Process Hacker
phapppub.h File Reference

Go to the source code of this file.

Data Structures

struct  _PH_PROCESS_ITEM
 
struct  _PH_PROCESS_RECORD
 
struct  _PH_SERVICE_ITEM
 
struct  _PH_SERVICE_MODIFIED_DATA
 
struct  _PH_NETWORK_ITEM
 
struct  _PH_MODULE_ITEM
 
struct  _PH_MODULE_PROVIDER
 
struct  _PH_THREAD_ITEM
 
struct  _PH_THREAD_PROVIDER
 
struct  _PH_HANDLE_ITEM
 
struct  _PH_HANDLE_PROVIDER
 
struct  _PH_MEMORY_ITEM
 
struct  _PH_MEMORY_ITEM_LIST
 
struct  _PH_SH_STATE
 
struct  _PH_PROCESS_NODE
 
struct  _PH_SERVICE_NODE
 
struct  _PH_NETWORK_NODE
 
struct  _PH_THREAD_NODE
 
struct  _PH_MODULE_NODE
 
struct  _PH_HANDLE_NODE
 
struct  _PH_MEMORY_NODE
 
struct  _PH_MESSAGE_LOOP_FILTER_ENTRY
 
union  _PH_KNOWN_PROCESS_COMMAND_LINE
 
struct  _PH_TN_COLUMN_MENU_DATA
 
struct  _PH_TN_FILTER_SUPPORT
 
struct  _PH_TN_FILTER_ENTRY
 
struct  _PH_LAYOUT_PADDING_DATA
 
struct  _PH_ADDMENUITEM
 
struct  _PH_ADDITIONAL_TAB_PAGE
 
struct  _PH_PROCESS_PROPPAGECONTEXT
 
struct  _PH_NF_POINTERS
 
struct  _PH_NF_MSG_SHOWMINIINFOSECTION_DATA
 
struct  _PH_NF_ICON
 
struct  _PH_NF_ICON_REGISTRATION_DATA
 
struct  _PH_SETTING_CREATE
 
struct  _PH_SYSINFO_PARAMETERS
 
struct  _PH_SYSINFO_CREATE_DIALOG
 
struct  _PH_SYSINFO_GRAPH_GET_TOOLTIP_TEXT
 
struct  _PH_SYSINFO_DRAW_PANEL
 
struct  _PH_SYSINFO_SECTION
 
struct  _PH_PROCESS_GROUP
 
struct  _PH_MINIINFO_PARAMETERS
 
struct  _PH_MINIINFO_CREATE_DIALOG
 
struct  _PH_MINIINFO_SECTION
 
struct  _PH_MINIINFO_LIST_SECTION_SORT_DATA
 
struct  _PH_MINIINFO_LIST_SECTION_ASSIGN_SORT_DATA
 
struct  _PH_MINIINFO_LIST_SECTION_SORT_LIST
 
struct  _PH_MINIINFO_LIST_SECTION_GET_TITLE_TEXT
 
struct  _PH_MINIINFO_LIST_SECTION_GET_USAGE_TEXT
 
struct  _PH_MINIINFO_LIST_SECTION_MENU_INFORMATION
 
struct  _PH_MINIINFO_LIST_SECTION
 
struct  _PH_PLUGIN_GET_HIGHLIGHTING_COLOR
 
struct  _PH_PLUGIN_GET_TOOLTIP_TEXT
 
struct  _PH_PLUGIN_PROCESS_PROPCONTEXT
 
struct  _PH_PLUGIN_NOTIFY_EVENT
 
struct  _PH_PLUGIN_OBJECT_PROPERTIES
 
struct  _PH_PLUGIN_HANDLE_PROPERTIES_CONTEXT
 
struct  _PH_PLUGIN_MENU_INFORMATION
 
struct  _PH_PLUGIN_MENU_HOOK_INFORMATION
 
struct  _PH_PLUGIN_TREENEW_INFORMATION
 
struct  _PH_PLUGIN_THREAD_STACK_CONTROL
 
struct  _PH_PLUGIN_MEMORY_ITEM_LIST_CONTROL
 
struct  _PH_PLUGIN_SYSINFO_POINTERS
 
struct  _PH_PLUGIN_MINIINFO_POINTERS
 
struct  _PH_PLUGIN_TREENEW_MESSAGE
 
struct  _PH_PLUGIN_PHSVC_REQUEST
 
struct  _PH_PLUGIN_PHSVC_CLIENT
 
struct  _PH_PLUGIN_INFORMATION
 
struct  _PH_PLUGIN
 
struct  _PH_PLUGIN_MENU_ITEM
 
struct  _PH_PLUGIN_SYSTEM_STATISTICS
 
struct  _PH_THREADS_CONTEXT
 
struct  _PH_MODULES_CONTEXT
 
struct  _PH_HANDLES_CONTEXT
 
struct  _PH_MEMORY_CONTEXT
 

Macros

#define DPCS_PROCESS_ID   ((HANDLE)(LONG_PTR)-2)
 
#define INTERRUPTS_PROCESS_ID   ((HANDLE)(LONG_PTR)-3)
 
#define PH_IS_REAL_PROCESS_ID(ProcessId)   ((LONG_PTR)(ProcessId) > 0)
 
#define PH_IS_FAKE_PROCESS_ID(ProcessId)   ((LONG_PTR)(ProcessId) < 0)
 
#define PH_PROCESS_ITEM_REMOVED   0x1
 
#define PH_PROCESS_RECORD_DEAD   0x1
 
#define PH_PROCESS_RECORD_STAT_REF   0x2
 
#define PH_NETWORK_OWNER_INFO_SIZE   16
 
#define PH_HANDLE_FILE_SHARED_READ   0x1
 
#define PH_HANDLE_FILE_SHARED_WRITE   0x2
 
#define PH_HANDLE_FILE_SHARED_DELETE   0x4
 
#define PH_HANDLE_FILE_SHARED_MASK   0x7
 
#define PH_QUERY_MEMORY_IGNORE_FREE   0x1
 
#define PH_QUERY_MEMORY_REGION_TYPE   0x2
 
#define PH_QUERY_MEMORY_WS_COUNTERS   0x4
 
#define PH_SHELL_APP_PROPAGATE_PARAMETERS   0x1
 
#define PH_SHELL_APP_PROPAGATE_PARAMETERS_IGNORE_VISIBILITY   0x2
 
#define PH_SHELL_APP_PROPAGATE_PARAMETERS_FORCE_SETTINGS   0x4
 
#define PH_TN_COLUMN_MENU_HIDE_COLUMN_ID   ((ULONG)-1)
 
#define PH_TN_COLUMN_MENU_CHOOSE_COLUMNS_ID   ((ULONG)-2)
 
#define PH_TN_COLUMN_MENU_SIZE_COLUMN_TO_FIT_ID   ((ULONG)-3)
 
#define PH_TN_COLUMN_MENU_SIZE_ALL_COLUMNS_TO_FIT_ID   ((ULONG)-4)
 
#define PH_TN_COLUMN_MENU_RESET_SORT_ID   ((ULONG)-5)
 
#define PH_MAINWND_CLASSNAME   L"ProcessHacker"
 
#define WM_PH_SHOW_PROCESS_PROPERTIES   (WM_APP + 120)
 
#define WM_PH_DESTROY   (WM_APP + 121)
 
#define WM_PH_SAVE_ALL_SETTINGS   (WM_APP + 122)
 
#define WM_PH_PREPARE_FOR_EARLY_SHUTDOWN   (WM_APP + 123)
 
#define WM_PH_CANCEL_EARLY_SHUTDOWN   (WM_APP + 124)
 
#define WM_PH_TOGGLE_VISIBLE   (WM_APP + 127)
 
#define WM_PH_SHOW_MEMORY_EDITOR   (WM_APP + 128)
 
#define WM_PH_SHOW_MEMORY_RESULTS   (WM_APP + 129)
 
#define WM_PH_SELECT_TAB_PAGE   (WM_APP + 130)
 
#define WM_PH_GET_CALLBACK_LAYOUT_PADDING   (WM_APP + 131)
 
#define WM_PH_INVALIDATE_LAYOUT_PADDING   (WM_APP + 132)
 
#define WM_PH_SELECT_PROCESS_NODE   (WM_APP + 133)
 
#define WM_PH_SELECT_SERVICE_ITEM   (WM_APP + 134)
 
#define WM_PH_SELECT_NETWORK_ITEM   (WM_APP + 135)
 
#define WM_PH_INVOKE   (WM_APP + 138)
 
#define WM_PH_ADD_MENU_ITEM   (WM_APP + 139)
 
#define WM_PH_ADD_TAB_PAGE   (WM_APP + 140)
 
#define WM_PH_REFRESH   (WM_APP + 141)
 
#define WM_PH_GET_UPDATE_AUTOMATICALLY   (WM_APP + 142)
 
#define WM_PH_SET_UPDATE_AUTOMATICALLY   (WM_APP + 143)
 
#define ProcessHacker_ShowProcessProperties(hWnd, ProcessItem)   SendMessage(hWnd, WM_PH_SHOW_PROCESS_PROPERTIES, 0, (LPARAM)(ProcessItem))
 
#define ProcessHacker_Destroy(hWnd)   SendMessage(hWnd, WM_PH_DESTROY, 0, 0)
 
#define ProcessHacker_SaveAllSettings(hWnd)   SendMessage(hWnd, WM_PH_SAVE_ALL_SETTINGS, 0, 0)
 
#define ProcessHacker_PrepareForEarlyShutdown(hWnd)   SendMessage(hWnd, WM_PH_PREPARE_FOR_EARLY_SHUTDOWN, 0, 0)
 
#define ProcessHacker_CancelEarlyShutdown(hWnd)   SendMessage(hWnd, WM_PH_CANCEL_EARLY_SHUTDOWN, 0, 0)
 
#define ProcessHacker_ToggleVisible(hWnd, AlwaysShow)   SendMessage(hWnd, WM_PH_TOGGLE_VISIBLE, (WPARAM)(AlwaysShow), 0)
 
#define ProcessHacker_ShowMemoryEditor(hWnd, ShowMemoryEditor)   PostMessage(hWnd, WM_PH_SHOW_MEMORY_EDITOR, 0, (LPARAM)(ShowMemoryEditor))
 
#define ProcessHacker_ShowMemoryResults(hWnd, ShowMemoryResults)   PostMessage(hWnd, WM_PH_SHOW_MEMORY_RESULTS, 0, (LPARAM)(ShowMemoryResults))
 
#define ProcessHacker_SelectTabPage(hWnd, Index)   SendMessage(hWnd, WM_PH_SELECT_TAB_PAGE, (WPARAM)(Index), 0)
 
#define ProcessHacker_GetCallbackLayoutPadding(hWnd)   ((PPH_CALLBACK)SendMessage(hWnd, WM_PH_GET_CALLBACK_LAYOUT_PADDING, 0, 0))
 
#define ProcessHacker_InvalidateLayoutPadding(hWnd)   SendMessage(hWnd, WM_PH_INVALIDATE_LAYOUT_PADDING, 0, 0)
 
#define ProcessHacker_SelectProcessNode(hWnd, ProcessNode)   SendMessage(hWnd, WM_PH_SELECT_PROCESS_NODE, 0, (LPARAM)(ProcessNode))
 
#define ProcessHacker_SelectServiceItem(hWnd, ServiceItem)   SendMessage(hWnd, WM_PH_SELECT_SERVICE_ITEM, 0, (LPARAM)(ServiceItem))
 
#define ProcessHacker_SelectNetworkItem(hWnd, NetworkItem)   SendMessage(hWnd, WM_PH_SELECT_NETWORK_ITEM, 0, (LPARAM)(NetworkItem))
 
#define ProcessHacker_Invoke(hWnd, Function, Parameter)   PostMessage(hWnd, WM_PH_INVOKE, (WPARAM)(Parameter), (LPARAM)(Function))
 
#define ProcessHacker_AddMenuItem(hWnd, AddMenuItem)   ((ULONG_PTR)SendMessage(hWnd, WM_PH_ADD_MENU_ITEM, 0, (LPARAM)(AddMenuItem)))
 
#define ProcessHacker_AddTabPage(hWnd, TabPage)   ((PPH_ADDITIONAL_TAB_PAGE)SendMessage(hWnd, WM_PH_ADD_TAB_PAGE, 0, (LPARAM)(TabPage)))
 
#define ProcessHacker_Refresh(hWnd)   SendMessage(hWnd, WM_PH_REFRESH, 0, 0)
 
#define ProcessHacker_GetUpdateAutomatically(hWnd)   ((BOOLEAN)SendMessage(hWnd, WM_PH_GET_UPDATE_AUTOMATICALLY, 0, 0))
 
#define ProcessHacker_SetUpdateAutomatically(hWnd, Value)   SendMessage(hWnd, WM_PH_SET_UPDATE_AUTOMATICALLY, (WPARAM)(Value), 0)
 
#define PH_NOTIFY_MINIMUM   0x1
 
#define PH_NOTIFY_PROCESS_CREATE   0x1
 
#define PH_NOTIFY_PROCESS_DELETE   0x2
 
#define PH_NOTIFY_SERVICE_CREATE   0x4
 
#define PH_NOTIFY_SERVICE_DELETE   0x8
 
#define PH_NOTIFY_SERVICE_START   0x10
 
#define PH_NOTIFY_SERVICE_STOP   0x20
 
#define PH_NOTIFY_MAXIMUM   0x40
 
#define PH_NOTIFY_VALID_MASK   0x3f
 
#define PH_PROP_PAGE_TAB_CONTROL_PARENT   ((PPH_LAYOUT_ITEM)0x1)
 
#define PH_LOG_ENTRY_MESSAGE   9
 
#define PH_CHOICE_DIALOG_SAVED_CHOICES   10
 
#define PH_CHOICE_DIALOG_CHOICE   0x0
 
#define PH_CHOICE_DIALOG_USER_CHOICE   0x1
 
#define PH_CHOICE_DIALOG_PASSWORD   0x2
 
#define PH_CHOICE_DIALOG_TYPE_MASK   0x3
 
#define WM_PH_SET_LIST_VIEW_SETTINGS   (WM_APP + 701)
 
#define PH_NF_UPDATE_IS_BITMAP   0x1
 
#define PH_NF_UPDATE_DESTROY_RESOURCE   0x2
 
#define PH_NF_MSG_SHOWMINIINFOSECTION   (WM_APP + 1)
 
#define PH_NF_ICON_UNAVAILABLE   0x1
 
#define PH_NF_ICON_SHOW_MINIINFO   0x2
 
#define PhaGetStringSetting(Name)   ((PPH_STRING)PhAutoDereferenceObject(PhGetStringSetting(Name)))
 
#define PH_MINIINFO_SECTION_NO_UPPER_MARGINS   0x1
 
#define PH_PLUGIN_MENU_DISALLOW_HOOKS   0x1
 
#define PH_PLUGIN_FLAG_RESERVED   0x1
 
#define PH_MENU_ITEM_LOCATION_VIEW   1
 
#define PH_MENU_ITEM_LOCATION_TOOLS   2
 
#define PH_MENU_ITEM_SUB_MENU   0x80000000
 
#define PH_MENU_ITEM_RETURN_MENU   0x40000000
 
#define PH_MENU_ITEM_VALID_FLAGS   0xc0000000
 

Typedefs

typedef enum _VERIFY_RESULT VERIFY_RESULT
 
typedef struct _PH_PROCESS_RECORDPPH_PROCESS_RECORD
 
typedef struct _PH_PROCESS_ITEM PH_PROCESS_ITEM
 
typedef struct _PH_PROCESS_ITEMPPH_PROCESS_ITEM
 
typedef struct _PH_PROCESS_RECORD PH_PROCESS_RECORD
 
typedef struct _PH_SERVICE_ITEM PH_SERVICE_ITEM
 
typedef struct _PH_SERVICE_ITEMPPH_SERVICE_ITEM
 
typedef struct
_PH_SERVICE_MODIFIED_DATA 
PH_SERVICE_MODIFIED_DATA
 
typedef struct
_PH_SERVICE_MODIFIED_DATA
PPH_SERVICE_MODIFIED_DATA
 
typedef enum _PH_SERVICE_CHANGE PH_SERVICE_CHANGE
 
typedef enum _PH_SERVICE_CHANGEPPH_SERVICE_CHANGE
 
typedef struct _PH_NETWORK_ITEM PH_NETWORK_ITEM
 
typedef struct _PH_NETWORK_ITEMPPH_NETWORK_ITEM
 
typedef struct _PH_MODULE_ITEM PH_MODULE_ITEM
 
typedef struct _PH_MODULE_ITEMPPH_MODULE_ITEM
 
typedef struct _PH_MODULE_PROVIDER PH_MODULE_PROVIDER
 
typedef struct
_PH_MODULE_PROVIDER
PPH_MODULE_PROVIDER
 
typedef struct _PH_THREAD_ITEM PH_THREAD_ITEM
 
typedef struct _PH_THREAD_ITEMPPH_THREAD_ITEM
 
typedef enum _PH_KNOWN_PROCESS_TYPE PH_KNOWN_PROCESS_TYPE
 
typedef struct _PH_THREAD_PROVIDER PH_THREAD_PROVIDER
 
typedef struct
_PH_THREAD_PROVIDER
PPH_THREAD_PROVIDER
 
typedef struct _PH_HANDLE_ITEM PH_HANDLE_ITEM
 
typedef struct _PH_HANDLE_ITEMPPH_HANDLE_ITEM
 
typedef struct _PH_HANDLE_PROVIDER PH_HANDLE_PROVIDER
 
typedef struct
_PH_HANDLE_PROVIDER
PPH_HANDLE_PROVIDER
 
typedef enum _PH_MEMORY_REGION_TYPE PH_MEMORY_REGION_TYPE
 
typedef struct _PH_MEMORY_ITEM PH_MEMORY_ITEM
 
typedef struct _PH_MEMORY_ITEMPPH_MEMORY_ITEM
 
typedef struct _PH_MEMORY_ITEM_LIST PH_MEMORY_ITEM_LIST
 
typedef struct
_PH_MEMORY_ITEM_LIST
PPH_MEMORY_ITEM_LIST
 
typedef LONG(NTAPI * PPH_CM_POST_SORT_FUNCTION )(_In_ LONG Result, _In_ PVOID Node1, _In_ PVOID Node2, _In_ PH_SORT_ORDER SortOrder)
 
typedef struct _PH_SH_STATE PH_SH_STATE
 
typedef struct _PH_SH_STATEPPH_SH_STATE
 
typedef struct _PH_PROCESS_NODE PH_PROCESS_NODE
 
typedef struct _PH_PROCESS_NODEPPH_PROCESS_NODE
 
typedef struct _PH_SERVICE_NODE PH_SERVICE_NODE
 
typedef struct _PH_SERVICE_NODEPPH_SERVICE_NODE
 
typedef struct _PH_NETWORK_NODE PH_NETWORK_NODE
 
typedef struct _PH_NETWORK_NODEPPH_NETWORK_NODE
 
typedef struct _PH_THREAD_NODE PH_THREAD_NODE
 
typedef struct _PH_THREAD_NODEPPH_THREAD_NODE
 
typedef struct _PH_MODULE_NODE PH_MODULE_NODE
 
typedef struct _PH_MODULE_NODEPPH_MODULE_NODE
 
typedef struct _PH_HANDLE_NODE PH_HANDLE_NODE
 
typedef struct _PH_HANDLE_NODEPPH_HANDLE_NODE
 
typedef struct _PH_MEMORY_NODE PH_MEMORY_NODE
 
typedef struct _PH_MEMORY_NODEPPH_MEMORY_NODE
 
typedef struct
_PH_SYMBOL_PROVIDER
PPH_SYMBOL_PROVIDER
 
typedef BOOLEAN(NTAPI * PPH_MESSAGE_LOOP_FILTER )(_In_ PMSG Message, _In_ PVOID Context)
 
typedef struct
_PH_MESSAGE_LOOP_FILTER_ENTRY 
PH_MESSAGE_LOOP_FILTER_ENTRY
 
typedef struct
_PH_MESSAGE_LOOP_FILTER_ENTRY
PPH_MESSAGE_LOOP_FILTER_ENTRY
 
typedef union
_PH_KNOWN_PROCESS_COMMAND_LINE 
PH_KNOWN_PROCESS_COMMAND_LINE
 
typedef union
_PH_KNOWN_PROCESS_COMMAND_LINE
PPH_KNOWN_PROCESS_COMMAND_LINE
 
typedef struct
_PH_TN_COLUMN_MENU_DATA 
PH_TN_COLUMN_MENU_DATA
 
typedef struct
_PH_TN_COLUMN_MENU_DATA
PPH_TN_COLUMN_MENU_DATA
 
typedef struct
_PH_TN_FILTER_SUPPORT 
PH_TN_FILTER_SUPPORT
 
typedef struct
_PH_TN_FILTER_SUPPORT
PPH_TN_FILTER_SUPPORT
 
typedef BOOLEAN(NTAPI * PPH_TN_FILTER_FUNCTION )(_In_ PPH_TREENEW_NODE Node, _In_opt_ PVOID Context)
 
typedef struct _PH_TN_FILTER_ENTRY PH_TN_FILTER_ENTRY
 
typedef struct
_PH_TN_FILTER_ENTRY
PPH_TN_FILTER_ENTRY
 
typedef struct
_PH_LAYOUT_PADDING_DATA 
PH_LAYOUT_PADDING_DATA
 
typedef struct
_PH_LAYOUT_PADDING_DATA
PPH_LAYOUT_PADDING_DATA
 
typedef struct _PH_ADDMENUITEM PH_ADDMENUITEM
 
typedef struct _PH_ADDMENUITEMPPH_ADDMENUITEM
 
typedef HWND(NTAPI * PPH_TAB_PAGE_CREATE_FUNCTION )(_In_ PVOID Context)
 
typedef VOID(NTAPI * PPH_TAB_PAGE_CALLBACK_FUNCTION )(_In_ PVOID Parameter1, _In_ PVOID Parameter2, _In_ PVOID Parameter3, _In_ PVOID Context)
 
typedef struct
_PH_ADDITIONAL_TAB_PAGE 
PH_ADDITIONAL_TAB_PAGE
 
typedef struct
_PH_ADDITIONAL_TAB_PAGE
PPH_ADDITIONAL_TAB_PAGE
 
typedef struct
_PH_PROCESS_PROPCONTEXT
PPH_PROCESS_PROPCONTEXT
 
typedef struct
_PH_PROCESS_PROPPAGECONTEXT 
PH_PROCESS_PROPPAGECONTEXT
 
typedef struct
_PH_PROCESS_PROPPAGECONTEXT
PPH_PROCESS_PROPPAGECONTEXT
 
typedef struct _PH_LOG_ENTRYPPH_LOG_ENTRY
 
typedef enum _PH_PHSVC_MODE PH_PHSVC_MODE
 
typedef enum _PH_EM_OBJECT_TYPE PH_EM_OBJECT_TYPE
 
typedef enum
_PH_EM_OBJECT_OPERATION 
PH_EM_OBJECT_OPERATION
 
typedef VOID(NTAPI * PPH_EM_OBJECT_CALLBACK )(_In_ PVOID Object, _In_ PH_EM_OBJECT_TYPE ObjectType, _In_ PVOID Extension)
 
typedef VOID(NTAPI * PPH_NF_UPDATE_REGISTERED_ICON )(_In_ struct _PH_NF_ICON *Icon)
 
typedef VOID(NTAPI * PPH_NF_BEGIN_BITMAP )(_Out_ PULONG Width, _Out_ PULONG Height, _Out_ HBITMAP *Bitmap, _Out_opt_ PVOID *Bits, _Out_ HDC *Hdc, _Out_ HBITMAP *OldBitmap)
 
typedef struct _PH_NF_POINTERS PH_NF_POINTERS
 
typedef struct _PH_NF_POINTERSPPH_NF_POINTERS
 
typedef VOID(NTAPI * PPH_NF_ICON_UPDATE_CALLBACK )(_In_ struct _PH_NF_ICON *Icon, _Out_ PVOID *NewIconOrBitmap, _Out_ PULONG Flags, _Out_ PPH_STRING *NewText, _In_opt_ PVOID Context)
 
typedef BOOLEAN(NTAPI * PPH_NF_ICON_MESSAGE_CALLBACK )(_In_ struct _PH_NF_ICON *Icon, _In_ ULONG_PTR WParam, _In_ ULONG_PTR LParam, _In_opt_ PVOID Context)
 
typedef struct
_PH_NF_MSG_SHOWMINIINFOSECTION_DATA 
PH_NF_MSG_SHOWMINIINFOSECTION_DATA
 
typedef struct
_PH_NF_MSG_SHOWMINIINFOSECTION_DATA
PPH_NF_MSG_SHOWMINIINFOSECTION_DATA
 
typedef struct _PH_NF_ICON PH_NF_ICON
 
typedef struct _PH_NF_ICONPPH_NF_ICON
 
typedef struct
_PH_NF_ICON_REGISTRATION_DATA 
PH_NF_ICON_REGISTRATION_DATA
 
typedef struct
_PH_NF_ICON_REGISTRATION_DATA
PPH_NF_ICON_REGISTRATION_DATA
 
typedef enum _PH_SETTING_TYPE PH_SETTING_TYPE
 
typedef enum _PH_SETTING_TYPE PPH_SETTING_TYPE
 
typedef struct _PH_SETTING_CREATE PH_SETTING_CREATE
 
typedef struct _PH_SETTING_CREATEPPH_SETTING_CREATE
 
typedef enum _PH_SYSINFO_VIEW_TYPE PH_SYSINFO_VIEW_TYPE
 
typedef VOID(NTAPI * PPH_SYSINFO_COLOR_SETUP_FUNCTION )(_Out_ PPH_GRAPH_DRAW_INFO DrawInfo, _In_ COLORREF Color1, _In_ COLORREF Color2)
 
typedef struct
_PH_SYSINFO_PARAMETERS 
PH_SYSINFO_PARAMETERS
 
typedef struct
_PH_SYSINFO_PARAMETERS
PPH_SYSINFO_PARAMETERS
 
typedef enum
_PH_SYSINFO_SECTION_MESSAGE 
PH_SYSINFO_SECTION_MESSAGE
 
typedef BOOLEAN(NTAPI * PPH_SYSINFO_SECTION_CALLBACK )(_In_ struct _PH_SYSINFO_SECTION *Section, _In_ PH_SYSINFO_SECTION_MESSAGE Message, _In_opt_ PVOID Parameter1, _In_opt_ PVOID Parameter2)
 
typedef struct
_PH_SYSINFO_CREATE_DIALOG 
PH_SYSINFO_CREATE_DIALOG
 
typedef struct
_PH_SYSINFO_CREATE_DIALOG
PPH_SYSINFO_CREATE_DIALOG
 
typedef struct
_PH_SYSINFO_GRAPH_GET_TOOLTIP_TEXT 
PH_SYSINFO_GRAPH_GET_TOOLTIP_TEXT
 
typedef struct
_PH_SYSINFO_GRAPH_GET_TOOLTIP_TEXT
PPH_SYSINFO_GRAPH_GET_TOOLTIP_TEXT
 
typedef struct
_PH_SYSINFO_DRAW_PANEL 
PH_SYSINFO_DRAW_PANEL
 
typedef struct
_PH_SYSINFO_DRAW_PANEL
PPH_SYSINFO_DRAW_PANEL
 
typedef struct _PH_SYSINFO_SECTION PH_SYSINFO_SECTION
 
typedef struct
_PH_SYSINFO_SECTION
PPH_SYSINFO_SECTION
 
typedef struct _PH_PROCESS_GROUP PH_PROCESS_GROUP
 
typedef struct _PH_PROCESS_GROUPPPH_PROCESS_GROUP
 
typedef VOID(NTAPI * PPH_MINIINFO_SET_SECTION_TEXT )(_In_ struct _PH_MINIINFO_SECTION *Section, _In_opt_ PPH_STRING Text)
 
typedef struct
_PH_MINIINFO_PARAMETERS 
PH_MINIINFO_PARAMETERS
 
typedef struct
_PH_MINIINFO_PARAMETERS
PPH_MINIINFO_PARAMETERS
 
typedef enum
_PH_MINIINFO_SECTION_MESSAGE 
PH_MINIINFO_SECTION_MESSAGE
 
typedef BOOLEAN(NTAPI * PPH_MINIINFO_SECTION_CALLBACK )(_In_ struct _PH_MINIINFO_SECTION *Section, _In_ PH_MINIINFO_SECTION_MESSAGE Message, _In_opt_ PVOID Parameter1, _In_opt_ PVOID Parameter2)
 
typedef struct
_PH_MINIINFO_CREATE_DIALOG 
PH_MINIINFO_CREATE_DIALOG
 
typedef struct
_PH_MINIINFO_CREATE_DIALOG
PPH_MINIINFO_CREATE_DIALOG
 
typedef struct _PH_MINIINFO_SECTION PH_MINIINFO_SECTION
 
typedef struct
_PH_MINIINFO_SECTION
PPH_MINIINFO_SECTION
 
typedef enum
_PH_MINIINFO_LIST_SECTION_MESSAGE 
PH_MINIINFO_LIST_SECTION_MESSAGE
 
typedef BOOLEAN(NTAPI * PPH_MINIINFO_LIST_SECTION_CALLBACK )(_In_ struct _PH_MINIINFO_LIST_SECTION *ListSection, _In_ PH_MINIINFO_LIST_SECTION_MESSAGE Message, _In_opt_ PVOID Parameter1, _In_opt_ PVOID Parameter2)
 
typedef struct
_PH_MINIINFO_LIST_SECTION_SORT_DATA 
PH_MINIINFO_LIST_SECTION_SORT_DATA
 
typedef struct
_PH_MINIINFO_LIST_SECTION_SORT_DATA
PPH_MINIINFO_LIST_SECTION_SORT_DATA
 
typedef struct
_PH_MINIINFO_LIST_SECTION_ASSIGN_SORT_DATA 
PH_MINIINFO_LIST_SECTION_ASSIGN_SORT_DATA
 
typedef struct
_PH_MINIINFO_LIST_SECTION_ASSIGN_SORT_DATA
PPH_MINIINFO_LIST_SECTION_ASSIGN_SORT_DATA
 
typedef struct
_PH_MINIINFO_LIST_SECTION_SORT_LIST 
PH_MINIINFO_LIST_SECTION_SORT_LIST
 
typedef struct
_PH_MINIINFO_LIST_SECTION_SORT_LIST
PPH_MINIINFO_LIST_SECTION_SORT_LIST
 
typedef struct
_PH_MINIINFO_LIST_SECTION_GET_TITLE_TEXT 
PH_MINIINFO_LIST_SECTION_GET_TITLE_TEXT
 
typedef struct
_PH_MINIINFO_LIST_SECTION_GET_TITLE_TEXT
PPH_MINIINFO_LIST_SECTION_GET_TITLE_TEXT
 
typedef struct
_PH_MINIINFO_LIST_SECTION_GET_USAGE_TEXT 
PH_MINIINFO_LIST_SECTION_GET_USAGE_TEXT
 
typedef struct
_PH_MINIINFO_LIST_SECTION_GET_USAGE_TEXT
PPH_MINIINFO_LIST_SECTION_GET_USAGE_TEXT
 
typedef struct
_PH_MINIINFO_LIST_SECTION_MENU_INFORMATION 
PH_MINIINFO_LIST_SECTION_MENU_INFORMATION
 
typedef struct
_PH_MINIINFO_LIST_SECTION_MENU_INFORMATION
PPH_MINIINFO_LIST_SECTION_MENU_INFORMATION
 
typedef struct
_PH_MINIINFO_LIST_SECTION 
PH_MINIINFO_LIST_SECTION
 
typedef struct
_PH_MINIINFO_LIST_SECTION
PPH_MINIINFO_LIST_SECTION
 
typedef enum _PH_GENERAL_CALLBACK PH_GENERAL_CALLBACK
 
typedef enum _PH_GENERAL_CALLBACKPPH_GENERAL_CALLBACK
 
typedef enum _PH_PLUGIN_CALLBACK PH_PLUGIN_CALLBACK
 
typedef enum _PH_PLUGIN_CALLBACKPPH_PLUGIN_CALLBACK
 
typedef struct
_PH_PLUGIN_GET_HIGHLIGHTING_COLOR 
PH_PLUGIN_GET_HIGHLIGHTING_COLOR
 
typedef struct
_PH_PLUGIN_GET_HIGHLIGHTING_COLOR
PPH_PLUGIN_GET_HIGHLIGHTING_COLOR
 
typedef struct
_PH_PLUGIN_GET_TOOLTIP_TEXT 
PH_PLUGIN_GET_TOOLTIP_TEXT
 
typedef struct
_PH_PLUGIN_GET_TOOLTIP_TEXT
PPH_PLUGIN_GET_TOOLTIP_TEXT
 
typedef struct
_PH_PLUGIN_PROCESS_PROPCONTEXT 
PH_PLUGIN_PROCESS_PROPCONTEXT
 
typedef struct
_PH_PLUGIN_PROCESS_PROPCONTEXT
PPH_PLUGIN_PROCESS_PROPCONTEXT
 
typedef struct
_PH_PLUGIN_NOTIFY_EVENT 
PH_PLUGIN_NOTIFY_EVENT
 
typedef struct
_PH_PLUGIN_NOTIFY_EVENT
PPH_PLUGIN_NOTIFY_EVENT
 
typedef struct
_PH_PLUGIN_OBJECT_PROPERTIES 
PH_PLUGIN_OBJECT_PROPERTIES
 
typedef struct
_PH_PLUGIN_OBJECT_PROPERTIES
PPH_PLUGIN_OBJECT_PROPERTIES
 
typedef struct
_PH_PLUGIN_HANDLE_PROPERTIES_CONTEXT 
PH_PLUGIN_HANDLE_PROPERTIES_CONTEXT
 
typedef struct
_PH_PLUGIN_HANDLE_PROPERTIES_CONTEXT
PPH_PLUGIN_HANDLE_PROPERTIES_CONTEXT
 
typedef struct _PH_EMENU_ITEMPPH_EMENU_ITEM
 
typedef struct _PH_EMENU_ITEMPPH_EMENU
 
typedef struct
_PH_PLUGIN_MENU_INFORMATION 
PH_PLUGIN_MENU_INFORMATION
 
typedef struct
_PH_PLUGIN_MENU_INFORMATION
PPH_PLUGIN_MENU_INFORMATION
 
typedef struct
_PH_PLUGIN_MENU_HOOK_INFORMATION 
PH_PLUGIN_MENU_HOOK_INFORMATION
 
typedef struct
_PH_PLUGIN_MENU_HOOK_INFORMATION
PPH_PLUGIN_MENU_HOOK_INFORMATION
 
typedef struct
_PH_PLUGIN_TREENEW_INFORMATION 
PH_PLUGIN_TREENEW_INFORMATION
 
typedef struct
_PH_PLUGIN_TREENEW_INFORMATION
PPH_PLUGIN_TREENEW_INFORMATION
 
typedef enum
_PH_PLUGIN_THREAD_STACK_CONTROL_TYPE 
PH_PLUGIN_THREAD_STACK_CONTROL_TYPE
 
typedef struct
_PH_THREAD_STACK_FRAME
PPH_THREAD_STACK_FRAME
 
typedef BOOLEAN(NTAPI * PPH_PLUGIN_WALK_THREAD_STACK_CALLBACK )(_In_ PPH_THREAD_STACK_FRAME StackFrame, _In_opt_ PVOID Context)
 
typedef struct
_PH_PLUGIN_THREAD_STACK_CONTROL 
PH_PLUGIN_THREAD_STACK_CONTROL
 
typedef struct
_PH_PLUGIN_THREAD_STACK_CONTROL
PPH_PLUGIN_THREAD_STACK_CONTROL
 
typedef enum
_PH_PLUGIN_MEMORY_ITEM_LIST_CONTROL_TYPE 
PH_PLUGIN_MEMORY_ITEM_LIST_CONTROL_TYPE
 
typedef struct
_PH_PLUGIN_MEMORY_ITEM_LIST_CONTROL 
PH_PLUGIN_MEMORY_ITEM_LIST_CONTROL
 
typedef struct
_PH_PLUGIN_MEMORY_ITEM_LIST_CONTROL
PPH_PLUGIN_MEMORY_ITEM_LIST_CONTROL
 
typedef PPH_SYSINFO_SECTION(NTAPI * PPH_SYSINFO_CREATE_SECTION )(_In_ PPH_SYSINFO_SECTION Template)
 
typedef PPH_SYSINFO_SECTION(NTAPI * PPH_SYSINFO_FIND_SECTION )(_In_ PPH_STRINGREF Name)
 
typedef VOID(NTAPI * PPH_SYSINFO_ENTER_SECTION_VIEW )(_In_ PPH_SYSINFO_SECTION NewSection)
 
typedef VOID(NTAPI * PPH_SYSINFO_RESTORE_SUMMARY_VIEW )(VOID)
 
typedef struct
_PH_PLUGIN_SYSINFO_POINTERS 
PH_PLUGIN_SYSINFO_POINTERS
 
typedef struct
_PH_PLUGIN_SYSINFO_POINTERS
PPH_PLUGIN_SYSINFO_POINTERS
 
typedef PPH_MINIINFO_SECTION(NTAPI * PPH_MINIINFO_CREATE_SECTION )(_In_ PPH_MINIINFO_SECTION Template)
 
typedef PPH_MINIINFO_SECTION(NTAPI * PPH_MINIINFO_FIND_SECTION )(_In_ PPH_STRINGREF Name)
 
typedef
PPH_MINIINFO_LIST_SECTION(NTAPI * 
PPH_MINIINFO_CREATE_LIST_SECTION )(_In_ PWSTR Name, _In_ ULONG Flags, _In_ PPH_MINIINFO_LIST_SECTION Template)
 
typedef struct
_PH_PLUGIN_MINIINFO_POINTERS 
PH_PLUGIN_MINIINFO_POINTERS
 
typedef struct
_PH_PLUGIN_MINIINFO_POINTERS
PPH_PLUGIN_MINIINFO_POINTERS
 
typedef struct
_PH_PLUGIN_TREENEW_MESSAGE 
PH_PLUGIN_TREENEW_MESSAGE
 
typedef struct
_PH_PLUGIN_TREENEW_MESSAGE
PPH_PLUGIN_TREENEW_MESSAGE
 
typedef LONG(NTAPI * PPH_PLUGIN_TREENEW_SORT_FUNCTION )(_In_ PVOID Node1, _In_ PVOID Node2, _In_ ULONG SubId, _In_ PVOID Context)
 
typedef NTSTATUS(NTAPI * PPHSVC_SERVER_PROBE_BUFFER )(_In_ PPH_RELATIVE_STRINGREF String, _In_ ULONG Alignment, _In_ BOOLEAN AllowNull, _Out_ PVOID *Pointer)
 
typedef NTSTATUS(NTAPI * PPHSVC_SERVER_CAPTURE_BUFFER )(_In_ PPH_RELATIVE_STRINGREF String, _In_ BOOLEAN AllowNull, _Out_ PVOID *CapturedBuffer)
 
typedef NTSTATUS(NTAPI * PPHSVC_SERVER_CAPTURE_STRING )(_In_ PPH_RELATIVE_STRINGREF String, _In_ BOOLEAN AllowNull, _Out_ PPH_STRING *CapturedString)
 
typedef struct
_PH_PLUGIN_PHSVC_REQUEST 
PH_PLUGIN_PHSVC_REQUEST
 
typedef struct
_PH_PLUGIN_PHSVC_REQUEST
PPH_PLUGIN_PHSVC_REQUEST
 
typedef VOID(NTAPI * PPHSVC_CLIENT_FREE_HEAP )(_In_ PVOID Memory)
 
typedef PVOID(NTAPI * PPHSVC_CLIENT_CREATE_STRING )(_In_opt_ PVOID String, _In_ SIZE_T Length, _Out_ PPH_RELATIVE_STRINGREF StringRef)
 
typedef struct
_PH_PLUGIN_PHSVC_CLIENT 
PH_PLUGIN_PHSVC_CLIENT
 
typedef struct
_PH_PLUGIN_PHSVC_CLIENT
PPH_PLUGIN_PHSVC_CLIENT
 
typedef struct
_PH_PLUGIN_INFORMATION 
PH_PLUGIN_INFORMATION
 
typedef struct
_PH_PLUGIN_INFORMATION
PPH_PLUGIN_INFORMATION
 
typedef struct _PH_PLUGIN PH_PLUGIN
 
typedef struct _PH_PLUGINPPH_PLUGIN
 
typedef VOID(NTAPI * PPH_PLUGIN_MENU_ITEM_DELETE_FUNCTION )(_In_ struct _PH_PLUGIN_MENU_ITEM *MenuItem)
 
typedef struct _PH_PLUGIN_MENU_ITEM PH_PLUGIN_MENU_ITEM
 
typedef struct
_PH_PLUGIN_MENU_ITEM
PPH_PLUGIN_MENU_ITEM
 
typedef struct
_PH_PLUGIN_SYSTEM_STATISTICS 
PH_PLUGIN_SYSTEM_STATISTICS
 
typedef struct
_PH_PLUGIN_SYSTEM_STATISTICS
PPH_PLUGIN_SYSTEM_STATISTICS
 
typedef struct _PH_THREADS_CONTEXT PH_THREADS_CONTEXT
 
typedef struct
_PH_THREADS_CONTEXT
PPH_THREADS_CONTEXT
 
typedef struct _PH_MODULES_CONTEXT PH_MODULES_CONTEXT
 
typedef struct
_PH_MODULES_CONTEXT
PPH_MODULES_CONTEXT
 
typedef struct _PH_HANDLES_CONTEXT PH_HANDLES_CONTEXT
 
typedef struct
_PH_HANDLES_CONTEXT
PPH_HANDLES_CONTEXT
 
typedef struct _PH_MEMORY_CONTEXT PH_MEMORY_CONTEXT
 
typedef struct _PH_MEMORY_CONTEXTPPH_MEMORY_CONTEXT
 

Enumerations

enum  _PH_SERVICE_CHANGE {
  ServiceStarted, ServiceContinued, ServicePaused, ServiceStopped,
  ServiceStarted, ServiceContinued, ServicePaused, ServiceStopped
}
 
enum  _PH_MEMORY_REGION_TYPE {
  UnknownRegion, CustomRegion, UnusableRegion, MappedFileRegion,
  UserSharedDataRegion, PebRegion, Peb32Region, TebRegion,
  Teb32Region, StackRegion, Stack32Region, HeapRegion,
  Heap32Region, HeapSegmentRegion, HeapSegment32Region, UnknownRegion,
  CustomRegion, UnusableRegion, MappedFileRegion, UserSharedDataRegion,
  PebRegion, Peb32Region, TebRegion, Teb32Region,
  StackRegion, Stack32Region, HeapRegion, Heap32Region,
  HeapSegmentRegion, HeapSegment32Region
}
 
enum  _PH_KNOWN_PROCESS_TYPE {
  UnknownProcessType, SystemProcessType, SessionManagerProcessType, WindowsSubsystemProcessType,
  WindowsStartupProcessType, ServiceControlManagerProcessType, LocalSecurityAuthorityProcessType, LocalSessionManagerProcessType,
  WindowsLogonProcessType, ServiceHostProcessType, RunDllAsAppProcessType, ComSurrogateProcessType,
  TaskHostProcessType, ExplorerProcessType, UmdfHostProcessType, MaximumProcessType,
  KnownProcessTypeMask = 0xffff, KnownProcessWow64 = 0x20000, UnknownProcessType, SystemProcessType,
  SessionManagerProcessType, WindowsSubsystemProcessType, WindowsStartupProcessType, ServiceControlManagerProcessType,
  LocalSecurityAuthorityProcessType, LocalSessionManagerProcessType, WindowsLogonProcessType, ServiceHostProcessType,
  RunDllAsAppProcessType, ComSurrogateProcessType, TaskHostProcessType, ExplorerProcessType,
  UmdfHostProcessType, MaximumProcessType, KnownProcessTypeMask = 0xffff, KnownProcessWow64 = 0x20000
}
 
enum  _PH_PHSVC_MODE { ElevatedPhSvcMode, Wow64PhSvcMode, ElevatedPhSvcMode, Wow64PhSvcMode }
 
enum  _PH_EM_OBJECT_TYPE {
  EmProcessItemType, EmProcessNodeType, EmServiceItemType, EmServiceNodeType,
  EmNetworkItemType, EmNetworkNodeType, EmThreadItemType, EmThreadNodeType,
  EmModuleItemType, EmModuleNodeType, EmHandleItemType, EmHandleNodeType,
  EmThreadsContextType, EmModulesContextType, EmHandlesContextType, EmThreadProviderType,
  EmModuleProviderType, EmHandleProviderType, EmMemoryNodeType, EmMemoryContextType,
  EmMaximumObjectType, EmProcessItemType, EmProcessNodeType, EmServiceItemType,
  EmServiceNodeType, EmNetworkItemType, EmNetworkNodeType, EmThreadItemType,
  EmThreadNodeType, EmModuleItemType, EmModuleNodeType, EmHandleItemType,
  EmHandleNodeType, EmThreadsContextType, EmModulesContextType, EmHandlesContextType,
  EmThreadProviderType, EmModuleProviderType, EmHandleProviderType, EmMemoryNodeType,
  EmMemoryContextType, EmMaximumObjectType
}
 
enum  _PH_EM_OBJECT_OPERATION {
  EmObjectCreate, EmObjectDelete, EmMaximumObjectOperation, EmObjectCreate,
  EmObjectDelete, EmMaximumObjectOperation
}
 
enum  _PH_SETTING_TYPE {
  StringSettingType, IntegerSettingType, IntegerPairSettingType, StringSettingType,
  IntegerSettingType, IntegerPairSettingType
}
 
enum  _PH_SYSINFO_VIEW_TYPE { SysInfoSummaryView, SysInfoSectionView, SysInfoSummaryView, SysInfoSectionView }
 
enum  _PH_SYSINFO_SECTION_MESSAGE {
  SysInfoCreate, SysInfoDestroy, SysInfoTick, SysInfoViewChanging,
  SysInfoCreateDialog, SysInfoGraphGetDrawInfo, SysInfoGraphGetTooltipText, SysInfoGraphDrawPanel,
  MaxSysInfoMessage, SysInfoCreate, SysInfoDestroy, SysInfoTick,
  SysInfoViewChanging, SysInfoCreateDialog, SysInfoGraphGetDrawInfo, SysInfoGraphGetTooltipText,
  SysInfoGraphDrawPanel, MaxSysInfoMessage
}
 
enum  _PH_MINIINFO_SECTION_MESSAGE {
  MiniInfoCreate, MiniInfoDestroy, MiniInfoTick, MiniInfoSectionChanging,
  MiniInfoShowing, MiniInfoCreateDialog, MaxMiniInfoMessage, MiniInfoCreate,
  MiniInfoDestroy, MiniInfoTick, MiniInfoSectionChanging, MiniInfoShowing,
  MiniInfoCreateDialog, MaxMiniInfoMessage
}
 
enum  _PH_MINIINFO_LIST_SECTION_MESSAGE {
  MiListSectionCreate, MiListSectionDestroy, MiListSectionTick, MiListSectionShowing,
  MiListSectionDialogCreated, MiListSectionSortProcessList, MiListSectionAssignSortData, MiListSectionSortGroupList,
  MiListSectionGetTitleText, MiListSectionGetUsageText, MiListSectionInitializeContextMenu, MiListSectionHandleContextMenu,
  MaxMiListSectionMessage, MiListSectionCreate, MiListSectionDestroy, MiListSectionTick,
  MiListSectionShowing, MiListSectionDialogCreated, MiListSectionSortProcessList, MiListSectionAssignSortData,
  MiListSectionSortGroupList, MiListSectionGetTitleText, MiListSectionGetUsageText, MiListSectionInitializeContextMenu,
  MiListSectionHandleContextMenu, MaxMiListSectionMessage
}
 
enum  _PH_GENERAL_CALLBACK {
  GeneralCallbackMainWindowShowing = 0, GeneralCallbackProcessesUpdated = 1, GeneralCallbackGetProcessHighlightingColor = 2, GeneralCallbackGetProcessTooltipText = 3,
  GeneralCallbackProcessPropertiesInitializing = 4, GeneralCallbackMainMenuInitializing = 5, GeneralCallbackNotifyEvent = 6, GeneralCallbackServicePropertiesInitializing = 7,
  GeneralCallbackHandlePropertiesInitializing = 8, GeneralCallbackProcessMenuInitializing = 9, GeneralCallbackServiceMenuInitializing = 10, GeneralCallbackNetworkMenuInitializing = 11,
  GeneralCallbackIconMenuInitializing = 12, GeneralCallbackThreadMenuInitializing = 13, GeneralCallbackModuleMenuInitializing = 14, GeneralCallbackMemoryMenuInitializing = 15,
  GeneralCallbackHandleMenuInitializing = 16, GeneralCallbackProcessTreeNewInitializing = 17, GeneralCallbackServiceTreeNewInitializing = 18, GeneralCallbackNetworkTreeNewInitializing = 19,
  GeneralCallbackModuleTreeNewInitializing = 20, GeneralCallbackModuleTreeNewUninitializing = 21, GeneralCallbackThreadTreeNewInitializing = 22, GeneralCallbackThreadTreeNewUninitializing = 23,
  GeneralCallbackHandleTreeNewInitializing = 24, GeneralCallbackHandleTreeNewUninitializing = 25, GeneralCallbackThreadStackControl = 26, GeneralCallbackSystemInformationInitializing = 27,
  GeneralCallbackMainWindowTabChanged = 28, GeneralCallbackMemoryTreeNewInitializing = 29, GeneralCallbackMemoryTreeNewUninitializing = 30, GeneralCallbackMemoryItemListControl = 31,
  GeneralCallbackMiniInformationInitializing = 32, GeneralCallbackMiListSectionMenuInitializing = 33, GeneralCallbackMaximum, GeneralCallbackMainWindowShowing = 0,
  GeneralCallbackProcessesUpdated = 1, GeneralCallbackGetProcessHighlightingColor = 2, GeneralCallbackGetProcessTooltipText = 3, GeneralCallbackProcessPropertiesInitializing = 4,
  GeneralCallbackMainMenuInitializing = 5, GeneralCallbackNotifyEvent = 6, GeneralCallbackServicePropertiesInitializing = 7, GeneralCallbackHandlePropertiesInitializing = 8,
  GeneralCallbackProcessMenuInitializing = 9, GeneralCallbackServiceMenuInitializing = 10, GeneralCallbackNetworkMenuInitializing = 11, GeneralCallbackIconMenuInitializing = 12,
  GeneralCallbackThreadMenuInitializing = 13, GeneralCallbackModuleMenuInitializing = 14, GeneralCallbackMemoryMenuInitializing = 15, GeneralCallbackHandleMenuInitializing = 16,
  GeneralCallbackProcessTreeNewInitializing = 17, GeneralCallbackServiceTreeNewInitializing = 18, GeneralCallbackNetworkTreeNewInitializing = 19, GeneralCallbackModuleTreeNewInitializing = 20,
  GeneralCallbackModuleTreeNewUninitializing = 21, GeneralCallbackThreadTreeNewInitializing = 22, GeneralCallbackThreadTreeNewUninitializing = 23, GeneralCallbackHandleTreeNewInitializing = 24,
  GeneralCallbackHandleTreeNewUninitializing = 25, GeneralCallbackThreadStackControl = 26, GeneralCallbackSystemInformationInitializing = 27, GeneralCallbackMainWindowTabChanged = 28,
  GeneralCallbackMemoryTreeNewInitializing = 29, GeneralCallbackMemoryTreeNewUninitializing = 30, GeneralCallbackMemoryItemListControl = 31, GeneralCallbackMiniInformationInitializing = 32,
  GeneralCallbackMiListSectionMenuInitializing = 33, GeneralCallbackMaximum
}
 
enum  _PH_PLUGIN_CALLBACK {
  PluginCallbackLoad = 0, PluginCallbackUnload = 1, PluginCallbackShowOptions = 2, PluginCallbackMenuItem = 3,
  PluginCallbackTreeNewMessage = 4, PluginCallbackPhSvcRequest = 5, PluginCallbackMenuHook = 6, PluginCallbackMaximum,
  PluginCallbackLoad = 0, PluginCallbackUnload = 1, PluginCallbackShowOptions = 2, PluginCallbackMenuItem = 3,
  PluginCallbackTreeNewMessage = 4, PluginCallbackPhSvcRequest = 5, PluginCallbackMenuHook = 6, PluginCallbackMaximum
}
 
enum  _PH_PLUGIN_THREAD_STACK_CONTROL_TYPE {
  PluginThreadStackInitializing, PluginThreadStackUninitializing, PluginThreadStackResolveSymbol, PluginThreadStackGetTooltip,
  PluginThreadStackWalkStack, PluginThreadStackBeginDefaultWalkStack, PluginThreadStackEndDefaultWalkStack, PluginThreadStackMaximum,
  PluginThreadStackInitializing, PluginThreadStackUninitializing, PluginThreadStackResolveSymbol, PluginThreadStackGetTooltip,
  PluginThreadStackWalkStack, PluginThreadStackBeginDefaultWalkStack, PluginThreadStackEndDefaultWalkStack, PluginThreadStackMaximum
}
 
enum  _PH_PLUGIN_MEMORY_ITEM_LIST_CONTROL_TYPE { PluginMemoryItemListInitialized, PluginMemoryItemListMaximum, PluginMemoryItemListInitialized, PluginMemoryItemListMaximum }
 

Functions

PHAPPAPI PPH_STRING NTAPI PhGetClientIdName (_In_ PCLIENT_ID ClientId)
 
PHAPPAPI PPH_STRING NTAPI PhGetClientIdNameEx (_In_ PCLIENT_ID ClientId, _In_opt_ PPH_STRING ProcessName)
 
PHAPPAPI PWSTR NTAPI PhGetProcessPriorityClassString (_In_ ULONG PriorityClass)
 
PHAPPAPI PPH_PROCESS_ITEM NTAPI PhReferenceProcessItem (_In_ HANDLE ProcessId)
 Finds and references a process item.
 
PHAPPAPI VOID NTAPI PhEnumProcessItems (_Out_opt_ PPH_PROCESS_ITEM **ProcessItems, _Out_ PULONG NumberOfProcessItems)
 Enumerates the process items.
 
PHAPPAPI BOOLEAN NTAPI PhGetStatisticsTime (_In_opt_ PPH_PROCESS_ITEM ProcessItem, _In_ ULONG Index, _Out_ PLARGE_INTEGER Time)
 Retrieves a time value recorded by the statistics system.
 
PHAPPAPI PPH_STRING NTAPI PhGetStatisticsTimeString (_In_opt_ PPH_PROCESS_ITEM ProcessItem, _In_ ULONG Index)
 
PHAPPAPI VOID NTAPI PhReferenceProcessRecord (_In_ PPH_PROCESS_RECORD ProcessRecord)
 
PHAPPAPI BOOLEAN NTAPI PhReferenceProcessRecordSafe (_In_ PPH_PROCESS_RECORD ProcessRecord)
 
PHAPPAPI VOID NTAPI PhReferenceProcessRecordForStatistics (_In_ PPH_PROCESS_RECORD ProcessRecord)
 
PHAPPAPI VOID NTAPI PhDereferenceProcessRecord (_In_ PPH_PROCESS_RECORD ProcessRecord)
 
PHAPPAPI PPH_PROCESS_RECORD NTAPI PhFindProcessRecord (_In_opt_ HANDLE ProcessId, _In_ PLARGE_INTEGER Time)
 Finds a process record.
 
PHAPPAPI PPH_PROCESS_ITEM NTAPI PhReferenceProcessItemForParent (_In_ HANDLE ParentProcessId, _In_ HANDLE ProcessId, _In_ PLARGE_INTEGER CreateTime)
 
PHAPPAPI PPH_PROCESS_ITEM NTAPI PhReferenceProcessItemForRecord (_In_ PPH_PROCESS_RECORD Record)
 
PHAPPAPI PPH_SERVICE_ITEM NTAPI PhReferenceServiceItem (_In_ PWSTR Name)
 
PHAPPAPI PH_SERVICE_CHANGE NTAPI PhGetServiceChange (_In_ PPH_SERVICE_MODIFIED_DATA Data)
 
PHAPPAPI PPH_NETWORK_ITEM NTAPI PhReferenceNetworkItem (_In_ ULONG ProtocolType, _In_ PPH_IP_ENDPOINT LocalEndpoint, _In_ PPH_IP_ENDPOINT RemoteEndpoint, _In_ HANDLE ProcessId)
 
PHAPPAPI PWSTR NTAPI PhGetProtocolTypeName (_In_ ULONG ProtocolType)
 
PHAPPAPI PWSTR NTAPI PhGetTcpStateName (_In_ ULONG State)
 
PHAPPAPI PPH_STRING NTAPI PhGetThreadPriorityWin32String (_In_ LONG PriorityWin32)
 
PHAPPAPI VOID NTAPI PhDeleteMemoryItemList (_In_ PPH_MEMORY_ITEM_LIST List)
 
PHAPPAPI PPH_MEMORY_ITEM NTAPI PhLookupMemoryItemList (_In_ PPH_MEMORY_ITEM_LIST List, _In_ PVOID Address)
 
PHAPPAPI NTSTATUS NTAPI PhQueryMemoryItemList (_In_ HANDLE ProcessId, _In_ ULONG Flags, _Out_ PPH_MEMORY_ITEM_LIST List)
 
PHAPPAPI BOOLEAN NTAPI PhCmLoadSettings (_In_ HWND TreeNewHandle, _In_ PPH_STRINGREF Settings)
 
PHAPPAPI PPH_STRING NTAPI PhCmSaveSettings (_In_ HWND TreeNewHandle)
 
PHAPPAPI struct
_PH_TN_FILTER_SUPPORT *NTAPI 
PhGetFilterSupportProcessTreeList (VOID)
 
PHAPPAPI PPH_PROCESS_NODE NTAPI PhFindProcessNode (_In_ HANDLE ProcessId)
 
PHAPPAPI VOID NTAPI PhUpdateProcessNode (_In_ PPH_PROCESS_NODE ProcessNode)
 
PHAPPAPI PPH_PROCESS_ITEM NTAPI PhGetSelectedProcessItem (VOID)
 
PHAPPAPI VOID NTAPI PhGetSelectedProcessItems (_Out_ PPH_PROCESS_ITEM **Processes, _Out_ PULONG NumberOfProcesses)
 
PHAPPAPI VOID NTAPI PhDeselectAllProcessNodes (VOID)
 
PHAPPAPI VOID NTAPI PhExpandAllProcessNodes (_In_ BOOLEAN Expand)
 
PHAPPAPI VOID NTAPI PhInvalidateAllProcessNodes (VOID)
 
PHAPPAPI VOID NTAPI PhSelectAndEnsureVisibleProcessNode (_In_ PPH_PROCESS_NODE ProcessNode)
 
PHAPPAPI struct
_PH_TN_FILTER_SUPPORT *NTAPI 
PhGetFilterSupportServiceTreeList (VOID)
 
PHAPPAPI PPH_SERVICE_NODE NTAPI PhFindServiceNode (_In_ PPH_SERVICE_ITEM ServiceItem)
 
PHAPPAPI VOID NTAPI PhUpdateServiceNode (_In_ PPH_SERVICE_NODE ServiceNode)
 
PHAPPAPI PPH_SERVICE_ITEM NTAPI PhGetSelectedServiceItem (VOID)
 
PHAPPAPI VOID NTAPI PhGetSelectedServiceItems (_Out_ PPH_SERVICE_ITEM **Services, _Out_ PULONG NumberOfServices)
 
PHAPPAPI VOID NTAPI PhDeselectAllServiceNodes (VOID)
 
PHAPPAPI VOID NTAPI PhSelectAndEnsureVisibleServiceNode (_In_ PPH_SERVICE_NODE ServiceNode)
 
PHAPPAPI struct
_PH_TN_FILTER_SUPPORT *NTAPI 
PhGetFilterSupportNetworkTreeList (VOID)
 
PHAPPAPI PPH_NETWORK_NODE NTAPI PhFindNetworkNode (_In_ PPH_NETWORK_ITEM NetworkItem)
 
PHAPPAPI VOID NTAPI PhRegisterDialog (_In_ HWND DialogWindowHandle)
 
PHAPPAPI VOID NTAPI PhUnregisterDialog (_In_ HWND DialogWindowHandle)
 
PHAPPAPI struct
_PH_MESSAGE_LOOP_FILTER_ENTRY
*NTAPI 
PhRegisterMessageLoopFilter (_In_ PPH_MESSAGE_LOOP_FILTER Filter, _In_opt_ PVOID Context)
 
PHAPPAPI VOID NTAPI PhUnregisterMessageLoopFilter (_In_ struct _PH_MESSAGE_LOOP_FILTER_ENTRY *FilterEntry)
 
PHAPPAPI BOOLEAN NTAPI PhGetProcessIsSuspended (_In_ PSYSTEM_PROCESS_INFORMATION Process)
 Determines whether a process is suspended.
 
PHAPPAPI NTSTATUS NTAPI PhGetProcessKnownType (_In_ HANDLE ProcessHandle, _Out_ PH_KNOWN_PROCESS_TYPE *KnownProcessType)
 Determines the type of a process based on its image file name.
 
PHAPPAPI BOOLEAN NTAPI PhaGetProcessKnownCommandLine (_In_ PPH_STRING CommandLine, _In_ PH_KNOWN_PROCESS_TYPE KnownProcessType, _Out_ PPH_KNOWN_PROCESS_COMMAND_LINE KnownCommandLine)
 
PHAPPAPI VOID NTAPI PhSearchOnlineString (_In_ HWND hWnd, _In_ PWSTR String)
 
PHAPPAPI VOID NTAPI PhShellExecuteUserString (_In_ HWND hWnd, _In_ PWSTR Setting, _In_ PWSTR String, _In_ BOOLEAN UseShellExecute, _In_opt_ PWSTR ErrorMessage)
 
PHAPPAPI VOID NTAPI PhLoadSymbolProviderOptions (_Inout_ PPH_SYMBOL_PROVIDER SymbolProvider)
 
PHAPPAPI VOID NTAPI PhCopyListViewInfoTip (_Inout_ LPNMLVGETINFOTIP GetInfoTip, _In_ PPH_STRINGREF Tip)
 Copies a string into a NMLVGETINFOTIP structure.
 
PHAPPAPI VOID NTAPI PhCopyListView (_In_ HWND ListViewHandle)
 
PHAPPAPI VOID PhHandleListViewNotifyForCopy (_In_ LPARAM lParam, _In_ HWND ListViewHandle)
 
PHAPPAPI BOOLEAN NTAPI PhGetListViewContextMenuPoint (_In_ HWND ListViewHandle, _Out_ PPOINT Point)
 
PHAPPAPI VOID NTAPI PhLoadWindowPlacementFromSetting (_In_opt_ PWSTR PositionSettingName, _In_opt_ PWSTR SizeSettingName, _In_ HWND WindowHandle)
 
PHAPPAPI VOID NTAPI PhSaveWindowPlacementToSetting (_In_opt_ PWSTR PositionSettingName, _In_opt_ PWSTR SizeSettingName, _In_ HWND WindowHandle)
 
PHAPPAPI VOID NTAPI PhLoadListViewColumnsFromSetting (_In_ PWSTR Name, _In_ HWND ListViewHandle)
 
PHAPPAPI VOID NTAPI PhSaveListViewColumnsToSetting (_In_ PWSTR Name, _In_ HWND ListViewHandle)
 
PHAPPAPI PPH_STRING NTAPI PhGetPhVersion (VOID)
 
PHAPPAPI VOID NTAPI PhGetPhVersionNumbers (_Out_opt_ PULONG MajorVersion, _Out_opt_ PULONG MinorVersion, _Reserved_ PULONG Reserved, _Out_opt_ PULONG RevisionNumber)
 
PHAPPAPI VOID NTAPI PhWritePhTextHeader (_Inout_ PPH_FILE_STREAM FileStream)
 
PHAPPAPI BOOLEAN NTAPI PhShellProcessHacker (_In_opt_ HWND hWnd, _In_opt_ PWSTR Parameters, _In_ ULONG ShowWindowType, _In_ ULONG Flags, _In_ ULONG AppFlags, _In_opt_ ULONG Timeout, _Out_opt_ PHANDLE ProcessHandle)
 
PHAPPAPI VOID NTAPI PhInitializeTreeNewColumnMenu (_Inout_ PPH_TN_COLUMN_MENU_DATA Data)
 
PHAPPAPI BOOLEAN NTAPI PhHandleTreeNewColumnMenu (_Inout_ PPH_TN_COLUMN_MENU_DATA Data)
 
PHAPPAPI VOID NTAPI PhDeleteTreeNewColumnMenu (_In_ PPH_TN_COLUMN_MENU_DATA Data)
 
PHAPPAPI VOID NTAPI PhInitializeTreeNewFilterSupport (_Out_ PPH_TN_FILTER_SUPPORT Support, _In_ HWND TreeNewHandle, _In_ PPH_LIST NodeList)
 
PHAPPAPI VOID NTAPI PhDeleteTreeNewFilterSupport (_In_ PPH_TN_FILTER_SUPPORT Support)
 
PHAPPAPI PPH_TN_FILTER_ENTRY NTAPI PhAddTreeNewFilter (_In_ PPH_TN_FILTER_SUPPORT Support, _In_ PPH_TN_FILTER_FUNCTION Filter, _In_opt_ PVOID Context)
 
PHAPPAPI VOID NTAPI PhRemoveTreeNewFilter (_In_ PPH_TN_FILTER_SUPPORT Support, _In_ PPH_TN_FILTER_ENTRY Entry)
 
PHAPPAPI BOOLEAN NTAPI PhApplyTreeNewFiltersToNode (_In_ PPH_TN_FILTER_SUPPORT Support, _In_ PPH_TREENEW_NODE Node)
 
PHAPPAPI VOID NTAPI PhApplyTreeNewFilters (_In_ PPH_TN_FILTER_SUPPORT Support)
 
PHAPPAPI VOID NTAPI PhShowIconNotification (_In_ PWSTR Title, _In_ PWSTR Text, _In_ ULONG Flags)
 
PHAPPAPI
PPH_PROCESS_PROPCONTEXT NTAPI 
PhCreateProcessPropContext (_In_ HWND ParentWindowHandle, _In_ PPH_PROCESS_ITEM ProcessItem)
 
PHAPPAPI VOID NTAPI PhSetSelectThreadIdProcessPropContext (_Inout_ PPH_PROCESS_PROPCONTEXT PropContext, _In_ HANDLE ThreadId)
 
PHAPPAPI BOOLEAN NTAPI PhAddProcessPropPage (_Inout_ PPH_PROCESS_PROPCONTEXT PropContext, _In_ _Assume_refs_(1) PPH_PROCESS_PROPPAGECONTEXT PropPageContext)
 
PHAPPAPI BOOLEAN NTAPI PhAddProcessPropPage2 (_Inout_ PPH_PROCESS_PROPCONTEXT PropContext, _In_ HPROPSHEETPAGE PropSheetPageHandle)
 
PHAPPAPI
PPH_PROCESS_PROPPAGECONTEXT
NTAPI 
PhCreateProcessPropPageContext (_In_ LPCWSTR Template, _In_ DLGPROC DlgProc, _In_opt_ PVOID Context)
 
PHAPPAPI
PPH_PROCESS_PROPPAGECONTEXT
NTAPI 
PhCreateProcessPropPageContextEx (_In_opt_ PVOID InstanceHandle, _In_ LPCWSTR Template, _In_ DLGPROC DlgProc, _In_opt_ PVOID Context)
 
PHAPPAPI BOOLEAN NTAPI PhPropPageDlgProcHeader (_In_ HWND hwndDlg, _In_ UINT uMsg, _In_ LPARAM lParam, _Out_ LPPROPSHEETPAGE *PropSheetPage, _Out_ PPH_PROCESS_PROPPAGECONTEXT *PropPageContext, _Out_ PPH_PROCESS_ITEM *ProcessItem)
 
PHAPPAPI VOID NTAPI PhPropPageDlgProcDestroy (_In_ HWND hwndDlg)
 
PHAPPAPI PPH_LAYOUT_ITEM NTAPI PhAddPropPageLayoutItem (_In_ HWND hwnd, _In_ HWND Handle, _In_ PPH_LAYOUT_ITEM ParentItem, _In_ ULONG Anchor)
 
PHAPPAPI VOID NTAPI PhDoPropPageLayout (_In_ HWND hwnd)
 
FORCEINLINE PPH_LAYOUT_ITEM PhBeginPropPageLayout (_In_ HWND hwndDlg, _In_ PPH_PROCESS_PROPPAGECONTEXT PropPageContext)
 
FORCEINLINE VOID PhEndPropPageLayout (_In_ HWND hwndDlg, _In_ PPH_PROCESS_PROPPAGECONTEXT PropPageContext)
 
PHAPPAPI BOOLEAN NTAPI PhShowProcessProperties (_In_ PPH_PROCESS_PROPCONTEXT Context)
 
PHAPPAPI VOID NTAPI PhLogMessageEntry (_In_ UCHAR Type, _In_ PPH_STRING Message)
 
PHAPPAPI PPH_STRING NTAPI PhFormatLogEntry (_In_ PPH_LOG_ENTRY Entry)
 
PHAPPAPI BOOLEAN NTAPI PhUiConnectToPhSvc (_In_opt_ HWND hWnd, _In_ BOOLEAN ConnectOnly)
 Connects to phsvc.
 
PHAPPAPI BOOLEAN NTAPI PhUiConnectToPhSvcEx (_In_opt_ HWND hWnd, _In_ PH_PHSVC_MODE Mode, _In_ BOOLEAN ConnectOnly)
 Connects to phsvc.
 
PHAPPAPI VOID NTAPI PhUiDisconnectFromPhSvc (VOID)
 Disconnects from phsvc.
 
PHAPPAPI BOOLEAN NTAPI PhUiLockComputer (_In_ HWND hWnd)
 
PHAPPAPI BOOLEAN NTAPI PhUiLogoffComputer (_In_ HWND hWnd)
 
PHAPPAPI BOOLEAN NTAPI PhUiSleepComputer (_In_ HWND hWnd)
 
PHAPPAPI BOOLEAN NTAPI PhUiHibernateComputer (_In_ HWND hWnd)
 
PHAPPAPI BOOLEAN NTAPI PhUiRestartComputer (_In_ HWND hWnd, _In_ ULONG Flags)
 
PHAPPAPI BOOLEAN NTAPI PhUiShutdownComputer (_In_ HWND hWnd, _In_ ULONG Flags)
 
PHAPPAPI BOOLEAN NTAPI PhUiConnectSession (_In_ HWND hWnd, _In_ ULONG SessionId)
 
PHAPPAPI BOOLEAN NTAPI PhUiDisconnectSession (_In_ HWND hWnd, _In_ ULONG SessionId)
 
PHAPPAPI BOOLEAN NTAPI PhUiLogoffSession (_In_ HWND hWnd, _In_ ULONG SessionId)
 
PHAPPAPI BOOLEAN NTAPI PhUiTerminateProcesses (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM *Processes, _In_ ULONG NumberOfProcesses)
 
PHAPPAPI BOOLEAN NTAPI PhUiTerminateTreeProcess (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM Process)
 
PHAPPAPI BOOLEAN NTAPI PhUiSuspendProcesses (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM *Processes, _In_ ULONG NumberOfProcesses)
 
PHAPPAPI BOOLEAN NTAPI PhUiResumeProcesses (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM *Processes, _In_ ULONG NumberOfProcesses)
 
PHAPPAPI BOOLEAN NTAPI PhUiRestartProcess (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM Process)
 
PHAPPAPI BOOLEAN NTAPI PhUiDebugProcess (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM Process)
 
PHAPPAPI BOOLEAN NTAPI PhUiReduceWorkingSetProcesses (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM *Processes, _In_ ULONG NumberOfProcesses)
 
PHAPPAPI BOOLEAN NTAPI PhUiSetVirtualizationProcess (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM Process, _In_ BOOLEAN Enable)
 
PHAPPAPI BOOLEAN NTAPI PhUiDetachFromDebuggerProcess (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM Process)
 
PHAPPAPI BOOLEAN NTAPI PhUiInjectDllProcess (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM Process)
 
PHAPPAPI BOOLEAN NTAPI PhUiSetIoPriorityProcesses (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM *Processes, _In_ ULONG NumberOfProcesses, _In_ ULONG IoPriority)
 
PHAPPAPI BOOLEAN NTAPI PhUiSetPagePriorityProcess (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM Process, _In_ ULONG PagePriority)
 
PHAPPAPI BOOLEAN NTAPI PhUiSetPriorityProcesses (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM *Processes, _In_ ULONG NumberOfProcesses, _In_ ULONG PriorityClass)
 
PHAPPAPI BOOLEAN NTAPI PhUiSetDepStatusProcess (_In_ HWND hWnd, _In_ PPH_PROCESS_ITEM Process)
 
PHAPPAPI BOOLEAN NTAPI PhUiStartService (_In_ HWND hWnd, _In_ PPH_SERVICE_ITEM Service)
 
PHAPPAPI BOOLEAN NTAPI PhUiContinueService (_In_ HWND hWnd, _In_ PPH_SERVICE_ITEM Service)
 
PHAPPAPI BOOLEAN NTAPI PhUiPauseService (_In_ HWND hWnd, _In_ PPH_SERVICE_ITEM Service)
 
PHAPPAPI BOOLEAN NTAPI PhUiStopService (_In_ HWND hWnd, _In_ PPH_SERVICE_ITEM Service)
 
PHAPPAPI BOOLEAN NTAPI PhUiDeleteService (_In_ HWND hWnd, _In_ PPH_SERVICE_ITEM Service)
 
PHAPPAPI BOOLEAN NTAPI PhUiCloseConnections (_In_ HWND hWnd, _In_ PPH_NETWORK_ITEM *Connections, _In_ ULONG NumberOfConnections)
 
PHAPPAPI BOOLEAN NTAPI PhUiTerminateThreads (_In_ HWND hWnd, _In_ PPH_THREAD_ITEM *Threads, _In_ ULONG NumberOfThreads)
 
PHAPPAPI BOOLEAN NTAPI PhUiForceTerminateThreads (_In_ HWND hWnd, _In_ HANDLE ProcessId, _In_ PPH_THREAD_ITEM *Threads, _In_ ULONG NumberOfThreads)
 
PHAPPAPI BOOLEAN NTAPI PhUiSuspendThreads (_In_ HWND hWnd, _In_ PPH_THREAD_ITEM *Threads, _In_ ULONG NumberOfThreads)
 
PHAPPAPI BOOLEAN NTAPI PhUiResumeThreads (_In_ HWND hWnd, _In_ PPH_THREAD_ITEM *Threads, _In_ ULONG NumberOfThreads)
 
PHAPPAPI BOOLEAN NTAPI PhUiSetPriorityThread (_In_ HWND hWnd, _In_ PPH_THREAD_ITEM Thread, _In_ ULONG ThreadPriorityWin32)
 
PHAPPAPI BOOLEAN NTAPI PhUiSetIoPriorityThread (_In_ HWND hWnd, _In_ PPH_THREAD_ITEM Thread, _In_ ULONG IoPriority)
 
PHAPPAPI BOOLEAN NTAPI PhUiSetPagePriorityThread (_In_ HWND hWnd, _In_ PPH_THREAD_ITEM Thread, _In_ ULONG PagePriority)
 
PHAPPAPI BOOLEAN NTAPI PhUiUnloadModule (_In_ HWND hWnd, _In_ HANDLE ProcessId, _In_ PPH_MODULE_ITEM Module)
 
PHAPPAPI BOOLEAN NTAPI PhUiFreeMemory (_In_ HWND hWnd, _In_ HANDLE ProcessId, _In_ PPH_MEMORY_ITEM MemoryItem, _In_ BOOLEAN Free)
 
PHAPPAPI BOOLEAN NTAPI PhUiCloseHandles (_In_ HWND hWnd, _In_ HANDLE ProcessId, _In_ PPH_HANDLE_ITEM *Handles, _In_ ULONG NumberOfHandles, _In_ BOOLEAN Warn)
 
PHAPPAPI BOOLEAN NTAPI PhUiSetAttributesHandle (_In_ HWND hWnd, _In_ HANDLE ProcessId, _In_ PPH_HANDLE_ITEM Handle, _In_ ULONG Attributes)
 
PHAPPAPI BOOLEAN NTAPI PhShowProcessAffinityDialog2 (_In_ HWND ParentWindowHandle, _In_ ULONG_PTR AffinityMask, _Out_ PULONG_PTR NewAffinityMask)
 
PHAPPAPI BOOLEAN NTAPI PhaChoiceDialog (_In_ HWND ParentWindowHandle, _In_ PWSTR Title, _In_ PWSTR Message, _In_opt_ PWSTR *Choices, _In_opt_ ULONG NumberOfChoices, _In_opt_ PWSTR Option, _In_ ULONG Flags, _Inout_ PPH_STRING *SelectedChoice, _Inout_opt_ PBOOLEAN SelectedOption, _In_opt_ PWSTR SavedChoicesSettingName)
 Prompts the user for input.
 
PHAPPAPI BOOLEAN NTAPI PhShowChooseProcessDialog (_In_ HWND ParentWindowHandle, _In_ PWSTR Message, _Out_ PHANDLE ProcessId)
 
PHAPPAPI VOID NTAPI PhShowProcessRecordDialog (_In_ HWND ParentWindowHandle, _In_ PPH_PROCESS_RECORD Record)
 
PHAPPAPI NTSTATUS NTAPI PhExecuteRunAsCommand2 (_In_ HWND hWnd, _In_ PWSTR Program, _In_opt_ PWSTR UserName, _In_opt_ PWSTR Password, _In_opt_ ULONG LogonType, _In_opt_ HANDLE ProcessIdWithToken, _In_ ULONG SessionId, _In_ PWSTR DesktopName, _In_ BOOLEAN UseLinkedToken)
 Starts a program as another user.
 
PHAPPAPI HWND NTAPI PhCreateServiceListControl (_In_ HWND ParentWindowHandle, _In_ PPH_SERVICE_ITEM *Services, _In_ ULONG NumberOfServices)
 Creates a service list property page.
 
PHAPPAPI _May_raise_ ULONG NTAPI PhGetIntegerSetting (_In_ PWSTR Name)
 
PHAPPAPI _May_raise_
PH_INTEGER_PAIR NTAPI 
PhGetIntegerPairSetting (_In_ PWSTR Name)
 
PHAPPAPI _May_raise_
PPH_STRING NTAPI 
PhGetStringSetting (_In_ PWSTR Name)
 
PHAPPAPI _May_raise_ VOID NTAPI PhSetIntegerSetting (_In_ PWSTR Name, _In_ ULONG Value)
 
PHAPPAPI _May_raise_ VOID NTAPI PhSetIntegerPairSetting (_In_ PWSTR Name, _In_ PH_INTEGER_PAIR Value)
 
PHAPPAPI _May_raise_ VOID NTAPI PhSetStringSetting (_In_ PWSTR Name, _In_ PWSTR Value)
 
PHAPPAPI _May_raise_ VOID NTAPI PhSetStringSetting2 (_In_ PWSTR Name, _In_ PPH_STRINGREF Value)
 
PHAPPAPI VOID NTAPI PhAddSettings (_In_ PPH_SETTING_CREATE Settings, _In_ ULONG NumberOfSettings)
 
PHAPPAPI VOID NTAPI PhSiSetColorsGraphDrawInfo (_Out_ PPH_GRAPH_DRAW_INFO DrawInfo, _In_ COLORREF Color1, _In_ COLORREF Color2)
 
 C_ASSERT (RTL_FIELD_SIZE(PH_PLUGIN_MENU_INFORMATION, u)==RTL_FIELD_SIZE(PH_PLUGIN_MENU_INFORMATION, u.DoNotUse))
 
PHAPPAPI PPH_PLUGIN NTAPI PhRegisterPlugin (_In_ PWSTR Name, _In_ PVOID DllBase, _Out_opt_ PPH_PLUGIN_INFORMATION *Information)
 Registers a plugin with the host.
 
PHAPPAPI PPH_PLUGIN NTAPI PhFindPlugin (_In_ PWSTR Name)
 Locates a plugin instance structure.
 
PHAPPAPI
PPH_PLUGIN_INFORMATION NTAPI 
PhGetPluginInformation (_In_ PPH_PLUGIN Plugin)
 Gets a pointer to a plugin's additional information block.
 
PHAPPAPI PPH_CALLBACK NTAPI PhGetPluginCallback (_In_ PPH_PLUGIN Plugin, _In_ PH_PLUGIN_CALLBACK Callback)
 Retrieves a pointer to a plugin callback.
 
PHAPPAPI PPH_CALLBACK NTAPI PhGetGeneralCallback (_In_ PH_GENERAL_CALLBACK Callback)
 Retrieves a pointer to a general callback.
 
PHAPPAPI ULONG NTAPI PhPluginReserveIds (_In_ ULONG Count)
 Reserves unique GUI identifiers.
 
PHAPPAPI ULONG_PTR NTAPI PhPluginAddMenuItem (_In_ PPH_PLUGIN Plugin, _In_ ULONG_PTR Location, _In_opt_ PWSTR InsertAfter, _In_ ULONG Id, _In_ PWSTR Text, _In_opt_ PVOID Context)
 Adds a menu item to the program's main menu.
 
PHAPPAPI VOID NTAPI PhPluginGetSystemStatistics (_Out_ PPH_PLUGIN_SYSTEM_STATISTICS Statistics)
 Retrieves current system statistics.
 
PHAPPAPI PPH_EMENU_ITEM NTAPI PhPluginCreateEMenuItem (_In_ PPH_PLUGIN Plugin, _In_ ULONG Flags, _In_ ULONG Id, _In_ PWSTR Text, _In_opt_ PVOID Context)
 Creates a menu item.
 
PHAPPAPI BOOLEAN NTAPI PhPluginAddMenuHook (_Inout_ PPH_PLUGIN_MENU_INFORMATION MenuInfo, _In_ PPH_PLUGIN Plugin, _In_opt_ PVOID Context)
 Adds a menu hook.
 
PHAPPAPI BOOLEAN NTAPI PhPluginAddTreeNewColumn (_In_ PPH_PLUGIN Plugin, _In_ PVOID CmData, _In_ PPH_TREENEW_COLUMN Column, _In_ ULONG SubId, _In_opt_ PVOID Context, _In_opt_ PPH_PLUGIN_TREENEW_SORT_FUNCTION SortFunction)
 Adds a column to a tree new control.
 
PHAPPAPI VOID NTAPI PhPluginSetObjectExtension (_In_ PPH_PLUGIN Plugin, _In_ PH_EM_OBJECT_TYPE ObjectType, _In_ ULONG ExtensionSize, _In_opt_ PPH_EM_OBJECT_CALLBACK CreateCallback, _In_opt_ PPH_EM_OBJECT_CALLBACK DeleteCallback)
 Sets the object extension size and callbacks for an object type.
 
PHAPPAPI PVOID NTAPI PhPluginGetObjectExtension (_In_ PPH_PLUGIN Plugin, _In_ PVOID Object, _In_ PH_EM_OBJECT_TYPE ObjectType)
 Gets the object extension for an object.
 
PHAPPAPI struct _PH_NF_ICON *NTAPI PhPluginRegisterIcon (_In_ PPH_PLUGIN Plugin, _In_ ULONG SubId, _In_opt_ PVOID Context, _In_ PWSTR Text, _In_ ULONG Flags, _In_ struct _PH_NF_ICON_REGISTRATION_DATA *RegistrationData)
 Creates a notification icon.
 
PHAPPAPI VOID NTAPI PhPluginEnableTreeNewNotify (_In_ PPH_PLUGIN Plugin, _In_ PVOID CmData)
 Allows a plugin to receive all treenew messages, not just column-related ones.
 
PHAPPAPI BOOLEAN NTAPI PhPluginQueryPhSvc (_Out_ PPH_PLUGIN_PHSVC_CLIENT Client)
 
PHAPPAPI NTSTATUS NTAPI PhPluginCallPhSvc (_In_ PPH_PLUGIN Plugin, _In_ ULONG SubId, _In_reads_bytes_opt_(InLength) PVOID InBuffer, _In_ ULONG InLength, _Out_writes_bytes_opt_(OutLength) PVOID OutBuffer, _In_ ULONG OutLength)
 
PHLIBAPI NTSTATUS PhSvcCallChangeServiceConfig (_In_ PWSTR ServiceName, _In_ ULONG ServiceType, _In_ ULONG StartType, _In_ ULONG ErrorControl, _In_opt_ PWSTR BinaryPathName, _In_opt_ PWSTR LoadOrderGroup, _Out_opt_ PULONG TagId, _In_opt_ PWSTR Dependencies, _In_opt_ PWSTR ServiceStartName, _In_opt_ PWSTR Password, _In_opt_ PWSTR DisplayName)
 
PHLIBAPI NTSTATUS PhSvcCallChangeServiceConfig2 (_In_ PWSTR ServiceName, _In_ ULONG InfoLevel, _In_ PVOID Info)
 
PHLIBAPI NTSTATUS PhSvcCallPostMessage (_In_opt_ HWND hWnd, _In_ UINT Msg, _In_ WPARAM wParam, _In_ LPARAM lParam)
 
PHLIBAPI NTSTATUS PhSvcCallSendMessage (_In_opt_ HWND hWnd, _In_ UINT Msg, _In_ WPARAM wParam, _In_ LPARAM lParam)
 

Variables

PHAPPAPI PH_CALLBACK PhProcessAddedEvent
 
PHAPPAPI PH_CALLBACK PhProcessModifiedEvent
 
PHAPPAPI PH_CALLBACK PhProcessRemovedEvent
 
PHAPPAPI PH_CALLBACK PhProcessesUpdatedEvent
 
PHAPPAPI PH_CALLBACK PhServiceAddedEvent
 
PHAPPAPI PH_CALLBACK PhServiceModifiedEvent
 
PHAPPAPI PH_CALLBACK PhServiceRemovedEvent
 
PHAPPAPI PH_CALLBACK PhServicesUpdatedEvent
 
PHAPPAPI PH_CALLBACK PhNetworkItemAddedEvent
 
PHAPPAPI PH_CALLBACK PhNetworkItemModifiedEvent
 
PHAPPAPI PH_CALLBACK PhNetworkItemRemovedEvent
 
PHAPPAPI PH_CALLBACK PhNetworkItemsUpdatedEvent
 
PHAPPAPI HFONT PhApplicationFont
 
PHAPPAPI HWND PhMainWndHandle
 
PHAPPAPI PH_CALLBACK PhLoggedCallback
 

Macro Definition Documentation

#define DPCS_PROCESS_ID   ((HANDLE)(LONG_PTR)-2)

Definition at line 19 of file phapppub.h.

#define INTERRUPTS_PROCESS_ID   ((HANDLE)(LONG_PTR)-3)

Definition at line 20 of file phapppub.h.

#define PH_CHOICE_DIALOG_CHOICE   0x0

Definition at line 1938 of file phapppub.h.

#define PH_CHOICE_DIALOG_PASSWORD   0x2

Definition at line 1940 of file phapppub.h.

#define PH_CHOICE_DIALOG_SAVED_CHOICES   10

Definition at line 1936 of file phapppub.h.

#define PH_CHOICE_DIALOG_TYPE_MASK   0x3

Definition at line 1941 of file phapppub.h.

#define PH_CHOICE_DIALOG_USER_CHOICE   0x1

Definition at line 1939 of file phapppub.h.

#define PH_HANDLE_FILE_SHARED_DELETE   0x4

Definition at line 515 of file phapppub.h.

#define PH_HANDLE_FILE_SHARED_MASK   0x7

Definition at line 516 of file phapppub.h.

#define PH_HANDLE_FILE_SHARED_READ   0x1

Definition at line 513 of file phapppub.h.

#define PH_HANDLE_FILE_SHARED_WRITE   0x2

Definition at line 514 of file phapppub.h.

#define PH_IS_FAKE_PROCESS_ID (   ProcessId)    ((LONG_PTR)(ProcessId) < 0)

Definition at line 27 of file phapppub.h.

#define PH_IS_REAL_PROCESS_ID (   ProcessId)    ((LONG_PTR)(ProcessId) > 0)

Definition at line 24 of file phapppub.h.

#define PH_LOG_ENTRY_MESSAGE   9

Definition at line 1533 of file phapppub.h.

#define PH_MAINWND_CLASSNAME   L"ProcessHacker"

Definition at line 1271 of file phapppub.h.

#define PH_MENU_ITEM_LOCATION_TOOLS   2

Definition at line 2976 of file phapppub.h.

#define PH_MENU_ITEM_LOCATION_VIEW   1

Definition at line 2975 of file phapppub.h.

#define PH_MENU_ITEM_RETURN_MENU   0x40000000

Definition at line 2980 of file phapppub.h.

#define PH_MENU_ITEM_SUB_MENU   0x80000000

Definition at line 2979 of file phapppub.h.

#define PH_MENU_ITEM_VALID_FLAGS   0xc0000000

Definition at line 2981 of file phapppub.h.

#define PH_MINIINFO_SECTION_NO_UPPER_MARGINS   0x1

Definition at line 2381 of file phapppub.h.

#define PH_NETWORK_OWNER_INFO_SIZE   16

Definition at line 352 of file phapppub.h.

#define PH_NF_ICON_SHOW_MINIINFO   0x2

Definition at line 2098 of file phapppub.h.

#define PH_NF_ICON_UNAVAILABLE   0x1

Definition at line 2097 of file phapppub.h.

#define PH_NF_MSG_SHOWMINIINFOSECTION   (WM_APP + 1)

Definition at line 2088 of file phapppub.h.

#define PH_NF_UPDATE_DESTROY_RESOURCE   0x2

Definition at line 2068 of file phapppub.h.

#define PH_NF_UPDATE_IS_BITMAP   0x1

Definition at line 2067 of file phapppub.h.

#define PH_NOTIFY_MAXIMUM   0x40

Definition at line 1385 of file phapppub.h.

#define PH_NOTIFY_MINIMUM   0x1

Definition at line 1378 of file phapppub.h.

#define PH_NOTIFY_PROCESS_CREATE   0x1

Definition at line 1379 of file phapppub.h.

#define PH_NOTIFY_PROCESS_DELETE   0x2

Definition at line 1380 of file phapppub.h.

#define PH_NOTIFY_SERVICE_CREATE   0x4

Definition at line 1381 of file phapppub.h.

#define PH_NOTIFY_SERVICE_DELETE   0x8

Definition at line 1382 of file phapppub.h.

#define PH_NOTIFY_SERVICE_START   0x10

Definition at line 1383 of file phapppub.h.

#define PH_NOTIFY_SERVICE_STOP   0x20

Definition at line 1384 of file phapppub.h.

#define PH_NOTIFY_VALID_MASK   0x3f

Definition at line 1386 of file phapppub.h.

#define PH_PLUGIN_FLAG_RESERVED   0x1

Definition at line 2897 of file phapppub.h.

#define PH_PLUGIN_MENU_DISALLOW_HOOKS   0x1

Definition at line 2609 of file phapppub.h.

#define PH_PROCESS_ITEM_REMOVED   0x1

Definition at line 30 of file phapppub.h.

#define PH_PROCESS_RECORD_DEAD   0x1

Definition at line 167 of file phapppub.h.

#define PH_PROCESS_RECORD_STAT_REF   0x2

Definition at line 169 of file phapppub.h.

#define PH_PROP_PAGE_TAB_CONTROL_PARENT   ((PPH_LAYOUT_ITEM)0x1)

Definition at line 1478 of file phapppub.h.

#define PH_QUERY_MEMORY_IGNORE_FREE   0x1

Definition at line 660 of file phapppub.h.

#define PH_QUERY_MEMORY_REGION_TYPE   0x2

Definition at line 661 of file phapppub.h.

#define PH_QUERY_MEMORY_WS_COUNTERS   0x4

Definition at line 662 of file phapppub.h.

#define PH_SHELL_APP_PROPAGATE_PARAMETERS   0x1

Definition at line 1149 of file phapppub.h.

#define PH_SHELL_APP_PROPAGATE_PARAMETERS_FORCE_SETTINGS   0x4

Definition at line 1151 of file phapppub.h.

#define PH_SHELL_APP_PROPAGATE_PARAMETERS_IGNORE_VISIBILITY   0x2

Definition at line 1150 of file phapppub.h.

#define PH_TN_COLUMN_MENU_CHOOSE_COLUMNS_ID   ((ULONG)-2)

Definition at line 1179 of file phapppub.h.

#define PH_TN_COLUMN_MENU_HIDE_COLUMN_ID   ((ULONG)-1)

Definition at line 1178 of file phapppub.h.

#define PH_TN_COLUMN_MENU_RESET_SORT_ID   ((ULONG)-5)

Definition at line 1182 of file phapppub.h.

#define PH_TN_COLUMN_MENU_SIZE_ALL_COLUMNS_TO_FIT_ID   ((ULONG)-4)

Definition at line 1181 of file phapppub.h.

#define PH_TN_COLUMN_MENU_SIZE_COLUMN_TO_FIT_ID   ((ULONG)-3)

Definition at line 1180 of file phapppub.h.

#define PhaGetStringSetting (   Name)    ((PPH_STRING)PhAutoDereferenceObject(PhGetStringSetting(Name)))

Definition at line 2183 of file phapppub.h.

#define ProcessHacker_AddMenuItem (   hWnd,
  AddMenuItem 
)    ((ULONG_PTR)SendMessage(hWnd, WM_PH_ADD_MENU_ITEM, 0, (LPARAM)(AddMenuItem)))

Definition at line 1326 of file phapppub.h.

#define ProcessHacker_AddTabPage (   hWnd,
  TabPage 
)    ((PPH_ADDITIONAL_TAB_PAGE)SendMessage(hWnd, WM_PH_ADD_TAB_PAGE, 0, (LPARAM)(TabPage)))

Definition at line 1328 of file phapppub.h.

#define ProcessHacker_CancelEarlyShutdown (   hWnd)    SendMessage(hWnd, WM_PH_CANCEL_EARLY_SHUTDOWN, 0, 0)

Definition at line 1304 of file phapppub.h.

#define ProcessHacker_Destroy (   hWnd)    SendMessage(hWnd, WM_PH_DESTROY, 0, 0)

Definition at line 1298 of file phapppub.h.

#define ProcessHacker_GetCallbackLayoutPadding (   hWnd)    ((PPH_CALLBACK)SendMessage(hWnd, WM_PH_GET_CALLBACK_LAYOUT_PADDING, 0, 0))

Definition at line 1314 of file phapppub.h.

#define ProcessHacker_GetUpdateAutomatically (   hWnd)    ((BOOLEAN)SendMessage(hWnd, WM_PH_GET_UPDATE_AUTOMATICALLY, 0, 0))

Definition at line 1332 of file phapppub.h.

#define ProcessHacker_InvalidateLayoutPadding (   hWnd)    SendMessage(hWnd, WM_PH_INVALIDATE_LAYOUT_PADDING, 0, 0)

Definition at line 1316 of file phapppub.h.

#define ProcessHacker_Invoke (   hWnd,
  Function,
  Parameter 
)    PostMessage(hWnd, WM_PH_INVOKE, (WPARAM)(Parameter), (LPARAM)(Function))

Definition at line 1324 of file phapppub.h.

#define ProcessHacker_PrepareForEarlyShutdown (   hWnd)    SendMessage(hWnd, WM_PH_PREPARE_FOR_EARLY_SHUTDOWN, 0, 0)

Definition at line 1302 of file phapppub.h.

#define ProcessHacker_Refresh (   hWnd)    SendMessage(hWnd, WM_PH_REFRESH, 0, 0)

Definition at line 1330 of file phapppub.h.

#define ProcessHacker_SaveAllSettings (   hWnd)    SendMessage(hWnd, WM_PH_SAVE_ALL_SETTINGS, 0, 0)

Definition at line 1300 of file phapppub.h.

#define ProcessHacker_SelectNetworkItem (   hWnd,
  NetworkItem 
)    SendMessage(hWnd, WM_PH_SELECT_NETWORK_ITEM, 0, (LPARAM)(NetworkItem))

Definition at line 1322 of file phapppub.h.

#define ProcessHacker_SelectProcessNode (   hWnd,
  ProcessNode 
)    SendMessage(hWnd, WM_PH_SELECT_PROCESS_NODE, 0, (LPARAM)(ProcessNode))

Definition at line 1318 of file phapppub.h.

#define ProcessHacker_SelectServiceItem (   hWnd,
  ServiceItem 
)    SendMessage(hWnd, WM_PH_SELECT_SERVICE_ITEM, 0, (LPARAM)(ServiceItem))

Definition at line 1320 of file phapppub.h.

#define ProcessHacker_SelectTabPage (   hWnd,
  Index 
)    SendMessage(hWnd, WM_PH_SELECT_TAB_PAGE, (WPARAM)(Index), 0)

Definition at line 1312 of file phapppub.h.

#define ProcessHacker_SetUpdateAutomatically (   hWnd,
  Value 
)    SendMessage(hWnd, WM_PH_SET_UPDATE_AUTOMATICALLY, (WPARAM)(Value), 0)

Definition at line 1334 of file phapppub.h.

#define ProcessHacker_ShowMemoryEditor (   hWnd,
  ShowMemoryEditor 
)    PostMessage(hWnd, WM_PH_SHOW_MEMORY_EDITOR, 0, (LPARAM)(ShowMemoryEditor))

Definition at line 1308 of file phapppub.h.

#define ProcessHacker_ShowMemoryResults (   hWnd,
  ShowMemoryResults 
)    PostMessage(hWnd, WM_PH_SHOW_MEMORY_RESULTS, 0, (LPARAM)(ShowMemoryResults))

Definition at line 1310 of file phapppub.h.

#define ProcessHacker_ShowProcessProperties (   hWnd,
  ProcessItem 
)    SendMessage(hWnd, WM_PH_SHOW_PROCESS_PROPERTIES, 0, (LPARAM)(ProcessItem))

Definition at line 1296 of file phapppub.h.

#define ProcessHacker_ToggleVisible (   hWnd,
  AlwaysShow 
)    SendMessage(hWnd, WM_PH_TOGGLE_VISIBLE, (WPARAM)(AlwaysShow), 0)

Definition at line 1306 of file phapppub.h.

#define WM_PH_ADD_MENU_ITEM   (WM_APP + 139)

Definition at line 1290 of file phapppub.h.

#define WM_PH_ADD_TAB_PAGE   (WM_APP + 140)

Definition at line 1291 of file phapppub.h.

#define WM_PH_CANCEL_EARLY_SHUTDOWN   (WM_APP + 124)

Definition at line 1279 of file phapppub.h.

#define WM_PH_DESTROY   (WM_APP + 121)

Definition at line 1276 of file phapppub.h.

#define WM_PH_GET_CALLBACK_LAYOUT_PADDING   (WM_APP + 131)

Definition at line 1284 of file phapppub.h.

#define WM_PH_GET_UPDATE_AUTOMATICALLY   (WM_APP + 142)

Definition at line 1293 of file phapppub.h.

#define WM_PH_INVALIDATE_LAYOUT_PADDING   (WM_APP + 132)

Definition at line 1285 of file phapppub.h.

#define WM_PH_INVOKE   (WM_APP + 138)

Definition at line 1289 of file phapppub.h.

#define WM_PH_PREPARE_FOR_EARLY_SHUTDOWN   (WM_APP + 123)

Definition at line 1278 of file phapppub.h.

#define WM_PH_REFRESH   (WM_APP + 141)

Definition at line 1292 of file phapppub.h.

#define WM_PH_SAVE_ALL_SETTINGS   (WM_APP + 122)

Definition at line 1277 of file phapppub.h.

#define WM_PH_SELECT_NETWORK_ITEM   (WM_APP + 135)

Definition at line 1288 of file phapppub.h.

#define WM_PH_SELECT_PROCESS_NODE   (WM_APP + 133)

Definition at line 1286 of file phapppub.h.

#define WM_PH_SELECT_SERVICE_ITEM   (WM_APP + 134)

Definition at line 1287 of file phapppub.h.

#define WM_PH_SELECT_TAB_PAGE   (WM_APP + 130)

Definition at line 1283 of file phapppub.h.

#define WM_PH_SET_LIST_VIEW_SETTINGS   (WM_APP + 701)

Definition at line 1991 of file phapppub.h.

#define WM_PH_SET_UPDATE_AUTOMATICALLY   (WM_APP + 143)

Definition at line 1294 of file phapppub.h.

#define WM_PH_SHOW_MEMORY_EDITOR   (WM_APP + 128)

Definition at line 1281 of file phapppub.h.

#define WM_PH_SHOW_MEMORY_RESULTS   (WM_APP + 129)

Definition at line 1282 of file phapppub.h.

#define WM_PH_SHOW_PROCESS_PROPERTIES   (WM_APP + 120)

Definition at line 1275 of file phapppub.h.

#define WM_PH_TOGGLE_VISIBLE   (WM_APP + 127)

Definition at line 1280 of file phapppub.h.

Typedef Documentation

Definition at line 480 of file phapppub.h.

typedef struct _PH_NF_ICON PH_NF_ICON
typedef struct _PH_PLUGIN PH_PLUGIN
typedef struct _PH_SH_STATE PH_SH_STATE
typedef struct _PH_ADDMENUITEM * PPH_ADDMENUITEM
typedef LONG(NTAPI * PPH_CM_POST_SORT_FUNCTION)(_In_ LONG Result, _In_ PVOID Node1, _In_ PVOID Node2, _In_ PH_SORT_ORDER SortOrder)

Definition at line 677 of file phapppub.h.

typedef VOID(NTAPI * PPH_EM_OBJECT_CALLBACK)(_In_ PVOID Object, _In_ PH_EM_OBJECT_TYPE ObjectType, _In_ PVOID Extension)

Definition at line 2038 of file phapppub.h.

typedef struct _PH_EMENU_ITEM * PPH_EMENU

Definition at line 2607 of file phapppub.h.

typedef struct _PH_EMENU_ITEM* PPH_EMENU_ITEM

Definition at line 2607 of file phapppub.h.

typedef struct _PH_HANDLE_ITEM * PPH_HANDLE_ITEM
typedef struct _PH_HANDLE_NODE * PPH_HANDLE_NODE
typedef struct _PH_LOG_ENTRY* PPH_LOG_ENTRY

Definition at line 1535 of file phapppub.h.

typedef struct _PH_MEMORY_ITEM * PPH_MEMORY_ITEM
typedef struct _PH_MEMORY_NODE * PPH_MEMORY_NODE
typedef BOOLEAN(NTAPI * PPH_MESSAGE_LOOP_FILTER)(_In_ PMSG Message, _In_ PVOID Context)

Definition at line 944 of file phapppub.h.

typedef PPH_MINIINFO_LIST_SECTION(NTAPI * PPH_MINIINFO_CREATE_LIST_SECTION)(_In_ PWSTR Name, _In_ ULONG Flags, _In_ PPH_MINIINFO_LIST_SECTION Template)

Definition at line 2803 of file phapppub.h.

typedef PPH_MINIINFO_SECTION(NTAPI * PPH_MINIINFO_CREATE_SECTION)(_In_ PPH_MINIINFO_SECTION Template)

Definition at line 2795 of file phapppub.h.

typedef PPH_MINIINFO_SECTION(NTAPI * PPH_MINIINFO_FIND_SECTION)(_In_ PPH_STRINGREF Name)

Definition at line 2799 of file phapppub.h.

typedef BOOLEAN(NTAPI * PPH_MINIINFO_LIST_SECTION_CALLBACK)(_In_ struct _PH_MINIINFO_LIST_SECTION *ListSection, _In_ PH_MINIINFO_LIST_SECTION_MESSAGE Message, _In_opt_ PVOID Parameter1, _In_opt_ PVOID Parameter2)

Definition at line 2418 of file phapppub.h.

typedef BOOLEAN(NTAPI * PPH_MINIINFO_SECTION_CALLBACK)(_In_ struct _PH_MINIINFO_SECTION *Section, _In_ PH_MINIINFO_SECTION_MESSAGE Message, _In_opt_ PVOID Parameter1, _In_opt_ PVOID Parameter2)

Definition at line 2363 of file phapppub.h.

typedef VOID(NTAPI * PPH_MINIINFO_SET_SECTION_TEXT)(_In_ struct _PH_MINIINFO_SECTION *Section, _In_opt_ PPH_STRING Text)

Definition at line 2332 of file phapppub.h.

typedef struct _PH_MODULE_ITEM * PPH_MODULE_ITEM
typedef struct _PH_MODULE_NODE * PPH_MODULE_NODE
typedef VOID(NTAPI * PPH_NF_BEGIN_BITMAP)(_Out_ PULONG Width, _Out_ PULONG Height, _Out_ HBITMAP *Bitmap, _Out_opt_ PVOID *Bits, _Out_ HDC *Hdc, _Out_ HBITMAP *OldBitmap)

Definition at line 2052 of file phapppub.h.

typedef struct _PH_NF_ICON * PPH_NF_ICON
typedef BOOLEAN(NTAPI * PPH_NF_ICON_MESSAGE_CALLBACK)(_In_ struct _PH_NF_ICON *Icon, _In_ ULONG_PTR WParam, _In_ ULONG_PTR LParam, _In_opt_ PVOID Context)

Definition at line 2078 of file phapppub.h.

typedef VOID(NTAPI * PPH_NF_ICON_UPDATE_CALLBACK)(_In_ struct _PH_NF_ICON *Icon, _Out_ PVOID *NewIconOrBitmap, _Out_ PULONG Flags, _Out_ PPH_STRING *NewText, _In_opt_ PVOID Context)

Definition at line 2070 of file phapppub.h.

typedef struct _PH_NF_POINTERS * PPH_NF_POINTERS
typedef VOID(NTAPI * PPH_NF_UPDATE_REGISTERED_ICON)(_In_ struct _PH_NF_ICON *Icon)

Definition at line 2048 of file phapppub.h.

typedef struct _PH_PLUGIN * PPH_PLUGIN
typedef VOID(NTAPI * PPH_PLUGIN_MENU_ITEM_DELETE_FUNCTION)(_In_ struct _PH_PLUGIN_MENU_ITEM *MenuItem)

Definition at line 2957 of file phapppub.h.

typedef LONG(NTAPI * PPH_PLUGIN_TREENEW_SORT_FUNCTION)(_In_ PVOID Node1, _In_ PVOID Node2, _In_ ULONG SubId, _In_ PVOID Context)

Definition at line 2827 of file phapppub.h.

typedef BOOLEAN(NTAPI * PPH_PLUGIN_WALK_THREAD_STACK_CALLBACK)(_In_ PPH_THREAD_STACK_FRAME StackFrame, _In_opt_ PVOID Context)

Definition at line 2708 of file phapppub.h.

Definition at line 1397 of file phapppub.h.

Definition at line 33 of file phapppub.h.

typedef struct _PH_SH_STATE * PPH_SH_STATE

Definition at line 926 of file phapppub.h.

typedef VOID(NTAPI * PPH_SYSINFO_COLOR_SETUP_FUNCTION)(_Out_ PPH_GRAPH_DRAW_INFO DrawInfo, _In_ COLORREF Color1, _In_ COLORREF Color2)

Definition at line 2212 of file phapppub.h.

typedef PPH_SYSINFO_SECTION(NTAPI * PPH_SYSINFO_CREATE_SECTION)(_In_ PPH_SYSINFO_SECTION Template)

Definition at line 2770 of file phapppub.h.

typedef VOID(NTAPI * PPH_SYSINFO_ENTER_SECTION_VIEW)(_In_ PPH_SYSINFO_SECTION NewSection)

Definition at line 2778 of file phapppub.h.

typedef PPH_SYSINFO_SECTION(NTAPI * PPH_SYSINFO_FIND_SECTION)(_In_ PPH_STRINGREF Name)

Definition at line 2774 of file phapppub.h.

typedef VOID(NTAPI * PPH_SYSINFO_RESTORE_SUMMARY_VIEW)(VOID)

Definition at line 2782 of file phapppub.h.

typedef BOOLEAN(NTAPI * PPH_SYSINFO_SECTION_CALLBACK)(_In_ struct _PH_SYSINFO_SECTION *Section, _In_ PH_SYSINFO_SECTION_MESSAGE Message, _In_opt_ PVOID Parameter1, _In_opt_ PVOID Parameter2)

Definition at line 2252 of file phapppub.h.

typedef VOID(NTAPI * PPH_TAB_PAGE_CALLBACK_FUNCTION)(_In_ PVOID Parameter1, _In_ PVOID Parameter2, _In_ PVOID Parameter3, _In_ PVOID Context)

Definition at line 1357 of file phapppub.h.

typedef HWND(NTAPI * PPH_TAB_PAGE_CREATE_FUNCTION)(_In_ PVOID Context)

Definition at line 1353 of file phapppub.h.

typedef struct _PH_THREAD_ITEM * PPH_THREAD_ITEM
typedef struct _PH_THREAD_NODE * PPH_THREAD_NODE

Definition at line 2706 of file phapppub.h.

typedef BOOLEAN(NTAPI * PPH_TN_FILTER_FUNCTION)(_In_ PPH_TREENEW_NODE Node, _In_opt_ PVOID Context)

Definition at line 1212 of file phapppub.h.

typedef PVOID(NTAPI * PPHSVC_CLIENT_CREATE_STRING)(_In_opt_ PVOID String, _In_ SIZE_T Length, _Out_ PPH_RELATIVE_STRINGREF StringRef)

Definition at line 2871 of file phapppub.h.

typedef VOID(NTAPI * PPHSVC_CLIENT_FREE_HEAP)(_In_ PVOID Memory)

Definition at line 2867 of file phapppub.h.

typedef NTSTATUS(NTAPI * PPHSVC_SERVER_CAPTURE_BUFFER)(_In_ PPH_RELATIVE_STRINGREF String, _In_ BOOLEAN AllowNull, _Out_ PVOID *CapturedBuffer)

Definition at line 2841 of file phapppub.h.

typedef NTSTATUS(NTAPI * PPHSVC_SERVER_CAPTURE_STRING)(_In_ PPH_RELATIVE_STRINGREF String, _In_ BOOLEAN AllowNull, _Out_ PPH_STRING *CapturedString)

Definition at line 2847 of file phapppub.h.

typedef NTSTATUS(NTAPI * PPHSVC_SERVER_PROBE_BUFFER)(_In_ PPH_RELATIVE_STRINGREF String, _In_ ULONG Alignment, _In_ BOOLEAN AllowNull, _Out_ PVOID *Pointer)

Definition at line 2834 of file phapppub.h.

Definition at line 32 of file phapppub.h.

Enumeration Type Documentation

Enumerator:
EmObjectCreate 
EmObjectDelete 
EmMaximumObjectOperation 
EmObjectCreate 
EmObjectDelete 
EmMaximumObjectOperation 

Definition at line 2031 of file phapppub.h.

Enumerator:
EmProcessItemType 
EmProcessNodeType 
EmServiceItemType 
EmServiceNodeType 
EmNetworkItemType 
EmNetworkNodeType 
EmThreadItemType 
EmThreadNodeType 
EmModuleItemType 
EmModuleNodeType 
EmHandleItemType 
EmHandleNodeType 
EmThreadsContextType 
EmModulesContextType 
EmHandlesContextType 
EmThreadProviderType 
EmModuleProviderType 
EmHandleProviderType 
EmMemoryNodeType 
EmMemoryContextType 
EmMaximumObjectType 
EmProcessItemType 
EmProcessNodeType 
EmServiceItemType 
EmServiceNodeType 
EmNetworkItemType 
EmNetworkNodeType 
EmThreadItemType 
EmThreadNodeType 
EmModuleItemType 
EmModuleNodeType 
EmHandleItemType 
EmHandleNodeType 
EmThreadsContextType 
EmModulesContextType 
EmHandlesContextType 
EmThreadProviderType 
EmModuleProviderType 
EmHandleProviderType 
EmMemoryNodeType 
EmMemoryContextType 
EmMaximumObjectType 

Definition at line 2006 of file phapppub.h.

Enumerator:
GeneralCallbackMainWindowShowing 
GeneralCallbackProcessesUpdated 
GeneralCallbackGetProcessHighlightingColor 
GeneralCallbackGetProcessTooltipText 
GeneralCallbackProcessPropertiesInitializing 
GeneralCallbackMainMenuInitializing 
GeneralCallbackNotifyEvent 
GeneralCallbackServicePropertiesInitializing 
GeneralCallbackHandlePropertiesInitializing 
GeneralCallbackProcessMenuInitializing 
GeneralCallbackServiceMenuInitializing 
GeneralCallbackNetworkMenuInitializing 
GeneralCallbackIconMenuInitializing 
GeneralCallbackThreadMenuInitializing 
GeneralCallbackModuleMenuInitializing 
GeneralCallbackMemoryMenuInitializing 
GeneralCallbackHandleMenuInitializing 
GeneralCallbackProcessTreeNewInitializing 
GeneralCallbackServiceTreeNewInitializing 
GeneralCallbackNetworkTreeNewInitializing 
GeneralCallbackModuleTreeNewInitializing 
GeneralCallbackModuleTreeNewUninitializing 
GeneralCallbackThreadTreeNewInitializing 
GeneralCallbackThreadTreeNewUninitializing 
GeneralCallbackHandleTreeNewInitializing 
GeneralCallbackHandleTreeNewUninitializing 
GeneralCallbackThreadStackControl 
GeneralCallbackSystemInformationInitializing 
GeneralCallbackMainWindowTabChanged 
GeneralCallbackMemoryTreeNewInitializing 
GeneralCallbackMemoryTreeNewUninitializing 
GeneralCallbackMemoryItemListControl 
GeneralCallbackMiniInformationInitializing 
GeneralCallbackMiListSectionMenuInitializing 
GeneralCallbackMaximum 
GeneralCallbackMainWindowShowing 
GeneralCallbackProcessesUpdated 
GeneralCallbackGetProcessHighlightingColor 
GeneralCallbackGetProcessTooltipText 
GeneralCallbackProcessPropertiesInitializing 
GeneralCallbackMainMenuInitializing 
GeneralCallbackNotifyEvent 
GeneralCallbackServicePropertiesInitializing 
GeneralCallbackHandlePropertiesInitializing 
GeneralCallbackProcessMenuInitializing 
GeneralCallbackServiceMenuInitializing 
GeneralCallbackNetworkMenuInitializing 
GeneralCallbackIconMenuInitializing 
GeneralCallbackThreadMenuInitializing 
GeneralCallbackModuleMenuInitializing 
GeneralCallbackMemoryMenuInitializing 
GeneralCallbackHandleMenuInitializing 
GeneralCallbackProcessTreeNewInitializing 
GeneralCallbackServiceTreeNewInitializing 
GeneralCallbackNetworkTreeNewInitializing 
GeneralCallbackModuleTreeNewInitializing 
GeneralCallbackModuleTreeNewUninitializing 
GeneralCallbackThreadTreeNewInitializing 
GeneralCallbackThreadTreeNewUninitializing 
GeneralCallbackHandleTreeNewInitializing 
GeneralCallbackHandleTreeNewUninitializing 
GeneralCallbackThreadStackControl 
GeneralCallbackSystemInformationInitializing 
GeneralCallbackMainWindowTabChanged 
GeneralCallbackMemoryTreeNewInitializing 
GeneralCallbackMemoryTreeNewUninitializing 
GeneralCallbackMemoryItemListControl 
GeneralCallbackMiniInformationInitializing 
GeneralCallbackMiListSectionMenuInitializing 
GeneralCallbackMaximum 

Definition at line 2500 of file phapppub.h.

Enumerator:
UnknownProcessType 
SystemProcessType 
SessionManagerProcessType 
WindowsSubsystemProcessType 
WindowsStartupProcessType 
ServiceControlManagerProcessType 
LocalSecurityAuthorityProcessType 
LocalSessionManagerProcessType 
WindowsLogonProcessType 
ServiceHostProcessType 
RunDllAsAppProcessType 
ComSurrogateProcessType 
TaskHostProcessType 
ExplorerProcessType 
UmdfHostProcessType 
MaximumProcessType 
KnownProcessTypeMask 
KnownProcessWow64 
UnknownProcessType 
SystemProcessType 
SessionManagerProcessType 
WindowsSubsystemProcessType 
WindowsStartupProcessType 
ServiceControlManagerProcessType 
LocalSecurityAuthorityProcessType 
LocalSessionManagerProcessType 
WindowsLogonProcessType 
ServiceHostProcessType 
RunDllAsAppProcessType 
ComSurrogateProcessType 
TaskHostProcessType 
ExplorerProcessType 
UmdfHostProcessType 
MaximumProcessType 
KnownProcessTypeMask 
KnownProcessWow64 

Definition at line 977 of file phapppub.h.

Enumerator:
UnknownRegion 
CustomRegion 
UnusableRegion 
MappedFileRegion 
UserSharedDataRegion 
PebRegion 
Peb32Region 
TebRegion 
Teb32Region 
StackRegion 
Stack32Region 
HeapRegion 
Heap32Region 
HeapSegmentRegion 
HeapSegment32Region 
UnknownRegion 
CustomRegion 
UnusableRegion 
MappedFileRegion 
UserSharedDataRegion 
PebRegion 
Peb32Region 
TebRegion 
Teb32Region 
StackRegion 
Stack32Region 
HeapRegion 
Heap32Region 
HeapSegmentRegion 
HeapSegment32Region 

Definition at line 556 of file phapppub.h.

Enumerator:
MiListSectionCreate 
MiListSectionDestroy 
MiListSectionTick 
MiListSectionShowing 
MiListSectionDialogCreated 
MiListSectionSortProcessList 
MiListSectionAssignSortData 
MiListSectionSortGroupList 
MiListSectionGetTitleText 
MiListSectionGetUsageText 
MiListSectionInitializeContextMenu 
MiListSectionHandleContextMenu 
MaxMiListSectionMessage 
MiListSectionCreate 
MiListSectionDestroy 
MiListSectionTick 
MiListSectionShowing 
MiListSectionDialogCreated 
MiListSectionSortProcessList 
MiListSectionAssignSortData 
MiListSectionSortGroupList 
MiListSectionGetTitleText 
MiListSectionGetUsageText 
MiListSectionInitializeContextMenu 
MiListSectionHandleContextMenu 
MaxMiListSectionMessage 

Definition at line 2401 of file phapppub.h.

Enumerator:
MiniInfoCreate 
MiniInfoDestroy 
MiniInfoTick 
MiniInfoSectionChanging 
MiniInfoShowing 
MiniInfoCreateDialog 
MaxMiniInfoMessage 
MiniInfoCreate 
MiniInfoDestroy 
MiniInfoTick 
MiniInfoSectionChanging 
MiniInfoShowing 
MiniInfoCreateDialog 
MaxMiniInfoMessage 

Definition at line 2352 of file phapppub.h.

Enumerator:
ElevatedPhSvcMode 
Wow64PhSvcMode 
ElevatedPhSvcMode 
Wow64PhSvcMode 

Definition at line 1554 of file phapppub.h.

Enumerator:
PluginCallbackLoad 
PluginCallbackUnload 
PluginCallbackShowOptions 
PluginCallbackMenuItem 
PluginCallbackTreeNewMessage 
PluginCallbackPhSvcRequest 
PluginCallbackMenuHook 
PluginCallbackMaximum 
PluginCallbackLoad 
PluginCallbackUnload 
PluginCallbackShowOptions 
PluginCallbackMenuItem 
PluginCallbackTreeNewMessage 
PluginCallbackPhSvcRequest 
PluginCallbackMenuHook 
PluginCallbackMaximum 

Definition at line 2539 of file phapppub.h.

Enumerator:
PluginMemoryItemListInitialized 
PluginMemoryItemListMaximum 
PluginMemoryItemListInitialized 
PluginMemoryItemListMaximum 

Definition at line 2751 of file phapppub.h.

Enumerator:
PluginThreadStackInitializing 
PluginThreadStackUninitializing 
PluginThreadStackResolveSymbol 
PluginThreadStackGetTooltip 
PluginThreadStackWalkStack 
PluginThreadStackBeginDefaultWalkStack 
PluginThreadStackEndDefaultWalkStack 
PluginThreadStackMaximum 
PluginThreadStackInitializing 
PluginThreadStackUninitializing 
PluginThreadStackResolveSymbol 
PluginThreadStackGetTooltip 
PluginThreadStackWalkStack 
PluginThreadStackBeginDefaultWalkStack 
PluginThreadStackEndDefaultWalkStack 
PluginThreadStackMaximum 

Definition at line 2693 of file phapppub.h.

Enumerator:
ServiceStarted 
ServiceContinued 
ServicePaused 
ServiceStopped 
ServiceStarted 
ServiceContinued 
ServicePaused 
ServiceStopped 

Definition at line 325 of file phapppub.h.

Enumerator:
StringSettingType 
IntegerSettingType 
IntegerPairSettingType 
StringSettingType 
IntegerSettingType 
IntegerPairSettingType 

Definition at line 2123 of file phapppub.h.

Enumerator:
SysInfoCreate 
SysInfoDestroy 
SysInfoTick 
SysInfoViewChanging 
SysInfoCreateDialog 
SysInfoGraphGetDrawInfo 
SysInfoGraphGetTooltipText 
SysInfoGraphDrawPanel 
MaxSysInfoMessage 
SysInfoCreate 
SysInfoDestroy 
SysInfoTick 
SysInfoViewChanging 
SysInfoCreateDialog 
SysInfoGraphGetDrawInfo 
SysInfoGraphGetTooltipText 
SysInfoGraphDrawPanel 
MaxSysInfoMessage 

Definition at line 2239 of file phapppub.h.

Enumerator:
SysInfoSummaryView 
SysInfoSectionView 
SysInfoSummaryView 
SysInfoSectionView 

Definition at line 2206 of file phapppub.h.

Function Documentation

C_ASSERT ( RTL_FIELD_SIZE(PH_PLUGIN_MENU_INFORMATION, u)  = =RTL_FIELD_SIZE(PH_PLUGIN_MENU_INFORMATION, u.DoNotUse))
PHAPPAPI BOOLEAN NTAPI PhaChoiceDialog ( _In_ HWND  ParentWindowHandle,
_In_ PWSTR  Title,
_In_ PWSTR  Message,
_In_opt_ PWSTR *  Choices,
_In_opt_ ULONG  NumberOfChoices,
_In_opt_ PWSTR  Option,
_In_ ULONG  Flags,
_Inout_ PPH_STRING SelectedChoice,
_Inout_opt_ PBOOLEAN  SelectedOption,
_In_opt_ PWSTR  SavedChoicesSettingName 
)

Prompts the user for input.

Remarks
If PH_CHOICE_DIALOG_PASSWORD is specified, the string returned in SelectedChoice is NOT auto-dereferenced.

Definition at line 55 of file chdlg.c.

PHAPPAPI BOOLEAN NTAPI PhAddProcessPropPage ( _Inout_ PPH_PROCESS_PROPCONTEXT  PropContext,
_In_ _Assume_refs_(1) PPH_PROCESS_PROPPAGECONTEXT  PropPageContext 
)

Definition at line 344 of file procprp.c.

PHAPPAPI BOOLEAN NTAPI PhAddProcessPropPage2 ( _Inout_ PPH_PROCESS_PROPCONTEXT  PropContext,
_In_ HPROPSHEETPAGE  PropSheetPageHandle 
)

Definition at line 371 of file procprp.c.

PHAPPAPI PPH_LAYOUT_ITEM NTAPI PhAddPropPageLayoutItem ( _In_ HWND  hwnd,
_In_ HWND  Handle,
_In_ PPH_LAYOUT_ITEM  ParentItem,
_In_ ULONG  Anchor 
)

Definition at line 506 of file procprp.c.

PHAPPAPI VOID NTAPI PhAddSettings ( _In_ PPH_SETTING_CREATE  Settings,
_In_ ULONG  NumberOfSettings 
)

Definition at line 1015 of file settings.c.

PHAPPAPI PPH_TN_FILTER_ENTRY NTAPI PhAddTreeNewFilter ( _In_ PPH_TN_FILTER_SUPPORT  Support,
_In_ PPH_TN_FILTER_FUNCTION  Filter,
_In_opt_ PVOID  Context 
)

Definition at line 1762 of file appsup.c.

PHAPPAPI BOOLEAN NTAPI PhaGetProcessKnownCommandLine ( _In_ PPH_STRING  CommandLine,
_In_ PH_KNOWN_PROCESS_TYPE  KnownProcessType,
_Out_ PPH_KNOWN_PROCESS_COMMAND_LINE  KnownCommandLine 
)

Definition at line 461 of file appsup.c.

PHAPPAPI VOID NTAPI PhApplyTreeNewFilters ( _In_ PPH_TN_FILTER_SUPPORT  Support)

Definition at line 1830 of file appsup.c.

PHAPPAPI BOOLEAN NTAPI PhApplyTreeNewFiltersToNode ( _In_ PPH_TN_FILTER_SUPPORT  Support,
_In_ PPH_TREENEW_NODE  Node 
)

Definition at line 1801 of file appsup.c.

FORCEINLINE PPH_LAYOUT_ITEM PhBeginPropPageLayout ( _In_ HWND  hwndDlg,
_In_ PPH_PROCESS_PROPPAGECONTEXT  PropPageContext 
)

Definition at line 1499 of file phapppub.h.

PHAPPAPI BOOLEAN NTAPI PhCmLoadSettings ( _In_ HWND  TreeNewHandle,
_In_ PPH_STRINGREF  Settings 
)

Definition at line 298 of file colmgr.c.

PHAPPAPI PPH_STRING NTAPI PhCmSaveSettings ( _In_ HWND  TreeNewHandle)

Definition at line 547 of file colmgr.c.

PHAPPAPI VOID NTAPI PhCopyListView ( _In_ HWND  ListViewHandle)

Definition at line 1030 of file appsup.c.

PHAPPAPI VOID NTAPI PhCopyListViewInfoTip ( _Inout_ LPNMLVGETINFOTIP  GetInfoTip,
_In_ PPH_STRINGREF  Tip 
)

Copies a string into a NMLVGETINFOTIP structure.

Parameters
GetInfoTipThe NMLVGETINFOTIP structure.
TipThe string to copy.
Remarks
The text is truncated if it is too long.

Definition at line 996 of file appsup.c.

PHAPPAPI PPH_PROCESS_PROPCONTEXT NTAPI PhCreateProcessPropContext ( _In_ HWND  ParentWindowHandle,
_In_ PPH_PROCESS_ITEM  ProcessItem 
)

Definition at line 60 of file procprp.c.

PHAPPAPI PPH_PROCESS_PROPPAGECONTEXT NTAPI PhCreateProcessPropPageContext ( _In_ LPCWSTR  Template,
_In_ DLGPROC  DlgProc,
_In_opt_ PVOID  Context 
)

Definition at line 386 of file procprp.c.

PHAPPAPI PPH_PROCESS_PROPPAGECONTEXT NTAPI PhCreateProcessPropPageContextEx ( _In_opt_ PVOID  InstanceHandle,
_In_ LPCWSTR  Template,
_In_ DLGPROC  DlgProc,
_In_opt_ PVOID  Context 
)

Definition at line 395 of file procprp.c.

PHAPPAPI HWND NTAPI PhCreateServiceListControl ( _In_ HWND  ParentWindowHandle,
_In_ PPH_SERVICE_ITEM Services,
_In_ ULONG  NumberOfServices 
)

Creates a service list property page.

Parameters
ParentWindowHandleThe parent of the service list.
ServicesAn array of service items. Each service item must have a reference that is transferred to this function. The array must be allocated using PhAllocate() and must not be freed by the caller; it will be freed automatically when no longer needed.
NumberOfServicesThe number of service items in Services.

Definition at line 61 of file srvctl.c.

PHAPPAPI VOID NTAPI PhDeleteMemoryItemList ( _In_ PPH_MEMORY_ITEM_LIST  List)

Definition at line 173 of file memprv.c.

PHAPPAPI VOID NTAPI PhDeleteTreeNewColumnMenu ( _In_ PPH_TN_COLUMN_MENU_DATA  Data)

Definition at line 1733 of file appsup.c.

PHAPPAPI VOID NTAPI PhDeleteTreeNewFilterSupport ( _In_ PPH_TN_FILTER_SUPPORT  Support)

Definition at line 1755 of file appsup.c.

PHAPPAPI VOID NTAPI PhDereferenceProcessRecord ( _In_ PPH_PROCESS_RECORD  ProcessRecord)

Definition at line 2621 of file procprv.c.

PHAPPAPI VOID NTAPI PhDeselectAllProcessNodes ( VOID  )

Definition at line 3038 of file proctree.c.

PHAPPAPI VOID NTAPI PhDeselectAllServiceNodes ( VOID  )

Definition at line 779 of file srvlist.c.

PHAPPAPI VOID NTAPI PhDoPropPageLayout ( _In_ HWND  hwnd)

Definition at line 570 of file procprp.c.

FORCEINLINE VOID PhEndPropPageLayout ( _In_ HWND  hwndDlg,
_In_ PPH_PROCESS_PROPPAGECONTEXT  PropPageContext 
)

Definition at line 1517 of file phapppub.h.

PHAPPAPI VOID NTAPI PhEnumProcessItems ( _Out_opt_ PPH_PROCESS_ITEM **  ProcessItems,
_Out_ PULONG  NumberOfProcessItems 
)

Enumerates the process items.

Parameters
ProcessItemsA variable which receives an array of pointers to process items. You must free the buffer with PhFree() when you no longer need it.
NumberOfProcessItemsA variable which receives the number of process items returned in ProcessItems.

Definition at line 584 of file procprv.c.

PHAPPAPI NTSTATUS NTAPI PhExecuteRunAsCommand2 ( _In_ HWND  hWnd,
_In_ PWSTR  Program,
_In_opt_ PWSTR  UserName,
_In_opt_ PWSTR  Password,
_In_opt_ ULONG  LogonType,
_In_opt_ HANDLE  ProcessIdWithToken,
_In_ ULONG  SessionId,
_In_ PWSTR  DesktopName,
_In_ BOOLEAN  UseLinkedToken 
)

Starts a program as another user.

Parameters
hWndA handle to the parent window.
ProgramThe command line of the program to start.
UserNameThe user to start the program as. The user name should be specified as: domain\name. This parameter can be NULL if ProcessIdWithToken is specified.
PasswordThe password for the specified user. If there is no password, specify an empty string. This parameter can be NULL if ProcessIdWithToken is specified.
LogonTypeThe logon type for the specified user. This parameter can be 0 if ProcessIdWithToken is specified.
ProcessIdWithTokenThe ID of a process from which to duplicate the token.
SessionIdThe ID of the session to run the program under.
DesktopNameThe window station and desktop to run the program under.
UseLinkedTokenUses the linked token if possible.
Return values
STATUS_CANCELLEDThe user cancelled the operation.
Remarks
This function will cause another instance of Process Hacker to be executed if the current security context does not have sufficient system access. This is done through a UAC elevation prompt.

Definition at line 921 of file runas.c.

PHAPPAPI VOID NTAPI PhExpandAllProcessNodes ( _In_ BOOLEAN  Expand)

Definition at line 3045 of file proctree.c.

PHAPPAPI PPH_NETWORK_NODE NTAPI PhFindNetworkNode ( _In_ PPH_NETWORK_ITEM  NetworkItem)

Definition at line 234 of file netlist.c.

PHAPPAPI PPH_PLUGIN NTAPI PhFindPlugin ( _In_ PWSTR  Name)

Locates a plugin instance structure.

Parameters
NameThe name of the plugin.
Returns
A plugin instance structure, or NULL if the plugin was not found.

Definition at line 526 of file plugin.c.

PHAPPAPI PPH_PROCESS_NODE NTAPI PhFindProcessNode ( _In_ HANDLE  ProcessId)

Definition at line 419 of file proctree.c.

PHAPPAPI PPH_PROCESS_RECORD NTAPI PhFindProcessRecord ( _In_opt_ HANDLE  ProcessId,
_In_ PLARGE_INTEGER  Time 
)

Finds a process record.

Parameters
ProcessIdThe ID of the process.
TimeA time in which the process was active.
Returns
The newest record older than Time, or NULL if the record could not be found. You must call PhDereferenceProcessRecord() when you no longer need the record.

Definition at line 2668 of file procprv.c.

PHAPPAPI PPH_SERVICE_NODE NTAPI PhFindServiceNode ( _In_ PPH_SERVICE_ITEM  ServiceItem)

Definition at line 233 of file srvlist.c.

PHAPPAPI PPH_STRING NTAPI PhFormatLogEntry ( _In_ PPH_LOG_ENTRY  Entry)

Definition at line 194 of file log.c.

PHAPPAPI PPH_STRING NTAPI PhGetClientIdName ( _In_ PCLIENT_ID  ClientId)

Definition at line 319 of file procprv.c.

PHAPPAPI PPH_STRING NTAPI PhGetClientIdNameEx ( _In_ PCLIENT_ID  ClientId,
_In_opt_ PPH_STRING  ProcessName 
)

Definition at line 341 of file procprv.c.

PHAPPAPI struct _PH_TN_FILTER_SUPPORT* NTAPI PhGetFilterSupportNetworkTreeList ( VOID  )
read

Definition at line 180 of file netlist.c.

PHAPPAPI struct _PH_TN_FILTER_SUPPORT* NTAPI PhGetFilterSupportProcessTreeList ( VOID  )
read

Definition at line 259 of file proctree.c.

PHAPPAPI struct _PH_TN_FILTER_SUPPORT* NTAPI PhGetFilterSupportServiceTreeList ( VOID  )
read

Definition at line 183 of file srvlist.c.

PHAPPAPI PPH_CALLBACK NTAPI PhGetGeneralCallback ( _In_ PH_GENERAL_CALLBACK  Callback)

Retrieves a pointer to a general callback.

Parameters
CallbackThe type of callback.
Remarks
The program invokes general callbacks for system-wide notifications.

Definition at line 602 of file plugin.c.

PHAPPAPI _May_raise_ PH_INTEGER_PAIR NTAPI PhGetIntegerPairSetting ( _In_ PWSTR  Name)

Definition at line 480 of file settings.c.

PHAPPAPI _May_raise_ ULONG NTAPI PhGetIntegerSetting ( _In_ PWSTR  Name)

Definition at line 449 of file settings.c.

PHAPPAPI BOOLEAN NTAPI PhGetListViewContextMenuPoint ( _In_ HWND  ListViewHandle,
_Out_ PPOINT  Point 
)

Definition at line 1079 of file appsup.c.

PHAPPAPI PPH_STRING NTAPI PhGetPhVersion ( VOID  )

Definition at line 1277 of file appsup.c.

PHAPPAPI VOID NTAPI PhGetPhVersionNumbers ( _Out_opt_ PULONG  MajorVersion,
_Out_opt_ PULONG  MinorVersion,
_Reserved_ PULONG  Reserved,
_Out_opt_ PULONG  RevisionNumber 
)

Definition at line 1290 of file appsup.c.

PHAPPAPI PPH_CALLBACK NTAPI PhGetPluginCallback ( _In_ PPH_PLUGIN  Plugin,
_In_ PH_PLUGIN_CALLBACK  Callback 
)

Retrieves a pointer to a plugin callback.

Parameters
PluginA plugin instance structure.
CallbackThe type of callback.
Remarks
The program invokes plugin callbacks for notifications specific to a plugin.

Definition at line 583 of file plugin.c.

PHAPPAPI PPH_PLUGIN_INFORMATION NTAPI PhGetPluginInformation ( _In_ PPH_PLUGIN  Plugin)

Gets a pointer to a plugin's additional information block.

Parameters
PluginThe plugin instance structure.
Returns
The plugin's additional information block.

Definition at line 567 of file plugin.c.

PHAPPAPI BOOLEAN NTAPI PhGetProcessIsSuspended ( _In_ PSYSTEM_PROCESS_INFORMATION  Process)

Determines whether a process is suspended.

Parameters
ProcessThe SYSTEM_PROCESS_INFORMATION structure of the process.

Definition at line 67 of file appsup.c.

PHAPPAPI NTSTATUS NTAPI PhGetProcessKnownType ( _In_ HANDLE  ProcessHandle,
_Out_ PH_KNOWN_PROCESS_TYPE KnownProcessType 
)

Determines the type of a process based on its image file name.

Parameters
ProcessHandleA handle to a process.
KnownProcessTypeA variable which receives the process type.

Definition at line 334 of file appsup.c.

PHAPPAPI PWSTR NTAPI PhGetProcessPriorityClassString ( _In_ ULONG  PriorityClass)

Definition at line 395 of file procprv.c.

PHAPPAPI PWSTR NTAPI PhGetProtocolTypeName ( _In_ ULONG  ProtocolType)

Definition at line 789 of file netprv.c.

PHAPPAPI PPH_PROCESS_ITEM NTAPI PhGetSelectedProcessItem ( VOID  )

Definition at line 2991 of file proctree.c.

PHAPPAPI VOID NTAPI PhGetSelectedProcessItems ( _Out_ PPH_PROCESS_ITEM **  Processes,
_Out_ PULONG  NumberOfProcesses 
)

Definition at line 3012 of file proctree.c.

PHAPPAPI PPH_SERVICE_ITEM NTAPI PhGetSelectedServiceItem ( VOID  )

Definition at line 732 of file srvlist.c.

PHAPPAPI VOID NTAPI PhGetSelectedServiceItems ( _Out_ PPH_SERVICE_ITEM **  Services,
_Out_ PULONG  NumberOfServices 
)

Definition at line 753 of file srvlist.c.

PHAPPAPI PH_SERVICE_CHANGE NTAPI PhGetServiceChange ( _In_ PPH_SERVICE_MODIFIED_DATA  Data)

Definition at line 245 of file srvprv.c.

PHAPPAPI BOOLEAN NTAPI PhGetStatisticsTime ( _In_opt_ PPH_PROCESS_ITEM  ProcessItem,
_In_ ULONG  Index,
_Out_ PLARGE_INTEGER  Time 
)

Retrieves a time value recorded by the statistics system.

Parameters
ProcessItemA process item to synchronize with, or NULL if no synchronization is necessary.
IndexThe history index.
TimeA variable which receives the time at Index.
Returns
TRUE if the function succeeded, otherwise FALSE if ProcessItem was specified and Index is too far into the past for that process item.

Definition at line 1707 of file procprv.c.

PHAPPAPI PPH_STRING NTAPI PhGetStatisticsTimeString ( _In_opt_ PPH_PROCESS_ITEM  ProcessItem,
_In_ ULONG  Index 
)

Definition at line 1743 of file procprv.c.

PHAPPAPI _May_raise_ PPH_STRING NTAPI PhGetStringSetting ( _In_ PWSTR  Name)

Definition at line 511 of file settings.c.

PHAPPAPI PWSTR NTAPI PhGetTcpStateName ( _In_ ULONG  State)

Definition at line 808 of file netprv.c.

PHAPPAPI PPH_STRING NTAPI PhGetThreadPriorityWin32String ( _In_ LONG  PriorityWin32)

Definition at line 666 of file thrdprv.c.

PHAPPAPI VOID PhHandleListViewNotifyForCopy ( _In_ LPARAM  lParam,
_In_ HWND  ListViewHandle 
)

Definition at line 1041 of file appsup.c.

PHAPPAPI BOOLEAN NTAPI PhHandleTreeNewColumnMenu ( _Inout_ PPH_TN_COLUMN_MENU_DATA  Data)

Definition at line 1667 of file appsup.c.

PHAPPAPI VOID NTAPI PhInitializeTreeNewColumnMenu ( _Inout_ PPH_TN_COLUMN_MENU_DATA  Data)

Definition at line 1521 of file appsup.c.

PHAPPAPI VOID NTAPI PhInitializeTreeNewFilterSupport ( _Out_ PPH_TN_FILTER_SUPPORT  Support,
_In_ HWND  TreeNewHandle,
_In_ PPH_LIST  NodeList 
)

Definition at line 1744 of file appsup.c.

PHAPPAPI VOID NTAPI PhInvalidateAllProcessNodes ( VOID  )

Definition at line 3067 of file proctree.c.

PHAPPAPI VOID NTAPI PhLoadListViewColumnsFromSetting ( _In_ PWSTR  Name,
_In_ HWND  ListViewHandle 
)

Definition at line 1253 of file appsup.c.

PHAPPAPI VOID NTAPI PhLoadSymbolProviderOptions ( _Inout_ PPH_SYMBOL_PROVIDER  SymbolProvider)

Definition at line 962 of file appsup.c.

PHAPPAPI VOID NTAPI PhLoadWindowPlacementFromSetting ( _In_opt_ PWSTR  PositionSettingName,
_In_opt_ PWSTR  SizeSettingName,
_In_ HWND  WindowHandle 
)

Definition at line 1165 of file appsup.c.

PHAPPAPI VOID NTAPI PhLogMessageEntry ( _In_ UCHAR  Type,
_In_ PPH_STRING  Message 
)

Definition at line 186 of file log.c.

PHAPPAPI PPH_MEMORY_ITEM NTAPI PhLookupMemoryItemList ( _In_ PPH_MEMORY_ITEM_LIST  List,
_In_ PVOID  Address 
)

Definition at line 191 of file memprv.c.

PHAPPAPI BOOLEAN NTAPI PhPluginAddMenuHook ( _Inout_ PPH_PLUGIN_MENU_INFORMATION  MenuInfo,
_In_ PPH_PLUGIN  Plugin,
_In_opt_ PVOID  Context 
)

Adds a menu hook.

Parameters
MenuInfoThe plugin menu information structure.
PluginA plugin instance structure.
ContextA user-defined value that is later accessible from the callback.
Remarks
The PluginCallbackMenuHook callback is invoked when any menu item from the menu is chosen.

Definition at line 802 of file plugin.c.

PHAPPAPI ULONG_PTR NTAPI PhPluginAddMenuItem ( _In_ PPH_PLUGIN  Plugin,
_In_ ULONG_PTR  Location,
_In_opt_ PWSTR  InsertAfter,
_In_ ULONG  Id,
_In_ PWSTR  Text,
_In_opt_ PVOID  Context 
)

Adds a menu item to the program's main menu.

This function is deprecated. Use GeneralCallbackMainMenuInitializing instead.

Parameters
PluginA plugin instance structure.
LocationA handle to the parent menu, or one of the following:
  • PH_MENU_ITEM_LOCATION_VIEW The "View" menu.
  • PH_MENU_ITEM_LOCATION_TOOLS The "Tools" menu.
InsertAfterThe text of the menu item to insert the new menu item after. The search is a case-insensitive prefix search that ignores prefix characters (ampersands).
IdAn identifier for the menu item. This should be unique within the plugin.
TextThe text of the menu item.
ContextA user-defined value for the menu item.
Returns
TRUE if the function succeeded, otherwise FALSE.
Remarks
The PluginCallbackMenuItem callback is invoked when the menu item is chosen, and the PH_PLUGIN_MENU_ITEM structure will contain the Id and Context values passed to this function.

Definition at line 656 of file plugin.c.

PHAPPAPI BOOLEAN NTAPI PhPluginAddTreeNewColumn ( _In_ PPH_PLUGIN  Plugin,
_In_ PVOID  CmData,
_In_ PPH_TREENEW_COLUMN  Column,
_In_ ULONG  SubId,
_In_opt_ PVOID  Context,
_In_opt_ PPH_PLUGIN_TREENEW_SORT_FUNCTION  SortFunction 
)

Adds a column to a tree new control.

Parameters
PluginA plugin instance structure.
CmDataThe CmData value from the PH_PLUGIN_TREENEW_INFORMATION structure.
ColumnThe column properties.
SubIdAn identifier for the column. This should be unique within the plugin.
ContextA user-defined value.
SortFunctionThe sort function for the column.

Definition at line 905 of file plugin.c.

PHAPPAPI NTSTATUS NTAPI PhPluginCallPhSvc ( _In_ PPH_PLUGIN  Plugin,
_In_ ULONG  SubId,
_In_reads_bytes_opt_(InLength) PVOID  InBuffer,
_In_ ULONG  InLength,
_Out_writes_bytes_opt_(OutLength) PVOID  OutBuffer,
_In_ ULONG  OutLength 
)

Definition at line 1032 of file plugin.c.

PHAPPAPI PPH_EMENU_ITEM NTAPI PhPluginCreateEMenuItem ( _In_ PPH_PLUGIN  Plugin,
_In_ ULONG  Flags,
_In_ ULONG  Id,
_In_ PWSTR  Text,
_In_opt_ PVOID  Context 
)

Creates a menu item.

Parameters
PluginA plugin instance structure.
FlagsA combination of flags.
IdAn identifier for the menu item. This should be unique within the plugin.
TextThe text of the menu item.
ContextA user-defined value for the menu item.
Returns
A menu item object. This can then be inserted into another menu using PhInsertEMenuItem().
Remarks
The PluginCallbackMenuItem callback is invoked when the menu item is chosen, and the PH_PLUGIN_MENU_ITEM structure will contain the Id and Context values passed to this function.

Definition at line 767 of file plugin.c.

PHAPPAPI VOID NTAPI PhPluginEnableTreeNewNotify ( _In_ PPH_PLUGIN  Plugin,
_In_ PVOID  CmData 
)

Allows a plugin to receive all treenew messages, not just column-related ones.

Parameters
PluginA plugin instance structure.
CmDataThe CmData value from the PH_PLUGIN_TREENEW_INFORMATION structure.

Definition at line 1010 of file plugin.c.

PHAPPAPI PVOID NTAPI PhPluginGetObjectExtension ( _In_ PPH_PLUGIN  Plugin,
_In_ PVOID  Object,
_In_ PH_EM_OBJECT_TYPE  ObjectType 
)

Gets the object extension for an object.

Parameters
PluginA plugin instance structure.
ObjectThe object.
ObjectTypeThe type of object for which an extension has been registered.

Definition at line 957 of file plugin.c.

PHAPPAPI VOID NTAPI PhPluginGetSystemStatistics ( _Out_ PPH_PLUGIN_SYSTEM_STATISTICS  Statistics)

Retrieves current system statistics.

Definition at line 691 of file plugin.c.

PHAPPAPI BOOLEAN NTAPI PhPluginQueryPhSvc ( _Out_ PPH_PLUGIN_PHSVC_CLIENT  Client)

Definition at line 1018 of file plugin.c.

PHAPPAPI struct _PH_NF_ICON* NTAPI PhPluginRegisterIcon ( _In_ PPH_PLUGIN  Plugin,
_In_ ULONG  SubId,
_In_opt_ PVOID  Context,
_In_ PWSTR  Text,
_In_ ULONG  Flags,
_In_ struct _PH_NF_ICON_REGISTRATION_DATA RegistrationData 
)
read

Creates a notification icon.

Parameters
PluginA plugin instance structure.
SubIdAn identifier for the column. This should be unique within the plugin.
ContextA user-defined value.
TextA string describing the notification icon.
FlagsA combination of flags.
  • PH_NF_ICON_UNAVAILABLE The notification icon is currently unavailable.
RegistrationDataA PH_NF_ICON_REGISTRATION_DATA structure that contains registration information.

Definition at line 983 of file plugin.c.

PHAPPAPI ULONG NTAPI PhPluginReserveIds ( _In_ ULONG  Count)

Reserves unique GUI identifiers.

Parameters
CountThe number of identifiers to reserve.
Returns
The start of the reserved range.
Remarks
The identifiers reserved by this function are guaranteed to be unique throughout the program.

Definition at line 622 of file plugin.c.

PHAPPAPI VOID NTAPI PhPluginSetObjectExtension ( _In_ PPH_PLUGIN  Plugin,
_In_ PH_EM_OBJECT_TYPE  ObjectType,
_In_ ULONG  ExtensionSize,
_In_opt_ PPH_EM_OBJECT_CALLBACK  CreateCallback,
_In_opt_ PPH_EM_OBJECT_CALLBACK  DeleteCallback 
)

Sets the object extension size and callbacks for an object type.

Parameters
PluginA plugin instance structure.
ObjectTypeThe type of object for which the extension is being registered.
ExtensionSizeThe size of the extension, in bytes.
CreateCallbackThe object creation callback.
DeleteCallbackThe object deletion callback.

Definition at line 933 of file plugin.c.

PHAPPAPI VOID NTAPI PhPropPageDlgProcDestroy ( _In_ HWND  hwndDlg)

Definition at line 499 of file procprp.c.

PHAPPAPI BOOLEAN NTAPI PhPropPageDlgProcHeader ( _In_ HWND  hwndDlg,
_In_ UINT  uMsg,
_In_ LPARAM  lParam,
_Out_ LPPROPSHEETPAGE *  PropSheetPage,
_Out_ PPH_PROCESS_PROPPAGECONTEXT PropPageContext,
_Out_ PPH_PROCESS_ITEM ProcessItem 
)

Definition at line 480 of file procprp.c.

PHAPPAPI NTSTATUS NTAPI PhQueryMemoryItemList ( _In_ HANDLE  ProcessId,
_In_ ULONG  Flags,
_Out_ PPH_MEMORY_ITEM_LIST  List 
)

Definition at line 637 of file memprv.c.

PHAPPAPI PPH_NETWORK_ITEM NTAPI PhReferenceNetworkItem ( _In_ ULONG  ProtocolType,
_In_ PPH_IP_ENDPOINT  LocalEndpoint,
_In_ PPH_IP_ENDPOINT  RemoteEndpoint,
_In_ HANDLE  ProcessId 
)

Definition at line 240 of file netprv.c.

PHAPPAPI PPH_PROCESS_ITEM NTAPI PhReferenceProcessItem ( _In_ HANDLE  ProcessId)

Finds and references a process item.

Parameters
ProcessIdThe process ID of the process item.
Returns
The found process item.

Definition at line 557 of file procprv.c.

PHAPPAPI PPH_PROCESS_ITEM NTAPI PhReferenceProcessItemForParent ( _In_ HANDLE  ParentProcessId,
_In_ HANDLE  ProcessId,
_In_ PLARGE_INTEGER  CreateTime 
)

Definition at line 2819 of file procprv.c.

PHAPPAPI PPH_PROCESS_ITEM NTAPI PhReferenceProcessItemForRecord ( _In_ PPH_PROCESS_RECORD  Record)

Definition at line 2847 of file procprv.c.

PHAPPAPI VOID NTAPI PhReferenceProcessRecord ( _In_ PPH_PROCESS_RECORD  ProcessRecord)

Definition at line 2596 of file procprv.c.

PHAPPAPI VOID NTAPI PhReferenceProcessRecordForStatistics ( _In_ PPH_PROCESS_RECORD  ProcessRecord)

Definition at line 2610 of file procprv.c.

PHAPPAPI BOOLEAN NTAPI PhReferenceProcessRecordSafe ( _In_ PPH_PROCESS_RECORD  ProcessRecord)

Definition at line 2603 of file procprv.c.

PHAPPAPI PPH_SERVICE_ITEM NTAPI PhReferenceServiceItem ( _In_ PWSTR  Name)

Definition at line 208 of file srvprv.c.

PHAPPAPI VOID NTAPI PhRegisterDialog ( _In_ HWND  DialogWindowHandle)

Definition at line 340 of file main.c.

PHAPPAPI struct _PH_MESSAGE_LOOP_FILTER_ENTRY* NTAPI PhRegisterMessageLoopFilter ( _In_ PPH_MESSAGE_LOOP_FILTER  Filter,
_In_opt_ PVOID  Context 
)
read

Definition at line 365 of file main.c.

PHAPPAPI PPH_PLUGIN NTAPI PhRegisterPlugin ( _In_ PWSTR  Name,
_In_ PVOID  DllBase,
_Out_opt_ PPH_PLUGIN_INFORMATION Information 
)

Registers a plugin with the host.

Parameters
NameA unique identifier for the plugin. The function fails if another plugin has already been registered with the same name. The name must only contain alphanumeric characters, spaces, dots and underscores.
DllBaseThe base address of the plugin DLL. This is passed to the DllMain function.
InformationA variable which receives a pointer to the plugin's additional information block. This should be filled in after the function returns.
Returns
A pointer to the plugin instance structure, or NULL if the function failed.

Definition at line 469 of file plugin.c.

PHAPPAPI VOID NTAPI PhRemoveTreeNewFilter ( _In_ PPH_TN_FILTER_SUPPORT  Support,
_In_ PPH_TN_FILTER_ENTRY  Entry 
)

Definition at line 1782 of file appsup.c.

PHAPPAPI VOID NTAPI PhSaveListViewColumnsToSetting ( _In_ PWSTR  Name,
_In_ HWND  ListViewHandle 
)

Definition at line 1265 of file appsup.c.

PHAPPAPI VOID NTAPI PhSaveWindowPlacementToSetting ( _In_opt_ PWSTR  PositionSettingName,
_In_opt_ PWSTR  SizeSettingName,
_In_ HWND  WindowHandle 
)

Definition at line 1227 of file appsup.c.

PHAPPAPI VOID NTAPI PhSearchOnlineString ( _In_ HWND  hWnd,
_In_ PWSTR  String 
)

Definition at line 884 of file appsup.c.

PHAPPAPI VOID NTAPI PhSelectAndEnsureVisibleProcessNode ( _In_ PPH_PROCESS_NODE  ProcessNode)

Definition at line 3090 of file proctree.c.

PHAPPAPI VOID NTAPI PhSelectAndEnsureVisibleServiceNode ( _In_ PPH_SERVICE_NODE  ServiceNode)

Definition at line 786 of file srvlist.c.

PHAPPAPI _May_raise_ VOID NTAPI PhSetIntegerPairSetting ( _In_ PWSTR  Name,
_In_ PH_INTEGER_PAIR  Value 
)

Definition at line 579 of file settings.c.

PHAPPAPI _May_raise_ VOID NTAPI PhSetIntegerSetting ( _In_ PWSTR  Name,
_In_ ULONG  Value 
)

Definition at line 554 of file settings.c.

PHAPPAPI VOID NTAPI PhSetSelectThreadIdProcessPropContext ( _Inout_ PPH_PROCESS_PROPCONTEXT  PropContext,
_In_ HANDLE  ThreadId 
)

Definition at line 134 of file procprp.c.

PHAPPAPI _May_raise_ VOID NTAPI PhSetStringSetting ( _In_ PWSTR  Name,
_In_ PWSTR  Value 
)

Definition at line 604 of file settings.c.

PHAPPAPI _May_raise_ VOID NTAPI PhSetStringSetting2 ( _In_ PWSTR  Name,
_In_ PPH_STRINGREF  Value 
)

Definition at line 630 of file settings.c.

PHAPPAPI VOID NTAPI PhShellExecuteUserString ( _In_ HWND  hWnd,
_In_ PWSTR  Setting,
_In_ PWSTR  String,
_In_ BOOLEAN  UseShellExecute,
_In_opt_ PWSTR  ErrorMessage 
)

Definition at line 892 of file appsup.c.

PHAPPAPI BOOLEAN NTAPI PhShellProcessHacker ( _In_opt_ HWND  hWnd,
_In_opt_ PWSTR  Parameters,
_In_ ULONG  ShowWindowType,
_In_ ULONG  Flags,
_In_ ULONG  AppFlags,
_In_opt_ ULONG  Timeout,
_Out_opt_ PHANDLE  ProcessHandle 
)

Definition at line 1344 of file appsup.c.

PHAPPAPI BOOLEAN NTAPI PhShowChooseProcessDialog ( _In_ HWND  ParentWindowHandle,
_In_ PWSTR  Message,
_Out_ PHANDLE  ProcessId 
)

Definition at line 43 of file chproc.c.

PHAPPAPI VOID NTAPI PhShowIconNotification ( _In_ PWSTR  Title,
_In_ PWSTR  Text,
_In_ ULONG  Flags 
)

Definition at line 3964 of file mainwnd.c.

PHAPPAPI BOOLEAN NTAPI PhShowProcessAffinityDialog2 ( _In_ HWND  ParentWindowHandle,
_In_ ULONG_PTR  AffinityMask,
_Out_ PULONG_PTR  NewAffinityMask 
)

Definition at line 69 of file affinity.c.

PHAPPAPI BOOLEAN NTAPI PhShowProcessProperties ( _In_ PPH_PROCESS_PROPCONTEXT  Context)

Definition at line 5581 of file procprp.c.

PHAPPAPI VOID NTAPI PhShowProcessRecordDialog ( _In_ HWND  ParentWindowHandle,
_In_ PPH_PROCESS_RECORD  Record 
)

Definition at line 38 of file procrec.c.

PHAPPAPI VOID NTAPI PhSiSetColorsGraphDrawInfo ( _Out_ PPH_GRAPH_DRAW_INFO  DrawInfo,
_In_ COLORREF  Color1,
_In_ COLORREF  Color2 
)

Definition at line 851 of file sysinfo.c.

PHLIBAPI NTSTATUS PhSvcCallChangeServiceConfig ( _In_ PWSTR  ServiceName,
_In_ ULONG  ServiceType,
_In_ ULONG  StartType,
_In_ ULONG  ErrorControl,
_In_opt_ PWSTR  BinaryPathName,
_In_opt_ PWSTR  LoadOrderGroup,
_Out_opt_ PULONG  TagId,
_In_opt_ PWSTR  Dependencies,
_In_opt_ PWSTR  ServiceStartName,
_In_opt_ PWSTR  Password,
_In_opt_ PWSTR  DisplayName 
)

Definition at line 527 of file clapi.c.

PHLIBAPI NTSTATUS PhSvcCallChangeServiceConfig2 ( _In_ PWSTR  ServiceName,
_In_ ULONG  InfoLevel,
_In_ PVOID  Info 
)

Definition at line 733 of file clapi.c.

PHLIBAPI NTSTATUS PhSvcCallPostMessage ( _In_opt_ HWND  hWnd,
_In_ UINT  Msg,
_In_ WPARAM  wParam,
_In_ LPARAM  lParam 
)

Definition at line 991 of file clapi.c.

PHLIBAPI NTSTATUS PhSvcCallSendMessage ( _In_opt_ HWND  hWnd,
_In_ UINT  Msg,
_In_ WPARAM  wParam,
_In_ LPARAM  lParam 
)

Definition at line 1012 of file clapi.c.

PHAPPAPI BOOLEAN NTAPI PhUiCloseConnections ( _In_ HWND  hWnd,
_In_ PPH_NETWORK_ITEM Connections,
_In_ ULONG  NumberOfConnections 
)

Definition at line 2392 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiCloseHandles ( _In_ HWND  hWnd,
_In_ HANDLE  ProcessId,
_In_ PPH_HANDLE_ITEM Handles,
_In_ ULONG  NumberOfHandles,
_In_ BOOLEAN  Warn 
)

Definition at line 3255 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiConnectSession ( _In_ HWND  hWnd,
_In_ ULONG  SessionId 
)

Definition at line 621 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiConnectToPhSvc ( _In_opt_ HWND  hWnd,
_In_ BOOLEAN  ConnectOnly 
)

Connects to phsvc.

Parameters
hWndThe window to display user interface components on.
ConnectOnlyTRUE to only try to connect to phsvc, otherwise FALSE to try to elevate and start phsvc if the initial connection attempt failed.

Definition at line 289 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiConnectToPhSvcEx ( _In_opt_ HWND  hWnd,
_In_ PH_PHSVC_MODE  Mode,
_In_ BOOLEAN  ConnectOnly 
)

Connects to phsvc.

Parameters
hWndThe window to display user interface components on.
ModeThe type of phsvc instance to connect to.
ConnectOnlyTRUE to only try to connect to phsvc, otherwise FALSE to try to elevate and start phsvc if the initial connection attempt failed.

Definition at line 398 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiContinueService ( _In_ HWND  hWnd,
_In_ PPH_SERVICE_ITEM  Service 
)

Definition at line 2171 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiDebugProcess ( _In_ HWND  hWnd,
_In_ PPH_PROCESS_ITEM  Process 
)

Definition at line 1417 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiDeleteService ( _In_ HWND  hWnd,
_In_ PPH_SERVICE_ITEM  Service 
)

Definition at line 2330 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiDetachFromDebuggerProcess ( _In_ HWND  hWnd,
_In_ PPH_PROCESS_ITEM  Process 
)

Definition at line 1622 of file actions.c.

PHAPPAPI VOID NTAPI PhUiDisconnectFromPhSvc ( VOID  )

Disconnects from phsvc.

Definition at line 493 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiDisconnectSession ( _In_ HWND  hWnd,
_In_ ULONG  SessionId 
)

Definition at line 676 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiForceTerminateThreads ( _In_ HWND  hWnd,
_In_ HANDLE  ProcessId,
_In_ PPH_THREAD_ITEM Threads,
_In_ ULONG  NumberOfThreads 
)

Definition at line 2616 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiFreeMemory ( _In_ HWND  hWnd,
_In_ HANDLE  ProcessId,
_In_ PPH_MEMORY_ITEM  MemoryItem,
_In_ BOOLEAN  Free 
)

Definition at line 3105 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiHibernateComputer ( _In_ HWND  hWnd)

Definition at line 550 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiInjectDllProcess ( _In_ HWND  hWnd,
_In_ PPH_PROCESS_ITEM  Process 
)

Definition at line 1677 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiLockComputer ( _In_ HWND  hWnd)

Definition at line 507 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiLogoffComputer ( _In_ HWND  hWnd)

Definition at line 519 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiLogoffSession ( _In_ HWND  hWnd,
_In_ ULONG  SessionId 
)

Definition at line 689 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiPauseService ( _In_ HWND  hWnd,
_In_ PPH_SERVICE_ITEM  Service 
)

Definition at line 2224 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiReduceWorkingSetProcesses ( _In_ HWND  hWnd,
_In_ PPH_PROCESS_ITEM Processes,
_In_ ULONG  NumberOfProcesses 
)

Definition at line 1515 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiRestartComputer ( _In_ HWND  hWnd,
_In_ ULONG  Flags 
)

Definition at line 569 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiRestartProcess ( _In_ HWND  hWnd,
_In_ PPH_PROCESS_ITEM  Process 
)

Definition at line 1302 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiResumeProcesses ( _In_ HWND  hWnd,
_In_ PPH_PROCESS_ITEM Processes,
_In_ ULONG  NumberOfProcesses 
)

Definition at line 1229 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiResumeThreads ( _In_ HWND  hWnd,
_In_ PPH_THREAD_ITEM Threads,
_In_ ULONG  NumberOfThreads 
)

Definition at line 2747 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiSetAttributesHandle ( _In_ HWND  hWnd,
_In_ HANDLE  ProcessId,
_In_ PPH_HANDLE_ITEM  Handle,
_In_ ULONG  Attributes 
)

Definition at line 3335 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiSetDepStatusProcess ( _In_ HWND  hWnd,
_In_ PPH_PROCESS_ITEM  Process 
)

Definition at line 1902 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiSetIoPriorityProcesses ( _In_ HWND  hWnd,
_In_ PPH_PROCESS_ITEM Processes,
_In_ ULONG  NumberOfProcesses,
_In_ ULONG  IoPriority 
)

Definition at line 1733 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiSetIoPriorityThread ( _In_ HWND  hWnd,
_In_ PPH_THREAD_ITEM  Thread,
_In_ ULONG  IoPriority 
)

Definition at line 2841 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiSetPagePriorityProcess ( _In_ HWND  hWnd,
_In_ PPH_PROCESS_ITEM  Process,
_In_ ULONG  PagePriority 
)

Definition at line 1799 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiSetPagePriorityThread ( _In_ HWND  hWnd,
_In_ PPH_THREAD_ITEM  Thread,
_In_ ULONG  PagePriority 
)

Definition at line 2895 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiSetPriorityProcesses ( _In_ HWND  hWnd,
_In_ PPH_PROCESS_ITEM Processes,
_In_ ULONG  NumberOfProcesses,
_In_ ULONG  PriorityClass 
)

Definition at line 1833 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiSetPriorityThread ( _In_ HWND  hWnd,
_In_ PPH_THREAD_ITEM  Thread,
_In_ ULONG  ThreadPriorityWin32 
)

Definition at line 2810 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiSetVirtualizationProcess ( _In_ HWND  hWnd,
_In_ PPH_PROCESS_ITEM  Process,
_In_ BOOLEAN  Enable 
)

Definition at line 1563 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiShutdownComputer ( _In_ HWND  hWnd,
_In_ ULONG  Flags 
)

Definition at line 591 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiSleepComputer ( _In_ HWND  hWnd)

Definition at line 531 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiStartService ( _In_ HWND  hWnd,
_In_ PPH_SERVICE_ITEM  Service 
)

Definition at line 2120 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiStopService ( _In_ HWND  hWnd,
_In_ PPH_SERVICE_ITEM  Service 
)

Definition at line 2277 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiSuspendProcesses ( _In_ HWND  hWnd,
_In_ PPH_PROCESS_ITEM Processes,
_In_ ULONG  NumberOfProcesses 
)

Definition at line 1156 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiSuspendThreads ( _In_ HWND  hWnd,
_In_ PPH_THREAD_ITEM Threads,
_In_ ULONG  NumberOfThreads 
)

Definition at line 2684 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiTerminateProcesses ( _In_ HWND  hWnd,
_In_ PPH_PROCESS_ITEM Processes,
_In_ ULONG  NumberOfProcesses 
)

Definition at line 971 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiTerminateThreads ( _In_ HWND  hWnd,
_In_ PPH_THREAD_ITEM Threads,
_In_ ULONG  NumberOfThreads 
)

Definition at line 2543 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiTerminateTreeProcess ( _In_ HWND  hWnd,
_In_ PPH_PROCESS_ITEM  Process 
)

Definition at line 1116 of file actions.c.

PHAPPAPI BOOLEAN NTAPI PhUiUnloadModule ( _In_ HWND  hWnd,
_In_ HANDLE  ProcessId,
_In_ PPH_MODULE_ITEM  Module 
)

Definition at line 2929 of file actions.c.

PHAPPAPI VOID NTAPI PhUnregisterDialog ( _In_ HWND  DialogWindowHandle)

Definition at line 350 of file main.c.

PHAPPAPI VOID NTAPI PhUnregisterMessageLoopFilter ( _In_ struct _PH_MESSAGE_LOOP_FILTER_ENTRY FilterEntry)

Definition at line 383 of file main.c.

PHAPPAPI VOID NTAPI PhUpdateProcessNode ( _In_ PPH_PROCESS_NODE  ProcessNode)

Definition at line 558 of file proctree.c.

PHAPPAPI VOID NTAPI PhUpdateServiceNode ( _In_ PPH_SERVICE_NODE  ServiceNode)

Definition at line 304 of file srvlist.c.

PHAPPAPI VOID NTAPI PhWritePhTextHeader ( _Inout_ PPH_FILE_STREAM  FileStream)

Definition at line 1305 of file appsup.c.

Variable Documentation

PHAPPAPI HFONT PhApplicationFont

Definition at line 66 of file main.c.

PHAPPAPI PH_CALLBACK PhLoggedCallback
PHAPPAPI HWND PhMainWndHandle

Definition at line 53 of file mainwnd.c.

PHAPPAPI PH_CALLBACK PhNetworkItemAddedEvent
PHAPPAPI PH_CALLBACK PhNetworkItemModifiedEvent
PHAPPAPI PH_CALLBACK PhNetworkItemRemovedEvent
PHAPPAPI PH_CALLBACK PhNetworkItemsUpdatedEvent
PHAPPAPI PH_CALLBACK PhProcessAddedEvent
PHAPPAPI PH_CALLBACK PhProcessesUpdatedEvent
PHAPPAPI PH_CALLBACK PhProcessModifiedEvent
PHAPPAPI PH_CALLBACK PhProcessRemovedEvent
PHAPPAPI PH_CALLBACK PhServiceAddedEvent
PHAPPAPI PH_CALLBACK PhServiceModifiedEvent
PHAPPAPI PH_CALLBACK PhServiceRemovedEvent
PHAPPAPI PH_CALLBACK PhServicesUpdatedEvent