I'm currently analyzing a complex software which compiles a kind of code. By monitoring and correlating it with ProcMon I could figure out it loads a DLL as a module.
Now I'm trying to find out how exactly it is compiling the code by using a specific DLL (and which of its function together with its output) so I would like to ask which is the best way to do this.
I have IDA Pro and know it has the capability to debug it together with an exe. The problem is the software consists of multiple subprocesses (or exes) so I don't know which one is using it exactly or how to handle such cases.
Is there any way you can recommend or reference I could start with? I was considering using processhacker together with "ThreadCreate" Operations but don't know if ProcessHacker is the right tool for this as it doesn't record anything and has only a real-time view.