objmgr cleanup and improvements

- Handles tab Refresh (F5) button added.
- EtTreeViewFindItem add reverse scan for more reliable result.
- [Resolver] Extract Section information for more kernel objects using driver.

SystemInformer/main.c

@@ -40,10 +40,6 @@ VOID PhInitializeCommonControls(
     VOID
     );
 
-VOID PhInitializeSuperclassControls( // delayhook.c
-    VOID
-    );
-
 BOOLEAN PhInitializeAppSystem(
     VOID
     );

phlib/delayhook.c

@@ -2158,6 +2158,16 @@ VOID PhInitializeSuperclassControls(
     if (PhEnableThemeAcrylicSupport)
         PhEnableThemeAcrylicSupport = PhIsThemeTransparencyEnabled();
 
+    // If PreferredAppMode is not set, PhShouldAppsUseDarkMode returns current Windows app color mode.
+    // When app mode set to always dark/light all subsequent calls to PhShouldAppsUseDarkMode always ignore
+    // the current Windows app color mode and return:
+    // AppMode = PreferredAppModeDarkAlways         always return TRUE
+    // AppMode = PreferredAppModeLightAlways        always return FALSE
+    //
+    // It's very convenient because all new opened windows (especially plugin windows) will always have same theme
+    // even if the system theme was changed while SI is running. To update theme in this case SI restart is required.
+    PhSetPreferredAppMode(PhEnableThemeSupport ? PreferredAppModeDarkAlways : PreferredAppModeLightAlways);
+
     if (PhEnableThemeSupport || PhEnableStreamerMode)
     {
         if (WindowsVersion >= WINDOWS_11)

phlib/include/guisup.h

@@ -241,7 +241,8 @@ typedef enum _PreferredAppMode
 {
     PreferredAppModeDisabled,
     PreferredAppModeDarkOnDark,
-    PreferredAppModeDarkAlways
+    PreferredAppModeDarkAlways,
+    PreferredAppModeLightAlways
 } PreferredAppMode;
 
 PHLIBAPI

phlib/theme.c

@@ -160,21 +160,6 @@ VOID PhInitializeWindowTheme(
     _In_ BOOLEAN EnableThemeSupport
     )
 {
-    if (EnableThemeSupport && WindowsVersion >= WINDOWS_10_RS5)
-    {
-        static PH_INITONCE initOnce = PH_INITONCE_INIT;
-
-        if (PhBeginInitOnce(&initOnce))
-        {
-            PhSetPreferredAppMode(PreferredAppModeDarkAlways);
-
-            //if (FlushMenuThemes_I)
-            //    FlushMenuThemes_I();
-
-            PhEndInitOnce(&initOnce);
-        }
-    }
-
     PhInitializeThemeWindowFrame(WindowHandle);
 
     if (!PhThemeWindowBackgroundBrush)

plugins/ExtendedTools/ExtendedTools.rc

@@ -485,10 +485,11 @@ BEGIN
     CONTROL         "",IDC_LIST,"SysListView32",LVS_REPORT | LVS_SHOWSELALWAYS | LVS_SHAREIMAGELISTS | LVS_ALIGNLEFT | WS_BORDER | WS_TABSTOP,7,7,286,262
     LTEXT           "Total handles found:",IDC_STATIC,10,273,67,8
     LTEXT           "100000",IDC_OBJ_HANDLESTOTAL,78,273,32,8
-    LTEXT           "By address:",IDC_STATIC,137,273,39,8
-    LTEXT           "100000",IDC_OBJ_HANDLESBYOBJECT,177,273,27,8
-    LTEXT           "By name:", IDC_OBJ_HANDLESBYNAME_L,235,273,31,8
-    LTEXT           "100000",IDC_OBJ_HANDLESBYNAME,267,273,27,8
+    LTEXT           "By address:",IDC_STATIC,110,273,39,8
+    LTEXT           "100000",IDC_OBJ_HANDLESBYOBJECT,150,273,27,8
+    LTEXT           "By name:", IDC_OBJ_HANDLESBYNAME_L,182,273,31,8
+    LTEXT           "100000",IDC_OBJ_HANDLESBYNAME,214,273,27,8
+    PUSHBUTTON      "Refresh (F5)",IDC_REFRESH,245,271,48,13
 END
 
 IDD_OBJWINSTA DIALOGEX 0, 0, 260, 200

plugins/ExtendedTools/exttools.h

@@ -1662,7 +1662,8 @@ VOID EtShowObjectManagerDialog(
 NTSTATUS EtDuplicateHandleFromProcessEx(
     _Out_ PHANDLE Handle,
     _In_ ACCESS_MASK DesiredAccess,
-    _In_ HANDLE ProcessId,
+    _In_opt_ HANDLE ProcessId,
+    _In_opt_ HANDLE ProcessHandle,
     _In_ HANDLE SourceHandle
     );