Process Overview

Welcome to the PureBasic process investigation library, that will allow you to investigate the processes running on your computer and the resources; such as DLL libraries that those resources are using such as where they live, the amount of memory they use and what their process id's are.

Furthermore, you will be able to terminate those processes; not just investigate them. It can be a very useful addition to your system toolbox!

PureLibraries used: String, StringExtension, Requester, Library, SimpleList, LibraryExtension

DLLs used: USER32


PBOSL_Process

ExamineDrivers()

Reset the Driverlist

ExamineProcessDLLS()

Examine all DLL's of a process

ExamineProcesses()

take a snapshot and examine processes

GetDriverBase()

gets the adress in Memory where the driver is loaded

GetDriverFileName()

gets the full filename of the driver

GetDriverName()

Gets the name of the driver

GetProcessDLLBase()

get the loaded adress of the dll

GetProcessDLLFileName()

get back the full Filename of the loaded DLL

GetProcessDLLName()

get back the Dll-Name out of the process

GetProcessFileName()

get the full Filename of the process

GetProcessMem()

get the memory is use of the process

GetProcessName()

get the name of the process

GetProcessPageFaultCount()

Get Number of page faults.

GetProcessPagefileUsage()

Get Current space allocated For the pagefile. Those pages may Or may not be in memory.

GetProcessPeakPagefileUsage()

Get Peak space allocated For the pagefile.

GetProcessPeakWorkingSetSize()

Get Peak working set size.

GetProcessPID()

get actual PID

GetProcessPIDfromHWND()

Get a PID from the window handle (hwnd)

GetProcessPrio()

get the priority of the process

GetProcessQuotaNonPagedPoolUsage()

Get Current nonpaged pool usage.

GetProcessQuotaPagedPoolUsage()

Get Current paged pool usage.

GetProcessQuotaPeakNonPagedPoolUsage()

Get Peak nonpaged pool usage.

GetProcessQuotaPeakPagedPoolUsage()

Get Peak paged pool usage.

GetProcessRights()

can we acess this process (0 = Not, 1=yes)

GetProcessWorkingSetSize()

Get Current working set size.

IsPIDAlive()

Works only with PID's that have a hwnd !

KillAllProcess()

exit all processes with Name with Exitcode

KillPID()

exit the process with Exitcode

NextDriver()

examine next driver

NextProcess()

examine next Process

NextProcessDLL()

examine next dll of a process

pPeekB()

get a Byte from the process with Offset

pPeekL()

get a Long from the process with Offset

pPeekS()

get a String from the process with Offset

pPeekW()

get a word from the process with Offset

pPokeB()

Writes a Byte to the process with Offset

pPokeL()

Writes a Long to the process with Offset

pPokeW()

Writes a word to the process with Offset

pReadMemory()

copys Data from the process with Offset to own Process Destinationmemory

pWriteMemory()

copys Data from Sourcememory(own process) to the process with Offset

ReArrangeMem()

Rearrange memory (freez unneeded)

RemovePagefaults()

remove unneded memory from Process

SetProcessPrio()

sets the priority of the process