this program written especially for command line and bat-script fans, it's allows you to control you windows machine without GUI components. btw, word "ws" means shortened "windows" i have tried to maintain compatibility with windows 95,98,NT,2k... it was not simple! examples of commands usage: zip0 zip 0 disable ZipMagic zip1 zip 1 enable ZipMagic, loads all drivers and services, if necessary list show process list when you're on windows nt, you'll get many interesting details about running processes - owner username and domain, parent process, starting time, priority. on windows 9x not so many info. list res special for windows nt - show RAM and pagefile usage, number of handles and threads, time spent in user and kernel mode list dlls list processes and loaded libraries list dlls myprog.exe list DLLs loaded to myprog.exe (must be running) list vars cmd.exe display global variables for cmd.exe and its environment block list map ws.exe display memory map of specified process. on windows nt filenames of memory mapped files will be also displayed list drivers shows loaded drivers (only on windows NT/2k) kill myprog.exe tries to terminate process myprog.exe you may shorten name some, ex: kill my will kill myprog.exe, my.exe, myxxx.exe and so on... win nt warning: if you have local admin privileges, you can terminate ANY process, so be careful, don't stop base services, like winlogon - NT may crash kd kill ntvdm.exe (to stop all virtual DOS machines) ke kill explorer.exe (if you loaded it by mistake ;-) kill 0x11C kill 284 terminate process, if you know its identifier in hex or decimal form, or have two processes with same name but want to kill only one char display character map (left - OEM, right - ANSI) color display console color map mode show current display mode mode 640 480 set display resolution to 640x480. if second parameter not given, then program tries to autodetect mode 800 600 32 set true-color mode mode 800 600 16 75 set resolution 800x600, hi-color and monitor frequency to 75 hz mode -permanent 800 save settings to registry. if you don't use flags -permanent, settings will be lost after reboot. mode -test 1280 1024 32 120 test this mode, if you monitor not worked before in it switching video modes in windows 9x does not seem to work in fullscreen console box - press alt+enter before using. net view display local area network resources (not tested much) sysreboot 300 windows nt/2k only! reboot this machine after 5 minutes (300 seconds) you don't need any administrator rights, nobody can't initiate new reboot, before this active; so you can do sysreboot 36000 (it's 10 hours) and administrator can't reboot you remotely (of curse, he can abort you long reboot and send his own, for 1 second - but he must know that you're already rebooting, heh) sysreboot 60 \\wserver1 "time to sleep!" reboot windows machine "wserver1" after 1 minute and display message. to do this, you have to be domain administrator :-( sysdown 0 sysdown is ending windows session same as reboot, but it does not reboot machine. this command shuts down computer immediately sysabort abort remote reboot or shutdown on current machine. you don't have any admin privileges (fuckoff, admins!)!!! sysabort \\workstation12 abort remote reboot or shutdown on workstation12. you have to be admin on domain logoff logs off current user. if any program do not terminate, wait for it logoff force log off with immediately terminating all running programs poweroff reboot shutdown same as logoff, but doing appropriate action, flag force also may be specified cd display info about disk in CD-ROM. looks to cdplayer.ini in the %WINDIR% directory to get disk & tracks names cd play play CD-Audio cd play 1 plays from 1st track cd play 6:05:12 plays from 6th track, 5th minute, 12th second cd pause pause audio cd cd resume resume after pause cd stop stop audio cd cd open cd eject eject disk cd close cd load load disk into drive cd driveinfo a lot information about cd-rom cd speed 20 set maximum cd-rom speed to 20x (approx. 3,5 Mb/s) annoying noise of high-speed drives disappears ;-) cd speed 99 restore maximum speed for all cd-rom commands you may specify drive letter: cd d: eject eject disk on cd-rom drive D: info cpu display info about CPU (need pentium or higher) if you have AMD processor, info about internal cache, 3DNow! status and cpu description will be displayed also program will try do detect clock speed info memory display used and free memory sizes info snd display volume settings for aux,midi,wave info sndtree display sound mixer tree with controls IDs and current and accepted values for each control. they can be used in 'volume' command info video list windows supported video modes. 9x note: can't be in text fullscreen info ddraw list DirectDraw supported video modes info ide identify IDE ATA/ATAPI devices. show model, revision, serial number, physical geometry and device flags info ide caps more info about IDE devices: supported I/O modes, timings and cache info info part info partitions show partition tables on all fixed drives (nt only) info cd list cd-roms and display their capabilities (9x: drive letters may be wrong) (9x: finds only ATAPI cd-roms) winamp display Winamp version, status, song name, position, bitrate, etc... winamp list show winamp playlist. current song is highlighted winamp volume nn set volume, nn is a volume in percents (0<=nn<=100) winamp play 4 play from track 4 winamp play winamp stop winamp prev winamp next winamp pause same as main winamp buttons winamp clear clear playlist winamp restart start playing from top of playlist winamp fadeout smooth stop winamp last finish playing current song and stop winamp file GLITCH3.S3M add file to playlist you may use directory name or several names in one command: winamp file Scienide.wav C:\MUSIC add Scienide.wav and all supported files in c:\music to playlist winamp file . add all files in current directory to playlist winamp playfile fan2.mod add file to playlist and play it winamp close unload winamp. use this command instead of "kill winamp" - winamp'll save settings and playlist and exits correctly monitor poweroff turn off monitor (not all monitors support full power off) monitor doze monitor standby switch monitor to standby mode monitor suspend switch monitor to suspend mode monitor on switch monitor on (also may press key or move mouse) volume display master volume setting volume wave=50 set volume of waveout to 50% volume wave1=20 set volume of waveout channel 1 to 20% volume midi=50 set volume of midiout to 50% volume midi1=20 set volume of midiout channel 1 to 20% volume =value control ID can be taken from 'info snd' command examples: volume 0=65535 set control 0 (master volume control) to 65535 (maximum value) volume 1=1 mute master output on volume 1=0 mute master output off it's possible to set multiple controls in one command: volume midi2=40 midi1=50 wave=100 1C=0 or vol midi2=40 midi1=50 wave=100 1C=0 regdump save registry files (user.dat and system.dat for 9x; and default, ntuser.dat, sam, security, software, system for nt) to current directory (in defragmented form). to use this defragmented files, boot to DOS and place them to their original locations. it's also possible to restore .reg from this dump (use FileScanner) on windows nt this requires read access to whole registry child -d:WinSta0\Default winlogon.exe cmd.exe child -d winlogon.exe cmd.exe start cmd.exe as child process of winlogon. cmd.exe will receive system privileges. if you don't specify '-d', process will be started on invisible desktop (that used internally by winlogon) child -u winlogon.exe cmd.exe use alternative method for starting cmd (safer) service list show all registered services service \\lanserv1 Username * list show services on \\lanserv1 (query password first) service list -r -w32 show running win32 services service list -p * show details about paused services services list ntice show details about specified service service start myservice service stop myservice service pause myservice service continue myservice control service 'myservice' errcode 0x40 errcode 64 display message for win32 error code errcode nt:0x80000010 display message for NTSTATUS code dump -s hh.exe save all data of CHM-viewer to get uncompressed HTML document (find and extract "" in any text editor) dump -r -i -s test.exe save all data of test.exe (cut from "MZ" and process with any PE-rebuilder) copy -k file1 file2 copy file1 to file2, interrupt on keypress copy file0 file1 file2 file3 result concatenate files copy zero swapfile wipe free space copy rnd swapfile wipe free space (more secure, but slower) copy btc bootsect.nt backup boot sector copy bootsect.nt btc restore boot sector (be very careful!) copy -max=4194304 c: diskc.img backup boot sector, FATs and root directory of disk C: info disk info about all logical disks info disk a: c: info about disks a: and c: sync flush all write buffers sync e: flush write buffers on fixed disk e: - - - - - - - - - - - - - - - Whatsnew - - - - - - - - - - - - - - - legends: * updated + added - removed ! bugfixed @ known bug version 1.62 * more info on 'info ide' - added up to ATA-5 specifications + 'cd driveinfo' + 'info cd' + 'cd speed' 9x: drive letters may be wrong, and drive must be in idle state nt: able to change speed even if drive is performing some operations i've wrote cd_speed just because there is no such programs for NT/2k (i've seen cd_speed only for 9x), and my version does not require Adaptec's ASPI driver (or any other special driver) @ CD-ROM/HDD commands are very unstable in 9x. try give command several times or wait while drive be idle * 'list map' - shows which dlls were relocated ! 'list' now uses OEM codepage to show process owner/domain + 'copy' + 'info disk' + 'sync' version 1.63 ! now works on early (build < 1000) versions of windows 95