#ifndef PH_APPSUP_H

#define PH_APPSUP_H

extern GUID XP_CONTEXT_GUID;

extern GUID VISTA_CONTEXT_GUID;

extern GUID WIN7_CONTEXT_GUID;

extern GUID WIN8_CONTEXT_GUID;

extern GUID WINBLUE_CONTEXT_GUID;

extern GUID WINTHRESHOLD_CONTEXT_GUID;

typedef struct PACKAGE_ID PACKAGE_ID;

PhGetProcessIsSuspended(

_In_ PSYSTEM_PROCESS_INFORMATION Process

);

NTSTATUS PhGetProcessSwitchContext(

_In_ HANDLE ProcessHandle,

_Out_ PGUID Guid

);

PPH_STRING PhGetProcessPackageFullName(

_In_ HANDLE ProcessHandle

);

PACKAGE_ID *PhPackageIdFromFullName(

_In_ PWSTR PackageFullName

);

PPH_STRING PhGetPackagePath(

_In_ PACKAGE_ID *PackageId

);

typedef enum _PH_KNOWN_PROCESS_TYPE

} PH_KNOWN_PROCESS_TYPE;

PhGetProcessKnownType(

_In_ HANDLE ProcessHandle,

_Out_ PH_KNOWN_PROCESS_TYPE *KnownProcessType

);

typedef union _PH_KNOWN_PROCESS_COMMAND_LINE

{

struct

{

PPH_STRING GroupName;

} ServiceHost;

struct

{

PPH_STRING FileName;

PPH_STRING ProcedureName;

} RunDllAsApp;

struct

{

GUID Guid;

PPH_STRING Name; // optional

PPH_STRING FileName; // optional

} ComSurrogate;

} PH_KNOWN_PROCESS_COMMAND_LINE, *PPH_KNOWN_PROCESS_COMMAND_LINE;

PhaGetProcessKnownCommandLine(

);

typedef BOOLEAN (CALLBACK *PH_CHILD_ENUM_CALLBACK)(

_In_ HWND WindowHandle,

_In_opt_ PVOID Context

);

VOID PhEnumChildWindows(

);

HWND PhGetProcessMainWindow(

_In_ HANDLE ProcessId,

_In_opt_ HANDLE ProcessHandle

);

HWND PhGetProcessMainWindowEx(

);

PPH_STRING PhGetServiceRelevantFileName(

_In_ PPH_STRINGREF ServiceName,

_In_ SC_HANDLE ServiceHandle

);

PPH_STRING PhEscapeStringForDelimiter(

_In_ PPH_STRING String,

_In_ WCHAR Delimiter

);

PPH_STRING PhUnescapeStringForDelimiter(

_In_ PPH_STRING String,

_In_ WCHAR Delimiter

);

PhSearchOnlineString(

_In_ HWND hWnd,

_In_ PWSTR String

);

PhShellExecuteUserString(

);

PhLoadSymbolProviderOptions(

_Inout_ PPH_SYMBOL_PROVIDER SymbolProvider

);

PWSTR PhMakeContextAtom(

VOID

);

PhCopyListViewInfoTip(

_Inout_ LPNMLVGETINFOTIP GetInfoTip,

_In_ PPH_STRINGREF Tip

);

PhCopyListView(

_In_ HWND ListViewHandle

);

PhHandleListViewNotifyForCopy(

_In_ LPARAM lParam,

_In_ HWND ListViewHandle

);

#define PH_LIST_VIEW_CTRL_C_BEHAVIOR 0x1

#define PH_LIST_VIEW_CTRL_A_BEHAVIOR 0x2

#define PH_LIST_VIEW_DEFAULT_1_BEHAVIORS (PH_LIST_VIEW_CTRL_C_BEHAVIOR | PH_LIST_VIEW_CTRL_A_BEHAVIOR)

VOID PhHandleListViewNotifyBehaviors(

);

PhGetListViewContextMenuPoint(

_In_ HWND ListViewHandle,

_Out_ PPOINT Point

);

VOID PhSetWindowOpacity(

_In_ HWND WindowHandle,

_In_ ULONG OpacityPercent

);

#define PH_OPACITY_TO_ID(Opacity) (ID_OPACITY_10 + (10 - (Opacity) / 10) - 1)

#define PH_ID_TO_OPACITY(Id) (100 - (((Id) - ID_OPACITY_10) + 1) * 10)

PhGetPhVersion(

VOID

);

PhGetPhVersionNumbers(

);

PhWritePhTextHeader(

_Inout_ PPH_FILE_STREAM FileStream

);

#define PH_SHELL_APP_PROPAGATE_PARAMETERS 0x1

#define PH_SHELL_APP_PROPAGATE_PARAMETERS_IGNORE_VISIBILITY 0x2

#define PH_SHELL_APP_PROPAGATE_PARAMETERS_FORCE_SETTINGS 0x4

PhShellProcessHacker(

);

BOOLEAN PhShellProcessHackerEx(

);

BOOLEAN PhCreateProcessIgnoreIfeoDebugger(

_In_ PWSTR FileName

);

typedef struct _PH_TN_COLUMN_MENU_DATA

} PH_TN_COLUMN_MENU_DATA, *PPH_TN_COLUMN_MENU_DATA;

#define PH_TN_COLUMN_MENU_HIDE_COLUMN_ID ((ULONG)-1)

#define PH_TN_COLUMN_MENU_CHOOSE_COLUMNS_ID ((ULONG)-2)

#define PH_TN_COLUMN_MENU_SIZE_COLUMN_TO_FIT_ID ((ULONG)-3)

#define PH_TN_COLUMN_MENU_SIZE_ALL_COLUMNS_TO_FIT_ID ((ULONG)-4)

#define PH_TN_COLUMN_MENU_RESET_SORT_ID ((ULONG)-5)

PhInitializeTreeNewColumnMenu(

_Inout_ PPH_TN_COLUMN_MENU_DATA Data

);

#define PH_TN_COLUMN_MENU_NO_VISIBILITY 0x1

#define PH_TN_COLUMN_MENU_SHOW_RESET_SORT 0x2

VOID PhInitializeTreeNewColumnMenuEx(

_Inout_ PPH_TN_COLUMN_MENU_DATA Data,

_In_ ULONG Flags

);

PhHandleTreeNewColumnMenu(

_Inout_ PPH_TN_COLUMN_MENU_DATA Data

);

PhDeleteTreeNewColumnMenu(

_In_ PPH_TN_COLUMN_MENU_DATA Data

);

typedef struct _PH_TN_FILTER_SUPPORT

} PH_TN_FILTER_SUPPORT, *PPH_TN_FILTER_SUPPORT;

typedef BOOLEAN (NTAPI *PPH_TN_FILTER_FUNCTION)(

_In_ PPH_TREENEW_NODE Node,

_In_opt_ PVOID Context

);

typedef struct _PH_TN_FILTER_ENTRY

} PH_TN_FILTER_ENTRY, *PPH_TN_FILTER_ENTRY;

PhInitializeTreeNewFilterSupport(

);

PhDeleteTreeNewFilterSupport(

_In_ PPH_TN_FILTER_SUPPORT Support

);

PhAddTreeNewFilter(

);

PhRemoveTreeNewFilter(

_In_ PPH_TN_FILTER_SUPPORT Support,

_In_ PPH_TN_FILTER_ENTRY Entry

);

PhApplyTreeNewFiltersToNode(

_In_ PPH_TN_FILTER_SUPPORT Support,

_In_ PPH_TREENEW_NODE Node

);

PhApplyTreeNewFilters(

_In_ PPH_TN_FILTER_SUPPORT Support

);

typedef struct _PH_COPY_CELL_CONTEXT

} PH_COPY_CELL_CONTEXT, *PPH_COPY_CELL_CONTEXT;

BOOLEAN PhInsertCopyCellEMenuItem(

);

BOOLEAN PhHandleCopyCellEMenuItem(

_In_ struct _PH_EMENU_ITEM *SelectedItem

);

BOOLEAN PhShellOpenKey2(

_In_ HWND hWnd,

_In_ PPH_STRING KeyName

);

PPH_STRING PhPcre2GetErrorMessage(

_In_ INT ErrorCode

);

#define PH_LOAD_SHARED_ICON_SMALL(BaseAddress, Name) PhLoadIcon(BaseAddress, (Name), PH_LOAD_ICON_SHARED | PH_LOAD_ICON_SIZE_SMALL, 0, 0) // phapppub

#define PH_LOAD_SHARED_ICON_LARGE(BaseAddress, Name) PhLoadIcon(BaseAddress, (Name), PH_LOAD_ICON_SHARED | PH_LOAD_ICON_SIZE_LARGE, 0, 0) // phapppub

FORCEINLINE PVOID PhpGenericPropertyPageHeader(

)

{

PVOID context;

switch (uMsg)

{

case WM_INITDIALOG:

{

LPPROPSHEETPAGE propSheetPage = (LPPROPSHEETPAGE)lParam;

context = (PVOID)propSheetPage->lParam;

SetProp(hwndDlg, ContextName, (HANDLE)context);

}

break;

case WM_DESTROY:

{

context = (PVOID)GetProp(hwndDlg, ContextName);

RemoveProp(hwndDlg, ContextName);

}

break;

default:

{

context = (PVOID)GetProp(hwndDlg, ContextName);

}

break;

}

return context;

}

#define SWP_NO_ACTIVATE_MOVE_SIZE_ZORDER (SWP_NOACTIVATE | SWP_NOMOVE | SWP_NOSIZE | SWP_NOZORDER)

#define SWP_SHOWWINDOW_ONLY (SWP_NO_ACTIVATE_MOVE_SIZE_ZORDER | SWP_SHOWWINDOW)

#define SWP_HIDEWINDOW_ONLY (SWP_NO_ACTIVATE_MOVE_SIZE_ZORDER | SWP_HIDEWINDOW)