WinHex 11.2 Log Out | Topics | Search
Moderators | Edit Profile

X-Ways User Forum » Public Announcements » WinHex 11.2 « Previous Next »

Author Message
Stefan Fleischmann (Admin)
Posted on Friday, Dec 12, 2003 - 1:04:   

A beta version of WinHex 11.2 is now available here.

What's new?

* Specialist | Create Drive Contents Table now allows output to the directory browser in WinHex in addition to MS Excel. That means you have an "all files view" of a logical drive or partition (files from all subdirectories) and can interactively sort by date, filename extension, etc., move to the clusters where the file is stored, recover the file, etc.

* Image file segments that are treated like a single disk image can now be written back to a disk in one swing. While the spanned image is open, it can be selected in the Clone Disk dialog window just as any other logical drive or physical disk. Also individually opened partitions are listed as logical drives in Clone Disk, even if not mounted in Windows.

* The option "Search in all open files" has been replaced with the more powerful "Search in all open windows", so even multiple disks or image files interpreted as disks can be searched at the same time.

* Templates now officially support a special flexible integer data type uint_flex that is composed arbitrarily from any of the 32 bits in a 4-byte range in any order. uint_flex is fully documented and supersedes int_extract.

* Cluster list windows now offer another command in their context menu that copies the list to a text file.

* There is now a script command IfGreater that works analogously to IfEqual, but is meant for integer values only.

* Some minor improvements.
Stefan Fleischmann (Admin)
Posted on Friday, Dec 12, 2003 - 18:43:   

Beta A:

* The "all files view" in the directory browser now allows to select multiple items at a time and delete items from the list (not the actual files and directories from the disk).
Posted on Saturday, Dec 13, 2003 - 19:31:   

WH 11.2 betaA
Host/work machine = W98
on host is a segmented image file of an HD with 2 partitions: 1st = 32MB FAT32, 2nd = 44GB NTFS

Applied 'Create drive contents table' to the image file's NTFS partition with these settings
- output to a file
- check boxes used: Files, Directories, Existing, nothing else checked (e.g. not thorough).

Started out AOK (and happily faster without 'thorough' option checked, thank you for this new feature), reached 65%, then Error#3 a few times, then Error#5 a few times they both had similar wording: 'An error occurred while writing to "?\$MFT" ... operation is aborted'.

Had to click 'OK' a many times to finish, then checked resulting 'Partition.txt' files, it saved OK

Is WH attempting to write to this image file?
Posted on Saturday, Dec 13, 2003 - 20:24:   

Tried again but sent to 'Output to directory browser', this time no errors ...

but, when I right click on a folder or a file in the directory browser, the fourth item on the list is blank. Clicking on it generates a message that indicates an attempt to delete the item from the list.
Stefan Fleischmann (Admin)
Posted on Saturday, Dec 13, 2003 - 21:12:   

Thanks for your error reports. The blank menu command "Delete from list" is fixed now with WinHex 11.2 Beta C.

The filename in the error messages was probably wrong. WinHex does not attempt to write to the image file. Actually writing to your output file has probably failed (e.g. insufficient drive space?). Corrected as well.
Posted on Saturday, Dec 13, 2003 - 21:40:   

The system has 25GB free.

I notice that 'Create drive contents table' had created two txt files, I assume it splits at a certain size limit. The first 'Partition 2.txt' file is 8,661KB.

The second txt is called 'partition 2 2.txt' which is 0KB and both files have the same time stamp. I assume the second file being 0KB is a result of the error (or the error is a result of creating the second file)?
Maybe this info will help.

I will retry with latest beta and also retry the first effort to compare.
Posted on Saturday, Dec 13, 2003 - 22:09:   

Another note: It may be handy to have the Window Title for the resulting 'Output to directory browser' clarify that is what is being viewed.

I notice that I can go back to my opened image file, click the access drop down menu, open the partition again and have it open at the same time as the newly created contents table, but both have the exact same window title even though their contents are different. This may be a minor complaint, but I can envision potential confusion.

BTW, I also notice if multiple windows are open of the same obeject (not that anyone should need to do this??), the objects have the same window title also, rather than say '-window 2'. '-copy 2' or similar??.

I have often worked with many windows open (so that not all tabs can be seen) and I can see accidently opening an object that is already open (and the fist copy may contain changes that have not been written back to the HD yet), I may try to edit the second copy of the object, save it and assume all my other changes that were actually in the fist copy were saved also (because I am not aware that I am actually in a second copy), then close all without save and OOPS. Not that I would really be this careless, but it looks like it could happen for someone.

Would it be possible for the Tab tiles and Window titles reflect that this is a second copy of an already open object???

Posted on Saturday, Dec 13, 2003 - 22:37:   

Tried repeating the error with BetaA. It happend again, but this time I noted carefully the first error message: Error#3 An Error occurred while writing "?\MFT 2", make sure the folder exists..."

I do not remember the '2' after 'MFT' before, I may be wrong. Anyway, before prcoceeding, I checked the output file and number one is there at 4,990KB. The second one has not been started yet, (did a refresh of the MS Explorer window to update it)

Will try BetaC next.
Stefan Fleischmann (Admin)
Posted on Sunday, Dec 14, 2003 - 0:43:   

Please try Beta D.

> I assume it splits at a certain size limit

Yes, when 65,531 lines have been added to the text file, because MS Excel can only handle 65,535 lines at maximum.

> I assume the second file being 0KB is a result of the error

Yes, only unfortunately I don't know yet why the error occurs in the first place. It does not occur here.

> both have the exact same window title even
> though their contents are different

Both edit windows show the same second partition. If a directory browser shows the contents of a directory (the usual case), the caption tells the name of the directory (e.g. "C:\Windows\System32"). If the drive contents table has been output to the directory browser, the caption says "Drive Contents Table".

> I also notice if multiple windows are open of
> the same obeject (not that anyone should need
> to do this??)

It might be useful to look at two different sectors of the same disk at the same time to compare them and even have WinHex synchronize scrolling and visually highlight any differences, e.g. both copies of the file allocation table.

To avoid the issue you describe, I will probably opt to have WinHex display a message box if the same file or disk is opened a second time, to ensure that the user is aware of that.
Posted on Monday, Dec 15, 2003 - 3:52:   

I never really noticed the captions under the tabs before - thanks for the tip.

Beta C & D both DO NOT have the error - retested again with beta,A it still happens, so whatever it was it is gone with new betas, Thanks.
Posted on Monday, Dec 15, 2003 - 6:31:   

When using 'Output to browser', after the output is complete and I start testing things out, I notice quite a few lockups of WinHex. CTRL-ALT-DEL shows the 'not responding' message. I have tried this on two systems, two different images and two different OSs (w98, w2k). It seems to always happen sometime after having double clicked on a folder in the just created browser window.

Also, many times a double click of a folder will open it and reveal an empty folder (when it should have something) also double clicking on the '..' folder to return to the last view often goes to the view of the browser as if I had just opened the browser form the access menu (i.e. the Content Table output is gone).

Sometimes double cliking a folder goes nowhere but the cluster list title changes but the listed clusters are the same.

And sometimes double clicking a folder gets the hour glass and the 'not responding'

Is there a way to quickly get back to the 'Drive Contents Table' view in the directory browser by loading/opening the copy saved to disk??
Stefan Fleischmann (Admin)
Posted on Monday, Dec 15, 2003 - 17:54:   

Thanks for your help. In the latest beta version the option that allows to open a folder from the drive contents table was available only by mistake. This should have been only possible with the "normal" directory browser. Fixed now with WinHex 11.2 Beta E. The warning when opening the same object twice is now implemented as well.

Saving the directory browser's drive contents table for quick reload may be a feature for a future version.
Stefan Fleischmann (Admin)
Posted on Sunday, Jan 4, 2004 - 23:05:   

WinHex 11.2 has been released in December 2003 and the beta version referenced above has become unavailable.
Forum operated by X-Ways Software Technology AG.