mirror of
https://github.com/mirror/processhacker
synced 2026-06-08 16:03:24 +00:00
wj32
2c3c8a402f
git-svn-id: svn://svn.code.sf.net/p/processhacker/code@1376 21ef857c-d57f-4fe0-8362-d861dc6d29cd
2757 lines
100 KiB
C#
2757 lines
100 KiB
C#
/*
|
|
* Process Hacker -
|
|
* main Process Hacker window
|
|
*
|
|
* Copyright (C) 2008 Dean
|
|
* Copyright (C) 2008-2009 wj32
|
|
*
|
|
* This file is part of Process Hacker.
|
|
*
|
|
* Process Hacker is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation, either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* Process Hacker is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with Process Hacker. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
using System;
|
|
using System.Collections.Generic;
|
|
using System.Diagnostics;
|
|
using System.Drawing;
|
|
using System.Runtime.InteropServices;
|
|
using System.Threading;
|
|
using System.Windows.Forms;
|
|
using Aga.Controls.Tree;
|
|
using ProcessHacker.Common;
|
|
using ProcessHacker.Components;
|
|
using ProcessHacker.Native;
|
|
using ProcessHacker.Native.Api;
|
|
using ProcessHacker.Native.Objects;
|
|
using ProcessHacker.Native.Security;
|
|
using ProcessHacker.UI;
|
|
using ProcessHacker.UI.Actions;
|
|
|
|
namespace ProcessHacker
|
|
{
|
|
public partial class HackerWindow : Form
|
|
{
|
|
public delegate void LogUpdatedEventHandler(KeyValuePair<DateTime, string>? value);
|
|
|
|
private delegate void AddMenuItemDelegate(string text, EventHandler onClick);
|
|
|
|
#region Variables
|
|
|
|
public HelpWindow HelpWindow;
|
|
public HandleFilterWindow HandleFilterWindow;
|
|
public HiddenProcessesWindow HiddenProcessesWindow;
|
|
public LogWindow LogWindow;
|
|
public MiniSysInfo MiniSysInfoWindow;
|
|
|
|
Thread sysInfoThread;
|
|
public SysInfoWindow SysInfoWindow;
|
|
ProcessSystemProvider processP;
|
|
ServiceProvider serviceP;
|
|
NetworkProvider networkP;
|
|
|
|
Bitmap uacShieldIcon;
|
|
Icon blackIcon;
|
|
UsageIcon dummyIcon;
|
|
List<UsageIcon> notifyIcons = new List<UsageIcon>();
|
|
CpuHistoryIcon cpuHistoryIcon;
|
|
CpuUsageIcon cpuUsageIcon;
|
|
IoHistoryIcon ioHistoryIcon;
|
|
CommitHistoryIcon commitHistoryIcon;
|
|
PhysMemHistoryIcon physMemHistoryIcon;
|
|
|
|
Dictionary<int, List<string>> processServices = new Dictionary<int, List<string>>();
|
|
|
|
int processSelectedItems;
|
|
int processSelectedPID;
|
|
|
|
List<Control> listControls = new List<Control>();
|
|
|
|
Queue<KeyValuePair<string, Icon>> statusMessages = new Queue<KeyValuePair<string, Icon>>();
|
|
List<KeyValuePair<DateTime, string>> _log = new List<KeyValuePair<DateTime, string>>();
|
|
|
|
#endregion
|
|
|
|
#region Properties
|
|
|
|
public MenuItem WindowMenuItem
|
|
{
|
|
get { return windowMenuItem; }
|
|
}
|
|
|
|
public wyDay.Controls.VistaMenu VistaMenu
|
|
{
|
|
get { return vistaMenu; }
|
|
}
|
|
|
|
public ProcessSystemProvider ProcessProvider
|
|
{
|
|
get { return processP; }
|
|
}
|
|
|
|
public ProcessTree ProcessTree
|
|
{
|
|
get { return treeProcesses; }
|
|
}
|
|
|
|
public ServiceProvider ServiceProvider
|
|
{
|
|
get { return serviceP; }
|
|
}
|
|
|
|
public ListView ServiceList
|
|
{
|
|
get { return listServices.List; }
|
|
}
|
|
|
|
public NetworkProvider NetworkProvider
|
|
{
|
|
get { return networkP; }
|
|
}
|
|
|
|
public ListView NetworkList
|
|
{
|
|
get { return listNetwork.List; }
|
|
}
|
|
|
|
public IDictionary<int, List<string>> ProcessServices
|
|
{
|
|
get { return processServices; }
|
|
}
|
|
|
|
public IList<KeyValuePair<DateTime, string>> Log
|
|
{
|
|
get { return _log; }
|
|
}
|
|
|
|
#endregion
|
|
|
|
#region Events
|
|
|
|
public event LogUpdatedEventHandler LogUpdated;
|
|
|
|
#endregion
|
|
|
|
#region Event Handlers
|
|
|
|
#region Lists
|
|
|
|
private void listNetwork_DoubleClick(object sender, EventArgs e)
|
|
{
|
|
goToProcessNetworkMenuItem_Click(sender, e);
|
|
}
|
|
|
|
private void listNetwork_KeyDown(object sender, KeyEventArgs e)
|
|
{
|
|
if (e.KeyCode == Keys.Enter)
|
|
{
|
|
goToProcessNetworkMenuItem_Click(null, null);
|
|
}
|
|
}
|
|
|
|
private void listServices_DoubleClick(object sender, EventArgs e)
|
|
{
|
|
propertiesServiceMenuItem_Click(null, null);
|
|
}
|
|
|
|
private void listServices_KeyDown(object sender, KeyEventArgs e)
|
|
{
|
|
if (e.KeyCode == Keys.Delete)
|
|
{
|
|
deleteServiceMenuItem_Click(null, null);
|
|
}
|
|
else if (e.KeyCode == Keys.Enter)
|
|
{
|
|
propertiesServiceMenuItem_Click(null, null);
|
|
}
|
|
}
|
|
|
|
#endregion
|
|
|
|
#region Main Menu
|
|
|
|
private void runMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
Win32.RunFileDlg(this.Handle, IntPtr.Zero, null, null, null, 0);
|
|
}
|
|
|
|
private void runAsMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
|
|
}
|
|
|
|
private void runAsAdministratorMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
PromptBox box = new PromptBox();
|
|
|
|
box.Text = "Enter the command to start";
|
|
box.TextBox.AutoCompleteSource = AutoCompleteSource.AllSystemSources;
|
|
box.TextBox.AutoCompleteMode = AutoCompleteMode.SuggestAppend;
|
|
|
|
if (box.ShowDialog() == DialogResult.OK)
|
|
{
|
|
Program.StartProgramAdmin(box.Value, "", null, ShowWindowType.Show, this.Handle);
|
|
}
|
|
}
|
|
|
|
private void runAsServiceMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
RunWindow run = new RunWindow();
|
|
|
|
run.TopMost = this.TopMost;
|
|
run.ShowDialog();
|
|
}
|
|
|
|
private void showDetailsForAllProcessesMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
Program.StartProcessHackerAdmin("-v", () =>
|
|
{
|
|
this.SaveSettings();
|
|
this.ExecuteOnIcons((icon) => icon.Visible = false);
|
|
Win32.ExitProcess(0);
|
|
}, this.Handle);
|
|
}
|
|
|
|
private void apiLoggerMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
(new Forms.ApiLogWindow()).Show();
|
|
}
|
|
|
|
private void findHandlesMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
if (HandleFilterWindow == null)
|
|
HandleFilterWindow = new HandleFilterWindow();
|
|
|
|
HandleFilterWindow.Show();
|
|
HandleFilterWindow.Activate();
|
|
}
|
|
|
|
private void inspectPEFileMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
OpenFileDialog ofd = new OpenFileDialog();
|
|
|
|
if (ofd.ShowDialog() == DialogResult.OK)
|
|
{
|
|
PEWindow pw = Program.GetPEWindow(ofd.FileName, new Program.PEWindowInvokeAction(delegate(PEWindow f)
|
|
{
|
|
try
|
|
{
|
|
f.Show();
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
Logging.Log(ex);
|
|
}
|
|
}));
|
|
}
|
|
}
|
|
|
|
private void reloadStructsMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
try
|
|
{
|
|
Program.Structs.Clear();
|
|
Structs.StructParser parser = new ProcessHacker.Structs.StructParser(Program.Structs);
|
|
|
|
parser.Parse(Application.StartupPath + "\\structs.txt");
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
PhUtils.ShowMessage(ex);
|
|
}
|
|
}
|
|
|
|
private void sysInfoMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
if (sysInfoThread == null || !sysInfoThread.IsAlive)
|
|
{
|
|
sysInfoThread = new Thread(() =>
|
|
{
|
|
SysInfoWindow = new SysInfoWindow();
|
|
|
|
Application.Run(SysInfoWindow);
|
|
});
|
|
sysInfoThread.Start();
|
|
}
|
|
else
|
|
{
|
|
SysInfoWindow.BeginInvoke(new MethodInvoker(delegate
|
|
{
|
|
SysInfoWindow.Show();
|
|
SysInfoWindow.Activate();
|
|
}));
|
|
}
|
|
}
|
|
|
|
private void logMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
if (LogWindow == null || LogWindow.IsDisposed)
|
|
{
|
|
LogWindow = new LogWindow();
|
|
}
|
|
|
|
LogWindow.Show();
|
|
|
|
if (LogWindow.WindowState == FormWindowState.Minimized)
|
|
LogWindow.WindowState = FormWindowState.Normal;
|
|
|
|
LogWindow.Activate();
|
|
}
|
|
|
|
private void aboutMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
AboutWindow about = new AboutWindow();
|
|
|
|
about.TopMost = this.TopMost;
|
|
about.ShowDialog();
|
|
}
|
|
|
|
private void optionsMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
OptionsWindow options = new OptionsWindow();
|
|
|
|
options.TopMost = this.TopMost;
|
|
options.ShowDialog();
|
|
}
|
|
|
|
private void freeMemoryMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
Program.CollectGarbage();
|
|
}
|
|
|
|
private void helpMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
if (HelpWindow == null)
|
|
HelpWindow = new HelpWindow();
|
|
|
|
HelpWindow.Show();
|
|
HelpWindow.Activate();
|
|
}
|
|
|
|
private void exitMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
this.Exit();
|
|
}
|
|
|
|
private void toolbarMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
toolbarMenuItem.Checked = !toolbarMenuItem.Checked;
|
|
toolStrip.Visible = toolbarMenuItem.Checked;
|
|
}
|
|
|
|
private void updateNowMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
if (processP.RunCount > 1)
|
|
processP.RunOnce();
|
|
|
|
if (serviceP.RunCount > 1)
|
|
serviceP.RunOnce();
|
|
}
|
|
|
|
private void updateProcessesMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
updateProcessesMenuItem.Checked = !updateProcessesMenuItem.Checked;
|
|
processP.Enabled = updateProcessesMenuItem.Checked;
|
|
}
|
|
|
|
private void updateServicesMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
updateServicesMenuItem.Checked = !updateServicesMenuItem.Checked;
|
|
serviceP.Enabled = updateServicesMenuItem.Checked;
|
|
}
|
|
|
|
private void hiddenProcessesMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
if (HiddenProcessesWindow == null || HiddenProcessesWindow.IsDisposed)
|
|
HiddenProcessesWindow = new HiddenProcessesWindow();
|
|
|
|
HiddenProcessesWindow.Show();
|
|
|
|
if (HiddenProcessesWindow.WindowState == FormWindowState.Minimized)
|
|
HiddenProcessesWindow.WindowState = FormWindowState.Normal;
|
|
|
|
HiddenProcessesWindow.Activate();
|
|
}
|
|
|
|
private void verifyFileSignatureMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
OpenFileDialog ofd = new OpenFileDialog();
|
|
|
|
ofd.CheckFileExists = true;
|
|
ofd.CheckPathExists = true;
|
|
ofd.Filter = "Executable files (*.exe;*.dll;*.sys;*.scr;*.cpl)|*.exe;*.dll;*.sys;*.scr;*.cpl|All files (*.*)|*.*";
|
|
|
|
if (ofd.ShowDialog() == DialogResult.OK)
|
|
{
|
|
try
|
|
{
|
|
var result = Cryptography.VerifyFile(ofd.FileName);
|
|
string message = "";
|
|
|
|
switch (result)
|
|
{
|
|
case VerifyResult.Distrust:
|
|
message = "is not trusted";
|
|
break;
|
|
case VerifyResult.Expired:
|
|
message = "has an expired certificate";
|
|
break;
|
|
case VerifyResult.NoSignature:
|
|
message = "does not have a digital signature";
|
|
break;
|
|
case VerifyResult.Revoked:
|
|
message = "has a revoked certificate";
|
|
break;
|
|
case VerifyResult.SecuritySettings:
|
|
message = "could not be verified due to security settings";
|
|
break;
|
|
case VerifyResult.Trusted:
|
|
message = "is trusted";
|
|
break;
|
|
case VerifyResult.Unknown:
|
|
message = "could not be verified";
|
|
break;
|
|
default:
|
|
message = "could not be verified";
|
|
break;
|
|
}
|
|
|
|
MessageBox.Show("The file \"" + ofd.FileName + "\" " + message +
|
|
".", "Process Hacker", MessageBoxButtons.OK, MessageBoxIcon.Information);
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
MessageBox.Show(ex.Message, "Process Hacker", MessageBoxButtons.OK,
|
|
MessageBoxIcon.Error);
|
|
}
|
|
}
|
|
}
|
|
|
|
private void saveMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
Save.SaveToFile();
|
|
}
|
|
|
|
#region View
|
|
|
|
private void cpuHistoryMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
Properties.Settings.Default.CpuHistoryIconVisible =
|
|
cpuHistoryMenuItem.Checked = !cpuHistoryMenuItem.Checked;
|
|
this.ApplyIconVisibilities();
|
|
}
|
|
|
|
private void cpuUsageMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
Properties.Settings.Default.CpuUsageIconVisible =
|
|
cpuUsageMenuItem.Checked = !cpuUsageMenuItem.Checked;
|
|
this.ApplyIconVisibilities();
|
|
}
|
|
|
|
private void ioHistoryMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
Properties.Settings.Default.IoHistoryIconVisible =
|
|
ioHistoryMenuItem.Checked = !ioHistoryMenuItem.Checked;
|
|
this.ApplyIconVisibilities();
|
|
}
|
|
|
|
private void commitHistoryMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
Properties.Settings.Default.CommitHistoryIconVisible =
|
|
commitHistoryMenuItem.Checked = !commitHistoryMenuItem.Checked;
|
|
this.ApplyIconVisibilities();
|
|
}
|
|
|
|
private void physMemHistoryMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
Properties.Settings.Default.PhysMemHistoryIconVisible =
|
|
physMemHistoryMenuItem.Checked = !physMemHistoryMenuItem.Checked;
|
|
this.ApplyIconVisibilities();
|
|
}
|
|
|
|
#endregion
|
|
|
|
#endregion
|
|
|
|
#region Network Context Menu
|
|
|
|
private void menuNetwork_Popup(object sender, EventArgs e)
|
|
{
|
|
if (listNetwork.SelectedItems.Count == 0)
|
|
{
|
|
menuNetwork.DisableAll();
|
|
}
|
|
else if (listNetwork.SelectedItems.Count == 1)
|
|
{
|
|
menuNetwork.EnableAll();
|
|
}
|
|
else
|
|
{
|
|
menuNetwork.EnableAll();
|
|
goToProcessNetworkMenuItem.Enabled = false;
|
|
}
|
|
|
|
if (listNetwork.Items.Count > 0)
|
|
selectAllNetworkMenuItem.Enabled = true;
|
|
else
|
|
selectAllNetworkMenuItem.Enabled = false;
|
|
|
|
try
|
|
{
|
|
bool hasValid = false;
|
|
|
|
foreach (ListViewItem item in listNetwork.SelectedItems)
|
|
{
|
|
if (item.SubItems[3].Text == "TCP")
|
|
{
|
|
if (item.SubItems[4].Text != "Listening" &&
|
|
item.SubItems[4].Text != "CloseWait" &&
|
|
item.SubItems[4].Text != "TimeWait")
|
|
{
|
|
hasValid = true;
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
|
|
if (!hasValid)
|
|
closeNetworkMenuItem.Enabled = false;
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
Logging.Log(ex);
|
|
}
|
|
}
|
|
|
|
private void goToProcessNetworkMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
if (listNetwork.SelectedItems.Count != 1)
|
|
return;
|
|
|
|
DeselectAll(treeProcesses.Tree);
|
|
|
|
try
|
|
{
|
|
TreeNodeAdv node = treeProcesses.FindTreeNode((int)listNetwork.SelectedItems[0].Tag);
|
|
|
|
node.EnsureVisible();
|
|
node.IsSelected = true;
|
|
treeProcesses.Tree.FullUpdate();
|
|
|
|
tabControl.SelectedTab = tabProcesses;
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
Logging.Log(ex);
|
|
}
|
|
}
|
|
|
|
private void closeNetworkMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
if (listNetwork.SelectedItems.Count == 0)
|
|
return;
|
|
|
|
bool allGood = true;
|
|
|
|
try
|
|
{
|
|
foreach (ListViewItem item in listNetwork.SelectedItems)
|
|
{
|
|
if (item.SubItems[3].Text != "TCP" ||
|
|
item.SubItems[4].Text == "Listening" ||
|
|
item.SubItems[4].Text == "CloseWait" ||
|
|
item.SubItems[4].Text == "TimeWait")
|
|
continue;
|
|
|
|
try
|
|
{
|
|
networkP.Dictionary[item.Name].CloseTcpConnection();
|
|
}
|
|
catch
|
|
{
|
|
allGood = false;
|
|
|
|
if (MessageBox.Show("Could not close the TCP connection. " +
|
|
"Make sure Process Hacker is running with administrative privileges.", "Process Hacker",
|
|
MessageBoxButtons.OKCancel, MessageBoxIcon.Error) == DialogResult.Cancel)
|
|
return;
|
|
}
|
|
}
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
Logging.Log(ex);
|
|
}
|
|
|
|
if (allGood)
|
|
{
|
|
foreach (ListViewItem item in listNetwork.SelectedItems)
|
|
item.Selected = false;
|
|
}
|
|
}
|
|
|
|
private void selectAllNetworkMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
Utils.SelectAll(listNetwork.List.Items);
|
|
}
|
|
|
|
#endregion
|
|
|
|
#region Notification Icon & Menu
|
|
|
|
private void notifyIcon_MouseDoubleClick(object sender, MouseEventArgs e)
|
|
{
|
|
showHideMenuItem_Click(null, null);
|
|
}
|
|
|
|
private void menuIcon_Popup(object sender, EventArgs e)
|
|
{
|
|
List<ProcessItem> processes = new List<ProcessItem>();
|
|
|
|
// Clear the images so we don't get GDI+ handle leaks
|
|
foreach (MenuItem item in processesMenuItem.MenuItems)
|
|
vistaMenu.SetImage(item, null);
|
|
|
|
processesMenuItem.MenuItems.DisposeAndClear();
|
|
|
|
// HACK: To be fixed later - we need some sort of locking for the process provider
|
|
try
|
|
{
|
|
foreach (var process in processP.Dictionary.Values)
|
|
{
|
|
if (process.Pid > 0)
|
|
{
|
|
processes.Add(process);
|
|
}
|
|
}
|
|
|
|
// Remove zero CPU usage processes and processes running as other users
|
|
for (int i = 0; i < processes.Count && processes.Count > Properties.Settings.Default.IconMenuProcessCount; i++)
|
|
{
|
|
if (processes[i].CpuUsage == 0)
|
|
{
|
|
processes.RemoveAt(i);
|
|
i--;
|
|
}
|
|
else if (processes[i].Username != Program.CurrentUsername)
|
|
{
|
|
processes.RemoveAt(i);
|
|
i--;
|
|
}
|
|
}
|
|
|
|
// Sort the processes by CPU usage and remove processes with low CPU usage
|
|
processes.Sort((i1, i2) => -i1.CpuUsage.CompareTo(i2.CpuUsage));
|
|
|
|
if (processes.Count > Properties.Settings.Default.IconMenuProcessCount)
|
|
{
|
|
int c = processes.Count;
|
|
processes.RemoveRange(Properties.Settings.Default.IconMenuProcessCount,
|
|
processes.Count - Properties.Settings.Default.IconMenuProcessCount);
|
|
}
|
|
|
|
// Then sort the processes by name
|
|
processes.Sort((i1, i2) => i1.Name.CompareTo(i2.Name));
|
|
|
|
// Add the processes
|
|
foreach (var process in processes)
|
|
{
|
|
MenuItem processItem = new MenuItem();
|
|
MenuItem terminateItem = new MenuItem();
|
|
MenuItem suspendItem = new MenuItem();
|
|
MenuItem resumeItem = new MenuItem();
|
|
MenuItem propertiesItem = new MenuItem();
|
|
|
|
processItem.Text = process.Name + " (" + process.Pid.ToString() + ")";
|
|
processItem.Tag = process;
|
|
|
|
terminateItem.Click += new EventHandler((sender_, e_) =>
|
|
{
|
|
ProcessItem item = (ProcessItem)((MenuItem)sender_).Parent.Tag;
|
|
|
|
ProcessActions.Terminate(this, new int[] { item.Pid }, new string[] { item.Name }, true);
|
|
});
|
|
terminateItem.Text = "Terminate";
|
|
|
|
suspendItem.Click += new EventHandler((sender_, e_) =>
|
|
{
|
|
ProcessItem item = (ProcessItem)((MenuItem)sender_).Parent.Tag;
|
|
|
|
ProcessActions.Suspend(this, new int[] { item.Pid }, new string[] { item.Name }, true);
|
|
});
|
|
suspendItem.Text = "Suspend";
|
|
|
|
resumeItem.Click += new EventHandler((sender_, e_) =>
|
|
{
|
|
ProcessItem item = (ProcessItem)((MenuItem)sender_).Parent.Tag;
|
|
|
|
ProcessActions.Resume(this, new int[] { item.Pid }, new string[] { item.Name }, true);
|
|
});
|
|
resumeItem.Text = "Resume";
|
|
|
|
propertiesItem.Click += new EventHandler((sender_, e_) =>
|
|
{
|
|
try
|
|
{
|
|
ProcessItem item = (ProcessItem)((MenuItem)sender_).Parent.Tag;
|
|
|
|
ProcessWindow pForm = Program.GetProcessWindow(processP.Dictionary[item.Pid],
|
|
new Program.PWindowInvokeAction(delegate(ProcessWindow f)
|
|
{
|
|
f.Show();
|
|
f.Activate();
|
|
}));
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
MessageBox.Show("Could not inspect the process:\n\n" + ex.Message,
|
|
"Process Hacker", MessageBoxButtons.OK, MessageBoxIcon.Error);
|
|
}
|
|
});
|
|
propertiesItem.Text = "Properties...";
|
|
|
|
processItem.MenuItems.AddRange(new MenuItem[] { terminateItem, suspendItem, resumeItem, propertiesItem });
|
|
processesMenuItem.MenuItems.Add(processItem);
|
|
|
|
vistaMenu.SetImage(processItem, (treeProcesses.Tree.Model as ProcessTreeModel).Nodes[process.Pid].Icon);
|
|
}
|
|
}
|
|
catch
|
|
{
|
|
foreach (MenuItem item in processesMenuItem.MenuItems)
|
|
vistaMenu.SetImage(item, null);
|
|
|
|
processesMenuItem.MenuItems.DisposeAndClear();
|
|
}
|
|
}
|
|
|
|
private void showHideMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
if (this.WindowState == FormWindowState.Normal && this.Visible)
|
|
{
|
|
Properties.Settings.Default.WindowLocation = this.Location;
|
|
Properties.Settings.Default.WindowSize = this.Size;
|
|
}
|
|
|
|
this.Visible = !this.Visible;
|
|
|
|
if (this.WindowState == FormWindowState.Minimized)
|
|
this.WindowState = FormWindowState.Normal;
|
|
|
|
this.Activate();
|
|
}
|
|
|
|
private void sysInformationIconMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
sysInfoMenuItem_Click(sender, e);
|
|
}
|
|
|
|
private void enableAllNotificationsMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
NPMenuItem.Checked = true;
|
|
TPMenuItem.Checked = true;
|
|
NSMenuItem.Checked = true;
|
|
startedSMenuItem.Checked = true;
|
|
stoppedSMenuItem.Checked = true;
|
|
DSMenuItem.Checked = true;
|
|
}
|
|
|
|
private void disableAllNotificationsMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
NPMenuItem.Checked = false;
|
|
TPMenuItem.Checked = false;
|
|
NSMenuItem.Checked = false;
|
|
startedSMenuItem.Checked = false;
|
|
stoppedSMenuItem.Checked = false;
|
|
DSMenuItem.Checked = false;
|
|
}
|
|
|
|
private void exitTrayMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
this.Exit();
|
|
}
|
|
|
|
#endregion
|
|
|
|
#region Process Context Menu
|
|
|
|
private void menuProcess_Popup(object sender, EventArgs e)
|
|
{
|
|
virtualizationProcessMenuItem.Checked = false;
|
|
|
|
if (treeProcesses.SelectedTreeNodes.Count == 0)
|
|
{
|
|
menuProcess.DisableAll();
|
|
}
|
|
else if (treeProcesses.SelectedTreeNodes.Count == 1)
|
|
{
|
|
menuProcess.EnableAll();
|
|
|
|
priorityMenuItem.Text = "&Priority";
|
|
terminateMenuItem.Text = "&Terminate Process";
|
|
suspendMenuItem.Text = "&Suspend Process";
|
|
resumeMenuItem.Text = "&Resume Process";
|
|
|
|
realTimeMenuItem.Checked = false;
|
|
highMenuItem.Checked = false;
|
|
aboveNormalMenuItem.Checked = false;
|
|
normalMenuItem.Checked = false;
|
|
belowNormalMenuItem.Checked = false;
|
|
idleMenuItem.Checked = false;
|
|
|
|
try
|
|
{
|
|
using (var phandle = new ProcessHandle(processSelectedPID, Program.MinProcessQueryRights))
|
|
{
|
|
switch (phandle.GetPriorityClass())
|
|
{
|
|
case ProcessPriorityClass.RealTime:
|
|
realTimeMenuItem.Checked = true;
|
|
break;
|
|
|
|
case ProcessPriorityClass.High:
|
|
highMenuItem.Checked = true;
|
|
break;
|
|
|
|
case ProcessPriorityClass.AboveNormal:
|
|
aboveNormalMenuItem.Checked = true;
|
|
break;
|
|
|
|
case ProcessPriorityClass.Normal:
|
|
normalMenuItem.Checked = true;
|
|
break;
|
|
|
|
case ProcessPriorityClass.BelowNormal:
|
|
belowNormalMenuItem.Checked = true;
|
|
break;
|
|
|
|
case ProcessPriorityClass.Idle:
|
|
idleMenuItem.Checked = true;
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
priorityMenuItem.Text = "(" + ex.Message + ")";
|
|
priorityMenuItem.Enabled = false;
|
|
}
|
|
|
|
try
|
|
{
|
|
using (var phandle = new ProcessHandle(processSelectedPID, Program.MinProcessQueryRights))
|
|
{
|
|
try
|
|
{
|
|
using (var thandle = phandle.GetToken(TokenAccess.Query))
|
|
{
|
|
if (virtualizationProcessMenuItem.Enabled = thandle.IsVirtualizationAllowed())
|
|
virtualizationProcessMenuItem.Checked = thandle.IsVirtualizationEnabled();
|
|
}
|
|
}
|
|
catch
|
|
{ }
|
|
}
|
|
}
|
|
catch
|
|
{
|
|
virtualizationProcessMenuItem.Enabled = false;
|
|
}
|
|
|
|
try
|
|
{
|
|
if (processP.Dictionary[processSelectedPID].SessionId != Program.CurrentSessionId)
|
|
injectDllProcessMenuItem.Enabled = false;
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
Logging.Log(ex);
|
|
}
|
|
|
|
try
|
|
{
|
|
if (treeProcesses.SelectedTreeNodes[0].IsLeaf)
|
|
terminateProcessTreeMenuItem.Visible = false;
|
|
else
|
|
terminateProcessTreeMenuItem.Visible = true;
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
Logging.Log(ex);
|
|
}
|
|
}
|
|
else
|
|
{
|
|
menuProcess.DisableAll();
|
|
|
|
terminateMenuItem.Text = "&Terminate Processes";
|
|
suspendMenuItem.Text = "&Suspend Processes";
|
|
resumeMenuItem.Text = "&Resume Processes";
|
|
|
|
terminateMenuItem.Enabled = true;
|
|
suspendMenuItem.Enabled = true;
|
|
resumeMenuItem.Enabled = true;
|
|
reduceWorkingSetProcessMenuItem.Enabled = true;
|
|
copyProcessMenuItem.Enabled = true;
|
|
}
|
|
|
|
if (processSelectedPID < 0 && treeProcesses.SelectedNodes.Count == 1)
|
|
{
|
|
// probably DPCs or Interrupts
|
|
priorityMenuItem.Text = "&Priority";
|
|
menuProcess.DisableAll();
|
|
propertiesProcessMenuItem.Enabled = true;
|
|
}
|
|
|
|
if (treeProcesses.Model.Nodes.Count == 0)
|
|
{
|
|
selectAllProcessMenuItem.Enabled = false;
|
|
}
|
|
else
|
|
{
|
|
selectAllProcessMenuItem.Enabled = true;
|
|
}
|
|
}
|
|
|
|
private void terminateMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
if (treeProcesses.SelectedNodes.Count == 0)
|
|
return;
|
|
|
|
int[] pids = new int[treeProcesses.SelectedNodes.Count];
|
|
string[] names = new string[pids.Length];
|
|
|
|
for (int i = 0; i < treeProcesses.SelectedNodes.Count; i++)
|
|
{
|
|
pids[i] = treeProcesses.SelectedNodes[i].Pid;
|
|
names[i] = treeProcesses.SelectedNodes[i].Name;
|
|
}
|
|
|
|
if (ProcessActions.Terminate(this, pids, names, true))
|
|
{
|
|
try
|
|
{
|
|
TreeNodeAdv[] nodes = new TreeNodeAdv[treeProcesses.SelectedTreeNodes.Count];
|
|
|
|
treeProcesses.SelectedTreeNodes.CopyTo(nodes, 0);
|
|
|
|
foreach (TreeNodeAdv node in nodes)
|
|
node.IsSelected = false;
|
|
}
|
|
catch
|
|
{ }
|
|
}
|
|
}
|
|
|
|
private void terminateProcessTreeMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
if (treeProcesses.SelectedNodes.Count == 0)
|
|
return;
|
|
|
|
int[] pids = new int[treeProcesses.SelectedNodes.Count];
|
|
string[] names = new string[pids.Length];
|
|
|
|
for (int i = 0; i < treeProcesses.SelectedNodes.Count; i++)
|
|
{
|
|
pids[i] = treeProcesses.SelectedNodes[i].Pid;
|
|
names[i] = treeProcesses.SelectedNodes[i].Name;
|
|
}
|
|
|
|
if (ProcessActions.TerminateTree(this, pids, names, true))
|
|
{
|
|
try
|
|
{
|
|
TreeNodeAdv[] nodes = new TreeNodeAdv[treeProcesses.SelectedTreeNodes.Count];
|
|
|
|
treeProcesses.SelectedTreeNodes.CopyTo(nodes, 0);
|
|
|
|
foreach (TreeNodeAdv node in nodes)
|
|
node.IsSelected = false;
|
|
}
|
|
catch
|
|
{ }
|
|
}
|
|
}
|
|
|
|
private void suspendMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
if (treeProcesses.SelectedNodes.Count == 0)
|
|
return;
|
|
|
|
int[] pids = new int[treeProcesses.SelectedNodes.Count];
|
|
string[] names = new string[pids.Length];
|
|
|
|
for (int i = 0; i < treeProcesses.SelectedNodes.Count; i++)
|
|
{
|
|
pids[i] = treeProcesses.SelectedNodes[i].Pid;
|
|
names[i] = treeProcesses.SelectedNodes[i].Name;
|
|
}
|
|
|
|
ProcessActions.Suspend(this, pids, names, true);
|
|
}
|
|
|
|
private void resumeMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
if (treeProcesses.SelectedNodes.Count == 0)
|
|
return;
|
|
|
|
int[] pids = new int[treeProcesses.SelectedNodes.Count];
|
|
string[] names = new string[pids.Length];
|
|
|
|
for (int i = 0; i < treeProcesses.SelectedNodes.Count; i++)
|
|
{
|
|
pids[i] = treeProcesses.SelectedNodes[i].Pid;
|
|
names[i] = treeProcesses.SelectedNodes[i].Name;
|
|
}
|
|
|
|
ProcessActions.Resume(this, pids, names, true);
|
|
}
|
|
|
|
private void restartProcessMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
if (MessageBox.Show("Are you sure you want to restart the process?", "Process Hacker",
|
|
MessageBoxButtons.YesNo, MessageBoxIcon.Exclamation, MessageBoxDefaultButton.Button2) == DialogResult.Yes)
|
|
{
|
|
try
|
|
{
|
|
using (var phandle = new ProcessHandle(processSelectedPID,
|
|
Program.MinProcessQueryRights | Program.MinProcessReadMemoryRights))
|
|
{
|
|
string currentDirectory = phandle.GetPebString(PebOffset.CurrentDirectoryPath);
|
|
string cmdLine = phandle.GetPebString(PebOffset.CommandLine);
|
|
|
|
try
|
|
{
|
|
using (var phandle2 = new ProcessHandle(processSelectedPID, ProcessAccess.Terminate))
|
|
phandle2.Terminate();
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
MessageBox.Show("Could not terminate the process: " + ex.Message, "Process Hacker",
|
|
MessageBoxButtons.OK, MessageBoxIcon.Error);
|
|
return;
|
|
}
|
|
|
|
try
|
|
{
|
|
var startupInfo = new StartupInfo();
|
|
var procInfo = new ProcessInformation();
|
|
|
|
startupInfo.Size = Marshal.SizeOf(startupInfo);
|
|
|
|
if (!Win32.CreateProcess(null, cmdLine, IntPtr.Zero, IntPtr.Zero, false, 0, IntPtr.Zero, currentDirectory,
|
|
ref startupInfo, out procInfo))
|
|
Win32.ThrowLastError();
|
|
|
|
Win32.CloseHandle(procInfo.hProcess);
|
|
Win32.CloseHandle(procInfo.hThread);
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
MessageBox.Show("Could not start the command '" + cmdLine + "': " + ex.Message, "Process Hacker",
|
|
MessageBoxButtons.OK, MessageBoxIcon.Error);
|
|
}
|
|
}
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
MessageBox.Show("Could not restart the process: " + ex.Message, "Process Hacker",
|
|
MessageBoxButtons.OK, MessageBoxIcon.Error);
|
|
}
|
|
}
|
|
}
|
|
|
|
private void reduceWorkingSetProcessMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
if (treeProcesses.SelectedNodes.Count == 0)
|
|
return;
|
|
|
|
int[] pids = new int[treeProcesses.SelectedNodes.Count];
|
|
string[] names = new string[pids.Length];
|
|
|
|
for (int i = 0; i < treeProcesses.SelectedNodes.Count; i++)
|
|
{
|
|
pids[i] = treeProcesses.SelectedNodes[i].Pid;
|
|
names[i] = treeProcesses.SelectedNodes[i].Name;
|
|
}
|
|
|
|
ProcessActions.ReduceWorkingSet(this, pids, names, false);
|
|
}
|
|
|
|
private void virtualizationProcessMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
if (MessageBox.Show("Are you sure you want to set virtualization for this process?",
|
|
"Process Hacker", MessageBoxButtons.YesNo, MessageBoxIcon.Exclamation,
|
|
MessageBoxDefaultButton.Button2) == DialogResult.No)
|
|
return;
|
|
|
|
try
|
|
{
|
|
using (var phandle = new ProcessHandle(processSelectedPID, Program.MinProcessQueryRights))
|
|
{
|
|
using (var thandle = phandle.GetToken(TokenAccess.GenericWrite))
|
|
{
|
|
thandle.SetVirtualizationEnabled(!virtualizationProcessMenuItem.Checked);
|
|
}
|
|
}
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
PhUtils.ShowMessage(ex);
|
|
}
|
|
}
|
|
|
|
private void propertiesProcessMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
// user hasn't got any processes selected
|
|
if (processSelectedPID == -1)
|
|
return;
|
|
|
|
try
|
|
{
|
|
ProcessWindow pForm = Program.GetProcessWindow(processP.Dictionary[processSelectedPID],
|
|
new Program.PWindowInvokeAction(delegate(ProcessWindow f)
|
|
{
|
|
Program.FocusWindow(f);
|
|
}));
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
MessageBox.Show("Could not inspect the process:\n\n" + ex.Message,
|
|
"Process Hacker", MessageBoxButtons.OK, MessageBoxIcon.Error);
|
|
}
|
|
}
|
|
|
|
private void affinityProcessMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
ProcessAffinity affForm = new ProcessAffinity(processSelectedPID);
|
|
|
|
try
|
|
{
|
|
affForm.TopMost = this.TopMost;
|
|
affForm.ShowDialog();
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
Logging.Log(ex);
|
|
}
|
|
}
|
|
|
|
private void createDumpFileProcessMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
SaveFileDialog sfd = new SaveFileDialog();
|
|
|
|
sfd.Filter = "Dump Files (*.dmp)|*.dmp|All Files (*.*)|*.*";
|
|
sfd.FileName =
|
|
processP.Dictionary[processSelectedPID].Name +
|
|
"_" +
|
|
DateTime.Now.ToString("yyMMdd") +
|
|
".dmp";
|
|
|
|
if (sfd.ShowDialog() == DialogResult.OK)
|
|
{
|
|
this.Cursor = Cursors.WaitCursor;
|
|
|
|
try
|
|
{
|
|
ThreadStart dumpProcess = () =>
|
|
{
|
|
using (var phandle = new ProcessHandle(processSelectedPID,
|
|
ProcessAccess.DupHandle | ProcessAccess.QueryInformation |
|
|
ProcessAccess.SuspendResume | ProcessAccess.VmRead))
|
|
phandle.WriteDump(sfd.FileName);
|
|
};
|
|
|
|
if (OSVersion.HasTaskDialogs)
|
|
{
|
|
// Use a task dialog to display a fancy progress bar.
|
|
TaskDialog td = new TaskDialog();
|
|
Thread t = new Thread(dumpProcess);
|
|
|
|
td.AllowDialogCancellation = false;
|
|
td.Buttons = new TaskDialogButton[] { new TaskDialogButton((int)DialogResult.OK, "Close") };
|
|
td.WindowTitle = "Process Hacker";
|
|
td.MainInstruction = "Creating the dump file...";
|
|
td.ShowMarqueeProgressBar = true;
|
|
td.EnableHyperlinks = true;
|
|
td.CallbackTimer = true;
|
|
td.Callback = (taskDialog, args, userData) =>
|
|
{
|
|
if (args.Notification == TaskDialogNotification.Created)
|
|
{
|
|
taskDialog.SetMarqueeProgressBar(true);
|
|
taskDialog.SetProgressBarState(ProgressBarState.Normal);
|
|
taskDialog.SetProgressBarMarquee(true, 100);
|
|
taskDialog.EnableButton((int)DialogResult.OK, true);
|
|
}
|
|
else if (args.Notification == TaskDialogNotification.Timer)
|
|
{
|
|
if (!t.IsAlive)
|
|
{
|
|
taskDialog.EnableButton((int)DialogResult.OK, false);
|
|
taskDialog.SetMainInstruction("The dump file has been created.");
|
|
taskDialog.SetContent(
|
|
"The dump file has been saved at: <a href=\"file\">" + sfd.FileName + "</a>.");
|
|
taskDialog.SetProgressBarMarquee(false, 0);
|
|
taskDialog.SetMarqueeProgressBar(false);
|
|
}
|
|
}
|
|
else if (args.Notification == TaskDialogNotification.HyperlinkClicked)
|
|
{
|
|
if (args.Hyperlink == "file")
|
|
Utils.ShowFileInExplorer(sfd.FileName);
|
|
|
|
return true;
|
|
}
|
|
|
|
return false;
|
|
};
|
|
|
|
t.Start();
|
|
td.Show(this);
|
|
}
|
|
else
|
|
{
|
|
// No task dialogs, do the thing on the GUI thread.
|
|
dumpProcess();
|
|
}
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
PhUtils.ShowMessage(ex);
|
|
}
|
|
finally
|
|
{
|
|
this.Cursor = Cursors.Default;
|
|
}
|
|
}
|
|
}
|
|
|
|
private void terminatorProcessMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
TerminatorWindow w = new TerminatorWindow(processSelectedPID);
|
|
|
|
w.Text = "Terminator - " + processP.Dictionary[processSelectedPID].Name +
|
|
" (PID " + processSelectedPID.ToString() + ")";
|
|
|
|
w.ShowDialog();
|
|
}
|
|
|
|
#region Run As
|
|
|
|
private void launchAsUserProcessMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
try
|
|
{
|
|
Properties.Settings.Default.RunAsCommand = processP.Dictionary[processSelectedPID].FileName;
|
|
|
|
RunWindow run = new RunWindow();
|
|
|
|
run.TopMost = this.TopMost;
|
|
run.ShowDialog();
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
Logging.Log(ex);
|
|
}
|
|
}
|
|
|
|
private void launchAsThisUserProcessMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
try
|
|
{
|
|
RunWindow run = new RunWindow();
|
|
|
|
run.TopMost = this.TopMost;
|
|
run.UsePID(processSelectedPID);
|
|
run.ShowDialog();
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
Logging.Log(ex);
|
|
}
|
|
}
|
|
|
|
#endregion
|
|
|
|
#region Miscellaneous
|
|
|
|
private void detachFromDebuggerProcessMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
try
|
|
{
|
|
using (var phandle = new ProcessHandle(processSelectedPID, ProcessAccess.QueryInformation | ProcessAccess.SuspendResume))
|
|
{
|
|
using (var dhandle = phandle.GetDebugObject())
|
|
phandle.RemoveDebug(dhandle);
|
|
}
|
|
}
|
|
catch (WindowsException ex)
|
|
{
|
|
if (ex.Status == NtStatus.PortNotSet)
|
|
MessageBox.Show("The process is not being debugged.", "Process Hacker", MessageBoxButtons.OK, MessageBoxIcon.Information);
|
|
else
|
|
PhUtils.ShowMessage(ex);
|
|
}
|
|
}
|
|
|
|
private void injectDllProcessMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
OpenFileDialog ofd = new OpenFileDialog();
|
|
|
|
ofd.Filter = "DLL Files (*.dll)|*.dll|All Files (*.*)|*.*";
|
|
|
|
if (ofd.ShowDialog() == DialogResult.OK)
|
|
{
|
|
try
|
|
{
|
|
using (var phandle = new ProcessHandle(processSelectedPID,
|
|
ProcessAccess.CreateThread | ProcessAccess.VmOperation | ProcessAccess.VmWrite))
|
|
{
|
|
phandle.InjectDll(ofd.FileName, 5000);
|
|
}
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
PhUtils.ShowMessage(ex);
|
|
}
|
|
}
|
|
}
|
|
|
|
private void protectionProcessMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
(new ProtectProcessWindow(processSelectedPID)).ShowDialog();
|
|
}
|
|
|
|
private void setTokenProcessMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
ProcessPickerWindow picker = new ProcessPickerWindow();
|
|
|
|
picker.Label = "Select the source of the token:";
|
|
|
|
if (picker.ShowDialog() == DialogResult.OK)
|
|
{
|
|
try
|
|
{
|
|
KProcessHacker.Instance.SetProcessToken(picker.SelectedPid, processSelectedPID);
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
PhUtils.ShowMessage(ex);
|
|
}
|
|
}
|
|
}
|
|
|
|
#endregion
|
|
|
|
#region Injector
|
|
|
|
private void startProcessProcessMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
PromptBox box = new PromptBox();
|
|
|
|
box.TextBox.AutoCompleteSource = AutoCompleteSource.FileSystem;
|
|
box.TextBox.AutoCompleteMode = AutoCompleteMode.SuggestAppend;
|
|
|
|
if (box.ShowDialog() == DialogResult.OK)
|
|
{
|
|
ProcessStartInfo info = new ProcessStartInfo();
|
|
|
|
info.FileName = Application.StartupPath + "\\Injector.exe";
|
|
info.Arguments = "createprocessc " + processSelectedPID.ToString() + " \"" +
|
|
box.Value.Replace("\"", "\\\"") + "\"";
|
|
info.RedirectStandardOutput = true;
|
|
info.UseShellExecute = false;
|
|
info.CreateNoWindow = true;
|
|
|
|
Process p = Process.Start(info);
|
|
|
|
p.WaitForExit();
|
|
|
|
if (p.ExitCode != 0)
|
|
{
|
|
InformationBox infoBox = new InformationBox(p.StandardOutput.ReadToEnd() + "\r\nReturn code: " + p.ExitCode +
|
|
" (" + Win32.GetErrorMessage(p.ExitCode) + ")");
|
|
|
|
infoBox.ShowDialog();
|
|
}
|
|
}
|
|
}
|
|
|
|
private void getCommandLineProcessMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
ProcessStartInfo info = new ProcessStartInfo();
|
|
|
|
info.FileName = Application.StartupPath + "\\Injector.exe";
|
|
info.Arguments = "cmdline " + processSelectedPID.ToString();
|
|
info.RedirectStandardOutput = true;
|
|
info.UseShellExecute = false;
|
|
info.CreateNoWindow = true;
|
|
|
|
Process p = Process.Start(info);
|
|
|
|
p.WaitForExit();
|
|
|
|
InformationBox infoBox = new InformationBox(p.StandardOutput.ReadToEnd() + (p.ExitCode != 0 ? "\r\nReturn code: " + p.ExitCode +
|
|
" (" + Win32.GetErrorMessage(p.ExitCode) + ")" : ""));
|
|
|
|
infoBox.ShowDialog();
|
|
}
|
|
|
|
private void exitProcessProcessMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
if (MessageBox.Show("Are you sure you want to terminate the selected process?", "Process Hacker",
|
|
MessageBoxButtons.YesNo, MessageBoxIcon.Exclamation, MessageBoxDefaultButton.Button2) == DialogResult.No)
|
|
return;
|
|
|
|
ProcessStartInfo info = new ProcessStartInfo();
|
|
|
|
info.FileName = Application.StartupPath + "\\Injector.exe";
|
|
info.Arguments = "exitprocess " + processSelectedPID.ToString();
|
|
info.RedirectStandardOutput = true;
|
|
info.UseShellExecute = false;
|
|
info.CreateNoWindow = true;
|
|
|
|
Process p = Process.Start(info);
|
|
|
|
p.WaitForExit();
|
|
|
|
if (p.ExitCode != 0)
|
|
{
|
|
InformationBox infoBox = new InformationBox(p.StandardOutput.ReadToEnd() + "\r\nReturn code: " + p.ExitCode +
|
|
" (" + Win32.GetErrorMessage(p.ExitCode) + ")");
|
|
|
|
infoBox.ShowDialog();
|
|
}
|
|
}
|
|
|
|
#endregion
|
|
|
|
#region Priority
|
|
|
|
private void realTimeMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
SetProcessPriority(ProcessPriorityClass.RealTime);
|
|
}
|
|
|
|
private void highMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
SetProcessPriority(ProcessPriorityClass.High);
|
|
}
|
|
|
|
private void aboveNormalMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
SetProcessPriority(ProcessPriorityClass.AboveNormal);
|
|
}
|
|
|
|
private void normalMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
SetProcessPriority(ProcessPriorityClass.Normal);
|
|
}
|
|
|
|
private void belowNormalMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
SetProcessPriority(ProcessPriorityClass.BelowNormal);
|
|
}
|
|
|
|
private void idleMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
SetProcessPriority(ProcessPriorityClass.Idle);
|
|
}
|
|
|
|
#endregion
|
|
|
|
private void searchProcessMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
if (treeProcesses.SelectedNodes.Count != 1)
|
|
return;
|
|
|
|
try
|
|
{
|
|
Process.Start(Properties.Settings.Default.SearchEngine.Replace("%s",
|
|
treeProcesses.SelectedNodes[0].Name));
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
PhUtils.ShowMessage(ex);
|
|
}
|
|
}
|
|
|
|
private void reanalyzeProcessMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
try
|
|
{
|
|
processP.QueueFileProcessing(processSelectedPID);
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
Logging.Log(ex);
|
|
}
|
|
}
|
|
|
|
private void selectAllProcessMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
treeProcesses.Tree.AllNodes.SelectAll();
|
|
treeProcesses.Tree.Invalidate();
|
|
}
|
|
|
|
#endregion
|
|
|
|
#region Providers
|
|
|
|
private void processP_Updated()
|
|
{
|
|
processP.DictionaryAdded += processP_DictionaryAdded;
|
|
processP.DictionaryRemoved += processP_DictionaryRemoved;
|
|
processP.Updated -= processP_Updated;
|
|
|
|
try { Process.GetCurrentProcess().PriorityClass = ProcessPriorityClass.High; }
|
|
catch { }
|
|
|
|
Program.CollectGarbage();
|
|
|
|
if (processP.RunCount >= 1)
|
|
this.BeginInvoke(new MethodInvoker(delegate
|
|
{
|
|
treeProcesses.Tree.EndCompleteUpdate();
|
|
treeProcesses.Tree.EndUpdate();
|
|
treeProcesses.Invalidate();
|
|
processP.RunOnceAsync();
|
|
this.Cursor = Cursors.Default;
|
|
this.UpdateCommon();
|
|
}));
|
|
}
|
|
|
|
private void processP_InfoUpdater()
|
|
{
|
|
this.BeginInvoke(new MethodInvoker(delegate
|
|
{
|
|
UpdateStatusInfo();
|
|
}));
|
|
}
|
|
|
|
public void processP_DictionaryAdded(ProcessItem item)
|
|
{
|
|
ProcessItem parent = null;
|
|
string parentText = "";
|
|
|
|
if (item.HasParent && processP.Dictionary.ContainsKey(item.ParentPid))
|
|
{
|
|
try
|
|
{
|
|
parent = processP.Dictionary[item.ParentPid];
|
|
|
|
parentText += " started by " + parent.Name + " (PID " + parent.Pid.ToString() + ")";
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
Logging.Log(ex);
|
|
}
|
|
}
|
|
|
|
this.QueueMessage("New Process: " + item.Name + " (PID " + item.Pid.ToString() + ")" + parentText, item.Icon);
|
|
|
|
if (NPMenuItem.Checked)
|
|
this.GetFirstIcon().ShowBalloonTip(2000, "New Process",
|
|
"The process " + item.Name + " (" + item.Pid.ToString() +
|
|
") was started" + ((parentText != "") ? " by " +
|
|
parent.Name + " (PID " + parent.Pid.ToString() + ")" : "") + ".", ToolTipIcon.Info);
|
|
}
|
|
|
|
public void processP_DictionaryRemoved(ProcessItem item)
|
|
{
|
|
this.QueueMessage("Terminated Process: " + item.Name + " (PID " + item.Pid.ToString() + ")", null);
|
|
|
|
if (processServices.ContainsKey(item.Pid))
|
|
processServices.Remove(item.Pid);
|
|
|
|
if (TPMenuItem.Checked)
|
|
this.GetFirstIcon().ShowBalloonTip(2000, "Terminated Process",
|
|
"The process " + item.Name + " (" + item.Pid.ToString() + ") was terminated.", ToolTipIcon.Info);
|
|
}
|
|
|
|
private void serviceP_Updated()
|
|
{
|
|
listServices.BeginInvoke(new MethodInvoker(delegate
|
|
{
|
|
listServices.List.EndUpdate();
|
|
}));
|
|
|
|
HighlightingContext.StateHighlighting = true;
|
|
|
|
serviceP.DictionaryAdded += serviceP_DictionaryAdded;
|
|
serviceP.DictionaryModified += serviceP_DictionaryModified;
|
|
serviceP.DictionaryRemoved += serviceP_DictionaryRemoved;
|
|
serviceP.Updated -= serviceP_Updated;
|
|
|
|
if (processP.RunCount >= 1)
|
|
this.BeginInvoke(new MethodInvoker(UpdateCommon));
|
|
}
|
|
|
|
public void serviceP_DictionaryAdded(ServiceItem item)
|
|
{
|
|
this.QueueMessage("New Service: " + item.Status.ServiceName +
|
|
" (" + item.Status.ServiceStatusProcess.ServiceType.ToString() + ")" +
|
|
((item.Status.DisplayName != "") ?
|
|
" (" + item.Status.DisplayName + ")" :
|
|
""), null);
|
|
|
|
if (NSMenuItem.Checked)
|
|
this.GetFirstIcon().ShowBalloonTip(2000, "New Service",
|
|
"The service " + item.Status.ServiceName + " (" + item.Status.DisplayName + ") has been created.",
|
|
ToolTipIcon.Info);
|
|
}
|
|
|
|
public void serviceP_DictionaryAdded_Process(ServiceItem item)
|
|
{
|
|
if (item.Status.ServiceStatusProcess.ProcessID != 0)
|
|
{
|
|
if (!processServices.ContainsKey(item.Status.ServiceStatusProcess.ProcessID))
|
|
processServices.Add(item.Status.ServiceStatusProcess.ProcessID, new List<string>());
|
|
|
|
processServices[item.Status.ServiceStatusProcess.ProcessID].Add(item.Status.ServiceName);
|
|
}
|
|
}
|
|
|
|
public void serviceP_DictionaryModified(ServiceItem oldItem, ServiceItem newItem)
|
|
{
|
|
var oldState = oldItem.Status.ServiceStatusProcess.CurrentState;
|
|
var newState = newItem.Status.ServiceStatusProcess.CurrentState;
|
|
|
|
if ((oldState == ServiceState.Paused || oldState == ServiceState.Stopped ||
|
|
oldState == ServiceState.StartPending) &&
|
|
newState == ServiceState.Running)
|
|
{
|
|
this.QueueMessage("Service Started: " + newItem.Status.ServiceName +
|
|
" (" + newItem.Status.ServiceStatusProcess.ServiceType.ToString() + ")" +
|
|
((newItem.Status.DisplayName != "") ?
|
|
" (" + newItem.Status.DisplayName + ")" :
|
|
""), null);
|
|
|
|
if (startedSMenuItem.Checked)
|
|
this.GetFirstIcon().ShowBalloonTip(2000, "Service Started",
|
|
"The service " + newItem.Status.ServiceName + " (" + newItem.Status.DisplayName + ") has been started.",
|
|
ToolTipIcon.Info);
|
|
}
|
|
|
|
if (oldState == ServiceState.Running &&
|
|
newState == ServiceState.Paused)
|
|
this.QueueMessage("Service Paused: " + newItem.Status.ServiceName +
|
|
" (" + newItem.Status.ServiceStatusProcess.ServiceType.ToString() + ")" +
|
|
((newItem.Status.DisplayName != "") ?
|
|
" (" + newItem.Status.DisplayName + ")" :
|
|
""), null);
|
|
|
|
if (oldState == ServiceState.Running &&
|
|
newState == ServiceState.Stopped)
|
|
{
|
|
this.QueueMessage("Service Stopped: " + newItem.Status.ServiceName +
|
|
" (" + newItem.Status.ServiceStatusProcess.ServiceType.ToString() + ")" +
|
|
((newItem.Status.DisplayName != "") ?
|
|
" (" + newItem.Status.DisplayName + ")" :
|
|
""), null);
|
|
|
|
if (stoppedSMenuItem.Checked)
|
|
this.GetFirstIcon().ShowBalloonTip(2000, "Service Stopped",
|
|
"The service " + newItem.Status.ServiceName + " (" + newItem.Status.DisplayName + ") has been stopped.",
|
|
ToolTipIcon.Info);
|
|
}
|
|
}
|
|
|
|
public void serviceP_DictionaryModified_Process(ServiceItem oldItem, ServiceItem newItem)
|
|
{
|
|
ServiceItem sitem = (ServiceItem)newItem;
|
|
|
|
if (sitem.Status.ServiceStatusProcess.ProcessID != 0)
|
|
{
|
|
if (!processServices.ContainsKey(sitem.Status.ServiceStatusProcess.ProcessID))
|
|
processServices.Add(sitem.Status.ServiceStatusProcess.ProcessID, new List<string>());
|
|
|
|
if (!processServices[sitem.Status.ServiceStatusProcess.ProcessID].Contains(
|
|
sitem.Status.ServiceName))
|
|
processServices[sitem.Status.ServiceStatusProcess.ProcessID].Add(sitem.Status.ServiceName);
|
|
|
|
processServices[sitem.Status.ServiceStatusProcess.ProcessID].Sort();
|
|
}
|
|
else
|
|
{
|
|
int oldId = ((ServiceItem)oldItem).Status.ServiceStatusProcess.ProcessID;
|
|
|
|
if (processServices.ContainsKey(oldId))
|
|
{
|
|
if (processServices[oldId].Contains(
|
|
sitem.Status.ServiceName))
|
|
processServices[oldId].Remove(sitem.Status.ServiceName);
|
|
}
|
|
}
|
|
}
|
|
|
|
public void serviceP_DictionaryRemoved(ServiceItem item)
|
|
{
|
|
this.QueueMessage("Deleted Service: " + item.Status.ServiceName +
|
|
" (" + item.Status.ServiceStatusProcess.ServiceType.ToString() + ")" +
|
|
((item.Status.DisplayName != "") ?
|
|
" (" + item.Status.DisplayName + ")" :
|
|
""), null);
|
|
|
|
if (DSMenuItem.Checked)
|
|
this.GetFirstIcon().ShowBalloonTip(2000, "Service Deleted",
|
|
"The service " + item.Status.ServiceName + " (" + item.Status.DisplayName + ") has been deleted.",
|
|
ToolTipIcon.Info);
|
|
}
|
|
|
|
public void serviceP_DictionaryRemoved_Process(ServiceItem item)
|
|
{
|
|
if (item.Status.ServiceStatusProcess.ProcessID != 0)
|
|
{
|
|
if (processServices.ContainsKey(item.Status.ServiceStatusProcess.ProcessID))
|
|
{
|
|
if (processServices[item.Status.ServiceStatusProcess.ProcessID].Contains(
|
|
item.Status.ServiceName))
|
|
processServices[item.Status.ServiceStatusProcess.ProcessID].Remove(item.Status.ServiceName);
|
|
}
|
|
}
|
|
}
|
|
|
|
#endregion
|
|
|
|
#region Service Context Menu
|
|
|
|
private void menuService_Popup(object sender, EventArgs e)
|
|
{
|
|
if (listServices.SelectedItems.Count == 0)
|
|
{
|
|
menuService.DisableAll();
|
|
goToProcessServiceMenuItem.Visible = true;
|
|
startServiceMenuItem.Visible = true;
|
|
continueServiceMenuItem.Visible = true;
|
|
pauseServiceMenuItem.Visible = true;
|
|
stopServiceMenuItem.Visible = true;
|
|
|
|
selectAllServiceMenuItem.Enabled = true;
|
|
}
|
|
else if (listServices.SelectedItems.Count == 1)
|
|
{
|
|
menuService.EnableAll();
|
|
|
|
goToProcessServiceMenuItem.Visible = true;
|
|
startServiceMenuItem.Visible = true;
|
|
continueServiceMenuItem.Visible = true;
|
|
pauseServiceMenuItem.Visible = true;
|
|
stopServiceMenuItem.Visible = true;
|
|
|
|
try
|
|
{
|
|
ServiceItem item = serviceP.Dictionary[listServices.SelectedItems[0].Name];
|
|
|
|
if (item.Status.ServiceStatusProcess.ProcessID != 0)
|
|
{
|
|
goToProcessServiceMenuItem.Enabled = true;
|
|
}
|
|
else
|
|
{
|
|
goToProcessServiceMenuItem.Enabled = false;
|
|
}
|
|
|
|
if ((item.Status.ServiceStatusProcess.ControlsAccepted & ServiceAccept.PauseContinue)
|
|
== 0)
|
|
{
|
|
continueServiceMenuItem.Visible = false;
|
|
pauseServiceMenuItem.Visible = false;
|
|
}
|
|
else
|
|
{
|
|
continueServiceMenuItem.Visible = true;
|
|
pauseServiceMenuItem.Visible = true;
|
|
}
|
|
|
|
if (item.Status.ServiceStatusProcess.CurrentState == ServiceState.Paused)
|
|
{
|
|
startServiceMenuItem.Enabled = false;
|
|
pauseServiceMenuItem.Enabled = false;
|
|
}
|
|
else if (item.Status.ServiceStatusProcess.CurrentState == ServiceState.Running)
|
|
{
|
|
startServiceMenuItem.Enabled = false;
|
|
continueServiceMenuItem.Enabled = false;
|
|
}
|
|
else if (item.Status.ServiceStatusProcess.CurrentState == ServiceState.Stopped)
|
|
{
|
|
pauseServiceMenuItem.Enabled = false;
|
|
stopServiceMenuItem.Enabled = false;
|
|
}
|
|
|
|
if ((item.Status.ServiceStatusProcess.ControlsAccepted & ServiceAccept.Stop) == 0 &&
|
|
item.Status.ServiceStatusProcess.CurrentState == ServiceState.Running)
|
|
{
|
|
stopServiceMenuItem.Enabled = false;
|
|
}
|
|
}
|
|
catch
|
|
{
|
|
menuService.DisableAll();
|
|
copyServiceMenuItem.Enabled = true;
|
|
propertiesServiceMenuItem.Enabled = true;
|
|
}
|
|
}
|
|
else
|
|
{
|
|
menuService.DisableAll();
|
|
|
|
goToProcessServiceMenuItem.Visible = false;
|
|
startServiceMenuItem.Visible = false;
|
|
continueServiceMenuItem.Visible = false;
|
|
pauseServiceMenuItem.Visible = false;
|
|
stopServiceMenuItem.Visible = false;
|
|
|
|
copyServiceMenuItem.Enabled = true;
|
|
propertiesServiceMenuItem.Enabled = true;
|
|
selectAllServiceMenuItem.Enabled = true;
|
|
}
|
|
|
|
if (listServices.List.Items.Count == 0)
|
|
selectAllServiceMenuItem.Enabled = false;
|
|
}
|
|
|
|
private void goToProcessServiceMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
DeselectAll(treeProcesses.Tree);
|
|
|
|
try
|
|
{
|
|
TreeNodeAdv node = treeProcesses.FindTreeNode(serviceP.Dictionary[
|
|
listServices.SelectedItems[0].Name].Status.ServiceStatusProcess.ProcessID);
|
|
|
|
node.EnsureVisible();
|
|
node.IsSelected = true;
|
|
treeProcesses.Tree.FullUpdate();
|
|
|
|
tabControl.SelectedTab = tabProcesses;
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
Logging.Log(ex);
|
|
}
|
|
}
|
|
|
|
private void startServiceMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
ServiceActions.Start(this, listServices.SelectedItems[0].Name, false);
|
|
}
|
|
|
|
private void continueServiceMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
ServiceActions.Continue(this, listServices.SelectedItems[0].Name, false);
|
|
}
|
|
|
|
private void pauseServiceMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
ServiceActions.Pause(this, listServices.SelectedItems[0].Name, false);
|
|
}
|
|
|
|
private void stopServiceMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
ServiceActions.Stop(this, listServices.SelectedItems[0].Name, false);
|
|
}
|
|
|
|
private void deleteServiceMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
if (listServices.SelectedItems.Count != 1)
|
|
return;
|
|
|
|
ServiceActions.Delete(this, listServices.SelectedItems[0].Name, true);
|
|
}
|
|
|
|
private void propertiesServiceMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
if (listServices.SelectedItems.Count == 0)
|
|
return;
|
|
|
|
List<string> selected = new List<string>();
|
|
ServiceWindow sw;
|
|
|
|
foreach (ListViewItem item in listServices.SelectedItems)
|
|
selected.Add(item.Name);
|
|
|
|
if (selected.Count == 1)
|
|
{
|
|
sw = new ServiceWindow(selected[0]);
|
|
}
|
|
else
|
|
{
|
|
sw = new ServiceWindow(selected.ToArray());
|
|
}
|
|
|
|
sw.TopMost = this.TopMost;
|
|
sw.ShowDialog();
|
|
}
|
|
|
|
private void selectAllServiceMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
Utils.SelectAll(listServices.Items);
|
|
}
|
|
|
|
#endregion
|
|
|
|
#region Tab Controls
|
|
|
|
private void tabControlBig_SelectedIndexChanged(object sender, EventArgs e)
|
|
{
|
|
if (tabControl.SelectedTab == tabNetwork)
|
|
{
|
|
if (processP.RunCount > 0)
|
|
{
|
|
networkP.Enabled = true;
|
|
networkP.RunOnceAsync();
|
|
}
|
|
}
|
|
else
|
|
{
|
|
networkP.Enabled = false;
|
|
}
|
|
}
|
|
|
|
#endregion
|
|
|
|
#region Timers
|
|
|
|
private void timerMessages_Tick(object sender, EventArgs e)
|
|
{
|
|
if (statusMessages.Count != 0)
|
|
{
|
|
KeyValuePair<string, Icon> v = statusMessages.Dequeue();
|
|
statusText.Text = v.Key;
|
|
|
|
if (v.Value != null)
|
|
statusIcon.Icon = v.Value;
|
|
else
|
|
statusIcon.Icon = null;
|
|
}
|
|
else
|
|
{
|
|
statusText.Text = "";
|
|
statusIcon.Icon = null;
|
|
}
|
|
}
|
|
|
|
#endregion
|
|
|
|
#region ToolStrip Items
|
|
|
|
private void findHandlesToolStripButton_Click(object sender, EventArgs e)
|
|
{
|
|
findHandlesMenuItem_Click(sender, e);
|
|
}
|
|
|
|
private void refreshToolStripButton_Click(object sender, EventArgs e)
|
|
{
|
|
updateNowMenuItem_Click(sender, e);
|
|
}
|
|
|
|
private void sysInfoToolStripButton_Click(object sender, EventArgs e)
|
|
{
|
|
sysInfoMenuItem_Click(sender, e);
|
|
}
|
|
|
|
private void optionsToolStripButton_Click(object sender, EventArgs e)
|
|
{
|
|
optionsMenuItem_Click(sender, e);
|
|
}
|
|
|
|
#endregion
|
|
|
|
#region Trees
|
|
|
|
private void treeProcesses_KeyDown(object sender, KeyEventArgs e)
|
|
{
|
|
if (e.KeyData == Keys.Delete)
|
|
{
|
|
terminateMenuItem_Click(null, null);
|
|
}
|
|
else if (e.KeyData == Keys.Enter)
|
|
{
|
|
propertiesProcessMenuItem_Click(null, null);
|
|
}
|
|
else if (e.KeyData == (Keys.Control | Keys.M))
|
|
{
|
|
searchProcessMenuItem_Click(null, null);
|
|
}
|
|
}
|
|
|
|
private void treeProcesses_NodeMouseDoubleClick(object sender, TreeNodeAdvMouseEventArgs e)
|
|
{
|
|
propertiesProcessMenuItem_Click(null, null);
|
|
}
|
|
|
|
private void treeProcesses_SelectionChanged(object sender, EventArgs e)
|
|
{
|
|
processSelectedItems = treeProcesses.SelectedNodes.Count;
|
|
|
|
if (processSelectedItems == 1)
|
|
{
|
|
processSelectedPID = treeProcesses.SelectedNodes[0].Pid;
|
|
}
|
|
else
|
|
{
|
|
processSelectedPID = -1;
|
|
}
|
|
}
|
|
|
|
#endregion
|
|
|
|
#endregion
|
|
|
|
#region Form-related Helper functions
|
|
|
|
public void ApplyFont(Font f)
|
|
{
|
|
treeProcesses.Tree.Font = f;
|
|
|
|
if (f.Height > 16)
|
|
treeProcesses.Tree.RowHeight = f.Height;
|
|
else
|
|
treeProcesses.Tree.RowHeight = 16;
|
|
|
|
listServices.List.Font = f;
|
|
listNetwork.List.Font = f;
|
|
}
|
|
|
|
public void ClearLog()
|
|
{
|
|
_log.Clear();
|
|
|
|
if (this.LogUpdated != null)
|
|
this.LogUpdated(null);
|
|
}
|
|
|
|
private void CreateShutdownMenuItems()
|
|
{
|
|
AddMenuItemDelegate addMenuItem = (string text, EventHandler onClick) =>
|
|
{
|
|
shutdownMenuItem.MenuItems.Add(new MenuItem(text, onClick));
|
|
shutdownTrayMenuItem.MenuItems.Add(new MenuItem(text, onClick));
|
|
shutDownToolStripMenuItem.DropDownItems.Add(text, null, onClick);
|
|
};
|
|
|
|
addMenuItem("Lock", (sender, e) => { Win32.LockWorkStation(); });
|
|
addMenuItem("Logoff", (sender, e) => { Win32.ExitWindowsEx(ExitWindowsFlags.Logoff, 0); });
|
|
addMenuItem("-", null);
|
|
addMenuItem("Sleep", (sender, e) => { Win32.SetSuspendState(false, false, false); });
|
|
addMenuItem("Hibernate", (sender, e) => { Win32.SetSuspendState(true, false, false); });
|
|
addMenuItem("-", null);
|
|
addMenuItem("Restart", (sender, e) =>
|
|
{
|
|
if (MessageBox.Show("Are you sure you want to restart your computer?", "Process Hacker",
|
|
MessageBoxButtons.YesNo, MessageBoxIcon.Exclamation,
|
|
MessageBoxDefaultButton.Button2) == DialogResult.Yes)
|
|
Win32.ExitWindowsEx(ExitWindowsFlags.Reboot, 0);
|
|
});
|
|
addMenuItem("Shutdown", (sender, e) =>
|
|
{
|
|
if (MessageBox.Show("Are you sure you want to shutdown your computer?", "Process Hacker",
|
|
MessageBoxButtons.YesNo, MessageBoxIcon.Exclamation,
|
|
MessageBoxDefaultButton.Button2) == DialogResult.Yes)
|
|
Win32.ExitWindowsEx(ExitWindowsFlags.Shutdown, 0);
|
|
});
|
|
addMenuItem("Poweroff", (sender, e) =>
|
|
{
|
|
if (MessageBox.Show("Are you sure you want to poweroff your computer?", "Process Hacker",
|
|
MessageBoxButtons.YesNo, MessageBoxIcon.Exclamation,
|
|
MessageBoxDefaultButton.Button2) == DialogResult.Yes)
|
|
Win32.ExitWindowsEx(ExitWindowsFlags.Poweroff, 0);
|
|
});
|
|
}
|
|
|
|
public void DeselectAll(ListView list)
|
|
{
|
|
foreach (ListViewItem item in list.SelectedItems)
|
|
item.Selected = false;
|
|
}
|
|
|
|
public void DeselectAll(TreeViewAdv tree)
|
|
{
|
|
foreach (TreeNodeAdv node in tree.AllNodes)
|
|
node.IsSelected = false;
|
|
}
|
|
|
|
// Technique from http://www.vb-helper.com/howto_2008_uac_shield.html
|
|
private Bitmap GetUacShieldIcon()
|
|
{
|
|
const int width = 50;
|
|
const int height = 50;
|
|
const int margin = 4;
|
|
Bitmap shieldImage;
|
|
Button button = new Button()
|
|
{
|
|
Text = " ",
|
|
Size = new Size(width, height),
|
|
FlatStyle = FlatStyle.System
|
|
};
|
|
|
|
button.SetShieldIcon(true);
|
|
|
|
Bitmap buttonImage = new Bitmap(width, height);
|
|
|
|
button.Refresh();
|
|
button.DrawToBitmap(buttonImage, new Rectangle(0, 0, width, height));
|
|
|
|
int minX = width;
|
|
int maxX = 0;
|
|
int minY = width;
|
|
int maxY = 0;
|
|
|
|
for (int y = margin; y < height - margin; y++)
|
|
{
|
|
var targetColor = buttonImage.GetPixel(margin, y);
|
|
|
|
for (int x = margin; x < width - margin; x++)
|
|
{
|
|
if (buttonImage.GetPixel(x, y).Equals(targetColor))
|
|
{
|
|
buttonImage.SetPixel(x, y, Color.Transparent);
|
|
}
|
|
else
|
|
{
|
|
if (minY > y) minY = y;
|
|
if (minX > x) minX = x;
|
|
if (maxY < y) maxY = y;
|
|
if (maxX < x) maxX = x;
|
|
}
|
|
}
|
|
}
|
|
|
|
int shieldWidth = maxX - minX + 1;
|
|
int shieldHeight = maxY - minY + 1;
|
|
|
|
shieldImage = new Bitmap(shieldWidth, shieldHeight);
|
|
|
|
using (Graphics g = Graphics.FromImage(shieldImage))
|
|
g.DrawImage(buttonImage, 0, 0, new Rectangle(minX, minY, shieldWidth, shieldHeight), GraphicsUnit.Pixel);
|
|
|
|
buttonImage.Dispose();
|
|
|
|
return shieldImage;
|
|
}
|
|
|
|
private void LoadWindowSettings()
|
|
{
|
|
this.TopMost = Properties.Settings.Default.AlwaysOnTop;
|
|
this.Size = Properties.Settings.Default.WindowSize;
|
|
this.Location = Utils.FitRectangle(new Rectangle(
|
|
Properties.Settings.Default.WindowLocation, this.Size), this).Location;
|
|
|
|
if (Properties.Settings.Default.WindowState != FormWindowState.Minimized)
|
|
this.WindowState = Properties.Settings.Default.WindowState;
|
|
else
|
|
this.WindowState = FormWindowState.Normal;
|
|
}
|
|
|
|
private void LoadOtherSettings()
|
|
{
|
|
Utils.UnitSpecifier = Properties.Settings.Default.UnitSpecifier;
|
|
|
|
PromptBox.LastValue = Properties.Settings.Default.PromptBoxText;
|
|
toolbarMenuItem.Checked = toolStrip.Visible = Properties.Settings.Default.ToolbarVisible;
|
|
|
|
ColumnSettings.LoadSettings(Properties.Settings.Default.ProcessTreeColumns, treeProcesses.Tree);
|
|
ColumnSettings.LoadSettings(Properties.Settings.Default.ServiceListViewColumns, listServices.List);
|
|
ColumnSettings.LoadSettings(Properties.Settings.Default.NetworkListViewColumns, listNetwork.List);
|
|
|
|
HighlightingContext.Colors[ListViewItemState.New] = Properties.Settings.Default.ColorNew;
|
|
HighlightingContext.Colors[ListViewItemState.Removed] = Properties.Settings.Default.ColorRemoved;
|
|
TreeNodeAdv.StateColors[TreeNodeAdv.NodeState.New] = Properties.Settings.Default.ColorNew;
|
|
TreeNodeAdv.StateColors[TreeNodeAdv.NodeState.Removed] = Properties.Settings.Default.ColorRemoved;
|
|
|
|
Program.ImposterNames = new System.Collections.Specialized.StringCollection();
|
|
|
|
foreach (string s in Properties.Settings.Default.ImposterNames.Split(','))
|
|
Program.ImposterNames.Add(s.Trim());
|
|
|
|
HistoryManager.GlobalMaxCount = Properties.Settings.Default.MaxSamples;
|
|
ProcessHacker.Components.Plotter.GlobalMoveStep = Properties.Settings.Default.PlotterStep;
|
|
|
|
if (Win32.LoadLibrary(Properties.Settings.Default.DbgHelpPath) == IntPtr.Zero)
|
|
Win32.LoadLibrary("dbghelp.dll");
|
|
|
|
try
|
|
{
|
|
var modules = ProcessHandle.GetCurrent().GetModules();
|
|
|
|
foreach (var module in modules)
|
|
{
|
|
if (module.FileName.ToLowerInvariant().EndsWith("dbghelp.dll"))
|
|
{
|
|
var fi = new System.IO.FileInfo(module.FileName);
|
|
|
|
Win32.LoadLibrary(fi.DirectoryName + "\\symsrv.dll");
|
|
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
catch
|
|
{ }
|
|
}
|
|
|
|
public void QueueMessage(string message)
|
|
{
|
|
this.QueueMessage(message, null);
|
|
}
|
|
|
|
public void QueueMessage(string message, Icon icon)
|
|
{
|
|
var value = new KeyValuePair<DateTime, string>(DateTime.Now, message);
|
|
|
|
_log.Add(value);
|
|
statusMessages.Enqueue(new KeyValuePair<string, Icon>(message, icon));
|
|
|
|
if (this.LogUpdated != null)
|
|
this.LogUpdated(value);
|
|
}
|
|
|
|
private void SaveSettings()
|
|
{
|
|
if (this.WindowState == FormWindowState.Normal && this.Visible)
|
|
{
|
|
Properties.Settings.Default.WindowLocation = this.Location;
|
|
Properties.Settings.Default.WindowSize = this.Size;
|
|
}
|
|
|
|
Properties.Settings.Default.AlwaysOnTop = this.TopMost;
|
|
Properties.Settings.Default.WindowState = this.WindowState == FormWindowState.Minimized ?
|
|
FormWindowState.Normal : this.WindowState;
|
|
Properties.Settings.Default.ToolbarVisible = toolStrip.Visible;
|
|
|
|
Properties.Settings.Default.PromptBoxText = PromptBox.LastValue;
|
|
|
|
Properties.Settings.Default.ProcessTreeColumns = ColumnSettings.SaveSettings(treeProcesses.Tree);
|
|
Properties.Settings.Default.ServiceListViewColumns = ColumnSettings.SaveSettings(listServices.List);
|
|
Properties.Settings.Default.NetworkListViewColumns = ColumnSettings.SaveSettings(listNetwork.List);
|
|
|
|
Properties.Settings.Default.NewProcesses = NPMenuItem.Checked;
|
|
Properties.Settings.Default.TerminatedProcesses = TPMenuItem.Checked;
|
|
Properties.Settings.Default.NewServices = NSMenuItem.Checked;
|
|
Properties.Settings.Default.StartedServices = startedSMenuItem.Checked;
|
|
Properties.Settings.Default.StoppedServices = stoppedSMenuItem.Checked;
|
|
Properties.Settings.Default.DeletedServices = DSMenuItem.Checked;
|
|
|
|
try
|
|
{
|
|
Properties.Settings.Default.Save();
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
MessageBox.Show(ex.ToString());
|
|
}
|
|
}
|
|
|
|
public void SelectAll(TreeViewAdv tree)
|
|
{
|
|
foreach (TreeNodeAdv node in tree.AllNodes)
|
|
node.IsSelected = true;
|
|
}
|
|
|
|
private void UpdateStatusInfo()
|
|
{
|
|
if (processP.RunCount >= 1)
|
|
statusGeneral.Text = string.Format("{0} processes", processP.Dictionary.Count - 2);
|
|
else
|
|
statusGeneral.Text = "Loading...";
|
|
|
|
statusCPU.Text = "CPU: " + (processP.CurrentCpuUsage * 100).ToString("N2") + "%";
|
|
statusMemory.Text = "Phys. Memory: " +
|
|
((float)(processP.System.NumberOfPhysicalPages - processP.Performance.AvailablePages) * 100 /
|
|
processP.System.NumberOfPhysicalPages).ToString("N2") + "%";
|
|
}
|
|
|
|
#endregion
|
|
|
|
#region Helper functions
|
|
|
|
private void SetProcessPriority(ProcessPriorityClass priority)
|
|
{
|
|
try
|
|
{
|
|
using (var phandle = new ProcessHandle(processSelectedPID, ProcessAccess.SetInformation))
|
|
phandle.SetPriorityClass(priority);
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
MessageBox.Show("The priority could not be set:\n\n" + ex.Message,
|
|
"Process Hacker", MessageBoxButtons.OK, MessageBoxIcon.Error);
|
|
}
|
|
}
|
|
|
|
#endregion
|
|
|
|
#region Notification Icons
|
|
|
|
public void ExecuteOnIcons(Action<UsageIcon> action)
|
|
{
|
|
foreach (var icon in notifyIcons)
|
|
action(icon);
|
|
}
|
|
|
|
public UsageIcon GetFirstIcon()
|
|
{
|
|
foreach (var icon in notifyIcons)
|
|
if (icon.Visible)
|
|
return icon;
|
|
|
|
return dummyIcon;
|
|
}
|
|
|
|
public int GetIconsVisibleCount()
|
|
{
|
|
int count = 0;
|
|
|
|
foreach (var icon in notifyIcons)
|
|
if (icon.Visible)
|
|
count++;
|
|
|
|
return count;
|
|
}
|
|
|
|
public void ApplyIconVisibilities()
|
|
{
|
|
cpuHistoryIcon.Visible = cpuHistoryIcon.Enabled = Properties.Settings.Default.CpuHistoryIconVisible;
|
|
cpuUsageIcon.Visible = cpuUsageIcon.Enabled = Properties.Settings.Default.CpuUsageIconVisible;
|
|
ioHistoryIcon.Visible = ioHistoryIcon.Enabled = Properties.Settings.Default.IoHistoryIconVisible;
|
|
commitHistoryIcon.Visible = commitHistoryIcon.Enabled = Properties.Settings.Default.CommitHistoryIconVisible;
|
|
physMemHistoryIcon.Visible = physMemHistoryIcon.Enabled = Properties.Settings.Default.PhysMemHistoryIconVisible;
|
|
}
|
|
|
|
#endregion
|
|
|
|
protected override void WndProc(ref Message m)
|
|
{
|
|
switch (m.Msg)
|
|
{
|
|
// Magic number - PH uses this to detect previous instances.
|
|
case 0x9991:
|
|
{
|
|
this.Visible = true;
|
|
|
|
if (this.WindowState == FormWindowState.Minimized)
|
|
this.WindowState = FormWindowState.Normal;
|
|
|
|
m.Result = new IntPtr(0x1119);
|
|
|
|
return;
|
|
}
|
|
//break;
|
|
|
|
case (int)WindowMessage.SysCommand:
|
|
{
|
|
if (m.WParam.ToInt32() == 0xf020) // SC_MINIMIZE
|
|
{
|
|
try
|
|
{
|
|
if (this.WindowState == FormWindowState.Normal && this.Visible)
|
|
{
|
|
Properties.Settings.Default.WindowLocation = this.Location;
|
|
Properties.Settings.Default.WindowSize = this.Size;
|
|
}
|
|
|
|
if (this.GetIconsVisibleCount() > 0 && Properties.Settings.Default.HideWhenMinimized)
|
|
{
|
|
this.Visible = false;
|
|
|
|
return;
|
|
}
|
|
}
|
|
catch
|
|
{ }
|
|
}
|
|
}
|
|
break;
|
|
|
|
case (int)WindowMessage.Paint:
|
|
this.Painting();
|
|
break;
|
|
|
|
case (int)WindowMessage.Activate:
|
|
case (int)WindowMessage.KillFocus:
|
|
{
|
|
if (treeProcesses != null && treeProcesses.Tree != null)
|
|
treeProcesses.Tree.Invalidate();
|
|
}
|
|
break;
|
|
}
|
|
|
|
base.WndProc(ref m);
|
|
}
|
|
|
|
private void Exit()
|
|
{
|
|
//processP.Dispose();
|
|
//serviceP.Dispose();
|
|
//networkP.Dispose();
|
|
|
|
this.ExecuteOnIcons((icon) => icon.Visible = false);
|
|
SaveSettings();
|
|
this.Visible = false;
|
|
|
|
if (KProcessHacker.Instance != null)
|
|
KProcessHacker.Instance.Close();
|
|
|
|
try
|
|
{
|
|
Win32.ExitProcess(0);
|
|
}
|
|
catch
|
|
{ }
|
|
}
|
|
|
|
private void HackerWindow_FormClosing(object sender, FormClosingEventArgs e)
|
|
{
|
|
if (e.CloseReason == CloseReason.WindowsShutDown)
|
|
{
|
|
this.Exit();
|
|
return;
|
|
}
|
|
|
|
if (this.GetIconsVisibleCount() > 0 &&
|
|
Properties.Settings.Default.HideWhenClosed)
|
|
{
|
|
e.Cancel = true;
|
|
showHideMenuItem_Click(sender, null);
|
|
return;
|
|
}
|
|
|
|
this.Exit();
|
|
}
|
|
|
|
private void CheckedMenuItem_Click(object sender, EventArgs e)
|
|
{
|
|
((MenuItem)sender).Checked = !((MenuItem)sender).Checked;
|
|
}
|
|
|
|
private void UpdateCommon()
|
|
{
|
|
timerMessages.Enabled = true;
|
|
treeProcesses.RefreshItems();
|
|
}
|
|
|
|
public void LoadFixMenuItems()
|
|
{
|
|
if (!System.IO.File.Exists(Application.StartupPath + "\\Assistant.exe"))
|
|
{
|
|
runAsServiceMenuItem.Enabled = false;
|
|
runAsProcessMenuItem.Visible = false;
|
|
}
|
|
|
|
if (KProcessHacker.Instance == null)
|
|
hiddenProcessesMenuItem.Visible = false;
|
|
|
|
if (KProcessHacker.Instance == null || !OSVersion.HasSetAccessToken)
|
|
setTokenProcessMenuItem.Visible = false;
|
|
|
|
if (KProcessHacker.Instance == null || !Properties.Settings.Default.EnableExperimentalFeatures)
|
|
protectionProcessMenuItem.Visible = false;
|
|
|
|
if (!OSVersion.HasUac)
|
|
virtualizationProcessMenuItem.Visible = false;
|
|
|
|
apiLoggerMenuItem.Visible = false;
|
|
}
|
|
|
|
private void LoadUac()
|
|
{
|
|
if (Program.ElevationType == TokenElevationType.Limited)
|
|
{
|
|
uacShieldIcon = this.GetUacShieldIcon();
|
|
|
|
vistaMenu.SetImage(showDetailsForAllProcessesMenuItem, uacShieldIcon);
|
|
//vistaMenu.SetImage(startServiceMenuItem, uacShieldIcon);
|
|
//vistaMenu.SetImage(continueServiceMenuItem, uacShieldIcon);
|
|
//vistaMenu.SetImage(pauseServiceMenuItem, uacShieldIcon);
|
|
//vistaMenu.SetImage(stopServiceMenuItem, uacShieldIcon);
|
|
//vistaMenu.SetImage(deleteServiceMenuItem, uacShieldIcon);
|
|
//runAsServiceMenuItem.Visible = false;
|
|
//runAsProcessMenuItem.Visible = false;
|
|
}
|
|
else
|
|
{
|
|
runAsAdministratorMenuItem.Visible = false;
|
|
showDetailsForAllProcessesMenuItem.Visible = false;
|
|
}
|
|
}
|
|
|
|
private void LoadNotificationIcons()
|
|
{
|
|
using (Bitmap b = new Bitmap(16, 16))
|
|
{
|
|
using (Graphics g = Graphics.FromImage(b))
|
|
{
|
|
g.FillRectangle(new SolidBrush(Color.Black), 0, 0, b.Width, b.Height);
|
|
blackIcon = Icon.FromHandle(b.GetHicon());
|
|
}
|
|
}
|
|
|
|
dummyIcon = new UsageIcon();
|
|
notifyIcons.Add(cpuHistoryIcon = new CpuHistoryIcon() { Parent = this });
|
|
notifyIcons.Add(cpuUsageIcon = new CpuUsageIcon() { Parent = this });
|
|
notifyIcons.Add(ioHistoryIcon = new IoHistoryIcon() { Parent = this });
|
|
notifyIcons.Add(commitHistoryIcon = new CommitHistoryIcon() { Parent = this });
|
|
notifyIcons.Add(physMemHistoryIcon = new PhysMemHistoryIcon() { Parent = this });
|
|
|
|
foreach (var icon in notifyIcons)
|
|
icon.Icon = (Icon)blackIcon.Clone();
|
|
|
|
this.ExecuteOnIcons((icon) => icon.ContextMenu = menuIcon);
|
|
this.ExecuteOnIcons((icon) => icon.MouseDoubleClick += notifyIcon_MouseDoubleClick);
|
|
cpuHistoryMenuItem.Checked = Properties.Settings.Default.CpuHistoryIconVisible;
|
|
cpuUsageMenuItem.Checked = Properties.Settings.Default.CpuUsageIconVisible;
|
|
ioHistoryMenuItem.Checked = Properties.Settings.Default.IoHistoryIconVisible;
|
|
commitHistoryMenuItem.Checked = Properties.Settings.Default.CommitHistoryIconVisible;
|
|
physMemHistoryMenuItem.Checked = Properties.Settings.Default.PhysMemHistoryIconVisible;
|
|
this.ApplyIconVisibilities();
|
|
|
|
NPMenuItem.Checked = Properties.Settings.Default.NewProcesses;
|
|
TPMenuItem.Checked = Properties.Settings.Default.TerminatedProcesses;
|
|
NSMenuItem.Checked = Properties.Settings.Default.NewServices;
|
|
startedSMenuItem.Checked = Properties.Settings.Default.StartedServices;
|
|
stoppedSMenuItem.Checked = Properties.Settings.Default.StoppedServices;
|
|
DSMenuItem.Checked = Properties.Settings.Default.DeletedServices;
|
|
|
|
NPMenuItem.Click += new EventHandler(CheckedMenuItem_Click);
|
|
TPMenuItem.Click += new EventHandler(CheckedMenuItem_Click);
|
|
NSMenuItem.Click += new EventHandler(CheckedMenuItem_Click);
|
|
startedSMenuItem.Click += new EventHandler(CheckedMenuItem_Click);
|
|
stoppedSMenuItem.Click += new EventHandler(CheckedMenuItem_Click);
|
|
DSMenuItem.Click += new EventHandler(CheckedMenuItem_Click);
|
|
}
|
|
|
|
private void LoadControls()
|
|
{
|
|
listControls.Add(treeProcesses.Tree);
|
|
listControls.Add(listServices);
|
|
|
|
GenericViewMenu.AddMenuItems(copyProcessMenuItem.MenuItems, treeProcesses.Tree);
|
|
GenericViewMenu.AddMenuItems(copyServiceMenuItem.MenuItems, listServices.List, null);
|
|
GenericViewMenu.AddMenuItems(copyNetworkMenuItem.MenuItems, listNetwork.List, null);
|
|
|
|
treeProcesses.ContextMenu = menuProcess;
|
|
listServices.ContextMenu = menuService;
|
|
listNetwork.ContextMenu = menuNetwork;
|
|
|
|
processP.Interval = Properties.Settings.Default.RefreshInterval;
|
|
treeProcesses.Provider = processP;
|
|
treeProcesses.Tree.BeginUpdate();
|
|
treeProcesses.Tree.BeginCompleteUpdate();
|
|
this.Cursor = Cursors.WaitCursor;
|
|
processP.Updated += processP_Updated;
|
|
processP.Updated += processP_InfoUpdater;
|
|
processP.RunOnceAsync();
|
|
processP.Enabled = true;
|
|
updateProcessesMenuItem.Checked = true;
|
|
|
|
HighlightingContext.HighlightingDuration = Properties.Settings.Default.HighlightingDuration;
|
|
HighlightingContext.StateHighlighting = false;
|
|
|
|
listServices.List.BeginUpdate();
|
|
serviceP.Interval = Properties.Settings.Default.RefreshInterval;
|
|
listServices.Provider = serviceP;
|
|
serviceP.DictionaryAdded += serviceP_DictionaryAdded_Process;
|
|
serviceP.DictionaryModified += serviceP_DictionaryModified_Process;
|
|
serviceP.DictionaryRemoved += serviceP_DictionaryRemoved_Process;
|
|
serviceP.Updated += serviceP_Updated;
|
|
updateServicesMenuItem.Checked = true;
|
|
|
|
networkP.Interval = Properties.Settings.Default.RefreshInterval;
|
|
listNetwork.Provider = networkP;
|
|
|
|
treeProcesses.Tree.MouseDown += (sender, e) =>
|
|
{
|
|
if (e.Button == MouseButtons.Right && e.Location.Y < treeProcesses.Tree.ColumnHeaderHeight)
|
|
{
|
|
ContextMenu menu = new ContextMenu();
|
|
|
|
menu.MenuItems.Add(new MenuItem("Choose Columns...", (sender_, e_) =>
|
|
{
|
|
(new ChooseColumnsWindow(treeProcesses.Tree)
|
|
{
|
|
TopMost = this.TopMost
|
|
}).ShowDialog();
|
|
|
|
copyProcessMenuItem.MenuItems.DisposeAndClear();
|
|
GenericViewMenu.AddMenuItems(copyProcessMenuItem.MenuItems, treeProcesses.Tree);
|
|
treeProcesses.Tree.InvalidateNodeControlCache();
|
|
treeProcesses.Tree.Invalidate();
|
|
}));
|
|
|
|
menu.Show(treeProcesses.Tree, e.Location);
|
|
}
|
|
};
|
|
treeProcesses.Tree.ColumnClicked += (sender, e) => { DeselectAll(treeProcesses.Tree); };
|
|
treeProcesses.Tree.ColumnReordered += (sender, e) =>
|
|
{
|
|
copyProcessMenuItem.MenuItems.DisposeAndClear();
|
|
GenericViewMenu.AddMenuItems(copyProcessMenuItem.MenuItems, treeProcesses.Tree);
|
|
};
|
|
|
|
tabControlBig_SelectedIndexChanged(null, null);
|
|
}
|
|
|
|
private void LoadAddShortcuts()
|
|
{
|
|
treeProcesses.Tree.KeyDown +=
|
|
(sender, e) =>
|
|
{
|
|
if (e.Control && e.KeyCode == Keys.A)
|
|
{
|
|
treeProcesses.TreeNodes.SelectAll();
|
|
treeProcesses.Tree.Invalidate();
|
|
}
|
|
|
|
if (e.Control && e.KeyCode == Keys.C) GenericViewMenu.TreeViewAdvCopy(treeProcesses.Tree, -1);
|
|
};
|
|
listServices.List.AddShortcuts();
|
|
listNetwork.List.AddShortcuts();
|
|
}
|
|
|
|
private void LoadApplyCommandLineArgs()
|
|
{
|
|
tabControl.SelectedTab = tabControl.TabPages["tab" + Program.SelectTab];
|
|
}
|
|
|
|
private void LoadStructs()
|
|
{
|
|
try
|
|
{
|
|
if (System.IO.File.Exists(Application.StartupPath + "\\structs.txt"))
|
|
{
|
|
Structs.StructParser parser = new ProcessHacker.Structs.StructParser(Program.Structs);
|
|
|
|
parser.Parse(Application.StartupPath + "\\structs.txt");
|
|
}
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
QueueMessage("Error loading structure definitions: " + ex.Message);
|
|
}
|
|
}
|
|
|
|
private void LoadOther()
|
|
{
|
|
statusText.Text = "Waiting...";
|
|
|
|
try
|
|
{
|
|
this.Text +=
|
|
" [" + ProcessHandle.GetCurrent().GetToken(TokenAccess.Query).GetUser().GetName(true) +
|
|
(KProcessHacker.Instance != null ? "+" : "") + "]";
|
|
}
|
|
catch
|
|
{ }
|
|
|
|
// If it's Vista and we're elevated, we should allow the magic window message to allow
|
|
// Allow only one instance to work.
|
|
if (OSVersion.HasUac &&
|
|
Program.ElevationType == TokenElevationType.Full)
|
|
{
|
|
Win32.ChangeWindowMessageFilter((WindowMessage)0x9991, UipiFilterFlag.Add);
|
|
}
|
|
}
|
|
|
|
public HackerWindow()
|
|
{
|
|
Program.HackerWindow = this;
|
|
processP = Program.ProcessProvider;
|
|
serviceP = Program.ServiceProvider;
|
|
networkP = Program.NetworkProvider;
|
|
|
|
InitializeComponent();
|
|
this.AddEscapeToClose();
|
|
|
|
// Force the handle to be created
|
|
{ var handle = this.Handle; }
|
|
|
|
this.LoadWindowSettings();
|
|
this.LoadOtherSettings();
|
|
this.LoadControls();
|
|
this.LoadNotificationIcons();
|
|
|
|
if ((!Properties.Settings.Default.StartHidden && !Program.StartHidden) ||
|
|
Program.StartVisible)
|
|
{
|
|
this.Visible = true;
|
|
}
|
|
|
|
if (tabControl.SelectedTab == tabProcesses)
|
|
treeProcesses.Tree.Select();
|
|
|
|
this.LoadOther();
|
|
|
|
this.LoadStructs();
|
|
vistaMenu.DelaySetImageCalls = false;
|
|
vistaMenu.PerformPendingSetImageCalls();
|
|
serviceP.RunOnceAsync();
|
|
serviceP.Enabled = true;
|
|
|
|
dontCalculate = false;
|
|
}
|
|
|
|
private void HackerWindow_Load(object sender, EventArgs e)
|
|
{
|
|
Program.UpdateWindow(this);
|
|
this.ApplyFont(Properties.Settings.Default.Font);
|
|
this.BeginInvoke(new MethodInvoker(this.LoadApplyCommandLineArgs));
|
|
}
|
|
|
|
private void HackerWindow_SizeChanged(object sender, EventArgs e)
|
|
{
|
|
tabControl.Invalidate(false);
|
|
}
|
|
|
|
private void HackerWindow_VisibleChanged(object sender, EventArgs e)
|
|
{
|
|
treeProcesses.Draw = this.Visible;
|
|
}
|
|
|
|
private bool dontCalculate = true;
|
|
|
|
protected override void OnResize(EventArgs e)
|
|
{
|
|
if (dontCalculate)
|
|
return;
|
|
|
|
//
|
|
// Size grip bug fix as per
|
|
// http://jelle.druyts.net/2003/10/20/StatusBarResizeBug.aspx
|
|
//
|
|
if (statusBar != null)
|
|
{
|
|
statusBar.SizingGrip = (WindowState == FormWindowState.Normal);
|
|
}
|
|
|
|
base.OnResize(e);
|
|
}
|
|
|
|
private bool isFirstPaint = true;
|
|
|
|
private void Painting()
|
|
{
|
|
if (isFirstPaint)
|
|
{
|
|
isFirstPaint = false;
|
|
this.CreateShutdownMenuItems();
|
|
this.LoadFixMenuItems();
|
|
this.LoadUac();
|
|
this.LoadAddShortcuts();
|
|
}
|
|
}
|
|
}
|
|
}
|