Process Hacker Forums

Oooooooh yeah I do, actually; great question. It's XP's Royale theme on Windows 7 haha. That's probably why.

Is there any chance that the tree/list view component could become a component independent of the program at some point in the future? Why would I do that? You can create a separate version of it if you want. Yeah I could do that too -- was just asking because the naming convention and all starts w...

It's asking a lot, I know... but I thought I'd give it a try anyway. No point in not trying. :) Is there any chance that the tree/list view component could become a component independent of the program at some point in the future? I've been looking for a lightweight-but-completely-native-looking Tre...

I think loading the executable icons (and any such action, e.g. checking for packing, etc.) should be done in a dedicated thread with low-priority I/O. I haven't checked to see if this is currently the case, but I feel like it isn't... and doing so would improve startup times when the system is unde...

LOL ok

OMG, this is awesome. But IMHO, it should not be a plugin, but part of the actual program.

Seems like this is doing some magic! :D (Replace GetCurrentProcessId() and the device name with whatever you need.) #define _Field_size_(...) #define _Field_size_bytes_(...) #define _In_reads_bytes_opt_(...) #define _Out_writes_bytes_all_opt_(...) #define _Field_size_bytes_part_(...) #define _In_ran...

Seems like you need a name like the following:

:OOOOOOOO too excited right now.

Thanks a million for the file, I'll definitely post it here if I get it working before you guys!

WHOAAAAAAAAA HOLY COWWW

Wait so the file en_windows_developer_preview_sdk_wdk_x86_x64_734757 isn't available anymore?? Or is there a link where I can get it?

Ahh okok, makes complete sense. Thanks!

Because it can open anything without caring about the type. If I used anything else, I would have to do a bunch of directory creations operations to traverse the object's path, to figure out the object type (tedious and slower). And even then, I could be easily denied access because of e.g. not bein...

I was thinking about using KProcessHacker in my own program, but I realized I can't find the most critical feature I need: ObOpenObjectByName(). Is there an I/O control code to send this request? If not, how difficult would it be to add it? (I would do that myself, but then the driver wouldn't be si...

PH freezes while the Diskeeper service is being stopped.
Perhaps the stop should be done asynchronously?

Having a separate tab for performance information (i.e. System Information) would be helpful, since it would require one fewer click.

ooh wowww that's interesting... thanks for the info.

Thanks for the reply. :) Well, the problem isn't _reading_ the MFT itself, but rather doing so using a file handle to $MFT (as I mentioned originally). I already know how to bypass directly to the disk (like you mentioned), but the trouble is that this method doesn't cache the results, so the next r...

How difficult would it be to implement the displaying of GPU usage?

(I'm actually really curious how PE does this.)

wj32: Ah okay, thanks for the info.

dmex: I'm confused, where does the example actually _read_ the MFT?

This isn't related to PH directly, but I was wondering if you know whether it's possible to obtain a handle to the $MFT file (e.g. C:\$MFT) that has FILE_READ_DATA access? Getting handles with FILE_READ_ATTRIBUTE access is easy, but it seems like the file system blocks all other permissions. Do you ...

wj32 wrote:

wfunction wrote:

1. Yeah, I guess I want the feature that much.

Just in case you misread (or am I misreading?), the feature is already there.

Ooooooh yes indeed, I misread. Thanks a bunch!!

And thanks for the other two features as well!! PH is awesome