RtlQueryProcessPlaceholderCompatibilityMode function (ntifs.h)

RtlQueryProcessPlaceholderCompatibilityMode returns the placeholder compatibility mode for the current process.

Syntax

NTSYSAPI CHAR RtlQueryProcessPlaceholderCompatibilityMode();

Return value

This function returns the process's placeholder compatibily mode (PHCM_xxx), or a negative value on error (PCHM_ERROR_xxx). Contains one of the following values:

Compatibility Mode Value
PHCM_APPLICATION_DEFAULT 0
PHCM_DISGUISE_PLACEHOLDER 1
PHCM_EXPOSE_PLACEHOLDERS 2
PHCM_MAX 2
PHCM_ERROR_INVALID_PARAMETER -1
PHCM_ERROR_NO_TEB -2

Remarks

This function is similar to RtlQueryThreadPlaceholderCompatibilityMode, but performs at a process level instead of a thread level.

Requirements

Requirement Value
Minimum supported client Windows 10 (Version 1803)
Target Platform Universal
Header ntifs.h
Library NtosKrnl.exe

See also

RtlQueryThreadPlaceholderCompatibilityMode

RtlSetProcessPlaceholderCompatibilityMode

RtlSetThreadPlaceholderCompatibilityMode