RtlQueryProcessPlaceholderCompatibilityMode function (ntifs.h)
RtlQueryProcessPlaceholderCompatibilityMode returns the placeholder compatibility mode for the current process.
Syntax
NTSYSAPI CHAR RtlQueryProcessPlaceholderCompatibilityMode();
Return value
This function returns the process's placeholder compatibility mode (PHCM_xxx), or a negative value on error (PCHM_ERROR_xxx). Contains one of the following values:
Compatibility Mode | Value |
---|---|
PHCM_APPLICATION_DEFAULT | 0 |
PHCM_DISGUISE_PLACEHOLDER | 1 |
PHCM_EXPOSE_PLACEHOLDERS | 2 |
PHCM_MAX | 2 |
PHCM_ERROR_INVALID_PARAMETER | -1 |
PHCM_ERROR_NO_TEB | -2 |
Remarks
This function is similar to RtlQueryThreadPlaceholderCompatibilityMode, but performs at a process level instead of a thread level.
Requirements
Requirement | Value |
---|---|
Minimum supported client | Windows 10 (Version 1803) |
Target Platform | Universal |
Header | ntifs.h |
Library | NtosKrnl.exe |
See also
RtlQueryThreadPlaceholderCompatibilityMode