[WLX] fileinfo 2.23 x32/x64 (May 2017)

[Dalai]

2DVV
Disable your anti-virus software temporarily and test again. My guess is that Windows Defender is the culprit again, and if that's true, there's nothing TC or the FileInfo plugin could do about it.

Regards
Dalai

[deus-ex]

Hey pals, I don't think so.

I've already added the FileInfo's folder to the exceptions of Windows Defender, I even tried to disable Windows Defender - but it did not change anything.

[Dalai]

Adding the FileInfo plugin directory to exclusions won't do anything because it's not the plugin files that are scanned but the files that are being shown/analyzed by the plugin. If Defender is the culprit, and one wanted to solve this, the totalcmd.exe/totalcmd64.exe processes would need to be added to Defender exclusions. No idea how and where to do that, but some time ago, somebody said that it's possible and that it solved the issue.

Hence why I suggested to temporarily disable Defender to find out if it changes anything.

Regards
Dalai

[Usher]

2Dalai
It's explained here:
Comparing files is slow because of Microsoft Defender Antivirus

[deus-ex]

Hence why I suggested to temporarily disable Defender to find out if it changes anything.

He went through that already. I quote again...

I even tried to disable Windows Defender - but it did not change anything.

[DVV]

Setting Max Depth to 1 makes things faster, but it's still around 3 seconds.

Well, here is a part of what I'm seeing under Process Monitor. This part is repeated a lot of times, so this is interesting.
C:\Progs\WinMerge is the current working folder as I'm opening "C:\Progs\WinMerge\WinMergeU.exe" to analyze it via FileInfo.
A lot of CreateFile/CloseFile entries look strange to me, as well as having repeating Process Profiling that takes from 0.1 to 0.2 second per call! Maybe Process Profiling is caused by the presence of Process Monitor, I don't know?

Extract from Process Monitor

Code: Select all

16:23:40,0971265	TOTALCMD.EXE	8472	Process Profiling		SUCCESS	User Time: 0.5937500 seconds, Kernel Time: 2.7812500 seconds, Private Bytes: 14 557 184, Working Set: 37 810 176
16:23:40,1732849	TOTALCMD.EXE	8472	CreateFile	C:\Progs\WinMerge	SUCCESS	Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened
16:23:40,1734561	TOTALCMD.EXE	8472	CloseFile	C:\Progs\WinMerge	SUCCESS	
16:23:40,1740866	TOTALCMD.EXE	8472	CreateFile	C:\Progs\WinMerge	SUCCESS	Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened
16:23:40,1747635	TOTALCMD.EXE	8472	CloseFile	C:\Progs\WinMerge	SUCCESS	
16:23:40,3142199	TOTALCMD.EXE	8472	CreateFile	C:\Progs\WinMerge	SUCCESS	Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened
16:23:40,3143539	TOTALCMD.EXE	8472	CloseFile	C:\Progs\WinMerge	SUCCESS	
16:23:40,3148792	TOTALCMD.EXE	8472	CreateFile	C:\Progs\WinMerge	SUCCESS	Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened
16:23:40,3152401	TOTALCMD.EXE	8472	CloseFile	C:\Progs\WinMerge	SUCCESS	
16:23:41,0973240	TOTALCMD.EXE	8472	Process Profiling		SUCCESS	User Time: 0.6406250 seconds, Kernel Time: 3.7187500 seconds, Private Bytes: 14 659 584, Working Set: 37 933 056
16:23:41,2794976	TOTALCMD.EXE	8472	CreateFile	C:\Progs\WinMerge	SUCCESS	Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened
16:23:41,2796388	TOTALCMD.EXE	8472	CloseFile	C:\Progs\WinMerge	SUCCESS	
16:23:41,2802826	TOTALCMD.EXE	8472	CreateFile	C:\Progs\WinMerge	SUCCESS	Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened
16:23:41,2810493	TOTALCMD.EXE	8472	CloseFile	C:\Progs\WinMerge	SUCCESS	
16:23:41,6802733	TOTALCMD.EXE	8472	CreateFile	C:\Progs\WinMerge	SUCCESS	Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened
16:23:41,6804170	TOTALCMD.EXE	8472	CloseFile	C:\Progs\WinMerge	SUCCESS	
16:23:41,6808214	TOTALCMD.EXE	8472	CreateFile	C:\Progs\WinMerge	SUCCESS	Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened
16:23:41,6817570	TOTALCMD.EXE	8472	CloseFile	C:\Progs\WinMerge	SUCCESS	
16:23:42,0971638	TOTALCMD.EXE	8472	Process Profiling		SUCCESS	User Time: 0.7500000 seconds, Kernel Time: 4.5781250 seconds, Private Bytes: 14 565 376, Working Set: 37 797 888
16:23:42,1219838	TOTALCMD.EXE	8472	CreateFile	C:\Progs\WinMerge	SUCCESS	Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened
16:23:42,1221269	TOTALCMD.EXE	8472	CloseFile	C:\Progs\WinMerge	SUCCESS	
16:23:42,1226085	TOTALCMD.EXE	8472	CreateFile	C:\Progs\WinMerge	SUCCESS	Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened
16:23:42,1230382	TOTALCMD.EXE	8472	CloseFile	C:\Progs\WinMerge	SUCCESS	
16:23:42,3492471	TOTALCMD.EXE	8472	CreateFile	C:\Progs\WinMerge	SUCCESS	Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened
16:23:42,3494514	TOTALCMD.EXE	8472	CloseFile	C:\Progs\WinMerge	SUCCESS	
16:23:42,3499683	TOTALCMD.EXE	8472	CreateFile	C:\Progs\WinMerge	SUCCESS	Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened
16:23:42,3504739	TOTALCMD.EXE	8472	CloseFile	C:\Progs\WinMerge	SUCCESS	
16:23:42,5868435	TOTALCMD.EXE	8472	CreateFile	C:\Progs\WinMerge	SUCCESS	Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened
16:23:42,5871827	TOTALCMD.EXE	8472	CloseFile	C:\Progs\WinMerge	SUCCESS	
16:23:42,5880991	TOTALCMD.EXE	8472	CreateFile	C:\Progs\WinMerge	SUCCESS	Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened
16:23:42,5885772	TOTALCMD.EXE	8472	CloseFile	C:\Progs\WinMerge	SUCCESS	
16:23:42,5900717	TOTALCMD.EXE	8472	CreateFile	C:\Progs\WinMerge	SUCCESS	Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened
16:23:42,5902198	TOTALCMD.EXE	8472	CloseFile	C:\Progs\WinMerge	SUCCESS	
16:23:42,5910362	TOTALCMD.EXE	8472	CreateFile	C:\Progs\WinMerge	SUCCESS	Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened
16:23:42,5913961	TOTALCMD.EXE	8472	CloseFile	C:\Progs\WinMerge	SUCCESS	
16:23:42,7322139	TOTALCMD.EXE	8472	CreateFile	C:\Progs\WinMerge	SUCCESS	Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened
16:23:42,7323715	TOTALCMD.EXE	8472	CloseFile	C:\Progs\WinMerge	SUCCESS	
16:23:42,7328750	TOTALCMD.EXE	8472	CreateFile	C:\Progs\WinMerge	SUCCESS	Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened
16:23:42,7334102	TOTALCMD.EXE	8472	CloseFile	C:\Progs\WinMerge	SUCCESS	
16:23:43,0705004	TOTALCMD.EXE	8472	CreateFile	C:\Progs\WinMerge	SUCCESS	Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened
16:23:43,0706309	TOTALCMD.EXE	8472	CloseFile	C:\Progs\WinMerge	SUCCESS	
16:23:43,0712575	TOTALCMD.EXE	8472	CreateFile	C:\Progs\WinMerge	SUCCESS	Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened
16:23:43,0717519	TOTALCMD.EXE	8472	CloseFile	C:\Progs\WinMerge	SUCCESS	
16:23:43,0968655	TOTALCMD.EXE	8472	Process Profiling		SUCCESS	User Time: 0.7500000 seconds, Kernel Time: 5.5468750 seconds, Private Bytes: 14 524 416, Working Set: 37 761 024
16:23:43,3018181	TOTALCMD.EXE	8472	CreateFile	C:\Progs\WinMerge	SUCCESS	Desired Access: Execute/Traverse, Synchronize, Disposition: Open, Options: Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write, AllocationSize: n/a, OpenResult: Opened
16:23:43,3019459	TOTALCMD.EXE	8472	CloseFile	C:\Progs\WinMerge	SUCCESS	

By the way, I have Windows XP under VirtualBox - and the very same FileInfo analyzes the very same WinMergeU.exe immediately there!
And it is still lightning fast even under Process Monitor (takes about a second with Process Monitor). And I see just one Process Profiling entry during the whole process, and just a few CreateFile/CloseFile entries. It's under Windows XP in VirtualBox, I mean.

[Dalai]

2DVV
Is it slow with every file opened in FileInfo? Which tab in FileInfo is slow or is it all of them? Normally, the "File Properties" shouldn't be slow to open. You might also want to check in Windows Safe Mode to see if it makes any difference. My guess is that it does, maybe there's some other program in the background scanning files or processes.

Regards
Dalai

[DVV]

It's slow with every .dll and .exe file on the Dll Dependency tab.

[deus-ex]

I just reviewed the DLL dependencies of WinMergeU.exe with various 'max depth' settings, running on Windows 10 Pro 64-bit:

max depth	duration
1	1 seconds
2	5 seconds
3	34 seconds

You get the idea that with every higher depth value the analysis duration increases quite tremendously, as each DLL has a different branch of dependencies.

[DVV]

Looks like a huge win of Window 10 then: the very same action takes 5 seconds while it was immediate in previous versions of Windows!

[deus-ex]

Take into account that previous versions of Windows run with older versions of the required DLLs. Older DLLs vary in the dependency branching compared to their counterparts in Windows 10, and the branching probably is not as complex as it is today.

Also, the processes required to obtain the dependency information may be more restricted and time demanding in modern operating systems due to increased security measures.

[Dalai]

Well, I suggested to test in Windows Safe Mode for a reason... This way, it can be determined if it's the OS complexity (sure, that has an impact, but I doubt a major one) or some background process/service/whatever.

Regards
Dalai

[DVV]

Under Windows Safe Mode, things are maybe 20% faster for me - at the level reported by deus-ex.
I was pointed to a new tool developed especially for Windows 10, this one works fast: https://github.com/lucasg/Dependencies

[demovirus]

Can somebody add missing Machine Type 01C4h - ARMv7 / ARMNT?
All types here, e.g.
Image: https://a.radikal.ru/a17/2105/ce/366613f42610.png

[MVV]

When I open incomplete PE files, plugin often crashes, sometimes even with TC... It would be nice to see more range checks or maybe an exception handler...

Crash in plugin FileInfo.wlx:ListLoad:

Access violation at address 0F9B6860. Read of address 052AC000

When I try to view the same incomplete file twice and twice click OK in this message, TC crashes completely:

Exception EExternalException in module TOTALCMD.EXE at 775831DF.
External exception C015000F.