Windows Process : Tool to see Function and change arguments

Question

Sometime back I used a windows tool to see what a process is doing. This tool allowed me to inspect functions exported from DLL. It also allowed me to change the values passed to a function on the fly.

I cannot recollect the name(not sure if that was free or commercial one). Could any one point to me solution that can do this?

(Tools like ProcessExplorer, ProcessMonitor helps a bit.. this was better)

Cheers, Jayan

Answer 1

Windbg lets you attach to processes and debug them, including set breakpoints, observe the stack and manipulate state.

Answer 2

depends will show you exported symbols (doesn't let you play with arguments though)

Answer 3

Another useful tool is DebugView from SysInternals / Microsoft. Also, Process Monitor is pretty useful for seeing how other APIs work when interacting with them. Additionally, Process Hacker is a great runtime tool for inspecting memory regions, threads, DLL hooks, and so on. You can even modify the bits of memory if you wish, a bit like POKEs on the C64.