rk2n1.exe - AT.EXE - Schedule service command line interface

info
MZ
PE
resources
imports
foremost
version info
hexdump
disasm
log
discuss
donate

filename	rk2n1.exe
size	86016 (0x15000)
md5	7a796f23eefc86305c0840df03960b19

type	PE32 executable (GUI) Intel 80386, for MS Windows
mimetype	application/x-dosexec

clamav	OK
virustotal	→ scan with virustotal.com

histogram

MZ Header

signature	MZ
bytes_in_last_block	0x90
blocks_in_file	3
num_relocs	0
header_paragraphs	4
min_extra_paragraphs	0
max_extra_paragraphs	0xffff
ss	0
sp	0xb8
checksum	0
ip	0
cs	0
reloc_table_offset	0x40
overlay_number	0
reserved0	0
oem_id	0
oem_info	0
reserved2	0
reserved3	0
reserved4	0
reserved5	0
reserved6	0
lfanew	0xd8

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|
00000040: ea 49 d6 03 ae 28 b8 50  ae 28 b8 50 ae 28 b8 50  |.I...(.P.(.P.(.P|
00000050: f7 0b ab 50 b1 28 b8 50  f7 0b a8 50 2f 28 b8 50  |...P.(.P...P/(.P|
00000060: ae 28 b9 50 1f 2b b8 50  f7 0b af 50 d5 28 b8 50  |.(.P.+.P...P.(.P|
00000070: 89 ee c4 50 91 28 b8 50  52 69 63 68 ae 28 b8 50  |...P.(.PRich.(.P|
00000080: 52 69 63 68 2b 0d fe 0c  00 00 00 00 00 00 00 00  |Rich+...........|
00000090: 00 00 00 00 00 00 00 00                           |........        |

PE Header

Signature	PE
Machine	0x14c
NumberOfSections	4
TimeDateStamp	0x548ebf3f
PointerToSymbolTable	0
NumberOfSymbols	0
SizeOfOptionalHeader	0xe0
Characteristics	0x12f
Magic	0x10b
LinkerVersion	6.0
SizeOfCode	0xb000
SizeOfInitializedData	0xb000
SizeOfUninitializedData	0
AddressOfEntryPoint	0x6760
BaseOfCode	0x1000
BaseOfData	0xc000
ImageBase	0x400000
SectionAlignment	0x1000
FileAlignment	0x1000
OperatingSystemVersion	4.0
ImageVersion	0.0
SubsystemVersion	4.0
Reserved1	0
SizeOfImage	0x17000
SizeOfHeaders	0x1000
CheckSum	0x73d9904d
Subsystem	2
DllCharacteristics	0
SizeOfStackReserve	0x100000
SizeOfStackCommit	0x1000
SizeOfHeapReserve	0x100000
SizeOfHeapCommit	0x1000
LoaderFlags	0
NumberOfRvaAndSizes	0x10

Packer / Compiler

MASM/TASM - sig1(h)

Sections

name	va	vsize	raw size	flags
.text	0x1000	0xb000	0xb000	R-X CODE
.data	0xc000	0x3800	0x2000	RW- IDATA
.da	0x10000	0x5800	0x6000	RW- IDATA
.rsrc	0x16000	0x816	0x1000	R-- IDATA

Data Directory

type	va	size
EXPORT	0	0
IMPORT	0x9140	0xdc
RESOURCE	0x16000	0x816
EXCEPTION	0	0
SECURITY	0	0
BASERELOC	0	0
DEBUG	0x17d0	0x1c
ARCHITECTURE	0	0
GLOBALPTR	0	0
TLS	0	0
LOAD_CONFIG	0	0
Bound_IAT	0	0
IAT	0x1000	0x7d0
Delay_IAT	0x8e60	0x40
CLR_Header	0	0

show previews

type	name	size
MUI	#1	200
VERSION	#1	932
MANIFEST	#1	694

module_name	hint	ord	function_name
SHELL32.dll	36		DragQueryPoint
SHELL32.dll	276		Shell_NotifyIconW
SHELL32.dll	30		DragAcceptFiles
SHELL32.dll	43		ExtractIconA
SHELL32.dll	41		ExtractAssociatedIconExW
SHELL32.dll	45		ExtractIconExA
SHELL32.dll		180
SHELL32.dll	275		Shell_NotifyIconA
SHELL32.dll		179
SHELL32.dll	205		SHInvokePrinterCommandW
ntdll.dll	1251		ispunct
ntdll.dll	1252		isspace
ntdll.dll	1313		wcstombs
ntdll.dll	1279		strcspn
ntdll.dll	1270		qsort
ntdll.dll	1289		strtoul
ntdll.dll	1282		strncmp
ntdll.dll	1239		bsearch
ntdll.dll	1310		wcsspn
ntdll.dll	1302		wcscpy
ntdll.dll	1274		sscanf
ntdll.dll	1244		isalnum
ntdll.dll	1278		strcpy
ntdll.dll	417		RtlCaptureContext
ntdll.dll	1286		strspn
ntdll.dll	1298		vsprintf
ntdll.dll	1237		atoi
ntdll.dll	1245		isalpha
ntdll.dll	1238		atol
ntdll.dll	1265		memcmp
ntdll.dll	1295		towupper
ntdll.dll	1293		toupper
ntdll.dll	1268		memset
ntdll.dll	1263		mbstowcs
ntdll.dll	1254		iswalpha
ntdll.dll	355		NtWaitForSingleObject
ntdll.dll	1260		isxdigit
ntdll.dll	1275		strcat
ntdll.dll	1272		sprintf
ntdll.dll	1248		isgraph
ntdll.dll	1312		wcstol
ntdll.dll	1258		iswspace
ntdll.dll	1277		strcmp
ntdll.dll	1266		memcpy
MPRAPI.dll	52		MprAdminServerGetInfo
MPRAPI.dll	4		MprAdminConnectionGetInfo
MPRAPI.dll	33		MprAdminMIBBufferFree
MPRAPI.dll	71		MprConfigInterfaceCreate
MPRAPI.dll	2		MprAdminConnectionClearStats
MPRAPI.dll	77		MprConfigInterfaceTransportAdd
MPRAPI.dll	6		MprAdminDeviceEnum
MPRAPI.dll	94		MprConfigTransportGetInfo
MPRAPI.dll	101		MprInfoBlockAdd
MPRAPI.dll	105		MprInfoBlockSet
MPRAPI.dll	82		MprConfigInterfaceTransportSetInfo
MPRAPI.dll	104		MprInfoBlockRemove
MPRAPI.dll	55		MprAdminTransportGetInfo
msvcrt.dll	1176		fgets
msvcrt.dll	1247		mblen
msvcrt.dll	1324		strxfrm
msvcrt.dll	1272		putwc
msvcrt.dll	1142		abort
msvcrt.dll	1227		iswcntrl
msvcrt.dll	1206		getenv
msvcrt.dll	1199		fwprintf
msvcrt.dll	1381		wcstod
msvcrt.dll	1178		fgetws
msvcrt.dll	1329		system
msvcrt.dll	1333		tmpfile
msvcrt.dll	1185		fputc
msvcrt.dll	1159		clearerr
msvcrt.dll	1212		is_wctype
msvcrt.dll	1190		free
msvcrt.dll	1235		iswupper
msvcrt.dll	1167		exit
msvcrt.dll	1382		wcstok
msvcrt.dll	1348		vprintf
msvcrt.dll	1271		puts
msvcrt.dll	1224		iswalnum
msvcrt.dll	1188		fputws
msvcrt.dll	1367		wcsftime
msvcrt.dll	1282		rewind
msvcrt.dll	1344		vfprintf
msvcrt.dll	1177		fgetwc
msvcrt.dll	1281		rename
msvcrt.dll	1286		setlocale
msvcrt.dll	1283		scanf
msvcrt.dll	1269		putc
msvcrt.dll	1187		fputwc
msvcrt.dll	1285		setbuf
msvcrt.dll	1341		ungetc
msvcrt.dll	1151		atof
msvcrt.dll	1390		wctomb
msvcrt.dll	1265		perror
pdh.dll	65		PdhGetRawCounterValue
pdh.dll	39		PdhExpandWildCardPathW
pdh.dll	41		PdhGetCounterInfoA
pdh.dll	133		PdhUpdateLogA
pdh.dll	82		PdhOpenQueryA
pdh.dll	86		PdhParseCounterPathW
pdh.dll	30		PdhEnumObjectsA
pdh.dll	13		PdhCollectQueryData
pdh.dll	22		PdhEnumMachinesA
pdh.dll	42		PdhGetCounterInfoW
pdh.dll	12		PdhCloseQuery
pdh.dll	10		PdhCalculateCounterFromRawValue
pdh.dll	125		PdhSetCounterScaleFactor
GDI32.dll	440		GetTextExtentPointW
KERNEL32.dll	577		LoadLibraryA
KERNEL32.dll	538		InterlockedExchange
KERNEL32.dll	240		FreeLibrary
KERNEL32.dll	407		GetProcAddress
KERNEL32.dll	583		LocalAlloc
KERNEL32.dll	146		EncodePointer
KERNEL32.dll	73		CreateDirectoryExW
KERNEL32.dll	735		SetConsoleCursorPosition
KERNEL32.dll	87		CreateJobObjectW
KERNEL32.dll	155		EnumDateFormatsA
KERNEL32.dll	485		GetWindowsDirectoryA
KERNEL32.dll	199		FindActCtxSectionGuid
KERNEL32.dll	626		OpenMutexA
KERNEL32.dll	576		LeaveCriticalSection
KERNEL32.dll	35		BuildCommDCBW
KERNEL32.dll	218		FindNextFileW
KERNEL32.dll	463		GetThreadSelectorEntry
KERNEL32.dll	363		GetLocaleInfoA
KERNEL32.dll	446		GetSystemTimes
KERNEL32.dll	771		SetFileApisToOEM
KERNEL32.dll	157		EnumDateFormatsExW
KERNEL32.dll	767		SetEnvironmentVariableW
KERNEL32.dll	129		DeleteFileA
KERNEL32.dll	920		WriteProfileStringW
KERNEL32.dll	205		FindCloseChangeNotification
KERNEL32.dll	609		MoveFileWithProgressA
KERNEL32.dll	358		GetHandleInformation
KERNEL32.dll	796		SetPriorityClass
KERNEL32.dll	488		GlobalAddAtomA
KERNEL32.dll	834		SwitchToThread
KERNEL32.dll	354		GetFullPathNameW
KERNEL32.dll	10		AllocateUserPhysicalPages
KERNEL32.dll	842		Thread32Next
KERNEL32.dll	869		VerLanguageNameW
KERNEL32.dll	436		GetSystemDefaultLangID
KERNEL32.dll	492		GlobalDeleteAtom
KERNEL32.dll	424		GetProfileStringW
KERNEL32.dll	939		lstrcmpiW
KERNEL32.dll	313		GetCurrentDirectoryA
KERNEL32.dll	662		RaiseException
KERNEL32.dll	395		GetOverlappedResult
KERNEL32.dll	880		VirtualProtect
KERNEL32.dll	522		HeapQueryInformation
KERNEL32.dll	403		GetPrivateProfileStringA
KERNEL32.dll	889		WaitForMultipleObjectsEx
KERNEL32.dll	670		ReadConsoleOutputCharacterA
KERNEL32.dll	521		HeapLock
KERNEL32.dll	227		FindVolumeClose
KERNEL32.dll	675		ReadFile
KERNEL32.dll	467		GetTimeFormatW
KERNEL32.dll	261		GetCommModemStatus
KERNEL32.dll	367		GetLogicalDrives
KERNEL32.dll	785		SetInformationJobObject
KERNEL32.dll	200		FindActCtxSectionStringA
KERNEL32.dll	546		IsBadHugeReadPtr
KERNEL32.dll	490		GlobalAlloc
KERNEL32.dll	478		GetVolumeInformationW
KERNEL32.dll	755		SetConsoleTitleA
KERNEL32.dll	909		WriteFileGather
KERNEL32.dll	350		GetFileType
KERNEL32.dll	336		GetEnvironmentVariableA
KERNEL32.dll	487		GetWriteWatch
KERNEL32.dll	466		GetTimeFormatA
KERNEL32.dll	229		FlushConsoleInputBuffer
KERNEL32.dll	604		Module32NextW
KERNEL32.dll	64		CopyFileExA
KERNEL32.dll	751		SetConsoleOutputCP
KERNEL32.dll	80		CreateFileMappingA
KERNEL32.dll	204		FindClose
KERNEL32.dll	434		GetStringTypeW
KERNEL32.dll	836		SystemTimeToTzSpecificLocalTime
KERNEL32.dll	127		DeleteCriticalSection
KERNEL32.dll	875		VirtualAllocEx
KERNEL32.dll	585		LocalFileTimeToFileTime
KERNEL32.dll	672		ReadConsoleOutputW
KERNEL32.dll	107		CreateTapePartition
KERNEL32.dll	829		SizeofResource
KERNEL32.dll	366		GetLogicalDriveStringsW
KERNEL32.dll	479		GetVolumeNameForVolumeMountPointA
KERNEL32.dll	733		SetConsoleCursorInfo
KERNEL32.dll	400		GetPrivateProfileSectionNamesA
KERNEL32.dll	32		BuildCommDCBA
KERNEL32.dll	342		GetFileAttributesA
KERNEL32.dll	121		DecodePointer
KERNEL32.dll	148		EndUpdateResourceA
KERNEL32.dll	550		IsBadStringPtrW
KERNEL32.dll	848		TransactNamedPipe
KERNEL32.dll	756		SetConsoleTitleW
KERNEL32.dll	45		CheckRemoteDebuggerPresent
KERNEL32.dll	887		WaitForDebugEvent
KERNEL32.dll	868		VerLanguageNameA
KERNEL32.dll	469		GetUserDefaultLCID
KERNEL32.dll	639		PeekNamedPipe
KERNEL32.dll	484		GetVolumePathNamesForVolumeNameW
KERNEL32.dll	674		ReadDirectoryChangesW
KERNEL32.dll	536		CallNamedPipeA
KERNEL32.dll	315		GetCurrentProcess
KERNEL32.dll	787		SetLastError
KERNEL32.dll	612		MultiByteToWideChar
KERNEL32.dll	360		GetLastError
KERNEL32.dll	376		GetModuleHandleW
KERNEL32.dll	328		GetDiskFreeSpaceW
KERNEL32.dll	703		ResumeThread
KERNEL32.dll	108		CreateThread
KERNEL32.dll	581		LoadModule
KERNEL32.dll	885		WTSGetActiveConsoleSessionId
KERNEL32.dll	53		CommConfigDialogW
KERNEL32.dll	531		HeapWalk
KERNEL32.dll	668		ReadConsoleOutputA
KERNEL32.dll	495		GlobalFix
KERNEL32.dll	557		IsSystemResumeAutomatic
KERNEL32.dll	631		OpenSemaphoreW
KERNEL32.dll	715		SetCalendarInfoA
KERNEL32.dll	183		ExitThread
KERNEL32.dll	727		SetComputerNameW
KERNEL32.dll	837		TerminateJobObject
KERNEL32.dll	757		SetConsoleWindowInfo
KERNEL32.dll	36		CallNamedPipeA
KERNEL32.dll	816		SetTimeZoneInformation
KERNEL32.dll	389		GetNumberFormatA
KERNEL32.dll	883		VirtualQueryEx
KERNEL32.dll	152		EnumCalendarInfoExA
KERNEL32.dll	687		ReleaseActCtx
KERNEL32.dll	841		Thread32First
KERNEL32.dll	13		AttachConsole
KERNEL32.dll	783		SetHandleCount
KERNEL32.dll	539		InterlockedExchangeAdd
KERNEL32.dll	338		GetExitCodeProcess
KERNEL32.dll	784		SetHandleInformation
KERNEL32.dll	191		FatalAppExitW
KERNEL32.dll	638		PeekConsoleInputW
KERNEL32.dll	443		GetSystemTime
KERNEL32.dll	942		lstrcpyW
KERNEL32.dll	697		ReplaceFileW
KERNEL32.dll	844		TlsFree
KERNEL32.dll	606		MoveFileExA
KERNEL32.dll	439		GetSystemDirectoryW
KERNEL32.dll	760		SetCurrentDirectoryW
KERNEL32.dll	418		GetProcessWorkingSetSize
KERNEL32.dll	197		FillConsoleOutputCharacterA
KERNEL32.dll	520		HeapFree
KERNEL32.dll	203		FindAtomW
KERNEL32.dll	719		SetCommBreak
KERNEL32.dll	15		BackupSeek
KERNEL32.dll	933		lstrcatW
KERNEL32.dll	584		LocalCompact
KERNEL32.dll	846		TlsSetValue
KERNEL32.dll	483		GetVolumePathNamesForVolumeNameA
KERNEL32.dll	540		InterlockedFlushSList
KERNEL32.dll	778		SetFileTime
KERNEL32.dll	781		SetFirmwareEnvironmentVariableW
KERNEL32.dll	505		GlobalSize
KERNEL32.dll	262		GetCommProperties
KERNEL32.dll	266		GetCommandLineW
KERNEL32.dll	9		AllocConsole
KERNEL32.dll	319		GetDateFormatA
KERNEL32.dll	220		FindNextVolumeMountPointA
KERNEL32.dll	941		lstrcpyA
KERNEL32.dll	137		DisableThreadLibraryCalls
KERNEL32.dll	856		UnlockFile
KERNEL32.dll	710		ScrollConsoleScreenBufferA
KERNEL32.dll	124		DefineDosDeviceW
KERNEL32.dll	78		CreateFiberEx
KERNEL32.dll	647		Process32NextW
KERNEL32.dll	729		SetConsoleCP
KERNEL32.dll	307		GetConsoleTitleW
KERNEL32.dll	464		GetThreadTimes
KERNEL32.dll	594		LockFile
KERNEL32.dll	201		FindActCtxSectionStringW
KERNEL32.dll	161		EnumResourceLanguagesA
KERNEL32.dll	210		FindFirstFileExW
KERNEL32.dll	392		GetNumberOfConsoleInputEvents
KERNEL32.dll	217		FindNextFileA
KERNEL32.dll	858		UnmapViewOfFile
KERNEL32.dll	894		WideCharToMultiByte
KERNEL32.dll	432		GetStringTypeExA
KERNEL32.dll	83		CreateHardLinkA
KERNEL32.dll	59		ContinueDebugEvent
KERNEL32.dll	913		WritePrivateProfileStringW
KERNEL32.dll	38		CancelDeviceWakeupRequest
KERNEL32.dll	640		PostQueuedCompletionStatus
KERNEL32.dll	133		DeleteTimerQueueTimer
KERNEL32.dll	514		HeapAlloc
KERNEL32.dll	232		FlushViewOfFile
KERNEL32.dll	116		DebugActiveProcess
KERNEL32.dll	140		DnsHostnameToComputerNameW
KERNEL32.dll	451		GetTapeParameters
KERNEL32.dll	79		CreateFileA
KERNEL32.dll	68		CreateActCtxA
KERNEL32.dll	364		GetLocaleInfoW
KERNEL32.dll	160		EnumLanguageGroupLocalesW
KERNEL32.dll	302		GetConsoleOutputCP
KERNEL32.dll	441		GetSystemPowerStatus
KERNEL32.dll	480		GetVolumeNameForVolumeMountPointW
KERNEL32.dll	700		ResetEvent
KERNEL32.dll	222		FindNextVolumeW
KERNEL32.dll	799		SetProcessShutdownParameters
KERNEL32.dll	267		GetCompressedFileSizeA
KERNEL32.dll	429		GetStartupInfoW
KERNEL32.dll	456		GetTempPathA
KERNEL32.dll	344		GetFileAttributesExW
KERNEL32.dll	779		SetFileValidData
KERNEL32.dll	649		PulseEvent
KERNEL32.dll	176		EnumUILanguagesA
KERNEL32.dll	145		DuplicateHandle
KERNEL32.dll	683		RegisterWaitForSingleObject
KERNEL32.dll	900		WriteConsoleInputW
KERNEL32.dll	507		GlobalUnfix
KERNEL32.dll	226		FindResourceW
KERNEL32.dll	2		AddAtomW
KERNEL32.dll	513		Heap32Next
KERNEL32.dll	936		lstrcmpW
KERNEL32.dll	356		GetGeoInfoW
KERNEL32.dll	833		SwitchToFiber
KERNEL32.dll	368		GetLongPathNameA
KERNEL32.dll	590		LocalReAlloc
KERNEL32.dll	622		OpenFileMappingA
KERNEL32.dll	549		IsBadStringPtrA
KERNEL32.dll	813		SetThreadPriority
KERNEL32.dll	1		AddAtomA
KERNEL32.dll	311		GetCurrentActCtx
KERNEL32.dll	458		GetThreadContext
KERNEL32.dll	109		CreateTimerQueue
KERNEL32.dll	768		SetErrorMode
KERNEL32.dll	901		WriteConsoleOutputA
KERNEL32.dll	684		RegisterWaitForSingleObjectEx
KERNEL32.dll	491		GlobalCompact
KERNEL32.dll	917		WriteProfileSectionA
KERNEL32.dll	873		VerifyVersionInfoW
KERNEL32.dll	196		FillConsoleOutputAttribute
KERNEL32.dll	69		CreateActCtxW
KERNEL32.dll	632		OpenThread
KERNEL32.dll	322		GetDefaultCommConfigW
KERNEL32.dll	530		HeapValidate
KERNEL32.dll	167		EnumSystemCodePagesA
KERNEL32.dll	130		DeleteFileW
KERNEL32.dll	564		LCMapStringW
KERNEL32.dll	603		Module32Next
KERNEL32.dll	63		CopyFileA
KERNEL32.dll	170		EnumSystemLanguageGroupsA
KERNEL32.dll	852		TzSpecificLocalTimeToSystemTime
KERNEL32.dll	862		UpdateResourceA
KERNEL32.dll	182		ExitProcess
KERNEL32.dll	725		SetComputerNameExA
KERNEL32.dll	345		GetFileAttributesW
KERNEL32.dll	592		LocalSize
KERNEL32.dll	591		LocalShrink
KERNEL32.dll	832		SuspendThread
KERNEL32.dll	947		lstrlenA
KERNEL32.dll	758		SetCriticalSectionSpinCount
KERNEL32.dll	55		CompareStringA
KERNEL32.dll	448		GetSystemWindowsDirectoryW
KERNEL32.dll	314		GetCurrentDirectoryW
KERNEL32.dll	812		SetThreadLocale
KERNEL32.dll	932		lstrcatA
KERNEL32.dll	619		OpenEventA
KERNEL32.dll	525		HeapSetInformation
KERNEL32.dll	766		SetEnvironmentVariableA
KERNEL32.dll	804		SetSystemTimeAdjustment
KERNEL32.dll	608		MoveFileW
KERNEL32.dll	158		EnumDateFormatsW
KERNEL32.dll	625		OpenJobObjectW
KERNEL32.dll	651		QueryActCtxW
KERNEL32.dll	922		ZombifyActCtx
KERNEL32.dll	346		GetFileInformationByHandle
KERNEL32.dll	49		CloseHandle
KERNEL32.dll	353		GetFullPathNameA
KERNEL32.dll	452		GetTapePosition
KERNEL32.dll	526		HeapSize
KERNEL32.dll	202		FindAtomA
KERNEL32.dll	115		DeactivateActCtx
KERNEL32.dll	82		CreateFileW
KERNEL32.dll	198		FillConsoleOutputCharacterW
KERNEL32.dll	250		GetBinaryTypeA
KERNEL32.dll	325		GetDiskFreeSpaceA
KERNEL32.dll	236		FormatMessageW
KERNEL32.dll	806		SetTapePosition
KERNEL32.dll	122		DecodeSystemPointer
KERNEL32.dll	728		SetConsoleActiveScreenBuffer
KERNEL32.dll	713		SearchPathW
KERNEL32.dll	308		GetConsoleWindow
KERNEL32.dll	548		IsBadReadPtr
KERNEL32.dll	589		LocalLock
KERNEL32.dll	624		OpenJobObjectA
KERNEL32.dll	238		FreeEnvironmentStringsA
KERNEL32.dll	499		GlobalGetAtomNameW
KERNEL32.dll	847		Toolhelp32ReadProcessMemory
KERNEL32.dll	634		OpenWaitableTimerW
KERNEL32.dll	154		EnumCalendarInfoW
KERNEL32.dll	246		GetACP
KERNEL32.dll	8		AddVectoredExceptionHandler
KERNEL32.dll	533		InitializeCriticalSection
KERNEL32.dll	623		OpenFileMappingW
KERNEL32.dll	938		lstrcmpiA
KERNEL32.dll	141		DosDateTimeToFileTime
KERNEL32.dll	724		SetComputerNameA
KERNEL32.dll	808		SetThreadAffinityMask
KERNEL32.dll	907		WriteFile
KERNEL32.dll	377		GetNamedPipeHandleStateA
KERNEL32.dll	81		CreateFileMappingW
KERNEL32.dll	502		GlobalMemoryStatus
KERNEL32.dll	555		IsProcessInJob
KERNEL32.dll	663		ReadConsoleA
KERNEL32.dll	559		IsValidLanguageGroup
KERNEL32.dll	945		lstrcpynW
KERNEL32.dll	91		CreateMemoryResourceNotification
KERNEL32.dll	169		EnumSystemGeoID
KERNEL32.dll	40		CancelTimerQueueTimer
KERNEL32.dll	475		GetVersionExA
KERNEL32.dll	524		HeapReAlloc
KERNEL32.dll	312		GetCurrentConsoleFont
KERNEL32.dll	372		GetModuleFileNameW
KERNEL32.dll	824		SetVolumeMountPointW
KERNEL32.dll	159		EnumLanguageGroupLocalesA
KERNEL32.dll	283		GetConsoleCP
KERNEL32.dll	511		Heap32ListFirst
KERNEL32.dll	433		GetStringTypeExW
KERNEL32.dll	658		QueryPerformanceFrequency
KERNEL32.dll	62		ConvertThreadToFiber
KERNEL32.dll	712		SearchPathA
KERNEL32.dll	425		GetQueuedCompletionStatus
KERNEL32.dll	223		FindResourceA
KERNEL32.dll	134		DeleteVolumeMountPointA
KERNEL32.dll	835		SystemTimeToFileTime
KERNEL32.dll	186		ExpandEnvironmentStringsW
KERNEL32.dll	644		Process32First
KERNEL32.dll	726		SetComputerNameExW
KERNEL32.dll	147		EncodeSystemPointer
KERNEL32.dll	690		RemoveDirectoryA
KERNEL32.dll	723		SetCommTimeouts
KERNEL32.dll	791		SetLocaleInfoA
KERNEL32.dll	818		SetUnhandledExceptionFilter
KERNEL32.dll	558		IsValidCodePage
KERNEL32.dll	655		QueryInformationJobObject
KERNEL32.dll	541		InterlockedIncrement
KERNEL32.dll	420		GetProfileIntW
KERNEL32.dll	610		MoveFileWithProgressW
KERNEL32.dll	406		GetPrivateProfileStructW
KERNEL32.dll	472		GetUserGeoID
KERNEL32.dll	412		GetProcessId
KERNEL32.dll	415		GetProcessShutdownParameters
KERNEL32.dll	151		EnumCalendarInfoA
KERNEL32.dll	494		GlobalFindAtomW
KERNEL32.dll	753		SetConsoleScreenBufferSize
KERNEL32.dll	242		FreeResource
KERNEL32.dll	430		GetStdHandle
KERNEL32.dll	461		GetThreadPriority
KERNEL32.dll	150		EnterCriticalSection
KERNEL32.dll	378		GetNamedPipeHandleStateW
KERNEL32.dll	944		lstrcpynA
KERNEL32.dll	935		lstrcmpA
KERNEL32.dll	390		GetNumberFormatW
urlmon.dll	69		SetSoftwareUpdateAdvertisementState
urlmon.dll	37		FaultInIEFeature
urlmon.dll	9		CoInternetCreateSecurityManager
urlmon.dll	28		CreateURLMoniker
urlmon.dll	73		URLDownloadToFileA
urlmon.dll	43		GetComponentIDFromCLSSPEC
urlmon.dll	67		RevokeBindStatusCallback
urlmon.dll	42		GetClassURL
OLEAUT32.dll		44
OLEAUT32.dll		260
OLEAUT32.dll		226
OLEAUT32.dll		266
OLEAUT32.dll		316
OLEAUT32.dll		314
OLEAUT32.dll		225
OLEAUT32.dll		279
CLUSAPI.dll	66		GetClusterFromNetInterface
CLUSAPI.dll	41		ClusterRegQueryInfoKey
CLUSAPI.dll	33		ClusterRegCloseKey
CLUSAPI.dll	39		ClusterRegGetKeySecurity
CLUSAPI.dll	50		ClusterResourceTypeCloseEnum
CLUSAPI.dll	104		RemoveClusterResourceNode
CLUSAPI.dll	101		PauseClusterNode
CLUSAPI.dll	16		ClusterGroupCloseEnum
CLUSAPI.dll	1		AddClusterResourceNode
CLUSAPI.dll	44		ClusterRegSetValue
CLUSAPI.dll	95		OpenCluster
CLUSAPI.dll	11		CloseClusterResource
CLUSAPI.dll	14		ClusterEnum
CLUSAPI.dll	40		ClusterRegOpenKey

StringTable 040904B0

CompanyName	Microsoft Corporation
FileDescription	Schedule service command line interface
FileVersion	6.1.7600.16385 (win7_rtm.090713-1255)
InternalName	AT.EXE
LegalCopyright	© Microsoft Corporation. All rights reserved.
OriginalFilename	AT.EXE
ProductName	Microsoft® Windows® Operating System
ProductVersion	6.1.7600.16385

VS_FIXEDFILEINFO

FileVersion	6.1.7600.16385
ProductVersion	6.1.7600.16385
StrucVersion	0x10000
FileFlagsMask	0x3f
FileFlags	0
FileOS	0x40004
FileType	1
FileSubtype	0

show previews

offset	size	type	comment
0	86016	EXE	12/15/2014 11:00:15	#
15c1	15	HTM		#

offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable

Please donate some bucks to keep this site up and running:
Ko-fi
Yandex.Money
Thank you!

[!] non-zero dos stub after rich_hdr: "Rich+\r\xFE\f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"

rk2n1.exe-