Data Structures
struct	_PH_PROCESS_ITEM

struct	_PH_PROCESS_RECORD

struct	_PH_SERVICE_ITEM

struct	_PH_SERVICE_MODIFIED_DATA

struct	_PH_NETWORK_ITEM

struct	_PH_MODULE_ITEM

struct	_PH_MODULE_PROVIDER

struct	_PH_THREAD_ITEM

struct	_PH_THREAD_PROVIDER

struct	_PH_HANDLE_ITEM

struct	_PH_HANDLE_PROVIDER

struct	_PH_MEMORY_ITEM

struct	_PH_MEMORY_ITEM_LIST

struct	_PH_SH_STATE

struct	_PH_PROCESS_NODE

struct	_PH_SERVICE_NODE

struct	_PH_NETWORK_NODE

struct	_PH_THREAD_NODE

struct	_PH_MODULE_NODE

struct	_PH_HANDLE_NODE

struct	_PH_MEMORY_NODE

struct	_PH_MESSAGE_LOOP_FILTER_ENTRY

union	_PH_KNOWN_PROCESS_COMMAND_LINE

struct	_PH_TN_COLUMN_MENU_DATA

struct	_PH_TN_FILTER_SUPPORT

struct	_PH_TN_FILTER_ENTRY

struct	_PH_LAYOUT_PADDING_DATA

struct	_PH_ADDMENUITEM

struct	_PH_ADDITIONAL_TAB_PAGE

struct	_PH_PROCESS_PROPPAGECONTEXT

struct	_PH_NF_POINTERS

struct	_PH_NF_MSG_SHOWMINIINFOSECTION_DATA

struct	_PH_NF_ICON

struct	_PH_NF_ICON_REGISTRATION_DATA

struct	_PH_SETTING_CREATE

struct	_PH_SYSINFO_PARAMETERS

struct	_PH_SYSINFO_CREATE_DIALOG

struct	_PH_SYSINFO_GRAPH_GET_TOOLTIP_TEXT

struct	_PH_SYSINFO_DRAW_PANEL

struct	_PH_SYSINFO_SECTION

struct	_PH_PROCESS_GROUP

struct	_PH_MINIINFO_PARAMETERS

struct	_PH_MINIINFO_CREATE_DIALOG

struct	_PH_MINIINFO_SECTION

struct	_PH_MINIINFO_LIST_SECTION_SORT_DATA

struct	_PH_MINIINFO_LIST_SECTION_ASSIGN_SORT_DATA

struct	_PH_MINIINFO_LIST_SECTION_SORT_LIST

struct	_PH_MINIINFO_LIST_SECTION_GET_TITLE_TEXT

struct	_PH_MINIINFO_LIST_SECTION_GET_USAGE_TEXT

struct	_PH_MINIINFO_LIST_SECTION_MENU_INFORMATION

struct	_PH_MINIINFO_LIST_SECTION

struct	_PH_PLUGIN_GET_HIGHLIGHTING_COLOR

struct	_PH_PLUGIN_GET_TOOLTIP_TEXT

struct	_PH_PLUGIN_PROCESS_PROPCONTEXT

struct	_PH_PLUGIN_NOTIFY_EVENT

struct	_PH_PLUGIN_OBJECT_PROPERTIES

struct	_PH_PLUGIN_HANDLE_PROPERTIES_CONTEXT

struct	_PH_PLUGIN_MENU_INFORMATION

struct	_PH_PLUGIN_MENU_HOOK_INFORMATION

struct	_PH_PLUGIN_TREENEW_INFORMATION

struct	_PH_PLUGIN_THREAD_STACK_CONTROL

struct	_PH_PLUGIN_MEMORY_ITEM_LIST_CONTROL

struct	_PH_PLUGIN_SYSINFO_POINTERS

struct	_PH_PLUGIN_MINIINFO_POINTERS

struct	_PH_PLUGIN_TREENEW_MESSAGE

struct	_PH_PLUGIN_PHSVC_REQUEST

struct	_PH_PLUGIN_PHSVC_CLIENT

struct	_PH_PLUGIN_INFORMATION

struct	_PH_PLUGIN

struct	_PH_PLUGIN_MENU_ITEM

struct	_PH_PLUGIN_SYSTEM_STATISTICS

struct	_PH_THREADS_CONTEXT

struct	_PH_MODULES_CONTEXT

struct	_PH_HANDLES_CONTEXT

struct	_PH_MEMORY_CONTEXT

Macros
#define	DPCS_PROCESS_ID ((HANDLE)(LONG_PTR)-2)

#define	INTERRUPTS_PROCESS_ID ((HANDLE)(LONG_PTR)-3)

#define	PH_IS_REAL_PROCESS_ID(ProcessId) ((LONG_PTR)(ProcessId) > 0)

#define	PH_IS_FAKE_PROCESS_ID(ProcessId) ((LONG_PTR)(ProcessId) < 0)

#define	PH_PROCESS_ITEM_REMOVED 0x1

#define	PH_PROCESS_RECORD_DEAD 0x1

#define	PH_PROCESS_RECORD_STAT_REF 0x2

#define	PH_NETWORK_OWNER_INFO_SIZE 16

#define	PH_HANDLE_FILE_SHARED_READ 0x1

#define	PH_HANDLE_FILE_SHARED_WRITE 0x2

#define	PH_HANDLE_FILE_SHARED_DELETE 0x4

#define	PH_HANDLE_FILE_SHARED_MASK 0x7

#define	PH_QUERY_MEMORY_IGNORE_FREE 0x1

#define	PH_QUERY_MEMORY_REGION_TYPE 0x2

#define	PH_QUERY_MEMORY_WS_COUNTERS 0x4

#define	PH_SHELL_APP_PROPAGATE_PARAMETERS 0x1

#define	PH_SHELL_APP_PROPAGATE_PARAMETERS_IGNORE_VISIBILITY 0x2

#define	PH_SHELL_APP_PROPAGATE_PARAMETERS_FORCE_SETTINGS 0x4

#define	PH_TN_COLUMN_MENU_HIDE_COLUMN_ID ((ULONG)-1)

#define	PH_TN_COLUMN_MENU_CHOOSE_COLUMNS_ID ((ULONG)-2)

#define	PH_TN_COLUMN_MENU_SIZE_COLUMN_TO_FIT_ID ((ULONG)-3)

#define	PH_TN_COLUMN_MENU_SIZE_ALL_COLUMNS_TO_FIT_ID ((ULONG)-4)

#define	PH_TN_COLUMN_MENU_RESET_SORT_ID ((ULONG)-5)

#define	PH_MAINWND_CLASSNAME L"ProcessHacker"

#define	WM_PH_SHOW_PROCESS_PROPERTIES (WM_APP + 120)

#define	WM_PH_DESTROY (WM_APP + 121)

#define	WM_PH_SAVE_ALL_SETTINGS (WM_APP + 122)

#define	WM_PH_PREPARE_FOR_EARLY_SHUTDOWN (WM_APP + 123)

#define	WM_PH_CANCEL_EARLY_SHUTDOWN (WM_APP + 124)

#define	WM_PH_TOGGLE_VISIBLE (WM_APP + 127)

#define	WM_PH_SHOW_MEMORY_EDITOR (WM_APP + 128)

#define	WM_PH_SHOW_MEMORY_RESULTS (WM_APP + 129)

#define	WM_PH_SELECT_TAB_PAGE (WM_APP + 130)

#define	WM_PH_GET_CALLBACK_LAYOUT_PADDING (WM_APP + 131)

#define	WM_PH_INVALIDATE_LAYOUT_PADDING (WM_APP + 132)

#define	WM_PH_SELECT_PROCESS_NODE (WM_APP + 133)

#define	WM_PH_SELECT_SERVICE_ITEM (WM_APP + 134)

#define	WM_PH_SELECT_NETWORK_ITEM (WM_APP + 135)

#define	WM_PH_INVOKE (WM_APP + 138)

#define	WM_PH_ADD_MENU_ITEM (WM_APP + 139)

#define	WM_PH_ADD_TAB_PAGE (WM_APP + 140)

#define	WM_PH_REFRESH (WM_APP + 141)

#define	WM_PH_GET_UPDATE_AUTOMATICALLY (WM_APP + 142)

#define	WM_PH_SET_UPDATE_AUTOMATICALLY (WM_APP + 143)

#define	ProcessHacker_ShowProcessProperties(hWnd, ProcessItem) SendMessage(hWnd, WM_PH_SHOW_PROCESS_PROPERTIES, 0, (LPARAM)(ProcessItem))

#define	ProcessHacker_Destroy(hWnd) SendMessage(hWnd, WM_PH_DESTROY, 0, 0)

#define	ProcessHacker_SaveAllSettings(hWnd) SendMessage(hWnd, WM_PH_SAVE_ALL_SETTINGS, 0, 0)

#define	ProcessHacker_PrepareForEarlyShutdown(hWnd) SendMessage(hWnd, WM_PH_PREPARE_FOR_EARLY_SHUTDOWN, 0, 0)

#define	ProcessHacker_CancelEarlyShutdown(hWnd) SendMessage(hWnd, WM_PH_CANCEL_EARLY_SHUTDOWN, 0, 0)

#define	ProcessHacker_ToggleVisible(hWnd, AlwaysShow) SendMessage(hWnd, WM_PH_TOGGLE_VISIBLE, (WPARAM)(AlwaysShow), 0)

#define	ProcessHacker_ShowMemoryEditor(hWnd, ShowMemoryEditor) PostMessage(hWnd, WM_PH_SHOW_MEMORY_EDITOR, 0, (LPARAM)(ShowMemoryEditor))

#define	ProcessHacker_ShowMemoryResults(hWnd, ShowMemoryResults) PostMessage(hWnd, WM_PH_SHOW_MEMORY_RESULTS, 0, (LPARAM)(ShowMemoryResults))

#define	ProcessHacker_SelectTabPage(hWnd, Index) SendMessage(hWnd, WM_PH_SELECT_TAB_PAGE, (WPARAM)(Index), 0)

#define	ProcessHacker_GetCallbackLayoutPadding(hWnd) ((PPH_CALLBACK)SendMessage(hWnd, WM_PH_GET_CALLBACK_LAYOUT_PADDING, 0, 0))

#define	ProcessHacker_InvalidateLayoutPadding(hWnd) SendMessage(hWnd, WM_PH_INVALIDATE_LAYOUT_PADDING, 0, 0)

#define	ProcessHacker_SelectProcessNode(hWnd, ProcessNode) SendMessage(hWnd, WM_PH_SELECT_PROCESS_NODE, 0, (LPARAM)(ProcessNode))

#define	ProcessHacker_SelectServiceItem(hWnd, ServiceItem) SendMessage(hWnd, WM_PH_SELECT_SERVICE_ITEM, 0, (LPARAM)(ServiceItem))

#define	ProcessHacker_SelectNetworkItem(hWnd, NetworkItem) SendMessage(hWnd, WM_PH_SELECT_NETWORK_ITEM, 0, (LPARAM)(NetworkItem))

#define	ProcessHacker_Invoke(hWnd, Function, Parameter) PostMessage(hWnd, WM_PH_INVOKE, (WPARAM)(Parameter), (LPARAM)(Function))

#define	ProcessHacker_AddMenuItem(hWnd, AddMenuItem) ((ULONG_PTR)SendMessage(hWnd, WM_PH_ADD_MENU_ITEM, 0, (LPARAM)(AddMenuItem)))

#define	ProcessHacker_AddTabPage(hWnd, TabPage) ((PPH_ADDITIONAL_TAB_PAGE)SendMessage(hWnd, WM_PH_ADD_TAB_PAGE, 0, (LPARAM)(TabPage)))

#define	ProcessHacker_Refresh(hWnd) SendMessage(hWnd, WM_PH_REFRESH, 0, 0)

#define	ProcessHacker_GetUpdateAutomatically(hWnd) ((BOOLEAN)SendMessage(hWnd, WM_PH_GET_UPDATE_AUTOMATICALLY, 0, 0))

#define	ProcessHacker_SetUpdateAutomatically(hWnd, Value) SendMessage(hWnd, WM_PH_SET_UPDATE_AUTOMATICALLY, (WPARAM)(Value), 0)

#define	PH_NOTIFY_MINIMUM 0x1

#define	PH_NOTIFY_PROCESS_CREATE 0x1

#define	PH_NOTIFY_PROCESS_DELETE 0x2

#define	PH_NOTIFY_SERVICE_CREATE 0x4

#define	PH_NOTIFY_SERVICE_DELETE 0x8

#define	PH_NOTIFY_SERVICE_START 0x10

#define	PH_NOTIFY_SERVICE_STOP 0x20

#define	PH_NOTIFY_MAXIMUM 0x40

#define	PH_NOTIFY_VALID_MASK 0x3f

#define	PH_PROP_PAGE_TAB_CONTROL_PARENT ((PPH_LAYOUT_ITEM)0x1)

#define	PH_LOG_ENTRY_MESSAGE 9

#define	PH_CHOICE_DIALOG_SAVED_CHOICES 10

#define	PH_CHOICE_DIALOG_CHOICE 0x0

#define	PH_CHOICE_DIALOG_USER_CHOICE 0x1

#define	PH_CHOICE_DIALOG_PASSWORD 0x2

#define	PH_CHOICE_DIALOG_TYPE_MASK 0x3

#define	WM_PH_SET_LIST_VIEW_SETTINGS (WM_APP + 701)

#define	PH_NF_UPDATE_IS_BITMAP 0x1

#define	PH_NF_UPDATE_DESTROY_RESOURCE 0x2

#define	PH_NF_MSG_SHOWMINIINFOSECTION (WM_APP + 1)

#define	PH_NF_ICON_UNAVAILABLE 0x1

#define	PH_NF_ICON_SHOW_MINIINFO 0x2

#define	PhaGetStringSetting(Name) ((PPH_STRING)PhAutoDereferenceObject(PhGetStringSetting(Name)))

#define	PH_MINIINFO_SECTION_NO_UPPER_MARGINS 0x1

#define	PH_PLUGIN_MENU_DISALLOW_HOOKS 0x1

#define	PH_PLUGIN_FLAG_RESERVED 0x1

#define	PH_MENU_ITEM_LOCATION_VIEW 1

#define	PH_MENU_ITEM_LOCATION_TOOLS 2

#define	PH_MENU_ITEM_SUB_MENU 0x80000000

#define	PH_MENU_ITEM_RETURN_MENU 0x40000000

#define	PH_MENU_ITEM_VALID_FLAGS 0xc0000000

Typedefs
typedef enum _VERIFY_RESULT	VERIFY_RESULT

typedef struct _PH_PROCESS_RECORD *	PPH_PROCESS_RECORD

typedef struct _PH_PROCESS_ITEM	PH_PROCESS_ITEM

typedef struct _PH_PROCESS_ITEM *	PPH_PROCESS_ITEM

typedef struct _PH_PROCESS_RECORD	PH_PROCESS_RECORD

typedef struct _PH_SERVICE_ITEM	PH_SERVICE_ITEM

typedef struct _PH_SERVICE_ITEM *	PPH_SERVICE_ITEM

typedef struct _PH_SERVICE_MODIFIED_DATA	PH_SERVICE_MODIFIED_DATA

typedef struct _PH_SERVICE_MODIFIED_DATA *	PPH_SERVICE_MODIFIED_DATA

typedef enum _PH_SERVICE_CHANGE	PH_SERVICE_CHANGE

typedef enum _PH_SERVICE_CHANGE *	PPH_SERVICE_CHANGE

typedef struct _PH_NETWORK_ITEM	PH_NETWORK_ITEM

typedef struct _PH_NETWORK_ITEM *	PPH_NETWORK_ITEM

typedef struct _PH_MODULE_ITEM	PH_MODULE_ITEM

typedef struct _PH_MODULE_ITEM *	PPH_MODULE_ITEM

typedef struct _PH_MODULE_PROVIDER	PH_MODULE_PROVIDER

typedef struct _PH_MODULE_PROVIDER *	PPH_MODULE_PROVIDER

typedef struct _PH_THREAD_ITEM	PH_THREAD_ITEM

typedef struct _PH_THREAD_ITEM *	PPH_THREAD_ITEM

typedef enum _PH_KNOWN_PROCESS_TYPE	PH_KNOWN_PROCESS_TYPE

typedef struct _PH_THREAD_PROVIDER	PH_THREAD_PROVIDER

typedef struct _PH_THREAD_PROVIDER *	PPH_THREAD_PROVIDER

typedef struct _PH_HANDLE_ITEM	PH_HANDLE_ITEM

typedef struct _PH_HANDLE_ITEM *	PPH_HANDLE_ITEM

typedef struct _PH_HANDLE_PROVIDER	PH_HANDLE_PROVIDER

typedef struct _PH_HANDLE_PROVIDER *	PPH_HANDLE_PROVIDER

typedef enum _PH_MEMORY_REGION_TYPE	PH_MEMORY_REGION_TYPE

typedef struct _PH_MEMORY_ITEM	PH_MEMORY_ITEM

typedef struct _PH_MEMORY_ITEM *	PPH_MEMORY_ITEM

typedef struct _PH_MEMORY_ITEM_LIST	PH_MEMORY_ITEM_LIST

typedef struct _PH_MEMORY_ITEM_LIST *	PPH_MEMORY_ITEM_LIST

typedef LONG(NTAPI *	PPH_CM_POST_SORT_FUNCTION )(_In_ LONG Result, _In_ PVOID Node1, _In_ PVOID Node2, _In_ PH_SORT_ORDER SortOrder)

typedef struct _PH_SH_STATE	PH_SH_STATE

typedef struct _PH_SH_STATE *	PPH_SH_STATE

typedef struct _PH_PROCESS_NODE	PH_PROCESS_NODE

typedef struct _PH_PROCESS_NODE *	PPH_PROCESS_NODE

typedef struct _PH_SERVICE_NODE	PH_SERVICE_NODE

typedef struct _PH_SERVICE_NODE *	PPH_SERVICE_NODE

typedef struct _PH_NETWORK_NODE	PH_NETWORK_NODE

typedef struct _PH_NETWORK_NODE *	PPH_NETWORK_NODE

typedef struct _PH_THREAD_NODE	PH_THREAD_NODE

typedef struct _PH_THREAD_NODE *	PPH_THREAD_NODE

typedef struct _PH_MODULE_NODE	PH_MODULE_NODE

typedef struct _PH_MODULE_NODE *	PPH_MODULE_NODE

typedef struct _PH_HANDLE_NODE	PH_HANDLE_NODE

typedef struct _PH_HANDLE_NODE *	PPH_HANDLE_NODE

typedef struct _PH_MEMORY_NODE	PH_MEMORY_NODE

typedef struct _PH_MEMORY_NODE *	PPH_MEMORY_NODE

typedef struct _PH_SYMBOL_PROVIDER *	PPH_SYMBOL_PROVIDER

typedef BOOLEAN(NTAPI *	PPH_MESSAGE_LOOP_FILTER )(_In_ PMSG Message, _In_ PVOID Context)

typedef struct _PH_MESSAGE_LOOP_FILTER_ENTRY	PH_MESSAGE_LOOP_FILTER_ENTRY

typedef struct _PH_MESSAGE_LOOP_FILTER_ENTRY *	PPH_MESSAGE_LOOP_FILTER_ENTRY

typedef union _PH_KNOWN_PROCESS_COMMAND_LINE	PH_KNOWN_PROCESS_COMMAND_LINE

typedef union _PH_KNOWN_PROCESS_COMMAND_LINE *	PPH_KNOWN_PROCESS_COMMAND_LINE

typedef struct _PH_TN_COLUMN_MENU_DATA	PH_TN_COLUMN_MENU_DATA

typedef struct _PH_TN_COLUMN_MENU_DATA *	PPH_TN_COLUMN_MENU_DATA

typedef struct _PH_TN_FILTER_SUPPORT	PH_TN_FILTER_SUPPORT

typedef struct _PH_TN_FILTER_SUPPORT *	PPH_TN_FILTER_SUPPORT

typedef BOOLEAN(NTAPI *	PPH_TN_FILTER_FUNCTION )(_In_ PPH_TREENEW_NODE Node, _In_opt_ PVOID Context)

typedef struct _PH_TN_FILTER_ENTRY	PH_TN_FILTER_ENTRY

typedef struct _PH_TN_FILTER_ENTRY *	PPH_TN_FILTER_ENTRY

typedef struct _PH_LAYOUT_PADDING_DATA	PH_LAYOUT_PADDING_DATA

typedef struct _PH_LAYOUT_PADDING_DATA *	PPH_LAYOUT_PADDING_DATA

typedef struct _PH_ADDMENUITEM	PH_ADDMENUITEM

typedef struct _PH_ADDMENUITEM *	PPH_ADDMENUITEM

typedef HWND(NTAPI *	PPH_TAB_PAGE_CREATE_FUNCTION )(_In_ PVOID Context)

typedef VOID(NTAPI *	PPH_TAB_PAGE_CALLBACK_FUNCTION )(_In_ PVOID Parameter1, _In_ PVOID Parameter2, _In_ PVOID Parameter3, _In_ PVOID Context)

typedef struct _PH_ADDITIONAL_TAB_PAGE	PH_ADDITIONAL_TAB_PAGE

typedef struct _PH_ADDITIONAL_TAB_PAGE *	PPH_ADDITIONAL_TAB_PAGE

typedef struct _PH_PROCESS_PROPCONTEXT *	PPH_PROCESS_PROPCONTEXT

typedef struct _PH_PROCESS_PROPPAGECONTEXT	PH_PROCESS_PROPPAGECONTEXT

typedef struct _PH_PROCESS_PROPPAGECONTEXT *	PPH_PROCESS_PROPPAGECONTEXT

typedef struct _PH_LOG_ENTRY *	PPH_LOG_ENTRY

typedef enum _PH_PHSVC_MODE	PH_PHSVC_MODE

typedef enum _PH_EM_OBJECT_TYPE	PH_EM_OBJECT_TYPE

typedef enum _PH_EM_OBJECT_OPERATION	PH_EM_OBJECT_OPERATION

typedef VOID(NTAPI *	PPH_EM_OBJECT_CALLBACK )(_In_ PVOID Object, _In_ PH_EM_OBJECT_TYPE ObjectType, _In_ PVOID Extension)

typedef VOID(NTAPI *	PPH_NF_UPDATE_REGISTERED_ICON )(_In_ struct _PH_NF_ICON *Icon)

typedef VOID(NTAPI *	PPH_NF_BEGIN_BITMAP )(_Out_ PULONG Width, _Out_ PULONG Height, _Out_ HBITMAP Bitmap, _Out_opt_ PVOID Bits, _Out_ HDC Hdc, _Out_ HBITMAP OldBitmap)

typedef struct _PH_NF_POINTERS	PH_NF_POINTERS

typedef struct _PH_NF_POINTERS *	PPH_NF_POINTERS

typedef VOID(NTAPI *	PPH_NF_ICON_UPDATE_CALLBACK )(_In_ struct _PH_NF_ICON Icon, _Out_ PVOID NewIconOrBitmap, _Out_ PULONG Flags, _Out_ PPH_STRING *NewText, _In_opt_ PVOID Context)

typedef BOOLEAN(NTAPI *	PPH_NF_ICON_MESSAGE_CALLBACK )(_In_ struct _PH_NF_ICON *Icon, _In_ ULONG_PTR WParam, _In_ ULONG_PTR LParam, _In_opt_ PVOID Context)

typedef struct _PH_NF_MSG_SHOWMINIINFOSECTION_DATA	PH_NF_MSG_SHOWMINIINFOSECTION_DATA

typedef struct _PH_NF_MSG_SHOWMINIINFOSECTION_DATA *	PPH_NF_MSG_SHOWMINIINFOSECTION_DATA

typedef struct _PH_NF_ICON	PH_NF_ICON

typedef struct _PH_NF_ICON *	PPH_NF_ICON

typedef struct _PH_NF_ICON_REGISTRATION_DATA	PH_NF_ICON_REGISTRATION_DATA

typedef struct _PH_NF_ICON_REGISTRATION_DATA *	PPH_NF_ICON_REGISTRATION_DATA

typedef enum _PH_SETTING_TYPE	PH_SETTING_TYPE

typedef enum _PH_SETTING_TYPE	PPH_SETTING_TYPE

typedef struct _PH_SETTING_CREATE	PH_SETTING_CREATE

typedef struct _PH_SETTING_CREATE *	PPH_SETTING_CREATE

typedef enum _PH_SYSINFO_VIEW_TYPE	PH_SYSINFO_VIEW_TYPE

typedef VOID(NTAPI *	PPH_SYSINFO_COLOR_SETUP_FUNCTION )(_Out_ PPH_GRAPH_DRAW_INFO DrawInfo, _In_ COLORREF Color1, _In_ COLORREF Color2)

typedef struct _PH_SYSINFO_PARAMETERS	PH_SYSINFO_PARAMETERS

typedef struct _PH_SYSINFO_PARAMETERS *	PPH_SYSINFO_PARAMETERS

typedef enum _PH_SYSINFO_SECTION_MESSAGE	PH_SYSINFO_SECTION_MESSAGE

typedef BOOLEAN(NTAPI *	PPH_SYSINFO_SECTION_CALLBACK )(_In_ struct _PH_SYSINFO_SECTION *Section, _In_ PH_SYSINFO_SECTION_MESSAGE Message, _In_opt_ PVOID Parameter1, _In_opt_ PVOID Parameter2)

typedef struct _PH_SYSINFO_CREATE_DIALOG	PH_SYSINFO_CREATE_DIALOG

typedef struct _PH_SYSINFO_CREATE_DIALOG *	PPH_SYSINFO_CREATE_DIALOG

typedef struct _PH_SYSINFO_GRAPH_GET_TOOLTIP_TEXT	PH_SYSINFO_GRAPH_GET_TOOLTIP_TEXT

typedef struct _PH_SYSINFO_GRAPH_GET_TOOLTIP_TEXT *	PPH_SYSINFO_GRAPH_GET_TOOLTIP_TEXT

typedef struct _PH_SYSINFO_DRAW_PANEL	PH_SYSINFO_DRAW_PANEL

typedef struct _PH_SYSINFO_DRAW_PANEL *	PPH_SYSINFO_DRAW_PANEL

typedef struct _PH_SYSINFO_SECTION	PH_SYSINFO_SECTION

typedef struct _PH_SYSINFO_SECTION *	PPH_SYSINFO_SECTION

typedef struct _PH_PROCESS_GROUP	PH_PROCESS_GROUP

typedef struct _PH_PROCESS_GROUP *	PPH_PROCESS_GROUP

typedef VOID(NTAPI *	PPH_MINIINFO_SET_SECTION_TEXT )(_In_ struct _PH_MINIINFO_SECTION *Section, _In_opt_ PPH_STRING Text)

typedef struct _PH_MINIINFO_PARAMETERS	PH_MINIINFO_PARAMETERS

typedef struct _PH_MINIINFO_PARAMETERS *	PPH_MINIINFO_PARAMETERS

typedef enum _PH_MINIINFO_SECTION_MESSAGE	PH_MINIINFO_SECTION_MESSAGE

typedef BOOLEAN(NTAPI *	PPH_MINIINFO_SECTION_CALLBACK )(_In_ struct _PH_MINIINFO_SECTION *Section, _In_ PH_MINIINFO_SECTION_MESSAGE Message, _In_opt_ PVOID Parameter1, _In_opt_ PVOID Parameter2)

typedef struct _PH_MINIINFO_CREATE_DIALOG	PH_MINIINFO_CREATE_DIALOG

typedef struct _PH_MINIINFO_CREATE_DIALOG *	PPH_MINIINFO_CREATE_DIALOG

typedef struct _PH_MINIINFO_SECTION	PH_MINIINFO_SECTION

typedef struct _PH_MINIINFO_SECTION *	PPH_MINIINFO_SECTION

typedef enum _PH_MINIINFO_LIST_SECTION_MESSAGE	PH_MINIINFO_LIST_SECTION_MESSAGE

typedef BOOLEAN(NTAPI *	PPH_MINIINFO_LIST_SECTION_CALLBACK )(_In_ struct _PH_MINIINFO_LIST_SECTION *ListSection, _In_ PH_MINIINFO_LIST_SECTION_MESSAGE Message, _In_opt_ PVOID Parameter1, _In_opt_ PVOID Parameter2)

typedef struct _PH_MINIINFO_LIST_SECTION_SORT_DATA	PH_MINIINFO_LIST_SECTION_SORT_DATA

typedef struct _PH_MINIINFO_LIST_SECTION_SORT_DATA *	PPH_MINIINFO_LIST_SECTION_SORT_DATA

typedef struct _PH_MINIINFO_LIST_SECTION_ASSIGN_SORT_DATA	PH_MINIINFO_LIST_SECTION_ASSIGN_SORT_DATA

typedef struct _PH_MINIINFO_LIST_SECTION_ASSIGN_SORT_DATA *	PPH_MINIINFO_LIST_SECTION_ASSIGN_SORT_DATA

typedef struct _PH_MINIINFO_LIST_SECTION_SORT_LIST	PH_MINIINFO_LIST_SECTION_SORT_LIST

typedef struct _PH_MINIINFO_LIST_SECTION_SORT_LIST *	PPH_MINIINFO_LIST_SECTION_SORT_LIST

typedef struct _PH_MINIINFO_LIST_SECTION_GET_TITLE_TEXT	PH_MINIINFO_LIST_SECTION_GET_TITLE_TEXT

typedef struct _PH_MINIINFO_LIST_SECTION_GET_TITLE_TEXT *	PPH_MINIINFO_LIST_SECTION_GET_TITLE_TEXT

typedef struct _PH_MINIINFO_LIST_SECTION_GET_USAGE_TEXT	PH_MINIINFO_LIST_SECTION_GET_USAGE_TEXT

typedef struct _PH_MINIINFO_LIST_SECTION_GET_USAGE_TEXT *	PPH_MINIINFO_LIST_SECTION_GET_USAGE_TEXT

typedef struct _PH_MINIINFO_LIST_SECTION_MENU_INFORMATION	PH_MINIINFO_LIST_SECTION_MENU_INFORMATION

typedef struct _PH_MINIINFO_LIST_SECTION_MENU_INFORMATION *	PPH_MINIINFO_LIST_SECTION_MENU_INFORMATION

typedef struct _PH_MINIINFO_LIST_SECTION	PH_MINIINFO_LIST_SECTION

typedef struct _PH_MINIINFO_LIST_SECTION *	PPH_MINIINFO_LIST_SECTION

typedef enum _PH_GENERAL_CALLBACK	PH_GENERAL_CALLBACK

typedef enum _PH_GENERAL_CALLBACK *	PPH_GENERAL_CALLBACK

typedef enum _PH_PLUGIN_CALLBACK	PH_PLUGIN_CALLBACK

typedef enum _PH_PLUGIN_CALLBACK *	PPH_PLUGIN_CALLBACK

typedef struct _PH_PLUGIN_GET_HIGHLIGHTING_COLOR	PH_PLUGIN_GET_HIGHLIGHTING_COLOR

typedef struct _PH_PLUGIN_GET_HIGHLIGHTING_COLOR *	PPH_PLUGIN_GET_HIGHLIGHTING_COLOR

typedef struct _PH_PLUGIN_GET_TOOLTIP_TEXT	PH_PLUGIN_GET_TOOLTIP_TEXT

typedef struct _PH_PLUGIN_GET_TOOLTIP_TEXT *	PPH_PLUGIN_GET_TOOLTIP_TEXT

typedef struct _PH_PLUGIN_PROCESS_PROPCONTEXT	PH_PLUGIN_PROCESS_PROPCONTEXT

typedef struct _PH_PLUGIN_PROCESS_PROPCONTEXT *	PPH_PLUGIN_PROCESS_PROPCONTEXT

typedef struct _PH_PLUGIN_NOTIFY_EVENT	PH_PLUGIN_NOTIFY_EVENT

typedef struct _PH_PLUGIN_NOTIFY_EVENT *	PPH_PLUGIN_NOTIFY_EVENT

typedef struct _PH_PLUGIN_OBJECT_PROPERTIES	PH_PLUGIN_OBJECT_PROPERTIES

typedef struct _PH_PLUGIN_OBJECT_PROPERTIES *	PPH_PLUGIN_OBJECT_PROPERTIES

typedef struct _PH_PLUGIN_HANDLE_PROPERTIES_CONTEXT	PH_PLUGIN_HANDLE_PROPERTIES_CONTEXT

typedef struct _PH_PLUGIN_HANDLE_PROPERTIES_CONTEXT *	PPH_PLUGIN_HANDLE_PROPERTIES_CONTEXT

typedef struct _PH_EMENU_ITEM *	PPH_EMENU_ITEM

typedef struct _PH_EMENU_ITEM *	PPH_EMENU

typedef struct _PH_PLUGIN_MENU_INFORMATION	PH_PLUGIN_MENU_INFORMATION

typedef struct _PH_PLUGIN_MENU_INFORMATION *	PPH_PLUGIN_MENU_INFORMATION

typedef struct _PH_PLUGIN_MENU_HOOK_INFORMATION	PH_PLUGIN_MENU_HOOK_INFORMATION

typedef struct _PH_PLUGIN_MENU_HOOK_INFORMATION *	PPH_PLUGIN_MENU_HOOK_INFORMATION

typedef struct _PH_PLUGIN_TREENEW_INFORMATION	PH_PLUGIN_TREENEW_INFORMATION

typedef struct _PH_PLUGIN_TREENEW_INFORMATION *	PPH_PLUGIN_TREENEW_INFORMATION

typedef enum _PH_PLUGIN_THREAD_STACK_CONTROL_TYPE	PH_PLUGIN_THREAD_STACK_CONTROL_TYPE

typedef struct _PH_THREAD_STACK_FRAME *	PPH_THREAD_STACK_FRAME

typedef BOOLEAN(NTAPI *	PPH_PLUGIN_WALK_THREAD_STACK_CALLBACK )(_In_ PPH_THREAD_STACK_FRAME StackFrame, _In_opt_ PVOID Context)

typedef struct _PH_PLUGIN_THREAD_STACK_CONTROL	PH_PLUGIN_THREAD_STACK_CONTROL

typedef struct _PH_PLUGIN_THREAD_STACK_CONTROL *	PPH_PLUGIN_THREAD_STACK_CONTROL

typedef enum _PH_PLUGIN_MEMORY_ITEM_LIST_CONTROL_TYPE	PH_PLUGIN_MEMORY_ITEM_LIST_CONTROL_TYPE

typedef struct _PH_PLUGIN_MEMORY_ITEM_LIST_CONTROL	PH_PLUGIN_MEMORY_ITEM_LIST_CONTROL

typedef struct _PH_PLUGIN_MEMORY_ITEM_LIST_CONTROL *	PPH_PLUGIN_MEMORY_ITEM_LIST_CONTROL

typedef PPH_SYSINFO_SECTION(NTAPI *	PPH_SYSINFO_CREATE_SECTION )(_In_ PPH_SYSINFO_SECTION Template)

typedef PPH_SYSINFO_SECTION(NTAPI *	PPH_SYSINFO_FIND_SECTION )(_In_ PPH_STRINGREF Name)

typedef VOID(NTAPI *	PPH_SYSINFO_ENTER_SECTION_VIEW )(_In_ PPH_SYSINFO_SECTION NewSection)

typedef VOID(NTAPI *	PPH_SYSINFO_RESTORE_SUMMARY_VIEW )(VOID)

typedef struct _PH_PLUGIN_SYSINFO_POINTERS	PH_PLUGIN_SYSINFO_POINTERS

typedef struct _PH_PLUGIN_SYSINFO_POINTERS *	PPH_PLUGIN_SYSINFO_POINTERS

typedef PPH_MINIINFO_SECTION(NTAPI *	PPH_MINIINFO_CREATE_SECTION )(_In_ PPH_MINIINFO_SECTION Template)

typedef PPH_MINIINFO_SECTION(NTAPI *	PPH_MINIINFO_FIND_SECTION )(_In_ PPH_STRINGREF Name)

typedef PPH_MINIINFO_LIST_SECTION(NTAPI *	PPH_MINIINFO_CREATE_LIST_SECTION )(_In_ PWSTR Name, _In_ ULONG Flags, _In_ PPH_MINIINFO_LIST_SECTION Template)

typedef struct _PH_PLUGIN_MINIINFO_POINTERS	PH_PLUGIN_MINIINFO_POINTERS

typedef struct _PH_PLUGIN_MINIINFO_POINTERS *	PPH_PLUGIN_MINIINFO_POINTERS

typedef struct _PH_PLUGIN_TREENEW_MESSAGE	PH_PLUGIN_TREENEW_MESSAGE

typedef struct _PH_PLUGIN_TREENEW_MESSAGE *	PPH_PLUGIN_TREENEW_MESSAGE

typedef LONG(NTAPI *	PPH_PLUGIN_TREENEW_SORT_FUNCTION )(_In_ PVOID Node1, _In_ PVOID Node2, _In_ ULONG SubId, _In_ PVOID Context)

typedef NTSTATUS(NTAPI *	PPHSVC_SERVER_PROBE_BUFFER )(_In_ PPH_RELATIVE_STRINGREF String, _In_ ULONG Alignment, _In_ BOOLEAN AllowNull, _Out_ PVOID *Pointer)

typedef NTSTATUS(NTAPI *	PPHSVC_SERVER_CAPTURE_BUFFER )(_In_ PPH_RELATIVE_STRINGREF String, _In_ BOOLEAN AllowNull, _Out_ PVOID *CapturedBuffer)

typedef NTSTATUS(NTAPI *	PPHSVC_SERVER_CAPTURE_STRING )(_In_ PPH_RELATIVE_STRINGREF String, _In_ BOOLEAN AllowNull, _Out_ PPH_STRING *CapturedString)

typedef struct _PH_PLUGIN_PHSVC_REQUEST	PH_PLUGIN_PHSVC_REQUEST

typedef struct _PH_PLUGIN_PHSVC_REQUEST *	PPH_PLUGIN_PHSVC_REQUEST

typedef VOID(NTAPI *	PPHSVC_CLIENT_FREE_HEAP )(_In_ PVOID Memory)

typedef PVOID(NTAPI *	PPHSVC_CLIENT_CREATE_STRING )(_In_opt_ PVOID String, _In_ SIZE_T Length, _Out_ PPH_RELATIVE_STRINGREF StringRef)

typedef struct _PH_PLUGIN_PHSVC_CLIENT	PH_PLUGIN_PHSVC_CLIENT

typedef struct _PH_PLUGIN_PHSVC_CLIENT *	PPH_PLUGIN_PHSVC_CLIENT

typedef struct _PH_PLUGIN_INFORMATION	PH_PLUGIN_INFORMATION

typedef struct _PH_PLUGIN_INFORMATION *	PPH_PLUGIN_INFORMATION

typedef struct _PH_PLUGIN	PH_PLUGIN

typedef struct _PH_PLUGIN *	PPH_PLUGIN

typedef VOID(NTAPI *	PPH_PLUGIN_MENU_ITEM_DELETE_FUNCTION )(_In_ struct _PH_PLUGIN_MENU_ITEM *MenuItem)

typedef struct _PH_PLUGIN_MENU_ITEM	PH_PLUGIN_MENU_ITEM

typedef struct _PH_PLUGIN_MENU_ITEM *	PPH_PLUGIN_MENU_ITEM

typedef struct _PH_PLUGIN_SYSTEM_STATISTICS	PH_PLUGIN_SYSTEM_STATISTICS

typedef struct _PH_PLUGIN_SYSTEM_STATISTICS *	PPH_PLUGIN_SYSTEM_STATISTICS

typedef struct _PH_THREADS_CONTEXT	PH_THREADS_CONTEXT

typedef struct _PH_THREADS_CONTEXT *	PPH_THREADS_CONTEXT

typedef struct _PH_MODULES_CONTEXT	PH_MODULES_CONTEXT

typedef struct _PH_MODULES_CONTEXT *	PPH_MODULES_CONTEXT

typedef struct _PH_HANDLES_CONTEXT	PH_HANDLES_CONTEXT

typedef struct _PH_HANDLES_CONTEXT *	PPH_HANDLES_CONTEXT

typedef struct _PH_MEMORY_CONTEXT	PH_MEMORY_CONTEXT

typedef struct _PH_MEMORY_CONTEXT *	PPH_MEMORY_CONTEXT

Enumerations
enum	_PH_SERVICE_CHANGE { ServiceStarted, ServiceContinued, ServicePaused, ServiceStopped, ServiceStarted, ServiceContinued, ServicePaused, ServiceStopped }

enum	_PH_MEMORY_REGION_TYPE { UnknownRegion, CustomRegion, UnusableRegion, MappedFileRegion, UserSharedDataRegion, PebRegion, Peb32Region, TebRegion, Teb32Region, StackRegion, Stack32Region, HeapRegion, Heap32Region, HeapSegmentRegion, HeapSegment32Region, UnknownRegion, CustomRegion, UnusableRegion, MappedFileRegion, UserSharedDataRegion, PebRegion, Peb32Region, TebRegion, Teb32Region, StackRegion, Stack32Region, HeapRegion, Heap32Region, HeapSegmentRegion, HeapSegment32Region }

enum	_PH_KNOWN_PROCESS_TYPE { UnknownProcessType, SystemProcessType, SessionManagerProcessType, WindowsSubsystemProcessType, WindowsStartupProcessType, ServiceControlManagerProcessType, LocalSecurityAuthorityProcessType, LocalSessionManagerProcessType, WindowsLogonProcessType, ServiceHostProcessType, RunDllAsAppProcessType, ComSurrogateProcessType, TaskHostProcessType, ExplorerProcessType, UmdfHostProcessType, MaximumProcessType, KnownProcessTypeMask = 0xffff, KnownProcessWow64 = 0x20000, UnknownProcessType, SystemProcessType, SessionManagerProcessType, WindowsSubsystemProcessType, WindowsStartupProcessType, ServiceControlManagerProcessType, LocalSecurityAuthorityProcessType, LocalSessionManagerProcessType, WindowsLogonProcessType, ServiceHostProcessType, RunDllAsAppProcessType, ComSurrogateProcessType, TaskHostProcessType, ExplorerProcessType, UmdfHostProcessType, MaximumProcessType, KnownProcessTypeMask = 0xffff, KnownProcessWow64 = 0x20000 }

enum	_PH_PHSVC_MODE { ElevatedPhSvcMode, Wow64PhSvcMode, ElevatedPhSvcMode, Wow64PhSvcMode }

enum	_PH_EM_OBJECT_TYPE { EmProcessItemType, EmProcessNodeType, EmServiceItemType, EmServiceNodeType, EmNetworkItemType, EmNetworkNodeType, EmThreadItemType, EmThreadNodeType, EmModuleItemType, EmModuleNodeType, EmHandleItemType, EmHandleNodeType, EmThreadsContextType, EmModulesContextType, EmHandlesContextType, EmThreadProviderType, EmModuleProviderType, EmHandleProviderType, EmMemoryNodeType, EmMemoryContextType, EmMaximumObjectType, EmProcessItemType, EmProcessNodeType, EmServiceItemType, EmServiceNodeType, EmNetworkItemType, EmNetworkNodeType, EmThreadItemType, EmThreadNodeType, EmModuleItemType, EmModuleNodeType, EmHandleItemType, EmHandleNodeType, EmThreadsContextType, EmModulesContextType, EmHandlesContextType, EmThreadProviderType, EmModuleProviderType, EmHandleProviderType, EmMemoryNodeType, EmMemoryContextType, EmMaximumObjectType }

enum	_PH_EM_OBJECT_OPERATION { EmObjectCreate, EmObjectDelete, EmMaximumObjectOperation, EmObjectCreate, EmObjectDelete, EmMaximumObjectOperation }

enum	_PH_SETTING_TYPE { StringSettingType, IntegerSettingType, IntegerPairSettingType, StringSettingType, IntegerSettingType, IntegerPairSettingType }

enum	_PH_SYSINFO_VIEW_TYPE { SysInfoSummaryView, SysInfoSectionView, SysInfoSummaryView, SysInfoSectionView }

enum	_PH_SYSINFO_SECTION_MESSAGE { SysInfoCreate, SysInfoDestroy, SysInfoTick, SysInfoViewChanging, SysInfoCreateDialog, SysInfoGraphGetDrawInfo, SysInfoGraphGetTooltipText, SysInfoGraphDrawPanel, MaxSysInfoMessage, SysInfoCreate, SysInfoDestroy, SysInfoTick, SysInfoViewChanging, SysInfoCreateDialog, SysInfoGraphGetDrawInfo, SysInfoGraphGetTooltipText, SysInfoGraphDrawPanel, MaxSysInfoMessage }

enum	_PH_MINIINFO_SECTION_MESSAGE { MiniInfoCreate, MiniInfoDestroy, MiniInfoTick, MiniInfoSectionChanging, MiniInfoShowing, MiniInfoCreateDialog, MaxMiniInfoMessage, MiniInfoCreate, MiniInfoDestroy, MiniInfoTick, MiniInfoSectionChanging, MiniInfoShowing, MiniInfoCreateDialog, MaxMiniInfoMessage }

enum	_PH_MINIINFO_LIST_SECTION_MESSAGE { MiListSectionCreate, MiListSectionDestroy, MiListSectionTick, MiListSectionShowing, MiListSectionDialogCreated, MiListSectionSortProcessList, MiListSectionAssignSortData, MiListSectionSortGroupList, MiListSectionGetTitleText, MiListSectionGetUsageText, MiListSectionInitializeContextMenu, MiListSectionHandleContextMenu, MaxMiListSectionMessage, MiListSectionCreate, MiListSectionDestroy, MiListSectionTick, MiListSectionShowing, MiListSectionDialogCreated, MiListSectionSortProcessList, MiListSectionAssignSortData, MiListSectionSortGroupList, MiListSectionGetTitleText, MiListSectionGetUsageText, MiListSectionInitializeContextMenu, MiListSectionHandleContextMenu, MaxMiListSectionMessage }

enum	_PH_GENERAL_CALLBACK { GeneralCallbackMainWindowShowing = 0, GeneralCallbackProcessesUpdated = 1, GeneralCallbackGetProcessHighlightingColor = 2, GeneralCallbackGetProcessTooltipText = 3, GeneralCallbackProcessPropertiesInitializing = 4, GeneralCallbackMainMenuInitializing = 5, GeneralCallbackNotifyEvent = 6, GeneralCallbackServicePropertiesInitializing = 7, GeneralCallbackHandlePropertiesInitializing = 8, GeneralCallbackProcessMenuInitializing = 9, GeneralCallbackServiceMenuInitializing = 10, GeneralCallbackNetworkMenuInitializing = 11, GeneralCallbackIconMenuInitializing = 12, GeneralCallbackThreadMenuInitializing = 13, GeneralCallbackModuleMenuInitializing = 14, GeneralCallbackMemoryMenuInitializing = 15, GeneralCallbackHandleMenuInitializing = 16, GeneralCallbackProcessTreeNewInitializing = 17, GeneralCallbackServiceTreeNewInitializing = 18, GeneralCallbackNetworkTreeNewInitializing = 19, GeneralCallbackModuleTreeNewInitializing = 20, GeneralCallbackModuleTreeNewUninitializing = 21, GeneralCallbackThreadTreeNewInitializing = 22, GeneralCallbackThreadTreeNewUninitializing = 23, GeneralCallbackHandleTreeNewInitializing = 24, GeneralCallbackHandleTreeNewUninitializing = 25, GeneralCallbackThreadStackControl = 26, GeneralCallbackSystemInformationInitializing = 27, GeneralCallbackMainWindowTabChanged = 28, GeneralCallbackMemoryTreeNewInitializing = 29, GeneralCallbackMemoryTreeNewUninitializing = 30, GeneralCallbackMemoryItemListControl = 31, GeneralCallbackMiniInformationInitializing = 32, GeneralCallbackMiListSectionMenuInitializing = 33, GeneralCallbackMaximum, GeneralCallbackMainWindowShowing = 0, GeneralCallbackProcessesUpdated = 1, GeneralCallbackGetProcessHighlightingColor = 2, GeneralCallbackGetProcessTooltipText = 3, GeneralCallbackProcessPropertiesInitializing = 4, GeneralCallbackMainMenuInitializing = 5, GeneralCallbackNotifyEvent = 6, GeneralCallbackServicePropertiesInitializing = 7, GeneralCallbackHandlePropertiesInitializing = 8, GeneralCallbackProcessMenuInitializing = 9, GeneralCallbackServiceMenuInitializing = 10, GeneralCallbackNetworkMenuInitializing = 11, GeneralCallbackIconMenuInitializing = 12, GeneralCallbackThreadMenuInitializing = 13, GeneralCallbackModuleMenuInitializing = 14, GeneralCallbackMemoryMenuInitializing = 15, GeneralCallbackHandleMenuInitializing = 16, GeneralCallbackProcessTreeNewInitializing = 17, GeneralCallbackServiceTreeNewInitializing = 18, GeneralCallbackNetworkTreeNewInitializing = 19, GeneralCallbackModuleTreeNewInitializing = 20, GeneralCallbackModuleTreeNewUninitializing = 21, GeneralCallbackThreadTreeNewInitializing = 22, GeneralCallbackThreadTreeNewUninitializing = 23, GeneralCallbackHandleTreeNewInitializing = 24, GeneralCallbackHandleTreeNewUninitializing = 25, GeneralCallbackThreadStackControl = 26, GeneralCallbackSystemInformationInitializing = 27, GeneralCallbackMainWindowTabChanged = 28, GeneralCallbackMemoryTreeNewInitializing = 29, GeneralCallbackMemoryTreeNewUninitializing = 30, GeneralCallbackMemoryItemListControl = 31, GeneralCallbackMiniInformationInitializing = 32, GeneralCallbackMiListSectionMenuInitializing = 33, GeneralCallbackMaximum }

enum	_PH_PLUGIN_CALLBACK { PluginCallbackLoad = 0, PluginCallbackUnload = 1, PluginCallbackShowOptions = 2, PluginCallbackMenuItem = 3, PluginCallbackTreeNewMessage = 4, PluginCallbackPhSvcRequest = 5, PluginCallbackMenuHook = 6, PluginCallbackMaximum, PluginCallbackLoad = 0, PluginCallbackUnload = 1, PluginCallbackShowOptions = 2, PluginCallbackMenuItem = 3, PluginCallbackTreeNewMessage = 4, PluginCallbackPhSvcRequest = 5, PluginCallbackMenuHook = 6, PluginCallbackMaximum }

enum	_PH_PLUGIN_THREAD_STACK_CONTROL_TYPE { PluginThreadStackInitializing, PluginThreadStackUninitializing, PluginThreadStackResolveSymbol, PluginThreadStackGetTooltip, PluginThreadStackWalkStack, PluginThreadStackBeginDefaultWalkStack, PluginThreadStackEndDefaultWalkStack, PluginThreadStackMaximum, PluginThreadStackInitializing, PluginThreadStackUninitializing, PluginThreadStackResolveSymbol, PluginThreadStackGetTooltip, PluginThreadStackWalkStack, PluginThreadStackBeginDefaultWalkStack, PluginThreadStackEndDefaultWalkStack, PluginThreadStackMaximum }

enum	_PH_PLUGIN_MEMORY_ITEM_LIST_CONTROL_TYPE { PluginMemoryItemListInitialized, PluginMemoryItemListMaximum, PluginMemoryItemListInitialized, PluginMemoryItemListMaximum }

Functions
PHAPPAPI PPH_STRING NTAPI	PhGetClientIdName (_In_ PCLIENT_ID ClientId)

PHAPPAPI PPH_STRING NTAPI	PhGetClientIdNameEx (_In_ PCLIENT_ID ClientId, _In_opt_ PPH_STRING ProcessName)

PHAPPAPI PWSTR NTAPI	PhGetProcessPriorityClassString (_In_ ULONG PriorityClass)

PHAPPAPI PPH_PROCESS_ITEM NTAPI	PhReferenceProcessItem (_In_ HANDLE ProcessId)
	Finds and references a process item.

PHAPPAPI VOID NTAPI	PhEnumProcessItems (_Out_opt_ PPH_PROCESS_ITEM **ProcessItems, _Out_ PULONG NumberOfProcessItems)
	Enumerates the process items.

PHAPPAPI BOOLEAN NTAPI	PhGetStatisticsTime (_In_opt_ PPH_PROCESS_ITEM ProcessItem, _In_ ULONG Index, _Out_ PLARGE_INTEGER Time)
	Retrieves a time value recorded by the statistics system.

PHAPPAPI PPH_STRING NTAPI	PhGetStatisticsTimeString (_In_opt_ PPH_PROCESS_ITEM ProcessItem, _In_ ULONG Index)

PHAPPAPI VOID NTAPI	PhReferenceProcessRecord (_In_ PPH_PROCESS_RECORD ProcessRecord)

PHAPPAPI BOOLEAN NTAPI	PhReferenceProcessRecordSafe (_In_ PPH_PROCESS_RECORD ProcessRecord)

PHAPPAPI VOID NTAPI	PhReferenceProcessRecordForStatistics (_In_ PPH_PROCESS_RECORD ProcessRecord)

PHAPPAPI VOID NTAPI	PhDereferenceProcessRecord (_In_ PPH_PROCESS_RECORD ProcessRecord)

PHAPPAPI PPH_PROCESS_RECORD NTAPI	PhFindProcessRecord (_In_opt_ HANDLE ProcessId, _In_ PLARGE_INTEGER Time)
	Finds a process record.

PHAPPAPI PPH_PROCESS_ITEM NTAPI	PhReferenceProcessItemForParent (_In_ HANDLE ParentProcessId, _In_ HANDLE ProcessId, _In_ PLARGE_INTEGER CreateTime)

PHAPPAPI PPH_PROCESS_ITEM NTAPI	PhReferenceProcessItemForRecord (_In_ PPH_PROCESS_RECORD Record)

PHAPPAPI PPH_SERVICE_ITEM NTAPI	PhReferenceServiceItem (_In_ PWSTR Name)

PHAPPAPI PH_SERVICE_CHANGE NTAPI	PhGetServiceChange (_In_ PPH_SERVICE_MODIFIED_DATA Data)

PHAPPAPI PPH_NETWORK_ITEM NTAPI	PhReferenceNetworkItem (_In_ ULONG ProtocolType, _In_ PPH_IP_ENDPOINT LocalEndpoint, _In_ PPH_IP_ENDPOINT RemoteEndpoint, _In_ HANDLE ProcessId)

PHAPPAPI PWSTR NTAPI	PhGetProtocolTypeName (_In_ ULONG ProtocolType)

PHAPPAPI PWSTR NTAPI	PhGetTcpStateName (_In_ ULONG State)

PHAPPAPI PPH_STRING NTAPI	PhGetThreadPriorityWin32String (_In_ LONG PriorityWin32)

PHAPPAPI VOID NTAPI	PhDeleteMemoryItemList (_In_ PPH_MEMORY_ITEM_LIST List)

PHAPPAPI PPH_MEMORY_ITEM NTAPI	PhLookupMemoryItemList (_In_ PPH_MEMORY_ITEM_LIST List, _In_ PVOID Address)

PHAPPAPI NTSTATUS NTAPI	PhQueryMemoryItemList (_In_ HANDLE ProcessId, _In_ ULONG Flags, _Out_ PPH_MEMORY_ITEM_LIST List)

PHAPPAPI BOOLEAN NTAPI	PhCmLoadSettings (_In_ HWND TreeNewHandle, _In_ PPH_STRINGREF Settings)

PHAPPAPI PPH_STRING NTAPI	PhCmSaveSettings (_In_ HWND TreeNewHandle)

PHAPPAPI struct _PH_TN_FILTER_SUPPORT *NTAPI	PhGetFilterSupportProcessTreeList (VOID)

PHAPPAPI PPH_PROCESS_NODE NTAPI	PhFindProcessNode (_In_ HANDLE ProcessId)

PHAPPAPI VOID NTAPI	PhUpdateProcessNode (_In_ PPH_PROCESS_NODE ProcessNode)

PHAPPAPI PPH_PROCESS_ITEM NTAPI	PhGetSelectedProcessItem (VOID)

PHAPPAPI VOID NTAPI	PhGetSelectedProcessItems (_Out_ PPH_PROCESS_ITEM **Processes, _Out_ PULONG NumberOfProcesses)

PHAPPAPI VOID NTAPI	PhDeselectAllProcessNodes (VOID)

PHAPPAPI VOID NTAPI	PhExpandAllProcessNodes (_In_ BOOLEAN Expand)

PHAPPAPI VOID NTAPI	PhInvalidateAllProcessNodes (VOID)

PHAPPAPI VOID NTAPI	PhSelectAndEnsureVisibleProcessNode (_In_ PPH_PROCESS_NODE ProcessNode)

PHAPPAPI struct _PH_TN_FILTER_SUPPORT *NTAPI	PhGetFilterSupportServiceTreeList (VOID)

PHAPPAPI PPH_SERVICE_NODE NTAPI	PhFindServiceNode (_In_ PPH_SERVICE_ITEM ServiceItem)

PHAPPAPI VOID NTAPI	PhUpdateServiceNode (_In_ PPH_SERVICE_NODE ServiceNode)

PHAPPAPI PPH_SERVICE_ITEM NTAPI	PhGetSelectedServiceItem (VOID)

PHAPPAPI VOID NTAPI	PhGetSelectedServiceItems (_Out_ PPH_SERVICE_ITEM **Services, _Out_ PULONG NumberOfServices)

PHAPPAPI VOID NTAPI	PhDeselectAllServiceNodes (VOID)

PHAPPAPI VOID NTAPI	PhSelectAndEnsureVisibleServiceNode (_In_ PPH_SERVICE_NODE ServiceNode)

PHAPPAPI struct _PH_TN_FILTER_SUPPORT *NTAPI	PhGetFilterSupportNetworkTreeList (VOID)

PHAPPAPI PPH_NETWORK_NODE NTAPI	PhFindNetworkNode (_In_ PPH_NETWORK_ITEM NetworkItem)

PHAPPAPI VOID NTAPI	PhRegisterDialog (_In_ HWND DialogWindowHandle)

PHAPPAPI VOID NTAPI	PhUnregisterDialog (_In_ HWND DialogWindowHandle)

PHAPPAPI struct _PH_MESSAGE_LOOP_FILTER_ENTRY *NTAPI	PhRegisterMessageLoopFilter (_In_ PPH_MESSAGE_LOOP_FILTER Filter, _In_opt_ PVOID Context)

PHAPPAPI VOID NTAPI	PhUnregisterMessageLoopFilter (_In_ struct _PH_MESSAGE_LOOP_FILTER_ENTRY *FilterEntry)

PHAPPAPI BOOLEAN NTAPI	PhGetProcessIsSuspended (_In_ PSYSTEM_PROCESS_INFORMATION Process)
	Determines whether a process is suspended.

PHAPPAPI NTSTATUS NTAPI	PhGetProcessKnownType (_In_ HANDLE ProcessHandle, _Out_ PH_KNOWN_PROCESS_TYPE *KnownProcessType)
	Determines the type of a process based on its image file name.

PHAPPAPI BOOLEAN NTAPI	PhaGetProcessKnownCommandLine (_In_ PPH_STRING CommandLine, _In_ PH_KNOWN_PROCESS_TYPE KnownProcessType, _Out_ PPH_KNOWN_PROCESS_COMMAND_LINE KnownCommandLine)

PHAPPAPI VOID NTAPI	PhSearchOnlineString (_In_ HWND hWnd, _In_ PWSTR String)

PHAPPAPI VOID NTAPI	PhShellExecuteUserString (_In_ HWND hWnd, _In_ PWSTR Setting, _In_ PWSTR String, _In_ BOOLEAN UseShellExecute, _In_opt_ PWSTR ErrorMessage)

PHAPPAPI VOID NTAPI	PhLoadSymbolProviderOptions (_Inout_ PPH_SYMBOL_PROVIDER SymbolProvider)

PHAPPAPI VOID NTAPI	PhCopyListViewInfoTip (_Inout_ LPNMLVGETINFOTIP GetInfoTip, _In_ PPH_STRINGREF Tip)
	Copies a string into a NMLVGETINFOTIP structure.

PHAPPAPI VOID NTAPI	PhCopyListView (_In_ HWND ListViewHandle)

PHAPPAPI VOID	PhHandleListViewNotifyForCopy (_In_ LPARAM lParam, _In_ HWND ListViewHandle)

PHAPPAPI BOOLEAN NTAPI	PhGetListViewContextMenuPoint (_In_ HWND ListViewHandle, _Out_ PPOINT Point)

PHAPPAPI VOID NTAPI	PhLoadWindowPlacementFromSetting (_In_opt_ PWSTR PositionSettingName, _In_opt_ PWSTR SizeSettingName, _In_ HWND WindowHandle)

PHAPPAPI VOID NTAPI	PhSaveWindowPlacementToSetting (_In_opt_ PWSTR PositionSettingName, _In_opt_ PWSTR SizeSettingName, _In_ HWND WindowHandle)

PHAPPAPI VOID NTAPI	PhLoadListViewColumnsFromSetting (_In_ PWSTR Name, _In_ HWND ListViewHandle)

PHAPPAPI VOID NTAPI	PhSaveListViewColumnsToSetting (_In_ PWSTR Name, _In_ HWND ListViewHandle)

PHAPPAPI PPH_STRING NTAPI	PhGetPhVersion (VOID)

PHAPPAPI VOID NTAPI	PhGetPhVersionNumbers (_Out_opt_ PULONG MajorVersion, _Out_opt_ PULONG MinorVersion, _Reserved_ PULONG Reserved, _Out_opt_ PULONG RevisionNumber)

PHAPPAPI VOID NTAPI	PhWritePhTextHeader (_Inout_ PPH_FILE_STREAM FileStream)

PHAPPAPI BOOLEAN NTAPI	PhShellProcessHacker (_In_opt_ HWND hWnd, _In_opt_ PWSTR Parameters, _In_ ULONG ShowWindowType, _In_ ULONG Flags, _In_ ULONG AppFlags, _In_opt_ ULONG Timeout, _Out_opt_ PHANDLE ProcessHandle)

PHAPPAPI VOID NTAPI	PhInitializeTreeNewColumnMenu (_Inout_ PPH_TN_COLUMN_MENU_DATA Data)

PHAPPAPI BOOLEAN NTAPI	PhHandleTreeNewColumnMenu (_Inout_ PPH_TN_COLUMN_MENU_DATA Data)

PHAPPAPI VOID NTAPI	PhDeleteTreeNewColumnMenu (_In_ PPH_TN_COLUMN_MENU_DATA Data)

PHAPPAPI VOID NTAPI	PhInitializeTreeNewFilterSupport (_Out_ PPH_TN_FILTER_SUPPORT Support, _In_ HWND TreeNewHandle, _In_ PPH_LIST NodeList)

PHAPPAPI VOID NTAPI	PhDeleteTreeNewFilterSupport (_In_ PPH_TN_FILTER_SUPPORT Support)

PHAPPAPI PPH_TN_FILTER_ENTRY NTAPI	PhAddTreeNewFilter (_In_ PPH_TN_FILTER_SUPPORT Support, _In_ PPH_TN_FILTER_FUNCTION Filter, _In_opt_ PVOID Context)

PHAPPAPI VOID NTAPI	PhRemoveTreeNewFilter (_In_ PPH_TN_FILTER_SUPPORT Support, _In_ PPH_TN_FILTER_ENTRY Entry)

PHAPPAPI BOOLEAN NTAPI	PhApplyTreeNewFiltersToNode (_In_ PPH_TN_FILTER_SUPPORT Support, _In_ PPH_TREENEW_NODE Node)

PHAPPAPI VOID NTAPI	PhApplyTreeNewFilters (_In_ PPH_TN_FILTER_SUPPORT Support)

PHAPPAPI VOID NTAPI	PhShowIconNotification (_In_ PWSTR Title, _In_ PWSTR Text, _In_ ULONG Flags)

PHAPPAPI PPH_PROCESS_PROPCONTEXT NTAPI	PhCreateProcessPropContext (_In_ HWND ParentWindowHandle, _In_ PPH_PROCESS_ITEM ProcessItem)

PHAPPAPI VOID NTAPI	PhSetSelectThreadIdProcessPropContext (_Inout_ PPH_PROCESS_PROPCONTEXT PropContext, _In_ HANDLE ThreadId)

PHAPPAPI BOOLEAN NTAPI	PhAddProcessPropPage (_Inout_ PPH_PROCESS_PROPCONTEXT PropContext, _In_ _Assume_refs_(1) PPH_PROCESS_PROPPAGECONTEXT PropPageContext)

PHAPPAPI BOOLEAN NTAPI	PhAddProcessPropPage2 (_Inout_ PPH_PROCESS_PROPCONTEXT PropContext, _In_ HPROPSHEETPAGE PropSheetPageHandle)

PHAPPAPI PPH_PROCESS_PROPPAGECONTEXT NTAPI	PhCreateProcessPropPageContext (_In_ LPCWSTR Template, _In_ DLGPROC DlgProc, _In_opt_ PVOID Context)

PHAPPAPI PPH_PROCESS_PROPPAGECONTEXT NTAPI	PhCreateProcessPropPageContextEx (_In_opt_ PVOID InstanceHandle, _In_ LPCWSTR Template, _In_ DLGPROC DlgProc, _In_opt_ PVOID Context)

PHAPPAPI BOOLEAN NTAPI	PhPropPageDlgProcHeader (_In_ HWND hwndDlg, _In_ UINT uMsg, _In_ LPARAM lParam, _Out_ LPPROPSHEETPAGE PropSheetPage, _Out_ PPH_PROCESS_PROPPAGECONTEXT PropPageContext, _Out_ PPH_PROCESS_ITEM *ProcessItem)

PHAPPAPI VOID NTAPI	PhPropPageDlgProcDestroy (_In_ HWND hwndDlg)

PHAPPAPI PPH_LAYOUT_ITEM NTAPI	PhAddPropPageLayoutItem (_In_ HWND hwnd, _In_ HWND Handle, _In_ PPH_LAYOUT_ITEM ParentItem, _In_ ULONG Anchor)

PHAPPAPI VOID NTAPI	PhDoPropPageLayout (_In_ HWND hwnd)

FORCEINLINE PPH_LAYOUT_ITEM	PhBeginPropPageLayout (_In_ HWND hwndDlg, _In_ PPH_PROCESS_PROPPAGECONTEXT PropPageContext)

FORCEINLINE VOID	PhEndPropPageLayout (_In_ HWND hwndDlg, _In_ PPH_PROCESS_PROPPAGECONTEXT PropPageContext)

PHAPPAPI BOOLEAN NTAPI	PhShowProcessProperties (_In_ PPH_PROCESS_PROPCONTEXT Context)

PHAPPAPI VOID NTAPI	PhLogMessageEntry (_In_ UCHAR Type, _In_ PPH_STRING Message)

PHAPPAPI PPH_STRING NTAPI	PhFormatLogEntry (_In_ PPH_LOG_ENTRY Entry)

PHAPPAPI BOOLEAN NTAPI	PhUiConnectToPhSvc (_In_opt_ HWND hWnd, _In_ BOOLEAN ConnectOnly)
	Connects to phsvc.

PHAPPAPI BOOLEAN NTAPI	PhUiConnectToPhSvcEx (_In_opt_ HWND hWnd, _In_ PH_PHSVC_MODE Mode, _In_ BOOLEAN ConnectOnly)
	Connects to phsvc.

PHAPPAPI VOID NTAPI	PhUiDisconnectFromPhSvc (VOID)
	Disconnects from phsvc.

PHAPPAPI BOOLEAN NTAPI	PhUiLockComputer (_In_ HWND hWnd)

PHAPPAPI BOOLEAN NTAPI	PhUiLogoffComputer (_In_ HWND hWnd)

PHAPPAPI BOOLEAN NTAPI	PhUiSleepComputer (_In_ HWND hWnd)

PHAPPAPI BOOLEAN NTAPI	PhUiHibernateComputer (_In_ HWND hWnd)

PHAPPAPI BOOLEAN NTAPI	PhUiRestartComputer (_In_ HWND hWnd, _In_ ULONG Flags)

PHAPPAPI BOOLEAN NTAPI	PhUiShutdownComputer (_In_ HWND hWnd, _In_ ULONG Flags)

PHAPPAPI BOOLEAN NTAPI	PhUiConnectSession (_In_ HWND hWnd, _In_ ULONG SessionId)

PHAPPAPI BOOLEAN NTAPI	PhUiDisconnectSession (_In_ HWND hWnd, _In_ ULONG SessionId)

PHAPPAPI BOOLEAN NTAPI	PhUiLogoffSession (_In_ HWND hWnd, _In_ ULONG SessionId)

PHAPPAPI BOOLEAN NTAPI	PhUiTerminateProcesses (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM *Processes, _In_ ULONG NumberOfProcesses)

PHAPPAPI BOOLEAN NTAPI	PhUiTerminateTreeProcess (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM Process)

PHAPPAPI BOOLEAN NTAPI	PhUiSuspendProcesses (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM *Processes, _In_ ULONG NumberOfProcesses)

PHAPPAPI BOOLEAN NTAPI	PhUiResumeProcesses (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM *Processes, _In_ ULONG NumberOfProcesses)

PHAPPAPI BOOLEAN NTAPI	PhUiRestartProcess (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM Process)

PHAPPAPI BOOLEAN NTAPI	PhUiDebugProcess (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM Process)

PHAPPAPI BOOLEAN NTAPI	PhUiReduceWorkingSetProcesses (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM *Processes, _In_ ULONG NumberOfProcesses)

PHAPPAPI BOOLEAN NTAPI	PhUiSetVirtualizationProcess (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM Process, _In_ BOOLEAN Enable)

PHAPPAPI BOOLEAN NTAPI	PhUiDetachFromDebuggerProcess (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM Process)

PHAPPAPI BOOLEAN NTAPI	PhUiInjectDllProcess (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM Process)

PHAPPAPI BOOLEAN NTAPI	PhUiSetIoPriorityProcesses (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM *Processes, _In_ ULONG NumberOfProcesses, _In_ ULONG IoPriority)

PHAPPAPI BOOLEAN NTAPI	PhUiSetPagePriorityProcess (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM Process, _In_ ULONG PagePriority)

PHAPPAPI BOOLEAN NTAPI	PhUiSetPriorityProcesses (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM *Processes, _In_ ULONG NumberOfProcesses, _In_ ULONG PriorityClass)

PHAPPAPI BOOLEAN NTAPI	PhUiSetDepStatusProcess (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM Process)

PHAPPAPI BOOLEAN NTAPI	PhUiStartService (_In_ HWND hWnd, _In_ PPH_SERVICE_ITEM Service)

PHAPPAPI BOOLEAN NTAPI	PhUiContinueService (_In_ HWND hWnd, _In_ PPH_SERVICE_ITEM Service)

PHAPPAPI BOOLEAN NTAPI	PhUiPauseService (_In_ HWND hWnd, _In_ PPH_SERVICE_ITEM Service)

PHAPPAPI BOOLEAN NTAPI	PhUiStopService (_In_ HWND hWnd, _In_ PPH_SERVICE_ITEM Service)

PHAPPAPI BOOLEAN NTAPI	PhUiDeleteService (_In_ HWND hWnd, _In_ PPH_SERVICE_ITEM Service)

PHAPPAPI BOOLEAN NTAPI	PhUiCloseConnections (_In_ HWND hWnd, _In_ PPH_NETWORK_ITEM *Connections, _In_ ULONG NumberOfConnections)

PHAPPAPI BOOLEAN NTAPI	PhUiTerminateThreads (_In_ HWND hWnd, _In_ PPH_THREAD_ITEM *Threads, _In_ ULONG NumberOfThreads)

PHAPPAPI BOOLEAN NTAPI	PhUiForceTerminateThreads (_In_ HWND hWnd, _In_ HANDLE ProcessId, _In_ PPH_THREAD_ITEM *Threads, _In_ ULONG NumberOfThreads)

PHAPPAPI BOOLEAN NTAPI	PhUiSuspendThreads (_In_ HWND hWnd, _In_ PPH_THREAD_ITEM *Threads, _In_ ULONG NumberOfThreads)

PHAPPAPI BOOLEAN NTAPI	PhUiResumeThreads (_In_ HWND hWnd, _In_ PPH_THREAD_ITEM *Threads, _In_ ULONG NumberOfThreads)

PHAPPAPI BOOLEAN NTAPI	PhUiSetPriorityThread (_In_ HWND hWnd, _In_ PPH_THREAD_ITEM Thread, _In_ ULONG ThreadPriorityWin32)

PHAPPAPI BOOLEAN NTAPI	PhUiSetIoPriorityThread (_In_ HWND hWnd, _In_ PPH_THREAD_ITEM Thread, _In_ ULONG IoPriority)

PHAPPAPI BOOLEAN NTAPI	PhUiSetPagePriorityThread (_In_ HWND hWnd, _In_ PPH_THREAD_ITEM Thread, _In_ ULONG PagePriority)

PHAPPAPI BOOLEAN NTAPI	PhUiUnloadModule (_In_ HWND hWnd, _In_ HANDLE ProcessId, _In_ PPH_MODULE_ITEM Module)

PHAPPAPI BOOLEAN NTAPI	PhUiFreeMemory (_In_ HWND hWnd, _In_ HANDLE ProcessId, _In_ PPH_MEMORY_ITEM MemoryItem, _In_ BOOLEAN Free)

PHAPPAPI BOOLEAN NTAPI	PhUiCloseHandles (_In_ HWND hWnd, _In_ HANDLE ProcessId, _In_ PPH_HANDLE_ITEM *Handles, _In_ ULONG NumberOfHandles, _In_ BOOLEAN Warn)

PHAPPAPI BOOLEAN NTAPI	PhUiSetAttributesHandle (_In_ HWND hWnd, _In_ HANDLE ProcessId, _In_ PPH_HANDLE_ITEM Handle, _In_ ULONG Attributes)

PHAPPAPI BOOLEAN NTAPI	PhShowProcessAffinityDialog2 (_In_ HWND ParentWindowHandle, _In_ ULONG_PTR AffinityMask, _Out_ PULONG_PTR NewAffinityMask)

PHAPPAPI BOOLEAN NTAPI	PhaChoiceDialog (_In_ HWND ParentWindowHandle, _In_ PWSTR Title, _In_ PWSTR Message, _In_opt_ PWSTR Choices, _In_opt_ ULONG NumberOfChoices, _In_opt_ PWSTR Option, _In_ ULONG Flags, _Inout_ PPH_STRING SelectedChoice, _Inout_opt_ PBOOLEAN SelectedOption, _In_opt_ PWSTR SavedChoicesSettingName)
	Prompts the user for input.

PHAPPAPI BOOLEAN NTAPI	PhShowChooseProcessDialog (_In_ HWND ParentWindowHandle, _In_ PWSTR Message, _Out_ PHANDLE ProcessId)

PHAPPAPI VOID NTAPI	PhShowProcessRecordDialog (_In_ HWND ParentWindowHandle, _In_ PPH_PROCESS_RECORD Record)

PHAPPAPI NTSTATUS NTAPI	PhExecuteRunAsCommand2 (_In_ HWND hWnd, _In_ PWSTR Program, _In_opt_ PWSTR UserName, _In_opt_ PWSTR Password, _In_opt_ ULONG LogonType, _In_opt_ HANDLE ProcessIdWithToken, _In_ ULONG SessionId, _In_ PWSTR DesktopName, _In_ BOOLEAN UseLinkedToken)
	Starts a program as another user.

PHAPPAPI HWND NTAPI	PhCreateServiceListControl (_In_ HWND ParentWindowHandle, _In_ PPH_SERVICE_ITEM *Services, _In_ ULONG NumberOfServices)
	Creates a service list property page.

PHAPPAPI _May_raise_ ULONG NTAPI	PhGetIntegerSetting (_In_ PWSTR Name)

PHAPPAPI _May_raise_ PH_INTEGER_PAIR NTAPI	PhGetIntegerPairSetting (_In_ PWSTR Name)

PHAPPAPI _May_raise_ PPH_STRING NTAPI	PhGetStringSetting (_In_ PWSTR Name)

PHAPPAPI _May_raise_ VOID NTAPI	PhSetIntegerSetting (_In_ PWSTR Name, _In_ ULONG Value)

PHAPPAPI _May_raise_ VOID NTAPI	PhSetIntegerPairSetting (_In_ PWSTR Name, _In_ PH_INTEGER_PAIR Value)

PHAPPAPI _May_raise_ VOID NTAPI	PhSetStringSetting (_In_ PWSTR Name, _In_ PWSTR Value)

PHAPPAPI _May_raise_ VOID NTAPI	PhSetStringSetting2 (_In_ PWSTR Name, _In_ PPH_STRINGREF Value)

PHAPPAPI VOID NTAPI	PhAddSettings (_In_ PPH_SETTING_CREATE Settings, _In_ ULONG NumberOfSettings)

PHAPPAPI VOID NTAPI	PhSiSetColorsGraphDrawInfo (_Out_ PPH_GRAPH_DRAW_INFO DrawInfo, _In_ COLORREF Color1, _In_ COLORREF Color2)

	C_ASSERT (RTL_FIELD_SIZE(PH_PLUGIN_MENU_INFORMATION, u)==RTL_FIELD_SIZE(PH_PLUGIN_MENU_INFORMATION, u.DoNotUse))

PHAPPAPI PPH_PLUGIN NTAPI	PhRegisterPlugin (_In_ PWSTR Name, _In_ PVOID DllBase, _Out_opt_ PPH_PLUGIN_INFORMATION *Information)
	Registers a plugin with the host.

PHAPPAPI PPH_PLUGIN NTAPI	PhFindPlugin (_In_ PWSTR Name)
	Locates a plugin instance structure.

PHAPPAPI PPH_PLUGIN_INFORMATION NTAPI	PhGetPluginInformation (_In_ PPH_PLUGIN Plugin)
	Gets a pointer to a plugin's additional information block.

PHAPPAPI PPH_CALLBACK NTAPI	PhGetPluginCallback (_In_ PPH_PLUGIN Plugin, _In_ PH_PLUGIN_CALLBACK Callback)
	Retrieves a pointer to a plugin callback.

PHAPPAPI PPH_CALLBACK NTAPI	PhGetGeneralCallback (_In_ PH_GENERAL_CALLBACK Callback)
	Retrieves a pointer to a general callback.

PHAPPAPI ULONG NTAPI	PhPluginReserveIds (_In_ ULONG Count)
	Reserves unique GUI identifiers.

PHAPPAPI ULONG_PTR NTAPI	PhPluginAddMenuItem (_In_ PPH_PLUGIN Plugin, _In_ ULONG_PTR Location, _In_opt_ PWSTR InsertAfter, _In_ ULONG Id, _In_ PWSTR Text, _In_opt_ PVOID Context)
	Adds a menu item to the program's main menu.

PHAPPAPI VOID NTAPI	PhPluginGetSystemStatistics (_Out_ PPH_PLUGIN_SYSTEM_STATISTICS Statistics)
	Retrieves current system statistics.

PHAPPAPI PPH_EMENU_ITEM NTAPI	PhPluginCreateEMenuItem (_In_ PPH_PLUGIN Plugin, _In_ ULONG Flags, _In_ ULONG Id, _In_ PWSTR Text, _In_opt_ PVOID Context)
	Creates a menu item.

PHAPPAPI BOOLEAN NTAPI	PhPluginAddMenuHook (_Inout_ PPH_PLUGIN_MENU_INFORMATION MenuInfo, _In_ PPH_PLUGIN Plugin, _In_opt_ PVOID Context)
	Adds a menu hook.

PHAPPAPI BOOLEAN NTAPI	PhPluginAddTreeNewColumn (_In_ PPH_PLUGIN Plugin, _In_ PVOID CmData, _In_ PPH_TREENEW_COLUMN Column, _In_ ULONG SubId, _In_opt_ PVOID Context, _In_opt_ PPH_PLUGIN_TREENEW_SORT_FUNCTION SortFunction)
	Adds a column to a tree new control.

PHAPPAPI VOID NTAPI	PhPluginSetObjectExtension (_In_ PPH_PLUGIN Plugin, _In_ PH_EM_OBJECT_TYPE ObjectType, _In_ ULONG ExtensionSize, _In_opt_ PPH_EM_OBJECT_CALLBACK CreateCallback, _In_opt_ PPH_EM_OBJECT_CALLBACK DeleteCallback)
	Sets the object extension size and callbacks for an object type.

PHAPPAPI PVOID NTAPI	PhPluginGetObjectExtension (_In_ PPH_PLUGIN Plugin, _In_ PVOID Object, _In_ PH_EM_OBJECT_TYPE ObjectType)
	Gets the object extension for an object.

PHAPPAPI struct _PH_NF_ICON *NTAPI	PhPluginRegisterIcon (_In_ PPH_PLUGIN Plugin, _In_ ULONG SubId, _In_opt_ PVOID Context, _In_ PWSTR Text, _In_ ULONG Flags, _In_ struct _PH_NF_ICON_REGISTRATION_DATA *RegistrationData)
	Creates a notification icon.

PHAPPAPI VOID NTAPI	PhPluginEnableTreeNewNotify (_In_ PPH_PLUGIN Plugin, _In_ PVOID CmData)
	Allows a plugin to receive all treenew messages, not just column-related ones.

PHAPPAPI BOOLEAN NTAPI	PhPluginQueryPhSvc (_Out_ PPH_PLUGIN_PHSVC_CLIENT Client)

PHAPPAPI NTSTATUS NTAPI	PhPluginCallPhSvc (_In_ PPH_PLUGIN Plugin, _In_ ULONG SubId, _In_reads_bytes_opt_(InLength) PVOID InBuffer, _In_ ULONG InLength, _Out_writes_bytes_opt_(OutLength) PVOID OutBuffer, _In_ ULONG OutLength)

PHLIBAPI NTSTATUS	PhSvcCallChangeServiceConfig (_In_ PWSTR ServiceName, _In_ ULONG ServiceType, _In_ ULONG StartType, _In_ ULONG ErrorControl, _In_opt_ PWSTR BinaryPathName, _In_opt_ PWSTR LoadOrderGroup, _Out_opt_ PULONG TagId, _In_opt_ PWSTR Dependencies, _In_opt_ PWSTR ServiceStartName, _In_opt_ PWSTR Password, _In_opt_ PWSTR DisplayName)

PHLIBAPI NTSTATUS	PhSvcCallChangeServiceConfig2 (_In_ PWSTR ServiceName, _In_ ULONG InfoLevel, _In_ PVOID Info)

PHLIBAPI NTSTATUS	PhSvcCallPostMessage (_In_opt_ HWND hWnd, _In_ UINT Msg, _In_ WPARAM wParam, _In_ LPARAM lParam)

PHLIBAPI NTSTATUS	PhSvcCallSendMessage (_In_opt_ HWND hWnd, _In_ UINT Msg, _In_ WPARAM wParam, _In_ LPARAM lParam)

Macro Definition Documentation

#define DPCS_PROCESS_ID ((HANDLE)(LONG_PTR)-2)

Definition at line 19 of file phapppub.h.

#define INTERRUPTS_PROCESS_ID ((HANDLE)(LONG_PTR)-3)

Definition at line 20 of file phapppub.h.

#define PH_CHOICE_DIALOG_CHOICE 0x0

Definition at line 1938 of file phapppub.h.

#define PH_CHOICE_DIALOG_PASSWORD 0x2

Definition at line 1940 of file phapppub.h.

#define PH_CHOICE_DIALOG_SAVED_CHOICES 10

Definition at line 1936 of file phapppub.h.

#define PH_CHOICE_DIALOG_TYPE_MASK 0x3

Definition at line 1941 of file phapppub.h.

#define PH_CHOICE_DIALOG_USER_CHOICE 0x1

Definition at line 1939 of file phapppub.h.

#define PH_HANDLE_FILE_SHARED_DELETE 0x4

Definition at line 515 of file phapppub.h.

#define PH_HANDLE_FILE_SHARED_MASK 0x7

Definition at line 516 of file phapppub.h.

#define PH_HANDLE_FILE_SHARED_READ 0x1

Definition at line 513 of file phapppub.h.

#define PH_HANDLE_FILE_SHARED_WRITE 0x2

Definition at line 514 of file phapppub.h.

#define PH_IS_FAKE_PROCESS_ID ( ProcessId ) ((LONG_PTR)(ProcessId) < 0)

Definition at line 27 of file phapppub.h.

#define PH_IS_REAL_PROCESS_ID ( ProcessId ) ((LONG_PTR)(ProcessId) > 0)

Definition at line 24 of file phapppub.h.

#define PH_LOG_ENTRY_MESSAGE 9

Definition at line 1533 of file phapppub.h.

#define PH_MAINWND_CLASSNAME L"ProcessHacker"

Definition at line 1271 of file phapppub.h.

#define PH_MENU_ITEM_LOCATION_TOOLS 2

Definition at line 2976 of file phapppub.h.

#define PH_MENU_ITEM_LOCATION_VIEW 1

Definition at line 2975 of file phapppub.h.

#define PH_MENU_ITEM_RETURN_MENU 0x40000000

Definition at line 2980 of file phapppub.h.

#define PH_MENU_ITEM_SUB_MENU 0x80000000

Definition at line 2979 of file phapppub.h.

#define PH_MENU_ITEM_VALID_FLAGS 0xc0000000

Definition at line 2981 of file phapppub.h.

#define PH_MINIINFO_SECTION_NO_UPPER_MARGINS 0x1

Definition at line 2381 of file phapppub.h.

#define PH_NETWORK_OWNER_INFO_SIZE 16

Definition at line 352 of file phapppub.h.

#define PH_NF_ICON_SHOW_MINIINFO 0x2

Definition at line 2098 of file phapppub.h.

#define PH_NF_ICON_UNAVAILABLE 0x1

Definition at line 2097 of file phapppub.h.

#define PH_NF_MSG_SHOWMINIINFOSECTION (WM_APP + 1)

Definition at line 2088 of file phapppub.h.

#define PH_NF_UPDATE_DESTROY_RESOURCE 0x2

Definition at line 2068 of file phapppub.h.

#define PH_NF_UPDATE_IS_BITMAP 0x1

Definition at line 2067 of file phapppub.h.

#define PH_NOTIFY_MAXIMUM 0x40

Definition at line 1385 of file phapppub.h.

#define PH_NOTIFY_MINIMUM 0x1

Definition at line 1378 of file phapppub.h.

#define PH_NOTIFY_PROCESS_CREATE 0x1

Definition at line 1379 of file phapppub.h.

#define PH_NOTIFY_PROCESS_DELETE 0x2

Definition at line 1380 of file phapppub.h.

#define PH_NOTIFY_SERVICE_CREATE 0x4

Definition at line 1381 of file phapppub.h.

#define PH_NOTIFY_SERVICE_DELETE 0x8

Definition at line 1382 of file phapppub.h.

#define PH_NOTIFY_SERVICE_START 0x10

Definition at line 1383 of file phapppub.h.

#define PH_NOTIFY_SERVICE_STOP 0x20

Definition at line 1384 of file phapppub.h.

#define PH_NOTIFY_VALID_MASK 0x3f

Definition at line 1386 of file phapppub.h.

#define PH_PLUGIN_FLAG_RESERVED 0x1

Definition at line 2897 of file phapppub.h.

#define PH_PLUGIN_MENU_DISALLOW_HOOKS 0x1

Definition at line 2609 of file phapppub.h.

#define PH_PROCESS_ITEM_REMOVED 0x1

Definition at line 30 of file phapppub.h.

#define PH_PROCESS_RECORD_DEAD 0x1

Definition at line 167 of file phapppub.h.

#define PH_PROCESS_RECORD_STAT_REF 0x2

Definition at line 169 of file phapppub.h.

#define PH_PROP_PAGE_TAB_CONTROL_PARENT ((PPH_LAYOUT_ITEM)0x1)

Definition at line 1478 of file phapppub.h.

#define PH_QUERY_MEMORY_IGNORE_FREE 0x1

Definition at line 660 of file phapppub.h.

#define PH_QUERY_MEMORY_REGION_TYPE 0x2

Definition at line 661 of file phapppub.h.

#define PH_QUERY_MEMORY_WS_COUNTERS 0x4

Definition at line 662 of file phapppub.h.

#define PH_SHELL_APP_PROPAGATE_PARAMETERS 0x1

Definition at line 1149 of file phapppub.h.

#define PH_SHELL_APP_PROPAGATE_PARAMETERS_FORCE_SETTINGS 0x4

Definition at line 1151 of file phapppub.h.

#define PH_SHELL_APP_PROPAGATE_PARAMETERS_IGNORE_VISIBILITY 0x2

Definition at line 1150 of file phapppub.h.

#define PH_TN_COLUMN_MENU_CHOOSE_COLUMNS_ID ((ULONG)-2)

Definition at line 1179 of file phapppub.h.

#define PH_TN_COLUMN_MENU_HIDE_COLUMN_ID ((ULONG)-1)

Definition at line 1178 of file phapppub.h.

#define PH_TN_COLUMN_MENU_RESET_SORT_ID ((ULONG)-5)

Definition at line 1182 of file phapppub.h.

#define PH_TN_COLUMN_MENU_SIZE_ALL_COLUMNS_TO_FIT_ID ((ULONG)-4)

Definition at line 1181 of file phapppub.h.

#define PH_TN_COLUMN_MENU_SIZE_COLUMN_TO_FIT_ID ((ULONG)-3)

Definition at line 1180 of file phapppub.h.

#define PhaGetStringSetting ( Name ) ((PPH_STRING)PhAutoDereferenceObject(PhGetStringSetting(Name)))

Definition at line 2183 of file phapppub.h.

#define ProcessHacker_AddMenuItem	(	hWnd,
		AddMenuItem
	)	((ULONG_PTR)SendMessage(hWnd, WM_PH_ADD_MENU_ITEM, 0, (LPARAM)(AddMenuItem)))

Definition at line 1326 of file phapppub.h.

#define ProcessHacker_AddTabPage	(	hWnd,
		TabPage
	)	((PPH_ADDITIONAL_TAB_PAGE)SendMessage(hWnd, WM_PH_ADD_TAB_PAGE, 0, (LPARAM)(TabPage)))

Definition at line 1328 of file phapppub.h.

#define ProcessHacker_CancelEarlyShutdown ( hWnd ) SendMessage(hWnd, WM_PH_CANCEL_EARLY_SHUTDOWN, 0, 0)

Definition at line 1304 of file phapppub.h.

#define ProcessHacker_Destroy ( hWnd ) SendMessage(hWnd, WM_PH_DESTROY, 0, 0)

Definition at line 1298 of file phapppub.h.

#define ProcessHacker_GetCallbackLayoutPadding ( hWnd ) ((PPH_CALLBACK)SendMessage(hWnd, WM_PH_GET_CALLBACK_LAYOUT_PADDING, 0, 0))

Definition at line 1314 of file phapppub.h.

#define ProcessHacker_GetUpdateAutomatically ( hWnd ) ((BOOLEAN)SendMessage(hWnd, WM_PH_GET_UPDATE_AUTOMATICALLY, 0, 0))

Definition at line 1332 of file phapppub.h.

#define ProcessHacker_InvalidateLayoutPadding ( hWnd ) SendMessage(hWnd, WM_PH_INVALIDATE_LAYOUT_PADDING, 0, 0)

Definition at line 1316 of file phapppub.h.

#define ProcessHacker_Invoke	(	hWnd,
		Function,
		Parameter
	)	PostMessage(hWnd, WM_PH_INVOKE, (WPARAM)(Parameter), (LPARAM)(Function))

Definition at line 1324 of file phapppub.h.

#define ProcessHacker_PrepareForEarlyShutdown ( hWnd ) SendMessage(hWnd, WM_PH_PREPARE_FOR_EARLY_SHUTDOWN, 0, 0)

Definition at line 1302 of file phapppub.h.

#define ProcessHacker_Refresh ( hWnd ) SendMessage(hWnd, WM_PH_REFRESH, 0, 0)

Definition at line 1330 of file phapppub.h.

#define ProcessHacker_SaveAllSettings ( hWnd ) SendMessage(hWnd, WM_PH_SAVE_ALL_SETTINGS, 0, 0)

Definition at line 1300 of file phapppub.h.

#define ProcessHacker_SelectNetworkItem	(	hWnd,
		NetworkItem
	)	SendMessage(hWnd, WM_PH_SELECT_NETWORK_ITEM, 0, (LPARAM)(NetworkItem))

Definition at line 1322 of file phapppub.h.

#define ProcessHacker_SelectProcessNode	(	hWnd,
		ProcessNode
	)	SendMessage(hWnd, WM_PH_SELECT_PROCESS_NODE, 0, (LPARAM)(ProcessNode))

Definition at line 1318 of file phapppub.h.

#define ProcessHacker_SelectServiceItem	(	hWnd,
		ServiceItem
	)	SendMessage(hWnd, WM_PH_SELECT_SERVICE_ITEM, 0, (LPARAM)(ServiceItem))

Definition at line 1320 of file phapppub.h.

#define ProcessHacker_SelectTabPage	(	hWnd,
		Index
	)	SendMessage(hWnd, WM_PH_SELECT_TAB_PAGE, (WPARAM)(Index), 0)

Definition at line 1312 of file phapppub.h.

#define ProcessHacker_SetUpdateAutomatically	(	hWnd,
		Value
	)	SendMessage(hWnd, WM_PH_SET_UPDATE_AUTOMATICALLY, (WPARAM)(Value), 0)

Definition at line 1334 of file phapppub.h.

#define ProcessHacker_ShowMemoryEditor	(	hWnd,
		ShowMemoryEditor
	)	PostMessage(hWnd, WM_PH_SHOW_MEMORY_EDITOR, 0, (LPARAM)(ShowMemoryEditor))

Definition at line 1308 of file phapppub.h.

#define ProcessHacker_ShowMemoryResults	(	hWnd,
		ShowMemoryResults
	)	PostMessage(hWnd, WM_PH_SHOW_MEMORY_RESULTS, 0, (LPARAM)(ShowMemoryResults))

Definition at line 1310 of file phapppub.h.

#define ProcessHacker_ShowProcessProperties	(	hWnd,
		ProcessItem
	)	SendMessage(hWnd, WM_PH_SHOW_PROCESS_PROPERTIES, 0, (LPARAM)(ProcessItem))

Definition at line 1296 of file phapppub.h.

#define ProcessHacker_ToggleVisible	(	hWnd,
		AlwaysShow
	)	SendMessage(hWnd, WM_PH_TOGGLE_VISIBLE, (WPARAM)(AlwaysShow), 0)

Definition at line 1306 of file phapppub.h.

#define WM_PH_ADD_MENU_ITEM (WM_APP + 139)

Definition at line 1290 of file phapppub.h.

#define WM_PH_ADD_TAB_PAGE (WM_APP + 140)

Definition at line 1291 of file phapppub.h.

#define WM_PH_CANCEL_EARLY_SHUTDOWN (WM_APP + 124)

Definition at line 1279 of file phapppub.h.

#define WM_PH_DESTROY (WM_APP + 121)

Definition at line 1276 of file phapppub.h.

#define WM_PH_GET_CALLBACK_LAYOUT_PADDING (WM_APP + 131)

Definition at line 1284 of file phapppub.h.

#define WM_PH_GET_UPDATE_AUTOMATICALLY (WM_APP + 142)

Definition at line 1293 of file phapppub.h.

#define WM_PH_INVALIDATE_LAYOUT_PADDING (WM_APP + 132)

Definition at line 1285 of file phapppub.h.

#define WM_PH_INVOKE (WM_APP + 138)

Definition at line 1289 of file phapppub.h.

#define WM_PH_PREPARE_FOR_EARLY_SHUTDOWN (WM_APP + 123)

Definition at line 1278 of file phapppub.h.

#define WM_PH_REFRESH (WM_APP + 141)

Definition at line 1292 of file phapppub.h.

#define WM_PH_SAVE_ALL_SETTINGS (WM_APP + 122)

Definition at line 1277 of file phapppub.h.

#define WM_PH_SELECT_NETWORK_ITEM (WM_APP + 135)

Definition at line 1288 of file phapppub.h.

#define WM_PH_SELECT_PROCESS_NODE (WM_APP + 133)

Definition at line 1286 of file phapppub.h.

#define WM_PH_SELECT_SERVICE_ITEM (WM_APP + 134)

Definition at line 1287 of file phapppub.h.

#define WM_PH_SELECT_TAB_PAGE (WM_APP + 130)

Definition at line 1283 of file phapppub.h.

#define WM_PH_SET_LIST_VIEW_SETTINGS (WM_APP + 701)

Definition at line 1991 of file phapppub.h.

#define WM_PH_SET_UPDATE_AUTOMATICALLY (WM_APP + 143)

Definition at line 1294 of file phapppub.h.

#define WM_PH_SHOW_MEMORY_EDITOR (WM_APP + 128)

Definition at line 1281 of file phapppub.h.

#define WM_PH_SHOW_MEMORY_RESULTS (WM_APP + 129)

Definition at line 1282 of file phapppub.h.

#define WM_PH_SHOW_PROCESS_PROPERTIES (WM_APP + 120)

Definition at line 1275 of file phapppub.h.

#define WM_PH_TOGGLE_VISIBLE (WM_APP + 127)

Definition at line 1280 of file phapppub.h.

Typedef Documentation

typedef struct _PH_ADDITIONAL_TAB_PAGE PH_ADDITIONAL_TAB_PAGE

typedef struct _PH_ADDMENUITEM PH_ADDMENUITEM

typedef enum _PH_EM_OBJECT_OPERATION PH_EM_OBJECT_OPERATION

typedef enum _PH_EM_OBJECT_TYPE PH_EM_OBJECT_TYPE

typedef enum _PH_GENERAL_CALLBACK PH_GENERAL_CALLBACK

typedef struct _PH_HANDLE_ITEM PH_HANDLE_ITEM

typedef struct _PH_HANDLE_NODE PH_HANDLE_NODE

typedef struct _PH_HANDLE_PROVIDER PH_HANDLE_PROVIDER

typedef struct _PH_HANDLES_CONTEXT PH_HANDLES_CONTEXT

typedef union _PH_KNOWN_PROCESS_COMMAND_LINE PH_KNOWN_PROCESS_COMMAND_LINE

typedef enum _PH_KNOWN_PROCESS_TYPE PH_KNOWN_PROCESS_TYPE

Definition at line 480 of file phapppub.h.

typedef struct _PH_LAYOUT_PADDING_DATA PH_LAYOUT_PADDING_DATA

typedef struct _PH_MEMORY_CONTEXT PH_MEMORY_CONTEXT

typedef struct _PH_MEMORY_ITEM PH_MEMORY_ITEM

typedef struct _PH_MEMORY_ITEM_LIST PH_MEMORY_ITEM_LIST

typedef struct _PH_MEMORY_NODE PH_MEMORY_NODE

typedef enum _PH_MEMORY_REGION_TYPE PH_MEMORY_REGION_TYPE

typedef struct _PH_MESSAGE_LOOP_FILTER_ENTRY PH_MESSAGE_LOOP_FILTER_ENTRY

typedef struct _PH_MINIINFO_CREATE_DIALOG PH_MINIINFO_CREATE_DIALOG

typedef struct _PH_MINIINFO_LIST_SECTION PH_MINIINFO_LIST_SECTION

typedef struct _PH_MINIINFO_LIST_SECTION_ASSIGN_SORT_DATA PH_MINIINFO_LIST_SECTION_ASSIGN_SORT_DATA

typedef struct _PH_MINIINFO_LIST_SECTION_GET_TITLE_TEXT PH_MINIINFO_LIST_SECTION_GET_TITLE_TEXT

typedef struct _PH_MINIINFO_LIST_SECTION_GET_USAGE_TEXT PH_MINIINFO_LIST_SECTION_GET_USAGE_TEXT

typedef struct _PH_MINIINFO_LIST_SECTION_MENU_INFORMATION PH_MINIINFO_LIST_SECTION_MENU_INFORMATION

typedef enum _PH_MINIINFO_LIST_SECTION_MESSAGE PH_MINIINFO_LIST_SECTION_MESSAGE

typedef struct _PH_MINIINFO_LIST_SECTION_SORT_DATA PH_MINIINFO_LIST_SECTION_SORT_DATA

typedef struct _PH_MINIINFO_LIST_SECTION_SORT_LIST PH_MINIINFO_LIST_SECTION_SORT_LIST

typedef struct _PH_MINIINFO_PARAMETERS PH_MINIINFO_PARAMETERS

typedef struct _PH_MINIINFO_SECTION PH_MINIINFO_SECTION

typedef enum _PH_MINIINFO_SECTION_MESSAGE PH_MINIINFO_SECTION_MESSAGE

typedef struct _PH_MODULE_ITEM PH_MODULE_ITEM

typedef struct _PH_MODULE_NODE PH_MODULE_NODE

typedef struct _PH_MODULE_PROVIDER PH_MODULE_PROVIDER

typedef struct _PH_MODULES_CONTEXT PH_MODULES_CONTEXT

typedef struct _PH_NETWORK_ITEM PH_NETWORK_ITEM

typedef struct _PH_NETWORK_NODE PH_NETWORK_NODE

typedef struct _PH_NF_ICON PH_NF_ICON

typedef struct _PH_NF_ICON_REGISTRATION_DATA PH_NF_ICON_REGISTRATION_DATA

typedef struct _PH_NF_MSG_SHOWMINIINFOSECTION_DATA PH_NF_MSG_SHOWMINIINFOSECTION_DATA

typedef struct _PH_NF_POINTERS PH_NF_POINTERS

typedef enum _PH_PHSVC_MODE PH_PHSVC_MODE

typedef struct _PH_PLUGIN PH_PLUGIN

typedef enum _PH_PLUGIN_CALLBACK PH_PLUGIN_CALLBACK

typedef struct _PH_PLUGIN_GET_HIGHLIGHTING_COLOR PH_PLUGIN_GET_HIGHLIGHTING_COLOR

typedef struct _PH_PLUGIN_GET_TOOLTIP_TEXT PH_PLUGIN_GET_TOOLTIP_TEXT

typedef struct _PH_PLUGIN_HANDLE_PROPERTIES_CONTEXT PH_PLUGIN_HANDLE_PROPERTIES_CONTEXT

typedef struct _PH_PLUGIN_INFORMATION PH_PLUGIN_INFORMATION

typedef struct _PH_PLUGIN_MEMORY_ITEM_LIST_CONTROL PH_PLUGIN_MEMORY_ITEM_LIST_CONTROL

typedef enum _PH_PLUGIN_MEMORY_ITEM_LIST_CONTROL_TYPE PH_PLUGIN_MEMORY_ITEM_LIST_CONTROL_TYPE

typedef struct _PH_PLUGIN_MENU_HOOK_INFORMATION PH_PLUGIN_MENU_HOOK_INFORMATION

typedef struct _PH_PLUGIN_MENU_INFORMATION PH_PLUGIN_MENU_INFORMATION

typedef struct _PH_PLUGIN_MENU_ITEM PH_PLUGIN_MENU_ITEM

typedef struct _PH_PLUGIN_MINIINFO_POINTERS PH_PLUGIN_MINIINFO_POINTERS

typedef struct _PH_PLUGIN_NOTIFY_EVENT PH_PLUGIN_NOTIFY_EVENT

typedef struct _PH_PLUGIN_OBJECT_PROPERTIES PH_PLUGIN_OBJECT_PROPERTIES

typedef struct _PH_PLUGIN_PHSVC_CLIENT PH_PLUGIN_PHSVC_CLIENT

typedef struct _PH_PLUGIN_PHSVC_REQUEST PH_PLUGIN_PHSVC_REQUEST

typedef struct _PH_PLUGIN_PROCESS_PROPCONTEXT PH_PLUGIN_PROCESS_PROPCONTEXT

typedef struct _PH_PLUGIN_SYSINFO_POINTERS PH_PLUGIN_SYSINFO_POINTERS

typedef struct _PH_PLUGIN_SYSTEM_STATISTICS PH_PLUGIN_SYSTEM_STATISTICS

typedef struct _PH_PLUGIN_THREAD_STACK_CONTROL PH_PLUGIN_THREAD_STACK_CONTROL

typedef enum _PH_PLUGIN_THREAD_STACK_CONTROL_TYPE PH_PLUGIN_THREAD_STACK_CONTROL_TYPE

typedef struct _PH_PLUGIN_TREENEW_INFORMATION PH_PLUGIN_TREENEW_INFORMATION

typedef struct _PH_PLUGIN_TREENEW_MESSAGE PH_PLUGIN_TREENEW_MESSAGE

typedef struct _PH_PROCESS_GROUP PH_PROCESS_GROUP

typedef struct _PH_PROCESS_ITEM PH_PROCESS_ITEM

typedef struct _PH_PROCESS_NODE PH_PROCESS_NODE

typedef struct _PH_PROCESS_PROPPAGECONTEXT PH_PROCESS_PROPPAGECONTEXT

typedef struct _PH_PROCESS_RECORD PH_PROCESS_RECORD

typedef enum _PH_SERVICE_CHANGE PH_SERVICE_CHANGE

typedef struct _PH_SERVICE_ITEM PH_SERVICE_ITEM

typedef struct _PH_SERVICE_MODIFIED_DATA PH_SERVICE_MODIFIED_DATA

typedef struct _PH_SERVICE_NODE PH_SERVICE_NODE

typedef struct _PH_SETTING_CREATE PH_SETTING_CREATE

typedef enum _PH_SETTING_TYPE PH_SETTING_TYPE

typedef struct _PH_SH_STATE PH_SH_STATE

typedef struct _PH_SYSINFO_CREATE_DIALOG PH_SYSINFO_CREATE_DIALOG

typedef struct _PH_SYSINFO_DRAW_PANEL PH_SYSINFO_DRAW_PANEL

typedef struct _PH_SYSINFO_GRAPH_GET_TOOLTIP_TEXT PH_SYSINFO_GRAPH_GET_TOOLTIP_TEXT

typedef struct _PH_SYSINFO_PARAMETERS PH_SYSINFO_PARAMETERS

typedef struct _PH_SYSINFO_SECTION PH_SYSINFO_SECTION

typedef enum _PH_SYSINFO_SECTION_MESSAGE PH_SYSINFO_SECTION_MESSAGE

typedef enum _PH_SYSINFO_VIEW_TYPE PH_SYSINFO_VIEW_TYPE

typedef struct _PH_THREAD_ITEM PH_THREAD_ITEM

typedef struct _PH_THREAD_NODE PH_THREAD_NODE

typedef struct _PH_THREAD_PROVIDER PH_THREAD_PROVIDER

typedef struct _PH_THREADS_CONTEXT PH_THREADS_CONTEXT

typedef struct _PH_TN_COLUMN_MENU_DATA PH_TN_COLUMN_MENU_DATA

typedef struct _PH_TN_FILTER_ENTRY PH_TN_FILTER_ENTRY

typedef struct _PH_TN_FILTER_SUPPORT PH_TN_FILTER_SUPPORT

typedef struct _PH_ADDITIONAL_TAB_PAGE * PPH_ADDITIONAL_TAB_PAGE

typedef struct _PH_ADDMENUITEM * PPH_ADDMENUITEM

typedef LONG(NTAPI * PPH_CM_POST_SORT_FUNCTION)(_In_ LONG Result, _In_ PVOID Node1, _In_ PVOID Node2, _In_ PH_SORT_ORDER SortOrder)

Definition at line 677 of file phapppub.h.

typedef VOID(NTAPI * PPH_EM_OBJECT_CALLBACK)(_In_ PVOID Object, _In_ PH_EM_OBJECT_TYPE ObjectType, _In_ PVOID Extension)

Definition at line 2038 of file phapppub.h.

typedef struct _PH_EMENU_ITEM * PPH_EMENU

Definition at line 2607 of file phapppub.h.

typedef struct _PH_EMENU_ITEM* PPH_EMENU_ITEM

Definition at line 2607 of file phapppub.h.

typedef enum _PH_GENERAL_CALLBACK * PPH_GENERAL_CALLBACK

typedef struct _PH_HANDLE_ITEM * PPH_HANDLE_ITEM

typedef struct _PH_HANDLE_NODE * PPH_HANDLE_NODE

typedef struct _PH_HANDLE_PROVIDER * PPH_HANDLE_PROVIDER

typedef struct _PH_HANDLES_CONTEXT * PPH_HANDLES_CONTEXT

typedef union _PH_KNOWN_PROCESS_COMMAND_LINE * PPH_KNOWN_PROCESS_COMMAND_LINE

typedef struct _PH_LAYOUT_PADDING_DATA * PPH_LAYOUT_PADDING_DATA

typedef struct _PH_LOG_ENTRY* PPH_LOG_ENTRY

Definition at line 1535 of file phapppub.h.

typedef struct _PH_MEMORY_CONTEXT * PPH_MEMORY_CONTEXT

typedef struct _PH_MEMORY_ITEM * PPH_MEMORY_ITEM

typedef struct _PH_MEMORY_ITEM_LIST * PPH_MEMORY_ITEM_LIST

typedef struct _PH_MEMORY_NODE * PPH_MEMORY_NODE

typedef BOOLEAN(NTAPI * PPH_MESSAGE_LOOP_FILTER)(_In_ PMSG Message, _In_ PVOID Context)

Definition at line 944 of file phapppub.h.

typedef struct _PH_MESSAGE_LOOP_FILTER_ENTRY * PPH_MESSAGE_LOOP_FILTER_ENTRY

typedef struct _PH_MINIINFO_CREATE_DIALOG * PPH_MINIINFO_CREATE_DIALOG

typedef PPH_MINIINFO_LIST_SECTION(NTAPI * PPH_MINIINFO_CREATE_LIST_SECTION)(_In_ PWSTR Name, _In_ ULONG Flags, _In_ PPH_MINIINFO_LIST_SECTION Template)

Definition at line 2803 of file phapppub.h.

typedef PPH_MINIINFO_SECTION(NTAPI * PPH_MINIINFO_CREATE_SECTION)(_In_ PPH_MINIINFO_SECTION Template)

Definition at line 2795 of file phapppub.h.

typedef PPH_MINIINFO_SECTION(NTAPI * PPH_MINIINFO_FIND_SECTION)(_In_ PPH_STRINGREF Name)

Definition at line 2799 of file phapppub.h.

typedef struct _PH_MINIINFO_LIST_SECTION * PPH_MINIINFO_LIST_SECTION

typedef struct _PH_MINIINFO_LIST_SECTION_ASSIGN_SORT_DATA * PPH_MINIINFO_LIST_SECTION_ASSIGN_SORT_DATA

typedef BOOLEAN(NTAPI * PPH_MINIINFO_LIST_SECTION_CALLBACK)(_In_ struct _PH_MINIINFO_LIST_SECTION *ListSection, _In_ PH_MINIINFO_LIST_SECTION_MESSAGE Message, _In_opt_ PVOID Parameter1, _In_opt_ PVOID Parameter2)

Definition at line 2418 of file phapppub.h.

typedef struct _PH_MINIINFO_LIST_SECTION_GET_TITLE_TEXT * PPH_MINIINFO_LIST_SECTION_GET_TITLE_TEXT

typedef struct _PH_MINIINFO_LIST_SECTION_GET_USAGE_TEXT * PPH_MINIINFO_LIST_SECTION_GET_USAGE_TEXT

typedef struct _PH_MINIINFO_LIST_SECTION_MENU_INFORMATION * PPH_MINIINFO_LIST_SECTION_MENU_INFORMATION

typedef struct _PH_MINIINFO_LIST_SECTION_SORT_DATA * PPH_MINIINFO_LIST_SECTION_SORT_DATA

typedef struct _PH_MINIINFO_LIST_SECTION_SORT_LIST * PPH_MINIINFO_LIST_SECTION_SORT_LIST

typedef struct _PH_MINIINFO_PARAMETERS * PPH_MINIINFO_PARAMETERS

typedef struct _PH_MINIINFO_SECTION * PPH_MINIINFO_SECTION

typedef BOOLEAN(NTAPI * PPH_MINIINFO_SECTION_CALLBACK)(_In_ struct _PH_MINIINFO_SECTION *Section, _In_ PH_MINIINFO_SECTION_MESSAGE Message, _In_opt_ PVOID Parameter1, _In_opt_ PVOID Parameter2)

Definition at line 2363 of file phapppub.h.

typedef VOID(NTAPI * PPH_MINIINFO_SET_SECTION_TEXT)(_In_ struct _PH_MINIINFO_SECTION *Section, _In_opt_ PPH_STRING Text)

Definition at line 2332 of file phapppub.h.

typedef struct _PH_MODULE_ITEM * PPH_MODULE_ITEM

typedef struct _PH_MODULE_NODE * PPH_MODULE_NODE

typedef struct _PH_MODULE_PROVIDER * PPH_MODULE_PROVIDER

typedef struct _PH_MODULES_CONTEXT * PPH_MODULES_CONTEXT

typedef struct _PH_NETWORK_ITEM * PPH_NETWORK_ITEM

typedef struct _PH_NETWORK_NODE * PPH_NETWORK_NODE

typedef VOID(NTAPI * PPH_NF_BEGIN_BITMAP)(_Out_ PULONG Width, _Out_ PULONG Height, _Out_ HBITMAP *Bitmap, _Out_opt_ PVOID *Bits, _Out_ HDC *Hdc, _Out_ HBITMAP *OldBitmap)

Definition at line 2052 of file phapppub.h.

typedef struct _PH_NF_ICON * PPH_NF_ICON

typedef BOOLEAN(NTAPI * PPH_NF_ICON_MESSAGE_CALLBACK)(_In_ struct _PH_NF_ICON *Icon, _In_ ULONG_PTR WParam, _In_ ULONG_PTR LParam, _In_opt_ PVOID Context)

Definition at line 2078 of file phapppub.h.

typedef struct _PH_NF_ICON_REGISTRATION_DATA * PPH_NF_ICON_REGISTRATION_DATA

typedef VOID(NTAPI * PPH_NF_ICON_UPDATE_CALLBACK)(_In_ struct _PH_NF_ICON *Icon, _Out_ PVOID *NewIconOrBitmap, _Out_ PULONG Flags, _Out_ PPH_STRING *NewText, _In_opt_ PVOID Context)

Definition at line 2070 of file phapppub.h.

typedef struct _PH_NF_MSG_SHOWMINIINFOSECTION_DATA * PPH_NF_MSG_SHOWMINIINFOSECTION_DATA

typedef struct _PH_NF_POINTERS * PPH_NF_POINTERS

typedef VOID(NTAPI * PPH_NF_UPDATE_REGISTERED_ICON)(_In_ struct _PH_NF_ICON *Icon)

Definition at line 2048 of file phapppub.h.

typedef struct _PH_PLUGIN * PPH_PLUGIN

typedef enum _PH_PLUGIN_CALLBACK * PPH_PLUGIN_CALLBACK

typedef struct _PH_PLUGIN_GET_HIGHLIGHTING_COLOR * PPH_PLUGIN_GET_HIGHLIGHTING_COLOR

typedef struct _PH_PLUGIN_GET_TOOLTIP_TEXT * PPH_PLUGIN_GET_TOOLTIP_TEXT

typedef struct _PH_PLUGIN_HANDLE_PROPERTIES_CONTEXT * PPH_PLUGIN_HANDLE_PROPERTIES_CONTEXT

typedef struct _PH_PLUGIN_INFORMATION * PPH_PLUGIN_INFORMATION

typedef struct _PH_PLUGIN_MEMORY_ITEM_LIST_CONTROL * PPH_PLUGIN_MEMORY_ITEM_LIST_CONTROL

typedef struct _PH_PLUGIN_MENU_HOOK_INFORMATION * PPH_PLUGIN_MENU_HOOK_INFORMATION

typedef struct _PH_PLUGIN_MENU_INFORMATION * PPH_PLUGIN_MENU_INFORMATION

typedef struct _PH_PLUGIN_MENU_ITEM * PPH_PLUGIN_MENU_ITEM

typedef VOID(NTAPI * PPH_PLUGIN_MENU_ITEM_DELETE_FUNCTION)(_In_ struct _PH_PLUGIN_MENU_ITEM *MenuItem)

Definition at line 2957 of file phapppub.h.

typedef struct _PH_PLUGIN_MINIINFO_POINTERS * PPH_PLUGIN_MINIINFO_POINTERS

typedef struct _PH_PLUGIN_NOTIFY_EVENT * PPH_PLUGIN_NOTIFY_EVENT

typedef struct _PH_PLUGIN_OBJECT_PROPERTIES * PPH_PLUGIN_OBJECT_PROPERTIES

typedef struct _PH_PLUGIN_PHSVC_CLIENT * PPH_PLUGIN_PHSVC_CLIENT

typedef struct _PH_PLUGIN_PHSVC_REQUEST * PPH_PLUGIN_PHSVC_REQUEST

typedef struct _PH_PLUGIN_PROCESS_PROPCONTEXT * PPH_PLUGIN_PROCESS_PROPCONTEXT

typedef struct _PH_PLUGIN_SYSINFO_POINTERS * PPH_PLUGIN_SYSINFO_POINTERS

typedef struct _PH_PLUGIN_SYSTEM_STATISTICS * PPH_PLUGIN_SYSTEM_STATISTICS

typedef struct _PH_PLUGIN_THREAD_STACK_CONTROL * PPH_PLUGIN_THREAD_STACK_CONTROL

typedef struct _PH_PLUGIN_TREENEW_INFORMATION * PPH_PLUGIN_TREENEW_INFORMATION

typedef struct _PH_PLUGIN_TREENEW_MESSAGE * PPH_PLUGIN_TREENEW_MESSAGE

typedef LONG(NTAPI * PPH_PLUGIN_TREENEW_SORT_FUNCTION)(_In_ PVOID Node1, _In_ PVOID Node2, _In_ ULONG SubId, _In_ PVOID Context)

Definition at line 2827 of file phapppub.h.

typedef BOOLEAN(NTAPI * PPH_PLUGIN_WALK_THREAD_STACK_CALLBACK)(_In_ PPH_THREAD_STACK_FRAME StackFrame, _In_opt_ PVOID Context)

Definition at line 2708 of file phapppub.h.

typedef struct _PH_PROCESS_GROUP * PPH_PROCESS_GROUP

typedef struct _PH_PROCESS_ITEM * PPH_PROCESS_ITEM

typedef struct _PH_PROCESS_NODE * PPH_PROCESS_NODE

typedef struct _PH_PROCESS_PROPCONTEXT* PPH_PROCESS_PROPCONTEXT

Definition at line 1397 of file phapppub.h.

typedef struct _PH_PROCESS_PROPPAGECONTEXT * PPH_PROCESS_PROPPAGECONTEXT

typedef struct _PH_PROCESS_RECORD * PPH_PROCESS_RECORD

Definition at line 33 of file phapppub.h.

typedef enum _PH_SERVICE_CHANGE * PPH_SERVICE_CHANGE

typedef struct _PH_SERVICE_ITEM * PPH_SERVICE_ITEM

typedef struct _PH_SERVICE_MODIFIED_DATA * PPH_SERVICE_MODIFIED_DATA

typedef struct _PH_SERVICE_NODE * PPH_SERVICE_NODE

typedef struct _PH_SETTING_CREATE * PPH_SETTING_CREATE

typedef enum _PH_SETTING_TYPE PPH_SETTING_TYPE

typedef struct _PH_SH_STATE * PPH_SH_STATE

typedef struct _PH_SYMBOL_PROVIDER* PPH_SYMBOL_PROVIDER

Definition at line 926 of file phapppub.h.

typedef VOID(NTAPI * PPH_SYSINFO_COLOR_SETUP_FUNCTION)(_Out_ PPH_GRAPH_DRAW_INFO DrawInfo, _In_ COLORREF Color1, _In_ COLORREF Color2)

Definition at line 2212 of file phapppub.h.

typedef struct _PH_SYSINFO_CREATE_DIALOG * PPH_SYSINFO_CREATE_DIALOG

typedef PPH_SYSINFO_SECTION(NTAPI * PPH_SYSINFO_CREATE_SECTION)(_In_ PPH_SYSINFO_SECTION Template)

Definition at line 2770 of file phapppub.h.

typedef struct _PH_SYSINFO_DRAW_PANEL * PPH_SYSINFO_DRAW_PANEL

typedef VOID(NTAPI * PPH_SYSINFO_ENTER_SECTION_VIEW)(_In_ PPH_SYSINFO_SECTION NewSection)

Definition at line 2778 of file phapppub.h.

typedef PPH_SYSINFO_SECTION(NTAPI * PPH_SYSINFO_FIND_SECTION)(_In_ PPH_STRINGREF Name)

Definition at line 2774 of file phapppub.h.

typedef struct _PH_SYSINFO_GRAPH_GET_TOOLTIP_TEXT * PPH_SYSINFO_GRAPH_GET_TOOLTIP_TEXT

typedef struct _PH_SYSINFO_PARAMETERS * PPH_SYSINFO_PARAMETERS

typedef VOID(NTAPI * PPH_SYSINFO_RESTORE_SUMMARY_VIEW)(VOID)

Definition at line 2782 of file phapppub.h.

typedef struct _PH_SYSINFO_SECTION * PPH_SYSINFO_SECTION

typedef BOOLEAN(NTAPI * PPH_SYSINFO_SECTION_CALLBACK)(_In_ struct _PH_SYSINFO_SECTION *Section, _In_ PH_SYSINFO_SECTION_MESSAGE Message, _In_opt_ PVOID Parameter1, _In_opt_ PVOID Parameter2)

Definition at line 2252 of file phapppub.h.

typedef VOID(NTAPI * PPH_TAB_PAGE_CALLBACK_FUNCTION)(_In_ PVOID Parameter1, _In_ PVOID Parameter2, _In_ PVOID Parameter3, _In_ PVOID Context)

Definition at line 1357 of file phapppub.h.

typedef HWND(NTAPI * PPH_TAB_PAGE_CREATE_FUNCTION)(_In_ PVOID Context)

Definition at line 1353 of file phapppub.h.

typedef struct _PH_THREAD_ITEM * PPH_THREAD_ITEM

typedef struct _PH_THREAD_NODE * PPH_THREAD_NODE

typedef struct _PH_THREAD_PROVIDER * PPH_THREAD_PROVIDER

typedef struct _PH_THREAD_STACK_FRAME* PPH_THREAD_STACK_FRAME

Definition at line 2706 of file phapppub.h.

typedef struct _PH_THREADS_CONTEXT * PPH_THREADS_CONTEXT

typedef struct _PH_TN_COLUMN_MENU_DATA * PPH_TN_COLUMN_MENU_DATA

typedef struct _PH_TN_FILTER_ENTRY * PPH_TN_FILTER_ENTRY

typedef BOOLEAN(NTAPI * PPH_TN_FILTER_FUNCTION)(_In_ PPH_TREENEW_NODE Node, _In_opt_ PVOID Context)

Definition at line 1212 of file phapppub.h.

typedef struct _PH_TN_FILTER_SUPPORT * PPH_TN_FILTER_SUPPORT

typedef PVOID(NTAPI * PPHSVC_CLIENT_CREATE_STRING)(_In_opt_ PVOID String, _In_ SIZE_T Length, _Out_ PPH_RELATIVE_STRINGREF StringRef)

Definition at line 2871 of file phapppub.h.

typedef VOID(NTAPI * PPHSVC_CLIENT_FREE_HEAP)(_In_ PVOID Memory)

Definition at line 2867 of file phapppub.h.

typedef NTSTATUS(NTAPI * PPHSVC_SERVER_CAPTURE_BUFFER)(_In_ PPH_RELATIVE_STRINGREF String, _In_ BOOLEAN AllowNull, _Out_ PVOID *CapturedBuffer)

Definition at line 2841 of file phapppub.h.

typedef NTSTATUS(NTAPI * PPHSVC_SERVER_CAPTURE_STRING)(_In_ PPH_RELATIVE_STRINGREF String, _In_ BOOLEAN AllowNull, _Out_ PPH_STRING *CapturedString)

Definition at line 2847 of file phapppub.h.

typedef NTSTATUS(NTAPI * PPHSVC_SERVER_PROBE_BUFFER)(_In_ PPH_RELATIVE_STRINGREF String, _In_ ULONG Alignment, _In_ BOOLEAN AllowNull, _Out_ PVOID *Pointer)

Definition at line 2834 of file phapppub.h.

typedef enum _VERIFY_RESULT VERIFY_RESULT

Definition at line 32 of file phapppub.h.

Enumeration Type Documentation

enum _PH_EM_OBJECT_OPERATION

Enumerator:

EmObjectCreate
EmObjectDelete
EmMaximumObjectOperation
EmObjectCreate
EmObjectDelete
EmMaximumObjectOperation

Definition at line 2031 of file phapppub.h.

enum _PH_EM_OBJECT_TYPE

Enumerator:

EmProcessItemType
EmProcessNodeType
EmServiceItemType
EmServiceNodeType
EmNetworkItemType
EmNetworkNodeType
EmThreadItemType
EmThreadNodeType
EmModuleItemType
EmModuleNodeType
EmHandleItemType
EmHandleNodeType
EmThreadsContextType
EmModulesContextType
EmHandlesContextType
EmThreadProviderType
EmModuleProviderType
EmHandleProviderType
EmMemoryNodeType
EmMemoryContextType
EmMaximumObjectType
EmProcessItemType
EmProcessNodeType
EmServiceItemType
EmServiceNodeType
EmNetworkItemType
EmNetworkNodeType
EmThreadItemType
EmThreadNodeType
EmModuleItemType
EmModuleNodeType
EmHandleItemType
EmHandleNodeType
EmThreadsContextType
EmModulesContextType
EmHandlesContextType
EmThreadProviderType
EmModuleProviderType
EmHandleProviderType
EmMemoryNodeType
EmMemoryContextType
EmMaximumObjectType

Definition at line 2006 of file phapppub.h.

enum _PH_GENERAL_CALLBACK

Enumerator:

GeneralCallbackMainWindowShowing
GeneralCallbackProcessesUpdated
GeneralCallbackGetProcessHighlightingColor
GeneralCallbackGetProcessTooltipText
GeneralCallbackProcessPropertiesInitializing
GeneralCallbackMainMenuInitializing
GeneralCallbackNotifyEvent
GeneralCallbackServicePropertiesInitializing
GeneralCallbackHandlePropertiesInitializing
GeneralCallbackProcessMenuInitializing
GeneralCallbackServiceMenuInitializing
GeneralCallbackNetworkMenuInitializing
GeneralCallbackIconMenuInitializing
GeneralCallbackThreadMenuInitializing
GeneralCallbackModuleMenuInitializing
GeneralCallbackMemoryMenuInitializing
GeneralCallbackHandleMenuInitializing
GeneralCallbackProcessTreeNewInitializing
GeneralCallbackServiceTreeNewInitializing
GeneralCallbackNetworkTreeNewInitializing
GeneralCallbackModuleTreeNewInitializing
GeneralCallbackModuleTreeNewUninitializing
GeneralCallbackThreadTreeNewInitializing
GeneralCallbackThreadTreeNewUninitializing
GeneralCallbackHandleTreeNewInitializing
GeneralCallbackHandleTreeNewUninitializing
GeneralCallbackThreadStackControl
GeneralCallbackSystemInformationInitializing
GeneralCallbackMainWindowTabChanged
GeneralCallbackMemoryTreeNewInitializing
GeneralCallbackMemoryTreeNewUninitializing
GeneralCallbackMemoryItemListControl
GeneralCallbackMiniInformationInitializing
GeneralCallbackMiListSectionMenuInitializing
GeneralCallbackMaximum
GeneralCallbackMainWindowShowing
GeneralCallbackProcessesUpdated
GeneralCallbackGetProcessHighlightingColor
GeneralCallbackGetProcessTooltipText
GeneralCallbackProcessPropertiesInitializing
GeneralCallbackMainMenuInitializing
GeneralCallbackNotifyEvent
GeneralCallbackServicePropertiesInitializing
GeneralCallbackHandlePropertiesInitializing
GeneralCallbackProcessMenuInitializing
GeneralCallbackServiceMenuInitializing
GeneralCallbackNetworkMenuInitializing
GeneralCallbackIconMenuInitializing
GeneralCallbackThreadMenuInitializing
GeneralCallbackModuleMenuInitializing
GeneralCallbackMemoryMenuInitializing
GeneralCallbackHandleMenuInitializing
GeneralCallbackProcessTreeNewInitializing
GeneralCallbackServiceTreeNewInitializing
GeneralCallbackNetworkTreeNewInitializing
GeneralCallbackModuleTreeNewInitializing
GeneralCallbackModuleTreeNewUninitializing
GeneralCallbackThreadTreeNewInitializing
GeneralCallbackThreadTreeNewUninitializing
GeneralCallbackHandleTreeNewInitializing
GeneralCallbackHandleTreeNewUninitializing
GeneralCallbackThreadStackControl
GeneralCallbackSystemInformationInitializing
GeneralCallbackMainWindowTabChanged
GeneralCallbackMemoryTreeNewInitializing
GeneralCallbackMemoryTreeNewUninitializing
GeneralCallbackMemoryItemListControl
GeneralCallbackMiniInformationInitializing
GeneralCallbackMiListSectionMenuInitializing
GeneralCallbackMaximum

Definition at line 2500 of file phapppub.h.

enum _PH_KNOWN_PROCESS_TYPE

Enumerator:

UnknownProcessType
SystemProcessType
SessionManagerProcessType
WindowsSubsystemProcessType
WindowsStartupProcessType
ServiceControlManagerProcessType
LocalSecurityAuthorityProcessType
LocalSessionManagerProcessType
WindowsLogonProcessType
ServiceHostProcessType
RunDllAsAppProcessType
ComSurrogateProcessType
TaskHostProcessType
ExplorerProcessType
UmdfHostProcessType
MaximumProcessType
KnownProcessTypeMask
KnownProcessWow64
UnknownProcessType
SystemProcessType
SessionManagerProcessType
WindowsSubsystemProcessType
WindowsStartupProcessType
ServiceControlManagerProcessType
LocalSecurityAuthorityProcessType
LocalSessionManagerProcessType
WindowsLogonProcessType
ServiceHostProcessType
RunDllAsAppProcessType
ComSurrogateProcessType
TaskHostProcessType
ExplorerProcessType
UmdfHostProcessType
MaximumProcessType
KnownProcessTypeMask
KnownProcessWow64

Definition at line 977 of file phapppub.h.

enum _PH_MEMORY_REGION_TYPE

Enumerator:

UnknownRegion
CustomRegion
UnusableRegion
MappedFileRegion
UserSharedDataRegion
PebRegion
Peb32Region
TebRegion
Teb32Region
StackRegion
Stack32Region
HeapRegion
Heap32Region
HeapSegmentRegion
HeapSegment32Region
UnknownRegion
CustomRegion
UnusableRegion
MappedFileRegion
UserSharedDataRegion
PebRegion
Peb32Region
TebRegion
Teb32Region
StackRegion
Stack32Region
HeapRegion
Heap32Region
HeapSegmentRegion
HeapSegment32Region

Definition at line 556 of file phapppub.h.

enum _PH_MINIINFO_LIST_SECTION_MESSAGE

Enumerator:

MiListSectionCreate
MiListSectionDestroy
MiListSectionTick
MiListSectionShowing
MiListSectionDialogCreated
MiListSectionSortProcessList
MiListSectionAssignSortData
MiListSectionSortGroupList
MiListSectionGetTitleText
MiListSectionGetUsageText
MiListSectionInitializeContextMenu
MiListSectionHandleContextMenu
MaxMiListSectionMessage
MiListSectionCreate
MiListSectionDestroy
MiListSectionTick
MiListSectionShowing
MiListSectionDialogCreated
MiListSectionSortProcessList
MiListSectionAssignSortData
MiListSectionSortGroupList
MiListSectionGetTitleText
MiListSectionGetUsageText
MiListSectionInitializeContextMenu
MiListSectionHandleContextMenu
MaxMiListSectionMessage

Definition at line 2401 of file phapppub.h.

enum _PH_MINIINFO_SECTION_MESSAGE

Enumerator:

MiniInfoCreate
MiniInfoDestroy
MiniInfoTick
MiniInfoSectionChanging
MiniInfoShowing
MiniInfoCreateDialog
MaxMiniInfoMessage
MiniInfoCreate
MiniInfoDestroy
MiniInfoTick
MiniInfoSectionChanging
MiniInfoShowing
MiniInfoCreateDialog
MaxMiniInfoMessage

Definition at line 2352 of file phapppub.h.

enum _PH_PHSVC_MODE

Enumerator:

ElevatedPhSvcMode
Wow64PhSvcMode
ElevatedPhSvcMode
Wow64PhSvcMode

Definition at line 1554 of file phapppub.h.

enum _PH_PLUGIN_CALLBACK

Enumerator:

PluginCallbackLoad
PluginCallbackUnload
PluginCallbackShowOptions
PluginCallbackMenuItem
PluginCallbackTreeNewMessage
PluginCallbackPhSvcRequest
PluginCallbackMenuHook
PluginCallbackMaximum
PluginCallbackLoad
PluginCallbackUnload
PluginCallbackShowOptions
PluginCallbackMenuItem
PluginCallbackTreeNewMessage
PluginCallbackPhSvcRequest
PluginCallbackMenuHook
PluginCallbackMaximum

Definition at line 2539 of file phapppub.h.

enum _PH_PLUGIN_MEMORY_ITEM_LIST_CONTROL_TYPE

Enumerator:

PluginMemoryItemListInitialized
PluginMemoryItemListMaximum
PluginMemoryItemListInitialized
PluginMemoryItemListMaximum

Definition at line 2751 of file phapppub.h.

enum _PH_PLUGIN_THREAD_STACK_CONTROL_TYPE

Enumerator:

PluginThreadStackInitializing
PluginThreadStackUninitializing
PluginThreadStackResolveSymbol
PluginThreadStackGetTooltip
PluginThreadStackWalkStack
PluginThreadStackBeginDefaultWalkStack
PluginThreadStackEndDefaultWalkStack
PluginThreadStackMaximum
PluginThreadStackInitializing
PluginThreadStackUninitializing
PluginThreadStackResolveSymbol
PluginThreadStackGetTooltip
PluginThreadStackWalkStack
PluginThreadStackBeginDefaultWalkStack
PluginThreadStackEndDefaultWalkStack
PluginThreadStackMaximum

Definition at line 2693 of file phapppub.h.

enum _PH_SERVICE_CHANGE

Enumerator:

ServiceStarted
ServiceContinued
ServicePaused
ServiceStopped
ServiceStarted
ServiceContinued
ServicePaused
ServiceStopped

Definition at line 325 of file phapppub.h.

enum _PH_SETTING_TYPE

Enumerator:

StringSettingType
IntegerSettingType
IntegerPairSettingType
StringSettingType
IntegerSettingType
IntegerPairSettingType

Definition at line 2123 of file phapppub.h.

enum _PH_SYSINFO_SECTION_MESSAGE

Enumerator:

SysInfoCreate
SysInfoDestroy
SysInfoTick
SysInfoViewChanging
SysInfoCreateDialog
SysInfoGraphGetDrawInfo
SysInfoGraphGetTooltipText
SysInfoGraphDrawPanel
MaxSysInfoMessage
SysInfoCreate
SysInfoDestroy
SysInfoTick
SysInfoViewChanging
SysInfoCreateDialog
SysInfoGraphGetDrawInfo
SysInfoGraphGetTooltipText
SysInfoGraphDrawPanel
MaxSysInfoMessage

Definition at line 2239 of file phapppub.h.

enum _PH_SYSINFO_VIEW_TYPE

Enumerator:

SysInfoSummaryView
SysInfoSectionView
SysInfoSummaryView
SysInfoSectionView

Definition at line 2206 of file phapppub.h.

Function Documentation

C_ASSERT ( RTL_FIELD_SIZE(PH_PLUGIN_MENU_INFORMATION, u) = =RTL_FIELD_SIZE(PH_PLUGIN_MENU_INFORMATION, u.DoNotUse) )

PHAPPAPI BOOLEAN NTAPI PhaChoiceDialog	(	_In_ HWND	ParentWindowHandle,
		_In_ PWSTR	Title,
		_In_ PWSTR	Message,
		_In_opt_ PWSTR *	Choices,
		_In_opt_ ULONG	NumberOfChoices,
		_In_opt_ PWSTR	Option,
		_In_ ULONG	Flags,
		_Inout_ PPH_STRING *	SelectedChoice,
		_Inout_opt_ PBOOLEAN	SelectedOption,
		_In_opt_ PWSTR	SavedChoicesSettingName
	)

Prompts the user for input.

Remarks: If PH_CHOICE_DIALOG_PASSWORD is specified, the string returned in SelectedChoice is NOT auto-dereferenced.

Definition at line 55 of file chdlg.c.

PHAPPAPI BOOLEAN NTAPI PhAddProcessPropPage	(	_Inout_ PPH_PROCESS_PROPCONTEXT	PropContext,
		_In_ _Assume_refs_(1) PPH_PROCESS_PROPPAGECONTEXT	PropPageContext
	)

Definition at line 344 of file procprp.c.

PHAPPAPI BOOLEAN NTAPI PhAddProcessPropPage2	(	_Inout_ PPH_PROCESS_PROPCONTEXT	PropContext,
		_In_ HPROPSHEETPAGE	PropSheetPageHandle
	)

Definition at line 371 of file procprp.c.

PHAPPAPI PPH_LAYOUT_ITEM NTAPI PhAddPropPageLayoutItem	(	_In_ HWND	hwnd,
		_In_ HWND	Handle,
		_In_ PPH_LAYOUT_ITEM	ParentItem,
		_In_ ULONG	Anchor
	)

Definition at line 506 of file procprp.c.

PHAPPAPI VOID NTAPI PhAddSettings	(	_In_ PPH_SETTING_CREATE	Settings,
		_In_ ULONG	NumberOfSettings
	)

Definition at line 1015 of file settings.c.

PHAPPAPI PPH_TN_FILTER_ENTRY NTAPI PhAddTreeNewFilter	(	_In_ PPH_TN_FILTER_SUPPORT	Support,
		_In_ PPH_TN_FILTER_FUNCTION	Filter,
		_In_opt_ PVOID	Context
	)

Definition at line 1762 of file appsup.c.

PHAPPAPI BOOLEAN NTAPI PhaGetProcessKnownCommandLine	(	_In_ PPH_STRING	CommandLine,
		_In_ PH_KNOWN_PROCESS_TYPE	KnownProcessType,
		_Out_ PPH_KNOWN_PROCESS_COMMAND_LINE	KnownCommandLine
	)

Definition at line 461 of file appsup.c.

PHAPPAPI VOID NTAPI PhApplyTreeNewFilters ( _In_ PPH_TN_FILTER_SUPPORT Support )

Definition at line 1830 of file appsup.c.

PHAPPAPI BOOLEAN NTAPI PhApplyTreeNewFiltersToNode	(	_In_ PPH_TN_FILTER_SUPPORT	Support,
		_In_ PPH_TREENEW_NODE	Node
	)

Definition at line 1801 of file appsup.c.

FORCEINLINE PPH_LAYOUT_ITEM PhBeginPropPageLayout	(	_In_ HWND	hwndDlg,
		_In_ PPH_PROCESS_PROPPAGECONTEXT	PropPageContext
	)

Definition at line 1499 of file phapppub.h.

PHAPPAPI BOOLEAN NTAPI PhCmLoadSettings	(	_In_ HWND	TreeNewHandle,
		_In_ PPH_STRINGREF	Settings
	)

Definition at line 298 of file colmgr.c.

PHAPPAPI PPH_STRING NTAPI PhCmSaveSettings ( _In_ HWND TreeNewHandle )

Definition at line 547 of file colmgr.c.

PHAPPAPI VOID NTAPI PhCopyListView ( _In_ HWND ListViewHandle )

Definition at line 1030 of file appsup.c.

PHAPPAPI VOID NTAPI PhCopyListViewInfoTip	(	_Inout_ LPNMLVGETINFOTIP	GetInfoTip,
		_In_ PPH_STRINGREF	Tip
	)

Copies a string into a NMLVGETINFOTIP structure.

Parameters

GetInfoTip	The NMLVGETINFOTIP structure.
Tip	The string to copy.

Remarks: The text is truncated if it is too long.

Definition at line 996 of file appsup.c.

PHAPPAPI PPH_PROCESS_PROPCONTEXT NTAPI PhCreateProcessPropContext	(	_In_ HWND	ParentWindowHandle,
		_In_ PPH_PROCESS_ITEM	ProcessItem
	)

Definition at line 60 of file procprp.c.

PHAPPAPI PPH_PROCESS_PROPPAGECONTEXT NTAPI PhCreateProcessPropPageContext	(	_In_ LPCWSTR	Template,
		_In_ DLGPROC	DlgProc,
		_In_opt_ PVOID	Context
	)

Definition at line 386 of file procprp.c.

PHAPPAPI PPH_PROCESS_PROPPAGECONTEXT NTAPI PhCreateProcessPropPageContextEx	(	_In_opt_ PVOID	InstanceHandle,
		_In_ LPCWSTR	Template,
		_In_ DLGPROC	DlgProc,
		_In_opt_ PVOID	Context
	)

Definition at line 395 of file procprp.c.

PHAPPAPI HWND NTAPI PhCreateServiceListControl	(	_In_ HWND	ParentWindowHandle,
		_In_ PPH_SERVICE_ITEM *	Services,
		_In_ ULONG	NumberOfServices
	)

Creates a service list property page.

Parameters

ParentWindowHandle	The parent of the service list.
Services	An array of service items. Each service item must have a reference that is transferred to this function. The array must be allocated using PhAllocate() and must not be freed by the caller; it will be freed automatically when no longer needed.
NumberOfServices	The number of service items in Services.

Definition at line 61 of file srvctl.c.

PHAPPAPI VOID NTAPI PhDeleteMemoryItemList ( _In_ PPH_MEMORY_ITEM_LIST List )

Definition at line 173 of file memprv.c.

PHAPPAPI VOID NTAPI PhDeleteTreeNewColumnMenu ( _In_ PPH_TN_COLUMN_MENU_DATA Data )

Definition at line 1733 of file appsup.c.

PHAPPAPI VOID NTAPI PhDeleteTreeNewFilterSupport ( _In_ PPH_TN_FILTER_SUPPORT Support )

Definition at line 1755 of file appsup.c.

PHAPPAPI VOID NTAPI PhDereferenceProcessRecord ( _In_ PPH_PROCESS_RECORD ProcessRecord )

Definition at line 2621 of file procprv.c.

PHAPPAPI VOID NTAPI PhDeselectAllProcessNodes ( VOID )

Definition at line 3038 of file proctree.c.

PHAPPAPI VOID NTAPI PhDeselectAllServiceNodes ( VOID )

Definition at line 779 of file srvlist.c.

PHAPPAPI VOID NTAPI PhDoPropPageLayout ( _In_ HWND hwnd )

Definition at line 570 of file procprp.c.

FORCEINLINE VOID PhEndPropPageLayout	(	_In_ HWND	hwndDlg,
		_In_ PPH_PROCESS_PROPPAGECONTEXT	PropPageContext
	)

Definition at line 1517 of file phapppub.h.

PHAPPAPI VOID NTAPI PhEnumProcessItems	(	_Out_opt_ PPH_PROCESS_ITEM **	ProcessItems,
		_Out_ PULONG	NumberOfProcessItems
	)

Enumerates the process items.

Parameters

ProcessItems	A variable which receives an array of pointers to process items. You must free the buffer with PhFree() when you no longer need it.
NumberOfProcessItems	A variable which receives the number of process items returned in ProcessItems.

Definition at line 584 of file procprv.c.

PHAPPAPI NTSTATUS NTAPI PhExecuteRunAsCommand2	(	_In_ HWND	hWnd,
		_In_ PWSTR	Program,
		_In_opt_ PWSTR	UserName,
		_In_opt_ PWSTR	Password,
		_In_opt_ ULONG	LogonType,
		_In_opt_ HANDLE	ProcessIdWithToken,
		_In_ ULONG	SessionId,
		_In_ PWSTR	DesktopName,
		_In_ BOOLEAN	UseLinkedToken
	)

Starts a program as another user.

Parameters

hWnd	A handle to the parent window.
Program	The command line of the program to start.
UserName	The user to start the program as. The user name should be specified as: domain\name. This parameter can be NULL if ProcessIdWithToken is specified.
Password	The password for the specified user. If there is no password, specify an empty string. This parameter can be NULL if ProcessIdWithToken is specified.
LogonType	The logon type for the specified user. This parameter can be 0 if ProcessIdWithToken is specified.
ProcessIdWithToken	The ID of a process from which to duplicate the token.
SessionId	The ID of the session to run the program under.
DesktopName	The window station and desktop to run the program under.
UseLinkedToken	Uses the linked token if possible.

Return values

STATUS_CANCELLED The user cancelled the operation.

Remarks: This function will cause another instance of Process Hacker to be executed if the current security context does not have sufficient system access. This is done through a UAC elevation prompt.

Definition at line 921 of file runas.c.

PHAPPAPI VOID NTAPI PhExpandAllProcessNodes ( _In_ BOOLEAN Expand )

Definition at line 3045 of file proctree.c.

PHAPPAPI PPH_NETWORK_NODE NTAPI PhFindNetworkNode ( _In_ PPH_NETWORK_ITEM NetworkItem )

Definition at line 234 of file netlist.c.

PHAPPAPI PPH_PLUGIN NTAPI PhFindPlugin ( _In_ PWSTR Name )

Locates a plugin instance structure.

Parameters

Name	The name of the plugin.

Returns: A plugin instance structure, or NULL if the plugin was not found.

Definition at line 526 of file plugin.c.

PHAPPAPI PPH_PROCESS_NODE NTAPI PhFindProcessNode ( _In_ HANDLE ProcessId )

Definition at line 419 of file proctree.c.

PHAPPAPI PPH_PROCESS_RECORD NTAPI PhFindProcessRecord	(	_In_opt_ HANDLE	ProcessId,
		_In_ PLARGE_INTEGER	Time
	)

Finds a process record.

Parameters

ProcessId	The ID of the process.
Time	A time in which the process was active.

Returns: The newest record older than Time, or NULL if the record could not be found. You must call PhDereferenceProcessRecord() when you no longer need the record.

Definition at line 2668 of file procprv.c.

PHAPPAPI PPH_SERVICE_NODE NTAPI PhFindServiceNode ( _In_ PPH_SERVICE_ITEM ServiceItem )

Definition at line 233 of file srvlist.c.

PHAPPAPI PPH_STRING NTAPI PhFormatLogEntry ( _In_ PPH_LOG_ENTRY Entry )

Definition at line 194 of file log.c.

PHAPPAPI PPH_STRING NTAPI PhGetClientIdName ( _In_ PCLIENT_ID ClientId )

Definition at line 319 of file procprv.c.

PHAPPAPI PPH_STRING NTAPI PhGetClientIdNameEx	(	_In_ PCLIENT_ID	ClientId,
		_In_opt_ PPH_STRING	ProcessName
	)

Definition at line 341 of file procprv.c.

PHAPPAPI struct _PH_TN_FILTER_SUPPORT* NTAPI PhGetFilterSupportNetworkTreeList ( VOID )

read

Definition at line 180 of file netlist.c.

PHAPPAPI struct _PH_TN_FILTER_SUPPORT* NTAPI PhGetFilterSupportProcessTreeList ( VOID )

read

Definition at line 259 of file proctree.c.

PHAPPAPI struct _PH_TN_FILTER_SUPPORT* NTAPI PhGetFilterSupportServiceTreeList ( VOID )

read

Definition at line 183 of file srvlist.c.

PHAPPAPI PPH_CALLBACK NTAPI PhGetGeneralCallback ( _In_ PH_GENERAL_CALLBACK Callback )

Retrieves a pointer to a general callback.

Parameters

Callback The type of callback.

Remarks: The program invokes general callbacks for system-wide notifications.

Definition at line 602 of file plugin.c.

PHAPPAPI _May_raise_ PH_INTEGER_PAIR NTAPI PhGetIntegerPairSetting ( _In_ PWSTR Name )

Definition at line 480 of file settings.c.

PHAPPAPI _May_raise_ ULONG NTAPI PhGetIntegerSetting ( _In_ PWSTR Name )

Definition at line 449 of file settings.c.

PHAPPAPI BOOLEAN NTAPI PhGetListViewContextMenuPoint	(	_In_ HWND	ListViewHandle,
		_Out_ PPOINT	Point
	)

Definition at line 1079 of file appsup.c.

PHAPPAPI PPH_STRING NTAPI PhGetPhVersion ( VOID )

Definition at line 1277 of file appsup.c.

PHAPPAPI VOID NTAPI PhGetPhVersionNumbers	(	_Out_opt_ PULONG	MajorVersion,
		_Out_opt_ PULONG	MinorVersion,
		_Reserved_ PULONG	Reserved,
		_Out_opt_ PULONG	RevisionNumber
	)

Definition at line 1290 of file appsup.c.

PHAPPAPI PPH_CALLBACK NTAPI PhGetPluginCallback	(	_In_ PPH_PLUGIN	Plugin,
		_In_ PH_PLUGIN_CALLBACK	Callback
	)

Retrieves a pointer to a plugin callback.

Parameters

Plugin	A plugin instance structure.
Callback	The type of callback.

Remarks: The program invokes plugin callbacks for notifications specific to a plugin.

Definition at line 583 of file plugin.c.

PHAPPAPI PPH_PLUGIN_INFORMATION NTAPI PhGetPluginInformation ( _In_ PPH_PLUGIN Plugin )

Gets a pointer to a plugin's additional information block.

Parameters

Plugin The plugin instance structure.

Returns: The plugin's additional information block.

Definition at line 567 of file plugin.c.

PHAPPAPI BOOLEAN NTAPI PhGetProcessIsSuspended ( _In_ PSYSTEM_PROCESS_INFORMATION Process )

Determines whether a process is suspended.

Parameters

Process The SYSTEM_PROCESS_INFORMATION structure of the process.

Definition at line 67 of file appsup.c.

PHAPPAPI NTSTATUS NTAPI PhGetProcessKnownType	(	_In_ HANDLE	ProcessHandle,
		_Out_ PH_KNOWN_PROCESS_TYPE *	KnownProcessType
	)

Determines the type of a process based on its image file name.

Parameters

ProcessHandle	A handle to a process.
KnownProcessType	A variable which receives the process type.

Definition at line 334 of file appsup.c.

PHAPPAPI PWSTR NTAPI PhGetProcessPriorityClassString ( _In_ ULONG PriorityClass )

Definition at line 395 of file procprv.c.

PHAPPAPI PWSTR NTAPI PhGetProtocolTypeName ( _In_ ULONG ProtocolType )

Definition at line 789 of file netprv.c.

PHAPPAPI PPH_PROCESS_ITEM NTAPI PhGetSelectedProcessItem ( VOID )

Definition at line 2991 of file proctree.c.

PHAPPAPI VOID NTAPI PhGetSelectedProcessItems	(	_Out_ PPH_PROCESS_ITEM **	Processes,
		_Out_ PULONG	NumberOfProcesses
	)

Definition at line 3012 of file proctree.c.

PHAPPAPI PPH_SERVICE_ITEM NTAPI PhGetSelectedServiceItem ( VOID )

Definition at line 732 of file srvlist.c.

PHAPPAPI VOID NTAPI PhGetSelectedServiceItems	(	_Out_ PPH_SERVICE_ITEM **	Services,
		_Out_ PULONG	NumberOfServices
	)

Definition at line 753 of file srvlist.c.

PHAPPAPI PH_SERVICE_CHANGE NTAPI PhGetServiceChange ( _In_ PPH_SERVICE_MODIFIED_DATA Data )

Definition at line 245 of file srvprv.c.

PHAPPAPI BOOLEAN NTAPI PhGetStatisticsTime	(	_In_opt_ PPH_PROCESS_ITEM	ProcessItem,
		_In_ ULONG	Index,
		_Out_ PLARGE_INTEGER	Time
	)

Retrieves a time value recorded by the statistics system.

Parameters

ProcessItem	A process item to synchronize with, or NULL if no synchronization is necessary.
Index	The history index.
Time	A variable which receives the time at Index.

Returns: TRUE if the function succeeded, otherwise FALSE if ProcessItem was specified and Index is too far into the past for that process item.

Definition at line 1707 of file procprv.c.

PHAPPAPI PPH_STRING NTAPI PhGetStatisticsTimeString	(	_In_opt_ PPH_PROCESS_ITEM	ProcessItem,
		_In_ ULONG	Index
	)

Definition at line 1743 of file procprv.c.

PHAPPAPI _May_raise_ PPH_STRING NTAPI PhGetStringSetting ( _In_ PWSTR Name )

Definition at line 511 of file settings.c.

PHAPPAPI PWSTR NTAPI PhGetTcpStateName ( _In_ ULONG State )

Definition at line 808 of file netprv.c.

PHAPPAPI PPH_STRING NTAPI PhGetThreadPriorityWin32String ( _In_ LONG PriorityWin32 )

Definition at line 666 of file thrdprv.c.

PHAPPAPI VOID PhHandleListViewNotifyForCopy	(	_In_ LPARAM	lParam,
		_In_ HWND	ListViewHandle
	)

Definition at line 1041 of file appsup.c.

PHAPPAPI BOOLEAN NTAPI PhHandleTreeNewColumnMenu ( _Inout_ PPH_TN_COLUMN_MENU_DATA Data )

Definition at line 1667 of file appsup.c.

PHAPPAPI VOID NTAPI PhInitializeTreeNewColumnMenu ( _Inout_ PPH_TN_COLUMN_MENU_DATA Data )

Definition at line 1521 of file appsup.c.

PHAPPAPI VOID NTAPI PhInitializeTreeNewFilterSupport	(	_Out_ PPH_TN_FILTER_SUPPORT	Support,
		_In_ HWND	TreeNewHandle,
		_In_ PPH_LIST	NodeList
	)

Definition at line 1744 of file appsup.c.

PHAPPAPI VOID NTAPI PhInvalidateAllProcessNodes ( VOID )

Definition at line 3067 of file proctree.c.

PHAPPAPI VOID NTAPI PhLoadListViewColumnsFromSetting	(	_In_ PWSTR	Name,
		_In_ HWND	ListViewHandle
	)

Definition at line 1253 of file appsup.c.

PHAPPAPI VOID NTAPI PhLoadSymbolProviderOptions ( _Inout_ PPH_SYMBOL_PROVIDER SymbolProvider )

Definition at line 962 of file appsup.c.

PHAPPAPI VOID NTAPI PhLoadWindowPlacementFromSetting	(	_In_opt_ PWSTR	PositionSettingName,
		_In_opt_ PWSTR	SizeSettingName,
		_In_ HWND	WindowHandle
	)

Definition at line 1165 of file appsup.c.

PHAPPAPI VOID NTAPI PhLogMessageEntry	(	_In_ UCHAR	Type,
		_In_ PPH_STRING	Message
	)

Definition at line 186 of file log.c.

PHAPPAPI PPH_MEMORY_ITEM NTAPI PhLookupMemoryItemList	(	_In_ PPH_MEMORY_ITEM_LIST	List,
		_In_ PVOID	Address
	)

Definition at line 191 of file memprv.c.

PHAPPAPI BOOLEAN NTAPI PhPluginAddMenuHook	(	_Inout_ PPH_PLUGIN_MENU_INFORMATION	MenuInfo,
		_In_ PPH_PLUGIN	Plugin,
		_In_opt_ PVOID	Context
	)

Adds a menu hook.

Parameters

MenuInfo	The plugin menu information structure.
Plugin	A plugin instance structure.
Context	A user-defined value that is later accessible from the callback.

Remarks: The PluginCallbackMenuHook callback is invoked when any menu item from the menu is chosen.

Definition at line 802 of file plugin.c.

PHAPPAPI ULONG_PTR NTAPI PhPluginAddMenuItem	(	_In_ PPH_PLUGIN	Plugin,
		_In_ ULONG_PTR	Location,
		_In_opt_ PWSTR	InsertAfter,
		_In_ ULONG	Id,
		_In_ PWSTR	Text,
		_In_opt_ PVOID	Context
	)

Adds a menu item to the program's main menu.

This function is deprecated. Use GeneralCallbackMainMenuInitializing instead.

Parameters

Plugin	A plugin instance structure.
Location	A handle to the parent menu, or one of the following: `PH_MENU_ITEM_LOCATION_VIEW` The "View" menu. `PH_MENU_ITEM_LOCATION_TOOLS` The "Tools" menu.
InsertAfter	The text of the menu item to insert the new menu item after. The search is a case-insensitive prefix search that ignores prefix characters (ampersands).
Id	An identifier for the menu item. This should be unique within the plugin.
Text	The text of the menu item.
Context	A user-defined value for the menu item.

Returns: TRUE if the function succeeded, otherwise FALSE.

Remarks: The PluginCallbackMenuItem callback is invoked when the menu item is chosen, and the PH_PLUGIN_MENU_ITEM structure will contain the Id and Context values passed to this function.

Definition at line 656 of file plugin.c.

PHAPPAPI BOOLEAN NTAPI PhPluginAddTreeNewColumn	(	_In_ PPH_PLUGIN	Plugin,
		_In_ PVOID	CmData,
		_In_ PPH_TREENEW_COLUMN	Column,
		_In_ ULONG	SubId,
		_In_opt_ PVOID	Context,
		_In_opt_ PPH_PLUGIN_TREENEW_SORT_FUNCTION	SortFunction
	)

Adds a column to a tree new control.

Parameters

Plugin	A plugin instance structure.
CmData	The CmData value from the PH_PLUGIN_TREENEW_INFORMATION structure.
Column	The column properties.
SubId	An identifier for the column. This should be unique within the plugin.
Context	A user-defined value.
SortFunction	The sort function for the column.

Definition at line 905 of file plugin.c.

PHAPPAPI NTSTATUS NTAPI PhPluginCallPhSvc	(	_In_ PPH_PLUGIN	Plugin,
		_In_ ULONG	SubId,
		_In_reads_bytes_opt_(InLength) PVOID	InBuffer,
		_In_ ULONG	InLength,
		_Out_writes_bytes_opt_(OutLength) PVOID	OutBuffer,
		_In_ ULONG	OutLength
	)

Definition at line 1032 of file plugin.c.

PHAPPAPI PPH_EMENU_ITEM NTAPI PhPluginCreateEMenuItem	(	_In_ PPH_PLUGIN	Plugin,
		_In_ ULONG	Flags,
		_In_ ULONG	Id,
		_In_ PWSTR	Text,
		_In_opt_ PVOID	Context
	)

Creates a menu item.

Parameters

Plugin	A plugin instance structure.
Flags	A combination of flags.
Id	An identifier for the menu item. This should be unique within the plugin.
Text	The text of the menu item.
Context	A user-defined value for the menu item.

Returns: A menu item object. This can then be inserted into another menu using PhInsertEMenuItem().

Remarks: The PluginCallbackMenuItem callback is invoked when the menu item is chosen, and the PH_PLUGIN_MENU_ITEM structure will contain the Id and Context values passed to this function.

Definition at line 767 of file plugin.c.

PHAPPAPI VOID NTAPI PhPluginEnableTreeNewNotify	(	_In_ PPH_PLUGIN	Plugin,
		_In_ PVOID	CmData
	)

Allows a plugin to receive all treenew messages, not just column-related ones.

Parameters

Plugin	A plugin instance structure.
CmData	The CmData value from the PH_PLUGIN_TREENEW_INFORMATION structure.

Definition at line 1010 of file plugin.c.

PHAPPAPI PVOID NTAPI PhPluginGetObjectExtension	(	_In_ PPH_PLUGIN	Plugin,
		_In_ PVOID	Object,
		_In_ PH_EM_OBJECT_TYPE	ObjectType
	)

Gets the object extension for an object.

Parameters

Plugin	A plugin instance structure.
Object	The object.
ObjectType	The type of object for which an extension has been registered.

Definition at line 957 of file plugin.c.

PHAPPAPI VOID NTAPI PhPluginGetSystemStatistics ( _Out_ PPH_PLUGIN_SYSTEM_STATISTICS Statistics )

Retrieves current system statistics.

Definition at line 691 of file plugin.c.

PHAPPAPI BOOLEAN NTAPI PhPluginQueryPhSvc ( _Out_ PPH_PLUGIN_PHSVC_CLIENT Client )

Definition at line 1018 of file plugin.c.

PHAPPAPI struct _PH_NF_ICON* NTAPI PhPluginRegisterIcon	(	_In_ PPH_PLUGIN	Plugin,
		_In_ ULONG	SubId,
		_In_opt_ PVOID	Context,
		_In_ PWSTR	Text,
		_In_ ULONG	Flags,
		_In_ struct _PH_NF_ICON_REGISTRATION_DATA *	RegistrationData
	)

read

Creates a notification icon.

Parameters

Plugin	A plugin instance structure.
SubId	An identifier for the column. This should be unique within the plugin.
Context	A user-defined value.
Text	A string describing the notification icon.
Flags	A combination of flags. `PH_NF_ICON_UNAVAILABLE` The notification icon is currently unavailable.
RegistrationData	A PH_NF_ICON_REGISTRATION_DATA structure that contains registration information.

Definition at line 983 of file plugin.c.

PHAPPAPI ULONG NTAPI PhPluginReserveIds ( _In_ ULONG Count )

Reserves unique GUI identifiers.

Parameters

Count The number of identifiers to reserve.

Returns: The start of the reserved range.

Remarks: The identifiers reserved by this function are guaranteed to be unique throughout the program.

Definition at line 622 of file plugin.c.

PHAPPAPI VOID NTAPI PhPluginSetObjectExtension	(	_In_ PPH_PLUGIN	Plugin,
		_In_ PH_EM_OBJECT_TYPE	ObjectType,
		_In_ ULONG	ExtensionSize,
		_In_opt_ PPH_EM_OBJECT_CALLBACK	CreateCallback,
		_In_opt_ PPH_EM_OBJECT_CALLBACK	DeleteCallback
	)

Sets the object extension size and callbacks for an object type.

Parameters

Plugin	A plugin instance structure.
ObjectType	The type of object for which the extension is being registered.
ExtensionSize	The size of the extension, in bytes.
CreateCallback	The object creation callback.
DeleteCallback	The object deletion callback.

Definition at line 933 of file plugin.c.

PHAPPAPI VOID NTAPI PhPropPageDlgProcDestroy ( _In_ HWND hwndDlg )

Definition at line 499 of file procprp.c.

PHAPPAPI BOOLEAN NTAPI PhPropPageDlgProcHeader	(	_In_ HWND	hwndDlg,
		_In_ UINT	uMsg,
		_In_ LPARAM	lParam,
		_Out_ LPPROPSHEETPAGE *	PropSheetPage,
		_Out_ PPH_PROCESS_PROPPAGECONTEXT *	PropPageContext,
		_Out_ PPH_PROCESS_ITEM *	ProcessItem
	)

Definition at line 480 of file procprp.c.

PHAPPAPI NTSTATUS NTAPI PhQueryMemoryItemList	(	_In_ HANDLE	ProcessId,
		_In_ ULONG	Flags,
		_Out_ PPH_MEMORY_ITEM_LIST	List
	)

Definition at line 637 of file memprv.c.

PHAPPAPI PPH_NETWORK_ITEM NTAPI PhReferenceNetworkItem	(	_In_ ULONG	ProtocolType,
		_In_ PPH_IP_ENDPOINT	LocalEndpoint,
		_In_ PPH_IP_ENDPOINT	RemoteEndpoint,
		_In_ HANDLE	ProcessId
	)

Definition at line 240 of file netprv.c.

PHAPPAPI PPH_PROCESS_ITEM NTAPI PhReferenceProcessItem ( _In_ HANDLE ProcessId )

Finds and references a process item.

Parameters

ProcessId The process ID of the process item.

Returns: The found process item.

Definition at line 557 of file procprv.c.

PHAPPAPI PPH_PROCESS_ITEM NTAPI PhReferenceProcessItemForParent	(	_In_ HANDLE	ParentProcessId,
		_In_ HANDLE	ProcessId,
		_In_ PLARGE_INTEGER	CreateTime
	)

Definition at line 2819 of file procprv.c.

PHAPPAPI PPH_PROCESS_ITEM NTAPI PhReferenceProcessItemForRecord ( _In_ PPH_PROCESS_RECORD Record )

Definition at line 2847 of file procprv.c.

PHAPPAPI VOID NTAPI PhReferenceProcessRecord ( _In_ PPH_PROCESS_RECORD ProcessRecord )

Definition at line 2596 of file procprv.c.

PHAPPAPI VOID NTAPI PhReferenceProcessRecordForStatistics ( _In_ PPH_PROCESS_RECORD ProcessRecord )

Definition at line 2610 of file procprv.c.

PHAPPAPI BOOLEAN NTAPI PhReferenceProcessRecordSafe ( _In_ PPH_PROCESS_RECORD ProcessRecord )

Definition at line 2603 of file procprv.c.

PHAPPAPI PPH_SERVICE_ITEM NTAPI PhReferenceServiceItem ( _In_ PWSTR Name )

Definition at line 208 of file srvprv.c.

PHAPPAPI VOID NTAPI PhRegisterDialog ( _In_ HWND DialogWindowHandle )

Definition at line 340 of file main.c.

PHAPPAPI struct _PH_MESSAGE_LOOP_FILTER_ENTRY* NTAPI PhRegisterMessageLoopFilter	(	_In_ PPH_MESSAGE_LOOP_FILTER	Filter,
		_In_opt_ PVOID	Context
	)

read

Definition at line 365 of file main.c.

PHAPPAPI PPH_PLUGIN NTAPI PhRegisterPlugin	(	_In_ PWSTR	Name,
		_In_ PVOID	DllBase,
		_Out_opt_ PPH_PLUGIN_INFORMATION *	Information
	)

Registers a plugin with the host.

Parameters

Name	A unique identifier for the plugin. The function fails if another plugin has already been registered with the same name. The name must only contain alphanumeric characters, spaces, dots and underscores.
DllBase	The base address of the plugin DLL. This is passed to the DllMain function.
Information	A variable which receives a pointer to the plugin's additional information block. This should be filled in after the function returns.

Returns: A pointer to the plugin instance structure, or NULL if the function failed.

Definition at line 469 of file plugin.c.

PHAPPAPI VOID NTAPI PhRemoveTreeNewFilter	(	_In_ PPH_TN_FILTER_SUPPORT	Support,
		_In_ PPH_TN_FILTER_ENTRY	Entry
	)

Definition at line 1782 of file appsup.c.

PHAPPAPI VOID NTAPI PhSaveListViewColumnsToSetting	(	_In_ PWSTR	Name,
		_In_ HWND	ListViewHandle
	)

Definition at line 1265 of file appsup.c.

PHAPPAPI VOID NTAPI PhSaveWindowPlacementToSetting	(	_In_opt_ PWSTR	PositionSettingName,
		_In_opt_ PWSTR	SizeSettingName,
		_In_ HWND	WindowHandle
	)

Definition at line 1227 of file appsup.c.

PHAPPAPI VOID NTAPI PhSearchOnlineString	(	_In_ HWND	hWnd,
		_In_ PWSTR	String
	)

Definition at line 884 of file appsup.c.

PHAPPAPI VOID NTAPI PhSelectAndEnsureVisibleProcessNode ( _In_ PPH_PROCESS_NODE ProcessNode )

Definition at line 3090 of file proctree.c.

PHAPPAPI VOID NTAPI PhSelectAndEnsureVisibleServiceNode ( _In_ PPH_SERVICE_NODE ServiceNode )

Definition at line 786 of file srvlist.c.

PHAPPAPI _May_raise_ VOID NTAPI PhSetIntegerPairSetting	(	_In_ PWSTR	Name,
		_In_ PH_INTEGER_PAIR	Value
	)

Definition at line 579 of file settings.c.

PHAPPAPI _May_raise_ VOID NTAPI PhSetIntegerSetting	(	_In_ PWSTR	Name,
		_In_ ULONG	Value
	)

Definition at line 554 of file settings.c.

PHAPPAPI VOID NTAPI PhSetSelectThreadIdProcessPropContext	(	_Inout_ PPH_PROCESS_PROPCONTEXT	PropContext,
		_In_ HANDLE	ThreadId
	)

Definition at line 134 of file procprp.c.

PHAPPAPI _May_raise_ VOID NTAPI PhSetStringSetting	(	_In_ PWSTR	Name,
		_In_ PWSTR	Value
	)

Definition at line 604 of file settings.c.

PHAPPAPI _May_raise_ VOID NTAPI PhSetStringSetting2	(	_In_ PWSTR	Name,
		_In_ PPH_STRINGREF	Value
	)

Definition at line 630 of file settings.c.

PHAPPAPI VOID NTAPI PhShellExecuteUserString	(	_In_ HWND	hWnd,
		_In_ PWSTR	Setting,
		_In_ PWSTR	String,
		_In_ BOOLEAN	UseShellExecute,
		_In_opt_ PWSTR	ErrorMessage
	)

Definition at line 892 of file appsup.c.

PHAPPAPI BOOLEAN NTAPI PhShellProcessHacker	(	_In_opt_ HWND	hWnd,
		_In_opt_ PWSTR	Parameters,
		_In_ ULONG	ShowWindowType,
		_In_ ULONG	Flags,
		_In_ ULONG	AppFlags,
		_In_opt_ ULONG	Timeout,
		_Out_opt_ PHANDLE	ProcessHandle
	)

Definition at line 1344 of file appsup.c.

PHAPPAPI BOOLEAN NTAPI PhShowChooseProcessDialog	(	_In_ HWND	ParentWindowHandle,
		_In_ PWSTR	Message,
		_Out_ PHANDLE	ProcessId
	)

Definition at line 43 of file chproc.c.

PHAPPAPI VOID NTAPI PhShowIconNotification	(	_In_ PWSTR	Title,
		_In_ PWSTR	Text,
		_In_ ULONG	Flags
	)

Definition at line 3964 of file mainwnd.c.

PHAPPAPI BOOLEAN NTAPI PhShowProcessAffinityDialog2	(	_In_ HWND	ParentWindowHandle,
		_In_ ULONG_PTR	AffinityMask,
		_Out_ PULONG_PTR	NewAffinityMask
	)

Definition at line 69 of file affinity.c.

PHAPPAPI BOOLEAN NTAPI PhShowProcessProperties ( _In_ PPH_PROCESS_PROPCONTEXT Context )

Definition at line 5581 of file procprp.c.

PHAPPAPI VOID NTAPI PhShowProcessRecordDialog	(	_In_ HWND	ParentWindowHandle,
		_In_ PPH_PROCESS_RECORD	Record
	)

Definition at line 38 of file procrec.c.

PHAPPAPI VOID NTAPI PhSiSetColorsGraphDrawInfo	(	_Out_ PPH_GRAPH_DRAW_INFO	DrawInfo,
		_In_ COLORREF	Color1,
		_In_ COLORREF	Color2
	)

Definition at line 851 of file sysinfo.c.

PHLIBAPI NTSTATUS PhSvcCallChangeServiceConfig	(	_In_ PWSTR	ServiceName,
		_In_ ULONG	ServiceType,
		_In_ ULONG	StartType,
		_In_ ULONG	ErrorControl,
		_In_opt_ PWSTR	BinaryPathName,
		_In_opt_ PWSTR	LoadOrderGroup,
		_Out_opt_ PULONG	TagId,
		_In_opt_ PWSTR	Dependencies,
		_In_opt_ PWSTR	ServiceStartName,
		_In_opt_ PWSTR	Password,
		_In_opt_ PWSTR	DisplayName
	)

Definition at line 527 of file clapi.c.

PHLIBAPI NTSTATUS PhSvcCallChangeServiceConfig2	(	_In_ PWSTR	ServiceName,
		_In_ ULONG	InfoLevel,
		_In_ PVOID	Info
	)

Definition at line 733 of file clapi.c.

PHLIBAPI NTSTATUS PhSvcCallPostMessage	(	_In_opt_ HWND	hWnd,
		_In_ UINT	Msg,
		_In_ WPARAM	wParam,
		_In_ LPARAM	lParam
	)

Definition at line 991 of file clapi.c.

PHLIBAPI NTSTATUS PhSvcCallSendMessage	(	_In_opt_ HWND	hWnd,
		_In_ UINT	Msg,
		_In_ WPARAM	wParam,
		_In_ LPARAM	lParam
	)

Definition at line 1012 of file clapi.c.

PHAPPAPI BOOLEAN NTAPI PhUiCloseConnections	(	_In_ HWND	hWnd,
		_In_ PPH_NETWORK_ITEM *	Connections,
		_In_ ULONG	NumberOfConnections
	)

Definition at line 2392 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiCloseHandles	(	_In_ HWND	hWnd,
		_In_ HANDLE	ProcessId,
		_In_ PPH_HANDLE_ITEM *	Handles,
		_In_ ULONG	NumberOfHandles,
		_In_ BOOLEAN	Warn
	)

Definition at line 3255 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiConnectSession	(	_In_ HWND	hWnd,
		_In_ ULONG	SessionId
	)

Definition at line 621 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiConnectToPhSvc	(	_In_opt_ HWND	hWnd,
		_In_ BOOLEAN	ConnectOnly
	)

Connects to phsvc.

Parameters

hWnd	The window to display user interface components on.
ConnectOnly	TRUE to only try to connect to phsvc, otherwise FALSE to try to elevate and start phsvc if the initial connection attempt failed.

Definition at line 289 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiConnectToPhSvcEx	(	_In_opt_ HWND	hWnd,
		_In_ PH_PHSVC_MODE	Mode,
		_In_ BOOLEAN	ConnectOnly
	)

Connects to phsvc.

Parameters

hWnd	The window to display user interface components on.
Mode	The type of phsvc instance to connect to.
ConnectOnly	TRUE to only try to connect to phsvc, otherwise FALSE to try to elevate and start phsvc if the initial connection attempt failed.

Definition at line 398 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiContinueService	(	_In_ HWND	hWnd,
		_In_ PPH_SERVICE_ITEM	Service
	)

Definition at line 2171 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiDebugProcess	(	_In_ HWND	hWnd,
		_In_ PPH_PROCESS_ITEM	Process
	)

Definition at line 1417 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiDeleteService	(	_In_ HWND	hWnd,
		_In_ PPH_SERVICE_ITEM	Service
	)

Definition at line 2330 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiDetachFromDebuggerProcess	(	_In_ HWND	hWnd,
		_In_ PPH_PROCESS_ITEM	Process
	)

Definition at line 1622 of file actions.c.

PHAPPAPI VOID NTAPI PhUiDisconnectFromPhSvc ( VOID )

Disconnects from phsvc.

Definition at line 493 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiDisconnectSession	(	_In_ HWND	hWnd,
		_In_ ULONG	SessionId
	)

Definition at line 676 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiForceTerminateThreads	(	_In_ HWND	hWnd,
		_In_ HANDLE	ProcessId,
		_In_ PPH_THREAD_ITEM *	Threads,
		_In_ ULONG	NumberOfThreads
	)

Definition at line 2616 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiFreeMemory	(	_In_ HWND	hWnd,
		_In_ HANDLE	ProcessId,
		_In_ PPH_MEMORY_ITEM	MemoryItem,
		_In_ BOOLEAN	Free
	)

Definition at line 3105 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiHibernateComputer ( _In_ HWND hWnd )

Definition at line 550 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiInjectDllProcess	(	_In_ HWND	hWnd,
		_In_ PPH_PROCESS_ITEM	Process
	)

Definition at line 1677 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiLockComputer ( _In_ HWND hWnd )

Definition at line 507 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiLogoffComputer ( _In_ HWND hWnd )

Definition at line 519 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiLogoffSession	(	_In_ HWND	hWnd,
		_In_ ULONG	SessionId
	)

Definition at line 689 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiPauseService	(	_In_ HWND	hWnd,
		_In_ PPH_SERVICE_ITEM	Service
	)

Definition at line 2224 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiReduceWorkingSetProcesses	(	_In_ HWND	hWnd,
		_In_ PPH_PROCESS_ITEM *	Processes,
		_In_ ULONG	NumberOfProcesses
	)

Definition at line 1515 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiRestartComputer	(	_In_ HWND	hWnd,
		_In_ ULONG	Flags
	)

Definition at line 569 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiRestartProcess	(	_In_ HWND	hWnd,
		_In_ PPH_PROCESS_ITEM	Process
	)

Definition at line 1302 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiResumeProcesses	(	_In_ HWND	hWnd,
		_In_ PPH_PROCESS_ITEM *	Processes,
		_In_ ULONG	NumberOfProcesses
	)

Definition at line 1229 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiResumeThreads	(	_In_ HWND	hWnd,
		_In_ PPH_THREAD_ITEM *	Threads,
		_In_ ULONG	NumberOfThreads
	)

Definition at line 2747 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiSetAttributesHandle	(	_In_ HWND	hWnd,
		_In_ HANDLE	ProcessId,
		_In_ PPH_HANDLE_ITEM	Handle,
		_In_ ULONG	Attributes
	)

Definition at line 3335 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiSetDepStatusProcess	(	_In_ HWND	hWnd,
		_In_ PPH_PROCESS_ITEM	Process
	)

Definition at line 1902 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiSetIoPriorityProcesses	(	_In_ HWND	hWnd,
		_In_ PPH_PROCESS_ITEM *	Processes,
		_In_ ULONG	NumberOfProcesses,
		_In_ ULONG	IoPriority
	)

Definition at line 1733 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiSetIoPriorityThread	(	_In_ HWND	hWnd,
		_In_ PPH_THREAD_ITEM	Thread,
		_In_ ULONG	IoPriority
	)

Definition at line 2841 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiSetPagePriorityProcess	(	_In_ HWND	hWnd,
		_In_ PPH_PROCESS_ITEM	Process,
		_In_ ULONG	PagePriority
	)

Definition at line 1799 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiSetPagePriorityThread	(	_In_ HWND	hWnd,
		_In_ PPH_THREAD_ITEM	Thread,
		_In_ ULONG	PagePriority
	)

Definition at line 2895 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiSetPriorityProcesses	(	_In_ HWND	hWnd,
		_In_ PPH_PROCESS_ITEM *	Processes,
		_In_ ULONG	NumberOfProcesses,
		_In_ ULONG	PriorityClass
	)

Definition at line 1833 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiSetPriorityThread	(	_In_ HWND	hWnd,
		_In_ PPH_THREAD_ITEM	Thread,
		_In_ ULONG	ThreadPriorityWin32
	)

Definition at line 2810 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiSetVirtualizationProcess	(	_In_ HWND	hWnd,
		_In_ PPH_PROCESS_ITEM	Process,
		_In_ BOOLEAN	Enable
	)

Definition at line 1563 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiShutdownComputer	(	_In_ HWND	hWnd,
		_In_ ULONG	Flags
	)

Definition at line 591 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiSleepComputer ( _In_ HWND hWnd )

Definition at line 531 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiStartService	(	_In_ HWND	hWnd,
		_In_ PPH_SERVICE_ITEM	Service
	)

Definition at line 2120 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiStopService	(	_In_ HWND	hWnd,
		_In_ PPH_SERVICE_ITEM	Service
	)

Definition at line 2277 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiSuspendProcesses	(	_In_ HWND	hWnd,
		_In_ PPH_PROCESS_ITEM *	Processes,
		_In_ ULONG	NumberOfProcesses
	)

Definition at line 1156 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiSuspendThreads	(	_In_ HWND	hWnd,
		_In_ PPH_THREAD_ITEM *	Threads,
		_In_ ULONG	NumberOfThreads
	)

Definition at line 2684 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiTerminateProcesses	(	_In_ HWND	hWnd,
		_In_ PPH_PROCESS_ITEM *	Processes,
		_In_ ULONG	NumberOfProcesses
	)

Definition at line 971 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiTerminateThreads	(	_In_ HWND	hWnd,
		_In_ PPH_THREAD_ITEM *	Threads,
		_In_ ULONG	NumberOfThreads
	)

Definition at line 2543 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiTerminateTreeProcess	(	_In_ HWND	hWnd,
		_In_ PPH_PROCESS_ITEM	Process
	)

Definition at line 1116 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiUnloadModule	(	_In_ HWND	hWnd,
		_In_ HANDLE	ProcessId,
		_In_ PPH_MODULE_ITEM	Module
	)

Definition at line 2929 of file actions.c.

PHAPPAPI VOID NTAPI PhUnregisterDialog ( _In_ HWND DialogWindowHandle )

Definition at line 350 of file main.c.

PHAPPAPI VOID NTAPI PhUnregisterMessageLoopFilter ( _In_ struct _PH_MESSAGE_LOOP_FILTER_ENTRY * FilterEntry )

Definition at line 383 of file main.c.

PHAPPAPI VOID NTAPI PhUpdateProcessNode ( _In_ PPH_PROCESS_NODE ProcessNode )

Definition at line 558 of file proctree.c.

PHAPPAPI VOID NTAPI PhUpdateServiceNode ( _In_ PPH_SERVICE_NODE ServiceNode )

Definition at line 304 of file srvlist.c.

PHAPPAPI VOID NTAPI PhWritePhTextHeader ( _Inout_ PPH_FILE_STREAM FileStream )

Definition at line 1305 of file appsup.c.

Variable Documentation

PHAPPAPI HFONT PhApplicationFont

Definition at line 66 of file main.c.

PHAPPAPI PH_CALLBACK PhLoggedCallback

PHAPPAPI HWND PhMainWndHandle

Definition at line 53 of file mainwnd.c.

PHAPPAPI PH_CALLBACK PhNetworkItemAddedEvent

PHAPPAPI PH_CALLBACK PhNetworkItemModifiedEvent

PHAPPAPI PH_CALLBACK PhNetworkItemRemovedEvent

PHAPPAPI PH_CALLBACK PhNetworkItemsUpdatedEvent

PHAPPAPI PH_CALLBACK PhProcessAddedEvent

PHAPPAPI PH_CALLBACK PhProcessesUpdatedEvent

PHAPPAPI PH_CALLBACK PhProcessModifiedEvent

PHAPPAPI PH_CALLBACK PhProcessRemovedEvent

PHAPPAPI PH_CALLBACK PhServiceAddedEvent

PHAPPAPI PH_CALLBACK PhServiceModifiedEvent

PHAPPAPI PH_CALLBACK PhServiceRemovedEvent

PHAPPAPI PH_CALLBACK PhServicesUpdatedEvent

Variables
PHAPPAPI PH_CALLBACK	PhProcessAddedEvent

PHAPPAPI PH_CALLBACK	PhProcessModifiedEvent

PHAPPAPI PH_CALLBACK	PhProcessRemovedEvent

PHAPPAPI PH_CALLBACK	PhProcessesUpdatedEvent

PHAPPAPI PH_CALLBACK	PhServiceAddedEvent

PHAPPAPI PH_CALLBACK	PhServiceModifiedEvent

PHAPPAPI PH_CALLBACK	PhServiceRemovedEvent

PHAPPAPI PH_CALLBACK	PhServicesUpdatedEvent

PHAPPAPI PH_CALLBACK	PhNetworkItemAddedEvent

PHAPPAPI PH_CALLBACK	PhNetworkItemModifiedEvent

PHAPPAPI PH_CALLBACK	PhNetworkItemRemovedEvent

PHAPPAPI PH_CALLBACK	PhNetworkItemsUpdatedEvent

PHAPPAPI HFONT	PhApplicationFont

PHAPPAPI HWND	PhMainWndHandle

PHAPPAPI PH_CALLBACK	PhLoggedCallback

Data Structures

Macros

Typedefs

Enumerations

Functions

Variables

Macro Definition Documentation

Typedef Documentation

Enumeration Type Documentation

Function Documentation

Variable Documentation