Suspicious
Suspect

dfbbf6994f1c258553011b5f63bc675b

PE Executable
|
MD5: dfbbf6994f1c258553011b5f63bc675b
|
Size: 24.06 KB
|
application/x-dosexec


Print
Summary by MalvaGPT
Characteristics

Symbol Obfuscation Score

Low

Hash
Hash Value
MD5
dfbbf6994f1c258553011b5f63bc675b
Sha1
4ef204c84aa7b461ea3594eccd34a8231bc59b9c
Sha256
684d2d2280b85fa582988eb302c30790e42a71d6f04756587dd201b5bb1f4686
Sha384
627ea0f7d225f426e8bc200320560c2f9db6189c2b621504d59e34597bde8d8c808e51f5514b525abd24a5161fdf110c
Sha512
a72e4c5894172891c04be1251664e2811b985f110269d92a7dc5f2a33e463f71438660768364f333132bf25f03c8838c751dd02046e3399c4420da3afbc88d96
SSDeep
384:bCA0wLNSopdhQhXEx2o44CGa5lQoiuVpIF5vVzMjF0c9zHppT:bCA3IYdhQl9xpIF51tCzHppT
TLSH
ACB23A0093D9922AD67A067968B13A1106B7B68B76F3DB4E4C8EF9CA1F43705CD50FE1

PeID

.NET executable
Microsoft Visual C# / Basic .NET
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
Microsoft Visual C# v7.0 / Basic .NET
Microsoft Visual Studio .NET
File Structure
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
Informations
Name
Value
Module Name

Checkerv2.0.exe

Full Name

Checkerv2.0.exe

EntryPoint

System.Void Checkerv2._0.Program::Main(System.String[])

Scope Name

Checkerv2.0.exe

Scope Type

ModuleDef

Kind

Console

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

Checkerv2.0

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.8

Total Strings

105

Main Method

System.Void Checkerv2._0.Program::Main(System.String[])

Main IL Instruction Count

798

Main IL

call System.Void Checkerv2._0.Program::ShowBanner() ldarg.0 <null> ldlen <null> brtrue.s IL_0013: ldstr "csv" ldstr [?] You didn't specify anything. Look Checker.exe -h call System.Void System.Console::WriteLine(System.String) ldstr csv stloc.0 <null> ldstr Output stloc.1 <null> ldarg.0 <null> ldsfld System.Func`3<System.String,System.Int32,<>f__AnonymousType0`2<System.Int32,System.String>> Checkerv2._0.Program/<>c::<>9__0_0 dup <null> brtrue.s IL_003F: call System.Collections.Generic.IEnumerable`1<<>f__AnonymousType0`2<System.Int32,System.String>> System.Linq.Enumerable::Select<System.String,<>f__AnonymousType0`2<System.Int32,System.String>>(System.Collections.Generic.IEnumerable`1<System.String>,System.Func`3<System.String,System.Int32,<>f__AnonymousType0`2<System.Int32,System.String>>) pop <null> ldsfld Checkerv2._0.Program/<>c Checkerv2._0.Program/<>c::<>9 ldftn <>f__AnonymousType0`2<System.Int32,System.String> Checkerv2._0.Program/<>c::<Main>b__0_0(System.String,System.Int32) newobj System.Void System.Func`3<System.String,System.Int32,<>f__AnonymousType0`2<System.Int32,System.String>>::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.Func`3<System.String,System.Int32,<>f__AnonymousType0`2<System.Int32,System.String>> Checkerv2._0.Program/<>c::<>9__0_0 call System.Collections.Generic.IEnumerable`1<<>f__AnonymousType0`2<System.Int32,System.String>> System.Linq.Enumerable::Select<System.String,<>f__AnonymousType0`2<System.Int32,System.String>>(System.Collections.Generic.IEnumerable`1<System.String>,System.Func`3<System.String,System.Int32,<>f__AnonymousType0`2<System.Int32,System.String>>) callvirt System.Collections.Generic.IEnumerator`1<<>f__AnonymousType0`2<System.Int32,System.String>> System.Collections.Generic.IEnumerable`1<<>f__AnonymousType0`2<System.Int32,System.String>>::GetEnumerator() stloc.3 <null> br IL_00D4: ldloc.3 ldloc.3 <null> callvirt <>f__AnonymousType0`2<System.Int32,System.String> System.Collections.Generic.IEnumerator`1<<>f__AnonymousType0`2<System.Int32,System.String>>::get_Current() stloc.s V_4 ldloc.s V_4 callvirt System.String <>f__AnonymousType0`2<System.Int32,System.String>::get_value() callvirt System.String System.String::ToLower() stloc.s V_5 ldloc.s V_5 ldstr -outformat call System.Boolean System.String::op_Equality(System.String,System.String) brtrue.s IL_00AD: ldarg.0 ldloc.s V_5 ldstr -outfile call System.Boolean System.String::op_Equality(System.String,System.String) brtrue.s IL_00BB: ldarg.0 ldloc.s V_5 ldstr -showtable call System.Boolean System.String::op_Equality(System.String,System.String) brtrue.s IL_00D4: ldloc.3 ldloc.s V_5 ldstr -h call System.Boolean System.String::op_Equality(System.String,System.String) brtrue.s IL_00C9: call System.Void Checkerv2._0.Program::ShowHelp() ldloc.s V_5 ldstr --help call System.Boolean System.String::op_Equality(System.String,System.String) brtrue.s IL_00C9: call System.Void Checkerv2._0.Program::ShowHelp() br.s IL_00D4: ldloc.3 ldarg.0 <null> ldloc.s V_4 callvirt System.Int32 <>f__AnonymousType0`2<System.Int32,System.String>::get_index() ldc.i4.1 <null> add <null> ldelem.ref <null> stloc.0 <null> br.s IL_00D4: ldloc.3 ldarg.0 <null> ldloc.s V_4 callvirt System.Int32 <>f__AnonymousType0`2<System.Int32,System.String>::get_index() ldc.i4.1 <null> add <null> ldelem.ref <null> stloc.1 <null> br.s IL_00D4: ldloc.3 call System.Void Checkerv2._0.Program::ShowHelp() ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) ldloc.3 <null> callvirt System.Boolean System.Collections.IEnumerator::MoveNext() brtrue IL_004F: ldloc.3 leave.s IL_00EB: ldstr "[+] Result will be in " ldloc.3 <null> brfalse.s IL_00EA: endfinally ldloc.3 <null> callvirt System.Void System.IDisposable::Dispose() endfinally <null> ldstr [+] Result will be in ldloc.1 <null> ldstr , format ldloc.0 <null> call System.String System.String::Concat(System.String,System.String,System.String,System.String) call System.Void System.Console::WriteLine(System.String) call System.Collections.Generic.List`1<Checkerv2._0.ObjectInfo> Checkerv2._0.Parser::GetDCOMObjects() stloc.2 <null> ldloc.0 <null> ldstr csv call System.Boolean System.String::op_Equality(System.String,System.String) brtrue.s IL_0129: nop ldloc.0 <null> ldstr xlsx call System.Boolean System.String::op_Equality(System.String,System.String) brtrue IL_03FE: nop br IL_08DB: ldstr "[-] Invalid format " nop <null> call System.AppDomain System.AppDomain::get_CurrentDomain() callvirt System.String System.AppDomain::get_BaseDirectory() ldloc.1 <null> ldstr . ldloc.0 <null> call System.String System.String::Concat(System.String,System.String,System.String) call System.String System.IO.Path::Combine(System.String,System.String) ldc.i4.0 <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() newobj System.Void System.IO.StreamWriter::.ctor(System.String,System.Boolean,System.Text.Encoding) stloc.s V_6 ldc.i4.s 14 newarr System.String dup <null> ldc.i4.0 <null> ldstr ApplicationID stelem.ref <null> dup <null> ldc.i4.1 <null> ldstr ApplicationName stelem.ref <null> dup <null> ldc.i4.2 <null> ldstr RunAs stelem.ref <null> dup <null> ldc.i4.3 <null> ldstr LaunchAccess stelem.ref <null> dup <null> ldc.i4.4 <null> ldstr LaunchType stelem.ref <null> dup <null> ldc.i4.5 <null> ldstr LaunchPrincipal stelem.ref <null> dup <null> ldc.i4.6 <null> ldstr LaunchSID stelem.ref <null> dup <null> ldc.i4.7 <null> ldstr AccessAccess stelem.ref <null> dup <null> ldc.i4.8 <null> ldstr AccessType stelem.ref <null> dup <null> ldc.i4.s 9 ldstr AccessPrincipal stelem.ref <null> dup <null> ldc.i4.s 10 ldstr AccessSID stelem.ref <null> dup <null> ldc.i4.s 11 ldstr AuthLevel stelem.ref <null> dup <null> ldc.i4.s 12 ldstr ImpLevel stelem.ref <null> dup <null> ldc.i4.s 13 ldstr CLSIDs stelem.ref <null> stloc.s V_7 ldloc.s V_6 ldstr , ldloc.s V_7 call System.String System.String::Join(System.String,System.String[]) callvirt System.Void System.IO.TextWriter::WriteLine(System.String) ldloc.2 <null> callvirt System.Collections.Generic.List`1/Enumerator<Checkerv2._0.ObjectInfo> System.Collections.Generic.List`1<Checkerv2._0.ObjectInfo>::GetEnumerator() stloc.s V_8 br IL_03B6: ldloca.s V_8 ldloca.s V_8 call Checkerv2._0.ObjectInfo System.Collections.Generic.List`1/Enumerator<Checkerv2._0.ObjectInfo>::get_Current() stloc.s V_9 ldstr stloc.s V_10 ldloc.s V_9 callvirt System.Collections.Generic.List`1<System.String> Checkerv2._0.ObjectInfo::get_CLSIDs() brfalse.s IL_021C: ldloc.s V_9 ldstr ; ldloc.s V_9 callvirt System.Collections.Generic.List`1<System.String> Checkerv2._0.ObjectInfo::get_CLSIDs() call System.String System.String::Join(System.String,System.Collections.Generic.IEnumerable`1<System.String>) stloc.s V_10 ldloc.s V_9 callvirt System.Collections.Generic.List`1<Checkerv2._0.SDInfo> Checkerv2._0.ObjectInfo::get_LaunchInfo() callvirt System.Int32 System.Collections.Generic.List`1<Checkerv2._0.SDInfo>::get_Count() ldloc.s V_9 callvirt System.Collections.Generic.List`1<Checkerv2._0.SDInfo> Checkerv2._0.ObjectInfo::get_AccessInfo() callvirt System.Int32 System.Collections.Generic.List`1<Checkerv2._0.SDInfo>::get_Count() call System.Int32 System.Math::Max(System.Int32,System.Int32) stloc.s V_11 ldc.i4.0 <null> stloc.s V_12 br IL_03AD: ldloc.s V_12 ldloc.s V_12 ldloc.s V_9 callvirt System.Collections.Generic.List`1<Checkerv2._0.SDInfo> Checkerv2._0.ObjectInfo::get_LaunchInfo() callvirt System.Int32 System.Collections.Generic.List`1<Checkerv2._0.SDInfo>::get_Count() blt.s IL_0256: ldloc.s V_9 ldnull <null> br.s IL_0264: stloc.s V_13 ldloc.s V_9 callvirt System.Collections.Generic.List`1<Checkerv2._0.SDInfo> Checkerv2._0.ObjectInfo::get_LaunchInfo() ldloc.s V_12 callvirt Checkerv2._0.SDInfo System.Collections.Generic.List`1<Checkerv2._0.SDInfo>::get_Item(System.Int32) stloc.s V_13 ldloc.s V_12 ldloc.s V_9 callvirt System.Collections.Generic.List`1<Checkerv2._0.SDInfo> Checkerv2._0.ObjectInfo::get_AccessInfo() callvirt System.Int32 System.Collections.Generic.List`1<Checkerv2._0.SDInfo>::get_Count() blt.s IL_0279: ldloc.s V_9 ldnull <null> br.s IL_0287: stloc.s V_14 ldloc.s V_9 callvirt System.Collections.Generic.List`1<Checkerv2._0.SDInfo> Checkerv2._0.ObjectInfo::get_AccessInfo() ldloc.s V_12 callvirt Checkerv2._0.SDInfo System.Collections.Generic.List`1<Checkerv2._0.SDInfo>::get_Item(System.Int32) stloc.s V_14 ldc.i4.s 14 newarr System.String dup <null> ldc.i4.0 <null> ldloc.s V_9 callvirt System.String Checkerv2._0.ObjectInfo::get_ApplicationID() stelem.ref <null> dup <null> ldc.i4.1 <null> ldloc.s V_9 callvirt System.String Checkerv2._0.ObjectInfo::get_ApplicationName() stelem.ref <null> dup <null> ldc.i4.2 <null> ldloc.s V_9 callvirt System.String Checkerv2._0.ObjectInfo::get_RunAs() stelem.ref <null> dup <null> ldc.i4.3 <null> ldloc.s V_13 brtrue.s IL_02BB: ldstr ". " ldstr br.s IL_02CC: stelem.ref ldstr . ldloc.s V_13 callvirt System.Collections.Generic.List`1<System.String> Checkerv2._0.SDInfo::get_Access() call System.String System.String::Join(System.String,System.Collections.Generic.IEnumerable`1<System.String>) stelem.ref <null> dup <null> ldc.i4.4 <null> ldloc.s V_13 brtrue.s IL_02DA: ldloc.s V_13 ldstr br.s IL_02E1: stelem.ref ldloc.s V_13 callvirt System.String Checkerv2._0.SDInfo::get_Type() stelem.ref <null> dup <null> ldc.i4.5 <null> ldloc.s V_13 brtrue.s IL_02EF: ldloc.s V_13 ldstr br.s IL_02F6: stelem.ref ldloc.s V_13 callvirt System.String Checkerv2._0.SDInfo::get_Principal() stelem.ref <null> dup <null> ldc.i4.6 <null> ldloc.s V_13 brtrue.s IL_0304: ldloc.s V_13 ldstr br.s IL_0310: stelem.ref ldloc.s V_13 callvirt System.Security.Principal.SecurityIdentifier Checkerv2._0.SDInfo::get_SID() callvirt System.String System.Object::ToString() stelem.ref <null> dup <null> ldc.i4.7 <null> ldloc.s V_14 brtrue.s IL_031E: ldstr ". " ldstr br.s IL_032F: stelem.ref ldstr . ldloc.s V_14 callvirt System.Collections.Generic.List`1<System.String> Checkerv2._0.SDInfo::get_Access() call System.String System.String::Join(System.String,System.Collections.Generic.IEnumerable`1<System.String>) stelem.ref <null> dup <null> ldc.i4.8 <null> ldloc.s V_14 brtrue.s IL_033D: ldloc.s V_14 ldstr br.s IL_0344: stelem.ref ldloc.s V_14 callvirt System.String Checkerv2._0.SDInfo::get_Type() stelem.ref <null> dup <null> ldc.i4.s 9 ldloc.s V_14 brtrue.s IL_0353: ldloc.s V_14 ldstr br.s IL_035A: stelem.ref ldloc.s V_14 callvirt System.String Checkerv2._0.SDInfo::get_Principal() stelem.ref <null> dup <null> ldc.i4.s 10 ldloc.s V_14 brtrue.s IL_0369: ldloc.s V_14 ldstr br.s IL_0375: stelem.ref ldloc.s V_14 callvirt System.Security.Principal.SecurityIdentifier Checkerv2._0.SDInfo::get_SID() callvirt System.String System.Object::ToString() stelem.ref <null> dup <null> ldc.i4.s 11 ldloc.s V_9 callvirt System.String Checkerv2._0.ObjectInfo::get_AuthLevel() stelem.ref <null> dup <null> ldc.i4.s 12 ldloc.s V_9 callvirt System.String Checkerv2._0.ObjectInfo::get_ImpLevel() stelem.ref <null> dup <null> ldc.i4.s 13 ldloc.s V_10 stelem.ref <null> stloc.s V_15 ldloc.s V_6 ldstr , ldloc.s V_15 call System.String System.String::Join(System.String,System.String[]) callvirt System.Void System.IO.TextWriter::WriteLine(System.String) ldloc.s V_12 ldc.i4.1 <null> add <null> stloc.s V_12 ldloc.s V_12 ldloc.s V_11 blt IL_0243: ldloc.s V_12 ldloca.s V_8 call System.Boolean System.Collections.Generic.List`1/Enumerator<Checkerv2._0.ObjectInfo>::MoveNext() brtrue IL_01F0: ldloca.s V_8 leave.s IL_03D2: leave.s IL_03E0 ldloca.s V_8 constrained. System.Collections.Generic.List`1/Enumerator<Checkerv2._0.ObjectInfo> callvirt System.Void System.IDisposable::Dispose() endfinally <null> leave.s IL_03E0: leave IL_08EB ldloc.s V_6 brfalse.s IL_03DF: endfinally ldloc.s V_6 callvirt System.Void System.IDisposable::Dispose() endfinally <null> leave IL_08EB: ldstr "[+] Success" ldstr [-] Could not write to CSV file. call System.Void System.Console::WriteLine(System.String) callvirt System.String System.Exception::get_Message() call System.Void System.Console::WriteLine(System.String) leave IL_08EB: ldstr "[+] Success" nop <null> call System.AppDomain System.AppDomain::get_CurrentDomain() callvirt System.String System.AppDomain::get_BaseDirectory() ldloc.1 <null> ldstr . ldloc.0 <null> call System.String System.String::Concat(System.String,System.String,System.String) call System.String System.IO.Path::Combine(System.String,System.String) stloc.s V_16 ldstr 00024500-0000-0000-C000-000000000046 newobj System.Void System.Guid::.ctor(System.String) call System.Type System.Runtime.InteropServices.Marshal::GetTypeFromCLSID(System.Guid) call System.Object System.Activator::CreateInstance(System.Type) castclass Microsoft.Office.Interop.Excel.Application stloc.s V_17 ldloc.s V_17 ldc.i4.0 <null> callvirt System.Void Microsoft.Office.Interop.Excel._Application::set_Visible(System.Boolean) ldloc.s V_17 ldc.i4.0 <null> callvirt System.Void Microsoft.Office.Interop.Excel._Application::set_DisplayAlerts(System.Boolean) ldloc.s V_17 callvirt Microsoft.Office.Interop.Excel.Workbooks Microsoft.Office.Interop.Excel._Application::get_Workbooks() ldsfld System.Reflection.Missing System.Reflection.Missing::Value callvirt Microsoft.Office.Interop.Excel.Workbook Microsoft.Office.Interop.Excel.Workbooks::Add(System.Object) stloc.s V_18 ldsfld System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Worksheet>> Checkerv2._0.Program/<>o__0::<>p__0 brtrue.s IL_0486: ldsfld System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Worksheet>> Checkerv2._0.Program/<>o__0::<>p__0 ldc.i4.s 16 ldtoken Microsoft.Office.Interop.Excel.Worksheet call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) ldtoken Checkerv2._0.Program call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) call System.Runtime.CompilerServices.CallSiteBinder Microsoft.CSharp.RuntimeBinder.Binder::Convert(Microsoft.CSharp.RuntimeBinder.CSharpBinderFlags,System.Type,System.Type) call System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Worksheet>> System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Worksheet>>::Create(System.Runtime.CompilerServices.CallSiteBinder) stsfld System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Worksheet>> Checkerv2._0.Program/<>o__0::<>p__0 ldsfld System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Worksheet>> Checkerv2._0.Program/<>o__0::<>p__0 ldfld System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Worksheet> System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Worksheet>>::Target ldsfld System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Worksheet>> Checkerv2._0.Program/<>o__0::<>p__0 ldloc.s V_18 callvirt Microsoft.Office.Interop.Excel.Sheets Microsoft.Office.Interop.Excel._Workbook::get_Worksheets() ldc.i4.1 <null> box System.Int32 callvirt System.Object Microsoft.Office.Interop.Excel.Sheets::get__Default(System.Object) callvirt Microsoft.Office.Interop.Excel.Worksheet System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Worksheet>::Invoke(System.Runtime.CompilerServices.CallSite,System.Object) stloc.s V_19 ldc.i4.s 14 newarr System.String dup <null> ldc.i4.0 <null> ldstr ApplicationID stelem.ref <null> dup <null> ldc.i4.1 <null> ldstr ApplicationName stelem.ref <null> dup <null> ldc.i4.2 <null> ldstr RunAs stelem.ref <null> dup <null> ldc.i4.3 <null> ldstr LaunchAccess stelem.ref <null> dup <null> ldc.i4.4 <null> ldstr LaunchType stelem.ref <null> dup <null> ldc.i4.5 <null> ldstr LaunchPrincipal stelem.ref <null> dup <null> ldc.i4.6 <null> ldstr LaunchSID stelem.ref <null> dup <null> ldc.i4.7 <null> ldstr AccessAccess stelem.ref <null> dup <null> ldc.i4.8 <null> ldstr AccessType stelem.ref <null> dup <null> ldc.i4.s 9 ldstr AccessPrincipal stelem.ref <null> dup <null> ldc.i4.s 10 ldstr AccessSID stelem.ref <null> dup <null> ldc.i4.s 11 ldstr AuthLevel stelem.ref <null> dup <null> ldc.i4.s 12 ldstr ImpLevel stelem.ref <null> dup <null> ldc.i4.s 13 ldstr CLSIDs stelem.ref <null> stloc.s V_20 ldc.i4.0 <null> stloc.s V_22 br IL_05E2: ldloc.s V_22 ldloc.s V_19 callvirt Microsoft.Office.Interop.Excel.Range Microsoft.Office.Interop.Excel._Worksheet::get_Cells() ldc.i4.1 <null> box System.Int32 ldloc.s V_22 ldc.i4.1 <null> add <null> box System.Int32 ldloc.s V_20 ldloc.s V_22 ldelem.ref <null> callvirt System.Void Microsoft.Office.Interop.Excel.Range::set__Default(System.Object,System.Object,System.Object) ldsfld System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Range>> Checkerv2._0.Program/<>o__0::<>p__1 brtrue.s IL_0580: ldsfld System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Range>> Checkerv2._0.Program/<>o__0::<>p__1 ldc.i4.s 16 ldtoken Microsoft.Office.Interop.Excel.Range call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) ldtoken Checkerv2._0.Program call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) call System.Runtime.CompilerServices.CallSiteBinder Microsoft.CSharp.RuntimeBinder.Binder::Convert(Microsoft.CSharp.RuntimeBinder.CSharpBinderFlags,System.Type,System.Type) call System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Range>> System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Range>>::Create(System.Runtime.CompilerServices.CallSiteBinder) stsfld System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Range>> Checkerv2._0.Program/<>o__0::<>p__1 ldsfld System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Range>> Checkerv2._0.Program/<>o__0::<>p__1 ldfld System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Range> System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Range>>::Target ldsfld System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Range>> Checkerv2._0.Program/<>o__0::<>p__1 ldloc.s V_19 callvirt Microsoft.Office.Interop.Excel.Range Microsoft.Office.Interop.Excel._Worksheet::get_Cells() ldc.i4.1 <null> box System.Int32 ldloc.s V_22 ldc.i4.1 <null> add <null> box System.Int32 callvirt System.Object Microsoft.Office.Interop.Excel.Range::get__Default(System.Object,System.Object) callvirt Microsoft.Office.Interop.Excel.Range System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Range>::Invoke(System.Runtime.CompilerServices.CallSite,System.Object) dup <null> callvirt Microsoft.Office.Interop.Excel.Font Microsoft.Office.Interop.Excel.Range::get_Font() ldc.i4.1 <null> box System.Boolean callvirt System.Void Microsoft.Office.Interop.Excel.Font::set_Bold(System.Object) ldc.i4.1 <null> box Microsoft.Office.Interop.Excel.XlLineStyle ldc.i4.2 <null> ldc.i4 -4105 ldsfld System.Object System.Type::Missing ldsfld System.Object System.Type::Missing callvirt System.Object Microsoft.Office.Interop.Excel.Range::BorderAround2(System.Object,Microsoft.Office.Interop.Excel.XlBorderWeight,Microsoft.Office.Interop.Excel.XlColorIndex,System.Object,System.Object) pop <null> ldloc.s V_22 ldc.i4.1 <null> add <null> stloc.s V_22 ldloc.s V_22 ldloc.s V_20 ldlen <null> conv.i4 <null> blt IL_0534: ldloc.s V_19 ldc.i4.2 <null> stloc.s V_21 ldloc.2 <null> callvirt System.Collections.Generic.List`1/Enumerator<Checkerv2._0.ObjectInfo> System.Collections.Generic.List`1<Checkerv2._0.ObjectInfo>::GetEnumerator() stloc.s V_8 br IL_084D: ldloca.s V_8 ldloca.s V_8 call Checkerv2._0.ObjectInfo System.Collections.Generic.List`1/Enumerator<Checkerv2._0.ObjectInfo>::get_Current() stloc.s V_23 ldstr stloc.s V_24 ldloc.s V_23 callvirt System.Collections.Generic.List`1<System.String> Checkerv2._0.ObjectInfo::get_CLSIDs() brfalse.s IL_0629: ldloc.s V_23 ldstr ; ldloc.s V_23 callvirt System.Collections.Generic.List`1<System.String> Checkerv2._0.ObjectInfo::get_CLSIDs() call System.String System.String::Join(System.String,System.Collections.Generic.IEnumerable`1<System.String>) stloc.s V_24 ldloc.s V_23 callvirt System.Collections.Generic.List`1<Checkerv2._0.SDInfo> Checkerv2._0.ObjectInfo::get_LaunchInfo() callvirt System.Int32 System.Collections.Generic.List`1<Checkerv2._0.SDInfo>::get_Count() ldloc.s V_23 callvirt System.Collections.Generic.List`1<Checkerv2._0.SDInfo> Checkerv2._0.ObjectInfo::get_AccessInfo() callvirt System.Int32 System.Collections.Generic.List`1<Checkerv2._0.SDInfo>::get_Count() call System.Int32 System.Math::Max(System.Int32,System.Int32) stloc.s V_25 ldc.i4.0 <null> stloc.s V_26 br IL_0844: ldloc.s V_26 ldloc.s V_26 ldloc.s V_23 callvirt System.Collections.Generic.List`1<Checkerv2._0.SDInfo> Checkerv2._0.ObjectInfo::get_LaunchInfo() callvirt System.Int32 System.Collections.Generic.List`1<Checkerv2._0.SDInfo>::get_Count() blt.s IL_0663: ldloc.s V_23 ldnull <null> br.s IL_0671: stloc.s V_27 ldloc.s V_23 callvirt System.Collections.Generic.List`1<Checkerv2._0.SDInfo> Checkerv2._0.ObjectInfo::get_LaunchInfo() ldloc.s V_26 callvirt Checkerv2._0.SDInfo System.Collections.Generic.List`1<Checkerv2._0.SDInfo>::get_Item(System.Int32) stloc.s V_27 ldloc.s V_26 ldloc.s V_23 callvirt System.Collections.Generic.List`1<Checkerv2._0.SDInfo> Checkerv2._0.ObjectInfo::get_AccessInfo() callvirt System.Int32 System.Collections.Generic.List`1<Checkerv2._0.SDInfo>::get_Count() blt.s IL_0686: ldloc.s V_23 ldnull <null> br.s IL_0694: stloc.s V_28 ldloc.s V_23 callvirt System.Collections.Generic.List`1<Checkerv2._0.SDInfo> Checkerv2._0.ObjectInfo::get_AccessInfo() ldloc.s V_26 callvirt Checkerv2._0.SDInfo System.Collections.Generic.List`1<Checkerv2._0.SDInfo>::get_Item(System.Int32) stloc.s V_28 ldc.i4.s 14 newarr System.Object dup <null> ldc.i4.0 <null> ldloc.s V_23 callvirt System.String Checkerv2._0.ObjectInfo::get_ApplicationID() stelem.ref <null> dup <null> ldc.i4.1 <null> ldloc.s V_23 callvirt System.String Checkerv2._0.ObjectInfo::get_ApplicationName() stelem.ref <null> dup <null> ldc.i4.2 <null> ldloc.s V_23 callvirt System.String Checkerv2._0.ObjectInfo::get_RunAs() stelem.ref <null> dup <null> ldc.i4.3 <null> ldloc.s V_27 brtrue.s IL_06C8: ldstr ". " ldstr br.s IL_06D9: stelem.ref ldstr . ldloc.s V_27 callvirt System.Collections.Generic.List`1<System.String> Checkerv2._0.SDInfo::get_Access() call System.String System.String::Join(System.String,System.Collections.Generic.IEnumerable`1<System.String>) stelem.ref <null> dup <null> ldc.i4.4 <null> ldloc.s V_27 brtrue.s IL_06E7: ldloc.s V_27 ldstr br.s IL_06EE: stelem.ref ldloc.s V_27 callvirt System.String Checkerv2._0.SDInfo::get_Type() stelem.ref <null> dup <null> ldc.i4.5 <null> ldloc.s V_27 brtrue.s IL_06FC: ldloc.s V_27 ldstr br.s IL_0703: stelem.ref ldloc.s V_27 callvirt System.String Checkerv2._0.SDInfo::get_Principal() stelem.ref <null> dup <null> ldc.i4.6 <null> ldloc.s V_27 brtrue.s IL_0711: ldloc.s V_27 ldstr br.s IL_071D: stelem.ref ldloc.s V_27 callvirt System.Security.Principal.SecurityIdentifier Checkerv2._0.SDInfo::get_SID() callvirt System.String System.Object::ToString() stelem.ref <null> dup <null> ldc.i4.7 <null> ldloc.s V_28 brtrue.s IL_072B: ldstr ". " ldstr br.s IL_073C: stelem.ref ldstr . ldloc.s V_28 callvirt System.Collections.Generic.List`1<System.String> Checkerv2._0.SDInfo::get_Access() call System.String System.String::Join(System.String,System.Collections.Generic.IEnumerable`1<System.String>) stelem.ref <null> dup <null> ldc.i4.8 <null> ldloc.s V_28 brtrue.s IL_074A: ldloc.s V_28 ldstr br.s IL_0751: stelem.ref ldloc.s V_28 callvirt System.String Checkerv2._0.SDInfo::get_Type() stelem.ref <null> dup <null> ldc.i4.s 9 ldloc.s V_28 brtrue.s IL_0760: ldloc.s V_28 ldstr br.s IL_0767: stelem.ref ldloc.s V_28 callvirt System.String Checkerv2._0.SDInfo::get_Principal() stelem.ref <null> dup <null> ldc.i4.s 10 ldloc.s V_28 brtrue.s IL_0776: ldloc.s V_28 ldstr br.s IL_0782: stelem.ref ldloc.s V_28 callvirt System.Security.Principal.SecurityIdentifier Checkerv2._0.SDInfo::get_SID() callvirt System.String System.Object::ToString() stelem.ref <null> dup <null> ldc.i4.s 11 ldloc.s V_23 callvirt System.String Checkerv2._0.ObjectInfo::get_AuthLevel() stelem.ref <null> dup <null> ldc.i4.s 12 ldloc.s V_23 callvirt System.String Checkerv2._0.ObjectInfo::get_ImpLevel() stelem.ref <null> dup <null> ldc.i4.s 13 ldloc.s V_24 stelem.ref <null> stloc.s V_29 ldc.i4.0 <null> stloc.s V_30 br IL_082D: ldloc.s V_30 ldloc.s V_19 callvirt Microsoft.Office.Interop.Excel.Range Microsoft.Office.Interop.Excel._Worksheet::get_Cells() ldloc.s V_21 box System.Int32 ldloc.s V_30 ldc.i4.1 <null> add <null> box System.Int32 ldloc.s V_29 ldloc.s V_30 ldelem.ref <null> callvirt System.Void Microsoft.Office.Interop.Excel.Range::set__Default(System.Object,System.Object,System.Object) ldsfld System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Range>> Checkerv2._0.Program/<>o__0::<>p__2 brtrue.s IL_07F6: ldsfld System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Range>> Checkerv2._0.Program/<>o__0::<>p__2 ldc.i4.s 16 ldtoken Microsoft.Office.Interop.Excel.Range call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) ldtoken Checkerv2._0.Program call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) call System.Runtime.CompilerServices.CallSiteBinder Microsoft.CSharp.RuntimeBinder.Binder::Convert(Microsoft.CSharp.RuntimeBinder.CSharpBinderFlags,System.Type,System.Type) call System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Range>> System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Range>>::Create(System.Runtime.CompilerServices.CallSiteBinder) stsfld System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Range>> Checkerv2._0.Program/<>o__0::<>p__2 ldsfld System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Range>> Checkerv2._0.Program/<>o__0::<>p__2 ldfld System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Range> System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Range>>::Target ldsfld System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Range>> Checkerv2._0.Program/<>o__0::<>p__2 ldloc.s V_19 callvirt Microsoft.Office.Interop.Excel.Range Microsoft.Office.Interop.Excel._Worksheet::get_Cells() ldloc.s V_21 box System.Int32 ldloc.s V_30 ldc.i4.1 <null> add <null> box System.Int32 callvirt System.Object Microsoft.Office.Interop.Excel.Range::get__Default(System.Object,System.Object) callvirt Microsoft.Office.Interop.Excel.Range System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Range>::Invoke(System.Runtime.CompilerServices.CallSite,System.Object) pop <null> ldloc.s V_30 ldc.i4.1 <null> add <null> stloc.s V_30 ldloc.s V_30 ldloc.s V_29 ldlen <null> conv.i4 <null> blt IL_07A9: ldloc.s V_19 ldloc.s V_21 ldc.i4.1 <null> add <null> stloc.s V_21 ldloc.s V_26 ldc.i4.1 <null> add <null> stloc.s V_26 ldloc.s V_26 ldloc.s V_25 blt IL_0650: ldloc.s V_26 ldloca.s V_8 call System.Boolean System.Collections.Generic.List`1/Enumerator<Checkerv2._0.ObjectInfo>::MoveNext() brtrue IL_05FD: ldloca.s V_8 leave.s IL_0869: ldloc.s V_18 ldloca.s V_8 constrained. System.Collections.Generic.List`1/Enumerator<Checkerv2._0.ObjectInfo> callvirt System.Void System.IDisposable::Dispose() endfinally <null> ldloc.s V_18 ldloc.s V_16 ldsfld System.Object System.Type::Missing ldsfld System.Object System.Type::Missing ldsfld System.Object System.Type::Missing ldsfld System.Object System.Type::Missing ldsfld System.Object System.Type::Missing ldc.i4.1 <null> ldsfld System.Object System.Type::Missing ldsfld System.Object System.Type::Missing ldsfld System.Object System.Type::Missing ldsfld System.Object System.Type::Missing ldsfld System.Object System.Type::Missing callvirt System.Void Microsoft.Office.Interop.Excel._Workbook::SaveAs(System.Object,System.Object,System.Object,System.Object,System.Object,System.Object,Microsoft.Office.Interop.Excel.XlSaveAsAccessMode,System.Object,System.Object,System.Object,System.Object,System.Object) ldloc.s V_18 ldc.i4.0 <null> box System.Boolean ldsfld System.Reflection.Missing System.Reflection.Missing::Value ldsfld System.Reflection.Missing System.Reflection.Missing::Value callvirt System.Void Microsoft.Office.Interop.Excel._Workbook::Close(System.Object,System.Object,System.Object) ldloc.s V_17 callvirt System.Void Microsoft.Office.Interop.Excel._Application::Quit() leave.s IL_08EB: ldstr "[+] Success" ldstr [-] Do you have Excel? :D call System.Void System.Console::WriteLine(System.String) callvirt System.String System.Exception::get_Message() call System.Void System.Console::WriteLine(System.String) leave.s IL_08EB: ldstr "[+] Success" ldstr [-] Invalid format ldloc.0 <null> call System.String System.String::Concat(System.String,System.String) call System.Void System.Console::WriteLine(System.String) ldstr [+] Success call System.Void System.Console::WriteLine(System.String) ret <null>

Module Name

Checkerv2.0.exe

Full Name

Checkerv2.0.exe

EntryPoint

System.Void Checkerv2._0.Program::Main(System.String[])

Scope Name

Checkerv2.0.exe

Scope Type

ModuleDef

Kind

Console

Runtime Version

v4.0.30319

Tables Header Version

512

WinMD Version

<null>

Assembly Name

Checkerv2.0

Assembly Version

1.0.0.0

Assembly Culture

<null>

Has PublicKey

False

PublicKey Token

<null>

Target Framework

.NETFramework,Version=v4.8

Total Strings

105

Main Method

System.Void Checkerv2._0.Program::Main(System.String[])

Main IL Instruction Count

798

Main IL

call System.Void Checkerv2._0.Program::ShowBanner() ldarg.0 <null> ldlen <null> brtrue.s IL_0013: ldstr "csv" ldstr [?] You didn't specify anything. Look Checker.exe -h call System.Void System.Console::WriteLine(System.String) ldstr csv stloc.0 <null> ldstr Output stloc.1 <null> ldarg.0 <null> ldsfld System.Func`3<System.String,System.Int32,<>f__AnonymousType0`2<System.Int32,System.String>> Checkerv2._0.Program/<>c::<>9__0_0 dup <null> brtrue.s IL_003F: call System.Collections.Generic.IEnumerable`1<<>f__AnonymousType0`2<System.Int32,System.String>> System.Linq.Enumerable::Select<System.String,<>f__AnonymousType0`2<System.Int32,System.String>>(System.Collections.Generic.IEnumerable`1<System.String>,System.Func`3<System.String,System.Int32,<>f__AnonymousType0`2<System.Int32,System.String>>) pop <null> ldsfld Checkerv2._0.Program/<>c Checkerv2._0.Program/<>c::<>9 ldftn <>f__AnonymousType0`2<System.Int32,System.String> Checkerv2._0.Program/<>c::<Main>b__0_0(System.String,System.Int32) newobj System.Void System.Func`3<System.String,System.Int32,<>f__AnonymousType0`2<System.Int32,System.String>>::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.Func`3<System.String,System.Int32,<>f__AnonymousType0`2<System.Int32,System.String>> Checkerv2._0.Program/<>c::<>9__0_0 call System.Collections.Generic.IEnumerable`1<<>f__AnonymousType0`2<System.Int32,System.String>> System.Linq.Enumerable::Select<System.String,<>f__AnonymousType0`2<System.Int32,System.String>>(System.Collections.Generic.IEnumerable`1<System.String>,System.Func`3<System.String,System.Int32,<>f__AnonymousType0`2<System.Int32,System.String>>) callvirt System.Collections.Generic.IEnumerator`1<<>f__AnonymousType0`2<System.Int32,System.String>> System.Collections.Generic.IEnumerable`1<<>f__AnonymousType0`2<System.Int32,System.String>>::GetEnumerator() stloc.3 <null> br IL_00D4: ldloc.3 ldloc.3 <null> callvirt <>f__AnonymousType0`2<System.Int32,System.String> System.Collections.Generic.IEnumerator`1<<>f__AnonymousType0`2<System.Int32,System.String>>::get_Current() stloc.s V_4 ldloc.s V_4 callvirt System.String <>f__AnonymousType0`2<System.Int32,System.String>::get_value() callvirt System.String System.String::ToLower() stloc.s V_5 ldloc.s V_5 ldstr -outformat call System.Boolean System.String::op_Equality(System.String,System.String) brtrue.s IL_00AD: ldarg.0 ldloc.s V_5 ldstr -outfile call System.Boolean System.String::op_Equality(System.String,System.String) brtrue.s IL_00BB: ldarg.0 ldloc.s V_5 ldstr -showtable call System.Boolean System.String::op_Equality(System.String,System.String) brtrue.s IL_00D4: ldloc.3 ldloc.s V_5 ldstr -h call System.Boolean System.String::op_Equality(System.String,System.String) brtrue.s IL_00C9: call System.Void Checkerv2._0.Program::ShowHelp() ldloc.s V_5 ldstr --help call System.Boolean System.String::op_Equality(System.String,System.String) brtrue.s IL_00C9: call System.Void Checkerv2._0.Program::ShowHelp() br.s IL_00D4: ldloc.3 ldarg.0 <null> ldloc.s V_4 callvirt System.Int32 <>f__AnonymousType0`2<System.Int32,System.String>::get_index() ldc.i4.1 <null> add <null> ldelem.ref <null> stloc.0 <null> br.s IL_00D4: ldloc.3 ldarg.0 <null> ldloc.s V_4 callvirt System.Int32 <>f__AnonymousType0`2<System.Int32,System.String>::get_index() ldc.i4.1 <null> add <null> ldelem.ref <null> stloc.1 <null> br.s IL_00D4: ldloc.3 call System.Void Checkerv2._0.Program::ShowHelp() ldc.i4.0 <null> call System.Void System.Environment::Exit(System.Int32) ldloc.3 <null> callvirt System.Boolean System.Collections.IEnumerator::MoveNext() brtrue IL_004F: ldloc.3 leave.s IL_00EB: ldstr "[+] Result will be in " ldloc.3 <null> brfalse.s IL_00EA: endfinally ldloc.3 <null> callvirt System.Void System.IDisposable::Dispose() endfinally <null> ldstr [+] Result will be in ldloc.1 <null> ldstr , format ldloc.0 <null> call System.String System.String::Concat(System.String,System.String,System.String,System.String) call System.Void System.Console::WriteLine(System.String) call System.Collections.Generic.List`1<Checkerv2._0.ObjectInfo> Checkerv2._0.Parser::GetDCOMObjects() stloc.2 <null> ldloc.0 <null> ldstr csv call System.Boolean System.String::op_Equality(System.String,System.String) brtrue.s IL_0129: nop ldloc.0 <null> ldstr xlsx call System.Boolean System.String::op_Equality(System.String,System.String) brtrue IL_03FE: nop br IL_08DB: ldstr "[-] Invalid format " nop <null> call System.AppDomain System.AppDomain::get_CurrentDomain() callvirt System.String System.AppDomain::get_BaseDirectory() ldloc.1 <null> ldstr . ldloc.0 <null> call System.String System.String::Concat(System.String,System.String,System.String) call System.String System.IO.Path::Combine(System.String,System.String) ldc.i4.0 <null> call System.Text.Encoding System.Text.Encoding::get_UTF8() newobj System.Void System.IO.StreamWriter::.ctor(System.String,System.Boolean,System.Text.Encoding) stloc.s V_6 ldc.i4.s 14 newarr System.String dup <null> ldc.i4.0 <null> ldstr ApplicationID stelem.ref <null> dup <null> ldc.i4.1 <null> ldstr ApplicationName stelem.ref <null> dup <null> ldc.i4.2 <null> ldstr RunAs stelem.ref <null> dup <null> ldc.i4.3 <null> ldstr LaunchAccess stelem.ref <null> dup <null> ldc.i4.4 <null> ldstr LaunchType stelem.ref <null> dup <null> ldc.i4.5 <null> ldstr LaunchPrincipal stelem.ref <null> dup <null> ldc.i4.6 <null> ldstr LaunchSID stelem.ref <null> dup <null> ldc.i4.7 <null> ldstr AccessAccess stelem.ref <null> dup <null> ldc.i4.8 <null> ldstr AccessType stelem.ref <null> dup <null> ldc.i4.s 9 ldstr AccessPrincipal stelem.ref <null> dup <null> ldc.i4.s 10 ldstr AccessSID stelem.ref <null> dup <null> ldc.i4.s 11 ldstr AuthLevel stelem.ref <null> dup <null> ldc.i4.s 12 ldstr ImpLevel stelem.ref <null> dup <null> ldc.i4.s 13 ldstr CLSIDs stelem.ref <null> stloc.s V_7 ldloc.s V_6 ldstr , ldloc.s V_7 call System.String System.String::Join(System.String,System.String[]) callvirt System.Void System.IO.TextWriter::WriteLine(System.String) ldloc.2 <null> callvirt System.Collections.Generic.List`1/Enumerator<Checkerv2._0.ObjectInfo> System.Collections.Generic.List`1<Checkerv2._0.ObjectInfo>::GetEnumerator() stloc.s V_8 br IL_03B6: ldloca.s V_8 ldloca.s V_8 call Checkerv2._0.ObjectInfo System.Collections.Generic.List`1/Enumerator<Checkerv2._0.ObjectInfo>::get_Current() stloc.s V_9 ldstr stloc.s V_10 ldloc.s V_9 callvirt System.Collections.Generic.List`1<System.String> Checkerv2._0.ObjectInfo::get_CLSIDs() brfalse.s IL_021C: ldloc.s V_9 ldstr ; ldloc.s V_9 callvirt System.Collections.Generic.List`1<System.String> Checkerv2._0.ObjectInfo::get_CLSIDs() call System.String System.String::Join(System.String,System.Collections.Generic.IEnumerable`1<System.String>) stloc.s V_10 ldloc.s V_9 callvirt System.Collections.Generic.List`1<Checkerv2._0.SDInfo> Checkerv2._0.ObjectInfo::get_LaunchInfo() callvirt System.Int32 System.Collections.Generic.List`1<Checkerv2._0.SDInfo>::get_Count() ldloc.s V_9 callvirt System.Collections.Generic.List`1<Checkerv2._0.SDInfo> Checkerv2._0.ObjectInfo::get_AccessInfo() callvirt System.Int32 System.Collections.Generic.List`1<Checkerv2._0.SDInfo>::get_Count() call System.Int32 System.Math::Max(System.Int32,System.Int32) stloc.s V_11 ldc.i4.0 <null> stloc.s V_12 br IL_03AD: ldloc.s V_12 ldloc.s V_12 ldloc.s V_9 callvirt System.Collections.Generic.List`1<Checkerv2._0.SDInfo> Checkerv2._0.ObjectInfo::get_LaunchInfo() callvirt System.Int32 System.Collections.Generic.List`1<Checkerv2._0.SDInfo>::get_Count() blt.s IL_0256: ldloc.s V_9 ldnull <null> br.s IL_0264: stloc.s V_13 ldloc.s V_9 callvirt System.Collections.Generic.List`1<Checkerv2._0.SDInfo> Checkerv2._0.ObjectInfo::get_LaunchInfo() ldloc.s V_12 callvirt Checkerv2._0.SDInfo System.Collections.Generic.List`1<Checkerv2._0.SDInfo>::get_Item(System.Int32) stloc.s V_13 ldloc.s V_12 ldloc.s V_9 callvirt System.Collections.Generic.List`1<Checkerv2._0.SDInfo> Checkerv2._0.ObjectInfo::get_AccessInfo() callvirt System.Int32 System.Collections.Generic.List`1<Checkerv2._0.SDInfo>::get_Count() blt.s IL_0279: ldloc.s V_9 ldnull <null> br.s IL_0287: stloc.s V_14 ldloc.s V_9 callvirt System.Collections.Generic.List`1<Checkerv2._0.SDInfo> Checkerv2._0.ObjectInfo::get_AccessInfo() ldloc.s V_12 callvirt Checkerv2._0.SDInfo System.Collections.Generic.List`1<Checkerv2._0.SDInfo>::get_Item(System.Int32) stloc.s V_14 ldc.i4.s 14 newarr System.String dup <null> ldc.i4.0 <null> ldloc.s V_9 callvirt System.String Checkerv2._0.ObjectInfo::get_ApplicationID() stelem.ref <null> dup <null> ldc.i4.1 <null> ldloc.s V_9 callvirt System.String Checkerv2._0.ObjectInfo::get_ApplicationName() stelem.ref <null> dup <null> ldc.i4.2 <null> ldloc.s V_9 callvirt System.String Checkerv2._0.ObjectInfo::get_RunAs() stelem.ref <null> dup <null> ldc.i4.3 <null> ldloc.s V_13 brtrue.s IL_02BB: ldstr ". " ldstr br.s IL_02CC: stelem.ref ldstr . ldloc.s V_13 callvirt System.Collections.Generic.List`1<System.String> Checkerv2._0.SDInfo::get_Access() call System.String System.String::Join(System.String,System.Collections.Generic.IEnumerable`1<System.String>) stelem.ref <null> dup <null> ldc.i4.4 <null> ldloc.s V_13 brtrue.s IL_02DA: ldloc.s V_13 ldstr br.s IL_02E1: stelem.ref ldloc.s V_13 callvirt System.String Checkerv2._0.SDInfo::get_Type() stelem.ref <null> dup <null> ldc.i4.5 <null> ldloc.s V_13 brtrue.s IL_02EF: ldloc.s V_13 ldstr br.s IL_02F6: stelem.ref ldloc.s V_13 callvirt System.String Checkerv2._0.SDInfo::get_Principal() stelem.ref <null> dup <null> ldc.i4.6 <null> ldloc.s V_13 brtrue.s IL_0304: ldloc.s V_13 ldstr br.s IL_0310: stelem.ref ldloc.s V_13 callvirt System.Security.Principal.SecurityIdentifier Checkerv2._0.SDInfo::get_SID() callvirt System.String System.Object::ToString() stelem.ref <null> dup <null> ldc.i4.7 <null> ldloc.s V_14 brtrue.s IL_031E: ldstr ". " ldstr br.s IL_032F: stelem.ref ldstr . ldloc.s V_14 callvirt System.Collections.Generic.List`1<System.String> Checkerv2._0.SDInfo::get_Access() call System.String System.String::Join(System.String,System.Collections.Generic.IEnumerable`1<System.String>) stelem.ref <null> dup <null> ldc.i4.8 <null> ldloc.s V_14 brtrue.s IL_033D: ldloc.s V_14 ldstr br.s IL_0344: stelem.ref ldloc.s V_14 callvirt System.String Checkerv2._0.SDInfo::get_Type() stelem.ref <null> dup <null> ldc.i4.s 9 ldloc.s V_14 brtrue.s IL_0353: ldloc.s V_14 ldstr br.s IL_035A: stelem.ref ldloc.s V_14 callvirt System.String Checkerv2._0.SDInfo::get_Principal() stelem.ref <null> dup <null> ldc.i4.s 10 ldloc.s V_14 brtrue.s IL_0369: ldloc.s V_14 ldstr br.s IL_0375: stelem.ref ldloc.s V_14 callvirt System.Security.Principal.SecurityIdentifier Checkerv2._0.SDInfo::get_SID() callvirt System.String System.Object::ToString() stelem.ref <null> dup <null> ldc.i4.s 11 ldloc.s V_9 callvirt System.String Checkerv2._0.ObjectInfo::get_AuthLevel() stelem.ref <null> dup <null> ldc.i4.s 12 ldloc.s V_9 callvirt System.String Checkerv2._0.ObjectInfo::get_ImpLevel() stelem.ref <null> dup <null> ldc.i4.s 13 ldloc.s V_10 stelem.ref <null> stloc.s V_15 ldloc.s V_6 ldstr , ldloc.s V_15 call System.String System.String::Join(System.String,System.String[]) callvirt System.Void System.IO.TextWriter::WriteLine(System.String) ldloc.s V_12 ldc.i4.1 <null> add <null> stloc.s V_12 ldloc.s V_12 ldloc.s V_11 blt IL_0243: ldloc.s V_12 ldloca.s V_8 call System.Boolean System.Collections.Generic.List`1/Enumerator<Checkerv2._0.ObjectInfo>::MoveNext() brtrue IL_01F0: ldloca.s V_8 leave.s IL_03D2: leave.s IL_03E0 ldloca.s V_8 constrained. System.Collections.Generic.List`1/Enumerator<Checkerv2._0.ObjectInfo> callvirt System.Void System.IDisposable::Dispose() endfinally <null> leave.s IL_03E0: leave IL_08EB ldloc.s V_6 brfalse.s IL_03DF: endfinally ldloc.s V_6 callvirt System.Void System.IDisposable::Dispose() endfinally <null> leave IL_08EB: ldstr "[+] Success" ldstr [-] Could not write to CSV file. call System.Void System.Console::WriteLine(System.String) callvirt System.String System.Exception::get_Message() call System.Void System.Console::WriteLine(System.String) leave IL_08EB: ldstr "[+] Success" nop <null> call System.AppDomain System.AppDomain::get_CurrentDomain() callvirt System.String System.AppDomain::get_BaseDirectory() ldloc.1 <null> ldstr . ldloc.0 <null> call System.String System.String::Concat(System.String,System.String,System.String) call System.String System.IO.Path::Combine(System.String,System.String) stloc.s V_16 ldstr 00024500-0000-0000-C000-000000000046 newobj System.Void System.Guid::.ctor(System.String) call System.Type System.Runtime.InteropServices.Marshal::GetTypeFromCLSID(System.Guid) call System.Object System.Activator::CreateInstance(System.Type) castclass Microsoft.Office.Interop.Excel.Application stloc.s V_17 ldloc.s V_17 ldc.i4.0 <null> callvirt System.Void Microsoft.Office.Interop.Excel._Application::set_Visible(System.Boolean) ldloc.s V_17 ldc.i4.0 <null> callvirt System.Void Microsoft.Office.Interop.Excel._Application::set_DisplayAlerts(System.Boolean) ldloc.s V_17 callvirt Microsoft.Office.Interop.Excel.Workbooks Microsoft.Office.Interop.Excel._Application::get_Workbooks() ldsfld System.Reflection.Missing System.Reflection.Missing::Value callvirt Microsoft.Office.Interop.Excel.Workbook Microsoft.Office.Interop.Excel.Workbooks::Add(System.Object) stloc.s V_18 ldsfld System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Worksheet>> Checkerv2._0.Program/<>o__0::<>p__0 brtrue.s IL_0486: ldsfld System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Worksheet>> Checkerv2._0.Program/<>o__0::<>p__0 ldc.i4.s 16 ldtoken Microsoft.Office.Interop.Excel.Worksheet call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) ldtoken Checkerv2._0.Program call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) call System.Runtime.CompilerServices.CallSiteBinder Microsoft.CSharp.RuntimeBinder.Binder::Convert(Microsoft.CSharp.RuntimeBinder.CSharpBinderFlags,System.Type,System.Type) call System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Worksheet>> System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Worksheet>>::Create(System.Runtime.CompilerServices.CallSiteBinder) stsfld System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Worksheet>> Checkerv2._0.Program/<>o__0::<>p__0 ldsfld System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Worksheet>> Checkerv2._0.Program/<>o__0::<>p__0 ldfld System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Worksheet> System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Worksheet>>::Target ldsfld System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Worksheet>> Checkerv2._0.Program/<>o__0::<>p__0 ldloc.s V_18 callvirt Microsoft.Office.Interop.Excel.Sheets Microsoft.Office.Interop.Excel._Workbook::get_Worksheets() ldc.i4.1 <null> box System.Int32 callvirt System.Object Microsoft.Office.Interop.Excel.Sheets::get__Default(System.Object) callvirt Microsoft.Office.Interop.Excel.Worksheet System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Worksheet>::Invoke(System.Runtime.CompilerServices.CallSite,System.Object) stloc.s V_19 ldc.i4.s 14 newarr System.String dup <null> ldc.i4.0 <null> ldstr ApplicationID stelem.ref <null> dup <null> ldc.i4.1 <null> ldstr ApplicationName stelem.ref <null> dup <null> ldc.i4.2 <null> ldstr RunAs stelem.ref <null> dup <null> ldc.i4.3 <null> ldstr LaunchAccess stelem.ref <null> dup <null> ldc.i4.4 <null> ldstr LaunchType stelem.ref <null> dup <null> ldc.i4.5 <null> ldstr LaunchPrincipal stelem.ref <null> dup <null> ldc.i4.6 <null> ldstr LaunchSID stelem.ref <null> dup <null> ldc.i4.7 <null> ldstr AccessAccess stelem.ref <null> dup <null> ldc.i4.8 <null> ldstr AccessType stelem.ref <null> dup <null> ldc.i4.s 9 ldstr AccessPrincipal stelem.ref <null> dup <null> ldc.i4.s 10 ldstr AccessSID stelem.ref <null> dup <null> ldc.i4.s 11 ldstr AuthLevel stelem.ref <null> dup <null> ldc.i4.s 12 ldstr ImpLevel stelem.ref <null> dup <null> ldc.i4.s 13 ldstr CLSIDs stelem.ref <null> stloc.s V_20 ldc.i4.0 <null> stloc.s V_22 br IL_05E2: ldloc.s V_22 ldloc.s V_19 callvirt Microsoft.Office.Interop.Excel.Range Microsoft.Office.Interop.Excel._Worksheet::get_Cells() ldc.i4.1 <null> box System.Int32 ldloc.s V_22 ldc.i4.1 <null> add <null> box System.Int32 ldloc.s V_20 ldloc.s V_22 ldelem.ref <null> callvirt System.Void Microsoft.Office.Interop.Excel.Range::set__Default(System.Object,System.Object,System.Object) ldsfld System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Range>> Checkerv2._0.Program/<>o__0::<>p__1 brtrue.s IL_0580: ldsfld System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Range>> Checkerv2._0.Program/<>o__0::<>p__1 ldc.i4.s 16 ldtoken Microsoft.Office.Interop.Excel.Range call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) ldtoken Checkerv2._0.Program call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) call System.Runtime.CompilerServices.CallSiteBinder Microsoft.CSharp.RuntimeBinder.Binder::Convert(Microsoft.CSharp.RuntimeBinder.CSharpBinderFlags,System.Type,System.Type) call System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Range>> System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Range>>::Create(System.Runtime.CompilerServices.CallSiteBinder) stsfld System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Range>> Checkerv2._0.Program/<>o__0::<>p__1 ldsfld System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Range>> Checkerv2._0.Program/<>o__0::<>p__1 ldfld System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Range> System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Range>>::Target ldsfld System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Range>> Checkerv2._0.Program/<>o__0::<>p__1 ldloc.s V_19 callvirt Microsoft.Office.Interop.Excel.Range Microsoft.Office.Interop.Excel._Worksheet::get_Cells() ldc.i4.1 <null> box System.Int32 ldloc.s V_22 ldc.i4.1 <null> add <null> box System.Int32 callvirt System.Object Microsoft.Office.Interop.Excel.Range::get__Default(System.Object,System.Object) callvirt Microsoft.Office.Interop.Excel.Range System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Range>::Invoke(System.Runtime.CompilerServices.CallSite,System.Object) dup <null> callvirt Microsoft.Office.Interop.Excel.Font Microsoft.Office.Interop.Excel.Range::get_Font() ldc.i4.1 <null> box System.Boolean callvirt System.Void Microsoft.Office.Interop.Excel.Font::set_Bold(System.Object) ldc.i4.1 <null> box Microsoft.Office.Interop.Excel.XlLineStyle ldc.i4.2 <null> ldc.i4 -4105 ldsfld System.Object System.Type::Missing ldsfld System.Object System.Type::Missing callvirt System.Object Microsoft.Office.Interop.Excel.Range::BorderAround2(System.Object,Microsoft.Office.Interop.Excel.XlBorderWeight,Microsoft.Office.Interop.Excel.XlColorIndex,System.Object,System.Object) pop <null> ldloc.s V_22 ldc.i4.1 <null> add <null> stloc.s V_22 ldloc.s V_22 ldloc.s V_20 ldlen <null> conv.i4 <null> blt IL_0534: ldloc.s V_19 ldc.i4.2 <null> stloc.s V_21 ldloc.2 <null> callvirt System.Collections.Generic.List`1/Enumerator<Checkerv2._0.ObjectInfo> System.Collections.Generic.List`1<Checkerv2._0.ObjectInfo>::GetEnumerator() stloc.s V_8 br IL_084D: ldloca.s V_8 ldloca.s V_8 call Checkerv2._0.ObjectInfo System.Collections.Generic.List`1/Enumerator<Checkerv2._0.ObjectInfo>::get_Current() stloc.s V_23 ldstr stloc.s V_24 ldloc.s V_23 callvirt System.Collections.Generic.List`1<System.String> Checkerv2._0.ObjectInfo::get_CLSIDs() brfalse.s IL_0629: ldloc.s V_23 ldstr ; ldloc.s V_23 callvirt System.Collections.Generic.List`1<System.String> Checkerv2._0.ObjectInfo::get_CLSIDs() call System.String System.String::Join(System.String,System.Collections.Generic.IEnumerable`1<System.String>) stloc.s V_24 ldloc.s V_23 callvirt System.Collections.Generic.List`1<Checkerv2._0.SDInfo> Checkerv2._0.ObjectInfo::get_LaunchInfo() callvirt System.Int32 System.Collections.Generic.List`1<Checkerv2._0.SDInfo>::get_Count() ldloc.s V_23 callvirt System.Collections.Generic.List`1<Checkerv2._0.SDInfo> Checkerv2._0.ObjectInfo::get_AccessInfo() callvirt System.Int32 System.Collections.Generic.List`1<Checkerv2._0.SDInfo>::get_Count() call System.Int32 System.Math::Max(System.Int32,System.Int32) stloc.s V_25 ldc.i4.0 <null> stloc.s V_26 br IL_0844: ldloc.s V_26 ldloc.s V_26 ldloc.s V_23 callvirt System.Collections.Generic.List`1<Checkerv2._0.SDInfo> Checkerv2._0.ObjectInfo::get_LaunchInfo() callvirt System.Int32 System.Collections.Generic.List`1<Checkerv2._0.SDInfo>::get_Count() blt.s IL_0663: ldloc.s V_23 ldnull <null> br.s IL_0671: stloc.s V_27 ldloc.s V_23 callvirt System.Collections.Generic.List`1<Checkerv2._0.SDInfo> Checkerv2._0.ObjectInfo::get_LaunchInfo() ldloc.s V_26 callvirt Checkerv2._0.SDInfo System.Collections.Generic.List`1<Checkerv2._0.SDInfo>::get_Item(System.Int32) stloc.s V_27 ldloc.s V_26 ldloc.s V_23 callvirt System.Collections.Generic.List`1<Checkerv2._0.SDInfo> Checkerv2._0.ObjectInfo::get_AccessInfo() callvirt System.Int32 System.Collections.Generic.List`1<Checkerv2._0.SDInfo>::get_Count() blt.s IL_0686: ldloc.s V_23 ldnull <null> br.s IL_0694: stloc.s V_28 ldloc.s V_23 callvirt System.Collections.Generic.List`1<Checkerv2._0.SDInfo> Checkerv2._0.ObjectInfo::get_AccessInfo() ldloc.s V_26 callvirt Checkerv2._0.SDInfo System.Collections.Generic.List`1<Checkerv2._0.SDInfo>::get_Item(System.Int32) stloc.s V_28 ldc.i4.s 14 newarr System.Object dup <null> ldc.i4.0 <null> ldloc.s V_23 callvirt System.String Checkerv2._0.ObjectInfo::get_ApplicationID() stelem.ref <null> dup <null> ldc.i4.1 <null> ldloc.s V_23 callvirt System.String Checkerv2._0.ObjectInfo::get_ApplicationName() stelem.ref <null> dup <null> ldc.i4.2 <null> ldloc.s V_23 callvirt System.String Checkerv2._0.ObjectInfo::get_RunAs() stelem.ref <null> dup <null> ldc.i4.3 <null> ldloc.s V_27 brtrue.s IL_06C8: ldstr ". " ldstr br.s IL_06D9: stelem.ref ldstr . ldloc.s V_27 callvirt System.Collections.Generic.List`1<System.String> Checkerv2._0.SDInfo::get_Access() call System.String System.String::Join(System.String,System.Collections.Generic.IEnumerable`1<System.String>) stelem.ref <null> dup <null> ldc.i4.4 <null> ldloc.s V_27 brtrue.s IL_06E7: ldloc.s V_27 ldstr br.s IL_06EE: stelem.ref ldloc.s V_27 callvirt System.String Checkerv2._0.SDInfo::get_Type() stelem.ref <null> dup <null> ldc.i4.5 <null> ldloc.s V_27 brtrue.s IL_06FC: ldloc.s V_27 ldstr br.s IL_0703: stelem.ref ldloc.s V_27 callvirt System.String Checkerv2._0.SDInfo::get_Principal() stelem.ref <null> dup <null> ldc.i4.6 <null> ldloc.s V_27 brtrue.s IL_0711: ldloc.s V_27 ldstr br.s IL_071D: stelem.ref ldloc.s V_27 callvirt System.Security.Principal.SecurityIdentifier Checkerv2._0.SDInfo::get_SID() callvirt System.String System.Object::ToString() stelem.ref <null> dup <null> ldc.i4.7 <null> ldloc.s V_28 brtrue.s IL_072B: ldstr ". " ldstr br.s IL_073C: stelem.ref ldstr . ldloc.s V_28 callvirt System.Collections.Generic.List`1<System.String> Checkerv2._0.SDInfo::get_Access() call System.String System.String::Join(System.String,System.Collections.Generic.IEnumerable`1<System.String>) stelem.ref <null> dup <null> ldc.i4.8 <null> ldloc.s V_28 brtrue.s IL_074A: ldloc.s V_28 ldstr br.s IL_0751: stelem.ref ldloc.s V_28 callvirt System.String Checkerv2._0.SDInfo::get_Type() stelem.ref <null> dup <null> ldc.i4.s 9 ldloc.s V_28 brtrue.s IL_0760: ldloc.s V_28 ldstr br.s IL_0767: stelem.ref ldloc.s V_28 callvirt System.String Checkerv2._0.SDInfo::get_Principal() stelem.ref <null> dup <null> ldc.i4.s 10 ldloc.s V_28 brtrue.s IL_0776: ldloc.s V_28 ldstr br.s IL_0782: stelem.ref ldloc.s V_28 callvirt System.Security.Principal.SecurityIdentifier Checkerv2._0.SDInfo::get_SID() callvirt System.String System.Object::ToString() stelem.ref <null> dup <null> ldc.i4.s 11 ldloc.s V_23 callvirt System.String Checkerv2._0.ObjectInfo::get_AuthLevel() stelem.ref <null> dup <null> ldc.i4.s 12 ldloc.s V_23 callvirt System.String Checkerv2._0.ObjectInfo::get_ImpLevel() stelem.ref <null> dup <null> ldc.i4.s 13 ldloc.s V_24 stelem.ref <null> stloc.s V_29 ldc.i4.0 <null> stloc.s V_30 br IL_082D: ldloc.s V_30 ldloc.s V_19 callvirt Microsoft.Office.Interop.Excel.Range Microsoft.Office.Interop.Excel._Worksheet::get_Cells() ldloc.s V_21 box System.Int32 ldloc.s V_30 ldc.i4.1 <null> add <null> box System.Int32 ldloc.s V_29 ldloc.s V_30 ldelem.ref <null> callvirt System.Void Microsoft.Office.Interop.Excel.Range::set__Default(System.Object,System.Object,System.Object) ldsfld System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Range>> Checkerv2._0.Program/<>o__0::<>p__2 brtrue.s IL_07F6: ldsfld System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Range>> Checkerv2._0.Program/<>o__0::<>p__2 ldc.i4.s 16 ldtoken Microsoft.Office.Interop.Excel.Range call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) ldtoken Checkerv2._0.Program call System.Type System.Type::GetTypeFromHandle(System.RuntimeTypeHandle) call System.Runtime.CompilerServices.CallSiteBinder Microsoft.CSharp.RuntimeBinder.Binder::Convert(Microsoft.CSharp.RuntimeBinder.CSharpBinderFlags,System.Type,System.Type) call System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Range>> System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Range>>::Create(System.Runtime.CompilerServices.CallSiteBinder) stsfld System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Range>> Checkerv2._0.Program/<>o__0::<>p__2 ldsfld System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Range>> Checkerv2._0.Program/<>o__0::<>p__2 ldfld System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Range> System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Range>>::Target ldsfld System.Runtime.CompilerServices.CallSite`1<System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Range>> Checkerv2._0.Program/<>o__0::<>p__2 ldloc.s V_19 callvirt Microsoft.Office.Interop.Excel.Range Microsoft.Office.Interop.Excel._Worksheet::get_Cells() ldloc.s V_21 box System.Int32 ldloc.s V_30 ldc.i4.1 <null> add <null> box System.Int32 callvirt System.Object Microsoft.Office.Interop.Excel.Range::get__Default(System.Object,System.Object) callvirt Microsoft.Office.Interop.Excel.Range System.Func`3<System.Runtime.CompilerServices.CallSite,System.Object,Microsoft.Office.Interop.Excel.Range>::Invoke(System.Runtime.CompilerServices.CallSite,System.Object) pop <null> ldloc.s V_30 ldc.i4.1 <null> add <null> stloc.s V_30 ldloc.s V_30 ldloc.s V_29 ldlen <null> conv.i4 <null> blt IL_07A9: ldloc.s V_19 ldloc.s V_21 ldc.i4.1 <null> add <null> stloc.s V_21 ldloc.s V_26 ldc.i4.1 <null> add <null> stloc.s V_26 ldloc.s V_26 ldloc.s V_25 blt IL_0650: ldloc.s V_26 ldloca.s V_8 call System.Boolean System.Collections.Generic.List`1/Enumerator<Checkerv2._0.ObjectInfo>::MoveNext() brtrue IL_05FD: ldloca.s V_8 leave.s IL_0869: ldloc.s V_18 ldloca.s V_8 constrained. System.Collections.Generic.List`1/Enumerator<Checkerv2._0.ObjectInfo> callvirt System.Void System.IDisposable::Dispose() endfinally <null> ldloc.s V_18 ldloc.s V_16 ldsfld System.Object System.Type::Missing ldsfld System.Object System.Type::Missing ldsfld System.Object System.Type::Missing ldsfld System.Object System.Type::Missing ldsfld System.Object System.Type::Missing ldc.i4.1 <null> ldsfld System.Object System.Type::Missing ldsfld System.Object System.Type::Missing ldsfld System.Object System.Type::Missing ldsfld System.Object System.Type::Missing ldsfld System.Object System.Type::Missing callvirt System.Void Microsoft.Office.Interop.Excel._Workbook::SaveAs(System.Object,System.Object,System.Object,System.Object,System.Object,System.Object,Microsoft.Office.Interop.Excel.XlSaveAsAccessMode,System.Object,System.Object,System.Object,System.Object,System.Object) ldloc.s V_18 ldc.i4.0 <null> box System.Boolean ldsfld System.Reflection.Missing System.Reflection.Missing::Value ldsfld System.Reflection.Missing System.Reflection.Missing::Value callvirt System.Void Microsoft.Office.Interop.Excel._Workbook::Close(System.Object,System.Object,System.Object) ldloc.s V_17 callvirt System.Void Microsoft.Office.Interop.Excel._Application::Quit() leave.s IL_08EB: ldstr "[+] Success" ldstr [-] Do you have Excel? :D call System.Void System.Console::WriteLine(System.String) callvirt System.String System.Exception::get_Message() call System.Void System.Console::WriteLine(System.String) leave.s IL_08EB: ldstr "[+] Success" ldstr [-] Invalid format ldloc.0 <null> call System.String System.String::Concat(System.String,System.String) call System.Void System.Console::WriteLine(System.String) ldstr [+] Success call System.Void System.Console::WriteLine(System.String) ret <null>

Artefacts
Name
Value
PDB Path

C:\Users\user\Documents\tools\RemoteKrbRelay\Checkerv2.0\Checkerv2.0\obj\Release\Checkerv2.0.pdb

dfbbf6994f1c258553011b5f63bc675b (24.06 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙