filenamewindiff.exe
size105984 (0x19e00)
md573d03c1ccf0ba356992f2b4ff1cf4d55
typePE32 executable (GUI) Intel 80386, for MS Windows
mimetypeapplication/x-dosexec
clamavOK
virustotal→ scan with virustotal.com
histogram

MZ Header

signatureMZ
bytes_in_last_block0x90
blocks_in_file3
num_relocs0
header_paragraphs4
min_extra_paragraphs0
max_extra_paragraphs0xffff
ss0
sp0xb8
checksum0
ip0
cs0
reloc_table_offset0x40
overlay_number0
reserved00
oem_id0
oem_info0
reserved20
reserved30
reserved40
reserved50
reserved60
lfanew0xe0

Rich Header

lib idversiontimes used
6492102
10231
25921019
6991111
28917825
6192101

DOS stub

00000000: 0e 1f ba 0e 00 b4 09 cd  21 b8 01 4c cd 21 54 68  |........!..L.!Th|
00000010: 69 73 20 70 72 6f 67 72  61 6d 20 63 61 6e 6e 6f  |is program canno|
00000020: 74 20 62 65 20 72 75 6e  20 69 6e 20 44 4f 53 20  |t be run in DOS |
00000030: 6d 6f 64 65 2e 0d 0d 0a  24 00 00 00 00 00 00 00  |mode....$.......|

PE Header

SignaturePE
Machine0x14c
NumberOfSections3
TimeDateStamp0x3b7d875a
PointerToSymbolTable0
NumberOfSymbols0
SizeOfOptionalHeader0xe0
Characteristics0x10f
Magic0x10b
LinkerVersion7.0
SizeOfCode0x14a00
SizeOfInitializedData0x7600
SizeOfUninitializedData0
AddressOfEntryPoint0x123a2
BaseOfCode0x1000
BaseOfData0x16000
ImageBase0x1000000
SectionAlignment0x1000
FileAlignment0x200
OperatingSystemVersion5.1
ImageVersion5.1
SubsystemVersion4.0
Reserved10
SizeOfImage0x1e000
SizeOfHeaders0x400
CheckSum0x26e1c
Subsystem2
DllCharacteristics0x8000
SizeOfStackReserve0x40000
SizeOfStackCommit0x1000
SizeOfHeapReserve0x100000
SizeOfHeapCommit0x1000
LoaderFlags0
NumberOfRvaAndSizes0x10

Packer / Compiler

MS Visual C++ v7.x >> *SigBy Ahmed18

Sections

namevavsizeraw sizeflags
.text0x10000x149480x14a00R-X CODE
.data0x160000x26f40x200RW- IDATA
.rsrc0x190000x4df80x4e00R-- IDATA

Data Directory

typevasize
EXPORT00
IMPORT0x147140xc8
RESOURCE0x190000x4df8
EXCEPTION00
SECURITY00
BASERELOC00
DEBUG0x13c00x1c
ARCHITECTURE00
GLOBALPTR00
TLS00
LOAD_CONFIG00
Bound_IAT00
IAT0x10000x3ac
Delay_IAT00
CLR_Header00
typenamesizecp
ICON#17440
MENUEXPANDFLOATMENU2880
MENUOUTLINEFLOATMENU2640
MENUWINDIFFMENU22280
DIALOGABOUT4260
DIALOGCOPYFILES8160
DIALOGDIRECTORY5640
DIALOGREMOTE9220
DIALOGSAVELIST7120
DIALOGUNC2460
DIALOG#1534380
DIALOG#1592100
DIALOG#1701980
STRING#412100
STRING#426560
STRING#43880
STRING#445560
STRING#458780
STRING#4611840
STRING#4726800
STRING#4815220
STRING#5113820
ACCELERATORSWINDIFFACCEL1760
GROUP_ICONWINDIFF200
VERSION#18800
idlangstring
6501033Line not visible in this view
6511033only in %s%s
6521033different
6531033identical
6541033same size
6551033Cannot open temp file
6561033Bad argument to compitem_getfilename
6571033Select First File
6581033Select Second File
6591033Couldn't find %s
6601033Cannot open %s
6611033identical,
6621033left-only,
6631033right-only,
6641033differing
6651033-- %d files listed
6661033Please enter the directory name
6671033failed to copy %s
6681033%4d files requested. Copying...
6691033Copy Aborted
6701033Copy Complete: %d files failed
6711033Copy Complete: %d files copied
6721033Exit
6731033Couldn't find any files.
6891033Windiff Usage
6901033-L got two paths - needs at most one
6911033Bad or missing SLM.INI or SD.INI file.
6921033Page # of $
6931033Sent to printer.
6941033Unable to print.
6951033Windiff Error
6961033No More Changes
6971033No Previous Changes
6981033Outline
6991033Expand
7001033File does not exist.
7011033Failed to launch editor
7021033Comparing...
7031033WinDiff: scanning
7041033Abort
7051033Please wait for current operation to finish
7061033Abort Pending
7071033%d.%03d seconds
7081033Tracing enabled to .\windiff.trc
7091033Tracing disabled
7101033Please create a diff list first
7111033File and directory comparisons
7121033Editor command (%p = file, %l = line#)
7131033-- %s -- includes %s%s%s%s files
7141033(both have identical times)
7151033different in blanks only
7161033Enter substring, or regular expression
7171033Enter Pattern (substring, not wildcard)
7181033Mark Files
7191033Please enter password for %s
7201033Copying %4d files
7211033Both files unreadable
7221033Left file unreadable
7231033Right file unreadable
7241033 (unreadable)
7251033%s (%s is more recent)
7261033%s is read-only. Overwrite ?
7271033Copy Files
7281033No file selected. Nothing rescanned.
7291033No file selected. Nothing to edit.
7301033Error opening file
7311033Save Composite File
7321033Usage: windiff [options] path1 [path2]
7331033Options:
7341033-D Compare one directory only.
7351033-F[flags] savefile Save composite file to 'savefile'. The 'flags' may consist of one or more of I (identical), L (left), R (right), F (moved leFt), G (moved riGht), S (Similar left), A (similiAr right), X (exit after saving list).
7361033(e.g. -FLF saves list of Left or moved-leFt lines).
7371033-I file Reads list of files to compare, from the specified input file. Each line can contain one or two filenames, space delimited (with quoting, if filenames contain spaces).
7381033 If a line contains only one filename, the file is compared to itself.
7391033 If a line contains only one filename and the -L flag has been used, then the file is compared to the corresponding file from the source control system. If the -L flag was not used, the file is compared to itself.
7401033 To disable the space-delimited parsing, use -I1 which interprets each line as a filename.
7411033
7421033-L Compare local files (right side) against the corresponding Source Depot base file, or the SLM master file (left side). Implies -D, use -T to override.
7431033-L! Force Source Depot mode.
7441033-LC client Specify the SD client.
7451033-LD changenum Show diffs for all files in the specified change number.
7461033-LP port Specify the SD server and port.
7471033-LR Reverse comparison, so local files are on the left side.
7481033-N name NET SEND notification to 'name' at end of comparison.
7491033-O Outline view (no automatic expansion).
7501033-P Perverse comparison: breaks lines on punctuation.
7511033-S[flags] savefile Save list of files to 'savefile'. The 'flags' may consist of one or more of S (same), L (left), R (right), D (different), X (exit after saving list).
7521033(e.g. -SLD saves list of Left or Different files).
7531033-T Compare whole subtree.
7541033-X[flags] Exclude files. The 'flags' may consist of one or more of L (left), R (right), S (same), D (different), O (readOnly), I (SLM libary files).
7551033(e.g. -XRI excludes Right and SLM library files).
7561033 Notes:
7571033Any filename (path1, path2, or in the -I input file) can have a SLM version (windiff foo.c@v-3 foo.c) or a SD revision (windiff foo.c#57 foo.c#58).
7581033Any valid SD revision spec can be used: @label, @change, @yyyy/mm/dd[:hh:mm:ss], #revision, etc.
7591033-L works with SLM versions or SD revisions: e.g. "windiff -l #head" compares local files against their SD head revisions (NOTE, "windiff -l" compares against master file for SLM, but against #have revision for SD).
8001033Invalid Go To Line string.
8011033There are no lines in the current view.
8021033Not found: %s
8031033Tab width (between 1 and 100):
8041033The tab width must be between 1 and 100.
8051033Bad or missing SD.INI file (it belongs in the SD client root).
8061033Composite file is not available when left or right file is Unicode.
8071033-LO expects no path arguments.
8081033The -LO (diff opened files) and -LD (describe a submitted change) switches are mutually exclusive.
8091033-LD expects no path arguments.
8111033-I expects an input filename, and either no path arguments, or one or two path arguments containing {} which are replaced by text from the input file.
8121033Unable to open input file.
8131033Unable to show usage text, because unable to load riched20.dll.
module_namehintordfunction_name
msvcrt.dll214_controlfp
msvcrt.dll152__set_app_type
msvcrt.dll133__p__fmode
msvcrt.dll128__p__commode
msvcrt.dll182_adjust_fdiv
msvcrt.dll154__setusermatherr
msvcrt.dll314_initterm
msvcrt.dll109__getmainargs
msvcrt.dll237_except_handler3
msvcrt.dll200_cexit
msvcrt.dll78_XcptFilter
msvcrt.dll246_exit
msvcrt.dll197_c_exit
msvcrt.dll370_ltoa
msvcrt.dll655exit
msvcrt.dll695isalpha
msvcrt.dll781strtok
msvcrt.dll281_fullpath
msvcrt.dll503_stricmp
msvcrt.dll430_mkdir
msvcrt.dll168_acmdln
msvcrt.dll727malloc
msvcrt.dll769strcspn
msvcrt.dll760sprintf
msvcrt.dll774strncmp
msvcrt.dll501_strdup
msvcrt.dll794toupper
msvcrt.dll700islower
msvcrt.dll765strchr
msvcrt.dll643atoi
msvcrt.dll815wcsncpy
msvcrt.dll703isspace
msvcrt.dll697isdigit
msvcrt.dll289_getcwd
msvcrt.dll676free
ADVAPI32.dll459RegCreateKeyA
ADVAPI32.dll456RegCloseKey
ADVAPI32.dll491RegQueryValueExA
ADVAPI32.dll465RegDeleteValueA
ADVAPI32.dll504RegSetValueExA
ADVAPI32.dll480RegOpenKeyA
KERNEL32.dll533IsDBCSLeadByte
KERNEL32.dll120DeleteFileA
KERNEL32.dll74CreateFileA
KERNEL32.dll44CloseHandle
KERNEL32.dll328GetFileAttributesA
KERNEL32.dll751SetFileAttributesA
KERNEL32.dll335GetFileTime
KERNEL32.dll333GetFileSize
KERNEL32.dll193FindClose
KERNEL32.dll197FindFirstFileA
KERNEL32.dll757SetFileTime
KERNEL32.dll58CopyFileA
KERNEL32.dll568LocalFree
KERNEL32.dll574LocalUnlock
KERNEL32.dll569LocalHandle
KERNEL32.dll206FindNextFileA
KERNEL32.dll570LocalLock
KERNEL32.dll564LocalAlloc
KERNEL32.dll923lstrcpynA
KERNEL32.dll908_lread
KERNEL32.dll324GetExitCodeProcess
KERNEL32.dll869WaitForSingleObject
KERNEL32.dll92CreateProcessA
KERNEL32.dll414GetStdHandle
KERNEL32.dll907_lopen
KERNEL32.dll514InitializeCriticalSection
KERNEL32.dll557LeaveCriticalSection
KERNEL32.dll139EnterCriticalSection
KERNEL32.dll306GetCurrentThreadId
KERNEL32.dll118DeleteCriticalSection
KERNEL32.dll359GetModuleHandleA
KERNEL32.dll229FreeLibrary
KERNEL32.dll558LoadLibraryA
KERNEL32.dll101CreateThread
KERNEL32.dll874WinExec
KERNEL32.dll489GlobalUnlock
KERNEL32.dll482GlobalLock
KERNEL32.dll446GetTickCount
KERNEL32.dll412GetStartupInfoA
KERNEL32.dll438GetTempPathA
KERNEL32.dll436GetTempFileNameA
KERNEL32.dll339GetFullPathNameA
KERNEL32.dll909_lwrite
KERNEL32.dll904_lclose
KERNEL32.dll917lstrcmpiA
KERNEL32.dll49CompareFileTime
KERNEL32.dll471GlobalAlloc
KERNEL32.dll911lstrcatA
KERNEL32.dll478GlobalFree
KERNEL32.dll926lstrlenA
KERNEL32.dll305GetCurrentThread
KERNEL32.dll792SetThreadPriority
KERNEL32.dll325GetExitCodeThread
KERNEL32.dll656ReadFile
KERNEL32.dll886WriteFile
KERNEL32.dll346GetLastError
KERNEL32.dll809Sleep
KERNEL32.dll774SetNamedPipeHandleState
KERNEL32.dll592MulDiv
KERNEL32.dll602OpenFile
KERNEL32.dll914lstrcmpA
KERNEL32.dll920lstrcpyA
KERNEL32.dll441GetThreadLocale
GDI32.dll57CreateFontA
GDI32.dll143DeleteObject
GDI32.dll71CreatePen
GDI32.dll80CreateSolidBrush
GDI32.dll463MoveToEx
GDI32.dll459LineTo
GDI32.dll524SelectObject
GDI32.dll444GetTextMetricsA
GDI32.dll421GetStockObject
GDI32.dll500Rectangle
USER32.dll658ShowWindow
USER32.dll39CharLowerBuffA
USER32.dll196EnableWindow
USER32.dll273GetDlgItem
USER32.dll419IsDlgButtonChecked
USER32.dll158DialogBoxParamA
USER32.dll42CharNextA
USER32.dll45CharPrevA
USER32.dll346GetSysColor
USER32.dll11AttachThreadInput
USER32.dll270GetDesktopWindow
USER32.dll551RegisterWindowMessageA
USER32.dll161DispatchMessageA
USER32.dll682TranslateMessage
USER32.dll679TranslateAcceleratorA
USER32.dll509PeekMessageA
USER32.dll489MoveWindow
USER32.dll456LoadStringA
USER32.dll642SetWindowPlacement
USER32.dll371GetWindowPlacement
USER32.dll511PostMessageA
USER32.dll151DestroyMenu
USER32.dll676TrackPopupMenu
USER32.dll64ClientToScreen
USER32.dll194EnableMenuItem
USER32.dll59CheckRadioButton
USER32.dll451LoadMenuA
USER32.dll403InvalidateRect
USER32.dll300GetMenu
USER32.dll646SetWindowTextA
USER32.dll561ScreenToClient
USER32.dll267GetCursorPos
USER32.dll443LoadIconA
USER32.dll66CloseClipboard
USER32.dll586SetClipboardData
USER32.dll193EmptyClipboard
USER32.dll499OpenClipboard
USER32.dll153DestroyWindow
USER32.dll665SystemParametersInfoA
USER32.dll57CheckMenuItem
USER32.dll513PostQuitMessage
USER32.dll722WinHelpA
USER32.dll598SetFocus
USER32.dll699UpdateWindow
USER32.dll96CreateWindowExA
USER32.dll435LoadAcceleratorsA
USER32.dll314GetMessageA
USER32.dll728wsprintfA
USER32.dll439LoadCursorA
USER32.dll534RegisterClassA
USER32.dll142DefWindowProcA
USER32.dll566SendDlgItemMessageA
USER32.dll589SetCursor
USER32.dll198EndDialog
USER32.dll56CheckDlgButton
USER32.dll345GetSubMenu
USER32.dll595SetDlgItemTextA
USER32.dll13BeginPaint
USER32.dll200EndPaint
USER32.dll476MessageBoxA
USER32.dll268GetDC
USER32.dll255GetClientRect
USER32.dll226FillRect
USER32.dll571SendMessageA
USER32.dll554ReleaseDC
USER32.dll275GetDlgItemTextA
GUtils.dll44Trace_Close
GUtils.dll68gmem_init
GUtils.dll17List_Init
GUtils.dll39StatusAlloc
GUtils.dll38StatusAddItem
GUtils.dll41StatusHeight
GUtils.dll40StatusCreate
GUtils.dll2Format
GUtils.dll52ctree_getcount
GUtils.dll51ctree_find
GUtils.dll50ctree_delete
GUtils.dll53ctree_update
GUtils.dll27List_NewBefore
GUtils.dll31List_Prev
GUtils.dll26List_NewAfter
GUtils.dll48checksum_file
GUtils.dll83utils_isblank
GUtils.dll71hash_string
GUtils.dll67gmem_get
GUtils.dll10List_Create
GUtils.dll11List_Delete
GUtils.dll29List_NewLast
GUtils.dll7List_Card
GUtils.dll75readfile_setdelims
GUtils.dll64gfile_open
GUtils.dll65gmem_free
GUtils.dll16List_First
GUtils.dll30List_Next
GUtils.dll24List_Last
GUtils.dll45Trace_Error
GUtils.dll14List_Destroy
GUtils.dll43StringInput
GUtils.dll82utils_CompPath
GUtils.dll47Trace_Unattended
GUtils.dll72readfile_delete
GUtils.dll74readfile_next
GUtils.dll46Trace_File
GUtils.dll6List_AddLast
GUtils.dll49ctree_create
GUtils.dll20List_IsEmpty
GUtils.dll73readfile_new
LZ32.dll9LZOpenFileA
LZ32.dll3LZClose
LZ32.dll5LZCopy
comdlg32.dll2ChooseFontA
SHELL32.dll147ShellAboutA

StringTable 040904B0

CompanyNameMicrosoft Corporation
FileDescriptionFile comparison utility
FileVersion5.1.2455.0
InternalNameWINDIFF.EXE
LegalCopyrightCopyright (C) Microsoft Corporation. 1981-2001
OriginalFilenameWINDIFF.EXE
ProductNameMicrosoft(R) Windows (R) 2000 Operating System
ProductVersion5.1.2455.0

VS_FIXEDFILEINFO

FileVersion5.1.2455.0
ProductVersion5.1.2455.0
StrucVersion0x10000
FileFlagsMask0x3f
FileFlags8
FileOS0x40004
FileType1
FileSubtype0
offsetsizetypecomment
0105984EXE08/17/2001 21:06:34#
15c115HTM#
offset:( 0x )size:( 0x )hotkeys:-=[]<>, offset/size fields are also editable











everything is OK