add plugins-extra

plugins-extra/ObjectManagerPlugin/CHANGELOG.txt

@@ -0,0 +1,2 @@
+1.0
+ * Initial release

plugins-extra/ObjectManagerPlugin/ObjectManagerPlugin.vcxproj

@@ -0,0 +1,124 @@
+<?xml version="1.0" encoding="utf-8"?>
+<Project DefaultTargets="Build" ToolsVersion="14.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
+  <ItemGroup Label="ProjectConfigurations">
+    <ProjectConfiguration Include="Debug|Win32">
+      <Configuration>Debug</Configuration>
+      <Platform>Win32</Platform>
+    </ProjectConfiguration>
+    <ProjectConfiguration Include="Debug|x64">
+      <Configuration>Debug</Configuration>
+      <Platform>x64</Platform>
+    </ProjectConfiguration>
+    <ProjectConfiguration Include="Release|Win32">
+      <Configuration>Release</Configuration>
+      <Platform>Win32</Platform>
+    </ProjectConfiguration>
+    <ProjectConfiguration Include="Release|x64">
+      <Configuration>Release</Configuration>
+      <Platform>x64</Platform>
+    </ProjectConfiguration>
+  </ItemGroup>
+  <PropertyGroup Label="Globals">
+    <ProjectGuid>{DADA7017-0A25-4E97-BC21-D7FE3DE2EBF3}</ProjectGuid>
+    <RootNamespace>ObjectManagerPlugin</RootNamespace>
+    <Keyword>Win32Proj</Keyword>
+    <ProjectName>ObjectManagerPlugin</ProjectName>
+    <WindowsTargetPlatformVersion>10.0.14393.0</WindowsTargetPlatformVersion>
+  </PropertyGroup>
+  <Import Project="$(VCTargetsPath)\Microsoft.Cpp.Default.props" />
+  <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|Win32'" Label="Configuration">
+    <ConfigurationType>DynamicLibrary</ConfigurationType>
+    <CharacterSet>Unicode</CharacterSet>
+    <PlatformToolset>v140</PlatformToolset>
+  </PropertyGroup>
+  <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Debug|Win32'" Label="Configuration">
+    <ConfigurationType>DynamicLibrary</ConfigurationType>
+    <CharacterSet>Unicode</CharacterSet>
+    <PlatformToolset>v140</PlatformToolset>
+  </PropertyGroup>
+  <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|x64'" Label="Configuration">
+    <ConfigurationType>DynamicLibrary</ConfigurationType>
+    <CharacterSet>Unicode</CharacterSet>
+    <PlatformToolset>v140</PlatformToolset>
+  </PropertyGroup>
+  <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Debug|x64'" Label="Configuration">
+    <ConfigurationType>DynamicLibrary</ConfigurationType>
+    <CharacterSet>Unicode</CharacterSet>
+    <PlatformToolset>v140</PlatformToolset>
+  </PropertyGroup>
+  <Import Project="$(VCTargetsPath)\Microsoft.Cpp.props" />
+  <ImportGroup Condition="'$(Configuration)|$(Platform)'=='Release|Win32'" Label="PropertySheets">
+    <Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
+    <Import Project="..\ExtraPlugins.props" />
+  </ImportGroup>
+  <ImportGroup Condition="'$(Configuration)|$(Platform)'=='Debug|Win32'" Label="PropertySheets">
+    <Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
+    <Import Project="..\ExtraPlugins.props" />
+  </ImportGroup>
+  <ImportGroup Condition="'$(Configuration)|$(Platform)'=='Release|x64'" Label="PropertySheets">
+    <Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
+    <Import Project="..\ExtraPlugins.props" />
+  </ImportGroup>
+  <ImportGroup Condition="'$(Configuration)|$(Platform)'=='Debug|x64'" Label="PropertySheets">
+    <Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
+    <Import Project="..\ExtraPlugins.props" />
+  </ImportGroup>
+  <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Debug|Win32'">
+    <LibraryPath>$(VC_LibraryPath_x86);$(WindowsSDK_LibraryPath_x86);$(NETFXKitsDir)Lib\um\x86;C:\Users\AirDog46\Downloads\processhacker-2.39-src\bin\Debug32</LibraryPath>
+  </PropertyGroup>
+  <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|x64'">
+    <LibraryPath>$(VC_LibraryPath_x64);$(WindowsSDK_LibraryPath_x64);$(NETFXKitsDir)Lib\um\x64;C:\Users\AirDog46\Downloads\processhacker-2.39-src\bin\Release64</LibraryPath>
+  </PropertyGroup>
+  <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|Win32'">
+    <LibraryPath>$(VC_LibraryPath_x86);$(WindowsSDK_LibraryPath_x86);$(NETFXKitsDir)Lib\um\x86;$(VC_LibraryPath_x86);$(WindowsSDK_LibraryPath_x86);$(NETFXKitsDir)Lib\um\x86;C:\Users\AirDog46\Downloads\processhacker-2.39-src\bin\Release32</LibraryPath>
+  </PropertyGroup>
+  <ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Debug|Win32'">
+    <ClCompile>
+      <TreatWarningAsError>false</TreatWarningAsError>
+    </ClCompile>
+  </ItemDefinitionGroup>
+  <ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Debug|x64'">
+    <ClCompile>
+      <TreatWarningAsError>false</TreatWarningAsError>
+    </ClCompile>
+  </ItemDefinitionGroup>
+  <ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Release|x64'">
+    <ClCompile>
+      <TreatWarningAsError>false</TreatWarningAsError>
+    </ClCompile>
+  </ItemDefinitionGroup>
+  <ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Release|Win32'">
+    <ClCompile>
+      <TreatWarningAsError>false</TreatWarningAsError>
+    </ClCompile>
+  </ItemDefinitionGroup>
+  <ItemGroup>
+    <ClCompile Include="dialog.c" />
+    <ClCompile Include="main.c" />
+  </ItemGroup>
+  <ItemGroup>
+    <ClInclude Include="main.h" />
+    <ClInclude Include="resource.h" />
+  </ItemGroup>
+  <ItemGroup>
+    <ResourceCompile Include="resource.rc" />
+  </ItemGroup>
+  <ItemGroup>
+    <Image Include="resources\device.ico" />
+    <Image Include="resources\dll.ico" />
+    <Image Include="resources\driver.ico" />
+    <Image Include="resources\event.ico" />
+    <Image Include="resources\folder.ico" />
+    <Image Include="resources\key.ico" />
+    <Image Include="resources\link.ico" />
+    <Image Include="resources\mutant.ico" />
+    <Image Include="resources\port.ico" />
+    <Image Include="resources\section.ico" />
+    <Image Include="resources\session.ico" />
+    <Image Include="resources\unknown.ico" />
+  </ItemGroup>
+  <ItemGroup>
+    <Text Include="CHANGELOG.txt" />
+  </ItemGroup>
+  <Import Project="$(VCTargetsPath)\Microsoft.Cpp.targets" />
+</Project>

plugins-extra/ObjectManagerPlugin/ObjectManagerPlugin.vcxproj.filters

@@ -0,0 +1,79 @@
+<?xml version="1.0" encoding="utf-8"?>
+<Project ToolsVersion="4.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
+  <ItemGroup>
+    <Filter Include="Header Files">
+      <UniqueIdentifier>{2b1bcc07-58c8-4fab-b0ca-e12640aa17bb}</UniqueIdentifier>
+    </Filter>
+    <Filter Include="Resource Files">
+      <UniqueIdentifier>{39f9a699-d371-4407-bc65-83c1d81239e6}</UniqueIdentifier>
+    </Filter>
+    <Filter Include="Source Files">
+      <UniqueIdentifier>{3c1d37d2-e413-4445-9f1b-a9dc75dd99f5}</UniqueIdentifier>
+    </Filter>
+    <Filter Include="Resource Files\Icons">
+      <UniqueIdentifier>{a8ad9d81-5be8-4204-bd37-050212059cbd}</UniqueIdentifier>
+    </Filter>
+  </ItemGroup>
+  <ItemGroup>
+    <ClCompile Include="main.c">
+      <Filter>Source Files</Filter>
+    </ClCompile>
+    <ClCompile Include="dialog.c">
+      <Filter>Source Files</Filter>
+    </ClCompile>
+  </ItemGroup>
+  <ItemGroup>
+    <ClInclude Include="resource.h">
+      <Filter>Header Files</Filter>
+    </ClInclude>
+    <ClInclude Include="main.h">
+      <Filter>Header Files</Filter>
+    </ClInclude>
+  </ItemGroup>
+  <ItemGroup>
+    <ResourceCompile Include="resource.rc">
+      <Filter>Resource Files</Filter>
+    </ResourceCompile>
+  </ItemGroup>
+  <ItemGroup>
+    <Image Include="resources\driver.ico">
+      <Filter>Resource Files\Icons</Filter>
+    </Image>
+    <Image Include="resources\folder.ico">
+      <Filter>Resource Files\Icons</Filter>
+    </Image>
+    <Image Include="resources\key.ico">
+      <Filter>Resource Files\Icons</Filter>
+    </Image>
+    <Image Include="resources\link.ico">
+      <Filter>Resource Files\Icons</Filter>
+    </Image>
+    <Image Include="resources\mutant.ico">
+      <Filter>Resource Files\Icons</Filter>
+    </Image>
+    <Image Include="resources\port.ico">
+      <Filter>Resource Files\Icons</Filter>
+    </Image>
+    <Image Include="resources\section.ico">
+      <Filter>Resource Files\Icons</Filter>
+    </Image>
+    <Image Include="resources\session.ico">
+      <Filter>Resource Files\Icons</Filter>
+    </Image>
+    <Image Include="resources\device.ico">
+      <Filter>Resource Files\Icons</Filter>
+    </Image>
+    <Image Include="resources\event.ico">
+      <Filter>Resource Files\Icons</Filter>
+    </Image>
+    <Image Include="resources\unknown.ico">
+      <Filter>Resource Files\Icons</Filter>
+    </Image>
+    <Image Include="resources\dll.ico">
+      <Filter>Resource Files\Icons</Filter>
+    </Image>
+  </ItemGroup>
+  <ItemGroup>
+    <Text Include="CHANGELOG.txt" />
+  </ItemGroup>
+</Project>

plugins-extra/ObjectManagerPlugin/dialog.c

@@ -0,0 +1,604 @@
+/*
+ * Process Hacker Extra Plugins -
+ *   Object Manager Plugin
+ *
+ * Copyright (C) 2016 dmex
+ *
+ * This file is part of Process Hacker.
+ *
+ * Process Hacker is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * Process Hacker is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with Process Hacker.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+#include "main.h"
+
+static PH_STRINGREF RootDirectoryObject = PH_STRINGREF_INIT(L"\\");
+
+PPH_STRING GetSelectedTreeViewPath(
+    _In_ POBJ_CONTEXT Context
+    )
+{
+    HTREEITEM treeItem;
+    PPH_STRING treePath = NULL;
+    WCHAR buffer[_MAX_FNAME] = L"";
+
+    treeItem = Context->SelectedTreeItem;
+
+    while (treeItem != Context->RootTreeObject)
+    {
+        TVITEM tvItem;
+        tvItem.mask = TVIF_PARAM | TVIF_HANDLE | TVIF_TEXT;
+        tvItem.hItem = treeItem;
+        tvItem.pszText = buffer;
+        tvItem.cchTextMax = ARRAYSIZE(buffer);
+
+        if (!TreeView_GetItem(Context->TreeViewHandle, &tvItem))
+            break;
+
+        if (treePath)
+            treePath = PhaConcatStrings(3, buffer, L"\\", treePath->Buffer);
+        else
+            treePath = PhaCreateString(buffer);
+
+        treeItem = TreeView_GetParent(Context->TreeViewHandle, treeItem);
+    }
+
+    return PhConcatStrings(2, L"\\", treePath->Buffer);
+}
+
+HTREEITEM TreeViewAddItem(
+    _In_ HWND TreeViewHandle,
+    _In_ HTREEITEM Parent,
+    _In_ BOOLEAN Expanded,
+    _In_ PPH_STRINGREF Text
+    )
+{
+    TV_INSERTSTRUCT insert;
+
+    memset(&insert, 0, sizeof(TV_INSERTSTRUCT));
+
+    insert.item.mask = TVIF_TEXT | TVIF_STATE;
+    insert.hInsertAfter = TVI_LAST;
+    insert.hParent = Parent;
+    insert.item.pszText = Text->Buffer;
+
+    if (Expanded)
+    {
+        insert.item.state = insert.item.stateMask = TVIS_EXPANDED;
+    }
+
+    return TreeView_InsertItem(TreeViewHandle, &insert);
+}
+
+HTREEITEM TreeViewFindItem(
+    _In_ HWND TreeViewHandle, 
+    _In_ HTREEITEM ParentTreeItem, 
+    _In_ PWSTR Name
+    )
+{
+    TVITEM treeItem;
+
+    for (
+        treeItem.hItem = TreeView_GetChild(TreeViewHandle, ParentTreeItem);
+        treeItem.hItem;
+        treeItem.hItem = TreeView_GetNextSibling(TreeViewHandle, treeItem.hItem)
+        )
+    {
+        WCHAR itemText[_MAX_FNAME] = L"";
+
+        treeItem.mask = TVIF_TEXT | TVIF_CHILDREN;
+        treeItem.pszText = itemText;
+        treeItem.cchTextMax = ARRAYSIZE(itemText);
+
+        if (TreeView_GetItem(TreeViewHandle, &treeItem))
+        {
+            if (PhEqualStringZ(treeItem.pszText, Name, TRUE))
+            {
+                return treeItem.hItem;
+            }
+
+            if (treeItem.cChildren)
+            {
+                HTREEITEM treeChildren;
+                
+                if (treeChildren = TreeViewFindItem(TreeViewHandle, treeItem.hItem, Name))
+                { 
+                    return treeChildren;
+                }
+            }
+        }
+    }
+
+    return NULL;
+}
+
+INT AddListViewItem(
+    _In_ HWND ListViewHandle,
+    _In_ INT Index,
+    _In_ INT Image,
+    _In_ PWSTR Text,
+    _In_opt_ PVOID Param
+    )
+{
+    LVITEM item;
+
+    item.mask = LVIF_TEXT | LVIF_PARAM | LVIF_IMAGE;
+    item.iItem = Index;
+    item.iSubItem = 0;
+    item.iImage = Image;
+    item.pszText = Text;
+    item.lParam = (LPARAM)Param;
+
+    return ListView_InsertItem(ListViewHandle, &item);
+}
+
+VOID InitializeTreeImages(
+    _In_ POBJ_CONTEXT Context
+    )
+{
+    HICON icon;
+
+    Context->TreeImageList = ImageList_Create(22, 22, ILC_COLOR32, 1, 1);
+
+    icon = PhLoadIcon(PluginInstance->DllBase, MAKEINTRESOURCE(IDI_FOLDER), PH_LOAD_ICON_SIZE_LARGE, 16, 16);
+    ImageList_AddIcon(Context->TreeImageList, icon);
+    DestroyIcon(icon);
+}
+
+VOID InitializeListImages(
+    _In_ POBJ_CONTEXT Context
+    )
+{
+    HICON icon;
+
+    Context->ListImageList = ImageList_Create(22, 22, ILC_COLOR32, 10, 10);
+
+    icon = PhLoadIcon(PluginInstance->DllBase, MAKEINTRESOURCE(IDI_UNKNOWN), PH_LOAD_ICON_SIZE_LARGE, 22, 22);
+    ImageList_AddIcon(Context->ListImageList, icon);
+    DestroyIcon(icon);
+
+    icon = PhLoadIcon(PluginInstance->DllBase, MAKEINTRESOURCE(IDI_MUTANT), PH_LOAD_ICON_SIZE_LARGE, 22, 22);
+    ImageList_AddIcon(Context->ListImageList, icon);
+    DestroyIcon(icon);
+
+    icon = PhLoadIcon(PluginInstance->DllBase, MAKEINTRESOURCE(IDI_DRIVER), PH_LOAD_ICON_SIZE_LARGE, 22, 22);
+    ImageList_AddIcon(Context->ListImageList, icon);
+    DestroyIcon(icon);
+
+    icon = PhLoadIcon(PluginInstance->DllBase, MAKEINTRESOURCE(IDI_SECTION), PH_LOAD_ICON_SIZE_LARGE, 22, 22);
+    ImageList_AddIcon(Context->ListImageList, icon);
+    DestroyIcon(icon);
+
+    icon = PhLoadIcon(PluginInstance->DllBase, MAKEINTRESOURCE(IDI_LINK), PH_LOAD_ICON_SIZE_LARGE, 22, 22);
+    ImageList_AddIcon(Context->ListImageList, icon);
+    DestroyIcon(icon);
+
+    icon = PhLoadIcon(PluginInstance->DllBase, MAKEINTRESOURCE(IDI_KEY), PH_LOAD_ICON_SIZE_LARGE, 22, 22);
+    ImageList_AddIcon(Context->ListImageList, icon);
+    DestroyIcon(icon);
+
+    icon = PhLoadIcon(PluginInstance->DllBase, MAKEINTRESOURCE(IDI_PORT), PH_LOAD_ICON_SIZE_LARGE, 22, 22);
+    ImageList_AddIcon(Context->ListImageList, icon);
+    DestroyIcon(icon);
+
+    icon = PhLoadIcon(PluginInstance->DllBase, MAKEINTRESOURCE(IDI_ICON1), PH_LOAD_ICON_SIZE_LARGE, 22, 22);
+    ImageList_AddIcon(Context->ListImageList, icon);
+    DestroyIcon(icon);
+
+    icon = PhLoadIcon(PluginInstance->DllBase, MAKEINTRESOURCE(IDI_ICON2), PH_LOAD_ICON_SIZE_LARGE, 22, 22);
+    ImageList_AddIcon(Context->ListImageList, icon);
+    DestroyIcon(icon);
+
+    icon = PhLoadIcon(PluginInstance->DllBase, MAKEINTRESOURCE(IDI_ICON3), PH_LOAD_ICON_SIZE_LARGE, 22, 22);
+    ImageList_AddIcon(Context->ListImageList, icon);
+    DestroyIcon(icon);
+}
+
+static BOOLEAN NTAPI EnumDirectoryObjectsCallback(
+    _In_ PPH_STRINGREF Name,
+    _In_ PPH_STRINGREF TypeName,
+    _In_opt_ PVOID Context
+    )
+{
+    PDIRECTORY_ENUM_CONTEXT context = (PDIRECTORY_ENUM_CONTEXT)Context;
+
+    if (PhEqualStringZ(TypeName->Buffer, L"Directory", TRUE))
+    {
+        PPH_STRING childDirectoryPath;
+        HTREEITEM currentItem;
+
+        if (PhEqualStringRef(&context->DirectoryPath, &RootDirectoryObject, TRUE))
+        {
+            childDirectoryPath = PhConcatStringRef2(&context->DirectoryPath, Name);
+        }
+        else
+        {
+            childDirectoryPath = PhConcatStrings(3, context->DirectoryPath.Buffer, L"\\", Name->Buffer);
+        }
+
+        currentItem = TreeViewAddItem(
+            context->TreeViewHandle, 
+            context->RootTreeItem, 
+            FALSE, 
+            Name
+            );
+
+        // Recursively enumerate all subdirectories.
+        EnumDirectoryObjects(
+            context->TreeViewHandle, 
+            currentItem, 
+            PhGetStringRef(childDirectoryPath)
+            );
+
+        PhDereferenceObject(childDirectoryPath);
+    }
+
+    return TRUE;
+}
+
+static BOOLEAN NTAPI EnumCurrentDirectoryObjectsCallback(
+    _In_ PPH_STRINGREF Name,
+    _In_ PPH_STRINGREF TypeName,
+    _In_opt_ PVOID Context
+    )
+{
+    POBJ_CONTEXT context = (POBJ_CONTEXT)Context;
+
+    if (PhEqualStringZ(TypeName->Buffer, L"Directory", TRUE))
+    {
+        if (!TreeViewFindItem(context->TreeViewHandle, context->SelectedTreeItem, Name->Buffer))
+        {
+            TreeViewAddItem(context->TreeViewHandle, context->SelectedTreeItem, TRUE, Name);
+        }
+    }
+    else
+    {
+        INT index;
+        INT imageIndex;
+        POBJECT_ENTRY entry;
+        
+        entry = PhAllocate(sizeof(OBJECT_ENTRY));
+        memset(entry, 0, sizeof(OBJECT_ENTRY));
+
+        entry->Name = PhCreateString2(Name);
+        entry->TypeName = PhCreateString2(TypeName);
+      
+        if (PhEqualStringRef2(TypeName, L"ALPC Port", TRUE))
+        {
+            imageIndex = 6;
+        }
+        else if (PhEqualStringRef2(TypeName, L"Device", TRUE))
+        {
+            imageIndex = 2;
+        }
+        else if (PhEqualStringRef2(TypeName, L"Driver", TRUE))
+        {
+            imageIndex = 9;
+        }
+        else if (PhEqualStringRef2(TypeName, L"Event", TRUE))
+        {
+            imageIndex = 8;
+        }
+        else if (PhEqualStringRef2(TypeName, L"Key", TRUE))
+        {
+            imageIndex = 5;
+        }
+        else if (PhEqualStringRef2(TypeName, L"Mutant", TRUE))
+        {
+            imageIndex = 1;
+        }
+        else if (PhEqualStringRef2(TypeName, L"Section", TRUE))
+        {
+            imageIndex = 3;
+        }
+        else if (PhEqualStringRef2(TypeName, L"Session", TRUE))
+        {
+            imageIndex = 7;
+        }
+        else if (PhEqualStringRef2(TypeName, L"SymbolicLink", TRUE))
+        {
+            imageIndex = 4;
+        }
+        else
+        {
+            imageIndex = 0;
+        }
+
+        index = AddListViewItem(
+            context->ListViewHandle,
+            MAXINT,
+            imageIndex,
+            Name->Buffer,
+            entry
+            );
+
+        PhSetListViewSubItem(
+            context->ListViewHandle, 
+            index,
+            1, 
+            TypeName->Buffer
+            );
+    }
+
+    return TRUE;
+}
+
+NTSTATUS EnumDirectoryObjects(
+    _In_ HWND TreeViewHandle, 
+    _In_ HTREEITEM RootTreeItem,
+    _In_ PH_STRINGREF DirectoryPath
+    )
+{
+    HANDLE directoryHandle;
+    OBJECT_ATTRIBUTES oa;
+    UNICODE_STRING name;
+
+    PhStringRefToUnicodeString(&DirectoryPath, &name);
+
+    InitializeObjectAttributes(
+        &oa, 
+        &name, 
+        0, 
+        NULL, 
+        NULL
+        );
+
+    if (NT_SUCCESS(NtOpenDirectoryObject(
+        &directoryHandle, 
+        DIRECTORY_QUERY, 
+        &oa
+        )))
+    {
+        DIRECTORY_ENUM_CONTEXT enumContext;
+
+        enumContext.TreeViewHandle = TreeViewHandle;
+        enumContext.RootTreeItem = RootTreeItem;
+        enumContext.DirectoryPath = DirectoryPath;
+
+        PhEnumDirectoryObjects(
+            directoryHandle, 
+            EnumDirectoryObjectsCallback, 
+            &enumContext
+            );
+
+        NtClose(directoryHandle);
+    }
+
+    TreeView_SortChildren(TreeViewHandle, RootTreeItem, TRUE);
+
+    return STATUS_SUCCESS;
+}
+
+NTSTATUS EnumCurrentDirectoryObjects(
+    _In_ POBJ_CONTEXT Context,
+    _In_ PH_STRINGREF DirectoryPath
+    )
+{
+    HANDLE directoryHandle;
+    OBJECT_ATTRIBUTES oa;
+    UNICODE_STRING name;
+
+    PhStringRefToUnicodeString(&DirectoryPath, &name);
+
+    InitializeObjectAttributes(
+        &oa, 
+        &name, 
+        0, 
+        NULL, 
+        NULL
+        );
+
+    if (NT_SUCCESS(NtOpenDirectoryObject(
+        &directoryHandle, 
+        DIRECTORY_QUERY, 
+        &oa
+        )))
+    {
+        PhEnumDirectoryObjects(
+            directoryHandle, 
+            EnumCurrentDirectoryObjectsCallback,
+            Context
+            );
+
+        NtClose(directoryHandle);
+    }
+
+    ExtendedListView_SortItems(Context->ListViewHandle);
+
+    return STATUS_SUCCESS;
+}
+
+INT NTAPI WinObjNameCompareFunction(
+    _In_ PVOID Item1,
+    _In_ PVOID Item2,
+    _In_opt_ PVOID Context
+    )
+{
+    POBJECT_ENTRY item1 = Item1;
+    POBJECT_ENTRY item2 = Item2;
+
+    return PhCompareStringZ(PhGetStringOrEmpty(item1->Name), PhGetStringOrEmpty(item2->Name), TRUE);
+}
+
+INT NTAPI WinObjTypeCompareFunction(
+    _In_ PVOID Item1,
+    _In_ PVOID Item2,
+    _In_opt_ PVOID Context
+    )
+{
+    POBJECT_ENTRY item1 = Item1;
+    POBJECT_ENTRY item2 = Item2;
+
+    return PhCompareStringZ(PhGetStringOrEmpty(item1->TypeName), PhGetStringOrEmpty(item2->TypeName), TRUE);
+}
+
+INT_PTR CALLBACK WinObjDlgProc(
+    _In_ HWND hwndDlg,
+    _In_ UINT uMsg,
+    _In_ WPARAM wParam,
+    _In_ LPARAM lParam
+    )
+{
+    POBJ_CONTEXT context;
+
+    if (uMsg == WM_INITDIALOG)
+    {
+        context = PhAllocate(sizeof(OBJ_CONTEXT));
+        memset(context, 0, sizeof(OBJ_CONTEXT));
+
+        SetProp(hwndDlg, L"Context", (HANDLE)context);
+    }
+    else
+    {
+        context = (POBJ_CONTEXT)GetProp(hwndDlg, L"Context");
+
+        if (uMsg == WM_DESTROY)
+        {
+            if (context->TreeImageList)
+                ImageList_Destroy(context->TreeImageList);
+
+            if (context->ListImageList)
+                ImageList_Destroy(context->ListImageList);
+
+            PhSaveWindowPlacementToSetting(SETTING_NAME_WINDOW_POSITION, SETTING_NAME_WINDOW_SIZE, hwndDlg);
+            PhSaveListViewColumnsToSetting(SETTING_NAME_COLUMNS, context->ListViewHandle);
+            PhDeleteLayoutManager(&context->LayoutManager);
+            PhUnregisterDialog(hwndDlg); 
+            RemoveProp(hwndDlg, L"Context");
+            PhFree(context);
+        }
+    }
+
+    if (!context)
+        return FALSE;
+
+    switch (uMsg)
+    {
+    case WM_INITDIALOG:
+        {
+            PhCenterWindow(hwndDlg, PhMainWndHandle);
+
+            context->TreeViewHandle = GetDlgItem(hwndDlg, IDC_TREE1);
+            context->ListViewHandle = GetDlgItem(hwndDlg, IDC_FIREWALL_LIST);
+             
+            PhRegisterDialog(hwndDlg);
+            InitializeTreeImages(context);
+            InitializeListImages(context);
+            
+            PhSetControlTheme(context->TreeViewHandle, L"explorer");
+            TreeView_SetExtendedStyle(context->TreeViewHandle, TVS_EX_DOUBLEBUFFER, TVS_EX_DOUBLEBUFFER);
+            TreeView_SetImageList(context->TreeViewHandle, context->TreeImageList, TVSIL_NORMAL);
+            context->RootTreeObject = TreeViewAddItem(context->TreeViewHandle, TVI_ROOT, TRUE, &RootDirectoryObject);
+
+            PhSetControlTheme(context->ListViewHandle, L"explorer");
+            PhSetListViewStyle(context->ListViewHandle, FALSE, FALSE);
+            PhSetExtendedListView(context->ListViewHandle);
+            ListView_SetImageList(context->ListViewHandle, context->ListImageList, LVSIL_SMALL);
+            
+            PhAddListViewColumn(context->ListViewHandle, 0, 0, 0, LVCFMT_LEFT, 620, L"Name");
+            PhAddListViewColumn(context->ListViewHandle, 1, 1, 1, LVCFMT_LEFT, 150, L"Type");
+
+            ExtendedListView_SetSortFast(context->ListViewHandle, TRUE);
+            ExtendedListView_SetCompareFunction(context->ListViewHandle, 0, WinObjNameCompareFunction);
+            ExtendedListView_SetCompareFunction(context->ListViewHandle, 1, WinObjTypeCompareFunction);
+
+            PhInitializeLayoutManager(&context->LayoutManager, hwndDlg);
+            PhAddLayoutItem(&context->LayoutManager, context->TreeViewHandle, NULL, PH_ANCHOR_LEFT | PH_ANCHOR_TOP | PH_ANCHOR_BOTTOM);
+            PhAddLayoutItem(&context->LayoutManager, context->ListViewHandle, NULL, PH_ANCHOR_ALL);
+            PhLoadWindowPlacementFromSetting(SETTING_NAME_WINDOW_POSITION, SETTING_NAME_WINDOW_SIZE, hwndDlg);
+            PhLoadListViewColumnsFromSetting(SETTING_NAME_COLUMNS, context->ListViewHandle);       
+            
+            EnumDirectoryObjects(
+                context->TreeViewHandle, 
+                context->RootTreeObject, 
+                RootDirectoryObject
+                );
+
+            SendMessage(hwndDlg, WM_NEXTDLGCTL, (WPARAM)context->TreeViewHandle, TRUE);
+        }
+        break;
+    case WM_SIZE:
+        PhLayoutManagerLayout(&context->LayoutManager);
+        break;
+    case WM_COMMAND:
+        {
+            switch (LOWORD(wParam))
+            {
+            case IDCANCEL:
+                EndDialog(hwndDlg, IDOK);
+                break;
+            }
+        }
+        break;
+    case WM_NOTIFY:
+        {
+            LPNMHDR header = (LPNMHDR)lParam;
+
+            switch (header->code)
+            {
+            case TVN_SELCHANGED:
+                {
+                    context->SelectedTreeItem = TreeView_GetSelection(context->TreeViewHandle);
+
+                    ExtendedListView_SetRedraw(context->ListViewHandle, FALSE);
+                    ListView_DeleteAllItems(context->ListViewHandle);
+
+                    if (context->SelectedTreeItem == context->RootTreeObject)
+                    {
+                        EnumCurrentDirectoryObjects(context, RootDirectoryObject);
+                    }
+                    else
+                    {
+                        PPH_STRING selectedPath = GetSelectedTreeViewPath(context);
+
+                        EnumCurrentDirectoryObjects(
+                            context, 
+                            PhGetStringRef(selectedPath)
+                            );
+
+                        PhDereferenceObject(selectedPath);
+                    }
+
+                    ExtendedListView_SetRedraw(context->ListViewHandle, TRUE);
+                }
+                break;
+            case NM_SETCURSOR:
+                {
+                    if (header->hwndFrom == context->TreeViewHandle)
+                    {
+                        HCURSOR cursor = (HCURSOR)LoadImage(
+                            NULL, 
+                            IDC_ARROW, 
+                            IMAGE_CURSOR, 
+                            0, 
+                            0, 
+                            LR_SHARED
+                            );
+
+                        if (cursor != GetCursor())
+                        {
+                            SetCursor(cursor);
+                        }
+
+                        SetWindowLongPtr(hwndDlg, DWLP_MSGRESULT, TRUE);
+                        return TRUE;
+                    }
+                }
+                break;
+            }
+        }
+        break;
+    }
+
+    return FALSE;
+}

plugins-extra/ObjectManagerPlugin/main.c

@@ -0,0 +1,151 @@
+/*
+ * Process Hacker Extra Plugins -
+ *   Object Manager Plugin
+ *
+ * Copyright (C) 2016 dmex
+ *
+ * This file is part of Process Hacker.
+ *
+ * Process Hacker is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * Process Hacker is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with Process Hacker.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+#include "main.h"
+
+PPH_PLUGIN PluginInstance;
+static PH_CALLBACK_REGISTRATION PluginLoadCallbackRegistration;
+static PH_CALLBACK_REGISTRATION PluginShowOptionsCallbackRegistration;
+static PH_CALLBACK_REGISTRATION PluginMenuItemCallbackRegistration;
+static PH_CALLBACK_REGISTRATION MainMenuInitializingCallbackRegistration;
+
+VOID LoadCallback(
+    _In_opt_ PVOID Parameter,
+    _In_opt_ PVOID Context
+    )
+{
+    NOTHING;
+}
+
+VOID ShowOptionsCallback(
+    _In_opt_ PVOID Parameter,
+    _In_opt_ PVOID Context
+    )
+{
+    NOTHING;
+}
+
+VOID MenuItemCallback(
+    _In_opt_ PVOID Parameter,
+    _In_opt_ PVOID Context
+    )
+{
+    PPH_PLUGIN_MENU_ITEM menuItem = (PPH_PLUGIN_MENU_ITEM)Parameter;
+
+    if (menuItem != NULL)
+    {
+        switch (menuItem->Id)
+        {
+        case WINOBJ_MENU_ITEM:
+            {
+                 DialogBox(
+                     PluginInstance->DllBase,
+                     MAKEINTRESOURCE(IDD_OBJMGR),
+                     NULL,
+                     WinObjDlgProc
+                     );
+            }
+            break;
+        }
+    }
+}
+
+VOID NTAPI MainMenuInitializingCallback(
+    _In_opt_ PVOID Parameter,
+    _In_opt_ PVOID Context
+    )
+{
+    PPH_PLUGIN_MENU_INFORMATION menuInfo = Parameter;
+    PPH_EMENU_ITEM systemMenu;
+
+    if (menuInfo->u.MainMenu.SubMenuIndex != PH_MENU_ITEM_LOCATION_TOOLS)
+        return;
+
+    if (!(systemMenu = PhFindEMenuItem(menuInfo->Menu, 0, L"System", 0)))
+    {
+        PhInsertEMenuItem(menuInfo->Menu, PhPluginCreateEMenuItem(PluginInstance, PH_EMENU_SEPARATOR, 0, L"", NULL), -1);
+        PhInsertEMenuItem(menuInfo->Menu, systemMenu = PhPluginCreateEMenuItem(PluginInstance, 0, 0, L"System", NULL), -1);
+    }
+
+    PhInsertEMenuItem(systemMenu, PhPluginCreateEMenuItem(PluginInstance, 0, WINOBJ_MENU_ITEM, L"Object Manager", NULL), -1);
+}
+
+LOGICAL DllMain(
+    _In_ HINSTANCE Instance,
+    _In_ ULONG Reason,
+    _Reserved_ PVOID Reserved
+    )
+{
+    switch (Reason)
+    {
+    case DLL_PROCESS_ATTACH:
+        {
+            PPH_PLUGIN_INFORMATION info;
+            PH_SETTING_CREATE settings[] =
+            {
+                { IntegerPairSettingType, SETTING_NAME_WINDOW_POSITION, L"100,100" },
+                { ScalableIntegerPairSettingType, SETTING_NAME_WINDOW_SIZE, L"@96|1065,627" },
+                { StringSettingType, SETTING_NAME_COLUMNS, L"" }
+            };
+
+            PluginInstance = PhRegisterPlugin(PLUGIN_NAME, Instance, &info);
+
+            if (!PluginInstance)
+                return FALSE;
+
+            info->DisplayName = L"Object Manager";
+            info->Author = L"dmex";
+            info->Description = L"Plugin for viewing the NT Object Manager via the Tools menu";
+            info->HasOptions = FALSE;
+
+            PhRegisterCallback(
+                PhGetPluginCallback(PluginInstance, PluginCallbackLoad),
+                LoadCallback,
+                NULL,
+                &PluginLoadCallbackRegistration
+                );
+            PhRegisterCallback(
+                PhGetPluginCallback(PluginInstance, PluginCallbackShowOptions),
+                ShowOptionsCallback,
+                NULL,
+                &PluginShowOptionsCallbackRegistration
+                );
+            PhRegisterCallback(
+                PhGetPluginCallback(PluginInstance, PluginCallbackMenuItem),
+                MenuItemCallback,
+                NULL,
+                &PluginMenuItemCallbackRegistration
+                );
+            PhRegisterCallback(
+                PhGetGeneralCallback(GeneralCallbackMainMenuInitializing),
+                MainMenuInitializingCallback,
+                NULL,
+                &MainMenuInitializingCallbackRegistration
+                );
+
+            PhAddSettings(settings, ARRAYSIZE(settings));
+        }
+        break;
+    }
+
+    return TRUE;
+}

plugins-extra/ObjectManagerPlugin/main.h

@@ -0,0 +1,55 @@
+#ifndef _WINOBJ_H
+#define _WINOBJ_H
+
+#include <phdk.h>
+#include <workqueue.h>
+#include "resource.h"
+
+#define WINOBJ_MENU_ITEM 1000
+#define PLUGIN_NAME L"dmex.ObjectManagerPlugin"
+#define SETTING_NAME_WINDOW_POSITION (PLUGIN_NAME L".WindowPosition")
+#define SETTING_NAME_WINDOW_SIZE (PLUGIN_NAME L".WindowSize")
+#define SETTING_NAME_COLUMNS (PLUGIN_NAME L".WindowColumns")
+
+extern PPH_PLUGIN PluginInstance;
+
+typedef struct _OBJECT_ENTRY
+{
+    PPH_STRING Name;
+    PPH_STRING TypeName;
+} OBJECT_ENTRY, *POBJECT_ENTRY;
+
+typedef struct _OBJ_CONTEXT
+{
+    HWND ListViewHandle;
+    HWND TreeViewHandle;
+    PH_LAYOUT_MANAGER LayoutManager;
+
+    HTREEITEM RootTreeObject;
+    HTREEITEM SelectedTreeItem;
+
+    HIMAGELIST TreeImageList;
+    HIMAGELIST ListImageList;
+} OBJ_CONTEXT, *POBJ_CONTEXT;
+
+typedef struct _DIRECTORY_ENUM_CONTEXT
+{
+    HWND TreeViewHandle;
+    HTREEITEM RootTreeItem;
+    PH_STRINGREF DirectoryPath;
+} DIRECTORY_ENUM_CONTEXT, *PDIRECTORY_ENUM_CONTEXT;
+
+NTSTATUS EnumDirectoryObjects(
+    _In_ HWND TreeViewHandle,
+    _In_ HTREEITEM RootTreeItem,
+    _In_ PH_STRINGREF DirectoryPath
+    );
+
+INT_PTR CALLBACK WinObjDlgProc(
+    _In_ HWND hwndDlg,
+    _In_ UINT uMsg,
+    _In_ WPARAM wParam,
+    _In_ LPARAM lParam
+    );
+
+#endif