源代码

工程师分析 Win11 争议后台服务：用于性能诊断，含 84 个诊断脚本_我的网站

一 |      8 月 26 日消息，逆向工程师 Xusheng Li 于 8 月 15 日发布博文，深度分析了 Windows Health and Optimized Experiences 服务。    Dark clouds loomed over the release of Balakrishna’s film Akhanda 2 after Madras High Court stalled the film’s release on Wednesday. While the producers of the action entertainer tried their best to bail out the film, their efforts went in vain. As a result, Akhanda 2, which was slated to release on Friday (December 5, 2025), isn’t releasing as scheduled. The production house, 14 Reels Plus, officially confirmed the news on their social media handle. The unfortunate development certainly came in as a big disappointment for the fans who have been waiting with bated breath to see their favourite star (Balakrishna) in action.          With a heavy heart, we regret to inform you that #Akhanda2 will not be releasing as scheduled due to unavoidable circumstances.This is a painful moment for us, and we truly understand the disappointment it brings to every fan and movie lover awaiting the film.We are working…     — 14 Reels Plus (@14ReelsPlus) December 4, 2025               Akhanda 2 release postponed indefinitely     At a time when the buzz about Akhanda 2 reached fever pitch, the release of the Balakrishna-starrer was halted. A statement from the filmmakers read, “With a heavy heart, we regret to inform you that Akhanda 2 will not be released as scheduled due to unavoidable circumstances. This is a painful moment for us, and we truly understand the disappointment it brings to every fan and movie lover awaiting the film.” While tendering apologies and the inconvenience caused in this regard, the filmmakers assured fans that they are working towards resolving the matter and promised to share a positive update soon.     Legal dispute     In 2019, an arbitral tribunal directed 14 Reels Entertainment to pay Eros International Rs 11.23 crore over a financial and rights-related agreement emerged from the film Dookudu. In 2020, The Madras High Court had also dismissed 14 Reels Entertainment’s petition challenging the earlier award. A Division Bench, and subsequently the Supreme Court too dismissed 14 Reels Entertainment’s SLP in 2021. Meanwhile, Eros International too did not appeal against 14 Reels Entertainment for ‘contempt of court’ for four years.In August 2025, Eros learnt that the debtor company (14 Reels Entertainment) is making and releasing a film Akhanda 2 with a new legal entity named 14 Reels Plus LLP. The Applicant moved Madras High Court arguing that the LLP was controlled by family/associates of the same promoters of 14 Reels Entertainment. Eros further alleged that the promoters were attempting to bypass an unpaid arbitral sum and described it as an alter ego. The Court also heard the arguments of the Respondents 14 Reels Entertainment and 14 Reels Plus LLP. After hearing all the arguments, setting a single Judge’s order (of setting Akhanda 2 free from all legal constraints in October 2025) aside, The Division Bench of the Court freshly ordered that Akhanda 2 cannot be released, distributed, streamed unless 14 Reels Entertainment / 14 Reels Plus LLP pays the entire arbitral payment with interest.          Akhanda 2 premieres cancelled     The premieres of Akhanda 2 were scheduled on December 4 at various screens in the Telugu speaking states and also abroad (North America and Europe). But they had to be cancelled at the last minute due to court restraint. Also, the online bookings of the film on various ticketing portals have been kept on hold. Fans have been expressing their disappointment and are hoping that the film will see the light at the earliest.     Also Read: Madras High Court Puts Balakrishna’s Akhanda 2 Release on Hold。

二 | 曾于 8 月 3 日报道，微软为 Win11 系统新增上述后台服务，网友反馈该服务会在电脑每次开机时自启动，持续监控 CPU 使用率、温度和电池情况，并每隔 15 分钟将数据发给微软。

三 | 微软副总裁斯科特 · 汉塞尔曼回应表示该功能上线于 2025 年，用途主要是采集性能诊断数据。逆向工程师 Xusheng Li 逆向该服务的 whesvc，其结果基本印证了微软的说明，但也发现其底层架构比普通性能诊断工具复杂得多。whesvc 服务的核心功能位于 windiag.dll（229 KB），该动态链接库内嵌 Lua 5.4.7 脚本语言。微软还提供 whesvc_assets.dll，其中包含 84 个已编译 Lua 脚本，用于处理不同诊断场景。脚本引擎公开了 79 个原生函数，可访问 Windows 的多类系统能力。

四 | 该服务可以读取和修改 Windows 注册表，执行文件操作，创建并交互进程，查询 WMI（Windows 管理规范），收集 ETW（Windows 事件跟踪）记录，检查安全令牌，获取电源和温度信息，下载符号文件，创建 .cab 文件，并发起 HTTP 请求。服务还提供通用 FFI（外部函数接口），允许脚本调用原生动态链接库，并操作多种 Windows 句柄。不过，Li 没有发现微软利用这些能力随机修改文件或注册表，现有脚本主要执行常规诊断任务。这些脚本可以在应用停止响应后采集跟踪记录，监控输入延迟和显示异常，识别启动缓慢的应用，并检测长期处于挂起状态的服务。电源相关模块能够调查电池异常耗电，判断阻止电脑进入睡眠状态的原因，并响应持续的高功耗行为。memory_handle_leak 模块会在多个时间间隔内跟踪内存和句柄数量，再结合连续增长情况与线性回归斜率，区分潜在内存泄漏和正常增长。system_summary 模块会生成 900 秒、即 15 分钟的 JSON 摘要，但文件保存在本地。尽管服务具备网络功能，Li 没有找到任何会实际发起任意 HTTP 请求的场景。

五 | 相关阅读：。

Current article:http://5tyz.pisezuibanzoukou.cyou/gw4/20260826/2232381.xls

Published on:12:06:55