Created
March 28, 2026 00:21
-
-
Save SocksTheWolf/377e5ff3e12b0aa085b3bb40a1df0b36 to your computer and use it in GitHub Desktop.
myvidplay wasm exfil'd
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| (module | |
| (table $__indirect_function_table (;0;) (export "__indirect_function_table") 1 1 funcref) | |
| (memory $memory (;0;) (export "memory") 256 256) | |
| (global $global0 (mut i32) (i32.const 5243984)) | |
| (func $func0 (result i32) | |
| (local $var0 i32) | |
| i32.const 1088 | |
| i32.const 1088 | |
| i32.load | |
| i32.const 19 | |
| i32.mul | |
| i32.const 3617 | |
| i32.add | |
| i32.const 100000007 | |
| i32.rem_u | |
| local.tee $var0 | |
| i32.store | |
| local.get $var0 | |
| ) | |
| (func $func1 (param $var0 i32) (param $var1 i32) (param $var2 i32) (param $var3 i32) (result i32) | |
| (local $var4 i32) | |
| (local $var5 i32) | |
| (local $var6 i32) | |
| (local $var7 i32) | |
| (local $var8 i32) | |
| call $func0 | |
| local.get $var1 | |
| local.get $var0 | |
| i32.sub | |
| i32.const 1 | |
| i32.add | |
| i32.rem_u | |
| local.get $var0 | |
| i32.add | |
| local.tee $var5 | |
| if | |
| local.get $var2 | |
| i32.const 1 | |
| i32.ne | |
| local.set $var7 | |
| i32.const 0 | |
| local.set $var0 | |
| i32.const 3 | |
| local.set $var1 | |
| loop $label2 | |
| local.get $var1 | |
| i32.const 3 | |
| local.get $var0 | |
| i32.const 3 | |
| i32.rem_u | |
| local.tee $var8 | |
| select | |
| local.set $var1 | |
| call $func0 | |
| local.tee $var4 | |
| i32.const 20 | |
| i32.rem_u | |
| i32.const 1040 | |
| i32.add | |
| i32.load8_u | |
| local.set $var2 | |
| block $label0 (result i32) | |
| local.get $var6 | |
| i32.const 0 | |
| local.get $var8 | |
| select | |
| i32.eqz | |
| if | |
| i32.const 0 | |
| local.get $var4 | |
| local.get $var1 | |
| i32.rem_u | |
| br_if $label0 | |
| drop | |
| local.get $var4 | |
| i32.const 6 | |
| i32.rem_u | |
| i32.const 1024 | |
| i32.add | |
| i32.load8_u | |
| local.set $var2 | |
| end | |
| i32.const 1 | |
| end $label0 | |
| local.set $var6 | |
| block $label1 | |
| local.get $var7 | |
| br_if $label1 | |
| call $func0 | |
| local.tee $var4 | |
| local.get $var4 | |
| i32.const 10 | |
| i32.div_u | |
| local.tee $var4 | |
| i32.const 10 | |
| i32.mul | |
| i32.sub | |
| br_if $label1 | |
| local.get $var4 | |
| i32.const 10 | |
| i32.rem_u | |
| i32.const 1060 | |
| i32.add | |
| i32.load8_u | |
| local.set $var2 | |
| end $label1 | |
| local.get $var0 | |
| local.get $var3 | |
| i32.add | |
| local.get $var2 | |
| i32.const 1076 | |
| i32.load8_u | |
| i32.sub | |
| i32.store8 | |
| local.get $var1 | |
| i32.const 1 | |
| i32.sub | |
| local.set $var1 | |
| local.get $var0 | |
| i32.const 1 | |
| i32.add | |
| local.tee $var0 | |
| local.get $var5 | |
| i32.lt_u | |
| br_if $label2 | |
| end $label2 | |
| end | |
| local.get $var3 | |
| local.get $var5 | |
| i32.add | |
| ) | |
| (func $func2 (param $var0 i32) (param $var1 i32) (param $var2 i32) (result i64) | |
| (local $var3 i32) | |
| (local $var4 i32) | |
| (local $var5 i32) | |
| (local $var6 i64) | |
| (local $var7 i64) | |
| block $label0 | |
| local.get $var1 | |
| i32.const 0 | |
| i32.le_s | |
| br_if $label0 | |
| loop $label2 | |
| local.get $var4 | |
| i32.const 1 | |
| i32.add | |
| local.set $var3 | |
| local.get $var2 | |
| local.get $var5 | |
| local.get $var0 | |
| local.get $var4 | |
| i32.add | |
| i32.load8_u | |
| i32.const 44 | |
| i32.eq | |
| i32.add | |
| local.tee $var5 | |
| i32.eq | |
| if | |
| local.get $var1 | |
| local.get $var3 | |
| i32.le_s | |
| br_if $label0 | |
| loop $label1 | |
| local.get $var0 | |
| local.get $var3 | |
| i32.add | |
| i64.load8_s | |
| local.tee $var7 | |
| i64.const 44 | |
| i64.eq | |
| br_if $label0 | |
| local.get $var6 | |
| i64.const 10 | |
| i64.mul | |
| local.get $var7 | |
| i64.add | |
| i64.const 48 | |
| i64.sub | |
| local.set $var6 | |
| local.get $var3 | |
| i32.const 1 | |
| i32.add | |
| local.tee $var3 | |
| local.get $var1 | |
| i32.ne | |
| br_if $label1 | |
| end $label1 | |
| br $label0 | |
| end | |
| local.get $var3 | |
| local.set $var4 | |
| local.get $var1 | |
| local.get $var3 | |
| i32.gt_s | |
| br_if $label2 | |
| end $label2 | |
| end $label0 | |
| local.get $var6 | |
| ) | |
| (func $url (;3;) (export "url") (param $var0 i32) (param $var1 i32) (param $var2 i32) (result i32) | |
| (local $var3 i64) | |
| (local $var4 i64) | |
| (local $var5 i64) | |
| (local $var6 i64) | |
| (local $var7 i32) | |
| (local $var8 i32) | |
| (local $var9 i32) | |
| (local $var10 i32) | |
| (local $var11 i32) | |
| (local $var12 i32) | |
| (local $var13 i32) | |
| local.get $var0 | |
| local.get $var1 | |
| i32.const 3 | |
| call $func2 | |
| local.set $var3 | |
| local.get $var0 | |
| local.get $var1 | |
| i32.const 5 | |
| call $func2 | |
| local.set $var5 | |
| i32.const 1072 | |
| i32.load | |
| local.tee $var7 | |
| i32.const -6 | |
| i32.const -4 | |
| local.get $var3 | |
| i64.const 1761523200000 | |
| i64.sub | |
| i64.const 259200000 | |
| i64.lt_u | |
| select | |
| i32.add | |
| local.set $var9 | |
| local.get $var7 | |
| i32.const 50 | |
| i32.add | |
| local.tee $var8 | |
| local.get $var8 | |
| i32.mul | |
| i32.const 1000 | |
| i32.mul | |
| local.set $var8 | |
| block $label0 (result i64) | |
| local.get $var3 | |
| i64.const 1762128000000 | |
| i64.sub | |
| i64.const 259199999 | |
| i64.le_u | |
| if | |
| local.get $var0 | |
| local.get $var1 | |
| i32.const 8 | |
| call $func2 | |
| local.get $var7 | |
| i32.const 6 | |
| i32.mul | |
| local.tee $var0 | |
| local.get $var7 | |
| i32.const 1 | |
| i32.shl | |
| i32.const 4 | |
| i32.add | |
| i32.mul | |
| i64.extend_i32_u | |
| i64.rem_u | |
| i32.wrap_i64 | |
| local.get $var0 | |
| local.get $var7 | |
| i32.const 7 | |
| i32.sub | |
| i32.mul | |
| i32.div_u | |
| i64.extend_i32_u | |
| i64.const 23 | |
| i64.shl | |
| i64.const 4194304 | |
| i64.or | |
| br $label0 | |
| end | |
| i64.const 4194304 | |
| local.get $var3 | |
| i64.const 1762732800000 | |
| i64.sub | |
| i64.const 259199999 | |
| i64.gt_u | |
| br_if $label0 | |
| drop | |
| local.get $var0 | |
| local.get $var1 | |
| i32.const 10 | |
| call $func2 | |
| i64.const 23 | |
| i64.shl | |
| end $label0 | |
| local.set $var6 | |
| i32.const 1088 | |
| local.get $var3 | |
| i32.const 1080 | |
| i64.load | |
| local.tee $var4 | |
| local.get $var3 | |
| local.get $var4 | |
| i64.lt_u | |
| select | |
| local.get $var8 | |
| i64.extend_i32_u | |
| i64.div_u | |
| local.tee $var4 | |
| local.get $var7 | |
| i32.const 14 | |
| i32.add | |
| local.tee $var10 | |
| local.get $var9 | |
| local.get $var3 | |
| i64.const 1668556800000 | |
| i64.lt_u | |
| local.tee $var11 | |
| select | |
| i64.extend_i32_u | |
| i64.div_u | |
| i64.const 0 | |
| local.get $var6 | |
| local.get $var3 | |
| i64.const 1715385600000 | |
| i64.lt_u | |
| local.tee $var12 | |
| select | |
| i64.or | |
| i64.store32 | |
| call $func0 | |
| drop | |
| call $func0 | |
| drop | |
| local.get $var2 | |
| i64.const 3400000511170344040 | |
| i64.store align=1 | |
| i32.const 7 | |
| i32.const 10 | |
| i32.const 6 | |
| i32.const 8 | |
| local.get $var3 | |
| i64.const 1763337600000 | |
| i64.sub | |
| i64.const 259200000 | |
| i64.lt_u | |
| local.tee $var0 | |
| select | |
| local.get $var3 | |
| i64.const 1718841600000 | |
| i64.lt_u | |
| select | |
| local.get $var3 | |
| i64.const 1676440800000 | |
| i64.lt_u | |
| local.tee $var7 | |
| select | |
| i32.const 11 | |
| i32.const 6 | |
| i32.const 12 | |
| local.get $var0 | |
| select | |
| local.get $var7 | |
| select | |
| local.get $var0 | |
| local.get $var2 | |
| i32.const 8 | |
| i32.add | |
| call $func1 | |
| local.set $var0 | |
| call $func0 | |
| drop | |
| global.get $global0 | |
| i32.const 16 | |
| i32.sub | |
| local.tee $var1 | |
| global.set $global0 | |
| local.get $var0 | |
| i32.const 46 | |
| i32.store8 | |
| local.get $var1 | |
| i32.const 7171939 | |
| i32.store offset=12 | |
| local.get $var0 | |
| i32.const 1 | |
| i32.add | |
| local.set $var9 | |
| i32.const 0 | |
| local.set $var0 | |
| local.get $var1 | |
| i32.const 12 | |
| i32.add | |
| local.tee $var13 | |
| i32.load8_u | |
| local.tee $var8 | |
| if | |
| loop $label1 | |
| local.get $var0 | |
| local.get $var9 | |
| i32.add | |
| local.get $var8 | |
| i32.store8 | |
| local.get $var13 | |
| local.get $var0 | |
| i32.const 1 | |
| i32.add | |
| local.tee $var0 | |
| i32.add | |
| i32.load8_u | |
| local.tee $var8 | |
| br_if $label1 | |
| end $label1 | |
| end | |
| local.get $var1 | |
| i32.const 16 | |
| i32.add | |
| global.set $global0 | |
| local.get $var0 | |
| local.get $var9 | |
| i32.add | |
| local.set $var0 | |
| i32.const 1088 | |
| local.get $var4 | |
| local.get $var10 | |
| i64.extend_i32_u | |
| i64.div_u | |
| local.get $var5 | |
| i64.const 27 | |
| i64.shl | |
| i64.const 0 | |
| i64.const 67108864 | |
| i64.const 100663296 | |
| i64.const 16777216 | |
| i64.const 50331648 | |
| local.get $var5 | |
| i64.const 8 | |
| i64.eq | |
| select | |
| i64.const 37748736 | |
| i64.const 28311552 | |
| local.get $var3 | |
| i64.const 1729987200000 | |
| i64.lt_u | |
| select | |
| local.get $var12 | |
| select | |
| local.get $var3 | |
| i64.const 1704931200000 | |
| i64.lt_u | |
| select | |
| local.get $var7 | |
| select | |
| local.get $var11 | |
| select | |
| i64.or | |
| i64.or | |
| i64.store32 | |
| call $func0 | |
| drop | |
| i32.const 2 | |
| i32.const 4 | |
| i32.const 5 | |
| local.get $var3 | |
| i64.const 1740268800000 | |
| i64.lt_u | |
| local.tee $var1 | |
| select | |
| call $func0 | |
| i32.const 3 | |
| i32.rem_u | |
| local.tee $var7 | |
| select | |
| local.set $var9 | |
| i32.const 5 | |
| i32.const 8 | |
| local.get $var1 | |
| select | |
| local.set $var8 | |
| i32.const 0 | |
| local.set $var1 | |
| loop $label2 | |
| local.get $var0 | |
| i32.const 47 | |
| i32.store8 | |
| local.get $var1 | |
| local.get $var7 | |
| i32.eq | |
| local.set $var10 | |
| local.get $var9 | |
| local.get $var8 | |
| i32.const 0 | |
| local.get $var0 | |
| i32.const 1 | |
| i32.add | |
| call $func1 | |
| local.set $var0 | |
| local.get $var1 | |
| i32.const 1 | |
| i32.add | |
| local.set $var1 | |
| local.get $var10 | |
| i32.eqz | |
| br_if $label2 | |
| end $label2 | |
| local.get $var0 | |
| local.get $var2 | |
| i32.sub | |
| ) | |
| (func $stackSave (;4;) (export "stackSave") (result i32) | |
| global.get $global0 | |
| ) | |
| (func $stackRestore (;5;) (export "stackRestore") (param $var0 i32) | |
| local.get $var0 | |
| global.set $global0 | |
| ) | |
| (func $stackAlloc (;6;) (export "stackAlloc") (param $var0 i32) (result i32) | |
| global.get $global0 | |
| local.get $var0 | |
| i32.sub | |
| i32.const -16 | |
| i32.and | |
| local.tee $var0 | |
| global.set $global0 | |
| local.get $var0 | |
| ) | |
| (func $__errno_location (;7;) (export "__errno_location") (result i32) | |
| i32.const 1092 | |
| ) | |
| (data (i32.const 1024) "\9e\a2\a6\ac\b2\b6") | |
| (data (i32.const 1040) "\9f\a0\a1\a3\a4\a5\a7\a8\a9\aa\ab\ad\ae\af\b0\b1\b3\b4\b5\b7mnporqtsvu") | |
| (data (i32.const 1072) "\0a\00\00\00=\00\00\00\ffC2s\9c\01") | |
| ) |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment