#include <phgui.h>
#include <treenew.h>
#include <graph.h>
#include <circbuf.h>
#include <dltmgr.h>
#include <phnet.h>
#include <providers.h>
#include <colmgr.h>
#include <uimodels.h>
#include "../resource.h"

Data Structures
struct	_PH_STARTUP_PARAMETERS

struct	_PH_MESSAGE_LOOP_FILTER_ENTRY

union	_PH_KNOWN_PROCESS_COMMAND_LINE

struct	_PH_TN_COLUMN_MENU_DATA

struct	_PH_TN_FILTER_SUPPORT

struct	_PH_TN_FILTER_ENTRY

struct	_PH_COPY_CELL_CONTEXT

struct	_PH_SHOWMEMORYEDITOR

struct	_PH_SHOWMEMORYRESULTS

struct	_PH_LAYOUT_PADDING_DATA

struct	_PH_ADDMENUITEM

struct	_PH_ADDITIONAL_TAB_PAGE

struct	_PH_PROCESS_PROPCONTEXT

struct	_PH_PROCESS_PROPPAGECONTEXT

struct	_PH_LOG_ENTRY

struct	_PH_RUNAS_SERVICE_PARAMETERS

Macros
#define	PHAPPAPI

#define	KPH_ERROR_MESSAGE

#define	PH_LIST_VIEW_CTRL_C_BEHAVIOR 0x1

#define	PH_LIST_VIEW_CTRL_A_BEHAVIOR 0x2

#define	PH_LIST_VIEW_DEFAULT_1_BEHAVIORS (PH_LIST_VIEW_CTRL_C_BEHAVIOR \| PH_LIST_VIEW_CTRL_A_BEHAVIOR)

#define	PH_OPACITY_TO_ID(Opacity) (ID_OPACITY_10 + (10 - (Opacity) / 10) - 1)

#define	PH_ID_TO_OPACITY(Id) (100 - (((Id) - ID_OPACITY_10) + 1) * 10)

#define	PH_SHELL_APP_PROPAGATE_PARAMETERS 0x1

#define	PH_SHELL_APP_PROPAGATE_PARAMETERS_IGNORE_VISIBILITY 0x2

#define	PH_SHELL_APP_PROPAGATE_PARAMETERS_FORCE_SETTINGS 0x4

#define	PH_TN_COLUMN_MENU_HIDE_COLUMN_ID ((ULONG)-1)

#define	PH_TN_COLUMN_MENU_CHOOSE_COLUMNS_ID ((ULONG)-2)

#define	PH_TN_COLUMN_MENU_SIZE_COLUMN_TO_FIT_ID ((ULONG)-3)

#define	PH_TN_COLUMN_MENU_SIZE_ALL_COLUMNS_TO_FIT_ID ((ULONG)-4)

#define	PH_TN_COLUMN_MENU_RESET_SORT_ID ((ULONG)-5)

#define	PH_TN_COLUMN_MENU_NO_VISIBILITY 0x1

#define	PH_TN_COLUMN_MENU_SHOW_RESET_SORT 0x2

#define	PH_LOAD_SHARED_IMAGE(Name, Type) LoadImage(PhInstanceHandle, (Name), (Type), 0, 0, LR_SHARED)

#define	PH_MAINWND_CLASSNAME L"ProcessHacker"

#define	WM_PH_FIRST (WM_APP + 99)

#define	WM_PH_ACTIVATE (WM_APP + 99)

#define	PH_ACTIVATE_REPLY 0x1119

#define	WM_PH_PROCESS_ADDED (WM_APP + 101)

#define	WM_PH_PROCESS_MODIFIED (WM_APP + 102)

#define	WM_PH_PROCESS_REMOVED (WM_APP + 103)

#define	WM_PH_PROCESSES_UPDATED (WM_APP + 104)

#define	WM_PH_SERVICE_ADDED (WM_APP + 105)

#define	WM_PH_SERVICE_MODIFIED (WM_APP + 106)

#define	WM_PH_SERVICE_REMOVED (WM_APP + 107)

#define	WM_PH_SERVICES_UPDATED (WM_APP + 108)

#define	WM_PH_NETWORK_ITEM_ADDED (WM_APP + 109)

#define	WM_PH_NETWORK_ITEM_MODIFIED (WM_APP + 110)

#define	WM_PH_NETWORK_ITEM_REMOVED (WM_APP + 111)

#define	WM_PH_NETWORK_ITEMS_UPDATED (WM_APP + 112)

#define	WM_PH_SHOW_PROCESS_PROPERTIES (WM_APP + 120)

#define	WM_PH_DESTROY (WM_APP + 121)

#define	WM_PH_SAVE_ALL_SETTINGS (WM_APP + 122)

#define	WM_PH_PREPARE_FOR_EARLY_SHUTDOWN (WM_APP + 123)

#define	WM_PH_CANCEL_EARLY_SHUTDOWN (WM_APP + 124)

#define	WM_PH_DELAYED_LOAD_COMPLETED (WM_APP + 125)

#define	WM_PH_NOTIFY_ICON_MESSAGE (WM_APP + 126)

#define	WM_PH_TOGGLE_VISIBLE (WM_APP + 127)

#define	WM_PH_SHOW_MEMORY_EDITOR (WM_APP + 128)

#define	WM_PH_SHOW_MEMORY_RESULTS (WM_APP + 129)

#define	WM_PH_SELECT_TAB_PAGE (WM_APP + 130)

#define	WM_PH_GET_CALLBACK_LAYOUT_PADDING (WM_APP + 131)

#define	WM_PH_INVALIDATE_LAYOUT_PADDING (WM_APP + 132)

#define	WM_PH_SELECT_PROCESS_NODE (WM_APP + 133)

#define	WM_PH_SELECT_SERVICE_ITEM (WM_APP + 134)

#define	WM_PH_SELECT_NETWORK_ITEM (WM_APP + 135)

#define	WM_PH_UPDATE_FONT (WM_APP + 136)

#define	WM_PH_GET_FONT (WM_APP + 137)

#define	WM_PH_INVOKE (WM_APP + 138)

#define	WM_PH_ADD_MENU_ITEM (WM_APP + 139)

#define	WM_PH_ADD_TAB_PAGE (WM_APP + 140)

#define	WM_PH_REFRESH (WM_APP + 141)

#define	WM_PH_GET_UPDATE_AUTOMATICALLY (WM_APP + 142)

#define	WM_PH_SET_UPDATE_AUTOMATICALLY (WM_APP + 143)

#define	WM_PH_ICON_CLICK (WM_APP + 144)

#define	WM_PH_LAST (WM_APP + 144)

#define	ProcessHacker_ShowProcessProperties(hWnd, ProcessItem) SendMessage(hWnd, WM_PH_SHOW_PROCESS_PROPERTIES, 0, (LPARAM)(ProcessItem))

#define	ProcessHacker_Destroy(hWnd) SendMessage(hWnd, WM_PH_DESTROY, 0, 0)

#define	ProcessHacker_SaveAllSettings(hWnd) SendMessage(hWnd, WM_PH_SAVE_ALL_SETTINGS, 0, 0)

#define	ProcessHacker_PrepareForEarlyShutdown(hWnd) SendMessage(hWnd, WM_PH_PREPARE_FOR_EARLY_SHUTDOWN, 0, 0)

#define	ProcessHacker_CancelEarlyShutdown(hWnd) SendMessage(hWnd, WM_PH_CANCEL_EARLY_SHUTDOWN, 0, 0)

#define	ProcessHacker_ToggleVisible(hWnd, AlwaysShow) SendMessage(hWnd, WM_PH_TOGGLE_VISIBLE, (WPARAM)(AlwaysShow), 0)

#define	ProcessHacker_ShowMemoryEditor(hWnd, ShowMemoryEditor) PostMessage(hWnd, WM_PH_SHOW_MEMORY_EDITOR, 0, (LPARAM)(ShowMemoryEditor))

#define	ProcessHacker_ShowMemoryResults(hWnd, ShowMemoryResults) PostMessage(hWnd, WM_PH_SHOW_MEMORY_RESULTS, 0, (LPARAM)(ShowMemoryResults))

#define	ProcessHacker_SelectTabPage(hWnd, Index) SendMessage(hWnd, WM_PH_SELECT_TAB_PAGE, (WPARAM)(Index), 0)

#define	ProcessHacker_GetCallbackLayoutPadding(hWnd) ((PPH_CALLBACK)SendMessage(hWnd, WM_PH_GET_CALLBACK_LAYOUT_PADDING, 0, 0))

#define	ProcessHacker_InvalidateLayoutPadding(hWnd) SendMessage(hWnd, WM_PH_INVALIDATE_LAYOUT_PADDING, 0, 0)

#define	ProcessHacker_SelectProcessNode(hWnd, ProcessNode) SendMessage(hWnd, WM_PH_SELECT_PROCESS_NODE, 0, (LPARAM)(ProcessNode))

#define	ProcessHacker_SelectServiceItem(hWnd, ServiceItem) SendMessage(hWnd, WM_PH_SELECT_SERVICE_ITEM, 0, (LPARAM)(ServiceItem))

#define	ProcessHacker_SelectNetworkItem(hWnd, NetworkItem) SendMessage(hWnd, WM_PH_SELECT_NETWORK_ITEM, 0, (LPARAM)(NetworkItem))

#define	ProcessHacker_Invoke(hWnd, Function, Parameter) PostMessage(hWnd, WM_PH_INVOKE, (WPARAM)(Parameter), (LPARAM)(Function))

#define	ProcessHacker_AddMenuItem(hWnd, AddMenuItem) ((ULONG_PTR)SendMessage(hWnd, WM_PH_ADD_MENU_ITEM, 0, (LPARAM)(AddMenuItem)))

#define	ProcessHacker_AddTabPage(hWnd, TabPage) ((PPH_ADDITIONAL_TAB_PAGE)SendMessage(hWnd, WM_PH_ADD_TAB_PAGE, 0, (LPARAM)(TabPage)))

#define	ProcessHacker_Refresh(hWnd) SendMessage(hWnd, WM_PH_REFRESH, 0, 0)

#define	ProcessHacker_GetUpdateAutomatically(hWnd) ((BOOLEAN)SendMessage(hWnd, WM_PH_GET_UPDATE_AUTOMATICALLY, 0, 0))

#define	ProcessHacker_SetUpdateAutomatically(hWnd, Value) SendMessage(hWnd, WM_PH_SET_UPDATE_AUTOMATICALLY, (WPARAM)(Value), 0)

#define	ProcessHacker_IconClick(hWnd) SendMessage(hWnd, WM_PH_ICON_CLICK, 0, 0)

#define	PH_NOTIFY_MINIMUM 0x1

#define	PH_NOTIFY_PROCESS_CREATE 0x1

#define	PH_NOTIFY_PROCESS_DELETE 0x2

#define	PH_NOTIFY_SERVICE_CREATE 0x4

#define	PH_NOTIFY_SERVICE_DELETE 0x8

#define	PH_NOTIFY_SERVICE_START 0x10

#define	PH_NOTIFY_SERVICE_STOP 0x20

#define	PH_NOTIFY_MAXIMUM 0x40

#define	PH_NOTIFY_VALID_MASK 0x3f

#define	PH_PROCESS_PROPCONTEXT_MAXPAGES 20

#define	PH_PROP_PAGE_TAB_CONTROL_PARENT ((PPH_LAYOUT_ITEM)0x1)

#define	PH_LOG_ENTRY_PROCESS_FIRST 1

#define	PH_LOG_ENTRY_PROCESS_CREATE 1

#define	PH_LOG_ENTRY_PROCESS_DELETE 2

#define	PH_LOG_ENTRY_PROCESS_LAST 2

#define	PH_LOG_ENTRY_SERVICE_FIRST 3

#define	PH_LOG_ENTRY_SERVICE_CREATE 3

#define	PH_LOG_ENTRY_SERVICE_DELETE 4

#define	PH_LOG_ENTRY_SERVICE_START 5

#define	PH_LOG_ENTRY_SERVICE_STOP 6

#define	PH_LOG_ENTRY_SERVICE_CONTINUE 7

#define	PH_LOG_ENTRY_SERVICE_PAUSE 8

#define	PH_LOG_ENTRY_SERVICE_LAST 8

#define	PH_LOG_ENTRY_MESSAGE 9

#define	PH_CONTROL_TYPE_TREE_NEW 1

#define	PH_CHOICE_DIALOG_SAVED_CHOICES 10

#define	PH_CHOICE_DIALOG_CHOICE 0x0

#define	PH_CHOICE_DIALOG_USER_CHOICE 0x1

#define	PH_CHOICE_DIALOG_PASSWORD 0x2

#define	PH_CHOICE_DIALOG_TYPE_MASK 0x3

#define	PH_MEMORY_EDITOR_UNMAP_VIEW_OF_SECTION 0x1

#define	WM_PH_SET_LIST_VIEW_SETTINGS (WM_APP + 701)

Typedefs
typedef struct _PH_SYMBOL_PROVIDER *	PPH_SYMBOL_PROVIDER

typedef struct _PH_STARTUP_PARAMETERS	PH_STARTUP_PARAMETERS

typedef struct _PH_STARTUP_PARAMETERS *	PPH_STARTUP_PARAMETERS

typedef BOOLEAN(NTAPI *	PPH_MESSAGE_LOOP_FILTER )(_In_ PMSG Message, _In_ PVOID Context)

typedef struct _PH_MESSAGE_LOOP_FILTER_ENTRY	PH_MESSAGE_LOOP_FILTER_ENTRY

typedef struct _PH_MESSAGE_LOOP_FILTER_ENTRY *	PPH_MESSAGE_LOOP_FILTER_ENTRY

typedef struct PACKAGE_ID	PACKAGE_ID

typedef enum _PH_KNOWN_PROCESS_TYPE	PH_KNOWN_PROCESS_TYPE

typedef union _PH_KNOWN_PROCESS_COMMAND_LINE	PH_KNOWN_PROCESS_COMMAND_LINE

typedef union _PH_KNOWN_PROCESS_COMMAND_LINE *	PPH_KNOWN_PROCESS_COMMAND_LINE

typedef struct mxml_node_s	mxml_node_t

typedef struct _PH_TN_COLUMN_MENU_DATA	PH_TN_COLUMN_MENU_DATA

typedef struct _PH_TN_COLUMN_MENU_DATA *	PPH_TN_COLUMN_MENU_DATA

typedef struct _PH_TN_FILTER_SUPPORT	PH_TN_FILTER_SUPPORT

typedef struct _PH_TN_FILTER_SUPPORT *	PPH_TN_FILTER_SUPPORT

typedef BOOLEAN(NTAPI *	PPH_TN_FILTER_FUNCTION )(_In_ PPH_TREENEW_NODE Node, _In_opt_ PVOID Context)

typedef struct _PH_TN_FILTER_ENTRY	PH_TN_FILTER_ENTRY

typedef struct _PH_TN_FILTER_ENTRY *	PPH_TN_FILTER_ENTRY

typedef struct _PH_COPY_CELL_CONTEXT	PH_COPY_CELL_CONTEXT

typedef struct _PH_COPY_CELL_CONTEXT *	PPH_COPY_CELL_CONTEXT

typedef struct _PH_SHOWMEMORYEDITOR	PH_SHOWMEMORYEDITOR

typedef struct _PH_SHOWMEMORYEDITOR *	PPH_SHOWMEMORYEDITOR

typedef struct _PH_SHOWMEMORYRESULTS	PH_SHOWMEMORYRESULTS

typedef struct _PH_SHOWMEMORYRESULTS *	PPH_SHOWMEMORYRESULTS

typedef struct _PH_LAYOUT_PADDING_DATA	PH_LAYOUT_PADDING_DATA

typedef struct _PH_LAYOUT_PADDING_DATA *	PPH_LAYOUT_PADDING_DATA

typedef struct _PH_ADDMENUITEM	PH_ADDMENUITEM

typedef struct _PH_ADDMENUITEM *	PPH_ADDMENUITEM

typedef HWND(NTAPI *	PPH_TAB_PAGE_CREATE_FUNCTION )(_In_ PVOID Context)

typedef VOID(NTAPI *	PPH_TAB_PAGE_CALLBACK_FUNCTION )(_In_ PVOID Parameter1, _In_ PVOID Parameter2, _In_ PVOID Parameter3, _In_ PVOID Context)

typedef struct _PH_ADDITIONAL_TAB_PAGE	PH_ADDITIONAL_TAB_PAGE

typedef struct _PH_ADDITIONAL_TAB_PAGE *	PPH_ADDITIONAL_TAB_PAGE

typedef struct _PH_PROCESS_PROPCONTEXT *	PPH_PROCESS_PROPCONTEXT

typedef struct _PH_PROCESS_PROPCONTEXT	PH_PROCESS_PROPCONTEXT

typedef struct _PH_PROCESS_PROPPAGECONTEXT	PH_PROCESS_PROPPAGECONTEXT

typedef struct _PH_PROCESS_PROPPAGECONTEXT *	PPH_PROCESS_PROPPAGECONTEXT

typedef struct _PH_LOG_ENTRY *	PPH_LOG_ENTRY

typedef struct _PH_LOG_ENTRY	PH_LOG_ENTRY

typedef enum _PH_ACTION_ELEVATION_LEVEL	PH_ACTION_ELEVATION_LEVEL

typedef enum _PH_PHSVC_MODE	PH_PHSVC_MODE

typedef struct _PH_RUNAS_SERVICE_PARAMETERS	PH_RUNAS_SERVICE_PARAMETERS

typedef struct _PH_RUNAS_SERVICE_PARAMETERS *	PPH_RUNAS_SERVICE_PARAMETERS

Enumerations
enum	_PH_KNOWN_PROCESS_TYPE { UnknownProcessType, SystemProcessType, SessionManagerProcessType, WindowsSubsystemProcessType, WindowsStartupProcessType, ServiceControlManagerProcessType, LocalSecurityAuthorityProcessType, LocalSessionManagerProcessType, WindowsLogonProcessType, ServiceHostProcessType, RunDllAsAppProcessType, ComSurrogateProcessType, TaskHostProcessType, ExplorerProcessType, UmdfHostProcessType, MaximumProcessType, KnownProcessTypeMask = 0xffff, KnownProcessWow64 = 0x20000, UnknownProcessType, SystemProcessType, SessionManagerProcessType, WindowsSubsystemProcessType, WindowsStartupProcessType, ServiceControlManagerProcessType, LocalSecurityAuthorityProcessType, LocalSessionManagerProcessType, WindowsLogonProcessType, ServiceHostProcessType, RunDllAsAppProcessType, ComSurrogateProcessType, TaskHostProcessType, ExplorerProcessType, UmdfHostProcessType, MaximumProcessType, KnownProcessTypeMask = 0xffff, KnownProcessWow64 = 0x20000 }

enum	_PH_ACTION_ELEVATION_LEVEL { NeverElevateAction = 0, PromptElevateAction = 1, AlwaysElevateAction = 2 }

enum	_PH_PHSVC_MODE { ElevatedPhSvcMode, Wow64PhSvcMode, ElevatedPhSvcMode, Wow64PhSvcMode }

Functions
PHAPPAPI VOID NTAPI	PhRegisterDialog (_In_ HWND DialogWindowHandle)

PHAPPAPI VOID NTAPI	PhUnregisterDialog (_In_ HWND DialogWindowHandle)

PHAPPAPI struct _PH_MESSAGE_LOOP_FILTER_ENTRY *NTAPI	PhRegisterMessageLoopFilter (_In_ PPH_MESSAGE_LOOP_FILTER Filter, _In_opt_ PVOID Context)

PHAPPAPI VOID NTAPI	PhUnregisterMessageLoopFilter (_In_ struct _PH_MESSAGE_LOOP_FILTER_ENTRY *FilterEntry)

VOID	PhInitializeFont (_In_ HWND hWnd)

PHAPPAPI BOOLEAN NTAPI	PhGetProcessIsSuspended (_In_ PSYSTEM_PROCESS_INFORMATION Process)
	Determines whether a process is suspended.

NTSTATUS	PhGetProcessSwitchContext (_In_ HANDLE ProcessHandle, _Out_ PGUID Guid)
	Determines the OS compatibility context of a process.

PPH_STRING	PhGetProcessPackageFullName (_In_ HANDLE ProcessHandle)

PACKAGE_ID *	PhPackageIdFromFullName (_In_ PWSTR PackageFullName)

PPH_STRING	PhGetPackagePath (_In_ PACKAGE_ID *PackageId)

PHAPPAPI NTSTATUS NTAPI	PhGetProcessKnownType (_In_ HANDLE ProcessHandle, _Out_ PH_KNOWN_PROCESS_TYPE *KnownProcessType)
	Determines the type of a process based on its image file name.

PHAPPAPI BOOLEAN NTAPI	PhaGetProcessKnownCommandLine (_In_ PPH_STRING CommandLine, _In_ PH_KNOWN_PROCESS_TYPE KnownProcessType, _Out_ PPH_KNOWN_PROCESS_COMMAND_LINE KnownCommandLine)

VOID	PhEnumChildWindows (_In_opt_ HWND hWnd, _In_ ULONG Limit, _In_ WNDENUMPROC Callback, _In_ LPARAM lParam)

HWND	PhGetProcessMainWindow (_In_ HANDLE ProcessId, _In_opt_ HANDLE ProcessHandle)

PPH_STRING	PhGetServiceRelevantFileName (_In_ PPH_STRINGREF ServiceName, _In_ SC_HANDLE ServiceHandle)

PPH_STRING	PhEscapeStringForDelimiter (_In_ PPH_STRING String, _In_ WCHAR Delimiter)

PPH_STRING	PhUnescapeStringForDelimiter (_In_ PPH_STRING String, _In_ WCHAR Delimiter)

PPH_STRING	PhGetOpaqueXmlNodeText (_In_ mxml_node_t *node)

PHAPPAPI VOID NTAPI	PhSearchOnlineString (_In_ HWND hWnd, _In_ PWSTR String)

PHAPPAPI VOID NTAPI	PhShellExecuteUserString (_In_ HWND hWnd, _In_ PWSTR Setting, _In_ PWSTR String, _In_ BOOLEAN UseShellExecute, _In_opt_ PWSTR ErrorMessage)

PHAPPAPI VOID NTAPI	PhLoadSymbolProviderOptions (_Inout_ PPH_SYMBOL_PROVIDER SymbolProvider)

PWSTR	PhMakeContextAtom (VOID)

PHAPPAPI VOID NTAPI	PhCopyListViewInfoTip (_Inout_ LPNMLVGETINFOTIP GetInfoTip, _In_ PPH_STRINGREF Tip)
	Copies a string into a NMLVGETINFOTIP structure.

PHAPPAPI VOID NTAPI	PhCopyListView (_In_ HWND ListViewHandle)

PHAPPAPI VOID	PhHandleListViewNotifyForCopy (_In_ LPARAM lParam, _In_ HWND ListViewHandle)

VOID	PhHandleListViewNotifyBehaviors (_In_ LPARAM lParam, _In_ HWND ListViewHandle, _In_ ULONG Behaviors)

PHAPPAPI BOOLEAN NTAPI	PhGetListViewContextMenuPoint (_In_ HWND ListViewHandle, _Out_ PPOINT Point)

HFONT	PhDuplicateFontWithNewWeight (_In_ HFONT Font, _In_ LONG NewWeight)

VOID	PhSetWindowOpacity (_In_ HWND WindowHandle, _In_ ULONG OpacityPercent)

PHAPPAPI VOID NTAPI	PhLoadWindowPlacementFromSetting (_In_opt_ PWSTR PositionSettingName, _In_opt_ PWSTR SizeSettingName, _In_ HWND WindowHandle)

PHAPPAPI VOID NTAPI	PhSaveWindowPlacementToSetting (_In_opt_ PWSTR PositionSettingName, _In_opt_ PWSTR SizeSettingName, _In_ HWND WindowHandle)

PHAPPAPI VOID NTAPI	PhLoadListViewColumnsFromSetting (_In_ PWSTR Name, _In_ HWND ListViewHandle)

PHAPPAPI VOID NTAPI	PhSaveListViewColumnsToSetting (_In_ PWSTR Name, _In_ HWND ListViewHandle)

PHAPPAPI PPH_STRING NTAPI	PhGetPhVersion (VOID)

PHAPPAPI VOID NTAPI	PhGetPhVersionNumbers (_Out_opt_ PULONG MajorVersion, _Out_opt_ PULONG MinorVersion, _Reserved_ PULONG Reserved, _Out_opt_ PULONG RevisionNumber)

PHAPPAPI VOID NTAPI	PhWritePhTextHeader (_Inout_ PPH_FILE_STREAM FileStream)

PHAPPAPI BOOLEAN NTAPI	PhShellProcessHacker (_In_opt_ HWND hWnd, _In_opt_ PWSTR Parameters, _In_ ULONG ShowWindowType, _In_ ULONG Flags, _In_ ULONG AppFlags, _In_opt_ ULONG Timeout, _Out_opt_ PHANDLE ProcessHandle)

BOOLEAN	PhShellProcessHackerEx (_In_opt_ HWND hWnd, _In_opt_ PWSTR FileName, _In_opt_ PWSTR Parameters, _In_ ULONG ShowWindowType, _In_ ULONG Flags, _In_ ULONG AppFlags, _In_opt_ ULONG Timeout, _Out_opt_ PHANDLE ProcessHandle)

BOOLEAN	PhCreateProcessIgnoreIfeoDebugger (_In_ PWSTR FileName)

PHAPPAPI VOID NTAPI	PhInitializeTreeNewColumnMenu (_Inout_ PPH_TN_COLUMN_MENU_DATA Data)

VOID	PhInitializeTreeNewColumnMenuEx (_Inout_ PPH_TN_COLUMN_MENU_DATA Data, _In_ ULONG Flags)

PHAPPAPI BOOLEAN NTAPI	PhHandleTreeNewColumnMenu (_Inout_ PPH_TN_COLUMN_MENU_DATA Data)

PHAPPAPI VOID NTAPI	PhDeleteTreeNewColumnMenu (_In_ PPH_TN_COLUMN_MENU_DATA Data)

PHAPPAPI VOID NTAPI	PhInitializeTreeNewFilterSupport (_Out_ PPH_TN_FILTER_SUPPORT Support, _In_ HWND TreeNewHandle, _In_ PPH_LIST NodeList)

PHAPPAPI VOID NTAPI	PhDeleteTreeNewFilterSupport (_In_ PPH_TN_FILTER_SUPPORT Support)

PHAPPAPI PPH_TN_FILTER_ENTRY NTAPI	PhAddTreeNewFilter (_In_ PPH_TN_FILTER_SUPPORT Support, _In_ PPH_TN_FILTER_FUNCTION Filter, _In_opt_ PVOID Context)

PHAPPAPI VOID NTAPI	PhRemoveTreeNewFilter (_In_ PPH_TN_FILTER_SUPPORT Support, _In_ PPH_TN_FILTER_ENTRY Entry)

PHAPPAPI BOOLEAN NTAPI	PhApplyTreeNewFiltersToNode (_In_ PPH_TN_FILTER_SUPPORT Support, _In_ PPH_TREENEW_NODE Node)

PHAPPAPI VOID NTAPI	PhApplyTreeNewFilters (_In_ PPH_TN_FILTER_SUPPORT Support)

BOOLEAN	PhInsertCopyCellEMenuItem (_In_ struct _PH_EMENU_ITEM *Menu, _In_ ULONG InsertAfterId, _In_ HWND TreeNewHandle, _In_ PPH_TREENEW_COLUMN Column)

BOOLEAN	PhHandleCopyCellEMenuItem (_In_ struct _PH_EMENU_ITEM *SelectedItem)

BOOLEAN	PhShellOpenKey2 (_In_ HWND hWnd, _In_ PPH_STRING KeyName)
	Opens a key in the Registry Editor.

FORCEINLINE PVOID	PhpGenericPropertyPageHeader (_In_ HWND hwndDlg, _In_ UINT uMsg, _In_ WPARAM wParam, _In_ LPARAM lParam, _In_ PWSTR ContextName)

BOOLEAN	PhMainWndInitialization (_In_ INT ShowCommand)

VOID	PhLoadDbgHelpFromPath (_In_ PWSTR DbgHelpPath)

VOID	PhAddMiniProcessMenuItems (_Inout_ struct _PH_EMENU_ITEM *Menu, _In_ HANDLE ProcessId)

BOOLEAN	PhHandleMiniProcessMenuItem (_Inout_ struct _PH_EMENU_ITEM *MenuItem)

VOID	PhShowIconContextMenu (_In_ POINT Location)

PHAPPAPI VOID NTAPI	PhShowIconNotification (_In_ PWSTR Title, _In_ PWSTR Text, _In_ ULONG Flags)

VOID	PhShowDetailsForIconNotification (VOID)

VOID	PhShowProcessContextMenu (_In_ PPH_TREENEW_CONTEXT_MENU ContextMenu)

VOID	PhShowServiceContextMenu (_In_ PPH_TREENEW_CONTEXT_MENU ContextMenu)

VOID	PhShowNetworkContextMenu (_In_ PPH_TREENEW_CONTEXT_MENU ContextMenu)

VOID	PhPluginsInitialization (VOID)

BOOLEAN	PhIsPluginDisabled (_In_ PPH_STRINGREF BaseName)

VOID	PhSetPluginDisabled (_In_ PPH_STRINGREF BaseName, _In_ BOOLEAN Disable)

VOID	PhLoadPlugins (VOID)
	Loads plugins from the default plugins directory.

VOID	PhUnloadPlugins (VOID)
	Notifies all plugins that the program is shutting down.

struct _PH_PLUGIN *	PhFindPlugin2 (_In_ PPH_STRINGREF Name)
	Locates a plugin instance structure.

BOOLEAN	PhProcessPropInitialization (VOID)

PHAPPAPI PPH_PROCESS_PROPCONTEXT NTAPI	PhCreateProcessPropContext (_In_ HWND ParentWindowHandle, _In_ PPH_PROCESS_ITEM ProcessItem)

VOID	PhRefreshProcessPropContext (_Inout_ PPH_PROCESS_PROPCONTEXT PropContext)

PHAPPAPI VOID NTAPI	PhSetSelectThreadIdProcessPropContext (_Inout_ PPH_PROCESS_PROPCONTEXT PropContext, _In_ HANDLE ThreadId)

PHAPPAPI BOOLEAN NTAPI	PhAddProcessPropPage (_Inout_ PPH_PROCESS_PROPCONTEXT PropContext, _In_ _Assume_refs_(1) PPH_PROCESS_PROPPAGECONTEXT PropPageContext)

PHAPPAPI BOOLEAN NTAPI	PhAddProcessPropPage2 (_Inout_ PPH_PROCESS_PROPCONTEXT PropContext, _In_ HPROPSHEETPAGE PropSheetPageHandle)

PHAPPAPI PPH_PROCESS_PROPPAGECONTEXT NTAPI	PhCreateProcessPropPageContext (_In_ LPCWSTR Template, _In_ DLGPROC DlgProc, _In_opt_ PVOID Context)

PHAPPAPI PPH_PROCESS_PROPPAGECONTEXT NTAPI	PhCreateProcessPropPageContextEx (_In_opt_ PVOID InstanceHandle, _In_ LPCWSTR Template, _In_ DLGPROC DlgProc, _In_opt_ PVOID Context)

PHAPPAPI BOOLEAN NTAPI	PhPropPageDlgProcHeader (_In_ HWND hwndDlg, _In_ UINT uMsg, _In_ LPARAM lParam, _Out_ LPPROPSHEETPAGE PropSheetPage, _Out_ PPH_PROCESS_PROPPAGECONTEXT PropPageContext, _Out_ PPH_PROCESS_ITEM *ProcessItem)

PHAPPAPI VOID NTAPI	PhPropPageDlgProcDestroy (_In_ HWND hwndDlg)

PHAPPAPI PPH_LAYOUT_ITEM NTAPI	PhAddPropPageLayoutItem (_In_ HWND hwnd, _In_ HWND Handle, _In_ PPH_LAYOUT_ITEM ParentItem, _In_ ULONG Anchor)

PHAPPAPI VOID NTAPI	PhDoPropPageLayout (_In_ HWND hwnd)

FORCEINLINE PPH_LAYOUT_ITEM	PhBeginPropPageLayout (_In_ HWND hwndDlg, _In_ PPH_PROCESS_PROPPAGECONTEXT PropPageContext)

FORCEINLINE VOID	PhEndPropPageLayout (_In_ HWND hwndDlg, _In_ PPH_PROCESS_PROPPAGECONTEXT PropPageContext)

PHAPPAPI BOOLEAN NTAPI	PhShowProcessProperties (_In_ PPH_PROCESS_PROPCONTEXT Context)

VOID	PhLogInitialization (VOID)

VOID	PhClearLogEntries (VOID)

VOID	PhLogProcessEntry (_In_ UCHAR Type, _In_ HANDLE ProcessId, _In_ PPH_STRING Name, _In_opt_ HANDLE ParentProcessId, _In_opt_ PPH_STRING ParentName)

VOID	PhLogServiceEntry (_In_ UCHAR Type, _In_ PPH_STRING Name, _In_ PPH_STRING DisplayName)

PHAPPAPI VOID NTAPI	PhLogMessageEntry (_In_ UCHAR Type, _In_ PPH_STRING Message)

PHAPPAPI PPH_STRING NTAPI	PhFormatLogEntry (_In_ PPH_LOG_ENTRY Entry)

VOID	PhShowDebugConsole (VOID)

PHAPPAPI BOOLEAN NTAPI	PhUiConnectToPhSvc (_In_opt_ HWND hWnd, _In_ BOOLEAN ConnectOnly)
	Connects to phsvc.

PHAPPAPI BOOLEAN NTAPI	PhUiConnectToPhSvcEx (_In_opt_ HWND hWnd, _In_ PH_PHSVC_MODE Mode, _In_ BOOLEAN ConnectOnly)
	Connects to phsvc.

PHAPPAPI VOID NTAPI	PhUiDisconnectFromPhSvc (VOID)
	Disconnects from phsvc.

PHAPPAPI BOOLEAN NTAPI	PhUiLockComputer (_In_ HWND hWnd)

PHAPPAPI BOOLEAN NTAPI	PhUiLogoffComputer (_In_ HWND hWnd)

PHAPPAPI BOOLEAN NTAPI	PhUiSleepComputer (_In_ HWND hWnd)

PHAPPAPI BOOLEAN NTAPI	PhUiHibernateComputer (_In_ HWND hWnd)

PHAPPAPI BOOLEAN NTAPI	PhUiRestartComputer (_In_ HWND hWnd, _In_ ULONG Flags)

PHAPPAPI BOOLEAN NTAPI	PhUiShutdownComputer (_In_ HWND hWnd, _In_ ULONG Flags)

PHAPPAPI BOOLEAN NTAPI	PhUiConnectSession (_In_ HWND hWnd, _In_ ULONG SessionId)

PHAPPAPI BOOLEAN NTAPI	PhUiDisconnectSession (_In_ HWND hWnd, _In_ ULONG SessionId)

PHAPPAPI BOOLEAN NTAPI	PhUiLogoffSession (_In_ HWND hWnd, _In_ ULONG SessionId)

PHAPPAPI BOOLEAN NTAPI	PhUiTerminateProcesses (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM *Processes, _In_ ULONG NumberOfProcesses)

PHAPPAPI BOOLEAN NTAPI	PhUiTerminateTreeProcess (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM Process)

PHAPPAPI BOOLEAN NTAPI	PhUiSuspendProcesses (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM *Processes, _In_ ULONG NumberOfProcesses)

PHAPPAPI BOOLEAN NTAPI	PhUiResumeProcesses (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM *Processes, _In_ ULONG NumberOfProcesses)

PHAPPAPI BOOLEAN NTAPI	PhUiRestartProcess (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM Process)

PHAPPAPI BOOLEAN NTAPI	PhUiDebugProcess (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM Process)

PHAPPAPI BOOLEAN NTAPI	PhUiReduceWorkingSetProcesses (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM *Processes, _In_ ULONG NumberOfProcesses)

PHAPPAPI BOOLEAN NTAPI	PhUiSetVirtualizationProcess (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM Process, _In_ BOOLEAN Enable)

PHAPPAPI BOOLEAN NTAPI	PhUiDetachFromDebuggerProcess (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM Process)

PHAPPAPI BOOLEAN NTAPI	PhUiInjectDllProcess (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM Process)

PHAPPAPI BOOLEAN NTAPI	PhUiSetIoPriorityProcesses (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM *Processes, _In_ ULONG NumberOfProcesses, _In_ ULONG IoPriority)

PHAPPAPI BOOLEAN NTAPI	PhUiSetPagePriorityProcess (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM Process, _In_ ULONG PagePriority)

PHAPPAPI BOOLEAN NTAPI	PhUiSetPriorityProcesses (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM *Processes, _In_ ULONG NumberOfProcesses, _In_ ULONG PriorityClass)

PHAPPAPI BOOLEAN NTAPI	PhUiSetDepStatusProcess (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM Process)

PHAPPAPI BOOLEAN NTAPI	PhUiStartService (_In_ HWND hWnd, _In_ PPH_SERVICE_ITEM Service)

PHAPPAPI BOOLEAN NTAPI	PhUiContinueService (_In_ HWND hWnd, _In_ PPH_SERVICE_ITEM Service)

PHAPPAPI BOOLEAN NTAPI	PhUiPauseService (_In_ HWND hWnd, _In_ PPH_SERVICE_ITEM Service)

PHAPPAPI BOOLEAN NTAPI	PhUiStopService (_In_ HWND hWnd, _In_ PPH_SERVICE_ITEM Service)

PHAPPAPI BOOLEAN NTAPI	PhUiDeleteService (_In_ HWND hWnd, _In_ PPH_SERVICE_ITEM Service)

PHAPPAPI BOOLEAN NTAPI	PhUiCloseConnections (_In_ HWND hWnd, _In_ PPH_NETWORK_ITEM *Connections, _In_ ULONG NumberOfConnections)

PHAPPAPI BOOLEAN NTAPI	PhUiTerminateThreads (_In_ HWND hWnd, _In_ PPH_THREAD_ITEM *Threads, _In_ ULONG NumberOfThreads)

PHAPPAPI BOOLEAN NTAPI	PhUiForceTerminateThreads (_In_ HWND hWnd, _In_ HANDLE ProcessId, _In_ PPH_THREAD_ITEM *Threads, _In_ ULONG NumberOfThreads)

PHAPPAPI BOOLEAN NTAPI	PhUiSuspendThreads (_In_ HWND hWnd, _In_ PPH_THREAD_ITEM *Threads, _In_ ULONG NumberOfThreads)

PHAPPAPI BOOLEAN NTAPI	PhUiResumeThreads (_In_ HWND hWnd, _In_ PPH_THREAD_ITEM *Threads, _In_ ULONG NumberOfThreads)

PHAPPAPI BOOLEAN NTAPI	PhUiSetPriorityThread (_In_ HWND hWnd, _In_ PPH_THREAD_ITEM Thread, _In_ ULONG ThreadPriorityWin32)

PHAPPAPI BOOLEAN NTAPI	PhUiSetIoPriorityThread (_In_ HWND hWnd, _In_ PPH_THREAD_ITEM Thread, _In_ ULONG IoPriority)

PHAPPAPI BOOLEAN NTAPI	PhUiSetPagePriorityThread (_In_ HWND hWnd, _In_ PPH_THREAD_ITEM Thread, _In_ ULONG PagePriority)

PHAPPAPI BOOLEAN NTAPI	PhUiUnloadModule (_In_ HWND hWnd, _In_ HANDLE ProcessId, _In_ PPH_MODULE_ITEM Module)

PHAPPAPI BOOLEAN NTAPI	PhUiFreeMemory (_In_ HWND hWnd, _In_ HANDLE ProcessId, _In_ PPH_MEMORY_ITEM MemoryItem, _In_ BOOLEAN Free)

PHAPPAPI BOOLEAN NTAPI	PhUiCloseHandles (_In_ HWND hWnd, _In_ HANDLE ProcessId, _In_ PPH_HANDLE_ITEM *Handles, _In_ ULONG NumberOfHandles, _In_ BOOLEAN Warn)

PHAPPAPI BOOLEAN NTAPI	PhUiSetAttributesHandle (_In_ HWND hWnd, _In_ HANDLE ProcessId, _In_ PPH_HANDLE_ITEM Handle, _In_ ULONG Attributes)

PPH_STRING	PhGetProcessTooltipText (_In_ PPH_PROCESS_ITEM Process, _Out_opt_ PULONG ValidToTickCount)

PPH_STRING	PhGetServiceTooltipText (_In_ PPH_SERVICE_ITEM Service)

NTSTATUS	PhCommandModeStart (VOID)

VOID	PhUiAnalyzeWaitThread (_In_ HWND hWnd, _In_ HANDLE ProcessId, _In_ HANDLE ThreadId, _In_ PPH_SYMBOL_PROVIDER SymbolProvider)

BOOLEAN	PhUiCreateDumpFileProcess (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM Process)

VOID	PhShowAboutDialog (_In_ HWND ParentWindowHandle)

PPH_STRING	PhGetDiagnosticsString (VOID)

VOID	PhShowProcessAffinityDialog (_In_ HWND ParentWindowHandle, _In_opt_ PPH_PROCESS_ITEM ProcessItem, _In_opt_ PPH_THREAD_ITEM ThreadItem)

PHAPPAPI BOOLEAN NTAPI	PhShowProcessAffinityDialog2 (_In_ HWND ParentWindowHandle, _In_ ULONG_PTR AffinityMask, _Out_ PULONG_PTR NewAffinityMask)

VOID	PhShowChooseColumnsDialog (_In_ HWND ParentWindowHandle, _In_ HWND ControlHandle, _In_ ULONG Type)

PHAPPAPI BOOLEAN NTAPI	PhaChoiceDialog (_In_ HWND ParentWindowHandle, _In_ PWSTR Title, _In_ PWSTR Message, _In_opt_ PWSTR Choices, _In_opt_ ULONG NumberOfChoices, _In_opt_ PWSTR Option, _In_ ULONG Flags, _Inout_ PPH_STRING SelectedChoice, _Inout_opt_ PBOOLEAN SelectedOption, _In_opt_ PWSTR SavedChoicesSettingName)
	Prompts the user for input.

PHAPPAPI BOOLEAN NTAPI	PhShowChooseProcessDialog (_In_ HWND ParentWindowHandle, _In_ PWSTR Message, _Out_ PHANDLE ProcessId)

VOID	PhShowFindObjectsDialog (VOID)

VOID	PhShowGdiHandlesDialog (_In_ HWND ParentWindowHandle, _In_ PPH_PROCESS_ITEM ProcessItem)

VOID	PhShowHiddenProcessesDialog (VOID)

VOID	PhShowHandleProperties (_In_ HWND ParentWindowHandle, _In_ HANDLE ProcessId, _In_ PPH_HANDLE_ITEM HandleItem)

VOID	PhShowHandleStatisticsDialog (_In_ HWND ParentWindowHandle, _In_ HANDLE ProcessId)

VOID	PhShowInformationDialog (_In_ HWND ParentWindowHandle, _In_ PWSTR String)

VOID	PhShowJobProperties (_In_ HWND ParentWindowHandle, _In_ PPH_OPEN_OBJECT OpenObject, _In_opt_ PVOID Context, _In_opt_ PWSTR Title)

HPROPSHEETPAGE	PhCreateJobPage (_In_ PPH_OPEN_OBJECT OpenObject, _In_opt_ PVOID Context, _In_opt_ DLGPROC HookProc)

VOID	PhShowLogDialog (VOID)

VOID	PhShowMemoryEditorDialog (_In_ HANDLE ProcessId, _In_ PVOID BaseAddress, _In_ SIZE_T RegionSize, _In_ ULONG SelectOffset, _In_ ULONG SelectLength, _In_opt_ PPH_STRING Title, _In_ ULONG Flags)

VOID	PhShowMemoryListsDialog (_In_ HWND ParentWindowHandle, _In_opt_ VOID(NTAPI RegisterDialog)(HWND), _In_opt_ VOID(NTAPI UnregisterDialog)(HWND))

VOID	PhShowMemoryProtectDialog (_In_ HWND ParentWindowHandle, _In_ PPH_PROCESS_ITEM ProcessItem, _In_ PPH_MEMORY_ITEM MemoryItem)

VOID	PhShowMemoryResultsDialog (_In_ HANDLE ProcessId, _In_ PPH_LIST Results)

VOID	PhShowMemoryStringDialog (_In_ HWND ParentWindowHandle, _In_ PPH_PROCESS_ITEM ProcessItem)

VOID	PhShowNetworkStackDialog (_In_ HWND ParentWindowHandle, _In_ PPH_NETWORK_ITEM NetworkItem)

HPROPSHEETPAGE	PhCreateEventPage (_In_ PPH_OPEN_OBJECT OpenObject, _In_opt_ PVOID Context)

HPROPSHEETPAGE	PhCreateEventPairPage (_In_ PPH_OPEN_OBJECT OpenObject, _In_opt_ PVOID Context)

HPROPSHEETPAGE	PhCreateMutantPage (_In_ PPH_OPEN_OBJECT OpenObject, _In_opt_ PVOID Context)

HPROPSHEETPAGE	PhCreateSectionPage (_In_ PPH_OPEN_OBJECT OpenObject, _In_opt_ PVOID Context)

HPROPSHEETPAGE	PhCreateSemaphorePage (_In_ PPH_OPEN_OBJECT OpenObject, _In_opt_ PVOID Context)

HPROPSHEETPAGE	PhCreateTimerPage (_In_ PPH_OPEN_OBJECT OpenObject, _In_opt_ PVOID Context)

VOID	PhShowOptionsDialog (_In_ HWND ParentWindowHandle)

VOID	PhShowPagefilesDialog (_In_ HWND ParentWindowHandle)

VOID	PhShowPluginsDialog (_In_ HWND ParentWindowHandle)

PHAPPAPI VOID NTAPI	PhShowProcessRecordDialog (_In_ HWND ParentWindowHandle, _In_ PPH_PROCESS_RECORD Record)

VOID	PhShowRunAsDialog (_In_ HWND ParentWindowHandle, _In_opt_ HANDLE ProcessId)

NTSTATUS	PhExecuteRunAsCommand (_In_ PPH_RUNAS_SERVICE_PARAMETERS Parameters)
	Executes the run-as service.

PHAPPAPI NTSTATUS NTAPI	PhExecuteRunAsCommand2 (_In_ HWND hWnd, _In_ PWSTR Program, _In_opt_ PWSTR UserName, _In_opt_ PWSTR Password, _In_opt_ ULONG LogonType, _In_opt_ HANDLE ProcessIdWithToken, _In_ ULONG SessionId, _In_ PWSTR DesktopName, _In_ BOOLEAN UseLinkedToken)
	Starts a program as another user.

NTSTATUS	PhRunAsServiceStart (_In_ PPH_STRING ServiceName)

NTSTATUS	PhInvokeRunAsService (_In_ PPH_RUNAS_SERVICE_PARAMETERS Parameters)

VOID	PhShowSessionSendMessageDialog (_In_ HWND ParentWindowHandle, _In_ ULONG SessionId)

VOID	PhShowSessionProperties (_In_ HWND ParentWindowHandle, _In_ ULONG SessionId)

VOID	PhShowSessionShadowDialog (_In_ HWND ParentWindowHandle, _In_ ULONG SessionId)

VOID	PhShowCreateServiceDialog (_In_ HWND ParentWindowHandle)

PHAPPAPI HWND NTAPI	PhCreateServiceListControl (_In_ HWND ParentWindowHandle, _In_ PPH_SERVICE_ITEM *Services, _In_ ULONG NumberOfServices)
	Creates a service list property page.

VOID	PhShowServiceProperties (_In_ HWND ParentWindowHandle, _In_ PPH_SERVICE_ITEM ServiceItem)

VOID	PhShowProcessTerminatorDialog (_In_ HWND ParentWindowHandle, _In_ PPH_PROCESS_ITEM ProcessItem)

VOID	PhShowThreadStackDialog (_In_ HWND ParentWindowHandle, _In_ HANDLE ProcessId, _In_ HANDLE ThreadId, _In_ PPH_THREAD_PROVIDER ThreadProvider)

PPH_STRING	PhGetGroupAttributesString (_In_ ULONG Attributes)

PWSTR	PhGetPrivilegeAttributesString (_In_ ULONG Attributes)

VOID	PhShowTokenProperties (_In_ HWND ParentWindowHandle, _In_ PPH_OPEN_OBJECT OpenObject, _In_opt_ PVOID Context, _In_opt_ PWSTR Title)

HPROPSHEETPAGE	PhCreateTokenPage (_In_ PPH_OPEN_OBJECT OpenObject, _In_opt_ PVOID Context, _In_opt_ DLGPROC HookProc)

Variables
PPH_STRING	PhApplicationDirectory

PPH_STRING	PhApplicationFileName

PHAPPAPI HFONT	PhApplicationFont

PPH_STRING	PhCurrentUserName

HINSTANCE	PhInstanceHandle

PPH_STRING	PhLocalSystemName

BOOLEAN	PhPluginsEnabled

PPH_STRING	PhSettingsFileName

PH_INTEGER_PAIR	PhSmallIconSize

PH_INTEGER_PAIR	PhLargeIconSize

PH_STARTUP_PARAMETERS	PhStartupParameters

PH_PROVIDER_THREAD	PhPrimaryProviderThread

PH_PROVIDER_THREAD	PhSecondaryProviderThread

GUID	XP_CONTEXT_GUID

GUID	VISTA_CONTEXT_GUID

GUID	WIN7_CONTEXT_GUID

GUID	WIN8_CONTEXT_GUID

GUID	WINBLUE_CONTEXT_GUID

PHAPPAPI HWND	PhMainWndHandle

BOOLEAN	PhMainWndExiting

PH_AVL_TREE	PhPluginsByName

PH_CIRCULAR_BUFFER_PVOID	PhLogBuffer

PHAPPAPI PH_CALLBACK	PhLoggedCallback

Macro Definition Documentation

#define KPH_ERROR_MESSAGE

Value:

(L"KProcessHacker does not support your operating system " \
            L"or could not be loaded. Make sure Process Hacker is running " \
            L"with administrative privileges.")

Definition at line 21 of file phapp.h.

#define PH_ACTIVATE_REPLY 0x1119

Definition at line 634 of file phapp.h.

#define PH_CHOICE_DIALOG_CHOICE 0x0

Definition at line 1600 of file phapp.h.

#define PH_CHOICE_DIALOG_PASSWORD 0x2

Definition at line 1602 of file phapp.h.

#define PH_CHOICE_DIALOG_SAVED_CHOICES 10

Definition at line 1598 of file phapp.h.

#define PH_CHOICE_DIALOG_TYPE_MASK 0x3

Definition at line 1603 of file phapp.h.

#define PH_CHOICE_DIALOG_USER_CHOICE 0x1

Definition at line 1601 of file phapp.h.

#define PH_CONTROL_TYPE_TREE_NEW 1

Definition at line 1587 of file phapp.h.

#define PH_ID_TO_OPACITY ( Id ) (100 - (((Id) - ID_OPACITY_10) + 1) * 10)

Definition at line 351 of file phapp.h.

#define PH_LIST_VIEW_CTRL_A_BEHAVIOR 0x2

Definition at line 321 of file phapp.h.

#define PH_LIST_VIEW_CTRL_C_BEHAVIOR 0x1

Definition at line 320 of file phapp.h.

#define PH_LIST_VIEW_DEFAULT_1_BEHAVIORS (PH_LIST_VIEW_CTRL_C_BEHAVIOR | PH_LIST_VIEW_CTRL_A_BEHAVIOR)

Definition at line 322 of file phapp.h.

#define PH_LOAD_SHARED_IMAGE	(	Name,
		Type
	)	LoadImage(PhInstanceHandle, (Name), (Type), 0, 0, LR_SHARED)

Definition at line 585 of file phapp.h.

#define PH_LOG_ENTRY_MESSAGE 9

Definition at line 1060 of file phapp.h.

#define PH_LOG_ENTRY_PROCESS_CREATE 1

Definition at line 1047 of file phapp.h.

#define PH_LOG_ENTRY_PROCESS_DELETE 2

Definition at line 1048 of file phapp.h.

#define PH_LOG_ENTRY_PROCESS_FIRST 1

Definition at line 1046 of file phapp.h.

#define PH_LOG_ENTRY_PROCESS_LAST 2

Definition at line 1049 of file phapp.h.

#define PH_LOG_ENTRY_SERVICE_CONTINUE 7

Definition at line 1056 of file phapp.h.

#define PH_LOG_ENTRY_SERVICE_CREATE 3

Definition at line 1052 of file phapp.h.

#define PH_LOG_ENTRY_SERVICE_DELETE 4

Definition at line 1053 of file phapp.h.

#define PH_LOG_ENTRY_SERVICE_FIRST 3

Definition at line 1051 of file phapp.h.

#define PH_LOG_ENTRY_SERVICE_LAST 8

Definition at line 1058 of file phapp.h.

#define PH_LOG_ENTRY_SERVICE_PAUSE 8

Definition at line 1057 of file phapp.h.

#define PH_LOG_ENTRY_SERVICE_START 5

Definition at line 1054 of file phapp.h.

#define PH_LOG_ENTRY_SERVICE_STOP 6

Definition at line 1055 of file phapp.h.

#define PH_MAINWND_CLASSNAME L"ProcessHacker"

Definition at line 625 of file phapp.h.

#define PH_MEMORY_EDITOR_UNMAP_VIEW_OF_SECTION 0x1

Definition at line 1699 of file phapp.h.

#define PH_NOTIFY_MAXIMUM 0x40

Definition at line 797 of file phapp.h.

#define PH_NOTIFY_MINIMUM 0x1

Definition at line 790 of file phapp.h.

#define PH_NOTIFY_PROCESS_CREATE 0x1

Definition at line 791 of file phapp.h.

#define PH_NOTIFY_PROCESS_DELETE 0x2

Definition at line 792 of file phapp.h.

#define PH_NOTIFY_SERVICE_CREATE 0x4

Definition at line 793 of file phapp.h.

#define PH_NOTIFY_SERVICE_DELETE 0x8

Definition at line 794 of file phapp.h.

#define PH_NOTIFY_SERVICE_START 0x10

Definition at line 795 of file phapp.h.

#define PH_NOTIFY_SERVICE_STOP 0x20

Definition at line 796 of file phapp.h.

#define PH_NOTIFY_VALID_MASK 0x3f

Definition at line 798 of file phapp.h.

#define PH_OPACITY_TO_ID ( Opacity ) (ID_OPACITY_10 + (10 - (Opacity) / 10) - 1)

Definition at line 350 of file phapp.h.

#define PH_PROCESS_PROPCONTEXT_MAXPAGES 20

Definition at line 880 of file phapp.h.

#define PH_PROP_PAGE_TAB_CONTROL_PARENT ((PPH_LAYOUT_ITEM)0x1)

Definition at line 988 of file phapp.h.

#define PH_SHELL_APP_PROPAGATE_PARAMETERS 0x1

Definition at line 412 of file phapp.h.

#define PH_SHELL_APP_PROPAGATE_PARAMETERS_FORCE_SETTINGS 0x4

Definition at line 414 of file phapp.h.

#define PH_SHELL_APP_PROPAGATE_PARAMETERS_IGNORE_VISIBILITY 0x2

Definition at line 413 of file phapp.h.

#define PH_TN_COLUMN_MENU_CHOOSE_COLUMNS_ID ((ULONG)-2)

Definition at line 459 of file phapp.h.

#define PH_TN_COLUMN_MENU_HIDE_COLUMN_ID ((ULONG)-1)

Definition at line 458 of file phapp.h.

#define PH_TN_COLUMN_MENU_NO_VISIBILITY 0x1

Definition at line 472 of file phapp.h.

#define PH_TN_COLUMN_MENU_RESET_SORT_ID ((ULONG)-5)

Definition at line 462 of file phapp.h.

#define PH_TN_COLUMN_MENU_SHOW_RESET_SORT 0x2

Definition at line 473 of file phapp.h.

#define PH_TN_COLUMN_MENU_SIZE_ALL_COLUMNS_TO_FIT_ID ((ULONG)-4)

Definition at line 461 of file phapp.h.

#define PH_TN_COLUMN_MENU_SIZE_COLUMN_TO_FIT_ID ((ULONG)-3)

Definition at line 460 of file phapp.h.

#define PHAPPAPI

Definition at line 7 of file phapp.h.

#define ProcessHacker_AddMenuItem	(	hWnd,
		AddMenuItem
	)	((ULONG_PTR)SendMessage(hWnd, WM_PH_ADD_MENU_ITEM, 0, (LPARAM)(AddMenuItem)))

Definition at line 715 of file phapp.h.

#define ProcessHacker_AddTabPage	(	hWnd,
		TabPage
	)	((PPH_ADDITIONAL_TAB_PAGE)SendMessage(hWnd, WM_PH_ADD_TAB_PAGE, 0, (LPARAM)(TabPage)))

Definition at line 717 of file phapp.h.

#define ProcessHacker_CancelEarlyShutdown ( hWnd ) SendMessage(hWnd, WM_PH_CANCEL_EARLY_SHUTDOWN, 0, 0)

Definition at line 693 of file phapp.h.

#define ProcessHacker_Destroy ( hWnd ) SendMessage(hWnd, WM_PH_DESTROY, 0, 0)

Definition at line 687 of file phapp.h.

#define ProcessHacker_GetCallbackLayoutPadding ( hWnd ) ((PPH_CALLBACK)SendMessage(hWnd, WM_PH_GET_CALLBACK_LAYOUT_PADDING, 0, 0))

Definition at line 703 of file phapp.h.

#define ProcessHacker_GetUpdateAutomatically ( hWnd ) ((BOOLEAN)SendMessage(hWnd, WM_PH_GET_UPDATE_AUTOMATICALLY, 0, 0))

Definition at line 721 of file phapp.h.

#define ProcessHacker_IconClick ( hWnd ) SendMessage(hWnd, WM_PH_ICON_CLICK, 0, 0)

Definition at line 726 of file phapp.h.

#define ProcessHacker_InvalidateLayoutPadding ( hWnd ) SendMessage(hWnd, WM_PH_INVALIDATE_LAYOUT_PADDING, 0, 0)

Definition at line 705 of file phapp.h.

#define ProcessHacker_Invoke	(	hWnd,
		Function,
		Parameter
	)	PostMessage(hWnd, WM_PH_INVOKE, (WPARAM)(Parameter), (LPARAM)(Function))

Definition at line 713 of file phapp.h.

#define ProcessHacker_PrepareForEarlyShutdown ( hWnd ) SendMessage(hWnd, WM_PH_PREPARE_FOR_EARLY_SHUTDOWN, 0, 0)

Definition at line 691 of file phapp.h.

#define ProcessHacker_Refresh ( hWnd ) SendMessage(hWnd, WM_PH_REFRESH, 0, 0)

Definition at line 719 of file phapp.h.

#define ProcessHacker_SaveAllSettings ( hWnd ) SendMessage(hWnd, WM_PH_SAVE_ALL_SETTINGS, 0, 0)

Definition at line 689 of file phapp.h.

#define ProcessHacker_SelectNetworkItem	(	hWnd,
		NetworkItem
	)	SendMessage(hWnd, WM_PH_SELECT_NETWORK_ITEM, 0, (LPARAM)(NetworkItem))

Definition at line 711 of file phapp.h.

#define ProcessHacker_SelectProcessNode	(	hWnd,
		ProcessNode
	)	SendMessage(hWnd, WM_PH_SELECT_PROCESS_NODE, 0, (LPARAM)(ProcessNode))

Definition at line 707 of file phapp.h.

#define ProcessHacker_SelectServiceItem	(	hWnd,
		ServiceItem
	)	SendMessage(hWnd, WM_PH_SELECT_SERVICE_ITEM, 0, (LPARAM)(ServiceItem))

Definition at line 709 of file phapp.h.

#define ProcessHacker_SelectTabPage	(	hWnd,
		Index
	)	SendMessage(hWnd, WM_PH_SELECT_TAB_PAGE, (WPARAM)(Index), 0)

Definition at line 701 of file phapp.h.

#define ProcessHacker_SetUpdateAutomatically	(	hWnd,
		Value
	)	SendMessage(hWnd, WM_PH_SET_UPDATE_AUTOMATICALLY, (WPARAM)(Value), 0)

Definition at line 723 of file phapp.h.

#define ProcessHacker_ShowMemoryEditor	(	hWnd,
		ShowMemoryEditor
	)	PostMessage(hWnd, WM_PH_SHOW_MEMORY_EDITOR, 0, (LPARAM)(ShowMemoryEditor))

Definition at line 697 of file phapp.h.

#define ProcessHacker_ShowMemoryResults	(	hWnd,
		ShowMemoryResults
	)	PostMessage(hWnd, WM_PH_SHOW_MEMORY_RESULTS, 0, (LPARAM)(ShowMemoryResults))

Definition at line 699 of file phapp.h.

#define ProcessHacker_ShowProcessProperties	(	hWnd,
		ProcessItem
	)	SendMessage(hWnd, WM_PH_SHOW_PROCESS_PROPERTIES, 0, (LPARAM)(ProcessItem))

Definition at line 685 of file phapp.h.

#define ProcessHacker_ToggleVisible	(	hWnd,
		AlwaysShow
	)	SendMessage(hWnd, WM_PH_TOGGLE_VISIBLE, (WPARAM)(AlwaysShow), 0)

Definition at line 695 of file phapp.h.

#define WM_PH_ACTIVATE (WM_APP + 99)

Definition at line 633 of file phapp.h.

#define WM_PH_ADD_MENU_ITEM (WM_APP + 139)

Definition at line 675 of file phapp.h.

#define WM_PH_ADD_TAB_PAGE (WM_APP + 140)

Definition at line 676 of file phapp.h.

#define WM_PH_CANCEL_EARLY_SHUTDOWN (WM_APP + 124)

Definition at line 656 of file phapp.h.

#define WM_PH_DELAYED_LOAD_COMPLETED (WM_APP + 125)

Definition at line 658 of file phapp.h.

#define WM_PH_DESTROY (WM_APP + 121)

Definition at line 653 of file phapp.h.

#define WM_PH_FIRST (WM_APP + 99)

Definition at line 632 of file phapp.h.

#define WM_PH_GET_CALLBACK_LAYOUT_PADDING (WM_APP + 131)

Definition at line 665 of file phapp.h.

#define WM_PH_GET_FONT (WM_APP + 137)

Definition at line 672 of file phapp.h.

#define WM_PH_GET_UPDATE_AUTOMATICALLY (WM_APP + 142)

Definition at line 678 of file phapp.h.

#define WM_PH_ICON_CLICK (WM_APP + 144)

Definition at line 681 of file phapp.h.

#define WM_PH_INVALIDATE_LAYOUT_PADDING (WM_APP + 132)

Definition at line 666 of file phapp.h.

#define WM_PH_INVOKE (WM_APP + 138)

Definition at line 674 of file phapp.h.

#define WM_PH_LAST (WM_APP + 144)

Definition at line 682 of file phapp.h.

#define WM_PH_NETWORK_ITEM_ADDED (WM_APP + 109)

Definition at line 646 of file phapp.h.

#define WM_PH_NETWORK_ITEM_MODIFIED (WM_APP + 110)

Definition at line 647 of file phapp.h.

#define WM_PH_NETWORK_ITEM_REMOVED (WM_APP + 111)

Definition at line 648 of file phapp.h.

#define WM_PH_NETWORK_ITEMS_UPDATED (WM_APP + 112)

Definition at line 649 of file phapp.h.

#define WM_PH_NOTIFY_ICON_MESSAGE (WM_APP + 126)

Definition at line 659 of file phapp.h.

#define WM_PH_PREPARE_FOR_EARLY_SHUTDOWN (WM_APP + 123)

Definition at line 655 of file phapp.h.

#define WM_PH_PROCESS_ADDED (WM_APP + 101)

Definition at line 636 of file phapp.h.

#define WM_PH_PROCESS_MODIFIED (WM_APP + 102)

Definition at line 637 of file phapp.h.

#define WM_PH_PROCESS_REMOVED (WM_APP + 103)

Definition at line 638 of file phapp.h.

#define WM_PH_PROCESSES_UPDATED (WM_APP + 104)

Definition at line 639 of file phapp.h.

#define WM_PH_REFRESH (WM_APP + 141)

Definition at line 677 of file phapp.h.

#define WM_PH_SAVE_ALL_SETTINGS (WM_APP + 122)

Definition at line 654 of file phapp.h.

#define WM_PH_SELECT_NETWORK_ITEM (WM_APP + 135)

Definition at line 669 of file phapp.h.

#define WM_PH_SELECT_PROCESS_NODE (WM_APP + 133)

Definition at line 667 of file phapp.h.

#define WM_PH_SELECT_SERVICE_ITEM (WM_APP + 134)

Definition at line 668 of file phapp.h.

#define WM_PH_SELECT_TAB_PAGE (WM_APP + 130)

Definition at line 664 of file phapp.h.

#define WM_PH_SERVICE_ADDED (WM_APP + 105)

Definition at line 641 of file phapp.h.

#define WM_PH_SERVICE_MODIFIED (WM_APP + 106)

Definition at line 642 of file phapp.h.

#define WM_PH_SERVICE_REMOVED (WM_APP + 107)

Definition at line 643 of file phapp.h.

#define WM_PH_SERVICES_UPDATED (WM_APP + 108)

Definition at line 644 of file phapp.h.

#define WM_PH_SET_LIST_VIEW_SETTINGS (WM_APP + 701)

Definition at line 1891 of file phapp.h.

#define WM_PH_SET_UPDATE_AUTOMATICALLY (WM_APP + 143)

Definition at line 679 of file phapp.h.

#define WM_PH_SHOW_MEMORY_EDITOR (WM_APP + 128)

Definition at line 662 of file phapp.h.

#define WM_PH_SHOW_MEMORY_RESULTS (WM_APP + 129)

Definition at line 663 of file phapp.h.

#define WM_PH_SHOW_PROCESS_PROPERTIES (WM_APP + 120)

Definition at line 652 of file phapp.h.

#define WM_PH_TOGGLE_VISIBLE (WM_APP + 127)

Definition at line 661 of file phapp.h.

#define WM_PH_UPDATE_FONT (WM_APP + 136)

Definition at line 671 of file phapp.h.

Typedef Documentation

typedef struct mxml_node_s mxml_node_t

Definition at line 259 of file phapp.h.

typedef struct PACKAGE_ID PACKAGE_ID

Definition at line 143 of file phapp.h.

typedef enum _PH_ACTION_ELEVATION_LEVEL PH_ACTION_ELEVATION_LEVEL

typedef struct _PH_ADDITIONAL_TAB_PAGE PH_ADDITIONAL_TAB_PAGE

typedef struct _PH_ADDMENUITEM PH_ADDMENUITEM

typedef struct _PH_COPY_CELL_CONTEXT PH_COPY_CELL_CONTEXT

typedef union _PH_KNOWN_PROCESS_COMMAND_LINE PH_KNOWN_PROCESS_COMMAND_LINE

typedef enum _PH_KNOWN_PROCESS_TYPE PH_KNOWN_PROCESS_TYPE

typedef struct _PH_LAYOUT_PADDING_DATA PH_LAYOUT_PADDING_DATA

typedef struct _PH_LOG_ENTRY PH_LOG_ENTRY

typedef struct _PH_MESSAGE_LOOP_FILTER_ENTRY PH_MESSAGE_LOOP_FILTER_ENTRY

typedef enum _PH_PHSVC_MODE PH_PHSVC_MODE

typedef struct _PH_PROCESS_PROPCONTEXT PH_PROCESS_PROPCONTEXT

typedef struct _PH_PROCESS_PROPPAGECONTEXT PH_PROCESS_PROPPAGECONTEXT

typedef struct _PH_RUNAS_SERVICE_PARAMETERS PH_RUNAS_SERVICE_PARAMETERS

typedef struct _PH_SHOWMEMORYEDITOR PH_SHOWMEMORYEDITOR

typedef struct _PH_SHOWMEMORYRESULTS PH_SHOWMEMORYRESULTS

typedef struct _PH_STARTUP_PARAMETERS PH_STARTUP_PARAMETERS

typedef struct _PH_TN_COLUMN_MENU_DATA PH_TN_COLUMN_MENU_DATA

typedef struct _PH_TN_FILTER_ENTRY PH_TN_FILTER_ENTRY

typedef struct _PH_TN_FILTER_SUPPORT PH_TN_FILTER_SUPPORT

typedef struct _PH_ADDITIONAL_TAB_PAGE * PPH_ADDITIONAL_TAB_PAGE

typedef struct _PH_ADDMENUITEM * PPH_ADDMENUITEM

typedef struct _PH_COPY_CELL_CONTEXT * PPH_COPY_CELL_CONTEXT

typedef union _PH_KNOWN_PROCESS_COMMAND_LINE * PPH_KNOWN_PROCESS_COMMAND_LINE

typedef struct _PH_LAYOUT_PADDING_DATA * PPH_LAYOUT_PADDING_DATA

typedef struct _PH_LOG_ENTRY * PPH_LOG_ENTRY

Definition at line 1062 of file phapp.h.

typedef BOOLEAN(NTAPI * PPH_MESSAGE_LOOP_FILTER)(_In_ PMSG Message, _In_ PVOID Context)

Definition at line 104 of file phapp.h.

typedef struct _PH_MESSAGE_LOOP_FILTER_ENTRY * PPH_MESSAGE_LOOP_FILTER_ENTRY

typedef struct _PH_PROCESS_PROPCONTEXT * PPH_PROCESS_PROPCONTEXT

Definition at line 882 of file phapp.h.

typedef struct _PH_PROCESS_PROPPAGECONTEXT * PPH_PROCESS_PROPPAGECONTEXT

typedef struct _PH_RUNAS_SERVICE_PARAMETERS * PPH_RUNAS_SERVICE_PARAMETERS

typedef struct _PH_SHOWMEMORYEDITOR * PPH_SHOWMEMORYEDITOR

typedef struct _PH_SHOWMEMORYRESULTS * PPH_SHOWMEMORYRESULTS

typedef struct _PH_STARTUP_PARAMETERS * PPH_STARTUP_PARAMETERS

typedef struct _PH_SYMBOL_PROVIDER * PPH_SYMBOL_PROVIDER

Definition at line 25 of file phapp.h.

typedef VOID(NTAPI * PPH_TAB_PAGE_CALLBACK_FUNCTION)(_In_ PVOID Parameter1, _In_ PVOID Parameter2, _In_ PVOID Parameter3, _In_ PVOID Context)

Definition at line 767 of file phapp.h.

typedef HWND(NTAPI * PPH_TAB_PAGE_CREATE_FUNCTION)(_In_ PVOID Context)

Definition at line 763 of file phapp.h.

typedef struct _PH_TN_COLUMN_MENU_DATA * PPH_TN_COLUMN_MENU_DATA

typedef struct _PH_TN_FILTER_ENTRY * PPH_TN_FILTER_ENTRY

typedef BOOLEAN(NTAPI * PPH_TN_FILTER_FUNCTION)(_In_ PPH_TREENEW_NODE Node, _In_opt_ PVOID Context)

Definition at line 502 of file phapp.h.

typedef struct _PH_TN_FILTER_SUPPORT * PPH_TN_FILTER_SUPPORT

Enumeration Type Documentation

enum _PH_ACTION_ELEVATION_LEVEL

Enumerator:

NeverElevateAction
PromptElevateAction
AlwaysElevateAction

Definition at line 1141 of file phapp.h.

enum _PH_KNOWN_PROCESS_TYPE

Enumerator:

UnknownProcessType
SystemProcessType
SessionManagerProcessType
WindowsSubsystemProcessType
WindowsStartupProcessType
ServiceControlManagerProcessType
LocalSecurityAuthorityProcessType
LocalSessionManagerProcessType
WindowsLogonProcessType
ServiceHostProcessType
RunDllAsAppProcessType
ComSurrogateProcessType
TaskHostProcessType
ExplorerProcessType
UmdfHostProcessType
MaximumProcessType
KnownProcessTypeMask
KnownProcessWow64
UnknownProcessType
SystemProcessType
SessionManagerProcessType
WindowsSubsystemProcessType
WindowsStartupProcessType
ServiceControlManagerProcessType
LocalSecurityAuthorityProcessType
LocalSessionManagerProcessType
WindowsLogonProcessType
ServiceHostProcessType
RunDllAsAppProcessType
ComSurrogateProcessType
TaskHostProcessType
ExplorerProcessType
UmdfHostProcessType
MaximumProcessType
KnownProcessTypeMask
KnownProcessWow64

Definition at line 172 of file phapp.h.

enum _PH_PHSVC_MODE

Enumerator:

ElevatedPhSvcMode
Wow64PhSvcMode
ElevatedPhSvcMode
Wow64PhSvcMode

Definition at line 1149 of file phapp.h.

Function Documentation

PHAPPAPI BOOLEAN NTAPI PhaChoiceDialog	(	_In_ HWND	ParentWindowHandle,
		_In_ PWSTR	Title,
		_In_ PWSTR	Message,
		_In_opt_ PWSTR *	Choices,
		_In_opt_ ULONG	NumberOfChoices,
		_In_opt_ PWSTR	Option,
		_In_ ULONG	Flags,
		_Inout_ PPH_STRING *	SelectedChoice,
		_Inout_opt_ PBOOLEAN	SelectedOption,
		_In_opt_ PWSTR	SavedChoicesSettingName
	)

Prompts the user for input.

Remarks: If PH_CHOICE_DIALOG_PASSWORD is specified, the string returned in SelectedChoice is NOT auto-dereferenced.

Definition at line 55 of file chdlg.c.

VOID PhAddMiniProcessMenuItems	(	_Inout_ struct _PH_EMENU_ITEM *	Menu,
		_In_ HANDLE	ProcessId
	)

Definition at line 3555 of file mainwnd.c.

PHAPPAPI BOOLEAN NTAPI PhAddProcessPropPage	(	_Inout_ PPH_PROCESS_PROPCONTEXT	PropContext,
		_In_ _Assume_refs_(1) PPH_PROCESS_PROPPAGECONTEXT	PropPageContext
	)

Definition at line 344 of file procprp.c.

PHAPPAPI BOOLEAN NTAPI PhAddProcessPropPage2	(	_Inout_ PPH_PROCESS_PROPCONTEXT	PropContext,
		_In_ HPROPSHEETPAGE	PropSheetPageHandle
	)

Definition at line 371 of file procprp.c.

PHAPPAPI PPH_LAYOUT_ITEM NTAPI PhAddPropPageLayoutItem	(	_In_ HWND	hwnd,
		_In_ HWND	Handle,
		_In_ PPH_LAYOUT_ITEM	ParentItem,
		_In_ ULONG	Anchor
	)

Definition at line 506 of file procprp.c.

PHAPPAPI PPH_TN_FILTER_ENTRY NTAPI PhAddTreeNewFilter	(	_In_ PPH_TN_FILTER_SUPPORT	Support,
		_In_ PPH_TN_FILTER_FUNCTION	Filter,
		_In_opt_ PVOID	Context
	)

Definition at line 1762 of file appsup.c.

PHAPPAPI BOOLEAN NTAPI PhaGetProcessKnownCommandLine	(	_In_ PPH_STRING	CommandLine,
		_In_ PH_KNOWN_PROCESS_TYPE	KnownProcessType,
		_Out_ PPH_KNOWN_PROCESS_COMMAND_LINE	KnownCommandLine
	)

Definition at line 461 of file appsup.c.

PHAPPAPI VOID NTAPI PhApplyTreeNewFilters ( _In_ PPH_TN_FILTER_SUPPORT Support )

Definition at line 1830 of file appsup.c.

PHAPPAPI BOOLEAN NTAPI PhApplyTreeNewFiltersToNode	(	_In_ PPH_TN_FILTER_SUPPORT	Support,
		_In_ PPH_TREENEW_NODE	Node
	)

Definition at line 1801 of file appsup.c.

FORCEINLINE PPH_LAYOUT_ITEM PhBeginPropPageLayout	(	_In_ HWND	hwndDlg,
		_In_ PPH_PROCESS_PROPPAGECONTEXT	PropPageContext
	)

Definition at line 1009 of file phapp.h.

VOID PhClearLogEntries ( VOID )

Definition at line 150 of file log.c.

NTSTATUS PhCommandModeStart ( VOID )

Definition at line 57 of file cmdmode.c.

PHAPPAPI VOID NTAPI PhCopyListView ( _In_ HWND ListViewHandle )

Definition at line 1030 of file appsup.c.

PHAPPAPI VOID NTAPI PhCopyListViewInfoTip	(	_Inout_ LPNMLVGETINFOTIP	GetInfoTip,
		_In_ PPH_STRINGREF	Tip
	)

Copies a string into a NMLVGETINFOTIP structure.

Parameters

GetInfoTip	The NMLVGETINFOTIP structure.
Tip	The string to copy.

Remarks: The text is truncated if it is too long.

Definition at line 996 of file appsup.c.

HPROPSHEETPAGE PhCreateEventPage	(	_In_ PPH_OPEN_OBJECT	OpenObject,
		_In_opt_ PVOID	Context
	)

Definition at line 151 of file ntobjprp.c.

HPROPSHEETPAGE PhCreateEventPairPage	(	_In_ PPH_OPEN_OBJECT	OpenObject,
		_In_opt_ PVOID	Context
	)

Definition at line 271 of file ntobjprp.c.

HPROPSHEETPAGE PhCreateJobPage	(	_In_ PPH_OPEN_OBJECT	OpenObject,
		_In_opt_ PVOID	Context,
		_In_opt_ DLGPROC	HookProc
	)

Definition at line 84 of file jobprp.c.

HPROPSHEETPAGE PhCreateMutantPage	(	_In_ PPH_OPEN_OBJECT	OpenObject,
		_In_opt_ PVOID	Context
	)

Definition at line 346 of file ntobjprp.c.

BOOLEAN PhCreateProcessIgnoreIfeoDebugger ( _In_ PWSTR FileName )

Definition at line 1476 of file appsup.c.

PHAPPAPI PPH_PROCESS_PROPCONTEXT NTAPI PhCreateProcessPropContext	(	_In_ HWND	ParentWindowHandle,
		_In_ PPH_PROCESS_ITEM	ProcessItem
	)

Definition at line 60 of file procprp.c.

PHAPPAPI PPH_PROCESS_PROPPAGECONTEXT NTAPI PhCreateProcessPropPageContext	(	_In_ LPCWSTR	Template,
		_In_ DLGPROC	DlgProc,
		_In_opt_ PVOID	Context
	)

Definition at line 386 of file procprp.c.

PHAPPAPI PPH_PROCESS_PROPPAGECONTEXT NTAPI PhCreateProcessPropPageContextEx	(	_In_opt_ PVOID	InstanceHandle,
		_In_ LPCWSTR	Template,
		_In_ DLGPROC	DlgProc,
		_In_opt_ PVOID	Context
	)

Definition at line 395 of file procprp.c.

HPROPSHEETPAGE PhCreateSectionPage	(	_In_ PPH_OPEN_OBJECT	OpenObject,
		_In_opt_ PVOID	Context
	)

Definition at line 445 of file ntobjprp.c.

HPROPSHEETPAGE PhCreateSemaphorePage	(	_In_ PPH_OPEN_OBJECT	OpenObject,
		_In_opt_ PVOID	Context
	)

Definition at line 542 of file ntobjprp.c.

PHAPPAPI HWND NTAPI PhCreateServiceListControl	(	_In_ HWND	ParentWindowHandle,
		_In_ PPH_SERVICE_ITEM *	Services,
		_In_ ULONG	NumberOfServices
	)

Creates a service list property page.

Parameters

ParentWindowHandle	The parent of the service list.
Services	An array of service items. Each service item must have a reference that is transferred to this function. The array must be allocated using PhAllocate() and must not be freed by the caller; it will be freed automatically when no longer needed.
NumberOfServices	The number of service items in Services.

Definition at line 61 of file srvctl.c.

HPROPSHEETPAGE PhCreateTimerPage	(	_In_ PPH_OPEN_OBJECT	OpenObject,
		_In_opt_ PVOID	Context
	)

Definition at line 654 of file ntobjprp.c.

HPROPSHEETPAGE PhCreateTokenPage	(	_In_ PPH_OPEN_OBJECT	OpenObject,
		_In_opt_ PVOID	Context,
		_In_opt_ DLGPROC	HookProc
	)

Definition at line 144 of file tokprp.c.

PHAPPAPI VOID NTAPI PhDeleteTreeNewColumnMenu ( _In_ PPH_TN_COLUMN_MENU_DATA Data )

Definition at line 1733 of file appsup.c.

PHAPPAPI VOID NTAPI PhDeleteTreeNewFilterSupport ( _In_ PPH_TN_FILTER_SUPPORT Support )

Definition at line 1755 of file appsup.c.

PHAPPAPI VOID NTAPI PhDoPropPageLayout ( _In_ HWND hwnd )

Definition at line 570 of file procprp.c.

HFONT PhDuplicateFontWithNewWeight	(	_In_ HFONT	Font,
		_In_ LONG	NewWeight
	)

Definition at line 1120 of file appsup.c.

FORCEINLINE VOID PhEndPropPageLayout	(	_In_ HWND	hwndDlg,
		_In_ PPH_PROCESS_PROPPAGECONTEXT	PropPageContext
	)

Definition at line 1027 of file phapp.h.

VOID PhEnumChildWindows	(	_In_opt_ HWND	hWnd,
		_In_ ULONG	Limit,
		_In_ WNDENUMPROC	Callback,
		_In_ LPARAM	lParam
	)

Definition at line 667 of file appsup.c.

PPH_STRING PhEscapeStringForDelimiter	(	_In_ PPH_STRING	String,
		_In_ WCHAR	Delimiter
	)

Definition at line 803 of file appsup.c.

NTSTATUS PhExecuteRunAsCommand ( _In_ PPH_RUNAS_SERVICE_PARAMETERS Parameters )

Executes the run-as service.

Parameters

Parameters The run-as parameters.

Remarks: This function requires administrator-level access.

Definition at line 812 of file runas.c.

PHAPPAPI NTSTATUS NTAPI PhExecuteRunAsCommand2	(	_In_ HWND	hWnd,
		_In_ PWSTR	Program,
		_In_opt_ PWSTR	UserName,
		_In_opt_ PWSTR	Password,
		_In_opt_ ULONG	LogonType,
		_In_opt_ HANDLE	ProcessIdWithToken,
		_In_ ULONG	SessionId,
		_In_ PWSTR	DesktopName,
		_In_ BOOLEAN	UseLinkedToken
	)

Starts a program as another user.

Parameters

hWnd	A handle to the parent window.
Program	The command line of the program to start.
UserName	The user to start the program as. The user name should be specified as: domain\name. This parameter can be NULL if ProcessIdWithToken is specified.
Password	The password for the specified user. If there is no password, specify an empty string. This parameter can be NULL if ProcessIdWithToken is specified.
LogonType	The logon type for the specified user. This parameter can be 0 if ProcessIdWithToken is specified.
ProcessIdWithToken	The ID of a process from which to duplicate the token.
SessionId	The ID of the session to run the program under.
DesktopName	The window station and desktop to run the program under.
UseLinkedToken	Uses the linked token if possible.

Return values

STATUS_CANCELLED The user cancelled the operation.

Remarks: This function will cause another instance of Process Hacker to be executed if the current security context does not have sufficient system access. This is done through a UAC elevation prompt.

Definition at line 921 of file runas.c.

struct _PH_PLUGIN* PhFindPlugin2 ( _In_ PPH_STRINGREF Name )

read

Locates a plugin instance structure.

Parameters

Name	The name of the plugin.

Returns: A plugin instance structure, or NULL if the plugin was not found.

Definition at line 544 of file plugin.c.

PHAPPAPI PPH_STRING NTAPI PhFormatLogEntry ( _In_ PPH_LOG_ENTRY Entry )

Definition at line 194 of file log.c.

PPH_STRING PhGetDiagnosticsString ( VOID )

Definition at line 141 of file about.c.

PPH_STRING PhGetGroupAttributesString ( _In_ ULONG Attributes )

Definition at line 198 of file tokprp.c.

PHAPPAPI BOOLEAN NTAPI PhGetListViewContextMenuPoint	(	_In_ HWND	ListViewHandle,
		_Out_ PPOINT	Point
	)

Definition at line 1079 of file appsup.c.

PPH_STRING PhGetOpaqueXmlNodeText ( _In_ mxml_node_t * node )

Definition at line 870 of file appsup.c.

PPH_STRING PhGetPackagePath ( _In_ PACKAGE_ID * PackageId )

Definition at line 287 of file appsup.c.

PHAPPAPI PPH_STRING NTAPI PhGetPhVersion ( VOID )

Definition at line 1277 of file appsup.c.

PHAPPAPI VOID NTAPI PhGetPhVersionNumbers	(	_Out_opt_ PULONG	MajorVersion,
		_Out_opt_ PULONG	MinorVersion,
		_Reserved_ PULONG	Reserved,
		_Out_opt_ PULONG	RevisionNumber
	)

Definition at line 1290 of file appsup.c.

PWSTR PhGetPrivilegeAttributesString ( _In_ ULONG Attributes )

Definition at line 277 of file tokprp.c.

PHAPPAPI BOOLEAN NTAPI PhGetProcessIsSuspended ( _In_ PSYSTEM_PROCESS_INFORMATION Process )

Determines whether a process is suspended.

Parameters

Process The SYSTEM_PROCESS_INFORMATION structure of the process.

Definition at line 67 of file appsup.c.

PHAPPAPI NTSTATUS NTAPI PhGetProcessKnownType	(	_In_ HANDLE	ProcessHandle,
		_Out_ PH_KNOWN_PROCESS_TYPE *	KnownProcessType
	)

Determines the type of a process based on its image file name.

Parameters

ProcessHandle	A handle to a process.
KnownProcessType	A variable which receives the process type.

Definition at line 334 of file appsup.c.

HWND PhGetProcessMainWindow	(	_In_ HANDLE	ProcessId,
		_In_opt_ HANDLE	ProcessHandle
	)

Definition at line 734 of file appsup.c.

PPH_STRING PhGetProcessPackageFullName ( _In_ HANDLE ProcessHandle )

Definition at line 208 of file appsup.c.

NTSTATUS PhGetProcessSwitchContext	(	_In_ HANDLE	ProcessHandle,
		_Out_ PGUID	Guid
	)

Determines the OS compatibility context of a process.

Parameters

ProcessHandle	A handle to a process.
Guid	A variable which receives a GUID identifying an operating system version.

Definition at line 92 of file appsup.c.

PPH_STRING PhGetProcessTooltipText	(	_In_ PPH_PROCESS_ITEM	Process,
		_Out_opt_ PULONG	ValidToTickCount
	)

Definition at line 90 of file itemtips.c.

PPH_STRING PhGetServiceRelevantFileName	(	_In_ PPH_STRINGREF	ServiceName,
		_In_ SC_HANDLE	ServiceHandle
	)

Definition at line 761 of file appsup.c.

PPH_STRING PhGetServiceTooltipText ( _In_ PPH_SERVICE_ITEM Service )

Definition at line 633 of file itemtips.c.

BOOLEAN PhHandleCopyCellEMenuItem ( _In_ struct _PH_EMENU_ITEM * SelectedItem )

Definition at line 1906 of file appsup.c.

VOID PhHandleListViewNotifyBehaviors	(	_In_ LPARAM	lParam,
		_In_ HWND	ListViewHandle,
		_In_ ULONG	Behaviors
	)

Definition at line 1049 of file appsup.c.

PHAPPAPI VOID PhHandleListViewNotifyForCopy	(	_In_ LPARAM	lParam,
		_In_ HWND	ListViewHandle
	)

Definition at line 1041 of file appsup.c.

BOOLEAN PhHandleMiniProcessMenuItem ( _Inout_ struct _PH_EMENU_ITEM * MenuItem )

Definition at line 3615 of file mainwnd.c.

PHAPPAPI BOOLEAN NTAPI PhHandleTreeNewColumnMenu ( _Inout_ PPH_TN_COLUMN_MENU_DATA Data )

Definition at line 1667 of file appsup.c.

VOID PhInitializeFont ( _In_ HWND hWnd )

Definition at line 479 of file main.c.

PHAPPAPI VOID NTAPI PhInitializeTreeNewColumnMenu ( _Inout_ PPH_TN_COLUMN_MENU_DATA Data )

Definition at line 1521 of file appsup.c.

VOID PhInitializeTreeNewColumnMenuEx	(	_Inout_ PPH_TN_COLUMN_MENU_DATA	Data,
		_In_ ULONG	Flags
	)

Definition at line 1528 of file appsup.c.

PHAPPAPI VOID NTAPI PhInitializeTreeNewFilterSupport	(	_Out_ PPH_TN_FILTER_SUPPORT	Support,
		_In_ HWND	TreeNewHandle,
		_In_ PPH_LIST	NodeList
	)

Definition at line 1744 of file appsup.c.

BOOLEAN PhInsertCopyCellEMenuItem	(	_In_ struct _PH_EMENU_ITEM *	Menu,
		_In_ ULONG	InsertAfterId,
		_In_ HWND	TreeNewHandle,
		_In_ PPH_TREENEW_COLUMN	Column
	)

Definition at line 1863 of file appsup.c.

NTSTATUS PhInvokeRunAsService ( _In_ PPH_RUNAS_SERVICE_PARAMETERS Parameters )

Definition at line 1116 of file runas.c.

BOOLEAN PhIsPluginDisabled ( _In_ PPH_STRINGREF BaseName )

Definition at line 121 of file plugin.c.

VOID PhLoadDbgHelpFromPath ( _In_ PWSTR DbgHelpPath )

Definition at line 2690 of file mainwnd.c.

PHAPPAPI VOID NTAPI PhLoadListViewColumnsFromSetting	(	_In_ PWSTR	Name,
		_In_ HWND	ListViewHandle
	)

Definition at line 1253 of file appsup.c.

VOID PhLoadPlugins ( VOID )

Loads plugins from the default plugins directory.

Definition at line 231 of file plugin.c.

PHAPPAPI VOID NTAPI PhLoadSymbolProviderOptions ( _Inout_ PPH_SYMBOL_PROVIDER SymbolProvider )

Definition at line 962 of file appsup.c.

PHAPPAPI VOID NTAPI PhLoadWindowPlacementFromSetting	(	_In_opt_ PWSTR	PositionSettingName,
		_In_opt_ PWSTR	SizeSettingName,
		_In_ HWND	WindowHandle
	)

Definition at line 1165 of file appsup.c.

VOID PhLogInitialization ( VOID )

Definition at line 30 of file log.c.

PHAPPAPI VOID NTAPI PhLogMessageEntry	(	_In_ UCHAR	Type,
		_In_ PPH_STRING	Message
	)

Definition at line 186 of file log.c.

VOID PhLogProcessEntry	(	_In_ UCHAR	Type,
		_In_ HANDLE	ProcessId,
		_In_ PPH_STRING	Name,
		_In_opt_ HANDLE	ParentProcessId,
		_In_opt_ PPH_STRING	ParentName
	)

Definition at line 166 of file log.c.

VOID PhLogServiceEntry	(	_In_ UCHAR	Type,
		_In_ PPH_STRING	Name,
		_In_ PPH_STRING	DisplayName
	)

Definition at line 177 of file log.c.

BOOLEAN PhMainWndInitialization ( _In_ INT ShowCommand )

Definition at line 131 of file mainwnd.c.

PWSTR PhMakeContextAtom ( VOID )

Definition at line 981 of file appsup.c.

PACKAGE_ID* PhPackageIdFromFullName ( _In_ PWSTR PackageFullName )

Definition at line 248 of file appsup.c.

FORCEINLINE PVOID PhpGenericPropertyPageHeader	(	_In_ HWND	hwndDlg,
		_In_ UINT	uMsg,
		_In_ WPARAM	wParam,
		_In_ LPARAM	lParam,
		_In_ PWSTR	ContextName
	)

Definition at line 587 of file phapp.h.

VOID PhPluginsInitialization ( VOID )

Definition at line 64 of file plugin.c.

BOOLEAN PhProcessPropInitialization ( VOID )

Definition at line 50 of file procprp.c.

PHAPPAPI VOID NTAPI PhPropPageDlgProcDestroy ( _In_ HWND hwndDlg )

Definition at line 499 of file procprp.c.

PHAPPAPI BOOLEAN NTAPI PhPropPageDlgProcHeader	(	_In_ HWND	hwndDlg,
		_In_ UINT	uMsg,
		_In_ LPARAM	lParam,
		_Out_ LPPROPSHEETPAGE *	PropSheetPage,
		_Out_ PPH_PROCESS_PROPPAGECONTEXT *	PropPageContext,
		_Out_ PPH_PROCESS_ITEM *	ProcessItem
	)

Definition at line 480 of file procprp.c.

VOID PhRefreshProcessPropContext ( _Inout_ PPH_PROCESS_PROPCONTEXT PropContext )

Definition at line 127 of file procprp.c.

PHAPPAPI VOID NTAPI PhRegisterDialog ( _In_ HWND DialogWindowHandle )

Definition at line 340 of file main.c.

PHAPPAPI struct _PH_MESSAGE_LOOP_FILTER_ENTRY* NTAPI PhRegisterMessageLoopFilter	(	_In_ PPH_MESSAGE_LOOP_FILTER	Filter,
		_In_opt_ PVOID	Context
	)

read

Definition at line 365 of file main.c.

PHAPPAPI VOID NTAPI PhRemoveTreeNewFilter	(	_In_ PPH_TN_FILTER_SUPPORT	Support,
		_In_ PPH_TN_FILTER_ENTRY	Entry
	)

Definition at line 1782 of file appsup.c.

NTSTATUS PhRunAsServiceStart ( _In_ PPH_STRING ServiceName )

Definition at line 1083 of file runas.c.

PHAPPAPI VOID NTAPI PhSaveListViewColumnsToSetting	(	_In_ PWSTR	Name,
		_In_ HWND	ListViewHandle
	)

Definition at line 1265 of file appsup.c.

PHAPPAPI VOID NTAPI PhSaveWindowPlacementToSetting	(	_In_opt_ PWSTR	PositionSettingName,
		_In_opt_ PWSTR	SizeSettingName,
		_In_ HWND	WindowHandle
	)

Definition at line 1227 of file appsup.c.

PHAPPAPI VOID NTAPI PhSearchOnlineString	(	_In_ HWND	hWnd,
		_In_ PWSTR	String
	)

Definition at line 884 of file appsup.c.

VOID PhSetPluginDisabled	(	_In_ PPH_STRINGREF	BaseName,
		_In_ BOOLEAN	Disable
	)

Definition at line 135 of file plugin.c.

PHAPPAPI VOID NTAPI PhSetSelectThreadIdProcessPropContext	(	_Inout_ PPH_PROCESS_PROPCONTEXT	PropContext,
		_In_ HANDLE	ThreadId
	)

Definition at line 134 of file procprp.c.

VOID PhSetWindowOpacity	(	_In_ HWND	WindowHandle,
		_In_ ULONG	OpacityPercent
	)

Definition at line 1138 of file appsup.c.

PHAPPAPI VOID NTAPI PhShellExecuteUserString	(	_In_ HWND	hWnd,
		_In_ PWSTR	Setting,
		_In_ PWSTR	String,
		_In_ BOOLEAN	UseShellExecute,
		_In_opt_ PWSTR	ErrorMessage
	)

Definition at line 892 of file appsup.c.

BOOLEAN PhShellOpenKey2	(	_In_ HWND	hWnd,
		_In_ PPH_STRING	KeyName
	)

Opens a key in the Registry Editor.

If the Registry Editor is already open, the specified key is selected in the Registry Editor.

Parameters

hWnd	A handle to the parent window.
KeyName	The key name to open.

Definition at line 2051 of file appsup.c.

PHAPPAPI BOOLEAN NTAPI PhShellProcessHacker	(	_In_opt_ HWND	hWnd,
		_In_opt_ PWSTR	Parameters,
		_In_ ULONG	ShowWindowType,
		_In_ ULONG	Flags,
		_In_ ULONG	AppFlags,
		_In_opt_ ULONG	Timeout,
		_Out_opt_ PHANDLE	ProcessHandle
	)

Definition at line 1344 of file appsup.c.

BOOLEAN PhShellProcessHackerEx	(	_In_opt_ HWND	hWnd,
		_In_opt_ PWSTR	FileName,
		_In_opt_ PWSTR	Parameters,
		_In_ ULONG	ShowWindowType,
		_In_ ULONG	Flags,
		_In_ ULONG	AppFlags,
		_In_opt_ ULONG	Timeout,
		_Out_opt_ PHANDLE	ProcessHandle
	)

Definition at line 1366 of file appsup.c.

VOID PhShowAboutDialog ( _In_ HWND ParentWindowHandle )

Definition at line 118 of file about.c.

VOID PhShowChooseColumnsDialog	(	_In_ HWND	ParentWindowHandle,
		_In_ HWND	ControlHandle,
		_In_ ULONG	Type
	)

Definition at line 44 of file chcol.c.

PHAPPAPI BOOLEAN NTAPI PhShowChooseProcessDialog	(	_In_ HWND	ParentWindowHandle,
		_In_ PWSTR	Message,
		_Out_ PHANDLE	ProcessId
	)

Definition at line 43 of file chproc.c.

VOID PhShowCreateServiceDialog ( _In_ HWND ParentWindowHandle )

Definition at line 34 of file srvcr.c.

VOID PhShowDebugConsole ( VOID )

Definition at line 68 of file dbgcon.c.

VOID PhShowDetailsForIconNotification ( VOID )

Definition at line 3973 of file mainwnd.c.

VOID PhShowFindObjectsDialog ( VOID )

Definition at line 80 of file findobj.c.

VOID PhShowGdiHandlesDialog	(	_In_ HWND	ParentWindowHandle,
		_In_ PPH_PROCESS_ITEM	ProcessItem
	)

Definition at line 48 of file gdihndl.c.

VOID PhShowHandleProperties	(	_In_ HWND	ParentWindowHandle,
		_In_ HANDLE	ProcessId,
		_In_ PPH_HANDLE_ITEM	HandleItem
	)

Definition at line 88 of file hndlprp.c.

VOID PhShowHandleStatisticsDialog	(	_In_ HWND	ParentWindowHandle,
		_In_ HANDLE	ProcessId
	)

Definition at line 47 of file hndlstat.c.

VOID PhShowHiddenProcessesDialog ( VOID )

Definition at line 80 of file hidnproc.c.

VOID PhShowIconContextMenu ( _In_ POINT Location )

Definition at line 3811 of file mainwnd.c.

PHAPPAPI VOID NTAPI PhShowIconNotification	(	_In_ PWSTR	Title,
		_In_ PWSTR	Text,
		_In_ ULONG	Flags
	)

Definition at line 3964 of file mainwnd.c.

VOID PhShowInformationDialog	(	_In_ HWND	ParentWindowHandle,
		_In_ PWSTR	String
	)

Definition at line 189 of file infodlg.c.

VOID PhShowJobProperties	(	_In_ HWND	ParentWindowHandle,
		_In_ PPH_OPEN_OBJECT	OpenObject,
		_In_opt_ PVOID	Context,
		_In_opt_ PWSTR	Title
	)

Definition at line 59 of file jobprp.c.

VOID PhShowLogDialog ( VOID )

Definition at line 42 of file logwnd.c.

VOID PhShowMemoryEditorDialog	(	_In_ HANDLE	ProcessId,
		_In_ PVOID	BaseAddress,
		_In_ SIZE_T	RegionSize,
		_In_ ULONG	SelectOffset,
		_In_ ULONG	SelectLength,
		_In_opt_ PPH_STRING	Title,
		_In_ ULONG	Flags
	)

Definition at line 70 of file memedit.c.

VOID PhShowMemoryListsDialog	(	_In_ HWND	ParentWindowHandle,
		_In_opt_	VOIDNTAPI *RegisterDialog)(HWND,
		_In_opt_	VOIDNTAPI *UnregisterDialog)(HWND
	)

Definition at line 40 of file memlists.c.

VOID PhShowMemoryProtectDialog	(	_In_ HWND	ParentWindowHandle,
		_In_ PPH_PROCESS_ITEM	ProcessItem,
		_In_ PPH_MEMORY_ITEM	MemoryItem
	)

Definition at line 39 of file memprot.c.

VOID PhShowMemoryResultsDialog	(	_In_ HANDLE	ProcessId,
		_In_ PPH_LIST	Results
	)

Definition at line 52 of file memrslt.c.

VOID PhShowMemoryStringDialog	(	_In_ HWND	ParentWindowHandle,
		_In_ PPH_PROCESS_ITEM	ProcessItem
	)

Definition at line 466 of file memsrch.c.

VOID PhShowNetworkContextMenu ( _In_ PPH_TREENEW_CONTEXT_MENU ContextMenu )

Definition at line 5178 of file mainwnd.c.

VOID PhShowNetworkStackDialog	(	_In_ HWND	ParentWindowHandle,
		_In_ PPH_NETWORK_ITEM	NetworkItem
	)

Definition at line 71 of file netstk.c.

VOID PhShowOptionsDialog ( _In_ HWND ParentWindowHandle )

Definition at line 99 of file options.c.

VOID PhShowPagefilesDialog ( _In_ HWND ParentWindowHandle )

Definition at line 32 of file pagfiles.c.

VOID PhShowPluginsDialog ( _In_ HWND ParentWindowHandle )

Definition at line 42 of file plugman.c.

VOID PhShowProcessAffinityDialog	(	_In_ HWND	ParentWindowHandle,
		_In_opt_ PPH_PROCESS_ITEM	ProcessItem,
		_In_opt_ PPH_THREAD_ITEM	ThreadItem
	)

Definition at line 47 of file affinity.c.

PHAPPAPI BOOLEAN NTAPI PhShowProcessAffinityDialog2	(	_In_ HWND	ParentWindowHandle,
		_In_ ULONG_PTR	AffinityMask,
		_Out_ PULONG_PTR	NewAffinityMask
	)

Definition at line 69 of file affinity.c.

VOID PhShowProcessContextMenu ( _In_ PPH_TREENEW_CONTEXT_MENU ContextMenu )

Definition at line 4470 of file mainwnd.c.

PHAPPAPI BOOLEAN NTAPI PhShowProcessProperties ( _In_ PPH_PROCESS_PROPCONTEXT Context )

Definition at line 5581 of file procprp.c.

PHAPPAPI VOID NTAPI PhShowProcessRecordDialog	(	_In_ HWND	ParentWindowHandle,
		_In_ PPH_PROCESS_RECORD	Record
	)

Definition at line 38 of file procrec.c.

VOID PhShowProcessTerminatorDialog	(	_In_ HWND	ParentWindowHandle,
		_In_ PPH_PROCESS_ITEM	ProcessItem
	)

Definition at line 64 of file termator.c.

VOID PhShowRunAsDialog	(	_In_ HWND	ParentWindowHandle,
		_In_opt_ HANDLE	ProcessId
	)

Definition at line 112 of file runas.c.

VOID PhShowServiceContextMenu ( _In_ PPH_TREENEW_CONTEXT_MENU ContextMenu )

Definition at line 4812 of file mainwnd.c.

VOID PhShowServiceProperties	(	_In_ HWND	ParentWindowHandle,
		_In_ PPH_SERVICE_ITEM	ServiceItem
	)

Definition at line 94 of file srvprp.c.

VOID PhShowSessionProperties	(	_In_ HWND	ParentWindowHandle,
		_In_ ULONG	SessionId
	)

Definition at line 50 of file sessprp.c.

VOID PhShowSessionSendMessageDialog	(	_In_ HWND	ParentWindowHandle,
		_In_ ULONG	SessionId
	)

Definition at line 45 of file sessmsg.c.

VOID PhShowSessionShadowDialog	(	_In_ HWND	ParentWindowHandle,
		_In_ ULONG	SessionId
	)

Definition at line 106 of file sessshad.c.

VOID PhShowThreadStackDialog	(	_In_ HWND	ParentWindowHandle,
		_In_ HANDLE	ProcessId,
		_In_ HANDLE	ThreadId,
		_In_ PPH_THREAD_PROVIDER	ThreadProvider
	)

Definition at line 83 of file thrdstk.c.

VOID PhShowTokenProperties	(	_In_ HWND	ParentWindowHandle,
		_In_ PPH_OPEN_OBJECT	OpenObject,
		_In_opt_ PVOID	Context,
		_In_opt_ PWSTR	Title
	)

Definition at line 119 of file tokprp.c.

VOID PhUiAnalyzeWaitThread	(	_In_ HWND	hWnd,
		_In_ HANDLE	ProcessId,
		_In_ HANDLE	ThreadId,
		_In_ PPH_SYMBOL_PROVIDER	SymbolProvider
	)

Definition at line 112 of file anawait.c.

PHAPPAPI BOOLEAN NTAPI PhUiCloseConnections	(	_In_ HWND	hWnd,
		_In_ PPH_NETWORK_ITEM *	Connections,
		_In_ ULONG	NumberOfConnections
	)

Definition at line 2392 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiCloseHandles	(	_In_ HWND	hWnd,
		_In_ HANDLE	ProcessId,
		_In_ PPH_HANDLE_ITEM *	Handles,
		_In_ ULONG	NumberOfHandles,
		_In_ BOOLEAN	Warn
	)

Definition at line 3255 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiConnectSession	(	_In_ HWND	hWnd,
		_In_ ULONG	SessionId
	)

Definition at line 621 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiConnectToPhSvc	(	_In_opt_ HWND	hWnd,
		_In_ BOOLEAN	ConnectOnly
	)

Connects to phsvc.

Parameters

hWnd	The window to display user interface components on.
ConnectOnly	TRUE to only try to connect to phsvc, otherwise FALSE to try to elevate and start phsvc if the initial connection attempt failed.

Definition at line 289 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiConnectToPhSvcEx	(	_In_opt_ HWND	hWnd,
		_In_ PH_PHSVC_MODE	Mode,
		_In_ BOOLEAN	ConnectOnly
	)

Connects to phsvc.

Parameters

hWnd	The window to display user interface components on.
Mode	The type of phsvc instance to connect to.
ConnectOnly	TRUE to only try to connect to phsvc, otherwise FALSE to try to elevate and start phsvc if the initial connection attempt failed.

Definition at line 398 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiContinueService	(	_In_ HWND	hWnd,
		_In_ PPH_SERVICE_ITEM	Service
	)

Definition at line 2171 of file actions.c.

BOOLEAN PhUiCreateDumpFileProcess	(	_In_ HWND	hWnd,
		_In_ PPH_PROCESS_ITEM	Process
	)

Definition at line 67 of file mdump.c.

PHAPPAPI BOOLEAN NTAPI PhUiDebugProcess	(	_In_ HWND	hWnd,
		_In_ PPH_PROCESS_ITEM	Process
	)

Definition at line 1417 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiDeleteService	(	_In_ HWND	hWnd,
		_In_ PPH_SERVICE_ITEM	Service
	)

Definition at line 2330 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiDetachFromDebuggerProcess	(	_In_ HWND	hWnd,
		_In_ PPH_PROCESS_ITEM	Process
	)

Definition at line 1622 of file actions.c.

PHAPPAPI VOID NTAPI PhUiDisconnectFromPhSvc ( VOID )

Disconnects from phsvc.

Definition at line 493 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiDisconnectSession	(	_In_ HWND	hWnd,
		_In_ ULONG	SessionId
	)

Definition at line 676 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiForceTerminateThreads	(	_In_ HWND	hWnd,
		_In_ HANDLE	ProcessId,
		_In_ PPH_THREAD_ITEM *	Threads,
		_In_ ULONG	NumberOfThreads
	)

Definition at line 2616 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiFreeMemory	(	_In_ HWND	hWnd,
		_In_ HANDLE	ProcessId,
		_In_ PPH_MEMORY_ITEM	MemoryItem,
		_In_ BOOLEAN	Free
	)

Definition at line 3105 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiHibernateComputer ( _In_ HWND hWnd )

Definition at line 550 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiInjectDllProcess	(	_In_ HWND	hWnd,
		_In_ PPH_PROCESS_ITEM	Process
	)

Definition at line 1677 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiLockComputer ( _In_ HWND hWnd )

Definition at line 507 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiLogoffComputer ( _In_ HWND hWnd )

Definition at line 519 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiLogoffSession	(	_In_ HWND	hWnd,
		_In_ ULONG	SessionId
	)

Definition at line 689 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiPauseService	(	_In_ HWND	hWnd,
		_In_ PPH_SERVICE_ITEM	Service
	)

Definition at line 2224 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiReduceWorkingSetProcesses	(	_In_ HWND	hWnd,
		_In_ PPH_PROCESS_ITEM *	Processes,
		_In_ ULONG	NumberOfProcesses
	)

Definition at line 1515 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiRestartComputer	(	_In_ HWND	hWnd,
		_In_ ULONG	Flags
	)

Definition at line 569 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiRestartProcess	(	_In_ HWND	hWnd,
		_In_ PPH_PROCESS_ITEM	Process
	)

Definition at line 1302 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiResumeProcesses	(	_In_ HWND	hWnd,
		_In_ PPH_PROCESS_ITEM *	Processes,
		_In_ ULONG	NumberOfProcesses
	)

Definition at line 1229 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiResumeThreads	(	_In_ HWND	hWnd,
		_In_ PPH_THREAD_ITEM *	Threads,
		_In_ ULONG	NumberOfThreads
	)

Definition at line 2747 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiSetAttributesHandle	(	_In_ HWND	hWnd,
		_In_ HANDLE	ProcessId,
		_In_ PPH_HANDLE_ITEM	Handle,
		_In_ ULONG	Attributes
	)

Definition at line 3335 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiSetDepStatusProcess	(	_In_ HWND	hWnd,
		_In_ PPH_PROCESS_ITEM	Process
	)

Definition at line 1902 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiSetIoPriorityProcesses	(	_In_ HWND	hWnd,
		_In_ PPH_PROCESS_ITEM *	Processes,
		_In_ ULONG	NumberOfProcesses,
		_In_ ULONG	IoPriority
	)

Definition at line 1733 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiSetIoPriorityThread	(	_In_ HWND	hWnd,
		_In_ PPH_THREAD_ITEM	Thread,
		_In_ ULONG	IoPriority
	)

Definition at line 2841 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiSetPagePriorityProcess	(	_In_ HWND	hWnd,
		_In_ PPH_PROCESS_ITEM	Process,
		_In_ ULONG	PagePriority
	)

Definition at line 1799 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiSetPagePriorityThread	(	_In_ HWND	hWnd,
		_In_ PPH_THREAD_ITEM	Thread,
		_In_ ULONG	PagePriority
	)

Definition at line 2895 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiSetPriorityProcesses	(	_In_ HWND	hWnd,
		_In_ PPH_PROCESS_ITEM *	Processes,
		_In_ ULONG	NumberOfProcesses,
		_In_ ULONG	PriorityClass
	)

Definition at line 1833 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiSetPriorityThread	(	_In_ HWND	hWnd,
		_In_ PPH_THREAD_ITEM	Thread,
		_In_ ULONG	ThreadPriorityWin32
	)

Definition at line 2810 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiSetVirtualizationProcess	(	_In_ HWND	hWnd,
		_In_ PPH_PROCESS_ITEM	Process,
		_In_ BOOLEAN	Enable
	)

Definition at line 1563 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiShutdownComputer	(	_In_ HWND	hWnd,
		_In_ ULONG	Flags
	)

Definition at line 591 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiSleepComputer ( _In_ HWND hWnd )

Definition at line 531 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiStartService	(	_In_ HWND	hWnd,
		_In_ PPH_SERVICE_ITEM	Service
	)

Definition at line 2120 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiStopService	(	_In_ HWND	hWnd,
		_In_ PPH_SERVICE_ITEM	Service
	)

Definition at line 2277 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiSuspendProcesses	(	_In_ HWND	hWnd,
		_In_ PPH_PROCESS_ITEM *	Processes,
		_In_ ULONG	NumberOfProcesses
	)

Definition at line 1156 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiSuspendThreads	(	_In_ HWND	hWnd,
		_In_ PPH_THREAD_ITEM *	Threads,
		_In_ ULONG	NumberOfThreads
	)

Definition at line 2684 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiTerminateProcesses	(	_In_ HWND	hWnd,
		_In_ PPH_PROCESS_ITEM *	Processes,
		_In_ ULONG	NumberOfProcesses
	)

Definition at line 971 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiTerminateThreads	(	_In_ HWND	hWnd,
		_In_ PPH_THREAD_ITEM *	Threads,
		_In_ ULONG	NumberOfThreads
	)

Definition at line 2543 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiTerminateTreeProcess	(	_In_ HWND	hWnd,
		_In_ PPH_PROCESS_ITEM	Process
	)

Definition at line 1116 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiUnloadModule	(	_In_ HWND	hWnd,
		_In_ HANDLE	ProcessId,
		_In_ PPH_MODULE_ITEM	Module
	)

Definition at line 2929 of file actions.c.

PPH_STRING PhUnescapeStringForDelimiter	(	_In_ PPH_STRING	String,
		_In_ WCHAR	Delimiter
	)

Definition at line 834 of file appsup.c.

VOID PhUnloadPlugins ( VOID )

Notifies all plugins that the program is shutting down.

Definition at line 323 of file plugin.c.

PHAPPAPI VOID NTAPI PhUnregisterDialog ( _In_ HWND DialogWindowHandle )

Definition at line 350 of file main.c.

PHAPPAPI VOID NTAPI PhUnregisterMessageLoopFilter ( _In_ struct _PH_MESSAGE_LOOP_FILTER_ENTRY * FilterEntry )

Definition at line 383 of file main.c.

PHAPPAPI VOID NTAPI PhWritePhTextHeader ( _Inout_ PPH_FILE_STREAM FileStream )

Definition at line 1305 of file appsup.c.

Variable Documentation

PPH_STRING PhApplicationDirectory

Definition at line 64 of file main.c.

PPH_STRING PhApplicationFileName

Definition at line 65 of file main.c.

PHAPPAPI HFONT PhApplicationFont

Definition at line 66 of file main.c.

PPH_STRING PhCurrentUserName

Definition at line 67 of file main.c.

HINSTANCE PhInstanceHandle

Definition at line 68 of file main.c.

PH_INTEGER_PAIR PhLargeIconSize

Definition at line 73 of file main.c.

PPH_STRING PhLocalSystemName

Definition at line 69 of file main.c.

PH_CIRCULAR_BUFFER_PVOID PhLogBuffer

Definition at line 27 of file log.c.

PHAPPAPI PH_CALLBACK PhLoggedCallback

BOOLEAN PhMainWndExiting

Definition at line 54 of file mainwnd.c.

PHAPPAPI HWND PhMainWndHandle

Definition at line 53 of file mainwnd.c.

PH_AVL_TREE PhPluginsByName

Definition at line 57 of file plugin.c.

BOOLEAN PhPluginsEnabled

Definition at line 70 of file main.c.

PH_PROVIDER_THREAD PhPrimaryProviderThread

Definition at line 76 of file main.c.

PH_PROVIDER_THREAD PhSecondaryProviderThread

Definition at line 77 of file main.c.

PPH_STRING PhSettingsFileName

Definition at line 71 of file main.c.

PH_INTEGER_PAIR PhSmallIconSize

Definition at line 72 of file main.c.

PH_STARTUP_PARAMETERS PhStartupParameters

Definition at line 74 of file main.c.

GUID VISTA_CONTEXT_GUID

Definition at line 56 of file appsup.c.

GUID WIN7_CONTEXT_GUID

Definition at line 57 of file appsup.c.

GUID WIN8_CONTEXT_GUID

Definition at line 58 of file appsup.c.

GUID WINBLUE_CONTEXT_GUID

Definition at line 59 of file appsup.c.

GUID XP_CONTEXT_GUID

Definition at line 55 of file appsup.c.

Data Structures

Macros

Typedefs

Enumerations

Functions

Variables

Macro Definition Documentation

Typedef Documentation

Enumeration Type Documentation

Function Documentation

Variable Documentation