Method ProcessMainMethod

Pure Crypter/PureCrypterPunisher/Program.cs:134–207

(IList<dnlib.DotNet.Emit.Instruction> instrs, int index)

        private static bool ProcessMainMethod(IList<dnlib.DotNet.Emit.Instruction> instrs, int index)
        {
            try
            {
                if (
                    instrs[index + 0].OpCode == dnlib.DotNet.Emit.OpCodes.Call &&
                    instrs[index + 0].Operand is IMethod method0 &&

                    instrs[index + 1].OpCode == dnlib.DotNet.Emit.OpCodes.Call &&
                    instrs[index + 1].Operand is IMethod method1 &&
                    method1.MethodSig.Params.Count == 1 &&
                    method1.MethodSig.Params[0].FullName == "System.Byte[]" &&
                    method1.MethodSig.RetType.FullName == "System.Byte[]" &&

                    instrs[index + 2].OpCode == dnlib.DotNet.Emit.OpCodes.Stloc_S &&
                    instrs[index + 3].OpCode == dnlib.DotNet.Emit.OpCodes.Ldloc_S &&

                    instrs[index + 4].OpCode == dnlib.DotNet.Emit.OpCodes.Call &&
                    instrs[index + 4].Operand is IMethod method2 &&
                    method2.MethodSig.Params.Count == 1 &&
                    method2.MethodSig.Params[0].FullName == "System.Byte[]" &&
                    method2.MethodSig.RetType.FullName == "System.Byte[]" &&

                    instrs[index + 5].OpCode == dnlib.DotNet.Emit.OpCodes.Newobj &&
                    instrs[index + 5].Operand is IMethod ctor &&
                    ctor.DeclaringType.FullName == "System.IO.MemoryStream" &&
                    ctor.MethodSig.Params.Count == 1 &&
                    ctor.MethodSig.Params[0].FullName == "System.Byte[]" &&

                    instrs[index + 6].OpCode == dnlib.DotNet.Emit.OpCodes.Stloc_S &&
                    instrs[index + 7].OpCode == dnlib.DotNet.Emit.OpCodes.Ldloc_S &&

                    instrs[index + 8].OpCode == dnlib.DotNet.Emit.OpCodes.Ldc_I8 &&
                    instrs[index + 8].Operand is long l && l == 0L &&

                    instrs[index + 9].OpCode == dnlib.DotNet.Emit.OpCodes.Callvirt &&
                    instrs[index + 9].Operand is IMethod method3 &&
                    method3.FullName.Contains("System.IO.Stream::set_Position") &&

                    instrs[index + 10].OpCode == dnlib.DotNet.Emit.OpCodes.Ldloc_S &&

                    instrs[index + 11].OpCode == dnlib.DotNet.Emit.OpCodes.Call &&
                    instrs[index + 11].Operand is MethodSpec methodSpec &&
                    methodSpec.Method is IMethod method4 &&
                    method4.Name == "Deserialize" &&
                    method4.DeclaringType.FullName == "ProtoBuf.Serializer"
                )
                {
                    // Set the name/type of the method used to get the resource
                    getResourceMethodType = method0.DeclaringType.FullName;
                    getResourceMethodName = method0.Name;

                    // Set the name/type of the method used to decrypt the resource
                    decryptResourceMethodType = method1.DeclaringType.FullName;
                    decryptResourceMethodName = method1.Name;

                    // Set the protobufs deserialization type
                    var genericSig = methodSpec.GenericInstMethodSig;