[WLX] fileinfo 2.23 x32/x64 (May 2017)

[fg_2002fr]

Hello Strogg!

First - can you change the dll dependency tab location as in previous versions (make it second after File Properties)? It's so habitual

I found this new arrangement more instinctive but you can now easily jump to any tab with CTL- (number) or CTL-TAB to jump to the next

Function sorting in Import/Export tab (sort) couldn't be saved permanently. Can you fix it?

I can

Also I though that would be great if you implement export to *.rtf or *.txt of the information from Image File Header tab.

you can select all with CTL-A then copy in clipboard with CTL-C.
do you need really an export option?

[raeubi]

2fg_2002fr
Ver. 2.02 works very well, Thank you!

select all with CTL-A then copy in clipboard with CTL-C

For me is sufficient. IMO an extra export function is not necessary.

[Strogg]

Hello Franзois!

I found this new arrangement more instinctive but you can now easily jump to any tab with CTL- (number) or CTL-TAB to jump to the next

Yes, I already get used to it
Maybe you are right!

do you need really an export option?

No, not really! I just thought it would be convenient some way to work. But it is not essential!

[gigaman]

I have come across a file that the FileInfo plugin v2.02 has problems with (crashes).
In particular, it crashes when I switch to the second page (Image File Header). The crash occurs right before the UnDecorateSymbolName() call, when the plugin checks whether the first character of the function name is '?'. Unfortunatelly, the pointer's value is 0xFFFFFFFF --> i.e. an exception occurs.
The problematic file is the recent Zafi-B virus (therefore, I'd prefer not to spread the file). If you need any help / info, however, just let me know.

[fg_2002fr]

Hello Gigaman!

Ok it's corrected for the next version of fileinfo

PS: with Dependency Walker, you get:
Warning: At least one module was corrupted or unrecognizable to Dependency Walker, but still appeared to be a Windows module.

it's funny because this is the same bug but this exe was not corrupted but have just no Import table.

[fg_2002fr]

Hi all!

juste a little release where some problems with cygwin compiler are corrected and file analysis must be now faster.
All TLB files are now dumped (thanks to Enrico Frumento)

- Added : Option to change the depth of analysis in DLL dependencies
- Added : Fix for cygwin DLL Dumping (bugged)
- Added : group DLL redondance found in Import table
- Added : typelib information of TLB files
- Fixed : crash in 'Image File Header' when EXE have no Import Table
- Fixed : crash with some Cygwin compiled DLL ( in parts )
- Changed : rewriting some part (speed up file analysis)


You can download it here:
http://physio-a.univ-tours.fr/tcplugins/wlx_fileinfo203.zip
Size: 100 KB

see webpage at:
http://physio-a.univ-tours.fr/tcplugins/

[Strogg]

At my mistake there was a double post
sorry

[Strogg]

Hello Franзois!

There is some problems using new version 2.03
TC crashes while quiting from preview of some system files (System folder; Win98SE) with following extensions:
*.386, *.cpl, *. *.cpx, *.ax.
"Access violation at address 64001365 Read of address FFFFFFFF"

While opening *.ocx files it crashes with message:
"TOTALCMD caused an invalid page fault in
module KERNEL32.DLL at 017f:bff7a138.
Registers:
EAX=00000038 CS=017f EIP=bff7a138 EFLGS=00010206
EBX=0393ffc4 SS=0187 ESP=0079eac0 EBP=0079eaf4
ECX=a884002c DS=0187 ESI=0393ff90 FS=2137
EDX=03038422 ES=0187 EDI=0000006c GS=0000
Bytes at CS:EIP:
89 51 08 8b 53 08 8b 43 04 89 42 04 8d 93 0b 10
Stack dump:
0079eaf4 0393ff90 03840000 03842130 bff7b31d 03840000 0393ff90 00000034 00000200 03841e14 03841cfc 03842130 0393ff90 0079eb0c 7f9d509a 03840000 "

------------------------------
P.S The sorting in Import/Export Tab still couldn't be saved permanently

[lzvk25]

On Windows 2000 SP4 those extensions work fine.

[Strogg]

2lzvk25
They work fine under XPPro SP1 either.
The problem seems to be only under Win9x

[gigaman]

I don't think it's a problem of Win9x - it works OK for me on Win98SE.

According to the crash dump, the problem is related to corrupted heap. Couldn't it be caused by some other installed plugin?

[Strogg]

2gigaman
But I hadn't problems with previous version 2.02
And I don't think it's causes by any other plugin - I unistalled all of them but still got an error messages

[gigaman]

Does the problem really occur with all the files of mentioned extensions? If it was just one or two files, I'd say it's possible, but this is strange...

[raytc]

Can someone tell how to view/use fileinfo?

[raytc]

I detected how to use FileInfo

But still a lot of files (p.e. .doc files) are view as binary files
and opens notepad using F3.
How to choose which plugin to use clicking F3?

Thanks in advance.