Add highlighting for partially suspended processes

Author: dmex

ProcessHacker/include/phsettings.h

@@ -57,6 +57,8 @@ EXT ULONG PhCsUseColorPacked;
 EXT ULONG PhCsColorPacked;
 EXT ULONG PhCsUseColorLowImageCoherency;
 EXT ULONG PhCsColorLowImageCoherency;
+EXT ULONG PhCsUseColorPartiallySuspended;
+EXT ULONG PhCsColorPartiallySuspended;
 EXT ULONG PhCsUseColorGuiThreads;
 EXT ULONG PhCsColorGuiThreads;
 EXT ULONG PhCsUseColorRelocatedModules;

ProcessHacker/options.c

@@ -3038,6 +3038,7 @@ static COLOR_ITEM ColorItems[] =
     COLOR_ITEM(L"ColorPicoProcesses", L"Pico processes", L"Processes that belong to the Windows subsystem for Linux."),
     COLOR_ITEM(L"ColorImmersiveProcesses", L"Immersive processes and DLLs", L"Processes and DLLs that belong to a Modern UI app."),
     COLOR_ITEM(L"ColorSuspended", L"Suspended processes and threads", L"Processes and threads that are suspended from execution."),
+    COLOR_ITEM(L"ColorPartiallySuspended", L"Partially suspended processes and threads", L"Processes and threads that are partially suspended from execution."),
     COLOR_ITEM(L"ColorDotNet", L".NET processes and DLLs", L".NET (i.e. managed) processes and DLLs."),
     COLOR_ITEM(L"ColorPacked", L"Packed processes", L"Executables are sometimes \"packed\" to reduce their size."),
     COLOR_ITEM(L"ColorLowImageCoherency", L"Low process image coherency", L"The image file backing the process has low coherency when compared to the mapped image."),

ProcessHacker/procprv.c

@@ -2471,7 +2471,18 @@ VOID PhProcessProviderUpdate(
                 modified = TRUE;
             }
 
-            processItem->IsPartiallySuspended = isPartiallySuspended;
+            if (PhCsUseColorPartiallySuspended) // HACK // Don't invalidate for partially suspended unless enabled (dmex)
+            {
+                if (processItem->IsPartiallySuspended != isPartiallySuspended)
+                {
+                    processItem->IsPartiallySuspended = isPartiallySuspended;
+                    modified = TRUE;
+                }
+            }
+            else
+            {
+                processItem->IsPartiallySuspended = isPartiallySuspended;
+            }
 
             // .NET
             if (processItem->UpdateIsDotNet)

ProcessHacker/proctree.c

@@ -3344,6 +3344,8 @@ BOOLEAN NTAPI PhpProcessTreeNewCallback(
                 getNodeColor->BackColor = PhCsColorDebuggedProcesses;
             else if (PhCsUseColorSuspended && processItem->IsSuspended)
                 getNodeColor->BackColor = PhCsColorSuspended;
+            else if (PhCsUseColorPartiallySuspended && processItem->ProcessId != SYSTEM_PROCESS_ID && processItem->IsPartiallySuspended)
+                getNodeColor->BackColor = PhCsColorPartiallySuspended;
             else if (PhCsUseColorProtectedProcess && processItem->Protection.Level != 0 && processItem->Protection.Level != UCHAR_MAX)
                 getNodeColor->BackColor = PhCsColorProtectedProcess;
             else if (PhCsUseColorHandleFiltered && processItem->IsProtectedHandle)

ProcessHacker/settings.c

@@ -252,7 +252,9 @@ VOID PhAddDefaultSettings(
     PhpAddIntegerSetting(L"UseColorPacked", L"1");
     PhpAddIntegerSetting(L"ColorPacked", L"9314ff"); // Deep Pink
     PhpAddIntegerSetting(L"UseColorLowImageCoherency", L"1");
-    PhpAddIntegerSetting(L"ColorLowImageCoherency", L"ff14b9"); // Deep Purple 
+    PhpAddIntegerSetting(L"ColorLowImageCoherency", L"ff14b9"); // Deep Purple
+    PhpAddIntegerSetting(L"UseColorPartiallySuspended", L"0");
+    PhpAddIntegerSetting(L"ColorPartiallySuspended", L"c0c0c0");
     PhpAddIntegerSetting(L"UseColorGuiThreads", L"1");
     PhpAddIntegerSetting(L"ColorGuiThreads", L"77ffff");
     PhpAddIntegerSetting(L"UseColorRelocatedModules", L"1");
@@ -333,6 +335,8 @@ VOID PhUpdateCachedSettings(
     PH_UPDATE_SETTING(ColorPacked);
     PH_UPDATE_SETTING(UseColorLowImageCoherency);
     PH_UPDATE_SETTING(ColorLowImageCoherency);
+    PH_UPDATE_SETTING(UseColorPartiallySuspended);
+    PH_UPDATE_SETTING(ColorPartiallySuspended);
     PH_UPDATE_SETTING(UseColorGuiThreads);
     PH_UPDATE_SETTING(ColorGuiThreads);
     PH_UPDATE_SETTING(UseColorRelocatedModules);