function _0x4903(_0x41f1e9, _0x3130bc) {
var _0x5e7ec4
=
_0x8976();
return
_0x4903
=
function (_0x899a2d, _0x5835f7) {
_0x899a2d
=
_0x899a2d
-
109
;
var _0x3e8c46
=
_0x5e7ec4[_0x899a2d];
if
(_0x4903.HfpBsi
=
=
=
undefined) {
var _0x1cbb5e
=
function (_0x50d26d) {
var _0x5a42a9
=
'',
_0x12cc8d
=
'',
_0x5f42a1
=
_0x5a42a9
+
_0x1cbb5e;
for
(var _0x2829d6
=
0
, _0x49459b, _0x390f91, _0x46a986
=
0
; _0x390f91
=
_0x50d26d.charAt(_0x46a986
+
+
); ~_0x390f91 && (_0x49459b
=
_0x2829d6
%
4
? _0x49459b
*
64
+
_0x390f91 : _0x390f91, _0x2829d6
+
+
%
4
) ? _0x5a42a9
+
=
_0x5f42a1.charCodeAt(_0x46a986
+
10
)
-
10
!
=
=
0
? String.fromCharCode(
255
& _0x49459b >> (
-
2
*
_0x2829d6 &
6
)) : _0x2829d6 :
0
) {
_0x390f91
=
'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/='
.indexOf(_0x390f91);
}
for
(var _0x42631c
=
0
, _0x4ab4be
=
_0x5a42a9.length; _0x42631c < _0x4ab4be; _0x42631c
+
+
) {
_0x12cc8d
+
=
'%'
+
(
'00'
+
_0x5a42a9.charCodeAt(_0x42631c).toString(
16
)).
slice
(
-
2
);
}
return
decodeURIComponent(_0x12cc8d);
};
var _0x6b448
=
function (_0x1b5efd, _0x1ba8dd) {
var _0x45d44d
=
[],
_0xd3ad3a
=
0
,
_0x1e5c57,
_0x567392
=
'';
_0x1b5efd
=
_0x1cbb5e(_0x1b5efd);
var _0x579ae7;
for
(_0x579ae7
=
0
; _0x579ae7 <
256
; _0x579ae7
+
+
) {
_0x45d44d[_0x579ae7]
=
_0x579ae7;
}
for
(_0x579ae7
=
0
; _0x579ae7 <
256
; _0x579ae7
+
+
) {
_0xd3ad3a
=
(_0xd3ad3a
+
_0x45d44d[_0x579ae7]
+
_0x1ba8dd.charCodeAt(_0x579ae7
%
_0x1ba8dd.length))
%
256
, _0x1e5c57
=
_0x45d44d[_0x579ae7], _0x45d44d[_0x579ae7]
=
_0x45d44d[_0xd3ad3a], _0x45d44d[_0xd3ad3a]
=
_0x1e5c57;
}
_0x579ae7
=
0
, _0xd3ad3a
=
0
;
for
(var _0x577b0d
=
0
; _0x577b0d < _0x1b5efd.length; _0x577b0d
+
+
) {
_0x579ae7
=
(_0x579ae7
+
1
)
%
256
, _0xd3ad3a
=
(_0xd3ad3a
+
_0x45d44d[_0x579ae7])
%
256
, _0x1e5c57
=
_0x45d44d[_0x579ae7], _0x45d44d[_0x579ae7]
=
_0x45d44d[_0xd3ad3a], _0x45d44d[_0xd3ad3a]
=
_0x1e5c57, _0x567392
+
=
String.fromCharCode(_0x1b5efd.charCodeAt(_0x577b0d) ^ _0x45d44d[(_0x45d44d[_0x579ae7]
+
_0x45d44d[_0xd3ad3a])
%
256
]);
}
return
_0x567392;
};
_0x4903.MMnWus
=
_0x6b448, _0x41f1e9
=
arguments, _0x4903.HfpBsi
=
!![];
}
var _0x22abc4
=
_0x5e7ec4[
0
],
_0x244987
=
_0x899a2d
+
_0x22abc4,
_0x238d8e
=
_0x41f1e9[_0x244987];
if
(!_0x238d8e) {
if
(_0x4903.CBAcVv
=
=
=
undefined) {
var _0xdfbdcc
=
function (_0xacf633) {
this.kDnxVr
=
_0xacf633, this.IoBPQs
=
[
1
,
0
,
0
], this.wpMLDB
=
function () {
return
'newState'
;}, this.kJPlqW
=
'\x5cw+\x20*\x5c(\x5c)\x20*{\x5cw+\x20*'
, this.YBMSQk
=
'[\x27|\x22].+[\x27|\x22];?\x20*}'
;
/
/
这是正则表达式
};
_0xdfbdcc.prototype.NgtXeG
=
function () {
var _0x18c3d0
=
new RegExp(this.kJPlqW
+
this.YBMSQk),
_0xa664a8
=
_0x18c3d0.test(this.wpMLDB.toString()) ?
-
-
this.IoBPQs[
1
] :
-
-
this.IoBPQs[
0
];
/
/
这里检测函数文本是否满足正则,实际上是检测JS有没有被格式化,在这里将wpMLDB手动的改回了最小化的格式绕过检测
return
this.vbKnou(_0xa664a8);
}, _0xdfbdcc.prototype.vbKnou
=
function (_0x561c7b) {
if
(!Boolean(~_0x561c7b))
return
_0x561c7b;
return
this.DtzlIA(this.kDnxVr);
/
/
检测到被格式化,调用该函数溢满内存
}, _0xdfbdcc.prototype.DtzlIA
=
function (_0x386581) {
for
(var _0x2adaa0
=
0
, _0x5245a5
=
this.IoBPQs.length; _0x2adaa0 < _0x5245a5; _0x2adaa0
+
+
) {
this.IoBPQs.push(Math.
round
(Math.random())), _0x5245a5
=
this.IoBPQs.length;
}
return
_0x386581(this.IoBPQs[
0
]);
}, new _0xdfbdcc(_0x4903).NgtXeG(), _0x4903.CBAcVv
=
!![];
}
_0x3e8c46
=
_0x4903.MMnWus(_0x3e8c46, _0x5835f7), _0x41f1e9[_0x244987]
=
_0x3e8c46;
}
else
_0x3e8c46
=
_0x238d8e;
return
_0x3e8c46;
}, _0x4903(_0x41f1e9, _0x3130bc);
}
(function (_0x4dbad8, _0x3b7f07) {
var _0x37755d
=
_0x4dbad8();
while
(!![]) {
try
{
var _0x39c0da
=
parseInt(_0x4903(
4069
,
'u]yp'
))
/
1
*
(parseInt(_0x4903(
2125
,
'Jx@]'
))
/
2
)
+
parseInt(_0x4903(
140
,
'kFVy'
))
/
3
+
-
parseInt(_0x4903(
2566
,
'j1TD'
))
/
4
+
parseInt(_0x4903(
3272
,
'a*Xk'
))
/
5
+
-
parseInt(_0x4903(
2587
,
'EnP@'
))
/
6
+
-
parseInt(_0x4903(
743
,
'5h*C'
))
/
7
+
parseInt(_0x4903(
5102
,
'dVlJ'
))
/
8
;
if
(_0x39c0da
=
=
=
_0x3b7f07)
break
;
else
_0x37755d.push(_0x37755d.shift());
} catch (_0x696156) {
_0x37755d.push(_0x37755d.shift());
}
}
})(_0x8976,
214580
);
/
/
字符串数组顺序还原,_0x8976为一个返回全局数组的函数,数组太长了就不放上来了