp-24]
0050626csub x29, sp, 24
00506270bl fn_87cf8
00506274sub x29, sp, 8
00506278ldr x2, [sp+264]
0050627cldrsb x27, [x2]
00506280ldr x3, [sp+152]
00506284ldr x4, [sp+160]
00506288str x4, [x2+16]
0050628cadrp x27, 0x545000
00506290ldr w4, [x27+3056]
00506294cbz w4, 0x50629c
00506298b 0x5062a0
0050629c
0050629cloc_50629c:
0050629cb 0x5062b4
005062a0
005062a0loc_5062a0:
005062a0bl runtime.gcWriteBarrier2
005062a4str x3, [x25]
005062a8ldr x4, [x2+8]
005062acstr x4, [x25+8]
005062b0b 0x5062b4
005062b4
005062b4loc_5062b4:
005062b4str x3, [x2+8]
005062b8ldr x2, [sp+272]
005062bcldrsb x27, [x2]
005062c0ldr x3, [sp+264]
005062c4adrp x27, 0x545000
005062c8ldr w4, [x27+3056]
005062cccbz w4, 0x5062d4
005062d0b 0x5062d8
005062d4
005062d4loc_5062d4:
005062d4b 0x5062ec
005062d8
005062d8loc_5062d8:
005062d8bl runtime.gcWriteBarrier2
005062dcstr x3, [x25]
005062e0ldr x4, [x2+24]
005062e4str x4, [x25+8]
005062e8b 0x5062ec
005062ec
005062ecloc_5062ec:
005062ecstr x3, [x2+24]
005062f0ldr x2, [sp+272]
005062f4str x2, [sp+120]
005062f8str x2, [sp+288]
005062fcstp xzr, xzr, [sp+352]
00506300str xzr, [sp+368]
00506304stp xzr, xzr, [sp+296]
00506308ldr x1, [sp+288]
0050630cadrp x0, 0x20e000
00506310add x0, x0, 64
00506314bl google.golang.org/protobuf/proto.Marshal
00506318str x0, [sp+352]
0050631cstr x1, [sp+360]
00506320str x2, [sp+368]
00506324str x3, [sp+296]
00506328str x4, [sp+304]
0050632cldr x2, [sp+352]
00506330ldr x3, [sp+360]
00506334ldr x4, [sp+368]
00506338str x2, [sp+184]
0050633cstr x3, [sp+192]
00506340str x4, [sp+200]
00506344ldr x2, [sp+296]
00506348ldr x3, [sp+304]
0050634cstr x2, [sp+424]
00506350str x3, [sp+432]
00506354ldr x2, [sp+184]
00506358ldr x3, [sp+192]
0050635cldr x4, [sp+200]
00506360str x2, [sp+456]
00506364str x3, [sp+464]
00506368str x4, [sp+472]
0050636cldr x3, [sp+424]
00506370ldr x4, [sp+432]
00506374str x3, [sp+168]
00506378str x4, [sp+176]
0050637cldr x0, [sp+456]
00506380ldr x1, [sp+464]
00506384ldr x2, [sp+472]
00506388ldr x26, [sp+480]
0050638cldr x5, [x26]
00506390blr x5
00506394ldp x29, x30, [sp-8]
00506398add sp, sp, 448
0050639cret x30
005063a0
005063a0loc_5063a0:
005063a0stp x0, x1, [sp+8]
005063a4stp x2, x3, [sp+24]
005063a8mov x3, x30
005063acbl runtime.morestack_noctxt.abi0
005063b0ldp x0, x1, [sp+8]
005063b4ldp x2, x3, [sp+24]
005063b8b 0x505fa0
005063bcudf 0
00505fa0

005063c0
005063c0github.com/bishopfox/sliver/implant/sliver/handlers.netstatHandler: ; void github.com/bishopfox/sliver/implant/sliver/handlers.netstatHandler(struct []uint8 data, github.com/bishopfox/sliver/implant/sliver/handlers.RPCResponse resp)
005063c0ldr x16, [x28+16]
005063c4sub x17, sp, 1056
005063c8subs xzr, x17, x16
005063ccb.ls 0x50706c
005063d0sub x20, sp, 1184
005063d4stp x29, x30, [x20-8]
005063d8add sp, x20, 0
005063dcsub x29, sp, 8
005063e0str x0, [sp+1192]
005063e4str x1, [sp+1200]
005063e8str x2, [sp+1208]
005063ecstr x3, [sp+1216]
005063f0adrp x0, 0x187000
005063f4add x0, x0, 3072
005063f8bl runtime.newobject
005063fcstr x0, [sp+888]
00506400adrp x27, 0x545000
00506404ldr w1, [x27+3056]
00506408cbz w1, 0x506410
0050640cb 0x506414
00506410
00506410loc_506410:
00506410b 0x506430
00506414
00506414loc_506414:
00506414str x0, [sp+400]
00506418mov x1, x0
0050641cadrp x0, 0x187000
00506420add x0, x0, 3072
00506424bl runtime.wbZero
00506428ldr x0, [sp+400]
0050642cb 0x506430
00506430
00506430loc_506430:
00506430stp xzr, xzr, [x0]
00506434stp xzr, xzr, [x0+16]
00506438stp xzr, xzr, [x0+32]
0050643cstr xzr, [x0+48]
00506440ldr x4, [sp+888]
00506444str x4, [sp+192]
00506448str x4, [sp+1008]
0050644cldr x0, [sp+1192]
00506450ldr x1, [sp+1200]
00506454ldr x2, [sp+1208]
00506458adrp x3, 0x20e000
0050645cadd x3, x3, 96
00506460bl google.golang.org/protobuf/proto.Unmarshal
00506464str x0, [sp+288]
00506468str x1, [sp+296]
0050646ccbnz x0, 0x506474
00506470b 0x506534
00506474
00506474loc_506474:
00506474add x27, sp, 992
00506478stp xzr, xzr, [x27]
0050647cadd x5, sp, 992
00506480str x5, [sp+856]
00506484ldr x5, [sp+288]
00506488ldr x6, [sp+296]
0050648cstr x5, [sp+840]
00506490str x6, [sp+848]
00506494str x5, [sp+832]
00506498ldr x5, [sp+832]
0050649ccbnz x5, 0x5064a4
005064a0b 0x5064b4
005064a4
005064a4loc_5064a4:
005064a4ldr x5, [sp+832]
005064a8ldr x5, [x5+8]
005064acstr x5, [sp+832]
005064b0b 0x5064b8
005064b4
005064b4loc_5064b4:
005064b4b 0x5064b8
005064b8
005064b8loc_5064b8:
005064b8ldr x5, [sp+856]
005064bcldrsb x27, [x5]
005064c0ldr x6, [sp+848]
005064c4ldr x7, [sp+832]
005064c8str x7, [x5]
005064ccadrp x27, 0x545000
005064d0ldr w7, [x27+3056]
005064d4cbz w7, 0x5064dc
005064d8b 0x5064e0
005064dc
005064dcloc_5064dc:
005064dcb 0x5064f4
005064e0
005064e0loc_5064e0:
005064e0bl runtime.gcWriteBarrier2
005064e4str x6, [x25]
005064e8ldr x7, [x5+8]
005064ecstr x7, [x25+8]
005064f0b 0x5064f4
005064f4
005064f4loc_5064f4:
005064f4str x6, [x5+8]
005064f8ldr x2, [sp+856]
005064fcldrsb x27, [x2]
00506500b 0x506504
00506504
00506504loc_506504:
00506504str x2, [sp+864]
00506508orr x4, xzr, 1
0050650cstr x4, [sp+872]
00506510str x4, [sp+880]
00506514adrp x0, 0x1b4000
00506518add x0, x0, 981
0050651cmovz x1, 26
00506520mov x3, x4
00506524bl log.Printf
00506528ldp x29, x30, [sp-8]
0050652cadd sp, sp, 1184
00506530ret x30
00506534
00506534loc_506534:
00506534adrp x0, 0x16d000
00506538add x0, x0, 2336
0050653cbl runtime.newobject
00506540str x0, [sp+824]
00506544adrp x27, 0x545000
00506548ldr w1, [x27+3056]
0050654ccbz w1, 0x506554
00506550b 0x506558
00506554
00506554loc_506554:
00506554b 0x506574
00506558
00506558loc_506558:
00506558str x0, [sp+392]
0050655cmov x1, x0
00506560adrp x0, 0x16d000
00506564add x0, x0, 2336
00506568bl runtime.wbZero
0050656cldr x0, [sp+392]
00506570b 0x506574
00506574
00506574loc_506574:
00506574stp xzr, xzr, [x0]
00506578stp xzr, xzr, [x0+16]
0050657cstp xzr, xzr, [x0+32]
00506580stp xzr, xzr, [x0+48]
00506584str xzr, [x0+64]
00506588ldr x2, [sp+824]
0050658cstr x2, [sp+184]
00506590adrp x2, 0x545000
00506594add x2, x2, 1504
00506598str x2, [sp+304]
0050659cstp xzr, xzr, [sp+312]
005065a0ldr x2, [sp+192]
005065a4ldrsb x27, [x2]
005065a8ldrb w2, [x2+9]
005065actbnz w2, 0, 0x5065b4
005065b0b 0x506a68
005065b4
005065b4loc_5065b4:
005065b4ldr x2, [sp+192]
005065b8ldrsb x27, [x2]
005065bcldrb w2, [x2+10]
005065c0tbnz w2, 0, 0x5065c8
005065c4b 0x506808
005065c8
005065c8loc_5065c8:
005065c8str xzr, [sp+968]
005065ccadd x27, sp, 976
005065d0stp xzr, xzr, [x27]
005065d4add x27, sp, 952
005065d8stp xzr, xzr, [x27]
005065dcadrp x0, 0x1d2000
005065e0add x0, x0, 3144
005065e4bl github.com/bishopfox/sliver/implant/sliver/netstat.UDPSocks
005065e8str x0, [sp+968]
005065ecstr x1, [sp+976]
005065f0str x2, [sp+984]
005065f4str x3, [sp+952]
005065f8str x4, [sp+960]
005065fcldr x1, [sp+968]
00506600ldr x2, [sp+976]
00506604ldr x3, [sp+984]
00506608str x1, [sp+368]
0050660cstr x2, [sp+376]
00506610str x3, [sp+384]
00506614ldr x1, [sp+952]
00506618ldr x2, [sp+960]
0050661cstr x1, [sp+352]
00506620str x2, [sp+360]
00506624ldr x1, [sp+368]
00506628ldr x2, [sp+376]
0050662cldr x3, [sp+384]
00506630str x1, [sp+160]
00506634str x2, [sp+168]
00506638str x3, [sp+176]
0050663cldr x1, [sp+360]
00506640ldr x2, [sp+352]
00506644str x2, [sp+272]
00506648str x1, [sp+280]
0050664ccbnz x2, 0x506654
00506650b 0x506714
00506654
00506654loc_506654:
00506654add x27, sp, 992
00506658stp xzr, xzr, [x27]
0050665cadd x5, sp, 992
00506660str x5, [sp+792]
00506664ldr x5, [sp+272]
00506668ldr x6, [sp+280]
0050666cstr x5, [sp+776]
00506670str x6, [sp+784]
00506674str x5, [sp+768]
00506678ldr x5, [sp+768]
0050667ccbnz x5, 0x506684
00506680b 0x506694
00506684
00506684loc_506684:
00506684ldr x5, [sp+768]
00506688ldr x5, [x5+8]
0050668cstr x5, [sp+768]
00506690b 0x506698
00506694
00506694loc_506694:
00506694b 0x506698
00506698
00506698loc_506698:
00506698ldr x5, [sp+792]
0050669cldrsb x27, [x5]
005066a0ldr x6, [sp+784]
005066a4ldr x7, [sp+768]
005066a8str x7, [x5]
005066acadrp x27, 0x545000
005066b0ldr w7, [x27+3056]
005066b4cbz w7, 0x5066bc
005066b8b 0x5066c0
005066bc
005066bcloc_5066bc:
005066bcb 0x5066d4
005066c0
005066c0loc_5066c0:
005066c0bl runtime.gcWriteBarrier2
005066c4str x6, [x25]
005066c8ldr x7, [x5+8]
005066ccstr x7, [x25+8]
005066d0b 0x5066d4
005066d4
005066d4loc_5066d4:
005066d4str x6, [x5+8]
005066d8ldr x2, [sp+792]
005066dcldrsb x27, [x2]
005066e0b 0x5066e4
005066e4
005066e4loc_5066e4:
005066e4str x2, [sp+800]
005066e8orr x4, xzr, 1
005066ecstr x4, [sp+808]
005066f0str x4, [sp+816]
005066f4adrp x0, 0x1af000
005066f8add x0, x0, 2543
005066fcmovz x1, 18
00506700mov x3, x4
00506704bl log.Printf
00506708ldp x29, x30, [sp-8]
0050670cadd sp, sp, 1184
00506710ret x30
00506714
00506714loc_506714:
00506714ldr x2, [sp+160]
00506718ldr x3, [sp+168]
0050671cldr x4, [sp+176]
00506720adrp x0, 0x1aa000
00506724add x0, x0, 456
00506728orr x1, xzr, 3
0050672cbl github.com/bishopfox/sliver/implant/sliver/handlers.buildEntries
00506730str x0, [sp+928]
00506734str x1, [sp+936]
00506738str x2, [sp+944]
0050673cldr x2, [sp+320]
00506740ldr x5, [sp+312]
00506744ldr x0, [sp+304]
00506748str x0, [sp+744]
0050674cstr x5, [sp+752]
00506750str x2, [sp+760]
00506754ldr x6, [sp+936]
00506758add x1, x5, x6
0050675cstr x1, [sp+80]
00506760subs xzr, x2, x1
00506764b.hs 0x50676c
00506768b 0x506774
0050676c
0050676cloc_50676c:
0050676cstr x1, [sp+752]
00506770b 0x506794
00506774
00506774loc_506774:
00506774ldr x3, [sp+936]
00506778adrp x4, 0x17b000
0050677cadd x4, x4, 288
00506780bl runtime.growslice
00506784str x0, [sp+744]
00506788str x1, [sp+752]
0050678cstr x2, [sp+760]
00506790b 0x506794
00506794
00506794loc_506794:
00506794ldr x5, [sp+80]
00506798ldr x6, [sp+744]
0050679cldr x7, [sp+752]
005067a0ldr x8, [sp+760]
005067a4ldr x9, [sp+936]
005067a8sub x10, x5, x9
005067acadd x8, x8, x9
005067b0sub x8, x8, x5
005067b4add x7, x7, x9
005067b8sub x2, x7, x5
005067bcsub x5, xzr, x8
005067c0ubfm x7, x10, 61, 60
005067c4and x5, x7, x5, asr #63
005067c8add x1, x6, x5
005067ccstr x1, [sp+720]
005067d0str x2, [sp+728]
005067d4str x8, [sp+736]
005067d8ldr x4, [sp+936]
005067dcldr x3, [sp+928]
005067e0adrp x0, 0x17b000
005067e4add x0, x0, 288
005067e8bl runtime.typedslicecopy
005067ecldr x5, [sp+744]
005067f0ldr x6, [sp+752]
005067f4ldr x7, [sp+760]
005067f8str x5, [sp+304]
005067fcstr x6, [sp+312]
00506800str x7, [sp+320]
00506804b 0x50680c
00506808
00506808loc_506808:
00506808b 0x50680c
0050680c
0050680cloc_50680c:
0050680cldr x2, [sp+192]
00506810ldrsb x27, [x2]
00506814ldrb w2, [x2+11]
00506818tbnz w2, 0, 0x506820
0050681cb 0x506a60
00506820
00506820loc_506820:
00506820str xzr, [sp+968]
00506824add x27, sp, 976
00506828stp xzr, xzr, [x27]
0050682cadd x27, sp, 952
00506830stp xzr, xzr, [x27]
00506834adrp x0, 0x1d2000
00506838add x0, x0, 3144
0050683cbl github.com/bishopfox/sliver/implant/sliver/netstat.UDP6Socks
00506840str x0, [sp+968]
00506844str x1, [sp+976]
00506848str x2, [sp+984]
0050684cstr x3, [sp+952]
00506850str x4, [sp+960]
00506854ldr x1, [sp+968]
00506858ldr x2, [sp+976]
0050685cldr x3, [sp+984]
00506860str x1, [sp+1152]
00506864str x2, [sp+1160]
00506868str x3, [sp+1168]
0050686cldr x1, [sp+952]
00506870ldr x2, [sp+960]
00506874str x1, [sp+1136]
00506878str x2, [sp+1144]
0050687cldr x1, [sp+1152]
00506880ldr x2, [sp+1160]
00506884ldr x3, [sp+1168]
00506888str x1, [sp+136]
0050688cstr x2, [sp+144]
00506890str x3, [sp+152]
00506894ldr x1, [sp+1144]
00506898ldr x2, [sp+1136]
0050689cstr x2, [sp+256]
005068a0str x1, [sp+264]
005068a4cbnz x2, 0x5068ac
005068a8b 0x50696c
005068ac
005068acloc_5068ac:
005068acadd x27, sp, 992
005068b0stp xzr, xzr, [x27]
005068b4add x5, sp, 992
005068b8str x5, [sp+688]
005068bcldr x5, [sp+256]
005068c0ldr x6, [sp+264]
005068c4str x5, [sp+672]
005068c8str x6, [sp+680]
005068ccstr x5, [sp+664]
005068d0ldr x5, [sp+664]
005068d4cbnz x5, 0x5068dc
005068d8b 0x5068ec
005068dc
005068dcloc_5068dc:
005068dcldr x5, [sp+664]
005068e0ldr x5, [x5+8]
005068e4str x5, [sp+664]
005068e8b 0x5068f0
005068ec
005068ecloc_5068ec:
005068ecb 0x5068f0
005068f0
005068f0loc_5068f0:
005068f0ldr x5, [sp+688]
005068f4ldrsb x27, [x5]
005068f8ldr x6, [sp+680]
005068fcldr x7, [sp+664]
00506900str x7, [x5]
00506904adrp x27, 0x545000
00506908ldr w7, [x27+3056]
0050690ccbz w7, 0x506914
00506910b 0x506918
00506914
00506914loc_506914:
00506914b 0x50692c
00506918
00506918loc_506918:
00506918bl runtime.gcWriteBarrier2
0050691cstr x6, [x25]
00506920ldr x7, [x5+8]
00506924str x7, [x25+8]
00506928b 0x50692c
0050692c
0050692cloc_50692c:
0050692cstr x6, [x5+8]
00506930ldr x2, [sp+688]
00506934ldrsb x27, [x2]
00506938b 0x50693c
0050693c
0050693cloc_50693c:
0050693cstr x2, [sp+696]
00506940orr x4, xzr, 1
00506944str x4, [sp+704]
00506948str x4, [sp+712]
0050694cadrp x0, 0x1af000
00506950add x0, x0, 2543
00506954movz x1, 18
00506958mov x3, x4
0050695cbl log.Printf
00506960ldp x29, x30, [sp-8]
00506964add sp, sp, 1184
00506968ret x30
0050696c
0050696cloc_50696c:
0050696cldr x2, [sp+136]
00506970ldr x3, [sp+144]
00506974ldr x4, [sp+152]
00506978adrp x0, 0x1aa000
0050697cadd x0, x0, 958
00506980orr x1, xzr, 4
00506984bl github.com/bishopfox/sliver/implant/sliver/handlers.buildEntries
00506988str x0, [sp+928]
0050698cstr x1, [sp+936]
00506990str x2, [sp+944]
00506994ldr x2, [sp+320]
00506998ldr x5, [sp+312]
0050699cldr x0, [sp+304]
005069a0str x0, [sp+640]
005069a4str x5, [sp+648]
005069a8str x2, [sp+656]
005069acldr x6, [sp+936]
005069b0add x1, x5, x6
005069b4str x1, [sp+72]
005069b8subs xzr, x2, x1
005069bcb.hs 0x5069c4
005069c0b 0x5069cc
005069c4
005069c4loc_5069c4:
005069c4str x1, [sp+648]
005069c8b 0x5069ec
005069cc
005069ccloc_5069cc:
005069ccldr x3, [sp+936]
005069d0adrp x4, 0x17b000
005069d4add x4, x4, 288
005069d8bl runtime.growslice
005069dcstr x0, [sp+640]
005069e0str x1, [sp+648]
005069e4str x2, [sp+656]
005069e8b 0x5069ec
005069ec
005069ecloc_5069ec:
005069ecldr x5, [sp+72]
005069f0ldr x6, [sp+640]
005069f4ldr x7, [sp+648]
005069f8ldr x8, [sp+656]
005069fcldr x9, [sp+936]
00506a00sub x10, x5, x9
00506a04add x7, x7, x9
00506a08sub x2, x7, x5
00506a0cadd x7, x8, x9
00506a10sub x5, x7, x5
00506a14sub x7, xzr, x5
00506a18ubfm x8, x10, 61, 60
00506a1cand x7, x8, x7, asr #63
00506a20add x1, x6, x7
00506a24str x1, [sp+616]
00506a28str x2, [sp+624]
00506a2cstr x5, [sp+632]
00506a30ldr x4, [sp+936]
00506a34ldr x3, [sp+928]
00506a38adrp x0, 0x17b000
00506a3cadd x0, x0, 288
00506a40bl runtime.typedslicecopy
00506a44ldr x5, [sp+640]
00506a48ldr x6, [sp+648]
00506a4cldr x7, [sp+656]
00506a50str x5, [sp+304]
00506a54str x6, [sp+312]
00506a58str x7, [sp+320]
00506a5cb 0x506a64
00506a60
00506a60loc_506a60:
00506a60b 0x506a64
00506a64
00506a64loc_506a64:
00506a64b 0x506a6c
00506a68
00506a68loc_506a68:
00506a68b 0x506a6c
00506a6c
00506a6cloc_506a6c:
00506a6cldr x2, [sp+192]
00506a70ldrsb x27, [x2]
00506a74ldrb w2, [x2+8]
00506a78tbnz w2, 0, 0x506a80
00506a7cb 0x50705c
00506a80
00506a80loc_506a80:
00506a80str xzr, [sp+200]
00506a84ldr x2, [sp+192]
00506a88ldrsb x27, [x2]
00506a8cldrb w2, [x2+12]
00506a90tbnz w2, 0, 0x506a98
00506a94b 0x506aac
00506a98
00506a98loc_506a98:
00506a98b 0x506a9c
00506a9c
00506a9cloc_506a9c:
00506a9cadrp x2, 0x1d2000
00506aa0add x2, x2, 2912
00506aa4str x2, [sp+200]
00506aa8b 0x506ac0
00506aac
00506aacloc_506aac:
00506aacb 0x506ab0
00506ab0
00506ab0loc_506ab0:
00506ab0adrp x2, 0x1d2000
00506ab4add x2, x2, 2920
00506ab8str x2, [sp+200]
00506abcb 0x506ac0
00506ac0
00506ac0loc_506ac0:
00506ac0ldr x2, [sp+192]
00506ac4ldrsb x27, [x2]
00506ac8ldrb w2, [x2+10]
00506acctbnz w2, 0, 0x506ad4
00506ad0b 0x506d10
00506ad4
00506ad4loc_506ad4:
00506ad4str xzr, [sp+968]
00506ad8add x27, sp, 976
00506adcstp xzr, xzr, [x27]
00506ae0add x27, sp, 952
00506ae4stp xzr, xzr, [x27]
00506ae8ldr x0, [sp+200]
00506aecbl github.com/bishopfox/sliver/implant/sliver/netstat.TCPSocks
00506af0str x0, [sp+968]
00506af4str x1, [sp+976]
00506af8str x2, [sp+984]
00506afcstr x3, [sp+952]
00506b00str x4, [sp+960]
00506b04ldr x1, [sp+968]
00506b08ldr x2, [sp+976]
00506b0cldr x3, [sp+984]
00506b10str x1, [sp+1112]
00506b14str x2, [sp+1120]
00506b18str x3, [sp+1128]
00506b1cldr x1, [sp+952]
00506b20ldr x2, [sp+960]
00506b24str x1, [sp+1096]
00506b28str x2, [sp+1104]
00506b2cldr x1, [sp+1112]
00506b30ldr x2, [sp+1120]
00506b34ldr x3, [sp+1128]
00506b38str x1, [sp+112]
00506b3cstr x2, [sp+120]
00506b40str x3, [sp+128]
00506b44ldr x1, [sp+1104]
00506b48ldr x2, [sp+1096]
00506b4cstr x2, [sp+240]
00506b50str x1, [sp+248]
00506b54cbnz x2, 0x506b5c
00506b58b 0x506c1c
00506b5c
00506b5cloc_506b5c:
00506b5cadd x27, sp, 992
00506b60stp xzr, xzr, [x27]
00506b64add x5, sp, 992
00506b68str x5, [sp+584]
00506b6cldr x5, [sp+240]
00506b70ldr x6, [sp+248]
00506b74str x5, [sp+568]
00506b78str x6, [sp+576]
00506b7cstr x5, [sp+560]
00506b80ldr x5, [sp+560]
00506b84cbnz x5, 0x506b8c
00506b88b 0x506b9c
00506b8c
00506b8cloc_506b8c:
00506b8cldr x5, [sp+560]
00506b90ldr x5, [x5+8]
00506b94str x5, [sp+560]
00506b98b 0x506ba0
00506b9c
00506b9cloc_506b9c:
00506b9cb 0x506ba0
00506ba0
00506ba0loc_506ba0:
00506ba0ldr x5, [sp+584]
00506ba4ldrsb x27, [x5]
00506ba8ldr x6, [sp+576]
00506bacldr x7, [sp+560]
00506bb0str x7, [x5]
00506bb4adrp x27, 0x545000
00506bb8ldr w7, [x27+3056]
00506bbccbz w7, 0x506bc4
00506bc0b 0x506bc8
00506bc4
00506bc4loc_506bc4:
00506bc4b 0x506bdc
00506bc8
00506bc8loc_506bc8:
00506bc8bl runtime.gcWriteBarrier2
00506bccstr x6, [x25]
00506bd0ldr x7, [x5+8]
00506bd4str x7, [x25+8]
00506bd8b 0x506bdc
00506bdc
00506bdcloc_506bdc:
00506bdcstr x6, [x5+8]
00506be0ldr x2, [sp+584]
00506be4ldrsb x27, [x2]
00506be8b 0x506bec
00506bec
00506becloc_506bec:
00506becstr x2, [sp+592]
00506bf0orr x4, xzr, 1
00506bf4str x4, [sp+600]
00506bf8str x4, [sp+608]
00506bfcadrp x0, 0x1af000
00506c00add x0, x0, 2543
00506c04movz x1, 18
00506c08mov x3, x4
00506c0cbl log.Printf
00506c10ldp x29, x30, [sp-8]
00506c14add sp, sp, 1184
00506c18ret x30
00506c1c
00506c1cloc_506c1c:
00506c1cldr x2, [sp+112]
00506c20ldr x3, [sp+120]
00506c24ldr x4, [sp+128]
00506c28adrp x0, 0x1aa000
00506c2cadd x0, x0, 459
00506c30orr x1, xzr, 3
00506c34bl github.com/bishopfox/sliver/implant/sliver/handlers.buildEntries
00506c38str x0, [sp+928]
00506c3cstr x1, [sp+936]
00506c40str x2, [sp+944]
00506c44ldr x2, [sp+320]
00506c48ldr x5, [sp+312]
00506c4cldr x0, [sp+304]
00506c50str x0, [sp+536]
00506c54str x5, [sp+544]
00506c58str x2, [sp+552]
00506c5cldr x6, [sp+936]
00506c60add x1, x5, x6
00506c64str x1, [sp+64]
00506c68subs xzr, x2, x1
00506c6cb.hs 0x506c74
00506c70b 0x506c7c
00506c74
00506c74loc_506c74:
00506c74str x1, [sp+544]
00506c78b 0x506c9c
00506c7c
00506c7cloc_506c7c:
00506c7cldr x3, [sp+936]
00506c80adrp x4, 0x17b000
00506c84add x4, x4, 288
00506c88bl runtime.growslice
00506c8cstr x0, [sp+536]
00506c90str x1, [sp+544]
00506c94str x2, [sp+552]
00506c98b 0x506c9c
00506c9c
00506c9cloc_506c9c:
00506c9cldr x5, [sp+64]
00506ca0ldr x6, [sp+536]
00506ca4ldr x7, [sp+544]
00506ca8ldr x8, [sp+552]
00506cacldr x9, [sp+936]
00506cb0sub x10, x5, x9
00506cb4add x8, x8, x9
00506cb8sub x8, x8, x5
00506cbcadd x7, x7, x9
00506cc0sub x2, x7, x5
00506cc4sub x5, xzr, x8
00506cc8ubfm x7, x10, 61, 60
00506cccand x5, x7, x5, asr #63
00506cd0add x1, x6, x5
00506cd4str x1, [sp+512]
00506cd8str x2, [sp+520]
00506cdcstr x8, [sp+528]
00506ce0ldr x4, [sp+936]
00506ce4ldr x3, [sp+928]
00506ce8adrp x0, 0x17b000
00506cecadd x0, x0, 288
00506cf0bl runtime.typedslicecopy
00506cf4ldr x5, [sp+536]
00506cf8ldr x6, [sp+544]
00506cfcldr x7, [sp+552]
00506d00str x5, [sp+304]
00506d04str x6, [sp+312]
00506d08str x7, [sp+320]
00506d0cb 0x506d14
00506d10
00506d10loc_506d10:
00506d10b 0x506d14
00506d14
00506d14loc_506d14:
00506d14ldr x2, [sp+192]
00506d18ldrsb x27, [x2]
00506d1cldrb w2, [x2+11]
00506d20tbnz w2, 0, 0x506d28
00506d24b 0x506f64
00506d28
00506d28loc_506d28:
00506d28str xzr, [sp+968]
00506d2cadd x27, sp, 976
00506d30stp xzr, xzr, [x27]
00506d34add x27, sp, 952
00506d38stp xzr, xzr, [x27]
00506d3cldr x0, [sp+200]
00506d40bl github.com/bishopfox/sliver/implant/sliver/netstat.TCP6Socks
00506d44str x0, [sp+968]
00506d48str x1, [sp+976]
00506d4cstr x2, [sp+984]
00506d50str x3, [sp+952]
00506d54str x4, [sp+960]
00506d58ldr x1, [sp+968]
00506d5cldr x2, [sp+976]
00506d60ldr x3, [sp+984]
00506d64str x1, [sp+1072]
00506d68str x2, [sp+1080]
00506d6cstr x3, [sp+1088]
00506d70ldr x1, [sp+952]
00506d74ldr x2, [sp+960]
00506d78str x1, [sp+1056]
00506d7cstr x2, [sp+1064]
00506d80ldr x1, [sp+1072]
00506d84ldr x2, [sp+1080]
00506d88ldr x3, [sp+1088]
00506d8cstr x1, [sp+88]
00506d90str x2, [sp+96]
00506d94str x3, [sp+104]
00506d98ldr x1, [sp+1064]
00506d9cldr x2, [sp+1056]
00506da0str x2, [sp+224]
00506da4str x1, [sp+232]
00506da8cbnz x2, 0x506db0
00506dacb 0x506e70
00506db0
00506db0loc_506db0:
00506db0add x27, sp, 992
00506db4stp xzr, xzr, [x27]
00506db8add x5, sp, 992
00506dbcstr x5, [sp+480]
00506dc0ldr x5, [sp+224]
00506dc4ldr x6, [sp+232]
00506dc8str x5, [sp+464]
00506dccstr x6, [sp+472]
00506dd0str x5, [sp+456]
00506dd4ldr x5, [sp+456]
00506dd8cbnz x5, 0x506de0
00506ddcb 0x506df0
00506de0
00506de0loc_506de0:
00506de0ldr x5, [sp+456]
00506de4ldr x5, [x5+8]
00506de8str x5, [sp+456]
00506decb 0x506df4
00506df0
00506df0loc_506df0:
00506df0b 0x506df4
00506df4
00506df4loc_506df4:
00506df4ldr x5, [sp+480]
00506df8ldrsb x27, [x5]
00506dfcldr x6, [sp+456]
00506e00ldr x7, [sp+472]
00506e04str x6, [x5]
00506e08adrp x27, 0x545000
00506e0cldr w6, [x27+3056]
00506e10cbz w6, 0x506e18
00506e14b 0x506e1c
00506e18
00506e18loc_506e18:
00506e18b 0x506e30
00506e1c
00506e1cloc_506e1c:
00506e1cbl runtime.gcWriteBarrier2
00506e20str x7, [x25]
00506e24ldr x6, [x5+8]
00506e28str x6, [x25+8]
00506e2cb 0x506e30
00506e30
00506e30loc_506e30:
00506e30str x7, [x5+8]
00506e34ldr x2, [sp+480]
00506e38ldrsb x27, [x2]
00506e3cb 0x506e40
00506e40
00506e40loc_506e40:
00506e40str x2, [sp+488]
00506e44orr x4, xzr, 1
00506e48str x4, [sp+496]
00506e4cstr x4, [sp+504]
00506e50adrp x0, 0x1af000
00506e54add x0, x0, 2543
00506e58movz x1, 18
00506e5cmov x3, x4
00506e60bl log.Printf
00506e64ldp x29, x30, [sp-8]
00506e68add sp, sp, 1184
00506e6cret x30
00506e70
00506e70loc_506e70:
00506e70ldr x2, [sp+88]
00506e74ldr x3, [sp+96]
00506e78ldr x4, [sp+104]
00506e7cadrp x0, 0x1aa000
00506e80add x0, x0, 962
00506e84orr x1, xzr, 4
00506e88bl github.com/bishopfox/sliver/implant/sliver/handlers.buildEntries
00506e8cstr x0, [sp+928]
00506e90str x1, [sp+936]
00506e94str x2, [sp+944]
00506e98ldr x2, [sp+320]
00506e9cldr x5, [sp+312]
00506ea0ldr x0, [sp+304]
00506ea4str x0, [sp+432]
00506ea8str x5, [sp+440]
00506eacstr x2, [sp+448]
00506eb0ldr x6, [sp+936]
00506eb4add x1, x5, x6
00506eb8str x1, [sp+56]
00506ebcsubs xzr, x2, x1
00506ec0b.hs 0x506ec8
00506ec4b 0x506ed0
00506ec8
00506ec8loc_506ec8:
00506ec8str x1, [sp+440]
00506eccb 0x506ef0
00506ed0
00506ed0loc_506ed0:
00506ed0ldr x3, [sp+936]
00506ed4adrp x4, 0x17b000
00506ed8add x4, x4, 288
00506edcbl runtime.growslice
00506ee0str x0, [sp+432]
00506ee4str x1, [sp+440]
00506ee8str x2, [sp+448]
00506eecb 0x506ef0
00506ef0
00506ef0loc_506ef0:
00506ef0ldr x5, [sp+56]
00506ef4ldr x6, [sp+432]
00506ef8ldr x7, [sp+440]
00506efcldr x8, [sp+448]
00506f00ldr x9, [sp+936]
00506f04add x8, x8, x9
00506f08sub x8, x8, x5
00506f0cadd x7, x7, x9
00506f10sub x2, x7, x5
00506f14sub x5, x5, x9
00506f18sub x7, xzr, x8
00506f1cubfm x5, x5, 61, 60
00506f20and x5, x5, x7, asr #63
00506f24add x1, x6, x5
00506f28str x1, [sp+408]
00506f2cstr x2, [sp+416]
00506f30str x8, [sp+424]
00506f34ldr x4, [sp+936]
00506f38ldr x3, [sp+928]
00506f3cadrp x0, 0x17b000
00506f40add x0, x0, 288
00506f44bl runtime.typedslicecopy
00506f48ldr x5, [sp+432]
00506f4cldr x6, [sp+440]
00506f50ldr x7, [sp+448]
00506f54str x5, [sp+304]
00506f58str x6, [sp+312]
00506f5cstr x7, [sp+320]
00506f60b 0x506f68
00506f64
00506f64loc_506f64:
00506f64b 0x506f68
00506f68
00506f68loc_506f68:
00506f68ldr x2, [sp+184]
00506f6cldrsb x27, [x2]
00506f70ldr x3, [sp+304]
00506f74ldr x4, [sp+312]
00506f78ldr x5, [sp+320]
00506f7cstr x4, [x2+16]
00506f80str x5, [x2+24]
00506f84adrp x27, 0x545000
00506f88ldr w4, [x27+3056]
00506f8ccbz w4, 0x506f94
00506f90b 0x506f98
00506f94
00506f94loc_506f94:
00506f94b 0x506fac
00506f98
00506f98loc_506f98:
00506f98bl runtime.gcWriteBarrier2
00506f9cstr x3, [x25]
00506fa0ldr x4, [x2+8]
00506fa4str x4, [x25+8]
00506fa8b 0x506fac
00506fac
00506facloc_506fac:
00506facstr x3, [x2+8]
00506fb0ldr x2, [sp+184]
00506fb4str x2, [sp+920]
00506fb8add x27, sp, 896
00506fbcstp xzr, xzr, [x27]
00506fc0str xzr, [sp+912]
00506fc4add x27, sp, 952
00506fc8stp xzr, xzr, [x27]
00506fccldr x1, [sp+920]
00506fd0adrp x0, 0x20e000
00506fd4add x0, x0, 128
00506fd8bl google.golang.org/protobuf/proto.Marshal
00506fdcstr x0, [sp+896]
00506fe0str x1, [sp+904]
00506fe4str x2, [sp+912]
00506fe8str x3, [sp+952]
00506fecstr x4, [sp+960]
00506ff0ldr x2, [sp+896]
00506ff4ldr x3, [sp+904]
00506ff8ldr x4, [sp+912]
00506ffcstr x2, [sp+1032]
00507000str x3, [sp+1040]
00507004str x4, [sp+1048]
00507008ldr x2, [sp+952]
0050700cldr x3, [sp+960]
00507010str x2, [sp+1016]
00507014str x3, [sp+1024]
00507018ldr x2, [sp+1032]
0050701cldr x3, [sp+1040]
00507020ldr x4, [sp+1048]
00507024str x2, [sp+328]
00507028str x3, [sp+336]
0050702cstr x4, [sp+344]
00507030ldr x3, [sp+1016]
00507034ldr x4, [sp+1024]
00507038str x3, [sp+208]
0050703cstr x4, [sp+216]
00507040ldr x0, [sp+328]
00507044ldr x1, [sp+336]
00507048ldr x2, [sp+344]
0050704cldr x26, [sp+1216]
00507050ldr x5, [x26]
00507054blr x5
00507058b 0x507060
0050705c
0050705cloc_50705c:
0050705cb 0x507060
00507060
00507060loc_507060:
00507060ldp x29, x30, [sp-8]
00507064add sp, sp, 1184
00507068ret x30
0050706c
0050706cloc_50706c:
0050706cstp x0, x1, [sp+8]
00507070stp x2, x3, [sp+24]
00507074mov x3, x30
00507078bl runtime.morestack_noctxt.abi0
0050707cldp x0, x1, [sp+8]
00507080ldp x2, x3, [sp+24]
00507084b 0x5063c0
00507088udf 0
0050708cudf 0
005063c0

00507090
00507090github.com/bishopfox/sliver/implant/sliver/handlers.buildEntries: ; void github.com/bishopfox/sliver/implant/sliver/handlers.buildEntries(struct string proto, struct []github.com/bishopfox/sliver/implant/sliver/netstat.SockTabEntry s)
00507090ldr x16, [x28+16]
00507094sub x17, sp, 304
00507098subs xzr, x17, x16
0050709cb.ls 0x507638
005070a0sub x20, sp, 432
005070a4stp x29, x30, [x20-8]
005070a8add sp, x20, 0
005070acsub x29, sp, 8
005070b0str x0, [sp+440]
005070b4str x1, [sp+448]
005070b8str x2, [sp+456]
005070bcstr x3, [sp+464]
005070c0str x4, [sp+472]
005070c4str xzr, [sp+120]
005070c8stp xzr, xzr, [sp+128]
005070ccadrp x3, 0x544000
005070d0add x3, x3, 1504
005070d4str x3, [sp+160]
005070d8stp xzr, xzr, [sp+168]
005070dcldr x3, [sp+464]
005070e0ldr x4, [sp+456]
005070e4ldr x5, [sp+472]
005070e8str x4, [sp+264]
005070ecstr x3, [sp+272]
005070f0str x5, [sp+280]
005070f4str xzr, [sp+112]
005070f8str x3, [sp+104]
005070fcldr x3, [sp+264]
00507100str x3, [sp+96]
00507104b 0x507108
00507108
00507108loc_507108:
00507108ldr x3, [sp+104]
0050710cldr x4, [sp+112]
00507110subs xzr, x3, x4
00507114b.gt 0x50711c
00507118b 0x507614
0050711c
0050711cloc_50711c:
0050711cldr x3, [sp+96]
00507120str x3, [sp+400]
00507124ldr x3, [sp+400]
00507128ldp x4, x5, [x3]
0050712cldp x6, x7, [x3+16]
00507130ldp x3, x8, [x3+32]
00507134stp x4, x5, [sp+184]
00507138stp x6, x7, [sp+200]
0050713cstp x3, x8, [sp+216]
00507140str wzr, [sp+92]
00507144stp xzr, xzr, [sp+144]
00507148ldr x3, [sp+224]
0050714ccbnz x3, 0x507154
00507150b 0x507180
00507154
00507154loc_507154:
00507154ldr x3, [sp+224]
00507158ldrsb x27, [x3]
0050715cldr x3, [x3]
00507160str w3, [sp+92]
00507164ldr x3, [sp+224]
00507168ldrsb x27, [x3]
0050716cldr x4, [x3+8]
00507170ldr x3, [x3+16]
00507174str x4, [sp+144]
00507178str x3, [sp+152]
0050717cb 0x507184
00507180
00507180loc_507180:
00507180b 0x507184
00507184
00507184loc_507184:
00507184ldr x3, [sp+200]
00507188ldrsb x27, [x3]
0050718cldr x0, [x3]
00507190ldr x1, [x3+8]
00507194ldr x2, [x3+16]
00507198str x0, [sp+376]
0050719cstr x1, [sp+384]
005071a0str x2, [sp+392]
005071a4bl net.IP.String
005071a8str x0, [sp+248]
005071acstr x1, [sp+256]
005071b0ldr x3, [sp+208]
005071b4ldrsb x27, [x3]
005071b8ldr x0, [x3]
005071bcldr x1, [x3+8]
005071c0ldr x2, [x3+16]
005071c4str x0, [sp+352]
005071c8str x1, [sp+360]
005071ccstr x2, [sp+368]
005071d0bl net.IP.String
005071d4str x0, [sp+232]
005071d8str x1, [sp+240]
005071dcldrb w0, [sp+216]
005071e0bl github.com/bishopfox/sliver/implant/sliver/netstat.SkState.String
005071e4str x0, [sp+408]
005071e8str x1, [sp+416]
005071ecadrp x0, 0x187000
005071f0add x0, x0, 1856
005071f4bl runtime.newobject
005071f8str x0, [sp+336]
005071fcadrp x27, 0x544000
00507200ldr w3, [x27+3056]
00507204cbz w3, 0x50720c
00507208b 0x507210
0050720c
0050720cloc_50720c:
0050720cb 0x50722c
00507210
00507210loc_507210:
00507210str x0, [sp+304]
00507214mov x1, x0
00507218adrp x0, 0x187000
0050721cadd x0, x0, 1856
00507220bl runtime.wbZero
00507224ldr x0, [sp+304]
00507228b 0x50722c
0050722c
0050722cloc_50722c:
0050722cmov x20, x0
00507230adr x27, 16
00507234stp x29, x27, [sp-24]
00507238sub x29, sp, 24
0050723cbl fn_87cf8
00507240sub x29, sp, 8
00507244str xzr, [x0+96]
00507248adrp x0, 0x16c000
0050724cadd x0, x0, 2112
00507250bl runtime.newobject
00507254str x0, [sp+328]
00507258adrp x27, 0x544000
0050725cldr w1, [x27+3056]
00507260cbz w1, 0x507268
00507264b 0x50726c
00507268
00507268loc_507268:
00507268b 0x507288
0050726c
0050726cloc_50726c:
0050726cstr x0, [sp+296]
00507270mov x1, x0
00507274adrp x0, 0x16c000
00507278add x0, x0, 2112
0050727cbl runtime.wbZero
00507280ldr x0, [sp+296]
00507284b 0x507288
00507288
00507288loc_507288:
00507288stp xzr, xzr, [x0]
0050728cstp xzr, xzr, [x0+16]
00507290stp xzr, xzr, [x0+32]
00507294stp xzr, xzr, [x0+48]
00507298ldr x1, [sp+328]
0050729cldrsb x27, [x1]
005072a0ldr x2, [sp+248]
005072a4ldr x3, [sp+256]
005072a8str x3, [x1+16]
005072acadrp x27, 0x544000
005072b0ldr w3, [x27+3056]
005072b4cbz w3, 0x5072bc
005072b8b 0x5072c0
005072bc
005072bcloc_5072bc:
005072bcb 0x5072d4
005072c0
005072c0loc_5072c0:
005072c0bl runtime.gcWriteBarrier2
005072c4str x2, [x25]
005072c8ldr x3, [x1+8]
005072ccstr x3, [x25+8]
005072d0b 0x5072d4
005072d4
005072d4loc_5072d4:
005072d4str x2, [x1+8]
005072d8ldr x1, [sp+328]
005072dcldrsb x27, [x1]
005072e0ldr x2, [sp+200]
005072e4ldrsb x27, [x2]
005072e8ldrh w2, [x2+24]
005072ecstr w2, [x1+24]
005072f0ldr x1, [sp+336]
005072f4ldrsb x27, [x1]
005072f8ldr x2, [sp+328]
005072fcadrp x27, 0x544000
00507300ldr w3, [x27+3056]
00507304cbz w3, 0x50730c
00507308b 0x507310
0050730c
0050730cloc_50730c:
0050730cb 0x507324
00507310
00507310loc_507310:
00507310bl runtime.gcWriteBarrier2
00507314str x2, [x25]
00507318ldr x3, [x1+8]
0050731cstr x3, [x25+8]
00507320b 0x507324
00507324
00507324loc_507324:
00507324str x2, [x1+8]
00507328adrp x0, 0x16c000
0050732cadd x0, x0, 2112
00507330bl runtime.newobject
00507334str x0, [sp+320]
00507338adrp x27, 0x544000
0050733cldr w1, [x27+3056]
00507340cbz w1, 0x507348
00507344b 0x50734c
00507348
00507348loc_507348:
00507348b 0x507368
0050734c
0050734cloc_50734c:
0050734cstr x0, [sp+296]
00507350mov x1, x0
00507354adrp x0, 0x16c000
00507358add x0, x0, 2112
0050735cbl runtime.wbZero
00507360ldr x0, [sp+296]
00507364b 0x507368
00507368
00507368loc_507368:
00507368stp xzr, xzr, [x0]
0050736cstp xzr, xzr, [x0+16]
00507370stp xzr, xzr, [x0+32]
00507374stp xzr, xzr, [x0+48]
00507378ldr x1, [sp+320]
0050737cldrsb x27, [x1]
00507380ldr x2, [sp+232]
00507384ldr x3, [sp+240]
00507388str x3, [x1+16]
0050738cadrp x27, 0x544000
00507390ldr w3, [x27+3056]
00507394cbz w3, 0x50739c
00507398b 0x5073a0
0050739c
0050739cloc_50739c:
0050739cb 0x5073b4
005073a0
005073a0loc_5073a0:
005073a0bl runtime.gcWriteBarrier2
005073a4str x2, [x25]
005073a8ldr x3, [x1+8]
005073acstr x3, [x25+8]
005073b0b 0x5073b4
005073b4
005073b4loc_5073b4:
005073b4str x2, [x1+8]
005073b8ldr x1, [sp+320]
005073bcldrsb x27, [x1]
005073c0ldr x2, [sp+208]
005073c4ldrsb x27, [x2]
005073c8ldrh w2, [x2+24]
005073ccstr w2, [x1+24]
005073d0ldr x1, [sp+336]
005073d4ldrsb x27, [x1]
005073d8ldr x2, [sp+320]
005073dcadrp x27, 0x544000
005073e0ldr w3, [x27+3056]
005073e4cbz w3, 0x5073ec
005073e8b 0x5073f0
005073ec
005073ecloc_5073ec:
005073ecb 0x507404
005073f0
005073f0loc_5073f0:
005073f0bl runtime.gcWriteBarrier2
005073f4str x2, [x25]
005073f8ldr x3, [x1+16]
005073fcstr x3, [x25+8]
00507400b 0x507404
00507404
00507404loc_507404:
00507404str x2, [x1+16]
00507408ldr x1, [sp+336]
0050740cldrsb x27, [x1]
00507410ldr x2, [sp+408]
00507414ldr x3, [sp+416]
00507418str x3, [x1+32]
0050741cadrp x27, 0x544000
00507420ldr w3, [x27+3056]
00507424cbz w3, 0x50742c
00507428b 0x507430
0050742c
0050742cloc_50742c:
0050742cb 0x507444
00507430
00507430loc_507430:
00507430bl runtime.gcWriteBarrier2
00507434str x2, [x25]
00507438ldr x3, [x1+24]
0050743cstr x3, [x25+8]
00507440b 0x507444
00507444
00507444loc_507444:
00507444str x2, [x1+24]
00507448ldr x1, [sp+336]
0050744cldrsb x27, [x1]
00507450ldr w2, [sp+220]
00507454str w2, [x1+40]
00507458adrp x0, 0x18a000
0050745cadd x0, x0, 2208
00507460bl runtime.newobject
00507464str x0, [sp+312]
00507468adrp x27, 0x544000
0050746cldr w1, [x27+3056]
00507470cbz w1, 0x507478
00507474b 0x50747c
00507478
00507478loc_507478:
00507478b 0x507498
0050747c
0050747cloc_50747c:
0050747cstr x0, [sp+288]
00507480mov x1, x0
00507484adrp x0, 0x18a000
00507488add x0, x0, 2208
0050748cbl runtime.wbZero
00507490ldr x0, [sp+288]
00507494b 0x507498
00507498
00507498loc_507498:
00507498mov x20, x0
0050749cadr x27, 16
005074a0stp x29, x27, [sp-24]
005074a4sub x29, sp, 24
005074a8bl fn_87cf0
005074acsub x29, sp, 8
005074b0ldr x5, [sp+312]
005074b4ldrsb x27, [x5]
005074b8ldrsw x6, [sp+92]
005074bcstr w6, [x5+8]
005074c0ldr x5, [sp+312]
005074c4ldrsb x27, [x5]
005074c8ldr x6, [sp+144]
005074ccldr x7, [sp+152]
005074d0str x7, [x5+24]
005074d4adrp x27, 0x544000
005074d8ldr w7, [x27+3056]
005074dccbz w7, 0x5074e4
005074e0b 0x5074e8
005074e4
005074e4loc_5074e4:
005074e4b 0x5074fc
005074e8
005074e8loc_5074e8:
005074e8bl runtime.gcWriteBarrier2
005074ecstr x6, [x25]
005074f0ldr x7, [x5+16]
005074f4str x7, [x25+8]
005074f8b 0x5074fc
005074fc
005074fcloc_5074fc:
005074fcstr x6, [x5+16]
00507500ldr x5, [sp+336]
00507504ldrsb x27, [x5]
00507508ldr x6, [sp+312]
0050750cadrp x27, 0x544000
00507510ldr w7, [x27+3056]
00507514cbz w7, 0x50751c
00507518b 0x507520
0050751c
0050751cloc_50751c:
0050751cb 0x507534
00507520
00507520loc_507520:
00507520bl runtime.gcWriteBarrier2
00507524str x6, [x25]
00507528ldr x7, [x5+48]
0050752cstr x7, [x25+8]
00507530b 0x507534
00507534
00507534loc_507534:
00507534str x6, [x5+48]
00507538ldr x5, [sp+336]
0050753cldrsb x27, [x5]
00507540ldr x6, [sp+440]
00507544ldr x7, [sp+448]
00507548str x7, [x5+64]
0050754cadrp x27, 0x544000
00507550ldr w7, [x27+3056]
00507554cbz w7, 0x50755c
00507558b 0x507560
0050755c
0050755cloc_50755c:
0050755cb 0x507574
00507560
00507560loc_507560:
00507560bl runtime.gcWriteBarrier2
00507564str x6, [x25]
00507568ldr x7, [x5+56]
0050756cstr x7, [x25+8]
00507570b 0x507574
00507574
00507574loc_507574:
00507574str x6, [x5+56]
00507578ldr x5, [sp+336]
0050757cstr x5, [sp+344]
00507580ldr x2, [sp+176]
00507584ldr x0, [sp+160]
00507588ldr x5, [sp+168]
0050758cadd x1, x5, 1
00507590subs xzr, x2, x1
00507594b.hs 0x50759c
00507598b 0x5075a0
0050759c
0050759cloc_50759c:
0050759cb 0x5075b4
005075a0
005075a0loc_5075a0:
005075a0orr x3, xzr, 1
005075a4adrp x4, 0x17a000
005075a8add x4, x4, 288
005075acbl runtime.growslice
005075b0b 0x5075b4
005075b4
005075b4loc_5075b4:
005075b4sub x3, x1, 1
005075b8ldr x4, [sp+344]
005075bcadrp x27, 0x544000
005075c0ldr w5, [x27+3056]
005075c4cbz w5, 0x5075cc
005075c8b 0x5075d0
005075cc
005075ccloc_5075cc:
005075ccb 0x5075e4
005075d0
005075d0loc_5075d0:
005075d0bl runtime.gcWriteBarrier2
005075d4str x4, [x25]
005075d8ldr x5, [x0+3*x3]
005075dcstr x5, [x25+8]
005075e0b 0x5075e4
005075e4
005075e4loc_5075e4:
005075e4str x4, [x0+3*x3]
005075e8str x0, [sp+160]
005075ecstr x1, [sp+168]
005075f0str x2, [sp+176]
005075f4b 0x5075f8
005075f8
005075f8loc_5075f8:
005075f8ldr x3, [sp+112]
005075fcadd x3, x3, 1
00507600str x3, [sp+112]
00507604ldr x3, [sp+400]
00507608add x3, x3, 48
0050760cstr x3, [sp+96]
00507610b 0x507108
00507614
00507614loc_507614:
00507614ldr x0, [sp+160]
00507618ldr x1, [sp+168]
0050761cldr x2, [sp+176]
00507620str x0, [sp+120]
00507624str x1, [sp+128]
00507628str x2, [sp+136]
0050762cldp x29, x30, [sp-8]
00507630add sp, sp, 432
00507634ret x30
00507638
00507638loc_507638:
00507638stp x0, x1, [sp+8]
0050763cstp x2, x3, [sp+24]
00507640str x4, [sp+40]
00507644mov x3, x30
00507648bl runtime.morestack_noctxt.abi0
0050764cldp x0, x1, [sp+8]
00507650ldp x2, x3, [sp+24]
00507654ldr x4, [sp+40]
00507658b 0x507090
0050765cudf 0
00507090

00507660
00507660github.com/bishopfox/sliver/implant/sliver/handlers.runSSHCommandHandler: ; void github.com/bishopfox/sliver/implant/sliver/handlers.runSSHCommandHandler(struct []uint8 data, github.com/bishopfox/sliver/implant/sliver/handlers.RPCResponse resp)
00507660ldr x16, [x28+16]
00507664sub x17, sp, 544
00507668subs xzr, x17, x16
0050766cb.ls 0x507c30
00507670sub x20, sp, 672
00507674stp x29, x30, [x20-8]
00507678add sp, x20, 0
0050767csub x29, sp, 8
00507680str x0, [sp+680]
00507684str x1, [sp+688]
00507688str x2, [sp+696]
0050768cstr x3, [sp+704]
00507690adrp x0, 0x192000
00507694add x0, x0, 3168
00507698bl runtime.newobject
0050769cstr x0, [sp+512]
005076a0adrp x27, 0x544000
005076a4ldr w1, [x27+3056]
005076a8cbz w1, 0x5076b0
005076acb 0x5076b4
005076b0
005076b0loc_5076b0:
005076b0b 0x5076d0
005076b4
005076b4loc_5076b4:
005076b4str x0, [sp+304]
005076b8mov x1, x0
005076bcadrp x0, 0x192000
005076c0add x0, x0, 3168
005076c4bl runtime.wbZero
005076c8ldr x0, [sp+304]
005076ccb 0x5076d0
005076d0
005076d0loc_5076d0:
005076d0mov x20, x0
005076d4adr x27, 16
005076d8stp x29, x27, [sp-24]
005076dcsub x29, sp, 24
005076e0bl fn_87ce0
005076e4sub x29, sp, 8
005076e8str xzr, [x0+192]
005076ecldr x4, [sp+512]
005076f0str x4, [sp+232]
005076f4str x4, [sp+616]
005076f8ldr x0, [sp+680]
005076fcldr x1, [sp+688]
00507700ldr x2, [sp+696]
00507704adrp x3, 0x20c000
00507708add x3, x3, 4000
0050770cbl google.golang.org/protobuf/proto.Unmarshal
00507710str x0, [sp+208]
00507714str x1, [sp+216]
00507718cbnz x0, 0x507720
0050771cb 0x5077d4
00507720
00507720loc_507720:
00507720ldrsb x27, [x0]
00507724ldr x2, [x0+24]
00507728mov x0, x1
0050772cblr x2
00507730str x0, [sp+600]
00507734str x1, [sp+608]
00507738add x27, sp, 584
0050773cstp xzr, xzr, [x27]
00507740add x1, sp, 584
00507744str x1, [sp+480]
00507748ldr x0, [sp+600]
0050774cldr x1, [sp+608]
00507750bl runtime.convTstring
00507754str x0, [sp+472]
00507758ldr x1, [sp+480]
0050775cldrsb x27, [x1]
00507760adrp x2, 0xee000
00507764add x2, x2, 2944
00507768str x2, [x1]
0050776cadrp x27, 0x544000
00507770ldr w2, [x27+3056]
00507774cbz w2, 0x50777c
00507778b 0x507780
0050777c
0050777cloc_50777c:
0050777cb 0x507794
00507780
00507780loc_507780:
00507780bl runtime.gcWriteBarrier2
00507784str x0, [x25]
00507788ldr x5, [x1+8]
0050778cstr x5, [x25+8]
00507790b 0x507794
00507794
00507794loc_507794:
00507794str x0, [x1+8]
00507798ldr x2, [sp+480]
0050779cldrsb x27, [x2]
005077a0b 0x5077a4
005077a4
005077a4loc_5077a4:
005077a4str x2, [sp+488]
005077a8orr x4, xzr, 1
005077acstr x4, [sp+496]
005077b0str x4, [sp+504]
005077b4adrp x0, 0x1b3000
005077b8add x0, x0, 4010
005077bcmovz x1, 27
005077c0mov x3, x4
005077c4bl log.Printf
005077c8ldp x29, x30, [sp-8]
005077ccadd sp, sp, 672
005077d0ret x30
005077d4
005077d4loc_5077d4:
005077d4add x27, sp, 600
005077d8stp xzr, xzr, [x27]
005077dcadd x27, sp, 568
005077e0stp xzr, xzr, [x27]
005077e4add x27, sp, 552
005077e8stp xzr, xzr, [x27]
005077ecldr x15, [sp+232]
005077f0ldrsb x27, [x15]
005077f4ldr x16, [x15+24]
005077f8ldr x15, [x15+32]
005077fcstr x16, [sp+456]
00507800str x15, [sp+464]
00507804ldr x15, [sp+232]
00507808ldrsb x27, [x15]
0050780cldr w15, [x15+40]
00507810strh w15, [sp+174]
00507814ldr x15, [sp+232]
00507818ldrsb x27, [x15]
0050781cldr x16, [x15+8]
00507820ldr x15, [x15+16]
00507824str x16, [sp+440]
00507828str x15, [sp+448]
0050782cldr x15, [sp+232]
00507830ldrsb x27, [x15]
00507834ldr x16, [x15+64]
00507838ldr x15, [x15+72]
0050783cstr x16, [sp+424]
00507840str x15, [sp+432]
00507844ldr x15, [sp+232]
00507848ldrsb x27, [x15]
0050784cldr x16, [x15+80]
00507850ldr x17, [x15+88]
00507854ldr x15, [x15+96]
00507858str x16, [sp+400]
0050785cstr x17, [sp+408]
00507860str x15, [sp+416]
00507864ldr x15, [sp+232]
00507868ldrsb x27, [x15]
0050786cldr x16, [x15+104]
00507870ldr x15, [x15+112]
00507874str x16, [sp+384]
00507878str x15, [sp+392]
0050787cldr x15, [sp+232]
00507880ldrsb x27, [x15]
00507884ldr x16, [x15+120]
00507888ldr x17, [x15+128]
0050788cldr x15, [x15+136]
00507890str x16, [sp+360]
00507894str x17, [sp+368]
00507898str x15, [sp+376]
0050789cldr x15, [sp+232]
005078a0ldrsb x27, [x15]
005078a4ldr x16, [x15+144]
005078a8ldr x15, [x15+152]
005078acstr x16, [sp+344]
005078b0str x15, [sp+352]
005078b4ldr x15, [sp+232]
005078b8ldrsb x27, [x15]
005078bcldr x16, [x15+48]
005078c0ldr x15, [x15+56]
005078c4str x16, [sp+328]
005078c8str x15, [sp+336]
005078ccldrh w2, [sp+174]
005078d0ldr x7, [sp+400]
005078d4ldr x8, [sp+408]
005078d8ldr x9, [sp+416]
005078dcldr x12, [sp+360]
005078e0ldr x13, [sp+368]
005078e4ldr x14, [sp+376]
005078e8ldr x0, [sp+456]
005078ecldr x1, [sp+464]
005078f0ldr x4, [sp+448]
005078f4ldr x3, [sp+440]
005078f8ldr x5, [sp+424]
005078fcldr x6, [sp+432]
00507900ldr x10, [sp+384]
00507904ldr x11, [sp+392]
00507908ldr x17, [sp+344]
0050790cldr x19, [sp+352]
00507910str x17, [sp+8]
00507914str x19, [sp+16]
00507918str x16, [sp+24]
0050791cstr x15, [sp+32]
00507920bl github.com/bishopfox/sliver/implant/sliver/shell/ssh.RunSSHCommand
00507924str x0, [sp+600]
00507928str x1, [sp+608]
0050792cstr x2, [sp+568]
00507930str x3, [sp+576]
00507934str x4, [sp+552]
00507938str x5, [sp+560]
0050793cldr x15, [sp+600]
00507940ldr x16, [sp+608]
00507944str x15, [sp+272]
00507948str x16, [sp+280]
0050794cldr x15, [sp+568]
00507950ldr x16, [sp+576]
00507954str x15, [sp+256]
00507958str x16, [sp+264]
0050795cldr x15, [sp+552]
00507960ldr x16, [sp+560]
00507964str x15, [sp+240]
00507968str x16, [sp+248]
0050796cldr x15, [sp+272]
00507970ldr x16, [sp+280]
00507974str x15, [sp+176]
00507978str x16, [sp+184]
0050797cldr x15, [sp+256]
00507980ldr x16, [sp+264]
00507984str x15, [sp+192]
00507988str x16, [sp+200]
0050798cldr x15, [sp+240]
00507990ldr x16, [sp+248]
00507994str x15, [sp+208]
00507998str x16, [sp+216]
0050799cadrp x0, 0x176000
005079a0add x0, x0, 3104
005079a4bl runtime.newobject
005079a8str x0, [sp+320]
005079acadrp x27, 0x544000
005079b0ldr w15, [x27+3056]
005079b4cbz w15, 0x5079bc
005079b8b 0x5079c0
005079bc
005079bcloc_5079bc:
005079bcb 0x5079dc
005079c0
005079c0loc_5079c0:
005079c0str x0, [sp+296]
005079c4mov x1, x0
005079c8adrp x0, 0x176000
005079ccadd x0, x0, 3104
005079d0bl runtime.wbZero
005079d4ldr x0, [sp+296]
005079d8b 0x5079dc
005079dc
005079dcloc_5079dc:
005079dcmov x20, x0
005079e0adr x27, 16
005079e4stp x29, x27, [sp-24]
005079e8sub x29, sp, 24
005079ecbl fn_87cfc
005079f0sub x29, sp, 8
005079f4adrp x0, 0x17e000
005079f8add x0, x0, 3648
005079fcbl runtime.newobject
00507a00str x0, [sp+312]
00507a04adrp x27, 0x544000
00507a08ldr w1, [x27+3056]
00507a0ccbz w1, 0x507a14
00507a10b 0x507a18
00507a14
00507a14loc_507a14:
00507a14b 0x507a34
00507a18
00507a18loc_507a18:
00507a18str x0, [sp+288]
00507a1cmov x1, x0
00507a20adrp x0, 0x17e000
00507a24add x0, x0, 3648
00507a28bl runtime.wbZero
00507a2cldr x0, [sp+288]
00507a30b 0x507a34
00507a34
00507a34loc_507a34:
00507a34mov x20, x0
00507a38adr x27, 16
00507a3cstp x29, x27, [sp-24]
00507a40sub x29, sp, 24
00507a44bl fn_87cf8
00507a48sub x29, sp, 8
00507a4cldr x2, [sp+320]
00507a50ldrsb x27, [x2]
00507a54ldr x3, [sp+312]
00507a58adrp x27, 0x544000
00507a5cldr w4, [x27+3056]
00507a60cbz w4, 0x507a68
00507a64b 0x507a6c
00507a68
00507a68loc_507a68:
00507a68b 0x507a80
00507a6c
00507a6cloc_507a6c:
00507a6cbl runtime.gcWriteBarrier2
00507a70str x3, [x25]
00507a74ldr x4, [x2+40]
00507a78str x4, [x25+8]
00507a7cb 0x507a80
00507a80
00507a80loc_507a80:
00507a80str x3, [x2+40]
00507a84ldr x2, [sp+320]
00507a88ldrsb x27, [x2]
00507a8cldr x3, [sp+176]
00507a90ldr x4, [sp+184]
00507a94str x4, [x2+16]
00507a98adrp x27, 0x544000
00507a9cldr w4, [x27+3056]
00507aa0cbz w4, 0x507aa8
00507aa4b 0x507aac
00507aa8
00507aa8loc_507aa8:
00507aa8b 0x507ac0
00507aac
00507aacloc_507aac:
00507aacbl runtime.gcWriteBarrier2
00507ab0str x3, [x25]
00507ab4ldr x4, [x2+8]
00507ab8str x4, [x25+8]
00507abcb 0x507ac0
00507ac0
00507ac0loc_507ac0:
00507ac0str x3, [x2+8]
00507ac4ldr x2, [sp+320]
00507ac8ldrsb x27, [x2]
00507accldr x3, [sp+192]
00507ad0ldr x4, [sp+200]
00507ad4str x4, [x2+32]
00507ad8adrp x27, 0x544000
00507adcldr w4, [x27+3056]
00507ae0cbz w4, 0x507ae8
00507ae4b 0x507aec
00507ae8
00507ae8loc_507ae8:
00507ae8b 0x507b00
00507aec
00507aecloc_507aec:
00507aecbl runtime.gcWriteBarrier2
00507af0str x3, [x25]
00507af4ldr x4, [x2+24]
00507af8str x4, [x25+8]
00507afcb 0x507b00
00507b00
00507b00loc_507b00:
00507b00str x3, [x2+24]
00507b04ldr x2, [sp+320]
00507b08str x2, [sp+224]
00507b0cldr x2, [sp+208]
00507b10cbnz x2, 0x507b18
00507b14b 0x507b78
00507b18
00507b18loc_507b18:
00507b18ldr x1, [sp+208]
00507b1cldrsb x27, [x1]
00507b20ldr x1, [x1+24]
00507b24ldr x0, [sp+216]
00507b28blr x1
00507b2cstr x0, [sp+568]
00507b30str x1, [sp+576]
00507b34ldr x2, [sp+224]
00507b38ldrsb x27, [x2]
00507b3cldr x2, [x2+40]
00507b40ldrsb x27, [x2]
00507b44str x1, [x2+16]
00507b48adrp x27, 0x544000
00507b4cldr w1, [x27+3056]
00507b50cbz w1, 0x507b58
00507b54b 0x507b5c
00507b58
00507b58loc_507b58:
00507b58b 0x507b70
00507b5c
00507b5cloc_507b5c:
00507b5cbl runtime.gcWriteBarrier2
00507b60str x0, [x25]
00507b64ldr x3, [x2+8]
00507b68str x3, [x25+8]
00507b6cb 0x507b70
00507b70
00507b70loc_507b70:
00507b70str x0, [x2+8]
00507b74b 0x507b7c
00507b78
00507b78loc_507b78:
00507b78b 0x507b7c
00507b7c
00507b7cloc_507b7c:
00507b7cldr x2, [sp+224]
00507b80str x2, [sp+544]
00507b84str xzr, [sp+520]
00507b88add x27, sp, 528
00507b8cstp xzr, xzr, [x27]
00507b90add x27, sp, 552
00507b94stp xzr, xzr, [x27]
00507b98ldr x1, [sp+544]
00507b9cadrp x0, 0x20c000
00507ba0add x0, x0, 4032
00507ba4bl google.golang.org/protobuf/proto.Marshal
00507ba8str x0, [sp+520]
00507bacstr x1, [sp+528]
00507bb0str x2, [sp+536]
00507bb4str x3, [sp+552]
00507bb8str x4, [sp+560]
00507bbcldr x2, [sp+520]
00507bc0ldr x3, [sp+528]
00507bc4ldr x4, [sp+536]
00507bc8str x2, [sp+640]
00507bccstr x3, [sp+648]
00507bd0str x4, [sp+656]
00507bd4ldr x2, [sp+552]
00507bd8ldr x3, [sp+560]
00507bdcstr x2, [sp+624]
00507be0str x3, [sp+632]
00507be4ldr x2, [sp+640]
00507be8ldr x3, [sp+648]
00507becldr x4, [sp+656]
00507bf0str x2, [sp+680]
00507bf4str x3, [sp+688]
00507bf8str x4, [sp+696]
00507bfcldr x3, [sp+624]
00507c00ldr x4, [sp+632]
00507c04str x3, [sp+208]
00507c08str x4, [sp+216]
00507c0cldr x0, [sp+680]
00507c10ldr x1, [sp+688]
00507c14ldr x2, [sp+696]
00507c18ldr x26, [sp+704]
00507c1cldr x5, [x26]
00507c20blr x5
00507c24ldp x29, x30, [sp-8]
00507c28add sp, sp, 672
00507c2cret x30
00507c30
00507c30loc_507c30:
00507c30stp x0, x1, [sp+8]
00507c34stp x2, x3, [sp+24]
00507c38mov x3, x30
00507c3cbl runtime.morestack_noctxt.abi0
00507c40ldp x0, x1, [sp+8]
00507c44ldp x2, x3, [sp+24]
00507c48b 0x507660
00507c4cudf 0
00507660