RtlQueryProcessPlaceholderCompatibilityMode function (ntifs.h)
RtlQueryProcessPlaceholderCompatibilityMode returns the placeholder compatibility mode for the current process.
Syntax
NTSYSAPI CHAR RtlQueryProcessPlaceholderCompatibilityMode();
Return value
This function returns the process's placeholder compatibility mode (PHCM_xxx), or a negative value on error (PCHM_ERROR_xxx). Contains one of the following values:
| Compatibility Mode | Value |
|---|---|
| PHCM_APPLICATION_DEFAULT | 0 |
| PHCM_DISGUISE_PLACEHOLDER | 1 |
| PHCM_EXPOSE_PLACEHOLDERS | 2 |
| PHCM_MAX | 2 |
| PHCM_ERROR_INVALID_PARAMETER | -1 |
| PHCM_ERROR_NO_TEB | -2 |
Remarks
This function is similar to RtlQueryThreadPlaceholderCompatibilityMode, but performs at a process level instead of a thread level.
Requirements
| Requirement | Value |
|---|---|
| Minimum supported client | Windows 10 (Version 1803) |
| Target Platform | Universal |
| Header | ntifs.h |
| Library | NtosKrnl.exe |
See also
RtlQueryThreadPlaceholderCompatibilityMode