1.2
低危
DACN
0.12
FACILE
1.00
IMCLNet
0.87
MFGraph
0.00
反病毒引擎
| 查杀引擎 | 查杀结果 | 查杀时间 | 查杀版本 |
|---|---|---|---|
| Alibaba | Worm:Win32/Ridnu.31744a6e | 20190527 | 0.3.0.5 |
| Avast | Win32:Malware-gen | 20190923 | 18.4.3895.0 |
| Baidu | None | 20190318 | 1.0.0.2 |
| CrowdStrike | win/malicious_confidence_100% (W) | 20190702 | 1.0 |
| Kingsoft | None | 20190923 | 2013.8.14.323 |
| McAfee | Artemis!09832CD7F15A | 20190923 | 6.0.6.653 |
| Tencent | None | 20190923 | 1.0.0.1 |
静态指标
可执行文件包含未知的 PE 段名称，可能指示打包器（可能是误报）
(1 个事件)
| section | .CryptX |
动态指标
该二进制文件可能包含加密或压缩数据，表明使用了打包工具
(5 个事件)
| section | {'name': '.CryptX', 'virtual_address': '0x00001000', 'virtual_size': '0x00020000', 'size_of_data': '0x0000c200', 'entropy': 7.995672918745246} | entropy | 7.995672918745246 | description | 发现高熵的节 | |||||||||
| section | {'name': '.CryptX', 'virtual_address': '0x00021000', 'virtual_size': '0x00002000', 'size_of_data': '0x00000c00', 'entropy': 7.936296214020559} | entropy | 7.936296214020559 | description | 发现高熵的节 | |||||||||
| section | {'name': '.CryptX', 'virtual_address': '0x00023000', 'virtual_size': '0x0000a000', 'size_of_data': '0x00002600', 'entropy': 7.98290340625035} | entropy | 7.98290340625035 | description | 发现高熵的节 | |||||||||
| section | {'name': '.CryptX', 'virtual_address': '0x00030000', 'virtual_size': '0x00005000', 'size_of_data': '0x00004600', 'entropy': 6.9146549057422115} | entropy | 6.9146549057422115 | description | 发现高熵的节 | |||||||||
| entropy | 0.9936708860759493 | description | 此PE文件的整体熵值较高 | |||||||||||
网络通信
与未执行 DNS 查询的主机进行通信
(2 个事件)
| host | 114.114.114.114 | |||
| host | 8.8.8.8 | |||
文件已被 VirusTotal 上 58 个反病毒引擎识别为恶意
(50 out of 58 个事件)
| ALYac | Generic.Malware.SPhidPk!Tk.9C610602 |
| APEX | Malicious |
| AVG | Win32:Malware-gen |
| Acronis | suspicious |
| Ad-Aware | Generic.Malware.SPhidPk!Tk.9C610602 |
| AhnLab-V3 | Worm/Win32.Ridnu.C125843 |
| Alibaba | Worm:Win32/Ridnu.31744a6e |
| Antiy-AVL | Worm/Win32.AutoRun |
| Arcabit | Generic.Malware.SPhidPk!Tk.9C610602 |
| Avast | Win32:Malware-gen |
| Avira | TR/Crypt.CFI.Gen |
| BitDefender | Generic.Malware.SPhidPk!Tk.9C610602 |
| CAT-QuickHeal | Worm.AutoRun |
| CMC | Worm.Win32.AutoRun!O |
| Comodo | TrojWare.Win32.Agent.~JH4@1ohy0k |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cybereason | malicious.7f15ac |
| Cylance | Unsafe |
| Cyren | W32/Worm.EUJJ-8850 |
| DrWeb | Win32.HLLW.Ridnu.6 |
| ESET-NOD32 | a variant of Win32/Ridnu.NAC |
| Emsisoft | Generic.Malware.SPhidPk!Tk.9C610602 (B) |
| Endgame | malicious (high confidence) |
| F-Prot | W32/WormX.EOJ |
| F-Secure | Trojan.TR/Crypt.CFI.Gen |
| FireEye | Generic.Malware.SPhidPk!Tk.9C610602 |
| Fortinet | W32/Ridnu.E@mm |
| GData | Generic.Malware.SPhidPk!Tk.9C610602 |
| Ikarus | Email-Worm.Win32.Ridnu |
| Invincea | heuristic |
| Jiangmin | Worm/AutoRun.xn |
| K7AntiVirus | Trojan ( 0053224b1 ) |
| K7GW | Trojan ( 0053224b1 ) |
| Kaspersky | Worm.Win32.AutoRun.cqk |
| Lionic | Worm.Win32.AutoRun.o!c |
| MAX | malware (ai score=82) |
| McAfee | Artemis!09832CD7F15A |
| McAfee-GW-Edition | BehavesLike.Win32.Malware.cm |
| MicroWorld-eScan | Generic.Malware.SPhidPk!Tk.9C610602 |
| Microsoft | Virus:Win32/Ridnu.gen!A |
| NANO-Antivirus | Trojan.Win32.AutoRun.gagewn |
| Paloalto | generic.ml |
| Panda | W32/Ridnu.H |
| Qihoo-360 | Win32/Worm.90e |
| Rising | Worm.Agent.na (CLASSIC) |
| SentinelOne | DFI - Malicious PE |
| Sophos | Mal/Sily-A |
| Symantec | W32.Miprinc@mm |
| Trapmine | malicious.high.ml.score |
| TrendMicro | WORM_AUTORUN.CI |
二进制图像
288x288
224x224
192x192
160x160
128x128
96x96
64x64
32x32
运行截图
暂无运行截图
该样本运行过程中未生成截图
PE Compile Time
2006-08-13 02:17:49
PE Imphash
3c0e70bfa5f73f1f1cef484e2bcb5bf8
Sections
| Name | Virtual Address | Virtual Size | Size of Raw Data | Entropy |
|---|---|---|---|---|
| .CryptX | 0x00001000 | 0x00020000 | 0x0000c200 | 7.995672918745246 |
| .CryptX | 0x00021000 | 0x00002000 | 0x00000c00 | 7.936296214020559 |
| .CryptX | 0x00023000 | 0x0000a000 | 0x00002600 | 7.98290340625035 |
| .rsrc | 0x0002d000 | 0x00003000 | 0x00000200 | 4.674847935738507 |
| .CryptX | 0x00030000 | 0x00005000 | 0x00004600 | 6.9146549057422115 |
Resources
| Name | Offset | Size | Language | Sub-language | File type |
|---|---|---|---|---|---|
| RT_ICON | 0x00033fa2 | 0x00000468 | LANG_ENGLISH | SUBLANG_ENGLISH_US | None |
| RT_ICON | 0x00033fa2 | 0x00000468 | LANG_ENGLISH | SUBLANG_ENGLISH_US | None |
| RT_ICON | 0x00033fa2 | 0x00000468 | LANG_ENGLISH | SUBLANG_ENGLISH_US | None |
| RT_ICON | 0x00033fa2 | 0x00000468 | LANG_ENGLISH | SUBLANG_ENGLISH_US | None |
| RT_GROUP_ICON | 0x000320aa | 0x0000003e | LANG_ENGLISH | SUBLANG_ENGLISH_US | None |
Imports
Library kernel32.dll:
• 0x431c2e GetModuleHandleA
Library user32.dll:
• 0x431c36 MessageBoxA
L!This program cannot be run in DOS mode.
RichpH
.CryptX
.CryptX
.CryptX
.CryptX
@,):?qCLFT,
EM9CsJ<
K?EV>UY
ACVDc
dyI$um
U2(aN?1i*mX
~Y3 T;
Dw>h<]3Q)Y9&T
q)EuqF
(X)Xr>uG*E`
,V/W!)h
,dcS DO
ZXo:Fk^
FwwB)Z54
NJ%jAF^$
fz"FrBV
Kn}<hY
TK_L=4W
,A SqNSFp\-
PI<{oxW
`v:*z%
nFB/1-&%
&i[^("j1
_Vqh09'Fh
5gnG47<
F8s6/Y
M>JH$bcNCo
%Nm.X[0
(g~[oo'4
gRcx\Ub}Gt=
!iqe6l
%.zC4*TK\heG
, 'KK47Ly
`]p*E)k~F&^
j!7{?
cu%ptH\
jAL\{
%Crf#+|Ym`\
bb5cvM}2'%.=t )H
85OBy3
[,NQ'FHx7f
^ES(V~ao0
Thd?"U-N
"J%z!JvD
PQ%S|efZ?.o<
c[Ms4`
3@,[G7y|aW
[88!sn ?
NX?P~QB
$<&]p^
-U9f`m
/Dy@YUif+KRX{$
K Gx,-G
k&C.}{-G[-
%>K~ X_
|%22k9Sw
f)0[I_J
|uQs:O_b
u`twEc
B6x~es'U3fUe3l
$c|BL5R~U4]CZ9r,PU
c|}.f.H
c7/),%
CFPSJJ^+F$fuy
.v07@k
3G_~r[T
q|'BX+
}3{{/U
X$L#uZY=
>X*?(&
pL5g9;WB
[ZJ kr
={o$eFu,o
Fn=G2#WjS\U
hC@ VBc
74/Ws]/
F&.n|K5
E'>)n80zZK
;}k:)bI;
R`[/{Sn
.:w@a=
A6#f]E7
\VB% {
*gG'.2
'x:jgC9zxLfdfB7|
^FuJ,tQ
S]W79D]
W*cD,u
qlS9V7Oe;
nSMM-3tV
B2-rchf9
jS.#^.{
dui*Oj
>,L 'C
{H~[$`<>
Vuq~'mlK|
5:z99@
Am#>@1
;88v9q
Q)2G/J}qi|Lk
]$=y'ji
IcOik15r
y:#gF#B2
( HIZJq
:OH~4O
Oc*dvpo
CsY-z$
'j(q.V
7Z8WKh>3*
2C7w:3
n|iU9* MjK
:(z&F`W<
/JCOLU
ljm*e"4&~ic
{mt!5ZV/e~q'AihBu#Wb09?Z9
<vM{UtO
C5?'+3K~
gi(}5f
*)J-l*Q
O#g@L+
Y|f]A(H1
['IeNi@p
Ndb MX~
|TwW.$"yL
`wBgDO=J?Jd
n'!,k8e|$
$ dt0zqJ
&1O>v< `Y\nGgV~
XI5sP/
1_ZndM(oh,#,QHS~+p
C51,RO
'{D?3+}
"9=[R$_``
D`0@{C
Y3@iVHWbTB
6iCG<h!%<
:tXWWr
9BL)KGInuJgv
t}$,+XS
gKC@AZ<fj
a >6"'&O
cP1Gi0H'P
RU4>>]H
`^>7d%+?= Tt
5{Yk85Onp
g*v]P]
,ttX,e[35HT
Y9LhJe0\CCA@bRg
6K)=/$G9
bV n*WI^)5}
VP?}Bi
jDrnrfA
E#>9l({
v2:-Bsd&v
Cu,[@v@8n~
ch~<#mz
/r(}pu-]|hz
.dc$EIGbU
9q%Z]#
BX!+b`~d
U?H79$vqj
Ldb4]]+
[LQ}I+
XkXNy(.#
6DZt+hJx
8ROh("tqcx
Jezo|3Ku
UUH!96U3T$5
;AG9|1.
m{O/R!W-N2xG\
ov1li;#]
_EWf0\0
q]x8i0
-*V$]'
+d|`r3"`9
e tY]:nJh
;YkKkvgv72A
HUv{>Q
e)Q7kSQE.;-TD
/J.^p5
l~#`N{
y.2r3V
8NwQtqS)o~0u#',@;
C(vpSN,<.K mz
%@?n~\e%zr $Y0V
d`A[X{W
U_Ur6}
7InwJvD? to
)dkhR\f*G6{j #$
P7ch-E5
5fP":go)D9r p
7:NYDH
jg.$.^r,p7
!ScC3EWKw|
#[PGk_+g
0C:8(SzrE
P*1a6H+1pR!V
2I-zS_.kU+
]Li3<=n}J
1~,y=Q$(
AB;ZRf
B4-Wb&
Nc-l,"1|i
rR!T$L
#q.b$L4
Bzk-lXL%D
q(*xhjSWA
|_O6r#A
(;GBT|T
7f:DURgyQx
@OeUXAj/3^W
Z'^z[Y\
0:)L|%QV
gkaPyfcY
?J)RQ'#EC\])"6r
egIXX_
\Q\. k
vcSx]Lv
LcBZ\QA`
hD<46{39vsWW
a;T]z/;`1K6
&|+cs!
vpK 3Eiox
W.KH9DzzD*
}LS6fq%"]%)8VX
ng679N9Y hk9n[r
aIqS8(
B1RC(G`
m/@XJ#N
xBzl1LvE90
]XJu[8}
2WMHB`
8Nb3lw
wsJhg>l~_
3PPxeL
">ED[eqk
7v$!9[>;&d
4=nT2WSLf
>gf#~^\/^F
9)fLqc
<trWq}
%jw]|O4
M <j*/
}-s* $ 8
K5W|;X@h2,b
zCS\9p!
^%QmeP
VL)g9[<
S_CM)u{Z'[br
sC'BMdpYKW
l|Nz[zjX5[I^p
Q\N6DIE
W(1${E
V"`K^@
#rmRvm
>Tk`>`l{
@xD[o3^/B``nj
EHfV>K-
Vp3x; 6
W<^Hu[
{1IiN({T{s
(y<0 =<~
M7L*Q"*
{5=R,.
_<I:?Cai
}+L< {/v
k>,#U<
?<]x^a
@W+|@E
TR!GfU
ug-1?&!^F!f=
n&fG[<E%+DGe
OsE^nG
+4oJrE
[$ce2,
`P"vs)
3k*"bgZ8eU
z$84;^
*B^d$W6
Y@?&4rJKU
Sf=%`a+wQ
r[UpS-2
n8sWIlZYb RbY?%]
KlI^=G(G%O0ILa@b#a
`cyL{66JF
N+]W%R
`v \S%'su^Q8(?-HAK39hLW2vp
Vd/x!_;m<y@ i)
,W;^f?
pL,@Fa|r~ufdt
DT'\_p"OxX52u
RVmyX;
|Y\snESwW=stMO
}{nb[u/='R
JSV'Bu^hrc=7"Rf`
nJ!#<\88R'IS%
[kBWq[5
{59/e+M
;e?w/ZGM
5DxH>#
J>6[f_
:4q!G;^J<8
(yy)/^
L#\,gQgSgdvr
pqK^A "co
:m"tb9P`1U0FlCB+''Te
6tHjSk"Y|5QSLX[e
&C^rtB
-!f- !
WHF+Vx
6MYN+_
EOr0^J
T 3;~1oO@
'hWq^>[hkauEe'&L
xTyfOpn
~uG`&2Au-\MA1
i7A8f-
@uORmO?y^
l!'G%r&(5?o
)$zU;[
~JR=a(1
P0PO jIK
CRcWa(x;s
q^~.:XK{! R.
44S2u.?
x%??.D
4U`- 6H
+51Vs*
[8rIG>
DS"BK#
's=*ciMy DW
hPOcu]
A6XZfrc
zN1zvc|
CcEJK;&S7y
=D%r!P'
;Z:P9>ll\D]#,:ml
d .=XSz?&to
nXG%\/
BG=@J3
RQDtt~P
]2Z#dlY(J
N][ \l2
Cto;,*
<CH Fjz
}hUb1(
13@Tjd
p(|9Xh?
Xm/%Jt
;}YwRe
KQ~|je
rP"nzC<
m oD7^ )
O]Vl05;Wp
B]s]H%
C\DaGt1#X
^"}):<S@7l!
%HJjF[
o6RmXz#S
"xF4jaYE
G%Rm7l
``=JvO+
j&b,]n?
kf>d'\nHSa
>tC~g_$
]`Lt@+l/
Bf8dVuV=7v
8@G\Y\&
#9y-JXS*
% hT@-
%%bWae'
~hoyg/C~,P\TK
Z1^ 9V(X
cFUV$kHZiI
?"C0""
_2vf;I@
pbk+*T
Do=eE(
%!3B9k
pEG;O:
HfJ>U5r
P$/O~`P(!
qUfO}V#e4
\_K8l0L
rGsHXB=_?
HMYeXR/d{]^
7@BHY%I
K($(H^e
\dzPd3
acLzf@
LF~ZOk\
ZE_\MK$
8N$N#kcPq
Y#+Ti0D
Otq&Ca$C-
Q>F:M6:i&O ;h7
$v_~P<$X
=|?yP:N
=O>).CfAKc&
oX8l+xxI
I+pt
(d1Poaz
G7q\$IN
W24Syy\
_c$!%{9QVE"t
$/g )}
C?d Tq
"EL^#m&@
X[i|>wLtN
<dN".}]g'8*Pb@S|Fp
|M+d59Veqo|h
;ns5f)~ukRCdH,+?}
"v#-"Y&rm
X0kb3h2@qh
ix8_-zG.bL
}%\v2lG^2Ni
Cvf~3e`9
\&SsYOtO
)M)*^]O
B='C-gbB
A&@o]#Moa[v
oPA).{
\#}1O.
3*oG7Ke(wvI4+#[8
8MSOV).nYX2J"
iQ?COl
E>rsVL
4 =?Nu
hlzu2{
b4kt$H
Gm/ *fJObB_
*4 pi3MN:@+Ht
:OdJuBL
hcA_4 I1
Dc0;w:`
({&2Gu
@a2@y(Bpi4%\d:
la&%\6%2
5-Z7s~
bn7a4%ibW
kfBA@xR\f
lsnN>gH'
M%ARvS
cqFfJb
S=R L;
<1KP F
=muSAsv#p+;
v2wh&l
;!\8fp
^zFn6P)'uJ
Kpz'KW
xjL9`-
6i]6S>M9]P%a
Kc')|$/%
@4V@AspoON"~
2ngwtWab
K#t?]>
6p&^$iHkMi`,.''i
I!Q93g
g[y;M'zotw
!i[C~,R !3,{D#PWR
kM`Vsy
&l]cn{
{kO&g,
hAa^pEA~[@v8f
38)5\J3
K&Qt_|!J
BHrZGy#Zl\F
tq(ynb
'$O4QAP<
wHfH65
$w'Kx?k
/5AhHJP
&@cr[?$[
2#YV`_ENaq;B
F.31^w
$ hgURr#
;m5F=a
&)fG/G>
6ZgIKQM
(G#"}O-{
Z:ZnlwdL
IvVXyg3
^Z(I4lj
+vI-6jg
T*0:Z#O
v%+BL_5
M/sB#H;l!
W8|L(s[
p ,@4/
mQo41}
W$x ii.o
8R2oG>9n
hW<[KqE
MK#R#$(
(L=]3Sjf#|
"V}J?LRY<
BoMJ9y BV[)C}
%^nzv!
>MUA=q}On
~ myS5
H&Lqqe.
";*8Kn(
lx,^X>&\|
}L8H?`Rpp
Fi!r(8
:CVH]A]Y&^^cF
OENP21|
rpQ;pH
P1\=xw
--jEN&
5n;d`_
[TUun}NOh2
|S6X~'pu
1n>3`Z7
"u8!R6
<&!SAU
f q79,O
be4~[K+
Rjw_(t!
|@zbi_+L
q6f/\SMna
?M!2a}xmc@z9D
(/ZqZ5H
u &,5IV:B%
!&"@Rd
4fd?|#O
1%uPH'&l
Q\[Bo)*e
_Q5BN6
+[*q_}Yd/>8>Fm
b3#I@gN,
2>7Q5;/X;VQ%
tUDfko uiV.;
E!md0Q
(x!2Q"o*
*D2>(qv
DSc$sZA8r?^
DekuWW7
=ZnEC,
:rRk:"IP=F
&s['q_m7luR\txNv?6=IM)^NYwbU-Xs1W` a
(-sN#/6 F
==w`L#
-YsU]_uGF1PiJ$k
H/~bEWV
)16M8%
n\r?~-M.{(-J
v|W$O?^iFwH
m=Z$b&
m|s)\_0Ni
~eND)pHBI!B
Cz(UKa
YT^;T{&
<}UnoW[,Dt
$]Gzo$g~-)
1u_7<J.
Y|"'(p
b3'9F^r
@TZQx,
?pCNB\O
dH{$[N
kMn#kx!bzmyaF
1}P'fv@
|1,\Os.(|.khd QbfS5N
p>Y>>Fo
/h)>=8d4
U[pg[}
#Q3J?zoY1
#. H6$nF<
QAKv:JwuT<
a0H!gm9
&q}T$TlFf5
e]3w5pObeF
;CzUsei@
kD>JH
- I=k\*)+A
_HJIr9u#
'SitGl
V'K'6f)iU
JvSHaxlQ
=07Vz(
ms/i3x
'`:{Xj}!
Kq$(D!K((
{ I~KhwdM$
FgJ[y_@"*M9Z
|96/^(
k|QFqZ
Z^9$Eh
?vdk'We$JPx
/eh\f(
$3xDM_
U2!qO~ !n>*W'ip
s!_F5'
IEGk'Ty^lw>
++R|:[W
+wT]t;P)GU802<s^M
HzA./t
|t}mF(*`K!6wy]i
"ZWSWz*W
w~i LTD"7
GR5}O,)+]
Wxqq?/N
&U2$_5m
u9f)9<w
DcI&))
a@gU`E2
G~hF^2
-id5YG6
Cy9v{u
'7Jr+S
9 vs`E
]j{nZ&
uGS}BZ=X%y%#W
'wb_L[(~
V+=BVpWe&s
3CEcr1$uJp>P~1]Q0le
P!-ET$f\1/{FK7
CeWxRE
50_1&BV^- G5FU
8}=I<J[=Z463$
?g\XENi
tmuI@9><wTQ
p.^aOh
F[hDy9Y
F{_LEP|J
J-NHsC%
AEWvfQ
S?Mblss@}
nFUYx[VM:nS&26
YO_p3[UH2/ow
4rHHx"
,a5gF*.B
GY(0&MS$k
/7e76`JVF
&A?cc,f9
OQ[/RJ'jqO &sq
5,2G,2.7
OXT]TP
AGNo")v
1v4zwj;K
xf\]O=BW]|
&y+^si 0PT^
*5Sqo:Oy&:
BwGOzhO
ccpxp8I?
XW[ *Z
!1!gxgf94>
mzg15|
/KgYe;i
vod9P)m!3txEU
>`_{$Q+/
Mhpe3U
|K?ytF
rv*U}^{
qEz\_-.G
\2lr,G
E>otOg|O q+
F:#cD&_cM7# IG1~;
!:qS&=^M2vmc
cfHtG7-
.(q-(u
S8aOg,m]F@alB
(jeO&q=e+v
V&TPX3%
,{F4t625QcYAj
fM!.!fBeS6
%F,nc*+: ;HPW_
^I^'%Yn
2S~0`h
BI`b*-I
r^]MdJ=
%2z<w_
GNV/5yl
q!Zib"l,r+eC/E
jk+<Grf@
%"3~>+J
>wwaw4C]
hL3juk~mL?
fF "6+~Rl
EaQNu~
:Z/^z&1Q
!OQ}#7k%YT
vCb;7-Fzx$
EH<EjN3
D&G.u/d"
!ab+yM
cd"Wqg
ya%Kk(DBnR=]
\33lc?
E,]gj|I&
<R:tUVMIRxDk>
C/Nzq=|#
-C`]$-
.N(7Wq
9KmFb}T{
)Nlf[/
%aB*.k
KSAJ"X`
lAqDGgC
^f?g8uG&x:
b;Xcu:
^cLne=z
>[$UK7XF
/rbyx{h,e$$1 ]/
xH}Q-B
Gp`52/D,0j!TYaKA> +Fy
ecSqh{Q$w@pR
~r8g`:&
Jm}YtR*
`/8Q1MSf
Urp' Tu
fPT4FhYA2@
:h_v^1
+v3dvtM
O{y M/J
I(f1HI
fO05/$n
-Tbl9Z tDW}}09:bI
w7p`(80j0<G
judsRtp*
5ZVU!7]
o9l'D*p,i[B
$|x'E4j
08MMS=
1xVADa!q?
sas`BRmU[
c8JJYt{VbM
uXI)m$Zdt
T^kx9LF=/9]Z
h[a$Il
}JefBP
jW#*}rM
}Glt@"
U}b+2 n*
D_9HOT
qA+)U}</
K"MUt8/{
{M#0jKJU
JUsXgxv
*l\cJb
x^\ Ygn
'*.B.;pH)
T<^OopQ
kjRwS(fHmt@t7Iw
y<Y!%^
%wnr2$
k<DBgf
x %%cu?S
[ZMv1G$ *QdBX
_R> \{
l9Rh_-@|$
m%*{.g3
e=Et^
RYo 'j;/Z
~vz(WE
wKPZn=z
XqO@o@ @w"l
tj3MWwe
ia0]$p
?,yQs\^
jm(C9TT
/pZ29ihK5WG`7s.G
ri8,@R
Uw\.K3
}h79DR
tv,8t,
Y$3Z60q
KjpA#qDI<J
FGK:(l
,1%-aNyAj5a
C;+@f/
wSBShcqXVZH:pB4~
Hm#8Ff^
=X b$L
+CAU,"}Ijy)}\
_|jV#5
-_@xu@
$,4p9#d
1UCa;DFlB
,v@vN D%p6?#
ibZeu5xR
8a=F0O7
>]K^sGa
(pc}1IuH7UZf!Uu<_
IFOgOZF
(rhLyr{X
I ,#+,")&,{J
U@GNc| (Qi1
L16y<x
ef#p48F
.ydk\k
~nhsjI
$+`}iZXu
z@{'o zM
"Asf5jS[1"
FoxwxIbe,mx+w
C%MCALR5Gk
!E?fSifb^
nhhC}5HH
L(A(%x
M2IzI!'4^C{Pba=9
ng$ #?V
#.[+{_
2kpo._d+bh8
I ~KRm
%v]@K)a}
+[.KnEF<>ztd
O#kVl
[}@.G3
yC957"HmEzF
S=41=Uig
TuuZPE
HFd`h_GnJ`
!O g#K
=/Yo%5
-*)vjmW
=e,#3V:m?Y
7$&Y&K8'#PE1
DiFolO#G/g
UBwzz]
Ub1k~6&
>(e;7kPb0
jwtM7lL|S5:]x
('5(&5gLt!
l\9g*u
?1FKZnG^'
?Sxk"m
&@6P2\y
HK}->"H
xaj/6;h/I:?
gSrC{zKV:>
0p6O:t.>HRQ
}m '0EVd
ytF 9G
`DjlN:D}m:m%o|(
jT-!]3r:
58/#LQ
hzuURt.D^nHG
%L=vW*:
X~_Q&+.uL>
M#+D'\
Fy9Y`?
iGCx&LL;
nN]KmN
14WR`C
E-||B1L
jSJ `Bvu+D=2
C'y'y=NQ
N!!KR03m
I`O-,V+
l>Y]yy
x^Hoz7P[
KX$^ut
xi(|c2+I
X*r) }3
}zISI?}|zN
ryxub6
,JQ.tU~
,W5?Jt.#+
EpZjS.C
V'@boAI
V#Nm\gRz
\(;QSL
Lf$i5:
%s<tj[,
4EuhJ2(
@k=2_)}.yD%*:BWRv-
S-I4="gbc
>!8av)~l
xXV]yiLT!
x'wJn/C
>{#njTbVvR;.lB
+!>WLJ(L
ri3vyZ~By7yjO
4b+#P@t=
!D8)g7
;R:.V7-XHA
I8'4;L$
lPGU!]s
m3:ypP
1=7i{S8^@-
qzJLk1
H$"kC0ymc$ 1V;
H!^[dI,R.
|6FfUq
+~ES;My~OJX9=~/
}V"YQ_DZ5
7=6,kP
:s&rz`ZL+S
2DYb[X+L
[KRHj0wni
ZI'`s]{k
6HTsLT.i
N\ l./<
Ag>k+]S33\zKkwAK
rRX+0_ 1LB
8Oxki(yyDD2T
RsCznXt
^o;^lB
hU(XWB
t' 5$y%yBG)@q=v5,[}]+e&yk0
+tr+FQKPq>m
&>*@QXIb?4
,':==BOc
I7U'Vd['Ax
N~}}^t
#N}T3A
8W?,Z(2w3.4
4 STM5^
.jES&a
,=wa+J
qP:8qA
#r=F5DL|%iQiM*pK
P0RhEa
bSH":[
4/Cb[1
&d&8*?$#?e
Lb_P838
A` -BEP
B>0tM#
+S)Pb_rXCz[
?.MAI-at~ZG
d T8!&
>5z*yyr
CMcKW5n3[6
dalq?_{
;,^IYe4Z1
1C.W)*
tqCInr
2-9SEB
qLbKKP|`j]n5F>,
1v"{5t*P
-5H~VJ
j}$i:v
f{eqW!
W#4MaON3;c.&h{'BP'
",@KF8UV
\\s2LgVr
hT|nP"8^
'j']s}v=Jw
Vb?A8K
DYFl^M @=
\si>5)rJG
Br/RTbW>0
Vl~6Iz
:?H3wU6a
a.16&u*MMN?bH'
i')x[sl6D
H7`}yb'|&
riu<ee
)EQ}je1w)Jy>RB
Ab$!2[
L$Lwik9
+2 FU1a'
S@-A7YdS
S6S;BGDAK
35m#8: ^
v|T-'T
(4wJ4kn
9!D0`Kif
b)dmP+$
^@T6bn&J}$
k]%bhV
$NI8v98pi
/82k)Sc^2
DK><~oZd
$@N))Tc
sAuilB>u
XI`do3_
9SduYYceD
H!P,:{8(tC
d{jV2<Z
b?q"BR`FE2"B
{A75,>w<
]eEf/5o
"t+l}
uZ^hUR&"Y
R{\'m[
??"G49-3
'f|s>R^
XF=d:rSB}9
nh7Mw%
"jatCRj o`
l ~_8S
/gf[4n$l
$:JG1R
kl#P+'
]Q'gIQ
&l)s:*iV
RCz!VY
2{sN8)Z
J`/5a0.f
{d?FbXbQO)
vFNX/J)/
xa~mfcAc
v+RV`o
fD/cs<
KyLPIdwZl&
j1}384
Q^3XS/zfep9
-CB]VsEOC
^yz8/P
: vcia<
FW}Od*(@
wu@a_9}2F5YtJX
e~}ZSv
1rHnKh;_e
>Jz#z~&d
/%);tPxy
(NwG~+J
:VggEmiu|
R[@^$i
'J?5ed Y3
9UQRrv!)S.I
f=M.%l9=
6/;Uv02sX}{
|o_# `
)3Sz Vo
-kRtsls|6yL9u;,B#MUe|xg
K"%LJg"tSftmE:
(C?fe2n[3
OW>9(nkdXc)4Xg?RBW.'K
i2q3L X]>
wkG%*Y-
h8}(18
n`hd+.
t.C;^?#X
>EH,U|
YS$KEG=
EQ@q8ShZRA#wt
RKaAo|G%B=(+U
#4CuB]
63A4&'
ahE#RF0?
k>s^rH
wKDv'}1L
@v~bAe;
7rW-(nd
7\!fM}9MB
AAk`=D}(b--<]e[:
E~;3-O/
h;H?n!
|m(E(71tg. (c
j#UO"M
Z^a?,o3^'u
rS{yXE*
~MT}GKY
.4}8,h%&
AG B&QX 5%XQW?O
lQ15
SO/_#4k4
y|*h(H'K
Z]D%&uV
P[1Zf#
1&'n]BjYCn
t~b,D`(:
>;p,bzArZ
YE~E7J
k(W rK
.M"L:]r
^0%l [Z3a7mhL
@)i\LY,a&,>`d-}
qwJ\Fn;r1W
o]/XLec&}"}
T1\@Z=3]
Ky8f:M
nl%+=9NqEO
\=tToQe*
,VQnh)
dqI g4
aCq{a@v
#&B[4y6
<smBw}'%:v7(
&{p=09Z
|8#fX/XjL#vIx*
KvR}wT
;d2uc:
< pJ!a
5GkB0V
]e.w;vG
L>{1,:bu
5("]aG;)
^Vr&??
8S)zD(R?'1y{D
%AMRIS
AU,?Xk[n
Dg0%*<
(k`~AB1h
Z|LTgF.
quVs/C!y
G(i=K{rb
3kNp2htg-&'FI8~:e=^vg
]LmyiY
VCYcp5^ev o
*Ik}5!Xu
l]6[wO%%
8NU/1 0tG#6Uj[
'|pi"_
~z.?50DR"!
8{EN$Z
)P`Y!%
!<G]c@
EZn +n1 |e2o7
#V#j)9'dG?{
wA9QwH
,DEdC'v[vRH;di-7l@8A)&
F_]1_xzyv+J
ybLRt5
vtS_[1-
F'!/ l-
7!~WQ)
Vrn(f9
(1&d7VU<Y
Q'L3Q*
Eq6@s$Ae1}(
U-=_bf:)i
@df#PH
DJWtNo
0yLvD1UN
fv1aEy
c .xFxn
F.|W9g].
G.f[B/F
_$NL&`6
22\<4G
{Kgf?C.
$GT(2:5|I(K7
bN_`MhgG
J\?IHuF
^/c=d4
;<,$9u|~ Xx-y@dT
^k`Gx{J<C
vS;lH3d9k
uJokKN
bQK-l/ $
>Jb=G/(O.
IZ)*O2yc
RHm_J-p
yJ6%]{O&
g!Y&&TW~u/
a`up>|,K
GGd&>\)x[.F
~_z4JM&P5.K|Is
Z%x0\1#+
>4r$!>Q
,vYlk~fjL=8
'@U5w0|Pm"
BA`tYNR[
P*I=&k
K*C5:M
_|U;HC/Pl_~
[NP ZLn
Iai7_(
C6tctZ
1o dzV"
9oEgFo,GRn6UP
PRDL\Gh
jNG$V'Kn4/)$FCv
e#! U!
qT<5?
v=MF}i
AFo%7 +&Xq
ch`&RFpp{V
}J^9#@
Lc+L1y
KwJ c5S2"^"6ERYfXW9;ayAH
uk6!rJQ
U[POU8T~U
aKDL+i#`H#_.g6
ePBuX?
LMT"/$3YZd(&
9v_se1I@3k%q
iCj+;j
ly:lo-l
A!y=U7w
fC.A0I3a
I.'l"y
l/3inpYC
?z=d~A}lpB`o+xC
@?d'aYxQev
S>]713`HR&
B?aaV}s&4&?
FP<#6&2[
"_/J sjqH
> Q"8*
s (Gh4tM|H<
iYkS<[P
NZ#3_/]45
\T(CiE*'4?YF
*ZT.9"#.Vk}|
FnlF (
>"[h,C4[
a#QP7qt%=O
j0=EMA"[|0N]1HC
Cwd|( )ifz
_uOYqe$smjv'ainD
Ghv*hF
? B=u5g
Z:Z{DM)
TE)bnJIv
bf?y}%
+F5B3*ZWI
!_$&rP[
IhEz6v
^S[d2cy
3fDNU!w;
BuA-+$h
PJY+Gn
RGtSt(a+`=
llhAdh ` q!n><HBy1
pXL6"Y/8q*?
# .vj2
gtU>@~&#Z
Nva>&?EMo4f
T*\OQ0[x
rYo9AAl
qwG#(7A
|p-7_"AMdw
h2ke5f[u
%(qk3T&
k,WM@? s
t3`?_|KD
vnlk~!
Eb$WRgzf}
u%3u%=3U0&$
t~BL =f374
6&@v,
G9Ax"a6r!
.;\d2R!/,z#
]V]:i&-
:K,&+9
i2 `FroJ[{64~
<!F(k
YoY{aA
C$H& 7X
^#N_hd9qb
x/{>>{6OqH(
g7{4(;m
72K F-
$R6Kg&
"-D0+mT
wq$?(H"-gd*w
Z\ b5#B#
oTI-$c@qTY|&
tS%k<a
E.h e`j
w}Mf(l3,7
EW@tnHH- m
MAn.ONf]
szazmlOtOv}~u@"]D
s-LU]j
UV0m5t4ft>~)a4l^:
Ndl."]<yb4<
aSOUNelwxM^Z
?o=T[e#
%puye|*/A<K
hV^TA~
j}UHtX#Ni
F4eWevU\281).%.
ue1b0e?>|)bW
.uO_i(xg~s,e*Dw
E^n%ML6
J<nr8)7|
%J{SVd"
'3!Yd/<|vP.
>Xv{,?f
2S/G[@
t7E%4Q(
BuI%?7M
\KpQ`RgQ
'-}W7%r
>'5q<k4"e S
sI ?GI
v[yO/L`U*DBXr%
^_H Yr
> 99)O
4%fmRXy2?Nb
enu. R
W1rn>5=
YC7nA3
Py)A(0q
N8jNzsU[1D|8p
91Dif8
;Bw:.o[R
|v~o)&
~i?h#^[
GwL\d^h:
B{<z?2
U/qboS&z2aAL1
1@;[/H+>r
?%LK^1[
3y"'HT)iE$3*i
{o9Emn-R1{U{_yv-(a$k
#E&)a=h-oQ
+4go>|zG5
+@Z$2KK
Xl>A*sni-V
D>,t\FI!xM TFhEQM
$-6T+[~
^Gar c
FTQ)d/
_-.09-vB` HE`qPKl{!
M}HvP#!
8df(Gu*
sPx"7=f:9j|Bxm
N@CFoGn
';w"^K3
(k#\^YQ}=0( /u
~Y,p8'
lDtOhY
bFOXhzII|sPL
Xhi,9t?J
Z9^ bH~X
=j4jKNu
f[ITl9
?ovCBfYqnQ
"C7{.v%k@gh^}
%tQ~pL[
mb&Dk>PA
E mbwTs
-%J44af
F-N^aKi1ste
K,@"{.,A
bv[~Pj
zgUY^!v
Io\&,+}z?
*j%]#T
~z,3|+
aJFn2y(
|)'mnKN
f])F@7
;qw~W$3p=
MA%VLHIO
6`px=wh
=TuCy-Fr
1"U#X3
!kBp@F
?0]S&F
"g*/_D
JHHb'pY^
B29Lvj
"qI"#4H
m\UdB*3m
>_<>[{
n}V5+X p)
+wU3e<#
<SC\[rx;F8
xQ;u `
U%cys-
Q{{yTQ
d0lF41
Ie6"36-,<
}iPki(~
E@d;RS>1{
4*"gM]Y4}
1Bv!dfy%
^EHmv|Y
pKAA`r
vOLw|5Au(?vuc8
<F}SI$4-
p0g%M:Ps
!r\k)1
igkc}wf_
:twh;G
kernel32.dll
user32.dll
GetModuleHandleA
MessageBoxA
#YuW3]qLI
k7"J,]agJ
rB2OT3
#H)TWd
Wh\:8DL
rCBT+tN(
C,aH2WA-Gt8
^VBUc`C|WF%#05
{UBR65D2
~}}}}r,7,~
|}}~~}Qr
ozzo,3{
wQrxxyrr,,o]zorQ{
qrs>tusjjve]]ovj
ijkklmn_R]]]]oRjp
,__`JabZZcde]fg_^
YZ[JJ9SSSX\7]\[Z^
RSTJUVNNN177WXNSQ
MNOJ9N///P17///NQ
?HIJKCEE=F<<<<F=G
?@AABCCDEF<<<<F=G
&-99-6/::;1+1/<=>
&-84-6/0027
&-45-6/0012722103
'-.---//0122210/3
%&&&&'())*+++*),
DDDDRE
NNNOOOKKM
KKBBLLLKM
C:DEFFGH6FIB
9:;<=>5?@A8B
!/012345678
)*+,-"..-
"#$%&'&%(
yizkzm{o{p{qwu
uLL_nr
~4E`GY}autx|y
tqLa.@[ETegfjyru
gd,@\&7P9V]ZY_i{ldh
wYT'6N.Lq@vOLKYwya^SY
lKD*8S,_BA?=F\r@AEJ
G!O'Y-a'\'X$Q!H}h
&0k,?g
=!I'T*\+](V#L
U4o3J)Z6u>D6o9wCYvZG-_ Dm
U4o5X'm7v?GOV^~
U4o5e-r7v>FNU]d
a4o4m4o6r<
DLRY_b`ZTM
UUUV[afkptvuql
5aI/"bH4''99
Q7+<Y@3
]_C4T8,@X;1
j^A3Q:+BUB/
\?0Q8,RZB1 `@@
yC@Wos{|
~R|-BbVSy~_
]1Z+a46d6>
A)X+\!H
U0_8vHYuS
w4l6tET`
N. HY7!
vhH2O3$dS7"%U9
vq.exeC:\
rbpvwdxi.exeC:\
\tmegsx.exe
xlzngn
xdjfdbaa
lhfrlkqgm
ufwcwtlAlexis
\hjugtckhgy.exe
qswhzzqcwr
qpqerdUniversal 09
Metro03
\akdlw.exe
gqsqapX
xfpfqfh
oewtntm.exeC:\
L!This program cannot be run in DOS mode.
nnn\nnnnoBnnnnRichn
`.rdata
@.data
PMQUREPMQUREPM
LQUREPM
EPMQURe
EPMQUREPM
PMQUREP|QxRtPM
4QlRhPM
PMQUREPMQUR\PM
(($E $QURj
Y]UjhiC
Y]Ujh<jC
Y]UQMj
E]UQM}
REPMQUREPMQURE
HPMQURE
MAEM2E
MQUR6U
MbUREPM6
EPMQUREPM
REPMQUREP|QxRE
0PpQlRE
Q\E URTE dP
QUREPMQUR`P\QU
$$ E! RTPj
0E XAE T2E
MEMPMd
Y]UjhkC
Y]UjhkC
PMHEMME
Y]Ujh7lC
Y]U EPj(
tCRPMQU
]UjhlC
uYj0hC
M:EM+W
MfEMW75
MQUREPMQ
UREPh+
XREPh+
MtEMe6C
0fj0h4C
Y^]Ujh
PMEMME
Y]UjhNmC
]UjhwmC
~$EPMQ
EUREPMQU
MQUREPM
PMQURE
Q(UEPM
REPQUR
MQUREP
Y]UjhmC
EEMMURE
dREPMQU
txht!M
t+ltp+hp
hp+hplM
U<E+E@M+MDURhPC
ty<tpj
EjHjZEP
LURhHC
4t3<t*j
DR@P<Q4Rj
Y]Ujh/nC
,IEM:b
M;M}9E
,!MQh
MQ0REPMQR
]UjhbnC
UREPMQ`
UUEMfE)E
sqEPMQURj
j@UREPU
EPMQj@8RUE
]UjhnC
Ex|QxREPMQ0
Y]UjhnC
Y]Ujh<oC
\t2j MR
Y]UjhoC
:t:j UR
Y]UjhoC
Y^]Ujh0pC
"uZj"M
Y]UjhtpC
VM%EPMy
MQMkMs
M/UREPj
uDURM_h
MEPMQj
PMvMQM
]Ujh#qC
ESVWPEd
Y_^[M3
]Ujh|qC
EEMQURh C
Y]UjhqC
ttQURj
EPxQUREP
EP4QhLC
]UjhqC
pEMnpMd
E]Ujh0rC
URM&:EPhC
Y^]UjhlrC
QMDEUUE
]UjhrC
RMEEEE
u'EPh
MCEM4EMd
Y]UjhtC
RMEPMj\M
DSURMgEPM[j\Ma
EPMQURl
u5j\MB
pB$PM$
pxx EPj
u pQ$RMJ
4<<URj
u pQ$RM
t/QREPj
Et pQ$RM
dXP8Qh+
(W{EMH{Md
EPMQURj
MQUREPj
EMQUREPj
PMQURz
rwE`wREP
E]UjhuC
DrEMr+
MQUBHP:
UREH$
u"MQ$R@PMQ
EPMQ$
DkEMk*Md
]UjhuC
EMrjEw
EM2jE7
UEPMQURE
EEMhEMd
EEMQh`D
E]UjhvC
0uEj0hC
;fEM,f
PPM^dE
|cEPhC
`MQh<C
M'a/j\M
]UjhvC
EMQURjE
Y]UjhNwC
hUEEEM
MQxV\\XE
t|VExjVMA
Y]UjhwC
EMPgeh
EMGPfMd
tZU,RE0PM<QU@RM Q
)OM$QM4
OU(RM8
M+QDE@
9E}AMQj
9E}bEPj
u#E<EMGL<)
`QURh+
0$REPh+
t_U$RhHC
lREPh.
D0PMQh.
EM;M}N
Y^]UjhmxC
EPMQFE
UREPge
URMNFE
Y]UjhyC
M QUREPMQUR|PxQU
RpPlQU
M-CURD
Mj"UR[~
dAEPMQM}
EEP\aAE
MQUREP\QU
U RTPPQLRHPDQ@RE
P8Q4RE
R$>E EP
U REPMQUREP(Q$RE
QB0EE ]>E
RM<EEEE
EEM<Md
Y]Ujh{C
PQRPQRPM
8MQURMt
UREPMQRE
RPQRPQRE
PMQUREPMQRPM
XXTE TQRj
RH0EE c5E
M4EM4Md
]Ujh{C
URM^4E
Y]Ujh}C
E PMQUREPMQUREPM
QUREPM
UREPMQK
URM.Mj
p-EPMQMi
dm,EPh
MQ`RTK
E QM ,E
E RM+E
X+EPMQMg
E!RMD+E
E"RM*E
P*EPMQMf
tDj\Mf
t!j\Mf
EPMk*MQUREPMQU
D)E%hC
<)E'hC
8|)E(M
Q4i)E)hC
,U)E*U
R(B)E+LP
M QHRDP@Q<R8P4QU
E,R,P(QU
E,$(E+0(E*((E),w(E(4h(E'8Y(E&<J(E%@;(E$D,(E#H
R 'E.EP
M QUREPMQUREP QU
E/REPj
Y]Ujh}C
URMM&E
E]UjhgC
EM"E t
EM!j,h
tFdt=j,hC
EM( hC
EM j,h<C
MQUREPj
u j,hC
;MuA=D
Mj-URD
Ej-MQ[D
xu+MQUREPMQUREPhC
}2j-EPkC
U9U}/ELQhC
EPMQUREPMQUREPMQUREPMQ
PQRPQRj
MQ,RhC
P8G,,(E
UFUE<Ej
M+MQU+UREPMQU
UEPMQU
EMQURE
RE+EPM+MQUREPMQhC
MUUEPMQh
j$j$h6
(VWPEd
HHNw=HN
PTQ`R2
MlREPh
4,80,Ph
,<0@<Qj
lB$|Q xdPQh-
t$jRh,
QUREPj
U+URE+EPMQURj
tX4Qh<C
PX4RhdC
+EP+QURPMk
Y_^(3m
taEPMQUR
]UjhHC
Y]UjhC
Y]UQMM
E]UQME@$2
MA4Uz0
MUQ<EPMQ
MQUREP
pQtB<PtQ4
UTMEMP
MA URhP^A
EM+MMU+UUEEM
MMUUEPMQUR
EPMQUR
ul++;|
l6E@ A
`7UB(P
T7MA$J
H7E@,A
+Q+RPQj
EMU;QD}(Ek8MQ@D
UJDEHDk8QUB@P
MA@UBDk8MQ@D
]UQMM!
MQ<REH8
]UQME@
Y]UQMEM
UUEEE}
E]UQME8
]UQME8
]UQME@
E]UQME
u(MMUU}
E]UQMM
UQME]UQMEx
t(64UZ
~E]UQMM
E]UjhC
UREPMQUREPMQU
DREPMQU
EUUEPMQj
ubMQME
MQURMPE
UREPMQURE
MQUR|PxQtRpPM
,QhRdPM
RTE EPL
REPMQUREPXQTRE
Q_U0E P}E LnE
EPMQhC
EMMEME
Y]UjhC
EE]UjhqC
2]UjhC
MMEM#E
E]UjhC
EPMQUREPMQURE
0PMQURE
MQUREPv
=EPMQj
tZMQURMzPE
EPM5MQUREPMQU
MQlRhPdQ`R\PXQU
RPPLQU
QPF0EE
MQUREPMQUREP@QU
E0E <1E
EEtMxU|EEh`h`tQ
E]UjhCC
TRPP`QR\HE
RHPDQ@R<PMQURj
EPMQUR
E $HEPMQURxPM
REPMQj
<E -j
PMQUREPMQUR
UREPMQ
UREPMQ#
h~E(M!
||xE)xPQZ
ttpE*pPQ
llhE+hPQ
dd`E,`PQF
\\XE-XPM}E,}E+}E*}E)}E(
TTPE.PPhQ}E("}Qj
LLHE/HPh|E(|MQURhPE
DD@E0@RP
<<8E18RM\|E0-|E(
|EPMQhRlPM
QRPQREPMQj
E5<{E4-{E3
REPMQURhPMQlRj
*0E(zE'hzEP
MyEMyMd
PMxEMME
Y]UjhC
Y]UjhFC
PMQUREPMQUREPM
LQUREPM
EPMQUR
4PM&tE
MrMQURMPE
EMQUREPMQU
QUREPMQ|RxPtQU
$RlPhQU
`+pE U
QUREPMQUREP\QU
P 0E!XoE \oE
MFoEM7oTMd
Y]UjhC
PMnEMME
Y]UjhC
Y]UjhC
QMmEUUE
Y]Ujh(C
Y]UjhC
PMQUREPMQUREPM
DQUREPM
EPMQUR
MQURMePE
MgMQMgURD
EPMigMQ
UREPMQURE
P`<fE MQ
REP|QxRtPpQlRE
PdQ`RE
E \eE heE
PTdE#XQ
REPMQUREPMQTRE
E$PMQj
0E#PpdE"TadE
McEMcLMd
PM0dMQM
PMbEMME
Y]UjhSC
QM4bEUUE
Y]Ujh~C
EMKaMd
PMQUREPMQUREPM
HQUREPM
EPMQUR,
M.\S5E
u"Mbh$C
MZUREPM
UREPMQURE
REPMQ|RxPtQpRE
$$ E PhQdRE
PXWE"\Q
REPMQUREPMQXRE
0E"TWE!XWE
Y^]Ujh
MQM{PU
EM+VMd
Y]UjhIC
PMQUREPMQUREPM
LQUREPM
MCSEM4SER
EPMQUR
M`REPMQM
EPMQUREPM
PMQUREP|QxRtPM
4QlRhPM
Q\OE `R
PMQUREPMQUR\PM
(($E $QURj
Rb0E XOE
MNEMNTMd
Y]UjhwC
URM^NE
EPMTPM
PQRPQRE
|PxQtRpPlQhRE
,P`Q\RE
QRPQRPPLQU
sFEaFQ
]UjhHC
EPMQhpC
PMQUREPMQUREPM
<QUREPM
M~PEP1
MQUREP
M@`M|u
M{MQM@URhC
PME@E
M3|P|Q
|?MQURM{PE
EM{uPM{tDj\M{P{
t!j\M{Pp{
MQMc?UREPMQURE
dt>E U
R`a>E hC
XM>E!E
PT:>E"xQ
RtPpQlRhPdQ`RE
PXQTRE
E#P=E"\=E!T~=E Xo=E ``=E
PL<E%MQ
REPMQUREPMQLRE
QX0E%Hv<E
M;EM;DMd
Y]UjhMC
PM:EMME
Y]UjhC
EPMuPM
EPM~9E
MQMruPU
EM"9Md
Y]UjhC
UREPMQUREPMQU
PREPMQU
M97EM*7E
EEEMQURj
EPMQM+rPU
MQUREPMQU
EPMQUREPMQ|RE
@PtQpRE
URX\3E
QUREPMQURdP`QU
440E 0RXPj
Y]UjhC
EEEEM^~E
Y]Ujh>C
PMQUREPMQUREPM
LQUREPM
M.EM.EF
EPMQUR
M;jPUR
M-UREPMiPM
UREPMQURE
REPMQUR|PxQtRE
4PlQhRE
REPMQUREPMQ\RE
(($E $PMQj
Mh*EMY*TMd
Y]UjhlC
EPMePM
EEM)Md
Y]UjhC
Y]UjhC
dPMP)MQM
UUEM'E
E]UjhcC
EPMQUREPMQURE
(PMQURE
M#EMx#|6
MQUREP
Mn_PUR
=EPMQj
M4UREPj
MS^PxQ|
pu!M]PlQ{
UREPM&]PM
MQM UREPMQURE
URdP`Q\RXPTQPRE
PHQDRE
UREPMQUREPMQ8RE
E!PMQj
Uj"EPW
#j,MQmW
j,UR[W
tQhhlD
tRhhlD
tPhhlD
E]UjhC
E]UjhC
Q|RxPtQpRlPhQj
umILPM
j\M4KP
JPTQJi
MQURMJPE
UREPMQLRE
PDQ@R<P8Q4R0Pj
REPMQUREPQ(Rj
HP$Pf
EPMQMGPU
E MQUREP
REPMQUREPQRj
R@0E'^
Y]Ujh@C
Y]UjhcC
QMAPMAPU
E]UjhC
Y]UjhC
QMOEUUE
Y]UjhC
dP`Q\RXPTQPRj
URfEPM
HmKlRE
tv:PEPX
MQURMU:PE
xlQ<0ZE
<R8PDQt9P@RJ
JUREPMQURE
R fE xlD
QE 4Qj
0R,P(Q$R P
REPMQUREPtQURj
QRPQRPj
RPM2PM
PQURPM
PQRPQR|Pj
PQRPMQtRpPj
]Ujh^C
PMQUREPMQUREPM
LQUREPM
EPMQURN
M`,PUR
MUREPM+PM
UREPMQURE
REPMQUR|PxQtRE
4PlQhRE
REPMQUREPMQ\RE
(($E $PMQj
MHEM9TMd
Y]UjhC
EPM'PM
EEMaMd
PMEMME
&PM0MQM
Y]UjhC
RPQRPQh
8REP$QLit
$RxBPPLE
QHRM!PE
tPA@@<E
$2@RHPMQ
PQRPQRh
4RxPtQh
00,E ,Qj
lzE hYC
hfE!lQj
@R PHQURhPQh
(($E"$Q
R0E!dE hE
<EM-Md
WPPPVV
ESVWPEd
3YVSWM
Y_^[M3$
PQSVWlD
$UQQSVWd5
SVWE3PPPuu
E_^[E]Vt$
^U8S}
E[UQSE
k 3@[UQSVW}
VW395dD
8_^[]U
;YYt SVW
UUUUUR
3_^][j
DDDDDDDDDDDDDD
^_UWVu
DDDDDDDDDDDDDD
tAt2t$
wIVSP~=
YE;t'CH;r
PSulSU8
9}uH;u
E;t CH;r
Yt vVWH
V3;v)j3X;D$
:t3^[_]
@@fu+D$
vr3Wf]}f
E`p3?j
tf9]u6E u03@8]t
BYYQL$
Wru{vnM
tR:QuMPt<:Qu7Pt&:Qu!Pt
@AE9]r3_[
QSUVW5
;YYr|+
;r;Pt$
3_^][YVj
YHU S39]
;tVEEE
WWWWW@
Y}V.YEE
EE3;u$9]
SSSSSk@
Yt1V__
Yt%VS_
SSSSS?
]9]tAM
SSSSS>
]8 u *=
jEPhlD
B:t6t:t't
;t_+^U
@YY4VE
;t+^8]t
Map_[UV395D
^]UQQE
3b339u
0VVVVV:
ES3;Vu
^SSSSS0$:
;u 8 t
SSjWVQRp
j"^;~Ej3X
QujWVp
e^[M3U
MapS39
u[Sjt$
pXPTYE
QTPTQXPXQ
LUQSW}
3;]u j3
;YYtJM
EV9]Yt
^0WWWWW1
3EEEE;E
EE8csmt
E`p`E9X
8]tDMap;E
;t+3_^[UV395D
SVW3;t
^0WWWWW.
BBFFf;t
3_^[U S39]
;t$;u ,
tU;|BMx
YYt"Mx
39]f\~
HH_^[Uu
3j`hAD
E3CS %
S\$ UVs
8WD$(@
L$ St^Dm
L$(9csmu*=xC
QR^YYt
=csmu+
8csmu8x
t*9csmu"A
j,hpBD
>csmuB~
YYtaSVZ
YYt)SV"
Ht Hu4j
VP9]UQQVu
t+>MOCt#u$u u
EPEPVu W
;Es[S;7|G;w
@u"u$u
;Er[_^U,M
Yu\39 ~
EPEPuu W
(u$]u E
u$u uSu
_^[Vt$
tR99u2y
u$Vu u
Q 3@_^[]V5lmD
YV5lmD
^YP5lmD
YYt:V5hmD
PEYF,t
P7YF4t
P)YF<t
PYF\=yD
~lt#W#
u&V5lmD
>YW_lmD
YYt4V5hmD
VW_^]M
F$|3@_^
_^UQQM
MOI;|9 M
3@_^[U
SI VW}
HD9#U#
MLD3#u
]#\D\D
+SVWlD
1E3PeuEEEEd
Y__^[]QUQQVE3PuuG
VVVVV%
X^95lD
6YYuTVWhpB
3PPPPP
VS@<Yv8VF;
3VVVVV
VVVVVa
VVVVV?
;t%t j
]_^[Yj
]|ux}tf
f]pfElfehfmd
S3;VWt
^0SSSSS
Iuu}]U
+EPRQL
ANu_^][U$d
j BYqj
whu;5tD
8]tEMap<u
E`p[U lD
Zf1Af0A@@Ju
@;vFF~
M_^3[j
*Y%u pD
3SUVt$
3;Wto= {D
;t^9(uZ
;tD9(u@
KuVrY_^][SUVt$
^P]{uD
P_^][Vt$
SUW=$C
^P]{uD
t7t3V0;t(W8Yt
VxY^3j
Fpt"~l
j ,Y[j
EPQEPEj
SV3;Wu:EP3FVh\C
39] SSu
ESBEYu39]
e_^[M3
u$Mu u
MapVW3t$
_^VW3j
u_^VW3t$
YYu-9D$
u_^VW3t$
rYUQVu
9uu-VVVV
ItFht8lt
Pu|YEYt
HHt@HHt
UM@9u]
itYnt o
EGEEPu
u}PuESP50zD
EPS5<zD
YYY}gu
EPS58zD
YYY;-u
0@2If90t
@@;u+E ;u
]+]+]E
WSj0E^
EtQ~Mu
PEFPF]
WSj EC^
3PPPPP#}
U S39]
u SSSSS
iSSSSS
t4;|"Mx
EPS]YYt
HH_^[US39]
^[]Vt$
W>+~,WPVxYPM
Y}3u;5D
YY3BUD
1 BPwD
|_3^;=D
V4YP>l
_^jThDD
Ej(j ^V)YY;
3FRj(j YYtM
;rF9=D
<at9<rt,<wt
J9]u:eE
(Y]3u;5D
PVYYYF
FYSVWT$
URPQQhB
t;T$4t
;v.4v\
UVWS33333[_^]
33333USVWj
_^[]Ul$
RQMQVp
;u'0VVVVV
u&H30,VVVVV
FE3PPj
MQPuFEu
M3+ME;(
@@FF}f
++PPVh
GE+E;(
EEuV}39ut j
WWWWW<
Wu8SS3GWh\C
39]$SSu
;~Ej3X
3;tAuVWuu
EV)Yu EYY
3;tuSW}
PWu u<
uguYE;t
e_^[M3sU
u(Mu$u u
Map39D$
t&P7|FVsYYG
Wt1t'P{GW:sYYF
(;r3_^[j
RsYt=E
+PRYYt+@$
EYF`[_^Vt$
YYt{ ;u
@;u_3@
uNSW< D
_3[@^3^
R(YST$
~Yu[U$t
]]]u GSSSSS
uVYt.VYt"V
P|Yt3uM
LubExO
JdtEit@ot;xt6Xu
/E*ht lt
n]t5ct
EGEMtHEME
EGEMtHE
PaxYu}
EGEMtHE
PawYuM
EHP54zD
EEPEE?
EPEP&Y
oUjF<-uHtD
]t=F:s
u+u Mu
x]tGXtB}xE
FuLGFM
}xtO}ptI
WsYtVE
}xt)}pt#
PrrYta}ou
VrYt>V
f>}EG}BUE
u?dY}u
Fu8M^t
3@3UQQ}
Mm3;u+
_VVVVV8
SSSSS@
F80t.G
E`p3_^[U,lD
^VMQMQp
SSSSS0}
M_^3[^Uj
]U$VWu
^WWWWW0
E`p3[_^U
^03PPPPP3
(Wj0Vc
E`p3_^[U,lD
^VMQMQp
SSSSS0+
M_^3[tYU0lD
_WMQMQp
SSSSS8r
EHE3}-
M_^3[|XUE
et_EtZfu
]EuMm]]
3@3hLC
PCC>Yu
j?rY|$
}}b9}u-
ItHht:lt
QPaYYt
FFE9}|
Et-EEPEE
EPEPrC
fEEEuN
kitYnt o
W@UYEt
ECEEPu
u]PuEVP50zD
EPV5<zD
YYYf}gu
EPV58zD
YYY>-u
90t9MM
@@u+EE}
uN~J}uM
MVEKY}
fEt$M]
3PPPPP}
_^3[<M
t.t$<"u
u_^S39
GVdUYt
U@V3UE>=Yt/j
SSSSSm
3Y]_^[5D
FA>\t>"u&
uUEPSS}
=?sJMsB
;r6P);Yt)UEP
_^[QQ0D
SUVW=\C
SSS+S@PVSSD$4
;t2UR;YD$
t#SSUPt$$VSS
u+@U;Yu
DUVWgJ
_^][YYVW
;r_^VW
E3E3;u
8csmu*x
Vt"5<D
3PeuEEd
]|ux}tf
f]pfElfehfmd
eUSVWUj
P(RP$R
t:|$,t
;t$,v-4v
UQPXY]Y[
c3}5DD
\}Y;uSEPY;t
[|Yj h`ED
Y+t"+t
+td+uD}}
3PPPPPb
P{EY3}
u@OdMGd
u wdSUY
U SVW~z39
WPry;Y|D
WPZyYxD
u;tm95|D
tePyY;t%MQj
u3EPVYt
;t(P8yY;
S3;VWt
^0SSSSSe
3_^[USVu
3_^[];t
^0SSSSS
3SEEESX5
PZ+t Q3
R>6K>v C>v$;>v(3>v,+>v0#>v4
>@v@=vD=vH=vL=vP=vT=vX=v\=v`=vd=vh=vl=vp=vt=vx=v|=@
=,^Vt$
V<Y^Vt$
P]<YF ;
PK<Yv$;5D{D
V9<Y^UV3PPPPPPPPU
$s ^UV3PPPPPPPPU
$sF ^U
33C;u3EPSh\C
;u9} }u
6~;w6F
3;tb9} u
SYuREYe_^[M3
MDu Eu
YM37U4lD
u?YF;~[
w/b;t8
-WWuuj
t`][9}
WWWWVuWu
;YYEt+WWVPVuWu
uPYEe_^[M35j
3;v.jX3;E
EU_^j
~VVVVV
^SSSSS0u
Map_^[;t.;w(
j"^SSSSS0
8]tE`pu
0E`p$M
QPcYYu
uuK<9uu-'VVVV
PYt6uYt(u
3MEEEE
ItFht8lt
P;YEYt
HHtAHHt
V?UYEj
GEGEEPu
u}PuESP50zD
EPS5<zD
cYYY}gu
EPS58zD
bYYY;-u
C]StuM!s
RPSW309]~
0@3If8
@@u+E u
]+]+]E
EtQ~Mu
WSj E~
3PPPPP
_^3[1&
S3;VW|[;
t58t0=
V3;|";
u$x0xVVVVV
uqM3}j
eY3C]~
E}uyG&j(j jYYEta
SSSSS8w
jX;EUu
r'Vt8<tWWWWW
PpYME;E
j3[_^j
CYU(SV3E
SSSSS4n
EP;iYt
t>Ht2Ht&wm
^SSSSS0n
+t5+t(+t
>t3;t/=
$ MeHM
tSSS6#
CSSS6_
E+PD=P6=
_8VVVVV
9ut(9ut
79YUj
3;u/fVVVVV
;u/fVVVVV
u$EPSR*
f;u,ft<U
E`p3_[^j
u.`dSSSSS
;u.*dSSSSS
3f;u!f;t
E`p3^_[
H8]tMapj
EV395`|D
ug=`|D
tVURPEPQ
eMapYa
E`p:39]
V7;Y`yD
t.V'Yt"V
uAV;Yt.VYt"V
@$t!`3WWWWW
EP3SSSSWEPEP
E`p3M_^3[w
EP3SSSSWEPEPy
E`p3M_^3[
^0SSSSS_
3_^[]UQU
3PPPPP-]
WVU33D$
%#Vt1W}
_VVVVV8\
YY3^]U
V{Y`yD
t.V{Yt"V{
V{Yt.V{Yt"V{
VPmYYu
VP|mYYtf
{Yt"Vz
l39]~4N
7C;]|fE
YYM_^3[q
0;u,XWWWWW
u,9uv'
E`p3[_^U39
SVVVVV
3^3PPj
WMEu'339\u
JB|j 3Y+@M
JBj Y+3B\M
3+BL1<
}3^j Y+
WMEu'339\u
JB|j 3Y+@M
JBj Y+3B\M
3+BL1<
}3^j Y+
_[U|lD
S3V3EE
F39]$WE}]u]]]]]]]u EHSSSSS
<+t(<-t$:t<C
]<+t<-t`}
+t HHt
B:t,1<
+JMtHHt
B:}OMEO?
tEPuEP
3f;u!GC
]FFEM}
u3}u*e
M_^3[1
]EEEEEEEEEEEE?E
u}u.u*u&f!;f;
;u0u,h
VVVVV#A
VVVVV@
`;fUu}fEM
3##EEEE
f;u$U@B
u-U}ue
EU}um
u3}u*e
fUfUUUU
3f;~<E
u.U]ue
EU]um
H]Uu39Et
u1}u(}Eu
M36fEfEEEE
fE[E}Me
~(E}Mm
0K;]s;]Es
EM_^3[o
SUVW|$
t$(L$$##
\$(D$(3
u,;W ;t
M_^3[j
^SSSSS0h2
;u 8 t
SSjWVQRh
d0j"^;~Ej3X
QujWVp
e_^[M3U
MapS39
W/SSSSS
u[Sjt$
MhM`MXMPMHM@M8M0M(M M
pvdk``\UXJT$
MxMpMhM`MXMPMHM@M8M0M(M M
d{`p\eTZXOT$
M)M!T$
MxMpPeLZHO@D<98.0#,
3\43O
=M5M-M%M
MIMAM9M1E
MA 6T$
MQMIMAM9M1M)M!M
HtDi@^<S8H4=02,'(
4t0i,^T$
M8M0M(T$
yn|cxXT$
MlMdM\xQtFp;hPuY
MPMHM@M8M0M(M M
HyDn@c8X4M<B07,,(!$
yncXMB7,!
|qf[PT$
M}MuMmMeM]MUMMME|:x/t$p
4t,i(^0S$H =
|~xsthp]lRhGd<`1\&X
J3sH D
xtvpkl`
ZOD9X.
3~43ql D
J3F0!D
ZM0OM4DM89M<.T$
MxMpMhM`MXMPMHM@M8M0M(M M
\uXjT_LTPIT$
lyhndc`X\MXBP7L,T!H
MxT]`R\WX<P1L6H+D @
@3HJ3>%D
MxMpMhM`MXMPMHM@M8M0M(M M
MxMpMhM`MXMPMHM@M8M0M(M M
`{hp\eXZTOPDT$
MjMbT$
M?M7M/M'M M
|txit^pShHd=l2`'\
M}MuMmMeM]MUMMMEM=M5M-M%M
MqMiT$
|zxotdpYlNhC`8\-d"X
9MMMMT$
J3FD0D
MhM`MXMPMHM@M8M0M(M M
p|lqhfd[`PXET:\/P$L
J3A@2D
MpMhM`T$
M8M0M(M M
tzpoxdlYhNdC`8X-\"T$
MMMMT$
MxMpMhM`MXMPMHM@M8M0M(M M
,3M 4D
M|MtT$
J3"T5D
M}MuMmMeM]MUMMMEM=M5M-x"l
M~M~~|~x~t~p~l~h~d~~~
U~XJ~T?~L4~H)~D
~8}4}0},}(}$}
n}c}X}T$
9M|M|M|T$
J3NX9D
|h{d{`{\{X{T{P{Lt{HM{M{<iD^@S8H|M{4B{07{,,{(!{$
zzMzzzzz{zpzezZzOzDz9z.z#z
z|yxytypyT$
J3w4;D
MyMyMyMyMxyMpyMhyM`yMXyMPyMHyM@yM8yM0yM(yM yM
yMxMx|xxxtxlxhxpxdx`x\xXxT$
M\xMTxT$
wHw w@wvwkw`wUwJw?w4w)w
wvvvvvvvvvxvtyv|nvpcvlXvhMvdBvT$
,3J3=D
StubPath
\AutorunsDisabled
\AutorunsDisabled
Wow64EnableWow64FsRedirection
Kernel32.dll
Wow64DisableWow64FsRedirection
Kernel32.dll
Wow64RevertWow64FsRedirection
Kernel32.dll
RegDeleteKeyExA
advapi32.dll
IsWow64Process
Kernel32.dll
rsaenh.dll
GetSystemWindowsDirectoryA
Kernel32.dll
\System32
GetSystemWow64DirectoryA
Kernel32.dll
PROGRAMFILES
PROGRAMFILES(X86)
AutoRuns
No items to search
Cannot find string "
AutoRuns
Cannot find string "
AutoRuns
Cannot find string "
AutoRuns
balloon
BALLOON
SOFTWARE\Sysinternals\Autoruns
height
showall
shownomicrosoft
verifysignatures
google
column%d
columnPos%d
MS Sans Serif
SOFTWARE\Sysinternals\Autoruns
height
column%d
columnPos%d
showall
shownomicrosoft
verifysignatures
google
AutoRuns
AutoRuns
AutoRuns Data (*.txt)
All (*.*)
Compare to Saved AutoRuns File...
Error opening file
System\CurrentControlSet\Control\ProductOptions
ProductSuite
ProductSuite
ntdll.dll
VerSetConditionMask
KERNEL32.DLL
VerifyVersionInfoA
Terminal Server
GetLongPathNameA
kernel32.dll
RUNDLL32
RUNDLL
CSCRIPT
WSCRIPT
\SYSTEMROOT\
\SYSTEMROOT\
\SYSTEMROOT\
Software\Microsoft\Windows\CurrentVersion\App Paths\
File not found:
%d.%02d.%04d.%04d
\StringFileInfo\%04X%04X\%s
\VarFileInfo\Translation
InternalName
FileDescription
CompanyName
File not found:
File not found:
File not found:
http://www.google.com/search?q=
http://search.msn.com/results.aspx?q=
http://www.google.com/search?q=
\ntuser.dat
Error loading profile for
] - Sysinternals: www.sysinternals.com
Autoruns [
Autoruns
Winsock Service Providers cannot be disabled (only deletion is supported)
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit
Disabling or deleting Userinit will prevent users from logging on.
Are you sure you want to disable autorun of
Autoruns
AutorunsDisabled.ini
windows
windows
AutorunsDisabled.ini
windows
AutorunsDisabled.ini
windows
windows
AutorunsDisabled.ini
windows
windows
AutorunsDisabled.ini
windows
windows
windows
AutorunsDisabled.ini
windows
windows
AutorunsDisabled
AutorunsDisabled
AutorunsDisabled
(Default)
(Default)
(Default)
(Default)
"%1" %*
(Default)
(Default)
(Default)
Error changing item state
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit
Deleting Userinit will prevent users from logging on.
Are you sure you want to delete autorun of
Are you sure you want to delete autorun of
Autoruns
AutorunsDisabled.ini
windows
windows
AutorunsDisabled.ini
windows
windows
"%1" %*
(Default)
(Default)
Error deleting start setting
properties
AutoRuns
AutoRuns Data (*.txt)
All (*.*)
Save AutoRuns Output to File...
Error saving file
regedit.exe
AutoRuns
The full name of the selected key or value is not available.
\HKEY_LOCAL_MACHINE
\HKEY_USERS\
\HKEY_CURRENT_USER
\HKEY_CURRENT_CONFIG
\HKEY_CLASSES_ROOT
\HKEY_USERS
RegEdit_RegEdit
%windir%\regedit.exe
%systemroot%\regedit.exe
RegEdit_RegEdit
AutoRuns
Autoruns was unable to launch Regedit.
SysTreeView32
SysListView32
desktop.ini
(Not verified)
(Verified)
Cancelling scan...
MICROSOFT
(Escape to cancel scan) Verifying
(Not verified)
(Verified)
MICROSOFT
AutorunsDisabled
AutorunsDisabled
AutorunsDisabled
AutorunsDisabled
AutorunsDisabled
AutorunsDisabled
AutorunsDisabled
AutorunsDisabled
(Verifying...)
(Verifying...)
(Not verified)
\AutorunsDisabled
(Default)
(Default)
(Default)
\AutorunsDisabled
(Default)
\InprocServer32
CLSID\
\Shell\Open\Command
CLSID\
\InprocServer32
CLSID\
\AutorunsDisabled
(Escape to cancel) Scanning...
REGISTRY
REGISTRYEMPTY
FOLDER
FOLDEREMPTY
Entry Location,Entry,Enabled,Description,Publisher,Image Path
System\CurrentControlSet\Control\Session Manager
Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options
Autorun
Software\Microsoft\Command Processor
Autorun
Software\Wow6432Node\Microsoft\Command Processor
Autorun
Software\Microsoft\Command Processor
SOFTWARE\Classes\Exefile\Shell\Open\Command
System\CurrentControlSet\Services
System\CurrentControlSet\Services
System
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
UIHost
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify
GinaDLL
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Taskman
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Scrnsave.exe
Control Panel\Desktop
ImageName
System\CurrentControlSet\Control\BootVerificationProgram
SYSTEM\CurrentControlSet\Control\Print\Monitors
Authentication Packages
SYSTEM\CurrentControlSet\Control\Lsa
Notification Packages
SYSTEM\CurrentControlSet\Control\Lsa
Security Packages
SYSTEM\CurrentControlSet\Control\Lsa
StartupPrograms
System\CurrentControlSet\Control\Terminal Server\Wds\rdpwd
AppSetup
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Software\Policies\Microsoft\Windows\System\Scripts\Startup
Software\Policies\Microsoft\Windows\System\Scripts\Logon
Software\Policies\Microsoft\Windows\System\Scripts\Logon
Userinit
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Appinit_Dlls
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
Appinit_Dlls
SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows
System\CurrentControlSet\Control\Session Manager\KnownDlls
SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce
Software\Microsoft\Windows\CurrentVersion\RunServices
Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
Software\Microsoft\Windows\CurrentVersion\Policies\System
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Software\Microsoft\Windows\CurrentVersion\Policies\System
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Taskman
SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
System\CurrentControlSet\Control\SafeBoot\Options
UseAlternateShell
AlternateShell
System\CurrentControlSet\Control\SafeBoot
SOFTWARE\Microsoft\Windows NT\CurrentVersion\TerminalServer\Install\Software\Microsoft\Windows\CurrentVersion\Runonce
SOFTWARE\Microsoft\Windows NT\CurrentVersion\TerminalServer\Install\Software\Microsoft\Windows\CurrentVersion\RunonceEx
SOFTWARE\Microsoft\Windows NT\CurrentVersion\TerminalServer\Install\Software\Microsoft\Windows\CurrentVersion\Run
SOFTWARE\Microsoft\Windows\CurrentVersion\Run
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run
SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx
SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnceEx
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce
SOFTWARE\Classes\Protocols\Filter
SOFTWARE\Classes\Protocols\Handler
SOFTWARE\Microsoft\Internet Explorer\Desktop\Components
SOFTWARE\Microsoft\Active Setup\Installed Components
SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components
SOFTWARE\Microsoft\Active Setup\Installed Components
AltStartup
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
Common AltStartup
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
Common Startup
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
Startup
Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
Software\Microsoft\Windows NT\CurrentVersion\Windows
Software\Microsoft\Windows NT\CurrentVersion\Windows
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
Software\Microsoft\Windows\CurrentVersion\Run
Software\Microsoft\Windows\CurrentVersion\RunOnce
SOFTWARE\Microsoft\Windows NT\CurrentVersion\TerminalServer\Install\Software\Microsoft\Windows\CurrentVersion\Runonce
SOFTWARE\Microsoft\Windows NT\CurrentVersion\TerminalServer\Install\Software\Microsoft\Windows\CurrentVersion\RunonceEx
SOFTWARE\Microsoft\Windows NT\CurrentVersion\TerminalServer\Install\Software\Microsoft\Windows\CurrentVersion\Run
Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects
Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
Software\Wow6432Node\Classes\Folder\Shellex\ColumnHandlers
Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
Software\Microsoft\Internet Explorer\UrlSearchHooks
Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
Software\Classes\Folder\Shellex\ColumnHandlers
Software\Microsoft\Internet Explorer\Toolbar
Software\Wow6432Node\Microsoft\Internet Explorer\Toolbar
Software\Microsoft\Internet Explorer\Explorer Bars
Software\Microsoft\Internet Explorer\Explorer Bars
Software\Wow6432Node\Microsoft\Internet Explorer\Explorer Bars
Software\Wow6432Node\Microsoft\Internet Explorer\Explorer Bars
Software\Microsoft\Internet Explorer\Extensions
Software\Microsoft\Internet Explorer\Extensions
Software\Wow6432Node\Microsoft\Internet Explorer\Extensions
Software\Wow6432Node\Microsoft\Internet Explorer\Extensions
(Escape to cancel) Scanning...
0x%02hx%02hx%02hx%02hx%02hx%02hx
SeRestorePrivilege
Software\Microsoft\Windows NT\CurrentVersion\ProfileList
ProfileImagePath
Autoruns [%s] - Sysinternals: www.sysinternals.com
PROCEXPL
Procexp.exe
PROCEXPL
AutoRuns
You must download the latest version of Process Explorer to use this feature.
is not currently running.
AutoRuns
AutoRuns
Process Explorer from Sysinternals is not running and not in the path.
http://www.sysinternals.com
Hide &Signed Microsoft Entries
Hide &Microsoft Entries
&Google...
&MSN Search...
Image Path
Publisher
Description
Autorun Entry
SysListView32
LSA Providers
Print Monitors
Winsock Providers
Winlogon
KnownDLLs
AppInit
Image Hijacks
Boot Execute
Drivers
Services
Scheduled Tasks
Internet Explorer
Explorer
Everything
PrintMonitor
Winsock
Winlogon
AppInit
AppInit
Hijack
BootExecute
Drivers
Services
InternetExplorer
Explorer
Everything
Hide &Signed Microsoft Entries
&Verify Code Signatures
&Verify
Ctrl+V
Hide &Microsoft Entries
Ready.
(Escape to cancel) Scanning...
Cancelling scan...
\autoruns.chm
Unable to open help file
Task Scheduler
Task Scheduler
\Tasks
explore
AutorunsDisabled
WIN.INI
AutorunsDisabled.ini
AutorunsDisabled
explore
(Not verified)
(Verified)
(Verified)
(Not verified)
AboutBox
MICROSOFT
AutoRuns
commdlg_FindReplace
APPICON
APPICON
Autoruns
BALLOON
MainDialog
ACCELERATORS
DrawThemeBackground
CloseThemeData
OpenThemeData
uxtheme.dll
ResizerClass
STATIC
Button
VirtualFreeEx
VirtualAllocEx
kernel32
BootExecute
BootExecute
BootExecute
File not found:
File not found:
autocheck
AutorunsDisabled
AutorunsDisabled
AutorunsDisabled
AutorunsDisabled
AutorunsDisabled
ImagePath
Description
\Scripts.Ini
%dCmdLine
%dParameters
DisplayName
FileSysPath
Script
Scripts
\AutorunsDisabled
\InprocServer32
CLSID\
\AutorunsDisabled
\InprocServer32
CLSID\
CLSID\
\AutorunsDisabled
MenuText
ButtonText
Script
ClsidExtension
\InprocServer32
CLSID\
res://
res://
res://
file://
file://
file://
\AutorunsDisabled
Source
\AutorunsDisabled
Debugger
AutorunsDisabled
DLLDirectory
DLLDirectory32
DLLDirectory
DLLDirectory32
(Default)
\AutorunsDisabled
\AutorunsDisabled
AutorunsDisabled
Driver
\AutorunsDisabled
AutorunsDisabled
AutorunsDisabled
AutorunsDisabled
ImagePath
Description
Wintrust.dll
WinVerifyTrust
WTHelperGetProvSignerFromChain
WTHelperProvDataFromStateData
CryptCATAdminReleaseContext
CryptCATAdminReleaseCatalogContext
CryptCATCatalogInfoFromContext
CryptCATAdminEnumCatalogFromHash
CryptCATAdminCalcHashFromFileHandle
CryptCATAdminAcquireContext
CryptCATAdminAddCatalog
WinVerifyTrust
CertNameToStrA
crypt32.dll
AutorunsDisabled
AutorunsDisabled
Task Scheduler
\AutorunsDisabled.ini
\win.ini
[windows]
Dllname
\AutorunsDisabled
%s\Catalog_Entries\%012d
System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9
hhctrl.ocx
CLSID\{ADB880A6-D8FF-11CF-9377-00AA003B7A11}\InprocServer32
bad allocation
bad exception
EncodePointer
KERNEL32.DLL
DecodePointer
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
CorExitProcess
mscoree.dll
runtime error
TLOSS error
SING error
DOMAIN error
An application has made an attempt to load the C runtime library incorrectly.
Please contact the application's support team for more information.
- Attempt to use MSIL code from this assembly during native code initialization
This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain.
- not enough space for locale information
- Attempt to initialize the CRT more than once.
This indicates a bug in your application.
- CRT not initialized
- unable to initialize heap
- not enough space for lowio initialization
- not enough space for stdio initialization
- pure virtual function call
- not enough space for _onexit/atexit table
- unable to open console device
- unexpected heap error
- unexpected multithread lock error
- not enough space for thread data
This application has requested the Runtime to terminate it in an unusual way.
Please contact the application's support team for more information.
- not enough space for environment
- not enough space for arguments
- floating point not loaded
Microsoft Visual C++ Runtime Library
<program name unknown>
Runtime Error!
Program:
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
(null)
`h````
xpxxxx
UTF-16LE
UNICODE
Unknown exception
GAIsProcessorFeaturePresent
KERNEL32
InitializeCriticalSectionAndSpinCount
kernel32.dll
GetProcessWindowStation
GetUserObjectInformationA
GetLastActivePopup
GetActiveWindow
MessageBoxA
USER32.DLL
!"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
`h`hhh
xppwpp
Complete Object Locator'
Class Hierarchy Descriptor'
Base Class Array'
Base Class Descriptor at (
Type Descriptor'
`local static thread guard'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`vector copy constructor iterator'
`dynamic atexit destructor for '
`dynamic initializer for '
`eh vector vbase copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector destructor iterator'
`managed vector constructor iterator'
`placement delete[] closure'
`placement delete closure'
`omni callsig'
delete[]
new[]
`local vftable constructor closure'
`local vftable'
`udt returning'
`copy constructor closure'
`eh vector vbase constructor iterator'
`eh vector destructor iterator'
`eh vector constructor iterator'
`virtual displacement map'
`vector vbase constructor iterator'
`vector destructor iterator'
`vector constructor iterator'
`scalar deleting destructor'
`default constructor closure'
`vector deleting destructor'
`vbase destructor'
`string'
`local static guard'
`typeof'
`vcall'
`vbtable'
`vftable'
operator
delete
__unaligned
__restrict
__ptr64
__clrcall
__fastcall
__thiscall
__stdcall
__pascal
__cdecl
__based(
SunMonTueWedThuFriSat
JanFebMarAprMayJunJulAugSepOctNovDec
CONOUT$
1#QNAN
1#SNAN
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
VERSION.dll
ImageList_Draw
ImageList_ReplaceIcon
ImageList_Remove
ImageList_Create
CreateToolbarEx
COMCTL32.dll
WSCDeinstallProvider
WSCGetProviderPath
WSCEnumProtocols
WS2_32.dll
TlsGetValue
CloseHandle
GetLastError
GetCurrentProcess
GetNumberFormatA
GetLocaleInfoA
GetProcAddress
LoadLibraryA
TlsSetValue
ExpandEnvironmentStringsA
GetWindowsDirectoryA
WideCharToMultiByte
SetFilePointer
ReadFile
CreateFileA
GetTickCount
lstrcatA
lstrlenA
lstrcpyA
MulDiv
FormatMessageA
LocalFree
lstrcmpA
LocalAlloc
GetModuleHandleA
GetVersion
GetFileAttributesA
GetTimeFormatA
GetDateFormatA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
GetFileSize
RemoveDirectoryA
MoveFileA
SetFileAttributesA
CreateDirectoryA
GetProfileStringA
WritePrivateProfileStringA
WriteProfileStringA
GetPrivateProfileStringA
DeleteFileA
SetLastError
GlobalUnlock
GlobalLock
GlobalAlloc
CreateProcessA
OpenProcess
MultiByteToWideChar
LeaveCriticalSection
EnterCriticalSection
ReleaseSemaphore
WaitForSingleObject
ExitThread
InterlockedIncrement
GetModuleFileNameA
InterlockedDecrement
CreateSemaphoreA
InitializeCriticalSection
TlsAlloc
SearchPathA
FindClose
FindNextFileA
FindFirstFileA
KERNEL32.dll
SendMessageA
SetCursor
LoadCursorA
SetFocus
PostMessageA
MessageBoxA
DefWindowProcA
DestroyWindow
ScreenToClient
ClientToScreen
ShowWindow
MoveWindow
ReleaseDC
DrawTextA
GetFocus
InvalidateRect
IntersectRect
GetSystemMetrics
GetClientRect
GetSysColor
CallWindowProcA
CreateWindowExA
GetCursorPos
GetParent
SetTimer
GetDlgItem
IsZoomed
IsIconic
GetWindowRect
SetWindowPos
LoadIconA
DestroyIcon
SetWindowTextA
CheckMenuItem
GetMenu
SetClipboardData
EmptyClipboard
OpenClipboard
CloseClipboard
WaitForInputIdle
FindWindowExA
SetForegroundWindow
GetWindowThreadProcessId
FindWindowA
EnumDisplaySettingsA
SetDlgItemTextA
InsertMenuA
GetSubMenu
DeleteMenu
EnableMenuItem
TrackPopupMenu
EndDialog
EnableWindow
SetWindowLongA
GetWindowLongA
SetPropA
EndPaint
DrawFrameControl
BeginPaint
PtInRect
UnionRect
OffsetRect
EndDeferWindowPos
EnumChildWindows
BeginDeferWindowPos
DeferWindowPos
GetClassNameA
GetPropA
ChildWindowFromPoint
GetSysColorBrush
ModifyMenuA
MapWindowPoints
ReleaseCapture
DialogBoxParamA
InvalidateRgn
PostQuitMessage
LoadStringA
DrawMenuBar
DispatchMessageA
TranslateMessage
IsDialogMessageA
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
CreateDialogParamA
RegisterClassExA
LoadImageA
RegisterWindowMessageA
DialogBoxIndirectParamA
InflateRect
USER32.dll
SetBkMode
SetTextColor
SelectObject
GetTextExtentPoint32A
ExtTextOutA
SetBkColor
CreateFontIndirectA
DeleteDC
GetDeviceCaps
CreateCompatibleDC
GetObjectA
GetStockObject
DeleteObject
GetTextMetricsA
CreateSolidBrush
EndDoc
EndPage
StartPage
StartDocA
SetMapMode
GDI32.dll
FindTextA
GetOpenFileNameA
GetSaveFileNameA
ChooseFontA
PrintDlgA
COMDLG32.dll
RegCloseKey
RegOpenKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegSetValueExA
RegOpenKeyA
RegQueryValueExA
RegCreateKeyA
RegDeleteKeyA
RegUnLoadKeyA
RegLoadKeyA
RegDeleteValueA
RegCreateKeyExA
RegQueryInfoKeyA
RegEnumValueA
AllocateAndInitializeSid
FreeSid
EqualSid
LookupAccountSidA
GetTokenInformation
RegQueryValueA
RegEnumKeyA
DeleteService
CloseServiceHandle
OpenServiceA
OpenSCManagerA
ADVAPI32.dll
SHGetFileInfoA
ShellExecuteA
ShellExecuteExA
SHELL32.dll
CoCreateInstance
CoInitialize
CoTaskMemFree
ole32.dll
OLEAUT32.dll
RtlUnwind
HeapAlloc
HeapFree
HeapReAlloc
ResumeThread
CreateThread
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
RaiseException
TlsFree
GetCurrentThreadId
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
VirtualFree
VirtualAlloc
HeapDestroy
HeapCreate
ExitProcess
WriteFile
GetStdHandle
GetCPInfo
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
HeapSize
SetHandleCount
GetFileType
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetStdHandle
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
{\rtf1\ansi\ansicpg1252\deff0{\fonttbl{\f0\fswiss\fprq2\fcharset0 Microsoft Sans Serif;}{\f1\fnil\fcharset2 Symbol;}}
{\*\generator Msftedit 5.41.15.1507;}\viewkind4\uc1\pard\qc\lang1033\b\f0\fs20 Sysinternals Software Licensing\par
\pard\b0 This software is provided "as is" and use of the software is at your own risk. Sysinternals disclaims any and all warranties, whether express, implied or statutory, including, without limitation, any implied warranties of merchantability, fitness for a particular purpose or non-infringement of third-party rights. Sysinternals does not warrant that the software is free of defects. \par
You are allowed to use software published by Sysinternals at home or at work without paying a commercial license fee provided that you downloaded the software yourself directly from Sysinternals, and: \par
\pard{\pntext\f1\'B7\tab}{\*\pn\pnlvlblt\pnf1\pnindent0{\pntxtb\'B7}}\fi-180\li360 Use the software on computers for which you are the primary user; or \par
{\pntext\f1\'B7\tab}Use the software on computers for which there is no primary user (e.g. servers, including Terminal Servers) and you are a full-time employee of the company that owns the computer; or \par
{\pntext\f1\'B7\tab}Use the software on computers within your residence \par
\pard\par
A commercial license is required to use the software in any way not covered above, including for example: \par
\pard{\pntext\f1\'B7\tab}{\*\pn\pnlvlblt\pnf1\pnindent0{\pntxtb\'B7}}\fi-180\li360 Redistributing the software in any manner, including by computer media, a file server, an email attachment, etc. \par
{\pntext\f1\'B7\tab}Embedding the software in or linking it to ano\tab ther program including internal applications, scripts, batch files, etc.\par
{\pntext\f1\'B7\tab}Use of the software for technical support on customer computers \par
\pard\par
Sales of commercial licenses support Sysinternals product development and assure that this Web site continues to offer valuable, up-to-date tools. Established software companies redistribute these utilities and incorporate the code into their products because this offers the potential to save significant development time. Sysinternals commercial licenses are priced according to the complexity of the licensed code and its role in the target application. If you are interested in licensing Sysinternals tools or source code for redistribution or for inclusion with or as part of a software product, please contact licensing@sysinternals.com. \par
Sysinternals License
%s License Agreement
Software\Sysinternals\%s
EulaAccepted
Riched32.dll
EulaAccepted
.?AV_com_error@@
.?AVbad_alloc@std@@
.?AVexception@std@@
.?AVtype_info@@
.?AVbad_exception@std@@
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
I x@oGAkU'9p|B
~QCv)/&D(
uuvHMXB
9;5SM]=];Z] T7aZ%]g']
?Zd;On
7?3=Bz
;1az?aUY~S|
D?$?9'
*?}d|FU>c{
zc%C1<!8G
u7.:3q
#2IZ9W
,%I-64OSk%Y
-----O
PIOxx}}
OVxxxxxxr
OVVxxxxP
OVVVxxm
OVVVVxxP
OUVVVVxxr
OUUVVVVxxr
`ff```
33333333333330
{{{{{{{{{{{{{0
{{{{{{{{{{{{w
{{{{{{{{{{{{x
{{{{{{{{{{{{{p0
{{{{{{{{{{{{{0
0{{{{{{{{{{{{{
0{{{{{{{{{{{{x
wwwwwwwwwwww0
{{{{{{{{{{{{0
{{{{{{{{{{{{0
{{{{{{x
33333333333330
wwwwwwwwwwwww0
wwwwwwwwwwwww0
wwwwwwwwwwwww
wwwwwwwwwwwww
wwwwwwwwwwwwx
wwwwwwwwwwwwx
wwwwwwwwwwwwwp0
wwwwwwwwwwwwwp0
wwwwwwwwwwwww0
wwwwwwwwwwwww0wwwwwwwwwwwww
0wwwwwwwwwwwww
0wwwwwwwwwwwwx
0wwwwwwwwwwwwx
wwwwwwwwwwwww0
wwwwwwwwwwww0
wwwwwwwwwwww0
wwwwwwwwwwww0
wwwwww
wwwwwwx
wwwwww
wwwwwwwww
wwwwwwwww
xwwwwwwx
wwwwxx
wwwwwwwwwwx
wwwwxp
333333333330
83333833338
83333833338
{xqp{x
{tD@{x
@@5443332,,,,
SIIIIIIIIIII7
!f nnnnnnnn:
$f&zzzzzzzzC
YYYYYYYYYYY@}
SSSseU
wwwwwp
}Mt;Y+A
wwwwwp
)zzzzzz
zzzzzz
zzzzzzzz
}Mt;Y+A
@@5443
SIIIIII
!f nnnn
$f&zzzz
YYYYYY
3333333333
8333383333
83333833338
@J=<8/&
4 2:qy
?Xd`Z'31bx}PK>VGR;DSkYTaom
]Qfi\e5{hgrusMwc~tOUnzp|jU?,
S f0fDgN`;Q.
!B3`@lXpu<
P~Z:r*
4 2:qy
31bx}PA
nzp|jU
S f0fDgN`;Q.
!B3`@lXpu
P~Z:r*
OX Or\
UUUUgg
ddPPrw
EEEEY]
UJPSPJN
UahjhbV[
;<DDDD
^E)O^^^^^^^^^^^^M3^^O?(((((^^^^^G@^^(&:GNQG((^^^J@^(.6#*<LVX?(^^P
BT]?^^^='
;TW?^^R+
(((((((((^^^>
?^^^^D
#6A?^^\^DD
**?^^^\^D8
<?^^^^ZY^[9
7?^^^^^ZZSSH+
0?^Z^^^^^^ZZZKI??^^Z^^^^^^^^^^ZY^^^Z^^^^^^^^^^^^YYZ^^
T{?oQ4oQ4oQ4oQ4oQ4
dFoQ4oQ4
oQ46914<Qv
-oQ464++qU7qU7u)Ak
f5-%f oQ4oQ4oQ4oQ4oQ4oQ4oQ4oQ4oQ4
'++++19A{?
BB(kI%
4-44{?
B:nP(YB/qU7u)'+<{?
$(&-9{?
ffF5--6{?
PJ{?{?
T{?oQ4
oQ46914
-oQ464++qU7
f5-%f oQ4oQ4oQ4oQ4
oQ4oQ4
BB(kI%
B:nP(YB/
DDDDDDDDDwwwwww
DDAywwq
(((((((((((((((((((((((((((((((((((((((((((((((((((
$$$$$$$$$
))))'"$
$$$$$$$$$
(((((((((((((((((((((((((((((((((((((((((((((((((
DDDDDDDDDwwwwww
DDAywwq
wwwwxwwxwwxx
WWWWWWW
L" 'CPebT:&Aa
-N\M@FORUc^
=-HL4DS[YI7
_F,---+18KU
J*-04.2563/3aW
=.5EG1!#%,78V
=4$@;B<99?W
w ??}z
dddEEEEEEUOO{{NNNUUUsss
UUUUUU|||
___mmm
|||ddd|||
z___|||
K$ $CO
>,GK3CTX
`G,,,,)3:
K),/3/355
>/5CG3 $
>3$>:C
llllllll
dddEEE
wwwwwwwwwwwwwww
?wwwwwwwww0
wwwwwwwwwwwwwww
wwwwww
wwwwwwwwww
00000000000000000000000000000000
/6666666666666666666666666666,
r?O^^^^^^^^^^^^^^^^^^_
?@5ssssssssssssssssm^
0nXQLG0
0|toip
{?>5x%em^
R?5FB4^}
f?57-`b
?=5FBBA^
0000000
R?55555555555555555:[]
0wYVSNJE0
g????????????????????D
0~yuqjhp
000000000
0zZWUPMKHC0
#+$$$$$$$$$$$$$$$$$$$$$$$$'(
]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]%%%%%%%%%%%%%%%%%%%%%]]]]]]]]]]
%&]]]]]]]]]
;FFFFFFFFFFFFFFFFFF>
%]]]]]B6]] 3UUUUUUUUUUUUUUUUUUU
%]]]]]@@?]]
UUUUUUUUUUUUUUUUUUU2
%]]]]]]]]]
IU________________UN
%]]]]]]]]] $UTMMMMMMMMMMMMMM_VU
%]]]]5.*]]]
UU=(_<Q________MX_U2
%]]]EE??]]
IU=(_8<________RM_UN
%]]]]]]]]] $UO=(["SZ______\M_WU
%]]]]]]]]]]
UU=(_4SS_______M_YU2
%]]90-*']]
IU=(((((((((((((M_UN
%]]KKHCD?] $UP==============MUU
%]]]]]]]]]
UUUUUUUUUUUUUUUUUUU2
%]]]]]]]]]
IUUUUUUUUUUUUUUUUUUN
%]:1/,+)]]#
%LLJGCA?]]
%]]]]]]]]]
]]]]]]]]]]]!
]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]
!.........-
Qem{|zx
Qlbcccccccdfr
sssssssutw/
,SVUTTTTTTUYWX[Z96
5=DBCCCCCCJHI
:>OMMMMMMLLNKKK
UUUUU](
(((((((((((((((((((((((((((((((((((((((((((((((((((
#########
))))'!$
#########
(((((((((((((((((((((((((((((((((((((((((((((((((x
cwwwwwwwwwwwwwwwwwwwwwwwwwwwwjI3
y y@y@y@
pmrrinninnyP
y0y@y@y@y@y@
|{}{x{yuyxjooy
pwwL!-
jpww8883
pwwqqqL!K 6
pwwuzzMMM3
y@yyyyyyy
`}~{{}{y|zwzytxxjooyP
pwwpwwpwwpwwpwwpwwpwwpwwpwwpwwpwwpwwpwwpwwpwwpwwpww{L!K 6
@y y@y@y@y@y@y@y@y@y@
||~{{}zy{zwzyvyytxxjooy0
4o4ov1U
@@@@@@@@0
?hM4o{j]
z|zuyx
cpww^^^L!I
}~{y|zuyxnrry0
pwwpwwpwwpwwpwwpwwpwwpwwpwwpwwpwwpwwpww7
|{}{y{zvzysxwy
'''''''''''''''''''@
\D2"J7/
\JB~k*
=(!"G*
zpZIB~p0
x]MHKS
;' "F+
wnZIB}p0
x]LIJO
;$ "F,
wo[JE~u4
[heeeeeeeeqlo
}pwmunWHAPI
<%7qYnLD
P|Y|YD
|Y|Y:
|Y|Y5
&&&G055/.
o&&&&0555.m
M,MM&1655.rm
M,SSot665.r
tSSn66Pr
o&&&&:
M,MM&;
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity name="Autoruns" processorArchitecture="x86" version="2.0.0.0" type="win32"></assemblyIdentity><description>Process handle and DLL viewer</description><dependency><dependentAssembly><assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="x86" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity></dependentAssembly></dependency></assembly>PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGX@
Western Cape1
Durbanville1
Thawte1
Thawte Certification1 0
Thawte Timestamping CA0
031204000000Z
131203235959Z0S1
VeriSign, Inc.1+0)
"VeriSign Time Stamping Services CA0
30X~k6
R-H=]_
!fXWou<&]
http://ocsp.verisign.com0
:0806420http://crl.verisign.com/ThawteTimestampingCA.crl0
TSA2048-1-530
?7!Op18
'NzaA*^
VeriSign, Inc.1+0)
"VeriSign Time Stamping Services CA0
031204000000Z
081203235959Z0W1
VeriSign, Inc.1/0-
&VeriSign Time Stamping Services Signer0
%Usu'iN \
EvNS \
<SoK5od
&S@,yR)t~B9
http://ocsp.verisign.com0
,0*0(&$"http://crl.verisign.com/tss-ca.crl0
TSA2048-1-540
thwbstz#{)qM.u
",x5vs\L
~|vqiOG05!
AZ9xIef8
VeriSign, Inc.1705
.Class 3 Public Primary Certification Authority0
040716000000Z
140715235959Z01
VeriSign, Inc.1 0
VeriSign Trust Network1;09
2Terms of use at https://www.verisign.com/rpa (c)041.0,
%VeriSign Class 3 Code Signing 2004 CA0
"'$l8'I
0q(wJQTom
UMm5(k\
c";Bi:
HRHo8l{D
https://www.verisign.com/rpa01
*0(0&$" http://crl.verisign.com/pca3.crl0
Class3CA2048-1-430
Q==d6|h[x
y0wca0_1
VeriSign, Inc.1705
.Class 3 Public Primary Certification Authority
J{UdU@IA.
lROuU"Au/cU}
TZY4_^z0
VeriSign, Inc.1 0
VeriSign Trust Network1;09
2Terms of use at https://www.verisign.com/rpa (c)041.0,
%VeriSign Class 3 Code Signing 2004 CA0
060202000000Z
070404235959Z01
Texas1
Austin1
Sysinternals1>0<
5Digital ID Class 3 - Microsoft Software Validation v21
Headquarters1
Sysinternals00
XBw`V~~u;
-g)_2?/`7W
i"b1Jk
-"_+tWF
9070531/http://CSC3-2004-crl.verisign.com/CSC3-2004.crl0D
https://www.verisign.com/rpa0
http://ocsp.verisign.com0?
3http://CSC3-2004-aia.verisign.com/CSC3-2004-aia.cer0
Q==d6|h[x
47009c3de442d876ef3ae87cca155f6d0
f1iY%oyk:
MnG (d
a4F3.qb5F
O<\}]D8^x|
UaEaM~2
H+c kEl G
4NuU[fQ
k4ceY]7
VeriSign, Inc.1 0
VeriSign Trust Network1;09
2Terms of use at https://www.verisign.com/rpa (c)041.0,
%VeriSign Class 3 Code Signing 2004 CA
jlqDZ%
64A0C+
VeriSign, Inc.1+0)
"VeriSign Time Stamping Services CA
060710192210Z0
]4.K[,g
T|Yj^ =NH)cG%=*)L
sm1`Cm
H~ofcO
cf45&AZRN_a
J#Po'#n
'V*9h+
\bybrekqt.exe
jrsptime
\ata.exe
\ma.exe
\xjywvg.exe
dkqarme
\pgmuntw.exe
jrdinrme
L!This program cannot be run in DOS mode.
YYY_Y^
[XmXRichY
`.data
msvcrt.dll
KERNEL32.dll
NTDLL.DLL
USER32.dll
MM#MuMgMM8
iMPoMMM
MNMJMz]MM/M"MM~MwMMqM|SMM
MJMMMj
MM7M1<M
Ma~MlMkMn
MMrM~M=McMtmM~MjMgM+M
MMhM/MaM\M~M
||f||t| P|)|
|=|U|h|,|
<|;|G|
|]|X||[|
|Y|Rj| |<x|
|7|2#|
||l|x,|
|f|y||1
|w||(|<|
||,|8|
|Y||+|_|
x;JVW}
J3fG8Y@
+SVWEePEEEEd
JYPhJj
U$x;JVu
PIf=;J3fE
Ef}t2E;Juuu
fffEufd]
3@EE3f
PEPzu?e
PuA_[M^
PYt0F<f8
JYYSYfdC
UQQW39}
JYYf97
UVW39}
|$;Jvu
~`J_^]
N8f<Yf"
WhCJu
F8f<Xf
J5xJ%J
J$J0J]
V3ShFJ;YYuHS
JY@=FJ
UQQSVWj
h@FJYY
!$J0Juu@
UQQSVW
$J_^0J[
}x;JVE$JW3;
1j%[f;
M_^a3f
UVW=FJ
"u+=:J
t;Jf8:
J1t095DJu
h(Jh$Jj-h0%J
0J$J3LfEM
UQQSVWE3P]]{
t$SMEP]F
5t;JhFJ
5t;JhBJ
5t;JhFJ
5t;Jh,CJ
5t;JhFJ
^UQSV3WVu]
VVqEG4_^[
(Jj0h,%J
SS3_^[]
(Jh(Jj/h(Js
h(Jh(Jj.h(JN
JYYw<3UVu
|*3fXS
W3t)9}
fEf;JfEEPfE:
3VKJS;t
uKJFB;|f$uKJ
t4V3f7V
5J__^[
J3F!0R
SV3WC3
x;JEfE
fEf;JVfEE3PfE:
t)VVVVPh
h2J(x;JEE
$(3A,jdX04DfH
J|MQSSj
JxMQSSj
JE;tMMQuPj
GGEPuWj
E +JW;u
DJVSSj
JSuh+Ju
J(;JEM[
J1J_1J
JEPhH3JEP=
JVEPh;Jx}
Vh2Jh;J^9t
JYY3f;JPP.
f;JfEEPPfE:
3f;JPP
JSYYWSS
3f;JPSf
GCF3f9
Y@@M_^[
wft f="
3f<w"tf
x;JSVu
EWt j*V8
PPj'V3
Sh4:JD
FJ5(Y4VW
5t;JEfX
VW=:JG
t)t)6Pv
x;JSVW}
w4E3;tXF
Y3M_^[
PVYY3f;JPVF
j8h@J23
]Sg]EP}
EKJKJ5JPV};
WSE;tE
hhAJx;JE
JJh;JP
Ef;Jf;
S3;fEfE:
fEffEfVP
J3YYPPh
u"ff;Eu
DJ3[_M^`
GGrEFFg3mUh
FFfu3@[_M^
JSWPSRM
_^[3=dJ
U`x;JS]
VEHJWP]xJ
JYPVVj
Jh;JPJ
JPS3SJP9
JJt5;t1h
JhIJPXHJhlIJ5XHJlJhTIJ5XHJpJ
3@M_^[
SetConsoleInputExeNameW
IsDebuggerPresent
CopyFileExW
JVu+WEuE
EPEhLJ4
P3VhLJuu
PVhLJu}
dJEPPE
PVhLJu}
PVhlLJu}
ffJEPPE
PVhLLJu}
ffXJf;t
PVh$LJu}
ff\Jf;t
XJj Zf;
\JEPPE
JYY_^[
J2XHJu
JXHJhMJP
SetThreadUILanguage
M9}t>v
3@UQQVu
Jh;JPJ
;JY@GJ
JE3E3%
j(hxQJ3W
TJ9=xHJ
hpHJhlHJt
EP5|HJEPEPEP
JEhhHJh`HJ>
}=iJJ%
3YdJ3f;J
f>"u*Fj"FV
U SVW5
HJ|J_^[
x;JSVWE6
JYY<JhVJh IJhVJhHJ
0KJVJSPj$
j JJSj1
j JJSj2
j `JJSj3
j JJSj4
j IJSj5
j IJSj6
j `IJSj7
JYYM_^[A
YP\UQQE
SX8@<VWj(E
E9=(;JEt
JYP5(;J
W=(;J=J;
6T]>9;
$;J=(;J=Ju
(;JE J
W5Jm[3%J
3%SPW
G3CUQVu
WJ;t,@
f;Wt,=
W~A3GW
+FFSSu
FFfuf9
j>V$usj(V
uOj^VuCj|Vu7f9
SVW5t;J3hFJ3
Wj+5t;J
JYY_^[
HuKQS1=dJ
;WEDHJ
?3f;Jf;}
u/%H;J
;JtZf=:
tXAAC~
ij.WUF
x;JSVW}
j E-V>-F
JYYtgf
;tqWSx
h%*JG]
UQQSVu
tDSSVWju
3+U@SVWu
x;JSVEE
3PSVPu
f1rGf9wAEj%PuuE;E
x;JV3Vh@FJE"YY
95h;Ju
PPPPPPPu
x;JSVu
JYY3f;JPP
e3f;JPP2@@t
x;JSV5
3@M_^[
ftSf=
r,Vh0nJW
Wh+JPj
CCfuf;
JYYu S
uN3f;JPU
CC3f;JP
JYYu$PSW
39tS3f;JP
PYtGSYD0
JYYM_^3[
t7=P;J
J9u=9t
95P;Jt$I
J950;J
=L;J5P;J3j!s
UQSVW3j
Wh@FJ0;JZYY
DJ?J3F5P;J5L;J=`;J5<;J5H;J=D;J=@;J=8;J
:E5`;JhwJS
0;JE_^[
U0x;Jf
h;JVW}
EEP+JV
PEPVPzj
EPW3f9>
JYYuEPEPEPEPuV
u]3SuuuJ
<;Jt(}
u1Wu'<;J
3@=<;J
,thPYN
JYYE_^[
3f;JSVu
CC3f;JPW
JYY+f$p
JYYM_^[
SV3fW}
JYY_^[
PPou"PV
vEPEPEPEPuuuV
GYGU<x;JEE
395JWE
N8f9:tq9]
PJWv8j(
Jh;JPJ
J;u V=
J%j*v8
;Jx;Jfe
6f;t8V
JQ3@SP:J3
J_[^]
S@VfEWEPfE=
PZSW6*v
P_[^UVu
g]a33jZ
5 Jlh|
hJ3Y=4J
DJh`^JSh5#
4F)lt(
Sh`^JV
FFup=dJ
]tPPEPa
DJhJPW
4EJGNQ
JJPJJEJbJ#J#JlJJU
f9:t6/
Hv8F<t
PSvYYV
hHJYvDhJvH
h<Jh@J
h(Jh,%JhPJj
v<v8hJ
JlJJJJJ*JoJoJJ
JF88,Jtj
v8F88,t
JWgY9}
hDJWFLYYt
PWYYhBJ
F8,Pv<hlJxv@3
th(JHWWv<
JYMWDA
JYMWDA
?v<Qv8hJE
YY@<QSv<YY3y
3@B=dJ
Rh JPVh@FJNu
SPVh@FJ
X$J4FM0
Wft+f}
f;t"=dJ
QPYYF<f
hJ<|x;JEU
3Cx3|j
PJVJ0C
JY<EPJf'
JAHJ@HD
JA J@
JYYJH HpjLX
|PpPtP3GW
fdu1fHfMt
fmu!fHfCt
PVw_^[]
SSp<-y
Yu3_^[]
AAQhl*Jp<x=dJ
JYYf9;unW
DJVuVhJPYY= J3M_^[4s
x;JSVu
E3W=J3@;
JSv<;8
M_^[]q
USVW3Su
Wh;J(qu*Wh8J
f<XCFF;]
@@SP{f8:
j:hPJf
EPJIo;
JYY<GJ@
WPYYJ@
t+jL_p}#Jt
Pf2f t
JYYL3C
NtQueryInformationProcess
UPSVW3Fj
]twf;Etqf=*
UAHuEf
3B;~7E
f93EEu
E3SuuE
ECCf!4Ch4JS]
S}st;Jf
u;t-} }'M3@#EEt
t@3f9>t
hJ5t;J
F<;tSP
v<Nz;t
:J3^[]
x;JSVu
:JcSSV,ff9
J3Gf9\F
JYVAat
iM_^[~`
hJp< J]
3@^[M__
JYuSh;J_uS
NNcW3;
Vh]Jff
PP{8-u
PH_39^
;Jx;Jfe
QPd_39N@^D]
f;Mtyf;
3M_^[Y
\JE3@3
XJBSVW3
JcSSVc}
JJh;JP
JSZWSWZ
JJh;JP
JSZjpE
3M+fMV
JEPuuj S
JE39}E
3d;JT;J4;J\;JX;Ju
V395l;Ju
p;J;t^W}
JS]EPh
E[_fE^
SVW39M
=\;J_54;J^T;JX;J3[;
X;Jd;J
JT;JYYMP
3SV395d;JWuuuufufu}fufu}fufu}fufu}fufu}fufu}uu
EPSp9u
VVVVVuuWuL
J;YYd;J
ft(PhJ
JULx;Je
ESPYHWE
hJ9}}E
M3MQPMQPu
J@hPJP
JUQS39
:Ju@VWE
JiL[Ks
;JVW3;
;J=$;J=(;J_^
W3PVH}
3w _^[]
39}u&j
u;PMf8\t
SM_^[E
3M_^lE
JYYEWWWWWj
JYYu:E
;Er3u|utul;u
u(Eu$F
x;JS3VWffE3ffu
ffffffff=Jh
DJYYW$B
M_^[ @
JRh3JQV
NXN`WNd
[M_^=>
SVWj,A&
JYYPPSVWR
UQ3S@9E
VWErC5
hL`JS
YYt3hJS
YYt%hlJS
hJp< J]
H7PPV^O
hPhat+VP
:JPPf
PHu@3G;
Fx;JSVW}
33SFWER
JSSSYP
WQPPS5J
}OM_^[]4
SVWtHu
J395T;J~
d;J4G;=T;JY|5d;JY5d;J;
3^3iuhdJj
Ju.EPj
fEfJf9
3@j EP?
+hJ9}Sh4#
3Y3@gUQQE
UQSV38
G<]tcj/P0;tU3fF
V|0;u9]t$SSj
J3_^[
[t:f>f'
fhtcfHt]fmtW
j EPPPSrP
dJW]tcj/P\.;tU3fG
W0.;u9]t$SSj
J3_^[
x;JSVu
u35J5JPPSp=P
JujSSPPSvpP
VPJPPS5J-pP
5JPhJv
3AFFf9
f;Jf9E
}U3f;JVu
hJu=<;J
g=<;J\UE
UjhxJhJd
t8x;JESVWeE
DHLPTX\lf
J3GSP@f
JYYSV'5
P=Ph]J=P
=PYY=9
J;t_PVj
nJJUQSVu
JYu69E
;Ju3;]
@@}PPWd;
th4J}PYY
hJ}PYY
shJ}PYY
hJ}PYY
hJ}PYY
hJ}PYY
hJ}PYY
hJ}PYY
fEYEPfE:
JYY3_#j<hJ$x;JEE
Q3Sp<"&u8
dJt!V(;v
Vl J;u
JMu !
ZJSVWj
JFFF3f
f>0u!Jt
8+FFN0
PP O5
Jj\P;YY
PYYPVV
JYY_^]
x;JVW}
PPj7P2
W3f9>EE
WWv<& SPuuV
3=3^9E
f\t)f:
x;JSVu
JfD_f=:
JYYChL`JP
x;JS3WxffE3ffM
ffffffffJxPQ
EEPEPj
;Jx;Jfe
39O@_D]
q3M_^[
u)j?v8
t#SP`YY3@3h9
Q+`YY3@<
F8SPV;
U\x;JSVu
W33Cj E}=
2SuV+Eu;
;JEM_^[S
R3@kUS]
Vs<>6W
W t;Jf
t;Jf8(uv
v8~f=@
W3Wv<,
F<@@PhJWYY_3^]
UQS39]
% J.UW}
WYY^_]
t;JtPW
_^^SVW5t;J3hFJ3
j)5t;J_
5t;Jh<J
5t;JhDJ
;5t;JhLJ
t;Jf8%
FD3fFDPh;J
I5t;JF8PPhXJ]
5t;JF8PP
h,JF<;
JYYj)p
t;Jf8)
5t;JWW'/
^SVW5t;J3hFJ3
j*5t;J}
5t;Jh`J
USVW3S
5t;JhBJ
dJt65t;JhAJ
5t;JhAJ
W3j0E=
JYYPYD
JYYPYD
"3M_^[p
x;JVEE
PVPVVVP
E E$SE(Vu
^ ^$^(^,
JYO0DA
JWtpSY39E
WYY3_^[]
UlW39=J}
u(u$u u
ffVWE3M
ff5JffffffffPQ
WEP3Wj
;Jx;Jfe
x;JSVu
3M_^[f
a<;Ja}
_3@z^7
X3hJWDhJMD
u 5`;JhwJ]Pj
WVS3D$
;JQP FF3f
3f;JPVu%J
u!VJ0p
JShJ@Yy=
t"gjnghl#
BYYg gJH
WPHL;YY
;J0tS+
FFf>FFCC
F<3f98
F<Gf<x
A3Y@Y J
FFeSEPj
v@gv<_u
JfSht#
?YY33@wWe
J>YY3@
SSSSVhPJS5J
t$SSSShPJS5J
SPJ+SFSFSVP9t
JP3FVh#
J+M+kd
lcP5Jj
3@c3@cf='
E+PVS]
JE+f$C
u)CCS]Ef8"u
f0EHH;
f8 t3PPj
J3PPPW
J9uu8]
;JE4e]
@@BBf^u
YYu&Sj
3qcPh#
9YY3@\c
;J3C{FL;u
JWWWPE;
u3FVh#
oWPuu;t;E}uTf8\t
JYYWWv<PuuVum
;JWht#
0KJ)J,
0KJ)Jq,h
JSYY,h)JSYY,h)JSYY,h)JSYY,h)JSYY,h)JSYY,h)JSYY,h)JSYY,h
-h)JSYY
IJ| JJrj
YPllPq
C50KJP
JPhSc}
=J }3j@5J
SPKJPWPVhJj 5J
J 3g5JhJ2YuP5J
uIj_t#5JW
Jh]JW5J5JWYYW
JY3QPo
h@KJP`KJPQP
JYY!39
f!Ez=<J
RQh`KJPhHJEj P
SPJF<f9
u"Sh7#
<YYSSj
hJ0YSv<Po
u"Sh8#
d<YYSSj
SOhJf0Yjw<
JhTJ@hJP
hhJp<3f9
0Y3Y@mBmPCo
.mBAAf9;t;
\PWSht#
Sh0nJWut
DJVSSj
JYYu?~
E5J JE
K,@Ru+j
Q[-YYZdj
V+YY3A9GGf
W9\9Vh
_83@Y83R8h
*Y3Y@{j
*Y3Y@{h*#
$PhJ&YY5=
HEf8.u
g53<3F-i5hwJ?Pj
953@295J
hxAJp;t6SQh
LHJu=9u=SPVWj
Pt PPYD
J@hPJP
PVYYf>:u j
PVYYf>:u)j
PVYYf>:u"j
*95JYYusVh#
tT95JuLVh#
*95JYYu7Vh#
*95JYYu"Vh#
x*95JYYu
Vhl*JW4
JE3f;JYYPS1MLK;t
JYYVSW6
V3VSHHt
Xst2Ht#
HHuwD;f
JYYt.f&
u 9tPj
WetGPPh
t1Jf;t'JQt
tT`PPuW
WVS`P%4Ff
FWFVS`P4F
FFVSPSH
YY>PYY5<f=
YYjh@FJ
x$J4$Jf
{C+PQ5$J
`#YY;]EPEj
;EEf<EJ
fk50Jh|HJ
JYYF<t
JYYF8~<f$X
EPVEPj
PW;WtG>6h
Y3P}EPV
hHJ>F8~<
eJSh)'
VLSFS@Sh)'
YY3+Pj
YY3C3,N
;Jv i}H
J ;JWp
;J@ ;J|Wj
;Jp$ ;JF ~$5 ;J5
JCPVu4|=
HF$|SWj
CC;r;t?j
EP+VWj
CC;]r;t9VL|
EP+VWj
Jt;9uu6u
xh`^JP
zf?" t
GG;}r;t;j
+MQWPj
Jtr9}umEE
GG};}r;t>V
;WN_^]
MHJ%3@
5t;J5DJh0RJ
t;Jf<AC
]]PF<]=dJ
hSJ5t;J
uhSJ5t;J
YhSJ5t;J
=hSJ5t;J
!hSJ5t;J
AGgt;Jf
JYYj*D;
Y3Y@P\S
f:j\^j
f;twf;t
t]Kf;t
f;uf;u9f
3EPPPEP
Jt!Ut
;JfDfEf
PPUPDW}
ftXf=
JYYXX"Su
& j:W
J$=<;J
3jna=<;J
5P;JPSRt
395P;Jt,=<;J
eP;J3;t
=<;JPPSs
PhyJPs
JPPPYP
J3PPPYP
tX9uJ9t
!3GPWh '
3VWPWw
u<958;Ju
u<=<;J
3950;Jt<u-PPl
PeC |3~]
PurIHf
u&=@;J
@EFHJy
VgPDSh*#
zY3Y@}D
mVWh]#
j EPjEPj
JEPSVj
B;UrPSVj
JT J;E
EPEPRp
J;r+E
JE<U3E}
@ Hu3B
Y202*u
395JuAVu
YYt-};t
YY95Jt
ffEff;Jfh
JPEPuP
vREh`tJP
JYYRuj
EPhJYY/SEhJEYTN
3Y@|3CEPP
JYYt ;v
YYWW>Ht
rf;JfEfF
qf;JfEfF
JP9YYCPP
JP)YYP
31Sh*#
JYYh(#
UWP+YY
YYGGdj
Y+tS+t4
2Bd :du
];3f;JPW)u[f?.
JhL`JS
;PSYY
6YY3@zUPPYYPw
u(Thl*JP
T6F`PvXPo
Tv\6Pro
THt?Ht"
~T6@vTu
YY9_f;JfEfG
Jr|PPq5
{OShw#
{YYiOf|OP
SDC,P6KIJ
JtPPPPPj
hhJ)PGhl
S,S6GI
K,SQPg`
CG]C;]]r[39
3@FS5Jj
JJcPPj
@fEabb@b
}PPWe;
bPWhb#
ahJ}PYY
PYYh88J
J}PWhu#
PYYtahHJu;u
J(tof9tfP=
s#h]J}P
J`3aSS
BB8Zu8
3P[f8.
JYYtPj0y
joqjoXeQP^<
jo3Fdht#
J@}3@3@^Aot
1HX;J1@
JY0u9}u
Null environment
JvDNt@Nt4Nt(Nt
USV5JW3;
@<;t'WP
@@f/uUf
f0rLf9sF
:8x,x(uF
3;t8f9
3Y@Y J
NDNl3_^[]
JPZhJ+Y3
ub3!5Jj
JY33f97t
@@fuf90u+D
CCFFf9
uCCFFf9
VYYV'FFhL`JVYYP
trPXFFPVhl
M_^[Iz
JS3+VWt
JYYtzVC
U x;JM
PEP"xuW}
ftfPEPwt-f
f3@M_^['w
x;JSVu
f`KJfE:
fEh@KJEP
J;YYt.f9
PhJYYEPEP
JEh48JP
EPPyf9
J;EPVPu
JPYY3@M_^[
JhTJ@hJP
}9}vL9=Ju?E9Er.u
4Cf>f&
YY3E\C
JhTJ@hJP
APerformUnaryOperation: '%c'
zt]%t>Ht0
T<tUHtGHt* t
APerformArithmeticOperation: '%c'
YYuWSpJS
JYYt<E
,EPEPE
3F_^[]
UHx;Je
JEEj P
JEPSot
JEMEf>_^[&m
F<W3;t
u*j;v<llt
Jhl*JP*j
h48Jv<
JPQn,9}
JRatPVhJ
pPh$FJ$nP
mpPh$FJ
x;JSVu
uj"V;YYt
FFf>"u
f;uj"V;YYt
v"Mf8 s
;t.fEh
YY3@M_^[0i
P2ftIf=t4ShPJ
JYYt1E
u0uu)u
S3;VWtvf9
E]]uEPm}9]u
HY3Y@_^[
VWjuS5J
E_t uVUe
j X;wC
IIt/It,IIt$
;w1tx+tqIt
+t@3t4
Jugf.uMPPPS
uo3k3@hj
Pyj W~ht
3;twf9>trV
JE;uG}WWWh
x;JSVW}
Jugf!uPPPj
f?.u$j{^Wj
M_^[g^
VWvj We;t
f0WhlJh
PPPVhl*J
ShlJEh
;ttf9>to
FFf9>uf
WWWPf>
;tIf9>tDV
JM_^[[
UQQSEPhJh
hhJp<O`f9 u
f8=YEu_WV[5
WF[PWYY
3t W2[t
W([PWYY
UQQSEPhJh
hhJp<1_f9 u
f8=YEu_W8Z5
W(ZPWYY
PWuX_3F9u
x;JSVW3Vh@FJE
VVp<]f93
XPYYW}Xt
WsXPWYY8
t!QPYY
;JQPgW
YEPmj ;XQq
ts3f;JPP]
QPYYPP
UDx;JVEj EPj"}
VmYEPj
VMYM% J
x;JEhJVu
WElJ3f9>Eu
JYWWWWPh
J;u+hJ
Ph`J Pj
Ph`JPj
3@M_^R
Jp< J]
VW3VVp<:Wf97u!95JVt
JShBJpT3JSW
YY[_3^]
v TYY^3]
YYjh@FJ
WYf|G t
JYY_^[]
uaj!EPVj
JEY<_]Y4F0=J
Vr4W{4E
JYYE9F
C4;{4u
R/x_^[
Vp4W3;f}tSS]
EPSNf~
JWPS(Wv
Ht^HuR}
:uRv4j
|3_^[]
H9uv4}
|iUSVu
3CSv8WlF<86u
JWOWv<tWv@k~H
SvDW)WvH
3CShBJW
ShLJWFLt
SPWShBJ
JWF8S,PWsWv@
3C,|d-~X.tL/t@0t41t
9uFShPJu
JtHFD;u
v<_^3[]
h@FJZTYYt
UV3zt!U
UQSVW3u
Utx;JV5
j EPjEPj
3@M_^C
h|JY`EfEfEfEfEfEfEWfE3EPf}uEWPSf}f}fE
Jf}f}ujP
p<5IIt
P/YY3]
v<O5HH
Hubv<=X38P
fuVWf8
Vp4t=h
uhJ>^]
hJ/t;Jf
j hJOYYu
YYSv<Sv@~~H
j hJzOYYuvDh8JhvHOF8H,Qv<Ph JNv@
5~j6uRv8h8J
HuhSVh(J
SVh0%JvSVh
JjSVh(Ja7t
9u7SVhPJN6v8hJ
YYV6%6hJ
SVh,%J
SVWt#j
3_^[]4
x;JVW}
VPPnDu/VWP\Du
3M_^{<
SVW3Vj
t#EPEPF
3uU3Vj
J3_^[]
UQQ<;J
CCjnQ@j
S?_^[]
x;JSVu
0;Jt7j
PVB3G;
PVPW/9
0;Jt=Ou.PP
PhJfYYP^
trSP=0;J
!=3M_^[3
=3@<<jn9j
SR<WN<Njn9
<SwNlNj
J3PPh]Jh+#
PP7hJP
EPj)0{(=#
EPj*=#
P*YYM3/1
x;JVQQEE
Jt#;s f
UQx;JEE
u3_^[]
W8j.0V06
P @$Vq ;
tAHt3HHt$
j P+D5
j.Sk3+
33f}Pt
t0_t'3fG
VQPPPh
JWuQVPj
P#Ph`^JWXu%PPD
J3M_^)
JYPWVu
VM_^^)
t 0Pf;w@F
r_^f[]
JYY3WWWWPh
WPxuY3Y@
ff9t PPj
V$_M^S'
x;JSVEE
Wh KJ$
WS-/N0N0
t(9,t ,,
4Fh KJV
,Wh KJV
Yt83;w2r
9(s(;$r
A3A;wr
JYY$YM_^[%
tVwF F
PW,Ph`^JWJ
W>M_^+%
t.u*F' t$J
@PWUF F
PWPh`^JWO[M_^
JYYPIt
Wffffff
E(Ex;J tHJ$j
QRPh J
ADVAPI32.dll
ZSHELL32.dll
MPR.dll
SaferRecordEventLogEntry
ImpersonateLoggedOnUser
SaferCloseLevel
SaferComputeTokenFromLevel
SaferIdentifyLevel
RevertToSelf
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegSetValueW
RegCloseKey
RegQueryValueExW
RegOpenKeyW
RegSetValueExW
RegCreateKeyExW
CreateProcessAsUserW
RegOpenKeyExW
FreeSid
LookupAccountSidW
GetSecurityDescriptorOwner
GetFileSecurityW
ShellExecuteExW
SHChangeNotify
WNetCancelConnection2W
WNetGetConnectionW
WNetAddConnection2W
msvcrt.dll
KERNEL32.dll
USER32.dll
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__initenv
_cexit
_XcptFilter
_c_exit
calloc
_wcslwr
_vsnwprintf
wcsstr
_open_osfhandle
_close
swscanf
_ultoa
_seh_longjmp_unwind
_setmode
wcsncmp
iswxdigit
fflush
__set_app_type
wcsrchr
malloc
wcstoul
_errno
iswalpha
printf
swprintf
fprintf
towlower
realloc
setlocale
_snwprintf
wcscat
_wcsupr
wcsncpy
_wpopen
_pclose
memmove
wcschr
iswspace
longjmp
wcscmp
_wcsnicmp
_wcsicmp
wcstol
iswdigit
_getch
_get_osfhandle
_controlfp
_setjmp3
_except_handler3
wcscpy
wcslen
wcsspn
towupper
FlushConsoleInputBuffer
LoadLibraryA
InterlockedExchange
FreeLibrary
LocalAlloc
GetVDMCurrentDirectories
CmdBatNotification
GetModuleHandleA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetThreadLocale
GetDiskFreeSpaceExW
CompareFileTime
RemoveDirectoryW
GetCurrentDirectoryW
SetCurrentDirectoryW
TerminateProcess
WaitForSingleObject
GetExitCodeProcess
CopyFileW
SetFileAttributesW
DeleteFileW
SetFileTime
CreateDirectoryW
FillConsoleOutputAttribute
SetConsoleTextAttribute
ScrollConsoleScreenBufferW
FormatMessageW
DuplicateHandle
FlushFileBuffers
HeapReAlloc
HeapSize
GetFileAttributesExW
LocalFree
GetDriveTypeW
InitializeCriticalSection
SetConsoleCtrlHandler
GetWindowsDirectoryW
GetConsoleTitleW
GetModuleFileNameW
GetVersion
EnterCriticalSection
LeaveCriticalSection
ExpandEnvironmentStringsW
SearchPathW
WriteFile
GetVolumeInformationW
SetLastError
MoveFileW
SetConsoleTitleW
MoveFileExW
GetBinaryTypeW
GetFileAttributesW
GetCurrentThreadId
CreateProcessW
LoadLibraryW
ReadProcessMemory
SetErrorMode
GetConsoleMode
SetConsoleMode
VirtualAlloc
VirtualFree
SetEnvironmentVariableW
GetEnvironmentVariableW
GetCommandLineW
GetEnvironmentStringsW
GetLocalTime
GetTimeFormatW
FileTimeToLocalFileTime
GetDateFormatW
GetLastError
CloseHandle
SetThreadLocale
GetProcAddress
GetModuleHandleW
SetFilePointer
lstrcmpW
lstrcmpiW
HeapAlloc
GetProcessHeap
HeapFree
MultiByteToWideChar
ReadFile
WriteConsoleW
FillConsoleOutputCharacterW
SetConsoleCursorPosition
ReadConsoleW
GetConsoleScreenBufferInfo
GetStdHandle
GetFileType
VirtualQuery
RaiseException
GetCPInfo
GetConsoleOutputCP
WideCharToMultiByte
GetFileSize
CreateFileW
FindClose
FindNextFileW
FindFirstFileW
GetFullPathNameW
GetUserDefaultLCID
GetLocaleInfoW
SetLocalTime
SystemTimeToFileTime
GetSystemTime
FileTimeToSystemTime
GetUserObjectInformationW
GetThreadDesktop
MessageBeep
GetProcessWindowStation
cmd.pdb
JJaJaJaJJJJJJ4WJ?MJNMJ
J'JOJ6JEJTJcJ
CMD Internal Error %s
wwwwwwwwwwwwwwww
wwwwwwww
T3333333333333333333333333333333333333333B7501'22222222222222222222222222222222222222'46A(
))))):::::::::::::::::::::::::::::::;+
8!RhyvegggggggggggggggggggggggffwL
=C]xz|}}}}}}}}}}}}}}}}}}}}}}{z~
$WjkkkkkkkkkkkkkkkkkkkkkkkklrtpmnsqocdO9
SPQ^[KIIIIIIIIIIIIIIIIIIIIIIIIJEDHJZDFGYa`_XV/
&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&
22222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222.............................22
000000000000000000000000000
111111111111111111111111111
111111111111111111111111111
111111111111111111111111111
111111111111111111111111111
111111111111111111111111111
111111111111111111111111111
111111111111111111111111111
111/---/11-111-1-------1111
111-/1/-11111/-111111111111
111-111111111-/111111111111
111-111111-1/-1111111111111
111-/1/-1111-/1111111111111
111/---/1111-11111111111111
111111111111111111111111111
111111111111111111111111111
111111111111111111111111111
111111111111111111111111111
.2"***************************
.2!$$$$$$$$$$$$$$$$$$'#)(#)
&.2222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222
*****************'''''''''''''''
)))))))))))))
)))))))))))))
)(&&())))(&))
)&((&)&))&())
)&))))))(&)))
)&((&)&)&()))
)(&&()))&))))
)))))))))))))
' $""""""""!#!%
*********************************11
pH\=oE/tG1uH1uI1uI1uI1uI1uJ1uJ1uJ1uJ1uJ1uJ1uJ1uJ1uJ1uJ1uJ1uJ1uJ1uJ1uJ1uJ1uJ1uJ1uJ1uJ1uJ1uJ1uJ1uJ1uJ1uJ1uJ1uJ1uJ1uJ1uJ1sJ1qI2U.N U+
!,tA*N W+
@@@PPP
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
``````
@@@000
@@@000
h[uiKzkL|mN|mN|mN|mN|mN|mN|mN|mN|mN|mN|mN|mN|mN|mN|mN|mN|mN|mN|mN|mN|mN|mN|mN|mN|mN|mMzhDyf@{iG{lKzjIyf@ygD}jHnFn<o:pDd4I
}|||||||||||||||||||||||||~
k4qDRh@nslS
M 4h@xMwwozsHS
t/FOKKKKKKKKKKKKKKKKKKKKKKKKNZ^VOR]ZTUq
szIg7Q'\/
H{D{D{D{D{D{D{D{D{D{D{D{D{D{D{D{D{D{D{D{D{D{D{D{D{Ct:r7v=zBy?r7s:x={;
;w2Z#Q!F
P#N N N N N N N N N N N N N N N N N N N N N N N N N N N N N N N N N N O"H
"U&$R##R##R##R##R##R##R##R##R##R##R##R##R##R##R##R##R##R##R##R##R##R##R##R##R##R##R##R##R##R##R##R##R##R##T&$N
O!M!M M M M M M M M M M M M M M M M M M M M M M M M M M M B#
c---------------------------------------------------------------------------------L!E$
HHHHHH
HHHHHH
;wwwwwwwwwwwwwwwwwwwwwwwwwwwJ
?yMSswj?
?iMMmh14
Zh9X.I(
P!O!O!O!O!O!O!O!O!O!O!O!O!O!O!O!O!O!O!O!O!O!O!O!O!i:
O3U5 Z8#Z8#Z8#Z8#Z8#Z8#Z8#Z8#Z8#Z8#Z8#X8$t> L'
HHHHHH
HHHHHH
HHHHHH
HHHHHH
uDpZ1v]3v]3v]3v]3v]3v]3v]3v]3v_9v_8v_9l^AP*L%
[O_\9H
i.k1j0j0j0j0j0j0j0o6n5p7k;I
famisume
khwnnrqfb
\qgrnwk.exe
T ] f i t t
] f [ L R Y i q j v i d t _ { b t n y z
o { 9 ; = D Y T Y i s t e b q k v w J S C T E ] f [ L R Y i q j v i d t _ { b t n y z
j j j j j j j
j j j j j j
j j j j j j
j j j j j j j j
j j j j j j j j
D j j j j j j
j j j j j j
j j j j j j j
j j j j j j
j j j j j j j
s t a t u s
( n u l l )
( ( ( ( ( H
h ( ( ( ( H
H
C C C C C C C C C C
C C C C C C
L i c e n s e A g r e e m e n t
M S S h e l l D l g
& A g r e e
& D e c l i n e
& P r i n t
R I C H E D I T
& D e c l i n e
C C C C C C C C C C C C C C C C C C C C C C
D D D D D D D D D D
A U T O R U N S
A B O U T B O X
M A I N D I A L O G
S T R I N G S
A C C E L E R A T O R S
A P P I C O N
A P P I N I T
A P P I N I T S C A N
B A S I C S C A N
B O O T E X E C U T E
B O O T E X E C U T E S C A N
D R I V E R S
D R I V E R S S C A N
E V E R Y T H I N G
E V E R Y T H I N G S C A N
E X P L O R E R
E X P L O R E R S C A N
F O L D E R
F O L D E R E M P T Y
H I J A C K
H I J A C K S C A N
H O U R G L A S S
I N T E R N E T E X P L O R E R
I N T E R N E T E X P L O R E R S C A N
L S A S C A N
P R I N T M O N I T O R
P R I N T M O N I T O R S C A N
R E G I S T R Y
R E G I S T R Y E M P T Y
S E R V I C E S
S E R V I C E S S C A N
T A S K S C A N
W I N L O G O N
W I N L O G O N S C A N
W I N S O C K
W I N S O C K S C A N
f f f 3 3 f
{ l h ~ s | }
# % 3 I i K Y o V y
* 6 % 2 * 6 5 - 8 > r @ ] E B V h c p b D X D T K U e d p D p o x J T M Y ^ j w h ~ f s k u o z
5 9 1 Q M q h v t { }
R F G C D \ V
f i l b w x v | t
/ v _ [ X _ l
' * 8 . 5 O J t G C Q I Z | _ M T c
5 9 1 Q M q h v t { }
R F G C D \ V
f i l b w x v | t
/ v _ [ X _ l
' * 8 . 5 O J t G C Q I Z | _ M T c
f f f 3 3 f
{ l h ~ s | }
# % 3 I i K Y o V y
* 6 % 2 * 6 5 - 8 > r @ ] E B V h c p b D X D T K U e d p D p o x J T M Y ^ j w h ~ f s k u o z
! B R { ) 1 9 B J k
9 B J R Z c { R Z c k s k s {
) ) * * * *
- - - - . .
/ / / 1 1 1
6 6 6 6 6 6
7 8 8 8 9 9 : :
D F F F J M
d f f k m v
f f f 3 3 f
f f f 3 3 f
[ e e h l o q s
3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3
3 m w w w w w w w w w w w w w w w w w w w
f f f f f f f f f f f f f f f f f f
8 r r r r r r r r r r r r r
G i m o o o o o o o
f f f 3 3 f
f f f 3 3 f
& F i n d . . .
C t r l + F
& C o m p a r e . . .
C t r l + S
S a v e & A s . . .
C t r l + A
& R e f r e s h
& E n t r y
& D e l e t e
C t r l + D
C t r l + C
& J u m p t o . . .
& G o o g l e . . .
C t r l + G
& P r o c e s s E x p l o r e r . . .
& P r o p e r t i e s . . .
A l t + E n t e r
& O p t i o n s
& I n c l u d e E m p t y L o c a t i o n s
& F o n t . . .
S e a r c h & E n g i n e
& G o o g l e
& M S N S e a r c h
& H e l p . . .
& A b o u t . . .
M S S a n s S e r i f
A u t o r u n s v 8 . 5 3
M a r k R u s s i n o v i c h
C o p y r i g h t
1 9 9 6 - 2 0 0 6
A P P I C O N
S y s i n t e r n a l s - w w w . s y s i n t e r n a l s . c o m
B r y c e C o g s w e l l
A U T O R U N S
A u t o r u n s
A u t o r u n s - S y s i n t e r n a l s : w w w . s y s i n t e r n a l s . c o m
M S S a n s S e r i f
S y s L i s t V i e w 3 2
S y s T a b C o n t r o l 3 2
S t a t i c
V e r s i o n :
S t a t i c
S t a t i c
S t a t i c
S t a t i c
S t a t i c
S t a t i c
I m a g e S t r i n g s
M S S h e l l D l g
S y s L i s t V i e w 3 2
P r i n t a b l e s t r i n g s f o u n d i n t h e f i l e :
I & S a v e
A u t o r u n s F o n t
& F o n t :
F o n t S t & y l e :
& S i z e :
C a n c e l
S a m p l e
A a B b Y y Z z
R e f r e s h ( F 5 )
F i n d ( C t r l + F )
P r o p e r t i e s
D e l e t e ( C t r l + D )
S a v e ( C t r l + S )
V S _ V E R S I O N _ I N F O
S t r i n g F i l e I n f o
0 4 0 9 0 4 b 0
C o m p a n y N a m e
S y s i n t e r n a l s - w w w . s y s i n t e r n a l s . c o m
F i l e D e s c r i p t i o n
A u t o s t a r t p r o g r a m v i e w e r
F i l e V e r s i o n
I n t e r n a l N a m e
A u t o r u n s
L e g a l C o p y r i g h t
C o p y r i g h t ( C ) 2 0 0 2 - 2 0 0 6 M a r k R u s s i n o v i c h a n d B r y c e C o g s w e l l
O r i g i n a l F i l e n a m e
a u t o r u n s . e x e
P r o d u c t N a m e
S y s i n t e r n a l s a u t o r u n s
P r o d u c t V e r s i o n
V a r F i l e I n f o
T r a n s l a t i o n
< < < O b s o l e t e > >
C M D . E X E
( ) | & = , ; "
C O P Y C M D
\ X C O P Y . E X E
R A N D O M
C M D C M D L I N E
W K E R N E L 3 2 . D L L
A u t o R u n
P a t h C o m p l e t i o n C h a r
C o m p l e t i o n C h a r
D e f a u l t C o l o r
D e l a y e d E x p a n s i o n
E n a b l e E x t e n s i o n s
D i s a b l e U N C C h e c k
S o f t w a r e \ M i c r o s o f t \ C o m m a n d P r o c e s s o r
S o f t w a r e \ P o l i c i e s \ M i c r o s o f t \ W i n d o w s \ S y s t e m
P M M / d d / y y
U n k n o w n
0 1 2 3 4 5 6 7 8 9
E N A B L E E X T E N S I O N S
s N T D L L . D L L
t o k e n s =
d e l i m s =
u s e b a c k
u s e b a c k q
p u s h d
m k d i r
r m d i r
c h d i r
< n o a l i a s >
D I R C M D
? ? ? ? ? ? ? ? . ? ? ?
% d . % d . % 0 4 d
c m d . e x e
S H A R E D
S E P A R A T E
R E A L T I M E
N O R M A L
B E L O W N O R M A L
A B O V E N O R M A L
D I S A B L E D E L A Y E D E X P A N S I O N
E N A B L E D E L A Y E D E X P A N S I O N
D I S A B L E E X T E N S I O N S
d d / M M / y y
y y / M M / d d
H H : m m : s s t
U n g e t t i n g : ' % s '
D i s a b l e C M D
G e T o k e n : ( % x ) ' % s '
% s \ S h e l l \ O p e n \ C o m m a n d
S o f t w a r e \ C l a s s e s
S y s t e m
A p p l i c a t i o n
* * * n o o p e n c o m m a n d d e f i n e d * * *
\ S h e l l \ O p e n \ C o m m a n d
R E M / ?
F O R / ?
/ D / c "
% x % c
R e d i r :
* * * U n k n o w n t y p e : % x
A r g s : ` % s '
C m d : % s T y p e : % x
% s ( % s ) % s
= E x i t C o d e
= E x i t C o d e A s c i i
C M D E X T V E R S I O N
D E F I N E D
P R O M P T
E N D L O C A L
E R R O R L E V E L
R E N A M E
S E T L O C A L
V E R I F Y
= , ; + / [ ]
P A T H E X T
P R O M P T
C O M S P E C
f d p n x s a t z
( % s ) % s
% s % s % s
% s % s
& ( ) [ ] { } ^ = ; ! % ' + , ` ~
% 0 2 d % s % 0 2 d % s
% 2 d % s % 0 2 d % s % 0 2 d % s % 0 2 d
% 0 2 d % s % 0 2 d % s % 0 2 d
% 0 4 X - % 0 4 X
. C O M ; . E X E ; . B A T ; . C M D ; . V B S ; . J S ; . W S
< > + - * / % ( ) | ^ & = ,
\ C M D . E X E
I D I _ A P P I C O N
@ F K N O R T V Z Z ] ^
r o n n n n n n n n n n n n n n n n n n n n n n n m m u
l { { { { { { { { { { { { { { { { { {
g g g g g g g g g g g g g g g g g g
V S _ V E R S I O N _ I N F O
S t r i n g F i l e I n f o
0 4 0 9 0 4 B 0
C o m p a n y N a m e
M i c r o s o f t C o r p o r a t i o n
F i l e D e s c r i p t i o n
W i n d o w s C o m m a n d P r o c e s s o r
F i l e V e r s i o n
5 . 1 . 2 6 0 0 . 2 1 8 0 ( x p s p _ s p 2 _ r t m . 0 4 0 8 0 3 - 2 1 5 8 )
I n t e r n a l N a m e
L e g a l C o p y r i g h t
M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d .
O r i g i n a l F i l e n a m e
C m d . E x e
P r o d u c t N a m e
M i c r o s o f t
W i n d o w s
O p e r a t i n g S y s t e m
P r o d u c t V e r s i o n
5 . 1 . 2 6 0 0 . 2 1 8 0
V a r F i l e I n f o
T r a n s l a t i o n
A n i n c o r r e c t p a r a m e t e r w a s
e n t e r e d f o r t h e c o m m a n d .
T h e s y n t a x o f t h e c o m m a n d i s i n c o r r e c t .
P r e s s a n y k e y t o c o n t i n u e . . . % 0
% 1 , D e l e t e ( Y / N ) ? % 0
T h e s y s t e m c a n n o t a c c e p t t h e p a t h
o r f i l e n a m e r e q u e s t e d .
T h e s y s t e m c a n n o t a c c e p t t h e d a t e e n t e r e d .
N o b a t c h l a b e l s p e c i f i e d t o G O T O c o m m a n d .
' % 1 ' i s n o t r e c o g n i z e d a s a n i n t e r n a l o r e x t e r n a l c o m m a n d ,
o p e r a b l e p r o g r a m o r b a t c h f i l e .
T h e s y s t e m c a n n o t a c c e p t t h e t i m e e n t e r e d .
( C ) C o p y r i g h t 1 9 8 5 - 2 0 0 1 M i c r o s o f t C o r p .
% 1 f i l e ( s ) c o p i e d .
T h e c u r r e n t d a t e i s : % 0
T h e c u r r e n t t i m e i s : % 0
D i r e c t o r y o f % 1
T h e s y s t e m i s o u t o f e n v i r o n m e n t s p a c e .
T h e s y s t e m c a n n o t e x e c u t e t h e s p e c i f i e d p r o g r a m .
T h e i n p u t l i n e i s t o o l o n g .
T h e c o n t e n t s o f t h e t a r g e t f i l e
w e r e l o s t .
I n s e r t t h e d i s k e t t e t h a t c o n t a i n s t h e b a t c h f i l e
a n d p r e s s a n y k e y w h e n r e a d y . % 0
E n t e r t h e n e w d a t e : ( m m - d d - y y ) % 0
E n t e r t h e n e w t i m e : % 0
T h e h a n d l e c o u l d n o t b e d u p l i c a t e d
d u r i n g r e d i r e c t i o n o f h a n d l e % 1 .
E C H O i s o f f .
E C H O i s o n .
V E R I F Y i s o f f .
V E R I F Y i s o n .
T h e f i l e c a n n o t b e c o p i e d o n t o i t s e l f .
% 1 w a s u n e x p e c t e d a t t h i s t i m e .
T h e P r o c e s s I d e n t i f i c a t i o n N u m b e r i s % 1 .
A d u p l i c a t e f i l e n a m e e x i s t s , o r t h e f i l e
c a n n o t b e f o u n d .
% 1 , A r e y o u s u r e ( Y / N ) ? % 0
T h e f o l l o w i n g c h a r a c t e r s t r i n g i s t o o l o n g :
M i c r o s o f t W i n d o w s X P [ V e r s i o n % 1 ] % 0
T h e h a n d l e c o u l d n o t b e d u p l i c a t e d d u r i n g
a p i p e o p e r a t i o n .
M o r e ? % 0
T h e s y s t e m c a n n o t c o m p l e t e t h e p r o c e s s .
V o l u m e S e r i a l N u m b e r i s % 1
A s u b d i r e c t o r y o r f i l e % 1 a l r e a d y e x i s t s .
E r r o r o c c u r r e d w h i l e p r o c e s s i n g : % 1 .
V o l u m e i n d r i v e % 1 h a s n o l a b e l .
V o l u m e i n d r i v e % 1 i s % 2
K E Y S i s o n .
K E Y S i s o f f .
T h e s y s t e m c a n n o t a c c e p t t h e S T A R T c o m m a n d p a r a m e t e r % 1 .
T h e s y s t e m c a n n o t f i n d t h e f i l e % 1 .
T h e p r o c e s s t r i e d t o w r i t e t o a n o n e x i s t e n t p i p e .
" % 1 " i s n o t a r e c o g n i z e d d e v i c e .
T h e b a t c h f i l e c a n n o t b e f o u n d .
% 1 f i l e ( s ) m o v e d .
A p r o g r a m a t t e m p t e d t o r e f e r e n c e s t o r a g e o u t s i d e t h e
l i m i t s o f a s t a c k s e g m e n t . T h e p r o g r a m w a s e n d e d .
C o m m a n d n o t i m p l e m e n t e d .
< D I R > % 0
O u t o f m e m o r y .
I n v a l i d s w i t c h - " % 1 " .
P a r a m e t e r f o r m a t n o t c o r r e c t - " % 1 " .
( E r r o r o c c u r r e d i n e n v i r o n m e n t v a r i a b l e )
% 1 F i l e ( s ) % 2 b y t e s
% 1 D i r ( s ) % 2 b y t e s f r e e
T o t a l F i l e s L i s t e d :
T e r m i n a t e b a t c h j o b ( Y / N ) ? % 0
T h e c u r r e n t d i r e c t o r y i s i n v a l i d .
D i s p l a y s t h e n a m e o f o r c h a n g e s t h e c u r r e n t d i r e c t o r y .
C H D I R [ / D ] [ d r i v e : ] [ p a t h ]
C H D I R [ . . ]
C D [ / D ] [ d r i v e : ] [ p a t h ]
C D [ . . ]
. . S p e c i f i e s t h a t y o u w a n t t o c h a n g e t o t h e p a r e n t d i r e c t o r y .
T y p e C D d r i v e : t o d i s p l a y t h e c u r r e n t d i r e c t o r y i n t h e s p e c i f i e d d r i v e .
T y p e C D w i t h o u t p a r a m e t e r s t o d i s p l a y t h e c u r r e n t d r i v e a n d d i r e c t o r y .
U s e t h e / D s w i t c h t o c h a n g e c u r r e n t d r i v e i n a d d i t i o n t o c h a n g i n g c u r r e n t
d i r e c t o r y f o r a d r i v e .
C l e a r s t h e s c r e e n .
C o p i e s o n e o r m o r e f i l e s t o a n o t h e r l o c a t i o n .
C O P Y [ / D ] [ / V ] [ / N ] [ / Y | / - Y ] [ / Z ] [ / A | / B ] s o u r c e [ / A | / B ]
[ + s o u r c e [ / A | / B ] [ + . . . ] ] [ d e s t i n a t i o n [ / A | / B ] ]
s o u r c e S p e c i f i e s t h e f i l e o r f i l e s t o b e c o p i e d .
/ A I n d i c a t e s a n A S C I I t e x t f i l e .
/ B I n d i c a t e s a b i n a r y f i l e .
/ D A l l o w t h e d e s t i n a t i o n f i l e t o b e c r e a t e d d e c r y p t e d
d e s t i n a t i o n S p e c i f i e s t h e d i r e c t o r y a n d / o r f i l e n a m e f o r t h e n e w f i l e ( s ) .
/ V V e r i f i e s t h a t n e w f i l e s a r e w r i t t e n c o r r e c t l y .
/ N U s e s s h o r t f i l e n a m e , i f a v a i l a b l e , w h e n c o p y i n g a f i l e w i t h a
n o n - 8 d o t 3 n a m e .
/ Y S u p p r e s s e s p r o m p t i n g t o c o n f i r m y o u w a n t t o o v e r w r i t e a n
e x i s t i n g d e s t i n a t i o n f i l e .
/ - Y C a u s e s p r o m p t i n g t o c o n f i r m y o u w a n t t o o v e r w r i t e a n
e x i s t i n g d e s t i n a t i o n f i l e .
/ Z C o p i e s n e t w o r k e d f i l e s i n r e s t a r t a b l e m o d e .
T h e s w i t c h / Y m a y b e p r e s e t i n t h e C O P Y C M D e n v i r o n m e n t v a r i a b l e .
T h i s m a y b e o v e r r i d d e n w i t h / - Y o n t h e c o m m a n d l i n e . D e f a u l t i s
t o p r o m p t o n o v e r w r i t e s u n l e s s C O P Y c o m m a n d i s b e i n g e x e c u t e d f r o m
w i t h i n a b a t c h s c r i p t .
T o a p p e n d f i l e s , s p e c i f y a s i n g l e f i l e f o r d e s t i n a t i o n , b u t m u l t i p l e f i l e s
f o r s o u r c e ( u s i n g w i l d c a r d s o r f i l e 1 + f i l e 2 + f i l e 3 f o r m a t ) .
D i s p l a y s o r s e t s t h e d a t e .
D A T E [ / T | d a t e ]
T y p e D A T E w i t h o u t p a r a m e t e r s t o d i s p l a y t h e c u r r e n t d a t e s e t t i n g a n d
a p r o m p t f o r a n e w o n e . P r e s s E N T E R t o k e e p t h e s a m e d a t e .
D e l e t e s o n e o r m o r e f i l e s .
D E L [ / P ] [ / F ] [ / S ] [ / Q ] [ / A [ [ : ] a t t r i b u t e s ] ] n a m e s
E R A S E [ / P ] [ / F ] [ / S ] [ / Q ] [ / A [ [ : ] a t t r i b u t e s ] ] n a m e s
n a m e s S p e c i f i e s a l i s t o f o n e o r m o r e f i l e s o r d i r e c t o r i e s .
W i l d c a r d s m a y b e u s e d t o d e l e t e m u l t i p l e f i l e s . I f a
d i r e c t o r y i s s p e c i f i e d , a l l f i l e s w i t h i n t h e d i r e c t o r y
w i l l b e d e l e t e d .
/ P P r o m p t s f o r c o n f i r m a t i o n b e f o r e d e l e t i n g e a c h f i l e .
/ F F o r c e d e l e t i n g o f r e a d - o n l y f i l e s .
/ S D e l e t e s p e c i f i e d f i l e s f r o m a l l s u b d i r e c t o r i e s .
/ Q Q u i e t m o d e , d o n o t a s k i f o k t o d e l e t e o n g l o b a l w i l d c a r d
/ A S e l e c t s f i l e s t o d e l e t e b a s e d o n a t t r i b u t e s
a t t r i b u t e s R R e a d - o n l y f i l e s S S y s t e m f i l e s
H H i d d e n f i l e s A F i l e s r e a d y f o r a r c h i v i n g
- P r e f i x m e a n i n g n o t
D i s p l a y s a l i s t o f f i l e s a n d s u b d i r e c t o r i e s i n a d i r e c t o r y .
D I R [ d r i v e : ] [ p a t h ] [ f i l e n a m e ] [ / A [ [ : ] a t t r i b u t e s ] ] [ / B ] [ / C ] [ / D ] [ / L ] [ / N ]
[ / O [ [ : ] s o r t o r d e r ] ] [ / P ] [ / Q ] [ / S ] [ / T [ [ : ] t i m e f i e l d ] ] [ / W ] [ / X ] [ / 4 ]
[ d r i v e : ] [ p a t h ] [ f i l e n a m e ]
S p e c i f i e s d r i v e , d i r e c t o r y , a n d / o r f i l e s t o l i s t .
/ A D i s p l a y s f i l e s w i t h s p e c i f i e d a t t r i b u t e s .
a t t r i b u t e s D D i r e c t o r i e s R R e a d - o n l y f i l e s
H H i d d e n f i l e s A F i l e s r e a d y f o r a r c h i v i n g
S S y s t e m f i l e s - P r e f i x m e a n i n g n o t
/ B U s e s b a r e f o r m a t ( n o h e a d i n g i n f o r m a t i o n o r s u m m a r y ) .
/ C D i s p l a y t h e t h o u s a n d s e p a r a t o r i n f i l e s i z e s . T h i s i s t h e
d e f a u l t . U s e / - C t o d i s a b l e d i s p l a y o f s e p a r a t o r .
/ D S a m e a s w i d e b u t f i l e s a r e l i s t s o r t e d b y c o l u m n .
/ L U s e s l o w e r c a s e .
/ N N e w l o n g l i s t f o r m a t w h e r e f i l e n a m e s a r e o n t h e f a r r i g h t .
/ O L i s t b y f i l e s i n s o r t e d o r d e r .
s o r t o r d e r N B y n a m e ( a l p h a b e t i c ) S B y s i z e ( s m a l l e s t f i r s t )
E B y e x t e n s i o n ( a l p h a b e t i c ) D B y d a t e / t i m e ( o l d e s t f i r s t )
G G r o u p d i r e c t o r i e s f i r s t - P r e f i x t o r e v e r s e o r d e r
/ P P a u s e s a f t e r e a c h s c r e e n f u l o f i n f o r m a t i o n .
/ Q D i s p l a y t h e o w n e r o f t h e f i l e .
/ S D i s p l a y s f i l e s i n s p e c i f i e d d i r e c t o r y a n d a l l s u b d i r e c t o r i e s .
/ T C o n t r o l s w h i c h t i m e f i e l d d i s p l a y e d o r u s e d f o r s o r t i n g
t i m e f i e l d C C r e a t i o n
A L a s t A c c e s s
W L a s t W r i t t e n
/ W U s e s w i d e l i s t f o r m a t .
/ X T h i s d i s p l a y s t h e s h o r t n a m e s g e n e r a t e d f o r n o n - 8 d o t 3 f i l e
n a m e s . T h e f o r m a t i s t h a t o f / N w i t h t h e s h o r t n a m e i n s e r t e d
b e f o r e t h e l o n g n a m e . I f n o s h o r t n a m e i s p r e s e n t , b l a n k s a r e
d i s p l a y e d i n i t s p l a c e .
/ 4 D i s p l a y s f o u r - d i g i t y e a r s
S w i t c h e s m a y b e p r e s e t i n t h e D I R C M D e n v i r o n m e n t v a r i a b l e . O v e r r i d e
p r e s e t s w i t c h e s b y p r e f i x i n g a n y s w i t c h w i t h - ( h y p h e n ) - - f o r e x a m p l e , / - W .
Q u i t s t h e C M D . E X E p r o g r a m ( c o m m a n d i n t e r p r e t e r ) o r t h e c u r r e n t b a t c h
s c r i p t .
E X I T [ / B ] [ e x i t C o d e ]
/ B s p e c i f i e s t o e x i t t h e c u r r e n t b a t c h s c r i p t i n s t e a d o f
C M D . E X E . I f e x e c u t e d f r o m o u t s i d e a b a t c h s c r i p t , i t
w i l l q u i t C M D . E X E
e x i t C o d e s p e c i f i e s a n u m e r i c n u m b e r . i f / B i s s p e c i f i e d , s e t s
E R R O R L E V E L t h a t n u m b e r . I f q u i t t i n g C M D . E X E , s e t s t h e p r o c e s s
e x i t c o d e w i t h t h a t n u m b e r .
C r e a t e s a d i r e c t o r y .
M K D I R [ d r i v e : ] p a t h
M D [ d r i v e : ] p a t h
D i s p l a y s o r s e t s a s e a r c h p a t h f o r e x e c u t a b l e f i l e s .
P A T H [ [ d r i v e : ] p a t h [ ; . . . ] [ ; % % P A T H % % ]
P A T H ;
T y p e P A T H ; t o c l e a r a l l s e a r c h - p a t h s e t t i n g s a n d d i r e c t c m d . e x e t o s e a r c h
o n l y i n t h e c u r r e n t d i r e c t o r y .
T y p e P A T H w i t h o u t p a r a m e t e r s t o d i s p l a y t h e c u r r e n t p a t h .
I n c l u d i n g % % P A T H % % i n t h e n e w p a t h s e t t i n g c a u s e s t h e o l d p a t h t o b e
a p p e n d e d t o t h e n e w s e t t i n g .
C h a n g e s t h e c m d . e x e c o m m a n d p r o m p t .
P R O M P T [ t e x t ]
t e x t S p e c i f i e s a n e w c o m m a n d p r o m p t .
P r o m p t c a n b e m a d e u p o f n o r m a l c h a r a c t e r s a n d t h e f o l l o w i n g s p e c i a l c o d e s :
$ A & ( A m p e r s a n d )
$ B | ( p i p e )
$ C ( ( L e f t p a r e n t h e s i s )
$ D C u r r e n t d a t e
$ E E s c a p e c o d e ( A S C I I c o d e 2 7 )
$ F ) ( R i g h t p a r e n t h e s i s )
$ G > ( g r e a t e r - t h a n s i g n )
$ H B a c k s p a c e ( e r a s e s p r e v i o u s c h a r a c t e r )
$ L < ( l e s s - t h a n s i g n )
$ N C u r r e n t d r i v e
$ P C u r r e n t d r i v e a n d p a t h
$ Q = ( e q u a l s i g n )
$ S ( s p a c e )
$ T C u r r e n t t i m e
$ V W i n d o w s X P v e r s i o n n u m b e r
$ _ C a r r i a g e r e t u r n a n d l i n e f e e d
$ $ $ ( d o l l a r s i g n )
R e m o v e s ( d e l e t e s ) a d i r e c t o r y .
R M D I R [ / S ] [ / Q ] [ d r i v e : ] p a t h
R D [ / S ] [ / Q ] [ d r i v e : ] p a t h
/ S R e m o v e s a l l d i r e c t o r i e s a n d f i l e s i n t h e s p e c i f i e d d i r e c t o r y
i n a d d i t i o n t o t h e d i r e c t o r y i t s e l f . U s e d t o r e m o v e a d i r e c t o r y
t r e e .
/ Q Q u i e t m o d e , d o n o t a s k i f o k t o r e m o v e a d i r e c t o r y t r e e w i t h / S
R e n a m e s a f i l e o r f i l e s .
R E N A M E [ d r i v e : ] [ p a t h ] f i l e n a m e 1 f i l e n a m e 2 .
R E N [ d r i v e : ] [ p a t h ] f i l e n a m e 1 f i l e n a m e 2 .
N o t e t h a t y o u c a n n o t s p e c i f y a n e w d r i v e o r p a t h f o r y o u r d e s t i n a t i o n f i l e .
D i s p l a y s , s e t s , o r r e m o v e s c m d . e x e e n v i r o n m e n t v a r i a b l e s .
S E T [ v a r i a b l e = [ s t r i n g ] ]
v a r i a b l e S p e c i f i e s t h e e n v i r o n m e n t - v a r i a b l e n a m e .
s t r i n g S p e c i f i e s a s e r i e s o f c h a r a c t e r s t o a s s i g n t o t h e v a r i a b l e .
T y p e S E T w i t h o u t p a r a m e t e r s t o d i s p l a y t h e c u r r e n t e n v i r o n m e n t v a r i a b l e s .
D i s p l a y s o r s e t s t h e s y s t e m t i m e .
T I M E [ / T | t i m e ]
T y p e T I M E w i t h n o p a r a m e t e r s t o d i s p l a y t h e c u r r e n t t i m e s e t t i n g a n d a p r o m p t
f o r a n e w o n e . P r e s s E N T E R t o k e e p t h e s a m e t i m e .
D i s p l a y s t h e c o n t e n t s o f a t e x t f i l e o r f i l e s .
T Y P E [ d r i v e : ] [ p a t h ] f i l e n a m e
D i s p l a y s t h e W i n d o w s X P v e r s i o n .
T e l l s c m d . e x e w h e t h e r t o v e r i f y t h a t y o u r f i l e s a r e w r i t t e n c o r r e c t l y t o a
V E R I F Y [ O N | O F F ]
T y p e V E R I F Y w i t h o u t a p a r a m e t e r t o d i s p l a y t h e c u r r e n t V E R I F Y s e t t i n g .
D i s p l a y s t h e d i s k v o l u m e l a b e l a n d s e r i a l n u m b e r , i f t h e y e x i s t .
V O L [ d r i v e : ]
C a l l s o n e b a t c h p r o g r a m f r o m a n o t h e r .
C A L L [ d r i v e : ] [ p a t h ] f i l e n a m e [ b a t c h - p a r a m e t e r s ]
b a t c h - p a r a m e t e r s S p e c i f i e s a n y c o m m a n d - l i n e i n f o r m a t i o n r e q u i r e d b y t h e
b a t c h p r o g r a m .
R e c o r d s c o m m e n t s ( r e m a r k s ) i n a b a t c h f i l e o r C O N F I G . S Y S .
R E M [ c o m m e n t ]
S u s p e n d s p r o c e s s i n g o f a b a t c h p r o g r a m a n d d i s p l a y s t h e m e s s a g e
P r e s s a n y k e y t o c o n t i n u e . . . % 0
D i s p l a y s m e s s a g e s , o r t u r n s c o m m a n d - e c h o i n g o n o r o f f .
E C H O [ O N | O F F ]
E C H O [ m e s s a g e ]
T y p e E C H O w i t h o u t p a r a m e t e r s t o d i s p l a y t h e c u r r e n t e c h o s e t t i n g .
D i r e c t s c m d . e x e t o a l a b e l e d l i n e i n a b a t c h p r o g r a m .
G O T O l a b e l
l a b e l S p e c i f i e s a t e x t s t r i n g u s e d i n t h e b a t c h p r o g r a m a s a l a b e l .
Y o u t y p e a l a b e l o n a l i n e b y i t s e l f , b e g i n n i n g w i t h a c o l o n .
C h a n g e s t h e p o s i t i o n o f r e p l a c e a b l e p a r a m e t e r s i n a b a t c h f i l e .
S H I F T [ / n ]
P e r f o r m s c o n d i t i o n a l p r o c e s s i n g i n b a t c h p r o g r a m s .
I F [ N O T ] E R R O R L E V E L n u m b e r c o m m a n d
I F [ N O T ] s t r i n g 1 = = s t r i n g 2 c o m m a n d
I F [ N O T ] E X I S T f i l e n a m e c o m m a n d
N O T S p e c i f i e s t h a t W i n d o w s X P s h o u l d c a r r y o u t
t h e c o m m a n d o n l y i f t h e c o n d i t i o n i s f a l s e .
E R R O R L E V E L n u m b e r S p e c i f i e s a t r u e c o n d i t i o n i f t h e l a s t p r o g r a m r u n
r e t u r n e d a n e x i t c o d e e q u a l t o o r g r e a t e r t h a n t h e n u m b e r
s p e c i f i e d .
s t r i n g 1 = = s t r i n g 2 S p e c i f i e s a t r u e c o n d i t i o n i f t h e s p e c i f i e d t e x t s t r i n g s
m a t c h .
E X I S T f i l e n a m e S p e c i f i e s a t r u e c o n d i t i o n i f t h e s p e c i f i e d f i l e n a m e
e x i s t s .
c o m m a n d S p e c i f i e s t h e c o m m a n d t o c a r r y o u t i f t h e c o n d i t i o n i s
m e t . C o m m a n d c a n b e f o l l o w e d b y E L S E c o m m a n d w h i c h
w i l l e x e c u t e t h e c o m m a n d a f t e r t h e E L S E k e y w o r d i f t h e
s p e c i f i e d c o n d i t i o n i s F A L S E
T h e E L S E c l a u s e m u s t o c c u r o n t h e s a m e l i n e a s t h e c o m m a n d a f t e r t h e I F . F o r
e x a m p l e :
I F E X I S T f i l e n a m e . (
d e l f i l e n a m e .
) E L S E (
e c h o f i l e n a m e . m i s s i n g .
T h e f o l l o w i n g w o u l d N O T w o r k b e c a u s e t h e d e l c o m m a n d n e e d s t o b e t e r m i n a t e d
b y a n e w l i n e :
I F E X I S T f i l e n a m e . d e l f i l e n a m e . E L S E e c h o f i l e n a m e . m i s s i n g
N o r w o u l d t h e f o l l o w i n g w o r k , s i n c e t h e E L S E c o m m a n d m u s t b e o n t h e s a m e l i n e
a s t h e e n d o f t h e I F c o m m a n d :
I F E X I S T f i l e n a m e . d e l f i l e n a m e .
E L S E e c h o f i l e n a m e . m i s s i n g
T h e f o l l o w i n g w o u l d w o r k i f y o u w a n t i t a l l o n o n e l i n e :
I F E X I S T f i l e n a m e . ( d e l f i l e n a m e . ) E L S E e c h o f i l e n a m e . m i s s i n g
R u n s a s p e c i f i e d c o m m a n d f o r e a c h f i l e i n a s e t o f f i l e s .
F O R % % v a r i a b l e I N ( s e t ) D O c o m m a n d [ c o m m a n d - p a r a m e t e r s ]
% % v a r i a b l e S p e c i f i e s a s i n g l e l e t t e r r e p l a c e a b l e p a r a m e t e r .
( s e t ) S p e c i f i e s a s e t o f o n e o r m o r e f i l e s . W i l d c a r d s m a y b e u s e d .
c o m m a n d S p e c i f i e s t h e c o m m a n d t o c a r r y o u t f o r e a c h f i l e .
c o m m a n d - p a r a m e t e r s
S p e c i f i e s p a r a m e t e r s o r s w i t c h e s f o r t h e s p e c i f i e d c o m m a n d .
T o u s e t h e F O R c o m m a n d i n a b a t c h p r o g r a m , s p e c i f y % % % % v a r i a b l e i n s t e a d
o f % % v a r i a b l e . V a r i a b l e n a m e s a r e c a s e s e n s i t i v e , s o % % i i s d i f f e r e n t
f r o m % % I .
S t a r t s a s e p a r a t e w i n d o w t o r u n a s p e c i f i e d p r o g r a m o r c o m m a n d .
S T A R T [ " t i t l e " ] [ / D p a t h ] [ / I ] [ / M I N ] [ / M A X ] [ / S E P A R A T E | / S H A R E D ]
[ / L O W | / N O R M A L | / H I G H | / R E A L T I M E | / A B O V E N O R M A L | / B E L O W N O R M A L ]
[ / W A I T ] [ / B ] [ c o m m a n d / p r o g r a m ]
[ p a r a m e t e r s ]
" t i t l e " T i t l e t o d i s p l a y i n w i n d o w t i t l e b a r .
p a t h S t a r t i n g d i r e c t o r y
B S t a r t a p p l i c a t i o n w i t h o u t c r e a t i n g a n e w w i n d o w . T h e
a p p l i c a t i o n h a s ^ C h a n d l i n g i g n o r e d . U n l e s s t h e a p p l i c a t i o n
e n a b l e s ^ C p r o c e s s i n g , ^ B r e a k i s t h e o n l y w a y t o i n t e r r u p t
t h e a p p l i c a t i o n
I T h e n e w e n v i r o n m e n t w i l l b e t h e o r i g i n a l e n v i r o n m e n t p a s s e d
t o t h e c m d . e x e a n d n o t t h e c u r r e n t e n v i r o n m e n t .
M I N S t a r t w i n d o w m i n i m i z e d
M A X S t a r t w i n d o w m a x i m i z e d
S E P A R A T E S t a r t 1 6 - b i t W i n d o w s p r o g r a m i n s e p a r a t e m e m o r y s p a c e
S H A R E D S t a r t 1 6 - b i t W i n d o w s p r o g r a m i n s h a r e d m e m o r y s p a c e
L O W S t a r t a p p l i c a t i o n i n t h e I D L E p r i o r i t y c l a s s
N O R M A L S t a r t a p p l i c a t i o n i n t h e N O R M A L p r i o r i t y c l a s s
H I G H S t a r t a p p l i c a t i o n i n t h e H I G H p r i o r i t y c l a s s
R E A L T I M E S t a r t a p p l i c a t i o n i n t h e R E A L T I M E p r i o r i t y c l a s s
A B O V E N O R M A L S t a r t a p p l i c a t i o n i n t h e A B O V E N O R M A L p r i o r i t y c l a s s
B E L O W N O R M A L S t a r t a p p l i c a t i o n i n t h e B E L O W N O R M A L p r i o r i t y c l a s s
W A I T S t a r t a p p l i c a t i o n a n d w a i t f o r i t t o t e r m i n a t e
c o m m a n d / p r o g r a m
I f i t i s a n i n t e r n a l c m d c o m m a n d o r a b a t c h f i l e t h e n
t h e c o m m a n d p r o c e s s o r i s r u n w i t h t h e / K s w i t c h t o c m d . e x e .
T h i s m e a n s t h a t t h e w i n d o w w i l l r e m a i n a f t e r t h e c o m m a n d
h a s b e e n r u n .
I f i t i s n o t a n i n t e r n a l c m d c o m m a n d o r b a t c h f i l e t h e n
i t i s a p r o g r a m a n d w i l l r u n a s e i t h e r a w i n d o w e d a p p l i c a t i o n
o r a c o n s o l e a p p l i c a t i o n .
p a r a m e t e r s T h e s e a r e t h e p a r a m e t e r s p a s s e d t o t h e c o m m a n d / p r o g r a m
S e t s o r C l e a r s E x t e n d e d C T R L + C c h e c k i n g o n D O S s y s t e m
T h i s i s p r e s e n t f o r C o m p a t i b i l i t y w i t h D O S s y s t e m s . I t h a s n o e f f e c t
u n d e r W i n d o w s X P .
S t a r t s a n e w i n s t a n c e o f t h e W i n d o w s X P c o m m a n d i n t e r p r e t e r
C M D [ / A | / U ] [ / Q ] [ / D ] [ / E : O N | / E : O F F ] [ / F : O N | / F : O F F ] [ / V : O N | / V : O F F ]
[ [ / S ] [ / C | / K ] s t r i n g ]
/ C C a r r i e s o u t t h e c o m m a n d s p e c i f i e d b y s t r i n g a n d t h e n t e r m i n a t e s
/ K C a r r i e s o u t t h e c o m m a n d s p e c i f i e d b y s t r i n g b u t r e m a i n s
/ S M o d i f i e s t h e t r e a t m e n t o f s t r i n g a f t e r / C o r / K ( s e e b e l o w )
/ Q T u r n s e c h o o f f
/ D D i s a b l e e x e c u t i o n o f A u t o R u n c o m m a n d s f r o m r e g i s t r y ( s e e b e l o w )
/ A C a u s e s t h e o u t p u t o f i n t e r n a l c o m m a n d s t o a p i p e o r f i l e t o b e A N S I
/ U C a u s e s t h e o u t p u t o f i n t e r n a l c o m m a n d s t o a p i p e o r f i l e t o b e
U n i c o d e
/ T : f g S e t s t h e f o r e g r o u n d / b a c k g r o u n d c o l o r s ( s e e C O L O R / ? f o r m o r e i n f o )
/ E : O N E n a b l e c o m m a n d e x t e n s i o n s ( s e e b e l o w )
/ E : O F F D i s a b l e c o m m a n d e x t e n s i o n s ( s e e b e l o w )
/ F : O N E n a b l e f i l e a n d d i r e c t o r y n a m e c o m p l e t i o n c h a r a c t e r s ( s e e b e l o w )
/ F : O F F D i s a b l e f i l e a n d d i r e c t o r y n a m e c o m p l e t i o n c h a r a c t e r s ( s e e b e l o w )
/ V : O N E n a b l e d e l a y e d e n v i r o n m e n t v a r i a b l e e x p a n s i o n u s i n g ! a s t h e
d e l i m i t e r . F o r e x a m p l e , / V : O N w o u l d a l l o w ! v a r ! t o e x p a n d t h e
v a r i a b l e v a r a t e x e c u t i o n t i m e . T h e % v a r % s y n t a x e x p a n d s v a r i a b l e s
a t i n p u t t i m e , w h i c h i s q u i t e a d i f f e r e n t t h i n g w h e n i n s i d e o f a F O R
l o o p .
/ V : O F F D i s a b l e d e l a y e d e n v i r o n m e n t e x p a n s i o n .
N o t e t h a t m u l t i p l e c o m m a n d s s e p a r a t e d b y t h e c o m m a n d s e p a r a t o r ' & & '
a r e a c c e p t e d f o r s t r i n g i f s u r r o u n d e d b y q u o t e s . A l s o , f o r c o m p a t i b i l i t y
r e a s o n s , / X i s t h e s a m e a s / E : O N , / Y i s t h e s a m e a s / E : O F F a n d / R i s t h e
s a m e a s / C . A n y o t h e r s w i t c h e s a r e i g n o r e d .
I f / C o r / K i s s p e c i f i e d , t h e n t h e r e m a i n d e r o f t h e c o m m a n d l i n e a f t e r
t h e s w i t c h i s p r o c e s s e d a s a c o m m a n d l i n e , w h e r e t h e f o l l o w i n g l o g i c i s
u s e d t o p r o c e s s q u o t e ( " ) c h a r a c t e r s :
1 . I f a l l o f t h e f o l l o w i n g c o n d i t i o n s a r e m e t , t h e n q u o t e c h a r a c t e r s
o n t h e c o m m a n d l i n e a r e p r e s e r v e d :
- n o / S s w i t c h
- e x a c t l y t w o q u o t e c h a r a c t e r s
- n o s p e c i a l c h a r a c t e r s b e t w e e n t h e t w o q u o t e c h a r a c t e r s ,
w h e r e s p e c i a l i s o n e o f : & < > ( ) @ ^ |
- t h e r e a r e o n e o r m o r e w h i t e s p a c e c h a r a c t e r s b e t w e e n t h e
t h e t w o q u o t e c h a r a c t e r s
- t h e s t r i n g b e t w e e n t h e t w o q u o t e c h a r a c t e r s i s t h e n a m e
o f a n e x e c u t a b l e f i l e .
2 . O t h e r w i s e , o l d b e h a v i o r i s t o s e e i f t h e f i r s t c h a r a c t e r i s
a q u o t e c h a r a c t e r a n d i f s o , s t r i p t h e l e a d i n g c h a r a c t e r a n d
r e m o v e t h e l a s t q u o t e c h a r a c t e r o n t h e c o m m a n d l i n e , p r e s e r v i n g
a n y t e x t a f t e r t h e l a s t q u o t e c h a r a c t e r .
I f / D w a s N O T s p e c i f i e d o n t h e c o m m a n d l i n e , t h e n w h e n C M D . E X E s t a r t s , i t
l o o k s f o r t h e f o l l o w i n g R E G _ S Z / R E G _ E X P A N D _ S Z r e g i s t r y v a r i a b l e s , a n d i f
e i t h e r o r b o t h a r e p r e s e n t , t h e y a r e e x e c u t e d f i r s t .
H K E Y _ L O C A L _ M A C H I N E \ S o f t w a r e \ M i c r o s o f t \ C o m m a n d P r o c e s s o r \ A u t o R u n
a n d / o r
H K E Y _ C U R R E N T _ U S E R \ S o f t w a r e \ M i c r o s o f t \ C o m m a n d P r o c e s s o r \ A u t o R u n
C o m m a n d E x t e n s i o n s a r e e n a b l e d b y d e f a u l t . Y o u m a y a l s o d i s a b l e
e x t e n s i o n s f o r a p a r t i c u l a r i n v o c a t i o n b y u s i n g t h e / E : O F F s w i t c h . Y o u
c a n e n a b l e o r d i s a b l e e x t e n s i o n s f o r a l l i n v o c a t i o n s o f C M D . E X E o n a
m a c h i n e a n d / o r u s e r l o g o n s e s s i o n b y s e t t i n g e i t h e r o r b o t h o f t h e
f o l l o w i n g R E G _ D W O R D v a l u e s i n t h e r e g i s t r y u s i n g R E G E D T 3 2 . E X E :
H K E Y _ L O C A L _ M A C H I N E \ S o f t w a r e \ M i c r o s o f t \ C o m m a n d P r o c e s s o r \ E n a b l e E x t e n s i o n s
a n d / o r
H K E Y _ C U R R E N T _ U S E R \ S o f t w a r e \ M i c r o s o f t \ C o m m a n d P r o c e s s o r \ E n a b l e E x t e n s i o n s
t o e i t h e r 0 x 1 o r 0 x 0 . T h e u s e r s p e c i f i c s e t t i n g t a k e s p r e c e d e n c e o v e r
t h e m a c h i n e s e t t i n g . T h e c o m m a n d l i n e s w i t c h e s t a k e p r e c e d e n c e o v e r t h e
r e g i s t r y s e t t i n g s .
T h e c o m m a n d e x t e n s i o n s i n v o l v e c h a n g e s a n d / o r a d d i t i o n s t o t h e f o l l o w i n g
c o m m a n d s :
D E L o r E R A S E
C O L O R
C D o r C H D I R
M D o r M K D I R
P R O M P T
P U S H D
P O P D
S E T
S E T L O C A L
E N D L O C A L
I F
F O R
C A L L
S H I F T
G O T O
S T A R T ( a l s o i n c l u d e s c h a n g e s t o e x t e r n a l c o m m a n d i n v o c a t i o n )
A S S O C
F T Y P E
T o g e t s p e c i f i c d e t a i l s , t y p e c o m m a n d n a m e / ? t o v i e w t h e s p e c i f i c s .
D e l a y e d e n v i r o n m e n t v a r i a b l e e x p a n s i o n i s N O T e n a b l e d b y d e f a u l t . Y o u
c a n e n a b l e o r d i s a b l e d e l a y e d e n v i r o n m e n t v a r i a b l e e x p a n s i o n f o r a
p a r t i c u l a r i n v o c a t i o n o f C M D . E X E w i t h t h e / V : O N o r / V : O F F s w i t c h . Y o u
c a n e n a b l e o r d i s a b l e c o m p l e t i o n f o r a l l i n v o c a t i o n s o f C M D . E X E o n a
m a c h i n e a n d / o r u s e r l o g o n s e s s i o n b y s e t t i n g e i t h e r o r b o t h o f t h e
f o l l o w i n g R E G _ D W O R D v a l u e s i n t h e r e g i s t r y u s i n g R E G E D T 3 2 . E X E :
H K E Y _ L O C A L _ M A C H I N E \ S o f t w a r e \ M i c r o s o f t \ C o m m a n d P r o c e s s o r \ D e l a y e d E x p a n s i o n
a n d / o r
H K E Y _ C U R R E N T _ U S E R \ S o f t w a r e \ M i c r o s o f t \ C o m m a n d P r o c e s s o r \ D e l a y e d E x p a n s i o n
t o e i t h e r 0 x 1 o r 0 x 0 . T h e u s e r s p e c i f i c s e t t i n g t a k e s p r e c e d e n c e o v e r
t h e m a c h i n e s e t t i n g . T h e c o m m a n d l i n e s w i t c h e s t a k e p r e c e d e n c e o v e r t h e
r e g i s t r y s e t t i n g s .
I f d e l a y e d e n v i r o n m e n t v a r i a b l e e x p a n s i o n i s e n a b l e d , t h e n t h e e x c l a m a t i o n
c h a r a c t e r c a n b e u s e d t o s u b s t i t u t e t h e v a l u e o f a n e n v i r o n m e n t v a r i a b l e
a t e x e c u t i o n t i m e .
F i l e a n d D i r e c t o r y n a m e c o m p l e t i o n i s N O T e n a b l e d b y d e f a u l t . Y o u c a n
e n a b l e o r d i s a b l e f i l e n a m e c o m p l e t i o n f o r a p a r t i c u l a r i n v o c a t i o n o f
C M D . E X E w i t h t h e / F : O N o r / F : O F F s w i t c h . Y o u c a n e n a b l e o r d i s a b l e
c o m p l e t i o n f o r a l l i n v o c a t i o n s o f C M D . E X E o n a m a c h i n e a n d / o r u s e r l o g o n
s e s s i o n b y s e t t i n g e i t h e r o r b o t h o f t h e f o l l o w i n g R E G _ D W O R D v a l u e s i n
t h e r e g i s t r y u s i n g R E G E D T 3 2 . E X E :
H K E Y _ L O C A L _ M A C H I N E \ S o f t w a r e \ M i c r o s o f t \ C o m m a n d P r o c e s s o r \ C o m p l e t i o n C h a r
H K E Y _ L O C A L _ M A C H I N E \ S o f t w a r e \ M i c r o s o f t \ C o m m a n d P r o c e s s o r \ P a t h C o m p l e t i o n C h a r
a n d / o r
H K E Y _ C U R R E N T _ U S E R \ S o f t w a r e \ M i c r o s o f t \ C o m m a n d P r o c e s s o r \ C o m p l e t i o n C h a r
H K E Y _ C U R R E N T _ U S E R \ S o f t w a r e \ M i c r o s o f t \ C o m m a n d P r o c e s s o r \ P a t h C o m p l e t i o n C h a r
w i t h t h e h e x v a l u e o f a c o n t r o l c h a r a c t e r t o u s e f o r a p a r t i c u l a r
f u n c t i o n ( e . g . 0 x 4 i s C t r l - D a n d 0 x 6 i s C t r l - F ) . T h e u s e r s p e c i f i c
s e t t i n g s t a k e p r e c e d e n c e o v e r t h e m a c h i n e s e t t i n g s . T h e c o m m a n d l i n e
s w i t c h e s t a k e p r e c e d e n c e o v e r t h e r e g i s t r y s e t t i n g s .
I f c o m p l e t i o n i s e n a b l e d w i t h t h e / F : O N s w i t c h , t h e t w o c o n t r o l
c h a r a c t e r s u s e d a r e C t r l - D f o r d i r e c t o r y n a m e c o m p l e t i o n a n d C t r l - F f o r
f i l e n a m e c o m p l e t i o n . T o d i s a b l e a p a r t i c u l a r c o m p l e t i o n c h a r a c t e r i n
t h e r e g i s t r y , u s e t h e v a l u e f o r s p a c e ( 0 x 2 0 ) a s i t i s n o t a v a l i d
c o n t r o l c h a r a c t e r .
C o m p l e t i o n i s i n v o k e d w h e n y o u t y p e e i t h e r o f t h e t w o c o n t r o l
c h a r a c t e r s . T h e c o m p l e t i o n f u n c t i o n t a k e s t h e p a t h s t r i n g t o t h e l e f t
o f t h e c u r s o r a p p e n d s a w i l d c a r d c h a r a c t e r t o i t i f n o n e i s a l r e a d y
p r e s e n t a n d b u i l d s u p a l i s t o f p a t h s t h a t m a t c h . I t t h e n d i s p l a y s t h e
f i r s t m a t c h i n g p a t h . I f n o p a t h s m a t c h , i t j u s t b e e p s a n d l e a v e s t h e
d i s p l a y a l o n e . T h e r e a f t e r , r e p e a t e d p r e s s i n g o f t h e s a m e c o n t r o l
c h a r a c t e r w i l l c y c l e t h r o u g h t h e l i s t o f m a t c h i n g p a t h s . P r e s s i n g t h e
S h i f t k e y w i t h t h e c o n t r o l c h a r a c t e r w i l l m o v e t h r o u g h t h e l i s t
b a c k w a r d s . I f y o u e d i t t h e l i n e i n a n y w a y a n d p r e s s t h e c o n t r o l
c h a r a c t e r a g a i n , t h e s a v e d l i s t o f m a t c h i n g p a t h s i s d i s c a r d e d a n d a n e w
o n e g e n e r a t e d . T h e s a m e o c c u r s i f y o u s w i t c h b e t w e e n f i l e a n d d i r e c t o r y
n a m e c o m p l e t i o n . T h e o n l y d i f f e r e n c e b e t w e e n t h e t w o c o n t r o l c h a r a c t e r s
i s t h e f i l e c o m p l e t i o n c h a r a c t e r m a t c h e s b o t h f i l e a n d d i r e c t o r y n a m e s ,
w h i l e t h e d i r e c t o r y c o m p l e t i o n c h a r a c t e r o n l y m a t c h e s d i r e c t o r y n a m e s .
I f f i l e c o m p l e t i o n i s u s e d o n a n y o f t h e b u i l t i n d i r e c t o r y c o m m a n d s
( C D , M D o r R D ) t h e n d i r e c t o r y c o m p l e t i o n i s a s s u m e d .
T h e c o m p l e t i o n c o d e d e a l s c o r r e c t l y w i t h f i l e n a m e s t h a t c o n t a i n s p a c e s
o r o t h e r s p e c i a l c h a r a c t e r s b y p l a c i n g q u o t e s a r o u n d t h e m a t c h i n g p a t h .
A l s o , i f y o u b a c k u p , t h e n i n v o k e c o m p l e t i o n f r o m w i t h i n a l i n e , t h e
t e x t t o t h e r i g h t o f t h e c u r s o r a t t h e p o i n t c o m p l e t i o n w a s i n v o k e d i s
d i s c a r d e d .
T h e s p e c i a l c h a r a c t e r s t h a t r e q u i r e q u o t e s a r e :
< s p a c e >
& ( ) [ ] { } ^ = ; ! % ' + , ` ~
C o m m a n d P r o c e s s o r E x t e n s i o n s E n a b l e d
C o m m a n d P r o c e s s o r E x t e n s i o n s e n a b l e d b y d e f a u l t . U s e C M D / ? f o r d e t a i l s .
D e l e t e d f i l e - % 1
D i s p l a y s o r m o d i f i e s f i l e e x t e n s i o n a s s o c i a t i o n s
A S S O C [ . e x t [ = [ f i l e T y p e ] ] ]
. e x t S p e c i f i e s t h e f i l e e x t e n s i o n t o a s s o c i a t e t h e f i l e t y p e w i t h
f i l e T y p e S p e c i f i e s t h e f i l e t y p e t o a s s o c i a t e w i t h t h e f i l e e x t e n s i o n
T y p e A S S O C w i t h o u t p a r a m e t e r s t o d i s p l a y t h e c u r r e n t f i l e a s s o c i a t i o n s .
I f A S S O C i s i n v o k e d w i t h j u s t a f i l e e x t e n s i o n , i t d i s p l a y s t h e c u r r e n t
f i l e a s s o c i a t i o n f o r t h a t f i l e e x t e n s i o n . S p e c i f y n o t h i n g f o r t h e f i l e
t y p e a n d t h e c o m m a n d w i l l d e l e t e t h e a s s o c i a t i o n f o r t h e f i l e e x t e n s i o n .
F i l e a s s o c i a t i o n n o t f o u n d f o r e x t e n s i o n % 1
D i s p l a y s o r m o d i f i e s f i l e t y p e s u s e d i n f i l e e x t e n s i o n a s s o c i a t i o n s
F T Y P E [ f i l e T y p e [ = [ o p e n C o m m a n d S t r i n g ] ] ]
f i l e T y p e S p e c i f i e s t h e f i l e t y p e t o e x a m i n e o r c h a n g e
o p e n C o m m a n d S t r i n g S p e c i f i e s t h e o p e n c o m m a n d t o u s e w h e n l a u n c h i n g f i l e s
o f t h i s t y p e .
T y p e F T Y P E w i t h o u t p a r a m e t e r s t o d i s p l a y t h e c u r r e n t f i l e t y p e s t h a t
h a v e o p e n c o m m a n d s t r i n g s d e f i n e d . F T Y P E i s i n v o k e d w i t h j u s t a f i l e
t y p e , i t d i s p l a y s t h e c u r r e n t o p e n c o m m a n d s t r i n g f o r t h a t f i l e t y p e .
S p e c i f y n o t h i n g f o r t h e o p e n c o m m a n d s t r i n g a n d t h e F T Y P E c o m m a n d w i l l
d e l e t e t h e o p e n c o m m a n d s t r i n g f o r t h e f i l e t y p e . W i t h i n a n o p e n
c o m m a n d s t r i n g % % 0 o r % % 1 a r e s u b s t i t u t e d w i t h t h e f i l e n a m e b e i n g
l a u n c h e d t h r o u g h t h e a s s o c a t i o n . % % * g e t s a l l t h e p a r a m e t e r s a n d % % 2
g e t s t h e 1 s t p a r a m e t e r , % % 3 t h e s e c o n d , e t c . % % ~ n g e t s a l l t h e r e m a i n i n g
p a r a m e t e r s s t a r t i n g w i t h t h e n t h p a r a m e t e r , w h e r e n m a y b e b e t w e e n 2 a n d 9 ,
i n c l u s i v e . F o r e x a m p l e :
A S S O C . p l = P e r l S c r i p t
F T Y P E P e r l S c r i p t = p e r l . e x e % % 1 % % *
w o u l d a l l o w y o u t o i n v o k e a P e r l s c r i p t a s f o l l o w s :
s c r i p t . p l 1 2 3
I f y o u w a n t t o e l i m i n a t e t h e n e e d t o t y p e t h e e x t e n s i o n s , t h e n d o t h e
f o l l o w i n g :
s e t P A T H E X T = . p l ; % % P A T H E X T % %
a n d t h e s c r i p t c o u l d b e i n v o k e d a s f o l l o w s :
s c r i p t 1 2 3
F i l e t y p e ' % 1 ' n o t f o u n d o r n o o p e n c o m m a n d a s s o c i a t e d w i t h i t .
I n v a l i d p a r a m e t e r t o S E T L O C A L c o m m a n d
T h e r e s t a r t a b l e o p t i o n t o t h e C O P Y c o m m a n d i s n o t s u p p o r t e d b y
t h i s v e r s i o n o f t h e o p e r a t i n g s y s t e m .
T h e f o l l o w i n g u s a g e o f t h e p a t h o p e r a t o r i n b a t c h - p a r a m e t e r
s u b s t i t u t i o n i s i n v a l i d : % 1
F o r v a l i d f o r m a t s t y p e C A L L / ? o r F O R / ?
E n v i r o n m e n t v a r i a b l e % 1 n o t d e f i n e d
I n v a l i d a t t e m p t t o c a l l b a t c h l a b e l o u t s i d e o f b a t c h s c r i p t .
T h e s y s t e m c a n n o t f i n d t h e b a t c h l a b e l s p e c i f i e d - % 1
T h e u n i c o d e o u t p u t o p t i o n t o C M D . E X E i s n o t s u p p o r t e d b y t h i s
v e r s i o n o f t h e o p e r a t i n g s y s t e m .
I f C o m m a n d E x t e n s i o n s a r e e n a b l e d D E L a n d E R A S E c h a n g e a s f o l l o w s :
T h e d i s p l a y s e m a n t i c s o f t h e / S s w i t c h a r e r e v e r s e d i n t h a t i t s h o w s
y o u o n l y t h e f i l e s t h a t a r e d e l e t e d , n o t t h e o n e s i t c o u l d n o t f i n d .
I f C o m m a n d E x t e n s i o n s a r e e n a b l e d C H D I R c h a n g e s a s f o l l o w s :
T h e c u r r e n t d i r e c t o r y s t r i n g i s c o n v e r t e d t o u s e t h e s a m e c a s e a s
t h e o n d i s k n a m e s . S o C D C : \ T E M P w o u l d a c t u a l l y s e t t h e c u r r e n t
d i r e c t o r y t o C : \ T e m p i f t h a t i s t h e c a s e o n d i s k .
C H D I R c o m m a n d d o e s n o t t r e a t s p a c e s a s d e l i m i t e r s , s o i t i s p o s s i b l e t o
C D i n t o a s u b d i r e c t o r y n a m e t h a t c o n t a i n s a s p a c e w i t h o u t s u r r o u n d i n g
t h e n a m e w i t h q u o t e s . F o r e x a m p l e :
c d \ w i n n t \ p r o f i l e s \ u s e r n a m e \ p r o g r a m s \ s t a r t m e n u
i s t h e s a m e a s :
c d " \ w i n n t \ p r o f i l e s \ u s e r n a m e \ p r o g r a m s \ s t a r t m e n u "
w h i c h i s w h a t y o u w o u l d h a v e t o t y p e i f e x t e n s i o n s w e r e d i s a b l e d .
I f C o m m a n d E x t e n s i o n s a r e e n a b l e d M K D I R c h a n g e s a s f o l l o w s :
M K D I R c r e a t e s a n y i n t e r m e d i a t e d i r e c t o r i e s i n t h e p a t h , i f n e e d e d .
F o r e x a m p l e , a s s u m e \ a d o e s n o t e x i s t t h e n :
m k d i r \ a \ b \ c \ d
i s t h e s a m e a s :
m k d i r \ a
c h d i r \ a
m k d i r b
c h d i r b
m k d i r c
c h d i r c
m k d i r d
w h i c h i s w h a t y o u w o u l d h a v e t o t y p e i f e x t e n s i o n s w e r e d i s a b l e d .
I f C o m m a n d E x t e n s i o n s a r e e n a b l e d t h e D A T E c o m m a n d s u p p o r t s
t h e / T s w i t c h w h i c h t e l l s t h e c o m m a n d t o j u s t o u t p u t t h e
c u r r e n t d a t e , w i t h o u t p r o m p t i n g f o r a n e w d a t e .
I f C o m m a n d E x t e n s i o n s a r e e n a b l e d t h e T I M E c o m m a n d s u p p o r t s
t h e / T s w i t c h w h i c h t e l l s t h e c o m m a n d t o j u s t o u t p u t t h e
c u r r e n t t i m e , w i t h o u t p r o m p t i n g f o r a n e w t i m e .
I f C o m m a n d E x t e n s i o n s a r e e n a b l e d t h e P R O M P T c o m m a n d s u p p o r t s
t h e f o l l o w i n g a d d i t i o n a l f o r m a t t i n g c h a r a c t e r s :
$ + z e r o o r m o r e p l u s s i g n ( + ) c h a r a c t e r s d e p e n d i n g u p o n t h e
d e p t h o f t h e P U S H D d i r e c t o r y s t a c k , o n e c h a r a c t e r f o r e a c h
l e v e l p u s h e d .
$ M D i s p l a y s t h e r e m o t e n a m e a s s o c i a t e d w i t h t h e c u r r e n t d r i v e
l e t t e r o r t h e e m p t y s t r i n g i f c u r r e n t d r i v e i s n o t a n e t w o r k
d r i v e .
I f C o m m a n d E x t e n s i o n s a r e e n a b l e d t h e P U S H D c o m m a n d a c c e p t s
n e t w o r k p a t h s i n a d d i t i o n t o t h e n o r m a l d r i v e l e t t e r a n d p a t h .
I f a n e t w o r k p a t h i s s p e c i f i e d , P U S H D w i l l c r e a t e a t e m p o r a r y
d r i v e l e t t e r t h a t p o i n t s t o t h a t s p e c i f i e d n e t w o r k r e s o u r c e a n d
t h e n c h a n g e t h e c u r r e n t d r i v e a n d d i r e c t o r y , u s i n g t h e n e w l y
d e f i n e d d r i v e l e t t e r . T e m p o r a r y d r i v e l e t t e r s a r e a l l o c a t e d f r o m
Z : o n d o w n , u s i n g t h e f i r s t u n u s e d d r i v e l e t t e r f o u n d .
I f C o m m a n d E x t e n s i o n s a r e e n a b l e d t h e P O P D c o m m a n d w i l l d e l e t e
a n y t e m p o r a r y d r i v e l e t t e r c r e a t e d b y P U S H D w h e n y o u P O P D t h a t
d r i v e o f f t h e p u s h e d d i r e c t o r y s t a c k .
I f C o m m a n d E x t e n s i o n s a r e e n a b l e d S E T c h a n g e s a s f o l l o w s :
S E T c o m m a n d i n v o k e d w i t h j u s t a v a r i a b l e n a m e , n o e q u a l s i g n o r v a l u e
w i l l d i s p l a y t h e v a l u e o f a l l v a r i a b l e s w h o s e p r e f i x m a t c h e s t h e n a m e
g i v e n t o t h e S E T c o m m a n d . F o r e x a m p l e :
S E T P
w o u l d d i s p l a y a l l v a r i a b l e s t h a t b e g i n w i t h t h e l e t t e r ' P '
S E T c o m m a n d w i l l s e t t h e E R R O R L E V E L t o 1 i f t h e v a r i a b l e n a m e i s n o t
f o u n d i n t h e c u r r e n t e n v i r o n m e n t .
S E T c o m m a n d w i l l n o t a l l o w a n e q u a l s i g n t o b e p a r t o f t h e n a m e o f
a v a r i a b l e .
T w o n e w s w i t c h e s h a v e b e e n a d d e d t o t h e S E T c o m m a n d :
S E T / A e x p r e s s i o n
S E T / P v a r i a b l e = [ p r o m p t S t r i n g ]
T h e / A s w i t c h s p e c i f i e s t h a t t h e s t r i n g t o t h e r i g h t o f t h e e q u a l s i g n
i s a n u m e r i c a l e x p r e s s i o n t h a t i s e v a l u a t e d . T h e e x p r e s s i o n e v a l u a t o r
i s p r e t t y s i m p l e a n d s u p p o r t s t h e f o l l o w i n g o p e r a t i o n s , i n d e c r e a s i n g
o r d e r o f p r e c e d e n c e :
( ) - g r o u p i n g
! ~ - - u n a r y o p e r a t o r s
* / % % - a r i t h m e t i c o p e r a t o r s
+ - - a r i t h m e t i c o p e r a t o r s
< < > > - l o g i c a l s h i f t
& - b i t w i s e a n d
^ - b i t w i s e e x c l u s i v e o r
| - b i t w i s e o r
= * = / = % % = + = - = - a s s i g n m e n t
& = ^ = | = < < = > > =
, - e x p r e s s i o n s e p a r a t o r
I f y o u u s e a n y o f t h e l o g i c a l o r m o d u l u s o p e r a t o r s , y o u w i l l n e e d t o
e n c l o s e t h e e x p r e s s i o n s t r i n g i n q u o t e s . A n y n o n - n u m e r i c s t r i n g s i n t h e
e x p r e s s i o n a r e t r e a t e d a s e n v i r o n m e n t v a r i a b l e n a m e s w h o s e v a l u e s a r e
c o n v e r t e d t o n u m b e r s b e f o r e u s i n g t h e m . I f a n e n v i r o n m e n t v a r i a b l e n a m e
i s s p e c i f i e d b u t i s n o t d e f i n e d i n t h e c u r r e n t e n v i r o n m e n t , t h e n a v a l u e
o f z e r o i s u s e d . T h i s a l l o w s y o u t o d o a r i t h m e t i c w i t h e n v i r o n m e n t
v a r i a b l e v a l u e s w i t h o u t h a v i n g t o t y p e a l l t h o s e % % s i g n s t o g e t t h e i r
v a l u e s . I f S E T / A i s e x e c u t e d f r o m t h e c o m m a n d l i n e o u t s i d e o f a
c o m m a n d s c r i p t , t h e n i t d i s p l a y s t h e f i n a l v a l u e o f t h e e x p r e s s i o n . T h e
a s s i g n m e n t o p e r a t o r r e q u i r e s a n e n v i r o n m e n t v a r i a b l e n a m e t o t h e l e f t o f
t h e a s s i g n m e n t o p e r a t o r . N u m e r i c v a l u e s a r e d e c i m a l n u m b e r s , u n l e s s
p r e f i x e d b y 0 x f o r h e x a d e c i m a l n u m b e r s , a n d 0 f o r o c t a l n u m b e r s .
S o 0 x 1 2 i s t h e s a m e a s 1 8 i s t h e s a m e a s 0 2 2 . P l e a s e n o t e t h a t t h e o c t a l
n o t a t i o n c a n b e c o n f u s i n g : 0 8 a n d 0 9 a r e n o t v a l i d n u m b e r s b e c a u s e 8 a n d
9 a r e n o t v a l i d o c t a l d i g i t s .
T h e / P s w i t c h a l l o w s y o u t o s e t t h e v a l u e o f a v a r i a b l e t o a l i n e o f i n p u t
e n t e r e d b y t h e u s e r . D i s p l a y s t h e s p e c i f i e d p r o m p t S t r i n g b e f o r e r e a d i n g
t h e l i n e o f i n p u t . T h e p r o m p t S t r i n g c a n b e e m p t y .
E n v i r o n m e n t v a r i a b l e s u b s t i t u t i o n h a s b e e n e n h a n c e d a s f o l l o w s :
% % P A T H : s t r 1 = s t r 2 % %
w o u l d e x p a n d t h e P A T H e n v i r o n m e n t v a r i a b l e , s u b s t i t u t i n g e a c h o c c u r r e n c e
o f " s t r 1 " i n t h e e x p a n d e d r e s u l t w i t h " s t r 2 " . " s t r 2 " c a n b e t h e e m p t y
s t r i n g t o e f f e c t i v e l y d e l e t e a l l o c c u r r e n c e s o f " s t r 1 " f r o m t h e e x p a n d e d
o u t p u t . " s t r 1 " c a n b e g i n w i t h a n a s t e r i s k , i n w h i c h c a s e i t w i l l m a t c h
e v e r y t h i n g f r o m t h e b e g i n n i n g o f t h e e x p a n d e d o u t p u t t o t h e f i r s t
o c c u r r e n c e o f t h e r e m a i n i n g p o r t i o n o f s t r 1 .
M a y a l s o s p e c i f y s u b s t r i n g s f o r a n e x p a n s i o n .
% % P A T H : ~ 1 0 , 5 % %
w o u l d e x p a n d t h e P A T H e n v i r o n m e n t v a r i a b l e , a n d t h e n u s e o n l y t h e 5
c h a r a c t e r s t h a t b e g i n a t t h e 1 1 t h ( o f f s e t 1 0 ) c h a r a c t e r o f t h e e x p a n d e d
r e s u l t . I f t h e l e n g t h i s n o t s p e c i f i e d , t h e n i t d e f a u l t s t o t h e
r e m a i n d e r o f t h e v a r i a b l e v a l u e . I f e i t h e r n u m b e r ( o f f s e t o r l e n g t h ) i s
n e g a t i v e , t h e n t h e n u m b e r u s e d i s t h e l e n g t h o f t h e e n v i r o n m e n t v a r i a b l e
v a l u e a d d e d t o t h e o f f s e t o r l e n g t h s p e c i f i e d .
% % P A T H : ~ - 1 0 % %
w o u l d e x t r a c t t h e l a s t 1 0 c h a r a c t e r s o f t h e P A T H v a r i a b l e .
% % P A T H : ~ 0 , - 2 % %
w o u l d e x t r a c t a l l b u t t h e l a s t 2 c h a r a c t e r s o f t h e P A T H v a r i a b l e .
F i n a l l y , s u p p o r t f o r d e l a y e d e n v i r o n m e n t v a r i a b l e e x p a n s i o n h a s b e e n
a d d e d . T h i s s u p p o r t i s a l w a y s d i s a b l e d b y d e f a u l t , b u t m a y b e
e n a b l e d / d i s a b l e d v i a t h e / V c o m m a n d l i n e s w i t c h t o C M D . E X E . S e e C M D / ?
D e l a y e d e n v i r o n m e n t v a r i a b l e e x p a n s i o n i s u s e f u l f o r g e t t i n g a r o u n d
t h e l i m i t a t i o n s o f t h e c u r r e n t e x p a n s i o n w h i c h h a p p e n s w h e n a l i n e
o f t e x t i s r e a d , n o t w h e n i t i s e x e c u t e d . T h e f o l l o w i n g e x a m p l e
d e m o n s t r a t e s t h e p r o b l e m w i t h i m m e d i a t e v a r i a b l e e x p a n s i o n :
s e t V A R = b e f o r e
i f " % % V A R % % " = = " b e f o r e " (
s e t V A R = a f t e r
i f " % % V A R % % " = = " a f t e r " @ e c h o I f y o u s e e t h i s , i t w o r k e d
w o u l d n e v e r d i s p l a y t h e m e s s a g e , s i n c e t h e % % V A R % % i n B O T H I F s t a t e m e n t s
i s s u b s t i t u t e d w h e n t h e f i r s t I F s t a t e m e n t i s r e a d , s i n c e i t l o g i c a l l y
i n c l u d e s t h e b o d y o f t h e I F , w h i c h i s a c o m p o u n d s t a t e m e n t . S o t h e
I F i n s i d e t h e c o m p o u n d s t a t e m e n t i s r e a l l y c o m p a r i n g " b e f o r e " w i t h
" a f t e r " w h i c h w i l l n e v e r b e e q u a l . S i m i l a r l y , t h e f o l l o w i n g e x a m p l e
w i l l n o t w o r k a s e x p e c t e d :
s e t L I S T =
f o r % % i i n ( * ) d o s e t L I S T = % % L I S T % % % % i
e c h o % % L I S T % %
i n t h a t i t w i l l N O T b u i l d u p a l i s t o f f i l e s i n t h e c u r r e n t d i r e c t o r y ,
b u t i n s t e a d w i l l j u s t s e t t h e L I S T v a r i a b l e t o t h e l a s t f i l e f o u n d .
A g a i n , t h i s i s b e c a u s e t h e % % L I S T % % i s e x p a n d e d j u s t o n c e w h e n t h e
F O R s t a t e m e n t i s r e a d , a n d a t t h a t t i m e t h e L I S T v a r i a b l e i s e m p t y .
S o t h e a c t u a l F O R l o o p w e a r e e x e c u t i n g i s :
f o r % % i i n ( * ) d o s e t L I S T = % % i
w h i c h j u s t k e e p s s e t t i n g L I S T t o t h e l a s t f i l e f o u n d .
D e l a y e d e n v i r o n m e n t v a r i a b l e e x p a n s i o n a l l o w s y o u t o u s e a d i f f e r e n t
c h a r a c t e r ( t h e e x c l a m a t i o n m a r k ) t o e x p a n d e n v i r o n m e n t v a r i a b l e s a t
e x e c u t i o n t i m e . I f d e l a y e d v a r i a b l e e x p a n s i o n i s e n a b l e d , t h e a b o v e
e x a m p l e s c o u l d b e w r i t t e n a s f o l l o w s t o w o r k a s i n t e n d e d :
s e t V A R = b e f o r e
i f " % % V A R % % " = = " b e f o r e " (
s e t V A R = a f t e r
i f " ! V A R ! " = = " a f t e r " @ e c h o I f y o u s e e t h i s , i t w o r k e d
s e t L I S T =
f o r % % i i n ( * ) d o s e t L I S T = ! L I S T ! % % i
e c h o % % L I S T % %
I f C o m m a n d E x t e n s i o n s a r e e n a b l e d , t h e n t h e r e a r e s e v e r a l d y n a m i c
e n v i r o n m e n t v a r i a b l e s t h a t c a n b e e x p a n d e d b u t w h i c h d o n ' t s h o w u p i n
t h e l i s t o f v a r i a b l e s d i s p l a y e d b y S E T . T h e s e v a r i a b l e v a l u e s a r e
c o m p u t e d d y n a m i c a l l y e a c h t i m e t h e v a l u e o f t h e v a r i a b l e i s e x p a n d e d .
I f t h e u s e r e x p l i c i t l y d e f i n e s a v a r i a b l e w i t h o n e o f t h e s e n a m e s , t h e n
t h a t d e f i n i t i o n w i l l o v e r r i d e t h e d y n a m i c o n e d e s c r i b e d b e l o w :
% % C D % % - e x p a n d s t o t h e c u r r e n t d i r e c t o r y s t r i n g .
% % D A T E % % - e x p a n d s t o c u r r e n t d a t e u s i n g s a m e f o r m a t a s D A T E c o m m a n d .
% % T I M E % % - e x p a n d s t o c u r r e n t t i m e u s i n g s a m e f o r m a t a s T I M E c o m m a n d .
% % R A N D O M % % - e x p a n d s t o a r a n d o m d e c i m a l n u m b e r b e t w e e n 0 a n d 3 2 7 6 7 .
% % E R R O R L E V E L % % - e x p a n d s t o t h e c u r r e n t E R R O R L E V E L v a l u e
% % C M D E X T V E R S I O N % % - e x p a n d s t o t h e c u r r e n t C o m m a n d P r o c e s s o r E x t e n s i o n s
v e r s i o n n u m b e r .
% % C M D C M D L I N E % % - e x p a n d s t o t h e o r i g i n a l c o m m a n d l i n e t h a t i n v o k e d t h e
C o m m a n d P r o c e s s o r .
I f C o m m a n d E x t e n s i o n s a r e e n a b l e d G O T O c h a n g e s a s f o l l o w s :
G O T O c o m m a n d n o w a c c e p t s a t a r g e t l a b e l o f : E O F w h i c h t r a n s f e r s c o n t r o l
t o t h e e n d o f t h e c u r r e n t b a t c h s c r i p t f i l e . T h i s i s a n e a s y w a y t o
e x i t a b a t c h s c r i p t f i l e w i t h o u t d e f i n i n g a l a b e l . T y p e C A L L / ? f o r a
d e s c r i p t i o n o f e x t e n s i o n s t o t h e C A L L c o m m a n d t h a t m a k e t h i s f e a t u r e
u s e f u l .
I f C o m m a n d E x t e n s i o n s a r e e n a b l e d t h e S H I F T c o m m a n d s u p p o r t s
t h e / n s w i t c h w h i c h t e l l s t h e c o m m a n d t o s t a r t s h i f t i n g a t t h e
n t h a r g u m e n t , w h e r e n m a y b e b e t w e e n z e r o a n d e i g h t . F o r e x a m p l e :
S H I F T / 2
w o u l d s h i f t % % 3 t o % % 2 , % % 4 t o % % 3 , e t c . a n d l e a v e % % 0 a n d % % 1 u n a f f e c t e d .
I f C o m m a n d E x t e n s i o n s a r e e n a b l e d C A L L c h a n g e s a s f o l l o w s :
C A L L c o m m a n d n o w a c c e p t s l a b e l s a s t h e t a r g e t o f t h e C A L L . T h e s y n t a x
C A L L : l a b e l a r g u m e n t s
A n e w b a t c h f i l e c o n t e x t i s c r e a t e d w i t h t h e s p e c i f i e d a r g u m e n t s a n d
c o n t r o l i s p a s s e d t o t h e s t a t e m e n t a f t e r t h e l a b e l s p e c i f i e d . Y o u m u s t
" e x i t " t w i c e b y r e a c h i n g t h e e n d o f t h e b a t c h s c r i p t f i l e t w i c e . T h e
f i r s t t i m e y o u r e a d t h e e n d , c o n t r o l w i l l r e t u r n t o j u s t a f t e r t h e C A L L
s t a t e m e n t . T h e s e c o n d t i m e w i l l e x i t t h e b a t c h s c r i p t . T y p e G O T O / ?
f o r a d e s c r i p t i o n o f t h e G O T O : E O F e x t e n s i o n t h a t w i l l a l l o w y o u t o
" r e t u r n " f r o m a b a t c h s c r i p t .
I n a d d i t i o n , e x p a n s i o n o f b a t c h s c r i p t a r g u m e n t r e f e r e n c e s ( % % 0 , % % 1 ,
e t c . ) h a v e b e e n c h a n g e d a s f o l l o w s :
% % * i n a b a t c h s c r i p t r e f e r s t o a l l t h e a r g u m e n t s ( e . g . % % 1 % % 2 % % 3
% % 4 % % 5 . . . )
S u b s t i t u t i o n o f b a t c h p a r a m e t e r s ( % % n ) h a s b e e n e n h a n c e d . Y o u c a n
n o w u s e t h e f o l l o w i n g o p t i o n a l s y n t a x :
% % ~ 1 - e x p a n d s % % 1 r e m o v i n g a n y s u r r o u n d i n g q u o t e s ( " )
% % ~ f 1 - e x p a n d s % % 1 t o a f u l l y q u a l i f i e d p a t h n a m e
% % ~ d 1 - e x p a n d s % % 1 t o a d r i v e l e t t e r o n l y
% % ~ p 1 - e x p a n d s % % 1 t o a p a t h o n l y
% % ~ n 1 - e x p a n d s % % 1 t o a f i l e n a m e o n l y
% % ~ x 1 - e x p a n d s % % 1 t o a f i l e e x t e n s i o n o n l y
% % ~ s 1 - e x p a n d e d p a t h c o n t a i n s s h o r t n a m e s o n l y
% % ~ a 1 - e x p a n d s % % 1 t o f i l e a t t r i b u t e s
% % ~ t 1 - e x p a n d s % % 1 t o d a t e / t i m e o f f i l e
% % ~ z 1 - e x p a n d s % % 1 t o s i z e o f f i l e
% % ~ $ P A T H : 1 - s e a r c h e s t h e d i r e c t o r i e s l i s t e d i n t h e P A T H
e n v i r o n m e n t v a r i a b l e a n d e x p a n d s % % 1 t o t h e f u l l y
q u a l i f i e d n a m e o f t h e f i r s t o n e f o u n d . I f t h e
e n v i r o n m e n t v a r i a b l e n a m e i s n o t d e f i n e d o r t h e
f i l e i s n o t f o u n d b y t h e s e a r c h , t h e n t h i s
m o d i f i e r e x p a n d s t o t h e e m p t y s t r i n g
T h e m o d i f i e r s c a n b e c o m b i n e d t o g e t c o m p o u n d r e s u l t s :
% % ~ d p 1 - e x p a n d s % % 1 t o a d r i v e l e t t e r a n d p a t h o n l y
% % ~ n x 1 - e x p a n d s % % 1 t o a f i l e n a m e a n d e x t e n s i o n o n l y
% % ~ d p $ P A T H : 1 - s e a r c h e s t h e d i r e c t o r i e s l i s t e d i n t h e P A T H
e n v i r o n m e n t v a r i a b l e f o r % % 1 a n d e x p a n d s t o t h e
d r i v e l e t t e r a n d p a t h o f t h e f i r s t o n e f o u n d .
% % ~ f t z a 1 - e x p a n d s % % 1 t o a D I R l i k e o u t p u t l i n e
I n t h e a b o v e e x a m p l e s % % 1 a n d P A T H c a n b e r e p l a c e d b y o t h e r
v a l i d v a l u e s . T h e % % ~ s y n t a x i s t e r m i n a t e d b y a v a l i d a r g u m e n t
n u m b e r . T h e % % ~ m o d i f i e r s m a y n o t b e u s e d w i t h % % *
I f C o m m a n d E x t e n s i o n s a r e e n a b l e d S E T L O C A L c h a n g e s a s f o l l o w s :
S E T L O C A L b a t c h c o m m a n d n o w a c c e p t s o p t i o n a l a r g u m e n t s :
E N A B L E E X T E N S I O N S / D I S A B L E E X T E N S I O N S
e n a b l e o r d i s a b l e c o m m a n d p r o c e s s o r e x t e n s i o n s . S e e
C M D / ? f o r d e t a i l s .
E N A B L E D E L A Y E D E X P A N S I O N / D I S A B L E D E L A Y E D E X P A N S I O N
e n a b l e o r d i s a b l e d e l a y e d e n v i r o n m e n t v a r i a b l e
e x p a n s i o n . S e e S E T / ? f o r d e t a i l s .
T h e s e m o d i f i c a t i o n s l a s t u n t i l t h e m a t c h i n g E N D L O C A L c o m m a n d ,
r e g a r d l e s s o f t h e i r s e t t i n g p r i o r t o t h e S E T L O C A L c o m m a n d .
T h e S E T L O C A L c o m m a n d w i l l s e t t h e E R R O R L E V E L v a l u e i f g i v e n
a n a r g u m e n t . I t w i l l b e z e r o i f o n e o f t h e t w o v a l i d a r g u m e n t s
i s g i v e n a n d o n e o t h e r w i s e . Y o u c a n u s e t h i s i n b a t c h s c r i p t s
t o d e t e r m i n e i f t h e e x t e n s i o n s a r e a v a i l a b l e , u s i n g t h e f o l l o w i n g
t e c h n i q u e :
V E R I F Y O T H E R 2 > n u l
S E T L O C A L E N A B L E E X T E N S I O N S
I F E R R O R L E V E L 1 e c h o U n a b l e t o e n a b l e e x t e n s i o n s
T h i s w o r k s b e c a u s e o n o l d v e r s i o n s o f C M D . E X E , S E T L O C A L d o e s N O T
s e t t h e E R R O R L E V E L v a l u e . T h e V E R I F Y c o m m a n d w i t h a b a d a r g u m e n t
i n i t i a l i z e s t h e E R R O R L E V E L v a l u e t o a n o n - z e r o v a l u e .
I f C o m m a n d E x t e n s i o n s a r e e n a b l e d E N D L O C A L c h a n g e s a s f o l l o w s :
I f t h e c o r r e s p o n d i n g S E T L O C A L e n a b l e o r d i s a b l e d c o m m a n d e x t e n s i o n s
u s i n g t h e n e w E N A B L E E X T E N S I O N S o r D I S A B L E E X T E N S I O N S o p t i o n s , t h e n
a f t e r t h e E N D L O C A L , t h e e n a b l e d / d i s a b l e d s t a t e o f c o m m a n d e x t e n s i o n s
w i l l b e r e s t o r e d t o w h a t i t w a s p r i o r t o t h e m a t c h i n g S E T L O C A L
c o m m a n d e x e c u t i o n .
I f C o m m a n d E x t e n s i o n s a r e e n a b l e d , e x t e r n a l c o m m a n d i n v o c a t i o n
t h r o u g h t h e c o m m a n d l i n e o r t h e S T A R T c o m m a n d c h a n g e s a s f o l l o w s :
n o n - e x e c u t a b l e f i l e s m a y b e i n v o k e d t h r o u g h t h e i r f i l e a s s o c i a t i o n j u s t
b y t y p i n g t h e n a m e o f t h e f i l e a s a c o m m a n d . ( e . g . W O R D . D O C w o u l d
l a u n c h t h e a p p l i c a t i o n a s s o c i a t e d w i t h t h e . D O C f i l e e x t e n s i o n ) .
S e e t h e A S S O C a n d F T Y P E c o m m a n d s f o r h o w t o c r e a t e t h e s e
a s s o c i a t i o n s f r o m w i t h i n a c o m m a n d s c r i p t .
W h e n e x e c u t i n g a n a p p l i c a t i o n t h a t i s a 3 2 - b i t G U I a p p l i c a t i o n , C M D . E X E
d o e s n o t w a i t f o r t h e a p p l i c a t i o n t o t e r m i n a t e b e f o r e r e t u r n i n g t o
t h e c o m m a n d p r o m p t . T h i s n e w b e h a v i o r d o e s N O T o c c u r i f e x e c u t i n g
w i t h i n a c o m m a n d s c r i p t .
W h e n e x e c u t i n g a c o m m a n d l i n e w h o s e f i r s t t o k e n i s t h e s t r i n g " C M D "
w i t h o u t a n e x t e n s i o n o r p a t h q u a l i f i e r , t h e n " C M D " i s r e p l a c e d w i t h
t h e v a l u e o f t h e C O M S P E C v a r i a b l e . T h i s p r e v e n t s p i c k i n g u p C M D . E X E
f r o m t h e c u r r e n t d i r e c t o r y .
W h e n e x e c u t i n g a c o m m a n d l i n e w h o s e f i r s t t o k e n d o e s N O T c o n t a i n a n
e x t e n s i o n , t h e n C M D . E X E u s e s t h e v a l u e o f t h e P A T H E X T
e n v i r o n m e n t v a r i a b l e t o d e t e r m i n e w h i c h e x t e n s i o n s t o l o o k f o r
a n d i n w h a t o r d e r . T h e d e f a u l t v a l u e f o r t h e P A T H E X T v a r i a b l e
i s :
. C O M ; . E X E ; . B A T ; . C M D
N o t i c e t h e s y n t a x i s t h e s a m e a s t h e P A T H v a r i a b l e , w i t h
s e m i c o l o n s s e p a r a t i n g t h e d i f f e r e n t e l e m e n t s .
W h e n s e a r c h i n g f o r a n e x e c u t a b l e , i f t h e r e i s n o m a t c h o n a n y e x t e n s i o n ,
t h e n l o o k s t o s e e i f t h e n a m e m a t c h e s a d i r e c t o r y n a m e . I f i t d o e s , t h e
S T A R T c o m m a n d l a u n c h e s t h e E x p l o r e r o n t h a t p a t h . I f d o n e f r o m t h e
c o m m a n d l i n e , i t i s t h e e q u i v a l e n t t o d o i n g a C D / D t o t h a t p a t h .
I f C o m m a n d E x t e n s i o n s a r e e n a b l e d , a n d r u n n i n g o n t h e W i n d o w s X P
p l a t f o r m , t h e n t h e B R E A K c o m m a n d w i l l e n t e r a h a r d c o d e d b r e a k p o i n t
i f b e i n g d e b u g g e d b y a d e b u g g e r .
I f C o m m a n d E x t e n s i o n s a r e e n a b l e d , t h e f o l l o w i n g a d d i t i o n a l
f o r m s o f t h e F O R c o m m a n d a r e s u p p o r t e d :
F O R / D % % v a r i a b l e I N ( s e t ) D O c o m m a n d [ c o m m a n d - p a r a m e t e r s ]
I f s e t c o n t a i n s w i l d c a r d s , t h e n s p e c i f i e s t o m a t c h a g a i n s t d i r e c t o r y
n a m e s i n s t e a d o f f i l e n a m e s .
F O R / R [ [ d r i v e : ] p a t h ] % % v a r i a b l e I N ( s e t ) D O c o m m a n d [ c o m m a n d - p a r a m e t e r s ]
W a l k s t h e d i r e c t o r y t r e e r o o t e d a t [ d r i v e : ] p a t h , e x e c u t i n g t h e F O R
s t a t e m e n t i n e a c h d i r e c t o r y o f t h e t r e e . I f n o d i r e c t o r y
s p e c i f i c a t i o n i s s p e c i f i e d a f t e r / R t h e n t h e c u r r e n t d i r e c t o r y i s
a s s u m e d . I f s e t i s j u s t a s i n g l e p e r i o d ( . ) c h a r a c t e r t h e n i t
w i l l j u s t e n u m e r a t e t h e d i r e c t o r y t r e e .
F O R / L % % v a r i a b l e I N ( s t a r t , s t e p , e n d ) D O c o m m a n d [ c o m m a n d - p a r a m e t e r s ]
T h e s e t i s a s e q u e n c e o f n u m b e r s f r o m s t a r t t o e n d , b y s t e p a m o u n t .
S o ( 1 , 1 , 5 ) w o u l d g e n e r a t e t h e s e q u e n c e 1 2 3 4 5 a n d ( 5 , - 1 , 1 ) w o u l d
g e n e r a t e t h e s e q u e n c e ( 5 4 3 2 1 )
F O R / F [ " o p t i o n s " ] % % v a r i a b l e I N ( f i l e - s e t ) D O c o m m a n d [ c o m m a n d - p a r a m e t e r s ]
F O R / F [ " o p t i o n s " ] % % v a r i a b l e I N ( " s t r i n g " ) D O c o m m a n d [ c o m m a n d - p a r a m e t e r s ]
F O R / F [ " o p t i o n s " ] % % v a r i a b l e I N ( ' c o m m a n d ' ) D O c o m m a n d [ c o m m a n d - p a r a m e t e r s ]
o r , i f u s e b a c k q o p t i o n p r e s e n t :
F O R / F [ " o p t i o n s " ] % % v a r i a b l e I N ( f i l e - s e t ) D O c o m m a n d [ c o m m a n d - p a r a m e t e r s ]
F O R / F [ " o p t i o n s " ] % % v a r i a b l e I N ( ' s t r i n g ' ) D O c o m m a n d [ c o m m a n d - p a r a m e t e r s ]
F O R / F [ " o p t i o n s " ] % % v a r i a b l e I N ( ` c o m m a n d ` ) D O c o m m a n d [ c o m m a n d - p a r a m e t e r s ]
f i l e n a m e s e t i s o n e o r m o r e f i l e n a m e s . E a c h f i l e i s o p e n e d , r e a d
a n d p r o c e s s e d b e f o r e g o i n g o n t o t h e n e x t f i l e i n f i l e n a m e s e t .
P r o c e s s i n g c o n s i s t s o f r e a d i n g i n t h e f i l e , b r e a k i n g i t u p i n t o
i n d i v i d u a l l i n e s o f t e x t a n d t h e n p a r s i n g e a c h l i n e i n t o z e r o o r
m o r e t o k e n s . T h e b o d y o f t h e f o r l o o p i s t h e n c a l l e d w i t h t h e
v a r i a b l e v a l u e ( s ) s e t t o t h e f o u n d t o k e n s t r i n g ( s ) . B y d e f a u l t , / F
p a s s e s t h e f i r s t b l a n k s e p a r a t e d t o k e n f r o m e a c h l i n e o f e a c h f i l e .
B l a n k l i n e s a r e s k i p p e d . Y o u c a n o v e r r i d e t h e d e f a u l t p a r s i n g
b e h a v i o r b y s p e c i f y i n g t h e o p t i o n a l " o p t i o n s " p a r a m e t e r . T h i s
i s a q u o t e d s t r i n g w h i c h c o n t a i n s o n e o r m o r e k e y w o r d s t o s p e c i f y
d i f f e r e n t p a r s i n g o p t i o n s . T h e k e y w o r d s a r e :
e o l = c - s p e c i f i e s a n e n d o f l i n e c o m m e n t c h a r a c t e r
( j u s t o n e )
s k i p = n - s p e c i f i e s t h e n u m b e r o f l i n e s t o s k i p a t t h e
b e g i n n i n g o f t h e f i l e .
d e l i m s = x x x - s p e c i f i e s a d e l i m i t e r s e t . T h i s r e p l a c e s t h e
d e f a u l t d e l i m i t e r s e t o f s p a c e a n d t a b .
t o k e n s = x , y , m - n - s p e c i f i e s w h i c h t o k e n s f r o m e a c h l i n e a r e t o
b e p a s s e d t o t h e f o r b o d y f o r e a c h i t e r a t i o n .
T h i s w i l l c a u s e a d d i t i o n a l v a r i a b l e n a m e s t o
b e a l l o c a t e d . T h e m - n f o r m i s a r a n g e ,
s p e c i f y i n g t h e m t h t h r o u g h t h e n t h t o k e n s . I f
t h e l a s t c h a r a c t e r i n t h e t o k e n s = s t r i n g i s a n
a s t e r i s k , t h e n a n a d d i t i o n a l v a r i a b l e i s
a l l o c a t e d a n d r e c e i v e s t h e r e m a i n i n g t e x t o n
t h e l i n e a f t e r t h e l a s t t o k e n p a r s e d .
u s e b a c k q - s p e c i f i e s t h a t t h e n e w s e m a n t i c s a r e i n f o r c e ,
w h e r e a b a c k q u o t e d s t r i n g i s e x e c u t e d a s a
c o m m a n d a n d a s i n g l e q u o t e d s t r i n g i s a
l i t e r a l s t r i n g c o m m a n d a n d a l l o w s t h e u s e o f
d o u b l e q u o t e s t o q u o t e f i l e n a m e s i n
f i l e n a m e s e t .
S o m e e x a m p l e s m i g h t h e l p :
F O R / F " e o l = ; t o k e n s = 2 , 3 * d e l i m s = , " % % i i n ( m y f i l e . t x t ) d o @ e c h o % % i % % j % % k
w o u l d p a r s e e a c h l i n e i n m y f i l e . t x t , i g n o r i n g l i n e s t h a t b e g i n w i t h
a s e m i c o l o n , p a s s i n g t h e 2 n d a n d 3 r d t o k e n f r o m e a c h l i n e t o t h e f o r
b o d y , w i t h t o k e n s d e l i m i t e d b y c o m m a s a n d / o r s p a c e s . N o t i c e t h e f o r
b o d y s t a t e m e n t s r e f e r e n c e % % i t o g e t t h e 2 n d t o k e n , % % j t o g e t t h e
3 r d t o k e n , a n d % % k t o g e t a l l r e m a i n i n g t o k e n s a f t e r t h e 3 r d . F o r
f i l e n a m e s t h a t c o n t a i n s p a c e s , y o u n e e d t o q u o t e t h e f i l e n a m e s w i t h
d o u b l e q u o t e s . I n o r d e r t o u s e d o u b l e q u o t e s i n t h i s m a n n e r , y o u a l s o
n e e d t o u s e t h e u s e b a c k q o p t i o n , o t h e r w i s e t h e d o u b l e q u o t e s w i l l b e
i n t e r p r e t e d a s d e f i n i n g a l i t e r a l s t r i n g t o p a r s e .
% % i i s e x p l i c i t l y d e c l a r e d i n t h e f o r s t a t e m e n t a n d t h e % % j a n d % % k
a r e i m p l i c i t l y d e c l a r e d v i a t h e t o k e n s = o p t i o n . Y o u c a n s p e c i f y u p
t o 2 6 t o k e n s v i a t h e t o k e n s = l i n e , p r o v i d e d i t d o e s n o t c a u s e a n
a t t e m p t t o d e c l a r e a v a r i a b l e h i g h e r t h a n t h e l e t t e r ' z ' o r ' Z ' .
R e m e m b e r , F O R v a r i a b l e s a r e s i n g l e - l e t t e r , c a s e s e n s i t i v e , g l o b a l ,
a n d y o u c a n ' t h a v e m o r e t h a n 5 2 t o t a l a c t i v e a t a n y o n e t i m e .
Y o u c a n a l s o u s e t h e F O R / F p a r s i n g l o g i c o n a n i m m e d i a t e s t r i n g , b y
m a k i n g t h e f i l e n a m e s e t b e t w e e n t h e p a r e n t h e s i s a q u o t e d s t r i n g ,
u s i n g s i n g l e q u o t e c h a r a c t e r s . I t w i l l b e t r e a t e d a s a s i n g l e l i n e
o f i n p u t f r o m a f i l e a n d p a r s e d .
F i n a l l y , y o u c a n u s e t h e F O R / F c o m m a n d t o p a r s e t h e o u t p u t o f a
c o m m a n d . Y o u d o t h i s b y m a k i n g t h e f i l e n a m e s e t b e t w e e n t h e
p a r e n t h e s i s a b a c k q u o t e d s t r i n g . I t w i l l b e t r e a t e d a s a c o m m a n d
l i n e , w h i c h i s p a s s e d t o a c h i l d C M D . E X E a n d t h e o u t p u t i s c a p t u r e d
i n t o m e m o r y a n d p a r s e d a s i f i t w a s a f i l e . S o t h e f o l l o w i n g
e x a m p l e :
F O R / F " u s e b a c k q d e l i m s = = " % % i I N ( ` s e t ` ) D O @ e c h o % % i
w o u l d e n u m e r a t e t h e e n v i r o n m e n t v a r i a b l e n a m e s i n t h e c u r r e n t
e n v i r o n m e n t .
I n a d d i t i o n , s u b s t i t u t i o n o f F O R v a r i a b l e r e f e r e n c e s h a s b e e n e n h a n c e d .
Y o u c a n n o w u s e t h e f o l l o w i n g o p t i o n a l s y n t a x :
% % ~ I - e x p a n d s % % I r e m o v i n g a n y s u r r o u n d i n g q u o t e s ( " )
% % ~ f I - e x p a n d s % % I t o a f u l l y q u a l i f i e d p a t h n a m e
% % ~ d I - e x p a n d s % % I t o a d r i v e l e t t e r o n l y
% % ~ p I - e x p a n d s % % I t o a p a t h o n l y
% % ~ n I - e x p a n d s % % I t o a f i l e n a m e o n l y
% % ~ x I - e x p a n d s % % I t o a f i l e e x t e n s i o n o n l y
% % ~ s I - e x p a n d e d p a t h c o n t a i n s s h o r t n a m e s o n l y
% % ~ a I - e x p a n d s % % I t o f i l e a t t r i b u t e s o f f i l e
% % ~ t I - e x p a n d s % % I t o d a t e / t i m e o f f i l e
% % ~ z I - e x p a n d s % % I t o s i z e o f f i l e
% % ~ $ P A T H : I - s e a r c h e s t h e d i r e c t o r i e s l i s t e d i n t h e P A T H
e n v i r o n m e n t v a r i a b l e a n d e x p a n d s % % I t o t h e
f u l l y q u a l i f i e d n a m e o f t h e f i r s t o n e f o u n d .
I f t h e e n v i r o n m e n t v a r i a b l e n a m e i s n o t
d e f i n e d o r t h e f i l e i s n o t f o u n d b y t h e
s e a r c h , t h e n t h i s m o d i f i e r e x p a n d s t o t h e
e m p t y s t r i n g
T h e m o d i f i e r s c a n b e c o m b i n e d t o g e t c o m p o u n d r e s u l t s :
% % ~ d p I - e x p a n d s % % I t o a d r i v e l e t t e r a n d p a t h o n l y
% % ~ n x I - e x p a n d s % % I t o a f i l e n a m e a n d e x t e n s i o n o n l y
% % ~ f s I - e x p a n d s % % I t o a f u l l p a t h n a m e w i t h s h o r t n a m e s o n l y
% % ~ d p $ P A T H : I - s e a r c h e s t h e d i r e c t o r i e s l i s t e d i n t h e P A T H
e n v i r o n m e n t v a r i a b l e f o r % % I a n d e x p a n d s t o t h e
d r i v e l e t t e r a n d p a t h o f t h e f i r s t o n e f o u n d .
% % ~ f t z a I - e x p a n d s % % I t o a D I R l i k e o u t p u t l i n e
I n t h e a b o v e e x a m p l e s % % I a n d P A T H c a n b e r e p l a c e d b y o t h e r v a l i d
v a l u e s . T h e % % ~ s y n t a x i s t e r m i n a t e d b y a v a l i d F O R v a r i a b l e n a m e .
P i c k i n g u p p e r c a s e v a r i a b l e n a m e s l i k e % % I m a k e s i t m o r e r e a d a b l e a n d
a v o i d s c o n f u s i o n w i t h t h e m o d i f i e r s , w h i c h a r e n o t c a s e s e n s i t i v e .
I f C o m m a n d E x t e n s i o n s a r e e n a b l e d I F c h a n g e s a s f o l l o w s :
I F [ / I ] s t r i n g 1 c o m p a r e - o p s t r i n g 2 c o m m a n d
I F C M D E X T V E R S I O N n u m b e r c o m m a n d
I F D E F I N E D v a r i a b l e c o m m a n d
w h e r e c o m p a r e - o p m a y b e o n e o f :
E Q U - e q u a l
N E Q - n o t e q u a l
L S S - l e s s t h a n
L E Q - l e s s t h a n o r e q u a l
G T R - g r e a t e r t h a n
G E Q - g r e a t e r t h a n o r e q u a l
a n d t h e / I s w i t c h , i f s p e c i f i e d , s a y s t o d o c a s e i n s e n s i t i v e s t r i n g
c o m p a r e s . T h e / I s w i t c h c a n a l s o b e u s e d o n t h e s t r i n g 1 = = s t r i n g 2 f o r m
o f I F . T h e s e c o m p a r i s o n s a r e g e n e r i c , i n t h a t i f b o t h s t r i n g 1 a n d
s t r i n g 2 a r e b o t h c o m p r i s e d o f a l l n u m e r i c d i g i t s , t h e n t h e s t r i n g s a r e
c o n v e r t e d t o n u m b e r s a n d a n u m e r i c c o m p a r i s o n i s p e r f o r m e d .
T h e C M D E X T V E R S I O N c o n d i t i o n a l w o r k s j u s t l i k e E R R O R L E V E L , e x c e p t i t i s
c o m p a r i n g a g a i n s t a n i n t e r n a l v e r s i o n n u m b e r a s s o c i a t e d w i t h t h e C o m m a n d
E x t e n s i o n s . T h e f i r s t v e r s i o n i s 1 . I t w i l l b e i n c r e m e n t e d b y o n e w h e n
s i g n i f i c a n t e n h a n c e m e n t s a r e a d d e d t o t h e C o m m a n d E x t e n s i o n s .
C M D E X T V E R S I O N c o n d i t i o n a l i s n e v e r t r u e w h e n C o m m a n d E x t e n s i o n s a r e
d i s a b l e d .
T h e D E F I N E D c o n d i t i o n a l w o r k s j u s t l i k e E X I S T S e x c e p t i t t a k e s a n
e n v i r o n m e n t v a r i a b l e n a m e a n d r e t u r n s t r u e i f t h e e n v i r o n m e n t v a r i a b l e
i s d e f i n e d .
% % E R R O R L E V E L % % w i l l e x p a n d i n t o a s t r i n g r e p r e s e n t a t i o n o f
t h e c u r r e n t v a l u e o f E R R O R L E V E L , p r o v i d e d t h a t t h e r e i s n o t a l r e a d y
a n e n v i r o n m e n t v a r i a b l e w i t h t h e n a m e E R R O R L E V E L , i n w h i c h c a s e y o u
w i l l g e t i t s v a l u e i n s t e a d . A f t e r r u n n i n g a p r o g r a m , t h e f o l l o w i n g
i l l u s t r a t e s E R R O R L E V E L u s e :
g o t o a n s w e r % % E R R O R L E V E L % %
: a n s w e r 0
e c h o P r o g r a m h a d r e t u r n c o d e 0
: a n s w e r 1
e c h o P r o g r a m h a d r e t u r n c o d e 1
Y o u c a n a l s o u s i n g t h e n u m e r i c a l c o m p a r i s o n s a b o v e :
I F % % E R R O R L E V E L % % L E Q 1 g o t o o k a y
% % C M D C M D L I N E % % w i l l e x p a n d i n t o t h e o r i g i n a l c o m m a n d l i n e p a s s e d t o
C M D . E X E p r i o r t o a n y p r o c e s s i n g b y C M D . E X E , p r o v i d e d t h a t t h e r e i s n o t
a l r e a d y a n e n v i r o n m e n t v a r i a b l e w i t h t h e n a m e C M D C M D L I N E , i n w h i c h c a s e
y o u w i l l g e t i t s v a l u e i n s t e a d .
% % C M D E X T V E R S I O N % % w i l l e x p a n d i n t o a s t r i n g r e p r e s e n t a t i o n o f t h e
c u r r e n t v a l u e o f C M D E X T V E R S I O N , p r o v i d e d t h a t t h e r e i s n o t a l r e a d y
a n e n v i r o n m e n t v a r i a b l e w i t h t h e n a m e C M D E X T V E R S I O N , i n w h i c h c a s e y o u
w i l l g e t i t s v a l u e i n s t e a d .
E n a b l e s o r d i s a b l e s c o m m a n d l i n e e d i t i n g o n D O S s y s t e m
T h i s i s p r e s e n t f o r C o m p a t i b i l i t y w i t h D O S s y s t e m s . I t h a s n o e f f e c t
u n d e r W i n d o w s X P , a s c o m m a n d l i n e e d i t i n g i s a l w a y s e n a b l e d .
C M D . E X E w a s s t a r t e d w i t h t h e a b o v e p a t h a s t h e c u r r e n t d i r e c t o r y .
U N C p a t h s a r e n o t s u p p o r t e d . D e f a u l t i n g t o W i n d o w s d i r e c t o r y .
C M D d o e s n o t s u p p o r t U N C p a t h s a s c u r r e n t d i r e c t o r i e s .
U N C p a t h s n o t s u p p o r t e d f o r c u r r e n t d i r e c t o r y . U s i n g
P U S H D % 1
t o c r e a t e t e m p o r a r y d r i v e l e t t e r t o s u p p o r t U N C c u r r e n t
d i r e c t o r y . U s e P O P D o r E X I T t o d e l e t e t e m p o r a r y d r i v e
l e t t e r .
I n v a l i d p a r a m e t e r t o S H I F T c o m m a n d
U n b a l a n c e d p a r e n t h e s i s .
M i s s i n g o p e r a n d .
M i s s i n g o p e r a t o r .
I n v a l i d n u m b e r . N u m e r i c c o n s t a n t s a r e e i t h e r d e c i m a l ( 1 7 ) ,
h e x a d e c i m a l ( 0 x 1 1 ) , o r o c t a l ( 0 2 1 ) .
I n v a l i d n u m b e r . N u m b e r s a r e l i m i t e d t o 3 2 - b i t s o f p r e c i s i o n .
D i v i d e b y z e r o e r r o r .
T h e C O M S P E C e n v i r o n m e n t v a r i a b l e d o e s n o t p o i n t t o C M D . E X E .
O v e r w r i t e % 1 ? ( Y e s / N o / A l l ) : % 0
< J U N C T I O N > % 0
T h e d i r e c t o r y n a m e % 1 \ % 2 i s t o o l o n g .
T h e f u l l p a t h o f % 1 i s t o o l o n g .
T h e p a t h % 1 \ % 2 i s t o o l o n g .
U n a b l e t o f i n d l i b r a r y % 1 .
C a n n o t f i n d f u n c t i o n % 1 ! S ! : % 2 ! S ! .
C a n n o t f i n d o r d i n a l % 1 ! S ! : % 2 ! d ! .
F i l e N o t F o u n d
C o u l d N o t F i n d % 1
T h e F A T F i l e S y s t e m o n l y s u p p o r t L a s t W r i t e T i m e s
B e g i n s l o c a l i z a t i o n o f e n v i r o n m e n t c h a n g e s i n a b a t c h f i l e . E n v i r o n m e n t
c h a n g e s m a d e a f t e r S E T L O C A L h a s b e e n i s s u e d a r e l o c a l t o t h e b a t c h f i l e .
E N D L O C A L m u s t b e i s s u e d t o r e s t o r e t h e p r e v i o u s s e t t i n g s . W h e n t h e e n d
o f a b a t c h s c r i p t i s r e a c h e d , a n i m p l i e d E N D L O C A L i s e x e c u t e d f o r a n y
o u t s t a n d i n g S E T L O C A L c o m m a n d s i s s u e d b y t h a t b a t c h s c r i p t .
S E T L O C A L
E n d s l o c a l i z a t i o n o f e n v i r o n m e n t c h a n g e s i n a b a t c h f i l e .
E n v i r o n m e n t c h a n g e s m a d e a f t e r E N D L O C A L h a s b e e n i s s u e d a r e
n o t l o c a l t o t h e b a t c h f i l e ; t h e p r e v i o u s s e t t i n g s a r e n o t
r e s t o r e d o n t e r m i n a t i o n o f t h e b a t c h f i l e .
E N D L O C A L
S e t s t h e w i n d o w t i t l e f o r t h e c o m m a n d p r o m p t w i n d o w .
T I T L E [ s t r i n g ]
s t r i n g S p e c i f i e s t h e t i t l e f o r t h e c o m m a n d p r o m p t w i n d o w .
A l l o w s p r o g r a m s t o o p e n d a t a f i l e s i n s p e c i f i e d d i r e c t o r i e s a s i f t h e y w e r e
i n t h e c u r r e n t d i r e c t o r y .
A P P E N D [ [ d r i v e : ] p a t h [ ; . . . ] ] [ / X [ : O N | : O F F ] ] [ / P A T H : O N | / P A T H : O F F ] [ / E ]
A P P E N D ;
[ d r i v e : ] p a t h S p e c i f i e s a d r i v e a n d d i r e c t o r y t o a p p e n d .
/ X : O N A p p l i e s a p p e n d e d d i r e c t o r i e s t o f i l e s e a r c h e s a n d
a p p l i c a t i o n e x e c u t i o n .
/ X : O F F A p p l i e s a p p e n d e d d i r e c t o r i e s o n l y t o r e q u e s t s t o o p e n f i l e s .
/ X : O F F i s t h e d e f a u l t s e t t i n g .
/ P A T H : O N A p p l i e s t h e a p p e n d e d d i r e c t o r i e s t o f i l e r e q u e s t s t h a t a l r e a d y
s p e c i f y a p a t h . / P A T H : O N i s t h e d e f a u l t s e t t i n g .
/ P A T H : O F F T u r n s o f f t h e e f f e c t o f / P A T H : O N .
/ E S t o r e s a c o p y o f t h e a p p e n d e d d i r e c t o r y l i s t i n a n e n v i r o n m e n t
v a r i a b l e n a m e d A P P E N D . / E m a y b e u s e d o n l y t h e f i r s t t i m e
y o u u s e A P P E N D a f t e r s t a r t i n g u p y o u r s y s t e m .
T y p e A P P E N D ; t o c l e a r t h e a p p e n d e d d i r e c t o r y l i s t .
T y p e A P P E N D w i t h o u t p a r a m e t e r s t o d i s p l a y t h e a p p e n d e d d i r e c t o r y l i s t .
M o v e s f i l e s a n d r e n a m e s f i l e s a n d d i r e c t o r i e s .
T o m o v e o n e o r m o r e f i l e s :
M O V E [ / Y | / - Y ] [ d r i v e : ] [ p a t h ] f i l e n a m e 1 [ , . . . ] d e s t i n a t i o n
T o r e n a m e a d i r e c t o r y :
M O V E [ / Y | / - Y ] [ d r i v e : ] [ p a t h ] d i r n a m e 1 d i r n a m e 2
[ d r i v e : ] [ p a t h ] f i l e n a m e 1 S p e c i f i e s t h e l o c a t i o n a n d n a m e o f t h e f i l e
o r f i l e s y o u w a n t t o m o v e .
d e s t i n a t i o n S p e c i f i e s t h e n e w l o c a t i o n o f t h e f i l e . D e s t i n a t i o n
c a n c o n s i s t o f a d r i v e l e t t e r a n d c o l o n , a
d i r e c t o r y n a m e , o r a c o m b i n a t i o n . I f y o u a r e m o v i n g
o n l y o n e f i l e , y o u c a n a l s o i n c l u d e a f i l e n a m e i f
y o u w a n t t o r e n a m e t h e f i l e w h e n y o u m o v e i t .
[ d r i v e : ] [ p a t h ] d i r n a m e 1 S p e c i f i e s t h e d i r e c t o r y y o u w a n t t o r e n a m e .
d i r n a m e 2 S p e c i f i e s t h e n e w n a m e o f t h e d i r e c t o r y .
/ Y S u p p r e s s e s p r o m p t i n g t o c o n f i r m y o u w a n t t o
o v e r w r i t e a n e x i s t i n g d e s t i n a t i o n f i l e .
/ - Y C a u s e s p r o m p t i n g t o c o n f i r m y o u w a n t t o o v e r w r i t e
a n e x i s t i n g d e s t i n a t i o n f i l e .
T h e s w i t c h / Y m a y b e p r e s e n t i n t h e C O P Y C M D e n v i r o n m e n t v a r i a b l e .
T h i s m a y b e o v e r r i d d e n w i t h / - Y o n t h e c o m m a n d l i n e . D e f a u l t i s
t o p r o m p t o n o v e r w r i t e s u n l e s s M O V E c o m m a n d i s b e i n g e x e c u t e d f r o m
w i t h i n a b a t c h s c r i p t .
S t o r e s t h e c u r r e n t d i r e c t o r y f o r u s e b y t h e P O P D c o m m a n d , t h e n
c h a n g e s t o t h e s p e c i f i e d d i r e c t o r y .
P U S H D [ p a t h | . . ]
p a t h S p e c i f i e s t h e d i r e c t o r y t o m a k e t h e c u r r e n t d i r e c t o r y .
C h a n g e s t o t h e d i r e c t o r y s t o r e d b y t h e P U S H D c o m m a n d .
% 1 - % 0
M a x i m u m s e t l o c a l r e c u r s i o n l e v e l r e a c h e d .
E n t e r t h e n e w d a t e : ( y y - m m - d d ) % 0
E n t e r t h e n e w d a t e : ( d d - m m - y y ) % 0
E R R O R V e r i f y - % 1
C a n n o t m o v e m u l t i p l e f i l e s t o a s i n g l e f i l e .
T h e h a n d l e c o u l d n o t b e o p e n e d
d u r i n g r e d i r e c t i o n o f h a n d l e % 1 .
% r % 1 % % c o p i e d % 0
S e t s t h e d e f a u l t c o n s o l e f o r e g r o u n d a n d b a c k g r o u n d c o l o r s .
C O L O R [ a t t r ]
a t t r S p e c i f i e s c o l o r a t t r i b u t e o f c o n s o l e o u t p u t
C o l o r a t t r i b u t e s a r e s p e c i f i e d b y T W O h e x d i g i t s - - t h e f i r s t
c o r r e s p o n d s t o t h e b a c k g r o u n d ; t h e s e c o n d t h e f o r e g r o u n d . E a c h d i g i t
c a n b e a n y o f t h e f o l l o w i n g v a l u e s :
0 = B l a c k 8 = G r a y
1 = B l u e 9 = L i g h t B l u e
2 = G r e e n A = L i g h t G r e e n
3 = A q u a B = L i g h t A q u a
4 = R e d C = L i g h t R e d
5 = P u r p l e D = L i g h t P u r p l e
6 = Y e l l o w E = L i g h t Y e l l o w
7 = W h i t e F = B r i g h t W h i t e
I f n o a r g u m e n t i s g i v e n , t h i s c o m m a n d r e s t o r e s t h e c o l o r t o w h a t i t w a s
w h e n C M D . E X E s t a r t e d . T h i s v a l u e e i t h e r c o m e s f r o m t h e c u r r e n t c o n s o l e
w i n d o w , t h e / T c o m m a n d l i n e s w i t c h o r f r o m t h e D e f a u l t C o l o r r e g i s t r y
v a l u e .
T h e C O L O R c o m m a n d s e t s E R R O R L E V E L t o 1 i f a n a t t e m p t i s m a d e t o e x e c u t e
t h e C O L O R c o m m a n d w i t h a f o r e g r o u n d a n d b a c k g r o u n d c o l o r t h a t a r e t h e
E x a m p l e : " C O L O R f c " p r o d u c e s l i g h t r e d o n b r i g h t w h i t e
M a x i m u m p a t h l e n g t h e x c e e d e d - % 1
* * * * * * B A T C H R E C U R S I O N e x c e e d s S T A C K l i m i t s * * * * * *
R e c u r s i o n C o u n t = % 1 ! d ! , S t a c k U s a g e = % 2 ! d ! p e r c e n t
* * * * * * B A T C H P R O C E S S I N G I S A B O R T E D * * * * * *
T h e r e a r e t o o m a n y d i r e c t o r i e s a l r e a d y i n t h e P U S H D s t a c k .
T h e c o m m a n d p r o m p t h a s b e e n d i s a b l e d b y y o u r a d m i n i s t r a t o r .
Hosts
| IP |
|---|
| 114.114.114.114 |
| 8.8.8.8 |
DNS
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| dns.msftncsi.com |
A 131.107.255.255
A 131.107.255.255 |
131.107.255.255 |
| dns.msftncsi.com | AAAA fd3e:4f5a:5b81::1 | 131.107.255.255 |
TCP
No TCP connections recorded.
UDP
| Source | Source Port | Destination | Destination Port |
|---|---|---|---|
| 192.168.56.101 | 53179 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 49642 | 224.0.0.252 | 5355 |
| 192.168.56.101 | 137 | 192.168.56.255 | 137 |
| 192.168.56.101 | 61714 | 114.114.114.114 | 53 |
| 192.168.56.101 | 61714 | 8.8.8.8 | 53 |
| 192.168.56.101 | 56933 | 8.8.8.8 | 53 |
| 192.168.56.101 | 138 | 192.168.56.255 | 138 |
| 192.168.56.101 | 58485 | 114.114.114.114 | 53 |
| 192.168.56.101 | 57665 | 114.114.114.114 | 53 |
HTTP & HTTPS Requests
No HTTP requests performed.
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts
Sorry! No dropped files.
Sorry! No dropped buffers.